@agent-native/core 0.84.56 → 0.84.57

package/corpus/templates/clips/app/routes/share.$shareId.tsx

@@ -11,6 +11,7 @@ import {
 import {
   getRequestUserEmail,
   signShortLivedToken,
+  verifyShortLivedToken,
 } from "@agent-native/core/server";
 import { resolveAccess } from "@agent-native/core/sharing";
 import {
@@ -32,7 +33,12 @@ import {
   useState,
   type ReactNode,
 } from "react";
-import type { LoaderFunctionArgs, MetaFunction } from "react-router";
+import {
+  data,
+  type HeadersArgs,
+  type LoaderFunctionArgs,
+  type MetaFunction,
+} from "react-router";
 import { useLoaderData, useNavigate, useParams } from "react-router";
 
 import { CaptureInstallButton } from "@/components/capture-install-options";
@@ -65,7 +71,12 @@ import { parsePlaybackSpeed } from "@/lib/playback-speed";
 import { isStorageSetupFailureReason } from "@/lib/storage-failures";
 
 import { getDb, schema } from "../../server/db";
-import { buildAgentApiUrls, safeJsonForHtml } from "../../shared/agent-context";
+import { CLIPS_AGENT_ACCESS_PARAM } from "../../server/lib/public-agent-context";
+import {
+  agentAccessTokenResourceId,
+  buildAgentApiUrls,
+  safeJsonForHtml,
+} from "../../shared/agent-context";
 import {
   isLoomEmbedBackedRecording,
   isLoomRecordingSource,
@@ -99,6 +110,34 @@ type SharePageLoaderData = {
   shareUrl: string | null;
 };
 
+const PRIVATE_AGENT_SHARE_HEADERS = {
+  "Cache-Control": "private, max-age=0, no-store",
+  "Referrer-Policy": "no-referrer",
+};
+
+function emptyLoaderData(url: URL): SharePageLoaderData {
+  return {
+    recording: null,
+    agentContextUrl: null,
+    origin: url.origin,
+    shareUrl: null,
+  };
+}
+
+function shareLoaderData(
+  payload: SharePageLoaderData,
+  privateAgentAccess = false,
+) {
+  if (!privateAgentAccess) return payload;
+  return data(payload, {
+    headers: PRIVATE_AGENT_SHARE_HEADERS,
+  });
+}
+
+export function headers({ loaderHeaders }: HeadersArgs) {
+  return loaderHeaders;
+}
+
 function failureDetail(reason: string | null | undefined): string | null {
   const trimmed = reason?.trim();
   if (!trimmed) return null;
@@ -132,13 +171,7 @@ function shouldShowGeneratedTitleSkeleton(
 
 export async function loader({ params, url }: LoaderFunctionArgs) {
   const id = params.shareId;
-  if (!id)
-    return {
-      recording: null,
-      agentContextUrl: null,
-      origin: url.origin,
-      shareUrl: null,
-    };
+  if (!id) return emptyLoaderData(url);
 
   const [rec] = await getDb()
     .select({
@@ -151,6 +184,7 @@ export async function loader({ params, url }: LoaderFunctionArgs) {
       status: schema.recordings.status,
       ownerEmail: schema.recordings.ownerEmail,
       password: schema.recordings.password,
+      expiresAt: schema.recordings.expiresAt,
       archivedAt: schema.recordings.archivedAt,
       trashedAt: schema.recordings.trashedAt,
     })
@@ -158,24 +192,25 @@ export async function loader({ params, url }: LoaderFunctionArgs) {
     .where(eq(schema.recordings.id, id))
     .limit(1);
 
