mindcache 3.4.1 → 3.4.2

package/dist/cloud/index.mjs

@@ -425,15 +425,9 @@ var init_CloudAdapter = __esm({
 var DEFAULT_KEY_ATTRIBUTES = {
   type: "text",
   contentTags: [],
-  systemTags: ["SystemPrompt", "LLMWrite"],
-  // visible in system prompt and writable by LLM by default
-  zIndex: 0,
-  // Legacy - derived from systemTags
-  readonly: false,
-  visible: true,
-  hardcoded: false,
-  template: false,
-  tags: []
+  systemTags: [],
+  // Keys are private by default - explicitly add SystemPrompt/LLMRead/LLMWrite to enable LLM access
+  zIndex: 0
 };
 
 // src/core/MindCache.ts
@@ -451,35 +445,14 @@ var MindCache = class {
   // (Less critical with Yjs but kept for API compat)
   normalizeSystemTags(tags) {
     const normalized = [];
-    let hasSystemPrompt = false;
-    let hasLLMRead = false;
-    let hasLLMWrite = false;
-    let hasReadonly = false;
+    const seen = /* @__PURE__ */ new Set();
     for (const tag of tags) {
-      if (tag === "SystemPrompt" || tag === "prompt") {
-        hasSystemPrompt = true;
-      } else if (tag === "LLMRead") {
-        hasLLMRead = true;
-      } else if (tag === "LLMWrite") {
-        hasLLMWrite = true;
-      } else if (tag === "readonly") {
-        hasReadonly = true;
-      } else if (tag === "protected") {
-        normalized.push(tag);
-      } else if (tag === "ApplyTemplate" || tag === "template") {
-        normalized.push("ApplyTemplate");
-      }
-    }
-    if (hasSystemPrompt) {
-      normalized.push("SystemPrompt");
-    }
-    if (hasLLMRead) {
-      normalized.push("LLMRead");
-    }
-    if (hasReadonly) {
-      normalized.push("readonly");
-    } else if (hasLLMWrite) {
-      normalized.push("LLMWrite");
+      if (["SystemPrompt", "LLMRead", "LLMWrite", "protected", "ApplyTemplate"].includes(tag)) {
+        if (!seen.has(tag)) {
+          seen.add(tag);
+          normalized.push(tag);
+        }
+      }
     }
     return normalized;
   }
@@ -906,16 +879,10 @@ var MindCache = class {
         const attrs = entry.attributes || {};
         const normalizedAttrs = {
           type: attrs.type || "text",
+          contentType: attrs.contentType,
           contentTags: attrs.contentTags || [],
-          systemTags: attrs.systemTags || this.normalizeSystemTags(attrs.visible !== false ? ["prompt"] : []),
-          zIndex: attrs.zIndex ?? 0,
-          // Legacy fields
-          readonly: attrs.readonly ?? false,
-          visible: attrs.visible ?? true,
-          hardcoded: attrs.hardcoded ?? false,
-          template: attrs.template ?? false,
-          tags: attrs.tags || [],
-          contentType: attrs.contentType
+          systemTags: this.normalizeSystemTags(attrs.systemTags || []),
+          zIndex: attrs.zIndex ?? 0
         };
         entryMap.set("attributes", normalizedAttrs);
       }
@@ -1020,7 +987,7 @@ var MindCache = class {
     if (_processingStack && _processingStack.has(key)) {
       return `{{${key}}}`;
     }
-    if (attributes?.systemTags?.includes("ApplyTemplate") || attributes?.systemTags?.includes("template") || attributes?.template) {
+    if (attributes?.systemTags?.includes("ApplyTemplate")) {
       if (typeof value === "string") {
         const stack = _processingStack || /* @__PURE__ */ new Set();
         stack.add(key);
@@ -1034,13 +1001,8 @@ var MindCache = class {
       return {
         type: "text",
         contentTags: [],
-        systemTags: ["prompt", "readonly", "protected"],
-        zIndex: 999999,
-        readonly: true,
-        visible: true,
-        hardcoded: true,
-        template: false,
-        tags: []
+        systemTags: ["SystemPrompt", "protected"],
+        zIndex: 999999
       };
     }
     const entryMap = this.rootMap.get(key);
@@ -1107,22 +1069,13 @@ var MindCache = class {
     this.getUndoManager(key);
     this.doc.transact(() => {
       const oldAttributes = isNewEntry ? {
-        ...DEFAULT_KEY_ATTRIBUTES,
-        contentTags: [],
-        systemTags: ["SystemPrompt", "LLMWrite"],
-        tags: [],
-        zIndex: 0
+        ...DEFAULT_KEY_ATTRIBUTES
       } : entryMap.get("attributes");
       const finalAttributes = attributes ? { ...oldAttributes, ...attributes } : oldAttributes;
       let normalizedAttributes = { ...finalAttributes };
       if (finalAttributes.systemTags) {
         normalizedAttributes.systemTags = this.normalizeSystemTags(finalAttributes.systemTags);
       }
-      if (finalAttributes.template) {
-        if (!normalizedAttributes.systemTags.includes("template")) {
-          normalizedAttributes.systemTags.push("template");
-        }
-      }
       let valueToSet = value;
       if (normalizedAttributes.type === "document" && !(valueToSet instanceof Y.Text)) {
         valueToSet = new Y.Text(typeof value === "string" ? value : String(value ?? ""));
@@ -1133,6 +1086,38 @@ var MindCache = class {
       entryMap.set("attributes", normalizedAttributes);
     });
   }
+  /**
+   * LLM-safe method to write a value to a key.
