@parall/daemon 1.32.1 → 1.34.0

package/dist/clip-runtime/manifest.d.ts

@@ -1,10 +1,17 @@
 import type { IpcManifest } from './ipc.js';
+export type DependencyMap = Record<string, {
+    package?: string;
+    version?: string;
+}>;
 export interface ClipConfig {
+    clipId?: string;
     name: string;
     package?: string;
     version?: string;
     source: string;
     path: string;
+    sourceType?: string;
+    sourceRef?: string;
     token?: string;
     manifest?: ManifestCache;
 }
@@ -17,10 +24,8 @@ export interface ManifestCache {
     commands: string[];
     commandDetails: CommandDetail[];
     hasWeb?: boolean;
-    dependencies?: Record<string, {
-        package?: string;
-        version?: string;
-    }>;
+    dependencies?: DependencyMap;
+    dependencySlots?: DependencyMap;
     patterns?: string[];
     entities?: Record<string, unknown>;
 }
@@ -37,6 +42,11 @@ export interface ClipJson {
     runtime?: string;
     main?: string;
     web?: string;
+    domain?: string;
+    dependencies?: DependencyMap;
+    dependency_slots?: DependencyMap;
+    patterns?: string[];
+    commands?: CommandDetail[];
     author?: string;
     license?: string;
     repository?: string;
@@ -48,10 +58,8 @@ interface ProjectMetadata {
     domain?: string;
     main?: string;
     web?: string;
-    dependencies?: Record<string, {
-        package?: string;
-        version?: string;
-    }>;
+    dependencies?: DependencyMap;
+    dependencySlots?: DependencyMap;
     patterns?: string[];
     commands?: CommandDetail[];
 }

package/dist/clip-runtime/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/manifest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAUD,UAAU,eAAe;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;CAC5B;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAQzD;AAYD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CAkBrE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,EAAE,CA+C/D;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,GAAG,aAAa,CAoBvF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,CAevE;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAY1D"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/manifest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEnF,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,eAAe,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,gBAAgB,CAAC,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAUD,UAAU,eAAe;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,eAAe,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;CAC5B;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAQzD;AAYD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CAuBrE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,EAAE,CA+C/D;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,GAAG,aAAa,CAyBvF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,CAgBvE;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAY1D"}

package/dist/clip-runtime/manifest.js

@@ -27,8 +27,13 @@ export function loadProjectMetadata(clip) {
         meta.package = clipJson.name;
         meta.version = clipJson.version;
         meta.description = clipJson.description;
+        meta.domain = clipJson.domain;
         meta.main = clipJson.main;
         meta.web = clipJson.web;
+        meta.dependencies = clipJson.dependencies;
+        meta.dependencySlots = clipJson.dependency_slots;
+        meta.patterns = clipJson.patterns;
+        meta.commands = clipJson.commands;
     }
     const pkgJson = loadPackageJson(clip.path);
     if (pkgJson) {
@@ -112,6 +117,13 @@ export function enrichManifest(clip, manifest) {
         enriched.description = meta.description;
     if (!enriched.domain && meta.domain)
         enriched.domain = meta.domain;
+    if (!enriched.dependencies && meta.dependencies)
+        enriched.dependencies = meta.dependencies;
+    if (!enriched.dependencySlots && meta.dependencySlots) {
+        enriched.dependencySlots = meta.dependencySlots;
+    }
+    if (!enriched.patterns && meta.patterns)
+        enriched.patterns = meta.patterns;
     if (meta.commands && meta.commands.length > 0 && enriched.commandDetails.length === 0) {
         enriched.commandDetails = meta.commands;
         enriched.commands = meta.commands.map((c) => c.name);
@@ -136,6 +148,7 @@ export function manifestFromIpc(ipcManifest) {
         commandDetails: details,
         hasWeb: ipcManifest.has_web,
         dependencies: ipcManifest.dependencies,
+        dependencySlots: ipcManifest.dependency_slots,
         patterns: ipcManifest.patterns,
         entities: ipcManifest.entities,
     };

package/dist/clip-runtime/process-manager.d.ts

@@ -1,14 +1,35 @@
-import { type ClipProcessStatus } from './process.js';
+import { type ClipInvokeContext, type ClipProcessStatus } from './process.js';
 import type { ClipConfig, ManifestCache } from './manifest.js';
+import type { BrowserProfileManager } from './browser-profile-manager.js';
+import { type HubClient } from './hub-client.js';
 export interface ClipProcessManagerOptions {
     bunPath?: string;
     clipsDir: string;
     dataDir: string;
+    /**
+     * Host-side browser runtime. Present only on daemons that can host a
+     * BrowserProfile; drives inbound hub browser InvokeCommands. The execution
+     * side never calls this directly — nested browser invokes go out through the
+     * hub (see hubClient).
