@panphora/clayjs 0.2.0 → 0.4.0

package/src/loader.js

@@ -28,16 +28,27 @@ export async function boot(base, params, readyResolve) {
     loaded[path] = await import(base + "/src/" + path); // sequential: order is load-bearing
   }
 
-  assembleCore(loaded, { isEditMode, isOwner }, regionPolicy); // window.clay + shim MUST exist
+  assembleCore(loaded, { isEditMode, isOwner }, regionPolicy); // window.clay MUST be assembled
                                                                // before any plugin import
 
   for (const path of plan.plugins) {
-    const mod = await import(base + "/src/" + path);
+    // A plugin that throws on evaluation degrades to absent. Unguarded, its
+    // rejection propagated out of boot() and left clay.ready pending forever, so
+    // every `await clay.ready` on the page hung: one broken optional module took
+    // the whole client with it. (The allSettled below covers the plugins' async
+    // `ready` exports, never their evaluation.)
+    let mod;
+    try {
+      mod = await import(base + "/src/" + path);
+    } catch (err) {
+      console.error(`clayjs: plugin "${path}" failed to load, continuing without it:`, err);
+      continue;
+    }
     loaded[path] = mod;
     attachPluginMember(path, mod);   // immediately, not after the loop: hypercms's ?cms=true
                                      // auto-open runs as a microtask queued during ITS evaluation
-                                     // (before boot resumes) and reads window.hyperclay.RichClay
-                                     // and .undo, which earlier plugins must have mirrored by then
+                                     // (before boot resumes) and reads clay.RichClay and clay.undo,
+                                     // which earlier plugins must have attached by then
   }
 
   // Plugins with async setup (sortable's vendor fetch) export `ready`; hold
@@ -60,6 +71,7 @@ function assembleCore(loaded, { isEditMode, isOwner }, regionPolicy) {
     isEditMode,
     isOwner,
     Mutation: mutation.default,
+    region: regionPolicy.windowRegionShape,
   });
 
   const snapshot = loaded["core/snapshot.js"];
@@ -73,28 +85,12 @@ function assembleCore(loaded, { isEditMode, isOwner }, regionPolicy) {
   }
   if (snapshot) {
     clay.getHTML = snapshot.getPageContents;
-    clay.beforeSave = snapshot.beforeSave;
+    clay.addDocumentTransform = snapshot.addDocumentTransform;
     clay.onSnapshot = snapshot.onSnapshot;
   }
   if (cacheBustMod) {
     clay.cacheBust = cacheBustMod.default;
   }
-
-  // vendor-compat shim: richclay, hypercms, and hyper-undo read window.hyperclay;
-  // remove when the vendors migrate to window.clay.
-  window.hyperclay = window.hyperclay || {};
-  Object.assign(window.hyperclay, {
-    Mutation: clay.Mutation,
-    isEditMode: clay.isEditMode,
-    region: regionPolicy.windowRegionShape,
-  });
-  if (clay.beforeSave) {
-    window.hyperclay.beforeSave = clay.beforeSave;        // richclay's save-cleanup hook
-    window.hyperclay.onPrepareForSave = clay.beforeSave;  // hypercms uses this name
-  }
-  if (clay.save) {
-    window.hyperclay.savePage = clay.save;
-  }
 }
 
 function attachPluginMember(path, mod) {
@@ -102,16 +98,14 @@ function attachPluginMember(path, mod) {
 
   if (path === "plugins/undo.js") {
     clay.undo = mod.undo || mod.default;
-    window.hyperclay.undo = clay.undo;
   } else if (path === "sync/live-sync.js") {
     clay.morph = mod.morph;
   } else if (path === "vendor/hypercms.vendor.js") {
     clay.cms = mod.cms || mod.default;
-    window.hyperclay.hypercms = clay.cms;
   } else if (path === "plugins/demo.js") {
     clay.demo = mod.demo;
   } else if (path === "vendor/richclay.vendor.js") {
-    window.hyperclay.RichClay = mod.RichClay || mod.default;
+    clay.RichClay = mod.RichClay || mod.default;
   }
 }
 

package/src/options/options.js

@@ -240,9 +240,7 @@ const optionVisibility = {
   }
 };
 
-// vendor-compat mirror: sap reads window.hyperclay.optionVisibility at runtime.
-window.hyperclay = window.hyperclay || {};
-window.hyperclay.optionVisibility = optionVisibility;
+window.clay.optionVisibility = optionVisibility;
 
 export default optionVisibility;
 

package/src/plugins/demo.js

@@ -20,12 +20,18 @@
 // returning visitors' old saved bodies morph over the new page.
 
 import { morph } from "../vendor/hyper-morph.vendor.js";
+import { STRIP_FROM_SAVE } from "../lib/region-policy.js";
 
 const KEY = "clay:demo:" +
   (document.documentElement.getAttribute("demo-key") || window.location.pathname);
 const LATENCY_MS = 800;
+// What the demo's fake server must not persist. The region half comes from
+// region-policy's STRIP_FROM_SAVE rather than being re-listed here: this used to
+// name "[save-remove]" alone and so missed the canonical clay="no-save" spelling,
+// which meant the demo saved the very regions no-save promises it never will. The
+// rest is editor chrome the real save lane strips by other means.
 const CHROME_SELECTOR = [
-  "[save-remove]",
+  STRIP_FROM_SAVE,
   "[data-richclay-toolbar]",
   "[data-richclay-menu]",
   "[data-richclay-dialog]",

package/src/sync/live-sync.js

@@ -40,6 +40,8 @@ import Mutation from "../lib/mutation.js";
 import { isSnapshotRemoved } from "../lib/region-policy.js";
 import { isEditMode } from "../core/is-edit-mode.js";
 import { mergeTagRecognizers } from "./merge-tags.js";
+import { serializeForSync } from '../core/snapshot.js';
+import { isTabLocalRootAttr } from '../lib/root-attrs.js';
 
 class LiveSync {
   constructor() {
@@ -47,8 +49,19 @@ class LiveSync {
     this.currentFile = null;
     this.lastHtml = null;
     this.clientId = this.generateClientId();
+
+    // Per-stream resume id for the htmlclay replay server's wire contract.
+    // Regenerated on every start() (see below) so an explicit stop/start is a
+    // brand-new stream that never inherits the old baseline. Native
+    // EventSource reuses the same URL — and thus this id — on its own
+    // automatic reconnect. Deliberately NOT the sender clientId, which is the
+    // durable per-tab identity used for echo suppression.
+    this.resumeId = null;
+
     this.debounceMs = 150;
     this.debounceTimer = null;
+    this._sendInFlight = false;
+    this._queuedSend = null;
     this.isPaused = false;
     this.isDestroyed = false;
     this.debug = false;
@@ -87,7 +100,7 @@ class LiveSync {
     // against the live elements so that the next save can produce the same
     // identityMap, and afterNodeMorphed transfers IDs from incoming parsed
     // elements onto the live elements they morphed into.
-    this.idCounter = this._loadIdCounter();
+    this.idCounter = 0;
     this.liveWeakMap = new WeakMap();
 
