@parall/codex-agent 1.31.0 → 1.32.0

package/dist/jsonrpc-client.js

@@ -14,28 +14,28 @@ export class JsonRpcStdioClient {
     killProcess;
     nextId = 1;
     pending = new Map();
-    buffer = "";
+    buffer = '';
     onNotification = null;
     disposed = false;
     constructor(proc, requestTimeoutMs = DEFAULT_REQUEST_TIMEOUT_MS, killProcess) {
         this.proc = proc;
         this.requestTimeoutMs = requestTimeoutMs;
         this.killProcess = killProcess;
-        proc.stdout.setEncoding("utf8");
-        proc.stdout.on("data", (chunk) => this.ingest(chunk));
-        proc.once("close", () => this.dispose(new Error("app-server subprocess closed")));
-        proc.once("error", (err) => this.dispose(err));
-        proc.stdin.on("error", (err) => this.killUnhealthy(err));
+        proc.stdout.setEncoding('utf8');
+        proc.stdout.on('data', (chunk) => this.ingest(chunk));
+        proc.once('close', () => this.dispose(new Error('app-server subprocess closed')));
+        proc.once('error', (err) => this.dispose(err));
+        proc.stdin.on('error', (err) => this.killUnhealthy(err));
     }
     setNotificationHandler(handler) {
         this.onNotification = handler;
     }
     sendRequest(method, params) {
         if (this.disposed) {
-            return Promise.reject(new Error("JSON-RPC client disposed"));
+            return Promise.reject(new Error('JSON-RPC client disposed'));
         }
         const id = this.nextId++;
-        const request = { jsonrpc: "2.0", id, method, params };
+        const request = { jsonrpc: '2.0', id, method, params };
         const promise = new Promise((resolve, reject) => {
             const timer = setTimeout(() => {
                 const pending = this.pending.get(id);
@@ -53,7 +53,7 @@ export class JsonRpcStdioClient {
     sendNotification(method, params) {
         if (this.disposed)
             return;
-        const notification = { jsonrpc: "2.0", method, params };
+        const notification = { jsonrpc: '2.0', method, params };
         this.writeFrame(notification);
     }
     isDisposed() {
@@ -84,19 +84,19 @@ export class JsonRpcStdioClient {
                 this.killProcess(this.proc);
             }
             else {
-                this.proc.kill("SIGTERM");
+                this.proc.kill('SIGTERM');
             }
         }
     }
     ingest(chunk) {
         this.buffer += chunk;
-        let newlineIndex = this.buffer.indexOf("\n");
+        let newlineIndex = this.buffer.indexOf('\n');
         while (newlineIndex >= 0) {
             const line = this.buffer.slice(0, newlineIndex).trim();
             this.buffer = this.buffer.slice(newlineIndex + 1);
             if (line)
                 this.handleLine(line);
-            newlineIndex = this.buffer.indexOf("\n");
+            newlineIndex = this.buffer.indexOf('\n');
         }
     }
     handleLine(line) {
@@ -114,7 +114,7 @@ export class JsonRpcStdioClient {
             this.pending.delete(message.id);
             clearTimeout(pending.timer);
             if (message.error) {
-                pending.reject(new Error(message.error.message || "JSON-RPC error"));
+                pending.reject(new Error(message.error.message || 'JSON-RPC error'));
             }
             else {
                 pending.resolve(message.result);
@@ -127,8 +127,8 @@ export class JsonRpcStdioClient {
     }
 }
 function isResponse(m) {
-    return !!m && typeof m === "object" && "id" in m && ("result" in m || "error" in m);
+    return !!m && typeof m === 'object' && 'id' in m && ('result' in m || 'error' in m);
 }
 function isNotification(m) {
-    return !!m && typeof m === "object" && "method" in m && !("id" in m);
+    return !!m && typeof m === 'object' && 'method' in m && !('id' in m);
 }

package/dist/session-manager.d.ts

@@ -1,4 +1,4 @@
-import type { ForkSessionHandle } from "@parall/agent-core";
+import type { ForkSessionHandle } from '@parall/agent-core';
 type Logger = {
     warn(message: string): void;
 };