-  if (!rec)
-    return {
-      recording: null,
-      agentContextUrl: null,
-      origin: url.origin,
-      shareUrl: null,
-    };
+  const agentAccessToken = url.searchParams.get(CLIPS_AGENT_ACCESS_PARAM) ?? "";
+  const hasAgentAccessToken = Boolean(agentAccessToken);
+  const tokenGrantsAgentAccess = agentAccessToken
+    ? verifyShortLivedToken(agentAccessToken, agentAccessTokenResourceId(id)).ok
+    : false;
+
+  if (!rec) return shareLoaderData(emptyLoaderData(url), hasAgentAccessToken);
+
+  if (rec.expiresAt) {
+    const expires = new Date(rec.expiresAt).getTime();
+    if (Number.isFinite(expires) && expires < Date.now()) {
+      return shareLoaderData(emptyLoaderData(url), hasAgentAccessToken);
+    }
+  }
 
-  if (rec.visibility !== "public") {
+  if (rec.visibility !== "public" && !tokenGrantsAgentAccess) {
     const userEmail = getRequestUserEmail();
     const access = userEmail ? await resolveAccess("recording", id) : null;
-    if (!access)
-      return {
-        recording: null,
-        agentContextUrl: null,
-        origin: url.origin,
-        shareUrl: null,
-      };
+    if (!access) return emptyLoaderData(url);
   }
 
   const recording: SharePageMetaRecording = {
@@ -190,29 +225,37 @@ export async function loader({ params, url }: LoaderFunctionArgs) {
     trashedAt: rec.trashedAt,
   };
   const canExposeAgentContext =
-    rec.visibility === "public" && !rec.archivedAt && !rec.trashedAt;
-  const token =
-    canExposeAgentContext &&
-    rec.password &&
-    getRequestUserEmail() === rec.ownerEmail
-      ? signShortLivedToken({ resourceId: id })
+    (rec.visibility === "public" || tokenGrantsAgentAccess) &&
+    !rec.archivedAt &&
+    !rec.trashedAt;
+  const token = tokenGrantsAgentAccess
+    ? agentAccessToken
+    : canExposeAgentContext &&
+        rec.password &&
+        getRequestUserEmail() === rec.ownerEmail
+      ? signShortLivedToken({ resourceId: agentAccessTokenResourceId(id) })
       : undefined;
   const canExposeAnonymousAgentContext = canExposeAgentContext && !rec.password;
   const canExposeOwnerAgentContext = canExposeAgentContext && Boolean(token);
-  return {
-    recording,
-    origin: url.origin,
-    shareUrl: `${url.origin}${url.pathname}`,
-    agentContextUrl:
-      canExposeAnonymousAgentContext || canExposeOwnerAgentContext
-        ? buildAgentApiUrls(id, {
-            origin: url.origin,
-            basePath:
-              process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH || "",
-            token,
-          }).contextUrl
-        : null,
-  };
+  return shareLoaderData(
+    {
+      recording,
+      origin: url.origin,
+      shareUrl: `${url.origin}${url.pathname}`,
+      agentContextUrl:
+        canExposeAnonymousAgentContext || canExposeOwnerAgentContext
+          ? buildAgentApiUrls(id, {
+              origin: url.origin,
+              basePath:
+                process.env.VITE_APP_BASE_PATH ||
+                process.env.APP_BASE_PATH ||
+                "",
+              token,
+            }).contextUrl
+          : null,
+    },
+    hasAgentAccessToken || canExposeOwnerAgentContext,
+  );
 }
 
 export const meta: MetaFunction<typeof loader> = ({ loaderData }) => {
@@ -273,7 +316,7 @@ function AgentDiscovery({
         {t("sharePage.agentReadableContext")}
       </a>
       <script
-        type="application/json"
+        type="application/agent-native+json"
         id="clips-agent-context"
         dangerouslySetInnerHTML={{ __html: safeJsonForHtml(payload) }}
       />
@@ -362,9 +405,17 @@ export default function ShareRoute() {
     [],
   );
   const [downloading, setDownloading] = useState(false);
+  const agentAccessToken = useMemo(() => {
+    if (typeof window === "undefined") return "";
+    return (
+      new URLSearchParams(window.location.search).get(
+        CLIPS_AGENT_ACCESS_PARAM,
+      ) ?? ""
+    );
+  }, []);
 
