impel-cli 0.18.4 → 0.18.5

package/README.md

@@ -309,9 +309,18 @@ normal help.
 
 ## Library export
 
-The package continues to expose `impel-cli/gateway` for approved branded
-vendor integrations. Its CLI allowlist is deliberately narrow and does not
-expose control-plane administration commands.
+The package continues to expose `impel-cli/gateway` for approved legacy
+gateway-only integrations. Its CLI allowlist is deliberately narrow and does
+not expose control-plane administration commands.
+
+`impel-cli/extension` is the canonical full-implementation extension API for
+reviewed first-party brands. The adapter supplies a validated declarative
+brand before import and receives an explicit command allowlist over the same
+setup, PAT, managed-app, and Claude/Codex implementations used by `impel`.
+Brand-specific config directories, credential prefixes, provider identifiers,
+app identities, environment variables, and control-plane origins remain
+isolated. Optional Sessions, MCP, skills, agents, and agent PATs are fail-closed
+feature flags; an extension cannot add an upstream command family.
 
 ## Development
 

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "impel-cli",
-  "version": "0.18.4",
+  "version": "0.18.5",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {
     "impel": "bin/impel.js"
   },
   "exports": {
-    "./gateway": "./src/gateway/index.js"
+    "./gateway": "./src/gateway/index.js",
+    "./extension": "./src/extension/index.js"
   },
   "files": [
     "bin",

package/src/apps.js

@@ -10,28 +10,29 @@ import {
   secureManagedCodexHome,
 } from "./codexSecurity.js";
 import { normalizeTenantId } from "./tenants.js";
-import { impelCliInvocation } from "./selfInvocation.js";
+import { IMPEL_CLI_ENTRYPOINT, impelCliInvocation } from "./selfInvocation.js";
 import { crossAppModelsEnabled, redactSecretText } from "./config.js";
 import { ensureClaudeSessionHooks, ensureCodexSessionHooks } from "./sessionHooks.js";
 import { ADHOC_IDENTITY, codesignIdentityArgs, desiredSigningMode, resolveSigningIdentity } from "./codesign.js";
 import { applyImpelClaudeSandbox } from "./claudeSandbox.js";
+import { brandedEnvironmentName, RUNTIME_BRAND } from "./runtimeBrand.js";
 
 export const CLAUDE_CONFIG_ID = "1ced0000-0000-4000-8000-000000000001";
-const CHATGPT_CONFIG_START = "# >>> impel app managed gateway >>>";
-const CHATGPT_CONFIG_END = "# <<< impel app managed gateway <<<";
+const CHATGPT_CONFIG_START = `# >>> ${RUNTIME_BRAND.cli.command} app managed gateway >>>`;
+const CHATGPT_CONFIG_END = `# <<< ${RUNTIME_BRAND.cli.command} app managed gateway <<<`;
 const CLI_VERSION = JSON.parse(
   fs.readFileSync(fileURLToPath(new URL("../package.json", import.meta.url)), "utf8"),
 ).version;
 const APP_DEFINITIONS = {
   claude: {
-    label: "Impel Claude",
-    bundleIdentifier: "com.useimpel.claude",
+    label: `${RUNTIME_BRAND.apps.displayPrefix} Claude`,
+    bundleIdentifier: `${RUNTIME_BRAND.apps.bundleIdentifierPrefix}.claude`,
     names: ["Claude.app"],
     executableNames: ["Claude"],
   },
   chatgpt: {
-    label: "Impel ChatGPT",
-    bundleIdentifier: "com.useimpel.chatgpt",
+    label: `${RUNTIME_BRAND.apps.displayPrefix} ChatGPT`,
+    bundleIdentifier: `${RUNTIME_BRAND.apps.bundleIdentifierPrefix}.chatgpt`,
     names: ["ChatGPT.app", "Codex.app"],
     executableNames: ["ChatGPT", "Codex"],
   },
@@ -145,14 +146,15 @@ export function claudeAppNameKeepsDesktopMode(appName) {
 /** Tenant-scoped Safe Storage / app name that still ends in "Claude". */
 function impelClaudeSafeStorageName(tenantId) {
   return tenantId
-    ? `Impel [${normalizeTenantId(tenantId)}] Claude`
-    : "Impel Claude";
+    ? `${RUNTIME_BRAND.apps.displayPrefix} [${normalizeTenantId(tenantId)}] Claude`
+    : `${RUNTIME_BRAND.apps.displayPrefix} Claude`;
 }
 
