@parall/codex-agent 1.49.0 → 1.50.1

package/dist/index.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import * as os from 'node:os';
-import { ParallAgentGateway, capabilityBinDir, configureHttpKeepAlive, createPlatformConfigManager, createLogger, createOtelLogger, childLogger, deriveModelIsPin, materializeChannelCapabilities, resolveRuntimeModel, parseShutdownDeadlineMs, parseForkDeadlineMs, parseDispatchDeadlineMs, parseProviderConfig, clearAllProviderCreds, llmSource, initAgentTelemetry, } from '@parall/agent-core';
+import { ParallAgentGateway, capabilityBinDir, configureHttpKeepAlive, createPlatformConfigManager, createLogger, createOtelLogger, childLogger, deriveModelIsPin, materializeChannelCapabilities, resolveRuntimeModel, parseShutdownDeadlineMs, parseForkDeadlineMs, parseDispatchDeadlineMs, parseProviderConfig, clearAllProviderCreds, llmSource, identityFromMe, initAgentTelemetry, } from '@parall/agent-core';
 import { ApiError, ParallClient, ParallWs } from '@parall/sdk';
 import { buildCodexRuntimeKey, contextFilePathForSession, dispatchContextDirPath, resolveCodexAgentConfig, resolveWsUrl, sessionStateFilePathForRuntime, stepIdFilePathForSession, } from './config.js';
 import { CodexAppServerAdapter } from './dispatch.js';
@@ -17,7 +17,7 @@ async function getAgentMeWithLegacyFallback(client, orgId) {
             throw err;
         }
         const user = await client.getMe();
-        return { ...user, agent_profile: null };
+        return { ...user, agent_profile: null, public_profile: null };
     }
 }
 function resolveProviderEnv() {
@@ -59,11 +59,14 @@ async function main() {
             ensureParallProvider(config.codexHome, config.apiUrl, agentLog);
             agentLog.info('parall custom provider configured (Responses API HTTP/SSE mode)');
         }
-        const agentIdentity = {
-            userId: agentUserId,
-            displayName: me.display_name,
-            description: me.agent_profile?.description ?? undefined,
-        };
+        // Mutable on purpose: refreshPlatformConfig refetches it (see
+        // identityFromMe) so profile edits reach the next activation.
+        let agentIdentity = identityFromMe(me);
+        let lastIdentitySnapshot = JSON.stringify(agentIdentity);
+        // Last successful /agents/me profile — deriveModelIsPin's legacy fallback
+        // (old servers omit model_is_pin) must not flip a pinned model to floor
+        // just because one refresh round-trip failed.
+        let lastKnownAgentProfile = me.agent_profile;
         const runtimeKey = config.runtimeKey || buildCodexRuntimeKey(agentUserId);
         const mainContextFilePath = contextFilePathForSession(config.stateDir, runtimeKey);
         const sessionStateFilePath = sessionStateFilePathForRuntime(config.stateDir, runtimeKey);
@@ -126,26 +129,28 @@ async function main() {
             capabilityBinDir: capabilityBinDir(config.stateDir),
             developerInstructions,
         });
-        // Shared by onConfigUpdate + onSessionReady. /agents/me is only consumed as
-        // deriveModelIsPin's legacy fallback when the server omits model_is_pin
-        // (old server) — skip that round trip otherwise.
+        // Shared by onConfigUpdate + onSessionReady.
         const refreshPlatformConfig = async () => {
             const updated = await configMgr.fetch();
-            let refreshedProfile;
-            if (updated.modelIsPin === undefined) {
-                try {
-                    refreshedProfile = (await getAgentMeWithLegacyFallback(client, config.orgId))
-                        .agent_profile;
-                }
-                catch (err) {
-                    // configMgr.fetch() degrades to cache on failure; mirror that for the
-                    // legacy fallback so a transient /agents/me error doesn't reject this
-                    // config-refresh callback. No profile → deriveModelIsPin treats the
-                    // delivered model as a floor (safe default).
