@parall/codex-agent 1.18.1 → 1.18.2

package/dist/config.d.ts

@@ -16,14 +16,22 @@ export type CodexAgentConfig = {
 };
 export declare function resolveCodexAgentConfig(env?: NodeJS.ProcessEnv): CodexAgentConfig;
 /**
- * Normalise a sandbox value (CLI docs use kebab-case like `workspace-write`,
- * but the app-server JSON-RPC protocol uses camelCase like `workspaceWrite`).
- * Accept both forms and emit the canonical protocol form.
+ * Normalise a sandbox value to the kebab-case form the app-server JSON-RPC
+ * enum expects (`read-only` / `workspace-write` / `danger-full-access`).
+ * The CLI-facing PRLL_CODEX_SANDBOX env var may come in as either kebab-case
+ * or camelCase (from docs that cite the Rust field names); accept both.
+ *
+ * Empirically verified: the app-server rejects `workspaceWrite` with
+ *   "unknown variant workspaceWrite, expected one of read-only,
+ *    workspace-write, danger-full-access"
+ * which is the Rust enum's serde kebab-case form.
  */
 export declare function normalizeSandbox(value: string): string;
 /**
- * Normalise an approval policy string to the camelCase form the app-server
- * JSON-RPC protocol uses (`never` / `onRequest` / `unlessTrusted`).
+ * Normalise an approval policy string to the kebab-case form the app-server
+ * JSON-RPC enum expects (`never` / `on-request` / `on-failure` /
+ * `unless-trusted`). Mirrors the sandbox enum — serde rename_all kebab-case
+ * applies across app-server protocol enums.
  */
 export declare function normalizeApprovalPolicy(value: string): string;
 export declare function resolveWsUrl(apiUrl: string, explicitWsUrl?: string, swimlaneName?: string): string;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAcF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,gBAAgB,CA6B9F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUtD;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW7D;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAMlG;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGrF"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAcF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,gBAAgB,CA6B9F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUtD;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW7D;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAMlG;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGrF"}

package/dist/config.js

@@ -38,34 +38,42 @@ export function resolveCodexAgentConfig(env = process.env) {
     };
 }
 /**
- * Normalise a sandbox value (CLI docs use kebab-case like `workspace-write`,
- * but the app-server JSON-RPC protocol uses camelCase like `workspaceWrite`).
- * Accept both forms and emit the canonical protocol form.
+ * Normalise a sandbox value to the kebab-case form the app-server JSON-RPC
+ * enum expects (`read-only` / `workspace-write` / `danger-full-access`).
+ * The CLI-facing PRLL_CODEX_SANDBOX env var may come in as either kebab-case
+ * or camelCase (from docs that cite the Rust field names); accept both.
+ *
+ * Empirically verified: the app-server rejects `workspaceWrite` with
+ *   "unknown variant workspaceWrite, expected one of read-only,
+ *    workspace-write, danger-full-access"
+ * which is the Rust enum's serde kebab-case form.
  */
 export function normalizeSandbox(value) {
     const map = {
-        "workspace-write": "workspaceWrite",
-        "workspacewrite": "workspaceWrite",
-        "danger-full-access": "dangerFullAccess",
-        "dangerfullaccess": "dangerFullAccess",
-        "read-only": "readOnly",
-        "readonly": "readOnly",
+        "workspace-write": "workspace-write",
+        "workspacewrite": "workspace-write",
+        "danger-full-access": "danger-full-access",
+        "dangerfullaccess": "danger-full-access",
+        "read-only": "read-only",
+        "readonly": "read-only",
     };
     return map[value.toLowerCase()] ?? value;
 }
 /**
- * Normalise an approval policy string to the camelCase form the app-server
- * JSON-RPC protocol uses (`never` / `onRequest` / `unlessTrusted`).
+ * Normalise an approval policy string to the kebab-case form the app-server
+ * JSON-RPC enum expects (`never` / `on-request` / `on-failure` /
+ * `unless-trusted`). Mirrors the sandbox enum — serde rename_all kebab-case
+ * applies across app-server protocol enums.
  */
 export function normalizeApprovalPolicy(value) {
     const map = {
         "never": "never",
-        "on-request": "onRequest",
-        "onrequest": "onRequest",
-        "unless-trusted": "unlessTrusted",
-        "unlesstrusted": "unlessTrusted",
-        "on-failure": "onFailure",
-        "onfailure": "onFailure",
+        "on-request": "on-request",
+        "onrequest": "on-request",
+        "unless-trusted": "unless-trusted",
+        "unlesstrusted": "unless-trusted",
+        "on-failure": "on-failure",
+        "onfailure": "on-failure",
     };
     return map[value.toLowerCase()] ?? value;
 }