     // Callbacks
@@ -109,28 +122,30 @@ class LiveSync {
   }
 
   /**
-   * Generate or retrieve a tab-specific client ID
-   * Uses sessionStorage (unique per tab) not localStorage (shared across tabs)
+   * Mint the per-tab sender identity used for echo suppression. Lives on the
+   * instance, never in storage: sessionStorage is COPIED into a duplicated tab,
+   * so a persisted id made the duplicate treat the original's edits as its own
+   * echoes and the two tabs silently stopped syncing. Instance lifetime is the
+   * durability that matters, since EventSource auto-reconnect reuses this same
+   * instance.
    */
   generateClientId() {
-    let id = null;
+    return Math.random().toString(36).slice(2, 11) + Date.now().toString(36);
+  }
 
+  /**
+   * Generate a fresh per-stream resume id (URL-safe, well under the 128-byte
+   * wire limit). Minted on every start(), never persisted: an explicit
+   * stop/start must not reuse the previous stream's baseline.
+   */
+  generateResumeId() {
     try {
-      id = sessionStorage.getItem('livesync-client-id');
+      const bytes = new Uint8Array(16);
+      (globalThis.crypto || window.crypto).getRandomValues(bytes);
+      return Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');
     } catch (e) {
-      // sessionStorage might not be available
-    }
-
-    if (!id) {
-      id = Math.random().toString(36).slice(2, 11) + Date.now().toString(36);
-      try {
-        sessionStorage.setItem('livesync-client-id', id);
-      } catch (e) {
-        // That's okay
-      }
+      return Math.random().toString(36).slice(2) + Date.now().toString(36);
     }
-
-    return id;
   }
 
   /**
@@ -153,9 +168,11 @@ class LiveSync {
       return;
     }
 
-    // Reset state for new connection
+    // Reset state for new connection. Resetting lastSeenSeq is a new baseline,
+    // so mint a fresh resume id — this stream must not resume the previous one.
     this.lastHtml = null;
     this.lastSeenSeq = 0;
+    this.resumeId = this.generateResumeId();
 
     console.log(`[LiveSync] Starting for: ${this.currentFile} (lane=${this.lane})`);
     this.connect();
@@ -182,6 +199,7 @@ class LiveSync {
     }
 
     clearTimeout(this.debounceTimer);
+    this._queuedSend = null;
 
     // Cancel any pending frame and clear the queue. A morph already in
     // flight cannot be aborted; the isDestroyed check in _runPending guards
@@ -195,27 +213,8 @@ class LiveSync {
     this._pendingIdentityMap = null;
   }
 
-  _loadIdCounter() {
-    try {
-      const raw = sessionStorage.getItem('livesync-id-counter');
-      const n = parseInt(raw || '0', 10);
-      return Number.isFinite(n) && n > 0 ? n : 0;
-    } catch (e) {
-      return 0;
-    }
-  }
-
-  _persistIdCounter() {
-    try {
-      sessionStorage.setItem('livesync-id-counter', String(this.idCounter));
-    } catch (e) {
-      // Storage full / sandboxed — fall back to in-memory only.
-    }
-  }
-
   _mintId() {
     this.idCounter++;
-    this._persistIdCounter();
     return `${this.clientId}:${this.idCounter}`;
   }
 
@@ -361,8 +360,10 @@ class LiveSync {
     if (this.isDestroyed) return;
 
     const pageUrl = encodeURIComponent(window.location.href);
-    const url = `/_/live-sync/stream?page-url=${pageUrl}&lane=${this.lane}`;
-    this.sse = new EventSource(url);
+    const path = `/_/live-sync/stream?page-url=${pageUrl}&lane=${this.lane}&resume-id=${this.resumeId}`;
+    // Resolved against the real origin: a <base href> in the authored document
+    // would otherwise point the sync stream at an origin the document chose.
+    this.sse = new EventSource(new URL(path, window.location.origin).href);
 
     this.sse.onopen = () => {
       console.log('[LiveSync] Connected');
@@ -372,6 +373,26 @@ class LiveSync {
     this.sse.onmessage = (event) => {
       const data = JSON.parse(event.data);
 
+      // Staleness check + watermark advance run FIRST — before the notification
+      // and error branches — against the high-water mark of seqs we've seen
+      // (own echoes count too, see below). Notification frames now carry a seq,
+      // so a conservative-cursor replay after reconnect must not duplicate a
+      // toast or let a later stale data frame apply an older snapshot. `seq` is
+      // optional for back-compat with older servers that don't stamp it.
+      const { seq } = data;
+      if (typeof seq === 'number' && seq <= this.lastSeenSeq) {
+        this._log(`Dropping stale message: seq=${seq}, lastSeen=${this.lastSeenSeq}`);
+        return;
+      }
+
+      // Advance the watermark before the notification/sender branches so that
+      // our own save echoes count toward "seen". Without this, a later
+      // buffered/replayed message with a smaller seq could rewind us past our
+      // local edit.
+      if (typeof seq === 'number') {
+        this.lastSeenSeq = seq;
+      }
+
       // Handle notifications (show toast, don't morph)
       if (data.type === "notification") {
         this.handleNotification(data);
@@ -385,22 +406,7 @@ class LiveSync {
         return;
       }
 
-      const { html, sender, seq, identityMap } = data;
-
-      // Staleness check runs FIRST — compared against the high-water mark of
-      // seqs we've seen (own echoes count too, see below). `seq` is optional
-      // for back-compat with older server builds that don't stamp it.
-      if (typeof seq === 'number' && seq <= this.lastSeenSeq) {
-        this._log(`Dropping stale message: seq=${seq}, lastSeen=${this.lastSeenSeq}`);
-        return;
-      }
-
-      // Advance the watermark before the sender filter so that our own save
-      // echoes count toward "seen". Without this, a later buffered/replayed
-      // peer message with a smaller seq could rewind us past our local edit.
-      if (typeof seq === 'number') {
-        this.lastSeenSeq = seq;
-      }
+      const { html, sender, identityMap } = data;
 
       // Ignore own changes — already reflected in the DOM, nothing to morph
       if (sender === this.clientId) {
@@ -451,7 +457,7 @@ class LiveSync {
       // after dispatchEvent returns, so reading outerHTML and walking children
       // must happen now.
       this._log('snapshot-ready received, preparing to send');
-      const html = clone.outerHTML;
+      const html = serializeForSync(clone);
       const identityMap = this._buildIdentityMap(document.documentElement, clone);
       this.sendUpdate(html, identityMap);
     };
@@ -460,42 +466,67 @@ class LiveSync {
   }
 
