@modootoday/datalab-extension-mcp 1.8.10 → 1.8.11

package/README.en.md

@@ -55,10 +55,10 @@ Avoid sharing a screenshot or the copied setup. If it may have leaked, press **[
 One command finds **every** AI app on your computer and connects them automatically. Nothing to do per app.
 
 1. **Open a terminal** — on Windows type `cmd` in the search box → "Command Prompt"; on Mac press `⌘+Space` and type `Terminal`; on Linux open your terminal app (often `Ctrl+Alt+T`).
-2. **Paste this command and press Enter.** (`@1.8.10` is the pinned version, so the connector never changes behind your back.)
+2. **Paste this command and press Enter.** (`@1.8.11` is the pinned version, so the connector never changes behind your back.)
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.10 install
+   npx -y @modootoday/datalab-extension-mcp@1.8.11 install
    ```
 
    Lines of English scrolling by is normal. This only downloads and runs the connector — it touches nothing else.
@@ -130,10 +130,10 @@ Apps it **only prints instructions for** (follow the on-screen guide): VS Code,
 Installing also places the bundled **writing skills**. An AI app reads the name and description of every installed skill on every start, so the more are installed the less room the conversation has. The default therefore places only the ones that work right away.
 
 ```
-npx -y @modootoday/datalab-extension-mcp skills list
-npx -y @modootoday/datalab-extension-mcp skills status
-npx -y @modootoday/datalab-extension-mcp skills attach <name>
-npx -y @modootoday/datalab-extension-mcp skills detach <name>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills list
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills status
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills attach <name>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills detach <name>
 ```
 
 - `list` shows everything in this version, name and description.
@@ -152,9 +152,9 @@ The **workbench** is this computer, where the connector runs. If you use more th
 Make the code from the panel with [등록 코드 만들기], or from the terminal.
 
 ```
-npx -y @modootoday/datalab-extension-mcp browsers add "Work Chrome"
-npx -y @modootoday/datalab-extension-mcp browsers list
-npx -y @modootoday/datalab-extension-mcp browsers revoke <handle>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers add "Work Chrome"
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers list
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers revoke <handle>
 ```
 
 `add` **asks you to paste the pairing token** — the same value you used to
@@ -252,7 +252,7 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 - **When the connection disappears** — run the very command you used at the start once more; it safely re-registers. (Some AI apps clean up their settings file and drop the connection.)
 
   ```
-  npx -y @modootoday/datalab-extension-mcp@1.8.10 install
+  npx -y @modootoday/datalab-extension-mcp@1.8.11 install
   ```
 
 - **`'npx' is not recognized...`** — Node.js isn't installed. The "No Node.js?" one-liner in Step 2 is the simplest fix.
@@ -282,7 +282,7 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 1. Run this in a terminal (it removes the entries registered in your AI apps).
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.10 uninstall
+   npx -y @modootoday/datalab-extension-mcp@1.8.11 uninstall
    ```
 
 2. Turn **MCP 연결** off in the extension settings. The panel is the bridge, so with it off a leftover config line can look nothing up.

package/README.md

@@ -49,10 +49,10 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
 명령 한 줄이면 컴퓨터에 있는 AI 앱을 **모두 자동으로** 찾아 연결해 줘요. 앱마다 따로 할 일은 없어요.
 
 1. **터미널을 열어요** — Windows는 검색창에 `cmd` → "명령 프롬프트", Mac은 `⌘+스페이스`로 `터미널`, Linux는 터미널 앱(보통 `Ctrl+Alt+T`)이에요.
-2. **아래 명령을 붙여넣고 Enter를 눌러요.** (`@1.8.10`은 커넥터가 나도 모르게 바뀌지 않도록 고정한 버전이에요.)
+2. **아래 명령을 붙여넣고 Enter를 눌러요.** (`@1.8.11`은 커넥터가 나도 모르게 바뀌지 않도록 고정한 버전이에요.)
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.10 install
+   npx -y @modootoday/datalab-extension-mcp@1.8.11 install
    ```
 
    영어 글자가 여러 줄 올라오는 건 정상이에요. 이 명령은 커넥터를 내려받아 실행할 뿐, 다른 건 건드리지 않아요.
@@ -118,10 +118,10 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
 설치할 때 **글쓰기 도움말(스킬)** 도 함께 놓입니다. AI 앱은 켜질 때마다 설치된 도움말의 이름과 설명을 전부 읽기 때문에, 많이 깔수록 대화에 쓸 자리가 줄어들어요. 그래서 기본은 **바로 쓸 수 있는 것만** 놓습니다.
 
 ```
-npx -y @modootoday/datalab-extension-mcp skills list
-npx -y @modootoday/datalab-extension-mcp skills status
-npx -y @modootoday/datalab-extension-mcp skills attach <이름>
-npx -y @modootoday/datalab-extension-mcp skills detach <이름>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills list
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills status
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills attach <이름>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills detach <이름>
 ```
 
