@parall/daemon 1.41.0 → 1.42.1

package/bundle/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.41.0",
-  "built_at": "2026-07-10T05:52:54.072Z",
+  "version": "1.42.1",
+  "built_at": "2026-07-11T03:40:29.108Z",
   "min_node_version": "20.0.0",
   "files": {
     "bb-browser-daemon.js": {
@@ -16,25 +16,25 @@
       "size": 18
     },
     "parall-browser-pod.js": {
-      "sha256": "6d5aade09173b16e332dcd29d0d1b1d68cfb424c4297d031b36069b07d3077cc",
-      "size": 1698807
+      "sha256": "4e98a70b593c352f4fa99cd2ff8b350346437942bd1134e3d500211585c5a94a",
+      "size": 1699246
     },
     "parall-claude-agent.js": {
-      "sha256": "e83d963acd70069ee4e4f564df91154d3172325f6681925ee0cbca0330c90099",
-      "size": 1623952
+      "sha256": "8d7d9a8c8b6d1d90f7e84489fd05c059c5c5d24d321274ff3916f12454df2e19",
+      "size": 1626635
     },
     "parall-codex-agent.js": {
-      "sha256": "13ccc915e9b18f6a300d8d27a07221f7d0bcf2ac3edce719abc85bbd57db9fc1",
-      "size": 1654762
+      "sha256": "5ab229def8061ab05bc040571d5cb175bb7c9d8fce565682ab04c6b1a81b8649",
+      "size": 1664012
     },
     "parall-daemon.js": {
-      "sha256": "eeef6afe86012476ccbb8ec7e2e0e9228f66515a044e4bba69445fbeb5850a6a",
-      "size": 1719056
+      "sha256": "354bdc719c5bde1e7f4eaae19f1d895fced7b1a6feee8590d727812b6e5fe2f4",
+      "size": 1719706
     },
     "parall-openclaw-agent.js": {
       "sha256": "505433b4bf3a4b8dbb7b96978d8693d6c48079f4513282ff1ee59a6d13b3eddf",
       "size": 9801
     }
   },
-  "signature": "Gl4UXAqlHYlaqbK5L48tDAHYjBs6yGSAd0zg2HsNj3yTvqxQgSyDQtO++hPKdkR7VdVdM/weOj6qoct4UXVZDA=="
+  "signature": "T/TtjoBJx65Xb8MftcuGyi+F0J8kpPBmzKIl8hMLP+igdhlAzKTLEHvDN4gB72BOd7lUHOFLwufiyyUye/TbCg=="
 }

package/bundle/parall-browser-pod.js

@@ -35360,6 +35360,7 @@ var ENDPOINTS = {
   DISPATCH_CLAIM: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/claim`,
   DISPATCH_STEER: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/steer`,
   DISPATCH_COMPLETE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/complete`,
+  DISPATCH_COMPLETE_SOURCES: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/complete-sources`,
   DISPATCH_RELEASE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/release`,
   DISPATCH_HEARTBEAT: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/heartbeat`,
   // Unread
@@ -36212,9 +36213,9 @@ var ParallClient = class _ParallClient {
   async retryAgentWorkspaceSetup(orgId, machineId, agentId) {
     return this.request("POST", ENDPOINTS.MACHINE_AGENT_WORKSPACE_SETUP(orgId, machineId, agentId));
   }
-  async patchMachineLLMSource(orgId, machineId, llmSource) {
+  async patchMachineLLMSource(orgId, machineId, llmSource2) {
     return this.request("PATCH", ENDPOINTS.MACHINE_LLM_SOURCE(orgId, machineId), {
-      llm_source: llmSource
+      llm_source: llmSource2
     });
   }
   /**
@@ -36441,7 +36442,7 @@ var ParallClient = class _ParallClient {
   async claimDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_CLAIM(orgId), req);
   }
-  /** Fold a pending same-target WorkItem into a live lane (409 STALE_LANE when dethroned). */
+  /** Fold into a live lane: 409 STALE_LANE when dethroned; 409 INELIGIBLE_REF for a bad ref. */
   async steerDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_STEER(orgId), req);
   }
@@ -36449,6 +36450,14 @@ var ParallClient = class _ParallClient {
   async completeDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_COMPLETE(orgId), req);
   }
+  /**
+   * End a turn for a lane-less runtime: resolve the turn's folded WorkItems
+   * by source — broad-cover to the turn's reply Effect when one exists,
+   * no_action sweep otherwise. Idempotent.
+   */
+  async completeDispatchSources(orgId, req) {
+    return this.request("POST", ENDPOINTS.DISPATCH_COMPLETE_SOURCES(orgId), req);
+  }
   /** Release a lane on graceful shutdown — members return to pending immediately. */
   async releaseDispatchLane(orgId, lane) {
     return this.request("POST", ENDPOINTS.DISPATCH_RELEASE(orgId), { lane });

package/bundle/parall-claude-agent.js

@@ -27475,6 +27475,7 @@ var ENDPOINTS = {
   DISPATCH_CLAIM: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/claim`,
   DISPATCH_STEER: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/steer`,
   DISPATCH_COMPLETE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/complete`,
+  DISPATCH_COMPLETE_SOURCES: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/complete-sources`,
   DISPATCH_RELEASE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/release`,
   DISPATCH_HEARTBEAT: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/heartbeat`,
   // Unread
@@ -28640,7 +28641,7 @@ var ParallClient = class _ParallClient {
   async claimDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_CLAIM(orgId), req);
   }
-  /** Fold a pending same-target WorkItem into a live lane (409 STALE_LANE when dethroned). */
+  /** Fold into a live lane: 409 STALE_LANE when dethroned; 409 INELIGIBLE_REF for a bad ref. */
   async steerDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_STEER(orgId), req);
   }
@@ -28648,6 +28649,14 @@ var ParallClient = class _ParallClient {
   async completeDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_COMPLETE(orgId), req);
   }
+  /**
+   * End a turn for a lane-less runtime: resolve the turn's folded WorkItems
+   * by source — broad-cover to the turn's reply Effect when one exists,
+   * no_action sweep otherwise. Idempotent.
