@panphora/clayjs 1.19.0 → 1.20.0

package/docs/guide.md

@@ -4,7 +4,7 @@ This is the complete reference for building malleable documents with ClayJS: one
 
 It is written for a developer or an LLM building full apps with inline editing and inline controls: kanban boards with card detail, block writers, finance trackers, CRMs, flashcards, trackers. It covers the CMS plugin only in passing ([cms: content-managed pages](https://clayjs.com/docs/guide/components/#cms-content-managed-pages)), because an app whose product is editing should not route editing through a form sidebar.
 
-Every behavior stated here was read from ClayJS 1.17.0 source or executed. The four example files below are complete, tested apps that this guide quotes. A [test suite](https://github.com/panphora/clayjs/tree/main/tests/unit/guide-examples) boots each one in jsdom with the real loader and checks what it saves, how it merges a peer's edit, and what a viewer receives. Open any of them and view source, or download one and open it in HTML Clay to edit it:
+Every behavior stated here was read from ClayJS 1.17.0 source or executed. The four example files below are complete, tested apps that this guide quotes. A [test suite](https://github.com/hyperspacesystems/clayjs/tree/main/tests/unit/guide-examples) boots each one in jsdom with the real loader and checks what it saves, how it merges a peer's edit, and what a viewer receives. Open any of them and view source, or download one and open it in HTML Clay to edit it:
 
 | File | What it shows |
 |---|---|
@@ -892,7 +892,23 @@ Traps in this table:
 - **Fill a scratchpad after `clay.ready`, and insert new ones empty.** The contents are captured when the element first appears. Content written before boot, or present in a cloned element when inserted, becomes its saved contents. Empty the scratchpads in a copied record before inserting it.
 - **Create `editor-ui` roots at runtime from an unmarked `<template>` on every load.** An `editor-ui` root disappears from the saved file, so it cannot be authored in the file. Do not mark the blueprint inside the `<template>` as `editor-ui`, or the first save empties the template and leaves no chrome to clone on the next load. Leave the blueprint unmarked and set `clay="editor-ui"` on each clone as you insert it.
 
-### 4.3 `persist`: form controls
+### 4.3 Copy policy: `no-copy` and `no-copy-unless:paid-forms`
+
+Save and sync tokens govern the working document; copy-policy tokens on `clay` govern what travels into an explicit copy:
+
+```html
+<script src="/analytics.js" defer clay="no-copy"></script>
+<header class="intro" clay="no-copy">…</header>
+<form action="/_/message" method="post" clay="no-copy-unless:paid-forms">…</form>
+```
+
+- **Normal saves keep the original.** Ordinary saves, live sync, versions, and automatic recovery retain `no-copy` and conditional regions.
+- **Explicit copies strip `no-copy` content, even for the owner.** Copies, duplicates, forks, HTML downloads, and ZIP exports remove `clay="no-copy"` elements (including inside `<template>` contents). User-requested recovery downloads filter visible HTML and embedded earlier HTML pages while preserving recovery records and edits.
+- **Authored loaders vs runtime scripts.** An authored loader marked `clay="no-copy"` stays in original saves and disappears from copies. Any SDK `<script>` added at runtime uses `clay="no-save no-snapshot no-watch no-copy"` so it is not persisted. ClayJS core knows only generic copy policy, not any analytics provider.
+- **Conditional paid forms.** `clay="no-copy-unless:paid-forms"` aliases legacy `data-paid-only="forms"` (still supported). Hosted copy/create checks the destination's existing `paid-forms` (`forms`) entitlement; offline downloads have no destination entitlement and strip optional conditional content. Reusable templates retain conditional regions for creation-time filtering, while unconditional `no-copy` regions are removed before owned template outputs. Exact case-sensitive matching fails closed, so an unknown conditional spelling cannot disguise a required paid feature.
+- **Supporting hosts and raw file limits.** Enforced in ClayJS client downloads and recovery exports, Hyperclay hosted copy/create/download flows, and Hyperclay Local / HTML Clay copies and exports. Finder, `cp`, and browser Save Page As bypass app hooks and copy raw file bytes unchanged.
+
+### 4.4 `persist`: form controls
 
 Put `persist` on every `<input>`, `<textarea>`, and `<select>` whose value belongs to the record. A control's typed value is a property, not an attribute, and serialization only reads attributes. Without `persist`, a typed value is lost on save and the file keeps the authored `value`.
 
@@ -913,7 +929,7 @@ Put `persist` on every `<input>`, `<textarea>`, and `<select>` whose value belon
 
 **After undo, redo, or a merge, ClayJS puts each control's display back in step with its attributes.** A control the user has touched shows its live property, not its attribute. A merge and the undo plugin copy `checked`, `value`, and `selected` back onto the property (undo does this for `persist` controls outside `no-undo` regions). A merge leaves the focused text field alone, while undo restores it too.
 
-### 4.4 Where to keep data that is not visible text
+### 4.5 Where to keep data that is not visible text
 
 In order of preference:
 
@@ -935,7 +951,7 @@ In order of preference:
 4. **A live JSON script (`clay="live"`)** for state that changes faster than a save: game boards, scores, cursors ([Live data: `clay="live"`](https://clayjs.com/docs/guide/live-sync/#live-data-clay-live)).
 5. **`<template>` content: never for mutable data.** It is saved, but edits there never trigger autosave.
 
-### 4.5 Element identity: `data-id` and `id`
+### 4.6 Element identity: `data-id` and `id`
 
 Live sync and undo pair elements across versions by **`data-id`, then `id`**, used only when the value is unique on its side and the tag names match. Without an id, elements pair by content, which works for distinct text and fails for identical new items.
 
