@parall/daemon 1.32.1 → 1.33.0

package/bundle/manifest.json

@@ -1,28 +1,36 @@
 {
-  "version": "1.32.1",
-  "built_at": "2026-06-02T14:24:57.505Z",
+  "version": "1.33.0",
+  "built_at": "2026-06-08T13:37:00.737Z",
   "min_node_version": "20.0.0",
   "files": {
+    "bb-browser-daemon.js": {
+      "sha256": "9d80592a220f94141c57b2729e5a3ae0db8796274924612b38ce066eef54d435",
+      "size": 575667
+    },
+    "buildDomTree.js": {
+      "sha256": "485c7f690be7fd517e84cb0281de5e399404ac25630a564d9c1d2aeb2c32e064",
+      "size": 52306
+    },
     "package.json": {
       "sha256": "1239d4d885dcad42201a27ed9324f8f0f760b78700d8db9ced39a511cffe7eae",
       "size": 18
     },
     "parall-claude-agent.js": {
-      "sha256": "eeb0e9458c678d1edc467c0e1d2dc25a0fc5d6d110ab01a5997a2de4fdce776c",
-      "size": 1537100
+      "sha256": "fd2395bb9ba5bc2912175d42419c4073ae581bd9382be6447d9169ce177e915c",
+      "size": 1544348
     },
     "parall-codex-agent.js": {
-      "sha256": "b9af840b8d787d2725540e432b416a489851d01a969b0eb45a0291dec8d70362",
-      "size": 1568189
+      "sha256": "fa93fb3b2aab23b6f3ecd218a0c0124bbe323af11c0ced898c2d057ad293f03b",
+      "size": 1575437
     },
     "parall-daemon.js": {
-      "sha256": "44fcf2c6817a56243bd3391eaf49decd5ce4d8953d0bebb1cfba06a54e5719d7",
-      "size": 1499163
+      "sha256": "83d37677018aa1bf0a37df14baaade7738bec2f907fa5d1f66b4bcad77430535",
+      "size": 1565851
     },
     "parall-openclaw-agent.js": {
-      "sha256": "657263cec61e6d26496389ec90ffe0716616a20e082e12c5a17bf6ffd5d1cdd6",
-      "size": 9727
+      "sha256": "505433b4bf3a4b8dbb7b96978d8693d6c48079f4513282ff1ee59a6d13b3eddf",
+      "size": 9801
     }
   },
-  "signature": "03XcA+dVTwzforsxVlxsVXHjHJMKJ/yfCHsrddoGTNN7PjK7hdmkT3fRsQqzA3M1hni+7AT++ZGKT4k25Oc6Cg=="
+  "signature": "z7sT/o8aV5gfuQpr9TYQ+IkY3+IfdC5EiKrFKoQ4kz3TO1zXBC1RQ4xh1M0cFdB9KCDbaGeti2smdYAAczoCAQ=="
 }

package/bundle/parall-claude-agent.js

@@ -27163,6 +27163,7 @@ var ENDPOINTS = {
   MACHINE_AGENT_DAEMON_CONFIG: (orgId, machineId, agentId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/agents/${agentId}/daemon-config`,
   MACHINE_AGENT_WORKSPACE_SETUP: (orgId, machineId, agentId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/agents/${agentId}/workspace/setup`,
   MACHINE_LLM_SOURCE: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/llm-source`,
+  MACHINE_PROVIDER_ENABLED: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/provider-enabled`,
   MACHINE_RUNTIME_AUTH: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/runtime-auth`,
   MACHINE_KEYS: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/keys`,
   MACHINE_KEY: (orgId, machineId, keyId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/keys/${keyId}`,
@@ -27176,8 +27177,9 @@ var ENDPOINTS = {
   MACHINES_ME: `${API_BASE}/machines/me`,
   MACHINES_ME_AGENTS: `${API_BASE}/machines/me/agents`,
   MACHINES_ME_HEALTH: `${API_BASE}/machines/me/health`,
-  MACHINES_ME_CLIP_INSTALLS: `${API_BASE}/machines/me/clip-installs`,
-  MACHINES_ME_CLIP_INSTALL_DONE: (clipId) => `${API_BASE}/machines/me/clip-installs/${clipId}/installed`,
+  MACHINES_ME_CLIPS: `${API_BASE}/machines/me/clips`,
+  MACHINES_ME_BROWSER_PROFILES: `${API_BASE}/machines/me/browser-profiles`,
+  MACHINES_ME_BROWSER_PROFILE_STATUS: (profileId) => `${API_BASE}/machines/me/browser-profiles/${profileId}/status`,
