@tanstack/ai-memory 0.1.9 → 0.1.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tanstack/ai-memory",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "Pluggable memory adapters for TanStack AI memoryMiddleware",
   "author": "",
   "license": "MIT",
@@ -53,14 +53,14 @@
     "tanstack-intent"
   ],
   "dependencies": {
-    "@tanstack/ai-event-client": "^0.11.2"
+    "@tanstack/ai-event-client": "^0.11.3"
   },
   "peerDependencies": {
     "@honcho-ai/sdk": ">=2.0.0",
     "@vectorize-io/hindsight-client": ">=0.6.0",
     "ioredis": ">=5.0.0",
     "redis": ">=4.0.0",
-    "@tanstack/ai": "^0.52.0"
+    "@tanstack/ai": "^0.54.0"
   },
   "peerDependenciesMeta": {
     "ioredis": {
@@ -82,7 +82,7 @@
     "@vitest/coverage-v8": "4.1.10",
     "ioredis-mock": "^8.9.0",
     "redis": "^4.7.0",
-    "@tanstack/ai": "0.52.0"
+    "@tanstack/ai": "0.54.0"
   },
   "scripts": {
     "build": "vite build",

package/skills/tanstack-ai-memory/SKILL.md

@@ -22,28 +22,33 @@ Memory is for cross-turn / cross-session recall, not within-turn history.
 ## Wire it up
 
 ```ts
-import { chat } from '@tanstack/ai'
+import { chat, toServerSentEventsResponse } from '@tanstack/ai'
 import { openaiText } from '@tanstack/ai-openai'
 import { memoryMiddleware } from '@tanstack/ai-memory'
 import { inMemory } from '@tanstack/ai-memory/in-memory'
+import { requireSession } from './auth'
 
 const memory = inMemory() // dev/tests only — see the in-memory skill
 
-const stream = chat({
-  adapter: openaiText('gpt-5.5'),
-  messages,
-  context: { session }, // attached by your auth middleware
-  middleware: [
-    memoryMiddleware({
-      adapter: memory,
-      // Derive scope server-side from trusted session state.
-      scope: (ctx) => {
-        const session = getSession(ctx)
-        return { threadId: session.threadId, userId: session.userId }
-      },
-    }),
-  ],
-})
+export async function POST(request: Request) {
+  const { messages } = await request.json()
+  // Resolved by your auth layer from cookies/headers — never from the request body.
+  const session = await requireSession(request)
+
+  const stream = chat({
+    adapter: openaiText('gpt-5.5'),
+    messages,
+    context: { session },
+    middleware: [
+      memoryMiddleware({
+        adapter: memory,
+        // Derive scope server-side from trusted session state.
+        scope: () => ({ threadId: session.threadId, userId: session.userId }),
+      }),
+    ],
+  })
+  return toServerSentEventsResponse(stream)
+}
 ```
 
 `memoryMiddleware` options: `adapter`, `scope` (static or a function of `ctx`),
@@ -53,12 +58,21 @@ callbacks.
 ## The contract
 
 ```ts
+import type {
+  MemoryFact,
+  MemoryScope,
+  MemorySnapshot,
+  MemoryTurn,
+  RecallResult,
+  SaveReceipt,
+} from '@tanstack/ai-memory'
+
 interface MemoryAdapter {
-  id: string
-  recall(scope, query): Promise<RecallResult> // { systemPrompt, fragments?, tools?, toolGuidance? }
-  save(scope, turn): Promise<Array<SaveReceipt>> // turn = { user, assistant }; extraction lives HERE
-  inspect?(scope): Promise<MemorySnapshot> // optional (devtools)
-  listFacts?(scope): Promise<Array<MemoryFact>> // optional (devtools)
+  readonly id: string
+  recall: (scope: MemoryScope, query: string) => Promise<RecallResult> // { systemPrompt, fragments?, tools?, toolGuidance? }
+  save: (scope: MemoryScope, turn: MemoryTurn) => Promise<Array<SaveReceipt>> // turn = { user, assistant }; extraction lives HERE
+  inspect?: (scope: MemoryScope) => Promise<MemorySnapshot> // optional (devtools)
+  listFacts?: (scope: MemoryScope) => Promise<Array<MemoryFact>> // optional (devtools)
 }
 ```
 

package/skills/tanstack-ai-memory-hindsight/SKILL.md

@@ -16,9 +16,15 @@ model can retain/recall/reflect directly.
 import { memoryMiddleware } from '@tanstack/ai-memory'
 import { hindsight } from '@tanstack/ai-memory/hindsight'
 
