@parall/agent-core 1.31.0 → 1.32.1

package/dist/index.d.ts

@@ -1,14 +1,16 @@
-export * from "./provider-config.js";
-export * from "./types.js";
-export * from "./session-state.js";
-export * from "./routing.js";
-export * from "./event-format.js";
-export * from "./prompt-fragments.js";
-export * from "./bridge-workspace.js";
-export * from "./dispatch-adapter.js";
-export { createLogger, childLogger } from "./logger.js";
-export * from "./gateway-base.js";
-export * from "./platform-config.js";
-export { writeSkillFiles, buildSkillReferences, SKILLS } from "./skills/index.js";
-export type { SkillMeta } from "./skills/index.js";
+export * from './provider-config.js';
+export * from './types.js';
+export * from './session-state.js';
+export * from './routing.js';
+export * from './event-format.js';
+export * from './prompt-fragments.js';
+export * from './bridge-workspace.js';
+export * from './dispatch-adapter.js';
+export { createLogger, childLogger } from './logger.js';
+export * from './gateway-base.js';
+export * from './platform-config.js';
+export { writeSkillFiles, buildSkillReferences, SKILLS } from './skills/index.js';
+export type { SkillMeta } from './skills/index.js';
+export { initAgentTelemetry, createOtelLogger, runWithSessionKey, startDispatchSpan, endDispatchSpan, recordDispatchMetric, recordMissingReply, } from './telemetry.js';
+export type { TelemetryHandle } from './telemetry.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAClF,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAClF,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -1,12 +1,13 @@
-export * from "./provider-config.js";
-export * from "./types.js";
-export * from "./session-state.js";
-export * from "./routing.js";
-export * from "./event-format.js";
-export * from "./prompt-fragments.js";
-export * from "./bridge-workspace.js";
-export * from "./dispatch-adapter.js";
-export { createLogger, childLogger } from "./logger.js";
-export * from "./gateway-base.js";
-export * from "./platform-config.js";
-export { writeSkillFiles, buildSkillReferences, SKILLS } from "./skills/index.js";
+export * from './provider-config.js';
+export * from './types.js';
+export * from './session-state.js';
+export * from './routing.js';
+export * from './event-format.js';
+export * from './prompt-fragments.js';
+export * from './bridge-workspace.js';
+export * from './dispatch-adapter.js';
+export { createLogger, childLogger } from './logger.js';
+export * from './gateway-base.js';
+export * from './platform-config.js';
+export { writeSkillFiles, buildSkillReferences, SKILLS } from './skills/index.js';
+export { initAgentTelemetry, createOtelLogger, runWithSessionKey, startDispatchSpan, endDispatchSpan, recordDispatchMetric, recordMissingReply, } from './telemetry.js';

package/dist/internal/attachment-input.d.ts

@@ -1,6 +1,6 @@
-import type { DispatchContext, GatewayLogger } from "../dispatch-adapter.js";
-import type { LocalAttachmentResult, PreparedLocalImage } from "../prompt-fragments.js";
-import type { ParallEvent } from "../types.js";
+import type { DispatchContext, GatewayLogger } from '../dispatch-adapter.js';
+import type { LocalAttachmentResult, PreparedLocalImage } from '../prompt-fragments.js';
+import type { ParallEvent } from '../types.js';
 export type { LocalAttachmentResult, PreparedLocalImage };
 export type LocalAttachmentOptions = {
     workspaceDir: string;

package/dist/internal/attachment-input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attachment-input.d.ts","sourceRoot":"","sources":["../../src/internal/attachment-input.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK/C,YAAY,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;AAE1D,MAAM,MAAM,sBAAsB,GAAG;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAC9D;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,QAAoB,CAAC;AACpE,eAAO,MAAM,sCAAsC,QAAS,CAAC;AAC7D,eAAO,MAAM,yBAAyB,QAAsB,CAAC;AAC7D,eAAO,MAAM,+BAA+B,QAAY,CAAC;AAmBzD,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,qBAAqB,CAAC,CA2HhC;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,qBAAqB,GAC5B,MAAM,CAGR;AAED,wBAAsB,iCAAiC,CACrD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAG/D;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAI,CAchF;AAMD;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAgB9E"}
+{"version":3,"file":"attachment-input.d.ts","sourceRoot":"","sources":["../../src/internal/attachment-input.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK/C,YAAY,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;AAE1D,MAAM,MAAM,sBAAsB,GAAG;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAC9D;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,QAAoB,CAAC;AACpE,eAAO,MAAM,sCAAsC,QAAS,CAAC;AAC7D,eAAO,MAAM,yBAAyB,QAAsB,CAAC;AAC7D,eAAO,MAAM,+BAA+B,QAAY,CAAC;AAmBzD,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,qBAAqB,CAAC,CAmIhC;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAG7F;AAED,wBAAsB,iCAAiC,CACrD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAG/D;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAI,CAchF;AAMD;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAgB9E"}

