@parall/daemon 1.50.0 → 1.51.0

package/bundle/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.50.0",
-  "built_at": "2026-07-27T10:07:52.208Z",
+  "version": "1.51.0",
+  "built_at": "2026-07-31T08:44:12.249Z",
   "min_node_version": "20.0.0",
   "files": {
     "bb-browser-daemon.js": {
@@ -16,29 +16,29 @@
       "size": 18
     },
     "parall-browser-pod.js": {
-      "sha256": "0025fc6f85af4dcfe22a6d532c322bd2bf064f83378d88c77cbcca00a469ed82",
-      "size": 2901740
+      "sha256": "3477bc46dd9589ae9d825561476d66682868e72f28742410772e5d3c338ec444",
+      "size": 2909774
     },
     "parall-channel-exec.js": {
       "sha256": "7c2a6e12483a45e9eb4a42cd7d4cdd3c4fa21dd09ac1347d9a3e177b4ddee930",
       "size": 7220
     },
     "parall-claude-agent.js": {
-      "sha256": "3786edb7e4d2dc22a95f2789416ee1fa1bf191e166d443c868cd8772a6033278",
-      "size": 2737538
+      "sha256": "6149ebdea186cc5de0cf5ec409e961c91846bc81285afb35dad0196ed1283f8c",
+      "size": 2738978
     },
     "parall-codex-agent.js": {
-      "sha256": "ba13d01de7a89860d75bbc1abd5ea5c9c605cc9104161a8d7960c38f84f7870c",
-      "size": 2779278
+      "sha256": "dca73a7a445dab6be819f700f36676a9724165858d619eca93774b463db06738",
+      "size": 2780718
     },
     "parall-daemon.js": {
-      "sha256": "a135d16586ea01a0ed3aa811dac509827efc76d2eb14de6430e1421590afc70e",
-      "size": 2963977
+      "sha256": "519f67858bfb9ce09f0d8c76d3e7c0e5e7082f528f9a3a361a14581bb689e904",
+      "size": 2970452
     },
     "parall-openclaw-agent.js": {
       "sha256": "856a1c3a9ae0ffef8efe2481fa1171dbeb1d67cccb88616aa9bf16da96a69355",
       "size": 9923
     }
   },
-  "signature": "KflWD7Xe1CWN7YZuBW3BTXirw4TfZITSwiKrRO+SU/OXNfXf3IC0nm4OWsR5zHb9J+y8cmqzpK2Zz8vXXSgwDw=="
+  "signature": "dHFmMEI+U+2KrQRTHUsEjaN6eQoqTZ9R5ObammDEo8/UXAdfq9jKx9QpoMmYpme62i8wDHgy5XIeV2qiT+V0Dg=="
 }

package/bundle/parall-browser-pod.js

@@ -63495,6 +63495,17 @@ function clearAllProviderCreds(env) {
   delete env.PRLL_CLAUDE_ALLOW_API_KEY;
 }
 
+// ts/sdk/dist/browser-viewer.js
+var BROWSER_VIEWER_READINESS_TIMEOUT_MS = 6e4;
+function browserViewerRequestOptions(command, opts) {
+  if (command !== "stream.answer" && command !== "stream.switch")
+    return opts;
+  return {
+    ...opts,
+    timeoutMs: Math.max(opts?.timeoutMs ?? 0, BROWSER_VIEWER_READINESS_TIMEOUT_MS)
+  };
+}
+
 // ts/sdk/dist/constants.js
 var API_BASE = "/api/v1";
 var WIKI_BASE = "/wiki/v1";
@@ -63823,6 +63834,9 @@ var ENDPOINTS = {
   TEMPLATE: (orgId, templateId) => `${API_BASE}/orgs/${orgId}/templates/${templateId}`,
   TEMPLATE_DEPLOYMENTS: (orgId) => `${API_BASE}/orgs/${orgId}/template-deployments`,
   TEMPLATE_DEPLOYMENT: (orgId, deploymentId) => `${API_BASE}/orgs/${orgId}/template-deployments/${deploymentId}`,
+  CLIP_DEPENDENCIES_CHECK: (orgId) => `${API_BASE}/orgs/${orgId}/clip-dependencies/check`,
+  // Onboarding wizard progress (org-scoped, self)
+  ONBOARDING_PROGRESS: (orgId) => `${API_BASE}/orgs/${orgId}/onboarding`,
   // Billing & Credits (org-scoped)
   BILLING: (orgId) => `${API_BASE}/orgs/${orgId}/billing`,
   BILLING_TRANSACTIONS: (orgId) => `${API_BASE}/orgs/${orgId}/billing/transactions`,
@@ -64291,8 +64305,10 @@ var ParallClient = class _ParallClient {
       q2.limit = String(params.limit);
     return this.request("GET", ENDPOINTS.ORG_MEMBER_CHATS(orgId, memberId), void 0, q2);
   }
-  // Pending tasks (todo + in_progress) assigned to a member. Powers both
-  // member profile Activity and the agent startup catch-up flow.
