impel-cli 0.18.15-beta.9 → 0.18.15

package/src/apps.js

@@ -37,17 +37,6 @@ const APP_DEFINITIONS = {
     executableNames: ["ChatGPT", "Codex"],
   },
 };
-const BUNDLE_ARTIFACT_REMOVE_OPTIONS = Object.freeze({
-  recursive: true,
-  force: true,
-  maxRetries: 5,
-  retryDelay: 25,
-});
-const BUNDLE_LOCK_WAIT_MS = 120_000;
-const BUNDLE_LOCK_POLL_MS = 100;
-const BUNDLE_LOCK_SLEEP = new Int32Array(new SharedArrayBuffer(4));
-const MACOS_O_EXLOCK = 0x00000020;
-const portableBundleMutationLocks = new Set();
 
 // Vendor updates can change minified renderer contracts without notice. Each
 // CLI release therefore installs and accepts only the exact app builds tested
@@ -92,27 +81,17 @@ export const PINNED_VENDOR_APPS = Object.freeze({
     }),
   }),
   chatgpt: Object.freeze({
-    version: "26.727.40816",
-    codexVersion: "0.146.0-alpha.9.2",
+    version: "26.721.41059",
+    codexVersion: "0.146.0-alpha.3.1",
     bundleName: "ChatGPT.app",
-    windows: Object.freeze({
-      storeProductId: "9PLM9XGG6VKS",
-      packageName: "OpenAI.Codex",
-      packageVersion: "26.721.11231.0",
-      advertisedPackageVersion: "26.727.4816.0",
-      codexVersion: "0.146.0-alpha.3.1",
-      publisherId: "2p2nqsd0c76g0",
-      executable: "app\\ChatGPT.exe",
-      updateManifestUrl: "https://persistent.oaistatic.com/codex-app-prod/windows-store-update.json",
-    }),
     downloads: Object.freeze({
       arm64: Object.freeze({
-        url: "https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.727.40816.zip",
-        sha256: "fdbede9b8a28b5bf3bbf1213fa04291724faa6ed2d1d61bb04853bbdfebce219",
+        url: "https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-arm64-26.721.41059.zip",
+        sha256: "e2b45056f3d1f8ab90f7f16249bfb5a40d09d0f8099f12ca0d8d7a8fdf9108ce",
       }),
       x64: Object.freeze({
-        url: "https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-x64-26.727.40816.zip",
-        sha256: "12622d916a3993d61fb52a318dcff7af7449eea5070cdd7e094da29f380e3374",
+        url: "https://persistent.oaistatic.com/codex-app-prod/ChatGPT-darwin-x64-26.721.41059.zip",
+        sha256: "f00b09d9e1f5138f055fa972e5243991b493423c41f5d78951dc2e21a84089f4",
       }),
     }),
   }),
@@ -257,10 +236,7 @@ export function managedAppIdentity(target, tenantId = null, tenantName = null) {
 // and the tenant manifest so unsupported hosts keep Chat and Code usable.
 // 25: remove the unproven Windows Cowork capability gate from beta.0 profiles
 // and restore the reviewed always-enabled managed policy.
-// 26: remember the managed provider defaults and move legacy GPT-5.5 profiles
-// onto GPT-5.6 Sol so ChatGPT's compact Work picker does not fall back to its
-// unsupported-selection "Reset to default" treatment.
-export const CURRENT_CONFIG_VERSION = 26;
+export const CURRENT_CONFIG_VERSION = 25;
 
 // Identifies the bundle-BUILDING logic — the asar patches, plist rewrites,
 // helper rebranding, and signing. A vendored bundle is rebuilt only when this
@@ -269,7 +245,7 @@ export const CURRENT_CONFIG_VERSION = 26;
 // — which is what made every `impel update` re-trigger macOS permission
 // prompts. Bump this ONLY when a code change alters the bytes of a built
 // bundle; leave it alone for changes that don't touch bundle contents.
-export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-31.2";
+export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-25.1";
 