 - `list` 는 이 버전에 들어 있는 전부를 이름과 설명으로 보여 줘요.
@@ -140,9 +140,9 @@ npx -y @modootoday/datalab-extension-mcp skills detach <이름>
 패널에서 [등록 코드 만들기]를 눌러도 되고, 터미널을 쓰셔도 돼요.
 
 ```
-npx -y @modootoday/datalab-extension-mcp browsers add "회사 크롬"
-npx -y @modootoday/datalab-extension-mcp browsers list
-npx -y @modootoday/datalab-extension-mcp browsers revoke <handle>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers add "회사 크롬"
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers list
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers revoke <handle>
 ```
 
 `add` 를 실행하면 **연결 토큰을 붙여넣으라고 물어봐요** — 설치할 때와 같은 값이고, 패널의 `복사` 버튼으로 얻습니다. 그러면 코드가 **한 번만** 출력돼요. 커넥터는 그 코드를 저장하지 않고 지문만 남기므로 다시 보여 줄 수 없어요.
@@ -220,7 +220,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 - **연결이 사라졌을 때** — 처음 실행했던 그 명령을 한 번 더 실행하면 안전하게 다시 등록돼요. (일부 AI 앱이 설정 파일을 정리하며 연결을 지우기도 해요.)
 
   ```
-  npx -y @modootoday/datalab-extension-mcp@1.8.10 install
+  npx -y @modootoday/datalab-extension-mcp@1.8.11 install
   ```
 
 - **`'npx'을(는) 내부 또는 외부 명령...`** — Node.js가 없는 거예요. 위 2단계의 "Node.js가 없다면" 한 줄 설치가 가장 간단해요.
@@ -250,7 +250,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 1. 터미널에서 아래 명령을 실행해요(AI 앱에 등록된 설정을 지워 줘요).
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.10 uninstall
+   npx -y @modootoday/datalab-extension-mcp@1.8.11 uninstall
    ```
 
 2. 확장 설정에서 **MCP 연결을 꺼요.** 패널이 브릿지라, 꺼 두면 어딘가 설정 줄이 남아 있어도 AI 앱이 아무것도 조회할 수 없어요.

package/dist/{browsers-AGEUPMJA.js → browsers-EMS5V4M4.js}

@@ -1,12 +1,12 @@
 import {
   DEFAULT_HOST,
   DEFAULT_PORT
-} from "./chunk-DOPJ4OZ4.js";
+} from "./chunk-Q6SOGGKF.js";
 import {
   TOKEN_PROMPT_GUIDE,
   TOKEN_PROMPT_QUESTION,
   TOKEN_REQUIRED_NON_INTERACTIVE
-} from "./chunk-5S7RFXIU.js";
+} from "./chunk-S6D7YVBB.js";
 import "./chunk-MLKGABMK.js";
 
 // src/browsers.ts
@@ -105,7 +105,7 @@ async function runBrowsers(argv, deps) {
       return 0;
     }
     for (const row of rows) {
-      const state = row.browserId === null ? "waiting" : "connected";
+      const state = row.browserId === null ? "waiting" : row.connected === true ? "connected" : "detached";
       deps.out(`${row.handle}  ${state.padEnd(9)}  ${row.label}`);
     }
     return 0;