+   */
+  async completeDispatchSources(orgId, req) {
+    return this.request("POST", ENDPOINTS.DISPATCH_COMPLETE_SOURCES(orgId), req);
+  }
   /** Release a lane on graceful shutdown — members return to pending immediately. */
   async releaseDispatchLane(orgId, lane) {
     return this.request("POST", ENDPOINTS.DISPATCH_RELEASE(orgId), { lane });
@@ -30109,7 +30118,7 @@ async function dispatchLaneGroup(host, opts) {
 async function consumeTypedDispatch(host, ref, run, ack) {
   if (!host.laneLedger || host.ledgerDisabled) {
     if (await run(ref.dispatchEventId))
-      ack(ref.dispatchEventId);
+      await ack(ref.dispatchEventId);
     return;
   }
   let lane;
@@ -30119,7 +30128,7 @@ async function consumeTypedDispatch(host, ref, run, ack) {
     if (err instanceof LedgerUnsupportedError) {
       host.disableLedger("claim endpoint missing");
       if (await run(ref.dispatchEventId))
-        ack(ref.dispatchEventId);
+        await ack(ref.dispatchEventId);
       return;
     }
     throw err;
@@ -30130,7 +30139,7 @@ async function consumeTypedDispatch(host, ref, run, ack) {
   }
   try {
     if (await run(lane.typedDispatchEventId))
-      ack(lane.typedDispatchEventId);
+      await ack(lane.typedDispatchEventId);
   } finally {
     await host.laneLedger.completeIfIdle(lane.laneKey, false).catch(() => {
     });
@@ -30584,29 +30593,33 @@ var ParallAgentGateway = class {
       try {
         await this.consumeTypedDispatch(data.dispatch_event_id ? { dispatchEventId: data.dispatch_event_id } : { sourceType: "task_activity", sourceId: data.id }, (dispatchEventId) => this.handleTaskAssignment(data, data.id, dispatchEventId), (dispatchEventId) => {
           if (dispatchEventId) {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, dispatchEventId).catch(() => {
+            return this.ackDispatchEvent(dispatchEventId, () => {
+              this.dispatchedTasks.delete(`${data.id}:${data.updated_at}`);
             });
-            return;
           }
-          this.opts.client.ackDispatch(this.opts.config.org_id, {
+          return this.opts.client.ackDispatch(this.opts.config.org_id, {
             source_type: "task_activity",
             source_id: data.id
-          }).catch(() => {
-          });
+          }).then(() => void 0, () => void 0);
         });
       } catch (err) {
         this.opts.log?.error(`task dispatch failed for ${data.id}: ${String(err)}`);
       }
     });
     ws.on("dispatch.new", async (data) => {
-      if (data.event_type === "task_comment") {
+      if (data.event_type === "task_assign") {
+        if (!data.task_id)
+          return;
+        try {
+          await this.handleTaskAssignmentRedrive(data);
+        } catch (err) {
+          this.opts.log?.error(`task assignment re-drive failed for ${data.task_id}: ${String(err)}`);
+        }
+      } else if (data.event_type === "task_comment") {
         if (!data.source_id || !data.task_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleTaskComment(data.source_id, data.task_id ?? "", data.actor_id, data.delivery_reason), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleTaskComment(data.source_id, data.task_id ?? "", data.actor_id, data.delivery_reason), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`task comment dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30614,10 +30627,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleWikiComment(data.source_id, data.actor_id, data.delivery_reason), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleWikiComment(data.source_id, data.actor_id, data.delivery_reason), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`wiki comment dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30628,10 +30638,7 @@ var ParallAgentGateway = class {
           await this.consumeTypedDispatch({ dispatchEventId: data.id }, (dispatchEventId) => this.handleTaskDispatch(data.task_id ?? "", data.source_id ?? data.task_id ?? "", {
             allowCreator: true,
             dispatchEventId
-          }), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          }), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`task update dispatch failed for ${data.task_id}: ${String(err)}`);
         }
@@ -30639,10 +30646,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleScheduleFire(data.source_id, data.actor_id), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleScheduleFire(data.source_id, data.actor_id), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`schedule fire dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30650,10 +30654,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleExternalTriggerRun(data.source_id), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleExternalTriggerRun(data.source_id), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`external trigger dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30661,10 +30662,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleChannelMessage(data.source_id), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleChannelMessage(data.source_id), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`channel message dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30672,10 +30670,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleApprovalDecided(data.source_id, data.actor_id, data.chat_id ?? null), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleApprovalDecided(data.source_id, data.actor_id, data.chat_id ?? null), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`approval decided dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30685,7 +30680,7 @@ var ParallAgentGateway = class {
         } catch (err) {
           this.opts.log?.error(`message re-drive failed for ${data.source_id}: ${String(err)}`);
         }
-      } else if (data.event_type !== "message" && data.event_type !== "task_assign") {
+      } else if (data.event_type !== "message") {
         this.opts.log?.info(`dispatch.new with unhandled event_type=${String(data.event_type)} (id=${data.id}) \u2014 no-op`);
       }
     });
@@ -30753,6 +30748,50 @@ var ParallAgentGateway = class {
   consumeTypedDispatch(ref, run, ack) {
     return consumeTypedDispatch(this.laneFlowHost(), ref, run, ack);
   }
+  // Typed completion must wait until the administrative ack has either
+  // committed or failed. Errors stay best-effort: a failed ack leaves the row
+  // received, so Complete releases and re-drives it safely.