 /** Parse the tenant's install manifest, or null when absent/corrupt. */
 export function readTenantManifest(homeDir = os.homedir(), tenantId = null) {
@@ -347,7 +323,7 @@ export function bundleIsCurrent(status, {
       compatibility.vendorSignaturesPreserved === true
       && compatibility.resourceRoot === CHATGPT_RESOURCE_ROOT
       && compatibility.patches?.fastModeForGatewayAuth > 0
-      && compatibility.patches?.tenantDisplayNamePreload === 2
+      && compatibility.patches?.tenantDisplayNamePreload === 1
     )),
   );
 }
@@ -703,7 +679,7 @@ export function migrateLegacyClaudeAppSessions(userData, homeDir = os.homedir())
   return copied;
 }
 
-export async function fetchGatewayModels(config, fetchImpl = fetch, { allowEmpty = false } = {}) {
+export async function fetchGatewayModels(config, fetchImpl = fetch) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), 20000);
   try {
@@ -721,9 +697,7 @@ export async function fetchGatewayModels(config, fetchImpl = fetch, { allowEmpty
     }
     if (!Array.isArray(payload?.data)) throw new Error("response has no model data array");
     const models = payload.data.filter(isGatewayModel);
-    if (models.length === 0 && !(allowEmpty && isExplicitNoSeatCatalog(payload))) {
-      throw new Error("gateway returned no supported models");
-    }
+    if (models.length === 0) throw new Error("gateway returned no supported models");
     return { models, source: "gateway", version: payload.version ?? null };
   } finally {
     clearTimeout(timeout);
@@ -759,7 +733,6 @@ export function installManagedAppFiles({
     target,
     vendorPaths[target] || findVendorApp(target, homeDir),
   ]));
-  const previousManifest = readTenantManifest(homeDir, config.tenantId);
   const vendorCodexModels = targets.includes("chatgpt")
     ? readVendorCodexModels(resolvedVendorPaths.chatgpt)
     : new Map();
@@ -810,7 +783,6 @@ export function installManagedAppFiles({
         vendorCodexModels,
         chatgptInvocations,
         generatedAt,
-        previousManifest,
       );
       if (RUNTIME_BRAND.features.sessions) ensureCodexSessionHooks(paths.chatgpt.codexHome, config.tenantId, "codex_desktop");
     }
@@ -822,7 +794,7 @@ export function installManagedAppFiles({
   }
 
   writeAtomic(path.join(paths.tenantRoot, "manifest.json"), JSON.stringify({
-    schemaVersion: 7,
+    schemaVersion: 6,
     configVersion: CURRENT_CONFIG_VERSION,
     modelCatalogVersion: 3,
     gatewayUrl: config.gatewayUrl,
@@ -835,10 +807,6 @@ export function installManagedAppFiles({
       models,
       config,
     ),
-    modelDefaults: {
-      claude: models.find((model) => model.provider === "claude" && model.default)?.id ?? null,
-      chatgpt: models.find((model) => model.provider === "codex" && model.default)?.id ?? null,
-    },
     models: models.map((model) => model.id),
     updatedAt: generatedAt,
   }, null, 2) + "\n", 0o600);
@@ -992,6 +960,7 @@ function installPinnedVendorApp(target, homeDir) {
       homeDir, ".config", RUNTIME_BRAND.cli.configNamespace, "vendor", target, pin.version, pin.bundleName,
     );
     fs.mkdirSync(path.dirname(destination), { recursive: true });
+    sweepStaleBundleArtifacts(path.dirname(destination), path.basename(destination));
     replaceDirectory(destination, extractedApp);
     return destination;
   } finally {
@@ -1172,7 +1141,6 @@ function writeChatGPTConfig(
   vendorCodexModels,
   invocations = null,
   generatedAt = new Date().toISOString(),
-  previousManifest = null,
 ) {
   const experimental = crossAppModelsEnabled(config);
   const orderedModels = experimental
@@ -1188,28 +1156,8 @@ function writeChatGPTConfig(
   const currentToml = fs.existsSync(configPath) ? fs.readFileSync(configPath, "utf8") : "";
   const configuredModel = readTopLevelTomlString(currentToml, "model");
   const defaultModelID = orderedModels.find((model) => model.provider === "codex" && model.default)?.id;
-  const defaultModel = codexModels.find((model) => model.slug === defaultModelID);
-  const previousDefaultModelID = previousManifest?.modelDefaults?.chatgpt;
-  const followsPreviousManagedDefault = (
-    typeof previousDefaultModelID === "string"
-    && configuredModel === previousDefaultModelID
-    && configuredModel !== defaultModelID
-  );
-  // Profiles written before the default-model field existed cannot distinguish
-  // an old managed default from an explicit user choice. GPT-5.5 is the one
-  // observed legacy default that ChatGPT 26.727 renders as an unsupported
-  // compact-picker selection; migrate it once, while preserving every other
-  // explicit model choice.
-  const hasLegacyCompactPickerDefault = (
-    previousDefaultModelID == null
-    && Number(previousManifest?.configVersion ?? 0) < CURRENT_CONFIG_VERSION
-    && configuredModel === "gpt-5.5"
-    && defaultModelID === "gpt-5.6-sol"
-  );
-  const selectedModel = (followsPreviousManagedDefault || hasLegacyCompactPickerDefault
-    ? defaultModel
-    : codexModels.find((model) => model.slug === configuredModel))
-    || defaultModel
+  const selectedModel = codexModels.find((model) => model.slug === configuredModel)
+    || codexModels.find((model) => model.slug === defaultModelID)
     || codexModels[0];
   if (!selectedModel) throw new Error("no Codex models are available for Impel ChatGPT");
   const configuredEffort = readTopLevelTomlString(currentToml, "model_reasoning_effort");
@@ -1569,12 +1517,6 @@ exec "$NODE" "$CLI" token${tenantArgs}
 }
 
