@agent-native/core 0.173.0 → 0.173.1-nightly-20260825133915

package/corpus/README.md

@@ -31,4 +31,4 @@ rg -n "defineAction|useActionQuery" node_modules/@agent-native/core/corpus
 
 ## Generated Counts
 
-- template files: 8598
+- template files: 8606

package/corpus/templates/analytics/.agents/skills/actions/SKILL.md

@@ -121,6 +121,7 @@ Everything else — CRUD, settings, search, list/detail reads, auth state, anyth
 
 - **Do** keep one action, one job; document a reusable action (when to use it, key args, return fields to preserve) in `AGENTS.md` once it's called from outside one narrow screen; promote workflow-heavy actions (provider-backed, cross-app, MCP/A2A, multi-step) into a skill.
 - **Do** use `fail()` for user-friendly errors and import primitives from `@agent-native/core`(`/action`) instead of redefining them; use the core `upload-image` action or `uploadFile()` for durable images/files — never base64 into SQL, markdown, or action results.
+- **Do** signal failure by throwing (`fail()`), never by returning `{ error: ... }`. A returned envelope is a successful return everywhere the framework looks: the retry breakers (`MAX_IDENTICAL_TOOL_ERRORS`, `MAX_SAME_ERROR_ACROSS_ARGUMENTS`) never count it, the call is recorded `completedSideEffect: true` even though nothing was written, and `failed_tools` / `$ai_is_error` stay clean while the model keeps guessing. One production run spent 32% of its cost on three rejected writes that every dashboard reported as successes.
 - **Don't** re-export actions as REST — `/_agent-native/actions/:name` is already the REST surface; duplicating it under `/api/*` hides the operation from agents.
 - **Don't** reach for provider integrations, `outputSchema`, `authorize`, `needsApproval`, or `_agentImages` without checking `references/` first — each has sharp edges covered there, not here.
 

package/corpus/templates/assets/.agents/skills/actions/SKILL.md

@@ -121,6 +121,7 @@ Everything else — CRUD, settings, search, list/detail reads, auth state, anyth
 
 - **Do** keep one action, one job; document a reusable action (when to use it, key args, return fields to preserve) in `AGENTS.md` once it's called from outside one narrow screen; promote workflow-heavy actions (provider-backed, cross-app, MCP/A2A, multi-step) into a skill.
 - **Do** use `fail()` for user-friendly errors and import primitives from `@agent-native/core`(`/action`) instead of redefining them; use the core `upload-image` action or `uploadFile()` for durable images/files — never base64 into SQL, markdown, or action results.
+- **Do** signal failure by throwing (`fail()`), never by returning `{ error: ... }`. A returned envelope is a successful return everywhere the framework looks: the retry breakers (`MAX_IDENTICAL_TOOL_ERRORS`, `MAX_SAME_ERROR_ACROSS_ARGUMENTS`) never count it, the call is recorded `completedSideEffect: true` even though nothing was written, and `failed_tools` / `$ai_is_error` stay clean while the model keeps guessing. One production run spent 32% of its cost on three rejected writes that every dashboard reported as successes.
 - **Don't** re-export actions as REST — `/_agent-native/actions/:name` is already the REST surface; duplicating it under `/api/*` hides the operation from agents.
 - **Don't** reach for provider integrations, `outputSchema`, `authorize`, `needsApproval`, or `_agentImages` without checking `references/` first — each has sharp edges covered there, not here.
 

package/corpus/templates/brain/.agents/skills/actions/SKILL.md

@@ -121,6 +121,7 @@ Everything else — CRUD, settings, search, list/detail reads, auth state, anyth
 