+  // Pending tasks (todo + in_progress) assigned to a member. On-demand listing
+  // (member profile Activity; agents via `parall tasks`) — startup catch-up
+  // runs on dispatch redrive, not this endpoint. Self-assigned tasks appear
+  // here without any dispatch WorkItem (self-assign is deliberately silent).
   async getMemberTasks(orgId, memberId, params) {
     const q2 = {};
     if (params?.cursor)
@@ -64634,7 +64650,12 @@ var ParallClient = class _ParallClient {
   async getAgentRuntimeRelease(orgId, agentId, tag2) {
     return this.request("GET", ENDPOINTS.AGENT_RUNTIME_RELEASE(orgId, agentId, tag2));
   }
-  /** Fetch all pending tasks (todo/in_progress) assigned to an agent. Pages automatically. */
+  /**
+   * Fetch all pending tasks (todo/in_progress) assigned to an agent. Pages
+   * automatically. On-demand listing only — not a dispatch source: startup
+   * catch-up runs on dispatch redrive, and self-assigned tasks listed here
+   * deliberately have no WorkItem behind them.
+   */
   async getAgentTasks(orgId, agentId) {
     const all = [];
     let cursor2;
@@ -64838,11 +64859,7 @@ var ParallClient = class _ParallClient {
   async postBrowseResponse(requestId, response) {
     return this.request("POST", ENDPOINTS.MACHINES_ME_BROWSE_RESPONSE(requestId), response);
   }
-  /**
-   * `POST /machines/me/browser-profiles/viewer-response/{requestId}` — daemon
-   * reply to a `machine.browser_profile.viewer` control command. Wakes the
-   * api-server request/reply bridge (mirrors {@link postBrowseResponse}).
-   */
+  /** Reply to `machine.browser_profile.viewer` and wake its request/reply bridge. */
   async postBrowserProfileViewerResponse(requestId, response) {
     return this.request("POST", ENDPOINTS.MACHINES_ME_BROWSER_PROFILE_VIEWER_RESPONSE(requestId), response);
   }
@@ -64852,7 +64869,7 @@ var ParallClient = class _ParallClient {
    * owner or org admin. api-server brokers the command to the host daemon.