   const dataQ = useQuery({
-    queryKey: ["public-recording", shareId, password],
+    queryKey: ["public-recording", shareId, password, agentAccessToken],
     queryFn: async () => {
       const url = new URL(
         `${appBasePath()}/api/public-recording`,
@@ -372,6 +423,9 @@ export default function ShareRoute() {
       );
       url.searchParams.set("id", shareId ?? "");
       if (password) url.searchParams.set("password", password);
+      if (agentAccessToken) {
+        url.searchParams.set(CLIPS_AGENT_ACCESS_PARAM, agentAccessToken);
+      }
       const res = await fetch(url.toString());
       const data = await res.json().catch(() => ({}));
       return { ok: res.ok, status: res.status, data };

package/corpus/templates/clips/changelog/2026-07-02-private-recordings-can-be-shared-with-agents-through-temporary-links-without-making-them-public.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-02
+---
+
+Private recordings can be shared with agents through temporary links without making them public.

package/corpus/templates/clips/server/lib/public-agent-context.ts

@@ -9,6 +9,7 @@ import { asc, eq } from "drizzle-orm";
 import { getRequestURL, setResponseHeader, type H3Event } from "h3";
 
 import {
+  agentAccessTokenResourceId,
   buildAgentApiUrls,
   buildRecommendedFrames,
   CLIP_AGENT_CONTEXT_VERSION,
@@ -53,6 +54,8 @@ export type PublicAgentAccessResult =
   | { ok: false; failure: PublicAgentFailure };
 
 const DEFAULT_MAX_AGENT_FRAME_MEDIA_BYTES = 200 * 1024 * 1024;
+export const CLIPS_AGENT_ACCESS_PARAM = "agent_access";
+export const CLIPS_AGENT_ACCESS_TTL_SECONDS = 2 * 60 * 60;
 
 function sameOwnerEmail(
   a: string | null | undefined,
@@ -207,8 +210,20 @@ export async function loadPublicAgentAccess(
   const viewerIsOwner = Boolean(
     session?.email && sameOwnerEmail(session.email, recording.ownerEmail),
   );
+  const suppliedToken = options.token ?? "";
+  const tokenAccess = suppliedToken
+    ? verifyShortLivedToken(
+        suppliedToken,
+        agentAccessTokenResourceId(recording.id),
+      )
+    : null;
+  const tokenAllowsAgentAccess = Boolean(tokenAccess?.ok);
 
-  if (recording.visibility !== "public" && !viewerIsOwner) {
+  if (
+    recording.visibility !== "public" &&
+    !viewerIsOwner &&
+    !tokenAllowsAgentAccess
+  ) {
     return {
       ok: false,
       failure: { status: 404, body: { error: "Not found" } },
@@ -229,26 +244,22 @@ export async function loadPublicAgentAccess(
   }
 
   let apiToken: string | null = null;
+  if (tokenAllowsAgentAccess) {
+    apiToken = suppliedToken;
+  }
   if (
     recording.password &&
     recording.visibility === "public" &&
     viewerIsOwner
   ) {
-    apiToken = signShortLivedToken({ resourceId: recording.id });
+    apiToken = signShortLivedToken({
+      resourceId: agentAccessTokenResourceId(recording.id),
+    });
   }
 
   if (recording.password && !viewerIsOwner) {
-    const suppliedToken = options.token ?? "";
     const suppliedPassword = options.password ?? "";
-    let allowed = false;
-
-    if (suppliedToken) {
-      const result = verifyShortLivedToken(suppliedToken, recording.id);
-      if (result.ok) {
-        allowed = true;
-        apiToken = suppliedToken;
-      }
-    }
+    let allowed = tokenAllowsAgentAccess;
 
