mindcache 3.4.1 → 3.4.3

package/dist/{CloudAdapter-C0UyG6OY.d.mts → CloudAdapter-CJS3Sh4f.d.mts}

@@ -8,17 +8,13 @@ import * as Y from 'yjs';
 type AccessLevel = 'user' | 'system';
 /**
  * Known system tags that control key behavior
- * - 'SystemPrompt': Include in system prompt
- * - 'LLMRead': LLM can read this key (visible to LLMs)
+ * - 'SystemPrompt': Include in system prompt (visible to LLM context)
+ * - 'LLMRead': LLM can read this key via tools
  * - 'LLMWrite': LLM can write to this key via tools
- * - 'protected': Cannot be deleted (replaces hardcoded)
+ * - 'protected': Cannot be deleted
  * - 'ApplyTemplate': Process value through template injection
- *
- * @deprecated 'prompt' - Use 'SystemPrompt' instead
- * @deprecated 'readonly' - Use absence of 'LLMWrite' instead (if LLMWrite not present, readonly=true)
- * @deprecated 'template' - Use 'ApplyTemplate' instead
  */
-type SystemTag = 'SystemPrompt' | 'LLMRead' | 'LLMWrite' | 'protected' | 'ApplyTemplate' | 'prompt' | 'readonly' | 'template';
+type SystemTag = 'SystemPrompt' | 'LLMRead' | 'LLMWrite' | 'protected' | 'ApplyTemplate';
 /**
  * Type of value stored in a MindCache key
  */
@@ -37,17 +33,11 @@ interface KeyAttributes {
     systemTags: SystemTag[];
     /** Z-index for ordering keys (lower values appear first) */
     zIndex: number;
-    /** @deprecated Use !systemTags.includes('LLMWrite') instead */
-    readonly: boolean;
-    /** @deprecated Use systemTags.includes('SystemPrompt') instead */
-    visible: boolean;
-    /** @deprecated Use systemTags.includes('protected') instead */
-    hardcoded: boolean;
-    /** @deprecated Use systemTags.includes('ApplyTemplate') instead */
-    template: boolean;
-    /** @deprecated Use contentTags instead */
-    tags?: string[];
 }
+/**
+ * Default attributes for new keys
+ */
+declare const DEFAULT_KEY_ATTRIBUTES: KeyAttributes;
 /**
  * A single entry in the MindCache store
  */
@@ -71,10 +61,6 @@ type Listener = (value: unknown) => void;
  * Called when any key changes (no parameters - use getAll() to get current state)
  */
 type GlobalListener = () => void;
-/**
- * Default attributes for new keys
- */
-declare const DEFAULT_KEY_ATTRIBUTES: KeyAttributes;
 /**
  * A single entry in the global history log
  */
@@ -95,6 +81,21 @@ interface HistoryOptions {
     /** Save full snapshot every N entries for fast restore (default: 10) */
     snapshotInterval?: number;
 }
+/**
+ * Helper functions for working with system tags
+ */
+declare const SystemTagHelpers: {
+    /** Check if key is writable by LLM */
+    isLLMWritable: (attrs: KeyAttributes) => boolean;
+    /** Check if key is readable by LLM (in context or via tools) */
+    isLLMReadable: (attrs: KeyAttributes) => boolean;
+    /** Check if key is included in system prompt */
+    isInSystemPrompt: (attrs: KeyAttributes) => boolean;
+    /** Check if key is protected from deletion */
+    isProtected: (attrs: KeyAttributes) => boolean;
+    /** Check if key uses template injection */
+    hasTemplateInjection: (attrs: KeyAttributes) => boolean;
+};
 
