phlex-reactive 0.12.6 → 0.13.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7a9ece1128621af6ad4b9b8e249c1005bcfd063e0aa70235800292f156ac4419
-  data.tar.gz: f8613e2ec77fb55d1f9b5b0b30719382ef5e52c2a34d1ff6bcc29f9a017bafc7
+  metadata.gz: a6181c7ab8900e42562ecb8b82e8c52a30af5b643eadd89b045c60d1b48c7e87
+  data.tar.gz: cfa42f5aa9230785cb451cfcefc0c280d5d51d0c648d5bf797911807a59291b4
 SHA512:
-  metadata.gz: 19130860688333ec585f3da94ff25be2f8fc8c3fd103c023c98d4ac528921d7b02a7362448b864f81b435d35fc8946e0a3be7ba41f70f57751b115ed09b9a394
-  data.tar.gz: a6efc22b0270eb3e1f4cc7732cc1394acd40dd80de81b12a1dd792df9d2e3952bf5070872e21884cdcc9a5c91211791e74fc31e81f2f25cc1116587446a636c3
+  metadata.gz: 01744edf54e1a720c5365413ad4f70334b88d5351685d7476ec1a782f146e9c0e97cdbe66d536d36da6fcf52e31b8dee0e9320019fca5313282dea3ce0a01cc7
+  data.tar.gz: dbaf5238767322e2ce1f0ca4bd44d93f3712f56189050984bcc3f612fa4f650d994b5813afd52fd163973543f346a47d6eca75627e73d77008a0ce83cfe9d3f4

data/CHANGELOG.md

@@ -6,8 +6,39 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+### Fixed
+
+- **`rake release` re-locks the root `Gemfile.lock` too.** Since #246 the gem
+  root's lockfile is committed, and it pins `phlex-reactive` by local path — so
+  the version bump left it stale and the Release workflow's frozen
+  `bundle install` refused it (v0.13.0's first attempt). The release task now
+  re-locks and commits every tracked lockfile that pins the gem (root + docs).
+
 ### Added
 
+- **`reactive_persist` drafts rich editors (#241).** A named `lexxy-editor`,
+  `trix-editor` or bare `[contenteditable]` inside a `reactive_persist` root is
+  now drafted and restored through its **own** value surface — the editor's
+  `value` getter/setter (its serialized HTML, replayed through the editor's own
+  sanitizing import: Trix `HTMLParser`, Lexxy `$generateNodesFromDOM` +
+  sanitizer), a bare contenteditable's `textContent` — never `innerHTML`. The
+  name resolves from the element's `name` attribute or, for Trix in the Rails
+  `rich_text_area` shape, from the `input=`-paired hidden input (never a
+  separate key). `restore: :blank` asks the editor whether it is empty (Lexxy
+  `isEmpty`, Trix `editor.getDocument().isEmpty()`, an exact-string fallback),
+  so an attachment-only server body is never overwritten. An editor not yet
+  upgraded at connect (Trix defines its elements in a `setTimeout`; a lazily
+  imported Lexxy) is restored once `customElements.whenDefined` resolves; a
+  throwing setter never escapes `connect()` (one `console.info` under
+  `Phlex::Reactive.debug`). The editors' own `lexxy:change` / `trix-change`
+  events drive the debounced write (neither lets its native `input` bubble),
+  and their toolbar chrome (Lexxy's code-language select and link `href`
+  input, Trix's `trix-toolbar`) is never drafted. `fields:`,
+  `reactive_persist_skip` (on the editor element) and nested-root ownership
+  apply unchanged. The dummy vendors the
+  real Trix 2.1.19 and Lexxy 0.9.31 and the browser suite drives both under
+  Puma and Falcon.
+
 - **`reactive_persist` — client-only localStorage drafts (#239).** "Don't make
   me start over": spread `reactive_persist(key:, ttl: 7.days)` on a root and
   the generic controller keeps a `localStorage` draft of every **owned**
@@ -22,8 +53,7 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
   `js.persist_state(step: 2)` merges a flat state bag into the draft (restored
   as `data-reactive-persist-state` + the `reactive:persist-restored` event).
   `hidden`/`file`/`password`/`submit` controls, `reactive_persist_skip`
-  markers, nested roots and rich-text editors are never persisted; `fields:`
-  narrows the set. Storage failures are silent (a `console.info` under
+  markers and nested roots are never persisted; `fields:` narrows the set. Storage failures are silent (a `console.info` under
   `Phlex::Reactive.debug`). Works from `ClientBindings` (no token, no POST).
 
 - **Dev-mode warning when a client op resolves zero targets (#237).** A client
@@ -486,6 +516,13 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ### Changed
 
+- **Client build toolchain: bun 1.3.14 → 1.4.0.** `.bun-version`, the root `engines.bun`
+  floor, and the docs `packageManager` pin all move together. The shipped
+  `*.min.js` / `.map` artifacts (and their vendored twins under
+  `spec/dummy/public/vendor`) are rebuilt — the 1.4 minifier picks different
+  local identifier names and sorts export lists, so the bytes differ, but the
+  code is semantically identical (JS unit, request, and browser suites unchanged).
+
 - **BREAKING: small sharp knives — the last 0.11 API-clarity pass (#186).**
   Four independent edges honed, one contract frozen:
   - **`reactive_filter` speaks fields, not selectors.** `reactive_filter(:q)` names the

data/README.md

@@ -1,6 +1,6 @@
 # phlex-reactive
 
-[![CI](https://github.com/mhenrixon/phlex-reactive/actions/workflows/main.yml/badge.svg)](https://github.com/mhenrixon/phlex-reactive/actions/workflows/main.yml)
+[![CI](https://github.com/zoolutions/phlex-reactive/actions/workflows/main.yml/badge.svg)](https://github.com/zoolutions/phlex-reactive/actions/workflows/main.yml)
 [![Gem Version](https://img.shields.io/gem/v/phlex-reactive)](https://rubygems.org/gems/phlex-reactive)
 [![Docs](https://img.shields.io/badge/docs-phlex--reactive.zoolutions.llc-blue)](https://phlex-reactive.zoolutions.llc)
 
@@ -62,7 +62,7 @@ follows* — and implements it the Rails way:
 - **One tiny client runtime.** A single generic Stimulus controller, registered
   once, handles every reactive component. You don't write per-feature JS.
 
-Pair it with [**pgbus**](https://github.com/mhenrixon/pgbus) and your live
+Pair it with [**pgbus**](https://github.com/zoolutions/pgbus) and your live
 updates become *transactional* (no broadcast for a rolled-back change) and
 *reconnect-safe* (missed messages replay) over Postgres SSE — **no Action Cable,
 no Redis.**
@@ -1160,11 +1160,28 @@ wire attr: `data-reactive-persist='{"key":"village-apply","ttl":604800,"debounce
 - **`fields:`** narrows the set to declared names (scope-aware symbols):
   `reactive_persist(key: "k", fields: %i[name bio])`.
 - **Never persisted**: `type=hidden/file/password/submit/button/reset/image`,
-  anything carrying `reactive_persist_skip`, a nested reactive root's controls,
-  and rich-text/`contenteditable` editors (they aren't `input/select/textarea`).
-  `autocomplete="off"` is **not** an implicit skip — a wizard often sets it
-  form-wide. **Honeypots must opt out** (`reactive_persist_skip`) or sit outside
-  the root: an invisible-captcha text input looks like any other field.
+  anything carrying `reactive_persist_skip`, and a nested reactive root's
+  controls. `autocomplete="off"` is **not** an implicit skip — a wizard often
+  sets it form-wide. **Honeypots must opt out** (`reactive_persist_skip`) or sit
+  outside the root: an invisible-captcha text input looks like any other field.
+- **Rich editors** (#241) — a named `lexxy-editor`, `trix-editor` or bare
+  `[contenteditable]` is drafted and restored through its **own** value
+  surface: the editor's `value` getter/setter (its serialized HTML, replayed
+  through the editor's own sanitizing import — Trix's `HTMLParser`, Lexxy's
+  `$generateNodesFromDOM` + sanitizer), a bare contenteditable's `textContent`.
+  The name is the element's `name` attribute, or — Trix in the Rails
+  `rich_text_area` shape — the `input=`-paired hidden input's name (the hidden
+  input itself is never a separate key). `restore: :blank` **asks the editor**
+  whether it is empty (Lexxy `isEmpty`, Trix `editor.getDocument().isEmpty()`),
+  so an attachment-only server body is never overwritten. An editor that hasn't
+  upgraded yet at connect (Trix defines its elements in a `setTimeout`; a lazily
+  imported Lexxy) is restored once `customElements.whenDefined` resolves. The
+  editors' own `lexxy:change` / `trix-change` events are the keystroke signal
+  for the draft write (neither editor lets its native `input` bubble) and also
+  fire on restore (no native `input`/`change` is ever synthesized). Their
+  toolbar chrome (Lexxy's code-language select and link `href` input, Trix's
+  `trix-toolbar`) is never drafted. Put `reactive_persist_skip` on the editor
+  element to opt one out.
 - **State bag** — `js.persist_state(step: 2)` merges a flat hash of scalars
   into the same draft (a wizard's current step). On restore the root carries
   `data-reactive-persist-state='{"step":2}'` and dispatches a bubbling
@@ -1175,8 +1192,11 @@ wire attr: `data-reactive-persist='{"key":"village-apply","ttl":604800,"debounce
   prints one `console.info` naming the failure so a dev sees why nothing came
   back.
 
