@agent-native/core 0.84.56 → 0.84.58

package/corpus/templates/analytics/server/plugins/agent-chat.ts

@@ -7,6 +7,7 @@ import {
 } from "@agent-native/core/server";
 
 import actionsRegistry from "../../.generated/actions-registry.js";
+import { applyAnalyticsPlanModePolicy } from "../lib/agent-chat-plan-mode";
 import { renderDataDictionary } from "../lib/data-dictionary-context";
 import {
   failedDataQueryAttemptMessage,
@@ -65,6 +66,11 @@ const INITIAL_TOOL_NAMES = [
   "navigate",
 ];
 
+export {
+  applyAnalyticsPlanModePolicy,
+  PLAN_MODE_ACT_ONLY_TOOLS,
+} from "../lib/agent-chat-plan-mode";
+
 function latestUserText(
   messages: AgentLoopFinalResponseGuardContext["messages"],
 ): string {
@@ -160,7 +166,9 @@ function realDataFinalGuard(context: AgentLoopFinalResponseGuardContext) {
 
 export default createAgentChatPlugin({
   appId: "analytics",
-  actions: loadActionsFromStaticRegistry(actionsRegistry),
+  actions: applyAnalyticsPlanModePolicy(
+    loadActionsFromStaticRegistry(actionsRegistry),
+  ),
   initialToolNames: INITIAL_TOOL_NAMES,
   finalResponseGuard: realDataFinalGuard,
   // Enable sandboxed JavaScript execution for analytics data processing.

package/corpus/templates/analytics/server/routes/[...page].get.ts

@@ -1,5 +1,108 @@
 import { createH3SSRHandler } from "@agent-native/core/server/ssr-handler";
+import {
+  defineEventHandler,
+  getQuery,
+  getRequestURL,
+  setResponseHeader,
+} from "h3";
 
-export default createH3SSRHandler(
+import {
+  buildSessionReplayAgentContext,
+  safeJsonForHtml,
+  SESSION_REPLAY_AGENT_ACCESS_PARAM,
+} from "../lib/session-replay-agent-context.js";
+
+const ssrHandler = createH3SSRHandler(
   () => import("virtual:react-router/server-build"),
 );
+
+function configuredAppBasePath(): string {
+  const raw = process.env.VITE_APP_BASE_PATH || process.env.APP_BASE_PATH || "";
+  if (!raw || raw === "/") return "";
+  const normalized = raw.startsWith("/") ? raw : `/${raw}`;
+  return normalized.replace(/\/+$/, "");
+}
+
+function stripAppBasePath(pathname: string): string {
+  const basePath = configuredAppBasePath();
+  if (!basePath) return pathname;
+  if (pathname === basePath) return "/";
+  if (pathname.startsWith(`${basePath}/`)) {
+    return pathname.slice(basePath.length) || "/";
+  }
+  return pathname;
+}
+
+function sessionRecordingIdFromPath(pathname: string): string | null {
+  const match = stripAppBasePath(pathname).match(/^\/sessions\/([^/]+)\/?$/);
+  if (!match?.[1]) return null;
+  try {
+    return decodeURIComponent(match[1]);
+  } catch {
+    return match[1];
+  }
+}
+
+function queryString(value: unknown): string {
+  if (typeof value === "string") return value;
+  if (Array.isArray(value) && typeof value[0] === "string") return value[0];
+  return "";
+}
+
+async function buildAgentDiscoveryScript(event: any): Promise<string | null> {
+  const requestUrl = getRequestURL(event);
+  const recordingId = sessionRecordingIdFromPath(requestUrl.pathname);
+  if (!recordingId) return null;
+
+  const query = getQuery(event);
+  const token = queryString(query[SESSION_REPLAY_AGENT_ACCESS_PARAM]);
+  if (!token) return null;
+
+  const context = await buildSessionReplayAgentContext({
+    recordingId,
+    token,
+    origin: requestUrl.origin,
+    includeTimeline: false,
+  }).catch(() => null);
+  if (!context) return null;
+
+  return `<script type="application/agent-native+json" id="analytics-session-replay-agent-context">${safeJsonForHtml(
+    context,
+  )}</script>`;
+}
+
+function injectAgentDiscovery(html: string, script: string): string {
+  if (html.includes('id="analytics-session-replay-agent-context"')) {
+    return html;
+  }
+  if (html.includes("</head>")) {
+    return html.replace("</head>", `${script}</head>`);
+  }
+  if (html.includes("</body>")) {
+    return html.replace("</body>", `${script}</body>`);
+  }
+  return `${html}${script}`;
+}
+
+export default defineEventHandler(async (event) => {
+  const response = (await ssrHandler(event)) as Response;
+  const script = await buildAgentDiscoveryScript(event);
+  if (!script) return response;
+
+  const contentType = response.headers.get("content-type") ?? "";
+  if (!contentType.includes("text/html")) return response;
+
+  const html = await response.text();
+  const headers = new Headers(response.headers);
+  headers.delete("content-length");
+  headers.set("Cache-Control", "private, max-age=0, no-store");
+  headers.set("Referrer-Policy", "no-referrer");
+  setResponseHeader(event, "Cache-Control", "private, max-age=0, no-store");
+  setResponseHeader(event, "Referrer-Policy", "no-referrer");
+
+  return new Response(injectAgentDiscovery(html, script), {
+    status: response.status,
+    statusText: response.statusText,
+    headers,
+  });
+});