+   * This method:
+   * - Only updates the value, never modifies attributes/systemTags
+   * - Checks LLMWrite permission before writing
+   * - Returns false if key doesn't exist or lacks LLMWrite permission
+   *
+   * Used by create_vercel_ai_tools() to prevent LLMs from escalating privileges.
+   */
+  llm_set_key(key, value) {
+    if (key === "$date" || key === "$time" || key === "$version") {
+      return false;
+    }
+    const entryMap = this.rootMap.get(key);
+    if (!entryMap) {
+      return false;
+    }
+    const attributes = entryMap.get("attributes");
+    if (!attributes?.systemTags?.includes("LLMWrite")) {
+      return false;
+    }
+    if (attributes.type === "document") {
+      if (typeof value === "string") {
+        this._replaceDocumentText(key, value);
+      }
+      return true;
+    }
+    this.doc.transact(() => {
+      entryMap.set("value", value);
+    });
+    return true;
+  }
   delete_key(key) {
     if (key === "$date" || key === "$time") {
       return;
@@ -1577,15 +1562,13 @@ var MindCache = class {
       }
       const attributes = entryMap.get("attributes");
       const value = entryMap.get("value");
-      if (attributes?.hardcoded) {
+      if (attributes?.systemTags?.includes("protected")) {
         return;
       }
       lines.push(`### ${key}`);
       const entryType = attributes?.type || "text";
       lines.push(`- **Type**: \`${entryType}\``);
-      lines.push(`- **Readonly**: \`${attributes?.readonly ?? false}\``);
-      lines.push(`- **Visible**: \`${attributes?.visible ?? true}\``);
-      lines.push(`- **Template**: \`${attributes?.template ?? false}\``);
+      lines.push(`- **System Tags**: \`${attributes?.systemTags?.join(", ") || "none"}\``);
       lines.push(`- **Z-Index**: \`${attributes?.zIndex ?? 0}\``);
       if (attributes?.contentTags && attributes.contentTags.length > 0) {
         lines.push(`- **Tags**: \`${attributes.contentTags.join("`, `")}\``);
@@ -1671,16 +1654,11 @@ var MindCache = class {
         }
         continue;
       }
-      if (line.startsWith("- **Readonly**:")) {
-        currentAttributes.readonly = line.includes("`true`");
-        continue;
-      }
-      if (line.startsWith("- **Visible**:")) {
-        currentAttributes.visible = line.includes("`true`");
-        continue;
-      }
-      if (line.startsWith("- **Template**:")) {
-        currentAttributes.template = line.includes("`true`");
+      if (line.startsWith("- **System Tags**:")) {
+        const tagsStr = line.match(/`([^`]+)`/)?.[1] || "";
+        if (tagsStr !== "none") {
+          currentAttributes.systemTags = tagsStr.split(", ").filter((t) => t);
+        }
         continue;
       }
       if (line.startsWith("- **Z-Index**:")) {
@@ -1691,7 +1669,6 @@ var MindCache = class {
       if (line.startsWith("- **Tags**:")) {
         const tags = line.match(/`([^`]+)`/g)?.map((t) => t.slice(1, -1)) || [];
         currentAttributes.contentTags = tags;
-        currentAttributes.tags = tags;
         continue;
       }
       if (line.startsWith("- **Content Type**:")) {
@@ -1947,8 +1924,12 @@ var MindCache = class {
   /**
    * Generate Vercel AI SDK compatible tools for writable keys.
