@agent-native/core-corpus 0.201.0-nightly-20261005153421 → 0.201.0

package/corpus/templates/brain/server/lib/connectors.ts

@@ -8,10 +8,7 @@ import type {
   BrainSourceProvider,
 } from "../../shared/types.js";
 import { getDb, schema } from "../db/index.js";
-import {
-  listAccessibleAudienceIds,
-  refreshSlackPrivateChannelAudience,
-} from "./audiences.js";
+import { listAccessibleAudienceIds } from "./audiences.js";
 import {
   BrainCaptureBlockedError,
   createCapture,
@@ -245,28 +242,6 @@ interface SlackListResponse {
   response_metadata?: { next_cursor?: string };
 }
 
-interface SlackMembersResponse {
-  members?: string[];
-  response_metadata?: { next_cursor?: string };
-}
-
-interface SlackUserInfoResponse {
-  user?: {
-    deleted?: boolean;
-    is_app_user?: boolean;
-    is_bot?: boolean;
-    is_workflow_bot?: boolean;
-    profile?: { email?: string };
-  };
-}
-
-type SlackUserEmailCacheEntry =
-  | { kind: "human"; email: string }
-  | { kind: "non-human" }
-  | { kind: "unresolved" };
-type SlackUserEmailCache = Map<string, SlackUserEmailCacheEntry>;
-
-const SLACK_USER_LOOKUP_CONCURRENCY = 4;
 const SLACK_THREAD_CAPTURE_CONCURRENCY = 4;
 const GRANOLA_NOTE_CAPTURE_CONCURRENCY = 4;
 const CONNECTOR_SYNC_LEASE_MS = 10 * 60 * 1_000;
@@ -1073,94 +1048,6 @@ async function slackPermalink(
   return data.permalink ?? null;
 }
 
-async function slackPrivateChannelMemberEmails(
-  token: string,
-  channelId: string,
-  userEmailCache: SlackUserEmailCache,
-): Promise<string[] | null> {
-  const memberIds = new Set<string>();
-  const seenCursors = new Set<string>();
-  let cursor: string | undefined;
-  while (true) {
-    const response = await slackApi<SlackMembersResponse>(
-      token,
-      "conversations.members",
-      { channel: channelId, limit: 1_000, cursor },
-    );
-    if (
-      !Array.isArray(response.members) ||
-      response.members.some(
-        (memberId) => typeof memberId !== "string" || !memberId,
-      )
-    ) {
-      return null;
-    }
-    for (const memberId of response.members) {
-      memberIds.add(memberId);
-    }
-    const nextCursor = response.response_metadata?.next_cursor?.trim();
-    if (!nextCursor) break;
-    if (seenCursors.has(nextCursor)) return null;
-    seenCursors.add(nextCursor);
-    cursor = nextCursor;
-  }
-  const userIds = Array.from(memberIds);
-  if (
-    userIds.some((userId) => userEmailCache.get(userId)?.kind === "unresolved")
-  ) {
-    return null;
-  }
-
-  const uncachedUserIds = userIds.filter(
-    (userId) => !userEmailCache.has(userId),
-  );
-  for (
-    let offset = 0;
-    offset < uncachedUserIds.length;
-    offset += SLACK_USER_LOOKUP_CONCURRENCY
-  ) {
-    const batch = uncachedUserIds.slice(
-      offset,
-      offset + SLACK_USER_LOOKUP_CONCURRENCY,
-    );
-    await Promise.all(
-      batch.map(async (userId) => {
-        const user = await slackApi<SlackUserInfoResponse>(
-          token,
-          "users.info",
-          { user: userId },
-        );
-        const slackUser = user.user;
-        if (
-          slackUser?.deleted === true ||
-          slackUser?.is_app_user === true ||
-          slackUser?.is_bot === true ||
-          slackUser?.is_workflow_bot === true
-        ) {
-          userEmailCache.set(userId, { kind: "non-human" });
-          return;
-        }
-        const email = slackUser?.profile?.email?.trim().toLowerCase();
-        userEmailCache.set(
-          userId,
-          email ? { kind: "human", email } : { kind: "unresolved" },
-        );
-      }),
-    );
-    if (
-      batch.some((userId) => userEmailCache.get(userId)?.kind === "unresolved")
-    ) {
-      return null;
-    }
-  }
-
-  const emails = userIds.flatMap((userId) => {
-    const entry = userEmailCache.get(userId);
-    return entry?.kind === "human" ? [entry.email] : [];
-  });
-  return Array.from(new Set(emails)).sort();
-}
-
 function configuredSlackChannelIds(config: Record<string, unknown>) {
   return new Set(
     slackChannelRefsFromConfig(config).filter((value) =>
@@ -1175,7 +1062,6 @@ async function createSlackThreadCapture(input: {
   messages: SlackMessage[];
   permalink: string | null;
   syncRunId?: string;
-  memberEmails?: string[] | null;
 }) {
   const normalized = normalizeSlackThreadCapture({
     channel: input.channel,
@@ -1193,11 +1079,7 @@ async function createSlackThreadCapture(input: {
       content: normalized.content,
       capturedAt: normalized.capturedAt,
       metadata: normalized.metadata,
-      audience: {
-        kind: input.channel.is_private ? "slack-private-channel" : "org",
-        memberEmails: input.memberEmails ?? undefined,
-        upstreamRefHash: input.channel.id,
-      },
+      audience: { kind: "org", upstreamRefHash: input.channel.id },
     });
     return { capture, blocked: false };
   } catch (error) {
@@ -2468,7 +2350,6 @@ async function syncSlack(source: SourceRow): Promise<ConnectorSyncResult> {
     }
     const channels = [...channelsById.values()];
     stats.eligibleChannels = channels.length;
-    const userEmailCache: SlackUserEmailCache = new Map();
 
