@parall/daemon 1.47.0 → 1.48.0

package/bundle/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.47.0",
-  "built_at": "2026-07-20T03:34:22.601Z",
+  "version": "1.48.0",
+  "built_at": "2026-07-21T07:52:25.995Z",
   "min_node_version": "20.0.0",
   "files": {
     "bb-browser-daemon.js": {
@@ -16,29 +16,29 @@
       "size": 18
     },
     "parall-browser-pod.js": {
-      "sha256": "a3dcf5eaae3552b8c8220231dfc1af9abc07991d5e9d18a33c1e6e94550c5740",
-      "size": 2889611
+      "sha256": "d35ed50bf1fc1266cb8001c9dd3e694dff9847738d125582ccaca81bc3db45d5",
+      "size": 2894062
     },
     "parall-channel-exec.js": {
       "sha256": "7c2a6e12483a45e9eb4a42cd7d4cdd3c4fa21dd09ac1347d9a3e177b4ddee930",
       "size": 7220
     },
     "parall-claude-agent.js": {
-      "sha256": "ba2f015614ac1b2177fb1326129aba73ed1575bad646f279c2e4b3e7106a838c",
-      "size": 2721373
+      "sha256": "852f7b7d3840f243d39d5ec2f23735ee80fce6fb9c5f8ab5ff1cfb7d5281ad51",
+      "size": 2727384
     },
     "parall-codex-agent.js": {
-      "sha256": "35bcc6c1651f40e4e169eef9afb1969ca97bb946ebc6f80beb1eef61cf76c65f",
-      "size": 2763113
+      "sha256": "c331674763f9c237d6a3ee03d9bc8f4137c154e2e576caa5fd23bbe32f0f2b49",
+      "size": 2769124
     },
     "parall-daemon.js": {
-      "sha256": "5bcbd939b1c753687ec7a79f5df98210aee6d92d825e043d4ad1b38b2daa5883",
-      "size": 2950822
+      "sha256": "0c41c7255f98339d095faf96e7b712c150d442696eefcb3965d3e59ad0f251fa",
+      "size": 2955625
     },
     "parall-openclaw-agent.js": {
       "sha256": "856a1c3a9ae0ffef8efe2481fa1171dbeb1d67cccb88616aa9bf16da96a69355",
       "size": 9923
     }
   },
-  "signature": "jEnwJR/MRRqU9qfDoaqSVZdhjBLn4MLME3hjhe5l5AM7KRGMlrbTjc2r/8Vq3STH/d8RCJl++tBgL0rB31i+CA=="
+  "signature": "u4mhCrFPCejnf/mBjQdNvKkDaQE0MjumZpTc5eHA+Qz7cbemy1WDRhy+j0A4pMvBezJqwUIoyQqn84jfjcgBDA=="
 }

package/bundle/parall-browser-pod.js

@@ -63852,10 +63852,17 @@ var ENDPOINTS = {
   ORG_EDGE: (orgId) => `/api/v1/orgs/${orgId}/edge`,
   ORG_EDGE_DEVICES: (orgId) => `/api/v1/orgs/${orgId}/edge/devices`,
   ORG_EDGE_DEVICE: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}`,
+  ORG_EDGE_DEVICE_UNREGISTER: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/unregister`,
   ORG_EDGE_ONBOARDING: (orgId) => `/api/v1/orgs/${orgId}/edge/onboarding`,
   ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
+  ORG_EDGE_EXEC: (orgId) => `/api/v1/orgs/${orgId}/edge/exec`,
   CLIP_CONNECTIONS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/connections`,
-  CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`
+  CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`,
+  // Clip registry (v3, org-scoped, served by api-server — `crg_` entries; the
+  // Pinix Hub catalog proxy above is a different, id-less surface)
+  ORG_CLIP_REGISTRY: (orgId) => `/api/v1/orgs/${orgId}/clip-registry`,
+  ORG_CLIP_INSTALL: (orgId) => `/api/v1/orgs/${orgId}/clips/install`,
+  ORG_CLIPS_INSTALLED: (orgId) => `/api/v1/orgs/${orgId}/clips/installed`
 };
 
