@parall/parall 1.62.0 → 1.63.0

package/dist/index.bundle.mjs

@@ -52323,6 +52323,13 @@ function browserViewerRequestOptions(command, opts) {
   };
 }
 
+// ../sdk/dist/clip-connection-endpoints.js
+var clipConnectionEndpoints = {
+  CLIP_CONNECTIONS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/connections`,
+  CLIP_CONNECTION_ACCESS: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}/access`,
+  CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`
+};
+
 // ../sdk/dist/attachment-endpoints.js
 function attachmentEndpoints(apiBase) {
   return {
@@ -52336,6 +52343,7 @@ function attachmentEndpoints(apiBase) {
 // ../sdk/dist/edge-endpoints.js
 var API_BASE = "/api/v1";
 var edgeEndpoints = {
+  ORG_EDGE_PROFILE_ACCESS: (orgId, edgeId, profileName) => `${API_BASE}/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/access`,
   ORG_EDGE: (orgId) => `${API_BASE}/orgs/${orgId}/edge`,
   ORG_EDGE_CONNECT: (orgId) => `${API_BASE}/orgs/${orgId}/edge/connect`,
   ORG_EDGE_DEVICES: (orgId) => `${API_BASE}/orgs/${orgId}/edge/devices`,
@@ -52527,6 +52535,7 @@ var ENDPOINTS = {
   MACHINES_ME_AGENTS: `${API_BASE2}/machines/me/agents`,
   MACHINES_ME_HEALTH: `${API_BASE2}/machines/me/health`,
   MACHINES_ME_RUNTIME_REPORT: `${API_BASE2}/machines/me/runtime-report`,
+  MACHINES_ME_DIAGNOSTICS: `${API_BASE2}/machines/me/diagnostics`,
   MACHINES_ME_CLIPS: `${API_BASE2}/machines/me/clips`,
   MACHINES_ME_BROWSER_PROFILES: `${API_BASE2}/machines/me/browser-profiles`,
   MACHINES_ME_BROWSER_PROFILE_STATUS: (profileId) => `${API_BASE2}/machines/me/browser-profiles/${profileId}/status`,
@@ -52713,6 +52722,7 @@ var ENDPOINTS = {
   // Wiki History (commits, file commits, blame)
   WIKI_COMMITS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/commits`,
   WIKI_FILE_COMMITS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/file-commits`,
+  WIKI_PATH_ACTIVITY: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/path-activity`,
   WIKI_BLAME: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/blame`,
   // Wiki Operations (audit log)
   WIKI_OPERATIONS: (orgId, wikiId) => `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/operations`,
@@ -52848,8 +52858,7 @@ var ENDPOINTS = {
   // Same request/reply shape as the v2 browser-profile viewer, on the v3 edge
   // pipe. Additive: does NOT replace BROWSER_PROFILE_VIEWER_COMMAND.
