@parall/daemon 1.49.0 → 1.50.1

package/bundle/parall-claude-agent.js

@@ -51291,8 +51291,16 @@ function laneContextFilePath(contextDir, targetUri, threadRootId) {
   return path.join(contextDir, `${laneKeyForTarget(targetUri, threadRootId)}.json`);
 }
 
-// ts/sdk/dist/types.js
-var MENTION_ALL_USER_ID = "all";
+// ts/sdk/dist/browser-viewer.js
+var BROWSER_VIEWER_READINESS_TIMEOUT_MS = 6e4;
+function browserViewerRequestOptions(command, opts) {
+  if (command !== "stream.answer" && command !== "stream.switch")
+    return opts;
+  return {
+    ...opts,
+    timeoutMs: Math.max(opts?.timeoutMs ?? 0, BROWSER_VIEWER_READINESS_TIMEOUT_MS)
+  };
+}
 
 // ts/sdk/dist/constants.js
 var API_BASE = "/api/v1";
@@ -51328,6 +51336,12 @@ var ENDPOINTS = {
   ORG_MEMBER: (orgId, userId) => `${API_BASE}/orgs/${orgId}/members/${userId}`,
   ORG_MEMBER_CHATS: (orgId, memberId) => `${API_BASE}/orgs/${orgId}/members/${memberId}/chats`,
   ORG_MEMBER_TASKS: (orgId, memberId) => `${API_BASE}/orgs/${orgId}/members/${memberId}/tasks`,
+  // Org-scoped public profile (title / description). GET readable by every
+  // active member; PATCH is CAS-guarded (expected_version).
+  ORG_MEMBER_PROFILE: (orgId, userId) => `${API_BASE}/orgs/${orgId}/members/${userId}/profile`,
+  // Private agent Instructions — visibility gated server-side
+  // (agent self + Human org admin/owner). Never cached.
+  AGENT_INSTRUCTIONS: (orgId, agentId) => `${API_BASE}/orgs/${orgId}/agents/${agentId}/instructions`,
   REF_SEARCH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/search`,
   // Direct messages (org-scoped, atomic find-or-create + send)
   DM: (orgId) => `${API_BASE}/orgs/${orgId}/dm`,
@@ -51611,6 +51625,11 @@ var ENDPOINTS = {
   SEARCH: (orgId) => `${API_BASE}/orgs/${orgId}/search`,
   // Feature flags (org-scoped, server-evaluated)
   FEATURE_FLAGS: (orgId) => `${API_BASE}/orgs/${orgId}/feature-flags`,
+  // Team templates (org-scoped, owner/admin only)
+  TEMPLATES: (orgId) => `${API_BASE}/orgs/${orgId}/templates`,
+  TEMPLATE: (orgId, templateId) => `${API_BASE}/orgs/${orgId}/templates/${templateId}`,
+  TEMPLATE_DEPLOYMENTS: (orgId) => `${API_BASE}/orgs/${orgId}/template-deployments`,
+  TEMPLATE_DEPLOYMENT: (orgId, deploymentId) => `${API_BASE}/orgs/${orgId}/template-deployments/${deploymentId}`,
   // Billing & Credits (org-scoped)
   BILLING: (orgId) => `${API_BASE}/orgs/${orgId}/billing`,
   BILLING_TRANSACTIONS: (orgId) => `${API_BASE}/orgs/${orgId}/billing/transactions`,
@@ -52131,6 +52150,30 @@ var ParallClient = class _ParallClient {
   async updateOrgMember(orgId, userId, role) {
     return this.request("PATCH", ENDPOINTS.ORG_MEMBER(orgId, userId), { role });
   }
+  /** Org-scoped public profile (title / description) of any active member. */
+  async getMemberProfile(orgId, userId) {
+    return this.request("GET", ENDPOINTS.ORG_MEMBER_PROFILE(orgId, userId));
+  }
+  /**
+   * CAS full-replacement of a member's public profile. Humans edit their
+   * own; Human org admins/owners edit agents'. A stale expected_version
+   * gets 409 PROFILE_VERSION_CONFLICT with error.details.current_version.
+   */
+  async updateMemberProfile(orgId, userId, req) {
+    return this.request("PATCH", ENDPOINTS.ORG_MEMBER_PROFILE(orgId, userId), req);
+  }
+  /** Private agent Instructions — agent self or Human org admin/owner only. */
+  async getAgentInstructions(orgId, agentId) {
+    return this.request("GET", ENDPOINTS.AGENT_INSTRUCTIONS(orgId, agentId));
+  }
+  /**
+   * CAS update of the private Instructions (Human org admin/owner only).
