@parall/daemon 1.45.0 → 1.46.0

package/dist/clip-runtime/browser-profile-pool.d.ts

@@ -29,6 +29,9 @@ export interface BrowserProfilePoolOptions {
     /** Per-profile outbound proxy resolver (#1642), threaded to each profile's
      *  manager so its isolated Chromium binds its own egress proxy at account_create. */
     resolveProxy?: BrowserProfileManagerOptions['resolveProxy'];
+    /** Proxy readiness probe endpoint, threaded to each manager (see
+     *  browser-readiness.ts). */
+    proxyProbeUrl?: string;
     /**
      * Per-profile runtime factory. Defaults to a real {@link BrowserProfileManager};
      * overridable in tests to avoid spawning a real bb-browser / Chromium.

package/dist/clip-runtime/browser-profile-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-profile-pool.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-pool.ts"],"names":[],"mappings":"AAUA,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAGxD,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,mBAAmB,CACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpC,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,yFAAyF;IACzF,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACzC;;;;yDAIqD;IACrD,YAAY,CAAC,EAAE,CACb,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,CAAC,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,KAChB,IAAI,CAAC;IACV;yFACqF;IACrF,YAAY,CAAC,EAAE,4BAA4B,CAAC,cAAc,CAAC,CAAC;IAC5D;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,4BAA4B,KAAK,qBAAqB,CAAC;CAC/E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IAwC3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAvCjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IAMrE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuC;IAShE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAO7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IAKrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IAKzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAK1D,OAAO,CAAC,QAAQ,CAAS;gBAEI,IAAI,EAAE,yBAAyB;IAS5D,sFAAsF;IACtF,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;YAiCzC,iBAAiB;IAa/B;;;;;;OAMG;IACH,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAO,GACzC,OAAO,CAAC,IAAI,CAAC;IAahB,iGAAiG;IACjG,WAAW,CACT,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAWhB,+EAA+E;IAC/E,OAAO,CAAC,aAAa;IAQrB,qFAAqF;IACrF,mBAAmB,CACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAqBnC;;;;;;;;OAQG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBlE;;;;;;;;OAQG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWhD;;;;;;;;;;OAUG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAa9B,oFAAoF;IACpF,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIpC;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB7F;;;;;;;OAOG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAQ3D,WAAW;IAQzB;;;;;OAKG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS5C;;;;;;;OAOG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAa3B;;;;;;OAMG;IACH,gBAAgB,IAAI,MAAM,EAAE;IAI5B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,OAAO;IAkBf;;;;OAIG;IACH,OAAO,CAAC,OAAO;IA2Bf;4DACwD;YAC1C,OAAO;IAQrB,OAAO,CAAC,WAAW;IAInB,8EAA8E;IAC9E,OAAO,CAAC,iBAAiB;IAIzB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAmB1B,OAAO,CAAC,QAAQ;IAIhB,mFAAmF;IACnF,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAejD,OAAO,CAAC,oBAAoB;IAQ5B;;;;;;;;;;;OAWG;IACH,oBAAoB,IAAI,MAAM,EAAE;IAsBhC;;;;;;;;;OASG;IACH,OAAO,CAAC,uBAAuB;CAqBhC"}
+{"version":3,"file":"browser-profile-pool.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-pool.ts"],"names":[],"mappings":"AAUA,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAGxD,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,mBAAmB,CACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpC,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,yFAAyF;IACzF,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACzC;;;;yDAIqD;IACrD,YAAY,CAAC,EAAE,CACb,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,CAAC,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,KAChB,IAAI,CAAC;IACV;yFACqF;IACrF,YAAY,CAAC,EAAE,4BAA4B,CAAC,cAAc,CAAC,CAAC;IAC5D;iCAC6B;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,4BAA4B,KAAK,qBAAqB,CAAC;CAC/E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IAwC3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAvCjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IAMrE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuC;IAShE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAO7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IAKrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IAKzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAK1D,OAAO,CAAC,QAAQ,CAAS;gBAEI,IAAI,EAAE,yBAAyB;IAS5D,sFAAsF;IACtF,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;YAiCzC,iBAAiB;IAa/B;;;;;;OAMG;IACH,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAO,GACzC,OAAO,CAAC,IAAI,CAAC;IAahB,iGAAiG;IACjG,WAAW,CACT,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IA0BhB,+EAA+E;IAC/E,OAAO,CAAC,aAAa;IAQrB,qFAAqF;IACrF,mBAAmB,CACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAqBnC;;;;;;;;OAQG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBlE;;;;;;;;OAQG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWhD;;;;;;;;;;OAUG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAa9B,oFAAoF;IACpF,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIpC;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB7F;;;;;;;OAOG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAQ3D,WAAW;IAQzB;;;;;OAKG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS5C;;;;;;;OAOG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAa3B;;;;;;OAMG;IACH,gBAAgB,IAAI,MAAM,EAAE;IAI5B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,OAAO;IAkBf;;;;OAIG;IACH,OAAO,CAAC,OAAO;IA4Bf;4DACwD;YAC1C,OAAO;IAQrB,OAAO,CAAC,WAAW;IAInB,8EAA8E;IAC9E,OAAO,CAAC,iBAAiB;IAIzB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAmB1B,OAAO,CAAC,QAAQ;IAIhB,mFAAmF;IACnF,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAejD,OAAO,CAAC,oBAAoB;IAQ5B;;;;;;;;;;;OAWG;IACH,oBAAoB,IAAI,MAAM,EAAE;IAsBhC;;;;;;;;;OASG;IACH,OAAO,CAAC,uBAAuB;CAqBhC"}

