@parall/daemon 1.44.0 → 1.46.0

package/dist/runtime-bin-resolver.js

@@ -15,10 +15,10 @@ export function runtimeBinaryEnvVar(runtimeType) {
 }
 const RESOLUTION_CACHE_TTL_MS = 5 * 60_000;
 const resolutionCache = new Map();
-export function applyRuntimeBinaryEnv(runtimeType, baseEnv, log) {
+export function applyRuntimeBinaryEnv(runtimeType, baseEnv, log, platform = process.platform) {
     const env = { ...baseEnv };
     const originalPath = env.PATH;
-    const pathPlan = cachedCandidatePathPlan(env);
+    const pathPlan = cachedCandidatePathPlan(env, platform);
     const primaryPath = mergePath(pathPlan.primaryDirs, originalPath);
     env.PATH = mergePath([...pathPlan.primaryDirs, ...pathPlan.versionedFallbackDirs], originalPath);
     const spec = RUNTIME_BINARIES[runtimeType];
@@ -26,7 +26,7 @@ export function applyRuntimeBinaryEnv(runtimeType, baseEnv, log) {
         return env;
     const configured = env[spec.envVar]?.trim();
     if (configured) {
-        const resolved = resolveRuntimeCommand(configured, env, originalPath, primaryPath, env.PATH);
+        const resolved = resolveRuntimeCommand(configured, env, originalPath, primaryPath, env.PATH, platform);
         if (resolved) {
             env[spec.envVar] = resolved.binaryPath;
             env.PATH = anchorResolvedPath(env.PATH, resolved);
@@ -37,7 +37,7 @@ export function applyRuntimeBinaryEnv(runtimeType, baseEnv, log) {
         }
         return env;
     }
-    const resolved = resolveRuntimeCommand(spec.command, env, originalPath, primaryPath, env.PATH);
+    const resolved = resolveRuntimeCommand(spec.command, env, originalPath, primaryPath, env.PATH, platform);
     if (resolved) {
         env[spec.envVar] = resolved.binaryPath;
         env.PATH = anchorResolvedPath(env.PATH, resolved);
@@ -49,8 +49,8 @@ export function applyRuntimeBinaryEnv(runtimeType, baseEnv, log) {
     }
     return env;
 }
-function resolveRuntimeCommand(command, env, inheritedPath, primaryPath, fallbackPath) {
-    const cacheKey = `runtime\0${command}\0${primaryPath}\0${fallbackPath}\0${env.SHELL ?? ''}\0${env.HOME ?? ''}`;
+function resolveRuntimeCommand(command, env, inheritedPath, primaryPath, fallbackPath, platform) {
+    const cacheKey = `runtime\0${command}\0${primaryPath}\0${fallbackPath}\0${env.SHELL ?? ''}\0${env.HOME ?? ''}\0${platform}`;
     const cached = getCachedResolution(cacheKey);
     if (cached)
         return cached;
@@ -63,24 +63,24 @@ function resolveRuntimeCommand(command, env, inheritedPath, primaryPath, fallbac
         setCachedResolution(cacheKey, resolved);
         return resolved;
     }
-    const fromInheritedPath = resolveFromPath(command, inheritedPath, env);
+    const fromInheritedPath = resolveFromPath(command, inheritedPath, env, platform);
     if (fromInheritedPath) {
         setCachedResolution(cacheKey, fromInheritedPath);
         return fromInheritedPath;
     }
     if (runLoginShell) {
-        const fromShell = resolveFromLoginShell(command, { ...env, PATH: inheritedPath });
+        const fromShell = resolveFromLoginShell(command, { ...env, PATH: inheritedPath }, platform);
         if (fromShell) {
             setCachedResolution(cacheKey, fromShell);
             return fromShell;
         }
     }
-    const fromPrimaryPath = resolveFromPath(command, primaryPath, env);
+    const fromPrimaryPath = resolveFromPath(command, primaryPath, env, platform);
     if (fromPrimaryPath) {
         setCachedResolution(cacheKey, fromPrimaryPath);
         return fromPrimaryPath;
     }
-    const fromFallbackPath = fallbackPath === primaryPath ? null : resolveFromPath(command, fallbackPath, env);
+    const fromFallbackPath = fallbackPath === primaryPath ? null : resolveFromPath(command, fallbackPath, env, platform);
     if (fromFallbackPath) {
         setCachedResolution(cacheKey, fromFallbackPath);
         return fromFallbackPath;
@@ -99,12 +99,12 @@ function resolveDirectPath(command) {
     const abs = path.isAbsolute(command) ? command : path.resolve(process.cwd(), command);
     return isExecutable(abs) ? abs : null;
 }
-function resolveFromPath(command, pathValue, env) {
+function resolveFromPath(command, pathValue, env, platform) {
     if (!pathValue || command.includes('/') || command.includes('\\'))
         return null;
     const dirs = pathValue.split(path.delimiter).filter(Boolean);
     for (const dir of dirs) {
-        for (const file of commandCandidates(command, env)) {
+        for (const file of commandCandidates(command, env, platform)) {
             const candidate = path.join(dir, file);
             if (isExecutable(candidate))
                 return { binaryPath: candidate, pathValue };
@@ -112,12 +112,17 @@ function resolveFromPath(command, pathValue, env) {
     }
     return null;
 }
-function resolveFromLoginShell(command, env) {
+function resolveFromLoginShell(command, env, platform) {
+    // No POSIX login shell to consult on Windows — and a Git-Bash user's
+    // SHELL=...bash.exe must not pull this synchronous probe (execFileSync,
+    // up to ~2.5s × 3 shells) into the spawn path.
