parallel-codex-tui 0.2.1 → 0.2.3

package/.parallel-codex/config.example.toml

@@ -4,18 +4,18 @@ defaultMode = "auto"
 [router.codex]
 command = "codex"
 args = ["exec", "--ephemeral", "--ignore-rules", "-c", "model_reasoning_effort=low", "--skip-git-repo-check", "--sandbox", "read-only", "--color", "never", "-"]
-timeoutMs = 30000
+timeoutMs = 60000
 # Stop a silent Router before the total ceiling so one transient retry stays bounded.
-firstOutputTimeoutMs = 15000
+firstOutputTimeoutMs = 30000
 # Reset after every stdout/stderr chunk; timeoutMs remains the hard ceiling.
-idleTimeoutMs = 15000
+idleTimeoutMs = 30000
 # Stop a noisy or malformed classifier before it can grow Router memory without bound (1 KiB..16 MiB).
 maxOutputBytes = 1048576
 # Retry one transient Router failure before asking the user; 1 disables automatic retry.
 maxAttempts = 2
 retryDelayMs = 500
 # Active-task follow-ups fail safely to Main after this shorter Codex timeout.
-followUpTimeoutMs = 20000
+followUpTimeoutMs = 45000
 # Non-interactive fallback; the TUI pauses and asks before executing it.
 fallback = "simple"
 
@@ -75,8 +75,8 @@ fallback = "new"
 
 [workers.claude]
 command = "claude"
-# Automated isolated roles enforce acceptEdits and remove permission-bypass flags.
-args = ["--print", "--permission-mode", "acceptEdits", "--output-format", "text"]
+# Main uses Claude auto mode for non-interactive tools. Isolated roles are still clamped to acceptEdits.
+args = ["--print", "--permission-mode", "auto", "--output-format", "text"]
 # timeoutMs is the hard ceiling; first output owns silent startup and idle starts after actual output.
 # timeoutMs = 2700000
 # idleTimeoutMs = 300000

package/README.md

@@ -6,7 +6,7 @@ Built with Codex-assisted development.
 
 ## Current Release
 
-`v0.2.1` is available from [npm](https://www.npmjs.com/package/parallel-codex-tui/v/0.2.1) and as a [GitHub Release](https://github.com/allendred/parallel-codex-tui/releases/tag/v0.2.1). It restores single Up/Down request-history navigation while preserving mouse-wheel chat scrolling, terminal text selection, and the parallel recovery and diagnostics work introduced in `v0.2.0`.
+`v0.2.3` is available from [npm](https://www.npmjs.com/package/parallel-codex-tui/v/0.2.3) and as a [GitHub Release](https://github.com/allendred/parallel-codex-tui/releases/tag/v0.2.3). Claude Main now uses non-interactive `auto` permissions so safe tool calls can run instead of asking for an approval that the chat cannot deliver. Isolated coding Workers remain clamped to `acceptEdits`; the macOS system-proxy and Up/Down history fixes from `v0.2.2` remain included.
 
 The release keeps terminal scrolling and copying available at the same time without requiring Shift. Ordinary left-drag selection remains owned by the terminal while alternate-scroll delivers the wheel to chat, Worker logs, and structured views. `Ctrl+Y` copies the visible view as a fallback. It preserves the embedded native Agent scrollback across status-detail round trips and real PTY resizes.
 
@@ -20,7 +20,7 @@ Highlights:
 - Named Worker Providers support Codex-compatible, Claude-compatible, OpenAI-compatible, Anthropic-compatible, and custom generic commands with independent role, model, environment, permission, resume, and interactive settings.
 - Worker overview, Feature board, collaboration timeline, Task center, status details, rendered Markdown/Diff/error logs, Unicode search, keyboard navigation, mouse scrolling, and configurable themes share one terminal UI system.
 
-Release acceptance includes a real three-Feature Tetris task with parallel Actor/Critic waves and final integration review. Real Codex and Claude probes both proved fresh and same-session resume calls, the semantic Router completed a live classification, and one TUI completed Main calls in two workspaces before restoring the first workspace without leaking chat state. PTY coverage runs in Apple Terminal, tmux, and Zellij profiles at narrow and wide sizes, including status/log equivalence and preserving the native output tail across status-detail round trips. The deterministic repository suite passed 1,257 tests across 122 files; one quota-consuming real-Agent test is skipped by default and passes through `npm run test:real-agents`.
+Release acceptance includes a real three-Feature Tetris task with parallel Actor/Critic waves and final integration review. Real Codex and Claude probes both proved fresh and same-session resume calls, and a Claude Main session executed safe Bash tools before and after resume with `auto` permissions. The semantic Router completed a live classification, and one TUI completed Main calls in two workspaces before restoring the first workspace without leaking chat state. PTY coverage runs in Apple Terminal, tmux, and Zellij profiles at narrow and wide sizes, including status/log equivalence and preserving the native output tail across status-detail round trips. The deterministic repository suite passed 1,264 tests across 123 files; one quota-consuming real-Agent test is skipped by default and passes through `npm run test:real-agents`.
 