package/dist/session-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../src/session-manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAO5D,KAAK,MAAM,GAAG;IAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAE9C;;;;;GAKG;AACH,qBAAa,mBAAmB;IAI5B,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAL1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;gBAG5C,cAAc,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,YAAA;IAKlC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAInC,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAInD,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAOnD,oBAAoB,IAAI,iBAAiB;IAOzC,WAAW,CAAC,UAAU,EAAE,MAAM;IAI9B,6EAA6E;IAC7E,eAAe;IAWf,OAAO,CAAC,OAAO;IAgBf,OAAO,CAAC,OAAO;CAqBhB"}
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../src/session-manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAO5D,KAAK,MAAM,GAAG;IAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAE9C;;;;;GAKG;AACH,qBAAa,mBAAmB;IAI5B,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAL1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;gBAG5C,cAAc,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,YAAA;IAKlC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAInC,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAInD,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAOnD,oBAAoB,IAAI,iBAAiB;IAOzC,WAAW,CAAC,UAAU,EAAE,MAAM;IAI9B,6EAA6E;IAC7E,eAAe;IAWf,OAAO,CAAC,OAAO;IAoBf,OAAO,CAAC,OAAO;CAqBhB"}

package/dist/session-manager.js

@@ -1,5 +1,5 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
+import * as fs from 'node:fs';
+import * as path from 'node:path';
 /**
  * Persists the app-server `threadId` for the main Parall session so the
  * bridge can resume across restarts via `thread/resume`. Fork sessions
@@ -50,14 +50,16 @@ export class CodexSessionManager {
     }
     restore() {
         try {
-            const raw = fs.readFileSync(this.stateFilePath, "utf8");
+            const raw = fs.readFileSync(this.stateFilePath, 'utf8');
             const parsed = JSON.parse(raw);
-            if (parsed.runtimeKey === this.mainSessionKey && typeof parsed.threadId === "string" && parsed.threadId.trim()) {
+            if (parsed.runtimeKey === this.mainSessionKey &&
+                typeof parsed.threadId === 'string' &&
+                parsed.threadId.trim()) {
                 this.threadIds.set(this.mainSessionKey, parsed.threadId.trim());
             }
         }
         catch (error) {
-            if (error?.code !== "ENOENT") {
+            if (error?.code !== 'ENOENT') {
                 this.logger?.warn(`codex-agent: could not restore main thread state from ${this.stateFilePath}: ${String(error)}`);
             }
         }

package/dist/workspace.d.ts

@@ -1,4 +1,4 @@
-import type { AgentIdentity } from "@parall/agent-core";
+import type { AgentIdentity } from '@parall/agent-core';
 /**
  * Ensure the workspace directory is marked as trusted in the global Codex
  * config so that project-level `developer_instructions` are loaded at

package/dist/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACpC,IAAI,CAyEN;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAK/E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACpC,IAAI,CA6CN;AASD,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,EACrC,aAAa,CAAC,EAAE,aAAa,GAC5B,IAAI,CAqBN"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACpC,IAAI,CAgFN;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAK/E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACpC,IAAI,CA6CN;AASD,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,EACrC,aAAa,CAAC,EAAE,aAAa,GAC5B,IAAI,CAqBN"}