   /**
-   * Send full HTML to the server (debounced)
-   * Only updates lastHtml after successful save
+   * Send full HTML to the server (debounced, single-flight).
+   *
+   * One POST on the wire at a time, with at most one newer payload queued; a
+   * fresher snapshot replaces the queued one, because peers only ever need the
+   * latest state. Two concurrent fetches could reach the server in either order,
+   * and last-write-wins then stored the OLDER snapshot for every peer.
    */
   sendUpdate(html, identityMap) {
     clearTimeout(this.debounceTimer);
 
     this.debounceTimer = setTimeout(() => {
-      // Skip if unchanged
-      if (html === this.lastHtml) {
-        this._log('Skipping send - HTML unchanged');
-        return;
-      }
-
-      this._log(`Sending update (HTML length: ${html.length}, lastHtml length: ${this.lastHtml?.length || 0})`);
-
-      fetch('/_/live-sync/save', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json', 'Page-URL': window.location.href },
-        body: JSON.stringify({
-          html: html,
-          sender: this.clientId,
-          identityMap: identityMap
-        })
-      }).then(response => {
-        if (response.ok) {
-          this.lastHtml = html;
-        } else {
-          console.warn('[LiveSync] Save returned status:', response.status);
-        }
-      }).catch(err => {
-        console.error('[LiveSync] Save failed:', err);
-        if (this.onError) this.onError(err);
-      });
+      this._enqueueSend(html, identityMap);
     }, this.debounceMs);
   }
 
+  _enqueueSend(html, identityMap) {
+    if (this._sendInFlight) {
+      this._queuedSend = { html, identityMap };
+      return;
+    }
+    this._postUpdate(html, identityMap);
+  }
+
+  _postUpdate(html, identityMap) {
+    // Skip if unchanged
+    if (html === this.lastHtml) {
+      this._log('Skipping send - HTML unchanged');
+      return;
+    }
+
+    this._log(`Sending update (HTML length: ${html.length}, lastHtml length: ${this.lastHtml?.length || 0})`);
+
+    this._sendInFlight = true;
+
+    // Absolute against the real origin, so a <base href> in the page cannot
+    // redirect the whole document to an origin the author picked.
+    fetch(new URL('/_/live-sync/save', window.location.origin).href, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', 'Page-URL': window.location.href },
+      body: JSON.stringify({
+        html: html,
+        sender: this.clientId,
+        identityMap: identityMap
+      })
+    }).then(response => {
+      if (response.ok) {
+        this.lastHtml = html;
+      } else {
+        console.warn('[LiveSync] Save returned status:', response.status);
+      }
+    }).catch(err => {
+      console.error('[LiveSync] Save failed:', err);
+      if (this.onError) this.onError(err);
+    }).finally(() => {
+      this._sendInFlight = false;
+      const queued = this._queuedSend;
+      this._queuedSend = null;
+      if (queued) this._postUpdate(queued.html, queued.identityMap);
+    });
+  }
+
   /**
    * Apply an update received from the server. Morphs the entire document.
    *
@@ -629,6 +660,11 @@ class LiveSync {
       const id = parsedWeakMap.get(newEl);
       if (id) liveWeakMap.set(oldEl, id);
     };
+    // A peer may neither write these onto our root nor, by not carrying them,
+    // take ours away. Returning false is hyper-morph's veto for both directions
+    // (it calls this for updateType 'update' and 'remove' alike).
+    const beforeAttributeUpdated = (name, element) =>
+      isTabLocalRootAttr(name, element) ? false : undefined;
 
     try {
       // Morph entire document. We MUST await — HyperMorph.morph returns a
@@ -652,7 +688,7 @@ class LiveSync {
           mergeTags: mergeTagRecognizers
         },
         key,
-        callbacks: { afterNodeMorphed }
+        callbacks: { afterNodeMorphed, beforeAttributeUpdated }
       });
 
       // Restore viewport. Done after morph so layout has settled.
@@ -685,10 +721,6 @@ class LiveSync {
       document.dispatchEvent(new CustomEvent('clay:sync-applied', {
         detail: { seq }
       }));
-      // vendor-compat: hypercms's form panel listens for the legacy name.
-      document.dispatchEvent(new CustomEvent('hyperclay:livesync-applied', {
-        detail: { seq }
-      }));
     } finally {
       this._log('applyUpdate - morph complete, resuming mutations');
       Mutation.resume();

package/src/ui/dialogs.js

@@ -6,9 +6,18 @@ import copyToClipboard from "../utils/copy-to-clipboard.js";
 const CLOSE_BUTTON_SVG = `<svg viewBox="0 0 134 134" fill="none" xmlns="http://www.w3.org/2000/svg"><path class="micromodal__close-bg" d="M132 132.5 1 1.5h131v131Z" /><path class="micromodal__close-x" fill-rule="evenodd" clip-rule="evenodd" d="M0 0h3v1.5h1.5V3H6v1.5h1.5V6H9v1.5h1.5V9H12v1.5h1.5V12H15v1.5h1.5V15H18v1.5h1.5V18H21v1.5h1.5V21H24v1.5h1.5V24H27v1.5h1.5V27H30v1.5h1.5V30H33v1.5h1.5V33H36v1.5h1.5V36H39v1.5h1.5V39H42v1.5h1.5V42H45v1.5h1.5V45H48v1.5h1.5V48H51v1.5h1.5V51H54v1.5h1.5V54H57v1.5h1.5V57H60v1.5h1.5V60H63v1.5h1.5V63H66v1.5h1.5V66H69v1.5h1.5V69H72v1.5h1.5V72H75v1.5h1.5V75H78v1.5h1.5V78H81v1.5h1.5V81H84v1.5h1.5V84H87v1.5h1.5V87H90v1.5h1.5V90H93v1.5h1.5V93H96v1.5h1.5V96H99v1.5h1.5V99h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v1.5h1.5v3h-3V132H129v-1.5h-1.5V129H126v-1.5h-1.5V126H123v-1.5h-1.5V123H120v-1.5h-1.5V120H117v-1.5h-1.5V117H114v-1.5h-1.5V114H111v-1.5h-1.5V111H108v-1.5h-1.5V108H105v-1.5h-1.5V105H102v-1.5h-1.5V102H99v-1.5h-1.5V99H96v-1.5h-1.5V96H93v-1.5h-1.5V93H90v-1.5h-1.5V90H87v-1.5h-1.5V87H84v-1.5h-1.5V84H81v-1.5h-1.5V81H78v-1.5h-1.5V78H75v-1.5h-1.5V75H72v-1.5h-1.5V72H69v-1.5h-1.5V69H66v-1.5h-1.5V66H63v-1.5h-1.5V63H60v-1.5h-1.5V60H57v-1.5h-1.5V57H54v-1.5h-1.5V54H51v-1.5h-1.5V51H48v-1.5h-1.5V48H45v-1.5h-1.5V45H42v-1.5h-1.5V42H39v-1.5h-1.5V39H36v-1.5h-1.5V36H33v-1.5h-1.5V33H30v-1.5h-1.5V30H27v-1.5h-1.5V27H24v-1.5h-1.5V24H21v-1.5h-1.5V21H18v-1.5h-1.5V18H15v-1.5h-1.5V15H12v-1.5h-1.5V12H9v-1.5H7.5V9H6V7.5H4.5V6H3V4.5H1.5V3H0V0ZM108.8 22h5.2v5.1h-2.6v2.6H109v2.6h-2.6v2.6h-2.6v2.5h-2.6v5.2h2.6V45h2.6v2.6h2.6v2.6h2.5v2.6h2.6V58h-5.1v-2.6h-2.6V53h-2.6v-2.6h-2.6v-2.6h-2.5v-2.6h-5.2v2.6H91v2.6h-2.6v2.6h-2.6v2.5h-2.6V58H78v-5.1h2.6v-2.6H83v-2.6h2.6v-2.6h2.6v-2.5h2.6v-5.2h-2.6V35h-2.6v-2.6h-2.6v-2.6h-2.5v-2.6H78V22h5.2v2.6h2.5V27h2.6v2.6h2.6v2.6h2.5v2.6h5.2v-2.6h2.5v-2.6h2.6v-2.6h2.6v-2.5h2.5V22Z" /></svg>`;
 const CONFIRM_BUTTON_SVG = `<div style="width: 28px;"><svg viewBox="0 0 60 33" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M34.5 0.75H43.5V5.25H49V9.75H54.5V14.25H60V18.75H54.5V23.25H49V27.75H43.5V32.25H34.5V27.75H40V23.25H45.5V18.75H0V14.25H45.5V9.75H40V5.25H34.5V0.75Z" fill="white"/></svg></div>`;
 