    */
   async browserViewerCommand(orgId, profileId, req, opts) {
-    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, opts);
+    return this.request("POST", ENDPOINTS.BROWSER_PROFILE_VIEWER_COMMAND(orgId, profileId), req, void 0, false, browserViewerRequestOptions(req.command, opts));
   }
   /**
    * Drive the Cloud Edge live viewer (V1b, design §6): WebRTC signaling + input +
@@ -65640,6 +65657,19 @@ var ParallClient = class _ParallClient {
   async getTemplateDeployment(orgId, deploymentId) {
     return this.request("GET", ENDPOINTS.TEMPLATE_DEPLOYMENT(orgId, deploymentId));
   }
+  /** Pre-deploy dependency connection state (wizard S3). Live answer, no
+   *  cache — poll it the way getTemplateDeployment is polled. */
+  async checkClipDependencies(orgId, refs) {
+    const response = await this.request("POST", ENDPOINTS.CLIP_DEPENDENCIES_CHECK(orgId), { refs });
+    return response.results ?? [];
+  }
+  // ---- Onboarding wizard progress (org-scoped, self) ----
+  async getOnboardingProgress(orgId) {
+    return this.request("GET", ENDPOINTS.ONBOARDING_PROGRESS(orgId));
+  }
+  async updateOnboardingProgress(orgId, request) {
+    return this.request("PATCH", ENDPOINTS.ONBOARDING_PROGRESS(orgId), request);
+  }
   // ---- Billing & Credits (org-scoped) ----
   async getBilling(orgId) {
     return this.request("GET", ENDPOINTS.BILLING(orgId));
@@ -66880,8 +66910,113 @@ function comparableUrl(url) {
 
 // ts/daemon/dist/clip-runtime/browser-viewer-streamer.js
 import { spawn } from "node:child_process";
-var BB_VIEWER_HEALTH_TIMEOUT_MS = 1e4;
+
+// ts/daemon/dist/clip-runtime/viewer-command-error.js
+var ViewerCommandError = class extends Error {
+  code;
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+    this.name = "ViewerCommandError";
+  }
+};
+function viewerCommandFailure(error2) {
+  const message = error2 instanceof Error ? error2.message : String(error2);
+  if (error2 instanceof ViewerCommandError && error2.code) {
+    return { code: error2.code, message };
+  }
+  return { message };
+}
+
+// ts/daemon/dist/clip-runtime/viewer-command-deadline.js
+var HOSTED_VIEWER_READINESS_POD_BUDGET_MS = 3e4;
+var HOSTED_VIEWER_REPLY_RESERVE_MS = 5e3;
+function isViewerReadinessCommand(command) {
+  return command === "stream.answer" || command === "stream.switch";
+}
+function parseViewerDispatchDeadlineUnixMs(value) {
+  let parsed;
+  if (typeof value === "number") {
+    parsed = value;
+  } else if (typeof value === "string" && /^[1-9]\d*$/.test(value)) {
+    parsed = Number(value);
+  } else {
+    return void 0;
+  }
+  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : void 0;
+}
+function viewerReadinessDeadlineError(phase) {
+  return new ViewerCommandError(`viewer readiness deadline elapsed ${phase}`, "VIEWER_STREAM_CANCELLED");
+}
+
+// ts/daemon/dist/clip-runtime/bb-viewer-command-client.js
 var BB_VIEWER_COMMAND_TIMEOUT_MS = 15e3;
+var BB_VIEWER_READINESS_COMMAND_TIMEOUT_MS = 3e4;
+function bbViewerCommandTimeoutMs(method) {
+  return method === "answer" || method === "switch" ? BB_VIEWER_READINESS_COMMAND_TIMEOUT_MS : BB_VIEWER_COMMAND_TIMEOUT_MS;
+}
+function bbViewerCommandEffectiveTimeoutMs(method, deadlineUnixMs, now = Date.now()) {
+  const configured = bbViewerCommandTimeoutMs(method);
+  if (deadlineUnixMs === void 0)
+    return configured;
+  const remaining = deadlineUnixMs - now;
+  if (remaining <= 0) {
+    throw viewerReadinessDeadlineError(`before bb-viewer ${method}`);
+  }
+  return Math.max(1, Math.min(configured, remaining));
+}
+async function sendBBViewerCommand(port, method, params, deadlineUnixMs) {
+  const controller = new AbortController();
+  const timeoutMs = bbViewerCommandEffectiveTimeoutMs(method, deadlineUnixMs);
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const resp = await fetch(`http://127.0.0.1:${port}/command`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ method, params }),
+      signal: controller.signal
+    });
+    const text = await resp.text();
+    return parseBBViewerCommandResponse(resp.status, text, method);
+  } catch (err) {
+    if (controller.signal.aborted && (method === "answer" || method === "switch")) {
+      throw viewerReadinessDeadlineError(`while waiting for bb-viewer ${method}`);
+    }
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function parseBBViewerCommandResponse(status, text, method) {
+  let parsed;
+  try {
+    parsed = text ? JSON.parse(text) : {};
+  } catch {
+    throw new ViewerCommandError(`bb-viewer ${method} returned invalid JSON`);