package/dist/internal/attachment-input.js

@@ -1,9 +1,9 @@
-import { execSync } from "node:child_process";
-import { constants } from "node:fs";
-import * as fsSync from "node:fs";
-import * as fs from "node:fs/promises";
-import * as path from "node:path";
-import { formatBytes, renderLocalAttachmentSection } from "../prompt-fragments.js";
+import { execSync } from 'node:child_process';
+import { constants } from 'node:fs';
+import * as fsSync from 'node:fs';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { formatBytes, renderLocalAttachmentSection } from '../prompt-fragments.js';
 /**
  * Per-dispatch cap on image bytes a runtime turn receives. Counts declared
  * attachment sizes plus fresh download bytes; cache hits are NOT recharged
@@ -23,11 +23,11 @@ export const DEFAULT_ATTACHMENT_DOWNLOAD_TIMEOUT_MS = 30_000;
 export const DEFAULT_ATTACHMENT_TTL_MS = 24 * 60 * 60 * 1000;
 export const DEFAULT_MAINTENANCE_COOLDOWN_MS = 60 * 1000;
 const SUPPORTED_IMAGE_MIME_TYPES = new Set([
-    "image/png",
-    "image/jpeg",
-    "image/jpg",
-    "image/webp",
-    "image/gif",
+    'image/png',
+    'image/jpeg',
+    'image/jpg',
+    'image/webp',
+    'image/gif',
 ]);
 // Process-global state — correct under the current "one gateway per agent"
 // architecture (each runtime bridge is a single-tenant subprocess, so all
@@ -165,7 +165,7 @@ export function pinLocalAttachmentPaths(images) {
     };
 }
 function attachmentRootDir(workspaceDir) {
-    return path.join(path.resolve(workspaceDir), ".parall", "attachments");
+    return path.join(path.resolve(workspaceDir), '.parall', 'attachments');
 }
 /**
  * Append `.parall/` to the workspace's git info/exclude. Best-effort — a
@@ -175,18 +175,18 @@ function attachmentRootDir(workspaceDir) {
  */
 export function ensureLocalAttachmentGitExclude(workingDirectory) {
     try {
-        const rel = execSync("git rev-parse --git-path info/exclude", {
+        const rel = execSync('git rev-parse --git-path info/exclude', {
             cwd: workingDirectory,
-            encoding: "utf8",
-            stdio: ["ignore", "pipe", "ignore"],
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
         }).trim();
         const excludePath = path.isAbsolute(rel) ? rel : path.join(workingDirectory, rel);
         fsSync.mkdirSync(path.dirname(excludePath), { recursive: true });
-        const existing = fsSync.existsSync(excludePath) ? fsSync.readFileSync(excludePath, "utf8") : "";
-        if (existing.split(/\r?\n/).some((line) => line.trim() === ".parall/"))
+        const existing = fsSync.existsSync(excludePath) ? fsSync.readFileSync(excludePath, 'utf8') : '';
+        if (existing.split(/\r?\n/).some((line) => line.trim() === '.parall/'))
             return;
-        const prefix = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
-        fsSync.appendFileSync(excludePath, `${prefix}.parall/\n`, "utf8");
+        const prefix = existing.length > 0 && !existing.endsWith('\n') ? '\n' : '';
+        fsSync.appendFileSync(excludePath, `${prefix}.parall/\n`, 'utf8');
     }
     catch {
         // Best-effort only. A missing exclude entry should not block dispatch.
@@ -232,7 +232,7 @@ function scheduleAttachmentMaintenance(rootDir, opts) {
 }
 async function ensureAttachmentRootDir(workspaceDir) {
     const workspaceRoot = path.resolve(workspaceDir);
-    const parallDir = path.join(workspaceRoot, ".parall");
+    const parallDir = path.join(workspaceRoot, '.parall');
     const rootDir = attachmentRootDir(workspaceRoot);
     await fs.mkdir(workspaceRoot, { recursive: true });
     await ensurePathIsNotSymlink(parallDir);
@@ -256,14 +256,14 @@ async function ensurePathIsNotSymlink(filePath) {
         }
     }
     catch (err) {
-        if (err?.code === "ENOENT")
+        if (err?.code === 'ENOENT')
             return;
         throw err;
     }
 }
 function isPathInside(childPath, parentPath) {
     const rel = path.relative(parentPath, childPath);
-    return rel === "" || (!!rel && !rel.startsWith("..") && !path.isAbsolute(rel));
+    return rel === '' || (!!rel && !rel.startsWith('..') && !path.isAbsolute(rel));
 }
 async function existingUsableFile(filePath, expectedSize, rootDir) {
     try {
@@ -498,7 +498,7 @@ async function downloadAttachmentToFile(url, filePath, maxBytes, timeoutMs, root
     catch {
         throw new Error(`invalid attachment URL`);
     }
-    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+    if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
         throw new Error(`refusing attachment URL with scheme ${parsed.protocol}`);
     }
     const controller = new AbortController();
