cc-cream 0.1.3 → 0.1.4

package/CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to cc-cream are documented here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versions follow
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.4] — 2026-05-29
+
+### Fixed
+- **Node DEP0190 deprecation warning during setup.** `resolveNodePath()` called `execFileSync('command', ['-v', 'node'], { shell: true })`, which Node warns about because args are concatenated rather than escaped when `shell` is true. Switched to `execSync('command -v node')` — no behavior change, warning gone.
+
 ## [0.1.3] — 2026-05-29
 
 ### Fixed
@@ -64,6 +69,7 @@ line and prints a colored ≤3-row bar — zero tokens, the model never sees it.
 - Supports **macOS and Linux**; Windows is a planned fast-follow.
 - Requires Claude Code **2.1.132+** (`effort` / `thinking` need 2.1.145+).
 
+[0.1.4]: https://github.com/bart-turczynski/cc-cream/compare/v0.1.3...v0.1.4
 [0.1.3]: https://github.com/bart-turczynski/cc-cream/compare/v0.1.2...v0.1.3
 [0.1.2]: https://github.com/bart-turczynski/cc-cream/compare/v0.1.1...v0.1.2
 [0.1.1]: https://github.com/bart-turczynski/cc-cream/compare/v0.1.0...v0.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-cream",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Claude Code cache/context/cost status-line tool",
   "directories": {
     "doc": "docs"

package/src/install.js

@@ -8,7 +8,7 @@
 // The pure `plan()` function does all the decision-making (no I/O) so it is
 // testable; the CLI wrapper at the bottom handles reading/prompting/writing.
 
-import { execFileSync } from 'node:child_process';
+import { execSync } from 'node:child_process';
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
@@ -188,10 +188,7 @@ function copyRuntimeFiles(sourceFile, destDir) {
 // process.execPath (the node currently running setup) if that fails.
 function resolveNodePath() {
   try {
-    const found = execFileSync('command', ['-v', 'node'], {
-      shell: true,
-      encoding: 'utf8',
-    }).trim();
+    const found = execSync('command -v node', { encoding: 'utf8' }).trim();
     if (found) return found;
   } catch {
     // fall through