@modootoday/datalab-extension-mcp 1.8.12 → 1.8.13

package/README.en.md

@@ -58,7 +58,7 @@ One command finds **every** AI app on your computer and connects them automatica
 2. **Paste this command and press Enter.** The saved command names an exact bootstrap version. At startup and while idle, the connector checks the canonical release and promotes itself to the current secure, compatible version. Diagnostic environments can opt out with `--no-self-update`.
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.12 install
+   npx -y @modootoday/datalab-extension-mcp@1.8.13 install
    ```
 
    Lines of English scrolling by is normal. This only downloads and runs the connector — it touches nothing else.
@@ -130,10 +130,10 @@ Apps it **only prints instructions for** (follow the on-screen guide): VS Code,
 Installing also places the bundled **writing skills**. An AI app reads the name and description of every installed skill on every start, so the more are installed the less room the conversation has. The default therefore places only the ones that work right away.
 
 ```
-npx -y @modootoday/datalab-extension-mcp@1.8.12 skills list
-npx -y @modootoday/datalab-extension-mcp@1.8.12 skills status
-npx -y @modootoday/datalab-extension-mcp@1.8.12 skills attach <name>
-npx -y @modootoday/datalab-extension-mcp@1.8.12 skills detach <name>
+npx -y @modootoday/datalab-extension-mcp@1.8.13 skills list
+npx -y @modootoday/datalab-extension-mcp@1.8.13 skills status
+npx -y @modootoday/datalab-extension-mcp@1.8.13 skills attach <name>
+npx -y @modootoday/datalab-extension-mcp@1.8.13 skills detach <name>
 ```
 
 - `list` shows everything in this version, name and description.
@@ -152,10 +152,10 @@ The **workbench** is this computer, where the connector runs. If you use more th
 Make the code from the panel with [등록 코드 만들기], or from the terminal.
 
 ```
-npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers add "Work Chrome"
-npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers list
-npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers revoke <handle>
-npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers repair
+npx -y @modootoday/datalab-extension-mcp@1.8.13 browsers add "Work Chrome"
+npx -y @modootoday/datalab-extension-mcp@1.8.13 browsers list
+npx -y @modootoday/datalab-extension-mcp@1.8.13 browsers revoke <handle>
+npx -y @modootoday/datalab-extension-mcp@1.8.13 browsers repair
 ```
 
 `add` **asks you to paste the management token** — the same value you used to
@@ -255,7 +255,7 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 - **When the connection disappears** — run the very command you used at the start once more; it safely re-registers. (Some AI apps clean up their settings file and drop the connection.)
 
   ```
-  npx -y @modootoday/datalab-extension-mcp@1.8.12 install
+  npx -y @modootoday/datalab-extension-mcp@1.8.13 install
   ```
 
 - **`'npx' is not recognized...`** — Node.js isn't installed. The "No Node.js?" one-liner in Step 2 is the simplest fix.
@@ -285,7 +285,7 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 1. Run this in a terminal (it removes the entries registered in your AI apps).
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.12 uninstall
+   npx -y @modootoday/datalab-extension-mcp@1.8.13 uninstall
    ```
 
 2. Turn **MCP 연결** off in the extension settings. The panel is the bridge, so with it off a leftover config line can look nothing up.

package/README.md

@@ -52,7 +52,7 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
 2. **아래 명령을 붙여넣고 Enter를 눌러요.** 저장되는 명령은 정확한 시작 버전을 적습니다. 커넥터는 시작할 때와 유휴 상태에서 정본 릴리스를 확인해 현재의 안전하고 호환되는 버전으로 승격합니다. 진단 환경에서는 `--no-self-update`로 승격을 끌 수 있어요.
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.12 install
+   npx -y @modootoday/datalab-extension-mcp@1.8.13 install
    ```
 
    영어 글자가 여러 줄 올라오는 건 정상이에요. 이 명령은 커넥터를 내려받아 실행할 뿐, 다른 건 건드리지 않아요.
@@ -118,10 +118,10 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
 설치할 때 **글쓰기 도움말(스킬)** 도 함께 놓입니다. AI 앱은 켜질 때마다 설치된 도움말의 이름과 설명을 전부 읽기 때문에, 많이 깔수록 대화에 쓸 자리가 줄어들어요. 그래서 기본은 **바로 쓸 수 있는 것만** 놓습니다.
 
 ```
-npx -y @modootoday/datalab-extension-mcp@1.8.12 skills list
-npx -y @modootoday/datalab-extension-mcp@1.8.12 skills status
-npx -y @modootoday/datalab-extension-mcp@1.8.12 skills attach <이름>
-npx -y @modootoday/datalab-extension-mcp@1.8.12 skills detach <이름>
+npx -y @modootoday/datalab-extension-mcp@1.8.13 skills list
+npx -y @modootoday/datalab-extension-mcp@1.8.13 skills status
+npx -y @modootoday/datalab-extension-mcp@1.8.13 skills attach <이름>
+npx -y @modootoday/datalab-extension-mcp@1.8.13 skills detach <이름>
 ```
 
 - `list` 는 이 버전에 들어 있는 전부를 이름과 설명으로 보여 줘요.
@@ -140,10 +140,10 @@ npx -y @modootoday/datalab-extension-mcp@1.8.12 skills detach <이름>
 패널에서 [등록 코드 만들기]를 눌러도 되고, 터미널을 쓰셔도 돼요.
 
 ```
-npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers add "회사 크롬"
-npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers list
-npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers revoke <handle>
-npx -y @modootoday/datalab-extension-mcp@1.8.12 browsers repair
+npx -y @modootoday/datalab-extension-mcp@1.8.13 browsers add "회사 크롬"
+npx -y @modootoday/datalab-extension-mcp@1.8.13 browsers list
+npx -y @modootoday/datalab-extension-mcp@1.8.13 browsers revoke <handle>
+npx -y @modootoday/datalab-extension-mcp@1.8.13 browsers repair
 ```
 
