@gmickel/gno 2.0.0 → 2.1.1

package/src/serve/public/globals.css

@@ -568,3 +568,38 @@ mark {
     animation: none;
   }
 }
+
+/* Keep the review and actions inside the viewport, including short windows and
+   mobile keyboards. Only the form body scrolls; the close/export controls stay put. */
+.publish-export-dialog {
+  display: flex;
+  flex-direction: column;
+  width: min(36rem, calc(100vw - 2rem));
+  max-width: 36rem;
+  max-height: calc(100dvh - 2rem);
+  gap: 0;
+  overflow: hidden;
+  padding: 0;
+}
+
+.publish-export-dialog-header {
+  flex-shrink: 0;
+  padding: 1.25rem 2.5rem 1rem 1.5rem;
+  overflow-wrap: anywhere;
+}
+
+.publish-export-dialog-body {
+  display: flex;
+  min-height: 0;
+  flex-direction: column;
+  gap: 1rem;
+  overflow-y: auto;
+  overscroll-behavior: contain;
+  padding: 0.25rem 1.5rem 1.25rem;
+}
+
+.publish-export-dialog-footer {
+  flex-shrink: 0;
+  border-top: 1px solid hsl(var(--border));
+  padding: 1rem 1.5rem;
+}

package/src/serve/public/lib/publish-export.ts

@@ -1,4 +1,7 @@
-import type { PublishArtifact } from "../../../publish/artifact";
+import type {
+  PublishArtifact,
+  PublishVisibility,
+} from "../../../publish/artifact";
 
 export interface PublishExportResponse {
   artifact: PublishArtifact;
@@ -19,3 +22,80 @@ export function downloadPublishArtifactFile(
   anchor.click();
   URL.revokeObjectURL(href);
 }
+
+/**
+ * Local help metadata, checked against gno.sh src/lib/server/{billing,entitlements}.ts
+ * on 2026-09-05. Keep in sync when hosted plan capabilities change. These labels
+ * explain availability; only the hosted entitlement service authorizes publishing.
+ */
+export const PUBLISH_ACCESS_OPTIONS: ReadonlyArray<{
+  value: PublishVisibility;
+  label: string;
+  audience: string;
+  availability: string;
+}> = [
+  {
+    value: "public",
+    label: "Public",
+    audience:
+      "Anyone can read, discover, and download the published content, including search engines and agents.",
+    availability: "Free and paid plans",
+  },
+  {
+    value: "secret-link",
+    label: "Secret link",
+    audience:
+      "Anyone with the link can read and forward it. Readers do not need an invitation.",
+    availability: "Paid plans with private publishing",
+  },
+  {
+    value: "invite-only",
+    label: "Invite only",
+    audience:
+      "Personal shares start with owner access only. Choose recipients or the intended organization audience in Studio before publishing.",
+    availability: "Paid plans with private publishing",
+  },
+  {
+    value: "encrypted",
+    label: "Encrypted",
+    audience:
+      "Anyone with both the link and passphrase can decrypt the content in their browser. Share the passphrase separately.",
+    availability: "Paid plans with encrypted publishing",
+  },
+];
+
+export function buildPublishExportRequest(input: {
+  target: string;
+  visibility: string | null;
+  passphrase: string;
+  passphraseConfirmation: string;
+  audienceConfirmed: boolean;
+}): {
+  target: string;
+  visibility: PublishVisibility;
+  encryptionPassphrase?: string;
+} {
+  const option = PUBLISH_ACCESS_OPTIONS.find(
+    ({ value }) => value === input.visibility
+  );
+  if (!option) {
+    throw new Error("Choose who can read this export.");
+  }
+  if (!input.audienceConfirmed) {
+    throw new Error("Review and confirm the audience before exporting.");
+  }
+  if (option.value === "encrypted") {
+    if (!input.passphrase.trim()) {
+      throw new Error("Enter a passphrase for the encrypted export.");
+    }
+    if (input.passphrase !== input.passphraseConfirmation) {
+      throw new Error("The passphrases do not match.");
+    }
+    return {
+      target: input.target,
+      visibility: option.value,
+      encryptionPassphrase: input.passphrase,
+    };
+  }
+  return { target: input.target, visibility: option.value };
+}

