impel-cli 0.20.25 → 0.20.27

package/RELEASE_NOTES.md

@@ -1,5 +1,14 @@
 # Release notes
 
+## 0.20.26 — Native task-board navigation
+
+- Embeds Tasks in each managed desktop app's content view instead of a
+  separate always-on-top window, so selecting another sidebar destination
+  reliably dismisses the tenant board and completes the vendor navigation.
+- Removes the redundant desktop frame around the MCP App so the task-board
+  toolbar and workspace occupy the complete host content surface.
+- Rebuilds existing managed bundles onto the corrected embedded-view contract.
+
 ## 0.20.25 — Embedded tenant task boards
 
 - Adds a persistent Tasks destination to the exact managed Claude and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.20.25",
+  "version": "0.20.27",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/scripts/analyze-native-codex.mjs

@@ -144,6 +144,27 @@ function rolloutSessionMetadata(events) {
   } : { threadId: null, parentThreadId: null };
 }
 
+function nativeTerminalStatus(output) {
+  if (typeof output !== "string") return null;
+  const objectStart = output.indexOf("{");
+  if (objectStart < 0) return null;
+  let value;
+  try {
+    value = JSON.parse(output.slice(objectStart));
+  } catch {
+    return null;
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  if (value.schema === "impel.native-agent-answer.v1" && value.status === "succeeded") {
+    return "succeeded";
+  }
+  if (value.schema === "impel.native-agent-result.v1"
+    && ["succeeded", "failed", "cancelled", "canceled"].includes(value.status)) {
+    return value.status;
+  }
+  return null;
+}
+
 export function summarizeCodexRollouts(rollouts) {
   const toolCounts = {};
   const parentToolCounts = {};
@@ -156,6 +177,10 @@ export function summarizeCodexRollouts(rollouts) {
   let outputTokens = 0;
   let mcpDurationMs = 0;
   let mcpCompletedCalls = 0;
+  let terminalResults = 0;
+  let successfulTerminalResults = 0;
+  let parentSuccessfulTerminalResults = 0;
+  let childSuccessfulTerminalResults = 0;
 
   for (const events of rollouts) {
     eventCount += events.length;
@@ -194,6 +219,17 @@ export function summarizeCodexRollouts(rollouts) {
           mcpStarts.delete(payload.call_id);
         }
       }
+      if (event.type === "response_item" && payload.type === "function_call_output") {
+        const terminalStatus = nativeTerminalStatus(payload.output);
+        if (terminalStatus) {
+          terminalResults += 1;
+          if (terminalStatus === "succeeded") {
+            successfulTerminalResults += 1;
+            if (metadata.parentThreadId) childSuccessfulTerminalResults += 1;
+            else parentSuccessfulTerminalResults += 1;
+          }
+        }
+      }
       if (event.type === "event_msg" && payload.type === "token_count") {
         const usage = payload.info?.total_token_usage;
         if (usage && typeof usage === "object") latestUsage = usage;
@@ -219,6 +255,10 @@ export function summarizeCodexRollouts(rollouts) {
     outputTokens,
     mcpDurationMs,
     mcpCompletedCalls,
+    terminalResults,
+    successfulTerminalResults,
+    parentSuccessfulTerminalResults,
+    childSuccessfulTerminalResults,
   };
 }
 
