impel-cli 0.20.59 → 0.20.61

package/RELEASE_NOTES.md

@@ -1,5 +1,24 @@
 # Release notes
 
+## 0.20.61 — Silence the Codex apps connector at startup
+
+- Passes `features.apps=false` to tenant Codex CLI sessions so Codex no longer
+  contributes its hosted `codex_apps` connector, which handshaked against the
+  gateway passthrough without a credential and printed an HTTP 401 "MCP startup
+  incomplete" warning on every `impel codex` launch. The 0.20.59 mitigation set
+  `enable_mcp_apps=false`, which only governs MCP-UI rendering and left the
+  connector enabled.
+
+## 0.20.60 — Fix managed Codex launch discovery
+
+- Fixes `impel codex` failing with "not authenticated and no enrolled managed
+  application is installed" on devices enrolled through the signed runner:
+  discovery now maps `codex` to ChatGPT descriptors like the legacy and
+  Windows paths, preferring a standalone Codex enrollment for the same tenant.
+- Fix Codex CLI hook trust fingerprints to include the cross-platform command
+  definition. This keeps managed session hooks trusted after Codex upgrades
+  instead of repeatedly showing startup review warnings.
+
 ## 0.20.59 — Stabilize Codex CLI startup
 
 - Disables the optional standalone Code Mode host for headless Codex CLI

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.20.59",
+  "version": "0.20.61",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/cliProfiles.js

@@ -19,7 +19,7 @@ import {
 } from "./selfInvocation.js";
 import { applyImpelClaudeSandbox } from "./claudeSandbox.js";
 import { renameWithWindowsRetry } from "./windowsFs.js";
-import { ensureClaudeSessionHooks, ensureCodexSessionHooks } from "./sessionHooks.js";
+import { ensureClaudeSessionHooks, removeManagedCodexSessionHooks } from "./sessionHooks.js";
 import { RUNTIME_BRAND } from "./runtimeBrand.js";
 import { managedCodexCliCatalog } from "./modelCatalog.js";
 import { codexModelsManifestPath, syncedCodexCatalogMatches } from "./modelsManifest.js";
@@ -298,7 +298,12 @@ export function ensureImpelCodexProfile(gatewayUrl, tenantId, { crossAppModels =
     writePrivateFile(codexCatalog, `${JSON.stringify(managedCodexCliCatalog(), null, 2)}\n`);
     fs.rmSync(codexModelsManifestPath(codexHome), { force: true });
   }
-  if (RUNTIME_BRAND.features.sessions) ensureCodexSessionHooks(codexHome, tenantId, "codex_cli");
+  // Codex CLI profiles intentionally do not install lifecycle hooks. Hooks
+  // are a desktop-session integration and Codex now reviews every user-layer
+  // hook at startup (including plugin hooks), producing noisy prompts and
+  // making the effective hook count depend on the current project. Telemetry
+  // for CLI sessions is collected through the token heartbeat instead.
+  removeManagedCodexSessionHooks(codexHome);
   secureManagedCodexHome(codexHome);
   return { codexHome, configPath, catalogPath: codexCatalog, syncedCatalog: keepSyncedCatalog };
 }

package/src/codexSecurity.js

@@ -162,13 +162,24 @@ export function enableManagedCodexDesktopCodeModeHost(
   toml,
   configPath = "managed Codex desktop config",
 ) {
-  return upsertManagedScalar(
+  const withCodeModeHost = upsertManagedScalar(
     toml,
     "features",
     "code_mode_host",
     "true",
     configPath,
   );
+  // Managed desktop profiles do not ship the native Codex Apps companion and
+  // must not eagerly initialize the vendor `codex_apps` MCP client. That
+  // client expects OpenAI account credentials, while Impel routes inference
+  // through the gateway and intentionally has no native account token.
+  return upsertManagedScalar(
+    withCodeModeHost,
+    "features",
+    "enable_mcp_apps",
+    "false",
+    configPath,
+  );
 }
 
 function assertSafeManagedPath(target, expectedType) {

package/src/commands/launch.js

@@ -85,10 +85,16 @@ const IMPEL_CODEX_RUNTIME_OVERRIDES = [
   // launcher path for tenant CLI sessions so a missing helper cannot abort
   // startup. Desktop bundles that include the helper enable it explicitly.
   "features.code_mode_host=false",
-  // Headless CLI sessions do not render MCP Apps. Disabling the connector
-  // avoids an eager codex_apps initialize against the vendor gateway, which
-  // otherwise fails with HTTP 401 when no native account credential exists.
+  // Codex contributes the hosted codex_apps connector whenever the stable
+  // `apps` feature is on. It handshakes against chatgpt_base_url with no
+  // gateway credential, so headless tenant sessions get an HTTP 401 at
+  // startup. `enable_mcp_apps` only governs MCP-UI rendering and does not
+  // gate the connector; keep it off as well since the CLI never renders apps.
+  "features.apps=false",
   "features.enable_mcp_apps=false",
+  // CLI profiles do not load desktop/plugin lifecycle bundles. Plugin hooks
+  // are user-layer code and newer Codex versions review every one at startup.
+  "features.plugins=false",
 ];
 
 const IMPEL_CODEX_UNRESTRICTED_ARGUMENT = "--dangerously-bypass-approvals-and-sandbox";

package/src/commands/sessions.js

@@ -176,10 +176,6 @@ export async function cmdSessions(argv) {
       });
       if (flags.provider === "codex") {
         maybeRepairManagedCodexApp(flags.tenant);
-        // Same guaranteed-to-run channel, second artifact: keep the isolated
-        // CLI Codex model catalog converging from codex session events too
-        // (TTL + heartbeat-locked, detached `models sync --stale-only`).
-        maybeSyncCliModels(flags.tenant);
       }
       // The Claude mirror of the codex repair above: Claude Desktop rewrites
       // its co-owned profile files too, and its session hooks are the only

package/src/managedApps.js

@@ -79,7 +79,7 @@ function legacyMacCandidates(tool, home, applicationsRoot) {
   return candidates;
 }
 