package/dist/{chunk-YB7L4SZC.js → chunk-65FDP6LF.js}

@@ -4,7 +4,7 @@ import {
   mediaToolDescriptors,
   spawnDaemon,
   tryConnect
-} from "./chunk-DOPJ4OZ4.js";
+} from "./chunk-Q6SOGGKF.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -14583,6 +14583,14 @@ var HelloSchema = external_exports.object({
    */
   capabilities: external_exports.array(external_exports.string()).default([])
 });
+var BRIDGE_AUTH_CAPABILITY = "bridge-auth-bearer";
+var BROWSER_ROUTING_CAPABILITY = "browser-routing-v1";
+var LOCAL_FILE_REQUEST_CAPABILITY = "local-file-request-v1";
+var REQUIRED_BROWSER_CAPABILITIES = Object.freeze([
+  BRIDGE_AUTH_CAPABILITY,
+  BROWSER_ROUTING_CAPABILITY,
+  LOCAL_FILE_REQUEST_CAPABILITY
+]);
 var HelloAckSchema = external_exports.object({
   t: external_exports.literal("hello_ack"),
   /** The single version both sides will use for this session. */
@@ -14603,7 +14611,9 @@ var HelloNackReasonSchema = external_exports.enum([
   /** This browser already has an active event stream. */
   "session_active",
   /** Root authority cannot open a browser session. */
-  "browser_registration_required"
+  "browser_registration_required",
+  /** This panel predates mandatory browser routing and file permits. */
+  "browser_capability_required"
 ]);
 var BrowserRoutingSchema = external_exports.object({
   targetBrowserId: external_exports.string(),
@@ -15033,6 +15043,7 @@ var REASON_POLICY = Object.freeze({
   // --- The request itself must change ---
   unknown_tool: Object.freeze({ retryable: false }),
   invalid_args: Object.freeze({ retryable: false }),
+  browser_required: Object.freeze({ retryable: false }),
   tool_closed: Object.freeze({ retryable: false }),
   missing_in_build: Object.freeze({ retryable: false }),
   // ---  A human must act; re-calling only nags them ---
@@ -15446,7 +15457,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
   panelClosed: "\uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC774 \uB2EB\uD600 \uC788\uC5B4\uC694. \uD06C\uB86C\uC744 \uC5F4\uACE0 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC744 \uC5F4\uC5B4 \uB450\uBA74 \uBC14\uB85C \uB3D9\uC791\uD574\uC694.",
   /** The panel accepted the call but never answered inside the deadline. */
   toolTimeout: "\uBE0C\uB77C\uC6B0\uC800 \uC751\uB2F5\uC774 \uB2A6\uC5B4\uC9C0\uACE0 \uC788\uC5B4\uC694. \uD06C\uB86C\uC5D0\uC11C \uB124\uC774\uBC84\uC5D0 \uB85C\uADF8\uC778\uB418\uC5B4 \uC788\uB294\uC9C0 \uD655\uC778\uD558\uACE0 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
-  /** The session hit the per-session rate limit. */
+  /** The daemon request budget is empty. */
   rateLimited: "\uC694\uCCAD\uC774 \uB108\uBB34 \uC7A6\uC544\uC694. \uC7A0\uAE50 \uAE30\uB2E4\uB838\uB2E4\uAC00 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
   /**
    * The local connector accepted nothing back inside its ceiling. Distinct
@@ -15458,7 +15469,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
 var BRIDGE_AGENT_HINT = Object.freeze({
   /** Panel closed / not connected — the panel must be open for any tool to run. */
   notConnected: "The Datalab extension side panel is not open, so this tool cannot run right now. Ask the user to open the extension side panel in their browser, then call this tool again.",
-  /** Per-session rate limit tripped — transient. */
+  /** Daemon-wide rate limit tripped — transient. */
   rateLimited: "This tool is temporarily rate-limited. Wait a few seconds, then call it again.",
   /** The local connector did not answer at all — retrying immediately will not help. */
   connectorStuck: "The local connector stopped responding, so this tool cannot run right now. Do not retry immediately; ask the user to turn the MCP connection off and on again in the extension side panel."

