@parall/daemon 1.48.0 → 1.49.0

package/bundle/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.48.0",
-  "built_at": "2026-07-21T07:52:25.995Z",
+  "version": "1.49.0",
+  "built_at": "2026-07-26T04:12:18.813Z",
   "min_node_version": "20.0.0",
   "files": {
     "bb-browser-daemon.js": {
@@ -16,29 +16,29 @@
       "size": 18
     },
     "parall-browser-pod.js": {
-      "sha256": "d35ed50bf1fc1266cb8001c9dd3e694dff9847738d125582ccaca81bc3db45d5",
-      "size": 2894062
+      "sha256": "20a0ee67c5be9cd2352ed8e5a503fa60b8fe86d7dba04ecbe2345397c6e7e00f",
+      "size": 2899080
     },
     "parall-channel-exec.js": {
       "sha256": "7c2a6e12483a45e9eb4a42cd7d4cdd3c4fa21dd09ac1347d9a3e177b4ddee930",
       "size": 7220
     },
     "parall-claude-agent.js": {
-      "sha256": "852f7b7d3840f243d39d5ec2f23735ee80fce6fb9c5f8ab5ff1cfb7d5281ad51",
-      "size": 2727384
+      "sha256": "19203c62234b641e691de41af3444d52876beaabc3fa6abeb7907fd5276da711",
+      "size": 2732891
     },
     "parall-codex-agent.js": {
-      "sha256": "c331674763f9c237d6a3ee03d9bc8f4137c154e2e576caa5fd23bbe32f0f2b49",
-      "size": 2769124
+      "sha256": "8a80870d3f213ae3d36b5c46b4e4d4e6eb1d91855d5a2ce1c72be43e9cc960ba",
+      "size": 2774631
     },
     "parall-daemon.js": {
-      "sha256": "0c41c7255f98339d095faf96e7b712c150d442696eefcb3965d3e59ad0f251fa",
-      "size": 2955625
+      "sha256": "ef3377051a8310fb760d2ce7826a6654d83225f093a8cdade696ad6216540b3c",
+      "size": 2961111
     },
     "parall-openclaw-agent.js": {
       "sha256": "856a1c3a9ae0ffef8efe2481fa1171dbeb1d67cccb88616aa9bf16da96a69355",
       "size": 9923
     }
   },
-  "signature": "u4mhCrFPCejnf/mBjQdNvKkDaQE0MjumZpTc5eHA+Qz7cbemy1WDRhy+j0A4pMvBezJqwUIoyQqn84jfjcgBDA=="
+  "signature": "sDr+si9wQsnB/LezX3xlTWHu2bHV5DzO5KWEtQz/5Qj2XOWfpKqvb0JjjVFGOxCG07mIGSfj9U5KpeT3GMgbDg=="
 }

