@agent-native/core 0.157.0 → 0.157.2

package/corpus/templates/clips/actions/import-loom-recording.ts

@@ -144,7 +144,7 @@ export default defineAction({
   description:
     "Import a public Loom share URL, or a direct link to a video file, into Clips as a playable recording. Loom links create the recording immediately and download/reupload Loom's public MP4 plus import Loom's public transcript in the background, since Loom's CDN plus a reupload can take longer than a single request should block on. Other direct video links (e.g. an MP4/WebM/MOV hosted by another screen recorder) are downloaded and reuploaded synchronously without transcript metadata — use request-transcript afterward. If storage is not connected, creates a waiting recording that can be retried after storage setup.",
   schema: ImportLoomRecordingSchema,
-  run: async (args) => {
+  run: async (args, actionContext) => {
     const loomId = extractLoomVideoId(args.url);
     const isLoom = Boolean(loomId);
     const loomShareUrl = isLoom ? normalizeLoomShareUrl(args.url) : null;
@@ -214,8 +214,10 @@ export default defineAction({
     const { organizationId } = await requireOrganizationAccess(
       existingRecording?.organizationId ?? args.organizationId,
     );
-    const defaultVisibility =
-      await getDefaultRecordingVisibility(organizationId);
+    const defaultVisibility = await getDefaultRecordingVisibility(
+      organizationId,
+      actionContext?.userEmail ?? ownerEmail,
+    );
 
     const now = new Date().toISOString();
     const id = existingRecording?.id ?? nanoid();

