@agent-native/core 0.164.3 → 0.164.11

package/corpus/templates/clips/app/routes/r.$recordingId.tsx

@@ -45,7 +45,7 @@ import {
   IconSparkles,
   IconExternalLink,
 } from "@tabler/icons-react";
-import { useQuery } from "@tanstack/react-query";
+import { useQuery, useQueryClient } from "@tanstack/react-query";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { createPortal } from "react-dom";
 import {
@@ -110,6 +110,64 @@ const PROCESSING_STUCK_TIMEOUT_MS = 12 * 60 * 1000;
 const READY_MEDIA_SETTLE_POLL_MS = 20 * 1000;
 const READY_MEDIA_SETTLE_POLL_INTERVAL_MS = 1000;
 
+type RecordingReaction = {
+  id: string;
+  emoji: string;
+  videoTimestampMs: number;
+};
+
+type PendingRecordingReaction = RecordingReaction & {
+  recordingId: string;
+};
+
+export function mergeRecordingReactions(
+  serverReactions: RecordingReaction[] | undefined,
+  pendingReactions: PendingRecordingReaction[],
+  recordingId: string | undefined,
+) {
+  const seen = new Set<string>();
+  const merged: RecordingReaction[] = [];
+  const visiblePendingReactions = recordingId
+    ? pendingReactions.filter(
+        (reaction) => reaction.recordingId === recordingId,
+      )
+    : [];
+
+  for (const reaction of [
+    ...(serverReactions ?? []),
+    ...visiblePendingReactions,
+  ]) {
+    const key = `${reaction.id}:${reaction.emoji}:${reaction.videoTimestampMs}`;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    merged.push(reaction);
+  }
+
+  return merged;
+}
+
+export function removePendingReaction(
+  pendingReactions: PendingRecordingReaction[],
+  pendingId: string,
+) {
+  return pendingReactions.filter((reaction) => reaction.id !== pendingId);
+}
+
+export function handleReactionWrite(
+  response: { ok: boolean; status: number },
+  refresh: () => Promise<unknown>,
+) {
+  if (!response.ok) throw new Error(`react failed: ${response.status}`);
+  // The write is authoritative. A transient read failure must not tell the
+  // player that the reaction failed.
+  void Promise.resolve()
+    .then(refresh)
+    .catch((refreshError) => {
+      console.warn("[clips] reaction refresh failed", refreshError);
+    });
+  return true;
+}
+
 export function meta() {
   return [{ title: enMessages.recordingRoute.pageTitle }];
 }
@@ -263,16 +321,7 @@ export default function RecordingPage() {
   // live time bridge, so we fall back to the last position the player reported
   // via onTimeUpdate (seek/initial start).
   const resolvePlaybackMs = useCallback(() => {
-    const liveCt = playerRef.current?.video?.currentTime;
-    if (
-      typeof liveCt === "number" &&
-      Number.isFinite(liveCt) &&
-      liveCt >= 0 &&
-      liveCt < 1e7
-    ) {
-      return Math.floor(liveCt * 1000);
-    }
-    return currentMs;
+    return playerRef.current?.getCurrentOriginalMs() ?? currentMs;
   }, [currentMs]);
   // The compact layout stacks the panel below the video, so switching tabs
   // alone leaves the user looking at the player. Desktop always renders the
@@ -310,9 +359,13 @@ export default function RecordingPage() {
       recordingId ? { type: "recording" as const, id: recordingId } : null,
     [recordingId],
   );
+  const queryClient = useQueryClient();
   const lastPlayerStateWriteRef = useRef(0);
   const readyMediaPollRef = useRef<{ key: string; until: number } | null>(null);
   const [metadataRefreshUntil, setMetadataRefreshUntil] = useState(0);
+  const [pendingReactions, setPendingReactions] = useState<
+    PendingRecordingReaction[]
+  >([]);
 