   ORG_EDGE_VIEWER_COMMAND: (orgId, edgeId) => `/api/v1/orgs/${orgId}/edge/${edgeId}/viewer/command`,
-  CLIP_CONNECTIONS: (orgId, clipId) => `/api/v1/orgs/${orgId}/clip-registry/${clipId}/connections`,
-  CLIP_CONNECTION: (orgId, connId) => `/api/v1/orgs/${orgId}/clip-connections/${connId}`,
+  ...clipConnectionEndpoints,
   // Clip registry (v3, org-scoped, served by api-server — `crg_` entries)
   ORG_CLIP_REGISTRY: (orgId) => `/api/v1/orgs/${orgId}/clip-registry`,
   ORG_CLIP_REGISTRY_RESOLVE: (orgId) => `/api/v1/orgs/${orgId}/clip-registry/resolve`,
@@ -53363,6 +53372,39 @@ var ChannelConversationClient = class extends SlackFilesClient {
   }
 };
 
+// ../sdk/dist/clip-connection-client.js
+var ClipConnectionClient = class extends ChannelConversationClient {
+  // ---- Clip connections ----
+  async listClipConnections(orgId, clipId) {
+    return this.request("GET", ENDPOINTS.CLIP_CONNECTIONS(orgId, clipId));
+  }
+  async createClipConnection(orgId, clipId, input) {
+    return this.request("POST", ENDPOINTS.CLIP_CONNECTIONS(orgId, clipId), input);
+  }
+  async deleteClipConnection(orgId, connId) {
+    return this.request("DELETE", ENDPOINTS.CLIP_CONNECTION(orgId, connId));
+  }
+  /** Organization members may read; personal connections are owner-only. */
+  async getClipConnectionAccess(orgId, connId) {
+    return this.request("GET", ENDPOINTS.CLIP_CONNECTION_ACCESS(orgId, connId));
+  }
+  /** Human org owner/admin; accepts JWT or personal key. */
+  async putClipConnectionAccess(orgId, connId, input) {
+    return this.request("PUT", ENDPOINTS.CLIP_CONNECTION_ACCESS(orgId, connId), input);
+  }
+};
+
+// ../sdk/dist/browser-profile-client.js
+var BrowserProfileClient = class extends ClipConnectionClient {
+  async getBrowserProfileAccess(orgId, edgeId, profileName) {
+    return this.request("GET", ENDPOINTS.ORG_EDGE_PROFILE_ACCESS(orgId, edgeId, profileName));
+  }
+  /** Replace the complete access policy; requires a human org owner/admin. */
+  async putBrowserProfileAccess(orgId, edgeId, profileName, access) {
+    return this.request("PUT", ENDPOINTS.ORG_EDGE_PROFILE_ACCESS(orgId, edgeId, profileName), access);
+  }
+};
+
 // ../sdk/dist/wiki-upload.js
 function createWikiUploadFormData(params) {
   const form = new FormData();
@@ -53499,7 +53541,7 @@ function legacyHeartbeatFromReport(report) {
     detectedRuntimes
   };
 }
-var ParallClient = class _ParallClient extends ChannelConversationClient {
+var ParallClient = class _ParallClient extends BrowserProfileClient {
   baseUrl;
   wikiBaseUrl;
   token;
@@ -54533,6 +54575,17 @@ var ParallClient = class _ParallClient extends ChannelConversationClient {
     await this.postMachineHeartbeat(legacyHeartbeatFromReport(report));
     return "legacy";
   }
+  /**
+   * Upload a diagnostics bundle from the machine itself (`mck_` bearer):
+   * a gzip body the daemon assembled and redacted locally. Multipart so the
+   * meta travels beside the file; the server indexes it for platform staff.
+   */
+  async uploadMachineDiagnostics(bundle, meta2 = {}) {
+    const form = new FormData();
+    form.append("meta", JSON.stringify(meta2));
+    form.append("bundle", new Blob([new Uint8Array(bundle)], { type: "application/gzip" }), "diagnostics.json.gz");
+    return this.multipartRequest("POST", ENDPOINTS.MACHINES_ME_DIAGNOSTICS, form, false, { timeoutMs: 2 * 60 * 1e3 });
+  }
   /**
    * @deprecated Legacy form of `putMachineRuntimeReport`, kept for servers
    * that predate it. `POST /machines/me/health` — report daemon state. All
@@ -55314,6 +55367,10 @@ var ParallClient = class _ParallClient extends ChannelConversationClient {
       ...params
     });
   }
+  /** Bounded, ACL-safe activity for one Wiki file path. */
+  async getWikiPathActivity(orgId, wikiId, path11, opts) {
+    return this.request("GET", ENDPOINTS.WIKI_PATH_ACTIVITY(orgId, wikiId), void 0, { path: path11 }, false, opts);
+  }
   async getWikiBlame(orgId, wikiId, path11, ref) {
     return this.request("GET", ENDPOINTS.WIKI_BLAME(orgId, wikiId), void 0, { path: path11, ref });
   }
@@ -55744,7 +55801,7 @@ var ParallClient = class _ParallClient extends ChannelConversationClient {
   /**
    * Read a clip's per-org exec access (by user id — humans and agents alike).