package/dist/{chunk-DOPJ4OZ4.js → chunk-Q6SOGGKF.js}

@@ -1,4 +1,4 @@
-// ../mcp-server/dist/chunk-Q4ALBPO7.js
+// ../mcp-server/dist/chunk-377F4BGN.js
 import { createHash } from "crypto";
 import { createHash as createHash2, randomUUID } from "crypto";
 import { mkdir, readFile, readdir, rm, writeFile } from "fs/promises";
@@ -14439,6 +14439,11 @@ var HelloSchema = external_exports.object({
 var BRIDGE_AUTH_CAPABILITY = "bridge-auth-bearer";
 var BROWSER_ROUTING_CAPABILITY = "browser-routing-v1";
 var LOCAL_FILE_REQUEST_CAPABILITY = "local-file-request-v1";
+var REQUIRED_BROWSER_CAPABILITIES = Object.freeze([
+  BRIDGE_AUTH_CAPABILITY,
+  BROWSER_ROUTING_CAPABILITY,
+  LOCAL_FILE_REQUEST_CAPABILITY
+]);
 function bearerToken(header) {
   if (typeof header !== "string") return null;
   const match = /^Bearer (.+)$/i.exec(header.trim());
@@ -14464,7 +14469,9 @@ var HelloNackReasonSchema = external_exports.enum([
   /** This browser already has an active event stream. */
   "session_active",
   /** Root authority cannot open a browser session. */
-  "browser_registration_required"
+  "browser_registration_required",
+  /** This panel predates mandatory browser routing and file permits. */
+  "browser_capability_required"
 ]);
 var BrowserRoutingSchema = external_exports.object({
   targetBrowserId: external_exports.string(),
@@ -15024,6 +15031,7 @@ var REASON_POLICY = Object.freeze({
   // --- The request itself must change ---
   unknown_tool: Object.freeze({ retryable: false }),
   invalid_args: Object.freeze({ retryable: false }),
+  browser_required: Object.freeze({ retryable: false }),
   tool_closed: Object.freeze({ retryable: false }),
   missing_in_build: Object.freeze({ retryable: false }),
   // ---  A human must act; re-calling only nags them ---
@@ -15492,7 +15500,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
   panelClosed: "\uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC774 \uB2EB\uD600 \uC788\uC5B4\uC694. \uD06C\uB86C\uC744 \uC5F4\uACE0 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC744 \uC5F4\uC5B4 \uB450\uBA74 \uBC14\uB85C \uB3D9\uC791\uD574\uC694.",
   /** The panel accepted the call but never answered inside the deadline. */
   toolTimeout: "\uBE0C\uB77C\uC6B0\uC800 \uC751\uB2F5\uC774 \uB2A6\uC5B4\uC9C0\uACE0 \uC788\uC5B4\uC694. \uD06C\uB86C\uC5D0\uC11C \uB124\uC774\uBC84\uC5D0 \uB85C\uADF8\uC778\uB418\uC5B4 \uC788\uB294\uC9C0 \uD655\uC778\uD558\uACE0 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
-  /** The session hit the per-session rate limit. */
+  /** The daemon request budget is empty. */
   rateLimited: "\uC694\uCCAD\uC774 \uB108\uBB34 \uC7A6\uC544\uC694. \uC7A0\uAE50 \uAE30\uB2E4\uB838\uB2E4\uAC00 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
   /**
    * The local connector accepted nothing back inside its ceiling. Distinct
@@ -15504,7 +15512,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
 var BRIDGE_AGENT_HINT = Object.freeze({
   /** Panel closed / not connected — the panel must be open for any tool to run. */
   notConnected: "The Datalab extension side panel is not open, so this tool cannot run right now. Ask the user to open the extension side panel in their browser, then call this tool again.",
-  /** Per-session rate limit tripped — transient. */
+  /** Daemon-wide rate limit tripped — transient. */
   rateLimited: "This tool is temporarily rate-limited. Wait a few seconds, then call it again.",
   /** The local connector did not answer at all — retrying immediately will not help. */
   connectorStuck: "The local connector stopped responding, so this tool cannot run right now. Do not retry immediately; ask the user to turn the MCP connection off and on again in the extension side panel."
@@ -15634,7 +15642,6 @@ var Bridge = class {
   #idTag = daemonIdTag();
   #sessionSeq = 0;
   #defaultKey = null;
-  #retireSession = null;
   #bucketTokens = 0;
   #bucketRefilledAt = 0;
   // Last catalog the panel reported, kept across disconnects: many hosts cache
@@ -15643,12 +15650,9 @@ var Bridge = class {
   #cachedTools = [];
   constructor(deps) {
     this.#deps = deps;
-  }
-  bindRetireSession(retire) {
-    if (this.#retireSession !== null) {
-      throw new Error("bridge transport retirement is already bound");
-    }
-    this.#retireSession = retire;
+    const limit = deps.rateLimit ?? DEFAULT_RATE_LIMIT;
+    this.#bucketTokens = limit.capacity;
+    this.#bucketRefilledAt = (deps.now ?? Date.now)();
