@parall/codex-agent 1.36.1 → 1.38.0

package/dist/config.d.ts

@@ -52,5 +52,13 @@ export declare function resolveWsUrl(apiUrl: string, explicitWsUrl?: string, swi
 export declare function buildCodexRuntimeKey(agentUserId: string): string;
 export declare function sessionStateFilePathForRuntime(stateDir: string, runtimeKey: string): string;
 export declare function contextFilePathForSession(stateDir: string, sessionKey: string): string;
+/**
+ * PRLL_CONTEXT_DIR root: per-lane dispatch context files, keyed by the
+ * canonical lane-key (see @parall/agent-core lane-key.ts). Anchored in the
+ * per-agent stateDir — never the workspace. Stable for the app-server's
+ * lifetime, which fixes the fork-reads-main-context mismatch of the single
+ * PRLL_CONTEXT_FILE under codex's one-process-many-threads model.
+ */
+export declare function dispatchContextDirPath(stateDir: string): string;
 export declare function stepIdFilePathForSession(stateDir: string, sessionKey: string): string;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAcF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,gBAAgB,CAyC9F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUtD;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW7D;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAMR;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGtF;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGrF"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAcF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,gBAAgB,CAyC9F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUtD;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW7D;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAMR;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3F;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGtF;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAGrF"}

package/dist/config.js

@@ -1,3 +1,4 @@
+import { dispatchLaneContextDir } from '@parall/agent-core';
 import * as os from 'node:os';
 import * as path from 'node:path';
 function requireEnv(env, name) {
@@ -104,6 +105,16 @@ export function contextFilePathForSession(stateDir, sessionKey) {
     const fileName = Buffer.from(sessionKey).toString('base64url');
     return path.join(stateDir, 'dispatch-context', `${fileName}.json`);
 }
+/**
+ * PRLL_CONTEXT_DIR root: per-lane dispatch context files, keyed by the
+ * canonical lane-key (see @parall/agent-core lane-key.ts). Anchored in the
+ * per-agent stateDir — never the workspace. Stable for the app-server's
+ * lifetime, which fixes the fork-reads-main-context mismatch of the single
+ * PRLL_CONTEXT_FILE under codex's one-process-many-threads model.
+ */
+export function dispatchContextDirPath(stateDir) {
+    return dispatchLaneContextDir(stateDir);
+}
 export function stepIdFilePathForSession(stateDir, sessionKey) {
     const fileName = Buffer.from(sessionKey).toString('base64url');
     return path.join(stateDir, 'step-ids', `${fileName}.txt`);

package/dist/dispatch.d.ts

@@ -5,6 +5,7 @@ type CodexAppServerAdapterOptions = Pick<CodexAgentConfig, 'approvalPolicy' | 'c
     sessionManager: CodexSessionManager;
     log?: GatewayLogger;
     contextFilePath?: string;
+    contextDirPath?: string;
     useParallProvider?: boolean;
 };
 export declare class CodexAppServerAdapter implements DispatchAdapter {

