@agent-native/core 0.77.6 → 0.77.7

package/corpus/templates/chat/netlify.toml

@@ -5,5 +5,6 @@ publish = "templates/chat/dist"
 functions = "templates/chat/.netlify/functions-internal"
 
 [build.environment]
+GA_MEASUREMENT_ID = "G-ESF7FYXGN9"
 NITRO_PRESET = "netlify"
 NPM_CONFIG_PRODUCTION = "false"

package/corpus/templates/clips/AGENTS.md

@@ -64,13 +64,15 @@ Detailed media, meeting, dictation, editing, and sharing rules live in
 - Browser recordings can include redacted browser diagnostics captured during
   the recording session. `save-browser-diagnostics` is UI/internal and stores
   bounded console logs plus fetch/XHR method, URL path/query keys, status, and
-  duration; it never captures headers, bodies, cookies, or query values. Use
-  `get-recording-player-data` for full diagnostics when you have editor access.
-  Public agent context exposes the redacted console stream (all levels) as
-  `browserDiagnostics.consoleLogs` and the fetch/XHR stream as
-  `browserDiagnostics.networkRequests` (method, sanitized URL with query values
-  redacted, status, duration), plus `consoleIssues` and `failedNetworkRequests`
-  highlights. All bounded; page URL, headers, bodies, and cookies stay omitted.
+  duration; it never captures headers, bodies, cookies, or network URL query
+  values. Console text keeps useful non-secret values while redacting
+  credential-looking keys/headers. Use `get-recording-player-data` for full
+  diagnostics when you have editor access. Public agent context exposes the
+  redacted console stream (all levels) as `browserDiagnostics.consoleLogs` and
+  the fetch/XHR stream as `browserDiagnostics.networkRequests` (method,
+  sanitized URL with query values redacted, status, duration), plus
+  `consoleIssues` and `failedNetworkRequests` highlights. All bounded; page
+  URL, headers, bodies, and cookies stay omitted.
 - The Chrome extension lives in `chrome-extension/`. It launches `/record` with
   `clipsExtensionId` and `clipsCaptureSessionId`, then the recorder sends
   `CLIPS_CAPTURE_START/STOP/CANCEL` back to the extension. The extension uses

package/corpus/templates/clips/actions/add-vocabulary-term.ts

@@ -21,7 +21,7 @@ import { createError } from "h3";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { nanoid } from "../server/lib/recordings.js";
+import { nanoid, ownerEmailMatches } from "../server/lib/recordings.js";
 
 export default defineAction({
   description:
@@ -66,7 +66,7 @@ export default defineAction({
       .from(schema.vocabulary)
       .where(
         and(
-          eq(schema.vocabulary.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.vocabulary.ownerEmail, ownerEmail),
           eq(schema.vocabulary.term, term),
         ),
       )

package/corpus/templates/clips/actions/archive-recording.ts

@@ -11,7 +11,10 @@ import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 
 export default defineAction({
   description:
@@ -29,7 +32,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.recordings.id, args.id),
-          eq(schema.recordings.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
         ),
       );
     if (!existing) throw new Error(`Recording not found: ${args.id}`);

package/corpus/templates/clips/actions/clear-edits.ts

@@ -17,7 +17,10 @@ import { z } from "zod";
 
 import { DEFAULT_EDITS, serializeEdits } from "../app/lib/timestamp-mapping.js";
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 import { assertNativeRecordingMedia } from "./lib/native-media.js";
 
 export default defineAction({
@@ -36,7 +39,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.recordings.id, args.recordingId),
-          eq(schema.recordings.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
         ),
       );
     if (!existing) {

package/corpus/templates/clips/actions/create-folder.ts

@@ -7,6 +7,7 @@ import { getDb, schema } from "../server/db/index.js";
 import {
   getCurrentOwnerEmail,
   nanoid,
+  ownerEmailMatches,
   requireOrganizationAccess,
 } from "../server/lib/recordings.js";
 
