@modootoday/datalab-extension-mcp 1.4.1 → 1.4.3

package/dist/{chunk-DDJ2JWP5.js → chunk-CBHNMIS3.js}

@@ -2,7 +2,7 @@ import {
   __export
 } from "./chunk-MLKGABMK.js";
 
-// ../mcp-server/dist/chunk-4Q6PTXC5.js
+// ../mcp-server/dist/chunk-NRS76HC5.js
 import {
   createServer
 } from "http";
@@ -14391,17 +14391,14 @@ var BridgeToolDescriptorSchema = external_exports.object({
   /** JSON Schema for the arguments, passed to the host verbatim. */
   inputSchema: external_exports.record(external_exports.string(), external_exports.unknown()),
   /**
-   * MCP tool annotations, derived from the tool's tier. OPTIONAL by ABI rule.
+   * MCP tool annotations, derived from the tool's tier. Optional by ABI rule.
    *
-   * Typed loosely on purpose. This end only forwards it — the shape is owned
-   * by `annotations.ts` on the extension side, and pinning it here would make
-   * every future hint a wire-contract change on a schema that binaries we
-   * cannot reach must keep parsing.
+   * Typed loosely because this end only forwards it; pinning the shape here
+   * would make every future hint a wire-contract change.
    *
-   * 🔴 A server built before this field existed strips it (z.object() without
-   * .strict()), so annotations simply do not arrive there. That degradation is
-   * silent and acceptable; a version marker that must survive old servers goes
-   * INSIDE `inputSchema`, which is forwarded verbatim.
+   * 🔴 A server predating this field strips it, so annotations never arrive
+   * there. Anything that must survive such a server goes inside the input
+   * schema, which is forwarded verbatim.
    */
   annotations: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 });
@@ -14414,19 +14411,15 @@ var HelloSchema = external_exports.object({
   /** Pairing token. Not auto-attached by the browser (unlike a cookie). */
   token: external_exports.string(),
   /**
-   * The extension's own id (`chrome.runtime.id`). ADDITIVE: older servers
-   * ignore it and identify the caller from the `Origin` header — but an
-   * extension service worker's privileged loopback fetch sends no `Origin`, so
-   * newer servers verify identity from this field when the header is absent.
-   * Optional so every binary that predates it still parses (see the ABI note).
+   * The extension's own id. Additive: an extension service worker's privileged
+   * loopback fetch sends no Origin header, so servers verify identity from this
+   * field when the header is absent.
    */
   extensionId: external_exports.string().optional(),
   /**
-   * Feature flags this panel build understands, e.g. a future
-   * "catalog-push". Additive evolution happens HERE, not via a protocol
-   * bump: a capability an old peer never sent is simply absent, and code
-   * must treat absence as "do not use". Optional with a default so every
-   * binary that predates the field still parses.
+   * Feature flags this panel build understands. Additive evolution happens
+   * HERE, not via a protocol bump: a capability an old peer never sent is
+   * simply absent, and code must treat absence as "do not use".
    */
   capabilities: external_exports.array(external_exports.string()).default([])
 });
@@ -14610,7 +14603,7 @@ function checkExtensionIdentity(origin, claimedExtensionId, extensionId) {
   };
 }
 var READ_ONLY_TOOLS = [
-  // --- Search-ad estimates. Uses your own advertiser API credentials. ---
+  // --- Search-ad estimates. Uses the user's own advertiser API credentials. ---
   "ad_average_position_bid",
   "ad_competition_density",
   "ad_estimate_bid",
@@ -14665,7 +14658,7 @@ var READ_ONLY_TOOLS = [
   "local_job_categories",
   "local_region_trend",
   "local_regions",
-  // --- Your OWN channel analytics ---
+  // --- The user's own channel analytics ---
   "daily_trend",
   "my_audience",
   "my_blog_summary",
@@ -14694,7 +14687,7 @@ var READ_ONLY_TOOLS = [
   "my_soaring",
   "my_top_content",
   "my_traffic_series",
-  // --- Public place data, and reads of a place you own ---
+  // --- Public place data, and reads of a place the user owns ---
   "place_ai_briefing",
   "place_announcements",
   "place_autocomplete",
@@ -14726,8 +14719,8 @@ var READ_ONLY_TOOLS = [
   "search_influencer",
   "search_kin",
   "search_news",
-  // `search_total` is referenced by search_blog's description — leaving it out
-  // made that reference a broken link for MCP hosts (2026-07-17 audit).
+  // Referenced by search_blog's description, so omitting it would leave a
+  // dangling reference for hosts.
   "search_total",
   "search_video",
   "search_web",
@@ -14751,47 +14744,37 @@ var READ_ONLY_TOOLS = [
   // Its siblings that suggest titles, outlines, or specs all call a language
   // model, and are excluded for that reason.
   "seo_scorecard",
-  // --- 모델이 필요하지만 MCP 에서는 우리가 모델을 부르지 않는 도구들 ---
-  // 🔴 이 계열은 "이중과금" 을 이유로 통째로 제외돼 있었다. 호스트는 이 도구를 부르기로
-  // 결정하려고 **이미 자기 모델을 돌렸는데**, 우리가 사용자의 모델을 또 부르면 한 턴에
-  // 두 번 청구된다. 이제 `llmJson` 이 호출자를 보고 재료(프롬프트)만 돌려주므로 우리 쪽
-  // 모델 호출이 0 이다 — 제외의 근거가 사라졌다.
-  //
-  // 읽고 제안만 하므로 여기(읽기 전용)가 맞다. 되돌릴 것이 없다.
+  // --- Planning tools that need a model, but never call one from here ---
+  // 🔴 The calling host already ran its own model, so calling the user's too
+  // would bill one turn twice. These return prompt material and make no model
+  // call, which is what lets them read and suggest here, undoing nothing.
   "outline_suggest",
   "seo_aeo_geo_spec",
-  // 🔴 `write_draft` 는 2단(분석 → 초안)이라 한 번에 재료를 다 줄 수 없다. 먼저 오는
-  // 단계의 프롬프트를 주고, 호스트가 결과를 `structure` 로 되넘기면 다음 단계를 준다.
-  // 문체 프로필은 **객체가 아니라 프롬프트 안에 문장으로** 들어가고, 그 빌더는 문체 세
-  // 항목만 쓰므로 blogId·sourcePostIds·sourceTitles 는 나가지 않는다.
+  // Two-stage (analyse, then draft), so it returns the first stage's prompt and
+  // the second only once the host hands the result back. The
+  // style profile travels as prose inside that prompt, not as an object.
   "write_draft",
   "benchmark_gap",
   "content_calendar",
   "internal_links",
   // --- Grouped with the writing tools, but a pure collector. ---
-  // `run_research` is categorised alongside tools that call a model, yet calls
-  // none itself — it only gathers public data. Its label is misleading; it was
-  // admitted after checking what it actually does. Classify by behaviour, not
-  // by category.
+  // Calls no model itself — it only gathers public data. Admitted after
+  // checking behaviour rather than trusting the category label.
   "run_research"
 ];
 var ALLOWED = Object.freeze(new Set(READ_ONLY_TOOLS));
 var EXCLUDED_TOOLS = Object.freeze({
-  // 🔴 editor_* 는 더 이상 여기 없다 — 등급 표(TOOL_TIERS)로 옮겼다. 제외였던
-  // 이유는 "확인을 받을 방법이 없고 되돌릴 수단도 없다" 였는데, 둘 다 생겼다:
-  // 세션 동의 + 호출별 확인이 서고, 주입 전후로 임시저장을 부르며 그것이
-  // 거절될 때를 위해 문서 사본을 따로 뜬다.
   generate_images: "writes to your post, needs confirmation, and spends your AI credits",
-  // 🔴 editor_read / editor_read_structure 도 더 이상 여기 없다. 보류 사유는 "탭이
-  // 열려 있어야 하는데 외부 에이전트에겐 열 탭이 없다" 였지만, 그것은 제외할 이유가
-  // 아니라 **읽고 나서 알게 될 사실**이다 — 탭이 없으면 도구가 그렇게 답하면 된다.
-  // 지금은 TOOL_TIERS 에서 read 등급으로 노출된다.
-  // Spend your own AI credits on a turn the calling host already paid for.
   // Side effect outside the request/response contract.
-  export_report: "triggers a file download"
+  export_report: "triggers a file download",
+  // 🔴 A host that can generate its own image has a free way onto the canvas —
+  // gallery_image_add. Spending credits for what the caller already has is the
+  // charge nobody meant to make.
+  photo_ai_image_add: "spends your AI credits for an image your own app can make and hand over",
+  video_image_realign: "spends your AI credits per photo to reach what the free scene tools already reach"
 });
 var TOOL_TIERS = Object.freeze({
-  // ── 사진 편집기 (우리 표면) ──────────────────────────────────────
+  // ── Photo editor (our own surface) ──────────────────────────────
   photo_canvas_get: "read",
   photo_gallery_list: "read",
   photo_text_add: "write",
@@ -14808,13 +14791,21 @@ var TOOL_TIERS = Object.freeze({
   photo_node_remove: "destructive",
   photo_page_remove: "destructive",
   photo_template_apply: "destructive",
-  photo_ai_image_add: "paid",
-  // ── 영상 편집기 (우리 표면) ──────────────────────────────────────
+  // ── Gallery: the free way in ────────────────────────────────────
+  //
+  // 🔴 Destructive because it reads a path off the user's disk, the same
+  // capability editor_insert_image carries. A session toggle would open the
+  // whole filesystem once and stay open.
+  gallery_image_add: "destructive",
+  // ── Video editor (our own surface) ──────────────────────────────
   video_timeline_get: "read",
   video_sources_list: "read",
   video_scene_add: "write",
   video_subtitle_set: "write",
   video_scene_image_set: "write",
+  // Brings a gallery picture into this video — an add, like video_image_add.
