@parall/claude-agent 1.36.1 → 1.38.0

package/dist/config.d.ts

@@ -22,6 +22,13 @@ export declare function resolveWsUrl(apiUrl: string, explicitWsUrl?: string, swi
 export declare function buildClaudeRuntimeKey(agentUserId: string): string;
 export declare function sessionStateFilePathForRuntime(stateDir: string, runtimeKey: string): string;
 export declare function contextFilePathForSession(stateDir: string, sessionKey: string): string;
+/**
+ * PRLL_CONTEXT_DIR root: per-lane dispatch context files, keyed by the
+ * canonical lane-key (see @parall/agent-core lane-key.ts). Anchored in the
+ * per-agent stateDir — never the workspace (workspace paths are
+ * user-overridable and not an isolation boundary).
+ */
+export declare function dispatchContextDirPath(stateDir: string): string;
 /** @deprecated Use contextFilePathForSession. */
 export declare function stepIdFilePathForSession(stateDir: string, sessionKey: string): string;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAsBF,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAgChG;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAMR;AAED,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGtF;AAED,iDAAiD;AACjD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGrF"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAsBF,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAgChG;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAMR;AAED,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGtF;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,iDAAiD;AACjD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGrF"}

package/dist/config.js

@@ -1,3 +1,4 @@
+import { dispatchLaneContextDir } from '@parall/agent-core';
 import * as os from 'node:os';
 import * as path from 'node:path';
 function requireEnv(env, name) {
@@ -65,6 +66,15 @@ export function contextFilePathForSession(stateDir, sessionKey) {
     const fileName = Buffer.from(sessionKey).toString('base64url');
     return path.join(stateDir, 'dispatch-context', `${fileName}.json`);
 }
+/**
+ * PRLL_CONTEXT_DIR root: per-lane dispatch context files, keyed by the
+ * canonical lane-key (see @parall/agent-core lane-key.ts). Anchored in the
+ * per-agent stateDir — never the workspace (workspace paths are
+ * user-overridable and not an isolation boundary).
+ */
+export function dispatchContextDirPath(stateDir) {
+    return dispatchLaneContextDir(stateDir);
+}
 /** @deprecated Use contextFilePathForSession. */
 export function stepIdFilePathForSession(stateDir, sessionKey) {
     const fileName = Buffer.from(sessionKey).toString('base64url');

package/dist/dispatch.d.ts

@@ -9,6 +9,15 @@ type ClaudeCodeAdapterOptions = Pick<ClaudeAgentConfig, 'additionalDirs' | 'allo
     contextFilePathForSession?: (sessionKey: string) => string;
     /** @deprecated Use contextFilePathForSession. */
     stepIdFilePathForSession?: (sessionKey: string) => string;
+    /**
+     * PRLL_CONTEXT_DIR root for per-lane dispatch context files. Like the
+     * Parall credentials above, this is bridge-static — the long-lived
+     * subprocess env is built ONCE from the placeholder context, so a value
+     * only present on per-dispatch DispatchContexts would never reach the
+     * CLI and every reply would silently lose its lane binding (turns would
+     * resolve no_action instead of reply-effect dedupe).
+     */
+    contextDirPath?: string;
 };
 export declare function buildSpawnEnv(parentEnv: NodeJS.ProcessEnv, claudeHome: string, context: DispatchOpts['context'], opts: {
     allowApiKey: boolean;