package/bundle/parall-browser-pod.js

@@ -63552,6 +63552,8 @@ var ENDPOINTS = {
   MESSAGE_WATCH: (id) => `${API_BASE}/messages/${id}/watch`,
   MESSAGE_WATCHERS: (id) => `${API_BASE}/messages/${id}/watchers`,
   MESSAGE_WATCHING: (id) => `${API_BASE}/messages/${id}/watching`,
+  MESSAGE_REACTIONS: (id) => `${API_BASE}/messages/${id}/reactions`,
+  MESSAGE_REACTION: (id, emoji) => `${API_BASE}/messages/${id}/reactions/${encodeURIComponent(emoji)}`,
   // Upload (org-scoped)
   UPLOAD_PRESIGN: (orgId) => `${API_BASE}/orgs/${orgId}/upload/presign`,
   UPLOAD_COMPLETE: (orgId) => `${API_BASE}/orgs/${orgId}/upload/complete`,
@@ -63789,11 +63791,13 @@ var ENDPOINTS = {
   UNREAD: `${API_BASE}/me/unread`,
   ORG_UNREAD: (orgId) => `${API_BASE}/orgs/${orgId}/unread`,
   CHAT_READ: (orgId, chatId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/read`,
+  CHAT_READ_ALL: (orgId, chatId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/read-all`,
   THREAD_UNREAD: (orgId, chatId, threadRootId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/threads/${threadRootId}/unread`,
   THREAD_READ: (orgId, chatId, threadRootId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/threads/${threadRootId}/read`,
   // References (org-scoped)
   REFS_RESOLVE: (orgId) => `${API_BASE}/orgs/${orgId}/refs/resolve`,
   REFS_BACKLINKS: (orgId) => `${API_BASE}/orgs/${orgId}/refs/backlinks`,
+  REFS_OUTBOUND: (orgId) => `${API_BASE}/orgs/${orgId}/refs/outbound`,
   REFS_GRAPH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/graph`,
   REFS_CHECK: (orgId) => `${API_BASE}/orgs/${orgId}/refs/check`,
   // Platform config (agent-scoped, not org-scoped)
@@ -63855,7 +63859,13 @@ var ENDPOINTS = {
   ORG_EDGE_DEVICE_UNREGISTER: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/unregister`,
   ORG_EDGE_ONBOARDING: (orgId) => `/api/v1/orgs/${orgId}/edge/onboarding`,
   ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
+  // Per-profile egress proxy (hosted Cloud Profiles; manager-only, human-only).
+  ORG_EDGE_PROFILE_PROXY: (orgId, edgeId, profileName) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/proxy`,
   ORG_EDGE_EXEC: (orgId) => `/api/v1/orgs/${orgId}/edge/exec`,
+  // Cloud Edge live viewer command (V1b) — api-server, gated on cap:edge-viewer.
+  // Same request/reply shape as the v2 browser-profile viewer, on the v3 edge
+  // pipe. Additive: does NOT replace BROWSER_PROFILE_VIEWER_COMMAND.
+  ORG_EDGE_VIEWER_COMMAND: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/viewer/command`,
   CLIP_CONNECTIONS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/connections`,
   CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`,
   // Clip registry (v3, org-scoped, served by api-server — `crg_` entries; the
@@ -64020,7 +64030,7 @@ var ParallClient = class _ParallClient {
       if (qs)
         url += `?${qs}`;
     }
-    const headers = this.buildHeaders(path7);
+    const headers = this.buildHeaders(path7, opts?.headers);
     const timeoutSignal = AbortSignal.timeout(opts?.timeoutMs ?? 15e3);
     const signal = opts?.signal ? AbortSignal.any([opts.signal, timeoutSignal]) : timeoutSignal;
     let res;
@@ -64426,6 +64436,14 @@ var ParallClient = class _ParallClient {
   async getMessageReplies(id, params) {
     return this.request("GET", ENDPOINTS.MESSAGE_REPLIES(id), void 0, params);
   }
+  // ---- Reactions ----
+  async toggleReaction(messageId, emoji) {
+    return this.request("PUT", ENDPOINTS.MESSAGE_REACTION(messageId, emoji));
+  }
+  async listReactions(messageId) {
+    const res = await this.request("GET", ENDPOINTS.MESSAGE_REACTIONS(messageId));
+    return res.reactions;
+  }
   // ---- File Upload ----
   async getUploadPresignUrl(orgId, req) {
     return this.request("POST", ENDPOINTS.UPLOAD_PRESIGN(orgId), req);
@@ -64801,6 +64819,15 @@ var ParallClient = class _ParallClient {
   async browserViewerCommand(orgId, profileId, req, opts) {
     return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, opts);
   }
+  /**
+   * Drive the Cloud Edge live viewer (V1b, design §6): WebRTC signaling + input +
+   * tab nav for a hosted browser (Cloud Profile). Same request/reply shape as
+   * browserViewerCommand, on the v3 edge pipe; additive — the v2 browser-profile
+   * viewer is unchanged.
+   */
+  async edgeViewerCommand(orgId, edgeId, req, opts) {
+    return this.request("POST", ENDPOINTS.ORG_EDGE_VIEWER_COMMAND(orgId, edgeId), req, void 0, false, opts);
+  }
   async resizeMachine(orgId, machineId, spec) {
     return this.request("PATCH", ENDPOINTS.MACHINE_SPEC(orgId, machineId), spec);
   }
@@ -64827,14 +64854,23 @@ var ParallClient = class _ParallClient {
   }
   // Wiki mount/token methods removed — wiki-service handles all wiki endpoints.
   // ---- Unread ----
-  async getUnreadCounts(orgId) {
+  async getUnreadCounts(orgId, opts) {
     const endpoint = orgId ? ENDPOINTS.ORG_UNREAD(orgId) : ENDPOINTS.UNREAD;
-    const res = await this.request("GET", endpoint);
+    const res = await this.request("GET", endpoint, void 0, {
+      include_thread_replies: opts?.includeThreadReplies ? "true" : void 0
+    });
     return res.data;
   }
   async markRead(orgId, chatId, messageId) {
     return this.request("POST", ENDPOINTS.CHAT_READ(orgId, chatId), { message_id: messageId });
   }
+  /** Mark everything in a chat read: the channel cursor jumps to the latest
+   *  top-level message and every thread cursor to its latest reply, in one
+   *  idempotent call. The server echoes the same per-cursor WS events the
+   *  single-cursor routes emit and auto-clears covered inbox items. */
+  async markAllRead(orgId, chatId) {
+    return this.request("POST", ENDPOINTS.CHAT_READ_ALL(orgId, chatId));
+  }
   async getThreadUnread(orgId, chatId, threadRootId) {
     return this.request("GET", ENDPOINTS.THREAD_UNREAD(orgId, chatId, threadRootId));
   }
@@ -65509,6 +65545,16 @@ var ParallClient = class _ParallClient {
   async getBacklinks(orgId, params) {
     return this.request("GET", ENDPOINTS.REFS_BACKLINKS(orgId), void 0, params);
   }
+  /**
+   * Outbound prll:// refs authored in a set of sources, as raw ref_links rows
+   * (dedupe/group client-side). Pass `{ thread_root_id }` to list a whole
+   * thread's refs (root + all replies, resolved server-side — the client's
+   * reply window may be partial), or `{ source_type, source_ids }` for
+   * explicit sources (max 500; v1 accepts only message sources).
+   */
+  async listOutboundRefs(orgId, req) {
+    return this.request("POST", ENDPOINTS.REFS_OUTBOUND(orgId), req);
+  }
   /**
    * Bounded multi-hop walk of the prll:// reference graph around `uri`. `uri`
    * must be an entity-level prll:// URI — a refined URI (path/query/fragment) is
@@ -65788,6 +65834,43 @@ var ParallClient = class _ParallClient {
   async listEdgeProfiles(orgId, edgeId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILES(orgId, edgeId));
   }
+  /**
+   * Read a hosted Cloud Profile's egress-proxy status (manager-only: hosted
+   * human maintainer or org admin). Sanitized — the password never comes back.
+   * Typed errors: `EDGE_NOT_HOSTED` (BYOC device), `PROXY_CONFIG_CORRUPT` /
+   * validation codes as 422 when a stored config no longer passes current rules.
+   * `can_mutate` and `lease_status` are the authoritative idle gate; device
+   * list status is not a substitute.
+   */
+  async getEdgeProfileProxy(orgId, edgeId, profileName) {
+    return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName));
+  }
+  /**
+   * Set/replace the profile's egress proxy (full triple every time) — IDLE
+   * ONLY: while the profile's hosted browser is running (a viewer session is
+   * open or a pod is otherwise live) the server answers 409
+   * `EDGE_PROFILE_IN_USE`; close the viewer, wait for idle scale-to-zero, and
+   * retry. The next cold start uses the new egress; browser login state is
+   * preserved across it. Other typed errors: the validation vocabulary
+   * (`INVALID_PROXY_SERVER`, `PROXY_AUTH_INCOMPLETE`,
+   * `PROXY_SERVER_FORBIDDEN_TARGET`, …), `EDGE_DELETING` (409), and
+   * `SECRETBOX_UNCONFIGURED` (503 — server cannot store credentials safely),
+   * and `EDGE_PROFILE_PROXY_STALE` (409 — expectedVersion lost a tab race).
+   */
+  async setEdgeProfileProxy(orgId, edgeId, profileName, req, expectedVersion) {
+    return this.request("PUT", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName), req, void 0, false, {
+      headers: expectedVersion ? { "If-Match": `"proxy-${expectedVersion}"` } : void 0
+    });
+  }
+  /**
+   * Clear the profile's egress proxy; the next pod start egresses directly.
+   * Idle-only like set — 409 `EDGE_PROFILE_IN_USE` while the browser is live.
+   */
+  async clearEdgeProfileProxy(orgId, edgeId, profileName, expectedVersion) {
+    return this.request("DELETE", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName), void 0, void 0, false, {
+      headers: expectedVersion ? { "If-Match": `"proxy-${expectedVersion}"` } : void 0
+    });
+  }
   /**
    * Execute a registry clip command on an Edge device.
    *
@@ -65856,6 +65939,8 @@ var ApiError = class extends Error {
   status;
   code;
   extras;
+  /** Retry-After delta seconds when the server supplies one. */
+  retryAfterSeconds;
   /** Attempted action (authorization denials) — e.g. "chat.add_member". */
   action;
   /** Target resource URI that was evaluated — e.g. "prll://cht_…". */
@@ -65875,6 +65960,9 @@ function buildApiError(res, rawErrorBody) {
   const errMsg2 = (typeof errorObj?.message === "string" ? errorObj.message : void 0) ?? (typeof errorBody.message === "string" ? errorBody.message : void 0) ?? (typeof errorBody.error === "string" ? errorBody.error : void 0);
   const errCode = (typeof errorObj?.code === "string" ? errorObj.code : void 0) ?? (typeof errorBody.code === "string" ? errorBody.code : void 0);
   const apiError = new ApiError(res.status, errMsg2 ?? res.statusText, errCode);
+  const retryAfter = Number(res.headers?.get("Retry-After"));
+  if (Number.isFinite(retryAfter) && retryAfter > 0)
+    apiError.retryAfterSeconds = retryAfter;
   const anchors = errorObj ?? errorBody;
   if (typeof anchors.action === "string")
     apiError.action = anchors.action;

