gemcode 0.4.20__tar.gz → 0.4.21__tar.gz

{gemcode-0.4.20/src/gemcode.egg-info → gemcode-0.4.21}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gemcode
-Version: 0.4.20
+Version: 0.4.21
 Summary: Local-first coding agent on Google Gemini + ADK
 Author: GemCode Contributors
 License:                                  Apache License
@@ -221,6 +221,7 @@ All state lives under `.gemcode/` in the project root. No external services requ
 | Agent Mesh | In-process multi-agent orchestration (automatic) |
 | GemCode Runtime | Optional always-on background scheduler (`gemcode runtime`; alias `gemcode kaira`) |
 | HTTP API (`gemcode serve`) | Built-in web/custom UI backend on `http://127.0.0.1:3001` — chat SSE, sessions, panel, HITL |
+| Hosted multi-tenant | One `gemcode serve` per user with `GEMCODE_HOSTED_TENANT_ROOT` — see [`../docs/hosted.md`](../docs/hosted.md) |
 | A2A server | Cross-machine agent communication via Google A2A protocol |
 | Live audio (experimental) | Microphone-driven Gemini Live sessions |
 

{gemcode-0.4.20 → gemcode-0.4.21}/README.md

@@ -28,6 +28,7 @@ All state lives under `.gemcode/` in the project root. No external services requ
 | Agent Mesh | In-process multi-agent orchestration (automatic) |
 | GemCode Runtime | Optional always-on background scheduler (`gemcode runtime`; alias `gemcode kaira`) |
 | HTTP API (`gemcode serve`) | Built-in web/custom UI backend on `http://127.0.0.1:3001` — chat SSE, sessions, panel, HITL |
+| Hosted multi-tenant | One `gemcode serve` per user with `GEMCODE_HOSTED_TENANT_ROOT` — see [`../docs/hosted.md`](../docs/hosted.md) |
 | A2A server | Cross-machine agent communication via Google A2A protocol |
 | Live audio (experimental) | Microphone-driven Gemini Live sessions |
 

{gemcode-0.4.20 → gemcode-0.4.21}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "gemcode"
-version = "0.4.20"
+version = "0.4.21"
 description = "Local-first coding agent on Google Gemini + ADK"
 readme = "README.md"
 requires-python = ">=3.11"

{gemcode-0.4.20 → gemcode-0.4.21}/src/gemcode/repl_commands.py

@@ -251,6 +251,7 @@ SLASH_COMMANDS: list[tuple[str, str]] = [
     ("kaira",       "Background jobs — gemcode runtime (alias: gemcode kaira)"),
     ("runtime",     "Fleet socket status · gemcode runtime · attach/connect"),
     ("serve",       "HTTP API for web/custom UIs — gemcode serve on :3001"),
+    ("hosted",      "Hosted multi-tenant lock — GEMCODE_HOSTED_TENANT_ROOT status"),
     ("bus",         "Runtime bus — send/publish lightweight messages over IPC"),
     ("inbox",       "Bus inbox filters for this UI (to/topics)"),
     ("fleet",       "Fleet inbox — /fleet show | digest (habits / mesh reports)"),
@@ -413,6 +414,7 @@ def slash_help_lines() -> list[str]:
       "  /live-audio           How to run gemcode live-audio (mic → Gemini Live)",
       "  /doctor               Environment sanity check",
       "  /serve [start|status|stop|url]  Start HTTP API for web UI (gemcode serve on :3001)",
+      "  /hosted [status]                Hosted tenant lock (GEMCODE_HOSTED_TENANT_ROOT)",
       "  /version              Print GemCode version hint",
       "  /exit                 Exit the REPL",
       "",

{gemcode-0.4.20 → gemcode-0.4.21}/src/gemcode/repl_slash.py

@@ -2650,6 +2650,39 @@ async def process_repl_slash(
     out()
     return ReplSlashResult(skip_model_turn=True)
 