+  // The disk read already happened at gallery_image_add, under its own confirm.
+  video_image_add_from_gallery: "write",
   video_scene_update: "write",
   video_background_set: "write",
   video_canvas_resize: "write",
@@ -14826,52 +14817,39 @@ var TOOL_TIERS = Object.freeze({
   video_node_remove: "destructive",
   video_scene_remove: "destructive",
   video_narration_generate: "paid",
-  video_image_realign: "paid",
-  // ── 스마트에디터 읽기 ────────────────────────────────────────────
+  // ── Post editor: reads ──────────────────────────────────────────
   editor_read: "read",
   editor_read_structure: "read",
-  // ── 스마트에디터 쓰기 ────────────────────────────────────────────
+  // ── Post editor: writes ─────────────────────────────────────────
   //
-  // 🔴 안전망이 선 뒤에 열었다. 주입 전후로 벤더 임시저장을 부르고, 그것이
-  // 거절되는 세 경우(빈 문서 · 길이 초과 · 충돌)를 위해 문서 사본을 따로 뜬다.
-  // 그전에는 되돌릴 수단이 에디터 undo 한 스텝뿐이었다 — 그 상태로 외부
-  // 프로세스에 본문 쓰기를 열 수는 없었다.
+  // 🔴 Every injection is bracketed by a vendor autosave, plus a separate copy
+  // of the document for the cases the vendor refuses one. Without that
+  // recovery point, editor undo would be the only way back.
   //
-  // 🔴 `editor_replace` 만 파괴적이다. 나머지는 넣거나 덧붙이는 것이라 임시저장
-  // 지점으로 돌아갈 수 있지만, 본문 전체 교체는 그 지점 자체를 갈아치운다.
+  // 🔴 Only whole-body replacement is destructive: the others append, so the
+  // autosave point still holds, while replacing the body overwrites it.
   editor_insert_draft: "write",
-  // 🔴 창을 여는 것은 문서를 고치는 것이 아니다. 그래도 `write` 로 둔다 — 사용자의
-  // 브라우저에 탭을 만드는 일이고, 문서 편집을 켜지 않은 세션에서 창만 열어 두는
-  // 것은 어차피 할 수 있는 일이 없다. 등급이 하나면 사용자가 켜고 끄는 것도 하나다.
+  // Opening a window edits no document, but it does create a tab in the user's
+  // browser, and a session that has not enabled editing can do nothing with the
+  // window anyway — one tier keeps it one thing for the user to allow.
   editor_open_window: "write",
-  // 🔴 창을 닫는 것은 되돌릴 수 없다 — 사용자가 쓰던 원고가 그 안에 있을 수 있으므로
-  // 호출마다 묻는다. 세션 동의로 넘어가게 두면, 한 번 켜 두고 잊은 토글이 원고를
-  // 없앨 수 있다.
+  // 🔴 Closing a window cannot be undone and the user's draft may be inside, so
+  // it is asked per call rather than covered by a forgotten session toggle.
   editor_reduce_windows: "destructive",
-  // 🔴 삽입은 덧붙이기라 덮어쓰기 확인을 거치지 않는다 — 그래서 등급이 유일한
-  // 방벽이고, 호출마다 묻는다. 넣을 그림의 출처를 사용자가 매번 보고 정한다.
+  // 🔴 Insertion appends, so it never passes through the overwrite prompt; the
+  // tier is the only barrier, and the user approves each image's source.
   editor_insert_image: "destructive",
   editor_set_title: "write",
-  // 🔴 `title_optimize` 는 편집기 도구가 아닌데 등급이 있다. 사용자가 제목 후보를 고르는
-  // 순간 그것이 곧 확인이 되어 **제목을 덮어쓰기** 때문이다 — 그래서 같은 일을 하는
-  // `editor_set_title` 과 같은 등급이다. 이름에 표면 접두가 없는 것은 이 도구가
-  // 사진/영상 편집기 표면에 속하지 않아서다(접두 규약은 그 둘의 이름 충돌 방지용).
+  // 🔴 Not an editor tool, but tiered like one: picking a title candidate IS
+  // the confirmation and overwrites the title, so it matches editor_set_title.
   title_optimize: "write",
   editor_undo: "write",
   editor_replace: "destructive"
 });
 var PAID_TOOL_COSTS = Object.freeze({
-  photo_ai_image_add: Object.freeze({
-    basis: "AI \uC774\uBBF8\uC9C0 1\uC7A5 \uC0DD\uC131",
-    editorAsksAgain: false
-  }),
   video_narration_generate: Object.freeze({
     basis: "\uBAA9\uC18C\uB9AC\uAC00 \uC5C6\uB294 \uC7A5\uBA74 \uC218\uB9CC\uD07C \uC74C\uC131 \uC0DD\uC131",
     editorAsksAgain: true
-  }),
-  video_image_realign: Object.freeze({
-    basis: "\uC0AC\uC9C4 \uC218\uB9CC\uD07C \uC774\uBBF8\uC9C0 \uBD84\uC11D",
-    editorAsksAgain: true
   })
 });
 var HINTS_BY_TIER = Object.freeze({
@@ -14901,9 +14879,9 @@ var LOOKUP_ANNOTATIONS = Object.freeze({
   idempotentHint: true
 });
 var BRIDGE_LIMITS = Object.freeze({
-  /** 한 번에 몰아 쓸 수 있는 호출 수. */
+  /** Calls available in one burst. */
   capacity: 10,
-  /** 초당 다시 차는 칸 수. */
+  /** Slots refilled per second. */
   refillPerSecond: 1
 });
 var CONNECTOR_RESULT_CAP_BYTES = 4 * 1024 * 1024;
@@ -14912,7 +14890,7 @@ var RESULT_BUDGET_BYTES = Math.floor(
   CONNECTOR_RESULT_CAP_BYTES / RESULT_HEADROOM
 );
 var REASON_POLICY = Object.freeze({
-  // --- 기다리면 풀린다 ---
+  // --- Resolves on its own with time ---
   rate_limited: Object.freeze({
     retryable: true,
     retryAfterMs: Math.ceil(1e3 / BRIDGE_LIMITS.refillPerSecond)
@@ -14920,20 +14898,20 @@ var REASON_POLICY = Object.freeze({
   timeout: Object.freeze({ retryable: true }),
   connection_lost: Object.freeze({ retryable: true }),
   tool_error: Object.freeze({ retryable: true }),
-  // --- 요청을 고쳐야 한다 ---
+  // --- The request itself must change ---
   unknown_tool: Object.freeze({ retryable: false }),
   invalid_args: Object.freeze({ retryable: false }),
   tool_closed: Object.freeze({ retryable: false }),
   missing_in_build: Object.freeze({ retryable: false }),
-  // --- 🔴 사람이 움직여야 한다. 다시 거는 것은 조르는 것이다 ---
+  // --- 🔴 A human must act; re-calling only nags them ---
   needs_consent: Object.freeze({ retryable: false }),
   not_confirmed: Object.freeze({ retryable: false }),
   confirm_timeout: Object.freeze({ retryable: false }),
   confirm_too_late: Object.freeze({ retryable: false }),
-  // --- 사용자가 브라우저에서 무언가 해야 한다 ---
+  // --- The user must do something in the browser ---
   multiple_editors: Object.freeze({ retryable: false }),
   editor_busy: Object.freeze({ retryable: false }),
-  // --- 연결 자체를 고쳐야 한다 ---
+  // --- The connection itself must be repaired ---
   not_connected: Object.freeze({ retryable: false }),
   unauthorized: Object.freeze({ retryable: false })
 });
@@ -14962,12 +14940,9 @@ function projectTool(d) {
       name: d.name,
       description: d.description,
       inputSchema: d.inputSchema,
-      // 🔴 Re-assembly, not spread — and that is exactly why this line has to
-      // exist. Naming the fields keeps a malformed peer from smuggling extra
-      // keys into a host payload, but it also means a field added upstream is
-      // dropped here in silence: the extension believes it advertised the
-      // hints, the host never sees them, and nothing anywhere reports a
-      // failure. Any future descriptor field must be added HERE too.
+      // 🔴 Re-assembly, not spread: naming each field keeps a malformed peer
+      // from smuggling extra keys into a host payload, but it also drops any
+      // new descriptor field in silence. Add future fields HERE too.
       ...d.annotations ? { annotations: d.annotations } : {}
     }
   };
@@ -14995,6 +14970,324 @@ function projectTools(descriptors) {
   }
   return { tools, rejected };
 }
+var BLOG_BRIEF = [
+  "my_daily_brief",
+  "my_blog_summary",
+  "my_realtime",
+  "my_traffic_series",
+  "my_top_content",
+  "my_soaring",
+  "my_publish_calendar",
+  "daily_trend",
+  "my_moments"
+];
+var BLOG_INSIGHTS = [
+  "my_content_audience",
+  "my_inflow",
+  "my_audience",
+  "my_inflow_domain",
+  "my_country",
+  "my_device",
+  "my_dwell",
+  "my_followers",
+  "my_revisit",
+  "my_revenue",
+  "my_impression_click",
+  "my_impression_ranks",
+  "my_channels",
+  "my_revenue_ranks",
+  "my_revenue_efficiency",
+  "my_content_info",
+  "my_content_read",
+  "my_content_detail",
+  "my_content_inflow"
+];
+var RESEARCH = [
+  "local_regions",
+  "local_job_categories",
+  "local_region_trend",
+  "local_area_category_rank",
+  "content_volume",
+  "autocomplete_keywords",
+  "qra_keywords",
+  "kin_question_demand",
+  "web_read",
+  "run_research",
+  // Planning tools: they need a model but call none here, returning prompt
+  // material instead. Grouped by job — all three design a post not yet written.
+  "outline_suggest",
+  "seo_aeo_geo_spec",
+  "content_calendar",
+  // The last step of that job: turn the design into an actual draft.