     const channelsToScan = includePublicChannels
       ? (() => {
@@ -2510,29 +2391,6 @@ async function syncSlack(source: SourceRow): Promise<ConnectorSyncResult> {
         stats.publicChannelsAlreadyJoined =
           Number(stats.publicChannelsAlreadyJoined) + 1;
       }
-      const privateMemberEmails = channel.is_private
-        ? await slackPrivateChannelMemberEmails(
-            token,
-            channel.id,
-            userEmailCache,
-          )
-        : null;
-      if (channel.is_private) {
-        if (privateMemberEmails === null) {
-          stats.rejectedChannels = Number(stats.rejectedChannels) + 1;
-          continue;
-        }
-        await refreshSlackPrivateChannelAudience({
-          source,
-          channelId: channel.id,
-          memberEmails: privateMemberEmails,
-        });
-        if (!privateMemberEmails.length) {
-          stats.rejectedChannels = Number(stats.rejectedChannels) + 1;
-          continue;
-        }
-      }
-
       stats.scannedChannels = Number(stats.scannedChannels) + 1;
       const channelCursor = nextCursor.channels?.[channel.id] ?? {};
       const pendingLatest =
@@ -2579,7 +2437,6 @@ async function syncSlack(source: SourceRow): Promise<ConnectorSyncResult> {
                 messages: thread.messages?.length ? thread.messages : [message],
                 permalink,
                 syncRunId: runId,
-                memberEmails: privateMemberEmails,
               });
             }),
           );
@@ -2838,26 +2695,6 @@ export async function refreshSlackThreadCapture(
         `Slack thread refresh rejected for channel ${channelId}: it matches a Brain public-channel exclusion`,
       );
     }
-    const memberEmails = channel.is_private
-      ? await slackPrivateChannelMemberEmails(token, channel.id, new Map())
-      : null;
-    if (channel.is_private) {
-      if (memberEmails === null) {
-        throw new Error(
-          `Slack private channel ${channel.id} has no resolvable member emails; refusing to refresh without an ACL`,
-        );
-      }
-      if (!memberEmails.length) {
-        await refreshSlackPrivateChannelAudience({
-          source,
-          channelId: channel.id,
-          memberEmails,
-        });
-        throw new Error(
-          `Slack private channel ${channel.id} has no human members; refusing to refresh a capture`,
-        );
-      }
-    }
     const [thread, permalink] = await Promise.all([
       slackApi<SlackRepliesResponse>(token, "conversations.replies", {
         channel: channel.id,
@@ -2872,7 +2709,6 @@ export async function refreshSlackThreadCapture(
       messages: thread.messages ?? [],
       permalink,
       syncRunId: runId,
-      memberEmails,
     });
     const stats = {
       channelId: channel.id,