 // ts/sdk/dist/client.js
@@ -65712,6 +65719,31 @@ var ParallClient = class _ParallClient {
     const resp = await this.request("GET", url);
     return resp.data;
   }
+  // ---- Clip registry (v3, api-server org registry — `crg_` entries) ----
+  /**
+   * List registry clips visible to the org: its own plus public+approved
+   * cross-org entries. This is the surface `installRegistryClip` and clip
+   * connections operate on — NOT the Pinix catalog proxy
+   * ({@link listRegistryClips}), whose entries carry no `crg_` id.
+   */
+  async listOrgRegistryClips(orgId) {
+    const resp = await this.request("GET", `${ENDPOINTS.ORG_CLIP_REGISTRY(orgId)}?limit=100`);
+    return resp ?? [];
+  }
+  /**
+   * Install a registry clip into the org (a reference in `clip_installs`, not a
+   * copy). Idempotent: installing an already-installed clip returns the same
+   * `200 {ok:true}`. Fails closed with `403 CLIP_NOT_APPROVED` when the clip is
+   * not eligible (cross-org requires public + approved).
+   */
+  async installRegistryClip(orgId, clipId) {
+    return this.request("POST", ENDPOINTS.ORG_CLIP_INSTALL(orgId), { clip_id: clipId });
+  }
+  /** List the org's installed registry clips (full entries). */
+  async listInstalledRegistryClips(orgId) {
+    const resp = await this.request("GET", ENDPOINTS.ORG_CLIPS_INSTALLED(orgId));
+    return resp ?? [];
+  }
   // ---- Edge devices ----
   async listEdgeDevices(orgId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_DEVICES(orgId));
@@ -65729,8 +65761,8 @@ var ParallClient = class _ParallClient {
     return this.request("POST", ENDPOINTS.ORG_EDGE(orgId), input);
   }
   /**
-   * Delete a hosted Cloud Profile. Hosted only — a BYOC device is removed by
-   * uninstalling Parall Clip on that machine (`400 EDGE_PLACEMENT_UNSUPPORTED`).
+   * Delete a hosted Cloud Profile. Hosted only — use {@link unregisterEdgeDevice}
+   * for an offline BYOC registration (`400 EDGE_PLACEMENT_UNSUPPORTED` here).
    *
    * Idempotent and ASYNC: returns `202` with `hosted_state: 'deleting'` on the first
    * call and on every repeat. The device stops being usable immediately (no exec, no
@@ -65740,12 +65772,68 @@ var ParallClient = class _ParallClient {
   async deleteEdgeDevice(orgId, edgeId) {
     return this.request("DELETE", ENDPOINTS.ORG_EDGE_DEVICE(orgId, edgeId));
   }
+  /**
+   * Remove the interactive human caller's own offline BYOC registration.
+   *
+   * Synchronous and idempotent: a committed removal and a repeat after removal
+   * both resolve with no response body. A live connection returns `EDGE_ONLINE`;
+   * callers must not clear local device identity until this method resolves.
+   */
+  async unregisterEdgeDevice(orgId, edgeId) {
+    await this.request("DELETE", ENDPOINTS.ORG_EDGE_DEVICE_UNREGISTER(orgId, edgeId));
+  }
   async getEdgeOnboarding(orgId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_ONBOARDING(orgId));
   }
   async listEdgeProfiles(orgId, edgeId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILES(orgId, edgeId));
   }
+  /**
+   * Execute a registry clip command on an Edge device.
+   *
+   * A hosted (Cloud Profile) device is reachable ONLY through an explicit
+   * `connection` (id `ccn_…` or alias) — there is no implicit route to an
+   * org-shared browser login. BYOC keeps its legacy selectors (`edge_id`, or
+   * nothing for the caller's own online device).
+   *
+   * Returns the result envelope on completion (`success` may be false when the
+   * command RAN and failed — `error`/`error_code` describe why). Everything
+   * else throws a typed {@link ApiError}; match on `err.code`:
+   *
+   * Safe to retry (guaranteed nothing was dispatched):
+   * - `EDGE_ACTIVATING` 503 + `Retry-After` — cold cloud profile is starting.
+   *   Bounded backoff, same `correlation_id` across the loop.
+   * - `EDGE_BUSY` 409 — the device is executing another request.
+   * - `EDGE_CONCURRENCY_LIMIT` 429 — org at its concurrent-session limit.
+   * - `EDGE_UNAVAILABLE` 503 — session torn down / replaced mid-dispatch.
+   *
+   * NOT retryable:
+   * - `OUTCOME_UNKNOWN` 504 — dispatched, but no result arrived. The command
+   *   MAY HAVE EXECUTED (posted, ordered, deleted…). Never retry
+   *   automatically: verify the effect first, then decide. The message carries
+   *   the request id for audit.
+   * - `EDGE_DEADLINE_EXCEEDED` 504 — arrived late, provably NOT executed.
+   * - `EDGE_HOSTED_DISABLED_FOR_ORG` 403, `EDGE_REPAIR` 503 (operator-held),
+   *   `EDGE_RUNTIME_UNAVAILABLE` 503 (deployment has no hosted runtime).
+   * - Routing errors: `HOSTED_CONNECTION_REQUIRED`, `CONNECTION_NOT_FOUND`,
+   *   `CONNECTION_CLIP_MISMATCH`, `CONNECTION_TARGET_GONE`,
+   *   `CONNECTION_PROFILE_MISMATCH`, `EDGE_DELETING`, `DEVICE_OFFLINE`.
+   */
+  async execEdgeClip(orgId, req) {
+    const t = req.timeout;
+    const serverTimeout = t !== void 0 && t > 0 && t <= 12e4 ? t : 3e4;
+    const timeoutMs = serverTimeout + 1e4;
+    try {
+      return await this.request("POST", ENDPOINTS.ORG_EDGE_EXEC(orgId), req, void 0, false, {
+        timeoutMs
+      });
+    } catch (err) {
+      if (err instanceof ApiError && err.status === 422 && !err.code && typeof err.extras?.error_code === "string") {
+        err.code = err.extras.error_code;
+      }
+      throw err;
+    }
+  }
   // ---- Clip connections ----
   async listClipConnections(orgId, clipId) {
     return this.request("GET", ENDPOINTS.CLIP_CONNECTIONS(orgId, clipId));