+  ackDispatchEvent(dispatchEventId, onFailure) {
+    return this.opts.client.ackDispatchByID(this.opts.config.org_id, dispatchEventId).then(() => void 0, (err) => {
+      onFailure?.();
+      this.opts.log?.warn(`dispatch ack failed for ${dispatchEventId}, releasing for re-drive: ${String(err)}`);
+    });
+  }
+  clearTypedDispatchDedupe(item) {
+    switch (item.event_type) {
+      case "task_assign":
+      case "task_update":
+        if (item.task_id) {
+          const prefix = `${item.task_id}:`;
+          for (const key of this.dispatchedTasks) {
+            if (key.startsWith(prefix))
+              this.dispatchedTasks.delete(key);
+          }
+        }
+        break;
+      case "task_comment":
+      case "wiki_comment":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`comment:${item.source_id}`);
+        break;
+      case "schedule.fire":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`schedule_run:${item.source_id}`);
+        break;
+      case "external_trigger":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`external_trigger_run:${item.source_id}`);
+        break;
+      case "channel_message":
+        if (item.source_id)
+          this.dispatchedMessages.delete(`channel_message:${item.source_id}`);
+        break;
+      case "approval_decided":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`approval:${item.source_id}`);
+        break;
+    }
+  }
   buildDispatchContext(event, sessionKey) {
     const binding = this.sessionBindings.get(sessionKey);
     return {
@@ -31719,6 +31758,17 @@ var ParallAgentGateway = class {
       chat_id: item.chat_id
     });
   }
+  // A task assignment's first delivery rides task.assigned, but a typed lane
+  // released without an effect is re-driven as dispatch.new. Reuse the exact
+  // typed claim path used by catch-up so that recovery does not require a
+  // runtime reconnect.
+  async handleTaskAssignmentRedrive(item) {
+    if (!item.task_id)
+      return;
+    await this.consumeTypedDispatch({ dispatchEventId: item.id }, (dispatchEventId) => this.handleTaskDispatch(item.task_id ?? "", item.source_id ?? item.task_id ?? "", {
+      dispatchEventId
+    }), (dispatchEventId) => this.ackDispatchEvent(dispatchEventId ?? item.id, () => this.clearTypedDispatchDedupe(item)));
+  }
   consumeMessageWorkItem(item) {
     return consumeMessageWorkItem(this.laneFlowHost(), item);
   }
@@ -32184,10 +32234,7 @@ var ParallAgentGateway = class {
         }
         processed++;
         try {
-          const ackItem = () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, item.id).catch(() => {
-            });
-          };
+          const ackItem = () => this.ackDispatchEvent(item.id, () => this.clearTypedDispatchDedupe(item));
           if (item.event_type === "task_assign" && item.task_id) {
             try {
               await this.consumeTypedDispatch({ dispatchEventId: item.id }, (dispatchEventId) => this.handleTaskDispatch(item.task_id ?? "", item.source_id ?? item.task_id ?? "", {

package/bundle/parall-codex-agent.js

@@ -27475,6 +27475,7 @@ var ENDPOINTS = {
   DISPATCH_CLAIM: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/claim`,
   DISPATCH_STEER: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/steer`,
   DISPATCH_COMPLETE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/complete`,
+  DISPATCH_COMPLETE_SOURCES: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/complete-sources`,
   DISPATCH_RELEASE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/release`,
   DISPATCH_HEARTBEAT: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/heartbeat`,
   // Unread
@@ -28640,7 +28641,7 @@ var ParallClient = class _ParallClient {
   async claimDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_CLAIM(orgId), req);
   }
-  /** Fold a pending same-target WorkItem into a live lane (409 STALE_LANE when dethroned). */
+  /** Fold into a live lane: 409 STALE_LANE when dethroned; 409 INELIGIBLE_REF for a bad ref. */
   async steerDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_STEER(orgId), req);
   }
@@ -28648,6 +28649,14 @@ var ParallClient = class _ParallClient {
   async completeDispatch(orgId, req) {
     return this.request("POST", ENDPOINTS.DISPATCH_COMPLETE(orgId), req);
   }
+  /**
+   * End a turn for a lane-less runtime: resolve the turn's folded WorkItems
+   * by source — broad-cover to the turn's reply Effect when one exists,
+   * no_action sweep otherwise. Idempotent.