package/dist/workspace.js

@@ -1,7 +1,7 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { parse as parseToml } from "smol-toml";
-import { BRIDGE_WORKSPACE_INSTRUCTIONS, PRLL_BEHAVIOR, PRLL_REFERENCE_GUIDE, buildIdentity, buildSkillReferences, writeSkillFiles, } from "@parall/agent-core";
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { parse as parseToml } from 'smol-toml';
+import { BRIDGE_WORKSPACE_INSTRUCTIONS, PRLL_BEHAVIOR, PRLL_REFERENCE_GUIDE, buildIdentity, buildSkillReferences, writeSkillFiles, } from '@parall/agent-core';
 /**
  * Ensure the workspace directory is marked as trusted in the global Codex
  * config so that project-level `developer_instructions` are loaded at
@@ -13,15 +13,15 @@ import { BRIDGE_WORKSPACE_INSTRUCTIONS, PRLL_BEHAVIOR, PRLL_REFERENCE_GUIDE, bui
  * the bridge from starting.
  */
 export function ensureWorkspaceTrusted(codexHome, workspaceDir, log) {
-    const configPath = path.join(codexHome, "config.toml");
+    const configPath = path.join(codexHome, 'config.toml');
     const normalizedPath = path.resolve(workspaceDir);
     try {
-        let content = "";
+        let content = '';
         try {
-            content = fs.readFileSync(configPath, "utf8");
+            content = fs.readFileSync(configPath, 'utf8');
         }
         catch (err) {
-            if (err.code !== "ENOENT")
+            if (err.code !== 'ENOENT')
                 throw err;
         }
         // Structured read — know exactly what state we're in.
@@ -37,10 +37,10 @@ export function ensureWorkspaceTrusted(codexHome, workspaceDir, log) {
             }
         }
         const projects = parsed?.projects;
-        if (projects?.[normalizedPath]?.trust_level === "trusted")
+        if (projects?.[normalizedPath]?.trust_level === 'trusted')
             return;
         // TOML basic-string keys require backslash and double-quote escaping.
-        const escapedPath = normalizedPath.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+        const escapedPath = normalizedPath.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
         const sectionHeader = `[projects."${escapedPath}"]`;
         const trustLine = 'trust_level = "trusted"';
         const headerIdx = content.indexOf(sectionHeader);
@@ -49,7 +49,7 @@ export function ensureWorkspaceTrusted(codexHome, workspaceDir, log) {
             // within the section (up to the next `[` header or EOF) for an
             // existing trust_level key — it may not be the first line after
             // the header if the user added comments or other keys.
-            const headerLineEnd = content.indexOf("\n", headerIdx);
+            const headerLineEnd = content.indexOf('\n', headerIdx);
             if (headerLineEnd === -1) {
                 content = `${content}\n${trustLine}\n`;
             }
@@ -64,10 +64,11 @@ export function ensureWorkspaceTrusted(codexHome, workspaceDir, log) {
                     content = content.substring(0, matchStart) + trustLine + content.substring(matchEnd);
                 }
                 else {
-                    content = content.substring(0, afterHeader) + trustLine + "\n" + content.substring(afterHeader);
+                    content =
+                        content.substring(0, afterHeader) + trustLine + '\n' + content.substring(afterHeader);
                 }
             }
-            fs.writeFileSync(configPath, content, "utf8");
+            fs.writeFileSync(configPath, content, 'utf8');
         }
         else if (projects?.[normalizedPath] !== undefined) {
             // smol-toml found the section but indexOf missed it — the header
@@ -75,7 +76,7 @@ export function ensureWorkspaceTrusted(codexHome, workspaceDir, log) {
             // duplicate table. Skip rather than corrupt the file.
             log?.warn(`Codex config.toml has non-canonical header for ${normalizedPath}; skipping trust write`);
         }
-        else if (projects && !content.includes("[projects.")) {
+        else if (projects && !content.includes('[projects.')) {
             // `projects` exists in parsed output but no `[projects.` table
             // headers in the raw text — it's an inline table. Appending a
             // standard table header would produce invalid TOML.
@@ -84,7 +85,7 @@ export function ensureWorkspaceTrusted(codexHome, workspaceDir, log) {
         else {
             // Section doesn't exist — append.
             fs.mkdirSync(codexHome, { recursive: true });
-            fs.appendFileSync(configPath, `\n${sectionHeader}\n${trustLine}\n`, "utf8");
+            fs.appendFileSync(configPath, `\n${sectionHeader}\n${trustLine}\n`, 'utf8');
         }
     }
     catch (err) {
@@ -97,8 +98,8 @@ export function ensureWorkspaceTrusted(codexHome, workspaceDir, log) {
  * whether OPENAI_BASE_URL points to the Parall API.
  */
 export function isParallProxyMode(env = process.env) {
-    const baseUrl = env.OPENAI_BASE_URL?.trim()?.replace(/\/+$/, "");
-    const apiUrl = env.PRLL_API_URL?.trim()?.replace(/\/+$/, "");
+    const baseUrl = env.OPENAI_BASE_URL?.trim()?.replace(/\/+$/, '');
+    const apiUrl = env.PRLL_API_URL?.trim()?.replace(/\/+$/, '');
     if (!baseUrl || !apiUrl)
         return false;
