Merge branch 'main' into editor-feats

Author: richiemcilroy

.claude/settings.local.json

@@ -0,0 +1,11 @@
+{
+	"permissions": {
+		"allow": [
+			"Bash(pnpm typecheck:*)",
+			"Bash(pnpm lint:*)",
+			"Bash(pnpm build:*)"
+		],
+		"deny": [],
+		"ask": []
+	}
+}

.github/workflows/ci.yml

@@ -46,6 +46,8 @@ jobs:
 
       - uses: ./.github/actions/setup-js
 
+      - run: pnpm web exec next typegen
+
       - name: Typecheck
         run: pnpm typecheck
 
@@ -74,6 +76,8 @@ jobs:
         uses: actions/checkout@v4
 
       - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt
 
       - name: Check formatting
         run: cargo fmt --check
@@ -93,6 +97,7 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
         with:
           targets: ${{ matrix.settings.target }}
+          components: clippy
 
       - name: Rust cache
         uses: swatinem/rust-cache@v2

.github/workflows/docker-build-web.yml

@@ -38,7 +38,6 @@ jobs:
           echo "NEXT_PUBLIC_DOCKER_BUILD=true" >> .env
           echo "NEXT_PUBLIC_CAP_AWS_BUCKET=capso" >> .env
           echo "NEXT_PUBLIC_CAP_AWS_REGION=us-east-1" >> .env
-          cat .env
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3

.github/workflows/publish.yml

@@ -213,17 +213,29 @@ jobs:
       - name: Upload assets
         uses: crabnebula-dev/cloud-release@v0
         with:
+          working-directory: apps/desktop
           command: release upload ${{ env.CN_APPLICATION }} "${{ needs.draft.outputs.version }}" --framework tauri
           api-key: ${{ secrets.CN_API_KEY }}
+        env:
+          TAURI_BUNDLE_PATH: ../..
+
+      - uses: matbour/setup-sentry-cli@8ef22a4ff03bcd1ebbcaa3a36a81482ca8e3872e
+
+      - name: Upload debug symbols to Sentry
+        if: ${{ runner.os == 'macOS' }}
+        shell: bash
+        env:
+          SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
+        run: |
+          sentry-cli debug-files upload -o ${{ env.SENTRY_ORG }} -p ${{ env.SENTRY_PROJECT }} target/Cap.dSYM
 
       - name: Upload debug symbols to Sentry
-        if: ${{ matrix.settings.runner == 'macos-latest' }}
+        if: ${{ runner.os == 'Windows' }}
+        shell: bash
         env:
           SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
-        working-directory: target
         run: |
-          curl -sL https://sentry.io/get-cli/ | bash
-          sentry-cli debug-files upload -o ${{ env.SENTRY_ORG }} -p ${{ env.SENTRY_PROJECT }} Cap.dSYM
+          sentry-cli debug-files upload -o ${{ env.SENTRY_ORG }} -p ${{ env.SENTRY_PROJECT }} target/${{ matrix.settings.target }}/release/cap_desktop.pdb
 
   done:
     needs: [draft, build]

AGENTS.md

@@ -0,0 +1,46 @@
+# Repository Guidelines
+
+## Project Structure & Modules
+- Turborepo monorepo:
+  - `apps/desktop` (Tauri v2 + SolidStart), `apps/web` (Next.js), `apps/cli` (Rust CLI).
+  - `packages/*` shared libs (e.g., `database`, `ui`, `ui-solid`, `utils`, `web-*`).
+  - `crates/*` Rust media/recording/rendering/camera crates.
+  - `scripts/*`, `infra/`, and `packages/local-docker/` for tooling and local services.
+
+## Build, Test, Develop
+- Install: `pnpm install`; setup: `pnpm env-setup` then `pnpm cap-setup`.
+- Dev: `pnpm dev` (web+desktop). Desktop only: `pnpm dev:desktop`. Web only: `pnpm dev:web` or `cd apps/web && pnpm dev`.
+- Build: `pnpm build` (Turbo). Desktop release: `pnpm tauri:build`.
+- DB: `pnpm db:generate` → `pnpm db:push` → `pnpm db:studio`.
+- Docker: `pnpm docker:up | docker:stop | docker:clean`.
+- Quality: `pnpm lint`, `pnpm format`, `pnpm typecheck`. Rust: `cargo build -p <crate>`, `cargo test -p <crate>`.
+
+## Coding Style & Naming
+- TypeScript: 2‑space indent; Biome formats/lints (`pnpm format`).
+- Rust: `rustfmt` + workspace clippy lints.
+- Naming: files kebab‑case (`user-menu.tsx`); components PascalCase; Rust modules snake_case, crates kebab‑case.
+- Runtime: Node 20, pnpm 10.x, Rust 1.88+, Docker for MySQL/MinIO.
+
+## Testing
+- TS/JS: Vitest where present (e.g., desktop). Name tests `*.test.ts(x)` near sources.
+- Rust: `cargo test` per crate; tests in `src` or `tests`.
+- Prefer unit tests for logic and light smoke tests for flows; no strict coverage yet.
+
+## Commits & PRs
+- Conventional style: `feat:`, `fix:`, `chore:`, `improve:`, `refactor:`, `docs:` (e.g., `fix: hide watermark for pro users`).
+- PRs: clear description, linked issues, screenshots/GIFs for UI, env/migration notes. Keep scope tight and update docs when behavior changes.
+
+## Agent‑Specific Practices (inspired by CLAUDE.md)
+- Do not start extra servers; use `pnpm dev:web` or `pnpm dev:desktop` as needed.
+- Never edit auto‑generated files: `**/tauri.ts`, `**/queries.ts`, `apps/desktop/src-tauri/gen/**`.
+- Prefer existing scripts and Turbo filters over ad‑hoc commands; clear `.turbo` only when necessary.
+- Database flow: always `db:generate` → `db:push` before relying on new schema.
+- Keep secrets out of VCS; configure via `.env` from `pnpm env-setup`.
+- macOS note: desktop permissions (screen/mic) apply to the terminal running `pnpm dev:desktop`.
+
+## Effect Usage
+- Next.js API routes in `apps/web/app/api/*` are built with `@effect/platform`'s `HttpApi` builder; copy the existing class/group/endpoint pattern instead of ad-hoc handlers.
+- Acquire backend services (e.g., `Videos`, `S3Buckets`) inside `Effect.gen` blocks and wire them through `Layer.provide`/`HttpApiBuilder.group`, translating domain errors to `HttpApiError` variants.
+- Convert the effectful API to a Next.js handler with `apiToHandler(ApiLive)` from `@/lib/server` and export the returned `handler`—avoid calling `runPromise` inside route files.
+- On the server, run effects through `EffectRuntime.runPromise` from `@/lib/server`, typically after `provideOptionalAuth`, so cookies and per-request context are attached automatically.
+- On the client, use `useEffectQuery`/`useEffectMutation` from `@/lib/EffectRuntime`; they already bind the managed runtime and tracing so you shouldn't call `EffectRuntime.run*` directly in components.

