@jami-studio/core 0.92.24 → 0.92.26

package/corpus/core/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @agent-native/core
 
+## 0.92.26
+
+### Patch Changes
+
+- 64f78fe: ssrfSafeFetch trusts the deployment's OWN configured origins (APP_URL, BETTER_AUTH_URL, WEBHOOK_BASE_URL, WORKSPACE_GATEWAY_URL, workspace app manifest URLs). These are operator configuration, not user input, so a fetch to them is a self-call — the private-address guard was blocking every workspace-internal A2A call (call-agent to a sibling app) on local dev and self-hosted private networks. Only exact origin matches are trusted; redirect hops are still re-validated, so a trusted origin cannot 30x into the private network, and the default posture with no configured origins is unchanged.
+
+## 0.92.25
+
+### Patch Changes
+
+- faf05e0: Cloudflare worker bundles the real @anthropic-ai/sdk instead of an empty-class stub. The SDK is pure fetch-based JS that runs on workerd, and the BYOK Anthropic agent engine constructs it at runtime — the stub made every agent chat run on a Cloudflare deployment die with "Cannot read properties of undefined (reading 'stream')". The WASM tokenizer stays stubbed (token counts degrade to estimates).
+
 ## 0.92.24
 
 ### Patch Changes

package/corpus/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.92.24",
+  "version": "0.92.26",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/studio-jami/jami-studio#readme",
   "bugs": {

package/corpus/core/src/deploy/build.ts

@@ -134,7 +134,12 @@ export const CLOUDFLARE_WORKER_STUB_MODULES: Record<string, string> = {
   chokidar: "export default {}; export const watch = () => ({ close() {} });\n",
   fsevents: "export default {}; export const watch = () => ({ close() {} });\n",
   dotenv: "export default {}; export const config = () => ({ parsed: {} });\n",
-  "@anthropic-ai/sdk": "export default class Anthropic {}\n",
+  // NOTE: @anthropic-ai/sdk is deliberately NOT stubbed. It is pure
+  // fetch-based JS that runs fine on workerd, and the BYOK Anthropic engine
+  // (agent chat) constructs it at runtime — an empty-class stub makes every
+  // agent run die with "Cannot read properties of undefined (reading
+  // 'stream')". Only its tokenizer (WASM, unbundleable) stays stubbed; the
+  // token-count call sites degrade to char/4 estimates.
   "@anthropic-ai/tokenizer":
     "export default {}; export const countTokens = undefined;\n",
   "@sentry/node": [