     return baseUrl === apiUrl || baseUrl.startsWith(`${apiUrl}/`);
@@ -118,46 +119,46 @@ export function isParallProxyMode(env = process.env) {
  * Provider-managed: overwritten on every boot (env vars are the SSOT).
  */
 export function ensureParallProvider(codexHome, apiUrl, log) {
-    const configPath = path.join(codexHome, "config.toml");
-    const baseUrl = apiUrl.replace(/\/$/, "") + "/api/llm/v1";
+    const configPath = path.join(codexHome, 'config.toml');
+    const baseUrl = apiUrl.replace(/\/$/, '') + '/api/llm/v1';
     try {
-        let content = "";
+        let content = '';
         try {
-            content = fs.readFileSync(configPath, "utf8");
+            content = fs.readFileSync(configPath, 'utf8');
         }
         catch (err) {
-            if (err.code !== "ENOENT")
+            if (err.code !== 'ENOENT')
                 throw err;
         }
-        const sectionHeader = "[model_providers.parall]";
-        const authHeader = "[model_providers.parall.auth]";
+        const sectionHeader = '[model_providers.parall]';
+        const authHeader = '[model_providers.parall.auth]';
         const providerBlock = [
             sectionHeader,
             'name = "Parall Proxy"',
             `base_url = "${baseUrl}"`,
             'wire_api = "responses"',
-            "supports_websockets = false",
-            "requires_openai_auth = false",
-            "",
+            'supports_websockets = false',
+            'requires_openai_auth = false',
+            '',
             authHeader,
             'command = "printenv"',
             'args = ["OPENAI_API_KEY"]',
-        ].join("\n");
+        ].join('\n');
         const headerIdx = content.indexOf(sectionHeader);
         if (headerIdx !== -1) {
             let blockEnd = findSectionEnd(content, headerIdx + sectionHeader.length + 1);
             let authIdx = content.indexOf(authHeader, blockEnd);
-            while (authIdx !== -1 && content.substring(blockEnd, authIdx).trim() === "") {
+            while (authIdx !== -1 && content.substring(blockEnd, authIdx).trim() === '') {
                 blockEnd = findSectionEnd(content, authIdx + authHeader.length + 1);
                 authIdx = content.indexOf(authHeader, blockEnd);
             }
             content = content.substring(0, headerIdx) + providerBlock + content.substring(blockEnd);
         }
         else {
-            content = content.trimEnd() + "\n\n" + providerBlock + "\n";
+            content = content.trimEnd() + '\n\n' + providerBlock + '\n';
         }
         fs.mkdirSync(codexHome, { recursive: true });
-        fs.writeFileSync(configPath, content, "utf8");
+        fs.writeFileSync(configPath, content, 'utf8');
     }
     catch (err) {
         throw new Error(`failed to write Parall provider config: ${String(err)}`);
@@ -166,7 +167,7 @@ export function ensureParallProvider(codexHome, apiUrl, log) {
 function findSectionEnd(content, fromIndex) {
     // A TOML section ends at the next `[` that starts a new table header.
     // Match `[` at the beginning of a line (not inside a value).
-    const nextHeader = content.indexOf("\n[", fromIndex);
+    const nextHeader = content.indexOf('\n[', fromIndex);
     return nextHeader === -1 ? content.length : nextHeader;
 }
 export function ensureCodexWorkspace(workspaceDir, log, agentIdentity) {
@@ -176,14 +177,14 @@ export function ensureCodexWorkspace(workspaceDir, log, agentIdentity) {
         PRLL_BEHAVIOR,
         PRLL_REFERENCE_GUIDE,
         buildSkillReferences(workspaceDir),
-    ].join("\n\n");
+    ].join('\n\n');
     fs.mkdirSync(workspaceDir, { recursive: true });
-    const parallDir = path.join(workspaceDir, ".parall");
+    const parallDir = path.join(workspaceDir, '.parall');
     fs.mkdirSync(parallDir, { recursive: true });
-    fs.writeFileSync(path.join(parallDir, "system-prompt.md"), systemPrompt, "utf8");
-    writeSkillFiles(path.join(parallDir, "skills"));
-    const codexConfigDir = path.join(workspaceDir, ".codex");
+    fs.writeFileSync(path.join(parallDir, 'system-prompt.md'), systemPrompt, 'utf8');
+    writeSkillFiles(path.join(parallDir, 'skills'));
+    const codexConfigDir = path.join(workspaceDir, '.codex');
     fs.mkdirSync(codexConfigDir, { recursive: true });
-    const toml = `developer_instructions = """\n${systemPrompt.replace(/\\/g, "\\\\").replace(/"""/g, '\\"""')}\n"""\n`;
-    fs.writeFileSync(path.join(codexConfigDir, "config.toml"), toml, "utf8");
+    const toml = `developer_instructions = """\n${systemPrompt.replace(/\\/g, '\\\\').replace(/"""/g, '\\"""')}\n"""\n`;
+    fs.writeFileSync(path.join(codexConfigDir, 'config.toml'), toml, 'utf8');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/codex-agent",
-  "version": "1.31.0",
+  "version": "1.32.0",
   "description": "Codex CLI bridge runtime for self-hosted Parall agents",
   "license": "MIT",
   "repository": {
@@ -26,9 +26,9 @@
   ],
   "dependencies": {
     "smol-toml": "^1.6.1",
-    "@parall/cli": "1.31.0",
-    "@parall/agent-core": "1.31.0",
-    "@parall/sdk": "1.31.0"
+    "@parall/agent-core": "1.32.0",
+    "@parall/cli": "1.32.0",
+    "@parall/sdk": "1.32.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/src/config.ts