package/bundle/parall-claude-agent.js

@@ -51351,6 +51351,8 @@ var ENDPOINTS = {
   MESSAGE_WATCH: (id) => `${API_BASE}/messages/${id}/watch`,
   MESSAGE_WATCHERS: (id) => `${API_BASE}/messages/${id}/watchers`,
   MESSAGE_WATCHING: (id) => `${API_BASE}/messages/${id}/watching`,
+  MESSAGE_REACTIONS: (id) => `${API_BASE}/messages/${id}/reactions`,
+  MESSAGE_REACTION: (id, emoji) => `${API_BASE}/messages/${id}/reactions/${encodeURIComponent(emoji)}`,
   // Upload (org-scoped)
   UPLOAD_PRESIGN: (orgId) => `${API_BASE}/orgs/${orgId}/upload/presign`,
   UPLOAD_COMPLETE: (orgId) => `${API_BASE}/orgs/${orgId}/upload/complete`,
@@ -51588,11 +51590,13 @@ var ENDPOINTS = {
   UNREAD: `${API_BASE}/me/unread`,
   ORG_UNREAD: (orgId) => `${API_BASE}/orgs/${orgId}/unread`,
   CHAT_READ: (orgId, chatId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/read`,
+  CHAT_READ_ALL: (orgId, chatId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/read-all`,
   THREAD_UNREAD: (orgId, chatId, threadRootId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/threads/${threadRootId}/unread`,
   THREAD_READ: (orgId, chatId, threadRootId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/threads/${threadRootId}/read`,
   // References (org-scoped)
   REFS_RESOLVE: (orgId) => `${API_BASE}/orgs/${orgId}/refs/resolve`,
   REFS_BACKLINKS: (orgId) => `${API_BASE}/orgs/${orgId}/refs/backlinks`,
+  REFS_OUTBOUND: (orgId) => `${API_BASE}/orgs/${orgId}/refs/outbound`,
   REFS_GRAPH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/graph`,
   REFS_CHECK: (orgId) => `${API_BASE}/orgs/${orgId}/refs/check`,
   // Platform config (agent-scoped, not org-scoped)
@@ -51654,7 +51658,13 @@ var ENDPOINTS = {
   ORG_EDGE_DEVICE_UNREGISTER: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/unregister`,
   ORG_EDGE_ONBOARDING: (orgId) => `/api/v1/orgs/${orgId}/edge/onboarding`,
   ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
+  // Per-profile egress proxy (hosted Cloud Profiles; manager-only, human-only).
+  ORG_EDGE_PROFILE_PROXY: (orgId, edgeId, profileName) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/proxy`,
   ORG_EDGE_EXEC: (orgId) => `/api/v1/orgs/${orgId}/edge/exec`,
+  // Cloud Edge live viewer command (V1b) — api-server, gated on cap:edge-viewer.
+  // Same request/reply shape as the v2 browser-profile viewer, on the v3 edge
+  // pipe. Additive: does NOT replace BROWSER_PROFILE_VIEWER_COMMAND.
+  ORG_EDGE_VIEWER_COMMAND: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/viewer/command`,
   CLIP_CONNECTIONS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/connections`,
   CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`,
   // Clip registry (v3, org-scoped, served by api-server — `crg_` entries; the
@@ -51677,6 +51687,7 @@ var WS_EVENTS = {
   MESSAGE_PATCH: "message.patch",
   MESSAGE_EDIT: "message.edit",
   MESSAGE_DELETE: "message.delete",
+  MESSAGE_REACTION_UPDATED: "message.reaction.updated",
   TYPING_UPDATE: "typing.update",
   CHAT_UPDATE: "chat.update",
   CHAT_DELETED: "chat.deleted",
@@ -51718,6 +51729,7 @@ var WS_EVENTS = {
   INBOX_UPDATE: "inbox.update",
   INBOX_BULK_UPDATE: "inbox.bulk_update",
   READ_POSITION_UPDATED: "read_position.updated",
+  THREAD_READ_POSITION_UPDATED: "thread_read_position.updated",
   DISPATCH_NEW: "dispatch.new",
   DISPATCH_RECEIVED: "dispatch.received",
   DISPATCH_RESOLVED: "dispatch.resolved",
@@ -51903,7 +51915,7 @@ var ParallClient = class _ParallClient {
       if (qs)
         url += `?${qs}`;
     }
-    const headers = this.buildHeaders(path11);
+    const headers = this.buildHeaders(path11, opts?.headers);
     const timeoutSignal = AbortSignal.timeout(opts?.timeoutMs ?? 15e3);
     const signal = opts?.signal ? AbortSignal.any([opts.signal, timeoutSignal]) : timeoutSignal;
     let res;
@@ -52309,6 +52321,14 @@ var ParallClient = class _ParallClient {
   async getMessageReplies(id, params) {
     return this.request("GET", ENDPOINTS.MESSAGE_REPLIES(id), void 0, params);
   }
+  // ---- Reactions ----
+  async toggleReaction(messageId, emoji) {
+    return this.request("PUT", ENDPOINTS.MESSAGE_REACTION(messageId, emoji));
+  }
+  async listReactions(messageId) {
+    const res = await this.request("GET", ENDPOINTS.MESSAGE_REACTIONS(messageId));
+    return res.reactions;
+  }
   // ---- File Upload ----
   async getUploadPresignUrl(orgId, req) {
     return this.request("POST", ENDPOINTS.UPLOAD_PRESIGN(orgId), req);
@@ -52684,6 +52704,15 @@ var ParallClient = class _ParallClient {
   async browserViewerCommand(orgId, profileId, req, opts) {
     return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, opts);
   }
+  /**
+   * Drive the Cloud Edge live viewer (V1b, design §6): WebRTC signaling + input +
+   * tab nav for a hosted browser (Cloud Profile). Same request/reply shape as
+   * browserViewerCommand, on the v3 edge pipe; additive — the v2 browser-profile
+   * viewer is unchanged.
+   */
+  async edgeViewerCommand(orgId, edgeId, req, opts) {
+    return this.request("POST", ENDPOINTS.ORG_EDGE_VIEWER_COMMAND(orgId, edgeId), req, void 0, false, opts);
+  }
   async resizeMachine(orgId, machineId, spec) {
     return this.request("PATCH", ENDPOINTS.MACHINE_SPEC(orgId, machineId), spec);
   }
@@ -52710,14 +52739,23 @@ var ParallClient = class _ParallClient {
   }
   // Wiki mount/token methods removed — wiki-service handles all wiki endpoints.
   // ---- Unread ----
-  async getUnreadCounts(orgId) {
+  async getUnreadCounts(orgId, opts) {
     const endpoint = orgId ? ENDPOINTS.ORG_UNREAD(orgId) : ENDPOINTS.UNREAD;
-    const res = await this.request("GET", endpoint);
+    const res = await this.request("GET", endpoint, void 0, {
+      include_thread_replies: opts?.includeThreadReplies ? "true" : void 0
+    });
     return res.data;
   }
   async markRead(orgId, chatId, messageId) {
     return this.request("POST", ENDPOINTS.CHAT_READ(orgId, chatId), { message_id: messageId });
   }
+  /** Mark everything in a chat read: the channel cursor jumps to the latest
+   *  top-level message and every thread cursor to its latest reply, in one
+   *  idempotent call. The server echoes the same per-cursor WS events the
+   *  single-cursor routes emit and auto-clears covered inbox items. */
+  async markAllRead(orgId, chatId) {
+    return this.request("POST", ENDPOINTS.CHAT_READ_ALL(orgId, chatId));
+  }
   async getThreadUnread(orgId, chatId, threadRootId) {
     return this.request("GET", ENDPOINTS.THREAD_UNREAD(orgId, chatId, threadRootId));
   }
@@ -53392,6 +53430,16 @@ var ParallClient = class _ParallClient {
   async getBacklinks(orgId, params) {
     return this.request("GET", ENDPOINTS.REFS_BACKLINKS(orgId), void 0, params);
   }
+  /**
+   * Outbound prll:// refs authored in a set of sources, as raw ref_links rows
+   * (dedupe/group client-side). Pass `{ thread_root_id }` to list a whole
+   * thread's refs (root + all replies, resolved server-side — the client's
+   * reply window may be partial), or `{ source_type, source_ids }` for
+   * explicit sources (max 500; v1 accepts only message sources).
+   */
+  async listOutboundRefs(orgId, req) {
+    return this.request("POST", ENDPOINTS.REFS_OUTBOUND(orgId), req);
+  }
   /**
    * Bounded multi-hop walk of the prll:// reference graph around `uri`. `uri`
    * must be an entity-level prll:// URI — a refined URI (path/query/fragment) is
@@ -53671,6 +53719,43 @@ var ParallClient = class _ParallClient {
   async listEdgeProfiles(orgId, edgeId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILES(orgId, edgeId));
   }
+  /**
+   * Read a hosted Cloud Profile's egress-proxy status (manager-only: hosted
+   * human maintainer or org admin). Sanitized — the password never comes back.
+   * Typed errors: `EDGE_NOT_HOSTED` (BYOC device), `PROXY_CONFIG_CORRUPT` /
+   * validation codes as 422 when a stored config no longer passes current rules.
+   * `can_mutate` and `lease_status` are the authoritative idle gate; device
+   * list status is not a substitute.
+   */
+  async getEdgeProfileProxy(orgId, edgeId, profileName) {
+    return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName));
+  }
+  /**
+   * Set/replace the profile's egress proxy (full triple every time) — IDLE
+   * ONLY: while the profile's hosted browser is running (a viewer session is
+   * open or a pod is otherwise live) the server answers 409
+   * `EDGE_PROFILE_IN_USE`; close the viewer, wait for idle scale-to-zero, and
+   * retry. The next cold start uses the new egress; browser login state is
+   * preserved across it. Other typed errors: the validation vocabulary
+   * (`INVALID_PROXY_SERVER`, `PROXY_AUTH_INCOMPLETE`,
+   * `PROXY_SERVER_FORBIDDEN_TARGET`, …), `EDGE_DELETING` (409), and
+   * `SECRETBOX_UNCONFIGURED` (503 — server cannot store credentials safely),
+   * and `EDGE_PROFILE_PROXY_STALE` (409 — expectedVersion lost a tab race).
+   */
+  async setEdgeProfileProxy(orgId, edgeId, profileName, req, expectedVersion) {
+    return this.request("PUT", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName), req, void 0, false, {
+      headers: expectedVersion ? { "If-Match": `"proxy-${expectedVersion}"` } : void 0
+    });
+  }
+  /**
+   * Clear the profile's egress proxy; the next pod start egresses directly.
+   * Idle-only like set — 409 `EDGE_PROFILE_IN_USE` while the browser is live.
+   */
+  async clearEdgeProfileProxy(orgId, edgeId, profileName, expectedVersion) {
+    return this.request("DELETE", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName), void 0, void 0, false, {
+      headers: expectedVersion ? { "If-Match": `"proxy-${expectedVersion}"` } : void 0
+    });
+  }
   /**
    * Execute a registry clip command on an Edge device.
    *
@@ -53739,6 +53824,8 @@ var ApiError = class extends Error {
   status;
   code;
   extras;
+  /** Retry-After delta seconds when the server supplies one. */
+  retryAfterSeconds;
   /** Attempted action (authorization denials) — e.g. "chat.add_member". */
   action;
   /** Target resource URI that was evaluated — e.g. "prll://cht_…". */
@@ -53758,6 +53845,9 @@ function buildApiError(res, rawErrorBody) {
   const errMsg = (typeof errorObj?.message === "string" ? errorObj.message : void 0) ?? (typeof errorBody.message === "string" ? errorBody.message : void 0) ?? (typeof errorBody.error === "string" ? errorBody.error : void 0);
   const errCode = (typeof errorObj?.code === "string" ? errorObj.code : void 0) ?? (typeof errorBody.code === "string" ? errorBody.code : void 0);
   const apiError = new ApiError(res.status, errMsg ?? res.statusText, errCode);
+  const retryAfter = Number(res.headers?.get("Retry-After"));
+  if (Number.isFinite(retryAfter) && retryAfter > 0)
+    apiError.retryAfterSeconds = retryAfter;
   const anchors = errorObj ?? errorBody;
   if (typeof anchors.action === "string")
     apiError.action = anchors.action;
@@ -59332,7 +59422,7 @@ parall tasks list --assignee-id prll://usr_xxx   # first page only (default 20)
 parall tasks subtasks prll://tsk_xxx             # children of a single parent task
 