package/corpus/templates/brain/server/plugins/otel.ts

@@ -0,0 +1,6 @@
+import { defineNitroPlugin } from "@agent-native/core/server";
+import { startAgentNativeOtel } from "@agent-native/otel";
+
+export default defineNitroPlugin(() => {
+  startAgentNativeOtel();
+});

package/corpus/templates/calendar/.agents/skills/security/SKILL.md

@@ -290,9 +290,16 @@ export default defineEventHandler(async (event) => {
 
 ## Data Scoping
 
-In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views. This is enforced at the SQL level — the agent cannot bypass it.
+In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views, and checks every statement before it runs so it can only reach those views.
 
-The `db-query` / `db-exec` tools (and the extension SQL bridge, which shares the same path) reject schema-qualified table references like `public.<table>` — a qualified name resolves to the base table and would skip the temp view. Use bare table names; scoping is applied automatically.
+The `db-query` / `db-exec` / `db-patch` tools (and the extension SQL bridge, which shares the same path) read each statement the way Postgres does and refuse anything that could reach data around the temp views:
+
+- schema- or database-qualified names like `public.<table>`, which resolve to the base table;
+- names that resolve to anything other than the current user's temp views, such as materialized views or tables the scoping does not cover;
+- app-defined SQL or PL/pgSQL functions and operators, whose bodies read tables without the views;
+- built-ins that run SQL text, change session settings, or reach outside the database (`query_to_xml`, `set_config`, `dblink`, most `pg_*` functions).
+
+`db-query` runs in a read-only transaction, and an `INSERT` must list its columns when the table has access-control columns. Use bare table names and plain expressions; scoping is applied automatically. When the agent needs data the views do not expose, add an app action with its own access checks.
 
 ### Per-User Scoping (`owner_email`)
 

package/corpus/templates/calendar/.agents/skills/storing-data/SKILL.md

@@ -75,10 +75,11 @@ state their PostgreSQL types directly.
 
 Member offboarding and email changes refuse to run while any column named
 `email`, `*_email`, `*scope_id`, `created_by`, `updated_by`, `invited_by`,
-`owner`, `principal_id`, `session_id`, or `user_id` has no policy. `owner_email`
-and `createSharesTable()` tables are handled for you. Declare every other one,
-including columns that are not member identities, from the app's database
-plugin graph (Clips does it in `server/db/index.ts`):
+`owner`, `principal_id`, `session_id`, or `user_id` has no policy.
+`createSharesTable()` tables are handled for you, and undeclared `owner_email`
+columns transfer to the successor, which is right only for owned content.
+Declare every other one, including columns that are not member identities, from
+the app's database plugin graph (Clips does it in `server/db/index.ts`):
 
 ```ts
 import { registerIdentityColumns } from "@agent-native/core/org";
@@ -88,13 +89,17 @@ registerIdentityColumns([
   { table: "space_members", column: "email", emailChange: "rekey", offboard: "delete", orgScope: { column: "space_id", references: { table: "spaces", column: "id", orgColumn: "org_id" } }, reason: "Space membership grants access." },
   // Someone else's address: never rewritten.
   { table: "meeting_participants", column: "email", emailChange: "retain", offboard: "retain", reason: "Attendee address from the calendar provider." },
+  // A credential in an owner_email table: never handed to the successor.
+  { table: "api_keys", column: "owner_email", emailChange: "rekey", offboard: "revoke", reason: "Bearer keys act as their owner." },
 ]);
 ```
 