   MACHINES_ME_AGENT_LAUNCH_CREDENTIAL: (agentId) => `${API_BASE}/machines/me/agents/${agentId}/launch-credential`,
   MACHINES_ME_AGENT_WORKSPACE_STATE: (agentId) => `${API_BASE}/machines/me/agents/${agentId}/workspace-state`,
   MACHINES_ME_WS_TICKET: `${API_BASE}/machines/me/ws/ticket`,
@@ -27276,6 +27278,7 @@ var ENDPOINTS = {
   DISPATCH_RECEIVED: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/received`,
   DISPATCH_ACK: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/ack`,
   DISPATCH_ACK_BY_ID: (orgId, id) => `${API_BASE}/orgs/${orgId}/dispatch/${id}/ack`,
+  DISPATCH_EXPIRE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/expire`,
   DISPATCH_BY_MESSAGES: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/by-messages`,
   // Unread
   UNREAD: `${API_BASE}/me/unread`,
@@ -27314,6 +27317,13 @@ var ENDPOINTS = {
   AGENT_CLIP: (orgId, agentId, clipId) => `${CLIP_BASE}/orgs/${orgId}/agents/${agentId}/clips/${clipId}`,
   CLIP_INVOKE: (orgId) => `${CLIP_BASE}/orgs/${orgId}/invoke`,
   CLIP_ONLINE: (orgId) => `${CLIP_BASE}/orgs/${orgId}/online`,
+  BROWSER_PROFILES: (orgId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles`,
+  BROWSER_PROFILE: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}`,
+  BROWSER_PROFILE_OPEN: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/open`,
+  BROWSER_PROFILE_STOP: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/stop`,
+  BROWSER_PROFILE_RESET: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/reset`,
+  BROWSER_PROFILE_CONSENTS: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/consents`,
+  BROWSER_PROFILE_CONSENT: (orgId, profileId, clipId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/consents/${clipId}`,
   // Clip registry (global, served by clip-service → Pinix Hub proxy)
   CLIP_REGISTRY: () => `${CLIP_BASE}/registry/clips`
 };
@@ -27388,9 +27398,10 @@ var WS_EVENTS = {
   MACHINE_FILESYSTEM_BROWSE: "machine.filesystem.browse",
   MACHINE_UPDATE: "machine.update",
   MACHINE_CONFIG_UPDATED: "machine.config.updated",
-  MACHINE_CLIP_INSTALL: "machine.clip.install",
+  MACHINE_CLIP_SYNC: "machine.clip.sync",
+  MACHINE_BROWSER_PROFILE_LIFECYCLE: "machine.browser_profile.lifecycle",
   AGENT_NEW_SESSION: "agent.new_session",
-  CLIP_INSTALLED: "clip.installed",
+  CLIP_CREATED: "clip.created",
   CLIP_REMOVED: "clip.removed",
   CLIP_UPDATED: "clip.updated"
 };
@@ -27843,8 +27854,8 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.CHAT_MEMBERS(orgId, chatId));
     return res.data;
   }
-  async addChatMember(orgId, chatId, userId, role) {
-    return this.request("POST", ENDPOINTS.CHAT_MEMBERS(orgId, chatId), { user_id: userId, role });
+  async addChatMember(orgId, chatId, userId) {
+    return this.request("POST", ENDPOINTS.CHAT_MEMBERS(orgId, chatId), { user_id: userId });
   }
   async removeChatMember(orgId, chatId, userId) {
     return this.request("DELETE", ENDPOINTS.CHAT_MEMBER(orgId, chatId, userId));
@@ -28103,6 +28114,16 @@ var ParallClient = class _ParallClient {
       llm_source: llmSource2
     });
   }
+  /**
+   * Toggle whether the machine contributes its local clips as a hub provider
+   * — org-admin-gated (RequireOrgAdmin), like all machine management. See
+   * docs/engineering-design/clip-provider-sharing-design.md.
