@modootoday/datalab-extension-mcp 1.8.10 → 1.8.12

package/README.en.md

@@ -24,11 +24,11 @@ Set this up once per computer.
 
 ## Three steps
 
-| Step              | What                                                            | Where                    |
-| ----------------- | --------------------------------------------------------------- | ------------------------ |
-| **1. Turn it on** | Flip a switch in the extension panel and note the pairing token | DataLab Tools side panel |
-| **2. Install**    | Run one command and paste the token                             | Terminal                 |
-| **3. Verify**     | Ask a test question in your AI app                              | Your AI app              |
+| Step              | What                                             | Where                    |
+| ----------------- | ------------------------------------------------ | ------------------------ |
+| **1. Turn it on** | Flip a switch and note the host management token | DataLab Tools side panel |
+| **2. Install**    | Run one command and paste the token              | Terminal                 |
+| **3. Verify**     | Ask a test question in your AI app               | Your AI app              |
 
 Feel free to read [Safety](#safety) first if you'd like reassurance before starting.
 
@@ -42,32 +42,32 @@ Feel free to read [Safety](#safety) first if you'd like reassurance before start
    >
    > _(When a connected AI app asks, your Naver data is sent to that app and its AI provider's servers.)_
 
-4. When the **"MCP 연결" (MCP connection) card** shows in the panel, you're set. You'll use the **pairing token** on it in the next step — press **[복사]** (copy) to put it on the clipboard now. ([보기] reveals it if you want to see it.)
+4. When the **"MCP 연결" (MCP connection) card** shows in the panel, you're set. You'll use the **MCP host management token** on it in the next step — press **[복사]** (copy) to put it on the clipboard now. ([보기] reveals it if you want to see it.)
 
 > "이 코드는 이 컴퓨터 전용 비밀번호예요. 다른 사람에게 보내지 마세요."
 >
 > _(This code is a password for this computer only. Don't send it to anyone.)_
 
-Avoid sharing a screenshot or the copied setup. If it may have leaked, press **[새 토큰 발급]** (issue a new token) on the card — the old code stops working immediately and a matching setup lands on your clipboard. Paste that into each AI app you had connected.
+Avoid sharing a screenshot or the copied setup. This token belongs only in AI host configuration and workbench management. Browser registration uses separate one-time codes which are never shown again by the panel.
 
 ## Step 2 — Install
 
 One command finds **every** AI app on your computer and connects them automatically. Nothing to do per app.
 
 1. **Open a terminal** — on Windows type `cmd` in the search box → "Command Prompt"; on Mac press `⌘+Space` and type `Terminal`; on Linux open your terminal app (often `Ctrl+Alt+T`).
-2. **Paste this command and press Enter.** (`@1.8.10` is the pinned version, so the connector never changes behind your back.)
+2. **Paste this command and press Enter.** The saved command names an exact bootstrap version. At startup and while idle, the connector checks the canonical release and promotes itself to the current secure, compatible version. Diagnostic environments can opt out with `--no-self-update`.
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.10 install
+   npx -y @modootoday/datalab-extension-mcp@1.8.12 install
    ```
 
    Lines of English scrolling by is normal. This only downloads and runs the connector — it touches nothing else.
 
-3. **Paste the pairing token.** The helper asks:
+3. **Paste the management token.** The helper asks:
 
-   > "복사한 연결 토큰을 여기에 붙여넣어 주세요:"
+   > "복사한 관리 토큰을 여기에 붙여넣어 주세요:"
    >
-   > _(Paste the connection token you copied here:)_
+   > _(Paste the management token you copied here:)_
 
    Paste the token from the Step 1 card and press Enter.
 
@@ -105,7 +105,7 @@ If the command errors with `'npx' is not recognized`, Node.js isn't installed. T
   curl -fsSL https://app.datalab.tools/install/mcp.sh | sh
   ```
 
-When it asks for the pairing token, paste the one from the Step 1 card. If you have no AI app yet, you can also pick one to install right there (choosing is optional).
+When it asks for the management token, paste the one from the Step 1 card. If you have no AI app yet, you can also pick one to install right there (choosing is optional).
 
 > Want to see what it does before running it? Open that URL in a browser — it serves the script itself, in plain text.
 
@@ -130,10 +130,10 @@ Apps it **only prints instructions for** (follow the on-screen guide): VS Code,
 Installing also places the bundled **writing skills**. An AI app reads the name and description of every installed skill on every start, so the more are installed the less room the conversation has. The default therefore places only the ones that work right away.
 
 ```
-npx -y @modootoday/datalab-extension-mcp skills list
-npx -y @modootoday/datalab-extension-mcp skills status
-npx -y @modootoday/datalab-extension-mcp skills attach <name>
-npx -y @modootoday/datalab-extension-mcp skills detach <name>
+npx -y @modootoday/datalab-extension-mcp@1.8.12 skills list
+npx -y @modootoday/datalab-extension-mcp@1.8.12 skills status
+npx -y @modootoday/datalab-extension-mcp@1.8.12 skills attach <name>
+npx -y @modootoday/datalab-extension-mcp@1.8.12 skills detach <name>
 ```
 
 - `list` shows everything in this version, name and description.
@@ -152,12 +152,13 @@ The **workbench** is this computer, where the connector runs. If you use more th
 Make the code from the panel with [등록 코드 만들기], or from the terminal.
 