@@ -512,7 +512,7 @@ async function downloadAttachmentToFile(url, filePath, maxBytes, timeoutMs, root
             throw new Error(`${res.status} ${res.statusText}`);
         }
         // Content-Length is only an early-exit hint; the stream byte counter below is authoritative.
-        const contentLength = parseContentLength(res.headers.get("content-length"));
+        const contentLength = parseContentLength(res.headers.get('content-length'));
         if (contentLength !== undefined && contentLength > maxBytes) {
             throw new Error(`download would exceed ${formatBytes(maxBytes)} remaining turn limit`);
         }
@@ -548,7 +548,7 @@ async function withTimeout(promise, timeoutMs, message) {
 }
 async function writeResponseToFileWithLimit(res, filePath, maxBytes, rootDir) {
     if (maxBytes <= 0) {
-        throw new Error("download would exceed turn limit");
+        throw new Error('download would exceed turn limit');
     }
     const tmpPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
     const { file, openedStat } = await openLocalTempFileInsideRoot(tmpPath, rootDir);
@@ -615,22 +615,22 @@ function localFileName(attachmentId, fileName, mimeType) {
 }
 function extensionForMime(mimeType) {
     switch (mimeType.toLowerCase()) {
-        case "image/jpeg":
-        case "image/jpg":
-            return ".jpg";
-        case "image/webp":
-            return ".webp";
-        case "image/gif":
-            return ".gif";
-        case "image/png":
+        case 'image/jpeg':
+        case 'image/jpg':
+            return '.jpg';
+        case 'image/webp':
+            return '.webp';
+        case 'image/gif':
+            return '.gif';
+        case 'image/png':
         default:
-            return ".png";
+            return '.png';
     }
 }
 function sanitizePathSegment(value) {
-    const safe = value.replace(/[^A-Za-z0-9._-]+/g, "_").replace(/^_+|_+$/g, "");
+    const safe = value.replace(/[^A-Za-z0-9._-]+/g, '_').replace(/^_+|_+$/g, '');
     if (!safe || /^\.+$/.test(safe))
-        return "attachment";
+        return 'attachment';
     return safe;
 }
 async function downloadedFileMatchesImageMime(filePath, mimeType, rootDir) {
@@ -646,36 +646,39 @@ async function downloadedFileMatchesImageMime(filePath, mimeType, rootDir) {
 }
 function imageHeaderMatches(bytes, mimeType) {
     switch (mimeType.toLowerCase()) {
-        case "image/png":
-            return bytes.length >= 8
-                && bytes[0] === 0x89
-                && bytes[1] === 0x50
-                && bytes[2] === 0x4e
-                && bytes[3] === 0x47
-                && bytes[4] === 0x0d
-                && bytes[5] === 0x0a
-                && bytes[6] === 0x1a
-                && bytes[7] === 0x0a;
-        case "image/jpeg":
-        case "image/jpg":
+        case 'image/png':
+            return (bytes.length >= 8 &&
+                bytes[0] === 0x89 &&
+                bytes[1] === 0x50 &&
+                bytes[2] === 0x4e &&
+                bytes[3] === 0x47 &&
+                bytes[4] === 0x0d &&
+                bytes[5] === 0x0a &&
+                bytes[6] === 0x1a &&
+                bytes[7] === 0x0a);
+        case 'image/jpeg':
+        case 'image/jpg':
             return bytes.length >= 3 && bytes[0] === 0xff && bytes[1] === 0xd8 && bytes[2] === 0xff;
-        case "image/gif":
-            return bytes.length >= 6
-                && (bytes.subarray(0, 6).toString("ascii") === "GIF87a"
-                    || bytes.subarray(0, 6).toString("ascii") === "GIF89a");
-        case "image/webp":
-            return bytes.length >= 12
-                && bytes.subarray(0, 4).toString("ascii") === "RIFF"
-                && bytes.subarray(8, 12).toString("ascii") === "WEBP";
+        case 'image/gif':
+            return (bytes.length >= 6 &&
+                (bytes.subarray(0, 6).toString('ascii') === 'GIF87a' ||
+                    bytes.subarray(0, 6).toString('ascii') === 'GIF89a'));
+        case 'image/webp':
+            return (bytes.length >= 12 &&
+                bytes.subarray(0, 4).toString('ascii') === 'RIFF' &&
+                bytes.subarray(8, 12).toString('ascii') === 'WEBP');
         default:
             return false;
     }
 }
 function isAbortError(err) {
-    return err instanceof DOMException && err.name === "AbortError";
+    return err instanceof DOMException && err.name === 'AbortError';
 }
 function sanitizeMeta(value) {
-    return value.replace(/[\r\n]+/g, " ").replace(/[[\]|]/g, " ").trim();
+    return value
+        .replace(/[\r\n]+/g, ' ')
+        .replace(/[[\]|]/g, ' ')
+        .trim();
 }
 function parseContentLength(value) {
     if (!value)

