elanous 0.2.0 → 0.2.5

package/src/native-tool-catalog.ts

@@ -238,6 +238,7 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     safety: ['process'],
     supportsParallel: false,
     defaultEnabled: true,
+    intentScope: 'ops-fleet',
   },
   {
     id: 'pty_control',
@@ -250,6 +251,7 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     safety: ['process'],
     supportsParallel: false,
     defaultEnabled: true,
+    intentScope: 'ops-ui',
   },
   // Capture arc — pane substrate ↔ LLM bridge (Phase 2 partial).
   // Screenshot returns PNG when format='png' so vision-capable models
@@ -283,56 +285,13 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     defaultEnabled: true,
     intentScope: 'capture',
   },
-  // VW layout arc — save / load / preset. SaveLayout writes to disk
-  // atomically; LoadLayout + ApplyLayoutPreset return a restore plan
-  // (spec + missing/tabs/floats) WITHOUT mutating the running VW.
-  // Live reconstruction (pane spawn + mount) lands in a follow-up.
-  {
-    id: 'layout_save',
-    kind: 'other',
-    aliases: ['SaveLayout', 'layout_save'],
-    displayName: 'SaveLayout',
-    description: 'Save current VW layout to ~/.elanous/layouts/<slug>.layout.json (atomic).',
-    promptSummary: '`SaveLayout` (persist current VW layout to ~/.elanous/layouts/)',
-    host: ['skill', 'tui', 'mcp'],
-    safety: ['mutating'],  // writes to disk
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'layout_load',
-    kind: 'other',
-    aliases: ['LoadLayout', 'layout_load'],
-    displayName: 'LoadLayout',
-    description: 'List saved layouts + built-in presets, or plan-restore a specific slug against a VW. Plan-only, no mutation.',
-    promptSummary: '`LoadLayout` (enumerate saved layouts + presets, or plan restore for a slug)',
-    host: ['skill', 'tui', 'mcp'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'layout_apply_preset',
-    kind: 'other',
-    aliases: ['ApplyLayoutPreset', 'layout_apply_preset'],
-    displayName: 'ApplyLayoutPreset',
-    description: 'Build a named preset (one-pane/two-pane-split/four-pane-kanban) + plan restore. Plan-only, no mutation.',
-    promptSummary: '`ApplyLayoutPreset` (build preset spec + plan restore — plan only)',
-    host: ['skill', 'tui', 'mcp'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
   {
     id: 'dashboard_state',
     kind: 'other',
     aliases: ['GetDashboardState', 'dashboard_state'],
     displayName: 'GetDashboardState',
-    description: 'Return the current monad-agent dashboard state — windows, panes (with sizes), PTY shells, terminal sessions, workspace cwd.',
-    promptSummary: '`GetDashboardState` (snapshot: windows/panes/sizes, PTYs, terminal sessions, workspace — read-only)',
+    description: 'Return the current monad-agent dashboard state — PTY shells, terminal sessions, workspace cwd and exposed tools.',
+    promptSummary: '`GetDashboardState` (snapshot: PTYs, terminal sessions, workspace, exposed tools — read-only)',
     host: ['skill', 'tui', 'mcp'],
     safety: ['read-only'],
     supportsParallel: true,
@@ -475,10 +434,7 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     alwaysLoad: false,
     shouldDefer: true,
   },
-  // Context pull tools — Phase C. Read-only, parallel-safe. Narrower
-  // than GetDashboardState so the LLM can chain: ContextWindowsList →
-  // ContextWindowDetail → ContextPaneDetail, paying only for the slice
-  // it cares about this turn.
+  // Context pull tools — Phase C. Read-only and parallel-safe.
