impel-cli 0.20.38 → 0.20.40

package/src/modelCatalog.js

@@ -0,0 +1,103 @@
+// The single model registry shared by every managed Codex surface. This
+// module must stay a leaf (importing only other leaf modules such as
+// runtimeBrand.js) so both the desktop app generation in apps.js and the CLI
+// tenant profiles in cliProfiles.js can consume it without an import cycle —
+// the 0.20.39 regression happened precisely because the CLI carried its own
+// hand-frozen copy of this data.
+import { RUNTIME_BRAND } from "./runtimeBrand.js";
+
+const STANDARD_REASONING_LEVELS = [
+  { effort: "low", description: "Fast responses with lighter reasoning" },
+  { effort: "medium", description: "Balances speed and reasoning depth for everyday tasks" },
+  { effort: "high", description: "Greater reasoning depth for complex problems" },
+  { effort: "xhigh", description: "Extra high reasoning depth for complex problems" },
+];
+const MAX_REASONING_LEVEL = { effort: "max", description: "Maximum reasoning depth for the hardest problems" };
+const ULTRA_REASONING_LEVEL = { effort: "ultra", description: "Maximum reasoning with automatic task delegation" };
+const FAST_SERVICE_TIER = { id: "priority", name: "Fast", description: "1.5x speed, increased usage" };
+
+export const FALLBACK_MODELS = [
+  { id: "claude-opus-5", provider: "claude", display_name: "Claude Opus 5", family: "opus", family_default: true, default: true, supports_1m: true, context_window: 1000000 },
+  { id: "claude-opus-4-8", provider: "claude", display_name: "Claude Opus 4.8", family: "opus", supports_1m: true, context_window: 1000000 },
+  { id: "claude-sonnet-5", provider: "claude", display_name: "Claude Sonnet 5", family: "sonnet", family_default: true, context_window: 200000 },
+  { id: "claude-sonnet-4-6", provider: "claude", display_name: "Claude Sonnet 4.6", family: "sonnet", context_window: 200000 },
+  { id: "claude-haiku-4-5", provider: "claude", display_name: "Claude Haiku 4.5", family: "haiku", family_default: true, context_window: 200000 },
+  { id: "claude-fable-5", provider: "claude", display_name: "Claude Fable 5", family: "fable", family_default: true, context_window: 200000 },
+  { id: "gpt-5.6-sol", provider: "codex", display_name: "GPT-5.6-Sol", description: "Latest frontier agentic coding model.", default: true, priority: 1, default_reasoning_level: "medium", supported_reasoning_levels: [...STANDARD_REASONING_LEVELS, MAX_REASONING_LEVEL, ULTRA_REASONING_LEVEL], service_tiers: [FAST_SERVICE_TIER], context_window: 272000, max_context_window: 272000, use_responses_lite: true, tool_mode: "code_mode_only", multi_agent_version: "v2" },
+  { id: "gpt-5.6-terra", provider: "codex", display_name: "GPT-5.6-Terra", description: "Balanced agentic coding model for everyday work.", priority: 2, default_reasoning_level: "medium", supported_reasoning_levels: [...STANDARD_REASONING_LEVELS, MAX_REASONING_LEVEL, ULTRA_REASONING_LEVEL], service_tiers: [FAST_SERVICE_TIER], context_window: 272000, max_context_window: 272000, use_responses_lite: true, tool_mode: "code_mode_only", multi_agent_version: "v2" },
+  { id: "gpt-5.6-luna", provider: "codex", display_name: "GPT-5.6-Luna", description: "Fast and affordable agentic coding model.", priority: 3, default_reasoning_level: "medium", supported_reasoning_levels: [...STANDARD_REASONING_LEVELS, MAX_REASONING_LEVEL], service_tiers: [FAST_SERVICE_TIER], context_window: 272000, max_context_window: 272000, use_responses_lite: true, tool_mode: "code_mode_only", multi_agent_version: "v1" },
+  { id: "gpt-5.5", provider: "codex", display_name: "GPT-5.5", description: "Frontier model for complex coding, research, and real-world work.", priority: 7, default_reasoning_level: "medium", supported_reasoning_levels: STANDARD_REASONING_LEVELS, service_tiers: [FAST_SERVICE_TIER], context_window: 272000, max_context_window: 272000, use_responses_lite: false, tool_mode: null, multi_agent_version: null },
+  { id: "gpt-5.4", provider: "codex", display_name: "GPT-5.4", description: "Strong model for everyday coding.", priority: 16, default_reasoning_level: "medium", supported_reasoning_levels: STANDARD_REASONING_LEVELS, service_tiers: [FAST_SERVICE_TIER], context_window: 272000, max_context_window: 1000000, use_responses_lite: false, tool_mode: null, multi_agent_version: null },