-Threat model: values are replayed via `.value`/`.checked` only (never HTML) — a
-tampered draft can only fill what the user could type. PII sits in this
+Threat model: phlex-reactive never writes markup into the DOM — native controls
+are replayed via `.value`/`.checked`/`.selected`, a bare contenteditable via
+`textContent`, and a rich editor through its own `value` setter (the same
+sanitizing import a paste takes). A tampered draft can only produce what the
+user could type or paste into that field. PII sits in this
 browser's `localStorage` for `ttl`; the submit-clear and `ttl` are the
 shared-computer mitigation. `persist_state`/`persist_clear` are **actor-only**
 ops (refused by `broadcast_to(js:)`). See the [security page](docs/security.md).
@@ -2786,7 +2806,7 @@ end
 
 ## Live updates with pgbus (recommended)
 
-[pgbus](https://github.com/mhenrixon/pgbus) replaces Action Cable's transport
+[pgbus](https://github.com/zoolutions/pgbus) replaces Action Cable's transport
 with Postgres SSE and fixes its reliability gaps. With it installed,
 `broadcast_to` and `turbo_stream_from` route over pgbus automatically:
 
@@ -3004,7 +3024,7 @@ The mental model is stolen, gratefully, from
 [Laravel Livewire](https://livewire.laravel.com) (public method = action) and
 [Phoenix LiveView](https://www.phoenixframework.org) (a component is a re-render
 unit). The transport and reliability come from
-[pgbus](https://github.com/mhenrixon/pgbus). The rendering is all
+[pgbus](https://github.com/zoolutions/pgbus). The rendering is all
 [Phlex](https://www.phlex.fun).
 
 ## License

data/app/javascript/phlex/reactive/compute.min.js

@@ -1,4 +1,4 @@
-var F=new Map;function M(j,q){F.set(j,q)}function P(j){return F.get(j)}function Q(){F.clear()}var J="@root";function x(j,{global:q,transition:w}={}){let B={to:j??J};if(q)B.global=!0;if(w)B.transition=K(w);return B}function K(j){if(!(j&&typeof j==="object"&&!Array.isArray(j)&&["during","from","to"].every((w)=>(w in j))))throw Error("[phlex-reactive] ops transition takes named legs { during, from, to }");return Object.freeze([String(j.during),String(j.from),String(j.to)])}class G{constructor(j=Object.freeze([])){this.ops=j,Object.freeze(this)}show(j,q){return this.#j("show",x(j,q))}hide(j,q){return this.#j("hide",x(j,q))}toggle(j,q){return this.#j("toggle",x(j,q))}add_class(j,q,w){return this.#j("add_class",D(j,q,w))}remove_class(j,q,w){return this.#j("remove_class",D(j,q,w))}toggle_class(j,q,w){return this.#j("toggle_class",D(j,q,w))}set_attr(j,q,w,B){return this.#j("set_attr",{...x(j,B),name:String(q),value:String(w)})}remove_attr(j,q,w){return this.#j("remove_attr",{...x(j,w),name:String(q)})}toggle_attr(j,q,w){return this.#j("toggle_attr",{...x(j,w),name:String(q)})}focus(j,q){return this.#j("focus",x(j,q))}focus_first(j,q){return this.#j("focus_first",x(j,q))}text(j,q,w){return this.#j("text",{...x(j,w),value:String(q??"")})}dispatch(j,{to:q,detail:w,global:B}={}){let H={name:String(j),to:q??J,detail:w??{}};if(B)H.global=!0;return this.#j("dispatch",H)}submit(j,q){return this.#j("submit",x(j,q))}toJSON(){return this.ops}#j(j,q){return new G(Object.freeze([...this.ops,Object.freeze([j,Object.freeze(q)])]))}}function D(j,q,w){let B=q==null?[]:(Array.isArray(q)?q:[q]).map(String);if(B.length===0)throw Error("[phlex-reactive] a class op needs at least one class");return{...x(j,w),classes:Object.freeze(B)}}var U=new G;export{M as setComputeReducer,U as ops,P as computeReducer,Q as __resetComputeRegistryForTest};
+var i=new Map;function l(t,e){i.set(t,e)}function f(t){return i.get(t)}function h(){i.clear()}var a="@root";function s(t,{global:e,transition:r}={}){let n={to:t??a};if(e)n.global=!0;if(r)n.transition=g(r);return n}function g(t){if(!(t&&typeof t==="object"&&!Array.isArray(t)&&["during","from","to"].every((r)=>(r in t))))throw Error("[phlex-reactive] ops transition takes named legs { during, from, to }");return Object.freeze([String(t.during),String(t.from),String(t.to)])}class u{constructor(t=Object.freeze([])){this.ops=t,Object.freeze(this)}show(t,e){return this.#t("show",s(t,e))}hide(t,e){return this.#t("hide",s(t,e))}toggle(t,e){return this.#t("toggle",s(t,e))}add_class(t,e,r){return this.#t("add_class",o(t,e,r))}remove_class(t,e,r){return this.#t("remove_class",o(t,e,r))}toggle_class(t,e,r){return this.#t("toggle_class",o(t,e,r))}set_attr(t,e,r,n){return this.#t("set_attr",{...s(t,n),name:String(e),value:String(r)})}remove_attr(t,e,r){return this.#t("remove_attr",{...s(t,r),name:String(e)})}toggle_attr(t,e,r){return this.#t("toggle_attr",{...s(t,r),name:String(e)})}focus(t,e){return this.#t("focus",s(t,e))}focus_first(t,e){return this.#t("focus_first",s(t,e))}text(t,e,r){return this.#t("text",{...s(t,r),value:String(e??"")})}dispatch(t,{to:e,detail:r,global:n}={}){let c={name:String(t),to:e??a,detail:r??{}};if(n)c.global=!0;return this.#t("dispatch",c)}submit(t,e){return this.#t("submit",s(t,e))}toJSON(){return this.ops}#t(t,e){return new u(Object.freeze([...this.ops,Object.freeze([t,Object.freeze(e)])]))}}function o(t,e,r){let n=e==null?[]:(Array.isArray(e)?e:[e]).map(String);if(n.length===0)throw Error("[phlex-reactive] a class op needs at least one class");return{...s(t,r),classes:Object.freeze(n)}}var m=new u;export{h as __resetComputeRegistryForTest,f as computeReducer,m as ops,l as setComputeReducer};
 
-//# debugId=3CB48262B60C70DD64756E2164756E21
+//# debugId=58A4BBBA7E66031D64756E2164756E21
 //# sourceMappingURL=compute.min.js.map