 - **Do** keep one action, one job; document a reusable action (when to use it, key args, return fields to preserve) in `AGENTS.md` once it's called from outside one narrow screen; promote workflow-heavy actions (provider-backed, cross-app, MCP/A2A, multi-step) into a skill.
 - **Do** use `fail()` for user-friendly errors and import primitives from `@agent-native/core`(`/action`) instead of redefining them; use the core `upload-image` action or `uploadFile()` for durable images/files — never base64 into SQL, markdown, or action results.
+- **Do** signal failure by throwing (`fail()`), never by returning `{ error: ... }`. A returned envelope is a successful return everywhere the framework looks: the retry breakers (`MAX_IDENTICAL_TOOL_ERRORS`, `MAX_SAME_ERROR_ACROSS_ARGUMENTS`) never count it, the call is recorded `completedSideEffect: true` even though nothing was written, and `failed_tools` / `$ai_is_error` stay clean while the model keeps guessing. One production run spent 32% of its cost on three rejected writes that every dashboard reported as successes.
 - **Don't** re-export actions as REST — `/_agent-native/actions/:name` is already the REST surface; duplicating it under `/api/*` hides the operation from agents.
 - **Don't** reach for provider integrations, `outputSchema`, `authorize`, `needsApproval`, or `_agentImages` without checking `references/` first — each has sharp edges covered there, not here.
 

package/corpus/templates/calendar/.agents/skills/actions/SKILL.md

@@ -121,6 +121,7 @@ Everything else — CRUD, settings, search, list/detail reads, auth state, anyth
 
 - **Do** keep one action, one job; document a reusable action (when to use it, key args, return fields to preserve) in `AGENTS.md` once it's called from outside one narrow screen; promote workflow-heavy actions (provider-backed, cross-app, MCP/A2A, multi-step) into a skill.
 - **Do** use `fail()` for user-friendly errors and import primitives from `@agent-native/core`(`/action`) instead of redefining them; use the core `upload-image` action or `uploadFile()` for durable images/files — never base64 into SQL, markdown, or action results.
+- **Do** signal failure by throwing (`fail()`), never by returning `{ error: ... }`. A returned envelope is a successful return everywhere the framework looks: the retry breakers (`MAX_IDENTICAL_TOOL_ERRORS`, `MAX_SAME_ERROR_ACROSS_ARGUMENTS`) never count it, the call is recorded `completedSideEffect: true` even though nothing was written, and `failed_tools` / `$ai_is_error` stay clean while the model keeps guessing. One production run spent 32% of its cost on three rejected writes that every dashboard reported as successes.
 - **Don't** re-export actions as REST — `/_agent-native/actions/:name` is already the REST surface; duplicating it under `/api/*` hides the operation from agents.
 - **Don't** reach for provider integrations, `outputSchema`, `authorize`, `needsApproval`, or `_agentImages` without checking `references/` first — each has sharp edges covered there, not here.
 

package/corpus/templates/chat/.agents/skills/actions/SKILL.md

@@ -121,6 +121,7 @@ Everything else — CRUD, settings, search, list/detail reads, auth state, anyth
 
 - **Do** keep one action, one job; document a reusable action (when to use it, key args, return fields to preserve) in `AGENTS.md` once it's called from outside one narrow screen; promote workflow-heavy actions (provider-backed, cross-app, MCP/A2A, multi-step) into a skill.
 - **Do** use `fail()` for user-friendly errors and import primitives from `@agent-native/core`(`/action`) instead of redefining them; use the core `upload-image` action or `uploadFile()` for durable images/files — never base64 into SQL, markdown, or action results.
+- **Do** signal failure by throwing (`fail()`), never by returning `{ error: ... }`. A returned envelope is a successful return everywhere the framework looks: the retry breakers (`MAX_IDENTICAL_TOOL_ERRORS`, `MAX_SAME_ERROR_ACROSS_ARGUMENTS`) never count it, the call is recorded `completedSideEffect: true` even though nothing was written, and `failed_tools` / `$ai_is_error` stay clean while the model keeps guessing. One production run spent 32% of its cost on three rejected writes that every dashboard reported as successes.
 - **Don't** re-export actions as REST — `/_agent-native/actions/:name` is already the REST surface; duplicating it under `/api/*` hides the operation from agents.
 - **Don't** reach for provider integrations, `outputSchema`, `authorize`, `needsApproval`, or `_agentImages` without checking `references/` first — each has sharp edges covered there, not here.
 

