@agent-native/core 0.122.3 → 0.123.0

package/corpus/templates/clips/AGENTS.md

@@ -1,243 +1,101 @@
 # Clips — Agent Guide
 
-Clips is an agent-native screen-recording, transcript, meetings, and video
-sharing app. The agent assists with recordings, transcripts, summaries, chapters,
-comments, folders/spaces, meetings, dictation, and sharing through actions.
+Clips is an agent-native screen recording, transcript, meetings, dictation, and
+video sharing app. The agent and the UI share the same SQL data and actions.
 
-Detailed media, meeting, dictation, editing, and sharing rules live in
-`.agents/skills/`.
+## Skills
 
 Before building common workspace or agent UI, read `agent-native-toolkit` to
 inventory existing public kits and installed package seams. Use
 `customizing-agent-native` for the configure → compose → eject → propose seam
 ladder.
 
+Read the matching skill before deeper work in that area:
+
+- `recording` — capture, upload, playback, Loom import, mobile, folders and bulk
+  moves, Chrome extension.
+- `ai-video-tools` — transcription, cleanup, titles, summaries, chapters,
+  `voiceContext`, AI setup and Builder credits.
+- `video-editing` — `editsJson`, trim/split/cut/speed/blur, export.
+- `video-sharing` — visibility, passwords, expiry, embeds, Slack unfurls,
+  agent-readable clips, discovery limits, view counting.
+- `meetings`, `dictate` — calendar meetings, live notes, dictation.
+- `brain-export` — `export-to-brain` exports, cursors, sweeps.
+- `crm-call-evidence` — `prepare-crm-call-evidence` and CRM recipes.
+- `screen-memory` — local-only desktop screen/app context.
+- `bug-reports` — embedded `/bug-report` launcher and intake limits.
+- `external-integrations` — Slack install, Atlassian/Jira, provider-API limits.
+- `actions`, `security`, `storing-data`, `frontend-design`, `shadcn-ui` as
+  needed.
+
 ## Core Rules
 
