From 54073d3d5d347f82357253400082b15440938a4b Mon Sep 17 00:00:00 2001
From: jeeves <308196396+cb-jeeves@users.noreply.github.com>
Date: Wed, 2 Sep 2026 06:04:06 +0000
Subject: [PATCH 01/11] chore: start tool-url-scheme-warning


From cc78a85b78779d0c15d3fa86e1814c1f10d8ec39 Mon Sep 17 00:00:00 2001
From: jeeves <308196396+cb-jeeves@users.noreply.github.com>
Date: Wed, 2 Sep 2026 08:02:08 +0000
Subject: [PATCH 02/11] feat(tools): warn on schemeless tool URL templates and
 report dropped tabs honestly

Closes the silent "Opened 0 tabs" path from #157. A template that does not
start with http:// or https:// now gets an inline warning under the URL field
in ToolEditor, in the same msg/msgWarn style the Hotkeys rows use, with an
"add https://" link that prefixes the scheme, trims leading whitespace and
leaves the caret after the prefix. In Tray.openTabs, when the main process
opened fewer tabs than were offered, the toast reads "Opened N of M tabs;
only http and https links can open" instead of a plain success count.

Decisions:
- The scheme check lives in src/shared/tools.ts as hasWebScheme (case-
  insensitive, trimmed) so the editor and any future caller agree; the
  main-process allowlist in open-external.ts is untouched and remains the
  enforcement point, per the issue.
- Saving is still allowed with a schemeless template; the warning informs
  rather than blocks, matching the Hotkeys reserved-combination pattern.
- The tray message is aggregate per click (N of M across all URLs offered),
  since openExternalUrls only returns a count.

Files: src/shared/tools.ts, ToolEditor.tsx, Tray.tsx, plus tests for each.
---
 .../settings/tools/ToolEditor.test.tsx        | 37 +++++++++++++++++++
 .../components/settings/tools/ToolEditor.tsx  | 24 +++++++++++-
 .../src/components/tray/Tray.test.tsx         | 21 +++++++++++
 src/renderer/src/components/tray/Tray.tsx     | 13 ++++++-
 src/shared/tools.test.ts                      | 20 +++++++++-
 src/shared/tools.ts                           | 11 ++++++
 6 files changed, 122 insertions(+), 4 deletions(-)

diff --git a/src/renderer/src/components/settings/tools/ToolEditor.test.tsx b/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
index c4c90ad4..89d9826a 100644
--- a/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
+++ b/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
@@ -127,6 +127,43 @@ describe('ToolEditor', () => {
     expect(screen.getByTestId('readiness')).toHaveTextContent('no tokens');
     expect(screen.getByTestId('tool-preview-caption')).toHaveTextContent('Would open 1 tab');
   });
+
+  it('warns beneath the URL field when the template has no http or https scheme and prefixes https:// on click', async () => {
+    await renderTools(
+      <ToolEditor
+        initial={{ name: 'Lookup', url: 'example.com/{email}' }}
+        onSave={onSave}
+        onCancel={onCancel}
+      />
+    );
+    const warning = screen.getByTestId('tool-url-scheme');
+    expect(warning).toHaveTextContent('only http and https links can open');
+    expect(screen.getByTestId('tool-preview-caption')).toHaveTextContent('Would open 1 tab');
+    fireEvent.click(screen.getByTestId('tool-url-scheme-fix'));
+    expect(screen.getByTestId('tool-url')).toHaveValue('https://example.com/{email}');
+    expect(screen.queryByTestId('tool-url-scheme')).not.toBeInTheDocument();
+    fireEvent.change(screen.getByTestId('tool-url'), { target: { value: 'ftp://x/{email}' } });
+    expect(screen.getByTestId('tool-url-scheme')).toBeInTheDocument();
+    fireEvent.change(screen.getByTestId('tool-url'), { target: { value: 'HTTP://x/{email}' } });
+    expect(screen.queryByTestId('tool-url-scheme')).not.toBeInTheDocument();
+    fireEvent.change(screen.getByTestId('tool-url'), { target: { value: '' } });
+    expect(screen.queryByTestId('tool-url-scheme')).not.toBeInTheDocument();
+  });
+
+  it('the https:// fix strips leading whitespace and leaves the caret after the prefix', async () => {
+    await renderTools(
+      <ToolEditor
+        initial={{ name: 'x', url: '  vt.example/{ip}' }}
+        onSave={onSave}
+        onCancel={onCancel}
+      />
+    );
+    fireEvent.click(screen.getByTestId('tool-url-scheme-fix'));
+    const url = screen.getByTestId('tool-url') as HTMLInputElement;
+    expect(url).toHaveValue('https://vt.example/{ip}');
+    expect(url.selectionStart).toBe('https://'.length);
+    expect(document.activeElement).toBe(url);
+  });
 });
 
 describe('TemplateEditor', () => {
diff --git a/src/renderer/src/components/settings/tools/ToolEditor.tsx b/src/renderer/src/components/settings/tools/ToolEditor.tsx
index 4874f398..11f4a420 100644
--- a/src/renderer/src/components/settings/tools/ToolEditor.tsx
+++ b/src/renderer/src/components/settings/tools/ToolEditor.tsx
@@ -1,6 +1,6 @@
 import classNames from 'classnames';
 import { useEffect, useRef, useState } from 'react';
-import { buildToolUrls } from '../../../../../shared/tools';
+import { buildToolUrls, hasWebScheme } from '../../../../../shared/tools';
 import { Readiness } from './Readiness';
 import { TokenPicker, insertAtCaret } from './TokenPicker';
 import { TokenText } from './TokenText';
@@ -24,6 +24,7 @@ interface ToolEditorProps {
 }
 
 const PREVIEW_LIMIT = 4;
+const WEB_PREFIX = 'https://';
 