+    if (platform === 'win32')
+        return null;
     if (command.includes('/') || command.includes('\\'))
         return null;
     const shells = unique([
         env.SHELL?.trim(),
-        process.platform === 'darwin' ? '/bin/zsh' : undefined,
+        platform === 'darwin' ? '/bin/zsh' : undefined,
         '/bin/bash',
         '/bin/sh',
     ]);
@@ -158,17 +163,42 @@ function resolveFromLoginShell(command, env) {
 // TTL as resolutions. A freshly installed version manager dir therefore shows
 // up within one detection interval, same as everything else here.
 const pathPlanCache = new Map();
-function cachedCandidatePathPlan(env) {
-    const key = `${env.HOME ?? ''}\0${env.PRLL_DAEMON_RUNTIME_PATH ?? ''}\0${env.PRLL_DAEMON_EXTRA_PATH ?? ''}`;
+function cachedCandidatePathPlan(env, platform) {
+    const key = `${env.HOME ?? ''}\0${env.PRLL_DAEMON_RUNTIME_PATH ?? ''}\0${env.PRLL_DAEMON_EXTRA_PATH ?? ''}\0${env.APPDATA ?? ''}\0${env.LOCALAPPDATA ?? ''}\0${env.PNPM_HOME ?? ''}\0${platform}`;
     const hit = pathPlanCache.get(key);
     if (hit && hit.expiresAt > Date.now())
         return hit.value;
-    const value = candidatePathPlan(env);
+    const value = candidatePathPlan(env, platform);
     pathPlanCache.set(key, { value, expiresAt: Date.now() + RESOLUTION_CACHE_TTL_MS });
     return value;
 }
-function candidatePathPlan(env) {
+export function candidatePathPlan(env, platform = process.platform) {
     const home = env.HOME || os.homedir();
+    if (platform === 'win32') {
+        // Windows install layouts. HOME is rarely set there (os.homedir() reads
+        // USERPROFILE); APPDATA/LOCALAPPDATA are always present in real sessions
+        // but keep derived fallbacks for stripped service environments.
+        const appData = env.APPDATA || path.join(home, 'AppData', 'Roaming');
+        const localAppData = env.LOCALAPPDATA || path.join(home, 'AppData', 'Local');
+        const winPrimaryDirs = [
+            ...splitPath(env.PRLL_DAEMON_RUNTIME_PATH),
+            ...splitPath(env.PRLL_DAEMON_EXTRA_PATH),
+            path.dirname(process.execPath),
+            env.PNPM_HOME,
+            path.join(appData, 'npm'),
+            path.join(localAppData, 'pnpm'),
+            path.join(localAppData, 'Volta', 'bin'),
+            path.join(home, '.volta', 'bin'),
+            path.join(home, '.bun', 'bin'),
+        ];
+        // No versioned fallback scan on Windows: nvm-windows exposes the active
+        // version through the nodejs junction already on PATH (and execPath's
+        // dir above). Exotic layouts use PRLL_DAEMON_RUNTIME_PATH.
+        return {
+            primaryDirs: unique(winPrimaryDirs).filter((dir) => !!dir && isDirectory(dir)),
+            versionedFallbackDirs: [],
+        };
+    }
     const primaryDirs = [
         ...splitPath(env.PRLL_DAEMON_RUNTIME_PATH),
         ...splitPath(env.PRLL_DAEMON_EXTRA_PATH),
@@ -263,17 +293,22 @@ function mergePath(prependDirs, existing) {
 function anchorResolvedPath(pathValue, resolution) {
     return mergePath([path.dirname(resolution.binaryPath), ...splitPath(resolution.pathValue)], pathValue);
 }
-function commandCandidates(command, env) {
-    if (process.platform !== 'win32')
+export function commandCandidates(command, env, platform = process.platform) {
+    if (platform !== 'win32')
         return [command];
     const hasExt = /\.[^\\/]+$/.test(command);
     if (hasExt)
         return [command];
-    const exts = (env.PATHEXT || '.EXE;.CMD;.BAT;.COM')
+    // PATHEXT-suffixed candidates ONLY, in PATHEXT order (fallback mirrors the
+    // Windows default order). A bare-name candidate must not be offered:
+    // accessSync(X_OK) passes for any readable file on Windows, so it would
+    // resolve to npm's extension-less sh shim sitting next to the .cmd — a
+    // file nothing on Windows can actually execute.
+    const exts = (env.PATHEXT || '.COM;.EXE;.BAT;.CMD')
         .split(';')
         .filter(Boolean)
         .map((ext) => ext.toLowerCase());
-    return [command, ...exts.map((ext) => `${command}${ext}`)];
+    return exts.map((ext) => `${command}${ext}`);
 }
 /** undefined = no cache entry; null = cached miss (see ResolutionCacheEntry). */
 function getCachedResolution(cacheKey) {

package/dist/runtimes.d.ts

@@ -19,11 +19,22 @@ export interface AgentDirs {
      */
     homeDir?: string;
 }
+/** Injectable resolution inputs — production callers pass nothing. */
+export interface RuntimeAdapterResolveOptions {
+    env?: NodeJS.ProcessEnv;
+    entryPath?: string;
+}
 /**
- * Resolve a runtime adapter, preferring overlay bundle paths when available.