-function runnerEnvelopeCandidate(envelopePath, launcher, tool, home) {
+function runnerEnvelopeCandidate(envelopePath, launcher, applicationId, home) {
   if (!regularFile(envelopePath) || !regularFile(launcher)) return null;
   let envelope;
   try {
@@ -95,11 +95,11 @@ function runnerEnvelopeCandidate(envelopePath, launcher, tool, home) {
     envelope?.schemaVersion !== 1
     || payload?.kind !== "com.useimpel.managed-application-descriptor"
     || payload?.runtimeContract?.entrypoint !== "engine/main.mjs"
-    || payload?.application?.id !== tool
-    || payload?.application?.adapter !== tool
+    || payload?.application?.id !== applicationId
+    || payload?.application?.adapter !== applicationId
     || !TENANT.test(tenantId || "")
     || String(tenantId).includes("..")
-    || payload?.logicalApplicationId !== `${tenantId}.${tool}`
+    || payload?.logicalApplicationId !== `${tenantId}.${applicationId}`
   ) return null;
   const credential = path.join(home, ".config", "impel", "apps", "credentials", `${tenantId}.json`);
   if (!regularFile(credential)) return null;
@@ -120,25 +120,28 @@ function managedRunnerMacCandidates(tool, home, descriptorRoot, runnerLauncher)
   } catch {
     return [];
   }
-  const candidates = [];
-  for (const entry of entries.sort((left, right) => left.name.localeCompare(right.name))) {
-    if (!entry.isDirectory() || !entry.name.endsWith(`.${tool}`)) continue;
-    const directory = path.join(descriptorRoot, entry.name);
-    let envelopes;
-    try {
-      envelopes = fs.readdirSync(directory, { withFileTypes: true });
-    } catch {
-      continue;
-    }
-    for (const envelope of envelopes.sort((left, right) => left.name.localeCompare(right.name))) {
-      if (!envelope.isFile() || !envelope.name.endsWith(".json")) continue;
-      const candidate = runnerEnvelopeCandidate(path.join(directory, envelope.name), runnerLauncher, tool, home);
-      if (!candidate || candidate.logicalApplicationId !== entry.name) continue;
-      candidates.push(candidate);
-      break;
+  entries.sort((left, right) => left.name.localeCompare(right.name));
+  const byTenant = new Map();
+  for (const applicationId of APPLICATIONS_BY_TOOL[tool]) {
+    for (const entry of entries) {
+      if (!entry.isDirectory() || !entry.name.endsWith(`.${applicationId}`)) continue;
+      const directory = path.join(descriptorRoot, entry.name);
+      let envelopes;
+      try {
+        envelopes = fs.readdirSync(directory, { withFileTypes: true });
+      } catch {
+        continue;
+      }
+      for (const envelope of envelopes.sort((left, right) => left.name.localeCompare(right.name))) {
+        if (!envelope.isFile() || !envelope.name.endsWith(".json")) continue;
+        const candidate = runnerEnvelopeCandidate(path.join(directory, envelope.name), runnerLauncher, applicationId, home);
+        if (!candidate || candidate.logicalApplicationId !== entry.name) continue;
+        if (!byTenant.has(candidate.tenantId)) byTenant.set(candidate.tenantId, candidate);
+        break;
+      }
     }
   }
-  return candidates;
+  return [...byTenant.values()];
 }
 
 function macCandidates(tool, home, applicationsRoot, descriptorRoot, runnerLauncher) {

package/src/managedProfileVersion.js

@@ -14,4 +14,4 @@
 // reasserting the FALLBACK_MODELS floor, records provenance in
 // models-manifest.json, and (with cross-app models enabled) routes the CLI
 // provider through the experimental OpenAI-compatible gateway path.
-export const CURRENT_CONFIG_VERSION = 45;
+export const CURRENT_CONFIG_VERSION = 46;

package/src/sessionHooks.js

@@ -246,3 +246,27 @@ export function ensureCodexSessionHooks(codexHome, tenantId, surface = "codex_cl
   replaceManagedTrustBlock(configPath, trustEntries);
   return { hooksPath, configPath, events: [...CODEX_SESSION_EVENTS], trustEntries };
 }
+
+/** Remove Impel-owned CLI hooks while preserving user-authored hooks. */
+export function removeManagedCodexSessionHooks(codexHome) {
+  const hooksPath = path.join(codexHome, "hooks.json");
+  if (!fs.existsSync(hooksPath)) return;
+  const document = readJsonObject(hooksPath);
+  const hooks = document.hooks && typeof document.hooks === "object" && !Array.isArray(document.hooks)
+    ? { ...document.hooks } : {};
+  for (const event of Object.keys(hooks)) {
+    hooks[event] = Array.isArray(hooks[event])
+      ? hooks[event].map((group) => {
+        if (!group || typeof group !== "object" || !Array.isArray(group.hooks)) return group;
+        const retained = group.hooks.filter((handler) => !handlerIsManaged(handler));
+        return retained.length ? { ...group, hooks: retained } : null;
+      }).filter(Boolean)
+      : hooks[event];
+    if (Array.isArray(hooks[event]) && hooks[event].length === 0) delete hooks[event];
+  }
+  if (Object.keys(hooks).length) document.hooks = hooks;
+  else delete document.hooks;
+  writePrivateJson(hooksPath, document);
+  const configPath = path.join(codexHome, "config.toml");
+  if (fs.existsSync(configPath)) replaceManagedTrustBlock(configPath, []);
+}