package/dist/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EAER,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAA4B,MAAM,sBAAsB,CAAC;AAEtF,KAAK,wBAAwB,GAAG,IAAI,CAClC,iBAAiB,EACf,gBAAgB,GAChB,aAAa,GACb,cAAc,GACd,oBAAoB,GACpB,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,OAAO,GACP,gBAAgB,GAChB,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,oBAAoB,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAC3D,iDAAiD;IACjD,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;CAC3D,CAAC;AAkBF,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,CAAC,UAAU,EAC5B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,EAChC,IAAI,EAAE;IAAE,WAAW,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E,MAAM,CAAC,UAAU,CA8BnB;AAiBD,qBAAa,iBAAkB,YAAW,eAAe;IAO3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAC7D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,YAAY,CAAqB;gBAEZ,IAAI,EAAE,wBAAwB;IAI3D,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IACD,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,YAAY,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAY7E,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAchE,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAYvC,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAI1C,QAAQ,CAAC,EACd,KAAK,EACL,YAAY,EACZ,UAAU,EACV,OAAO,GACR,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IA+B7C,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIvD,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAc7D,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,QAAQ;IAIpC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAQrC,cAAc,IAAI,IAAI;IAQhB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA4D;IAE/F;;;;;;;;;OASG;YACY,gBAAgB;YAqEhB,OAAO;IAkHtB,OAAO,CAAC,aAAa;IAyBrB,OAAO,CAAC,YAAY;IAuDpB,OAAO,CAAC,WAAW;IAsBnB,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,SAAS;IAwCjB,OAAO,CAAC,uBAAuB;CAkBhC"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EAER,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAA4B,MAAM,sBAAsB,CAAC;AAEtF,KAAK,wBAAwB,GAAG,IAAI,CAClC,iBAAiB,EACf,gBAAgB,GAChB,aAAa,GACb,cAAc,GACd,oBAAoB,GACpB,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,OAAO,GACP,gBAAgB,GAChB,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,oBAAoB,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAC3D,iDAAiD;IACjD,wBAAwB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1D;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAkBF,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,CAAC,UAAU,EAC5B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,EAChC,IAAI,EAAE;IAAE,WAAW,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E,MAAM,CAAC,UAAU,CAkCnB;AAiBD,qBAAa,iBAAkB,YAAW,eAAe;IAO3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAC7D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,YAAY,CAAqB;gBAEZ,IAAI,EAAE,wBAAwB;IAI3D,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IACD,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,YAAY,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAY7E,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAchE,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAYvC,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAI1C,QAAQ,CAAC,EACd,KAAK,EACL,YAAY,EACZ,UAAU,EACV,OAAO,GACR,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IA+B7C,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIvD,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAc7D,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,QAAQ;IAIpC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAQrC,cAAc,IAAI,IAAI;IAQhB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA4D;IAE/F;;;;;;;;;OASG;YACY,gBAAgB;YAqEhB,OAAO;IAkHtB,OAAO,CAAC,aAAa;IAyBrB,OAAO,CAAC,YAAY;IAuDpB,OAAO,CAAC,WAAW;IAsBnB,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,SAAS;IAwCjB,OAAO,CAAC,uBAAuB;CAmBhC"}

package/dist/dispatch.js

@@ -37,6 +37,10 @@ export function buildSpawnEnv(parentEnv, claudeHome, context, opts) {
         PRLL_NO_REPLY: context.noReply ? '1' : '',
         PRLL_CONTEXT_FILE: context.contextFilePath ?? '',
         PRLL_STEP_ID_FILE: context.stepIdFilePath ?? '',
+        // Per-lane dispatch context directory (stable for the bridge's lifetime,
+        // so pinning it at spawn is safe even for long-lived subprocesses). The
+        // CLI keys into it by send target to derive dispatch effect keys.
+        PRLL_CONTEXT_DIR: context.contextDirPath ?? '',
     };
     // Pin the wiki workspace to the agent workspace (same convention as the
     // OpenClaw runtime). Without this, `parall wiki` resolves mounts relative
@@ -491,6 +495,7 @@ export class ClaudeCodeAdapter {
             noReply: false,
             contextFilePath: this.opts.contextFilePathForSession?.(sessionKey) ?? '',
             stepIdFilePath: this.opts.stepIdFilePathForSession?.(sessionKey) ?? '',
+            contextDirPath: this.opts.contextDirPath ?? '',
             client: undefined,
         };
     }