package/dist/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,aAAa,EACb,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,KAAK,4BAA4B,GAAG,IAAI,CACtC,gBAAgB,EACd,gBAAgB,GAChB,UAAU,GACV,WAAW,GACX,OAAO,GACP,iBAAiB,GACjB,SAAS,GACT,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,mBAAmB,CAAC;IACpC,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB,CAAC;AAOF;;;;;;;;;;;;;GAaG;AACH,qBAAa,qBAAsB,YAAW,eAAe;IA6B/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IA5BjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,IAAI,CAA+C;IAC3D,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;gBAYQ,IAAI,EAAE,4BAA4B;IAExD,QAAQ,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IA0J3F,WAAW,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAuBhG,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAIrC,OAAO,CAAC,cAAc;IAKhB,IAAI;YAaI,aAAa;YAcb,OAAO;IA2DrB,OAAO,CAAC,qBAAqB;YAiCf,UAAU;IAuCxB,OAAO,CAAC,iBAAiB;CA2B1B"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,aAAa,EACb,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,KAAK,4BAA4B,GAAG,IAAI,CACtC,gBAAgB,EACd,gBAAgB,GAChB,UAAU,GACV,WAAW,GACX,OAAO,GACP,iBAAiB,GACjB,SAAS,GACT,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,mBAAmB,CAAC;IACpC,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB,CAAC;AAOF;;;;;;;;;;;;;GAaG;AACH,qBAAa,qBAAsB,YAAW,eAAe;IA6B/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IA5BjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,IAAI,CAA+C;IAC3D,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;gBAYQ,IAAI,EAAE,4BAA4B;IAExD,QAAQ,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IA0J3F,WAAW,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAuBhG,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAIrC,OAAO,CAAC,cAAc;IAKhB,IAAI;YAaI,aAAa;YAcb,OAAO;IA2DrB,OAAO,CAAC,qBAAqB;YAiCf,UAAU;IAwCxB,OAAO,CAAC,iBAAiB;CA2B1B"}

package/dist/dispatch.js

@@ -353,9 +353,10 @@ export class CodexAppServerAdapter {
         // model, reasoningEffort). Passing them on resume lets the user change
         // PRLL_CODEX_* env vars and have the bridge pick them up on the next
         // restart instead of being stuck on the values baked into the persisted
-        // thread. Sandbox / approval values are normalised to the camelCase enum
-        // the protocol expects (`workspaceWrite`, `onRequest`, etc.), so users
-        // can supply either CLI-style or protocol-style env values.
+        // thread. Sandbox / approval values are normalised to the kebab-case
+        // enum form the protocol expects (`workspace-write`, `on-request`, etc.
+        // — serde rename_all kebab-case on the Rust enum); users can supply
+        // either kebab or camel and we always emit kebab.
         const commonParams = {
             approvalPolicy: normalizeApprovalPolicy(this.opts.approvalPolicy),
             sandbox: normalizeSandbox(this.opts.sandbox),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/codex-agent",
-  "version": "1.18.1",
+  "version": "1.18.2",
   "description": "Codex CLI bridge runtime for self-hosted Parall agents",
   "license": "MIT",
   "repository": {

package/src/config.ts

@@ -62,35 +62,43 @@ export function resolveCodexAgentConfig(env: NodeJS.ProcessEnv = process.env): C
 }
 
