@agent-native/core 0.98.17 → 0.99.1

package/corpus/core/src/server/security-headers.ts

@@ -56,6 +56,10 @@ import { createHash } from "node:crypto";
 
 import { defineEventHandler, getHeader, setResponseHeader } from "h3";
 
+import {
+  isMcpProtocolPath,
+  MCP_PUBLIC_ROUTE_PREFIX,
+} from "../mcp/route-paths.js";
 import {
   isMcpEmbedCorsOrigin,
   MCP_EMBED_CORS_ALLOW_HEADERS,
@@ -101,8 +105,10 @@ function isMcpEndpointRequest(event: any): boolean {
   const pathname =
     event?.url?.pathname ??
     String(event?.node?.req?.url ?? event?.path ?? "/").split("?")[0];
+  const normalizedPathname = pathname.replace(/\/+$/, "");
   return (
-    pathname === "/_agent-native/mcp" || pathname.endsWith("/_agent-native/mcp")
+    isMcpProtocolPath(normalizedPathname) ||
+    normalizedPathname.endsWith(MCP_PUBLIC_ROUTE_PREFIX)
   );
 }
 

package/corpus/core/src/server/ssr-handler.ts

@@ -18,6 +18,7 @@ import { defineEventHandler } from "h3";
  */
 import { createRequestHandler } from "react-router";
 
+import { isMcpPublicPath } from "../mcp/route-paths.js";
 import {
   DEFAULT_SSR_CACHE_HEADERS,
   DEFAULT_SPECULATION_RULES_PATH,
@@ -318,6 +319,7 @@ function removeDocumentCsp(headers: Headers): void {
 
 function isFrameworkOrAssetPath(pathname: string): boolean {
   return (
+    isMcpPublicPath(pathname) ||
     pathname.startsWith("/.well-known/") ||
     pathname.startsWith("/_agent_native/") ||
     pathname.startsWith("/_agent-native/") ||

package/corpus/core/src/shared/cache-control.ts

@@ -1,10 +1,12 @@
-export const DEFAULT_SSR_CACHE_CONTROL = "public, max-age=0, must-revalidate";
+export const DEFAULT_PUBLIC_CACHE_CONTROL =
+  "public, max-age=600, stale-while-revalidate=604800, stale-if-error=3600";
 
-export const DEFAULT_SSR_CDN_CACHE_CONTROL =
-  "public, s-maxage=600, stale-while-revalidate=604800, stale-if-error=3600";
+export const DEFAULT_SSR_CACHE_CONTROL = DEFAULT_PUBLIC_CACHE_CONTROL;
+
+export const DEFAULT_SSR_CDN_CACHE_CONTROL = DEFAULT_SSR_CACHE_CONTROL;
 
 export const DEFAULT_SSR_NETLIFY_CDN_CACHE_CONTROL =
-  "public, durable, s-maxage=600, stale-while-revalidate=604800, stale-if-error=3600";
+  DEFAULT_PUBLIC_CACHE_CONTROL;
 
 export const DEFAULT_SSR_CACHE_HEADERS = {
   "cache-control": DEFAULT_SSR_CACHE_CONTROL,

package/corpus/core/src/templates/default/.agents/skills/security/SKILL.md

@@ -147,6 +147,16 @@ export default defineEventHandler(async (event) => {
 
 - Never create unprotected routes that modify data.
 