 /**
  * The tool editor (spec 14.3): name, URL, token picker, readiness line, a preview titled
@@ -44,6 +45,7 @@ export function ToolEditor({ initial, onSave, onCancel }: ToolEditorProps) {
   const count = buildToolUrls({ url }, values).length;
   const resolved = resolveToolUrls(url, values);
   const needed = groupsNeeded({ url });
+  const schemeless = url.trim().length > 0 && !hasWebScheme(url);
 
   const save = async () => {
     setSaving(true);
@@ -79,6 +81,11 @@ export function ToolEditor({ initial, onSave, onCancel }: ToolEditorProps) {
     setCaret(next.caret);
   };
 
+  const addScheme = () => {
+    setUrl(WEB_PREFIX + url.trimStart());
+    setCaret(WEB_PREFIX.length);
+  };
+
   return (
     <div className={styles.editor} onKeyDown={trapTab} data-testid="tool-editor">
       <label className={w.field} htmlFor="tool-name">
@@ -107,6 +114,21 @@ export function ToolEditor({ initial, onSave, onCancel }: ToolEditorProps) {
         onChange={(e) => setUrl(e.target.value)}
         data-testid="tool-url"
       />
+      {schemeless && (
+        <div className={styles.meta}>
+          <span className={classNames(w.msg, w.msgWarn)} data-testid="tool-url-scheme">
+            only http and https links can open; this template starts with neither
+          </span>
+          <button
+            type="button"
+            className={w.link}
+            onClick={addScheme}
+            data-testid="tool-url-scheme-fix"
+          >
+            add https://
+          </button>
+        </div>
+      )}
       <TokenPicker onInsert={insert} />
       <div className={styles.meta}>
         <Readiness item={{ url }} terms={config.terms} scan={scan} />
diff --git a/src/renderer/src/components/tray/Tray.test.tsx b/src/renderer/src/components/tray/Tray.test.tsx
index 2732eb53..d6e5ab62 100644
--- a/src/renderer/src/components/tray/Tray.test.tsx
+++ b/src/renderer/src/components/tray/Tray.test.tsx
@@ -175,6 +175,27 @@ describe('openTabs', () => {
     errSpy.mockRestore();
   });
 
+  it('names the cause when fewer tabs opened than were offered', async () => {
+    const toast = vi.fn();
+    const mock = window.api.openExternalUrls as unknown as ReturnType<typeof vi.fn>;
+    mock.mockResolvedValue(2);
+    await openTabs(['https://a', 'example.com/b', 'https://c'], toast);
+    expect(toast).toHaveBeenCalledWith('Opened 2 of 3 tabs; only http and https links can open', [
+      'https://a',
+      'example.com/b',
+      'https://c',
+    ]);
+    mock.mockResolvedValue(0);
+    await openTabs(['example.com/b'], toast);
+    expect(toast).toHaveBeenLastCalledWith(
+      'Opened 0 of 1 tab; only http and https links can open',
+      ['example.com/b']
+    );
+    mock.mockResolvedValue(1);
+    await openTabs(['https://a'], toast);
+    expect(toast).toHaveBeenLastCalledWith('Opened 1 tab', ['https://a']);
+  });
+
   it('tabCount pluralises', () => {
     expect(tabCount(1)).toBe('1 tab');
     expect(tabCount(0)).toBe('0 tabs');
diff --git a/src/renderer/src/components/tray/Tray.tsx b/src/renderer/src/components/tray/Tray.tsx
index cb3c1fa3..24477c5c 100644
--- a/src/renderer/src/components/tray/Tray.tsx
+++ b/src/renderer/src/components/tray/Tray.tsx
@@ -11,13 +11,22 @@ import styles from './Tray.module.css';
 
