@jami-studio/core 0.92.25 → 0.92.27

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (27) hide show
  1. package/corpus/README.md +1 -1
  2. package/corpus/core/CHANGELOG.md +12 -0
  3. package/corpus/core/package.json +1 -1
  4. package/corpus/core/src/extensions/url-safety.ts +363 -306
  5. package/corpus/core/src/observability/store.ts +1313 -1321
  6. package/corpus/core/src/shared/init-memo.ts +94 -0
  7. package/corpus/templates/content/actions/list-comments.ts +1 -2
  8. package/dist/collab/awareness.d.ts +2 -2
  9. package/dist/collab/awareness.d.ts.map +1 -1
  10. package/dist/extensions/url-safety.d.ts +14 -0
  11. package/dist/extensions/url-safety.d.ts.map +1 -1
  12. package/dist/extensions/url-safety.js +62 -2
  13. package/dist/extensions/url-safety.js.map +1 -1
  14. package/dist/file-upload/actions/upload-image.d.ts +1 -1
  15. package/dist/observability/routes.d.ts +3 -3
  16. package/dist/observability/store.d.ts +1 -1
  17. package/dist/observability/store.d.ts.map +1 -1
  18. package/dist/observability/store.js +311 -316
  19. package/dist/observability/store.js.map +1 -1
  20. package/dist/progress/routes.d.ts +1 -1
  21. package/dist/resources/handlers.d.ts +2 -2
  22. package/dist/server/agent-engine-api-key-route.d.ts +1 -1
  23. package/dist/shared/init-memo.d.ts +34 -0
  24. package/dist/shared/init-memo.d.ts.map +1 -0
  25. package/dist/shared/init-memo.js +80 -0
  26. package/dist/shared/init-memo.js.map +1 -0
  27. package/package.json +1 -1
package/corpus/README.md CHANGED
@@ -27,5 +27,5 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
27
27
 
28
28
  ## Generated Counts
29
29
 
30
- - core files: 2155
30
+ - core files: 2156
31
31
  - template files: 5114
package/corpus/core/CHANGELOG.md CHANGED
@@ -1,5 +1,17 @@
1
1
  # @agent-native/core
2
2
 
3
+ ## 0.92.27
4
+
5
+ ### Patch Changes
6
+
7
+ - ee6780b: Workerd-safe init memoization (`createInitMemo` in shared/init-memo.ts): module-scope `let _initPromise` singletons freeze on Cloudflare Workers when the request that created them responds before the init settles — every later awaiter then hangs forever. Proven live: `ensureObservabilityTables` frozen by a get-session-first request ordering wedged every agent chat run at "Starting agent" on the unified runtime. The helper ties the init promise to the creating request via `__cf_ctx.waitUntil` and re-runs a presumed-frozen pending memo under the current request after a bounded wait (init bodies are idempotent DDL). The observability store now uses it; the remaining ~38 `_initPromise` stores are queued for the same conversion.
8
+
9
+ ## 0.92.26
10
+
11
+ ### Patch Changes
12
+
13
+ - 64f78fe: ssrfSafeFetch trusts the deployment's OWN configured origins (APP_URL, BETTER_AUTH_URL, WEBHOOK_BASE_URL, WORKSPACE_GATEWAY_URL, workspace app manifest URLs). These are operator configuration, not user input, so a fetch to them is a self-call — the private-address guard was blocking every workspace-internal A2A call (call-agent to a sibling app) on local dev and self-hosted private networks. Only exact origin matches are trusted; redirect hops are still re-validated, so a trusted origin cannot 30x into the private network, and the default posture with no configured origins is unchanged.
14
+
3
15
  ## 0.92.25
4
16
 
5
17
  ### Patch Changes
package/corpus/core/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@agent-native/core",
3
- "version": "0.92.25",
3
+ "version": "0.92.27",
4
4
  "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
5
5
  "homepage": "https://github.com/studio-jami/jami-studio#readme",
6
6
  "bugs": {