+**Exception — the SSR HTML/`.data` catch-all is deliberately session-blind.**
+The rule above is for routes that read or mutate user data. The SSR page
+render and React Router `.data` route are different: they serve one
+impersonal, public-cacheable shell to every visitor by design, and loaders on
+that path render no user data. Do not "fix" this by adding `getSession`,
+`private`, or `no-store` to it — that regresses the CDN cache contract for the
+whole site. Data scoping lives in actions and API routes; the client gates
+private UI after the shell loads. See the `authentication` skill and
+`guard:ssr-cache-shell` / `ssr-handler.spec.ts`.
+
 ## Human-in-the-Loop Approval for High-Consequence Actions
 
 For a small set of outward-facing, hard-to-undo operations — sending an email, charging a card, deleting an account, posting publicly — auth and access control are necessary but not sufficient: you also do not want the **agent** to perform them autonomously. Set `needsApproval` on the `defineAction` so the agent cannot run the action without a human approving the specific call.

package/corpus/core/src/templates/workspace-core/.agents/skills/authentication/SKILL.md

@@ -36,12 +36,12 @@ Auth is powered by **Better Auth** with account-first design. Every new user cre
 
 ## Remote MCP OAuth
 
-Every app's `/_agent-native/mcp` endpoint is also a standard protected MCP
+Every app's `/mcp` endpoint is also a standard protected MCP
 resource. OAuth-capable hosts connect with the remote MCP URL only, receive a
 `WWW-Authenticate` challenge, discover `/.well-known/oauth-protected-resource`
 and `/.well-known/oauth-authorization-server`, dynamically register a public
 client, and complete authorization-code + PKCE at
-`/_agent-native/mcp/oauth/authorize` / `/_agent-native/mcp/oauth/token`.
+`/mcp/oauth/authorize` / `/mcp/oauth/token`.
 Access tokens are audience-bound to the exact MCP URL and carry user/org
 identity plus `mcp:read`, `mcp:write`, `mcp:apps`, and/or `offline_access`;
 advertising `offline_access` lets hosts such as ChatGPT retain refresh access.
@@ -137,10 +137,19 @@ Bookmarked private paths work through the client session gate: the shared shell
 ## Gating the App Shell (avoid the logged-out infinite spinner)
 
 Normal app HTML and React Router page-data responses deliberately bypass the
-server session guard. They are rendered impersonally and cached as one shared
-shell; APIs, actions, and framework data routes remain server-protected. The
-client session gate is therefore the authoritative decision point for whether
-private app UI renders.
+server session guard. They are rendered impersonally and cached as one shared,
+public, hard-cached-at-the-CDN shell; APIs, actions, and framework data routes
+remain server-protected. The client session gate is therefore the
+authoritative decision point for whether private app UI renders.
+
+**Never**, on the SSR HTML/`.data` path: set `private`, `no-store`, or
+`Vary: Cookie`; call `getSession` or read cookies in the SSR route or the
+login HTML path; or embed tokens/secrets into the rendered HTML — a
+token-bearing page still returns the same anonymous shell and resolves access
+client-side. This has regressed repeatedly (agents "fixing" it back to
+per-user SSR); it is enforced by `guard:ssr-cache-shell` and
+`ssr-handler.spec.ts` (`packages/core/src/server/ssr-handler.ts`), and reverts
+will be rejected.
 
 `AppProviders` applies `RequireSession` automatically on its private branch. It
 resolves the session on the client and redirects signed-out visitors to

package/corpus/core/src/templates/workspace-core/.agents/skills/external-agents/SKILL.md

@@ -21,12 +21,12 @@ An agent-native app is reachable by any MCP-compatible host (Claude, Claude
 Desktop, Claude Code, ChatGPT custom MCP apps, Codex, Cursor, Cowork, VS Code
 GitHub Copilot, Goose, Postman, MCPJam, and future standard clients). Keep
 setup simple: for workspace or cross-app access, add one remote MCP connector:
-`https://dispatch.agent-native.com/_agent-native/mcp`. Dispatch's Agents page
+`https://dispatch.agent-native.com/mcp`. Dispatch's Agents page
 controls whether that single connector reaches all apps or only selected apps,
 and Dispatch filters `list_apps`, `ask_app`, and `open_app` to the granted set.
 For a deliberately isolated app, add that app directly at
-`https://<app>.agent-native.com/_agent-native/mcp` or
-`https://<your-host>/_agent-native/mcp`.
+`https://<app>.agent-native.com/mcp` or
+`https://<your-host>/mcp`.
 