+     */
+    browserProfileManager?: BrowserProfileManager;
+    /**
+     * Lazily-supplied hub client used by the execution side to resolve a
+     * dependency binding (GetBindings) and forward the dependency invoke
+     * (Invoke). Provided by the supervisor once machine identity + the clip
+     * service endpoint are resolved; may change on endpoint rollout.
+     */
+    hubClient?: () => HubClient | null;
+    /** Ensure a server-declared clip is installed locally before spawn. */
+    ensureInstalled?: (config: ClipConfig) => Promise<ClipConfig>;
 }
 export declare class ClipProcessManager {
     private bunPath;
     private clipsDir;
     private dataDir;
+    private browserProfileManager?;
+    private hubClient?;
+    private ensureInstalled?;
     private processes;
     private startingUp;
     private statuses;
@@ -17,6 +38,8 @@ export declare class ClipProcessManager {
     private statusListeners;
     private manifestListeners;
     constructor(opts: ClipProcessManagerOptions);
+    /** True when this daemon can host BrowserProfiles (serve inbound hub browser invokes). */
+    canHostBrowser(): boolean;
     /** Backward-compat: set a single status listener (wraps addStatusListener). */
     set onStatusChange(fn: ((name: string, status: ClipProcessStatus, message: string) => void) | undefined);
     /** Subscribe to clip status changes. Returns an unsubscribe function. */
@@ -25,6 +48,7 @@ export declare class ClipProcessManager {
     private notifyManifestUpdate;
     private resolveBun;
     registerClip(config: ClipConfig): void;
+    replaceClipConfig(config: ClipConfig): Promise<void>;
     unregisterClip(name: string): Promise<void>;
     startClip(name: string): Promise<void>;
     stopClip(name: string): Promise<void>;
@@ -34,8 +58,8 @@ export declare class ClipProcessManager {
      * Application-level errors (ClipCommandError) are NOT retried.
      * Corresponds to Pinix ProcessManager.Invoke().
      */
-    invoke(name: string, command: string, input?: unknown): Promise<unknown>;
-    invokeStream(name: string, command: string, input?: unknown, onChunk?: (chunk: unknown) => void): Promise<unknown>;
+    invoke(name: string, command: string, input?: unknown, context?: ClipInvokeContext): Promise<unknown>;
+    invokeStream(name: string, command: string, input?: unknown, onChunk?: (chunk: unknown) => void, context?: ClipInvokeContext): Promise<unknown>;
     loadManifest(name: string): Promise<ManifestCache>;
     clipStatus(name: string): {
         status: ClipProcessStatus;
@@ -43,6 +67,14 @@ export declare class ClipProcessManager {
     };
     isRunning(name: string): boolean;
     getRegisteredClips(): ClipConfig[];
+    /**
+     * Clips this daemon advertises to the hub as a provider: the locally
+     * installed clips plus, when this machine hosts BrowserProfiles, a synthetic
+     * "browser" capability so the hub can route cross-machine browser invokes
+     * here. The browser capability has no local subprocess — it is served by
+     * invokeBrowserCapability() against bb-browser.
+     */
+    getProviderClips(): ClipConfig[];
     /**
      * Load clip configs from the clips directory.
      * Reads clip-config.json if present, or scans subdirectories for clip.json files.
@@ -52,6 +84,26 @@ export declare class ClipProcessManager {
     private spawnProcess;
     private ensureClipDataDir;
     private removeIfSame;
+    private processKey;
+    private processKeyBelongsToName;
+    private processNameFromKey;
+    /**
+     * Execution-side nested dependency invoke (from a child clip's IPC). The
+     * browser slot is resolved UNIQUELY via the hub: read the Clip's binding
+     * (GetBindings), then forward the invoke through the hub (Invoke) to the bound
+     * BrowserProfile's host. No local shortcut, no fallback — unbound is rejected.