@@ -64,7 +65,9 @@ export default defineAction({
           : isNull(schema.folders.spaceId),
       ];
       if (!args.spaceId) {
-        parentWhereClauses.push(eq(schema.folders.ownerEmail, ownerEmail));
+        parentWhereClauses.push(
+          ownerEmailMatches(schema.folders.ownerEmail, ownerEmail),
+        );
       }
       const [parent] = await db
         .select({ id: schema.folders.id, spaceId: schema.folders.spaceId })
@@ -77,7 +80,9 @@ export default defineAction({
     // Next position within siblings
     const whereClauses = [eq(schema.folders.organizationId, organizationId)];
     if (!args.spaceId) {
-      whereClauses.push(eq(schema.folders.ownerEmail, ownerEmail));
+      whereClauses.push(
+        ownerEmailMatches(schema.folders.ownerEmail, ownerEmail),
+      );
     }
     whereClauses.push(
       args.spaceId

package/corpus/templates/clips/actions/delete-folder.ts

@@ -4,7 +4,10 @@ import { and, eq, inArray } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 
 export default defineAction({
   description:
@@ -23,7 +26,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.folders.id, args.id),
-          eq(schema.folders.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.folders.ownerEmail, ownerEmail),
         ),
       );
 
@@ -41,7 +44,7 @@ export default defineAction({
         .where(
           and(
             inArray(schema.folders.parentId, frontier),
-            eq(schema.folders.ownerEmail, ownerEmail),
+            ownerEmailMatches(schema.folders.ownerEmail, ownerEmail),
           ),
         );
       const nextIds = children.map((c) => c.id);
@@ -63,7 +66,7 @@ export default defineAction({
       .where(
         and(
           inArray(schema.folders.id, descendants),
-          eq(schema.folders.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.folders.ownerEmail, ownerEmail),
         ),
       );
 

package/corpus/templates/clips/actions/delete-recording-permanent.ts

@@ -15,7 +15,10 @@ import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 
 export default defineAction({
   description:
@@ -33,7 +36,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.recordings.id, args.id),
-          eq(schema.recordings.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
         ),
       );
     if (!existing) throw new Error(`Recording not found: ${args.id}`);

package/corpus/templates/clips/actions/finalize-recording.ts

@@ -28,7 +28,10 @@ import {
   applyFaststart,
   hasPlayableMp4Metadata,
 } from "../server/lib/faststart.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 import {
   requiresConfiguredVideoStorage,
   STORAGE_SETUP_REQUIRED_REASON,
@@ -151,7 +154,7 @@ export default defineAction({
         .where(
           and(
             eq(schema.recordings.id, id),
-            eq(schema.recordings.ownerEmail, ownerEmail),
+            ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
           ),
         );
 

package/corpus/templates/clips/actions/import-loom-recording.ts

@@ -11,6 +11,7 @@ import { getDb, schema } from "../server/db/index.js";
 import {
   getCurrentOwnerEmail,
   nanoid,
+  ownerEmailMatches,
   parseSpaceIds,
   requireOrganizationAccess,
   stringifySpaceIds,
@@ -148,7 +149,7 @@ export default defineAction({
         .where(
           and(
             eq(schema.recordings.id, args.recordingId),
-            eq(schema.recordings.ownerEmail, ownerEmail),
+            ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
           ),
         );
       if (!existingRecording) {

package/corpus/templates/clips/actions/list-notifications.ts

@@ -11,11 +11,15 @@
  */
 
 import { defineAction } from "@agent-native/core";
-import { and, desc, eq, gte, inArray } from "drizzle-orm";
+import { and, desc, gte, inArray } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+  sameOwnerEmail,
+} from "../server/lib/recordings.js";
 
 export default defineAction({
   description:
@@ -36,7 +40,7 @@ export default defineAction({
         title: schema.recordings.title,
       })
       .from(schema.recordings)
-      .where(eq(schema.recordings.ownerEmail, me));
+      .where(ownerEmailMatches(schema.recordings.ownerEmail, me));
     if (myRecordings.length === 0) {
       return { items: [], count: 0 };
     }
@@ -82,7 +86,7 @@ export default defineAction({
 
