@parall/daemon 1.44.0 → 1.46.0

package/dist/clip-runtime/browser-profile-manager.d.ts

@@ -17,13 +17,19 @@ export interface BrowserProfileManagerOptions {
         error(msg: string): void;
     };
     reportStatus?: (profileId: string, status: BrowserProfileStatus, errorMsg?: string) => void;
-    /** Resolve the profile's outbound proxy, called once per bb-browser account
-     *  creation (the single choke point — invoke / open / ensureRuntime all funnel
-     *  through ensureAccount). A proxy change therefore takes effect on the next
-     *  account_create (after a reset). Returning null = direct egress. A thrown
-     *  error fails the account creation closed (better than egressing from the real
-     *  IP for a proxy-configured profile). */
+    /** Resolve the profile's DESIRED outbound proxy — Parall's stored config is the
+     *  sole source of truth. Consulted at account creation AND at every open/first
+     *  ensure, where the applied config is reconciled against it (cookie-preserving
+     *  context rebuild — see browser-proxy-reconcile.ts); bb-browser's own persisted
+     *  account proxy never wins over this. Returning null = direct egress. A thrown
+     *  error fails the operation closed (better than egressing from the real IP for
+     *  a proxy-configured profile). */
     resolveProxy?: (profileId: string) => Promise<BrowserProxyConfig | null> | BrowserProxyConfig | null;
+    /** Proxy readiness probe endpoint (~zero-byte Parall-owned URL). When a profile
+     *  has a proxy, open/first-ensure navigates the owned tab here and requires a
+     *  transport-error-free round trip before reporting `running`
+     *  (PRLL_BROWSER_PROXY_PROBE_URL override; see browser-readiness.ts). */
+    proxyProbeUrl?: string;
 }
 export interface BrowserInvokeRequest {
     profileId: string;
@@ -48,8 +54,11 @@ export declare class BrowserProfileManager {
     private restarting;
     private stopping;
     private readonly ensuredAccounts;
+    private readonly preparedAccounts;
     private readonly ensuringAccounts;
+    private readonly preparingAccounts;
     private readonly reportedStatuses;
+    private readonly targets;
     private readonly viewer;
     constructor(opts: BrowserProfileManagerOptions);
     invoke({ profileId, account, command, input }: BrowserInvokeRequest): Promise<unknown>;
@@ -57,6 +66,10 @@ export declare class BrowserProfileManager {
         forceStatusReport?: boolean;
     }): Promise<void>;
     openProfile(profileId: string, startUrl?: string): Promise<void>;
+    /** Resolve + normalize/validate the desired proxy (fail closed on legacy-invalid
+     *  configs — see browser-proxy-state.ts). null = direct egress. */
+    private resolveDesiredProxy;
+    private assertReady;
     stopProfile(profileId: string): Promise<void>;
     resetProfile(profileId: string): Promise<void>;
     stop(): Promise<void>;
@@ -68,34 +81,94 @@ export declare class BrowserProfileManager {
     handleViewerCommand(profileId: string, sessionId: string, command: string, input?: Record<string, unknown>, turn?: ViewerTurnConfig): Promise<Record<string, unknown>>;
     /** Read cdpHost/cdpPort from the bb-browser daemon `GET /status`. */
     private cdpEndpoint;
-    private prepareOpenProfile;
+    private lastCdpEndpoint;
+    /** Process-group id of the last spawned bb-browser tree (the detached child's
+     *  pid). Survives the child's exit — quiescence probes it AFTER stop() to
+     *  confirm the orphaned Chrome is gone too. null = never spawned. */
+    private lastPgid;
+    /** The browser tree's process-group id for the quiescence barrier. */
+    lastKnownProcessGroup(): number | null;
+    /** Peek the last known Chrome CDP endpoint WITHOUT starting anything. */
+    lastKnownCdpEndpoint(): {
+        host: string;
+        port: number;
+    } | null;
+    /**
+     * Land the profile on its start URL, idempotently, always inside its own
+     * context. A fresh account already opened `url` via `account_create`
+     * (accountCreated) — just bind it. Otherwise: reuse an owned tab already on
+     * the URL if any (repeated Open is a no-op), else NAVIGATE the profile's
+     * primary owned tab (`open {tabId}`) — never stack a new tab per Open.