 ```
-npx -y @modootoday/datalab-extension-mcp browsers add "Work Chrome"
-npx -y @modootoday/datalab-extension-mcp browsers list
-npx -y @modootoday/datalab-extension-mcp browsers revoke <handle>
+npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers add "Work Chrome"
+npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers list
+npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers revoke <handle>
+npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers repair
 ```
 
-`add` **asks you to paste the pairing token** — the same value you used to
+`add` **asks you to paste the management token** — the same value you used to
 install, copied from the panel. It then prints a code **once**. The connector
 keeps only a fingerprint of it, so it cannot show it to you again.
 
@@ -168,6 +169,8 @@ Paste that code into the other browser's side panel, under **이 크롬을 워
   `connected`.
 - After `revoke`, that browser cannot rejoin. To let it back in, **revoke and
   then `add` again** — handing the same browser a new code alone is refused.
+- If `list` asks for registry repair, run `repair`, then issue a fresh registration
+  code only for the affected browser. Healthy browser rows remain in place.
 - With the connector stopped, these commands do nothing and say so. Opening the
   AI app you paired brings it back.
 
@@ -205,7 +208,7 @@ The connector is running with the code its AI app handed it at startup. **[다
 2. Paste it into the AI app's settings
 3. **Fully quit that AI app and start it again** — not just close the window (Windows: tray icon → quit; Mac: `⌘+Q`; Linux: Quit from the app menu)
 
-Step 3 is what brings the connector back up with the new code. **Don't press [새 토큰 발급] (issue a new token) again** — that changes the code once more and puts you right back here.
+Step 3 brings the connector back with the management token stored in the AI app. Browser registration codes are not changed by this procedure.
 
 ### "연결 통로(포트)를 다른 프로그램이 쓰고 있어요."
 
@@ -252,7 +255,7 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 - **When the connection disappears** — run the very command you used at the start once more; it safely re-registers. (Some AI apps clean up their settings file and drop the connection.)
 
   ```
-  npx -y @modootoday/datalab-extension-mcp@1.8.10 install
+  npx -y @modootoday/datalab-extension-mcp@1.8.12 install
   ```
 
 - **`'npx' is not recognized...`** — Node.js isn't installed. The "No Node.js?" one-liner in Step 2 is the simplest fix.
@@ -272,9 +275,9 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 - **Lookups just work; editing is asked for.** Looking data up is immediate. Changing your **Naver draft** or a photo/video editor needs **AI editing** allowed, in the side panel or in settings, and you pick how long that lasts: allow it for this connection and closing the panel turns it back off, or save **always allow** so you don't switch it on again (turned off in the same place). In the draft, that covers setting the title, inserting text, and undo. Replacing the whole body, inserting a photo, closing an editor window, and deleting anything are **not covered by "always allow"** — that setting does not open them. Anything that costs money is opened by no setting at all and is asked about **every single time**.
 - **It never publishes.** Posting or making a draft public is not connected — edits stay in the draft window, and publishing is yours to do.
 - **The connector stores no logins, passwords, or cookies.** It never contacts Naver directly. Every lookup happens inside your own logged-in browser.
-- **It works only inside your computer.** Nothing outside can connect, and it's double-locked: the connection token plus a check that the caller really is your extension.
+- **It works only inside your computer.** Nothing outside can connect, and browser sessions use separate registered credentials plus extension identity checks.
 - **How data moves** — "연결된 AI 앱이 요청하면 네이버 데이터가 해당 앱과 그 AI 제공사 서버로 전달돼요." When the AI app asks, the result goes to that AI provider (e.g. Anthropic) — exactly what you agreed to when turning this on. Retention and training are governed by each provider's policy, so check the privacy policy of the AI app you use.
-- **The version is pinned and never changes behind your back.** When a new version ships, the panel tells you and the choice is yours.
+- **The saved command names an exact bootstrap version.** At startup and while idle, the connector checks the canonical release and promotes itself to the current secure, compatible version. Diagnostic environments can opt out with `--no-self-update`.
 - **The full source is open.** That said, it can't stop malware already running under your own account — this connector's locks control remote and cross-origin access, not an already-compromised host.
 
 ## Removing it
@@ -282,7 +285,7 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 1. Run this in a terminal (it removes the entries registered in your AI apps).
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.10 uninstall
+   npx -y @modootoday/datalab-extension-mcp@1.8.12 uninstall
    ```
 
 2. Turn **MCP 연결** off in the extension settings. The panel is the bridge, so with it off a leftover config line can look nothing up.
@@ -298,7 +301,7 @@ Deleting the extension also renders any leftover connector inert. A leftover lin
 - **Does the ChatGPT website work?** No. Only the installed desktop app connects.
 - **Do I keep it always on?** No. It connects only while the panel is open.
 - **What data does it read?** Blog stats, keywords, ads — what DataLab Tools shows. Scoped to the Naver account you're logged into in Chrome.
-- **Other computers?** Yes, but set it up once per computer; the pairing token is per-computer too.
+- **Other computers?** Yes, but set it up once per computer; the management token is per-computer too.
 </details>
 
 ## Developer appendix
@@ -324,7 +327,7 @@ Deleting the extension also renders any leftover connector inert. A leftover lin
 
 **Architecture** — the connector is a relay with no credentials and no egress. The tool list is served by the extension; the canonical catalog is the store-reviewed extension code. Transport is loopback HTTP+SSE with dual auth (Origin check + token check), and the allowlist — both the read-only half and the tier table that gates every write — is enforced by the extension. Canonical allowlist (with per-item exclusion reasons): <https://github.com/modootoday/datalab-extension-mcp/blob/main/mcp-core/src/allowlist.ts>
 
-**Supply chain** — the public repo is the entire source. npm publishing uses OIDC trusted publishing + provenance, with no long-lived token (`npm audit signatures` verifies). Every install surface pins an exact version, so a compromised distribution path can't push new code to installed users; upgrades always go through the user's explicit choice.
+**Supply chain** — the public repo is the entire source. npm publishing uses OIDC trusted publishing + provenance, with no long-lived token (`npm audit signatures` verifies). Install configuration records an exact bootstrap version, and canonical promotion uses the same attested npm package path.
 
 **License** — MIT ([LICENSE](./LICENSE)).
 

package/README.md

@@ -24,7 +24,7 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
 
 | 단계        | 하는 일                                          | 어디서                   |
 | ----------- | ------------------------------------------------ | ------------------------ |
-| **1. 켜기** | 확장 패널에서 스위치를 켜고 연결 토큰을 확인해요 | 데이터랩툴즈 사이드 패널 |
+| **1. 켜기** | 확장 패널에서 스위치를 켜고 관리 토큰을 확인해요 | 데이터랩툴즈 사이드 패널 |
 | **2. 설치** | 명령 한 줄을 실행하고 토큰을 붙여넣어요          | 터미널                   |
 | **3. 확인** | AI 앱에서 시험 질문을 해 봐요                    | AI 앱                    |
 
@@ -38,28 +38,28 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
 
    > "연결된 AI 앱이 요청하면 네이버 데이터가 해당 앱과 그 AI 제공사 서버로 전달돼요."
 
-4. 패널에 **"MCP 연결" 카드**가 보이면 성공이에요. 다음 단계에서 여기 있는 **연결 토큰**을 씁니다. **[복사]** 버튼을 눌러 복사해 두세요(눈으로 확인하고 싶으면 [보기]).
+4. 패널에 **"MCP 연결" 카드**가 보이면 성공이에요. 다음 단계에서 여기 있는 **MCP 호스트 관리 토큰**을 씁니다. **[복사]** 버튼을 눌러 복사해 두세요(눈으로 확인하고 싶으면 [보기]).
 
 > "이 코드는 이 컴퓨터 전용 비밀번호예요. 다른 사람에게 보내지 마세요."
 
-캡처 공유·채팅 전송은 피해 주세요. 혹시 새어 나간 것 같으면 카드의 **[새 토큰 발급]** 을 누르세요 — 옛 코드가 그 자리에서 무효가 되고, 새 설정이 클립보드에 담겨요. 연결해 둔 AI 앱마다 그 설정을 다시 넣어 주면 됩니다.
+캡처 공유·채팅 전송은 피해 주세요. 이 토큰은 AI 앱 설정과 워크벤치 관리에만 사용하며, 브라우저 등록 칸에는 붙여넣지 마세요. 브라우저마다 별도 등록 코드가 발급되고 그 코드는 패널에 다시 표시되지 않습니다.
 
 ## 2단계 — 설치
 
 명령 한 줄이면 컴퓨터에 있는 AI 앱을 **모두 자동으로** 찾아 연결해 줘요. 앱마다 따로 할 일은 없어요.
 
 1. **터미널을 열어요** — Windows는 검색창에 `cmd` → "명령 프롬프트", Mac은 `⌘+스페이스`로 `터미널`, Linux는 터미널 앱(보통 `Ctrl+Alt+T`)이에요.
-2. **아래 명령을 붙여넣고 Enter를 눌러요.** (`@1.8.10`은 커넥터가 나도 모르게 바뀌지 않도록 고정한 버전이에요.)
+2. **아래 명령을 붙여넣고 Enter를 눌러요.** 저장되는 명령은 정확한 시작 버전을 적습니다. 커넥터는 시작할 때와 유휴 상태에서 정본 릴리스를 확인해 현재의 안전하고 호환되는 버전으로 승격합니다. 진단 환경에서는 `--no-self-update`로 승격을 끌 수 있어요.
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.10 install
+   npx -y @modootoday/datalab-extension-mcp@1.8.12 install
    ```
 
    영어 글자가 여러 줄 올라오는 건 정상이에요. 이 명령은 커넥터를 내려받아 실행할 뿐, 다른 건 건드리지 않아요.
 
-3. **연결 토큰을 붙여넣어요.** 도우미가 이렇게 물어봐요.
+3. **관리 토큰을 붙여넣어요.** 도우미가 이렇게 물어봐요.
 
-   > "복사한 연결 토큰을 여기에 붙여넣어 주세요:"
+   > "복사한 관리 토큰을 여기에 붙여넣어 주세요:"
 
    1단계 카드에서 복사한 토큰을 붙여넣고 Enter를 눌러요.
 
@@ -93,7 +93,7 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
   curl -fsSL https://app.datalab.tools/install/mcp.sh | sh
   ```
 
-중간에 연결 토큰을 물어보면 1단계 카드에서 복사한 토큰을 붙여넣어요. 아직 AI 앱이 하나도 없으면, 원하는 AI 프로그램을 그 자리에서 골라 설치할 수도 있어요(고르는 건 자유예요).
+중간에 관리 토큰을 물어보면 1단계 카드에서 복사한 토큰을 붙여넣어요. 아직 AI 앱이 하나도 없으면, 원하는 AI 프로그램을 그 자리에서 골라 설치할 수도 있어요(고르는 건 자유예요).
 
 > 실행 전에 내용을 확인하고 싶으면 위 주소를 브라우저에 그대로 열어 보세요 — 받아서 실행할 스크립트 원문이 그대로 보여요.
 
