@parall/daemon 1.30.0 → 1.32.0

package/dist/filesystem.js

@@ -1,65 +1,63 @@
-import * as fs from "fs";
-import * as path from "path";
-import * as os from "os";
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
 const MAX_ENTRIES = 200;
 const SYSTEM_DIR_PREFIXES = [
-    "/Applications",
-    "/bin",
-    "/boot",
-    "/dev",
-    "/etc",
-    "/Library",
-    "/private",
-    "/proc",
-    "/root",
-    "/run",
-    "/sbin",
-    "/System",
-    "/sys",
-    "/usr",
-    "/var",
+    '/Applications',
+    '/bin',
+    '/boot',
+    '/dev',
+    '/etc',
+    '/Library',
+    '/private',
+    '/proc',
+    '/root',
+    '/run',
+    '/sbin',
+    '/System',
+    '/sys',
+    '/usr',
+    '/var',
 ];
 const CREDENTIAL_DIR_NAMES = new Set([
-    ".aws",
-    ".azure",
-    ".claude",
-    ".codex",
-    ".config",
-    ".docker",
-    ".gnupg",
-    ".kube",
-    ".npm",
-    ".ssh",
-    ".parall-agent",
-    ".parall-daemon",
+    '.aws',
+    '.azure',
+    '.claude',
+    '.codex',
+    '.config',
+    '.docker',
+    '.gnupg',
+    '.kube',
+    '.npm',
+    '.ssh',
+    '.parall-agent',
+    '.parall-daemon',
 ]);
 export function browseDenyReason(value) {
-    const normalized = path.resolve(value).split(path.sep).join("/");
-    if (normalized === "/")
-        return "";
+    const normalized = path.resolve(value).split(path.sep).join('/');
+    if (normalized === '/')
+        return '';
     for (const prefix of SYSTEM_DIR_PREFIXES) {
         if (normalized === prefix || normalized.startsWith(`${prefix}/`)) {
-            return "a system directory";
+            return 'a system directory';
         }
     }
-    const parts = normalized.split("/").filter(Boolean);
+    const parts = normalized.split('/').filter(Boolean);
     for (const part of parts) {
         if (CREDENTIAL_DIR_NAMES.has(part)) {
-            return "a credential or application state directory";
+            return 'a credential or application state directory';
         }
     }
-    return "";
+    return '';
 }
 function syntheticRoots() {
     const roots = [];
     const platform = os.platform();
-    const candidates = platform === "darwin"
-        ? ["/Users", os.homedir()]
-        : ["/home", os.homedir()];
+    const candidates = platform === 'darwin' ? ['/Users', os.homedir()] : ['/home', os.homedir()];
     for (const dir of [...new Set(candidates)]) {
         try {
             fs.accessSync(dir, fs.constants.R_OK);
-            roots.push({ name: dir, type: "dir" });
+            roots.push({ name: dir, type: 'dir' });
         }
         catch {
             // not accessible
@@ -69,8 +67,8 @@ function syntheticRoots() {
 }
 export async function listDirectory(dirPath) {
     const resolved = path.resolve(dirPath);
-    const normalized = resolved.split(path.sep).join("/");
-    if (normalized === "/") {
+    const normalized = resolved.split(path.sep).join('/');
+    if (normalized === '/') {
         return { entries: syntheticRoots() };
     }
     const deny = browseDenyReason(normalized);
@@ -83,11 +81,11 @@ export async function listDirectory(dirPath) {
     }
     catch (err) {
         const code = err.code;
-        if (code === "ENOENT")
-            return { entries: [], error: "Directory not found" };
-        return { entries: [], error: "Permission denied" };
+        if (code === 'ENOENT')
+            return { entries: [], error: 'Directory not found' };
+        return { entries: [], error: 'Permission denied' };
     }
-    const realDeny = browseDenyReason(realPath.split(path.sep).join("/"));
+    const realDeny = browseDenyReason(realPath.split(path.sep).join('/'));
     if (realDeny) {
         return { entries: [], error: `Access denied: ${realDeny}` };
     }
@@ -97,19 +95,19 @@ export async function listDirectory(dirPath) {
     }
     catch (err) {
         const code = err.code;
-        if (code === "ENOENT")
-            return { entries: [], error: "Directory not found" };
-        if (code === "EACCES" || code === "EPERM")
-            return { entries: [], error: "Permission denied" };
+        if (code === 'ENOENT')
+            return { entries: [], error: 'Directory not found' };
+        if (code === 'EACCES' || code === 'EPERM')
+            return { entries: [], error: 'Permission denied' };
         return { entries: [], error: `Failed to read directory: ${code ?? String(err)}` };
     }
     const entries = [];
     for (const d of dirents) {
         if (!d.isDirectory())
             continue;
-        if (d.name.startsWith("."))
+        if (d.name.startsWith('.'))
             continue;
-        entries.push({ name: d.name, type: "dir" });
+        entries.push({ name: d.name, type: 'dir' });
         if (entries.length >= MAX_ENTRIES)
             break;
     }

