node9-ai 1.11.13 → 1.12.0

package/README.md

@@ -25,7 +25,7 @@ Node9 sits between your AI agent and your system. Every shell command, file writ
 
 ---
 
-## Try it in 10 seconds — no install, no account
+## Try it in 10 seconds — no install
 
 ```bash
 npx node9-ai scan

package/bin/node9.js

@@ -1,15 +1,31 @@
 #!/usr/bin/env node
 import { spawnSync } from 'child_process';
-import path from 'path';
 import { fileURLToPath } from 'url';
+import path from 'path';
 import fs from 'fs';
 
-// Locate @node9/proxy's bin via node_modules lookup
+// Locate @node9/proxy's cli.js by walking candidate paths.
+// createRequire('@node9/proxy/dist/cli.js') would be cleaner but
+// @node9/proxy's package.json has a strict exports map that blocks
+// every subpath except '.' — so we resolve by filesystem.
+//
+// npm v7+ hoists @node9/proxy alongside node9-ai in the same
+// node_modules; older setups and pnpm may nest it. Both covered.
 const here = fileURLToPath(new URL('.', import.meta.url));
-const proxyBin = path.resolve(here, '../node_modules/@node9/proxy/dist/cli.js');
+const candidates = [
+  // hoisted: node_modules/@node9/proxy/... (npm default)
+  path.resolve(here, '..', '..', '@node9', 'proxy', 'dist', 'cli.js'),
+  // nested: node_modules/node9-ai/node_modules/@node9/proxy/...
+  path.resolve(here, '..', 'node_modules', '@node9', 'proxy', 'dist', 'cli.js'),
+];
+const proxyBin = candidates.find((p) => fs.existsSync(p));
 
-if (!fs.existsSync(proxyBin)) {
-  process.stderr.write(`node9: could not find @node9/proxy at ${proxyBin}\n`);
+if (!proxyBin) {
+  process.stderr.write(
+    'node9: could not locate @node9/proxy. Searched:\n' +
+      candidates.map((c) => '  ' + c).join('\n') +
+      '\nTry `npm install -g node9-ai` again, or file an issue at https://github.com/node9-ai/node9-proxy\n'
+  );
   process.exit(1);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node9-ai",
-  "version": "1.11.13",
+  "version": "1.12.0",
   "description": "Security layer for AI coding agents — intercepts dangerous tool calls before they execute",
   "keywords": [
     "ai",