data/app/javascript/phlex/reactive/compute.min.js.map

@@ -5,6 +5,6 @@
     "// The client-side compute (data-binding) registry — the \"instant\" half of the\n// new/unpersisted-record UX.\n//\n// A record-backed reactive component round-trips every change to the server\n// (the signed identity re-finds the record; the server re-renders). A NEW,\n// unpersisted record has no such server truth to re-render against on every\n// keystroke — the classic answer is a bespoke Stimulus controller doing the math\n// in the browser (carlqvist's new_order_controller.js). This registry lets that\n// math be a DECLARED part of the component instead: `reactive_compute :name,\n// inputs:, outputs:` (Ruby) names a reducer registered here, and the generic\n// reactive controller runs it on `input` — writing the outputs with NO round\n// trip. When the component ALSO carries on(...) (a persisted record, or a draft\n// you sync), the debounced POST reconciles from the authoritative server reply.\n//\n// The seam mirrors confirm.js: a settable registry with a lookup the controller\n// calls. Register once at boot:\n//\n//   import { setComputeReducer } from \"phlex/reactive/compute\"\n//   setComputeReducer(\"payment_split\", ({ allowance, cash, leasing, total }) => ({\n//     allowance, leasing, cash: total - allowance - leasing,\n//   }))\n//\n// The reducer's signature is (values, meta):\n//\n//   values — a plain object of { inputName: value } over the declared inputs.\n//            Untyped inputs (the array form) AND :number-typed inputs arrive as\n//            Numbers (blank/NaN → 0); :string-typed inputs (the hash form,\n//            issue #104) arrive as the RAW string. `reactive_compute :x, inputs:\n//            { title: :string, qty: :number }` is what selects per-input types;\n//            `inputs: %i[a b]` stays all-numeric (backward compatible).\n//   meta   — { changed }: the name (string) of the declared input the\n//            triggering event edited, or null (a direct recompute() call, or a\n//            target this root doesn't own / didn't declare as an input).\n//\n// OUTPUTS may be a form FIELD or a TEXT NODE (issue #104). An output whose name\n// matches an owned control writes its .value (+ the change-guarded input\n// dispatch below). An output with NO matching field writes textContent to every\n// owned [data-reactive-text=\"<name>\"] node (reactive_text(:name)) — XSS-safe by\n// construction, change-guarded, NO input dispatch (a text node has no listener\n// contract). A declared INPUT also mirrors into its own text node on every\n// input via an always-run pass — so reactive_text(:title) is a live field\n// preview with NO registered reducer at all.\n//\n// It returns a plain object of { outputName: value } — only the outputs it\n// names are written, so it can leave the edited field (and its caret)\n// untouched. A one-argument reducer keeps working unchanged (it just ignores\n// meta). `changed` is what makes a MULTI-WAY / MUTUAL rebalance expressible as\n// one reducer (issue #75) — branch on which field the user edited:\n//\n//   setComputeReducer(\"three_way_split\", ({ field_a, field_b, field_c, total }, { changed }) => {\n//     if (changed === \"field_c\") return { field_a: total - field_c - field_b }\n//     return { field_c: total - field_a - field_b }\n//   })\n//\n// Output writes are CHANGE-GUARDED: the controller writes a field and\n// dispatches a bubbling `input` event on it ONLY when the new value differs\n// from the field's current value (real browsers never fire `input` on a\n// programmatic .value write, so the controller dispatches explicitly — that's\n// what drives a chained summary repaint, matching the server's set_value +\n// dispatch(\"input\") contract). Returning the SAME value a field already holds\n// is skipped entirely — no write, no event — which is why a reducer with\n// overlapping inputs/outputs (like payment_split above) settles instead of\n// re-entering itself forever.\n//\n// CONVERGENCE REQUIREMENT: because an output write dispatches a REAL input\n// event (issue #76), recompute re-enters with changed = that OUTPUT field's\n// name (when it's also a declared input). A branching reducer must therefore\n// be convergent: the re-entrant pass must compute values EQUAL to what the\n// first pass already wrote to the DOM, so the change guard settles the chain.\n// The three_way_split above is: after `changed === \"field_a\"` writes field_c,\n// the re-entrant `changed === \"field_c\"` pass derives field_a back to the\n// value it already holds — no write, no event, settled in one bounce.\n\n// THE RESERVED `$ops` OUTPUT (issue #226). Besides field/text outputs, a\n// reducer may return the reserved key `$ops` holding a chain of client DOM\n// ops — built with the `ops` builder below, or a raw [[name, args], ...]\n// array. The controller consumes it as a PHASE 4 of the single-pass write set:\n// the ops run AFTER the field writes, text sinks, and phase-3 input dispatches\n// settle, through the SAME frozen CLIENT_OPS whitelist on_client uses (an\n// unknown op warns + is skipped). `null`/`undefined`/absent = no effect.\n//\n// RISING-EDGE semantics, keyed on CONTENT: the chain runs only when it\n// DIFFERS from the previous pass's chain (including from \"absent\"), and only\n// on EVENT-DRIVEN passes. Returning the SAME chain again is settled — no\n// re-fire (a 7th keystroke capped back to the same complete value can't\n// re-submit), mirroring the change-guarded field writes. Returning a\n// DIFFERENT chain fires again — a multi-box reducer advancing focus\n// box-by-box emits a new focus target per digit, each a new intent. The\n// connect/morph SEED pass (issue #199 — recompute with no event) ARMS the\n// latch but never fires — a form re-rendered with an already-complete value\n// (a validation-error morph, a browser restore) must not auto-fire; that is\n// what breaks the submit → error re-render → re-seed → submit loop. A later\n// pass returning no $ops re-arms. The canonical use — a one-time-code field\n// that normalizes on input and commits when complete:\n//\n//   import { setComputeReducer, ops } from \"phlex/reactive/compute\"\n//   setComputeReducer(\"otp\", ({ code }) => {\n//     const digits = code.replace(/\\D/g, \"\").slice(0, 6)\n//     return { code: digits, $ops: digits.length === 6 ? ops.submit() : null }\n//   })\n//\n// `submit` commits the target's own form via requestSubmit() — the real submit\n// event fires, so an on(:verify, event: \"submit\") interception (or a native/\n// Turbo form) handles it exactly like a user submit. submit/focus are\n// ACTOR-ONLY: usable here and in on_client/reply.js, refused in broadcasts.\n// paste_into (issue #228) is actor-only too but DELIBERATELY absent from this\n// builder: a reducer runs on every input event, and a clipboard read per\n// keystroke (each changed chain fires) would spam permission prompts. Use it\n// from on_client / reply.js / reactive_on_complete instead; a raw\n// [[\"paste_into\", …]] pair still interprets if you truly need it.\n\nconst reducers = new Map()\n\n// Register (or replace) the reducer for `key`. `fn` is\n// (values: Record<string, number>, meta: { changed: string | null })\n//   => Record<string, unknown>.\nexport function setComputeReducer(key, fn) {\n  reducers.set(key, fn)\n}\n\n// Look up a registered reducer; undefined when none — the controller then makes\n// #recompute a no-op rather than throwing (a missing reducer must not break the\n// page; it just means no client-side binding for that root).\nexport function computeReducer(key) {\n  return reducers.get(key)\n}\n\n// Test seam: clear the registry so a reducer registered in one test can't leak.\nexport function __resetComputeRegistryForTest() {\n  reducers.clear()\n}\n\n// --- The reducer-side op-chain builder (issue #226) --------------------------\n//\n// A thin, IMMUTABLE mirror of the Ruby Phlex::Reactive::JS builder (minus\n// paste_into — see the actor-only note above): verbs carry\n// the WIRE op names (snake_case) and append [name, args] pairs; every verb\n// returns a NEW instance, so a chain held in a constant can never be mutated by\n// later use. `.ops` exposes the raw [[name, args], ...] list the controller\n// interprets (and toJSON serializes it, so a chain can also feed a hand-built\n// ops attr). Targets: a CSS selector string, or omit for \"@root\" (the\n// component's own root). No build-time attr validation here — the interpreter's\n// allowlist (guardAttr) is the enforcement point; this builder only shapes the\n// wire.\nconst ROOT_SENTINEL = \"@root\"\n\nfunction targetArgs(to, { global, transition } = {}) {\n  const args = { to: to ?? ROOT_SENTINEL }\n  if (global) args.global = true\n  if (transition) args.transition = normalizeTransition(transition)\n  return args\n}\n\n// Named legs { during, from, to } → the [during, from, to] wire array (the\n// issue #186 vocabulary). Loud at authoring time, like the Ruby builder.\n// Frozen, like every nested payload — the chain's immutability contract must\n// hold all the way down (the Ruby twin freezes its legs array too).\nfunction normalizeTransition(transition) {\n  const named =\n    transition && typeof transition === \"object\" && !Array.isArray(transition) &&\n    [\"during\", \"from\", \"to\"].every((k) => k in transition)\n  if (!named) throw new Error(\"[phlex-reactive] ops transition takes named legs { during, from, to }\")\n  return Object.freeze([String(transition.during), String(transition.from), String(transition.to)])\n}\n\nclass OpsChain {\n  constructor(list = Object.freeze([])) {\n    this.ops = list\n    Object.freeze(this)\n  }\n\n  show(to, opts) {\n    return this.#append(\"show\", targetArgs(to, opts))\n  }\n\n  hide(to, opts) {\n    return this.#append(\"hide\", targetArgs(to, opts))\n  }\n\n  toggle(to, opts) {\n    return this.#append(\"toggle\", targetArgs(to, opts))\n  }\n\n  add_class(to, classes, opts) {\n    return this.#append(\"add_class\", classArgs(to, classes, opts))\n  }\n\n  remove_class(to, classes, opts) {\n    return this.#append(\"remove_class\", classArgs(to, classes, opts))\n  }\n\n  toggle_class(to, classes, opts) {\n    return this.#append(\"toggle_class\", classArgs(to, classes, opts))\n  }\n\n  set_attr(to, name, value, opts) {\n    return this.#append(\"set_attr\", { ...targetArgs(to, opts), name: String(name), value: String(value) })\n  }\n\n  remove_attr(to, name, opts) {\n    return this.#append(\"remove_attr\", { ...targetArgs(to, opts), name: String(name) })\n  }\n\n  toggle_attr(to, name, opts) {\n    return this.#append(\"toggle_attr\", { ...targetArgs(to, opts), name: String(name) })\n  }\n\n  focus(to, opts) {\n    return this.#append(\"focus\", targetArgs(to, opts))\n  }\n\n  focus_first(to, opts) {\n    return this.#append(\"focus_first\", targetArgs(to, opts))\n  }\n\n  text(to, value, opts) {\n    return this.#append(\"text\", { ...targetArgs(to, opts), value: String(value ?? \"\") })\n  }\n\n  dispatch(name, { to, detail, global } = {}) {\n    const args = { name: String(name), to: to ?? ROOT_SENTINEL, detail: detail ?? {} }\n    if (global) args.global = true\n    return this.#append(\"dispatch\", args)\n  }\n\n  submit(to, opts) {\n    return this.#append(\"submit\", targetArgs(to, opts))\n  }\n\n  toJSON() {\n    return this.ops\n  }\n\n  #append(name, args) {\n    return new OpsChain(Object.freeze([...this.ops, Object.freeze([name, Object.freeze(args)])]))\n  }\n}\n\n// classes: one class string or an array of them (never whitespace-split — a\n// classList token can't contain spaces, so splitting would only mask a bug).\n// Loud on an empty/missing list, and frozen (the Ruby twin freezes its class\n// list too) — a chain held in a constant must stay immutable all the way down.\nfunction classArgs(to, classes, opts) {\n  const list = classes == null ? [] : (Array.isArray(classes) ? classes : [classes]).map(String)\n  if (list.length === 0) throw new Error(\"[phlex-reactive] a class op needs at least one class\")\n  return { ...targetArgs(to, opts), classes: Object.freeze(list) }\n}\n\n// The shared empty chain — start every reducer effect from here:\n//   $ops: done ? ops.dispatch(\"code:complete\").submit() : null\nexport const ops = new OpsChain()\n"
   ],
   "mappings": "AA+GA,IAAM,EAAW,IAAI,IAKd,SAAS,CAAiB,CAAC,EAAK,EAAI,CACzC,EAAS,IAAI,EAAK,CAAE,EAMf,SAAS,CAAc,CAAC,EAAK,CAClC,OAAO,EAAS,IAAI,CAAG,EAIlB,SAAS,CAA6B,EAAG,CAC9C,EAAS,MAAM,EAejB,IAAM,EAAgB,QAEtB,SAAS,CAAU,CAAC,GAAM,SAAQ,cAAe,CAAC,EAAG,CACnD,IAAM,EAAO,CAAE,GAAI,GAAM,CAAc,EACvC,GAAI,EAAQ,EAAK,OAAS,GAC1B,GAAI,EAAY,EAAK,WAAa,EAAoB,CAAU,EAChE,OAAO,EAOT,SAAS,CAAmB,CAAC,EAAY,CAIvC,GAAI,EAFF,GAAc,OAAO,IAAe,UAAY,CAAC,MAAM,QAAQ,CAAU,GACzE,CAAC,SAAU,OAAQ,IAAI,EAAE,MAAM,CAAC,KAAM,KAAK,EAAU,GAC3C,MAAU,MAAM,uEAAuE,EACnG,OAAO,OAAO,OAAO,CAAC,OAAO,EAAW,MAAM,EAAG,OAAO,EAAW,IAAI,EAAG,OAAO,EAAW,EAAE,CAAC,CAAC,EAGlG,MAAM,CAAS,CACb,WAAW,CAAC,EAAO,OAAO,OAAO,CAAC,CAAC,EAAG,CACpC,KAAK,IAAM,EACX,OAAO,OAAO,IAAI,EAGpB,IAAI,CAAC,EAAI,EAAM,CACb,OAAO,KAAK,GAAQ,OAAQ,EAAW,EAAI,CAAI,CAAC,EAGlD,IAAI,CAAC,EAAI,EAAM,CACb,OAAO,KAAK,GAAQ,OAAQ,EAAW,EAAI,CAAI,CAAC,EAGlD,MAAM,CAAC,EAAI,EAAM,CACf,OAAO,KAAK,GAAQ,SAAU,EAAW,EAAI,CAAI,CAAC,EAGpD,SAAS,CAAC,EAAI,EAAS,EAAM,CAC3B,OAAO,KAAK,GAAQ,YAAa,EAAU,EAAI,EAAS,CAAI,CAAC,EAG/D,YAAY,CAAC,EAAI,EAAS,EAAM,CAC9B,OAAO,KAAK,GAAQ,eAAgB,EAAU,EAAI,EAAS,CAAI,CAAC,EAGlE,YAAY,CAAC,EAAI,EAAS,EAAM,CAC9B,OAAO,KAAK,GAAQ,eAAgB,EAAU,EAAI,EAAS,CAAI,CAAC,EAGlE,QAAQ,CAAC,EAAI,EAAM,EAAO,EAAM,CAC9B,OAAO,KAAK,GAAQ,WAAY,IAAK,EAAW,EAAI,CAAI,EAAG,KAAM,OAAO,CAAI,EAAG,MAAO,OAAO,CAAK,CAAE,CAAC,EAGvG,WAAW,CAAC,EAAI,EAAM,EAAM,CAC1B,OAAO,KAAK,GAAQ,cAAe,IAAK,EAAW,EAAI,CAAI,EAAG,KAAM,OAAO,CAAI,CAAE,CAAC,EAGpF,WAAW,CAAC,EAAI,EAAM,EAAM,CAC1B,OAAO,KAAK,GAAQ,cAAe,IAAK,EAAW,EAAI,CAAI,EAAG,KAAM,OAAO,CAAI,CAAE,CAAC,EAGpF,KAAK,CAAC,EAAI,EAAM,CACd,OAAO,KAAK,GAAQ,QAAS,EAAW,EAAI,CAAI,CAAC,EAGnD,WAAW,CAAC,EAAI,EAAM,CACpB,OAAO,KAAK,GAAQ,cAAe,EAAW,EAAI,CAAI,CAAC,EAGzD,IAAI,CAAC,EAAI,EAAO,EAAM,CACpB,OAAO,KAAK,GAAQ,OAAQ,IAAK,EAAW,EAAI,CAAI,EAAG,MAAO,OAAO,GAAS,EAAE,CAAE,CAAC,EAGrF,QAAQ,CAAC,GAAQ,KAAI,SAAQ,UAAW,CAAC,EAAG,CAC1C,IAAM,EAAO,CAAE,KAAM,OAAO,CAAI,EAAG,GAAI,GAAM,EAAe,OAAQ,GAAU,CAAC,CAAE,EACjF,GAAI,EAAQ,EAAK,OAAS,GAC1B,OAAO,KAAK,GAAQ,WAAY,CAAI,EAGtC,MAAM,CAAC,EAAI,EAAM,CACf,OAAO,KAAK,GAAQ,SAAU,EAAW,EAAI,CAAI,CAAC,EAGpD,MAAM,EAAG,CACP,OAAO,KAAK,IAGd,EAAO,CAAC,EAAM,EAAM,CAClB,OAAO,IAAI,EAAS,OAAO,OAAO,CAAC,GAAG,KAAK,IAAK,OAAO,OAAO,CAAC,EAAM,OAAO,OAAO,CAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAEhG,CAMA,SAAS,CAAS,CAAC,EAAI,EAAS,EAAM,CACpC,IAAM,EAAO,GAAW,KAAO,CAAC,GAAK,MAAM,QAAQ,CAAO,EAAI,EAAU,CAAC,CAAO,GAAG,IAAI,MAAM,EAC7F,GAAI,EAAK,SAAW,EAAG,MAAU,MAAM,sDAAsD,EAC7F,MAAO,IAAK,EAAW,EAAI,CAAI,EAAG,QAAS,OAAO,OAAO,CAAI,CAAE,EAK1D,IAAM,EAAM,IAAI",
-  "debugId": "3CB48262B60C70DD64756E2164756E21",
+  "debugId": "58A4BBBA7E66031D64756E2164756E21",
   "names": []
 }

