Summary

Enables Velly to run QA/test workflows through computer-use sessions, record the screen, and return a playable + draggable video in chat. Adds QA intent detection, IPC contract extensions, daemon-side finalization handling with summary + attachment injection, macOS screen recording lifecycle, file-backed attachment storage with HTTP range-request streaming, chat video playback with drag-to-Finder support, and configurable retention cleanup.

Changes

• QA Intent Detection: detectQaIntent() pattern-matches QA/test commands and natural-language requests (narrowed to avoid false positives on common words like "check")
• IPC Contract Extensions: reportToSessionId, qaMode on CuSessionCreate and TaskRouted; conversationId on TaskSubmit; retentionDays, captureScope, includeAudio on TaskRouted; new CuSessionFinalized message with recording metadata
• Daemon Routing: Task routing and escalation handlers detect QA intent, set qaMode + reportToSessionId, pass retention/capture config
• Client QA Wiring: AppDelegate+Sessions.swift reads qaMode from task_routed, creates ScreenRecorder, passes QA params + retention + capture config to ComputerUseSession; sends conversationId in task_submit
• Daemon Finalization Handler: handleCuSessionFinalized creates file-backed attachment (always, for cleanup), injects summary + attachment into source chat (when reportToSessionId present). Uses recordingTracked flag to catch all edge cases.
• File-backed Attachment Schema: New storageKind, filePath, sha256, expiresAt columns; createFileBackedAttachment() for large files; backward-compatible
• Content Streaming Endpoint: GET /v1/attachments/:id/content with RFC 7233 range request support
• macOS Recording Lifecycle: ScreenRecorder using ScreenCaptureKit; integrated into Session.swift; configurable retention + capture scope + audio from daemon config
• Capture Scope Resolution: When captureScope is "window", resolves topmost non-self CGWindowID (excludes own PID + filters to layer 0); when "display", passes CGMainDisplayID(). Falls back gracefully.
• Chat Video UX: InlineVideoAttachmentView fetches from /content for file-backed attachments; .onDrag for drag-to-Finder
• Retention Cleanup: Configurable qaRecording.defaultRetentionDays; background cleanup task; orphan recordings tracked in DB
• Cancel Safety: Deferred abort with safety-net timer; timer properly disarmed via Task.isCancelled guard
• Metadata Lifecycle: Socket close handler owns socketToCuSession cleanup; targeted cleanup on session replacement
• Recording Fallback: recordingTracked flag ensures all untracked recordings get DB entries (missing conversation, empty summary, etc.)

Milestone PRs

• M1: IPC Contract Extensions + Swift Codegen #6907: M1: IPC Contract Extensions + Swift Codegen
• M2: Daemon Finalization Handler + CU Metadata Plumbing #6909: M2: Daemon Finalization Handler + CU Metadata Plumbing
• M3: File-backed Attachment Schema + Content Streaming Endpoint #6911: M3: File-backed Attachment Schema + Content Streaming Endpoint
• M4: macOS Recording Lifecycle + Chat Video UX #6916: M4: macOS Recording Lifecycle + Chat Video UX
• M5: Retention Cleanup + Tests + Documentation #6919: M5: Retention Cleanup + Tests + Documentation

Fix PRs

• Fix M1 review feedback: Swift init + codegen INT_PATTERNS #6910: Fix M1 review: Swift init + codegen INT_PATTERNS
• Fix M2 + M1-fix review feedback: metadata race + latencyMs type #6912: Fix M2 + M1-fix review: metadata race + latencyMs type
• Fix M3 feedback: legacy migration + RFC 7233 range clamping #6913: Fix M3 review: legacy migration + RFC 7233 range clamping
• Fix M4 feedback: finalize ordering + recorder defer cleanup #6920: Fix M4 review: finalize ordering + recorder defer cleanup
• Fix feedback: metadata leak on disconnect + storage_kind NOT NULL #6924: Fix: metadata leak on disconnect + storage_kind NOT NULL
• Fix M5 feedback: bound cleanup interval to prevent overflow #6925: Fix M5 review: bound cleanup interval to prevent overflow
• Fix cancel ordering: send abort after finalization for QA sessions #6926: Fix cancel ordering: send abort after finalization for QA sessions
• Fix metadata race: let socket close handler own socketToCuSession cleanup #6931: Fix metadata race: socket close handler owns socketToCuSession cleanup
• Fix cancel safety: deferred abort fallback for QA sessions #6932: Fix cancel safety: deferred abort fallback for QA sessions
• Fix session replacement: remove stale socket-to-session mapping #6933: Fix session replacement: remove stale socket-to-session mapping
• Fix cancel race: disarm safety-net timer before QA finalization #6934: Fix cancel race: disarm safety-net timer before QA finalization
• Wire QA intent detection in daemon routing + fix epoch units #6941: Wire QA intent detection + routing metadata + epoch fix
• Create file-backed attachment on QA finalize + video /content streaming #6943: File-backed attachment on finalize + video /content streaming
• Wire QA mode in macOS client: create recorder when daemon signals QA intent #6945: Wire QA mode in macOS client
• Fix direct QA reporting + configurable retention + orphan recording tracking #6951: Direct QA reporting + configurable retention + orphan recording tracking
• Fix ARCHITECTURE.md: clarify QA recording conditional paths #6952: Fix ARCHITECTURE.md QA recording data flow accuracy
• fix: recording fallback tracks all untracked recordings #6960: Fix recording fallback: track all untracked recordings
• feat: wire QA recording captureScope and includeAudio config #6967: Wire captureScope and includeAudio config to client
• fix: apply captureScope to resolve actual window/display for recording #6968: Apply captureScope to resolve actual window/display for recording
• fix: exclude own PID from window capture resolution #6975: Exclude own PID from window capture resolution
• fix: narrow QA intent detection + fix safety-net timer race #6978: Narrow QA intent regex + fix safety-net timer race

Known limitations (deferred to M3/M4)

• QA intent detection is regex-based — Works for direct commands but misses nuanced requests ("smoke test onboarding"). LLM-based semantic classification planned for M3.
• Capture config is daemon-config-only, not per-request — captureScope and includeAudio always come from daemon config. Per-request overrides planned for M3.
• Chat injection requires conversationId — If absent on task_submit, recording is tracked for cleanup but not injected into chat. Product decision deferred.
• Saved QA scripts (M3) and scheduled self-QA (M4) remain unimplemented.

Project issue

Closes #6899

Test plan

• Verify IPC contract snapshot test passes
• Verify file-backed attachment CRUD tests pass
• Verify attachment content route tests (range requests, 206/416 responses)
• Verify recording cleanup tests
• Verify cu_session_finalized handler tests (7 tests including edge cases)
• Manual: send "test the onboarding flow" and verify QA intent triggers recording
• Manual: send "check my email" and verify QA mode does NOT trigger
• Manual: verify recording appears as playable video in chat with drag support
• Manual: verify retention cleanup removes expired recordings
• Manual: set qaRecording.captureScope to "window" and verify target app window is captured (not Vellum)

Generated with Claude Code