 # Create a task (add --parent-id to make it a SUBTASK of another task)
-parall tasks create --title "Task title" [--assignee-id prll://usr_xxx] [--parent-id prll://tsk_xxx] [--project-id prll://prj_xxx] [--due-date 2026-08-01]
+parall tasks create --title "Task title" [--assignee-id prll://usr_xxx] [--parent-id prll://tsk_xxx] [--project-id prll://prj_xxx] [--planned-start 2026-07-20] [--due-date 2026-08-01]
 
 # Update task status \u2014 add --placement end so the task lands at the end of
 # its NEW status column (a bare --status keeps the old column's sort_order)
@@ -59343,6 +59433,12 @@ parall tasks update prll://tsk_xxx --status done --placement end
 parall tasks update prll://tsk_xxx --due-date 2026-08-01
 parall tasks update prll://tsk_xxx --due-date none
 
+# Planned start \u2014 same grammar as --due-date; must be on or before the due
+# date when both are set. This is the planned schedule's left-edge date,
+# NOT when work actually began (that stays on lifecycle timestamps)
+parall tasks update prll://tsk_xxx --planned-start 2026-07-20
+parall tasks update prll://tsk_xxx --planned-start none
+
 # Move a task to the end of its status column
 parall tasks update prll://tsk_xxx --placement end
 

package/bundle/parall-codex-agent.js

@@ -51351,6 +51351,8 @@ var ENDPOINTS = {
   MESSAGE_WATCH: (id) => `${API_BASE}/messages/${id}/watch`,
   MESSAGE_WATCHERS: (id) => `${API_BASE}/messages/${id}/watchers`,
   MESSAGE_WATCHING: (id) => `${API_BASE}/messages/${id}/watching`,
+  MESSAGE_REACTIONS: (id) => `${API_BASE}/messages/${id}/reactions`,
+  MESSAGE_REACTION: (id, emoji) => `${API_BASE}/messages/${id}/reactions/${encodeURIComponent(emoji)}`,
   // Upload (org-scoped)
   UPLOAD_PRESIGN: (orgId) => `${API_BASE}/orgs/${orgId}/upload/presign`,
   UPLOAD_COMPLETE: (orgId) => `${API_BASE}/orgs/${orgId}/upload/complete`,
@@ -51588,11 +51590,13 @@ var ENDPOINTS = {
   UNREAD: `${API_BASE}/me/unread`,
   ORG_UNREAD: (orgId) => `${API_BASE}/orgs/${orgId}/unread`,
   CHAT_READ: (orgId, chatId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/read`,
+  CHAT_READ_ALL: (orgId, chatId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/read-all`,
   THREAD_UNREAD: (orgId, chatId, threadRootId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/threads/${threadRootId}/unread`,
   THREAD_READ: (orgId, chatId, threadRootId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/threads/${threadRootId}/read`,
   // References (org-scoped)
   REFS_RESOLVE: (orgId) => `${API_BASE}/orgs/${orgId}/refs/resolve`,
   REFS_BACKLINKS: (orgId) => `${API_BASE}/orgs/${orgId}/refs/backlinks`,
+  REFS_OUTBOUND: (orgId) => `${API_BASE}/orgs/${orgId}/refs/outbound`,
   REFS_GRAPH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/graph`,
   REFS_CHECK: (orgId) => `${API_BASE}/orgs/${orgId}/refs/check`,
   // Platform config (agent-scoped, not org-scoped)
@@ -51654,7 +51658,13 @@ var ENDPOINTS = {
   ORG_EDGE_DEVICE_UNREGISTER: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/unregister`,
   ORG_EDGE_ONBOARDING: (orgId) => `/api/v1/orgs/${orgId}/edge/onboarding`,
   ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
+  // Per-profile egress proxy (hosted Cloud Profiles; manager-only, human-only).
+  ORG_EDGE_PROFILE_PROXY: (orgId, edgeId, profileName) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/proxy`,
   ORG_EDGE_EXEC: (orgId) => `/api/v1/orgs/${orgId}/edge/exec`,
+  // Cloud Edge live viewer command (V1b) — api-server, gated on cap:edge-viewer.
+  // Same request/reply shape as the v2 browser-profile viewer, on the v3 edge
+  // pipe. Additive: does NOT replace BROWSER_PROFILE_VIEWER_COMMAND.
+  ORG_EDGE_VIEWER_COMMAND: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/viewer/command`,
   CLIP_CONNECTIONS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/connections`,
   CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`,
   // Clip registry (v3, org-scoped, served by api-server — `crg_` entries; the
@@ -51677,6 +51687,7 @@ var WS_EVENTS = {
   MESSAGE_PATCH: "message.patch",
   MESSAGE_EDIT: "message.edit",
   MESSAGE_DELETE: "message.delete",
+  MESSAGE_REACTION_UPDATED: "message.reaction.updated",
   TYPING_UPDATE: "typing.update",
   CHAT_UPDATE: "chat.update",
   CHAT_DELETED: "chat.deleted",
@@ -51718,6 +51729,7 @@ var WS_EVENTS = {
   INBOX_UPDATE: "inbox.update",
   INBOX_BULK_UPDATE: "inbox.bulk_update",
   READ_POSITION_UPDATED: "read_position.updated",
+  THREAD_READ_POSITION_UPDATED: "thread_read_position.updated",
   DISPATCH_NEW: "dispatch.new",
   DISPATCH_RECEIVED: "dispatch.received",
   DISPATCH_RESOLVED: "dispatch.resolved",
@@ -51903,7 +51915,7 @@ var ParallClient = class _ParallClient {
       if (qs)
         url += `?${qs}`;
     }
-    const headers = this.buildHeaders(path12);
+    const headers = this.buildHeaders(path12, opts?.headers);
     const timeoutSignal = AbortSignal.timeout(opts?.timeoutMs ?? 15e3);
     const signal = opts?.signal ? AbortSignal.any([opts.signal, timeoutSignal]) : timeoutSignal;
     let res;
@@ -52309,6 +52321,14 @@ var ParallClient = class _ParallClient {
   async getMessageReplies(id, params) {
     return this.request("GET", ENDPOINTS.MESSAGE_REPLIES(id), void 0, params);
   }
+  // ---- Reactions ----
+  async toggleReaction(messageId, emoji) {
+    return this.request("PUT", ENDPOINTS.MESSAGE_REACTION(messageId, emoji));
+  }
+  async listReactions(messageId) {
+    const res = await this.request("GET", ENDPOINTS.MESSAGE_REACTIONS(messageId));
+    return res.reactions;
+  }
   // ---- File Upload ----
   async getUploadPresignUrl(orgId, req) {
     return this.request("POST", ENDPOINTS.UPLOAD_PRESIGN(orgId), req);
@@ -52684,6 +52704,15 @@ var ParallClient = class _ParallClient {
   async browserViewerCommand(orgId, profileId, req, opts) {
     return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, opts);
   }
+  /**
+   * Drive the Cloud Edge live viewer (V1b, design §6): WebRTC signaling + input +
+   * tab nav for a hosted browser (Cloud Profile). Same request/reply shape as
+   * browserViewerCommand, on the v3 edge pipe; additive — the v2 browser-profile
+   * viewer is unchanged.