 // The pre-0.17.9 format put the tenant AFTER "Claude" ("Impel Claude [tenant]"),
 // which breaks the desktop-mode UA match. Recognize exactly the names this CLI
 // used to write so we can heal them without touching an unrelated custom name.
-const LEGACY_TRAPPED_CLAUDE_NAME = /^Impel Claude( \[[^\]]+\])?$/u;
+const escapedDisplayPrefix = RUNTIME_BRAND.apps.displayPrefix.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+const LEGACY_TRAPPED_CLAUDE_NAME = new RegExp(`^${escapedDisplayPrefix} Claude( \\[[^\\]]+\\])?$`, "u");
 
 export const FALLBACK_MODELS = [
   { id: "claude-opus-4-8", provider: "claude", display_name: "Claude Opus 4.8", family: "opus", family_default: true, default: true, context_window: 200000 },
@@ -502,7 +504,8 @@ export function appPaths(homeDir = os.homedir(), tenantId = null, {
   claudeUserData = null,
   tenantName = null,
 } = {}) {
-  const root = process.env.IMPEL_APP_HOME || path.join(homeDir, ".config", "impel", "apps");
+  const root = process.env[brandedEnvironmentName("APP_HOME")]
+    || path.join(homeDir, ".config", RUNTIME_BRAND.cli.configNamespace, "apps");
   const tenantRoot = tenantId
     ? path.join(root, "tenants", normalizeTenantId(tenantId))
     : root;
@@ -765,7 +768,7 @@ export function installManagedAppFiles({
       writeClaudeNative3PSelection(paths);
       writeClaudeCodeSettings(paths);
       writeClaudeConfig(paths, config, models);
-      ensureClaudeSessionHooks(paths.claude.userData, config.tenantId, "claude_desktop");
+      if (RUNTIME_BRAND.features.sessions) ensureClaudeSessionHooks(paths.claude.userData, config.tenantId, "claude_desktop");
     }
     else {
       writeChatGPTConfig(
@@ -776,7 +779,7 @@ export function installManagedAppFiles({
         chatgptInvocations,
         generatedAt,
       );
-      ensureCodexSessionHooks(paths.chatgpt.codexHome, config.tenantId, "codex_desktop");
+      if (RUNTIME_BRAND.features.sessions) ensureCodexSessionHooks(paths.chatgpt.codexHome, config.tenantId, "codex_desktop");
     }
     installed.push({
       target,
@@ -808,7 +811,7 @@ export function installManagedAppFiles({
 function vendorSearchRoots(homeDir, target) {
   const roots = ["/Applications", path.join(homeDir, "Applications")];
   const pin = PINNED_VENDOR_APPS[target];
-  if (pin) roots.push(path.join(homeDir, ".config", "impel", "vendor", target, pin.version));
+  if (pin) roots.push(path.join(homeDir, ".config", RUNTIME_BRAND.cli.configNamespace, "vendor", target, pin.version));
   return roots;
 }
 
@@ -938,7 +941,7 @@ function installPinnedVendorApp(target, homeDir) {
     }
 
     const destination = path.join(
-      homeDir, ".config", "impel", "vendor", target, pin.version, pin.bundleName,
+      homeDir, ".config", RUNTIME_BRAND.cli.configNamespace, "vendor", target, pin.version, pin.bundleName,
     );
     fs.mkdirSync(path.dirname(destination), { recursive: true });
     sweepStaleBundleArtifacts(path.dirname(destination), path.basename(destination));
@@ -1054,7 +1057,7 @@ function writeClaudeConfig(paths, config, models) {
   writeAtomic(path.join(dir, `${CLAUDE_CONFIG_ID}.json`), JSON.stringify(body, null, 2) + "\n", 0o600);
   writeAtomic(path.join(dir, "_meta.json"), JSON.stringify({
     appliedId: CLAUDE_CONFIG_ID,
-    entries: [{ id: CLAUDE_CONFIG_ID, name: "Impel Gateway" }],
+    entries: [{ id: CLAUDE_CONFIG_ID, name: `${RUNTIME_BRAND.product.displayName} Gateway` }],
   }, null, 2) + "\n", 0o600);
 }
 