-- Store large file/blob payloads in configured file/blob storage, not SQL: no
-  base64, `data:` URLs, images, video/audio, PDFs, ZIPs, screenshots,
-  thumbnails, or replay chunks in app tables, `application_state`, `settings`,
-  or `resources`; persist URLs, ids, or handles instead. Hosted/shared
-  recording uploads require configured storage — do not preserve video bytes
-  in SQL as a production fallback. The only exception: local SQLite/dev flows
-  may keep scratch chunks while a user connects Builder.io or S3-compatible
-  storage.
-- Never hardcode API keys, tokens, webhook URLs, signing secrets, private Builder/internal data, customer data, or credential-looking literals. Use secrets/OAuth/runtime configuration and obvious placeholders in examples.
+- Keep large payloads out of SQL: no video/audio, images, PDFs, thumbnails,
+  base64, or `data:` URLs in app tables, `application_state`, `settings`, or
+  `resources` — persist URLs, ids, or handles and keep bytes in configured
+  file/blob storage. Hosted uploads require storage; never fall back to video
+  bytes in SQL (local dev scratch chunks excepted).
+- Never hardcode API keys, tokens, webhook URLs, signing secrets, private
+  Builder/internal data, customer data, or credential-looking literals. Use
+  secrets/OAuth/runtime config and obvious placeholders.
 - Use actions for recording metadata, transcripts, cleanup, summaries, chapters,
-  comments, spaces/folders, meetings, and sharing. Do not bypass access helpers.
-- Use `prepare-crm-call-evidence` only for a viewer-accessible recording
-  explicitly identified by a user action or the exact approved CRM A2A recipe.
-  It returns an opaque clip ID, durable HTTPS `/r/<id>` page, and optional
-  capture time for CRM; it never returns the event media URL, a transcript,
-  temporary token, quote, or summary. A CRM recipe may install a Clips-owned
-  `clip.created` trigger only through an exact user-approved A2A automation
-  definition.
-- Organization admins can use `set-organization-branding` with
-  `defaultVisibility=public|org|private` to choose the visibility applied when
-  new recordings omit an explicit visibility. The default remains `public`, and
-  explicit visibility wins (for example, bug-report recordings use `org`).
-- Use `move-recording` for both single and bulk folder moves. Pass `id` for one
-  clip or `ids` for selected clips, and `folderId: null` to move them to the
-  library or space root.
-- Recording start/stop/pause are UI gestures because browser media capture needs
-  user activation; navigate the user to the recording view instead of trying a
-  server action.
-- Screen Memory is a local-only desktop buffer, not a hosted Clips recording.
-  Users enable/pause/export/clear it from the desktop tray settings. External
-  local agents can read recent app/window context through
-  `agent-native mcp screen-memory`; do not upload raw Screen Memory segments or
-  treat them as shareable Clips unless the user explicitly exports/imports them.
-- Use `import-loom-recording` for Loom share/embed URLs. It downloads Loom's
-  public MP4, reuploads it to Clips storage, creates a ready playable
-  Clips-hosted recording, and imports Loom's public transcript when the share
-  page exposes one. If Loom does not expose a downloadable MP4, ask the user to
-  download the original from Loom and use "Upload video".
-- Native transcript first. Cleanup and transcript-backed title/summary
-  generation run in the durable post-finalize path; do not hide a usable native
-  transcript behind failed metadata work, and keep heuristic titles replaceable
-  until the agent refinement lands.
-- Desktop native transcripts merge microphone and system-audio streams while
-  removing overlapping duplicate speech and low-speech Whisper hallucinations;
-  keep system audio enabled when the meeting audio comes from another app.
-- Use `request-transcript --recordingId=<id> --force=true` to retry a failed
-  transcript. Pass `--regenerate=true` to replace an existing ready transcript
-  from the stored recording media; if regeneration fails, keep the prior ready
-  transcript available.
-- Use `export-to-brain --recordingId=<id>` for one ready transcript. For a
-  bounded historical import, omit `recordingId` and pass `lookbackDays`,
-  `limit`, and `concurrency`; when `nextCursor` is non-null, pass it as
-  `cursor` on the next call until `nextCursor` is null. The cursor keeps the
-  original lookback snapshot and advances by recording creation time plus id,
-  so pages cannot reselect the same recordings or expand forever as new clips
-  arrive. The action only selects
-  current-user recordings with ready transcripts in the active organization
-  and reports exported, quarantined, skipped, and failed counts. Both
-  `BRAIN_INGEST_URL` and `BRAIN_INGEST_TOKEN` must be available as scoped Clips
-  secrets. Transcript completion persists a pending export before handing it to
-  the durable post-finalize worker; delivery receipts include the Brain capture
-  or sensitivity receipt id, while transient failures are swept and retried.
-  The sweep also discovers ready transcripts from the last seven days that
-  predate export-state tracking, in bounded batches, so recent recordings are
-  backfilled after the connection is configured.