    * Org-member readable, so a denied caller can learn why exec answered
-   * `CLIP_NOT_ALLOWED` / `CLIP_CONNECTION_NOT_ALLOWED` (agents:
+   * `CONNECTION_NOT_ALLOWED` (retired: `CLIP_NOT_ALLOWED` / `CLIP_CONNECTION_NOT_ALLOWED`) (agents:
    * `CLIP_AGENT_NOT_ALLOWED` / `CLIP_AGENT_CONNECTION_NOT_ALLOWED`). Writing
    * it (`putClipAgentExecAccess`) is an org owner/admin's act.
    */
@@ -55784,6 +55841,19 @@ var ParallClient = class _ParallClient extends ChannelConversationClient {
   async deleteEdgeDevice(orgId, edgeId) {
     return this.request("DELETE", ENDPOINTS.ORG_EDGE_DEVICE(orgId, edgeId));
   }
+  /** Move the human caller's OWN BYOC device between the org layer and their
+   * personal layer (ADR-020). `member` takes the device — and every clip
+   * connection bound to it — out of the org's sight and into the owner's sole
+   * custody; `org` shares it back, after which an org admin binds clips to it
+   * and the clip's access list governs exec. Idempotent. Refused for hosted
+   * profiles (`EDGE_NOT_PERSONALIZABLE`), for anyone but the owner
+   * (`FORBIDDEN`; someone else's personal device is `NOT_FOUND`), and for
+   * agents. */
+  async setEdgeManagedBy(orgId, edgeId, managedBy) {
+    return this.request("PATCH", ENDPOINTS.ORG_EDGE_DEVICE(orgId, edgeId), {
+      managed_by: managedBy
+    });
+  }
   /** Idempotently remove the human caller's own offline BYOC registration.
    * A live connection returns `EDGE_ONLINE`. */
   async unregisterEdgeDevice(orgId, edgeId) {
@@ -55866,7 +55936,7 @@ var ParallClient = class _ParallClient extends ChannelConversationClient {
     return this.request("GET", ENDPOINTS.ORG_BROWSER_ALIAS_EXECUTION(orgId, requestId));
   }
   /** Accept one idempotent Browser Use operation for an explicit Profile.
-   * The Server resolves Profile→Edge; callers never select an Edge directly. */
+   * JWT, personal, agent and managed keys use profile access. The Server resolves Profile→Edge. */
   async createBrowserUseOperation(orgId, request3) {
     return this.request("POST", ENDPOINTS.ORG_BROWSER_USE_OPERATIONS(orgId), request3);
   }
@@ -55983,9 +56053,9 @@ var ParallClient = class _ParallClient extends ChannelConversationClient {
    * - `EDGE_DEADLINE_EXCEEDED` 504 — arrived late, provably NOT executed.
    * - `EDGE_HOSTED_DISABLED_FOR_ORG` 403, `EDGE_REPAIR` 503 (operator-held),
    *   `EDGE_RUNTIME_UNAVAILABLE` 503 (deployment has no hosted runtime).
-   * - Access errors (decided before any side effect): `CLIP_NOT_ALLOWED`
-   *   (no grant for this clip), `CLIP_CONNECTION_NOT_ALLOWED` (grant does
-   *   not cover this connection) — agent principals receive the historical
+   * - Access errors (before side effects): human `CONNECTION_NOT_ALLOWED`.
+   *   `CLIP_NOT_ALLOWED` / `CLIP_CONNECTION_NOT_ALLOWED` are retired.
+   *   Agent principals receive the historical
    *   `CLIP_AGENT_NOT_ALLOWED` / `CLIP_AGENT_CONNECTION_NOT_ALLOWED` for one
    *   release. An org owner/admin can widen access in the clip's settings.