 function writeVendoredClaudeBundle(paths, vendorPath, gatewayUrl, safeStorageName) {
-  return withBundleMutationLock(paths.claude.launcher, () => (
-    writeVendoredClaudeBundleLocked(paths, vendorPath, gatewayUrl, safeStorageName)
-  ));
-}
-
-function writeVendoredClaudeBundleLocked(paths, vendorPath, gatewayUrl, safeStorageName) {
   if (!vendorPath) throw new Error("Claude vendor app is unavailable");
   if (!isVendableVendorApp("claude", vendorPath)) {
     const bundleId = readBundleIdentifier(vendorPath);
@@ -1588,8 +1530,9 @@ function writeVendoredClaudeBundleLocked(paths, vendorPath, gatewayUrl, safeStor
   if (!executableName) throw new Error(`Claude executable is missing from ${vendorPath}`);
 
   const bundle = paths.claude.launcher;
+  const staging = `${bundle}.tmp-${process.pid}`;
   sweepStaleBundleArtifacts(path.dirname(bundle), path.basename(bundle));
-  const staging = uniqueBundleArtifactPath(bundle, "tmp");
+  fs.rmSync(staging, { recursive: true, force: true });
   cloneAppBundle(vendorPath, staging);
   try {
     const plistPath = path.join(staging, "Contents", "Info.plist");
@@ -1671,9 +1614,9 @@ function writeVendoredClaudeBundleLocked(paths, vendorPath, gatewayUrl, safeStor
     }, null, 2) + "\n", 0o644);
 
     signVendoredApp(staging, vendorExecutable, "Claude", signingIdentity);
-    replaceDirectoryUnlocked(bundle, staging);
+    replaceDirectory(bundle, staging);
   } catch (error) {
-    removeBundleArtifact(staging);
+    fs.rmSync(staging, { recursive: true, force: true });
     throw error;
   }
 }
@@ -1687,12 +1630,6 @@ function claudeUsageCompatibilityEnabled(gatewayUrl) {
 }
 
 function writeVendoredChatGPTBundle(paths, vendorPath, gatewayUrl, homeDir) {
-  return withBundleMutationLock(paths.chatgpt.launcher, () => (
-    writeVendoredChatGPTBundleLocked(paths, vendorPath, gatewayUrl, homeDir)
-  ));
-}
-
-function writeVendoredChatGPTBundleLocked(paths, vendorPath, gatewayUrl, homeDir) {
   if (!vendorPath) throw new Error("ChatGPT/Codex vendor app is unavailable");
   const definition = APP_DEFINITIONS.chatgpt;
   const executableName = definition.executableNames.find((name) => (
@@ -1701,10 +1638,11 @@ function writeVendoredChatGPTBundleLocked(paths, vendorPath, gatewayUrl, homeDir
   if (!executableName) throw new Error(`ChatGPT/Codex executable is missing from ${vendorPath}`);
 
