@modootoday/datalab-extension-mcp 1.4.3 → 1.5.1

package/README.en.md

@@ -55,10 +55,10 @@ Avoid sharing a screenshot or the copied setup. If it may have leaked, press **[
 One command finds **every** AI app on your computer and connects them automatically. Nothing to do per app.
 
 1. **Open a terminal** — on Windows type `cmd` in the search box → "Command Prompt"; on Mac press `⌘+Space` and type `Terminal`; on Linux open your terminal app (often `Ctrl+Alt+T`).
-2. **Paste this command and press Enter.** (`@1.4.3` is the pinned version, so the connector never changes behind your back.)
+2. **Paste this command and press Enter.** (`@1.5.1` is the pinned version, so the connector never changes behind your back.)
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.4.3 install
+   npx -y @modootoday/datalab-extension-mcp@1.5.1 install
    ```
 
    Lines of English scrolling by is normal. This only downloads and runs the connector — it touches nothing else.
@@ -206,7 +206,7 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 - **When the connection disappears** — run the very command you used at the start once more; it safely re-registers. (Some AI apps clean up their settings file and drop the connection.)
 
   ```
-  npx -y @modootoday/datalab-extension-mcp@1.4.3 install
+  npx -y @modootoday/datalab-extension-mcp@1.5.1 install
   ```
 
 - **`'npx' is not recognized...`** — Node.js isn't installed. The "No Node.js?" one-liner in Step 2 is the simplest fix.
@@ -236,7 +236,7 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 1. Run this in a terminal (it removes the entries registered in your AI apps).
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.4.3 uninstall
+   npx -y @modootoday/datalab-extension-mcp@1.5.1 uninstall
    ```
 
 2. Turn **MCP 연결** off in the extension settings. The panel is the bridge, so with it off a leftover config line can look nothing up.

package/README.md

@@ -49,10 +49,10 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
 명령 한 줄이면 컴퓨터에 있는 AI 앱을 **모두 자동으로** 찾아 연결해 줘요. 앱마다 따로 할 일은 없어요.
 
 1. **터미널을 열어요** — Windows는 검색창에 `cmd` → "명령 프롬프트", Mac은 `⌘+스페이스`로 `터미널`, Linux는 터미널 앱(보통 `Ctrl+Alt+T`)이에요.
-2. **아래 명령을 붙여넣고 Enter를 눌러요.** (`@1.4.3`은 커넥터가 나도 모르게 바뀌지 않도록 고정한 버전이에요.)
+2. **아래 명령을 붙여넣고 Enter를 눌러요.** (`@1.5.1`은 커넥터가 나도 모르게 바뀌지 않도록 고정한 버전이에요.)
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.4.3 install
+   npx -y @modootoday/datalab-extension-mcp@1.5.1 install
    ```
 
    영어 글자가 여러 줄 올라오는 건 정상이에요. 이 명령은 커넥터를 내려받아 실행할 뿐, 다른 건 건드리지 않아요.
@@ -180,7 +180,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 - **연결이 사라졌을 때** — 처음 실행했던 그 명령을 한 번 더 실행하면 안전하게 다시 등록돼요. (일부 AI 앱이 설정 파일을 정리하며 연결을 지우기도 해요.)
 
   ```
-  npx -y @modootoday/datalab-extension-mcp@1.4.3 install
+  npx -y @modootoday/datalab-extension-mcp@1.5.1 install
   ```
 
 - **`'npx'을(는) 내부 또는 외부 명령...`** — Node.js가 없는 거예요. 위 2단계의 "Node.js가 없다면" 한 줄 설치가 가장 간단해요.
@@ -210,7 +210,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 1. 터미널에서 아래 명령을 실행해요(AI 앱에 등록된 설정을 지워 줘요).
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.4.3 uninstall
+   npx -y @modootoday/datalab-extension-mcp@1.5.1 uninstall
    ```
 
 2. 확장 설정에서 **MCP 연결을 꺼요.** 패널이 브릿지라, 꺼 두면 어딘가 설정 줄이 남아 있어도 AI 앱이 아무것도 조회할 수 없어요.