package/corpus/templates/clips/.agents/skills/actions/SKILL.md

@@ -121,6 +121,7 @@ Everything else — CRUD, settings, search, list/detail reads, auth state, anyth
 
 - **Do** keep one action, one job; document a reusable action (when to use it, key args, return fields to preserve) in `AGENTS.md` once it's called from outside one narrow screen; promote workflow-heavy actions (provider-backed, cross-app, MCP/A2A, multi-step) into a skill.
 - **Do** use `fail()` for user-friendly errors and import primitives from `@agent-native/core`(`/action`) instead of redefining them; use the core `upload-image` action or `uploadFile()` for durable images/files — never base64 into SQL, markdown, or action results.
+- **Do** signal failure by throwing (`fail()`), never by returning `{ error: ... }`. A returned envelope is a successful return everywhere the framework looks: the retry breakers (`MAX_IDENTICAL_TOOL_ERRORS`, `MAX_SAME_ERROR_ACROSS_ARGUMENTS`) never count it, the call is recorded `completedSideEffect: true` even though nothing was written, and `failed_tools` / `$ai_is_error` stay clean while the model keeps guessing. One production run spent 32% of its cost on three rejected writes that every dashboard reported as successes.
 - **Don't** re-export actions as REST — `/_agent-native/actions/:name` is already the REST surface; duplicating it under `/api/*` hides the operation from agents.
 - **Don't** reach for provider integrations, `outputSchema`, `authorize`, `needsApproval`, or `_agentImages` without checking `references/` first — each has sharp edges covered there, not here.
 

package/corpus/templates/clips/app/components/player/share-dialog.tsx

@@ -40,6 +40,7 @@ import {
 } from "@/components/ui/popover";
 import { Switch } from "@/components/ui/switch";
 import { Tabs, TabsList, TabsTrigger, TabsContent } from "@/components/ui/tabs";
+import { formatMs } from "@/lib/timestamp-mapping";
 import { cn } from "@/lib/utils";
 
