@parall/daemon 1.36.0 → 1.36.1

package/bundle/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.36.0",
-  "built_at": "2026-06-25T07:09:21.712Z",
+  "version": "1.36.1",
+  "built_at": "2026-06-26T10:09:22.541Z",
   "min_node_version": "20.0.0",
   "files": {
     "bb-browser-daemon.js": {
@@ -16,25 +16,25 @@
       "size": 18
     },
     "parall-browser-pod.js": {
-      "sha256": "7c0bded4f1699cac24ed1e055bc1b41460069cb8dc0a3fcdd610e542ecfbd0d4",
-      "size": 1679190
+      "sha256": "a9f602f001380c7fdfd2db7e7109343f07267a1acd6c020f5802a949769cd9fb",
+      "size": 1682059
     },
     "parall-claude-agent.js": {
-      "sha256": "d24517c2d6e91d65d8e2c90ad116499763cba190836e9bee6220076b6bb09d5d",
-      "size": 1571389
+      "sha256": "f38cb2274682403d735e9ea3772d56fcfeee9636a1866eb599e41b4a23075ea6",
+      "size": 1574204
     },
     "parall-codex-agent.js": {
-      "sha256": "57e50e1dadb169b1f743fff12b2a6302dd5c9d02577d0b6c19fc47c3869e23f2",
-      "size": 1602399
+      "sha256": "ceee4b4852cb9cc058dbb70022c8fcf81fd802d1bff709d063386b95a9d501e4",
+      "size": 1605214
     },
     "parall-daemon.js": {
-      "sha256": "42f1583a6c5a361e0f86705adf5cda5e89cfd72df55ee63a621f0ab8cd46623f",
-      "size": 1610683
+      "sha256": "a7cae49ec5efb258f60e35f9a03b71a9edbd947886b0b037c761aaa36bf9af79",
+      "size": 1612971
     },
     "parall-openclaw-agent.js": {
       "sha256": "505433b4bf3a4b8dbb7b96978d8693d6c48079f4513282ff1ee59a6d13b3eddf",
       "size": 9801
     }
   },
-  "signature": "HdvsMI5dEwkWkLrfqo1yVMKDjqo55tnhwdWgx0XRv4jQrDDVLWJXeVslKFj7DMkBXYIRMGp3xNmK5WIUfrIuBQ=="
+  "signature": "P/Lgycpu5bMlOGiMzEto4lrKQuoz4c17B0IJ0xmyP6n6DBpuUIEEGJZKs9lQtkz1kVhEgQ4dN9IipxLIZ6hhCg=="
 }

package/bundle/parall-browser-pod.js

@@ -35343,6 +35343,7 @@ var ENDPOINTS = {
   // References (org-scoped)
   REFS_RESOLVE: (orgId) => `${API_BASE}/orgs/${orgId}/refs/resolve`,
   REFS_BACKLINKS: (orgId) => `${API_BASE}/orgs/${orgId}/refs/backlinks`,
+  REFS_GRAPH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/graph`,
   REFS_CHECK: (orgId) => `${API_BASE}/orgs/${orgId}/refs/check`,
   // Platform config (agent-scoped, not org-scoped)
   PLATFORM_CONFIG: `${API_BASE}/agents/platform-config`,
@@ -36200,7 +36201,8 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_CLIPS);
     return res.data;
   }
-  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine. */
+  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine.
+   *  Returns the daemon DTO (carries proxy_password for bb-browser replay). */
   async listMachineBrowserProfiles() {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_BROWSER_PROFILES);
     return res.data;
@@ -36787,6 +36789,16 @@ var ParallClient = class _ParallClient {
   async getBacklinks(orgId, params) {
     return this.request("GET", ENDPOINTS.REFS_BACKLINKS(orgId), void 0, params);
   }
+  /**
+   * Bounded multi-hop walk of the prll:// reference graph around `uri`. `uri`
+   * must be an entity-level prll:// URI — a refined URI (path/query/fragment) is
+   * rejected with 400 UNSUPPORTED_REFINED_URI. `depth` is clamped server-side to
+   * [1, 4]; breadth (node/edge counts) is capped server-side and surfaced via
+   * `truncated`. ACL is applied per hop (chat membership + wiki path scope).
+   */
+  async getRefsGraph(orgId, params) {
+    return this.request("GET", ENDPOINTS.REFS_GRAPH(orgId), void 0, params);
+  }
   async checkBrokenRefs(orgId) {
     return this.request("GET", ENDPOINTS.REFS_CHECK(orgId));
   }
@@ -37922,10 +37934,12 @@ var BrowserProfileManager = class {
         if (!isBrowserAccountInfoUnauthenticatedError(err)) {
           if (!isBrowserAccountNotFoundError(err))
             throw err;
+          const proxy = this.opts.resolveProxy ? await this.opts.resolveProxy(account) : null;
           await this.sendCommand({
             method: "account_create",
             account,
-            ...accountUrl ? { accountUrl } : {}
+            ...accountUrl ? { accountUrl } : {},
+            ...proxyCreateFields(proxy)
           });
           accountCreated = true;
         }
@@ -38182,6 +38196,16 @@ function resolveBbBrowserDaemonPath() {
 function randomToken() {
   return randomBytes(16).toString("hex");
 }
+function proxyCreateFields(proxy) {
+  if (!proxy?.server)
+    return {};
+  const fields = { proxyServer: proxy.server };
+  if (proxy.username)
+    fields.proxyUsername = proxy.username;
+  if (proxy.password)
+    fields.proxyPassword = proxy.password;
+  return fields;
+}
 
