@murk-security/cli 0.3.1 → 0.3.2

package/murk.mjs

@@ -21,8 +21,8 @@ import os from 'node:os';
 import path from 'node:path';
 import { randomBytes } from 'node:crypto';
 import { spawn } from 'node:child_process';
-import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { pathToFileURL } from 'node:url';
+import { mkdirSync, readFileSync, realpathSync, writeFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
 
 // Default to the hosted MURK service; devs point these at a local control-plane/dashboard.
 const API_URL = (process.env.MURK_API_URL ?? 'https://api.murk.sh').replace(/\/$/, '');
@@ -313,4 +313,11 @@ function main() {
 }
 
 // Run the CLI only when executed directly, not when imported (e.g. by the test suite).
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) main();
+// Compare realpaths so a bin symlink (node_modules/.bin/murk -> murk.mjs, as npx installs it)
+// still counts as direct execution — a plain href compare misses the symlink and no-ops.
+function isEntrypoint() {
+  const arg = process.argv[1];
+  if (!arg) return false;
+  try { return realpathSync(arg) === realpathSync(fileURLToPath(import.meta.url)); } catch { return false; }
+}
+if (isEntrypoint()) main();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@murk-security/cli",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Run MURK's MCP server for your AI agent and scan locally-running apps with MURK's hosted runner over a secure outbound tunnel — no local runner, no model key.",
   "type": "module",
   "bin": {