+   * A stale expected_version gets 409 INSTRUCTIONS_VERSION_CONFLICT with
+   * error.details.current_version.
+   */
+  async updateAgentInstructions(orgId, agentId, req) {
+    return this.request("PATCH", ENDPOINTS.AGENT_INSTRUCTIONS(orgId, agentId), req);
+  }
   // Member activity surfaces — chats the member participates in within this org,
   // ordered by most recent activity. Powers the member profile Activity tab.
   async getMemberChats(orgId, memberId, params) {
@@ -52688,11 +52731,7 @@ var ParallClient = class _ParallClient {
   async postBrowseResponse(requestId, response) {
     return this.request("POST", ENDPOINTS.MACHINES_ME_BROWSE_RESPONSE(requestId), response);
   }
-  /**
-   * `POST /machines/me/browser-profiles/viewer-response/{requestId}` — daemon
-   * reply to a `machine.browser_profile.viewer` control command. Wakes the
-   * api-server request/reply bridge (mirrors {@link postBrowseResponse}).
-   */
+  /** Reply to `machine.browser_profile.viewer` and wake its request/reply bridge. */
   async postBrowserProfileViewerResponse(requestId, response) {
     return this.request("POST", ENDPOINTS.MACHINES_ME_BROWSER_PROFILE_VIEWER_RESPONSE(requestId), response);
   }
@@ -52702,7 +52741,7 @@ var ParallClient = class _ParallClient {
    * owner or org admin. api-server brokers the command to the host daemon.
    */
   async browserViewerCommand(orgId, profileId, req, opts) {
-    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, opts);
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, browserViewerRequestOptions(req.command, opts));
   }
   /**
    * Drive the Cloud Edge live viewer (V1b, design §6): WebRTC signaling + input +
@@ -53474,6 +53513,22 @@ var ParallClient = class _ParallClient {
   async getFeatureFlags(orgId) {
     return this.request("GET", ENDPOINTS.FEATURE_FLAGS(orgId));
   }
+  // ---- Official Template catalog (org-contextual owner/admin reads + Hire) ----
+  async listOfficialTemplates(orgId) {
+    const response = await this.request("GET", ENDPOINTS.TEMPLATES(orgId));
+    return response.templates ?? [];
+  }
+  async getOfficialTemplate(orgId, templateId) {
+    return this.request("GET", ENDPOINTS.TEMPLATE(orgId, templateId));
+  }
+  async deployTemplate(orgId, request3) {
+    return this.request("POST", ENDPOINTS.TEMPLATE_DEPLOYMENTS(orgId), request3, void 0, false, {
+      timeoutMs: 185e3
+    });
+  }
+  async getTemplateDeployment(orgId, deploymentId) {
+    return this.request("GET", ENDPOINTS.TEMPLATE_DEPLOYMENT(orgId, deploymentId));
+  }
   // ---- Billing & Credits (org-scoped) ----
   async getBilling(orgId) {
     return this.request("GET", ENDPOINTS.BILLING(orgId));
@@ -53870,6 +53925,20 @@ function buildApiError(res, rawErrorBody) {
   return apiError;
 }
 
+// ts/sdk/dist/types.js
+var MENTION_ALL_USER_ID = "all";
+var MENTION_ALL_HUMANS_USER_ID = "allhuman";
+var MENTION_ALL_AGENTS_USER_ID = "allagent";
+function mentionTargetsUser(mentionUserId, userId, userType) {
+  if (mentionUserId === userId || mentionUserId === MENTION_ALL_USER_ID)
+    return true;
+  if (mentionUserId === MENTION_ALL_HUMANS_USER_ID)
+    return userType === "human";
+  if (mentionUserId === MENTION_ALL_AGENTS_USER_ID)
+    return userType === "agent";
+  return false;
+}
+
 // ts/sdk/dist/ws.js
 function isRetryableNetworkError(err) {
   return err instanceof Error && err.name === "ApiError" && "status" in err && err.status === 0;
@@ -55128,6 +55197,17 @@ function buildForkResultPrefix(results) {
 }
 