- * When the daemon has self-updated into ~/.parall-daemon/bundle/, bridge
- * binaries should also load from overlay to keep versions in sync.
+ * Resolve a runtime adapter. Bridge bins resolve in three tiers:
+ *   1. overlay bundle (~/.parall-daemon/bundle/current/) — a self-updated
+ *      daemon must load bridges from the same overlay to keep versions in sync;
+ *   2. entry-sibling bundle (bundledSiblingBin above) — the npm/CDN package's
+ *      own flat bundle directory;
+ *   3. bare bin name via PATH — dev checkouts running from dist/, where the
+ *      workspace bin links exist and neither bundle layout does.
+ * Tiers 1–2 spawn `node <abs js>` directly, which never depends on PATH or
+ * on Windows .cmd shims.
  */
-export declare function getRuntimeAdapter(runtimeType: string): RuntimeAdapter;
+export declare function getRuntimeAdapter(runtimeType: string, opts?: RuntimeAdapterResolveOptions): RuntimeAdapter;
 export declare function assertAgentKey(apiKey: string): void;
 //# sourceMappingURL=runtimes.d.ts.map

package/dist/runtimes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtimes.d.ts","sourceRoot":"","sources":["../src/runtimes.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAa,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGzD,YAAY,EAAE,cAAc,EAAE,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,CACN,OAAO,EAAE,MAAM,CAAC,UAAU,EAC1B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,SAAS,EACf,EAAE,CAAC,EAAE,cAAc,GAClB,MAAM,CAAC,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAqGD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAerE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAInD"}
+{"version":3,"file":"runtimes.d.ts","sourceRoot":"","sources":["../src/runtimes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,qBAAqB,EAAa,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGzD,YAAY,EAAE,cAAc,EAAE,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,CACN,OAAO,EAAE,MAAM,CAAC,UAAU,EAC1B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,SAAS,EACf,EAAE,CAAC,EAAE,cAAc,GAClB,MAAM,CAAC,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAqGD,sEAAsE;AACtE,MAAM,WAAW,4BAA4B;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA2CD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,4BAA4B,GAClC,cAAc,CAoBhB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAInD"}

package/dist/runtimes.js

@@ -1,6 +1,7 @@
 import * as fs from 'node:fs';
 import * as os from 'node:os';
 import * as path from 'node:path';
+import { fileURLToPath } from 'node:url';
 import { clearAllProviderCreds, llmSource } from '@parall/agent-core';
 import { resolveBundleDir } from './config.js';
 export { clearAllProviderCreds };
@@ -93,17 +94,67 @@ const OVERLAY_BIN_NAMES = {
     openclaw: 'parall-openclaw-agent.js',
 };
 /**
- * Resolve a runtime adapter, preferring overlay bundle paths when available.
- * When the daemon has self-updated into ~/.parall-daemon/bundle/, bridge
- * binaries should also load from overlay to keep versions in sync.
+ * Locate a bridge bundle shipped next to the daemon's own entry script.
+ * The npm package puts every bin in the same flat `bundle/` directory
+ * (parall-daemon.js beside parall-codex-agent.js), so the running entry's
+ * real directory is a complete bridge distribution. This is what makes bare
+ * `npx @parall/daemon` work on Windows, where the PATH fallback would hit an
+ * npm `.cmd` shim that Node refuses to spawn without a shell.
+ *
+ * The entry path must be realpath'd first: POSIX npm bins are symlinks into
+ * the package, and Windows setups may reach the bundle through a junction —
+ * dirname of the raw link points at a bin dir with no siblings (same class
+ * of bug as the browser-pod entrypoint guard, #1597). import.meta.url is the
+ * second candidate because a service launcher can import the daemon with
+ * argv[1] pointing outside the bundle.
  */
-export function getRuntimeAdapter(runtimeType) {
+function bundledSiblingBin(overlayName, entryPath) {
+    const candidateDirs = [];
+    const entry = entryPath ?? process.argv[1];
+    if (entry) {
+        try {
+            candidateDirs.push(path.dirname(fs.realpathSync(entry)));
+        }
+        catch {
+            candidateDirs.push(path.dirname(path.resolve(entry)));
+        }
+    }
+    try {
+        candidateDirs.push(path.dirname(fileURLToPath(import.meta.url)));
+    }
+    catch {
+        // non-file module URL; skip
+    }
+    for (const dir of candidateDirs) {
+        const bin = path.join(dir, overlayName);
+        try {
+            if (fs.existsSync(bin))
+                return bin;
+        }
+        catch {
+            // unreadable dir; try the next candidate
+        }
+    }
+    return null;
+}
+/**
+ * Resolve a runtime adapter. Bridge bins resolve in three tiers:
+ *   1. overlay bundle (~/.parall-daemon/bundle/current/) — a self-updated
+ *      daemon must load bridges from the same overlay to keep versions in sync;
+ *   2. entry-sibling bundle (bundledSiblingBin above) — the npm/CDN package's
+ *      own flat bundle directory;
+ *   3. bare bin name via PATH — dev checkouts running from dist/, where the
+ *      workspace bin links exist and neither bundle layout does.