+   */
+  async edgeViewerCommand(orgId, edgeId, req, opts) {
+    return this.request("POST", ENDPOINTS.ORG_EDGE_VIEWER_COMMAND(orgId, edgeId), req, void 0, false, opts);
+  }
   async resizeMachine(orgId, machineId, spec) {
     return this.request("PATCH", ENDPOINTS.MACHINE_SPEC(orgId, machineId), spec);
   }
@@ -52710,14 +52739,23 @@ var ParallClient = class _ParallClient {
   }
   // Wiki mount/token methods removed — wiki-service handles all wiki endpoints.
   // ---- Unread ----
-  async getUnreadCounts(orgId) {
+  async getUnreadCounts(orgId, opts) {
     const endpoint = orgId ? ENDPOINTS.ORG_UNREAD(orgId) : ENDPOINTS.UNREAD;
-    const res = await this.request("GET", endpoint);
+    const res = await this.request("GET", endpoint, void 0, {
+      include_thread_replies: opts?.includeThreadReplies ? "true" : void 0
+    });
     return res.data;
   }
   async markRead(orgId, chatId, messageId) {
     return this.request("POST", ENDPOINTS.CHAT_READ(orgId, chatId), { message_id: messageId });
   }
+  /** Mark everything in a chat read: the channel cursor jumps to the latest
+   *  top-level message and every thread cursor to its latest reply, in one
+   *  idempotent call. The server echoes the same per-cursor WS events the
+   *  single-cursor routes emit and auto-clears covered inbox items. */
+  async markAllRead(orgId, chatId) {
+    return this.request("POST", ENDPOINTS.CHAT_READ_ALL(orgId, chatId));
+  }
   async getThreadUnread(orgId, chatId, threadRootId) {
     return this.request("GET", ENDPOINTS.THREAD_UNREAD(orgId, chatId, threadRootId));
   }
@@ -53392,6 +53430,16 @@ var ParallClient = class _ParallClient {
   async getBacklinks(orgId, params) {
     return this.request("GET", ENDPOINTS.REFS_BACKLINKS(orgId), void 0, params);
   }
+  /**
+   * Outbound prll:// refs authored in a set of sources, as raw ref_links rows
+   * (dedupe/group client-side). Pass `{ thread_root_id }` to list a whole
+   * thread's refs (root + all replies, resolved server-side — the client's
+   * reply window may be partial), or `{ source_type, source_ids }` for
+   * explicit sources (max 500; v1 accepts only message sources).
+   */
+  async listOutboundRefs(orgId, req) {
+    return this.request("POST", ENDPOINTS.REFS_OUTBOUND(orgId), req);
+  }
   /**
    * Bounded multi-hop walk of the prll:// reference graph around `uri`. `uri`
    * must be an entity-level prll:// URI — a refined URI (path/query/fragment) is
@@ -53671,6 +53719,43 @@ var ParallClient = class _ParallClient {
   async listEdgeProfiles(orgId, edgeId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILES(orgId, edgeId));
   }
+  /**
+   * Read a hosted Cloud Profile's egress-proxy status (manager-only: hosted
+   * human maintainer or org admin). Sanitized — the password never comes back.
+   * Typed errors: `EDGE_NOT_HOSTED` (BYOC device), `PROXY_CONFIG_CORRUPT` /
+   * validation codes as 422 when a stored config no longer passes current rules.
+   * `can_mutate` and `lease_status` are the authoritative idle gate; device
+   * list status is not a substitute.
+   */
+  async getEdgeProfileProxy(orgId, edgeId, profileName) {
+    return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName));
+  }
+  /**
+   * Set/replace the profile's egress proxy (full triple every time) — IDLE
+   * ONLY: while the profile's hosted browser is running (a viewer session is
+   * open or a pod is otherwise live) the server answers 409
+   * `EDGE_PROFILE_IN_USE`; close the viewer, wait for idle scale-to-zero, and
+   * retry. The next cold start uses the new egress; browser login state is
+   * preserved across it. Other typed errors: the validation vocabulary
+   * (`INVALID_PROXY_SERVER`, `PROXY_AUTH_INCOMPLETE`,
+   * `PROXY_SERVER_FORBIDDEN_TARGET`, …), `EDGE_DELETING` (409), and
+   * `SECRETBOX_UNCONFIGURED` (503 — server cannot store credentials safely),
+   * and `EDGE_PROFILE_PROXY_STALE` (409 — expectedVersion lost a tab race).
+   */
+  async setEdgeProfileProxy(orgId, edgeId, profileName, req, expectedVersion) {
+    return this.request("PUT", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName), req, void 0, false, {
+      headers: expectedVersion ? { "If-Match": `"proxy-${expectedVersion}"` } : void 0
+    });
+  }
+  /**
+   * Clear the profile's egress proxy; the next pod start egresses directly.
+   * Idle-only like set — 409 `EDGE_PROFILE_IN_USE` while the browser is live.
+   */
+  async clearEdgeProfileProxy(orgId, edgeId, profileName, expectedVersion) {
+    return this.request("DELETE", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName), void 0, void 0, false, {
+      headers: expectedVersion ? { "If-Match": `"proxy-${expectedVersion}"` } : void 0
+    });
+  }
   /**
    * Execute a registry clip command on an Edge device.
    *
@@ -53739,6 +53824,8 @@ var ApiError = class extends Error {
   status;
   code;
   extras;
+  /** Retry-After delta seconds when the server supplies one. */
+  retryAfterSeconds;
   /** Attempted action (authorization denials) — e.g. "chat.add_member". */
   action;
   /** Target resource URI that was evaluated — e.g. "prll://cht_…". */
@@ -53758,6 +53845,9 @@ function buildApiError(res, rawErrorBody) {
   const errMsg = (typeof errorObj?.message === "string" ? errorObj.message : void 0) ?? (typeof errorBody.message === "string" ? errorBody.message : void 0) ?? (typeof errorBody.error === "string" ? errorBody.error : void 0);
   const errCode = (typeof errorObj?.code === "string" ? errorObj.code : void 0) ?? (typeof errorBody.code === "string" ? errorBody.code : void 0);
   const apiError = new ApiError(res.status, errMsg ?? res.statusText, errCode);
+  const retryAfter = Number(res.headers?.get("Retry-After"));
+  if (Number.isFinite(retryAfter) && retryAfter > 0)
+    apiError.retryAfterSeconds = retryAfter;
   const anchors = errorObj ?? errorBody;
   if (typeof anchors.action === "string")
     apiError.action = anchors.action;
@@ -59332,7 +59422,7 @@ parall tasks list --assignee-id prll://usr_xxx   # first page only (default 20)
 parall tasks subtasks prll://tsk_xxx             # children of a single parent task
 