     if (
       !allowed &&
@@ -256,7 +267,9 @@ export async function loadPublicAgentAccess(
       verifySharePassword(suppliedPassword, recording.password)
     ) {
       allowed = true;
-      apiToken = signShortLivedToken({ resourceId: recording.id });
+      apiToken = signShortLivedToken({
+        resourceId: agentAccessTokenResourceId(recording.id),
+      });
     }
 
     if (!allowed) {

package/corpus/templates/clips/server/routes/api/agent-context.json.get.ts

@@ -23,6 +23,7 @@ import {
   loadPublicAgentAccess,
   parseAgentChapters,
   queryString,
+  CLIPS_AGENT_ACCESS_PARAM,
 } from "../../lib/public-agent-context.js";
 
 export default defineEventHandler(async (event: H3Event) => {
@@ -32,7 +33,7 @@ export default defineEventHandler(async (event: H3Event) => {
   const id = queryString(query.id);
   const accessResult = await loadPublicAgentAccess(event, id, {
     password: queryString(query.password),
-    token: queryString(query.t),
+    token: queryString(query[CLIPS_AGENT_ACCESS_PARAM]) || queryString(query.t),
   });
 
   if (!accessResult.ok) {

package/corpus/templates/clips/server/routes/api/agent-frame.jpg.get.ts

@@ -13,6 +13,7 @@ import {
 } from "h3";
 
 import {
+  CLIPS_AGENT_ACCESS_PARAM,
   loadPublicAgentAccess,
   loadRecordingMediaBytes,
   queryString,
@@ -95,7 +96,7 @@ export default defineEventHandler(async (event: H3Event) => {
   const id = queryString(query.id);
   const accessResult = await loadPublicAgentAccess(event, id, {
     password: queryString(query.password),
-    token: queryString(query.t),
+    token: queryString(query[CLIPS_AGENT_ACCESS_PARAM]) || queryString(query.t),
   });
 
   if (!accessResult.ok) {

package/corpus/templates/clips/server/routes/api/agent-transcript.json.get.ts

@@ -16,6 +16,7 @@ import { buildAgentApiUrls } from "../../../shared/agent-context.js";
 import { isLoomEmbedBackedRecording } from "../../../shared/loom.js";
 import {
   applyAgentJsonHeaders,
+  CLIPS_AGENT_ACCESS_PARAM,
   getServerAppBasePath,
   loadAgentTranscript,
   loadPublicAgentAccess,
@@ -30,7 +31,7 @@ export default defineEventHandler(async (event: H3Event) => {
   const id = queryString(query.id);
   const accessResult = await loadPublicAgentAccess(event, id, {
     password: queryString(query.password),
-    token: queryString(query.t),
+    token: queryString(query[CLIPS_AGENT_ACCESS_PARAM]) || queryString(query.t),
   });
 
   if (!accessResult.ok) {

package/corpus/templates/clips/server/routes/api/public-recording.get.ts

@@ -26,7 +26,10 @@ import {
   type H3Event,
 } from "h3";
 
-import { buildAgentApiUrls } from "../../../shared/agent-context.js";
+import {
+  agentAccessTokenResourceId,
+  buildAgentApiUrls,
+} from "../../../shared/agent-context.js";
 import {
   normalizeTranscriptSegments,
   parseTranscriptSegments,
@@ -248,7 +251,9 @@ export default defineEventHandler(async (event) => {
     rec.visibility === "public" && !rec.archivedAt && !rec.trashedAt;
   const agentToken =
     canExposeAgentContext && rec.password
-      ? signShortLivedToken({ resourceId: recordingId })
+      ? signShortLivedToken({
+          resourceId: agentAccessTokenResourceId(recordingId),
+        })
       : undefined;
   const agentContextUrl = canExposeAgentContext
     ? buildAgentApiUrls(recordingId, {