 OAuth-capable hosts should use the standard remote MCP OAuth flow. Claude
 connectors and Claude Code `/mcp` authentication discover the protected
@@ -68,7 +68,7 @@ the real app focused on exactly what was produced. It reuses the existing
 Use one connector for normal workspace access:
 
 ```text
-https://dispatch.agent-native.com/_agent-native/mcp
+https://dispatch.agent-native.com/mcp
 ```
 
 Then open Dispatch → Agents to choose whether the gateway exposes every app or
@@ -79,8 +79,8 @@ only selected app IDs. External agents call `list_apps` to see the granted set,
 Use a direct app URL only when you intentionally want one isolated app:
 
 ```text
-https://mail.agent-native.com/_agent-native/mcp
-https://<your-app>.agent-native.com/_agent-native/mcp
+https://mail.agent-native.com/mcp
+https://<your-app>.agent-native.com/mcp
 ```
 
 Claude / Claude Desktop: add a custom connector with the URL, click Connect,
@@ -104,7 +104,7 @@ npx @agent-native/core@latest connect https://mail.agent-native.com
 
 The command opens the app in the browser, the user clicks **Authorize**, and a
 per-user, scoped, revocable token is written to the selected client config. The
-no-CLI equivalent is `https://<app>/_agent-native/mcp/connect`, which shows
+no-CLI equivalent is `https://<app>/mcp/connect`, which shows
 the copyable MCP URL, Claude / ChatGPT / Cursor / Claude Code / Codex / Other
 steps, and static-token fallback for clients that need it.
 
@@ -130,7 +130,7 @@ that MCP URL; pass `--client` to limit which configs it searches. Pass
 Under the hood: a logged-in browser session mints an `A2A_SECRET`-signed JWT
 carrying the caller's `sub` + `org_domain` and a unique `jti`, so tool runs
 stay tenant-scoped via `runWithRequestContext`. The existing
-`/_agent-native/mcp` endpoint accepts it like any bearer — no new endpoint.
+`/mcp` endpoint accepts it like any bearer — no new endpoint.
 The same Connect page lists and revokes minted tokens by `jti`; treat them
 like personal access tokens. Nothing exposes the deployment's shared secret.
 
@@ -146,7 +146,13 @@ agent has a predictable surface without guessing per-app action names:
   "Open …" link and, with `embed: true`, an inline full-app MCP App in capable
   hosts.
 - `ask_app({ app, message })` — routes a natural-language task to that app's
-  in-app agent (delegates to the existing `ask-agent` meta-tool).
+  in-app agent (delegates to the existing `ask-agent` meta-tool). It also
+  accepts `async` and `maxWaitMs`; hosted calls wait at most 25 seconds inline
+  and return a durable `taskId` plus an `ask_app_status` poll instruction when
+  the task is still running.
+- `ask_app_status({ app, taskId })` — retrieves the current or terminal result
+  for a durable `ask_app` task. Dispatch checks the selected-app grant again
+  before polling.
 - `create_workspace_app({ name, template })` — scaffolds + boots a new app via
   the workspace path (rejects non-allow-listed templates), returns its running
   URL + deep link.
@@ -375,7 +381,7 @@ the `[mcp_servers.*]` block in `~/.codex/config.toml` for Codex,
 user `mcp.json` for GitHub Copilot / VS Code, and the Claude-Code JSON shape
 for Cowork. The entry runs `pnpm exec agent-native mcp serve --app <id>`, by
 default a **thin stdio proxy** to the running local app's
-`/_agent-native/mcp` (live registry + HMR + correct deep links stay the single
+`/mcp` (live registry + HMR + correct deep links stay the single
 source of truth; `--standalone` builds the registry in-process). Companion
 subcommands: `mcp uninstall`, `mcp status`, `mcp token [--rotate]`. You can
 also hand-write an `http` `.mcp.json` entry with a token you supply yourself —

package/corpus/core/src/templates/workspace-core/.agents/skills/performance/SKILL.md

@@ -121,7 +121,24 @@ index the growing tables first.
 - Data the UI doesn't display (export formats, alternate renderings) belongs in a
   separate on-demand action, not baked into the hot read.
 
