@parall/daemon 1.55.4 → 1.56.0

package/bundle/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.55.4",
-  "built_at": "2026-08-15T12:55:26.423Z",
+  "version": "1.56.0",
+  "built_at": "2026-08-20T12:13:18.765Z",
   "min_node_version": "20.0.0",
   "files": {
     "bb-browser-daemon.js": {
@@ -16,29 +16,29 @@
       "size": 18
     },
     "parall-browser-pod.js": {
-      "sha256": "6480baf1924cccec2cfe8e93fecb5251f238de2c52b2b067e29875fa2b6f7db8",
-      "size": 2948318
+      "sha256": "29465ed25d7eaa9f7f6e35345f0501594fafa0c885a4ad8bc9712aa6a20fac6b",
+      "size": 2961071
     },
     "parall-channel-exec.js": {
       "sha256": "7c2a6e12483a45e9eb4a42cd7d4cdd3c4fa21dd09ac1347d9a3e177b4ddee930",
       "size": 7220
     },
     "parall-claude-agent.js": {
-      "sha256": "a340c800280fd7522f1ae9b5082776b6bc23e4e2d7cbab21077e209753b015bc",
-      "size": 2823377
+      "sha256": "4ccbdb9f93cb2adeea7313b4391c471c0df150a185fb91b439c59274abfff506",
+      "size": 2838235
     },
     "parall-codex-agent.js": {
-      "sha256": "3f9ceb215129568c250b0687739a55f8cf4643259d47654dcb2ed2288b29ad89",
-      "size": 2855324
+      "sha256": "a0dd40e7a27785f60ca8fff9a1c158203f5381447223dad3374811ec22ca1da5",
+      "size": 2870182
     },
     "parall-daemon.js": {
-      "sha256": "571b05da902ead03fb76f6b634a0850d50776bd0c8f1cbc3482c88356256865e",
-      "size": 3014129
+      "sha256": "0f149f68323a5013c1afc5ddc3de6f1cd94b5005dac905ac2142f85fe7987ee9",
+      "size": 3028253
     },
     "parall-openclaw-agent.js": {
       "sha256": "856a1c3a9ae0ffef8efe2481fa1171dbeb1d67cccb88616aa9bf16da96a69355",
       "size": 9923
     }
   },
-  "signature": "NzZ4HzOlAb7a8+sumoAejzCnXub6F3oQO684Q5Mnsw+LyQs92GsrvHUy0GmcH8/Ft+ZQOiZX7BPpPnATAz/FDg=="
+  "signature": "WXtWlGYLvRViBXtS33ZMXudumDWb7pcc8PkegD7b6DIONYlVsnlLWxqbpuA2o7S7g6poInLXWY0LTt+I1RIGAQ=="
 }

package/bundle/parall-browser-pod.js

@@ -63533,6 +63533,16 @@ function browserViewerRequestOptions(command, opts) {
   };
 }
 
+// ts/sdk/dist/attachment-endpoints.js
+function attachmentEndpoints(apiBase) {
+  return {
+    UPLOAD_PRESIGN: (orgId) => `${apiBase}/orgs/${orgId}/upload/presign`,
+    UPLOAD_COMPLETE: (orgId) => `${apiBase}/orgs/${orgId}/upload/complete`,
+    UPLOAD_ABORT: (orgId) => `${apiBase}/orgs/${orgId}/upload/abort`,
+    FILE: (id) => `${apiBase}/files/${id}`
+  };
+}
+
 // ts/sdk/dist/constants.js
 var API_BASE = "/api/v1";
 var WIKI_BASE = "/wiki/v1";
@@ -63605,9 +63615,7 @@ var ENDPOINTS = {
   MESSAGE_REACTIONS: (id) => `${API_BASE}/messages/${id}/reactions`,
   MESSAGE_REACTION: (id, emoji) => `${API_BASE}/messages/${id}/reactions/${encodeURIComponent(emoji)}`,
   // Upload (org-scoped)
-  UPLOAD_PRESIGN: (orgId) => `${API_BASE}/orgs/${orgId}/upload/presign`,
-  UPLOAD_COMPLETE: (orgId) => `${API_BASE}/orgs/${orgId}/upload/complete`,
-  FILE: (id) => `${API_BASE}/files/${id}`,
+  ...attachmentEndpoints(API_BASE),
   // Approval requests (org-scoped)
   APPROVAL_REQUESTS: (orgId) => `${API_BASE}/orgs/${orgId}/approval-requests`,
   // Approvals (global)
@@ -63693,6 +63701,7 @@ var ENDPOINTS = {
   TASKS: (orgId) => `${API_BASE}/orgs/${orgId}/tasks`,
   TASK_SUBTASK_SUMMARY: (orgId) => `${API_BASE}/orgs/${orgId}/tasks/subtask-summary`,
   TASK: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}`,
+  TASK_MOVE: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/move`,
   TASK_ARCHIVE: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/archive`,
   TASK_RESTORE: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/restore`,
   TASK_WATCH: (orgId, taskId) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/watch`,
@@ -63788,6 +63797,8 @@ var ENDPOINTS = {
   // backend router so `deleted` isn't captured as a {wikiId}; the SDK builder
   // is just a string.