 `add` 를 실행하면 **관리 토큰을 붙여넣으라고 물어봐요** — 설치할 때와 같은 값이고, 패널의 `복사` 버튼으로 얻습니다. 그러면 브라우저 등록 코드가 **한 번만** 출력돼요. 커넥터는 그 코드를 저장하지 않고 지문만 남기므로 다시 보여 줄 수 없어요.
@@ -222,7 +222,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 - **연결이 사라졌을 때** — 처음 실행했던 그 명령을 한 번 더 실행하면 안전하게 다시 등록돼요. (일부 AI 앱이 설정 파일을 정리하며 연결을 지우기도 해요.)
 
   ```
-  npx -y @modootoday/datalab-extension-mcp@1.8.12 install
+  npx -y @modootoday/datalab-extension-mcp@1.8.13 install
   ```
 
 - **`'npx'을(는) 내부 또는 외부 명령...`** — Node.js가 없는 거예요. 위 2단계의 "Node.js가 없다면" 한 줄 설치가 가장 간단해요.
@@ -252,7 +252,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 1. 터미널에서 아래 명령을 실행해요(AI 앱에 등록된 설정을 지워 줘요).
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.12 uninstall
+   npx -y @modootoday/datalab-extension-mcp@1.8.13 uninstall
    ```
 
 2. 확장 설정에서 **MCP 연결을 꺼요.** 패널이 브릿지라, 꺼 두면 어딘가 설정 줄이 남아 있어도 AI 앱이 아무것도 조회할 수 없어요.

package/dist/{browsers-4L3WAODH.js → browsers-M2DRBQB6.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_HOST,
   DEFAULT_PORT
-} from "./chunk-YBNNWQMB.js";
+} from "./chunk-QHEJF6FK.js";
 import {
   TOKEN_PROMPT_GUIDE,
   TOKEN_PROMPT_QUESTION,

package/dist/{chunk-YBQ7ZLSQ.js → chunk-M24B42VT.js}

@@ -4,7 +4,7 @@ import {
   mediaToolDescriptors,
   spawnDaemon,
   tryConnect
-} from "./chunk-YBNNWQMB.js";
+} from "./chunk-QHEJF6FK.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";