   {
     id: 'context_workspace',
     kind: 'other',
@@ -492,45 +448,6 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     defaultEnabled: true,
     intentScope: 'ops-ui',
   },
-  {
-    id: 'context_windows_list',
-    kind: 'other',
-    aliases: ['ContextWindowsList'],
-    displayName: 'ContextWindowsList',
-    description: 'List virtual windows (addr/title/foreground/paneCount). Follow up with ContextWindowDetail.',
-    promptSummary: '`ContextWindowsList` (virtual windows — drill into one via ContextWindowDetail)',
-    host: ['skill', 'tui', 'mcp'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'context_window_detail',
-    kind: 'other',
-    aliases: ['ContextWindowDetail'],
-    displayName: 'ContextWindowDetail',
-    description: 'Detail one virtual window by addr (panes + kinds).',
-    promptSummary: '`ContextWindowDetail` (addr -> panes in one window)',
-    host: ['skill', 'tui', 'mcp'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'context_pane_detail',
-    kind: 'other',
-    aliases: ['ContextPaneDetail'],
-    displayName: 'ContextPaneDetail',
-    description: 'Detail one pane (kind/title/window, optional tail).',
-    promptSummary: '`ContextPaneDetail` (addr -> pane detail; captureTail=true pulls text)',
-    host: ['skill', 'tui', 'mcp'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
   {
     id: 'context_ptys_list',
     kind: 'other',
@@ -570,10 +487,6 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     defaultEnabled: true,
     intentScope: 'ops-ui',
   },
-  // Surface-unification v2.2 V2.2-5 (2026-05-11) — `context_jobs_list`
-  // catalog entry retired together with the dashboard scheduler view.
-  // LLMs read scheduled work from the workflows surface
-  // (`scheduleTrigger` nodes · `~/.elanous/workflows-runs/`) instead.
   {
     id: 'context_widgets_list',
     kind: 'other',
@@ -670,6 +583,46 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     defaultEnabled: true,
     intentScope: 'ops-ui',
   },
+  {
+    id: 'elanous_asana_workspaces',
+    kind: 'other', aliases: ['ElanousAsanaWorkspaces'], displayName: 'ElanousAsanaWorkspaces',
+    description: 'List Asana workspaces for the current user. MCP only.',
+    promptSummary: '`elanous_asana_workspaces` (Asana workspace discovery)',
+    host: ['mcp'], safety: ['read-only', 'network'], supportsParallel: true, defaultEnabled: true,
+    intentScope: 'ops-fleet',
+  },
+  {
+    id: 'elanous_asana_list_tasks',
+    kind: 'other', aliases: ['ElanousAsanaListTasks'], displayName: 'ElanousAsanaListTasks',
+    description: 'List and filter Asana project tasks across all pages. MCP only.',
+    promptSummary: '`elanous_asana_list_tasks` (Asana project task listing)',
+    host: ['mcp'], safety: ['read-only', 'network'], supportsParallel: true, defaultEnabled: true,
+    intentScope: 'ops-fleet',
+  },
+  {
+    id: 'elanous_asana_create_task',
+    kind: 'other', aliases: ['ElanousAsanaCreateTask'], displayName: 'ElanousAsanaCreateTask',
+    description: 'Create an Asana project task with optional Priority. MCP only.',
+    promptSummary: '`elanous_asana_create_task` (create Asana task)',
+    host: ['mcp'], safety: ['mutating', 'network'], supportsParallel: false, defaultEnabled: true,
+    intentScope: 'ops-fleet',
+  },
+  {
+    id: 'elanous_asana_comment',
+    kind: 'other', aliases: ['ElanousAsanaComment'], displayName: 'ElanousAsanaComment',
+    description: 'Comment on an Asana task. MCP only.',
+    promptSummary: '`elanous_asana_comment` (comment on Asana task)',
+    host: ['mcp'], safety: ['mutating', 'network'], supportsParallel: false, defaultEnabled: true,
+    intentScope: 'ops-fleet',
+  },
+  {
+    id: 'elanous_asana_complete',
+    kind: 'other', aliases: ['ElanousAsanaComplete'], displayName: 'ElanousAsanaComplete',
+    description: 'Complete or reopen an Asana task. MCP only.',
+    promptSummary: '`elanous_asana_complete` (set Asana task completion)',
+    host: ['mcp'], safety: ['mutating', 'network'], supportsParallel: false, defaultEnabled: true,
+    intentScope: 'ops-fleet',
+  },
   {
     id: 'elanous_fs_list',
     kind: 'list-dir',
@@ -712,6 +665,19 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     defaultEnabled: true,
     intentScope: 'coding',
   },
+  {
+    id: 'elanous_task_submit',
+    kind: 'other',
+    aliases: ['ElanousTaskSubmit'],
+    displayName: 'ElanousTaskSubmit',
+    description: 'Hand a task to elanous from another agent (plugin). Queued in TOX via POST /v1/tasks as provider agent-plugin · waits for approval. MCP only.',
+    promptSummary: '`elanous_task_submit` (plugin MCP · queue a task for elanous · approval-gated)',
+    host: ['mcp'],
+    safety: ['network', 'mutating'],
+    supportsParallel: false,
+    defaultEnabled: true,
+    intentScope: 'coding',
+  },
   {
     id: 'elanous_autopilot_launch',
     kind: 'other',
@@ -740,49 +706,7 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     defaultEnabled: true,
     intentScope: 'ops-ui',
   },
-  // Control mutation tools — Phase D. Exposed on skill + dashboard
-  // only (not mcp) because side effects are in-scope for local agents
-  // but require a deliberate policy before external clients can
-  // reshape the layout.