 /**
  * Open the tabs a tool or the tray produces through the main process, which accepts http
- * and https only. Every control states its count before it is clicked (spec 6).
+ * and https only. Every control states its count before it is clicked (spec 6). When the
+ * main process dropped some, the toast says how many of the offered count opened and why,
+ * rather than reporting the smaller number as a plain success.
  */
 export async function openTabs(urls: string[], toast: ToastFn): Promise<void> {
   if (urls.length === 0) return;
   try {
     const opened = await window.api.openExternalUrls(urls);
-    toast(`Opened ${opened} ${opened === 1 ? 'tab' : 'tabs'}`, urls);
+    if (opened < urls.length) {
+      toast(
+        `Opened ${opened} of ${tabCount(urls.length)}; only http and https links can open`,
+        urls
+      );
+    } else {
+      toast(`Opened ${tabCount(opened)}`, urls);
+    }
   } catch (error) {
     console.error('Failed to open tabs:', error);
     toast('Could not open the tabs', String(error));
diff --git a/src/shared/tools.test.ts b/src/shared/tools.test.ts
index a32f7cc1..8ac555b4 100644
--- a/src/shared/tools.test.ts
+++ b/src/shared/tools.test.ts
@@ -1,5 +1,5 @@
 import { describe, it, expect } from 'vitest';
-import { toolTokens, toolReady, buildToolUrls } from './tools';
+import { toolTokens, toolReady, buildToolUrls, hasWebScheme } from './tools';
 
 const tool = (url: string) => ({ url });
 
@@ -174,3 +174,21 @@ describe('buildToolUrls', () => {
     expect(urls).toHaveLength(2);
   });
 });
+
+describe('hasWebScheme', () => {
+  it('accepts http and https in any case, ignoring surrounding whitespace', () => {
+    expect(hasWebScheme('https://example.com/{email}')).toBe(true);
+    expect(hasWebScheme('http://example.com')).toBe(true);
+    expect(hasWebScheme('  HTTPS://example.com ')).toBe(true);
+  });
+
+  it('rejects a schemeless template and every other scheme', () => {
+    expect(hasWebScheme('example.com/{email}')).toBe(false);
+    expect(hasWebScheme('www.example.com')).toBe(false);
+    expect(hasWebScheme('ftp://example.com')).toBe(false);
+    expect(hasWebScheme('file:///etc/hosts')).toBe(false);
+    expect(hasWebScheme('javascript:alert(1)')).toBe(false);
+    expect(hasWebScheme('https:/example.com')).toBe(false);
+    expect(hasWebScheme('')).toBe(false);
+  });
+});
diff --git a/src/shared/tools.ts b/src/shared/tools.ts
index c7086905..05fcc81d 100644
--- a/src/shared/tools.ts
+++ b/src/shared/tools.ts
@@ -87,3 +87,14 @@ export function buildToolUrls(tool: { url: string }, pins: PinsByGroup): string[
 
   return urls.filter((url, index) => urls.indexOf(url) === index);
 }
+
+const WEB_SCHEME = /^https?:\/\//i;
+
+/**
+ * Whether a tool URL template starts with http:// or https://. The main process opens
+ * nothing else (open-external.ts), so the editor warns on anything that fails this and the
+ * tray explains when fewer tabs opened than it offered.
+ */
+export function hasWebScheme(url: string): boolean {
+  return WEB_SCHEME.test(url.trim());
+}

From e9d849243bd0d8e7885b5d250124be99fee866ab Mon Sep 17 00:00:00 2001
From: Jeeves <jeeves@users.noreply.github.com>
Date: Wed, 2 Sep 2026 08:03:44 +0000
Subject: [PATCH 03/11] docs(readme): note that tool URLs must use http or
 https

---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index 84bf51bb..a7d52ce8 100644
--- a/README.md
+++ b/README.md
@@ -78,6 +78,7 @@ pins — there the chips are in the tab order, so Tab to one and press Enter or
 leaving the keyboard.
 
 - **Multi-token URLs** — drop values into any link, e.g. `https://tool.com/{ip}/{email}`
+- **Web links only** — a tool URL must start with `http://` or `https://`; the editor warns when it does not and offers a one-click fix
 - **Open in bulk** — pin several values; the tray states how many tabs it will open before you click
 - **Only what fits** — a tool is offered only when every token in its URL has a pinned value
 - **Templates &amp; sharing** — ready templates copy their filled-in text to the clipboard, and configs export / import for your team

From a9f54d20589908e904d7d7b3fbd675af12929f81 Mon Sep 17 00:00:00 2001
From: jeeves <308196396+cb-jeeves@users.noreply.github.com>
Date: Wed, 2 Sep 2026 08:07:50 +0000
Subject: [PATCH 04/11] chore(release): v2.3.0 (minor)

---
 package-lock.json | 4 ++--
 package.json      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 2e02a222..2c6708e2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "clipless",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "clipless",
-      "version": "2.2.0",
+      "version": "2.3.0",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index 9290f459..709a917a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "clipless",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "A Clipboard manager for busy people",
   "main": "./out/main/index.js",
   "author": "Daniel Essig",

From 0370cf17f6c1110f2eaf43d4995981f9aeacb890 Mon Sep 17 00:00:00 2001
From: Dan Essig <2682437+dantheuber@users.noreply.github.com>
Date: Wed, 2 Sep 2026 08:20:58 +0000
Subject: [PATCH 05/11] fix(tools): replace an existing scheme when the editor
 adds https://