 // ts/daemon/dist/clip-runtime/browser-state-store.js
 var import_client_s3 = __toESM(require_dist_cjs73(), 1);
@@ -40165,9 +40189,25 @@ function resolveBrowserPodConfig(env = process.env) {
     orgId,
     healthPort: parsePort(env.PRLL_HEALTH_PORT, DEFAULT_HEALTH_PORT),
     stateDir,
-    homeDir
+    homeDir,
+    proxy: parseProxyEnv(env)
   };
 }
+function parseProxyEnv(env) {
+  const server = env.PRLL_BROWSER_PROXY_SERVER?.trim();
+  const username = env.PRLL_BROWSER_PROXY_USERNAME || void 0;
+  const password = env.PRLL_BROWSER_PROXY_PASSWORD || void 0;
+  if (!server) {
+    if (username !== void 0 || password !== void 0) {
+      throw new Error("browser-pod: PRLL_BROWSER_PROXY_USERNAME/PASSWORD set without PRLL_BROWSER_PROXY_SERVER");
+    }
+    return null;
+  }
+  if (username === void 0 !== (password === void 0)) {
+    throw new Error("browser-pod: PRLL_BROWSER_PROXY_USERNAME and PRLL_BROWSER_PROXY_PASSWORD must be set together");
+  }
+  return { server, username, password };
+}
 function resolvePoolPodConfig(env = process.env) {
   const poolToken = env.PRLL_POOL_TOKEN?.trim() || "";
   const podId = env.PRLL_POD_ID?.trim() || "";
@@ -40236,7 +40276,25 @@ function parseAssignRequest(body) {
       sessionToken
     };
   }
-  return { ok: true, value: { assignmentToken, profileId, orgId, leaseId, generation, state: state2 } };
+  let proxy;
+  if (b5.proxy !== void 0 && b5.proxy !== null) {
+    if (typeof b5.proxy !== "object")
+      return { ok: false, error: "proxy must be an object" };
+    const p2 = b5.proxy;
+    const server = str(p2.server);
+    if (!server)
+      return { ok: false, error: "proxy requires server" };
+    const username = (typeof p2.username === "string" ? p2.username : "") || void 0;
+    const password = (typeof p2.password === "string" ? p2.password : "") || void 0;
+    if (username === void 0 !== (password === void 0)) {
+      return { ok: false, error: "proxy username and password must be provided together" };
+    }
+    proxy = { server, username, password };
+  }
+  return {
+    ok: true,
+    value: { assignmentToken, profileId, orgId, leaseId, generation, state: state2, proxy }
+  };
 }
 function applyAssignmentEnv(env, req) {
   env.PRLL_ASSIGNMENT_TOKEN = req.assignmentToken;
@@ -40254,6 +40312,16 @@ function applyAssignmentEnv(env, req) {
     if (req.state.endpoint)
       env.PRLL_BROWSER_STATE_ENDPOINT = req.state.endpoint;
   }
+  delete env.PRLL_BROWSER_PROXY_SERVER;
+  delete env.PRLL_BROWSER_PROXY_USERNAME;
+  delete env.PRLL_BROWSER_PROXY_PASSWORD;
+  if (req.proxy) {
+    env.PRLL_BROWSER_PROXY_SERVER = req.proxy.server;
+    if (req.proxy.username)
+      env.PRLL_BROWSER_PROXY_USERNAME = req.proxy.username;
+    if (req.proxy.password)
+      env.PRLL_BROWSER_PROXY_PASSWORD = req.proxy.password;
+  }
 }
 function poolTokenMatches(bearer, expected) {
   if (!bearer)
@@ -40507,7 +40575,11 @@ function makeCheckpointer(store) {
   };
 }
 async function preparePodRuntime(config, env, log) {
-  const browser = new BrowserProfileManager({ homeDir: config.homeDir, log });
+  const browser = new BrowserProfileManager({
+    homeDir: config.homeDir,
+    log,
+    resolveProxy: () => config.proxy
+  });
   const clipManager = new ClipProcessManager({
     clipsDir: path5.join(config.stateDir, "clips"),
     dataDir: path5.join(config.stateDir, "clip-data"),

package/bundle/parall-claude-agent.js

@@ -27334,6 +27334,7 @@ var ENDPOINTS = {
   // References (org-scoped)
   REFS_RESOLVE: (orgId) => `${API_BASE}/orgs/${orgId}/refs/resolve`,
   REFS_BACKLINKS: (orgId) => `${API_BASE}/orgs/${orgId}/refs/backlinks`,
+  REFS_GRAPH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/graph`,
   REFS_CHECK: (orgId) => `${API_BASE}/orgs/${orgId}/refs/check`,
   // Platform config (agent-scoped, not org-scoped)
   PLATFORM_CONFIG: `${API_BASE}/agents/platform-config`,
@@ -28270,7 +28271,8 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_CLIPS);
     return res.data;
   }
-  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine. */
+  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine.
+   *  Returns the daemon DTO (carries proxy_password for bb-browser replay). */
   async listMachineBrowserProfiles() {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_BROWSER_PROFILES);
     return res.data;
@@ -28857,6 +28859,16 @@ var ParallClient = class _ParallClient {
   async getBacklinks(orgId, params) {
     return this.request("GET", ENDPOINTS.REFS_BACKLINKS(orgId), void 0, params);
   }
+  /**
+   * Bounded multi-hop walk of the prll:// reference graph around `uri`. `uri`
+   * must be an entity-level prll:// URI — a refined URI (path/query/fragment) is
+   * rejected with 400 UNSUPPORTED_REFINED_URI. `depth` is clamped server-side to
+   * [1, 4]; breadth (node/edge counts) is capped server-side and surfaced via
+   * `truncated`. ACL is applied per hop (chat membership + wiki path scope).
+   */
+  async getRefsGraph(orgId, params) {
+    return this.request("GET", ENDPOINTS.REFS_GRAPH(orgId), void 0, params);
+  }
   async checkBrokenRefs(orgId) {
     return this.request("GET", ENDPOINTS.REFS_CHECK(orgId));
   }
@@ -31526,8 +31538,36 @@ parall machines logs prll://mch_xxx --lines 100
 \`\`\`bash
 parall chats list            # List all chats
 parall messages list prll://cht_xxx # Read chat message history
+parall messages list prll://cht_xxx --since 2026-01-01 # Only messages at/after a date (RFC3339 or YYYY-MM-DD)
+\`\`\`
+
+## Org-Context Search
+
+Before deciding or starting non-trivial work, search the org's real history \u2014
+past discussions, decisions, tasks, and wiki notes \u2014 so you don't re-litigate
+settled questions or repeat known mistakes. This searches live org data
+(semantic + keyword), not a local copy, and is permission-filtered to what you
+can see.
+
+\`\`\`bash
+# Semantic + keyword search across messages, tasks, and wiki
+parall search "auth v5 upgrade"
+
+# Restrict entity types (m=message, t=task, w=wiki). --channel narrows the
+# MESSAGE hits to one chat (tasks/wiki are unaffected by it).
+parall search "auth v5 upgrade" --types m,w --channel prll://cht_eng
+
+# Time-box to recent activity (RFC3339 or YYYY-MM-DD). Narrows messages + tasks;
+# wiki is always matched by relevance (the index has no authored timestamp).
+parall search "auth v5 upgrade" --since 2026-01-01
+
+# Narrow wiki hits to a frontmatter document type
+parall search "deploy steps" --types w --wiki-type Runbook
 \`\`\`
 
+Even with zero curated notes, the raw message + task history is searchable \u2014 the
+original discussion and its approval/rejection IS the precedent.
+
 ## Sending Messages
 
 Each \`[Event: message.new]\` includes \`[Chat: ... (prll://cht_xxx)]\` \u2014 use that chat URI to reply.
@@ -31629,6 +31669,28 @@ When a message or event references \`prll://sch_xxx\` or \`prll://srn_xxx\`, or
 
 When a message or event references \`prll://xcn_xxx\`, \`prll://xin_xxx\`, \`prll://xtr_xxx\`, or \`prll://xrn_xxx\`, or when you receive \`[Event: external.trigger]\`, switch to the **parall-external-triggers** skill for the CLI commands (connections / triggers / events / runs).
 
