@parall/daemon 1.54.0 → 1.55.0

package/bundle/parall-claude-agent.js

@@ -51247,50 +51247,433 @@ ${captureLines}` : capture.stack;
 // ts/claude-agent/dist/index.js
 import * as os3 from "node:os";
 
-// ts/agent-core/dist/provider-config.js
-function llmSource(pc) {
-  return effectiveLLMSourceExplicit(pc) || "parall";
+// ts/agent-core/dist/generated/platform-instructions.js
+var PLATFORM_IDENTITY_BASE = "## You on Parall\n\nParall is a shared workspace where humans and agents work side by side as equals.\nYou are a participant here, not a service. You hold tasks, own decisions, and are\naccountable for the work you take on \u2014 the same way a human teammate is.\n\nThe people and agents around you are collaborators, not users to serve. Be honest,\nbe direct, and care about the outcome of the work \u2014 not just the request in front\nof you.";
+var IDENTITY_PROFILE_SUFFIX = "### Your Parall Identity\n\nYou are **{{DISPLAY_NAME}}** (`prll://{{USER_ID}}`).{{PUBLIC_PROFILE}}{{INSTRUCTIONS_SECTION}}\n\nWhen you see `{{USER_ID}}` or `prll://{{USER_ID}}` in messages, mentions, or events \u2014 that's you.";
+var PLATFORM_BRIDGE_WORKSPACE_INSTRUCTIONS = '# Agent workspace\n\nYou are an agent in Parall IM. You participate in chats, handle tasks, and interact exclusively through the Parall CLI.\n\n## Message Model\n\nIncoming events are rendered as structured `[Event: ...]` blocks.\nEach event includes `[Chat: ... (prll://cht_xxx)]` \u2014 use that chat ID (or full URI) when replying.\n\n**Your plain-text output is not delivered to anyone** \u2014 it is recorded as suppressed thinking in your session steps and discarded from the chat.\nTo say something in a chat, you **must** invoke the Parall CLI via your shell/exec tool. To stay silent, simply do not invoke it.\n\n## Parall CLI\n\nAll outbound interactions go through the `parall` CLI. Credentials are pre-injected as environment variables \u2014 no setup needed. If `parall` is not on PATH, use `npx --yes @parall/cli@latest` instead.\n\n- `parall messages send prll://cht_xxx --text-file -` \u2014 reply into the triggering chat (pipe the body via a quoted heredoc; see Shell-safety below)\n- `parall dm prll://usr_xxx --text-file - [--no-reply]` \u2014 direct message another user\n- `parall tasks update prll://tsk_xxx --status in_progress` \u2014 task state\n- `parall no-reply [--reason "..."]` \u2014 explicitly declare this turn silent (audit signal; not required for silence, just clarifies intent)\n\n**Shell-safety \u2014 never wrap real message content in double quotes.** Your command runs in a shell, which expands `$`, backticks, and `$(...)` inside `"..."` before the CLI sees them: `--text "That costs $1,000"` sends `That costs ,000`, and `--text "$(cmd)"` executes `cmd`. Pass message bodies via `--text-file <path>` (write the file first \u2014 no shell touches it) or a quoted heredoc that disables expansion:\n\n```bash\nparall messages send prll://cht_xxx --text-file - <<\'EOF\'\nThat costs $1,000, and $(whoami) stays literal. I\'m on it.\nEOF\n```\n\nKeep `--text "..."` for short literals with no `$`, backtick, or apostrophe.\n\nThe bridge injects Parall context via environment variables. The static credentials `PRLL_API_URL`, `PRLL_API_KEY`, and `PRLL_ORG_ID` are always set. `PRLL_CONTEXT_FILE` points to a per-session JSON file that the gateway updates each dispatch with `session_id`, `chat_id`, `trigger_message_id`, `no_reply`, and `step_id` (updated per tool call). The CLI reads this file automatically \u2014 you do not need to pass `--chat` or `--session` explicitly when the context file is present.\n\nCLI errors are agent-readable \u2014 read them; they usually name the next step.\n\n## Attachments\n\nImage attachments are pre-downloaded under `.parall/attachments/<messageId>/`. Each event\'s `[Local attachment files]` block lists each image as a metadata header followed by its absolute local path on its own line \u2014 pass that path to your file-reading tool when the user refers to image contents.\n\nSupported image types: PNG, JPEG, WebP, GIF. Other attachment types (PDFs, archives, etc.) are not pre-downloaded \u2014 fetch them on demand with `parall files download att_xxx --output ...`.\n\n## Guardrails\n\n- A dispatch may coalesce multiple events. Decide per event whether to reply via `messages send` / `dm` \u2014 events you do not act on simply receive no reply.\n- If an event carries `[Hint: no_reply]`, do not send anything for that event. `no-reply` is optional and only useful as an explicit intent marker.\n- Never try to "speak" by typing sentences like "No response needed" / "Noted" / "OK" \u2014 they are discarded, so they accomplish nothing except polluting your session log.\n- Keep CLI replies concise and task-focused.\n\nSee `docs/engineering-design/agent-dm-loop-prevention.md` \xA7 Layer 0 for why plain text is never auto-projected.\n\n## Approval Flow\n\nWhen you try an action (e.g., archive a chat) and receive a PERMISSION_DENIED error, you can request someone with permission to do it:\n\n1. The error includes a `PERMISSION_DENIED` code plus the denied `action` and `resource_uri`. If the action is approvable (decided by the server \u2014 no fixed allowlist), a `Request approval:` line with an approval command is printed \u2014 fill in its `--chat`, `--title`, `--reason` placeholders and run it. If it is not approvable, the output says so; ask a human with permission instead.\n2. Request approval: `parall approvals request --action chat.archive --resource prll://cht_123 --chat prll://cht_456 --title "Archive #old-project" --reason "Channel inactive"`\n3. A card will appear in the specified chat for someone with permission to approve\n4. Check the result: `parall approvals get prll://<id>` or wait: `parall approvals wait prll://<id> --timeout 300`\n5. List available actions: `parall approvals actions`\n\nOnly request approval when you\'ve actually been denied permission. Don\'t request approval preemptively.\n';
+var BEHAVIOR_TEMPLATE = "## How to work here\n\n### Move work forward\nDon't wait for instructions. If you see the next step, take it. If something is\nambiguous, clarify once and proceed. If you're blocked, say what's blocking you\n\u2014 don't go silent. Initiative is expected.\n\nUse schedules as self-reminders \u2014 re-checking blocked work, chasing unanswered\nrequests, verifying something landed. When a thing needs future attention and\nnothing will prompt it, schedule it{{SCHEDULES_SKILL_HINT}}\n\n### Work in the open\nNothing you do exists until the system can see it. Your progress, decisions,\nblockers, and results need to live in tasks, comments, messages, or wiki pages\n\u2014 otherwise the organization is blind to your work, and so is the next agent\nwho picks up where you left off. Leave traces as you go, not at the end.\n\nFor non-trivial work: create or claim a task, mark it `in_progress`, comment\nwhen status materially changes, close it when done, and link the origin that\ntriggered it. Decompose multi-step work into subtasks and keep their statuses\ncurrent \u2014 progress should be auditable without watching the work happen.{{TASKS_SKILL_HINT}}\n\n### Done means landed\nProducing output does not complete a task. Work counts as done only when it has\ncleared its remaining gates \u2014 review, merge, deployment, the requester's\nverification. Until then keep the status honest (`in_progress` or\n`in_review`), name the remaining gate in a comment, and chase it (schedule a\nself-reminder if nothing else will prompt follow-up). Never mark done what a\nhuman still has to accept.\n\n### Sessions, forks, and what survives\nSessions end and context compacts. Anything that must survive \u2014 decisions,\nprogress, constraints \u2014 belongs in tasks, comments, or wiki. Future sessions\nread the workspace, not this conversation.\n\nSome events are handled by parallel fork sessions \u2014 short-lived copies of the\nsame agent identity with separate context. In a fork: leave a written trace of\nwhat was done or deliberately not done (other sessions cannot see fork\ncontext), and do not start long-running processes \u2014 they die with the fork.\nWhen an event is marked fork-handled: do not re-handle it; verify its outcome\ninstead of assuming it.\n\n### Communicate like a teammate\nMatch the conversation \u2014 concise in chat, thorough in docs, plain language over\njargon. Say what matters; stop when you're done. Don't narrate every tool call\nor pad replies to seem thorough.\n\nMatch the language of the person you're replying to. If someone writes in\nChinese, reply in Chinese. If in English, reply in English. Never force a\nlanguage switch unless explicitly asked.\n\nDo not promise delivery times (\"in an hour\", \"by tonight\") unless the work is\ndriven by an explicit schedule. Scope visibly; report when actually done.\n\n### Keep topics in threads\nCheck for a `[Thread: prll://msg_xxx]` line before interpreting a message.\nPresent \u2192 that thread is the context; reply there, passing the same root as\n`--thread-root-id`. Absent \u2192 the message belongs to the main conversation:\nnever treat it as continuing your most recent thread. The sender's newest\nmessage is the anchor \u2014 never route a reply back into an older thread just\nbecause the topic used to live there.\n\nReply where the event lives: a thread message gets a thread reply, a\ntop-level message gets a top-level reply. But in group chats, your later\nfollow-up on that topic \u2014 progress updates, analysis, links, verification you\npost afterwards \u2014 belongs in a thread rooted at the topic's message\n(`parall messages send <chat> --thread-root-id <msgId> --text-file -`), so\nthe main channel stays scannable. Post follow-up at top level only when\nstarting a genuinely new topic, making a channel-wide announcement, or when\nexplicitly asked. Never post the same update in both the thread and the main\nchannel \u2014 thread replies surface in the thread panel; no need to duplicate\nfor visibility.\n\nIn DMs, reply top-level by default; use a thread only to continue one that\nalready exists.\n\n### Group chats: mentions and unaddressed work\nAn @mention is a direct request \u2014 act on it. A group message delivered to you\nwithout an @mention means the chat's routing lets you see the conversation:\ndecide whether a reply adds value; silence is the default.\n\nA message without an @mention is not an open invitation. Judge from context\nwho the work belongs to \u2014 the named domain, the topic's owner, whoever is\nalready on it. If it belongs to someone else, leave it. If genuinely unclear,\nask or claim in one line (\"taking this unless someone else has it\") before\nstarting \u2014 asking first beats duplicated or misdirected work.\n\n### Verify before you act\nEvents can be redelivered \u2014 before acting, check whether it was already\nhandled (your own recent replies, task comments); if handled, do nothing.\nSends can fail silently, and creates can error after succeeding server-side \u2014\ncheck the chat or entity before retrying. Never blind-retry a mutating call.\n\n### Gather the full picture first\nWhen a request is vague, an entity may already exist, or work may already be\nunderway \u2014 gather context before acting: search (`parall search \"...\"`),\ncheck existing tasks/chats/wiki, read the surrounding conversation. Act on the\nfull picture, not the fragment that arrived in the event.\n\n### Report only work that ran\nIf a scheduled job, scan, or tool call did not actually run \u2014 restarted\nsession, missing credentials, silent failure \u2014 say so plainly. Never fabricate\nor approximate results of work that did not execute.\n\n### Respect what's shared\nYou have broad latitude inside your own work. But actions that are visible to\nothers, hard to reverse, or touch shared state \u2014 sending DMs, editing shared\nwiki, reassigning others' tasks, deleting content \u2014 pause and confirm before\nacting, unless you've been explicitly authorized.\n\n### Shared workspace\nOther agents share this workspace. Before starting work, check whether someone\n\u2014 human or agent \u2014 has already picked it up. Coordination beats racing.\n\n### Permissions and approvals\nYou have real permissions based on your roles (chat member/admin, org member).\nIf you lack permission for an action, the API returns PERMISSION_DENIED with the\n`action` and `resource_uri` that were denied. The server decides whether that\naction is approvable: if it is, the CLI prints an `approvals request` command \u2014\nfill in the placeholders it shows (`--chat`, `--title`, `--reason`) and run\nit to ask someone with permission. If it is NOT approvable, the output says so;\nask a human with permission instead of requesting approval. A\n`INVALID_TARGET` error instead means you addressed the wrong kind of thing\n(e.g. a `usr_` id where a chat is expected) \u2014 follow the message (e.g. use\n`dm` for a user). Don't retry or work around a denial; only request approval\nafter an actual denial, never preemptively.\n\n### When in doubt\nPrefer asking over guessing. Prefer \"I don't know\" over fabricating. Your\ncredibility is what you bring to the workspace \u2014 protect it.";
+var REFERENCE_GUIDE_TEMPLATE = '## Parall References\n\nEvery entity on Parall has a `prll://` URI. Use these URIs to link related\nentities when you create or update tasks, comments, messages, and wiki files.\n\nAll three forms work \u2014 pick whichever fits:\n\n    prll://tsk_abc                               bare URI (auto-linked)\n    [](prll://tsk_abc)                           empty context (renders resolved title)\n    [relevant context](prll://tsk_abc)           with author annotation\n\nBare URIs and empty-context refs are preferred in most cases \u2014 the platform\nresolves and renders the entity title automatically.\n\n### Mentioning people and agents\n\nA real member mention is a `prll://usr_...` reference. Plain `@Display Name` is\nonly text: it does not notify a human or trigger an agent.\n\nWhen another member must be notified or an agent explicitly triggered, include\ntheir user reference in the message body. Prefer the empty-context form because\nthe platform resolves the member\'s current display name:\n\n    [](prll://usr_xxx)\n\nUse `[Display Name](prll://usr_xxx)` when the surrounding sentence needs an\nexplicit label. Find the user ID in the incoming message or with\n`parall members list`. Never substitute plain `@Display Name` when notification\nor agent dispatch matters.\n\n### URI format\n\n`prll://` follows standard URI structure: `scheme://authority/path?query#fragment`.\n\n**Entities** \u2014 the entity ID is the authority:\n\n    prll://usr_xxx          user          prll://prj_xxx          project\n    prll://tsk_xxx          task          prll://wik_xxx          wiki\n    prll://msg_xxx          message       prll://cmt_xxx          comment\n    prll://cht_xxx          chat          prll://tcm_xxx          task comment (legacy)\n    prll://att_xxx          attachment    prll://ase_xxx          agent session\n    prll://sch_xxx          schedule      prll://srn_xxx          schedule run\n\n**Wiki** \u2014 path is file path, fragment is a typed anchor:\n\n    prll://wik_xxx/docs/guide.md                  file\n    prll://wik_xxx/docs/guide.md#h=Auth::OAuth    heading (:: = hierarchy)\n    prll://wik_xxx/src/auth.go?rev=<sha>#l=42-58  line range (revision-pinned)\n\n  Anchor types: `h=` heading, `l=` line/range, `s=` symbol.\n  Line anchors in persistent content require `?rev=<full-40-char-sha>`.\n\n**Chat message range**:\n\n    prll://cht_xxx#range=msg_01HA,msg_01HZ\n\n**Field access** \u2014 path selects a field (omit to reference the entity itself):\n\n    prll://tsk_xxx/description#Implementation     heading within task description\n\n### Unread context\n\nWhen dispatched to a chat, you may see `[Unread: N messages | since: prll://msg_xxx]`.\nThis shows messages since your last interaction \u2014 your read cursor advances after each\ndispatch, so context you skip now won\'t appear as unread next time. Use\n`parall messages list <chat> --limit 20` to fetch recent context. For large unread\ncounts (50+), fetch only recent messages rather than everything.\n\nThread dispatches may show `[Thread: prll://msg_root | N replies | M unread | since: prll://msg_r]`.\nSame semantics \u2014 use `parall messages list <chat> --thread-root-id <thread_root> --limit 20` to\ncatch up on the thread.\n\n### Reading context on demand\n\nAn event only carries the single triggering message. If you\'re mentioned in a\ngroup chat and lack context, pull what you need from the chat \u2014 don\'t guess:\n\n    parall messages list cht_xxx --limit 20 --before msg_xxx\n    parall messages get msg_xxx\n    parall chats get cht_xxx\n\nRule of thumb: in a group chat mention, the conversation that led up to you\nbeing called almost always matters \u2014 read it before replying. In a DM, your\nsession already has continuity, so skip the fetch unless something is unclear.\n\nSame pattern for any other entity referenced in the event: `tasks get`,\n`projects get`, `users get`, `chats get`. Follow the reflink, don\'t ask.\nWhen one entity isn\'t enough \u2014 you need what\'s *around* it \u2014 walk the\nreference graph instead of guessing (see "Walk the reference graph" below).\n\n### Find context with search first\n\nReach for unified semantic search before paging chat history:\n\n    parall search "pricing decision june" --limit 10\n\nIt spans messages, tasks, wiki, and comments. Page `messages list` only for the\nverbatim recent flow of one chat, not for discovery.\n\n### Walk the reference graph\n\nReferences form a traversable graph, and you can query it \u2014 don\'t stop at\nfetching entities one by one:\n\n    # entity metadata (title, status, preview)\n    parall refs resolve prll://tsk_xxx prll://wik_xxx\n    # who references this entity\n    parall refs backlinks prll://tsk_xxx\n    # connected sub-graph around it\n    parall refs graph prll://tsk_xxx --depth 2\n\nUse `refs backlinks` when you need "where is this discussed / used"; use\n`refs graph` when you need the full picture around an entity (related tasks,\ndocs, conversations \u2014 edges carry the author\'s annotation for why they linked).\nThen `refs resolve` the interesting node URIs in one batch to get titles and\nstatus. `refs graph` takes entity-level URIs only (`prll://wik_xxx`, not\n`prll://wik_xxx/docs/a.md`). All results are filtered to what you can see.{{PLATFORM_SKILL_HINT}}\n\n### File attachments\n\nMessages may include attachments. They appear in events as:\n\n    [Attachment: prll://att_xxx | image/png | 1.2MB | screenshot.png]\n\nTo download an attachment, use the CLI:\n\n    parall files download att_xxx --output /tmp/screenshot.png\n\nTo send a file:\n\n    parall messages send prll://cht_xxx --file /tmp/output.png --text "Done"\n\nOr upload first and reuse across chats:\n\n    parall files upload /tmp/report.pdf\n    parall messages send prll://cht_aaa --attachment att_yyy --text "Report"\n    parall messages send prll://cht_bbb --attachment att_yyy --text "FYI"\n\nThe `--text` captions above are safe short literals. For message text containing `$`, backticks, or quotes, pass it via `--text-file <path>` (write the file first, or a quoted heredoc `--text-file - <<\'EOF\'`) instead of `--text "..."` \u2014 inside double quotes the shell turns `$1,000` into `,000` and executes `$(...)`.\n\n### When to reference\n\n- **Origin** \u2014 always link the message or task that triggered your work\n- **Design docs / wiki** \u2014 link specs and guides relevant to the work\n- **Related tasks** \u2014 link parent, sibling, or blocking tasks\n- **People** \u2014 link assignees or stakeholders when mentioning them\n- **Conversations** \u2014 link a chat or message range as context\n\n### Why this matters\n\nOther agents and humans read your output. References build a navigable context graph \u2014\nin multi-agent workflows, your references are the map that the next agent follows.';
+var BRIDGE_SKILL_HINTS = {
+  SCHEDULES_SKILL_HINT: " (read the `parall-schedules` skill at .parall/skills/parall-schedules.md).",
+  TASKS_SKILL_HINT: "\nDetails: read the `parall-tasks` skill at .parall/skills/parall-tasks.md and follow it.",
+  PLATFORM_SKILL_HINT: "\nDetails: read the `parall-platform` skill at .parall/skills/parall-platform.md."
+};
+function sanitizeProfileField(value) {
+  return value.replace(/[\r\n]+/g, " ").replace(/`/g, "'").trim();
 }
-function effectiveLLMSourceExplicit(pc) {
-  if (pc?.llm_source)
-    return pc.llm_source;
-  if (pc?.openai_api_key || pc?.openai_base_url || pc?.anthropic_auth_token || pc?.anthropic_base_url) {
-    return "custom";
+function sanitizeProfileBlock(value) {