+// Only for the prompt's default value. promptText and extraContent are markup by
+// design, and callers pass elements through them.
+function escapeAttribute(value) {
+  return String(value)
+    .replaceAll("&", "&amp;")
+    .replaceAll('"', "&quot;")
+    .replaceAll("<", "&lt;");
+}
+
 function createModal(promptText, yesCallback, extraContent = "", includeInput = false, defaultValue = "") {
   const inputHtml = includeInput
-    ? `<div><input class="micromodal__input" type="text" value="${defaultValue}" required></div>`
+    ? `<div><input class="micromodal__input" type="text" value="${escapeAttribute(defaultValue)}" required></div>`
     : "";
 
   themodal.html = `<div>

package/src/ui/index.js

@@ -18,19 +18,10 @@ clay.modal = themodal;
 if (typeof window.toast === "undefined") window.toast = toast;
 if (typeof window.toastPersistent === "undefined") window.toastPersistent = toastPersistent;
 
-// vendor-compat mirror: sap reads window.hyperclay.consent (the legacy name for
-// clay.confirm). Never CREATE window.hyperclay here: sap's mutation bridge treats
-// any truthy window.hyperclay as "a hub is coming" and waits forever for it. Core
-// creates the object (with Mutation) and fires clay:mutation-ready; attach then.
-function mirrorConsent() {
-  if (window.hyperclay && !window.hyperclay.consent) window.hyperclay.consent = consent;
-}
-if (window.hyperclay) mirrorConsent();
-else document.addEventListener("clay:mutation-ready", mirrorConsent, { once: true });
-
 // Automatic save feedback. clay:save-saving stays deliberately silent (a toast for
 // a sub-second transient is noise). Keep your own toast lib? The events are public.
-document.addEventListener("clay:save-saved", () => toast("Saved", "success"));
+document.addEventListener("clay:save-saved", (e) =>
+  toast(e.detail?.msg || "Saved", e.detail?.msgType === "warning" ? "warning" : "success"));
 document.addEventListener("clay:save-error", () => toastPersistent("Couldn't save", "error"));
 document.addEventListener("clay:save-offline", () => toastPersistent("Offline, not saved", "warning"));
 

package/src/ui/toast.js

@@ -280,11 +280,14 @@ export function toastCore(message, messageType = "success", config = {}) {
   const template = templates.toast[messageType] || templates.toast.success;
   const toastHtml = template
     .replace('{icon}', icon)
-    .replace('{message}', message);
+    .replace('{message}', '');
 
   const tempDiv = document.createElement('div');
   tempDiv.innerHTML = toastHtml.trim();
   const toastElement = tempDiv.firstElementChild;
+  // A message can carry a filename, and a filename is whatever whoever wrote the
+  // file chose. Assign it as text so markup in a name can never become markup here.
+  toastElement.querySelector('.toast-message, .message').textContent = message;
 
   // Add click handler
   toastElement.addEventListener('click', () => {
@@ -393,11 +396,14 @@ function toastPersistent(message, messageType = "warning") {
   const template = templates.toast[messageType] || templates.toast.warning;
   const toastHtml = template
     .replace('{icon}', icon)
-    .replace('{message}', message);
+    .replace('{message}', '');
 
   const tempDiv = document.createElement('div');
   tempDiv.innerHTML = toastHtml.trim();
   const toastElement = tempDiv.firstElementChild;
+  // A message can carry a filename, and a filename is whatever whoever wrote the
+  // file chose. Assign it as text so markup in a name can never become markup here.
+  toastElement.querySelector('.toast-message, .message').textContent = message;
   toastElement.classList.add('toast-persistent');
 
   // Add close button as sibling (not inside message)

package/src/utils/debounce.js

@@ -1,23 +1,40 @@
 // debounce.js
 function debounce(callback, delay) {
   let timeoutId;
-  let pendingResolvers = [];
+  let pending = [];
 
   return function (...args) {
     const ctx = this;
     clearTimeout(timeoutId);
 
-    return new Promise((resolve) => {
-      pendingResolvers.push(resolve);
+    return new Promise((resolve, reject) => {
+      pending.push({ resolve, reject });
 
       timeoutId = setTimeout(() => {
-        const resolvers = pendingResolvers;
-        pendingResolvers = [];
-        Promise.resolve(callback.apply(ctx, args))
-          .then(value => { for (const r of resolvers) r(value); });
+        const waiting = pending;
+        pending = [];
+        settle(callback, ctx, args, waiting);
       }, delay);
     });
   };
 }
 
+// Settle every caller piggybacking on this window, from both branches. The
+// callback is invoked synchronously so timing is unchanged; only the failure
+// path is new. Without it a throw escapes into the timer, where no caller is
+// listening, and everyone waiting on that window waits forever.
+function settle(callback, ctx, args, waiting) {
+  let result;
+  try {
+    result = callback.apply(ctx, args);
+  } catch (error) {
+    for (const p of waiting) p.reject(error);
+    return;
+  }
+  Promise.resolve(result).then(
+    value => { for (const p of waiting) p.resolve(value); },
+    error => { for (const p of waiting) p.reject(error); },
+  );
+}
+
 export default debounce;