 /**
- * Normalise a sandbox value (CLI docs use kebab-case like `workspace-write`,
- * but the app-server JSON-RPC protocol uses camelCase like `workspaceWrite`).
- * Accept both forms and emit the canonical protocol form.
+ * Normalise a sandbox value to the kebab-case form the app-server JSON-RPC
+ * enum expects (`read-only` / `workspace-write` / `danger-full-access`).
+ * The CLI-facing PRLL_CODEX_SANDBOX env var may come in as either kebab-case
+ * or camelCase (from docs that cite the Rust field names); accept both.
+ *
+ * Empirically verified: the app-server rejects `workspaceWrite` with
+ *   "unknown variant workspaceWrite, expected one of read-only,
+ *    workspace-write, danger-full-access"
+ * which is the Rust enum's serde kebab-case form.
  */
 export function normalizeSandbox(value: string): string {
   const map: Record<string, string> = {
-    "workspace-write": "workspaceWrite",
-    "workspacewrite": "workspaceWrite",
-    "danger-full-access": "dangerFullAccess",
-    "dangerfullaccess": "dangerFullAccess",
-    "read-only": "readOnly",
-    "readonly": "readOnly",
+    "workspace-write": "workspace-write",
+    "workspacewrite": "workspace-write",
+    "danger-full-access": "danger-full-access",
+    "dangerfullaccess": "danger-full-access",
+    "read-only": "read-only",
+    "readonly": "read-only",
   };
   return map[value.toLowerCase()] ?? value;
 }
 
 /**
- * Normalise an approval policy string to the camelCase form the app-server
- * JSON-RPC protocol uses (`never` / `onRequest` / `unlessTrusted`).
+ * Normalise an approval policy string to the kebab-case form the app-server
+ * JSON-RPC enum expects (`never` / `on-request` / `on-failure` /
+ * `unless-trusted`). Mirrors the sandbox enum — serde rename_all kebab-case
+ * applies across app-server protocol enums.
  */
 export function normalizeApprovalPolicy(value: string): string {
   const map: Record<string, string> = {
     "never": "never",
-    "on-request": "onRequest",
-    "onrequest": "onRequest",
-    "unless-trusted": "unlessTrusted",
-    "unlesstrusted": "unlessTrusted",
-    "on-failure": "onFailure",
-    "onfailure": "onFailure",
+    "on-request": "on-request",
+    "onrequest": "on-request",
+    "unless-trusted": "unless-trusted",
+    "unlesstrusted": "unless-trusted",
+    "on-failure": "on-failure",
+    "onfailure": "on-failure",
   };
   return map[value.toLowerCase()] ?? value;
 }

package/src/dispatch.ts

@@ -396,9 +396,10 @@ export class CodexAppServerAdapter implements DispatchAdapter {
     // model, reasoningEffort). Passing them on resume lets the user change
     // PRLL_CODEX_* env vars and have the bridge pick them up on the next
     // restart instead of being stuck on the values baked into the persisted
-    // thread. Sandbox / approval values are normalised to the camelCase enum
-    // the protocol expects (`workspaceWrite`, `onRequest`, etc.), so users
-    // can supply either CLI-style or protocol-style env values.
+    // thread. Sandbox / approval values are normalised to the kebab-case
+    // enum form the protocol expects (`workspace-write`, `on-request`, etc.
+    // — serde rename_all kebab-case on the Rust enum); users can supply
+    // either kebab or camel and we always emit kebab.
     const commonParams: Record<string, unknown> = {
       approvalPolicy: normalizeApprovalPolicy(this.opts.approvalPolicy),
       sandbox: normalizeSandbox(this.opts.sandbox),