@parall/daemon 1.32.0 → 1.33.0

package/bundle/manifest.json

@@ -1,28 +1,36 @@
 {
-  "version": "1.32.0",
-  "built_at": "2026-06-02T07:49:17.771Z",
+  "version": "1.33.0",
+  "built_at": "2026-06-08T13:37:00.737Z",
   "min_node_version": "20.0.0",
   "files": {
+    "bb-browser-daemon.js": {
+      "sha256": "9d80592a220f94141c57b2729e5a3ae0db8796274924612b38ce066eef54d435",
+      "size": 575667
+    },
+    "buildDomTree.js": {
+      "sha256": "485c7f690be7fd517e84cb0281de5e399404ac25630a564d9c1d2aeb2c32e064",
+      "size": 52306
+    },
     "package.json": {
       "sha256": "1239d4d885dcad42201a27ed9324f8f0f760b78700d8db9ced39a511cffe7eae",
       "size": 18
     },
     "parall-claude-agent.js": {
-      "sha256": "9cdee5c4a66b84c50874904872fc66876cbf27940b0ebab7a5b035e21bd199bd",
-      "size": 1535973
+      "sha256": "fd2395bb9ba5bc2912175d42419c4073ae581bd9382be6447d9169ce177e915c",
+      "size": 1544348
     },
     "parall-codex-agent.js": {
-      "sha256": "28d849bcbfa158a44c82e46279f52ec83ce63c2f6662843916d810265a09a5b4",
-      "size": 1567062
+      "sha256": "fa93fb3b2aab23b6f3ecd218a0c0124bbe323af11c0ced898c2d057ad293f03b",
+      "size": 1575437
     },
     "parall-daemon.js": {
-      "sha256": "ab158d832fcb8bcf98389ed146b946c6ee0cf9a4113e6e2290ab20dfd150ba83",
-      "size": 1497242
+      "sha256": "83d37677018aa1bf0a37df14baaade7738bec2f907fa5d1f66b4bcad77430535",
+      "size": 1565851
     },
     "parall-openclaw-agent.js": {
-      "sha256": "657263cec61e6d26496389ec90ffe0716616a20e082e12c5a17bf6ffd5d1cdd6",
-      "size": 9727
+      "sha256": "505433b4bf3a4b8dbb7b96978d8693d6c48079f4513282ff1ee59a6d13b3eddf",
+      "size": 9801
     }
   },
-  "signature": "481ZnAOzoLuUOmOgiO3HCPAbyN8uGLYml2wczMsBqpJJS2QWccbuG+e3Zrce93a1mmHlBIiHxrEZXBJMvhDRBg=="
+  "signature": "z7sT/o8aV5gfuQpr9TYQ+IkY3+IfdC5EiKrFKoQ4kz3TO1zXBC1RQ4xh1M0cFdB9KCDbaGeti2smdYAAczoCAQ=="
 }

package/bundle/parall-claude-agent.js

@@ -26776,10 +26776,15 @@ Other agents share this workspace. Before starting work, check whether someone
 ### Permissions and approvals
 You have real permissions based on your roles (chat member/admin, org member).
 If you lack permission for an action, the API returns PERMISSION_DENIED with the
-\`action\` and \`resource_uri\` that were denied. When that happens, use
-\`approvals request\` to ask someone with permission to approve it \u2014 don't retry
-or work around the denial. Only request approval after an actual denial, never
-preemptively.
+\`action\` and \`resource_uri\` that were denied. The server decides whether that
+action is approvable: if it is, the CLI prints an \`approvals request\` command \u2014
+fill in the placeholders it shows (\`--chat\`, \`--title\`, \`--reason\`) and run
+it to ask someone with permission. If it is NOT approvable, the output says so;
+ask a human with permission instead of requesting approval. A
+\`INVALID_TARGET\` error instead means you addressed the wrong kind of thing
+(e.g. a \`usr_\` id where a chat is expected) \u2014 follow the message (e.g. use
+\`dm\` for a user). Don't retry or work around a denial; only request approval
+after an actual denial, never preemptively.
 
