@volter/supercode-orchestrator 0.5.53 → 0.5.54

package/bin/runtime.mjs

@@ -478,7 +478,12 @@ async function appsMain(argv) {
       process.stderr.write(`no rh2-agent is installed for ${opts.profile}: install it with apps install rh2-agent --profile ${opts.profile}\n`);
       process.exit(1);
     }
-    const child = spawn(rh2Program(), ['mcp'], { stdio: 'inherit', env: { ...process.env, ...rh2AgentEnv(record) } });
+    const program = rh2Program();
+    if (!program) {
+      process.stderr.write('apps mcp: no rh2 CLI in an absolute PATH folder or ~/.local/bin\n');
+      process.exit(127);
+    }
+    const child = spawn(program, ['mcp'], { stdio: 'inherit', env: { ...process.env, ...rh2AgentEnv(record) } });
     for (const signal of ['SIGTERM', 'SIGINT', 'SIGHUP']) process.on(signal, () => child.kill(signal));
     child.on('error', (error) => { process.stderr.write(`apps mcp: ${error.message}\n`); process.exit(127); });
     child.on('exit', (code, signal) => process.exit(code ?? (signal ? 1 : 0)));

package/installed-apps.mjs

@@ -4,7 +4,7 @@
 // `apps/` folder (owner-only); no `platforms:` block attaches an integration. Uninstalling on the other side revokes the
 // token, and the channel stops; `remove` forgets the record here.
 import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
-import { delimiter, join } from 'node:path';
+import { delimiter, isAbsolute, join } from 'node:path';
 import { homedir } from 'node:os';
 
 export const APPS_DIR = 'apps';
@@ -65,10 +65,13 @@ function rh2Origin(origin) {
   return /^https:\/\/|^http:\/\/(localhost|127\.0\.0\.1)(:|\/|$)/.test(String(origin ?? ''));
 }
 
-/** The `rh2` CLI: on this process's PATH, else where RH2's installer puts it (`~/.local/bin`), else the bare name. */
+/** The `rh2` CLI, by absolute path: in an absolute folder on this process's PATH, else where RH2's installer puts it
+ * (`~/.local/bin`); null when neither has it. A relative PATH entry is never searched (a session's working directory
+ * may be a checkout that carries its own `rh2`, which would then run with the agent's token), and neither is a bare
+ * name, which the OS would look up the same way. */
 export function rh2Program() {
-  const folders = [...String(process.env.PATH ?? '').split(delimiter), join(homedir(), '.local', 'bin')].filter(Boolean);
-  return folders.map((folder) => join(folder, 'rh2')).find((file) => existsSync(file)) ?? 'rh2';
+  const folders = [...String(process.env.PATH ?? '').split(delimiter), join(homedir(), '.local', 'bin')].filter((folder) => folder && isAbsolute(folder));
+  return folders.map((folder) => join(folder, 'rh2')).find((file) => existsSync(file)) ?? null;
 }
 
 /** The environment the `rh2` CLI reads to act as an installed agent: its RH2 origin, its organization and its token. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/supercode-orchestrator",
-  "version": "0.5.53",
+  "version": "0.5.54",
   "type": "module",
   "description": "The orchestrator runtime over the Volter Harness ontology: one typed operational model whose folder is its serialization, read and written through the harness orchestration doors (docs/ORCHESTRATOR-IR.md)",
   "exports": {