   const playerDataQ = useActionQuery<any>(
     "get-recording-player-data",
@@ -414,7 +467,15 @@ export default function RecordingPage() {
     | "viewer"
     | undefined;
   const comments = playerDataQ.data?.comments ?? [];
-  const reactions = playerDataQ.data?.reactions ?? [];
+  const reactions = useMemo(
+    () =>
+      mergeRecordingReactions(
+        playerDataQ.data?.reactions,
+        pendingReactions,
+        recordingId,
+      ),
+    [pendingReactions, playerDataQ.data?.reactions, recordingId],
+  );
   const chapters = playerDataQ.data?.chapters ?? [];
   const transcriptSegments = playerDataQ.data?.transcript?.segments ?? [];
   const transcriptFullText = playerDataQ.data?.transcript?.fullText ?? null;
@@ -1643,11 +1704,10 @@ export default function RecordingPage() {
                       },
                     )
                       .then((res) => {
-                        if (!res.ok)
-                          throw new Error(`react failed: ${res.status}`);
-                        return playerDataQ.refetch();
+                        return handleReactionWrite(res, () =>
+                          playerDataQ.refetch(),
+                        );
                       })
-                      .then(() => true)
                       .catch((err) => {
                         console.warn("[clips] react failed", err);
                         return false;
@@ -1743,6 +1803,18 @@ export default function RecordingPage() {
                         onReact={(emoji) => {
                           tracking.reportReaction(emoji);
                           const liveMs = resolvePlaybackMs();
+                          const pendingReaction: PendingRecordingReaction = {
+                            id: `pending-${Date.now()}-${Math.random()
+                              .toString(36)
+                              .slice(2)}`,
+                            emoji,
+                            videoTimestampMs: liveMs,
+                            recordingId: recording.id,
+                          };
+                          setPendingReactions((current) => [
+                            ...current,
+                            pendingReaction,
+                          ]);
                           return fetch(
                             agentNativePath(
                               "/_agent-native/actions/react-to-recording",
@@ -1758,12 +1830,34 @@ export default function RecordingPage() {
                             },
                           )
                             .then((res) => {
-                              if (!res.ok)
-                                throw new Error(`react failed: ${res.status}`);
-                              return playerDataQ.refetch();
+                              const writeSucceeded = handleReactionWrite(
+                                res,
+                                () =>
+                                  Promise.all([
+                                    queryClient.invalidateQueries({
+                                      queryKey: [
+                                        "action",
+                                        "get-recording-player-data",
+                                      ],
+                                    }),
+                                    playerDataQ.refetch(),
+                                  ]),
+                              );
+                              setPendingReactions((current) =>
+                                removePendingReaction(
+                                  current,
+                                  pendingReaction.id,
+                                ),
+                              );
+                              return writeSucceeded;
                             })
-                            .then(() => true)
                             .catch((err) => {
+                              setPendingReactions((current) =>
+                                removePendingReaction(
+                                  current,
+                                  pendingReaction.id,
+                                ),
+                              );
                               console.warn("[clips] react failed", err);
                               return false;
                             });