package/dist/logger.d.ts

@@ -1,4 +1,4 @@
-import type { GatewayLogger } from "./dispatch-adapter.js";
+import type { GatewayLogger } from './dispatch-adapter.js';
 export declare function createLogger(prefix: string): GatewayLogger;
 export declare function childLogger(logger: GatewayLogger, sub: string): GatewayLogger;
 //# sourceMappingURL=logger.d.ts.map

package/dist/platform-config.d.ts

@@ -1,5 +1,5 @@
-import type { ParallClient } from "@parall/sdk";
-import type { GatewayLogger } from "./dispatch-adapter.js";
+import type { ParallClient } from '@parall/sdk';
+import type { GatewayLogger } from './dispatch-adapter.js';
 export interface PlatformDefaults {
     model: string | null;
     thinkingEffort: string | null;
@@ -14,6 +14,32 @@ export interface PlatformManagementProfile {
     model_management?: string | null;
 }
 export declare function isPlatformManagedProfile(profile: PlatformManagementProfile | null | undefined): boolean;
+/**
+ * Whether the platform-delivered model should be treated as an operator
+ * OVERRIDE (beats env) rather than a FLOOR (loses to env). True only when the
+ * profile is platform-managed AND not explicitly self-managed: legacy hosted
+ * profiles (model_management=null, resolved to platform server-side) are
+ * overrides; local self agents — whose delivered model is a catalog floor —
+ * are not. Pass the result as `resolveRuntimeModel`'s first argument. Keeping
+ * this derivation in one place avoids drift across the bridges' (re)config
+ * sites where the subtle null-hosted-vs-explicit-self distinction matters.
+ */
+export declare function isPlatformModelOverride(profile: PlatformManagementProfile | null | undefined): boolean;
+/**
+ * Resolve the model a runtime should launch with. Precedence:
+ *   1. platform operator override (only when the agent is platform-managed)
+ *   2. env/runtime config (PRLL_CLAUDE_MODEL / PRLL_CODEX_MODEL)
+ *   3. server-delivered model floor (applies even when model_management=self)
+ *
+ * The floor (3) is what makes self-hosted + Parall-proxy agents work: the
+ * server now delivers `agents.defaults.model` whenever the route is the
+ * catalog-gated Parall proxy, so the CLI never falls back to its built-in
+ * default (which can outrun the catalog and get rejected). Returns null when
+ * no model is resolved, so the bridge omits `--model` and lets the CLI / own
+ * login pick — the correct behavior for runtime_auth / custom routes, where
+ * the server delivers no floor.
+ */
+export declare function resolveRuntimeModel(isOperatorOverride: boolean, platformModel: string | null, configModel: string | null | undefined): string | undefined;
 export declare function createPlatformConfigManager(opts: {
     client: ParallClient;
     stateDir: string;