package/dist/{chunk-YBNNWQMB.js → chunk-QHEJF6FK.js}

@@ -1,15 +1,5 @@
-// ../mcp-server/dist/chunk-XKX4SOFG.js
+// ../mcp-server/dist/chunk-HS7SL22A.js
 import { createHash } from "crypto";
-import { createHash as createHash2, randomUUID } from "crypto";
-import { mkdir, readFile, readdir, rm, writeFile } from "fs/promises";
-import { join } from "path";
-import {
-  createServer
-} from "http";
-import { pipeline } from "stream/promises";
-import { constants } from "fs";
-import { lstat, open } from "fs/promises";
-import { basename, isAbsolute } from "path";
 import {
   appendFileSync,
   mkdirSync,
@@ -18,14 +8,24 @@ import {
   statSync
 } from "fs";
 import { homedir } from "os";
-import { join as join2 } from "path";
+import { join } from "path";
+import { randomBytes } from "crypto";
+import { readFileSync } from "fs";
+import { mkdir, rename, writeFile } from "fs/promises";
+import { dirname, join as join2 } from "path";
+import { createHash as createHash2, randomUUID } from "crypto";
+import { mkdir as mkdir2, readFile, readdir, rm, writeFile as writeFile2 } from "fs/promises";
+import { join as join3 } from "path";
+import {
+  createServer
+} from "http";
+import { pipeline } from "stream/promises";
+import { constants } from "fs";
+import { lstat, open } from "fs/promises";
+import { basename, isAbsolute } from "path";
 import { createConnection } from "net";
 import { spawn } from "child_process";
 import { closeSync } from "fs";
-import { randomBytes } from "crypto";
-import { readFileSync } from "fs";
-import { mkdir as mkdir2, rename, writeFile as writeFile2 } from "fs/promises";
-import { dirname, join as join3 } from "path";
 import { createRequire } from "module";
 import { join as join4 } from "path";
 var __defProp = Object.defineProperty;
@@ -16334,62 +16334,419 @@ var BridgeError = class extends Error {
     if (timing) this.timing = timing;
   }
 };
-var MAX_STAGE_BYTES = 10 * 1024 * 1024;
-var DEFAULT_TOKEN_TTL_MS = 30 * 60 * 1e3;
-var STAGE_CAPABILITY = "datalab-mcp-stage-v1";
-function refuse(reason, retryable, message) {
-  return { state: "REFUSED", reason, retryable, message };
+var LOG_MAX_BYTES = 1024 * 1024;
+var DIR_NAME = ".datalab-mcp";
+var FILE_NAME = "connector.log";
+function logDir(home = homedir()) {
+  return join(home, DIR_NAME);
 }
-function segment(...parts) {
-  return createHash2("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
+function logPath(home = homedir()) {
+  return join(logDir(home), FILE_NAME);
 }
-function createMediaStage(opts) {
-  const now = opts.now ?? Date.now;
-  const ttl = opts.tokenTtlMs ?? DEFAULT_TOKEN_TTL_MS;
-  const ledgerDir = join(opts.root, "ledger");
-  const blobDir = join(opts.root, "blob");
-  const tokens = /* @__PURE__ */ new Map();
-  const active = /* @__PURE__ */ new Map();
-  const keyOf = (j) => segment(j.blogId, j.runId, j.actionId, j.jobId);
-  const ledgerPath2 = (key) => join(ledgerDir, `${key}.json`);
-  const blobPath = (key) => join(blobDir, key);
-  async function readRow(key) {
-    try {
-      const raw = await readFile(ledgerPath2(key), "utf8");
-      return JSON.parse(raw);
-    } catch (err) {
-      if (err.code === "ENOENT") return null;
-      return "unreadable";
+function rolledLogPath(home = homedir()) {
+  return `${logPath(home)}.1`;
+}
+function rollIfLarge(home = homedir(), maxBytes = LOG_MAX_BYTES) {
+  try {
+    const size = statSync(logPath(home)).size;
+    if (size < maxBytes) return false;
+    renameSync(logPath(home), rolledLogPath(home));
+    return true;
+  } catch {
+    return false;
+  }
+}
+function openLogFd(home = homedir()) {
+  try {
+    mkdirSync(logDir(home), { recursive: true });
+    rollIfLarge(home);
+    return openSync(logPath(home), "a");
+  } catch {
+    return null;
+  }
+}
+var FILE_NAME2 = "browsers.json";
+function ledgerPath(home) {
+  return join2(logDir(home), FILE_NAME2);
+}
+function isRegistration(row) {
+  if (typeof row !== "object" || row === null) return false;
+  const r = row;
+  const id = r["browserId"];
+  const hash2 = r["tokenHash"];
+  return (id === null || typeof id === "string" && id.length > 0) && typeof hash2 === "string" && /^[a-f0-9]{64}$/.test(hash2) && typeof r["label"] === "string" && typeof r["createdAt"] === "string";
+}
+function readLedger(path) {
+  let raw;
+  try {
+    raw = readFileSync(path, "utf8");
+  } catch (err) {
+    if (err.code === "ENOENT") {
+      return { state: "absent" };
     }
+    return { state: "unreadable", reason: describe3(err) };
   }
-  async function writeRow(key, row) {
-    await mkdir(ledgerDir, { recursive: true });
-    await writeFile(ledgerPath2(key), JSON.stringify(row), "utf8");
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    return { state: "unreadable", reason: describe3(err) };
+  }
+  if (!Array.isArray(parsed)) {
+    return { state: "unreadable", reason: "not a list of browsers" };
+  }
+  if (!parsed.every(isRegistration)) {
+    return { state: "unreadable", reason: "a row is not a browser" };
+  }
+  const browserIds = /* @__PURE__ */ new Set();
+  const tokenHashes = /* @__PURE__ */ new Set();
+  for (const row of parsed) {
+    if (tokenHashes.has(row.tokenHash) || row.browserId !== null && browserIds.has(row.browserId)) {
+      return { state: "unreadable", reason: "duplicate browser authority" };
+    }
+    tokenHashes.add(row.tokenHash);
+    if (row.browserId !== null) browserIds.add(row.browserId);
+  }
+  return { state: "ok", rows: parsed };
+}
+function ledgerOverlapsToken(rows, tokenHash) {
+  return rows.some((row) => row.tokenHash === tokenHash);
+}
+async function writeLedger(path, claims) {
+  const queued = (writing.get(path) ?? Promise.resolve()).then(
+    () => writeOnce(path, claims),
+    () => writeOnce(path, claims)
+  );
+  writing.set(path, queued);
+  try {
+    await queued;
+  } finally {
+    if (writing.get(path) === queued) writing.delete(path);
+  }
+}
+var writing = /* @__PURE__ */ new Map();
+async function writeOnce(path, claims) {
+  const tmp = `${path}.${process.pid}.tmp`;
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  await writeFile(tmp, `${JSON.stringify(claims, null, 2)}
+`, {
+    mode: 384
+  });
+  await rename(tmp, path);
+}
+function claimedDigestsFrom(claims) {
+  const pairs = [];
+  for (const claim of claims) {
+    if (claim.browserId !== null && claim.browserId.length > 0) {
+      pairs.push([claim.browserId, claim.tokenHash]);
+    }
+  }
+  return pairs;
+}
+function describe3(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+var HANDLE_LENGTH = 8;
