chore: scrub internal network identifiers

.agents/plugins/marketplace.json

@@ -489,7 +489,7 @@
         ],
         "defaultPrompt": [
           "Use Plexus to inspect example-host before changing it.",
-          "Load live remote context for dookie.",
+          "Load live remote context for devhost.",
           "Summarize recent host activity."
         ],
         "brandColor": "#2563EB"
@@ -1041,7 +1041,7 @@
         "defaultPrompt": [
           "Use Unraid to check array and disk health.",
           "List Docker containers on the Unraid box.",
-          "Show share usage on tootie."
+          "Show share usage on nashost."
         ],
         "brandColor": "#F15A2C"
       }
@@ -2190,7 +2190,7 @@
     },
     {
       "name": "aurora",
-      "description": "Aurora design system \u2014 dark-first navy/cyan/rose/Axon-orange operator and agent control-plane UI across web (the @aurora shadcn registry, var(--aurora-*) plus --axon-* tokens), Android (the tv.tootie.aurora Jetpack Compose library), and CLI/editor themes.",
+      "description": "Aurora design system \u2014 dark-first navy/cyan/rose/Axon-orange operator and agent control-plane UI across web (the @aurora shadcn registry, var(--aurora-*) plus --axon-* tokens), Android (the tv.nashost.aurora Jetpack Compose library), and CLI/editor themes.",
       "source": {
         "source": "git-subdir",
         "url": "https://github.com/jmagar/aurora.git",

.claude-plugin/marketplace.json

@@ -574,7 +574,7 @@
         "url": "https://github.com/jmagar/aurora.git",
         "path": "plugin"
       },
-      "description": "Aurora design system \u2014 dark-first navy/cyan/rose/Axon-orange operator and agent control-plane UI across web (the @aurora shadcn registry, var(--aurora-*) plus --axon-* tokens), Android (the tv.tootie.aurora Jetpack Compose library), and CLI/editor themes."
+      "description": "Aurora design system \u2014 dark-first navy/cyan/rose/Axon-orange operator and agent control-plane UI across web (the @aurora shadcn registry, var(--aurora-*) plus --axon-* tokens), Android (the tv.nashost.aurora Jetpack Compose library), and CLI/editor themes."
     },
     {
       "name": "zsnoop-mcp",

README.md

@@ -173,7 +173,7 @@ plugin source directories in this repo.
 | `mcp-tunnels` | `https://github.com/anthropics/claude-plugins-official.git`, `plugins/mcp-tunnels` | Connect Claude to a private MCP server through an Anthropic-managed tunnel. |
 | `ytdl-mcp` | `github:jmagar/ytdl-mcp` | Download audio/video from any yt-dlp-supported site, embed metadata and cover art, organize by artist, and rsync to an SSH remote with separate audio/video destinations. |
 | `labby` | `https://github.com/dinglebear-ai/labby.git`, `plugins/labby` | Skills and gateway-oriented guidance for the Lab homelab control plane. |
-| `aurora` | `https://github.com/jmagar/aurora.git`, `plugin` | Aurora design system — dark-first navy/cyan/rose/Axon-orange operator and agent control-plane UI across web (the @aurora shadcn registry, var(--aurora-*) plus --axon-* tokens), Android (the tv.tootie.aurora Jetpack Compose library), and CLI/editor themes. |
+| `aurora` | `https://github.com/jmagar/aurora.git`, `plugin` | Aurora design system — dark-first navy/cyan/rose/Axon-orange operator and agent control-plane UI across web (the @aurora shadcn registry, var(--aurora-*) plus --axon-* tokens), Android (the tv.nashost.aurora Jetpack Compose library), and CLI/editor themes. |
 | `project-artifact` | `https://github.com/anthropics/claude-plugins-official.git`, `plugins/project-artifact` | Generate and publish a living project status page — overview & success criteria, the workstream sequence, and next steps — as a shareable claude.ai artifact backed by a per-project config, so refreshes re-gather live state, redeploy the same URL, and report only the delta. |
 | `code-modernization` | `https://github.com/anthropics/claude-plugins-official.git`, `plugins/code-modernization` | Modernize legacy codebases (COBOL, legacy Java/C++, monolith web apps) with a structured preflight / assess / map / extract-rules / brief / reimagine / transform / harden workflow, an interactive topology viewer, and specialist review agents |
 | `security-guidance` | `https://github.com/anthropics/claude-plugins-official.git`, `plugins/security-guidance` | Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes. |