   WIKIS_DELETED: (orgId) => `${WIKI_BASE}/orgs/${orgId}/wikis/deleted`,
+  // Org-wide changeset listing across readable wikis (Working on tab).
+  WIKI_ORG_CHANGESETS: (orgId) => `${WIKI_BASE}/orgs/${orgId}/wiki-changesets`,
   // Detail URL — also reused for DELETE (soft-delete) and `${WIKI}/restore`.
   WIKI: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}`,
   WIKI_RESTORE: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/restore`,
@@ -63817,6 +63828,12 @@ var ENDPOINTS = {
   // Wiki Path Restrictions (AFCS narrowing ACL — private subtrees)
   WIKI_RESTRICTIONS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/restrictions`,
   WIKI_RESTRICTION: (orgId, wikiId, restrictionId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/restrictions/${restrictionId}`,
+  WIKI_ACCESS_POLICY: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/access-policy`,
+  WIKI_ACCESS_POLICY_MEMBERS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/access-policy/members`,
+  WIKI_MEMBERSHIP_SELF: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/membership/self`,
+  // Library-level star (self-scoped bookmark; POST = star, DELETE = unstar).
+  WIKI_STARS_SELF: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/stars/self`,
+  WIKI_MEMBERS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/members`,
   WIKI_ACCESS_STATUS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/access-status`,
   WIKI_ACCESS_REQUESTS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/access-requests`,
   // Wiki History (commits, file commits, blame)
@@ -63937,6 +63954,21 @@ var ENDPOINTS = {
   ORG_EDGE_DEVICE_UNREGISTER: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/unregister`,
   ORG_EDGE_ONBOARDING: (orgId) => `/api/v1/orgs/${orgId}/edge/onboarding`,
   ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
+  ORG_EDGE_PROFILE_OPERATIONS: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profile-operations`,
+  ORG_EDGE_PROFILE_OPERATION: (orgId, edgeId, operationId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profile-operations/${operationId}`,
+  ORG_EDGE_PROFILE_OPERATION_CONFIRM: (orgId, edgeId, operationId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profile-operations/${operationId}/confirm`,
+  ORG_BROWSER_ALIASES: (orgId) => `/api/v1/orgs/${orgId}/browser-aliases`,
+  ORG_BROWSER_ALIAS: (orgId, aliasId) => `/api/v1/orgs/${orgId}/browser-aliases/${aliasId}`,
+  ORG_BROWSER_ALIAS_READINESS_CHECKS: (orgId, aliasId) => `/api/v1/orgs/${orgId}/browser-aliases/${aliasId}/readiness-checks`,
+  ORG_BROWSER_ALIAS_READINESS_CHECK: (orgId, aliasId, checkId) => `/api/v1/orgs/${orgId}/browser-aliases/${aliasId}/readiness-checks/${checkId}`,
+  ORG_API_KEY_BROWSER_ALIAS_GRANTS: (orgId, keyId) => `/api/v1/orgs/${orgId}/api-keys/${keyId}/browser-alias-grants`,
+  ORG_API_KEY_BROWSER_ALIAS_GRANT: (orgId, keyId, aliasId) => `/api/v1/orgs/${orgId}/api-keys/${keyId}/browser-alias-grants/${aliasId}`,
+  ORG_MANAGED_ALIASES: (orgId) => `/api/v1/orgs/${orgId}/aliases`,
+  ORG_MANAGED_ALIAS: (orgId, aliasName) => `/api/v1/orgs/${orgId}/aliases/${encodeURIComponent(aliasName)}`,
+  ORG_BROWSER_ALIAS_EXECUTIONS: (orgId) => `/api/v1/orgs/${orgId}/executions`,
+  ORG_BROWSER_ALIAS_EXECUTION: (orgId, requestId) => `/api/v1/orgs/${orgId}/executions/${encodeURIComponent(requestId)}`,
+  ORG_BROWSER_USE_OPERATIONS: (orgId) => `/api/v1/orgs/${orgId}/browser-use/operations`,
+  ORG_BROWSER_USE_OPERATION: (orgId, operationId) => `/api/v1/orgs/${orgId}/browser-use/operations/${encodeURIComponent(operationId)}`,
   // Per-profile egress proxy (hosted Cloud Profiles; manager-only, human-only).