+ * Tiers 1–2 spawn `node <abs js>` directly, which never depends on PATH or
+ * on Windows .cmd shims.
+ */
+export function getRuntimeAdapter(runtimeType, opts) {
     const base = RUNTIME_ADAPTERS[runtimeType] ?? defaultAdapter;
     const overlayName = OVERLAY_BIN_NAMES[runtimeType];
     if (!overlayName)
         return base;
     try {
-        const bundleDir = resolveBundleDir();
+        const bundleDir = resolveBundleDir(opts?.env);
         const overlayBin = path.join(bundleDir, 'current', overlayName);
         if (fs.existsSync(overlayBin)) {
             return { ...base, bin: process.execPath, args: [overlayBin] };
@@ -112,6 +163,10 @@ export function getRuntimeAdapter(runtimeType) {
     catch {
         // resolveBundleDir may fail in unusual setups; fall through
     }
+    const siblingBin = bundledSiblingBin(overlayName, opts?.entryPath);
+    if (siblingBin) {
+        return { ...base, bin: process.execPath, args: [siblingBin] };
+    }
     return base;
 }
 export function assertAgentKey(apiKey) {

package/dist/supervisor.d.ts

@@ -81,6 +81,12 @@ export declare class DaemonSupervisor {
      * proxy-configured profile (the caller reports `error` and retries next tick).
      */
     private resolveBrowserProfileProxy;
+    /** Proxy readiness probe endpoint for BYOC profiles (browser-readiness.ts): an
+     *  explicit override, else the api-server's Parall-owned public `/generate_204`.
+     *  The probe navigates a sacrificial tab THROUGH the profile's proxy, so the
+     *  target must be public + proxy-resolvable — `config.apiUrl` is the public API
+     *  host for BYOC. Falls back to a well-known public 204 if apiUrl is unusable. */
+    private resolveBrowserProxyProbeUrl;
     /**
      * Detects a legacy flat state layout (no agents/ subdir) and migrates it
      * into the per-agent directory for the owning agent. Ownership is determined

package/dist/supervisor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../src/supervisor.ts"],"names":[],"mappings":"AAIA,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAgBL,KAAK,YAAY,EAElB,MAAM,aAAa,CAAC;AAUrB,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAerB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAsBvE;;;;GAIG;AACH,iBAAS,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAa3E;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC;AA4B5B;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IAyEzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IA1EtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqB;IAM3D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAoC;IAM3E,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAA6B;IAC1E,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAqC;IAC/E,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAqC;IACnF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAKrD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAQ1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAyB;IAC1D,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,gBAAgB,CAAoB;IAG5C,OAAO,CAAC,sBAAsB,CAAQ;IAItC,OAAO,CAAC,sBAAsB,CAAuB;IAGrD,OAAO,CAAC,uBAAuB,CAAuB;IACtD,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,OAAO,CAA8B;IAI7C,OAAO,CAAC,UAAU,CAAwC;IAC1D,OAAO,CAAC,kBAAkB,CAAmC;IAC7D,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,kBAAkB,CAA+B;IACzD,OAAO,CAAC,qBAAqB,CAA8B;IAI3D,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,kBAAkB,CAA+B;IACzD,OAAO,CAAC,qBAAqB,CAA8B;IAE3D,OAAO,CAAC,gBAAgB,CAAyC;IAIjE,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,YAAY,CAAuB;gBAGxB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,aAAa;IAGrC,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAIxC;wFACoF;IACpF,aAAa,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI;IAIlD,yEAAyE;IACnE,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAkN7C,sEAAsE;IAChE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YA8Db,kBAAkB;YAwClB,aAAa;YAsGb,gBAAgB;YAiBhB,wBAAwB;IAiMtC;;;;;;;;;OASG;YACW,0BAA0B;IAkBxC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;YA6CX,kBAAkB;YAqBlB,mBAAmB;YAgBnB,mBAAmB;YAqBnB,sBAAsB;YAwBtB,6BAA6B;IA6E3C,OAAO,CAAC,8BAA8B;IAkCtC,OAAO,CAAC,uBAAuB;IA4B/B,OAAO,CAAC,2BAA2B;IAYnC;;;;;OAKG;YACW,0BAA0B;IAiCxC,OAAO,CAAC,2BAA2B;YAIrB,cAAc;YAId,qBAAqB;YAgBrB,wBAAwB;IAoDtC,OAAO,CAAC,uBAAuB;IAU/B,OAAO,CAAC,sBAAsB;IAM9B;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IA0B/B,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,uBAAuB;IAyB/B,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,mBAAmB;YAab,mBAAmB;IAyCjC,OAAO,CAAC,wBAAwB;YAelB,6BAA6B;IAqC3C,OAAO,CAAC,2BAA2B;IAYnC,OAAO,CAAC,wBAAwB;YAUlB,oBAAoB;IAmClC;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IASpB;;;;;;;;OAQG;YACW,sBAAsB;YA4CtB,kBAAkB;IAahC;;;;;;;;;OASG;YACW,wBAAwB;IAwDtC;;;;;;;OAOG;YACW,qBAAqB;IAcnC,OAAO,CAAC,+BAA+B;IAYvC,OAAO,CAAC,4BAA4B;YAQtB,eAAe;YAgDf,UAAU;IA+BxB;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;YAgBhB,cAAc;IAoE5B,OAAO,CAAC,UAAU;IAiKlB;;;;;OAKG;YACW,cAAc;CAwB7B"}