The one-click fix prepended https:// to whatever the template held, so
ftp://host became https://ftp://host and mailto:a@b became
https://mailto:a@b, both of which silence the warning while pointing at
the wrong host. Strip a leading scheme first. A colon followed by a digit
is left alone so a schemeless host:port keeps its port.
---
 .../components/settings/tools/ToolEditor.test.tsx | 15 +++++++++++++++
 .../src/components/settings/tools/ToolEditor.tsx  |  7 ++++++-
 2 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/src/renderer/src/components/settings/tools/ToolEditor.test.tsx b/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
index 89d9826a..7693e8c8 100644
--- a/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
+++ b/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
@@ -164,6 +164,21 @@ describe('ToolEditor', () => {
     expect(url.selectionStart).toBe('https://'.length);
     expect(document.activeElement).toBe(url);
   });
+
+  it.each([
+    ['ftp://vt.internal/{ip}', 'https://vt.internal/{ip}'],
+    ['mailto:a@b.com', 'https://a@b.com'],
+    ['file:///x/{ip}', 'https://x/{ip}'],
+    ['https:/example.com/{ip}', 'https://example.com/{ip}'],
+    ['localhost:3000/{ip}', 'https://localhost:3000/{ip}'],
+  ])('the https:// fix replaces an existing scheme: %s', async (initial, expected) => {
+    await renderTools(
+      <ToolEditor initial={{ name: 'x', url: initial }} onSave={onSave} onCancel={onCancel} />
+    );
+    fireEvent.click(screen.getByTestId('tool-url-scheme-fix'));
+    expect(screen.getByTestId('tool-url')).toHaveValue(expected);
+    expect(screen.queryByTestId('tool-url-scheme')).not.toBeInTheDocument();
+  });
 });
 
 describe('TemplateEditor', () => {
diff --git a/src/renderer/src/components/settings/tools/ToolEditor.tsx b/src/renderer/src/components/settings/tools/ToolEditor.tsx
index 11f4a420..830dc990 100644
--- a/src/renderer/src/components/settings/tools/ToolEditor.tsx
+++ b/src/renderer/src/components/settings/tools/ToolEditor.tsx
@@ -25,6 +25,11 @@ interface ToolEditorProps {
 
 const PREVIEW_LIMIT = 4;
 const WEB_PREFIX = 'https://';
+/**
+ * A leading scheme to drop before prefixing https://. The digit lookahead keeps a
+ * schemeless host:port ("localhost:3000/{ip}") intact, since no scheme is followed by a digit.
+ */
+const LEADING_SCHEME = /^[a-z][a-z0-9+.-]*:(?!\d)\/*/i;
 
 /**
  * The tool editor (spec 14.3): name, URL, token picker, readiness line, a preview titled
@@ -82,7 +87,7 @@ export function ToolEditor({ initial, onSave, onCancel }: ToolEditorProps) {
   };
 
   const addScheme = () => {
-    setUrl(WEB_PREFIX + url.trimStart());
+    setUrl(WEB_PREFIX + url.trimStart().replace(LEADING_SCHEME, ''));
     setCaret(WEB_PREFIX.length);
   };
 

From 83cb8c9350ca10cfe4a5bdb02876a26493083ef7 Mon Sep 17 00:00:00 2001
From: Dan Essig <2682437+dantheuber@users.noreply.github.com>
Date: Wed, 2 Sep 2026 08:45:00 +0000
Subject: [PATCH 06/11] refactor(tools): move the https:// scheme rewrite
 beside hasWebScheme

The scheme-stripping regex has to agree with hasWebScheme, so it now lives
next to it in src/shared/tools.ts as withWebScheme, with a plain unit
table there. The editor keeps one test proving the fix button is wired up.
---
 .../settings/tools/ToolEditor.test.tsx         | 15 ---------------
 .../components/settings/tools/ToolEditor.tsx   | 12 +++---------
 src/shared/tools.test.ts                       | 18 +++++++++++++++++-
 src/shared/tools.ts                            | 15 +++++++++++++++
 4 files changed, 35 insertions(+), 25 deletions(-)

diff --git a/src/renderer/src/components/settings/tools/ToolEditor.test.tsx b/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
index 7693e8c8..89d9826a 100644
--- a/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
+++ b/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
@@ -164,21 +164,6 @@ describe('ToolEditor', () => {
     expect(url.selectionStart).toBe('https://'.length);
     expect(document.activeElement).toBe(url);
   });
-
-  it.each([
-    ['ftp://vt.internal/{ip}', 'https://vt.internal/{ip}'],
-    ['mailto:a@b.com', 'https://a@b.com'],
-    ['file:///x/{ip}', 'https://x/{ip}'],
-    ['https:/example.com/{ip}', 'https://example.com/{ip}'],
-    ['localhost:3000/{ip}', 'https://localhost:3000/{ip}'],
-  ])('the https:// fix replaces an existing scheme: %s', async (initial, expected) => {
-    await renderTools(
-      <ToolEditor initial={{ name: 'x', url: initial }} onSave={onSave} onCancel={onCancel} />
-    );
-    fireEvent.click(screen.getByTestId('tool-url-scheme-fix'));
-    expect(screen.getByTestId('tool-url')).toHaveValue(expected);
-    expect(screen.queryByTestId('tool-url-scheme')).not.toBeInTheDocument();
-  });
 });
 
