@parall/parall 1.55.4 → 1.55.5

package/dist/index.bundle.mjs

@@ -51496,6 +51496,12 @@ function isForwardedMessageBody(body) {
 function sanitizeMeta(value) {
   return value.replace(/[\r\n]+/g, " ").replace(/[[\]|]/g, " ").trim();
 }
+function formatApprovalDecisionReason(status, reason) {
+  const normalized = reason?.trim();
+  if (status !== "rejected" || !normalized)
+    return "";
+  return `Reason (JSON): ${JSON.stringify(normalized)}`;
+}
 function buildEventBody(event) {
   const lines = [];
   if (event.type === "message") {
@@ -51716,6 +51722,16 @@ function browserViewerRequestOptions(command, opts) {
   };
 }
 
+// ../sdk/dist/attachment-endpoints.js
+function attachmentEndpoints(apiBase) {
+  return {
+    UPLOAD_PRESIGN: (orgId) => `${apiBase}/orgs/${orgId}/upload/presign`,
+    UPLOAD_COMPLETE: (orgId) => `${apiBase}/orgs/${orgId}/upload/complete`,
+    UPLOAD_ABORT: (orgId) => `${apiBase}/orgs/${orgId}/upload/abort`,
+    FILE: (id) => `${apiBase}/files/${id}`
+  };
+}
+
 // ../sdk/dist/constants.js
 var API_BASE = "/api/v1";
 var WIKI_BASE = "/wiki/v1";
@@ -51788,9 +51804,7 @@ var ENDPOINTS = {
   MESSAGE_REACTIONS: (id) => `${API_BASE}/messages/${id}/reactions`,
   MESSAGE_REACTION: (id, emoji) => `${API_BASE}/messages/${id}/reactions/${encodeURIComponent(emoji)}`,
   // Upload (org-scoped)
-  UPLOAD_PRESIGN: (orgId) => `${API_BASE}/orgs/${orgId}/upload/presign`,
-  UPLOAD_COMPLETE: (orgId) => `${API_BASE}/orgs/${orgId}/upload/complete`,
-  FILE: (id) => `${API_BASE}/files/${id}`,
+  ...attachmentEndpoints(API_BASE),
   // Approval requests (org-scoped)
   APPROVAL_REQUESTS: (orgId) => `${API_BASE}/orgs/${orgId}/approval-requests`,
   // Approvals (global)
@@ -51971,6 +51985,8 @@ var ENDPOINTS = {
   // backend router so `deleted` isn't captured as a {wikiId}; the SDK builder
   // is just a string.
   WIKIS_DELETED: (orgId) => `${WIKI_BASE}/orgs/${orgId}/wikis/deleted`,
+  // Org-wide changeset listing across readable wikis (Working on tab).
+  WIKI_ORG_CHANGESETS: (orgId) => `${WIKI_BASE}/orgs/${orgId}/wiki-changesets`,
   // Detail URL — also reused for DELETE (soft-delete) and `${WIKI}/restore`.