package/corpus/templates/clips/shared/agent-context.ts

@@ -4,6 +4,11 @@ export const CLIP_AGENT_CONTEXT_VERSION = 1;
 export const AGENT_CONTEXT_ENDPOINT = "/api/agent-context.json";
 export const AGENT_TRANSCRIPT_ENDPOINT = "/api/agent-transcript.json";
 export const AGENT_FRAME_ENDPOINT = "/api/agent-frame.jpg";
+export const CLIP_AGENT_ACCESS_TOKEN_PREFIX = "clip-agent-context";
+
+export function agentAccessTokenResourceId(recordingId: string): string {
+  return `${CLIP_AGENT_ACCESS_TOKEN_PREFIX}:${recordingId}`;
+}
 
 export interface AgentApiUrls {
   contextUrl: string;

package/dist/collab/awareness.d.ts

@@ -49,11 +49,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -64,10 +64,10 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;
 //# sourceMappingURL=awareness.d.ts.map

package/dist/collab/awareness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"awareness.d.ts","sourceRoot":"","sources":["../../src/collab/awareness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD,eAAO,MAAM,sBAAsB,EAAG,kBAA2B,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD,wBAAgB,mBAAmB,IAAI,YAAY,CAElD;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,EAClD,KAAK,CAAC,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,GACb,IAAI,CAUN;AAKD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAO1E;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAOnE;AAUD;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa;;;;;kBAuCa,MAAM;eAAS,MAAM;;;GAa1D,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;kBAWM,MAAM;kBAAY,MAAM;;;GAMvD,CAAC"}
+{"version":3,"file":"awareness.d.ts","sourceRoot":"","sources":["../../src/collab/awareness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD,eAAO,MAAM,sBAAsB,EAAG,kBAA2B,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD,wBAAgB,mBAAmB,IAAI,YAAY,CAElD;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,EAClD,KAAK,CAAC,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,GACb,IAAI,CAUN;AAKD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAO1E;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAOnE;AAUD;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa;;;;;;kBAuCa,MAAM;eAAS,MAAM;;GAa1D,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;kBAWM,MAAM;kBAAY,MAAM;;GAMvD,CAAC"}

package/dist/collab/routes.d.ts

@@ -41,8 +41,8 @@ export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import
  * Body: { text: string, fieldName?: string, requestSource?: string }
  */
 export declare const postCollabText: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     text?: undefined;
+    ok?: undefined;
     error: string;
 } | {
     error?: undefined;

package/dist/file-upload/actions/upload-image.d.ts

@@ -3,18 +3,18 @@ declare const _default: import("../../action.js").ActionDefinition<{
     url?: string;
     filename?: string;
 }, {
+    id?: undefined;
     error: string;
     configured?: undefined;
     connectPath?: undefined;
     url?: undefined;
-    id?: undefined;
     provider?: undefined;
 } | {
+    id?: undefined;
     error: string;
     configured: boolean;
     connectPath: string;
     url?: undefined;
-    id?: undefined;
     provider?: undefined;
 } | {
     error?: undefined;

package/dist/notifications/routes.d.ts

@@ -11,14 +11,14 @@
  *   DELETE /_agent-native/notifications/:id         — delete
  */
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
+    error?: undefined;
     count: number;
     updated?: undefined;
-    error?: undefined;
     ok?: undefined;
 } | {
+    error?: undefined;
     count?: undefined;
     updated: number;
-    error?: undefined;
     ok?: undefined;
 } | {
     count?: undefined;
@@ -26,9 +26,9 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error: string;
     ok?: undefined;
 } | {
+    error?: undefined;
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/observability/routes.d.ts

@@ -56,13 +56,13 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     ok?: undefined;
     summary?: undefined;
     spans?: undefined;
-    error: any;
     id?: undefined;
+    error: any;
 } | {
     error?: undefined;
     summary?: undefined;
     spans?: undefined;
-    ok: boolean;
     id?: undefined;
+    ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/resources/handlers.d.ts

@@ -49,8 +49,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/docs/content/locales/ar-SA/template-analytics.mdx

@@ -147,6 +147,8 @@ pnpm dev
 
 **سطح موصل واسع.** تأتي أحداث BigQuery وGA4 وتحليلات المنتج وCRM والدعم والمجتمع وGitHub/Jira وSEO وأحداث `/track` للطرف الأول من خلال actions التي يمكن للوكيل الاتصال بها.
 