+     */
     private openProfileTabOnce;
     private resetProfileOnce;
-    private prepareInvokeAccount;
     private recoverInvokeAvailability;
     private accountExists;
+    /** One account_info round trip: existence + whether bb-browser holds a proxy for
+     *  the account (server/username only — bb-browser never returns the password). */
+    private getAccountInfo;
+    /**
+     * Build the wire request for a forwarded browser command, binding it to a
+     * page the profile's account OWNS. bb-browser's own routing is account-blind
+     * (tab-less → global current tab → `targets[0]`, which is the default-context
+     * `about:blank` Chrome launches with — no cookies, NO PROXY), so:
+     *
+     *  - a caller-supplied `tabId`/`tab` must resolve to one of the profile's own
+     *    tabs (numeric global indices are rejected outright);
+     *  - every other tab-addressed command gets the profile's primary owned tab
+     *    stamped in (recreated inside the profile's BrowserContext if its pages
+     *    were closed — never silently retargeted at another page);
+     *  - only genuinely tab-less commands (TABLESS_COMMANDS) go unpinned.
+     */
     private buildCommandRequest;
     /**
-     * Account-scoped version of bb-browser's `resolveTabByDomain` (which is
-     * account-blind — the reason for this daemon-side preselection workaround).
-     * Two properties the bare `tab_new` + eval approach lacked, both caught on
-     * the staging closed-loop E2E (2026-06-04):
+     * The domain bb-browser's adapter metadata declares for `siteName` (via
+     * site_info), or '' when the adapter genuinely has no domain / does not exist.
+     * This is the ONLY trustworthy domain source for site_run routing — a
+     * caller-supplied request.domain is ignored by upstream site_run, so it can never
+     * gate account-safe routing.
+     *
+     * Error handling is deliberately split: ONLY a genuine application-level answer
+     * from bb-browser ("no such site") yields '' → the caller fails closed. A
+     * RECOVERABLE daemon/CDP failure (or any transport error) RETHROWS, so
+     * buildCommandRequest's existing `isRecoverableBrowserDaemonError` →
+     * `recoverInvokeAvailability` restart+retry path handles it. Masking those as a
+     * domain-less adapter would turn a transient hiccup into a permanent
+     * BROWSER_TARGET_UNAVAILABLE. Note a BrowserCommandError can itself carry a
+     * recoverable message ("Chrome not connected"), so the recoverable check wins.
+     */
+    private siteAdapterDomain;
+    /**
+     * First-use preparation — the SINGLE invariant shared by invoke, viewer, open,
+     * and ensureRuntime (fix #4). Runs ONCE per account per session:
+     *   1. resolve Parall's desired proxy (fail closed on invalid config);
+     *   2. ensure the account exists AND its applied proxy matches desired
+     *      (cookie-preserving reconcile if it drifted — e.g. a hydrated hosted
+     *      account created under an old proxy);
+     *   3. verify readiness (owned target answers; when proxied, a real request
+     *      traverses the proxy without a transport error).
+     * Subsequent calls take the steady fast path — no config fetch, no probe —
+     * unless `force` is set (explicit lifecycle open / pending-row recovery). A
+     * daemon restart, reset, or proxy reconcile clears the prepared marker so the
+     * next use re-prepares. Deduped so concurrent first-uses share one run.
+     */
+    private prepareForUse;
+    /**
+     * Ensure the profile's bb-browser account exists and honors the DESIRED proxy.
      *
-     * 1. Reuse: an existing account tab already on the domain is reused instead
-     *    of opening a new tab per eval (upstream reuses matching tabs too).
-     * 2. Load wait: after creating a tab, wait for the navigation to commit
-     *    before eval — upstream waits (~10s poll + settle); without it the clip
-     *    script races `about:blank` and relative fetches fail
-     *    ("Failed to parse URL from /hot.json").
+     * `desiredProxy` semantics:
+     *   - undefined (invoke fast path): don't fetch/reconcile — create-only proxy
+     *     resolution via opts.resolveProxy when the account is missing. A proxy
+     *     change applies at the next open / first ensure.
+     *   - null / config (open + first ensure): Parall's config is the SSOT. A
+     *     missing account is created with it; an existing account whose APPLIED
+     *     fingerprint (Parall-owned sidecar) differs is rebuilt with cookies
+     *     preserved (reconcileAccountProxy) — bb-browser's persisted account proxy
+     *     never wins.
