@parall/daemon 1.56.1 → 1.57.1

package/bundle/manifest.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.56.1",
-  "built_at": "2026-08-20T15:59:41.375Z",
+  "version": "1.57.1",
+  "built_at": "2026-08-23T15:43:08.791Z",
   "min_node_version": "20.0.0",
   "files": {
     "bb-browser-daemon.js": {
@@ -16,29 +16,29 @@
       "size": 18
     },
     "parall-browser-pod.js": {
-      "sha256": "29465ed25d7eaa9f7f6e35345f0501594fafa0c885a4ad8bc9712aa6a20fac6b",
-      "size": 2961071
+      "sha256": "1d1a58c7887c3cc0b1adf424f1a0f1a1f1203a1fa960226b8a4f51d07ac6d224",
+      "size": 2967901
     },
     "parall-channel-exec.js": {
       "sha256": "7c2a6e12483a45e9eb4a42cd7d4cdd3c4fa21dd09ac1347d9a3e177b4ddee930",
       "size": 7220
     },
     "parall-claude-agent.js": {
-      "sha256": "4ccbdb9f93cb2adeea7313b4391c471c0df150a185fb91b439c59274abfff506",
-      "size": 2838235
+      "sha256": "0955733acf00be0b690bb5c1b72f3bfd939d746b23a301c84272ba37e9b0834e",
+      "size": 2847527
     },
     "parall-codex-agent.js": {
-      "sha256": "a0dd40e7a27785f60ca8fff9a1c158203f5381447223dad3374811ec22ca1da5",
-      "size": 2870182
+      "sha256": "edd30679e40834d7af752650b250e44ad9476969de446b5fdfbdef46df366a77",
+      "size": 2879474
     },
     "parall-daemon.js": {
-      "sha256": "0f149f68323a5013c1afc5ddc3de6f1cd94b5005dac905ac2142f85fe7987ee9",
-      "size": 3028253
+      "sha256": "48ad3e0c78a2abd16b23a6fb370da97b339b328f45debae69d0c07bb5438f545",
+      "size": 3036196
     },
     "parall-openclaw-agent.js": {
       "sha256": "856a1c3a9ae0ffef8efe2481fa1171dbeb1d67cccb88616aa9bf16da96a69355",
       "size": 9923
     }
   },
-  "signature": "rveWOLf71C0Rr6tMca/y0AlIm7l2yLQIUbgJABu5NEz0TLXgWVhymuNYkGDKMhx0aztrea064KwfTBa8rk3JCA=="
+  "signature": "b1L2thmtzkfAijbNPw/2P8+gdqd86Bg2VDpBoC6gnlNALDH9Ta1E9IPEn1w8fPSnBPARX+AfPYseSdkKL8DnBQ=="
 }

package/bundle/parall-browser-pod.js

@@ -18360,7 +18360,7 @@ var require_response = __commonJS({
     var assert = __require("node:assert");
     var { isomorphicEncode, serializeJavascriptValueToJSONString } = require_infra();
     var textEncoder = new TextEncoder("utf-8");
-    var Response = class _Response {
+    var Response2 = class _Response {
       /** @type {Headers} */
       #headers;
       #state;
@@ -18532,13 +18532,13 @@ var require_response = __commonJS({
         response.#state = newState;
       }
     };
-    var { getResponseHeaders, setResponseHeaders, getResponseState, setResponseState } = Response;
-    Reflect.deleteProperty(Response, "getResponseHeaders");
-    Reflect.deleteProperty(Response, "setResponseHeaders");
-    Reflect.deleteProperty(Response, "getResponseState");
-    Reflect.deleteProperty(Response, "setResponseState");
-    mixinBody(Response, getResponseState);
-    Object.defineProperties(Response.prototype, {
+    var { getResponseHeaders, setResponseHeaders, getResponseState, setResponseState } = Response2;