+   */
+  async completeDispatchSources(orgId, req) {
+    return this.request("POST", ENDPOINTS.DISPATCH_COMPLETE_SOURCES(orgId), req);
+  }
   /** Release a lane on graceful shutdown — members return to pending immediately. */
   async releaseDispatchLane(orgId, lane) {
     return this.request("POST", ENDPOINTS.DISPATCH_RELEASE(orgId), { lane });
@@ -30109,7 +30118,7 @@ async function dispatchLaneGroup(host, opts) {
 async function consumeTypedDispatch(host, ref, run, ack) {
   if (!host.laneLedger || host.ledgerDisabled) {
     if (await run(ref.dispatchEventId))
-      ack(ref.dispatchEventId);
+      await ack(ref.dispatchEventId);
     return;
   }
   let lane;
@@ -30119,7 +30128,7 @@ async function consumeTypedDispatch(host, ref, run, ack) {
     if (err instanceof LedgerUnsupportedError) {
       host.disableLedger("claim endpoint missing");
       if (await run(ref.dispatchEventId))
-        ack(ref.dispatchEventId);
+        await ack(ref.dispatchEventId);
       return;
     }
     throw err;
@@ -30130,7 +30139,7 @@ async function consumeTypedDispatch(host, ref, run, ack) {
   }
   try {
     if (await run(lane.typedDispatchEventId))
-      ack(lane.typedDispatchEventId);
+      await ack(lane.typedDispatchEventId);
   } finally {
     await host.laneLedger.completeIfIdle(lane.laneKey, false).catch(() => {
     });
@@ -30584,29 +30593,33 @@ var ParallAgentGateway = class {
       try {
         await this.consumeTypedDispatch(data.dispatch_event_id ? { dispatchEventId: data.dispatch_event_id } : { sourceType: "task_activity", sourceId: data.id }, (dispatchEventId) => this.handleTaskAssignment(data, data.id, dispatchEventId), (dispatchEventId) => {
           if (dispatchEventId) {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, dispatchEventId).catch(() => {
+            return this.ackDispatchEvent(dispatchEventId, () => {
+              this.dispatchedTasks.delete(`${data.id}:${data.updated_at}`);
             });
-            return;
           }
-          this.opts.client.ackDispatch(this.opts.config.org_id, {
+          return this.opts.client.ackDispatch(this.opts.config.org_id, {
             source_type: "task_activity",
             source_id: data.id
-          }).catch(() => {
-          });
+          }).then(() => void 0, () => void 0);
         });
       } catch (err) {
         this.opts.log?.error(`task dispatch failed for ${data.id}: ${String(err)}`);
       }
     });
     ws.on("dispatch.new", async (data) => {
-      if (data.event_type === "task_comment") {
+      if (data.event_type === "task_assign") {
+        if (!data.task_id)
+          return;
+        try {
+          await this.handleTaskAssignmentRedrive(data);
+        } catch (err) {
+          this.opts.log?.error(`task assignment re-drive failed for ${data.task_id}: ${String(err)}`);
+        }
+      } else if (data.event_type === "task_comment") {
         if (!data.source_id || !data.task_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleTaskComment(data.source_id, data.task_id ?? "", data.actor_id, data.delivery_reason), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleTaskComment(data.source_id, data.task_id ?? "", data.actor_id, data.delivery_reason), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`task comment dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30614,10 +30627,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleWikiComment(data.source_id, data.actor_id, data.delivery_reason), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.handleWikiComment(data.source_id, data.actor_id, data.delivery_reason), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`wiki comment dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30628,10 +30638,7 @@ var ParallAgentGateway = class {
           await this.consumeTypedDispatch({ dispatchEventId: data.id }, (dispatchEventId) => this.handleTaskDispatch(data.task_id ?? "", data.source_id ?? data.task_id ?? "", {
             allowCreator: true,
             dispatchEventId
-          }), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          }), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`task update dispatch failed for ${data.task_id}: ${String(err)}`);
         }
@@ -30639,10 +30646,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleScheduleFire(data.source_id, data.actor_id), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleScheduleFire(data.source_id, data.actor_id), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`schedule fire dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30650,10 +30654,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleExternalTriggerRun(data.source_id), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleExternalTriggerRun(data.source_id), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`external trigger dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30661,10 +30662,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleChannelMessage(data.source_id), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleChannelMessage(data.source_id), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`channel message dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30672,10 +30670,7 @@ var ParallAgentGateway = class {
         if (!data.source_id)
           return;
         try {
-          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleApprovalDecided(data.source_id, data.actor_id, data.chat_id ?? null), () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
-            });
-          });
+          await this.consumeTypedDispatch({ dispatchEventId: data.id }, () => this.fetchAndHandleApprovalDecided(data.source_id, data.actor_id, data.chat_id ?? null), () => this.ackDispatchEvent(data.id, () => this.clearTypedDispatchDedupe(data)));
         } catch (err) {
           this.opts.log?.error(`approval decided dispatch failed for ${data.source_id}: ${String(err)}`);
         }
@@ -30685,7 +30680,7 @@ var ParallAgentGateway = class {
         } catch (err) {
           this.opts.log?.error(`message re-drive failed for ${data.source_id}: ${String(err)}`);
         }
-      } else if (data.event_type !== "message" && data.event_type !== "task_assign") {
+      } else if (data.event_type !== "message") {
         this.opts.log?.info(`dispatch.new with unhandled event_type=${String(data.event_type)} (id=${data.id}) \u2014 no-op`);
       }
     });
@@ -30753,6 +30748,50 @@ var ParallAgentGateway = class {
   consumeTypedDispatch(ref, run, ack) {
     return consumeTypedDispatch(this.laneFlowHost(), ref, run, ack);
   }
+  // Typed completion must wait until the administrative ack has either
+  // committed or failed. Errors stay best-effort: a failed ack leaves the row
+  // received, so Complete releases and re-drives it safely.