package/dist/clip-runtime/browser-profile-pool.js

@@ -151,7 +151,23 @@ export class BrowserProfilePool {
             if (generation !== undefined)
                 this.generations.set(profileId, generation);
             this.stopped.delete(profileId); // explicit open revives a stopped profile
-            await this.manager(profileId).openProfile(profileId, startUrl);
+            try {
+                await this.manager(profileId).openProfile(profileId, startUrl);
+            }
+            catch (err) {
+                // Failed open: tear the half-started runtime down (no zombie Chromium
+                // burning resources behind an `error` row) and re-fence so late hub
+                // invokes are rejected until an explicit reopen. The manager already
+                // reported `error` with the structured cause; keep the rejection.
+                // stopped.add only — no fence() bump, so an open QUEUED behind this one
+                // (captured seq unchanged) still revives normally.
+                this.stopped.add(profileId);
+                const manager = this.managers.get(profileId);
+                if (manager) {
+                    await this.dispose(profileId, manager).catch(() => { });
+                }
+                throw err;
+            }
         }));
     }
     /** True if a newer stop was observed after this revive captured `sinceSeq`. */
@@ -416,6 +432,7 @@ export class BrowserProfilePool {
             // manager, so each isolated Chromium binds its own egress proxy at
             // account_create (the resolver is keyed by profileId === account).
             resolveProxy: this.opts.resolveProxy,
+            proxyProbeUrl: this.opts.proxyProbeUrl,
         });
         this.managers.set(profileId, manager);
         return manager;