@@ -1139,7 +1142,7 @@ function writeChatGPTConfig(
     : (configuredTier === "fast" && supportedTiers.includes("priority") ? "priority" : null);
   const catalog = {
     fetched_at: generatedAt,
-    client_version: "impel-managed-2",
+    client_version: `${RUNTIME_BRAND.cli.command}-managed-2`,
     models: codexModels,
   };
   writeAtomic(paths.chatgpt.catalog, JSON.stringify(catalog, null, 2) + "\n", 0o600);
@@ -1160,10 +1163,12 @@ function writeChatGPTConfig(
 
   const managedToml = [
     CHATGPT_CONFIG_START,
-    "# Managed by `impel app update`. This profile is isolated from ~/.codex.",
-    "# Impel session-hook trust is pinned separately by exact handler hash.",
+    `# Managed by \`${RUNTIME_BRAND.cli.command} app update\`. This profile is isolated from ~/.codex.`,
+    ...(RUNTIME_BRAND.features.sessions
+      ? [`# ${RUNTIME_BRAND.product.displayName} session-hook trust is pinned separately by exact handler hash.`]
+      : []),
     `model = ${tomlString(selectedModel.slug)}`,
-    'model_provider = "impel"',
+    `model_provider = ${tomlString(RUNTIME_BRAND.cli.providerId)}`,
     `chatgpt_base_url = ${tomlString(`${config.gatewayUrl}/chatgpt_passthrough/backend-api`)}`,
     `model_catalog_json = ${tomlString(paths.chatgpt.catalog)}`,
     ...(selectedEffort ? [`model_reasoning_effort = ${tomlString(selectedEffort)}`] : []),
@@ -1172,8 +1177,8 @@ function writeChatGPTConfig(
     // The built-in ChatGPT provider derives its inference endpoint from
     // chatgpt.com even when chatgpt_base_url points at the gateway. Keep the
     // native account client for status/usage, but route inference explicitly.
-    "[model_providers.impel]",
-    'name = "Impel Gateway"',
+    `[model_providers.${RUNTIME_BRAND.cli.providerId}]`,
+    `name = ${tomlString(`${RUNTIME_BRAND.product.displayName} Gateway`)}`,
     `base_url = ${tomlString(experimental
       ? `${config.gatewayUrl}/experimental/openai/v1`
       : `${config.gatewayUrl}/chatgpt_passthrough/backend-api/codex`)}`,
@@ -1183,7 +1188,7 @@ function writeChatGPTConfig(
     "stream_max_retries = 2",
     "stream_idle_timeout_ms = 600000",
     "",
-    "[model_providers.impel.auth]",
+    `[model_providers.${RUNTIME_BRAND.cli.providerId}.auth]`,
     `command = ${tomlString(auth.command)}`,
     ...(Array.isArray(auth.args)
       ? [`args = [${auth.args.map((argument) => tomlString(argument)).join(", ")}]`]
@@ -1191,9 +1196,11 @@ function writeChatGPTConfig(
     "timeout_ms = 5000",
     "refresh_interval_ms = 300000",
     "",
-    "[mcp_servers.impel]",
-    `command = ${tomlString(mcp.command)}`,
-    `args = [${mcp.args.map((argument) => tomlString(argument)).join(", ")}]`,
+    ...(RUNTIME_BRAND.features.mcp ? [
+      `[mcp_servers.${RUNTIME_BRAND.cli.providerId}]`,
+      `command = ${tomlString(mcp.command)}`,
+      `args = [${mcp.args.map((argument) => tomlString(argument)).join(", ")}]`,
+    ] : []),
     CHATGPT_CONFIG_END,
   ].join("\n");
   const mergedToml = mergeManagedChatGPTToml(currentToml, managedToml);
@@ -1399,7 +1406,7 @@ export function managedChatGPTConfigDrifted(paths) {
     return false; // No managed profile; install/update owns creating one.
   }
   return !current.includes(CHATGPT_CONFIG_START)
-    || readTopLevelTomlString(current, "model_provider") !== "impel"
+    || readTopLevelTomlString(current, "model_provider") !== RUNTIME_BRAND.cli.providerId
     || !readTopLevelTomlString(current, "chatgpt_base_url");
 }
 
@@ -1427,7 +1434,7 @@ export function rewriteTenantTokenHelper(tenantId, homeDir = os.homedir()) {
 }
 