 ### When in doubt
 Prefer asking over guessing. Prefer "I don't know" over fabricating. Your
@@ -26952,7 +26957,7 @@ See \`docs/engineering-design/agent-dm-loop-prevention.md\` \xA7 Layer 0 for why
 
 When you try an action (e.g., archive a chat) and receive a PERMISSION_DENIED error, you can request someone with permission to do it:
 
-1. The error includes a \`PERMISSION_DENIED\` code. For commonly approvable actions (archive, delete, restore), a \`Tip:\` line with an approval-request template is printed \u2014 copy it and fill in the remaining placeholders (\`--chat\`, \`--title\`, \`--reason\`)
+1. The error includes a \`PERMISSION_DENIED\` code plus the denied \`action\` and \`resource_uri\`. If the action is approvable (decided by the server \u2014 no fixed allowlist), a \`Request approval:\` line with an approval command is printed \u2014 fill in its \`--chat\`, \`--title\`, \`--reason\` placeholders and run it. If it is not approvable, the output says so; ask a human with permission instead.
 2. Request approval: \`parall approvals request --action chat.archive --resource prll://cht_123 --chat prll://cht_456 --title "Archive #old-project" --reason "Channel inactive"\`
 3. A card will appear in the specified chat for someone with permission to approve
 4. Check the result: \`parall approvals get prll://<id>\` or wait: \`parall approvals wait prll://<id> --timeout 300\`
@@ -27158,6 +27163,7 @@ var ENDPOINTS = {
   MACHINE_AGENT_DAEMON_CONFIG: (orgId, machineId, agentId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/agents/${agentId}/daemon-config`,
   MACHINE_AGENT_WORKSPACE_SETUP: (orgId, machineId, agentId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/agents/${agentId}/workspace/setup`,
   MACHINE_LLM_SOURCE: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/llm-source`,
+  MACHINE_PROVIDER_ENABLED: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/provider-enabled`,
   MACHINE_RUNTIME_AUTH: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/runtime-auth`,
   MACHINE_KEYS: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/keys`,
   MACHINE_KEY: (orgId, machineId, keyId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/keys/${keyId}`,
@@ -27171,8 +27177,9 @@ var ENDPOINTS = {
   MACHINES_ME: `${API_BASE}/machines/me`,
   MACHINES_ME_AGENTS: `${API_BASE}/machines/me/agents`,
   MACHINES_ME_HEALTH: `${API_BASE}/machines/me/health`,
-  MACHINES_ME_CLIP_INSTALLS: `${API_BASE}/machines/me/clip-installs`,
-  MACHINES_ME_CLIP_INSTALL_DONE: (clipId) => `${API_BASE}/machines/me/clip-installs/${clipId}/installed`,
+  MACHINES_ME_CLIPS: `${API_BASE}/machines/me/clips`,
+  MACHINES_ME_BROWSER_PROFILES: `${API_BASE}/machines/me/browser-profiles`,
+  MACHINES_ME_BROWSER_PROFILE_STATUS: (profileId) => `${API_BASE}/machines/me/browser-profiles/${profileId}/status`,
   MACHINES_ME_AGENT_LAUNCH_CREDENTIAL: (agentId) => `${API_BASE}/machines/me/agents/${agentId}/launch-credential`,
   MACHINES_ME_AGENT_WORKSPACE_STATE: (agentId) => `${API_BASE}/machines/me/agents/${agentId}/workspace-state`,
   MACHINES_ME_WS_TICKET: `${API_BASE}/machines/me/ws/ticket`,
@@ -27271,6 +27278,7 @@ var ENDPOINTS = {
   DISPATCH_RECEIVED: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/received`,
   DISPATCH_ACK: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/ack`,
   DISPATCH_ACK_BY_ID: (orgId, id) => `${API_BASE}/orgs/${orgId}/dispatch/${id}/ack`,
+  DISPATCH_EXPIRE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/expire`,
   DISPATCH_BY_MESSAGES: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/by-messages`,
   // Unread
   UNREAD: `${API_BASE}/me/unread`,
@@ -27309,6 +27317,13 @@ var ENDPOINTS = {
   AGENT_CLIP: (orgId, agentId, clipId) => `${CLIP_BASE}/orgs/${orgId}/agents/${agentId}/clips/${clipId}`,
   CLIP_INVOKE: (orgId) => `${CLIP_BASE}/orgs/${orgId}/invoke`,
   CLIP_ONLINE: (orgId) => `${CLIP_BASE}/orgs/${orgId}/online`,
+  BROWSER_PROFILES: (orgId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles`,
+  BROWSER_PROFILE: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}`,
+  BROWSER_PROFILE_OPEN: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/open`,
+  BROWSER_PROFILE_STOP: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/stop`,