package/dist/platform-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-config.d.ts","sourceRoot":"","sources":["../src/platform-config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAA0B,MAAM,aAAa,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnC,OAAO,IAAI,gBAAgB,CAAC;IAC5B,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAEvG;AA8ED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB,GAAG,qBAAqB,CAoDxB"}
+{"version":3,"file":"platform-config.d.ts","sourceRoot":"","sources":["../src/platform-config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAA0B,MAAM,aAAa,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnC,OAAO,IAAI,gBAAgB,CAAC;IAC5B,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GAAG,IAAI,GAAG,SAAS,GACpD,OAAO,CAET;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,yBAAyB,GAAG,IAAI,GAAG,SAAS,GACpD,OAAO,CAET;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CACjC,kBAAkB,EAAE,OAAO,EAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACrC,MAAM,GAAG,SAAS,CAGpB;AA8ED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB,GAAG,qBAAqB,CAwDxB"}

package/dist/platform-config.js

@@ -1,16 +1,47 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
+import * as fs from 'node:fs';
+import * as path from 'node:path';
 export function isPlatformManagedProfile(profile) {
-    return profile?.machine_id != null || profile?.model_management === "platform";
+    return profile?.machine_id != null || profile?.model_management === 'platform';
 }
-const CACHE_FILENAME = "parall-platform-config.json";
+/**
+ * Whether the platform-delivered model should be treated as an operator
+ * OVERRIDE (beats env) rather than a FLOOR (loses to env). True only when the
+ * profile is platform-managed AND not explicitly self-managed: legacy hosted
+ * profiles (model_management=null, resolved to platform server-side) are
+ * overrides; local self agents — whose delivered model is a catalog floor —
+ * are not. Pass the result as `resolveRuntimeModel`'s first argument. Keeping
+ * this derivation in one place avoids drift across the bridges' (re)config
+ * sites where the subtle null-hosted-vs-explicit-self distinction matters.
+ */
+export function isPlatformModelOverride(profile) {
+    return isPlatformManagedProfile(profile) && profile?.model_management !== 'self';
+}
+/**
+ * Resolve the model a runtime should launch with. Precedence:
+ *   1. platform operator override (only when the agent is platform-managed)
+ *   2. env/runtime config (PRLL_CLAUDE_MODEL / PRLL_CODEX_MODEL)
+ *   3. server-delivered model floor (applies even when model_management=self)
+ *
+ * The floor (3) is what makes self-hosted + Parall-proxy agents work: the
+ * server now delivers `agents.defaults.model` whenever the route is the
+ * catalog-gated Parall proxy, so the CLI never falls back to its built-in
+ * default (which can outrun the catalog and get rejected). Returns null when
+ * no model is resolved, so the bridge omits `--model` and lets the CLI / own
+ * login pick — the correct behavior for runtime_auth / custom routes, where
+ * the server delivers no floor.
+ */
+export function resolveRuntimeModel(isOperatorOverride, platformModel, configModel) {
+    const operatorOverride = isOperatorOverride ? platformModel : null;
+    return operatorOverride ?? configModel ?? platformModel ?? undefined;
+}
+const CACHE_FILENAME = 'parall-platform-config.json';
 const SUPPORTED_SCHEMA_VERSION = 1;
 function cachePath(stateDir) {
     return path.join(stateDir, CACHE_FILENAME);
 }
 function loadCache(stateDir) {
     try {
-        const raw = fs.readFileSync(cachePath(stateDir), "utf-8");
+        const raw = fs.readFileSync(cachePath(stateDir), 'utf-8');
         return JSON.parse(raw);
     }
     catch {
@@ -26,12 +57,12 @@ function saveCache(stateDir, response) {
     const filePath = cachePath(stateDir);
     const tmpPath = `${filePath}.tmp`;
     fs.mkdirSync(path.dirname(filePath), { recursive: true });
-    fs.writeFileSync(tmpPath, JSON.stringify(cached, null, 2), "utf-8");
+    fs.writeFileSync(tmpPath, JSON.stringify(cached, null, 2), 'utf-8');
     fs.renameSync(tmpPath, filePath);
 }
 function runtimeModelName(canonicalModel, runtimeType, config) {
     const runtime = runtimeType?.trim();
-    if (!runtime || runtime === "openclaw")
+    if (!runtime || runtime === 'openclaw')
         return canonicalModel;
     const models = (config.models ?? {});
     const providers = (models.providers ?? {});
@@ -40,18 +71,18 @@ function runtimeModelName(canonicalModel, runtimeType, config) {
     const match = catalog.find((model) => model.id === canonicalModel);
     const runtimeNames = (match?.runtime_names ?? {});
     const runtimeName = runtimeNames[runtime];
-    return typeof runtimeName === "string" && runtimeName ? runtimeName : null;
+    return typeof runtimeName === 'string' && runtimeName ? runtimeName : null;
 }
 function extractDefaults(config, runtimeType) {
     const agents = (config.agents ?? {});
     const defaults = (agents.defaults ?? {});
     let model = null;
-    if (typeof defaults.model === "string" && defaults.model) {
-        const canonicalModel = defaults.model.replace(/^parall\//, "");
+    if (typeof defaults.model === 'string' && defaults.model) {
+        const canonicalModel = defaults.model.replace(/^parall\//, '');
         model = runtimeModelName(canonicalModel, runtimeType, config);
     }
     let thinkingEffort = null;
-    if (typeof defaults.thinking_effort === "string" && defaults.thinking_effort) {
+    if (typeof defaults.thinking_effort === 'string' && defaults.thinking_effort) {
         thinkingEffort = defaults.thinking_effort;
     }
     return { model, thinkingEffort };

