<!-- Private notes lazy-loaded after Clerk auth resolves -->
<div
  id="private-notes-container"
  hx-get="/htmx/private-notes"
  hx-trigger="load, refreshPrivateNotes from:body"
  hx-swap="innerHTML"
></div>

// Authorization header injected via htmx:configRequest:
document.body.addEventListener('htmx:configRequest', (evt) => {
  const url = evt.detail.pathInfo?.requestPath ?? '';
  if (url.includes('/htmx/private-notes')) {
    evt.detail.headers['Authorization'] = 'Bearer ' + window.__clerkToken;
  }
});