@parall/daemon 1.36.1 → 1.37.0

package/bundle/parall-claude-agent.js

@@ -26647,6 +26647,17 @@ function buildEventBody(event) {
     if (event.attachedUri)
       lines.push(`[Attached: ${sanitizeMeta(event.attachedUri)}]`);
     lines.push("", event.body);
+  } else if (event.type === "channel_message") {
+    lines.push(`[Event: channel.message]`);
+    const providerLabel = sanitizeMeta(event.channelProvider ?? "external IM");
+    const convLabel = event.channelExternalConversationId ? `${sanitizeMeta(event.channelExternalConversationId)} (${sanitizeMeta(event.channelConversationType ?? "conversation")})` : sanitizeMeta(event.channelConversationType ?? "conversation");
+    lines.push(`[Channel: ${providerLabel} | conversation: ${convLabel}]`);
+    lines.push(`[From: ${sanitizeMeta(event.senderName)} (external user, not a Parall member)]`);
+    if (event.channelExternalMessageId) {
+      lines.push(`[External message ID: ${sanitizeMeta(event.channelExternalMessageId)}]`);
+    }
+    lines.push(`[Audience: this conversation lives on ${providerLabel}, OUTSIDE Parall. Readers cannot open prll:// links, Parall cards, or internal attachments \u2014 never include them in replies. Write plain conversational text.]`);
+    lines.push("", event.body);
   } else if (event.type === "external_trigger") {
     lines.push(`[Event: external.trigger]`);
     lines.push(`[Trigger: prll://${event.targetId}]`);
@@ -26688,7 +26699,7 @@ function buildSendMessageHint(event) {
   }
   if (event.targetId.startsWith("cht_")) {
     return `
-<system-reminder>To reply, run: \`parall messages send prll://${event.targetId} --text "..."\` \u2014 your plain text output is not delivered to the chat.</system-reminder>`;
+<system-reminder>To reply, run \`parall messages send prll://${event.targetId} --text-file - <<'EOF'\` \u2026 \`EOF\` \u2014 the quoted heredoc keeps \`$\`, backticks and apostrophes literal (plain \`--text "$1,000"\` sends \`,000\`). Your plain text output is not delivered to the chat.</system-reminder>`;
   }
   if (event.targetId.startsWith("tsk_")) {
     return `
@@ -26697,6 +26708,14 @@ function buildSendMessageHint(event) {
   if (event.targetId.startsWith("sch_")) {
     return `
 <system-reminder>To communicate, use the CLI: \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
+  }
+  if (event.type === "channel_message") {
+    const clipLabel = event.channelProvider ? `the \`${event.channelProvider}\` clip's` : "your channel provider clip's";
+    const apiLabel = event.channelProvider ?? "external platform";
+    const target = event.channelExternalConversationId ? `{"chat_id": "${event.channelExternalConversationId}", "text": "..."}` : `{"chat_id": "<conversation id>", "text": "..."}`;
+    const threadAlt = event.channelExternalMessageId ? ` To reply in-thread to this specific message, use {"message_id": "${event.channelExternalMessageId}", "text": "..."} instead.` : "";
+    return `
+<system-reminder>To reply, invoke ${clipLabel} \`send_message\` command with ${target} \u2014 your plain text output is NOT delivered to the external conversation.${threadAlt} The same clip's \`call\` command reaches the wider ${apiLabel} API when needed.</system-reminder>`;
   }
   if (event.type === "external_trigger" || event.targetId.startsWith("xtr_")) {
     return `
@@ -26904,6 +26923,8 @@ Or upload first and reuse across chats:
     parall messages send prll://cht_aaa --attachment att_yyy --text "Report"
     parall messages send prll://cht_bbb --attachment att_yyy --text "FYI"
 
+The \`--text\` captions above are safe short literals. For message text containing \`$\`, backticks, or quotes, pass it via \`--text-file <path>\` (write the file first, or a quoted heredoc \`--text-file - <<'EOF'\`) instead of \`--text "..."\` \u2014 inside double quotes the shell turns \`$1,000\` into \`,000\` and executes \`$(...)\`.
+
 ### When to reference
 
 - **Origin** \u2014 always link the message or task that triggered your work
@@ -26954,11 +26975,21 @@ To say something in a chat, you **must** invoke the Parall CLI via your shell/ex
 
 All outbound interactions go through the \`parall\` CLI. Credentials are pre-injected as environment variables \u2014 no setup needed. If \`parall\` is not on PATH, use \`npx --yes @parall/cli@latest\` instead.
 
-- \`parall messages send prll://cht_xxx --text "..."\` \u2014 reply into the triggering chat
-- \`parall dm prll://usr_xxx --text "..." [--no-reply]\` \u2014 direct message another user
+- \`parall messages send prll://cht_xxx --text-file -\` \u2014 reply into the triggering chat (pipe the body via a quoted heredoc; see Shell-safety below)
+- \`parall dm prll://usr_xxx --text-file - [--no-reply]\` \u2014 direct message another user
 - \`parall tasks update prll://tsk_xxx --status in_progress\` \u2014 task state
 - \`parall no-reply [--reason "..."]\` \u2014 explicitly declare this turn silent (audit signal; not required for silence, just clarifies intent)
 
+**Shell-safety \u2014 never wrap real message content in double quotes.** Your command runs in a shell, which expands \`$\`, backticks, and \`$(...)\` inside \`"..."\` before the CLI sees them: \`--text "That costs $1,000"\` sends \`That costs ,000\`, and \`--text "$(cmd)"\` executes \`cmd\`. Pass message bodies via \`--text-file <path>\` (write the file first \u2014 no shell touches it) or a quoted heredoc that disables expansion:
+
+\`\`\`bash
+parall messages send prll://cht_xxx --text-file - <<'EOF'
+That costs $1,000, and $(whoami) stays literal. I'm on it.
+EOF
+\`\`\`
+
+Keep \`--text "..."\` for short literals with no \`$\`, backtick, or apostrophe.
+
 The bridge injects Parall context via environment variables. The static credentials \`PRLL_API_URL\`, \`PRLL_API_KEY\`, and \`PRLL_ORG_ID\` are always set. \`PRLL_CONTEXT_FILE\` points to a per-session JSON file that the gateway updates each dispatch with \`session_id\`, \`chat_id\`, \`trigger_message_id\`, \`no_reply\`, and \`step_id\` (updated per tool call). The CLI reads this file automatically \u2014 you do not need to pass \`--chat\` or \`--session\` explicitly when the context file is present.
 