+     * The execution daemon never verifies clip_token; the hub does.
+     * See docs/engineering-design/browser-profile-clip-integration.md §11.3.
+     */
+    private invokeDependency;
+    /**
+     * Host-side browser capability handler (inbound hub InvokeCommand for the
+     * synthetic "browser" clip). The hub forwards clip_token as the PLAINTEXT
+     * browser_profile_id, which the host daemon uses directly as the bb-browser
+     * account. Only daemons that host BrowserProfiles register this capability.
+     * See docs/engineering-design/browser-profile-clip-integration.md §11.2.
+     */
+    invokeBrowserCapability(clipToken: string, command: string, input: unknown): Promise<unknown>;
     private setStatus;
 }
 //# sourceMappingURL=process-manager.d.ts.map

package/dist/clip-runtime/process-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/process-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,iBAAiB,EAEvB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAQ/D,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,UAAU,CAA2C;IAC7D,OAAO,CAAC,QAAQ,CAAsC;IACtD,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,eAAe,CAEhB;IACP,OAAO,CAAC,iBAAiB,CAAyC;gBAEtD,IAAI,EAAE,yBAAyB;IAM3C,+EAA+E;IAC/E,IAAI,cAAc,CAAC,EAAE,EACjB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,GACpE,SAAS,EAQZ;IAED,yEAAyE;IACzE,iBAAiB,CACf,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GACrE,MAAM,IAAI;IAQb,mBAAmB,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI;IAQ/D,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,UAAU;IAOlB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAOhC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB3C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAarC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB9B;;;;OAIG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBxE,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,OAAO,EACf,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACjC,OAAO,CAAC,OAAO,CAAC;IAgBb,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAOxD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IAMxE,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAKhC,kBAAkB,IAAI,UAAU,EAAE;IAIlC;;;OAGG;IACG,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;YA0D3B,aAAa;YAwBb,YAAY;IAgD1B,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,SAAS;CAUlB"}
+{"version":3,"file":"process-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/process-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EAEvB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAO1E,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAQlE,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC;IACnC,uEAAuE;IACvE,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CAC/D;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,qBAAqB,CAAC,CAAwB;IACtD,OAAO,CAAC,SAAS,CAAC,CAAyB;IAC3C,OAAO,CAAC,eAAe,CAAC,CAA8C;IACtE,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,UAAU,CAA2C;IAC7D,OAAO,CAAC,QAAQ,CAAsC;IACtD,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,eAAe,CAEhB;IACP,OAAO,CAAC,iBAAiB,CAAyC;gBAEtD,IAAI,EAAE,yBAAyB;IAS3C,0FAA0F;IAC1F,cAAc,IAAI,OAAO;IAIzB,+EAA+E;IAC/E,IAAI,cAAc,CAAC,EAAE,EACjB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,GACpE,SAAS,EAQZ;IAED,yEAAyE;IACzE,iBAAiB,CACf,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GACrE,MAAM,IAAI;IAQb,mBAAmB,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI;IAQ/D,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,UAAU;IAOlB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAOhC,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASpD,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB3C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BrC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B9B;;;;OAIG;IACG,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,OAAO,EACf,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,OAAO,CAAC;IAiBb,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,OAAO,EACf,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,EAClC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,OAAO,CAAC;IAiBb,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAOxD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IAMxE,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAOhC,kBAAkB,IAAI,UAAU,EAAE;IAIlC;;;;;;OAMG;IACH,gBAAgB,IAAI,UAAU,EAAE;IAQhC;;;OAGG;IACG,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;YAmE3B,aAAa;YA8Bb,YAAY;IAmD1B,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,kBAAkB;IAK1B;;;;;;;OAOG;YACW,gBAAgB;IA0C9B;;;;;;OAMG;IACG,uBAAuB,CAC3B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,OAAO,CAAC;IAenB,OAAO,CAAC,SAAS;CAUlB"}

package/dist/clip-runtime/process-manager.js

@@ -2,10 +2,15 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { ClipProcess, ClipCommandError, } from './process.js';
 import { findBunBinary } from './bun-resolver.js';
+import { BROWSER_CAPABILITY_NAME, BROWSER_CAPABILITY_PACKAGE, browserCapabilityCommands, isBrowserDependencyName, } from './browser-dependency.js';
