@parall/daemon 1.55.0 → 1.55.2

package/bundle/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.55.0",
-  "built_at": "2026-08-09T16:02:07.000Z",
+  "version": "1.55.2",
+  "built_at": "2026-08-13T12:51:07.413Z",
   "min_node_version": "20.0.0",
   "files": {
     "bb-browser-daemon.js": {
@@ -16,29 +16,29 @@
       "size": 18
     },
     "parall-browser-pod.js": {
-      "sha256": "76ddb193bb4007f593954dd70db9a7555cd4ff230e69fb1d65b48effdb4cb8f1",
-      "size": 2940163
+      "sha256": "515f2339f2eed7e942fb06d9fc020060b5598c36f234f1bcbd08ab0e6a75fab1",
+      "size": 2946190
     },
     "parall-channel-exec.js": {
       "sha256": "7c2a6e12483a45e9eb4a42cd7d4cdd3c4fa21dd09ac1347d9a3e177b4ddee930",
       "size": 7220
     },
     "parall-claude-agent.js": {
-      "sha256": "40b0ce7d956b08a1d09898b6c0b4e99725df3f90dc885e9615caedb4751a8c74",
-      "size": 2805125
+      "sha256": "03f72ff9ac4da18f680f012ef3ac2c88dc1b87ce524c1b6fbe763cf3f3ff7d2e",
+      "size": 2816084
     },
     "parall-codex-agent.js": {
-      "sha256": "0d7102ec3a86125abad4de826946964faf88e401c55649280460fb71850e460f",
-      "size": 2835829
+      "sha256": "d9f0278b7d1be05c9dbaef57e9bf4727f569f90e2d21cbec21091cc5c2caf546",
+      "size": 2848031
     },
     "parall-daemon.js": {
-      "sha256": "0eb785ee505204bbf4a5c872a8cae61bc814f1400a1456cec9fa146f1958ef34",
-      "size": 3004344
+      "sha256": "d60fef8269a708cfd623c4011e19b7ee1e11d9fb1d5bdfe678893d86470df7c2",
+      "size": 3011385
     },
     "parall-openclaw-agent.js": {
       "sha256": "856a1c3a9ae0ffef8efe2481fa1171dbeb1d67cccb88616aa9bf16da96a69355",
       "size": 9923
     }
   },
-  "signature": "GXPiJwnrho49eHkMv7aW6lYsT2d66zB5BN3JYHKmrWX4hRiOlPqNJ7Ti/jywf2LhTVsbCPtKLTda5H7Ft3KSDA=="
+  "signature": "ogOg4KHQBnIv2efZbO6ZI9HCQ/JMZp5Cb52Eya+n5f7k8cTrzKCZoveb102SwOdhx5sVz1lN30Vhh3ZZtSBSBw=="
 }

package/bundle/parall-browser-pod.js

@@ -63704,6 +63704,13 @@ var ENDPOINTS = {
   PROJECTS: (orgId) => `${API_BASE}/orgs/${orgId}/projects`,
   PROJECT_TASK_SUMMARY: (orgId) => `${API_BASE}/orgs/${orgId}/projects/task-summary`,
   PROJECT: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}`,
+  PROJECT_MEMBERS: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}/members`,
+  PROJECT_READERS: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}/readers`,
+  PROJECT_LIBRARY: (orgId) => `${API_BASE}/orgs/${orgId}/projects/library`,
+  PROJECT_JOIN: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}/join`,
+  PROJECT_JOIN_REQUESTS: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}/join-requests`,
+  // subject is a bare user ID or a bare team ID; both are path-segment safe.
+  PROJECT_MEMBER: (orgId, projectId, subject) => `${API_BASE}/orgs/${orgId}/projects/${projectId}/members/${subject}`,
   // Schedules (org-scoped, platform time trigger primitive)
   SCHEDULES: (orgId) => `${API_BASE}/orgs/${orgId}/schedules`,
   SCHEDULE: (orgId, id) => `${API_BASE}/orgs/${orgId}/schedules/${id}`,
@@ -63921,6 +63928,9 @@ var ENDPOINTS = {
   ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
   // Per-profile egress proxy (hosted Cloud Profiles; manager-only, human-only).
   ORG_EDGE_PROFILE_PROXY: (orgId, edgeId, profileName) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/proxy`,
+  // Per-profile one-shot cookie seed (hosted Cloud Profiles; manager-only,
+  // human-only, idle-only). Injected at the next cold start, then consumed.