package/src/vendor/hyper-undo.vendor.js

@@ -1,4 +1,4 @@
-var hyperundo=(()=>{var T=Object.defineProperty;var ee=Object.getOwnPropertyDescriptor;var te=Object.getOwnPropertyNames;var re=Object.prototype.hasOwnProperty;var ne=(e,t)=>{for(var n in t)T(e,n,{get:t[n],enumerable:!0})},oe=(e,t,n,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of te(t))!re.call(e,o)&&o!==n&&T(e,o,{get:()=>t[o],enumerable:!(r=ee(t,o))||r.enumerable});return e};var ae=e=>oe(T({},"__esModule",{value:!0}),e);var me={};ne(me,{default:()=>pe,undo:()=>C});function ie(e,t=null){let n=[];if(e.type==="attributes"){let r=e.target,o=e.attributeName,i=e.oldValue,u=r.getAttribute(o);return i==null&&u!=null?n.push({kind:"attr-add",target:r,name:o,newValue:u}):i!=null&&u==null?n.push({kind:"attr-remove",target:r,name:o,oldValue:i}):i!==u&&n.push({kind:"attr-set",target:r,name:o,oldValue:i,newValue:u}),n}if(e.type==="characterData")return n.push({kind:"text",target:e.target,oldValue:e.oldValue,newValue:e.target.data}),n;if(e.type==="childList"){let r=e.target,o=e.nextSibling,i=t?Array.from(e.addedNodes).filter(d=>!t(d)):Array.from(e.addedNodes),u=t?Array.from(e.removedNodes).filter(d=>!t(d)):Array.from(e.removedNodes);return i.length>0&&n.push({kind:"add",parent:r,nodes:i,before:o}),u.length>0&&n.push({kind:"remove",parent:r,nodes:u,before:o}),n}return n}function P(e,t=null){let n=[],r=new Map;for(let o of e){if(o.type==="attributes"){let i=o.target,u=o.attributeName,d=r.get(i);d||(d=new Map,r.set(i,d)),d.has(u)||(d.set(u,{idx:n.length,oldValue:o.oldValue}),n.push(null));continue}for(let i of ie(o,t))n.push(i)}for(let[o,i]of r)for(let[u,d]of i){let l=d.oldValue,m=o.getAttribute(u),p=null;l===m?p=null:l==null?p={kind:"attr-add",target:o,name:u,newValue:m}:m==null?p={kind:"attr-remove",target:o,name:u,oldValue:l}:p={kind:"attr-set",target:o,name:u,oldValue:l,newValue:m},n[d.idx]=p}return n.filter(o=>o!=null)}function L(e){switch(e.kind){case"attr-set":case"attr-add":e.target.setAttribute(e.name,e.newValue);return;case"attr-remove":e.target.removeAttribute(e.name);return;case"text":e.target.data=e.newValue;return;case"value":e.target[e.prop]=e.newValue;return;case"add":for(let t of e.nodes)e.before&&e.before.parentNode===e.parent?e.parent.insertBefore(t,e.before):e.parent.appendChild(t);return;case"remove":for(let t of e.nodes)t.parentNode===e.parent&&e.parent.removeChild(t);return}}function D(e){switch(e.kind){case"attr-set":e.target.setAttribute(e.name,e.oldValue);return;case"attr-add":e.target.removeAttribute(e.name);return;case"attr-remove":e.target.setAttribute(e.name,e.oldValue);return;case"text":e.target.data=e.oldValue;return;case"value":e.target[e.prop]=e.oldValue;return;case"add":for(let t of e.nodes)t.parentNode===e.parent&&e.parent.removeChild(t);return;case"remove":for(let t of e.nodes)e.before&&e.before.parentNode===e.parent?e.parent.insertBefore(t,e.before):e.parent.appendChild(t);return}}var se=['[src^="chrome-extension://"]','[href^="chrome-extension://"]','[src^="moz-extension://"]','[href^="moz-extension://"]','[src^="safari-web-extension://"]','[href^="safari-web-extension://"]','[id="1p-menu-live-region"]',"com-1password-button","com-1password-menu","com-1password-notification","grammarly-extension","grammarly-desktop-integration","lt-div","lt-card","lt-toolbar","lt-highlighter","[data-lastpass-root]","[data-lastpass-icon-root]","[data-dashlane-shadowhost]","[data-klarna-extension]",'[class*="klarna-extension"]',".skiptranslate","#goog-gt-tt",".goog-te-banner-frame",".goog-te-balloon-frame","style.darkreader","style[data-darkreader-mode]","style[data-darkreader-scheme]","#loom-companion-mv3","loom-container","[ext-id]"],ue=["data-grammarly","data-lt","data-1p","data-com-onepassword","data-lastpass","data-lp","data-kwimpala","data-bitwarden","data-bw","data-dashlane","data-np","data-protonpass","data-proton-pass","data-keeper","data-rf","data-roboform","data-honey","data-rakuten","data-capital-one","data-wikibuy","data-klarna","data-darkreader","data-evernote","data-pocket","data-pin"],M=se.join(","),U=new RegExp("^(?:"+ue.join("|")+")(?:-|$)");var de=["mutations-ignore","save-remove","save-ignore","save-freeze","no-undo","no-watch"];function le(){return typeof window<"u"&&window.hyperclay&&window.hyperclay.region&&typeof window.hyperclay.region.resolveRegionPolicy=="function"?window.hyperclay.region.resolveRegionPolicy:null}function ce(e){let t=le();if(t)try{return!t(e).undoable}catch{}let n=e&&e.nodeType!==1?e.parentElement:e;if(n&&n.closest&&n.closest(M))return!0;for(;n&&n.nodeType===1;){for(let r of de)if(n.hasAttribute&&n.hasAttribute(r))return!0;n=n.parentElement}return!1}function R(e,t,n){if(ce(e))return!0;if(n&&n.type==="attributes"){if(n.attributeName&&U.test(n.attributeName.toLowerCase()))return!0;if(t)try{if(t(n.attributeName,n.target))return!0}catch{}}return!1}function X(){let e=new Map;function t(o,i){let u=e.get(o);return u||(u=new Set,e.set(o,u)),u.add(i),()=>n(o,i)}function n(o,i){let u=e.get(o);u&&u.delete(i)}function r(o,i){let u=e.get(o);if(u)for(let d of Array.from(u))try{d(i)}catch(l){console.error("[hyper-undo] listener threw",l)}}return{on:t,off:n,emit:r}}var fe={maxHistory:100,idleWindowMs:500,idleLabel:"Edit",ignoreAttribute:null,debug:!1};function N(e){let t={...fe,...e};if(!t.scope)throw new Error("hyper-undo: scope is required");let n=X(),r=[],o=[],i=[],u=null,d=null,l=0,m=!1;function p(...s){t.debug&&console.log("[hyper-undo]",...s)}function H(){m||(m=!0,d=W(g),d.observe(t.scope,{childList:!0,attributes:!0,characterData:!0,subtree:!0,attributeOldValue:!0,characterDataOldValue:!0}),p("started"))}function W(s){let c=typeof document<"u"&&t.scope===document.body,f=typeof window<"u"&&window.hyperclay&&window.hyperclay.Mutation||null;return c&&f&&typeof f.createObserver=="function"?