   WIKI: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}`,
   WIKI_RESTORE: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/restore`,
@@ -52000,6 +52016,10 @@ var ENDPOINTS = {
   // Wiki Path Restrictions (AFCS narrowing ACL — private subtrees)
   WIKI_RESTRICTIONS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/restrictions`,
   WIKI_RESTRICTION: (orgId, wikiId, restrictionId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/restrictions/${restrictionId}`,
+  WIKI_ACCESS_POLICY: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/access-policy`,
+  WIKI_ACCESS_POLICY_MEMBERS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/access-policy/members`,
+  WIKI_MEMBERSHIP_SELF: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/membership/self`,
+  WIKI_MEMBERS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/members`,
   WIKI_ACCESS_STATUS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/access-status`,
   WIKI_ACCESS_REQUESTS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/access-requests`,
   // Wiki History (commits, file commits, blame)
@@ -52120,6 +52140,19 @@ var ENDPOINTS = {
   ORG_EDGE_DEVICE_UNREGISTER: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/unregister`,
   ORG_EDGE_ONBOARDING: (orgId) => `/api/v1/orgs/${orgId}/edge/onboarding`,
   ORG_EDGE_PROFILES: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles`,
+  ORG_EDGE_PROFILE_OPERATIONS: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profile-operations`,
+  ORG_EDGE_PROFILE_OPERATION: (orgId, edgeId, operationId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profile-operations/${operationId}`,
+  ORG_EDGE_PROFILE_OPERATION_CONFIRM: (orgId, edgeId, operationId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profile-operations/${operationId}/confirm`,
+  ORG_BROWSER_ALIASES: (orgId) => `/api/v1/orgs/${orgId}/browser-aliases`,
+  ORG_BROWSER_ALIAS: (orgId, aliasId) => `/api/v1/orgs/${orgId}/browser-aliases/${aliasId}`,
+  ORG_BROWSER_ALIAS_READINESS_CHECKS: (orgId, aliasId) => `/api/v1/orgs/${orgId}/browser-aliases/${aliasId}/readiness-checks`,
+  ORG_BROWSER_ALIAS_READINESS_CHECK: (orgId, aliasId, checkId) => `/api/v1/orgs/${orgId}/browser-aliases/${aliasId}/readiness-checks/${checkId}`,
+  ORG_API_KEY_BROWSER_ALIAS_GRANTS: (orgId, keyId) => `/api/v1/orgs/${orgId}/api-keys/${keyId}/browser-alias-grants`,
+  ORG_API_KEY_BROWSER_ALIAS_GRANT: (orgId, keyId, aliasId) => `/api/v1/orgs/${orgId}/api-keys/${keyId}/browser-alias-grants/${aliasId}`,
+  ORG_MANAGED_ALIASES: (orgId) => `/api/v1/orgs/${orgId}/aliases`,
+  ORG_MANAGED_ALIAS: (orgId, aliasName) => `/api/v1/orgs/${orgId}/aliases/${encodeURIComponent(aliasName)}`,
+  ORG_BROWSER_ALIAS_EXECUTIONS: (orgId) => `/api/v1/orgs/${orgId}/executions`,
+  ORG_BROWSER_ALIAS_EXECUTION: (orgId, requestId) => `/api/v1/orgs/${orgId}/executions/${encodeURIComponent(requestId)}`,
   // Per-profile egress proxy (hosted Cloud Profiles; manager-only, human-only).
   ORG_EDGE_PROFILE_PROXY: (orgId, edgeId, profileName) => `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/proxy`,
   // Per-profile one-shot cookie seed (hosted Cloud Profiles; manager-only,
@@ -52470,8 +52503,44 @@ var WechatClient = class extends TaskLabelClient {
   }
 };
 
+// ../sdk/dist/attachment-client.js
+var COMPLETION_RETRY_DELAYS_MS = [250, 750];
+function isRetryableCompletionError(error) {
+  if (!error || typeof error !== "object" || !("status" in error))
+    return false;
+  const status = error.status;
+  return status === 0 || typeof status === "number" && status >= 500;
+}
+var AttachmentClient = class extends WechatClient {
+  async getUploadPresignUrl(orgId, req) {
+    return this.request("POST", ENDPOINTS.UPLOAD_PRESIGN(orgId), req);
