@parall/daemon 1.49.0 → 1.50.1

package/bundle/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.49.0",
-  "built_at": "2026-07-26T04:12:18.813Z",
+  "version": "1.50.1",
+  "built_at": "2026-07-28T15:25:57.441Z",
   "min_node_version": "20.0.0",
   "files": {
     "bb-browser-daemon.js": {
@@ -16,29 +16,29 @@
       "size": 18
     },
     "parall-browser-pod.js": {
-      "sha256": "20a0ee67c5be9cd2352ed8e5a503fa60b8fe86d7dba04ecbe2345397c6e7e00f",
-      "size": 2899080
+      "sha256": "f20c74453ddfbef10528afc1d9b6c4de48fd4a780ddb715431d61185c3454b20",
+      "size": 2908552
     },
     "parall-channel-exec.js": {
       "sha256": "7c2a6e12483a45e9eb4a42cd7d4cdd3c4fa21dd09ac1347d9a3e177b4ddee930",
       "size": 7220
     },
     "parall-claude-agent.js": {
-      "sha256": "19203c62234b641e691de41af3444d52876beaabc3fa6abeb7907fd5276da711",
-      "size": 2732891
+      "sha256": "38048b9d69561a7d92ddc97b6322ae215e2e59dbcbbb6353bfa371632683a17c",
+      "size": 2737754
     },
     "parall-codex-agent.js": {
-      "sha256": "8a80870d3f213ae3d36b5c46b4e4d4e6eb1d91855d5a2ce1c72be43e9cc960ba",
-      "size": 2774631
+      "sha256": "c65c89982b58f6e1aea155991d364f1325eef166fe0fb92ab989ea477dfe3dd3",
+      "size": 2779494
     },
     "parall-daemon.js": {
-      "sha256": "ef3377051a8310fb760d2ce7826a6654d83225f093a8cdade696ad6216540b3c",
-      "size": 2961111
+      "sha256": "fd0bf688bcf0df4227c7eef61907276437b2f40961e4ebba28c12d2dda34de73",
+      "size": 2969136
     },
     "parall-openclaw-agent.js": {
       "sha256": "856a1c3a9ae0ffef8efe2481fa1171dbeb1d67cccb88616aa9bf16da96a69355",
       "size": 9923
     }
   },
-  "signature": "sDr+si9wQsnB/LezX3xlTWHu2bHV5DzO5KWEtQz/5Qj2XOWfpKqvb0JjjVFGOxCG07mIGSfj9U5KpeT3GMgbDg=="
+  "signature": "VOZtJbTWb3YvTHoc3hGgfBw3bnL4JM9jdTXmPW6rdc3YpZXCunf//CcfviSu0Acn/p6vnHSEizSX00RAJbrCAw=="
 }

package/bundle/parall-browser-pod.js

@@ -63495,6 +63495,17 @@ function clearAllProviderCreds(env) {
   delete env.PRLL_CLAUDE_ALLOW_API_KEY;
 }
 
+// ts/sdk/dist/browser-viewer.js
+var BROWSER_VIEWER_READINESS_TIMEOUT_MS = 6e4;
+function browserViewerRequestOptions(command, opts) {
+  if (command !== "stream.answer" && command !== "stream.switch")
+    return opts;
+  return {
+    ...opts,
+    timeoutMs: Math.max(opts?.timeoutMs ?? 0, BROWSER_VIEWER_READINESS_TIMEOUT_MS)
+  };
+}
+
 // ts/sdk/dist/constants.js
 var API_BASE = "/api/v1";
 var WIKI_BASE = "/wiki/v1";
@@ -63529,6 +63540,12 @@ var ENDPOINTS = {
   ORG_MEMBER: (orgId, userId) => `${API_BASE}/orgs/${orgId}/members/${userId}`,
   ORG_MEMBER_CHATS: (orgId, memberId) => `${API_BASE}/orgs/${orgId}/members/${memberId}/chats`,
   ORG_MEMBER_TASKS: (orgId, memberId) => `${API_BASE}/orgs/${orgId}/members/${memberId}/tasks`,
+  // Org-scoped public profile (title / description). GET readable by every
+  // active member; PATCH is CAS-guarded (expected_version).
+  ORG_MEMBER_PROFILE: (orgId, userId) => `${API_BASE}/orgs/${orgId}/members/${userId}/profile`,
+  // Private agent Instructions — visibility gated server-side
+  // (agent self + Human org admin/owner). Never cached.