   }
   /**
    * The session a request with no browser named goes to. Map preserves
@@ -15674,7 +15678,7 @@ var Bridge = class {
    */
   connectedBrowsers() {
     const keys = [...this.#sessions.values()].filter((entry) => entry.streamActive).map((entry) => entry.key);
-    const primary = this.#defaultKey === null ? this.#primary()?.key ?? null : this.#defaultKey;
+    const primary = this.#primary()?.key ?? null;
     return keys.map((id) => ({
       id,
       name: this.#deps.browserLabels.get(id) ?? null,
@@ -15946,6 +15950,32 @@ var Bridge = class {
         message: idCheck.message
       };
     }
+    const negotiated = negotiateProtocol(parsed.data.protocolVersions);
+    if (!negotiated.ok) {
+      return {
+        t: "hello_nack",
+        reason: negotiated.reason,
+        supported: negotiated.supported,
+        message: negotiated.message
+      };
+    }
+    const bearerRequired = parsed.data.capabilities.includes(
+      BRIDGE_AUTH_CAPABILITY
+    );
+    const routingRequired = parsed.data.capabilities.includes(
+      BROWSER_ROUTING_CAPABILITY
+    );
+    const fileRequestBound = parsed.data.capabilities.includes(
+      LOCAL_FILE_REQUEST_CAPABILITY
+    );
+    if (!bearerRequired || !routingRequired || !fileRequestBound) {
+      return {
+        t: "hello_nack",
+        reason: "browser_capability_required",
+        supported: [],
+        message: "This browser panel is outdated. Close and reopen the side panel before reconnecting."
+      };
+    }
     const tokenHash = digestToken(parsed.data.token);
     const browserId = parsed.data.browserId;
     if (browserId !== void 0 && browserId.length > 0 && !this.#deps.claimedBrowsers.has(browserId)) {
@@ -15974,19 +16004,15 @@ var Bridge = class {
         message: "The root token is management-only. Register this browser with its own token."
       };
     }
-    const negotiated = negotiateProtocol(parsed.data.protocolVersions);
-    if (!negotiated.ok) {
-      return {
-        t: "hello_nack",
-        reason: negotiated.reason,
-        supported: negotiated.supported,
-        message: negotiated.message
-      };
-    }
     const key = credential.browserId;
     const held = this.#sessions.get(key);
     if (held?.streamActive) {
-      this.#retireSession?.(key, held.session.sessionId);
+      return {
+        t: "hello_nack",
+        reason: "session_active",
+        supported: [],
+        message: "This browser already has an active side-panel session."
+      };
     }
     const session = {
       // A counter, not a timestamp: a panel reload produces two handshakes
@@ -15996,28 +16022,17 @@ var Bridge = class {
       protocolVersion: negotiated.version,
       extensionVersion: parsed.data.extensionVersion
     };
-    const routingRequired = credential.kind === "claimed" && parsed.data.capabilities.includes(BROWSER_ROUTING_CAPABILITY);
-    const fileRequestBound = parsed.data.capabilities.includes(
-      LOCAL_FILE_REQUEST_CAPABILITY
-    );
     this.#installSession(key, session, {
       tokenHash,
       routingRequired,
       fileRequestBound
     });
-    const limit = this.#deps.rateLimit ?? DEFAULT_RATE_LIMIT;
-    this.#bucketTokens = limit.capacity;
-    this.#bucketRefilledAt = (this.#deps.now ?? Date.now)();
     return {
       t: "hello_ack",
       protocolVersion: negotiated.version,
       serverVersion: this.#deps.serverVersion,
       sessionId: session.sessionId,
-      capabilities: [
-        BRIDGE_AUTH_CAPABILITY,
-        ...routingRequired ? [BROWSER_ROUTING_CAPABILITY] : [],
-        ...fileRequestBound ? [LOCAL_FILE_REQUEST_CAPABILITY] : []
-      ]
+      capabilities: [...REQUIRED_BROWSER_CAPABILITIES]
     };
   }
   /**
@@ -16209,7 +16224,7 @@ var Bridge = class {
     };
   }
   /**
-   * Refill-then-take on the session's token bucket. The refill is computed
+   * Refill-then-take on the daemon's token bucket. The refill is computed
    * lazily on each take, so there is no timer to leak and an injected clock
    * keeps it testable without waiting real seconds.
    */
@@ -17137,13 +17152,6 @@ function createHttpBridge(opts) {
     opts.bridge.disconnect(key);
     if (wasPrimary) scheduleToolsDrop();
   };
-  opts.bridge.bindRetireSession((key, sessionId) => {
-    const stream = streams.get(key);
-    if (!stream || stream.sessionId !== sessionId) return;
-    const wasPrimary = key === opts.bridge.sessionKey;
-    removeStream(key)?.end();