package/corpus/templates/analytics/server/routes/api/session-replay/agent-context.json.get.ts

@@ -0,0 +1,48 @@
+import {
+  defineEventHandler,
+  getQuery,
+  getRequestURL,
+  setResponseHeader,
+  setResponseStatus,
+} from "h3";
+
+import {
+  buildSessionReplayAgentContext,
+  SESSION_REPLAY_AGENT_ACCESS_PARAM,
+} from "../../../lib/session-replay-agent-context.js";
+
+function queryString(value: unknown): string {
+  if (typeof value === "string") return value;
+  if (Array.isArray(value) && typeof value[0] === "string") return value[0];
+  return "";
+}
+
+function applyAgentJsonHeaders(event: any) {
+  setResponseHeader(event, "Content-Type", "application/json; charset=utf-8");
+  setResponseHeader(event, "X-Content-Type-Options", "nosniff");
+  setResponseHeader(event, "Referrer-Policy", "no-referrer");
+  setResponseHeader(event, "Cache-Control", "private, max-age=0, no-store");
+}
+
+export default defineEventHandler(async (event) => {
+  applyAgentJsonHeaders(event);
+  const query = getQuery(event);
+  const id = queryString(query.id);
+  const token = queryString(query[SESSION_REPLAY_AGENT_ACCESS_PARAM]);
+
+  if (!id || !token) {
+    setResponseStatus(event, 400);
+    return { error: "id and agent access token are required" };
+  }
+
+  try {
+    return await buildSessionReplayAgentContext({
+      recordingId: id,
+      token,
+      origin: getRequestURL(event).origin,
+    });
+  } catch (error: any) {
+    setResponseStatus(event, error?.statusCode ?? 400);
+    return { error: error?.message || String(error) };
+  }
+});

package/corpus/templates/analytics/server/routes/api/session-replay/agent-events.json.get.ts

@@ -0,0 +1,63 @@
+import {
+  defineEventHandler,
+  getQuery,
+  setResponseHeader,
+  setResponseStatus,
+} from "h3";
+
+import {
+  SESSION_REPLAY_AGENT_ACCESS_PARAM,
+  verifySessionReplayAgentAccess,
+} from "../../../lib/session-replay-agent-context.js";
+import {
+  getSessionReplayTokenizedEvents,
+  type SessionReplayEventReadOptions,
+} from "../../../lib/session-replay.js";
+
+function queryString(value: unknown): string {
+  if (typeof value === "string") return value;
+  if (Array.isArray(value) && typeof value[0] === "string") return value[0];
+  return "";
+}
+
+function queryInt(value: unknown): number | undefined {
+  const raw = queryString(value);
+  if (!raw || !/^\d+$/.test(raw)) return undefined;
+  return Number(raw);
+}
+
+function applyAgentJsonHeaders(event: any) {
+  setResponseHeader(event, "Content-Type", "application/json; charset=utf-8");
+  setResponseHeader(event, "X-Content-Type-Options", "nosniff");
+  setResponseHeader(event, "Referrer-Policy", "no-referrer");
+  setResponseHeader(event, "Cache-Control", "private, max-age=0, no-store");
+}
+
+export default defineEventHandler(async (event) => {
+  applyAgentJsonHeaders(event);
+  const query = getQuery(event);
+  const id = queryString(query.id);
+  const token = queryString(query[SESSION_REPLAY_AGENT_ACCESS_PARAM]);
+
+  if (!id || !token) {
+    setResponseStatus(event, 400);
+    return { error: "id and agent access token are required" };
+  }
+  if (!verifySessionReplayAgentAccess(id, token)) {
+    setResponseStatus(event, 401);
+    return { error: "Invalid or expired agent access" };
+  }
+
+  const options: SessionReplayEventReadOptions = {
+    startSeq: queryInt(query.startSeq),
+    endSeq: queryInt(query.endSeq),
+    limit: queryInt(query.limit),
+  };
+
+  try {
+    return await getSessionReplayTokenizedEvents(id, options);
+  } catch (error: any) {
+    setResponseStatus(event, error?.statusCode ?? 400);
+    return { error: error?.message || String(error) };
+  }
+});