   ORG_EDGE_PROFILE_PROXY: (orgId, edgeId, profileName) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/proxy`,
   // Per-profile one-shot cookie seed (hosted Cloud Profiles; manager-only,
@@ -63951,6 +63983,8 @@ var ENDPOINTS = {
   CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`,
   // Clip registry (v3, org-scoped, served by api-server — `crg_` entries)
   ORG_CLIP_REGISTRY: (orgId) => `/api/v1/orgs/${orgId}/clip-registry`,
+  ORG_CLIP_REGISTRY_RESOLVE: (orgId) => `/api/v1/orgs/${orgId}/clip-registry/resolve`,
+  ORG_CLIP_REGISTRY_SEARCH: (orgId) => `/api/v1/orgs/${orgId}/clip-registry/search`,
   ORG_CLIP_REGISTRY_CLIP: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}`,
   ORG_CLIP_REGISTRY_PUBLISH: (orgId) => `/api/v1/orgs/${orgId}/clip-registry/publish`,
   ORG_CLIP_INSTALL: (orgId) => `/api/v1/orgs/${orgId}/clips/install`,
@@ -63993,6 +64027,15 @@ var ProjectTaskClient = class {
   async deleteTask(orgId, taskId, opts) {
     return this.request("DELETE", ENDPOINTS.TASK(orgId, taskId), void 0, opts?.force ? { force: "true" } : void 0);
   }
+  /**
+   * Moves a task and its whole subtree into another project (renumbering it
+   * there; old identifiers stay resolvable as aliases). The caller needs
+   * update access on the task (source project membership) and read access to
+   * the target project.
+   */
+  async moveTask(orgId, taskId, data2) {
+    return this.request("POST", ENDPOINTS.TASK_MOVE(orgId, taskId), data2);
+  }
   async archiveTask(orgId, taskId) {
     return this.request("POST", ENDPOINTS.TASK_ARCHIVE(orgId, taskId));
   }
@@ -64196,8 +64239,44 @@ var WechatClient = class extends TaskLabelClient {
   }
 };
 
+// ts/sdk/dist/attachment-client.js
+var COMPLETION_RETRY_DELAYS_MS = [250, 750];
+function isRetryableCompletionError(error2) {
+  if (!error2 || typeof error2 !== "object" || !("status" in error2))
+    return false;
+  const status = error2.status;
+  return status === 0 || typeof status === "number" && status >= 500;
+}
+var AttachmentClient = class extends WechatClient {
+  async getUploadPresignUrl(orgId, req) {
+    return this.request("POST", ENDPOINTS.UPLOAD_PRESIGN(orgId), req);
+  }
+  async completeUpload(orgId, attachmentId, parts) {
+    const body = {
+      attachment_id: attachmentId,
+      parts
+    };
+    for (let attempt = 0; ; attempt += 1) {
+      try {
+        return await this.request("POST", ENDPOINTS.UPLOAD_COMPLETE(orgId), body);
+      } catch (error2) {
+        const delay = COMPLETION_RETRY_DELAYS_MS[attempt];
+        if (delay === void 0 || !isRetryableCompletionError(error2))
+          throw error2;
+        await new Promise((resolve2) => setTimeout(resolve2, delay));
+      }
+    }
+  }
+  async abortUpload(orgId, attachmentId) {
+    return this.request("POST", ENDPOINTS.UPLOAD_ABORT(orgId), { attachment_id: attachmentId });
+  }
+  async getFileUrl(id, opts) {
+    return this.request("GET", ENDPOINTS.FILE(id), void 0, opts?.download ? { download: true } : void 0);
+  }
+};
+
 // ts/sdk/dist/client.js
-var ParallClient = class _ParallClient extends WechatClient {
+var ParallClient = class _ParallClient extends AttachmentClient {
   baseUrl;
   wikiBaseUrl;
   token;
@@ -64844,16 +64923,6 @@ var ParallClient = class _ParallClient extends WechatClient {
     const res = await this.request("GET", ENDPOINTS.MESSAGE_REACTIONS(messageId));
     return res.reactions;
   }
-  // ---- File Upload ----
-  async getUploadPresignUrl(orgId, req) {
-    return this.request("POST", ENDPOINTS.UPLOAD_PRESIGN(orgId), req);
-  }
-  async completeUpload(orgId, attachmentId) {
-    return this.request("POST", ENDPOINTS.UPLOAD_COMPLETE(orgId), { attachment_id: attachmentId });