+  return value.replace(/\r\n?/g, "\n").trim();
+}
+function renderTemplate(template, values) {
+  return template.replace(/\{\{([A-Z_]+)\}\}/g, (_match, token) => {
+    const value = values[token];
+    if (value === void 0)
+      throw new Error(`missing generated platform instruction token: ${token}`);
+    return value;
+  });
+}
+function renderPlatformBehavior(skillsAvailable) {
+  return renderTemplate(BEHAVIOR_TEMPLATE, {
+    SCHEDULES_SKILL_HINT: skillsAvailable ? BRIDGE_SKILL_HINTS.SCHEDULES_SKILL_HINT : ".",
+    TASKS_SKILL_HINT: skillsAvailable ? BRIDGE_SKILL_HINTS.TASKS_SKILL_HINT : ""
+  });
+}
+function renderPlatformReferenceGuide(skillsAvailable) {
+  return renderTemplate(REFERENCE_GUIDE_TEMPLATE, {
+    PLATFORM_SKILL_HINT: skillsAvailable ? BRIDGE_SKILL_HINTS.PLATFORM_SKILL_HINT : ""
+  });
+}
+var PLATFORM_BEHAVIOR = renderPlatformBehavior(true);
+var PLATFORM_REFERENCE_GUIDE = renderPlatformReferenceGuide(true);
+function renderPlatformIdentity(agent) {
+  if (!agent)
+    return PLATFORM_IDENTITY_BASE;
+  const publicLines = [];
+  const title = agent.title ? sanitizeProfileField(agent.title) : "";
+  if (title)
+    publicLines.push(`Title: ${title}`);
+  const about = agent.publicDescription ? sanitizeProfileField(agent.publicDescription) : "";
+  if (about)
+    publicLines.push(`About: ${about}`);
+  const instructions = sanitizeProfileBlock(agent.instructions || agent.description || "");
+  const suffix = renderTemplate(IDENTITY_PROFILE_SUFFIX, {
+    DISPLAY_NAME: sanitizeProfileField(agent.displayName),
+    USER_ID: agent.userId,
+    PUBLIC_PROFILE: publicLines.length > 0 ? `
+${publicLines.join("\n")}` : "",
+    INSTRUCTIONS_SECTION: instructions ? `
+
+### Private instructions from your organization admins
+
+${instructions}` : ""
+  });
+  return `${PLATFORM_IDENTITY_BASE}
+
+${suffix}`;
+}
+function renderPlatformInstructions(options) {
+  const skillsAvailable = options.skillsAvailable !== false;
+  const parts = [renderPlatformIdentity(options.identity)];
+  if (options.runtimeAppendix !== void 0)
+    parts.push(options.runtimeAppendix);
+  parts.push(renderPlatformBehavior(skillsAvailable), renderPlatformReferenceGuide(skillsAvailable));
+  if (options.capabilityFragments && options.capabilityFragments.length > 0) {
+    parts.push(options.capabilityFragments.join("\n\n"));
+  }
+  if (options.skillReferences !== void 0)
+    parts.push(options.skillReferences);
+  return parts.join("\n\n");
+}
+
+// ts/agent-core/dist/bridge-workspace.js
+function extractShellCommand(input) {
+  if (!input || typeof input !== "object")
+    return void 0;
+  const command = input.command;
+  return typeof command === "string" && command.trim() ? command.trim() : void 0;
+}
+function parseParallCliInvocation(command) {
+  const tokens = command.replace(/\s+/g, " ").trim().split(" ");
+  let i = 0;
+  if (tokens[i] === "parall") {
+    i++;
+  } else if (tokens[i] === "npx") {
+    i++;
+    while (i < tokens.length && tokens[i].startsWith("-"))
+      i++;
+    if (i >= tokens.length || !/^@parall\/cli(?:@.+)?$/.test(tokens[i]))
+      return null;
+    i++;
+  } else if (tokens[i] === "pnpm") {
+    i++;
+    if (i < tokens.length && (tokens[i] === "exec" || tokens[i] === "dlx"))
+      i++;
+    if (i >= tokens.length || tokens[i] !== "parall")
+      return null;
+    i++;
+  } else {
+    return null;
+  }
+  return tokens.slice(i).filter((t) => !t.startsWith("-"));
+}
+function isParallSendCommand(command) {
+  if (!command)
+    return false;
+  const sub = parseParallCliInvocation(command);
+  if (!sub || sub.length === 0)
+    return false;
+  return sub[0] === "dm" || sub[0] === "messages" && sub[1] === "send";
+}
+function isParallNoReplyCommand(command) {
+  if (!command)
+    return false;
+  const sub = parseParallCliInvocation(command);
+  return sub?.[0] === "no-reply";
+}
+
+// ts/agent-core/dist/channel-capability.js
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+var CAPABILITY_FEISHU_CLI = "feishu-cli";
+var CAPABILITY_SLACK_SEND = "slack-send";
+var CAPABILITY_WECHAT_SEND = "wechat-send";
+function channelCapabilityKeyFor(provider) {
+  if (provider === "slack")
+    return CAPABILITY_SLACK_SEND;
+  if (provider === "wechat")
+    return CAPABILITY_WECHAT_SEND;
+  return `${provider}-cli`;
+}
+var CHANNEL_POINTER_MAGIC = "parall channel capability pointer";
+function capabilityBinDir(stateDir) {
+  return path.join(stateDir, "bin");
+}
+function channelExecEntryPath() {
+  const selfDir = path.dirname(fileURLToPath(import.meta.url));
+  const sibling = path.join(selfDir, "parall-channel-exec.js");
+  if (fs.existsSync(sibling))
+    return sibling;
+  return fileURLToPath(new URL("./bin/channel-exec.js", import.meta.url));
+}
+function materializeChannelCapabilities(stateDir, capabilities, log2) {
+  try {
+    reconcileFeishuCli(stateDir, capabilities, log2);
+  } catch (err) {
+    log2?.warn(`channel capability materialization failed: ${String(err)}`);
+  }
+}
+function reconcileFeishuCli(stateDir, capabilities, log2) {
+  const binDir = capabilityBinDir(stateDir);
+  const posixPath = path.join(binDir, "lark-cli");
+  const granted = capabilities.some((c) => c.key === CAPABILITY_FEISHU_CLI);
+  const hadPointer = fs.existsSync(posixPath);
+  if (!granted && !hadPointer)
+    return;
+  fs.mkdirSync(binDir, { recursive: true });
+  const entry = channelExecEntryPath();
+  const nodeExec = process.execPath;
+  writePointerIfChanged(posixPath, renderPosixPointer(nodeExec, entry, binDir, "feishu"), log2);
+  writePointerIfChanged(path.join(binDir, "lark-cli.cmd"), renderCmdPointer(nodeExec, entry, binDir, "feishu"), log2);
+}
+function writePointerIfChanged(filePath, content, log2) {
+  let existing = null;
+  try {
+    existing = fs.readFileSync(filePath, "utf8");
+  } catch {
+    existing = null;
+  }
+  if (existing !== content) {
+    fs.writeFileSync(filePath, content, { mode: 493 });
+    log2?.info(`channel capability: pointer materialized (${path.basename(filePath)})`);
+  }
+  fs.chmodSync(filePath, 493);
+}
+function renderPosixPointer(nodeExecPath, entryJsPath, binDir, channel) {
+  return [
+    "#!/bin/sh",
+    `# Generated by @parall/agent-core \u2014 ${CHANNEL_POINTER_MAGIC} (do not edit).`,
+    "# Credential + exec logic lives in the agent-core package; revocation is",
+    "# enforced by the platform mint endpoint, so this pointer stays constant.",
+    // Strip Node preload-hijack vars BEFORE launching node: NODE_OPTIONS
+    // (e.g. --require=/evil.js) and NODE_PATH would execute caller-supplied code
+    // at interpreter startup — BEFORE channel-exec's own env scrub, i.e. before
+    // the mint. The pointer is a platform-authored trust-boundary artifact whose
+    // whole job is a CONTROLLED launch of the broker (absolute node, magic
+    // guard, skip-dir); this closes the same env-hijack class for node startup
+    // that the absolute node path closes for PATH, keeping the launch deterministic.
+    "unset NODE_OPTIONS NODE_PATH",
+    // "$@" preserves argv exactly (this is the agent's main path via git-bash).
+    `exec "${nodeExecPath}" "${entryJsPath}" --channel ${channel} --skip-dir "${binDir}" -- "$@"`,
+    ""
+  ].join("\n");
+}
+function renderCmdPointer(nodeExecPath, entryJsPath, binDir, channel) {
+  return [
+    "@echo off",
+    `rem Generated by @parall/agent-core - ${CHANNEL_POINTER_MAGIC} (do not edit).`,
+    // Clear Node preload-hijack vars before launching node (see the sh pointer).
+    'set "NODE_OPTIONS="',
+    'set "NODE_PATH="',
+    `"${nodeExecPath}" "${entryJsPath}" --channel ${channel} --skip-dir "${binDir}" -- %*`,
+    ""
+  ].join("\r\n");
+}
+
+// ts/agent-core/dist/dispatch-adapter.js
+function buildErrorStepContent(message) {
+  return { text: message, suppressed: false, status: "error" };
+}
+
+// ts/agent-core/dist/event-format.js
+function sanitizeMeta(value) {
+  return value.replace(/[\r\n]+/g, " ").replace(/[[\]|]/g, " ").trim();
+}
+function buildEventBody(event) {
+  const lines = [];
+  if (event.type === "message") {
+    lines.push(`[Event: message.new]`);
+    const chatLabel = event.targetName ? `"${event.targetName}" (prll://${event.targetId})` : `prll://${event.targetId}`;
+    lines.push(`[Chat: ${chatLabel} | type: ${event.targetType ?? "unknown"}]`);
+    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
+    lines.push(`[Message ID: prll://${event.messageId}]`);
+    if (event.threadRootId) {
+      const threadMeta = [
+        `prll://${event.threadRootId}`,
+        event.threadReplyCount != null ? `${event.threadReplyCount} replies` : null,
+        event.threadUnreadCount != null && event.threadUnreadCount > 0 ? `${event.threadUnreadCount} unread` : null,
+        event.threadUnreadCount != null && event.threadUnreadCount > 0 && event.threadUnreadSince ? `since: prll://${event.threadUnreadSince}` : null
+      ].filter(Boolean).join(" | ");
+      lines.push(`[Thread: ${threadMeta}]`);
+    }
+    if (event.unreadCount != null && event.unreadCount > 1) {
+      const countStr = event.unreadCount >= 1e3 ? "999+" : String(event.unreadCount);
+      const sinceStr = event.unreadSince ? ` | since: prll://${event.unreadSince}` : "";
+      let line = `[Unread: ${countStr} messages${sinceStr}]`;
+      if (event.unreadCount > 50)
+        line += ` \u2014 fetch recent context with --limit, not all`;
+      lines.push(line);
+    }
+    if (event.noReply)
+      lines.push(`[Hint: no_reply]`);
+    if (event.attachments?.length) {
+      for (const att of event.attachments) {
+        const sizeStr = att.fileSize >= 1048576 ? `${(att.fileSize / 1048576).toFixed(1)}MB` : `${Math.round(att.fileSize / 1024)}KB`;
+        lines.push(`[Attachment: prll://${att.id} | ${sanitizeMeta(att.mimeType)} | ${sizeStr} | ${sanitizeMeta(att.fileName)}]`);
+      }
+    }
+    lines.push("", event.body);
+  } else if (event.type === "task_comment") {
+    lines.push(`[Event: task.comment.created]`);
+    const taskLabel = event.targetName ? `${event.targetName} (prll://${event.targetId})` : `prll://${event.targetId}`;
+    lines.push(`[Task: ${taskLabel}]`);
+    if (event.deliveryReason)
+      lines.push(`[Delivery: ${sanitizeMeta(event.deliveryReason)}]`);
+    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
+    lines.push(`[Comment ID: prll://${event.messageId}]`);
+    lines.push("", event.body);
+  } else if (event.type === "wiki_comment") {
+    lines.push(`[Event: wiki.comment.created]`);
+    const target = event.replyTargetUri ?? `prll://${event.targetId}`;
+    if (event.targetType === "changeset") {
+      lines.push(`[Wiki Changeset: ${target}]`);
+    } else {
+      lines.push(`[Wiki: ${event.targetName ? `${sanitizeMeta(event.targetName)} (${target})` : target}]`);
+    }
+    if (event.deliveryReason)
+      lines.push(`[Delivery: ${sanitizeMeta(event.deliveryReason)}]`);
+    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
+    lines.push(`[Comment ID: prll://${event.messageId}]`);
+    lines.push("", event.body);
+  } else if (event.type === "approval") {
+    lines.push(`[Event: approval.decided]`);
+    lines.push(`[Approval: prll://${event.messageId}]`);
+    lines.push(`[Chat: prll://${event.targetId}]`);
+    lines.push(`[Decided by: ${event.senderName} (prll://${event.senderId})]`);
+    lines.push("", event.body);
+  } else if (event.type === "schedule") {
+    lines.push(`[Event: schedule.fired]`);
+    lines.push(`[Schedule: prll://${event.targetId}]`);
+    lines.push(`[Run: prll://${event.messageId}]`);
+    if (event.scheduledFireAt)
+      lines.push(`[Scheduled at: ${sanitizeMeta(event.scheduledFireAt)}]`);
+    if (event.attachedUri)
+      lines.push(`[Attached: ${sanitizeMeta(event.attachedUri)}]`);
+    lines.push("", event.body);
+  } else if (event.type === "channel_message") {
+    lines.push(`[Event: channel.message]`);
+    const providerLabel = sanitizeMeta(event.channelProvider ?? "external IM");
+    const convLabel = event.channelExternalConversationId ? `${sanitizeMeta(event.channelExternalConversationId)} (${sanitizeMeta(event.channelConversationType ?? "conversation")})` : sanitizeMeta(event.channelConversationType ?? "conversation");
+    lines.push(`[Channel: ${providerLabel} | conversation: ${convLabel}]`);
+    lines.push(`[From: ${sanitizeMeta(event.senderName)} (external user, not a Parall member)]`);
+    if (event.channelExternalMessageId) {
+      lines.push(`[External message ID: ${sanitizeMeta(event.channelExternalMessageId)}]`);
+    }
+    lines.push(`[Audience: this conversation lives on ${providerLabel}, OUTSIDE Parall. Readers cannot open prll:// links, Parall cards, or internal attachments \u2014 never include them in replies. Write plain conversational text.]`);
+    lines.push("", event.body);
+  } else if (event.type === "external_trigger") {
+    lines.push(`[Event: external.trigger]`);
+    lines.push(`[Trigger: prll://${event.targetId}]`);
+    lines.push(`[Run: prll://${event.messageId}]`);
+    if (event.externalConnectionId) {
+      const label = event.externalConnectionDisplayName ? `${sanitizeMeta(event.externalConnectionDisplayName)} (prll://${event.externalConnectionId})` : `prll://${event.externalConnectionId}`;
+      lines.push(`[Connection: ${label}]`);
+    }
+    if (event.externalIngressEventId)
+      lines.push(`[Ingress: prll://${event.externalIngressEventId}]`);
+    if (event.attachedUri)
+      lines.push(`[Attached: ${sanitizeMeta(event.attachedUri)}]`);
+    if (event.externalConnectionSourceType) {
+      lines.push(`[Source: ${sanitizeMeta(event.externalConnectionSourceType)}]`);
+    }
+    if (event.externalIngressEventType) {
+      lines.push(`[External event: ${sanitizeMeta(event.externalIngressEventType)}]`);
+    }
+    lines.push("", event.body);
+  } else {
+    lines.push(`[Event: task.assigned]`);
+    const taskLabel = event.targetName ? `${event.targetName} (prll://${event.targetId})` : `prll://${event.targetId}`;
+    lines.push(`[Task: ${taskLabel}]`);
+    lines.push(`[Assigned by: ${event.senderName} (prll://${event.senderId})]`);
+    lines.push("", event.body);
+  }
+  return lines.join("\n") + buildSendMessageHint(event);
+}
+function buildEventBodyForForkResult(event) {
+  return buildEventBody(event).replace(/\n<system-reminder>[\s\S]*<\/system-reminder>$/, "");
+}
+function buildSendMessageHint(event) {
+  if (event.noReply)
+    return "";
+  if (event.type === "wiki_comment" && event.replyTargetUri) {
+    const where = event.targetType === "changeset" ? "this changeset comment" : "this wiki page";
+    return `
+<system-reminder>To reply on ${where}, run: \`parall comments add --target "${event.replyTargetUri}" --body "..."\` (read the thread first with \`parall comments list --target "${event.replyTargetUri}"\`). To message someone instead, use \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
+  }
+  if (event.targetId.startsWith("cht_")) {
+    if (event.threadRootId) {
+      return `
+<system-reminder>To reply in this thread, run \`parall messages send prll://${event.targetId} --thread-root-id ${sanitizeMeta(event.threadRootId)} --text-file - <<'EOF'\` \u2026 \`EOF\` \u2014 the quoted heredoc keeps \`$\`, backticks and apostrophes literal (plain \`--text "$1,000"\` sends \`,000\`). Your plain text output is not delivered to the chat.</system-reminder>`;
+    }
+    return `
+<system-reminder>To reply, run \`parall messages send prll://${event.targetId} --text-file - <<'EOF'\` \u2026 \`EOF\` \u2014 the quoted heredoc keeps \`$\`, backticks and apostrophes literal (plain \`--text "$1,000"\` sends \`,000\`). Your plain text output is not delivered to the chat.</system-reminder>`;
+  }
+  if (event.targetId.startsWith("tsk_")) {
+    return `
+<system-reminder>To respond, use the CLI: \`parall tasks update\` / \`parall tasks comments add\`. To message someone, use \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
+  }
+  if (event.targetId.startsWith("sch_")) {
+    return `
+<system-reminder>To communicate, use the CLI: \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
+  }
+  if (event.type === "channel_message") {
+    if (event.channelCliCapable) {
+      if (event.channelProvider === "slack") {
+        const channelArg = event.channelExternalConversationId ? ` --channel "${event.channelExternalConversationId}"` : " --channel <conversation id from this event>";
+        const replyTo = event.channelExternalMessageId ? ` --reply-to "${event.channelExternalMessageId}"` : "";
+        return `
+<system-reminder>To reply, use the platform verb: \`parall slack send${channelArg}${replyTo} --text <your reply>\`. In channels --reply-to is REQUIRED (the reply lands in that message's thread); in DMs it is optional (DMs are linear). \`parall slack send\` is the ONLY outbound path \u2014 your plain text output is NOT delivered to the external conversation.</system-reminder>`;
+      }
+      if (event.channelProvider === "wechat") {
+        const toArg = event.channelExternalConversationId ? ` --to "${event.channelExternalConversationId}"` : " --to <wxid from this event>";
+        const atArg = event.channelConversationType === "group" ? event.senderId && event.senderId !== "external" ? ` --at "${event.senderId}"` : " --at <wxid of the person you are answering>" : "";
+        return `
+<system-reminder>To reply, use the platform verb: \`parall wechat send${toArg}${atArg} --text-file - <<'EOF'\` \u2026 \`EOF\` (or --text "<short text>" for simple literals \u2014 the quoted heredoc keeps $, backticks and apostrophes literal). In group chats, --at @-mentions the person you are answering. \`parall wechat send\` is the ONLY outbound path \u2014 your plain text output is NOT delivered to the external conversation.</system-reminder>`;
+      }
+      if (!event.channelProvider) {
+        return `
+<system-reminder>To reply, use the channel capability granted in your system prompt \u2014 for Feishu conversations that is \`lark-cli im\`, for Slack it is \`parall slack send\` (pass the message id from this event as --reply-to), for WeChat it is \`parall wechat send\`. That capability is the ONLY outbound path \u2014 your plain text output is NOT delivered to the external conversation.</system-reminder>`;
+      }
+      const convRef = event.channelExternalConversationId ? `chat_id "${event.channelExternalConversationId}"` : "the conversation id named in this event";
+      const threadAlt = event.channelExternalMessageId ? ` To reply threaded to this specific message, reference message_id "${event.channelExternalMessageId}".` : "";
+      return `
+<system-reminder>To reply, use the official Feishu CLI on your PATH: send a message to ${convRef} with \`lark-cli im\` (see \`lark-cli im --help\` for send syntax; auth is provisioned automatically).${threadAlt} lark-cli is the ONLY outbound path \u2014 your plain text output is NOT delivered to the external conversation.</system-reminder>`;
+    }
+    const platform = event.channelProvider ?? "the external platform";
+    return `
+<system-reminder>This message arrived from ${platform}, but outbound replies are currently disabled for this org (no channel capability granted). Do NOT attempt to reply on the external platform. If action is needed, surface it inside Parall (\`parall messages send\` / \`parall dm\`). Your plain text output is not delivered anywhere.</system-reminder>`;
   }
-  return "";
-}
-function clearAllProviderCreds(env) {
-  delete env.ANTHROPIC_AUTH_TOKEN;
-  delete env.ANTHROPIC_BASE_URL;
-  delete env.ANTHROPIC_API_KEY;
-  delete env.OPENAI_API_KEY;
-  delete env.OPENAI_BASE_URL;
-  delete env.PRLL_CLAUDE_ALLOW_API_KEY;
-}
-function parseProviderConfig(env) {
-  const raw = env.PRLL_PROVIDER_CONFIG?.trim();
-  if (!raw)
-    return void 0;
-  try {
-    return JSON.parse(raw);
-  } catch (err) {
-    throw new Error(`Invalid PRLL_PROVIDER_CONFIG JSON: ${String(err)}`);
+  if (event.type === "external_trigger" || event.targetId.startsWith("xtr_")) {
+    return `
+<system-reminder>This external trigger is incoming-only. Your plain text output is not sent back to the external provider. To communicate in Parall, use \`parall messages send\` / \`parall dm\`; provider-specific outbound actions require a separate capability.</system-reminder>`;
   }
+  return "";
 }
+function buildForkScopePrefix(event) {
+  const targetLabel = event.targetName ? `"${event.targetName}" (prll://${event.targetId})` : `prll://${event.targetId}`;
+  return `[Fork scope: You are a parallel worker forked from the main session to handle ${targetLabel}. The conversation history above belongs to the main session's in-progress dispatch \u2014 do NOT continue it or complete it, or produce external output (comments, messages) for work visible there. The main session owns its own output.
 