   const bundle = paths.chatgpt.launcher;
-  sweepStaleBundleArtifacts(path.dirname(bundle), path.basename(bundle));
-  const staging = uniqueBundleArtifactPath(bundle, "tmp");
+  const staging = `${bundle}.tmp-${process.pid}`;
   const vendorBundleName = path.basename(vendorPath);
   const vendorBundle = path.join(staging, "Contents", "Resources", vendorBundleName);
+  sweepStaleBundleArtifacts(path.dirname(bundle), path.basename(bundle));
+  fs.rmSync(staging, { recursive: true, force: true });
   cloneAppBundle(vendorPath, vendorBundle);
   try {
     const asarPath = path.join(vendorBundle, "Contents", "Resources", "app.asar");
@@ -1772,7 +1710,7 @@ function writeVendoredChatGPTBundleLocked(paths, vendorPath, gatewayUrl, homeDir
       patches: {
         fastModeForGatewayAuth: fastModePatchCount,
         desktopAPIForGatewayAuth: 0,
-        tenantDisplayNamePreload: 2,
+        tenantDisplayNamePreload: 1,
       },
       vendorSignaturesPreserved: true,
       resourceRoot: CHATGPT_RESOURCE_ROOT,
@@ -1780,9 +1718,9 @@ function writeVendoredChatGPTBundleLocked(paths, vendorPath, gatewayUrl, homeDir
     }, null, 2) + "\n", 0o644);
 
     signVendoredApp(staging, vendorExecutable, "ChatGPT", signingIdentity);
-    replaceDirectoryUnlocked(bundle, staging);
+    replaceDirectory(bundle, staging);
   } catch (error) {
-    removeBundleArtifact(staging);
+    fs.rmSync(staging, { recursive: true, force: true });
     throw error;
   }
 }
@@ -2275,7 +2213,6 @@ HERE=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
 VENDOR_APP="$HERE/../Resources/"${shellQuote(vendorBundleName)}
 export CODEX_HOME=${shellQuote(paths.chatgpt.codexHome)}
 export CODEX_AUTHAPI_BASE_URL=${shellQuote(codexAccountBaseUrl)}
-export CODEX_SPARKLE_ENABLED=false
 unset CODEX_ACCESS_TOKEN CODEX_API_KEY OPENAI_API_KEY OPENAI_BASE_URL
 secure_codex_home() {
   [ ! -L "$CODEX_HOME" ] || exit 1
@@ -2299,7 +2236,6 @@ secure_codex_home
 BROWSER_DATA=${shellQuote(paths.chatgpt.browserData)}
 mkdir -p "$BROWSER_DATA"
 export IMPEL_APP_DISPLAY_NAME=${shellQuote(paths.chatgpt.displayName)}
-export IMPEL_APP_BUNDLE_ID=${shellQuote(paths.chatgpt.bundleIdentifier)}
 PRELOAD="$HERE/../Resources/impel-chatgpt-preload.cjs"
 export NODE_OPTIONS="--require=\\\"$PRELOAD\\\""
 # Electron resolves resources from the Impel wrapper when the nested app is
@@ -2314,14 +2250,13 @@ function vendoredChatGPTDisplayNamePreload() {
   return `"use strict";
 
 const displayName = process.env.IMPEL_APP_DISPLAY_NAME;
-const bundleIdentifier = process.env.IMPEL_APP_BUNDLE_ID;
-if (process.type === "browser" && displayName && bundleIdentifier) {
+if (process.type === "browser" && displayName) {
   const Module = require("node:module");
   const path = require("node:path");
   const load = Module._load;
   let objc;
   let appKit;
-  let launchServicesIdentified = false;
+  let launchServicesNamed = false;
   let activationPolicyRefreshed = false;
 
   const loadNativeBridge = () => {
@@ -2333,31 +2268,20 @@ if (process.type === "browser" && displayName && bundleIdentifier) {
     return { objc, appKit };
   };
 
