@goosyai/goosy 1.0.5 → 1.0.6

package/bin/goosy.js

@@ -20,12 +20,24 @@ if (!existsSync(binary)) {
   process.exit(1);
 }
 
+let chmodFailed = false;
 if (platform !== "windows") {
-  try { chmodSync(binary, 0o755); } catch (_) { /* package files may be read-only */ }
+  // Self-heals a binary that lost its executable bit (e.g. some tar
+  // extractions). This throws EPERM instead when the file is owned by
+  // another user — typically because the package was installed with sudo —
+  // which the catch below turns into an actionable message rather than a
+  // bare downstream EACCES.
+  try { chmodSync(binary, 0o755); } catch (_) { chmodFailed = true; }
 }
 
 const child = spawn(binary, process.argv.slice(2), { stdio: "inherit" });
 child.on("error", (err) => {
+  if (err.code === "EACCES" && chmodFailed) {
+    console.error(`Goosy's binary isn't executable and couldn't fix itself: ${binary}`);
+    console.error("This usually means it was installed with sudo, so it's owned by root and your user can't grant itself execute permission.");
+    console.error(`Fix with either:\n  sudo chmod +x "${binary}"\nor reinstall without sudo:\n  npm uninstall -g @goosyai/goosy && npm install -g @goosyai/goosy`);
+    process.exit(1);
+  }
   console.error(`Unable to start Goosy: ${err.message}`);
   process.exit(1);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goosyai/goosy",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "description": "AI-powered security scanning and patching CLI",
   "bin": {
     "goosy": "bin/goosy.js"