    * - Routing errors: `CONNECTION_REQUIRED`, `CONNECTION_NOT_FOUND`,
@@ -56007,16 +56077,6 @@ var ParallClient = class _ParallClient extends ChannelConversationClient {
       throw err;
     }
   }
-  // ---- Clip connections ----
-  async listClipConnections(orgId, clipId) {
-    return this.request("GET", ENDPOINTS.CLIP_CONNECTIONS(orgId, clipId));
-  }
-  async createClipConnection(orgId, clipId, input) {
-    return this.request("POST", ENDPOINTS.CLIP_CONNECTIONS(orgId, clipId), input);
-  }
-  async deleteClipConnection(orgId, connId) {
-    return this.request("DELETE", ENDPOINTS.CLIP_CONNECTION(orgId, connId));
-  }
   // ---- MCP clip server config (same-org or reviewed Official OAuth) ----
   /**
    * Read the redacted MCP config. 404 NOT_FOUND when the clip has none yet —
@@ -56664,12 +56724,15 @@ function createActiveForkState(fork, targetId, continuationPrefix) {
 
 // ../agent-core/dist/redact.js
 function redactSecrets(s, knownValues = []) {
+  return maskKnownValues(s, knownValues).replace(/\b(agk|mck|cpk)_[A-Za-z0-9_-]+/g, "$1_***").replace(/\b(sk|pk|rk)-[A-Za-z0-9_-]{8,}/g, "$1-***").replace(/\bAKIA[0-9A-Z]{16}\b/g, "AKIA***").replace(/\b((?:bearer|basic)\s+)[A-Za-z0-9._~+/=-]+/gi, "$1***").replace(/(\b(?:[\w-]*[_-])?(?:api[_-]?key|key|token|secret|password|passwd|authorization)["']?\s*[=:]\s*)(?:"(?:\\.|[^"\\\r\n])*"|'(?:\\.|[^'\\\r\n])*'|[^\s&;,}\]"']+)/gi, "$1***").replace(/[A-Za-z0-9_-]{32,}/g, "***");
+}
+function maskKnownValues(s, knownValues) {
   let out = s;
   for (const v of knownValues) {
     if (typeof v === "string" && v.length >= 6)
       out = out.split(v).join("***");
   }
-  return out.replace(/\b(agk|mck|cpk)_[A-Za-z0-9_-]+/g, "$1_***").replace(/\b(sk|pk|rk)-[A-Za-z0-9_-]{8,}/g, "$1-***").replace(/\bAKIA[0-9A-Z]{16}\b/g, "AKIA***").replace(/\b(bearer\s+)[A-Za-z0-9._~+/=-]{8,}/gi, "$1***").replace(/[A-Za-z0-9_-]{32,}/g, "***");
+  return out;
 }
 function redactTurnOutcome(event, knownValues) {
   const redacted = { ...event };
@@ -56690,6 +56753,16 @@ function describeTurnOutcomeFailure(outcome) {
     stepMessage: `LLM turn ${outcome.outcome}${retryNote}${outcome.detail ? `: ${outcome.detail}` : ""}`
   };
 }
+function redactLogger(log, knownValues) {
+  if (!log)
+    return void 0;
+  return {
+    info: (message) => log.info(redactSecrets(message, knownValues)),
+    warn: (message) => log.warn(redactSecrets(message, knownValues)),
+    error: (message) => log.error(redactSecrets(message, knownValues)),
+    ...log.child ? { child: (name) => redactLogger(log.child(name), knownValues) } : {}
+  };
+}
 
 // ../agent-core/dist/lane-ledger.js
 import * as fs2 from "node:fs";
@@ -57024,10 +57097,10 @@ ${frame}` : frame;
     return {
       deliveryKey: dispatchEventIds.join(","),
       dispatchEventIds,
-      update: explicit ? (state) => this.updateInputState(lane, dispatchEventIds, state) : async () => void 0
+      update: explicit ? (state, failure) => this.updateInputState(lane, dispatchEventIds, state, failure) : async () => void 0
     };
   }
-  async updateInputState(lane, dispatchEventIds, state) {
+  async updateInputState(lane, dispatchEventIds, state, failure) {
     const failed = new Set(state === "failed" ? dispatchEventIds : []);
