@modootoday/datalab-extension-mcp 1.8.9 → 1.8.11

package/README.en.md

@@ -55,10 +55,10 @@ Avoid sharing a screenshot or the copied setup. If it may have leaked, press **[
 One command finds **every** AI app on your computer and connects them automatically. Nothing to do per app.
 
 1. **Open a terminal** — on Windows type `cmd` in the search box → "Command Prompt"; on Mac press `⌘+Space` and type `Terminal`; on Linux open your terminal app (often `Ctrl+Alt+T`).
-2. **Paste this command and press Enter.** (`@1.8.9` is the pinned version, so the connector never changes behind your back.)
+2. **Paste this command and press Enter.** (`@1.8.11` is the pinned version, so the connector never changes behind your back.)
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.9 install
+   npx -y @modootoday/datalab-extension-mcp@1.8.11 install
    ```
 
    Lines of English scrolling by is normal. This only downloads and runs the connector — it touches nothing else.
@@ -130,10 +130,10 @@ Apps it **only prints instructions for** (follow the on-screen guide): VS Code,
 Installing also places the bundled **writing skills**. An AI app reads the name and description of every installed skill on every start, so the more are installed the less room the conversation has. The default therefore places only the ones that work right away.
 
 ```
-npx -y @modootoday/datalab-extension-mcp skills list
-npx -y @modootoday/datalab-extension-mcp skills status
-npx -y @modootoday/datalab-extension-mcp skills attach <name>
-npx -y @modootoday/datalab-extension-mcp skills detach <name>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills list
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills status
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills attach <name>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills detach <name>
 ```
 
 - `list` shows everything in this version, name and description.
@@ -152,9 +152,9 @@ The **workbench** is this computer, where the connector runs. If you use more th
 Make the code from the panel with [등록 코드 만들기], or from the terminal.
 
 ```
-npx -y @modootoday/datalab-extension-mcp browsers add "Work Chrome"
-npx -y @modootoday/datalab-extension-mcp browsers list
-npx -y @modootoday/datalab-extension-mcp browsers revoke <handle>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers add "Work Chrome"
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers list
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers revoke <handle>
 ```
 
 `add` **asks you to paste the pairing token** — the same value you used to
@@ -252,7 +252,7 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 - **When the connection disappears** — run the very command you used at the start once more; it safely re-registers. (Some AI apps clean up their settings file and drop the connection.)
 
   ```
-  npx -y @modootoday/datalab-extension-mcp@1.8.9 install
+  npx -y @modootoday/datalab-extension-mcp@1.8.11 install
   ```
 
 - **`'npx' is not recognized...`** — Node.js isn't installed. The "No Node.js?" one-liner in Step 2 is the simplest fix.
@@ -282,7 +282,7 @@ Start it again after a full quit and it picks the tools up. If they still aren't
 1. Run this in a terminal (it removes the entries registered in your AI apps).
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.9 uninstall
+   npx -y @modootoday/datalab-extension-mcp@1.8.11 uninstall
    ```
 
 2. Turn **MCP 연결** off in the extension settings. The panel is the bridge, so with it off a leftover config line can look nothing up.

package/README.md

@@ -49,10 +49,10 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
 명령 한 줄이면 컴퓨터에 있는 AI 앱을 **모두 자동으로** 찾아 연결해 줘요. 앱마다 따로 할 일은 없어요.
 
 1. **터미널을 열어요** — Windows는 검색창에 `cmd` → "명령 프롬프트", Mac은 `⌘+스페이스`로 `터미널`, Linux는 터미널 앱(보통 `Ctrl+Alt+T`)이에요.
-2. **아래 명령을 붙여넣고 Enter를 눌러요.** (`@1.8.9`은 커넥터가 나도 모르게 바뀌지 않도록 고정한 버전이에요.)
+2. **아래 명령을 붙여넣고 Enter를 눌러요.** (`@1.8.11`은 커넥터가 나도 모르게 바뀌지 않도록 고정한 버전이에요.)
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.9 install
+   npx -y @modootoday/datalab-extension-mcp@1.8.11 install
    ```
 
    영어 글자가 여러 줄 올라오는 건 정상이에요. 이 명령은 커넥터를 내려받아 실행할 뿐, 다른 건 건드리지 않아요.
@@ -118,10 +118,10 @@ Claude 같은 AI 앱을 데이터랩툴즈에 연결해 주는 작은 무료 프
 설치할 때 **글쓰기 도움말(스킬)** 도 함께 놓입니다. AI 앱은 켜질 때마다 설치된 도움말의 이름과 설명을 전부 읽기 때문에, 많이 깔수록 대화에 쓸 자리가 줄어들어요. 그래서 기본은 **바로 쓸 수 있는 것만** 놓습니다.
 
 ```
-npx -y @modootoday/datalab-extension-mcp skills list
-npx -y @modootoday/datalab-extension-mcp skills status
-npx -y @modootoday/datalab-extension-mcp skills attach <이름>
-npx -y @modootoday/datalab-extension-mcp skills detach <이름>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills list
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills status
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills attach <이름>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 skills detach <이름>
 ```
 
 - `list` 는 이 버전에 들어 있는 전부를 이름과 설명으로 보여 줘요.
@@ -140,9 +140,9 @@ npx -y @modootoday/datalab-extension-mcp skills detach <이름>
 패널에서 [등록 코드 만들기]를 눌러도 되고, 터미널을 쓰셔도 돼요.
 
 ```
-npx -y @modootoday/datalab-extension-mcp browsers add "회사 크롬"
-npx -y @modootoday/datalab-extension-mcp browsers list
-npx -y @modootoday/datalab-extension-mcp browsers revoke <handle>
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers add "회사 크롬"
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers list
+npx -y @modootoday/datalab-extension-mcp@1.8.11 browsers revoke <handle>
 ```
 
 `add` 를 실행하면 **연결 토큰을 붙여넣으라고 물어봐요** — 설치할 때와 같은 값이고, 패널의 `복사` 버튼으로 얻습니다. 그러면 코드가 **한 번만** 출력돼요. 커넥터는 그 코드를 저장하지 않고 지문만 남기므로 다시 보여 줄 수 없어요.
@@ -220,7 +220,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 - **연결이 사라졌을 때** — 처음 실행했던 그 명령을 한 번 더 실행하면 안전하게 다시 등록돼요. (일부 AI 앱이 설정 파일을 정리하며 연결을 지우기도 해요.)
 
   ```
-  npx -y @modootoday/datalab-extension-mcp@1.8.9 install
+  npx -y @modootoday/datalab-extension-mcp@1.8.11 install
   ```
 
 - **`'npx'을(는) 내부 또는 외부 명령...`** — Node.js가 없는 거예요. 위 2단계의 "Node.js가 없다면" 한 줄 설치가 가장 간단해요.
@@ -250,7 +250,7 @@ AI가 "그런 기능은 없다" 고 답하면, **"도구 목록을 확인해 보
 1. 터미널에서 아래 명령을 실행해요(AI 앱에 등록된 설정을 지워 줘요).
 