data/app/javascript/phlex/reactive/confirm.min.js

@@ -1,4 +1,4 @@
-var k=(b)=>Promise.resolve(typeof window<"u"?window.confirm(b):!0);function p(b){k=b}export{p as setConfirmResolver,k as confirmResolver};
+var o=(e)=>Promise.resolve(typeof window<"u"?window.confirm(e):!0);function r(e){o=e}export{o as confirmResolver,r as setConfirmResolver};
 
-//# debugId=95D50A0903B9B05E64756E2164756E21
+//# debugId=B602C81CFFC471CC64756E2164756E21
 //# sourceMappingURL=confirm.min.js.map

data/app/javascript/phlex/reactive/confirm.min.js.map

@@ -5,6 +5,6 @@
     "// The overridable confirmation resolver behind `on(:action, confirm: \"…\")`\n// (issue #55, follow-up to #52).\n//\n// The reactive controller preempts the click event (its own preventDefault +\n// POST), so Hotwire's `data-turbo-confirm` — which routes through\n// `Turbo.config.forms.confirm` — never runs for a reactive trigger. That made\n// the reactive path the ONE interaction a Hotwire app couldn't theme: every\n// confirmable reactive action showed the unstyled native window.confirm chrome.\n//\n// This module is the seam. `dispatch` resolves the confirm message through\n// `confirmResolver`, which defaults to a Promise-wrapped window.confirm (so the\n// 0.4.5 behavior is byte-for-byte unchanged when nothing is configured: sync,\n// no dependency, screen-reader friendly). An app reuses its themed dialog with\n// one line at boot:\n//\n//   import { setConfirmResolver } from \"phlex/reactive/confirm\"\n//   setConfirmResolver((message) => window.Turbo.config.forms.confirm(message))\n//\n// The resolver may be sync or async — the controller awaits it via\n// Promise.resolve, so a bare boolean and a Promise<boolean> both work. It must\n// resolve truthy to proceed; a falsy resolve (or a rejection) cancels the\n// action — exactly like declining the native prompt.\n//\n// The resolver receives an OPTIONAL 2nd arg (issue #222): a context object,\n// always `{ el }` (the trigger element), plus `{ row, fields }` on a\n// reactive_nested_remove (the row element + its { key: value } field map). It's\n// purely additive — a one-arg resolver (and window.confirm, which ignores extra\n// args) keeps working unchanged. On a client-added draft row the `message` the\n// resolver receives is already interpolated from the row's live field values\n// (`confirm: \"Delete '%{name}'?\"` → \"Delete 'Widget'?\").\n\n// The default: wrap the synchronous native confirm in a Promise so the call\n// site can always `await` it. Read window lazily (per call), not at module load\n// — under SSR / test the global may not exist yet when this module is imported.\nexport let confirmResolver = (message) =>\n  Promise.resolve(typeof window !== \"undefined\" ? window.confirm(message) : true)\n\n// Override the resolver. Pass a function `(message) => boolean | Promise<boolean>`.\n// Truthy resolves the action through; falsy (or a rejected Promise) cancels it.\nexport function setConfirmResolver(fn) {\n  confirmResolver = fn\n}\n"
   ],
   "mappings": "AAkCO,IAAI,EAAkB,CAAC,IAC5B,QAAQ,QAAQ,OAAO,OAAW,IAAc,OAAO,QAAQ,CAAO,EAAI,EAAI,EAIzE,SAAS,CAAkB,CAAC,EAAI,CACrC,EAAkB",
-  "debugId": "95D50A0903B9B05E64756E2164756E21",
+  "debugId": "B602C81CFFC471CC64756E2164756E21",
   "names": []
 }

data/app/javascript/phlex/reactive/confirm_predicate.min.js

@@ -1,4 +1,4 @@
-var j=new Map;function u(b,q){j.set(b,q)}function v(b){return j.get(b)}function w(){j.clear()}export{u as setConfirmPredicate,v as confirmPredicate,w as __resetConfirmPredicateRegistryForTest};
+var t=new Map;function n(e,r){t.set(e,r)}function i(e){return t.get(e)}function o(){t.clear()}export{o as __resetConfirmPredicateRegistryForTest,i as confirmPredicate,n as setConfirmPredicate};
 
-//# debugId=2F392605F11792F264756E2164756E21
+//# debugId=64DE097A0F67E08564756E2164756E21
 //# sourceMappingURL=confirm_predicate.min.js.map

data/app/javascript/phlex/reactive/confirm_predicate.min.js.map

@@ -5,6 +5,6 @@
     "// The client-side confirm-predicate registry — the multi-field escape hatch for\n// conditional confirmation (issue #179).\n//\n// confirm: { when: { total: 0 }, message: } handles the single-field 80% case\n// declaratively (the reactive_show conditions language), with NO JS. But some\n// soft-validation is multi-field — \"warn if the end date precedes the start\",\n// \"warn if two related totals disagree\" — which a single field=value condition\n// can't express. This registry is the seam for that logic: name a pure function\n// with `confirm: { predicate: \"name\", message: }` (Ruby) and register it here.\n//\n// The seam mirrors compute.js (setComputeReducer) and confirm.js: a settable\n// registry with a lookup the controller calls. Register once at boot:\n//\n//   import { setConfirmPredicate } from \"phlex/reactive/confirm_predicate\"\n//   setConfirmPredicate(\"end_before_start\", ({ starts_at, ends_at }) =>\n//     ends_at !== \"\" && ends_at < starts_at)\n//\n// The predicate's signature is (fields) => boolean:\n//\n//   fields — a plain object of { name: value } over the trigger root's collected\n//            controls (the SAME snapshot reactive_compute reads — #collectFields).\n//            Values are the raw control values (strings; a checkbox is a boolean).\n//\n// It returns truthy to WARN (the confirm dialog fires with the declared message)\n// or falsy to PROCEED with no dialog. The predicate is soft-validation UX, NOT\n// authorization: a user can bypass it (devtools, an unregistered name) and the\n// action still hits the endpoint's real authorize/default-deny — never let a\n// predicate stand in for a server-side check.\n//\n// A missing predicate (name never registered) makes the gate a NO-OP: the\n// controller proceeds WITHOUT a dialog and warns, exactly like compute.js's\n// unknown-reducer posture — a stale/typo'd name must not break the page or\n// (worse) block a legitimate action behind a dialog that can never resolve.\n\nconst predicates = new Map()\n\n// Register (or replace) the predicate for `key`. `fn` is\n// (fields: Record<string, unknown>) => boolean — truthy warns, falsy proceeds.\nexport function setConfirmPredicate(key, fn) {\n  predicates.set(key, fn)\n}\n\n// Look up a registered predicate; undefined when none — the controller then\n// proceeds without a dialog (and warns) rather than throwing or blocking.\nexport function confirmPredicate(key) {\n  return predicates.get(key)\n}\n\n// Test seam: clear the registry so a predicate registered in one test can't leak.\nexport function __resetConfirmPredicateRegistryForTest() {\n  predicates.clear()\n}\n"
   ],
   "mappings": "AAkCA,IAAM,EAAa,IAAI,IAIhB,SAAS,CAAmB,CAAC,EAAK,EAAI,CAC3C,EAAW,IAAI,EAAK,CAAE,EAKjB,SAAS,CAAgB,CAAC,EAAK,CACpC,OAAO,EAAW,IAAI,CAAG,EAIpB,SAAS,CAAsC,EAAG,CACvD,EAAW,MAAM",
-  "debugId": "2F392605F11792F264756E2164756E21",
+  "debugId": "64DE097A0F67E08564756E2164756E21",
   "names": []
 }