package/dist/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,aAAa,EACb,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,KAAK,4BAA4B,GAAG,IAAI,CACtC,gBAAgB,EACd,gBAAgB,GAChB,UAAU,GACV,WAAW,GACX,OAAO,GACP,iBAAiB,GACjB,SAAS,GACT,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,mBAAmB,CAAC;IACpC,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAqCF,qBAAa,qBAAsB,YAAW,eAAe;IA+B/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IA9BjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,IAAI,CAA+C;IAC3D,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;gBAYQ,IAAI,EAAE,4BAA4B;IAE/D,YAAY,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAMhF,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB/E,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAUvC,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAI1C,QAAQ,CAAC,EACd,KAAK,EACL,YAAY,EACZ,UAAU,EACV,OAAO,GACR,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IA0O7C,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAMjD,WAAW,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IA+BhG,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAIrC,OAAO,CAAC,cAAc;IAKhB,IAAI;YAiBI,aAAa;YA2Bb,OAAO;IAkFrB,OAAO,CAAC,qBAAqB;YAmCf,UAAU;IA2CxB,OAAO,CAAC,iBAAiB;CA2B1B"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,aAAa,EACb,YAAY,EACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,KAAK,4BAA4B,GAAG,IAAI,CACtC,gBAAgB,EACd,gBAAgB,GAChB,UAAU,GACV,WAAW,GACX,OAAO,GACP,iBAAiB,GACjB,SAAS,GACT,cAAc,CACjB,GAAG;IACF,cAAc,EAAE,mBAAmB,CAAC;IACpC,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAqCF,qBAAa,qBAAsB,YAAW,eAAe;IA+B/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IA9BjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,IAAI,CAA+C;IAC3D,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;IAC3D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;gBAYQ,IAAI,EAAE,4BAA4B;IAE/D,YAAY,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAMhF,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAqB/E,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAUvC,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAI1C,QAAQ,CAAC,EACd,KAAK,EACL,YAAY,EACZ,UAAU,EACV,OAAO,GACR,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;IA0O7C,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAMjD,WAAW,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IA+BhG,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,eAAe;IAIrC,OAAO,CAAC,cAAc;IAKhB,IAAI;YAiBI,aAAa;YA2Bb,OAAO;IAuFrB,OAAO,CAAC,qBAAqB;YAmCf,UAAU;IA2CxB,OAAO,CAAC,iBAAiB;CA2B1B"}

package/dist/dispatch.js

@@ -448,6 +448,11 @@ export class CodexAppServerAdapter {
         if (this.opts.contextFilePath) {
             env.PRLL_CONTEXT_FILE = this.opts.contextFilePath;
         }
+        if (this.opts.contextDirPath) {
+            // Per-lane dispatch context directory — per-target lookup, so fork
+            // threads never read main's context (the PRLL_CONTEXT_FILE pitfall).
+            env.PRLL_CONTEXT_DIR = this.opts.contextDirPath;
+        }
         // Pin the wiki workspace to the agent workspace (same convention as the
         // OpenClaw runtime). Without this, `parall wiki` resolves mounts relative
         // to the subprocess cwd — a `cd` into any subdirectory would silently