 describe('TemplateEditor', () => {
diff --git a/src/renderer/src/components/settings/tools/ToolEditor.tsx b/src/renderer/src/components/settings/tools/ToolEditor.tsx
index 830dc990..ea7642eb 100644
--- a/src/renderer/src/components/settings/tools/ToolEditor.tsx
+++ b/src/renderer/src/components/settings/tools/ToolEditor.tsx
@@ -1,6 +1,6 @@
 import classNames from 'classnames';
 import { useEffect, useRef, useState } from 'react';
-import { buildToolUrls, hasWebScheme } from '../../../../../shared/tools';
+import { buildToolUrls, hasWebScheme, withWebScheme } from '../../../../../shared/tools';
 import { Readiness } from './Readiness';
 import { TokenPicker, insertAtCaret } from './TokenPicker';
 import { TokenText } from './TokenText';
@@ -24,12 +24,6 @@ interface ToolEditorProps {
 }
 
 const PREVIEW_LIMIT = 4;
-const WEB_PREFIX = 'https://';
-/**
- * A leading scheme to drop before prefixing https://. The digit lookahead keeps a
- * schemeless host:port ("localhost:3000/{ip}") intact, since no scheme is followed by a digit.
- */
-const LEADING_SCHEME = /^[a-z][a-z0-9+.-]*:(?!\d)\/*/i;
 
 /**
  * The tool editor (spec 14.3): name, URL, token picker, readiness line, a preview titled
@@ -87,8 +81,8 @@ export function ToolEditor({ initial, onSave, onCancel }: ToolEditorProps) {
   };
 
   const addScheme = () => {
-    setUrl(WEB_PREFIX + url.trimStart().replace(LEADING_SCHEME, ''));
-    setCaret(WEB_PREFIX.length);
+    setUrl(withWebScheme(url));
+    setCaret('https://'.length);
   };
 
   return (
diff --git a/src/shared/tools.test.ts b/src/shared/tools.test.ts
index 8ac555b4..c8eb2a1c 100644
--- a/src/shared/tools.test.ts
+++ b/src/shared/tools.test.ts
@@ -1,5 +1,5 @@
 import { describe, it, expect } from 'vitest';
-import { toolTokens, toolReady, buildToolUrls, hasWebScheme } from './tools';
+import { toolTokens, toolReady, buildToolUrls, hasWebScheme, withWebScheme } from './tools';
 
 const tool = (url: string) => ({ url });
 
@@ -192,3 +192,19 @@ describe('hasWebScheme', () => {
     expect(hasWebScheme('')).toBe(false);
   });
 });
+
+describe('withWebScheme', () => {
+  it.each([
+    ['example.com/{email}', 'https://example.com/{email}'],
+    ['  vt.example/{ip}', 'https://vt.example/{ip}'],
+    ['ftp://vt.internal/{ip}', 'https://vt.internal/{ip}'],
+    ['mailto:a@b.com', 'https://a@b.com'],
+    ['file:///x/{ip}', 'https://x/{ip}'],
+    ['https:/example.com/{ip}', 'https://example.com/{ip}'],
+    ['HTTP://example.com', 'https://example.com'],
+    ['localhost:3000/{ip}', 'https://localhost:3000/{ip}'],
+  ])('%s -> %s', (input, expected) => {
+    expect(withWebScheme(input)).toBe(expected);
+    expect(hasWebScheme(withWebScheme(input))).toBe(true);
+  });
+});
diff --git a/src/shared/tools.ts b/src/shared/tools.ts
index 05fcc81d..1ec57b24 100644
--- a/src/shared/tools.ts
+++ b/src/shared/tools.ts
@@ -98,3 +98,18 @@ const WEB_SCHEME = /^https?:\/\//i;
 export function hasWebScheme(url: string): boolean {
   return WEB_SCHEME.test(url.trim());
 }
+
+/**
+ * A leading scheme to drop before prefixing https://. The digit lookahead keeps a
+ * schemeless host:port ("localhost:3000/{ip}") intact, since no scheme is followed by a digit.
+ */
+const LEADING_SCHEME = /^[a-z][a-z0-9+.-]*:(?!\d)\/*/i;
+
+/**
+ * The template rewritten to start with https://, replacing any leading scheme (ftp://,
+ * mailto:, file:///, the https:/ typo) and dropping leading whitespace. Kept beside
+ * hasWebScheme so the editor's one-click fix always produces something it accepts.
+ */
+export function withWebScheme(url: string): string {
+  return 'https://' + url.trimStart().replace(LEADING_SCHEME, '');
+}

From 234497de29384ec39950175dd4a859c04f81d979 Mon Sep 17 00:00:00 2001
From: jeeves <308196396+cb-jeeves@users.noreply.github.com>
Date: Wed, 2 Sep 2026 19:45:43 +0000
Subject: [PATCH 07/11] chore(release): v2.3.0 (minor, rebased on main)