@@ -118,10 +118,10 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
 설치할 때 **글쓰기 도움말(스킬)** 도 함께 놓입니다. AI 앱은 켜질 때마다 설치된 도움말의 이름과 설명을 전부 읽기 때문에, 많이 깔수록 대화에 쓸 자리가 줄어들어요. 그래서 기본은 **바로 쓸 수 있는 것만** 놓습니다.
 
 ```
-npx -y @modootoday/datalab-extension-mcp skills list
-npx -y @modootoday/datalab-extension-mcp skills status
-npx -y @modootoday/datalab-extension-mcp skills attach <이름>
-npx -y @modootoday/datalab-extension-mcp skills detach <이름>
+npx -y @modootoday/datalab-extension-mcp@1.8.12 skills list
+npx -y @modootoday/datalab-extension-mcp@1.8.12 skills status
+npx -y @modootoday/datalab-extension-mcp@1.8.12 skills attach <이름>
+npx -y @modootoday/datalab-extension-mcp@1.8.12 skills detach <이름>
 ```
 
 - `list` 는 이 버전에 들어 있는 전부를 이름과 설명으로 보여 줘요.
@@ -140,17 +140,19 @@ npx -y @modootoday/datalab-extension-mcp skills detach <이름>
 패널에서 [등록 코드 만들기]를 눌러도 되고, 터미널을 쓰셔도 돼요.
 
 ```
-npx -y @modootoday/datalab-extension-mcp browsers add "회사 크롬"
-npx -y @modootoday/datalab-extension-mcp browsers list
-npx -y @modootoday/datalab-extension-mcp browsers revoke <handle>
+npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers add "회사 크롬"
+npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers list
+npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers revoke <handle>
+npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers repair
 ```
 
-`add` 를 실행하면 **연결 토큰을 붙여넣으라고 물어봐요** — 설치할 때와 같은 값이고, 패널의 `복사` 버튼으로 얻습니다. 그러면 코드가 **한 번만** 출력돼요. 커넥터는 그 코드를 저장하지 않고 지문만 남기므로 다시 보여 줄 수 없어요.
+`add` 를 실행하면 **관리 토큰을 붙여넣으라고 물어봐요** — 설치할 때와 같은 값이고, 패널의 `복사` 버튼으로 얻습니다. 그러면 브라우저 등록 코드가 **한 번만** 출력돼요. 커넥터는 그 코드를 저장하지 않고 지문만 남기므로 다시 보여 줄 수 없어요.
 
 만든 코드는 올릴 크롬의 사이드 패널 → **이 크롬을 워크벤치에 올리기** 에 붙여넣습니다. 그 브라우저는 자기 코드를 따로 만들지 않아요.
 
 - `list` 는 `waiting`(코드는 만들었지만 아직 아무도 안 붙음)과 `connected` 를 구분해서 보여 줘요.
 - `revoke` 뒤에는 그 브라우저가 다시 붙지 못해요. 다시 넣으려면 **`revoke` 한 뒤 새로 `add`** 하세요 — 같은 브라우저에 코드만 새로 줘도 거절돼요.
+- `list` 가 등록부 복구를 안내하면 `repair`를 실행한 뒤, 영향받은 브라우저에 등록 코드를 새로 발급해 붙여넣으세요. 정상 등록은 유지됩니다.
 - 커넥터가 꺼져 있으면 이 명령은 아무것도 하지 않고 그렇게 말해요. 연결해 둔 AI 앱을 켜면 커넥터가 함께 살아납니다.
 
 ## 문제해결
@@ -179,7 +181,7 @@ AI 앱이 켜질 때 받은 옛 코드로 커넥터가 돌고 있어서 그래
 2. 그 내용을 AI 앱 설정에 붙여넣은 뒤
 3. **그 AI 앱을 완전히 종료했다가 다시 켜요** (창 닫기 말고 — Windows 트레이 종료 / Mac `⌘+Q` / Linux 앱 메뉴 Quit)
 
-3번까지 해야 커넥터가 새 코드로 다시 떠요. **[새 토큰 발급]을 다시 누르지 마세요** — 코드가 또 바뀌어서 같은 상황이 반복돼요.
+3번까지 해야 커넥터가 AI 앱 설정에 저장된 관리 토큰으로 다시 떠요. 브라우저 등록 코드는 이 과정에서 바꾸지 않습니다.
 
 ### "연결 통로(포트)를 다른 프로그램이 쓰고 있어요."
 
@@ -220,7 +222,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 - **연결이 사라졌을 때** — 처음 실행했던 그 명령을 한 번 더 실행하면 안전하게 다시 등록돼요. (일부 AI 앱이 설정 파일을 정리하며 연결을 지우기도 해요.)
 
   ```
-  npx -y @modootoday/datalab-extension-mcp@1.8.10 install
+  npx -y @modootoday/datalab-extension-mcp@1.8.12 install
   ```
 
 - **`'npx'을(는) 내부 또는 외부 명령...`** — Node.js가 없는 거예요. 위 2단계의 "Node.js가 없다면" 한 줄 설치가 가장 간단해요.
@@ -240,9 +242,9 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 - **조회는 그냥 되고, 고치는 건 허락받아요.** 데이터 조회는 바로 돼요. **네이버 글쓰기 창**과 사진·영상 편집기의 내용을 고치려면 사이드패널이나 설정에서 **AI 편집 허용**을 켜야 해요. 두 가지 중에 고르면 됩니다 — 이번 연결에만 켜면 패널을 닫을 때 다시 꺼지고, **항상 허용**으로 저장하면 매번 켜지 않아도 돼요(끄는 것도 같은 자리에서 합니다). 글쓰기 창에서는 제목·본문 넣기와 되돌리기가 열려요. 본문을 통째로 바꾸거나 사진을 넣는 것, 편집기 창을 닫는 것, 지우기는 **항상 허용에 포함되지 않아요** — 그 설정으로는 열리지 않습니다. 요금이 드는 기능은 어떤 설정으로도 열리지 않고, 실행 전에 **매번** 물어봐요.
 - **발행은 하지 않아요.** 글을 올리거나 공개하는 기능은 연결되지 않습니다 — 고친 내용은 글쓰기 창에 남고, 올릴지는 사용자가 직접 정해요.
 - **아이디·비밀번호·쿠키를 저장하지 않아요.** 네이버에 직접 접속하지도 않아요. 모든 조회는 내가 로그인해 둔 내 브라우저 안에서 일어나요.
-- **내 컴퓨터 안에서만 동작해요.** 밖에서는 접속할 수 없고, 연결 토큰과 확장 확인이라는 이중 잠금이 걸려 있어요.
+- **내 컴퓨터 안에서만 동작해요.** 밖에서는 접속할 수 없고, 관리 토큰과 확장 확인이라는 이중 잠금이 걸려 있어요.
 - **데이터가 나가는 방식** — "연결된 AI 앱이 요청하면 네이버 데이터가 해당 앱과 그 AI 제공사 서버로 전달돼요." 이게 AI가 답하는 방식이라 처음 켤 때 미리 동의를 받아요. 전달된 데이터를 얼마나 보관·학습하는지는 각 AI 제공사 정책을 따르니, 쓰시는 AI 앱의 개인정보 정책을 확인해 주세요.
-- **버전은 고정되어 몰래 바뀌지 않아요.** 새 버전이 나오면 패널이 알려주고, 바꿀지는 사용자가 정해요.
+- **설정에는 정확한 버전이 기록되고, 실행 시 안전한 최신 버전을 확인해요.** 커넥터는 시작할 때와 유휴 상태에서 정본 버전을 확인해 최신 보안·호환 버전으로 승격합니다. 특정 버전을 유지해야 하는 진단 환경은 `--no-self-update`를 사용할 수 있어요.
 - **소스가 전부 공개된 오픈소스예요.** 다만 이미 같은 권한으로 실행 중인 악성코드까지 막아 주지는 못해요 — 이 커넥터의 잠금은 원격·타 출처 접근을 막는 장치예요.
 