+  }
+  async completeUpload(orgId, attachmentId, parts) {
+    const body = {
+      attachment_id: attachmentId,
+      parts
+    };
+    for (let attempt = 0; ; attempt += 1) {
+      try {
+        return await this.request("POST", ENDPOINTS.UPLOAD_COMPLETE(orgId), body);
+      } catch (error) {
+        const delay = COMPLETION_RETRY_DELAYS_MS[attempt];
+        if (delay === void 0 || !isRetryableCompletionError(error))
+          throw error;
+        await new Promise((resolve3) => setTimeout(resolve3, delay));
+      }
+    }
+  }
+  async abortUpload(orgId, attachmentId) {
+    return this.request("POST", ENDPOINTS.UPLOAD_ABORT(orgId), { attachment_id: attachmentId });
+  }
+  async getFileUrl(id, opts) {
+    return this.request("GET", ENDPOINTS.FILE(id), void 0, opts?.download ? { download: true } : void 0);
+  }
+};
+
 // ../sdk/dist/client.js
-var ParallClient = class _ParallClient extends WechatClient {
+var ParallClient = class _ParallClient extends AttachmentClient {
   baseUrl;
   wikiBaseUrl;
   token;
@@ -53118,16 +53187,6 @@ var ParallClient = class _ParallClient extends WechatClient {
     const res = await this.request("GET", ENDPOINTS.MESSAGE_REACTIONS(messageId));
     return res.reactions;
   }
-  // ---- File Upload ----
-  async getUploadPresignUrl(orgId, req) {
-    return this.request("POST", ENDPOINTS.UPLOAD_PRESIGN(orgId), req);
-  }
-  async completeUpload(orgId, attachmentId) {
-    return this.request("POST", ENDPOINTS.UPLOAD_COMPLETE(orgId), { attachment_id: attachmentId });
-  }
-  async getFileUrl(id, opts) {
-    return this.request("GET", ENDPOINTS.FILE(id), void 0, opts?.download ? { download: true } : void 0);
-  }
   // ---- Approvals ----
   async getApproval(id) {
     return this.request("GET", ENDPOINTS.APPROVAL(id));
@@ -53135,8 +53194,14 @@ var ParallClient = class _ParallClient extends WechatClient {
   async requestApproval(orgId, req) {
     return this.request("POST", ENDPOINTS.APPROVAL_REQUESTS(orgId), req);
   }
-  async decideApproval(id, decision) {
-    return this.request("POST", ENDPOINTS.APPROVAL_DECIDE(id), { decision });
+  async decideApproval(id, decision, reason) {
+    if (decision === "approve" && reason?.trim()) {
+      throw new ApiError(400, "Approval reason is only allowed for rejection decisions", "INVALID_DECISION_REASON");
+    }
+    return this.request("POST", ENDPOINTS.APPROVAL_DECIDE(id), {
+      decision,
+      ...decision === "reject" && reason !== void 0 ? { reason } : {}
+    });
   }
   async cancelApproval(id) {
     return this.request("POST", ENDPOINTS.APPROVAL_CANCEL(id));
@@ -53969,6 +54034,17 @@ var ParallClient = class _ParallClient extends WechatClient {
     const res = await this.request("GET", ENDPOINTS.WIKI_CHANGESETS(orgId, wikiId));
     return res.data.map(normalizeWikiChangeset);
   }
+  /** Org-wide changeset listing across every wiki the caller can read.
+   *  Server default (no `status`) is the pending set: proposed,
+   *  approval_pending, approved. */
+  async getOrgWikiChangesets(orgId, opts) {
+    const params = new URLSearchParams();
+    for (const s of opts?.status ?? [])
+      params.append("status", s);
+    const qs = params.toString();
+    const res = await this.request("GET", `${ENDPOINTS.WIKI_ORG_CHANGESETS(orgId)}${qs ? `?${qs}` : ""}`);
+    return (res.data ?? []).map(normalizeWikiChangeset);
+  }
   async getWikiChangeset(orgId, wikiId, changesetId) {
     return normalizeWikiChangeset(await this.request("GET", ENDPOINTS.WIKI_CHANGESET(orgId, wikiId, changesetId)));
   }
@@ -54057,6 +54133,35 @@ var ParallClient = class _ParallClient extends WechatClient {
   async getWikiAccessStatus(orgId, wikiId, path9) {