package/dist/clip-runtime/browser-proxy-reconcile.d.ts

@@ -0,0 +1,77 @@
+import type { BrowserProxyConfig } from './browser-profile-manager.js';
+import type { BrowserTargetRegistry } from './browser-target-registry.js';
+/**
+ * Cookie-preserving proxy reconciliation (desired-state enforcement).
+ *
+ * bb-browser binds an account's proxy at account_create and REPLAYS the proxy
+ * stored in its own account JSON on every later context activation — there is
+ * no update API, and `account_delete` (the only rebind path) destroys the
+ * cookie jar. So a proxy edit in Parall would either never apply or cost the
+ * user their logins. This module closes that gap without touching bb-browser:
+ *
+ *   1. capture the FULL cookie jar (HttpOnly included) straight from Chromium
+ *      via CDP `Storage.getCookies({browserContextId})`;
+ *   2. persist it as a backup (crash safety — a fresh account JSON starts empty,
+ *      so a crash mid-reconcile must not lose the jar);
+ *   3. `account_delete` → `account_create` with the DESIRED proxy fields;
+ *   4. restore the jar into the recreated context via `Storage.setCookies`;
+ *   5. DELETE the backup, THEN record the applied fingerprint in the sidecar —
+ *      in that order (fix #8). Writing the fingerprint LAST guarantees a backup
+ *      is never left on disk alongside an up-to-date fingerprint, so a later
+ *      proxy change can never resurrect a stale jar over the current login, and
+ *      old cookies never linger. bb-browser's own autosave then persists the
+ *      restored cookies into its new account JSON — Parall never writes that file.
+ *
+ * Scope note: account BrowserContexts are CDP-created (incognito-style), so
+ * their localStorage/IndexedDB were never durable across a Chromium restart in
+ * bb-browser's design (only cookies persist, via its account JSON). Every
+ * reconcile runs at open-after-stop — i.e. after a Chromium restart — so
+ * reconciliation never loses state that would otherwise have survived.
+ */
+export interface ProxyReconcileHost {
+    log: {
+        info(msg: string): void;
+        warn(msg: string): void;
+        error(msg: string): void;
+    };
+    homeDir: string;
+    targets: BrowserTargetRegistry;
+    sendCommand(request: Record<string, unknown> & {
+        method: string;
+        account?: string;
+    }): Promise<Record<string, unknown>>;
+    cdpEndpoint(): Promise<{
+        host: string;
+        port: number;
+    }>;
+}
+/** Render a proxy config into bb-browser `account_create` fields (camelCase, the
+ *  bb-browser-pro 0.15 contract). Empty when there is no proxy → direct egress. */
+export declare function proxyCreateFields(proxy: BrowserProxyConfig | null): Record<string, string>;
+/**
+ * Whether the account must be rebuilt to honor `desired`. Unknown recorded
+ * state (pre-upgrade account, wiped sidecar) reconciles unless BOTH the desired
+ * config and the account's visible proxy are direct — the account JSON may
+ * carry a stale proxy (or a stale password) that Parall's config no longer
+ * matches, and one context rebuild with cookies preserved is invisible.
+ */
+export declare function proxyReconcileNeeded(recordedFingerprint: string | undefined, desired: BrowserProxyConfig | null, accountShowsProxy: boolean): boolean;
+/**
+ * Rebuild the account's BrowserContext with the desired proxy, preserving its
+ * cookie jar. The account MUST exist; callers hold the per-profile op mutex.
+ */
+export declare function reconcileAccountProxy(host: ProxyReconcileHost, account: string, desired: BrowserProxyConfig | null): Promise<void>;
+/**
+ * Recover a reconcile that crashed after account_delete: the account no longer
+ * exists, but a cookie backup does. Called right after a fresh account_create —
+ * runs the same settle tail (restore → clear → fingerprint). Without a backup,
+ * just records the applied fingerprint for the fresh account.
+ */
+export declare function settlePendingCookieBackup(host: ProxyReconcileHost, account: string, applied: string): Promise<void>;
+/**
+ * A log/error-safe proxy label: scheme + host:port ONLY. The username is auth
+ * material (customer / region / session selectors) and `server` may itself embed
+ * `user:pass@` userinfo, so neither is ever emitted — only the endpoint.
+ */
+export declare function redactedProxyLabel(proxy: BrowserProxyConfig): string;
+//# sourceMappingURL=browser-proxy-reconcile.d.ts.map

package/dist/clip-runtime/browser-proxy-reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-proxy-reconcile.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-proxy-reconcile.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAQvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,WAAW,CACT,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACtE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpC,WAAW,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED;mFACmF;AACnF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAM1F;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,mBAAmB,EAAE,MAAM,GAAG,SAAS,EACvC,OAAO,EAAE,kBAAkB,GAAG,IAAI,EAClC,iBAAiB,EAAE,OAAO,GACzB,OAAO,CAKT;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,kBAAkB,GAAG,IAAI,GACjC,OAAO,CAAC,IAAI,CAAC,CAyBf;AAqBD;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAUf;AAiDD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAapE"}