+   */
+  async patchMachineProviderEnabled(orgId, machineId, providerEnabled) {
+    return this.request("PATCH", ENDPOINTS.MACHINE_PROVIDER_ENABLED(orgId, machineId), {
+      provider_enabled: providerEnabled
+    });
+  }
   /** Get machine-level runtime auth state. */
   async getMachineRuntimeAuth(orgId, machineId) {
     return this.request("GET", ENDPOINTS.MACHINE_RUNTIME_AUTH(orgId, machineId));
@@ -28136,25 +28157,39 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_AGENTS);
     return res.data;
   }
-  /** `GET /machines/me/clip-installs` — registry clips this machine should
-   * install but hasn't yet (durable reconcile, mck_-authed). */
-  async listClipInstalls() {
-    const res = await this.request("GET", ENDPOINTS.MACHINES_ME_CLIP_INSTALLS);
+  /** `GET /machines/me/clips` — executable Clip definitions assigned to this machine. */
+  async listMachineClips() {
+    const res = await this.request("GET", ENDPOINTS.MACHINES_ME_CLIPS);
     return res.data;
   }
-  /** `POST /machines/me/clip-installs/{clipId}/installed` — report a finished install. */
-  async reportClipInstall(clipId, version) {
-    return this.request("POST", ENDPOINTS.MACHINES_ME_CLIP_INSTALL_DONE(clipId), version ? { version } : void 0);
+  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine. */
+  async listMachineBrowserProfiles() {
+    const res = await this.request("GET", ENDPOINTS.MACHINES_ME_BROWSER_PROFILES);
+    return res.data;
+  }
+  /** `POST /machines/me/browser-profiles/{profileId}/status` — report runtime status. */
+  async reportBrowserProfileStatus(profileId, status, errorMsg) {
+    await this.request("POST", ENDPOINTS.MACHINES_ME_BROWSER_PROFILE_STATUS(profileId), {
+      status,
+      ...errorMsg ? { error_msg: errorMsg } : {}
+    });
   }
   /**
-   * `POST /machines/me/health` — bump the Machine's `updated_at` to now.
-   * Body is intentionally empty; the server ignores any payload. The
-   * daemon should call this on a fixed cadence (e.g. every 30s) so an
-   * external observer can detect a wedged supervisor.
+   * `POST /machines/me/health` — bump the Machine's `updated_at` to now and
+   * report daemon state. The daemon should call this on a fixed cadence (e.g.
+   * every 30s) so an external observer can detect a wedged supervisor. Both
+   * fields are optional and only persisted when changed:
+   *  - `daemonVersion` — the running bundle/launcher version.
+   *  - `selfUpdateCapable` — whether the daemon can act on a machine.update
+   *    signal (true under a service manager, false for bare `npx` foreground).
    */
-  async postMachineHeartbeat(daemonVersion) {
-    const body = daemonVersion ? { daemon_version: daemonVersion } : void 0;
-    return this.request("POST", ENDPOINTS.MACHINES_ME_HEALTH, body);
+  async postMachineHeartbeat(opts) {
+    const body = {};
+    if (opts?.daemonVersion)
+      body.daemon_version = opts.daemonVersion;
+    if (opts?.selfUpdateCapable !== void 0)
+      body.self_update_capable = opts.selfUpdateCapable;
+    return this.request("POST", ENDPOINTS.MACHINES_ME_HEALTH, Object.keys(body).length > 0 ? body : void 0);
   }
   async reportAgentWorkspaceState(agentId, state) {
     const res = await this.request("PUT", ENDPOINTS.MACHINES_ME_AGENT_WORKSPACE_STATE(agentId), state);
@@ -28256,6 +28291,10 @@ var ParallClient = class _ParallClient {
   async ackDispatchByID(orgId, id) {
     return this.request("POST", ENDPOINTS.DISPATCH_ACK_BY_ID(orgId, id));
   }
+  async expireDispatch(orgId, maxAgeHours) {
+    const params = maxAgeHours !== void 0 ? { max_age_hours: String(maxAgeHours) } : void 0;
+    return this.request("POST", ENDPOINTS.DISPATCH_EXPIRE(orgId), void 0, params);
+  }
   async getDispatchByMessages(orgId, chatId, messageIds) {
     const params = { chat_id: chatId, message_ids: messageIds.join(",") };
     return this.request("GET", ENDPOINTS.DISPATCH_BY_MESSAGES(orgId), void 0, params);
@@ -28736,6 +28775,41 @@ var ParallClient = class _ParallClient {
     const resp = await this.request("GET", ENDPOINTS.CLIP_ONLINE(orgId));
     return resp.data;
   }
+  async listBrowserProfiles(orgId) {
+    const resp = await this.request("GET", ENDPOINTS.BROWSER_PROFILES(orgId));