 ## Attachments
@@ -27003,7 +27034,7 @@ Messages may arrive with a \`[Thread: prll://msg_xxx]\` line in the event block,
 
 ### CLI usage
 - The \`msg_xxx\` from the \`[Thread: prll://msg_xxx]\` line is the thread root ID \u2014 pass it as \`--thread-root-id\`
-- Reply in a thread: \`parall messages send <chatId> --text "..." --thread-root-id <msgId>\`
+- Reply in a thread: \`parall messages send <chatId> --text-file /tmp/reply.md --thread-root-id <msgId>\`
 - Read thread replies: \`parall messages list <chatId> --thread-root-id <msgId>\`
 
 ### Thread etiquette
@@ -27104,6 +27135,7 @@ var ENDPOINTS = {
   // Org-scoped
   ORG: (orgId) => `${API_BASE}/orgs/${orgId}`,
   ORG_MEMBERS: (orgId) => `${API_BASE}/orgs/${orgId}/members`,
+  ORG_MEMBERS_FORMER: (orgId) => `${API_BASE}/orgs/${orgId}/members/former`,
   TEAMS: (orgId) => `${API_BASE}/orgs/${orgId}/teams`,
   ORG_MEMBERS_ONLINE: (orgId) => `${API_BASE}/orgs/${orgId}/members/online`,
   ORG_MEMBER: (orgId, userId) => `${API_BASE}/orgs/${orgId}/members/${userId}`,
@@ -27253,6 +27285,19 @@ var ENDPOINTS = {
   EXTERNAL_TRIGGER: (orgId, triggerId) => `${API_BASE}/orgs/${orgId}/external-triggers/${triggerId}`,
   EXTERNAL_TRIGGER_RUNS: (orgId) => `${API_BASE}/orgs/${orgId}/external-trigger-runs`,
   EXTERNAL_TRIGGER_RUN: (orgId, runId) => `${API_BASE}/orgs/${orgId}/external-trigger-runs/${runId}`,
+  // External IM channel (org-scoped, platform-mediated Feishu/Slack)
+  CHANNEL_CONNECTIONS: (orgId) => `${API_BASE}/orgs/${orgId}/channel-connections`,
+  CHANNEL_CONNECTION: (orgId, connectionId) => `${API_BASE}/orgs/${orgId}/channel-connections/${connectionId}`,
+  CHANNEL_CONNECTION_CREDENTIALS: (orgId, connectionId) => `${API_BASE}/orgs/${orgId}/channel-connections/${connectionId}/credentials`,
+  CHANNEL_CONNECTION_INGRESS_TOKEN_REGENERATE: (orgId, connectionId) => `${API_BASE}/orgs/${orgId}/channel-connections/${connectionId}/ingress-token/regenerate`,
+  CHANNEL_CONNECTION_CONVERSATIONS: (orgId, connectionId) => `${API_BASE}/orgs/${orgId}/channel-connections/${connectionId}/conversations`,
+  CHANNEL_CONVERSATION: (orgId, conversationId) => `${API_BASE}/orgs/${orgId}/channel-conversations/${conversationId}`,
+  CHANNEL_CONVERSATION_MESSAGES: (orgId, conversationId) => `${API_BASE}/orgs/${orgId}/channel-conversations/${conversationId}/messages`,
+  CHANNEL_CONVERSATION_SESSION: (orgId, conversationId) => `${API_BASE}/orgs/${orgId}/channel-conversations/${conversationId}/session`,
+  CHANNEL_MESSAGE: (orgId, messageId) => `${API_BASE}/orgs/${orgId}/channel-messages/${messageId}`,
+  CHANNEL_PROVISIONING: (orgId) => `${API_BASE}/orgs/${orgId}/channel-provisioning`,
+  CHANNEL_PROVISIONING_SESSION: (orgId, sessionId) => `${API_BASE}/orgs/${orgId}/channel-provisioning/${sessionId}`,
+  CHANNEL_PROVISIONING_CANCEL: (orgId, sessionId) => `${API_BASE}/orgs/${orgId}/channel-provisioning/${sessionId}/cancel`,
   // Invitations (org-scoped, admin)
   ORG_INVITATIONS: (orgId) => `${API_BASE}/orgs/${orgId}/invitations`,
   ORG_INVITATION: (orgId, invId) => `${API_BASE}/orgs/${orgId}/invitations/${invId}`,
@@ -27270,9 +27315,16 @@ var ENDPOINTS = {
   INVITE_LINK_JOIN: `${API_BASE}/invite-link/join`,
   // Wikis (org-scoped, served by wiki-service)
   WIKIS: (orgId) => `${WIKI_BASE}/orgs/${orgId}/wikis`,
+  // Recycle bin — soft-deleted wikis (owner only). Must precede WIKI in the
+  // backend router so `deleted` isn't captured as a {wikiId}; the SDK builder
+  // is just a string.
+  WIKIS_DELETED: (orgId) => `${WIKI_BASE}/orgs/${orgId}/wikis/deleted`,
+  // Detail URL — also reused for DELETE (soft-delete) and `${WIKI}/restore`.
   WIKI: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}`,
+  WIKI_RESTORE: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/restore`,
   WIKI_TREE: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/tree`,
   WIKI_BLOB: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/blob`,
+  WIKI_COPY: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/copy`,
   WIKI_NODE_SECTIONS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/node-sections`,
   WIKI_SEARCH: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/search`,
   WIKI_PAGE_INDEX: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/page-index`,
@@ -27355,6 +27407,14 @@ var ENDPOINTS = {
   BILLING_AUTO_RELOAD: (orgId) => `${API_BASE}/orgs/${orgId}/billing/auto-reload`,
   BILLING_SETUP_INTENT: (orgId) => `${API_BASE}/orgs/${orgId}/billing/setup-intent`,
   COMPUTE_PRICING: () => `${API_BASE}/billing/compute-pricing`,
+  // Runtime capability table (public, no auth) — SSOT for the create/settings
+  // interlock: per-runtime compute modes, native model family, cross-family
+  // availability, and recommended model.
+  RUNTIMES: () => `${API_BASE}/runtimes`,
+  // Model catalog (public, no auth) — served from the server's DB-backed
+  // snapshot. Optional include_model keeps an agent's pinned hidden legacy
+  // model representable in settings pickers.
+  MODELS: (includeModel) => includeModel ? `${API_BASE}/models?include_model=${encodeURIComponent(includeModel)}` : `${API_BASE}/models`,
   // ADMIN_GRANTS intentionally NOT exported here — it sits under the
   // unauthenticated `/internal/admin/*` surface and must not bleed into the
   // public SDK. Admin dashboard hits the URL directly from its own client.
@@ -27367,6 +27427,7 @@ var ENDPOINTS = {
   AGENT_CLIP: (orgId, agentId, clipId) => `${CLIP_BASE}/orgs/${orgId}/agents/${agentId}/clips/${clipId}`,
   CLIP_INVOKE: (orgId) => `${CLIP_BASE}/orgs/${orgId}/invoke`,
   CLIP_ONLINE: (orgId) => `${CLIP_BASE}/orgs/${orgId}/online`,
