@captionbolt/mcp 0.3.1 → 0.3.2

package/README.md

@@ -13,7 +13,7 @@ Pin the reviewed version in your client's STDIO configuration:
   "mcpServers": {
     "captionbolt": {
       "command": "npx",
-      "args": ["--yes", "@captionbolt/mcp@0.3.1"]
+      "args": ["--yes", "@captionbolt/mcp@0.3.2"]
     }
   }
 }
@@ -23,12 +23,13 @@ Run this once in a desktop terminal using the same pinned package version as
 your MCP configuration:
 
 ```sh
-npx --yes @captionbolt/mcp@0.3.1 login
+npx --yes @captionbolt/mcp@0.3.2 login
 ```
 
 If installed globally, `captionbolt-mcp login` is equivalent.
-The command opens CaptionBolt in your browser (on WSL, the Windows browser via
-`explorer.exe`) and prints the link in case no browser opens. An existing website
+The command opens CaptionBolt in your default browser (on Windows and WSL through
+PowerShell) and prints the link in case no browser opens. Open that link on the
+same computer: authorization returns to a local address. An existing website
 session can skip password entry, but you still approve MCP access. OAuth tokens
 and the registered client are saved in the macOS Keychain, Windows Credential
 Manager or a Linux Secret Service keyring. On Linux without Secret Service (common
@@ -41,7 +42,7 @@ If a grant or registered client becomes invalid, run `login` again. The client
 discards the invalid local credentials and starts a new browser authorization;
 the callback page confirms success only after the token exchange and account
 check succeed.
-`npx --yes @captionbolt/mcp@0.3.1 logout` (or `captionbolt-mcp logout`)
+`npx --yes @captionbolt/mcp@0.3.2 logout` (or `captionbolt-mcp logout`)
 deletes local authorization. Revoke server access in
 CaptionBolt settings when you want to invalidate the grant.
 `CAPTIONBOLT_API_URL` optionally selects an explicitly trusted HTTPS API origin;

package/dist/index.mjs

@@ -504,6 +504,17 @@ function fileStore(origin2, path = join(
     }
   };
 }
+function keyringStore(entry2, location) {
+  return {
+    location,
+    getPassword() {
+      const secret = entry2.getSecret();
+      return secret && Buffer.from(secret).toString("utf8");
+    },
+    setPassword: (value) => entry2.setSecret(Buffer.from(value, "utf8")),
+    deletePassword: () => entry2.deletePassword()
+  };
+}
 async function entry(origin2) {
   let Entry;
   try {
@@ -513,11 +524,11 @@ async function entry(origin2) {
   if (process.platform === "linux") {
     try {
       if (Entry) {
-        return Object.assign(
+        return keyringStore(
           new Entry("captionbolt-mcp-oauth", origin2.origin, {
             linux: { store: "secret-service" }
           }),
-          { location: "the Secret Service keyring" }
+          "the Secret Service keyring"
         );
       }
     } catch {
@@ -530,9 +541,10 @@ async function entry(origin2) {
       { kind: "invalid-response", code: "CREDENTIAL_STORE_UNAVAILABLE" }
     );
   }
-  return Object.assign(new Entry("captionbolt-mcp-oauth", origin2.origin), {
-    location: "the system credential store"
-  });
+  return keyringStore(
+    new Entry("captionbolt-mcp-oauth", origin2.origin),
+    "the system credential store"
+  );
 }
 async function credentialLocation(origin2) {
   return (await entry(origin2)).location;
@@ -753,6 +765,7 @@ async function createLoginCallback() {
     },
     close() {
       server.close();
+      server.closeAllConnections();
     }
   };
 }
@@ -797,15 +810,33 @@ function isWsl() {
     return false;
   }
 }
+var WSL_POWERSHELL = "/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe";
+function browserCommand(url, platform = process.platform, wsl = platform === "linux" && isWsl()) {
+  if (platform === "darwin") {
+    return ["open", [url.href]];
+  }
+  if (platform !== "win32" && !wsl) {
+    return ["xdg-open", [url.href]];
+  }
+  const script = `Start-Process '${url.href.replaceAll("'", "''")}'`;
+  return [
+    // appendWindowsPath=false removes Windows tools from the WSL PATH.
+    wsl && existsSync(WSL_POWERSHELL) ? WSL_POWERSHELL : "powershell.exe",
+    [
+      "-NoProfile",
+      "-NonInteractive",
+      "-EncodedCommand",
+      Buffer.from(script, "utf16le").toString("base64")
+    ]
+  ];
+}
 function openBrowser(url) {
-  const command2 = process.platform === "darwin" ? ["open", url.href] : process.platform === "win32" ? ["cmd", "/c", "start", "", url.href] : isWsl() ? [
-    // appendWindowsPath=false removes explorer.exe from PATH.
-    existsSync("/mnt/c/Windows/explorer.exe") ? "/mnt/c/Windows/explorer.exe" : "explorer.exe",
-    url.href
-  ] : ["xdg-open", url.href];
-  const child = spawn(command2[0] ?? "xdg-open", command2.slice(1), {
+  const [command2, args] = browserCommand(url);
+  const child = spawn(command2, args, {
     stdio: "ignore",
-    detached: true
+    // A detached PowerShell on native Windows exits without opening the browser.
+    detached: process.platform !== "win32",
+    windowsHide: true
   });
   child.on("error", () => {
   });
@@ -1308,7 +1339,7 @@ var LocalDownloads = class {
 
 // src/instructions.ts
 var localMcpInstructions = `CaptionBolt adds styled captions to the user's existing videos and keeps the original framing. A typical request is "add captions to <file>".
-1. Use the exact absolute path of the video the user named. Resolve a relative path or bare file name against your working directory; if that file does not exist, ask for the full path. Never search other folders. Call upload_file right away; it keeps uploading in the background.
+1. Use the exact absolute path of the video the user named. Resolve a relative path or bare file name against your working directory; if that file does not exist, ask for the full path. On WSL, a Windows path such as C:\\Users\\... is /mnt/c/Users/... Never search other folders. Call upload_file right away; it keeps uploading in the background.
 2. While it uploads, ask one question unless the user already chose a style or preset or asked you to decide. Offer the list_styles items marked recommended (numbered, name plus one-line description) and at most the first three list_presets entries (most recently updated). The user can reply with a number, describe a look (search list_styles) or say "you decide" (use the first recommended style). Never list the whole catalog. You may mention the remaining minutes (get_account credits.availableCreditsSec / 60).
 3. Poll get_upload_progress. Once uploaded, call create_project with uploadSessionId set to its uploadId, the chosen styleId or presetId, and mode auto-export. The export includes the MP4 and the subtitle files the plan allows. Use review only when the user wants to check captions in the Editor first.
 4. create_project, export_project, retry_project and cancel_project return an operation: poll get_operation until it completes; its resourceId is the projectId. If it fails, report the error and stop. Then call wait_for_project until the project is completed (inspect autoExport if it stays ready). Keep progress updates short.

package/package.json

@@ -1,6 +1,6 @@
 {
   "private": false,
-  "version": "0.3.1",
+  "version": "0.3.2",
   "type": "module",
   "engines": {
     "node": ">=22.12.0"