 function writeTokenHelper(target, tenantId) {
-  const cliPath = fileURLToPath(new URL("../bin/impel.js", import.meta.url));
+  const cliPath = IMPEL_CLI_ENTRYPOINT;
   const node = shellQuote(process.execPath);
   const cli = shellQuote(cliPath);
   const tenantArgs = tenantId ? ` --tenant ${shellQuote(tenantId)}` : "";
@@ -1444,7 +1451,7 @@ function writeTokenHelper(target, tenantId) {
   // prefer the global npm install next to whichever node is found so the
   // refresh keeps rewriting this helper with current paths.
   const script = `#!/bin/sh
-# Managed by impel-cli; regenerated by \`impel app refresh\`.
+# Managed by ${RUNTIME_BRAND.cli.command}-cli; regenerated by \`${RUNTIME_BRAND.cli.command} app refresh\`.
 NODE=${node}
 CLI=${cli}
 if ! [ -x "$NODE" ]; then
@@ -1456,17 +1463,17 @@ if ! [ -x "$NODE" ]; then
   done
 fi
 if ! [ -x "$NODE" ]; then
-  echo 'impel token helper: no usable node runtime found; re-run \`impel setup\`' >&2
+  echo '${RUNTIME_BRAND.cli.command} token helper: no usable node runtime found; re-run \`${RUNTIME_BRAND.cli.command} setup\`' >&2
   exit 1
 fi
 if ! [ -f "$CLI" ]; then
-  CLI="$(dirname "$NODE")/../lib/node_modules/impel-cli/bin/impel.js"
+  CLI="$(dirname "$NODE")/../lib/node_modules/${RUNTIME_BRAND.cli.packageName}/bin/${RUNTIME_BRAND.cli.command}.js"
 fi
 if ! [ -f "$CLI" ]; then
-  CLI="$(command -v impel 2>/dev/null || true)"
+  CLI="$(command -v ${RUNTIME_BRAND.cli.command} 2>/dev/null || true)"
 fi
 if [ -z "$CLI" ] || ! [ -f "$CLI" ]; then
-  echo 'impel token helper: impel-cli not found; re-run \`impel setup\`' >&2
+  echo '${RUNTIME_BRAND.cli.command} token helper: ${RUNTIME_BRAND.cli.packageName} not found; re-run \`${RUNTIME_BRAND.cli.command} setup\`' >&2
   exit 1
 fi
 ("$NODE" "$CLI" app refresh --stale-only${tenantArgs} </dev/null >/dev/null 2>&1 &)
@@ -2149,7 +2156,7 @@ export function ensureChatGPTLaunchHost({
 }
 
 export function chatGPTLaunchHostCacheDir(homeDir = os.homedir()) {
-  return path.join(homeDir, ".config", "impel", "cache", "chatgpt-launch-host");
+  return path.join(homeDir, ".config", RUNTIME_BRAND.cli.configNamespace, "cache", "chatgpt-launch-host");
 }
 
 function vendoredChatGPTWrapperPlist(vendorPath, asarHash, identity, executableName = "launch") {
@@ -2407,7 +2414,7 @@ function signVendoredClaudeCapabilities(bundle, identity = ADHOC_IDENTITY) {
     const helpers = fs.readdirSync(frameworks, { withFileTypes: true })
       .filter((entry) => (
         entry.isDirectory()
-        && entry.name.startsWith("Impel Claude")
+        && entry.name.startsWith(`${RUNTIME_BRAND.apps.displayPrefix} Claude`)
         && entry.name.includes(" Helper")
         && entry.name.endsWith(".app")
       ));

package/src/cliProfiles.js

@@ -14,6 +14,7 @@ import { impelCliInvocation, impelMcpInvocation } from "./selfInvocation.js";
 import { applyImpelClaudeSandbox } from "./claudeSandbox.js";
 import { renameWithWindowsRetry } from "./windowsFs.js";
 import { ensureClaudeSessionHooks, ensureCodexSessionHooks } from "./sessionHooks.js";
+import { RUNTIME_BRAND } from "./runtimeBrand.js";
 
 export const IMPEL_CLI_PROFILES_DIR = path.join(CONFIG_DIR, "cli");
 