+import { HubCommandError } from './hub-client.js';
 export class ClipProcessManager {
     bunPath;
     clipsDir;
     dataDir;
+    browserProfileManager;
+    hubClient;
+    ensureInstalled;
     processes = new Map();
     startingUp = new Map();
     statuses = new Map();
@@ -17,6 +22,13 @@ export class ClipProcessManager {
         this.bunPath = opts.bunPath ?? '';
         this.clipsDir = opts.clipsDir;
         this.dataDir = opts.dataDir;
+        this.browserProfileManager = opts.browserProfileManager;
+        this.hubClient = opts.hubClient;
+        this.ensureInstalled = opts.ensureInstalled;
+    }
+    /** True when this daemon can host BrowserProfiles (serve inbound hub browser invokes). */
+    canHostBrowser() {
+        return this.browserProfileManager != null;
     }
     /** Backward-compat: set a single status listener (wraps addStatusListener). */
     set onStatusChange(fn) {
@@ -68,17 +80,26 @@ export class ClipProcessManager {
             this.setStatus(config.name, 'sleeping', 'registered');
         }
     }
+    async replaceClipConfig(config) {
+        this.registerClip(config);
+        await this.stopClip(config.name);
+        // An in-flight cold start may have resolved ensureInstalled() for the old
+        // config while stopClip was waiting. Re-apply the desired config after the
+        // stop window so the next lazy spawn uses the server-declared state.
+        this.registerClip(config);
+    }
     async unregisterClip(name) {
         this.shuttingDown.add(name);
         try {
-            const startup = this.startingUp.get(name);
-            if (startup) {
-                this.startingUp.delete(name);
-                await startup.then((proc) => proc.stop()).catch(() => { });
-            }
-            if (this.processes.has(name)) {
-                await this.stopClip(name);
+            const startupStops = [];
+            for (const [key, startup] of this.startingUp) {
+                if (!this.processKeyBelongsToName(key, name))
+                    continue;
+                this.startingUp.delete(key);
+                startupStops.push(startup.then((proc) => proc.stop()).catch(() => { }));
             }
+            await Promise.allSettled(startupStops);
+            await this.stopClip(name);
             this.clipConfigs.delete(name);
             this.statuses.delete(name);
         }
@@ -92,11 +113,27 @@ export class ClipProcessManager {
     async stopClip(name) {
         this.shuttingDown.add(name);
         try {
-            const proc = this.processes.get(name);
-            if (!proc)
+            // Also tear down any same-name shards still in their cold-start window.
+            // Without this an in-flight startup would complete and re-register into
+            // this.processes after stopClip returns, defeating the explicit stop.
+            const startupStops = [];
+            for (const [key, startup] of this.startingUp) {
+                if (!this.processKeyBelongsToName(key, name))
+                    continue;
+                this.startingUp.delete(key);
+                startupStops.push(startup.then((proc) => proc.stop()).catch(() => { }));
+            }
+            const stops = [];
+            for (const [key, proc] of this.processes) {
+                if (!this.processKeyBelongsToName(key, name))
+                    continue;
+                stops.push(proc.stop().finally(() => {
+                    this.processes.delete(key);
+                }));
+            }
+            if (stops.length === 0 && startupStops.length === 0)
                 return;
-            await proc.stop();
-            this.processes.delete(name);
+            await Promise.allSettled([...startupStops, ...stops]);
             this.setStatus(name, 'sleeping', 'stopped');
         }
         finally {
@@ -105,11 +142,19 @@ export class ClipProcessManager {
     }
     async stopAll() {
         // Mark all clips as shutting down before any async work
-        for (const name of this.processes.keys())
+        const names = new Set();
+        for (const key of this.processes.keys())
+            names.add(this.processNameFromKey(key));
+        for (const key of this.startingUp.keys())
+            names.add(this.processNameFromKey(key));
+        for (const name of names)
             this.shuttingDown.add(name);
-        for (const name of this.startingUp.keys())
-            this.shuttingDown.add(name);
-        const stops = Array.from(this.processes.keys()).map((name) => this.stopClip(name));
+        const stops = [];
+        for (const [key, proc] of this.processes) {
+            stops.push(proc.stop().finally(() => {
+                this.processes.delete(key);
+            }));
+        }
         // Also abort any in-flight startups (register window)
         for (const [, startup] of this.startingUp) {
             stops.push(startup.then((proc) => proc.stop()).catch(() => { }));
@@ -125,38 +170,40 @@ export class ClipProcessManager {
      * Application-level errors (ClipCommandError) are NOT retried.