-  Netlify builds emit a protected per-minute scheduled sweep because in-process
-  intervals are not durable there. Other serverless hosts must invoke
-  `runBrainExportSweepOnce` from their own scheduler.
-- The transcript embedded by `view-screen` is a bounded preview. If
-  `previewTruncated` is true, it may end mid-sentence and does not show where
-  transcription ended. Call `get-recording-player-data` before judging
-  completeness or quoting the full transcript.
-- Mobile captures originate in the Agent Native iOS/Android app. The phone
-  persists each audio/video file before network work, creates the recording
-  with `sourceAppName: "Agent Native Mobile"`, and resumes bounded chunk
-  uploads from its durable queue. Do not ask users to keep a capture screen
-  open or re-record after a transient upload failure; reconnect Clips and retry
-  the saved job from mobile Home.
-- Mobile meeting capture is microphone-only. It can record an in-person room or
-  audio playing from another device, but iOS and Android do not expose another
-  phone app's Zoom/Meet/Teams call audio to this flow. Do not claim mobile
-  attendee attribution has the desktop mic-plus-system-audio fidelity.
-- Dictation cleanup, Clip title/cleanup, and meeting summaries should pass
-  bounded `voiceContext` to the shared cleanup/transcription path when active
-  app context, learned vocabulary, user notes, or AGENTS.md preferences are
-  available.
-- Cloud transcription is fallback-only for Clips recordings. Preserve the
-  browser/macOS native transcript first, then use the configured Builder/Gemini
-  path against the original recording when native capture is unavailable.
-- AI setup must be visible and paid-account-backed: lead with Builder.io Connect
-  for managed credits, object storage, uploads, and transcription. BYOK belongs
-  in the agent sidebar's API Keys & Connections panel; template settings may
-  signpost that panel but should not create a second credential vault.
-  Anthropic/OpenAI power the agent chat; Gemini powers cleanup, titles, and
-  meeting notes; any optional third-party speech provider is limited to
-  desktop voice dictation and is not used for recording transcripts.
+  comments, spaces/folders, meetings, and sharing. Never bypass access helpers.
+- Recording start/stop/pause are UI gestures — browser capture needs user
+  activation. Navigate the user to the recording view instead of a server action.
+- Native transcript first; cloud transcription is fallback-only. Never hide a
+  usable native transcript behind failed metadata work.
+- The `view-screen` transcript is a bounded preview: when `previewTruncated` is
+  true it may end mid-sentence and says nothing about where transcription
+  ended. Call `get-recording-player-data` before judging completeness or
+  quoting.
+- Public clips are unlisted-by-link, not a searchable catalog. Only inspect
+  recordings the user owns, has viewed, or gave a share URL/id for. Never use
+  `list-recordings` or `search-recordings` to find someone else's clip, answer a
+  date question about the clip in context, or recover from a failed lookup —
+  report the failure instead.
+- Use framework sharing actions. Password and expiry only tighten visibility
+  and share grants.
+- Screen Memory is local-only, disabled by default, and never a hosted or
+  shareable Clips recording.
 - Use `view-screen` when the active recording, transcript segment, meeting, or
   share context is unclear.
-- Calendar-sourced meeting actions are shortcuts, but do not add raw
-  `provider-api-request` for Google Calendar until the provider API runtime can
-  resolve Clips `calendar_accounts` through sharing/access checks and read their
-  encrypted `app_secrets` token refs. Clips calendar grants are not stored in
-  core `oauth_tokens`, and bypassing that model would break the account
-  sharing/status boundary.
-- Use framework sharing actions for recordings. Password and expiry are extra
-  controls on top of visibility/share grants.
-- Meeting share links include the summary, key points, and action items. The
-  full transcript is an explicit, default-off setting: call `update-meeting`
-  with `shareTranscript=true|false` only when the owner or a share admin asks
-  to change what the meeting link exposes. This does not change the linked
-  recording's visibility or expose its media.
-- Use `list-recordings --view=shared` for the current user's "Shared with me"
-  collection. It returns recordings admitted by sharing access that are owned
-  by someone else; public-link-only clips remain out of this list.
-- Public recordings are unlisted-by-link for agent purposes: an agent may
-  discover only recordings the current user owns or has already viewed. Do not
-  use `list-recordings` or `search-recordings` to discover another user's
-  public clips, answer a time/date question about the clip already in context,
-  or recover from a failed direct lookup. If the user supplies another clip's
-  share URL or id, use that explicit reference; otherwise stop and report the
-  lookup failure.
-- Public recordings expose AI-readable URLs for external agents:
-  `/api/agent-context.json?id=<recordingId>` for metadata, transcript, and frame
-  API discovery; `/api/agent-transcript.json?id=<recordingId>` for transcript