@@ -956,11 +972,11 @@ Live sync and undo pair elements across versions by **`data-id`, then `id`**, us
 - **A `data-id` is also what presence names.** A record target `{ kind: "record", id }` carries it, so a stable id is what lets a peer's badge find the row again after a reload or a merge ([Presence](https://clayjs.com/docs/guide/live-sync/#presence)).
 - **Use ids to find records in commands:** `` board.querySelector(`.card[data-id="${CSS.escape(id)}"]`) ``. Never find a record by position.
 
-### 4.6 Assets
+### 4.7 Assets
 
 ClayJS saves an image through its `src`. Upload the file and write the returned URL ([upload and quickcrop](https://clayjs.com/docs/guide/components/#upload-and-quickcrop)). Every host returns a host path such as `/_/uploads/assets-<name>/photo-ab12.png`, which keeps working on that host when the document is renamed or moved. A document opened straight from disk shows those images broken; Export as zip takes a document with its files. Where the host cannot store files, embed a `data:` URL. Data URLs work anywhere, but every save carries the bytes, so keep embedded images small.
 
-### 4.7 Ephemeral state: per-tab state on saved elements
+### 4.8 Ephemeral state: per-tab state on saved elements
 
 Use `ephemeral` for per-tab state on a saved element, such as a selected card, a row being dragged, or an open section. Toggling a normal class or attribute is an edit like any other: it marks the page unsaved, starts an autosave, adds an undo step, reaches every peer, and lands in the file. Mark it `ephemeral` instead:
 
@@ -982,7 +998,7 @@ clay.ephemeral.toggle(card, "selected");   // add, remove, toggle(el, word, forc
 
 Use `ephemeral` for state on one element. State that comes from the URL hash and spans many records (the open card, a filter) is still painted with a runtime stylesheet ([Per-tab state](https://clayjs.com/docs/guide/architecture/#per-tab-state)).
 
-### 4.8 A template is an ordinary record with a tag
+### 4.9 A template is an ordinary record with a tag
 
 A reusable template is a record like any other, marked with a tag. It stays editable, searchable, exported, synced and in a visitor's draft, and it needs no second store and no new format. The app reads the tag off the body it already has:
 
@@ -992,7 +1008,7 @@ const templates = open => Entries.live().filter(a => a !== open && summary({ bod
 
 The tag is matched outside code spans and fences, so a template entry that shows a `#template` example does not become a template itself. Using one copies its text into the page, and the new record is written by the same save as everything else.
 
-### 4.9 Keep a helper that reads the text beside the editor, in an `editor-ui` row
+### 4.10 Keep a helper that reads the text beside the editor, in an `editor-ui` row
 
 A helper that reacts to the text being written belongs in a row a script builds beside the editor, marked `clay="editor-ui"`, and refreshed on a debounce. Nothing it draws is saved, printed or synced, and no keystroke pays for it beyond the debounce:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@panphora/clayjs",
-  "version": "1.19.0",
+  "version": "1.20.0",
   "type": "module",
   "description": "clayjs: malleable documents. Save lifecycle for self-saving HTML.",
   "license": "MIT-0",
@@ -72,6 +72,7 @@
     "build:standalone": "node build.js --standalone",
     "prepack": "node build.js --standalone",
     "test:standalone": "node build.js --standalone && web-test-runner --config tests/browser/wtr.config.mjs",
+    "browser:install": "node scripts/chrome-for-testing/browser-runtime.cjs install",
     "prepublishOnly": "testbox run",
     "dev": "node tests/stub-server.mjs",
     "build": "npm run build:bevel && npm run build:skins && node build.js",
@@ -111,7 +112,7 @@
     "marked": "18.0.14",
     "overtype": "2.6.1",
     "parse5": "^7.3.0",
-    "playwright": "1.62.1",
+    "playwright": "1.64.1",
     "postcss": "^8.5.28",
     "prosemirror-commands": "1.7.2",
     "prosemirror-dropcursor": "1.8.4",

package/src/core/conflict-download.js

@@ -1,6 +1,7 @@
 import { serializeRecoveryClone, captureRecoveryPage } from "./snapshot.js";
 import { rowOf } from "./conflict-presentation.js";
 import { documentName, downloadHtml } from "./download.js";
+import { stripCopyContent } from "./copy-content.js";
 
 export { documentName, downloadHtml };
 
@@ -31,12 +32,12 @@ export function buildRecovery(records, { refused = false } = {}) {
     if (apply && !seen.has(apply.id)) { seen.add(apply.id); applies.push(apply); }
   }
   applies.sort((a, b) => (a.ticket || 0) - (b.ticket || 0));
-  const pageOf = (a) => serializeRecoveryClone(a.recoveryRoot ?? a.root, { prepared: a.domain === "save" });
+  const pageOf = (a) => stripCopyContent(serializeRecoveryClone(a.recoveryRoot ?? a.root, { prepared: a.domain === "save" }));
 
   let html;
   let older;
   if (refused || !applies.length) {
-    html = captureRecoveryPage();
+    html = stripCopyContent(captureRecoveryPage());
     older = applies;
   } else {
     html = pageOf(applies[applies.length - 1]);
@@ -66,9 +67,9 @@ export function buildRecovery(records, { refused = false } = {}) {
 // The review panel's own copy: the page a reload kept, when there is one, with every
 // stored row it drew listed beside it as JSON. The rows are already plain, so nothing
 // here reads the ledger the tab no longer has.
-export function downloadStored({ html = null, edits = [] } = {}) {
+export async function downloadStored({ html = null, edits = [] } = {}) {
   try {
-    const page = typeof html === "string" ? html : captureRecoveryPage();
+    const page = stripCopyContent(typeof html === "string" ? html : captureRecoveryPage());
     const data = {
       format: "clay-lost-edits",
       version: 1,
@@ -78,17 +79,17 @@ export function downloadStored({ html = null, edits = [] } = {}) {
       edits: Array.isArray(edits) ? edits : [],
       earlierPages: [],
     };
-    return downloadHtml({ html: embed(page, data), name: `${documentName()}-my-copy-${stamp()}.html` });
+    return await downloadHtml({ html: embed(page, data), name: `${documentName()}-my-copy-${stamp()}.html` });
   } catch (err) {
     console.error("clayjs: could not build the download", err);
     return false;
   }
 }
 