+    Reflect.deleteProperty(Response2, "getResponseHeaders");
+    Reflect.deleteProperty(Response2, "setResponseHeaders");
+    Reflect.deleteProperty(Response2, "getResponseState");
+    Reflect.deleteProperty(Response2, "setResponseState");
+    mixinBody(Response2, getResponseState);
+    Object.defineProperties(Response2.prototype, {
       type: kEnumerableProperty,
       url: kEnumerableProperty,
       status: kEnumerableProperty,
@@ -18554,7 +18554,7 @@ var require_response = __commonJS({
         configurable: true
       }
     });
-    Object.defineProperties(Response, {
+    Object.defineProperties(Response2, {
       json: kEnumerableProperty,
       redirect: kEnumerableProperty,
       error: kEnumerableProperty
@@ -18687,7 +18687,7 @@ var require_response = __commonJS({
       }
     }
     function fromInnerResponse(innerResponse, guard) {
-      const response = new Response(kConstruct);
+      const response = new Response2(kConstruct);
       setResponseState(response, innerResponse);
       const headers = new Headers2(kConstruct);
       setResponseHeaders(response, headers);
@@ -18741,14 +18741,14 @@ var require_response = __commonJS({
         converter: webidl.converters.HeadersInit
       }
     ]);
-    webidl.is.Response = webidl.util.MakeTypeAssertion(Response);
+    webidl.is.Response = webidl.util.MakeTypeAssertion(Response2);
     module.exports = {
       isNetworkError,
       makeNetworkError,
       makeResponse,
       makeAppropriateNetworkError,
       filterResponse,
-      Response,
+      Response: Response2,
       cloneResponse,
       fromInnerResponse,
       getResponseState
@@ -63563,6 +63563,8 @@ var ENDPOINTS = {
   // Users
   USERS_ME: `${API_BASE}/users/me`,
   USER_AVATAR: `${API_BASE}/users/me/avatar`,
+  PERSONAL_API_KEYS: `${API_BASE}/users/me/api-keys`,
+  PERSONAL_API_KEY: (keyId) => `${API_BASE}/users/me/api-keys/${keyId}`,
   USER: (id) => `${API_BASE}/users/${id}`,
   // WebSocket ticket
   WS_TICKET: `${API_BASE}/ws/ticket`,
@@ -63577,6 +63579,24 @@ var ENDPOINTS = {
   TEAM_MEMBERS: (orgId, teamId) => `${API_BASE}/orgs/${orgId}/teams/${teamId}/members`,
   TEAM_MEMBER: (orgId, teamId, userId) => `${API_BASE}/orgs/${orgId}/teams/${teamId}/members/${userId}`,
   ORG_MEMBERS_ONLINE: (orgId) => `${API_BASE}/orgs/${orgId}/members/online`,
+  LLM_PROVIDERS: (orgId) => `${API_BASE}/orgs/${orgId}/llm-providers`,
+  LLM_PROVIDER: (orgId, providerId) => `${API_BASE}/orgs/${orgId}/llm-providers/${providerId}`,
+  ORG_LLM_MODELS: (orgId) => `${API_BASE}/orgs/${orgId}/llm-models`,
+  ORG_LLM_MODEL: (orgId, modelRowId) => `${API_BASE}/orgs/${orgId}/llm-models/${modelRowId}`,
+  /**
+   * Platform catalog merged with this org's own model rows. Pass `runtime` to
+   * filter org-added models to the ones that runtime can actually reach —
+   * without it a picker can offer a model the write path rejects.
