scar-cli 0.22.0__tar.gz → 0.23.0__tar.gz

scar_cli-0.23.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.23.0"
+}

{scar_cli-0.22.0 → scar_cli-0.23.0}/.scars/0017-codex-pretool-context-can-replay-apply-patch.landmine.md

@@ -8,7 +8,6 @@ created: 2026-08-28
 authors: ["codex", "Kibukx"]
 anchors:
   - path: src/scar/codex.py
-  - path: plugin/hooks/hooks.json
 evidence:
   - issue: 243
   - note: live codex-cli 0.147.0 A/B emitted two tool_use_ids for one identical apply_patch after the first PreToolUse context injection

scar_cli-0.22.0/.scars/candidates/one-directional-health-check-leaves-flattering-direction-unwatched.md → scar_cli-0.23.0/.scars/0020-one-directional-health-check-leaves-flattering-direction-unwatched.landmine.md

@@ -1,21 +1,25 @@
 ---
-id: 0
+id: 20
 type: landmine
 title: A health check that watches one direction of pipeline failure leaves the flattering direction unwatched
 severity: high
 confidence: 0.9
 created: 2026-08-30
 authors: ["claude-code"]
+promoted_by: Kibukx
+promoted_by_source: git-config
 anchors:
   - path: src/scar/cli.py
   - path: src/scar/hooks.py
+  - path: src/scar/codex.py
+  - path: src/scar/cascade.py
   - pattern: "instrument_disconnected|posttool_silent|verdict_observed"
 evidence:
   - issue: 277
   - issue: 237
 expires:
   condition: "the pipeline stops having two independently-installable halves"
-status: candidate
+status: active
 ---
 
 The precheck and posttool hooks install separately and fail separately. #237

scar_cli-0.22.0/.scars/candidates/posttool-fix-in-hooks-does-not-reach-codex-or-cascade.md → scar_cli-0.23.0/.scars/0021-posttool-fix-in-hooks-does-not-reach-codex-or-cascade.landmine.md

@@ -1,16 +1,17 @@
 ---
-id: 0
+id: 21
 type: landmine
 title: A posttool change in hooks.py does not reach codex.py or cascade.py, which carry their own copy of the same logic
 severity: high
 confidence: 0.8
 created: 2026-09-02
 authors: ["claude-code"]
+promoted_by: Kibukx
+promoted_by_source: git-config
 anchors:
   - path: src/scar/hooks.py
   - path: src/scar/codex.py
   - path: src/scar/cascade.py
-violation: "if not violations:"
 evidence:
   - issue: 277
   - issue: 293
@@ -18,7 +19,8 @@ evidence:
 expires:
   condition: "the three posttool paths share one implementation, or the adapters delegate to hooks.posttool"
   review_after: 2026-12-01
-status: candidate
+violation: "if not violations:"
+status: active
 ---
 
 The posttool verdict logic exists three times: `hooks.posttool` for Claude

scar_cli-0.22.0/.scars/candidates/codex-hook-delivery-needs-user-file-and-trust.md → scar_cli-0.23.0/.scars/0022-codex-hook-delivery-needs-user-file-and-trust.landmine.md

@@ -1,13 +1,14 @@
 ---
-id: 0
+id: 22
 type: landmine
 title: Codex plugin hooks are not materialized, and untrusted Codex hooks are skipped silently
 severity: high
 confidence: 0.9
 created: 2026-08-28
 authors: ["claude-code"]
+promoted_by: Kibukx
+promoted_by_source: git-config
 anchors:
-  - path: plugin/hooks/hooks.json
   - path: src/scar/codex.py
   - pattern: "hooks/hooks\.json|CODEX_HOME|codex-(pretool|posttool|session-notice)"
 evidence:
@@ -17,7 +18,7 @@ evidence:
 expires:
   condition: "Codex materializes a plugin's hooks/hooks.json into the installed cache AND surfaces an error for untrusted hooks"
   review_after: 2027-02-28
-status: candidate
+status: active
 ---
 
 Shipping a Codex hook through a plugin's `hooks/hooks.json` does not deliver it,

scar_cli-0.23.0/.scars/candidates/one-plugin-hook-manifest-two-hosts-two-root-variables.md