     const items = [
       ...comments
-        .filter((c) => c.authorEmail !== me)
+        .filter((c) => !sameOwnerEmail(c.authorEmail, me))
         .map((c) => ({
           id: `c:${c.id}`,
           kind: (mentionRegex.test(c.content) ? "mention" : "comment") as
@@ -95,7 +99,7 @@ export default defineAction({
           createdAt: c.createdAt,
         })),
       ...reactions
-        .filter((r) => r.viewerEmail !== me)
+        .filter((r) => !sameOwnerEmail(r.viewerEmail, me))
         .map((r) => ({
           id: `r:${r.id}`,
           kind: "reaction" as const,

package/corpus/templates/clips/actions/list-organization-state.ts

@@ -20,6 +20,7 @@ import { z } from "zod";
 import { getDb, schema } from "../server/db/index.js";
 import {
   getCurrentOwnerEmail,
+  ownerEmailMatches,
   requireOrganizationAccess,
 } from "../server/lib/recordings.js";
 
@@ -128,7 +129,7 @@ export default defineAction({
             eq(schema.folders.organizationId, organizationId),
             or(
               isNotNull(schema.folders.spaceId),
-              eq(schema.folders.ownerEmail, ownerEmail),
+              ownerEmailMatches(schema.folders.ownerEmail, ownerEmail),
             ),
           ),
         )

package/corpus/templates/clips/actions/list-recordings.ts

@@ -17,6 +17,7 @@ import { z } from "zod";
 import { getDb, schema } from "../server/db/index.js";
 import {
   getActiveOrganizationId,
+  ownerEmailMatches,
   parseSpaceIds,
 } from "../server/lib/recordings.js";
 
@@ -82,7 +83,9 @@ export default defineAction({
     if (args.view === "library") {
       const email = getRequestUserEmail();
       if (email) {
-        whereClauses.push(eq(schema.recordings.ownerEmail, email));
+        whereClauses.push(
+          ownerEmailMatches(schema.recordings.ownerEmail, email),
+        );
       }
       if (orgId) {
         whereClauses.push(eq(schema.recordings.organizationId, orgId));

package/corpus/templates/clips/actions/move-recording.ts

@@ -9,6 +9,7 @@ import {
   getCurrentOwnerEmail,
   parseSpaceIds,
   requireActiveOrganizationId,
+  sameOwnerEmail,
 } from "../server/lib/recordings.js";
 
 const moveRecordingSchema = z
@@ -69,7 +70,10 @@ export default defineAction({
         )
         .limit(1);
 
-      if (!folder || (!folder.spaceId && folder.ownerEmail !== ownerEmail)) {
+      if (
+        !folder ||
+        (!folder.spaceId && !sameOwnerEmail(folder.ownerEmail, ownerEmail))
+      ) {
         throw new Error(`Folder not found: ${folderId}`);
       }
 

package/corpus/templates/clips/actions/rename-folder.ts

@@ -4,7 +4,10 @@ import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 
 export default defineAction({
   description: "Rename a folder.",
@@ -22,7 +25,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.folders.id, args.id),
-          eq(schema.folders.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.folders.ownerEmail, ownerEmail),
         ),
       );
 
@@ -36,7 +39,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.folders.id, args.id),
-          eq(schema.folders.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.folders.ownerEmail, ownerEmail),
         ),
       );
 

package/corpus/templates/clips/actions/request-transcript.ts

@@ -50,7 +50,10 @@ import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 import { normalizeLoomShareUrl } from "../shared/loom.js";
 import {
   buildCaptionSegmentsFromText,
@@ -574,7 +577,7 @@ async function completeReadyTranscript({
     .where(
       and(
         eq(schema.recordings.id, recordingId),
-        eq(schema.recordings.ownerEmail, ownerEmail),
+        ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
       ),
     )
     .limit(1);

package/corpus/templates/clips/actions/restore-recording.ts

@@ -11,7 +11,10 @@ import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 
 export default defineAction({
   description: "Restore a recording from archive or trash back to the library.",
@@ -28,7 +31,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.recordings.id, args.id),
-          eq(schema.recordings.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
         ),
       );
     if (!existing) throw new Error(`Recording not found: ${args.id}`);

package/corpus/templates/clips/actions/save-browser-diagnostics.ts

@@ -24,7 +24,7 @@ import {
   type BrowserDiagnosticConsoleLevel,
 } from "../shared/browser-diagnostics.js";
 