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new ViewerCommandError(`bb-viewer ${method} returned an invalid response`);
+  }
+  const envelope = parsed;
+  if (envelope.error) {
+    const code = typeof envelope.error.code === "string" && envelope.error.code.trim() ? envelope.error.code.trim() : void 0;
+    const message = typeof envelope.error.message === "string" && envelope.error.message.trim() ? envelope.error.message : `bb-viewer ${method} failed`;
+    throw new ViewerCommandError(message, code);
+  }
+  if (status < 200 || status >= 300) {
+    throw new ViewerCommandError(`bb-viewer ${method} returned ${status}`);
+  }
+  if (envelope.result === void 0 || envelope.result === null) {
+    return {};
+  }
+  if (typeof envelope.result !== "object" || Array.isArray(envelope.result)) {
+    throw new ViewerCommandError(`bb-viewer ${method} returned an invalid result`);
+  }
+  return envelope.result;
+}
+
+// ts/daemon/dist/clip-runtime/browser-viewer-streamer.js
+var BB_VIEWER_HEALTH_TIMEOUT_MS = 1e4;
 var BB_VIEWER_UNANSWERED_REAP_MS = 9e4;
 var BB_VIEWER_TERM_GRACE_MS = 5e3;
 function isLoopbackBindHost(host) {
@@ -66918,7 +67053,7 @@ var BrowserViewerStreamer = class {
    * partial result. `data.input` / `data.turn` / `data.session_id` come from
    * MachineBrowserProfileViewerData.
    */
-  async handleViewerCommand(profileId, sessionId, command, input, turn) {
+  async handleViewerCommand(profileId, sessionId, command, input, turn, execution) {
     if (!profileId)
       throw new Error("browser profile id is required");
     if (command !== "stream.start" && sessionId && this.kickedSessions.get(profileId) === sessionId) {
@@ -66928,11 +67063,11 @@ var BrowserViewerStreamer = class {
       case "stream.start":
         return this.viewerStreamStart(profileId, sessionId, turn);
       case "stream.answer":
-        return this.viewerStreamAnswer(profileId, sessionId, input);
+        return this.viewerStreamAnswer(profileId, sessionId, input, execution?.deadlineUnixMs);
       case "stream.close":
         return this.viewerStreamClose(profileId, sessionId, input);
       case "stream.switch":
-        return this.viewerStreamSwitch(profileId, sessionId, input);
+        return this.viewerStreamSwitch(profileId, sessionId, input, execution?.deadlineUnixMs);
       case "kick":
         return this.viewerKick(profileId, sessionId, input);
       case "close":
@@ -66984,7 +67119,7 @@ var BrowserViewerStreamer = class {
     await this.bringTargetToFront(cdpUrl);
     const streamer = await this.spawnStreamer(profileId, sessionId, turn);
     try {
-      const result = await this.streamerCommand(streamer, "connect", { cdpUrl });
+      const result = await sendBBViewerCommand(streamer.port, "connect", { cdpUrl });
       streamer.streamedTabId = targetIdFromCdpUrl(cdpUrl);
       const reapTimer = setTimeout(() => {
         const current = this.streamers.get(profileId);
@@ -67005,14 +67140,17 @@ var BrowserViewerStreamer = class {
    * Rejects if the streamer's sessionId no longer matches (a stale viewer
    * session from a superseded stream.start).
    */
-  async viewerStreamAnswer(profileId, sessionId, input) {
+  async viewerStreamAnswer(profileId, sessionId, input, deadlineUnixMs) {
     const streamer = this.streamers.get(profileId);
     if (!streamer)
       throw new Error("no active viewer streamer for profile");
     if (streamer.sessionId !== sessionId)
       throw new Error("stale viewer session");
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "before bb-viewer answer");
     streamer.answered = true;
-    return this.streamerCommand(streamer, "answer", input ?? {});
+    const result = await sendBBViewerCommand(streamer.port, "answer", input ?? {}, deadlineUnixMs);
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "after bb-viewer answer");
+    return result;
   }
   /**
    * stream.close — best-effort stop the streamer, then kill + remove it. A
@@ -67033,7 +67171,7 @@ var BrowserViewerStreamer = class {
         return { ok: true, stale: true };
       }
       try {
-        await this.streamerCommand(streamer, "stop", {});
+        await sendBBViewerCommand(streamer.port, "stop", {});
       } catch (err) {
         this.host.log.warn(`[bb-viewer] stop command failed for ${profileId} (killing anyway): ${formatErrorForLog(err)}`);
       }
@@ -67050,7 +67188,7 @@ var BrowserViewerStreamer = class {
    * the stream.start response), so a session-less switch is by definition not
    * the current viewer.