package/dist/{chunk-CBHNMIS3.js → chunk-XSYBSML4.js}

@@ -2,7 +2,7 @@ import {
   __export
 } from "./chunk-MLKGABMK.js";
 
-// ../mcp-server/dist/chunk-NRS76HC5.js
+// ../mcp-server/dist/chunk-TPEUGB2T.js
 import {
   createServer
 } from "http";
@@ -14612,6 +14612,24 @@ var READ_ONLY_TOOLS = [
   "ad_keyword_stats",
   "ad_min_exposure_bid",
   "ad_performance_balance",
+  // 🔴 These three read the advertiser's own account rather than pricing a
+  // hypothetical bid — balance, spend, and per-campaign/keyword delivery.
+  // Read-only by
+  // construction: the client exposes no charge, refund or campaign-write path,
+  // and asks for no gender/age breakdown even though /api/stats offers one.
+  "ad_bizmoney",
+  "ad_campaign_stats",
+  "ad_keyword_spend",
+  // --- The seller's own SmartStore money, via the official Commerce API and
+  // the user's own application pair. Read-only by construction: the service
+  // exposes settlement and sales reads and nothing else, and 🔴 it drops the
+  // payout account (accountNo / depositorName / bankType) that the settlement
+  // response carries, so no host ever receives it. ---
+  "commerce_settlement",
+  "commerce_sales",
+  // 🔴 Counts only — the order feed's ids stop at the service boundary.
+  "commerce_orders",
+  "commerce_product_issues",
   // --- Aggregate comment analytics ---
   "comment_category_spread",
   "comment_country",
@@ -14757,6 +14775,13 @@ var READ_ONLY_TOOLS = [
   "benchmark_gap",
   "content_calendar",
   "internal_links",
+  // Hands back the procedure for one step of a full write, shaped by what the
+  // caller measured in the step before. Reads nothing and calls no model.
+  "write_pipeline_step",
+  // 🔴 Writes the title in the panel, where a pick IS the confirmation — but the
+  // pick lives in the consent step, and MCP never reaches it: only a
+  // needs-confirm result continues there, and this one returns prompt material.
+  "title_optimize",
   // --- Grouped with the writing tools, but a pure collector. ---
   // Calls no model itself — it only gathers public data. Admitted after
   // checking behaviour rather than trusting the category label.
@@ -14829,6 +14854,11 @@ var TOOL_TIERS = Object.freeze({
   // 🔴 Only whole-body replacement is destructive: the others append, so the
   // autosave point still holds, while replacing the body overwrites it.
   editor_insert_draft: "write",
+  // 🔴 `write`, and it stays that way because it REFUSES an occupied body rather
+  // than overwriting it. The day it gains a replace fallback, a destructive act
+  // hides under a session toggle the user granted once — so that fallback is a
+  // review-block, not a convenience.
+  editor_place_draft: "write",
   // Opening a window edits no document, but it does create a tab in the user's
   // browser, and a session that has not enabled editing can do nothing with the
   // window anyway — one tier keeps it one thing for the user to allow.