+  BROWSER_PROFILE_RESET: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/reset`,
+  BROWSER_PROFILE_CONSENTS: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/consents`,
+  BROWSER_PROFILE_CONSENT: (orgId, profileId, clipId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/consents/${clipId}`,
   // Clip registry (global, served by clip-service → Pinix Hub proxy)
   CLIP_REGISTRY: () => `${CLIP_BASE}/registry/clips`
 };
@@ -27383,9 +27398,10 @@ var WS_EVENTS = {
   MACHINE_FILESYSTEM_BROWSE: "machine.filesystem.browse",
   MACHINE_UPDATE: "machine.update",
   MACHINE_CONFIG_UPDATED: "machine.config.updated",
-  MACHINE_CLIP_INSTALL: "machine.clip.install",
+  MACHINE_CLIP_SYNC: "machine.clip.sync",
+  MACHINE_BROWSER_PROFILE_LIFECYCLE: "machine.browser_profile.lifecycle",
   AGENT_NEW_SESSION: "agent.new_session",
-  CLIP_INSTALLED: "clip.installed",
+  CLIP_CREATED: "clip.created",
   CLIP_REMOVED: "clip.removed",
   CLIP_UPDATED: "clip.updated"
 };
@@ -27548,15 +27564,7 @@ var ParallClient = class _ParallClient {
     }
     if (!res.ok) {
       const rawErrorBody = await res.json().catch(() => ({}));
-      const errorBody = rawErrorBody !== null && typeof rawErrorBody === "object" ? rawErrorBody : {};
-      const errorObj = errorBody?.error && typeof errorBody.error === "object" ? errorBody.error : void 0;
-      const errMsg = errorObj?.message ?? (typeof errorBody?.error === "string" ? errorBody.error : void 0);
-      const errCode = errorObj?.code ?? (typeof errorBody?.code === "string" ? errorBody.code : void 0);
-      const apiError = new ApiError(res.status, errMsg ?? res.statusText, errCode);
-      const { error: _e, code: _c, message: _m, ...extras } = errorBody;
-      if (Object.keys(extras).length > 0)
-        apiError.extras = extras;
-      throw apiError;
+      throw buildApiError(res, rawErrorBody);
     }
     if (res.status === 204)
       return void 0;
@@ -27608,15 +27616,7 @@ var ParallClient = class _ParallClient {
     }
     if (!res.ok) {
       const rawErrorBody = await res.json().catch(() => ({}));
-      const errorBody = rawErrorBody !== null && typeof rawErrorBody === "object" ? rawErrorBody : {};
-      const errorObj = errorBody?.error && typeof errorBody.error === "object" ? errorBody.error : void 0;
-      const errMsg = errorObj?.message ?? (typeof errorBody?.error === "string" ? errorBody.error : void 0);
-      const errCode = errorObj?.code ?? (typeof errorBody?.code === "string" ? errorBody.code : void 0);
-      const apiError = new ApiError(res.status, errMsg ?? res.statusText, errCode);
-      const { error: _e, code: _c, message: _m, ...extras } = errorBody;
-      if (Object.keys(extras).length > 0)
-        apiError.extras = extras;
-      throw apiError;
+      throw buildApiError(res, rawErrorBody);
     }
     if (res.status === 204)
       return void 0;
@@ -27854,8 +27854,8 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.CHAT_MEMBERS(orgId, chatId));
     return res.data;
   }
-  async addChatMember(orgId, chatId, userId, role) {
-    return this.request("POST", ENDPOINTS.CHAT_MEMBERS(orgId, chatId), { user_id: userId, role });
+  async addChatMember(orgId, chatId, userId) {
+    return this.request("POST", ENDPOINTS.CHAT_MEMBERS(orgId, chatId), { user_id: userId });
   }
   async removeChatMember(orgId, chatId, userId) {
     return this.request("DELETE", ENDPOINTS.CHAT_MEMBER(orgId, chatId, userId));
@@ -28114,6 +28114,16 @@ var ParallClient = class _ParallClient {
       llm_source: llmSource2
     });
   }
+  /**
+   * Toggle whether the machine contributes its local clips as a hub provider
+   * — org-admin-gated (RequireOrgAdmin), like all machine management. See
+   * docs/engineering-design/clip-provider-sharing-design.md.
+   */
+  async patchMachineProviderEnabled(orgId, machineId, providerEnabled) {
+    return this.request("PATCH", ENDPOINTS.MACHINE_PROVIDER_ENABLED(orgId, machineId), {
+      provider_enabled: providerEnabled
+    });
+  }
   /** Get machine-level runtime auth state. */
   async getMachineRuntimeAuth(orgId, machineId) {
     return this.request("GET", ENDPOINTS.MACHINE_RUNTIME_AUTH(orgId, machineId));