 /**
  * Cloud configuration options for MindCache constructor
@@ -135,6 +136,8 @@ interface MindCacheOptions {
     history?: HistoryOptions;
     /** Access level for tag operations. 'system' allows managing system tags. */
     accessLevel?: AccessLevel;
+    /** Optional existing Y.Doc instance (for server-side hydration) */
+    doc?: Y.Doc;
 }
 type ConnectionState$1 = 'disconnected' | 'connecting' | 'connected' | 'error';
 declare class MindCache {
@@ -245,6 +248,16 @@ declare class MindCache {
      */
     set_attributes(key: string, attributes: Partial<KeyAttributes>): void;
     set_value(key: string, value: any, attributes?: Partial<KeyAttributes>): void;
+    /**
+     * LLM-safe method to write a value to a key.
+     * This method:
+     * - Only updates the value, never modifies attributes/systemTags
+     * - Checks LLMWrite permission before writing
+     * - Returns false if key doesn't exist or lacks LLMWrite permission
+     *
+     * Used by create_vercel_ai_tools() to prevent LLMs from escalating privileges.
+     */
+    llm_set_key(key: string, value: any): boolean;
     delete_key(key: string): void;
     clear(): void;
     /**
@@ -427,6 +440,14 @@ declare class MindCache {
     /**
      * Generate Vercel AI SDK compatible tools for writable keys.
      * For document type keys, generates additional tools: append_, insert_, edit_
+     *
+     * Security: All tools use llm_set_key internally which:
+     * - Only modifies VALUES, never attributes/systemTags
+     * - Prevents LLMs from escalating privileges
+     */
+    create_vercel_ai_tools(): Record<string, any>;
+    /**
+     * @deprecated Use create_vercel_ai_tools() instead
      */
     get_aisdk_tools(): Record<string, any>;
     /**
@@ -509,6 +530,7 @@ declare class CloudAdapter {
     private token;
     private handleOnline;
     private handleOffline;
+    private _synced;
     constructor(config: CloudConfig);
     /** Browser network status - instantly updated via navigator.onLine */
     get isOnline(): boolean;
@@ -530,4 +552,4 @@ declare class CloudAdapter {
     private scheduleReconnect;
 }
 
-export { type AccessLevel as A, CloudAdapter as C, DEFAULT_KEY_ATTRIBUTES as D, type GlobalListener as G, type HistoryEntry as H, type KeyAttributes as K, type Listener as L, MindCache as M, type Operation as O, type SystemTag as S, type MindCacheOptions as a, type KeyType as b, type STM as c, type STMEntry as d, type HistoryOptions as e, type MindCacheCloudOptions as f, type MindCacheIndexedDBOptions as g, type CloudConfig as h, type ConnectionState as i, type CloudAdapterEvents as j, type SetOperation as k, type DeleteOperation as l, type ClearOperation as m };
+export { type AccessLevel as A, type CloudConfig as C, type DeleteOperation as D, type GlobalListener as G, type HistoryEntry as H, type KeyAttributes as K, type Listener as L, MindCache as M, type Operation as O, type SetOperation as S, CloudAdapter as a, type ConnectionState as b, type CloudAdapterEvents as c, type ClearOperation as d, type MindCacheOptions as e, type KeyType as f, type SystemTag as g, type STM as h, type STMEntry as i, type HistoryOptions as j, type MindCacheCloudOptions as k, type MindCacheIndexedDBOptions as l, DEFAULT_KEY_ATTRIBUTES as m, SystemTagHelpers as n };