@@ -281,6 +321,10 @@ export function summarizeRawAttempt({ stdoutText, telemetryText = "", rolloutTex
       outputTokens: rollout.outputTokens,
         mcpDurationMs: rollout.mcpDurationMs,
         mcpCompletedCalls: rollout.mcpCompletedCalls,
+        terminalResults: rollout.terminalResults,
+        successfulTerminalResults: rollout.successfulTerminalResults,
+        parentSuccessfulTerminalResults: rollout.parentSuccessfulTerminalResults,
+        childSuccessfulTerminalResults: rollout.childSuccessfulTerminalResults,
       } : {}),
       parentToolCounts: rollout.parentToolCounts,
       childToolCounts: rollout.childToolCounts,
@@ -336,6 +380,9 @@ function directGate(report) {
     structure: report.structure.maximumThreadCount <= 1
       && report.structure.totalCodeCells === 0
       && report.structure.totalCodeWaits === 0
+      && report.structure.successfulTerminalResults === report.successfulSamples
+      && report.structure.parentSuccessfulTerminalResults === report.successfulSamples
+      && report.structure.childSuccessfulTerminalResults === 0
       && ["spawn_agent", "wait_agent", "send_message", "exec", "wait", "tool_search", "ALL_TOOLS"]
         .every((tool) => !report.structure.allToolCounts[tool])
       && (report.structure.toolCounts.answer_native_agent || 0) === report.successfulSamples
@@ -350,6 +397,8 @@ function compatibleGate(report) {
       && report.timings.durationMs.p50 <= (report.sloClass === "cibi" ? 55_000 : 100_000),
     childStructure: report.structure.totalCodeCells === 0
       && report.structure.totalCodeWaits === 0
+      && report.structure.successfulTerminalResults === report.successfulSamples
+      && report.structure.childSuccessfulTerminalResults === report.successfulSamples
       && ["exec", "wait", "send_message", "tool_search", "ALL_TOOLS"]
         .every((tool) => !report.structure.childToolCounts[tool]),
   };
@@ -405,6 +454,19 @@ export function analyzeAggregates(aggregates) {
         allToolCounts: mergedCounts(attempts, "toolCounts"),
         parentToolCounts: mergedCounts(successful, "parentToolCounts"),
         childToolCounts: mergedCounts(successful, "childToolCounts"),
+        terminalResults: successful.reduce((total, attempt) => total + (attempt.terminalResults || 0), 0),
+        successfulTerminalResults: successful.reduce(
+          (total, attempt) => total + (attempt.successfulTerminalResults || 0),
+          0,
+        ),
+        parentSuccessfulTerminalResults: successful.reduce(
+          (total, attempt) => total + (attempt.parentSuccessfulTerminalResults || 0),
+          0,
+        ),
+        childSuccessfulTerminalResults: successful.reduce(
+          (total, attempt) => total + (attempt.childSuccessfulTerminalResults || 0),
+          0,
+        ),
         maximumThreadCount: successful.reduce((maximum, attempt) => Math.max(maximum, attempt.threadCount || 0), 0),
         totalCodeCells: successful.reduce((total, attempt) => total + (attempt.codeCells || 0), 0),
         totalCodeWaits: successful.reduce((total, attempt) => total + (attempt.codeWaits || 0), 0),

package/scripts/profile-native-codex.mjs

@@ -390,6 +390,7 @@ export function safeAttemptRecord({ options, index, processResult, summary, json
     && jsonValid
     && codex.turnCompleted === true
     && (codex.agentMessages || 0) >= 1
+    && (codex.successfulTerminalResults || 0) === 1
     && (telemetry.localFailures || 0) === 0
     && startCalls === 1;
   return {
@@ -420,6 +421,10 @@ export function safeAttemptRecord({ options, index, processResult, summary, json
     childToolCounts: codex.childToolCounts || {},
     codeCells: codex.codeCells || 0,
     codeWaits: codex.codeWaits || 0,
+    terminalResults: codex.terminalResults || 0,
+    successfulTerminalResults: codex.successfulTerminalResults || 0,
+    parentSuccessfulTerminalResults: codex.parentSuccessfulTerminalResults || 0,
+    childSuccessfulTerminalResults: codex.childSuccessfulTerminalResults || 0,
     inputTokens: codex.inputTokens || 0,
     cachedInputTokens: codex.cachedInputTokens || 0,
     outputTokens: codex.outputTokens || 0,

package/src/agents.js

@@ -16,6 +16,8 @@ import {
   redactSecretText,
 } from "./config.js";
 import {
+  CODEX_NATIVE_AGENT_ATTACHMENT_WINDOW_MS,
+  IMPEL_NATIVE_AGENT_ATTACHMENT_WINDOW_ENV,
   IMPEL_NATIVE_AGENT_TELEMETRY_ENV_NAMES,
   IMPEL_NATIVE_AGENT_MCP_TARGET,
   impelNativeAgentMcpInvocation,
@@ -52,7 +54,7 @@ export const NATIVE_AGENT_RUN_TOOL = "run_native_agent";
 export const NATIVE_AGENT_RESUME_TOOL = "resume_native_agent_run";
 export const NATIVE_AGENT_RECOVER_TOOL = "recover_native_agent_runs";
 export const MANAGED_AGENT_MCP_SERVER = "impel_agent";
-export const MANAGED_AGENT_MANIFEST_VERSION = 16;
+export const MANAGED_AGENT_MANIFEST_VERSION = 17;
 