      * Corresponds to Pinix ProcessManager.Invoke().
      */
-    async invoke(name, command, input) {
+    async invoke(name, command, input, context = {}) {
+        const key = this.processKey(name, context);
         try {
-            const proc = await this.ensureProcess(name);
+            const proc = await this.ensureProcess(name, context);
             const result = await proc.invoke(command, input);
             return result.output;
         }
         catch (err) {
             if (err instanceof ClipCommandError)
                 throw err;
-            const old = this.processes.get(name);
+            const old = this.processes.get(key);
             if (old?.alive())
                 await old.stop().catch(() => { });
-            this.processes.delete(name);
-            const proc = await this.ensureProcess(name);
+            this.processes.delete(key);
+            const proc = await this.ensureProcess(name, context);
             const result = await proc.invoke(command, input);
             return result.output;
         }
     }
-    async invokeStream(name, command, input, onChunk) {
+    async invokeStream(name, command, input, onChunk, context = {}) {
+        const key = this.processKey(name, context);
         try {
-            const proc = await this.ensureProcess(name);
+            const proc = await this.ensureProcess(name, context);
             const result = await proc.invokeStream(command, input, onChunk);
             return result.output;
         }
         catch (err) {
             if (err instanceof ClipCommandError)
                 throw err;
-            const old = this.processes.get(name);
+            const old = this.processes.get(key);
             if (old?.alive())
                 await old.stop().catch(() => { });
-            this.processes.delete(name);
-            const proc = await this.ensureProcess(name);
+            this.processes.delete(key);
+            const proc = await this.ensureProcess(name, context);
             const result = await proc.invokeStream(command, input, onChunk);
             return result.output;
         }
@@ -175,12 +222,29 @@ export class ClipProcessManager {
         return { status: entry.status, message: entry.message };
     }
     isRunning(name) {
-        const proc = this.processes.get(name);
-        return proc !== undefined && proc.alive();
+        for (const [key, proc] of this.processes) {
+            if (this.processKeyBelongsToName(key, name) && proc.alive())
+                return true;
+        }
+        return false;
     }
     getRegisteredClips() {
         return Array.from(this.clipConfigs.values());
     }
+    /**
+     * Clips this daemon advertises to the hub as a provider: the locally
+     * installed clips plus, when this machine hosts BrowserProfiles, a synthetic
+     * "browser" capability so the hub can route cross-machine browser invokes
+     * here. The browser capability has no local subprocess — it is served by
+     * invokeBrowserCapability() against bb-browser.
+     */
+    getProviderClips() {
+        const clips = this.getRegisteredClips();
+        if (this.canHostBrowser()) {
+            clips.push(browserCapabilityConfig());
+        }
+        return clips;
+    }
     /**
      * Load clip configs from the clips directory.
      * Reads clip-config.json if present, or scans subdirectories for clip.json files.
@@ -210,11 +274,20 @@ export class ClipProcessManager {
             // Try clip.json first, fall back to package.json
             const clipJsonPath = path.join(clipDir, 'clip.json');
             const pkgJsonPath = path.join(clipDir, 'package.json');
+            // Key by the install-directory alias, NOT the manifest name. The
+            // installer writes to clipsDir/{org alias}/ and the install-time
+            // registration (supervisor handleClipInstall) keys by that alias — the
+            // hub routes org invokes by it (sess.clips[alias]). Preferring
+            // clipJson.name here re-keyed clips by their package name
+            // ("@pinix/reddit") after a daemon restart, so org-alias invokes
+            // ("reddit") failed with "no online provider" until reinstall (caught
+            // on the staging closed-loop E2E, 2026-06-04). The manifest/package
+            // identity stays on `package`.