    */
-  async viewerStreamSwitch(profileId, sessionId, input) {
+  async viewerStreamSwitch(profileId, sessionId, input, deadlineUnixMs) {
     const streamer = this.streamers.get(profileId);
     if (!streamer)
       throw new Error("no active viewer streamer for profile");
@@ -67060,9 +67198,13 @@ var BrowserViewerStreamer = class {
     if (tab === void 0 || tab === null || tab === "") {
       throw new Error("stream.switch requires input.tab");
     }
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "before resolving the switch target");
     const cdpUrl = await this.host.withDaemonRecovery(() => this.resolveAccountPageCdpUrl(profileId, tab), `viewer stream.switch ${profileId}`);
-    await this.bringTargetToFront(cdpUrl);
-    const result = await this.streamerCommand(streamer, "switch", { cdpUrl });
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "after resolving the switch target");
+    await this.bringTargetToFront(cdpUrl, deadlineUnixMs);
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "before bb-viewer switch");
+    const result = await sendBBViewerCommand(streamer.port, "switch", { cdpUrl }, deadlineUnixMs);
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "after bb-viewer switch");
     streamer.streamedTabId = targetIdFromCdpUrl(cdpUrl);
     return { ...result, streamed_tab_id: streamer.streamedTabId };
   }
@@ -67086,7 +67228,7 @@ var BrowserViewerStreamer = class {
     }
     const cdpUrl = await this.host.withDaemonRecovery(() => this.resolveAccountPageCdpUrl(profileId), `viewer close re-switch ${profileId}`);
     await this.bringTargetToFront(cdpUrl);
-    const sw = await this.streamerCommand(streamer, "switch", { cdpUrl });
+    const sw = await sendBBViewerCommand(streamer.port, "switch", { cdpUrl });
     streamer.streamedTabId = targetIdFromCdpUrl(cdpUrl);
     return { ...result, ...sw, streamed_tab_id: streamer.streamedTabId };
   }
@@ -67098,15 +67240,17 @@ var BrowserViewerStreamer = class {
    * must not block the stream. host:port + targetId are parsed from the cdpUrl
    * (`ws://host:port/devtools/page/<targetId>`) to avoid an extra /status call.
    */
-  async bringTargetToFront(cdpUrl) {
+  async bringTargetToFront(cdpUrl, deadlineUnixMs) {
     const m3 = /^ws:\/\/([^/]+)\/devtools\/page\/(.+)$/.exec(cdpUrl);
     if (!m3)
       return;
     const [, hostPort, targetId] = m3;
+    this.assertViewerExecutionDeadline(deadlineUnixMs, "before foregrounding the switch target");
+    const timeoutMs = deadlineUnixMs === void 0 ? 5e3 : Math.max(1, Math.min(5e3, deadlineUnixMs - Date.now()));
     try {
       const resp = await fetch(`http://${hostPort}/json/activate/${targetId}`, {
         method: "GET",
-        signal: AbortSignal.timeout(5e3)
+        signal: AbortSignal.timeout(timeoutMs)
       });
       if (!resp.ok) {
         this.host.log.warn(`[bb-viewer] activate target ${targetId} returned ${resp.status} (continuing)`);
@@ -67115,6 +67259,11 @@ var BrowserViewerStreamer = class {
       this.host.log.warn(`[bb-viewer] activate target ${targetId} failed (continuing): ${formatErrorForLog(err)}`);
     }
   }
+  assertViewerExecutionDeadline(deadlineUnixMs, phase) {
+    if (deadlineUnixMs !== void 0 && Date.now() >= deadlineUnixMs) {
+      throw viewerReadinessDeadlineError(phase);
+    }
+  }
   /**
    * Forward a navigation command (tab_list/tab_new/open/reload/back/forward/
    * close) to bb-browser scoped to the profile's account. This lets the human
@@ -67315,34 +67464,6 @@ var BrowserViewerStreamer = class {
     killTimer.unref?.();
     child.once("exit", () => clearTimeout(killTimer));
   }
-  /**
-   * POST a command to the profile's bb-viewer `/command` endpoint. Parses the
-   * `{result}` / `{error:{message}}` envelope (bb-viewer api.go) and returns
-   * the inner result, throwing the error message on failure.