-export function downloadRecovery(records, { refused = false } = {}) {
+export async function downloadRecovery(records, { refused = false } = {}) {
   try {
     const { html, name } = buildRecovery(records, { refused });
-    return downloadHtml({ html, name });
+    return await downloadHtml({ html, name });
   } catch (err) {
     console.error("clayjs: could not build the download", err);
     return false;

package/src/core/conflict-notice-ui.js

@@ -707,12 +707,12 @@ async function onRevert() {
 let downloadedTimer = null;
 
 // Download my copy. Nothing here acknowledges or releases a record.
-function onDownload() {
+async function onDownload() {
   const l = ledger();
   // A refusal ends in a reload that takes every record with it, so its copy carries
   // all of them; a replaced notice covers the rows it drew.
   const records = refused ? (l?.list() ?? []) : renderedIds.map((id) => l?.get(id)).filter(Boolean);
-  const ok = downloadRecovery(records, { refused: !!refused });
+  const ok = await downloadRecovery(records, { refused: !!refused });
   downloadFailed = !ok;
   downloaded = ok;
   clearTimeout(downloadedTimer);
@@ -801,14 +801,14 @@ async function onCopyStored(entry) {
 
 // Download my copy, from the stored root: the page as this tab had it, with the
 // losing text in it. Nothing here acknowledges or releases a record.
-function onDownloadRecovered() {
+async function onDownloadRecovered() {
   const record = recovered.find((item) => item.root);
   const edits = [];
   for (const item of recovered) {
     for (const entry of item.conflicts) edits.push({ id: entry.id, kind: entry.kind, name: storedName(entry), yours: entry.yours, now: entry.now, sentence: entry.sentence });
   }
   for (const entry of recoveredUndo) edits.push({ id: entry.id, kind: entry.kind, name: entry.name, yours: entry.yours, now: entry.now, sentence: entry.sentence });
-  const ok = downloadStored({ html: record?.root ?? null, edits });
+  const ok = await downloadStored({ html: record?.root ?? null, edits });
   downloadFailed = !ok;
   downloaded = ok;
   clearTimeout(downloadedTimer);

package/src/core/copy-content.js

@@ -0,0 +1,103 @@
+// Copy-only content: marked regions that stay in the file, in normal saves, in snapshots
+// and in recovery storage, and are removed only from the bytes of a copy someone asks for.
+// The removal is a splice on the original string using parse5's source offsets, so every
+// byte outside a removed range survives, templates and implicit end tags included.
+
+import { parse } from "../vendor/parse5.vendor.js";
+
+const CLAY = "clay";
+const PAID_ONLY = "data-paid-only";
+const NO_COPY = "no-copy";
+const CONDITIONAL_FORMS = "no-copy-unless:paid-forms";
+const CLAY_TOKENS = /[\t\n\f\r ]+/;
+
+function attributeOf(node, name) {
+  return node.attrs?.find((attr) => attr.name === name)?.value ?? null;
+}
+
+function childrenOf(node) {
+  return node.content ? [...(node.childNodes || []), node.content] : (node.childNodes || []);
+}
+
+function eachElement(node, visit) {
+  visit(node);
+  for (const child of childrenOf(node)) eachElement(child, visit);
+}
+
+function clayTokensOf(node) {
+  return (attributeOf(node, CLAY) ?? "").split(CLAY_TOKENS);
+}
+
+// The marker is compared to a feature key exactly: no trim, no lowercase, so a typo, an
+// empty value or `FORMS` strips nothing and the content stays, which is the direction
+// that fails closed. `clay="no-copy-unless:paid-forms"` is the approved spelling of the
+// same condition.
+function paidMarkersOf(node) {
+  const markers = [];
+  const value = attributeOf(node, PAID_ONLY);
+  if (value !== null) markers.push(value);
+  if (clayTokensOf(node).includes(CONDITIONAL_FORMS)) markers.push("forms");
+  return [...new Set(markers)];
+}
+
+function lastDescendantEnd(node) {
+  let end = null;
+  eachElement(node, (entry) => {
+    const entryEnd = entry.sourceCodeLocation?.endOffset;
+    if (typeof entryEnd === "number" && entryEnd >= 0 && (end === null || entryEnd > end)) end = entryEnd;
+  });
+  return end;
+}
+
+function endOffsetFor(node) {
+  const location = node.sourceCodeLocation;
+  if (typeof location?.endOffset === "number" && location.endOffset >= 0) return location.endOffset;
+  const fallback = lastDescendantEnd(node) ?? location?.startTag?.endOffset ?? null;
+  if (fallback === null) return null;
+  console.warn(`clayjs: <${node.tagName}> has no end offset; removing through ${fallback}`);
+  return fallback;
+}
+
+function markedRanges(html, features) {
+  const ranges = [];
+  eachElement(parse(html, { sourceCodeLocationInfo: true }), (node) => {
+    const markers = paidMarkersOf(node);
+    const unconditional = clayTokensOf(node).includes(NO_COPY);
+    const conditional = features === null ? markers.length > 0 : markers.some((marker) => features.includes(marker));
+    if (!unconditional && !conditional) return;
+    const start = node.sourceCodeLocation?.startOffset;
+    const end = typeof start === "number" ? endOffsetFor(node) : null;
+    if (typeof start === "number" && start >= 0 && end !== null && end > start) ranges.push({ start, end });
+  });
+  return ranges.filter((range, index) => !ranges.some((other, otherIndex) =>
+    otherIndex !== index && other.start <= range.start && range.end <= other.end));
+}
+
+function leadingRunStart(html, start) {
+  const newline = html.lastIndexOf("\n", start - 1);
+  if (newline < 0 || /\S/.test(html.slice(newline + 1, start))) return start;
+  return html[newline - 1] === "\r" ? newline - 1 : newline;
+}
+
+function spliceRanges(html, ranges) {
+  const sorted = [...ranges].sort((a, b) => a.start - b.start);
+  let stripped = html;
+  let limit = html.length;
+  for (let index = sorted.length - 1; index >= 0; index -= 1) {
+    const { start, end } = sorted[index];
+    if (end > limit) continue;
+    const from = leadingRunStart(html, start);
+    if (from >= end) continue;
+    stripped = stripped.slice(0, from) + stripped.slice(end);
+    limit = from;
+  }
+  return stripped;
+}
+
+// `features` decides the conditional regions: null (the default, and the offline
+// destination) strips every one of them, while a list strips only the missing features
+// it names. Unconditional `no-copy` content always goes.
+export function stripCopyContent(html, features = null) {
+  if (typeof html !== "string" || !/clay|data-paid-only/i.test(html)) return html;
+  return spliceRanges(html, markedRanges(html, features));
+}