+  "write_draft"
+];
+var EDITOR_CONTROL = [
+  // 🔴 The tool that opens a tab belongs in the group that requires one: a
+  // model choosing this group was just told it needs a tab, and the way out
+  // has to be visible at the wall, not in some other group.
+  "editor_open_window",
+  "editor_reduce_windows",
+  "editor_read",
+  "editor_read_structure",
+  "editor_undo",
+  "editor_replace",
+  "editor_insert_draft",
+  "editor_set_title",
+  // Both act on the open draft: title_optimize overwrites the title the moment
+  // a candidate is picked, and internal_links reads the current draft.
+  "title_optimize",
+  "internal_links",
+  "editor_insert_image",
+  "seo_scorecard"
+];
+var BY_PREFIX = [
+  { slug: "serp-watch", prefixes: ["search_", "serp_"] },
+  { slug: "benchmark", prefixes: ["blog_", "cafe_", "influencer_"] },
+  { slug: "place", prefixes: ["place_"] },
+  { slug: "shopping", prefixes: ["shopping_"] },
+  { slug: "ad-bidding", prefixes: ["ad_"] },
+  { slug: "comment-stats", prefixes: ["comment_"] },
+  { slug: "photo-editor", prefixes: ["photo_"] },
+  { slug: "video-editor", prefixes: ["video_"] },
+  { slug: "keyword-research", prefixes: ["keyword_"] }
+];
+var GALLERY = ["gallery_image_add"];
+var EXPLICIT = [
+  { slug: "gallery", tools: GALLERY },
+  { slug: "blog-brief", tools: BLOG_BRIEF },
+  { slug: "blog-insights", tools: BLOG_INSIGHTS },
+  { slug: "keyword-research", tools: RESEARCH },
+  { slug: "editor-control", tools: EDITOR_CONTROL },
+  // Named like the group but caught by none of its prefixes, so it is listed
+  // explicitly — a similar name is not a membership rule.
+  { slug: "benchmark", tools: ["benchmark_gap"] }
+];
+var META = [
+  {
+    slug: "blog-brief",
+    label: "\uC624\uB298\uC758 \uBE14\uB85C\uADF8 \uBE0C\uB9AC\uD551",
+    summary: "\uB0B4 \uBE14\uB85C\uADF8\uAC00 \uC9C0\uAE08 \uC5B4\uB5A4\uC9C0 \u2014 \uBC29\uBB38\xB7\uC870\uD68C\xB7\uC778\uAE30\uAE00\xB7\uC2E4\uC2DC\uAC04"
+  },
+  {
+    slug: "blog-insights",
+    label: "\uBE14\uB85C\uADF8 \uC2EC\uCE35 \uBD84\uC11D",
+    summary: "\uC65C \uADF8\uB7F0\uC9C0 \u2014 \uC720\uC785 \uACBD\uB85C\xB7\uC131\uBCC4\uC5F0\uB839\xB7\uCCB4\uB958\xB7\uC218\uC775\xB7\uAE00\uBCC4 \uC0C1\uC138"
+  },
+  {
+    slug: "keyword-research",
+    label: "\uD0A4\uC6CC\uB4DC\xB7\uAE00\uAC10 \uB9AC\uC11C\uCE58",
+    summary: "\uBB34\uC5C7\uC744 \uC4F8\uC9C0 \u2014 \uD0A4\uC6CC\uB4DC \uC218\uC694\xB7\uC5F0\uAD00\uC5B4\xB7\uC790\uB3D9\uC644\uC131\xB7\uBC1C\uD589\uB7C9\xB7\uC9C0\uC2DDiN \uC9C8\uBB38\xB7\uC9C0\uC5ED \uD2B8\uB80C\uB4DC"
+  },
+  {
+    slug: "serp-watch",
+    label: "\uB124\uC774\uBC84 \uAC80\uC0C9\uACB0\uACFC \uD655\uC778",
+    summary: "\uC774 \uAC80\uC0C9\uC5B4\uC5D0 \uC9C0\uAE08 \uB124\uC774\uBC84\uAC00 \uBB34\uC5C7\uC744 \uB744\uC6B0\uB294\uC9C0"
+  },
+  {
+    slug: "benchmark",
+    label: "\uACBD\uC7C1\uC790 \uBCA4\uCE58\uB9C8\uD0B9",
+    summary: "\uB2E4\uB978 \uBE14\uB85C\uADF8\xB7\uCE74\uD398\xB7\uC778\uD50C\uB8E8\uC5B8\uC11C\uAC00 \uBB34\uC5C7\uC744 \uD558\uB294\uC9C0"
+  },
+  {
+    slug: "place",
+    label: "\uB124\uC774\uBC84 \uD50C\uB808\uC774\uC2A4 \uAD00\uB9AC",
+    summary: "\uB0B4 \uB9E4\uC7A5 \uC815\uBCF4\xB7\uB9AC\uBDF0\xB7\uC608\uC57D\xB7\uCFE0\uD3F0\xB7\uB300\uAE30"
+  },
+  {
+    slug: "shopping",
+    label: "\uC1FC\uD551 \uC778\uC0AC\uC774\uD2B8",
+    summary: "\uC774 \uC0C1\uD488\uC774 \uC5B8\uC81C \uB204\uAD6C\uC5D0\uAC8C \uD314\uB9AC\uB294\uC9C0"
+  },
+  {
+    slug: "ad-bidding",
+    label: "\uAC80\uC0C9\uAD11\uACE0 \uC785\uCC30",
+    // The calls themselves cost nothing, hence the read tier, but they return
+    // data only when the user's search-ad account credentials are present.
+    summary: "\uC785\uCC30\uAC00\uC640 \uC608\uC0C1 \uC131\uACFC \u2014 \uBB34\uB8CC, \uAC80\uC0C9\uAD11\uACE0 \uACC4\uC815 \uC790\uACA9\uC99D\uBA85 \uD544\uC694"
+  },
+  {
+    slug: "comment-stats",
+    label: "\uB313\uAE00 \uBC18\uC751 \uD1B5\uACC4",
+    summary: "\uB274\uC2A4 \uB313\uAE00\uC774 \uC5B8\uC81C \uB204\uAD6C\uC5D0\uAC8C \uB2EC\uB9AC\uB294\uC9C0"
+  },
+  {
+    slug: "editor-control",
+    label: "\uAE00\uC4F0\uAE30 \uCC3D \uC81C\uC5B4",
+    summary: "\uC5F4\uB824 \uC788\uB294 \uB124\uC774\uBC84 \uAE00\uC4F0\uAE30 \uCC3D\uC758 \uC6D0\uACE0\uB97C \uC77D\uACE0 \uACE0\uCE5C\uB2E4",
+    needsTab: true,
+    openerTool: "editor_open_window",
+    reducerTool: "editor_reduce_windows"
+  },
+  {
+    slug: "photo-editor",
+    label: "\uC0AC\uC9C4 \uD3B8\uC9D1\uAE30 \uC870\uC791",
+    summary: "\uC0AC\uC9C4 \uD3B8\uC9D1\uAE30 \uCE94\uBC84\uC2A4\uC5D0 \uD14D\uC2A4\uD2B8\xB7\uB3C4\uD615\xB7\uC774\uBBF8\uC9C0\uB97C \uB123\uB294\uB2E4",
+    needsTab: true,
+    reducerTool: "editor_reduce_windows"
+  },
+  {
+    slug: "video-editor",
+    label: "\uC601\uC0C1 \uD3B8\uC9D1\uAE30 \uC870\uC791",
+    summary: "\uC601\uC0C1 \uD3B8\uC9D1\uAE30\uC758 \uC7A5\uBA74\xB7\uC790\uB9C9\xB7\uBAA9\uC18C\uB9AC\uB97C \uB9CC\uB4E0\uB2E4",
+    needsTab: true,
+    reducerTool: "editor_reduce_windows"
+  },
+  {
+    slug: "gallery",
+    label: "\uC774\uBBF8\uC9C0 \uAC24\uB7EC\uB9AC",
+    summary: "\uB0B4\uAC00 \uB9CC\uB4E0 \uC0AC\uC9C4 \uD30C\uC77C\uC744 \uAC24\uB7EC\uB9AC\uC5D0 \uB123\uC5B4 \uB450 \uD3B8\uC9D1\uAE30\uC5D0\uC11C \uC4F4\uB2E4 \u2014 \uD3B8\uC9D1\uAE30 \uCC3D\uC774 \uC5C6\uC5B4\uB3C4 \uB41C\uB2E4"
+  }
+];