@@ -28147,25 +28157,39 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_AGENTS);
     return res.data;
   }
-  /** `GET /machines/me/clip-installs` — registry clips this machine should
-   * install but hasn't yet (durable reconcile, mck_-authed). */
-  async listClipInstalls() {
-    const res = await this.request("GET", ENDPOINTS.MACHINES_ME_CLIP_INSTALLS);
+  /** `GET /machines/me/clips` — executable Clip definitions assigned to this machine. */
+  async listMachineClips() {
+    const res = await this.request("GET", ENDPOINTS.MACHINES_ME_CLIPS);
     return res.data;
   }
-  /** `POST /machines/me/clip-installs/{clipId}/installed` — report a finished install. */
-  async reportClipInstall(clipId, version) {
-    return this.request("POST", ENDPOINTS.MACHINES_ME_CLIP_INSTALL_DONE(clipId), version ? { version } : void 0);
+  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine. */
+  async listMachineBrowserProfiles() {
+    const res = await this.request("GET", ENDPOINTS.MACHINES_ME_BROWSER_PROFILES);
+    return res.data;
+  }
+  /** `POST /machines/me/browser-profiles/{profileId}/status` — report runtime status. */
+  async reportBrowserProfileStatus(profileId, status, errorMsg) {
+    await this.request("POST", ENDPOINTS.MACHINES_ME_BROWSER_PROFILE_STATUS(profileId), {
+      status,
+      ...errorMsg ? { error_msg: errorMsg } : {}
+    });
   }
   /**
-   * `POST /machines/me/health` — bump the Machine's `updated_at` to now.
-   * Body is intentionally empty; the server ignores any payload. The
-   * daemon should call this on a fixed cadence (e.g. every 30s) so an
-   * external observer can detect a wedged supervisor.
+   * `POST /machines/me/health` — bump the Machine's `updated_at` to now and
+   * report daemon state. The daemon should call this on a fixed cadence (e.g.
+   * every 30s) so an external observer can detect a wedged supervisor. Both
+   * fields are optional and only persisted when changed:
+   *  - `daemonVersion` — the running bundle/launcher version.
+   *  - `selfUpdateCapable` — whether the daemon can act on a machine.update
+   *    signal (true under a service manager, false for bare `npx` foreground).
    */
-  async postMachineHeartbeat(daemonVersion) {
-    const body = daemonVersion ? { daemon_version: daemonVersion } : void 0;
-    return this.request("POST", ENDPOINTS.MACHINES_ME_HEALTH, body);
+  async postMachineHeartbeat(opts) {
+    const body = {};
+    if (opts?.daemonVersion)
+      body.daemon_version = opts.daemonVersion;
+    if (opts?.selfUpdateCapable !== void 0)
+      body.self_update_capable = opts.selfUpdateCapable;
+    return this.request("POST", ENDPOINTS.MACHINES_ME_HEALTH, Object.keys(body).length > 0 ? body : void 0);
   }
   async reportAgentWorkspaceState(agentId, state) {
     const res = await this.request("PUT", ENDPOINTS.MACHINES_ME_AGENT_WORKSPACE_STATE(agentId), state);
@@ -28267,6 +28291,10 @@ var ParallClient = class _ParallClient {
   async ackDispatchByID(orgId, id) {
     return this.request("POST", ENDPOINTS.DISPATCH_ACK_BY_ID(orgId, id));
   }
+  async expireDispatch(orgId, maxAgeHours) {
+    const params = maxAgeHours !== void 0 ? { max_age_hours: String(maxAgeHours) } : void 0;
+    return this.request("POST", ENDPOINTS.DISPATCH_EXPIRE(orgId), void 0, params);
+  }
   async getDispatchByMessages(orgId, chatId, messageIds) {
     const params = { chat_id: chatId, message_ids: messageIds.join(",") };
     return this.request("GET", ENDPOINTS.DISPATCH_BY_MESSAGES(orgId), void 0, params);
@@ -28298,15 +28326,7 @@ var ParallClient = class _ParallClient {
       return null;
     if (!res.ok) {
       const rawErrorBody = await res.json().catch(() => ({}));
-      const errorBody = rawErrorBody !== null && typeof rawErrorBody === "object" ? rawErrorBody : {};
-      const errorObj = errorBody?.error && typeof errorBody.error === "object" ? errorBody.error : void 0;
-      const errMsg = errorObj?.message ?? (typeof errorBody?.error === "string" ? errorBody.error : void 0);
-      const errCode = errorObj?.code ?? (typeof errorBody?.code === "string" ? errorBody.code : void 0);
-      const apiError = new ApiError(res.status, errMsg ?? res.statusText, errCode);