package/src/serve/public/pages/Collections.tsx

@@ -37,6 +37,7 @@ import {
 } from "../components/CollectionModelDialog";
 import { CollectionsEmptyState } from "../components/CollectionsEmptyState";
 import { IndexingProgress } from "../components/IndexingProgress";
+import { PublishExportDialog } from "../components/PublishExportDialog";
 import { Badge } from "../components/ui/badge";
 import { Button } from "../components/ui/button";
 import {
@@ -67,10 +68,6 @@ import {
   TooltipTrigger,
 } from "../components/ui/tooltip";
 import { apiFetch } from "../hooks/use-api";
-import {
-  downloadPublishArtifactFile,
-  type PublishExportResponse,
-} from "../lib/publish-export";
 
 interface PageProps {
   navigate: (to: string | number) => void;
@@ -129,7 +126,6 @@ interface CollectionCardProps {
   onModelSettings: () => void;
   onReindex: () => void;
   onRemove: () => void;
-  isExporting: boolean;
   isReindexing: boolean;
 }
 
@@ -161,7 +157,6 @@ function CollectionCard({
   onModelSettings,
   onReindex,
   onRemove,
-  isExporting,
   isReindexing,
 }: CollectionCardProps) {
   const embedPercent =
@@ -227,17 +222,13 @@ function CollectionCard({
                 Embedding cleanup
               </DropdownMenuItem>
               <DropdownMenuItem
-                disabled={actionsDisabled || isExporting}
+                disabled={actionsDisabled}
                 onClick={(event) => {
                   event.stopPropagation();
                   onExport();
                 }}
               >
-                {isExporting ? (
-                  <Loader2Icon className="mr-2 size-4 animate-spin" />
-                ) : (
-                  <Share2Icon className="mr-2 size-4" />
-                )}
+                <Share2Icon className="mr-2 size-4" />
                 Export for gno.sh
               </DropdownMenuItem>
               <DropdownMenuSeparator />
@@ -361,8 +352,7 @@ export default function Collections({ navigate }: PageProps) {
   const [syncJobId, setSyncJobId] = useState<string | null>(null);
   const [syncTarget, setSyncTarget] = useState<SyncTarget>(null);
   const [syncError, setSyncError] = useState<string | null>(null);
-  const [exportError, setExportError] = useState<string | null>(null);
-  const [exportingCollectionName, setExportingCollectionName] = useState<
+  const [exportCollectionName, setExportCollectionName] = useState<
     string | null
   >(null);
   const [removeDialog, setRemoveDialog] = useState<CollectionStats | null>(
@@ -499,30 +489,6 @@ export default function Collections({ navigate }: PageProps) {
     await loadCollections();
   };
 
-  const handleExport = async (name: string) => {
-    setExportError(null);
-    setExportingCollectionName(name);
-
-    const { data, error: err } = await apiFetch<PublishExportResponse>(
-      "/api/publish/export",
-      {
-        body: JSON.stringify({ target: name }),
-        method: "POST",
-      }
-    );
-
-    setExportingCollectionName(null);
-
-    if (err) {
-      setExportError(err);
-      return;
-    }
-
-    if (data) {
-      downloadPublishArtifactFile(data);
-    }
-  };
-
   // Loading state
   if (loading) {
     return (
@@ -643,12 +609,13 @@ export default function Collections({ navigate }: PageProps) {
           </Card>
         )}
 
-        {exportError && (
-          <Card className="mx-auto mb-6 max-w-3xl border-destructive bg-destructive/10">
-            <CardContent className="py-4">
-              <p className="text-destructive text-sm">{exportError}</p>
-            </CardContent>
-          </Card>
+        {exportCollectionName !== null && (
+          <PublishExportDialog
+            key={exportCollectionName}
+            onClose={() => setExportCollectionName(null)}
+            target={exportCollectionName}
+            title={exportCollectionName}
+          />
         )}
 
