impel-cli 0.20.60 → 0.20.62

package/RELEASE_NOTES.md

@@ -1,5 +1,25 @@
 # Release notes
 
+## 0.20.62 — Silence the Codex apps connector in desktop profiles
+
+- Persists `features.apps = false` in the managed ChatGPT desktop `config.toml`
+  so the hosted `codex_apps` connector no longer handshakes against the gateway
+  passthrough without a credential (HTTP 401 "MCP startup incomplete") when
+  the embedded Codex is launched from that profile. 0.20.61 applied this gate
+  only as a runtime override on `impel codex`; the desktop writer still set
+  `enable_mcp_apps=false` alone, which governs MCP-UI rendering and leaves the
+  connector enabled. Bumps the managed config version so existing installs
+  rewrite the profile.
+
+## 0.20.61 — Silence the Codex apps connector at startup
+
+- Passes `features.apps=false` to tenant Codex CLI sessions so Codex no longer
+  contributes its hosted `codex_apps` connector, which handshaked against the
+  gateway passthrough without a credential and printed an HTTP 401 "MCP startup
+  incomplete" warning on every `impel codex` launch. The 0.20.59 mitigation set
+  `enable_mcp_apps=false`, which only governs MCP-UI rendering and left the
+  connector enabled.
+
 ## 0.20.60 — Fix managed Codex launch discovery
 
 - Fixes `impel codex` failing with "not authenticated and no enrolled managed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.20.60",
+  "version": "0.20.62",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/apps.js

@@ -1589,7 +1589,7 @@ function mergeManagedChatGPTToml(current, managed) {
  * as staleness so the profile heals immediately instead of waiting out the
  * manifest TTL.
  */
-export function managedChatGPTConfigDrifted(paths) {
+export function managedChatGPTConfigDrifted(paths, platform = process.platform) {
   let current;
   try {
     current = fs.readFileSync(path.join(paths.chatgpt.codexHome, "config.toml"), "utf8");
@@ -1603,6 +1603,12 @@ export function managedChatGPTConfigDrifted(paths) {
   // out the refresh TTL. Configs from generations before the key existed are
   // merely stale (the manifest version bump rewrites them), never drift —
   // require it only once this install's manifest proves it was written.
+  //
+  // Only macOS demands the enabled value. The impel-apps profile generator
+  // deliberately emits `false` off macOS, where no companion check proves
+  // codex-code-mode-host shipped; requiring `true` there would flag every
+  // generated Windows profile as drifted and regenerate it on each refresh.
+  // Off macOS, require only that the key survives the vendor settings writer.
   let manifestConfigVersion = 0;
   try {
     manifestConfigVersion = Number(JSON.parse(
@@ -1612,8 +1618,11 @@ export function managedChatGPTConfigDrifted(paths) {
     // Without a readable manifest the version gate stays closed.
   }
   const featuresTable = current.match(/^\[features\]\n(?:[^[\n][^\n]*\n|\n)*/mu)?.[0] || "";
+  const requiredCodeModeHost = platform === "darwin"
+    ? /^code_mode_host = true$/mu
+    : /^code_mode_host = (?:true|false)$/mu;
   const featureKeysDropped = manifestConfigVersion >= 35
-    && !/^code_mode_host = true$/mu.test(featuresTable);
+    && !requiredCodeModeHost.test(featuresTable);
   return !current.includes(CHATGPT_CONFIG_START)
     || readTopLevelTomlString(current, "model_provider") !== RUNTIME_BRAND.cli.providerId
     || !readTopLevelTomlString(current, "chatgpt_base_url")

package/src/codexSecurity.js

@@ -169,17 +169,26 @@ export function enableManagedCodexDesktopCodeModeHost(
     "true",
     configPath,
   );
-  // Managed desktop profiles do not ship the native Codex Apps companion and
-  // must not eagerly initialize the vendor `codex_apps` MCP client. That
-  // client expects OpenAI account credentials, while Impel routes inference
-  // through the gateway and intentionally has no native account token.
-  return upsertManagedScalar(
+  // Codex contributes the hosted `codex_apps` connector whenever the stable
+  // `apps` feature is on. It handshakes against chatgpt_base_url with the
+  // native OpenAI account credential, which a gateway-routed profile does not
+  // have, so the gateway answers HTTP 401 at every startup. `enable_mcp_apps`
+  // only governs MCP-UI rendering and does not gate the connector; keep it
+  // off as well since the managed desktop never renders apps.
+  const withoutMcpApps = upsertManagedScalar(
     withCodeModeHost,
     "features",
     "enable_mcp_apps",
     "false",
     configPath,
   );
+  return upsertManagedScalar(
+    withoutMcpApps,
+    "features",
+    "apps",
+    "false",
+    configPath,
+  );
 }
 
 function assertSafeManagedPath(target, expectedType) {

package/src/commands/launch.js

@@ -79,20 +79,37 @@ export const IMPEL_CODEX_SPECIALIST_DELEGATION_INSTRUCTIONS =
 export const IMPEL_CODEX_PARENT_DELEGATION_INSTRUCTIONS =
   `${IMPEL_CODEX_SPECIALIST_DELEGATION_INSTRUCTIONS} ${IMPEL_CUSTOM_AGENT_VERBATIM_RELAY_APPENDIX}`;
 