+  ackDispatchEvent(dispatchEventId, onFailure) {
+    return this.opts.client.ackDispatchByID(this.opts.config.org_id, dispatchEventId).then(() => void 0, (err) => {
+      onFailure?.();
+      this.opts.log?.warn(`dispatch ack failed for ${dispatchEventId}, releasing for re-drive: ${String(err)}`);
+    });
+  }
+  clearTypedDispatchDedupe(item) {
+    switch (item.event_type) {
+      case "task_assign":
+      case "task_update":
+        if (item.task_id) {
+          const prefix = `${item.task_id}:`;
+          for (const key of this.dispatchedTasks) {
+            if (key.startsWith(prefix))
+              this.dispatchedTasks.delete(key);
+          }
+        }
+        break;
+      case "task_comment":
+      case "wiki_comment":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`comment:${item.source_id}`);
+        break;
+      case "schedule.fire":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`schedule_run:${item.source_id}`);
+        break;
+      case "external_trigger":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`external_trigger_run:${item.source_id}`);
+        break;
+      case "channel_message":
+        if (item.source_id)
+          this.dispatchedMessages.delete(`channel_message:${item.source_id}`);
+        break;
+      case "approval_decided":
+        if (item.source_id)
+          this.dispatchedTasks.delete(`approval:${item.source_id}`);
+        break;
+    }
+  }
   buildDispatchContext(event, sessionKey) {
     const binding = this.sessionBindings.get(sessionKey);
     return {
@@ -31719,6 +31758,17 @@ var ParallAgentGateway = class {
       chat_id: item.chat_id
     });
   }
+  // A task assignment's first delivery rides task.assigned, but a typed lane
+  // released without an effect is re-driven as dispatch.new. Reuse the exact
+  // typed claim path used by catch-up so that recovery does not require a
+  // runtime reconnect.
+  async handleTaskAssignmentRedrive(item) {
+    if (!item.task_id)
+      return;
+    await this.consumeTypedDispatch({ dispatchEventId: item.id }, (dispatchEventId) => this.handleTaskDispatch(item.task_id ?? "", item.source_id ?? item.task_id ?? "", {
+      dispatchEventId
+    }), (dispatchEventId) => this.ackDispatchEvent(dispatchEventId ?? item.id, () => this.clearTypedDispatchDedupe(item)));
+  }
   consumeMessageWorkItem(item) {
     return consumeMessageWorkItem(this.laneFlowHost(), item);
   }
@@ -32184,10 +32234,7 @@ var ParallAgentGateway = class {
         }
         processed++;
         try {
-          const ackItem = () => {
-            this.opts.client.ackDispatchByID(this.opts.config.org_id, item.id).catch(() => {
-            });
-          };
+          const ackItem = () => this.ackDispatchEvent(item.id, () => this.clearTypedDispatchDedupe(item));
           if (item.event_type === "task_assign" && item.task_id) {
             try {
               await this.consumeTypedDispatch({ dispatchEventId: item.id }, (dispatchEventId) => this.handleTaskDispatch(item.task_id ?? "", item.source_id ?? item.task_id ?? "", {
@@ -33361,10 +33408,12 @@ function normalizeApprovalPolicy(value) {
     never: "never",
     "on-request": "on-request",
     onrequest: "on-request",
-    "unless-trusted": "unless-trusted",
-    unlesstrusted: "unless-trusted",
-    "on-failure": "on-failure",
-    onfailure: "on-failure"
+    untrusted: "untrusted",
+    "unless-trusted": "untrusted",
+    unlesstrusted: "untrusted",
+    granular: "granular",
+    "on-failure": "on-request",
+    onfailure: "on-request"
   };
   return map[value.toLowerCase()] ?? value;
 }
@@ -34497,10 +34546,17 @@ var CodexAppServerAdapter = class {
         log2?.warn?.(`failed to prepare local attachments: ${errToString(err)}`);
       }
       const turnInput = buildTurnInput(preparedBody, preparedImages);
-      const startTurn = (targetThreadId) => client.sendRequest("turn/start", {
-        threadId: targetThreadId,
-        input: turnInput
-      });
+      const startTurn = (targetThreadId) => {
+        const turnParams = {
+          threadId: targetThreadId,
+          input: turnInput
+        };
+        if (this.opts.model)
+          turnParams.model = this.opts.model;
+        if (this.opts.reasoningEffort)
+          turnParams.effort = this.opts.reasoningEffort;
+        return client.sendRequest("turn/start", turnParams);
+      };
       let turnStartResult;
       try {
         turnStartResult = await startTurn(threadId);
@@ -34617,7 +34673,7 @@ var CodexAppServerAdapter = class {
       if (this.opts.model)
         forkParams.model = this.opts.model;
       if (this.opts.reasoningEffort) {
-        forkParams.config = { modelReasoningEffort: this.opts.reasoningEffort };
+        forkParams.config = { model_reasoning_effort: this.opts.reasoningEffort };
       }
       const result = await client.sendRequest("thread/fork", forkParams);
       const forkedThreadId = extractThreadId(result);
@@ -34771,7 +34827,7 @@ var CodexAppServerAdapter = class {
     if (this.opts.model)
       commonParams.model = this.opts.model;
     if (this.opts.reasoningEffort) {
-      commonParams.config = { modelReasoningEffort: this.opts.reasoningEffort };
+      commonParams.config = { model_reasoning_effort: this.opts.reasoningEffort };
     }
     const method = opts.resumeId ? "thread/resume" : "thread/start";
     const params = opts.resumeId ? { threadId: opts.resumeId, ...commonParams } : { cwd: this.opts.workspaceDir, ...commonParams };