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../src/supervisor.ts"],"names":[],"mappings":"AAIA,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAgBL,KAAK,YAAY,EAElB,MAAM,aAAa,CAAC;AAWrB,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAgBrB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAsBvE;;;;GAIG;AACH,iBAAS,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAa3E;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC;AA4B5B;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IAyEzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IA1EtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqB;IAM3D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAoC;IAM3E,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAA6B;IAC1E,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAqC;IAC/E,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAqC;IACnF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAKrD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAQ1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAyB;IAC1D,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,gBAAgB,CAAoB;IAG5C,OAAO,CAAC,sBAAsB,CAAQ;IAItC,OAAO,CAAC,sBAAsB,CAAuB;IAGrD,OAAO,CAAC,uBAAuB,CAAuB;IACtD,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,OAAO,CAA8B;IAI7C,OAAO,CAAC,UAAU,CAAwC;IAC1D,OAAO,CAAC,kBAAkB,CAAmC;IAC7D,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,kBAAkB,CAA+B;IACzD,OAAO,CAAC,qBAAqB,CAA8B;IAI3D,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,kBAAkB,CAA+B;IACzD,OAAO,CAAC,qBAAqB,CAA8B;IAE3D,OAAO,CAAC,gBAAgB,CAAyC;IAIjE,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,YAAY,CAAuB;gBAGxB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,aAAa;IAGrC,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAIxC;wFACoF;IACpF,aAAa,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI;IAIlD,yEAAyE;IACnE,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAmN7C,sEAAsE;IAChE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YA8Db,kBAAkB;YAwClB,aAAa;YAsGb,gBAAgB;IAiB9B,OAAO,CAAC,wBAAwB;IAkBhC;;;;;;;;;OASG;YACW,0BAA0B;IAgBxC;;;;sFAIkF;IAClF,OAAO,CAAC,2BAA2B;IAYnC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;YA6CX,kBAAkB;YAqBlB,mBAAmB;YAgBnB,mBAAmB;YAqBnB,sBAAsB;YAwBtB,6BAA6B;IAkG3C,OAAO,CAAC,8BAA8B;IAkCtC,OAAO,CAAC,uBAAuB;IA4B/B,OAAO,CAAC,2BAA2B;IAYnC;;;;;OAKG;YACW,0BAA0B;IAiCxC,OAAO,CAAC,2BAA2B;YAIrB,cAAc;YAId,qBAAqB;YAgBrB,wBAAwB;IAoDtC,OAAO,CAAC,uBAAuB;IAU/B,OAAO,CAAC,sBAAsB;IAM9B;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IA0B/B,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,uBAAuB;IAyB/B,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,mBAAmB;YAab,mBAAmB;IAyCjC,OAAO,CAAC,wBAAwB;YAelB,6BAA6B;IAqC3C,OAAO,CAAC,2BAA2B;IAYnC,OAAO,CAAC,wBAAwB;YAUlB,oBAAoB;IAmClC;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IASpB;;;;;;;;OAQG;YACW,sBAAsB;YA4CtB,kBAAkB;IAahC;;;;;;;;;OASG;YACW,wBAAwB;IAwDtC;;;;;;;OAOG;YACW,qBAAqB;IAcnC,OAAO,CAAC,+BAA+B;IAYvC,OAAO,CAAC,4BAA4B;YAQtB,eAAe;YAgDf,UAAU;IA+BxB;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;YAgBhB,cAAc;IAoE5B,OAAO,CAAC,UAAU;IAsKlB;;;;;OAKG;YACW,cAAc;CAwB7B"}

package/dist/supervisor.js

@@ -4,10 +4,12 @@ import * as os from 'node:os';
 import * as path from 'node:path';
 import { effectiveLLMSourceExplicit, llmSource } from '@parall/agent-core';
 import { ParallWs, } from '@parall/sdk';
+import { PUBLIC_PROXY_PROBE_FALLBACK_URL } from './clip-runtime/browser-readiness.js';
 import { installClip, parseSource } from './clip-runtime/clip-installer.js';
 import { parseIpcCommands } from './clip-runtime/manifest.js';
 import { BrowserProfilePool, ClipProcessManager, ClipProvider, HubClient, } from './clip-runtime/index.js';
 import { agentClaudeHomeFor, agentHomeDirFor, agentStateDirFor, agentWorkspaceDirFor, } from './config.js';
+import { reconcileBrowserProfiles as runBrowserProfileReconcile } from './browser-profile-reconcile.js';
 import { listDirectory } from './filesystem.js';
 import { ensureIsolatedHome, ensureSharedCredentialLink, } from './home-isolation.js';
 import { assertAgentKey, getRuntimeAdapter } from './runtimes.js';
@@ -178,6 +180,7 @@ export class DaemonSupervisor {
                         .catch((err) => this.log.warn(`browser profile status report failed: ${String(err)}`));
                 },
                 resolveProxy: (profileId) => this.resolveBrowserProfileProxy(profileId),
+                proxyProbeUrl: this.resolveBrowserProxyProbeUrl(),
             });
             this.clipManager = new ClipProcessManager({
                 clipsDir: path.join(this.config.rootStateDir, 'clips'),
@@ -517,195 +520,23 @@ export class DaemonSupervisor {
             throw err;
         }
     }
-    async reconcileBrowserProfiles() {
+    reconcileBrowserProfiles() {
+        // Coordination body extracted move-only to browser-profile-reconcile.ts (this
+        // file crossed the 2000-line ceiling). The op queue / pool lifecycle / wipe
+        // helper are injected so the behavior is byte-for-byte identical.