 Real Provider probes depend on valid local CLI credentials. In particular, authenticate the Claude CLI before selecting a Claude-compatible Worker, then run `parallel-codex-tui --doctor --probe-agents` to prove fresh and resumed calls on that machine.
 
@@ -264,17 +264,17 @@ defaultMode = "auto"
 [router.codex]
 command = "codex"
 args = ["exec", "--ephemeral", "--ignore-rules", "-c", "model_reasoning_effort=low", "--skip-git-repo-check", "--sandbox", "read-only", "--color", "never", "-"]
-timeoutMs = 30000
-firstOutputTimeoutMs = 15000
-idleTimeoutMs = 15000
+timeoutMs = 60000
+firstOutputTimeoutMs = 30000
+idleTimeoutMs = 30000
 maxOutputBytes = 1048576
 maxAttempts = 2
 retryDelayMs = 500
-followUpTimeoutMs = 20000
+followUpTimeoutMs = 45000
 fallback = "simple"
 ```
 
-Set `defaultMode = "simple"` / `defaultMode = "complex"` to force one path. In `auto` mode, routing is semantic through an ephemeral, low-reasoning Codex run. Only `simple` and `complex` are accepted route modes; harmless casing and surrounding whitespace are normalized, while invalid JSON or an unknown mode uses the configured fallback and appears as `invalid output` in the status bar. `fallback = "simple"` or `fallback = "complex"` supplies the non-interactive fallback path; the safe default is `simple` and there is no keyword-only router. `firstOutputTimeoutMs` stops a silent process, `idleTimeoutMs` resets after every stdout or stderr chunk, and `timeoutMs` remains the hard ceiling even while output continues. `maxOutputBytes` bounds combined Router stdout and stderr in memory; exceeding it stops the process tree and reports invalid output instead of waiting for a timeout. The 1 MiB default can be configured from 1 KiB through 16 MiB. The 15-second first-output and idle defaults stay below the 30-second total ceiling, so their failure kinds remain visible. Two repeated silent starts settle in about 30.5 seconds instead of two full 30-second waits; an idle deadline begins after the latest output, while the hard ceiling still bounds every attempt. A watchdog only runs separately when its limit is lower than the active initial or follow-up total timeout, avoiding competing timers at the same deadline.
+Set `defaultMode = "simple"` / `defaultMode = "complex"` to force one path. In `auto` mode, routing is semantic through an ephemeral, low-reasoning Codex run. Only `simple` and `complex` are accepted route modes; harmless casing and surrounding whitespace are normalized, while invalid JSON or an unknown mode uses the configured fallback and appears as `invalid output` in the status bar. `fallback = "simple"` or `fallback = "complex"` supplies the non-interactive fallback path; the safe default is `simple` and there is no keyword-only router. `firstOutputTimeoutMs` stops a silent process, `idleTimeoutMs` resets after every stdout or stderr chunk, and `timeoutMs` remains the hard ceiling even while output continues. `maxOutputBytes` bounds combined Router stdout and stderr in memory; exceeding it stops the process tree and reports invalid output instead of waiting for a timeout. The 1 MiB default can be configured from 1 KiB through 16 MiB. The 30-second first-output and idle defaults stay below the 60-second total ceiling, leaving room for a proxied Codex cold start while preserving distinct failure evidence. An idle deadline begins after the latest output, while the hard ceiling still bounds every attempt. A watchdog only runs separately when its limit is lower than the active initial or follow-up total timeout, avoiding competing timers at the same deadline.
 
 On POSIX systems the Router command runs in its own process group. Timeout, cancellation, and stdin failure send `SIGTERM`, wait briefly for graceful cleanup, then use `SIGKILL` when any group member remains. A retry, fallback choice, or completed cancellation is not exposed until that command tree is confirmed stopped, so a previous classifier cannot overlap the next Router or Worker. If termination cannot be verified after `SIGKILL`, the request fails closed instead of continuing around a live process.
 
@@ -290,7 +290,7 @@ Every new Router fallback persists an authoritative `router_failure_kind` alongs
 
 ### Proxy Environment
 
-Some CLI runtimes do not inherit the macOS System Settings proxy. Configure the router explicitly when direct OpenAI connections are blocked:
+On macOS, startup automatically inherits enabled HTTP, HTTPS, SOCKS, and bypass settings from System Settings when the corresponding process environment variables are absent. Explicit shell variables and local config remain authoritative. Set `PARALLEL_CODEX_INHERIT_SYSTEM_PROXY=0` to opt out. Configure provider-specific values explicitly when one agent needs a different route:
 