    ```
-   npx -y @modootoday/datalab-extension-mcp@1.8.9 uninstall
+   npx -y @modootoday/datalab-extension-mcp@1.8.11 uninstall
    ```
 
 2. 확장 설정에서 **MCP 연결을 꺼요.** 패널이 브릿지라, 꺼 두면 어딘가 설정 줄이 남아 있어도 AI 앱이 아무것도 조회할 수 없어요.

package/dist/{browsers-DRGNGPSI.js → browsers-EMS5V4M4.js}

@@ -1,12 +1,12 @@
 import {
   DEFAULT_HOST,
   DEFAULT_PORT
-} from "./chunk-GCRJQLTV.js";
+} from "./chunk-Q6SOGGKF.js";
 import {
   TOKEN_PROMPT_GUIDE,
   TOKEN_PROMPT_QUESTION,
   TOKEN_REQUIRED_NON_INTERACTIVE
-} from "./chunk-5S7RFXIU.js";
+} from "./chunk-S6D7YVBB.js";
 import "./chunk-MLKGABMK.js";
 
 // src/browsers.ts
@@ -40,9 +40,9 @@ async function runBrowsers(argv, deps) {
   const send = deps.fetchImpl ?? globalThis.fetch;
   const rest = withoutFlag(argv, "--token");
   const action = rest[0] ?? "list";
-  if (action !== "add" && action !== "list" && action !== "revoke") {
+  if (action !== "add" && action !== "list" && action !== "revoke" && action !== "repair") {
     deps.out(
-      `usage: browsers [add <label>|list|revoke <handle>] [--token <t>]`
+      `usage: browsers [add <label>|list|revoke <handle>|repair] [--token <t>]`
     );
     return 2;
   }
@@ -93,12 +93,19 @@ async function runBrowsers(argv, deps) {
   }
   if (action === "list") {
     const rows = parsed["browsers"] ?? [];
+    const registryStatus = parsed["registryStatus"];
+    if (registryStatus?.state === "degraded") {
+      deps.out(
+        `Registry warning: ${String(registryStatus.error ?? "degraded")}.`
+      );
+      deps.out("Run: datalab-extension-mcp browsers repair");
+    }
     if (rows.length === 0) {
       deps.out("No browsers registered.");
       return 0;
     }
     for (const row of rows) {
-      const state = row.browserId === null ? "waiting" : "connected";
+      const state = row.browserId === null ? "waiting" : row.connected === true ? "connected" : "detached";
       deps.out(`${row.handle}  ${state.padEnd(9)}  ${row.label}`);
     }
     return 0;
@@ -109,6 +116,13 @@ async function runBrowsers(argv, deps) {
     );
     return parsed["removed"] === true ? 0 : 1;
   }
+  if (action === "repair") {
+    const removed = Array.isArray(parsed["removed"]) ? parsed["removed"].length : 0;
+    deps.out(
+      removed > 0 ? `Repaired ${String(removed)} conflicting browser registration.` : "No conflicting browser registrations found."
+    );
+    return 0;
+  }
   deps.out(`Registered ${String(parsed["handle"])}.`);
   deps.out(`Paste this into the browser's panel \u2014 it is shown only now:`);
   deps.out(String(parsed["token"]));

package/dist/{chunk-WBMZLPXC.js → chunk-65FDP6LF.js}

@@ -4,7 +4,7 @@ import {
   mediaToolDescriptors,
   spawnDaemon,
   tryConnect
-} from "./chunk-GCRJQLTV.js";
+} from "./chunk-Q6SOGGKF.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -14583,6 +14583,14 @@ var HelloSchema = external_exports.object({
    */
   capabilities: external_exports.array(external_exports.string()).default([])
 });
+var BRIDGE_AUTH_CAPABILITY = "bridge-auth-bearer";
+var BROWSER_ROUTING_CAPABILITY = "browser-routing-v1";
+var LOCAL_FILE_REQUEST_CAPABILITY = "local-file-request-v1";
+var REQUIRED_BROWSER_CAPABILITIES = Object.freeze([
+  BRIDGE_AUTH_CAPABILITY,
+  BROWSER_ROUTING_CAPABILITY,
+  LOCAL_FILE_REQUEST_CAPABILITY
+]);
 var HelloAckSchema = external_exports.object({
   t: external_exports.literal("hello_ack"),
   /** The single version both sides will use for this session. */
@@ -14601,7 +14609,11 @@ var HelloNackReasonSchema = external_exports.enum([
   /** Origin header absent or not our extension. */
   "forbidden_origin",
   /** This browser already has an active event stream. */
-  "session_active"
+  "session_active",
+  /** Root authority cannot open a browser session. */
+  "browser_registration_required",
+  /** This panel predates mandatory browser routing and file permits. */
+  "browser_capability_required"
 ]);
 var BrowserRoutingSchema = external_exports.object({
   targetBrowserId: external_exports.string(),
@@ -15031,6 +15043,7 @@ var REASON_POLICY = Object.freeze({
   // --- The request itself must change ---
   unknown_tool: Object.freeze({ retryable: false }),
   invalid_args: Object.freeze({ retryable: false }),
+  browser_required: Object.freeze({ retryable: false }),
   tool_closed: Object.freeze({ retryable: false }),
   missing_in_build: Object.freeze({ retryable: false }),
   // ---  A human must act; re-calling only nags them ---
@@ -15444,7 +15457,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
   panelClosed: "\uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC774 \uB2EB\uD600 \uC788\uC5B4\uC694. \uD06C\uB86C\uC744 \uC5F4\uACE0 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC744 \uC5F4\uC5B4 \uB450\uBA74 \uBC14\uB85C \uB3D9\uC791\uD574\uC694.",
   /** The panel accepted the call but never answered inside the deadline. */
   toolTimeout: "\uBE0C\uB77C\uC6B0\uC800 \uC751\uB2F5\uC774 \uB2A6\uC5B4\uC9C0\uACE0 \uC788\uC5B4\uC694. \uD06C\uB86C\uC5D0\uC11C \uB124\uC774\uBC84\uC5D0 \uB85C\uADF8\uC778\uB418\uC5B4 \uC788\uB294\uC9C0 \uD655\uC778\uD558\uACE0 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
-  /** The session hit the per-session rate limit. */
+  /** The daemon request budget is empty. */
   rateLimited: "\uC694\uCCAD\uC774 \uB108\uBB34 \uC7A6\uC544\uC694. \uC7A0\uAE50 \uAE30\uB2E4\uB838\uB2E4\uAC00 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
   /**
    * The local connector accepted nothing back inside its ceiling. Distinct
@@ -15456,7 +15469,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
 var BRIDGE_AGENT_HINT = Object.freeze({
   /** Panel closed / not connected — the panel must be open for any tool to run. */
   notConnected: "The Datalab extension side panel is not open, so this tool cannot run right now. Ask the user to open the extension side panel in their browser, then call this tool again.",
-  /** Per-session rate limit tripped — transient. */
+  /** Daemon-wide rate limit tripped — transient. */
   rateLimited: "This tool is temporarily rate-limited. Wait a few seconds, then call it again.",
   /** The local connector did not answer at all — retrying immediately will not help. */
   connectorStuck: "The local connector stopped responding, so this tool cannot run right now. Do not retry immediately; ask the user to turn the MCP connection off and on again in the extension side panel."