+  BROWSER_RUNTIME_STATUS: (orgId) => `${CLIP_BASE}/orgs/${orgId}/browser-runtime/status`,
   BROWSER_PROFILES: (orgId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles`,
   BROWSER_PROFILE: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}`,
   BROWSER_PROFILE_OPEN: (orgId, profileId) => `${CLIP_BASE}/orgs/${orgId}/browser-profiles/${profileId}/open`,
@@ -27420,10 +27481,13 @@ var WS_EVENTS = {
   INVITATION_REVOKED: "invitation.revoked",
   ORG_JOIN_REQUEST_NEW: "org.join_request.new",
   ORG_INVITE_LINK_JOINED: "org.invite_link.joined",
+  ORG_MEMBER_REMOVED: "org.member.removed",
   AGENT_CONFIG_UPDATE: "agent_config.update",
   PRESENCE_UPDATE: "presence.update",
   WIKI_CHANGESET_CREATED: "wiki.changeset.created",
   WIKI_CHANGESET_UPDATED: "wiki.changeset.updated",
+  WIKI_DELETED: "wiki.deleted",
+  WIKI_RESTORED: "wiki.restored",
   COMMENT_CREATED: "comment.created",
   COMMENT_UPDATED: "comment.updated",
   COMMENT_DELETED: "comment.deleted",
@@ -27451,6 +27515,7 @@ var WS_EVENTS = {
   MACHINE_FILESYSTEM_BROWSE: "machine.filesystem.browse",
   MACHINE_UPDATE: "machine.update",
   MACHINE_CONFIG_UPDATED: "machine.config.updated",
+  MACHINE_AGENT_CONFIG_UPDATED: "machine.agent_config.updated",
   MACHINE_CLIP_SYNC: "machine.clip.sync",
   MACHINE_BROWSER_PROFILE_LIFECYCLE: "machine.browser_profile.lifecycle",
   MACHINE_BROWSER_PROFILE_VIEWER: "machine.browser_profile.viewer",
@@ -27790,6 +27855,13 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.ORG_MEMBERS(orgId));
     return res.data;
   }
+  /** User IDs of soft-removed (former) org members — for marking their avatar /
+   *  name as "left" where dormant relations still surface them (DMs, task
+   *  assignees, message history). */
+  async getFormerMemberIds(orgId) {
+    const res = await this.request("GET", ENDPOINTS.ORG_MEMBERS_FORMER(orgId));
+    return res.user_ids ?? [];
+  }
   async getTeams(orgId) {
     const res = await this.request("GET", ENDPOINTS.TEAMS(orgId));
     return res.data;
@@ -28278,20 +28350,25 @@ var ParallClient = class _ParallClient {
     return res.data;
   }
   /** `POST /machines/me/browser-profiles/{profileId}/status` — report runtime status. */
-  async reportBrowserProfileStatus(profileId, status, errorMsg) {
+  async reportBrowserProfileStatus(profileId, status, errorMsg, generation) {
     await this.request("POST", ENDPOINTS.MACHINES_ME_BROWSER_PROFILE_STATUS(profileId), {
       status,
-      ...errorMsg ? { error_msg: errorMsg } : {}
+      ...errorMsg ? { error_msg: errorMsg } : {},
+      ...generation !== void 0 ? { generation } : {}
     });
   }
   /**
    * `POST /machines/me/health` — bump the Machine's `updated_at` to now and
-   * report daemon state. The daemon should call this on a fixed cadence (e.g.
-   * every 30s) so an external observer can detect a wedged supervisor. Both
+   * report daemon state. The daemon calls this on startup and again whenever
+   * periodic runtime re-detection produces a CHANGED result (there is no
+   * fixed-cadence keepalive loop today — steady state posts nothing). All
    * fields are optional and only persisted when changed:
    *  - `daemonVersion` — the running bundle/launcher version.
    *  - `selfUpdateCapable` — whether the daemon can act on a machine.update
    *    signal (true under a service manager, false for bare `npx` foreground).
+   *  - `detectedRuntimes` — runtime CLIs found on the host. Omitted = no
+   *    report this beat (server keeps the stored value); [] = detection ran
+   *    and found nothing (server clears to empty).
    */
   async postMachineHeartbeat(opts) {
     const body = {};
@@ -28299,6 +28376,8 @@ var ParallClient = class _ParallClient {
       body.daemon_version = opts.daemonVersion;
     if (opts?.selfUpdateCapable !== void 0)
       body.self_update_capable = opts.selfUpdateCapable;
+    if (opts?.detectedRuntimes !== void 0)
+      body.detected_runtimes = opts.detectedRuntimes;
     return this.request("POST", ENDPOINTS.MACHINES_ME_HEALTH, Object.keys(body).length > 0 ? body : void 0);
   }
   async reportAgentWorkspaceState(agentId, state) {
@@ -28617,6 +28696,59 @@ var ParallClient = class _ParallClient {
   async deleteExternalConnection(orgId, connectionId) {
     return this.request("DELETE", ENDPOINTS.EXTERNAL_CONNECTION(orgId, connectionId));
   }
+  // ---- External IM channel (org-scoped) ----
+  async createChannelConnection(orgId, input) {
+    return this.request("POST", ENDPOINTS.CHANNEL_CONNECTIONS(orgId), input);
+  }
+  async listChannelConnections(orgId) {
+    return this.request("GET", ENDPOINTS.CHANNEL_CONNECTIONS(orgId));
+  }
+  async getChannelConnection(orgId, connectionId) {
+    return this.request("GET", ENDPOINTS.CHANNEL_CONNECTION(orgId, connectionId));
+  }
+  async updateChannelConnection(orgId, connectionId, patch) {
+    return this.request("PATCH", ENDPOINTS.CHANNEL_CONNECTION(orgId, connectionId), patch);
+  }
+  async archiveChannelConnection(orgId, connectionId) {
+    return this.request("DELETE", ENDPOINTS.CHANNEL_CONNECTION(orgId, connectionId));
+  }
+  async deliverChannelCredentials(orgId, connectionId, credentials) {
+    return this.request("POST", ENDPOINTS.CHANNEL_CONNECTION_CREDENTIALS(orgId, connectionId), credentials);
+  }
+  async regenerateChannelIngressToken(orgId, connectionId) {
+    return this.request("POST", ENDPOINTS.CHANNEL_CONNECTION_INGRESS_TOKEN_REGENERATE(orgId, connectionId));
+  }
+  /** Start a Feishu one-click provisioning session (device flow QR). */
+  async initiateChannelProvisioning(orgId, input) {
+    return this.request("POST", ENDPOINTS.CHANNEL_PROVISIONING(orgId), input);
+  }
+  /**