-   */
-  async streamerCommand(streamer, method, params) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), BB_VIEWER_COMMAND_TIMEOUT_MS);
-    try {
-      const resp = await fetch(`http://127.0.0.1:${streamer.port}/command`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ method, params }),
-        signal: controller.signal
-      });
-      const text = await resp.text();
-      const parsed = text ? JSON.parse(text) : {};
-      if (parsed.error) {
-        throw new Error(parsed.error.message || `bb-viewer ${method} failed`);
-      }
-      if (!resp.ok) {
-        throw new Error(`bb-viewer ${method} returned ${resp.status}: ${text}`);
-      }
-      return parsed.result ?? {};
-    } finally {
-      clearTimeout(timer);
-    }
-  }
   /**
    * Kill + remove the profile's bb-viewer streamer, if any. Idempotent. Also
    * clears any kick marker for the profile: a (re)kill establishes a clean
@@ -67602,8 +67723,8 @@ var BrowserProfileManager = class {
    * (browser-viewer-streamer.ts), which owns the per-profile bb-viewer
    * subprocesses and viewer tab navigation.
    */
-  async handleViewerCommand(profileId, sessionId, command, input, turn) {
-    return this.viewer.handleViewerCommand(profileId, sessionId, command, input, turn);
+  async handleViewerCommand(profileId, sessionId, command, input, turn, execution) {
+    return this.viewer.handleViewerCommand(profileId, sessionId, command, input, turn, execution);
   }
   /** Read cdpHost/cdpPort from the bb-browser daemon `GET /status`. */
   async cdpEndpoint() {
@@ -68453,6 +68574,46 @@ function errMsg(err) {
 // ts/daemon/dist/clip-runtime/clip-provider.js
 import * as http2 from "node:http2";
 
+// ts/daemon/dist/clip-runtime/browser-dependency.js
+var BROWSER_CAPABILITY_NAME = "browser";
+var BROWSER_CAPABILITY_PACKAGE = "@pinixai/bb-browser-pro";
+var BROWSER_DEPENDENCY_NAMES = /* @__PURE__ */ new Set([
+  BROWSER_CAPABILITY_NAME,
+  "@pinix/browser",
+  "@pinixai/bb-browser-pro",
+  "bb-browser"
+]);
+function isBrowserDependencyName(name) {
+  return !!name && BROWSER_DEPENDENCY_NAMES.has(name);
+}
+function browserCapabilityCommands() {
+  return [
+    { name: "eval", description: "Run JavaScript in a page context" },
+    { name: "open", description: "Open a URL in a new tab" },
+    { name: "snapshot", description: "Capture the accessibility/DOM snapshot of a page" },
+    { name: "click", description: "Click an element" },
+    { name: "type", description: "Type text into an element" }
+  ];
+}
+function manifestDeclaresBrowserDependency(manifest) {
+  return dependencyMaps(manifest).some((deps) => Object.entries(deps).some(([name, dep]) => isBrowserDependencyName(name) || isBrowserDependencyName(dep?.package)));
+}
+function manifestMapsDependencyToBrowser(manifest, dependencyName) {
+  const maps = dependencyMaps(manifest);
+  if (maps.length === 0)
+    return false;
+  for (const deps of maps) {
+    const declared = deps[dependencyName];
+    if (declared) {