+**Session replay agent handoff.** Session recordings stay private, but the session detail page can mint a temporary **Copy for agent** link. The two-hour `agent_access` URL lets an external agent read replay summaries, timelines, and bounded event details without exposing blob/provider URLs or making the recording public.
+
 ### العمل مع الوكيل
 
 يعرف الوكيل دائمًا ما تنظر إليه. يتم إدخال حالة الشاشة الحالية في كل رسالة ككتلة `<current-screen>` - فهي تحتوي على العرض النشط، ولوحة المعلومات المفتوحة أو التحليل، وأي عوامل تصفية محددة.

package/docs/content/locales/ar-SA/template-clips.mdx

@@ -131,6 +131,8 @@ API، لذا فإن النماذج التي تقبل النص أو الصور ا
 | `/api/agent-transcript.json?id=<recordingId>`     | أجزاء النص ذات الطابع الزمني مع `startMs`، `endMs`، والطوابع الزمنية القابلة للقراءة، والنص، وتسميات المصدر الاختيارية        |
 | `/api/agent-frame.jpg?id=<recordingId>&atMs=<ms>` | إطار JPEG مستخرج من الفيديو بطابع زمني للفيديو الأصلي                                                                         |
 
+Temporary private agent links are also supported: the Share dialog can mint a two-hour `agent_access` URL for any recording the viewer can access. Agents use that token with the share page and JSON APIs, and the clip does not become public.
+
 تتبع نقاط النهاية نفس القواعد العامة/كلمة المرور/انتهاء الصلاحية مثل صفحة المشاركة.
 تتطلب المقاطع المحمية بكلمة مرور كلمة المرور مرة واحدة؛ تعود الاستجابات الناجحة
 روابط رمزية قصيرة العمر بحيث لا يحتاج وكلاء المراحل النهائية إلى النص العادي

package/docs/content/locales/de-DE/template-analytics.mdx

@@ -147,6 +147,8 @@ CLI gibt den lokalen Entwickler URL aus. Melden Sie sich bei Google an und öffn
 
 **Breite Konnektoroberfläche.** BigQuery, GA4, Produktanalyse, CRM, Support, Community, GitHub/Jira, SEO und Erstanbieter-`/track`-Ereignisse kommen alle über actions, das der Agent anrufen kann.
 
+**Session replay agent handoff.** Session recordings stay private, but the session detail page can mint a temporary **Copy for agent** link. The two-hour `agent_access` URL lets an external agent read replay summaries, timelines, and bounded event details without exposing blob/provider URLs or making the recording public.
+
 ### Zusammenarbeit mit dem Agenten
 
 Der Agent weiß immer, was Sie sehen. Der aktuelle Bildschirmstatus wird als `<current-screen>`-Block in jede Nachricht eingefügt – er enthält die aktive Ansicht, das geöffnete Dashboard oder die geöffnete Analyse und alle ausgewählten Filter.

package/docs/content/locales/de-DE/template-clips.mdx

@@ -131,6 +131,8 @@ Agent.
 | `/api/agent-transcript.json?id=<recordingId>`     | Transkriptsegmente mit Zeitstempel mit `startMs`, `endMs`, lesbaren Zeitstempeln, Text und optionalen Quellenbezeichnungen |
 | `/api/agent-frame.jpg?id=<recordingId>&atMs=<ms>` | Ein JPEG-Frame, der mit einem Originalvideo-Zeitstempel aus dem Video extrahiert wurde                                     |
 