package/dist/{chunk-GCRJQLTV.js → chunk-Q6SOGGKF.js}

@@ -1,4 +1,4 @@
-// ../mcp-server/dist/chunk-TUYW5HMB.js
+// ../mcp-server/dist/chunk-377F4BGN.js
 import { createHash } from "crypto";
 import { createHash as createHash2, randomUUID } from "crypto";
 import { mkdir, readFile, readdir, rm, writeFile } from "fs/promises";
@@ -24,8 +24,8 @@ import { spawn } from "child_process";
 import { closeSync } from "fs";
 import { randomBytes } from "crypto";
 import { readFileSync } from "fs";
-import { rename, writeFile as writeFile2 } from "fs/promises";
-import { join as join3 } from "path";
+import { mkdir as mkdir2, rename, writeFile as writeFile2 } from "fs/promises";
+import { dirname, join as join3 } from "path";
 import { createRequire } from "module";
 import { join as join4 } from "path";
 var __defProp = Object.defineProperty;
@@ -14439,6 +14439,11 @@ var HelloSchema = external_exports.object({
 var BRIDGE_AUTH_CAPABILITY = "bridge-auth-bearer";
 var BROWSER_ROUTING_CAPABILITY = "browser-routing-v1";
 var LOCAL_FILE_REQUEST_CAPABILITY = "local-file-request-v1";
+var REQUIRED_BROWSER_CAPABILITIES = Object.freeze([
+  BRIDGE_AUTH_CAPABILITY,
+  BROWSER_ROUTING_CAPABILITY,
+  LOCAL_FILE_REQUEST_CAPABILITY
+]);
 function bearerToken(header) {
   if (typeof header !== "string") return null;
   const match = /^Bearer (.+)$/i.exec(header.trim());
@@ -14462,7 +14467,11 @@ var HelloNackReasonSchema = external_exports.enum([
   /** Origin header absent or not our extension. */
   "forbidden_origin",
   /** This browser already has an active event stream. */
-  "session_active"
+  "session_active",
+  /** Root authority cannot open a browser session. */
+  "browser_registration_required",
+  /** This panel predates mandatory browser routing and file permits. */
+  "browser_capability_required"
 ]);
 var BrowserRoutingSchema = external_exports.object({
   targetBrowserId: external_exports.string(),
@@ -14652,6 +14661,14 @@ var REFUSED = {
   message: "Pairing token missing or invalid."
 };
 function resolveCredential(presented, known) {
+  const root = checkToken(presented.token, known.rootToken);
+  if (root.ok) {
+    return {
+      kind: "refused",
+      reason: "browser_registration_required",
+      message: "The root token is management-only. Register this browser with its own token."
+    };
+  }
   const { browserId } = presented;
   if (browserId !== void 0 && browserId.length > 0) {
     const expected = known.claimed.get(browserId);
@@ -14662,8 +14679,7 @@ function resolveCredential(presented, known) {
       return REFUSED;
     }
   }
-  const root = checkToken(presented.token, known.rootToken);
-  return root.ok ? { kind: "root" } : REFUSED;
+  return REFUSED;
 }
 var READ_ONLY_TOOLS = [
   "datalab_browsers",
@@ -15015,6 +15031,7 @@ var REASON_POLICY = Object.freeze({
   // --- The request itself must change ---
   unknown_tool: Object.freeze({ retryable: false }),
   invalid_args: Object.freeze({ retryable: false }),
+  browser_required: Object.freeze({ retryable: false }),
   tool_closed: Object.freeze({ retryable: false }),
   missing_in_build: Object.freeze({ retryable: false }),
   // ---  A human must act; re-calling only nags them ---
@@ -15483,7 +15500,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
   panelClosed: "\uD06C\uB86C\uC5D0\uC11C \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC774 \uB2EB\uD600 \uC788\uC5B4\uC694. \uD06C\uB86C\uC744 \uC5F4\uACE0 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC744 \uC5F4\uC5B4 \uB450\uBA74 \uBC14\uB85C \uB3D9\uC791\uD574\uC694.",
   /** The panel accepted the call but never answered inside the deadline. */
   toolTimeout: "\uBE0C\uB77C\uC6B0\uC800 \uC751\uB2F5\uC774 \uB2A6\uC5B4\uC9C0\uACE0 \uC788\uC5B4\uC694. \uD06C\uB86C\uC5D0\uC11C \uB124\uC774\uBC84\uC5D0 \uB85C\uADF8\uC778\uB418\uC5B4 \uC788\uB294\uC9C0 \uD655\uC778\uD558\uACE0 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
-  /** The session hit the per-session rate limit. */
+  /** The daemon request budget is empty. */
   rateLimited: "\uC694\uCCAD\uC774 \uB108\uBB34 \uC7A6\uC544\uC694. \uC7A0\uAE50 \uAE30\uB2E4\uB838\uB2E4\uAC00 \uB2E4\uC2DC \uC2DC\uB3C4\uD574 \uC8FC\uC138\uC694.",
   /**
    * The local connector accepted nothing back inside its ceiling. Distinct
@@ -15495,7 +15512,7 @@ var BRIDGE_USER_MESSAGES = Object.freeze({
 var BRIDGE_AGENT_HINT = Object.freeze({
   /** Panel closed / not connected — the panel must be open for any tool to run. */
   notConnected: "The Datalab extension side panel is not open, so this tool cannot run right now. Ask the user to open the extension side panel in their browser, then call this tool again.",
-  /** Per-session rate limit tripped — transient. */
+  /** Daemon-wide rate limit tripped — transient. */
   rateLimited: "This tool is temporarily rate-limited. Wait a few seconds, then call it again.",
   /** The local connector did not answer at all — retrying immediately will not help. */
   connectorStuck: "The local connector stopped responding, so this tool cannot run right now. Do not retry immediately; ask the user to turn the MCP connection off and on again in the extension side panel."
@@ -15615,10 +15632,6 @@ var PendingRegistry = class {
 function digestToken(token) {
   return createHash("sha256").update(token, "utf8").digest("hex");
 }
-var LEGACY_SESSION_KEY = "legacy";
-function sessionKeyFor(credential) {
-  return credential.kind === "claimed" ? credential.browserId : LEGACY_SESSION_KEY;
-}
 var DEFAULT_RATE_LIMIT = BRIDGE_LIMITS;
 function daemonIdTag() {
   return Math.floor(Math.random() * 16777215).toString(36).padStart(4, "0");
@@ -15629,7 +15642,6 @@ var Bridge = class {
   #idTag = daemonIdTag();
   #sessionSeq = 0;
   #defaultKey = null;
-  #retireSession = null;
   #bucketTokens = 0;
   #bucketRefilledAt = 0;
   // Last catalog the panel reported, kept across disconnects: many hosts cache
@@ -15638,12 +15650,9 @@ var Bridge = class {
   #cachedTools = [];
   constructor(deps) {
     this.#deps = deps;
-  }
-  bindRetireSession(retire) {
-    if (this.#retireSession !== null) {
-      throw new Error("bridge transport retirement is already bound");
-    }
-    this.#retireSession = retire;
+    const limit = deps.rateLimit ?? DEFAULT_RATE_LIMIT;
+    this.#bucketTokens = limit.capacity;