package/bundle/parall-claude-agent.js

@@ -51651,10 +51651,17 @@ var ENDPOINTS = {
   ORG_EDGE: (orgId) => `/api/v1/orgs/${orgId}/edge`,
   ORG_EDGE_DEVICES: (orgId) => `/api/v1/orgs/${orgId}/edge/devices`,
   ORG_EDGE_DEVICE: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}`,
+  ORG_EDGE_DEVICE_UNREGISTER: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/unregister`,
   ORG_EDGE_ONBOARDING: (orgId) => `/api/v1/orgs/${orgId}/edge/onboarding`,
   ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
+  ORG_EDGE_EXEC: (orgId) => `/api/v1/orgs/${orgId}/edge/exec`,
   CLIP_CONNECTIONS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/connections`,
-  CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`
+  CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`,
+  // Clip registry (v3, org-scoped, served by api-server — `crg_` entries; the
+  // Pinix Hub catalog proxy above is a different, id-less surface)
+  ORG_CLIP_REGISTRY: (orgId) => `/api/v1/orgs/${orgId}/clip-registry`,
+  ORG_CLIP_INSTALL: (orgId) => `/api/v1/orgs/${orgId}/clips/install`,
+  ORG_CLIPS_INSTALLED: (orgId) => `/api/v1/orgs/${orgId}/clips/installed`
 };
 var WS_EVENTS = {
   // Client -> Server
@@ -53595,6 +53602,31 @@ var ParallClient = class _ParallClient {
     const resp = await this.request("GET", url);
     return resp.data;
   }
+  // ---- Clip registry (v3, api-server org registry — `crg_` entries) ----
+  /**
+   * List registry clips visible to the org: its own plus public+approved
+   * cross-org entries. This is the surface `installRegistryClip` and clip
+   * connections operate on — NOT the Pinix catalog proxy
+   * ({@link listRegistryClips}), whose entries carry no `crg_` id.
+   */
+  async listOrgRegistryClips(orgId) {
+    const resp = await this.request("GET", `${ENDPOINTS.ORG_CLIP_REGISTRY(orgId)}?limit=100`);
+    return resp ?? [];
+  }
+  /**
+   * Install a registry clip into the org (a reference in `clip_installs`, not a
+   * copy). Idempotent: installing an already-installed clip returns the same
+   * `200 {ok:true}`. Fails closed with `403 CLIP_NOT_APPROVED` when the clip is
+   * not eligible (cross-org requires public + approved).
+   */
+  async installRegistryClip(orgId, clipId) {
+    return this.request("POST", ENDPOINTS.ORG_CLIP_INSTALL(orgId), { clip_id: clipId });
+  }
+  /** List the org's installed registry clips (full entries). */
+  async listInstalledRegistryClips(orgId) {
+    const resp = await this.request("GET", ENDPOINTS.ORG_CLIPS_INSTALLED(orgId));
+    return resp ?? [];
+  }
   // ---- Edge devices ----
   async listEdgeDevices(orgId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_DEVICES(orgId));
@@ -53612,8 +53644,8 @@ var ParallClient = class _ParallClient {
     return this.request("POST", ENDPOINTS.ORG_EDGE(orgId), input);
   }
   /**
-   * Delete a hosted Cloud Profile. Hosted only — a BYOC device is removed by
-   * uninstalling Parall Clip on that machine (`400 EDGE_PLACEMENT_UNSUPPORTED`).
+   * Delete a hosted Cloud Profile. Hosted only — use {@link unregisterEdgeDevice}
+   * for an offline BYOC registration (`400 EDGE_PLACEMENT_UNSUPPORTED` here).
    *
    * Idempotent and ASYNC: returns `202` with `hosted_state: 'deleting'` on the first
    * call and on every repeat. The device stops being usable immediately (no exec, no
@@ -53623,12 +53655,68 @@ var ParallClient = class _ParallClient {
   async deleteEdgeDevice(orgId, edgeId) {
     return this.request("DELETE", ENDPOINTS.ORG_EDGE_DEVICE(orgId, edgeId));
   }
+  /**
+   * Remove the interactive human caller's own offline BYOC registration.
+   *
+   * Synchronous and idempotent: a committed removal and a repeat after removal
+   * both resolve with no response body. A live connection returns `EDGE_ONLINE`;
+   * callers must not clear local device identity until this method resolves.
+   */
+  async unregisterEdgeDevice(orgId, edgeId) {
+    await this.request("DELETE", ENDPOINTS.ORG_EDGE_DEVICE_UNREGISTER(orgId, edgeId));
+  }
   async getEdgeOnboarding(orgId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_ONBOARDING(orgId));
   }
   async listEdgeProfiles(orgId, edgeId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILES(orgId, edgeId));
   }
+  /**
+   * Execute a registry clip command on an Edge device.
+   *
+   * A hosted (Cloud Profile) device is reachable ONLY through an explicit
+   * `connection` (id `ccn_…` or alias) — there is no implicit route to an
+   * org-shared browser login. BYOC keeps its legacy selectors (`edge_id`, or
+   * nothing for the caller's own online device).
+   *
+   * Returns the result envelope on completion (`success` may be false when the
+   * command RAN and failed — `error`/`error_code` describe why). Everything
+   * else throws a typed {@link ApiError}; match on `err.code`:
+   *
+   * Safe to retry (guaranteed nothing was dispatched):
+   * - `EDGE_ACTIVATING` 503 + `Retry-After` — cold cloud profile is starting.
+   *   Bounded backoff, same `correlation_id` across the loop.
+   * - `EDGE_BUSY` 409 — the device is executing another request.
+   * - `EDGE_CONCURRENCY_LIMIT` 429 — org at its concurrent-session limit.
+   * - `EDGE_UNAVAILABLE` 503 — session torn down / replaced mid-dispatch.
+   *
+   * NOT retryable:
+   * - `OUTCOME_UNKNOWN` 504 — dispatched, but no result arrived. The command
+   *   MAY HAVE EXECUTED (posted, ordered, deleted…). Never retry
+   *   automatically: verify the effect first, then decide. The message carries
+   *   the request id for audit.
+   * - `EDGE_DEADLINE_EXCEEDED` 504 — arrived late, provably NOT executed.
+   * - `EDGE_HOSTED_DISABLED_FOR_ORG` 403, `EDGE_REPAIR` 503 (operator-held),
+   *   `EDGE_RUNTIME_UNAVAILABLE` 503 (deployment has no hosted runtime).
+   * - Routing errors: `HOSTED_CONNECTION_REQUIRED`, `CONNECTION_NOT_FOUND`,
+   *   `CONNECTION_CLIP_MISMATCH`, `CONNECTION_TARGET_GONE`,
+   *   `CONNECTION_PROFILE_MISMATCH`, `EDGE_DELETING`, `DEVICE_OFFLINE`.
+   */
+  async execEdgeClip(orgId, req) {
+    const t = req.timeout;
+    const serverTimeout = t !== void 0 && t > 0 && t <= 12e4 ? t : 3e4;
+    const timeoutMs = serverTimeout + 1e4;
+    try {
+      return await this.request("POST", ENDPOINTS.ORG_EDGE_EXEC(orgId), req, void 0, false, {
+        timeoutMs
+      });
+    } catch (err) {
+      if (err instanceof ApiError && err.status === 422 && !err.code && typeof err.extras?.error_code === "string") {
+        err.code = err.extras.error_code;
+      }
+      throw err;
+    }
+  }
   // ---- Clip connections ----
   async listClipConnections(orgId, clipId) {
     return this.request("GET", ENDPOINTS.CLIP_CONNECTIONS(orgId, clipId));
@@ -59715,6 +59803,27 @@ parall clip invoke github-tools list-repos '{"org":"acme"}'
 