-  segments; `/api/agent-frame.jpg?id=<recordingId>&atMs=<ms>` for a screen
-  frame at a timestamp. Password-protected clips require the password once to
-  mint a short-lived token returned inside agent-context links.
-- If a public agent discovery/context/transcript payload reports
-  `agentReadiness.state` as `"preparing"` (the clip is `"uploading"` or
-  `"processing"`), wait 15 seconds and retry `agentContextUrl`; do not open the
-  share page, fetch frames, or draw conclusions until the recording status is
-  `"ready"`.
-  If `transcript.status` is `"pending"` after the clip is ready, wait 15-30
-  seconds and retry the context/transcript URL a few times, especially for long
-  recordings. Do not pivot straight to frames or tell the user there is no
-  transcript until the retry budget is exhausted.
-- If transcription failed because Builder transcription credits are exhausted,
-  tell the user that clearly and point them to Builder.io credits/upgrade.
-  Native browser/macOS capture remains the first transcript source; Builder
-  transcribes the original recording only when native capture is unavailable.
-- Use `get-builder-credit-status` when the user asks whether Builder.io credit
-  limits are pausing backup transcription, transcript cleanup, summaries, or AI
-  title generation. Treat an exhausted status as an FYI/upgrade path, not an app
-  error.
-- Slack unfurls use `/api/slack/unfurl` for `link_shared` events and only
-  return playable `chat.unfurl` video blocks for ready public clips with no
-  password, no expiry hit, and no archive/trash marker. Private, org-only,
-  passworded, expired, or unfinished clips should fall back to normal link
-  metadata and require opening Clips.
-- Slack installs should go through the Clips Settings OAuth flow
-  (`connect-slack`, `/api/slack/oauth/callback`) so each Slack workspace gets
-  its own encrypted bot token in `app_secrets`. `SLACK_BOT_TOKEN` is only a
-  legacy single-workspace fallback and must remain behind the team allowlist.
-- Atlassian/Jira is available through the shared MCP integration catalog. It
-  uses Atlassian Rovo MCP OAuth; explain that an Atlassian organization admin
-  may need to allow the Clips app domain and enable the required Read, Write,
-  and Search permissions before the connection can complete.
-- Browser recordings can include redacted browser diagnostics captured during
-  the recording session. `save-browser-diagnostics` is UI/internal and stores
-  bounded console logs plus fetch/XHR method, URL path/query keys, status, and
-  duration; it never captures headers, bodies, cookies, or network URL query
-  values. Console text keeps useful non-secret values while redacting
-  credential-looking keys/headers. Use `get-recording-player-data` for full
-  diagnostics when you have editor access. Public agent context exposes the
-  redacted console stream (all levels) as `browserDiagnostics.consoleLogs` and
-  the fetch/XHR stream as `browserDiagnostics.networkRequests` (method,
-  sanitized URL with query values redacted, status, duration), plus
-  `consoleIssues` and `failedNetworkRequests` highlights. All bounded; page
-  URL, headers, bodies, and cookies stay omitted.
-- Embedded bug reports use `/bug-report` as an iframe-friendly launcher and
-  `/record?intent=bug-report` for the actual top-level capture flow. The
-  launcher stores redacted host metadata through `save-bug-report-context`; the
-  recording remains the canonical resource and defaults to workspace visibility.
-  Do not present this as anonymous customer intake until a signed intake/upload
-  token flow exists, because the current upload endpoints are owner-scoped.
-- The Chrome extension lives in `chrome-extension/`. It launches `/record` with
-  `clipsExtensionId` and `clipsCaptureSessionId`, then the recorder sends
-  `CLIPS_CAPTURE_START/STOP/CANCEL` back to the extension. The extension uses
-  the Chrome debugger API only on the tab the user launched from, only while a
-  recording is active, and returns the same redacted diagnostics shape saved by
-  `save-browser-diagnostics`.
-- The Chrome extension also enhances GitHub issue and PR markdown: a narrow
-  `github.com` content script detects Clips `/r/`, `/share/`, and `/embed/`
-  links, then renders the existing `/embed/:id` player in an extension-owned
-  preview iframe so the video is playable without leaving GitHub. Keep this
-  scoped to GitHub unless there is a deliberate permission review.
-- Screen Memory is a disabled-by-default, local-only desktop capability for
-  recent screen/app/window context. Use `get-screen-memory-status` before
-  relying on it, then `query-screen-memory-context` for bounded recent snippets
-  when local context files are present. If the local Screen Memory MCP built-in
-  is connected, the agent may also use `screen_memory_status`,
-  `screen_memory_recent_context`, and `screen_memory_recent_segments`; only
-  inspect or export segment file paths when the user explicitly asks. Never
-  describe Screen Memory as hosted, shared, exhaustive, or enabled by default.
-- After mutations, rely on the app refresh/polling path; do not invent a second
-  sync mechanism.
+- Never fabricate. Read real values through actions, verify writes with a
+  read-back, and rely on the app refresh/polling path after mutations.
 