 ## 해지
@@ -250,7 +252,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 1. 터미널에서 아래 명령을 실행해요(AI 앱에 등록된 설정을 지워 줘요).
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.10 uninstall
+   npx -y @modootoday/datalab-extension-mcp@1.8.12 uninstall
    ```
 
 2. 확장 설정에서 **MCP 연결을 꺼요.** 패널이 브릿지라, 꺼 두면 어딘가 설정 줄이 남아 있어도 AI 앱이 아무것도 조회할 수 없어요.
@@ -266,7 +268,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 - **ChatGPT 웹사이트에서도 되나요?** 아니요. 컴퓨터에 설치한 데스크톱 앱만 연결돼요.
 - **항상 켜 둬야 하나요?** 아니요. 패널이 열려 있을 때만 연결돼요.
 - **어떤 데이터를 읽나요?** 블로그 통계·키워드·광고 등 데이터랩툴즈가 보여 주는 것들이에요. 기준은 지금 Chrome에 로그인해 둔 네이버 계정이에요.
-- **다른 컴퓨터에서도 되나요?** 네. 컴퓨터마다 한 번씩 설치하고, 연결 토큰도 컴퓨터마다 따로예요.
+- **다른 컴퓨터에서도 되나요?** 네. 컴퓨터마다 한 번씩 설치하고, 관리 토큰도 컴퓨터마다 따로예요.
 </details>
 
 ## 개발자 부록
@@ -290,9 +292,9 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 
 **실패 응답** — 도구 호출 실패는 프로토콜 오류가 아니라 `isError` 결과로 오고, 본문은 성공과 같은 JSON입니다(`ok` / `reason` / `message` / `retryable`, 기다리면 풀리는 경우 `retryAfterMs`). 실패 코드 전체 목록과 각각의 재시도 여부 정본: <https://github.com/modootoday/datalab-extension-mcp/blob/main/mcp-core/src/errors.ts>
 
-**아키텍처** — 커넥터는 자격증명도 egress도 없는 릴레이입니다. 도구 목록은 확장이 서빙하며 카탈로그 정본은 스토어 심사를 받는 확장 코드입니다. 전송은 루프백 HTTP+SSE이며 Origin 검증과 토큰 검증의 이중 인증을 거치고, 도구 등급 표(조회 / 편집 / 파괴적 / 유료 / 미개방)는 확장 쪽에서 집행됩니다 — 목록에 없는 이름은 거부되고, 파괴적·유료는 세션 허용으로 건너뛸 수 없습니다 — 사용자 절의 "확장 확인"과 "연결 토큰"이 각각에 해당합니다. allowlist 전문(제외 사유 포함)의 정본: <https://github.com/modootoday/datalab-extension-mcp/blob/main/mcp-core/src/allowlist.ts>
+**아키텍처** — 커넥터는 자격증명도 egress도 없는 릴레이입니다. 도구 목록은 확장이 서빙하며 카탈로그 정본은 스토어 심사를 받는 확장 코드입니다. 전송은 루프백 HTTP+SSE이며 Origin 검증과 브라우저별 세션 검증을 거치고, 도구 등급 표(조회 / 편집 / 파괴적 / 유료 / 미개방)는 확장 쪽에서 집행됩니다 — 목록에 없는 이름은 거부되고, 파괴적·유료는 세션 허용으로 건너뛸 수 없습니다. allowlist 전문(제외 사유 포함)의 정본: <https://github.com/modootoday/datalab-extension-mcp/blob/main/mcp-core/src/allowlist.ts>
 
-**공급망** — 공개 저장소가 전체 소스입니다. npm 발행은 OIDC trusted publishing + provenance로 이루어지고 장기 발행 토큰은 쓰지 않습니다(`npm audit signatures`로 검증 가능). 모든 설치 표면은 정확 버전을 핀하므로, 배포 경로가 손상돼도 새 코드가 자동으로 흘러들지 않고 업그레이드는 항상 사용자의 명시적 선택을 거칩니다.
+**공급망** — 공개 저장소가 전체 소스입니다. npm 발행은 OIDC trusted publishing + provenance로 이루어지고 장기 발행 토큰은 쓰지 않습니다(`npm audit signatures`로 검증 가능). 설치 설정은 정확한 bootstrap 버전을 기록하고, 커넥터는 정본 릴리스로 승격할 때도 같은 검증된 npm 패키지 경로를 사용합니다.
 
 **라이선스** — MIT ([LICENSE](./LICENSE)).
 

package/dist/{browsers-AGEUPMJA.js → browsers-4L3WAODH.js}

@@ -1,12 +1,12 @@
 import {
   DEFAULT_HOST,
   DEFAULT_PORT
-} from "./chunk-DOPJ4OZ4.js";
+} from "./chunk-YBNNWQMB.js";
 import {
   TOKEN_PROMPT_GUIDE,
   TOKEN_PROMPT_QUESTION,
   TOKEN_REQUIRED_NON_INTERACTIVE
-} from "./chunk-5S7RFXIU.js";
+} from "./chunk-CQRDBJXM.js";
 import "./chunk-MLKGABMK.js";
 
 // src/browsers.ts
@@ -105,7 +105,7 @@ async function runBrowsers(argv, deps) {
       return 0;
     }
     for (const row of rows) {
-      const state = row.browserId === null ? "waiting" : "connected";
+      const state = row.browserId === null ? "waiting" : row.connected === true ? "connected" : "detached";
       deps.out(`${row.handle}  ${state.padEnd(9)}  ${row.label}`);
     }
     return 0;