package/dist/index.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import * as os from 'node:os';
-import { ParallAgentGateway, createPlatformConfigManager, createLogger, createOtelLogger, childLogger, isPlatformManagedProfile, isPlatformModelOverride, resolveRuntimeModel, parseShutdownDeadlineMs, parseForkDeadlineMs, parseDispatchDeadlineMs, parseProviderConfig, clearAllProviderCreds, llmSource, initAgentTelemetry, } from '@parall/agent-core';
+import { ParallAgentGateway, createPlatformConfigManager, createLogger, createOtelLogger, childLogger, deriveModelIsPin, resolveRuntimeModel, parseShutdownDeadlineMs, parseForkDeadlineMs, parseDispatchDeadlineMs, parseProviderConfig, clearAllProviderCreds, llmSource, initAgentTelemetry, } from '@parall/agent-core';
 import { ApiError, ParallClient, ParallWs } from '@parall/sdk';
-import { buildClaudeRuntimeKey, contextFilePathForSession, resolveClaudeAgentConfig, resolveWsUrl, sessionStateFilePathForRuntime, stepIdFilePathForSession, } from './config.js';
+import { buildClaudeRuntimeKey, contextFilePathForSession, dispatchContextDirPath, resolveClaudeAgentConfig, resolveWsUrl, sessionStateFilePathForRuntime, stepIdFilePathForSession, } from './config.js';
 import { ClaudeCodeAdapter } from './dispatch.js';
 import { ClaudeSessionManager } from './session-manager.js';
 import { ensureClaudeWorkspace } from './workspace.js';
@@ -81,26 +81,19 @@ async function main() {
             log: agentLog,
         });
         const platformDefaults = await configMgr.fetch();
-        let platformManaged = isPlatformManagedProfile(me.agent_profile);
-        // Model precedence: operator override (platform-managed) > env > server floor.
-        // The server delivers a model floor for Parall-proxy routes even when
-        // model_management=self, so the CLI never falls back to a built-in default
-        // the catalog might reject — but that floor must lose to an explicit env
-        // override (env > floor). A profile is an operator-override only when it is
-        // platform-managed AND not explicitly self-managed: this treats legacy hosted
-        // agents (model_management=null, resolved to platform server-side) as
-        // overrides, while excluding local self agents whose delivered model is a
-        // floor. effort stays an operator override (platform).
-        let platformModelOverride = isPlatformModelOverride(me.agent_profile);
+        // Model precedence: operator PIN (override) > env > server FLOOR. The server
+        // now says which it is via model_is_pin (deriveModelIsPin presence-gates the
+        // dual-read: old servers omit it → fall back to model_management). A PIN beats
+        // an explicit env override; a FLOOR loses to env. effort is delivered by the
+        // server only when pinned, so we no longer gate it on a local flag.
+        const platformModelOverride = deriveModelIsPin(platformDefaults, me.agent_profile);
         const resolvedModel = resolveRuntimeModel(platformModelOverride, platformDefaults.model, config.model);
-        const resolvedEffort = platformManaged
-            ? (platformDefaults.thinkingEffort ??
-                (process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || undefined))
-            : process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || undefined;
+        const resolvedEffort = platformDefaults.thinkingEffort ??
+            (process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || undefined);
         if (platformDefaults.model)
-            agentLog.info(`platform config: model=${platformDefaults.model} → resolved=${resolvedModel ?? 'cli-default'} (${platformModelOverride ? 'platform-managed' : 'floor/self'})`);
+            agentLog.info(`platform config: model=${platformDefaults.model} → resolved=${resolvedModel ?? 'cli-default'} (${platformModelOverride ? 'pin/override' : 'floor'})`);
         if (platformDefaults.thinkingEffort)
-            agentLog.info(`platform config: thinking_effort=${platformDefaults.thinkingEffort} (${platformModelOverride ? 'applied' : 'ignored, model_management=self'})`);
+            agentLog.info(`platform config: thinking_effort=${platformDefaults.thinkingEffort}`);
         const adapter = new ClaudeCodeAdapter({
             claudeBin: config.claudeBin,
             claudeHome: config.claudeHome,
@@ -121,10 +114,37 @@ async function main() {
             orgId: config.orgId,
             contextFilePathForSession: (sessionKey) => contextFilePathForSession(config.stateDir, sessionKey),
             stepIdFilePathForSession: (sessionKey) => stepIdFilePathForSession(config.stateDir, sessionKey),
+            contextDirPath: dispatchContextDirPath(config.stateDir),
         });
         if (resolvedEffort) {
             adapter.updateConfig({ effort: resolvedEffort });
         }
+        // Shared by onConfigUpdate + onSessionReady. /agents/me is only consumed as
+        // deriveModelIsPin's legacy fallback when the server omits model_is_pin
+        // (old server) — skip that round trip otherwise.
+        const refreshPlatformConfig = async () => {
+            const updated = await configMgr.fetch();
+            let refreshedProfile;
+            if (updated.modelIsPin === undefined) {
+                try {
+                    refreshedProfile = (await getAgentMeWithLegacyFallback(client, config.orgId))
+                        .agent_profile;
+                }
+                catch (err) {
+                    // configMgr.fetch() degrades to cache on failure; mirror that for the
+                    // legacy fallback so a transient /agents/me error doesn't reject this
+                    // config-refresh callback. No profile → deriveModelIsPin treats the
+                    // delivered model as a floor (safe default).
+                    agentLog.warn(`platform config refresh: legacy /agents/me fallback failed: ${String(err)}`);
+                }
+            }
+            const isPin = deriveModelIsPin(updated, refreshedProfile);
+            const localEffort = process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || null;
+            adapter.updateConfig({
+                model: resolveRuntimeModel(isPin, updated.model, config.model) ?? null,
+                effort: updated.thinkingEffort ?? localEffort,
+            });
+        };
         const gateway = new ParallAgentGateway({
             accountId: agentUserId,
             client,
@@ -151,28 +171,9 @@ async function main() {
             dispatchDeadlineMs: parseDispatchDeadlineMs(process.env.PRLL_DISPATCH_DEADLINE_MS),
             contextFilePathForSession: (sessionKey) => contextFilePathForSession(config.stateDir, sessionKey),
             stepIdFilePathForSession: (sessionKey) => stepIdFilePathForSession(config.stateDir, sessionKey),
-            onConfigUpdate: async () => {
-                const refreshed = await getAgentMeWithLegacyFallback(client, config.orgId);
-                platformManaged = isPlatformManagedProfile(refreshed.agent_profile);
-                platformModelOverride = isPlatformModelOverride(refreshed.agent_profile);
-                const updated = await configMgr.fetch();
-                const localEffort = process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || null;
-                adapter.updateConfig({
-                    model: resolveRuntimeModel(platformModelOverride, updated.model, config.model) ?? null,
-                    effort: platformManaged ? (updated.thinkingEffort ?? localEffort) : localEffort,
-                });
-            },
-            onSessionReady: async () => {
-                const refreshed = await getAgentMeWithLegacyFallback(client, config.orgId);
-                platformManaged = isPlatformManagedProfile(refreshed.agent_profile);
-                platformModelOverride = isPlatformModelOverride(refreshed.agent_profile);
-                const updated = await configMgr.fetch();
-                const localEffort = process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || null;
-                adapter.updateConfig({
-                    model: resolveRuntimeModel(platformModelOverride, updated.model, config.model) ?? null,
-                    effort: platformManaged ? (updated.thinkingEffort ?? localEffort) : localEffort,
-                });
-            },
+            dispatchContextDir: dispatchContextDirPath(config.stateDir),
+            onConfigUpdate: refreshPlatformConfig,
+            onSessionReady: refreshPlatformConfig,
             // Long-lived `claude` subprocesses outlive a single dispatch, so the
             // gateway's shuttingDown flag alone does not tear them down. Piggyback on
             // onBeforeDisconnect to close stdin and SIGTERM any survivors after