-// ts/agent-core/dist/lane-key.js
-import * as path from "node:path";
-function laneKeyForTarget(targetUri, threadRootId) {
-  return Buffer.from(`${targetUri}
-${threadRootId ?? ""}`, "utf8").toString("base64url");
-}
-function dispatchLaneContextDir(stateDir) {
-  return path.join(stateDir, "dispatch-lane-context");
+Only act on the event below within your target scope. If your event reveals findings about the main session's work, report them in your summary \u2014 do not post them externally.
+
+End with a brief "Fork summary" of actions taken and decisions made.]
+
+`;
 }
-function laneContextFilePath(contextDir, targetUri, threadRootId) {
-  return path.join(contextDir, `${laneKeyForTarget(targetUri, threadRootId)}.json`);
+function buildForkResultPrefix(results) {
+  if (!results.length)
+    return "";
+  const blocks = results.map((result) => {
+    const lines = [];
+    for (const body of result.eventBodies) {
+      lines.push(body);
+    }
+    lines.push(`[This event was handled by a parallel fork session. Do NOT re-handle, re-reply, or duplicate work for it.]`);
+    lines.push(`[Fork summary: ${result.agentSummary ? sanitizeMeta(result.agentSummary) : "No fork summary available \u2014 the fork completed without producing a text summary. Check the target chat/task for any actions the fork already took before acting."}]`);
+    if (result.actions.length)
+      lines.push(`[Fork actions: ${result.actions.join("; ")}]`);
+    if (result.historyPath)
+      lines.push(`[Fork history: ${result.historyPath}]`);
+    return lines.join("\n");
+  });
+  return blocks.join("\n\n") + "\n\n---\n\n";
 }
 