-    if (wasPrimary) scheduleToolsDrop();
-  });
   const server = createServer((req, res) => {
     const url2 = new URL(req.url ?? "/", `http://${host}`);
     const origin = req.headers.origin;
@@ -17286,9 +17294,16 @@ function createHttpBridge(opts) {
         }
         const action = b?.["action"];
         if (action === "list") {
+          const active = new Set(
+            opts.bridge.connectedBrowsers().map((row) => row.id)
+          );
+          const browsers = (await registry2.list()).map((row) => ({
+            ...row,
+            connected: row.browserId !== null && active.has(row.browserId)
+          }));
           json2(res, 200, {
             ok: true,
-            browsers: await registry2.list(),
+            browsers,
             registryStatus: registry2.status()
           });
           return;
@@ -17854,24 +17869,54 @@ function matches(claim, handle) {
 function createBrowserRegistry(opts) {
   const now = opts.now ?? (() => /* @__PURE__ */ new Date());
   const revoked = /* @__PURE__ */ new Set();
-  const readCurrent = () => {
-    const read = readLedger(opts.path);
-    if (read.state === "unreadable") {
-      throw new Error(`browser registry is unreadable: ${read.reason}`);
-    }
-    const rows = read.state === "ok" ? [...read.rows] : [];
-    if (!opts.forbiddenTokenHash) return { rows, quarantined: [] };
-    const quarantined = rows.filter(
+  const initial = readLedger(opts.path);
+  const unreadable = initial.state === "unreadable" ? initial.reason : null;
+  let rows = initial.state === "ok" ? initial.rows.map((row) => ({ ...row })) : [];
+  let mutationTail = Promise.resolve();
+  let pendingMutations = 0;
+  const view = (source = rows) => {
+    if (unreadable !== null) {
+      throw new Error(`browser registry is unreadable: ${unreadable}`);
+    }
+    if (!opts.forbiddenTokenHash) return { rows: [...source], quarantined: [] };
+    const quarantined = source.filter(
       (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
     );
     return {
-      rows: rows.filter(
+      rows: source.filter(
         (row) => !timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
       ),
       quarantined
     };
   };
-  const current = () => readCurrent().rows;
+  const current = () => view().rows;
+  const serialize = (work) => {
+    pendingMutations += 1;
+    const result = mutationTail.then(work, work);
+    mutationTail = result.then(
+      () => {
+        pendingMutations -= 1;
+      },
+      () => {
+        pendingMutations -= 1;
+      }
+    );
+    return result;
+  };
+  const transact = (propose) => {
+    if (unreadable !== null) {
+      return Promise.reject(
+        new Error(`browser registry is unreadable: ${unreadable}`)
+      );
+    }
+    return serialize(async () => {
+      const proposal = propose(rows.map((row) => ({ ...row })));
+      await writeLedger(opts.path, proposal.next);
+      rows = proposal.next;
+      proposal.commit?.();
+      return proposal.result;
+    });
+  };
   return {
     async add(label) {
       const token = mintToken();
@@ -17881,8 +17926,10 @@ function createBrowserRegistry(opts) {
         label,
         createdAt: now().toISOString()
       };
-      await writeLedger(opts.path, [...current(), claim]);
-      return { handle: handleOf(claim), token };
+      return transact((snapshot) => ({
+        next: [...snapshot, claim],
+        result: { handle: handleOf(claim), token }
+      }));
     },
     async list() {
       return current().map((claim) => ({
@@ -17893,6 +17940,7 @@ function createBrowserRegistry(opts) {
       }));
     },
     claim(browserId, tokenHash) {
+      if (pendingMutations > 0) return false;
       if (opts.claimed.has(browserId)) return false;
       for (const held of opts.claimed.values()) {
         if (timingSafeEqual(held, tokenHash)) return false;
@@ -17907,47 +17955,75 @@ function createBrowserRegistry(opts) {
         (claim) => claim.browserId === null && timingSafeEqual(claim.tokenHash, tokenHash)
       );
       if (!row) return false;
-      row.browserId = browserId;
+      const stored = rows.find((claim) => claim.tokenHash === row.tokenHash);
+      if (!stored) return false;
+      stored.browserId = browserId;
       opts.claimed.set(browserId, row.tokenHash);
-      void writeLedger(opts.path, claims).catch(() => {
-      });
+      opts.onClaim?.(browserId, stored.label);