@@ -26,8 +27,8 @@ export function tenantCliProfilePaths(tenantId) {
   };
 }
 
-const CODEX_START_MARK = "# >>> impel-cli isolated profile block >>>";
-const CODEX_END_MARK = "# <<< impel-cli isolated profile block <<<";
+const CODEX_START_MARK = `# >>> ${RUNTIME_BRAND.cli.managedMarker} isolated profile block >>>`;
+const CODEX_END_MARK = `# <<< ${RUNTIME_BRAND.cli.managedMarker} isolated profile block <<<`;
 const CODEX_PROVIDER_LINE_RE = /^model_provider[ \t]*=[ \t]*"([^"]*)"[ \t]*$/m;
 const IMPEL_SPECIALIST_CODEX_APPROVAL_TOOLS = [
   "impel_specialists-list_specialist_runs",
@@ -95,7 +96,7 @@ export function ensureImpelClaudeProfile(gatewayUrl, tenantId, { crossAppModels
   // The isolated launcher supplies the Impel PAT only to the child process.
   // Remove older launcher-generated helpers so Claude does not validate the
   // bearer token as an Anthropic-shaped API key before sending it upstream.
-  if (settings.apiKeyHelper === "impel token") delete settings.apiKeyHelper;
+  if (settings.apiKeyHelper === `${RUNTIME_BRAND.cli.command} token`) delete settings.apiKeyHelper;
   if (typeof settings.model !== "string" || !settings.model.trim()) {
     settings.model = IMPEL_DEFAULT_CLAUDE_MODEL;
   }
@@ -122,18 +123,20 @@ export function ensureImpelClaudeProfile(gatewayUrl, tenantId, { crossAppModels
   }
   settings.env = managedEnvironment;
   applyImpelClaudeSandbox(settings);
-  userConfig.mcpServers = {
-    ...(userConfig.mcpServers &&
-    typeof userConfig.mcpServers === "object" &&
-    !Array.isArray(userConfig.mcpServers)
-      ? userConfig.mcpServers
-      : {}),
-    impel: impelMcpInvocation(["--tenant", tenantId]),
-  };
+  if (RUNTIME_BRAND.features.mcp) {
+    userConfig.mcpServers = {
+      ...(userConfig.mcpServers &&
+      typeof userConfig.mcpServers === "object" &&
+      !Array.isArray(userConfig.mcpServers)
+        ? userConfig.mcpServers
+        : {}),
+      [RUNTIME_BRAND.cli.providerId]: impelMcpInvocation(["--tenant", tenantId]),
+    };
+  }
 
   writePrivateFile(settingsPath, `${JSON.stringify(settings, null, 2)}\n`);
   writePrivateFile(userConfigPath, `${JSON.stringify(userConfig, null, 2)}\n`);
-  ensureClaudeSessionHooks(configDir, tenantId, "claude_cli");
+  if (RUNTIME_BRAND.features.sessions) ensureClaudeSessionHooks(configDir, tenantId, "claude_cli");
 
   return { configDir, settingsPath, userConfigPath };
 }
@@ -144,7 +147,7 @@ function stripCodexManagedBlock(text, configPath) {
   const end = text.indexOf(CODEX_END_MARK, start);
   if (end === -1) {
     throw new Error(
-      `${configPath} has an incomplete Impel profile block. Fix or remove it, then re-run.`
+      `${configPath} has an incomplete ${RUNTIME_BRAND.product.displayName} profile block. Fix or remove it, then re-run.`
     );
   }
   return text.slice(0, start) + text.slice(end + CODEX_END_MARK.length);
@@ -158,32 +161,31 @@ function splitTomlPreamble(text) {
 
 function codexManagedBlock(gatewayUrl, tenantId) {
   const auth = impelCliInvocation(["token", "--tenant", tenantId]);
-  const mcp = impelCliInvocation(["mcp", "--tenant", tenantId]);
+  const providerId = RUNTIME_BRAND.cli.providerId;
   const lines = [
     CODEX_START_MARK,
-    "# Generated for `impel codex`. Other profile settings outside this block are preserved.",
-    "[model_providers.impel]",
-    'name = "Impel Gateway"',
+    `# Generated for \`${RUNTIME_BRAND.cli.command} codex\`. Other profile settings outside this block are preserved.`,
+    `[model_providers.${providerId}]`,
+    `name = ${JSON.stringify(`${RUNTIME_BRAND.product.displayName} Gateway`)}`,
     `base_url = ${JSON.stringify(impelCodexBaseUrl(gatewayUrl))}`,
     'wire_api = "responses"',
     "",
-    "[model_providers.impel.auth]",
+    `[model_providers.${providerId}.auth]`,
     `command = ${JSON.stringify(auth.command)}`,
     `args = [${auth.args.map((argument) => JSON.stringify(argument)).join(", ")}]`,
     "timeout_ms = 5000",
     "refresh_interval_ms = 300000",
-    "",
-    "[mcp_servers.impel]",
-    `command = ${JSON.stringify(mcp.command)}`,
-    `args = [${mcp.args.map((argument) => JSON.stringify(argument)).join(", ")}]`,
-    "",
   ];
-  for (const tool of IMPEL_SPECIALIST_CODEX_APPROVAL_TOOLS) {
-    lines.push(
-      `[mcp_servers.impel.tools.${JSON.stringify(tool)}]`,
-      'approval_mode = "approve"',
-      "",
-    );
+  if (RUNTIME_BRAND.features.mcp) {
+    const mcp = impelCliInvocation(["mcp", "--tenant", tenantId]);
+    lines.push("", `[mcp_servers.${providerId}]`, `command = ${JSON.stringify(mcp.command)}`, `args = [${mcp.args.map((argument) => JSON.stringify(argument)).join(", ")}]`, "");
+    for (const tool of IMPEL_SPECIALIST_CODEX_APPROVAL_TOOLS) {
+      lines.push(
+        `[mcp_servers.${providerId}.tools.${JSON.stringify(tool)}]`,
+        'approval_mode = "approve"',
+        "",
+      );
+    }
   }
   lines.push(CODEX_END_MARK);
   return lines.join("\n");
@@ -197,15 +199,16 @@ export function ensureImpelCodexProfile(gatewayUrl, tenantId) {
   const original = fs.existsSync(configPath) ? fs.readFileSync(configPath, "utf8") : "";
   const withoutManagedBlock = stripCodexManagedBlock(original, configPath);
 