@@ -14840,9 +14870,6 @@ var TOOL_TIERS = Object.freeze({
   // tier is the only barrier, and the user approves each image's source.
   editor_insert_image: "destructive",
   editor_set_title: "write",
-  // 🔴 Not an editor tool, but tiered like one: picking a title candidate IS
-  // the confirmation and overwrites the title, so it matches editor_set_title.
-  title_optimize: "write",
   editor_undo: "write",
   editor_replace: "destructive"
 });
@@ -15019,7 +15046,10 @@ var RESEARCH = [
   "seo_aeo_geo_spec",
   "content_calendar",
   // The last step of that job: turn the design into an actual draft.
-  "write_draft"
+  "write_draft",
+  // Names which of the above comes next given what the caller just measured —
+  // the part of the job that cannot be written down ahead of time.
+  "write_pipeline_step"
 ];
 var EDITOR_CONTROL = [
   // 🔴 The tool that opens a tab belongs in the group that requires one: a
@@ -15032,9 +15062,12 @@ var EDITOR_CONTROL = [
   "editor_undo",
   "editor_replace",
   "editor_insert_draft",
+  // Lands a draft from any window state without ever overwriting — refuses and
+  // names the tool to use instead when the body is occupied.
+  "editor_place_draft",
   "editor_set_title",
-  // Both act on the open draft: title_optimize overwrites the title the moment
-  // a candidate is picked, and internal_links reads the current draft.
+  // Both act on the open draft: title_optimize proposes titles for it, and
+  // internal_links reads it.
   "title_optimize",
   "internal_links",
   "editor_insert_image",
@@ -15046,6 +15079,7 @@ var BY_PREFIX = [
   { slug: "place", prefixes: ["place_"] },
   { slug: "shopping", prefixes: ["shopping_"] },
   { slug: "ad-bidding", prefixes: ["ad_"] },
+  { slug: "store-settlement", prefixes: ["commerce_"] },
   { slug: "comment-stats", prefixes: ["comment_"] },
   { slug: "photo-editor", prefixes: ["photo_"] },
   { slug: "video-editor", prefixes: ["video_"] },
@@ -15076,7 +15110,12 @@ var META = [
   {
     slug: "keyword-research",
     label: "\uD0A4\uC6CC\uB4DC\xB7\uAE00\uAC10 \uB9AC\uC11C\uCE58",
-    summary: "\uBB34\uC5C7\uC744 \uC4F8\uC9C0 \u2014 \uD0A4\uC6CC\uB4DC \uC218\uC694\xB7\uC5F0\uAD00\uC5B4\xB7\uC790\uB3D9\uC644\uC131\xB7\uBC1C\uD589\uB7C9\xB7\uC9C0\uC2DDiN \uC9C8\uBB38\xB7\uC9C0\uC5ED \uD2B8\uB80C\uB4DC"
+    summary: "\uBB34\uC5C7\uC744 \uC4F8\uC9C0 \u2014 \uD0A4\uC6CC\uB4DC \uC218\uC694\xB7\uC5F0\uAD00\uC5B4\xB7\uC790\uB3D9\uC644\uC131\xB7\uBC1C\uD589\uB7C9\xB7\uC9C0\uC2DDiN \uC9C8\uBB38\xB7\uC9C0\uC5ED \uD2B8\uB80C\uB4DC",
+    steps: [
+      "search_keywords \uB85C \uC218\uC694\uB97C \uBCF8\uB2E4",
+      "content_volume \uC73C\uB85C \uC774\uBBF8 \uC5BC\uB9C8\uB098 \uC4F0\uC600\uB294\uC9C0 \uBCF8\uB2E4 \u2014 \uC218\uC694\uB9CC \uBCF4\uACE0 \uACE0\uB974\uBA74 \uD3EC\uD654\uB41C \uD0A4\uC6CC\uB4DC\uB97C \uACE0\uB978\uB2E4",
+      "keyword_opportunity \uB85C \uB458\uC744 \uACAC\uC918 \uBE48\uD2C8\uC744 \uCC3E\uB294\uB2E4"
+    ]
   },
   {