+## References (relationship graph)
+
+\`prll://\` references between entities form a graph \u2014 a message cites a task, a
+task cites a wiki page, and so on. Walk it to answer "what is this decision /
+entity connected to". All results are permission-filtered to what you can see.
+
+\`\`\`bash
+# Resolve URIs to entity metadata (titles, status, previews)
+parall refs resolve prll://tsk_xxx prll://wik_xxx
+
+# Single hop \u2014 who references X
+parall refs backlinks prll://tsk_xxx
+
+# Multi-hop \u2014 the connected sub-graph around X (entity-level URI only \u2014 no
+# path/anchor; depth 1\u20134, default 2)
+parall refs graph prll://tsk_xxx --depth 2
+\`\`\`
+
+\`refs graph\` traverses both directions (inbound + outbound) and returns \`nodes\`
+and \`edges\` with each node's hop \`depth\`. \`truncated: true\` means a size cap clipped
+the result \u2014 narrow it with a smaller \`--depth\`.
+
 CLI success output is JSON. Errors print a JSON line (\`{"error","status","code",...}\`) and, on a \`PERMISSION_DENIED\`, may add a plain-text \`Request approval:\` line \u2014 read both.
 `;
 

package/bundle/parall-codex-agent.js

@@ -27334,6 +27334,7 @@ var ENDPOINTS = {
   // References (org-scoped)
   REFS_RESOLVE: (orgId) => `${API_BASE}/orgs/${orgId}/refs/resolve`,
   REFS_BACKLINKS: (orgId) => `${API_BASE}/orgs/${orgId}/refs/backlinks`,
+  REFS_GRAPH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/graph`,
   REFS_CHECK: (orgId) => `${API_BASE}/orgs/${orgId}/refs/check`,
   // Platform config (agent-scoped, not org-scoped)
   PLATFORM_CONFIG: `${API_BASE}/agents/platform-config`,
@@ -28270,7 +28271,8 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_CLIPS);
     return res.data;
   }
-  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine. */
+  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine.
+   *  Returns the daemon DTO (carries proxy_password for bb-browser replay). */
   async listMachineBrowserProfiles() {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_BROWSER_PROFILES);
     return res.data;
@@ -28857,6 +28859,16 @@ var ParallClient = class _ParallClient {
   async getBacklinks(orgId, params) {
     return this.request("GET", ENDPOINTS.REFS_BACKLINKS(orgId), void 0, params);
   }
+  /**
+   * Bounded multi-hop walk of the prll:// reference graph around `uri`. `uri`
+   * must be an entity-level prll:// URI — a refined URI (path/query/fragment) is
+   * rejected with 400 UNSUPPORTED_REFINED_URI. `depth` is clamped server-side to
+   * [1, 4]; breadth (node/edge counts) is capped server-side and surfaced via
+   * `truncated`. ACL is applied per hop (chat membership + wiki path scope).
+   */
+  async getRefsGraph(orgId, params) {
+    return this.request("GET", ENDPOINTS.REFS_GRAPH(orgId), void 0, params);
+  }
   async checkBrokenRefs(orgId) {
     return this.request("GET", ENDPOINTS.REFS_CHECK(orgId));
   }
@@ -31526,8 +31538,36 @@ parall machines logs prll://mch_xxx --lines 100
 \`\`\`bash
 parall chats list            # List all chats
 parall messages list prll://cht_xxx # Read chat message history
+parall messages list prll://cht_xxx --since 2026-01-01 # Only messages at/after a date (RFC3339 or YYYY-MM-DD)
+\`\`\`
+
+## Org-Context Search
+
+Before deciding or starting non-trivial work, search the org's real history \u2014
+past discussions, decisions, tasks, and wiki notes \u2014 so you don't re-litigate
+settled questions or repeat known mistakes. This searches live org data
+(semantic + keyword), not a local copy, and is permission-filtered to what you
+can see.
+
+\`\`\`bash
+# Semantic + keyword search across messages, tasks, and wiki
+parall search "auth v5 upgrade"
+
+# Restrict entity types (m=message, t=task, w=wiki). --channel narrows the
+# MESSAGE hits to one chat (tasks/wiki are unaffected by it).
+parall search "auth v5 upgrade" --types m,w --channel prll://cht_eng
+
+# Time-box to recent activity (RFC3339 or YYYY-MM-DD). Narrows messages + tasks;
+# wiki is always matched by relevance (the index has no authored timestamp).
+parall search "auth v5 upgrade" --since 2026-01-01
+
+# Narrow wiki hits to a frontmatter document type
+parall search "deploy steps" --types w --wiki-type Runbook
 \`\`\`
 
+Even with zero curated notes, the raw message + task history is searchable \u2014 the
+original discussion and its approval/rejection IS the precedent.
+
 ## Sending Messages
 
 Each \`[Event: message.new]\` includes \`[Chat: ... (prll://cht_xxx)]\` \u2014 use that chat URI to reply.
@@ -31629,6 +31669,28 @@ When a message or event references \`prll://sch_xxx\` or \`prll://srn_xxx\`, or
 
 When a message or event references \`prll://xcn_xxx\`, \`prll://xin_xxx\`, \`prll://xtr_xxx\`, or \`prll://xrn_xxx\`, or when you receive \`[Event: external.trigger]\`, switch to the **parall-external-triggers** skill for the CLI commands (connections / triggers / events / runs).
 