 Results are JSON on stdout; failures print an error.
 
+## Execute on an Edge device (registry clips)
+
+Registry clips run on an Edge \u2014 a member's desktop, or an org-shared cloud
+profile. **Name the target explicitly.** A cloud profile has NO implicit
+route; omitting the target entirely is a desktop-only legacy form that
+reaches just YOUR OWN online desktop device \u2014 never a shared cloud profile.
+
+\`\`\`bash
+parall clip exec <clip> <command> [args] --connection <id|alias>  # the normal form
+parall clip exec browser-tools screenshot '{"url":"\u2026"}' --connection cloud-main
+\`\`\`
+
+- A cloud (hosted) profile is reachable ONLY via \`--connection\` \u2014 the clip
+  connection its maintainer bound (\`ccn_\u2026\` id or alias). That binding IS your
+  authorization; without one the server answers \`HOSTED_CONNECTION_REQUIRED\`
+  and the fix is to ask an owner/admin to bind the clip, never to retry.
+- \`--edge <edgeId>\` targets only a desktop device YOU own.
+- Cold cloud profiles are handled by the CLI: it absorbs \`EDGE_ACTIVATING\`
+  with a bounded wait (~60s) while the profile starts. If the command still
+  fails, report the error \u2014 do not blind-retry in a loop.
+
 ## Behavior rules
 