 ```toml
 [router.codex.env]
@@ -308,7 +308,7 @@ NO_PROXY = "localhost,127.0.0.1"
 
 `router.codex.env` applies only to semantic classification. `workers.<id>.model.env` applies to fresh/resumed runs and embedded native attach for that named Worker Provider. Keep these values in local `config.toml`, which is ignored by Git.
 
-Run `parallel-codex-tui --doctor` after changing proxy settings. Doctor checks referenced environment variables, reports when a macOS system proxy is not inherited by Codex subprocesses, and labels configured proxy host/port checks as local-endpoint reachability without printing credentials. Then run `parallel-codex-tui --doctor --probe-router` when you also need to verify the real Codex Router path through that proxy; this explicit probe can take up to `router.codex.timeoutMs`. A timed-out request is identified as `first output timeout`, `idle timeout after stdout/stderr`, or `total timeout`; `via <proxy-host:port>` remains context, not a claim that the proxy caused the failure. The audit never exposes the proxy URL or credentials.
+Run `parallel-codex-tui --doctor` after changing proxy settings. Doctor checks referenced environment variables and labels inherited or configured proxy host/port checks as local-endpoint reachability without printing credentials. If system-proxy detection is unavailable, Doctor reports that the macOS proxy was not inherited and points to the explicit config table. Then run `parallel-codex-tui --doctor --probe-router` when you also need to verify the real Codex Router path through that proxy; this explicit probe can take up to `router.codex.timeoutMs`. A timed-out request is identified as `first output timeout`, `idle timeout after stdout/stderr`, or `total timeout`; `via <proxy-host:port>` remains context, not a claim that the proxy caused the failure. The audit never exposes the proxy URL or credentials.
 
 ## Mock Mode
 
@@ -350,7 +350,7 @@ forkArgs = ["fork", "{sessionId}"]
 
 [workers.claude]
 command = "claude"
-args = ["--print", "--permission-mode", "acceptEdits", "--output-format", "text"]
+args = ["--print", "--permission-mode", "auto", "--output-format", "text"]
 
 [workers.claude.capabilities]
 profile = "claude"
@@ -363,7 +363,7 @@ args = ["--resume", "{sessionId}"]
 forkArgs = ["--resume", "{sessionId}", "--fork-session"]
 ```
 
-`model.args` and `model.env` apply to both automated worker runs and embedded native attach sessions. Native attach appends the rendered model arguments after `interactive.args`, so third-party `{model}` and `{provider}` selections remain active when you press `Ctrl+O`.
+`model.args` and `model.env` apply to both automated worker runs and embedded native attach sessions. Native attach appends the rendered model arguments after `interactive.args`, so third-party `{model}` and `{provider}` selections remain active when you press `Ctrl+O`. Claude Main uses `auto` so safe tool calls can complete in print mode; isolated Claude coding roles are still clamped to `acceptEdits`. When a command genuinely needs interactive approval, Main points to `Ctrl+O` instead of claiming that a chat reply can grant permission.
 
 `model.provider` names the remote model service; `capabilities.profile` describes the local CLI protocol. Worker Provider IDs are lowercase names using letters, digits, or `_`; excluding `-` keeps generated Worker directory names unambiguous. Existing `codex`, `claude`, and `mock` IDs remain compatible, while additional profiles can inherit `codex`, `claude`, another named profile, or conservative `generic` defaults.
 
@@ -516,12 +516,12 @@ The release job installs npm `^11.5.1`, runs on Node `24.15.x`, publishes the pr
 To publish a release, update `package.json` and `src/version.ts` to the same version, then push a matching tag:
 