+## References (relationship graph)
+
+\`prll://\` references between entities form a graph \u2014 a message cites a task, a
+task cites a wiki page, and so on. Walk it to answer "what is this decision /
+entity connected to". All results are permission-filtered to what you can see.
+
+\`\`\`bash
+# Resolve URIs to entity metadata (titles, status, previews)
+parall refs resolve prll://tsk_xxx prll://wik_xxx
+
+# Single hop \u2014 who references X
+parall refs backlinks prll://tsk_xxx
+
+# Multi-hop \u2014 the connected sub-graph around X (entity-level URI only \u2014 no
+# path/anchor; depth 1\u20134, default 2)
+parall refs graph prll://tsk_xxx --depth 2
+\`\`\`
+
+\`refs graph\` traverses both directions (inbound + outbound) and returns \`nodes\`
+and \`edges\` with each node's hop \`depth\`. \`truncated: true\` means a size cap clipped
+the result \u2014 narrow it with a smaller \`--depth\`.
+
 CLI success output is JSON. Errors print a JSON line (\`{"error","status","code",...}\`) and, on a \`PERMISSION_DENIED\`, may add a plain-text \`Request approval:\` line \u2014 read both.
 `;
 

package/bundle/parall-daemon.js

@@ -27348,6 +27348,7 @@ var ENDPOINTS = {
   // References (org-scoped)
   REFS_RESOLVE: (orgId) => `${API_BASE}/orgs/${orgId}/refs/resolve`,
   REFS_BACKLINKS: (orgId) => `${API_BASE}/orgs/${orgId}/refs/backlinks`,
+  REFS_GRAPH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/graph`,
   REFS_CHECK: (orgId) => `${API_BASE}/orgs/${orgId}/refs/check`,
   // Platform config (agent-scoped, not org-scoped)
   PLATFORM_CONFIG: `${API_BASE}/agents/platform-config`,
@@ -28284,7 +28285,8 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_CLIPS);
     return res.data;
   }
-  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine. */
+  /** `GET /machines/me/browser-profiles` — browser profiles hosted by this machine.
+   *  Returns the daemon DTO (carries proxy_password for bb-browser replay). */
   async listMachineBrowserProfiles() {
     const res = await this.request("GET", ENDPOINTS.MACHINES_ME_BROWSER_PROFILES);
     return res.data;
@@ -28871,6 +28873,16 @@ var ParallClient = class _ParallClient {
   async getBacklinks(orgId, params) {
     return this.request("GET", ENDPOINTS.REFS_BACKLINKS(orgId), void 0, params);
   }
+  /**
+   * Bounded multi-hop walk of the prll:// reference graph around `uri`. `uri`
+   * must be an entity-level prll:// URI — a refined URI (path/query/fragment) is
+   * rejected with 400 UNSUPPORTED_REFINED_URI. `depth` is clamped server-side to
+   * [1, 4]; breadth (node/edge counts) is capped server-side and surfaced via
+   * `truncated`. ACL is applied per hop (chat membership + wiki path scope).
+   */
+  async getRefsGraph(orgId, params) {
+    return this.request("GET", ENDPOINTS.REFS_GRAPH(orgId), void 0, params);
+  }
   async checkBrokenRefs(orgId) {
     return this.request("GET", ENDPOINTS.REFS_CHECK(orgId));
   }
@@ -33184,10 +33196,12 @@ var BrowserProfileManager = class {
         if (!isBrowserAccountInfoUnauthenticatedError(err)) {
           if (!isBrowserAccountNotFoundError(err))
             throw err;
+          const proxy = this.opts.resolveProxy ? await this.opts.resolveProxy(account) : null;
           await this.sendCommand({
             method: "account_create",
             account,
-            ...accountUrl ? { accountUrl } : {}
+            ...accountUrl ? { accountUrl } : {},
+            ...proxyCreateFields(proxy)
           });
           accountCreated = true;
         }
@@ -33444,6 +33458,16 @@ function resolveBbBrowserDaemonPath() {
 function randomToken() {
   return randomBytes(16).toString("hex");
 }
+function proxyCreateFields(proxy) {
+  if (!proxy?.server)
+    return {};
+  const fields = { proxyServer: proxy.server };
+  if (proxy.username)
+    fields.proxyUsername = proxy.username;
+  if (proxy.password)
+    fields.proxyPassword = proxy.password;
+  return fields;
+}
 
 // ts/daemon/dist/supervisor.js
 init_config();
@@ -34371,7 +34395,8 @@ var DaemonSupervisor = class {
         log: this.log,
         reportStatus: (profileId, status, errorMsg) => {
           this.client.reportBrowserProfileStatus(profileId, status, errorMsg).catch((err) => this.log.warn(`browser profile status report failed: ${String(err)}`));
-        }
+        },
+        resolveProxy: (profileId) => this.resolveBrowserProfileProxy(profileId)
       });
       this.clipManager = new ClipProcessManager({
         clipsDir: path13.join(this.config.rootStateDir, "clips"),
@@ -34637,6 +34662,30 @@ var DaemonSupervisor = class {
       }
     }
   }
+  /**
+   * Resolve a profile's outbound proxy for bb-browser account creation (BYOC).
+   * Fetched fresh — account creation is rare (once per profile until reset), so a
+   * proxy edit applies on the next account_create. The mck_-authed machine list is
+   * the only path that carries proxy_password (for replay to bb-browser).
+   *
+   * Fails closed: a fetch failure or a vanished profile THROWS, so the manager never
+   * creates an account that would egress from the host's real IP for a
+   * proxy-configured profile (the caller reports `error` and retries next tick).
+   */
+  async resolveBrowserProfileProxy(profileId) {
+    const profiles = await this.client.listMachineBrowserProfiles();
+    const profile = profiles.find((p) => p.id === profileId);
+    if (!profile) {
+      throw new Error(`browser profile ${profileId} not found; refusing to create a bb-browser account without its proxy config`);
+    }
+    if (!profile.proxy_server)
+      return null;
+    return {
+      server: profile.proxy_server,
+      username: profile.proxy_username ?? void 0,
+      password: profile.proxy_password ?? void 0
+    };
+  }
   // ---- Flat layout migration (self-hosted → daemon) ----
   /**
    * Detects a legacy flat state layout (no agents/ subdir) and migrates it

package/dist/browser-pod.d.ts

@@ -46,6 +46,7 @@
  */
 import * as http from 'node:http';
 import { type GatewayLogger } from '@parall/agent-core';
+import { type BrowserProxyConfig } from './clip-runtime/browser-profile-manager.js';
 import { BrowserStateStore, type HydrateResult } from './clip-runtime/browser-state-store.js';
 export interface BrowserPodConfig {
     /** Controller-minted pba_ platform assignment token (ProviderStream bearer). */
@@ -64,6 +65,9 @@ export interface BrowserPodConfig {
     stateDir: string;
     /** bb-browser user-data dir (BB_BROWSER_HOME); where S3 state hydrates in a later PR. */
     homeDir: string;
+    /** Per-profile outbound proxy (controller-injected via PRLL_BROWSER_PROXY_* env on a
+     *  cold pod, or the /assign body on a warm one). null = direct egress. */
+    proxy: BrowserProxyConfig | null;
 }
 /**
  * Resolve and validate the pod's runtime config from the environment. Throws on
@@ -109,6 +113,9 @@ export interface AssignRequest {
     leaseId: string;
     generation: number;
     state?: AssignStateCreds;
+    /** Per-profile outbound proxy (warm-pod counterpart of the cold pod's
+     *  PRLL_BROWSER_PROXY_* env). Absent = direct egress. */
+    proxy?: BrowserProxyConfig;
 }
 type AssignParseResult = {
     ok: true;