 // ts/agent-core/dist/prompt-fragments.js
+function identityFromMe(me) {
+  return {
+    userId: me.id,
+    displayName: me.display_name,
+    title: me.public_profile?.title || void 0,
+    publicDescription: me.public_profile?.description || void 0,
+    // `||` on purpose: an empty-string instructions must also fall back to
+    // the deprecated description alias (empty means "unset" on this wire).
+    instructions: me.agent_profile?.instructions || me.agent_profile?.description || void 0
+  };
+}
 var PRLL_IDENTITY_BASE = `## You on Parall
 
 Parall is a shared workspace where humans and agents work side by side as equals.
@@ -55149,11 +55229,15 @@ function buildIdentity(agent) {
   const name = sanitizeProfileField(agent.displayName);
   const lines = [PRLL_IDENTITY_BASE, "", "### Your Parall Identity", ""];
   lines.push(`You are **${name}** (\`prll://${agent.userId}\`).`);
-  if (agent.description) {
-    const description = sanitizeProfileBlock(agent.description);
-    if (description) {
-      lines.push("", "### Your Agent Profile", "", description);
-    }
+  const title = agent.title ? sanitizeProfileField(agent.title) : "";
+  if (title)
+    lines.push(`Title: ${title}`);
+  const about = agent.publicDescription ? sanitizeProfileField(agent.publicDescription) : "";
+  if (about)
+    lines.push(`About: ${about}`);
+  const instructions = sanitizeProfileBlock(agent.instructions ?? agent.description ?? "");
+  if (instructions) {
+    lines.push("", "### Private instructions from your organization admins", "", instructions);
   }
   lines.push("", `When you see \`${agent.userId}\` or \`prll://${agent.userId}\` in messages, mentions, or events \u2014 that's you.`);
   return lines.join("\n");
@@ -58139,7 +58223,7 @@ var ParallAgentGateway = class {
       return { action: "skip" };
     if (chatInfo.type === "group" && chatInfo.agentRoutingMode !== "active") {
       const mentions = content.mentions ?? [];
-      const isMentioned = mentions.some((mention) => mention.user_id === this.opts.agentUserId || mention.user_id === MENTION_ALL_USER_ID);
+      const isMentioned = mentions.some((mention) => mentionTargetsUser(mention.user_id, this.opts.agentUserId, "agent"));
       if (!isMentioned)
         return { action: "skip" };
     }
@@ -59139,8 +59223,17 @@ parall whoami
 parall members list          # All org members (humans + agents)
 parall agents list           # Agents only
 parall users get prll://usr_xxx     # Get user details by ID
+parall members profile prll://usr_xxx   # A member's public profile (title / about)
+parall agents instructions   # Your own private Instructions (admin-maintained)
 \`\`\`
 
