@drawio/mcp 1.1.8 → 1.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drawio/mcp",
-  "version": "1.1.8",
+  "version": "1.2.1",
   "description": "Official draw.io MCP server for LLMs - Open diagrams in draw.io editor",
   "type": "module",
   "main": "src/index.js",

package/src/index.js

@@ -5,6 +5,9 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { ListToolsRequestSchema, CallToolRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 import pako from "pako";
 import { spawn } from "child_process";
+import { writeFileSync, unlinkSync } from "fs";
+import { join } from "path";
+import { tmpdir } from "os";
 
 const DRAWIO_BASE_URL = "https://app.diagrams.net/";
 
@@ -17,7 +20,18 @@ function openBrowser(url)
 
   if (process.platform === "win32")
   {
-    child = spawn("cmd", ["/c", "start", "", url], { shell: false, stdio: "ignore" });
+    // cmd.exe's "start" command treats & as a command separator and
+    // drops everything after # in URLs, so the #create=... fragment
+    // (which carries the entire diagram payload) is silently lost.
+    // Writing a temporary .url file preserves the full URL intact.
+    const tmpFile = join(tmpdir(), "drawio-mcp-" + Date.now() + ".url");
+    writeFileSync(tmpFile, "[InternetShortcut]\r\nURL=" + url + "\r\n");
+    child = spawn("cmd", ["/c", "start", "", tmpFile], { shell: false, stdio: "ignore" });
+
+    setTimeout(function()
+    {
+      try { unlinkSync(tmpFile); } catch (e) { /* ignore */ }
+    }, 10000);
   }
   else if (process.platform === "darwin")
   {
@@ -108,7 +122,7 @@ const tools =
       "Opens the draw.io editor with a diagram from XML content. " +
       "Use this to view, edit, or create diagrams in draw.io format. " +
       "The XML should be valid draw.io/mxGraph XML format. " +
-      "IMPORTANT: Do NOT use double hyphens (--) inside XML comments, as this is invalid XML and will break the parser. Use single hyphens or rephrase instead. " +
+      "IMPORTANT: Do NOT include ANY XML comments (<!-- -->) in the output — they are strictly forbidden. " +
       "EDGE GEOMETRY: Every edge mxCell MUST contain a <mxGeometry relative=\"1\" as=\"geometry\" /> child element, even when there are no waypoints. Self-closing edge cells (<mxCell ... edge=\"1\" ... />) are invalid and will not render correctly. " +
       "EDGE ROUTING: Use edgeStyle=orthogonalEdgeStyle for right-angle connectors. " +
       "Space nodes at least 60px apart to avoid overlapping edges. " +
@@ -269,6 +283,25 @@ server.setRequestHandler(CallToolRequestSchema, async (request) =>
       };
     }
 
+    if (typeof inputContent !== "string")
+    {
+      const actualType = typeof inputContent;
+      const preview = JSON.stringify(inputContent).substring(0, 200);
+
+      return {
+        content:
+        [
+          {
+            type: "text",
+            text: `Error: content parameter must be a string, but received ${actualType}: ${preview}\n\n` +
+              "Common mistake: passing a JSON object or nested structure instead of a plain string. " +
+              "Make sure the diagram content (XML, CSV, or Mermaid) is passed directly as a string value.",
+          },
+        ],
+        isError: true,
+      };
+    }
+
     content = inputContent;
 
     switch (name)