 ## Application State
 
-- `navigation` exposes library, shared-with-me, recording, share, meeting,
-  dictation, settings, and transcript context. `selection` exposes selected
-  library recording ids when the user is in selection mode.
-- `navigate --view=shared` opens the shared-with-me collection, and
-  `view-screen` returns its currently visible recordings.
-- `recording-setup.import` exposes Loom import UI state while the `/record`
-  surface is open, without storing the pasted URL in ambient screen context.
-- `navigate` moves the UI to recording/library/meeting/share surfaces.
-- Use data actions for full transcripts and media metadata.
-- For the in-app Clips agent, prefer `get-recording-player-data` for full
-  private/authenticated recording context. When preparing a link for another
-  agent outside Clips, use `create-recording-agent-link`; it mints a two-hour
-  `agent_access` share URL without changing recording visibility.
-- Use `@agent-native/core/server` and `@agent-native/core/shared` agent-access
-  helpers for scoped token mint/verify and bot-visible URL construction. Keep
-  Clips-specific visibility, password, transcript, frame, and player behavior
-  in Clips. New URLs should use `agent_access`; existing agent API routes should
-  keep accepting legacy `t` tokens for copied links.
-
-## Skills
+- `navigation` — library, shared-with-me, recording, share, meeting, dictation,
+  settings, and transcript context. `navigate` opens those surfaces;
+  `navigate --view=shared` opens shared-with-me.
+- `selection` — selected library recording ids while in selection mode.
+- `recording-setup.import` — Loom import UI state while `/record` is open, never
+  the pasted URL.
+- `record-intent` — an agent-requested capture the recorder UI picks up, then
+  clears.
+- Read transcripts and media metadata through data actions, not screen context.
 
-Read the relevant skill before deeper work:
+## Actions
 
-- `recording` for recording lifecycle and transcript handling.
-- `video-editing` and `ai-video-tools` for edits, cleanup, titles, and summaries.
-- `video-sharing` for public links, passwords, expiry, embeds, and grants.
-- `meetings` and `dictate` for calendar-sourced meetings and dictation flows.
-- `actions`, `security`, `frontend-design`, and `shadcn-ui` as needed.
+| Action | Purpose |
+| --- | --- |
+| `view-screen`, `navigate` | Read context; open a surface |
+| `list-recordings`, `search-recordings` | Library, trash, `--view=shared` |
+| `get-recording-player-data` | Full transcript, chapters, diagnostics |
+| `create-recording`, `finalize-recording` | Create row; finish upload |
+| `import-loom-recording` | Import a Loom share/embed URL |
+| `update-recording` | Title, password, expiry, visibility |
+| `move-recording` | Move `id` or `ids` to a folder or root |
+| `archive-`, `trash-`, `restore-recording` | Lifecycle |
+| `reprocess-recording` | Repair unseekable/frozen media |
+| `request-transcript`, `cleanup-transcript` | Transcribe; `force`/`regenerate` |
+| `regenerate-title`, `-summary`, `-chapters` | AI metadata |
+| `trim-`, `split-recording`, `remove-silences`, `remove-filler-words` | Edits |
+| `list-meetings`, `get-`, `update-`, `finalize-meeting` | Meetings |
+| `list-dictations`, `cleanup-dictation` | Dictation history |
+| `add-comment`, `create-folder`, `create-space` | Comments, folders |
+| `share-resource`, `set-resource-visibility`, `build-embed-url` | Share, embed |
+| `create-recording-agent-link` | Two-hour `agent_access` share URL |
+| `prepare-crm-call-evidence` | Opaque clip id plus `/r/<id>` for CRM |
+| `export-to-brain` | Send ready transcripts to Brain |
+| `get-builder-credit-status` | Whether credits pause AI work |
+| `tool-search` | Any other Clips action, e.g. screen-memory reads |