-  {
-    id: 'control_window_resize',
-    kind: 'other',
-    aliases: ['ControlWindowResize'],
-    displayName: 'ControlWindowResize',
-    description: 'Resize a virtual window (addr + width/height/row/col).',
-    promptSummary: '`ControlWindowResize` (addr, width/height/row/col)',
-    host: ['skill', 'tui'],
-    safety: ['mutating'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'control_pane_resize',
-    kind: 'other',
-    aliases: ['ControlPaneResize'],
-    displayName: 'ControlPaneResize',
-    description: 'Grow or shrink a pane along the h or v axis.',
-    promptSummary: '`ControlPaneResize` (addr, axis h|v, delta cells)',
-    host: ['skill', 'tui'],
-    safety: ['mutating'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'control_pane_layout',
-    kind: 'other',
-    aliases: ['ControlPaneLayout'],
-    displayName: 'ControlPaneLayout',
-    description: 'Apply a preset pane layout (2x2, 1x3, 3x1, 2x1, 1x2).',
-    promptSummary: '`ControlPaneLayout` (windowAddr, layout: 2x2|1x3|3x1|2x1|1x2)',
-    host: ['skill', 'tui'],
-    safety: ['mutating'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
+  // Control tools — exposed on skill + dashboard only (not mcp).
   {
     id: 'control_tool_toggle',
     kind: 'other',
@@ -827,8 +751,8 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     kind: 'other',
     aliases: ['ContextBootstrap'],
     displayName: 'ContextBootstrap',
-    description: 'One-shot warmup (workspace + windows + ptys + sessions + tools).',
-    promptSummary: '`ContextBootstrap` (single call warmup: workspace+windows+ptys+sessions+tools)',
+    description: 'One-shot warmup (workspace + ptys + sessions + tools).',
+    promptSummary: '`ContextBootstrap` (single call warmup: workspace+ptys+sessions+tools)',
     host: ['skill', 'tui', 'mcp'],
     safety: ['read-only'],
     supportsParallel: true,
@@ -1218,8 +1142,8 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     kind: 'web',
     aliases: ['WebSearch', 'web_search'],
     displayName: 'WebSearch',
-    description: 'Search the public web via a configured provider (Grok live-search / Firecrawl / MCP / custom).',
-    promptSummary: '`WebSearch` (provider-backed web search — Grok live-search by default; pair with WebFetch for full bodies)',
+    description: 'Search the public web via a configured provider (Grok live-search / Firecrawl / MCP / custom); when no key is available, fall back to keyless DuckDuckGo.',
+    promptSummary: '`WebSearch` (provider-backed web search — Grok live-search by default; when no key is available, fall back to keyless DuckDuckGo; pair with WebFetch for full bodies)',
     host: ['skill'],
     safety: ['network', 'read-only'],
     supportsParallel: true,
@@ -1238,7 +1162,7 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
       "asked for long-running async exploration — pass run_in_background=true and the spawn returns immediately with a taskId. Pair with " +
       "AgentOutput(taskId, block?) to collect the result, AgentStop(taskId, cascade?) to cancel. ROADMAP Wave 1 surface; see also Wave 3 cascade.",
     promptSummary: '`Agent(description, prompt, subagent_type?, run_in_background?, isolation?, team_name?)` (sub-agent · pair w/ AgentOutput / AgentStop)',
-    host: ['skill', 'tui'],
+    host: ['skill', 'tui', 'mcp'],
     safety: ['agent'],
     supportsParallel: false,
     defaultEnabled: true,
@@ -1560,196 +1484,6 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     intentScope: 'ops-fleet',
     minTier: 'T2',
   },
-  // ── VW-P9: virtual windows + pane tree + broadcast ──
-  {
-    id: 'window_list',
-    kind: 'other',
-    aliases: ['WindowList', 'window_list'],
-    displayName: 'WindowList',
-    description: 'Enumerate virtual windows (id, title, fg/bg, pane count).',