         {/* Error */}
@@ -687,7 +654,6 @@ export default function Collections({ navigate }: PageProps) {
               <CollectionCard
                 actionsDisabled={Boolean(syncJobId)}
                 collection={collection}
-                isExporting={exportingCollectionName === collection.name}
                 isReindexing={
                   Boolean(syncJobId) &&
                   syncTarget?.kind === "collection" &&
@@ -704,7 +670,7 @@ export default function Collections({ navigate }: PageProps) {
                   setEmbeddingCleanupNote(null);
                 }}
                 onExport={() => {
-                  void handleExport(collection.name);
+                  setExportCollectionName(collection.name);
                 }}
                 onModelSettings={() => setModelDialogCollection(collection)}
                 onReindex={() => void handleReindex(collection.name)}

package/src/serve/public/pages/DocView.tsx

@@ -47,6 +47,7 @@ import {
   OutgoingLinksPanel,
   type OutgoingLink,
 } from "../components/OutgoingLinksPanel";
+import { PublishExportDialog } from "../components/PublishExportDialog";
 import { RefactorImpactPreview } from "../components/RefactorImpactPreview";
 import { RelatedNotesSidebar } from "../components/RelatedNotesSidebar";
 import { TagInput } from "../components/TagInput";
@@ -81,10 +82,6 @@ import {
   isPdfDocument,
 } from "../lib/doc-asset-url";
 import { waitForDocumentAvailability } from "../lib/document-availability";
-import {
-  downloadPublishArtifactFile,
-  type PublishExportResponse,
-} from "../lib/publish-export";
 import {
   buildReadableSectionUrl,
   createCitationSectionUrl,
@@ -411,11 +408,7 @@ export default function DocView({ navigate }: PageProps) {
   const [externalChangeNotice, setExternalChangeNotice] = useState<
     string | null
   >(null);
-  const [exportingPublishArtifact, setExportingPublishArtifact] =
-    useState(false);
-  const [publishExportError, setPublishExportError] = useState<string | null>(
-    null
-  );
+  const [publishExportOpen, setPublishExportOpen] = useState(false);
 
   // Tag editing state
   const [editingTags, setEditingTags] = useState(false);
@@ -879,32 +872,6 @@ export default function DocView({ navigate }: PageProps) {
     }
   }, [doc, navigate]);
 
-  const handlePublishExport = useCallback(async () => {
-    if (!doc) {
-      return;
-    }
-
-    setPublishExportError(null);
-    setExportingPublishArtifact(true);
-    const { data, error: err } = await apiFetch<PublishExportResponse>(
-      "/api/publish/export",
-      {
-        body: JSON.stringify({ target: doc.uri }),
-        method: "POST",
-      }
-    );
-    setExportingPublishArtifact(false);
-
-    if (err) {
-      setPublishExportError(err);
-      return;
-    }
-
-    if (data) {
-      downloadPublishArtifactFile(data);
-    }
-  }, [doc]);
-
   const handleDelete = async () => {
     if (!doc) return;
 