 ```bash
-VERSION=0.2.1
+VERSION=0.2.3
 git tag "v$VERSION"
 git push origin "v$VERSION"
 ```
 
-You can also run the Release workflow manually and enter the same tag value. The release tag must match `package.json`; for example, package version `0.2.1` requires tag `v0.2.1`. Published tags such as `v0.2.0` are immutable and must not be moved or reused.
+You can also run the Release workflow manually and enter the same tag value. The release tag must match `package.json`; for example, package version `0.2.3` requires tag `v0.2.3`. Published tags such as `v0.2.2` are immutable and must not be moved or reused.
 
 ## Publishing Hygiene
 

package/dist/cli.js

@@ -16,6 +16,7 @@ import { configPath, loadConfig, withUiThemeOverride, writeDefaultConfig } from
 import { pathExists } from "./core/file-store.js";
 import { exportDiagnostics } from "./core/diagnostics.js";
 import { readRouterAudit } from "./core/router-audit.js";
+import { inheritMacSystemProxy } from "./core/system-proxy.js";
 import { loadTaskSessionDetails as loadPersistedTaskSessionDetails } from "./core/task-session-details.js";
 import { listWorkspaceChoices } from "./core/workspace.js";
 import { runDoctor, runRuntimePreflight } from "./doctor.js";
@@ -40,6 +41,9 @@ async function main() {
         process.exit(1);
     }
     const cliArgs = parseCliArgs(rawArgs, process.cwd());
+    if (!cliArgs.help && !cliArgs.themes && !cliArgs.version && !cliArgs.init) {
+        await inheritMacSystemProxy(process.env);
+    }
     if (!cliArgs.help && !cliArgs.themes && !cliArgs.version) {
         await prepareAppRoot(cliArgs.appRoot);
     }

package/dist/core/config.js

@@ -74,13 +74,13 @@ const CodexRouterConfigSchema = z.object({
         "never",
         "-"
     ]),
-    timeoutMs: z.number().int().positive().default(30000),
-    firstOutputTimeoutMs: z.number().int().positive().default(15000),
-    idleTimeoutMs: z.number().int().positive().default(15000),
+    timeoutMs: z.number().int().positive().default(60000),
+    firstOutputTimeoutMs: z.number().int().positive().default(30000),
+    idleTimeoutMs: z.number().int().positive().default(30000),
     maxOutputBytes: z.number().int().min(1024).max(16 * 1024 * 1024).default(1024 * 1024),
     maxAttempts: z.number().int().min(1).max(3).default(2),
     retryDelayMs: z.number().int().min(0).max(10000).default(500),
-    followUpTimeoutMs: z.number().int().positive().max(120000).default(20000),
+    followUpTimeoutMs: z.number().int().positive().max(120000).default(45000),
     fallback: z.enum(["simple", "complex"]).default("simple"),
     env: z.record(z.string()).default({})
 });
@@ -165,13 +165,13 @@ export function defaultConfig(projectRoot) {
                     "never",
                     "-"
                 ],
-                timeoutMs: 30000,
-                firstOutputTimeoutMs: 15000,
-                idleTimeoutMs: 15000,
+                timeoutMs: 60000,
+                firstOutputTimeoutMs: 30000,
+                idleTimeoutMs: 30000,
                 maxOutputBytes: 1024 * 1024,
                 maxAttempts: 2,
                 retryDelayMs: 500,
-                followUpTimeoutMs: 20000,
+                followUpTimeoutMs: 45000,
                 fallback: "simple",
                 env: {}
             }
@@ -214,7 +214,7 @@ export function defaultConfig(projectRoot) {
             },
             claude: {
                 command: "claude",
-                args: ["--print", "--permission-mode", "acceptEdits", "--output-format", "text"],
+                args: ["--print", "--permission-mode", "auto", "--output-format", "text"],
                 assignable: true,
                 timeoutMs: 45 * 60 * 1000,
                 idleTimeoutMs: 5 * 60 * 1000,
@@ -232,7 +232,7 @@ export function defaultConfig(projectRoot) {
                 },
                 nativeSession: {
                     enabled: true,
-                    resumeArgs: ["--print", "--resume", "{sessionId}", "--permission-mode", "acceptEdits", "--output-format", "text"],
+                    resumeArgs: ["--print", "--resume", "{sessionId}", "--permission-mode", "auto", "--output-format", "text"],
                     detectSessionId: true,
                     fallback: "new"
                 },

package/dist/core/system-proxy.js

@@ -0,0 +1,79 @@
+import { execFile } from "node:child_process";
+const proxyEnvironmentNames = ["HTTP_PROXY", "HTTPS_PROXY", "ALL_PROXY"];
