@robot-resources/cli-core 0.1.1 → 0.1.3

package/auth.mjs

@@ -219,14 +219,15 @@ export async function authenticate() {
 
   console.log(`\n  Auth URL: ${authUrl}\n`);
 
-  // Open browser
-  const { exec } = await import('node:child_process');
-  const openCmd =
-    process.platform === 'darwin' ? 'open' :
-    process.platform === 'win32' ? 'start' :
-    'xdg-open';
-
-  exec(`${openCmd} "${authUrl}"`);
+  // Open browser (use execFile to avoid shell injection)
+  const { execFile } = await import('node:child_process');
+  if (process.platform === 'win32') {
+    // 'start' is a cmd.exe builtin, not an executable — must invoke via cmd.exe
+    execFile('cmd.exe', ['/c', 'start', '""', authUrl]);
+  } else {
+    const openCmd = process.platform === 'darwin' ? 'open' : 'xdg-open';
+    execFile(openCmd, [authUrl]);
+  }
 
   console.log('  Waiting for GitHub authorization...\n');
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@robot-resources/cli-core",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Shared CLI utilities — auth, config, login (internal)",
   "type": "module",
   "main": "./index.mjs",
@@ -21,6 +21,17 @@
   "devDependencies": {
     "vitest": "^1.2.0"
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/robot-resources/robot-resources.git",
+    "directory": "packages/cli-core"
+  },
+  "homepage": "https://robotresources.ai",
+  "bugs": {
+    "url": "https://github.com/robot-resources/robot-resources/issues"
+  },
+  "license": "MIT",
+  "author": "Robot Resources Team",
   "publishConfig": {
     "access": "public"
   },

package/python-bridge.mjs

@@ -1,4 +1,4 @@
-import { execSync } from 'node:child_process';
+import { execSync, spawn } from 'node:child_process';
 import { existsSync, mkdirSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
@@ -69,6 +69,18 @@ export function ensureVenv(pythonBin) {
     }
   }
 
+  // Pre-check: verify the venv module is available (missing on some Debian/Ubuntu systems)
+  try {
+    execSync(`"${pythonBin}" -c "import ensurepip; import venv"`, { stdio: 'pipe' });
+  } catch {
+    const version = execSync(`"${pythonBin}" --version`, { encoding: 'utf-8' }).trim().match(/\d+\.\d+/)?.[0] || '3.x';
+    throw new Error(
+      `Python venv module is not installed.\n` +
+      `  Fix: sudo apt install python${version}-venv   (Debian/Ubuntu)\n` +
+      `  Then re-run: npx robot-resources`
+    );
+  }
+
   mkdirSync(join(homedir(), '.robot-resources'), { recursive: true });
   execSync(`"${pythonBin}" -m venv "${VENV_DIR}"`, { stdio: 'pipe' });
   return venvPython;
@@ -76,14 +88,39 @@ export function ensureVenv(pythonBin) {
 
 /**
  * Install (or upgrade) the router Python package into the managed venv.
+ * Prints progress every 5 seconds to keep terminal sessions alive
+ * (OC session handlers reap silent processes).
  *
  * @param {object} [options]
- * @param {'pipe'|'inherit'} [options.stdio='pipe'] — controls install output visibility
  * @param {number} [options.timeout=120000] — pip install timeout in ms
  */
-export function installRouter({ stdio = 'pipe', timeout = 120_000 } = {}) {
+export function installRouter({ timeout = 120_000 } = {}) {
   const pip = getVenvPip();
-  execSync(`"${pip}" install --upgrade "${ROUTER_PACKAGE}"`, { stdio, timeout });
+
+  return new Promise((resolve, reject) => {
+    const proc = spawn(pip, ['install', '--upgrade', ROUTER_PACKAGE], {
+      stdio: ['ignore', 'pipe', 'pipe'],
+      timeout,
+    });
+
+    process.stdout.write('  Installing dependencies...\n');
+    let seconds = 0;
+    const progress = setInterval(() => {
+      seconds += 4;
+      process.stdout.write(`  Installing dependencies... ${seconds}s\n`);
+    }, 4000);
+
+    proc.on('close', (code) => {
+      clearInterval(progress);
+      if (code === 0) resolve();
+      else reject(new Error(`pip install exited with code ${code}`));
+    });
+
+    proc.on('error', (err) => {
+      clearInterval(progress);
+      reject(err);
+    });
+  });
 }
 
 /**