package/corpus/templates/analytics/shared/session-replay-agent-access.ts

@@ -0,0 +1,10 @@
+export const SESSION_REPLAY_AGENT_ACCESS_PARAM = "agent_access";
+
+const SESSION_REPLAY_AGENT_ACCESS_TOKEN_PREFIX =
+  "analytics-session-replay-agent-context";
+
+export function sessionReplayAgentAccessTokenResourceId(
+  recordingId: string,
+): string {
+  return `${SESSION_REPLAY_AGENT_ACCESS_TOKEN_PREFIX}:${recordingId}`;
+}

package/corpus/templates/clips/.agents/skills/video-sharing/SKILL.md

@@ -156,9 +156,10 @@ Required Slack app setup:
 - Deploy secrets: `SLACK_CLIENT_ID`, `SLACK_CLIENT_SECRET`, and
   `SLACK_SIGNING_SECRET`
 
-## Agent-readable public clips
+## Agent-readable clips
 
-Public recordings also expose URLs meant for external agents:
+Recordings can expose URLs meant for external agents without handing over raw
+video bytes:
 
 | Endpoint | Meaning |
 | -------- | ------- |
@@ -166,9 +167,14 @@ Public recordings also expose URLs meant for external agents:
 | `/api/agent-transcript.json?id=<recordingId>` | Timestamped transcript segments with `startMs`, `endMs`, `timestamp`, `range`, `text`, and optional `source` |
 | `/api/agent-frame.jpg?id=<recordingId>&atMs=<ms>` | JPEG frame extracted from the video at the requested original-video timestamp |
 
-These endpoints follow the same access model as `/api/public-recording`:
+These endpoints follow the same access model as `/api/public-recording`, plus a
+temporary agent-link path:
 
 - Non-public clips return not found to anonymous callers.
+- `create-recording-agent-link` resolves normal recording access, rejects
+  archived or trashed recordings, then mints a two-hour `agent_access` URL for
+  `/share/:recordingId`. The share page SSR advertises the agent context URL,
+  and the JSON endpoints accept the same scoped token.
 - Expired clips return expired.
 - Password-protected clips require `password=<pw>` once; successful JSON
   responses include short-lived tokenized links so the plaintext password is not
@@ -183,11 +189,11 @@ These endpoints follow the same access model as `/api/public-recording`:
 - Frame extraction must use the checked recording media path and must not expose
   raw provider URLs.
 
-The share popover's "Share with agents" field should copy the agent context URL,
-not raw transcript text. Its "Copy agent prompt" field may wrap that URL with
-instructions to fetch transcripts, frames, and browser diagnostics, but it should
-still point agents at the context response so they can fetch only the visual
-context they need.
+The share popover's "Share with agents" field should copy an agent context URL
+or tokenized share page URL, not raw transcript text. Its "Copy agent prompt"
+field may wrap that URL with instructions to fetch transcripts, frames, and
+browser diagnostics, but it should still point agents at the context response so
+they can fetch only the visual context they need.
 