+var BrowserRegistryError = class extends Error {
+  code;
+  constructor(code) {
+    super(code);
+    this.name = "BrowserRegistryError";
+    this.code = code;
   }
+};
+function mintToken() {
+  return randomBytes(32).toString("hex");
+}
+function handleOf(claim) {
+  return claim.tokenHash.slice(0, HANDLE_LENGTH);
+}
+function matches(claim, handle) {
+  return handleOf(claim) === handle || claim.browserId === handle;
+}
+function createBrowserRegistry(opts) {
+  const now = opts.now ?? (() => /* @__PURE__ */ new Date());
+  const revoked = /* @__PURE__ */ new Set();
+  const initial = readLedger(opts.path);
+  const unreadable = initial.state === "unreadable" ? initial.reason : null;
+  let rows = initial.state === "ok" ? initial.rows.map((row) => ({ ...row })) : [];
+  let mutationTail = Promise.resolve();
+  let pendingMutations = 0;
+  const view = (source = rows) => {
+    if (unreadable !== null) {
+      throw new Error(`browser registry is unreadable: ${unreadable}`);
+    }
+    if (!opts.forbiddenTokenHash) return { rows: [...source], quarantined: [] };
+    const quarantined = source.filter(
+      (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
+    );
+    return {
+      rows: source.filter(
+        (row) => !timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
+      ),
+      quarantined
+    };
+  };
+  const current = () => view().rows;
+  const serialize = (work) => {
+    pendingMutations += 1;
+    const result = mutationTail.then(work, work);
+    mutationTail = result.then(
+      () => {
+        pendingMutations -= 1;
+      },
+      () => {
+        pendingMutations -= 1;
+      }
+    );
+    return result;
+  };
+  const transact = (propose) => {
+    if (unreadable !== null) {
+      return Promise.reject(
+        new Error(`browser registry is unreadable: ${unreadable}`)
+      );
+    }
+    return serialize(async () => {
+      const proposal = propose(rows.map((row) => ({ ...row })));
+      await writeLedger(opts.path, proposal.next);
+      rows = proposal.next;
+      proposal.commit?.();
+      return proposal.result;
+    });
+  };
   return {
-    async begin(req) {
-      const key = keyOf(req);
-      const row = await readRow(key);
-      if (row === "unreadable") {
-        return refuse("uploads_unproven", true, "\uC791\uC5C5 \uC0C1\uD0DC\uB97C \uC77D\uC9C0 \uBABB\uD588\uC5B4\uC694.");
+    async add(label) {
+      const token = mintToken();
+      const claim = {
+        browserId: null,
+        tokenHash: digestToken(token),
+        label,
+        createdAt: now().toISOString()
+      };
+      return transact((snapshot) => ({
+        next: [...snapshot, claim],
+        result: { handle: handleOf(claim), token }
+      }));
+    },
+    async list() {
+      return current().map((claim) => ({
+        handle: handleOf(claim),
+        label: claim.label,
+        browserId: claim.browserId,
+        createdAt: claim.createdAt
+      }));
+    },
+    claim(browserId, tokenHash) {
+      if (pendingMutations > 0) return false;
+      if (opts.claimed.has(browserId)) return false;
+      for (const held of opts.claimed.values()) {
+        if (timingSafeEqual(held, tokenHash)) return false;
       }
-      if (row) {
-        if (req.fence < row.fence) {
-          return refuse(
-            "stale_fence",
-            false,
-            "\uB354 \uC0C8\uB85C\uC6B4 \uC2DC\uB3C4\uAC00 \uC774\uBBF8 \uC9C4\uD589\uB410\uC5B4\uC694."
-          );
-        }
-        if (row.state === "SEALED") {
-          return refuse("already_sealed", false, "\uC774\uBBF8 \uBD09\uC778\uB41C \uC790\uC0B0\uC774\uC5D0\uC694.");
-        }
-        if (row.state === "OPEN") {
-          for (const [token2, held] of tokens) {
-            if (held.key === key && held.expiresAt > now()) {
-              return {
-                state: "OPEN",
-                jobId: req.jobId,
+      let claims;
+      try {
+        claims = current();
+      } catch {
+        return false;
+      }
+      const row = claims.find(
+        (claim) => claim.browserId === null && timingSafeEqual(claim.tokenHash, tokenHash)
+      );
+      if (!row) return false;
+      const stored = rows.find((claim) => claim.tokenHash === row.tokenHash);
+      if (!stored) return false;
+      stored.browserId = browserId;
+      opts.claimed.set(browserId, row.tokenHash);
+      opts.onClaim?.(browserId, stored.label);
+      const snapshot = rows.map((entry) => ({ ...entry }));
+      void serialize(async () => {
+        try {
+          await writeLedger(opts.path, snapshot);
+        } catch (error51) {
+          if (stored.browserId === browserId) stored.browserId = null;
+          if (opts.claimed.get(browserId) === row.tokenHash) {
+            opts.claimed.delete(browserId);
+            opts.onRevoke?.(browserId);
+          }
+          throw error51;
+        }
+      }).catch(() => void 0);
+      return true;
+    },
+    async revoke(handle) {
+      return transact((snapshot) => {
+        const claims = view(snapshot).rows;
+        const removed = claims.filter((claim) => matches(claim, handle));
+        if (removed.length === 0) {
+          return { next: snapshot, result: false };
+        }
+        const removedHashes = new Set(removed.map((claim) => claim.tokenHash));
+        return {
+          next: snapshot.filter((claim) => !removedHashes.has(claim.tokenHash)),
+          result: true,
+          commit: () => {
+            for (const claim of removed) {
+              revoked.add(claim.tokenHash);
+              if (claim.browserId !== null) {
+                opts.claimed.delete(claim.browserId);
+                opts.onRevoke?.(claim.browserId);
+              }
+            }
+          }
+        };
+      });
+    },
+    async repair() {
+      return transact((snapshot) => {
+        const currentView = view(snapshot);
+        const removed = currentView.quarantined.map(handleOf);
+        const removedHashes = new Set(
+          currentView.quarantined.map((row) => row.tokenHash)
+        );
+        return {
+          next: snapshot.filter((row) => !removedHashes.has(row.tokenHash)),
+          result: { removed }
+        };
+      });
+    },
+    async repairRegistration(browserId, requestedLabel) {
+      if (browserId.length === 0) {
+        throw new BrowserRegistryError("registration_not_found");
+      }
+      return transact((snapshot) => {
+        const currentView = view(snapshot);
+        if (currentView.rows.some((row) => row.browserId === browserId)) {
+          throw new BrowserRegistryError("registration_already_valid");