package/dist/browser-pod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-pod.d.ts","sourceRoot":"","sources":["../src/browser-pod.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAIH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,uCAAuC,CAAC;AAgB9F,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAC;CACjB;AASD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,gBAAgB,CAsC9F;AAYD,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAC;IAClB,8FAA8F;IAC9F,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,CAuBxF;AAED;kEACkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;0EAC0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,KAAK,iBAAiB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3F;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,iBAAiB,CA4CnE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,IAAI,CAanF;AAED,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AACjE,oFAAoF;AACpF,MAAM,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAElG,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,OAAO,IAAI,OAAO,CAAC;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,sFAAsF;AACtF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,IAAI,OAAO,CAAC;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,eAAe,IAAI,MAAM,GAAG,IAAI,CAAC;CAClC;AAiBD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACpD,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;CACpE,GAAG,UAAU,CA0Cb;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,WAAW,IAAI,OAAO,CAAC;CACxB;AAED,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED;;;;;GAKG;AACH,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAGpB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAXvC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,eAAe,CAA+C;gBAGnD,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE,UAAU,EACnB,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAGnD,YAAY,CAAC,EAAE,oBAAoB,YAAA,EACnC,oBAAoB,GAAE,MAAuC;IAGhF;;;;;;OAMG;IACH,OAAO,IAAI,OAAO;IAIlB;qEACiE;IAC3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B;;oDAEgD;IAChD,OAAO,CAAC,mBAAmB;IAY3B;;;;;;OAMG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAkC7B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,MAAM,EAAE,MAAM,OAAO,CAAC;IACtB,OAAO,EAAE,MAAM,OAAO,CAAC;IACvB,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAGpD,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B,GAAG,IAAI,CAAC,MAAM,CAqBd;AAqED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,GAAG,EAAE,aAAa,GACjB,iBAAiB,GAAG,IAAI,CAiC1B;AAED,6EAA6E;AAC7E,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAK1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAE3E;AAcD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,iBAAiB,CAAC,CAoF5B;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAyCf;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAmDf"}
+{"version":3,"file":"browser-pod.d.ts","sourceRoot":"","sources":["../src/browser-pod.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAIH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,uCAAuC,CAAC;AAgB9F,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAC;IAChB;8EAC0E;IAC1E,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAClC;AASD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,gBAAgB,CAuC9F;AA6CD,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAC;IAClB,8FAA8F;IAC9F,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,CAuBxF;AAED;kEACkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;0EAC0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;6DACyD;IACzD,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;AAED,KAAK,iBAAiB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3F;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,iBAAiB,CAiEnE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,IAAI,CAwBnF;AAED,0CAA0C;AAC1C,MAAM,MAAM,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AACjE,oFAAoF;AACpF,MAAM,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAElG,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,OAAO,IAAI,OAAO,CAAC;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,sFAAsF;AACtF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,IAAI,OAAO,CAAC;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,eAAe,IAAI,MAAM,GAAG,IAAI,CAAC;CAClC;AAiBD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACpD,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;CACpE,GAAG,UAAU,CA0Cb;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,WAAW,IAAI,OAAO,CAAC;CACxB;AAED,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED;;;;;GAKG;AACH,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAGpB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IAXvC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,eAAe,CAA+C;gBAGnD,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE,UAAU,EACnB,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAGnD,YAAY,CAAC,EAAE,oBAAoB,YAAA,EACnC,oBAAoB,GAAE,MAAuC;IAGhF;;;;;;OAMG;IACH,OAAO,IAAI,OAAO;IAIlB;qEACiE;IAC3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B;;oDAEgD;IAChD,OAAO,CAAC,mBAAmB;IAY3B;;;;;;OAMG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAkC7B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,MAAM,EAAE,MAAM,OAAO,CAAC;IACtB,OAAO,EAAE,MAAM,OAAO,CAAC;IACvB,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAGpD,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B,GAAG,IAAI,CAAC,MAAM,CAqBd;AAqED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,GAAG,EAAE,aAAa,GACjB,iBAAiB,GAAG,IAAI,CAiC1B;AAED,6EAA6E;AAC7E,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAK1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAE3E;AAcD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,iBAAiB,CAAC,CA0F5B;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAyCf;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAmDf"}