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/claude-agent",
-  "version": "1.36.1",
+  "version": "1.38.0",
   "description": "Claude Code bridge runtime for self-hosted Parall agents",
   "license": "MIT",
   "repository": {
@@ -25,9 +25,9 @@
     "src"
   ],
   "dependencies": {
-    "@parall/agent-core": "1.36.1",
-    "@parall/cli": "1.36.1",
-    "@parall/sdk": "1.36.1"
+    "@parall/agent-core": "1.38.0",
+    "@parall/cli": "1.38.0",
+    "@parall/sdk": "1.38.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/src/config.ts

@@ -1,3 +1,4 @@
+import { dispatchLaneContextDir } from '@parall/agent-core';
 import * as os from 'node:os';
 import * as path from 'node:path';
 
@@ -101,6 +102,16 @@ export function contextFilePathForSession(stateDir: string, sessionKey: string):
   return path.join(stateDir, 'dispatch-context', `${fileName}.json`);
 }
 
+/**
+ * PRLL_CONTEXT_DIR root: per-lane dispatch context files, keyed by the
+ * canonical lane-key (see @parall/agent-core lane-key.ts). Anchored in the
+ * per-agent stateDir — never the workspace (workspace paths are
+ * user-overridable and not an isolation boundary).
+ */
+export function dispatchContextDirPath(stateDir: string): string {
+  return dispatchLaneContextDir(stateDir);
+}
+
 /** @deprecated Use contextFilePathForSession. */
 export function stepIdFilePathForSession(stateDir: string, sessionKey: string): string {
   const fileName = Buffer.from(sessionKey).toString('base64url');

