@parall/sdk 1.55.5 → 1.56.1

package/src/client.ts

@@ -41,6 +41,8 @@ import type {
   BrowserAliasExecutionReceipt,
   BrowserAliasGrantReplaceRequest,
   BrowserAliasGrantSet,
+  BrowserUseOperationRequest,
+  BrowserUseOperationReceipt,
   BrowserRuntimeStatus,
   BrowserViewerCommandRequest,
   BrowserViewerCommandResponse,
@@ -3091,6 +3093,19 @@ export class ParallClient extends AttachmentClient {
     await this.request('DELETE', ENDPOINTS.WIKI_MEMBERSHIP_SELF(orgId, wikiId));
   }
 
+  /** Star a library for the caller (sidebar Starred group). Idempotent —
+   *  re-starring is a 204 no-op. Requires read access; hidden private
+   *  libraries answer 404 like absent IDs. */
+  async starWiki(orgId: string, wikiId: string): Promise<void> {
+    await this.request('POST', ENDPOINTS.WIKI_STARS_SELF(orgId, wikiId));
+  }
+
+  /** Remove the caller's star. Idempotent — unstarring a never-starred
+   *  library is a 204 no-op. */
+  async unstarWiki(orgId: string, wikiId: string): Promise<void> {
+    await this.request('DELETE', ENDPOINTS.WIKI_STARS_SELF(orgId, wikiId));
+  }
+
   async getWikiMembers(orgId: string, wikiId: string): Promise<WikiAccessPolicyMember[]> {
     const res = await this.request<{ data: WikiAccessPolicyMember[] | null }>(
       'GET',
@@ -3674,8 +3689,12 @@ export class ParallClient extends AttachmentClient {
    * connections operate on.
    */
   async listOrgRegistryClips(orgId: string): Promise<ClipRegistryEntry[]> {
-    // Server default page is 50 (max 100); one max-size page covers today's
-    // catalogs — revisit with real pagination if registries outgrow it.
+    // ONE page (server max 100), name-ordered — a browse surface, not a
+    // resolution surface. The catalog includes every public+approved clip
+    // platform-wide, so "fetch it all" cannot scale; anything that needs a
+    // SPECIFIC clip must point-query instead: `resolveRegistryClip` for an
+    // exact <publisher org, name>, `getRegistryClip` for a `crg_` id, and
+    // `searchOrgRegistryClips` for discovery.
     const resp = await this.request<ClipRegistryEntry[] | null>(
       'GET',
       `${ENDPOINTS.ORG_CLIP_REGISTRY(orgId)}?limit=100`,
@@ -3683,6 +3702,42 @@ export class ParallClient extends AttachmentClient {
     return resp ?? [];
   }
 
+  /**
+   * Resolve an exact `<publisher org, name>` reference to its registry entry —
+   * the npm-style point read. Deliberately independent of catalog size: no
+   * Search, no pagination, same read-visibility boundary as `getRegistryClip`
+   * (cross-org requires public + approved). 404 `NOT_FOUND` when the publisher
+   * org has no visible clip of that exact name.
+   */
+  async resolveRegistryClip(
+    orgId: string,
+    publisherOrgId: string,
+    name: string,
+  ): Promise<ClipRegistryEntry> {
+    const params = new URLSearchParams({ org_id: publisherOrgId, name });
+    return this.request('GET', `${ENDPOINTS.ORG_CLIP_REGISTRY_RESOLVE(orgId)}?${params}`);
+  }
+
+  /**
+   * Server-side fuzzy discovery over the visible registry (name/description
+   * substring match), paginated. The discovery verb: rows carry the `crg_` id
+   * that {@link installRegistryClip} takes.
+   */
+  async searchOrgRegistryClips(
+    orgId: string,
+    query: string,
+    opts?: { limit?: number; offset?: number },
+  ): Promise<ClipRegistryEntry[]> {
+    const params = new URLSearchParams({ q: query });
+    if (opts?.limit !== undefined) params.set('limit', String(opts.limit));
+    if (opts?.offset !== undefined) params.set('offset', String(opts.offset));
+    const resp = await this.request<ClipRegistryEntry[] | null>(
+      'GET',
+      `${ENDPOINTS.ORG_CLIP_REGISTRY_SEARCH(orgId)}?${params}`,
+    );
+    return resp ?? [];
+  }
+
   /**
    * Install a registry clip into the org (a reference in `clip_installs`, not a
    * copy). Idempotent: installing an already-installed clip returns the same
@@ -3990,6 +4045,24 @@ export class ParallClient extends AttachmentClient {
     return this.request('GET', ENDPOINTS.ORG_BROWSER_ALIAS_EXECUTION(orgId, requestId));
   }
 