-  }
-  async getFileUrl(id, opts) {
-    return this.request("GET", ENDPOINTS.FILE(id), void 0, opts?.download ? { download: true } : void 0);
-  }
   // ---- Approvals ----
   async getApproval(id) {
     return this.request("GET", ENDPOINTS.APPROVAL(id));
@@ -64861,8 +64930,14 @@ var ParallClient = class _ParallClient extends WechatClient {
   async requestApproval(orgId, req) {
     return this.request("POST", ENDPOINTS.APPROVAL_REQUESTS(orgId), req);
   }
-  async decideApproval(id, decision) {
-    return this.request("POST", ENDPOINTS.APPROVAL_DECIDE(id), { decision });
+  async decideApproval(id, decision, reason) {
+    if (decision === "approve" && reason?.trim()) {
+      throw new ApiError(400, "Approval reason is only allowed for rejection decisions", "INVALID_DECISION_REASON");
+    }
+    return this.request("POST", ENDPOINTS.APPROVAL_DECIDE(id), {
+      decision,
+      ...decision === "reject" && reason !== void 0 ? { reason } : {}
+    });
   }
   async cancelApproval(id) {
     return this.request("POST", ENDPOINTS.APPROVAL_CANCEL(id));
@@ -65695,6 +65770,17 @@ var ParallClient = class _ParallClient extends WechatClient {
     const res = await this.request("GET", ENDPOINTS.WIKI_CHANGESETS(orgId, wikiId));
     return res.data.map(normalizeWikiChangeset);
   }
+  /** Org-wide changeset listing across every wiki the caller can read.
+   *  Server default (no `status`) is the pending set: proposed,
+   *  approval_pending, approved. */
+  async getOrgWikiChangesets(orgId, opts) {
+    const params = new URLSearchParams();
+    for (const s of opts?.status ?? [])
+      params.append("status", s);
+    const qs = params.toString();
+    const res = await this.request("GET", `${ENDPOINTS.WIKI_ORG_CHANGESETS(orgId)}${qs ? `?${qs}` : ""}`);
+    return (res.data ?? []).map(normalizeWikiChangeset);
+  }
   async getWikiChangeset(orgId, wikiId, changesetId) {
     return normalizeWikiChangeset(await this.request("GET", ENDPOINTS.WIKI_CHANGESET(orgId, wikiId, changesetId)));
   }
@@ -65783,6 +65869,46 @@ var ParallClient = class _ParallClient extends WechatClient {
   async getWikiAccessStatus(orgId, wikiId, path7) {
     return this.request("GET", ENDPOINTS.WIKI_ACCESS_STATUS(orgId, wikiId), void 0, path7 ? { path: path7 } : void 0);
   }
+  // ---- Wiki membership projection (who-can-access, invites, join/leave) ----
+  async getWikiAccessPolicy(orgId, wikiId, path7 = "") {
+    return this.request("GET", ENDPOINTS.WIKI_ACCESS_POLICY(orgId, wikiId), void 0, path7 ? { path: path7 } : void 0);
+  }
+  async putWikiAccessPolicy(orgId, wikiId, policy) {
+    return this.request("PUT", ENDPOINTS.WIKI_ACCESS_POLICY(orgId, wikiId), policy);
+  }
+  /** Add-only invite (viewer/editor); allowed for managers, and for editors
+   *  when the library enables editors_can_invite. */
+  async addWikiMember(orgId, wikiId, subject, role) {
+    await this.request("POST", ENDPOINTS.WIKI_ACCESS_POLICY_MEMBERS(orgId, wikiId), {
+      subject,
+      role
+    });
+  }
+  /** Join a PUBLIC library as an explicit member (lands at the library's
+   *  default role). Restricted libraries answer 409 JOIN_REQUIRES_REQUEST —
+   *  go through createWikiAccessRequest instead. */
+  async joinWiki(orgId, wikiId) {
+    await this.request("POST", ENDPOINTS.WIKI_MEMBERSHIP_SELF(orgId, wikiId));
+  }
+  /** Remove the caller's explicit membership (team-granted membership stays). */
+  async leaveWiki(orgId, wikiId) {
+    await this.request("DELETE", ENDPOINTS.WIKI_MEMBERSHIP_SELF(orgId, wikiId));
+  }
+  /** Star a library for the caller (sidebar Starred group). Idempotent —
+   *  re-starring is a 204 no-op. Requires read access; hidden private