+  ORG_EDGE_PROFILE_COOKIES: (orgId, edgeId, profileName) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/cookies`,
   ORG_EDGE_EXEC: (orgId) => `/api/v1/orgs/${orgId}/edge/exec`,
   // Cloud Edge live viewer command (V1b) — api-server, gated on cap:edge-viewer.
   // Same request/reply shape as the v2 browser-profile viewer, on the v3 edge
@@ -64067,6 +64077,62 @@ var ProjectTaskClient = class {
   async deleteProject(orgId, projectId) {
     return this.request("DELETE", ENDPOINTS.PROJECT(orgId, projectId));
   }
+  /** Roster with display info; readable by anyone who can read the project. */
+  async getProjectMembers(orgId, projectId) {
+    const res = await this.request("GET", ENDPOINTS.PROJECT_MEMBERS(orgId, projectId));
+    return res.data;
+  }
+  /**
+   * User IDs who may read the project — the assignee-eligibility set. Every
+   * tier answers the roster expansion (direct, team-reached, org
+   * owners/admins); visibility only shapes admission, never reach.
+   */
+  async getProjectReaders(orgId, projectId) {
+    const res = await this.request("GET", ENDPOINTS.PROJECT_READERS(orgId, projectId));
+    return res.data;
+  }
+  /** The join library: every discoverable project (public + restricted, plus
+   * private for org owners/admins) with the caller's admission state. */
+  async getProjectLibrary(orgId) {
+    const res = await this.request("GET", ENDPOINTS.PROJECT_LIBRARY(orgId));
+    return res.data;
+  }
+  /** Public-tier self-admission: writes the caller's own member row.
+   * Other tiers answer `404 PROJECT_NOT_FOUND`; a duplicate answers
+   * `409 MEMBER_EXISTS`. */
+  async joinProject(orgId, projectId) {
+    return this.request("POST", ENDPOINTS.PROJECT_JOIN(orgId, projectId));
+  }
+  /** Restricted-tier admission petition. A pending duplicate answers
+   * `409 REQUEST_EXISTS`; membership answers `409 MEMBER_EXISTS`. */
+  async createProjectJoinRequest(orgId, projectId) {
+    return this.request("POST", ENDPOINTS.PROJECT_JOIN_REQUESTS(orgId, projectId));
+  }
+  /** Pending petitions for one project — manager standing required. */
+  async listProjectJoinRequests(orgId, projectId) {
+    const res = await this.request("GET", ENDPOINTS.PROJECT_JOIN_REQUESTS(orgId, projectId));
+    return res.data;
+  }
+  /** Withdraws the caller's own pending petition. */
+  async cancelProjectJoinRequest(orgId, projectId) {
+    return this.request("DELETE", ENDPOINTS.PROJECT_JOIN_REQUESTS(orgId, projectId));
+  }
+  /**
+   * Adds one subject (user ID or team ID) to the roster. Manager-only,
+   * create-only: an existing row answers `409 MEMBER_EXISTS` — change roles
+   * through updateProjectMember instead.
+   */
+  async addProjectMember(orgId, projectId, req) {
+    return this.request("POST", ENDPOINTS.PROJECT_MEMBERS(orgId, projectId), req);
+  }
+  /** Sets one roster entry's role. Demoting the last manager answers `400 LAST_MANAGER`. */
+  async updateProjectMember(orgId, projectId, subject, req) {
+    return this.request("PATCH", ENDPOINTS.PROJECT_MEMBER(orgId, projectId, subject), req);
+  }
+  /** Removes one roster entry. Removing the last manager answers `400 LAST_MANAGER`. */
+  async removeProjectMember(orgId, projectId, subject) {
+    return this.request("DELETE", ENDPOINTS.PROJECT_MEMBER(orgId, projectId, subject));
+  }
 };
 
 // ts/sdk/dist/task-label-client.js
@@ -64459,8 +64525,9 @@ var ParallClient = class _ParallClient extends TaskLabelClient {
     return this.request("POST", ENDPOINTS.TEAMS(orgId), req);
   }
   /**
-   * Renames a team. The slug cannot be changed — wiki ACL rows reference it as
-   * `@slug`, so the server answers 400 SLUG_IMMUTABLE if one is sent.