 - An authorization error (clip not bound to you) is a fail-fast: ask the
@@ -59724,6 +59833,12 @@ Results are JSON on stdout; failures print an error.
 - Hosted browser activation is handled by the CLI: it waits (bounded) while a
   cold hosted browser starts, so if the invoke still fails, report the error \u2014
   do not blind-retry in a loop.
+- **\`OUTCOME_UNKNOWN\` is never retryable.** It means the command was
+  dispatched and MAY HAVE EXECUTED even though no result came back. Retrying
+  could post, order or delete twice. Verify the effect through the system you
+  acted on (or tell the human, quoting the request id from the error) before
+  ever re-running. \`EDGE_BUSY\` is the opposite: guaranteed-unexecuted \u2014 wait
+  briefly, then one retry is safe.
 - A clip may act through a person's real logged-in account \u2014 outward,
   irreversible, or spending actions (post, order, delete, pay) get the same
   caution as any shared-state change: confirm when intent isn't explicit.

package/bundle/parall-codex-agent.js

@@ -51651,10 +51651,17 @@ var ENDPOINTS = {
   ORG_EDGE: (orgId) => `/api/v1/orgs/${orgId}/edge`,
   ORG_EDGE_DEVICES: (orgId) => `/api/v1/orgs/${orgId}/edge/devices`,
   ORG_EDGE_DEVICE: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}`,
+  ORG_EDGE_DEVICE_UNREGISTER: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/unregister`,
   ORG_EDGE_ONBOARDING: (orgId) => `/api/v1/orgs/${orgId}/edge/onboarding`,
   ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
+  ORG_EDGE_EXEC: (orgId) => `/api/v1/orgs/${orgId}/edge/exec`,
   CLIP_CONNECTIONS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/connections`,
-  CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`
+  CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`,
+  // Clip registry (v3, org-scoped, served by api-server — `crg_` entries; the
+  // Pinix Hub catalog proxy above is a different, id-less surface)
+  ORG_CLIP_REGISTRY: (orgId) => `/api/v1/orgs/${orgId}/clip-registry`,
+  ORG_CLIP_INSTALL: (orgId) => `/api/v1/orgs/${orgId}/clips/install`,
+  ORG_CLIPS_INSTALLED: (orgId) => `/api/v1/orgs/${orgId}/clips/installed`
 };
 var WS_EVENTS = {
   // Client -> Server
@@ -53595,6 +53602,31 @@ var ParallClient = class _ParallClient {
     const resp = await this.request("GET", url);
     return resp.data;
   }
+  // ---- Clip registry (v3, api-server org registry — `crg_` entries) ----
+  /**
+   * List registry clips visible to the org: its own plus public+approved
+   * cross-org entries. This is the surface `installRegistryClip` and clip
+   * connections operate on — NOT the Pinix catalog proxy
+   * ({@link listRegistryClips}), whose entries carry no `crg_` id.
+   */
+  async listOrgRegistryClips(orgId) {
+    const resp = await this.request("GET", `${ENDPOINTS.ORG_CLIP_REGISTRY(orgId)}?limit=100`);
+    return resp ?? [];
+  }
+  /**
+   * Install a registry clip into the org (a reference in `clip_installs`, not a
+   * copy). Idempotent: installing an already-installed clip returns the same
+   * `200 {ok:true}`. Fails closed with `403 CLIP_NOT_APPROVED` when the clip is
+   * not eligible (cross-org requires public + approved).
+   */
+  async installRegistryClip(orgId, clipId) {
+    return this.request("POST", ENDPOINTS.ORG_CLIP_INSTALL(orgId), { clip_id: clipId });
+  }
+  /** List the org's installed registry clips (full entries). */
+  async listInstalledRegistryClips(orgId) {
+    const resp = await this.request("GET", ENDPOINTS.ORG_CLIPS_INSTALLED(orgId));
+    return resp ?? [];
+  }
   // ---- Edge devices ----
   async listEdgeDevices(orgId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_DEVICES(orgId));
@@ -53612,8 +53644,8 @@ var ParallClient = class _ParallClient {
     return this.request("POST", ENDPOINTS.ORG_EDGE(orgId), input);
   }
   /**
-   * Delete a hosted Cloud Profile. Hosted only — a BYOC device is removed by
-   * uninstalling Parall Clip on that machine (`400 EDGE_PLACEMENT_UNSUPPORTED`).
+   * Delete a hosted Cloud Profile. Hosted only — use {@link unregisterEdgeDevice}
+   * for an offline BYOC registration (`400 EDGE_PLACEMENT_UNSUPPORTED` here).
    *
    * Idempotent and ASYNC: returns `202` with `hosted_state: 'deleting'` on the first
    * call and on every repeat. The device stops being usable immediately (no exec, no
@@ -53623,12 +53655,68 @@ var ParallClient = class _ParallClient {
   async deleteEdgeDevice(orgId, edgeId) {
     return this.request("DELETE", ENDPOINTS.ORG_EDGE_DEVICE(orgId, edgeId));
   }
+  /**
+   * Remove the interactive human caller's own offline BYOC registration.
+   *
+   * Synchronous and idempotent: a committed removal and a repeat after removal
+   * both resolve with no response body. A live connection returns `EDGE_ONLINE`;
+   * callers must not clear local device identity until this method resolves.
+   */
+  async unregisterEdgeDevice(orgId, edgeId) {
+    await this.request("DELETE", ENDPOINTS.ORG_EDGE_DEVICE_UNREGISTER(orgId, edgeId));
+  }
   async getEdgeOnboarding(orgId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_ONBOARDING(orgId));
   }
   async listEdgeProfiles(orgId, edgeId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILES(orgId, edgeId));
   }
+  /**
+   * Execute a registry clip command on an Edge device.
+   *
+   * A hosted (Cloud Profile) device is reachable ONLY through an explicit
+   * `connection` (id `ccn_…` or alias) — there is no implicit route to an
+   * org-shared browser login. BYOC keeps its legacy selectors (`edge_id`, or
+   * nothing for the caller's own online device).
+   *
+   * Returns the result envelope on completion (`success` may be false when the
+   * command RAN and failed — `error`/`error_code` describe why). Everything
+   * else throws a typed {@link ApiError}; match on `err.code`:
+   *
+   * Safe to retry (guaranteed nothing was dispatched):
+   * - `EDGE_ACTIVATING` 503 + `Retry-After` — cold cloud profile is starting.
+   *   Bounded backoff, same `correlation_id` across the loop.
+   * - `EDGE_BUSY` 409 — the device is executing another request.
+   * - `EDGE_CONCURRENCY_LIMIT` 429 — org at its concurrent-session limit.
+   * - `EDGE_UNAVAILABLE` 503 — session torn down / replaced mid-dispatch.
+   *
+   * NOT retryable:
+   * - `OUTCOME_UNKNOWN` 504 — dispatched, but no result arrived. The command
+   *   MAY HAVE EXECUTED (posted, ordered, deleted…). Never retry
+   *   automatically: verify the effect first, then decide. The message carries
+   *   the request id for audit.
+   * - `EDGE_DEADLINE_EXCEEDED` 504 — arrived late, provably NOT executed.
+   * - `EDGE_HOSTED_DISABLED_FOR_ORG` 403, `EDGE_REPAIR` 503 (operator-held),
+   *   `EDGE_RUNTIME_UNAVAILABLE` 503 (deployment has no hosted runtime).
+   * - Routing errors: `HOSTED_CONNECTION_REQUIRED`, `CONNECTION_NOT_FOUND`,
+   *   `CONNECTION_CLIP_MISMATCH`, `CONNECTION_TARGET_GONE`,
+   *   `CONNECTION_PROFILE_MISMATCH`, `EDGE_DELETING`, `DEVICE_OFFLINE`.
+   */
+  async execEdgeClip(orgId, req) {
+    const t = req.timeout;
+    const serverTimeout = t !== void 0 && t > 0 && t <= 12e4 ? t : 3e4;
+    const timeoutMs = serverTimeout + 1e4;
+    try {
+      return await this.request("POST", ENDPOINTS.ORG_EDGE_EXEC(orgId), req, void 0, false, {
+        timeoutMs
+      });
+    } catch (err) {
+      if (err instanceof ApiError && err.status === 422 && !err.code && typeof err.extras?.error_code === "string") {
+        err.code = err.extras.error_code;
+      }
+      throw err;
+    }
+  }
   // ---- Clip connections ----
   async listClipConnections(orgId, clipId) {
     return this.request("GET", ENDPOINTS.CLIP_CONNECTIONS(orgId, clipId));
@@ -59715,6 +59803,27 @@ parall clip invoke github-tools list-repos '{"org":"acme"}'
 