-                    agentLog.warn(`platform config refresh: legacy /agents/me fallback failed: ${String(err)}`);
-                }
+            // Unconditional /agents/me refetch: identity (title / public
+            // description / private instructions) rides the same
+            // agent_config.update nudge as model config. Failure degrades to the
+            // last-known-good identity, mirroring configMgr.fetch()'s cache
+            // fallback, so a transient error never rejects this callback. No
+            // profile → deriveModelIsPin treats the delivered model as a floor
+            // (safe default).
+            let refreshedMe;
+            try {
+                refreshedMe = await getAgentMeWithLegacyFallback(client, config.orgId);
+            }
+            catch (err) {
+                agentLog.warn(`platform config refresh: /agents/me refetch failed (keeping last-known identity): ${String(err)}`);
+            }
+            if (refreshedMe) {
+                agentIdentity = identityFromMe(refreshedMe);
+                lastKnownAgentProfile = refreshedMe.agent_profile;
             }
-            const isPin = deriveModelIsPin(updated, refreshedProfile);
+            const isPin = deriveModelIsPin(updated, lastKnownAgentProfile);
             adapter.updateConfig({
                 model: resolveRuntimeModel(isPin, updated.model, config.model) ?? null,
                 reasoningEffort: updated.thinkingEffort ?? config.reasoningEffort ?? null,
@@ -175,8 +180,15 @@ async function main() {
                 promptWritten = false;
                 agentLog.warn(`system prompt refresh write failed (retrying next refresh): ${String(err)}`);
             }
-            if (promptWritten && joinedFragments !== lastCapabilityFragments) {
+            // Identity changes ride the same lazy-restart mechanism as capability
+            // fragments: the next fresh-process thread/resume applies the rebuilt
+            // developerInstructions, and the adapter compacts so the model-visible
+            // context converges (two-plane semantics: src/instructions-refresh.ts).
+            const identitySnapshot = JSON.stringify(agentIdentity);
+            if (promptWritten &&
+                (joinedFragments !== lastCapabilityFragments || identitySnapshot !== lastIdentitySnapshot)) {
                 lastCapabilityFragments = joinedFragments;
+                lastIdentitySnapshot = identitySnapshot;
                 adapter.requestProcessRestart();
             }
         };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/codex-agent",
-  "version": "1.49.0",
+  "version": "1.50.1",
   "description": "Codex CLI bridge runtime for self-hosted Parall agents",
   "license": "MIT",
   "repository": {
@@ -25,9 +25,9 @@
     "src"
   ],
   "dependencies": {
-    "@parall/agent-core": "1.49.0",
-    "@parall/cli": "1.49.0",
-    "@parall/sdk": "1.49.0"
+    "@parall/cli": "1.50.1",
+    "@parall/sdk": "1.50.1",
+    "@parall/agent-core": "1.50.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/src/index.ts

@@ -18,6 +18,7 @@ import {
   parseProviderConfig,
   clearAllProviderCreds,
   llmSource,
+  identityFromMe,
   initAgentTelemetry,
 } from '@parall/agent-core';
 import { ApiError, ParallClient, ParallWs } from '@parall/sdk';
@@ -50,10 +51,12 @@ async function getAgentMeWithLegacyFallback(client: ParallClient, orgId: string)
       throw err;
     }
     const user = await client.getMe();
-    return { ...user, agent_profile: null };
+    return { ...user, agent_profile: null, public_profile: null };
   }
 }
 
+type AgentMe = Awaited<ReturnType<typeof getAgentMeWithLegacyFallback>>;
+
 function resolveProviderEnv(): void {
   const pc = parseProviderConfig(process.env);
   if (!pc) return;
@@ -92,11 +95,14 @@ async function main() {
       ensureParallProvider(config.codexHome, config.apiUrl, agentLog);
       agentLog.info('parall custom provider configured (Responses API HTTP/SSE mode)');
     }
-    const agentIdentity = {
-      userId: agentUserId,
-      displayName: me.display_name,
-      description: me.agent_profile?.description ?? undefined,
-    };
+    // Mutable on purpose: refreshPlatformConfig refetches it (see
+    // identityFromMe) so profile edits reach the next activation.
