Merge branch 'main' into inactive-cursor

Author: richiemcilroy

.dockerignore

@@ -1,3 +1,4 @@
-target/
-node_modules/
-crates/
+target
+crates
+**/node_modules
+**/.next

.github/workflows/ci.yml

@@ -115,8 +115,6 @@ jobs:
           echo 'VITE_POSTHOG_KEY=${{ secrets.NEXT_PUBLIC_POSTHOG_KEY }}' >> .env
           echo 'VITE_POSTHOG_HOST=${{ secrets.NEXT_PUBLIC_POSTHOG_HOST }}' >> .env
           echo 'VITE_SERVER_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
-          echo "NEXT_PUBLIC_CAP_AWS_REGION=${{ secrets.NEXT_PUBLIC_CAP_AWS_REGION }}" >> .env
-          echo "NEXT_PUBLIC_CAP_AWS_BUCKET=${{ secrets.NEXT_PUBLIC_CAP_AWS_BUCKET }}" >> .env
 
           cat .env >> $GITHUB_ENV
 
@@ -185,8 +183,6 @@ jobs:
           echo 'VITE_POSTHOG_KEY=${{ secrets.NEXT_PUBLIC_POSTHOG_KEY }}' >> .env
           echo 'VITE_POSTHOG_HOST=${{ secrets.NEXT_PUBLIC_POSTHOG_HOST }}' >> .env
           echo 'VITE_SERVER_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
-          echo "NEXT_PUBLIC_CAP_AWS_REGION=${{ secrets.NEXT_PUBLIC_CAP_AWS_REGION }}" >> .env
-          echo "NEXT_PUBLIC_CAP_AWS_BUCKET=${{ secrets.NEXT_PUBLIC_CAP_AWS_BUCKET }}" >> .env
 
       - name: Copy .env to apps/desktop
         run: cp .env apps/desktop/.env

.github/workflows/docker-build-web.yml

@@ -36,8 +36,6 @@ jobs:
         run: |
           echo "WEB_URL=http://localhost:3000" > .env
           echo "NEXT_PUBLIC_DOCKER_BUILD=true" >> .env
-          echo "NEXT_PUBLIC_CAP_AWS_BUCKET=capso" >> .env
-          echo "NEXT_PUBLIC_CAP_AWS_REGION=us-east-1" >> .env
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3

.github/workflows/publish.yml

@@ -132,6 +132,7 @@ jobs:
     if: ${{ needs.draft.outputs.needs_release == 'true' }}
     permissions:
       contents: write
+      actions: read
     strategy:
       fail-fast: false
       matrix:
@@ -141,7 +142,7 @@ jobs:
           - target: aarch64-apple-darwin
             runner: macos-latest-large
           - target: x86_64-pc-windows-msvc
-            runner: windows-latest-l
+            runner: windows-latest
     env:
       TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
       TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
@@ -185,8 +186,6 @@ jobs:
           echo 'VITE_POSTHOG_KEY=${{ secrets.VITE_POSTHOG_KEY }}' >> .env
           echo 'VITE_POSTHOG_HOST=${{ secrets.VITE_POSTHOG_HOST }}' >> .env
           echo 'VITE_SERVER_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
-          echo "NEXT_PUBLIC_CAP_AWS_REGION=${{ secrets.NEXT_PUBLIC_CAP_AWS_REGION }}" >> .env
-          echo "NEXT_PUBLIC_CAP_AWS_BUCKET=${{ secrets.NEXT_PUBLIC_CAP_AWS_BUCKET }}" >> .env
           echo 'RUST_TARGET_TRIPLE=${{ matrix.settings.target }}' >> .env
 
       - name: Build app
@@ -210,6 +209,52 @@ jobs:
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
 