package/corpus/templates/clips/actions/create-recording.ts

@@ -27,6 +27,7 @@ import {
 } from "../server/lib/recordings.js";
 import { setResumableSession } from "../server/lib/resumable-session.js";
 import { shouldEnableStreamingUpload } from "../server/lib/streaming-upload-mode.js";
+import { uploadLeaseExpiry } from "../server/lib/upload-lease.js";
 import {
   allowsSqlRecordingChunkScratch,
   STORAGE_SETUP_REQUIRED_REASON,
@@ -70,6 +71,9 @@ export default defineAction({
       sourceWindowTitle: args.sourceWindowTitle?.trim() || null,
       status: "uploading",
       uploadProgress: 0,
+      // Take the upload lease at creation. A row that never gets one is
+      // invisible to the reaper and can sit in 'uploading' forever.
+      uploadLeaseExpiresAt: uploadLeaseExpiry(),
       hasAudio: args.hasAudio ?? true,
       hasCamera: args.hasCamera ?? false,
       visibility: args.visibility ?? defaultVisibility,

package/corpus/templates/clips/app/components/player/sign-in-prompt-dialog.tsx

@@ -1,4 +1,5 @@
 import { useT } from "@agent-native/core/client/i18n";
+import { buildSignInReturnHref } from "@agent-native/core/client/ui";
 
 import { Button } from "@/components/ui/button";
 import {
@@ -18,9 +19,7 @@ export interface SignInPromptDialogProps {
   /**
    * Same-origin path to return the viewer to after sign-in. Defaults to the
    * current URL so anonymous viewers on a public share page land back where
-   * they were. The dialog routes through
-   * `/_agent-native/sign-in?return=<returnTo>` — the framework's login flow
-   * fires there and forwards to `returnTo` once the viewer is signed in.
+   * they were.
    */
   returnTo?: string;
   /**
@@ -31,12 +30,6 @@ export interface SignInPromptDialogProps {
   onSignIn?: () => void;
 }
 
-function buildSignInHref(returnTo: string | undefined): string {
-  if (typeof window === "undefined") return "/_agent-native/sign-in";
-  const target = returnTo ?? window.location.pathname + window.location.search;
-  return `/_agent-native/sign-in?return=${encodeURIComponent(target)}`;
-}
-
 export function SignInPromptDialog({
   open,
   onOpenChange,
@@ -59,7 +52,10 @@ export function SignInPromptDialog({
             {t("signInPrompt.notNow")}
           </Button>
           <Button asChild>
-            <a href={buildSignInHref(returnTo)} onClick={() => onSignIn?.()}>
+            <a
+              href={buildSignInReturnHref({ returnTo })}
+              onClick={() => onSignIn?.()}
+            >
               {t("signInPrompt.signIn")}
             </a>
           </Button>

package/corpus/templates/clips/app/routes/invite.$token.tsx

@@ -1,5 +1,6 @@
 import { callAction, useSession } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
+import { buildSignInReturnHref } from "@agent-native/core/client/ui";
 import { IconCheck, IconMailFast, IconX } from "@tabler/icons-react";
 import { useEffect, useState } from "react";
 import { useNavigate, useParams } from "react-router";
@@ -129,11 +130,11 @@ export default function InviteAcceptRoute() {
               {t("inviteRoute.signInDescription")}
             </p>
             <Button
-              onClick={() =>
-                navigate(
-                  `/login?next=${encodeURIComponent(`/invite/${token}`)}`,
-                )
-              }
+              onClick={() => {
+                window.location.href = buildSignInReturnHref({
+                  returnTo: `/invite/${token}`,
+                });
+              }}
               className="bg-primary hover:bg-primary/90"
             >
               {t("inviteRoute.signIn")}

package/corpus/templates/clips/app/routes/r.$recordingId.tsx

@@ -11,6 +11,7 @@ import {
   useChangeVersions,
 } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
+import { buildSignInReturnHref } from "@agent-native/core/client/ui";
 import {
   BUILDER_CREDITS_UPGRADE_URL,
   type BuilderCreditsStatus,
@@ -222,10 +223,6 @@ function parseTimeParam(raw: string | null): number {
   return (hours * 3600 + minutes * 60 + seconds) * 1000;
 }
 