docs/configuration-matrix.md

@@ -17,12 +17,12 @@ updated: 2026-07-30
 | `agent-os` | `agent_os_compose_file` | `AGENT_OS_COMPOSE_FILE` | docker-compose.yml path | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/scripts/setup.sh`, `plugins/agent-os/skills/agent-os/SKILL.md`, `plugins/agent-os/skills/agent-os/references/troubleshooting.md` | Absolute path to the agent-os compose file ON the Docker host, used to bring the VM back up. Example: /mnt/cache/compose/windows/docker-compose.yml. |
 | `agent-os` | `agent_os_container_name` | `AGENT_OS_CONTAINER_NAME` | Container name | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/scripts/setup.sh`, `plugins/agent-os/skills/agent-os/SKILL.md`, `plugins/agent-os/skills/agent-os/references/troubleshooting.md` | Name of the dockur/windows container running the VM. Example: agent-os-win11. |
 | `agent-os` | `agent_os_host_forward_port` | `AGENT_OS_HOST_FORWARD_PORT` | Host-forward SSH port | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/skills/agent-os/references/tailscale.md`, `plugins/agent-os/skills/agent-os/references/troubleshooting.md` | Port the Docker host forwards to the guest's sshd (host:PORT -> guest:22). Example: 2222. |
-| `agent-os` | `agent_os_host_forward_ssh` | `AGENT_OS_HOST_FORWARD_SSH` | Host-forward SSH target | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/skills/agent-os/SKILL.md`, `plugins/agent-os/skills/agent-os/references/tailscale.md`, `plugins/agent-os/skills/agent-os/references/troubleshooting.md` | SSH user@host of the Docker host's port-forward into the guest (user@<docker-host-tailscale-ip>). Use this path — NOT `ssh agent-os` — for Tailscale maintenance inside the guest, since it survives `tailscale down`. Example: docker@100.120.242.29. |
+| `agent-os` | `agent_os_host_forward_ssh` | `AGENT_OS_HOST_FORWARD_SSH` | Host-forward SSH target | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/skills/agent-os/SKILL.md`, `plugins/agent-os/skills/agent-os/references/tailscale.md`, `plugins/agent-os/skills/agent-os/references/troubleshooting.md` | SSH user@host of the Docker host's port-forward into the guest (user@<docker-host-tailscale-ip>). Use this path — NOT `ssh agent-os` — for Tailscale maintenance inside the guest, since it survives `tailscale down`. Example: docker@198.51.100.20. |
 | `agent-os` | `agent_os_mcp_token` | `AGENT_OS_MCP_TOKEN` | Windows-MCP bearer token | yes | `plugins/agent-os/.mcp.json`, `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/scripts/setup.sh`, `plugins/agent-os/skills/agent-os/SKILL.md` | Bearer token the Windows-MCP server expects (sent as 'Authorization: Bearer <token>'). Stored in secure OS storage, not settings.json. Without it the windows-mcp server will return 401 and no tools will load. |