(p("sourcing records from window.hyperclay.Mutation (shared observer)"),f.createObserver(s)):new MutationObserver(s)}function E(){m&&(m=!1,d&&(d.disconnect(),d=null),y(),r.length=0,o.length=0,i=[],l=0,p("stopped"))}function V(){let s=t.scope;return!!(s&&s.nodeType===1&&s.isConnected===!1)}function g(s){if(l>0)return;let c=_(s);if(c.length>0){for(let f of c)i.push(f);I()}}function _(s){let c=s.filter(f=>!R(f.target,t.ignoreAttribute,f));return P(c,f=>R(f,t.ignoreAttribute))}function I(){y(),u=setTimeout(K,t.idleWindowMs)}function y(){u!=null&&(clearTimeout(u),u=null)}function K(){if(u=null,i.length===0)return;let s=i;i=[],v(t.idleLabel,s)}function v(s,c){for(r.push({label:s,timestamp:Date.now(),primitives:c}),o.length=0;r.length>t.maxHistory;)r.shift();p("commit",s,"primitives:",c.length),n.emit("commit")}function j(s,c){if(!m)throw new Error("hyper-undo: scope not started");g(d.takeRecords()),w();let f=c();if(f&&typeof f.then=="function")throw new Error("hyper-undo: commit() fn must be synchronous; returned a Promise");if(g(d.takeRecords()),i.length===0){n.emit("commit");return}y();let b=i;i=[],v(s,b)}function G(s){if(!m)throw new Error("hyper-undo: scope not started");if(!d)return;if(l>1){d.takeRecords();return}w();let c=_(d.takeRecords());c.length!==0&&(y(),v(s,c))}function Z(){d&&d.takeRecords()}function O(s){!m||l>0||!s||(i.push(s),I())}function $(s,{prop:c="value",oldValue:f,newValue:b}={}){!s||f===b||O({kind:"value",target:s,prop:c,oldValue:f,newValue:b})}function w(){l===0&&d&&g(d.takeRecords()),i.length!==0&&(y(),K())}function k(){l===0&&d&&g(d.takeRecords()),l++,p("paused",l)}function x(){l!==0&&(l--,l===0&&d&&d.takeRecords(),p("resumed",l))}function J(){if(V()){E();return}w();let s=r.pop();if(s){k();try{for(let c=s.primitives.length-1;c>=0;c--)try{D(s.primitives[c])}catch(f){p("undo primitive failed (continuing)",f)}}finally{x()}o.push(s),p("undo",s.label),n.emit("undo")}}function Q(){if(V()){E();return}w();let s=o.pop();if(s){k();try{for(let c of s.primitives)try{L(c)}catch(f){p("redo primitive failed (continuing)",f)}}finally{x()}r.push(s),p("redo",s.label),n.emit("redo")}}function Y(){d&&d.takeRecords(),r.length=0,o.length=0,i=[],y(),p("cleared"),n.emit("clear")}return{_config:t,start:H,stop:E,commit:j,commitCaptured:G,discardCaptured:Z,flush:w,record:O,recordValue:$,undo:J,redo:Q,clear:Y,pause:k,resume:x,on:n.on,off:n.off,get canUndo(){return r.length>0},get canRedo(){return o.length>0},get isPaused(){return l>0},get history(){return r.map(s=>({label:s.label,timestamp:s.timestamp}))},get scope(){return t.scope}}}function q(e,t){let n=r=>{let o=e.scope;if(o&&o.nodeType===1&&o.isConnected===!1){t&&t();return}let i=r.target,u=e._config.shadowKeydownIn;if(i&&i.closest&&Array.isArray(u))for(let m of u)try{if(i.closest(m))return}catch{}if(!(r.metaKey||r.ctrlKey))return;let l=(r.key||"").toLowerCase();if(l==="z"&&!r.shiftKey){r.preventDefault(),r.stopPropagation(),e.undo();return}if(l==="z"&&r.shiftKey){r.preventDefault(),r.stopPropagation(),e.redo();return}if(l==="y"&&!r.shiftKey){r.preventDefault(),r.stopPropagation(),e.redo();return}};return window.addEventListener("keydown",n,!0),()=>window.removeEventListener("keydown",n,!0)}var A=[".CodeMirror",".cm-editor",".monaco-editor",".ace_editor",".ql-editor",".tiptap",".ProseMirror"],a=null,S=null,z=null,h=null;function F(e,t){if(h){if(h.inst===e)return h.cleanup;throw new Error("hyper-undo: another scope already owns the global Cmd+Z binding (bindKeys: true). Stop it first, or use bindKeys: false for additional scopes.")}let n=q(e,t);return h={inst:e,cleanup:n},n}function B(e){h&&h.inst===e&&(h.cleanup(),h=null)}var C={defaults:{shadowKeydownIn:A},start(e={}){let t=e.scope||(typeof document<"u"?document.body:null);if(!t)throw new Error("hyper-undo: no scope (need document.body or explicit { scope })");if(a){if(S===t)return console.warn("[hyper-undo] start() called again on existing singleton; ignoring new options"),a;throw new Error("hyper-undo: start() called with a different scope while the singleton is already started. Use undo.create({ scope }) for additional scopes, or call undo.stop() first.")}let n={...e,scope:t,shadowKeydownIn:e.shadowKeydownIn||A};return a=N(n),a.start(),S=t,e.bindKeys!==!1&&(z=F(a,()=>C.stop())),a},stop(){a&&(B(a),z=null,a.stop(),a=null,S=null)},create(e={}){let t=e.scope||(typeof document<"u"?document.body:null);if(!t)throw new Error("hyper-undo: no scope (need document.body or explicit { scope })");let n={...e,scope:t,shadowKeydownIn:e.shadowKeydownIn||A},r=N(n),o=null,i={_config:r._config,commit:r.commit,commitCaptured:r.commitCaptured,discardCaptured:r.discardCaptured,flush:r.flush,record:r.record,recordValue:r.recordValue,undo:r.undo,redo:r.redo,clear:r.clear,pause:r.pause,resume:r.resume,on:r.on,off:r.off,get canUndo(){return r.canUndo},get canRedo(){return r.canRedo},get isPaused(){return r.isPaused},get history(){return r.history},get scope(){return r.scope},start(){e.bindKeys&&(o=F(r,()=>i.stop())),r.start()},stop(){B(r),o=null,r.stop()}};return i},commit(e,t){return a?a.commit(e,t):void 0},commitCaptured(e){return a?a.commitCaptured(e):void 0},discardCaptured(){return a?a.discardCaptured():void 0},record(e){return a?a.record(e):void 0},recordValue(e,t){return a?a.recordValue(e,t):void 0},undo(){return a?a.undo():void 0},redo(){return a?a.redo():void 0},clear(){return a?a.clear():void 0},pause(){return a?a.pause():void 0},resume(){return a?a.resume():void 0},flush(){return a?a.flush():void 0},on(e,t){return a?a.on(e,t):void 0},off(e,t){return a?a.off(e,t):void 0},get canUndo(){return a?a.canUndo:!1},get canRedo(){return a?a.canRedo:!1},get history(){return a?a.history:[]},get isPaused(){return a?a.isPaused:!1}};var pe=C;return ae(me);})();