 import { buildAgentApiUrls } from "../../../shared/agent-context";
@@ -70,6 +71,7 @@ export interface ShareRecordingPopoverProps {
   thumbnailUrl?: string | null;
   animatedThumbnailUrl?: string | null;
   isLoomRecording?: boolean;
+  currentMs?: number;
   hasPassword?: boolean;
   /**
    * Restricts the dialog to a bare copy-link control for viewers who can
@@ -108,6 +110,7 @@ export function ShareRecordingPopover({
   thumbnailUrl,
   animatedThumbnailUrl,
   isLoomRecording = false,
+  currentMs,
   hasPassword,
   viewerReshareOnly = false,
   children,
@@ -131,6 +134,7 @@ export function ShareRecordingPopover({
           thumbnailUrl={thumbnailUrl}
           animatedThumbnailUrl={animatedThumbnailUrl}
           isLoomRecording={isLoomRecording}
+          currentMs={currentMs}
           hasPassword={hasPassword}
           viewerReshareOnly={viewerReshareOnly}
         />
@@ -153,6 +157,7 @@ export function ShareRecordingDialog({
   thumbnailUrl,
   animatedThumbnailUrl,
   isLoomRecording = false,
+  currentMs,
   open,
   onOpenChange,
   hasPassword,
@@ -176,6 +181,7 @@ export function ShareRecordingDialog({
           thumbnailUrl={thumbnailUrl}
           animatedThumbnailUrl={animatedThumbnailUrl}
           isLoomRecording={isLoomRecording}
+          currentMs={currentMs}
           hasPassword={hasPassword}
           viewerReshareOnly={viewerReshareOnly}
           reserveCloseButton
@@ -194,6 +200,7 @@ function ShareRecordingContent({
   thumbnailUrl,
   animatedThumbnailUrl,
   isLoomRecording = false,
+  currentMs,
   reserveCloseButton = false,
   hasPassword,
   viewerReshareOnly = false,
@@ -206,6 +213,7 @@ function ShareRecordingContent({
   thumbnailUrl?: string | null;
   animatedThumbnailUrl?: string | null;
   isLoomRecording?: boolean;
+  currentMs?: number;
   reserveCloseButton?: boolean;
   hasPassword?: boolean;
   viewerReshareOnly?: boolean;
@@ -292,6 +300,7 @@ function ShareRecordingContent({
             thumbnailUrl={thumbnailUrl}
             animatedThumbnailUrl={animatedThumbnailUrl}
             isLoomRecording={isLoomRecording}
+            currentMs={currentMs}
             hasPassword={hasPassword}
             canViewShares={canViewShares}
           />
@@ -328,6 +337,7 @@ function LinkTab({
   thumbnailUrl,
   animatedThumbnailUrl,
   isLoomRecording: isLoomRecordingProp,
+  currentMs = 0,
   hasPassword,
   canViewShares,
 }: {
@@ -341,6 +351,7 @@ function LinkTab({
   thumbnailUrl?: string | null;
   animatedThumbnailUrl?: string | null;
   isLoomRecording?: boolean;
+  currentMs?: number;
   hasPassword?: boolean;
   canViewShares: boolean;
 }) {
@@ -352,6 +363,16 @@ function LinkTab({
   );
   const isPublic = visibility === "public";
   const sharesLoaded = visibility !== null;
+  const timestampMs = Number.isFinite(currentMs)
+    ? Math.max(0, Math.floor(currentMs! / 1000) * 1000)
+    : 0;
+  const [shareFromTimestamp, setShareFromTimestamp] = useState(false);
+  const linkUrl = useMemo(() => {
+    if (!shareFromTimestamp || timestampMs === 0) return shareUrl;
+    const url = new URL(shareUrl);
+    url.searchParams.set("at", String(timestampMs / 1000));
+    return url.toString();
+  }, [shareFromTimestamp, shareUrl, timestampMs]);
   const visibilityPending = isPending || sharesQuery.isLoading;
   const isLoomRecording = isLoomRecordingProp || isLoomEmbedUrl(videoUrl);
   const needsScopedAgentContext = !isPublic || hasPassword !== false;
@@ -504,10 +525,23 @@ function LinkTab({
             ? t("shareDialog.shareLink")
             : t("shareDialog.shareWithHumans")
         }
-        value={shareUrl}
+        value={linkUrl}
         disabled={visibilityPending || !sharesLoaded}
       />
 
+      <div className="flex items-center justify-between gap-3">
+        <Label className="text-sm" htmlFor="share-from-timestamp">
+          {t("shareDialog.startAtTimestamp", {
+            time: formatMs(timestampMs),
+          })}
+        </Label>
+        <Switch
+          id="share-from-timestamp"
+          checked={shareFromTimestamp}
+          onCheckedChange={setShareFromTimestamp}
+        />
+      </div>
+
       {canViewShares ? (
         visibility ? (
           <GeneralAccessSelect
@@ -594,7 +628,7 @@ function LinkTab({
           }
           onMakePublic={() =>
             setResourceVisibility("public", {
-              onSuccess: () => copyToClipboard(shareUrl),
+              onSuccess: () => copyToClipboard(linkUrl),
             })
           }
         />

package/corpus/templates/clips/app/components/player/signed-out-share-actions.tsx

@@ -7,15 +7,25 @@ import { Button } from "@/components/ui/button";
 
 export type SignedOutShareCta = "signin" | "try_clips";
 