package/src/core/download.js

@@ -1,6 +1,13 @@
 // Saving a page as a file the browser downloads. Kept apart from the conflict copy
 // builders so an editor that only offers "download this page" loads none of them.
 
+const HTML_TYPES = ["text/html", "application/xhtml+xml"];
+
+function isHtml(type) {
+  if (typeof type !== "string") return false;
+  return HTML_TYPES.includes(type.split(";")[0].trim().toLowerCase());
+}
+
 export function documentName(pathname = location.pathname) {
   const last = pathname.split("/").filter(Boolean).pop();
   if (!last) return pathname.endsWith("/") || pathname === "" ? "index" : "page";
@@ -9,10 +16,15 @@ export function documentName(pathname = location.pathname) {
   return name.replace(/\.(html?|htmlclay)$/i, "") || "page";
 }
 
-export function downloadHtml({ html, name, type = "text/html" }) {
+export async function downloadHtml({ html, name, type = "text/html" }) {
   let url = null;
   try {
-    url = URL.createObjectURL(new Blob([html], { type }));
+    let contents = html;
+    if (isHtml(type) && typeof html === "string" && /clay|data-paid-only/i.test(html)) {
+      const { stripCopyContent } = await import("./copy-content.js");
+      contents = stripCopyContent(html);
+    }
+    url = URL.createObjectURL(new Blob([contents], { type }));
     const a = document.createElement("a");
     a.setAttribute("clay", "no-save no-watch no-snapshot");
     a.href = url;

package/src/core/save-size-notice.js

@@ -57,8 +57,8 @@ function place() {
 // The safe copy the conflict notice offers, for the same reason: a file the person can
 // open has to exist outside a host that will not store these bytes. It already reports
 // its own failure.
-function download() {
-  downloadStored({});
+async function download() {
+  await downloadStored({});
 }
 
 function build() {

package/src/core/upgrade-run.js

@@ -348,7 +348,11 @@ export async function pageBytes(clay, { loc = location, fetchFn = (url, init) =>
 export async function downloadCopy({ clay, doc = document, loc = location, fetchFn } = {}) {
   if (typeof URL === "undefined" || typeof URL.createObjectURL !== "function") return false;
   try {
-    const bytes = await pageBytes(clay, { loc, fetchFn });
+    let bytes = await pageBytes(clay, { loc, fetchFn });
+    if (typeof bytes === "string" && /clay|data-paid-only/i.test(bytes)) {
+      const { stripCopyContent } = await import("./copy-content.js");
+      bytes = stripCopyContent(bytes);
+    }
     const url = URL.createObjectURL(new Blob([bytes], { type: "text/html" }));
     const a = doc.createElement("a");
     a.setAttribute("clay", "editor-ui");

package/src/lib/region-policy.js

@@ -54,7 +54,7 @@ export const REGION_ATTRS = ['no-save', 'no-trigger-autosave', 'no-dirty', 'no-u
 // Every canonical token spellable inside the space-separated `clay` attribute.
 // Exported: this list used to exist as a private CLAY_TOKENS that nothing read,
 // while callers hardcoded their own copies.
-export const TOKENS = [...POLICY_TOKENS];
+export const TOKENS = [...POLICY_TOKENS, 'no-copy', 'no-copy-unless:paid-forms'];
 
 // True when a region marker is present, whether spelled as a `clay` token
 // (whitespace-token semantics, matching [clay~=token]) or a legacy bare attribute.

package/src/page/features/export-html.js

@@ -112,12 +112,12 @@ export function createFeature({ view = null, download = downloadHtml, fetch: fet
   }
 
   function decide(s) {
-    listen(s, s.panel, "click", (event) => {
+    listen(s, s.panel, "click", async (event) => {
       const b = event.target.closest?.("[data-act]");
       if (!b) return;
       event.preventDefault();
       if (b.dataset.act === "close") close();
-      else if (b.dataset.act === "download") save(s);
+      else if (b.dataset.act === "download") await save(s);
       else if (b.dataset.act === "retry") run().catch((error) => console.error("clayjs: the reading copy could not be made", error));
     });
     listen(s, doc, "keydown", (event) => {
@@ -130,9 +130,9 @@ export function createFeature({ view = null, download = downloadHtml, fetch: fet
 
   // The one place a reading copy becomes a file. The download is handed the bytes that
   // were shown, never a second render, so what a person saw is what they get.
-  function save(s) {
+  async function save(s) {
     if (!s.ready || disposed) return { ok: false, code: "not-editing" };
-    const saved = download({ html: s.ready.html, name: s.ready.name });
+    const saved = await download({ html: s.ready.html, name: s.ready.name });
     close();
     return { ok: saved === true, downloaded: saved === true };
   }

package/src/page/features/export-markdown.js

@@ -83,10 +83,10 @@ export function createFeature({ view = null, download = downloadHtml } = {}) {
     s.panel.replaceChildren(...parts);
   }
 