+  /** Accept one idempotent Browser Use operation for an explicit Profile.
+   * The Server resolves Profile→Edge; callers never select an Edge directly. */
+  async createBrowserUseOperation(
+    orgId: string,
+    request: BrowserUseOperationRequest,
+  ): Promise<BrowserUseOperationReceipt> {
+    return this.request('POST', ENDPOINTS.ORG_BROWSER_USE_OPERATIONS(orgId), request);
+  }
+
+  /** Recover the durable receipt. Successful data is present only inside the
+   * Server's short encrypted result TTL; terminal proof remains afterwards. */
+  async getBrowserUseOperation(
+    orgId: string,
+    operationId: string,
+  ): Promise<BrowserUseOperationReceipt> {
+    return this.request('GET', ENDPOINTS.ORG_BROWSER_USE_OPERATION(orgId, operationId));
+  }
+
   /**
    * Read a hosted Cloud Profile's egress-proxy status (manager-only: hosted
    * human maintainer or org admin). Sanitized — the password never comes back.

package/src/constants.ts

@@ -573,6 +573,7 @@ export const ENDPOINTS = {
   TASKS: (orgId: string) => `${API_BASE}/orgs/${orgId}/tasks`,
   TASK_SUBTASK_SUMMARY: (orgId: string) => `${API_BASE}/orgs/${orgId}/tasks/subtask-summary`,
   TASK: (orgId: string, taskId: string) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}`,
+  TASK_MOVE: (orgId: string, taskId: string) => `${API_BASE}/orgs/${orgId}/tasks/${taskId}/move`,
   TASK_ARCHIVE: (orgId: string, taskId: string) =>
     `${API_BASE}/orgs/${orgId}/tasks/${taskId}/archive`,
   TASK_RESTORE: (orgId: string, taskId: string) =>
@@ -776,6 +777,9 @@ export const ENDPOINTS = {
     `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/access-policy/members`,
   WIKI_MEMBERSHIP_SELF: (orgId: string, wikiId: string) =>
     `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/membership/self`,
+  // Library-level star (self-scoped bookmark; POST = star, DELETE = unstar).
+  WIKI_STARS_SELF: (orgId: string, wikiId: string) =>
+    `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/stars/self`,
   WIKI_MEMBERS: (orgId: string, wikiId: string) =>
     `${WIKI_BASE}/orgs/${orgId}/wikis/${wikiId}/members`,
   WIKI_ACCESS_STATUS: (orgId: string, wikiId: string) =>
@@ -972,6 +976,9 @@ export const ENDPOINTS = {
   ORG_BROWSER_ALIAS_EXECUTIONS: (orgId: string) => `/api/v1/orgs/${orgId}/executions`,
   ORG_BROWSER_ALIAS_EXECUTION: (orgId: string, requestId: string) =>
     `/api/v1/orgs/${orgId}/executions/${encodeURIComponent(requestId)}`,
+  ORG_BROWSER_USE_OPERATIONS: (orgId: string) => `/api/v1/orgs/${orgId}/browser-use/operations`,
+  ORG_BROWSER_USE_OPERATION: (orgId: string, operationId: string) =>
+    `/api/v1/orgs/${orgId}/browser-use/operations/${encodeURIComponent(operationId)}`,
   // Per-profile egress proxy (hosted Cloud Profiles; manager-only, human-only).
   ORG_EDGE_PROFILE_PROXY: (orgId: string, edgeId: string, profileName: string) =>
     `/api/v1/orgs/${orgId}/edge/${edgeId}/profiles/${encodeURIComponent(profileName)}/proxy`,
@@ -992,6 +999,8 @@ export const ENDPOINTS = {
 