-  if (/^(\[model_providers\.impel(?:\.|\])|\[mcp_servers\.impel\])/m.test(withoutManagedBlock)) {
+  const providerPattern = RUNTIME_BRAND.cli.providerId.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+  if (new RegExp(`^(\\[model_providers\\.${providerPattern}(?:\\.|\\])|\\[mcp_servers\\.${providerPattern}\\])`, "m").test(withoutManagedBlock)) {
     throw new Error(
-      `${configPath} contains an Impel provider or MCP table outside the managed profile block. ` +
+      `${configPath} contains a ${RUNTIME_BRAND.product.displayName} provider or MCP table outside the managed profile block. ` +
         "Remove or rename that table, then re-run."
     );
   }
 
   const { preamble, rest } = splitTomlPreamble(withoutManagedBlock);
-  const providerLine = 'model_provider = "impel"';
+  const providerLine = `model_provider = ${JSON.stringify(RUNTIME_BRAND.cli.providerId)}`;
   let nextPreamble = CODEX_PROVIDER_LINE_RE.test(preamble)
     ? preamble.replace(CODEX_PROVIDER_LINE_RE, providerLine)
     : `${preamble.trimEnd()}${preamble.trim() ? "\n" : ""}${providerLine}\n`;
@@ -217,7 +220,7 @@ export function ensureImpelCodexProfile(gatewayUrl, tenantId) {
     .concat("\n");
 
   writePrivateFile(configPath, hardenManagedCodexToml(next, configPath));
-  ensureCodexSessionHooks(codexHome, tenantId, "codex_cli");
+  if (RUNTIME_BRAND.features.sessions) ensureCodexSessionHooks(codexHome, tenantId, "codex_cli");
   secureManagedCodexHome(codexHome);
   return { codexHome, configPath };
 }

package/src/commands/apps.js

@@ -59,12 +59,13 @@ import {
   windowsClaudeUserData,
   windowsManagedChatGPTRoot,
 } from "../windowsApps.js";
+import { RUNTIME_BRAND } from "../runtimeBrand.js";
 
 const CLAUDE_KEYCHAIN_NOTICE = "Claude Keychain: enter your Mac login password and choose Always Allow on the first prompt for this tenant; Allow is temporary.";
 
 const APP_CAPABILITIES = Object.freeze({
-  claude: Object.freeze({ label: "Impel Claude", provider: "Claude" }),
-  chatgpt: Object.freeze({ label: "Impel ChatGPT", provider: "Codex" }),
+  claude: Object.freeze({ label: `${RUNTIME_BRAND.apps.displayPrefix} Claude`, provider: "Claude" }),
+  chatgpt: Object.freeze({ label: `${RUNTIME_BRAND.apps.displayPrefix} ChatGPT`, provider: "Codex" }),
 });
 