package/dist/index.js

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
-import { createLogger } from "@parall/agent-core";
-import { ParallClient } from "@parall/sdk";
-import { resolveClaudeDaemonConfig, resolveWsUrl } from "./config.js";
-import { DaemonSupervisor, sleepCancellable } from "./supervisor.js";
-import { runCLI } from "./cli.js";
-const log = createLogger("daemon");
+import { createLogger, createOtelLogger, initAgentTelemetry, } from '@parall/agent-core';
+import { ParallClient } from '@parall/sdk';
+import { resolveClaudeDaemonConfig, resolveBundleDir, resolveWsUrl, } from './config.js';
+import { DaemonSupervisor, sleepCancellable } from './supervisor.js';
+import { DaemonUpdater } from './updater.js';
+import { runCLI } from './cli.js';
+const UPDATE_EXIT_CODE = 42;
+let log = createLogger('daemon');
 function formatError(reason) {
     if (reason instanceof Error) {
         return reason.stack ?? reason.message;
@@ -30,10 +32,12 @@ function formatError(reason) {
  * any supervisor.run() rejection and rely entirely on the shell wrapper +
  * K8s for restart.
  */
-async function runForever(config, client, log, signal) {
+async function runForever(config, client, log, signal, updater) {
     let attempt = 0;
     while (!signal.aborted) {
         const supervisor = new DaemonSupervisor(config, client, log);
+        if (updater)
+            supervisor.setUpdater(updater);
         try {
             await supervisor.run(signal);
             // Clean exit (signal aborted) — done.
@@ -54,7 +58,7 @@ async function runForever(config, client, log, signal) {
                 log.warn(`supervisor.stop() after crash threw: ${String(stopErr)}`);
             }
             if (config.supervisorRestartBackoffMs === 0) {
-                log.error("supervisor keepalive disabled (PRLL_DAEMON_SUPERVISOR_RESTART_BACKOFF_MS=0) — exiting");
+                log.error('supervisor keepalive disabled (PRLL_DAEMON_SUPERVISOR_RESTART_BACKOFF_MS=0) — exiting');
                 throw err;
             }
             const delay = Math.min(config.supervisorRestartBackoffMs * Math.pow(2, attempt), config.supervisorRestartBackoffMaxMs);
@@ -68,8 +72,22 @@ async function runForever(config, client, log, signal) {
 }
 async function main() {
     const config = resolveClaudeDaemonConfig(process.env);
+    const telemetry = await initAgentTelemetry('parall-daemon', 'daemon');
+    log = createOtelLogger('daemon', 'daemon');
     log.info(`boot: api=${config.apiUrl} pollMs=${config.pollIntervalMs} heartbeatMs=${config.heartbeatIntervalMs} agentBin=${config.agentBin}`);
     log.info(`keepalive: bootstrapBackoffMs=${config.bootstrapBackoffMs} supervisorRestartBackoffMs=${config.supervisorRestartBackoffMs}`);
+    // --- Self-update: rollback check (before any network calls) ---
+    let updater = null;
+    if (!config.updateDisabled) {
+        const bundleDir = resolveBundleDir(process.env);
+        updater = new DaemonUpdater(bundleDir, config.updateCdnUrl, log, true);
+        if (updater.checkRollback()) {
+            log.info('rollback applied — exiting for service manager restart');
+            await telemetry.shutdown();
+            process.exit(UPDATE_EXIT_CODE);
+        }
+        log.info(`update: bundleDir=${bundleDir} cdn=${config.updateCdnUrl} interval=${config.updateIntervalMs}ms`);
+    }
     // The daemon talks to the API as a Machine — the bearer is mck_*.
     // No orgId is configured here; per-agent subprocesses get their
     // own org_id via the spawn env.
@@ -83,26 +101,40 @@ async function main() {
         log.info(`received ${sig} — initiating shutdown`);
         abortController.abort();
     };
-    process.on("SIGINT", () => onSignal("SIGINT"));
-    process.on("SIGTERM", () => onSignal("SIGTERM"));
+    process.on('SIGINT', () => onSignal('SIGINT'));
+    process.on('SIGTERM', () => onSignal('SIGTERM'));
     // Defensive: unexpected async failures are logged explicitly. Rejections
     // stay in-process so the supervisor loop can recover; uncaught exceptions
     // exit so entrypoint.sh's shell-level keepalive restarts from a clean VM.
-    process.on("unhandledRejection", (reason) => {
+    process.on('unhandledRejection', (reason) => {
         log.error(`unhandledRejection: ${formatError(reason)}`);
     });
-    process.on("uncaughtException", (err) => {
+    process.on('uncaughtException', (err) => {
         log.error(`uncaughtException: ${formatError(err)}`);
         process.exitCode = 1;
         process.exit(1);
     });
     config.wsUrl = resolveWsUrl(config.apiUrl, config.wsUrl, config.swimlaneName);
-    await runForever(config, client, log, abortController.signal);
+    // --- Self-update: boot check + periodic timer ---
+    if (updater) {
+        const applied = await updater.checkAndApply().catch((err) => {
+            log.warn(`boot update check failed: ${String(err)}`);
+            return false;
+        });
+        if (applied) {
+            log.info('boot update applied — exiting for restart');
+            await telemetry.shutdown();
+            process.exit(UPDATE_EXIT_CODE);
+        }
+        updater.startPeriodicCheck(config.updateIntervalMs);
+    }
+    await runForever(config, client, log, abortController.signal, updater);
+    await telemetry.shutdown();
 }
 const cliArgs = process.argv.slice(2);
 runCLI(cliArgs)
     .then((result) => {
-    if (result === "handled")
+    if (result === 'handled')
         return;
     main().catch((err) => {
         log.error(`fatal: ${formatError(err)}`);