@@ -35673,7 +35729,220 @@ function parse(toml, { maxDepth = 1e3, integersAsBigInt } = {}) {
 }
 
 // ts/codex-agent/dist/workspace.js
+var CONFIG_LOCK_TIMINGS = {
+  staleMs: 1e4,
+  waitMs: 15e3,
+  retryMs: 25
+};
+var SLEEP_SIGNAL = new Int32Array(new SharedArrayBuffer(4));
+function sleepSync(ms) {
+  Atomics.wait(SLEEP_SIGNAL, 0, 0, ms);
+}
+function withConfigLock(codexHome, log2, fn) {
+  const queueDir = path8.join(codexHome, "config.toml.lock.d");
+  let ticketName = bakeryEnqueue(queueDir);
+  let ticketPath = ticketName ? path8.join(queueDir, ticketName) : "";
+  let acquired = false;
+  let heldPath = "";
+  const deadline = Date.now() + CONFIG_LOCK_TIMINGS.waitMs;
+  while (ticketName && Date.now() < deadline) {
+    let names;
+    try {
+      names = fs8.readdirSync(queueDir).sort();
+    } catch {
+      break;
+    }
+    if (!names.includes(ticketName)) {
+      ticketName = bakeryEnqueue(queueDir);
+      if (!ticketName)
+        break;
+      ticketPath = path8.join(queueDir, ticketName);
+      continue;
+    }
+    const now = Date.now();
+    let rescan = false;
+    let blocked = false;
+    let head;
+    for (const name of names) {
+      const entryPath = path8.join(queueDir, name);
+      if (name.startsWith("held-")) {
+        const enteredAt = Number.parseInt(name.slice(5, 20), 10);
+        if (Number.isFinite(enteredAt) && now - enteredAt > CONFIG_LOCK_TIMINGS.staleMs) {
+          try {
+            fs8.unlinkSync(entryPath);
+          } catch {
+          }
+          rescan = true;
+          break;
+        }
+        blocked = true;
+        break;
+      }
+      let mtimeMs;
+      try {
+        mtimeMs = fs8.statSync(entryPath).mtimeMs;
+      } catch {
+        rescan = true;
+        break;
+      }
+      if (now - mtimeMs > CONFIG_LOCK_TIMINGS.staleMs) {
+        try {
+          fs8.unlinkSync(entryPath);
+        } catch {
+        }
+        rescan = true;
+        break;
+      }
+      if (name.startsWith("choosing-")) {
+        blocked = true;
+        break;
+      }
+      if (name.startsWith("t-")) {
+        head = name;
+        break;
+      }
+    }
+    if (rescan)
+      continue;
+    if (!blocked && head === ticketName) {
+      CONFIG_LOCK_TEST_HOOKS.beforeTicketEntry?.();
+      const heldName = `held-${String(Date.now()).padStart(15, "0")}-${ticketName.slice(2)}`;
+      const candidateHeldPath = path8.join(queueDir, heldName);
+      try {
+        fs8.renameSync(ticketPath, candidateHeldPath);
+      } catch {
+        continue;
+      }
+      heldPath = candidateHeldPath;
+      acquired = true;
+      break;
+    }
+    try {
+      const t = /* @__PURE__ */ new Date();
+      fs8.utimesSync(ticketPath, t, t);
+    } catch {
+    }
+    sleepSync(CONFIG_LOCK_TIMINGS.retryMs);
+  }
+  if (!acquired) {
+    log2?.warn(`could not acquire ${queueDir}; writing config.toml without lock`);
+    if (ticketName) {
+      try {
+        fs8.unlinkSync(ticketPath);
+      } catch {
+      }
+    }
+  }
+  try {
+    fn();
+  } finally {
+    if (acquired) {
+      try {
+        fs8.unlinkSync(heldPath);
+      } catch {
+      }
+    }
+  }
+}
+var CONFIG_LOCK_TEST_HOOKS = {};
+function bakeryEnqueue(queueDir) {
+  for (let attempt = 0; attempt < 3; attempt++) {
+    const token = `${process.pid}-${Math.random().toString(36).slice(2, 10)}`;
+    const markerPath = path8.join(queueDir, `choosing-${token}`);
+    try {
+      fs8.mkdirSync(queueDir, { recursive: true });
+      CONFIG_LOCK_TEST_HOOKS.beforeChoosingMarker?.();
+      fs8.writeFileSync(markerPath, "", { flag: "wx" });
+    } catch {
+      return null;
+    }
+    try {
+      let maxSeq = 0;
+      for (const name of fs8.readdirSync(queueDir)) {
+        if (!name.startsWith("t-"))
+          continue;
+        const seq = Number.parseInt(name.slice(2, 12), 10);
+        if (Number.isFinite(seq) && seq > maxSeq)
+          maxSeq = seq;
+      }
+      const ticketName = `t-${String(maxSeq + 1).padStart(10, "0")}-${token}`;
+      const ticketPath = path8.join(queueDir, ticketName);
+      CONFIG_LOCK_TEST_HOOKS.beforeTicketPublish?.();
+      fs8.renameSync(markerPath, ticketPath);
+      try {
+        const t = /* @__PURE__ */ new Date();
+        fs8.utimesSync(ticketPath, t, t);
+      } catch {
+      }
+      return ticketName;
+    } catch (err) {
+      try {
+        fs8.unlinkSync(markerPath);
+      } catch {
+      }
+      if (err.code === "ENOENT")
+        continue;
+      return null;
+    }
+  }
+  return null;
+}
+function writeConfigAtomic(filePath, content) {
+  const realPath = resolveWriteTarget(filePath);
+  let mode;
+  try {
+    mode = fs8.statSync(realPath).mode & 511;
+  } catch {
+  }
+  const tmpPath = `${realPath}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
+  let tmpCreated = false;
+  try {
+    fs8.writeFileSync(tmpPath, content, { encoding: "utf8", mode: 384, flag: "wx" });
+    tmpCreated = true;
+    if (mode !== void 0)
+      fs8.chmodSync(tmpPath, mode);
+    fs8.renameSync(tmpPath, realPath);
+  } catch (err) {
+    if (tmpCreated || err.code !== "EEXIST") {
+      try {
+        fs8.unlinkSync(tmpPath);
+      } catch {
+      }
+    }
+    throw err;
+  }
+}
+function resolveWriteTarget(filePath) {
+  try {
+    return fs8.realpathSync(filePath);
+  } catch (err) {
+    if (err.code !== "ENOENT")
+      throw err;
+  }
+  const seen = /* @__PURE__ */ new Set();