-## 6. Big payloads and long lists
+## 6. SSR shell caching — load-bearing, do not undo
+
+Every SSR HTML page and React Router `.data` response is one impersonal,
+public shell, hard-cached at the CDN and served identically to every visitor —
+logged in or not. This is the single biggest lever on first-response latency:
+one shared cache entry serves the whole site instead of a per-user render on
+every request. Adding `private`, `no-store`, `Vary: Cookie`, a session read, or
+an auth branch to the SSR path defeats the cache for **every visitor**, not
+just one.
+
+If you're debugging a slow first response, check whether something
+re-personalized the shell before concluding the render itself is slow — the
+fix is client-side data loading after the shell paints, never per-user SSR.
+See the `authentication` skill for the full model and `guard:ssr-cache-shell`
+plus `ssr-handler.spec.ts` (`packages/core/src/server/ssr-handler.ts`) for the
+enforced contract.
+
+## 7. Big payloads and long lists
 
 - **Paginate or window** unbounded lists (messages, responses, events, activity).
   Don't load the entire history on open; load a recent window and fetch older on
@@ -144,3 +161,5 @@ index the growing tables first.
 - [ ] Client fires independent queries in parallel, not a waterfall.
 - [ ] No heavy recompute on every read; no aggressive polling of heavy endpoints.
 - [ ] Unbounded lists are paginated/windowed; large blobs aren't inlined on the hot path.
+- [ ] SSR HTML/`.data` path stays session-blind and cacheable — no `private`,
+      `no-store`, `Vary: Cookie`, or auth branch added to it.

package/corpus/core/src/templates/workspace-core/.agents/skills/security/SKILL.md

@@ -147,6 +147,16 @@ export default defineEventHandler(async (event) => {
 
 - Never create unprotected routes that modify data.
 
+**Exception — the SSR HTML/`.data` catch-all is deliberately session-blind.**
+The rule above is for routes that read or mutate user data. The SSR page
+render and React Router `.data` route are different: they serve one
+impersonal, public-cacheable shell to every visitor by design, and loaders on
+that path render no user data. Do not "fix" this by adding `getSession`,
+`private`, or `no-store` to it — that regresses the CDN cache contract for the
+whole site. Data scoping lives in actions and API routes; the client gates
+private UI after the shell loads. See the `authentication` skill and
+`guard:ssr-cache-shell` / `ssr-handler.spec.ts`.
+
 ## Human-in-the-Loop Approval for High-Consequence Actions
 
 For a small set of outward-facing, hard-to-undo operations — sending an email, charging a card, deleting an account, posting publicly — auth and access control are necessary but not sufficient: you also do not want the **agent** to perform them autonomously. Set `needsApproval` on the `defineAction` so the agent cannot run the action without a human approving the specific call.

package/corpus/templates/analytics/.agents/skills/security/SKILL.md

@@ -147,6 +147,16 @@ export default defineEventHandler(async (event) => {
 
 - Never create unprotected routes that modify data.
 
+**Exception — the SSR HTML/`.data` catch-all is deliberately session-blind.**
+The rule above is for routes that read or mutate user data. The SSR page
+render and React Router `.data` route are different: they serve one
+impersonal, public-cacheable shell to every visitor by design, and loaders on
+that path render no user data. Do not "fix" this by adding `getSession`,
+`private`, or `no-store` to it — that regresses the CDN cache contract for the
+whole site. Data scoping lives in actions and API routes; the client gates
+private UI after the shell loads. See the `authentication` skill and
+`guard:ssr-cache-shell` / `ssr-handler.spec.ts`.
+
 ## Human-in-the-Loop Approval for High-Consequence Actions
 