+   * Lazy status poll — server-side this may forward one provider poll, so
+   * call it at the session's `poll_interval_seconds` cadence, not faster.
+   */
+  async getChannelProvisioningSession(orgId, sessionId) {
+    return this.request("GET", ENDPOINTS.CHANNEL_PROVISIONING_SESSION(orgId, sessionId));
+  }
+  async cancelChannelProvisioning(orgId, sessionId) {
+    return this.request("POST", ENDPOINTS.CHANNEL_PROVISIONING_CANCEL(orgId, sessionId));
+  }
+  async listChannelConversations(orgId, connectionId) {
+    return this.request("GET", ENDPOINTS.CHANNEL_CONNECTION_CONVERSATIONS(orgId, connectionId));
+  }
+  async getChannelConversation(orgId, conversationId) {
+    return this.request("GET", ENDPOINTS.CHANNEL_CONVERSATION(orgId, conversationId));
+  }
+  async listChannelConversationMessages(orgId, conversationId, limit) {
+    return this.request("GET", ENDPOINTS.CHANNEL_CONVERSATION_MESSAGES(orgId, conversationId), void 0, { limit });
+  }
+  async setChannelConversationSession(orgId, conversationId, agentSessionId) {
+    return this.request("PATCH", ENDPOINTS.CHANNEL_CONVERSATION_SESSION(orgId, conversationId), {
+      agent_session_id: agentSessionId
+    });
+  }
+  async getChannelMessage(orgId, messageId) {
+    return this.request("GET", ENDPOINTS.CHANNEL_MESSAGE(orgId, messageId));
+  }
   async getExternalTriggerSchema(orgId, connectionId) {
     return this.request("GET", ENDPOINTS.EXTERNAL_TRIGGER_SCHEMA(orgId, connectionId));
   }
@@ -28658,6 +28790,23 @@ var ParallClient = class _ParallClient {
   async getWiki(orgId, wikiId) {
     return this.request("GET", ENDPOINTS.WIKI(orgId, wikiId));
   }
+  /** Soft-delete an entire wiki (org owner only; the default wiki is
+   *  protected → 403 WIKI_PROTECTED). Returns the deleted wiki. Recoverable
+   *  via restoreWiki within the retention window. */
+  async deleteWiki(orgId, wikiId) {
+    return this.request("DELETE", ENDPOINTS.WIKI(orgId, wikiId));
+  }
+  /** Restore a soft-deleted wiki (org owner only). 409 WIKI_PURGE_STARTED once
+   *  purge has been claimed (no longer restorable), or 404 once the row is gone.
+   *  Returns the restored wiki. */
+  async restoreWiki(orgId, wikiId) {
+    return this.request("POST", ENDPOINTS.WIKI_RESTORE(orgId, wikiId));
+  }
+  /** Recycle bin — list soft-deleted wikis for the org (owner only). */
+  async getDeletedWikis(orgId) {
+    const res = await this.request("GET", ENDPOINTS.WIKIS_DELETED(orgId));
+    return res.data;
+  }
   async getWikiTree(orgId, wikiId, params) {
     return this.request("GET", ENDPOINTS.WIKI_TREE(orgId, wikiId), void 0, params);
   }
@@ -28691,6 +28840,15 @@ var ParallClient = class _ParallClient {
       blob.signed_url = this.absoluteMediaUrl(blob.signed_url);
     return blob;
   }
+  /**
+   * Copy one wiki file to another path as an independent snapshot (no sync).
+   * Used to "share a private file out": copy a file from the caller's personal
+   * namespace (`users/{userId}/…`) into the public wiki, leaving the original
+   * untouched. 409 `FILE_EXISTS` if `dest_path` already exists.
+   */
+  async copyWikiFile(orgId, wikiId, req) {
+    return this.request("POST", ENDPOINTS.WIKI_COPY(orgId, wikiId), req);
+  }
   async getWikiNodeSections(orgId, wikiId, params) {
     return this.request("GET", ENDPOINTS.WIKI_NODE_SECTIONS(orgId, wikiId), void 0, params);
   }
@@ -28964,6 +29122,19 @@ var ParallClient = class _ParallClient {
     const resp = await this.request("GET", ENDPOINTS.COMPUTE_PRICING());
     return resp.data;
   }
+  /** Runtime capability table (public) — SSOT for the create/settings interlock. */
+  async getRuntimes() {
+    const resp = await this.request("GET", ENDPOINTS.RUNTIMES());
+    return resp.data;
+  }
+  /**
+   * Platform model catalog (public) — DB-backed, replaces the compile-time
+   * PLATFORM_MODELS constant. Pass includeModel to keep an agent's pinned
+   * hidden legacy model representable (settings picker).
+   */
+  async getModels(includeModel) {
+    return this.request("GET", ENDPOINTS.MODELS(includeModel));
+  }
   // ---- Clips ----
   async listClips(orgId) {
     const resp = await this.request("GET", ENDPOINTS.CLIPS(orgId));
@@ -29008,6 +29179,11 @@ var ParallClient = class _ParallClient {
     const resp = await this.request("GET", ENDPOINTS.CLIP_ONLINE(orgId));
     return resp.data;
   }
+  /** Deployment-wide hosted browser runtime availability — drives whether the
+   *  create UI offers the platform-hosted placement. Fail-closed server-side. */
+  async getBrowserRuntimeStatus(orgId) {
+    return this.request("GET", ENDPOINTS.BROWSER_RUNTIME_STATUS(orgId));
+  }
   /** Org-wide browser-profile discovery list. Returns the sanitized
    *  {@link BrowserProfileListItem} shape (not the full domain model), each row
    *  carrying a per-viewer `can_open` control hint. */
@@ -29667,6 +29843,9 @@ function resolveStepTarget(event) {
   if (event.type === "external_trigger" || event.targetId.startsWith("xtr_")) {
     return { target_type: "external_trigger", target_id: event.targetId };
   }
+  if (event.type === "channel_message" || event.targetId.startsWith("chv_")) {
+    return { target_type: "channel_conversation", target_id: event.targetId };
+  }
   if (event.type === "wiki_comment") {
     return { target_type: "wiki", target_id: event.targetId || void 0 };
   }
@@ -29710,6 +29889,9 @@ var ParallAgentGateway = class {
   opts;
   chatInfoMap = /* @__PURE__ */ new Map();
   dispatchedTasks = /* @__PURE__ */ new Set();
+  // connection id → provider alias, for channel_message prompt labeling
+  // (stable mapping; avoids one connection fetch per inbound message).