+   */
+  ORG_MODEL_CATALOG: (orgId, runtime, includeModel) => {
+    const params = new URLSearchParams();
+    if (runtime)
+      params.set("runtime", runtime);
+    if (includeModel)
+      params.set("include_model", includeModel);
+    const qs = params.toString();
+    return `${API_BASE}/orgs/${orgId}/models${qs ? `?${qs}` : ""}`;
+  },
   ORG_MEMBER: (orgId, userId) => `${API_BASE}/orgs/${orgId}/members/${userId}`,
   ORG_MEMBER_CHATS: (orgId, memberId) => `${API_BASE}/orgs/${orgId}/members/${memberId}/chats`,
   ORG_MEMBER_TASKS: (orgId, memberId) => `${API_BASE}/orgs/${orgId}/members/${memberId}/tasks`,
@@ -64239,6 +64259,55 @@ var WechatClient = class extends TaskLabelClient {
   }
 };
 
+// ts/sdk/dist/llm-provider-client.js
+var LLMProviderClient = class extends WechatClient {
+  async getLLMProviders(orgId) {
+    const response = await this.request("GET", ENDPOINTS.LLM_PROVIDERS(orgId));
+    return response.data;
+  }
+  async createLLMProvider(orgId, data2) {
+    return this.request("POST", ENDPOINTS.LLM_PROVIDERS(orgId), data2);
+  }
+  /** Omitting `api_key` leaves the stored credential untouched. */
+  async updateLLMProvider(orgId, providerId, data2) {
+    return this.request("PATCH", ENDPOINTS.LLM_PROVIDER(orgId, providerId), data2);
+  }
+  /** Fails with PROVIDER_IN_USE while model rows still point at it. */
+  async deleteLLMProvider(orgId, providerId) {
+    return this.request("DELETE", ENDPOINTS.LLM_PROVIDER(orgId, providerId));
+  }
+  async getOrgLLMModels(orgId) {
+    const response = await this.request("GET", ENDPOINTS.ORG_LLM_MODELS(orgId));
+    return response.data;
+  }
+  async createOrgLLMModel(orgId, data2) {
+    return this.request("POST", ENDPOINTS.ORG_LLM_MODELS(orgId), data2);
+  }
+  /**
+   * Patches a model row in place. Repointing a provider or fixing an upstream
+   * name this way avoids the delete-and-recreate window, during which an
+   * org-only model has no upstream at all and its pinned agents fail.
+   */
+  async updateOrgLLMModel(orgId, modelRowId, data2) {
+    return this.request("PATCH", ENDPOINTS.ORG_LLM_MODEL(orgId, modelRowId), data2);
+  }
+  async deleteOrgLLMModel(orgId, modelRowId) {
+    return this.request("DELETE", ENDPOINTS.ORG_LLM_MODEL(orgId, modelRowId));
+  }
+  /**
+   * The catalog as this org sees it: platform models with the org's rows
+   * merged in. Distinct from the public model catalog, which stays org-agnostic
+   * and cacheable — use this one wherever an org context exists.
+   *
+   * Pass `runtime` on a picker: org-added models are then filtered to what that
+   * runtime's protocol can reach, matching the server-side pin validation.
+   */
+  async getOrgModelCatalog(orgId, runtime, includeModel) {
+    const response = await this.request("GET", ENDPOINTS.ORG_MODEL_CATALOG(orgId, runtime, includeModel));
+    return response.data;
+  }
+};
+
 // ts/sdk/dist/attachment-client.js
 var COMPLETION_RETRY_DELAYS_MS = [250, 750];
 function isRetryableCompletionError(error2) {
@@ -64247,7 +64316,7 @@ function isRetryableCompletionError(error2) {
   const status = error2.status;
   return status === 0 || typeof status === "number" && status >= 500;
 }
-var AttachmentClient = class extends WechatClient {
+var AttachmentClient = class extends LLMProviderClient {
   async getUploadPresignUrl(orgId, req) {
     return this.request("POST", ENDPOINTS.UPLOAD_PRESIGN(orgId), req);
   }
@@ -64275,6 +64344,99 @@ var AttachmentClient = class extends WechatClient {
   }
 };
 
+// ts/sdk/dist/wiki-upload.js
+function createWikiUploadFormData(params) {
+  const form = new FormData();
+  form.append("path", params.path);
+  form.append("file", params.file);
+  if (params.message)
+    form.append("message", params.message);
+  if (params.uploadId)