         const pool = this.browserProfilePool;
         if (!pool)
-            return;
-        // Snapshot the locally-live set BEFORE the server fetch. A profile opened via a
-        // WS lifecycle event DURING the fetch is NOT in this snapshot, so the negative
-        // convergence below (which is stale w.r.t. that open) can never release it.
-        // There is no periodic browser reconcile to re-open a wrongly-released profile —
-        // it only runs on startup / WS-hello — so a stale release would strand it until
-        // the next reconnect.
-        const activeBeforeList = new Set(pool.activeProfileIds());
-        // Also snapshot revives (open/ensure) queued but not yet a live manager: such a
-        // stale open is invisible to activeProfileIds() and would otherwise drain after a
-        // missed offline stop/delete and start a runtime the server no longer wants.
-        const pendingReviveBeforeList = new Set(this.browserProfilePendingRevives.keys());
-        // And ALL local profile state — per-profile homes AND legacy flat account files
-        // (the pool owns that storage layout). State with NO server row is a
-        // deleted/reassigned profile whose cookies/storage must be wiped from this host;
-        // a pre-upgrade profile never reopened after migration exists only as a legacy flat
-        // file, so home-only enumeration would miss it. Pre-fetch so state created during
-        // the fetch is left alone.
-        const localStateBeforeList = new Set(pool.localStateProfileIds());
-        let profiles;
-        try {
-            profiles = await this.client.listMachineBrowserProfiles();
-        }
-        catch (err) {
-            this.log.warn(`browser profile reconcile: list failed: ${String(err)}`);
-            return;
-        }
-        // The pool must still be the same instance after the await — stop() may have
-        // nulled/replaced it during a concurrent shutdown; bail rather than act on a
-        // torn-down pool (also avoids NPE-ing through Promise.allSettled into warnings).
-        if (this.browserProfilePool !== pool)
-            return;
-        // Converge local runtimes to the server's desired-live set (the server is the
-        // SSOT). The supervisor is the desired-state coordinator; the pool is the
-        // per-profile runtime registry. Every op here goes through
-        // enqueueBrowserProfileOp so all supervisor-originated profile work shares one
-        // ordering layer (the pool's own queue is the final per-profile mutex).
-        const desiredLive = new Set();
-        const serverIds = new Set(); // every byoc profile the server still lists (any status)
-        const serverResetGen = new Map();
-        const ops = [];
-        // reset_generation (server) is the SSOT for reset intent; the daemon's per-profile
-        // sidecar (read via pool.appliedResetGeneration) is only a local ack of "already
-        // wiped up to this generation". A missed reset (server newer than the local ack) must
-        // wipe local state BEFORE any open/ensure, so a reopen starts clean and never
-        // resurrects the cookies the reset cleared. Returns the server reset_generation to
-        // apply, or null if nothing is missed. Pure (no side effects).
-        const missedResetGen = (profileId) => {
-            const gen = serverResetGen.get(profileId) ?? 0;
-            return gen > pool.appliedResetGeneration(profileId) ? gen : null;
-        };
-        // Negative-path helper (a stopped profile with a missed reset): fence synchronously
-        // then enqueue a STANDALONE wipe. No revive follows, so a wipe failure simply leaves
-        // the profile fenced and the sidecar unwritten → the next reconcile retries (the
-        // SSOT reset_generation is still unapplied locally). Fail-closed by construction.
-        const enqueueResetWipeIfMissed = (profileId) => {
-            const gen = missedResetGen(profileId);
-            if (gen === null)
-                return false;
-            // Fence SYNCHRONOUSLY before the async wipe — same contract as the WS stop/reset
-            // path. On a machine-WS reconnect whose clip-provider stream stays live, a hub
-            // invoke could otherwise run on the stale runtime in the gap before the wipe op
-            // starts. (In the negative loop this re-asserts an already-set fence within the same
-            // synchronous iteration — atomic, no revive can observe an intermediate generation.)
-            pool.fence(profileId);
-            ops.push(this.enqueueBrowserProfileOp(profileId, () => pool.applyResetWipe(profileId, gen)));
-            return true;
-        };
-        for (const profile of profiles) {
-            // The daemon supervises only machine-bound (byoc) profiles; hosted profiles
-            // (null machine_id) run on the platform pool and are never owned by a daemon.