+  # ── /hosted (multi-tenant serve lock) ───────────────────────────────────
+  if name == "hosted":
+    from gemcode.web.project_root import hosted_tenant_root
+
+    args_h = (sc.args or "").strip().lower()
+    first_h = args_h.split()[0] if args_h else "status"
+
+    if first_h in ("help", "?"):
+      out("Hosted multi-tenant mode (one workspace per gemcode serve process):")
+      out("  /hosted             Show lock status")
+      out("  /hosted status      Same")
+      out("")
+      out("Set GEMCODE_HOSTED_TENANT_ROOT to the tenant workspace path.")
+      out("Web API then rejects client path/project_root outside that directory.")
+      out("HITL approvals use {workspace}/.gemcode/web_approvals.")
+      out("")
+      out("Deployment guide: docs/hosted.md and deploy/gcp/ in the repo.")
+      out()
+      return ReplSlashResult(skip_model_turn=True)
+
+    locked = hosted_tenant_root()
+    if locked is not None:
+      out("[hosted] active — tenant workspace locked")
+      out(f"  GEMCODE_HOSTED_TENANT_ROOT={locked}")
+      out(f"  project_root: {cfg.project_root}")
+      out("  Client path params must stay inside the tenant root (HTTP 403 otherwise).")
+    else:
+      out("[hosted] not active (local mode)")
+      out("  Client path / project_root query params are honored.")
+      out("  Set GEMCODE_HOSTED_TENANT_ROOT in containers for multi-tenant hosting.")
+    out()
+    return ReplSlashResult(skip_model_turn=True)
+
   # ── /runtime ────────────────────────────────────────────────────────────
   if name == "runtime":
     from gemcode.kaira_ipc import fleet_manager_ipc_path_for_workspace

{gemcode-0.4.20 → gemcode-0.4.21}/src/gemcode/web/hitl_bridge.py

@@ -10,7 +10,11 @@ import uuid
 from pathlib import Path
 from typing import Any, Callable
 
-_APPROVAL_DIR = Path.home() / ".gemcode" / "web_approvals"
+def _approval_dir() -> Path:
+  tenant = os.environ.get("GEMCODE_HOSTED_TENANT_ROOT", "").strip()
+  if tenant:
+    return Path(tenant).expanduser().resolve() / ".gemcode" / "web_approvals"
+  return Path.home() / ".gemcode" / "web_approvals"
 _DEFAULT_TIMEOUT_S = float(os.environ.get("GEMCODE_WEB_HITL_TIMEOUT_S", "3600"))
 _POLL_INTERVAL_S = 0.25
 # approval_ids currently blocked in wait_for_web_approval (same process)
@@ -28,7 +32,7 @@ def register_pending_approval(approval_id: str) -> None:
 
 def _approval_path(approval_id: str) -> Path:
   safe = "".join(c if c.isalnum() or c in "-_:" else "_" for c in approval_id)
-  return _APPROVAL_DIR / f"{safe}.json"
+  return _approval_dir() / f"{safe}.json"
 
 
 def _read_approval_file(path: Path) -> bool | None:
@@ -54,7 +58,7 @@ def resolve_web_approval(approval_id: str, *, confirmed: bool) -> dict[str, Any]
   """Record the user's approve/deny decision (called from HTTP handler)."""
   if not approval_id.strip():
     return {"ok": False, "error": "approval_id is required"}
-  _APPROVAL_DIR.mkdir(parents=True, exist_ok=True)
+  _approval_dir().mkdir(parents=True, exist_ok=True)
   path = _approval_path(approval_id)
   payload = {"confirmed": bool(confirmed), "resolved_ms": int(time.time() * 1000)}
   path.write_text(json.dumps(payload), encoding="utf-8")
@@ -75,7 +79,7 @@ async def wait_for_web_approval(
   heartbeat_s: float = 15.0,
 ) -> bool:
   """Block until the user approves/denies or timeout (deny on timeout)."""
-  _APPROVAL_DIR.mkdir(parents=True, exist_ok=True)
+  _approval_dir().mkdir(parents=True, exist_ok=True)
   path = _approval_path(approval_id)
 