+var hyperundo=(()=>{var T=Object.defineProperty;var ee=Object.getOwnPropertyDescriptor;var te=Object.getOwnPropertyNames;var re=Object.prototype.hasOwnProperty;var ne=(e,t)=>{for(var n in t)T(e,n,{get:t[n],enumerable:!0})},oe=(e,t,n,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of te(t))!re.call(e,o)&&o!==n&&T(e,o,{get:()=>t[o],enumerable:!(r=ee(t,o))||r.enumerable});return e};var ae=e=>oe(T({},"__esModule",{value:!0}),e);var me={};ne(me,{default:()=>pe,undo:()=>C});function ie(e,t=null){let n=[];if(e.type==="attributes"){let r=e.target,o=e.attributeName,i=e.oldValue,u=r.getAttribute(o);return i==null&&u!=null?n.push({kind:"attr-add",target:r,name:o,newValue:u}):i!=null&&u==null?n.push({kind:"attr-remove",target:r,name:o,oldValue:i}):i!==u&&n.push({kind:"attr-set",target:r,name:o,oldValue:i,newValue:u}),n}if(e.type==="characterData")return n.push({kind:"text",target:e.target,oldValue:e.oldValue,newValue:e.target.data}),n;if(e.type==="childList"){let r=e.target,o=e.nextSibling,i=t?Array.from(e.addedNodes).filter(d=>!t(d)):Array.from(e.addedNodes),u=t?Array.from(e.removedNodes).filter(d=>!t(d)):Array.from(e.removedNodes);return i.length>0&&n.push({kind:"add",parent:r,nodes:i,before:o}),u.length>0&&n.push({kind:"remove",parent:r,nodes:u,before:o}),n}return n}function P(e,t=null){let n=[],r=new Map;for(let o of e){if(o.type==="attributes"){let i=o.target,u=o.attributeName,d=r.get(i);d||(d=new Map,r.set(i,d)),d.has(u)||(d.set(u,{idx:n.length,oldValue:o.oldValue}),n.push(null));continue}for(let i of ie(o,t))n.push(i)}for(let[o,i]of r)for(let[u,d]of i){let l=d.oldValue,m=o.getAttribute(u),p=null;l===m?p=null:l==null?p={kind:"attr-add",target:o,name:u,newValue:m}:m==null?p={kind:"attr-remove",target:o,name:u,oldValue:l}:p={kind:"attr-set",target:o,name:u,oldValue:l,newValue:m},n[d.idx]=p}return n.filter(o=>o!=null)}function L(e){switch(e.kind){case"attr-set":case"attr-add":e.target.setAttribute(e.name,e.newValue);return;case"attr-remove":e.target.removeAttribute(e.name);return;case"text":e.target.data=e.newValue;return;case"value":e.target[e.prop]=e.newValue;return;case"add":for(let t of e.nodes)e.before&&e.before.parentNode===e.parent?e.parent.insertBefore(t,e.before):e.parent.appendChild(t);return;case"remove":for(let t of e.nodes)t.parentNode===e.parent&&e.parent.removeChild(t);return}}function D(e){switch(e.kind){case"attr-set":e.target.setAttribute(e.name,e.oldValue);return;case"attr-add":e.target.removeAttribute(e.name);return;case"attr-remove":e.target.setAttribute(e.name,e.oldValue);return;case"text":e.target.data=e.oldValue;return;case"value":e.target[e.prop]=e.oldValue;return;case"add":for(let t of e.nodes)t.parentNode===e.parent&&e.parent.removeChild(t);return;case"remove":for(let t of e.nodes)e.before&&e.before.parentNode===e.parent?e.parent.insertBefore(t,e.before):e.parent.appendChild(t);return}}var se=['[src^="chrome-extension://"]','[href^="chrome-extension://"]','[src^="moz-extension://"]','[href^="moz-extension://"]','[src^="safari-web-extension://"]','[href^="safari-web-extension://"]','[id="1p-menu-live-region"]',"com-1password-button","com-1password-menu","com-1password-notification","grammarly-extension","grammarly-desktop-integration","lt-div","lt-card","lt-toolbar","lt-highlighter","[data-lastpass-root]","[data-lastpass-icon-root]","[data-dashlane-shadowhost]","[data-klarna-extension]",'[class*="klarna-extension"]',".skiptranslate","#goog-gt-tt",".goog-te-banner-frame",".goog-te-balloon-frame","style.darkreader","style[data-darkreader-mode]","style[data-darkreader-scheme]","#loom-companion-mv3","loom-container","[ext-id]"],ue=["data-grammarly","data-lt","data-1p","data-com-onepassword","data-lastpass","data-lp","data-kwimpala","data-bitwarden","data-bw","data-dashlane","data-np","data-protonpass","data-proton-pass","data-keeper","data-rf","data-roboform","data-honey","data-rakuten","data-capital-one","data-wikibuy","data-klarna","data-darkreader","data-evernote","data-pocket","data-pin"],M=se.join(","),U=new RegExp("^(?:"+ue.join("|")+")(?:-|$)");var de=["mutations-ignore","save-remove","save-ignore","save-freeze","no-undo","no-watch"];function le(){if(typeof window>"u")return null;let e=window.clay?.region||window.hyperclay?.region;return e&&typeof e.resolveRegionPolicy=="function"?e.resolveRegionPolicy:null}function ce(e){let t=le();if(t)try{return!t(e).undoable}catch{}let n=e&&e.nodeType!==1?e.parentElement:e;if(n&&n.closest&&n.closest(M))return!0;for(;n&&n.nodeType===1;){for(let r of de)if(n.hasAttribute&&n.hasAttribute(r))return!0;n=n.parentElement}return!1}function R(e,t,n){if(ce(e))return!0;if(n&&n.type==="attributes"){if(n.attributeName&&U.test(n.attributeName.toLowerCase()))return!0;if(t)try{if(t(n.attributeName,n.target))return!0}catch{}}return!1}function X(){let e=new Map;function t(o,i){let u=e.get(o);return u||(u=new Set,e.set(o,u)),u.add(i),()=>n(o,i)}function n(o,i){let u=e.get(o);u&&u.delete(i)}function r(o,i){let u=e.get(o);if(u)for(let d of Array.from(u))try{d(i)}catch(l){console.error("[hyper-undo] listener threw",l)}}return{on:t,off:n,emit:r}}var fe={maxHistory:100,idleWindowMs:500,idleLabel:"Edit",ignoreAttribute:null,debug:!1};function N(e){let t={...fe,...e};if(!t.scope)throw new Error("hyper-undo: scope is required");let n=X(),r=[],o=[],i=[],u=null,d=null,l=0,m=!1;function p(...s){t.debug&&console.log("[hyper-undo]",...s)}function H(){m||(m=!0,d=W(g),d.observe(t.scope,{childList:!0,attributes:!0,characterData:!0,subtree:!0,attributeOldValue:!0,characterDataOldValue:!0}),p("started"))}function W(s){let c=typeof document<"u"&&t.scope===document.body,f=typeof window<"u"&&(window.clay?.Mutation||window.hyperclay?.Mutation)||null;return c&&f&&typeof f.createObserver=="function"?