meshcode 1.7.0__tar.gz → 1.8.0__tar.gz

{meshcode-1.7.0 → meshcode-1.8.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: meshcode
-Version: 1.7.0
+Version: 1.8.0
 Summary: Real-time communication between AI agents — Supabase-backed CLI
 Author-email: MeshCode <hello@meshcode.io>
 License: MIT

{meshcode-1.7.0 → meshcode-1.8.0}/meshcode/__init__.py

@@ -1,2 +1,2 @@
 """MeshCode — Real-time communication between AI agents."""
-__version__ = "1.7.0"
+__version__ = "1.8.0"

{meshcode-1.7.0 → meshcode-1.8.0}/meshcode/meshcode_mcp/backend.py

@@ -164,7 +164,7 @@ def register_agent(project: str, name: str, role: str = "") -> Dict:
     }
 
 
-def send_message(project_id: str, from_agent: str, to_agent: str, payload: Any, msg_type: str = "msg", parent_msg_id: Optional[str] = None) -> Dict:
+def send_message(project_id: str, from_agent: str, to_agent: str, payload: Any, msg_type: str = "msg", parent_msg_id: Optional[str] = None, sensitive: bool = False) -> Dict:
     if not isinstance(payload, dict):
         payload = {"text": str(payload)}
     msg = {
@@ -177,6 +177,8 @@ def send_message(project_id: str, from_agent: str, to_agent: str, payload: Any,
     }
     if parent_msg_id:
         msg["parent_msg_id"] = parent_msg_id
+    if sensitive:
+        msg["is_sensitive"] = True
     result = sb_insert("mc_messages", msg)
     if isinstance(result, dict) and result.get("_error"):
         return {"error": result["_error"]}

{meshcode-1.7.0 → meshcode-1.8.0}/meshcode/meshcode_mcp/server.py

@@ -363,6 +363,14 @@ meshcode_wait / meshcode_check / meshcode_read now includes an `id` field
 (use it for in_reply_to) and a `parent_id` field (so you can see whether
 the message you received is itself a reply to something).
 
+SENSITIVE DATA: when sharing API keys, credentials, customer data, personal
+information, secrets, or anything that should not be in a public log, set
+sensitive=True in your meshcode_send call. Sensitive messages are NEVER
+included in public meshwork exports, even if the meshwork owner publishes
+the meshwork. The flag is enforced at the database level — there is no way
+for a public viewer to read sensitive messages. Use this liberally — false
+positives are harmless, false negatives are a privacy leak.
+
 LOOP-SAFETY RULES (IMPORTANT — prevent token-burning ping-pong):
 - Do NOT reply "Done" / "OK" / "Got it" to every message. If a message
   is a status update or pure ack, just process it and call meshcode_wait
@@ -505,7 +513,8 @@ except Exception:
 # ----------------- TOOLS -----------------
 
 @mcp.tool()
-def meshcode_send(to: str, message: Any, in_reply_to: Optional[str] = None) -> Dict[str, Any]:
+def meshcode_send(to: str, message: Any, in_reply_to: Optional[str] = None,
+                  sensitive: bool = False) -> Dict[str, Any]:
     """Send a message to another agent in the meshwork.
 
     If you only have plain text, just pass it as a string and it will be
@@ -520,6 +529,13 @@ def meshcode_send(to: str, message: Any, in_reply_to: Optional[str] = None) -> D
             message is a threaded reply — the dashboard renders it under the
             original. Use this especially when replying to one of several
             outstanding broadcasts so humans can tell which is which.
+        sensitive: If True, this message will NEVER appear in a public meshwork
+            export, regardless of whether the meshwork is published. ALWAYS
+            set this to True when sharing API keys, credentials, customer
+            data, secrets, personal information, or anything that should not
+            be visible to anyone outside the meshwork. The owner can publish
+            the meshwork without leaking sensitive messages, because the
+            sensitive flag is enforced at the database level.
     """
     if isinstance(message, str):
         payload: Dict[str, Any] = {"text": message}
@@ -528,7 +544,7 @@ def meshcode_send(to: str, message: Any, in_reply_to: Optional[str] = None) -> D
     else:
         payload = {"text": str(message)}
     return be.send_message(_PROJECT_ID, AGENT_NAME, to, payload, msg_type="msg",
-                           parent_msg_id=in_reply_to)
+                           parent_msg_id=in_reply_to, sensitive=sensitive)
 
 
 @mcp.tool()

{meshcode-1.7.0 → meshcode-1.8.0}/meshcode.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: meshcode
-Version: 1.7.0
+Version: 1.8.0
 Summary: Real-time communication between AI agents — Supabase-backed CLI
 Author-email: MeshCode <hello@meshcode.io>
 License: MIT

{meshcode-1.7.0 → meshcode-1.8.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "meshcode"
-version = "1.7.0"
+version = "1.8.0"
 description = "Real-time communication between AI agents — Supabase-backed CLI"
 readme = "README.md"
 license = {text = "MIT"}