package/dist/{CloudAdapter-C0UyG6OY.d.ts → CloudAdapter-CJS3Sh4f.d.ts}

@@ -8,17 +8,13 @@ import * as Y from 'yjs';
 type AccessLevel = 'user' | 'system';
 /**
  * Known system tags that control key behavior
- * - 'SystemPrompt': Include in system prompt
- * - 'LLMRead': LLM can read this key (visible to LLMs)
+ * - 'SystemPrompt': Include in system prompt (visible to LLM context)
+ * - 'LLMRead': LLM can read this key via tools
  * - 'LLMWrite': LLM can write to this key via tools
- * - 'protected': Cannot be deleted (replaces hardcoded)
+ * - 'protected': Cannot be deleted
  * - 'ApplyTemplate': Process value through template injection
- *
- * @deprecated 'prompt' - Use 'SystemPrompt' instead
- * @deprecated 'readonly' - Use absence of 'LLMWrite' instead (if LLMWrite not present, readonly=true)
- * @deprecated 'template' - Use 'ApplyTemplate' instead
  */
-type SystemTag = 'SystemPrompt' | 'LLMRead' | 'LLMWrite' | 'protected' | 'ApplyTemplate' | 'prompt' | 'readonly' | 'template';
+type SystemTag = 'SystemPrompt' | 'LLMRead' | 'LLMWrite' | 'protected' | 'ApplyTemplate';
 /**
  * Type of value stored in a MindCache key
  */
@@ -37,17 +33,11 @@ interface KeyAttributes {
     systemTags: SystemTag[];
     /** Z-index for ordering keys (lower values appear first) */
     zIndex: number;
-    /** @deprecated Use !systemTags.includes('LLMWrite') instead */
-    readonly: boolean;
-    /** @deprecated Use systemTags.includes('SystemPrompt') instead */
-    visible: boolean;
-    /** @deprecated Use systemTags.includes('protected') instead */
-    hardcoded: boolean;
-    /** @deprecated Use systemTags.includes('ApplyTemplate') instead */
-    template: boolean;
-    /** @deprecated Use contentTags instead */
-    tags?: string[];
 }
+/**
+ * Default attributes for new keys
+ */
+declare const DEFAULT_KEY_ATTRIBUTES: KeyAttributes;
 /**
  * A single entry in the MindCache store
  */
@@ -71,10 +61,6 @@ type Listener = (value: unknown) => void;
  * Called when any key changes (no parameters - use getAll() to get current state)
  */
 type GlobalListener = () => void;
-/**
- * Default attributes for new keys
- */
-declare const DEFAULT_KEY_ATTRIBUTES: KeyAttributes;
 /**
  * A single entry in the global history log
  */
@@ -95,6 +81,21 @@ interface HistoryOptions {
     /** Save full snapshot every N entries for fast restore (default: 10) */
     snapshotInterval?: number;
 }
+/**
+ * Helper functions for working with system tags
+ */
+declare const SystemTagHelpers: {
+    /** Check if key is writable by LLM */
+    isLLMWritable: (attrs: KeyAttributes) => boolean;
+    /** Check if key is readable by LLM (in context or via tools) */
+    isLLMReadable: (attrs: KeyAttributes) => boolean;
+    /** Check if key is included in system prompt */
+    isInSystemPrompt: (attrs: KeyAttributes) => boolean;
+    /** Check if key is protected from deletion */
+    isProtected: (attrs: KeyAttributes) => boolean;
+    /** Check if key uses template injection */
+    hasTemplateInjection: (attrs: KeyAttributes) => boolean;
+};
 
 /**
  * Cloud configuration options for MindCache constructor
@@ -135,6 +136,8 @@ interface MindCacheOptions {
     history?: HistoryOptions;
     /** Access level for tag operations. 'system' allows managing system tags. */
     accessLevel?: AccessLevel;
+    /** Optional existing Y.Doc instance (for server-side hydration) */
+    doc?: Y.Doc;
 }
 type ConnectionState$1 = 'disconnected' | 'connecting' | 'connected' | 'error';
 declare class MindCache {
@@ -245,6 +248,16 @@ declare class MindCache {
      */
     set_attributes(key: string, attributes: Partial<KeyAttributes>): void;
     set_value(key: string, value: any, attributes?: Partial<KeyAttributes>): void;
+    /**
+     * LLM-safe method to write a value to a key.
+     * This method:
+     * - Only updates the value, never modifies attributes/systemTags
+     * - Checks LLMWrite permission before writing
+     * - Returns false if key doesn't exist or lacks LLMWrite permission
+     *
+     * Used by create_vercel_ai_tools() to prevent LLMs from escalating privileges.
+     */
+    llm_set_key(key: string, value: any): boolean;
     delete_key(key: string): void;
     clear(): void;
     /**
@@ -427,6 +440,14 @@ declare class MindCache {
     /**
      * Generate Vercel AI SDK compatible tools for writable keys.
      * For document type keys, generates additional tools: append_, insert_, edit_
+     *
+     * Security: All tools use llm_set_key internally which:
+     * - Only modifies VALUES, never attributes/systemTags
+     * - Prevents LLMs from escalating privileges
+     */
+    create_vercel_ai_tools(): Record<string, any>;
+    /**
+     * @deprecated Use create_vercel_ai_tools() instead
      */
     get_aisdk_tools(): Record<string, any>;
     /**
@@ -509,6 +530,7 @@ declare class CloudAdapter {
     private token;
     private handleOnline;
     private handleOffline;
+    private _synced;
     constructor(config: CloudConfig);
     /** Browser network status - instantly updated via navigator.onLine */
     get isOnline(): boolean;
@@ -530,4 +552,4 @@ declare class CloudAdapter {
     private scheduleReconnect;
 }
 