-export function buildShareSignInHref(recordingId: string): string {
-  return buildSignInReturnHref({ returnTo: `/share/${recordingId}` });
+export function buildShareSignInHref(
+  recordingId: string,
+  startAt?: string | null,
+): string {
+  const params = new URLSearchParams();
+  if (startAt) params.set("at", startAt);
+  const query = params.toString();
+  return buildSignInReturnHref({
+    returnTo: `/share/${recordingId}${query ? `?${query}` : ""}`,
+  });
 }
 
 export function SignedOutShareActions({
   recordingId,
+  startAt,
   onCtaClick,
 }: {
   recordingId: string;
+  startAt?: string | null;
   onCtaClick?: (cta: SignedOutShareCta) => void;
 }) {
   const t = useT();
@@ -24,7 +34,7 @@ export function SignedOutShareActions({
     <>
       <Button variant="outline" size="sm" asChild>
         <a
-          href={buildShareSignInHref(recordingId)}
+          href={buildShareSignInHref(recordingId, startAt)}
           className="gap-1.5"
           onClick={() => onCtaClick?.("signin")}
         >

package/corpus/templates/clips/app/i18n/en-US.ts

@@ -144,6 +144,7 @@ const messages = {
     recordingNotFound: "Recording not found",
     noAccess: "You may not have access to this clip.",
     backToLibrary: "Back to library",
+    sharedWithYou: "Shared with you",
     storageStillDisconnected: "Storage still isn't connected",
     finishBuilderOrS3:
       "Finish the Builder.io popup or configure S3-compatible storage, then try again.",
@@ -515,6 +516,7 @@ const messages = {
     height: "Height",
     autoplay: "Autoplay",
     startAt: "Start at (seconds)",
+    startAtTimestamp: "Start at {{time}}",
     embedCode: "Embed code",
   },
   shareUi: {

package/corpus/templates/clips/app/lib/time-param.ts

@@ -0,0 +1,40 @@
+export function resolveStartMs(
+  startMs: number,
+  durationMs?: number | null,
+): number {
+  if (!Number.isFinite(startMs) || startMs < 0) return 0;
+  if (
+    typeof durationMs === "number" &&
+    Number.isFinite(durationMs) &&
+    durationMs > 0 &&
+    startMs > durationMs
+  ) {
+    return 0;
+  }
+  return startMs;
+}
+
+export function parseTimeParam(raw: string | null): number {
+  if (!raw) return 0;
+  const value = raw.trim();
+  if (!value) return 0;
+
+  if (/^\d+(\.\d+)?$/.test(value)) {
+    return Math.floor(parseFloat(value) * 1000);
+  }
+
+  if (/^\d+:\d+(:\d+)?$/.test(value)) {
+    const parts = value.split(":").map((part) => parseInt(part, 10));
+    if (parts.length === 2) return (parts[0] * 60 + parts[1]) * 1000;
+    if (parts.length === 3) {
+      return (parts[0] * 3600 + parts[1] * 60 + parts[2]) * 1000;
+    }
+  }
+
+  const match = value.match(/^(?:(\d+)h)?(?:(\d+)m)?(?:(\d+)s)?$/i);
+  if (!match) return 0;
+  const hours = parseInt(match[1] ?? "0", 10);
+  const minutes = parseInt(match[2] ?? "0", 10);
+  const seconds = parseInt(match[3] ?? "0", 10);
+  return (hours * 3600 + minutes * 60 + seconds) * 1000;
+}

package/corpus/templates/clips/app/routes/embed.$shareId.tsx

@@ -12,6 +12,7 @@ import {
 import { Spinner } from "@/components/ui/spinner";
 import { useViewTracking } from "@/hooks/use-view-tracking";
 import { parsePlaybackSpeed } from "@/lib/playback-speed";
+import { parseTimeParam, resolveStartMs } from "@/lib/time-param";
 
 import { isLoomEmbedBackedRecording } from "../../shared/loom";
 
@@ -23,40 +24,6 @@ const STORAGE_KEY_PREFIX = "clips-share-pw-";
 const READY_MEDIA_SETTLE_POLL_MS = 20 * 1000;
 const READY_MEDIA_SETTLE_POLL_INTERVAL_MS = 1000;
 