+    this.#bucketRefilledAt = (deps.now ?? Date.now)();
   }
   /**
    * The session a request with no browser named goes to. Map preserves
@@ -15669,13 +15678,16 @@ var Bridge = class {
    */
   connectedBrowsers() {
     const keys = [...this.#sessions.values()].filter((entry) => entry.streamActive).map((entry) => entry.key);
-    const primary = this.#defaultKey === null ? this.#primary()?.key ?? null : this.#defaultKey;
+    const primary = this.#primary()?.key ?? null;
     return keys.map((id) => ({
       id,
       name: this.#deps.browserLabels.get(id) ?? null,
       primary: primary === id
     }));
   }
+  browserRegistryStatus() {
+    return this.#deps.browserRegistryStatus?.() ?? { state: "ready" };
+  }
   /**
    * The only place a registry is born, and it is born already in the map.
    * One living anywhere else would be missed by `sweep` and by `#closeSession`,
@@ -15699,7 +15711,6 @@ var Bridge = class {
       key,
       session,
       tokenHash: auth.tokenHash,
-      authRequired: auth.authRequired,
       routingRequired: auth.routingRequired,
       fileRequestBound: auth.fileRequestBound,
       streamActive: false,
@@ -15751,9 +15762,6 @@ var Bridge = class {
   sessionForKey(key) {
     return this.#sessions.get(key)?.session ?? null;
   }
-  legacySessionKey() {
-    return this.#sessions.has(LEGACY_SESSION_KEY) ? LEGACY_SESSION_KEY : null;
-  }
   /** Is a panel connected and ready to serve tool calls? */
   get connected() {
     return this.#primary() !== null;
@@ -15800,9 +15808,6 @@ var Bridge = class {
     if (!timingSafeEqual(hash2, entry.tokenHash) || this.#deps.wasRevoked(hash2)) {
       return null;
     }
-    if (entry.key === LEGACY_SESSION_KEY) {
-      return this.verifyRootToken(presented) ? "root" : null;
-    }
     const current = this.#deps.claimedBrowsers.get(entry.key);
     return current !== void 0 && timingSafeEqual(hash2, current) ? "claimed_browser" : null;
   }
@@ -15814,33 +15819,6 @@ var Bridge = class {
     }
     return "unknown";
   }
-  authorizeLegacyFileCredential(presented) {
-    if (typeof presented !== "string" || presented.length === 0) {
-      return {
-        ok: false,
-        reason: "file_session_token_missing",
-        credential: "missing"
-      };
-    }
-    const credential = this.#fileCredentialClass(presented);
-    for (const entry of this.#sessions.values()) {
-      const accepted = this.#fileCredential(entry, presented);
-      if (accepted && !entry.fileRequestBound) {
-        return {
-          ok: true,
-          key: entry.key,
-          sessionId: entry.session.sessionId,
-          credential: accepted,
-          requestBound: false
-        };
-      }
-    }
-    return {
-      ok: false,
-      reason: "file_session_token_mismatch",
-      credential
-    };
-  }
   authorizeFileRequest(input) {
     const entry = [...this.#sessions.values()].find(
       (candidate) => candidate.session.sessionId === input.sessionId
@@ -15859,7 +15837,7 @@ var Bridge = class {
         credential: "missing",
         key: entry.key,
         sessionId: entry.session.sessionId,
-        ...input.requestId === void 0 ? {} : { requestId: input.requestId }
+        requestId: input.requestId
       };
     }
     const credential = this.#fileCredential(entry, input.token);
@@ -15870,32 +15848,23 @@ var Bridge = class {
         credential: this.#fileCredentialClass(input.token),
         key: entry.key,
         sessionId: entry.session.sessionId,
-        ...input.requestId === void 0 ? {} : { requestId: input.requestId }
+        requestId: input.requestId
       };
     }
     if (!entry.fileRequestBound) {
       return {
-        ok: true,
+        ok: false,
+        reason: "file_request_expired",
+        credential,
         key: entry.key,
         sessionId: entry.session.sessionId,
-        ...input.requestId === void 0 ? {} : { requestId: input.requestId },
-        credential,
-        requestBound: false
+        requestId: input.requestId
       };
     }
     const now = (this.#deps.now ?? Date.now)();
     for (const [requestId, permit2] of entry.filePermits) {
       if (permit2.expiresAt <= now) entry.filePermits.delete(requestId);
     }
-    if (input.requestId === void 0) {
-      return {
-        ok: false,
-        reason: "file_request_expired",
-        credential,
-        key: entry.key,
-        sessionId: entry.session.sessionId
-      };
-    }
     const permit = entry.filePermits.get(input.requestId);
     if (!permit) {
       return {
@@ -15981,6 +15950,32 @@ var Bridge = class {
         message: idCheck.message
       };
     }
+    const negotiated = negotiateProtocol(parsed.data.protocolVersions);
+    if (!negotiated.ok) {
+      return {
+        t: "hello_nack",
+        reason: negotiated.reason,
+        supported: negotiated.supported,
+        message: negotiated.message
+      };
+    }
+    const bearerRequired = parsed.data.capabilities.includes(
+      BRIDGE_AUTH_CAPABILITY
+    );
+    const routingRequired = parsed.data.capabilities.includes(
+      BROWSER_ROUTING_CAPABILITY
+    );
+    const fileRequestBound = parsed.data.capabilities.includes(
+      LOCAL_FILE_REQUEST_CAPABILITY
+    );
+    if (!bearerRequired || !routingRequired || !fileRequestBound) {
+      return {
+        t: "hello_nack",
+        reason: "browser_capability_required",
+        supported: [],
+        message: "This browser panel is outdated. Close and reopen the side panel before reconnecting."
+      };
+    }
     const tokenHash = digestToken(parsed.data.token);
     const browserId = parsed.data.browserId;
     if (browserId !== void 0 && browserId.length > 0 && !this.#deps.claimedBrowsers.has(browserId)) {
@@ -16001,19 +15996,23 @@ var Bridge = class {
         message: credential.message
       };
     }
-    const negotiated = negotiateProtocol(parsed.data.protocolVersions);
-    if (!negotiated.ok) {
+    if (credential.kind !== "claimed") {
       return {
         t: "hello_nack",
-        reason: negotiated.reason,
-        supported: negotiated.supported,
-        message: negotiated.message
+        reason: "browser_registration_required",
+        supported: [],
+        message: "The root token is management-only. Register this browser with its own token."