-  function save() {
+  async function save() {
     const s = session;
     if (!s) return { ok: false, code: "no-export" };
-    if (download({ html: s.report.text, name: s.name, type: "text/markdown" })) {
+    if (await download({ html: s.report.text, name: s.name, type: "text/markdown" })) {
       close();
       view.focus?.();
       return { ok: true, downloaded: true };

package/src/page/recovery-ui.js

@@ -228,12 +228,12 @@ export function createRecoveryReview({
     button.setAttribute("aria-expanded", "false");
   };
 
-  const download = () => {
+  const download = async () => {
     const edits = [];
     for (const row of rows) edits.push({ id: row.id, kind: "recovered-page", name: row.message, yours: row.text, now: "", sentence: row.message });
     const composing = "Text typed while composing never reached the page.";
     for (const row of journaled) edits.push({ id: row.id, kind: "composing", name: "Typed text", yours: row.text, now: "", sentence: composing });
-    if (!downloadStored({ html: null, edits })) failure = "That download could not be made.";
+    if (!(await downloadStored({ html: null, edits }))) failure = "That download could not be made.";
     draw();
   };
 

package/src/page/save-states.js

@@ -67,14 +67,14 @@ function withoutPageTag(html) {
 // One complete, openable file: the capture the save would have sent, with the
 // page projection already applied by the live store's snapshot listener, and
 // without the page editor's merge state, which no saved file or download carries.
-function downloadPageCopy() {
+async function downloadPageCopy() {
   const { forSave } = captureForSaveAndComparison({ emitForSync: false });
-  return downloadHtml({ html: withoutPageTag(forSave), name: `${documentName()}.html` });
+  return await downloadHtml({ html: withoutPageTag(forSave), name: `${documentName()}.html` });
 }
 
 // A copy of the page captured earlier (captureForSaveAndComparison().forSave), as a download.
-function downloadSnapshot(forSave) {
-  return downloadHtml({ html: withoutPageTag(forSave), name: `${documentName()}.html` });
+async function downloadSnapshot(forSave) {
+  return await downloadHtml({ html: withoutPageTag(forSave), name: `${documentName()}.html` });
 }
 
 // The article's own plain text, never the editor's chrome: the capture carries

package/src/plugins/menu/actions.js

@@ -146,7 +146,7 @@ export function attachActions({ addItem, note, currentMode }) {
       if (typeof html === "string" && /^https?:$/.test(location.protocol)) {
         html = html.replace(/(^|[^\w./:-])\/_\/uploads\//g, `$1${location.origin}/_/uploads/`);
       }
-      if (typeof html !== "string" || !downloadHtml({ html, name: `${documentName()}.html` })) {
+      if (typeof html !== "string" || !(await downloadHtml({ html, name: `${documentName()}.html` }))) {
         note("Couldn't build the download. Try again.");
       }
     },

package/src/plugins/page.js

@@ -233,17 +233,17 @@ function stopEditing(inst) {
 
 // The tab's own page, when the store no longer holds it (another page replaced it, or the
 // room refused it): the saved document with the article rendered from the tab's document.
-function downloadTabCopy(inst) {
-  if (!inst.tabValue) return downloadPageCopy();
+async function downloadTabCopy(inst) {
+  if (!inst.tabValue) return await downloadPageCopy();
   const { forSave } = captureForSaveAndComparison({ emitForSync: false });
   const doc = new DOMParser().parseFromString(forSave, "text/html");
   const articles = doc.querySelectorAll(ARTICLE_SEL);
-  if (articles.length !== 1) return downloadPageCopy();
+  if (articles.length !== 1) return await downloadPageCopy();
   const rendered = pageCode.renderFromTags([JSON.stringify(inst.tabValue)]);
   articles[0].innerHTML = rendered.html;
   if (rendered.rev == null) articles[0].removeAttribute("data-rev");
   else articles[0].setAttribute("data-rev", rendered.rev);
-  return downloadSnapshot(`<!DOCTYPE html>\n${doc.documentElement.outerHTML}`);
+  return await downloadSnapshot(`<!DOCTYPE html>\n${doc.documentElement.outerHTML}`);
 }
 
 function stopWithNotice(inst, text, { reload = true } = {}) {

package/src/plugins/visitor-drafts/prompt.js

@@ -103,22 +103,19 @@ export async function mountPrompt({ memory, appName, link }) {
     });
   }
 
-  function downloadCurrent() {
+  async function downloadCurrent() {
     const getHTML = window.clay && window.clay.getHTML;
     if (typeof getHTML !== "function" || typeof URL === "undefined" || typeof URL.createObjectURL !== "function") return false;
     const segment = location.pathname.split("/").filter(Boolean).pop() || "index.html";
-    const objectUrl = URL.createObjectURL(new Blob([getHTML()], { type: "text/html" }));
-    const a = document.createElement("a");
-    a.href = objectUrl;
-    a.download = segment.replace(/\.html$/, ".htmlclay");
-    document.body.appendChild(a);
-    a.click();
-    a.remove();
-    setTimeout(() => URL.revokeObjectURL?.(objectUrl), 1000);
-    return true;
+    try {
+      const { downloadHtml } = await import("../../core/download.js");
+      return await downloadHtml({ html: getHTML(), name: segment.replace(/\.html$/, ".htmlclay") });
+    } catch {
+      return false;
+    }
   }
 