+    return resp.data;
+  }
+  async createBrowserProfile(orgId, req) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILES(orgId), req);
+  }
+  async getBrowserProfile(orgId, profileId) {
+    return this.request("GET", ENDPOINTS.BROWSER_PROFILE(orgId, profileId));
+  }
+  async updateBrowserProfile(orgId, profileId, req) {
+    return this.request("PATCH", ENDPOINTS.BROWSER_PROFILE(orgId, profileId), req);
+  }
+  async deleteBrowserProfile(orgId, profileId) {
+    await this.request("DELETE", ENDPOINTS.BROWSER_PROFILE(orgId, profileId));
+  }
+  async openBrowserProfile(orgId, profileId, req = {}) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_OPEN(orgId, profileId), req);
+  }
+  async stopBrowserProfile(orgId, profileId) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_STOP(orgId, profileId), {});
+  }
+  async resetBrowserProfile(orgId, profileId) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_RESET(orgId, profileId));
+  }
+  async listBrowserProfileConsents(orgId, profileId) {
+    const resp = await this.request("GET", ENDPOINTS.BROWSER_PROFILE_CONSENTS(orgId, profileId));
+    return resp.data;
+  }
+  async grantBrowserProfileConsent(orgId, profileId, req) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_CONSENTS(orgId, profileId), req);
+  }
+  async revokeBrowserProfileConsent(orgId, profileId, clipId) {
+    await this.request("DELETE", ENDPOINTS.BROWSER_PROFILE_CONSENT(orgId, profileId, clipId));
+  }
   async listRegistryClips(q) {
     const url = ENDPOINTS.CLIP_REGISTRY() + (q ? `?q=${encodeURIComponent(q)}` : "");
     const resp = await this.request("GET", url);
@@ -30719,8 +30793,28 @@ var ParallAgentGateway = class {
     return dispatched;
   }
   async catchUpFromDispatch() {
+    const OVERFLOW_THRESHOLD = 500;
+    const EXPIRE_AGE_HOURS = 24;
+    const CATCHUP_MAX = 10;
+    let expireSummary = null;
+    let overflowMode = false;
+    try {
+      const { count } = await this.opts.client.getDispatchPendingCount(this.opts.config.org_id);
+      if (count > OVERFLOW_THRESHOLD) {
+        overflowMode = true;
+        const result = await this.opts.client.expireDispatch(this.opts.config.org_id, EXPIRE_AGE_HOURS);
+        if (result.total > 0) {
+          this.opts.log?.warn(`dispatch catch-up overflow: ${count} pending, expired ${result.total} events older than ${EXPIRE_AGE_HOURS}h`);
+          expireSummary = this.buildOfflineSummary(result.groups);
+        }
+      }
+    } catch (err) {
+      this.opts.log?.warn(`dispatch catch-up overflow check failed: ${String(err)}`);
+    }
     let cursor;
     let processed = 0;
+    let skipped = 0;
+    const skippedByType = /* @__PURE__ */ new Map();
     do {
       const page = await this.opts.client.getDispatch(this.opts.config.org_id, {
         limit: 50,
@@ -30729,6 +30823,17 @@ var ParallAgentGateway = class {
       for (const item of page.data ?? []) {
         if (this.shuttingDown)
           break;
+        if (overflowMode && processed >= CATCHUP_MAX) {
+          try {
+            await this.opts.client.ackDispatchByID(this.opts.config.org_id, item.id);
+            skipped++;
+            const key = item.event_type;
+            skippedByType.set(key, (skippedByType.get(key) ?? 0) + 1);
+          } catch {
+            this.opts.log?.warn(`catch-up skip ack failed for ${item.id}, leaving pending`);
+          }
+          continue;
+        }
         processed++;
         try {
           let dispatched = false;
@@ -30803,9 +30908,52 @@ var ParallAgentGateway = class {
       }
       cursor = !this.shuttingDown && page.has_more ? page.next_cursor : void 0;
     } while (cursor);
-    if (processed > 0) {
-      this.opts.log?.info(`dispatch catch-up: processed ${processed}`);
+    if (expireSummary || skipped > 0) {
+      const parts = [];
+      if (expireSummary)
+        parts.push(expireSummary);
+      if (skipped > 0) {
+        const recentLines = [...skippedByType.entries()].map(([type, count]) => `- ${count} recent ${type.replace(".", " ").replace("_", " ")} events`).join("\n");
+        parts.push(expireSummary ? `Additionally, ${skipped} recent events exceeded the catch-up limit and were skipped:
