singularity/singularity-forge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix(forensics): use GSD_VERSION env var instead of package.json path traversal

Browse source 
Extensions run from ~/.gsd/agent/extensions/gsd/ at runtime, not from the
package install directory. The previous code traversed 4 levels up from
import.meta.url to find package.json, which resolves to ~/package.json at
runtime — wrong on every system.

The loader already sets process.env.GSD_VERSION at startup, which is how
every other extension reads the version. Use that instead.
This commit is contained in:
Jeremy McSpadden 2026-03-16 18:54:30 -05:00
parent d10412bb1e
commit 359deb6c23
1 changed files with 4 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
src/resources/extensions/gsd/forensics.ts
View file

@ -178,14 +178,10 @@ async function buildForensicReport(basePath: string): Promise<ForensicReport> {
}
}
// 8. GSD version
let gsdVersion = "unknown";
try {
const pkgPath = join(dirname(fileURLToPath(import.meta.url)), "../../../../package.json");
if (existsSync(pkgPath)) {
gsdVersion = JSON.parse(readFileSync(pkgPath, "utf-8")).version ?? "unknown";
}
} catch { /* non-fatal */ }
// 8. GSD version — use GSD_VERSION env var set by the loader at startup.
// Extensions run from ~/.gsd/agent/extensions/gsd/ at runtime, so path-traversal
// from import.meta.url would resolve to ~/package.json (wrong on every system).
const gsdVersion = process.env.GSD_VERSION || "unknown";
// 9. Run anomaly detectors
if (metrics?.units) detectStuckLoops(metrics.units, anomalies);