-  root.addEventListener("click", (e) => {
+  root.addEventListener("click", async (e) => {
     const t = e.target.closest("[data-hcp]");
     if (t) {
       const act = t.getAttribute("data-hcp");
@@ -133,7 +130,10 @@ export async function mountPrompt({ memory, appName, link }) {
     if (e.target.closest("[data-hcp-link]")) {
       if (root.getAttribute("data-hcp-reason") === "error") {
         e.preventDefault();
-        downloadCurrent();
+        if (!(await downloadCurrent())) {
+          root.querySelector(".hcp-body [data-hcp-for='error']").textContent = "The download could not be made. Keep this page open and try Download free again.";
+          return;
+        }
       }
       mem.downloaded = true; mem.shown = true; memory.save();
     }

package/src/plugins/wire.js

@@ -788,7 +788,9 @@ function send(payload, opts = {}) {
       // Accepted by the router and taken by nobody. Reporting this as an error
       // rather than a pending request is the difference between a UI that says
       // "start an agent" and one that spins forever.
-      finish(rec, "error", "no agent is attached to this file");
+      finish(rec, "error", rec.helper
+        ? `The local program "${rec.helper}" is not connected to this file.`
+        : "No program is connected to this file.");
     }
   };
 

package/dist/m/attrs/save-freeze-LWGF6XUN.js

@@ -1 +0,0 @@
-import{a}from"../c-OYRZ7XG2.js";import"../c-Q26MME6N.js";import"../c-ZWIOJGMT.js";import"../c-IJUK2GPW.js";import"../c-7MG5RU63.js";import"../c-XQXZAO7N.js";import"../c-S7LK4KUE.js";import"../c-VG5XIN4T.js";import"../c-2YYDMLNZ.js";import"../c-HA6INT6J.js";import"../c-DCFSEJZG.js";import"../c-WRBKEJD4.js";import"../c-VHNSBD2M.js";export{a as default};

package/dist/m/c-DCFSEJZG.js

@@ -1 +0,0 @@
-import{b as m,c as g,d as c,e as f,f as v}from"./c-WRBKEJD4.js";var w=['[src^="chrome-extension://"]','[href^="chrome-extension://"]','[src^="moz-extension://"]','[href^="moz-extension://"]','[src^="safari-web-extension://"]','[href^="safari-web-extension://"]','[id="1p-menu-live-region"]',"com-1password-button","com-1password-menu","com-1password-notification","grammarly-extension","grammarly-desktop-integration","lt-div","lt-card","lt-toolbar","lt-highlighter","[data-lastpass-root]","[data-lastpass-icon-root]","[data-dashlane-shadowhost]","[data-klarna-extension]",'[class*="klarna-extension"]',".skiptranslate","#goog-gt-tt",".goog-te-banner-frame",".goog-te-balloon-frame","style.darkreader","style[data-darkreader-mode]","style[data-darkreader-scheme]","#loom-companion-mv3","loom-container","[ext-id]"],N=["data-grammarly","data-lt","data-1p","data-com-onepassword","data-lastpass","data-lp","data-kwimpala","data-bitwarden","data-bw","data-dashlane","data-np","data-protonpass","data-proton-pass","data-keeper","data-rf","data-roboform","data-honey","data-rakuten","data-capital-one","data-wikibuy","data-klarna","data-darkreader","data-evernote","data-pocket","data-pin"],u=w.join(","),_=new RegExp("^(?:"+N.join("|")+")(?:-|$)");function X(e){if(!(!e||!e.querySelectorAll))try{for(let a of e.querySelectorAll(u))a.remove();let t=a=>{let r=a.attributes;if(!r)return;let n=null;for(let s=0;s<r.length;s++){let o=r[s].name;_.test(o.toLowerCase())&&(n||(n=[])).push(o)}if(n)for(let s of n)a.removeAttribute(s)};t(e);for(let a of e.querySelectorAll("*"))t(a)}catch(t){typeof console<"u"&&console.warn("[clay] stripExtensionNoise skipped:",t)}}var l={FULL:"full",FROZEN:"frozen",NONE:"none"},k=["no-save","no-trigger-autosave","no-dirty","no-undo","no-watch","no-data","freeze","editor-ui","live"],A=[...m],i=g;function z(e,t){let a=new Set((e.getAttribute("clay")||"").trim().split(/\s+/).filter(Boolean));a.has(t)||(a.add(t),e.setAttribute("clay",Array.from(a).join(" ")))}var T=`${f("save")}, [save-remove]`,h='[clay~="freeze"], [freeze], [save-freeze]',y='[clay~="no-save"], [clay~="no-trigger-autosave"], [clay~="no-dirty"], [clay~="freeze"], [clay~="no-watch"], [no-save], [save-remove], [no-trigger-autosave], [no-dirty], [save-ignore], [freeze], [save-freeze], [no-watch], [mutations-ignore], [clay~="live"]',x='[clay~="no-trigger-autosave"], [no-trigger-autosave]',j='[clay~="live"]',R='[clay~="no-dirty"], [no-dirty], [save-ignore]',S='[clay~="no-save"], [clay~="no-dirty"], [clay~="freeze"], [clay~="no-watch"], [no-save], [save-remove], [no-dirty], [save-ignore], [freeze], [save-freeze], [no-watch], [mutations-ignore], [clay~="live"]',p=`${f("snapshot")}, [snapshot-remove]`,O=f("data");function I(e){let t=E(e);return!!(t&&t.closest&&t.closest(p))}function b(e){return v(e,"data")}var d={full:0,frozen:1,none:2},C=["full","frozen","none"];function E(e){return e&&e.nodeType!==1?e.parentElement:e}function L(e){let t=E(e);if(t&&t.closest&&t.closest(u))return{watched:!1,autosaveTriggered:!1,dirtyTracked:!1,undoable:!1,persist:l.FULL,extension:!0};let a=!0,r=!0,n=!1,s=!1,o=0;for(;t&&t.nodeType===1;)t.hasAttribute&&(c(t,"no-watch")&&(a=!1),i(t,"no-trigger-autosave")&&(n=!0),i(t,"no-dirty")&&(n=!0,s=!0),i(t,"live")&&(n=!0,s=!0,r=!1),c(t,"no-undo")&&(r=!1),c(t,"no-save")&&(o=Math.max(o,d.none)),i(t,"freeze")&&(o=Math.max(o,d.frozen)),i(t,"mutations-ignore")&&(a=!1),i(t,"save-remove")&&(o=Math.max(o,d.none),r=!1),i(t,"save-ignore")&&(n=!0,s=!0,r=!1),i(t,"save-freeze")&&(o=Math.max(o,d.frozen),r=!1)),t=t.parentElement;return a||(n=!0,r=!1,s=!0),o>0&&(n=!0,s=!0),{watched:a,autosaveTriggered:!n,dirtyTracked:!s,undoable:r,persist:C[o],extension:!1}}function P(e){let t=E(e);if(t&&t.closest&&t.closest(u))return!0;for(;t&&t.nodeType===1;){if(t.hasAttribute&&(c(t,"no-watch")||i(t,"mutations-ignore")))return!0;t=t.parentElement}return!1}function F(e,t){return{watched:e.watched&&t.watched,autosaveTriggered:e.autosaveTriggered&&t.autosaveTriggered,dirtyTracked:e.dirtyTracked&&t.dirtyTracked,undoable:e.undoable&&t.undoable,persist:d[e.persist]>=d[t.persist]?e.persist:t.persist,extension:e.extension||t.extension}}var D={"no-watch":e=>!e.watched,"mutations-ignore":e=>!e.watched,"no-save":e=>e.persist===l.NONE,"save-remove":e=>e.persist===l.NONE,freeze:e=>e.persist===l.FROZEN,"save-freeze":e=>e.persist===l.FROZEN,"no-trigger-autosave":e=>!e.autosaveTriggered,"no-dirty":e=>!e.dirtyTracked,"save-ignore":e=>!e.dirtyTracked,"no-undo":e=>!e.undoable};function M(e,t,a){if(e.extension)return!0;if(a&&a.length)return a.some(r=>D[r]?.(e)||!1);switch(t){case"observed":return!e.watched;case"autosave":return!e.autosaveTriggered;case"dirty":return!e.dirtyTracked;case"undo":return!e.undoable;default:return!e.watched||!e.autosaveTriggered||e.persist!==l.FULL}}var K={resolveRegionPolicy:L,isInert:P,isSnapshotRemoved:I,isDataExcluded:b,skipForPolicy:M,strictestPolicy:F,addRegionToken:z,PERSIST:l,TOKENS:A,REGION_ATTRS:k,STRIP_FROM_SAVE:T,STRIP_FROM_COMPARISON:y,STRIP_FROM_DIRTY_CHECK:S,NO_TRIGGER_AUTOSAVE_SELECTOR:x,NO_DIRTY_SELECTOR:R,SNAPSHOT_REMOVE_SELECTOR:p,NO_DATA_SELECTOR:O,FREEZE_SELECTOR:h,selectors:{stripFromSave:T,stripFromComparison:y,stripFromDirtyCheck:S,noTriggerAutosave:x,noDirty:R,snapshotRemove:p,noData:O,freeze:h}},q=K;export{u as a,_ as b,X as c,l as d,k as e,A as f,z as g,T as h,h as i,y as j,x as k,j as l,R as m,S as n,p as o,O as p,I as q,b as r,L as s,P as t,F as u,M as v,K as w,q as x};