package/dist/index.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import * as os from 'node:os';
-import { ParallAgentGateway, createPlatformConfigManager, createLogger, createOtelLogger, childLogger, isPlatformManagedProfile, isPlatformModelOverride, resolveRuntimeModel, parseShutdownDeadlineMs, parseForkDeadlineMs, parseDispatchDeadlineMs, parseProviderConfig, clearAllProviderCreds, llmSource, initAgentTelemetry, } from '@parall/agent-core';
+import { ParallAgentGateway, createPlatformConfigManager, createLogger, createOtelLogger, childLogger, deriveModelIsPin, resolveRuntimeModel, parseShutdownDeadlineMs, parseForkDeadlineMs, parseDispatchDeadlineMs, parseProviderConfig, clearAllProviderCreds, llmSource, initAgentTelemetry, } from '@parall/agent-core';
 import { ApiError, ParallClient, ParallWs } from '@parall/sdk';
-import { buildCodexRuntimeKey, contextFilePathForSession, resolveCodexAgentConfig, resolveWsUrl, sessionStateFilePathForRuntime, stepIdFilePathForSession, } from './config.js';
+import { buildCodexRuntimeKey, contextFilePathForSession, dispatchContextDirPath, resolveCodexAgentConfig, resolveWsUrl, sessionStateFilePathForRuntime, stepIdFilePathForSession, } from './config.js';
 import { CodexAppServerAdapter } from './dispatch.js';
 import { CodexSessionManager } from './session-manager.js';
 import { ensureCodexWorkspace, ensureParallProvider, ensureWorkspaceTrusted, isParallProxyMode, } from './workspace.js';
@@ -79,25 +79,18 @@ async function main() {
             log: agentLog,
         });
         const platformDefaults = await configMgr.fetch();
-        let platformManaged = isPlatformManagedProfile(me.agent_profile);
-        // Model precedence: operator override (platform-managed) > env > server floor.
-        // The server delivers a model floor for Parall-proxy routes even when
-        // model_management=self, so the CLI never falls back to a built-in default
-        // the catalog might reject — but that floor must lose to an explicit env
-        // override. A profile is an operator-override only when it is platform-managed
-        // AND not explicitly self-managed: this treats legacy hosted agents
-        // (model_management=null, resolved to platform server-side) as overrides,
-        // while excluding local self agents whose delivered model is a floor.
-        // reasoning_effort stays an operator override (platform).
-        let platformModelOverride = isPlatformModelOverride(me.agent_profile);
+        // Model precedence: operator PIN (override) > env > server FLOOR. The server
+        // now says which it is via model_is_pin (deriveModelIsPin presence-gates the
+        // dual-read: old servers omit it → fall back to model_management). A PIN beats
+        // an explicit env override; a FLOOR loses to env. reasoning_effort is delivered
+        // by the server only when pinned, so we no longer gate it on a local flag.
+        const platformModelOverride = deriveModelIsPin(platformDefaults, me.agent_profile);
         const resolvedModel = resolveRuntimeModel(platformModelOverride, platformDefaults.model, config.model);
-        const resolvedEffort = platformManaged
-            ? (platformDefaults.thinkingEffort ?? config.reasoningEffort)
-            : config.reasoningEffort;
+        const resolvedEffort = platformDefaults.thinkingEffort ?? config.reasoningEffort;
         if (platformDefaults.model)
-            agentLog.info(`platform config: model=${platformDefaults.model} → resolved=${resolvedModel ?? 'cli-default'} (${platformModelOverride ? 'platform-managed' : 'floor/self'})`);
+            agentLog.info(`platform config: model=${platformDefaults.model} → resolved=${resolvedModel ?? 'cli-default'} (${platformModelOverride ? 'pin/override' : 'floor'})`);
         if (platformDefaults.thinkingEffort)
-            agentLog.info(`platform config: reasoning_effort=${platformDefaults.thinkingEffort} (${platformModelOverride ? 'applied' : 'ignored, model_management=self'})`);
+            agentLog.info(`platform config: reasoning_effort=${platformDefaults.thinkingEffort}`);
         const adapter = new CodexAppServerAdapter({
             codexBin: config.codexBin,
             codexHome: config.codexHome,
@@ -109,8 +102,34 @@ async function main() {
             sessionManager,
             log: agentLog,
             contextFilePath: mainContextFilePath,
+            contextDirPath: dispatchContextDirPath(config.stateDir),
             useParallProvider,
         });
+        // Shared by onConfigUpdate + onSessionReady. /agents/me is only consumed as
+        // deriveModelIsPin's legacy fallback when the server omits model_is_pin
+        // (old server) — skip that round trip otherwise.
+        const refreshPlatformConfig = async () => {
+            const updated = await configMgr.fetch();
+            let refreshedProfile;
+            if (updated.modelIsPin === undefined) {
+                try {
+                    refreshedProfile = (await getAgentMeWithLegacyFallback(client, config.orgId))
+                        .agent_profile;
+                }
+                catch (err) {
+                    // configMgr.fetch() degrades to cache on failure; mirror that for the
+                    // legacy fallback so a transient /agents/me error doesn't reject this
+                    // config-refresh callback. No profile → deriveModelIsPin treats the
+                    // delivered model as a floor (safe default).
+                    agentLog.warn(`platform config refresh: legacy /agents/me fallback failed: ${String(err)}`);
+                }
+            }
+            const isPin = deriveModelIsPin(updated, refreshedProfile);
+            adapter.updateConfig({
+                model: resolveRuntimeModel(isPin, updated.model, config.model) ?? null,
+                reasoningEffort: updated.thinkingEffort ?? config.reasoningEffort ?? null,
+            });
+        };
         const gateway = new ParallAgentGateway({
             accountId: agentUserId,
             client,
@@ -138,30 +157,9 @@ async function main() {
             dispatchDeadlineMs: parseDispatchDeadlineMs(process.env.PRLL_DISPATCH_DEADLINE_MS),
             contextFilePathForSession: (sessionKey) => contextFilePathForSession(config.stateDir, sessionKey),
             stepIdFilePathForSession: (sessionKey) => stepIdFilePathForSession(config.stateDir, sessionKey),
-            onConfigUpdate: async () => {
-                const refreshed = await getAgentMeWithLegacyFallback(client, config.orgId);
-                platformManaged = isPlatformManagedProfile(refreshed.agent_profile);
-                platformModelOverride = isPlatformModelOverride(refreshed.agent_profile);
-                const updated = await configMgr.fetch();
-                adapter.updateConfig({
-                    model: resolveRuntimeModel(platformModelOverride, updated.model, config.model) ?? null,
-                    reasoningEffort: platformManaged
-                        ? (updated.thinkingEffort ?? config.reasoningEffort)
-                        : (config.reasoningEffort ?? null),
-                });
-            },
-            onSessionReady: async () => {
-                const refreshed = await getAgentMeWithLegacyFallback(client, config.orgId);
-                platformManaged = isPlatformManagedProfile(refreshed.agent_profile);
-                platformModelOverride = isPlatformModelOverride(refreshed.agent_profile);
-                const updated = await configMgr.fetch();
-                adapter.updateConfig({
-                    model: resolveRuntimeModel(platformModelOverride, updated.model, config.model) ?? null,
-                    reasoningEffort: platformManaged
-                        ? (updated.thinkingEffort ?? config.reasoningEffort)
-                        : (config.reasoningEffort ?? null),
-                });
-            },
+            dispatchContextDir: dispatchContextDirPath(config.stateDir),
+            onConfigUpdate: refreshPlatformConfig,
+            onSessionReady: refreshPlatformConfig,
             onNewSession: () => {
                 sessionManager.clearMainThread();
             },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/codex-agent",
-  "version": "1.36.1",
+  "version": "1.38.0",
   "description": "Codex CLI bridge runtime for self-hosted Parall agents",
   "license": "MIT",
   "repository": {
@@ -26,9 +26,9 @@
   ],
   "dependencies": {
     "smol-toml": "^1.6.1",
-    "@parall/agent-core": "1.36.1",
-    "@parall/sdk": "1.36.1",
-    "@parall/cli": "1.36.1"
+    "@parall/agent-core": "1.38.0",
+    "@parall/cli": "1.38.0",
+    "@parall/sdk": "1.38.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/src/config.ts