package/dist/{chunk-5S7RFXIU.js → chunk-CQRDBJXM.js}

@@ -1109,16 +1109,16 @@ async function removeSkills(io, detectedIds, slugs) {
 var RESTART_NOTICE = "\uB9C8\uC9C0\uB9C9 \uD55C \uB2E8\uACC4: AI \uC571\uC744 \uC644\uC804\uD788 \uC885\uB8CC\uD588\uB2E4\uAC00 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.\n(Windows: \uC791\uC5C5 \uD45C\uC2DC\uC904 \uD2B8\uB808\uC774 \uC544\uC774\uCF58\uC5D0\uC11C \uC885\uB8CC)";
 var NOTHING_CHANGED = "\uC544\uBB34\uAC83\uB3C4 \uBC14\uAFB8\uC9C0 \uC54A\uC558\uC5B4\uC694.";
 var UNINSTALL_DONE = "\uC815\uB9AC\uAC00 \uB05D\uB0AC\uC5B4\uC694.";
-var UNINSTALL_TOKEN_REMINDER = "\uC5F0\uACB0 \uD1A0\uD070\uAE4C\uC9C0 \uC5C6\uC560\uB824\uBA74 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC5D0\uC11C '\uC5F0\uB3D9 \uD574\uC81C' \uBC84\uD2BC\uC744 \uB20C\uB7EC \uC8FC\uC138\uC694. \uD3D0\uAE30\uB41C \uD1A0\uD070\uC740 \uC124\uC815\uC5D0 \uB0A8\uC740 \uD56D\uBAA9\uC744 \uC804\uBD80 \uBB34\uB825\uD654\uD574\uC694.";
+var UNINSTALL_TOKEN_REMINDER = "\uC774 \uBE0C\uB77C\uC6B0\uC800\uC758 \uB85C\uCEEC \uC5F0\uACB0 \uC815\uBCF4\uB3C4 \uC9C0\uC6B0\uB824\uBA74 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC5D0\uC11C '\uC774 \uBE0C\uB77C\uC6B0\uC800 \uC5F0\uACB0 \uB044\uAE30'\uB97C \uB20C\uB7EC \uC8FC\uC138\uC694. \uC6CC\uD06C\uBCA4\uCE58 \uB4F1\uB85D\uC740 \uBE0C\uB77C\uC6B0\uC800 \uBAA9\uB85D\uC5D0\uC11C \uBCC4\uB3C4\uB85C \uB0B4\uB9B4 \uC218 \uC788\uC5B4\uC694.";
 var PERMISSION_DENIED_HINT = "\uD30C\uC77C \uAD8C\uD55C \uB54C\uBB38\uC5D0 \uC124\uC815\uC744 \uC4F8 \uC218 \uC5C6\uC5C8\uC5B4\uC694. \uD30C\uC77C \uAD8C\uD55C\uC744 \uD655\uC778\uD55C \uB4A4 \uAC19\uC740 \uBA85\uB839\uC5B4\uB97C \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.";
 var NO_HOSTS_DETECTED = "\uC5F0\uACB0\uD560 \uC218 \uC788\uB294 AI \uD504\uB85C\uADF8\uB7A8\uC744 \uCC3E\uC9C0 \uBABB\uD588\uC5B4\uC694.";
 var SUPPORTED_APPS_HEADER = "\uC9C0\uC6D0\uD558\uB294 \uD504\uB85C\uADF8\uB7A8\uACFC \uB2E4\uC6B4\uB85C\uB4DC \uC8FC\uC18C\uC608\uC694:";
 var AFTER_INSTALL_RETRY = "\uD504\uB85C\uADF8\uB7A8\uC744 \uC124\uCE58\uD55C \uB4A4 \uAC19\uC740 \uBA85\uB839\uC5B4\uB97C \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.";
 var ALREADY_INSTALLED_HINT = "\uC774\uBBF8 \uC124\uCE58\uD588\uB294\uB370 \uBAA9\uB85D\uC5D0 \uC5C6\uB2E4\uBA74, \uC124\uC815 \uD30C\uC77C\uC774 \uC544\uC9C1 \uB9CC\uB4E4\uC5B4\uC9C0\uC9C0 \uC54A\uC558\uC744 \uC218 \uC788\uC5B4\uC694. \uC124\uC815 \uD30C\uC77C\uC740 \uD504\uB85C\uADF8\uB7A8\uC744 \uC124\uCE58\uD560 \uB54C\uAC00 \uC544\uB2C8\uB77C \uCC98\uC74C \uC4F8 \uB54C \uB9CC\uB4E4\uC5B4\uC838\uC694:\n  - ChatGPT \uB370\uC2A4\uD06C\uD1B1: \uC124\uC815 \u2192 MCP \uC11C\uBC84 \u2192 \uC11C\uBC84 \uCD94\uAC00\uB97C \uD55C \uBC88 \uC2E4\uD589\n  - VS Code: \uBA85\uB839 \uD314\uB808\uD2B8(Ctrl+Shift+P) \u2192 'MCP: Open User Configuration' \uC2E4\uD589\n\uADF8 \uB4A4 \uAC19\uC740 \uBA85\uB839\uC5B4\uB97C \uB2E4\uC2DC \uC2E4\uD589\uD558\uBA74 \uCC3E\uC744 \uC218 \uC788\uC5B4\uC694.";
-var TOKEN_PROMPT_GUIDE = "\uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uC0AC\uC774\uB4DC \uD328\uB110\uC744 \uC5F4\uACE0 'MCP \uC5F0\uACB0' \uCE74\uB4DC\uC758 \uC5F0\uACB0 \uD1A0\uD070\uC744 \uBCF5\uC0AC\uD574 \uC8FC\uC138\uC694.";
-var TOKEN_PROMPT_QUESTION = "\uBCF5\uC0AC\uD55C \uC5F0\uACB0 \uD1A0\uD070\uC744 \uC5EC\uAE30\uC5D0 \uBD99\uC5EC\uB123\uC5B4 \uC8FC\uC138\uC694:";
+var TOKEN_PROMPT_GUIDE = "\uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uC0AC\uC774\uB4DC \uD328\uB110\uC744 \uC5F4\uACE0 'MCP \uC5F0\uACB0'\uC758 MCP \uD638\uC2A4\uD2B8 \uAD00\uB9AC \uD1A0\uD070\uC744 \uBCF5\uC0AC\uD574 \uC8FC\uC138\uC694.";
+var TOKEN_PROMPT_QUESTION = "\uBCF5\uC0AC\uD55C \uAD00\uB9AC \uD1A0\uD070\uC744 \uC5EC\uAE30\uC5D0 \uBD99\uC5EC\uB123\uC5B4 \uC8FC\uC138\uC694:";
 var TOKEN_PROMPT_RETRY = "\uD1A0\uD070 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC544\uC694. \uCE74\uB4DC\uC758 \uD1A0\uD070\uC744 \uB2E4\uC2DC \uBCF5\uC0AC\uD574\uC11C \uBD99\uC5EC\uB123\uC5B4 \uC8FC\uC138\uC694.";
-var TOKEN_REQUIRED_NON_INTERACTIVE = "\uC5F0\uACB0 \uD1A0\uD070\uC774 \uD544\uC694\uD574\uC694. \uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uC0AC\uC774\uB4DC \uD328\uB110\uC744 \uC5F4\uACE0 'MCP \uC5F0\uACB0' \uCE74\uB4DC\uC758 [\uC124\uCE58 \uBA85\uB839 \uBCF5\uC0AC] \uBC84\uD2BC\uC744 \uB20C\uB7EC, \uBCF5\uC0AC\uB41C \uBA85\uB839\uC744 \uADF8\uB300\uB85C \uBD99\uC5EC\uB123\uC5B4 \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.";
+var TOKEN_REQUIRED_NON_INTERACTIVE = "\uAD00\uB9AC \uD1A0\uD070\uC774 \uD544\uC694\uD574\uC694. \uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uC0AC\uC774\uB4DC \uD328\uB110\uC744 \uC5F4\uACE0 'MCP \uC5F0\uACB0'\uC758 [\uC124\uCE58 \uBA85\uB839 \uBCF5\uC0AC] \uBC84\uD2BC\uC744 \uB20C\uB7EC, \uBCF5\uC0AC\uB41C \uBA85\uB839\uC744 \uADF8\uB300\uB85C \uBD99\uC5EC\uB123\uC5B4 \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.";
 var CLI_OFFER_INTRO = "\uC6D0\uD558\uC2DC\uBA74 \uC544\uB798 AI \uD504\uB85C\uADF8\uB7A8 \uC911 \uD558\uB098\uB97C \uC9C0\uAE08 \uBC14\uB85C \uC124\uCE58\uD560 \uC218 \uC788\uC5B4\uC694. Node.js \uAE30\uBC18\uC774\uB77C \uC774 \uC790\uB9AC\uC5D0\uC11C \uC124\uCE58\uB3FC\uC694 \u2014 \uC548 \uD558\uC154\uB3C4 \uAD1C\uCC2E\uC544\uC694.";
 var CLI_OFFER_SKIP_LABEL = "0. \uC9C0\uAE08\uC740 \uC124\uCE58\uD558\uC9C0 \uC54A\uAE30";
 var CLI_OFFER_QUESTION = "\uC124\uCE58\uD560 \uD504\uB85C\uADF8\uB7A8\uC758 \uBC88\uD638\uB97C \uC785\uB825\uD574 \uC8FC\uC138\uC694";