+  AGENT_INSTRUCTIONS: (orgId, agentId) => `${API_BASE}/orgs/${orgId}/agents/${agentId}/instructions`,
   REF_SEARCH: (orgId) => `${API_BASE}/orgs/${orgId}/refs/search`,
   // Direct messages (org-scoped, atomic find-or-create + send)
   DM: (orgId) => `${API_BASE}/orgs/${orgId}/dm`,
@@ -63812,6 +63829,11 @@ var ENDPOINTS = {
   SEARCH: (orgId) => `${API_BASE}/orgs/${orgId}/search`,
   // Feature flags (org-scoped, server-evaluated)
   FEATURE_FLAGS: (orgId) => `${API_BASE}/orgs/${orgId}/feature-flags`,
+  // Team templates (org-scoped, owner/admin only)
+  TEMPLATES: (orgId) => `${API_BASE}/orgs/${orgId}/templates`,
+  TEMPLATE: (orgId, templateId) => `${API_BASE}/orgs/${orgId}/templates/${templateId}`,
+  TEMPLATE_DEPLOYMENTS: (orgId) => `${API_BASE}/orgs/${orgId}/template-deployments`,
+  TEMPLATE_DEPLOYMENT: (orgId, deploymentId) => `${API_BASE}/orgs/${orgId}/template-deployments/${deploymentId}`,
   // Billing & Credits (org-scoped)
   BILLING: (orgId) => `${API_BASE}/orgs/${orgId}/billing`,
   BILLING_TRANSACTIONS: (orgId) => `${API_BASE}/orgs/${orgId}/billing/transactions`,
@@ -64246,6 +64268,30 @@ var ParallClient = class _ParallClient {
   async updateOrgMember(orgId, userId, role) {
     return this.request("PATCH", ENDPOINTS.ORG_MEMBER(orgId, userId), { role });
   }
+  /** Org-scoped public profile (title / description) of any active member. */
+  async getMemberProfile(orgId, userId) {
+    return this.request("GET", ENDPOINTS.ORG_MEMBER_PROFILE(orgId, userId));
+  }
+  /**
+   * CAS full-replacement of a member's public profile. Humans edit their
+   * own; Human org admins/owners edit agents'. A stale expected_version
+   * gets 409 PROFILE_VERSION_CONFLICT with error.details.current_version.
+   */
+  async updateMemberProfile(orgId, userId, req) {
+    return this.request("PATCH", ENDPOINTS.ORG_MEMBER_PROFILE(orgId, userId), req);
+  }
+  /** Private agent Instructions — agent self or Human org admin/owner only. */
+  async getAgentInstructions(orgId, agentId) {
+    return this.request("GET", ENDPOINTS.AGENT_INSTRUCTIONS(orgId, agentId));
+  }
+  /**
+   * CAS update of the private Instructions (Human org admin/owner only).
+   * A stale expected_version gets 409 INSTRUCTIONS_VERSION_CONFLICT with
+   * error.details.current_version.
+   */
+  async updateAgentInstructions(orgId, agentId, req) {
+    return this.request("PATCH", ENDPOINTS.AGENT_INSTRUCTIONS(orgId, agentId), req);
+  }
   // Member activity surfaces — chats the member participates in within this org,
   // ordered by most recent activity. Powers the member profile Activity tab.
   async getMemberChats(orgId, memberId, params) {
@@ -64803,11 +64849,7 @@ var ParallClient = class _ParallClient {
   async postBrowseResponse(requestId, response) {
     return this.request("POST", ENDPOINTS.MACHINES_ME_BROWSE_RESPONSE(requestId), response);
   }
-  /**
-   * `POST /machines/me/browser-profiles/viewer-response/{requestId}` — daemon
-   * reply to a `machine.browser_profile.viewer` control command. Wakes the
-   * api-server request/reply bridge (mirrors {@link postBrowseResponse}).
-   */
+  /** Reply to `machine.browser_profile.viewer` and wake its request/reply bridge. */
   async postBrowserProfileViewerResponse(requestId, response) {
     return this.request("POST", ENDPOINTS.MACHINES_ME_BROWSER_PROFILE_VIEWER_RESPONSE(requestId), response);
   }
@@ -64817,7 +64859,7 @@ var ParallClient = class _ParallClient {
    * owner or org admin. api-server brokers the command to the host daemon.