+Temporary private agent links are also supported: the Share dialog can mint a two-hour `agent_access` URL for any recording the viewer can access. Agents use that token with the share page and JSON APIs, and the clip does not become public.
+
 Die Endpunkte folgen denselben öffentlichen/Passwort-/Ablaufregeln wie die Freigabeseite.
 Passwortgeschützte Clips erfordern das einmalige Passwort; Erfolgreiche Antworten werden zurückgegeben
 kurzlebige tokenisierte Links, sodass nachgeschaltete Agenten den Klartext nicht benötigen

package/docs/content/locales/es-ES/template-analytics.mdx

@@ -147,6 +147,8 @@ El CLI imprime el desarrollador local URL. Inicia sesión con Google y luego abr
 
 **Amplia superficie de conector.** BigQuery, GA4, análisis de productos, CRM, soporte, comunidad, GitHub/Jira, SEO y eventos propios `/track` llegan a través de actions al que el agente puede llamar.
 
+**Session replay agent handoff.** Session recordings stay private, but the session detail page can mint a temporary **Copy for agent** link. The two-hour `agent_access` URL lets an external agent read replay summaries, timelines, and bounded event details without exposing blob/provider URLs or making the recording public.
+
 ### Trabajar con el agente
 
 El agente siempre sabe lo que estás mirando. El estado actual de la pantalla se inyecta en cada mensaje como un bloque `<current-screen>`: contiene la vista activa, el panel o análisis abierto y los filtros seleccionados.

package/docs/content/locales/es-ES/template-clips.mdx

@@ -131,6 +131,8 @@ agente.
 | `/api/agent-transcript.json?id=<recordingId>`     | Segmentos de transcripción con marca de tiempo con `startMs`, `endMs`, marcas de tiempo legibles, texto y etiquetas de origen opcionales |
 | `/api/agent-frame.jpg?id=<recordingId>&atMs=<ms>` | Un fotograma JPEG extraído del vídeo en una marca de tiempo del vídeo original                                                           |
 
+Temporary private agent links are also supported: the Share dialog can mint a two-hour `agent_access` URL for any recording the viewer can access. Agents use that token with the share page and JSON APIs, and the clip does not become public.
+
 Los puntos finales siguen las mismas reglas de público/contraseña/caducidad que la página para compartir.
 Los clips protegidos con contraseña requieren la contraseña una vez; regresan respuestas exitosas
 Enlaces tokenizados de corta duración para que los agentes posteriores no necesiten el texto sin formato

package/docs/content/locales/fr-FR/template-analytics.mdx

@@ -147,6 +147,8 @@ Le CLI imprime le développement local URL. Connectez-vous avec Google, puis ouv
 
 **Large surface de connecteur.** Les événements BigQuery, GA4, analyses de produits, CRM, support, communauté, GitHub/Jira, SEO et `/track` propriétaires passent tous par actions que l'agent peut appeler.
 
+**Session replay agent handoff.** Session recordings stay private, but the session detail page can mint a temporary **Copy for agent** link. The two-hour `agent_access` URL lets an external agent read replay summaries, timelines, and bounded event details without exposing blob/provider URLs or making the recording public.
+
 ### Travailler avec l'agent
 
 L'agent sait toujours ce que vous regardez. L'état actuel de l'écran est injecté dans chaque message sous forme de bloc `<current-screen>` : il contient la vue active, le tableau de bord ou l'analyse ouvert et tous les filtres sélectionnés.

package/docs/content/locales/fr-FR/template-clips.mdx

@@ -131,6 +131,8 @@ agent.
 | `/api/agent-transcript.json?id=<recordingId>`     | Segments de transcription horodatés avec `startMs`, `endMs`, horodatages lisibles, texte et étiquettes de source facultatives          |
 | `/api/agent-frame.jpg?id=<recordingId>&atMs=<ms>` | Une image JPEG extraite de la vidéo avec un horodatage de la vidéo d'origine                                                           |
 
