@remcp/remcp 0.2.211 → 0.2.212

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/remcp",
-  "version": "0.2.211",
+  "version": "0.2.212",
   "description": "ReMCP device client: pair a computer with ReMCP and run the outbound-only agent that hosts the local MCP runtime.",
   "type": "module",
   "license": "MIT",

package/src/cli/connect.mjs

@@ -9,13 +9,14 @@ import { officialOrigin } from './env.mjs';
 import { sleep } from './shell.mjs';
 import { printPairingQr } from './pairing-qr.mjs';
 
-// Keep the server-provided approval URL as data all the way to the OS. In particular, do not route it
-// through `cmd /c start` on Windows: cmd reparses metacharacters such as `&`, so a custom pairing
-// server could otherwise turn a verification URL into a local shell command.
+// Keep the server-provided approval URL as one argument all the way to the OS.
+// Windows Explorer can treat a URL as a shell path and open Documents instead.
+// FileProtocolHandler dispatches to the default browser without a cmd/PowerShell shell,
+// where a URL query containing '&' could otherwise be interpreted as a command.
 export function browserLaunchCommand(url, platform = process.platform) {
   const target = String(url);
   if (platform === 'darwin') return { command: 'open', args: [target] };
-  if (platform === 'win32') return { command: 'explorer.exe', args: [target] };
+  if (platform === 'win32') return { command: 'rundll32.exe', args: ['url.dll,FileProtocolHandler', target] };
   return { command: 'xdg-open', args: [target] };
 }
 

package/src/cli/service.mjs

@@ -147,6 +147,17 @@ export function installWindowsService(cliPath = globalCliPath(), { nodePath = pr
     installWindowsUserStartup(cliPath, nodePath);
     return;
   }
+  // Task Scheduler runs an /IT .cmd inside a *visible* terminal window.
+  // For fresh installations prefer our existing hidden WSH + Node supervisor.
+  // Keep already-registered scheduled tasks intact until an explicit migration;
+  // never start two supervisors for the same machine.
+  const previousTask = spawnSync('schtasks.exe', ['/Query', '/TN', windowsTaskName],
+    { stdio:'ignore', windowsHide:true, timeout:10000 });
+  if (previousTask.status !== 0) {
+    requireWindowsScheduledTaskAbsent();
+    installWindowsUserStartup(cliPath, nodePath);
+    return;
+  }
   const launcherFile = writeWindowsServiceLauncher(cliPath, nodePath);
   const command = `"${launcherFile}"`;
   // Current-user interactive tasks need /IT. /RL LIMITED avoids requiring elevation.