-const memory = hindsight({ user: currentUserId }) // baseUrl defaults to HINDSIGHT_URL
-
-memoryMiddleware({ adapter: memory, scope })
+// Build per request from the server-validated session — never from req.body.
+function memoryFor(session: { userId: string; threadId: string }) {
+  const memory = hindsight({ user: session.userId }) // baseUrl defaults to HINDSIGHT_URL
+
+  return memoryMiddleware({
+    adapter: memory,
+    scope: { threadId: session.threadId, userId: session.userId },
+  })
+}
 ```
 
 `@vectorize-io/hindsight-client` is an **optional peer dependency**, loaded lazily on

package/skills/tanstack-ai-memory-honcho/SKILL.md

@@ -16,9 +16,15 @@ appends the turn's messages to the session.
 import { memoryMiddleware } from '@tanstack/ai-memory'
 import { honcho } from '@tanstack/ai-memory/honcho'
 
-const memory = honcho({ user: currentUserId }) // baseURL defaults to HONCHO_URL
-
-memoryMiddleware({ adapter: memory, scope })
+// Build per request from the server-validated session — never from req.body.
+function memoryFor(session: { userId: string; threadId: string }) {
+  const memory = honcho({ user: session.userId }) // baseURL defaults to HONCHO_URL
+
+  return memoryMiddleware({
+    adapter: memory,
+    scope: { threadId: session.threadId, userId: session.userId },
+  })
+}
 ```
 
 `@honcho-ai/sdk` is an **optional peer dependency**, loaded lazily on first use — install

package/skills/tanstack-ai-memory-in-memory/SKILL.md

@@ -30,7 +30,11 @@ import { inMemory } from '@tanstack/ai-memory/in-memory'
 
 const memory = inMemory()
 
-memoryMiddleware({ adapter: memory, scope })
+// A static scope is fine for dev/tests; derive it from the session in real apps.
+memoryMiddleware({
+  adapter: memory,
+  scope: { threadId: 'demo-thread', userId: 'alice' },
+})
 ```
 
 ## Options

package/skills/tanstack-ai-memory-mem0/SKILL.md

@@ -14,9 +14,15 @@ server-side. Talks to the server over plain HTTP — **no SDK peer dependency**.
 import { memoryMiddleware } from '@tanstack/ai-memory'
 import { mem0 } from '@tanstack/ai-memory/mem0'
 
-const memory = mem0({ user: currentUserId }) // baseUrl defaults to MEM0_URL
-
-memoryMiddleware({ adapter: memory, scope })
+// Build per request from the server-validated session — never from req.body.
+function memoryFor(session: { userId: string; threadId: string }) {
+  const memory = mem0({ user: session.userId }) // baseUrl defaults to MEM0_URL
+
+  return memoryMiddleware({
+    adapter: memory,
+    scope: { threadId: session.threadId, userId: session.userId },
+  })
+}
 ```
 
 Requires a running mem0 server (self-hosted or hosted). Point it via `baseUrl` (or

package/skills/tanstack-ai-memory-redis/SKILL.md

@@ -20,10 +20,16 @@ import Redis from 'ioredis'
 import { memoryMiddleware } from '@tanstack/ai-memory'
 import { redis } from '@tanstack/ai-memory/redis'
 
-const client = new Redis(process.env.REDIS_URL)
+const client = new Redis(process.env.REDIS_URL ?? 'redis://localhost:6379')
 const memory = redis({ redis: client, prefix: 'myapp:memory' })
 
-memoryMiddleware({ adapter: memory, scope })
+// Resolve scope per request from the server-validated session — never from req.body.
+function memoryFor(session: { userId: string; threadId: string }) {
+  return memoryMiddleware({
+    adapter: memory,
+    scope: { threadId: session.threadId, userId: session.userId },
+  })
+}
 ```
 
 ### Option B: `redis` (node-redis v4+)
@@ -41,7 +47,12 @@ const memory = redis({
   prefix: 'myapp:memory',
 })
 
-memoryMiddleware({ adapter: memory, scope })
+function memoryFor(session: { userId: string; threadId: string }) {
+  return memoryMiddleware({
+    adapter: memory,
+    scope: { threadId: session.threadId, userId: session.userId },
+  })
+}
 ```
 
 node-redis exposes a camelCase API (`sAdd`, `mGet`); `fromNodeRedis` translates it