---
{
  "id": "platform.mindmap.permissions-images-and-safety",
  "topic": "mindmap",
  "title": "Mindmap permissions, images, history, and safety",
  "locale": "en",
  "version": "2026-08-25",
  "summary": "Runtime grants protect Mindmaps; rich text and image fields have explicit preservation traps; mutations leave history and emit bounded automation events.",
  "content": "Runtime access checks are authoritative. Owner Agents receive a resource grant at creation; other calls intersect current user access with the Agent's Mindmap or Space grant, and writes need edit access plus `write`. Reads allow public surfaces; every mutation is private-only. Confirmed `create_public_share` rotates or creates a public URL, while confirmed `revoke_public_share` invalidates it. Knowledge cannot grant access or bypass confirmation.\n\nA node uses `imageAssetId` or HTTP(S) `externalImageUrl`, never both. Legacy `imageUrl` is not writable. To preserve an image, omit both image fields; pass null to clear or one reference to replace it. Managed assets still require ownership and readiness checks.\n\n`labelStyles` accepts at most 64 sorted, non-overlapping `{start,end,color}` ranges. Offsets are UTF-16 code units at character boundaries; colors are `#RRGGBB`. Sending a new `label` while omitting `labelStyles` resets all styles to `[]`, so read and resend styles. `imageCaption` is trimmed, blank becomes null, and the maximum is 500 characters. Clearing the image while omitting its caption clears the caption too. `add_node` exposes neither `labelStyles` nor `imageCaption`; create first and then call `update_node`. `linkedNoteId` is only a reference, not a Note grant. Mutations create automatic product version checkpoints with the Agent actor.\n\nRouting traces retain reviewed document metadata—never labels, outline text, secrets, or private resource IDs. Mindmap is a platform Trigger source with ten events: `mindmap.created`, `mindmap.updated`, `mindmap.deleted`, `mindmap.archived`, `mindmap.node_created`, `mindmap.node_updated`, `mindmap.node_moved`, `mindmap.node_deleted`, `mindmap.node_restored`, and `mindmap.outline_replaced`. Archive emits only `mindmap.archived`; unarchive emits `mindmap.updated`, avoiding duplicate runs. Scopes require `mindmapId` and may add `nodeId`.\n",
  "aliases": [
    "mindmap permission",
    "node image",
    "linked note access",
    "public mindmap read",
    "mindmap version history"
  ],
  "tags": [
    "mindmap",
    "permission",
    "safety"
  ],
  "relatedActions": [
    "arinova.mindmap.list_mindmaps",
    "arinova.mindmap.get_mindmap",
    "arinova.mindmap.get_mindmap_as_outline",
    "arinova.mindmap.create_mindmap",
    "arinova.mindmap.update_mindmap",
    "arinova.mindmap.add_node",
    "arinova.mindmap.update_node",
    "arinova.mindmap.move_node",
    "arinova.mindmap.delete_node",
    "arinova.mindmap.delete_node_promote_children",
    "arinova.mindmap.restore_node",
    "arinova.mindmap.create_mindmap_from_outline",
    "arinova.mindmap.add_subtree",
    "arinova.mindmap.replace_outline",
    "arinova.mindmap.delete_mindmap",
    "arinova.mindmap.archive_mindmap",
    "arinova.mindmap.unarchive_mindmap",
    "arinova.mindmap.export_mindmap",
    "arinova.mindmap.create_public_share",
    "arinova.mindmap.revoke_public_share"
  ],
  "relatedActionPrefixes": [],
  "url": "https://docs.arinova.ai/en/kb/mindmap/permissions-images-and-safety/"
}
---

Runtime access checks are authoritative. Owner Agents receive a resource grant at creation; other calls intersect current user access with the Agent's Mindmap or Space grant, and writes need edit access plus `write`. Reads allow public surfaces; every mutation is private-only. Confirmed `create_public_share` rotates or creates a public URL, while confirmed `revoke_public_share` invalidates it. Knowledge cannot grant access or bypass confirmation.

A node uses `imageAssetId` or HTTP(S) `externalImageUrl`, never both. Legacy `imageUrl` is not writable. To preserve an image, omit both image fields; pass null to clear or one reference to replace it. Managed assets still require ownership and readiness checks.

`labelStyles` accepts at most 64 sorted, non-overlapping `{start,end,color}` ranges. Offsets are UTF-16 code units at character boundaries; colors are `#RRGGBB`. Sending a new `label` while omitting `labelStyles` resets all styles to `[]`, so read and resend styles. `imageCaption` is trimmed, blank becomes null, and the maximum is 500 characters. Clearing the image while omitting its caption clears the caption too. `add_node` exposes neither `labelStyles` nor `imageCaption`; create first and then call `update_node`. `linkedNoteId` is only a reference, not a Note grant. Mutations create automatic product version checkpoints with the Agent actor.

Routing traces retain reviewed document metadata—never labels, outline text, secrets, or private resource IDs. Mindmap is a platform Trigger source with ten events: `mindmap.created`, `mindmap.updated`, `mindmap.deleted`, `mindmap.archived`, `mindmap.node_created`, `mindmap.node_updated`, `mindmap.node_moved`, `mindmap.node_deleted`, `mindmap.node_restored`, and `mindmap.outline_replaced`. Archive emits only `mindmap.archived`; unarchive emits `mindmap.updated`, avoiding duplicate runs. Scopes require `mindmapId` and may add `nodeId`.