CLAUDE.md

@@ -335,6 +335,27 @@ Minimize `useEffect` usage: compute during render, handle logic in event handler
 - Loading: Use static skeletons that mirror content; no bouncing animations.
 - Performance: Memoize expensive work; code-split naturally; use Next/Image for remote assets.
 
+## Effect Patterns
+
+### Managed Runtimes
+- `apps/web/lib/server.ts` builds a `ManagedRuntime` from `Layer.mergeAll` so database, S3, policy, and tracing services are available to every request. Always run server-side effects through `EffectRuntime.runPromise`/`runPromiseExit` from this module so cookie-derived context and `VideoPasswordAttachment` are attached automatically.
+- `apps/web/lib/EffectRuntime.ts` exposes a browser runtime that merges the RPC client and tracing layers. Client code should lean on `useEffectQuery`, `useEffectMutation`, and `useRpcClient`; never call `ManagedRuntime.make` yourself inside components.
+
+### API Route Construction
+- Next.js API folders under `apps/web/app/api/*` wrap Effect handlers with `@effect/platform`'s `HttpApi`/`HttpApiBuilder`. Follow the existing pattern: declare a contract class via `HttpApi.make`, configure groups/endpoints with `Schema`, and only export the `handler` returned by `apiToHandler(ApiLive)`.
+- Inside `HttpApiBuilder.group` blocks, acquire services (e.g., `Videos`, `S3Buckets`) with `yield*` inside `Effect.gen`. Provide layers using `Layer.provide` rather than manual `provideService` calls so dependencies stay declarative.
+- Map domain-level errors to transport errors with `HttpApiError.*`. Keep error translation exhaustive (`Effect.catchTags`, `Effect.tapErrorCause(Effect.logError)`) to preserve observability.
+- Use `HttpAuthMiddleware` for required auth and `provideOptionalAuth` when guests are allowed. The middleware/utility already hydrate `CurrentUser`, so avoid duplicating session lookups in route handlers.
+- Shared HTTP contracts that power the desktop app live in `packages/web-api-contract-effect`; update them alongside route changes to keep schemas in sync.
+
+### Server Components & Effects
+- Server components that need Effect services should call `EffectRuntime.runPromise(effect.pipe(provideOptionalAuth))`. This keeps request cookies, tracing spans, and optional auth consistent with the API layer.
+- Prefer lifting Drizzle queries or other async work into `Effect.gen` blocks and reusing domain services (`Videos`, `VideosPolicy`, etc.) rather than writing ad-hoc logic.
+
+### Client Integration
+- React Query hooks should wrap Effect workflows with `useEffectQuery`/`useEffectMutation` from `apps/web/lib/EffectRuntime.ts`; these helpers surface Fail/Die causes consistently and plug into tracing/span metadata.
+- When a mutation or query needs the RPC transport, resolve it through `useRpcClient()` and invoke the strongly-typed procedures exposed by `packages/web-domain` instead of reaching into fetch directly.
+
 ## Desktop (Solid + Tauri) Patterns
 - Data fetching: `@tanstack/solid-query` for server state.
 - IPC: Call generated `commands` and `events` from `tauri_specta`. Listen directly to generated events and prefer the typed interfaces.