impel-cli 0.20.35 → 0.20.36

package/RELEASE_NOTES.md

@@ -1,5 +1,15 @@
 # Release notes
 
+## 0.20.36 — Restore Codex execution
+
+- Keeps Codex 0.147's stable code-mode host enabled instead of overriding it
+  off, restoring filesystem, shell, and repository tools in `impel codex`.
+- Launches ordinary tenant Codex sessions with unrestricted filesystem access
+  and no approval prompts by default while preserving read-only fixed-agent
+  profiles.
+- Requires the reviewed macOS Codex install to include its separately signed
+  `codex-code-mode-host` companion before the CLI can launch it.
+
 ## 0.20.35 — Normalize the Claude Tasks destination
 
 - Waits for Claude's native New row before cloning the Tasks destination,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.20.35",
+  "version": "0.20.36",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/commands/launch.js

@@ -70,13 +70,14 @@ export const IMPEL_CODEX_PARENT_DELEGATION_INSTRUCTIONS =
   `${IMPEL_CODEX_SPECIALIST_DELEGATION_INSTRUCTIONS} ${IMPEL_CUSTOM_AGENT_VERBATIM_RELAY_APPENDIX}`;
 
 const IMPEL_CODEX_RUNTIME_OVERRIDES = [
-  // Codex models may select code mode even when the standalone
-  // `codex-code-mode-host` companion is not present in the vendor install.
-  // The embedded runtime is the vendor-supported equivalent and is scoped to
-  // this Impel invocation, so the user's native Codex profile is unaffected.
-  "features.code_mode_host=false",
+  // Codex 0.147 fails closed when a model selects code mode while this stable
+  // feature is disabled. The reviewed standalone install includes the signed
+  // companion host, so keep the execution path enabled for Impel sessions.
+  "features.code_mode_host=true",
 ];
 
+const IMPEL_CODEX_UNRESTRICTED_ARGUMENT = "--dangerously-bypass-approvals-and-sandbox";
+
 export function impelLaunchArguments(tool, argv, { codexAgentProfile = null } = {}) {
   if (!RUNTIME_BRAND.features.agents) return [...argv];
   if (tool === "claude") {
@@ -89,6 +90,7 @@ export function impelLaunchArguments(tool, argv, { codexAgentProfile = null } =
       ...(codexAgentProfile ? ["--profile", codexAgentProfile] : [
         "-c",
         `developer_instructions=${JSON.stringify(IMPEL_CODEX_PARENT_DELEGATION_INSTRUCTIONS)}`,
+        IMPEL_CODEX_UNRESTRICTED_ARGUMENT,
       ]),
       ...IMPEL_CODEX_RUNTIME_OVERRIDES.flatMap((override) => ["-c", override]),
       ...argv,

package/src/vendorCliBinaries.js

@@ -38,6 +38,7 @@ export function verifyReviewedMacVendorCli(
   {
     run = spawnSync,
     realpath = fs.realpathSync,
+    stat = fs.statSync,
     versions = PINNED_VENDOR_CLI_VERSIONS,
     signingTeams = MAC_VENDOR_SIGNING_TEAMS,
     environmentPrefix = "IMPEL",
@@ -61,6 +62,25 @@ export function verifyReviewedMacVendorCli(
     if (version !== versions[tool]) return false;
 
     const resolved = realpath(binary);
+    if (tool === "codex") {
+      const codeModeHost = path.join(path.dirname(resolved), "codex-code-mode-host");
+      if (!stat(codeModeHost).isFile()) return false;
+      const helperVerified = run("/usr/bin/codesign", ["--verify", "--strict", codeModeHost], {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "pipe"],
+        timeout: 15_000,
+      });
+      if (helperVerified?.status !== 0 || helperVerified?.error) return false;
+      const helperDetails = run("/usr/bin/codesign", ["-dv", "--verbose=4", codeModeHost], {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "pipe"],
+        timeout: 15_000,
+      });
+      if (helperDetails?.status !== 0
+        || !String(helperDetails.stderr || helperDetails.stdout || "").includes(`TeamIdentifier=${signingTeams[tool]}`)) {
+        return false;
+      }
+    }
     const verified = run("/usr/bin/codesign", ["--verify", "--strict", resolved], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"],