package/dist/clip-runtime/browser-proxy-reconcile.js

@@ -0,0 +1,139 @@
+import { BrowserCdpClient, getContextCookies, setContextCookies, targetBrowserContextId, } from './browser-cdp.js';
+import { clearCookieBackup, proxyFingerprint, readCookieBackup, writeAppliedProxyFingerprint, writeCookieBackup, } from './browser-proxy-state.js';
+/** Render a proxy config into bb-browser `account_create` fields (camelCase, the
+ *  bb-browser-pro 0.15 contract). Empty when there is no proxy → direct egress. */
+export function proxyCreateFields(proxy) {
+    if (!proxy?.server)
+        return {};
+    const fields = { proxyServer: proxy.server };
+    if (proxy.username)
+        fields.proxyUsername = proxy.username;
+    if (proxy.password)
+        fields.proxyPassword = proxy.password;
+    return fields;
+}
+/**
+ * Whether the account must be rebuilt to honor `desired`. Unknown recorded
+ * state (pre-upgrade account, wiped sidecar) reconciles unless BOTH the desired
+ * config and the account's visible proxy are direct — the account JSON may
+ * carry a stale proxy (or a stale password) that Parall's config no longer
+ * matches, and one context rebuild with cookies preserved is invisible.
+ */
+export function proxyReconcileNeeded(recordedFingerprint, desired, accountShowsProxy) {
+    const want = proxyFingerprint(desired);
+    if (recordedFingerprint !== undefined)
+        return recordedFingerprint !== want;
+    if (desired === null && !accountShowsProxy)
+        return false;
+    return true;
+}
+/**
+ * Rebuild the account's BrowserContext with the desired proxy, preserving its
+ * cookie jar. The account MUST exist; callers hold the per-profile op mutex.
+ */
+export async function reconcileAccountProxy(host, account, desired) {
+    const want = proxyFingerprint(desired);
+    host.log.info(`[bb-browser] reconciling proxy for ${account} → ${desired ? redactedProxyLabel(desired) : 'direct egress'} (${want.slice(0, 19)}…)`);
+    // A backup from a crashed prior attempt is the authoritative pre-reconcile jar
+    // — the live context may already be a half-rebuilt empty one, so never
+    // overwrite the backup with a fresh capture in that case. (Invariant: a backup
+    // present ⟹ the fingerprint is NOT yet up to date, so this jar is genuinely
+    // pre-reconcile, never a stale leftover — see browser-proxy-state.ts.)
+    let jar = readCookieBackup(host.homeDir, account);
+    if (!jar) {
+        jar = await captureAccountCookies(host, account);
+        writeCookieBackup(host.homeDir, account, jar);
+    }
+    else {
+        host.log.warn(`[bb-browser] resuming interrupted proxy reconcile for ${account} from cookie backup (${jar.length} cookies)`);
+    }
+    await host.sendCommand({ method: 'account_delete', account });
+    await host.sendCommand({ method: 'account_create', account, ...proxyCreateFields(desired) });
+    await settleProxyRebuild(host, account, jar, want);
+    host.log.info(`[bb-browser] proxy reconciled for ${account}; ${jar.length} cookies preserved`);
+}
+/**
+ * The ONE settle tail of every proxy rebuild — restore the jar into the fresh
+ * context, clear the backup, write the applied fingerprint, in exactly that
+ * order. The ordering is load-bearing: the fingerprint is written LAST, so a
+ * crash at any point leaves it stale → the next open reconciles again — and it
+ * can never read a leftover backup as if it were pre-reconcile (invariant: a
+ * backup never coexists with an up-to-date fingerprint).
+ */
+async function settleProxyRebuild(host, account, jar, want) {
+    await restoreAccountCookies(host, account, jar);
+    clearCookieBackup(host.homeDir, account);
+    writeAppliedProxyFingerprint(host.homeDir, account, want);
+}
+/**
+ * Recover a reconcile that crashed after account_delete: the account no longer
+ * exists, but a cookie backup does. Called right after a fresh account_create —
+ * runs the same settle tail (restore → clear → fingerprint). Without a backup,
+ * just records the applied fingerprint for the fresh account.
+ */
+export async function settlePendingCookieBackup(host, account, applied) {
+    const jar = readCookieBackup(host.homeDir, account);
+    if (!jar) {
+        writeAppliedProxyFingerprint(host.homeDir, account, applied);
+        return;
+    }
+    host.log.warn(`[bb-browser] restoring ${jar.length} cookies for ${account} from an interrupted proxy reconcile`);
+    await settleProxyRebuild(host, account, jar, applied);
+}
+/** Capture the full jar of the account's BrowserContext via CDP. */
+async function captureAccountCookies(host, account) {
+    // Ensure the context is live (a stopped account's cookies exist only in
+    // bb-browser's JSON until activation re-injects them) — an owned tab forces
+    // activation, and its targetId maps to the context id.
+    const targetId = await host.targets.ensureOwnedTab(account);
+    const { host: cdpHost, port } = await host.cdpEndpoint();
+    const cdp = await BrowserCdpClient.connect(cdpHost, port);
+    try {
+        const contextId = await targetBrowserContextId(cdp, targetId);
+        if (!contextId) {
+            throw new Error(`owned tab ${targetId} for ${account} reports no browserContextId — refusing to capture the default context's cookies`);
+        }
+        return await getContextCookies(cdp, contextId);
+    }
+    finally {
+        cdp.close();
+    }
+}
+/** Restore a jar into the account's (fresh) BrowserContext via CDP. */
+async function restoreAccountCookies(host, account, cookies) {
+    const targetId = await host.targets.ensureOwnedTab(account);
+    if (cookies.length === 0)
+        return;
+    const { host: cdpHost, port } = await host.cdpEndpoint();
+    const cdp = await BrowserCdpClient.connect(cdpHost, port);
+    try {
+        const contextId = await targetBrowserContextId(cdp, targetId);
+        if (!contextId) {
+            throw new Error(`owned tab ${targetId} for ${account} reports no browserContextId — refusing to restore cookies into the default context`);
+        }
+        await setContextCookies(cdp, contextId, cookies);
+    }
+    finally {
+        cdp.close();
+    }
+}
+/**
+ * A log/error-safe proxy label: scheme + host:port ONLY. The username is auth
+ * material (customer / region / session selectors) and `server` may itself embed
+ * `user:pass@` userinfo, so neither is ever emitted — only the endpoint.
+ */
+export function redactedProxyLabel(proxy) {
+    const raw = proxy.server;
+    try {
+        const u = new URL(raw.includes('://') ? raw : `http://${raw}`);
+        // u.host is hostname[:port] with NO userinfo; keep the real scheme when present.
+        return raw.includes('://') ? `${u.protocol}//${u.host}` : u.host;
+    }
+    catch {
+        // Unparseable — return a FIXED safe placeholder. Do not attempt to salvage a
+        // "host" from attacker-controlled malformed text: a hand-rolled strip can still
+        // leak a credential or tokenized fragment that URL() rejected but our regex
+        // didn't anticipate. If URL() couldn't parse it, emit nothing derived from it.
+        return '<proxy>';
+    }
+}