+// ts/agent-core/dist/gateway-base.js
+import * as os from "node:os";
+import * as fs3 from "node:fs";
+import * as path3 from "node:path";
+import { randomUUID } from "node:crypto";
+
 // ts/sdk/dist/browser-viewer.js
 var BROWSER_VIEWER_READINESS_TIMEOUT_MS = 6e4;
 function browserViewerRequestOptions(command, opts) {
@@ -51332,6 +51715,9 @@ var ENDPOINTS = {
   ORG_MEMBERS: (orgId) => `${API_BASE}/orgs/${orgId}/members`,
   ORG_MEMBERS_FORMER: (orgId) => `${API_BASE}/orgs/${orgId}/members/former`,
   TEAMS: (orgId) => `${API_BASE}/orgs/${orgId}/teams`,
+  TEAM: (orgId, teamId) => `${API_BASE}/orgs/${orgId}/teams/${teamId}`,
+  TEAM_MEMBERS: (orgId, teamId) => `${API_BASE}/orgs/${orgId}/teams/${teamId}/members`,
+  TEAM_MEMBER: (orgId, teamId, userId) => `${API_BASE}/orgs/${orgId}/teams/${teamId}/members/${userId}`,
   ORG_MEMBERS_ONLINE: (orgId) => `${API_BASE}/orgs/${orgId}/members/online`,
   ORG_MEMBER: (orgId, userId) => `${API_BASE}/orgs/${orgId}/members/${userId}`,
   ORG_MEMBER_CHATS: (orgId, memberId) => `${API_BASE}/orgs/${orgId}/members/${memberId}/chats`,
@@ -51454,6 +51840,7 @@ var ENDPOINTS = {
   MACHINES_ME_BROWSER_PROFILE_VIEWER_RESPONSE: (requestId) => `${API_BASE}/machines/me/browser-profiles/viewer-response/${requestId}`,
   // Tasks (org-scoped)
   TASKS: (orgId) => `${API_BASE}/orgs/${orgId}/tasks`,
+  TASK_SUBTASK_SUMMARY: (orgId) => `${API_BASE}/orgs/${orgId}/tasks/subtask-summary`,
   TASK: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}`,
   TASK_ARCHIVE: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/archive`,
   TASK_RESTORE: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/restore`,
@@ -51467,8 +51854,14 @@ var ENDPOINTS = {
   TASK_COMMENTS: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/comments`,
   TASK_COMMENT: (orgId, taskId, commentId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/comments/${commentId}`,
   TASK_ACTIVITIES: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/activities`,
+  TASK_LABELS: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/labels`,
+  TASK_LABEL: (orgId, taskId, labelId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/labels/${labelId}`,
+  // Labels (org-scoped vocabulary; writes are admin-gated)
+  LABELS: (orgId) => `${API_BASE}/orgs/${orgId}/labels`,
+  LABEL: (orgId, labelId) => `${API_BASE}/orgs/${orgId}/labels/${labelId}`,
   // Projects (org-scoped)
   PROJECTS: (orgId) => `${API_BASE}/orgs/${orgId}/projects`,
+  PROJECT_TASK_SUMMARY: (orgId) => `${API_BASE}/orgs/${orgId}/projects/task-summary`,
   PROJECT: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}`,
   // Schedules (org-scoped, platform time trigger primitive)
   SCHEDULES: (orgId) => `${API_BASE}/orgs/${orgId}/schedules`,
@@ -51511,8 +51904,10 @@ var ENDPOINTS = {
   SLACK_HISTORY: (orgId) => `${API_BASE}/orgs/${orgId}/agents/me/slack/history`,
   SLACK_MEMBERS: (orgId) => `${API_BASE}/orgs/${orgId}/agents/me/slack/members`,
   SLACK_STATUS: (orgId) => `${API_BASE}/orgs/${orgId}/agents/me/slack/status`,
-  // WeChat tier-B read verb (agent-only; internal research preview).
+  // WeChat tier-B read verbs (agent-only; internal research preview).
   WECHAT_CONTACTS: (orgId) => `${API_BASE}/orgs/${orgId}/agents/me/wechat/contacts`,
+  WECHAT_PROFILE: (orgId) => `${API_BASE}/orgs/${orgId}/agents/me/wechat/profile`,
+  WECHAT_STATUS: (orgId) => `${API_BASE}/orgs/${orgId}/agents/me/wechat/status`,
   // Invitations (org-scoped, admin)
   ORG_INVITATIONS: (orgId) => `${API_BASE}/orgs/${orgId}/invitations`,
   ORG_INVITATION: (orgId, invId) => `${API_BASE}/orgs/${orgId}/invitations/${invId}`,
@@ -51626,8 +52021,10 @@ var ENDPOINTS = {
   NOTIFICATION_PREFERENCES: `${API_BASE}/notification-preferences`,
   // Unified search (messages + tasks + wiki, org-scoped)
   SEARCH: (orgId) => `${API_BASE}/orgs/${orgId}/search`,
-  // Feature flags (org-scoped, server-evaluated)
-  FEATURE_FLAGS: (orgId) => `${API_BASE}/orgs/${orgId}/feature-flags`,
+  // Feature flags (server-evaluated). Org-scoped by default; omit the org for
+  // the pre-org form, which resolves "cap:" capabilities only (PostHog flags
+  // are org-scoped and absent there) for callers that have no org yet.
+  FEATURE_FLAGS: (orgId) => orgId ? `${API_BASE}/orgs/${orgId}/feature-flags` : `${API_BASE}/feature-flags`,
   // Team templates (org-scoped, owner/admin only)
   TEMPLATES: (orgId) => `${API_BASE}/orgs/${orgId}/templates`,
   TEMPLATE: (orgId, templateId) => `${API_BASE}/orgs/${orgId}/templates/${templateId}`,
@@ -51697,10 +52094,11 @@ var ENDPOINTS = {
   ORG_CLIP_INSTALL: (orgId) => `/api/v1/orgs/${orgId}/clips/install`,
   ORG_CLIPS_INSTALLED: (orgId) => `/api/v1/orgs/${orgId}/clips/installed`,
   ORG_CLIP_UNINSTALL: (orgId, clipId) => `/api/v1/orgs/${orgId}/clips/${clipId}/uninstall`,
+  ORG_CLIP_MCP_REMOVE: (orgId, clipId) => `/api/v1/orgs/${orgId}/clips/${clipId}/mcp-remove`,
   // Per-org agent exec access for one clip (default all agents; PUT human-only)
   ORG_CLIP_EXEC_ACCESS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clips/${clipId}/exec-access`,
-  // MCP clip server config (cap:clip-mcp; publisher-org only — cross-org gets
-  // 403 MCP_CROSS_ORG_DISABLED on the whole family, reads included). The
+  // MCP clip server config (cap:clip-mcp; cross-org is limited to installed,
+  // reviewed Official OAuth Clips). The
   // singular family addresses the org's DEFAULT connection (pre-165
   // back-compat shim); the plural family is the multi-connection surface —
   // one config row (credential slot) per connection, addressed by config id.
@@ -51712,95 +52110,239 @@ var ENDPOINTS = {
   ORG_CLIP_MCP_TOOLS_REFRESH_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}/tools/refresh`,
   ORG_CLIP_MCP_OAUTH_DISCONNECT_BY_ID: (orgId, clipId, configId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/mcp-configs/${configId}/oauth/disconnect`
 };
-var WS_EVENTS = {
-  // Client -> Server
-  PING: "ping",
-  TYPING: "typing",
-  WATCH: "watch",
-  AGENT_HEARTBEAT: "agent.heartbeat",
-  // Server -> Client
-  HELLO: "hello",
-  PONG: "pong",
-  WATCHING: "watching",
-  MESSAGE_NEW: "message.new",
-  MESSAGE_PATCH: "message.patch",
-  MESSAGE_EDIT: "message.edit",
-  MESSAGE_DELETE: "message.delete",
-  MESSAGE_REACTION_UPDATED: "message.reaction.updated",
-  TYPING_UPDATE: "typing.update",
-  CHAT_UPDATE: "chat.update",
-  CHAT_DELETED: "chat.deleted",
-  APPROVAL_UPDATE: "approval.update",
-  // deprecated
-  CARD_UPDATE: "card.update",
-  RECOVERY_OVERFLOW: "recovery.overflow",
-  MEMBERSHIP_CHANGED: "membership.changed",
-  TASK_CREATED: "task.created",
-  TASK_UPDATED: "task.updated",
-  TASK_DELETED: "task.deleted",
-  TASK_COMMENT_CREATED: "task.comment.created",
-  TASK_COMMENT_UPDATED: "task.comment.updated",
-  TASK_COMMENT_DELETED: "task.comment.deleted",
-  PROJECT_CREATED: "project.created",
-  PROJECT_UPDATED: "project.updated",
-  PROJECT_DELETED: "project.deleted",
-  AGENT_SESSION_NEW: "agent_session.new",
-  AGENT_SESSION_UPDATE: "agent_session.update",
-  AGENT_STEP_NEW: "agent_step.new",
-  INVITATION_NEW: "invitation.new",
-  INVITATION_ACCEPTED: "invitation.accepted",
-  INVITATION_DECLINED: "invitation.declined",
-  INVITATION_REVOKED: "invitation.revoked",
-  ORG_JOIN_REQUEST_NEW: "org.join_request.new",
-  ORG_INVITE_LINK_JOINED: "org.invite_link.joined",
-  ORG_MEMBER_REMOVED: "org.member.removed",
-  AGENT_CONFIG_UPDATE: "agent_config.update",
-  PRESENCE_UPDATE: "presence.update",
-  WIKI_CHANGESET_CREATED: "wiki.changeset.created",
-  WIKI_CHANGESET_UPDATED: "wiki.changeset.updated",
-  WIKI_DELETED: "wiki.deleted",
-  WIKI_RESTORED: "wiki.restored",
-  COMMENT_CREATED: "comment.created",
-  COMMENT_UPDATED: "comment.updated",
-  COMMENT_DELETED: "comment.deleted",
-  NOTIFICATION_ALERT: "notification.alert",
-  INBOX_NEW: "inbox.new",
-  INBOX_UPDATE: "inbox.update",
-  INBOX_BULK_UPDATE: "inbox.bulk_update",
-  READ_POSITION_UPDATED: "read_position.updated",
-  THREAD_READ_POSITION_UPDATED: "thread_read_position.updated",
-  DISPATCH_NEW: "dispatch.new",
-  DISPATCH_RECEIVED: "dispatch.received",
-  DISPATCH_RESOLVED: "dispatch.resolved",
-  SCHEDULE_CREATED: "schedule.created",
-  SCHEDULE_UPDATED: "schedule.updated",
-  SCHEDULE_DELETED: "schedule.deleted",
-  SCHEDULE_FIRED: "schedule.fired",
-  BILLING_BALANCE_UPDATED: "billing.balance_updated",
-  BILLING_LOW_BALANCE: "billing.low_balance",
-  BILLING_MACHINE_STOPPED: "billing.machine_stopped",
-  BILLING_INSUFFICIENT: "billing.insufficient",
-  USER_UPDATED: "user.updated",
-  MACHINE_HELLO: "machine.hello",
-  MACHINE_AGENT_ATTACHED: "machine.agent.attached",
-  MACHINE_AGENT_DETACHED: "machine.agent.detached",
-  MACHINE_STOP: "machine.stop",
-  MACHINE_WORKSPACE_SETUP_REQUESTED: "machine.workspace.setup.requested",
-  MACHINE_FILESYSTEM_BROWSE: "machine.filesystem.browse",
-  MACHINE_UPDATE: "machine.update",
-  MACHINE_CONFIG_UPDATED: "machine.config.updated",
-  MACHINE_AGENT_CONFIG_UPDATED: "machine.agent_config.updated",
-  MACHINE_CLIP_SYNC: "machine.clip.sync",
-  MACHINE_BROWSER_PROFILE_LIFECYCLE: "machine.browser_profile.lifecycle",
-  MACHINE_BROWSER_PROFILE_VIEWER: "machine.browser_profile.viewer",
-  AGENT_NEW_SESSION: "agent.new_session",
-  CLIP_CREATED: "clip.created",
-  CLIP_REMOVED: "clip.removed",
-  CLIP_UPDATED: "clip.updated"
+var WS_EVENTS = {
+  // Client -> Server
+  PING: "ping",
+  TYPING: "typing",
+  WATCH: "watch",
+  AGENT_HEARTBEAT: "agent.heartbeat",
+  // Server -> Client
+  HELLO: "hello",
+  PONG: "pong",
+  WATCHING: "watching",
+  MESSAGE_NEW: "message.new",
+  MESSAGE_PATCH: "message.patch",
+  MESSAGE_EDIT: "message.edit",
+  MESSAGE_DELETE: "message.delete",
+  MESSAGE_REACTION_UPDATED: "message.reaction.updated",
+  TYPING_UPDATE: "typing.update",
+  CHAT_UPDATE: "chat.update",
+  CHAT_DELETED: "chat.deleted",
+  APPROVAL_UPDATE: "approval.update",
+  // deprecated
+  CARD_UPDATE: "card.update",
+  RECOVERY_OVERFLOW: "recovery.overflow",
+  MEMBERSHIP_CHANGED: "membership.changed",
+  TASK_CREATED: "task.created",
+  TASK_UPDATED: "task.updated",
+  TASK_DELETED: "task.deleted",
+  TASK_COMMENT_CREATED: "task.comment.created",
+  TASK_COMMENT_UPDATED: "task.comment.updated",
+  TASK_COMMENT_DELETED: "task.comment.deleted",
+  PROJECT_CREATED: "project.created",
+  PROJECT_UPDATED: "project.updated",
+  PROJECT_DELETED: "project.deleted",
+  LABEL_CREATED: "label.created",
+  LABEL_UPDATED: "label.updated",
+  LABEL_DELETED: "label.deleted",
+  AGENT_SESSION_NEW: "agent_session.new",
+  AGENT_SESSION_UPDATE: "agent_session.update",
+  AGENT_STEP_NEW: "agent_step.new",
+  INVITATION_NEW: "invitation.new",
+  INVITATION_ACCEPTED: "invitation.accepted",
+  INVITATION_DECLINED: "invitation.declined",
+  INVITATION_REVOKED: "invitation.revoked",
+  ORG_JOIN_REQUEST_NEW: "org.join_request.new",
+  ORG_INVITE_LINK_JOINED: "org.invite_link.joined",
+  ORG_MEMBER_REMOVED: "org.member.removed",
+  ORG_MEMBER_PROFILE_UPDATED: "org.member.profile.updated",
+  AGENT_CONFIG_UPDATE: "agent_config.update",
+  PRESENCE_UPDATE: "presence.update",
+  WIKI_CHANGESET_CREATED: "wiki.changeset.created",
+  WIKI_CHANGESET_UPDATED: "wiki.changeset.updated",
+  WIKI_DELETED: "wiki.deleted",
+  WIKI_RESTORED: "wiki.restored",
+  COMMENT_CREATED: "comment.created",
+  COMMENT_UPDATED: "comment.updated",
+  COMMENT_DELETED: "comment.deleted",
+  NOTIFICATION_ALERT: "notification.alert",
+  INBOX_NEW: "inbox.new",
+  INBOX_UPDATE: "inbox.update",
+  INBOX_BULK_UPDATE: "inbox.bulk_update",
+  READ_POSITION_UPDATED: "read_position.updated",
+  THREAD_READ_POSITION_UPDATED: "thread_read_position.updated",
+  DISPATCH_NEW: "dispatch.new",
+  DISPATCH_RECEIVED: "dispatch.received",
+  DISPATCH_RESOLVED: "dispatch.resolved",
+  SCHEDULE_CREATED: "schedule.created",
+  SCHEDULE_UPDATED: "schedule.updated",
+  SCHEDULE_DELETED: "schedule.deleted",
+  SCHEDULE_FIRED: "schedule.fired",
+  BILLING_BALANCE_UPDATED: "billing.balance_updated",
+  BILLING_LOW_BALANCE: "billing.low_balance",
+  BILLING_MACHINE_STOPPED: "billing.machine_stopped",
+  BILLING_INSUFFICIENT: "billing.insufficient",
+  USER_UPDATED: "user.updated",
+  MACHINE_HELLO: "machine.hello",
+  MACHINE_AGENT_ATTACHED: "machine.agent.attached",
+  MACHINE_AGENT_DETACHED: "machine.agent.detached",
+  MACHINE_STOP: "machine.stop",
+  MACHINE_WORKSPACE_SETUP_REQUESTED: "machine.workspace.setup.requested",
+  MACHINE_FILESYSTEM_BROWSE: "machine.filesystem.browse",
+  MACHINE_UPDATE: "machine.update",
+  MACHINE_CONFIG_UPDATED: "machine.config.updated",
+  MACHINE_AGENT_CONFIG_UPDATED: "machine.agent_config.updated",
+  MACHINE_CLIP_SYNC: "machine.clip.sync",
+  MACHINE_BROWSER_PROFILE_LIFECYCLE: "machine.browser_profile.lifecycle",
+  MACHINE_BROWSER_PROFILE_VIEWER: "machine.browser_profile.viewer",
+  AGENT_NEW_SESSION: "agent.new_session",
+  CLIP_CREATED: "clip.created",
+  CLIP_REMOVED: "clip.removed",
+  CLIP_UPDATED: "clip.updated"
+};
+
+// ts/sdk/dist/project-task-client.js
+var ProjectTaskClient = class {
+  async createTask(orgId, data) {
+    return this.request("POST", ENDPOINTS.TASKS(orgId), data);
+  }
+  async getTasks(orgId, params) {
+    return this.request("GET", ENDPOINTS.TASKS(orgId), void 0, params);
+  }
+  async getTaskSubtaskSummary(orgId, params) {
+    return this.request("GET", ENDPOINTS.TASK_SUBTASK_SUMMARY(orgId), void 0, params);
+  }
+  async getTask(orgId, taskId) {
+    return this.request("GET", ENDPOINTS.TASK(orgId, taskId));
+  }
+  async updateTask(orgId, taskId, data) {
+    return this.request("PATCH", ENDPOINTS.TASK(orgId, taskId), data);
+  }
+  async deleteTask(orgId, taskId, opts) {
+    return this.request("DELETE", ENDPOINTS.TASK(orgId, taskId), void 0, opts?.force ? { force: "true" } : void 0);
+  }
+  async archiveTask(orgId, taskId) {
+    return this.request("POST", ENDPOINTS.TASK_ARCHIVE(orgId, taskId));
+  }
+  async restoreTask(orgId, taskId) {
+    return this.request("POST", ENDPOINTS.TASK_RESTORE(orgId, taskId));
+  }
+  async watchTask(orgId, taskId) {
+    return this.request("POST", ENDPOINTS.TASK_WATCH(orgId, taskId));
+  }
+  async unwatchTask(orgId, taskId) {
+    return this.request("DELETE", ENDPOINTS.TASK_WATCH(orgId, taskId));
+  }
+  async getTaskWatchers(orgId, taskId) {
+    const res = await this.request("GET", ENDPOINTS.TASK_WATCHERS(orgId, taskId));
+    return res.data;
+  }
+  async subscribeTaskMember(orgId, taskId, userId) {
+    return this.request("PUT", ENDPOINTS.TASK_SUBSCRIBER(orgId, taskId, userId));
+  }
+  async unsubscribeTaskMember(orgId, taskId, userId) {
+    return this.request("DELETE", ENDPOINTS.TASK_SUBSCRIBER(orgId, taskId, userId));
+  }
+  async watchThread(threadRootId) {
+    return this.request("POST", ENDPOINTS.MESSAGE_WATCH(threadRootId));
+  }
+  async unwatchThread(threadRootId) {
+    return this.request("DELETE", ENDPOINTS.MESSAGE_WATCH(threadRootId));
+  }
+  async getThreadWatchers(threadRootId) {
+    const res = await this.request("GET", ENDPOINTS.MESSAGE_WATCHERS(threadRootId));
+    return res.data;
+  }
+  async isWatchingThread(threadRootId) {
+    const res = await this.request("GET", ENDPOINTS.MESSAGE_WATCHING(threadRootId));
+    return res.watching;
+  }
+  async getSubtasks(orgId, taskId) {
+    const res = await this.request("GET", ENDPOINTS.TASK_SUBTASKS(orgId, taskId));
+    return res.data;
+  }
+  async createTaskRelation(orgId, taskId, data) {
+    return this.request("POST", ENDPOINTS.TASK_RELATIONS(orgId, taskId), data);
+  }
+  async getTaskRelations(orgId, taskId) {
+    const res = await this.request("GET", ENDPOINTS.TASK_RELATIONS(orgId, taskId));
+    return res.data;
+  }
+  async listTaskRelationsByTarget(orgId, params) {
+    const query = new URLSearchParams({
+      target_type: params.target_type,
+      target_id: params.target_id
+    });
+    const res = await this.request("GET", `${ENDPOINTS.TASK_RELATIONS_BY_TARGET(orgId)}?${query.toString()}`);
+    return res.data;
+  }
+  async deleteTaskRelation(orgId, taskId, relationId) {
+    return this.request("DELETE", ENDPOINTS.TASK_RELATION(orgId, taskId, relationId));
+  }
+  async getTaskComments(orgId, taskId, params) {
+    return this.request("GET", ENDPOINTS.TASK_COMMENTS(orgId, taskId), void 0, params);
+  }
+  async getTaskComment(orgId, taskId, commentId) {
+    return this.request("GET", ENDPOINTS.TASK_COMMENT(orgId, taskId, commentId));
+  }
+  async createTaskComment(orgId, taskId, data) {
+    return this.request("POST", ENDPOINTS.TASK_COMMENTS(orgId, taskId), data);
+  }
+  async updateTaskComment(orgId, taskId, commentId, data) {
+    return this.request("PATCH", ENDPOINTS.TASK_COMMENT(orgId, taskId, commentId), data);
+  }
+  async deleteTaskComment(orgId, taskId, commentId) {
+    return this.request("DELETE", ENDPOINTS.TASK_COMMENT(orgId, taskId, commentId));
+  }
+  async getTaskActivities(orgId, taskId, params) {
+    return this.request("GET", ENDPOINTS.TASK_ACTIVITIES(orgId, taskId), void 0, params);
+  }
+  async createProject(orgId, data) {
+    return this.request("POST", ENDPOINTS.PROJECTS(orgId), data);
+  }
+  async getProjects(orgId) {
+    const res = await this.request("GET", ENDPOINTS.PROJECTS(orgId));
+    return res.data;
+  }
+  async getProjectTaskSummary(orgId) {
+    return this.request("GET", ENDPOINTS.PROJECT_TASK_SUMMARY(orgId));
+  }
+  async getProject(orgId, projectId) {
+    return this.request("GET", ENDPOINTS.PROJECT(orgId, projectId));
+  }
+  async updateProject(orgId, projectId, data) {
+    return this.request("PATCH", ENDPOINTS.PROJECT(orgId, projectId), data);
+  }
+  async deleteProject(orgId, projectId) {
+    return this.request("DELETE", ENDPOINTS.PROJECT(orgId, projectId));
+  }
+};
+
+// ts/sdk/dist/task-label-client.js
+var TaskLabelClient = class extends ProjectTaskClient {
+  async getLabels(orgId) {
+    const response = await this.request("GET", ENDPOINTS.LABELS(orgId));
+    return response.data;
+  }
+  async createLabel(orgId, data) {
+    return this.request("POST", ENDPOINTS.LABELS(orgId), data);
+  }
+  async updateLabel(orgId, labelId, data) {
+    return this.request("PATCH", ENDPOINTS.LABEL(orgId, labelId), data);
+  }
+  async deleteLabel(orgId, labelId) {
+    return this.request("DELETE", ENDPOINTS.LABEL(orgId, labelId));
+  }
+  async addTaskLabels(orgId, taskId, data) {
+    return this.request("POST", ENDPOINTS.TASK_LABELS(orgId, taskId), data);
+  }
+  async removeTaskLabel(orgId, taskId, labelId) {
+    return this.request("DELETE", ENDPOINTS.TASK_LABEL(orgId, taskId, labelId));
+  }
 };
 