+var FALLBACK_SLUG = "other";
+function slugFor(name) {
+  for (const e of EXPLICIT) {
+    if (e.tools.includes(name)) return e.slug;
+  }
+  for (const p of BY_PREFIX) {
+    if (p.prefixes.some((x) => name.startsWith(x))) return p.slug;
+  }
+  return FALLBACK_SLUG;
+}
+function buildToolsets(names) {
+  const byslug = /* @__PURE__ */ new Map();
+  for (const n of names) {
+    const s = slugFor(n);
+    (byslug.get(s) ?? byslug.set(s, []).get(s)).push(n);
+  }
+  const out = [];
+  for (const m of META) {
+    const tools = byslug.get(m.slug) ?? [];
+    if (tools.length > 0) out.push({ ...m, tools });
+    byslug.delete(m.slug);
+  }
+  const leftover = byslug.get(FALLBACK_SLUG) ?? [];
+  if (leftover.length > 0) {
+    out.push({
+      slug: FALLBACK_SLUG,
+      label: "\uADF8 \uBC16\uC758 \uB3C4\uAD6C",
+      summary: "\uC544\uC9C1 \uBB36\uC74C\uC774 \uC815\uD574\uC9C0\uC9C0 \uC54A\uC740 \uB3C4\uAD6C",
+      tools: leftover
+    });
+  }
+  return out;
+}
+var CATALOG_TOOL = "datalab_catalog";
+var DESCRIBE_TOOL = "datalab_describe";
+var CALL_TOOL = "datalab_call";
+var CONFIRM_STATUS_TOOL = "datalab_confirm_status";
+var SESSION_STATE_TOOL = "datalab_session_state";
+function discoveryDescriptors(entries) {
+  const sets = buildToolsets(entries.map((e) => e.name));
+  const names = sets.map((s) => s.slug).join(", ");
+  return [
+    {
+      name: CATALOG_TOOL,
+      description: `\uB370\uC774\uD130\uB7A9\uD234\uC988\uAC00 \uD560 \uC218 \uC788\uB294 \uC77C\uC758 \uBAA9\uB85D\uC744 \uB3CC\uB824\uC900\uB2E4. \uB124\uC774\uBC84 \uBE14\uB85C\uADF8\xB7\uD0A4\uC6CC\uB4DC\xB7\uAC80\uC0C9\uACB0\uACFC\xB7\uD50C\uB808\uC774\uC2A4\xB7\uC1FC\uD551\xB7\uAD11\uACE0 \uD1B5\uACC4\uC640 \uAE00\uC4F0\uAE30/\uC0AC\uC9C4/\uC601\uC0C1 \uD3B8\uC9D1\uAE30 \uC81C\uC5B4\uAE4C\uC9C0 ${entries.length}\uAC1C \uB3C4\uAD6C\uAC00 \uC788\uACE0, \uC5EC\uAE30 \uC815\uC758\uB85C \uBCF4\uC774\uB294 \uAC83\uC740 \uADF8\uC911 \uC77C\uBD80\uB2E4. **\uC0AC\uC6A9\uC790\uAC00 \uBB34\uC5C7\uC744 \uBD80\uD0C1\uD558\uB4E0, \uC9C0\uAE08 \uBCF4\uC774\uB294 \uB3C4\uAD6C\uB85C \uC548 \uB418\uBA74 \uBA3C\uC800 \uC774\uAC83\uC744 \uBD88\uB7EC\uB77C** \u2014 \uC5C6\uB2E4\uACE0 \uB2F5\uD558\uAE30 \uC804\uC5D0 \uD655\uC778\uD55C\uB2E4. toolset \uC5C6\uC774 \uBD80\uB974\uBA74 \uBB36\uC74C \uBAA9\uB85D, \uC8FC\uBA74 \uADF8 \uBB36\uC74C\uC758 \uB3C4\uAD6C \uC774\uB984\uACFC \uC124\uBA85. \uBB36\uC74C: ${names}.`,
+      annotations: LOOKUP_ANNOTATIONS,
+      inputSchema: {
+        type: "object",
+        properties: {
+          toolset: {
+            type: "string",
+            enum: sets.map((s) => s.slug),
+            description: "\uC774 \uBB36\uC74C\uC758 \uB3C4\uAD6C \uBAA9\uB85D\uC744 \uBCF8\uB2E4. \uC0DD\uB7B5\uD558\uBA74 \uBB36\uC74C \uBAA9\uB85D\uB9CC"
+          },
+          query: {
+            type: "string",
+            description: "\uCC3E\uB294 \uB9D0(\uC608: '\uBC29\uBB38\uC790', '\uACBD\uC7C1 \uBE14\uB85C\uADF8'). \uC774\uB984\uACFC \uC124\uBA85\uC5D0\uC11C \uCC3E\uC544 \uBB36\uC74C\uC744 \uAC00\uB85C\uC9C8\uB7EC \uB3CC\uB824\uC900\uB2E4"
+          },
+          withSchemas: {
+            type: "boolean",
+            description: `\uC778\uC790 \uC2A4\uD0A4\uB9C8\uAE4C\uC9C0 \uD568\uAED8 \uBC1B\uB294\uB2E4 \u2014 \uADF8\uB7EC\uBA74 ${DESCRIBE_TOOL} \uC5C6\uC774 \uBC14\uB85C \uC2E4\uD589\uD560 \uC218 \uC788\uB2E4. toolset \uC774\uB098 query \uC640 \uAC19\uC774 \uC904 \uB54C\uB9CC \uC4F4\uB2E4`
+          }
+        },
+        additionalProperties: false
+      }
+    },
+    {
+      name: DESCRIBE_TOOL,
+      description: `\uB3C4\uAD6C\uC758 \uC778\uC790 \uC2A4\uD0A4\uB9C8\uB97C \uB3CC\uB824\uC900\uB2E4. **${CALL_TOOL} \uB85C \uBD80\uB974\uAE30 \uC804\uC5D0 \uADF8 \uB3C4\uAD6C\uC5D0 \uB300\uD574 \uCD5C\uC18C \uD55C \uBC88\uC740 \uC774\uAC83\uC744 \uD638\uCD9C\uD574\uB77C** \u2014 \uC778\uC790 \uC774\uB984\uACFC \uD544\uC218 \uC5EC\uBD80\uB97C \uC9C0\uC5B4\uB0B4\uBA74 \uAC70\uC808\uB418\uACE0, \uC655\uBCF5\uC774 \uD55C \uBC88 \uB354 \uB4E0\uB2E4. \uC774\uBBF8 \uC2A4\uD0A4\uB9C8\uB97C \uBC1B\uC544 \uB454 \uB3C4\uAD6C\uB294 \uB2E4\uC2DC \uBD80\uB97C \uD544\uC694 \uC5C6\uB2E4.`,
+      annotations: LOOKUP_ANNOTATIONS,
+      inputSchema: {
+        type: "object",
+        properties: {
+          tools: {
+            type: "array",
+            items: { type: "string" },
+            maxItems: 10,
+            description: "\uC2A4\uD0A4\uB9C8\uB97C \uBCFC \uB3C4\uAD6C \uC774\uB984 (\uD55C \uBC88\uC5D0 10\uAC1C\uAE4C\uC9C0)"
+          }
+        },
+        required: ["tools"],
+        additionalProperties: false
+      }
+    },
+    {
+      name: CALL_TOOL,
+      description: `${CATALOG_TOOL} \uB85C \uCC3E\uC740 \uB3C4\uAD6C\uB97C \uC2E4\uD589\uD55C\uB2E4. args \uB294 ${DESCRIBE_TOOL} \uAC00 \uC900 \uC2A4\uD0A4\uB9C8\uB97C \uADF8\uB300\uB85C \uB530\uB978\uB2E4 \u2014 \uB9DE\uC9C0 \uC54A\uC73C\uBA74 \uC2E4\uD589\uD558\uC9C0 \uC54A\uACE0 \uBB34\uC5C7\uC774 \uD2C0\uB838\uB294\uC9C0 \uB3CC\uB824\uC900\uB2E4. \uBB38\uC11C\uB97C \uACE0\uCE58\uAC70\uB098 \uC694\uAE08\uC774 \uB4DC\uB294 \uB3C4\uAD6C\uB294 \uC0AC\uC6A9\uC790\uC5D0\uAC8C \uD655\uC778\uC744 \uBC1B\uC740 \uB4A4\uC5D0 \uC2E4\uD589\uB41C\uB2E4.`,
+      // 🔴 Deliberately unannotated: this tool's effect is the delegated tool's
+      // effect, so any fixed hint would be half false. Tier is judged at run time.