   // Clip registry (v3, org-scoped, served by api-server — `crg_` entries)
   ORG_CLIP_REGISTRY: (orgId: string) => `/api/v1/orgs/${orgId}/clip-registry`,
+  ORG_CLIP_REGISTRY_RESOLVE: (orgId: string) => `/api/v1/orgs/${orgId}/clip-registry/resolve`,
+  ORG_CLIP_REGISTRY_SEARCH: (orgId: string) => `/api/v1/orgs/${orgId}/clip-registry/search`,
   ORG_CLIP_REGISTRY_CLIP: (orgId: string, clipId: string) =>
     `/api/v1/orgs/${orgId}/clip-registry/${clipId}`,
   ORG_CLIP_REGISTRY_PUBLISH: (orgId: string) => `/api/v1/orgs/${orgId}/clip-registry/publish`,

package/src/project-task-client.ts

@@ -23,6 +23,7 @@ import type {
   UpdateProjectMemberRequest,
   UpdateProjectRequest,
   UpdateTaskCommentRequest,
+  MoveTaskRequest,
   UpdateTaskRequest,
 } from './types.js';
 
@@ -84,6 +85,16 @@ export abstract class ProjectTaskClient {
     );
   }
 
+  /**
+   * Moves a task and its whole subtree into another project (renumbering it
+   * there; old identifiers stay resolvable as aliases). The caller needs
+   * update access on the task (source project membership) and read access to
+   * the target project.
+   */
+  async moveTask(orgId: string, taskId: string, data: MoveTaskRequest): Promise<Task> {
+    return this.request('POST', ENDPOINTS.TASK_MOVE(orgId, taskId), data);
+  }
+
   async archiveTask(orgId: string, taskId: string): Promise<void> {
     return this.request('POST', ENDPOINTS.TASK_ARCHIVE(orgId, taskId));
   }

package/src/types.ts

@@ -4,6 +4,7 @@ import type {
   LabelDeletedData,
   LabelUpdatedData,
 } from './task-label-types.js';
+
 export type {
   CompletedUploadPart,
   FileUrlResponse,
@@ -63,7 +64,11 @@ export interface Chat {
   created_at: string;
   updated_at: string;
   archived_at?: string | null;
+  archived_by?: string | null;
   deleted_at?: string | null;
+  deleted_by?: string | null;
+  member_count?: number;
+  my_role?: ChatMemberRole;
   pinned: boolean;
   hidden: boolean;
   my_notification_level?: NotificationLevel;
@@ -365,10 +370,18 @@ export interface Message {
   recent_repliers?: User[];
   /**
    * Per-viewer count of thread replies newer than the viewer's thread read
-   * cursor, excluding the viewer's own replies (root only). Populated on
-   * top-level list responses; omitted when zero.
+   * cursor, excluding the viewer's own replies (root only). Watcher-scoped:
+   * only threads the viewer watches accrue unread. Populated on top-level
+   * list responses; omitted when zero.
    */
   unread_reply_count?: number;
+  /**
+   * Per-viewer thread watch state (root only): true when the viewer watches
+   * this root's thread. Populated on top-level list responses for roots with
+   * replies; omitted means not watching. Seeds the client's live unread
+   * mirror.
+   */
+  watching?: boolean;
   edited_at: string | null;
   deleted_at: string | null;
   created_at: string;
@@ -1636,7 +1649,9 @@ export interface Task {
   completed_at: string | null;
   canceled_at: string | null;
   archived_at?: string | null;
+  archived_by?: string | null;
   deleted_at?: string | null;
+  deleted_by?: string | null;
   /**
    * Per-viewer: whether the requesting user may manage OTHER members' comment
    * subscriptions for this task (creator / assignee / project manager / org
@@ -1731,6 +1746,20 @@ export interface CreateTaskRequest {
   label_ids?: string[];
 }
 