+export async function inheritMacSystemProxy(env = process.env, options = {}) {
+    if ((options.platform ?? process.platform) !== "darwin" || systemProxyInheritanceDisabled(env)) {
+        return [];
+    }
+    const output = await (options.readSettings ?? readMacSystemProxySettings)();
+    const settings = parseMacSystemProxySettings(output);
+    if (!settings.http && !settings.https && !settings.socks) {
+        return [];
+    }
+    const inherited = {
+        HTTP_PROXY: settings.http ? proxyUrl("http", settings.http) : null,
+        HTTPS_PROXY: settings.https ? proxyUrl("http", settings.https) : null,
+        ALL_PROXY: settings.socks ? proxyUrl("socks5h", settings.socks) : null
+    };
+    const applied = [];
+    for (const name of proxyEnvironmentNames) {
+        const value = inherited[name];
+        if (!value || environmentHasName(env, name)) {
+            continue;
+        }
+        env[name] = value;
+        applied.push(name);
+    }
+    if (settings.exceptions.length > 0 && !environmentHasName(env, "NO_PROXY")) {
+        env.NO_PROXY = settings.exceptions.join(",");
+        applied.push("NO_PROXY");
+    }
+    return applied;
+}
+export function parseMacSystemProxySettings(output) {
+    return {
+        http: parseProxyEndpoint(output, "HTTP"),
+        https: parseProxyEndpoint(output, "HTTPS"),
+        socks: parseProxyEndpoint(output, "SOCKS"),
+        exceptions: parseProxyExceptions(output)
+    };
+}
+function parseProxyEndpoint(output, prefix) {
+    const enabled = output.match(new RegExp(`\\b${prefix}Enable\\s*:\\s*(\\d+)`))?.[1] === "1";
+    const host = output.match(new RegExp(`\\b${prefix}Proxy\\s*:\\s*(\\S+)`))?.[1];
+    const port = Number(output.match(new RegExp(`\\b${prefix}Port\\s*:\\s*(\\d+)`))?.[1]);
+    return enabled && host && Number.isInteger(port) && port > 0 ? { host, port } : null;
+}
+function parseProxyExceptions(output) {
+    const block = output.match(/ExceptionsList\s*:\s*<array>\s*\{([\s\S]*?)\n\s*\}/)?.[1] ?? "";
+    const exceptions = [...block.matchAll(/^\s*\d+\s*:\s*(.+?)\s*$/gm)]
+        .map((match) => normalizeProxyException(match[1] ?? ""))
+        .filter((value) => Boolean(value));
+    return [...new Set(exceptions)];
+}
+function normalizeProxyException(value) {
+    const normalized = value.trim();
+    if (!normalized) {
+        return null;
+    }
+    if (normalized === "<local>") {
+        return "localhost";
+    }
+    return normalized.startsWith("*.") ? normalized.slice(1) : normalized;
+}
+function proxyUrl(protocol, endpoint) {
+    const host = endpoint.host.includes(":") ? `[${endpoint.host}]` : endpoint.host;
+    return `${protocol}://${host}:${endpoint.port}`;
+}
+function environmentHasName(env, name) {
+    return Object.entries(env).some(([candidate, value]) => (candidate.toUpperCase() === name && Boolean(value?.trim())));
+}
+function systemProxyInheritanceDisabled(env) {
+    return /^(?:0|false|no|off)$/i.test(env.PARALLEL_CODEX_INHERIT_SYSTEM_PROXY?.trim() ?? "");
+}
+function readMacSystemProxySettings() {
+    return new Promise((resolve) => {
+        execFile("scutil", ["--proxy"], { timeout: 1000 }, (error, stdout) => {
+            resolve(error ? "" : stdout);
+        });
+    });
+}

package/dist/orchestrator/prompts.js

@@ -6,6 +6,13 @@ export function buildMainPrompt(input) {
         `# Role: ${role.title}`,
         "",
         ...instructionLines(role.instructions),
+        "",
+        "# Non-interactive execution",
+        "",
+        "- Use available tools directly when the current permission mode allows them.",
+        "- Chat replies cannot grant CLI tool permissions. Never ask the user to approve a command by replying in chat.",
+        "- Never claim that a system permission dialog was shown unless a tool result explicitly confirms it.",
+        "- If a tool is denied because interactive approval is required, state that it was not run and direct the user to press Ctrl+O to continue in the native agent.",
         ...(input.context?.trim()
             ? ["", "# Active task context", "", input.context.trim()]
             : []),

package/dist/version.js

@@ -1 +1 @@
-export const version = "0.2.1";
+export const version = "0.2.3";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "parallel-codex-tui",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "A TypeScript TUI wrapper for routed parallel coding with Codex and Claude workers.",
   "license": "MIT",
   "type": "module",