@@ -1784,18 +1751,13 @@ export default function DocView({ navigate }: PageProps) {
                     </Button>
                     <Button
                       className="gap-1.5"
-                      disabled={exportingPublishArtifact}
                       onClick={() => {
-                        void handlePublishExport();
+                        setPublishExportOpen(true);
                       }}
                       size="sm"
                       variant="outline"
                     >
-                      {exportingPublishArtifact ? (
-                        <Loader2Icon className="size-4 animate-spin" />
-                      ) : (
-                        <Share2Icon className="size-4" />
-                      )}
+                      <Share2Icon className="size-4" />
                       Export for gno.sh
                     </Button>
                     <Button
@@ -1847,18 +1809,13 @@ export default function DocView({ navigate }: PageProps) {
                     )}
                     <Button
                       className="gap-1.5"
-                      disabled={exportingPublishArtifact}
                       onClick={() => {
-                        void handlePublishExport();
+                        setPublishExportOpen(true);
                       }}
                       size="sm"
                       variant="outline"
                     >
-                      {exportingPublishArtifact ? (
-                        <Loader2Icon className="size-4 animate-spin" />
-                      ) : (
-                        <Share2Icon className="size-4" />
-                      )}
+                      <Share2Icon className="size-4" />
                       Export for gno.sh
                     </Button>
                     {localClient && doc.source.absPath && (
@@ -1945,11 +1902,16 @@ export default function DocView({ navigate }: PageProps) {
             </>
           )}
         </div>
-        {publishExportError && (
-          <p className="pt-2 text-destructive text-sm">{publishExportError}</p>
-        )}
       </header>
 
+      {publishExportOpen && doc && (
+        <PublishExportDialog
+          key={doc.uri}
+          onClose={() => setPublishExportOpen(false)}
+          target={doc.uri}
+          title={doc.title ?? doc.uri}
+        />
+      )}
       <div className="mx-auto flex max-w-[1800px] gap-5 px-6 xl:px-8">
         {/* Left rail — metadata + outline */}
         {doc && (

package/src/store/sqlite/adapter.ts

@@ -144,6 +144,7 @@ import { getSchemaVersion, migrations, runMigrations } from "../migrations";
 import { err, ok } from "../types";
 import { getStoredEmbeddingFingerprint } from "../vector/freshness";
 import { modelTableName } from "../vector/sqlite-vec";
+import { getVariantStatus } from "../vector/status";
 import {
   deleteSavedCapsuleRegistration as deleteStoredSavedCapsuleRegistration,
   getSavedCapsuleRegistration as getStoredSavedCapsuleRegistration,
@@ -5697,6 +5698,8 @@ export class SqliteAdapter implements StorePort, SqliteDbProvider {
         options?.embedFingerprint ??
         (embedModel ? getStoredEmbeddingFingerprint(db, embedModel) : null);
 
+      const variantStatus = getVariantStatus(db, options);
+
       // Get version
       const versionRow = db
         .query<{ value: string }, []>(
@@ -5873,12 +5876,14 @@ export class SqliteAdapter implements StorePort, SqliteDbProvider {
           errorDocuments: s.errored,
           chunkedDocuments: s.chunked,
           totalChunks: s.chunk_count,
-          embeddedChunks: s.embedded_count,
+          embeddedChunks: variantStatus
+            ? (variantStatus.embeddedByCollection.get(s.name) ?? 0)
+            : s.embedded_count,
         })),
         totalDocuments: totalsRow?.total ?? 0,
         activeDocuments: totalsRow?.active ?? 0,
         totalChunks: chunkCount,
-        embeddingBacklog: backlogRow?.count ?? 0,
+        embeddingBacklog: variantStatus?.backlog ?? backlogRow?.count ?? 0,
         recentErrors,
         lastUpdatedAt: lastUpdatedRow?.last_updated ?? null,
         healthy,