-      const { error: _e, code: _c, message: _m, ...extras } = errorBody;
-      if (Object.keys(extras).length > 0)
-        apiError.extras = extras;
-      throw apiError;
+      throw buildApiError(res, rawErrorBody);
     }
     return res.json();
   }
@@ -28755,6 +28775,41 @@ var ParallClient = class _ParallClient {
     const resp = await this.request("GET", ENDPOINTS.CLIP_ONLINE(orgId));
     return resp.data;
   }
+  async listBrowserProfiles(orgId) {
+    const resp = await this.request("GET", ENDPOINTS.BROWSER_PROFILES(orgId));
+    return resp.data;
+  }
+  async createBrowserProfile(orgId, req) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILES(orgId), req);
+  }
+  async getBrowserProfile(orgId, profileId) {
+    return this.request("GET", ENDPOINTS.BROWSER_PROFILE(orgId, profileId));
+  }
+  async updateBrowserProfile(orgId, profileId, req) {
+    return this.request("PATCH", ENDPOINTS.BROWSER_PROFILE(orgId, profileId), req);
+  }
+  async deleteBrowserProfile(orgId, profileId) {
+    await this.request("DELETE", ENDPOINTS.BROWSER_PROFILE(orgId, profileId));
+  }
+  async openBrowserProfile(orgId, profileId, req = {}) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_OPEN(orgId, profileId), req);
+  }
+  async stopBrowserProfile(orgId, profileId) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_STOP(orgId, profileId), {});
+  }
+  async resetBrowserProfile(orgId, profileId) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_RESET(orgId, profileId));
+  }
+  async listBrowserProfileConsents(orgId, profileId) {
+    const resp = await this.request("GET", ENDPOINTS.BROWSER_PROFILE_CONSENTS(orgId, profileId));
+    return resp.data;
+  }
+  async grantBrowserProfileConsent(orgId, profileId, req) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_CONSENTS(orgId, profileId), req);
+  }
+  async revokeBrowserProfileConsent(orgId, profileId, clipId) {
+    await this.request("DELETE", ENDPOINTS.BROWSER_PROFILE_CONSENT(orgId, profileId, clipId));
+  }
   async listRegistryClips(q) {
     const url = ENDPOINTS.CLIP_REGISTRY() + (q ? `?q=${encodeURIComponent(q)}` : "");
     const resp = await this.request("GET", url);
@@ -28772,6 +28827,12 @@ var ApiError = class extends Error {
   status;
   code;
   extras;
+  /** Attempted action (authorization denials) — e.g. "chat.add_member". */
+  action;
+  /** Target resource URI that was evaluated — e.g. "prll://cht_…". */
+  resourceUri;
+  /** Whether the action is approval-executable (PERMISSION_DENIED only). */
+  approvable;
   constructor(status, message, code) {
     super(message);
     this.status = status;
@@ -28779,6 +28840,33 @@ var ApiError = class extends Error {
     this.name = "ApiError";
   }
 };
+function buildApiError(res, rawErrorBody) {
+  const errorBody = rawErrorBody !== null && typeof rawErrorBody === "object" ? rawErrorBody : {};
+  const errorObj = errorBody.error && typeof errorBody.error === "object" ? errorBody.error : void 0;
+  const errMsg = (typeof errorObj?.message === "string" ? errorObj.message : void 0) ?? (typeof errorBody.message === "string" ? errorBody.message : void 0) ?? (typeof errorBody.error === "string" ? errorBody.error : void 0);
+  const errCode = (typeof errorObj?.code === "string" ? errorObj.code : void 0) ?? (typeof errorBody.code === "string" ? errorBody.code : void 0);
+  const apiError = new ApiError(res.status, errMsg ?? res.statusText, errCode);
+  const anchors = errorObj ?? errorBody;
+  if (typeof anchors.action === "string")
+    apiError.action = anchors.action;
+  if (typeof anchors.resource_uri === "string")
+    apiError.resourceUri = anchors.resource_uri;
+  if (typeof anchors.approvable === "boolean")
+    apiError.approvable = anchors.approvable;
+  const structural = /* @__PURE__ */ new Set(["error", "code", "message", "status"]);
+  const extras = {};
+  for (const [k, v] of Object.entries(errorBody))
+    if (!structural.has(k))
+      extras[k] = v;
+  if (errorObj) {
+    for (const [k, v] of Object.entries(errorObj))
+      if (!structural.has(k))
+        extras[k] = v;
+  }
+  if (Object.keys(extras).length > 0)
+    apiError.extras = extras;
+  return apiError;
+}
 