-    promptSummary: '`WindowList` (enumerate virtual windows)',
-    host: ['skill'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'window_create',
-    kind: 'other',
-    aliases: ['WindowCreate', 'window_create'],
-    displayName: 'WindowCreate',
-    description: 'Create a new virtual window with a content spec (terminal/markdown/scratch/llm-chat).',
-    promptSummary: '`WindowCreate` (spawn a new virtual window)',
-    host: ['skill'],
-    safety: ['process'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'window_switch',
-    kind: 'other',
-    aliases: ['WindowSwitch', 'window_switch'],
-    displayName: 'WindowSwitch',
-    description: 'Bring a virtual window to foreground.',
-    promptSummary: '`WindowSwitch` (foreground a virtual window)',
-    host: ['skill'],
-    safety: ['process'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'window_close',
-    kind: 'other',
-    aliases: ['WindowClose', 'window_close'],
-    displayName: 'WindowClose',
-    description: 'Close a virtual window + all its panes.',
-    promptSummary: '`WindowClose` (close virtual window)',
-    host: ['skill'],
-    safety: ['mutating', 'process'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-    minTier: 'T2',
-  },
-  {
-    id: 'pane_list',
-    kind: 'other',
-    aliases: ['PaneList', 'pane_list'],
-    displayName: 'PaneList',
-    description: 'List panes of a window (or all).',
-    promptSummary: '`PaneList` (enumerate panes)',
-    host: ['skill'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'pane_split',
-    kind: 'other',
-    aliases: ['PaneSplit', 'pane_split'],
-    displayName: 'PaneSplit',
-    description: 'Split a pane horizontally/vertically with new content.',
-    promptSummary: '`PaneSplit` (split pane — tmux style)',
-    host: ['skill'],
-    safety: ['process'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'pane_focus',
-    kind: 'other',
-    aliases: ['PaneFocus', 'pane_focus'],
-    displayName: 'PaneFocus',
-    description: 'Focus a pane (by addr) or move focus directionally.',
-    promptSummary: '`PaneFocus` (move focus)',
-    host: ['skill'],
-    safety: ['process'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
-  {
-    id: 'pane_close',
-    kind: 'other',
-    aliases: ['PaneClose', 'pane_close'],
-    displayName: 'PaneClose',
-    description: 'Close a pane; window auto-collapses.',
-    promptSummary: '`PaneClose` (close pane)',
-    host: ['skill'],
-    safety: ['mutating', 'process'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-    minTier: 'T2',
-  },
-  {
-    id: 'pane_capture',
-    kind: 'other',
-    aliases: ['PaneCapture', 'pane_capture'],
-    displayName: 'PaneCapture',
-    description: 'Snapshot a pane (text/ocr/auto).',
-    promptSummary: '`PaneCapture` (snapshot pane, OCR fallback)',
-    host: ['skill'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'capture',
-  },
-  {
-    id: 'pane_inject',
-    kind: 'other',
-    aliases: ['PaneInject', 'pane_inject'],
-    displayName: 'PaneInject',
-    description: 'Write bytes/key into a pane (PTY stdin / chat submit / scratch replace).',
-    promptSummary: '`PaneInject` (write to pane)',
-    host: ['skill'],
-    safety: ['mutating', 'process'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'capture',
-    minTier: 'T2',
-  },
-  {
-    id: 'vw_broadcast',
-    kind: 'other',
-    aliases: ['BroadcastPanes', 'vw_broadcast'],
-    displayName: 'BroadcastPanes',
-    description: 'Fan-out identical bytes to multiple panes — LLM benchmark + group input.',
-    promptSummary: '`BroadcastPanes` (write same bytes to N panes)',
-    host: ['skill'],
-    safety: ['mutating', 'process'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-    minTier: 'T2',
