@parall/codex-agent 1.26.0 → 1.26.1

package/dist/dispatch.d.ts

@@ -44,6 +44,7 @@ export declare class CodexAppServerAdapter implements DispatchAdapter {
         reasoningEffort?: string | null;
     }): void;
     dispatch({ event, bodyForAgent, sessionKey, context }: DispatchOpts): AsyncIterable<RuntimeEvent>;
+    getBranchPoint(_sessionKey: string): string | undefined;
     forkSession({ sessionKey: parentSessionKey }: ForkOpts): Promise<ForkSessionHandle | null>;
     cleanupFork({ fork }: CleanupForkOpts): void;
     private logForkFailure;

package/dist/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,aAAa,EACb,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,KAAK,4BAA4B,GAAG,IAAI,CACtC,gBAAgB,EACd,gBAAgB,GAChB,UAAU,GACV,WAAW,GACX,OAAO,GACP,iBAAiB,GACjB,SAAS,GACT,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,mBAAmB,CAAC;IACpC,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAOF;;;;;;;;;;;;;GAaG;AACH,qBAAa,qBAAsB,YAAW,eAAe;IA6B/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IA5BjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,IAAI,CAA+C;IAC3D,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;gBAYQ,IAAI,EAAE,4BAA4B;IAE/D,YAAY,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAK/E,QAAQ,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IAgLlG,WAAW,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAuBhG,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAIrC,OAAO,CAAC,cAAc;IAKhB,IAAI;YAaI,aAAa;YAcb,OAAO;IA8DrB,OAAO,CAAC,qBAAqB;YAiCf,UAAU;IAwCxB,OAAO,CAAC,iBAAiB;CA2B1B"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,aAAa,EACb,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,KAAK,4BAA4B,GAAG,IAAI,CACtC,gBAAgB,EACd,gBAAgB,GAChB,UAAU,GACV,WAAW,GACX,OAAO,GACP,iBAAiB,GACjB,SAAS,GACT,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,mBAAmB,CAAC;IACpC,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAOF;;;;;;;;;;;;;GAaG;AACH,qBAAa,qBAAsB,YAAW,eAAe;IA6B/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IA5BjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,IAAI,CAA+C;IAC3D,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;gBAYQ,IAAI,EAAE,4BAA4B;IAE/D,YAAY,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAK/E,QAAQ,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IAgLxG,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAMjD,WAAW,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAuBhG,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAIrC,OAAO,CAAC,cAAc;IAKhB,IAAI;YAaI,aAAa;YAcb,OAAO;IA8DrB,OAAO,CAAC,qBAAqB;YAiCf,UAAU;IAwCxB,OAAO,CAAC,iBAAiB;CA2B1B"}

package/dist/dispatch.js

@@ -232,6 +232,11 @@ export class CodexAppServerAdapter {
             }
         }
     }
+    getBranchPoint(_sessionKey) {
+        // Codex app-server does not expose a branch-point API; fork scope prefix
+        // provides the behavioral fallback for this runtime.
+        return undefined;
+    }
     async forkSession({ sessionKey: parentSessionKey }) {
         const client = this.client;
         if (!client)

package/dist/index.js

@@ -5,7 +5,7 @@ import { ApiError, ParallClient, ParallWs } from "@parall/sdk";
 import { buildCodexRuntimeKey, contextFilePathForSession, resolveCodexAgentConfig, resolveWsUrl, sessionStateFilePathForRuntime, stepIdFilePathForSession, } from "./config.js";
 import { CodexAppServerAdapter } from "./dispatch.js";
 import { CodexSessionManager } from "./session-manager.js";
-import { ensureCodexWorkspace } from "./workspace.js";
+import { ensureCodexWorkspace, ensureWorkspaceTrusted } from "./workspace.js";
 function createLogger(prefix) {
     return {
         info: (msg) => console.log(`[${prefix}] ${msg}`),
@@ -35,6 +35,7 @@ async function main() {
     });
     const me = await getAgentMeWithLegacyFallback(client, config.orgId);
     const agentUserId = me.id;
+    ensureWorkspaceTrusted(config.codexHome, config.workspaceDir, log);
     ensureCodexWorkspace(config.workspaceDir, log, {
         userId: agentUserId,
         displayName: me.display_name,