 ## View counting
 

package/corpus/templates/clips/AGENTS.md

@@ -132,8 +132,9 @@ Detailed media, meeting, dictation, editing, and sharing rules live in
 - `navigate` moves the UI to recording/library/meeting/share surfaces.
 - Use data actions for full transcripts and media metadata.
 - For the in-app Clips agent, prefer `get-recording-player-data` for full
-  private/authenticated recording context. Use the public agent-context URLs
-  when preparing a link for another agent outside Clips.
+  private/authenticated recording context. When preparing a link for another
+  agent outside Clips, use `create-recording-agent-link`; it mints a two-hour
+  `agent_access` share URL without changing recording visibility.
 
 ## Skills
 

package/corpus/templates/clips/actions/create-recording-agent-link.ts

@@ -0,0 +1,90 @@
+import { defineAction } from "@agent-native/core";
+import {
+  getRequestContext,
+  getRequestUserEmail,
+  signShortLivedToken,
+} from "@agent-native/core/server";
+import { ForbiddenError, resolveAccess } from "@agent-native/core/sharing";
+import { z } from "zod";
+
+import {
+  CLIPS_AGENT_ACCESS_PARAM,
+  CLIPS_AGENT_ACCESS_TTL_SECONDS,
+  getServerAppBasePath,
+} from "../server/lib/public-agent-context.js";
+import {
+  agentAccessTokenResourceId,
+  buildAgentApiUrls,
+} from "../shared/agent-context.js";
+
+function appOrigin(): string {
+  const origin =
+    getRequestContext()?.requestOrigin ||
+    process.env.APP_URL ||
+    process.env.BETTER_AUTH_URL ||
+    "http://localhost:3000";
+  try {
+    return new URL(origin).origin;
+  } catch {
+    return "http://localhost:3000";
+  }
+}
+
+function appendAgentAccess(url: string, token: string): string {
+  const sep = url.includes("?") ? "&" : "?";
+  return `${url}${sep}${CLIPS_AGENT_ACCESS_PARAM}=${encodeURIComponent(token)}`;
+}
+
+export default defineAction({
+  description:
+    "Create a temporary private agent-readable link for one Clips recording. The URL is scoped to that recording and expires after two hours.",
+  schema: z.object({
+    recordingId: z.string().describe("Recording ID"),
+  }),
+  readOnly: true,
+  run: async (args) => {
+    const access = await resolveAccess("recording", args.recordingId);
+    if (!access) {
+      throw new ForbiddenError(`No access to recording ${args.recordingId}`);
+    }
+
+    const recording = access.resource as {
+      id: string;
+      archivedAt?: string | null;
+      trashedAt?: string | null;
+    };
+    if (recording.archivedAt || recording.trashedAt) {
+      throw new ForbiddenError(
+        `Recording ${args.recordingId} is not shareable`,
+      );
+    }
+
+    const token = signShortLivedToken({
+      resourceId: agentAccessTokenResourceId(recording.id),
+      viewerEmail: getRequestUserEmail() || undefined,
+      ttlSeconds: CLIPS_AGENT_ACCESS_TTL_SECONDS,
+    });
+    const origin = appOrigin();
+    const basePath = getServerAppBasePath();
+    const expiresAt = new Date(
+      Date.now() + CLIPS_AGENT_ACCESS_TTL_SECONDS * 1000,
+    ).toISOString();
+    const pageUrl = appendAgentAccess(
+      `${origin}${basePath}/share/${encodeURIComponent(recording.id)}`,
+      token,
+    );
+    const api = buildAgentApiUrls(recording.id, {
+      origin,
+      basePath,
+      token,
+    });
+
+    return {
+      recordingId: recording.id,
+      url: pageUrl,
+      contextUrl: api.contextUrl,
+      expiresAt,
+      ttlSeconds: CLIPS_AGENT_ACCESS_TTL_SECONDS,
+    };
+  },
+});

package/corpus/templates/clips/app/components/player/share-dialog.tsx

@@ -1,6 +1,6 @@
 import {
-  appBasePath,
   appPath,
+  useActionMutation,
   useActionQuery,
   useSession,
   useT,
@@ -38,7 +38,6 @@ import {
 import { Switch } from "@/components/ui/switch";
 import { Tabs, TabsList, TabsTrigger, TabsContent } from "@/components/ui/tabs";
 
-import { buildAgentApiUrls } from "../../../shared/agent-context";
 import { isLoomEmbedUrl } from "../../../shared/loom";
 import { withShareAttribution } from "../../../shared/share-attribution";
 