@@ -1,3 +1,4 @@
+import { dispatchLaneContextDir } from '@parall/agent-core';
 import * as os from 'node:os';
 import * as path from 'node:path';
 
@@ -155,6 +156,17 @@ export function contextFilePathForSession(stateDir: string, sessionKey: string):
   return path.join(stateDir, 'dispatch-context', `${fileName}.json`);
 }
 
+/**
+ * PRLL_CONTEXT_DIR root: per-lane dispatch context files, keyed by the
+ * canonical lane-key (see @parall/agent-core lane-key.ts). Anchored in the
+ * per-agent stateDir — never the workspace. Stable for the app-server's
+ * lifetime, which fixes the fork-reads-main-context mismatch of the single
+ * PRLL_CONTEXT_FILE under codex's one-process-many-threads model.
+ */
+export function dispatchContextDirPath(stateDir: string): string {
+  return dispatchLaneContextDir(stateDir);
+}
+
 export function stepIdFilePathForSession(stateDir: string, sessionKey: string): string {
   const fileName = Buffer.from(sessionKey).toString('base64url');
   return path.join(stateDir, 'step-ids', `${fileName}.txt`);

package/src/dispatch.ts

@@ -35,6 +35,7 @@ type CodexAppServerAdapterOptions = Pick<
   sessionManager: CodexSessionManager;
   log?: GatewayLogger;
   contextFilePath?: string;
+  contextDirPath?: string;
   useParallProvider?: boolean;
 };
 
