win-cliauth 1.0.4 → 1.0.5

package/dist/src/pshell.js

@@ -7,15 +7,33 @@ This source code is licensed under the BSD-style license found in the
 LICENSE file in the root directory of this source tree.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.powershellEnv = powershellEnv;
+exports.readableError = readableError;
 exports.encrypt = encrypt;
 exports.decrypt = decrypt;
 const child_process_1 = require("child_process");
+// Windows PowerShell must not inherit PowerShell 7's module path (set when win-cliauth runs from pwsh),
+// or it fails to load its own modules such as Microsoft.PowerShell.Security.
+function powershellEnv(env = process.env) {
+    return Object.fromEntries(Object.entries(env).filter(([key]) => key.toUpperCase() !== 'PSMODULEPATH'));
+}
+// Turns PowerShell's serialized "#< CLIXML" error output into plain text.
+function readableError(stderr) {
+    if (!stderr.startsWith('#< CLIXML'))
+        return stderr;
+    const errors = [...stderr.matchAll(/<S S="Error">([\s\S]*?)<\/S>/g)].map(([, text]) => text);
+    return errors
+        .join('')
+        .replace(/_x000D__x000A_/g, '\n')
+        .replace(/&lt;/g, '<').replace(/&gt;/g, '>').replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&amp;/g, '&')
+        .trim() || stderr;
+}
 // Secrets never appear in the script text (which is visible in process listings):
 // they travel through stdin/stdout as base64-encoded UTF-8.
 function pshell({ script, input = '' }) {
-    const encoded = Buffer.from(`$ErrorActionPreference = 'Stop'\n${script}`, 'utf16le').toString('base64');
+    const encoded = Buffer.from(`$ErrorActionPreference = 'Stop'\n$ProgressPreference = 'SilentlyContinue'\n${script}`, 'utf16le').toString('base64');
     return new Promise((resolve, reject) => {
-        const ps = (0, child_process_1.spawn)('powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded], { stdio: 'pipe', windowsHide: true });
+        const ps = (0, child_process_1.spawn)('powershell.exe', ['-NoProfile', '-NonInteractive', '-OutputFormat', 'Text', '-EncodedCommand', encoded], { stdio: 'pipe', windowsHide: true, env: powershellEnv() });
         let stdout = '';
         let stderr = '';
         ps.stdout.on('data', (chunk) => (stdout += chunk));
@@ -24,7 +42,7 @@ function pshell({ script, input = '' }) {
         ps.on('close', (code) => {
             if (code === 0)
                 return resolve(stdout.trim());
-            reject(new Error(stderr.trim() || `PowerShell exited with code ${code}`));
+            reject(new Error(readableError(stderr.trim()) || `PowerShell exited with code ${code}`));
         });
         ps.stdin.end(input);
     });
@@ -60,10 +78,12 @@ async function decrypt() {
     }
     `,
     });
+    // null prototype: names like "toString" or "__proto__" are plain keys, not inherited properties
+    const vault = Object.create(null);
     if (!output)
-        return {};
+        return vault;
     try {
-        return JSON.parse(Buffer.from(output, 'base64').toString('utf8'));
+        return Object.assign(vault, JSON.parse(Buffer.from(output, 'base64').toString('utf8')));
     }
     catch {
         throw new Error('The key file is corrupted (a backup may exist at %AppData%\\win-cliauth\\keys.bak).');

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "win-cliauth",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "win-cliauth is a CLI-based OTP (One-Time Password) authenticator management tool for Windows.",
   "author": "Pedro Lucas Magalhães <pedrolucasmag@gmail.com>",
   "license": "BSD-3-Clause",
   "scripts": {
     "build": "tsc",
-    "lint": "eslint . --ext .ts",
+    "lint": "eslint .",
     "test": "tsc && node --test \"dist/test/**/*.test.js\"",
+    "prepare": "husky",
     "prepack": "tsc"
   },
   "bin": {
@@ -23,15 +24,16 @@
     "!dist/test"
   ],
   "devDependencies": {
-    "@commitlint/cli": "^17.7.1",
-    "@commitlint/config-conventional": "^17.7.0",
-    "@types/node": "^18.11.10",
+    "@commitlint/cli": "^21.2.3",
+    "@commitlint/config-conventional": "^21.2.3",
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^20.19.0",
     "@types/yargs": "^17.0.10",
-    "@typescript-eslint/eslint-plugin": "^8.0.0",
-    "@typescript-eslint/parser": "^8.0.0",
-    "eslint": "^8.57.0",
-    "husky": "^8.0.3",
-    "typescript": "^5.4.0"
+    "eslint": "^10.12.0",
+    "globals": "^17.13.0",
+    "husky": "^9.1.7",
+    "typescript": "^5.4.0",
+    "typescript-eslint": "^8.71.1"
   },
   "os": [
     "win32"
@@ -51,6 +53,6 @@
     "yargs": "^17.5.1"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=20"
   }
 }