-/**
- * Parse `t` URL param into ms (supports plain seconds or `1m20s` / `1h2m3s`).
- *   "80"      → 80_000
- *   "1m20s"   → 80_000
- *   "1h2m3s"  → 3_723_000
- *   "1:20"    → 80_000  (MM:SS)
- */
-function parseTimeParam(raw: string | null): number {
-  if (!raw) return 0;
-  const v = raw.trim();
-  if (!v) return 0;
-
-  // Plain seconds
-  if (/^\d+(\.\d+)?$/.test(v)) return Math.floor(parseFloat(v) * 1000);
-
-  // MM:SS or HH:MM:SS
-  if (/^\d+:\d+(:\d+)?$/.test(v)) {
-    const parts = v.split(":").map((n) => parseInt(n, 10));
-    if (parts.length === 2) return (parts[0] * 60 + parts[1]) * 1000;
-    if (parts.length === 3)
-      return (parts[0] * 3600 + parts[1] * 60 + parts[2]) * 1000;
-  }
-
-  // 1h2m3s style
-  const m = v.match(/^(?:(\d+)h)?(?:(\d+)m)?(?:(\d+)s)?$/i);
-  if (m) {
-    const h = parseInt(m[1] ?? "0", 10);
-    const mm = parseInt(m[2] ?? "0", 10);
-    const s = parseInt(m[3] ?? "0", 10);
-    return (h * 3600 + mm * 60 + s) * 1000;
-  }
-  return 0;
-}
-
 export default function EmbedRoute() {
   const t = useT();
   const { shareId } = useParams<{ shareId: string }>();
@@ -251,7 +218,7 @@ export default function EmbedRoute() {
         thumbnailUrl={recording.thumbnailUrl}
         defaultSpeed={parsePlaybackSpeed(recording.defaultSpeed) ?? 1.2}
         autoPlay={autoplay}
-        startMs={startMs}
+        startMs={resolveStartMs(startMs, recording.durationMs)}
         comments={comments}
         chapters={chapters}
         transcriptSegments={transcriptSegments}

package/corpus/templates/clips/app/routes/r.$recordingId.tsx

@@ -102,6 +102,7 @@ import enMessages from "@/i18n/en-US";
 import { parsePlaybackSpeed } from "@/lib/playback-speed";
 import { recordingShareUrl } from "@/lib/recording-link";
 import { isStorageSetupFailureReason } from "@/lib/storage-failures";
+import { parseTimeParam, resolveStartMs } from "@/lib/time-param";
 import { cn } from "@/lib/utils";
 
 import { STALE_PENDING_TRANSCRIPT_REASON } from "../../shared/transcript-status";
@@ -270,31 +271,6 @@ export function BackButton({ onBack }: { onBack: () => void }) {
   );
 }
 