 // ts/sdk/dist/client.js
-var ParallClient = class _ParallClient {
+var ParallClient = class _ParallClient extends TaskLabelClient {
   baseUrl;
   wikiBaseUrl;
   token;
@@ -51860,6 +52402,7 @@ var ParallClient = class _ParallClient {
     return headers;
   }
   constructor(options = {}) {
+    super();
     this.baseUrl = options.baseUrl ?? "";
     this.wikiBaseUrl = options.wikiBaseUrl ?? this.baseUrl;
     this.token = options.token ?? null;
@@ -52157,6 +52700,44 @@ var ParallClient = class _ParallClient {
     const res = await this.request("GET", ENDPOINTS.TEAMS(orgId));
     return res.data;
   }
+  async getTeam(orgId, teamId) {
+    return this.request("GET", ENDPOINTS.TEAM(orgId, teamId));
+  }
+  /** Creating, renaming and deleting a team are org-admin actions. */
+  async createTeam(orgId, req) {
+    return this.request("POST", ENDPOINTS.TEAMS(orgId), req);
+  }
+  /**
+   * Renames a team. The slug cannot be changed — wiki ACL rows reference it as
+   * `@slug`, so the server answers 400 SLUG_IMMUTABLE if one is sent.
+   */
+  async updateTeam(orgId, teamId, req) {
+    return this.request("PATCH", ENDPOINTS.TEAM(orgId, teamId), req);
+  }
+  async deleteTeam(orgId, teamId) {
+    return this.request("DELETE", ENDPOINTS.TEAM(orgId, teamId));
+  }
+  /** Roster with display info; members who left the org are already excluded. */
+  async getTeamMembers(orgId, teamId) {
+    const res = await this.request("GET", ENDPOINTS.TEAM_MEMBERS(orgId, teamId));
+    return res.data;
+  }
+  /**
+   * Adds an org member (human or agent) to a team. Org admins and that team's
+   * managers may add ordinary members; adding straight to `manager` is an
+   * org-admin action.
+   */
+  async addTeamMember(orgId, teamId, req) {
+    return this.request("POST", ENDPOINTS.TEAM_MEMBERS(orgId, teamId), req);
+  }
+  /** Appointing or demoting a manager is org-admin only. */
+  async updateTeamMember(orgId, teamId, userId, req) {
+    return this.request("PATCH", ENDPOINTS.TEAM_MEMBER(orgId, teamId, userId), req);
+  }
+  /** A team manager may remove ordinary members; removing a peer manager is org-admin only. */
+  async removeTeamMember(orgId, teamId, userId) {
+    return this.request("DELETE", ENDPOINTS.TEAM_MEMBER(orgId, teamId, userId));
+  }
   async getOnlineMembers(orgId) {
     const res = await this.request("GET", ENDPOINTS.ORG_MEMBERS_ONLINE(orgId));
     return res.user_ids ?? [];
@@ -52931,145 +53512,34 @@ var ParallClient = class _ParallClient {
   }
   // ---- Platform Config ----
   /**
-   * Fetch platform config for the authenticated agent.
-   * Pass currentVersion to enable conditional fetch (If-None-Match / 304).
-   * Returns null when the server responds with 304 (config unchanged).
-   */
-  async getPlatformConfig(currentVersion) {
-    const url = `${this.baseUrlFor(ENDPOINTS.PLATFORM_CONFIG)}${ENDPOINTS.PLATFORM_CONFIG}`;
-    const extra = {};
-    if (currentVersion !== void 0) {
-      extra["If-None-Match"] = currentVersion;
-    }
-    const headers = this.buildHeaders(ENDPOINTS.PLATFORM_CONFIG, extra);
-    let res;
-    try {
-      res = await fetch(url, {
-        method: "GET",
-        headers,
-        signal: AbortSignal.timeout(15e3)
-      });
-    } catch (err) {
-      throw _ParallClient.normalizeFetchError(err);
-    }
-    if (res.status === 304)
-      return null;
-    if (!res.ok) {
-      const rawErrorBody = await res.json().catch(() => ({}));
-      throw buildApiError(res, rawErrorBody);
-    }
-    return res.json();
-  }
-  // ---- Tasks (org-scoped) ----
-  async createTask(orgId, data) {
-    return this.request("POST", ENDPOINTS.TASKS(orgId), data);
-  }
-  async getTasks(orgId, params) {
-    return this.request("GET", ENDPOINTS.TASKS(orgId), void 0, params);
-  }
-  async getTask(orgId, taskId) {
-    return this.request("GET", ENDPOINTS.TASK(orgId, taskId));
-  }
-  async updateTask(orgId, taskId, data) {
-    return this.request("PATCH", ENDPOINTS.TASK(orgId, taskId), data);
-  }
-  async deleteTask(orgId, taskId, opts) {
-    return this.request("DELETE", ENDPOINTS.TASK(orgId, taskId), void 0, opts?.force ? { force: "true" } : void 0);
-  }
-  async archiveTask(orgId, taskId) {
-    return this.request("POST", ENDPOINTS.TASK_ARCHIVE(orgId, taskId));
-  }
-  async restoreTask(orgId, taskId) {
-    return this.request("POST", ENDPOINTS.TASK_RESTORE(orgId, taskId));
-  }
-  async watchTask(orgId, taskId) {
-    return this.request("POST", ENDPOINTS.TASK_WATCH(orgId, taskId));
-  }
-  async unwatchTask(orgId, taskId) {
-    return this.request("DELETE", ENDPOINTS.TASK_WATCH(orgId, taskId));
-  }
-  async getTaskWatchers(orgId, taskId) {
-    const res = await this.request("GET", ENDPOINTS.TASK_WATCHERS(orgId, taskId));
-    return res.data;
-  }
-  async subscribeTaskMember(orgId, taskId, userId) {
-    return this.request("PUT", ENDPOINTS.TASK_SUBSCRIBER(orgId, taskId, userId));
-  }
-  async unsubscribeTaskMember(orgId, taskId, userId) {
-    return this.request("DELETE", ENDPOINTS.TASK_SUBSCRIBER(orgId, taskId, userId));
-  }
-  async watchThread(threadRootId) {
-    return this.request("POST", ENDPOINTS.MESSAGE_WATCH(threadRootId));
-  }
-  async unwatchThread(threadRootId) {
-    return this.request("DELETE", ENDPOINTS.MESSAGE_WATCH(threadRootId));
-  }
-  async getThreadWatchers(threadRootId) {
-    const res = await this.request("GET", ENDPOINTS.MESSAGE_WATCHERS(threadRootId));
-    return res.data;
-  }
-  async isWatchingThread(threadRootId) {
-    const res = await this.request("GET", ENDPOINTS.MESSAGE_WATCHING(threadRootId));
-    return res.watching;
-  }
-  async getSubtasks(orgId, taskId) {
-    const res = await this.request("GET", ENDPOINTS.TASK_SUBTASKS(orgId, taskId));
-    return res.data;
-  }
-  async createTaskRelation(orgId, taskId, data) {
-    return this.request("POST", ENDPOINTS.TASK_RELATIONS(orgId, taskId), data);
-  }
-  async getTaskRelations(orgId, taskId) {
-    const res = await this.request("GET", ENDPOINTS.TASK_RELATIONS(orgId, taskId));
-    return res.data;
-  }
-  async listTaskRelationsByTarget(orgId, params) {
-    const query = new URLSearchParams({
-      target_type: params.target_type,
-      target_id: params.target_id
-    });
-    const res = await this.request("GET", `${ENDPOINTS.TASK_RELATIONS_BY_TARGET(orgId)}?${query.toString()}`);
-    return res.data;
-  }
-  async deleteTaskRelation(orgId, taskId, relationId) {
-    return this.request("DELETE", ENDPOINTS.TASK_RELATION(orgId, taskId, relationId));
-  }
-  // ---- Task Comments ----
-  async getTaskComments(orgId, taskId, params) {
-    return this.request("GET", ENDPOINTS.TASK_COMMENTS(orgId, taskId), void 0, params);
-  }
-  async getTaskComment(orgId, taskId, commentId) {
-    return this.request("GET", ENDPOINTS.TASK_COMMENT(orgId, taskId, commentId));
-  }
-  async createTaskComment(orgId, taskId, data) {
-    return this.request("POST", ENDPOINTS.TASK_COMMENTS(orgId, taskId), data);
-  }
-  async updateTaskComment(orgId, taskId, commentId, data) {
-    return this.request("PATCH", ENDPOINTS.TASK_COMMENT(orgId, taskId, commentId), data);
-  }
-  async deleteTaskComment(orgId, taskId, commentId) {
-    return this.request("DELETE", ENDPOINTS.TASK_COMMENT(orgId, taskId, commentId));
-  }
-  // ---- Task Activities ----
-  async getTaskActivities(orgId, taskId, params) {
-    return this.request("GET", ENDPOINTS.TASK_ACTIVITIES(orgId, taskId), void 0, params);
-  }
-  // ---- Projects (org-scoped) ----
-  async createProject(orgId, data) {
-    return this.request("POST", ENDPOINTS.PROJECTS(orgId), data);
-  }
-  async getProjects(orgId) {
-    const res = await this.request("GET", ENDPOINTS.PROJECTS(orgId));
-    return res.data;
-  }
-  async getProject(orgId, projectId) {
-    return this.request("GET", ENDPOINTS.PROJECT(orgId, projectId));
-  }
-  async updateProject(orgId, projectId, data) {
-    return this.request("PATCH", ENDPOINTS.PROJECT(orgId, projectId), data);
-  }
-  async deleteProject(orgId, projectId) {
-    return this.request("DELETE", ENDPOINTS.PROJECT(orgId, projectId));
+   * Fetch platform config for the authenticated agent.
+   * Pass currentVersion to enable conditional fetch (If-None-Match / 304).
+   * Returns null when the server responds with 304 (config unchanged).
+   */
+  async getPlatformConfig(currentVersion) {
+    const url = `${this.baseUrlFor(ENDPOINTS.PLATFORM_CONFIG)}${ENDPOINTS.PLATFORM_CONFIG}`;
+    const extra = {};
+    if (currentVersion !== void 0) {
+      extra["If-None-Match"] = currentVersion;
+    }
+    const headers = this.buildHeaders(ENDPOINTS.PLATFORM_CONFIG, extra);
+    let res;
+    try {
+      res = await fetch(url, {
+        method: "GET",
+        headers,
+        signal: AbortSignal.timeout(15e3)
+      });
+    } catch (err) {
+      throw _ParallClient.normalizeFetchError(err);
+    }
+    if (res.status === 304)
+      return null;
+    if (!res.ok) {
+      const rawErrorBody = await res.json().catch(() => ({}));
+      throw buildApiError(res, rawErrorBody);
+    }
+    return res.json();
   }
   // ---- Schedules (org-scoped) ----
   async createSchedule(orgId, input) {
@@ -53208,12 +53678,26 @@ var ParallClient = class _ParallClient {
   }
   /**
    * WeChat tier-B read verb (agent-only; internal research preview): the
-   * account's address book — friend wxids, saved group room ids, followed
-   * official accounts. Same live gate as the send verb.
+   * account's address book — friends/chatrooms enriched with display names,
+   * followed official accounts. Same live gate as the send verb.
    */
   async listWechatContacts(orgId) {
     return this.request("GET", ENDPOINTS.WECHAT_CONTACTS(orgId));
   }
+  /**
+   * WeChat tier-B read verb (agent-only): the connected account's identity
+   * (wxid / alias / nickName / app id).
+   */
+  async wechatProfile(orgId) {
+    return this.request("GET", ENDPOINTS.WECHAT_PROFILE(orgId));
+  }
+  /**
+   * WeChat tier-B read verb (agent-only): live online probe + identity +
+   * the platform's offline record.
+   */
+  async wechatStatus(orgId) {
+    return this.request("GET", ENDPOINTS.WECHAT_STATUS(orgId));
+  }
   async listChannelConversations(orgId, connectionId) {
     return this.request("GET", ENDPOINTS.CHANNEL_CONNECTION_CONVERSATIONS(orgId, connectionId));
   }
@@ -53549,6 +54033,7 @@ var ParallClient = class _ParallClient {
     return this.request("PATCH", ENDPOINTS.NOTIFICATION_PREFERENCES, { prefs });
   }
   // ---- Feature Flags (org-scoped, server-evaluated) ----
+  /** Omit orgId to resolve deployment capabilities before joining an org. */
   async getFeatureFlags(orgId) {
     return this.request("GET", ENDPOINTS.FEATURE_FLAGS(orgId));
   }
@@ -53565,6 +54050,44 @@ var ParallClient = class _ParallClient {
       timeoutMs: 185e3
     });
   }
+  /** Queue a template deployment and poll its durable deployment row. Each
+   * request is short-lived; closing the client does not cancel server work. */
+  async deployTemplateAsync(orgId, request3, idempotencyKey) {
+    const queue = () => this.request("POST", ENDPOINTS.TEMPLATE_DEPLOYMENTS(orgId), {
+      ...request3,
+      async: true,
+      idempotency_key: idempotencyKey
+    });
+    let result;
+    for (let attempt = 0; attempt < 2 && result === void 0; attempt += 1) {
+      try {
+        result = await queue();
+      } catch (error) {
+        if (!(error instanceof ApiError) || error.status !== 0 && error.status < 500)
+          throw error;
+      }
+    }
+    if (result === void 0) {
+      throw new ApiError(0, "Template deployment request outcome is unknown", "NETWORK_ERROR");
+    }
+    const deadline = Date.now() + 30 * 60 * 1e3;
+    while (result.status === "queued" || result.status === "deploying") {
+      if (Date.now() >= deadline) {
+        throw new ApiError(0, "Template deployment is still running", "REQUEST_TIMEOUT");
+      }
+      await new Promise((resolve3) => setTimeout(resolve3, 2e3));
+      try {
+        result = await this.request("GET", ENDPOINTS.TEMPLATE_DEPLOYMENT(orgId, result.deployment_id));
+      } catch (error) {
+        if (!(error instanceof ApiError) || error.status !== 0 && error.status < 500)
+          throw error;
+      }
+    }
+    if (result.status !== "deployed") {
+      throw new ApiError(500, result.error?.message ?? "Template deployment failed", result.error?.code);
+    }
+    return result;
+  }
   async getTemplateDeployment(orgId, deploymentId) {
     return this.request("GET", ENDPOINTS.TEMPLATE_DEPLOYMENT(orgId, deploymentId));
   }
@@ -53779,6 +54302,11 @@ var ParallClient = class _ParallClient {
   async uninstallRegistryClip(orgId, clipId) {
     await this.request("DELETE", ENDPOINTS.ORG_CLIP_UNINSTALL(orgId, clipId));
   }
+  /** Best-effort provider revoke followed by atomic local removal of an
+   * installed Official MCP Clip and all org-owned connection state. */
+  async removeOfficialMCPClip(orgId, clipId) {
+    return this.request("DELETE", ENDPOINTS.ORG_CLIP_MCP_REMOVE(orgId, clipId));
+  }
   /** List the org's installed registry clips (full entries). */
   async listInstalledRegistryClips(orgId) {
     const resp = await this.request("GET", ENDPOINTS.ORG_CLIPS_INSTALLED(orgId));
@@ -53965,12 +54493,14 @@ var ParallClient = class _ParallClient {
   async deleteClipConnection(orgId, connId) {
     return this.request("DELETE", ENDPOINTS.CLIP_CONNECTION(orgId, connId));
   }
-  // ---- MCP clip server config (cap:clip-mcp; publisher-org only) ----
+  // ---- MCP clip server config (same-org or reviewed Official OAuth) ----
   /**
-   * Read the redacted MCP config. 404 NOT_FOUND when the clip has none yet;
-   * 403 MCP_CROSS_ORG_DISABLED for a cross-org installed clip (the whole
-   * mcp-config family is publisher-org property, reads included). `version`
-   * is the CAS token the mutations echo via If-Match.
+   * Read the redacted MCP config. 404 NOT_FOUND when the clip has none yet —
+   * and also when a cross-org clip is not public + approved + installed, which
+   * reads as nonexistent rather than refused (same existence-hiding as exec).
+   * A cross-org clip that IS installed and approved reads fine regardless of
+   * auth shape; what may then be configured is decided per credential owner.
+   * `version` is the CAS token the mutations echo via If-Match.
    */
   async getClipMCPConfig(orgId, clipId) {
     return this.request("GET", ENDPOINTS.ORG_CLIP_MCP_CONFIG(orgId, clipId));
@@ -54007,13 +54537,26 @@ var ParallClient = class _ParallClient {
    * List the org's MCP connections for a clip, default first — one row per
    * connection (credential slot), WITHOUT the tools snapshot (`tool_count`
    * summarizes it; the per-config GET carries the full snapshot). Same
-   * family-wide fence as the singular GET: publisher-org members only —
-   * cross-org installs get `403 MCP_CROSS_ORG_DISABLED`, and with
+   * family-wide fence as the singular GET: same-org clips, or a cross-org clip
+   * that is public + approved + installed; anything else reads as
+   * `404 NOT_FOUND`. An installed cross-org clip with no connection yet lists
+   * as an empty array — including one whose approved auth mode cannot be
+   * configured at all (auth=none), which the write path is what refuses. With
    * `cap:clip-mcp` off the route is not registered at all.
    */
   async listClipMCPConnections(orgId, clipId) {
     return this.request("GET", ENDPOINTS.ORG_CLIP_MCP_CONFIGS(orgId, clipId));
   }
+  /** Start a new Official OAuth MCP connection with the platform-owned app.
+   * Omitting oauth_client is load-bearing: the server resolves the exact
+   * reviewed-version binding and never falls back to DCR/CIMD cross-org. */
+  async createClipMCPOAuthConnection(orgId, clipId, serverUrl, alias) {
+    return this.request("POST", ENDPOINTS.ORG_CLIP_MCP_CONFIGS(orgId, clipId), {
+      server_url: serverUrl,
+      auth_type: "oauth",
+      ...alias ? { alias } : {}
+    });
+  }
   /**
    * Re-run tools/list and replace the cached snapshot (org-admin only).
    * Deliberately does NOT advance the CAS version, so an in-flight edit in
@@ -54435,211 +54978,23 @@ var ParallWs = class {
   }
 };
 