---
 package-lock.json | 46 ++--------------------------------------------
 package.json      |  2 +-
 2 files changed, 3 insertions(+), 45 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 338b4eae..1a90b796 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "clipless",
-  "version": "2.2.1",
+  "version": "2.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "clipless",
-      "version": "2.2.1",
+      "version": "2.3.0",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
@@ -1756,9 +1756,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1999,9 +1996,6 @@
       "cpu": [
         "arm"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2015,9 +2009,6 @@
       "cpu": [
         "arm"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2031,9 +2022,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2047,9 +2035,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2063,9 +2048,6 @@
       "cpu": [
         "loong64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2079,9 +2061,6 @@
       "cpu": [
         "loong64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2095,9 +2074,6 @@
       "cpu": [
         "ppc64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2111,9 +2087,6 @@
       "cpu": [
         "ppc64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2127,9 +2100,6 @@
       "cpu": [
         "riscv64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2143,9 +2113,6 @@
       "cpu": [
         "riscv64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2159,9 +2126,6 @@
       "cpu": [
         "s390x"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2175,9 +2139,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2191,9 +2152,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
diff --git a/package.json b/package.json
index ef3bda91..709a917a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "clipless",
-  "version": "2.2.1",
+  "version": "2.3.0",
   "description": "A Clipboard manager for busy people",
   "main": "./out/main/index.js",
   "author": "Daniel Essig",

From 08acb3661d3f081c0c72d13caeb9157397be6a51 Mon Sep 17 00:00:00 2001
From: Dan Essig <2682437+dantheuber@users.noreply.github.com>
Date: Wed, 2 Sep 2026 19:51:48 +0000
Subject: [PATCH 08/11] fix(tools): exempt a leading {url} token from the
 scheme warning

A template that leads with the url token resolves to the captured value,
which the built-in url pattern captures with its http or https scheme and
buildToolUrls substitutes unencoded. The literal-prefix check flagged it
anyway and the one-click fix rewrote it to https://{url}, which resolves to
https://https://... and opens the wrong host. The editor now skips the
warning and the fix button when the template starts with {url}. A pipe
token like {url|domain} keeps the warning since a domain has no scheme.

Reword the README rule to describe the resolved link rather than the
template's literal prefix.
---
 README.md                                          |  2 +-
 .../components/settings/tools/ToolEditor.test.tsx  | 14 ++++++++++++++
 .../src/components/settings/tools/ToolEditor.tsx   |  7 ++++++-
 3 files changed, 21 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index a7d52ce8..c8075b38 100644
--- a/README.md
+++ b/README.md
@@ -78,7 +78,7 @@ pins — there the chips are in the tab order, so Tab to one and press Enter or
 leaving the keyboard.
 
 - **Multi-token URLs** — drop values into any link, e.g. `https://tool.com/{ip}/{email}`
-- **Web links only** — a tool URL must start with `http://` or `https://`; the editor warns when it does not and offers a one-click fix
+- **Web links only** — the resolved link must be `http` or `https`, so a template starts with `http://`, `https://` or the `{url}` token; the editor warns when it does not and offers a one-click fix
 - **Open in bulk** — pin several values; the tray states how many tabs it will open before you click
 - **Only what fits** — a tool is offered only when every token in its URL has a pinned value
 - **Templates &amp; sharing** — ready templates copy their filled-in text to the clipboard, and configs export / import for your team
diff --git a/src/renderer/src/components/settings/tools/ToolEditor.test.tsx b/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
index 89d9826a..b79788c6 100644
--- a/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
+++ b/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
@@ -150,6 +150,20 @@ describe('ToolEditor', () => {
     expect(screen.queryByTestId('tool-url-scheme')).not.toBeInTheDocument();
   });
 
+  it('does not warn when the template leads with the url token, which supplies its own scheme', async () => {
+    await renderTools(
+      <ToolEditor initial={{ name: 'Open', url: '{url}' }} onSave={onSave} onCancel={onCancel} />
+    );
+    expect(screen.queryByTestId('tool-url-scheme')).not.toBeInTheDocument();
+    expect(screen.queryByTestId('tool-url-scheme-fix')).not.toBeInTheDocument();
+    fireEvent.change(screen.getByTestId('tool-url'), { target: { value: ' { url }/extra' } });
+    expect(screen.queryByTestId('tool-url-scheme')).not.toBeInTheDocument();
+    fireEvent.change(screen.getByTestId('tool-url'), { target: { value: '{url|domain}' } });
+    expect(screen.getByTestId('tool-url-scheme')).toBeInTheDocument();
+    fireEvent.change(screen.getByTestId('tool-url'), { target: { value: 'x/{url}' } });
+    expect(screen.getByTestId('tool-url-scheme')).toBeInTheDocument();
+  });
+
   it('the https:// fix strips leading whitespace and leaves the caret after the prefix', async () => {
     await renderTools(
       <ToolEditor
diff --git a/src/renderer/src/components/settings/tools/ToolEditor.tsx b/src/renderer/src/components/settings/tools/ToolEditor.tsx
index ea7642eb..0bddbe8e 100644
--- a/src/renderer/src/components/settings/tools/ToolEditor.tsx
+++ b/src/renderer/src/components/settings/tools/ToolEditor.tsx
@@ -44,7 +44,12 @@ export function ToolEditor({ initial, onSave, onCancel }: ToolEditorProps) {
   const count = buildToolUrls({ url }, values).length;
   const resolved = resolveToolUrls(url, values);
   const needed = groupsNeeded({ url });
-  const schemeless = url.trim().length > 0 && !hasWebScheme(url);
+  // A template that leads with the url token takes its scheme from the captured value
+  // (the built-in url pattern captures http:// or https:// and buildToolUrls substitutes
+  // it unencoded), so it opens a valid web link without a literal prefix. The group name
+  // is matched exactly, as toolTokens does, since an unknown group never substitutes.
+  const leadsWithUrlToken = /^\s*\{\s*url\s*\}/.test(url);
+  const schemeless = url.trim().length > 0 && !leadsWithUrlToken && !hasWebScheme(url);
 