    */
   async browserViewerCommand(orgId, profileId, req, opts) {
-    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, opts);
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, browserViewerRequestOptions(req.command, opts));
   }
   /**
    * Drive the Cloud Edge live viewer (V1b, design §6): WebRTC signaling + input +
@@ -65589,6 +65631,22 @@ var ParallClient = class _ParallClient {
   async getFeatureFlags(orgId) {
     return this.request("GET", ENDPOINTS.FEATURE_FLAGS(orgId));
   }
+  // ---- Official Template catalog (org-contextual owner/admin reads + Hire) ----
+  async listOfficialTemplates(orgId) {
+    const response = await this.request("GET", ENDPOINTS.TEMPLATES(orgId));
+    return response.templates ?? [];
+  }
+  async getOfficialTemplate(orgId, templateId) {
+    return this.request("GET", ENDPOINTS.TEMPLATE(orgId, templateId));
+  }
+  async deployTemplate(orgId, request) {
+    return this.request("POST", ENDPOINTS.TEMPLATE_DEPLOYMENTS(orgId), request, void 0, false, {
+      timeoutMs: 185e3
+    });
+  }
+  async getTemplateDeployment(orgId, deploymentId) {
+    return this.request("GET", ENDPOINTS.TEMPLATE_DEPLOYMENT(orgId, deploymentId));
+  }
   // ---- Billing & Credits (org-scoped) ----
   async getBilling(orgId) {
     return this.request("GET", ENDPOINTS.BILLING(orgId));
@@ -66829,8 +66887,113 @@ function comparableUrl(url) {
 
 // ts/daemon/dist/clip-runtime/browser-viewer-streamer.js
 import { spawn } from "node:child_process";
-var BB_VIEWER_HEALTH_TIMEOUT_MS = 1e4;
+
+// ts/daemon/dist/clip-runtime/viewer-command-error.js
+var ViewerCommandError = class extends Error {
+  code;
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+    this.name = "ViewerCommandError";
+  }
+};
+function viewerCommandFailure(error2) {
+  const message = error2 instanceof Error ? error2.message : String(error2);
+  if (error2 instanceof ViewerCommandError && error2.code) {
+    return { code: error2.code, message };
+  }
+  return { message };
+}
+
+// ts/daemon/dist/clip-runtime/viewer-command-deadline.js
+var HOSTED_VIEWER_READINESS_POD_BUDGET_MS = 3e4;
+var HOSTED_VIEWER_REPLY_RESERVE_MS = 5e3;
+function isViewerReadinessCommand(command) {
+  return command === "stream.answer" || command === "stream.switch";
+}
+function parseViewerDispatchDeadlineUnixMs(value) {
+  let parsed;
+  if (typeof value === "number") {
+    parsed = value;
+  } else if (typeof value === "string" && /^[1-9]\d*$/.test(value)) {
+    parsed = Number(value);
+  } else {
+    return void 0;
+  }
+  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : void 0;
+}
+function viewerReadinessDeadlineError(phase) {
+  return new ViewerCommandError(`viewer readiness deadline elapsed ${phase}`, "VIEWER_STREAM_CANCELLED");
+}
+
+// ts/daemon/dist/clip-runtime/bb-viewer-command-client.js
 var BB_VIEWER_COMMAND_TIMEOUT_MS = 15e3;
+var BB_VIEWER_READINESS_COMMAND_TIMEOUT_MS = 3e4;
+function bbViewerCommandTimeoutMs(method) {
+  return method === "answer" || method === "switch" ? BB_VIEWER_READINESS_COMMAND_TIMEOUT_MS : BB_VIEWER_COMMAND_TIMEOUT_MS;
+}
+function bbViewerCommandEffectiveTimeoutMs(method, deadlineUnixMs, now = Date.now()) {
+  const configured = bbViewerCommandTimeoutMs(method);
+  if (deadlineUnixMs === void 0)
+    return configured;
+  const remaining = deadlineUnixMs - now;
+  if (remaining <= 0) {
+    throw viewerReadinessDeadlineError(`before bb-viewer ${method}`);
+  }
+  return Math.max(1, Math.min(configured, remaining));
+}
+async function sendBBViewerCommand(port, method, params, deadlineUnixMs) {
+  const controller = new AbortController();
+  const timeoutMs = bbViewerCommandEffectiveTimeoutMs(method, deadlineUnixMs);
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const resp = await fetch(`http://127.0.0.1:${port}/command`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ method, params }),