-// ts/agent-core/dist/event-format.js
-function sanitizeMeta(value) {
-  return value.replace(/[\r\n]+/g, " ").replace(/[[\]|]/g, " ").trim();
-}
-function buildEventBody(event) {
-  const lines = [];
-  if (event.type === "message") {
-    lines.push(`[Event: message.new]`);
-    const chatLabel = event.targetName ? `"${event.targetName}" (prll://${event.targetId})` : `prll://${event.targetId}`;
-    lines.push(`[Chat: ${chatLabel} | type: ${event.targetType ?? "unknown"}]`);
-    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
-    lines.push(`[Message ID: prll://${event.messageId}]`);
-    if (event.threadRootId) {
-      const threadMeta = [
-        `prll://${event.threadRootId}`,
-        event.threadReplyCount != null ? `${event.threadReplyCount} replies` : null,
-        event.threadUnreadCount != null && event.threadUnreadCount > 0 ? `${event.threadUnreadCount} unread` : null,
-        event.threadUnreadCount != null && event.threadUnreadCount > 0 && event.threadUnreadSince ? `since: prll://${event.threadUnreadSince}` : null
-      ].filter(Boolean).join(" | ");
-      lines.push(`[Thread: ${threadMeta}]`);
-    }
-    if (event.unreadCount != null && event.unreadCount > 1) {
-      const countStr = event.unreadCount >= 1e3 ? "999+" : String(event.unreadCount);
-      const sinceStr = event.unreadSince ? ` | since: prll://${event.unreadSince}` : "";
-      let line = `[Unread: ${countStr} messages${sinceStr}]`;
-      if (event.unreadCount > 50)
-        line += ` \u2014 fetch recent context with --limit, not all`;
-      lines.push(line);
-    }
-    if (event.noReply)
-      lines.push(`[Hint: no_reply]`);
-    if (event.attachments?.length) {
-      for (const att of event.attachments) {
-        const sizeStr = att.fileSize >= 1048576 ? `${(att.fileSize / 1048576).toFixed(1)}MB` : `${Math.round(att.fileSize / 1024)}KB`;
-        lines.push(`[Attachment: prll://${att.id} | ${sanitizeMeta(att.mimeType)} | ${sizeStr} | ${sanitizeMeta(att.fileName)}]`);
-      }
-    }
-    lines.push("", event.body);
-  } else if (event.type === "task_comment") {
-    lines.push(`[Event: task.comment.created]`);
-    const taskLabel = event.targetName ? `${event.targetName} (prll://${event.targetId})` : `prll://${event.targetId}`;
-    lines.push(`[Task: ${taskLabel}]`);
-    if (event.deliveryReason)
-      lines.push(`[Delivery: ${sanitizeMeta(event.deliveryReason)}]`);
-    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
-    lines.push(`[Comment ID: prll://${event.messageId}]`);
-    lines.push("", event.body);
-  } else if (event.type === "wiki_comment") {
-    lines.push(`[Event: wiki.comment.created]`);
-    const target = event.replyTargetUri ?? `prll://${event.targetId}`;
-    if (event.targetType === "changeset") {
-      lines.push(`[Wiki Changeset: ${target}]`);
-    } else {
-      lines.push(`[Wiki: ${event.targetName ? `${sanitizeMeta(event.targetName)} (${target})` : target}]`);
-    }
-    if (event.deliveryReason)
-      lines.push(`[Delivery: ${sanitizeMeta(event.deliveryReason)}]`);
-    lines.push(`[From: ${event.senderName} (prll://${event.senderId})]`);
-    lines.push(`[Comment ID: prll://${event.messageId}]`);
-    lines.push("", event.body);
-  } else if (event.type === "approval") {
-    lines.push(`[Event: approval.decided]`);
-    lines.push(`[Approval: prll://${event.messageId}]`);
-    lines.push(`[Chat: prll://${event.targetId}]`);
-    lines.push(`[Decided by: ${event.senderName} (prll://${event.senderId})]`);
-    lines.push("", event.body);
-  } else if (event.type === "schedule") {
-    lines.push(`[Event: schedule.fired]`);
-    lines.push(`[Schedule: prll://${event.targetId}]`);
-    lines.push(`[Run: prll://${event.messageId}]`);
-    if (event.scheduledFireAt)
-      lines.push(`[Scheduled at: ${sanitizeMeta(event.scheduledFireAt)}]`);
-    if (event.attachedUri)
-      lines.push(`[Attached: ${sanitizeMeta(event.attachedUri)}]`);
-    lines.push("", event.body);
-  } else if (event.type === "channel_message") {
-    lines.push(`[Event: channel.message]`);
-    const providerLabel = sanitizeMeta(event.channelProvider ?? "external IM");
-    const convLabel = event.channelExternalConversationId ? `${sanitizeMeta(event.channelExternalConversationId)} (${sanitizeMeta(event.channelConversationType ?? "conversation")})` : sanitizeMeta(event.channelConversationType ?? "conversation");
-    lines.push(`[Channel: ${providerLabel} | conversation: ${convLabel}]`);
-    lines.push(`[From: ${sanitizeMeta(event.senderName)} (external user, not a Parall member)]`);
-    if (event.channelExternalMessageId) {
-      lines.push(`[External message ID: ${sanitizeMeta(event.channelExternalMessageId)}]`);
-    }
-    lines.push(`[Audience: this conversation lives on ${providerLabel}, OUTSIDE Parall. Readers cannot open prll:// links, Parall cards, or internal attachments \u2014 never include them in replies. Write plain conversational text.]`);
-    lines.push("", event.body);
-  } else if (event.type === "external_trigger") {
-    lines.push(`[Event: external.trigger]`);
-    lines.push(`[Trigger: prll://${event.targetId}]`);
-    lines.push(`[Run: prll://${event.messageId}]`);
-    if (event.externalConnectionId) {
-      const label = event.externalConnectionDisplayName ? `${sanitizeMeta(event.externalConnectionDisplayName)} (prll://${event.externalConnectionId})` : `prll://${event.externalConnectionId}`;
-      lines.push(`[Connection: ${label}]`);
-    }
-    if (event.externalIngressEventId)
-      lines.push(`[Ingress: prll://${event.externalIngressEventId}]`);
-    if (event.attachedUri)
-      lines.push(`[Attached: ${sanitizeMeta(event.attachedUri)}]`);
-    if (event.externalConnectionSourceType) {
-      lines.push(`[Source: ${sanitizeMeta(event.externalConnectionSourceType)}]`);
-    }
-    if (event.externalIngressEventType) {
-      lines.push(`[External event: ${sanitizeMeta(event.externalIngressEventType)}]`);
-    }
-    lines.push("", event.body);
-  } else {
-    lines.push(`[Event: task.assigned]`);
-    const taskLabel = event.targetName ? `${event.targetName} (prll://${event.targetId})` : `prll://${event.targetId}`;
-    lines.push(`[Task: ${taskLabel}]`);
-    lines.push(`[Assigned by: ${event.senderName} (prll://${event.senderId})]`);
-    lines.push("", event.body);
-  }
-  return lines.join("\n") + buildSendMessageHint(event);
-}
-function buildEventBodyForForkResult(event) {
-  return buildEventBody(event).replace(/\n<system-reminder>[\s\S]*<\/system-reminder>$/, "");
-}
-function buildSendMessageHint(event) {
-  if (event.noReply)
-    return "";
-  if (event.type === "wiki_comment" && event.replyTargetUri) {
-    const where = event.targetType === "changeset" ? "this changeset comment" : "this wiki page";
-    return `
-<system-reminder>To reply on ${where}, run: \`parall comments add --target "${event.replyTargetUri}" --body "..."\` (read the thread first with \`parall comments list --target "${event.replyTargetUri}"\`). To message someone instead, use \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
-  }
-  if (event.targetId.startsWith("cht_")) {
-    if (event.threadRootId) {
-      return `
-<system-reminder>To reply in this thread, run \`parall messages send prll://${event.targetId} --thread-root-id ${sanitizeMeta(event.threadRootId)} --text-file - <<'EOF'\` \u2026 \`EOF\` \u2014 the quoted heredoc keeps \`$\`, backticks and apostrophes literal (plain \`--text "$1,000"\` sends \`,000\`). Your plain text output is not delivered to the chat.</system-reminder>`;
-    }
-    return `
-<system-reminder>To reply, run \`parall messages send prll://${event.targetId} --text-file - <<'EOF'\` \u2026 \`EOF\` \u2014 the quoted heredoc keeps \`$\`, backticks and apostrophes literal (plain \`--text "$1,000"\` sends \`,000\`). Your plain text output is not delivered to the chat.</system-reminder>`;
-  }
-  if (event.targetId.startsWith("tsk_")) {
-    return `
-<system-reminder>To respond, use the CLI: \`parall tasks update\` / \`parall tasks comments add\`. To message someone, use \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
-  }
-  if (event.targetId.startsWith("sch_")) {
-    return `
-<system-reminder>To communicate, use the CLI: \`parall messages send\` / \`parall dm\`. Your plain text output is not delivered.</system-reminder>`;
-  }
-  if (event.type === "channel_message") {
-    if (event.channelCliCapable) {
-      if (event.channelProvider === "slack") {
-        const channelArg = event.channelExternalConversationId ? ` --channel "${event.channelExternalConversationId}"` : " --channel <conversation id from this event>";
-        const replyTo = event.channelExternalMessageId ? ` --reply-to "${event.channelExternalMessageId}"` : "";
-        return `
-<system-reminder>To reply, use the platform verb: \`parall slack send${channelArg}${replyTo} --text <your reply>\`. In channels --reply-to is REQUIRED (the reply lands in that message's thread); in DMs it is optional (DMs are linear). \`parall slack send\` is the ONLY outbound path \u2014 your plain text output is NOT delivered to the external conversation.</system-reminder>`;
-      }
-      if (event.channelProvider === "wechat") {
-        const toArg = event.channelExternalConversationId ? ` --to "${event.channelExternalConversationId}"` : " --to <wxid from this event>";
-        const atArg = event.channelConversationType === "group" ? event.senderId && event.senderId !== "external" ? ` --at "${event.senderId}"` : " --at <wxid of the person you are answering>" : "";
-        return `
-<system-reminder>To reply, use the platform verb: \`parall wechat send${toArg}${atArg} --text <your reply>\`. In group chats, --at @-mentions the person you are answering. \`parall wechat send\` is the ONLY outbound path \u2014 your plain text output is NOT delivered to the external conversation.</system-reminder>`;
-      }
-      if (!event.channelProvider) {
-        return `
-<system-reminder>To reply, use the channel capability granted in your system prompt \u2014 for Feishu conversations that is \`lark-cli im\`, for Slack it is \`parall slack send\` (pass the message id from this event as --reply-to), for WeChat it is \`parall wechat send\`. That capability is the ONLY outbound path \u2014 your plain text output is NOT delivered to the external conversation.</system-reminder>`;
-      }
-      const convRef = event.channelExternalConversationId ? `chat_id "${event.channelExternalConversationId}"` : "the conversation id named in this event";
-      const threadAlt = event.channelExternalMessageId ? ` To reply threaded to this specific message, reference message_id "${event.channelExternalMessageId}".` : "";
-      return `
-<system-reminder>To reply, use the official Feishu CLI on your PATH: send a message to ${convRef} with \`lark-cli im\` (see \`lark-cli im --help\` for send syntax; auth is provisioned automatically).${threadAlt} lark-cli is the ONLY outbound path \u2014 your plain text output is NOT delivered to the external conversation.</system-reminder>`;
-    }
-    const platform = event.channelProvider ?? "the external platform";
-    return `
-<system-reminder>This message arrived from ${platform}, but outbound replies are currently disabled for this org (no channel capability granted). Do NOT attempt to reply on the external platform. If action is needed, surface it inside Parall (\`parall messages send\` / \`parall dm\`). Your plain text output is not delivered anywhere.</system-reminder>`;
-  }
-  if (event.type === "external_trigger" || event.targetId.startsWith("xtr_")) {
-    return `
-<system-reminder>This external trigger is incoming-only. Your plain text output is not sent back to the external provider. To communicate in Parall, use \`parall messages send\` / \`parall dm\`; provider-specific outbound actions require a separate capability.</system-reminder>`;
-  }
-  return "";
-}
-function buildForkScopePrefix(event) {
-  const targetLabel = event.targetName ? `"${event.targetName}" (prll://${event.targetId})` : `prll://${event.targetId}`;
-  return `[Fork scope: You are a parallel worker forked from the main session to handle ${targetLabel}. The conversation history above belongs to the main session's in-progress dispatch \u2014 do NOT continue it or complete it, or produce external output (comments, messages) for work visible there. The main session owns its own output.
-
-Only act on the event below within your target scope. If your event reveals findings about the main session's work, report them in your summary \u2014 do not post them externally.
-
-End with a brief "Fork summary" of actions taken and decisions made.]
+// ts/agent-core/dist/lane-ledger.js
+import * as fs2 from "node:fs";
 
-`;
+// ts/agent-core/dist/lane-key.js
+import * as path2 from "node:path";
+function laneKeyForTarget(targetUri, threadRootId) {
+  return Buffer.from(`${targetUri}
+${threadRootId ?? ""}`, "utf8").toString("base64url");
 }
-function buildForkResultPrefix(results) {
-  if (!results.length)
-    return "";
-  const blocks = results.map((result) => {
-    const lines = [];
-    for (const body of result.eventBodies) {
-      lines.push(body);
-    }
-    lines.push(`[This event was handled by a parallel fork session. Do NOT re-handle, re-reply, or duplicate work for it.]`);
-    lines.push(`[Fork summary: ${result.agentSummary ? sanitizeMeta(result.agentSummary) : "No fork summary available \u2014 the fork completed without producing a text summary. Check the target chat/task for any actions the fork already took before acting."}]`);
-    if (result.actions.length)
-      lines.push(`[Fork actions: ${result.actions.join("; ")}]`);
-    if (result.historyPath)
-      lines.push(`[Fork history: ${result.historyPath}]`);
-    return lines.join("\n");
-  });
-  return blocks.join("\n\n") + "\n\n---\n\n";
+function dispatchLaneContextDir(stateDir) {
+  return path2.join(stateDir, "dispatch-lane-context");
+}
+function laneContextFilePath(contextDir, targetUri, threadRootId) {
+  return path2.join(contextDir, `${laneKeyForTarget(targetUri, threadRootId)}.json`);
 }
 
 // ts/agent-core/dist/lane-ledger.js
-import * as fs from "node:fs";
 var LedgerUnsupportedError = class extends Error {
 };
 function bindLaneSession(lane, agentSessionId) {
@@ -55063,7 +55418,7 @@ var LaneLedger = class {
     const contextPath = this.laneContextPath(lane);
     for (const p of [contextPath, contextPath.replace(/\.json$/, ".reply-state.json")]) {
       try {
-        fs.rmSync(p, { force: true });
+        fs2.rmSync(p, { force: true });
       } catch {
       }
     }
@@ -55424,81 +55779,6 @@ async function consumeMessageWorkItem(host, item) {
   }
 }
 