     slug: "serp-watch",
@@ -15105,6 +15144,13 @@ var META = [
     // data only when the user's search-ad account credentials are present.
     summary: "\uC785\uCC30\uAC00\uC640 \uC608\uC0C1 \uC131\uACFC \u2014 \uBB34\uB8CC, \uAC80\uC0C9\uAD11\uACE0 \uACC4\uC815 \uC790\uACA9\uC99D\uBA85 \uD544\uC694"
   },
+  {
+    slug: "store-settlement",
+    label: "\uC2A4\uD1A0\uC5B4 \uC815\uC0B0\xB7\uB9E4\uCD9C",
+    // The seller's own money. Nothing here writes, and the payout account the
+    // settlement response carries is dropped before it reaches a host.
+    summary: "\uC815\uC0B0 \uC608\uC815\uC77C\uACFC \uAE08\uC561, \uC77C\uBCC4 \uB9E4\uCD9C \u2014 \uCEE4\uBA38\uC2A4API \uC790\uACA9\uC99D\uBA85 \uD544\uC694"
+  },
   {
     slug: "comment-stats",
     label: "\uB313\uAE00 \uBC18\uC751 \uD1B5\uACC4",
@@ -15116,7 +15162,13 @@ var META = [
     summary: "\uC5F4\uB824 \uC788\uB294 \uB124\uC774\uBC84 \uAE00\uC4F0\uAE30 \uCC3D\uC758 \uC6D0\uACE0\uB97C \uC77D\uACE0 \uACE0\uCE5C\uB2E4",
     needsTab: true,
     openerTool: "editor_open_window",
-    reducerTool: "editor_reduce_windows"
+    reducerTool: "editor_reduce_windows",
+    steps: [
+      "editor_read \uB85C \uC9C0\uAE08 \uAE00\uC5D0 \uBB34\uC5C7\uC774 \uC788\uB294\uC9C0 \uBA3C\uC800 \uD655\uC778\uD55C\uB2E4 \u2014 \uBE48 \uC904 \uC54C\uACE0 \uB36E\uC5B4\uC4F0\uB294 \uAC83\uC774 \uAC00\uC7A5 \uD754\uD55C \uC0AC\uACE0\uB2E4",
+      "\uACE0\uCE60 \uB0B4\uC6A9\uC744 \uB9CC\uB4E0\uB2E4",
+      "editor_place_draft \uB85C \uB123\uB294\uB2E4. \uC774\uBBF8 \uB0B4\uC6A9\uC774 \uC788\uC73C\uBA74 \uC9C0\uC6B0\uC9C0 \uC54A\uACE0 \uAC70\uC808\uD558\uBA70 \uB2E4\uC74C \uB3C4\uAD6C\uB97C \uC54C\uB824 \uC900\uB2E4",
+      "\uC804\uCCB4\uB97C \uAC08\uC544\uC5CE\uC5B4\uC57C \uD560 \uB54C\uB9CC, \uC0AC\uC6A9\uC790\uC5D0\uAC8C \uBB3C\uC5B4\uBCF8 \uB4A4 editor_replace \uB97C \uC4F4\uB2E4"
+    ]
   },
   {
     slug: "photo-editor",
@@ -15135,7 +15187,11 @@ var META = [
   {
     slug: "gallery",
     label: "\uC774\uBBF8\uC9C0 \uAC24\uB7EC\uB9AC",
-    summary: "\uB0B4\uAC00 \uB9CC\uB4E0 \uC0AC\uC9C4 \uD30C\uC77C\uC744 \uAC24\uB7EC\uB9AC\uC5D0 \uB123\uC5B4 \uB450 \uD3B8\uC9D1\uAE30\uC5D0\uC11C \uC4F4\uB2E4 \u2014 \uD3B8\uC9D1\uAE30 \uCC3D\uC774 \uC5C6\uC5B4\uB3C4 \uB41C\uB2E4"
+    summary: "\uB0B4\uAC00 \uB9CC\uB4E0 \uC0AC\uC9C4 \uD30C\uC77C\uC744 \uAC24\uB7EC\uB9AC\uC5D0 \uB123\uC5B4 \uB450 \uD3B8\uC9D1\uAE30\uC5D0\uC11C \uC4F4\uB2E4 \u2014 \uD3B8\uC9D1\uAE30 \uCC3D\uC774 \uC5C6\uC5B4\uB3C4 \uB41C\uB2E4",
+    steps: [
+      "gallery_image_add \uB85C \uAC24\uB7EC\uB9AC\uC5D0 \uBA3C\uC800 \uB123\uB294\uB2E4",
+      "\uD3B8\uC9D1\uAE30 \uCABD \uB3C4\uAD6C\uB85C \uADF8 ref \uB97C \uAC00\uC838\uB2E4 \uC4F4\uB2E4 \u2014 \uAC24\uB7EC\uB9AC\uB97C \uAC70\uCE58\uBA74 \uD3B8\uC9D1\uAE30 \uCC3D\uC774 \uC5C6\uC5B4\uB3C4 \uBBF8\uB9AC \uC900\uBE44\uD560 \uC218 \uC788\uB2E4"
+    ]
   }
 ];
 var FALLBACK_SLUG = "other";
@@ -16454,6 +16510,7 @@ function runDaemon(env, deps = {}) {
 }
 