+  let p = path8.resolve(filePath);
+  for (let depth = 0; depth < 40; depth++) {
+    if (seen.has(p)) {
+      throw new Error(`symlink cycle at ${p} while resolving ${filePath}`);
+    }
+    seen.add(p);
+    let link;
+    try {
+      link = fs8.readlinkSync(p);
+    } catch (err) {
+      const code = err.code;
+      if (code === "ENOENT" || code === "EINVAL")
+        return p;
+      throw err;
+    }
+    p = path8.resolve(path8.dirname(p), link);
+  }
+  throw new Error(`symlink chain deeper than 40 while resolving ${filePath}`);
+}
 function ensureWorkspaceTrusted(codexHome, workspaceDir, log2) {
+  withConfigLock(codexHome, log2, () => ensureWorkspaceTrustedLocked(codexHome, workspaceDir, log2));
+}
+function ensureWorkspaceTrustedLocked(codexHome, workspaceDir, log2) {
   const configPath = path8.join(codexHome, "config.toml");
   const normalizedPath = path8.resolve(workspaceDir);
   try {
@@ -35694,8 +35963,13 @@ function ensureWorkspaceTrusted(codexHome, workspaceDir, log2) {
       }
     }
     const projects = parsed?.projects;
-    if (projects?.[normalizedPath]?.trust_level === "trusted")
+    const existingTrust = projects?.[normalizedPath]?.trust_level;
+    if (existingTrust === "trusted")
+      return;
+    if (existingTrust !== void 0) {
+      log2?.warn(`Codex config marks ${normalizedPath} as trust_level=${JSON.stringify(existingTrust)}; respecting the explicit decision \u2014 project-level developer_instructions will not load for this workspace`);
       return;
+    }
     const escapedPath = normalizedPath.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
     const sectionHeader = `[projects."${escapedPath}"]`;
     const trustLine = 'trust_level = "trusted"';
@@ -35719,7 +35993,7 @@ ${trustLine}
           content = content.substring(0, afterHeader) + trustLine + "\n" + content.substring(afterHeader);
         }
       }
-      fs8.writeFileSync(configPath, content, "utf8");
+      writeConfigAtomic(configPath, content);
     } else if (projects?.[normalizedPath] !== void 0) {
       log2?.warn(`Codex config.toml has non-canonical header for ${normalizedPath}; skipping trust write`);
     } else if (projects && !content.includes("[projects.")) {
@@ -35743,6 +36017,9 @@ function isParallProxyMode(env = process.env) {
   return baseUrl === apiUrl || baseUrl.startsWith(`${apiUrl}/`);
 }
 function ensureParallProvider(codexHome, apiUrl, log2) {
+  withConfigLock(codexHome, log2, () => ensureParallProviderLocked(codexHome, apiUrl));
+}
+function ensureParallProviderLocked(codexHome, apiUrl) {
   const configPath = path8.join(codexHome, "config.toml");
   const baseUrl = apiUrl.replace(/\/$/, "") + "/api/llm/v1";
   try {
@@ -35780,7 +36057,7 @@ function ensureParallProvider(codexHome, apiUrl, log2) {
       content = content.trimEnd() + "\n\n" + providerBlock + "\n";
     }
     fs8.mkdirSync(codexHome, { recursive: true });
-    fs8.writeFileSync(configPath, content, "utf8");
+    writeConfigAtomic(configPath, content);
   } catch (err) {
     throw new Error(`failed to write Parall provider config: ${String(err)}`);
   }

package/bundle/parall-daemon.js

@@ -83,6 +83,9 @@ var init_daemon_update_mode = __esm({
 });
 
 // ts/agent-core/dist/provider-config.js
+function llmSource(pc) {
+  return effectiveLLMSourceExplicit(pc) || "parall";
+}
 function effectiveLLMSourceExplicit(pc) {
   if (pc?.llm_source)
     return pc.llm_source;
@@ -461,6 +464,7 @@ var init_constants = __esm({
       DISPATCH_CLAIM: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/claim`,
       DISPATCH_STEER: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/steer`,
       DISPATCH_COMPLETE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/complete`,
+      DISPATCH_COMPLETE_SOURCES: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/complete-sources`,
       DISPATCH_RELEASE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/release`,
       DISPATCH_HEARTBEAT: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/heartbeat`,
       // Unread
@@ -1438,9 +1442,9 @@ var init_client = __esm({
       async retryAgentWorkspaceSetup(orgId, machineId, agentId) {
         return this.request("POST", ENDPOINTS.MACHINE_AGENT_WORKSPACE_SETUP(orgId, machineId, agentId));
       }
-      async patchMachineLLMSource(orgId, machineId, llmSource) {
+      async patchMachineLLMSource(orgId, machineId, llmSource2) {
         return this.request("PATCH", ENDPOINTS.MACHINE_LLM_SOURCE(orgId, machineId), {
-          llm_source: llmSource
+          llm_source: llmSource2
         });
       }
       /**
@@ -1667,7 +1671,7 @@ var init_client = __esm({
       async claimDispatch(orgId, req) {
         return this.request("POST", ENDPOINTS.DISPATCH_CLAIM(orgId), req);
       }
-      /** Fold a pending same-target WorkItem into a live lane (409 STALE_LANE when dethroned). */
+      /** Fold into a live lane: 409 STALE_LANE when dethroned; 409 INELIGIBLE_REF for a bad ref. */
       async steerDispatch(orgId, req) {
         return this.request("POST", ENDPOINTS.DISPATCH_STEER(orgId), req);
       }
@@ -1675,6 +1679,14 @@ var init_client = __esm({
       async completeDispatch(orgId, req) {
         return this.request("POST", ENDPOINTS.DISPATCH_COMPLETE(orgId), req);
       }
+      /**
+       * End a turn for a lane-less runtime: resolve the turn's folded WorkItems
+       * by source — broad-cover to the turn's reply Effect when one exists,
+       * no_action sweep otherwise. Idempotent.