package/dist/{chunk-DOPJ4OZ4.js → chunk-YBNNWQMB.js}

@@ -1,4 +1,4 @@
-// ../mcp-server/dist/chunk-Q4ALBPO7.js
+// ../mcp-server/dist/chunk-XKX4SOFG.js
 import { createHash } from "crypto";
 import { createHash as createHash2, randomUUID } from "crypto";
 import { mkdir, readFile, readdir, rm, writeFile } from "fs/promises";
@@ -14439,6 +14439,11 @@ var HelloSchema = external_exports.object({
 var BRIDGE_AUTH_CAPABILITY = "bridge-auth-bearer";
 var BROWSER_ROUTING_CAPABILITY = "browser-routing-v1";
 var LOCAL_FILE_REQUEST_CAPABILITY = "local-file-request-v1";
+var REQUIRED_BROWSER_CAPABILITIES = Object.freeze([
+  BRIDGE_AUTH_CAPABILITY,
+  BROWSER_ROUTING_CAPABILITY,
+  LOCAL_FILE_REQUEST_CAPABILITY
+]);
 function bearerToken(header) {
   if (typeof header !== "string") return null;
   const match = /^Bearer (.+)$/i.exec(header.trim());
@@ -14464,7 +14469,9 @@ var HelloNackReasonSchema = external_exports.enum([
   /** This browser already has an active event stream. */
   "session_active",
   /** Root authority cannot open a browser session. */
-  "browser_registration_required"
+  "browser_registration_required",
+  /** This panel predates mandatory browser routing and file permits. */
+  "browser_capability_required"
 ]);
 var BrowserRoutingSchema = external_exports.object({
   targetBrowserId: external_exports.string(),
@@ -15024,6 +15031,7 @@ var REASON_POLICY = Object.freeze({
   // --- The request itself must change ---
   unknown_tool: Object.freeze({ retryable: false }),
   invalid_args: Object.freeze({ retryable: false }),
+  browser_required: Object.freeze({ retryable: false }),
   tool_closed: Object.freeze({ retryable: false }),
   missing_in_build: Object.freeze({ retryable: false }),
   // ---  A human must act; re-calling only nags them ---
@@ -15492,7 +15500,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
   panelClosed: "\uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC774 \uB2EB\uD600 \uC788\uC5B4\uC694. \uD06C\uB86C\uC744 \uC5F4\uACE0 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC744 \uC5F4\uC5B4 \uB450\uBA74 \uBC14\uB85C \uB3D9\uC791\uD574\uC694.",
   /** The panel accepted the call but never answered inside the deadline. */
   toolTimeout: "\uBE0C\uB77C\uC6B0\uC800 \uC751\uB2F5\uC774 \uB2A6\uC5B4\uC9C0\uACE0 \uC788\uC5B4\uC694. \uD06C\uB86C\uC5D0\uC11C \uB124\uC774\uBC84\uC5D0 \uB85C\uADF8\uC778\uB418\uC5B4 \uC788\uB294\uC9C0 \uD655\uC778\uD558\uACE0 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
-  /** The session hit the per-session rate limit. */
+  /** The daemon request budget is empty. */
   rateLimited: "\uC694\uCCAD\uC774 \uB108\uBB34 \uC7A6\uC544\uC694. \uC7A0\uAE50 \uAE30\uB2E4\uB838\uB2E4\uAC00 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
   /**
    * The local connector accepted nothing back inside its ceiling. Distinct
@@ -15504,7 +15512,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
 var BRIDGE_AGENT_HINT = Object.freeze({
   /** Panel closed / not connected — the panel must be open for any tool to run. */
   notConnected: "The Datalab extension side panel is not open, so this tool cannot run right now. Ask the user to open the extension side panel in their browser, then call this tool again.",
-  /** Per-session rate limit tripped — transient. */
+  /** Daemon-wide rate limit tripped — transient. */
   rateLimited: "This tool is temporarily rate-limited. Wait a few seconds, then call it again.",
   /** The local connector did not answer at all — retrying immediately will not help. */
   connectorStuck: "The local connector stopped responding, so this tool cannot run right now. Do not retry immediately; ask the user to turn the MCP connection off and on again in the extension side panel."
@@ -15634,7 +15642,6 @@ var Bridge = class {
   #idTag = daemonIdTag();
   #sessionSeq = 0;
   #defaultKey = null;
-  #retireSession = null;
   #bucketTokens = 0;
   #bucketRefilledAt = 0;
   // Last catalog the panel reported, kept across disconnects: many hosts cache
@@ -15643,12 +15650,9 @@ var Bridge = class {
   #cachedTools = [];
   constructor(deps) {
     this.#deps = deps;
-  }
-  bindRetireSession(retire) {
-    if (this.#retireSession !== null) {
-      throw new Error("bridge transport retirement is already bound");
-    }
-    this.#retireSession = retire;
+    const limit = deps.rateLimit ?? DEFAULT_RATE_LIMIT;
+    this.#bucketTokens = limit.capacity;
+    this.#bucketRefilledAt = (deps.now ?? Date.now)();
   }
   /**
    * The session a request with no browser named goes to. Map preserves
@@ -15674,7 +15678,7 @@ var Bridge = class {
    */
   connectedBrowsers() {
     const keys = [...this.#sessions.values()].filter((entry) => entry.streamActive).map((entry) => entry.key);
-    const primary = this.#defaultKey === null ? this.#primary()?.key ?? null : this.#defaultKey;
+    const primary = this.#primary()?.key ?? null;
     return keys.map((id) => ({
       id,
       name: this.#deps.browserLabels.get(id) ?? null,
@@ -15946,6 +15950,32 @@ var Bridge = class {
         message: idCheck.message
       };
     }
+    const negotiated = negotiateProtocol(parsed.data.protocolVersions);
+    if (!negotiated.ok) {
+      return {
+        t: "hello_nack",
+        reason: negotiated.reason,
+        supported: negotiated.supported,
+        message: negotiated.message
+      };
+    }
+    const bearerRequired = parsed.data.capabilities.includes(
+      BRIDGE_AUTH_CAPABILITY
+    );
+    const routingRequired = parsed.data.capabilities.includes(
+      BROWSER_ROUTING_CAPABILITY
+    );
+    const fileRequestBound = parsed.data.capabilities.includes(
+      LOCAL_FILE_REQUEST_CAPABILITY
+    );
+    if (!bearerRequired || !routingRequired || !fileRequestBound) {
+      return {
+        t: "hello_nack",
+        reason: "browser_capability_required",
+        supported: [],
+        message: "This browser panel is outdated. Close and reopen the side panel before reconnecting."
+      };
+    }
     const tokenHash = digestToken(parsed.data.token);
     const browserId = parsed.data.browserId;
     if (browserId !== void 0 && browserId.length > 0 && !this.#deps.claimedBrowsers.has(browserId)) {
@@ -15974,19 +16004,15 @@ var Bridge = class {
         message: "The root token is management-only. Register this browser with its own token."
       };
     }
-    const negotiated = negotiateProtocol(parsed.data.protocolVersions);
-    if (!negotiated.ok) {
-      return {
-        t: "hello_nack",
-        reason: negotiated.reason,
-        supported: negotiated.supported,
-        message: negotiated.message
-      };
-    }
     const key = credential.browserId;
     const held = this.#sessions.get(key);
     if (held?.streamActive) {
-      this.#retireSession?.(key, held.session.sessionId);
+      return {
+        t: "hello_nack",
+        reason: "session_active",
+        supported: [],
+        message: "This browser already has an active side-panel session."
+      };
     }
     const session = {
       // A counter, not a timestamp: a panel reload produces two handshakes
@@ -15996,28 +16022,17 @@ var Bridge = class {
       protocolVersion: negotiated.version,
       extensionVersion: parsed.data.extensionVersion
     };
-    const routingRequired = credential.kind === "claimed" && parsed.data.capabilities.includes(BROWSER_ROUTING_CAPABILITY);
-    const fileRequestBound = parsed.data.capabilities.includes(
-      LOCAL_FILE_REQUEST_CAPABILITY
-    );
     this.#installSession(key, session, {
       tokenHash,
       routingRequired,
       fileRequestBound
     });
-    const limit = this.#deps.rateLimit ?? DEFAULT_RATE_LIMIT;
-    this.#bucketTokens = limit.capacity;
-    this.#bucketRefilledAt = (this.#deps.now ?? Date.now)();
     return {
       t: "hello_ack",
       protocolVersion: negotiated.version,
       serverVersion: this.#deps.serverVersion,
       sessionId: session.sessionId,
-      capabilities: [
-        BRIDGE_AUTH_CAPABILITY,
-        ...routingRequired ? [BROWSER_ROUTING_CAPABILITY] : [],
-        ...fileRequestBound ? [LOCAL_FILE_REQUEST_CAPABILITY] : []
-      ]
+      capabilities: [...REQUIRED_BROWSER_CAPABILITIES]
     };
   }
   /**
@@ -16209,7 +16224,7 @@ var Bridge = class {
     };
   }
   /**
-   * Refill-then-take on the session's token bucket. The refill is computed
+   * Refill-then-take on the daemon's token bucket. The refill is computed
    * lazily on each take, so there is no timer to leak and an injected clock
    * keeps it testable without waiting real seconds.
    */
@@ -16823,7 +16838,15 @@ async function handleMcpRequest(bridge, body, accept, stage) {
     }
     if (params.name === BROWSERS_TOOL) {
       const registryStatus = bridge.browserRegistryStatus();
-      const { state: registryState, ...registryDetail } = registryStatus;
+      const { state: registryState } = registryStatus;
+      const registryDetail = registryStatus.state === "degraded" ? {
+        error: registryStatus.error,
+        quarantinedHandles: registryStatus.quarantinedHandles,
+        recovery: registryStatus.recovery
+      } : registryStatus.state === "disabled" ? {
+        error: registryStatus.error,
+        detail: registryStatus.detail
+      } : {};
       const payload = {
         browsers: bridge.connectedBrowsers(),
         registryStatus: registryState,
@@ -17137,13 +17160,6 @@ function createHttpBridge(opts) {
     opts.bridge.disconnect(key);
     if (wasPrimary) scheduleToolsDrop();
   };
-  opts.bridge.bindRetireSession((key, sessionId) => {
-    const stream = streams.get(key);
-    if (!stream || stream.sessionId !== sessionId) return;
-    const wasPrimary = key === opts.bridge.sessionKey;
-    removeStream(key)?.end();
-    if (wasPrimary) scheduleToolsDrop();
-  });
   const server = createServer((req, res) => {
     const url2 = new URL(req.url ?? "/", `http://${host}`);
     const origin = req.headers.origin;
@@ -17276,6 +17292,7 @@ function createHttpBridge(opts) {
         json2(res, 404, { error: "not found" });
         return;
       }
+      res.setHeader("cache-control", "no-store");
       void readJson(req, MAX_BODY_BYTES).then(async (body) => {
         const b = body;
         if (!opts.bridge.verifyRootToken(
@@ -17286,9 +17303,16 @@ function createHttpBridge(opts) {
         }
         const action = b?.["action"];
         if (action === "list") {
+          const active = new Set(
+            opts.bridge.connectedBrowsers().map((row) => row.id)
+          );
+          const browsers = (await registry2.list()).map((row) => ({
+            ...row,
+            connected: row.browserId !== null && active.has(row.browserId)
+          }));
           json2(res, 200, {
             ok: true,
-            browsers: await registry2.list(),
+            browsers,
             registryStatus: registry2.status()
           });
           return;