@@ -284,46 +283,27 @@ function LinkTab({
     (data?.visibility as Visibility | null) ?? "private";
   const isPublic = visibility === "public";
   const isLoomRecording = isLoomRecordingProp || isLoomEmbedUrl(videoUrl);
-  const publicAgentContextUrl =
-    typeof window === "undefined"
-      ? ""
-      : buildAgentApiUrls(recordingId, {
-          origin: window.location.origin,
-          basePath: appBasePath(),
-        }).contextUrl;
-  const [tokenizedAgentContextUrl, setTokenizedAgentContextUrl] = useState("");
+  const createAgentLink = useActionMutation(
+    "create-recording-agent-link" as any,
+  );
+  const [agentContextUrl, setAgentContextUrl] = useState("");
 
   useEffect(() => {
-    if (!isPublic || !hasPassword || typeof window === "undefined") {
-      setTokenizedAgentContextUrl("");
-      return;
-    }
-
-    let cancelled = false;
-    async function loadTokenizedAgentContextUrl() {
-      setTokenizedAgentContextUrl("");
-      const res = await fetch(publicAgentContextUrl, {
-        credentials: "include",
-      }).catch(() => null);
-      if (!res?.ok) return;
-      const payload = await res.json().catch(() => null);
-      const contextUrl =
-        typeof payload?.apis?.context?.url === "string"
-          ? payload.apis.context.url
-          : "";
-      if (!cancelled) setTokenizedAgentContextUrl(contextUrl);
-    }
-
-    void loadTokenizedAgentContextUrl();
-    return () => {
-      cancelled = true;
-    };
-  }, [hasPassword, isPublic, publicAgentContextUrl]);
-
-  const agentContextUrl = hasPassword
-    ? tokenizedAgentContextUrl
-    : publicAgentContextUrl;
-  const agentShareDisabled = isPending || !isPublic || !agentContextUrl;
+    setAgentContextUrl("");
+  }, [recordingId, visibility]);
+
+  async function handleCreateAgentLink() {
+    if (createAgentLink.isPending) return;
+    const result = (await createAgentLink.mutateAsync({
+      recordingId,
+    })) as { url?: string };
+    if (!result?.url) return;
+    setAgentContextUrl(result.url);
+    copyToClipboard(result.url);
+  }
+
+  const agentShareDisabled =
+    isPending || createAgentLink.isPending || !agentContextUrl;
   const agentPrompt = agentContextUrl
     ? t("shareDialog.agentPrompt", { agentContextUrl })
     : "";
@@ -348,11 +328,28 @@ function LinkTab({
           (and a connect link) instead of leaving it buried in Settings. */}
       {isPublic ? <SlackShareHint canManage={canManage} /> : null}
 
-      <CopyField
-        label={t("shareDialog.shareWithAgents")}
-        value={agentContextUrl}
-        disabled={agentShareDisabled}
-      />
+      <div className="space-y-2">
+        <div className="flex items-end justify-between gap-2">
+          <div className="text-xs font-medium text-muted-foreground">
+            {t("shareDialog.shareWithAgents")}
+          </div>
+          <Button
+            type="button"
+            variant="outline"
+            size="sm"
+            className="h-7"
+            onClick={() => void handleCreateAgentLink()}
+            disabled={isPending || createAgentLink.isPending}
+          >
+            {t("shareUi.copy")}
+          </Button>
+        </div>
+        <CopyField
+          label=""
+          value={agentContextUrl}
+          disabled={agentShareDisabled}
+        />
+      </div>
 
       <CopyField
         label={t("shareDialog.copyAgentPrompt")}
@@ -360,7 +357,7 @@ function LinkTab({
         disabled={agentShareDisabled}
       />
 
-      {isPublic && hasPassword ? (
+      {agentContextUrl || hasPassword || !isPublic ? (
         <p className="text-xs text-muted-foreground">
           {t("shareDialog.agentTokenDescription")}
         </p>

package/corpus/templates/clips/app/components/sharing/share-ui.tsx

@@ -270,9 +270,11 @@ export function CopyField({
   };
   return (
     <div>
-      <div className="mb-1 text-xs font-medium text-muted-foreground">
-        {label}
-      </div>
+      {label ? (
+        <div className="mb-1 text-xs font-medium text-muted-foreground">
+          {label}
+        </div>
+      ) : null}
       <div className="flex items-stretch gap-2">
         <Input
           readOnly