-  },
-  {
-    id: 'vw_subscribe',
-    kind: 'other',
-    aliases: ['VWSubscribe', 'vw_subscribe'],
-    displayName: 'VWSubscribe',
-    description: 'Register a temporary event subscription. Returns subscription_id for VWCollect.',
-    promptSummary: '`VWSubscribe` (observe virtual-window events)',
-    host: ['skill'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-    minTier: 'T2',
-  },
-  {
-    id: 'vw_collect',
-    kind: 'other',
-    aliases: ['VWCollect', 'vw_collect'],
-    displayName: 'VWCollect',
-    description: 'Drain events buffered by a VWSubscribe subscription.',
-    promptSummary: '`VWCollect` (drain subscription buffer)',
-    host: ['skill'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-    minTier: 'T2',
-  },
-  {
-    id: 'vw_unsubscribe',
-    kind: 'other',
-    aliases: ['VWUnsubscribe', 'vw_unsubscribe'],
-    displayName: 'VWUnsubscribe',
-    description: 'Cancel a VWSubscribe subscription.',
-    promptSummary: '`VWUnsubscribe` (cancel subscription)',
-    host: ['skill'],
-    safety: ['read-only'],
-    supportsParallel: true,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-    minTier: 'T2',
-  },
   // ── P12: terminal modal context exchange ──
   {
     id: 'terminal_modal_list',
@@ -2314,19 +2048,6 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     intentScope: 'ops-ui',
     minTier: 'T2',
   },
-  {
-    id: 'spawn_coding_agent_in_vw',
-    kind: 'other',
-    aliases: ['SpawnCodingAgentInVW', 'spawn_coding_agent_in_vw'],
-    displayName: 'SpawnCodingAgentInVW',
-    description: 'One-call spawn of claude-code or codex inside a new virtual window with a terminal pane. Returns window_id + pane_id. Fails cleanly when the binary is missing.',
-    promptSummary: '`SpawnCodingAgentInVW` (brand: claude-code|codex, cwd?, extra_args? — fresh VW + terminal pane running the agent)',
-    host: ['skill'],
-    safety: ['process'],
-    supportsParallel: false,
-    defaultEnabled: true,
-    intentScope: 'ops-ui',
-  },
   {
     id: 'dashboard_widget_list',
     kind: 'other',
@@ -3211,8 +2932,8 @@ export const nativeToolCatalog: NativeToolCatalogEntry[] = [
     shouldDefer: true,
     aliases: ['AgentRoomCompose', 'agent_room_compose'],
     displayName: 'AgentRoomCompose',
-    description: 'Create a VW agent room with N panes (preset = two-split/three-split/four-quad), each running a different brand agent. Members[i].brandRef: literal brand (codex/claude/gemini/elanous), alias (cxn/cas/clc/gem/mac), "lll:<model>" (H6 P2 local-llm), or "auto" (policy router). Output metadata includes `budgetAdvisory` — surface `warning` via AskUserQuestion when present (session usage ≥70% and N-agent turn cost ~Nx).',
-    promptSummary: '`AgentRoomCompose` (multi-agent VW room · N-pane layout · auto-routing)',
+    description: 'Unsupported: agent rooms need the removed rich TUI (virtual windows). AgentRoomCompose remains named but returns an error when called.',
+    promptSummary: '`AgentRoomCompose` (unsupported · removed rich TUI)',
     host: ['skill', 'tui'],
     safety: ['mutating'],
     supportsParallel: false,

package/src/nexus/api/connect-info.ts

@@ -10,11 +10,9 @@
 //     auto_token:     string | null,    // 자동 mint 시 raw bearer
 //   }
 //
-// `auto_token` 정책:
-//   - server hostname = 127.0.0.1/localhost (loopback only) → 기존
-//     `~/.elanous/acp-token` 파일 내용을 그대로 노출. Loopback 호출자는
-//     이미 같은 user uid 로 file 을 읽을 수 있으므로 추가 leak 없음.
-//   - 그 외 (LAN/Tailscale) → null. 사용자가 token 을 paste 해야 함.
+// `auto_token` 정책: 언제나 null (칸은 호환용으로 남긴다).
+//   종전엔 «서버 바인드가 루프백이면» 토큰 파일 원문을 실었는데, tailnet 공유(serve → localhost 프록시)에서는
+//   tailnet 기기·Pod 가 Origin 없는 GET 한 번으로 관리 토큰을 얻었다(🅣 전수 2026-09-26). 같은 기계의 CLI 는 파일을 직접 읽는다.