@@ -17310,6 +17334,20 @@ function createHttpBridge(opts) {
           json2(res, 200, { ok: true, ...await registry2.repair() });
           return;
         }
+        if (action === "repair_registration") {
+          const browserId = typeof b?.["browserId"] === "string" ? b["browserId"] : "";
+          const label = typeof b?.["label"] === "string" ? b["label"] : void 0;
+          const repaired = await registry2.repairRegistration(
+            browserId,
+            label
+          );
+          json2(res, 200, {
+            ok: true,
+            ...repaired,
+            registryStatus: registry2.status()
+          });
+          return;
+        }
         json2(res, 400, { error: "unknown action" });
       }).catch((err) => {
         const why = err instanceof Error ? err.message : String(err);
@@ -17854,24 +17892,54 @@ function matches(claim, handle) {
 function createBrowserRegistry(opts) {
   const now = opts.now ?? (() => /* @__PURE__ */ new Date());
   const revoked = /* @__PURE__ */ new Set();
-  const readCurrent = () => {
-    const read = readLedger(opts.path);
-    if (read.state === "unreadable") {
-      throw new Error(`browser registry is unreadable: ${read.reason}`);
-    }
-    const rows = read.state === "ok" ? [...read.rows] : [];
-    if (!opts.forbiddenTokenHash) return { rows, quarantined: [] };
-    const quarantined = rows.filter(
+  const initial = readLedger(opts.path);
+  const unreadable = initial.state === "unreadable" ? initial.reason : null;
+  let rows = initial.state === "ok" ? initial.rows.map((row) => ({ ...row })) : [];
+  let mutationTail = Promise.resolve();
+  let pendingMutations = 0;
+  const view = (source = rows) => {
+    if (unreadable !== null) {
+      throw new Error(`browser registry is unreadable: ${unreadable}`);
+    }
+    if (!opts.forbiddenTokenHash) return { rows: [...source], quarantined: [] };
+    const quarantined = source.filter(
       (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
     );
     return {
-      rows: rows.filter(
+      rows: source.filter(
         (row) => !timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
       ),
       quarantined
     };
   };
-  const current = () => readCurrent().rows;
+  const current = () => view().rows;
+  const serialize = (work) => {
+    pendingMutations += 1;
+    const result = mutationTail.then(work, work);
+    mutationTail = result.then(
+      () => {
+        pendingMutations -= 1;
+      },
+      () => {
+        pendingMutations -= 1;
+      }
+    );
+    return result;
+  };
+  const transact = (propose) => {
+    if (unreadable !== null) {
+      return Promise.reject(
+        new Error(`browser registry is unreadable: ${unreadable}`)
+      );
+    }
+    return serialize(async () => {
+      const proposal = propose(rows.map((row) => ({ ...row })));
+      await writeLedger(opts.path, proposal.next);
+      rows = proposal.next;
+      proposal.commit?.();
+      return proposal.result;
+    });
+  };
   return {
     async add(label) {
       const token = mintToken();
@@ -17881,8 +17949,10 @@ function createBrowserRegistry(opts) {
         label,
         createdAt: now().toISOString()
       };
-      await writeLedger(opts.path, [...current(), claim]);
-      return { handle: handleOf(claim), token };
+      return transact((snapshot) => ({
+        next: [...snapshot, claim],
+        result: { handle: handleOf(claim), token }
+      }));
     },
     async list() {
       return current().map((claim) => ({
@@ -17893,6 +17963,7 @@ function createBrowserRegistry(opts) {
       }));
     },
     claim(browserId, tokenHash) {
+      if (pendingMutations > 0) return false;
       if (opts.claimed.has(browserId)) return false;
       for (const held of opts.claimed.values()) {
         if (timingSafeEqual(held, tokenHash)) return false;
@@ -17907,50 +17978,128 @@ function createBrowserRegistry(opts) {
         (claim) => claim.browserId === null && timingSafeEqual(claim.tokenHash, tokenHash)
       );
       if (!row) return false;
-      row.browserId = browserId;
+      const stored = rows.find((claim) => claim.tokenHash === row.tokenHash);
+      if (!stored) return false;
+      stored.browserId = browserId;
       opts.claimed.set(browserId, row.tokenHash);
-      void writeLedger(opts.path, claims).catch(() => {
-      });
+      opts.onClaim?.(browserId, stored.label);
+      const snapshot = rows.map((entry) => ({ ...entry }));
+      void serialize(async () => {
+        try {
+          await writeLedger(opts.path, snapshot);
+        } catch (error51) {
+          if (stored.browserId === browserId) stored.browserId = null;
+          if (opts.claimed.get(browserId) === row.tokenHash) {
+            opts.claimed.delete(browserId);
+            opts.onRevoke?.(browserId);
+          }
+          throw error51;
+        }
+      }).catch(() => void 0);
       return true;
     },
     async revoke(handle) {
-      const claims = current();
-      const kept = claims.filter((claim) => !matches(claim, handle));
-      if (kept.length === claims.length) return false;
-      await writeLedger(opts.path, kept);
-      for (const claim of claims) {
-        if (!matches(claim, handle)) continue;
-        revoked.add(claim.tokenHash);
-        if (claim.browserId !== null) {
-          opts.claimed.delete(claim.browserId);
-          opts.onRevoke?.(claim.browserId);
+      return transact((snapshot) => {
+        const claims = view(snapshot).rows;
+        const removed = claims.filter((claim) => matches(claim, handle));
+        if (removed.length === 0) {
+          return { next: snapshot, result: false };
         }
-      }
-      return true;
+        const removedHashes = new Set(removed.map((claim) => claim.tokenHash));
+        return {
+          next: snapshot.filter((claim) => !removedHashes.has(claim.tokenHash)),
+          result: true,
+          commit: () => {
+            for (const claim of removed) {
+              revoked.add(claim.tokenHash);
+              if (claim.browserId !== null) {
+                opts.claimed.delete(claim.browserId);
+                opts.onRevoke?.(claim.browserId);
+              }
+            }
+          }
+        };
+      });
     },
     async repair() {
-      const view = readCurrent();
-      if (view.quarantined.length === 0) return { removed: [] };
-      await writeLedger(opts.path, view.rows);
-      return { removed: view.quarantined.map(handleOf) };
+      return transact((snapshot) => {
+        const currentView = view(snapshot);
+        const removed = currentView.quarantined.map(handleOf);
+        const removedHashes = new Set(
+          currentView.quarantined.map((row) => row.tokenHash)
+        );
+        return {
+          next: snapshot.filter((row) => !removedHashes.has(row.tokenHash)),
+          result: { removed }
+        };
+      });
+    },
+    async repairRegistration(browserId, requestedLabel) {
+      if (browserId.length === 0) throw new Error("browser id is required");
+      const token = mintToken();
+      const tokenHash = digestToken(token);
+      return transact((snapshot) => {
+        const currentView = view(snapshot);
+        if (currentView.rows.some((row) => row.browserId === browserId)) {
+          throw new Error("registration_already_valid");
+        }
+        const quarantined = currentView.quarantined.filter(
+          (row) => row.browserId === browserId
+        );
+        const label = requestedLabel?.trim() || quarantined[0]?.label || "\uC774 \uBE0C\uB77C\uC6B0\uC800";
+        const removedHashes = new Set(quarantined.map((row) => row.tokenHash));
+        const next = {
+          browserId: null,
+          tokenHash,
+          label,
+          createdAt: now().toISOString()
+        };
+        return {
+          next: [
+            ...snapshot.filter((row) => !removedHashes.has(row.tokenHash)),
+            next
+          ],
+          result: {
+            outcome: quarantined.length > 0 ? "repaired" : "created",
+            removed: quarantined.map(handleOf),
+            registration: { handle: handleOf(next), label, token }
+          },
+          commit: () => {
+            for (const row of quarantined) {
+              revoked.add(row.tokenHash);
+              if (row.browserId !== null && opts.claimed.get(row.browserId) === row.tokenHash) {
+                opts.claimed.delete(row.browserId);
+                opts.onRevoke?.(row.browserId);
+              }
+            }
+          }
+        };
+      });
     },
     status() {
-      const read = readLedger(opts.path);
-      if (read.state === "unreadable") {
+      if (unreadable !== null) {
         return {
           state: "disabled",
           error: "browser_registry_unreadable",
-          detail: read.reason
+          detail: unreadable
         };
       }
-      if (read.state === "ok" && opts.forbiddenTokenHash && ledgerOverlapsToken(read.rows, opts.forbiddenTokenHash)) {
+      if (opts.forbiddenTokenHash && ledgerOverlapsToken(rows, opts.forbiddenTokenHash)) {
         return {
           state: "degraded",
           error: "browser_registry_root_authority_overlap",
-          quarantinedHandles: read.rows.filter(
+          quarantinedHandles: rows.filter(
             (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
           ).map(handleOf),
-          recovery: "browsers repair"
+          quarantined: rows.filter(
+            (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
+          ).map((row) => ({
+            handle: handleOf(row),
+            label: row.label,
+            browserId: row.browserId,
+            createdAt: row.createdAt
+          })),
+          recovery: "repair_registration"
         };
       }
       return { state: "ready" };
@@ -18016,20 +18165,7 @@ function runDaemon(env, deps = {}) {
     claimedBrowsers,
     browserLabels,
     browserRegistryStatus: () => registry2.status(),
-    claimBrowser: (browserId, tokenHash) => {
-      const took = registry2.claim(browserId, tokenHash);
-      if (took) {
-        const now = readLedger(ledgerPath(deps.home));
-        if (now.state === "ok") {
-          for (const row of now.rows) {
-            if (row.browserId === browserId) {
-              browserLabels.set(browserId, row.label);
-            }
-          }
-        }
-      }
-      return took;
-    },
+    claimBrowser: (browserId, tokenHash) => registry2.claim(browserId, tokenHash),
     wasRevoked: (tokenHash) => registry2.wasRevoked(tokenHash),
     log
   });
@@ -18038,6 +18174,7 @@ function runDaemon(env, deps = {}) {
   const registry2 = createBrowserRegistry({
     path: ledgerPath(deps.home),
     claimed: claimedBrowsers,
+    onClaim: (browserId, label) => browserLabels.set(browserId, label),
     forbiddenTokenHash: rootTokenHash,
     onRevoke: (browserId) => http.disconnect(browserId)
   });