+      return isBrowserDependencyName(dependencyName) || isBrowserDependencyName(declared.package);
+    }
+  }
+  return isBrowserDependencyName(dependencyName) && manifestDeclaresBrowserDependency(manifest);
+}
+function dependencyMaps(manifest) {
+  return [manifest?.dependencies, manifest?.dependencySlots].filter((deps) => !!deps);
+}
+
 // ts/daemon/dist/clip-runtime/process.js
 import { spawn as spawn4 } from "node:child_process";
 import { createInterface as createInterface2 } from "node:readline";
@@ -68709,46 +68870,6 @@ function finalizeManifest(manifest) {
   return m3;
 }
 
-// ts/daemon/dist/clip-runtime/browser-dependency.js
-var BROWSER_CAPABILITY_NAME = "browser";
-var BROWSER_CAPABILITY_PACKAGE = "@pinixai/bb-browser-pro";
-var BROWSER_DEPENDENCY_NAMES = /* @__PURE__ */ new Set([
-  BROWSER_CAPABILITY_NAME,
-  "@pinix/browser",
-  "@pinixai/bb-browser-pro",
-  "bb-browser"
-]);
-function isBrowserDependencyName(name) {
-  return !!name && BROWSER_DEPENDENCY_NAMES.has(name);
-}
-function browserCapabilityCommands() {
-  return [
-    { name: "eval", description: "Run JavaScript in a page context" },
-    { name: "open", description: "Open a URL in a new tab" },
-    { name: "snapshot", description: "Capture the accessibility/DOM snapshot of a page" },
-    { name: "click", description: "Click an element" },
-    { name: "type", description: "Type text into an element" }
-  ];
-}
-function manifestDeclaresBrowserDependency(manifest) {
-  return dependencyMaps(manifest).some((deps) => Object.entries(deps).some(([name, dep]) => isBrowserDependencyName(name) || isBrowserDependencyName(dep?.package)));
-}
-function manifestMapsDependencyToBrowser(manifest, dependencyName) {
-  const maps = dependencyMaps(manifest);
-  if (maps.length === 0)
-    return false;
-  for (const deps of maps) {
-    const declared = deps[dependencyName];
-    if (declared) {
-      return isBrowserDependencyName(dependencyName) || isBrowserDependencyName(declared.package);
-    }
-  }
-  return isBrowserDependencyName(dependencyName) && manifestDeclaresBrowserDependency(manifest);
-}
-function dependencyMaps(manifest) {
-  return [manifest?.dependencies, manifest?.dependencySlots].filter((deps) => !!deps);
-}
-
 // ts/daemon/dist/clip-runtime/process.js
 var CLIP_REGISTER_TIMEOUT_MS = 1e4;
 var CLIP_STOP_TIMEOUT_MS = 5e3;
@@ -69503,8 +69624,8 @@ var ClipProvider = class _ClipProvider {
   /**
    * Handle a hosted-browser live-viewer command relayed by clip-service over the
    * stream and reply on the same stream (design §3.4). Always answers the
-   * request/reply bridge exactly once — `{result}` on success, `{error:{message}}`
-   * on failure — and never throws into the message loop, mirroring the BYOC
+   * request/reply bridge exactly once — `{result}` on success,
+   * `{error:{code?,message}}` on failure — and never throws into the message loop, mirroring the BYOC
    * daemon's handleBrowserProfileViewer (which replies over HTTP instead).