package/corpus/templates/clips/actions/request-recording-access.ts

@@ -0,0 +1,305 @@
+import { createHash } from "node:crypto";
+
+import { defineAction } from "@agent-native/core";
+import { notify } from "@agent-native/core/notifications";
+import {
+  emailStrong,
+  getAppProductionUrl,
+  isEmailConfigured,
+  renderEmail,
+  sendEmail,
+  verifyScopedAgentAccessToken,
+  withConfiguredAppBasePath,
+} from "@agent-native/core/server";
+import {
+  getRequestUserEmail,
+  getRequestOrgId,
+  getRequestUserName,
+} from "@agent-native/core/server/request-context";
+import { resolveAccess } from "@agent-native/core/sharing";
+import { and, eq } from "drizzle-orm";
+import { z } from "zod";
+
+import { getDb, schema } from "../server/db/index.js";
+import { normalizeOwnerEmail } from "../server/lib/recordings.js";
+import {
+  CLIPS_ACCESS_REQUEST_TOKEN_PREFIX,
+  recordingSharePath,
+} from "../shared/recording-link.js";
+
+export const CLIPS_ACCESS_REQUEST_EMAIL_ID = "clips.access-request";
+
+function accessRequestEventId(
+  recordingId: string,
+  requesterEmail: string,
+): string {
+  return (
+    "access-request-" +
+    createHash("sha256")
+      .update(recordingId)
+      .update("\0")
+      .update(requesterEmail)
+      .digest("hex")
+  );
+}
+
+function httpError(message: string, statusCode: number): Error {
+  return Object.assign(new Error(message), { statusCode });
+}
+
+function displayNameForEmail(email: string): string {
+  const local = email.replace(/@.*/, "");
+  const parts = local
+    .split(/[._+-]+/)
+    .map((part) => part.trim())
+    .filter(Boolean);
+  if (parts.length === 0) return email;
+  return parts
+    .slice(0, 2)
+    .map((part) => part.charAt(0).toUpperCase() + part.slice(1))
+    .join(" ");
+}
+
+function absoluteRecordingUrl(recordingId: string): string {
+  return `${withConfiguredAppBasePath(getAppProductionUrl()).replace(/\/+$/, "")}${recordingSharePath(recordingId)}`;
+}
+
+export function renderRecordingAccessRequestEmail(input: {
+  requesterName: string;
+  requesterEmail: string;
+  recordingTitle: string;
+  url: string;
+}) {
+  const subject = `${input.requesterName} requested access to "${input.recordingTitle}"`;
+  return {
+    subject,
+    ...renderEmail({
+      brandName: "Clips",
+      preheader: subject,
+      heading: "Access request",
+      paragraphs: [
+        `${emailStrong(input.requesterName)} (${emailStrong(input.requesterEmail)}) requested access to ${emailStrong(input.recordingTitle)}.`,
+        "Open the Clip and use Share to grant access if this request should be approved.",
+      ],
+      cta: { label: "Open Clip", url: input.url },
+      footer: "You received this because you own this Clip.",
+    }),
+  };
+}
+
+async function notifyOwner(input: {
+  recordingId: string;
+  recordingTitle: string;
+  ownerEmail: string | null;
+  requesterEmail: string;
+  requesterName: string;
+}): Promise<boolean> {
+  if (!input.ownerEmail || input.ownerEmail === input.requesterEmail) {
+    return false;
+  }
+  if (!(await isEmailConfigured())) return false;
+
+  await sendEmail({
+    ...renderRecordingAccessRequestEmail({
+      requesterName: input.requesterName,
+      requesterEmail: input.requesterEmail,
+      recordingTitle: input.recordingTitle,
+      url: absoluteRecordingUrl(input.recordingId),
+    }),
+    to: input.ownerEmail,
+    replyTo: input.requesterEmail,
+    templateId: CLIPS_ACCESS_REQUEST_EMAIL_ID,
+  });
+  return true;
+}
+
+export default defineAction({
+  description:
+    "Request access to a private Clips recording. Records the request and notifies the owner in-app and by email when configured.",
+  schema: z.object({
+    recordingId: z
+      .string()
+      .min(1)
+      .describe("Recording ID to request access to."),
+    accessRequestToken: z
+      .string()
+      .trim()
+      .min(1)
+      .optional()
+      .describe("Short-lived capability from the private share page."),
+  }),
+  agentTool: false,
+  run: async ({ recordingId, accessRequestToken }) => {
+    const requesterEmail = getRequestUserEmail();
+    if (!requesterEmail) {
+      throw httpError("Sign in to request access to this clip.", 401);
+    }
+
+    const normalizedRequesterEmail = normalizeOwnerEmail(requesterEmail);
+    const access = await resolveAccess("recording", recordingId, {
+      userEmail: normalizedRequesterEmail,
+      orgId: getRequestOrgId() ?? undefined,
+    });
+
+    if (access) {
+      const recording = access.resource as {
+        trashedAt?: string | null;
+      };
+      if (recording.trashedAt) {
+        throw httpError(`Recording ${recordingId} not found`, 404);
+      }