package/dist/clip-runtime/browser-proxy-state.d.ts

@@ -0,0 +1,55 @@
+import type { BrowserProxyConfig } from './browser-profile-manager.js';
+/**
+ * Proxy desired-state plumbing for browser profiles.
+ *
+ * Parall's stored profile config is the ONLY source of truth for a profile's
+ * proxy. bb-browser persists whatever proxy an account was created with inside
+ * its own account JSON and silently replays it on every context activation —
+ * that file must never win over Parall's config. So the daemon records the
+ * fingerprint of the proxy it ACTUALLY applied in a Parall-owned sidecar (next
+ * to, never inside, bb-browser's files) and reconciles on open/ensure whenever
+ * the desired config differs (see browser-proxy-reconcile.ts).
+ *
+ * Validation policy lives in ONE place — the Go API
+ * (server/pkg/model/browser_proxy.go validates at create, update, AND open,
+ * which re-checks stored legacy rows before any runtime is dispatched). The
+ * daemon does NOT re-implement that policy; normalizeProxyConfig below keeps
+ * only the minimal fail-closed guards against a config that slipped past the
+ * canonical validator (corrupt row, stale env), in exactly the shapes where
+ * the runtime would otherwise LEAK silently instead of failing visibly.
+ */
+/** Structured codes for the runtime guards (subset of the Go codes). */
+export declare class BrowserProxyConfigError extends Error {
+    readonly code: 'PROXY_SERVER_REQUIRED' | 'PROXY_AUTH_INCOMPLETE' | 'PROXY_SOCKS_AUTH_UNSUPPORTED' | 'PROXY_CREDENTIALS_REQUIRED';
+    constructor(code: 'PROXY_SERVER_REQUIRED' | 'PROXY_AUTH_INCOMPLETE' | 'PROXY_SOCKS_AUTH_UNSUPPORTED' | 'PROXY_CREDENTIALS_REQUIRED', message: string);
+}
+/**
+ * Minimal fail-closed sanity check on the canonical (Go-validated) proxy DTO.
+ * Exactly three guards — each one a shape where bb-browser/Chromium would
+ * SILENTLY drop the proxy and egress from the real IP rather than error:
+ *
+ *  1. credentials without a server (corrupt row — nothing to proxy through);
+ *  2. SOCKS5 (Chromium has no SOCKS auth; without auth, bb-browser drops the
+ *     proxy entirely) — structurally unsupported, matching the API contract;
+ *  3. missing/incomplete credentials (bb-browser applies a proxy only when
+ *     server+username+password are ALL present).
+ *
+ * Everything else — scheme allowlist, host:port authority shape, length caps —
+ * is the Go validator's job and is NOT re-checked here. Returns the config
+ * (trimmed server), or null for "no proxy" (direct egress).
+ */
+export declare function normalizeProxyConfig(proxy: BrowserProxyConfig | null): BrowserProxyConfig | null;
+/**
+ * Stable fingerprint of the COMPLETE normalized proxy config (scheme, host,
+ * port, username, password). Only ever logged/persisted as a hash — the
+ * password itself never appears in logs or the sidecar.
+ */
+export declare function proxyFingerprint(proxy: BrowserProxyConfig | null): string;
+export declare function appliedProxyFingerprint(homeDir: string, account: string): string | undefined;
+export declare function writeAppliedProxyFingerprint(homeDir: string, account: string, fingerprint: string): void;
+/** The pre-reconcile jar for an interrupted reconcile, or null when none. */
+export declare function readCookieBackup(homeDir: string, account: string): Array<Record<string, unknown>> | null;
+export declare function writeCookieBackup(homeDir: string, account: string, cookies: Array<Record<string, unknown>>): void;
+/** Remove the account's cookie backup entirely (post-restore cleanup). */
+export declare function clearCookieBackup(homeDir: string, account: string): void;
+//# sourceMappingURL=browser-proxy-state.d.ts.map