 | `agent-os` | `agent_os_mcp_url` | `AGENT_OS_MCP_URL` | Windows-MCP URL | no | `plugins/agent-os/.mcp.json`, `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/scripts/setup.sh`, `plugins/agent-os/skills/agent-os/SKILL.md` | Full HTTP(S) URL of the Windows-MCP endpoint inside the agent-os VM, including the /mcp path. This is what the plugin registers as the windows-mcp MCP server. Example: https://agent-os.example.ts.net/mcp. Prefer the VM's own stable Tailscale/MagicDNS name so it follows the VM across Docker hosts. |
-| `agent-os` | `agent_os_novnc_url` | `AGENT_OS_NOVNC_URL` | noVNC URL | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/skills/agent-os/SKILL.md` | Base URL of the dockur/windows web (noVNC) UI on the Docker host, for visual debugging. Example: http://tootie:8006. |
-| `agent-os` | `agent_os_vm_host` | `AGENT_OS_VM_HOST` | Docker host running the VM | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/scripts/setup.sh`, `plugins/agent-os/skills/agent-os/SKILL.md`, `plugins/agent-os/skills/agent-os/references/troubleshooting.md` | SSH alias/host of the Docker host that runs the agent-os-win11 container (for `docker ps`, compose up, etc.). Example: tootie. |
-| `agent-os` | `agent_os_vm_tailscale_ip` | `AGENT_OS_VM_TAILSCALE_IP` | VM Tailscale IP / SSH host | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/skills/agent-os/SKILL.md` | The agent-os guest's own Tailscale IP (or MagicDNS name) used by `ssh agent-os` for in-guest commands on port 22. Example: 100.109.125.128. |
+| `agent-os` | `agent_os_novnc_url` | `AGENT_OS_NOVNC_URL` | noVNC URL | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/skills/agent-os/SKILL.md` | Base URL of the dockur/windows web (noVNC) UI on the Docker host, for visual debugging. Example: http://nashost:8006. |
+| `agent-os` | `agent_os_vm_host` | `AGENT_OS_VM_HOST` | Docker host running the VM | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/scripts/setup.sh`, `plugins/agent-os/skills/agent-os/SKILL.md`, `plugins/agent-os/skills/agent-os/references/troubleshooting.md` | SSH alias/host of the Docker host that runs the agent-os-win11 container (for `docker ps`, compose up, etc.). Example: nashost. |
+| `agent-os` | `agent_os_vm_tailscale_ip` | `AGENT_OS_VM_TAILSCALE_IP` | VM Tailscale IP / SSH host | no | `plugins/agent-os/commands/agent-os.md`, `plugins/agent-os/skills/agent-os/SKILL.md` | The agent-os guest's own Tailscale IP (or MagicDNS name) used by `ssh agent-os` for in-guest commands on port 22. Example: 198.51.100.10. |
 | `bytestash` | `bytestash_api_key` | `BYTESTASH_API_KEY` | API Key | yes | `plugins/bytestash/scripts/setup.sh` | Optional ByteStash API key for public/read-only endpoints. Snippet writes still require JWT on current ByteStash. |
 | `bytestash` | `bytestash_password` | `BYTESTASH_PASSWORD` | Password | yes | `plugins/bytestash/scripts/setup.sh` | ByteStash password used by the hook to mint a JWT for snippet API calls. |
 | `bytestash` | `bytestash_token` | `BYTESTASH_TOKEN` | JWT Token | yes | `plugins/bytestash/scripts/setup.sh` | Optional pre-minted ByteStash JWT. Used when username/password are not configured. |