+    form.append("upload_id", params.uploadId);
+  if (params.conflict)
+    form.append("conflict", params.conflict);
+  if ("contentRoute" in params && params.contentRoute) {
+    form.append("content_route", params.contentRoute);
+  }
+  return form;
+}
+function sendMultipartRequest(options) {
+  if (options.onProgress && typeof XMLHttpRequest !== "undefined") {
+    return multipartXHR(options, options.onProgress);
+  }
+  const timeoutSignal = AbortSignal.timeout(options.timeoutMs);
+  const signal = options.signal ? AbortSignal.any([options.signal, timeoutSignal]) : timeoutSignal;
+  return fetch(options.url, {
+    method: options.method,
+    headers: options.headers,
+    body: options.body,
+    signal
+  });
+}
+function multipartXHR(options, onProgress) {
+  return new Promise((resolve2, reject) => {
+    const xhr = new XMLHttpRequest();
+    let settled = false;
+    const finish = (fn) => {
+      if (settled)
+        return;
+      settled = true;
+      options.signal?.removeEventListener("abort", abortFromSignal);
+      fn();
+    };
+    const abortFromSignal = () => xhr.abort();
+    xhr.open(options.method, options.url, true);
+    xhr.timeout = options.timeoutMs;
+    for (const [name, value] of Object.entries(options.headers)) {
+      xhr.setRequestHeader(name, value);
+    }
+    xhr.upload.onprogress = (event) => {
+      try {
+        onProgress(event.loaded, event.lengthComputable ? event.total : 0);
+      } catch {
+      }
+    };
+    xhr.onload = () => finish(() => {
+      const responseHeaders = new Headers();
+      for (const line of xhr.getAllResponseHeaders().trim().split(/[\r\n]+/)) {
+        if (!line)
+          continue;
+        const separator = line.indexOf(":");
+        if (separator > 0) {
+          responseHeaders.append(line.slice(0, separator).trim(), line.slice(separator + 1).trim());
+        }
+      }
+      const responseBody = xhr.status === 204 || xhr.responseText === "" ? null : xhr.responseText;
+      resolve2(new Response(responseBody, {
+        status: xhr.status,
+        statusText: xhr.statusText,
+        headers: responseHeaders
+      }));
+    });
+    xhr.onerror = () => finish(() => reject(new TypeError("Network request failed")));
+    xhr.ontimeout = () => finish(() => reject(new DOMException("Request timed out", "TimeoutError")));
+    xhr.onabort = () => finish(() => reject(new DOMException("Request aborted", "AbortError")));
+    if (options.signal?.aborted) {
+      finish(() => reject(new DOMException("Request aborted", "AbortError")));
+      return;
+    }
+    options.signal?.addEventListener("abort", abortFromSignal, { once: true });
+    xhr.send(options.body);
+  });
+}
+
+// ts/sdk/dist/wiki-changeset.js
+function normalizeWikiChangeset(changeset) {
+  return {
+    ...changeset,
+    head_branch: changeset.head_branch ?? null,
+    base_commit: changeset.base_commit ?? null,
+    merge_commit: changeset.merge_commit ?? null,
+    changed_paths: changeset.changed_paths ?? [],
+    file_changes: changeset.file_changes ?? []
+  };
+}
+
 // ts/sdk/dist/client.js
 var ParallClient = class _ParallClient extends AttachmentClient {
   baseUrl;
@@ -64480,23 +64642,27 @@ var ParallClient = class _ParallClient extends AttachmentClient {
    * Multipart upload variant of `request`. Same auth / refresh / error
    * handling, but lets the caller hand us a prepared `FormData` (file +
    * text fields) and skips the JSON content-type. Used by
-   * uploadWikiFile / uploadWikiFileToChangeset — wiki binary uploads can
+   * uploadWikiFile / uploadWikiFileToChangeset — wiki file uploads can
    * hit the 100 MiB cap, so a longer 5-minute timeout is used so a
    * 50 MiB blob on a slow connection doesn't get chopped at 15 s.