-Choose `delete` for grants, credentials, and pending tokens; `retain` for
+Choose `delete` for grants, credentials, and pending tokens, or `revoke` (sets
+`revoked_at`) when a reader treats a missing row as "not revoked"; `retain` for
 attribution, history, and third-party addresses; `transfer` only for owned
-data. A table without `org_id` needs `orgScope` or an organization-scoped
-removal leaves its rows alone.
+data. Declare `owner_email` tables that hold credentials or grants, or
+offboarding hands them to the successor. A table without `org_id` needs
+`orgScope` or an organization-scoped removal leaves its rows alone.
 
 | Template     | Tables                                        |
 | ------------ | --------------------------------------------- |

package/corpus/templates/calendar/CHANGELOG.md

@@ -3,6 +3,13 @@
 All notable user-facing changes to Agent-Native Calendar are documented here. Open it any
 time from the command menu (Cmd+K → "What's new") or from Settings.
 
+## 2026-10-02
+
+### Improved
+
+- Builder.io setup copy now clarifies account activation and sign-in.
+- Owners and admins can save Apollo, HubSpot, Gong, and Pylon keys for the whole organization or just for themselves.
+
 ## 2026-10-01
 
 ### Improved

package/corpus/templates/calendar/README.md

@@ -4,7 +4,7 @@ An open-source, agent-native alternative to the Google Calendar + Calendly combo
 An agent-powered calendar with Google Calendar sync and Calendly-style public
 booking links — schedule, find slots, and manage availability in plain English.
 
-**Live app: [calendar.agent-native.com](https://calendar.agent-native.com)**
+**Live app: [calendar.agent-native.com](https://calendar.agent-native.com?utm_source=github&utm_medium=referral&utm_content=calendar-readme)**
 