-  const setLaunchServicesApplicationIdentity = () => {
-    if (launchServicesIdentified) return;
+  const setLaunchServicesApplicationName = () => {
+    if (launchServicesNamed) return;
     try {
       const native = loadNativeBridge();
       new native.objc.NobjcLibrary(
         "/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices",
       );
       const title = native.appKit.NSString.stringWithUTF8String$(displayName);
-      const identifier = native.appKit.NSString.stringWithUTF8String$(bundleIdentifier);
       const info = native.appKit.NSMutableDictionary.dictionaryWithDictionary$(
         native.appKit.NSBundle.mainBundle().infoDictionary(),
       );
       for (const key of ["CFBundleName", "CFBundleDisplayName"]) {
         info.setObject$forKey$(title, native.appKit.NSString.stringWithUTF8String$(key));
       }
-      // The signed vendor executable runs from the nested ChatGPT.app, so
-      // LaunchServices initially checks it in as com.openai.codex. When the
-      // native app is also open, Dock groups both processes under ChatGPT even
-      // though LSDisplayName was already tenant-branded. Check the process in
-      // again with the unique outer-wrapper identity to keep each tenant's
-      // Dock item distinct while preserving the vendor executable signature.
-      info.setObject$forKey$(
-        identifier,
-        native.appKit.NSString.stringWithUTF8String$("CFBundleIdentifier"),
-      );
       native.objc.callFunction(
         "_LSSetApplicationLaunchServicesServerConnectionStatus",
         { returns: "v", args: ["Q", "@"] },
@@ -2381,7 +2305,7 @@ if (process.type === "browser" && displayName && bundleIdentifier) {
         title,
         null,
       );
-      launchServicesIdentified = status === 0;
+      launchServicesNamed = status === 0;
     } catch {
       // Keep the signed vendor app usable if LaunchServices changes this
       // private-but-established process-title API in a future macOS release.
@@ -2416,7 +2340,7 @@ if (process.type === "browser" && displayName && bundleIdentifier) {
       const setName = loaded.app.setName.bind(loaded.app);
       setName(displayName);
       loaded.app.setName = () => setName(displayName);
-      setLaunchServicesApplicationIdentity();
+      setLaunchServicesApplicationName();
       setNativeApplicationMenuTitle();
       const setApplicationMenu = loaded.Menu.setApplicationMenu.bind(loaded.Menu);
       loaded.Menu.setApplicationMenu = (menu) => {
@@ -2427,11 +2351,11 @@ if (process.type === "browser" && displayName && bundleIdentifier) {
           loaded.app.setActivationPolicy("accessory");
           setTimeout(() => {
             loaded.app.setActivationPolicy("regular");
-            launchServicesIdentified = false;
-            setLaunchServicesApplicationIdentity();
+            launchServicesNamed = false;
+            setLaunchServicesApplicationName();
             setApplicationMenu(menu);
             setNativeApplicationMenuTitle();
-          }, 100);
+          }, 0);
         }
         setTimeout(setNativeApplicationMenuTitle, 0);
         return result;
@@ -2599,122 +2523,30 @@ export function sweepStaleBundleArtifacts(dir, baseName) {
     throw error;
   }
   const prefixes = [`${baseName}.tmp-`, `${baseName}.previous-`];
-  const removed = [];
-  for (const entry of entries.filter((candidate) => prefixes.some((prefix) => candidate.startsWith(prefix)))) {
-    if (removeBundleArtifact(path.join(dir, entry))) removed.push(entry);
+  const removed = entries.filter((entry) => prefixes.some((prefix) => entry.startsWith(prefix)));
+  for (const entry of removed) {
+    fs.rmSync(path.join(dir, entry), { recursive: true, force: true });
   }
   return removed;
 }
 