+   *  libraries answer 404 like absent IDs. */
+  async starWiki(orgId, wikiId) {
+    await this.request("POST", ENDPOINTS.WIKI_STARS_SELF(orgId, wikiId));
+  }
+  /** Remove the caller's star. Idempotent — unstarring a never-starred
+   *  library is a 204 no-op. */
+  async unstarWiki(orgId, wikiId) {
+    await this.request("DELETE", ENDPOINTS.WIKI_STARS_SELF(orgId, wikiId));
+  }
+  async getWikiMembers(orgId, wikiId) {
+    const res = await this.request("GET", ENDPOINTS.WIKI_MEMBERS(orgId, wikiId));
+    return res.data ?? [];
+  }
   async createWikiAccessRequest(orgId, wikiId, data2) {
     await this.request("POST", ENDPOINTS.WIKI_ACCESS_REQUESTS(orgId, wikiId), data2);
   }
@@ -66132,6 +66258,31 @@ var ParallClient = class _ParallClient extends WechatClient {
     const resp = await this.request("GET", `${ENDPOINTS.ORG_CLIP_REGISTRY(orgId)}?limit=100`);
     return resp ?? [];
   }
+  /**
+   * Resolve an exact `<publisher org, name>` reference to its registry entry —
+   * the npm-style point read. Deliberately independent of catalog size: no
+   * Search, no pagination, same read-visibility boundary as `getRegistryClip`
+   * (cross-org requires public + approved). 404 `NOT_FOUND` when the publisher
+   * org has no visible clip of that exact name.
+   */
+  async resolveRegistryClip(orgId, publisherOrgId, name) {
+    const params = new URLSearchParams({ org_id: publisherOrgId, name });
+    return this.request("GET", `${ENDPOINTS.ORG_CLIP_REGISTRY_RESOLVE(orgId)}?${params}`);
+  }
+  /**
+   * Server-side fuzzy discovery over the visible registry (name/description
+   * substring match), paginated. The discovery verb: rows carry the `crg_` id
+   * that {@link installRegistryClip} takes.
+   */
+  async searchOrgRegistryClips(orgId, query, opts) {
+    const params = new URLSearchParams({ q: query });
+    if (opts?.limit !== void 0)
+      params.set("limit", String(opts.limit));
+    if (opts?.offset !== void 0)
+      params.set("offset", String(opts.offset));
+    const resp = await this.request("GET", `${ENDPOINTS.ORG_CLIP_REGISTRY_SEARCH(orgId)}?${params}`);
+    return resp ?? [];
+  }
   /**
    * Install a registry clip into the org (a reference in `clip_installs`, not a
    * copy). Idempotent: installing an already-installed clip returns the same
@@ -66245,6 +66396,86 @@ var ParallClient = class _ParallClient extends WechatClient {
   async listEdgeProfiles(orgId, edgeId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILES(orgId, edgeId));
   }
+  /** Start one durable Local BYOC Profile operation. Network-unknown callers
+   * must retry with the same key or recover by operation id; a different body
+   * under the same key is rejected. */
+  async createEdgeProfileOperation(orgId, edgeId, request, idempotencyKey) {
+    return this.request("POST", ENDPOINTS.ORG_EDGE_PROFILE_OPERATIONS(orgId, edgeId), request, void 0, false, { headers: { "Idempotency-Key": idempotencyKey } });
+  }
+  /** Strong-confirm the exact durable Delete impact. A changed impact returns
+   * PROFILE_DELETE_IMPACT_CHANGED with a replacement receipt in
+   * `ApiError.extras.details.operation`. */
+  async confirmEdgeProfileOperation(orgId, edgeId, operationId, request) {
+    return this.request("POST", ENDPOINTS.ORG_EDGE_PROFILE_OPERATION_CONFIRM(orgId, edgeId, operationId), request);
+  }
+  /** Sole read/recovery surface. The server may reconcile an already durable
+   * dispatch/finalization while returning this receipt. */
+  async getEdgeProfileOperation(orgId, edgeId, operationId) {
+    return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILE_OPERATION(orgId, edgeId, operationId));
+  }
+  /** Create and atomically materialize one Local BYOC Browser Alias. A replay