-// ts/agent-core/dist/session-state.js
-function normalizeSessionKey(sessionKey) {
-  return sessionKey.toLowerCase();
-}
-var sessionChatIdMap = /* @__PURE__ */ new Map();
-var sessionMessageIdMap = /* @__PURE__ */ new Map();
-var dispatchMessageIdMap = /* @__PURE__ */ new Map();
-var dispatchNoReplyMap = /* @__PURE__ */ new Map();
-function setSessionChatId(sessionKey, chatId) {
-  sessionChatIdMap.set(normalizeSessionKey(sessionKey), chatId);
-}
-function setSessionMessageId(sessionKey, messageId) {
-  sessionMessageIdMap.set(normalizeSessionKey(sessionKey), messageId);
-}
-function clearSessionMessageId(sessionKey) {
-  sessionMessageIdMap.delete(normalizeSessionKey(sessionKey));
-}
-function setDispatchMessageId(sessionKey, messageId) {
-  dispatchMessageIdMap.set(normalizeSessionKey(sessionKey), messageId);
-}
-function clearDispatchMessageId(sessionKey) {
-  dispatchMessageIdMap.delete(normalizeSessionKey(sessionKey));
-}
-function setDispatchNoReply(sessionKey, noReply) {
-  dispatchNoReplyMap.set(normalizeSessionKey(sessionKey), noReply);
-}
-function clearDispatchNoReply(sessionKey) {
-  dispatchNoReplyMap.delete(normalizeSessionKey(sessionKey));
-}
-var dispatchMetricsMap = /* @__PURE__ */ new Map();
-function resetDispatchMetrics(sessionKey) {
-  dispatchMetricsMap.set(normalizeSessionKey(sessionKey), {
-    deliver_text_chunks: 0,
-    deliver_text_chars: 0,
-    message_send_attempts: 0,
-    message_send_successes: 0,
-    no_reply_called: false,
-    tool_call_count: 0,
-    started_at: Date.now()
-  });
-}
-function getDispatchMetrics(sessionKey) {
-  return dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
-}
-function clearDispatchMetrics(sessionKey) {
-  dispatchMetricsMap.delete(normalizeSessionKey(sessionKey));
-}
-function recordDeliverText(sessionKey, charCount) {
-  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
-  if (!m)
-    return;
-  m.deliver_text_chunks++;
-  m.deliver_text_chars += charCount;
-}
-function recordMessageSend(sessionKey, success) {
-  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
-  if (!m)
-    return;
-  m.message_send_attempts++;
-  if (success)
-    m.message_send_successes++;
-}
-function recordNoReply(sessionKey) {
-  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
-  if (!m)
-    return;
-  m.no_reply_called = true;
-}
-function recordToolCall(sessionKey) {
-  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
-  if (!m)
-    return;
-  m.tool_call_count++;
-}
-
 // ts/agent-core/dist/routing.js
 var MAX_CONCURRENT_FORKS = 20;
 var defaultRoutingStrategy = (event, state) => {
@@ -55518,472 +55798,8 @@ function routeTrigger(event, state, strategy = defaultRoutingStrategy) {
   if (existingForkKey)
     return { action: "buffer-fork", forkKey: existingForkKey };
   if (!state.mainDispatching)
-    return { action: "main" };
-  return strategy(event, state);
-}
-
-// ts/agent-core/dist/prompt-fragments.js
-function identityFromMe(me) {
-  return {
-    userId: me.id,
-    displayName: me.display_name,
-    title: me.public_profile?.title || void 0,
-    publicDescription: me.public_profile?.description || void 0,
-    // `||` on purpose: an empty-string instructions must also fall back to
-    // the deprecated description alias (empty means "unset" on this wire).
-    instructions: me.agent_profile?.instructions || me.agent_profile?.description || void 0
-  };
-}
-var PRLL_IDENTITY_BASE = `## You on Parall
-
-Parall is a shared workspace where humans and agents work side by side as equals.
-You are a participant here, not a service. You hold tasks, own decisions, and are
-accountable for the work you take on \u2014 the same way a human teammate is.
-
-The people and agents around you are collaborators, not users to serve. Be honest,
-be direct, and care about the outcome of the work \u2014 not just the request in front
-of you.`;
-function sanitizeProfileField(value) {
-  return value.replace(/[\r\n]+/g, " ").replace(/`/g, "'").trim();
-}
-function sanitizeProfileBlock(value) {
-  return value.replace(/\r\n?/g, "\n").trim();
-}
-function buildIdentity(agent) {
-  if (!agent)
-    return PRLL_IDENTITY_BASE;
-  const name = sanitizeProfileField(agent.displayName);
-  const lines = [PRLL_IDENTITY_BASE, "", "### Your Parall Identity", ""];
-  lines.push(`You are **${name}** (\`prll://${agent.userId}\`).`);
-  const title = agent.title ? sanitizeProfileField(agent.title) : "";
-  if (title)
-    lines.push(`Title: ${title}`);
-  const about = agent.publicDescription ? sanitizeProfileField(agent.publicDescription) : "";
-  if (about)
-    lines.push(`About: ${about}`);
-  const instructions = sanitizeProfileBlock(agent.instructions ?? agent.description ?? "");
-  if (instructions) {
-    lines.push("", "### Private instructions from your organization admins", "", instructions);
-  }
-  lines.push("", `When you see \`${agent.userId}\` or \`prll://${agent.userId}\` in messages, mentions, or events \u2014 that's you.`);
-  return lines.join("\n");
-}
-var PRLL_BEHAVIOR = `## How to work here
-
-### Move work forward
-Don't wait for instructions. If you see the next step, take it. If something is
-ambiguous, clarify once and proceed. If you're blocked, say what's blocking you
-\u2014 don't go silent. Initiative is expected.
-
-Use schedules as self-reminders \u2014 re-checking blocked work, chasing unanswered
-requests, verifying something landed. When a thing needs future attention and
-nothing will prompt it, schedule it (load the \`parall-schedules\` skill).
-
-### Work in the open
-Nothing you do exists until the system can see it. Your progress, decisions,
-blockers, and results need to live in tasks, comments, messages, or wiki pages
-\u2014 otherwise the organization is blind to your work, and so is the next agent
-who picks up where you left off. Leave traces as you go, not at the end.
-
-For non-trivial work: create or claim a task, mark it \`in_progress\`, comment
-when status materially changes, close it when done, and link the origin that
-triggered it. Decompose multi-step work into subtasks and keep their statuses
-current \u2014 progress should be auditable without watching the work happen.
-Details: load the \`parall-tasks\` skill.
-
-### Done means landed
-Producing output does not complete a task. Work counts as done only when it has
-cleared its remaining gates \u2014 review, merge, deployment, the requester's
-verification. Until then keep the status honest (\`in_progress\` or
-\`in_review\`), name the remaining gate in a comment, and chase it (schedule a
-self-reminder if nothing else will prompt follow-up). Never mark done what a
-human still has to accept.
-
-### Sessions, forks, and what survives
-Sessions end and context compacts. Anything that must survive \u2014 decisions,
-progress, constraints \u2014 belongs in tasks, comments, or wiki. Future sessions
-read the workspace, not this conversation.
-
-Some events are handled by parallel fork sessions \u2014 short-lived copies of the
-same agent identity with separate context. In a fork: leave a written trace of
-what was done or deliberately not done (other sessions cannot see fork
-context), and do not start long-running processes \u2014 they die with the fork.
-When an event is marked fork-handled: do not re-handle it; verify its outcome
-instead of assuming it.
-
-### Communicate like a teammate
-Match the conversation \u2014 concise in chat, thorough in docs, plain language over
-jargon. Say what matters; stop when you're done. Don't narrate every tool call
-or pad replies to seem thorough.
-
-Match the language of the person you're replying to. If someone writes in
-Chinese, reply in Chinese. If in English, reply in English. Never force a
-language switch unless explicitly asked.
-
-Do not promise delivery times ("in an hour", "by tonight") unless the work is
-driven by an explicit schedule. Scope visibly; report when actually done.
-
-### Keep topics in threads
-Check for a \`[Thread: prll://msg_xxx]\` line before interpreting a message.
-Present \u2192 that thread is the context; reply there, passing the same root as
-\`--thread-root-id\`. Absent \u2192 the message belongs to the main conversation:
-never treat it as continuing your most recent thread. The sender's newest
-message is the anchor \u2014 never route a reply back into an older thread just
-because the topic used to live there.
-
-Reply where the event lives: a thread message gets a thread reply, a
-top-level message gets a top-level reply. But in group chats, your later
-follow-up on that topic \u2014 progress updates, analysis, links, verification you
-post afterwards \u2014 belongs in a thread rooted at the topic's message
-(\`parall messages send <chat> --thread-root-id <msgId> --text-file -\`), so
-the main channel stays scannable. Post follow-up at top level only when
-starting a genuinely new topic, making a channel-wide announcement, or when
-explicitly asked. Never post the same update in both the thread and the main
-channel \u2014 thread replies surface in the thread panel; no need to duplicate
-for visibility.
-
-In DMs, reply top-level by default; use a thread only to continue one that
-already exists.
-
-### Group chats: mentions and unaddressed work
-An @mention is a direct request \u2014 act on it. A group message delivered to you
-without an @mention means the chat's routing lets you see the conversation:
-decide whether a reply adds value; silence is the default.
-
-A message without an @mention is not an open invitation. Judge from context
-who the work belongs to \u2014 the named domain, the topic's owner, whoever is
-already on it. If it belongs to someone else, leave it. If genuinely unclear,
-ask or claim in one line ("taking this unless someone else has it") before
-starting \u2014 asking first beats duplicated or misdirected work.
-
-### Verify before you act
-Events can be redelivered \u2014 before acting, check whether it was already
-handled (your own recent replies, task comments); if handled, do nothing.
-Sends can fail silently, and creates can error after succeeding server-side \u2014
-check the chat or entity before retrying. Never blind-retry a mutating call.
-
-### Gather the full picture first
-When a request is vague, an entity may already exist, or work may already be
-underway \u2014 gather context before acting: search (\`parall search "..."\`),
-check existing tasks/chats/wiki, read the surrounding conversation. Act on the
-full picture, not the fragment that arrived in the event.
-
-### Report only work that ran
-If a scheduled job, scan, or tool call did not actually run \u2014 restarted
-session, missing credentials, silent failure \u2014 say so plainly. Never fabricate
-or approximate results of work that did not execute.
-
-### Respect what's shared
-You have broad latitude inside your own work. But actions that are visible to
-others, hard to reverse, or touch shared state \u2014 sending DMs, editing shared
-wiki, reassigning others' tasks, deleting content \u2014 pause and confirm before
-acting, unless you've been explicitly authorized.
-
-### Shared workspace
-Other agents share this workspace. Before starting work, check whether someone
-\u2014 human or agent \u2014 has already picked it up. Coordination beats racing.
-
-### Permissions and approvals
-You have real permissions based on your roles (chat member/admin, org member).
-If you lack permission for an action, the API returns PERMISSION_DENIED with the
-\`action\` and \`resource_uri\` that were denied. The server decides whether that
-action is approvable: if it is, the CLI prints an \`approvals request\` command \u2014
-fill in the placeholders it shows (\`--chat\`, \`--title\`, \`--reason\`) and run
-it to ask someone with permission. If it is NOT approvable, the output says so;
-ask a human with permission instead of requesting approval. A
-\`INVALID_TARGET\` error instead means you addressed the wrong kind of thing
-(e.g. a \`usr_\` id where a chat is expected) \u2014 follow the message (e.g. use
-\`dm\` for a user). Don't retry or work around a denial; only request approval
-after an actual denial, never preemptively.
-
-### When in doubt
-Prefer asking over guessing. Prefer "I don't know" over fabricating. Your
-credibility is what you bring to the workspace \u2014 protect it.`;
-var PRLL_REFERENCE_GUIDE = `## Parall References
-
-Every entity on Parall has a \`prll://\` URI. Use these URIs to link related
-entities when you create or update tasks, comments, messages, and wiki files.
-
-All three forms work \u2014 pick whichever fits:
-
-    prll://tsk_abc                               bare URI (auto-linked)
-    [](prll://tsk_abc)                           empty context (renders resolved title)
-    [relevant context](prll://tsk_abc)           with author annotation
-
-Bare URIs and empty-context refs are preferred in most cases \u2014 the platform
-resolves and renders the entity title automatically.
-
-### Mentioning people and agents
-
-A real member mention is a \`prll://usr_...\` reference. Plain \`@Display Name\` is
-only text: it does not notify a human or trigger an agent.
-
-When another member must be notified or an agent explicitly triggered, include
-their user reference in the message body. Prefer the empty-context form because
-the platform resolves the member's current display name:
-
-    [](prll://usr_xxx)
-
-Use \`[Display Name](prll://usr_xxx)\` when the surrounding sentence needs an
-explicit label. Find the user ID in the incoming message or with
-\`parall members list\`. Never substitute plain \`@Display Name\` when notification
-or agent dispatch matters.
-
-### URI format
-
-\`prll://\` follows standard URI structure: \`scheme://authority/path?query#fragment\`.
-
-**Entities** \u2014 the entity ID is the authority:
-
-    prll://usr_xxx          user          prll://prj_xxx          project
-    prll://tsk_xxx          task          prll://wik_xxx          wiki
-    prll://msg_xxx          message       prll://cmt_xxx          comment
-    prll://cht_xxx          chat          prll://tcm_xxx          task comment (legacy)
-    prll://att_xxx          attachment    prll://ase_xxx          agent session
-    prll://sch_xxx          schedule      prll://srn_xxx          schedule run
-
-**Wiki** \u2014 path is file path, fragment is a typed anchor:
-
-    prll://wik_xxx/docs/guide.md                  file
-    prll://wik_xxx/docs/guide.md#h=Auth::OAuth    heading (:: = hierarchy)
-    prll://wik_xxx/src/auth.go?rev=<sha>#l=42-58  line range (revision-pinned)
-
-  Anchor types: \`h=\` heading, \`l=\` line/range, \`s=\` symbol.
-  Line anchors in persistent content require \`?rev=<full-40-char-sha>\`.
-
-**Chat message range**:
-
-    prll://cht_xxx#range=msg_01HA,msg_01HZ
-
-**Field access** \u2014 path selects a field (omit to reference the entity itself):
-
-    prll://tsk_xxx/description#Implementation     heading within task description
-
-### Unread context
-
-When dispatched to a chat, you may see \`[Unread: N messages | since: prll://msg_xxx]\`.
-This shows messages since your last interaction \u2014 your read cursor advances after each
-dispatch, so context you skip now won't appear as unread next time. Use
-\`parall messages list <chat> --limit 20\` to fetch recent context. For large unread
-counts (50+), fetch only recent messages rather than everything.
-
-Thread dispatches may show \`[Thread: prll://msg_root | N replies | M unread | since: prll://msg_r]\`.
-Same semantics \u2014 use \`parall messages list <chat> --thread-root-id <thread_root> --limit 20\` to
-catch up on the thread.
-
-### Reading context on demand
-
-An event only carries the single triggering message. If you're mentioned in a
-group chat and lack context, pull what you need from the chat \u2014 don't guess:
-
-    parall messages list cht_xxx --limit 20 --before msg_xxx
-    parall messages get msg_xxx
-    parall chats get cht_xxx
-
-Rule of thumb: in a group chat mention, the conversation that led up to you
-being called almost always matters \u2014 read it before replying. In a DM, your
-session already has continuity, so skip the fetch unless something is unclear.
-
-Same pattern for any other entity referenced in the event: \`tasks get\`,
-\`projects get\`, \`users get\`, \`chats get\`. Follow the reflink, don't ask.
-When one entity isn't enough \u2014 you need what's *around* it \u2014 walk the
-reference graph instead of guessing (see "Walk the reference graph" below).
-
-### Find context with search first
-
-Reach for unified semantic search before paging chat history:
-
-    parall search "pricing decision june" --limit 10
-
-It spans messages, tasks, wiki, and comments. Page \`messages list\` only for the
-verbatim recent flow of one chat, not for discovery.
-
-### Walk the reference graph
-
-References form a traversable graph, and you can query it \u2014 don't stop at
-fetching entities one by one:
-
-    # entity metadata (title, status, preview)
-    parall refs resolve prll://tsk_xxx prll://wik_xxx
-    # who references this entity
-    parall refs backlinks prll://tsk_xxx
-    # connected sub-graph around it
-    parall refs graph prll://tsk_xxx --depth 2
-
-Use \`refs backlinks\` when you need "where is this discussed / used"; use
-\`refs graph\` when you need the full picture around an entity (related tasks,
-docs, conversations \u2014 edges carry the author's annotation for why they linked).
-Then \`refs resolve\` the interesting node URIs in one batch to get titles and
-status. \`refs graph\` takes entity-level URIs only (\`prll://wik_xxx\`, not
-\`prll://wik_xxx/docs/a.md\`). All results are filtered to what you can see.
-Details: parall-platform skill.
-
-### File attachments
-
-Messages may include attachments. They appear in events as:
-
-    [Attachment: prll://att_xxx | image/png | 1.2MB | screenshot.png]
-
-To download an attachment, use the CLI:
-
-    parall files download att_xxx --output /tmp/screenshot.png
-
-To send a file:
-
-    parall messages send prll://cht_xxx --file /tmp/output.png --text "Done"
-
-Or upload first and reuse across chats:
-
-    parall files upload /tmp/report.pdf
-    parall messages send prll://cht_aaa --attachment att_yyy --text "Report"
-    parall messages send prll://cht_bbb --attachment att_yyy --text "FYI"
-
-The \`--text\` captions above are safe short literals. For message text containing \`$\`, backticks, or quotes, pass it via \`--text-file <path>\` (write the file first, or a quoted heredoc \`--text-file - <<'EOF'\`) instead of \`--text "..."\` \u2014 inside double quotes the shell turns \`$1,000\` into \`,000\` and executes \`$(...)\`.
-
-### When to reference
-
-- **Origin** \u2014 always link the message or task that triggered your work
-- **Design docs / wiki** \u2014 link specs and guides relevant to the work
-- **Related tasks** \u2014 link parent, sibling, or blocking tasks
-- **People** \u2014 link assignees or stakeholders when mentioning them
-- **Conversations** \u2014 link a chat or message range as context
-
-### Why this matters
-
-Other agents and humans read your output. References build a navigable context graph \u2014
-in multi-agent workflows, your references are the map that the next agent follows.`;
-function renderLocalAttachmentSection(section) {
-  if (section.images.length === 0 && section.notes.length === 0)
-    return "";
-  const lines = ["[Local attachment files]"];
-  for (const image of section.images) {
-    lines.push(`- prll://${image.attachmentId} (${sanitizePromptMeta(image.mimeType)}, ${formatBytes(image.fileSize)}, ${sanitizePromptMeta(image.fileName)})`, `  ${image.localPath}`);
-  }
-  lines.push(...section.notes);
-  return lines.join("\n");
-}
-function sanitizePromptMeta(value) {
-  return value.replace(/[\r\n]+/g, " ").replace(/[()]/g, " ").trim();
-}
-function formatBytes(bytes) {
-  if (bytes >= 1048576)
-    return `${(bytes / 1048576).toFixed(1)}MB`;
-  if (bytes >= 1024)
-    return `${Math.round(bytes / 1024)}KB`;
-  return `${bytes}B`;
-}
-
-// ts/agent-core/dist/bridge-workspace.js
-var BRIDGE_WORKSPACE_INSTRUCTIONS = `# Agent workspace
-
-You are an agent in Parall IM. You participate in chats, handle tasks, and interact exclusively through the Parall CLI.
-
-## Message Model
-
-Incoming events are rendered as structured \`[Event: ...]\` blocks.
-Each event includes \`[Chat: ... (prll://cht_xxx)]\` \u2014 use that chat ID (or full URI) when replying.
-
-**Your plain-text output is not delivered to anyone** \u2014 it is recorded as suppressed thinking in your session steps and discarded from the chat.
-To say something in a chat, you **must** invoke the Parall CLI via your shell/exec tool. To stay silent, simply do not invoke it.
-
-## Parall CLI
-
-All outbound interactions go through the \`parall\` CLI. Credentials are pre-injected as environment variables \u2014 no setup needed. If \`parall\` is not on PATH, use \`npx --yes @parall/cli@latest\` instead.
-
-- \`parall messages send prll://cht_xxx --text-file -\` \u2014 reply into the triggering chat (pipe the body via a quoted heredoc; see Shell-safety below)
-- \`parall dm prll://usr_xxx --text-file - [--no-reply]\` \u2014 direct message another user
-- \`parall tasks update prll://tsk_xxx --status in_progress\` \u2014 task state
-- \`parall no-reply [--reason "..."]\` \u2014 explicitly declare this turn silent (audit signal; not required for silence, just clarifies intent)
-
-**Shell-safety \u2014 never wrap real message content in double quotes.** Your command runs in a shell, which expands \`$\`, backticks, and \`$(...)\` inside \`"..."\` before the CLI sees them: \`--text "That costs $1,000"\` sends \`That costs ,000\`, and \`--text "$(cmd)"\` executes \`cmd\`. Pass message bodies via \`--text-file <path>\` (write the file first \u2014 no shell touches it) or a quoted heredoc that disables expansion:
-
-\`\`\`bash
-parall messages send prll://cht_xxx --text-file - <<'EOF'
-That costs $1,000, and $(whoami) stays literal. I'm on it.
-EOF
-\`\`\`
-
-Keep \`--text "..."\` for short literals with no \`$\`, backtick, or apostrophe.
-
-The bridge injects Parall context via environment variables. The static credentials \`PRLL_API_URL\`, \`PRLL_API_KEY\`, and \`PRLL_ORG_ID\` are always set. \`PRLL_CONTEXT_FILE\` points to a per-session JSON file that the gateway updates each dispatch with \`session_id\`, \`chat_id\`, \`trigger_message_id\`, \`no_reply\`, and \`step_id\` (updated per tool call). The CLI reads this file automatically \u2014 you do not need to pass \`--chat\` or \`--session\` explicitly when the context file is present.
-
-CLI errors are agent-readable \u2014 read them; they usually name the next step.
-
-## Attachments
-
-Image attachments are pre-downloaded under \`.parall/attachments/<messageId>/\`. Each event's \`[Local attachment files]\` block lists each image as a metadata header followed by its absolute local path on its own line \u2014 pass that path to your file-reading tool when the user refers to image contents.
-
-Supported image types: PNG, JPEG, WebP, GIF. Other attachment types (PDFs, archives, etc.) are not pre-downloaded \u2014 fetch them on demand with \`parall files download att_xxx --output ...\`.
-
-## Guardrails
-
-- A dispatch may coalesce multiple events. Decide per event whether to reply via \`messages send\` / \`dm\` \u2014 events you do not act on simply receive no reply.
-- If an event carries \`[Hint: no_reply]\`, do not send anything for that event. \`no-reply\` is optional and only useful as an explicit intent marker.
-- Never try to "speak" by typing sentences like "No response needed" / "Noted" / "OK" \u2014 they are discarded, so they accomplish nothing except polluting your session log.
-- Keep CLI replies concise and task-focused.
-
-See \`docs/engineering-design/agent-dm-loop-prevention.md\` \xA7 Layer 0 for why plain text is never auto-projected.
-
-## Approval Flow
-
-When you try an action (e.g., archive a chat) and receive a PERMISSION_DENIED error, you can request someone with permission to do it:
-
-1. The error includes a \`PERMISSION_DENIED\` code plus the denied \`action\` and \`resource_uri\`. If the action is approvable (decided by the server \u2014 no fixed allowlist), a \`Request approval:\` line with an approval command is printed \u2014 fill in its \`--chat\`, \`--title\`, \`--reason\` placeholders and run it. If it is not approvable, the output says so; ask a human with permission instead.
-2. Request approval: \`parall approvals request --action chat.archive --resource prll://cht_123 --chat prll://cht_456 --title "Archive #old-project" --reason "Channel inactive"\`
-3. A card will appear in the specified chat for someone with permission to approve
-4. Check the result: \`parall approvals get prll://<id>\` or wait: \`parall approvals wait prll://<id> --timeout 300\`
-5. List available actions: \`parall approvals actions\`
-
-Only request approval when you've actually been denied permission. Don't request approval preemptively.
-`;
-function extractShellCommand(input) {
-  if (!input || typeof input !== "object")
-    return void 0;
-  const command = input.command;
-  return typeof command === "string" && command.trim() ? command.trim() : void 0;
-}
-function parseParallCliInvocation(command) {
-  const tokens = command.replace(/\s+/g, " ").trim().split(" ");
-  let i = 0;
-  if (tokens[i] === "parall") {
-    i++;
-  } else if (tokens[i] === "npx") {
-    i++;
-    while (i < tokens.length && tokens[i].startsWith("-"))
-      i++;
-    if (i >= tokens.length || !/^@parall\/cli(?:@.+)?$/.test(tokens[i]))
-      return null;
-    i++;
-  } else if (tokens[i] === "pnpm") {
-    i++;
-    if (i < tokens.length && (tokens[i] === "exec" || tokens[i] === "dlx"))
-      i++;
-    if (i >= tokens.length || tokens[i] !== "parall")
-      return null;
-    i++;
-  } else {
-    return null;
-  }
-  return tokens.slice(i).filter((t) => !t.startsWith("-"));
-}
-function isParallSendCommand(command) {
-  if (!command)
-    return false;
-  const sub = parseParallCliInvocation(command);
-  if (!sub || sub.length === 0)
-    return false;
-  return sub[0] === "dm" || sub[0] === "messages" && sub[1] === "send";
-}
-function isParallNoReplyCommand(command) {
-  if (!command)
-    return false;
-  const sub = parseParallCliInvocation(command);
-  return sub?.[0] === "no-reply";
-}
-
-// ts/agent-core/dist/dispatch-adapter.js
-function buildErrorStepContent(message) {
-  return { text: message, suppressed: false, status: "error" };
+    return { action: "main" };
+  return strategy(event, state);
 }
 