    * For document type keys, generates additional tools: append_, insert_, edit_
+   *
+   * Security: All tools use llm_set_key internally which:
+   * - Only modifies VALUES, never attributes/systemTags
+   * - Prevents LLMs from escalating privileges
    */
-  get_aisdk_tools() {
+  create_vercel_ai_tools() {
     const tools = {};
     for (const [key, val] of this.rootMap) {
       if (key.startsWith("$")) {
@@ -1956,7 +1937,7 @@ var MindCache = class {
       }
       const entryMap = val;
       const attributes = entryMap.get("attributes");
-      const isWritable = !attributes?.readonly && (attributes?.systemTags?.includes("LLMWrite") || !attributes?.systemTags);
+      const isWritable = attributes?.systemTags?.includes("LLMWrite");
       if (!isWritable) {
         continue;
       }
@@ -1972,15 +1953,18 @@ var MindCache = class {
           required: ["value"]
         },
         execute: async ({ value }) => {
-          if (isDocument) {
-            this._replaceDocumentText(key, value);
-          } else {
-            this.set_value(key, value);
+          const success = this.llm_set_key(key, value);
+          if (success) {
+            return {
+              result: `Successfully wrote "${value}" to ${key}`,
+              key,
+              value
+            };
           }
           return {
-            result: `Successfully wrote "${value}" to ${key}`,
+            result: `Failed to write to ${key} - permission denied or key not found`,
             key,
-            value
+            error: true
           };
         }
       };
@@ -1995,6 +1979,9 @@ var MindCache = class {
             required: ["text"]
           },
           execute: async ({ text }) => {
+            if (!attributes?.systemTags?.includes("LLMWrite")) {
+              return { result: `Permission denied for ${key}`, key, error: true };
+            }
             const yText = this.get_document(key);
             if (yText) {
               yText.insert(yText.length, text);
@@ -2018,6 +2005,9 @@ var MindCache = class {
             required: ["index", "text"]
           },
           execute: async ({ index, text }) => {
+            if (!attributes?.systemTags?.includes("LLMWrite")) {
+              return { result: `Permission denied for ${key}`, key, error: true };
+            }
             this.insert_text(key, index, text);
             return {
               result: `Successfully inserted text at position ${index} in ${key}`,
@@ -2038,6 +2028,9 @@ var MindCache = class {
             required: ["find", "replace"]
           },
           execute: async ({ find, replace }) => {
+            if (!attributes?.systemTags?.includes("LLMWrite")) {
+              return { result: `Permission denied for ${key}`, key, error: true };
+            }
             const yText = this.get_document(key);
             if (yText) {
               const text = yText.toString();
@@ -2062,6 +2055,12 @@ var MindCache = class {
     }
     return tools;
   }
+  /**
+   * @deprecated Use create_vercel_ai_tools() instead
+   */
+  get_aisdk_tools() {
+    return this.create_vercel_ai_tools();
+  }
   /**
    * Generate a system prompt containing all visible STM keys and their values.
    * Indicates which tools can be used to modify writable keys.
@@ -2074,13 +2073,13 @@ var MindCache = class {
       }
       const entryMap = val;
       const attributes = entryMap.get("attributes");
-      const isVisible = attributes?.visible !== false && (attributes?.systemTags?.includes("prompt") || attributes?.systemTags?.includes("SystemPrompt") || !attributes?.systemTags);
+      const isVisible = attributes?.systemTags?.includes("SystemPrompt") || attributes?.systemTags?.includes("LLMRead");
       if (!isVisible) {
         continue;
       }
       const value = this.get_value(key);
       const displayValue = typeof value === "object" ? JSON.stringify(value) : value;
-      const isWritable = !attributes?.readonly && (attributes?.systemTags?.includes("LLMWrite") || !attributes?.systemTags);
+      const isWritable = attributes?.systemTags?.includes("LLMWrite");
       const isDocument = attributes?.type === "document";
       const sanitizedKey = this.sanitizeKeyForTool(key);
       if (isWritable) {
@@ -2121,7 +2120,7 @@ var MindCache = class {
       return null;
     }
     const attributes = entryMap.get("attributes");
-    const isWritable = !attributes?.readonly && (attributes?.systemTags?.includes("LLMWrite") || !attributes?.systemTags);
+    const isWritable = attributes?.systemTags?.includes("LLMWrite");
     if (!isWritable) {
       return null;
     }