@parall/claude-agent 1.20.2 → 1.22.0

package/dist/config.d.ts

@@ -15,6 +15,7 @@ export type ClaudeAgentConfig = {
     additionalDirs: string[];
     appendSystemPrompt?: string;
     runtimeKey?: string;
+    allowApiKey: boolean;
 };
 export declare function resolveClaudeAgentConfig(env?: NodeJS.ProcessEnv): ClaudeAgentConfig;
 export declare function resolveWsUrl(apiUrl: string, explicitWsUrl?: string, swimlaneName?: string): string;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAsBF,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CA2BhG;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAMlG;AAED,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGrF"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAsBF,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CA4BhG;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAMlG;AAED,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGrF"}

package/dist/config.js

@@ -43,6 +43,7 @@ export function resolveClaudeAgentConfig(env = process.env) {
         additionalDirs,
         appendSystemPrompt: env.PRLL_CLAUDE_APPEND_SYSTEM_PROMPT?.trim() || undefined,
         runtimeKey: env.PRLL_CLAUDE_RUNTIME_KEY?.trim() || undefined,
+        allowApiKey: env.PRLL_CLAUDE_ALLOW_API_KEY?.trim() === "1",
     };
 }
 export function resolveWsUrl(apiUrl, explicitWsUrl, swimlaneName) {

package/dist/dispatch.d.ts

@@ -1,9 +1,12 @@
 import type { CleanupForkOpts, DispatchAdapter, DispatchOpts, ForkOpts, RuntimeEvent } from "@parall/agent-core";
 import type { ClaudeAgentConfig } from "./config.js";
 import { ClaudeSessionManager } from "./session-manager.js";
-type ClaudeCodeAdapterOptions = Pick<ClaudeAgentConfig, "additionalDirs" | "allowedTools" | "appendSystemPrompt" | "claudeBin" | "claudeHome" | "disallowedTools" | "model" | "permissionMode" | "workspaceDir"> & {
+type ClaudeCodeAdapterOptions = Pick<ClaudeAgentConfig, "additionalDirs" | "allowApiKey" | "allowedTools" | "appendSystemPrompt" | "claudeBin" | "claudeHome" | "disallowedTools" | "model" | "permissionMode" | "workspaceDir"> & {
     sessionManager: ClaudeSessionManager;
 };
+export declare function buildSpawnEnv(parentEnv: NodeJS.ProcessEnv, claudeHome: string, context: DispatchOpts["context"], opts: {
+    allowApiKey: boolean;
+}): NodeJS.ProcessEnv;
 export declare class ClaudeCodeAdapter implements DispatchAdapter {
     private readonly opts;
     constructor(opts: ClaudeCodeAdapterOptions);

package/dist/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,KAAK,wBAAwB,GAAG,IAAI,CAClC,iBAAiB,EACf,gBAAgB,GAChB,cAAc,GACd,oBAAoB,GACpB,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,OAAO,GACP,gBAAgB,GAChB,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,oBAAoB,CAAC;CACtC,CAAC;AAEF,qBAAa,iBAAkB,YAAW,eAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,wBAAwB;IAEpD,QAAQ,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IAwFjG,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,QAAQ;IAIpC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAIrC,OAAO,CAAC,SAAS;CAkClB"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,KAAK,wBAAwB,GAAG,IAAI,CAClC,iBAAiB,EACf,gBAAgB,GAChB,aAAa,GACb,cAAc,GACd,oBAAoB,GACpB,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,OAAO,GACP,gBAAgB,GAChB,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,oBAAoB,CAAC;CACtC,CAAC;AAEF,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,CAAC,UAAU,EAC5B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,EAChC,IAAI,EAAE;IAAE,WAAW,EAAE,OAAO,CAAA;CAAE,GAC7B,MAAM,CAAC,UAAU,CAuBnB;AAED,qBAAa,iBAAkB,YAAW,eAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,wBAAwB;IAEpD,QAAQ,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IA+EjG,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,QAAQ;IAIpC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAIrC,OAAO,CAAC,SAAS;CAkClB"}