 # Create a task (add --parent-id to make it a SUBTASK of another task)
-parall tasks create --title "Task title" [--assignee-id prll://usr_xxx] [--parent-id prll://tsk_xxx] [--project-id prll://prj_xxx] [--due-date 2026-08-01]
+parall tasks create --title "Task title" [--assignee-id prll://usr_xxx] [--parent-id prll://tsk_xxx] [--project-id prll://prj_xxx] [--planned-start 2026-07-20] [--due-date 2026-08-01]
 
 # Update task status \u2014 add --placement end so the task lands at the end of
 # its NEW status column (a bare --status keeps the old column's sort_order)
@@ -59343,6 +59433,12 @@ parall tasks update prll://tsk_xxx --status done --placement end
 parall tasks update prll://tsk_xxx --due-date 2026-08-01
 parall tasks update prll://tsk_xxx --due-date none
 
+# Planned start \u2014 same grammar as --due-date; must be on or before the due
+# date when both are set. This is the planned schedule's left-edge date,
+# NOT when work actually began (that stays on lifecycle timestamps)
+parall tasks update prll://tsk_xxx --planned-start 2026-07-20
+parall tasks update prll://tsk_xxx --planned-start none
+
 # Move a task to the end of its status column
 parall tasks update prll://tsk_xxx --placement end
 