@@ -0,0 +1,30 @@
+---
+id: 0
+type: landmine
+title: A plugin hook manifest is read by every host that installs the plugin, and hosts expand different root variables
+severity: high
+confidence: 0.9
+created: 2026-09-03
+authors: ["claude-code"]
+anchors:
+  - path: plugin/
+  - path: src/scar/installer.py
+  - pattern: "PLUGIN_ROOT"
+evidence:
+  - issue: 303
+  - issue: 244
+expires:
+  condition: "the plugin format gains per-host scoping for hook files"
+  review_after: 2026-12-01
+status: candidate
+---
+
+Claude Code merges plugin.json hooks with hooks/hooks.json and defines only
+CLAUDE_PLUGIN_ROOT. Codex reads the same file and defines both PLUGIN_ROOT
+and CLAUDE_PLUGIN_ROOT. A hooks/hooks.json written for Codex with
+${PLUGIN_ROOT} therefore ran on every Claude session start and Bash call as
+"/hooks/run.sh": No such file or directory, on every machine with the plugin
+(#244 introduced it, #303 removed it). There is no way to mark a plugin
+hook file as one host's only. Ship one manifest per plugin, on
+${CLAUDE_PLUGIN_ROOT}, and deliver host-specific hooks through
+`scar hook install --runtime <host>`, whose files live outside the plugin.

{scar_cli-0.22.0 → scar_cli-0.23.0}/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## [0.23.0](https://github.com/Daily-Nerd/Scar/compare/v0.22.0...v0.23.0) (2026-09-03)
+
+
+### ⚠ BREAKING CHANGES
+
+* **install:** with no --runtime, no terminal, and more than one detected host, scar hook install and scar skill install write nothing and print the commands to run instead of installing Claude Code by default.
+
+### Features
+
+* **install:** detect installed hosts and the channel that already serves each ([#304](https://github.com/Daily-Nerd/Scar/issues/304)) ([180cf6f](https://github.com/Daily-Nerd/Scar/commit/180cf6f53ab671e6fb9ce6636fe718aabead1c7c))
+
 ## [0.22.0](https://github.com/Daily-Nerd/Scar/compare/v0.21.0...v0.22.0) (2026-09-03)
 
 

{scar_cli-0.22.0 → scar_cli-0.23.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: scar-cli
-Version: 0.22.0
+Version: 0.23.0
 Summary: SCAR — version control for negative knowledge (deadends, fences, landmines)
 License: MIT
 License-File: LICENSE
@@ -75,20 +75,14 @@ cp .scars/template.md .scars/candidates/redis-sessions.md
 $EDITOR .scars/candidates/redis-sessions.md
 scar lint                        # validate format
 scar promote redis-sessions.md   # human review gate: candidate -> active
-scar hook install                # Claude Code: inject scars before agent edits
-scar skill install               # Claude Code: authoring skill into ~/.claude/skills/
-scar hook install --runtime windsurf   # Windsurf/Cascade: block-once injection
+scar hook install                # detects installed hosts, asks which to wire (--all, --runtime X)
+scar skill install               # same detection for the scar-authoring skill
+scar hook status                 # every host with the channel that serves it (settings, plugin, none)
 ```
 
-Claude Code users: the marketplace **plugin** ships the hooks and the
-scar-authoring skill together; the two commands above are the manual fallback.
-Re-run `scar skill install` after upgrading — the installed skill is a static copy.
+Claude Code users: the marketplace **plugin** ships the hooks and the scar-authoring skill together. `scar hook install` and `scar skill install` see the plugin and skip Claude unless you pass `--runtime claude --force`. Re-run `scar skill install` after upgrading a manual install; the installed skill is a static copy.
 
-Codex users: install and enable the Scar plugin, then open `/hooks` to review
-and trust its current hook definitions. The native plugin hooks push matching
-scars before `Bash` and `apply_patch` calls and report post-patch `violation:`
-tripwires without blocking or rewriting the action. Plugin updates that change
-the hook definitions require trust review again.
+Codex users: run `scar hook install --runtime codex`, then open `/hooks` in Codex to review and trust the entries. The hooks push matching scars before `Bash` and `apply_patch` calls and report post-patch `violation:` tripwires without blocking. The plugin no longer carries Codex hook definitions; the installer is the one path.
 
 Full walkthrough, lifecycle commands, and agent wiring (Claude Code plugin,
 Codex native hooks, Windsurf/Cascade hooks, MCP server, `scar draft-check`):

{scar_cli-0.22.0 → scar_cli-0.23.0}/README.md

@@ -60,20 +60,14 @@ cp .scars/template.md .scars/candidates/redis-sessions.md
 $EDITOR .scars/candidates/redis-sessions.md
 scar lint                        # validate format
 scar promote redis-sessions.md   # human review gate: candidate -> active
-scar hook install                # Claude Code: inject scars before agent edits
-scar skill install               # Claude Code: authoring skill into ~/.claude/skills/
-scar hook install --runtime windsurf   # Windsurf/Cascade: block-once injection
+scar hook install                # detects installed hosts, asks which to wire (--all, --runtime X)
+scar skill install               # same detection for the scar-authoring skill
+scar hook status                 # every host with the channel that serves it (settings, plugin, none)
 ```
 