 For a small set of outward-facing, hard-to-undo operations — sending an email, charging a card, deleting an account, posting publicly — auth and access control are necessary but not sufficient: you also do not want the **agent** to perform them autonomously. Set `needsApproval` on the `defineAction` so the agent cannot run the action without a human approving the specific call.

package/corpus/templates/analytics/app/assets/replay-cursor.svg

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+<svg
+  version="1.1"
+  xmlns="http://www.w3.org/2000/svg"
+  viewBox="-0.8 -0.8 22.8 30.4"
+  shape-rendering="geometricPrecision"
+>
+  <path
+    d="M 2.5 1.8 C 2.2 1.5 1.8 1.7 1.8 2.1 V 21.9 C 1.8 22.5 2.5 22.8 2.9 22.4 L 7.4 17.5 L 11.5 26.2 C 11.7 26.7 12.3 26.9 12.8 26.7 L 15.7 25.3 C 16.2 25.1 16.4 24.5 16.2 24 L 12.4 15.4 H 18.4 C 19.1 15.4 19.4 14.5 18.9 14 Z"
+    fill="#000000"
+    stroke="#FFFFFF"
+    stroke-width="4.35"
+    stroke-linecap="round"
+    stroke-linejoin="round"
+    paint-order="stroke fill"
+  />
+</svg>

package/corpus/templates/analytics/app/components/dashboard/SqlChart.tsx

@@ -24,6 +24,7 @@ import {
   type ReactNode,
 } from "react";
 import { createPortal } from "react-dom";
+import { Link } from "react-router";
 import {
   Area,
   AreaChart,
@@ -1579,12 +1580,12 @@ function TableRenderer({
                       {replayHref ? (
                         <span className="inline-flex flex-col gap-0.5">
                           <span>{content}</span>
-                          <a
-                            href={replayHref}
+                          <Link
+                            to={replayHref}
                             className="text-xs font-medium text-primary hover:underline"
                           >
                             {t("sessions.watchReplay")}
-                          </a>
+                          </Link>
                         </span>
                       ) : (
                         content

package/corpus/templates/analytics/app/global.css

@@ -245,14 +245,81 @@
   transform-origin: top left;
 }
 
-/* IMPORTANT: Keep rrweb's stock SVG arrow. Only suppress its permanently
-   visible purple ::after disc, which can otherwise read as the cursor itself
-   when the arrow is small. The stock .active animation still supplies the
-   brief click halo. Do not replace the arrow with an app-colored dot. */
+/* INTENTIONAL — DO NOT REMOVE OR REPLACE WITH rrweb's STOCK CURSOR.
+   The recorded visitor cursor is a core session-replay affordance: users need
+   to see the Mac-style arrow where the visitor clicked, including on dark
+   recordings. rrweb's bundled cursor is a small black sprite that disappears
+   against those pages. Use the normal black Mac cursor with its white outline;
+   the small shadow below keeps it legible on either background. */
+.an-replay-stage-root .replayer-mouse {
+  position: absolute;
+  z-index: 2;
+  /* Render at 2x locally, then downscale to the compact 0.72rem x 0.96rem
+     screen size. This keeps the small cursor's rounded outline smooth. */
+  width: 1.44rem;
+  height: 1.92rem;
+  border-radius: 0;
+  background: transparent;
+  background-image: none;
+  box-shadow: none;
+  visibility: hidden;
+  /* The stage is fit-to-container, but the recorded cursor should stay at a
+     normal on-screen size. The stage supplies the inverse scale variable. */
+  transform: scale(calc(var(--an-replay-cursor-scale, 1) * 0.5));
+  transform-origin: top left;
+  transition:
+    left 80ms linear,
+    top 80ms linear;
+  pointer-events: none;
+}
+
+.an-replay-stage-root .replayer-mouse.has-position {
+  visibility: visible;
+}
+
+.an-replay-stage-root .replayer-mouse::before {
+  content: "";
+  position: absolute;
+  inset: 0;
+  background: url("./assets/replay-cursor.svg") center / contain no-repeat;
+  filter: drop-shadow(0 1px 1px hsl(0 0% 0% / 0.4));
+}
+
 .an-replay-stage-root .replayer-mouse::after {
+  content: "";
+  position: absolute;
+  left: -0.5rem;
+  top: -0.5rem;
+  width: 1rem;
+  height: 1rem;
+  border: 2px solid hsl(217 91% 60%);
+  border-radius: 9999px;
+  background: transparent;
   opacity: 0;
 }
 