package/bundle/parall-daemon.js

@@ -191,6 +191,8 @@ var init_constants = __esm({
       MESSAGE_WATCH: (id) => `${API_BASE}/messages/${id}/watch`,
       MESSAGE_WATCHERS: (id) => `${API_BASE}/messages/${id}/watchers`,
       MESSAGE_WATCHING: (id) => `${API_BASE}/messages/${id}/watching`,
+      MESSAGE_REACTIONS: (id) => `${API_BASE}/messages/${id}/reactions`,
+      MESSAGE_REACTION: (id, emoji) => `${API_BASE}/messages/${id}/reactions/${encodeURIComponent(emoji)}`,
       // Upload (org-scoped)
       UPLOAD_PRESIGN: (orgId) => `${API_BASE}/orgs/${orgId}/upload/presign`,
       UPLOAD_COMPLETE: (orgId) => `${API_BASE}/orgs/${orgId}/upload/complete`,
@@ -428,11 +430,13 @@ var init_constants = __esm({
       UNREAD: `${API_BASE}/me/unread`,
       ORG_UNREAD: (orgId) => `${API_BASE}/orgs/${orgId}/unread`,
       CHAT_READ: (orgId, chatId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/read`,
+      CHAT_READ_ALL: (orgId, chatId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/read-all`,
       THREAD_UNREAD: (orgId, chatId, threadRootId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/threads/${threadRootId}/unread`,
       THREAD_READ: (orgId, chatId, threadRootId) => `${API_BASE}/orgs/${orgId}/chats/${chatId}/threads/${threadRootId}/read`,
       // References (org-scoped)
       REFS_RESOLVE: (orgId) => `${API_BASE}/orgs/${orgId}/refs/resolve`,
       REFS_BACKLINKS: (orgId) => `${API_BASE}/orgs/${orgId}/refs/backlinks`,
+      REFS_OUTBOUND: (orgId) => `${API_BASE}/orgs/${orgId}/refs/outbound`,
       REFS_GRAPH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/graph`,
       REFS_CHECK: (orgId) => `${API_BASE}/orgs/${orgId}/refs/check`,
       // Platform config (agent-scoped, not org-scoped)
@@ -494,7 +498,13 @@ var init_constants = __esm({
       ORG_EDGE_DEVICE_UNREGISTER: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/unregister`,
       ORG_EDGE_ONBOARDING: (orgId) => `/api/v1/orgs/${orgId}/edge/onboarding`,
       ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
+      // Per-profile egress proxy (hosted Cloud Profiles; manager-only, human-only).
+      ORG_EDGE_PROFILE_PROXY: (orgId, edgeId, profileName) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/proxy`,
       ORG_EDGE_EXEC: (orgId) => `/api/v1/orgs/${orgId}/edge/exec`,
+      // Cloud Edge live viewer command (V1b) — api-server, gated on cap:edge-viewer.
+      // Same request/reply shape as the v2 browser-profile viewer, on the v3 edge
+      // pipe. Additive: does NOT replace BROWSER_PROFILE_VIEWER_COMMAND.
+      ORG_EDGE_VIEWER_COMMAND: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/viewer/command`,
       CLIP_CONNECTIONS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/connections`,
       CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`,
       // Clip registry (v3, org-scoped, served by api-server — `crg_` entries; the
@@ -517,6 +527,7 @@ var init_constants = __esm({
       MESSAGE_PATCH: "message.patch",
       MESSAGE_EDIT: "message.edit",
       MESSAGE_DELETE: "message.delete",
+      MESSAGE_REACTION_UPDATED: "message.reaction.updated",
       TYPING_UPDATE: "typing.update",
       CHAT_UPDATE: "chat.update",
       CHAT_DELETED: "chat.deleted",
@@ -558,6 +569,7 @@ var init_constants = __esm({
       INBOX_UPDATE: "inbox.update",
       INBOX_BULK_UPDATE: "inbox.bulk_update",
       READ_POSITION_UPDATED: "read_position.updated",
+      THREAD_READ_POSITION_UPDATED: "thread_read_position.updated",
       DISPATCH_NEW: "dispatch.new",
       DISPATCH_RECEIVED: "dispatch.received",
       DISPATCH_RESOLVED: "dispatch.resolved",
@@ -604,6 +616,9 @@ function buildApiError(res, rawErrorBody) {
   const errMsg = (typeof errorObj?.message === "string" ? errorObj.message : void 0) ?? (typeof errorBody.message === "string" ? errorBody.message : void 0) ?? (typeof errorBody.error === "string" ? errorBody.error : void 0);
   const errCode = (typeof errorObj?.code === "string" ? errorObj.code : void 0) ?? (typeof errorBody.code === "string" ? errorBody.code : void 0);
   const apiError = new ApiError(res.status, errMsg ?? res.statusText, errCode);
+  const retryAfter = Number(res.headers?.get("Retry-After"));
+  if (Number.isFinite(retryAfter) && retryAfter > 0)
+    apiError.retryAfterSeconds = retryAfter;
   const anchors = errorObj ?? errorBody;
   if (typeof anchors.action === "string")
     apiError.action = anchors.action;
@@ -784,7 +799,7 @@ var init_client = __esm({
           if (qs)
             url += `?${qs}`;
         }
-        const headers = this.buildHeaders(path23);
+        const headers = this.buildHeaders(path23, opts?.headers);
         const timeoutSignal = AbortSignal.timeout(opts?.timeoutMs ?? 15e3);
         const signal = opts?.signal ? AbortSignal.any([opts.signal, timeoutSignal]) : timeoutSignal;
         let res;
@@ -1190,6 +1205,14 @@ var init_client = __esm({
       async getMessageReplies(id, params) {
         return this.request("GET", ENDPOINTS.MESSAGE_REPLIES(id), void 0, params);
       }
+      // ---- Reactions ----
+      async toggleReaction(messageId, emoji) {
+        return this.request("PUT", ENDPOINTS.MESSAGE_REACTION(messageId, emoji));
+      }
+      async listReactions(messageId) {
+        const res = await this.request("GET", ENDPOINTS.MESSAGE_REACTIONS(messageId));
+        return res.reactions;
+      }
       // ---- File Upload ----
       async getUploadPresignUrl(orgId, req) {
         return this.request("POST", ENDPOINTS.UPLOAD_PRESIGN(orgId), req);
@@ -1565,6 +1588,15 @@ var init_client = __esm({
       async browserViewerCommand(orgId, profileId, req, opts) {
         return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, opts);
       }
+      /**
+       * Drive the Cloud Edge live viewer (V1b, design §6): WebRTC signaling + input +
+       * tab nav for a hosted browser (Cloud Profile). Same request/reply shape as
+       * browserViewerCommand, on the v3 edge pipe; additive — the v2 browser-profile
+       * viewer is unchanged.
+       */
+      async edgeViewerCommand(orgId, edgeId, req, opts) {
+        return this.request("POST", ENDPOINTS.ORG_EDGE_VIEWER_COMMAND(orgId, edgeId), req, void 0, false, opts);