+      signal: controller.signal
+    });
+    const text = await resp.text();
+    return parseBBViewerCommandResponse(resp.status, text, method);
+  } catch (err) {
+    if (controller.signal.aborted && (method === "answer" || method === "switch")) {
+      throw viewerReadinessDeadlineError(`while waiting for bb-viewer ${method}`);
+    }
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function parseBBViewerCommandResponse(status, text, method) {
+  let parsed;
+  try {
+    parsed = text ? JSON.parse(text) : {};
+  } catch {
+    throw new ViewerCommandError(`bb-viewer ${method} returned invalid JSON`);
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new ViewerCommandError(`bb-viewer ${method} returned an invalid response`);
+  }
+  const envelope = parsed;
+  if (envelope.error) {
+    const code = typeof envelope.error.code === "string" && envelope.error.code.trim() ? envelope.error.code.trim() : void 0;
+    const message = typeof envelope.error.message === "string" && envelope.error.message.trim() ? envelope.error.message : `bb-viewer ${method} failed`;
+    throw new ViewerCommandError(message, code);
+  }
+  if (status < 200 || status >= 300) {
+    throw new ViewerCommandError(`bb-viewer ${method} returned ${status}`);
+  }
+  if (envelope.result === void 0 || envelope.result === null) {
+    return {};
+  }
+  if (typeof envelope.result !== "object" || Array.isArray(envelope.result)) {
+    throw new ViewerCommandError(`bb-viewer ${method} returned an invalid result`);
+  }
+  return envelope.result;
+}
+
+// ts/daemon/dist/clip-runtime/browser-viewer-streamer.js
+var BB_VIEWER_HEALTH_TIMEOUT_MS = 1e4;
 var BB_VIEWER_UNANSWERED_REAP_MS = 9e4;
 var BB_VIEWER_TERM_GRACE_MS = 5e3;
 function isLoopbackBindHost(host) {
@@ -66867,7 +67030,7 @@ var BrowserViewerStreamer = class {
    * partial result. `data.input` / `data.turn` / `data.session_id` come from
    * MachineBrowserProfileViewerData.
    */
-  async handleViewerCommand(profileId, sessionId, command, input, turn) {
+  async handleViewerCommand(profileId, sessionId, command, input, turn, execution) {
     if (!profileId)
       throw new Error("browser profile id is required");
     if (command !== "stream.start" && sessionId && this.kickedSessions.get(profileId) === sessionId) {
@@ -66877,11 +67040,11 @@ var BrowserViewerStreamer = class {
       case "stream.start":
         return this.viewerStreamStart(profileId, sessionId, turn);
       case "stream.answer":
-        return this.viewerStreamAnswer(profileId, sessionId, input);
+        return this.viewerStreamAnswer(profileId, sessionId, input, execution?.deadlineUnixMs);
       case "stream.close":
         return this.viewerStreamClose(profileId, sessionId, input);
       case "stream.switch":
-        return this.viewerStreamSwitch(profileId, sessionId, input);
+        return this.viewerStreamSwitch(profileId, sessionId, input, execution?.deadlineUnixMs);
       case "kick":
         return this.viewerKick(profileId, sessionId, input);
       case "close":
@@ -66933,7 +67096,7 @@ var BrowserViewerStreamer = class {
     await this.bringTargetToFront(cdpUrl);
     const streamer = await this.spawnStreamer(profileId, sessionId, turn);
     try {
-      const result = await this.streamerCommand(streamer, "connect", { cdpUrl });
+      const result = await sendBBViewerCommand(streamer.port, "connect", { cdpUrl });
       streamer.streamedTabId = targetIdFromCdpUrl(cdpUrl);
       const reapTimer = setTimeout(() => {
         const current = this.streamers.get(profileId);
@@ -66954,14 +67117,17 @@ var BrowserViewerStreamer = class {
    * Rejects if the streamer's sessionId no longer matches (a stale viewer
    * session from a superseded stream.start).