    */
   async handleViewerCommand(cmd) {
@@ -69517,6 +69638,10 @@ var ClipProvider = class _ClipProvider {
       return;
     }
     try {
+      const dispatchDeadlineUnixMs = parseViewerDispatchDeadlineUnixMs(cmd.dispatchDeadlineUnixMs);
+      if (isViewerReadinessCommand(cmd.command) && dispatchDeadlineUnixMs === void 0) {
+        throw viewerReadinessDeadlineError("because the ProviderStream command has no authenticated deadline");
+      }
       let input;
       if (cmd.input) {
         const decoded = Buffer.from(cmd.input, "base64").toString("utf-8");
@@ -69531,13 +69656,14 @@ var ClipProvider = class _ClipProvider {
         sessionId: cmd.sessionId,
         command: cmd.command,
         input,
-        turn: cmd.turn
+        turn: cmd.turn,
+        dispatchDeadlineUnixMs
       });
       await this.sendViewerReply(requestId, { result });
     } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      this.opts.log.warn(`[clip-provider] viewer command failed (profile=${cmd.profileId}, command=${cmd.command}): ${message}`);
-      await this.sendViewerReply(requestId, { error: { message } }).catch(() => {
+      const failure = viewerCommandFailure(err);
+      this.opts.log.warn(`[clip-provider] viewer command failed (profile=${cmd.profileId}, command=${cmd.command}): ${failure.message}`);
+      await this.sendViewerReply(requestId, { error: failure }).catch(() => {
       });
     }
   }
@@ -69623,6 +69749,70 @@ var ClipProvider = class _ClipProvider {
   }
 };
 
+// ts/daemon/dist/clip-runtime/hosted-viewer-command-queue.js
+var HostedViewerCommandQueue = class {
+  run;
+  tail = Promise.resolve();
+  now;
+  readinessBudgetMs;
+  replyReserveMs;
+  schedule;
+  constructor(run, opts = {}) {
+    this.run = run;
+    this.now = opts.now ?? Date.now;
+    this.readinessBudgetMs = opts.readinessBudgetMs ?? HOSTED_VIEWER_READINESS_POD_BUDGET_MS;
+    this.replyReserveMs = opts.replyReserveMs ?? HOSTED_VIEWER_REPLY_RESERVE_MS;
+    this.schedule = opts.schedule ?? ((callback, delayMs) => {
+      const handle = setTimeout(callback, delayMs);
+      return {
+        cancel: () => clearTimeout(handle),
+        unref: () => handle.unref?.()
+      };
+    });
+  }
+  enqueue(command) {
+    const receivedAt = this.now();
+    const executionDeadline = this.executionDeadline(command, receivedAt);
+    const run = this.tail.catch(() => {
+    }).then(() => {
+      if (executionDeadline !== void 0 && this.now() >= executionDeadline) {
+        throw viewerReadinessDeadlineError("before hosted pod execution");
+      }
+      return this.run(command, executionDeadline);
+    });
+    this.tail = run.catch(() => {
+    });
+    if (executionDeadline === void 0) {
+      return run;
+    }
+    let timer;
+    const timeout = new Promise((_, reject) => {
+      const delay = Math.max(0, executionDeadline - this.now());
+      timer = this.schedule(() => {
+        reject(viewerReadinessDeadlineError("inside the hosted pod queue"));
+      }, delay);
+      timer.unref?.();
+    });
+    return Promise.race([run, timeout]).finally(() => {
+      timer?.cancel();
+    });
+  }
+  executionDeadline(command, receivedAt) {
+    if (!isViewerReadinessCommand(command.command)) {
+      return void 0;
+    }
+    const dispatchDeadline = command.dispatchDeadlineUnixMs;
+    if (!Number.isSafeInteger(dispatchDeadline) || dispatchDeadline === void 0) {
+      throw viewerReadinessDeadlineError("because the authenticated deadline is missing");
+    }
+    const deadline = Math.min(receivedAt + this.readinessBudgetMs, dispatchDeadline - this.replyReserveMs);
+    if (deadline <= receivedAt) {
+      throw viewerReadinessDeadlineError("before hosted pod receipt");
+    }
+    return deadline;
+  }
+};
+
 // ts/daemon/dist/clip-runtime/process-manager.js
 import * as fs3 from "node:fs";
 import * as path5 from "node:path";
@@ -70599,14 +70789,10 @@ async function preparePodRuntime(config, env, log) {
     dataDir: path6.join(config.stateDir, "clip-data"),
     browserProfileManager: browser
   });
-  let viewerChain = Promise.resolve();
-  const onViewerCommand = (cmd) => {
-    const run = viewerChain.catch(() => {
-    }).then(() => browser.handleViewerCommand(cmd.profileId, cmd.sessionId, cmd.command, cmd.input, cmd.turn));
-    viewerChain = run.catch(() => {
-    });
-    return run;
-  };
+  const viewerCommands = new HostedViewerCommandQueue((cmd, executionDeadlineUnixMs) => browser.handleViewerCommand(cmd.profileId, cmd.sessionId, cmd.command, cmd.input, cmd.turn, {
+    deadlineUnixMs: executionDeadlineUnixMs
+  }));
+  const onViewerCommand = viewerCommands.enqueue.bind(viewerCommands);
   const provider = new ClipProvider({
     serviceUrl: config.clipRpcUrl,
     authKey: config.assignmentToken,