-            if (!profile.machine_id)
-                continue;
-            serverIds.add(profile.id);
-            serverResetGen.set(profile.id, profile.reset_generation ?? 0);
-            if (profile.status !== 'running' && profile.status !== 'pending')
-                continue;
-            desiredLive.add(profile.id);
-            // A missed reset must wipe SUCCESSFULLY before this profile is revived. Fence
-            // synchronously now (reject hub invokes in the gap before the queued wipe runs).
-            const wipeGen = missedResetGen(profile.id);
-            if (wipeGen !== null)
-                pool.fence(profile.id);
-            // Capture the fence generation AFTER any fence bump so a stop arriving while the op
-            // waits makes it skip as stale; carry the lifecycle generation so the daemon's
-            // `running` report is fenced server-side. Drive desired state through the CAPTURED
-            // pool (not enqueueBrowserProfileLifecycle, which re-reads this.browserProfilePool
-            // and would negative-ACK `error` for a pending profile if stop() nulled the field).
-            const sinceSeq = pool.stopSeqOf(profile.id);
-            const generation = profile.lifecycle_generation;
-            // forceStatusReport ONLY for a `pending` row: the daemon's last report may already be
-            // `running` (Chromium survived the WS drop), so a deduped repeat would leave the
-            // server stuck at `pending`. A `running` row keeps the normal dedup.
-            const forceStatusReport = profile.status === 'pending';
-            ops.push(this.enqueueBrowserProfileRevive(profile.id, async () => {
-                // Reset-before-open, FAIL-CLOSED: a missed reset must wipe successfully BEFORE
-                // the revive un-fences and reopens. If applyResetWipe throws, the await
-                // propagates and ensureRuntime is SKIPPED — the profile stays fenced (the wipe
-                // fenced it and the applied-reset sidecar was NOT written), so the next reconcile
-                // retries because the SSOT reset_generation is still unapplied locally. This
-                // ordering is expressed locally; the enqueueBrowserProfileOp queue contract (a
-                // rejected op does not block later ops) is intentionally unchanged. A failed
-                // wipe reports `error` (visible) and re-throws here, so ensureRuntime is skipped.
-                if (wipeGen !== null)
-                    await this.wipeBeforeRevive(pool, profile.id, wipeGen, generation);
-                // Reconnect recovery is liveness-only: ensure the runtime is live (account +
-                // tab) for both pending and running. The original open's `start_url` is NOT
-                // replayed (it rides only the live lifecycle event, not persisted); a `pending`
-                // profile whose open event the daemon missed comes up at the default page rather
-                // than a targetless `about:blank`. Persisting start_url is a separate follow-up.
-                await pool.ensureRuntime(profile.id, sinceSeq, generation, { forceStatusReport });
-            }));
-        }
-        // Negative convergence over everything locally known but NOT desired — active
-        // runtimes, queued revives (open/ensure not yet a manager), and local state (homes +
-        // legacy flat files) — all from the PRE-FETCH snapshots, so a profile that appeared
-        // DURING the fetch is left alone (no periodic reconcile would undo a wrong teardown).
-        const candidates = new Set([
-            ...activeBeforeList,
-            ...pendingReviveBeforeList,
-            ...localStateBeforeList,
-        ]);
-        for (const profileId of candidates) {
-            if (desiredLive.has(profileId))
-                continue;
-            const isActive = activeBeforeList.has(profileId);
-            const hasLocalState = localStateBeforeList.has(profileId);
-            // Pending-only revive (queued open/ensure, no runtime, no on-disk state at the
-            // pre-fetch snapshot): the synchronous fence alone neutralizes the stale open (it
-            // bumps stopSeq, so the queued revive skips as stale). Do NOT AWAIT a teardown — it
-            // would block behind the possibly-stuck queue and stall the whole reconcile (the
-            // queued-stale-open deadlock).
-            if (!isActive && !hasLocalState) {
-                pool.fence(profileId);
-                // Race: a pending-only revive can COMPLETE during the list fetch (create a manager
-                // + on-disk state) BEFORE this fence — the snapshot is then stale, so the fence
-                // alone leaves an orphaned runtime/disk the negative loop never converged. Converge
-                // it FIRE-AND-FORGET (NOT in `ops`: a still-stuck revive queue must not hang the
-                // reconcile; it runs once the queue drains — after the fenced open skips or
-                // completes — and is a no-op if nothing was created):
-                //   - deleted/reassigned    → wipeAbsent: the old host must keep no session data.
-                //   - present + missed reset → applyResetWipe: the completed open may have applied
-                //     only its event's (older) reset_generation, not the current one.
-                //   - present + stopped      → releaseRuntime: free the orphaned Chromium; a plain
-                //     stop keeps its cookies on disk.
-                let cleanup;
-                if (!serverIds.has(profileId)) {
-                    cleanup = pool.wipeAbsent(profileId);
-                }
-                else {
-                    const wipeGen = missedResetGen(profileId);
-                    cleanup =
-                        wipeGen !== null
-                            ? pool.applyResetWipe(profileId, wipeGen)
-                            : pool.releaseRuntime(profileId);
-                }
-                void cleanup.catch((err) => this.log.warn(`browser profile pending-revive cleanup failed for ${profileId}: ${String(err)}`));
-                continue;
-            }
-            if (!serverIds.has(profileId)) {
-                // Absent from the server list → deleted/reassigned → fence + wipe local state (the
-                // old host must not keep cookies/storage). No status report — server is the SSOT.