+  { id: "gpt-5.4-mini", provider: "codex", display_name: "GPT-5.4-Mini", description: "Small, fast, and cost-efficient model for simpler coding tasks.", priority: 23, default_reasoning_level: "medium", supported_reasoning_levels: STANDARD_REASONING_LEVELS, service_tiers: [], context_window: 272000, max_context_window: 272000, use_responses_lite: false, tool_mode: null, multi_agent_version: null },
+  { id: "gpt-5.3-codex-spark", provider: "codex", display_name: "GPT-5.3-Codex-Spark", description: "Ultra-fast coding model.", priority: 26, default_reasoning_level: "high", supported_reasoning_levels: STANDARD_REASONING_LEVELS, service_tiers: [], context_window: 128000, max_context_window: 128000, use_responses_lite: false, tool_mode: null, multi_agent_version: null },
+];
+
+export function codexCatalogEntry(model, index, vendorModel) {
+  const generated = {
+    slug: model.id,
+    display_name: model.display_name || model.id,
+    description: `Available through the Impel gateway (${model.id}).`,
+    default_reasoning_level: "medium",
+    supported_reasoning_levels: STANDARD_REASONING_LEVELS,
+    shell_type: "shell_command",
+    visibility: "list",
+    supported_in_api: true,
+    priority: index + 1,
+    base_instructions: "You are Codex, an AI coding agent. Follow repository instructions, collaborate with the user, make scoped changes, and verify your work.",
+    include_skills_usage_instructions: false,
+    supports_reasoning_summaries: true,
+    default_reasoning_summary: "none",
+    support_verbosity: true,
+    default_verbosity: "low",
+    apply_patch_tool_type: "freeform",
+    web_search_tool_type: "text_and_image",
+    truncation_policy: { mode: "tokens", limit: 10000 },
+    context_window: model.context_window || 200000,
+    max_context_window: model.context_window || 200000,
+    effective_context_window_percent: 95,
+    experimental_supported_tools: [],
+    input_modalities: ["text", "image"],
+    supports_parallel_tool_calls: true,
+    supports_image_detail_original: true,
+    supports_search_tool: true,
+    use_responses_lite: false,
+    tool_mode: null,
+    multi_agent_version: null,
+  };
+  const entry = vendorModel ? { ...generated, ...vendorModel } : generated;
+  return {
+    ...entry,
+    slug: model.id,
+    display_name: model.display_name || entry.display_name || model.id,
+    description: model.description || entry.description,
+    default_reasoning_level: model.default_reasoning_level || entry.default_reasoning_level,
+    supported_reasoning_levels: Array.isArray(model.supported_reasoning_levels)
+      ? model.supported_reasoning_levels
+      : entry.supported_reasoning_levels,
+    service_tiers: Array.isArray(model.service_tiers) ? model.service_tiers : (entry.service_tiers || []),
+    visibility: "list",
+    supported_in_api: true,
+    priority: Number.isInteger(model.priority) ? model.priority : (entry.priority || index + 1),
+    context_window: model.context_window || entry.context_window || 200000,
+    max_context_window: model.max_context_window || entry.max_context_window || model.context_window || 200000,
+    ...(typeof model.use_responses_lite === "boolean" ? { use_responses_lite: model.use_responses_lite } : {}),
+    ...(Object.hasOwn(model, "tool_mode") ? { tool_mode: model.tool_mode } : {}),
+    ...(Object.hasOwn(model, "multi_agent_version") ? { multi_agent_version: model.multi_agent_version } : {}),
+  };
+}
+
+/**
+ * The managed CLI Codex catalog, projected from the same model registry the
+ * desktop app uses so reasoning efforts, service tiers, and tool modes can
+ * never drift between the two surfaces. CLI profiles pin this file to keep
+ * launches offline; vendor enrichment stays a desktop-only concern.
+ */
+export function managedCodexCliCatalog(now = new Date()) {
+  return {
+    fetched_at: now.toISOString(),
+    client_version: `${RUNTIME_BRAND.cli.command}-managed-2`,
+    models: FALLBACK_MODELS
+      .filter((model) => model.provider === "codex")
+      .map((model, index) => codexCatalogEntry(model, index)),
+  };
+}