+Every member carries an org-scoped public profile: \`title\` (role, e.g.
+"Platform Lead") and \`description\` (a short about). \`members list\` includes
+both \u2014 use them to route work to the right person or agent. Your own system
+prompt already contains your public profile and your private Instructions;
+you cannot edit either of them \u2014 if yours should change, DM a Human org
+admin and ask.
+
 Create a hosted agent when the user asks for a Parall-managed runtime. Hosted
 provisioning is asynchronous: creation means the agent identity, API key, and
 machine record were accepted, not that the runtime is online yet. Use \`--wait\`
@@ -61538,7 +61631,7 @@ async function getAgentMeWithLegacyFallback(client, orgId) {
       throw err;
     }
     const user = await client.getMe();
-    return { ...user, agent_profile: null };
+    return { ...user, agent_profile: null, public_profile: null };
   }
 }
 function resolveProviderEnv() {
@@ -61579,11 +61672,9 @@ async function main() {
     const agentUserId = me.id;
     const agentLog = childLogger(activeLog, agentUserId);
     activeLog = agentLog;
-    const agentIdentity = {
-      userId: agentUserId,
-      displayName: me.display_name,
-      description: me.agent_profile?.description ?? void 0
-    };
+    let agentIdentity = identityFromMe(me);
+    let lastIdentitySnapshot = JSON.stringify(agentIdentity);
+    let lastKnownAgentProfile = me.agent_profile;
     const runtimeKey = config.runtimeKey || buildClaudeRuntimeKey(agentUserId);
     const sessionStateFilePath = sessionStateFilePathForRuntime(config.stateDir, runtimeKey);
     const sessionManager = new ClaudeSessionManager(runtimeKey, sessionStateFilePath, agentLog);
@@ -61644,15 +61735,17 @@ async function main() {
     }
     const refreshPlatformConfig = async () => {
       const updated = await configMgr.fetch();
-      let refreshedProfile;
-      if (updated.modelIsPin === void 0) {
-        try {
-          refreshedProfile = (await getAgentMeWithLegacyFallback(client, config.orgId)).agent_profile;
-        } catch (err) {
-          agentLog.warn(`platform config refresh: legacy /agents/me fallback failed: ${String(err)}`);
-        }
+      let refreshedMe;
+      try {
+        refreshedMe = await getAgentMeWithLegacyFallback(client, config.orgId);
+      } catch (err) {
+        agentLog.warn(`platform config refresh: /agents/me refetch failed (keeping last-known identity): ${String(err)}`);
+      }
+      if (refreshedMe) {
+        agentIdentity = identityFromMe(refreshedMe);
+        lastKnownAgentProfile = refreshedMe.agent_profile;
       }
-      const isPin = deriveModelIsPin(updated, refreshedProfile);
+      const isPin = deriveModelIsPin(updated, lastKnownAgentProfile);
       const localEffort = process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || null;
       adapter.updateConfig({
         model: resolveRuntimeModel(isPin, updated.model, config.model) ?? null,
@@ -61667,8 +61760,10 @@ async function main() {
         promptWritten = false;
         agentLog.warn(`system prompt refresh write failed (retrying next refresh): ${String(err)}`);
       }
-      if (promptWritten && joinedFragments !== lastCapabilityFragments) {
+      const identitySnapshot = JSON.stringify(agentIdentity);
+      if (promptWritten && (joinedFragments !== lastCapabilityFragments || identitySnapshot !== lastIdentitySnapshot)) {
         lastCapabilityFragments = joinedFragments;
+        lastIdentitySnapshot = identitySnapshot;
         adapter.requestProcessRestart();
       }
     };

package/bundle/parall-codex-agent.js

@@ -51291,8 +51291,16 @@ function laneContextFilePath(contextDir, targetUri, threadRootId) {
   return path.join(contextDir, `${laneKeyForTarget(targetUri, threadRootId)}.json`);
 }
 
-// ts/sdk/dist/types.js
-var MENTION_ALL_USER_ID = "all";
+// ts/sdk/dist/browser-viewer.js
+var BROWSER_VIEWER_READINESS_TIMEOUT_MS = 6e4;
+function browserViewerRequestOptions(command, opts) {
+  if (command !== "stream.answer" && command !== "stream.switch")
+    return opts;
+  return {
+    ...opts,
+    timeoutMs: Math.max(opts?.timeoutMs ?? 0, BROWSER_VIEWER_READINESS_TIMEOUT_MS)
+  };
+}
 