 // The host model only selects the fixed MCP tool and faithfully returns its
 // result. Luna preserves deterministic direct-only code-mode routing while the
@@ -748,9 +750,11 @@ function renderClaudeAgent({ tenantId, agent, name, invocation, recoveryOnly = f
 
 function codexInvocationEnvironment(invocation, { durableProfile = false } = {}) {
   const entries = Object.entries(invocation.env || {});
-  if (!durableProfile) return entries;
   const transient = new Set(IMPEL_NATIVE_AGENT_TELEMETRY_ENV_NAMES);
-  return entries.filter(([key]) => !transient.has(key));
+  return [
+    ...(durableProfile ? entries.filter(([key]) => !transient.has(key)) : entries),
+    [IMPEL_NATIVE_AGENT_ATTACHMENT_WINDOW_ENV, String(CODEX_NATIVE_AGENT_ATTACHMENT_WINDOW_MS)],
+  ];
 }
 
 function renderCodexConfiguration({
@@ -800,6 +804,7 @@ function renderCodexConfiguration({
     `[mcp_servers.${MANAGED_AGENT_MCP_SERVER}]`,
     `command = ${JSON.stringify(invocation.command)}`,
     `args = [${invocation.args.map((argument) => JSON.stringify(argument)).join(", ")}]`,
+    "tool_timeout_sec = 120",
     ...(eager
       ? [`enabled_tools = [${toolNames.map((tool) => JSON.stringify(tool)).join(", ")}]`]
       : []),

package/src/apps.js

@@ -301,7 +301,7 @@ export const CURRENT_CONFIG_VERSION = 32;
 // — which is what made every `impel update` re-trigger macOS permission
 // prompts. Bump this ONLY when a code change alters the bytes of a built
 // bundle; leave it alone for changes that don't touch bundle contents.
-export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-08-08.1";
+export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-08-08.2";
 
 /** Parse the tenant's install manifest, or null when absent/corrupt. */
 export function readTenantManifest(homeDir = os.homedir(), tenantId = null) {

package/src/desktopTasks.js

@@ -254,7 +254,7 @@ const NAVIGATION_SOURCE = String.raw`(() => {
     const sidebar = findSidebar();
     if (!sidebar || !(event.target instanceof Node) || !sidebar.contains(event.target)) return;
     select(false);
-    signal("hide");
+    setTimeout(() => signal("hide"), 0);
   };
   const onResize = () => {
     if (active) signal("layout");
@@ -480,11 +480,12 @@ if (
     const {
       app,
       BrowserWindow,
+      WebContentsView,
       ipcMain,
       shell,
       webContents: electronWebContents,
     } = electron;
-    if (!app || !BrowserWindow || !ipcMain || !electronWebContents) {
+    if (!app || !BrowserWindow || !WebContentsView || !ipcMain || !electronWebContents) {
       record("unsupported-electron-surface");
       return;
     }
@@ -540,16 +541,7 @@ if (
     const createView = (window) => {
       const state = stateFor(window);
       if (state.view && !state.view.webContents.isDestroyed()) return state;
-      const view = createInternalWindow({
-        frame: false,
-        show: false,
-        resizable: false,
-        movable: false,
-        minimizable: false,
-        maximizable: false,
-        fullscreenable: false,
-        skipTaskbar: true,
-        backgroundColor: "#181818",
+      const view = new WebContentsView({
         webPreferences: {
           preload: viewPreload,
           contextIsolation: true,
@@ -558,7 +550,9 @@ if (
           spellcheck: false,
         },
       });
-      view.setAlwaysOnTop(true, "floating");
+      window.contentView.addChildView(view);
+      view.setVisible(false);
+      view.setBackgroundColor("#181818");
       allowedViewContents.add(view.webContents);
       internalViewContents.add(view.webContents);
       view.webContents.setWindowOpenHandler(() => ({ action: "deny" }));
@@ -568,63 +562,45 @@ if (
       view.webContents.on("destroyed", () => {
         allowedViewContents.delete(view.webContents);
         internalViewContents.delete(view.webContents);
-      });
-      view.on("closed", () => {
+        try { window.contentView.removeChildView(view); } catch {}
         if (state.view === view) state.view = null;
       });
-      view.on("blur", () => setTimeout(() => {
-        const focused = BrowserWindow.getFocusedWindow();
-        if (focused === window || focused === state.nativeNav || focused === state.view) return;
-        state.visible = false;
-        state.view?.hide();
-        state.nativeNav?.hide();
-      }, 100));
       view.webContents.loadURL(hostUrl).catch((error) => record("view-load-failed", error));
       state.view = view;
       return state;
     };
 