       };
     }
-    const key = sessionKeyFor(credential);
+    const key = credential.browserId;
     const held = this.#sessions.get(key);
     if (held?.streamActive) {
-      this.#retireSession?.(key, held.session.sessionId);
+      return {
+        t: "hello_nack",
+        reason: "session_active",
+        supported: [],
+        message: "This browser already has an active side-panel session."
+      };
     }
     const session = {
       // A counter, not a timestamp: a panel reload produces two handshakes
@@ -16023,34 +16022,17 @@ var Bridge = class {
       protocolVersion: negotiated.version,
       extensionVersion: parsed.data.extensionVersion
     };
-    const authRequired = parsed.data.capabilities.includes(
-      BRIDGE_AUTH_CAPABILITY
-    );
-    const routingRequired = credential.kind === "claimed" && parsed.data.capabilities.includes(BROWSER_ROUTING_CAPABILITY);
-    const fileRequestBound = parsed.data.capabilities.includes(
-      LOCAL_FILE_REQUEST_CAPABILITY
-    );
     this.#installSession(key, session, {
       tokenHash,
-      authRequired,
       routingRequired,
       fileRequestBound
     });
-    const limit = this.#deps.rateLimit ?? DEFAULT_RATE_LIMIT;
-    this.#bucketTokens = limit.capacity;
-    this.#bucketRefilledAt = (this.#deps.now ?? Date.now)();
     return {
       t: "hello_ack",
       protocolVersion: negotiated.version,
       serverVersion: this.#deps.serverVersion,
       sessionId: session.sessionId,
-      // Echoed only when it is actually on, so the panel can tell a server that
-      // is holding it to the header from one that predates the gate entirely.
-      capabilities: [
-        ...authRequired ? [BRIDGE_AUTH_CAPABILITY] : [],
-        ...routingRequired ? [BROWSER_ROUTING_CAPABILITY] : [],
-        ...fileRequestBound ? [LOCAL_FILE_REQUEST_CAPABILITY] : []
-      ]
+      capabilities: [...REQUIRED_BROWSER_CAPABILITIES]
     };
   }
   /**
@@ -16068,15 +16050,13 @@ var Bridge = class {
     return this.#mayAct(entry, presented);
   }
   #mayAct(entry, presented) {
-    if (!entry.authRequired) return true;
     if (typeof presented !== "string" || presented.length === 0) return false;
     return timingSafeEqual(digestToken(presented), entry.tokenHash);
   }
   /**
    * Route a frame from the panel to whoever is waiting for it.
    *
-   * `presented` is the credential the poster carried. A session that asked to
-   * be held to it refuses anything else; one that did not is unaffected.
+   * `presented` is the credential the poster carried.
    */
   receive(raw, presented) {
     const classified = classifyFrame(
@@ -16244,7 +16224,7 @@ var Bridge = class {
     };
   }
   /**
-   * Refill-then-take on the session's token bucket. The refill is computed
+   * Refill-then-take on the daemon's token bucket. The refill is computed
    * lazily on each take, so there is no timer to leak and an injected clock
    * keeps it testable without waiting real seconds.
    */
@@ -16268,7 +16248,7 @@ var Bridge = class {
     if (browser === void 0) {
       entry = this.#primary();
     } else {
-      const known = this.#deps.claimedBrowsers.has(browser) || browser === LEGACY_SESSION_KEY && this.#sessions.has(browser);
+      const known = this.#deps.claimedBrowsers.has(browser);
       if (!known) {
         return {
           ok: false,
@@ -16857,14 +16837,22 @@ async function handleMcpRequest(bridge, body, accept, stage) {
       delete args["browser"];
     }
     if (params.name === BROWSERS_TOOL) {
+      const registryStatus = bridge.browserRegistryStatus();
+      const { state: registryState, ...registryDetail } = registryStatus;
+      const payload = {
+        browsers: bridge.connectedBrowsers(),
+        registryStatus: registryState,
+        ...registryState === "ready" ? {} : registryDetail
+      };
       return frameMcpResponse(
         rpcResult(id, {
           content: [
             {
               type: "text",
-              text: JSON.stringify({ browsers: bridge.connectedBrowsers() })
+              text: JSON.stringify(payload)
             }
-          ]
+          ],
+          ...registryState === "disabled" ? { isError: true } : {}
         }),
         accept
       );
@@ -17164,13 +17152,6 @@ function createHttpBridge(opts) {
     opts.bridge.disconnect(key);
     if (wasPrimary) scheduleToolsDrop();
   };
-  opts.bridge.bindRetireSession((key, sessionId) => {
-    const stream = streams.get(key);
-    if (!stream || stream.sessionId !== sessionId) return;
-    const wasPrimary = key === opts.bridge.sessionKey;
-    removeStream(key)?.end();
-    if (wasPrimary) scheduleToolsDrop();
-  });
   const server = createServer((req, res) => {
     const url2 = new URL(req.url ?? "/", `http://${host}`);
     const origin = req.headers.origin;
@@ -17240,7 +17221,11 @@ function createHttpBridge(opts) {
     }
     if (req.method === "GET" && url2.pathname === "/bridge/events") {
       const claimed = url2.searchParams.get("session");
-      const key = claimed === null ? opts.bridge.legacySessionKey() : opts.bridge.keyForSession(claimed);
+      if (claimed === null || claimed.length === 0) {
+        json2(res, 400, { error: "session_required" });
+        return;
+      }
+      const key = claimed === null ? null : opts.bridge.keyForSession(claimed);
       if (key === null) {
         opts.log?.("refused a stream for an unknown session");
         res.writeHead(200, { "content-type": "text/event-stream" });
@@ -17267,13 +17252,8 @@ function createHttpBridge(opts) {
         // by nature.
         "x-accel-buffering": "no"
       });
-      const sessionId = claimed ?? opts.bridge.sessionForKey(key)?.sessionId ?? "";
-      if (!sessionId) {
-        res.end();
-        return;
-      }
       try {
-        installStream(key, sessionId, res);
+        installStream(key, claimed, res);
       } catch {
         res.end();
         return;
@@ -17314,7 +17294,18 @@ function createHttpBridge(opts) {
         }
         const action = b?.["action"];
         if (action === "list") {
-          json2(res, 200, { ok: true, browsers: await registry2.list() });
+          const active = new Set(
+            opts.bridge.connectedBrowsers().map((row) => row.id)
+          );
+          const browsers = (await registry2.list()).map((row) => ({