+    let agentIdentity = identityFromMe(me);
+    let lastIdentitySnapshot = JSON.stringify(agentIdentity);
+    // Last successful /agents/me profile — deriveModelIsPin's legacy fallback
+    // (old servers omit model_is_pin) must not flip a pinned model to floor
+    // just because one refresh round-trip failed.
+    let lastKnownAgentProfile = me.agent_profile;
     const runtimeKey = config.runtimeKey || buildCodexRuntimeKey(agentUserId);
     const mainContextFilePath = contextFilePathForSession(config.stateDir, runtimeKey);
     const sessionStateFilePath = sessionStateFilePathForRuntime(config.stateDir, runtimeKey);
@@ -174,29 +180,29 @@ async function main() {
       developerInstructions,
     });
 
-    // Shared by onConfigUpdate + onSessionReady. /agents/me is only consumed as
-    // deriveModelIsPin's legacy fallback when the server omits model_is_pin
-    // (old server) — skip that round trip otherwise.
+    // Shared by onConfigUpdate + onSessionReady.
     const refreshPlatformConfig = async () => {
       const updated = await configMgr.fetch();
-      let refreshedProfile:
-        | Awaited<ReturnType<typeof getAgentMeWithLegacyFallback>>['agent_profile']
-        | undefined;
-      if (updated.modelIsPin === undefined) {
-        try {
-          refreshedProfile = (await getAgentMeWithLegacyFallback(client, config.orgId))
-            .agent_profile;
-        } catch (err) {
-          // configMgr.fetch() degrades to cache on failure; mirror that for the
-          // legacy fallback so a transient /agents/me error doesn't reject this
-          // config-refresh callback. No profile → deriveModelIsPin treats the
-          // delivered model as a floor (safe default).
-          agentLog.warn(
-            `platform config refresh: legacy /agents/me fallback failed: ${String(err)}`,
-          );
-        }
+      // Unconditional /agents/me refetch: identity (title / public
+      // description / private instructions) rides the same
+      // agent_config.update nudge as model config. Failure degrades to the
+      // last-known-good identity, mirroring configMgr.fetch()'s cache
+      // fallback, so a transient error never rejects this callback. No
+      // profile → deriveModelIsPin treats the delivered model as a floor
+      // (safe default).
+      let refreshedMe: AgentMe | undefined;
+      try {
+        refreshedMe = await getAgentMeWithLegacyFallback(client, config.orgId);
+      } catch (err) {
+        agentLog.warn(
+          `platform config refresh: /agents/me refetch failed (keeping last-known identity): ${String(err)}`,
+        );
+      }
+      if (refreshedMe) {
+        agentIdentity = identityFromMe(refreshedMe);
+        lastKnownAgentProfile = refreshedMe.agent_profile;
       }
-      const isPin = deriveModelIsPin(updated, refreshedProfile);
+      const isPin = deriveModelIsPin(updated, lastKnownAgentProfile);
       adapter.updateConfig({
         model: resolveRuntimeModel(isPin, updated.model, config.model) ?? null,
         reasoningEffort: updated.thinkingEffort ?? config.reasoningEffort ?? null,
@@ -229,8 +235,17 @@ async function main() {
         promptWritten = false;
         agentLog.warn(`system prompt refresh write failed (retrying next refresh): ${String(err)}`);
       }
-      if (promptWritten && joinedFragments !== lastCapabilityFragments) {
+      // Identity changes ride the same lazy-restart mechanism as capability
+      // fragments: the next fresh-process thread/resume applies the rebuilt
+      // developerInstructions, and the adapter compacts so the model-visible
+      // context converges (two-plane semantics: src/instructions-refresh.ts).
+      const identitySnapshot = JSON.stringify(agentIdentity);
+      if (
+        promptWritten &&
+        (joinedFragments !== lastCapabilityFragments || identitySnapshot !== lastIdentitySnapshot)
+      ) {
         lastCapabilityFragments = joinedFragments;
+        lastIdentitySnapshot = identitySnapshot;
         adapter.requestProcessRestart();
       }
     };