+   * with the same idempotency key and body returns the original stable ccn_. */
+  async createBrowserAlias(orgId, request) {
+    return this.request("POST", ENDPOINTS.ORG_BROWSER_ALIASES(orgId), request);
+  }
+  async listBrowserAliases(orgId) {
+    return this.request("GET", ENDPOINTS.ORG_BROWSER_ALIASES(orgId));
+  }
+  async getBrowserAlias(orgId, aliasId) {
+    return this.request("GET", ENDPOINTS.ORG_BROWSER_ALIAS(orgId, aliasId));
+  }
+  async renameBrowserAlias(orgId, aliasId, request) {
+    return this.request("PATCH", ENDPOINTS.ORG_BROWSER_ALIAS(orgId, aliasId), request);
+  }
+  async deleteBrowserAlias(orgId, aliasId, request) {
+    return this.request("DELETE", ENDPOINTS.ORG_BROWSER_ALIAS(orgId, aliasId), request);
+  }
+  /** Start one durable readiness check. The key is carried as the standard
+   * Idempotency-Key header; the request body is intentionally empty. */
+  async createBrowserAliasReadinessCheck(orgId, aliasId, request) {
+    return this.request("POST", ENDPOINTS.ORG_BROWSER_ALIAS_READINESS_CHECKS(orgId, aliasId), void 0, void 0, false, { headers: { "Idempotency-Key": request.idempotency_key } });
+  }
+  /** Sole durable recovery surface for one readiness request. */
+  async getBrowserAliasReadinessCheck(orgId, aliasId, checkId) {
+    return this.request("GET", ENDPOINTS.ORG_BROWSER_ALIAS_READINESS_CHECK(orgId, aliasId, checkId));
+  }
+  /** Organization Owner view. Hashes, reviewed snapshots and deltas are
+   * intentionally available only on this human-JWT management surface. */
+  async listBrowserAliasGrants(orgId, keyId) {
+    return this.request("GET", ENDPOINTS.ORG_API_KEY_BROWSER_ALIAS_GRANTS(orgId, keyId));
+  }
+  async getBrowserAliasGrant(orgId, keyId, aliasId) {
+    return this.request("GET", ENDPOINTS.ORG_API_KEY_BROWSER_ALIAS_GRANT(orgId, keyId, aliasId));
+  }
+  async replaceBrowserAliasGrant(orgId, keyId, aliasId, request) {
+    return this.request("PUT", ENDPOINTS.ORG_API_KEY_BROWSER_ALIAS_GRANT(orgId, keyId, aliasId), request);
+  }
+  /** Managed-key discovery. The response is already grant-filtered and never
+   * carries contract hashes, review snapshots, Edge IDs or Profile IDs. */
+  async listManagedBrowserAliases(orgId) {
+    return this.request("GET", ENDPOINTS.ORG_MANAGED_ALIASES(orgId));
+  }
+  async getManagedBrowserAlias(orgId, aliasName) {
+    return this.request("GET", ENDPOINTS.ORG_MANAGED_ALIAS(orgId, aliasName));
+  }
+  /** Accept and dispatch one @alias command. request_id is generated by the
+   * caller before local validation and is also the sole durable recovery key. */
+  async createBrowserAliasExecution(orgId, request) {
+    return this.request("POST", ENDPOINTS.ORG_BROWSER_ALIAS_EXECUTIONS(orgId), request);
+  }
+  async getBrowserAliasExecution(orgId, requestId) {
+    return this.request("GET", ENDPOINTS.ORG_BROWSER_ALIAS_EXECUTION(orgId, requestId));
+  }
+  /** Accept one idempotent Browser Use operation for an explicit Profile.
+   * The Server resolves Profile→Edge; callers never select an Edge directly. */
+  async createBrowserUseOperation(orgId, request) {
+    return this.request("POST", ENDPOINTS.ORG_BROWSER_USE_OPERATIONS(orgId), request);
+  }
+  /** Recover the durable receipt. Successful data is present only inside the
+   * Server's short encrypted result TTL; terminal proof remains afterwards. */
+  async getBrowserUseOperation(orgId, operationId) {
+    return this.request("GET", ENDPOINTS.ORG_BROWSER_USE_OPERATION(orgId, operationId));
+  }
   /**
    * Read a hosted Cloud Profile's egress-proxy status (manager-only: hosted
    * human maintainer or org admin). Sanitized — the password never comes back.