@@ -1,5 +1,5 @@
-import * as os from "node:os";
-import * as path from "node:path";
+import * as os from 'node:os';
+import * as path from 'node:path';
 
 export type CodexAgentConfig = {
   apiUrl: string;
@@ -45,9 +45,9 @@ function resolvePath(value: string): string {
 }
 
 export function resolveCodexAgentConfig(env: NodeJS.ProcessEnv = process.env): CodexAgentConfig {
-  const apiUrl = requireEnv(env, "PRLL_API_URL");
-  const apiKey = requireEnv(env, "PRLL_API_KEY");
-  const orgId = requireEnv(env, "PRLL_ORG_ID");
+  const apiUrl = requireEnv(env, 'PRLL_API_URL');
+  const apiKey = requireEnv(env, 'PRLL_API_KEY');
+  const orgId = requireEnv(env, 'PRLL_ORG_ID');
   // CODEX_HOME is where codex looks for `auth.json` / `config.toml`. Its
   // own default is `$HOME/.codex`; falling back to `$HOME` here was wrong
   // — it made the spawned app-server subprocess look for
@@ -56,17 +56,18 @@ export function resolveCodexAgentConfig(env: NodeJS.ProcessEnv = process.env): C
   // WebSocket endpoint. Default to `$HOME/.codex` so `codex login`'s
   // credentials are picked up transparently.
   const codexHome = resolvePath(
-    env.PRLL_CODEX_HOME?.trim()
-      || env.CODEX_HOME?.trim()
-      || path.join(env.HOME || os.homedir(), ".codex"),
+    env.PRLL_CODEX_HOME?.trim() ||
+      env.CODEX_HOME?.trim() ||
+      path.join(env.HOME || os.homedir(), '.codex'),
   );
   // Bridge state lives outside CODEX_HOME to avoid polluting codex's own
   // directory with non-codex files.
   const stateDir = resolvePath(
-    env.PRLL_STATE_DIR?.trim()
-      || path.join(env.HOME || os.homedir(), ".parall-agent"),
+    env.PRLL_STATE_DIR?.trim() || path.join(env.HOME || os.homedir(), '.parall-agent'),
+  );
+  const workspaceDir = resolvePath(
+    env.PRLL_WORKSPACE_DIR?.trim() || path.join(stateDir, 'workspace'),
   );
-  const workspaceDir = resolvePath(env.PRLL_WORKSPACE_DIR?.trim() || path.join(stateDir, "workspace"));
 