package/dist/browser-pod.js

@@ -51,7 +51,7 @@ import * as os from 'node:os';
 import * as path from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { createLogger } from '@parall/agent-core';
-import { BrowserProfileManager } from './clip-runtime/browser-profile-manager.js';
+import { BrowserProfileManager, } from './clip-runtime/browser-profile-manager.js';
 import { BrowserStateStore } from './clip-runtime/browser-state-store.js';
 import { ClipProvider } from './clip-runtime/clip-provider.js';
 import { ClipProcessManager } from './clip-runtime/process-manager.js';
@@ -114,8 +114,37 @@ export function resolveBrowserPodConfig(env = process.env) {
         healthPort: parsePort(env.PRLL_HEALTH_PORT, DEFAULT_HEALTH_PORT),
         stateDir,
         homeDir,
+        proxy: parseProxyEnv(env),
     };
 }
+/** Parse the controller-injected PRLL_BROWSER_PROXY_* env into a proxy config, or
+ *  null when no proxy is set (PRLL_BROWSER_PROXY_SERVER absent → direct egress).
+ *  The cold pod gets these as env; the warm pod's /assign writes the same vars. */
+function parseProxyEnv(env) {
+    const server = env.PRLL_BROWSER_PROXY_SERVER?.trim();
+    // username + password are credential-like passthrough — kept VERBATIM (never
+    // trimmed), because residential-proxy usernames carry session/geo selectors and
+    // a provider could legitimately use surrounding whitespace. Empty string → undefined.
+    const username = env.PRLL_BROWSER_PROXY_USERNAME || undefined;
+    const password = env.PRLL_BROWSER_PROXY_PASSWORD || undefined;
+    if (!server) {
+        // Orphan credentials with no server must FAIL CLOSED, not silently fall through
+        // to direct egress: a misconfigured pod spec that drops the server var while
+        // keeping creds should crash here, not leak traffic past the intended proxy.
+        if (username !== undefined || password !== undefined) {
+            throw new Error('browser-pod: PRLL_BROWSER_PROXY_USERNAME/PASSWORD set without PRLL_BROWSER_PROXY_SERVER');
+        }
+        return null; // no proxy at all → direct egress
+    }
+    // Reject half-auth at the pod boundary too (the server already enforces the
+    // user+pass pair). A version skew / bad pod spec should fail fast here, not
+    // forward incomplete creds to account_create where it becomes a confusing
+    // runtime auth failure.
+    if ((username === undefined) !== (password === undefined)) {
+        throw new Error('browser-pod: PRLL_BROWSER_PROXY_USERNAME and PRLL_BROWSER_PROXY_PASSWORD must be set together');
+    }
+    return { server, username, password };
+}
 /**
  * Resolve a warm pod's identity-less config. Unlike resolveBrowserPodConfig this
  * requires PRLL_POOL_TOKEN (not PRLL_ASSIGNMENT_TOKEN) and NO profile/org — those
@@ -196,7 +225,29 @@ export function parseAssignRequest(body) {
             sessionToken,
         };
     }
-    return { ok: true, value: { assignmentToken, profileId, orgId, leaseId, generation, state } };
+    let proxy;
+    if (b.proxy !== undefined && b.proxy !== null) {
+        if (typeof b.proxy !== 'object')
+            return { ok: false, error: 'proxy must be an object' };
+        const p = b.proxy;
+        const server = str(p.server);
+        if (!server)
+            return { ok: false, error: 'proxy requires server' };
+        // username + password are credentials — preserved VERBATIM (never trimmed);
+        // empty string → undefined. (server is a structured host:port, so it is trimmed.)
+        const username = (typeof p.username === 'string' ? p.username : '') || undefined;
+        const password = (typeof p.password === 'string' ? p.password : '') || undefined;
+        // Reject half-auth (same invariant the server enforces) before it reaches
+        // account_create as a confusing runtime auth failure.
+        if ((username === undefined) !== (password === undefined)) {
+            return { ok: false, error: 'proxy username and password must be provided together' };
+        }
+        proxy = { server, username, password };
+    }
+    return {
+        ok: true,
+        value: { assignmentToken, profileId, orgId, leaseId, generation, state, proxy },
+    };
 }
 /**
  * Apply an /assign payload to `env` (process.env in prod) so the assigned path
@@ -220,6 +271,19 @@ export function applyAssignmentEnv(env, req) {
         if (req.state.endpoint)
             env.PRLL_BROWSER_STATE_ENDPOINT = req.state.endpoint;
     }
+    // Clear any prior proxy env BEFORE applying this assignment's proxy, so a pod
+    // env reused across assignments never inherits a stale credential (a no-proxy
+    // or different-proxy reassignment must not keep the previous profile's creds).
+    delete env.PRLL_BROWSER_PROXY_SERVER;
+    delete env.PRLL_BROWSER_PROXY_USERNAME;
+    delete env.PRLL_BROWSER_PROXY_PASSWORD;
+    if (req.proxy) {
+        env.PRLL_BROWSER_PROXY_SERVER = req.proxy.server;
+        if (req.proxy.username)
+            env.PRLL_BROWSER_PROXY_USERNAME = req.proxy.username;
+        if (req.proxy.password)
+            env.PRLL_BROWSER_PROXY_PASSWORD = req.proxy.password;
+    }
 }
 /** Constant-time bearer comparison against the injected pool token. The pod cannot
  *  verify the JWT signature (no shared secret), so it string-compares the bearer to
@@ -562,7 +626,13 @@ function makeCheckpointer(store) {
 export async function preparePodRuntime(config, env, log) {
     // Real browser runtime — starts bb-browser + Chromium lazily on first invoke,
     // ensures the single profile's account, persists under homeDir (BB_BROWSER_HOME).
-    const browser = new BrowserProfileManager({ homeDir: config.homeDir, log });
+    // A hosted pod serves exactly one profile, so resolveProxy ignores the id and
+    // returns the controller-injected proxy (env on a cold pod, /assign on a warm one).
+    const browser = new BrowserProfileManager({
+        homeDir: config.homeDir,
+        log,
+        resolveProxy: () => config.proxy,
+    });
     // The process manager hosts no installable clips in pod mode — its only job is
     // to advertise the synthetic "browser" capability (getProviderClips appends it
     // because a BrowserProfileManager is present) and route inbound browser invokes

package/dist/clip-runtime/browser-profile-manager.d.ts

@@ -1,5 +1,14 @@
 import { type ViewerTurnConfig } from './browser-viewer-streamer.js';
 type BrowserProfileStatus = 'running' | 'stopped' | 'error';
+/** Per-profile outbound proxy (BYO provider credentials) bound at bb-browser
+ *  account_create. server is host:port (optional http/https/socks5 scheme);
+ *  username/password authenticate (CDP Fetch.authRequired). Geo/session targeting
+ *  lives inside the username (provider-specific). null/absent = direct egress. */
+export interface BrowserProxyConfig {
+    server: string;
+    username?: string;
+    password?: string;
+}
 interface BrowserProfileManagerOptions {
     homeDir: string;
     log: {
@@ -8,6 +17,13 @@ interface BrowserProfileManagerOptions {
         error(msg: string): void;
     };
     reportStatus?: (profileId: string, status: BrowserProfileStatus, errorMsg?: string) => void;
+    /** Resolve the profile's outbound proxy, called once per bb-browser account
+     *  creation (the single choke point — invoke / open / ensureRuntime all funnel
+     *  through ensureAccount). A proxy change therefore takes effect on the next
+     *  account_create (after a reset). Returning null = direct egress. A thrown
+     *  error fails the account creation closed (better than egressing from the real
+     *  IP for a proxy-configured profile). */
+    resolveProxy?: (profileId: string) => Promise<BrowserProxyConfig | null> | BrowserProxyConfig | null;
 }
 interface BrowserInvokeRequest {
     profileId: string;

