@parall/daemon 1.55.0 → 1.55.2

package/bundle/parall-daemon.js

@@ -354,6 +354,13 @@ var init_constants = __esm({
       PROJECTS: (orgId) => `${API_BASE}/orgs/${orgId}/projects`,
       PROJECT_TASK_SUMMARY: (orgId) => `${API_BASE}/orgs/${orgId}/projects/task-summary`,
       PROJECT: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}`,
+      PROJECT_MEMBERS: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}/members`,
+      PROJECT_READERS: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}/readers`,
+      PROJECT_LIBRARY: (orgId) => `${API_BASE}/orgs/${orgId}/projects/library`,
+      PROJECT_JOIN: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}/join`,
+      PROJECT_JOIN_REQUESTS: (orgId, projectId) => `${API_BASE}/orgs/${orgId}/projects/${projectId}/join-requests`,
+      // subject is a bare user ID or a bare team ID; both are path-segment safe.
+      PROJECT_MEMBER: (orgId, projectId, subject) => `${API_BASE}/orgs/${orgId}/projects/${projectId}/members/${subject}`,
       // Schedules (org-scoped, platform time trigger primitive)
       SCHEDULES: (orgId) => `${API_BASE}/orgs/${orgId}/schedules`,
       SCHEDULE: (orgId, id) => `${API_BASE}/orgs/${orgId}/schedules/${id}`,
@@ -571,6 +578,9 @@ var init_constants = __esm({
       ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
       // Per-profile egress proxy (hosted Cloud Profiles; manager-only, human-only).
       ORG_EDGE_PROFILE_PROXY: (orgId, edgeId, profileName) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/proxy`,
+      // Per-profile one-shot cookie seed (hosted Cloud Profiles; manager-only,
+      // human-only, idle-only). Injected at the next cold start, then consumed.
+      ORG_EDGE_PROFILE_COOKIES: (orgId, edgeId, profileName) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/cookies`,
       ORG_EDGE_EXEC: (orgId) => `/api/v1/orgs/${orgId}/edge/exec`,
       // Cloud Edge live viewer command (V1b) — api-server, gated on cap:edge-viewer.
       // Same request/reply shape as the v2 browser-profile viewer, on the v3 edge
@@ -612,6 +622,7 @@ var init_constants = __esm({
       PONG: "pong",
       WATCHING: "watching",
       MESSAGE_NEW: "message.new",
+      /** @deprecated `message.patch` is retired and never published; kept for compile compatibility. */
       MESSAGE_PATCH: "message.patch",
       MESSAGE_EDIT: "message.edit",
       MESSAGE_DELETE: "message.delete",
@@ -814,6 +825,62 @@ var init_project_task_client = __esm({
       async deleteProject(orgId, projectId) {
         return this.request("DELETE", ENDPOINTS.PROJECT(orgId, projectId));
       }
+      /** Roster with display info; readable by anyone who can read the project. */
+      async getProjectMembers(orgId, projectId) {
+        const res = await this.request("GET", ENDPOINTS.PROJECT_MEMBERS(orgId, projectId));
+        return res.data;
+      }
+      /**
+       * User IDs who may read the project — the assignee-eligibility set. Every
+       * tier answers the roster expansion (direct, team-reached, org
+       * owners/admins); visibility only shapes admission, never reach.
+       */
+      async getProjectReaders(orgId, projectId) {
+        const res = await this.request("GET", ENDPOINTS.PROJECT_READERS(orgId, projectId));
+        return res.data;
+      }
+      /** The join library: every discoverable project (public + restricted, plus
+       * private for org owners/admins) with the caller's admission state. */
+      async getProjectLibrary(orgId) {
+        const res = await this.request("GET", ENDPOINTS.PROJECT_LIBRARY(orgId));
+        return res.data;
+      }
+      /** Public-tier self-admission: writes the caller's own member row.