+      inputSchema: {
+        type: "object",
+        properties: {
+          tool: { type: "string", description: "\uC2E4\uD589\uD560 \uB3C4\uAD6C \uC774\uB984" },
+          args: {
+            type: "object",
+            description: `\uADF8 \uB3C4\uAD6C\uC758 \uC778\uC790. ${DESCRIBE_TOOL} \uC758 \uC2A4\uD0A4\uB9C8\uB97C \uB530\uB978\uB2E4`
+          }
+        },
+        required: ["tool"],
+        additionalProperties: false
+      }
+    },
+    {
+      name: CONFIRM_STATUS_TOOL,
+      description: `\uC0AC\uC6A9\uC790 \uD655\uC778\uC744 \uAE30\uB2E4\uB9AC\uB294 \uD638\uCD9C\uC758 \uACB0\uACFC\uB97C \uAC00\uC838\uC628\uB2E4. ${CALL_TOOL} \uC774 \`awaiting_confirm\` \uACFC ticket \uC744 \uB3CC\uB824\uC92C\uC744 \uB54C\uB9CC \uC4F4\uB2E4. \uC544\uC9C1 \uB2F5\uC774 \uC5C6\uC73C\uBA74 \`pending\` \uC774\uB2C8 \uBA87 \uCD08 \uB4A4 \uB2E4\uC2DC \uD655\uC778\uD574\uB77C \u2014 **\uC6D0\uB798 \uB3C4\uAD6C\uB97C \uB2E4\uC2DC \uBD80\uB974\uC9C0 \uB9C8\uB77C**, \uD655\uC778 \uCC3D\uC774 \uD558\uB098 \uB354 \uB728\uACE0 \uC694\uAE08\uC774 \uB4DC\uB294 \uC791\uC5C5\uC774\uBA74 \uB450 \uBC88 \uCCAD\uAD6C\uB41C\uB2E4.`,
+      annotations: LOOKUP_ANNOTATIONS,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ticket: {
+            type: "string",
+            description: `${CALL_TOOL} \uC774 \uB3CC\uB824\uC900 ticket \uAC12 \uADF8\uB300\uB85C`
+          }
+        },
+        required: ["ticket"],
+        additionalProperties: false
+      }
+    }
+  ];
+}
+function sessionStateDescriptor() {
+  return {
+    name: SESSION_STATE_TOOL,
+    description: "\uC9C0\uAE08 \uC774 \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uD655\uC778 \uCC3D \uC5C6\uC774 \uC5BC\uB9C8\uB098 \uB354 \uC791\uC5C5\uD560 \uC218 \uC788\uB294\uC9C0 \uC54C\uB824\uC900\uB2E4. \uC5EC\uB7EC \uBC88\uC758 \uD3B8\uC9D1\uC774\uB098 \uBC30\uCE58\uB97C \uC2DC\uC791\uD558\uAE30 \uC804\uC5D0 \uBA3C\uC800 \uBD80\uB978\uB2E4 \u2014 \uB0A8\uC740 \uC2DC\uAC04\uC774 \uC9E7\uC73C\uBA74 \uB3C4\uC911\uC5D0 \uD655\uC778 \uCC3D\uC774 \uB728\uAE30 \uC2DC\uC791\uD558\uACE0, \uC0AC\uC6A9\uC790\uAC00 \uC790\uB9AC\uC5D0 \uC5C6\uC73C\uBA74 \uAC70\uAE30\uC11C \uBA48\uCD98\uB2E4.",
+    inputSchema: {
+      type: "object",
+      properties: {},
+      additionalProperties: false
+    },
+    annotations: LOOKUP_ANNOTATIONS
+  };
+}
+function allowlistNames() {
+  return [.../* @__PURE__ */ new Set([...READ_ONLY_TOOLS, ...Object.keys(TOOL_TIERS)])];
+}
+function staticDiscoveryCatalog() {
+  const entries = allowlistNames().map((name) => ({
+    name,
+    description: "",
+    inputSchema: {}
+  }));
+  return [...discoveryDescriptors(entries), sessionStateDescriptor()].map(
+    (e) => ({
+      name: e.name,
+      description: e.description,
+      inputSchema: e.inputSchema,
+      ...e.annotations ? { annotations: { ...e.annotations } } : {}
+    })
+  );
+}
 var BRIDGE_USER_MESSAGES = Object.freeze({
   /** Tool call arrived while no panel is connected. */
   panelClosed: "\uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC774 \uB2EB\uD600 \uC788\uC5B4\uC694. \uD06C\uB86C\uC744 \uC5F4\uACE0 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC744 \uC5F4\uC5B4 \uB450\uBA74 \uBC14\uB85C \uB3D9\uC791\uD574\uC694.",
@@ -15003,12 +15296,9 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
   /** The session hit the per-session rate limit. */
   rateLimited: "\uC694\uCCAD\uC774 \uB108\uBB34 \uC7A6\uC544\uC694. \uC7A0\uAE50 \uAE30\uB2E4\uB838\uB2E4\uAC00 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
   /**
-   * The local connector accepted nothing back inside its ceiling.
-   *
-   * Distinct from panelClosed on purpose: that one sends the user to Chrome,
-   * which does not help when the browser side is fine and the connector is the
-   * part that stopped. Pointing at the wrong thing costs them a round of
-   * checking before they can even start fixing it.
+   * The local connector accepted nothing back inside its ceiling. Distinct
+   * from panelClosed: that one sends the user to Chrome, which does not help
+   * when the browser side is fine and the connector is what stopped.
    */
   connectorStuck: "\uC5F0\uACB0 \uD504\uB85C\uADF8\uB7A8\uC774 \uC751\uB2F5\uD558\uC9C0 \uC54A\uC544\uC694. \uC7A0\uC2DC \uB4A4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uACE0, \uACC4\uC18D \uADF8\uB7EC\uBA74 \uD06C\uB86C \uD328\uB110\uC5D0\uC11C MCP \uC5F0\uACB0\uC744 \uAED0\uB2E4\uAC00 \uB2E4\uC2DC \uCF1C \uC8FC\uC138\uC694."
 });
@@ -15053,22 +15343,10 @@ var PendingRegistry = class {
   /**
    * The id a request is known by, unique for the life of this registry.
    *
-   * 🔴 The prefix is what makes it unique, and it is load-bearing. A counter
-   * alone starts again at one in every new process, and this process is
-   * replaced routinely — an update steps the old one aside, an idle one exits.
-   * The panel outlives both: it can be part-way through a slow tool when the
-   * server it was talking to goes away, reconnect to the replacement, and then
-   * post its answer for the request it was given. With a bare counter that id
-   * names a live request in the new server — someone else's — and the answer
-   * settles the wrong call. Nothing detects it, because from the inside it is
-   * an ordinary reply arriving for an id that exists.
-   *
-   * Making ids not collide is enough on its own: an answer for an id nobody is
-   * waiting on is already dropped in silence, which is exactly the right
-   * outcome for a reply that arrives after its server is gone.
-   *
-   * The value stays an opaque string that the panel echoes back untouched, so
-   * nothing else has to know this changed.
+   * 🔴 The prefix is load-bearing. This process is replaced routinely while
+   * the panel outlives it, so a panel can reconnect to a replacement and post
+   * an answer there. A bare counter restarts at one, so that id would settle
+   * someone else's live call, indistinguishable from an ordinary reply.
    */
   nextId() {
     this.#seq += 1;
@@ -15079,10 +15357,9 @@ var PendingRegistry = class {
     return this.#entries.size;
   }
   /**
-   * Register a request and get the promise the host will await.
-   *
-   * The promise is created before the caller sends anything, so a reply that
-   * races back before `send` returns still finds its entry.
+   * Register a request and get the promise the host will await. Created before
+   * the caller sends anything, so a reply that races back before the send
+   * returns still finds its entry.
    */
   register(id) {
     return new Promise((resolve) => {
@@ -15093,13 +15370,9 @@ var PendingRegistry = class {
     });
   }
   /**
-   * Settle a request by id.
-   *
-   * A reply for an unknown id is dropped, not thrown: it means we already timed
-   * the request out, or the extension reconnected and replayed. Neither is worth
-   * crashing a server over, and both are expected under a flaky stream.
-   *
-   * @returns whether an entry was actually settled.
+   * Settle a request by id. A reply for an unknown id is dropped rather than
+   * thrown — the request already timed out, or the extension reconnected and
+   * replayed, and both are expected under a flaky stream.
    */
   settle(id, outcome) {
     const entry = this.#entries.get(id);
@@ -15108,11 +15381,7 @@ var PendingRegistry = class {
     entry.settle(outcome);
     return true;
   }
-  /**
-   * Fail everything past its deadline. Call on a tick.
-   *
-   * @returns how many were expired.
-   */
+  /** Fail everything past its deadline. Called on a tick by the daemon. */
   sweep() {
     const now = this.#now();
     let expired = 0;
@@ -15131,10 +15400,8 @@ var PendingRegistry = class {
   }
   /**
    * Fail everything now — the stream dropped, so nothing in flight can land.
-   *
-   * Called on disconnect. Without it, every request outstanding at the moment
-   * the panel closes would hang until its own deadline, and the host would sit
-   * there for 30s per call with no explanation.
+   * Without this, every request outstanding when the panel closes would hang
+   * until its own deadline with no explanation.
    */
   rejectAll(reason, message) {
     const n = this.#entries.size;
@@ -15149,9 +15416,9 @@ var DEFAULT_RATE_LIMIT = BRIDGE_LIMITS;
 var STALE_TOKEN_LIMIT = 5;
 var Bridge = class {
   #deps;
-  // 🔴 필드 초기화가 아니라 생성자에서 만든다. 필드 초기화는 생성자 본문보다 먼저
-  // 돌아 deps 가 아직 없고, 그래서 now / timeoutMs 가 조용히 기본값으로
-  // 떨어졌다 — 선언만 있고 배선되지 않은 죽은 옵션이었다.
+  // 🔴 Built in the constructor, not at field initialisation: initialisers run
+  // before the constructor body, so deps would not exist yet and the injected
+  // clock and timeout would silently fall back to their defaults.
   #pending;
   #session = null;
   #sessionSeq = 0;
@@ -15159,12 +15426,9 @@ var Bridge = class {
   #badTokenStreak = 0;
   #bucketTokens = 0;
   #bucketRefilledAt = 0;
-  // Last catalog the panel reported, kept across disconnects. The hosts we
-  // target (Claude Desktop, Cursor) ignore tools/list_changed and cache the
-  // FIRST tools/list they get; serving [] while the panel is briefly down makes
-  // that cache empty forever. Serving the last-known list keeps the catalog
-  // stable across a panel flap — honest because a call while disconnected still
-  // fails through the isError channel (never executes without a live panel).
+  // Last catalog the panel reported, kept across disconnects: many hosts cache
+  // the first list they get, so serving an empty one during a brief outage
+  // would empty that cache for good. A call while disconnected still fails.
   #cachedTools = [];
   constructor(deps) {
     this.#deps = deps;
@@ -15181,56 +15445,29 @@ var Bridge = class {
     return this.#session !== null;
   }
   /**
-   * The last catalog the panel reported, or `[]` if it has never connected in
-   * this daemon's life. Served from `tools/list` while the panel is
-   * disconnected so a host does not cache an empty list it never re-fetches.
+   * The last catalog the panel reported, empty if it has never connected in
+   * this daemon's life. Served while the panel is disconnected so a host does
+   * not cache an empty list it never re-fetches.
    */
   get lastKnownTools() {
     return this.#cachedTools;
   }
   /**
-   * Does `presented` match the pairing token? Used to authorise the shutdown
-   * request an updating adapter sends to replace a stale daemon — a local DoS
-   * that a random process should not be able to trigger, so it costs the token.
+   * Does the presented value match the pairing token? Authorises the shutdown
+   * an updating adapter sends, which no other local process should be able to
+   * trigger — hence the token.
    */
   verifyToken(presented) {
     return checkToken(presented ?? void 0, this.#deps.token).ok;
   }
-  /**
-   * Run the handshake.
-   *
-   * Order is deliberate: origin, then token, then version. Origin and token are
-   * the security gates and must both pass before we tell an unauthenticated  public-copy-exception: 우리 게이트를 긍정 서술
-   * caller anything — including which protocol versions we speak, which is a
-   * small fingerprint we owe nobody.