 // ts/sdk/dist/constants.js
 var API_BASE = "/api/v1";
@@ -51328,6 +51336,12 @@ var ENDPOINTS = {
   ORG_MEMBER: (orgId, userId) => `${API_BASE}/orgs/${orgId}/members/${userId}`,
   ORG_MEMBER_CHATS: (orgId, memberId) => `${API_BASE}/orgs/${orgId}/members/${memberId}/chats`,
   ORG_MEMBER_TASKS: (orgId, memberId) => `${API_BASE}/orgs/${orgId}/members/${memberId}/tasks`,
+  // Org-scoped public profile (title / description). GET readable by every
+  // active member; PATCH is CAS-guarded (expected_version).
+  ORG_MEMBER_PROFILE: (orgId, userId) => `${API_BASE}/orgs/${orgId}/members/${userId}/profile`,
+  // Private agent Instructions — visibility gated server-side
+  // (agent self + Human org admin/owner). Never cached.
+  AGENT_INSTRUCTIONS: (orgId, agentId) => `${API_BASE}/orgs/${orgId}/agents/${agentId}/instructions`,
   REF_SEARCH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/search`,
   // Direct messages (org-scoped, atomic find-or-create + send)
   DM: (orgId) => `${API_BASE}/orgs/${orgId}/dm`,
@@ -51611,6 +51625,11 @@ var ENDPOINTS = {
   SEARCH: (orgId) => `${API_BASE}/orgs/${orgId}/search`,
   // Feature flags (org-scoped, server-evaluated)
   FEATURE_FLAGS: (orgId) => `${API_BASE}/orgs/${orgId}/feature-flags`,
+  // Team templates (org-scoped, owner/admin only)
+  TEMPLATES: (orgId) => `${API_BASE}/orgs/${orgId}/templates`,
+  TEMPLATE: (orgId, templateId) => `${API_BASE}/orgs/${orgId}/templates/${templateId}`,
+  TEMPLATE_DEPLOYMENTS: (orgId) => `${API_BASE}/orgs/${orgId}/template-deployments`,
+  TEMPLATE_DEPLOYMENT: (orgId, deploymentId) => `${API_BASE}/orgs/${orgId}/template-deployments/${deploymentId}`,
   // Billing & Credits (org-scoped)
   BILLING: (orgId) => `${API_BASE}/orgs/${orgId}/billing`,
   BILLING_TRANSACTIONS: (orgId) => `${API_BASE}/orgs/${orgId}/billing/transactions`,
@@ -52131,6 +52150,30 @@ var ParallClient = class _ParallClient {
   async updateOrgMember(orgId, userId, role) {
     return this.request("PATCH", ENDPOINTS.ORG_MEMBER(orgId, userId), { role });
   }
+  /** Org-scoped public profile (title / description) of any active member. */
+  async getMemberProfile(orgId, userId) {
+    return this.request("GET", ENDPOINTS.ORG_MEMBER_PROFILE(orgId, userId));
+  }
+  /**
+   * CAS full-replacement of a member's public profile. Humans edit their
+   * own; Human org admins/owners edit agents'. A stale expected_version
+   * gets 409 PROFILE_VERSION_CONFLICT with error.details.current_version.
+   */
+  async updateMemberProfile(orgId, userId, req) {
+    return this.request("PATCH", ENDPOINTS.ORG_MEMBER_PROFILE(orgId, userId), req);
+  }
+  /** Private agent Instructions — agent self or Human org admin/owner only. */
+  async getAgentInstructions(orgId, agentId) {
+    return this.request("GET", ENDPOINTS.AGENT_INSTRUCTIONS(orgId, agentId));
+  }
+  /**
+   * CAS update of the private Instructions (Human org admin/owner only).
+   * A stale expected_version gets 409 INSTRUCTIONS_VERSION_CONFLICT with
+   * error.details.current_version.
+   */
+  async updateAgentInstructions(orgId, agentId, req) {
+    return this.request("PATCH", ENDPOINTS.AGENT_INSTRUCTIONS(orgId, agentId), req);
+  }
   // Member activity surfaces — chats the member participates in within this org,
   // ordered by most recent activity. Powers the member profile Activity tab.
   async getMemberChats(orgId, memberId, params) {
@@ -52688,11 +52731,7 @@ var ParallClient = class _ParallClient {
   async postBrowseResponse(requestId, response) {
     return this.request("POST", ENDPOINTS.MACHINES_ME_BROWSE_RESPONSE(requestId), response);
   }
-  /**
-   * `POST /machines/me/browser-profiles/viewer-response/{requestId}` — daemon
-   * reply to a `machine.browser_profile.viewer` control command. Wakes the
-   * api-server request/reply bridge (mirrors {@link postBrowseResponse}).
-   */
+  /** Reply to `machine.browser_profile.viewer` and wake its request/reply bridge. */
   async postBrowserProfileViewerResponse(requestId, response) {
     return this.request("POST", ENDPOINTS.MACHINES_ME_BROWSER_PROFILE_VIEWER_RESPONSE(requestId), response);
   }
@@ -52702,7 +52741,7 @@ var ParallClient = class _ParallClient {
    * owner or org admin. api-server brokers the command to the host daemon.
    */
   async browserViewerCommand(orgId, profileId, req, opts) {
-    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, opts);
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, browserViewerRequestOptions(req.command, opts));
   }
   /**
    * Drive the Cloud Edge live viewer (V1b, design §6): WebRTC signaling + input +
@@ -53474,6 +53513,22 @@ var ParallClient = class _ParallClient {
   async getFeatureFlags(orgId) {
     return this.request("GET", ENDPOINTS.FEATURE_FLAGS(orgId));
   }
+  // ---- Official Template catalog (org-contextual owner/admin reads + Hire) ----
+  async listOfficialTemplates(orgId) {
+    const response = await this.request("GET", ENDPOINTS.TEMPLATES(orgId));
+    return response.templates ?? [];
+  }
+  async getOfficialTemplate(orgId, templateId) {
+    return this.request("GET", ENDPOINTS.TEMPLATE(orgId, templateId));
+  }
+  async deployTemplate(orgId, request3) {
+    return this.request("POST", ENDPOINTS.TEMPLATE_DEPLOYMENTS(orgId), request3, void 0, false, {
+      timeoutMs: 185e3
+    });
+  }
+  async getTemplateDeployment(orgId, deploymentId) {
+    return this.request("GET", ENDPOINTS.TEMPLATE_DEPLOYMENT(orgId, deploymentId));
+  }
   // ---- Billing & Credits (org-scoped) ----
   async getBilling(orgId) {
     return this.request("GET", ENDPOINTS.BILLING(orgId));
@@ -53870,6 +53925,20 @@ function buildApiError(res, rawErrorBody) {
   return apiError;
 }
 