@@ -497,6 +498,11 @@ export class CodexAppServerAdapter implements DispatchAdapter {
     if (this.opts.contextFilePath) {
       env.PRLL_CONTEXT_FILE = this.opts.contextFilePath;
     }
+    if (this.opts.contextDirPath) {
+      // Per-lane dispatch context directory — per-target lookup, so fork
+      // threads never read main's context (the PRLL_CONTEXT_FILE pitfall).
+      env.PRLL_CONTEXT_DIR = this.opts.contextDirPath;
+    }
     // Pin the wiki workspace to the agent workspace (same convention as the
     // OpenClaw runtime). Without this, `parall wiki` resolves mounts relative
     // to the subprocess cwd — a `cd` into any subdirectory would silently

package/src/index.ts

@@ -7,8 +7,7 @@ import {
   createLogger,
   createOtelLogger,
   childLogger,
-  isPlatformManagedProfile,
-  isPlatformModelOverride,
+  deriveModelIsPin,
   resolveRuntimeModel,
   parseShutdownDeadlineMs,
   parseForkDeadlineMs,
@@ -22,6 +21,7 @@ import { ApiError, ParallClient, ParallWs } from '@parall/sdk';
 import {
   buildCodexRuntimeKey,
   contextFilePathForSession,
+  dispatchContextDirPath,
   resolveCodexAgentConfig,
   resolveWsUrl,
   sessionStateFilePathForRuntime,
@@ -111,33 +111,24 @@ async function main() {
       log: agentLog,
     });
     const platformDefaults = await configMgr.fetch();
-    let platformManaged = isPlatformManagedProfile(me.agent_profile);
-    // Model precedence: operator override (platform-managed) > env > server floor.
-    // The server delivers a model floor for Parall-proxy routes even when
-    // model_management=self, so the CLI never falls back to a built-in default
-    // the catalog might reject — but that floor must lose to an explicit env
-    // override. A profile is an operator-override only when it is platform-managed
-    // AND not explicitly self-managed: this treats legacy hosted agents
-    // (model_management=null, resolved to platform server-side) as overrides,
-    // while excluding local self agents whose delivered model is a floor.
-    // reasoning_effort stays an operator override (platform).
-    let platformModelOverride = isPlatformModelOverride(me.agent_profile);
+    // Model precedence: operator PIN (override) > env > server FLOOR. The server
+    // now says which it is via model_is_pin (deriveModelIsPin presence-gates the
+    // dual-read: old servers omit it → fall back to model_management). A PIN beats
+    // an explicit env override; a FLOOR loses to env. reasoning_effort is delivered
+    // by the server only when pinned, so we no longer gate it on a local flag.
+    const platformModelOverride = deriveModelIsPin(platformDefaults, me.agent_profile);
     const resolvedModel = resolveRuntimeModel(
       platformModelOverride,
       platformDefaults.model,
       config.model,
     );
-    const resolvedEffort = platformManaged
-      ? (platformDefaults.thinkingEffort ?? config.reasoningEffort)
-      : config.reasoningEffort;
+    const resolvedEffort = platformDefaults.thinkingEffort ?? config.reasoningEffort;
     if (platformDefaults.model)
       agentLog.info(
-        `platform config: model=${platformDefaults.model} → resolved=${resolvedModel ?? 'cli-default'} (${platformModelOverride ? 'platform-managed' : 'floor/self'})`,
+        `platform config: model=${platformDefaults.model} → resolved=${resolvedModel ?? 'cli-default'} (${platformModelOverride ? 'pin/override' : 'floor'})`,
       );
     if (platformDefaults.thinkingEffort)
-      agentLog.info(
-        `platform config: reasoning_effort=${platformDefaults.thinkingEffort} (${platformModelOverride ? 'applied' : 'ignored, model_management=self'})`,
-      );
+      agentLog.info(`platform config: reasoning_effort=${platformDefaults.thinkingEffort}`);
 