package/dist/runtimes.d.ts

@@ -1,12 +1,10 @@
-export interface ProviderConfig {
-    llm_source?: string;
-    openai_api_key?: string;
-    openai_base_url?: string;
-    anthropic_auth_token?: string;
-    anthropic_base_url?: string;
-}
+import { clearAllProviderCreds } from '@parall/agent-core';
+import type { ProviderConfig } from '@parall/agent-core';
+export type { ProviderConfig };
+export { clearAllProviderCreds };
 export interface RuntimeAdapter {
     bin: string;
+    args: string[];
     buildEnv(baseEnv: NodeJS.ProcessEnv, agentId: string, orgId: string, apiKey: string, dirs: AgentDirs, pc?: ProviderConfig): NodeJS.ProcessEnv;
 }
 export interface AgentDirs {
@@ -14,7 +12,11 @@ export interface AgentDirs {
     workspaceDir: string;
     claudeHome: string;
 }
-export declare function clearAllProviderCreds(env: NodeJS.ProcessEnv): void;
+/**
+ * Resolve a runtime adapter, preferring overlay bundle paths when available.
+ * When the daemon has self-updated into ~/.parall-daemon/bundle/, bridge
+ * binaries should also load from overlay to keep versions in sync.
+ */
 export declare function getRuntimeAdapter(runtimeType: string): RuntimeAdapter;
 export declare function assertAgentKey(apiKey: string): void;
 //# sourceMappingURL=runtimes.d.ts.map

package/dist/runtimes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtimes.d.ts","sourceRoot":"","sources":["../src/runtimes.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC;CAC/I;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAeD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAOlE;AAgGD,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAErE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAInD"}
+{"version":3,"file":"runtimes.d.ts","sourceRoot":"","sources":["../src/runtimes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGzD,YAAY,EAAE,cAAc,EAAE,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,CACN,OAAO,EAAE,MAAM,CAAC,UAAU,EAC1B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,SAAS,EACf,EAAE,CAAC,EAAE,cAAc,GAClB,MAAM,CAAC,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAuED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAerE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAInD"}