+  channelConnectionProviders = /* @__PURE__ */ new Map();
   dispatchedMessages = /* @__PURE__ */ new Set();
   forkStates = /* @__PURE__ */ new Map();
   dispatchState = {
@@ -29883,6 +30065,18 @@ var ParallAgentGateway = class {
         } catch (err) {
           this.opts.log?.error(`external trigger dispatch failed for ${data.source_id}: ${String(err)}`);
         }
+      } else if (data.event_type === "channel_message") {
+        if (!data.source_id)
+          return;
+        try {
+          const dispatched = await this.fetchAndHandleChannelMessage(data.source_id);
+          if (dispatched) {
+            this.opts.client.ackDispatchByID(this.opts.config.org_id, data.id).catch(() => {
+            });
+          }
+        } catch (err) {
+          this.opts.log?.error(`channel message dispatch failed for ${data.source_id}: ${String(err)}`);
+        }
       } else if (data.event_type === "approval_decided") {
         if (!data.source_id)
           return;
@@ -29961,12 +30155,17 @@ var ParallAgentGateway = class {
         target_type: target.target_type,
         target_id: target.target_id,
         content: {
-          trigger_type: event.type === "task" ? "task_assign" : event.type === "task_comment" ? "task_comment" : event.type === "wiki_comment" ? "wiki_comment" : event.type === "schedule" ? "schedule_fire" : event.type === "external_trigger" ? "external_trigger" : event.type === "approval" ? "approval_decided" : "mention",
+          trigger_type: event.type === "task" ? "task_assign" : event.type === "task_comment" ? "task_comment" : event.type === "wiki_comment" ? "wiki_comment" : event.type === "schedule" ? "schedule_fire" : event.type === "external_trigger" ? "external_trigger" : event.type === "channel_message" ? "channel_message" : event.type === "approval" ? "approval_decided" : "mention",
           trigger_ref: event.type === "task" ? { task_id: event.targetId } : event.type === "task_comment" ? { comment_id: event.messageId, task_id: event.targetId } : event.type === "wiki_comment" ? { comment_id: event.messageId, target_uri: event.replyTargetUri } : event.type === "schedule" ? { schedule_id: event.targetId, run_id: event.messageId } : event.type === "external_trigger" ? {
             trigger_id: event.targetId,
             run_id: event.messageId,
             connection_id: event.externalConnectionId,
             ingress_event_id: event.externalIngressEventId
+          } : event.type === "channel_message" ? {
+            conversation_id: event.targetId,
+            channel_message_id: event.messageId,
+            provider: event.channelProvider,
+            external_conversation_id: event.channelExternalConversationId
           } : event.type === "approval" ? { approval_id: event.messageId } : { message_id: event.messageId },
           sender_id: event.senderId,
           sender_name: event.senderName,
@@ -30217,7 +30416,15 @@ var ParallAgentGateway = class {
           context: dispatchContext
         })) {
           if (runtimeEvent.type === "runtime_session") {
+            const priorAgentSessionId = binding?.agentSessionId;
             binding = await this.bindRuntimeSession(sessionKey, runtimeEvent, contextFilePath);
+            if (event.targetType === "channel_conversation" && binding.agentSessionId !== priorAgentSessionId) {
+              try {
+                await this.opts.client.setChannelConversationSession(this.opts.config.org_id, event.targetId, binding.agentSessionId);
+              } catch (err) {
+                this.opts.log?.warn(`failed to record session mapping for channel conversation ${event.targetId}: ${String(err)}`);
+              }
+            }
             if (!inputStepsCreated) {
               if (earlierEvents.length > 0) {
                 await this.createInputStepsForEarlierEvents(binding.agentSessionId, earlierEvents);
@@ -31020,6 +31227,75 @@ var ParallAgentGateway = class {
       return true;
     return this.handleExternalTriggerRun(run);
   }
+  // fetchAndHandleChannelMessage resolves a channel_message dispatch to its
+  // durable ChannelMessage + conversation and hands it to the inbound
+  // pipeline. targetId = the ChannelConversation id, so per-conversation
+  // multi-turn continuity rides the same per-target session mechanics as
+  // chats. Design: docs/engineering-design/external-im-channel-design.md.
+  async fetchAndHandleChannelMessage(messageId) {
+    if (this.shuttingDown)
+      return false;
+    const claimKey = `channel_message:${messageId}`;
+    if (!this.tryClaimMessage(claimKey))
+      return false;
+    let msg = null;
+    let conv = null;
+    try {
+      msg = await this.opts.client.getChannelMessage(this.opts.config.org_id, messageId);
+      conv = await this.opts.client.getChannelConversation(this.opts.config.org_id, msg.conversation_id);
+    } catch (err) {
+      const status = err?.status;
+      if (status === 404) {
+        this.opts.log?.warn(`channel message ${messageId} not accessible (404), acking stale dispatch`);
+        return true;
+      }
+      this.dispatchedMessages.delete(claimKey);
+      this.opts.log?.warn(`channel message fetch failed for ${messageId}, leaving pending: ${String(err)}`);
+      return false;
+    }
+    if (!msg || !conv) {
+      return true;
+    }
+    this.opts.log?.info(`channel message: ${msg.id} (conversation ${conv.id})`);
+    let provider = this.channelConnectionProviders.get(conv.connection_id);
+    if (!provider) {
+      try {
+        const connection = await this.opts.client.getChannelConnection(this.opts.config.org_id, conv.connection_id);
+        provider = connection.provider;