     return this.request("GET", ENDPOINTS.WIKI_ACCESS_STATUS(orgId, wikiId), void 0, path9 ? { path: path9 } : void 0);
   }
+  // ---- Wiki membership projection (who-can-access, invites, join/leave) ----
+  async getWikiAccessPolicy(orgId, wikiId, path9 = "") {
+    return this.request("GET", ENDPOINTS.WIKI_ACCESS_POLICY(orgId, wikiId), void 0, path9 ? { path: path9 } : void 0);
+  }
+  async putWikiAccessPolicy(orgId, wikiId, policy) {
+    return this.request("PUT", ENDPOINTS.WIKI_ACCESS_POLICY(orgId, wikiId), policy);
+  }
+  /** Add-only invite (viewer/editor); allowed for managers, and for editors
+   *  when the library enables editors_can_invite. */
+  async addWikiMember(orgId, wikiId, subject, role) {
+    await this.request("POST", ENDPOINTS.WIKI_ACCESS_POLICY_MEMBERS(orgId, wikiId), {
+      subject,
+      role
+    });
+  }
+  /** Join a PUBLIC library as an explicit member (lands at the library's
+   *  default role). Restricted libraries answer 409 JOIN_REQUIRES_REQUEST —
+   *  go through createWikiAccessRequest instead. */
+  async joinWiki(orgId, wikiId) {
+    await this.request("POST", ENDPOINTS.WIKI_MEMBERSHIP_SELF(orgId, wikiId));
+  }
+  /** Remove the caller's explicit membership (team-granted membership stays). */
+  async leaveWiki(orgId, wikiId) {
+    await this.request("DELETE", ENDPOINTS.WIKI_MEMBERSHIP_SELF(orgId, wikiId));
+  }
+  async getWikiMembers(orgId, wikiId) {
+    const res = await this.request("GET", ENDPOINTS.WIKI_MEMBERS(orgId, wikiId));
+    return res.data ?? [];
+  }
   async createWikiAccessRequest(orgId, wikiId, data) {
     await this.request("POST", ENDPOINTS.WIKI_ACCESS_REQUESTS(orgId, wikiId), data);
   }
@@ -54519,6 +54624,76 @@ var ParallClient = class _ParallClient extends WechatClient {
   async listEdgeProfiles(orgId, edgeId) {
     return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILES(orgId, edgeId));
   }
+  /** Start one durable Local BYOC Profile operation. Network-unknown callers
+   * must retry with the same key or recover by operation id; a different body
+   * under the same key is rejected. */
+  async createEdgeProfileOperation(orgId, edgeId, request3, idempotencyKey) {
+    return this.request("POST", ENDPOINTS.ORG_EDGE_PROFILE_OPERATIONS(orgId, edgeId), request3, void 0, false, { headers: { "Idempotency-Key": idempotencyKey } });
+  }
+  /** Strong-confirm the exact durable Delete impact. A changed impact returns
+   * PROFILE_DELETE_IMPACT_CHANGED with a replacement receipt in
+   * `ApiError.extras.details.operation`. */
+  async confirmEdgeProfileOperation(orgId, edgeId, operationId, request3) {
+    return this.request("POST", ENDPOINTS.ORG_EDGE_PROFILE_OPERATION_CONFIRM(orgId, edgeId, operationId), request3);
+  }
+  /** Sole read/recovery surface. The server may reconcile an already durable
+   * dispatch/finalization while returning this receipt. */
+  async getEdgeProfileOperation(orgId, edgeId, operationId) {
+    return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILE_OPERATION(orgId, edgeId, operationId));
+  }
+  /** Create and atomically materialize one Local BYOC Browser Alias. A replay
+   * with the same idempotency key and body returns the original stable ccn_. */
+  async createBrowserAlias(orgId, request3) {
+    return this.request("POST", ENDPOINTS.ORG_BROWSER_ALIASES(orgId), request3);
+  }
+  async listBrowserAliases(orgId) {
+    return this.request("GET", ENDPOINTS.ORG_BROWSER_ALIASES(orgId));
+  }
+  async getBrowserAlias(orgId, aliasId) {
+    return this.request("GET", ENDPOINTS.ORG_BROWSER_ALIAS(orgId, aliasId));
+  }
+  async renameBrowserAlias(orgId, aliasId, request3) {