package/dist/clip-runtime/browser-proxy-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-proxy-state.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-proxy-state.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEvE;;;;;;;;;;;;;;;;;;GAkBG;AAEH,wEAAwE;AACxE,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EACT,uBAAuB,GACvB,uBAAuB,GACvB,8BAA8B,GAC9B,4BAA4B;gBAJvB,IAAI,EACT,uBAAuB,GACvB,uBAAuB,GACvB,8BAA8B,GAC9B,4BAA4B,EAChC,OAAO,EAAE,MAAM;CAKlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,kBAAkB,GAAG,IAAI,CAmChG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,MAAM,CAQzE;AAmCD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG5F;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,IAAI,CAIN;AAuBD,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAKvC;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACtC,IAAI,CAIN;AAED,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAIxE"}

package/dist/clip-runtime/browser-proxy-state.js

@@ -0,0 +1,149 @@
+import { createHash } from 'node:crypto';
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import * as path from 'node:path';
+/**
+ * Proxy desired-state plumbing for browser profiles.
+ *
+ * Parall's stored profile config is the ONLY source of truth for a profile's
+ * proxy. bb-browser persists whatever proxy an account was created with inside
+ * its own account JSON and silently replays it on every context activation —
+ * that file must never win over Parall's config. So the daemon records the
+ * fingerprint of the proxy it ACTUALLY applied in a Parall-owned sidecar (next
+ * to, never inside, bb-browser's files) and reconciles on open/ensure whenever
+ * the desired config differs (see browser-proxy-reconcile.ts).
+ *
+ * Validation policy lives in ONE place — the Go API
+ * (server/pkg/model/browser_proxy.go validates at create, update, AND open,
+ * which re-checks stored legacy rows before any runtime is dispatched). The
+ * daemon does NOT re-implement that policy; normalizeProxyConfig below keeps
+ * only the minimal fail-closed guards against a config that slipped past the
+ * canonical validator (corrupt row, stale env), in exactly the shapes where
+ * the runtime would otherwise LEAK silently instead of failing visibly.
+ */
+/** Structured codes for the runtime guards (subset of the Go codes). */
+export class BrowserProxyConfigError extends Error {
+    code;
+    constructor(code, message) {
+        super(`${code}: ${message}`);
+        this.code = code;
+        this.name = 'BrowserProxyConfigError';
+    }
+}
+/**
+ * Minimal fail-closed sanity check on the canonical (Go-validated) proxy DTO.
+ * Exactly three guards — each one a shape where bb-browser/Chromium would
+ * SILENTLY drop the proxy and egress from the real IP rather than error:
+ *
+ *  1. credentials without a server (corrupt row — nothing to proxy through);
+ *  2. SOCKS5 (Chromium has no SOCKS auth; without auth, bb-browser drops the
+ *     proxy entirely) — structurally unsupported, matching the API contract;
+ *  3. missing/incomplete credentials (bb-browser applies a proxy only when
+ *     server+username+password are ALL present).
+ *
+ * Everything else — scheme allowlist, host:port authority shape, length caps —
+ * is the Go validator's job and is NOT re-checked here. Returns the config
+ * (trimmed server), or null for "no proxy" (direct egress).
+ */
+export function normalizeProxyConfig(proxy) {
+    if (!proxy || !proxy.server?.trim()) {
+        if (proxy && (proxy.username || proxy.password)) {
+            throw new BrowserProxyConfigError('PROXY_SERVER_REQUIRED', 'proxy credentials are set but the proxy server is empty');
+        }
+        return null;
+    }
+    const server = proxy.server.trim();
+    const username = proxy.username ?? '';
+    const password = proxy.password ?? '';
+    if (/^socks5h?:\/\//i.test(server)) {
+        throw new BrowserProxyConfigError('PROXY_SOCKS_AUTH_UNSUPPORTED', 'SOCKS5 proxies are not supported by the browser runtime (authenticated HTTP/HTTPS only)');
+    }
+    if ((username === '') !== (password === '')) {
+        throw new BrowserProxyConfigError('PROXY_AUTH_INCOMPLETE', 'proxy_username and proxy_password must be provided together');