     const failedSourceIds = [...lane.folded].filter(([, dispatchEventId]) => failed.has(dispatchEventId)).map(([sourceId]) => sourceId);
     const restoreLocalClaims = failedSourceIds.length > 0 ? this.opts.releaseLocalClaims?.(failedSourceIds) : void 0;
@@ -57037,7 +57110,11 @@ ${frame}` : frame;
         target_uri: lane.targetUri,
         thread_root_id: lane.threadRootId,
         dispatch_event_ids: dispatchEventIds,
-        state
+        state,
+        ...state === "failed" && failure ? {
+          outcome_class: errorWireClass(failure.outcomeClass),
+          detail: failure.detail ? redactSecrets(failure.detail, this.opts.knownSecrets).slice(0, 500) : void 0
+        } : {}
       });
       if (result.recognized !== dispatchEventIds.length) {
         throw new Error(`input lifecycle ${state} recognized ${result.recognized}/${dispatchEventIds.length} WorkItems`);
@@ -57058,19 +57135,7 @@ ${frame}` : frame;
     }
     return { retry: state === "failed" };
   }
-  /**
-   * Complete the lane when no local work remains for it: the server sweeps
-   * still-leased members as no_action, releases the occupancy row, and
-   * re-drives any same-target pending work. A STALE_LANE answer means a
-   * takeover already owns the resource — local state is dropped either way.
-   */
-  /**
-   * Record that the turn on this lane surfaced a runtime error. The flow
-   * settles an errored lane immediately (dispatchLaneGroup returns 'failed'
-   * after a forced complete), so the bit normally lives for one turn only —
-   * it is the transport between the gateway's per-session error signal and
-   * this lane's complete request.
-   */
+  /** Carry the runtime error into the lane's forced completion. */
   markTurnError(laneKey, info = {}) {
     const lane = this.lanes.get(laneKey);
     if (lane)
@@ -58460,6 +58525,9 @@ async function consumeTypedDispatch(host, ref, run, hooks) {
           }
         }
       }
+    } catch (err) {
+      ledger.markTurnError(claimed.laneKey, releaseErrorInfo(err, [host.opts.config.api_key]));
+      throw err;
     } finally {
       settle(resolved);
       span.setAttribute("dispatch.lane_result", resolved ? "dispatched" : "released");
@@ -60007,12 +60075,14 @@ var ParallAgentGateway = class {
   DISPATCH_DEADLINE_MS;
   constructor(opts) {
     this.opts = opts;
+    opts = this.opts = { ...opts, log: redactLogger(opts.log, [opts.config.api_key]) };
     if (opts.dispatchContextDir) {
       this.laneLedger = new LaneLedger({
         client: opts.client,
         orgId: opts.config.org_id,
         contextDir: opts.dispatchContextDir,
         log: opts.log,
+        knownSecrets: [opts.config.api_key],
         coverageMode: opts.dispatchAdapter.inputLifecycleMode ?? "implicit",
         releaseLocalClaims: (sourceIds) => releaseLocalMessageClaims(this.dispatchedMessages, sourceIds)
       });
@@ -60183,12 +60253,6 @@ var ParallAgentGateway = class {
    * this safe: every bridge emits its error events before the turn-boundary
    * turn_outcome.
    */
-  /**
-   * Redaction for every runtime-error text that gets persisted or shown: the
-   * turn-outcome detail, the runtime error step and the dispatch-failure
-   * step all surface in the product, and a runtime error can echo the agent
-   * key or a provider credential.