   # User may have approved before we started waiting (preflight UI is immediate).

gemcode-0.4.21/src/gemcode/web/project_root.py

@@ -0,0 +1,60 @@
+"""Shared workspace path resolution for GemCode web HTTP handlers."""
+
+from __future__ import annotations
+
+import os
+from pathlib import Path
+
+
+class HostedTenantPathError(ValueError):
+  """Client requested a path outside the locked tenant workspace."""
+
+
+def hosted_tenant_root() -> Path | None:
+  """When set, web handlers are locked to this directory (multi-tenant hosting)."""
+  raw = os.environ.get("GEMCODE_HOSTED_TENANT_ROOT", "").strip()
+  if not raw:
+    return None
+  return Path(raw).expanduser().resolve()
+
+
+def _is_within_root(root: Path, candidate: Path) -> bool:
+  try:
+    candidate.resolve().relative_to(root.resolve())
+    return True
+  except ValueError:
+    return False
+
+
+def resolve_web_project_root(raw_path: str | None) -> Path:
+  """
+  Resolve the active project/workspace root for a web API request.
+
+  Prefers an explicit ``path`` query/body param, then ``GEMCODE_WEB_PROJECT_ROOT``,
+  then the API process working directory.
+
+  When ``GEMCODE_HOSTED_TENANT_ROOT`` is set (hosted multi-tenant mode), client
+  paths must stay inside that root; otherwise the locked root is always used.
+  """
+  locked = hosted_tenant_root()
+  if locked is not None:
+    if raw_path and str(raw_path).strip():
+      candidate = Path(str(raw_path).strip()).expanduser().resolve()
+      if not _is_within_root(locked, candidate):
+        raise HostedTenantPathError(
+          f"path is outside tenant workspace: {candidate} (root={locked})"
+        )
+      return candidate
+    return locked
+
+  if raw_path and str(raw_path).strip():
+    return Path(str(raw_path).strip()).expanduser().resolve()
+  env = os.environ.get("GEMCODE_WEB_PROJECT_ROOT", "").strip()
+  if env:
+    return Path(env).expanduser().resolve()
+  return Path.cwd().resolve()
+
+
+def resolve_sse_project_root(raw_path: str | None) -> Path:
+  """Same rules as :func:`resolve_web_project_root` for SSE chat subprocess."""
+  return resolve_web_project_root(raw_path)

{gemcode-0.4.20 → gemcode-0.4.21}/src/gemcode/web/server.py

@@ -18,6 +18,7 @@ from pathlib import Path
 from typing import Any
 from urllib.parse import parse_qs, urlparse
 
+from gemcode.web.project_root import HostedTenantPathError
 from gemcode.web.serve_bind import bind_http_server, format_connection_lines
 from gemcode.web.serve_state import (
   clear_serve_state,
@@ -182,8 +183,10 @@ def _build_handler(project_root: str) -> type[BaseHTTPRequestHandler]:
         except Exception:
           pass
         has_key = bool(os.environ.get("GOOGLE_API_KEY") or os.environ.get("GEMINI_API_KEY"))
-        body = json.dumps(
-          {
+        from gemcode.web.project_root import hosted_tenant_root
+
+        locked = hosted_tenant_root()
+        health: dict[str, Any] = {
             "status": "ok",
             "service": "gemcode-serve",
             "gemcode": True,
@@ -193,8 +196,11 @@ def _build_handler(project_root: str) -> type[BaseHTTPRequestHandler]:
             "cwd": root,
             "port": self.server.server_address[1],
             "url": serve_base_url(self.server.server_address[0], self.server.server_address[1]),
-          }
-        ).encode()
+        }
+        if locked is not None:
+          health["hosted_mode"] = True
+          health["hosted_tenant_root"] = str(locked)
+        body = json.dumps(health).encode()
         self.send_response(200)
         self.send_header("Content-Type", "application/json; charset=utf-8")
         self.send_header("Content-Length", str(len(body)))
@@ -371,6 +377,9 @@ def _build_handler(project_root: str) -> type[BaseHTTPRequestHandler]:
           else:
             raw_path = str(data.get("path") or root).strip()
             status, payload = handler(data, raw_path)
+        except HostedTenantPathError as exc:
+          payload = {"ok": False, "error": str(exc)}
+          status = 403
         except Exception as exc:
           payload = {"ok": False, "error": f"{type(exc).__name__}: {exc}"}
           status = 500

{gemcode-0.4.20 → gemcode-0.4.21}/src/gemcode/web/sse_adapter.py

@@ -1061,14 +1061,17 @@ async def run_adapter(req: dict[str, Any]) -> None:
   if not prompt.strip():
     raise ValueError("No user message in request")
 
+  from gemcode.web.project_root import HostedTenantPathError, resolve_sse_project_root
+
   req_root = req.get("project_root")
-  if isinstance(req_root, str) and req_root.strip():
-    project_root = req_root.strip()
-  else:
-    project_root = os.environ.get("GEMCODE_WEB_PROJECT_ROOT") or os.getcwd()
-  root_path = Path(project_root).expanduser()
+  raw_root = req_root.strip() if isinstance(req_root, str) and req_root.strip() else None
+  try:
+    root_path = resolve_sse_project_root(raw_root)
+  except HostedTenantPathError as exc:
+    raise ValueError(str(exc)) from exc
   if not root_path.is_dir():
-    raise ValueError(f"project_root is not a directory: {project_root}")
+    raise ValueError(f"project_root is not a directory: {root_path}")
+  project_root = str(root_path)
   from gemcode.org import resolve_fleet_root
 
   fleet_root = resolve_fleet_root(root_path.resolve())