+Temporary private agent links are also supported: the Share dialog can mint a two-hour `agent_access` URL for any recording the viewer can access. Agents use that token with the share page and JSON APIs, and the clip does not become public.
+
 Les points de terminaison suivent les mêmes règles de public/mot de passe/expiration que la page de partage.
 Les clips protégés par mot de passe nécessitent le mot de passe une seule fois ; les réponses positives reviennent
 Liens tokenisés de courte durée afin que les agents en aval n'aient pas besoin du texte brut

package/docs/content/locales/hi-IN/template-analytics.mdx

@@ -147,6 +147,8 @@ CLI स्थानीय डेव URL प्रिंट करता है
 
 **व्यापक कनेक्टर सतह।** BigQuery, GA4, उत्पाद विश्लेषण, CRM, समर्थन, समुदाय, GitHub/Jira, SEO, और प्रथम-पक्ष `/track` इवेंट सभी actions के माध्यम से आते हैं जिन्हें एजेंट कॉल कर सकता है।
 
+**Session replay agent handoff.** Session recordings stay private, but the session detail page can mint a temporary **Copy for agent** link. The two-hour `agent_access` URL lets an external agent read replay summaries, timelines, and bounded event details without exposing blob/provider URLs or making the recording public.
+
 ### एजेंट के साथ काम करना
 
 एजेंट को हमेशा पता होता है कि आप क्या देख रहे हैं। वर्तमान स्क्रीन स्थिति को प्रत्येक संदेश में `<current-screen>` ब्लॉक के रूप में इंजेक्ट किया जाता है - इसमें सक्रिय दृश्य, खुला डैशबोर्ड या विश्लेषण और कोई भी चयनित फ़िल्टर शामिल होता है।

package/docs/content/locales/hi-IN/template-clips.mdx

@@ -131,6 +131,8 @@ APIs, इसलिए मॉडल जो केवल पाठ या स्
 | `/api/agent-transcript.json?id=<recordingId>`     | `startMs`, `endMs`, पठनीय टाइमस्टैम्प, टेक्स्ट और वैकल्पिक स्रोत लेबल के साथ टाइमस्टैम्प्ड ट्रांसक्रिप्ट सेगमेंट |
 | `/api/agent-frame.jpg?id=<recordingId>&atMs=<ms>` | मूल-वीडियो टाइमस्टैम्प पर वीडियो से निकाला गया एक JPEG फ्रेम                                                     |
 
+Temporary private agent links are also supported: the Share dialog can mint a two-hour `agent_access` URL for any recording the viewer can access. Agents use that token with the share page and JSON APIs, and the clip does not become public.
+
 एंडपॉइंट शेयर पेज के समान सार्वजनिक/पासवर्ड/समाप्ति नियमों का पालन करते हैं।
 पासवर्ड-सुरक्षित क्लिप को एक बार पासवर्ड की आवश्यकता होती है; सफल प्रत्युत्तर वापस आते हैं
 अल्पकालिक टोकनयुक्त लिंक ताकि डाउनस्ट्रीम एजेंटों को प्लेनटेक्स्ट की आवश्यकता न हो

package/docs/content/locales/ja-JP/template-analytics.mdx

@@ -147,6 +147,8 @@ CLI はローカル開発 URL を出力します。 Google でログインし、
 
 **幅広いコネクタ サーフェス。** BigQuery、GA4、製品分析、CRM、サポート、コミュニティ、GitHub/Jira、SEO、ファーストパーティ `/track` イベントはすべて、エージェントが呼び出すことができる actions 経由で行われます。
 
+**Session replay agent handoff.** Session recordings stay private, but the session detail page can mint a temporary **Copy for agent** link. The two-hour `agent_access` URL lets an external agent read replay summaries, timelines, and bounded event details without exposing blob/provider URLs or making the recording public.
+
 ### エージェントとの連携
 
 エージェントは、あなたが何を見ているのかを常に知っています。現在の画面状態は、`<current-screen>` ブロックとしてすべてのメッセージに挿入されます。これには、アクティブなビュー、開いているダッシュボードまたは分析、選択したフィルターが含まれます。