agenticros 0.4.0 → 0.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agenticros",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "type": "module",
   "description": "AgenticROS - agentic AI for ROS-powered robots. Single CLI to launch real-robot or simulated demos, manage configuration, and inspect status.",
   "keywords": [
@@ -46,7 +46,7 @@
     "prepublishOnly": "pnpm run clean && pnpm run build && pnpm run pack:runtime && pnpm run size:check && pnpm run tarball:check"
   },
   "dependencies": {
-    "@agenticros/core": "workspace:*",
+    "@agenticros/core": "^0.7.0",
     "@inquirer/prompts": "^7.0.0",
     "commander": "^12.1.0",
     "execa": "^9.5.0",

package/runtime/BUNDLE.json

@@ -1,5 +1,5 @@
 {
-  "packedAt": "2026-07-09T20:34:25.403Z",
+  "packedAt": "2026-07-09T22:01:21.151Z",
   "repo": "https://github.com/PlaiPin/agenticros",
   "note": "This directory is a snapshot of the agenticros monorepo source. `agenticros init` will copy it to ~/agenticros and run pnpm install + colcon build there.",
   "layout": {

package/runtime/pnpm-lock.yaml

@@ -66,8 +66,8 @@ importers:
   packages/agenticros-cli:
     dependencies:
       '@agenticros/core':
-        specifier: workspace:*
-        version: link:../core
+        specifier: ^0.7.0
+        version: 0.7.0
       '@inquirer/prompts':
         specifier: ^7.0.0
         version: 7.10.1(@types/node@20.19.35)
@@ -178,6 +178,10 @@ importers:
 
 packages:
 
+  '@agenticros/core@0.7.0':
+    resolution: {integrity: sha512-tbcKSf34DVD+pO51goHw1zbu/L12nP3oPvOHoFJK48qaZ4kuejEepljo5xUNB84AtA/QnH9quMPUZbc8rVF8zQ==}
+    engines: {node: '>=20'}
+
   '@eclipse-zenoh/zenoh-ts@1.9.0':
     resolution: {integrity: sha512-qG3VR9Yt81+KjH0WOybyKcNVS0vtBmmhyUJ7dCc5n+8AeAEYTpEvMBTh43Lwu8P+imzMYvFqjaMAO2HFK+x9hA==}
 
@@ -1977,6 +1981,23 @@ packages:
 
 snapshots:
 
+  '@agenticros/core@0.7.0':
+    dependencies:
+      '@eclipse-zenoh/zenoh-ts': 1.9.0(patch_hash=pdjq6ms3zvqwikn6vpqzasydsy)
+      '@foxglove/cdr': 3.5.0
+      '@foxglove/rosmsg': 4.2.2
+      '@foxglove/rosmsg2-serialization': 3.1.0
+      ws: 8.19.0
+      zod: 3.25.76
+    optionalDependencies:
+      node-datachannel: 0.12.0
+      rclnodejs: 1.8.2
+    transitivePeerDependencies:
+      - bufferutil
+      - jiti
+      - supports-color
+      - utf-8-validate
+
   '@eclipse-zenoh/zenoh-ts@1.9.0(patch_hash=pdjq6ms3zvqwikn6vpqzasydsy)':
     dependencies:
       '@thi.ng/leb128': 3.1.79

package/runtime/scripts/check-cli-tarball-install.mjs

@@ -32,7 +32,16 @@
  */
 
 import { execSync, spawnSync } from "node:child_process";
-import { existsSync, mkdirSync, mkdtempSync, readdirSync, rmSync } from "node:fs";
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readdirSync,
+  readFileSync,
+  rmSync,
+  statSync,
+  writeFileSync,
+} from "node:fs";
 import { tmpdir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -132,6 +141,31 @@ try {
   }
   ok(`Extracted to ${pkgDir}`);
 
+  // 3a. published package.json must not contain pnpm workspace: protocol
+  // (npm / npx consumers cannot resolve workspace:* — broke agenticros@0.4.0).
+  step("Checking published package.json has no workspace: dependencies...");
+  const publishedPkg = JSON.parse(
+    readFileSync(join(pkgDir, "package.json"), "utf8"),
+  );
+  const badDeps = [];
+  for (const section of ["dependencies", "optionalDependencies", "peerDependencies"]) {
+    const block = publishedPkg[section];
+    if (!block || typeof block !== "object") continue;
+    for (const [name, range] of Object.entries(block)) {
+      if (typeof range === "string" && range.startsWith("workspace:")) {
+        badDeps.push(`${section}.${name}=${range}`);
+      }
+    }
+  }
+  if (badDeps.length > 0) {
+    fail(
+      `Published package.json still has workspace: protocol (npm cannot install this):\n    ${badDeps.join("\n    ")}\n` +
+        `Use a semver range against the published @agenticros/core (e.g. "^0.7.0").`,
+    );
+    process.exit(1);
+  }
+  ok("No workspace: protocol in published dependencies.");
+
   // 3. critical files present in the SHIPPED tarball
   step("Verifying critical runtime files are in the tarball...");
   const runtimeInTar = join(pkgDir, "runtime");
@@ -150,8 +184,7 @@ try {
 
   // 5. write inline .npmrc (mirrors init.ts writeInitNpmrcInline)
   step("Writing inline .npmrc (mirroring writeInitNpmrcInline)...");
-  const fs = await import("node:fs");
-  fs.writeFileSync(
+  writeFileSync(
     join(installDir, ".npmrc"),
     [
       "shamefully-hoist=false",
@@ -220,9 +253,9 @@ try {
   step("Simulating refresh over a pre-existing snapshot (regression test for 0.1.7)...");
   const fakeOld = join(work, "old-install");
   mkdirSync(fakeOld);
-  fs.writeFileSync(join(fakeOld, "tsconfig.base.json"), '{"old":"to-be-overwritten"}');
+  writeFileSync(join(fakeOld, "tsconfig.base.json"), '{"old":"to-be-overwritten"}');
   mkdirSync(join(fakeOld, "packages"), { recursive: true });
-  fs.writeFileSync(
+  writeFileSync(
     join(fakeOld, "packages", "preserved.txt"),
     "must survive overlay refresh",
   );
@@ -234,7 +267,7 @@ try {
     const src = join(runtimeInTar, rel);
     const dst = join(fakeOld, rel);
     if (!existsSync(src)) continue;
-    const srcIsDir = fs.statSync(src).isDirectory();
+    const srcIsDir = statSync(src).isDirectory();
     if (srcIsDir && existsSync(dst)) {
       run("cp", ["-a", `${src}/.`, `${dst}/`]);
     } else {
@@ -243,12 +276,12 @@ try {
     }
   }
 
-  const tsStat = fs.statSync(join(fakeOld, "tsconfig.base.json"));
+  const tsStat = statSync(join(fakeOld, "tsconfig.base.json"));
   if (!tsStat.isFile()) {
     fail("Refresh turned tsconfig.base.json into a non-file. cp branching is wrong.");
     process.exit(1);
   }
-  const tsContent = fs.readFileSync(join(fakeOld, "tsconfig.base.json"), "utf8");
+  const tsContent = readFileSync(join(fakeOld, "tsconfig.base.json"), "utf8");
   if (tsContent.includes('"old":"to-be-overwritten"')) {
     fail("Refresh failed to overwrite tsconfig.base.json with the bundle's version.");
     process.exit(1);