   return {
     apiUrl,
@@ -74,14 +75,14 @@ export function resolveCodexAgentConfig(env: NodeJS.ProcessEnv = process.env): C
     orgId,
     wsUrl: env.PRLL_WS_URL?.trim() || undefined,
     swimlaneName: env.PRLL_SWIMLANE_NAME?.trim() || undefined,
-    codexBin: env.PRLL_CODEX_BIN?.trim() || "codex",
+    codexBin: env.PRLL_CODEX_BIN?.trim() || 'codex',
     codexHome,
     stateDir,
     workspaceDir,
     model: env.PRLL_CODEX_MODEL?.trim() || undefined,
     reasoningEffort: env.PRLL_CODEX_REASONING_EFFORT?.trim() || undefined,
-    sandbox: env.PRLL_CODEX_SANDBOX?.trim() || "danger-full-access",
-    approvalPolicy: env.PRLL_CODEX_APPROVAL?.trim() || "never",
+    sandbox: env.PRLL_CODEX_SANDBOX?.trim() || 'danger-full-access',
+    approvalPolicy: env.PRLL_CODEX_APPROVAL?.trim() || 'never',
     runtimeKey: env.PRLL_CODEX_RUNTIME_KEY?.trim() || undefined,
   };
 }
@@ -99,12 +100,12 @@ export function resolveCodexAgentConfig(env: NodeJS.ProcessEnv = process.env): C
  */
 export function normalizeSandbox(value: string): string {
   const map: Record<string, string> = {
-    "workspace-write": "workspace-write",
-    "workspacewrite": "workspace-write",
-    "danger-full-access": "danger-full-access",
-    "dangerfullaccess": "danger-full-access",
-    "read-only": "read-only",
-    "readonly": "read-only",
+    'workspace-write': 'workspace-write',
+    workspacewrite: 'workspace-write',
+    'danger-full-access': 'danger-full-access',
+    dangerfullaccess: 'danger-full-access',
+    'read-only': 'read-only',
+    readonly: 'read-only',
   };
   return map[value.toLowerCase()] ?? value;
 }
@@ -117,22 +118,26 @@ export function normalizeSandbox(value: string): string {
  */
 export function normalizeApprovalPolicy(value: string): string {
   const map: Record<string, string> = {
-    "never": "never",
-    "on-request": "on-request",
-    "onrequest": "on-request",
-    "unless-trusted": "unless-trusted",
-    "unlesstrusted": "unless-trusted",
-    "on-failure": "on-failure",
-    "onfailure": "on-failure",
+    never: 'never',
+    'on-request': 'on-request',
+    onrequest: 'on-request',
+    'unless-trusted': 'unless-trusted',
+    unlesstrusted: 'unless-trusted',
+    'on-failure': 'on-failure',
+    onfailure: 'on-failure',
   };
   return map[value.toLowerCase()] ?? value;
 }
 
-export function resolveWsUrl(apiUrl: string, explicitWsUrl?: string, swimlaneName?: string): string {
-  const base = explicitWsUrl || `${apiUrl.replace(/\/$/, "").replace(/^http/, "ws")}/ws`;
+export function resolveWsUrl(
+  apiUrl: string,
+  explicitWsUrl?: string,
+  swimlaneName?: string,
+): string {
+  const base = explicitWsUrl || `${apiUrl.replace(/\/$/, '').replace(/^http/, 'ws')}/ws`;
   if (!swimlaneName) return base;
   const url = new URL(base);
-  url.searchParams.set("swimlane", swimlaneName);
+  url.searchParams.set('swimlane', swimlaneName);
   return url.toString();
 }
 
@@ -141,16 +146,16 @@ export function buildCodexRuntimeKey(agentUserId: string): string {
 }
 
 export function sessionStateFilePathForRuntime(stateDir: string, runtimeKey: string): string {
-  const fileName = Buffer.from(runtimeKey).toString("base64url");
-  return path.join(stateDir, "threads", `${fileName}.json`);
+  const fileName = Buffer.from(runtimeKey).toString('base64url');
+  return path.join(stateDir, 'threads', `${fileName}.json`);
 }
 
 export function contextFilePathForSession(stateDir: string, sessionKey: string): string {
-  const fileName = Buffer.from(sessionKey).toString("base64url");
-  return path.join(stateDir, "dispatch-context", `${fileName}.json`);
+  const fileName = Buffer.from(sessionKey).toString('base64url');
+  return path.join(stateDir, 'dispatch-context', `${fileName}.json`);
 }
 
 export function stepIdFilePathForSession(stateDir: string, sessionKey: string): string {
-  const fileName = Buffer.from(sessionKey).toString("base64url");
-  return path.join(stateDir, "step-ids", `${fileName}.txt`);
+  const fileName = Buffer.from(sessionKey).toString('base64url');
+  return path.join(stateDir, 'step-ids', `${fileName}.txt`);
 }