-Claude Code users: the marketplace **plugin** ships the hooks and the
-scar-authoring skill together; the two commands above are the manual fallback.
-Re-run `scar skill install` after upgrading — the installed skill is a static copy.
+Claude Code users: the marketplace **plugin** ships the hooks and the scar-authoring skill together. `scar hook install` and `scar skill install` see the plugin and skip Claude unless you pass `--runtime claude --force`. Re-run `scar skill install` after upgrading a manual install; the installed skill is a static copy.
 
-Codex users: install and enable the Scar plugin, then open `/hooks` to review
-and trust its current hook definitions. The native plugin hooks push matching
-scars before `Bash` and `apply_patch` calls and report post-patch `violation:`
-tripwires without blocking or rewriting the action. Plugin updates that change
-the hook definitions require trust review again.
+Codex users: run `scar hook install --runtime codex`, then open `/hooks` in Codex to review and trust the entries. The hooks push matching scars before `Bash` and `apply_patch` calls and report post-patch `violation:` tripwires without blocking. The plugin no longer carries Codex hook definitions; the installer is the one path.
 
 Full walkthrough, lifecycle commands, and agent wiring (Claude Code plugin,
 Codex native hooks, Windsurf/Cascade hooks, MCP server, `scar draft-check`):

{scar_cli-0.22.0 → scar_cli-0.23.0}/SPEC.md

@@ -464,3 +464,7 @@ just as well as edit rows do.
 command output, and asserts the nullable semantics of §9.2. A guarantee no
 test enforces is an untestable assertion, and untestable assertions are the
 ones that reach `main` wrong.
+
+### 9.10 Install detection
+
+`scar hook install` and `scar skill install` without `--runtime` detect hosts (claude, codex, windsurf, cursor, opencode) by config directory or binary on PATH, and resolve for each the channel that already serves it: `settings` (Scar's own entries in the host's hook file), `plugin` (the scar marketplace plugin installed and not disabled), or `none`. windsurf is repo-scoped: its hooks file is written into the working repo, so the binary on PATH counts only when that repo is inside a git repository. On a terminal, one question per present, wirable, unserved host, default no. Without a terminal, exactly one such host is installed; zero or several means the commands are printed and nothing is written. Zero detected hosts says so, rather than naming the plugin. `--all` wires every such host. `--runtime claude` on a Claude Code already served by the plugin refuses unless `--force`. `--all` and `--force` apply to `install` only, and `--force` applies to `--runtime claude` only. A missing or unreadable plugin registry never counts as `plugin`.

{scar_cli-0.22.0 → scar_cli-0.23.0}/plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "scar",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "description": "SCAR — version control for negative knowledge (deadends, fences, landmines)",
   "hooks": {
     "PreToolUse": [

{scar_cli-0.22.0 → scar_cli-0.23.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "scar-cli"
-version = "0.22.0"
+version = "0.23.0"
 description = "SCAR — version control for negative knowledge (deadends, fences, landmines)"
 readme = "README.md"
 requires-python = ">=3.10"

{scar_cli-0.22.0 → scar_cli-0.23.0}/release-please-config.json

@@ -3,6 +3,7 @@
   "packages": {
     ".": {
       "release-type": "python",
+      "bump-minor-pre-major": true,
       "extra-files": [
         {
           "type": "json",