 Connect your Google Calendar and the agent can read your schedule, find free
 slots, create events, and manage booking links. Anything you can do in the UI,
@@ -33,4 +33,4 @@ pnpm dev
 ```
 
 Connecting Google Calendar in dev needs a Google OAuth client — see the docs for
-setup. Full docs: [agent-native.com/docs/template-calendar](https://agent-native.com/docs/template-calendar).
+setup. Full docs: [agent-native.com/docs/template-calendar](https://agent-native.com/docs/template-calendar?utm_source=github&utm_medium=referral&utm_content=calendar-readme).

package/corpus/templates/calendar/package.json

@@ -18,6 +18,7 @@
   },
   "dependencies": {
     "@agent-native/core": "workspace:*",
+    "@agent-native/otel": "workspace:*",
     "@agent-native/scheduling": "workspace:*",
     "@agent-native/toolkit": "workspace:*",
     "@electric-sql/pglite": "^0.5.8",

package/corpus/templates/calendar/server/plugins/auth.ts

@@ -6,7 +6,8 @@ export default createAuthPlugin({
   workspaceAppPublicPaths: ["/"],
   marketing: {
     appName: "Calendar",
-    learnMoreUrl: "https://agent-native.com/apps/calendar",
+    learnMoreUrl:
+      "https://agent-native.com/apps/calendar?utm_source=app&utm_medium=product&utm_content=onboarding-learn-more",
     tagline:
       "Your AI agent schedules, reschedules, and manages your calendar so you never have to.",
     features: [

package/corpus/templates/calendar/server/plugins/otel.ts

@@ -0,0 +1,6 @@
+import { defineNitroPlugin } from "@agent-native/core/server";
+import { startAgentNativeOtel } from "@agent-native/otel";
+
+export default defineNitroPlugin(() => {
+  startAgentNativeOtel();
+});

package/corpus/templates/chat/.agents/skills/security/SKILL.md

@@ -290,9 +290,16 @@ export default defineEventHandler(async (event) => {
 
 ## Data Scoping
 
-In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views. This is enforced at the SQL level — the agent cannot bypass it.
+In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views, and checks every statement before it runs so it can only reach those views.
 
-The `db-query` / `db-exec` tools (and the extension SQL bridge, which shares the same path) reject schema-qualified table references like `public.<table>` — a qualified name resolves to the base table and would skip the temp view. Use bare table names; scoping is applied automatically.
+The `db-query` / `db-exec` / `db-patch` tools (and the extension SQL bridge, which shares the same path) read each statement the way Postgres does and refuse anything that could reach data around the temp views:
+
+- schema- or database-qualified names like `public.<table>`, which resolve to the base table;
+- names that resolve to anything other than the current user's temp views, such as materialized views or tables the scoping does not cover;
+- app-defined SQL or PL/pgSQL functions and operators, whose bodies read tables without the views;
+- built-ins that run SQL text, change session settings, or reach outside the database (`query_to_xml`, `set_config`, `dblink`, most `pg_*` functions).
+
+`db-query` runs in a read-only transaction, and an `INSERT` must list its columns when the table has access-control columns. Use bare table names and plain expressions; scoping is applied automatically. When the agent needs data the views do not expose, add an app action with its own access checks.
 
 ### Per-User Scoping (`owner_email`)
 

package/corpus/templates/chat/.agents/skills/storing-data/SKILL.md

@@ -75,10 +75,11 @@ state their PostgreSQL types directly.
 
 Member offboarding and email changes refuse to run while any column named
 `email`, `*_email`, `*scope_id`, `created_by`, `updated_by`, `invited_by`,
-`owner`, `principal_id`, `session_id`, or `user_id` has no policy. `owner_email`
-and `createSharesTable()` tables are handled for you. Declare every other one,
-including columns that are not member identities, from the app's database
-plugin graph (Clips does it in `server/db/index.ts`):
+`owner`, `principal_id`, `session_id`, or `user_id` has no policy.
+`createSharesTable()` tables are handled for you, and undeclared `owner_email`
+columns transfer to the successor, which is right only for owned content.
+Declare every other one, including columns that are not member identities, from
+the app's database plugin graph (Clips does it in `server/db/index.ts`):
 
 ```ts
 import { registerIdentityColumns } from "@agent-native/core/org";
@@ -88,13 +89,17 @@ registerIdentityColumns([
   { table: "space_members", column: "email", emailChange: "rekey", offboard: "delete", orgScope: { column: "space_id", references: { table: "spaces", column: "id", orgColumn: "org_id" } }, reason: "Space membership grants access." },
   // Someone else's address: never rewritten.
   { table: "meeting_participants", column: "email", emailChange: "retain", offboard: "retain", reason: "Attendee address from the calendar provider." },
+  // A credential in an owner_email table: never handed to the successor.
+  { table: "api_keys", column: "owner_email", emailChange: "rekey", offboard: "revoke", reason: "Bearer keys act as their owner." },
 ]);
 ```
 
-Choose `delete` for grants, credentials, and pending tokens; `retain` for
+Choose `delete` for grants, credentials, and pending tokens, or `revoke` (sets
+`revoked_at`) when a reader treats a missing row as "not revoked"; `retain` for
 attribution, history, and third-party addresses; `transfer` only for owned
-data. A table without `org_id` needs `orgScope` or an organization-scoped
-removal leaves its rows alone.
+data. Declare `owner_email` tables that hold credentials or grants, or
+offboarding hands them to the successor. A table without `org_id` needs
+`orgScope` or an organization-scoped removal leaves its rows alone.
 
 | Template     | Tables                                        |
 | ------------ | --------------------------------------------- |

package/corpus/templates/chat/README.md

@@ -5,7 +5,7 @@ the center, durable threads, standard app navigation, auth, live sync, and
 actions. Start here when you want a real browser app to build on without
 committing to a domain template.
 
-**Live app: [chat.agent-native.com](https://chat.agent-native.com)**
+**Live app: [chat.agent-native.com](https://chat.agent-native.com?utm_source=github&utm_medium=referral&utm_content=chat-readme)**
 
 Chat is the basic agent-native app starting point. It gives you the app-agent
 loop wired end to end and one example action, so you can add your own UI, data,
@@ -30,4 +30,4 @@ pnpm install
 pnpm dev
 ```
 