 // src/adapter.ts
+import { spawnSync } from "child_process";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import {
@@ -31105,6 +31162,24 @@ var READ_ONLY_TOOLS2 = [
   "ad_keyword_stats",
   "ad_min_exposure_bid",
   "ad_performance_balance",
+  // 🔴 These three read the advertiser's own account rather than pricing a
+  // hypothetical bid — balance, spend, and per-campaign/keyword delivery.
+  // Read-only by
+  // construction: the client exposes no charge, refund or campaign-write path,
+  // and asks for no gender/age breakdown even though /api/stats offers one.
+  "ad_bizmoney",
+  "ad_campaign_stats",
+  "ad_keyword_spend",
+  // --- The seller's own SmartStore money, via the official Commerce API and
+  // the user's own application pair. Read-only by construction: the service
+  // exposes settlement and sales reads and nothing else, and 🔴 it drops the
+  // payout account (accountNo / depositorName / bankType) that the settlement
+  // response carries, so no host ever receives it. ---
+  "commerce_settlement",
+  "commerce_sales",
+  // 🔴 Counts only — the order feed's ids stop at the service boundary.
+  "commerce_orders",
+  "commerce_product_issues",
   // --- Aggregate comment analytics ---
   "comment_category_spread",
   "comment_country",
@@ -31250,6 +31325,13 @@ var READ_ONLY_TOOLS2 = [
   "benchmark_gap",
   "content_calendar",
   "internal_links",
+  // Hands back the procedure for one step of a full write, shaped by what the
+  // caller measured in the step before. Reads nothing and calls no model.
+  "write_pipeline_step",
+  // 🔴 Writes the title in the panel, where a pick IS the confirmation — but the
+  // pick lives in the consent step, and MCP never reaches it: only a
+  // needs-confirm result continues there, and this one returns prompt material.
+  "title_optimize",
   // --- Grouped with the writing tools, but a pure collector. ---
   // Calls no model itself — it only gathers public data. Admitted after
   // checking behaviour rather than trusting the category label.
@@ -31322,6 +31404,11 @@ var TOOL_TIERS2 = Object.freeze({
   // 🔴 Only whole-body replacement is destructive: the others append, so the
   // autosave point still holds, while replacing the body overwrites it.
   editor_insert_draft: "write",
+  // 🔴 `write`, and it stays that way because it REFUSES an occupied body rather
+  // than overwriting it. The day it gains a replace fallback, a destructive act
+  // hides under a session toggle the user granted once — so that fallback is a
+  // review-block, not a convenience.
+  editor_place_draft: "write",
   // Opening a window edits no document, but it does create a tab in the user's
   // browser, and a session that has not enabled editing can do nothing with the
   // window anyway — one tier keeps it one thing for the user to allow.
@@ -31333,9 +31420,6 @@ var TOOL_TIERS2 = Object.freeze({
   // tier is the only barrier, and the user approves each image's source.
   editor_insert_image: "destructive",
   editor_set_title: "write",
-  // 🔴 Not an editor tool, but tiered like one: picking a title candidate IS
-  // the confirmation and overwrites the title, so it matches editor_set_title.
-  title_optimize: "write",
   editor_undo: "write",
   editor_replace: "destructive"
 });
@@ -31448,6 +31532,25 @@ ${BRIDGE_AGENT_HINT2.notConnected}`;
 