-function uniqueBundleArtifactPath(destination, kind) {
-  return `${destination}.${kind}-${process.pid}-${crypto.randomBytes(6).toString("hex")}`;
-}
-
-function removeBundleArtifact(candidate) {
-  try {
-    fs.rmSync(candidate, BUNDLE_ARTIFACT_REMOVE_OPTIONS);
-    return !fs.existsSync(candidate);
-  } catch {
-    return false;
-  }
-}
-
-export function withBundleMutationLock(destination, run) {
-  const lockPath = path.join(
-    path.dirname(destination),
-    `.${path.basename(destination)}.impel-install.lock`,
-  );
-  fs.mkdirSync(path.dirname(lockPath), { recursive: true });
-
-  if (process.platform !== "darwin") {
-    if (portableBundleMutationLocks.has(lockPath)) {
-      throw new Error(`another Impel app update is already replacing ${path.basename(destination)}`);
-    }
-    const descriptor = fs.openSync(lockPath, fs.constants.O_CREAT | fs.constants.O_RDWR, 0o600);
-    portableBundleMutationLocks.add(lockPath);
-    try {
-      return run();
-    } finally {
-      portableBundleMutationLocks.delete(lockPath);
-      fs.closeSync(descriptor);
-    }
-  }
-
-  const deadline = Date.now() + BUNDLE_LOCK_WAIT_MS;
-  let descriptor;
-  while (descriptor === undefined) {
-    try {
-      descriptor = fs.openSync(
-        lockPath,
-        fs.constants.O_CREAT | fs.constants.O_RDWR | fs.constants.O_NONBLOCK | MACOS_O_EXLOCK,
-        0o600,
-      );
-    } catch (error) {
-      if (!["EAGAIN", "EWOULDBLOCK"].includes(error?.code)) throw error;
-      if (Date.now() >= deadline) {
-        throw new Error(`timed out waiting for another Impel app update to replace ${path.basename(destination)}`);
-      }
-      Atomics.wait(BUNDLE_LOCK_SLEEP, 0, 0, BUNDLE_LOCK_POLL_MS);
-    }
-  }
-  try {
-    return run();
-  } finally {
-    fs.closeSync(descriptor);
-  }
-}
-
-function replaceDirectoryUnlocked(destination, staging, {
-  removeArtifact = removeBundleArtifact,
-} = {}) {
-  const backup = fs.existsSync(destination)
-    ? uniqueBundleArtifactPath(destination, "previous")
-    : null;
-  if (backup) fs.renameSync(destination, backup);
+function replaceDirectory(destination, staging) {
+  const backup = `${destination}.previous-${process.pid}`;
+  fs.rmSync(backup, { recursive: true, force: true });
+  if (fs.existsSync(destination)) fs.renameSync(destination, backup);
   try {
     fs.renameSync(staging, destination);
+    fs.rmSync(backup, { recursive: true, force: true });
   } catch (error) {
-    if (backup && !fs.existsSync(destination) && fs.existsSync(backup)) {
-      fs.renameSync(backup, destination);
-    }
+    if (!fs.existsSync(destination) && fs.existsSync(backup)) fs.renameSync(backup, destination);
     throw error;
   }
-
-  // The new bundle is committed once staging has been renamed into place.
-  // Finder, LaunchServices, or a just-closed helper can briefly keep changing
-  // the old tree and make recursive removal end with ENOTEMPTY. Do not turn
-  // that post-commit housekeeping race into a failed tenant update: the next
-  // sweep will retry any backup that remains.
-  if (backup) {
-    try {
-      removeArtifact(backup);
-    } catch {
-      // Cleanup is best-effort after the committed rename.
-    }
-  }
-}
-
-export function replaceDirectory(destination, staging, options = {}) {
-  return withBundleMutationLock(destination, () => (
-    replaceDirectoryUnlocked(destination, staging, options)
-  ));
 }
 
 function isGatewayModel(model) {
   return model && typeof model.id === "string" && (model.provider === "claude" || model.provider === "codex");
 }
 