package/corpus/templates/clips/app/routes/share.$shareId.tsx

@@ -124,6 +124,7 @@ type SharePageMetaRecording = {
   animatedThumbnailUrl: string | null;
   visibility: "private" | "org" | "public";
   status: "uploading" | "processing" | "ready" | "failed";
+  hasPassword: boolean;
   archivedAt: string | null;
   trashedAt: string | null;
 };
@@ -270,6 +271,7 @@ export async function loader({ params, url }: LoaderFunctionArgs) {
     animatedThumbnailUrl: null,
     visibility: rec.visibility,
     status: rec.status,
+    hasPassword: Boolean(rec.password),
     archivedAt: rec.archivedAt,
     trashedAt: rec.trashedAt,
   };
@@ -315,6 +317,7 @@ export const meta: MetaFunction<typeof loader> = ({ loaderData }) => {
   return buildClipsShareMeta({
     recording: loaderData?.recording ?? null,
     origin: loaderData?.origin ?? null,
+    basePath: appBasePath(),
     shareUrl: loaderData?.shareUrl ?? null,
   });
 };
@@ -676,6 +679,7 @@ export default function ShareRoute() {
   // an anonymous viewer sees the same controls but triggers the sign-in
   // prompt instead (see `requireSignIn` below).
   const viewerCanComment = Boolean(session) && viewerRole != null;
+  const viewerCanUseFullscreenInteractions = !session || viewerCanComment;
   const viewerIsOwner = Boolean(dataQ.data?.data?.viewer?.isOwner);
   const canReshareLink =
     (viewerRole === "viewer" || viewerRole === "commenter") &&
@@ -1249,66 +1253,85 @@ export default function ShareRoute() {
               cta={firstCta}
               onCtaClick={() => tracking.reportCtaClick()}
               onTimeUpdate={(ms) => setCurrentMs(ms)}
-              onCommentClick={() => setPanel("comments")}
+              onCommentClick={
+                viewerCanUseFullscreenInteractions
+                  ? () => setPanel("comments")
+                  : undefined
+              }
               onFullscreenChange={setIsPlayerFullscreen}
-              enableComments={recording.enableComments}
-              onAddComment={() => {
-                if (!session) {
-                  requireSignIn("comment");
-                  return;
-                }
-                const liveCt = isLoomEmbedBacked
-                  ? null
-                  : playerRef.current?.video?.currentTime;
-                const liveMs =
-                  typeof liveCt === "number" &&
-                  Number.isFinite(liveCt) &&
-                  liveCt >= 0 &&
-                  liveCt < 1e7
-                    ? Math.floor(liveCt * 1000)
-                    : currentMs;
-                setCommentAtMs(liveMs);
-                setCommentOpen(true);
-              }}
-              enableReactions={recording.enableReactions}
-              onReact={(emoji) => {
-                if (!session) {
-                  requireSignIn("react");
-                  return false;
-                }
-                tracking.reportReaction(emoji);
-                const liveCt = isLoomEmbedBacked
-                  ? null
-                  : playerRef.current?.video?.currentTime;
-                const liveMs =
-                  typeof liveCt === "number" &&
-                  Number.isFinite(liveCt) &&
-                  liveCt >= 0 &&
-                  liveCt < 1e7
-                    ? Math.floor(liveCt * 1000)
-                    : currentMs;
-                return fetch(
-                  agentNativePath("/_agent-native/actions/react-to-recording"),
-                  {
-                    method: "POST",
-                    headers: { "Content-Type": "application/json" },
-                    body: JSON.stringify({
-                      recordingId: recording.id,
-                      emoji,
-                      videoTimestampMs: liveMs,
-                    }),
-                  },
-                )
-                  .then((res) => {
-                    if (!res.ok) throw new Error(`react failed: ${res.status}`);
-                    return dataQ.refetch();
-                  })
-                  .then(() => true)
-                  .catch((err) => {
-                    console.warn("[clips] react failed", err);
-                    return false;
-                  });
-              }}
+              enableComments={
+                recording.enableComments && viewerCanUseFullscreenInteractions
+              }
+              onAddComment={
+                viewerCanUseFullscreenInteractions
+                  ? () => {
+                      if (!session) {
+                        requireSignIn("comment");
+                        return;
+                      }
+                      const liveCt = isLoomEmbedBacked
+                        ? null
+                        : playerRef.current?.video?.currentTime;
+                      const liveMs =
+                        typeof liveCt === "number" &&
+                        Number.isFinite(liveCt) &&
+                        liveCt >= 0 &&
+                        liveCt < 1e7
+                          ? Math.floor(liveCt * 1000)
+                          : currentMs;
+                      setCommentAtMs(liveMs);
+                      setCommentOpen(true);
+                    }
+                  : undefined
+              }
+              enableReactions={
+                recording.enableReactions && viewerCanUseFullscreenInteractions
+              }
+              onReact={
+                viewerCanUseFullscreenInteractions
+                  ? (emoji) => {
+                      if (!session) {
+                        requireSignIn("react");
+                        return false;
+                      }
+                      tracking.reportReaction(emoji);
+                      const liveCt = isLoomEmbedBacked
+                        ? null
+                        : playerRef.current?.video?.currentTime;
+                      const liveMs =
+                        typeof liveCt === "number" &&
+                        Number.isFinite(liveCt) &&
+                        liveCt >= 0 &&
+                        liveCt < 1e7
+                          ? Math.floor(liveCt * 1000)
+                          : currentMs;
+                      return fetch(
+                        agentNativePath(
+                          "/_agent-native/actions/react-to-recording",
+                        ),
+                        {
+                          method: "POST",
+                          headers: { "Content-Type": "application/json" },
+                          body: JSON.stringify({
+                            recordingId: recording.id,
+                            emoji,
+                            videoTimestampMs: liveMs,
+                          }),
+                        },
+                      )
+                        .then((res) => {
+                          if (!res.ok)
+                            throw new Error(`react failed: ${res.status}`);
+                          return dataQ.refetch();
+                        })
+                        .then(() => true)
+                        .catch((err) => {
+                          console.warn("[clips] react failed", err);
+                          return false;
+                        });
+                    }
+                  : undefined
+              }
               className="h-full w-full rounded-none sm:rounded-xl"
             />
             {commentOpen && viewerCanComment
@@ -1351,23 +1374,15 @@ export default function ShareRoute() {
                 {recording.enableComments ? (
                   <TimestampedCommentButton
                     enableComments={recording.enableComments}
-                    canComment
+                    canComment={!session || viewerCanComment}
                     className="shrink-0"
                     onOpen={() => {
                       if (!session) {
                         requireSignIn("comment");
                         return;
                       }
-                      const liveCt = isLoomEmbedBacked
-                        ? null
-                        : playerRef.current?.video?.currentTime;
                       const liveMs =
-                        typeof liveCt === "number" &&
-                        Number.isFinite(liveCt) &&
-                        liveCt >= 0 &&
-                        liveCt < 1e7
-                          ? Math.floor(liveCt * 1000)
-                          : currentMs;
+                        playerRef.current?.getCurrentOriginalMs() ?? currentMs;
                       setCommentAtMs(liveMs);
                       setCommentOpen(true);
                     }}
@@ -1376,22 +1391,15 @@ export default function ShareRoute() {
                 {recording.enableReactions ? (
                   <ReactionsTray
                     reactions={reactions}
+                    disabled={Boolean(session) && !viewerCanComment}
                     onReact={(emoji) => {
                       if (!session) {
                         requireSignIn("react");
                         return false;
                       }
                       tracking.reportReaction(emoji);
-                      const liveCt = isLoomEmbedBacked
-                        ? null
-                        : playerRef.current?.video?.currentTime;
                       const liveMs =
-                        typeof liveCt === "number" &&
-                        Number.isFinite(liveCt) &&
-                        liveCt >= 0 &&
-                        liveCt < 1e7
-                          ? Math.floor(liveCt * 1000)
-                          : currentMs;
+                        playerRef.current?.getCurrentOriginalMs() ?? currentMs;
                       return fetch(
                         agentNativePath(
                           "/_agent-native/actions/react-to-recording",