+      # - name: Upload unsigned Windows installer
+      #   if: ${{ runner.os == 'Windows' }}
+      #   id: upload_unsigned_windows_installer
+      #   uses: actions/upload-artifact@v4
+      #   with:
+      #     name: unsigned-windows-installer
+      #     path: target/${{ matrix.settings.target }}/release/bundle/nsis/*.exe
+      #     if-no-files-found: error
+
+      # - name: Submit SignPath signing request
+      #   if: ${{ runner.os == 'Windows' }}
+      #   id: submit_signpath_signing_request
+      #   uses: signpath/github-action-submit-signing-request@v1
+      #   with:
+      #     api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
+      #     organization-id: ${{ secrets.SIGNPATH_ORGANIZATION_ID }}
+      #     project-slug: ${{ secrets.SIGNPATH_PROJECT_SLUG }}
+      #     signing-policy-slug: ${{ secrets.SIGNPATH_SIGNING_POLICY_SLUG }}
+      #     github-artifact-id: ${{ steps.upload_unsigned_windows_installer.outputs.artifact-id }}
+      #     wait-for-completion: true
+      #     output-artifact-directory: signed-windows-installer
+
+      # - name: Restore signed Windows installer
+      #   if: ${{ runner.os == 'Windows' }}
+      #   shell: pwsh
+      #   run: |
+      #     $signedDir = "signed-windows-installer"
+      #     $bundleDir = "target/${{ matrix.settings.target }}/release/bundle/nsis"
+
+      #     if (-not (Test-Path $signedDir)) {
+      #       throw "Signed artifact directory '$signedDir' not found."
+      #     }
+
+      #     $executables = Get-ChildItem -Path $signedDir -Filter *.exe -Recurse
+      #     if (-not $executables) {
+      #       throw "No signed executables found in '$signedDir'."
+      #     }
+
+      #     # Copy signed executables back to the original bundle location for CrabNebula upload
+      #     Write-Host "Copying signed executables to: $bundleDir"
+      #     Copy-Item -Path (Join-Path $signedDir '*.exe') -Destination $bundleDir -Force
+
+      #     # List the files to verify
+      #     Write-Host "Files in bundle directory after signing:"
+      #     Get-ChildItem -Path $bundleDir -Filter *.exe | ForEach-Object { Write-Host "  - $($_.Name)" }
+
       - name: Upload assets
         uses: crabnebula-dev/cloud-release@v0
         with:

.npmrc

@@ -1 +1,2 @@
 auto-install-peers = true
+force-legacy-deploy = true

CLAUDE.md

@@ -171,7 +171,7 @@ import { getCurrentUser } from "@cap/database/auth/session";
 export async function updateVideo(data: FormData) {
   const user = await getCurrentUser();
   if (!user?.id) throw new Error("Unauthorized");
-  
+
   // Database operations with Drizzle
   return await db().update(videos).set({ ... }).where(eq(videos.id, id));
 }
@@ -220,7 +220,6 @@ const updateMutation = useMutation({
 
 ### Build/Client (selected)
 - `NEXT_PUBLIC_WEB_URL`
-- `NEXT_PUBLIC_CAP_AWS_BUCKET`, `NEXT_PUBLIC_CAP_AWS_REGION`
 - `NEXT_PUBLIC_POSTHOG_KEY`, `NEXT_PUBLIC_POSTHOG_HOST`
 - `NEXT_PUBLIC_DOCKER_BUILD` (enables Next.js standalone output)
 
@@ -268,7 +267,7 @@ const updateMutation = useMutation({
 - **Connection errors**: Verify Docker containers are running
 - **Schema drift**: Run `pnpm --dir packages/database db:check`
 
-### Desktop App Issues  
+### Desktop App Issues
 - **IPC binding errors**: Restart dev server to regenerate `tauri.ts`
 - **Rust compile errors**: Check Cargo.toml dependencies
 - **Permission issues**: macOS/Windows may require app permissions
@@ -392,8 +391,8 @@ Minimize `useEffect` usage: compute during render, handle logic in event handler
 
 ### Media Processing Flow
 ```
-Desktop Recording → Local Files → Upload to S3 → 
-Background Processing (tasks service) → 
+Desktop Recording → Local Files → Upload to S3 →
+Background Processing (tasks service) →
 Transcription/AI Enhancement → Database Storage
 ```