{scar_cli-0.22.0 → scar_cli-0.23.0}/src/scar/cli.py

@@ -9,11 +9,13 @@ from __future__ import annotations
 
 import argparse
 import json
+import os
 import sys
 import time
 from datetime import datetime
 from importlib.metadata import PackageNotFoundError, version as _dist_version
 from pathlib import Path
+from typing import Callable
 
 from rich_argparse import RichHelpFormatter
 
@@ -2666,46 +2668,166 @@ def _cmd_cascade_hook(args) -> int:
     return cascade_hook()
 
 
+def _detect(kind: str):
+    """Which hosts exist here, and which channel already serves each one.
+    Pure read: hosts.py never writes and never prompts (#303)."""
+    from . import hosts, installer
+    home = installer.CLAUDE_DIR.parent
+    repo = Path.cwd()
+    found = hosts.detect_hosts(home, repo, kind=kind,
+                               path_env=os.environ.get("PATH", ""),
+                               codex_dir=installer.codex_home())
+    resolved = hosts.resolve_channels(found, claude_dir=installer.CLAUDE_DIR,
+                                      repo=repo, kind=kind)
+    return resolved, repo
+
+
+def _run_hook_installers(names: list[str], repo: Path, dry: bool) -> int:
+    """Worst exit code wins: one host failing must not be reported as success."""
+    from .installer import cascade_install, codex_install, install
+    rc = 0
+    for name in names:
+        print(f"== {name}")
+        if name == "claude":
+            rc = max(rc, install(dry=dry))
+        elif name == "codex":
+            rc = max(rc, codex_install(dry=dry))
+        elif name == "windsurf":
+            rc = max(rc, cascade_install(repo, dry=dry))
+    return rc
+
+
+def _lifecycle_flag_guard(args) -> int | None:
+    """--all/--runtime exclusivity is argparse's job. The rest fails here, and
+    by returning: every command in this CLI returns exit codes and never
+    raises to the shell. Shared verbatim by `hook` and `skill` (#303).
+
+    Both --all and --force describe how to install, so on uninstall or status
+    they can only be silently ignored. --force overrides the plugin check,
+    and the plugin channel is Claude Code's alone, so on any other runtime it
+    would claim to override something that does not exist."""
+    force = getattr(args, "force", False)
+    for flag, given in (("--all", getattr(args, "all", False)), ("--force", force)):
+        if given and args.kind != "install":
+            print(f"{flag} applies to install only")
+            return 2
+    if force and not args.runtime:
+        print("--force needs --runtime: it overrides the plugin check for one "
+              "named runtime, and detection never needs overriding.")
+        return 2
+    if force and args.runtime != "claude":
+        print("--force applies to --runtime claude only, the plugin channel "
+              "is Claude Code only")
+        return 2
+    return None
+
+
+def _lifecycle_no_runtime(kind: str, args,
+                          install_many: Callable[[list[str], Path, bool], int],
+                          status_fn: Callable[[], int]) -> int:
+    """No --runtime on install/status: look at the machine first, print what
+    is there, then either decide-and-install or fall through to the existing
+    per-runtime status. Plain print, not Rich, because the non-tty branch of
+    a read command must stay unwrapped (scar 0008). `kind` doubles as the
+    `hosts.decide` command name, matching the subcommand it is called under
+    (`hook`/`skill`)."""
+    from . import hosts
+    found, repo = _detect(kind)
+    print(hosts.render_table(found))
+    if args.kind == "install":
+        decision = hosts.decide(found, interactive=hosts.is_interactive(),
+                                all_flag=getattr(args, "all", False),
+                                ask=hosts.ask_yes_no, command=kind)
+        for line in decision.lines:
+            print(line)
+        return install_many(decision.install, repo, args.dry_run)
+    print()
+    return status_fn()
+
+
+def _plugin_refusal(subject: str, target: str) -> None:
+    """The one-line refusal printed when `--runtime claude install` would
+    write over a channel the scar plugin already serves. `subject` reads
+    into "claude: {subject} provided by the scar plugin...", so it carries
+    its own verb agreement ("hooks are", "the scar-authoring skill is")."""
+    print(f"claude: {subject} provided by the scar plugin (scar@scar); "
+          f"nothing written. Pass --force to install into {target} as well.")
+
+
 def _cmd_hook_lifecycle(args) -> int:
-    runtime = getattr(args, "runtime", "claude")
+    from . import hosts
+    from .installer import (
+        CLAUDE_DIR,
+        cascade_install,
+        cascade_status,
+        cascade_uninstall,
+        codex_install,
+        codex_status,
+        codex_uninstall,
+        git_hook_install,
+        git_hook_status,
+        git_hook_uninstall,
+        install,
+        status,
+        uninstall,
+    )
+    dry = args.dry_run
+    if (rc := _lifecycle_flag_guard(args)) is not None:
+        return rc
+    if getattr(args, "git", False):
+        repo = Path.cwd()
+        return {"install": lambda: git_hook_install(repo, dry=dry),
+                "uninstall": lambda: git_hook_uninstall(repo, dry=dry),
+                "status": lambda: git_hook_status(repo)}[args.kind]()
+    runtime = args.runtime
+    if runtime is None and args.kind in ("install", "status"):
+        return _lifecycle_no_runtime("hook", args, _run_hook_installers, status)
+    # uninstall with no --runtime keeps targeting Claude: removal is out of
+    # the detection spec's scope, and widening it silently would rip hooks
+    # out of hosts the user never named.
+    runtime = runtime or "claude"
+    if (runtime == "claude" and args.kind == "install"
+            and not getattr(args, "force", False)
+            and hosts.claude_plugin_enabled(CLAUDE_DIR)):
+        _plugin_refusal("hooks are", "~/.claude/settings.json")
+        return 0
     if runtime == "codex":
-        from .installer import codex_install, codex_status, codex_uninstall
-        if args.kind == "install":
-            return codex_install(dry=args.dry_run)
-        if args.kind == "uninstall":
-            return codex_uninstall(dry=args.dry_run)
-        return codex_status()
+        return {"install": lambda: codex_install(dry=dry),
+                "uninstall": lambda: codex_uninstall(dry=dry),
+                "status": codex_status}[args.kind]()
     if runtime == "windsurf":
-        from .installer import cascade_install, cascade_status, cascade_uninstall
-        repo = Path.cwd()
-        if args.kind == "install":
-            return cascade_install(repo, dry=args.dry_run)
-        if args.kind == "uninstall":
-            return cascade_uninstall(repo, dry=args.dry_run)
-        return cascade_status(repo)
-    if getattr(args, "git", False):
-        from .installer import git_hook_install, git_hook_status, git_hook_uninstall
         repo = Path.cwd()
-        if args.kind == "install":
-            return git_hook_install(repo, dry=args.dry_run)
-        if args.kind == "uninstall":
-            return git_hook_uninstall(repo, dry=args.dry_run)
-        return git_hook_status(repo)
-    from .installer import install, status, uninstall
-    if args.kind == "install":
-        return install(dry=args.dry_run)
-    if args.kind == "uninstall":
-        return uninstall(dry=args.dry_run)
-    return status()
+        return {"install": lambda: cascade_install(repo, dry=dry),
+                "uninstall": lambda: cascade_uninstall(repo, dry=dry),
+                "status": lambda: cascade_status(repo)}[args.kind]()
+    return {"install": lambda: install(dry=dry),
+            "uninstall": lambda: uninstall(dry=dry),
+            "status": status}[args.kind]()
 