   const save = async () => {
     setSaving(true);

From 7e73c5332631f3c91ce591652da0b287048d879f Mon Sep 17 00:00:00 2001
From: jeeves <308196396+cb-jeeves@users.noreply.github.com>
Date: Wed, 2 Sep 2026 19:53:24 +0000
Subject: [PATCH 09/11] chore(release): v2.3.0 (minor, rebased on main)

---
 package-lock.json | 4 ++--
 package.json      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index d22daffb..52da64c5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "clipless",
-  "version": "2.2.2",
+  "version": "2.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "clipless",
-      "version": "2.2.2",
+      "version": "2.3.0",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index 62cf8304..709a917a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "clipless",
-  "version": "2.2.2",
+  "version": "2.3.0",
   "description": "A Clipboard manager for busy people",
   "main": "./out/main/index.js",
   "author": "Daniel Essig",

From 0744fdaa40d07c1534397bc46e8a516fb7e5f938 Mon Sep 17 00:00:00 2001
From: Dan Essig <2682437+dantheuber@users.noreply.github.com>
Date: Wed, 2 Sep 2026 20:01:39 +0000
Subject: [PATCH 10/11] refactor: derive the scheme warning from toolTokens in
 needsWebScheme

The editor exempted a leading url token with its own regex, so {url|} and
{|url}, which toolTokens reads as a url-only token, still warned and the fix
button rewrote them to https://{url|}. needsWebScheme lives beside
hasWebScheme and asks toolTokens for the first token, so the two cannot
drift. The cases move into the shared test table; the editor test keeps one
proving the warning and button stay hidden for {url}.
---
 .../settings/tools/ToolEditor.test.tsx        |  6 ---
 .../components/settings/tools/ToolEditor.tsx  |  9 +---
 src/shared/tools.test.ts                      | 41 ++++++++++++++++++-
 src/shared/tools.ts                           | 23 ++++++++++-
 4 files changed, 63 insertions(+), 16 deletions(-)

diff --git a/src/renderer/src/components/settings/tools/ToolEditor.test.tsx b/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
index b79788c6..ba1fee80 100644
--- a/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
+++ b/src/renderer/src/components/settings/tools/ToolEditor.test.tsx
@@ -156,12 +156,6 @@ describe('ToolEditor', () => {
     );
     expect(screen.queryByTestId('tool-url-scheme')).not.toBeInTheDocument();
     expect(screen.queryByTestId('tool-url-scheme-fix')).not.toBeInTheDocument();
-    fireEvent.change(screen.getByTestId('tool-url'), { target: { value: ' { url }/extra' } });
-    expect(screen.queryByTestId('tool-url-scheme')).not.toBeInTheDocument();
-    fireEvent.change(screen.getByTestId('tool-url'), { target: { value: '{url|domain}' } });
-    expect(screen.getByTestId('tool-url-scheme')).toBeInTheDocument();
-    fireEvent.change(screen.getByTestId('tool-url'), { target: { value: 'x/{url}' } });
-    expect(screen.getByTestId('tool-url-scheme')).toBeInTheDocument();
   });
 
   it('the https:// fix strips leading whitespace and leaves the caret after the prefix', async () => {
diff --git a/src/renderer/src/components/settings/tools/ToolEditor.tsx b/src/renderer/src/components/settings/tools/ToolEditor.tsx
index 0bddbe8e..cf6ccc24 100644
--- a/src/renderer/src/components/settings/tools/ToolEditor.tsx
+++ b/src/renderer/src/components/settings/tools/ToolEditor.tsx
@@ -1,6 +1,6 @@
 import classNames from 'classnames';
 import { useEffect, useRef, useState } from 'react';
-import { buildToolUrls, hasWebScheme, withWebScheme } from '../../../../../shared/tools';
+import { buildToolUrls, needsWebScheme, withWebScheme } from '../../../../../shared/tools';
 import { Readiness } from './Readiness';
 import { TokenPicker, insertAtCaret } from './TokenPicker';
 import { TokenText } from './TokenText';
@@ -44,12 +44,7 @@ export function ToolEditor({ initial, onSave, onCancel }: ToolEditorProps) {
   const count = buildToolUrls({ url }, values).length;
   const resolved = resolveToolUrls(url, values);
   const needed = groupsNeeded({ url });
-  // A template that leads with the url token takes its scheme from the captured value
-  // (the built-in url pattern captures http:// or https:// and buildToolUrls substitutes
-  // it unencoded), so it opens a valid web link without a literal prefix. The group name
-  // is matched exactly, as toolTokens does, since an unknown group never substitutes.
-  const leadsWithUrlToken = /^\s*\{\s*url\s*\}/.test(url);
-  const schemeless = url.trim().length > 0 && !leadsWithUrlToken && !hasWebScheme(url);
+  const schemeless = needsWebScheme(url);
 