    */
-  async viewerStreamAnswer(profileId, sessionId, input) {
+  async viewerStreamAnswer(profileId, sessionId, input, deadlineUnixMs) {
     const streamer = this.streamers.get(profileId);
     if (!streamer)
       throw new Error("no active viewer streamer for profile");
     if (streamer.sessionId !== sessionId)
       throw new Error("stale viewer session");
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "before bb-viewer answer");
     streamer.answered = true;
-    return this.streamerCommand(streamer, "answer", input ?? {});
+    const result = await sendBBViewerCommand(streamer.port, "answer", input ?? {}, deadlineUnixMs);
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "after bb-viewer answer");
+    return result;
   }
   /**
    * stream.close — best-effort stop the streamer, then kill + remove it. A
@@ -66982,7 +67148,7 @@ var BrowserViewerStreamer = class {
         return { ok: true, stale: true };
       }
       try {
-        await this.streamerCommand(streamer, "stop", {});
+        await sendBBViewerCommand(streamer.port, "stop", {});
       } catch (err) {
         this.host.log.warn(`[bb-viewer] stop command failed for ${profileId} (killing anyway): ${formatErrorForLog(err)}`);
       }
@@ -66999,7 +67165,7 @@ var BrowserViewerStreamer = class {
    * the stream.start response), so a session-less switch is by definition not
    * the current viewer.
    */
-  async viewerStreamSwitch(profileId, sessionId, input) {
+  async viewerStreamSwitch(profileId, sessionId, input, deadlineUnixMs) {
     const streamer = this.streamers.get(profileId);
     if (!streamer)
       throw new Error("no active viewer streamer for profile");
@@ -67009,9 +67175,13 @@ var BrowserViewerStreamer = class {
     if (tab === void 0 || tab === null || tab === "") {
       throw new Error("stream.switch requires input.tab");
     }
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "before resolving the switch target");
     const cdpUrl = await this.host.withDaemonRecovery(() => this.resolveAccountPageCdpUrl(profileId, tab), `viewer stream.switch ${profileId}`);
-    await this.bringTargetToFront(cdpUrl);
-    const result = await this.streamerCommand(streamer, "switch", { cdpUrl });
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "after resolving the switch target");
+    await this.bringTargetToFront(cdpUrl, deadlineUnixMs);
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "before bb-viewer switch");
+    const result = await sendBBViewerCommand(streamer.port, "switch", { cdpUrl }, deadlineUnixMs);
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "after bb-viewer switch");
     streamer.streamedTabId = targetIdFromCdpUrl(cdpUrl);
     return { ...result, streamed_tab_id: streamer.streamedTabId };
   }
@@ -67035,7 +67205,7 @@ var BrowserViewerStreamer = class {
     }
     const cdpUrl = await this.host.withDaemonRecovery(() => this.resolveAccountPageCdpUrl(profileId), `viewer close re-switch ${profileId}`);
     await this.bringTargetToFront(cdpUrl);
-    const sw = await this.streamerCommand(streamer, "switch", { cdpUrl });
+    const sw = await sendBBViewerCommand(streamer.port, "switch", { cdpUrl });
     streamer.streamedTabId = targetIdFromCdpUrl(cdpUrl);
     return { ...result, ...sw, streamed_tab_id: streamer.streamedTabId };
   }
@@ -67047,15 +67217,17 @@ var BrowserViewerStreamer = class {
    * must not block the stream. host:port + targetId are parsed from the cdpUrl
    * (`ws://host:port/devtools/page/<targetId>`) to avoid an extra /status call.
    */
-  async bringTargetToFront(cdpUrl) {
+  async bringTargetToFront(cdpUrl, deadlineUnixMs) {
     const m3 = /^ws:\/\/([^/]+)\/devtools\/page\/(.+)$/.exec(cdpUrl);
     if (!m3)
       return;
     const [, hostPort, targetId] = m3;
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "before foregrounding the switch target");
+    const timeoutMs = deadlineUnixMs === void 0 ? 5e3 : Math.max(1, Math.min(5e3, deadlineUnixMs - Date.now()));
     try {
       const resp = await fetch(`http://${hostPort}/json/activate/${targetId}`, {
         method: "GET",
-        signal: AbortSignal.timeout(5e3)
+        signal: AbortSignal.timeout(timeoutMs)
       });
       if (!resp.ok) {
         this.host.log.warn(`[bb-viewer] activate target ${targetId} returned ${resp.status} (continuing)`);
@@ -67064,6 +67236,11 @@ var BrowserViewerStreamer = class {
       this.host.log.warn(`[bb-viewer] activate target ${targetId} failed (continuing): ${formatErrorForLog(err)}`);
     }
   }
+  assertViewerExecutionDeadline(deadlineUnixMs, phase) {
+    if (deadlineUnixMs !== void 0 && Date.now() >= deadlineUnixMs) {
+      throw viewerReadinessDeadlineError(phase);
+    }
+  }
   /**
    * Forward a navigation command (tab_list/tab_new/open/reload/back/forward/
    * close) to bb-browser scoped to the profile's account. This lets the human
@@ -67264,34 +67441,6 @@ var BrowserViewerStreamer = class {
     killTimer.unref?.();
     child.once("exit", () => clearTimeout(killTimer));
   }
-  /**
-   * POST a command to the profile's bb-viewer `/command` endpoint. Parses the
-   * `{result}` / `{error:{message}}` envelope (bb-viewer api.go) and returns
-   * the inner result, throwing the error message on failure.