data/app/javascript/phlex/reactive/inspect.min.js

@@ -1,4 +1,4 @@
-function K(q=document){let z=Array.from(q.querySelectorAll('[data-controller~="reactive"]'));return z.map((D)=>M(D,z))}function U(q=document){let z=K(q),D=globalThis.console;if(D&&typeof D.log==="function")D.log(`[phlex-reactive] ${z.length} reactive root(s)`);if(D&&typeof D.table==="function")D.table(z.map((G)=>({id:G.id,component:G.component??(G.opaque?"(opaque token)":null),actions:G.triggers.map((H)=>H.action).join(", "),fields:G.fields.join(", "),computes:G.computes.join(", ")})));return z}function M(q,z){let D=q.getAttribute("data-reactive-token-value"),G=P(D);return{id:q.id||null,component:G.opaque?null:G.c??null,gid:G.gid??null,stateKeys:G.s?Object.keys(G.s):[],tokenVersion:G.v??null,opaque:!!G.opaque,status:W(q),triggers:Z(q,z),clientOps:$(q,z),computes:j(q,z),fields:x(q,z),show:B(q,z),text:L(q,z),filter:N(q)}}function P(q){if(!q)return{opaque:!0};try{let z=q.split("--")[0],D=V(z),G=JSON.parse(D),H=G&&G._rails&&G._rails.data?G._rails.data:G;if(!H||typeof H!=="object")return{opaque:!0};return H}catch{return{opaque:!0}}}function V(q){return(globalThis.atob||((D)=>Buffer.from(D,"base64").toString("binary")))(q)}function W(q){return{error:q.getAttribute("data-reactive-error"),busy:q.getAttribute("aria-busy")==="true"||q.hasAttribute("data-reactive-busy"),dirty:q.hasAttribute("data-reactive-dirty")}}var X='[data-controller~="reactive"]';function Y(q,z){return q.closest(X)===z}function I(q,z,D){return Array.from(q.querySelectorAll(z)).filter((G)=>Y(G,q))}function Z(q,z){return I(q,"[data-reactive-action-param]",z).map((D)=>({action:D.getAttribute("data-reactive-action-param"),event:J(D.getAttribute("data-action")),params:D.getAttribute("data-reactive-params-param"),debounce:D.getAttribute("data-reactive-debounce-param"),throttle:D.getAttribute("data-reactive-throttle-param"),confirm:D.getAttribute("data-reactive-confirm-param"),optimistic:D.getAttribute("data-reactive-optimistic-param"),loading:D.getAttribute("data-reactive-loading-param")}))}function J(q){if(!q)return null;let z=q.indexOf("->");return z===-1?null:q.slice(0,z)}function $(q,z){return I(q,"[data-reactive-ops-param]",z).map((D)=>{let G=D.getAttribute("data-reactive-ops-param"),H=G;try{H=JSON.parse(G)}catch{}return{event:J(D.getAttribute("data-action")),ops:H}})}function j(q,z){return I(q,"[data-reactive-compute-reducer-param]",z).map((D)=>D.getAttribute("data-reactive-compute-reducer-param"))}function x(q,z){return I(q,"input[name], select[name], textarea[name]",z).map((D)=>D.getAttribute("name"))}function B(q,z){return I(q,"[data-reactive-show-field]",z).map((D)=>({field:D.getAttribute("data-reactive-show-field"),equals:D.getAttribute("data-reactive-show-equals"),not:D.getAttribute("data-reactive-show-not"),in:D.getAttribute("data-reactive-show-in")}))}function L(q,z){return I(q,"[data-reactive-text]",z).map((D)=>D.getAttribute("data-reactive-text"))}function N(q){let z=q.getAttribute("data-reactive-filter-input");if(!z)return null;return{input:z,option:q.getAttribute("data-reactive-filter-option"),group:q.getAttribute("data-reactive-filter-group"),empty:q.getAttribute("data-reactive-filter-empty")}}export{K as scan,U as report};
+function u(t=document){let e=Array.from(t.querySelectorAll('[data-controller~="reactive"]'));return e.map((a)=>c(a,e))}function w(t=document){let e=u(t),a=globalThis.console;if(a&&typeof a.log==="function")a.log(`[phlex-reactive] ${e.length} reactive root(s)`);if(a&&typeof a.table==="function")a.table(e.map((r)=>({id:r.id,component:r.component??(r.opaque?"(opaque token)":null),actions:r.triggers.map((i)=>i.action).join(", "),fields:r.fields.join(", "),computes:r.computes.join(", ")})));return e}function c(t,e){let a=t.getAttribute("data-reactive-token-value"),r=s(a);return{id:t.id||null,component:r.opaque?null:r.c??null,gid:r.gid??null,stateKeys:r.s?Object.keys(r.s):[],tokenVersion:r.v??null,opaque:!!r.opaque,status:p(t),triggers:g(t,e),clientOps:b(t,e),computes:l(t,e),fields:v(t,e),show:A(t,e),text:y(t,e),filter:h(t)}}function s(t){if(!t)return{opaque:!0};try{let e=t.split("--")[0],a=d(e),r=JSON.parse(a),i=r&&r._rails&&r._rails.data?r._rails.data:r;if(!i||typeof i!=="object")return{opaque:!0};return i}catch{return{opaque:!0}}}function d(t){return(globalThis.atob||((a)=>Buffer.from(a,"base64").toString("binary")))(t)}function p(t){return{error:t.getAttribute("data-reactive-error"),busy:t.getAttribute("aria-busy")==="true"||t.hasAttribute("data-reactive-busy"),dirty:t.hasAttribute("data-reactive-dirty")}}var f='[data-controller~="reactive"]';function m(t,e){return t.closest(f)===e}function n(t,e,a){return Array.from(t.querySelectorAll(e)).filter((r)=>m(r,t))}function g(t,e){return n(t,"[data-reactive-action-param]",e).map((a)=>({action:a.getAttribute("data-reactive-action-param"),event:o(a.getAttribute("data-action")),params:a.getAttribute("data-reactive-params-param"),debounce:a.getAttribute("data-reactive-debounce-param"),throttle:a.getAttribute("data-reactive-throttle-param"),confirm:a.getAttribute("data-reactive-confirm-param"),optimistic:a.getAttribute("data-reactive-optimistic-param"),loading:a.getAttribute("data-reactive-loading-param")}))}function o(t){if(!t)return null;let e=t.indexOf("->");return e===-1?null:t.slice(0,e)}function b(t,e){return n(t,"[data-reactive-ops-param]",e).map((a)=>{let r=a.getAttribute("data-reactive-ops-param"),i=r;try{i=JSON.parse(r)}catch{}return{event:o(a.getAttribute("data-action")),ops:i}})}function l(t,e){return n(t,"[data-reactive-compute-reducer-param]",e).map((a)=>a.getAttribute("data-reactive-compute-reducer-param"))}function v(t,e){return n(t,"input[name], select[name], textarea[name]",e).map((a)=>a.getAttribute("name"))}function A(t,e){return n(t,"[data-reactive-show-field]",e).map((a)=>({field:a.getAttribute("data-reactive-show-field"),equals:a.getAttribute("data-reactive-show-equals"),not:a.getAttribute("data-reactive-show-not"),in:a.getAttribute("data-reactive-show-in")}))}function y(t,e){return n(t,"[data-reactive-text]",e).map((a)=>a.getAttribute("data-reactive-text"))}function h(t){let e=t.getAttribute("data-reactive-filter-input");if(!e)return null;return{input:e,option:t.getAttribute("data-reactive-filter-option"),group:t.getAttribute("data-reactive-filter-group"),empty:t.getAttribute("data-reactive-filter-empty")}}export{w as report,u as scan};
 