+    }
+    if (username === '') {
+        // bb-browser applies a proxy only when server+username+password are ALL
+        // present; a credential-less config is silently dropped and the profile
+        // egresses from the host's real IP. Fail closed instead of leaking.
+        throw new BrowserProxyConfigError('PROXY_CREDENTIALS_REQUIRED', 'the browser runtime cannot apply a credential-less proxy and would silently egress from the real IP');
+    }
+    return { server, username, password };
+}
+/**
+ * Stable fingerprint of the COMPLETE normalized proxy config (scheme, host,
+ * port, username, password). Only ever logged/persisted as a hash — the
+ * password itself never appears in logs or the sidecar.
+ */
+export function proxyFingerprint(proxy) {
+    if (!proxy)
+        return 'direct';
+    const canonical = JSON.stringify({
+        server: proxy.server,
+        username: proxy.username ?? '',
+        password: proxy.password ?? '',
+    });
+    return `sha256:${createHash('sha256').update(canonical).digest('hex')}`;
+}
+// ---------------------------------------------------------------------------
+// Applied-proxy sidecar — `<homeDir>/.parall-proxy-state.json`
+//
+// Records, per account, the fingerprint of the proxy configuration the daemon
+// last APPLIED at account_create. Parall-owned (bb-browser never reads it);
+// lives in the profile home so a BYOC reset's home wipe clears it and the
+// hosted pod's S3 snapshot carries it alongside the state it describes.
+// Missing/corrupt reads as "unknown" → reconcile decides conservatively.
+// ---------------------------------------------------------------------------
+const PROXY_STATE_FILE = '.parall-proxy-state.json';
+const COOKIE_BACKUP_FILE = '.parall-proxy-cookie-backup.json';
+// Parse a sidecar as a PLAIN OBJECT. `JSON.parse` of `null`, an array, or a
+// primitive does NOT throw, so a corrupt sidecar would otherwise slip past a bare
+// try/catch and crash the next property access/assignment (`state.applied = …`),
+// wedging proxy recovery. Coerce any non-object shape to {} so a corrupt file
+// reads as empty and the reconcile rebuilds it.
+function readSidecarObject(homeDir, file) {
+    try {
+        const parsed = JSON.parse(readFileSync(path.join(homeDir, file), 'utf8'));
+        return parsed && typeof parsed === 'object' && !Array.isArray(parsed)
+            ? parsed
+            : {};
+    }
+    catch {
+        return {};
+    }
+}
+export function appliedProxyFingerprint(homeDir, account) {
+    const value = readSidecarObject(homeDir, PROXY_STATE_FILE).applied?.[account];
+    return typeof value === 'string' && value ? value : undefined;
+}
+export function writeAppliedProxyFingerprint(homeDir, account, fingerprint) {
+    const state = readSidecarObject(homeDir, PROXY_STATE_FILE);
+    state.applied = { ...state.applied, [account]: fingerprint };
+    atomicWriteJson(path.join(homeDir, PROXY_STATE_FILE), state);
+}
+/** The pre-reconcile jar for an interrupted reconcile, or null when none. */
+export function readCookieBackup(homeDir, account) {
+    const cookies = readSidecarObject(homeDir, COOKIE_BACKUP_FILE).backups?.[account];
+    return Array.isArray(cookies) ? cookies : null;
+}
+export function writeCookieBackup(homeDir, account, cookies) {
+    updateCookieBackupFile(homeDir, (file) => {
+        file.backups = { ...file.backups, [account]: cookies };
+    });
+}
+/** Remove the account's cookie backup entirely (post-restore cleanup). */
+export function clearCookieBackup(homeDir, account) {
+    updateCookieBackupFile(homeDir, (file) => {
+        if (file.backups)
+            delete file.backups[account];
+    });
+}
+function updateCookieBackupFile(homeDir, mutate) {
+    const file = readSidecarObject(homeDir, COOKIE_BACKUP_FILE);
+    mutate(file);
+    atomicWriteJson(path.join(homeDir, COOKIE_BACKUP_FILE), file);
+}
+function atomicWriteJson(filePath, value) {
+    mkdirSync(path.dirname(filePath), { recursive: true });
+    const tmp = `${filePath}.tmp-${process.pid}`;
+    writeFileSync(tmp, JSON.stringify(value));
+    renameSync(tmp, filePath);
+}