+        this.channelConnectionProviders.set(conv.connection_id, provider);
+      } catch {
+        provider = void 0;
+      }
+    }
+    const event = {
+      type: "channel_message",
+      targetId: conv.id,
+      targetName: conv.external_user_name || conv.external_conversation_id,
+      targetType: "channel_conversation",
+      senderId: msg.external_user_id || "external",
+      senderName: msg.external_user_name || msg.external_user_id || "external user",
+      messageId: msg.id,
+      body: msg.text,
+      sentAt: msg.received_at,
+      channelProvider: provider,
+      channelConversationType: conv.conversation_type || void 0,
+      channelExternalConversationId: conv.external_conversation_id,
+      channelExternalMessageId: msg.external_message_id,
+      ackSourceType: "channel_message",
+      ackSourceId: msg.id
+    };
+    let dispatched;
+    try {
+      dispatched = await this.handleInboundEvent(event);
+    } catch (err) {
+      this.dispatchedMessages.delete(claimKey);
+      throw err;
+    }
+    if (!dispatched) {
+      this.dispatchedMessages.delete(claimKey);
+    }
+    return dispatched;
+  }
   async handleExternalTriggerRun(run) {
     if (this.shuttingDown)
       return false;
@@ -31171,6 +31447,8 @@ var ParallAgentGateway = class {
             dispatched = await this.fetchAndHandleScheduleFire(item.source_id, item.actor_id);
           } else if (item.event_type === "external_trigger" && item.source_id) {
             dispatched = await this.fetchAndHandleExternalTriggerRun(item.source_id);
+          } else if (item.event_type === "channel_message" && item.source_id) {
+            dispatched = await this.fetchAndHandleChannelMessage(item.source_id);
           } else if (item.event_type === "approval_decided" && item.source_id) {
             dispatched = await this.fetchAndHandleApprovalDecided(item.source_id, item.actor_id, item.chat_id ?? null);
           } else if (item.event_type === "message" && item.source_id && item.chat_id) {
@@ -31368,6 +31646,9 @@ function resolveRuntimeModel(isOperatorOverride, platformModel, configModel) {
   const operatorOverride = isOperatorOverride ? platformModel : null;
   return operatorOverride ?? configModel ?? platformModel ?? void 0;
 }
+function deriveModelIsPin(defaults, profile) {
+  return defaults.modelIsPin !== void 0 ? defaults.modelIsPin : isPlatformModelOverride(profile);
+}
 var CACHE_FILENAME = "parall-platform-config.json";
 var SUPPORTED_SCHEMA_VERSION = 1;
 function cachePath(stateDir) {
@@ -31385,6 +31666,7 @@ function saveCache(stateDir, response) {
   const cached = {
     version: response.version,
     config: response.config,
+    modelIsPin: response.model_is_pin,
     fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   const filePath = cachePath(stateDir);
@@ -31395,23 +31677,27 @@ function saveCache(stateDir, response) {
 }
 function runtimeModelName(canonicalModel, runtimeType, config) {
   const runtime = runtimeType?.trim();
-  if (!runtime || runtime === "openclaw")
+  if (!runtime || runtime === "openclaw" || runtime === "hermes")
     return canonicalModel;
   const models = config.models ?? {};
   const providers = models.providers ?? {};
   const parall = providers.parall ?? {};
   const catalog = Array.isArray(parall.models) ? parall.models : [];
   const match = catalog.find((model) => model.id === canonicalModel);
-  const runtimeNames = match?.runtime_names ?? {};
+  if (!match)
+    return null;
+  const runtimeNames = match.runtime_names ?? {};
   const runtimeName = runtimeNames[runtime];
-  return typeof runtimeName === "string" && runtimeName ? runtimeName : null;
+  if (typeof runtimeName === "string" && runtimeName)
+    return runtimeName;
+  return canonicalModel;
 }
 function extractDefaults(config, runtimeType) {
   const agents = config.agents ?? {};
   const defaults = agents.defaults ?? {};
   let model = null;
   if (typeof defaults.model === "string" && defaults.model) {
-    const canonicalModel = defaults.model.replace(/^parall\//, "");
+    const canonicalModel = defaults.model.replace(/^parall-anthropic\//, "").replace(/^parall\//, "");
     model = runtimeModelName(canonicalModel, runtimeType, config);
   }
   let thinkingEffort = null;
@@ -31423,13 +31709,20 @@ function extractDefaults(config, runtimeType) {
 function createPlatformConfigManager(opts) {
   const { client, stateDir, runtimeType, log: log2 } = opts;
   let cachedVersion;
-  let currentDefaults = { model: null, thinkingEffort: null };
+  let currentDefaults = {
+    model: null,
+    thinkingEffort: null,
+    modelIsPin: void 0
+  };
   let currentRawConfig = null;
   const cached = loadCache(stateDir);
   if (cached) {
-    cachedVersion = cached.version;
+    cachedVersion = cached.modelIsPin === void 0 ? void 0 : cached.version;
     currentRawConfig = cached.config;
-    currentDefaults = extractDefaults(cached.config, runtimeType);
+    currentDefaults = {
+      ...extractDefaults(cached.config, runtimeType),
+      modelIsPin: cached.modelIsPin
+    };
   }
   return {
     async fetch() {
@@ -31455,7 +31748,10 @@ function createPlatformConfigManager(opts) {
       saveCache(stateDir, fresh);
       cachedVersion = fresh.version;
       currentRawConfig = fresh.config;
-      currentDefaults = extractDefaults(fresh.config, runtimeType);
+      currentDefaults = {
+        ...extractDefaults(fresh.config, runtimeType),
+        modelIsPin: fresh.model_is_pin
+      };
       return currentDefaults;
     },
     current() {
@@ -31572,16 +31868,35 @@ original discussion and its approval/rejection IS the precedent.
 