package/corpus/templates/clips/changelog/2026-08-19-clips-nightly-builds-are-available-for-trying-the-latest-upd.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-08-19
+---
+
+Clips Nightly builds are available for trying the latest updates.

package/corpus/templates/clips/changelog/2026-08-19-social-preview-video-frames.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-19
+---
+
+Shared clips now show a video frame in social previews when no thumbnail is stored.

package/corpus/templates/clips/desktop/README.md

@@ -79,13 +79,28 @@ Clips registers itself to open at login by default, then runs quietly in the men
 
 ## Releases + auto-update
 
-Clips Desktop ships on its own release channel — tag prefix `clips-v*`, separate from the main `v*` tags used by `packages/desktop-app` (Electron). The in-app updater pulls its manifest from the hosted Clips endpoint (`/api/clips-updater.json`), which proxies the stable pointer release (`clips-latest`) when a signed manifest exists and otherwise returns a no-update manifest so end users do not see release-channel setup errors.
+Clips Desktop has separate stable and Nightly lanes. The stable app keeps the
+`Clips` name, `Clips` binary, `clips://` scheme, and `com.clips.tray` identifier;
+its releases use `clips-v*` tags, the `clips-latest` updater pointer, and
+`/api/clips-updater.json`. Nightly builds are named `Clips Nightly`, use the
+`Clips-Nightly` binary, the `clips-nightly://` scheme, and
+`com.clips.tray.nightly`. They use the `clips-nightly-v*` tags,
+`clips-nightly-latest` pointer, and `/api/clips-updater.json?channel=nightly`.
+The in-app updater only sees the pointer for the channel that produced the
+installed app, and the separate native binary/desktop entry keeps both lanes
+installable at once.
 