+${recentLines}` : `[Offline Summary] You were offline. ${skipped} pending events exceeded the catch-up limit and were skipped:
+${recentLines}
+
+Use your tools (read messages, check tasks) to review anything still relevant.`);
+      }
+      const fullSummary = parts.join("\n\n");
+      this.pendingRestartNotification = this.pendingRestartNotification ? `${this.pendingRestartNotification}
+
+${fullSummary}` : fullSummary;
+    }
+    if (processed > 0 || skipped > 0) {
+      this.opts.log?.info(`dispatch catch-up: processed ${processed}, skipped ${skipped}`);
+    }
+  }
+  buildOfflineSummary(groups) {
+    const lines = [
+      "[Offline Summary] You were offline and had a large backlog of pending events. The following old events were skipped:"
+    ];
+    for (const g of groups) {
+      const age = this.formatAge(g.oldest);
+      if (g.chat_id && g.event_type === "message") {
+        const name = g.chat_name ?? g.chat_id;
+        lines.push(`- ${g.count} messages in "${name}" (oldest: ${age})`);
+      } else {
+        const label = g.event_type.replace(".", " ").replace("_", " ");
+        lines.push(`- ${g.count} ${label} events (oldest: ${age})`);
+      }
     }
+    lines.push("");
+    lines.push("These events were too old to process individually. Use your tools (read messages, check tasks) to review anything still relevant.");
+    return lines.join("\n");
+  }
+  formatAge(iso) {
+    const ms = Date.now() - new Date(iso).getTime();
+    const hours = Math.floor(ms / 36e5);
+    if (hours < 24)
+      return `${hours}h ago`;
+    const days = Math.floor(hours / 24);
+    return `${days}d ago`;
   }
   async handleHello(data) {
     const { client, config, log: log2 } = this.opts;

package/bundle/parall-codex-agent.js

@@ -27163,6 +27163,7 @@ var ENDPOINTS = {
   MACHINE_AGENT_DAEMON_CONFIG: (orgId, machineId, agentId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/agents/${agentId}/daemon-config`,
   MACHINE_AGENT_WORKSPACE_SETUP: (orgId, machineId, agentId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/agents/${agentId}/workspace/setup`,
   MACHINE_LLM_SOURCE: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/llm-source`,
+  MACHINE_PROVIDER_ENABLED: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/provider-enabled`,
   MACHINE_RUNTIME_AUTH: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/runtime-auth`,
   MACHINE_KEYS: (orgId, machineId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/keys`,
   MACHINE_KEY: (orgId, machineId, keyId) => `${API_BASE}/orgs/${orgId}/machines/${machineId}/keys/${keyId}`,
@@ -27176,8 +27177,9 @@ var ENDPOINTS = {
   MACHINES_ME: `${API_BASE}/machines/me`,
   MACHINES_ME_AGENTS: `${API_BASE}/machines/me/agents`,
   MACHINES_ME_HEALTH: `${API_BASE}/machines/me/health`,
-  MACHINES_ME_CLIP_INSTALLS: `${API_BASE}/machines/me/clip-installs`,
-  MACHINES_ME_CLIP_INSTALL_DONE: (clipId) => `${API_BASE}/machines/me/clip-installs/${clipId}/installed`,
+  MACHINES_ME_CLIPS: `${API_BASE}/machines/me/clips`,
+  MACHINES_ME_BROWSER_PROFILES: `${API_BASE}/machines/me/browser-profiles`,
+  MACHINES_ME_BROWSER_PROFILE_STATUS: (profileId) => `${API_BASE}/machines/me/browser-profiles/${profileId}/status`,
   MACHINES_ME_AGENT_LAUNCH_CREDENTIAL: (agentId) => `${API_BASE}/machines/me/agents/${agentId}/launch-credential`,
   MACHINES_ME_AGENT_WORKSPACE_STATE: (agentId) => `${API_BASE}/machines/me/agents/${agentId}/workspace-state`,
   MACHINES_ME_WS_TICKET: `${API_BASE}/machines/me/ws/ticket`,
@@ -27276,6 +27278,7 @@ var ENDPOINTS = {
   DISPATCH_RECEIVED: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/received`,
   DISPATCH_ACK: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/ack`,
   DISPATCH_ACK_BY_ID: (orgId, id) => `${API_BASE}/orgs/${orgId}/dispatch/${id}/ack`,
+  DISPATCH_EXPIRE: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/expire`,
   DISPATCH_BY_MESSAGES: (orgId) => `${API_BASE}/orgs/${orgId}/dispatch/by-messages`,
   // Unread
   UNREAD: `${API_BASE}/me/unread`,
@@ -27314,6 +27317,13 @@ var ENDPOINTS = {
   AGENT_CLIP: (orgId, agentId, clipId) => `${CLIP_BASE}/orgs/${orgId}/agents/${agentId}/clips/${clipId}`,
