@stratta/mcp 0.9.2 → 0.9.3

package/README.md

@@ -27,9 +27,13 @@ MCP server exposing Swiss engineering norms (SIA / Eurocodes) to Claude clients
 Add the server — no key needed up front:
 
 ```bash
-claude mcp add stratta -- npx -y @stratta/mcp
+claude mcp add stratta --scope user -- npx -y @stratta/mcp
 ```
 
+`--scope user` registers it for your user, so the tools are there in every
+project. Without it, `claude mcp add` writes to the current folder's config and
+the server exists nowhere else.
+
 Then sign in. This opens stratta.ch in your browser, where you confirm which
 machine and organisation to authorise; the key comes back to the terminal on
 its own and is saved to `~/.stratta/config.json` (owner-only, `0600`). You

package/dist/login.js

@@ -35,15 +35,31 @@ function promptSecret(query) {
  * SSH sessions have no browser, so the caller always prints the URL too.
  */
 function openBrowser(url) {
-    const [cmd, args] = process.platform === 'win32'
-        ? // `start` is a cmd builtin, not an executable, and it treats the first
-            // quoted argument as a window title — hence the empty one.
-            ['cmd', ['/c', 'start', '', url]]
-        : process.platform === 'darwin'
-            ? ['open', [url]]
-            : ['xdg-open', [url]];
     try {
-        const child = spawn(cmd, args, { stdio: 'ignore', detached: true });
+        if (process.platform === 'win32') {
+            /**
+             * `&` is a command separator in cmd.exe, and this URL always has two of
+             * them (`state`, `label`). Passing the URL as an ordinary argument let
+             * cmd re-parse it: the browser opened on `…/cli-auth?port=61324`, the
+             * page reported an invalid link because `state` was missing, and cmd
+             * tried to run the rest as commands.
+             *
+             * `windowsVerbatimArguments` stops Node from rewriting the arguments,
+             * so cmd receives the quotes we wrote and treats what is inside as one
+             * token. `start` reads the first quoted argument as a window title,
+             * hence the empty pair before the URL.
+             */
+            const child = spawn('cmd.exe', ['/c', 'start', '""', `"${url}"`], {
+                stdio: 'ignore',
+                detached: true,
+                windowsVerbatimArguments: true,
+            });
+            child.on('error', () => { });
+            child.unref();
+            return;
+        }
+        const cmd = process.platform === 'darwin' ? 'open' : 'xdg-open';
+        const child = spawn(cmd, [url], { stdio: 'ignore', detached: true });
         child.on('error', () => { });
         child.unref();
     }
@@ -52,15 +68,15 @@ function openBrowser(url) {
     }
 }
 function page(title, body) {
-    return `<!doctype html><html lang="fr"><meta charset="utf-8">
-<title>${title}</title>
-<style>
-  body{font:16px/1.6 ui-sans-serif,system-ui,-apple-system,"Segoe UI",sans-serif;
-       background:#12110f;color:#f5f1e8;display:grid;place-items:center;
-       min-height:100vh;margin:0;padding:2rem;text-align:center}
-  .c{max-width:26rem} h1{font-size:1.25rem;margin:0 0 .5rem}
-  p{margin:0;color:#a8a196}
-</style>
+    return `<!doctype html><html lang="fr"><meta charset="utf-8">
+<title>${title}</title>
+<style>
+  body{font:16px/1.6 ui-sans-serif,system-ui,-apple-system,"Segoe UI",sans-serif;
+       background:#12110f;color:#f5f1e8;display:grid;place-items:center;
+       min-height:100vh;margin:0;padding:2rem;text-align:center}
+  .c{max-width:26rem} h1{font-size:1.25rem;margin:0 0 .5rem}
+  p{margin:0;color:#a8a196}
+</style>
 <div class="c"><h1>${title}</h1><p>${body}</p></div>`;
 }
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stratta/mcp",
   "mcpName": "ch.stratta/mcp",
-  "version": "0.9.2",
+  "version": "0.9.3",
   "description": "MCP server exposing the engineering norms your firm is licensed for (SIA / Eurocodes) to any MCP client, via Stratta TreeRAG.",
   "license": "UNLICENSED",
   "author": "SmartFlow <hello@stratta.ch>",