-Full docs: [agent-native.com/docs/template-chat](https://agent-native.com/docs/template-chat).
+Full docs: [agent-native.com/docs/template-chat](https://agent-native.com/docs/template-chat?utm_source=github&utm_medium=referral&utm_content=chat-readme).

package/corpus/templates/clips/.agents/skills/ai-video-tools/SKILL.md

@@ -131,6 +131,15 @@ Transcription takes an audio file and returns text + segments. That's not a prom
 2. **Cloud fallback — Builder.io managed (Gemini).** When a Builder account is connected (`BUILDER_PRIVATE_KEY` or per-user OAuth, no separate API key needed), `request-transcript` calls `transcribeWithBuilder()`, which routes audio to Builder.io's managed Gemini transcription. Returns text plus timestamped segments. Retry a failed transcript with `force: true`; pass `regenerate: true` to replace an existing ready transcript from the stored recording media. Regeneration keeps the prior ready transcript available if the new provider attempt fails.
 3. **Cloud fallback — Groq Whisper.** `GROQ_API_KEY` → `https://api.groq.com/openai/v1/audio/transcriptions`, model `whisper-large-v3-turbo`. Fast (~$0.04/hour of audio) Whisper-compatible speech-to-text used when Builder is unavailable.
 
+Cloud transcription always re-encodes the audio to mono 16 kHz and splits it
+into parts of about 15 minutes, transcribed a few at a time and stitched back on
+the recording timeline. Long uploads therefore transcribe like short ones; do
+not tell users a recording is "too long" to transcribe. The provider numbers
+speakers per part, so in a multi-part transcript the same label may refer to
+different people in different parts. If any part still fails after one retry, nothing is saved and the transcript fails with `CHUNK_FAILED`;
+`transcript-cleanup-<id>` in application state records which part failed and
+the provider error. Retry with `request-transcript` and `force: true`.
+
 The transcript included by `view-screen` is only a bounded preview. When its
 `previewTruncated` field is true, the preview may end mid-sentence and does not
 show where transcription ended. Call `get-recording-player-data` before

package/corpus/templates/clips/.agents/skills/security/SKILL.md

@@ -290,9 +290,16 @@ export default defineEventHandler(async (event) => {
 
 ## Data Scoping
 
-In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views. This is enforced at the SQL level — the agent cannot bypass it.
+In production, the framework automatically restricts all agent SQL queries to the current user's data using temporary views, and checks every statement before it runs so it can only reach those views.
 
-The `db-query` / `db-exec` tools (and the extension SQL bridge, which shares the same path) reject schema-qualified table references like `public.<table>` — a qualified name resolves to the base table and would skip the temp view. Use bare table names; scoping is applied automatically.
+The `db-query` / `db-exec` / `db-patch` tools (and the extension SQL bridge, which shares the same path) read each statement the way Postgres does and refuse anything that could reach data around the temp views:
+
+- schema- or database-qualified names like `public.<table>`, which resolve to the base table;
+- names that resolve to anything other than the current user's temp views, such as materialized views or tables the scoping does not cover;
+- app-defined SQL or PL/pgSQL functions and operators, whose bodies read tables without the views;
+- built-ins that run SQL text, change session settings, or reach outside the database (`query_to_xml`, `set_config`, `dblink`, most `pg_*` functions).
+
+`db-query` runs in a read-only transaction, and an `INSERT` must list its columns when the table has access-control columns. Use bare table names and plain expressions; scoping is applied automatically. When the agent needs data the views do not expose, add an app action with its own access checks.
 