+/**
+ * Moves a task (and its whole subtree) into another project via
+ * POST /tasks/{taskId}/move — the only path that changes the binding; PATCH
+ * keeps refusing project_id changes. Every subtree node is renumbered from the
+ * target project's counter and its old KEY-N identifier stays resolvable as a
+ * permanent alias. parent_id (must belong to the target project) attaches the
+ * moved root under a parent there; same-project calls with a parent degrade to
+ * a reparent, without one they are an idempotent no-op.
+ */
+export interface MoveTaskRequest {
+  project_id: string;
+  parent_id?: string;
+}
+
 export interface UpdateTaskRequest {
   title?: string;
   description?: string;
@@ -1738,9 +1767,10 @@ export interface UpdateTaskRequest {
   priority?: TaskPriority;
   assignee_id?: string | null;
   parent_id?: string | null;
-  // project_id is deliberately absent: a Task's Project is immutable after
-  // creation (server answers 400 PROJECT_IMMUTABLE; resubmitting the current
-  // value is an idempotent no-op).
+  // project_id is deliberately absent: PATCH cannot change a Task's Project
+  // (server answers 400 PROJECT_IMMUTABLE; resubmitting the current value is
+  // an idempotent no-op). Moving between projects is its own explicit
+  // operation — see MoveTaskRequest / moveTask().
   sort_order?: number;
   /**
    * Ordering intent resolved server-side in the update transaction:
@@ -1818,6 +1848,8 @@ export interface Project {
   sort_order: number;
   created_at: string;
   updated_at: string;
+  archived_at?: string | null;
+  archived_by?: string | null;
   /** The requesting user's own role, computed per request rather than stored.
    * Absent means they hold no membership (direct or team-derived). */
   my_role?: ProjectRole;
@@ -2338,11 +2370,19 @@ export interface Wiki {
    *  access_tier are populated — enough to request to join, nothing else.
    *  Degraded entries must not be mounted, synced or treated as content. */
   degraded?: boolean;
+  /** Caller's library-level star (the sidebar Starred group). Carried on full
+   *  list/get projections only — degraded entries never have it. */
+  starred?: boolean;
 }
 
 export interface WikiFileChange {
   path: string;
-  action: 'create' | 'update' | 'delete';
+  action: 'create' | 'update' | 'delete' | 'rename';
+  /**
+   * Rename source; present only when action is "rename" (path is the rename
+   * target). Additive key — older changesets never carry it.
+   */
+  from_path?: string;
 }
 
 export interface WikiChangeset {
@@ -2558,7 +2598,9 @@ export interface WikiRefsCheckResponse {
 
 export interface WikiDiffFile {
   path: string;
-  action?: string; // "create" | "update" | "delete"
+  action?: string; // "create" | "update" | "delete" | "rename"
+  /** Rename source when action is "rename" (path is the target). */
+  from_path?: string;
   additions: number;
   deletions: number;
 }
@@ -2574,20 +2616,44 @@ export interface CreateWikiRequest {
   default_branch?: string;
 }
 
-export interface WikiFileChangeInput {
+interface WikiFileChangeInputCommon {
   path: string;
-  action: 'create' | 'update' | 'delete';
-  content_base64?: string;
   base_version?: number;
   /**
    * Git blob SHA of the default-branch version this change was authored
    * against. When set on update/delete, the server rejects the changeset
    * with 409 STALE_BASE if the file has since changed on the default branch
-   * (prevents silently overwriting concurrent edits).
+   * (prevents silently overwriting concurrent edits). For rename it guards
+   * the from_path side.
    */
   base_sha?: string;
 }
 