-function isExplicitNoSeatCatalog(payload) {
-  const statuses = payload?.provider_status;
-  return Boolean(statuses
-    && typeof statuses === "object"
-    && !Array.isArray(statuses)
-    && ["claude", "codex"].every((provider) => (
-      statuses[provider]?.state === "no_seat"
-      && statuses[provider]?.routable === false
-    )));
-}
-
 function writeAtomic(target, contents, mode) {
   fs.mkdirSync(path.dirname(target), { recursive: true, mode: 0o700 });
   if (fs.existsSync(target) && fs.readFileSync(target, "utf8") === contents) {

package/src/commands/apps.js

@@ -76,7 +76,7 @@ export function selectCatalogAppTargets(
   requestedTargets,
   models,
   config,
-  { log = console.log, allowNone = false } = {},
+  { log = console.log } = {},
 ) {
   const supported = appTargetsSupportedByModels(
     requestedTargets,
@@ -87,14 +87,6 @@ export function selectCatalogAppTargets(
   const unavailable = requestedTargets.filter((target) => !supportedSet.has(target));
   if (unavailable.length === 0) return supported;
 
-  if (allowNone && supported.length === 0) {
-    for (const target of unavailable) {
-      const capability = APP_CAPABILITIES[target];
-      log(`Skipping ${capability.label}: the selected tenant has no ${capability.provider} models.`);
-    }
-    return supported;
-  }
-
   if (requestedTargets.length === 1 || supported.length === 0) {
     const target = unavailable[0];
     const capability = APP_CAPABILITIES[target];
@@ -305,9 +297,9 @@ export function openManagedLauncher(launcher, {
   return false;
 }
 
-async function fetchWindowsCatalog(config, io, { allowEmpty = false } = {}) {
+async function fetchWindowsCatalog(config, io) {
   try {
-    return await io.fetchModels(config, undefined, { allowEmpty });
+    return await io.fetchModels(config);
   } catch (error) {
     throw new Error(`tenant model catalog is unavailable (${redactSecretText(error.message)}); the Impel app profiles were not changed`);
   }
@@ -382,25 +374,12 @@ export async function reconcileWindowsTenantApps({
     ...overrides,
   };
   const config = explicitTenantAppConfig(baseConfig, tenant, targets);
-  const catalog = await fetchWindowsCatalog(config, io, { allowEmpty: true });
-  const actionTargets = selectCatalogAppTargets(targets, catalog.models, config, {
-    log: io.log,
-    allowNone: true,
-  });
+  const catalog = await fetchWindowsCatalog(config, io);
+  const actionTargets = selectCatalogAppTargets(targets, catalog.models, config, { log: io.log });
   const supported = new Set(actionTargets);
   const unsupported = targets.filter((target) => !supported.has(target));
   const userData = io.claudeUserData(environment, config.tenantId);
   const paths = appPaths(homeDir, config.tenantId, { claudeUserData: userData, tenantName: config.tenantName });
-  if (actionTargets.length === 0) {
-    return {
-      tenantId: config.tenantId,
-      targets: [],
-      unsupported,
-      paths,
-      verification: {},
-      failed: [],
-    };
-  }
   const vendorPaths = {};
   const preparedTargets = new Set(skipVendor ? actionTargets : skipVendorTargets);
 
@@ -522,28 +501,13 @@ export async function reconcileMacTenantApps({
   const config = explicitTenantAppConfig(baseConfig, tenant, targets);
   let catalog;
   try {
-    catalog = await io.fetchModels(config, undefined, { allowEmpty: true });
+    catalog = await io.fetchModels(config);
   } catch (error) {
     throw new Error(`tenant model catalog is unavailable (${redactSecretText(error?.message || error)}); no Impel app files were changed`);
   }
-  const actionTargets = selectCatalogAppTargets(targets, catalog.models, config, {
-    log: io.log,
-    allowNone: true,
-  });
+  const actionTargets = selectCatalogAppTargets(targets, catalog.models, config, { log: io.log });
   const supported = new Set(actionTargets);
   const unsupported = targets.filter((target) => !supported.has(target));
-  const paths = appPaths(homeDir, config.tenantId, { tenantName: config.tenantName });
-  if (actionTargets.length === 0) {
-    return {
-      tenantId: config.tenantId,
-      targets: [],
-      unsupported,
-      paths,
-      verification: {},
-      installed: [],
-      failed: [],
-    };
-  }
   const vendorPaths = {};
   const statuses = io.status(actionTargets, homeDir, config.tenantId, config.tenantName);
   for (const status of statuses) vendorPaths[status.target] ||= status.vendorPath;
@@ -585,6 +549,7 @@ export async function reconcileMacTenantApps({
     vendorPaths,
     writeBundles: staleTargets,
   }) : [];
+  const paths = appPaths(homeDir, config.tenantId, { tenantName: config.tenantName });
   const agentItems = [];
   for (const item of installed) {
     const { client, env, label } = appSkillTarget(item.target, paths);