-   */
   /**
    * The extension is right about the token, and we can be wrong about it.
    *
-   * 🔴 This server is spawned detached and outlives the app that started it, and
-   * a replacement only takes over when its VERSION is newer. So when the user
-   * issues a fresh pairing token, nothing here changes: the extension presents
-   * the new one, this server keeps checking against the old one, and the refusal
-   * repeats forever. Updating the host config and restarting the app does not
-   * help — the new adapter finds a same-version server on the port and leaves it
-   * alone. There is no way out from the outside either: stepping aside is gated
-   * on the very token that no longer matches.
-   *
-   * So the server has to notice on its own. A run of refusals from the right
-   * extension, with nobody connected, says one thing — the token here is stale.
-   * Exiting costs nothing: the next call starts a fresh one that reads the
-   * current token.
-   *
-   * Both conditions matter. The identity gate ahead of this drops anything not
-   * claiming to be our extension before the token is looked at, and "nobody
-   * connected" keeps stray refusals from ending a server that is working for
-   * someone right now.
-   *
-   * The identity gate trusts the Origin header when one is present — a browser
-   * sets it, a native process can forge it. A local program can therefore drive
-   * this to an exit, and gains nothing: running as the user, it could kill the
-   * process outright. What this filters is stray traffic, not an intruder who is
-   * already past the door.
+   * 🔴 This server is detached and outlives the app that started it, and a
+   * replacement only takes over when its version is newer. Once the user
+   * issues a fresh token, stepping aside is gated on the very token that no
+   * longer matches, so the server has to notice on its own. A run of refusals
+   * with nobody connected says exactly that, and exiting costs nothing.
    */
   #noteStaleToken() {
     if (this.#session) return;
@@ -15242,6 +15479,13 @@ var Bridge = class {
     this.#badTokenStreak = 0;
     this.#deps.onStaleToken?.();
   }
+  /**
+   * Run the handshake.
+   *
+   * 🔴 Order is deliberate: identity, then token, then version. Both gates must
+   * pass before an unauthorised caller learns anything — including which
+   * protocol versions we speak, which is a fingerprint we owe nobody.
+   */
   handshake(raw, origin) {
     const parsed = HelloSchema.safeParse(raw);
     if (!parsed.success) {
@@ -15289,9 +15533,9 @@ var Bridge = class {
       this.#pending.rejectAll("superseded", "The side panel reconnected.");
     }
     this.#session = {
-      // Counter, not a timestamp: two handshakes inside the same millisecond —
-      // exactly what a panel reload produces — would otherwise collide, and the
-      // new session would be indistinguishable from the one it replaced.
+      // 🔴 A counter, not a timestamp: a panel reload produces two handshakes
+      // inside one millisecond, and the new session must never be
+      // indistinguishable from the one it replaced.
       sessionId: `s${(this.#sessionSeq += 1).toString(36)}`,
       protocolVersion: negotiated.version,
       extensionVersion: parsed.data.extensionVersion
@@ -15304,8 +15548,8 @@ var Bridge = class {
       protocolVersion: negotiated.version,
       serverVersion: this.#deps.serverVersion,
       sessionId: this.#session.sessionId,
-      // This build defines no optional behaviours yet. The field exists so
-      // additive evolution has somewhere to go that is NOT a protocol bump.
+      // No optional behaviours in this build. The field exists so additive
+      // evolution has somewhere to go that is not a protocol bump.
       capabilities: []
     };
   }
@@ -15356,14 +15600,9 @@ var Bridge = class {
   /**
    * Ask the panel for its tools, and project them.
    *
-   * Projection is protocol conformance only — name grammar, descriptor shape,
-   * catalog size. There is deliberately NO allowlist here. A copy of the
-   * allowlist used to live on this path, justified as holding "against a
-   * compromised panel"; that justification was false — anything able to
-   * corrupt the panel's catalog already holds the browser session itself and
-   * needs no tool names from us — and the copy's real effect was to silently
-   * hide every tool added after this binary shipped. Membership is enforced
-   * where the session and the execution actually live: the panel executor.
+   * 🔴 Projection is protocol conformance only — name grammar, descriptor
+   * shape, catalog size — with no membership check. Membership is enforced
+   * where the session and the execution live, in the panel's own executor.
    */
   async listTools() {
     const out = await this.#request({
@@ -15391,10 +15630,9 @@ var Bridge = class {
     return out.result;
   }
   /**
-   * Refill-then-take on the session's token bucket.
-   *
-   * Time-based refill computed lazily on each take — no timer to leak, and
-   * injectable `now` keeps it testable without waiting real seconds.
+   * Refill-then-take on the session's token bucket. The refill is computed
+   * lazily on each take, so there is no timer to leak and an injected clock
+   * keeps it testable without waiting real seconds.
    */
   #takeRateToken() {
     const limit = this.#deps.rateLimit ?? DEFAULT_RATE_LIMIT;
@@ -15496,9 +15734,9 @@ function frameMcpResponse(payload, accept) {
     body: json32
   };
 }
-function coldCatalogError(id, accept) {
+function coldCatalog(id, accept) {
   return frameMcpResponse(
-    rpcError(id, CODE_INTERNAL, agentActionableMessage("not_connected")),
+    rpcResult(id, { tools: staticDiscoveryCatalog() }),
     accept
   );
 }
@@ -15514,8 +15752,7 @@ async function handleMcpRequest(bridge, body, accept) {
   const method = req.method;
   if (method === "tools/list") {
     if (!bridge.connected) {
-      if (bridge.lastKnownTools.length === 0)
-        return coldCatalogError(id, accept);
+      if (bridge.lastKnownTools.length === 0) return coldCatalog(id, accept);
       return frameMcpResponse(
         rpcResult(id, { tools: bridge.lastKnownTools }),
         accept
@@ -15526,8 +15763,7 @@ async function handleMcpRequest(bridge, body, accept) {
       return frameMcpResponse(rpcResult(id, { tools }), accept);
     } catch (err) {
       if (err instanceof BridgeError) {
-        if (bridge.lastKnownTools.length === 0)
-          return coldCatalogError(id, accept);
+        if (bridge.lastKnownTools.length === 0) return coldCatalog(id, accept);
         return frameMcpResponse(
           rpcResult(id, { tools: bridge.lastKnownTools }),
           accept
@@ -15741,8 +15977,8 @@ function createHttpBridge(opts) {
       lifecycle?.bump?.();
       void readJson(req, MAX_MCP_BODY_BYTES2).then((body) => handleMcpRequest(opts.bridge, body, req.headers.accept)).catch(
         () => (
-          // Unparseable or oversized body still owes a JSON-RPC answer, not a
-          // dropped socket; route a null body through as method-not-found.
+          // An unparseable or oversized body still owes a JSON-RPC answer, not
+          // a dropped socket; a null body routes through as method-not-found.
           handleMcpRequest(opts.bridge, null, req.headers.accept)
         )
       ).then((out) => {
@@ -15786,7 +16022,8 @@ function createHttpBridge(opts) {
         "content-type": "text/event-stream",
         "cache-control": "no-cache",
         connection: "keep-alive",
-        // Nagle would hold small frames back; a bridge frame is small by nature.
+        // Buffering would hold small frames back, and a bridge frame is small
+        // by nature.
         "x-accel-buffering": "no"
       });
       sse = res;
@@ -15831,7 +16068,8 @@ function createHttpBridge(opts) {
         res.writeHead(200, {
           "content-type": out.contentType,
           "content-length": String(out.byteLength),
-          // 파일명은 확장이 확인 창에 보여 준다 — 사용자가 어느 파일인지 알아야 한다.
+          // The extension shows this in its confirmation, so the user knows
+          // which file is about to be used.
           "x-file-name": encodeURIComponent(out.fileName),
           "cache-control": "no-store"
         });
@@ -16088,10 +16326,8 @@ var Lifecycle = class {
     return this.#refs;
   }
   /**
-   * Begin idle accounting.
-   *
-   * Called once at startup so a daemon nobody ever uses still reclaims itself:
-   * refs are zero, so the window arms immediately.
+   * Begin idle accounting. Called once at startup so a daemon nobody ever uses
+   * still reclaims itself.
    */
   start() {
     if (this.#refs === 0) this.#arm();
@@ -16107,12 +16343,9 @@ var Lifecycle = class {
     if (this.#refs === 0) this.#arm();
   }
   /**
-   * Traffic crossed the daemon — reset the debounce.
-   *
-   * While refs are held there is no timer to reset, so this is a no-op then.
-   * With refs at zero (a stateless `/mcp` POST between adapter connections) it
-   * re-arms the full window, so a steady drip of requests keeps the daemon warm
-   * without ever holding a long-lived ref.
+   * Traffic crossed the daemon — reset the debounce. A no-op while refs are
+   * held; at zero refs it re-arms the window, so a steady drip of stateless
+   * requests keeps the daemon warm without holding a long-lived ref.
    */
   bump() {
     if (this.#refs === 0) this.#arm();
@@ -16156,10 +16389,9 @@ function runDaemon(env, deps = {}) {
   });
   const bridge = new Bridge({
     send: (frame) => http.send(frame),
-    // 🔴 우리 토큰이 낡았다고 판단되면 물러난다. 이 프로세스는 detached 라 앱을
-    // 껐다 켜도 살아 있고, 교체는 **버전이 새것일 때만** 일어난다 — 그래서
-    // 사용자가 토큰을 새로 발급하면 밖에서는 아무것도 할 수 없다. 나가는 판단을
-    // 우리가 하지 않으면 그 설치는 영구히 막힌다.