-const IMPEL_CODEX_RUNTIME_OVERRIDES = [
-  // The standalone companion is optional and is not shipped by every native
-  // Codex distribution (notably some Windows/macOS CLI packages). Disable the
-  // launcher path for tenant CLI sessions so a missing helper cannot abort
-  // startup. Desktop bundles that include the helper enable it explicitly.
-  "features.code_mode_host=false",
-  // Headless CLI sessions do not render MCP Apps. Disabling the connector
-  // avoids an eager codex_apps initialize against the vendor gateway, which
-  // otherwise fails with HTTP 401 when no native account credential exists.
-  "features.enable_mcp_apps=false",
-  // CLI profiles do not load desktop/plugin lifecycle bundles. Plugin hooks
-  // are user-layer code and newer Codex versions review every one at startup.
-  "features.plugins=false",
-];
+function impelCodexRuntimeOverrides(platform) {
+  return [
+    // Pinned Codex ships `code_mode_host` as a stable, default-on feature and
+    // fails closed when a code_mode_only model is selected while it is off —
+    // which is every 5.6-family model in the managed catalog. The flag is
+    // therefore derived from the platform rather than pinned to one value: the
+    // two failure modes it sits between are platform-specific, and forcing
+    // either answer onto both platforms regresses the other.
+    //
+    // macOS: resolveReviewedVendorCliBinary already refuses to launch a Codex
+    // whose codex-code-mode-host companion is missing, unsigned, or from the
+    // wrong team (see verifyReviewedMacVendorCli in ../vendorCliBinaries.js).
+    // Reaching launch proves the helper is present, so disabling the feature is
+    // pure loss.
+    //
+    // Other platforms: verifyReviewedWindowsVendorCli gates on version only and
+    // cannot prove the companion shipped, so keep the feature off rather than
+    // risk aborting startup on a distribution that omits it.
+    `features.code_mode_host=${platform === "darwin" ? "true" : "false"}`,
+    // Codex contributes the hosted codex_apps connector whenever the stable
+    // `apps` feature is on. It handshakes against chatgpt_base_url with no
+    // gateway credential, so headless tenant sessions get an HTTP 401 at
+    // startup. `enable_mcp_apps` only governs MCP-UI rendering and does not
+    // gate the connector; keep it off as well since the CLI never renders apps.
+    "features.apps=false",
+    "features.enable_mcp_apps=false",
+    // CLI profiles do not load desktop/plugin lifecycle bundles. Plugin hooks
+    // are user-layer code and newer Codex versions review every one at startup.
+    "features.plugins=false",
+  ];
+}
 
 const IMPEL_CODEX_UNRESTRICTED_ARGUMENT = "--dangerously-bypass-approvals-and-sandbox";
 const IMPEL_CLAUDE_MANAGED_AGENT_ARGUMENTS = [
@@ -109,6 +126,7 @@ const IMPEL_CLAUDE_MANAGED_AGENT_ARGUMENTS = [
 export function impelLaunchArguments(tool, argv, {
   claudeManagedAgent = null,
   codexAgentProfile = null,
+  platform = process.platform,
 } = {}) {
   if (!RUNTIME_BRAND.features.agents) return [...argv];
   if (tool === "claude") {
@@ -169,7 +187,7 @@ export function impelLaunchArguments(tool, argv, {
         `developer_instructions=${JSON.stringify(IMPEL_CODEX_PARENT_DELEGATION_INSTRUCTIONS)}`,
         IMPEL_CODEX_UNRESTRICTED_ARGUMENT,
       ]),
-      ...IMPEL_CODEX_RUNTIME_OVERRIDES.flatMap((override) => ["-c", override]),
+      ...impelCodexRuntimeOverrides(platform).flatMap((override) => ["-c", override]),
       ...argv,
     ];
   }

package/src/managedProfileVersion.js

@@ -14,4 +14,7 @@
 // reasserting the FALLBACK_MODELS floor, records provenance in
 // models-manifest.json, and (with cross-app models enabled) routes the CLI
 // provider through the experimental OpenAI-compatible gateway path.
-export const CURRENT_CONFIG_VERSION = 46;
+// v47 persists `features.apps = false` in the managed ChatGPT desktop profile
+// so the hosted codex_apps connector stops handshaking against the gateway
+// without a credential (the same gate 0.20.61 passed to CLI sessions).
+export const CURRENT_CONFIG_VERSION = 47;