-function buildSignInHref(returnTo: string): string {
-  return `${agentNativePath("/_agent-native/sign-in")}?return=${encodeURIComponent(returnTo)}`;
-}
-
 export default function RecordingPage() {
   const t = useT();
   useAutoTitleBridge();
@@ -877,7 +874,9 @@ export default function RecordingPage() {
         <div className="flex flex-wrap items-center justify-center gap-2">
           {needsSignIn ? (
             <Button asChild>
-              <a href={buildSignInHref(returnTo)}>{t("sharePage.signIn")}</a>
+              <a href={buildSignInReturnHref({ returnTo })}>
+                {t("sharePage.signIn")}
+              </a>
             </Button>
           ) : null}
           <Button asChild variant="outline">

package/corpus/templates/clips/app/routes/share.$shareId.tsx

@@ -7,6 +7,7 @@ import {
 } from "@agent-native/core/client/api-path";
 import { useSession, getBrowserTabId } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
+import { buildSignInReturnHref } from "@agent-native/core/client/ui";
 import {
   IconAlertTriangle,
   IconArrowLeft,
@@ -145,12 +146,6 @@ function failureDetail(reason: string | null | undefined): string | null {
   return trimmed.length > 800 ? `${trimmed.slice(0, 800)}...` : trimmed;
 }
 
-function buildSignInHref(returnTo: string): string {
-  return agentNativePath(
-    `/_agent-native/sign-in?return=${encodeURIComponent(returnTo)}`,
-  );
-}
-
 function shouldShowGeneratedTitleSkeleton(
   recording: { title: string | null | undefined; createdAt?: string | null },
   transcriptStatus?: string,
@@ -717,7 +712,10 @@ export default function ShareRoute() {
           action={
             shareId ? (
               <Button asChild size="sm">
-                <a href={buildSignInHref(`/r/${shareId}`)} className="gap-1.5">
+                <a
+                  href={buildSignInReturnHref({ returnTo: `/r/${shareId}` })}
+                  className="gap-1.5"
+                >
                   <IconLogin2 className="h-4 w-4 rtl:-scale-x-100" />
                   {t("sharePage.signIn")}
                 </a>
@@ -753,7 +751,9 @@ export default function ShareRoute() {
       !explicitFailure && !verificationPending && processingTimeout;
     const isFailure = explicitFailure || storageSetupFailure || stuckFailure;
     const canManageStorage = viewerCanEdit;
-    const signInHref = buildSignInHref(`/r/${recording.id}`);
+    const signInHref = buildSignInReturnHref({
+      returnTo: `/r/${recording.id}`,
+    });
     const detail = failureDetail(rawFailureReason);
     const label = storageSetupFailure
       ? t("sharePage.connectStorageFinish")

package/corpus/templates/clips/changelog/2026-07-26-long-agent-chat-turns-now-finish-instead-of-stopping-partway.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-26
+---
+
+Long agent chat turns now finish instead of stopping partway — they run on the durable background worker rather than being cut off by the hosting request limit.

package/corpus/templates/clips/changelog/2026-07-26-recordings-no-longer-get-stuck-on-uploading-uploads-now-hold.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-26
+---
+
+Recordings no longer get stuck on 'Uploading' — uploads now hold a renewable lease, can resume after a dropped connection, and stalled uploads report a clear failure instead of spinning.