-    const screenBounds = (window, bounds) => {
-      const content = window.getContentBounds();
-      return {
-        x: content.x + bounds.x,
-        y: content.y + bounds.y,
-        width: bounds.width,
-        height: bounds.height,
-      };
-    };
-
     const show = (window, bounds) => {
       const state = createView(window);
       state.bounds = bounds;
       state.visible = true;
-      state.view.setBounds(screenBounds(window, bounds));
-      state.view.show();
-      state.view.focus();
+      state.view.setBounds(bounds);
+      state.view.setVisible(true);
+      state.view.webContents.focus();
       const boardStatus = () => ({
         parentBounds: window.getBounds(),
         parentContentBounds: window.getContentBounds(),
         boardBounds: state.view.getBounds(),
-        boardVisible: state.view.isVisible(),
-        boardFocused: state.view.isFocused(),
+        boardVisible: state.visible,
+        boardFocused: state.view.webContents.isFocused(),
       });
       record("board-shown", JSON.stringify(boardStatus()));
       setTimeout(() => {
-        if (state.view && !state.view.isDestroyed()) record("board-visible-check", JSON.stringify(boardStatus()));
+        if (state.view && !state.view.webContents.isDestroyed()) record("board-visible-check", JSON.stringify(boardStatus()));
       }, 2000);
     };
     const hide = (window) => {
       const state = windows.get(window.id);
       if (!state) return;
       state.visible = false;
-      state.view?.hide();
+      state.view?.setVisible(false);
       window.webContents.focus();
     };
 
     const layoutBoard = (window) => {
       const state = windows.get(window.id);
-      if (!state?.visible || !state.view || !state.bounds || state.view.isDestroyed()) return;
-      state.view.setBounds(screenBounds(window, state.bounds));
+      if (!state?.visible || !state.view || !state.bounds || state.view.webContents.isDestroyed()) return;
+      state.view.setBounds(state.bounds);
     };
 
     const nativeBoardBounds = (window) => {
@@ -800,24 +776,24 @@ if (
           state.nativeNav.showInactive();
           state.nativeNav.moveTop();
         }
-        if (state?.visible && state.view && !state.view.isDestroyed()) state.view.show();
+        if (state?.visible && state.view && !state.view.webContents.isDestroyed()) state.view.setVisible(true);
       });
       window.on("blur", () => setTimeout(() => {
         const state = windows.get(window.id);
         const focused = BrowserWindow.getFocusedWindow();
-        if (focused === state?.nativeNav || focused === state?.view) return;
+        if (focused === state?.nativeNav) return;
         state?.nativeNav?.hide();
-        state?.view?.hide();
+        state?.view?.setVisible(false);
       }, 1000));
       window.on("minimize", () => {
         const state = windows.get(window.id);
         state?.nativeNav?.hide();
-        state?.view?.hide();
+        state?.view?.setVisible(false);
       });
       window.on("restore", () => {
         const state = windows.get(window.id);
         state?.nativeNav?.showInactive();
-        if (state?.visible) state.view?.show();
+        if (state?.visible) state.view?.setVisible(true);
       });
       window.on("closed", () => {
         const state = windows.get(window.id);
@@ -830,7 +806,8 @@ if (
           if (state.nativeNav) nativeNavOwners.delete(state.nativeNav.webContents);
           try {
             if (state.view) {
-              state.view.destroy();
+              window.contentView.removeChildView(state.view);
+              state.view.webContents.close();
             }
             if (state.nativeNav) {
               state.nativeNav.destroy();
@@ -900,7 +877,7 @@ if (
       if (focused && (windows.has(focused.id) || internalViewContents.has(focused.webContents))) return;
       for (const state of windows.values()) {
         state.nativeNav?.hide();
-        state.view?.hide();
+        state.view?.setVisible(false);
       }
     };
 