package/dist/m/c-EXEDYU4H.js

@@ -1 +0,0 @@
-var o={table:{types:["table"],views:["table","table_cell"],module:"page/features/table.js",load:()=>import("./c-JK3PHE7J.js")},board:{types:["board"],module:"page/features/board.js",load:()=>import("./c-ZRUQ5FSU.js")},chart:{types:["chart"],views:["chart"],module:"page/features/chart.js",load:()=>import("./c-L6FLIUXP.js")},checklist:{types:[],views:[],match:e=>e.type.name==="list_item"&&e.attrs.kind==="check",module:"page/features/checklist.js",load:()=>import("./c-HXPHZN7Q.js")},code:{types:["code_block"],module:"page/features/code.js",load:()=>import("./c-RRZJWFLE.js")},toc:{types:["toc"],module:"page/features/toc.js",load:()=>import("./c-GWNC3UGL.js")},titleIcon:{types:[],views:["heading"],match:e=>e.attrs.pageIcon!=null||e.attrs.pageCoverSrc!=null,module:"page/features/title-icon.js",load:()=>import("./c-O4JMKN6U.js")},media:{types:["image","file"],module:"page/features/media.js",load:()=>import("./c-DHUCEMXE.js")},tool:{types:["tool"],module:"page/features/tool.js",boot:["page/tools.js","page/tool-data.js"],load:()=>import("./c-WKNRJX3C.js")}},r=e=>Object.keys(o).find(t=>o[t].types.includes(e))??null,s=e=>{for(let t of Object.keys(o)){let a=o[t];if(a.match?a.match(e):a.types.includes(e.type.name))return t}return null},l={mentions:{module:"page/features/mentions.js",load:()=>import("./c-MIKZEG5I.js")},dates:{module:"page/features/dates.js",load:()=>import("./c-FOOE4GML.js")},emoji:{module:"page/features/emoji.js",load:()=>import("./c-UXFUJEZO.js")},titleIcon:{module:"page/features/title-icon.js",load:()=>import("./c-O4JMKN6U.js")},titleCover:{module:"page/features/title-cover.js",load:()=>import("./c-QINHDETP.js")},exportHtml:{module:"page/features/export-html.js",load:()=>import("./c-DKLS74XB.js")},importMarkdown:{module:"page/features/import-markdown.js",load:()=>import("./c-AXGY2WTB.js")},exportMarkdown:{module:"page/features/export-markdown.js",load:()=>import("./c-ERQSNR6K.js")}};export{o as a,r as b,s as c,l as d};