 /**
@@ -446,14 +447,14 @@ export async function reconcileWindowsTenantApps({
     // Merge the sync env so an app-embedded binary (IMPEL_CODEX_BIN) satisfies
     // the availability check even when no standalone CLI is installed.
     if (io.findBinary(client, { ...environment, ...env }, "win32")) {
-      await io.syncSkills({ client, gatewayUrl: resolveSkillsGateway(config.gatewayUrl), env, label, homeDir: os.homedir() });
+      if (RUNTIME_BRAND.features.skills) await io.syncSkills({ client, gatewayUrl: resolveSkillsGateway(config.gatewayUrl), env, label, homeDir: os.homedir() });
       agentTargets.push(target);
     } else {
       io.log(`Skipping skill/agent sync for ${label} — no ${client === "claude" ? "Claude Code" : "Codex"} binary is available to run plugin commands.`);
     }
     if (target === "chatgpt") io.secureCodexHome(paths.chatgpt.codexHome);
   }
-  if (agentTargets.length) {
+  if (RUNTIME_BRAND.features.agents && agentTargets.length) {
     await io.syncAgents({
       profiles: agentTargets.map((target) => appAgentProfile(target, paths)),
       gatewayUrl: config.gatewayUrl,
@@ -553,12 +554,12 @@ export async function reconcileMacTenantApps({
   for (const item of installed) {
     const { client, env, label } = appSkillTarget(item.target, paths);
     if (io.findBinary(client, environment, "darwin")) {
-      await io.syncSkills({ client, gatewayUrl: resolveSkillsGateway(config.gatewayUrl), env, label, homeDir: os.homedir() });
+      if (RUNTIME_BRAND.features.skills) await io.syncSkills({ client, gatewayUrl: resolveSkillsGateway(config.gatewayUrl), env, label, homeDir: os.homedir() });
       agentItems.push(item);
     }
     if (item.target === "chatgpt") io.secureCodexHome(paths.chatgpt.codexHome);
   }
-  if (agentItems.length) {
+  if (RUNTIME_BRAND.features.agents && agentItems.length) {
     await io.syncAgents({
       profiles: agentItems.map((item) => appAgentProfile(item.target, paths)),
       gatewayUrl: config.gatewayUrl,
@@ -689,7 +690,7 @@ export async function cmdWindowsApps(argv, overrides = {}) {
   }
 
   try {
-    if (action === "open") maybePrintUpdateNotice();
+    if (action === "open" && RUNTIME_BRAND.cli.packageName === "impel-cli") maybePrintUpdateNotice();
     // Background token-helper refreshes pass --stale-only; honor the manifest
     // TTL here like the darwin refresh path does, so every vendor token call
     // does not become a full catalog fetch + profile rewrite (and its child
@@ -790,7 +791,7 @@ export async function cmdWindowsApps(argv, overrides = {}) {
         const profile = target === "claude" ? tenantPaths.claude.userData : tenantPaths.chatgpt.root;
         console.log(`${verb} Impel ${target === "claude" ? "Claude" : "ChatGPT"} profile at ${profile}`);
         const { client, env, label } = appSkillTarget(target, tenantPaths, { platform: "win32" });
-        if (!flags["skip-skills"]) {
+        if (RUNTIME_BRAND.features.skills && !flags["skip-skills"]) {
           await withProgress(`Syncing skills for ${label}`, (spinner) => (
             io.syncSkills({
               client,
@@ -804,7 +805,7 @@ export async function cmdWindowsApps(argv, overrides = {}) {
         }
         if (target === "chatgpt") secureManagedCodexHome(tenantPaths.chatgpt.codexHome);
       }
-      if (!flags["skip-agents"]) {
+      if (RUNTIME_BRAND.features.agents && !flags["skip-agents"]) {
         await withProgress("Syncing app agent profiles", () => io.syncAgents({
           profiles: actionTargets.map((target) => appAgentProfile(target, tenantPaths)),
           gatewayUrl: config.gatewayUrl,
@@ -1038,14 +1039,14 @@ export async function cmdApps(argv, overrides = {}) {
   const gatewayUrl = resolveSkillsGateway(config.gatewayUrl);
   for (const item of installed) {
     const { client, env, label } = appSkillTarget(item.target, paths);
-    if (!flags["skip-skills"]) {
+    if (RUNTIME_BRAND.features.skills && !flags["skip-skills"]) {
       await withProgress(`Syncing skills for ${label}`, (spinner) => (
         io.syncSkills({ client, gatewayUrl, env, label, homeDir: os.homedir(), logger: createProgressLogger(spinner) })
       ));
     }
     if (item.target === "chatgpt") io.secureCodexHome(paths.chatgpt.codexHome);
   }
-  if (!flags["skip-agents"]) {
+  if (RUNTIME_BRAND.features.agents && !flags["skip-agents"]) {
     await withProgress("Syncing app agent profiles", () => io.syncAgents({
       profiles: installed.map((item) => appAgentProfile(item.target, paths)),
       gatewayUrl: config.gatewayUrl,
@@ -1170,17 +1171,21 @@ export async function provisionAndOpenManagedApps({
   const gatewayUrl = resolveSkillsGateway(config.gatewayUrl);
   for (const item of installed) {
     const { client, env, label } = appSkillTarget(item.target, paths);
-    await withProgress(`Syncing skills for ${label}`, (spinner) => (
-      io.syncSkills({ client, gatewayUrl, env, label, homeDir: os.homedir(), logger: createProgressLogger(spinner) })
-    ));
+    if (RUNTIME_BRAND.features.skills) {
+      await withProgress(`Syncing skills for ${label}`, (spinner) => (
+        io.syncSkills({ client, gatewayUrl, env, label, homeDir: os.homedir(), logger: createProgressLogger(spinner) })
+      ));
+    }
     if (item.target === "chatgpt") io.secureCodexHome(paths.chatgpt.codexHome);
   }
-  await withProgress("Syncing app agent profiles", () => io.syncAgents({
-    profiles: installed.map((item) => appAgentProfile(item.target, paths)),
-    gatewayUrl: config.gatewayUrl,
-    credential: config.pat,
-    tenantId: config.tenantId,
-  }));
+  if (RUNTIME_BRAND.features.agents) {
+    await withProgress("Syncing app agent profiles", () => io.syncAgents({
+      profiles: installed.map((item) => appAgentProfile(item.target, paths)),
+      gatewayUrl: config.gatewayUrl,
+      credential: config.pat,
+      tenantId: config.tenantId,
+    }));
+  }
   for (const item of installed) await io.openLauncher(item.launcher);
   return installed;
 }
@@ -1335,18 +1340,20 @@ async function refreshApps(targets, { staleOnly = false, tenantId = null } = {},
   const gatewayUrl = resolveSkillsGateway(config.gatewayUrl);
   for (const status of supportedStatuses) {
     const { client, env, label } = appSkillTarget(status.target, tenantPaths);
-    await io.syncSkills({ client, gatewayUrl, env, label, homeDir: os.homedir() });
+    if (RUNTIME_BRAND.features.skills) await io.syncSkills({ client, gatewayUrl, env, label, homeDir: os.homedir() });
     if (status.target === "chatgpt") io.secureCodexHome(tenantPaths.chatgpt.codexHome);
   }
-  await io.syncAgents({
-    profiles: supportedStatuses.map((status) => appAgentProfile(status.target, tenantPaths)),
-    gatewayUrl: config.gatewayUrl,
-    credential: config.pat,
-    tenantId: config.tenantId,
-  });
+  if (RUNTIME_BRAND.features.agents) {
+    await io.syncAgents({
+      profiles: supportedStatuses.map((status) => appAgentProfile(status.target, tenantPaths)),
+      gatewayUrl: config.gatewayUrl,
+      credential: config.pat,
+      tenantId: config.tenantId,
+    });
+  }
   // Keep the update-notice cache warm from the same background slot.
   try {
-    refreshUpdateCache();
+    if (RUNTIME_BRAND.cli.packageName === "impel-cli") refreshUpdateCache();
   } catch {
     // opportunistic only
   }