 Each \`[Event: message.new]\` includes \`[Chat: ... (prll://cht_xxx)]\` \u2014 use that chat URI to reply.
 
+> **How you pass the message body matters \u2014 your command runs through a shell.**
+> Inside double quotes the shell expands \`$\`, backticks, and \`$(...)\` *before*
+> the CLI sees them: \`--text "That costs $1,000"\` sends \`That costs ,000\`, and
+> \`--text "$(cmd)"\` runs \`cmd\`. Single quotes instead break on apostrophes
+> (\`I'm\`, \`don't\`). So do **not** wrap real message content in quotes \u2014 pass it
+> through \`--text-file\` (a written file, or a quoted heredoc \`<<'EOF'\` that
+> disables all expansion). Reserve \`--text "..."\` for short literals with no
+> \`$\`, backtick, or apostrophe.
+
 \`\`\`bash
-# Reply to a chat (use the chat URI from the event)
-parall messages send prll://cht_xxx --text "Your reply"
+# One-off reply \u2192 quoted heredoc into stdin. The quoted delimiter <<'EOF'
+# disables ALL shell expansion, so $, backticks and apostrophes pass verbatim.
+parall messages send prll://cht_xxx --text-file - <<'PARALL_EOF'
+Sure \u2014 that's $1,000, and $(whoami) stays literal. I'm on it.
+PARALL_EOF
 