+        }
+        const quarantined = currentView.quarantined.filter(
+          (row) => row.browserId === browserId
+        );
+        if (quarantined.length === 0) {
+          throw new BrowserRegistryError(
+            currentView.quarantined.length > 0 ? "registration_not_quarantined" : "registration_not_found"
+          );
+        }
+        const token = mintToken();
+        const tokenHash = digestToken(token);
+        const label = requestedLabel?.trim() || quarantined[0]?.label || "\uC774 \uBE0C\uB77C\uC6B0\uC800";
+        const removedHashes = new Set(quarantined.map((row) => row.tokenHash));
+        const next = {
+          browserId: null,
+          tokenHash,
+          label,
+          createdAt: now().toISOString()
+        };
+        return {
+          next: [
+            ...snapshot.filter((row) => !removedHashes.has(row.tokenHash)),
+            next
+          ],
+          result: {
+            outcome: "repaired",
+            removed: quarantined.map(handleOf),
+            registration: { handle: handleOf(next), label, token }
+          },
+          commit: () => {
+            for (const row of quarantined) {
+              revoked.add(row.tokenHash);
+              if (row.browserId !== null && opts.claimed.get(row.browserId) === row.tokenHash) {
+                opts.claimed.delete(row.browserId);
+                opts.onRevoke?.(row.browserId);
+              }
+            }
+          }
+        };
+      });
+    },
+    status() {
+      if (unreadable !== null) {
+        return {
+          state: "disabled",
+          error: "browser_registry_unreadable",
+          detail: unreadable
+        };
+      }
+      if (opts.forbiddenTokenHash && ledgerOverlapsToken(rows, opts.forbiddenTokenHash)) {
+        return {
+          state: "degraded",
+          error: "browser_registry_root_authority_overlap",
+          quarantinedHandles: rows.filter(
+            (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
+          ).map(handleOf),
+          quarantined: rows.filter(
+            (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
+          ).map((row) => ({
+            handle: handleOf(row),
+            label: row.label,
+            browserId: row.browserId,
+            createdAt: row.createdAt
+          })),
+          recovery: "repair_registration"
+        };
+      }
+      return { state: "ready" };
+    },
+    wasRevoked(tokenHash) {
+      return revoked.has(tokenHash);
+    }
+  };
+}
+var MAX_STAGE_BYTES = 10 * 1024 * 1024;
+var DEFAULT_TOKEN_TTL_MS = 30 * 60 * 1e3;
+var STAGE_CAPABILITY = "datalab-mcp-stage-v1";
+function refuse(reason, retryable, message) {
+  return { state: "REFUSED", reason, retryable, message };
+}
+function segment(...parts) {
+  return createHash2("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
+}
+function createMediaStage(opts) {
+  const now = opts.now ?? Date.now;
+  const ttl = opts.tokenTtlMs ?? DEFAULT_TOKEN_TTL_MS;
+  const ledgerDir = join3(opts.root, "ledger");
+  const blobDir = join3(opts.root, "blob");
+  const tokens = /* @__PURE__ */ new Map();
+  const active = /* @__PURE__ */ new Map();
+  const keyOf = (j) => segment(j.blogId, j.runId, j.actionId, j.jobId);
+  const ledgerPath2 = (key) => join3(ledgerDir, `${key}.json`);
+  const blobPath = (key) => join3(blobDir, key);
+  async function readRow(key) {
+    try {
+      const raw = await readFile(ledgerPath2(key), "utf8");
+      return JSON.parse(raw);
+    } catch (err) {
+      if (err.code === "ENOENT") return null;
+      return "unreadable";
+    }
+  }
+  async function writeRow(key, row) {
+    await mkdir2(ledgerDir, { recursive: true });
+    await writeFile2(ledgerPath2(key), JSON.stringify(row), "utf8");
+  }
+  return {
+    async begin(req) {
+      const key = keyOf(req);
+      const row = await readRow(key);
+      if (row === "unreadable") {
+        return refuse("uploads_unproven", true, "\uC791\uC5C5 \uC0C1\uD0DC\uB97C \uC77D\uC9C0 \uBABB\uD588\uC5B4\uC694.");
+      }
+      if (row) {
+        if (req.fence < row.fence) {
+          return refuse(
+            "stale_fence",
+            false,
+            "\uB354 \uC0C8\uB85C\uC6B4 \uC2DC\uB3C4\uAC00 \uC774\uBBF8 \uC9C4\uD589\uB410\uC5B4\uC694."
+          );
+        }
+        if (row.state === "SEALED") {
+          return refuse("already_sealed", false, "\uC774\uBBF8 \uBD09\uC778\uB41C \uC790\uC0B0\uC774\uC5D0\uC694.");
+        }
+        if (row.state === "OPEN") {
+          for (const [token2, held] of tokens) {
+            if (held.key === key && held.expiresAt > now()) {
+              return {
+                state: "OPEN",
+                jobId: req.jobId,
                 uploadToken: token2,
                 expiresAt: held.expiresAt,
                 capabilityVersion: STAGE_CAPABILITY
@@ -16424,7 +16781,7 @@ function createMediaStage(opts) {
       }
       active.set(held.key, (active.get(held.key) ?? 0) + 1);
       try {
-        await mkdir(blobDir, { recursive: true });
+        await mkdir2(blobDir, { recursive: true });
         const chunks = [];
         let total = 0;
         for await (const chunk of body) {
@@ -16435,7 +16792,7 @@ function createMediaStage(opts) {
           }
           chunks.push(buf);
         }
-        await writeFile(blobPath(held.key), Buffer.concat(chunks));
+        await writeFile2(blobPath(held.key), Buffer.concat(chunks));
         return { ok: true, bytes: total };
       } finally {
         const left = (active.get(held.key) ?? 1) - 1;
@@ -16568,7 +16925,7 @@ function createMediaStage(opts) {
       const out = [];
       for (const dir of [ledgerDir, blobDir]) {
         try {
-          for (const name of await readdir(dir)) out.push(join(dir, name));
+          for (const name of await readdir(dir)) out.push(join3(dir, name));
         } catch {
         }
       }
@@ -17026,6 +17383,11 @@ async function openLocalImage(path) {
     };
   }
 }
+var MCP_SERVER_HEALTH_NAME = "datalab-extension-mcp-server";
+var MCP_SERVER_HEALTH_SCHEMA = "datalab-extension-mcp-health-v1";
+var MCP_MANAGEMENT_CAPABILITIES = Object.freeze([
+  "browser-registration-repair-v1"
+]);
 var MAX_BODY_BYTES = 64 * 1024;
 var DEFAULT_TOOLS_CHANGED_DEBOUNCE_MS = 600;
 var MAX_MCP_BODY_BYTES2 = 256 * 1024;
@@ -17196,8 +17558,9 @@ function createHttpBridge(opts) {
     }
     if (req.method === "GET" && url2.pathname === "/bridge/health") {
       json2(res, 200, {
-        name: opts.identity.name,
-        version: opts.identity.version
+        name: MCP_SERVER_HEALTH_NAME,