+            ...row,
+            connected: row.browserId !== null && active.has(row.browserId)
+          }));
+          json2(res, 200, {
+            ok: true,
+            browsers,
+            registryStatus: registry2.status()
+          });
           return;
         }
         if (action === "add") {
@@ -17330,6 +17321,10 @@ function createHttpBridge(opts) {
           });
           return;
         }
+        if (action === "repair") {
+          json2(res, 200, { ok: true, ...await registry2.repair() });
+          return;
+        }
         json2(res, 400, { error: "unknown action" });
       }).catch((err) => {
         const why = err instanceof Error ? err.message : String(err);
@@ -17347,20 +17342,20 @@ function createHttpBridge(opts) {
         const hasRequestId = b !== null && Object.hasOwn(b, "requestId");
         const invalidSessionId = hasSessionId && (typeof b?.sessionId !== "string" || b.sessionId.length === 0);
         const invalidRequestId = hasRequestId && (typeof b?.requestId !== "string" || b.requestId.length === 0);
-        if (invalidSessionId || invalidRequestId) {
+        if (!hasSessionId || !hasRequestId || invalidSessionId || invalidRequestId) {
           json2(res, 403, {
             error: "unauthorized",
             message: "\uC0AC\uC9C4 \uC694\uCCAD\uC758 \uC5F0\uACB0 \uC815\uBCF4\uB97C \uD655\uC778\uD558\uC9C0 \uBABB\uD588\uC5B4\uC694."
           });
           return;
         }
-        const auth = hasSessionId ? opts.bridge.authorizeFileRequest({
+        const auth = opts.bridge.authorizeFileRequest({
           sessionId: b.sessionId,
-          ...hasRequestId ? { requestId: b.requestId } : {},
+          requestId: b.requestId,
           token,
           path,
           ...typeof b?.tool === "string" ? { tool: b.tool } : {}
-        }) : opts.bridge.authorizeLegacyFileCredential(token);
+        });
         if (!auth.ok) {
           opts.log?.(
             `file request refused: reason=${auth.reason} credential=${auth.credential} tokenPresent=${String(token.length > 0)} sessionMatch=${String(auth.key !== void 0)} open=not-entered`
@@ -17383,7 +17378,7 @@ function createHttpBridge(opts) {
           return;
         }
         opts.log?.(
-          `file request authorised: browser=${correlationValue(auth.key, 8)} session=${correlationValue(auth.sessionId, 32)} request=${auth.requestId ? correlationValue(auth.requestId, 96) : "legacy"} credential=${auth.credential} registryMatch=${String(auth.credential === "claimed_browser")} open=entered`
+          `file request authorised: browser=${correlationValue(auth.key, 8)} session=${correlationValue(auth.sessionId, 32)} request=${correlationValue(auth.requestId, 96)} credential=${auth.credential} registryMatch=${String(auth.credential === "claimed_browser")} open=entered`
         );
         let source = null;
         let owner = null;
@@ -17842,6 +17837,7 @@ async function writeLedger(path, claims) {
 var writing = /* @__PURE__ */ new Map();
 async function writeOnce(path, claims) {
   const tmp = `${path}.${process.pid}.tmp`;
+  await mkdir2(dirname(path), { recursive: true, mode: 448 });
   await writeFile2(tmp, `${JSON.stringify(claims, null, 2)}
 `, {
     mode: 384
@@ -17873,16 +17869,53 @@ function matches(claim, handle) {
 function createBrowserRegistry(opts) {
   const now = opts.now ?? (() => /* @__PURE__ */ new Date());
   const revoked = /* @__PURE__ */ new Set();
-  const current = () => {
-    const read = readLedger(opts.path);
-    if (read.state === "unreadable") {
-      throw new Error(`browser registry is unreadable: ${read.reason}`);
-    }
-    const rows = read.state === "ok" ? [...read.rows] : [];
-    if (opts.forbiddenTokenHash && ledgerOverlapsToken(rows, opts.forbiddenTokenHash)) {
-      throw new Error("browser registry overlaps the root authority");
+  const initial = readLedger(opts.path);
+  const unreadable = initial.state === "unreadable" ? initial.reason : null;
+  let rows = initial.state === "ok" ? initial.rows.map((row) => ({ ...row })) : [];
+  let mutationTail = Promise.resolve();
+  let pendingMutations = 0;
+  const view = (source = rows) => {
+    if (unreadable !== null) {
+      throw new Error(`browser registry is unreadable: ${unreadable}`);
+    }
+    if (!opts.forbiddenTokenHash) return { rows: [...source], quarantined: [] };
+    const quarantined = source.filter(
+      (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
+    );
+    return {
+      rows: source.filter(
+        (row) => !timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
+      ),
+      quarantined
+    };
+  };
+  const current = () => view().rows;
+  const serialize = (work) => {
+    pendingMutations += 1;
+    const result = mutationTail.then(work, work);
+    mutationTail = result.then(
+      () => {
+        pendingMutations -= 1;
+      },
+      () => {
+        pendingMutations -= 1;
+      }
+    );
+    return result;
+  };
+  const transact = (propose) => {
+    if (unreadable !== null) {
+      return Promise.reject(
+        new Error(`browser registry is unreadable: ${unreadable}`)
+      );
     }
-    return rows;
+    return serialize(async () => {
+      const proposal = propose(rows.map((row) => ({ ...row })));
+      await writeLedger(opts.path, proposal.next);
+      rows = proposal.next;
+      proposal.commit?.();
+      return proposal.result;
+    });
   };
   return {
     async add(label) {
@@ -17893,8 +17926,10 @@ function createBrowserRegistry(opts) {
         label,
         createdAt: now().toISOString()
       };
-      await writeLedger(opts.path, [...current(), claim]);
-      return { handle: handleOf(claim), token };
+      return transact((snapshot) => ({
+        next: [...snapshot, claim],
+        result: { handle: handleOf(claim), token }
+      }));
     },
     async list() {
       return current().map((claim) => ({
@@ -17905,6 +17940,7 @@ function createBrowserRegistry(opts) {
       }));
     },
     claim(browserId, tokenHash) {
+      if (pendingMutations > 0) return false;
       if (opts.claimed.has(browserId)) return false;
       for (const held of opts.claimed.values()) {
         if (timingSafeEqual(held, tokenHash)) return false;
@@ -17919,26 +17955,81 @@ function createBrowserRegistry(opts) {