package/dist/prompt-fragments.d.ts

@@ -17,8 +17,8 @@ export interface AgentIdentity {
 export declare function buildIdentity(agent?: AgentIdentity): string;
 /** @deprecated Use buildIdentity() instead. Kept for backward compat during migration. */
 export declare const PRLL_IDENTITY = "## You on Parall\n\nParall is a shared workspace where humans and agents work side by side as equals.\nYou are a participant here, not a service. You hold tasks, own decisions, and are\naccountable for the work you take on \u2014 the same way a human teammate is.\n\nThe people and agents around you are collaborators, not users to serve. Be honest,\nbe direct, and care about the outcome of the work \u2014 not just the request in front\nof you.";
-export declare const PRLL_BEHAVIOR = "## How to work here\n\n### Move work forward\nDon't wait for instructions. If you see the next step, take it. If something is\nambiguous, clarify once and proceed. If you're blocked, say what's blocking you\n\u2014 don't go silent. Initiative is expected.\n\n### Work in the open\nNothing you do exists until the system can see it. Your progress, decisions,\nblockers, and results need to live in tasks, comments, messages, or wiki pages\n\u2014 otherwise the organization is blind to your work, and so is the next agent\nwho picks up where you left off. Leave traces as you go, not at the end.\n\nFor non-trivial work: create or claim a task, mark it `in_progress`, comment\nwhen status materially changes, close it when done, and link the origin that\ntriggered it. Details: load the `parall-tasks` skill.\n\n### Communicate like a teammate\nMatch the conversation \u2014 concise in chat, thorough in docs, plain language over\njargon. Say what matters; stop when you're done. Don't narrate every tool call\nor pad replies to seem thorough.\n\n### Respect what's shared\nYou have broad latitude inside your own work. But actions that are visible to\nothers, hard to reverse, or touch shared state \u2014 sending DMs, editing shared\nwiki, reassigning others' tasks, deleting content \u2014 pause and confirm before\nacting, unless you've been explicitly authorized.\n\n### Shared workspace\nOther agents share this workspace. Before starting work, check whether someone\n\u2014 human or agent \u2014 has already picked it up. Coordination beats racing.\n\n### Permissions and approvals\nYou have real permissions based on your roles (chat member/admin, org member).\nIf you lack permission for an action, the API returns PERMISSION_DENIED with the\n`action` and `resource_uri` that were denied. When that happens, use\n`approvals request` to ask someone with permission to approve it \u2014 don't retry\nor work around the denial. Only request approval after an actual denial, never\npreemptively.\n\n### When in doubt\nPrefer asking over guessing. Prefer \"I don't know\" over fabricating. Your\ncredibility is what you bring to the workspace \u2014 protect it.";
-export declare const PRLL_REFERENCE_GUIDE = "## Parall References\n\nEvery entity on Parall has a `prll://` URI. Use these URIs to link related\nentities when you create or update tasks, comments, messages, and wiki files.\n\nAll three forms work \u2014 pick whichever fits:\n\n    prll://tsk_abc                               bare URI (auto-linked)\n    [](prll://tsk_abc)                           empty context (renders resolved title)\n    [relevant context](prll://tsk_abc)           with author annotation\n\nBare URIs and empty-context refs are preferred in most cases \u2014 the platform\nresolves and renders the entity title automatically.\n\n### URI format\n\n`prll://` follows standard URI structure: `scheme://authority/path?query#fragment`.\n\n**Entities** \u2014 the entity ID is the authority:\n\n    prll://usr_xxx          user          prll://prj_xxx          project\n    prll://tsk_xxx          task          prll://wik_xxx          wiki\n    prll://msg_xxx          message       prll://tcm_xxx          task comment\n    prll://cht_xxx          chat          prll://ase_xxx          agent session\n    prll://att_xxx          attachment    prll://sch_xxx          schedule\n                                          prll://srn_xxx          schedule run\n\n**Wiki** \u2014 path is file path, fragment is a typed anchor:\n\n    prll://wik_xxx/docs/guide.md                  file\n    prll://wik_xxx/docs/guide.md#h=Auth::OAuth    heading (:: = hierarchy)\n    prll://wik_xxx/src/auth.go?rev=<sha>#l=42-58  line range (revision-pinned)\n\n  Anchor types: `h=` heading, `l=` line/range, `s=` symbol.\n  Line anchors in persistent content require `?rev=<full-40-char-sha>`.\n\n**Chat message range**:\n\n    prll://cht_xxx#range=msg_01HA,msg_01HZ\n\n**Field access** \u2014 path selects a field (omit to reference the entity itself):\n\n    prll://tsk_xxx/description#Implementation     heading within task description\n\n### Reading context on demand\n\nAn event only carries the single triggering message. If you're mentioned in a\ngroup chat and lack context, pull what you need from the chat \u2014 don't guess:\n\n    parall messages list cht_xxx --limit 20 --before msg_xxx\n    parall messages get msg_xxx\n    parall chats get cht_xxx\n\nRule of thumb: in a group chat mention, the conversation that led up to you\nbeing called almost always matters \u2014 read it before replying. In a DM, your\nsession already has continuity, so skip the fetch unless something is unclear.\n\nSame pattern for any other entity referenced in the event: `tasks get`,\n`projects get`, `users get`, `chats get`. Follow the reflink, don't ask.\n\n### File attachments\n\nMessages may include attachments. They appear in events as:\n\n    [Attachment: prll://att_xxx | image/png | 1.2MB | screenshot.png]\n\nTo download an attachment, use the CLI:\n\n    parall files download att_xxx --output /tmp/screenshot.png\n\nTo send a file:\n\n    parall messages send prll://cht_xxx --file /tmp/output.png --text \"Done\"\n\nOr upload first and reuse across chats:\n\n    parall files upload /tmp/report.pdf\n    parall messages send prll://cht_aaa --attachment att_yyy --text \"Report\"\n    parall messages send prll://cht_bbb --attachment att_yyy --text \"FYI\"\n\n### When to reference\n\n- **Origin** \u2014 always link the message or task that triggered your work\n- **Design docs / wiki** \u2014 link specs and guides relevant to the work\n- **Related tasks** \u2014 link parent, sibling, or blocking tasks\n- **People** \u2014 link assignees or stakeholders when mentioning them\n- **Conversations** \u2014 link a chat or message range as context\n\n### Why this matters\n\nOther agents and humans read your output. References build a navigable context graph \u2014\nin multi-agent workflows, your references are the map that the next agent follows.";