package/dist/dispatch.js

@@ -1,6 +1,30 @@
 import { randomUUID } from "node:crypto";
 import { spawn } from "node:child_process";
 import { parseClaudeStreamJson } from "./output-parser.js";
+export function buildSpawnEnv(parentEnv, claudeHome, context, opts) {
+    const env = { ...parentEnv };
+    // Default: behave like the hosted Claude container — OAuth via
+    // ~/.claude/.credentials.json only. Inheriting the operator's
+    // ANTHROPIC_API_KEY would silently divert billing to Anthropic API
+    // pay-per-use instead of the connected Claude.ai subscription.
+    // Opt back in with PRLL_CLAUDE_ALLOW_API_KEY=1.
+    if (!opts.allowApiKey) {
+        delete env.ANTHROPIC_API_KEY;
+        delete env.ANTHROPIC_AUTH_TOKEN;
+    }
+    return {
+        ...env,
+        HOME: claudeHome,
+        PRLL_API_URL: context.apiUrl,
+        PRLL_API_KEY: context.apiKey,
+        PRLL_ORG_ID: context.orgId,
+        PRLL_SESSION_ID: context.sessionId ?? "",
+        PRLL_CHAT_ID: context.chatId ?? "",
+        PRLL_TRIGGER_MESSAGE_ID: context.triggerMessageId ?? "",
+        PRLL_NO_REPLY: context.noReply ? "1" : "",
+        PRLL_STEP_ID_FILE: context.stepIdFilePath ?? "",
+    };
+}
 export class ClaudeCodeAdapter {
     opts;
     constructor(opts) {
@@ -8,18 +32,9 @@ export class ClaudeCodeAdapter {
     }
     async *dispatch({ bodyForAgent, sessionKey, context }) {
         const args = this.buildArgs(sessionKey, bodyForAgent);
-        const env = {
-            ...process.env,
-            HOME: this.opts.claudeHome,
-            PRLL_API_URL: context.apiUrl,
-            PRLL_API_KEY: context.apiKey,
-            PRLL_ORG_ID: context.orgId,
-            PRLL_SESSION_ID: context.sessionId ?? "",
-            PRLL_CHAT_ID: context.chatId ?? "",
-            PRLL_TRIGGER_MESSAGE_ID: context.triggerMessageId ?? "",
-            PRLL_NO_REPLY: context.noReply ? "1" : "",
-            PRLL_STEP_ID_FILE: context.stepIdFilePath ?? "",
-        };
+        const env = buildSpawnEnv(process.env, this.opts.claudeHome, context, {
+            allowApiKey: this.opts.allowApiKey,
+        });
         context.log?.info(`claude-agent[${context.accountId}]: spawn ${this.opts.claudeBin} ${args.slice(0, -1).join(" ")}`);
         const proc = spawn(this.opts.claudeBin, args, {
             cwd: this.opts.workspaceDir,

package/dist/index.js

@@ -16,7 +16,13 @@ function createLogger(prefix) {
 async function main() {
     const config = resolveClaudeAgentConfig(process.env);
     const log = createLogger("claude-agent");
-    ensureClaudeWorkspace(config.workspaceDir, log);
+    if (config.allowApiKey &&
+        (process.env.ANTHROPIC_API_KEY || process.env.ANTHROPIC_AUTH_TOKEN)) {
+        // Surface the billing path: default is OAuth (Claude.ai subscription); this
+        // branch means the operator opted into Anthropic API pay-per-use, and the
+        // whole point of the strip default is that "silent" is the bad state.
+        log.warn("PRLL_CLAUDE_ALLOW_API_KEY=1 — ANTHROPIC_API_KEY/ANTHROPIC_AUTH_TOKEN will reach the Claude CLI; billing routes through Anthropic API pay-per-use instead of Claude.ai OAuth.");
+    }
     const client = new ParallClient({
         baseUrl: config.apiUrl,
         token: config.apiKey,
@@ -24,6 +30,7 @@ async function main() {
     });
     const me = await client.getMe();
     const agentUserId = me.id;
+    ensureClaudeWorkspace(config.workspaceDir, log, { userId: agentUserId, displayName: me.display_name });
     const runtimeKey = config.runtimeKey || buildClaudeRuntimeKey(agentUserId);
     const sessionStateFilePath = sessionStateFilePathForRuntime(config.stateDir, runtimeKey);
     const sessionManager = new ClaudeSessionManager(runtimeKey, sessionStateFilePath, log);
@@ -42,6 +49,7 @@ async function main() {
         disallowedTools: config.disallowedTools,
         additionalDirs: config.additionalDirs,
         appendSystemPrompt: config.appendSystemPrompt,
+        allowApiKey: config.allowApiKey,
         sessionManager,
     });
     const gateway = new ParallAgentGateway({

package/dist/workspace.d.ts

@@ -1,4 +1,5 @@
+import type { AgentIdentity } from "@parall/agent-core";
 export declare function ensureClaudeWorkspace(workspaceDir: string, log?: {
     warn: (msg: string) => void;
-}): void;
+}, agentIdentity?: AgentIdentity): void;
 //# sourceMappingURL=workspace.d.ts.map

package/dist/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAoBA,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,QA0BtC"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,EACrC,aAAa,CAAC,EAAE,aAAa,QAgC9B"}