package/dist/workspace.d.ts

@@ -1,4 +1,17 @@
 import type { AgentIdentity } from "@parall/agent-core";
+/**
+ * Ensure the workspace directory is marked as trusted in the global Codex
+ * config so that project-level `developer_instructions` are loaded at
+ * app-server startup.
+ *
+ * Uses smol-toml for structured reads (avoids substring false-positives),
+ * but writes via raw text manipulation (preserves comments and formatting).
+ * Failures are swallowed (warn-only) so a trust write issue never blocks
+ * the bridge from starting.
+ */
+export declare function ensureWorkspaceTrusted(codexHome: string, workspaceDir: string, log?: {
+    warn: (msg: string) => void;
+}): void;
 export declare function ensureCodexWorkspace(workspaceDir: string, log?: {
     warn: (msg: string) => void;
 }, agentIdentity?: AgentIdentity): void;

package/dist/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,EACrC,aAAa,CAAC,EAAE,aAAa,GAC5B,IAAI,CAqBN"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACpC,IAAI,CAyEN;AASD,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,EACrC,aAAa,CAAC,EAAE,aAAa,GAC5B,IAAI,CAqBN"}

package/dist/workspace.js

@@ -1,6 +1,102 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { parse as parseToml } from "smol-toml";
 import { BRIDGE_WORKSPACE_INSTRUCTIONS, PRLL_BEHAVIOR, PRLL_REFERENCE_GUIDE, buildIdentity, buildSkillReferences, writeSkillFiles, } from "@parall/agent-core";
+/**
+ * Ensure the workspace directory is marked as trusted in the global Codex
+ * config so that project-level `developer_instructions` are loaded at
+ * app-server startup.
+ *
+ * Uses smol-toml for structured reads (avoids substring false-positives),
+ * but writes via raw text manipulation (preserves comments and formatting).
+ * Failures are swallowed (warn-only) so a trust write issue never blocks
+ * the bridge from starting.
+ */
+export function ensureWorkspaceTrusted(codexHome, workspaceDir, log) {
+    const configPath = path.join(codexHome, "config.toml");
+    const normalizedPath = path.resolve(workspaceDir);
+    try {
+        let content = "";
+        try {
+            content = fs.readFileSync(configPath, "utf8");
+        }
+        catch (err) {
+            if (err.code !== "ENOENT")
+                throw err;
+        }
+        // Structured read — know exactly what state we're in.
+        let parsed;
+        if (content) {
+            try {
+                parsed = parseToml(content);
+            }
+            catch {
+                // File is already broken TOML — don't make it worse.
+                log?.warn(`Codex config.toml is not valid TOML; skipping trust write for ${normalizedPath}`);
+                return;
+            }
+        }
+        const projects = parsed?.projects;
+        if (projects?.[normalizedPath]?.trust_level === "trusted")
+            return;
+        // TOML basic-string keys require backslash and double-quote escaping.
+        const escapedPath = normalizedPath.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+        const sectionHeader = `[projects."${escapedPath}"]`;
+        const trustLine = 'trust_level = "trusted"';
+        const headerIdx = content.indexOf(sectionHeader);
+        if (headerIdx !== -1) {
+            // Section exists but trust_level isn't "trusted". Scan all lines
+            // within the section (up to the next `[` header or EOF) for an
+            // existing trust_level key — it may not be the first line after
+            // the header if the user added comments or other keys.
+            const headerLineEnd = content.indexOf("\n", headerIdx);
+            if (headerLineEnd === -1) {
+                content = `${content}\n${trustLine}\n`;
+            }
+            else {
+                const afterHeader = headerLineEnd + 1;
+                const sectionEnd = findSectionEnd(content, afterHeader);
+                const sectionBody = content.substring(afterHeader, sectionEnd);
+                const trustMatch = sectionBody.match(/^[ \t]*trust_level[ \t]*=.*$/m);
+                if (trustMatch) {
+                    const matchStart = afterHeader + trustMatch.index;
+                    const matchEnd = matchStart + trustMatch[0].length;
+                    content = content.substring(0, matchStart) + trustLine + content.substring(matchEnd);
+                }
+                else {
+                    content = content.substring(0, afterHeader) + trustLine + "\n" + content.substring(afterHeader);
+                }
+            }
+            fs.writeFileSync(configPath, content, "utf8");
+        }
+        else if (projects?.[normalizedPath] !== undefined) {
+            // smol-toml found the section but indexOf missed it — the header
+            // uses non-canonical TOML formatting. Appending would create a
+            // duplicate table. Skip rather than corrupt the file.
+            log?.warn(`Codex config.toml has non-canonical header for ${normalizedPath}; skipping trust write`);
+        }
+        else if (projects && !content.includes("[projects.")) {
+            // `projects` exists in parsed output but no `[projects.` table
+            // headers in the raw text — it's an inline table. Appending a
+            // standard table header would produce invalid TOML.
+            log?.warn(`Codex config.toml uses inline table for projects; skipping trust write for ${normalizedPath}`);
+        }
+        else {
+            // Section doesn't exist — append.
+            fs.mkdirSync(codexHome, { recursive: true });
+            fs.appendFileSync(configPath, `\n${sectionHeader}\n${trustLine}\n`, "utf8");
+        }
+    }
+    catch (err) {
+        log?.warn(`failed to write Codex project trust for ${normalizedPath}: ${String(err)}`);
+    }
+}
+function findSectionEnd(content, fromIndex) {
+    // A TOML section ends at the next `[` that starts a new table header.
+    // Match `[` at the beginning of a line (not inside a value).
+    const nextHeader = content.indexOf("\n[", fromIndex);
+    return nextHeader === -1 ? content.length : nextHeader;
+}
 export function ensureCodexWorkspace(workspaceDir, log, agentIdentity) {
     const systemPrompt = [
         buildIdentity(agentIdentity),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/codex-agent",
-  "version": "1.26.0",
+  "version": "1.26.1",
   "description": "Codex CLI bridge runtime for self-hosted Parall agents",
   "license": "MIT",
   "repository": {
@@ -25,9 +25,10 @@
     "src"
   ],
   "dependencies": {
-    "@parall/agent-core": "1.26.0",
-    "@parall/cli": "1.26.0",
-    "@parall/sdk": "1.26.0"
+    "smol-toml": "^1.6.1",
+    "@parall/agent-core": "1.26.1",
+    "@parall/cli": "1.26.1",
+    "@parall/sdk": "1.26.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/src/dispatch.ts