             if (fs.existsSync(clipJsonPath)) {
                 try {
                     const clipJson = JSON.parse(fs.readFileSync(clipJsonPath, 'utf-8'));
                     this.registerClip({
-                        name: clipJson.name || entry.name,
+                        name: entry.name,
                         package: clipJson.name,
                         version: clipJson.version,
                         source: clipDir,
@@ -229,7 +302,7 @@ export class ClipProcessManager {
                 try {
                     const pkgJson = JSON.parse(fs.readFileSync(pkgJsonPath, 'utf-8'));
                     this.registerClip({
-                        name: pkgJson.name || entry.name,
+                        name: entry.name,
                         package: pkgJson.name,
                         version: pkgJson.version,
                         source: clipDir,
@@ -243,35 +316,43 @@ export class ClipProcessManager {
         }
     }
     // --- internal ---
-    async ensureProcess(name) {
+    async ensureProcess(name, context = {}) {
         if (this.shuttingDown.has(name)) {
             throw new Error(`clip "${name}" is shutting down`);
         }
-        const existing = this.processes.get(name);
+        const key = this.processKey(name, context);
+        const existing = this.processes.get(key);
         if (existing && existing.alive())
             return existing;
         // Deduplicate concurrent cold-start requests
-        const inflight = this.startingUp.get(name);
+        const inflight = this.startingUp.get(key);
         if (inflight)
             return inflight;
-        const config = this.clipConfigs.get(name);
-        if (!config)
-            throw new Error(`clip "${name}" not registered`);
-        const startup = this.spawnProcess(config);
-        this.startingUp.set(name, startup);
+        const startup = (async () => {
+            let config = this.clipConfigs.get(name);
+            if (!config)
+                throw new Error(`clip "${name}" not registered`);
+            if (this.ensureInstalled) {
+                config = await this.ensureInstalled(config);
+                this.clipConfigs.set(name, config);
+            }
+            return this.spawnProcess(config, context);
+        })();
+        this.startingUp.set(key, startup);
         try {
             return await startup;
         }
         finally {
-            this.startingUp.delete(name);
+            this.startingUp.delete(key);
         }
     }
-    async spawnProcess(config) {
-        const proc = new ClipProcess(config);
-        const clipDataDir = this.ensureClipDataDir(config);
+    async spawnProcess(config, context) {
+        const proc = new ClipProcess(config, context, (clipName, command, input, invokeContext) => this.invokeDependency(clipName, command, input, invokeContext));
+        const clipDataDir = this.ensureClipDataDir(config, context);
         const bunPath = this.resolveBun();
         proc.spawn(bunPath, {
             PINIX_DATA_DIR: clipDataDir,
+            PRLL_CLIP_ID: context.clipId ?? '',
             // Expose the embedded bun's directory on the clip's PATH so a clip that
             // shells out to `bun` by name resolves it — the daemon's launchd PATH
             // does not include Frameworks/. Symmetric with installDeps(); relies on
@@ -282,7 +363,7 @@ export class ClipProcessManager {
         try {
             await proc.waitReady();
             // Only expose to concurrent callers after registration completes
-            this.processes.set(config.name, proc);
+            this.processes.set(this.processKey(config.name, context), proc);
             this.setStatus(config.name, 'running', 'ready');
             // Always cache manifest so Provider registrations have commands
             const manifest = proc.getManifest();
@@ -298,7 +379,7 @@ export class ClipProcessManager {
         }
         // Monitor process exit in background
         proc.waitDone().then(() => {
-            this.removeIfSame(config.name, proc);
+            this.removeIfSame(config.name, proc, context);
             const exitErr = proc.getError();
             if (exitErr) {
                 this.setStatus(config.name, 'error', exitErr.message);
@@ -309,16 +390,91 @@ export class ClipProcessManager {
         });
         return proc;
     }
-    ensureClipDataDir(config) {
-        const dir = path.join(this.dataDir, config.name);
+    ensureClipDataDir(config, context = {}) {
+        const dir = path.join(this.dataDir, config.name, context.clipId ?? 'default');
         fs.mkdirSync(dir, { recursive: true });
         return dir;
     }
-    removeIfSame(name, proc) {
-        if (this.processes.get(name) === proc) {
-            this.processes.delete(name);
+    removeIfSame(name, proc, context = {}) {
+        const key = this.processKey(name, context);
+        if (this.processes.get(key) === proc) {
+            this.processes.delete(key);
+        }
+    }
+    processKey(name, context = {}) {
+        return context.clipId ? `${name}::${context.clipId}` : name;
+    }
+    processKeyBelongsToName(key, name) {
+        return key === name || key.startsWith(`${name}::`);
+    }
+    processNameFromKey(key) {
+        const marker = key.indexOf('::');
+        return marker === -1 ? key : key.slice(0, marker);
+    }
+    /**
+     * Execution-side nested dependency invoke (from a child clip's IPC). The
+     * browser slot is resolved UNIQUELY via the hub: read the Clip's binding
+     * (GetBindings), then forward the invoke through the hub (Invoke) to the bound
+     * BrowserProfile's host. No local shortcut, no fallback — unbound is rejected.