 //
 // `elanous nexus connect <host>` (T4.B) 가 처음 실행할 때 본 endpoint 를
 // 호출 → metadata 로 bookmark 만들고 token 을 저장. 이후 일상 사용
@@ -42,6 +40,10 @@ export interface ConnectInfoCtx {
   serverLabel?: string;
   /** Test seam — when present, used instead of file read. */
   acpTokenOverride?: string | null;
+  /** ⛔ false 면 토큰을 싣지 않는다 — 다른 웹사이트(교차 출처)의 요청(🅢 2026-09-26 실측: `Origin: https://evil.example` 에
+   *  200 ⊕ `access-control-allow-origin: *` ⊕ `auto_token` 원문 → 브라우저로 연 아무 페이지가 관리 토큰을 읽을 수 있었다).
+   *  허용 판정은 호출자(`connectInfoTokenAllowed`)가 한다. 생략 = 종전(시험 호환). */
+  allowAutoToken?: boolean;
   /**
    * Incoming request Host (header or URL host). Used only when `hostname`
    * is a wildcard bind (`0.0.0.0` / `::` / empty) so advertised URLs are
@@ -168,27 +170,12 @@ export function buildConnectInfo(ctx: ConnectInfoCtx): ConnectInfoBody {
   const voiceUrl = `ws://${hostForUrl}:${port}/v1/voice/ws`;
   const serverLabel = ctx.serverLabel ?? `${host} (NEXUS ${ctx.nexusVersion})`;
 
-  let autoToken: string | null = null;
-  if (isLoopbackHost(ctx.hostname)) {
-    if (ctx.acpTokenOverride !== undefined) {
-      autoToken = ctx.acpTokenOverride;
-    } else {
-      const path = ctx.acpTokenPath ?? defaultAcpTokenPath();
-      if (existsSync(path)) {
-        try {
-          autoToken = readFileSync(path, 'utf-8').trim();
-          if (autoToken.length === 0) autoToken = null;
-        } catch {
-          autoToken = null;
-        }
-      }
-    }
-  }
-
+  // 🔐 2026-09-26(🅣 전수): 원시 bearer 를 HTTP 로 내보내지 않는다. «바인드가 루프백»은 «요청자가 이 기계»를 뜻하지 않는다 —
+  //   `tailscale serve --tls-terminated-tcp` 는 tailnet 요청을 localhost 로 프록시하므로 상대 주소도 127.0.0.1 로 보이고,
+  //   Origin 이 없는 요청(curl·Pod)은 교차 출처 검사를 안 탄다. 같은 uid 의 로컬 도구는 토큰 파일을 직접 읽는다(remotes-cli).
+  const autoToken: string | null = null;
   const tokenRequired = autoToken === null;
-  const tokenHint = autoToken
-    ? '~/.elanous/acp-token (auto-loaded · loopback only)'
-    : '~/.elanous/acp-token on the server host (paste content into bearer)';
+  const tokenHint = '~/.elanous/acp-token on the server host (paste content into bearer · same-host CLI reads the file)';
 
   return {
     acp_url: acpUrl,
@@ -282,3 +269,14 @@ export function handleConnectTokenMint(ctx: ConnectInfoCtx): Response {
   }
   return jsonResponse(body, 201);
 }
+
+/** 관리 토큰을 connect-info 에 실어도 되는 요청인가 — Origin 이 없거나(로컬 프로세스 · 토큰 파일을 어차피 읽을 수 있다),
+ *  이 데몬이 서빙한 페이지(Origin 호스트 == 요청 Host)거나, 루프백 출처(PWA 개발 서버)일 때만.
+ *  브라우저는 Origin 을 위조할 수 없으므로 다른 웹사이트는 셋 다 아니다. */
+export function connectInfoTokenAllowed(origin: string | null, requestHost: string | null): boolean {
+  if (!origin || origin === 'null') return origin === null;
+  let o: URL;
+  try { o = new URL(origin); } catch { return false; }
+  if (requestHost && o.host === requestHost) return true;
+  return o.hostname === 'localhost' || o.hostname === '127.0.0.1' || o.hostname === '[::1]' || o.hostname === '::1';
+}

package/src/nexus/api/context-url.ts

@@ -128,7 +128,7 @@ export async function handleContextFetchUrl(
   try {
     const res = await fetchImpl(url, {
       headers: {
-        'user-agent': 'elanous-context/1.0 (+https://github.com/ElanvitalAI/monad)',
+        'user-agent': 'elanous-context/1.0 (+https://github.com/ElanvitalAI/elanous)',
         accept: 'text/html, text/plain;q=0.9, */*;q=0.5',
       },
       signal: ctrl.signal,