package/dist/workspace.js

@@ -1,17 +1,13 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { BRIDGE_WORKSPACE_INSTRUCTIONS, PRLL_BEHAVIOR, PRLL_IDENTITY, PRLL_REFERENCE_GUIDE, } from "@parall/agent-core";
-// Same slot order as OpenClaw / Hermes: identity → channel-context
-// (BRIDGE_WORKSPACE_INSTRUCTIONS plays that role for bridge runtimes) →
-// behavior → reference guide. Keeps the agent-facing prompt schema strictly
-// unified across runtimes.
-const CLAUDE_MD = [
-    PRLL_IDENTITY,
-    BRIDGE_WORKSPACE_INSTRUCTIONS,
-    PRLL_BEHAVIOR,
-    PRLL_REFERENCE_GUIDE,
-].join("\n\n");
-export function ensureClaudeWorkspace(workspaceDir, log) {
+import { BRIDGE_WORKSPACE_INSTRUCTIONS, PRLL_BEHAVIOR, PRLL_REFERENCE_GUIDE, buildIdentity, } from "@parall/agent-core";
+export function ensureClaudeWorkspace(workspaceDir, log, agentIdentity) {
+    const CLAUDE_MD = [
+        buildIdentity(agentIdentity),
+        BRIDGE_WORKSPACE_INSTRUCTIONS,
+        PRLL_BEHAVIOR,
+        PRLL_REFERENCE_GUIDE,
+    ].join("\n\n");
     fs.mkdirSync(workspaceDir, { recursive: true });
     fs.mkdirSync(path.join(workspaceDir, ".claude"), { recursive: true });
     // CLAUDE.md is bridge-managed: always overwrite so a hosted PVC keeps the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/claude-agent",
-  "version": "1.20.2",
+  "version": "1.22.0",
   "description": "Claude Code bridge runtime for self-hosted Parall agents",
   "license": "MIT",
   "repository": {
@@ -25,9 +25,9 @@
     "src"
   ],
   "dependencies": {
-    "@parall/cli": "1.20.2",
-    "@parall/agent-core": "1.20.2",
-    "@parall/sdk": "1.20.2"
+    "@parall/cli": "1.22.0",
+    "@parall/sdk": "1.22.0",
+    "@parall/agent-core": "1.22.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/src/config.ts

@@ -18,6 +18,7 @@ export type ClaudeAgentConfig = {
   additionalDirs: string[];
   appendSystemPrompt?: string;
   runtimeKey?: string;
+  allowApiKey: boolean;
 };
 
 function requireEnv(env: NodeJS.ProcessEnv, name: string): string {
@@ -66,6 +67,7 @@ export function resolveClaudeAgentConfig(env: NodeJS.ProcessEnv = process.env):
     additionalDirs,
     appendSystemPrompt: env.PRLL_CLAUDE_APPEND_SYSTEM_PROMPT?.trim() || undefined,
     runtimeKey: env.PRLL_CLAUDE_RUNTIME_KEY?.trim() || undefined,
+    allowApiKey: env.PRLL_CLAUDE_ALLOW_API_KEY?.trim() === "1",
   };
 }
 

package/src/dispatch.ts

@@ -14,6 +14,7 @@ import { ClaudeSessionManager } from "./session-manager.js";
 type ClaudeCodeAdapterOptions = Pick<
   ClaudeAgentConfig,
   | "additionalDirs"
+  | "allowApiKey"
   | "allowedTools"
   | "appendSystemPrompt"
   | "claudeBin"
@@ -26,23 +27,44 @@ type ClaudeCodeAdapterOptions = Pick<
   sessionManager: ClaudeSessionManager;
 };
 
+export function buildSpawnEnv(
+  parentEnv: NodeJS.ProcessEnv,
+  claudeHome: string,
+  context: DispatchOpts["context"],
+  opts: { allowApiKey: boolean },
+): NodeJS.ProcessEnv {
+  const env: NodeJS.ProcessEnv = { ...parentEnv };
+  // Default: behave like the hosted Claude container — OAuth via
+  // ~/.claude/.credentials.json only. Inheriting the operator's
+  // ANTHROPIC_API_KEY would silently divert billing to Anthropic API
+  // pay-per-use instead of the connected Claude.ai subscription.
+  // Opt back in with PRLL_CLAUDE_ALLOW_API_KEY=1.
+  if (!opts.allowApiKey) {
+    delete env.ANTHROPIC_API_KEY;
+    delete env.ANTHROPIC_AUTH_TOKEN;
+  }
+  return {
+    ...env,
+    HOME: claudeHome,
+    PRLL_API_URL: context.apiUrl,
+    PRLL_API_KEY: context.apiKey,
+    PRLL_ORG_ID: context.orgId,
+    PRLL_SESSION_ID: context.sessionId ?? "",
+    PRLL_CHAT_ID: context.chatId ?? "",
+    PRLL_TRIGGER_MESSAGE_ID: context.triggerMessageId ?? "",
+    PRLL_NO_REPLY: context.noReply ? "1" : "",
+    PRLL_STEP_ID_FILE: context.stepIdFilePath ?? "",
+  };
+}
+
 export class ClaudeCodeAdapter implements DispatchAdapter {
   constructor(private readonly opts: ClaudeCodeAdapterOptions) {}
 