package/src/store/vector/status.ts

@@ -0,0 +1,196 @@
+/** Read-only coverage of persisted variant authority; never initializes models. */
+import type { Database } from "bun:sqlite";
+
+import { getEmbeddingFingerprint } from "../../embed/fingerprint";
+import { formatDocForEmbedding } from "../../pipeline/contextual";
+import {
+  embeddingInputHash,
+  SELECTED_VECTOR_PARTITION_PREFIX,
+} from "./variants";
+
+interface Partition {
+  partition_id: string;
+  version: number;
+  model: string;
+  fingerprint: string;
+  dimensions: number;
+  state: string;
+  activated_epoch: number | null;
+}
+
+interface OwnerCoverage {
+  document_id: number;
+  partition_id: string | null;
+  collection: string;
+  mirror_hash: string;
+  seq: number;
+  text: string;
+  title: string | null;
+  input_hash: string | null;
+  embedding_bytes: number | null;
+  legacy_embedded: number;
+}
+
+/** Null retains legacy counts until a verified selection or activation exists. */
+export function getVariantStatus(
+  db: Database,
+  options?: { embedModel?: string; embedFingerprint?: string }
+): { backlog: number; embeddedByCollection: Map<string, number> } | null {
+  return db.transaction(() => {
+    if (
+      !db
+        .query(
+          "SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'vector_partitions'"
+        )
+        .get()
+    )
+      return null;
+    const partitions = db
+      .query<Partition, [string | null, string | null]>(`
+        SELECT partition_id, version, model, fingerprint, dimensions, state, activated_epoch
+        FROM vector_partitions WHERE (? IS NULL OR model = ?)
+      `)
+      .all(options?.embedModel ?? null, options?.embedModel ?? null);
+    const selections = db
+      .query<{ key: string; value: string }, [string]>(
+        "SELECT key, value FROM schema_meta WHERE key GLOB ?"
+      )
+      .all(`${SELECTED_VECTOR_PARTITION_PREFIX}*`);
+    const selected = new Map(
+      selections.map((row) => [
+        row.key.slice(SELECTED_VECTOR_PARTITION_PREFIX.length),
+        row.value,
+      ])
+    );
+    const models = new Set(partitions.map((p) => p.model));
+    if (options?.embedModel) models.add(options.embedModel);
+    else for (const model of selected.keys()) models.add(model);
+    const authoritativeModels = new Set<string>();
+    const usablePartitions = new Map<string, Partition>();
+    for (const model of models) {
+      const candidates = partitions.filter((p) => p.model === model);
+      const selection = selected.get(model);
+      const activated = candidates.some(
+        (p) => p.state === "active" && p.activated_epoch !== null
+      );
+      if (selection === undefined && !activated) continue;
+      authoritativeModels.add(model);
+      // Resolve one persisted identity per model, never combine alternative
+      // partitions of the same model. Unscoped status may accept any model.
+      // Stale epochs do not revoke owners whose current inputs still match.
+      const partition =
+        selection === undefined
+          ? candidates.length === 1
+            ? candidates[0]
+            : undefined
+          : candidates.find((p) => p.partition_id === selection);
+      if (
+        partition &&
+        partition.version === 1 &&
+        partition.partition_id ===
+          embeddingInputHash(
+            JSON.stringify([
+              partition.model,
+              partition.fingerprint,
+              partition.dimensions,
+            ])
+          ) &&
+        (options?.embedFingerprint === undefined ||
+          options.embedFingerprint ===
+            getEmbeddingFingerprint({
+              modelUri: partition.model,
+              dimensions: partition.dimensions,
+            }))
+      )
+        usablePartitions.set(partition.partition_id, partition);
+    }
+    if (authoritativeModels.size === 0) return null;
+    // Unscoped legacy coverage remains valid only for models that have never
+    // selected or activated verified authority; legacy rows cannot repair it.
+    const statement = db.prepare<
+      OwnerCoverage,
+      [string | null, string, string]
+    >(`
+      WITH legacy_vectors AS (
+        SELECT mirror_hash, seq, MAX(embedded_at) AS embedded_at
+        FROM content_vectors
+        WHERE ? IS NULL AND model NOT IN (SELECT value FROM json_each(?))
+        GROUP BY mirror_hash, seq
+      )
+      SELECT d.id AS document_id, o.partition_id, d.collection, d.mirror_hash, c.seq, c.text, d.title,
+        v.input_hash, length(v.embedding) AS embedding_bytes,
+        CASE WHEN lv.embedded_at >= c.created_at THEN 1 ELSE 0 END AS legacy_embedded
+      FROM documents d
+      JOIN content_chunks c ON c.mirror_hash = d.mirror_hash
+      LEFT JOIN vector_owners o ON o.document_id = d.id AND o.seq = c.seq
+        AND o.mirror_hash = d.mirror_hash
+        AND o.partition_id IN (SELECT value FROM json_each(?))
+      LEFT JOIN vector_variants v ON v.variant_id = o.variant_id
+        AND v.partition_id = o.partition_id
+      LEFT JOIN legacy_vectors lv ON lv.mirror_hash = c.mirror_hash AND lv.seq = c.seq
+      WHERE d.active = 1
+    `);
+    const owners = new Map<
+      string,
+      { collection: string; chunk: string; embedded: boolean }
+    >();
+    try {
+      for (const row of statement.iterate(
+        options?.embedModel ?? null,
+        JSON.stringify([...authoritativeModels]),
+        JSON.stringify([...usablePartitions.keys()])
+      )) {
+        const partition = row.partition_id
+          ? usablePartitions.get(row.partition_id)
+          : undefined;
+        const embedded = Boolean(
+          row.legacy_embedded ||
+          (partition &&
+            row.embedding_bytes ===
+              partition.dimensions * Float32Array.BYTES_PER_ELEMENT &&
+            row.input_hash ===
+              embeddingInputHash(
+                formatDocForEmbedding(
+                  row.text,
+                  row.title ?? undefined,
+                  partition.model
+                )
+              ))
+        );
+        const key = `${row.document_id}:${row.seq}`;
+        const previous = owners.get(key);
+        if (previous) previous.embedded ||= embedded;
+        else
+          owners.set(key, {
+            collection: row.collection,
+            chunk: JSON.stringify([row.mirror_hash, row.seq]),
+            embedded,
+          });
+      }
+    } finally {
+      statement.finalize();
+    }
+    const collections = new Map<string, Map<string, boolean>>();
+    let backlog = 0;
+    for (const owner of owners.values()) {
+      if (!owner.embedded) backlog++;
+      let chunks = collections.get(owner.collection);
+      if (!chunks) {
+        chunks = new Map();
+        collections.set(owner.collection, chunks);
+      }
+      // Distinct collection chunks are ready only when every active owner is.
+      chunks.set(
+        owner.chunk,
+        (chunks.get(owner.chunk) ?? true) && owner.embedded
+      );
+    }
+    const embeddedByCollection = new Map<string, number>();
+    for (const [collection, chunks] of collections) {
+      let count = 0;
+      for (const embedded of chunks.values()) if (embedded) count++;
+      embeddedByCollection.set(collection, count);
+    }
+    return { backlog, embeddedByCollection };
+  })();
+}