   const save = async () => {
     setSaving(true);
diff --git a/src/shared/tools.test.ts b/src/shared/tools.test.ts
index c8eb2a1c..a62bd6be 100644
--- a/src/shared/tools.test.ts
+++ b/src/shared/tools.test.ts
@@ -1,5 +1,12 @@
 import { describe, it, expect } from 'vitest';
-import { toolTokens, toolReady, buildToolUrls, hasWebScheme, withWebScheme } from './tools';
+import {
+  toolTokens,
+  toolReady,
+  buildToolUrls,
+  hasWebScheme,
+  needsWebScheme,
+  withWebScheme,
+} from './tools';
 
 const tool = (url: string) => ({ url });
 
@@ -193,6 +200,38 @@ describe('hasWebScheme', () => {
   });
 });
 
+describe('needsWebScheme', () => {
+  it.each([
+    ['example.com/{email}'],
+    ['www.example.com'],
+    ['ftp://example.com'],
+    ['https:/example.com'],
+    ['{url|domain}'],
+    ['{ip}/{url}'],
+    ['x/{url}'],
+    ['{URL}'],
+  ])('warns on %s', (input) => {
+    expect(needsWebScheme(input)).toBe(true);
+  });
+
+  it.each([
+    [''],
+    ['   '],
+    ['https://example.com/{email}'],
+    ['  HTTP://example.com'],
+    ['{url}'],
+    [' { url }/extra'],
+    ['{url|}'],
+    ['{|url}'],
+    ['{url|url}'],
+  ])(
+    'does not warn on %s, which toolTokens reads as a leading url-only token or a web link',
+    (input) => {
+      expect(needsWebScheme(input)).toBe(false);
+    }
+  );
+});
+
 describe('withWebScheme', () => {
   it.each([
     ['example.com/{email}', 'https://example.com/{email}'],
diff --git a/src/shared/tools.ts b/src/shared/tools.ts
index 1ec57b24..482327ae 100644
--- a/src/shared/tools.ts
+++ b/src/shared/tools.ts
@@ -92,13 +92,32 @@ const WEB_SCHEME = /^https?:\/\//i;
 
 /**
  * Whether a tool URL template starts with http:// or https://. The main process opens
- * nothing else (open-external.ts), so the editor warns on anything that fails this and the
- * tray explains when fewer tabs opened than it offered.
+ * nothing else (open-external.ts), so the tray explains when fewer tabs opened than it
+ * offered. The editor's warning is needsWebScheme, which also exempts a leading url token.
  */
 export function hasWebScheme(url: string): boolean {
   return WEB_SCHEME.test(url.trim());
 }
 
+/**
+ * Whether the editor should warn that this template will not open as a web link. A template
+ * that leads with a url-only token takes its scheme from the captured value (the built-in
+ * url pattern captures http:// or https://), which buildToolUrls substitutes unencoded, so
+ * it opens without a literal prefix. The token is read through toolTokens so {url|} and
+ * { url } count the same way there as here. An empty template gets no warning.
+ */
+export function needsWebScheme(url: string): boolean {
+  const trimmed = url.trim();
+  if (trimmed.length === 0 || hasWebScheme(trimmed)) return false;
+  const first = toolTokens(trimmed)[0];
+  const leadsWithUrl =
+    first !== undefined &&
+    trimmed.startsWith(first.token) &&
+    first.groups.length > 0 &&
+    first.groups.every((group) => group === 'url');
+  return !leadsWithUrl;
+}
+
 /**
  * A leading scheme to drop before prefixing https://. The digit lookahead keeps a
  * schemeless host:port ("localhost:3000/{ip}") intact, since no scheme is followed by a digit.

From 50f08ec42e41291fb17225995902deab42a3a167 Mon Sep 17 00:00:00 2001
From: jeeves <308196396+cb-jeeves@users.noreply.github.com>
Date: Sun, 6 Sep 2026 17:59:48 +0000
Subject: [PATCH 11/11] chore(release): v2.3.0 (minor, rebased on main)

---
 package-lock.json | 4 ++--
 package.json      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 9e669a2d..52da64c5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "clipless",
-  "version": "2.2.3",
+  "version": "2.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "clipless",
-      "version": "2.2.3",
+      "version": "2.3.0",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index c856dffc..709a917a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "clipless",
-  "version": "2.2.3",
+  "version": "2.3.0",
   "description": "A Clipboard manager for busy people",
   "main": "./out/main/index.js",
   "author": "Daniel Essig",