+       */
+      async completeDispatchSources(orgId, req) {
+        return this.request("POST", ENDPOINTS.DISPATCH_COMPLETE_SOURCES(orgId), req);
+      }
       /** Release a lane on graceful shutdown — members return to pending immediately. */
       async releaseDispatchLane(orgId, lane) {
         return this.request("POST", ENDPOINTS.DISPATCH_RELEASE(orgId), { lane });
@@ -31144,7 +31156,9 @@ var init_runtimes = __esm({
       args: [],
       buildEnv(baseEnv, agentId, orgId, apiKey, dirs, pc) {
         const env = buildStandardEnv(baseEnv, agentId, orgId, apiKey, dirs, pc);
-        env.PRLL_CODEX_HOME = path9.join(dirs.stateDir, ".codex");
+        if (baseEnv.KUBERNETES_SERVICE_HOST || llmSource(pc) !== "runtime_auth") {
+          env.PRLL_CODEX_HOME = path9.join(dirs.stateDir, ".codex");
+        }
         return env;
       }
     };

package/dist/runtimes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtimes.d.ts","sourceRoot":"","sources":["../src/runtimes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGzD,YAAY,EAAE,cAAc,EAAE,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,CACN,OAAO,EAAE,MAAM,CAAC,UAAU,EAC1B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,SAAS,EACf,EAAE,CAAC,EAAE,cAAc,GAClB,MAAM,CAAC,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAuED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAerE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAInD"}
+{"version":3,"file":"runtimes.d.ts","sourceRoot":"","sources":["../src/runtimes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAa,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGzD,YAAY,EAAE,cAAc,EAAE,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,CACN,OAAO,EAAE,MAAM,CAAC,UAAU,EAC1B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,SAAS,EACf,EAAE,CAAC,EAAE,cAAc,GAClB,MAAM,CAAC,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAoFD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAerE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAInD"}

package/dist/runtimes.js

@@ -1,6 +1,6 @@
 import * as fs from 'node:fs';
 import * as path from 'node:path';
-import { clearAllProviderCreds } from '@parall/agent-core';
+import { clearAllProviderCreds, llmSource } from '@parall/agent-core';
 import { resolveBundleDir } from './config.js';
 export { clearAllProviderCreds };
 function buildStandardEnv(baseEnv, agentId, orgId, apiKey, dirs, pc) {
@@ -31,7 +31,20 @@ const codexAdapter = {
     args: [],
     buildEnv(baseEnv, agentId, orgId, apiKey, dirs, pc) {
         const env = buildStandardEnv(baseEnv, agentId, orgId, apiKey, dirs, pc);
-        env.PRLL_CODEX_HOME = path.join(dirs.stateDir, '.codex');
+        // CODEX_HOME placement: shared with the operator ONLY for local
+        // runtime_auth agents — they need the credential `codex login` writes to
+        // CODEX_HOME / ~/.codex (a headless child cannot log in itself; an
+        // isolated home strands them in a permanent 401 loop), and they never
+        // write the [model_providers.parall] block. Every other source keeps the
+        // isolated per-agent home: a parall-mode bridge rewrites that provider
+        // block with ITS OWN api_url and threads select the provider by fixed
+        // name, so through a shared config.toml a staging daemon's rewrite would
+        // route a coexisting prod agent's traffic (and its agk_ key) to the
+        // staging endpoint. K8s daemons always isolate, mirroring the Claude
+        // home policy (supervisor spawnAgentOnce).
+        if (baseEnv.KUBERNETES_SERVICE_HOST || llmSource(pc) !== 'runtime_auth') {
+            env.PRLL_CODEX_HOME = path.join(dirs.stateDir, '.codex');
+        }
         return env;
     },
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/daemon",
-  "version": "1.41.0",
+  "version": "1.42.1",
   "description": "Parall local agent runtime — daemon supervisor + bridge runtimes, bundled as standalone JS files",
   "license": "MIT",
   "repository": {
@@ -32,11 +32,11 @@
   "dependencies": {
     "@aws-sdk/client-s3": "3.984.0",
     "@pinixai/bb-browser-pro": "0.15.0",
-    "@parall/agent-core": "1.41.0",
-    "@parall/sdk": "1.41.0",
-    "@parall/claude-agent": "1.41.0",
-    "@parall/codex-agent": "1.41.0",
-    "@parall/openclaw-agent": "1.41.0"
+    "@parall/sdk": "1.42.1",
+    "@parall/claude-agent": "1.42.1",
+    "@parall/codex-agent": "1.42.1",
+    "@parall/openclaw-agent": "1.42.1",
+    "@parall/agent-core": "1.42.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",