   async *dispatch({ bodyForAgent, sessionKey, context }: DispatchOpts): AsyncIterable<RuntimeEvent> {
     const args = this.buildArgs(sessionKey, bodyForAgent);
-    const env = {
-      ...process.env,
-      HOME: this.opts.claudeHome,
-      PRLL_API_URL: context.apiUrl,
-      PRLL_API_KEY: context.apiKey,
-      PRLL_ORG_ID: context.orgId,
-      PRLL_SESSION_ID: context.sessionId ?? "",
-      PRLL_CHAT_ID: context.chatId ?? "",
-      PRLL_TRIGGER_MESSAGE_ID: context.triggerMessageId ?? "",
-      PRLL_NO_REPLY: context.noReply ? "1" : "",
-      PRLL_STEP_ID_FILE: context.stepIdFilePath ?? "",
-    };
+    const env = buildSpawnEnv(process.env, this.opts.claudeHome, context, {
+      allowApiKey: this.opts.allowApiKey,
+    });
 
     context.log?.info(`claude-agent[${context.accountId}]: spawn ${this.opts.claudeBin} ${args.slice(0, -1).join(" ")}`);
 

package/src/index.ts

@@ -25,7 +25,18 @@ function createLogger(prefix: string) {
 async function main() {
   const config = resolveClaudeAgentConfig(process.env);
   const log = createLogger("claude-agent");
-  ensureClaudeWorkspace(config.workspaceDir, log);
+
+  if (
+    config.allowApiKey &&
+    (process.env.ANTHROPIC_API_KEY || process.env.ANTHROPIC_AUTH_TOKEN)
+  ) {
+    // Surface the billing path: default is OAuth (Claude.ai subscription); this
+    // branch means the operator opted into Anthropic API pay-per-use, and the
+    // whole point of the strip default is that "silent" is the bad state.
+    log.warn(
+      "PRLL_CLAUDE_ALLOW_API_KEY=1 — ANTHROPIC_API_KEY/ANTHROPIC_AUTH_TOKEN will reach the Claude CLI; billing routes through Anthropic API pay-per-use instead of Claude.ai OAuth.",
+    );
+  }
 
   const client = new ParallClient({
     baseUrl: config.apiUrl,
@@ -35,6 +46,7 @@ async function main() {
 
   const me = await client.getMe();
   const agentUserId = me.id;
+  ensureClaudeWorkspace(config.workspaceDir, log, { userId: agentUserId, displayName: me.display_name });
   const runtimeKey = config.runtimeKey || buildClaudeRuntimeKey(agentUserId);
   const sessionStateFilePath = sessionStateFilePathForRuntime(config.stateDir, runtimeKey);
   const sessionManager = new ClaudeSessionManager(
@@ -59,6 +71,7 @@ async function main() {
     disallowedTools: config.disallowedTools,
     additionalDirs: config.additionalDirs,
     appendSystemPrompt: config.appendSystemPrompt,
+    allowApiKey: config.allowApiKey,
     sessionManager,
   });
 

package/src/workspace.ts

@@ -3,25 +3,22 @@ import * as path from "node:path";
 import {
   BRIDGE_WORKSPACE_INSTRUCTIONS,
   PRLL_BEHAVIOR,
-  PRLL_IDENTITY,
   PRLL_REFERENCE_GUIDE,
+  buildIdentity,
 } from "@parall/agent-core";
-
-// Same slot order as OpenClaw / Hermes: identity → channel-context
-// (BRIDGE_WORKSPACE_INSTRUCTIONS plays that role for bridge runtimes) →
-// behavior → reference guide. Keeps the agent-facing prompt schema strictly
-// unified across runtimes.
-const CLAUDE_MD = [
-  PRLL_IDENTITY,
-  BRIDGE_WORKSPACE_INSTRUCTIONS,
-  PRLL_BEHAVIOR,
-  PRLL_REFERENCE_GUIDE,
-].join("\n\n");
+import type { AgentIdentity } from "@parall/agent-core";
 
 export function ensureClaudeWorkspace(
   workspaceDir: string,
   log?: { warn: (msg: string) => void },
+  agentIdentity?: AgentIdentity,
 ) {
+  const CLAUDE_MD = [
+    buildIdentity(agentIdentity),
+    BRIDGE_WORKSPACE_INSTRUCTIONS,
+    PRLL_BEHAVIOR,
+    PRLL_REFERENCE_GUIDE,
+  ].join("\n\n");
   fs.mkdirSync(workspaceDir, { recursive: true });
   fs.mkdirSync(path.join(workspaceDir, ".claude"), { recursive: true });