 Results are JSON on stdout; failures print an error.
 
+## Execute on an Edge device (registry clips)
+
+Registry clips run on an Edge \u2014 a member's desktop, or an org-shared cloud
+profile. **Name the target explicitly.** A cloud profile has NO implicit
+route; omitting the target entirely is a desktop-only legacy form that
+reaches just YOUR OWN online desktop device \u2014 never a shared cloud profile.
+
+\`\`\`bash
+parall clip exec <clip> <command> [args] --connection <id|alias>  # the normal form
+parall clip exec browser-tools screenshot '{"url":"\u2026"}' --connection cloud-main
+\`\`\`
+
+- A cloud (hosted) profile is reachable ONLY via \`--connection\` \u2014 the clip
+  connection its maintainer bound (\`ccn_\u2026\` id or alias). That binding IS your
+  authorization; without one the server answers \`HOSTED_CONNECTION_REQUIRED\`
+  and the fix is to ask an owner/admin to bind the clip, never to retry.
+- \`--edge <edgeId>\` targets only a desktop device YOU own.
+- Cold cloud profiles are handled by the CLI: it absorbs \`EDGE_ACTIVATING\`
+  with a bounded wait (~60s) while the profile starts. If the command still
+  fails, report the error \u2014 do not blind-retry in a loop.
+
 ## Behavior rules
 