+// ts/sdk/dist/types.js
+var MENTION_ALL_USER_ID = "all";
+var MENTION_ALL_HUMANS_USER_ID = "allhuman";
+var MENTION_ALL_AGENTS_USER_ID = "allagent";
+function mentionTargetsUser(mentionUserId, userId, userType) {
+  if (mentionUserId === userId || mentionUserId === MENTION_ALL_USER_ID)
+    return true;
+  if (mentionUserId === MENTION_ALL_HUMANS_USER_ID)
+    return userType === "human";
+  if (mentionUserId === MENTION_ALL_AGENTS_USER_ID)
+    return userType === "agent";
+  return false;
+}
+
 // ts/sdk/dist/ws.js
 function isRetryableNetworkError(err) {
   return err instanceof Error && err.name === "ApiError" && "status" in err && err.status === 0;
@@ -55128,6 +55197,17 @@ function buildForkResultPrefix(results) {
 }
 
 // ts/agent-core/dist/prompt-fragments.js
+function identityFromMe(me) {
+  return {
+    userId: me.id,
+    displayName: me.display_name,
+    title: me.public_profile?.title || void 0,
+    publicDescription: me.public_profile?.description || void 0,
+    // `||` on purpose: an empty-string instructions must also fall back to
+    // the deprecated description alias (empty means "unset" on this wire).
+    instructions: me.agent_profile?.instructions || me.agent_profile?.description || void 0
+  };
+}
 var PRLL_IDENTITY_BASE = `## You on Parall
 
 Parall is a shared workspace where humans and agents work side by side as equals.
@@ -55149,11 +55229,15 @@ function buildIdentity(agent) {
   const name = sanitizeProfileField(agent.displayName);
   const lines = [PRLL_IDENTITY_BASE, "", "### Your Parall Identity", ""];
   lines.push(`You are **${name}** (\`prll://${agent.userId}\`).`);
-  if (agent.description) {
-    const description = sanitizeProfileBlock(agent.description);
-    if (description) {
-      lines.push("", "### Your Agent Profile", "", description);
-    }
+  const title = agent.title ? sanitizeProfileField(agent.title) : "";
+  if (title)
+    lines.push(`Title: ${title}`);
+  const about = agent.publicDescription ? sanitizeProfileField(agent.publicDescription) : "";
+  if (about)
+    lines.push(`About: ${about}`);
+  const instructions = sanitizeProfileBlock(agent.instructions ?? agent.description ?? "");
+  if (instructions) {
+    lines.push("", "### Private instructions from your organization admins", "", instructions);
   }
   lines.push("", `When you see \`${agent.userId}\` or \`prll://${agent.userId}\` in messages, mentions, or events \u2014 that's you.`);
   return lines.join("\n");
@@ -58139,7 +58223,7 @@ var ParallAgentGateway = class {
       return { action: "skip" };
     if (chatInfo.type === "group" && chatInfo.agentRoutingMode !== "active") {
       const mentions = content.mentions ?? [];
-      const isMentioned = mentions.some((mention) => mention.user_id === this.opts.agentUserId || mention.user_id === MENTION_ALL_USER_ID);
+      const isMentioned = mentions.some((mention) => mentionTargetsUser(mention.user_id, this.opts.agentUserId, "agent"));
       if (!isMentioned)
         return { action: "skip" };
     }
@@ -59139,8 +59223,17 @@ parall whoami
 parall members list          # All org members (humans + agents)
 parall agents list           # Agents only
 parall users get prll://usr_xxx     # Get user details by ID
+parall members profile prll://usr_xxx   # A member's public profile (title / about)
+parall agents instructions   # Your own private Instructions (admin-maintained)
 \`\`\`
 