package/dist/runtimes.js

@@ -1,120 +1,88 @@
-import * as path from "node:path";
-function llmSource(pc) {
-    if (pc?.llm_source)
-        return pc.llm_source;
-    if (pc?.openai_api_key ||
-        pc?.openai_base_url ||
-        pc?.anthropic_auth_token ||
-        pc?.anthropic_base_url) {
-        return "custom";
-    }
-    return "parall";
-}
-export function clearAllProviderCreds(env) {
-    delete env.ANTHROPIC_AUTH_TOKEN;
-    delete env.ANTHROPIC_BASE_URL;
-    delete env.ANTHROPIC_API_KEY;
-    delete env.OPENAI_API_KEY;
-    delete env.OPENAI_BASE_URL;
-    delete env.PRLL_CLAUDE_ALLOW_API_KEY;
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { clearAllProviderCreds } from '@parall/agent-core';
+import { resolveBundleDir } from './config.js';
+export { clearAllProviderCreds };
+function buildStandardEnv(baseEnv, agentId, orgId, apiKey, dirs, pc) {
+    const env = { ...baseEnv };
+    clearAllProviderCreds(env);
+    env.PRLL_API_KEY = apiKey;
+    env.PRLL_ORG_ID = orgId;
+    env.AGENT_ID = agentId;
+    env.PRLL_AGENT_ID = agentId;
+    env.PRLL_STATE_DIR = dirs.stateDir;
+    env.PRLL_WORKSPACE_DIR = dirs.workspaceDir;
+    if (pc)
+        env.PRLL_PROVIDER_CONFIG = JSON.stringify(pc);
+    delete env.PRLL_DAEMON_MODE;
+    return env;
 }
 const claudeCodeAdapter = {
-    bin: "parall-claude-agent",
+    bin: 'parall-claude-agent',
+    args: [],
     buildEnv(baseEnv, agentId, orgId, apiKey, dirs, pc) {
-        const env = { ...baseEnv };
-        clearAllProviderCreds(env);
-        env.PRLL_API_KEY = apiKey;
-        env.PRLL_ORG_ID = orgId;
-        env.AGENT_ID = agentId;
-        env.PRLL_AGENT_ID = agentId;
+        const env = buildStandardEnv(baseEnv, agentId, orgId, apiKey, dirs, pc);
         env.PRLL_CLAUDE_HOME = dirs.claudeHome;
-        env.PRLL_CLAUDE_STATE_DIR = dirs.stateDir;
-        env.PRLL_CLAUDE_WORKSPACE_DIR = dirs.workspaceDir;
-        const source = llmSource(pc);
-        if (source === "parall") {
-            env.ANTHROPIC_AUTH_TOKEN = apiKey;
-            env.ANTHROPIC_BASE_URL = `${baseEnv.PRLL_API_URL}/api/llm`;
-            env.PRLL_CLAUDE_ALLOW_API_KEY = "1";
-        }
-        else if (source === "custom") {
-            if (pc?.anthropic_auth_token) {
-                env.ANTHROPIC_AUTH_TOKEN = pc.anthropic_auth_token;
-                env.PRLL_CLAUDE_ALLOW_API_KEY = "1";
-            }
-            if (pc?.anthropic_base_url)
-                env.ANTHROPIC_BASE_URL = pc.anthropic_base_url;
-        }
-        delete env.PRLL_DAEMON_MODE;
         return env;
     },
 };
 const codexAdapter = {
-    bin: "parall-codex-agent",
+    bin: 'parall-codex-agent',
+    args: [],
     buildEnv(baseEnv, agentId, orgId, apiKey, dirs, pc) {
-        const env = { ...baseEnv };
-        clearAllProviderCreds(env);
-        env.PRLL_API_KEY = apiKey;
-        env.PRLL_ORG_ID = orgId;
-        env.AGENT_ID = agentId;
-        env.PRLL_AGENT_ID = agentId;
-        env.PRLL_CODEX_STATE_DIR = dirs.stateDir;
-        env.PRLL_CODEX_WORKSPACE_DIR = dirs.workspaceDir;
-        env.PRLL_CODEX_HOME = path.join(dirs.stateDir, ".codex");
-        const source = llmSource(pc);
-        if (source === "parall") {
-            env.OPENAI_API_KEY = apiKey;
-            env.OPENAI_BASE_URL = `${baseEnv.PRLL_API_URL}/api/llm/v1`;
-        }
-        else if (source === "custom") {