 ### Shipping a release
 
-1. Bump `templates/clips/desktop/package.json` version (or pass it via workflow input).
-2. Trigger **Clips Desktop Release** in GitHub Actions (`.github/workflows/clips-desktop-release.yml`). It builds macOS (universal), Windows, and Linux x86_64 installers, signs updater artifacts, and uploads them to `clips-v{version}`.
-3. After all three platforms finish, the `publish-release` job flips the versioned release out of draft and refreshes the `clips-latest` pointer release with the new manifest. Installed macOS, Windows, and Linux AppImage copies auto-download it in the background on their next hourly or app-focus update check.
+1. For a stable release, dispatch **Clips Desktop Release** in GitHub Actions
+   with `channel: production` and an explicit version. Stable releases are
+   deliberate workflow runs; pushes to `main` never replace the stable lane.
+2. Pushes to `main` automatically build the Nightly lane. A Nightly run can
+   also be dispatched explicitly with `channel: nightly`.
+3. The workflow builds macOS (universal), Windows, and Linux x86_64 installers,
+   signs updater artifacts, and publishes the versioned release plus that
+   channel's pointer manifest. Installed copies auto-download only updates
+   from their own lane on the next hourly or app-focus check.
 
 ### Auto-update flow (inside the app)
 

package/corpus/templates/clips/desktop/src/app.tsx

@@ -2062,11 +2062,19 @@ export function App() {
       const controller = new AbortController();
       const abortTimer = setTimeout(() => controller.abort(), POLL_ABORT_MS);
       try {
-        const exchangeParams = new URLSearchParams({ flow_id: flowId });
-        if (verifier) exchangeParams.set("verifier", verifier);
         const xr = await fetch(
-          `${base}/_agent-native/auth/desktop-exchange?${exchangeParams.toString()}`,
-          { credentials: "include", signal: controller.signal },
+          `${base}/_agent-native/auth/desktop-exchange?flow_id=${encodeURIComponent(flowId)}`,
+          {
+            credentials: "include",
+            ...(verifier
+              ? {
+                  headers: {
+                    "X-Agent-Native-Desktop-Verifier": verifier,
+                  },
+                }
+              : {}),
+            signal: controller.signal,
+          },
         );
         if (!xr.ok) {
           if (Date.now() - start > TIMEOUT_MS) {
@@ -2130,25 +2138,79 @@ export function App() {
     void tick();
   }
 
-  // Google and magic-link verification open in the system browser because
-  // the Tauri WebView has its own cookie jar. Both flows return through the
-  // same short-lived server-side exchange.
+  // Google verification stays in the bound Tauri WebView so the callback sees
+  // the same browser-binding cookie. Magic-link verification still completes
+  // in the system browser through its own exchange flow.
   async function signInExternal() {
     if (signInInflightRef.current) return;
     signInInflightRef.current = true;
 
     try {
       setSignInError(null);
-      const flowId =
-        crypto.randomUUID?.() ||
-        Math.random().toString(36).slice(2) + Date.now().toString(36);
+      const flowId = crypto.randomUUID?.() ?? null;
+      const verifier = (() => {
+        const randomUuid = crypto.randomUUID;
+        if (typeof randomUuid === "function") {
+          return `${randomUuid.call(crypto)}${randomUuid.call(crypto)}`;
+        }
+        if (typeof crypto.getRandomValues === "function") {
+          const bytes = new Uint8Array(32);
+          crypto.getRandomValues(bytes);
+          let binary = "";
+          for (const byte of bytes) binary += String.fromCharCode(byte);
+          return btoa(binary)
+            .replace(/\+/g, "-")
+            .replace(/\//g, "_")
+            .replace(/=+$/, "");
+        }
+        return null;
+      })();
+      if (!flowId || !verifier) {
+        // A Math.random flow id is guessable, which lets anyone else claim this
+        // sign-in's exchange slot; fail closed rather than weaken the credential.
+        throw new Error("Secure OAuth flow generation is unavailable.");
+      }
       const base = serverUrl.replace(/\/+$/, "");
 