 // ts/agent-core/dist/redact.js
@@ -56008,114 +55824,6 @@ function redactTurnOutcome(event, knownValues) {
   return redacted;
 }
 
-// ts/agent-core/dist/logger.js
-function createLogger(prefix) {
-  return {
-    info: (msg) => console.log(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
-    warn: (msg) => console.warn(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
-    error: (msg) => console.error(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
-    child: (sub) => createLogger(`${prefix}:${sub}`)
-  };
-}
-function childLogger(logger, sub) {
-  return logger.child ? logger.child(sub) : logger;
-}
-
-// ts/agent-core/dist/gateway-base.js
-import * as os from "node:os";
-import * as fs3 from "node:fs";
-import * as path3 from "node:path";
-import { randomUUID } from "node:crypto";
-
-// ts/agent-core/dist/channel-capability.js
-import * as fs2 from "node:fs";
-import * as path2 from "node:path";
-import { fileURLToPath } from "node:url";
-var CAPABILITY_FEISHU_CLI = "feishu-cli";
-var CAPABILITY_SLACK_SEND = "slack-send";
-var CAPABILITY_WECHAT_SEND = "wechat-send";
-function channelCapabilityKeyFor(provider) {
-  if (provider === "slack")
-    return CAPABILITY_SLACK_SEND;
-  if (provider === "wechat")
-    return CAPABILITY_WECHAT_SEND;
-  return `${provider}-cli`;
-}
-var CHANNEL_POINTER_MAGIC = "parall channel capability pointer";
-function capabilityBinDir(stateDir) {
-  return path2.join(stateDir, "bin");
-}
-function channelExecEntryPath() {
-  const selfDir = path2.dirname(fileURLToPath(import.meta.url));
-  const sibling = path2.join(selfDir, "parall-channel-exec.js");
-  if (fs2.existsSync(sibling))
-    return sibling;
-  return fileURLToPath(new URL("./bin/channel-exec.js", import.meta.url));
-}
-function materializeChannelCapabilities(stateDir, capabilities, log2) {
-  try {
-    reconcileFeishuCli(stateDir, capabilities, log2);
-  } catch (err) {
-    log2?.warn(`channel capability materialization failed: ${String(err)}`);
-  }
-}
-function reconcileFeishuCli(stateDir, capabilities, log2) {
-  const binDir = capabilityBinDir(stateDir);
-  const posixPath = path2.join(binDir, "lark-cli");
-  const granted = capabilities.some((c) => c.key === CAPABILITY_FEISHU_CLI);
-  const hadPointer = fs2.existsSync(posixPath);
-  if (!granted && !hadPointer)
-    return;
-  fs2.mkdirSync(binDir, { recursive: true });
-  const entry = channelExecEntryPath();
-  const nodeExec = process.execPath;
-  writePointerIfChanged(posixPath, renderPosixPointer(nodeExec, entry, binDir, "feishu"), log2);
-  writePointerIfChanged(path2.join(binDir, "lark-cli.cmd"), renderCmdPointer(nodeExec, entry, binDir, "feishu"), log2);
-}
-function writePointerIfChanged(filePath, content, log2) {
-  let existing = null;
-  try {
-    existing = fs2.readFileSync(filePath, "utf8");
-  } catch {
-    existing = null;
-  }
-  if (existing !== content) {
-    fs2.writeFileSync(filePath, content, { mode: 493 });
-    log2?.info(`channel capability: pointer materialized (${path2.basename(filePath)})`);
-  }
-  fs2.chmodSync(filePath, 493);
-}
-function renderPosixPointer(nodeExecPath, entryJsPath, binDir, channel) {
-  return [
-    "#!/bin/sh",
-    `# Generated by @parall/agent-core \u2014 ${CHANNEL_POINTER_MAGIC} (do not edit).`,
-    "# Credential + exec logic lives in the agent-core package; revocation is",
-    "# enforced by the platform mint endpoint, so this pointer stays constant.",
-    // Strip Node preload-hijack vars BEFORE launching node: NODE_OPTIONS
-    // (e.g. --require=/evil.js) and NODE_PATH would execute caller-supplied code
-    // at interpreter startup — BEFORE channel-exec's own env scrub, i.e. before
-    // the mint. The pointer is a platform-authored trust-boundary artifact whose
-    // whole job is a CONTROLLED launch of the broker (absolute node, magic
-    // guard, skip-dir); this closes the same env-hijack class for node startup
-    // that the absolute node path closes for PATH, keeping the launch deterministic.
-    "unset NODE_OPTIONS NODE_PATH",
-    // "$@" preserves argv exactly (this is the agent's main path via git-bash).
-    `exec "${nodeExecPath}" "${entryJsPath}" --channel ${channel} --skip-dir "${binDir}" -- "$@"`,
-    ""
-  ].join("\n");
-}
-function renderCmdPointer(nodeExecPath, entryJsPath, binDir, channel) {
-  return [
-    "@echo off",
-    `rem Generated by @parall/agent-core - ${CHANNEL_POINTER_MAGIC} (do not edit).`,
-    // Clear Node preload-hijack vars before launching node (see the sh pointer).
-    'set "NODE_OPTIONS="',
-    'set "NODE_PATH="',
-    `"${nodeExecPath}" "${entryJsPath}" --channel ${channel} --skip-dir "${binDir}" -- %*`,
-    ""
-  ].join("\r\n");
-}
-
 // ts/agent-core/dist/step-retry-queue.js
 var DEFAULT_RETRY_DELAYS_MS = [5e3, 1e4, 2e4, 4e4, 6e4];
 async function raceWithDeadline(work, ms) {
@@ -56875,6 +56583,81 @@ var ForkSessionFinalizer = class {
   }
 };
 
+// ts/agent-core/dist/session-state.js
+function normalizeSessionKey(sessionKey) {
+  return sessionKey.toLowerCase();
+}
+var sessionChatIdMap = /* @__PURE__ */ new Map();
+var sessionMessageIdMap = /* @__PURE__ */ new Map();
+var dispatchMessageIdMap = /* @__PURE__ */ new Map();
+var dispatchNoReplyMap = /* @__PURE__ */ new Map();
+function setSessionChatId(sessionKey, chatId) {
+  sessionChatIdMap.set(normalizeSessionKey(sessionKey), chatId);
+}
+function setSessionMessageId(sessionKey, messageId) {
+  sessionMessageIdMap.set(normalizeSessionKey(sessionKey), messageId);
+}
+function clearSessionMessageId(sessionKey) {
+  sessionMessageIdMap.delete(normalizeSessionKey(sessionKey));
+}
+function setDispatchMessageId(sessionKey, messageId) {
+  dispatchMessageIdMap.set(normalizeSessionKey(sessionKey), messageId);
+}
+function clearDispatchMessageId(sessionKey) {
+  dispatchMessageIdMap.delete(normalizeSessionKey(sessionKey));
+}
+function setDispatchNoReply(sessionKey, noReply) {
+  dispatchNoReplyMap.set(normalizeSessionKey(sessionKey), noReply);
+}
+function clearDispatchNoReply(sessionKey) {
+  dispatchNoReplyMap.delete(normalizeSessionKey(sessionKey));
+}
+var dispatchMetricsMap = /* @__PURE__ */ new Map();
+function resetDispatchMetrics(sessionKey) {
+  dispatchMetricsMap.set(normalizeSessionKey(sessionKey), {
+    deliver_text_chunks: 0,
+    deliver_text_chars: 0,
+    message_send_attempts: 0,
+    message_send_successes: 0,
+    no_reply_called: false,
+    tool_call_count: 0,
+    started_at: Date.now()
+  });
+}
+function getDispatchMetrics(sessionKey) {
+  return dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
+}
+function clearDispatchMetrics(sessionKey) {
+  dispatchMetricsMap.delete(normalizeSessionKey(sessionKey));
+}
+function recordDeliverText(sessionKey, charCount) {
+  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
+  if (!m)
+    return;
+  m.deliver_text_chunks++;
+  m.deliver_text_chars += charCount;
+}
+function recordMessageSend(sessionKey, success) {
+  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
+  if (!m)
+    return;
+  m.message_send_attempts++;
+  if (success)
+    m.message_send_successes++;
+}
+function recordNoReply(sessionKey) {
+  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
+  if (!m)
+    return;
+  m.no_reply_called = true;
+}
+function recordToolCall(sessionKey) {
+  const m = dispatchMetricsMap.get(normalizeSessionKey(sessionKey));
+  if (!m)
+    return;
+  m.tool_call_count++;
+}
+
 // ts/agent-core/dist/telemetry.js
 init_esm();
 var import_api_logs = __toESM(require_src(), 1);
@@ -59550,6 +59333,19 @@ function configureHttpKeepAlive(opts) {
   }));
 }
 
+// ts/agent-core/dist/logger.js
+function createLogger(prefix) {
+  return {
+    info: (msg) => console.log(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
+    warn: (msg) => console.warn(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
+    error: (msg) => console.error(`${(/* @__PURE__ */ new Date()).toISOString()} [${prefix}] ${msg}`),
+    child: (sub) => createLogger(`${prefix}:${sub}`)
+  };
+}
+function childLogger(logger, sub) {
+  return logger.child ? logger.child(sub) : logger;
+}
+
 // ts/agent-core/dist/platform-config.js
 import * as fs4 from "node:fs";
 import * as path4 from "node:path";
@@ -60930,6 +60726,80 @@ ${lines.join("\n")}
 `;
 }
 
+// ts/agent-core/dist/platform-instructions.js
+function buildBridgePlatformInstructions(workspaceDir, identity, capabilityFragments) {
+  return renderPlatformInstructions({
+    identity,
+    runtimeAppendix: PLATFORM_BRIDGE_WORKSPACE_INSTRUCTIONS,
+    capabilityFragments,
+    skillReferences: buildSkillReferences(workspaceDir)
+  });
+}
+
+// ts/agent-core/dist/prompt-fragments.js
+function identityFromMe(me) {
+  return {
+    userId: me.id,
+    displayName: me.display_name,
+    title: me.public_profile?.title || void 0,
+    publicDescription: me.public_profile?.description || void 0,
+    // `||` on purpose: an empty-string instructions must also fall back to
+    // the deprecated description alias (empty means "unset" on this wire).
+    instructions: me.agent_profile?.instructions || me.agent_profile?.description || void 0
+  };
+}
+function renderLocalAttachmentSection(section) {
+  if (section.images.length === 0 && section.notes.length === 0)
+    return "";
+  const lines = ["[Local attachment files]"];
+  for (const image of section.images) {
+    lines.push(`- prll://${image.attachmentId} (${sanitizePromptMeta(image.mimeType)}, ${formatBytes(image.fileSize)}, ${sanitizePromptMeta(image.fileName)})`, `  ${image.localPath}`);
+  }
+  lines.push(...section.notes);
+  return lines.join("\n");
+}
+function sanitizePromptMeta(value) {
+  return value.replace(/[\r\n]+/g, " ").replace(/[()]/g, " ").trim();
+}
+function formatBytes(bytes) {
+  if (bytes >= 1048576)
+    return `${(bytes / 1048576).toFixed(1)}MB`;
+  if (bytes >= 1024)
+    return `${Math.round(bytes / 1024)}KB`;
+  return `${bytes}B`;
+}
+
+// ts/agent-core/dist/provider-config.js
+function llmSource(pc) {
+  return effectiveLLMSourceExplicit(pc) || "parall";
+}
+function effectiveLLMSourceExplicit(pc) {
+  if (pc?.llm_source)
+    return pc.llm_source;
+  if (pc?.openai_api_key || pc?.openai_base_url || pc?.anthropic_auth_token || pc?.anthropic_base_url) {
+    return "custom";
+  }
+  return "";
+}
+function clearAllProviderCreds(env) {
+  delete env.ANTHROPIC_AUTH_TOKEN;
+  delete env.ANTHROPIC_BASE_URL;
+  delete env.ANTHROPIC_API_KEY;
+  delete env.OPENAI_API_KEY;
+  delete env.OPENAI_BASE_URL;
+  delete env.PRLL_CLAUDE_ALLOW_API_KEY;
+}
+function parseProviderConfig(env) {
+  const raw = env.PRLL_PROVIDER_CONFIG?.trim();
+  if (!raw)
+    return void 0;
+  try {
+    return JSON.parse(raw);
+  } catch (err) {
+    throw new Error(`Invalid PRLL_PROVIDER_CONFIG JSON: ${String(err)}`);
+  }
+}
+
 // ts/claude-agent/dist/config.js
 import * as os2 from "node:os";
 import * as path6 from "node:path";
@@ -62861,24 +62731,14 @@ var ClaudeSessionManager = class _ClaudeSessionManager {
 import * as fs9 from "node:fs";
 import * as path10 from "node:path";
 function buildClaudeSystemPrompt(workspaceDir, agentIdentity, capabilityFragments) {
-  const parts = [
-    buildIdentity(agentIdentity),
-    BRIDGE_WORKSPACE_INSTRUCTIONS,
-    PRLL_BEHAVIOR,
-    PRLL_REFERENCE_GUIDE
-  ];
-  if (capabilityFragments && capabilityFragments.length > 0) {
-    parts.push(capabilityFragments.join("\n\n"));
-  }
-  parts.push(buildSkillReferences(workspaceDir));
-  return parts.join("\n\n");
+  return buildBridgePlatformInstructions(workspaceDir, agentIdentity, capabilityFragments);
 }
 function writeClaudeSystemPrompt(workspaceDir, agentIdentity, capabilityFragments) {
   const parallDir = path10.join(workspaceDir, ".parall");
   fs9.mkdirSync(parallDir, { recursive: true });
   fs9.writeFileSync(path10.join(parallDir, "system-prompt.md"), buildClaudeSystemPrompt(workspaceDir, agentIdentity, capabilityFragments), "utf8");
 }
-function ensureClaudeWorkspace(workspaceDir, log2, agentIdentity, capabilityFragments) {
+function ensureClaudeWorkspace(workspaceDir, _log, agentIdentity, capabilityFragments) {
   fs9.mkdirSync(workspaceDir, { recursive: true });
   fs9.mkdirSync(path10.join(workspaceDir, ".claude"), { recursive: true });
   writeClaudeSystemPrompt(workspaceDir, agentIdentity, capabilityFragments);