-   */
-  async streamerCommand(streamer, method, params) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), BB_VIEWER_COMMAND_TIMEOUT_MS);
-    try {
-      const resp = await fetch(`http://127.0.0.1:${streamer.port}/command`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ method, params }),
-        signal: controller.signal
-      });
-      const text = await resp.text();
-      const parsed = text ? JSON.parse(text) : {};
-      if (parsed.error) {
-        throw new Error(parsed.error.message || `bb-viewer ${method} failed`);
-      }
-      if (!resp.ok) {
-        throw new Error(`bb-viewer ${method} returned ${resp.status}: ${text}`);
-      }
-      return parsed.result ?? {};
-    } finally {
-      clearTimeout(timer);
-    }
-  }
   /**
    * Kill + remove the profile's bb-viewer streamer, if any. Idempotent. Also
    * clears any kick marker for the profile: a (re)kill establishes a clean
@@ -67551,8 +67700,8 @@ var BrowserProfileManager = class {
    * (browser-viewer-streamer.ts), which owns the per-profile bb-viewer
    * subprocesses and viewer tab navigation.
    */
-  async handleViewerCommand(profileId, sessionId, command, input, turn) {
-    return this.viewer.handleViewerCommand(profileId, sessionId, command, input, turn);
+  async handleViewerCommand(profileId, sessionId, command, input, turn, execution) {
+    return this.viewer.handleViewerCommand(profileId, sessionId, command, input, turn, execution);
   }
   /** Read cdpHost/cdpPort from the bb-browser daemon `GET /status`. */
   async cdpEndpoint() {
@@ -68402,6 +68551,46 @@ function errMsg(err) {
 // ts/daemon/dist/clip-runtime/clip-provider.js
 import * as http2 from "node:http2";
 
+// ts/daemon/dist/clip-runtime/browser-dependency.js
+var BROWSER_CAPABILITY_NAME = "browser";
+var BROWSER_CAPABILITY_PACKAGE = "@pinixai/bb-browser-pro";
+var BROWSER_DEPENDENCY_NAMES = /* @__PURE__ */ new Set([
+  BROWSER_CAPABILITY_NAME,
+  "@pinix/browser",
+  "@pinixai/bb-browser-pro",
+  "bb-browser"
+]);
+function isBrowserDependencyName(name) {
+  return !!name && BROWSER_DEPENDENCY_NAMES.has(name);
+}
+function browserCapabilityCommands() {
+  return [
+    { name: "eval", description: "Run JavaScript in a page context" },
+    { name: "open", description: "Open a URL in a new tab" },
+    { name: "snapshot", description: "Capture the accessibility/DOM snapshot of a page" },
+    { name: "click", description: "Click an element" },
+    { name: "type", description: "Type text into an element" }
+  ];
+}
+function manifestDeclaresBrowserDependency(manifest) {
+  return dependencyMaps(manifest).some((deps) => Object.entries(deps).some(([name, dep]) => isBrowserDependencyName(name) || isBrowserDependencyName(dep?.package)));
+}
+function manifestMapsDependencyToBrowser(manifest, dependencyName) {
+  const maps = dependencyMaps(manifest);
+  if (maps.length === 0)
+    return false;
+  for (const deps of maps) {
+    const declared = deps[dependencyName];
+    if (declared) {