 - An authorization error (clip not bound to you) is a fail-fast: ask the
@@ -59724,6 +59833,12 @@ Results are JSON on stdout; failures print an error.
 - Hosted browser activation is handled by the CLI: it waits (bounded) while a
   cold hosted browser starts, so if the invoke still fails, report the error \u2014
   do not blind-retry in a loop.
+- **\`OUTCOME_UNKNOWN\` is never retryable.** It means the command was
+  dispatched and MAY HAVE EXECUTED even though no result came back. Retrying
+  could post, order or delete twice. Verify the effect through the system you
+  acted on (or tell the human, quoting the request id from the error) before
+  ever re-running. \`EDGE_BUSY\` is the opposite: guaranteed-unexecuted \u2014 wait
+  briefly, then one retry is safe.
 - A clip may act through a person's real logged-in account \u2014 outward,
   irreversible, or spending actions (post, order, delete, pay) get the same
   caution as any shared-state change: confirm when intent isn't explicit.

package/bundle/parall-daemon.js

@@ -491,10 +491,17 @@ var init_constants = __esm({
       ORG_EDGE: (orgId) => `/api/v1/orgs/${orgId}/edge`,
       ORG_EDGE_DEVICES: (orgId) => `/api/v1/orgs/${orgId}/edge/devices`,
       ORG_EDGE_DEVICE: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}`,
+      ORG_EDGE_DEVICE_UNREGISTER: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/unregister`,
       ORG_EDGE_ONBOARDING: (orgId) => `/api/v1/orgs/${orgId}/edge/onboarding`,
       ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
+      ORG_EDGE_EXEC: (orgId) => `/api/v1/orgs/${orgId}/edge/exec`,
       CLIP_CONNECTIONS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/connections`,
-      CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`
+      CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`,
+      // Clip registry (v3, org-scoped, served by api-server — `crg_` entries; the
+      // Pinix Hub catalog proxy above is a different, id-less surface)
+      ORG_CLIP_REGISTRY: (orgId) => `/api/v1/orgs/${orgId}/clip-registry`,
+      ORG_CLIP_INSTALL: (orgId) => `/api/v1/orgs/${orgId}/clips/install`,
+      ORG_CLIPS_INSTALLED: (orgId) => `/api/v1/orgs/${orgId}/clips/installed`
     };
     WS_EVENTS = {
       // Client -> Server
@@ -2476,6 +2483,31 @@ var init_client = __esm({
         const resp = await this.request("GET", url);
         return resp.data;
       }
+      // ---- Clip registry (v3, api-server org registry — `crg_` entries) ----
+      /**
+       * List registry clips visible to the org: its own plus public+approved
+       * cross-org entries. This is the surface `installRegistryClip` and clip
+       * connections operate on — NOT the Pinix catalog proxy
+       * ({@link listRegistryClips}), whose entries carry no `crg_` id.
+       */
+      async listOrgRegistryClips(orgId) {
+        const resp = await this.request("GET", `${ENDPOINTS.ORG_CLIP_REGISTRY(orgId)}?limit=100`);
+        return resp ?? [];
+      }
+      /**
+       * Install a registry clip into the org (a reference in `clip_installs`, not a
+       * copy). Idempotent: installing an already-installed clip returns the same
+       * `200 {ok:true}`. Fails closed with `403 CLIP_NOT_APPROVED` when the clip is
+       * not eligible (cross-org requires public + approved).
+       */
+      async installRegistryClip(orgId, clipId) {
+        return this.request("POST", ENDPOINTS.ORG_CLIP_INSTALL(orgId), { clip_id: clipId });
+      }
+      /** List the org's installed registry clips (full entries). */
+      async listInstalledRegistryClips(orgId) {
+        const resp = await this.request("GET", ENDPOINTS.ORG_CLIPS_INSTALLED(orgId));
+        return resp ?? [];
+      }
       // ---- Edge devices ----
       async listEdgeDevices(orgId) {
         return this.request("GET", ENDPOINTS.ORG_EDGE_DEVICES(orgId));
@@ -2493,8 +2525,8 @@ var init_client = __esm({
         return this.request("POST", ENDPOINTS.ORG_EDGE(orgId), input);
       }
       /**
-       * Delete a hosted Cloud Profile. Hosted only — a BYOC device is removed by
-       * uninstalling Parall Clip on that machine (`400 EDGE_PLACEMENT_UNSUPPORTED`).
+       * Delete a hosted Cloud Profile. Hosted only — use {@link unregisterEdgeDevice}
+       * for an offline BYOC registration (`400 EDGE_PLACEMENT_UNSUPPORTED` here).
        *
        * Idempotent and ASYNC: returns `202` with `hosted_state: 'deleting'` on the first