-   */
   redactRuntimeText(text) {
     return redactSecrets(text, [this.opts.config.api_key]).slice(0, 2e3);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/parall",
-  "version": "1.62.0",
+  "version": "1.63.0",
   "description": "OpenClaw channel plugin for Parall IM",
   "license": "MIT",
   "repository": {
@@ -16,8 +16,8 @@
     "openclaw.plugin.json"
   ],
   "dependencies": {
-    "@parall/agent-core": "1.62.0",
-    "@parall/sdk": "1.62.0"
+    "@parall/agent-core": "1.63.0",
+    "@parall/sdk": "1.63.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/skills/parall-clips/SKILL.md

@@ -18,12 +18,16 @@ parall clip tools <clip>       # MCP clips only: live tool schemas
 ```
 
 `clip list` answers both discovery questions at once: WHICH clip (name,
-description, version) and WHERE it can run — every connection with its
-`ccn_…` id, alias, and target kind:
+description, version) and WHERE it could run — every connection you can SEE
+(public org-layer rows or those the clip's access list admits you to, plus rows on your
+own personal device; an admin's list is a management view of the whole org
+layer and does not by itself grant exec) with its `ccn_…` id, alias, and
+target kind:
 
 - `cloud` — an org-shared cloud profile (a maintainer's signed-in browser)
 - `desktop` — a member's device: org-shared (`layer: org` — an org admin
-  binds it, the clip's access list decides, same as cloud and MCP) or
+  binds it; public connections admit everyone, otherwise the clip's access
+  list decides, same as cloud and MCP) or
   personal (`layer: personal` — its owner alone, nobody else sees it)
 - `mcp` — a remote MCP tool server
 - `device` — a device whose placement could not be resolved just now (the
@@ -63,6 +67,8 @@ bound to the clip, and the connection is what your access is granted on.
 
 - Without a connection the server answers `AGENT_CONNECTION_REQUIRED`; the
   fix is to discover the clip's connections and name one, never to retry.
+- human 调用返回 `CONNECTION_NOT_ALLOWED` 时，请 org admin 公开该 connection
+  或把调用者加入 Clip 名单；agent 本版仍返回下述两个错误码。
 - `CLIP_AGENT_NOT_ALLOWED` / `CLIP_AGENT_CONNECTION_NOT_ALLOWED` mean a
   human has restricted who may run this clip (or through which account);
   ask them to widen access — you cannot grant it to yourself.
@@ -112,10 +118,20 @@ parall clip exec <clip> <tool> [json-args] --connection <ccn_|alias>
 - `OUTCOME_UNKNOWN` follows the rule below: dispatched and MAY HAVE
   EXECUTED — never auto-retry.
 
+## Browser Use
+
+Browser Use 接受 personal key 和 agent key，无需 managed key；权限按调用者
+在目标设备 profile 上的授权裁决。`PROFILE_NOT_ALLOWED` 表示未获授权，
+请 org admin 调整该 profile 的公开状态或名单，不要重试或改用其他 key 绕过。
+profile 公开只授予 browser.read / browser.interact，browser.advanced 仍需显式授权。
+Clip exec 的 connection 是另一种目标：agent 调用仍必须带 connection，缺失会返回
+`AGENT_CONNECTION_REQUIRED`，先发现 connection 再调用。
+
 ## Behavior rules
 
 - An authorization error (`CLIP_AGENT_NOT_ALLOWED`,
-  `CLIP_AGENT_CONNECTION_NOT_ALLOWED`, `FORBIDDEN`) is a fail-fast: ask
+  `CLIP_AGENT_CONNECTION_NOT_ALLOWED`, `CONNECTION_NOT_ALLOWED`,
+  `PROFILE_NOT_ALLOWED`, `FORBIDDEN`) is a fail-fast: ask
   an org admin to grant the clip or the connection — do not retry or work
   around it.
 - If the target device is offline or the call times out, report that