+    return this.request("PATCH", ENDPOINTS.ORG_BROWSER_ALIAS(orgId, aliasId), request3);
+  }
+  async deleteBrowserAlias(orgId, aliasId, request3) {
+    return this.request("DELETE", ENDPOINTS.ORG_BROWSER_ALIAS(orgId, aliasId), request3);
+  }
+  /** Start one durable readiness check. The key is carried as the standard
+   * Idempotency-Key header; the request body is intentionally empty. */
+  async createBrowserAliasReadinessCheck(orgId, aliasId, request3) {
+    return this.request("POST", ENDPOINTS.ORG_BROWSER_ALIAS_READINESS_CHECKS(orgId, aliasId), void 0, void 0, false, { headers: { "Idempotency-Key": request3.idempotency_key } });
+  }
+  /** Sole durable recovery surface for one readiness request. */
+  async getBrowserAliasReadinessCheck(orgId, aliasId, checkId) {
+    return this.request("GET", ENDPOINTS.ORG_BROWSER_ALIAS_READINESS_CHECK(orgId, aliasId, checkId));
+  }
+  /** Organization Owner view. Hashes, reviewed snapshots and deltas are
+   * intentionally available only on this human-JWT management surface. */
+  async listBrowserAliasGrants(orgId, keyId) {
+    return this.request("GET", ENDPOINTS.ORG_API_KEY_BROWSER_ALIAS_GRANTS(orgId, keyId));
+  }
+  async getBrowserAliasGrant(orgId, keyId, aliasId) {
+    return this.request("GET", ENDPOINTS.ORG_API_KEY_BROWSER_ALIAS_GRANT(orgId, keyId, aliasId));
+  }
+  async replaceBrowserAliasGrant(orgId, keyId, aliasId, request3) {
+    return this.request("PUT", ENDPOINTS.ORG_API_KEY_BROWSER_ALIAS_GRANT(orgId, keyId, aliasId), request3);
+  }
+  /** Managed-key discovery. The response is already grant-filtered and never
+   * carries contract hashes, review snapshots, Edge IDs or Profile IDs. */
+  async listManagedBrowserAliases(orgId) {
+    return this.request("GET", ENDPOINTS.ORG_MANAGED_ALIASES(orgId));
+  }
+  async getManagedBrowserAlias(orgId, aliasName) {
+    return this.request("GET", ENDPOINTS.ORG_MANAGED_ALIAS(orgId, aliasName));
+  }
+  /** Accept and dispatch one @alias command. request_id is generated by the
+   * caller before local validation and is also the sole durable recovery key. */
+  async createBrowserAliasExecution(orgId, request3) {
+    return this.request("POST", ENDPOINTS.ORG_BROWSER_ALIAS_EXECUTIONS(orgId), request3);
+  }
+  async getBrowserAliasExecution(orgId, requestId) {
+    return this.request("GET", ENDPOINTS.ORG_BROWSER_ALIAS_EXECUTION(orgId, requestId));
+  }
   /**
    * Read a hosted Cloud Profile's egress-proxy status (manager-only: hosted
    * human maintainer or org admin). Sanitized — the password never comes back.
@@ -59305,7 +59480,10 @@ var ParallAgentGateway = class {
     this.opts.log?.info(`approval decided: ${approval.id} (${approval.status})`);
     const statusLabel = approval.status === "approved" ? "Approved" : "Rejected";
     const execInfo = approval.execution_status ? ` | execution: ${approval.execution_status}` : "";
-    const body = `${statusLabel}: ${approval.title}${execInfo}`;
+    const reasonLine = formatApprovalDecisionReason(approval.status, approval.decision_reason);
+    const reasonInfo = reasonLine ? `
+${reasonLine}` : "";
+    const body = `${statusLabel}: ${approval.title}${execInfo}${reasonInfo}`;
     const event = {
       type: "approval",
       targetId: chatId ?? approval.chat_id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/parall",
-  "version": "1.55.4",
+  "version": "1.55.5",
   "description": "OpenClaw channel plugin for Parall IM",
   "license": "MIT",
   "repository": {
@@ -16,8 +16,8 @@
     "openclaw.plugin.json"
   ],
   "dependencies": {
-    "@parall/agent-core": "1.55.4",
-    "@parall/sdk": "1.55.4"
+    "@parall/agent-core": "1.55.5",
+    "@parall/sdk": "1.55.5"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",