cmd's `start` splits unquoted commands at "&", truncating the OAuth authorize
URL after the first query parameter — Windows users hit AADSTS900144 (missing
'scope'). Launch via rundll32 url.dll,FileProtocolHandler instead, which takes
the URL as a plain argument with no shell parsing.
Same fix as claude-msplanner b07a241, applied to the canonical skill copy and
synced into the extension bundle.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude Code skill (CLI over Microsoft Graph, delegated auth-code + PKCE) and a
Claude Desktop .mcpb extension sharing one dependency-free core client.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>