+export interface WikiFileChangeWriteInput extends WikiFileChangeInputCommon {
+  action: 'create' | 'update' | 'delete';
+  content_base64?: string;
+  /** Only valid with action "rename" — the server rejects it elsewhere. */
+  from_path?: never;
+}
+
+/**
+ * Rename is a discriminated variant: `from_path` (the source; `path` is the
+ * target) and `content_base64` are both REQUIRED. The content must be sent —
+ * the server rejects a rename without the content_base64 key
+ * (400 MISSING_FIELDS) because the single-commit move always writes content
+ * and an omitted key would otherwise erase the file; an explicitly empty
+ * string (an empty file) is legal. Requires the server capability
+ * `cap:wiki-rename` — while it is off the server answers 422 RENAME_DISABLED
+ * (older servers answer 400 INVALID_ACTION).
+ */
+export interface WikiFileChangeRenameInput extends WikiFileChangeInputCommon {
+  action: 'rename';
+  from_path: string;
+  content_base64: string;
+}
+
+export type WikiFileChangeInput = WikiFileChangeWriteInput | WikiFileChangeRenameInput;
+
 export interface CreateWikiChangesetRequest {
   title: string;
   message?: string;
@@ -5430,6 +5496,89 @@ export interface BrowserAliasExecutionReceipt {
   updated_at: string;
 }
 
+export type BrowserUseAction =
+  | 'read'
+  | 'tabs'
+  | 'wait'
+  | 'snapshot'
+  | 'get'
+  | 'screenshot'
+  | 'open'
+  | 'navigate'
+  | 'viewport'
+  | 'click'
+  | 'fill'
+  | 'type'
+  | 'press'
+  | 'scroll'
+  | 'close'
+  | 'recover'
+  | 'eval';
+
+export interface BrowserUseTarget {
+  tab_id?: string;
+  browser_generation?: number;
+  document_generation?: number;
+  snapshot_id?: string;
+  ref?: string;
+}
+
+export interface BrowserUseOperationRequest {
+  contract_version: 'browser-use-operation-v1';
+  request_id: string;
+  profile_id: string;
+  action: BrowserUseAction;
+  target?: BrowserUseTarget;
+  params: Record<string, unknown>;
+  /** Canonical RFC3339 UTC instant, no more than two minutes in the future. */
+  deadline: string;
+}
+
+export type BrowserUseOperationPhase =
+  | 'accepted'
+  | 'started'
+  | 'succeeded'
+  | 'failed'
+  | 'outcome_unknown';
+
+export interface BrowserUseOperationError {
+  code: string;
+  message?: string;
+  hint?: string;
+}
+
+/** Durable Browser Use proof. `data` is encrypted/transient: it is present
+ * only while result_available is true and disappears after result_expires_at;
+ * the terminal receipt and result_digest remain durable. */
+export interface BrowserUseOperationReceipt {
+  contract_version: 'browser-use-operation-v1';
+  operation_id: string;
+  request_id: string;
+  profile_id: string;
+  profile_version: number;
+  profile_config_revision: number;
+  action: BrowserUseAction;
+  required_grant: 'browser.read' | 'browser.interact' | 'browser.advanced';
+  phase: BrowserUseOperationPhase;
+  dispatched?: boolean;
+  receipt_id?: string;
+  receipt_digest?: string;
+  occurred_at?: string;
+  tab_id?: string;
+  browser_generation?: number;
+  duration_ms?: number;
+  result_digest?: string;
+  result_available: boolean;
+  result_expires_at?: string;
+  data?: unknown;
+  error?: BrowserUseOperationError;
+  deadline: string;
+  accepted_at: string;
+  started_at?: string;
+  terminal_at?: string;
+  updated_at: string;
+}
+
 /**
  * Sanitized per-profile egress proxy status (hosted Cloud Profiles) — the GET
  * response and the PUT/DELETE result. NEVER carries the password; `password_set`