-//# debugId=DAD9B8F0F9C2105E64756E2164756E21
+//# debugId=C4F6AC69EE45C88764756E2164756E21
 //# sourceMappingURL=inspect.min.js.map

data/app/javascript/phlex/reactive/inspect.min.js.map

@@ -5,6 +5,6 @@
     "// The on-demand client inspector (issue #168) — the browser half of the\n// debugging toolkit, the client twin of `phlex_reactive:actions` / the MCP tools.\n//\n// It is a STANDALONE module (the confirm.js / compute.js precedent): it does NOT\n// touch the hot-path reactive_controller.js and costs NOTHING until you import\n// it. Loaded on demand from the console (the engine pins it), it scans the live\n// DOM and maps every reactive root + bound trigger back to the server\n// Component#action names — so you can answer \"what's reactive on this page, what\n// does each control POST, and which component owns it?\" without reading source.\n//\n//   (await import(\"phlex/reactive/inspect\")).report()   // console.table\n//   const roots = (await import(\"phlex/reactive/inspect\")).scan()  // data\n//\n// The server↔client mapping is BY NAME: scan()'s `component` + each trigger's\n// `action` are exactly the Component#action identifiers `phlex_reactive:actions`\n// and the MCP tools list. The docs page shows the two side by side.\n//\n// It reads the SAME DOM contract reactive_controller.js writes (roots\n// [data-controller~=\"reactive\"] with id + data-reactive-token-value; triggers\n// [data-reactive-action-param] with data-action/params/modifiers; client-only\n// [data-reactive-ops-param]; computes [data-reactive-compute-reducer-param]; the\n// show/filter/text binding families). It never mutates anything — pure read.\n\n// Scan `root` (default the whole document) and return one entry per reactive\n// root, deepest-scoped: each trigger is attributed to its NEAREST reactive root,\n// so a nested root doesn't double-count its parent's triggers.\nexport function scan(root = document) {\n  const roots = Array.from(root.querySelectorAll('[data-controller~=\"reactive\"]'))\n  return roots.map((el) => inspectRoot(el, roots))\n}\n\n// console.table the inventory (roots + a flattened trigger table), and return\n// the same data scan() does so `report()` is also usable programmatically. Safe\n// on an empty document (logs an empty table, throws nothing).\nexport function report(root = document) {\n  const roots = scan(root)\n  const console = globalThis.console\n\n  // Guard each console method independently — a host page (or a test harness)\n  // may ship a partial console, and report() must never throw over logging.\n  if (console && typeof console.log === \"function\") {\n    console.log(`[phlex-reactive] ${roots.length} reactive root(s)`)\n  }\n  if (console && typeof console.table === \"function\") {\n    console.table(\n      roots.map((r) => ({\n        id: r.id,\n        component: r.component ?? (r.opaque ? \"(opaque token)\" : null),\n        actions: r.triggers.map((t) => t.action).join(\", \"),\n        fields: r.fields.join(\", \"),\n        computes: r.computes.join(\", \"),\n      })),\n    )\n  }\n  return roots\n}\n\n// --- one root --------------------------------------------------------------\n\nfunction inspectRoot(el, allRoots) {\n  const token = el.getAttribute(\"data-reactive-token-value\")\n  const payload = decodeToken(token)\n\n  return {\n    id: el.id || null,\n    component: payload.opaque ? null : (payload.c ?? null),\n    gid: payload.gid ?? null,\n    stateKeys: payload.s ? Object.keys(payload.s) : [],\n    tokenVersion: payload.v ?? null,\n    opaque: !!payload.opaque,\n    status: readStatus(el),\n    triggers: ownedTriggers(el, allRoots),\n    clientOps: ownedClientOps(el, allRoots),\n    computes: ownedComputes(el, allRoots),\n    fields: ownedFields(el, allRoots),\n    show: ownedShow(el, allRoots),\n    text: ownedText(el, allRoots),\n    filter: readFilter(el),\n  }\n}\n\n// The signed identity is base64(JSON)--signature under the Rails 7.1+ JSON\n// message serializer. Decode the segment BEFORE the \"--\", JSON-parse it, and\n// unwrap the MessageVerifier envelope ({_rails:{data:…}}) to the {c,gid,s,v}\n// payload. Degrade to { opaque: true } on anything that isn't JSON-decodable —\n// a Marshal-serialized payload (older apps) simply isn't readable client-side,\n// and that's fine: the inspector shows \"(opaque token)\" rather than throwing.\nfunction decodeToken(token) {\n  if (!token) return { opaque: true }\n\n  try {\n    const segment = token.split(\"--\")[0]\n    const json = atobUtf8(segment)\n    const parsed = JSON.parse(json)\n    const data = parsed && parsed._rails && parsed._rails.data ? parsed._rails.data : parsed\n    if (!data || typeof data !== \"object\") return { opaque: true }\n    return data\n  } catch {\n    return { opaque: true }\n  }\n}\n\n// base64 → string. Uses the platform atob; a malformed/urlsafe segment throws,\n// which decodeToken catches and reports as opaque.\nfunction atobUtf8(b64) {\n  const decode = globalThis.atob || ((s) => Buffer.from(s, \"base64\").toString(\"binary\"))\n  return decode(b64)\n}\n\n// The at-a-glance runtime state the controller stamps on the root. Names/flags\n// only — never a value that could be sensitive.\nfunction readStatus(el) {\n  return {\n    error: el.getAttribute(\"data-reactive-error\"),\n    busy: el.getAttribute(\"aria-busy\") === \"true\" || el.hasAttribute(\"data-reactive-busy\"),\n    dirty: el.hasAttribute(\"data-reactive-dirty\"),\n  }\n}\n\n// --- ownership scoping -----------------------------------------------------\n//\n// An element belongs to a root when its NEAREST reactive-root ancestor is that\n// root (matching the controller's own ownership walk). closest() finds the\n// nearest ancestor matching the selector; the element itself can be the root\n// (for a root that also carries a binding), so we start the walk from the\n// element and accept `el` as its own owner.\n\nconst ROOT_SELECTOR = '[data-controller~=\"reactive\"]'\n\nfunction ownedBy(node, root) {\n  return node.closest(ROOT_SELECTOR) === root\n}\n\n// Query `root` for `selector`, keeping only elements whose nearest reactive\n// root IS `root` — so a nested root's matches are excluded here and attributed\n// to that inner root instead.\nfunction scopedQuery(root, selector, allRoots) {\n  return Array.from(root.querySelectorAll(selector)).filter((node) => ownedBy(node, root))\n}\n\n// --- the binding families --------------------------------------------------\n\nfunction ownedTriggers(root, allRoots) {\n  return scopedQuery(root, \"[data-reactive-action-param]\", allRoots).map((el) => ({\n    action: el.getAttribute(\"data-reactive-action-param\"),\n    event: eventOf(el.getAttribute(\"data-action\")),\n    params: el.getAttribute(\"data-reactive-params-param\"),\n    debounce: el.getAttribute(\"data-reactive-debounce-param\"),\n    throttle: el.getAttribute(\"data-reactive-throttle-param\"),\n    confirm: el.getAttribute(\"data-reactive-confirm-param\"),\n    optimistic: el.getAttribute(\"data-reactive-optimistic-param\"),\n    loading: el.getAttribute(\"data-reactive-loading-param\"),\n  }))\n}\n\n// The Stimulus data-action descriptor is \"event->controller#method\"; the event\n// is the part before \"->\" (a bare \"controller#method\" has an implicit default\n// event, which we report as null).\nfunction eventOf(dataAction) {\n  if (!dataAction) return null\n  const arrow = dataAction.indexOf(\"->\")\n  return arrow === -1 ? null : dataAction.slice(0, arrow)\n}\n\n// Client-only op triggers ([data-reactive-ops-param]) — a menu toggle, a DOM op\n// chain that never round-trips. Report the parsed ops (names) when decodable.\nfunction ownedClientOps(root, allRoots) {\n  return scopedQuery(root, \"[data-reactive-ops-param]\", allRoots).map((el) => {\n    const raw = el.getAttribute(\"data-reactive-ops-param\")\n    let ops = raw\n    try {\n      ops = JSON.parse(raw)\n    } catch {\n      // leave the raw string — a malformed ops attr shouldn't break the scan\n    }\n    return { event: eventOf(el.getAttribute(\"data-action\")), ops }\n  })\n}\n\n// Compute reducers bound on this root ([data-reactive-compute-reducer-param]) —\n// the client-side data-binding twins of reactive_compute. Report reducer names.\nfunction ownedComputes(root, allRoots) {\n  return scopedQuery(root, \"[data-reactive-compute-reducer-param]\", allRoots).map((el) =>\n    el.getAttribute(\"data-reactive-compute-reducer-param\"),\n  )\n}\n\n// The named form controls the dispatch would collect and send — the same\n// selector the controller's field walk uses. Names only, never values.\nfunction ownedFields(root, allRoots) {\n  return scopedQuery(root, \"input[name], select[name], textarea[name]\", allRoots).map((el) =>\n    el.getAttribute(\"name\"),\n  )\n}\n\n// reactive_show bindings: which owned field controls each element's visibility.\nfunction ownedShow(root, allRoots) {\n  return scopedQuery(root, \"[data-reactive-show-field]\", allRoots).map((el) => ({\n    field: el.getAttribute(\"data-reactive-show-field\"),\n    equals: el.getAttribute(\"data-reactive-show-equals\"),\n    not: el.getAttribute(\"data-reactive-show-not\"),\n    in: el.getAttribute(\"data-reactive-show-in\"),\n  }))\n}\n\n// reactive_text spans (data-reactive-text=<name>) the client writes via\n// textContent — report the binding names.\nfunction ownedText(root, allRoots) {\n  return scopedQuery(root, \"[data-reactive-text]\", allRoots).map((el) =>\n    el.getAttribute(\"data-reactive-text\"),\n  )\n}\n\n// reactive_filter lives on the ROOT itself (the input/option/group/empty\n// selectors it narrows client-side). Null when the root declares no filter.\nfunction readFilter(el) {\n  const input = el.getAttribute(\"data-reactive-filter-input\")\n  if (!input) return null\n  return {\n    input,\n    option: el.getAttribute(\"data-reactive-filter-option\"),\n    group: el.getAttribute(\"data-reactive-filter-group\"),\n    empty: el.getAttribute(\"data-reactive-filter-empty\"),\n  }\n}\n"
   ],
   "mappings": "AA0BO,SAAS,CAAI,CAAC,EAAO,SAAU,CACpC,IAAM,EAAQ,MAAM,KAAK,EAAK,iBAAiB,+BAA+B,CAAC,EAC/E,OAAO,EAAM,IAAI,CAAC,IAAO,EAAY,EAAI,CAAK,CAAC,EAM1C,SAAS,CAAM,CAAC,EAAO,SAAU,CACtC,IAAM,EAAQ,EAAK,CAAI,EACjB,EAAU,WAAW,QAI3B,GAAI,GAAW,OAAO,EAAQ,MAAQ,WACpC,EAAQ,IAAI,oBAAoB,EAAM,yBAAyB,EAEjE,GAAI,GAAW,OAAO,EAAQ,QAAU,WACtC,EAAQ,MACN,EAAM,IAAI,CAAC,KAAO,CAChB,GAAI,EAAE,GACN,UAAW,EAAE,YAAc,EAAE,OAAS,iBAAmB,MACzD,QAAS,EAAE,SAAS,IAAI,CAAC,IAAM,EAAE,MAAM,EAAE,KAAK,IAAI,EAClD,OAAQ,EAAE,OAAO,KAAK,IAAI,EAC1B,SAAU,EAAE,SAAS,KAAK,IAAI,CAChC,EAAE,CACJ,EAEF,OAAO,EAKT,SAAS,CAAW,CAAC,EAAI,EAAU,CACjC,IAAM,EAAQ,EAAG,aAAa,2BAA2B,EACnD,EAAU,EAAY,CAAK,EAEjC,MAAO,CACL,GAAI,EAAG,IAAM,KACb,UAAW,EAAQ,OAAS,KAAQ,EAAQ,GAAK,KACjD,IAAK,EAAQ,KAAO,KACpB,UAAW,EAAQ,EAAI,OAAO,KAAK,EAAQ,CAAC,EAAI,CAAC,EACjD,aAAc,EAAQ,GAAK,KAC3B,OAAQ,CAAC,CAAC,EAAQ,OAClB,OAAQ,EAAW,CAAE,EACrB,SAAU,EAAc,EAAI,CAAQ,EACpC,UAAW,EAAe,EAAI,CAAQ,EACtC,SAAU,EAAc,EAAI,CAAQ,EACpC,OAAQ,EAAY,EAAI,CAAQ,EAChC,KAAM,EAAU,EAAI,CAAQ,EAC5B,KAAM,EAAU,EAAI,CAAQ,EAC5B,OAAQ,EAAW,CAAE,CACvB,EASF,SAAS,CAAW,CAAC,EAAO,CAC1B,GAAI,CAAC,EAAO,MAAO,CAAE,OAAQ,EAAK,EAElC,GAAI,CACF,IAAM,EAAU,EAAM,MAAM,IAAI,EAAE,GAC5B,EAAO,EAAS,CAAO,EACvB,EAAS,KAAK,MAAM,CAAI,EACxB,EAAO,GAAU,EAAO,QAAU,EAAO,OAAO,KAAO,EAAO,OAAO,KAAO,EAClF,GAAI,CAAC,GAAQ,OAAO,IAAS,SAAU,MAAO,CAAE,OAAQ,EAAK,EAC7D,OAAO,EACP,KAAM,CACN,MAAO,CAAE,OAAQ,EAAK,GAM1B,SAAS,CAAQ,CAAC,EAAK,CAErB,OADe,WAAW,OAAS,CAAC,IAAM,OAAO,KAAK,EAAG,QAAQ,EAAE,SAAS,QAAQ,IACtE,CAAG,EAKnB,SAAS,CAAU,CAAC,EAAI,CACtB,MAAO,CACL,MAAO,EAAG,aAAa,qBAAqB,EAC5C,KAAM,EAAG,aAAa,WAAW,IAAM,QAAU,EAAG,aAAa,oBAAoB,EACrF,MAAO,EAAG,aAAa,qBAAqB,CAC9C,EAWF,IAAM,EAAgB,gCAEtB,SAAS,CAAO,CAAC,EAAM,EAAM,CAC3B,OAAO,EAAK,QAAQ,CAAa,IAAM,EAMzC,SAAS,CAAW,CAAC,EAAM,EAAU,EAAU,CAC7C,OAAO,MAAM,KAAK,EAAK,iBAAiB,CAAQ,CAAC,EAAE,OAAO,CAAC,IAAS,EAAQ,EAAM,CAAI,CAAC,EAKzF,SAAS,CAAa,CAAC,EAAM,EAAU,CACrC,OAAO,EAAY,EAAM,+BAAgC,CAAQ,EAAE,IAAI,CAAC,KAAQ,CAC9E,OAAQ,EAAG,aAAa,4BAA4B,EACpD,MAAO,EAAQ,EAAG,aAAa,aAAa,CAAC,EAC7C,OAAQ,EAAG,aAAa,4BAA4B,EACpD,SAAU,EAAG,aAAa,8BAA8B,EACxD,SAAU,EAAG,aAAa,8BAA8B,EACxD,QAAS,EAAG,aAAa,6BAA6B,EACtD,WAAY,EAAG,aAAa,gCAAgC,EAC5D,QAAS,EAAG,aAAa,6BAA6B,CACxD,EAAE,EAMJ,SAAS,CAAO,CAAC,EAAY,CAC3B,GAAI,CAAC,EAAY,OAAO,KACxB,IAAM,EAAQ,EAAW,QAAQ,IAAI,EACrC,OAAO,IAAU,GAAK,KAAO,EAAW,MAAM,EAAG,CAAK,EAKxD,SAAS,CAAc,CAAC,EAAM,EAAU,CACtC,OAAO,EAAY,EAAM,4BAA6B,CAAQ,EAAE,IAAI,CAAC,IAAO,CAC1E,IAAM,EAAM,EAAG,aAAa,yBAAyB,EACjD,EAAM,EACV,GAAI,CACF,EAAM,KAAK,MAAM,CAAG,EACpB,KAAM,EAGR,MAAO,CAAE,MAAO,EAAQ,EAAG,aAAa,aAAa,CAAC,EAAG,KAAI,EAC9D,EAKH,SAAS,CAAa,CAAC,EAAM,EAAU,CACrC,OAAO,EAAY,EAAM,wCAAyC,CAAQ,EAAE,IAAI,CAAC,IAC/E,EAAG,aAAa,qCAAqC,CACvD,EAKF,SAAS,CAAW,CAAC,EAAM,EAAU,CACnC,OAAO,EAAY,EAAM,4CAA6C,CAAQ,EAAE,IAAI,CAAC,IACnF,EAAG,aAAa,MAAM,CACxB,EAIF,SAAS,CAAS,CAAC,EAAM,EAAU,CACjC,OAAO,EAAY,EAAM,6BAA8B,CAAQ,EAAE,IAAI,CAAC,KAAQ,CAC5E,MAAO,EAAG,aAAa,0BAA0B,EACjD,OAAQ,EAAG,aAAa,2BAA2B,EACnD,IAAK,EAAG,aAAa,wBAAwB,EAC7C,GAAI,EAAG,aAAa,uBAAuB,CAC7C,EAAE,EAKJ,SAAS,CAAS,CAAC,EAAM,EAAU,CACjC,OAAO,EAAY,EAAM,uBAAwB,CAAQ,EAAE,IAAI,CAAC,IAC9D,EAAG,aAAa,oBAAoB,CACtC,EAKF,SAAS,CAAU,CAAC,EAAI,CACtB,IAAM,EAAQ,EAAG,aAAa,4BAA4B,EAC1D,GAAI,CAAC,EAAO,OAAO,KACnB,MAAO,CACL,QACA,OAAQ,EAAG,aAAa,6BAA6B,EACrD,MAAO,EAAG,aAAa,4BAA4B,EACnD,MAAO,EAAG,aAAa,4BAA4B,CACrD",
-  "debugId": "DAD9B8F0F9C2105E64756E2164756E21",
+  "debugId": "C4F6AC69EE45C88764756E2164756E21",
   "names": []
 }