         (claim) => claim.browserId === null && timingSafeEqual(claim.tokenHash, tokenHash)
       );
       if (!row) return false;
-      row.browserId = browserId;
+      const stored = rows.find((claim) => claim.tokenHash === row.tokenHash);
+      if (!stored) return false;
+      stored.browserId = browserId;
       opts.claimed.set(browserId, row.tokenHash);
-      void writeLedger(opts.path, claims).catch(() => {
-      });
+      opts.onClaim?.(browserId, stored.label);
+      const snapshot = rows.map((entry) => ({ ...entry }));
+      void serialize(async () => {
+        try {
+          await writeLedger(opts.path, snapshot);
+        } catch (error51) {
+          if (stored.browserId === browserId) stored.browserId = null;
+          if (opts.claimed.get(browserId) === row.tokenHash) {
+            opts.claimed.delete(browserId);
+            opts.onRevoke?.(browserId);
+          }
+          throw error51;
+        }
+      }).catch(() => void 0);
       return true;
     },
     async revoke(handle) {
-      const claims = current();
-      const kept = claims.filter((claim) => !matches(claim, handle));
-      if (kept.length === claims.length) return false;
-      await writeLedger(opts.path, kept);
-      for (const claim of claims) {
-        if (!matches(claim, handle)) continue;
-        revoked.add(claim.tokenHash);
-        if (claim.browserId !== null) {
-          opts.claimed.delete(claim.browserId);
-          opts.onRevoke?.(claim.browserId);
+      return transact((snapshot) => {
+        const claims = view(snapshot).rows;
+        const removed = claims.filter((claim) => matches(claim, handle));
+        if (removed.length === 0) {
+          return { next: snapshot, result: false };
         }
+        const removedHashes = new Set(removed.map((claim) => claim.tokenHash));
+        return {
+          next: snapshot.filter((claim) => !removedHashes.has(claim.tokenHash)),
+          result: true,
+          commit: () => {
+            for (const claim of removed) {
+              revoked.add(claim.tokenHash);
+              if (claim.browserId !== null) {
+                opts.claimed.delete(claim.browserId);
+                opts.onRevoke?.(claim.browserId);
+              }
+            }
+          }
+        };
+      });
+    },
+    async repair() {
+      return transact((snapshot) => {
+        const currentView = view(snapshot);
+        const removed = currentView.quarantined.map(handleOf);
+        const removedHashes = new Set(
+          currentView.quarantined.map((row) => row.tokenHash)
+        );
+        return {
+          next: snapshot.filter((row) => !removedHashes.has(row.tokenHash)),
+          result: { removed }
+        };
+      });
+    },
+    status() {
+      if (unreadable !== null) {
+        return {
+          state: "disabled",
+          error: "browser_registry_unreadable",
+          detail: unreadable
+        };
       }
-      return true;
+      if (opts.forbiddenTokenHash && ledgerOverlapsToken(rows, opts.forbiddenTokenHash)) {
+        return {
+          state: "degraded",
+          error: "browser_registry_root_authority_overlap",
+          quarantinedHandles: rows.filter(
+            (row) => timingSafeEqual(row.tokenHash, opts.forbiddenTokenHash)
+          ).map(handleOf),
+          recovery: "browsers repair"
+        };
+      }
+      return { state: "ready" };
     },
     wasRevoked(tokenHash) {
       return revoked.has(tokenHash);
@@ -17972,12 +18063,12 @@ function runDaemon(env, deps = {}) {
   const browserLabels = /* @__PURE__ */ new Map();
   const ledger = readLedger(ledgerPath(deps.home));
   const rootTokenHash = digestToken(token);
-  const ledgerAuthorityValid = ledger.state !== "ok" || !ledgerOverlapsToken(ledger.rows, rootTokenHash);
-  if (ledger.state === "ok" && ledgerAuthorityValid) {
-    for (const [id, hash2] of claimedDigestsFrom(ledger.rows)) {
+  const safeLedgerRows = ledger.state === "ok" ? ledger.rows.filter((row) => row.tokenHash !== rootTokenHash) : [];
+  if (ledger.state === "ok") {
+    for (const [id, hash2] of claimedDigestsFrom(safeLedgerRows)) {
       claimedBrowsers.set(id, hash2);
     }
-    for (const row of ledger.rows) {
+    for (const row of safeLedgerRows) {
       if (row.browserId !== null) browserLabels.set(row.browserId, row.label);
     }
   }
@@ -17986,8 +18077,10 @@ function runDaemon(env, deps = {}) {
       `browser registry is unreadable (${ledger.reason}); registering is off`
     );
   }
-  if (!ledgerAuthorityValid) {
-    log("browser registry overlaps the root authority; registering is off");
+  if (ledger.state === "ok" && ledgerOverlapsToken(ledger.rows, rootTokenHash)) {
+    log(
+      "browser registry overlaps the root authority; conflicting rows are quarantined"
+    );
   }
   const bridge = new Bridge({
     send: (frame, key) => http.send(frame, key),
@@ -17995,24 +18088,11 @@ function runDaemon(env, deps = {}) {
     extensionIds,
     serverVersion: version2,
     rateLimit: deps.rateLimit,
-    // Empty until a browser is registered, and nothing issues registrations
-    // yet — so every panel still shares the one slot it always had.
+    // Empty until a browser is registered.
     claimedBrowsers,
     browserLabels,
-    claimBrowser: (browserId, tokenHash) => {
-      const took = registry2.claim(browserId, tokenHash);
-      if (took) {
-        const now = readLedger(ledgerPath(deps.home));
-        if (now.state === "ok") {
-          for (const row of now.rows) {
-            if (row.browserId === browserId) {
-              browserLabels.set(browserId, row.label);
-            }
-          }
-        }
-      }
-      return took;
-    },
+    browserRegistryStatus: () => registry2.status(),
+    claimBrowser: (browserId, tokenHash) => registry2.claim(browserId, tokenHash),
     wasRevoked: (tokenHash) => registry2.wasRevoked(tokenHash),
     log
   });
@@ -18021,6 +18101,7 @@ function runDaemon(env, deps = {}) {
   const registry2 = createBrowserRegistry({
     path: ledgerPath(deps.home),
     claimed: claimedBrowsers,
+    onClaim: (browserId, label) => browserLabels.set(browserId, label),
     forbiddenTokenHash: rootTokenHash,
     onRevoke: (browserId) => http.disconnect(browserId)
   });