        * call and on every repeat. The device stops being usable immediately (no exec, no
@@ -2504,12 +2536,68 @@ var init_client = __esm({
       async deleteEdgeDevice(orgId, edgeId) {
         return this.request("DELETE", ENDPOINTS.ORG_EDGE_DEVICE(orgId, edgeId));
       }
+      /**
+       * Remove the interactive human caller's own offline BYOC registration.
+       *
+       * Synchronous and idempotent: a committed removal and a repeat after removal
+       * both resolve with no response body. A live connection returns `EDGE_ONLINE`;
+       * callers must not clear local device identity until this method resolves.
+       */
+      async unregisterEdgeDevice(orgId, edgeId) {
+        await this.request("DELETE", ENDPOINTS.ORG_EDGE_DEVICE_UNREGISTER(orgId, edgeId));
+      }
       async getEdgeOnboarding(orgId) {
         return this.request("GET", ENDPOINTS.ORG_EDGE_ONBOARDING(orgId));
       }
       async listEdgeProfiles(orgId, edgeId) {
         return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILES(orgId, edgeId));
       }
+      /**
+       * Execute a registry clip command on an Edge device.
+       *
+       * A hosted (Cloud Profile) device is reachable ONLY through an explicit
+       * `connection` (id `ccn_…` or alias) — there is no implicit route to an
+       * org-shared browser login. BYOC keeps its legacy selectors (`edge_id`, or
+       * nothing for the caller's own online device).
+       *
+       * Returns the result envelope on completion (`success` may be false when the
+       * command RAN and failed — `error`/`error_code` describe why). Everything
+       * else throws a typed {@link ApiError}; match on `err.code`:
+       *
+       * Safe to retry (guaranteed nothing was dispatched):
+       * - `EDGE_ACTIVATING` 503 + `Retry-After` — cold cloud profile is starting.
+       *   Bounded backoff, same `correlation_id` across the loop.
+       * - `EDGE_BUSY` 409 — the device is executing another request.
+       * - `EDGE_CONCURRENCY_LIMIT` 429 — org at its concurrent-session limit.
+       * - `EDGE_UNAVAILABLE` 503 — session torn down / replaced mid-dispatch.
+       *
+       * NOT retryable:
+       * - `OUTCOME_UNKNOWN` 504 — dispatched, but no result arrived. The command
+       *   MAY HAVE EXECUTED (posted, ordered, deleted…). Never retry
+       *   automatically: verify the effect first, then decide. The message carries
+       *   the request id for audit.
+       * - `EDGE_DEADLINE_EXCEEDED` 504 — arrived late, provably NOT executed.
+       * - `EDGE_HOSTED_DISABLED_FOR_ORG` 403, `EDGE_REPAIR` 503 (operator-held),
+       *   `EDGE_RUNTIME_UNAVAILABLE` 503 (deployment has no hosted runtime).
+       * - Routing errors: `HOSTED_CONNECTION_REQUIRED`, `CONNECTION_NOT_FOUND`,
+       *   `CONNECTION_CLIP_MISMATCH`, `CONNECTION_TARGET_GONE`,
+       *   `CONNECTION_PROFILE_MISMATCH`, `EDGE_DELETING`, `DEVICE_OFFLINE`.
+       */
+      async execEdgeClip(orgId, req) {
+        const t = req.timeout;
+        const serverTimeout = t !== void 0 && t > 0 && t <= 12e4 ? t : 3e4;
+        const timeoutMs = serverTimeout + 1e4;
+        try {
+          return await this.request("POST", ENDPOINTS.ORG_EDGE_EXEC(orgId), req, void 0, false, {
+            timeoutMs
+          });
+        } catch (err) {
+          if (err instanceof ApiError && err.status === 422 && !err.code && typeof err.extras?.error_code === "string") {
+            err.code = err.extras.error_code;
+          }
+          throw err;
+        }
+      }
       // ---- Clip connections ----
       async listClipConnections(orgId, clipId) {
         return this.request("GET", ENDPOINTS.CLIP_CONNECTIONS(orgId, clipId));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/daemon",
-  "version": "1.47.0",
+  "version": "1.48.0",
   "description": "Parall local agent runtime — daemon supervisor + bridge runtimes, bundled as standalone JS files",
   "license": "MIT",
   "repository": {
@@ -33,11 +33,11 @@
     "@aws-sdk/client-s3": "3.984.0",
     "@pinixai/bb-browser-pro": "0.15.0",
     "ws": "^8.18.0",
-    "@parall/agent-core": "1.47.0",
-    "@parall/claude-agent": "1.47.0",
-    "@parall/openclaw-agent": "1.47.0",
-    "@parall/sdk": "1.47.0",
-    "@parall/codex-agent": "1.47.0"
+    "@parall/sdk": "1.48.0",
+    "@parall/codex-agent": "1.48.0",
+    "@parall/openclaw-agent": "1.48.0",
+    "@parall/claude-agent": "1.48.0",
+    "@parall/agent-core": "1.48.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",