mindoodb 0.0.76 → 0.0.78

package/dist/core/BaseMindooTenantDirectory.js

@@ -1131,6 +1131,56 @@ class BaseMindooTenantDirectory {
             allowedDbIds: Array.isArray(policy.allowedDbIds) ? [...policy.allowedDbIds] : [],
         };
     }
+    /**
+     * The tenant's language-model endpoint policy (`llm` in `acl_defaultpolicy`)
+     * at the current head state, or `null` when there is no default policy or no
+     * `llm` block. Tenant-level only, never layered per-db.
+     *
+     * Like `requireMetadataSignatureSince` it does not follow the master switch
+     * `disableAllAccessChecksAndPolicies`: that switch turns off access *checks*,
+     * and new tenants are created with it on (only the storage-format floor
+     * active), so honoring it here would make the setting inert in most tenants.
+     *
+     * The directory only accepts admin-signed entries, so the result is what the
+     * tenant admin wrote. Enforcing it is the client's job (it decides where it
+     * sends data); see {@link LlmEndpointPolicy}.
+     */
+    async getLlmEndpointPolicy() {
+        const head = await this.getDirectoryStateHead();
+        const policy = head.defaultPolicy;
+        if (policy === null || !policy.llm) {
+            return null;
+        }
+        return {
+            ...(policy.llm.allowedEndpoints ? { allowedEndpoints: [...policy.llm.allowedEndpoints] } : {}),
+            ...(policy.llm.defaultEndpoint ? { defaultEndpoint: policy.llm.defaultEndpoint } : {}),
+            ...(policy.llm.denyUse !== undefined ? { denyUse: policy.llm.denyUse } : {}),
+        };
+    }
+    /**
+     * Whether the current user may use a client's AI assistant with this
+     * tenant's data (`llm_use`, §6.9), at the directory head. The baseline is
+     * `llm.denyUse`; `llm_use` allow/deny rules target users and groups like any
+     * other rule. Independent of the master switch, like
+     * {@link getLlmEndpointPolicy}. The tenant admin is always allowed.
+     *
+     * Client-enforced: a client that gets `allowed: false` must not send any of
+     * this tenant's data to a language model, while it may still use the
+     * assistant with other tenants' data.
+     */
+    async canUseLlm() {
+        const currentUser = await this.tenant.getCurrentUserId();
+        const adminKey = this.tenant.getAdministrationPublicKey();
+        if (currentUser.userSigningPublicKey === adminKey) {
+            return { allowed: true, reason: "tenant admin", tier: "tier1" };
+        }
+        // Head selector, NOT Date.now() — see canDo.
+        const node = await this.getDirectoryStateAt(Number.MAX_SAFE_INTEGER);
+        const identity = await this.identitySetForSigningKey(currentUser.userSigningPublicKey, node, {
+            isAuthor: false,
+        });
+        return (0, evaluate_1.evaluateLlmUse)({ identity, node });
+    }
     /**
      * The tenant-wide storage-format floor (`requireMetadataSignatureSince`): the
      * trusted-time cutoff at/after which entries must carry the v2 metadata-binding
@@ -1267,6 +1317,9 @@ class BaseMindooTenantDirectory {
      */
     async setDatabaseAccessPolicy(dbid, policy, administrationPrivateKey, administrationPrivateKeyPassword) {
         (0, types_3.validateAccessPolicy)(policy);
+        if (policy.llm !== undefined) {
+            throw new Error("llm is a tenant-level setting; set it on the default policy");
+        }
         await this.writePolicyDoc((0, types_3.aclDbPolicyDocId)(dbid), policy, administrationPrivateKey, administrationPrivateKeyPassword);
     }
     /** Shared writer for default / per-db policy documents. */