+    // 🔴 Step aside once our own token looks stale. This process is detached
+    // and survives an app restart, and a replacement only takes over on a newer
+    // version — so nothing outside can unblock the install if we do not.
     onStaleToken: () => {
       log("pairing token is stale; exiting so the next call can start fresh");
       void http.close().finally(() => exit(0));
@@ -30754,17 +30986,14 @@ var BridgeToolDescriptorSchema2 = external_exports2.object({
   /** JSON Schema for the arguments, passed to the host verbatim. */
   inputSchema: external_exports2.record(external_exports2.string(), external_exports2.unknown()),
   /**
-   * MCP tool annotations, derived from the tool's tier. OPTIONAL by ABI rule.
+   * MCP tool annotations, derived from the tool's tier. Optional by ABI rule.
    *
-   * Typed loosely on purpose. This end only forwards it — the shape is owned
-   * by `annotations.ts` on the extension side, and pinning it here would make
-   * every future hint a wire-contract change on a schema that binaries we
-   * cannot reach must keep parsing.
+   * Typed loosely because this end only forwards it; pinning the shape here
+   * would make every future hint a wire-contract change.
    *
-   * 🔴 A server built before this field existed strips it (z.object() without
-   * .strict()), so annotations simply do not arrive there. That degradation is
-   * silent and acceptable; a version marker that must survive old servers goes
-   * INSIDE `inputSchema`, which is forwarded verbatim.
+   * 🔴 A server predating this field strips it, so annotations never arrive
+   * there. Anything that must survive such a server goes inside the input
+   * schema, which is forwarded verbatim.
    */
   annotations: external_exports2.record(external_exports2.string(), external_exports2.unknown()).optional()
 });
@@ -30777,19 +31006,15 @@ var HelloSchema2 = external_exports2.object({
   /** Pairing token. Not auto-attached by the browser (unlike a cookie). */
   token: external_exports2.string(),
   /**
-   * The extension's own id (`chrome.runtime.id`). ADDITIVE: older servers
-   * ignore it and identify the caller from the `Origin` header — but an
-   * extension service worker's privileged loopback fetch sends no `Origin`, so
-   * newer servers verify identity from this field when the header is absent.
-   * Optional so every binary that predates it still parses (see the ABI note).
+   * The extension's own id. Additive: an extension service worker's privileged
+   * loopback fetch sends no Origin header, so servers verify identity from this
+   * field when the header is absent.
    */
   extensionId: external_exports2.string().optional(),
   /**
-   * Feature flags this panel build understands, e.g. a future
-   * "catalog-push". Additive evolution happens HERE, not via a protocol
-   * bump: a capability an old peer never sent is simply absent, and code
-   * must treat absence as "do not use". Optional with a default so every
-   * binary that predates the field still parses.
+   * Feature flags this panel build understands. Additive evolution happens
+   * HERE, not via a protocol bump: a capability an old peer never sent is
+   * simply absent, and code must treat absence as "do not use".
    */
   capabilities: external_exports2.array(external_exports2.string()).default([])
 });
@@ -30871,7 +31096,7 @@ var REQUEST_DEADLINE_MS2 = 9e4;
 var EXEC_RESERVE_MS2 = 3e4;
 var CONFIRM_TIMEOUT_MS2 = REQUEST_DEADLINE_MS2 - EXEC_RESERVE_MS2;
 var READ_ONLY_TOOLS2 = [
-  // --- Search-ad estimates. Uses your own advertiser API credentials. ---
+  // --- Search-ad estimates. Uses the user's own advertiser API credentials. ---
   "ad_average_position_bid",
   "ad_competition_density",
   "ad_estimate_bid",
@@ -30926,7 +31151,7 @@ var READ_ONLY_TOOLS2 = [
   "local_job_categories",
   "local_region_trend",
   "local_regions",
-  // --- Your OWN channel analytics ---
+  // --- The user's own channel analytics ---
   "daily_trend",
   "my_audience",
   "my_blog_summary",
@@ -30955,7 +31180,7 @@ var READ_ONLY_TOOLS2 = [
   "my_soaring",
   "my_top_content",
   "my_traffic_series",
-  // --- Public place data, and reads of a place you own ---
+  // --- Public place data, and reads of a place the user owns ---
   "place_ai_briefing",
   "place_announcements",
   "place_autocomplete",
@@ -30987,8 +31212,8 @@ var READ_ONLY_TOOLS2 = [
   "search_influencer",
   "search_kin",
   "search_news",
-  // `search_total` is referenced by search_blog's description — leaving it out
-  // made that reference a broken link for MCP hosts (2026-07-17 audit).
+  // Referenced by search_blog's description, so omitting it would leave a
+  // dangling reference for hosts.
   "search_total",
   "search_video",
   "search_web",
@@ -31012,47 +31237,37 @@ var READ_ONLY_TOOLS2 = [
   // Its siblings that suggest titles, outlines, or specs all call a language
   // model, and are excluded for that reason.
   "seo_scorecard",
-  // --- 모델이 필요하지만 MCP 에서는 우리가 모델을 부르지 않는 도구들 ---
-  // 🔴 이 계열은 "이중과금" 을 이유로 통째로 제외돼 있었다. 호스트는 이 도구를 부르기로
-  // 결정하려고 **이미 자기 모델을 돌렸는데**, 우리가 사용자의 모델을 또 부르면 한 턴에
-  // 두 번 청구된다. 이제 `llmJson` 이 호출자를 보고 재료(프롬프트)만 돌려주므로 우리 쪽
-  // 모델 호출이 0 이다 — 제외의 근거가 사라졌다.
-  //
-  // 읽고 제안만 하므로 여기(읽기 전용)가 맞다. 되돌릴 것이 없다.
+  // --- Planning tools that need a model, but never call one from here ---
+  // 🔴 The calling host already ran its own model, so calling the user's too
+  // would bill one turn twice. These return prompt material and make no model
+  // call, which is what lets them read and suggest here, undoing nothing.
   "outline_suggest",
   "seo_aeo_geo_spec",
-  // 🔴 `write_draft` 는 2단(분석 → 초안)이라 한 번에 재료를 다 줄 수 없다. 먼저 오는
-  // 단계의 프롬프트를 주고, 호스트가 결과를 `structure` 로 되넘기면 다음 단계를 준다.
-  // 문체 프로필은 **객체가 아니라 프롬프트 안에 문장으로** 들어가고, 그 빌더는 문체 세
-  // 항목만 쓰므로 blogId·sourcePostIds·sourceTitles 는 나가지 않는다.
+  // Two-stage (analyse, then draft), so it returns the first stage's prompt and
+  // the second only once the host hands the result back. The
+  // style profile travels as prose inside that prompt, not as an object.
   "write_draft",
   "benchmark_gap",
   "content_calendar",
   "internal_links",
   // --- Grouped with the writing tools, but a pure collector. ---
-  // `run_research` is categorised alongside tools that call a model, yet calls
-  // none itself — it only gathers public data. Its label is misleading; it was
-  // admitted after checking what it actually does. Classify by behaviour, not
-  // by category.
+  // Calls no model itself — it only gathers public data. Admitted after
+  // checking behaviour rather than trusting the category label.
   "run_research"
 ];
 var ALLOWED2 = Object.freeze(new Set(READ_ONLY_TOOLS2));
 var EXCLUDED_TOOLS2 = Object.freeze({
-  // 🔴 editor_* 는 더 이상 여기 없다 — 등급 표(TOOL_TIERS)로 옮겼다. 제외였던
-  // 이유는 "확인을 받을 방법이 없고 되돌릴 수단도 없다" 였는데, 둘 다 생겼다:
-  // 세션 동의 + 호출별 확인이 서고, 주입 전후로 임시저장을 부르며 그것이
-  // 거절될 때를 위해 문서 사본을 따로 뜬다.
   generate_images: "writes to your post, needs confirmation, and spends your AI credits",
-  // 🔴 editor_read / editor_read_structure 도 더 이상 여기 없다. 보류 사유는 "탭이
-  // 열려 있어야 하는데 외부 에이전트에겐 열 탭이 없다" 였지만, 그것은 제외할 이유가
-  // 아니라 **읽고 나서 알게 될 사실**이다 — 탭이 없으면 도구가 그렇게 답하면 된다.
-  // 지금은 TOOL_TIERS 에서 read 등급으로 노출된다.
-  // Spend your own AI credits on a turn the calling host already paid for.
   // Side effect outside the request/response contract.
-  export_report: "triggers a file download"
+  export_report: "triggers a file download",
+  // 🔴 A host that can generate its own image has a free way onto the canvas —
+  // gallery_image_add. Spending credits for what the caller already has is the
+  // charge nobody meant to make.
+  photo_ai_image_add: "spends your AI credits for an image your own app can make and hand over",
+  video_image_realign: "spends your AI credits per photo to reach what the free scene tools already reach"
 });
 var TOOL_TIERS2 = Object.freeze({
-  // ── 사진 편집기 (우리 표면) ──────────────────────────────────────
+  // ── Photo editor (our own surface) ──────────────────────────────
   photo_canvas_get: "read",
   photo_gallery_list: "read",
   photo_text_add: "write",
@@ -31069,13 +31284,21 @@ var TOOL_TIERS2 = Object.freeze({
   photo_node_remove: "destructive",
   photo_page_remove: "destructive",
   photo_template_apply: "destructive",
-  photo_ai_image_add: "paid",
-  // ── 영상 편집기 (우리 표면) ──────────────────────────────────────
+  // ── Gallery: the free way in ────────────────────────────────────
+  //
+  // 🔴 Destructive because it reads a path off the user's disk, the same
+  // capability editor_insert_image carries. A session toggle would open the
+  // whole filesystem once and stay open.
+  gallery_image_add: "destructive",
+  // ── Video editor (our own surface) ──────────────────────────────
   video_timeline_get: "read",
   video_sources_list: "read",
   video_scene_add: "write",
   video_subtitle_set: "write",
   video_scene_image_set: "write",
+  // Brings a gallery picture into this video — an add, like video_image_add.