   CLIP_INVOKE: (orgId) => `${CLIP_BASE}/orgs/${orgId}/invoke`,
   CLIP_ONLINE: (orgId) => `${CLIP_BASE}/orgs/${orgId}/online`,
+  BROWSER_PROFILES: (orgId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles`,
+  BROWSER_PROFILE: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}`,
+  BROWSER_PROFILE_OPEN: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/open`,
+  BROWSER_PROFILE_STOP: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/stop`,
+  BROWSER_PROFILE_RESET: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/reset`,
+  BROWSER_PROFILE_CONSENTS: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/consents`,
+  BROWSER_PROFILE_CONSENT: (orgId, profileId, clipId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/consents/${clipId}`,
   // Clip registry (global, served by clip-service → Pinix Hub proxy)
   CLIP_REGISTRY: () => `${CLIP_BASE}/registry/clips`
 };
@@ -27388,9 +27398,10 @@ var WS_EVENTS = {
   MACHINE_FILESYSTEM_BROWSE: "machine.filesystem.browse",
   MACHINE_UPDATE: "machine.update",
   MACHINE_CONFIG_UPDATED: "machine.config.updated",
-  MACHINE_CLIP_INSTALL: "machine.clip.install",
+  MACHINE_CLIP_SYNC: "machine.clip.sync",
+  MACHINE_BROWSER_PROFILE_LIFECYCLE: "machine.browser_profile.lifecycle",
   AGENT_NEW_SESSION: "agent.new_session",
-  CLIP_INSTALLED: "clip.installed",
+  CLIP_CREATED: "clip.created",
   CLIP_REMOVED: "clip.removed",
   CLIP_UPDATED: "clip.updated"
 };
@@ -27843,8 +27854,8 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.CHAT_MEMBERS(orgId, chatId));
     return res.data;
   }
-  async addChatMember(orgId, chatId, userId, role) {
-    return this.request("POST", ENDPOINTS.CHAT_MEMBERS(orgId, chatId), { user_id: userId, role });
+  async addChatMember(orgId, chatId, userId) {
+    return this.request("POST", ENDPOINTS.CHAT_MEMBERS(orgId, chatId), { user_id: userId });
   }
   async removeChatMember(orgId, chatId, userId) {
     return this.request("DELETE", ENDPOINTS.CHAT_MEMBER(orgId, chatId, userId));
@@ -28103,6 +28114,16 @@ var ParallClient = class _ParallClient {
       llm_source: llmSource2
     });
   }
+  /**
+   * Toggle whether the machine contributes its local clips as a hub provider
+   * — org-admin-gated (RequireOrgAdmin), like all machine management. See
+   * docs/engineering-design/clip-provider-sharing-design.md.
+   */
+  async patchMachineProviderEnabled(orgId, machineId, providerEnabled) {
+    return this.request("PATCH", ENDPOINTS.MACHINE_PROVIDER_ENABLED(orgId, machineId), {
+      provider_enabled: providerEnabled
+    });
+  }
   /** Get machine-level runtime auth state. */
   async getMachineRuntimeAuth(orgId, machineId) {
     return this.request("GET", ENDPOINTS.MACHINE_RUNTIME_AUTH(orgId, machineId));
@@ -28136,25 +28157,39 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_AGENTS);
     return res.data;
   }
-  /** `GET /machines/me/clip-installs` — registry clips this machine should
-   * install but hasn't yet (durable reconcile, mck_-authed). */
-  async listClipInstalls() {
-    const res = await this.request("GET", ENDPOINTS.MACHINES_ME_CLIP_INSTALLS);
+  /** `GET /machines/me/clips` — executable Clip definitions assigned to this machine. */
+  async listMachineClips() {
+    const res = await this.request("GET", ENDPOINTS.MACHINES_ME_CLIPS);
     return res.data;
   }
-  /** `POST /machines/me/clip-installs/{clipId}/installed` — report a finished install. */
-  async reportClipInstall(clipId, version) {
-    return this.request("POST", ENDPOINTS.MACHINES_ME_CLIP_INSTALL_DONE(clipId), version ? { version } : void 0);
+  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine. */
+  async listMachineBrowserProfiles() {
+    const res = await this.request("GET", ENDPOINTS.MACHINES_ME_BROWSER_PROFILES);
+    return res.data;
+  }
+  /** `POST /machines/me/browser-profiles/{profileId}/status` — report runtime status. */
+  async reportBrowserProfileStatus(profileId, status, errorMsg) {
+    await this.request("POST", ENDPOINTS.MACHINES_ME_BROWSER_PROFILE_STATUS(profileId), {
+      status,
+      ...errorMsg ? { error_msg: errorMsg } : {}
+    });
   }
   /**
-   * `POST /machines/me/health` — bump the Machine's `updated_at` to now.