 // src/adapter.ts
 var NAME2 = "datalab-extension-mcp";
+var PACKAGE_NAME = "@modootoday/datalab-extension-mcp";
+var DEFAULT_WATCH_MS = 5 * 60 * 1e3;
+var CANONICAL_VERSION_URL = "https://app.datalab.tools/api/v1/mcp/version";
+var CANONICAL_TIMEOUT_MS = 4e3;
+var SEMVER = /^\d+\.\d+\.\d+$/;
+async function canonicalVersion(fetchImpl = fetch) {
+  try {
+    const ctl = new AbortController();
+    const timer = setTimeout(() => ctl.abort(), CANONICAL_TIMEOUT_MS);
+    const res = await fetchImpl(CANONICAL_VERSION_URL, {
+      signal: ctl.signal
+    }).finally(() => clearTimeout(timer));
+    if (!res.ok) return null;
+    const body = await res.json();
+    return typeof body.version === "string" && SEMVER.test(body.version) ? body.version : null;
+  } catch {
+    return null;
+  }
+}
 var PROBE_TIMEOUT_MS = 300;
 var READY_ATTEMPTS = 40;
 var READY_INTERVAL_MS = 50;
@@ -31588,6 +31691,7 @@ function createAdapterServer(deps = {}) {
   const fetchImpl = deps.fetchImpl ?? globalThis.fetch;
   const log = deps.log ?? defaultLog;
   const mcpUrl = `http://${host}:${port}/mcp`;
+  const revive = deps.revive ?? ensureDaemonRunning;
   const server = new Server(
     { name: deps.name ?? NAME2, version: deps.version ?? "0.0.0" },
     // Declares that we send list-changed notifications: the daemon signals us
@@ -31596,6 +31700,7 @@ function createAdapterServer(deps = {}) {
     { capabilities: { tools: { listChanged: true } } }
   );
   server.setRequestHandler(ListToolsRequestSchema, async () => {
+    deps.onActivity?.(1);
     try {
       const resp = await postMcp(fetchImpl, mcpUrl, "tools/list");
       if (resp.error) {
@@ -31615,9 +31720,19 @@ function createAdapterServer(deps = {}) {
           isTimeout(err) ? "connector_stuck" : "not_connected"
         )
       );
+    } finally {
+      deps.onActivity?.(-1);
     }
   });
   server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    deps.onActivity?.(1);
+    try {
+      return await handleToolCall(request);
+    } finally {
+      deps.onActivity?.(-1);
+    }
+  });
+  async function handleToolCall(request) {
     const { name, arguments: args } = request.params;
     let resp;
     try {
@@ -31625,20 +31740,45 @@ function createAdapterServer(deps = {}) {
         name,
         arguments: args ?? {}
       });
-    } catch (err) {
-      log(`tools/call transport failure: ${describeError(err)}`);
-      return {
-        content: [
-          {
-            type: "text",
-            text: agentActionableMessage2(
-              isTimeout(err) ? "connector_stuck" : "not_connected"
-            )
-          }
-        ],
-        isError: true
-      };
+    } catch (first) {
+      if (isTimeout(first)) return failedCall(first);
+      try {
+        resp = await reviveAndRetry(name, args);
+      } catch (second) {
+        return failedCall(second);
+      }
     }
+    return shapeCallResult(name, resp);
+  }
+  async function reviveAndRetry(name, args) {
+    log(`tools/call found no connector; restarting it and retrying ${name}`);
+    await revive({
+      host: deps.host,
+      port: deps.port,
+      log,
+      selfVersion: deps.version
+    });
+    return postMcp(fetchImpl, mcpUrl, "tools/call", {
+      name,
+      arguments: args ?? {}
+    });
+  }
+  function failedCall(err) {
+    log(`tools/call transport failure: ${describeError(err)}`);
+    return {
+      content: [
+        {
+          type: "text",
+          text: agentActionableMessage2(
+            isTimeout(err) ? "connector_stuck" : "not_connected"
+          )
+        }
+      ],
+      isError: true
+    };
+  }
+  function shapeCallResult(name, resp) {
+    void name;
     if (resp.error) {
       throw new McpError(
         ErrorCode.InternalError,
@@ -31646,7 +31786,7 @@ function createAdapterServer(deps = {}) {