+  // The disk read already happened at gallery_image_add, under its own confirm.
+  video_image_add_from_gallery: "write",
   video_scene_update: "write",
   video_background_set: "write",
   video_canvas_resize: "write",
@@ -31087,52 +31310,39 @@ var TOOL_TIERS2 = Object.freeze({
   video_node_remove: "destructive",
   video_scene_remove: "destructive",
   video_narration_generate: "paid",
-  video_image_realign: "paid",
-  // ── 스마트에디터 읽기 ────────────────────────────────────────────
+  // ── Post editor: reads ──────────────────────────────────────────
   editor_read: "read",
   editor_read_structure: "read",
-  // ── 스마트에디터 쓰기 ────────────────────────────────────────────
+  // ── Post editor: writes ─────────────────────────────────────────
   //
-  // 🔴 안전망이 선 뒤에 열었다. 주입 전후로 벤더 임시저장을 부르고, 그것이
-  // 거절되는 세 경우(빈 문서 · 길이 초과 · 충돌)를 위해 문서 사본을 따로 뜬다.
-  // 그전에는 되돌릴 수단이 에디터 undo 한 스텝뿐이었다 — 그 상태로 외부
-  // 프로세스에 본문 쓰기를 열 수는 없었다.
+  // 🔴 Every injection is bracketed by a vendor autosave, plus a separate copy
+  // of the document for the cases the vendor refuses one. Without that
+  // recovery point, editor undo would be the only way back.
   //
-  // 🔴 `editor_replace` 만 파괴적이다. 나머지는 넣거나 덧붙이는 것이라 임시저장
-  // 지점으로 돌아갈 수 있지만, 본문 전체 교체는 그 지점 자체를 갈아치운다.
+  // 🔴 Only whole-body replacement is destructive: the others append, so the
+  // autosave point still holds, while replacing the body overwrites it.
   editor_insert_draft: "write",
-  // 🔴 창을 여는 것은 문서를 고치는 것이 아니다. 그래도 `write` 로 둔다 — 사용자의
-  // 브라우저에 탭을 만드는 일이고, 문서 편집을 켜지 않은 세션에서 창만 열어 두는
-  // 것은 어차피 할 수 있는 일이 없다. 등급이 하나면 사용자가 켜고 끄는 것도 하나다.
+  // Opening a window edits no document, but it does create a tab in the user's
+  // browser, and a session that has not enabled editing can do nothing with the
+  // window anyway — one tier keeps it one thing for the user to allow.
   editor_open_window: "write",
-  // 🔴 창을 닫는 것은 되돌릴 수 없다 — 사용자가 쓰던 원고가 그 안에 있을 수 있으므로
-  // 호출마다 묻는다. 세션 동의로 넘어가게 두면, 한 번 켜 두고 잊은 토글이 원고를
-  // 없앨 수 있다.
+  // 🔴 Closing a window cannot be undone and the user's draft may be inside, so
+  // it is asked per call rather than covered by a forgotten session toggle.
   editor_reduce_windows: "destructive",
-  // 🔴 삽입은 덧붙이기라 덮어쓰기 확인을 거치지 않는다 — 그래서 등급이 유일한
-  // 방벽이고, 호출마다 묻는다. 넣을 그림의 출처를 사용자가 매번 보고 정한다.
+  // 🔴 Insertion appends, so it never passes through the overwrite prompt; the
+  // tier is the only barrier, and the user approves each image's source.
   editor_insert_image: "destructive",
   editor_set_title: "write",
-  // 🔴 `title_optimize` 는 편집기 도구가 아닌데 등급이 있다. 사용자가 제목 후보를 고르는
-  // 순간 그것이 곧 확인이 되어 **제목을 덮어쓰기** 때문이다 — 그래서 같은 일을 하는
-  // `editor_set_title` 과 같은 등급이다. 이름에 표면 접두가 없는 것은 이 도구가
-  // 사진/영상 편집기 표면에 속하지 않아서다(접두 규약은 그 둘의 이름 충돌 방지용).
+  // 🔴 Not an editor tool, but tiered like one: picking a title candidate IS
+  // the confirmation and overwrites the title, so it matches editor_set_title.
   title_optimize: "write",
   editor_undo: "write",
   editor_replace: "destructive"
 });
 var PAID_TOOL_COSTS2 = Object.freeze({
-  photo_ai_image_add: Object.freeze({
-    basis: "AI \uC774\uBBF8\uC9C0 1\uC7A5 \uC0DD\uC131",
-    editorAsksAgain: false
-  }),
   video_narration_generate: Object.freeze({
     basis: "\uBAA9\uC18C\uB9AC\uAC00 \uC5C6\uB294 \uC7A5\uBA74 \uC218\uB9CC\uD07C \uC74C\uC131 \uC0DD\uC131",
     editorAsksAgain: true
-  }),
-  video_image_realign: Object.freeze({
-    basis: "\uC0AC\uC9C4 \uC218\uB9CC\uD07C \uC774\uBBF8\uC9C0 \uBD84\uC11D",
-    editorAsksAgain: true
   })
 });
 var HINTS_BY_TIER2 = Object.freeze({
@@ -31162,9 +31372,9 @@ var LOOKUP_ANNOTATIONS2 = Object.freeze({
   idempotentHint: true
 });
 var BRIDGE_LIMITS2 = Object.freeze({
-  /** 한 번에 몰아 쓸 수 있는 호출 수. */
+  /** Calls available in one burst. */
   capacity: 10,
-  /** 초당 다시 차는 칸 수. */
+  /** Slots refilled per second. */
   refillPerSecond: 1
 });
 var CONNECTOR_RESULT_CAP_BYTES2 = 4 * 1024 * 1024;
@@ -31173,7 +31383,7 @@ var RESULT_BUDGET_BYTES2 = Math.floor(
   CONNECTOR_RESULT_CAP_BYTES2 / RESULT_HEADROOM2
 );
 var REASON_POLICY2 = Object.freeze({
-  // --- 기다리면 풀린다 ---
+  // --- Resolves on its own with time ---
   rate_limited: Object.freeze({
     retryable: true,
     retryAfterMs: Math.ceil(1e3 / BRIDGE_LIMITS2.refillPerSecond)
@@ -31181,20 +31391,20 @@ var REASON_POLICY2 = Object.freeze({
   timeout: Object.freeze({ retryable: true }),
   connection_lost: Object.freeze({ retryable: true }),
   tool_error: Object.freeze({ retryable: true }),
-  // --- 요청을 고쳐야 한다 ---
+  // --- The request itself must change ---
   unknown_tool: Object.freeze({ retryable: false }),
   invalid_args: Object.freeze({ retryable: false }),
   tool_closed: Object.freeze({ retryable: false }),
   missing_in_build: Object.freeze({ retryable: false }),
-  // --- 🔴 사람이 움직여야 한다. 다시 거는 것은 조르는 것이다 ---
+  // --- 🔴 A human must act; re-calling only nags them ---
   needs_consent: Object.freeze({ retryable: false }),
   not_confirmed: Object.freeze({ retryable: false }),
   confirm_timeout: Object.freeze({ retryable: false }),
   confirm_too_late: Object.freeze({ retryable: false }),
-  // --- 사용자가 브라우저에서 무언가 해야 한다 ---
+  // --- The user must do something in the browser ---
   multiple_editors: Object.freeze({ retryable: false }),
   editor_busy: Object.freeze({ retryable: false }),
-  // --- 연결 자체를 고쳐야 한다 ---
+  // --- The connection itself must be repaired ---
   not_connected: Object.freeze({ retryable: false }),
   unauthorized: Object.freeze({ retryable: false })
 });
@@ -31206,12 +31416,9 @@ var BRIDGE_USER_MESSAGES2 = Object.freeze({
   /** The session hit the per-session rate limit. */
   rateLimited: "\uC694\uCCAD\uC774 \uB108\uBB34 \uC7A6\uC544\uC694. \uC7A0\uAE50 \uAE30\uB2E4\uB838\uB2E4\uAC00 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
   /**
-   * The local connector accepted nothing back inside its ceiling.
-   *
-   * Distinct from panelClosed on purpose: that one sends the user to Chrome,
-   * which does not help when the browser side is fine and the connector is the
-   * part that stopped. Pointing at the wrong thing costs them a round of
-   * checking before they can even start fixing it.
+   * The local connector accepted nothing back inside its ceiling. Distinct
+   * from panelClosed: that one sends the user to Chrome, which does not help
+   * when the browser side is fine and the connector is what stopped.
    */
   connectorStuck: "\uC5F0\uACB0 \uD504\uB85C\uADF8\uB7A8\uC774 \uC751\uB2F5\uD558\uC9C0 \uC54A\uC544\uC694. \uC7A0\uC2DC \uB4A4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uACE0, \uACC4\uC18D \uADF8\uB7EC\uBA74 \uD06C\uB86C \uD328\uB110\uC5D0\uC11C MCP \uC5F0\uACB0\uC744 \uAED0\uB2E4\uAC00 \uB2E4\uC2DC \uCF1C \uC8FC\uC138\uC694."
 });
@@ -31383,9 +31590,9 @@ function createAdapterServer(deps = {}) {
   const mcpUrl = `http://${host}:${port}/mcp`;
   const server = new Server(
     { name: deps.name ?? NAME2, version: deps.version ?? "0.0.0" },
-    // `listChanged` tells the host we will send notifications/tools/list_changed
-    // — the daemon signals us when the panel connects or drops, and we forward
-    // it so the host re-fetches the catalog without a restart.
+    // Declares that we send list-changed notifications: the daemon signals us
+    // when the panel connects or drops, and forwarding it lets the host
+    // re-fetch the catalog without a restart.
     { capabilities: { tools: { listChanged: true } } }
   );
   server.setRequestHandler(ListToolsRequestSchema, async () => {