 ### Per-User Scoping (`owner_email`)
 

package/corpus/templates/clips/CHANGELOG.md

@@ -3,10 +3,34 @@
 All notable user-facing changes to Clips are documented here. Open it any time
 from the command menu (Cmd+K → "What's new") or from Settings.
 
+## 2026-10-05
+
+### Fixed
+
+- Confirming Discard recording now returns you to your library.
+- Discarding a recording now removes its failed upload card from your library.
+- Discarding a recovered recording no longer warns that it's open in another tab.
+- Search results identify recordings in Trash and open them with Trash navigation.
+
+## 2026-10-03
+
+### Fixed
+
+- Invalid Lab choices can be repaired from Labs settings.
+
 ## 2026-10-02
 
+### Improved
+
+- Builder.io setup now offers one-click activation and clear existing-account sign-in.
+
 ### Fixed
 
+- Cancelled Rewind Clip setup can be retried immediately
+- Long uploads (an hour or more) now transcribe reliably instead of failing.
+- Recording countdowns begin during setup, with explicit cue outcomes and startup timing
+- Recording visibility defaults no longer switch to Public when saved settings cannot be read.
+- Screen recording startup now cleans up canceled Rewind setup and keeps countdown timing reliable on older macOS.
 - Recording reminders and other actionable notifications show their message above the buttons
 - Temporary upload authorization failures remain retryable, while permanently rejected Builder credentials trigger storage setup errors.
 

package/corpus/templates/clips/README.md

@@ -4,7 +4,7 @@ An open-source, agent-native alternative to Loom, Granola, and Wispr Flow rolled
 into one app. Screen recording, calendar-synced meeting notes, and push-to-talk
 voice dictation — all transcribed, searchable, and yours to own.
 
-**Live app: [clips.agent-native.com](https://clips.agent-native.com)**
+**Live app: [clips.agent-native.com](https://clips.agent-native.com?utm_source=github&utm_medium=referral&utm_content=clips-readme)**
 
 The agent transcribes, titles, summarizes, and indexes everything you capture,
 then lets you ask "find the clip where we discussed the rollout plan" across every
@@ -34,4 +34,4 @@ pnpm dev
 
 Clips needs a video storage backend (Builder.io or an S3-compatible bucket)
 before recordings can upload — see the docs for setup.
-Full docs: [agent-native.com/docs/template-clips](https://agent-native.com/docs/template-clips).
+Full docs: [agent-native.com/docs/template-clips](https://agent-native.com/docs/template-clips?utm_source=github&utm_medium=referral&utm_content=clips-readme).

package/corpus/templates/clips/actions/lib/audio-chunk-list.ts

@@ -0,0 +1,23 @@
+export interface AudioChunkListEntry {
+  file: string;
+  startMs: number;
+  durationMs: number;
+}
+
+// Parses ffmpeg's `-segment_list_type csv` output: `file,start,end` per line,
+// times in seconds.
+export function parseAudioChunkList(csv: string): AudioChunkListEntry[] {
+  return csv
+    .split(/\r?\n/)
+    .filter((line) => line.trim())
+    .map((line) => {
+      const [file, start, end] = line.split(",");
+      const startMs = Math.round(Number(start) * 1000);
+      const endMs = Math.round(Number(end) * 1000);
+      if (!file || !Number.isFinite(startMs) || !(endMs > startMs)) {
+        // guard:allow-bare-error — invariant: malformed ffmpeg output; the caller rethrows it as EXTRACTION_FAILED.
+        throw new Error(`Unreadable audio chunk list entry: "${line}"`);
+      }
+      return { file, startMs, durationMs: endMs - startMs };
+    });
+}