package/src/nativeAgentTransport.js

@@ -445,10 +445,18 @@ function resumedHandleForState(state, incomingHandle) {
 function normalizeHandle(value) {
   if (value?.schema === NATIVE_AGENT_CONTINUATION_SCHEMA) {
     exactObject(value, ["schema", "invocationId"], "native-agent continuation");
-    if (typeof value.invocationId !== "string" || !SAFE_INVOCATION_RE.test(value.invocationId)) {
-      throw new Error("native-agent continuation invocationId is invalid");
+    // Minted ids are lowercase UUIDs; tolerate a case-drifting reserialization
+    // but nothing that changes the id's shape.
+    const invocationId = typeof value.invocationId === "string"
+      ? value.invocationId.toLowerCase()
+      : null;
+    if (!invocationId || !SAFE_INVOCATION_RE.test(invocationId)) {
+      throw new Error(
+        "native-agent continuation invocationId is invalid; pass the exact continuation object "
+        + "returned by the answer call, or call the answer tool again if none was returned",
+      );
     }
-    return { ...value };
+    return { ...value, invocationId };
   }
   exactObject(value, [
     "schema",
@@ -1854,7 +1862,7 @@ export class NativeAgentCompositeTransport {
     }
   }
 
-  async answer(args, { signal } = {}) {
+  async answer(args, { signal, onProgress } = {}) {
     throwIfAborted(signal);
     const attachment = boundedAttachmentSignal(signal, this.attachmentWindowMs);
     let state = null;
@@ -1880,6 +1888,7 @@ export class NativeAgentCompositeTransport {
       if (!lock) return continuationForState(state);
       const result = await this.attach(state, prepared, {
         signal: attachment.signal,
+        onProgress,
         lock,
       });
       if (result?.schema === NATIVE_AGENT_RESULT_SCHEMA && result.status === "succeeded") {

package/src/platformSetup.js

@@ -15,10 +15,8 @@ export async function preparePlatformClis(options = {}, dependencies = {}) {
     claude: find("claude", environment, platform),
     codex: find("codex", environment, platform),
   };
-  const claudeProfile = (dependencies.ensureClaudeProfile || ensureImpelClaudeProfile)(options.gatewayUrl, options.tenantId);
-  const codexProfile = (dependencies.ensureCodexProfile || ensureImpelCodexProfile)(options.gatewayUrl, options.tenantId);
   const missingAfter = Object.entries(binaries).filter(([, binary]) => !binary).map(([tool]) => tool);
-  return {
+  const result = {
     binaries,
     missingBefore: [...missingAfter],
     missingAfter,
@@ -27,6 +25,14 @@ export async function preparePlatformClis(options = {}, dependencies = {}) {
     installFailure: null,
     installations: {},
     installCommands: {},
+    profiles: null,
+  };
+  // Discovery-only probes must not write profiles either.
+  if (options.inspectOnly) return result;
+  const claudeProfile = (dependencies.ensureClaudeProfile || ensureImpelClaudeProfile)(options.gatewayUrl, options.tenantId);
+  const codexProfile = (dependencies.ensureCodexProfile || ensureImpelCodexProfile)(options.gatewayUrl, options.tenantId);
+  return {
+    ...result,
     profiles: { claude: claudeProfile.configDir, codex: codexProfile.codexHome },
   };
 }