-const REDACTION_VERSION = 1;
+const REDACTION_VERSION = 2;
 
 const consoleLevelSchema = z.enum(["debug", "log", "info", "warn", "error"]);
 
@@ -53,12 +53,19 @@ function truncate(value: string, maxLength: number): string {
   return value.length > maxLength ? `${value.slice(0, maxLength)}...` : value;
 }
 
-function redactString(value: string): string {
-  return redactBrowserDiagnosticString(value);
+function redactString(
+  value: string,
+  options?: { redactQueryValues?: boolean },
+): string {
+  return redactBrowserDiagnosticString(value, options);
+}
+
+function redactUrlString(value: string): string {
+  return redactBrowserDiagnosticString(value, { redactQueryValues: true });
 }
 
 function sanitizeUrl(raw: string): string {
-  const redacted = redactString(raw);
+  const redacted = redactUrlString(raw);
   try {
     const parsed = new URL(redacted, "https://clips.local");
     parsed.username = "";
@@ -93,14 +100,17 @@ function sanitizeConsoleLog(entry: z.infer<typeof consoleLogSchema>): {
   stack?: string;
 } {
   const stack = entry.stack
-    ? truncate(redactString(entry.stack), MAX_BROWSER_DIAGNOSTIC_MESSAGE_LENGTH)
+    ? truncate(
+        redactString(entry.stack, { redactQueryValues: true }),
+        MAX_BROWSER_DIAGNOSTIC_MESSAGE_LENGTH,
+      )
     : "";
   return {
     timestampMs: Math.round(entry.timestampMs),
     elapsedMs: Math.round(entry.elapsedMs),
     level: entry.level,
     message: truncate(
-      redactString(entry.message),
+      redactString(entry.message, { redactQueryValues: true }),
       MAX_BROWSER_DIAGNOSTIC_MESSAGE_LENGTH,
     ),
     ...(stack ? { stack } : {}),
@@ -109,10 +119,13 @@ function sanitizeConsoleLog(entry: z.infer<typeof consoleLogSchema>): {
 
 function sanitizeNetworkRequest(entry: z.infer<typeof networkRequestSchema>) {
   const statusText = entry.statusText
-    ? truncate(redactString(entry.statusText), 120)
+    ? truncate(redactString(entry.statusText, { redactQueryValues: true }), 120)
     : "";
   const error = entry.error
-    ? truncate(redactString(entry.error), MAX_BROWSER_DIAGNOSTIC_MESSAGE_LENGTH)
+    ? truncate(
+        redactString(entry.error, { redactQueryValues: true }),
+        MAX_BROWSER_DIAGNOSTIC_MESSAGE_LENGTH,
+      )
     : "";
   return {
     timestampMs: Math.round(entry.timestampMs),

package/corpus/templates/clips/actions/set-chapters.ts

@@ -15,7 +15,10 @@ import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 
 const ChapterSchema = z.object({
   startMs: z.coerce.number().int().min(0),
@@ -61,7 +64,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.recordings.id, args.recordingId),
-          eq(schema.recordings.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
         ),
       );
     if (!existing) {

package/corpus/templates/clips/actions/set-thumbnail.ts

@@ -26,7 +26,10 @@ import { z } from "zod";
 
 import { parseEdits, serializeEdits } from "../app/lib/timestamp-mapping.js";
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 import { assertNativeRecordingMedia } from "./lib/native-media.js";
 
 function decodeDataUrl(dataUrl: string): { bytes: Uint8Array; mime: string } {
@@ -88,7 +91,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.recordings.id, args.recordingId),
-          eq(schema.recordings.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
         ),
       );
     if (!existing) {

package/corpus/templates/clips/actions/split-recording.ts

@@ -20,7 +20,10 @@ import {
   serializeEdits,
 } from "../app/lib/timestamp-mapping.js";
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 import { assertNativeRecordingMedia } from "./lib/native-media.js";
 
 export default defineAction({
@@ -44,7 +47,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.recordings.id, args.recordingId),
-          eq(schema.recordings.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
         ),
       );
     if (!existing) {

package/corpus/templates/clips/actions/stitch-recordings.ts

@@ -34,7 +34,11 @@ import { z } from "zod";
 
