@loreai/core 0.19.0 → 0.20.0

package/src/hosted.ts

@@ -0,0 +1,46 @@
+/**
+ * hosted.ts — Hosted/remote mode flag for @loreai/core.
+ *
+ * When the gateway runs remotely (different machine/container from the
+ * developer's workspace), filesystem operations that use client-controlled
+ * paths are unsafe:
+ *
+ *  - `git remote -v` subprocess with attacker-controlled cwd
+ *  - `.lore.json` config read from attacker-controlled path
+ *  - `.lore.md` / AGENTS.md read/write at attacker-controlled path
+ *  - `lat.md/` recursive directory scan at attacker-controlled path
+ *  - `fs.watch()` on attacker-controlled paths
+ *
+ * Setting hosted mode causes all these operations to become safe no-ops.
+ * The gateway sets this flag during startup when `LORE_HOSTED_MODE=1`.
+ *
+ * This is a process-wide flag — once set, it cannot be unset (the only
+ * consumer is the gateway process, and hosted mode is a startup decision).
+ */
+
+let _hostedMode = false;
+
+/**
+ * Enable hosted mode. Once enabled, cannot be disabled.
+ * All filesystem operations using client-controlled paths become no-ops.
+ */
+export function enableHostedMode(): void {
+  _hostedMode = true;
+}
+
+/**
+ * Returns true if hosted mode is active — filesystem operations using
+ * client-controlled paths should be skipped.
+ */
+export function isHostedMode(): boolean {
+  return _hostedMode;
+}
+
+/**
+ * Reset hosted mode flag. **Test-only** — production code should never
+ * call this. Exported so tests can toggle hosted mode without process
+ * restarts.
+ */
+export function _resetHostedModeForTest(): void {
+  _hostedMode = false;
+}

package/src/index.ts

@@ -66,6 +66,8 @@ export {
   isFirstRun,
   projectId,
   projectName,
+  projectPath,
+  resolveProjectByRemoteOrPath,
   mergeProjectInternal,
   loadForceMinLayer,
   saveForceMinLayer,
@@ -86,6 +88,7 @@ export {
   close,
 } from "./db";
 export { normalizeRemoteUrl, getGitRemote, clearGitRemoteCache } from "./git";
+export { enableHostedMode, isHostedMode } from "./hosted";
 export {
   transform,
   setModelLimits,
@@ -103,6 +106,7 @@ export {
   setForceMinLayer,
   getLastTransformedCount,
   getLastTransformEstimate,
+  getLastLayer,
   toolStripAnnotation,
   onIdleResume,
   getLastTurnAt,

package/src/lat-reader.ts

@@ -17,6 +17,7 @@ import { db, ensureProject } from "./db";
 import { sha256 } from "#db/driver";
 import { ftsQuery, extractTopTerms, EMPTY_QUERY, runRelaxedSearch } from "./search";
 import * as log from "./log";
+import { isHostedMode } from "./hosted";
 
 const processor = remark();
 
@@ -179,6 +180,7 @@ function contentHash(content: string): string {
 
 /** Check if a project has a lat.md/ directory. */
 export function hasLatDir(projectPath: string): boolean {
+  if (isHostedMode()) return false;
   const latDir = join(projectPath, "lat.md");
   return existsSync(latDir) && statSync(latDir).isDirectory();
 }
@@ -192,6 +194,8 @@ export function hasLatDir(projectPath: string): boolean {
  * @returns Number of sections updated/inserted
  */
 export function refresh(projectPath: string): number {
+  if (isHostedMode()) return 0;
+
   const latDir = join(projectPath, "lat.md");
   if (!existsSync(latDir) || !statSync(latDir).isDirectory()) return 0;