package/src/vendorCliBinaries.js

@@ -111,16 +111,45 @@ export function findReviewedVendorCliBinary(
   {
     find = findNativeBinary,
     verify = verifyReviewedMacVendorCli,
+    realpath = fs.realpathSync,
+    stat = fs.statSync,
   } = {},
 ) {
   if (platform !== "darwin") return find(tool, environment, platform, environmentPrefix);
-  return find(
-    tool,
-    environment,
-    platform,
-    environmentPrefix,
-    (binary) => verify(tool, binary, environment, { environmentPrefix }),
-  );
+  const accept = (binary) => verify(tool, binary, environment, { environmentPrefix });
+  const reviewed = find(tool, environment, platform, environmentPrefix, accept);
+  if (reviewed || tool !== "claude") return reviewed;
+  // An explicit override remains authoritative even while unusable: callers
+  // asked for exactly that binary, so never substitute another install.
+  const override = vendorOverrideName(tool, environmentPrefix);
+  if (override && environmentValue(environment, override)) return null;
+
+  // The standalone Claude installer keeps releases side by side under
+  // versions/<release> and its auto-updater only moves the launcher symlink.
+  // When the symlink drifts past the reviewed release, resolve the exact
+  // reviewed release directly instead of failing the launch; every candidate
+  // still passes the full version + signature + team verification.
+  const candidates = [];
+  const drifted = find(tool, environment, platform, environmentPrefix);
+  if (drifted) {
+    try {
+      candidates.push(path.join(path.dirname(realpath(drifted)), PINNED_VENDOR_CLI_VERSIONS.claude));
+    } catch {
+      // An unresolvable shim only forfeits the sibling candidate.
+    }
+  }
+  const home = environmentValue(environment, "HOME");
+  if (home) {
+    candidates.push(path.join(home, ".local", "share", "claude", "versions", PINNED_VENDOR_CLI_VERSIONS.claude));
+  }
+  for (const candidate of candidates) {
+    try {
+      if (stat(candidate).isFile() && accept(candidate)) return candidate;
+    } catch {
+      // A missing side-by-side release keeps resolution fail-closed.
+    }
+  }
+  return null;
 }
 
 /**

package/src/verbatimRelay.js

@@ -1,5 +1,13 @@
+import { CODEX_NATIVE_AGENT_ATTACHMENT_WINDOW_MS } from "./selfInvocation.js";
+
 export const VERBATIM_RELAY_OPT_IN_MARKER = "verbatimRelay enabled";
 
+// The parent's single blocking wait must outlast the Codex child's bounded
+// native-agent attachment window or the parent's visible working span
+// truncates while the child is still running. Deriving it keeps the two
+// contracts linked when the window moves again.
+export const VERBATIM_RELAY_PARENT_WAIT_MS = CODEX_NATIVE_AGENT_ATTACHMENT_WINDOW_MS + 20_000;
+
 export const VERBATIM_SPAWN_REQUIREMENT = 'fork_turns="none"';
 
 export const VERBATIM_FINAL_TEXT_CONSTRAINTS =
@@ -14,7 +22,7 @@ export function parentVerbatimRelayAppendix() {
     `When an explicit custom agent's catalog-derived description declares ${VERBATIM_RELAY_OPT_IN_MARKER}, ` +
     `spawn it with ${VERBATIM_SPAWN_REQUIREMENT} and relay its finalText verbatim with ${VERBATIM_FINAL_TEXT_CONSTRAINTS}; ` +
     "preserve Sources sections and citations exactly. Start one child, then use one blocking wait sized for the child budget; " +
-    "on Codex, call wait_agent exactly once with timeout_ms=60000. Do not send follow-ups, short-poll the child, or synthesize while it is running. " +
+    `on Codex, call wait_agent exactly once with timeout_ms=${VERBATIM_RELAY_PARENT_WAIT_MS}. Do not send follow-ups, short-poll the child, or synthesize while it is running. ` +
     "Custom agents without that declaration keep the default delegation behavior."
   );
 }

package/src/windowsSetup.js

@@ -121,6 +121,7 @@ export async function prepareWindowsClis({
   gatewayUrl,
   tenantId,
   skipInstall = false,
+  inspectOnly = false,
   installTools = ["claude", "codex"],
 } = {}, dependencies = {}) {
   const io = {
@@ -149,6 +150,25 @@ export async function prepareWindowsClis({
     throw new Error("installTools must contain unique supported Windows CLI names");
   }
 