package/src/store/vector/variants.ts

@@ -6,6 +6,8 @@ import type { VectorOwnerInput, VectorVariantIdentity } from "./types";
 import { formatDocForEmbedding } from "../../pipeline/contextual";
 import { decodeEmbedding, encodeEmbedding } from "./sqlite-vec";
 
+export const SELECTED_VECTOR_PARTITION_PREFIX = "vector_selected_partition:";
+
 export function embeddingInputHash(input: string): string {
   return new Bun.CryptoHasher("sha256").update(input).digest("hex");
 }
@@ -94,6 +96,15 @@ export class VectorVariantStore {
     }).immediate();
   }
 
+  /** Persist only after embedding has resolved the actual runtime identity. */
+  selectForEmbedding(): void {
+    this.db.run(
+      `INSERT INTO schema_meta (key, value) VALUES (?, ?)
+       ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = datetime('now')`,
+      [SELECTED_VECTOR_PARTITION_PREFIX + this.identity.model, this.partitionId]
+    );
+  }
+
   epoch(): number {
     return this.db
       .query<{ epoch: number }, []>(

package/browser-extension/artifacts/gno-browser-clipper-v2.0.0.zip.sha256

@@ -1 +0,0 @@
-cb9a683d5e8bddd30f0a2aaf00e252065c85e7779ff3da50e9e87636a855fd8d  gno-browser-clipper-v2.0.0.zip