package/dist/{chunk-YB7L4SZC.js → chunk-YBQ7ZLSQ.js}

@@ -4,7 +4,7 @@ import {
   mediaToolDescriptors,
   spawnDaemon,
   tryConnect
-} from "./chunk-DOPJ4OZ4.js";
+} from "./chunk-YBNNWQMB.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -14583,6 +14583,14 @@ var HelloSchema = external_exports.object({
    */
   capabilities: external_exports.array(external_exports.string()).default([])
 });
+var BRIDGE_AUTH_CAPABILITY = "bridge-auth-bearer";
+var BROWSER_ROUTING_CAPABILITY = "browser-routing-v1";
+var LOCAL_FILE_REQUEST_CAPABILITY = "local-file-request-v1";
+var REQUIRED_BROWSER_CAPABILITIES = Object.freeze([
+  BRIDGE_AUTH_CAPABILITY,
+  BROWSER_ROUTING_CAPABILITY,
+  LOCAL_FILE_REQUEST_CAPABILITY
+]);
 var HelloAckSchema = external_exports.object({
   t: external_exports.literal("hello_ack"),
   /** The single version both sides will use for this session. */
@@ -14603,7 +14611,9 @@ var HelloNackReasonSchema = external_exports.enum([
   /** This browser already has an active event stream. */
   "session_active",
   /** Root authority cannot open a browser session. */
-  "browser_registration_required"
+  "browser_registration_required",
+  /** This panel predates mandatory browser routing and file permits. */
+  "browser_capability_required"
 ]);
 var BrowserRoutingSchema = external_exports.object({
   targetBrowserId: external_exports.string(),
@@ -15033,6 +15043,7 @@ var REASON_POLICY = Object.freeze({
   // --- The request itself must change ---
   unknown_tool: Object.freeze({ retryable: false }),
   invalid_args: Object.freeze({ retryable: false }),
+  browser_required: Object.freeze({ retryable: false }),
   tool_closed: Object.freeze({ retryable: false }),
   missing_in_build: Object.freeze({ retryable: false }),
   // ---  A human must act; re-calling only nags them ---
@@ -15446,7 +15457,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
   panelClosed: "\uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC774 \uB2EB\uD600 \uC788\uC5B4\uC694. \uD06C\uB86C\uC744 \uC5F4\uACE0 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC744 \uC5F4\uC5B4 \uB450\uBA74 \uBC14\uB85C \uB3D9\uC791\uD574\uC694.",
   /** The panel accepted the call but never answered inside the deadline. */
   toolTimeout: "\uBE0C\uB77C\uC6B0\uC800 \uC751\uB2F5\uC774 \uB2A6\uC5B4\uC9C0\uACE0 \uC788\uC5B4\uC694. \uD06C\uB86C\uC5D0\uC11C \uB124\uC774\uBC84\uC5D0 \uB85C\uADF8\uC778\uB418\uC5B4 \uC788\uB294\uC9C0 \uD655\uC778\uD558\uACE0 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
-  /** The session hit the per-session rate limit. */
+  /** The daemon request budget is empty. */
   rateLimited: "\uC694\uCCAD\uC774 \uB108\uBB34 \uC7A6\uC544\uC694. \uC7A0\uAE50 \uAE30\uB2E4\uB838\uB2E4\uAC00 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
   /**
    * The local connector accepted nothing back inside its ceiling. Distinct
@@ -15458,7 +15469,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
 var BRIDGE_AGENT_HINT = Object.freeze({
   /** Panel closed / not connected — the panel must be open for any tool to run. */
   notConnected: "The Datalab extension side panel is not open, so this tool cannot run right now. Ask the user to open the extension side panel in their browser, then call this tool again.",
-  /** Per-session rate limit tripped — transient. */
+  /** Daemon-wide rate limit tripped — transient. */
   rateLimited: "This tool is temporarily rate-limited. Wait a few seconds, then call it again.",
   /** The local connector did not answer at all — retrying immediately will not help. */
   connectorStuck: "The local connector stopped responding, so this tool cannot run right now. Do not retry immediately; ask the user to turn the MCP connection off and on again in the extension side panel."

package/dist/cli.js

@@ -2,10 +2,10 @@
 import {
   dispatchCli,
   runAdapter
-} from "./chunk-YB7L4SZC.js";
+} from "./chunk-YBQ7ZLSQ.js";
 import {
   runDaemon
-} from "./chunk-DOPJ4OZ4.js";
+} from "./chunk-YBNNWQMB.js";
 import "./chunk-MLKGABMK.js";
 
 // src/cli.ts
@@ -17,7 +17,7 @@ function log(message) {
 `);
 }
 async function runInstaller(sub, argv) {
-  const { createNodeIo, runInstall, runUninstall } = await import("./dist-JICXADYR.js");
+  const { createNodeIo, runInstall, runUninstall } = await import("./dist-R3VRQN24.js");
   const opts = { version: VERSION };
   for (let i = 0; i < argv.length; i += 1) {
     const flag = argv[i];
@@ -62,8 +62,8 @@ async function main() {
     // Loaded lazily, like the installer: the adapter path is what an MCP host
     // spawns and must not pay for a command only an operator types.
     browsers: async (argv) => {
-      const { runBrowsers } = await import("./browsers-AGEUPMJA.js");
-      const { createNodeIo } = await import("./dist-JICXADYR.js");
+      const { runBrowsers } = await import("./browsers-4L3WAODH.js");
+      const { createNodeIo } = await import("./dist-R3VRQN24.js");
       const io = createNodeIo();
       const code = await runBrowsers(argv, {
         env: process.env,
@@ -88,7 +88,7 @@ async function main() {
         attachSkill,
         detachSkill,
         skillsPayloadRoot
-      } = await import("./dist-JICXADYR.js");
+      } = await import("./dist-R3VRQN24.js");
       const io = createNodeIo();
       const root = skillsPayloadRoot();
       const code = await runSkills(argv, {

package/dist/{dist-JICXADYR.js → dist-R3VRQN24.js}

@@ -49,7 +49,7 @@ import {
   upsertServerKey,
   validateInstallOptions,
   validateUninstallOptions
-} from "./chunk-5S7RFXIU.js";
+} from "./chunk-CQRDBJXM.js";
 import "./chunk-MLKGABMK.js";
 export {
   BACKUP_KEEP,

package/dist/index.js

@@ -3,8 +3,8 @@ import {
   dispatchCli,
   ensureDaemonRunning,
   runAdapter
-} from "./chunk-YB7L4SZC.js";
-import "./chunk-DOPJ4OZ4.js";
+} from "./chunk-YBQ7ZLSQ.js";
+import "./chunk-YBNNWQMB.js";
 import "./chunk-MLKGABMK.js";
 export {
   createAdapterServer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modootoday/datalab-extension-mcp",
-  "version": "1.8.10",
+  "version": "1.8.12",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",