+  // A pure discovery probe: recovery goals and health checks re-evaluate
+  // this repeatedly, so it must never download git, install anything, write
+  // profiles, or sync skills — only report what is currently discoverable.
+  // This short-circuit MUST stay ahead of the git provisioning below, which
+  // performs an unprompted network install when git is absent.
+  if (inspectOnly) {
+    return {
+      binaries: before,
+      missingBefore,
+      missingAfter: [...missingBefore],
+      installAttempted: false,
+      installSucceeded: null,
+      installFailure: null,
+      installations: {},
+      installCommands: {},
+      profiles: null,
+    };
+  }
+
   // Both vendor CLIs need `git` to install the skills marketplace, and the
   // target machines are brand new — provision the Impel-managed MinGit before
   // any skill sync, on every setup/update pass (idempotent once installed).

package/src/codexCliCatalog.js

@@ -1,56 +0,0 @@
-const LEVELS = ["low", "medium", "high", "xhigh"].map((effort) => ({
-  effort,
-  description: `${effort} reasoning effort`,
-}));
-
-const MODELS = [
-  ["gpt-5.6-sol", "GPT-5.6-Sol", 1, "medium", "code_mode_only", "v2"],
-  ["gpt-5.6-terra", "GPT-5.6-Terra", 2, "medium", "code_mode_only", "v2"],
-  ["gpt-5.6-luna", "GPT-5.6-Luna", 3, "medium", "code_mode_only", "v1"],
-  ["gpt-5.5", "GPT-5.5", 7, "medium", null, null],
-  ["gpt-5.4", "GPT-5.4", 16, "medium", null, null],
-  ["gpt-5.4-mini", "GPT-5.4-Mini", 23, "medium", null, null],
-  ["gpt-5.3-codex-spark", "GPT-5.3-Codex-Spark", 26, "high", null, null],
-];
-
-// Reviewed static projection of the exact pinned Codex 0.146 catalog. Keeping
-// it process-local prevents the client from issuing unsupported online model
-// refreshes during every managed launch.
-export function managedCodexCliCatalog(now = new Date()) {
-  return {
-    fetched_at: now.toISOString(),
-    client_version: "impel-managed-codex-0.146",
-    models: MODELS.map(([slug, displayName, priority, effort, toolMode, multiAgentVersion]) => ({
-      slug,
-      display_name: displayName,
-      description: `Available through the Impel gateway (${slug}).`,
-      default_reasoning_level: effort,
-      supported_reasoning_levels: LEVELS,
-      service_tiers: [],
-      shell_type: "shell_command",
-      visibility: "list",
-      supported_in_api: true,
-      priority,
-      base_instructions: "You are Codex, an AI coding agent. Follow repository instructions and verify your work.",
-      include_skills_usage_instructions: false,
-      supports_reasoning_summaries: true,
-      default_reasoning_summary: "none",
-      support_verbosity: true,
-      default_verbosity: "low",
-      apply_patch_tool_type: "freeform",
-      web_search_tool_type: "text_and_image",
-      truncation_policy: { mode: "tokens", limit: 10_000 },
-      context_window: slug === "gpt-5.3-codex-spark" ? 128_000 : 272_000,
-      max_context_window: slug === "gpt-5.4" ? 1_000_000 : (slug === "gpt-5.3-codex-spark" ? 128_000 : 272_000),
-      effective_context_window_percent: 95,
-      experimental_supported_tools: [],
-      input_modalities: ["text", "image"],
-      supports_parallel_tool_calls: true,
-      supports_image_detail_original: true,
-      supports_search_tool: true,
-      use_responses_lite: slug.startsWith("gpt-5.6-"),
-      tool_mode: toolMode,
-      multi_agent_version: multiAgentVersion,
-    })),
-  };
-}