impel-cli 0.20.46-beta.2 → 0.20.47

package/RELEASE_NOTES.md

@@ -1,5 +1,19 @@
 # Release notes
 
+## 0.20.47 — Keep Tasks on the primary app window
+
+- Makes the native Tasks fallback choose the earliest surviving primary host
+  window deterministically, so a later ChatGPT auxiliary renderer cannot win a
+  probe race and cover the real app with an empty grey window.
+- Adds a behavioral regression that returns the auxiliary window first, lets it
+  finish navigation probing first, and proves the fallback and authenticated
+  board still attach only to the primary window.
+- Skips the prerelease soak because this is an immediate stable regression
+  hotfix for `0.20.46`. The change updates the external Tasks preload
+  orchestration without changing vendor pins, generated profile contracts, or
+  built bundle bytes; the full release CI, pinned managed-app launch smoke, and
+  Windows vendor contracts remain mandatory before tagging.
+
 ## 0.20.46-beta.2 — Reload reconciled apps safely
 
 - Closes every running managed macOS app before rewriting its profile and
@@ -41,23 +55,29 @@
   reviewed tree to stable `0.20.46` only after the session endpoint is deployed
   and the isolated pinned-app launch smoke passes.
 
-## 0.20.46 — Restore exact ChatGPT Store compatibility
+## 0.20.46 — Ship hardened managed apps and the embedded Tasks board
 
+- Promotes the tested `0.20.46-beta.2` tree without changing its managed
+  profile or bundle fingerprints.
 - Updates the coordinated reviewed ChatGPT pin to desktop `26.803.81509`,
   embedded Codex `0.147.0-alpha.6.6`, and Windows Store package
-  `26.803.10989.0`, restoring managed installation while keeping artifact,
-  signature, runtime, and version checks exact and fail-closed.
-- Retries gateway model-catalog body-read timeouts as readiness failures while
-  preserving malformed-catalog failures and one shared bounded retry policy.
-- Prevents cooperating verbatim-relay hosts from adding external sources on
-  every managed relay surface, including the default Claude slash command.
-- Preserves the original vendor-install failure and the untouched sibling app
-  during targeted recovery, instead of replacing useful diagnostics or
-  disturbing an otherwise healthy managed app.
-- Accepts the control plane's `cancelled` task progress value in `impel tasks`
-  validation and command help.
-- Carries the exact-pin compatibility repair through the `0.20.46` prerelease
-  train before stable promotion.
+  `26.803.10989.0`, keeping artifact, signature, runtime, and version checks
+  exact and fail-closed.
+- Embeds the authenticated canonical Impel Tasks board in managed macOS Claude
+  and ChatGPT apps through a sandboxed, tenant-isolated web view while retaining
+  tenant-bound headless Tasks tools on Windows and in both CLIs.
+- Closes every running managed macOS app before rewriting its profile and Tasks
+  preloads, then reopens only the exact managed launchers the update closed;
+  current bundles still avoid unnecessary rebuilds.
+- Uses a code-mode-compatible Codex model for explicit tenant-agent adapters
+  and refreshes existing generated adapters through the managed-agent manifest.
+- Keeps Tasks cold starts and the native navigation fallback reliable, permits
+  only the reviewed GitHub avatar origin, and gives reasoning-capable Claude
+  doctor probes enough output budget with actionable non-terminal stop reasons.
+- Retries gateway model-catalog body-read timeouts as readiness failures,
+  preserves original targeted-recovery diagnostics and healthy sibling apps,
+  prevents external-source additions on managed verbatim-relay surfaces, and
+  accepts the control plane's `cancelled` task progress value.
 
 ## 0.20.41 — Windows onboarding: converge over an already-installed Store ChatGPT
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.20.46-beta.2",
+  "version": "0.20.47",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/desktopTasks.js

@@ -483,6 +483,9 @@ if (
       } catch {}
       return window.isVisible?.() !== false;
     };
+    const fallbackHostWindow = () => BrowserWindow.getAllWindows()
+      .filter(isPrimaryWindow)
+      .sort((left, right) => left.id - right.id)[0] || null;
     const createView = (window) => {
       const state = stateFor(window);
       if (state.view && !state.view.webContents.isDestroyed()) return state;
@@ -573,8 +576,12 @@ if (
       const content = window.getContentBounds();
       state.nativeNav.setBounds({ x: content.x + 12, y: content.y + Math.max(48, content.height - 92), width: Math.min(120, Math.max(80, content.width - 24)), height: 38 });
     };
-    const ensureNativeNav = (window) => {
-      if (!isPrimaryWindow(window)) return;
+    const ensureNativeNav = () => {
+      // Renderer probes finish independently. Always bind the singleton
+      // fallback to the earliest surviving host window, not whichever visible
+      // auxiliary renderer happens to exhaust its probe retries first.
+      const window = fallbackHostWindow();
+      if (!window) return;
       const state = stateFor(window);
       if (state.nativeNav && !state.nativeNav.isDestroyed()) return;
       // Auxiliary vendor windows (for example Codex's hidden avatar overlay)
@@ -641,7 +648,7 @@ if (
               state.hasDomNavigation = true;
               for (const owner of BrowserWindow.getAllWindows()) removeNativeNav(owner);
             } else if (attempt < 3) setTimeout(() => inject(attempt + 1), 1000);
-            else if (!state.hasDomNavigation && !hasDomNavigation) ensureNativeNav(window);
+            else if (!state.hasDomNavigation && !hasDomNavigation) ensureNativeNav();
           })
           .catch(() => record("navigation-injection-failed"));
       };