 import { parseEdits, serializeEdits } from "../app/lib/timestamp-mapping.js";
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail, nanoid } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  nanoid,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 import { assertNativeRecordingMedia } from "./lib/native-media.js";
 
 export default defineAction({
@@ -95,7 +99,7 @@ export default defineAction({
       .where(
         and(
           inArray(schema.recordings.id, ids),
-          eq(schema.recordings.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
         ),
       );
     if (sources.length !== ids.length) {

package/corpus/templates/clips/actions/trash-recording.ts

@@ -11,7 +11,10 @@ import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 
 export default defineAction({
   description:
@@ -29,7 +32,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.recordings.id, args.id),
-          eq(schema.recordings.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
         ),
       );
     if (!existing) throw new Error(`Recording not found: ${args.id}`);

package/corpus/templates/clips/actions/undo-edit.ts

@@ -19,7 +19,10 @@ import {
   serializeEdits,
 } from "../app/lib/timestamp-mapping.js";
 import { getDb, schema } from "../server/db/index.js";
-import { getCurrentOwnerEmail } from "../server/lib/recordings.js";
+import {
+  getCurrentOwnerEmail,
+  ownerEmailMatches,
+} from "../server/lib/recordings.js";
 import { assertNativeRecordingMedia } from "./lib/native-media.js";
 
 export default defineAction({
@@ -38,7 +41,7 @@ export default defineAction({
       .where(
         and(
           eq(schema.recordings.id, args.recordingId),
-          eq(schema.recordings.ownerEmail, ownerEmail),
+          ownerEmailMatches(schema.recordings.ownerEmail, ownerEmail),
         ),
       );
     if (!existing) {

package/corpus/templates/clips/actions/view-screen.ts

@@ -23,6 +23,7 @@ import { z } from "zod";
 import { getDb, schema } from "../server/db/index.js";
 import {
   getActiveOrganizationId,
+  ownerEmailMatches,
   parseSpaceIds,
 } from "../server/lib/recordings.js";
 import { parseBrowserDiagnosticsRow } from "../shared/browser-diagnostics.js";
@@ -168,7 +169,7 @@ async function fetchFoldersForSpace(spaceId: string | null) {
     .from(schema.folders)
     .where(
       and(
-        eq(schema.folders.ownerEmail, ownerEmail),
+        ownerEmailMatches(schema.folders.ownerEmail, ownerEmail),
         spaceId
           ? eq(schema.folders.spaceId, spaceId)
           : isNull(schema.folders.spaceId),

package/corpus/templates/clips/app/components/library/recording-card.tsx

@@ -117,13 +117,29 @@ export function RecordingCard({
     return (local || "?").slice(0, 2).toUpperCase();
   }, [recording.ownerEmail]);
 
-  const handleOpen = useCallback(() => {
-    if (selectionMode) {
-      onToggleSelect?.(recording.id);
-    } else {
-      navigate(`/r/${recording.id}`);
-    }
-  }, [navigate, onToggleSelect, recording.id, selectionMode]);
+  const recordingPath = `/r/${recording.id}`;
+
+  const handleOpen = useCallback(
+    (event: React.MouseEvent<HTMLElement>) => {
+      const shouldOpenNewTab =
+        event.button === 1 ||
+        (event.button === 0 && (event.metaKey || event.ctrlKey));
+
+      if (shouldOpenNewTab) {
+        event.preventDefault();
+        event.stopPropagation();
+        window.open(recordingPath, "_blank", "noopener,noreferrer");
+        return;
+      }
+
+      if (selectionMode) {
+        onToggleSelect?.(recording.id);
+      } else {
+        navigate(recordingPath);
+      }
+    },
+    [navigate, onToggleSelect, recording.id, recordingPath, selectionMode],
+  );
 
   const handleCheckbox = useCallback(
     (e: React.MouseEvent) => {
@@ -145,6 +161,7 @@ export function RecordingCard({
     <div
       role="article"
       onClick={handleOpen}
+      onAuxClick={handleOpen}
       onMouseEnter={() => setHovered(true)}
       onMouseLeave={() => setHovered(false)}
       className={cn(