+      const snapshot = rows.map((entry) => ({ ...entry }));
+      void serialize(async () => {
+        try {
+          await writeLedger(opts.path, snapshot);
+        } catch (error51) {
+          if (stored.browserId === browserId) stored.browserId = null;
+          if (opts.claimed.get(browserId) === row.tokenHash) {
+            opts.claimed.delete(browserId);
+            opts.onRevoke?.(browserId);
+          }
+          throw error51;
+        }
+      }).catch(() => void 0);
       return true;
     },
     async revoke(handle) {
-      const claims = current();
-      const kept = claims.filter((claim) => !matches(claim, handle));
-      if (kept.length === claims.length) return false;
-      await writeLedger(opts.path, kept);
-      for (const claim of claims) {
-        if (!matches(claim, handle)) continue;
-        revoked.add(claim.tokenHash);
-        if (claim.browserId !== null) {
-          opts.claimed.delete(claim.browserId);
-          opts.onRevoke?.(claim.browserId);
+      return transact((snapshot) => {
+        const claims = view(snapshot).rows;
+        const removed = claims.filter((claim) => matches(claim, handle));
+        if (removed.length === 0) {
+          return { next: snapshot, result: false };
         }
-      }
-      return true;
+        const removedHashes = new Set(removed.map((claim) => claim.tokenHash));
+        return {
+          next: snapshot.filter((claim) => !removedHashes.has(claim.tokenHash)),
+          result: true,
+          commit: () => {
+            for (const claim of removed) {
+              revoked.add(claim.tokenHash);
+              if (claim.browserId !== null) {
+                opts.claimed.delete(claim.browserId);
+                opts.onRevoke?.(claim.browserId);
+              }
+            }
+          }
+        };
+      });
     },
     async repair() {
-      const view = readCurrent();
-      if (view.quarantined.length === 0) return { removed: [] };
-      await writeLedger(opts.path, view.rows);
-      return { removed: view.quarantined.map(handleOf) };
+      return transact((snapshot) => {
+        const currentView = view(snapshot);
+        const removed = currentView.quarantined.map(handleOf);
+        const removedHashes = new Set(
+          currentView.quarantined.map((row) => row.tokenHash)
+        );
+        return {
+          next: snapshot.filter((row) => !removedHashes.has(row.tokenHash)),
+          result: { removed }
+        };
+      });
     },
     status() {
-      const read = readLedger(opts.path);
-      if (read.state === "unreadable") {
+      if (unreadable !== null) {
         return {
           state: "disabled",
           error: "browser_registry_unreadable",
-          detail: read.reason
+          detail: unreadable
         };
       }
-      if (read.state === "ok" && opts.forbiddenTokenHash && ledgerOverlapsToken(read.rows, opts.forbiddenTokenHash)) {
+      if (opts.forbiddenTokenHash && ledgerOverlapsToken(rows, opts.forbiddenTokenHash)) {
         return {
           state: "degraded",
           error: "browser_registry_root_authority_overlap",
-          quarantinedHandles: read.rows.filter(
+          quarantinedHandles: rows.filter(
             (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
           ).map(handleOf),
           recovery: "browsers repair"
@@ -18016,20 +18092,7 @@ function runDaemon(env, deps = {}) {
     claimedBrowsers,
     browserLabels,
     browserRegistryStatus: () => registry2.status(),
-    claimBrowser: (browserId, tokenHash) => {
-      const took = registry2.claim(browserId, tokenHash);
-      if (took) {
-        const now = readLedger(ledgerPath(deps.home));
-        if (now.state === "ok") {
-          for (const row of now.rows) {
-            if (row.browserId === browserId) {
-              browserLabels.set(browserId, row.label);
-            }
-          }
-        }
-      }
-      return took;
-    },
+    claimBrowser: (browserId, tokenHash) => registry2.claim(browserId, tokenHash),
     wasRevoked: (tokenHash) => registry2.wasRevoked(tokenHash),
     log
   });
@@ -18038,6 +18101,7 @@ function runDaemon(env, deps = {}) {
   const registry2 = createBrowserRegistry({
     path: ledgerPath(deps.home),
     claimed: claimedBrowsers,
+    onClaim: (browserId, label) => browserLabels.set(browserId, label),
     forbiddenTokenHash: rootTokenHash,
     onRevoke: (browserId) => http.disconnect(browserId)
   });