+        version: opts.identity.version,
+        schema: MCP_SERVER_HEALTH_SCHEMA
       });
       return;
     }
@@ -17313,7 +17676,8 @@ function createHttpBridge(opts) {
           json2(res, 200, {
             ok: true,
             browsers,
-            registryStatus: registry2.status()
+            registryStatus: registry2.status(),
+            capabilities: [...MCP_MANAGEMENT_CAPABILITIES]
           });
           return;
         }
@@ -17344,7 +17708,8 @@ function createHttpBridge(opts) {
           json2(res, 200, {
             ok: true,
             ...repaired,
-            registryStatus: registry2.status()
+            registryStatus: registry2.status(),
+            capabilities: [...MCP_MANAGEMENT_CAPABILITIES]
           });
           return;
         }
@@ -17352,6 +17717,14 @@ function createHttpBridge(opts) {
       }).catch((err) => {
         const why = err instanceof Error ? err.message : String(err);
         opts.log?.(`browsers route failed: ${why}`);
+        if (err instanceof BrowserRegistryError) {
+          json2(res, err.code === "registration_not_found" ? 404 : 409, {
+            error: err.code,
+            detail: err.code,
+            capabilities: [...MCP_MANAGEMENT_CAPABILITIES]
+          });
+          return;
+        }
         json2(res, 400, { error: "bad request", detail: why });
       });
       return;
@@ -17653,37 +18026,6 @@ function parsePort(raw) {
   if (!Number.isInteger(n) || n < 1 || n > 65535) return null;
   return n;
 }
-var LOG_MAX_BYTES = 1024 * 1024;
-var DIR_NAME = ".datalab-mcp";
-var FILE_NAME = "connector.log";
-function logDir(home = homedir()) {
-  return join2(home, DIR_NAME);
-}
-function logPath(home = homedir()) {
-  return join2(logDir(home), FILE_NAME);
-}
-function rolledLogPath(home = homedir()) {
-  return `${logPath(home)}.1`;
-}
-function rollIfLarge(home = homedir(), maxBytes = LOG_MAX_BYTES) {
-  try {
-    const size = statSync(logPath(home)).size;
-    if (size < maxBytes) return false;
-    renameSync(logPath(home), rolledLogPath(home));
-    return true;
-  } catch {
-    return false;
-  }
-}
-function openLogFd(home = homedir()) {
-  try {
-    mkdirSync(logDir(home), { recursive: true });
-    rollIfLarge(home);
-    return openSync(logPath(home), "a");
-  } catch {
-    return null;
-  }
-}
 function tryConnect(host, port, timeoutMs, deps = {}) {
   const connect = deps.createConnection ?? createConnection;
   return new Promise((resolve) => {
@@ -17798,318 +18140,7 @@ var Lifecycle = class {
     }
   }
 };
-var FILE_NAME2 = "browsers.json";
-function ledgerPath(home) {
-  return join3(logDir(home), FILE_NAME2);
-}
-function isRegistration(row) {
-  if (typeof row !== "object" || row === null) return false;
-  const r = row;
-  const id = r["browserId"];
-  const hash2 = r["tokenHash"];
-  return (id === null || typeof id === "string" && id.length > 0) && typeof hash2 === "string" && /^[a-f0-9]{64}$/.test(hash2) && typeof r["label"] === "string" && typeof r["createdAt"] === "string";
-}
-function readLedger(path) {
-  let raw;
-  try {
-    raw = readFileSync(path, "utf8");
-  } catch (err) {
-    if (err.code === "ENOENT") {
-      return { state: "absent" };
-    }
-    return { state: "unreadable", reason: describe3(err) };
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (err) {
-    return { state: "unreadable", reason: describe3(err) };
-  }
-  if (!Array.isArray(parsed)) {
-    return { state: "unreadable", reason: "not a list of browsers" };
-  }
-  if (!parsed.every(isRegistration)) {
-    return { state: "unreadable", reason: "a row is not a browser" };
-  }
-  const browserIds = /* @__PURE__ */ new Set();
-  const tokenHashes = /* @__PURE__ */ new Set();
-  for (const row of parsed) {
-    if (tokenHashes.has(row.tokenHash) || row.browserId !== null && browserIds.has(row.browserId)) {
-      return { state: "unreadable", reason: "duplicate browser authority" };
-    }
-    tokenHashes.add(row.tokenHash);
-    if (row.browserId !== null) browserIds.add(row.browserId);
-  }
-  return { state: "ok", rows: parsed };
-}
-function ledgerOverlapsToken(rows, tokenHash) {
-  return rows.some((row) => row.tokenHash === tokenHash);
-}
-async function writeLedger(path, claims) {
-  const queued = (writing.get(path) ?? Promise.resolve()).then(
-    () => writeOnce(path, claims),
-    () => writeOnce(path, claims)
-  );
-  writing.set(path, queued);
-  try {
-    await queued;
-  } finally {
-    if (writing.get(path) === queued) writing.delete(path);
-  }
-}
-var writing = /* @__PURE__ */ new Map();
-async function writeOnce(path, claims) {
-  const tmp = `${path}.${process.pid}.tmp`;
-  await mkdir2(dirname(path), { recursive: true, mode: 448 });
-  await writeFile2(tmp, `${JSON.stringify(claims, null, 2)}
-`, {
-    mode: 384
-  });
-  await rename(tmp, path);
-}
-function claimedDigestsFrom(claims) {
-  const pairs = [];
-  for (const claim of claims) {
-    if (claim.browserId !== null && claim.browserId.length > 0) {
-      pairs.push([claim.browserId, claim.tokenHash]);
-    }
-  }
-  return pairs;
-}
-function describe3(err) {
-  return err instanceof Error ? err.message : String(err);
-}
-var HANDLE_LENGTH = 8;
-function mintToken() {
-  return randomBytes(32).toString("hex");
-}
-function handleOf(claim) {
-  return claim.tokenHash.slice(0, HANDLE_LENGTH);
-}
-function matches(claim, handle) {
-  return handleOf(claim) === handle || claim.browserId === handle;
-}
-function createBrowserRegistry(opts) {
-  const now = opts.now ?? (() => /* @__PURE__ */ new Date());
-  const revoked = /* @__PURE__ */ new Set();
-  const initial = readLedger(opts.path);
-  const unreadable = initial.state === "unreadable" ? initial.reason : null;
-  let rows = initial.state === "ok" ? initial.rows.map((row) => ({ ...row })) : [];
-  let mutationTail = Promise.resolve();
-  let pendingMutations = 0;
-  const view = (source = rows) => {
-    if (unreadable !== null) {
-      throw new Error(`browser registry is unreadable: ${unreadable}`);
-    }
-    if (!opts.forbiddenTokenHash) return { rows: [...source], quarantined: [] };
-    const quarantined = source.filter(
-      (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
-    );
-    return {
-      rows: source.filter(
-        (row) => !timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
-      ),
-      quarantined
-    };
-  };
-  const current = () => view().rows;
-  const serialize = (work) => {
-    pendingMutations += 1;
-    const result = mutationTail.then(work, work);
-    mutationTail = result.then(
-      () => {