package/dist/m/c-GRXHHFPO.js

@@ -1 +0,0 @@
-import{a,b,c}from"./c-UY4QX42B.js";import"./c-L7JL5TL3.js";import"./c-BJ7YQ5QZ.js";import"./c-4JZDZFF6.js";import"./c-VAK7SG37.js";import"./c-MHI3GYKF.js";import"./c-NUHP2XDB.js";import"./c-DCFSEJZG.js";import"./c-WRBKEJD4.js";import"./c-VHNSBD2M.js";export{c as default,b as dismissPersistent,a as toastPersistent};

package/dist/m/c-HT2DKBV2.js

@@ -1 +0,0 @@
-import{a as d}from"./c-WNTYKCDG.js";import"./c-PZ4XEPUP.js";import{g as w,l as v,n as x,q as s}from"./c-BJ7YQ5QZ.js";import{a as p}from"./c-4JZDZFF6.js";import{e as f}from"./c-VAK7SG37.js";import{b as m}from"./c-MHI3GYKF.js";import"./c-MCOOHCSG.js";import{b as c}from"./c-NUHP2XDB.js";import{f as l}from"./c-3O7OBDCM.js";import"./c-BPF2NSPV.js";import"./c-P7KNDG34.js";import"./c-CYWLPPUS.js";import"./c-N7JPUPGC.js";import"./c-7MG5RU63.js";import"./c-XQXZAO7N.js";import"./c-S7LK4KUE.js";import"./c-VG5XIN4T.js";import"./c-2YYDMLNZ.js";import"./c-HA6INT6J.js";import"./c-DCFSEJZG.js";import"./c-WRBKEJD4.js";import"./c-VHNSBD2M.js";var $="Download a copy, then reduce its size; saving still works.",b="Download a copy to keep your work.",t=null,a=null,i=null,r=null;function h(e){return typeof e!="number"||!Number.isFinite(e)||e<0?"an unknown size":e>=1024*1024?`${(e/(1024*1024)).toFixed(1)} MB`:e>=1024?`${Math.max(1,Math.round(e/1024))} KB`:`${e} bytes`}function z({bytes:e,maxBytes:n,state:S}){let u=`At the last save attempt: ${h(e)} of ${h(n)}.`;return S==="over"?`This host can't save a file this size. ${u} ${b}`:`This file is getting large. ${u} ${$}`}function o(){if(!t)return;let e=window.visualViewport,n=e?Math.max(0,window.innerHeight-e.height-e.offsetTop):0;c(t,"bottom",`calc(${16+n}px + env(safe-area-inset-bottom,0px))`)}function y(){d({})}function A(){t=v("div",["position:fixed","left:50%","transform:translateX(-50%)","z-index:2147483000","display:flex","align-items:center","gap:10px 12px","width:max-content","max-width:calc(100vw - 24px)","flex-wrap:wrap","padding:8px 8px 8px 14px","text-align:left",`color-scheme:${p()}`]),t.setAttribute("clay","editor-ui"),t.setAttribute("data-clay-save-size",""),t.setAttribute("role","status"),a=x("span",[],""),i=w("Download my copy",{small:!0,onClick:y}),s(i,!1,"inline-flex"),t.append(a,i),document.body.appendChild(t),o(),window.visualViewport?.addEventListener("resize",o),window.visualViewport?.addEventListener("scroll",o)}function M(e){t||A(),a.textContent=z(e),s(i,e.state==="over","inline-flex"),o(),m(t,{background:f.surface})}function E(){t&&(window.visualViewport?.removeEventListener("resize",o),window.visualViewport?.removeEventListener("scroll",o),t.remove(),t=null,a=null,i=null)}function g(e){let n=e?.detail;n&&(n.state==="near"||n.state==="over"?M(n):E())}function k(){l||L()}function N(e){l&&(r||=new AbortController,document.addEventListener("clay:save-size",g,{signal:r.signal}),document.addEventListener("clay:modechange",k,{signal:r.signal}),e?.type==="clay:save-size"&&g(e))}function L(){r?.abort(),r=null,E()}export{N as start,L as stop};

package/dist/m/c-MCOOHCSG.js

@@ -1 +0,0 @@
-function r(t=location.pathname){let o=t.split("/").filter(Boolean).pop();if(!o)return t.endsWith("/")||t===""?"index":"page";let l=o;try{l=decodeURIComponent(o)}catch{}return l.replace(/\.(html?|htmlclay)$/i,"")||"page"}function c({html:t,name:o,type:l="text/html"}){let n=null;try{n=URL.createObjectURL(new Blob([t],{type:l}));let e=document.createElement("a");return e.setAttribute("clay","no-save no-watch no-snapshot"),e.href=n,e.download=o,e.style.setProperty("display","none","important"),document.body.appendChild(e),e.click(),e.remove(),setTimeout(()=>URL.revokeObjectURL(n),4e4),!0}catch(e){return console.error("clayjs: could not build the download",e),n&&URL.revokeObjectURL(n),!1}}export{r as a,c as b};

package/dist/m/c-MMXKAX2W.js

@@ -1 +0,0 @@
-import{a as b,b as c,c as d,d as e,e as f}from"./c-FCNAO2MI.js";import{g as a}from"./c-4FJTBE6I.js";import"./c-EXKHPOVC.js";import"./c-L5VFATT6.js";import"./c-CQQDL6O4.js";import"./c-ZGDYHKG3.js";import"./c-W4JCVLAB.js";import"./c-7K4SCQB7.js";import"./c-WMRJKQ2V.js";import"./c-AIWN4QN4.js";import"./c-QIXT3Q7C.js";import"./c-WCXLG3MV.js";import"./c-57XDY6HC.js";import"./c-I2SCCUEW.js";import"./c-VHNSBD2M.js";export{e as ChartView,d as chartFromSlash,a as chartTables,b as insertChartAfterTable,f as refreshCharts,c as tableLabel};