package/src/dispatch.ts

@@ -38,6 +38,15 @@ type ClaudeCodeAdapterOptions = Pick<
   contextFilePathForSession?: (sessionKey: string) => string;
   /** @deprecated Use contextFilePathForSession. */
   stepIdFilePathForSession?: (sessionKey: string) => string;
+  /**
+   * PRLL_CONTEXT_DIR root for per-lane dispatch context files. Like the
+   * Parall credentials above, this is bridge-static — the long-lived
+   * subprocess env is built ONCE from the placeholder context, so a value
+   * only present on per-dispatch DispatchContexts would never reach the
+   * CLI and every reply would silently lose its lane binding (turns would
+   * resolve no_action instead of reply-effect dedupe).
+   */
+  contextDirPath?: string;
 };
 
 const IS_WIN32 = process.platform === 'win32';
@@ -79,6 +88,10 @@ export function buildSpawnEnv(
     PRLL_NO_REPLY: context.noReply ? '1' : '',
     PRLL_CONTEXT_FILE: context.contextFilePath ?? '',
     PRLL_STEP_ID_FILE: context.stepIdFilePath ?? '',
+    // Per-lane dispatch context directory (stable for the bridge's lifetime,
+    // so pinning it at spawn is safe even for long-lived subprocesses). The
+    // CLI keys into it by send target to derive dispatch effect keys.
+    PRLL_CONTEXT_DIR: context.contextDirPath ?? '',
   };
   // Pin the wiki workspace to the agent workspace (same convention as the
   // OpenClaw runtime). Without this, `parall wiki` resolves mounts relative
@@ -613,6 +626,7 @@ export class ClaudeCodeAdapter implements DispatchAdapter {
       noReply: false,
       contextFilePath: this.opts.contextFilePathForSession?.(sessionKey) ?? '',
       stepIdFilePath: this.opts.stepIdFilePathForSession?.(sessionKey) ?? '',
+      contextDirPath: this.opts.contextDirPath ?? '',
       client: undefined as unknown as DispatchOpts['context']['client'],
     };
   }

package/src/index.ts

@@ -7,8 +7,7 @@ import {
   createLogger,
   createOtelLogger,
   childLogger,
-  isPlatformManagedProfile,
-  isPlatformModelOverride,
+  deriveModelIsPin,
   resolveRuntimeModel,
   parseShutdownDeadlineMs,
   parseForkDeadlineMs,
@@ -22,6 +21,7 @@ import { ApiError, ParallClient, ParallWs } from '@parall/sdk';
 import {
   buildClaudeRuntimeKey,
   contextFilePathForSession,
+  dispatchContextDirPath,
   resolveClaudeAgentConfig,
   resolveWsUrl,
   sessionStateFilePathForRuntime,
@@ -112,34 +112,26 @@ async function main() {
       log: agentLog,
     });
     const platformDefaults = await configMgr.fetch();
-    let platformManaged = isPlatformManagedProfile(me.agent_profile);
-    // Model precedence: operator override (platform-managed) > env > server floor.
-    // The server delivers a model floor for Parall-proxy routes even when
-    // model_management=self, so the CLI never falls back to a built-in default
-    // the catalog might reject — but that floor must lose to an explicit env
-    // override (env > floor). A profile is an operator-override only when it is
-    // platform-managed AND not explicitly self-managed: this treats legacy hosted
-    // agents (model_management=null, resolved to platform server-side) as
-    // overrides, while excluding local self agents whose delivered model is a
-    // floor. effort stays an operator override (platform).
-    let platformModelOverride = isPlatformModelOverride(me.agent_profile);
+    // Model precedence: operator PIN (override) > env > server FLOOR. The server
+    // now says which it is via model_is_pin (deriveModelIsPin presence-gates the
+    // dual-read: old servers omit it → fall back to model_management). A PIN beats
+    // an explicit env override; a FLOOR loses to env. effort is delivered by the
+    // server only when pinned, so we no longer gate it on a local flag.
+    const platformModelOverride = deriveModelIsPin(platformDefaults, me.agent_profile);
     const resolvedModel = resolveRuntimeModel(
       platformModelOverride,
       platformDefaults.model,
       config.model,
     );
-    const resolvedEffort = platformManaged
-      ? (platformDefaults.thinkingEffort ??
-        (process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || undefined))
-      : process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || undefined;
+    const resolvedEffort =
+      platformDefaults.thinkingEffort ??
+      (process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || undefined);
     if (platformDefaults.model)
       agentLog.info(
-        `platform config: model=${platformDefaults.model} → resolved=${resolvedModel ?? 'cli-default'} (${platformModelOverride ? 'platform-managed' : 'floor/self'})`,
+        `platform config: model=${platformDefaults.model} → resolved=${resolvedModel ?? 'cli-default'} (${platformModelOverride ? 'pin/override' : 'floor'})`,
       );
     if (platformDefaults.thinkingEffort)
-      agentLog.info(
-        `platform config: thinking_effort=${platformDefaults.thinkingEffort} (${platformModelOverride ? 'applied' : 'ignored, model_management=self'})`,
-      );
+      agentLog.info(`platform config: thinking_effort=${platformDefaults.thinkingEffort}`);
 