-            if (pc?.openai_api_key)
-                env.OPENAI_API_KEY = pc.openai_api_key;
-            if (pc?.openai_base_url)
-                env.OPENAI_BASE_URL = pc.openai_base_url;
-        }
-        delete env.PRLL_DAEMON_MODE;
+        const env = buildStandardEnv(baseEnv, agentId, orgId, apiKey, dirs, pc);
+        env.PRLL_CODEX_HOME = path.join(dirs.stateDir, '.codex');
         return env;
     },
 };
 const defaultAdapter = {
-    bin: "parall-agent",
-    buildEnv(baseEnv, agentId, orgId, apiKey, dirs) {
-        const env = { ...baseEnv };
-        env.PRLL_API_KEY = apiKey;
-        env.PRLL_ORG_ID = orgId;
-        env.AGENT_ID = agentId;
-        env.PRLL_AGENT_ID = agentId;
-        env.PRLL_STATE_DIR = dirs.stateDir;
-        env.PRLL_WORKSPACE_DIR = dirs.workspaceDir;
-        delete env.PRLL_DAEMON_MODE;
-        return env;
-    },
+    bin: 'parall-agent',
+    args: [],
+    buildEnv: buildStandardEnv,
 };
 const openclawAdapter = {
-    bin: "parall-openclaw-agent",
-    buildEnv(baseEnv, agentId, orgId, apiKey, dirs) {
-        const env = { ...baseEnv };
-        clearAllProviderCreds(env);
-        env.PRLL_API_KEY = apiKey;
-        env.PRLL_ORG_ID = orgId;
-        env.AGENT_ID = agentId;
-        env.PRLL_AGENT_ID = agentId;
-        env.PRLL_OPENCLAW_STATE_DIR = dirs.stateDir;
-        env.PRLL_OPENCLAW_WORKSPACE_DIR = dirs.workspaceDir;
-        env.OPENCLAW_GATEWAY_PORT = env.OPENCLAW_GATEWAY_PORT || "0";
-        delete env.PRLL_DAEMON_MODE;
+    bin: 'parall-openclaw-agent',
+    args: [],
+    buildEnv(baseEnv, agentId, orgId, apiKey, dirs, pc) {
+        const env = buildStandardEnv(baseEnv, agentId, orgId, apiKey, dirs, pc);
+        env.OPENCLAW_GATEWAY_PORT = env.OPENCLAW_GATEWAY_PORT || '0';
         return env;
     },
 };
 const RUNTIME_ADAPTERS = {
-    "claude-code": claudeCodeAdapter,
-    "codex": codexAdapter,
-    "openclaw": openclawAdapter,
+    'claude-code': claudeCodeAdapter,
+    codex: codexAdapter,
+    openclaw: openclawAdapter,
+};
+const OVERLAY_BIN_NAMES = {
+    'claude-code': 'parall-claude-agent.js',
+    codex: 'parall-codex-agent.js',
+    openclaw: 'parall-openclaw-agent.js',
 };
+/**
+ * Resolve a runtime adapter, preferring overlay bundle paths when available.
+ * When the daemon has self-updated into ~/.parall-daemon/bundle/, bridge
+ * binaries should also load from overlay to keep versions in sync.
+ */
 export function getRuntimeAdapter(runtimeType) {
-    return RUNTIME_ADAPTERS[runtimeType] ?? defaultAdapter;
+    const base = RUNTIME_ADAPTERS[runtimeType] ?? defaultAdapter;
+    const overlayName = OVERLAY_BIN_NAMES[runtimeType];
+    if (!overlayName)
+        return base;
+    try {
+        const bundleDir = resolveBundleDir();
+        const overlayBin = path.join(bundleDir, 'current', overlayName);
+        if (fs.existsSync(overlayBin)) {
+            return { ...base, bin: process.execPath, args: [overlayBin] };
+        }
+    }
+    catch {
+        // resolveBundleDir may fail in unusual setups; fall through
+    }
+    return base;
 }
 export function assertAgentKey(apiKey) {
-    if (apiKey.startsWith("mck_")) {
-        throw new Error("BUG: machine key leaked to child process — expected agk_, got mck_");
+    if (apiKey.startsWith('mck_')) {
+        throw new Error('BUG: machine key leaked to child process — expected agk_, got mck_');
     }
 }