package/src/commands/converge.js

@@ -13,8 +13,6 @@ import { promptText } from "../prompt.js";
 import { describeCliFailure, preparePlatformClis } from "../platformSetup.js";
 import { restoreNativeProfiles } from "./use.js";
 
-const RETRYABLE_TENANT_DISCOVERY_ERROR = /could not reach|request timed out|fetch failed|ECONNRESET|ECONNABORTED|ETIMEDOUT|EAI_AGAIN|ENETUNREACH|network error|socket/iu;
-
 function confirmed(answer) {
   return /^(?:y|yes)$/iu.test(String(answer || "").trim());
 }
@@ -46,7 +44,6 @@ export async function cmdConverge(argv = [], overrides = {}) {
     platform: process.platform,
     environment: process.env,
     preparePlatformClis,
-    discoveryLogger: console,
     ...overrides,
   };
   if (overrides.prepareWindowsClis && !overrides.preparePlatformClis) {
@@ -61,22 +58,10 @@ export async function cmdConverge(argv = [], overrides = {}) {
   let listing;
   try {
     listing = await io.fetchTenants(config);
-    // Tenant discovery is the entry gate for the whole convergence. A single
-    // transient timeout should not force a human to rerun every update step.
   } catch (error) {
-    if (!RETRYABLE_TENANT_DISCOVERY_ERROR.test(String(error?.message || error))) {
-      console.error(`impel update: tenant discovery failed (${redactSecretText(error?.message || error)})`);
-      process.exitCode = 1;
-      return false;
-    }
-    io.discoveryLogger.log("Tenants: discovery request failed transiently; retrying once…");
-    try {
-      listing = await io.fetchTenants(config);
-    } catch (retryError) {
-      console.error(`impel update: tenant discovery failed (${redactSecretText(retryError?.message || retryError)})`);
-      process.exitCode = 1;
-      return false;
-    }
+    console.error(`impel update: tenant discovery failed (${redactSecretText(error?.message || error)})`);
+    process.exitCode = 1;
+    return false;
   }
   const selected = selectDefaultTenant(listing, { currentTenantId: config.tenantId });
   config.tenantId = selected.id;

package/src/commands/experimental.js

@@ -1,6 +1,5 @@
 import { crossAppModelsEnabled, loadConfig, saveConfig } from "../config.js";
 import { assertProviderScopes, ensureTenantSelection } from "../tenants.js";
-import { cmdCursorExperimental, CURSOR_EXPERIMENT_HELP } from "./cursorExperimental.js";
 
 const HELP = `impel experimental cross-app-models enable|disable|status
 
@@ -11,9 +10,7 @@ It does not modify native profiles or support the consumer ChatGPT app
 (com.openai.chat).
 
 Run \`impel app refresh all\` to refresh desktop configs. Reopen an Impel app
-or isolated CLI to apply the experiment.
-
-${CURSOR_EXPERIMENT_HELP}`;
+or isolated CLI to apply the experiment.`;
 
 export async function cmdExperimental(argv, dependencies = {}) {
   const read = dependencies.loadConfig || loadConfig;
@@ -26,11 +23,8 @@ export async function cmdExperimental(argv, dependencies = {}) {
     log(HELP);
     return;
   }
-  if (experiment === "cursor") {
-    return cmdCursorExperimental([action, ...extra], dependencies);
-  }
   if (experiment !== "cross-app-models" || !["enable", "disable", "status"].includes(action) || extra.length > 0) {
-    throw new Error("usage: impel experimental cross-app-models enable|disable|status | impel experimental cursor prepare|open|status");
+    throw new Error("usage: impel experimental cross-app-models enable|disable|status");
   }
 
   const config = read();