 // ts/sdk/dist/ws.js
 function isRetryableNetworkError(err) {
@@ -30705,8 +30793,28 @@ var ParallAgentGateway = class {
     return dispatched;
   }
   async catchUpFromDispatch() {
+    const OVERFLOW_THRESHOLD = 500;
+    const EXPIRE_AGE_HOURS = 24;
+    const CATCHUP_MAX = 10;
+    let expireSummary = null;
+    let overflowMode = false;
+    try {
+      const { count } = await this.opts.client.getDispatchPendingCount(this.opts.config.org_id);
+      if (count > OVERFLOW_THRESHOLD) {
+        overflowMode = true;
+        const result = await this.opts.client.expireDispatch(this.opts.config.org_id, EXPIRE_AGE_HOURS);
+        if (result.total > 0) {
+          this.opts.log?.warn(`dispatch catch-up overflow: ${count} pending, expired ${result.total} events older than ${EXPIRE_AGE_HOURS}h`);
+          expireSummary = this.buildOfflineSummary(result.groups);
+        }
+      }
+    } catch (err) {
+      this.opts.log?.warn(`dispatch catch-up overflow check failed: ${String(err)}`);
+    }
     let cursor;
     let processed = 0;
+    let skipped = 0;
+    const skippedByType = /* @__PURE__ */ new Map();
     do {
       const page = await this.opts.client.getDispatch(this.opts.config.org_id, {
         limit: 50,
@@ -30715,6 +30823,17 @@ var ParallAgentGateway = class {
       for (const item of page.data ?? []) {
         if (this.shuttingDown)
           break;
+        if (overflowMode && processed >= CATCHUP_MAX) {
+          try {
+            await this.opts.client.ackDispatchByID(this.opts.config.org_id, item.id);
+            skipped++;
+            const key = item.event_type;
+            skippedByType.set(key, (skippedByType.get(key) ?? 0) + 1);
+          } catch {
+            this.opts.log?.warn(`catch-up skip ack failed for ${item.id}, leaving pending`);
+          }
+          continue;
+        }
         processed++;
         try {
           let dispatched = false;
@@ -30789,9 +30908,52 @@ var ParallAgentGateway = class {
       }
       cursor = !this.shuttingDown && page.has_more ? page.next_cursor : void 0;
     } while (cursor);
-    if (processed > 0) {
-      this.opts.log?.info(`dispatch catch-up: processed ${processed}`);
+    if (expireSummary || skipped > 0) {
+      const parts = [];
+      if (expireSummary)
+        parts.push(expireSummary);
+      if (skipped > 0) {
+        const recentLines = [...skippedByType.entries()].map(([type, count]) => `- ${count} recent ${type.replace(".", " ").replace("_", " ")} events`).join("\n");
+        parts.push(expireSummary ? `Additionally, ${skipped} recent events exceeded the catch-up limit and were skipped:
+${recentLines}` : `[Offline Summary] You were offline. ${skipped} pending events exceeded the catch-up limit and were skipped:
+${recentLines}
+
+Use your tools (read messages, check tasks) to review anything still relevant.`);
+      }
+      const fullSummary = parts.join("\n\n");
+      this.pendingRestartNotification = this.pendingRestartNotification ? `${this.pendingRestartNotification}
+
+${fullSummary}` : fullSummary;
+    }
+    if (processed > 0 || skipped > 0) {
+      this.opts.log?.info(`dispatch catch-up: processed ${processed}, skipped ${skipped}`);
+    }
+  }
+  buildOfflineSummary(groups) {
+    const lines = [
+      "[Offline Summary] You were offline and had a large backlog of pending events. The following old events were skipped:"
+    ];
+    for (const g of groups) {
+      const age = this.formatAge(g.oldest);
+      if (g.chat_id && g.event_type === "message") {
+        const name = g.chat_name ?? g.chat_id;
+        lines.push(`- ${g.count} messages in "${name}" (oldest: ${age})`);
+      } else {
+        const label = g.event_type.replace(".", " ").replace("_", " ");
+        lines.push(`- ${g.count} ${label} events (oldest: ${age})`);
+      }
     }
+    lines.push("");
+    lines.push("These events were too old to process individually. Use your tools (read messages, check tasks) to review anything still relevant.");
+    return lines.join("\n");
+  }
+  formatAge(iso) {
+    const ms = Date.now() - new Date(iso).getTime();
+    const hours = Math.floor(ms / 36e5);
+    if (hours < 24)
+      return `${hours}h ago`;
+    const days = Math.floor(hours / 24);
+    return `${days}d ago`;
   }
   async handleHello(data) {
     const { client, config, log: log2 } = this.opts;
@@ -31113,7 +31275,11 @@ parall dm "Alice" --file /tmp/report.pdf --text "Report attached"
 