@@ -269,6 +269,12 @@ export class CodexAppServerAdapter implements DispatchAdapter {
     }
   }
 
+  getBranchPoint(_sessionKey: string): string | undefined {
+    // Codex app-server does not expose a branch-point API; fork scope prefix
+    // provides the behavioral fallback for this runtime.
+    return undefined;
+  }
+
   async forkSession({ sessionKey: parentSessionKey }: ForkOpts): Promise<ForkSessionHandle | null> {
     const client = this.client;
     if (!client) return null;

package/src/index.ts

@@ -13,7 +13,7 @@ import {
 } from "./config.js";
 import { CodexAppServerAdapter } from "./dispatch.js";
 import { CodexSessionManager } from "./session-manager.js";
-import { ensureCodexWorkspace } from "./workspace.js";
+import { ensureCodexWorkspace, ensureWorkspaceTrusted } from "./workspace.js";
 
 function createLogger(prefix: string) {
   return {
@@ -47,6 +47,7 @@ async function main() {
 
   const me = await getAgentMeWithLegacyFallback(client, config.orgId);
   const agentUserId = me.id;
+  ensureWorkspaceTrusted(config.codexHome, config.workspaceDir, log);
   ensureCodexWorkspace(config.workspaceDir, log, {
     userId: agentUserId,
     displayName: me.display_name,

package/src/workspace.ts

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { parse as parseToml } from "smol-toml";
 import {
   BRIDGE_WORKSPACE_INSTRUCTIONS,
   PRLL_BEHAVIOR,
@@ -10,6 +11,102 @@ import {
 } from "@parall/agent-core";
 import type { AgentIdentity } from "@parall/agent-core";
 