-function parseTimeParam(raw: string | null): number {
-  if (!raw) return 0;
-  const value = raw.trim();
-  if (!value) return 0;
-
-  if (/^\d+(\.\d+)?$/.test(value)) {
-    return Math.floor(parseFloat(value) * 1000);
-  }
-
-  if (/^\d+:\d+(:\d+)?$/.test(value)) {
-    const parts = value.split(":").map((part) => parseInt(part, 10));
-    if (parts.length === 2) return (parts[0] * 60 + parts[1]) * 1000;
-    if (parts.length === 3) {
-      return (parts[0] * 3600 + parts[1] * 60 + parts[2]) * 1000;
-    }
-  }
-
-  const match = value.match(/^(?:(\d+)h)?(?:(\d+)m)?(?:(\d+)s)?$/i);
-  if (!match) return 0;
-  const hours = parseInt(match[1] ?? "0", 10);
-  const minutes = parseInt(match[2] ?? "0", 10);
-  const seconds = parseInt(match[3] ?? "0", 10);
-  return (hours * 3600 + minutes * 60 + seconds) * 1000;
-}
-
 export default function RecordingPage() {
   const t = useT();
   useAutoTitleBridge();
@@ -302,7 +278,9 @@ export default function RecordingPage() {
   const { recordingId } = useParams<{ recordingId: string }>();
   const navigate = useNavigate();
   const [searchParams] = useSearchParams();
-  const startMs = parseTimeParam(searchParams.get("t"));
+  const startMs = parseTimeParam(
+    searchParams.get("at") ?? searchParams.get("t"),
+  );
   const panelParam = searchParams.get("panel");
   const { session, isLoading: sessionLoading } = useSession();
   const playerRef = useRef<VideoPlayerHandle | null>(null);
@@ -310,19 +288,12 @@ export default function RecordingPage() {
   const [panel, setPanel] = useState<SidePanel>("comments");
   const [theaterMode, setTheaterMode] = useState(false);
   const [editing, setEditing] = useState(false);
-  const [currentMs, setCurrentMs] = useState(0);
+  const [currentMs, setCurrentMs] = useState(startMs);
   const [commentOpen, setCommentOpen] = useState(false);
   const [commentAtMs, setCommentAtMs] = useState(0);
   const [commentDraft, setCommentDraft] = useState("");
   const [isPlayerFullscreen, setIsPlayerFullscreen] = useState(false);
   const isCompactLayout = useIsCompactRecordingLayout();
-  // Resolve the playback position for reactions/comments. Native <video> exposes
-  // a live `currentTime`; Loom embeds render in a cross-origin iframe with no
-  // live time bridge, so we fall back to the last position the player reported
-  // via onTimeUpdate (seek/initial start).
-  const resolvePlaybackMs = useCallback(() => {
-    return playerRef.current?.getCurrentOriginalMs() ?? currentMs;
-  }, [currentMs]);
   // The compact layout stacks the panel below the video, so switching tabs
   // alone leaves the user looking at the player. Desktop always renders the
   // side aside, so nothing to scroll there.
@@ -458,6 +429,14 @@ export default function RecordingPage() {
   }, [recordingId, playerDataForbidden, navigate]);
 
   const recording = playerDataQ.data?.recording;
+  const playbackMs = resolveStartMs(currentMs, recording?.durationMs);
+  // Resolve the playback position for reactions/comments. Native <video> exposes
+  // a live `currentTime`; Loom embeds render in a cross-origin iframe with no
+  // live time bridge, so we fall back to the last position the player reported
+  // via onTimeUpdate (seek/initial start).
+  const resolvePlaybackMs = useCallback(() => {
+    return playerRef.current?.getCurrentOriginalMs() ?? playbackMs;
+  }, [playbackMs]);
   const verificationPending = recording?.verificationPending === true;
   const role = playerDataQ.data?.role as
     | "owner"
@@ -541,14 +520,14 @@ export default function RecordingPage() {
       {
         view: "recording",
         recordingId: recording.id,
-        currentMs: Math.max(0, Math.round(currentMs)),
+        currentMs: Math.round(playbackMs),
         durationMs: recording.durationMs,
         panel,
         updatedAt: new Date(now).toISOString(),
       },
       { requestSource: browserTabId },
     ).catch(() => {});
-  }, [browserTabId, currentMs, panel, recording?.durationMs, recording?.id]);
+  }, [browserTabId, panel, playbackMs, recording?.durationMs, recording?.id]);
   const appStateVersion = useChangeVersions(["app-state", "action"]);
   const generatedWorkflowQ = useQuery<GeneratedWorkflowState | null>({
     queryKey: [
@@ -615,6 +594,9 @@ export default function RecordingPage() {
   const viewerReshareOnly =
     (role === "viewer" || role === "commenter") &&
     (recording?.visibility === "public" || recording?.visibility === "org");
+  const isPrivateRecipient =
+    (role === "viewer" || role === "commenter") &&
+    recording?.visibility === "private";
   const shareVideoUrl =
     canDownloadRecording || isLoomEmbedBacked
       ? (recording?.videoUrl ?? null)
@@ -1064,16 +1046,22 @@ export default function RecordingPage() {
                 ) : null}
               </p>
             </div>
-            <ShareRecordingPopover
-              recordingId={recording.id}
-              recordingTitle={recording.title}
-              initialVisibility={recording.visibility}
-              initialRole={role}
-              hasPassword={Boolean(recording.hasPassword)}
-              viewerReshareOnly={viewerReshareOnly}
-            >
-              <ClipsShareTrigger label={t("recordingPage.share")} />
-            </ShareRecordingPopover>
+            {isPrivateRecipient ? (
+              <span className="shrink-0 whitespace-nowrap text-sm font-medium text-muted-foreground">
+                {t("recordingPage.sharedWithYou")}
+              </span>
+            ) : (
+              <ShareRecordingPopover
+                recordingId={recording.id}
+                recordingTitle={recording.title}
+                initialVisibility={recording.visibility}
+                initialRole={role}
+                hasPassword={Boolean(recording.hasPassword)}
+                viewerReshareOnly={viewerReshareOnly}
+              >
+                <ClipsShareTrigger label={t("recordingPage.share")} />
+              </ShareRecordingPopover>
+            )}
           </header>
 