       );
     }
     return resp.result ?? {};
-  });
+  }
   return server;
 }
 var defaultSubscribe = async (url3, onEvent, signal) => {
@@ -31669,13 +31809,16 @@ var defaultSubscribe = async (url3, onEvent, signal) => {
 };
 var TOOLCHANGE_BACKOFF_BASE_MS = 250;
 var TOOLCHANGE_BACKOFF_CAP_MS = 5e3;
+var TOOLCHANGE_REVIVE_AFTER_FAILURES = 3;
 async function pushToolChanges(deps) {
   const subscribe = deps.subscribe ?? defaultSubscribe;
   const sleep = deps.sleep ?? realSleep;
   const rng = deps.rng ?? Math.random;
   const now = deps.now ?? Date.now;
   const url3 = `${deps.mcpUrl.replace(/\/mcp$/, "")}/mcp/notifications`;
+  const revive = deps.revive ?? ensureDaemonRunning;
   let prev = TOOLCHANGE_BACKOFF_BASE_MS;
+  let failures = 0;
   while (!deps.signal.aborted) {
     const startedAt = now();
     try {
@@ -31693,8 +31836,19 @@ async function pushToolChanges(deps) {
     } catch {
     }
     if (deps.signal.aborted) return;
-    if (now() - startedAt >= TOOLCHANGE_BACKOFF_BASE_MS) {
+    const held = now() - startedAt >= TOOLCHANGE_BACKOFF_BASE_MS;
+    if (held) {
       prev = TOOLCHANGE_BACKOFF_BASE_MS;
+      failures = 0;
+    } else {
+      failures += 1;
+    }
+    if (failures >= TOOLCHANGE_REVIVE_AFTER_FAILURES) {
+      failures = 0;
+      try {
+        await revive({ log: deps.log, selfVersion: deps.selfVersion });
+      } catch {
+      }
     }
     const upper = Math.min(TOOLCHANGE_BACKOFF_CAP_MS, prev * 3);
     const wait = Math.round(
@@ -31704,7 +31858,41 @@ async function pushToolChanges(deps) {
     prev = wait;
   }
 }
+async function selfUpdateAndRestart(selfVersion, log, deps = {}) {
+  if (!selfVersion) return false;
+  const target = await (deps.resolve ?? canonicalVersion)();
+  if (!target || !isOlderVersion(selfVersion, target)) return false;
+  const args = deps.argv ?? process.argv.slice(2);
+  log(
+    `updating to the canonical connector ${target} (this build is ${selfVersion})`
+  );
+  const run = deps.spawn ?? spawnSync;
+  const res = run("npx", ["-y", `${PACKAGE_NAME}@${target}`, ...args], {
+    stdio: "inherit",
+    shell: process.platform === "win32"
+  });
+  if (res.error) {
+    log(
+      `could not start ${target} (${res.error.message}); continuing as ${selfVersion}`
+    );
+    return false;
+  }
+  process.exit(res.status ?? 0);
+}
+function countRequests(flight, passthrough) {
+  return (delta) => {
+    flight.count += delta;
+    passthrough?.(delta);
+  };
+}
 async function runAdapter(deps = {}) {
+  if (deps.selfUpdate !== false) {
+    await selfUpdateAndRestart(deps.version, deps.log ?? (() => {
+    }), {
+      resolve: deps.canonical,
+      spawn: deps.spawnImpl
+    });
+  }
   const ensure = deps.ensure ?? ensureDaemonRunning;
   await ensure({
     host: deps.host,
@@ -31712,7 +31900,21 @@ async function runAdapter(deps = {}) {
     log: deps.log,
     selfVersion: deps.version
   });
-  const server = createAdapterServer(deps);
+  const flight = { count: 0 };
+  const watchMs = deps.watchIntervalMs ?? DEFAULT_WATCH_MS;
+  const server = createAdapterServer({
+    ...deps,
+    onActivity: countRequests(flight, deps.onActivity)
+  });
+  const watch = deps.selfUpdate === false ? null : setInterval(() => {
+    if (flight.count > 0) return;
+    void selfUpdateAndRestart(deps.version, deps.log ?? (() => {
+    }), {
+      resolve: deps.canonical,
+      spawn: deps.spawnImpl
+    });
+  }, watchMs);
+  watch?.unref?.();
   let transport;
   if (deps.transport) {
     transport = deps.transport;
@@ -31725,6 +31927,7 @@ async function runAdapter(deps = {}) {
   const controller = new AbortController();
   const prevOnClose = transport.onclose;
   transport.onclose = () => {
+    if (watch) clearInterval(watch);
     controller.abort();
     prevOnClose?.();
   };