+   * Renames a team. Renaming is an ordinary edit: ACL rows reference teams by
+   * ID. Names are org-unique (case-insensitive); a duplicate answers 409
+   * NAME_TAKEN.
    */
   async updateTeam(orgId, teamId, req) {
     return this.request("PATCH", ENDPOINTS.TEAM(orgId, teamId), req);
@@ -66089,15 +66156,18 @@ var ParallClient = class _ParallClient extends TaskLabelClient {
   /**
    * Read a clip's per-org agent exec access. Org-member readable (agents
    * included, so a denied agent can learn why exec answered
-   * `CLIP_AGENT_NOT_ALLOWED`).
+   * `CLIP_AGENT_NOT_ALLOWED` / `CLIP_AGENT_CONNECTION_NOT_ALLOWED`).
    */
   async getClipAgentExecAccess(orgId, clipId) {
     return this.request("GET", ENDPOINTS.ORG_CLIP_EXEC_ACCESS(orgId, clipId));
   }
   /**
    * Replace a clip's per-org agent exec access. Human-only (agent principals
-   * get 403); under `all_agents` the `agent_ids` must be empty. Every granted
-   * id must be an active agent of this org (else `400 INVALID_INPUT`).
+   * get 403); under `all_agents` both lists must be empty; pass either
+   * `agent_ids` (legacy flat form → every agent gets `connection_scope: 'all'`)
+   * or `grants` (connection-scoped), never both. Every granted id must be an
+   * active agent of this org, and every `connection_ids` entry a connection of
+   * THIS clip in this org (else `400 INVALID_INPUT`).
    */
   async putClipAgentExecAccess(orgId, clipId, access) {
     return this.request("PUT", ENDPOINTS.ORG_CLIP_EXEC_ACCESS(orgId, clipId), access);
@@ -66183,6 +66253,41 @@ var ParallClient = class _ParallClient extends TaskLabelClient {
       headers: expectedVersion ? { "If-Match": `"proxy-${expectedVersion}"` } : void 0
     });
   }
+  /**
+   * Read a hosted Cloud Profile's one-shot cookie-seed status (manager-only:
+   * hosted human maintainer or org admin). Sanitized — cookie VALUES never come
+   * back, only `cookie_count` and the distinct target `domains`. `can_mutate` /
+   * `lease_status` are the authoritative idle gate. Typed errors: `EDGE_NOT_HOSTED`
+   * (BYOC device), `NOT_FOUND` (unknown profile).
+   */
+  async getEdgeProfileCookieSeed(orgId, edgeId, profileName) {
+    return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILE_COOKIES(orgId, edgeId, profileName));
+  }
+  /**
+   * Set/replace the profile's one-shot cookie seed (the full normalized cookie
+   * array every time) — IDLE ONLY: while the profile's hosted browser is running
+   * the server answers 409 `EDGE_PROFILE_IN_USE`; close the viewer, wait for idle
+   * scale-to-zero, and retry. The next cold start injects the cookies into the
+   * profile partition and consumes the seed. Other typed errors:
+   * `EDGE_COOKIE_SEED_STALE` (409 — expectedVersion lost a tab race, sent as the
+   * `cookieseed-<version>` If-Match), `EDGE_DELETING` (409), and
+   * `SECRETBOX_UNCONFIGURED` (503 — server cannot store cookies safely).
+   */
+  async setEdgeProfileCookieSeed(orgId, edgeId, profileName, req, expectedVersion) {
+    return this.request("PUT", ENDPOINTS.ORG_EDGE_PROFILE_COOKIES(orgId, edgeId, profileName), req, void 0, false, {
+      headers: expectedVersion ? { "If-Match": `"cookieseed-${expectedVersion}"` } : void 0
+    });
+  }
+  /**
+   * Clear the pending cookie seed (does NOT sign the profile out — cookies
+   * already injected into the partition stay). Idle-only like set — 409
+   * `EDGE_PROFILE_IN_USE` while the browser is live.
+   */
+  async clearEdgeProfileCookieSeed(orgId, edgeId, profileName, expectedVersion) {
+    return this.request("DELETE", ENDPOINTS.ORG_EDGE_PROFILE_COOKIES(orgId, edgeId, profileName), void 0, void 0, false, {
+      headers: expectedVersion ? { "If-Match": `"cookieseed-${expectedVersion}"` } : void 0
+    });
+  }
   /**
    * Execute a registry clip command on an Edge device.
    *