-   * Body is intentionally empty; the server ignores any payload. The
-   * daemon should call this on a fixed cadence (e.g. every 30s) so an
-   * external observer can detect a wedged supervisor.
+   * `POST /machines/me/health` — bump the Machine's `updated_at` to now and
+   * report daemon state. The daemon should call this on a fixed cadence (e.g.
+   * every 30s) so an external observer can detect a wedged supervisor. Both
+   * fields are optional and only persisted when changed:
+   *  - `daemonVersion` — the running bundle/launcher version.
+   *  - `selfUpdateCapable` — whether the daemon can act on a machine.update
+   *    signal (true under a service manager, false for bare `npx` foreground).
    */
-  async postMachineHeartbeat(daemonVersion) {
-    const body = daemonVersion ? { daemon_version: daemonVersion } : void 0;
-    return this.request("POST", ENDPOINTS.MACHINES_ME_HEALTH, body);
+  async postMachineHeartbeat(opts) {
+    const body = {};
+    if (opts?.daemonVersion)
+      body.daemon_version = opts.daemonVersion;
+    if (opts?.selfUpdateCapable !== void 0)
+      body.self_update_capable = opts.selfUpdateCapable;
+    return this.request("POST", ENDPOINTS.MACHINES_ME_HEALTH, Object.keys(body).length > 0 ? body : void 0);
   }
   async reportAgentWorkspaceState(agentId, state) {
     const res = await this.request("PUT", ENDPOINTS.MACHINES_ME_AGENT_WORKSPACE_STATE(agentId), state);
@@ -28256,6 +28291,10 @@ var ParallClient = class _ParallClient {
   async ackDispatchByID(orgId, id) {
     return this.request("POST", ENDPOINTS.DISPATCH_ACK_BY_ID(orgId, id));
   }
+  async expireDispatch(orgId, maxAgeHours) {
+    const params = maxAgeHours !== void 0 ? { max_age_hours: String(maxAgeHours) } : void 0;
+    return this.request("POST", ENDPOINTS.DISPATCH_EXPIRE(orgId), void 0, params);
+  }
   async getDispatchByMessages(orgId, chatId, messageIds) {
     const params = { chat_id: chatId, message_ids: messageIds.join(",") };
     return this.request("GET", ENDPOINTS.DISPATCH_BY_MESSAGES(orgId), void 0, params);
@@ -28736,6 +28775,41 @@ var ParallClient = class _ParallClient {
     const resp = await this.request("GET", ENDPOINTS.CLIP_ONLINE(orgId));
     return resp.data;
   }
+  async listBrowserProfiles(orgId) {
+    const resp = await this.request("GET", ENDPOINTS.BROWSER_PROFILES(orgId));
+    return resp.data;
+  }
+  async createBrowserProfile(orgId, req) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILES(orgId), req);
+  }
+  async getBrowserProfile(orgId, profileId) {
+    return this.request("GET", ENDPOINTS.BROWSER_PROFILE(orgId, profileId));
+  }
+  async updateBrowserProfile(orgId, profileId, req) {
+    return this.request("PATCH", ENDPOINTS.BROWSER_PROFILE(orgId, profileId), req);
+  }
+  async deleteBrowserProfile(orgId, profileId) {
+    await this.request("DELETE", ENDPOINTS.BROWSER_PROFILE(orgId, profileId));
+  }
+  async openBrowserProfile(orgId, profileId, req = {}) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_OPEN(orgId, profileId), req);
+  }
+  async stopBrowserProfile(orgId, profileId) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_STOP(orgId, profileId), {});
+  }
+  async resetBrowserProfile(orgId, profileId) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_RESET(orgId, profileId));
+  }
+  async listBrowserProfileConsents(orgId, profileId) {
+    const resp = await this.request("GET", ENDPOINTS.BROWSER_PROFILE_CONSENTS(orgId, profileId));
+    return resp.data;
+  }
+  async grantBrowserProfileConsent(orgId, profileId, req) {
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_CONSENTS(orgId, profileId), req);
+  }
+  async revokeBrowserProfileConsent(orgId, profileId, clipId) {
+    await this.request("DELETE", ENDPOINTS.BROWSER_PROFILE_CONSENT(orgId, profileId, clipId));
+  }
   async listRegistryClips(q) {
     const url = ENDPOINTS.CLIP_REGISTRY() + (q ? `?q=${encodeURIComponent(q)}` : "");
     const resp = await this.request("GET", url);
@@ -30719,8 +30793,28 @@ var ParallAgentGateway = class {
     return dispatched;
   }
   async catchUpFromDispatch() {
+    const OVERFLOW_THRESHOLD = 500;