package/dist/cli.js

@@ -3,7 +3,7 @@ import {
   dispatchCli,
   runAdapter,
   runDaemon
-} from "./chunk-CBHNMIS3.js";
+} from "./chunk-XSYBSML4.js";
 import "./chunk-MLKGABMK.js";
 
 // src/cli.ts
@@ -47,7 +47,13 @@ async function main() {
     serve: () => {
       runDaemon(process.env);
     },
-    adapter: () => runAdapter({ name: NAME, version: VERSION })
+    adapter: () => runAdapter({
+      name: NAME,
+      version: VERSION,
+      // The host config pins an exact version, so without this a paired user
+      // never receives a release. `--no-self-update` keeps this build.
+      selfUpdate: !process.argv.slice(2).includes("--no-self-update")
+    })
   });
 }
 main().catch((err) => {

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+import { spawnSync } from 'node:child_process';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 
@@ -11,6 +12,15 @@ import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
  * what makes the proxy testable without a real socket or daemon.
  */
 
+/**
+ * The version the operator currently publishes as canonical.
+ *
+ * 🔴 Asked of OUR gateway, never of npm directly. A floating `@latest` in the
+ * host config would let whoever controls the registry push code next to a
+ * logged-in browser session; this keeps the decision on a surface we own, with
+ * a rollback lever behind it. A failure returns null and changes nothing.
+ */
+declare function canonicalVersion(fetchImpl?: typeof fetch): Promise<string | null>;
 /** The `fetch` shape this module needs — injectable so tests need no real HTTP. */
 type FetchImpl = (url: string, init: {
     method: string;
@@ -63,6 +73,12 @@ interface EnsureRunningDeps {
  */
 declare function ensureDaemonRunning(deps?: EnsureRunningDeps): Promise<void>;
 interface AdapterServerDeps {
+    /**
+     * Marks a request as started (+1) and finished (-1). The promotion watcher
+     * uses it to swap builds only while nothing is in flight — re-execing mid
+     * request would drop that call on the floor.
+     */
+    onActivity?: (delta: 1 | -1) => void;
     host?: string;
     port?: number;
     /** Injected in tests; defaults to the global `fetch`. */
@@ -71,6 +87,11 @@ interface AdapterServerDeps {
     /** MCP handshake identity reported to the host. */
     name?: string;
     version?: string;
+    /**
+     * Brings the daemon back when a call finds nothing listening. Injected in
+     * tests; defaults to `ensureDaemonRunning`.
+     */
+    revive?: (deps: EnsureRunningDeps) => Promise<void>;
 }
 /**
  * Build the low-level MCP Server whose two handlers proxy to the daemon. The
@@ -85,18 +106,21 @@ declare function createAdapterServer(deps?: AdapterServerDeps): Server;
  */
 type SubscribeImpl = (url: string, onEvent: (data: string) => void, signal: AbortSignal) => Promise<void>;
 interface RunAdapterDeps extends AdapterServerDeps {
+    /** Injected in tests; how often the canonical version is re-checked. */
+    watchIntervalMs?: number;
+    /** Injected in tests; defaults to asking the gateway. */
+    canonical?: typeof canonicalVersion;
+    /** Injected in tests; defaults to the real spawn. */
+    spawnImpl?: typeof spawnSync;
     /** Injected in tests; defaults to `ensureDaemonRunning`. */
     ensure?: (deps: EnsureRunningDeps) => Promise<void>;
     /** Injected in tests; defaults to a real stdio transport. */
     transport?: Transport;
     /** Injected in tests; defaults to the real SSE subscription. */
     subscribe?: SubscribeImpl;
+    /** false pins this build — `--no-self-update`. Default promotes to canonical. */
+    selfUpdate?: boolean;
 }
-/**
- * Run the adapter: make sure a daemon exists, then serve MCP over stdio. The
- * two legs stay separate so each is testable alone, and this is the only place
- * that touches the real stdio transport.
- */
 declare function runAdapter(deps?: RunAdapterDeps): Promise<void>;
 interface CliHandlers {
     install: (sub: "install" | "uninstall", argv: readonly string[]) => Promise<void>;

package/dist/index.js

@@ -3,7 +3,7 @@ import {
   dispatchCli,
   ensureDaemonRunning,
   runAdapter
-} from "./chunk-CBHNMIS3.js";
+} from "./chunk-XSYBSML4.js";
 import "./chunk-MLKGABMK.js";
 export {
   createAdapterServer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modootoday/datalab-extension-mcp",
-  "version": "1.4.3",
+  "version": "1.5.1",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",