data/app/javascript/phlex/reactive/reactive_controller.js

@@ -1065,8 +1065,12 @@ function runTransition(el, transition, flip) {
 // persist_clear client ops (which receive only the element) share it. Every
 // storage access is try/catch'd: a private window, a quota error or blocked
 // storage degrades to "no draft", never a thrown bootstrap. Nothing here
-// leaves the browser: no token, no POST, values are replayed via
-// .value/.checked only (never HTML).
+// leaves the browser: no token, no POST, and phlex-reactive never writes
+// markup into the DOM: native controls are replayed via
+// .value/.checked/.selected, a bare [contenteditable] via textContent, and a
+// rich editor (lexxy-editor, trix-editor — issue #241) through its OWN
+// `value` setter, the same sanitizing import path a paste takes. Never
+// innerHTML.
 // ---------------------------------------------------------------------------
 const PERSIST_VERSION = 1
 const PERSIST_PREFIX = "phlex-reactive:persist:"
@@ -1074,10 +1078,29 @@ const PERSIST_PREFIX = "phlex-reactive:persist:"
 // into (hidden, file), secrets (password), and non-value controls.
 const PERSIST_EXCLUDED_TYPES = new Set(["hidden", "file", "password", "submit", "button", "reset", "image"])
 const PERSIST_STATE_ATTR = "data-reactive-persist-state"
+// The editor query #collectFields reads (minus the [name] guard — an editor's
+// name may live on its IDL `name` getter: Trix's `input=`-paired hidden input).
+const PERSIST_EDITOR_SELECTOR =
+  ":is(lexxy-editor, trix-editor, [contenteditable=''], [contenteditable=true], [contenteditable=plaintext-only])"
+const PERSIST_EDITOR_TAGS = new Set(["lexxy-editor", "trix-editor"])
+// An editor's own chrome: Lexxy renders its toolbar (a `lexxy-code-language`
+// select, the link dialog's `href` input) INSIDE <lexxy-editor>, Trix as a
+// sibling <trix-toolbar>. Those are named native controls that are not the
+// user's fields — never drafted, never restored into.
+const PERSIST_EDITOR_CHROME = "lexxy-editor, trix-editor, trix-toolbar"
+// The editors' own bubbling change events — the keystroke signal for the
+// draft write, since neither lets its contenteditable's native `input` bubble.
+const PERSIST_EDITOR_CHANGE_EVENTS = ["lexxy:change", "trix-change"]
+// "Is this editor empty" when it exposes no predicate of its own (Lexxy's
+// `isEmpty`, Trix's `editor.getDocument().isEmpty()`): Lexxy's own empty
+// list plus the Trix / contenteditable empties. Exact strings, no HTML
+// parsing — an attachment-only body stays non-blank.
+const PERSIST_EMPTY_HTML = new Set(["", "<p></p>", "<p><br></p>", "<div><br></div>"])
 // Once-per-root guards: a malformed payload warns once; the storage-failure
-// dev note (debug mode only) prints once.
+// and editor-restore dev notes (debug mode only) print once each.
 const persistPayloadWarned = new WeakSet()
 const persistFailureNoted = new WeakSet()
+const persistEditorNoted = new WeakSet()
 