@@ -949,19 +926,13 @@ export function desktopTasksHostHtml() {
       :root { color-scheme: light dark; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; }
       * { box-sizing: border-box; }
       html, body { width: 100%; height: 100%; margin: 0; overflow: hidden; background: Canvas; color: CanvasText; }
-      body { display: grid; grid-template-rows: 36px minmax(0, 1fr); }
-      header { display: flex; align-items: center; justify-content: space-between; gap: 12px; padding: 0 10px 0 14px; border-bottom: 1px solid color-mix(in srgb, CanvasText 12%, transparent); }
-      header strong { font-size: 13px; font-weight: 600; }
-      button { border: 0; border-radius: 7px; padding: 5px 9px; background: color-mix(in srgb, CanvasText 8%, Canvas); color: CanvasText; font: inherit; cursor: pointer; }
-      button:hover { background: color-mix(in srgb, CanvasText 13%, Canvas); }
-      button:focus-visible { outline: 2px solid #7c8cff; outline-offset: 2px; }
+      body { display: grid; grid-template-rows: minmax(0, 1fr); }
       iframe { width: 100%; height: 100%; border: 0; background: Canvas; }
       #status { display: grid; place-items: center; padding: 24px; color: color-mix(in srgb, CanvasText 65%, transparent); text-align: center; }
       #status[hidden] { display: none; }
     </style>
   </head>
   <body>
-    <header><strong>Tasks</strong><button id="close" type="button" aria-label="Close Tasks">Close</button></header>
     <div id="status" role="status">Loading Impel Tasks…</div>
     <iframe id="widget" title="Impel Tasks" sandbox="allow-scripts allow-forms" hidden></iframe>
     <script>
@@ -1024,7 +995,9 @@ export function desktopTasksHostHtml() {
           }
         });
 
-        document.getElementById("close").addEventListener("click", () => bridge.close());
+        window.addEventListener("keydown", (event) => {
+          if (event.key === "Escape") bridge.close();
+        });
         Promise.all([
           bridge.rpc({ method: "resources/read", params: { uri: ${JSON.stringify(DESKTOP_TASKS_RESOURCE_URI)} } }),
           bridge.rpc({ method: "tools/call", params: { name: "show_tasks", arguments: { scope: "visible", limit: 50 } } }),

package/src/nativeAgentTransport.js

@@ -21,6 +21,9 @@ import {
   normalizeNativeAgentCatalog,
 } from "./agents.js";
 import { extractAnswerFinalText } from "./directAnswer.js";
+import {
+  IMPEL_NATIVE_AGENT_ATTACHMENT_WINDOW_ENV,
+} from "./selfInvocation.js";
 import { normalizeTenantId } from "./tenants.js";
 import { renameWithWindowsRetry } from "./windowsFs.js";
 
@@ -62,6 +65,19 @@ const CTOS_START_TIMEOUT_MESSAGE = `MCP tool call failed for ${NATIVE_AGENT_STAR
 const MCP_TOOL_RESULT_ERROR = Symbol("native-agent MCP tool result error");
 const TERMINAL_STATUSES = new Set(["succeeded", "failed", "cancelled", "canceled"]);
 
+export function nativeAgentAttachmentWindowMs(environment = process.env) {
+  const configured = environment?.[IMPEL_NATIVE_AGENT_ATTACHMENT_WINDOW_ENV];
+  if (configured === undefined) return DEFAULT_ATTACHMENT_WINDOW_MS;
+  if (!/^\d{1,6}$/u.test(configured)) {
+    throw new Error(`${IMPEL_NATIVE_AGENT_ATTACHMENT_WINDOW_ENV} must be an integer from 1000 through 300000`);
+  }
+  const parsed = Number(configured);
+  if (!Number.isSafeInteger(parsed) || parsed < 1_000 || parsed > 300_000) {
+    throw new Error(`${IMPEL_NATIVE_AGENT_ATTACHMENT_WINDOW_ENV} must be an integer from 1000 through 300000`);
+  }
+  return parsed;
+}
+
 function stableValue(value) {
   if (Array.isArray(value)) return value.map(stableValue);
   if (!value || typeof value !== "object") return value;
@@ -773,7 +789,7 @@ export class NativeAgentCompositeTransport {
     gatewayUrl,
     credential,
     runsRoot = path.join(CONFIG_DIR, "native-agent-runs"),
-    attachmentWindowMs = DEFAULT_ATTACHMENT_WINDOW_MS,
+    attachmentWindowMs = nativeAgentAttachmentWindowMs(),
     maxPolls = DEFAULT_MAX_POLLS,
     now = Date.now,
     randomUUID = crypto.randomUUID,

package/src/selfInvocation.js

@@ -72,6 +72,8 @@ export const IMPEL_NATIVE_AGENT_TELEMETRY_ENV_NAMES = [
   "IMPEL_NATIVE_HOST",
   "IMPEL_NATIVE_HOST_BUILD",
 ];
+export const IMPEL_NATIVE_AGENT_ATTACHMENT_WINDOW_ENV = "IMPEL_NATIVE_AGENT_ATTACHMENT_WINDOW_MS";
+export const CODEX_NATIVE_AGENT_ATTACHMENT_WINDOW_MS = 100_000;
 
 function managedMcpEnvironment(environment = process.env) {
   const telemetry = Object.fromEntries(