+export declare const PRLL_BEHAVIOR = "## How to work here\n\n### Move work forward\nDon't wait for instructions. If you see the next step, take it. If something is\nambiguous, clarify once and proceed. If you're blocked, say what's blocking you\n\u2014 don't go silent. Initiative is expected.\n\n### Work in the open\nNothing you do exists until the system can see it. Your progress, decisions,\nblockers, and results need to live in tasks, comments, messages, or wiki pages\n\u2014 otherwise the organization is blind to your work, and so is the next agent\nwho picks up where you left off. Leave traces as you go, not at the end.\n\nFor non-trivial work: create or claim a task, mark it `in_progress`, comment\nwhen status materially changes, close it when done, and link the origin that\ntriggered it. Details: load the `parall-tasks` skill.\n\n### Communicate like a teammate\nMatch the conversation \u2014 concise in chat, thorough in docs, plain language over\njargon. Say what matters; stop when you're done. Don't narrate every tool call\nor pad replies to seem thorough.\n\n### Respect what's shared\nYou have broad latitude inside your own work. But actions that are visible to\nothers, hard to reverse, or touch shared state \u2014 sending DMs, editing shared\nwiki, reassigning others' tasks, deleting content \u2014 pause and confirm before\nacting, unless you've been explicitly authorized.\n\n### Shared workspace\nOther agents share this workspace. Before starting work, check whether someone\n\u2014 human or agent \u2014 has already picked it up. Coordination beats racing.\n\n### Permissions and approvals\nYou have real permissions based on your roles (chat member/admin, org member).\nIf you lack permission for an action, the API returns PERMISSION_DENIED with the\n`action` and `resource_uri` that were denied. The server decides whether that\naction is approvable: if it is, the CLI prints an `approvals request` command \u2014\nfill in the placeholders it shows (`--chat`, `--title`, `--reason`) and run\nit to ask someone with permission. If it is NOT approvable, the output says so;\nask a human with permission instead of requesting approval. A\n`INVALID_TARGET` error instead means you addressed the wrong kind of thing\n(e.g. a `usr_` id where a chat is expected) \u2014 follow the message (e.g. use\n`dm` for a user). Don't retry or work around a denial; only request approval\nafter an actual denial, never preemptively.\n\n### When in doubt\nPrefer asking over guessing. Prefer \"I don't know\" over fabricating. Your\ncredibility is what you bring to the workspace \u2014 protect it.";
+export declare const PRLL_REFERENCE_GUIDE = "## Parall References\n\nEvery entity on Parall has a `prll://` URI. Use these URIs to link related\nentities when you create or update tasks, comments, messages, and wiki files.\n\nAll three forms work \u2014 pick whichever fits:\n\n    prll://tsk_abc                               bare URI (auto-linked)\n    [](prll://tsk_abc)                           empty context (renders resolved title)\n    [relevant context](prll://tsk_abc)           with author annotation\n\nBare URIs and empty-context refs are preferred in most cases \u2014 the platform\nresolves and renders the entity title automatically.\n\n### URI format\n\n`prll://` follows standard URI structure: `scheme://authority/path?query#fragment`.\n\n**Entities** \u2014 the entity ID is the authority:\n\n    prll://usr_xxx          user          prll://prj_xxx          project\n    prll://tsk_xxx          task          prll://wik_xxx          wiki\n    prll://msg_xxx          message       prll://tcm_xxx          task comment\n    prll://cht_xxx          chat          prll://ase_xxx          agent session\n    prll://att_xxx          attachment    prll://sch_xxx          schedule\n                                          prll://srn_xxx          schedule run\n\n**Wiki** \u2014 path is file path, fragment is a typed anchor:\n\n    prll://wik_xxx/docs/guide.md                  file\n    prll://wik_xxx/docs/guide.md#h=Auth::OAuth    heading (:: = hierarchy)\n    prll://wik_xxx/src/auth.go?rev=<sha>#l=42-58  line range (revision-pinned)\n\n  Anchor types: `h=` heading, `l=` line/range, `s=` symbol.\n  Line anchors in persistent content require `?rev=<full-40-char-sha>`.\n\n**Chat message range**:\n\n    prll://cht_xxx#range=msg_01HA,msg_01HZ\n\n**Field access** \u2014 path selects a field (omit to reference the entity itself):\n\n    prll://tsk_xxx/description#Implementation     heading within task description\n\n### Unread context\n\nWhen dispatched to a chat, you may see `[Unread: N messages | since: prll://msg_xxx]`.\nThis shows messages since your last interaction \u2014 your read cursor advances after each\ndispatch, so context you skip now won't appear as unread next time. Use\n`parall messages list <chat> --limit 20` to fetch recent context. For large unread\ncounts (50+), fetch only recent messages rather than everything.\n\nThread dispatches may show `[Thread: prll://msg_root | N replies | M unread | since: prll://msg_r]`.\nSame semantics \u2014 use `parall messages list <chat> --thread-root-id <thread_root> --limit 20` to\ncatch up on the thread.\n\n### Reading context on demand\n\nAn event only carries the single triggering message. If you're mentioned in a\ngroup chat and lack context, pull what you need from the chat \u2014 don't guess:\n\n    parall messages list cht_xxx --limit 20 --before msg_xxx\n    parall messages get msg_xxx\n    parall chats get cht_xxx\n\nRule of thumb: in a group chat mention, the conversation that led up to you\nbeing called almost always matters \u2014 read it before replying. In a DM, your\nsession already has continuity, so skip the fetch unless something is unclear.\n\nSame pattern for any other entity referenced in the event: `tasks get`,\n`projects get`, `users get`, `chats get`. Follow the reflink, don't ask.\n\n### File attachments\n\nMessages may include attachments. They appear in events as:\n\n    [Attachment: prll://att_xxx | image/png | 1.2MB | screenshot.png]\n\nTo download an attachment, use the CLI:\n\n    parall files download att_xxx --output /tmp/screenshot.png\n\nTo send a file:\n\n    parall messages send prll://cht_xxx --file /tmp/output.png --text \"Done\"\n\nOr upload first and reuse across chats:\n\n    parall files upload /tmp/report.pdf\n    parall messages send prll://cht_aaa --attachment att_yyy --text \"Report\"\n    parall messages send prll://cht_bbb --attachment att_yyy --text \"FYI\"\n\n### When to reference\n\n- **Origin** \u2014 always link the message or task that triggered your work\n- **Design docs / wiki** \u2014 link specs and guides relevant to the work\n- **Related tasks** \u2014 link parent, sibling, or blocking tasks\n- **People** \u2014 link assignees or stakeholders when mentioning them\n- **Conversations** \u2014 link a chat or message range as context\n\n### Why this matters\n\nOther agents and humans read your output. References build a navigable context graph \u2014\nin multi-agent workflows, your references are the map that the next agent follows.";
 export type PreparedLocalImage = {
     attachmentId: string;
     fileName: string;