+      return isBrowserDependencyName(dependencyName) || isBrowserDependencyName(declared.package);
+    }
+  }
+  return isBrowserDependencyName(dependencyName) && manifestDeclaresBrowserDependency(manifest);
+}
+function dependencyMaps(manifest) {
+  return [manifest?.dependencies, manifest?.dependencySlots].filter((deps) => !!deps);
+}
+
 // ts/daemon/dist/clip-runtime/process.js
 import { spawn as spawn4 } from "node:child_process";
 import { createInterface as createInterface2 } from "node:readline";
@@ -68658,46 +68847,6 @@ function finalizeManifest(manifest) {
   return m3;
 }
 
-// ts/daemon/dist/clip-runtime/browser-dependency.js
-var BROWSER_CAPABILITY_NAME = "browser";
-var BROWSER_CAPABILITY_PACKAGE = "@pinixai/bb-browser-pro";
-var BROWSER_DEPENDENCY_NAMES = /* @__PURE__ */ new Set([
-  BROWSER_CAPABILITY_NAME,
-  "@pinix/browser",
-  "@pinixai/bb-browser-pro",
-  "bb-browser"
-]);
-function isBrowserDependencyName(name) {
-  return !!name && BROWSER_DEPENDENCY_NAMES.has(name);
-}
-function browserCapabilityCommands() {
-  return [
-    { name: "eval", description: "Run JavaScript in a page context" },
-    { name: "open", description: "Open a URL in a new tab" },
-    { name: "snapshot", description: "Capture the accessibility/DOM snapshot of a page" },
-    { name: "click", description: "Click an element" },
-    { name: "type", description: "Type text into an element" }
-  ];
-}
-function manifestDeclaresBrowserDependency(manifest) {
-  return dependencyMaps(manifest).some((deps) => Object.entries(deps).some(([name, dep]) => isBrowserDependencyName(name) || isBrowserDependencyName(dep?.package)));
-}
-function manifestMapsDependencyToBrowser(manifest, dependencyName) {
-  const maps = dependencyMaps(manifest);
-  if (maps.length === 0)
-    return false;
-  for (const deps of maps) {
-    const declared = deps[dependencyName];
-    if (declared) {
-      return isBrowserDependencyName(dependencyName) || isBrowserDependencyName(declared.package);
-    }
-  }
-  return isBrowserDependencyName(dependencyName) && manifestDeclaresBrowserDependency(manifest);
-}
-function dependencyMaps(manifest) {
-  return [manifest?.dependencies, manifest?.dependencySlots].filter((deps) => !!deps);
-}
-
 // ts/daemon/dist/clip-runtime/process.js
 var CLIP_REGISTER_TIMEOUT_MS = 1e4;
 var CLIP_STOP_TIMEOUT_MS = 5e3;
@@ -69452,8 +69601,8 @@ var ClipProvider = class _ClipProvider {
   /**
    * Handle a hosted-browser live-viewer command relayed by clip-service over the
    * stream and reply on the same stream (design §3.4). Always answers the
-   * request/reply bridge exactly once — `{result}` on success, `{error:{message}}`
-   * on failure — and never throws into the message loop, mirroring the BYOC
+   * request/reply bridge exactly once — `{result}` on success,
+   * `{error:{code?,message}}` on failure — and never throws into the message loop, mirroring the BYOC
    * daemon's handleBrowserProfileViewer (which replies over HTTP instead).