 ## Approvals
 
-When a CLI command returns a \`PERMISSION_DENIED\` error, the output includes a \`Tip:\` line with an approval-request template \u2014 copy it and fill in the remaining placeholders (\`--chat\`, \`--title\`, \`--reason\`). The \`Tip:\` only appears for commonly approvable actions (archive, delete, restore); for other actions, use \`parall approvals actions\` to check if it's approvable.
+When a CLI command returns a \`PERMISSION_DENIED\` error, the output includes the denied \`action\` and \`resource_uri\`. Whether that action can be approved is decided by the server (there is no fixed allowlist):
+- If it IS approvable, a \`Request approval:\` line with a \`parall approvals request\` command follows \u2014 fill in the placeholders it shows (\`--chat\`, \`--title\`, \`--reason\`) and run it.
+- If it is NOT approvable, the output says so \u2014 ask a human with permission instead of requesting approval.
+
+A different \`INVALID_TARGET\` error means you addressed the wrong kind of thing (e.g. a \`usr_\` id where a chat is expected). Follow the message (e.g. use \`parall dm\` to message a user) \u2014 do not request approval for it.
 
 \`\`\`bash
 # Request approval (use action and resource_uri from the error)
@@ -31155,7 +31321,7 @@ Every entity is addressable with a \`prll://\` URI. Common prefixes you'll see i
 
 When a message or event references \`prll://sch_xxx\` or \`prll://srn_xxx\`, or when you receive \`[Event: schedule.fired]\`, switch to the **parall-schedules** skill for the CLI commands (create / list / pause / resume / cancel / runs).
 
-All CLI output is JSON.
+CLI success output is JSON. Errors print a JSON line (\`{"error","status","code",...}\`) and, on a \`PERMISSION_DENIED\`, may add a plain-text \`Request approval:\` line \u2014 read both.
 `;
 
 // ts/agent-core/dist/skills/parall-tasks.js
@@ -31222,7 +31388,7 @@ When you receive \`[Event: task.comment.created]\`, someone commented on a task
 2. Reply via comment: \`tasks comments add prll://tsk_xxx --body "Response..."\`
 3. If the comment requests status changes, update accordingly
 
-All CLI output is JSON.
+CLI success output is JSON; errors print a JSON line plus, on a \`PERMISSION_DENIED\`, an optional plain-text \`Request approval:\` line \u2014 read both.
 `;
 
 // ts/agent-core/dist/skills/parall-wiki.js
@@ -31355,7 +31521,7 @@ parall wiki reset <slug>      # Restore all files to last synced state
 parall wiki log <slug>        # Recent wiki operations
 \`\`\`
 
-All CLI output is JSON. Run \`parall wiki --help\` for full options.
+CLI success output is JSON; errors may add a plain-text \`Request approval:\` line on a \`PERMISSION_DENIED\` \u2014 read both. Run \`parall wiki --help\` for full options.
 `;
 
 // ts/agent-core/dist/skills/parall-schedules.js