+/* rrweb toggles `.active` on mouse interactions; pulse a click ripple. */
+.an-replay-stage-root .replayer-mouse.active::after {
+  animation: an-replay-mouse-click 0.4s ease-out 1;
+}
+
+@keyframes an-replay-mouse-click {
+  0% {
+    opacity: 0.5;
+    transform: scale(1);
+  }
+  100% {
+    opacity: 0;
+    transform: scale(3.5);
+  }
+}
+
+.an-replay-stage-root .replayer-mouse-tail {
+  position: absolute;
+  inset: 0;
+  pointer-events: none;
+}
+
 .analytics-session-snippet .plan-code-surface {
   border: 0;
   border-radius: 0;

package/corpus/templates/analytics/app/pages/adhoc/sql-dashboard/DashboardFilterBar.tsx

@@ -41,6 +41,12 @@ function daysAgo(n: number): string {
   return d.toISOString().slice(0, 10);
 }
 
+// Keep the legacy "all" date-range sentinel out of provider queries. Analytics
+// data cannot predate the Unix epoch, so this is equivalent to an unbounded
+// lower date while remaining valid for BigQuery DATE/TIMESTAMP expressions.
+const ALL_TIME_START = "1970-01-01";
+const ISO_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
+
 /** Date-valued filters whose default may use the "Nd" / "today" shorthand. */
 const DATE_FILTER_TYPES: ReadonlySet<FilterType> = new Set([
   "date",
@@ -70,6 +76,18 @@ function resolveDefault(raw: string | undefined, type: FilterType): string {
   return raw;
 }
 
+function resolveDateValue(
+  raw: string | undefined,
+  allTimeValue: string,
+): string {
+  const value = raw?.trim();
+  if (!value) return "";
+  if (value.toLowerCase() === "all") return allTimeValue;
+
+  const resolved = resolveDefault(value, "date");
+  return ISO_DATE_RE.test(resolved) ? resolved : "";
+}
+
 export function resolveFilterVars(
   filters: DashboardFilter[],
   getParam: (key: string) => string,
@@ -79,17 +97,27 @@ export function resolveFilterVars(
     if (f.type === "date-range") {
       const startKey = `${f.id}Start`;
       const endKey = `${f.id}End`;
-      out[startKey] = getParam(startKey) || resolveDefault(f.default, f.type);
-      out[endKey] = getParam(endKey) || daysAgo(0);
+      out[startKey] =
+        resolveDateValue(getParam(startKey), ALL_TIME_START) ||
+        resolveDateValue(resolveDefault(f.default, f.type), ALL_TIME_START);
+      out[endKey] =
+        resolveDateValue(getParam(endKey), daysAgo(0)) || daysAgo(0);
     } else if (f.type === "toggle" || f.type === "toggle-date") {
       // Toggles have no "off value" default — if the user hasn't opted in
       // via the URL, the SQL-side conditional block ({{?id}}...{{/id}})
       // must see an empty value so it doesn't emit. Otherwise the filter
       // looks "off" in the UI but still filters the data.
-      out[f.id] = getParam(f.id);
+      out[f.id] =
+        f.type === "toggle-date"
+          ? resolveDateValue(getParam(f.id), ALL_TIME_START)
+          : getParam(f.id);
     } else {
       const v = getParam(f.id);
-      out[f.id] = v || resolveDefault(f.default, f.type);
+      out[f.id] =
+        f.type === "date"
+          ? resolveDateValue(v, ALL_TIME_START) ||
+            resolveDateValue(resolveDefault(f.default, f.type), ALL_TIME_START)
+          : v || resolveDefault(f.default, f.type);
     }
   }
   return out;