-export { type AccessLevel as A, CloudAdapter as C, DEFAULT_KEY_ATTRIBUTES as D, type GlobalListener as G, type HistoryEntry as H, type KeyAttributes as K, type Listener as L, MindCache as M, type Operation as O, type SystemTag as S, type MindCacheOptions as a, type KeyType as b, type STM as c, type STMEntry as d, type HistoryOptions as e, type MindCacheCloudOptions as f, type MindCacheIndexedDBOptions as g, type CloudConfig as h, type ConnectionState as i, type CloudAdapterEvents as j, type SetOperation as k, type DeleteOperation as l, type ClearOperation as m };
+export { type AccessLevel as A, type CloudConfig as C, type DeleteOperation as D, type GlobalListener as G, type HistoryEntry as H, type KeyAttributes as K, type Listener as L, MindCache as M, type Operation as O, type SetOperation as S, CloudAdapter as a, type ConnectionState as b, type CloudAdapterEvents as c, type ClearOperation as d, type MindCacheOptions as e, type KeyType as f, type SystemTag as g, type STM as h, type STMEntry as i, type HistoryOptions as j, type MindCacheCloudOptions as k, type MindCacheIndexedDBOptions as l, DEFAULT_KEY_ATTRIBUTES as m, SystemTagHelpers as n };

package/dist/cloud/index.d.mts

@@ -1,5 +1,5 @@
-import { M as MindCache, h as CloudConfig, C as CloudAdapter } from '../CloudAdapter-C0UyG6OY.mjs';
-export { m as ClearOperation, j as CloudAdapterEvents, i as ConnectionState, l as DeleteOperation, O as Operation, k as SetOperation } from '../CloudAdapter-C0UyG6OY.mjs';
+import { M as MindCache, C as CloudConfig, a as CloudAdapter } from '../CloudAdapter-CJS3Sh4f.mjs';
+export { d as ClearOperation, c as CloudAdapterEvents, b as ConnectionState, D as DeleteOperation, O as Operation, S as SetOperation } from '../CloudAdapter-CJS3Sh4f.mjs';
 import 'yjs';
 
 /**

package/dist/cloud/index.d.ts

@@ -1,5 +1,5 @@
-import { M as MindCache, h as CloudConfig, C as CloudAdapter } from '../CloudAdapter-C0UyG6OY.js';
-export { m as ClearOperation, j as CloudAdapterEvents, i as ConnectionState, l as DeleteOperation, O as Operation, k as SetOperation } from '../CloudAdapter-C0UyG6OY.js';
+import { M as MindCache, C as CloudConfig, a as CloudAdapter } from '../CloudAdapter-CJS3Sh4f.js';
+export { d as ClearOperation, c as CloudAdapterEvents, b as ConnectionState, D as DeleteOperation, O as Operation, S as SetOperation } from '../CloudAdapter-CJS3Sh4f.js';
 import 'yjs';
 
 /**