+Every member carries an org-scoped public profile: \`title\` (role, e.g.
+"Platform Lead") and \`description\` (a short about). \`members list\` includes
+both \u2014 use them to route work to the right person or agent. Your own system
+prompt already contains your public profile and your private Instructions;
+you cannot edit either of them \u2014 if yours should change, DM a Human org
+admin and ask.
+
 Create a hosted agent when the user asks for a Parall-managed runtime. Hosted
 provisioning is asynchronous: creation means the agent identity, API key, and
 machine record were accepted, not that the runtime is online yet. Use \`--wait\`
@@ -62703,7 +62796,7 @@ async function getAgentMeWithLegacyFallback(client, orgId) {
       throw err;
     }
     const user = await client.getMe();
-    return { ...user, agent_profile: null };
+    return { ...user, agent_profile: null, public_profile: null };
   }
 }
 function resolveProviderEnv() {
@@ -62743,11 +62836,9 @@ async function main() {
       ensureParallProvider(config.codexHome, config.apiUrl, agentLog);
       agentLog.info("parall custom provider configured (Responses API HTTP/SSE mode)");
     }
-    const agentIdentity = {
-      userId: agentUserId,
-      displayName: me.display_name,
-      description: me.agent_profile?.description ?? void 0
-    };
+    let agentIdentity = identityFromMe(me);
+    let lastIdentitySnapshot = JSON.stringify(agentIdentity);
+    let lastKnownAgentProfile = me.agent_profile;
     const runtimeKey = config.runtimeKey || buildCodexRuntimeKey(agentUserId);
     const mainContextFilePath = contextFilePathForSession(config.stateDir, runtimeKey);
     const sessionStateFilePath = sessionStateFilePathForRuntime(config.stateDir, runtimeKey);
@@ -62797,15 +62888,17 @@ async function main() {
     });
     const refreshPlatformConfig = async () => {
       const updated = await configMgr.fetch();
-      let refreshedProfile;
-      if (updated.modelIsPin === void 0) {
-        try {
-          refreshedProfile = (await getAgentMeWithLegacyFallback(client, config.orgId)).agent_profile;
-        } catch (err) {
-          agentLog.warn(`platform config refresh: legacy /agents/me fallback failed: ${String(err)}`);
-        }
+      let refreshedMe;
+      try {
+        refreshedMe = await getAgentMeWithLegacyFallback(client, config.orgId);
+      } catch (err) {
+        agentLog.warn(`platform config refresh: /agents/me refetch failed (keeping last-known identity): ${String(err)}`);
+      }
+      if (refreshedMe) {
+        agentIdentity = identityFromMe(refreshedMe);
+        lastKnownAgentProfile = refreshedMe.agent_profile;
       }
-      const isPin = deriveModelIsPin(updated, refreshedProfile);
+      const isPin = deriveModelIsPin(updated, lastKnownAgentProfile);
       adapter.updateConfig({
         model: resolveRuntimeModel(isPin, updated.model, config.model) ?? null,
         reasoningEffort: updated.thinkingEffort ?? config.reasoningEffort ?? null
@@ -62820,8 +62913,10 @@ async function main() {
         promptWritten = false;
         agentLog.warn(`system prompt refresh write failed (retrying next refresh): ${String(err)}`);
       }
-      if (promptWritten && joinedFragments !== lastCapabilityFragments) {
+      const identitySnapshot = JSON.stringify(agentIdentity);
+      if (promptWritten && (joinedFragments !== lastCapabilityFragments || identitySnapshot !== lastIdentitySnapshot)) {
         lastCapabilityFragments = joinedFragments;
+        lastIdentitySnapshot = identitySnapshot;
         adapter.requestProcessRestart();
       }
     };