+    const EXPIRE_AGE_HOURS = 24;
+    const CATCHUP_MAX = 10;
+    let expireSummary = null;
+    let overflowMode = false;
+    try {
+      const { count } = await this.opts.client.getDispatchPendingCount(this.opts.config.org_id);
+      if (count > OVERFLOW_THRESHOLD) {
+        overflowMode = true;
+        const result = await this.opts.client.expireDispatch(this.opts.config.org_id, EXPIRE_AGE_HOURS);
+        if (result.total > 0) {
+          this.opts.log?.warn(`dispatch catch-up overflow: ${count} pending, expired ${result.total} events older than ${EXPIRE_AGE_HOURS}h`);
+          expireSummary = this.buildOfflineSummary(result.groups);
+        }
+      }
+    } catch (err) {
+      this.opts.log?.warn(`dispatch catch-up overflow check failed: ${String(err)}`);
+    }
     let cursor;
     let processed = 0;
+    let skipped = 0;
+    const skippedByType = /* @__PURE__ */ new Map();
     do {
       const page = await this.opts.client.getDispatch(this.opts.config.org_id, {
         limit: 50,
@@ -30729,6 +30823,17 @@ var ParallAgentGateway = class {
       for (const item of page.data ?? []) {
         if (this.shuttingDown)
           break;
+        if (overflowMode && processed >= CATCHUP_MAX) {
+          try {
+            await this.opts.client.ackDispatchByID(this.opts.config.org_id, item.id);
+            skipped++;
+            const key = item.event_type;
+            skippedByType.set(key, (skippedByType.get(key) ?? 0) + 1);
+          } catch {
+            this.opts.log?.warn(`catch-up skip ack failed for ${item.id}, leaving pending`);
+          }
+          continue;
+        }
         processed++;
         try {
           let dispatched = false;
@@ -30803,9 +30908,52 @@ var ParallAgentGateway = class {
       }
       cursor = !this.shuttingDown && page.has_more ? page.next_cursor : void 0;
     } while (cursor);
-    if (processed > 0) {
-      this.opts.log?.info(`dispatch catch-up: processed ${processed}`);
+    if (expireSummary || skipped > 0) {
+      const parts = [];
+      if (expireSummary)
+        parts.push(expireSummary);
+      if (skipped > 0) {
+        const recentLines = [...skippedByType.entries()].map(([type, count]) => `- ${count} recent ${type.replace(".", " ").replace("_", " ")} events`).join("\n");
+        parts.push(expireSummary ? `Additionally, ${skipped} recent events exceeded the catch-up limit and were skipped:
+${recentLines}` : `[Offline Summary] You were offline. ${skipped} pending events exceeded the catch-up limit and were skipped:
+${recentLines}
+
+Use your tools (read messages, check tasks) to review anything still relevant.`);
+      }
+      const fullSummary = parts.join("\n\n");
+      this.pendingRestartNotification = this.pendingRestartNotification ? `${this.pendingRestartNotification}
+
+${fullSummary}` : fullSummary;
+    }
+    if (processed > 0 || skipped > 0) {
+      this.opts.log?.info(`dispatch catch-up: processed ${processed}, skipped ${skipped}`);
+    }
+  }
+  buildOfflineSummary(groups) {
+    const lines = [
+      "[Offline Summary] You were offline and had a large backlog of pending events. The following old events were skipped:"
+    ];
+    for (const g of groups) {
+      const age = this.formatAge(g.oldest);
+      if (g.chat_id && g.event_type === "message") {
+        const name = g.chat_name ?? g.chat_id;
+        lines.push(`- ${g.count} messages in "${name}" (oldest: ${age})`);
+      } else {
+        const label = g.event_type.replace(".", " ").replace("_", " ");
+        lines.push(`- ${g.count} ${label} events (oldest: ${age})`);
+      }
     }
+    lines.push("");
+    lines.push("These events were too old to process individually. Use your tools (read messages, check tasks) to review anything still relevant.");
+    return lines.join("\n");
+  }
+  formatAge(iso) {
+    const ms = Date.now() - new Date(iso).getTime();
+    const hours = Math.floor(ms / 36e5);
+    if (hours < 24)
+      return `${hours}h ago`;
+    const days = Math.floor(hours / 24);
+    return `${days}d ago`;
   }
   async handleHello(data) {
     const { client, config, log: log2 } = this.opts;