package/dist/{chunk-5S7RFXIU.js → chunk-S6D7YVBB.js}

@@ -1109,7 +1109,7 @@ async function removeSkills(io, detectedIds, slugs) {
 var RESTART_NOTICE = "\uB9C8\uC9C0\uB9C9 \uD55C \uB2E8\uACC4: AI \uC571\uC744 \uC644\uC804\uD788 \uC885\uB8CC\uD588\uB2E4\uAC00 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.\n(Windows: \uC791\uC5C5 \uD45C\uC2DC\uC904 \uD2B8\uB808\uC774 \uC544\uC774\uCF58\uC5D0\uC11C \uC885\uB8CC)";
 var NOTHING_CHANGED = "\uC544\uBB34\uAC83\uB3C4 \uBC14\uAFB8\uC9C0 \uC54A\uC558\uC5B4\uC694.";
 var UNINSTALL_DONE = "\uC815\uB9AC\uAC00 \uB05D\uB0AC\uC5B4\uC694.";
-var UNINSTALL_TOKEN_REMINDER = "\uC5F0\uACB0 \uD1A0\uD070\uAE4C\uC9C0 \uC5C6\uC560\uB824\uBA74 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC5D0\uC11C '\uC5F0\uB3D9 \uD574\uC81C' \uBC84\uD2BC\uC744 \uB20C\uB7EC \uC8FC\uC138\uC694. \uD3D0\uAE30\uB41C \uD1A0\uD070\uC740 \uC124\uC815\uC5D0 \uB0A8\uC740 \uD56D\uBAA9\uC744 \uC804\uBD80 \uBB34\uB825\uD654\uD574\uC694.";
+var UNINSTALL_TOKEN_REMINDER = "\uC774 \uBE0C\uB77C\uC6B0\uC800\uC758 \uB85C\uCEEC \uC5F0\uACB0 \uC815\uBCF4\uB3C4 \uC9C0\uC6B0\uB824\uBA74 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC5D0\uC11C '\uC774 \uBE0C\uB77C\uC6B0\uC800 \uC5F0\uACB0 \uB044\uAE30'\uB97C \uB20C\uB7EC \uC8FC\uC138\uC694. \uC6CC\uD06C\uBCA4\uCE58 \uB4F1\uB85D\uC740 \uBE0C\uB77C\uC6B0\uC800 \uBAA9\uB85D\uC5D0\uC11C \uBCC4\uB3C4\uB85C \uB0B4\uB9B4 \uC218 \uC788\uC5B4\uC694.";
 var PERMISSION_DENIED_HINT = "\uD30C\uC77C \uAD8C\uD55C \uB54C\uBB38\uC5D0 \uC124\uC815\uC744 \uC4F8 \uC218 \uC5C6\uC5C8\uC5B4\uC694. \uD30C\uC77C \uAD8C\uD55C\uC744 \uD655\uC778\uD55C \uB4A4 \uAC19\uC740 \uBA85\uB839\uC5B4\uB97C \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.";
 var NO_HOSTS_DETECTED = "\uC5F0\uACB0\uD560 \uC218 \uC788\uB294 AI \uD504\uB85C\uADF8\uB7A8\uC744 \uCC3E\uC9C0 \uBABB\uD588\uC5B4\uC694.";
 var SUPPORTED_APPS_HEADER = "\uC9C0\uC6D0\uD558\uB294 \uD504\uB85C\uADF8\uB7A8\uACFC \uB2E4\uC6B4\uB85C\uB4DC \uC8FC\uC18C\uC608\uC694:";

package/dist/cli.js

@@ -2,10 +2,10 @@
 import {
   dispatchCli,
   runAdapter
-} from "./chunk-YB7L4SZC.js";
+} from "./chunk-65FDP6LF.js";
 import {
   runDaemon
-} from "./chunk-DOPJ4OZ4.js";
+} from "./chunk-Q6SOGGKF.js";
 import "./chunk-MLKGABMK.js";
 
 // src/cli.ts
@@ -17,7 +17,7 @@ function log(message) {
 `);
 }
 async function runInstaller(sub, argv) {
-  const { createNodeIo, runInstall, runUninstall } = await import("./dist-JICXADYR.js");
+  const { createNodeIo, runInstall, runUninstall } = await import("./dist-63JYX33Z.js");
   const opts = { version: VERSION };
   for (let i = 0; i < argv.length; i += 1) {
     const flag = argv[i];
@@ -62,8 +62,8 @@ async function main() {
     // Loaded lazily, like the installer: the adapter path is what an MCP host
     // spawns and must not pay for a command only an operator types.
     browsers: async (argv) => {
-      const { runBrowsers } = await import("./browsers-AGEUPMJA.js");
-      const { createNodeIo } = await import("./dist-JICXADYR.js");
+      const { runBrowsers } = await import("./browsers-EMS5V4M4.js");
+      const { createNodeIo } = await import("./dist-63JYX33Z.js");
       const io = createNodeIo();
       const code = await runBrowsers(argv, {
         env: process.env,
@@ -88,7 +88,7 @@ async function main() {
         attachSkill,
         detachSkill,
         skillsPayloadRoot
-      } = await import("./dist-JICXADYR.js");
+      } = await import("./dist-63JYX33Z.js");
       const io = createNodeIo();
       const root = skillsPayloadRoot();
       const code = await runSkills(argv, {

package/dist/{dist-JICXADYR.js → dist-63JYX33Z.js}

@@ -49,7 +49,7 @@ import {
   upsertServerKey,
   validateInstallOptions,
   validateUninstallOptions
-} from "./chunk-5S7RFXIU.js";
+} from "./chunk-S6D7YVBB.js";
 import "./chunk-MLKGABMK.js";
 export {
   BACKUP_KEEP,

package/dist/index.js

@@ -3,8 +3,8 @@ import {
   dispatchCli,
   ensureDaemonRunning,
   runAdapter
-} from "./chunk-YB7L4SZC.js";
-import "./chunk-DOPJ4OZ4.js";
+} from "./chunk-65FDP6LF.js";
+import "./chunk-Q6SOGGKF.js";
 import "./chunk-MLKGABMK.js";
 export {
   createAdapterServer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modootoday/datalab-extension-mcp",
-  "version": "1.8.10",
+  "version": "1.8.11",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",