package/corpus/templates/analytics/app/pages/monitoring/errors/IssueDetail.tsx

@@ -102,7 +102,7 @@ export function IssueDetail({
                   {statusLabel(issue.status)}
                 </span>
               </div>
-              <h2 className="truncate text-lg font-semibold text-foreground">
+              <h2 className="break-words text-lg font-semibold text-foreground">
                 {issue.title}
               </h2>
               {issue.culprit ? (

package/corpus/templates/analytics/app/pages/sessions/SessionDetailPage.tsx

@@ -34,6 +34,7 @@ import {
 } from "@tabler/icons-react";
 import { useQuery } from "@tanstack/react-query";
 import {
+  type CSSProperties,
   type ReactNode,
   useCallback,
   useEffect,
@@ -711,6 +712,7 @@ function ReplayPlayer({
     if (!stageRootRef.current) return;
     let cancelled = false;
     let localReplayer: any = null;
+    let stopCursorVisibilityObserver = () => {};
 
     async function loadReplay() {
       const replayEvents = eventsRef.current;
@@ -761,6 +763,8 @@ function ReplayPlayer({
       // Do not mutate recorded URLs/CSS; suppress viewer-page referrer leakage
       // at the iframe boundary while retaining historical visual resources.
       localReplayer.iframe?.setAttribute?.("referrerpolicy", "no-referrer");
+      stopCursorVisibilityObserver =
+        hideReplayCursorUntilPosition(localReplayer);
       replayerRef.current = localReplayer;
       const meta = localReplayer.getMetaData?.();
       const total = Number(meta?.totalTime ?? replayDuration(replayEvents));
@@ -827,6 +831,7 @@ function ReplayPlayer({
 
     return () => {
       cancelled = true;
+      stopCursorVisibilityObserver();
       if (rafRef.current != null) cancelAnimationFrame(rafRef.current);
       rafRef.current = null;
       try {
@@ -977,20 +982,27 @@ function ReplayPlayer({
                 <div
                   ref={stageRootRef}
                   className="an-replay-stage-root absolute left-1/2 top-1/2"
-                  style={{
-                    width: playerWidth,
-                    height: playerHeight,
-                    transform: `translate(-50%, -50%) scale(${fitScale})`,
-                    transformOrigin: "center center",
-                  }}
+                  style={
+                    {
+                      width: playerWidth,
+                      height: playerHeight,
+                      "--an-replay-cursor-scale": String(1 / fitScale),
+                      transform: `translate(-50%, -50%) scale(${fitScale})`,
+                      transformOrigin: "center center",
+                    } as CSSProperties
+                  }
                 />
                 <button
                   type="button"
-                  // IMPORTANT: Keep the viewer's real OS pointer visible while
-                  // the synthetic rrweb pointer replays underneath it. Hiding
-                  // this during playback makes the page feel broken whenever
-                  // the viewer moves their mouse over the full-stage control.
-                  className="absolute inset-0 z-20 cursor-pointer rounded-[inherit] border-0 bg-transparent p-0 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:cursor-default"
+                  className={cn(
+                    "absolute inset-0 z-20 rounded-[inherit] border-0 bg-transparent p-0 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:cursor-default",
+                    // INTENTIONAL — KEEP THE VIEWER CURSOR VISIBLE.
+                    // The recorded cursor is a separate overlay, while this
+                    // button owns the live hover target for pause/play. Do
+                    // not add `cursor-none`: it makes the user's cursor
+                    // disappear when they move over the preview.
+                    "cursor-pointer",
+                  )}
                   disabled={disabled}
                   aria-label={
                     playing ? t("sessions.pause") : t("sessions.play")
@@ -2275,6 +2287,32 @@ function hasPlayableReplayEvents(events: unknown[]): boolean {
   return false;
 }
 