+      }
       async resizeMachine(orgId, machineId, spec) {
         return this.request("PATCH", ENDPOINTS.MACHINE_SPEC(orgId, machineId), spec);
       }
@@ -1591,14 +1623,23 @@ var init_client = __esm({
       }
       // Wiki mount/token methods removed — wiki-service handles all wiki endpoints.
       // ---- Unread ----
-      async getUnreadCounts(orgId) {
+      async getUnreadCounts(orgId, opts) {
         const endpoint = orgId ? ENDPOINTS.ORG_UNREAD(orgId) : ENDPOINTS.UNREAD;
-        const res = await this.request("GET", endpoint);
+        const res = await this.request("GET", endpoint, void 0, {
+          include_thread_replies: opts?.includeThreadReplies ? "true" : void 0
+        });
         return res.data;
       }
       async markRead(orgId, chatId, messageId) {
         return this.request("POST", ENDPOINTS.CHAT_READ(orgId, chatId), { message_id: messageId });
       }
+      /** Mark everything in a chat read: the channel cursor jumps to the latest
+       *  top-level message and every thread cursor to its latest reply, in one
+       *  idempotent call. The server echoes the same per-cursor WS events the
+       *  single-cursor routes emit and auto-clears covered inbox items. */
+      async markAllRead(orgId, chatId) {
+        return this.request("POST", ENDPOINTS.CHAT_READ_ALL(orgId, chatId));
+      }
       async getThreadUnread(orgId, chatId, threadRootId) {
         return this.request("GET", ENDPOINTS.THREAD_UNREAD(orgId, chatId, threadRootId));
       }
@@ -2273,6 +2314,16 @@ var init_client = __esm({
       async getBacklinks(orgId, params) {
         return this.request("GET", ENDPOINTS.REFS_BACKLINKS(orgId), void 0, params);
       }
+      /**
+       * Outbound prll:// refs authored in a set of sources, as raw ref_links rows
+       * (dedupe/group client-side). Pass `{ thread_root_id }` to list a whole
+       * thread's refs (root + all replies, resolved server-side — the client's
+       * reply window may be partial), or `{ source_type, source_ids }` for
+       * explicit sources (max 500; v1 accepts only message sources).
+       */
+      async listOutboundRefs(orgId, req) {
+        return this.request("POST", ENDPOINTS.REFS_OUTBOUND(orgId), req);
+      }
       /**
        * Bounded multi-hop walk of the prll:// reference graph around `uri`. `uri`
        * must be an entity-level prll:// URI — a refined URI (path/query/fragment) is
@@ -2552,6 +2603,43 @@ var init_client = __esm({
       async listEdgeProfiles(orgId, edgeId) {
         return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILES(orgId, edgeId));
       }
+      /**
+       * Read a hosted Cloud Profile's egress-proxy status (manager-only: hosted
+       * human maintainer or org admin). Sanitized — the password never comes back.
+       * Typed errors: `EDGE_NOT_HOSTED` (BYOC device), `PROXY_CONFIG_CORRUPT` /
+       * validation codes as 422 when a stored config no longer passes current rules.
+       * `can_mutate` and `lease_status` are the authoritative idle gate; device
+       * list status is not a substitute.
+       */
+      async getEdgeProfileProxy(orgId, edgeId, profileName) {
+        return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName));
+      }
+      /**
+       * Set/replace the profile's egress proxy (full triple every time) — IDLE
+       * ONLY: while the profile's hosted browser is running (a viewer session is
+       * open or a pod is otherwise live) the server answers 409
+       * `EDGE_PROFILE_IN_USE`; close the viewer, wait for idle scale-to-zero, and
+       * retry. The next cold start uses the new egress; browser login state is
+       * preserved across it. Other typed errors: the validation vocabulary
+       * (`INVALID_PROXY_SERVER`, `PROXY_AUTH_INCOMPLETE`,
+       * `PROXY_SERVER_FORBIDDEN_TARGET`, …), `EDGE_DELETING` (409), and
+       * `SECRETBOX_UNCONFIGURED` (503 — server cannot store credentials safely),
+       * and `EDGE_PROFILE_PROXY_STALE` (409 — expectedVersion lost a tab race).
+       */
+      async setEdgeProfileProxy(orgId, edgeId, profileName, req, expectedVersion) {
+        return this.request("PUT", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName), req, void 0, false, {
+          headers: expectedVersion ? { "If-Match": `"proxy-${expectedVersion}"` } : void 0
+        });
+      }
+      /**
+       * Clear the profile's egress proxy; the next pod start egresses directly.
+       * Idle-only like set — 409 `EDGE_PROFILE_IN_USE` while the browser is live.
+       */
+      async clearEdgeProfileProxy(orgId, edgeId, profileName, expectedVersion) {
+        return this.request("DELETE", ENDPOINTS.ORG_EDGE_PROFILE_PROXY(orgId, edgeId, profileName), void 0, void 0, false, {
+          headers: expectedVersion ? { "If-Match": `"proxy-${expectedVersion}"` } : void 0
+        });
+      }
       /**
        * Execute a registry clip command on an Edge device.
        *
@@ -2613,6 +2701,8 @@ var init_client = __esm({
       status;
       code;
       extras;
+      /** Retry-After delta seconds when the server supplies one. */
+      retryAfterSeconds;
       /** Attempted action (authorization denials) — e.g. "chat.add_member". */
       action;
       /** Target resource URI that was evaluated — e.g. "prll://cht_…". */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/daemon",
-  "version": "1.48.0",
+  "version": "1.49.0",
   "description": "Parall local agent runtime — daemon supervisor + bridge runtimes, bundled as standalone JS files",
   "license": "MIT",
   "repository": {
@@ -33,11 +33,11 @@
     "@aws-sdk/client-s3": "3.984.0",
     "@pinixai/bb-browser-pro": "0.15.0",
     "ws": "^8.18.0",
-    "@parall/sdk": "1.48.0",
-    "@parall/codex-agent": "1.48.0",
-    "@parall/openclaw-agent": "1.48.0",
-    "@parall/claude-agent": "1.48.0",
-    "@parall/agent-core": "1.48.0"
+    "@parall/agent-core": "1.49.0",
+    "@parall/sdk": "1.49.0",
+    "@parall/codex-agent": "1.49.0",
+    "@parall/openclaw-agent": "1.49.0",
+    "@parall/claude-agent": "1.49.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",