package/src/commands/auth.js

@@ -1,6 +1,7 @@
 import { parseFlags } from "../args.js";
 import {
   loadConfig,
+  CONFIG_PATH,
   saveConfig,
   normalizeGatewayUrl,
   resolveDefaultGateway,
@@ -9,6 +10,7 @@ import {
 } from "../config.js";
 import { promptSecret } from "../prompt.js";
 import { fetchTenants, normalizeTenantId } from "../tenants.js";
+import { RUNTIME_BRAND } from "../runtimeBrand.js";
 
 export async function cmdAuth(argv) {
   const { flags } = parseFlags(argv, {
@@ -22,16 +24,16 @@ export async function cmdAuth(argv) {
 
   let pat = flags.pat;
   if (!pat) {
-    pat = await promptSecret("Impel Personal Access Token (impel_pat_...): ");
+    pat = await promptSecret(`${RUNTIME_BRAND.product.displayName} Personal Access Token (${RUNTIME_BRAND.auth.patPrefix}...): `);
   }
   if (!pat) {
     console.error("impel: no PAT provided, aborting.");
     process.exitCode = 1;
     return;
   }
-  if (!pat.startsWith("impel_pat_")) {
+  if (!pat.startsWith(RUNTIME_BRAND.auth.patPrefix)) {
     console.warn(
-      `impel: warning: that token doesn't start with "impel_pat_" — double check you copied the right value.`
+      `${RUNTIME_BRAND.cli.command}: warning: that token doesn't start with "${RUNTIME_BRAND.auth.patPrefix}" — double check you copied the right value.`
     );
   }
 
@@ -75,7 +77,7 @@ export async function cmdAuth(argv) {
   }
   saveConfig(config);
 
-  console.log(`impel: stored credentials in ~/.config/impel/config.json (mode 0600)`);
+  console.log(`${RUNTIME_BRAND.cli.command}: stored credentials in ${CONFIG_PATH} (mode 0600)`);
   console.log(`  gateway: ${gatewayUrl}`);
   console.log(`  app:     ${appUrl}`);
   console.log(`  pat:     ${maskSecret(pat)}`);