-        pendingMutations -= 1;
-      },
-      () => {
-        pendingMutations -= 1;
-      }
-    );
-    return result;
-  };
-  const transact = (propose) => {
-    if (unreadable !== null) {
-      return Promise.reject(
-        new Error(`browser registry is unreadable: ${unreadable}`)
-      );
-    }
-    return serialize(async () => {
-      const proposal = propose(rows.map((row) => ({ ...row })));
-      await writeLedger(opts.path, proposal.next);
-      rows = proposal.next;
-      proposal.commit?.();
-      return proposal.result;
-    });
-  };
-  return {
-    async add(label) {
-      const token = mintToken();
-      const claim = {
-        browserId: null,
-        tokenHash: digestToken(token),
-        label,
-        createdAt: now().toISOString()
-      };
-      return transact((snapshot) => ({
-        next: [...snapshot, claim],
-        result: { handle: handleOf(claim), token }
-      }));
-    },
-    async list() {
-      return current().map((claim) => ({
-        handle: handleOf(claim),
-        label: claim.label,
-        browserId: claim.browserId,
-        createdAt: claim.createdAt
-      }));
-    },
-    claim(browserId, tokenHash) {
-      if (pendingMutations > 0) return false;
-      if (opts.claimed.has(browserId)) return false;
-      for (const held of opts.claimed.values()) {
-        if (timingSafeEqual(held, tokenHash)) return false;
-      }
-      let claims;
-      try {
-        claims = current();
-      } catch {
-        return false;
-      }
-      const row = claims.find(
-        (claim) => claim.browserId === null && timingSafeEqual(claim.tokenHash, tokenHash)
-      );
-      if (!row) return false;
-      const stored = rows.find((claim) => claim.tokenHash === row.tokenHash);
-      if (!stored) return false;
-      stored.browserId = browserId;
-      opts.claimed.set(browserId, row.tokenHash);
-      opts.onClaim?.(browserId, stored.label);
-      const snapshot = rows.map((entry) => ({ ...entry }));
-      void serialize(async () => {
-        try {
-          await writeLedger(opts.path, snapshot);
-        } catch (error51) {
-          if (stored.browserId === browserId) stored.browserId = null;
-          if (opts.claimed.get(browserId) === row.tokenHash) {
-            opts.claimed.delete(browserId);
-            opts.onRevoke?.(browserId);
-          }
-          throw error51;
-        }
-      }).catch(() => void 0);
-      return true;
-    },
-    async revoke(handle) {
-      return transact((snapshot) => {
-        const claims = view(snapshot).rows;
-        const removed = claims.filter((claim) => matches(claim, handle));
-        if (removed.length === 0) {
-          return { next: snapshot, result: false };
-        }
-        const removedHashes = new Set(removed.map((claim) => claim.tokenHash));
-        return {
-          next: snapshot.filter((claim) => !removedHashes.has(claim.tokenHash)),
-          result: true,
-          commit: () => {
-            for (const claim of removed) {
-              revoked.add(claim.tokenHash);
-              if (claim.browserId !== null) {
-                opts.claimed.delete(claim.browserId);
-                opts.onRevoke?.(claim.browserId);
-              }
-            }
-          }
-        };
-      });
-    },
-    async repair() {
-      return transact((snapshot) => {
-        const currentView = view(snapshot);
-        const removed = currentView.quarantined.map(handleOf);
-        const removedHashes = new Set(
-          currentView.quarantined.map((row) => row.tokenHash)
-        );
-        return {
-          next: snapshot.filter((row) => !removedHashes.has(row.tokenHash)),
-          result: { removed }
-        };
-      });
-    },
-    async repairRegistration(browserId, requestedLabel) {
-      if (browserId.length === 0) throw new Error("browser id is required");
-      const token = mintToken();
-      const tokenHash = digestToken(token);
-      return transact((snapshot) => {
-        const currentView = view(snapshot);
-        if (currentView.rows.some((row) => row.browserId === browserId)) {
-          throw new Error("registration_already_valid");
-        }
-        const quarantined = currentView.quarantined.filter(
-          (row) => row.browserId === browserId
-        );
-        const label = requestedLabel?.trim() || quarantined[0]?.label || "\uC774 \uBE0C\uB77C\uC6B0\uC800";
-        const removedHashes = new Set(quarantined.map((row) => row.tokenHash));
-        const next = {
-          browserId: null,
-          tokenHash,
-          label,
-          createdAt: now().toISOString()
-        };
-        return {
-          next: [
-            ...snapshot.filter((row) => !removedHashes.has(row.tokenHash)),
-            next
-          ],
-          result: {
-            outcome: quarantined.length > 0 ? "repaired" : "created",
-            removed: quarantined.map(handleOf),
-            registration: { handle: handleOf(next), label, token }
-          },
-          commit: () => {
-            for (const row of quarantined) {
-              revoked.add(row.tokenHash);
-              if (row.browserId !== null && opts.claimed.get(row.browserId) === row.tokenHash) {
-                opts.claimed.delete(row.browserId);
-                opts.onRevoke?.(row.browserId);
-              }
-            }
-          }
-        };
-      });
-    },
-    status() {
-      if (unreadable !== null) {
-        return {
-          state: "disabled",
-          error: "browser_registry_unreadable",
-          detail: unreadable
-        };
-      }
-      if (opts.forbiddenTokenHash && ledgerOverlapsToken(rows, opts.forbiddenTokenHash)) {
-        return {
-          state: "degraded",
-          error: "browser_registry_root_authority_overlap",
-          quarantinedHandles: rows.filter(
-            (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
-          ).map(handleOf),
-          quarantined: rows.filter(
-            (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
-          ).map((row) => ({
-            handle: handleOf(row),
-            label: row.label,
-            browserId: row.browserId,
-            createdAt: row.createdAt
-          })),
-          recovery: "repair_registration"
-        };
-      }
-      return { state: "ready" };
-    },
-    wasRevoked(tokenHash) {
-      return revoked.has(tokenHash);
-    }
-  };
-}
-var NAME = "datalab-extension-mcp-server";
+var NAME = MCP_SERVER_HEALTH_NAME;
 function readVersion() {
   return createRequire(import.meta.url)("../package.json").version;
 }