package/dist/clip-runtime/browser-quiescence.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Browser quiescence — the Chrome-exit barrier before a hosted pod's FINAL
+ * checkpoint.
+ *
+ * Why it exists: bb-browser's SIGTERM handler sends Chrome SIGTERM and
+ * `process.exit(0)`s WITHOUT awaiting it, so "the bb-browser child exited"
+ * does not mean the user-data-dir is quiet — an orphaned Chromium may still be
+ * flushing cookies/IndexedDB, and a snapshot taken then is torn (SQLite
+ * mid-write). The final checkpoint must run only after every browser process
+ * is provably gone.
+ *
+ * Ownership model: the daemon spawns bb-browser with `detached: true`, making
+ * it the LEADER of a fresh process group; bb-browser spawns Chrome with
+ * `detached: false` (verified against its bundled source), so Chrome and every
+ * renderer inherit that group. The group id (= the bb-browser child's pid) is
+ * therefore a complete, daemon-owned handle on the whole browser tree:
+ *
+ *   - liveness  = `kill(-pgid, 0)` (ESRCH ⇒ no member left);
+ *   - shutdown  = one signal to `-pgid` reaches every member;
+ *   - safety    = POSIX reserves a pid while it names a live process group, so
+ *     the pgid cannot be recycled out from under us while any member lives.
+ *     EPERM on the probe means "members exist but none are ours" — our whole
+ *     tree (same uid, always signalable) must already be dead and the id was
+ *     recycled — so it reads as exited, and signalling stops immediately.
+ *
+ * No pid scanning, no /proc string matching, no directory-mtime polling: a
+ * profile's group contains exactly the processes its manager spawned, so
+ * quiescing profile A can never signal profile B.
+ *
+ * One CDP refusal probe remains as a CONFIRMATION (the DevTools listener lives
+ * inside the Chrome process, so a refused connect independently corroborates
+ * process exit) — it is not a second ownership authority.
+ *
+ * Everything is bounded by ONE absolute deadline. If exit cannot be confirmed
+ * by then, the answer is `quiesced: false` and the caller must skip the
+ * checkpoint — never guess safety.
+ */
+export interface QuiescenceResult {
+    quiesced: boolean;
+    /** True when exit needed SIGTERM/SIGKILL escalation to the group. */
+    escalated: boolean;
+    reason?: string;
+}
+export interface QuiescenceLogger {
+    info(msg: string): void;
+    warn(msg: string): void;
+}
+export interface QuiescenceOptions {
+    /**
+     * Process-group id of the browser tree (the detached bb-browser child's pid).
+     * null → no browser was ever spawned → trivially quiesced.
+     */
+    pgid: number | null;
+    /** Last known CDP endpoint for the confirmation probe; null → skip it. */
+    cdpEndpoint?: {
+        host: string;
+        port: number;
+    } | null;
+    /** How long to wait for self-exit (bb-browser's own shutdown already ran). */
+    exitDeadlineMs?: number;
+    /** Grace after each escalation signal. */
+    escalateGraceMs?: number;
+    /** Absolute ceiling for the whole barrier. */
+    totalDeadlineMs?: number;
+    pollMs?: number;
+    /** Signal seam (default process.kill) — lets tests keep a group "unkillable". */
+    kill?: (pid: number, signal: NodeJS.Signals | 0) => void;
+    log?: QuiescenceLogger;
+}
+export declare function awaitBrowserQuiescence(opts: QuiescenceOptions): Promise<QuiescenceResult>;
+//# sourceMappingURL=browser-quiescence.d.ts.map

package/dist/clip-runtime/browser-quiescence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-quiescence.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-quiescence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,0EAA0E;IAC1E,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACpD,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,CAAC;IACzD,GAAG,CAAC,EAAE,gBAAgB,CAAC;CACxB;AA2DD,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAqD/F"}