claude-scionos 4.1.5 → 4.1.7

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-scionos",
-    "version": "4.1.5",
+    "version": "4.1.7",
     "description": "RouterLab launcher, strategy proxy and secure token wrapper for Claude Code CLI",
     "type": "module",
     "main": "index.js",

package/src/routerlab.js

@@ -207,6 +207,10 @@ function hasNonEmptyWindowsTokenFile(tokenFile) {
   }
 }
 
+function encodeTokenForPowerShell(token) {
+  return Buffer.from(token, 'utf8').toString('base64');
+}
+
 function getServiceStrategies(serviceValue = DEFAULT_SERVICE) {
   const service = getServiceConfig(serviceValue);
   if (!service?.strategyValues?.length) {
@@ -386,16 +390,21 @@ function commandExists(command) {
   return !result.error;
 }
 
-function runPowerShell(command, env = {}) {
-  const powershell = process.env.SystemRoot
-    ? path.join(process.env.SystemRoot, 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe')
-    : 'powershell.exe';
-
-  const result = spawnSync(powershell, ['-NoProfile', '-NonInteractive', '-Command', command], {
-    encoding: 'utf8',
-    env: {
-      ...process.env,
-      ...env,
+function runPowerShell(command, options = {}) {
+  const {
+    env = {},
+    input,
+  } = options;
+  const powershell = process.env.SystemRoot
+    ? path.join(process.env.SystemRoot, 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe')
+    : 'powershell.exe';
+
+  const result = spawnSync(powershell, ['-NoProfile', '-NonInteractive', '-Command', command], {
+    encoding: 'utf8',
+    input,
+    env: {
+      ...process.env,
+      ...env,
     },
   });
 
@@ -437,12 +446,14 @@ function storeToken(token, serviceValue = DEFAULT_SERVICE) {
 
   if (process.platform === 'win32') {
     const tokenFile = getWindowsTokenFile(service.value);
+    const encodedToken = encodeTokenForPowerShell(token);
     fs.mkdirSync(path.dirname(tokenFile), {recursive: true});
     runPowerShell(
-      '$secure = ConvertTo-SecureString $env:SCIONOS_TOKEN -AsPlainText -Force; $encrypted = ConvertFrom-SecureString $secure; Set-Content -Path $env:SCIONOS_TOKEN_FILE -Value $encrypted -NoNewline',
+      `$token = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('${encodedToken}')); if ([string]::IsNullOrEmpty($token)) { throw "Token input is empty" }; $secure = ConvertTo-SecureString $token -AsPlainText -Force; $encrypted = ConvertFrom-SecureString $secure; Set-Content -Path $env:SCIONOS_TOKEN_FILE -Value $encrypted -NoNewline`,
       {
-        SCIONOS_TOKEN: token,
-        SCIONOS_TOKEN_FILE: tokenFile,
+        env: {
+          SCIONOS_TOKEN_FILE: tokenFile,
+        },
       },
     );
 
@@ -514,7 +525,9 @@ function getStoredToken(serviceValue = DEFAULT_SERVICE) {
     const token = runPowerShell(
       '$secure = Get-Content -Path $env:SCIONOS_TOKEN_FILE -Raw | ConvertTo-SecureString; $ptr = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($secure); try { [System.Runtime.InteropServices.Marshal]::PtrToStringBSTR($ptr) } finally { [System.Runtime.InteropServices.Marshal]::ZeroFreeBSTR($ptr) }',
       {
-        SCIONOS_TOKEN_FILE: tokenFile,
+        env: {
+          SCIONOS_TOKEN_FILE: tokenFile,
+        },
       },
     );
     return token || null;