+      return {
+        ok: true as const,
+        alreadyHasAccess: true,
+        alreadyRequested: false,
+        notifiedOwner: false,
+        message: "You already have access to this clip.",
+      };
+    }
+
+    if (
+      !accessRequestToken ||
+      !verifyScopedAgentAccessToken(accessRequestToken, {
+        resourceKind: CLIPS_ACCESS_REQUEST_TOKEN_PREFIX,
+        resourceId: recordingId,
+      }).ok
+    ) {
+      throw httpError(`Recording ${recordingId} not found`, 404);
+    }
+
+    const db = getDb();
+    const [recording] = await db
+      .select({
+        id: schema.recordings.id,
+        title: schema.recordings.title,
+        ownerEmail: schema.recordings.ownerEmail,
+        visibility: schema.recordings.visibility,
+        trashedAt: schema.recordings.trashedAt,
+      })
+      .from(schema.recordings)
+      .where(eq(schema.recordings.id, recordingId))
+      .limit(1);
+
+    if (
+      !recording ||
+      recording.trashedAt ||
+      recording.visibility === "public"
+    ) {
+      throw httpError(`Recording ${recordingId} not found`, 404);
+    }
+
+    const previousRequests = await db
+      .select({ payload: schema.recordingEvents.payload })
+      .from(schema.recordingEvents)
+      .where(
+        and(
+          eq(schema.recordingEvents.recordingId, recordingId),
+          eq(schema.recordingEvents.kind, "access-request"),
+        ),
+      );
+    const alreadyRequested = previousRequests.some((event) => {
+      try {
+        const payload = JSON.parse(event.payload) as {
+          requesterEmail?: string;
+        };
+        return (
+          typeof payload.requesterEmail === "string" &&
+          normalizeOwnerEmail(payload.requesterEmail) ===
+            normalizedRequesterEmail
+        );
+      } catch {
+        // coercion-ok: malformed historical event payload cannot represent a matching requester.
+        return false;
+      }
+    });
+
+    if (alreadyRequested) {
+      return {
+        ok: true as const,
+        alreadyHasAccess: false,
+        alreadyRequested: true,
+        notifiedOwner: false,
+        message: "Your access request is already with the clip owner.",
+      };
+    }
+
+    const requesterName =
+      getRequestUserName()?.trim() ||
+      displayNameForEmail(normalizedRequesterEmail);
+    const requestedAt = new Date().toISOString();
+    const [insertedRequest] = await db
+      .insert(schema.recordingEvents)
+      .values({
+        id: accessRequestEventId(recordingId, normalizedRequesterEmail),
+        recordingId,
+        viewerId: null,
+        kind: "access-request",
+        timestampMs: 0,
+        payload: JSON.stringify({
+          requesterEmail: normalizedRequesterEmail,
+          requesterName,
+          requestedAt,
+        }),
+        createdAt: requestedAt,
+      })
+      .onConflictDoNothing()
+      .returning({ id: schema.recordingEvents.id });
+
+    // Historical requests use random IDs, so the read above still handles
+    // them. New requests use a deterministic primary key so concurrent
+    // callers have one database-backed winner before notifications are sent.
+    if (!insertedRequest) {
+      return {
+        ok: true as const,
+        alreadyHasAccess: false,
+        alreadyRequested: true,
+        notifiedOwner: false,
+        message: "Your access request is already with the clip owner.",
+      };
+    }
+
+    const ownerEmail = recording.ownerEmail
+      ? normalizeOwnerEmail(recording.ownerEmail)
+      : null;
+    let notifiedOwner = false;
+    try {
+      if (ownerEmail) {
+        await notify(
+          {
+            severity: "info",
+            title: "Clip access requested",
+            body: `${requesterName} requested access to “${recording.title}”.`,
+            metadata: {
+              recordingId,
+              requesterEmail: normalizedRequesterEmail,
+              url: absoluteRecordingUrl(recordingId),
+            },
+          },
+          { owner: ownerEmail },
+        );
+      }
+      notifiedOwner = await notifyOwner({
+        recordingId,
+        recordingTitle: recording.title,
+        ownerEmail,
+        requesterEmail: normalizedRequesterEmail,
+        requesterName,
+      });
+    } catch (error) {
+      console.warn(
+        "[recording-access] access request notification failed:",
+        error,
+      );
+    }
+
+    return {
+      ok: true as const,
+      alreadyHasAccess: false,
+      alreadyRequested: false,
+      notifiedOwner,
+      message: notifiedOwner
+        ? "Access request sent to the clip owner."
+        : "Access request recorded for the clip owner.",
+    };
+  },
+});