           <main className="mx-auto flex w-full max-w-6xl flex-1 flex-col gap-5 p-4 sm:p-6">
@@ -1283,7 +1271,7 @@ export default function RecordingPage() {
             segments={transcriptSegments}
             fullText={transcriptFullText}
             durationMs={recording.durationMs}
-            currentMs={currentMs}
+            currentMs={playbackMs}
             onSeek={(ms) => playerRef.current?.seek(ms)}
             status={
               requestTranscript.isPending && transcriptStatus === "failed"
@@ -1322,7 +1310,7 @@ export default function RecordingPage() {
           <CommentsPanel
             recordingId={recording.id}
             comments={comments}
-            currentMs={currentMs}
+            currentMs={playbackMs}
             currentUserEmail={session?.email}
             enableComments={recording.enableComments}
             canComment={canComment}
@@ -1602,20 +1590,27 @@ export default function RecordingPage() {
           ) : null}
 
           {!editing ? (
-            <ShareRecordingPopover
-              recordingId={recording.id}
-              recordingTitle={recording.title}
-              initialVisibility={recording.visibility}
-              initialRole={role}
-              videoUrl={shareVideoUrl}
-              thumbnailUrl={recording.thumbnailUrl}
-              animatedThumbnailUrl={recording.animatedThumbnailUrl}
-              isLoomRecording={isLoomEmbedBacked}
-              hasPassword={Boolean(recording.hasPassword)}
-              viewerReshareOnly={viewerReshareOnly}
-            >
-              <ClipsShareTrigger label={t("recordingPage.share")} />
-            </ShareRecordingPopover>
+            isPrivateRecipient ? (
+              <span className="shrink-0 whitespace-nowrap text-sm font-medium text-muted-foreground">
+                {t("recordingPage.sharedWithYou")}
+              </span>
+            ) : (
+              <ShareRecordingPopover
+                recordingId={recording.id}
+                recordingTitle={recording.title}
+                initialVisibility={recording.visibility}
+                initialRole={role}
+                videoUrl={shareVideoUrl}
+                thumbnailUrl={recording.thumbnailUrl}
+                animatedThumbnailUrl={recording.animatedThumbnailUrl}
+                isLoomRecording={isLoomEmbedBacked}
+                currentMs={playbackMs}
+                hasPassword={Boolean(recording.hasPassword)}
+                viewerReshareOnly={viewerReshareOnly}
+              >
+                <ClipsShareTrigger label={t("recordingPage.share")} />
+              </ShareRecordingPopover>
+            )
           ) : null}
 
           {canDelete || canDownloadRecording ? (
@@ -1662,7 +1657,7 @@ export default function RecordingPage() {
                   defaultSpeed={
                     parsePlaybackSpeed(recording.defaultSpeed) ?? 1.2
                   }
-                  startMs={startMs}
+                  startMs={resolveStartMs(startMs, recording.durationMs)}
                   comments={comments}
                   chapters={chapters}
                   reactions={reactions}