plugins/agent-os/.claude-plugin/plugin.json

@@ -25,7 +25,7 @@
       "title": "Windows-MCP URL",
       "description": "Full HTTP(S) URL of the Windows-MCP endpoint inside the agent-os VM, including the /mcp path. This is what the plugin registers as the windows-mcp MCP server. Example: https://agent-os.example.ts.net/mcp. Prefer the VM's own stable Tailscale/MagicDNS name so it follows the VM across Docker hosts.",
       "required": true,
-      "default": "https://agent-os.manatee-triceratops.ts.net/mcp"
+      "default": "https://agent-os.example.ts.net/mcp"
     },
     "agent_os_mcp_token": {
       "type": "string",
@@ -37,23 +37,23 @@
     "agent_os_vm_tailscale_ip": {
       "type": "string",
       "title": "VM Tailscale IP / SSH host",
-      "description": "The agent-os guest's own Tailscale IP (or MagicDNS name) used by `ssh agent-os` for in-guest commands on port 22. Example: 100.109.125.128.",
+      "description": "The agent-os guest's own Tailscale IP (or MagicDNS name) used by `ssh agent-os` for in-guest commands on port 22. Example: 198.51.100.10.",
       "required": false,
-      "default": "100.109.125.128"
+      "default": "198.51.100.10"
     },
     "agent_os_vm_host": {
       "type": "string",
       "title": "Docker host running the VM",
-      "description": "SSH alias/host of the Docker host that runs the agent-os-win11 container (for `docker ps`, compose up, etc.). Example: tootie.",
+      "description": "SSH alias/host of the Docker host that runs the agent-os-win11 container (for `docker ps`, compose up, etc.). Example: nashost.",
       "required": false,
-      "default": "tootie"
+      "default": "nashost"
     },
     "agent_os_host_forward_ssh": {
       "type": "string",
       "title": "Host-forward SSH target",
-      "description": "SSH user@host of the Docker host's port-forward into the guest (user@<docker-host-tailscale-ip>). Use this path — NOT `ssh agent-os` — for Tailscale maintenance inside the guest, since it survives `tailscale down`. Example: docker@100.120.242.29.",
+      "description": "SSH user@host of the Docker host's port-forward into the guest (user@<docker-host-tailscale-ip>). Use this path — NOT `ssh agent-os` — for Tailscale maintenance inside the guest, since it survives `tailscale down`. Example: docker@198.51.100.20.",
       "required": false,
-      "default": "docker@100.120.242.29"
+      "default": "docker@198.51.100.20"
     },
     "agent_os_host_forward_port": {
       "type": "string",
@@ -79,9 +79,9 @@
     "agent_os_novnc_url": {
       "type": "string",
       "title": "noVNC URL",
-      "description": "Base URL of the dockur/windows web (noVNC) UI on the Docker host, for visual debugging. Example: http://tootie:8006.",
+      "description": "Base URL of the dockur/windows web (noVNC) UI on the Docker host, for visual debugging. Example: http://nashost:8006.",
       "required": false,
-      "default": "http://tootie:8006"
+      "default": "http://nashost:8006"
     },
     "agent_os_autostart": {
       "type": "string",

plugins/agent-os/README.md

@@ -20,15 +20,15 @@ Set these in the plugin's settings (Claude Code prompts on enable). Values reach
 
 | Key | Required | Default | What it is |
 |---|---|---|---|
-| `agent_os_mcp_url` | ✅ | `https://agent-os.manatee-triceratops.ts.net/mcp` | Windows-MCP `/mcp` endpoint (prefer the VM's own Tailscale/MagicDNS name). |
+| `agent_os_mcp_url` | ✅ | `https://agent-os.example.ts.net/mcp` | Windows-MCP `/mcp` endpoint (prefer the VM's own Tailscale/MagicDNS name). |
 | `agent_os_mcp_token` | ✅ (sensitive) | — | Bearer token Windows-MCP expects. |
-| `agent_os_vm_tailscale_ip` | | `100.109.125.128` | Guest's own Tailscale IP for `ssh agent-os` (port 22). |
-| `agent_os_vm_host` | | `tootie` | Docker host running the container. |
-| `agent_os_host_forward_ssh` | | `docker@100.120.242.29` | Host-forward SSH target (Tailscale maintenance — survives `tailscale down`). |
+| `agent_os_vm_tailscale_ip` | | `198.51.100.10` | Guest's own Tailscale IP for `ssh agent-os` (port 22). |
+| `agent_os_vm_host` | | `nashost` | Docker host running the container. |
+| `agent_os_host_forward_ssh` | | `docker@198.51.100.20` | Host-forward SSH target (Tailscale maintenance — survives `tailscale down`). |
 | `agent_os_host_forward_port` | | `2222` | Host-forward port → guest `:22`. |
 | `agent_os_compose_file` | | `/mnt/cache/compose/windows/docker-compose.yml` | Compose file on the Docker host to bring the VM up. |
 | `agent_os_container_name` | | `agent-os-win11` | dockur/windows container name. |
-| `agent_os_novnc_url` | | `http://tootie:8006` | dockur/windows web (noVNC) UI for visual debugging. |
+| `agent_os_novnc_url` | | `http://nashost:8006` | dockur/windows web (noVNC) UI for visual debugging. |
 | `agent_os_autostart` | | `false` | `"true"` lets the SessionStart hook SSH to the Docker host and `docker compose up -d` the VM when the MCP endpoint is unreachable (requires `agent_os_vm_host` + `agent_os_compose_file`). Starts only, never stops; doesn't block on Windows boot. |
 
