@lifeaitools/clauth 2.0.2 → 2.0.3

package/cli/supervisor-registry.js

@@ -500,6 +500,23 @@ export function registerPlugin(manifestPath, actor = "localhost") {
       ok: false, state: "manifest_unreadable", error: error instanceof Error ? error.message : String(error),
     }, actor);
   }
+  // ${PACKAGE_ROOT} — "wherever this manifest actually landed" — resolved HERE
+  // and baked into the stored copy, which is the only point at which the true
+  // origin is still known. registerPlugin copies the manifest into the managed
+  // root, so by the time discoverPlugins() re-reads it, sourcePath is the
+  // managed directory and the package's real install location is gone. An npm
+  // package installs at node_modules/@scope/name/, a path nothing can hardcode.
+  //
+  // Without this a shipped manifest had to name an absolute path: rdc-skills
+  // carried cwd "C:/Dev/rdc-skills" with core+enable_default, so `npm i -g` on
+  // any other machine auto-enabled a CORE plugin pointing at a directory that
+  // does not exist there. The token, not the package, was the defect — the
+  // correct value was simply inexpressible.
+  const packageRoot = path.dirname(path.resolve(manifestPath)).replaceAll("\\", "/");
+  raw = raw
+    .replaceAll("${PACKAGE_ROOT}", packageRoot)
+    .replaceAll("$PACKAGE_ROOT", packageRoot)
+    .replace(/%PACKAGE_ROOT%/gi, packageRoot);
   let manifest;
   try {
     manifest = validatePluginManifest(JSON.parse(raw), manifestPath);