package/corpus/templates/clips/actions/stitch-recordings.ts

@@ -84,7 +84,7 @@ export default defineAction({
     height: z.coerce.number().int().optional(),
     folderId: z.string().nullish(),
   }),
-  run: async (args) => {
+  run: async (args, actionContext) => {
     const db = getDb();
     const ownerEmail = getCurrentOwnerEmail();
     const videoUrl = args.videoUrl?.trim() || null;
@@ -134,8 +134,10 @@ export default defineAction({
       assertNativeRecordingMedia(source);
     }
     const organizationId = ordered[0].organizationId;
-    const defaultVisibility =
-      await getDefaultRecordingVisibility(organizationId);
+    const defaultVisibility = await getDefaultRecordingVisibility(
+      organizationId,
+      actionContext?.userEmail ?? ownerEmail,
+    );
 
     const totalDuration =
       args.durationMs ??

package/corpus/templates/clips/app/components/meetings/share-meeting-dialog.tsx

@@ -4,7 +4,8 @@ import {
   useActionQuery,
 } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
-import { IconChevronDown, IconLink, IconMail } from "@tabler/icons-react";
+import { ShareAgentsSection } from "@agent-native/toolkit/sharing";
+import { IconLink, IconMail } from "@tabler/icons-react";
 import {
   useCallback,
   useEffect,
@@ -27,11 +28,6 @@ import {
   type Visibility,
 } from "@/components/sharing/share-ui";
 import { Button } from "@/components/ui/button";
-import {
-  Collapsible,
-  CollapsibleContent,
-  CollapsibleTrigger,
-} from "@/components/ui/collapsible";
 import {
   Popover,
   PopoverContent,
@@ -220,6 +216,7 @@ function LinkTab({
     sharesQuery.isLoading ||
     !sharesLoaded ||
     (!isPublic && (createAgentLink.isPending || !agentLink));
+  const visibleAgentLink = isPublic ? shareUrl : agentLink;
 
   useEffect(() => {
     setIncludeTranscript(shareTranscript);
@@ -301,66 +298,44 @@ function LinkTab({
         />
       ) : null}
 
-      {!isPublic ? (
-        <Collapsible
-          open={agentDetailsOpen}
-          onOpenChange={setAgentDetailsOpen}
-          className="overflow-hidden rounded-md border border-border"
-        >
-          <CollapsibleTrigger asChild>
-            <button
-              type="button"
-              className="flex min-h-10 w-full items-center justify-between gap-3 px-3 py-2 text-left text-sm font-medium transition-colors hover:bg-muted/50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-inset"
-            >
-              <span className="flex min-w-0 items-center gap-2 truncate">
-                <IconLink
-                  aria-hidden="true"
-                  className="size-3.5 shrink-0 text-muted-foreground"
-                  strokeWidth={1.8}
-                />
-                {t("shareDialog.shareWithAgents")}
-              </span>
-              <IconChevronDown
-                aria-hidden="true"
-                className={`size-4 shrink-0 text-muted-foreground transition-transform ${agentDetailsOpen ? "rotate-180" : ""}`}
-              />
-            </button>
-          </CollapsibleTrigger>
-          <CollapsibleContent className="clips-collapsible-content border-t border-border px-3 py-3">
-            <div className="space-y-2">
-              <CopyField
-                label={t("shareDialog.shareWithAgents")}
-                value={agentLink}
-                disabled={agentShareDisabled}
-              />
-              {sharesLoaded ? (
-                <>
+      <ShareAgentsSection
+        label={t("shareDialog.shareWithAgents")}
+        open={agentDetailsOpen}
+        onOpenChange={setAgentDetailsOpen}
+        contentClassName="clips-collapsible-content"
+      >
+        <div className="space-y-2">
+          <CopyField
+            label={t("shareDialog.shareLink")}
+            value={visibleAgentLink}
+            disabled={agentShareDisabled}
+          />
+          {sharesLoaded ? (
+            <>
+              <p className="text-xs text-muted-foreground">
+                {t("shareMeeting.agentLinkDescription")}
+              </p>
+              {agentLinkError ? (
+                <div className="flex items-center justify-between gap-2 rounded-md border border-border bg-muted/30 px-3 py-2">
                   <p className="text-xs text-muted-foreground">
-                    {t("shareMeeting.agentLinkDescription")}
+                    {t("shareDialog.agentLinkUnavailable")}
                   </p>
-                  {agentLinkError ? (
-                    <div className="flex items-center justify-between gap-2 rounded-md border border-border bg-muted/30 px-3 py-2">
-                      <p className="text-xs text-muted-foreground">
-                        {t("shareDialog.agentLinkUnavailable")}
-                      </p>
-                      <Button
-                        type="button"
-                        variant="ghost"
-                        size="sm"
-                        className="h-7"
-                        onClick={() => void loadAgentLink()}
-                        disabled={createAgentLink.isPending}
-                      >
-                        {t("shareDialog.retryAgentLink")}
-                      </Button>
-                    </div>
-                  ) : null}
-                </>
+                  <Button
+                    type="button"
+                    variant="ghost"
+                    size="sm"
+                    className="h-7"
+                    onClick={() => void loadAgentLink()}
+                    disabled={createAgentLink.isPending}
+                  >
+                    {t("shareDialog.retryAgentLink")}
+                  </Button>
+                </div>
               ) : null}
-            </div>
-          </CollapsibleContent>
-        </Collapsible>
-      ) : null}
+            </>
+          ) : null}
+        </div>
+      </ShareAgentsSection>
     </div>
   );
 }