(p("sourcing records from the platform Mutation hub (shared observer)"),f.createObserver(s)):new MutationObserver(s)}function E(){m&&(m=!1,d&&(d.disconnect(),d=null),y(),r.length=0,o.length=0,i=[],l=0,p("stopped"))}function V(){let s=t.scope;return!!(s&&s.nodeType===1&&s.isConnected===!1)}function g(s){if(l>0)return;let c=_(s);if(c.length>0){for(let f of c)i.push(f);I()}}function _(s){let c=s.filter(f=>!R(f.target,t.ignoreAttribute,f));return P(c,f=>R(f,t.ignoreAttribute))}function I(){y(),u=setTimeout(K,t.idleWindowMs)}function y(){u!=null&&(clearTimeout(u),u=null)}function K(){if(u=null,i.length===0)return;let s=i;i=[],v(t.idleLabel,s)}function v(s,c){for(r.push({label:s,timestamp:Date.now(),primitives:c}),o.length=0;r.length>t.maxHistory;)r.shift();p("commit",s,"primitives:",c.length),n.emit("commit")}function j(s,c){if(!m)throw new Error("hyper-undo: scope not started");g(d.takeRecords()),w();let f=c();if(f&&typeof f.then=="function")throw new Error("hyper-undo: commit() fn must be synchronous; returned a Promise");if(g(d.takeRecords()),i.length===0){n.emit("commit");return}y();let b=i;i=[],v(s,b)}function G(s){if(!m)throw new Error("hyper-undo: scope not started");if(!d)return;if(l>1){d.takeRecords();return}w();let c=_(d.takeRecords());c.length!==0&&(y(),v(s,c))}function Z(){d&&d.takeRecords()}function O(s){!m||l>0||!s||(i.push(s),I())}function $(s,{prop:c="value",oldValue:f,newValue:b}={}){!s||f===b||O({kind:"value",target:s,prop:c,oldValue:f,newValue:b})}function w(){l===0&&d&&g(d.takeRecords()),i.length!==0&&(y(),K())}function k(){l===0&&d&&g(d.takeRecords()),l++,p("paused",l)}function x(){l!==0&&(l--,l===0&&d&&d.takeRecords(),p("resumed",l))}function J(){if(V()){E();return}w();let s=r.pop();if(s){k();try{for(let c=s.primitives.length-1;c>=0;c--)try{D(s.primitives[c])}catch(f){p("undo primitive failed (continuing)",f)}}finally{x()}o.push(s),p("undo",s.label),n.emit("undo")}}function Q(){if(V()){E();return}w();let s=o.pop();if(s){k();try{for(let c of s.primitives)try{L(c)}catch(f){p("redo primitive failed (continuing)",f)}}finally{x()}r.push(s),p("redo",s.label),n.emit("redo")}}function Y(){d&&d.takeRecords(),r.length=0,o.length=0,i=[],y(),p("cleared"),n.emit("clear")}return{_config:t,start:H,stop:E,commit:j,commitCaptured:G,discardCaptured:Z,flush:w,record:O,recordValue:$,undo:J,redo:Q,clear:Y,pause:k,resume:x,on:n.on,off:n.off,get canUndo(){return r.length>0},get canRedo(){return o.length>0},get isPaused(){return l>0},get history(){return r.map(s=>({label:s.label,timestamp:s.timestamp}))},get scope(){return t.scope}}}function q(e,t){let n=r=>{let o=e.scope;if(o&&o.nodeType===1&&o.isConnected===!1){t&&t();return}let i=r.target,u=e._config.shadowKeydownIn;if(i&&i.closest&&Array.isArray(u))for(let m of u)try{if(i.closest(m))return}catch{}if(!(r.metaKey||r.ctrlKey))return;let l=(r.key||"").toLowerCase();if(l==="z"&&!r.shiftKey){r.preventDefault(),r.stopPropagation(),e.undo();return}if(l==="z"&&r.shiftKey){r.preventDefault(),r.stopPropagation(),e.redo();return}if(l==="y"&&!r.shiftKey){r.preventDefault(),r.stopPropagation(),e.redo();return}};return window.addEventListener("keydown",n,!0),()=>window.removeEventListener("keydown",n,!0)}var A=[".CodeMirror",".cm-editor",".monaco-editor",".ace_editor",".ql-editor",".tiptap",".ProseMirror"],a=null,S=null,z=null,h=null;function F(e,t){if(h){if(h.inst===e)return h.cleanup;throw new Error("hyper-undo: another scope already owns the global Cmd+Z binding (bindKeys: true). Stop it first, or use bindKeys: false for additional scopes.")}let n=q(e,t);return h={inst:e,cleanup:n},n}function B(e){h&&h.inst===e&&(h.cleanup(),h=null)}var C={defaults:{shadowKeydownIn:A},start(e={}){let t=e.scope||(typeof document<"u"?document.body:null);if(!t)throw new Error("hyper-undo: no scope (need document.body or explicit { scope })");if(a){if(S===t)return console.warn("[hyper-undo] start() called again on existing singleton; ignoring new options"),a;throw new Error("hyper-undo: start() called with a different scope while the singleton is already started. Use undo.create({ scope }) for additional scopes, or call undo.stop() first.")}let n={...e,scope:t,shadowKeydownIn:e.shadowKeydownIn||A};return a=N(n),a.start(),S=t,e.bindKeys!==!1&&(z=F(a,()=>C.stop())),a},stop(){a&&(B(a),z=null,a.stop(),a=null,S=null)},create(e={}){let t=e.scope||(typeof document<"u"?document.body:null);if(!t)throw new Error("hyper-undo: no scope (need document.body or explicit { scope })");let n={...e,scope:t,shadowKeydownIn:e.shadowKeydownIn||A},r=N(n),o=null,i={_config:r._config,commit:r.commit,commitCaptured:r.commitCaptured,discardCaptured:r.discardCaptured,flush:r.flush,record:r.record,recordValue:r.recordValue,undo:r.undo,redo:r.redo,clear:r.clear,pause:r.pause,resume:r.resume,on:r.on,off:r.off,get canUndo(){return r.canUndo},get canRedo(){return r.canRedo},get isPaused(){return r.isPaused},get history(){return r.history},get scope(){return r.scope},start(){e.bindKeys&&(o=F(r,()=>i.stop())),r.start()},stop(){B(r),o=null,r.stop()}};return i},commit(e,t){return a?a.commit(e,t):void 0},commitCaptured(e){return a?a.commitCaptured(e):void 0},discardCaptured(){return a?a.discardCaptured():void 0},record(e){return a?a.record(e):void 0},recordValue(e,t){return a?a.recordValue(e,t):void 0},undo(){return a?a.undo():void 0},redo(){return a?a.redo():void 0},clear(){return a?a.clear():void 0},pause(){return a?a.pause():void 0},resume(){return a?a.resume():void 0},flush(){return a?a.flush():void 0},on(e,t){return a?a.on(e,t):void 0},off(e,t){return a?a.off(e,t):void 0},get canUndo(){return a?a.canUndo:!1},get canRedo(){return a?a.canRedo:!1},get history(){return a?a.history:[]},get isPaused(){return a?a.isPaused:!1}};var pe=C;return ae(me);})();
 
 // Auto-export to window unless suppressed by loader.
 if (!window.__hyperclayNoAutoExport) {