package/dist/{chunk-5S7RFXIU.js → chunk-S6D7YVBB.js}

@@ -1109,7 +1109,7 @@ async function removeSkills(io, detectedIds, slugs) {
 var RESTART_NOTICE = "\uB9C8\uC9C0\uB9C9 \uD55C \uB2E8\uACC4: AI \uC571\uC744 \uC644\uC804\uD788 \uC885\uB8CC\uD588\uB2E4\uAC00 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.\n(Windows: \uC791\uC5C5 \uD45C\uC2DC\uC904 \uD2B8\uB808\uC774 \uC544\uC774\uCF58\uC5D0\uC11C \uC885\uB8CC)";
 var NOTHING_CHANGED = "\uC544\uBB34\uAC83\uB3C4 \uBC14\uAFB8\uC9C0 \uC54A\uC558\uC5B4\uC694.";
 var UNINSTALL_DONE = "\uC815\uB9AC\uAC00 \uB05D\uB0AC\uC5B4\uC694.";
-var UNINSTALL_TOKEN_REMINDER = "\uC5F0\uACB0 \uD1A0\uD070\uAE4C\uC9C0 \uC5C6\uC560\uB824\uBA74 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC5D0\uC11C '\uC5F0\uB3D9 \uD574\uC81C' \uBC84\uD2BC\uC744 \uB20C\uB7EC \uC8FC\uC138\uC694. \uD3D0\uAE30\uB41C \uD1A0\uD070\uC740 \uC124\uC815\uC5D0 \uB0A8\uC740 \uD56D\uBAA9\uC744 \uC804\uBD80 \uBB34\uB825\uD654\uD574\uC694.";
+var UNINSTALL_TOKEN_REMINDER = "\uC774 \uBE0C\uB77C\uC6B0\uC800\uC758 \uB85C\uCEEC \uC5F0\uACB0 \uC815\uBCF4\uB3C4 \uC9C0\uC6B0\uB824\uBA74 \uB370\uC774\uD130\uB7A9\uD234\uC988 \uD328\uB110\uC5D0\uC11C '\uC774 \uBE0C\uB77C\uC6B0\uC800 \uC5F0\uACB0 \uB044\uAE30'\uB97C \uB20C\uB7EC \uC8FC\uC138\uC694. \uC6CC\uD06C\uBCA4\uCE58 \uB4F1\uB85D\uC740 \uBE0C\uB77C\uC6B0\uC800 \uBAA9\uB85D\uC5D0\uC11C \uBCC4\uB3C4\uB85C \uB0B4\uB9B4 \uC218 \uC788\uC5B4\uC694.";
 var PERMISSION_DENIED_HINT = "\uD30C\uC77C \uAD8C\uD55C \uB54C\uBB38\uC5D0 \uC124\uC815\uC744 \uC4F8 \uC218 \uC5C6\uC5C8\uC5B4\uC694. \uD30C\uC77C \uAD8C\uD55C\uC744 \uD655\uC778\uD55C \uB4A4 \uAC19\uC740 \uBA85\uB839\uC5B4\uB97C \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.";
 var NO_HOSTS_DETECTED = "\uC5F0\uACB0\uD560 \uC218 \uC788\uB294 AI \uD504\uB85C\uADF8\uB7A8\uC744 \uCC3E\uC9C0 \uBABB\uD588\uC5B4\uC694.";
 var SUPPORTED_APPS_HEADER = "\uC9C0\uC6D0\uD558\uB294 \uD504\uB85C\uADF8\uB7A8\uACFC \uB2E4\uC6B4\uB85C\uB4DC \uC8FC\uC18C\uC608\uC694:";

package/dist/cli.js

@@ -2,10 +2,10 @@
 import {
   dispatchCli,
   runAdapter
-} from "./chunk-WBMZLPXC.js";
+} from "./chunk-65FDP6LF.js";
 import {
   runDaemon
-} from "./chunk-GCRJQLTV.js";
+} from "./chunk-Q6SOGGKF.js";
 import "./chunk-MLKGABMK.js";
 
 // src/cli.ts
@@ -17,7 +17,7 @@ function log(message) {
 `);
 }
 async function runInstaller(sub, argv) {
-  const { createNodeIo, runInstall, runUninstall } = await import("./dist-JICXADYR.js");
+  const { createNodeIo, runInstall, runUninstall } = await import("./dist-63JYX33Z.js");
   const opts = { version: VERSION };
   for (let i = 0; i < argv.length; i += 1) {
     const flag = argv[i];
@@ -62,8 +62,8 @@ async function main() {
     // Loaded lazily, like the installer: the adapter path is what an MCP host
     // spawns and must not pay for a command only an operator types.
     browsers: async (argv) => {
-      const { runBrowsers } = await import("./browsers-DRGNGPSI.js");
-      const { createNodeIo } = await import("./dist-JICXADYR.js");
+      const { runBrowsers } = await import("./browsers-EMS5V4M4.js");
+      const { createNodeIo } = await import("./dist-63JYX33Z.js");
       const io = createNodeIo();
       const code = await runBrowsers(argv, {
         env: process.env,
@@ -88,7 +88,7 @@ async function main() {
         attachSkill,
         detachSkill,
         skillsPayloadRoot
-      } = await import("./dist-JICXADYR.js");
+      } = await import("./dist-63JYX33Z.js");
       const io = createNodeIo();
       const root = skillsPayloadRoot();
       const code = await runSkills(argv, {
@@ -109,7 +109,7 @@ async function main() {
     unknown: (sub) => {
       log(`unknown command "${sub}".`);
       log(`usage: ${NAME} [install|uninstall|serve|browsers|skills]`);
-      log(`  browsers [add <label>|list|revoke <handle>] [--token <t>]`);
+      log(`  browsers [add <label>|list|revoke <handle>|repair] [--token <t>]`);
       log(`  skills [list|status|attach <slug>|detach <slug>]`);
       log(`run with no command to serve an MCP host over stdio.`);
       process.exit(2);

package/dist/{dist-JICXADYR.js → dist-63JYX33Z.js}

@@ -49,7 +49,7 @@ import {
   upsertServerKey,
   validateInstallOptions,
   validateUninstallOptions
-} from "./chunk-5S7RFXIU.js";
+} from "./chunk-S6D7YVBB.js";
 import "./chunk-MLKGABMK.js";
 export {
   BACKUP_KEEP,

package/dist/index.js

@@ -3,8 +3,8 @@ import {
   dispatchCli,
   ensureDaemonRunning,
   runAdapter
-} from "./chunk-WBMZLPXC.js";
-import "./chunk-GCRJQLTV.js";
+} from "./chunk-65FDP6LF.js";
+import "./chunk-Q6SOGGKF.js";
 import "./chunk-MLKGABMK.js";
 export {
   createAdapterServer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modootoday/datalab-extension-mcp",
-  "version": "1.8.9",
+  "version": "1.8.11",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",