+       * Other tiers answer `404 PROJECT_NOT_FOUND`; a duplicate answers
+       * `409 MEMBER_EXISTS`. */
+      async joinProject(orgId, projectId) {
+        return this.request("POST", ENDPOINTS.PROJECT_JOIN(orgId, projectId));
+      }
+      /** Restricted-tier admission petition. A pending duplicate answers
+       * `409 REQUEST_EXISTS`; membership answers `409 MEMBER_EXISTS`. */
+      async createProjectJoinRequest(orgId, projectId) {
+        return this.request("POST", ENDPOINTS.PROJECT_JOIN_REQUESTS(orgId, projectId));
+      }
+      /** Pending petitions for one project — manager standing required. */
+      async listProjectJoinRequests(orgId, projectId) {
+        const res = await this.request("GET", ENDPOINTS.PROJECT_JOIN_REQUESTS(orgId, projectId));
+        return res.data;
+      }
+      /** Withdraws the caller's own pending petition. */
+      async cancelProjectJoinRequest(orgId, projectId) {
+        return this.request("DELETE", ENDPOINTS.PROJECT_JOIN_REQUESTS(orgId, projectId));
+      }
+      /**
+       * Adds one subject (user ID or team ID) to the roster. Manager-only,
+       * create-only: an existing row answers `409 MEMBER_EXISTS` — change roles
+       * through updateProjectMember instead.
+       */
+      async addProjectMember(orgId, projectId, req) {
+        return this.request("POST", ENDPOINTS.PROJECT_MEMBERS(orgId, projectId), req);
+      }
+      /** Sets one roster entry's role. Demoting the last manager answers `400 LAST_MANAGER`. */
+      async updateProjectMember(orgId, projectId, subject, req) {
+        return this.request("PATCH", ENDPOINTS.PROJECT_MEMBER(orgId, projectId, subject), req);
+      }
+      /** Removes one roster entry. Removing the last manager answers `400 LAST_MANAGER`. */
+      async removeProjectMember(orgId, projectId, subject) {
+        return this.request("DELETE", ENDPOINTS.PROJECT_MEMBER(orgId, projectId, subject));
+      }
     };
   }
 });
@@ -1260,8 +1327,9 @@ var init_client = __esm({
         return this.request("POST", ENDPOINTS.TEAMS(orgId), req);
       }
       /**
-       * Renames a team. The slug cannot be changed — wiki ACL rows reference it as
-       * `@slug`, so the server answers 400 SLUG_IMMUTABLE if one is sent.
+       * Renames a team. Renaming is an ordinary edit: ACL rows reference teams by
+       * ID. Names are org-unique (case-insensitive); a duplicate answers 409
+       * NAME_TAKEN.
        */
       async updateTeam(orgId, teamId, req) {
         return this.request("PATCH", ENDPOINTS.TEAM(orgId, teamId), req);
@@ -2890,15 +2958,18 @@ var init_client = __esm({
       /**
        * Read a clip's per-org agent exec access. Org-member readable (agents
        * included, so a denied agent can learn why exec answered
-       * `CLIP_AGENT_NOT_ALLOWED`).
+       * `CLIP_AGENT_NOT_ALLOWED` / `CLIP_AGENT_CONNECTION_NOT_ALLOWED`).
        */
       async getClipAgentExecAccess(orgId, clipId) {
         return this.request("GET", ENDPOINTS.ORG_CLIP_EXEC_ACCESS(orgId, clipId));
       }
       /**
        * Replace a clip's per-org agent exec access. Human-only (agent principals
-       * get 403); under `all_agents` the `agent_ids` must be empty. Every granted
-       * id must be an active agent of this org (else `400 INVALID_INPUT`).
+       * get 403); under `all_agents` both lists must be empty; pass either
+       * `agent_ids` (legacy flat form → every agent gets `connection_scope: 'all'`)
+       * or `grants` (connection-scoped), never both. Every granted id must be an
+       * active agent of this org, and every `connection_ids` entry a connection of
+       * THIS clip in this org (else `400 INVALID_INPUT`).
        */
       async putClipAgentExecAccess(orgId, clipId, access) {
         return this.request("PUT", ENDPOINTS.ORG_CLIP_EXEC_ACCESS(orgId, clipId), access);
@@ -2984,6 +3055,41 @@ var init_client = __esm({
           headers: expectedVersion ? { "If-Match": `"proxy-${expectedVersion}"` } : void 0
         });
       }
+      /**
+       * Read a hosted Cloud Profile's one-shot cookie-seed status (manager-only:
+       * hosted human maintainer or org admin). Sanitized — cookie VALUES never come
+       * back, only `cookie_count` and the distinct target `domains`. `can_mutate` /
+       * `lease_status` are the authoritative idle gate. Typed errors: `EDGE_NOT_HOSTED`
+       * (BYOC device), `NOT_FOUND` (unknown profile).