      */
-    private resolveAccountDomainTab;
-    /** Find an account-owned tab whose URL host matches (optionally a specific tab). */
-    private findAccountTabOnHost;
     private ensureAccount;
+    private reconcileHost;
     private ensureAccountOwnedTab;
-    private profileAlreadyHasOpenTab;
-    private hasAccountOwnedTab;
-    private findAccountTabMatchingUrl;
     private reportStatus;
     private sendCommand;
     private ensureDaemon;

package/dist/clip-runtime/browser-profile-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-profile-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-manager.ts"],"names":[],"mappings":"AAOA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEnE;;;kFAGkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5F;;;;;8CAK0C;IAC1C,YAAY,CAAC,EAAE,CACb,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,kBAAkB,GAAG,IAAI,CAAC;CACrE;AAeD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzD;AA6BD,qBAAa,qBAAqB;IAiBpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAhBjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,UAAU,CAA8B;IAKhD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAI9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAElB,IAAI,EAAE,4BAA4B;IAWzD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CtF,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAO,GACzC,OAAO,CAAC,IAAI,CAAC;IAyBV,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBhE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyD3B;;;;OAIG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInC,qEAAqE;YACvD,WAAW;YAWX,kBAAkB;YAYlB,kBAAkB;YAUlB,gBAAgB;YAOhB,oBAAoB;YAKpB,yBAAyB;YAezB,aAAa;YAWb,mBAAmB;IAqBjC;;;;;;;;;;;;OAYG;YACW,uBAAuB;IAiCrC,oFAAoF;YACtE,oBAAoB;YAuBpB,aAAa;YAsCb,qBAAqB;YAKrB,wBAAwB;YAQxB,kBAAkB;YAQlB,yBAAyB;IAqBvC,OAAO,CAAC,YAAY;YAON,WAAW;YAaX,YAAY;YAmCZ,kBAAkB;YAUlB,aAAa;YAUb,iBAAiB;YAyBjB,WAAW;YAuBX,kBAAkB;YA8ElB,IAAI;CA2BnB"}
+{"version":3,"file":"browser-profile-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-manager.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEnE;;;kFAGkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5F;;;;;;uCAMmC;IACnC,YAAY,CAAC,EAAE,CACb,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,kBAAkB,GAAG,IAAI,CAAC;IACpE;;;6EAGyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAeD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzD;AA6BD,qBAAa,qBAAqB;IA6BpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IA5BjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,UAAU,CAA8B;IAKhD,OAAO,CAAC,QAAQ,CAAS;IAOzB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAmD;IACrF,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAI9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAIhD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAElB,IAAI,EAAE,4BAA4B;IAezD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IA8CtF,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAO,GACzC,OAAO,CAAC,IAAI,CAAC;IA4BV,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BtE;uEACmE;YACrD,mBAAmB;IAKjC,OAAO,CAAC,WAAW;IAYb,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA2D3B;;;;OAIG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInC,qEAAqE;YACvD,WAAW;IAgBzB,OAAO,CAAC,eAAe,CAA+C;IAEtE;;yEAEqE;IACrE,OAAO,CAAC,QAAQ,CAAuB;IAEvC,sEAAsE;IACtE,qBAAqB,IAAI,MAAM,GAAG,IAAI;IAItC,yEAAyE;IACzE,oBAAoB,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAI7D;;;;;;OAMG;YACW,kBAAkB;YAmBlB,gBAAgB;YAchB,yBAAyB;YAezB,aAAa;IAI3B;sFACkF;YACpE,cAAc;IAe5B;;;;;;;;;;;;OAYG;YACW,mBAAmB;IAkFjC;;;;;;;;;;;;;;;OAeG;YACW,iBAAiB;IAY/B;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,aAAa;IAwCrB;;;;;;;;;;;;OAYG;YACW,aAAa;IAmD3B,OAAO,CAAC,aAAa;YAUP,qBAAqB;IAInC,OAAO,CAAC,YAAY;YAON,WAAW;YAaX,YAAY;YAmCZ,kBAAkB;YAUlB,aAAa;YAUb,iBAAiB;YA2BjB,WAAW;YAuBX,kBAAkB;YAsFlB,IAAI;CA2BnB"}