    */
   async handleViewerCommand(cmd) {
@@ -69466,6 +69615,10 @@ var ClipProvider = class _ClipProvider {
       return;
     }
     try {
+      const dispatchDeadlineUnixMs = parseViewerDispatchDeadlineUnixMs(cmd.dispatchDeadlineUnixMs);
+      if (isViewerReadinessCommand(cmd.command) && dispatchDeadlineUnixMs === void 0) {
+        throw viewerReadinessDeadlineError("because the ProviderStream command has no authenticated deadline");
+      }
       let input;
       if (cmd.input) {
         const decoded = Buffer.from(cmd.input, "base64").toString("utf-8");
@@ -69480,13 +69633,14 @@ var ClipProvider = class _ClipProvider {
         sessionId: cmd.sessionId,
         command: cmd.command,
         input,
-        turn: cmd.turn
+        turn: cmd.turn,
+        dispatchDeadlineUnixMs
       });
       await this.sendViewerReply(requestId, { result });
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      this.opts.log.warn(`[clip-provider] viewer command failed (profile=${cmd.profileId}, command=${cmd.command}): ${message}`);
-      await this.sendViewerReply(requestId, { error: { message } }).catch(() => {
+      const failure = viewerCommandFailure(err);
+      this.opts.log.warn(`[clip-provider] viewer command failed (profile=${cmd.profileId}, command=${cmd.command}): ${failure.message}`);
+      await this.sendViewerReply(requestId, { error: failure }).catch(() => {
       });
     }
   }
@@ -69572,6 +69726,70 @@ var ClipProvider = class _ClipProvider {
   }
 };
 
+// ts/daemon/dist/clip-runtime/hosted-viewer-command-queue.js
+var HostedViewerCommandQueue = class {
+  run;
+  tail = Promise.resolve();
+  now;
+  readinessBudgetMs;
+  replyReserveMs;
+  schedule;
+  constructor(run, opts = {}) {
+    this.run = run;
+    this.now = opts.now ?? Date.now;
+    this.readinessBudgetMs = opts.readinessBudgetMs ?? HOSTED_VIEWER_READINESS_POD_BUDGET_MS;
+    this.replyReserveMs = opts.replyReserveMs ?? HOSTED_VIEWER_REPLY_RESERVE_MS;
+    this.schedule = opts.schedule ?? ((callback, delayMs) => {
+      const handle = setTimeout(callback, delayMs);
+      return {
+        cancel: () => clearTimeout(handle),
+        unref: () => handle.unref?.()
+      };
+    });
+  }
+  enqueue(command) {
+    const receivedAt = this.now();
+    const executionDeadline = this.executionDeadline(command, receivedAt);
+    const run = this.tail.catch(() => {
+    }).then(() => {
+      if (executionDeadline !== void 0 && this.now() >= executionDeadline) {
+        throw viewerReadinessDeadlineError("before hosted pod execution");
+      }
+      return this.run(command, executionDeadline);
+    });
+    this.tail = run.catch(() => {
+    });
+    if (executionDeadline === void 0) {
+      return run;
+    }
+    let timer;
+    const timeout = new Promise((_, reject) => {
+      const delay = Math.max(0, executionDeadline - this.now());
+      timer = this.schedule(() => {
+        reject(viewerReadinessDeadlineError("inside the hosted pod queue"));
+      }, delay);
+      timer.unref?.();
+    });
+    return Promise.race([run, timeout]).finally(() => {
+      timer?.cancel();
+    });
+  }
+  executionDeadline(command, receivedAt) {
+    if (!isViewerReadinessCommand(command.command)) {
+      return void 0;
+    }
+    const dispatchDeadline = command.dispatchDeadlineUnixMs;
+    if (!Number.isSafeInteger(dispatchDeadline) || dispatchDeadline === void 0) {
+      throw viewerReadinessDeadlineError("because the authenticated deadline is missing");
+    }
+    const deadline = Math.min(receivedAt + this.readinessBudgetMs, dispatchDeadline - this.replyReserveMs);
+    if (deadline <= receivedAt) {
+      throw viewerReadinessDeadlineError("before hosted pod receipt");
+    }
+    return deadline;
+  }
+};
+
 // ts/daemon/dist/clip-runtime/process-manager.js
 import * as fs3 from "node:fs";
 import * as path5 from "node:path";
@@ -70548,14 +70766,10 @@ async function preparePodRuntime(config, env, log) {
     dataDir: path6.join(config.stateDir, "clip-data"),
     browserProfileManager: browser
   });
-  let viewerChain = Promise.resolve();
-  const onViewerCommand = (cmd) => {
-    const run = viewerChain.catch(() => {
-    }).then(() => browser.handleViewerCommand(cmd.profileId, cmd.sessionId, cmd.command, cmd.input, cmd.turn));
-    viewerChain = run.catch(() => {
-    });
-    return run;
-  };
+  const viewerCommands = new HostedViewerCommandQueue((cmd, executionDeadlineUnixMs) => browser.handleViewerCommand(cmd.profileId, cmd.sessionId, cmd.command, cmd.input, cmd.turn, {
+    deadlineUnixMs: executionDeadlineUnixMs
+  }));
+  const onViewerCommand = viewerCommands.enqueue.bind(viewerCommands);
   const provider = new ClipProvider({
     serviceUrl: config.clipRpcUrl,
     authKey: config.assignmentToken,