 // The root's parsed payload, or null (undeclared / malformed → warned once).
 // A control-level "off" (reactive_persist_skip) is never a root payload.
@@ -1175,32 +1198,79 @@ function persistRemove(root, payload) {
 
 // The persistable controls this root OWNS (#15: a nested reactive root's
 // controls are its own), minus the excluded types, the reactive_persist_skip
-// marker, and — when `fields` narrows the set — any undeclared name.
+// marker, and — when `fields` narrows the set — any undeclared name. Each
+// entry is { el, name, kind } with kind "native" (input/select/textarea),
+// "editor" (lexxy-editor / trix-editor) or "contenteditable" (a bare named
+// editable element) — issue #241.
 function persistControls(root, payload) {
   const allow = Array.isArray(payload.fields) ? new Set(payload.fields) : null
   const out = []
+  const owned = (el) =>
+    el.closest('[data-controller~="reactive"]') === root && el.getAttribute("data-reactive-persist") !== "off"
   for (const el of root.querySelectorAll("input[name], select[name], textarea[name]")) {
-    if (el.closest('[data-controller~="reactive"]') !== root) continue
-    if (PERSIST_EXCLUDED_TYPES.has(el.type)) continue
-    if (el.getAttribute("data-reactive-persist") === "off") continue
+    if (!owned(el) || PERSIST_EXCLUDED_TYPES.has(el.type) || el.closest(PERSIST_EDITOR_CHROME)) continue
     if (allow && !allow.has(el.name)) continue
-    out.push(el)
+    out.push({ el, name: el.name, kind: "native" })
+  }
+  for (const el of root.querySelectorAll(PERSIST_EDITOR_SELECTOR)) {
+    if (!owned(el)) continue
+    const name = persistEditorName(el)
+    if (!name || (allow && !allow.has(name))) continue
+    out.push({ el, name, kind: PERSIST_EDITOR_TAGS.has(el.localName) ? "editor" : "contenteditable" })
   }
   return out
 }
 
+// The attribute first (Lexxy, a bare contenteditable — which has no `name`
+// IDL property at all), then the IDL getter (Trix resolves it through its
+// `input=`-paired hidden input, which is itself excluded as type=hidden).
+function persistEditorName(el) {
+  return el.getAttribute("name") || (typeof el.name === "string" && el.name) || null
+}
+
+// An editor is READY once its custom element has upgraded and connected: only
+// then does it expose the string `value` accessor (Lexxy's setter throws
+// before connectedCallback created its editor; Trix's discards the value).
+function persistEditorReady(el) {
+  return typeof el.value === "string"
+}
+
+// Ask the editor whether it is empty (Lexxy `isEmpty`; Trix
+// `editor.getDocument().isEmpty()`), else the exact-string fallback. An
+// attachment-only server body is therefore NON-blank and never overwritten.
+function persistEditorBlank(el) {
+  if (typeof el.isEmpty === "boolean") return el.isEmpty
+  const doc = el.editor?.getDocument?.()
+  if (typeof doc?.isEmpty === "function") return doc.isEmpty()
+  return PERSIST_EMPTY_HTML.has(el.value.trim())
+}
+
+// The editor-restore dev lens: ONLY under data-reactive-debug, once per root.
+function persistNoteEditorFailure(root, name, error) {
+  if (root?.getAttribute?.("data-reactive-debug") !== "true" || persistEditorNoted.has(root)) return
+  persistEditorNoted.add(root)
+  console.info(
+    `[phlex-reactive] reactive_persist: could not restore editor ${JSON.stringify(name)} — ${error?.message ?? error}`,
+  )
+}
+
 function persistSelectMultiple(el) {
   return el.tagName === "SELECT" && el.multiple
 }
 
 // Snapshot the owned controls: radio → the checked value (null when the group
 // has none, so a restore leaves it alone), checkbox → checked, multi-select →
-// the selected values, else .value. Mirrors #collectFields' reads.
+// the selected values, a rich editor → its serialized `value` (omitted while
+// the element hasn't upgraded — never a phantom ""), a bare contenteditable →
+// its textContent, else .value. Mirrors #collectFields' reads.
 function persistSnapshot(root, payload) {
   const fields = {}
-  for (const el of persistControls(root, payload)) {
-    const name = el.name
-    if (el.type === "radio") {
+  for (const { el, name, kind } of persistControls(root, payload)) {
+    if (kind === "editor") {
+      if (persistEditorReady(el)) fields[name] = el.value
+    } else if (kind === "contenteditable") {
+      fields[name] = el.textContent ?? ""
+    } else if (el.type === "radio") {
       if (el.checked) fields[name] = el.value
       else if (!Object.hasOwn(fields, name)) fields[name] = null
     } else if (el.type === "checkbox") {
@@ -1217,16 +1287,22 @@ function persistSnapshot(root, payload) {
 // Replay the draft into the owned controls. Default (restore: blank): a
 // control the server rendered NON-BLANK keeps its value — a 422 re-render's
 // submitted values beat an older draft. restore: "always" lets the draft win.
-// Values land via .value/.checked/.selected only — never HTML.
+// Values land via .value/.checked/.selected, textContent, or the editor's own
+// `value` setter — never HTML written by us.
 function persistApply(root, payload, fields) {
   const always = payload.restore === "always"
   const controls = persistControls(root, payload)
-  for (const el of controls) {
-    if (!Object.hasOwn(fields, el.name)) continue
-    const value = fields[el.name]
+  for (const { el, name, kind } of controls) {
+    if (!Object.hasOwn(fields, name)) continue
+    const value = fields[name]
     if (value === null || value === undefined) continue
-    if (el.type === "radio") {
-      if (!always && controls.some((c) => c.type === "radio" && c.name === el.name && c.checked)) continue
+    if (kind === "editor") {
+      persistApplyEditor(root, el, name, value, always)
+    } else if (kind === "contenteditable") {
+      if (!always && (el.textContent ?? "").trim() !== "") continue
+      el.textContent = String(value)
+    } else if (el.type === "radio") {
+      if (!always && controls.some((c) => c.kind === "native" && c.el.type === "radio" && c.name === name && c.el.checked)) continue
       el.checked = el.value === String(value)
     } else if (el.type === "checkbox") {
       if (!always && el.checked) continue
@@ -1240,6 +1316,46 @@ function persistApply(root, payload, fields) {
       el.value = String(value)
     }
   }
+  persistDeferEditors(root, payload, fields)
+}
+
+// A ready editor takes the value through its own setter; the setter is the
+// editor's sanitizing import (Trix HTMLParser, Lexxy $generateNodesFromDOM +
+// sanitizer). A throw (Lexxy before its editor exists) never escapes connect.
+function persistApplyEditor(root, el, name, value, always) {
+  if (!persistEditorReady(el)) return // not upgraded yet — persistDeferEditors re-applies after define
+  if (!always && !persistEditorBlank(el)) return
+  try {
+    el.value = String(value)
+  } catch (error) {
+    persistNoteEditorFailure(root, name, error)
+  }
+}
+
+// An editor whose custom element is not defined yet (Trix defines its elements
+// in a setTimeout after load; a lazily imported Lexxy) cannot take a value now.
+// Re-apply per TAG once it is defined — re-querying the controls (the upgrade
+// may replace the node) and re-checking restore: blank at that moment — unless
+// the root has left the document meanwhile.
+function persistDeferEditors(root, payload, fields) {
+  const registry = globalThis.customElements
+  if (typeof registry?.whenDefined !== "function") return
+  const pending = new Set()
+  for (const el of root.querySelectorAll("lexxy-editor, trix-editor")) {
+    if (!persistEditorReady(el) && !registry.get?.(el.localName)) pending.add(el.localName)
+  }
+  const always = payload.restore === "always"
+  for (const tag of pending) {
+    registry.whenDefined(tag).then(() => {
+      if (!root.isConnected) return
+      for (const { el, name, kind } of persistControls(root, payload)) {
+        if (kind !== "editor" || el.localName !== tag || !Object.hasOwn(fields, name)) continue
+        const value = fields[name]
+        if (value === null || value === undefined) continue
+        persistApplyEditor(root, el, name, value, always)
+      }
+    })
+  }
 }
 
 // The persist_state op body: merge a FLAT bag into the root's draft (re-
@@ -4244,6 +4360,10 @@ export default class extends Controller {
     this.#boundPersistSubmitEnd = (event) => this.#persistSubmitEnd(event)
     this.element.addEventListener?.("input", this.#boundPersistInput)
     this.element.addEventListener?.("change", this.#boundPersistChange)
+    // Rich editors (#241): Lexical and Trix swallow the native `input` of
+    // their contenteditable, so their own bubbling change events are the
+    // keystroke signal — same trailing-edge debounce as `input`.
+    for (const event of PERSIST_EDITOR_CHANGE_EVENTS) this.element.addEventListener?.(event, this.#boundPersistInput)
     document.addEventListener?.("turbo:submit-end", this.#boundPersistSubmitEnd)
   }
 
@@ -4296,6 +4416,7 @@ export default class extends Controller {
     if (this.#persistTimer !== null) this.#persistWriteNow()
     this.element.removeEventListener?.("input", this.#boundPersistInput)
     this.element.removeEventListener?.("change", this.#boundPersistChange)
+    for (const event of PERSIST_EDITOR_CHANGE_EVENTS) this.element.removeEventListener?.(event, this.#boundPersistInput)
     document.removeEventListener?.("turbo:submit-end", this.#boundPersistSubmitEnd)
     this.#boundPersistInput = this.#boundPersistChange = this.#boundPersistSubmitEnd = undefined
     this.#persistConfig = null