package/dist/clip-runtime/browser-profile-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-profile-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-manager.ts"],"names":[],"mappings":"AAMA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,KAAK,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5D,UAAU,4BAA4B;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7F;AAeD,UAAU,oBAAoB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AA0BD,qBAAa,qBAAqB;IAYpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAXjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAI9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAElB,IAAI,EAAE,4BAA4B;IAWzD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CtF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe/C,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBhE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB3B;;;;OAIG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInC,qEAAqE;YACvD,WAAW;YAWX,kBAAkB;YAYlB,kBAAkB;YAUlB,gBAAgB;YAOhB,oBAAoB;YAKpB,yBAAyB;YAezB,aAAa;YAWb,mBAAmB;IAqBjC;;;;;;;;;;;;OAYG;YACW,uBAAuB;IAiCrC,oFAAoF;YACtE,oBAAoB;YAuBpB,aAAa;YAiCb,qBAAqB;YAKrB,wBAAwB;YAQxB,kBAAkB;YAQlB,yBAAyB;IAqBvC,OAAO,CAAC,YAAY;YAON,WAAW;YAaX,YAAY;YAmBZ,kBAAkB;YAUlB,aAAa;YAUb,iBAAiB;YAsBjB,WAAW;YAmDX,IAAI;CA2BnB"}
+{"version":3,"file":"browser-profile-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-manager.ts"],"names":[],"mappings":"AAMA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,KAAK,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5D;;;kFAGkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,4BAA4B;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5F;;;;;8CAK0C;IAC1C,YAAY,CAAC,EAAE,CACb,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,kBAAkB,GAAG,IAAI,CAAC;CACrE;AAeD,UAAU,oBAAoB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AA0BD,qBAAa,qBAAqB;IAYpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAXjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAI9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAElB,IAAI,EAAE,4BAA4B;IAWzD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CtF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe/C,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBhE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB3B;;;;OAIG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInC,qEAAqE;YACvD,WAAW;YAWX,kBAAkB;YAYlB,kBAAkB;YAUlB,gBAAgB;YAOhB,oBAAoB;YAKpB,yBAAyB;YAezB,aAAa;YAWb,mBAAmB;IAqBjC;;;;;;;;;;;;OAYG;YACW,uBAAuB;IAiCrC,oFAAoF;YACtE,oBAAoB;YAuBpB,aAAa;YAsCb,qBAAqB;YAKrB,wBAAwB;YAQxB,kBAAkB;YAQlB,yBAAyB;IAqBvC,OAAO,CAAC,YAAY;YAON,WAAW;YAaX,YAAY;YAmBZ,kBAAkB;YAUlB,aAAa;YAUb,iBAAiB;YAsBjB,WAAW;YAmDX,IAAI;CA2BnB"}

package/dist/clip-runtime/browser-profile-manager.js

@@ -321,10 +321,15 @@ export class BrowserProfileManager {
                 if (!isBrowserAccountInfoUnauthenticatedError(err)) {
                     if (!isBrowserAccountNotFoundError(err))
                         throw err;
+                    // Resolve the proxy ONLY here, at the single account-creation choke point.
+                    // A thrown resolve fails closed (no account rather than direct egress for a
+                    // proxy-configured profile). bb-browser binds the proxy at account_create.
+                    const proxy = this.opts.resolveProxy ? await this.opts.resolveProxy(account) : null;
                     await this.sendCommand({
                         method: 'account_create',
                         account,
                         ...(accountUrl ? { accountUrl } : {}),
+                        ...proxyCreateFields(proxy),
                     });
                     accountCreated = true;
                 }
@@ -618,3 +623,15 @@ function resolveBbBrowserDaemonPath() {
 function randomToken() {
     return randomBytes(16).toString('hex');
 }
+/** Render a proxy config into bb-browser `account_create` fields (camelCase, the
+ *  bb-browser-pro 0.15 contract). Empty when there is no proxy → direct egress. */
+function proxyCreateFields(proxy) {
+    if (!proxy?.server)
+        return {};
+    const fields = { proxyServer: proxy.server };
+    if (proxy.username)
+        fields.proxyUsername = proxy.username;
+    if (proxy.password)
+        fields.proxyPassword = proxy.password;
+    return fields;
+}

package/dist/clip-runtime/index.d.ts

@@ -5,5 +5,6 @@ export { type ClipConfig, type ManifestCache, type CommandDetail, type ClipJson,
 export { ClipProvider, type ClipProviderOptions } from './clip-provider.js';
 export { HubClient, HubCommandError, type HubClientOptions, type ClipBinding, } from './hub-client.js';
 export { BrowserProfileManager } from './browser-profile-manager.js';
+export type { BrowserProxyConfig } from './browser-profile-manager.js';
 export { installClip, removeClip, parseSource, type InstallOptions, type InstallResult, } from './clip-installer.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/clip-runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,WAAW,EACX,YAAY,EACZ,YAAY,GACb,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,QAAQ,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EACL,SAAS,EACT,eAAe,EACf,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,WAAW,EACX,YAAY,EACZ,YAAY,GACb,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,QAAQ,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EACL,SAAS,EACT,eAAe,EACf,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,YAAY,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC"}

package/dist/supervisor.d.ts

@@ -57,6 +57,17 @@ export declare class DaemonSupervisor {
     private bootstrapWithRetry;
     private fullReconcile;
     private reconcileBrowserProfiles;
+    /**
+     * Resolve a profile's outbound proxy for bb-browser account creation (BYOC).
+     * Fetched fresh — account creation is rare (once per profile until reset), so a
+     * proxy edit applies on the next account_create. The mck_-authed machine list is
+     * the only path that carries proxy_password (for replay to bb-browser).
+     *
+     * Fails closed: a fetch failure or a vanished profile THROWS, so the manager never
+     * creates an account that would egress from the host's real IP for a
+     * proxy-configured profile (the caller reports `error` and retries next tick).
+     */
+    private resolveBrowserProfileProxy;
     /**
      * Detects a legacy flat state layout (no agents/ subdir) and migrates it
      * into the per-agent directory for the owning agent. Ownership is determined