+function hideReplayCursorUntilPosition(replayer: any): () => void {
+  const cursor = replayer?.mouse as HTMLElement | undefined;
+  if (!cursor || typeof MutationObserver === "undefined") return () => {};
+
+  let observer: MutationObserver | null = null;
+  const revealWhenPositioned = () => {
+    if (!cursor.style.left || !cursor.style.top) return;
+    cursor.classList.add("has-position");
+    observer?.disconnect();
+    observer = null;
+  };
+
+  cursor.classList.remove("has-position");
+  observer = new MutationObserver(revealWhenPositioned);
+  observer.observe(cursor, {
+    attributes: true,
+    attributeFilter: ["style"],
+  });
+  revealWhenPositioned();
+
+  return () => {
+    observer?.disconnect();
+    observer = null;
+  };
+}
+
 export function replayViewportDimensions(
   events: AnyReplayEvent[],
 ): ReplayViewportDimensions | null {

package/corpus/templates/analytics/app/pages/sessions/SessionsPage.tsx

@@ -22,7 +22,7 @@ import {
 } from "@tabler/icons-react";
 import { useQuery } from "@tanstack/react-query";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import { Link, useNavigate, useSearchParams } from "react-router";
+import { Link, useSearchParams } from "react-router";
 import { toast } from "sonner";
 
 import { Badge } from "@/components/ui/badge";
@@ -205,7 +205,6 @@ export function useDebouncedUrlFilter(
 
 export default function SessionsPage() {
   const t = useT();
-  const navigate = useNavigate();
   const [searchParams, setSearchParams] = useSearchParams();
   const range = readRange(searchParams.get("range"));
   const app = searchParams.get("app") ?? "";
@@ -389,11 +388,10 @@ export default function SessionsPage() {
                     recording.startedAt;
                   const deviceLabel = sessionDeviceLabel(recording);
                   return (
-                    <button
+                    <Link
                       key={recording.id}
-                      type="button"
+                      to={href}
                       className="analytics-session-row grid w-full gap-3 px-4 py-3 text-left transition-colors hover:bg-muted/35 focus-visible:bg-muted/35 focus-visible:outline-none"
-                      onClick={() => navigate(href)}
                       aria-label={t("sessions.watchReplay")}
                     >
                       <span className="inline-flex h-10 w-[92px] items-center justify-center gap-2 rounded-md bg-primary/10 font-medium text-primary">
@@ -446,7 +444,7 @@ export default function SessionsPage() {
                           </span>
                         ) : null}
                       </span>
-                    </button>
+                    </Link>
                   );
                 })}
               </div>

package/corpus/templates/analytics/changelog/2026-07-13-all-time-dashboard-filters-no-longer-send-invalid-dates-to-b.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-13
+---
+
+All-time dashboard filters no longer send invalid dates to BigQuery

package/corpus/templates/analytics/changelog/2026-07-13-daily-dashboard-emails-recover-more-reliably-from-serverless.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-13
+---
+
+Daily dashboard emails recover more reliably from serverless browser failures and report image errors accurately.

package/corpus/templates/analytics/changelog/2026-07-13-error-issue-titles-wrap-instead-of-overflowing.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-13
+---
+
+Error issue titles wrap instead of overflowing

package/corpus/templates/analytics/changelog/2026-07-13-saving-a-new-dashboard-view-no-longer-fails-with-a-server-er.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-13
+---
+
+Saving a new dashboard view no longer fails with a server error

package/corpus/templates/analytics/changelog/2026-07-13-session-replay-cursors-stay-hidden-until-their-first-recorde.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-13
+---
+
+Session replay cursors stay hidden until their first recorded position