    */
-  async multipartRequest(method, path7, body, retried = false) {
+  async multipartRequest(method, path7, body, retried = false, opts) {
     if (!retried) {
       await this.ensureFreshToken(path7);
     }
     const { "Content-Type": _drop, ...headers } = this.buildHeaders(path7);
     void _drop;
+    const timeoutMs = opts?.timeoutMs ?? 5 * 60 * 1e3;
     let res;
     try {
-      res = await fetch(`${this.baseUrlFor(path7)}${path7}`, {
+      res = await sendMultipartRequest({
         method,
+        url: `${this.baseUrlFor(path7)}${path7}`,
         headers,
         body,
-        signal: AbortSignal.timeout(5 * 60 * 1e3)
+        timeoutMs,
+        signal: opts?.signal,
+        onProgress: opts?.onProgress
       });
     } catch (err) {
       throw _ParallClient.normalizeFetchError(err);
@@ -64507,7 +64673,7 @@ var ParallClient = class _ParallClient extends AttachmentClient {
       if (!retried && !isAuthPath && this.getRefreshToken) {
         const refreshed = await this.tryRefresh();
         if (refreshed) {
-          return this.multipartRequest(method, path7, body, true);
+          return this.multipartRequest(method, path7, body, true, opts);
         }
       }
       if (this.onTokenExpired && !isAuthPath) {
@@ -64586,6 +64752,18 @@ var ParallClient = class _ParallClient extends AttachmentClient {
   async deleteAvatar() {
     return this.request("DELETE", ENDPOINTS.USER_AVATAR);
   }
+  // ---- Personal API keys (org-scoped; JWT session required) ----
+  /** Mints an org-scoped personal API key. The plaintext is returned once and never again. */
+  async createPersonalApiKey(req) {
+    return this.request("POST", ENDPOINTS.PERSONAL_API_KEYS, req);
+  }
+  async listPersonalApiKeys() {
+    const res = await this.request("GET", ENDPOINTS.PERSONAL_API_KEYS);
+    return res.data;
+  }
+  async revokePersonalApiKey(keyId) {
+    return this.request("DELETE", ENDPOINTS.PERSONAL_API_KEY(keyId));
+  }
   async uploadAgentAvatar(orgId, agentId, file) {
     const fd = new FormData();
     fd.append("file", file);
@@ -65804,26 +65982,21 @@ var ParallClient = class _ParallClient extends AttachmentClient {
    * through createWikiChangeset / updateWikiChangeset.
    */
   async uploadWikiFile(orgId, wikiId, params) {
-    const fd = new FormData();
-    fd.append("path", params.path);
-    fd.append("file", params.file);
-    if (params.message)
-      fd.append("message", params.message);
-    return this.multipartRequest("POST", ENDPOINTS.WIKI_UPLOADS(orgId, wikiId), fd);
+    const fd = createWikiUploadFormData(params);
+    return this.multipartRequest("POST", ENDPOINTS.WIKI_UPLOADS(orgId, wikiId), fd, false, {
+      signal: params.signal,
+      onProgress: params.onProgress
+    });
   }
   /**
-   * Upload a binary file into a changeset's feature branch (read scope +
-   * author-only). Used by reader flow: propose a changeset, attach
-   * binary, PATCH markdown that references it. On merge the binary
-   * squashes into the default branch.
+   * Upload a file into a changeset's feature branch (read scope +
+   * author-only). The default remains binary-only; contentRoute `auto`
+   * opts into reviewable text for the Web library upload flow. On merge the
+   * branch contents squash into the default branch.
    */
   async uploadWikiFileToChangeset(orgId, wikiId, changesetId, params) {
-    const fd = new FormData();
-    fd.append("path", params.path);
-    fd.append("file", params.file);
-    if (params.message)
-      fd.append("message", params.message);
-    return this.multipartRequest("POST", ENDPOINTS.WIKI_CHANGESET_FILES(orgId, wikiId, changesetId), fd);
+    const fd = createWikiUploadFormData(params);
+    return this.multipartRequest("POST", ENDPOINTS.WIKI_CHANGESET_FILES(orgId, wikiId, changesetId), fd, false, { signal: params.signal, onProgress: params.onProgress });
   }
   /** Remove a binary file from the default branch. Text files must use a
    * changeset delete action. The blob stays reachable via git history. */
@@ -66690,13 +66863,6 @@ var ParallClient = class _ParallClient extends AttachmentClient {
     );
   }
 };
-function normalizeWikiChangeset(changeset) {
-  return {
-    ...changeset,
-    changed_paths: changeset.changed_paths ?? [],
-    file_changes: changeset.file_changes ?? []
-  };
-}
 var ApiError = class extends Error {
   status;
   code;