package/corpus/templates/clips/server/db/schema.ts

@@ -165,6 +165,9 @@ export const recordings = table("recordings", {
     .notNull()
     .default("uploading"),
   uploadProgress: integer("upload_progress").notNull().default(0),
+  // Authoritative liveness for an in-flight upload: renewed by every chunk
+  // POST, and the only thing the upload reaper is allowed to consult.
+  uploadLeaseExpiresAt: text("upload_lease_expires_at"),
   failureReason: text("failure_reason"),
   loomImportClaimId: text("loom_import_claim_id"),
   loomImportClaimedAt: text("loom_import_claimed_at"),

package/corpus/templates/clips/server/jobs/brain-export.ts

@@ -10,6 +10,7 @@ import {
   writeBrainExportState,
 } from "../lib/brain-export-state.js";
 import { ownerEmailMatches } from "../lib/recordings.js";
+import { reapExpiredUploads } from "../lib/upload-lease.js";
 
 const SWEEP_INTERVAL_MS = 60_000;
 const MAX_ATTEMPTS = 8;
@@ -172,6 +173,9 @@ export default function registerBrainExportJob(): void {
     return;
   }
   setInterval(() => {
+    reapExpiredUploads().catch((error) =>
+      console.error("[uploads] lease reaper interval failed:", error),
+    );
     runBrainExportSweepOnce().catch((error) =>
       console.error("[brain-export] interval failed:", error),
     );

package/corpus/templates/clips/server/lib/recording-upload-state.ts

@@ -1,10 +1,5 @@
 import { getDbExec, isPostgres } from "@agent-native/core/db";
 
-const STALE_CHUNK_PRUNE_LIMIT = 100;
-const STALE_CHUNK_PRUNE_MIN_INTERVAL_MS = 5 * 60 * 1000;
-const DEFAULT_STALE_CHUNK_TTL_MS = 6 * 60 * 60 * 1000;
-const lastPruneByOwner = new Map<string, number>();
-
 function escapeLike(value: string): string {
   return value.replace(/[!%_]/g, (match) => `!${match}`);
 }
@@ -13,10 +8,6 @@ function chunkPrefix(recordingId: string): string {
   return `recording-chunks-${recordingId}-`;
 }
 
-function allChunksPrefix(): string {
-  return "recording-chunks-";
-}
-
 function likePrefix(prefix: string): string {
   return `${escapeLike(prefix)}%`;
 }
@@ -122,46 +113,3 @@ export async function sumRecordingChunkBytes(
   });
   return numberFromRowValue(rows[0]?.bytes);
 }
-
-export async function pruneStaleRecordingChunks(
-  ownerEmail: string,
-  options: {
-    now?: number;
-    ttlMs?: number;
-    minIntervalMs?: number;
-  } = {},
-): Promise<number> {
-  const now = options.now ?? Date.now();
-  const minIntervalMs =
-    options.minIntervalMs ?? STALE_CHUNK_PRUNE_MIN_INTERVAL_MS;
-  const lastPrune = lastPruneByOwner.get(ownerEmail) ?? 0;
-  if (minIntervalMs > 0 && now - lastPrune < minIntervalMs) return 0;
-  lastPruneByOwner.set(ownerEmail, now);
-
-  const ttlMs = options.ttlMs ?? DEFAULT_STALE_CHUNK_TTL_MS;
-  const cutoff = new Date(now - ttlMs).toISOString();
-  const createdAtExpression = isPostgres()
-    ? `value::jsonb ->> 'createdAt'`
-    : `json_extract(value, '$.createdAt')`;
-  const { rows } = await getDbExec().execute({
-    sql: `SELECT key FROM application_state WHERE session_id = ? AND key LIKE ? ESCAPE '!' AND ${createdAtExpression} IS NOT NULL AND ${createdAtExpression} < ? LIMIT ?`,
-    args: [
-      ownerEmail,
-      likePrefix(allChunksPrefix()),
-      cutoff,
-      STALE_CHUNK_PRUNE_LIMIT,
-    ],
-  });
-
-  let purged = 0;
-  for (const row of rows) {
-    const key = String(row.key ?? "");
-    if (!key) continue;
-    const result = await getDbExec().execute({
-      sql: `DELETE FROM application_state WHERE session_id = ? AND key = ?`,
-      args: [ownerEmail, key],
-    });
-    purged += result.rowsAffected ?? 0;
-  }
-  return purged;
-}