{gemcode-0.4.20 → gemcode-0.4.21/src/gemcode.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gemcode
-Version: 0.4.20
+Version: 0.4.21
 Summary: Local-first coding agent on Google Gemini + ADK
 Author: GemCode Contributors
 License:                                  Apache License
@@ -221,6 +221,7 @@ All state lives under `.gemcode/` in the project root. No external services requ
 | Agent Mesh | In-process multi-agent orchestration (automatic) |
 | GemCode Runtime | Optional always-on background scheduler (`gemcode runtime`; alias `gemcode kaira`) |
 | HTTP API (`gemcode serve`) | Built-in web/custom UI backend on `http://127.0.0.1:3001` — chat SSE, sessions, panel, HITL |
+| Hosted multi-tenant | One `gemcode serve` per user with `GEMCODE_HOSTED_TENANT_ROOT` — see [`../docs/hosted.md`](../docs/hosted.md) |
 | A2A server | Cross-machine agent communication via Google A2A protocol |
 | Live audio (experimental) | Microphone-driven Gemini Live sessions |
 

{gemcode-0.4.20 → gemcode-0.4.21}/src/gemcode.egg-info/SOURCES.txt

@@ -167,6 +167,7 @@ tests/test_credentials.py
 tests/test_eval_harness_layout.py
 tests/test_event_bus.py
 tests/test_fleet_reports.py
+tests/test_hosted_tenant.py
 tests/test_ide_stdio_attachments.py
 tests/test_interactive_permission_ask.py
 tests/test_kaira_ipc_paths.py

gemcode-0.4.21/tests/test_hosted_tenant.py

@@ -0,0 +1,52 @@
+"""Tests for hosted multi-tenant workspace path locking."""
+
+from __future__ import annotations
+
+import os
+import tempfile
+from pathlib import Path
+
+import pytest
+
+from gemcode.web.project_root import (
+  HostedTenantPathError,
+  hosted_tenant_root,
+  resolve_web_project_root,
+)
+
+
+@pytest.fixture
+def tenant_env(monkeypatch: pytest.MonkeyPatch) -> Path:
+  root = Path(tempfile.mkdtemp())
+  monkeypatch.setenv("GEMCODE_HOSTED_TENANT_ROOT", str(root))
+  return root
+
+
+def test_hosted_tenant_root_from_env(tenant_env: Path) -> None:
+  assert hosted_tenant_root() == tenant_env.resolve()
+
+
+def test_hosted_mode_ignores_empty_client_path(tenant_env: Path) -> None:
+  assert resolve_web_project_root(None) == tenant_env.resolve()
+  assert resolve_web_project_root("") == tenant_env.resolve()
+
+
+def test_hosted_mode_allows_path_inside_tenant(tenant_env: Path) -> None:
+  sub = tenant_env / "projects" / "demo"
+  sub.mkdir(parents=True)
+  assert resolve_web_project_root(str(sub)) == sub.resolve()
+
+
+def test_hosted_mode_rejects_path_outside_tenant(
+  tenant_env: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+  outside = Path(tempfile.mkdtemp())
+  monkeypatch.setenv("GEMCODE_HOSTED_TENANT_ROOT", str(tenant_env))
+  with pytest.raises(HostedTenantPathError):
+    resolve_web_project_root(str(outside))
+
+
+def test_normal_mode_uses_client_path(monkeypatch: pytest.MonkeyPatch) -> None:
+  monkeypatch.delenv("GEMCODE_HOSTED_TENANT_ROOT", raising=False)
+  outside = Path(tempfile.mkdtemp())
+  assert resolve_web_project_root(str(outside)) == outside.resolve()

gemcode-0.4.20/src/gemcode/web/project_root.py

@@ -1,21 +0,0 @@
-"""Shared workspace path resolution for GemCode web HTTP handlers."""
-
-from __future__ import annotations
-
-import os
-from pathlib import Path
-
-
-def resolve_web_project_root(raw_path: str | None) -> Path:
-  """
-  Resolve the active project/workspace root for a web API request.
-
-  Prefers an explicit ``path`` query/body param, then ``GEMCODE_WEB_PROJECT_ROOT``,
-  then the API process working directory.
-  """
-  if raw_path and str(raw_path).strip():
-    return Path(str(raw_path).strip()).expanduser().resolve()
-  env = os.environ.get("GEMCODE_WEB_PROJECT_ROOT", "").strip()
-  if env:
-    return Path(env).expanduser().resolve()
-  return Path.cwd().resolve()