package/dist/supervisor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../src/supervisor.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAeL,KAAK,YAAY,EAElB,MAAM,aAAa,CAAC;AASrB,OAAO,EAKL,KAAK,kBAAkB,EAExB,MAAM,aAAa,CAAC;AAIrB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAiBlD;;;;GAIG;AACH,iBAAS,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAa3E;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAyB5B;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IA0CzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IA3CtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqB;IAM3D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAoC;IAC3E,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAqC;IAC/E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,gBAAgB,CAAoB;IAG5C,OAAO,CAAC,sBAAsB,CAAQ;IAItC,OAAO,CAAC,sBAAsB,CAAuB;IAGrD,OAAO,CAAC,uBAAuB,CAAuB;IACtD,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,qBAAqB,CAAsC;IACnE,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,kBAAkB,CAA+B;IACzD,OAAO,CAAC,qBAAqB,CAA8B;IAI3D,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,YAAY,CAAuB;gBAGxB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,aAAa;IAGrC,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAIxC,yEAAyE;IACnE,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA0L7C,sEAAsE;IAChE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YA8Cb,kBAAkB;YAwClB,aAAa;YA0Db,wBAAwB;IAoCtC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;YA6CX,kBAAkB;YAqBlB,mBAAmB;YAgBnB,mBAAmB;YAmBnB,sBAAsB;YAwBtB,6BAA6B;IAoC3C,OAAO,CAAC,8BAA8B;IAMtC,OAAO,CAAC,uBAAuB;IAgB/B;;;;;OAKG;YACW,0BAA0B;IAiCxC,OAAO,CAAC,2BAA2B;YAIrB,cAAc;YAId,qBAAqB;YAgBrB,wBAAwB;IAoDtC,OAAO,CAAC,uBAAuB;IAU/B,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,uBAAuB;IAyB/B,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,mBAAmB;YAab,mBAAmB;IAyCjC,OAAO,CAAC,wBAAwB;YAelB,6BAA6B;IAqC3C,OAAO,CAAC,2BAA2B;IAYnC,OAAO,CAAC,wBAAwB;YAUlB,oBAAoB;IAmClC;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IASpB;;;;;;;;OAQG;YACW,sBAAsB;YA4CtB,kBAAkB;YAYlB,eAAe;YAcf,UAAU;YAoBV,cAAc;IAkE5B,OAAO,CAAC,UAAU;YA4GJ,cAAc;IAyB5B,OAAO,CAAC,0BAA0B;CAkCnC"}
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../src/supervisor.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAeL,KAAK,YAAY,EAElB,MAAM,aAAa,CAAC;AAUrB,OAAO,EAKL,KAAK,kBAAkB,EAExB,MAAM,aAAa,CAAC;AAIrB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAiBlD;;;;GAIG;AACH,iBAAS,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAa3E;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAyB5B;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IA0CzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IA3CtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqB;IAM3D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAoC;IAC3E,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAqC;IAC/E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,gBAAgB,CAAoB;IAG5C,OAAO,CAAC,sBAAsB,CAAQ;IAItC,OAAO,CAAC,sBAAsB,CAAuB;IAGrD,OAAO,CAAC,uBAAuB,CAAuB;IACtD,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,qBAAqB,CAAsC;IACnE,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,kBAAkB,CAA+B;IACzD,OAAO,CAAC,qBAAqB,CAA8B;IAI3D,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,YAAY,CAAuB;gBAGxB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,aAAa;IAGrC,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAIxC,yEAAyE;IACnE,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA2L7C,sEAAsE;IAChE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YA8Cb,kBAAkB;YAwClB,aAAa;YA0Db,wBAAwB;IAkCtC;;;;;;;;;OASG;YACW,0BAA0B;IAkBxC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;YA6CX,kBAAkB;YAqBlB,mBAAmB;YAgBnB,mBAAmB;YAmBnB,sBAAsB;YAwBtB,6BAA6B;IAoC3C,OAAO,CAAC,8BAA8B;IAMtC,OAAO,CAAC,uBAAuB;IAgB/B;;;;;OAKG;YACW,0BAA0B;IAiCxC,OAAO,CAAC,2BAA2B;YAIrB,cAAc;YAId,qBAAqB;YAgBrB,wBAAwB;IAoDtC,OAAO,CAAC,uBAAuB;IAU/B,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,uBAAuB;IAyB/B,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,mBAAmB;YAab,mBAAmB;IAyCjC,OAAO,CAAC,wBAAwB;YAelB,6BAA6B;IAqC3C,OAAO,CAAC,2BAA2B;IAYnC,OAAO,CAAC,wBAAwB;YAUlB,oBAAoB;IAmClC;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IASpB;;;;;;;;OAQG;YACW,sBAAsB;YA4CtB,kBAAkB;YAYlB,eAAe;YAcf,UAAU;YAoBV,cAAc;IAkE5B,OAAO,CAAC,UAAU;YA4GJ,cAAc;IAyB5B,OAAO,CAAC,0BAA0B;CAkCnC"}

package/dist/supervisor.js

@@ -133,6 +133,7 @@ export class DaemonSupervisor {
                         .reportBrowserProfileStatus(profileId, status, errorMsg)
                         .catch((err) => this.log.warn(`browser profile status report failed: ${String(err)}`));
                 },
+                resolveProxy: (profileId) => this.resolveBrowserProfileProxy(profileId),
             });
             this.clipManager = new ClipProcessManager({
                 clipsDir: path.join(this.config.rootStateDir, 'clips'),
@@ -423,6 +424,30 @@ export class DaemonSupervisor {
             }
         }
     }
+    /**
+     * Resolve a profile's outbound proxy for bb-browser account creation (BYOC).
+     * Fetched fresh — account creation is rare (once per profile until reset), so a
+     * proxy edit applies on the next account_create. The mck_-authed machine list is
+     * the only path that carries proxy_password (for replay to bb-browser).
+     *
+     * Fails closed: a fetch failure or a vanished profile THROWS, so the manager never
+     * creates an account that would egress from the host's real IP for a
+     * proxy-configured profile (the caller reports `error` and retries next tick).
+     */
+    async resolveBrowserProfileProxy(profileId) {
+        const profiles = await this.client.listMachineBrowserProfiles();
+        const profile = profiles.find((p) => p.id === profileId);
+        if (!profile) {
+            throw new Error(`browser profile ${profileId} not found; refusing to create a bb-browser account without its proxy config`);
+        }
+        if (!profile.proxy_server)
+            return null;
+        return {
+            server: profile.proxy_server,
+            username: profile.proxy_username ?? undefined,
+            password: profile.proxy_password ?? undefined,
+        };
+    }
     // ---- Flat layout migration (self-hosted → daemon) ----
     /**
      * Detects a legacy flat state layout (no agents/ subdir) and migrates it

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/daemon",
-  "version": "1.36.0",
+  "version": "1.36.1",
   "description": "Parall local agent runtime — daemon supervisor + bridge runtimes, bundled as standalone JS files",
   "license": "MIT",
   "repository": {
@@ -32,11 +32,11 @@
   "dependencies": {
     "@aws-sdk/client-s3": "3.984.0",
     "@pinixai/bb-browser-pro": "0.15.0",
-    "@parall/sdk": "1.36.0",
-    "@parall/claude-agent": "1.36.0",
-    "@parall/openclaw-agent": "1.36.0",
-    "@parall/agent-core": "1.36.0",
-    "@parall/codex-agent": "1.36.0"
+    "@parall/sdk": "1.36.1",
+    "@parall/claude-agent": "1.36.1",
+    "@parall/agent-core": "1.36.1",
+    "@parall/codex-agent": "1.36.1",
+    "@parall/openclaw-agent": "1.36.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",