 ### Auto-recovery (opt-in)
@@ -50,4 +50,4 @@ If `windows-mcp` doesn't appear in `/mcp`, the most likely cause is the URL/toke
 ## Notes
 
 - This skill was moved out of the `vibin` plugin into its own plugin so it can carry userConfig and self-register the MCP.
-- It does **not** fire on the user's personal Windows (steamy-wsl) — that's the `nircmd` skill.
+- It does **not** fire on the user's personal Windows (winhost-wsl) — that's the `nircmd` skill.

plugins/agent-os/gemini-extension.json

@@ -38,7 +38,7 @@
     },
     {
       "name": "Host-forward SSH target",
-      "description": "SSH user@host of the Docker host's port-forward into the guest (user@<docker-host-tailscale-ip>). Use this path \u2014 NOT `ssh agent-os` \u2014 for Tailscale maintenance inside the guest, since it survives `tailscale down`. Example: docker@100.120.242.29. Default: 'docker@100.120.242.29'.",
+      "description": "SSH user@host of the Docker host's port-forward into the guest (user@<docker-host-tailscale-ip>). Use this path \u2014 NOT `ssh agent-os` \u2014 for Tailscale maintenance inside the guest, since it survives `tailscale down`. Example: docker@198.51.100.20. Default: 'docker@198.51.100.20'.",
       "envVar": "AGENT_OS_HOST_FORWARD_SSH",
       "sensitive": false
     },
@@ -50,25 +50,25 @@
     },
     {
       "name": "Windows-MCP URL",
-      "description": "Full HTTP(S) URL of the Windows-MCP endpoint inside the agent-os VM, including the /mcp path. This is what the plugin registers as the windows-mcp MCP server. Example: https://agent-os.example.ts.net/mcp. Prefer the VM's own stable Tailscale/MagicDNS name so it follows the VM across Docker hosts. Default: 'https://agent-os.manatee-triceratops.ts.net/mcp'.",
+      "description": "Full HTTP(S) URL of the Windows-MCP endpoint inside the agent-os VM, including the /mcp path. This is what the plugin registers as the windows-mcp MCP server. Example: https://agent-os.example.ts.net/mcp. Prefer the VM's own stable Tailscale/MagicDNS name so it follows the VM across Docker hosts. Default: 'https://agent-os.example.ts.net/mcp'.",
       "envVar": "AGENT_OS_MCP_URL",
       "sensitive": false
     },
     {
       "name": "noVNC URL",
-      "description": "Base URL of the dockur/windows web (noVNC) UI on the Docker host, for visual debugging. Example: http://tootie:8006. Default: 'http://tootie:8006'.",
+      "description": "Base URL of the dockur/windows web (noVNC) UI on the Docker host, for visual debugging. Example: http://nashost:8006. Default: 'http://nashost:8006'.",
       "envVar": "AGENT_OS_NOVNC_URL",
       "sensitive": false
     },
     {
       "name": "Docker host running the VM",
-      "description": "SSH alias/host of the Docker host that runs the agent-os-win11 container (for `docker ps`, compose up, etc.). Example: tootie. Default: 'tootie'.",
+      "description": "SSH alias/host of the Docker host that runs the agent-os-win11 container (for `docker ps`, compose up, etc.). Example: nashost. Default: 'nashost'.",
       "envVar": "AGENT_OS_VM_HOST",
       "sensitive": false
     },
     {
       "name": "VM Tailscale IP / SSH host",
-      "description": "The agent-os guest's own Tailscale IP (or MagicDNS name) used by `ssh agent-os` for in-guest commands on port 22. Example: 100.109.125.128. Default: '100.109.125.128'.",
+      "description": "The agent-os guest's own Tailscale IP (or MagicDNS name) used by `ssh agent-os` for in-guest commands on port 22. Example: 198.51.100.10. Default: '198.51.100.10'.",
       "envVar": "AGENT_OS_VM_TAILSCALE_IP",
       "sensitive": false
     }