-                pool.fence(profileId);
-                ops.push(this.enqueueBrowserProfileOp(profileId, () => pool.wipeAbsent(profileId)));
-            }
-            else if (enqueueResetWipeIfMissed(profileId)) {
-                // Present (stopped) with a missed reset → fenced synchronously + wipe enqueued.
-            }
-            else if (isActive) {
-                // Present (stopped) but the runtime is still live → fence + release the runtime
-                // only; a plain stop keeps its cookies on disk.
-                pool.fence(profileId);
-                ops.push(this.enqueueBrowserProfileOp(profileId, () => pool.releaseRuntime(profileId)));
-            }
-            // else: present + stopped + on-disk state + no runtime + no missed reset → LEAVE
-            // ALONE (do NOT fence). Its stopped-fence is already held — the start-sequence
-            // pre-fence on a fresh daemon, or the persisted pool state on a WS reconnect — so a
-            // hub invoke is still rejected. Re-fencing here would bump stopSeq and drop an `open`
-            // that arrived during the list fetch (it captured an older sinceSeq, and the stale
-            // `stopped` snapshot doesn't reflect it yet), stranding the server at `pending`.
-        }
-        for (const result of await Promise.allSettled(ops)) {
-            if (result.status === 'rejected') {
-                this.log.warn(`browser profile reconcile op failed: ${String(result.reason)}`);
-            }
-        }
+            return Promise.resolve();
+        return runBrowserProfileReconcile({
+            pool,
+            currentPool: () => this.browserProfilePool,
+            client: this.client,
+            log: this.log,
+            enqueueOp: (id, op) => this.enqueueBrowserProfileOp(id, op),
+            enqueueRevive: (id, op) => this.enqueueBrowserProfileRevive(id, op),
+            wipeBeforeRevive: (p, id, rg, g) => this.wipeBeforeRevive(p, id, rg, g),
+            pendingReviveIds: () => new Set(this.browserProfilePendingRevives.keys()),
+        });
     }
     /**
      * Resolve a profile's outbound proxy for bb-browser account creation (BYOC).
@@ -731,6 +562,22 @@ export class DaemonSupervisor {
             password: profile.proxy_password ?? undefined,
         };
     }
+    /** Proxy readiness probe endpoint for BYOC profiles (browser-readiness.ts): an
+     *  explicit override, else the api-server's Parall-owned public `/generate_204`.
+     *  The probe navigates a sacrificial tab THROUGH the profile's proxy, so the
+     *  target must be public + proxy-resolvable — `config.apiUrl` is the public API
+     *  host for BYOC. Falls back to a well-known public 204 if apiUrl is unusable. */
+    resolveBrowserProxyProbeUrl() {
+        const override = process.env.PRLL_BROWSER_PROXY_PROBE_URL?.trim();
+        if (override)
+            return override;
+        try {
+            return new URL('/generate_204', this.config.apiUrl).toString();
+        }
+        catch {
+            return PUBLIC_PROXY_PROBE_FALLBACK_URL;
+        }
+    }
     // ---- Flat layout migration (self-hosted → daemon) ----
     /**
      * Detects a legacy flat state layout (no agents/ subdir) and migrates it
@@ -913,6 +760,20 @@ export class DaemonSupervisor {
         }
         catch (err) {
             this.log.warn(`browser profile lifecycle failed (profile=${data.profile_id}, action=${data.action}): ${String(err)}`);
+            // Negative-ACK backstop for open/reset failures that never reached the
+            // manager's own error report (pool queue rejection, unsafe id, disposal
+            // failure): without it the server row is stranded at `pending` with no
+            // error_msg and the user sees a silent timeout. The manager-level report
+            // (same status, message may differ) already carries the structured cause
+            // when it fired — a second update is idempotent on status. Deliberately
+            // NOT for `stop`: its desired state is durable and reconcile converges it.
+            if ((data.action === 'open' || data.action === 'reset') && this.running) {
+                await this.client
+                    .reportBrowserProfileStatus(data.profile_id, 'error', err instanceof Error ? err.message : String(err), data.generation)
+                    .catch((reportErr) => {
+                    this.log.warn(`browser profile lifecycle negative ACK failed for ${data.profile_id}: ${String(reportErr)}`);
+                });
+            }
         }
     }
     enqueueBrowserProfileLifecycle(data) {
@@ -1799,7 +1660,10 @@ export class DaemonSupervisor {
         child.once('error', (err) => {
             if (err.code === 'ENOENT') {
                 if (adapter.args.length > 0) {
-                    this.log.error(`Node runtime "${adapter.bin}" not found — is the Desktop app installed?`);
+                    // Overlay / entry-sibling resolution: bin is the node executable
+                    // and args[0] is the bridge bundle js that just resolved on disk.
+                    this.log.error(`Node runtime "${adapter.bin}" not found while launching ${adapter.args[0]} — ` +
+                        `reinstall the daemon (npm install -g @parall/daemon) or the Desktop app`);
                 }
                 else {
                     const pkg = RUNTIME_PACKAGES[state.runtimeType] ?? `@parall/${state.runtimeType}-agent`;