 
 def _cmd_skill_lifecycle(args) -> int:
-    from .installer import skill_install, skill_status, skill_uninstall
-    if args.kind == "install":
-        return skill_install(dry=args.dry_run)
-    if args.kind == "uninstall":
-        return skill_uninstall(dry=args.dry_run)
-    return skill_status()
+    from . import hosts
+    from .installer import CLAUDE_DIR, skill_install, skill_status, skill_uninstall
+    dry = args.dry_run
+    if (rc := _lifecycle_flag_guard(args)) is not None:
+        return rc
+    runtime = args.runtime
+    if runtime is None and args.kind in ("install", "status"):
+        def install_many(names: list[str], repo: Path, dry: bool) -> int:
+            del repo  # skill has exactly one wirable host: claude
+            return skill_install(dry=dry) if "claude" in names else 0
+        return _lifecycle_no_runtime("skill", args, install_many, skill_status)
+    # uninstall with no --runtime keeps targeting Claude, the only wirable
+    # host today: same rule as `hook`.
+    runtime = runtime or "claude"
+    if (runtime == "claude" and args.kind == "install"
+            and not getattr(args, "force", False)
+            and hosts.claude_plugin_enabled(CLAUDE_DIR)):
+        _plugin_refusal("the scar-authoring skill is", "~/.claude/skills")
+        return 0
+    return {"install": lambda: skill_install(dry=dry),
+            "uninstall": lambda: skill_uninstall(dry=dry),
+            "status": skill_status}[args.kind]()
 