+/**
+ * Ensure the workspace directory is marked as trusted in the global Codex
+ * config so that project-level `developer_instructions` are loaded at
+ * app-server startup.
+ *
+ * Uses smol-toml for structured reads (avoids substring false-positives),
+ * but writes via raw text manipulation (preserves comments and formatting).
+ * Failures are swallowed (warn-only) so a trust write issue never blocks
+ * the bridge from starting.
+ */
+export function ensureWorkspaceTrusted(
+  codexHome: string,
+  workspaceDir: string,
+  log?: { warn: (msg: string) => void },
+): void {
+  const configPath = path.join(codexHome, "config.toml");
+  const normalizedPath = path.resolve(workspaceDir);
+
+  try {
+    let content = "";
+    try {
+      content = fs.readFileSync(configPath, "utf8");
+    } catch (err) {
+      if ((err as NodeJS.ErrnoException).code !== "ENOENT") throw err;
+    }
+
+    // Structured read — know exactly what state we're in.
+    let parsed: Record<string, unknown> | undefined;
+    if (content) {
+      try {
+        parsed = parseToml(content) as Record<string, unknown>;
+      } catch {
+        // File is already broken TOML — don't make it worse.
+        log?.warn(`Codex config.toml is not valid TOML; skipping trust write for ${normalizedPath}`);
+        return;
+      }
+    }
+
+    const projects = parsed?.projects as Record<string, Record<string, unknown>> | undefined;
+    if (projects?.[normalizedPath]?.trust_level === "trusted") return;
+
+    // TOML basic-string keys require backslash and double-quote escaping.
+    const escapedPath = normalizedPath.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+    const sectionHeader = `[projects."${escapedPath}"]`;
+    const trustLine = 'trust_level = "trusted"';
+
+    const headerIdx = content.indexOf(sectionHeader);
+    if (headerIdx !== -1) {
+      // Section exists but trust_level isn't "trusted". Scan all lines
+      // within the section (up to the next `[` header or EOF) for an
+      // existing trust_level key — it may not be the first line after
+      // the header if the user added comments or other keys.
+      const headerLineEnd = content.indexOf("\n", headerIdx);
+      if (headerLineEnd === -1) {
+        content = `${content}\n${trustLine}\n`;
+      } else {
+        const afterHeader = headerLineEnd + 1;
+        const sectionEnd = findSectionEnd(content, afterHeader);
+        const sectionBody = content.substring(afterHeader, sectionEnd);
+        const trustMatch = sectionBody.match(/^[ \t]*trust_level[ \t]*=.*$/m);
+        if (trustMatch) {
+          const matchStart = afterHeader + trustMatch.index!;
+          const matchEnd = matchStart + trustMatch[0].length;
+          content = content.substring(0, matchStart) + trustLine + content.substring(matchEnd);
+        } else {
+          content = content.substring(0, afterHeader) + trustLine + "\n" + content.substring(afterHeader);
+        }
+      }
+      fs.writeFileSync(configPath, content, "utf8");
+    } else if (projects?.[normalizedPath] !== undefined) {
+      // smol-toml found the section but indexOf missed it — the header
+      // uses non-canonical TOML formatting. Appending would create a
+      // duplicate table. Skip rather than corrupt the file.
+      log?.warn(`Codex config.toml has non-canonical header for ${normalizedPath}; skipping trust write`);
+    } else if (projects && !content.includes("[projects.")) {
+      // `projects` exists in parsed output but no `[projects.` table
+      // headers in the raw text — it's an inline table. Appending a
+      // standard table header would produce invalid TOML.
+      log?.warn(`Codex config.toml uses inline table for projects; skipping trust write for ${normalizedPath}`);
+    } else {
+      // Section doesn't exist — append.
+      fs.mkdirSync(codexHome, { recursive: true });
+      fs.appendFileSync(configPath, `\n${sectionHeader}\n${trustLine}\n`, "utf8");
+    }
+  } catch (err) {
+    log?.warn(`failed to write Codex project trust for ${normalizedPath}: ${String(err)}`);
+  }
+}
+
+function findSectionEnd(content: string, fromIndex: number): number {
+  // A TOML section ends at the next `[` that starts a new table header.
+  // Match `[` at the beginning of a line (not inside a value).
+  const nextHeader = content.indexOf("\n[", fromIndex);
+  return nextHeader === -1 ? content.length : nextHeader;
+}
+
 export function ensureCodexWorkspace(
   workspaceDir: string,
   log?: { warn: (msg: string) => void },