package/dist/prompt-fragments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-fragments.d.ts","sourceRoot":"","sources":["../src/prompt-fragments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAoBD,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,MAAM,CAgB3D;AAED,0FAA0F;AAC1F,eAAO,MAAM,aAAa,mcAAqB,CAAC;AAEhD,eAAO,MAAM,aAAa,ynEA0CmC,CAAC;AAE9D,eAAO,MAAM,oBAAoB,wuHA2FkD,CAAC;AAEpF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAmBnF;AAMD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIjD"}
+{"version":3,"file":"prompt-fragments.d.ts","sourceRoot":"","sources":["../src/prompt-fragments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAuBD,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,MAAM,CAgB3D;AAED,0FAA0F;AAC1F,eAAO,MAAM,aAAa,mcAAqB,CAAC;AAEhD,eAAO,MAAM,aAAa,yhFA+CmC,CAAC;AAE9D,eAAO,MAAM,oBAAoB,23IAuGkD,CAAC;AAEpF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAmBnF;AASD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIjD"}

package/dist/prompt-fragments.js

@@ -19,25 +19,28 @@ The people and agents around you are collaborators, not users to serve. Be hones
 be direct, and care about the outcome of the work — not just the request in front
 of you.`;
 function sanitizeProfileField(value) {
-    return value.replace(/[\r\n]+/g, " ").replace(/`/g, "'").trim();
+    return value
+        .replace(/[\r\n]+/g, ' ')
+        .replace(/`/g, "'")
+        .trim();
 }
 function sanitizeProfileBlock(value) {
-    return value.replace(/\r\n?/g, "\n").trim();
+    return value.replace(/\r\n?/g, '\n').trim();
 }
 export function buildIdentity(agent) {
     if (!agent)
         return PRLL_IDENTITY_BASE;
     const name = sanitizeProfileField(agent.displayName);
-    const lines = [PRLL_IDENTITY_BASE, "", "### Your Parall Identity", ""];
+    const lines = [PRLL_IDENTITY_BASE, '', '### Your Parall Identity', ''];
     lines.push(`You are **${name}** (\`prll://${agent.userId}\`).`);
     if (agent.description) {
         const description = sanitizeProfileBlock(agent.description);
         if (description) {
-            lines.push("", "### Your Agent Profile", "", description);
+            lines.push('', '### Your Agent Profile', '', description);
         }
     }
-    lines.push("", `When you see \`${agent.userId}\` or \`prll://${agent.userId}\` in messages, mentions, or events — that's you.`);
-    return lines.join("\n");
+    lines.push('', `When you see \`${agent.userId}\` or \`prll://${agent.userId}\` in messages, mentions, or events — that's you.`);
+    return lines.join('\n');
 }
 /** @deprecated Use buildIdentity() instead. Kept for backward compat during migration. */
 export const PRLL_IDENTITY = PRLL_IDENTITY_BASE;
@@ -76,10 +79,15 @@ Other agents share this workspace. Before starting work, check whether someone
 ### Permissions and approvals
 You have real permissions based on your roles (chat member/admin, org member).
 If you lack permission for an action, the API returns PERMISSION_DENIED with the
-\`action\` and \`resource_uri\` that were denied. When that happens, use
-\`approvals request\` to ask someone with permission to approve it — don't retry
-or work around the denial. Only request approval after an actual denial, never
-preemptively.
+\`action\` and \`resource_uri\` that were denied. The server decides whether that
+action is approvable: if it is, the CLI prints an \`approvals request\` command —
+fill in the placeholders it shows (\`--chat\`, \`--title\`, \`--reason\`) and run
+it to ask someone with permission. If it is NOT approvable, the output says so;
+ask a human with permission instead of requesting approval. A
+\`INVALID_TARGET\` error instead means you addressed the wrong kind of thing
+(e.g. a \`usr_\` id where a chat is expected) — follow the message (e.g. use
+\`dm\` for a user). Don't retry or work around a denial; only request approval
+after an actual denial, never preemptively.
 
 ### When in doubt
 Prefer asking over guessing. Prefer "I don't know" over fabricating. Your
@@ -128,6 +136,18 @@ resolves and renders the entity title automatically.
 
     prll://tsk_xxx/description#Implementation     heading within task description
 
+### Unread context
+
+When dispatched to a chat, you may see \`[Unread: N messages | since: prll://msg_xxx]\`.
+This shows messages since your last interaction — your read cursor advances after each
+dispatch, so context you skip now won't appear as unread next time. Use
+\`parall messages list <chat> --limit 20\` to fetch recent context. For large unread
+counts (50+), fetch only recent messages rather than everything.
+
+Thread dispatches may show \`[Thread: prll://msg_root | N replies | M unread | since: prll://msg_r]\`.
+Same semantics — use \`parall messages list <chat> --thread-root-id <thread_root> --limit 20\` to
+catch up on the thread.
+
 ### Reading context on demand
 
 An event only carries the single triggering message. If you're mentioned in a
@@ -178,7 +198,7 @@ Other agents and humans read your output. References build a navigable context g
 in multi-agent workflows, your references are the map that the next agent follows.`;
 export function renderLocalAttachmentSection(section) {
     if (section.images.length === 0 && section.notes.length === 0)
-        return "";
+        return '';
     // Each image renders as a metadata header line plus the absolute path on
     // its own line. The path stands alone (no quoting / escaping) so file-
     // reading tools can consume it verbatim — paths inside the attachment root
@@ -186,15 +206,18 @@ export function renderLocalAttachmentSection(section) {
     // the bridge operator. A pathological workspace dir with embedded newlines
     // would split across lines; that's exotic enough not to warrant scrubbing
     // every consumer's path through escape rules.
-    const lines = ["[Local attachment files]"];
+    const lines = ['[Local attachment files]'];
     for (const image of section.images) {
         lines.push(`- prll://${image.attachmentId} (${sanitizePromptMeta(image.mimeType)}, ${formatBytes(image.fileSize)}, ${sanitizePromptMeta(image.fileName)})`, `  ${image.localPath}`);
     }
     lines.push(...section.notes);
-    return lines.join("\n");
+    return lines.join('\n');
 }
 function sanitizePromptMeta(value) {
-    return value.replace(/[\r\n]+/g, " ").replace(/[()]/g, " ").trim();
+    return value
+        .replace(/[\r\n]+/g, ' ')
+        .replace(/[()]/g, ' ')
+        .trim();
 }
 export function formatBytes(bytes) {
     if (bytes >= 1048576)

package/dist/provider-config.d.ts

@@ -6,6 +6,15 @@ export interface ProviderConfig {
     anthropic_base_url?: string;
 }
 export declare function llmSource(pc?: ProviderConfig): string;
+/**
+ * Returns the explicitly-configured LLM source — the llm_source value when
+ * set, or "custom" when BYO provider credentials are present — or "" when the
+ * provider_config carries no source signal at all (e.g. the empty `{}` default
+ * that self-hosted agents always have). The daemon supervisor uses the empty
+ * case to defer to the machine-level llm_source instead of letting `{}` shadow
+ * it as "parall". Mirrors the Go `ProviderConfig.EffectiveLLMSourceExplicit`.
+ */
+export declare function effectiveLLMSourceExplicit(pc?: ProviderConfig): string;
 export declare function clearAllProviderCreds(env: NodeJS.ProcessEnv): void;
 export declare function parseProviderConfig(env: NodeJS.ProcessEnv): ProviderConfig | undefined;
 //# sourceMappingURL=provider-config.d.ts.map