 
 def _scar_version() -> str:
@@ -2866,22 +2988,34 @@ def build_parser() -> argparse.ArgumentParser:
     p.add_argument("--dry-run", action="store_true",
                    help="show lifecycle changes without writing settings")
     # One invocation, one target: --git writes .git/hooks/post-commit,
-    # --runtime windsurf writes .windsurf/hooks.json, and the default writes
-    # ~/.claude/settings.json. Passing two can only mean one is ignored.
+    # --runtime windsurf writes .windsurf/hooks.json, --all writes to every
+    # unserved host detection finds, and no flag at all means detect and ask.
+    # Passing two can only mean one is ignored.
     target = p.add_mutually_exclusive_group()
     target.add_argument("--git", action="store_true",
                         help="with install/uninstall/status: target this repo's "
                              ".git/hooks/post-commit trigger for `scar draft-check` "
                              "(#117) instead of Claude Code's settings.json")
     target.add_argument("--runtime", choices=["claude", "codex", "windsurf"],
-                        default="claude",
+                        default=None,
                         help="with install/uninstall/status: which runtime to wire. "
+                             "Omitted: detect installed hosts and ask (install), or "
+                             "show every host's channel (status); uninstall still "
+                             "targets claude. "
                              "codex writes ~/.codex/hooks.json — shared with other "
                              "tools, so merged, and inactive until you trust the "
                              "entries in Codex's `/hooks` (#246); "
                              "windsurf writes this repo's committed "
                              ".windsurf/hooks.json (Cascade block-once, #197); "
-                             "claude (default) writes ~/.claude/settings.json")
+                             "claude writes ~/.claude/settings.json")
+    target.add_argument("--all", action="store_true",
+                        help="with install: wire every detected, unserved host "
+                             "without asking. A target like the other two, so "
+                             "argparse rejects it next to --runtime or --git "
+                             "rather than letting one be silently ignored")
+    p.add_argument("--force", action="store_true",
+                   help="with --runtime claude: install into the settings file even "
+                        "though the scar plugin already serves that host")
 
     _add(sub, "cascade-hook", _cmd_cascade_hook,
          help="run the Windsurf/Cascade hook adapter (stdin JSON; installed by "
@@ -2891,6 +3025,23 @@ def build_parser() -> argparse.ArgumentParser:
     p.add_argument("kind", choices=["install", "uninstall", "status"])
     p.add_argument("--dry-run", action="store_true",
                    help="show changes without writing to ~/.claude/skills")
+    # One invocation, one target: --runtime claude writes ~/.claude/skills,
+    # --all writes to every unserved host detection finds (only claude is
+    # wirable today), and no flag at all means detect and ask.
+    target = p.add_mutually_exclusive_group()
+    target.add_argument("--runtime", choices=["claude"], default=None,
+                        help="with install/uninstall/status: which host to wire. "
+                             "Omitted: detect installed hosts and ask (install), "
+                             "or show every host's channel (status); uninstall "
+                             "still targets claude")
+    target.add_argument("--all", action="store_true",
+                        help="with install: wire every detected, unserved host "
+                             "without asking. A target like --runtime, so "
+                             "argparse rejects it next to --runtime rather than "
+                             "letting one be silently ignored")
+    p.add_argument("--force", action="store_true",
+                   help="with --runtime claude: install even though the scar plugin "
+                        "already ships the skill")
 
     _add(sub, "mcp", _cmd_mcp, help="run the SCAR MCP stdio server")