@drakulavich/kesha-voice-kit 1.0.3 → 1.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drakulavich/kesha-voice-kit",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Open-source voice toolkit for Apple Silicon. Speech-to-text, language detection. 25 languages.",
   "type": "module",
   "bin": {

package/scripts/postinstall.cjs

@@ -1,12 +1,25 @@
 #!/usr/bin/env node
-const { execSync } = require("child_process");
+// Warn if Bun is not on PATH. Uses fs-only probing instead of
+// child_process.execSync("bun --version") so that OpenClaw's
+// dangerous-code scanner does not flag the plugin install.
+const fs = require("fs");
+const path = require("path");
 
-try {
-  execSync("bun --version", { stdio: "ignore" });
-} catch {
+const exe = process.platform === "win32" ? "bun.exe" : "bun";
+const dirs = (process.env.PATH || "").split(path.delimiter).filter(Boolean);
+
+const found = dirs.some((dir) => {
+  try {
+    return fs.existsSync(path.join(dir, exe));
+  } catch {
+    return false;
+  }
+});
+
+if (!found) {
   console.warn(
     "\n⚠️  Kesha Voice Kit requires Bun runtime.\n" +
-    "   Install Bun: curl -fsSL https://bun.sh/install | bash\n" +
-    "   Then run:    kesha install\n"
+      "   Install Bun: curl -fsSL https://bun.sh/install | bash\n" +
+      "   Then run:    kesha install\n",
   );
 }