package/corpus/templates/clips/app/i18n/ar-SA.ts

@@ -419,7 +419,7 @@ const messages = {
     agentPrompt:
       "اجلب عنوان URL لسياق وكيل Clips هذا: {{agentContextUrl}}. استخدم transcript.segments للسياق المنطوق، واجلب recommendedFrames أو عناوين URL الخاصة بواجهة API للإطارات لرؤية الشاشة، وتحقق من browserDiagnostics إن وجدت لسجلات وحدة التحكم المنقحة وبيانات طلبات fetch/XHR الوصفية.",
     agentTokenDescription:
-      "يستخدم هذا الوكيل URL رمزًا مميزًا قصير العمر، بحيث يمكن للعملاء قراءة المقطع دون الكشف عن كلمة المرور.",
+      "يسمح URL المؤقت هذا للوكلاء بقراءة المقطع دون جعله عاما. تنتهي صلاحيته بعد ساعتين.",
     gifPreview: "معاينة GIF",
     openPlayer: "مشغل مفتوح",
     downloadMp4: "تحميل MP4",

package/corpus/templates/clips/app/i18n/de-DE.ts

@@ -436,7 +436,7 @@ const messages = {
     agentPrompt:
       "Rufe diese Clips-Agent-Kontext-URL ab: {{agentContextUrl}}. Verwende transcript.segments fuer den gesprochenen Kontext, rufe recommendedFrames oder die Frame-API-URLs ab, um den Bildschirm zu sehen, und pruefe browserDiagnostics, falls vorhanden, fuer redigierte Konsolenprotokolle und fetch/XHR-Anfragemetadaten.",
     agentTokenDescription:
-      "Dieser Agent URL verwendet ein kurzlebiges Token, sodass Agenten den Clip lesen können, ohne das Passwort preiszugeben.",
+      "Diese temporare Agent-URL lasst Agenten den Clip lesen, ohne ihn offentlich zu machen. Sie lauft nach zwei Stunden ab.",
     gifPreview: "GIF-Vorschau",
     openPlayer: "Spieler öffnen",
     downloadMp4: "Laden Sie MP4 herunter",

package/corpus/templates/clips/app/i18n/en-US.ts

@@ -419,7 +419,7 @@ const messages = {
     agentPrompt:
       "Fetch this Clips agent context URL: {{agentContextUrl}}. Use transcript.segments for spoken context, fetch recommendedFrames or the frame API URLs to see the screen, and check browserDiagnostics if present for redacted console logs and fetch/XHR request metadata.",
     agentTokenDescription:
-      "This agent URL uses a short-lived token, so agents can read the clip without exposing the password.",
+      "This temporary agent URL lets agents read the clip without making it public. It expires after two hours.",
     gifPreview: "GIF preview",
     openPlayer: "Open player",
     downloadMp4: "Download MP4",

package/corpus/templates/clips/app/i18n/es-ES.ts

@@ -431,7 +431,7 @@ const messages = {
     agentPrompt:
       "Obtén esta URL de contexto para agentes de Clips: {{agentContextUrl}}. Usa transcript.segments para el contexto hablado, obtén recommendedFrames o las URLs de la API de fotogramas para ver la pantalla y revisa browserDiagnostics si está presente para ver registros de consola redactados y metadatos de solicitudes fetch/XHR.",
     agentTokenDescription:
-      "Este agente URL utiliza un token de corta duración, por lo que los agentes pueden leer el clip sin exponer la contraseña.",
+      "Esta URL temporal para agentes permite leer el clip sin hacerlo publico. Caduca en dos horas.",
     gifPreview: "vista previa de GIF",
     openPlayer: "jugador abierto",
     downloadMp4: "Descargar MP4",

package/corpus/templates/clips/app/i18n/fr-FR.ts

@@ -431,7 +431,7 @@ const messages = {
     agentPrompt:
       "Récupère cette URL de contexte Clips pour agent : {{agentContextUrl}}. Utilise transcript.segments pour le contexte parlé, récupère recommendedFrames ou les URLs de l'API d'images pour voir l'écran, et consulte browserDiagnostics s'il est présent pour les journaux de console expurgés et les métadonnées de requêtes fetch/XHR.",
     agentTokenDescription:
-      "Cet agent URL utilise un jeton de courte durée, afin que les agents puissent lire le clip sans exposer le mot de passe.",
+      "Cette URL temporaire pour agents permet de lire le clip sans le rendre public. Elle expire dans deux heures.",
     gifPreview: "aperçu de GIF",
     openPlayer: "Joueur ouvert",
     downloadMp4: "Télécharger MP4",