     const adapter = new ClaudeCodeAdapter({
       claudeBin: config.claudeBin,
@@ -163,11 +155,42 @@ async function main() {
         contextFilePathForSession(config.stateDir, sessionKey),
       stepIdFilePathForSession: (sessionKey) =>
         stepIdFilePathForSession(config.stateDir, sessionKey),
+      contextDirPath: dispatchContextDirPath(config.stateDir),
     });
     if (resolvedEffort) {
       adapter.updateConfig({ effort: resolvedEffort });
     }
 
+    // Shared by onConfigUpdate + onSessionReady. /agents/me is only consumed as
+    // deriveModelIsPin's legacy fallback when the server omits model_is_pin
+    // (old server) — skip that round trip otherwise.
+    const refreshPlatformConfig = async () => {
+      const updated = await configMgr.fetch();
+      let refreshedProfile:
+        | Awaited<ReturnType<typeof getAgentMeWithLegacyFallback>>['agent_profile']
+        | undefined;
+      if (updated.modelIsPin === undefined) {
+        try {
+          refreshedProfile = (await getAgentMeWithLegacyFallback(client, config.orgId))
+            .agent_profile;
+        } catch (err) {
+          // configMgr.fetch() degrades to cache on failure; mirror that for the
+          // legacy fallback so a transient /agents/me error doesn't reject this
+          // config-refresh callback. No profile → deriveModelIsPin treats the
+          // delivered model as a floor (safe default).
+          agentLog.warn(
+            `platform config refresh: legacy /agents/me fallback failed: ${String(err)}`,
+          );
+        }
+      }
+      const isPin = deriveModelIsPin(updated, refreshedProfile);
+      const localEffort = process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || null;
+      adapter.updateConfig({
+        model: resolveRuntimeModel(isPin, updated.model, config.model) ?? null,
+        effort: updated.thinkingEffort ?? localEffort,
+      });
+    };
+
     const gateway = new ParallAgentGateway({
       accountId: agentUserId,
       client,
@@ -196,28 +219,9 @@ async function main() {
         contextFilePathForSession(config.stateDir, sessionKey),
       stepIdFilePathForSession: (sessionKey) =>
         stepIdFilePathForSession(config.stateDir, sessionKey),
-      onConfigUpdate: async () => {
-        const refreshed = await getAgentMeWithLegacyFallback(client, config.orgId);
-        platformManaged = isPlatformManagedProfile(refreshed.agent_profile);
-        platformModelOverride = isPlatformModelOverride(refreshed.agent_profile);
-        const updated = await configMgr.fetch();
-        const localEffort = process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || null;
-        adapter.updateConfig({
-          model: resolveRuntimeModel(platformModelOverride, updated.model, config.model) ?? null,
-          effort: platformManaged ? (updated.thinkingEffort ?? localEffort) : localEffort,
-        });
-      },
-      onSessionReady: async () => {
-        const refreshed = await getAgentMeWithLegacyFallback(client, config.orgId);
-        platformManaged = isPlatformManagedProfile(refreshed.agent_profile);
-        platformModelOverride = isPlatformModelOverride(refreshed.agent_profile);
-        const updated = await configMgr.fetch();
-        const localEffort = process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || null;
-        adapter.updateConfig({
-          model: resolveRuntimeModel(platformModelOverride, updated.model, config.model) ?? null,
-          effort: platformManaged ? (updated.thinkingEffort ?? localEffort) : localEffort,
-        });
-      },
+      dispatchContextDir: dispatchContextDirPath(config.stateDir),
+      onConfigUpdate: refreshPlatformConfig,
+      onSessionReady: refreshPlatformConfig,
       // Long-lived `claude` subprocesses outlive a single dispatch, so the
       // gateway's shuttingDown flag alone does not tear them down. Piggyback on
       // onBeforeDisconnect to close stdin and SIGTERM any survivors after