-# Direct message by user URI or display name
-parall dm prll://usr_xxx --text "Hello"
+# Longer / multi-line reply \u2192 write it with your file tool (no shell touches
+# the body), then point --text-file at the file.
+parall messages send prll://cht_xxx --text-file /tmp/reply.md
+
+# Short literal with no $, backtick, or apostrophe \u2192 --text is fine.
+parall messages send prll://cht_xxx --text "On it"
+
+# Direct message by user URI or display name (same --text-file / heredoc rules)
+parall dm prll://usr_xxx --text-file /tmp/reply.md
 parall dm "Alice" --text "Hello"
 
 # Thread reply
-parall messages send prll://cht_xxx --text "Reply" --thread-root-id 01JWC...
+parall messages send prll://cht_xxx --text-file /tmp/reply.md --thread-root-id 01JWC...
 
 # FYI message (no response expected \u2014 the recipient sees \`[Hint: no_reply]\`)
 parall messages send prll://cht_xxx --text "FYI: done" --no-reply
@@ -31613,7 +31928,9 @@ parall messages send prll://cht_xxx --attachment att_xxx --text "See attached"
 parall dm "Alice" --file /tmp/report.pdf --text "Report attached"
 \`\`\`
 
-\`--file\` and \`--attachment\` are mutually exclusive. \`--text\` can be combined with either.
+\`--file\` and \`--attachment\` are mutually exclusive. A caption (\`--text\` for
+short literals, or \`--text-file\` for anything with \`$\`, backticks, or quotes)
+can be combined with either.
 
 ## Approvals
 
@@ -33792,14 +34109,13 @@ async function main() {
       log: agentLog
     });
     const platformDefaults = await configMgr.fetch();
-    let platformManaged = isPlatformManagedProfile(me.agent_profile);
-    let platformModelOverride = isPlatformModelOverride(me.agent_profile);
+    const platformModelOverride = deriveModelIsPin(platformDefaults, me.agent_profile);
     const resolvedModel = resolveRuntimeModel(platformModelOverride, platformDefaults.model, config.model);
-    const resolvedEffort = platformManaged ? platformDefaults.thinkingEffort ?? (process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || void 0) : process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || void 0;
+    const resolvedEffort = platformDefaults.thinkingEffort ?? (process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || void 0);
     if (platformDefaults.model)
-      agentLog.info(`platform config: model=${platformDefaults.model} \u2192 resolved=${resolvedModel ?? "cli-default"} (${platformModelOverride ? "platform-managed" : "floor/self"})`);
+      agentLog.info(`platform config: model=${platformDefaults.model} \u2192 resolved=${resolvedModel ?? "cli-default"} (${platformModelOverride ? "pin/override" : "floor"})`);
     if (platformDefaults.thinkingEffort)
-      agentLog.info(`platform config: thinking_effort=${platformDefaults.thinkingEffort} (${platformModelOverride ? "applied" : "ignored, model_management=self"})`);
+      agentLog.info(`platform config: thinking_effort=${platformDefaults.thinkingEffort}`);
     const adapter = new ClaudeCodeAdapter({
       claudeBin: config.claudeBin,
       claudeHome: config.claudeHome,
@@ -33824,6 +34140,23 @@ async function main() {
     if (resolvedEffort) {
       adapter.updateConfig({ effort: resolvedEffort });
     }
+    const refreshPlatformConfig = async () => {
+      const updated = await configMgr.fetch();
+      let refreshedProfile;
+      if (updated.modelIsPin === void 0) {
+        try {
+          refreshedProfile = (await getAgentMeWithLegacyFallback(client, config.orgId)).agent_profile;
+        } catch (err) {
+          agentLog.warn(`platform config refresh: legacy /agents/me fallback failed: ${String(err)}`);
+        }
+      }
+      const isPin = deriveModelIsPin(updated, refreshedProfile);
+      const localEffort = process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || null;
+      adapter.updateConfig({
+        model: resolveRuntimeModel(isPin, updated.model, config.model) ?? null,
+        effort: updated.thinkingEffort ?? localEffort
+      });
+    };
     const gateway = new ParallAgentGateway({
       accountId: agentUserId,
       client,
@@ -33850,28 +34183,8 @@ async function main() {
       dispatchDeadlineMs: parseDispatchDeadlineMs(process.env.PRLL_DISPATCH_DEADLINE_MS),
       contextFilePathForSession: (sessionKey) => contextFilePathForSession(config.stateDir, sessionKey),
       stepIdFilePathForSession: (sessionKey) => stepIdFilePathForSession(config.stateDir, sessionKey),
-      onConfigUpdate: async () => {
-        const refreshed = await getAgentMeWithLegacyFallback(client, config.orgId);
-        platformManaged = isPlatformManagedProfile(refreshed.agent_profile);
-        platformModelOverride = isPlatformModelOverride(refreshed.agent_profile);
-        const updated = await configMgr.fetch();
-        const localEffort = process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || null;
-        adapter.updateConfig({
-          model: resolveRuntimeModel(platformModelOverride, updated.model, config.model) ?? null,
-          effort: platformManaged ? updated.thinkingEffort ?? localEffort : localEffort
-        });
-      },
-      onSessionReady: async () => {
-        const refreshed = await getAgentMeWithLegacyFallback(client, config.orgId);
-        platformManaged = isPlatformManagedProfile(refreshed.agent_profile);
-        platformModelOverride = isPlatformModelOverride(refreshed.agent_profile);
-        const updated = await configMgr.fetch();
-        const localEffort = process.env.CLAUDE_CODE_EFFORT_LEVEL?.trim() || null;
-        adapter.updateConfig({
-          model: resolveRuntimeModel(platformModelOverride, updated.model, config.model) ?? null,
-          effort: platformManaged ? updated.thinkingEffort ?? localEffort : localEffort
-        });
-      },
+      onConfigUpdate: refreshPlatformConfig,
+      onSessionReady: refreshPlatformConfig,
       // Long-lived `claude` subprocesses outlive a single dispatch, so the
       // gateway's shuttingDown flag alone does not tear them down. Piggyback on
       // onBeforeDisconnect to close stdin and SIGTERM any survivors after