     const adapter = new CodexAppServerAdapter({
       codexBin: config.codexBin,
@@ -150,9 +141,39 @@ async function main() {
       sessionManager,
       log: agentLog,
       contextFilePath: mainContextFilePath,
+      contextDirPath: dispatchContextDirPath(config.stateDir),
       useParallProvider,
     });
 
+    // Shared by onConfigUpdate + onSessionReady. /agents/me is only consumed as
+    // deriveModelIsPin's legacy fallback when the server omits model_is_pin
+    // (old server) — skip that round trip otherwise.
+    const refreshPlatformConfig = async () => {
+      const updated = await configMgr.fetch();
+      let refreshedProfile:
+        | Awaited<ReturnType<typeof getAgentMeWithLegacyFallback>>['agent_profile']
+        | undefined;
+      if (updated.modelIsPin === undefined) {
+        try {
+          refreshedProfile = (await getAgentMeWithLegacyFallback(client, config.orgId))
+            .agent_profile;
+        } catch (err) {
+          // configMgr.fetch() degrades to cache on failure; mirror that for the
+          // legacy fallback so a transient /agents/me error doesn't reject this
+          // config-refresh callback. No profile → deriveModelIsPin treats the
+          // delivered model as a floor (safe default).
+          agentLog.warn(
+            `platform config refresh: legacy /agents/me fallback failed: ${String(err)}`,
+          );
+        }
+      }
+      const isPin = deriveModelIsPin(updated, refreshedProfile);
+      adapter.updateConfig({
+        model: resolveRuntimeModel(isPin, updated.model, config.model) ?? null,
+        reasoningEffort: updated.thinkingEffort ?? config.reasoningEffort ?? null,
+      });
+    };
+
     const gateway = new ParallAgentGateway({
       accountId: agentUserId,
       client,
@@ -182,30 +203,9 @@ async function main() {
         contextFilePathForSession(config.stateDir, sessionKey),
       stepIdFilePathForSession: (sessionKey) =>
         stepIdFilePathForSession(config.stateDir, sessionKey),
-      onConfigUpdate: async () => {
-        const refreshed = await getAgentMeWithLegacyFallback(client, config.orgId);
-        platformManaged = isPlatformManagedProfile(refreshed.agent_profile);
-        platformModelOverride = isPlatformModelOverride(refreshed.agent_profile);
-        const updated = await configMgr.fetch();
-        adapter.updateConfig({
-          model: resolveRuntimeModel(platformModelOverride, updated.model, config.model) ?? null,
-          reasoningEffort: platformManaged
-            ? (updated.thinkingEffort ?? config.reasoningEffort)
-            : (config.reasoningEffort ?? null),
-        });
-      },
-      onSessionReady: async () => {
-        const refreshed = await getAgentMeWithLegacyFallback(client, config.orgId);
-        platformManaged = isPlatformManagedProfile(refreshed.agent_profile);
-        platformModelOverride = isPlatformModelOverride(refreshed.agent_profile);
-        const updated = await configMgr.fetch();
-        adapter.updateConfig({
-          model: resolveRuntimeModel(platformModelOverride, updated.model, config.model) ?? null,
-          reasoningEffort: platformManaged
-            ? (updated.thinkingEffort ?? config.reasoningEffort)
-            : (config.reasoningEffort ?? null),
-        });
-      },
+      dispatchContextDir: dispatchContextDirPath(config.stateDir),
+      onConfigUpdate: refreshPlatformConfig,
+      onSessionReady: refreshPlatformConfig,
       onNewSession: () => {
         sessionManager.clearMainThread();
       },