+       */
+      async getEdgeProfileCookieSeed(orgId, edgeId, profileName) {
+        return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILE_COOKIES(orgId, edgeId, profileName));
+      }
+      /**
+       * Set/replace the profile's one-shot cookie seed (the full normalized cookie
+       * array every time) — IDLE ONLY: while the profile's hosted browser is running
+       * the server answers 409 `EDGE_PROFILE_IN_USE`; close the viewer, wait for idle
+       * scale-to-zero, and retry. The next cold start injects the cookies into the
+       * profile partition and consumes the seed. Other typed errors:
+       * `EDGE_COOKIE_SEED_STALE` (409 — expectedVersion lost a tab race, sent as the
+       * `cookieseed-<version>` If-Match), `EDGE_DELETING` (409), and
+       * `SECRETBOX_UNCONFIGURED` (503 — server cannot store cookies safely).
+       */
+      async setEdgeProfileCookieSeed(orgId, edgeId, profileName, req, expectedVersion) {
+        return this.request("PUT", ENDPOINTS.ORG_EDGE_PROFILE_COOKIES(orgId, edgeId, profileName), req, void 0, false, {
+          headers: expectedVersion ? { "If-Match": `"cookieseed-${expectedVersion}"` } : void 0
+        });
+      }
+      /**
+       * Clear the pending cookie seed (does NOT sign the profile out — cookies
+       * already injected into the partition stay). Idle-only like set — 409
+       * `EDGE_PROFILE_IN_USE` while the browser is live.
+       */
+      async clearEdgeProfileCookieSeed(orgId, edgeId, profileName, expectedVersion) {
+        return this.request("DELETE", ENDPOINTS.ORG_EDGE_PROFILE_COOKIES(orgId, edgeId, profileName), void 0, void 0, false, {
+          headers: expectedVersion ? { "If-Match": `"cookieseed-${expectedVersion}"` } : void 0
+        });
+      }
       /**
        * Execute a registry clip command on an Edge device.
        *
@@ -3551,6 +3657,13 @@ var init_gateway_lane_flow = __esm({
   }
 });
 
+// ts/agent-core/dist/dispatch-inactivity-deadline.js
+var init_dispatch_inactivity_deadline = __esm({
+  "ts/agent-core/dist/dispatch-inactivity-deadline.js"() {
+    "use strict";
+  }
+});
+
 // ts/agent-core/dist/routing.js
 var init_routing = __esm({
   "ts/agent-core/dist/routing.js"() {
@@ -30157,6 +30270,7 @@ var init_gateway_base = __esm({
     init_dispatch_adapter();
     init_gateway_lane_flow();
     init_lane_ledger();
+    init_dispatch_inactivity_deadline();
     init_routing();
     init_redact();
     init_step_persister();
@@ -55014,6 +55128,13 @@ var init_platform_config = __esm({
   }
 });
 
+// ts/agent-core/dist/generated/codex-message-delivery.js
+var init_codex_message_delivery = __esm({
+  "ts/agent-core/dist/generated/codex-message-delivery.js"() {
+    "use strict";
+  }
+});
+
 // ts/agent-core/dist/skills/parall-platform.js
 var init_parall_platform = __esm({
   "ts/agent-core/dist/skills/parall-platform.js"() {
@@ -55088,8 +55209,10 @@ var init_skills = __esm({
 var init_platform_instructions2 = __esm({
   "ts/agent-core/dist/platform-instructions.js"() {
     "use strict";
+    init_codex_message_delivery();
     init_platform_instructions();
     init_skills();
+    init_codex_message_delivery();
     init_platform_instructions();
   }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/daemon",
-  "version": "1.55.0",
+  "version": "1.55.2",
   "description": "Parall local agent runtime — daemon supervisor + bridge runtimes, bundled as standalone JS files",
   "license": "MIT",
   "repository": {
@@ -33,11 +33,11 @@
     "@aws-sdk/client-s3": "3.984.0",
     "@pinixai/bb-browser-pro": "0.15.0",
     "ws": "^8.18.0",
-    "@parall/agent-core": "1.55.0",
-    "@parall/sdk": "1.55.0",
-    "@parall/claude-agent": "1.55.0",
-    "@parall/codex-agent": "1.55.0",
-    "@parall/openclaw-agent": "1.55.0"
+    "@parall/agent-core": "1.55.2",
+    "@parall/claude-agent": "1.55.2",
+    "@parall/openclaw-agent": "1.55.2",
+    "@parall/sdk": "1.55.2",
+    "@parall/codex-agent": "1.55.2"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",