-      await openExternal(
-        `${base}/_agent-native/google/auth-url?desktop=1&flow_id=${flowId}&redirect=1`,
+      const authParams = new URLSearchParams({
+        desktop: "1",
+        flow_id: flowId,
+        webview: "1",
+      });
+      const authResponse = await fetch(
+        `${base}/_agent-native/google/auth-url?${authParams.toString()}`,
+        {
+          method: "POST",
+          headers: {
+            Accept: "application/json",
+            "X-Agent-Native-Desktop-Verifier": verifier,
+          },
+        },
       );
+      let authPayload: {
+        url?: unknown;
+        error?: unknown;
+        message?: unknown;
+      };
+      try {
+        authPayload = (await authResponse.json()) as typeof authPayload;
+      } catch {
+        throw new Error("Could not start Google sign-in.");
+      }
+      if (!authResponse.ok || typeof authPayload?.url !== "string") {
+        const message =
+          typeof authPayload.message === "string"
+            ? authPayload.message
+            : typeof authPayload.error === "string"
+              ? authPayload.error
+              : "Could not start Google sign-in.";
+        throw new Error(message);
+      }
       setSignInPending("google");
-      startDesktopAuthExchange(flowId, "google");
+      // Stay in this exact WebView: the auth bootstrap set the HttpOnly
+      // browser-binding cookie here, and the callback returns this page with
+      // the staged session cookie after Google completes.
+      window.location.href = authPayload.url;
     } catch (err) {
       console.error("[clips-tray] signInExternal failed:", err);
       signInInflightRef.current = false;
@@ -3912,8 +3974,8 @@ export function App() {
   // (not a separate Tauri window). This avoids Tauri 2's separate-WebKit-
   // data-store-per-WebviewWindow cookie-jar issue — the cookie is set in
   // the same webview that reads it on the next /auth/session poll.
-  // Google and magic-link verification use the system browser, while the
-  // password fallback stays inline in this WebView.
+  // Google verification uses the bound WebView, while magic-link verification
+  // uses the system browser and password stays inline here.
   if (authStatus === "anon") {
     return (
       <div className="app" ref={appRef}>
@@ -4822,7 +4884,7 @@ function SignInForm({
         type="button"
         className="signin-google"
         onClick={onUseBrowser}
-        title="Opens your default browser to complete Google sign-in"
+        title="Returns to Clips to complete Google sign-in"
       >
         <GoogleIcon />
         Sign in with Google

package/corpus/templates/clips/desktop/src-tauri/Cargo.toml

@@ -15,8 +15,9 @@ crate-type = ["lib", "cdylib", "staticlib"]
 
 # Force the dev binary name so macOS shows "Clips" in the Dock / app switcher
 # (macOS derives the display name from the executable filename when the app
-# is unbundled — e.g. during `tauri dev`). Bundled .app builds read the name
-# from `productName` in tauri.conf.json instead.
+# is unbundled — e.g. during `tauri dev`). The Nightly release workflow
+# rewrites this target and tauri.conf.json's mainBinaryName to
+# `Clips-Nightly` before packaging so both lanes can coexist.
 [[bin]]
 name = "Clips"
 path = "src/main.rs"

package/corpus/templates/clips/desktop/src-tauri/tauri.conf.json

@@ -2,6 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Clips",
   "version": "0.1.1",
+  "mainBinaryName": "Clips",
   "identifier": "com.clips.tray",
   "build": {
     "beforeDevCommand": "pnpm vite:dev",