+     * The execution daemon never verifies clip_token; the hub does.
+     * See docs/engineering-design/browser-profile-clip-integration.md §11.3.
+     */
+    async invokeDependency(clipName, command, input, context) {
+        if (!isBrowserDependencyName(clipName)) {
+            throw new Error(`clip dependency "${clipName}" is not supported`);
+        }
+        const clipId = context.clipId;
+        if (!clipId) {
+            // Without the executing Clip identity we cannot resolve the binding. The
+            // process key shards by clipId, so this should not happen for a
+            // browser-bound Clip.
+            throw new ClipCommandError('browser dependency requires a clip binding');
+        }
+        const hub = this.hubClient?.();
+        if (!hub) {
+            throw new Error('browser dependency runtime is not configured (no hub client)');
+        }
+        const bindings = await hub.getBindings(clipId);
+        const binding = bindings[BROWSER_CAPABILITY_NAME];
+        if (!binding || !binding.clipToken) {
+            // Unbound browser slot: surface as a clip-level error so the calling clip
+            // gets a recoverable rejection instead of a process crash.
+            throw new ClipCommandError(`clip "${clipId}" has no browser binding`, 'CLIP_PROFILE_UNBOUND');
+        }
+        try {
+            return await hub.invoke(BROWSER_CAPABILITY_NAME, command, input, binding.clipToken);
+        }
+        catch (err) {
+            // A hub-flagged application error (e.g. BROWSER_COMMAND_ERROR) is a
+            // recoverable clip-level rejection; translate it so the calling clip is
+            // not torn down. Transport/internal errors propagate as fatal.
+            if (err instanceof HubCommandError) {
+                throw new ClipCommandError(err.message, err.code);
+            }
+            throw err;
         }
     }
+    /**
+     * Host-side browser capability handler (inbound hub InvokeCommand for the
+     * synthetic "browser" clip). The hub forwards clip_token as the PLAINTEXT
+     * browser_profile_id, which the host daemon uses directly as the bb-browser
+     * account. Only daemons that host BrowserProfiles register this capability.
+     * See docs/engineering-design/browser-profile-clip-integration.md §11.2.
+     */
+    async invokeBrowserCapability(clipToken, command, input) {
+        if (!this.browserProfileManager) {
+            throw new Error('browser capability is not hosted on this machine');
+        }
+        if (!clipToken) {
+            throw new ClipCommandError('browser invoke missing profile identity (clip_token)');
+        }
+        return this.browserProfileManager.invoke({
+            profileId: clipToken,
+            account: clipToken,
+            command,
+            input,
+        });
+    }
     setStatus(name, status, message) {
         this.statuses.set(name, { status, message, since: new Date() });
         for (const fn of this.statusListeners) {
@@ -331,3 +487,25 @@ export class ClipProcessManager {
         }
     }
 }
+/**
+ * Synthetic ClipConfig for the host-side "browser" capability. It has no local
+ * subprocess (no `path` to spawn); the hub routes browser invokes here and they
+ * are served by ClipProcessManager.invokeBrowserCapability() against bb-browser.
+ */
+function browserCapabilityConfig() {
+    return {
+        name: BROWSER_CAPABILITY_NAME,
+        package: BROWSER_CAPABILITY_PACKAGE,
+        version: '0.15.0',
+        source: BROWSER_CAPABILITY_PACKAGE,
+        path: '',
+        manifest: {
+            name: BROWSER_CAPABILITY_NAME,
+            package: BROWSER_CAPABILITY_PACKAGE,
+            version: '0.15.0',
+            description: 'Profile-bound browser capability (bb-browser-pro)',
+            commands: browserCapabilityCommands().map((c) => c.name),
+            commandDetails: browserCapabilityCommands(),
+        },
+    };
+}