package/corpus/templates/clips/app/i18n/hi-IN.ts

@@ -416,7 +416,7 @@ const messages = {
     agentPrompt:
       "यह Clips एजेंट संदर्भ URL प्राप्त करें: {{agentContextUrl}}। बोले गए संदर्भ के लिए transcript.segments का उपयोग करें, स्क्रीन देखने के लिए recommendedFrames या फ्रेम API URL प्राप्त करें, और यदि browserDiagnostics मौजूद हो तो संशोधित कंसोल लॉग और fetch/XHR अनुरोध मेटाडेटा जांचें।",
     agentTokenDescription:
-      "यह एजेंट URL एक अल्पकालिक टोकन का उपयोग करता है, ताकि एजेंट पासवर्ड उजागर किए बिना क्लिप पढ़ सकें।",
+      "यह अस्थायी एजेंट URL क्लिप को सार्वजनिक किए बिना एजेंटों को इसे पढ़ने देता है। यह दो घंटे बाद समाप्त हो जाता है।",
     gifPreview: "GIF पूर्वावलोकन",
     openPlayer: "खुला खिलाड़ी",
     downloadMp4: "MP4 डाउनलोड करें",

package/corpus/templates/clips/app/i18n/ja-JP.ts

@@ -428,7 +428,7 @@ const messages = {
     agentPrompt:
       "この Clips エージェントコンテキスト URL を取得してください: {{agentContextUrl}}。音声の文脈には transcript.segments を使い、画面を見るために recommendedFrames またはフレーム API URL を取得し、browserDiagnostics がある場合は、編集済みのコンソールログと fetch/XHR リクエストのメタデータを確認してください。",
     agentTokenDescription:
-      "このエージェント URL は有効期間の短いトークンを使用するため、エージェントはパスワードを公開せずにクリップを読み取ることができます。",
+      "この一時的なエージェント URL により、クリップを公開せずにエージェントが読み取れます。2 時間後に期限切れになります。",
     gifPreview: "GIF プレビュー",
     openPlayer: "プレーヤーを開く",
     downloadMp4: "ダウンロード",

package/corpus/templates/clips/app/i18n/ko-KR.ts

@@ -421,7 +421,7 @@ const messages = {
     agentPrompt:
       "이 Clips 에이전트 컨텍스트 URL을 가져오세요: {{agentContextUrl}}. 말한 내용의 맥락은 transcript.segments를 사용하고, 화면을 보기 위해 recommendedFrames 또는 프레임 API URL을 가져오며, browserDiagnostics가 있으면 수정된 콘솔 로그와 fetch/XHR 요청 메타데이터를 확인하세요.",
     agentTokenDescription:
-      "이 에이전트 URL는 수명이 짧은 토큰을 사용하므로 에이전트는 비밀번호를 노출하지 않고도 클립을 읽을 수 있습니다.",
+      "이 임시 에이전트 URL을 사용하면 클립을 공개하지 않고도 에이전트가 읽을 수 있습니다. 2시간 후 만료됩니다.",
     gifPreview: "GIF 미리보기",
     openPlayer: "플레이어 열기",
     downloadMp4: "MP4 다운로드",

package/corpus/templates/clips/app/i18n/pt-BR.ts

@@ -429,7 +429,7 @@ const messages = {
     agentPrompt:
       "Busque esta URL de contexto para agentes do Clips: {{agentContextUrl}}. Use transcript.segments para o contexto falado, busque recommendedFrames ou as URLs da API de quadros para ver a tela e confira browserDiagnostics, se presente, para logs de console redigidos e metadados de solicitações fetch/XHR.",
     agentTokenDescription:
-      "Este agente URL usa um token de curta duração, para que os agentes possam ler o clipe sem expor a senha.",
+      "Esta URL temporaria para agentes permite ler o clipe sem torna-lo publico. Ela expira em duas horas.",
     gifPreview: "visualização de GIF",
     openPlayer: "Jogador aberto",
     downloadMp4: "Baixar MP4",