package/dist/supervisor.d.ts

@@ -1,6 +1,7 @@
-import type { GatewayLogger } from "@parall/agent-core";
-import { ParallClient } from "@parall/sdk";
-import { type ClaudeDaemonConfig } from "./config.js";
+import { type GatewayLogger } from '@parall/agent-core';
+import { ParallClient } from '@parall/sdk';
+import type { DaemonUpdater } from './updater.js';
+import { type ClaudeDaemonConfig } from './config.js';
 /**
  * Sleep that wakes early on abort. Returns true if the full delay elapsed,
  * false if aborted. Used by bootstrap retry and the outer keepalive in
@@ -30,10 +31,16 @@ export declare class DaemonSupervisor {
     private readonly cancelledSpawns;
     private ws;
     private running;
+    private machineId;
     private machineOrgId;
     private machineLlmSource;
     private stopResolve;
+    private updater;
+    private healthConfirmed;
+    private clipManager;
+    private clipProvider;
     constructor(config: ClaudeDaemonConfig, client: ParallClient, log: GatewayLogger);
+    setUpdater(updater: DaemonUpdater): void;
     /** Start the supervisor. Returns a promise that resolves on `stop()`. */
     run(signal: AbortSignal): Promise<void>;
     /** Disconnect WS, cancel timers, SIGTERM all children, await exit. */
@@ -50,6 +57,8 @@ export declare class DaemonSupervisor {
     private handleAgentAttached;
     private handleAgentDetached;
     private handleFilesystemBrowse;
+    private handleClipInstall;
+    private reconcileClipInstalls;
     private handleWorkspaceSetupRequested;
     private scheduleWorkspaceSetupRetry;
     private clearWorkspaceSetupRetry;

package/dist/supervisor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../src/supervisor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,YAAY,EAA6P,MAAM,aAAa,CAAC;AAEtS,OAAO,EACL,KAAK,kBAAkB,EAMxB,MAAM,aAAa,CAAC;AAiBrB;;;;GAIG;AACH,iBAAS,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAa3E;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAyB5B;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IAazB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAdtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqB;IAC3D,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAqC;IAC/E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,WAAW,CAA6B;gBAG7B,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,aAAa;IAGrC,yEAAyE;IACnE,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAsF7C,sEAAsE;IAChE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAiCb,kBAAkB;YAqClB,aAAa;IAqD3B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;YA6CX,kBAAkB;YAqBlB,mBAAmB;YAgBnB,mBAAmB;YAmBnB,sBAAsB;YAwBtB,6BAA6B;IAqC3C,OAAO,CAAC,2BAA2B;IAYnC,OAAO,CAAC,wBAAwB;YAUlB,oBAAoB;YAcpB,kBAAkB;YAYlB,eAAe;YAcf,UAAU;YAoBV,cAAc;IA2D5B,OAAO,CAAC,UAAU;YA0EJ,cAAc;IAyB5B,OAAO,CAAC,0BAA0B;CA8BnC"}
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../src/supervisor.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EACL,YAAY,EAab,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EACL,KAAK,kBAAkB,EAMxB,MAAM,aAAa,CAAC;AAmBrB;;;;GAIG;AACH,iBAAS,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAa3E;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAyB5B;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IAkBzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAnBtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqB;IAC3D,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAqC;IAC/E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,YAAY,CAA6B;gBAG9B,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,aAAa;IAGrC,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAIxC,yEAAyE;IACnE,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA+J7C,sEAAsE;IAChE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAyCb,kBAAkB;YAsClB,aAAa;IA2D3B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;YA6CX,kBAAkB;YAqBlB,mBAAmB;YAgBnB,mBAAmB;YAmBnB,sBAAsB;YAwBtB,iBAAiB;YAmEjB,qBAAqB;YAqBrB,6BAA6B;IAqC3C,OAAO,CAAC,2BAA2B;IAYnC,OAAO,CAAC,wBAAwB;YAUlB,oBAAoB;YAgBpB,kBAAkB;YAYlB,eAAe;YAcf,UAAU;YAoBV,cAAc;IAkE5B,OAAO,CAAC,UAAU;YA2GJ,cAAc;IAyB5B,OAAO,CAAC,0BAA0B;CAkCnC"}