package/dist/cli.js

@@ -2,10 +2,10 @@
 import {
   dispatchCli,
   runAdapter
-} from "./chunk-YBQ7ZLSQ.js";
+} from "./chunk-M24B42VT.js";
 import {
   runDaemon
-} from "./chunk-YBNNWQMB.js";
+} from "./chunk-QHEJF6FK.js";
 import "./chunk-MLKGABMK.js";
 
 // src/cli.ts
@@ -62,7 +62,7 @@ async function main() {
     // Loaded lazily, like the installer: the adapter path is what an MCP host
     // spawns and must not pay for a command only an operator types.
     browsers: async (argv) => {
-      const { runBrowsers } = await import("./browsers-4L3WAODH.js");
+      const { runBrowsers } = await import("./browsers-M2DRBQB6.js");
       const { createNodeIo } = await import("./dist-R3VRQN24.js");
       const io = createNodeIo();
       const code = await runBrowsers(argv, {

package/dist/index.js

@@ -3,8 +3,8 @@ import {
   dispatchCli,
   ensureDaemonRunning,
   runAdapter
-} from "./chunk-YBQ7ZLSQ.js";
-import "./chunk-YBNNWQMB.js";
+} from "./chunk-M24B42VT.js";
+import "./chunk-QHEJF6FK.js";
 import "./chunk-MLKGABMK.js";
 export {
   createAdapterServer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modootoday/datalab-extension-mcp",
-  "version": "1.8.12",
+  "version": "1.8.13",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",