@rightkit/document-core 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 0.1.2 (unpublished)
+
+- Removed (breaking, Adrian, 2026-11-03: "no dummy data, no fucking made up shit. real data."): the browser-QA fixture layer. `BROWSER_QA_BUILD`, `isBrowserQaMode()`, `qaReloadPdfBytes()`, every fixture branch of `state/tauriBridge` and the `state/browserQa`, `browserQaText`, `browserQaDocx` and `browserQaPdf` modules (and their `index` exports) are gone. Outside the Tauri webview the bridge keeps its plain no-op returns.
+- Removed (breaking, Adrian, 2026-11-03: no dummy data): the in-memory browser-QA licence client. `browserQaLicenseClient()` is gone from `state/tauriBridge`, `state/browserQaLicense` is deleted, and the `@rightkit/license` dependency with it (`@rightkit/license/testing` no longer exists).
+- `@rightkit/license` is a dependency again: the settings sections `document-core` exports come from `@rightkit/settings-ui`, whose `sections` entry imports its peer `@rightkit/license`; without it an installed `document-core` failed to import.
+
+## 0.1.1
+
+- Ask 1: the host bridge (`state/tauriBridge`), diagnostics (`state/diagnostics`) and platform modules are the single copy the document editors import. Hosts delete their own copies. Host-facing changes a host must adopt:
+  - Browser-QA build switch is `VITE_RIGHTKIT_BROWSER_QA=1` (was the host-named variable). A host QA build sets this variable; without it the QA fixtures are dropped.
+  - `parseViewRightError` is now `parseHostError`.
+  - The file-association field `viewrightIsPreferred` is now `hostIsPreferred`.
+  - Diagnostics allowlist adds `pdf-editor:viewer-load`.
+- Ask 2 and 3 are in `@rightkit/markdown-editor` 0.1.1; ask 4 pins are in `@rightkit/docx-editor` 0.1.1 and `@rightkit/html-editor` 0.1.1.
+- The accent preset `blue` reads its name from `hostAppName()` when displayed, so `setHostAppName()` at startup takes effect.
+- Wording fix in the toolbar primitives comment; no behaviour change.
+
 ## 0.1.0
 
 - First release. Shared base for the document editors: platform bridge, settings, state, PDF helpers and the format registry.

package/dist/documents/pdf/usePdfSavePlan.js

@@ -4,7 +4,7 @@ import { pdfDocumentInit, pdfWasmUrl } from "@rightkit/pdf-ui";
 import { prepareAndVerifyPdfSave } from "./pdfSave.js";
 // New PDF-edit backend commands (docs/PDF-EDITOR-NOW.md §10.1-§10.3), imported by name from
 // tauriBridge.ts against the frozen type contract in pdfEditModel.ts.
-import { preparePdfSave, commitPdfSave, qaReloadPdfBytes } from "../../state/tauriBridge.js";
+import { preparePdfSave, commitPdfSave } from "../../state/tauriBridge.js";
 import { logError, logEvent } from "../../state/diagnostics.js";
 /**
  * Forces a fresh native stream fetch after a successful same-path commit. Tauri's stream URL can
@@ -184,24 +184,11 @@ export function usePdfSavePlan({ documentPath, url, editSession, pdfEditor, hand
                         // disposing the stale task until React has committed this fresh `pdfDoc`, so pages
                         // still rendering off the old document mid-swap can't crash against a destroyed worker.
                         //
-                        // Browser QA has no such revocable token: `url` there is a static `data:` URL captured
-                        // once at document-open time, so re-fetching it would always reload the ORIGINAL
-                        // pre-edit bytes — silently discarding every annotation just committed, and (worse)
-                        // breaking a second save's incremental-update prefix check against the QA disk's
-                        // now-updated bytes. `qaReloadPdfBytes` resolves to `null` outside QA mode, so this is a
                         // Native reloads bind URL identity to committed revision below so WKWebView cannot
                         // hand the next edit session cached pre-commit bytes.
-                        const qaBytes = await qaReloadPdfBytes(documentPath);
-                        // `.slice()`: pdf.js's worker transport can transfer (detach) the backing ArrayBuffer
-                        // of `data` — `qaBytes` is a live reference into the QA disk's stored bytes (never
-                        // copied on read, so later saves keep seeing the same array), so handing it over
-                        // directly would corrupt that entry the moment this load transfers it. Same convention
-                        // `handleRecomposePreview` above already uses for its own `data:` load.
-                        const freshTask = pdfjs.getDocument(qaBytes
-                            ? pdfDocumentInit(qaBytes.slice(), { wasmUrl: pdfWasmUrl() })
-                            : pdfDocumentInit(withPdfRevisionCacheBust(url, result.revision.documentSha256), {
-                                wasmUrl: pdfWasmUrl(),
-                            }));
+                        const freshTask = pdfjs.getDocument(pdfDocumentInit(withPdfRevisionCacheBust(url, result.revision.documentSha256), {
+                            wasmUrl: pdfWasmUrl(),
+                        }));
                         const fresh = await freshTask.promise;
                         // A user can mutate annotation storage while fresh bytes are loading. Check again
                         // immediately before swapping pdfDoc so reload cannot erase that newer state.
@@ -268,12 +255,9 @@ export function usePdfSavePlan({ documentPath, url, editSession, pdfEditor, hand
             return false;
         setSaveLocked?.(true);
         try {
-            const qaBytes = await qaReloadPdfBytes(documentPath);
-            const freshTask = pdfjs.getDocument(qaBytes
-                ? pdfDocumentInit(qaBytes.slice(), { wasmUrl: pdfWasmUrl() })
-                : pdfDocumentInit(withPdfRevisionCacheBust(url, sourceShaRef.current ?? "retry"), {
-                    wasmUrl: pdfWasmUrl(),
-                }));
+            const freshTask = pdfjs.getDocument(pdfDocumentInit(withPdfRevisionCacheBust(url, sourceShaRef.current ?? "retry"), {
+                wasmUrl: pdfWasmUrl(),
+            }));
             const fresh = await freshTask.promise;
             replaceDocument(fresh, freshTask);
             reloadRequiredRef.current = false;

package/dist/documents/toolbarPrimitives.js

@@ -4,7 +4,7 @@ import { createPortal } from "react-dom";
 import { createShortcutRegistry } from "@rightkit/react-shell";
 import { isMac } from "../platform.js";
 import { floatingPanelStyle, moveIndex, typeaheadMatch, useDismiss, } from "@rightkit/platform-ui/headless";
-// Native the host app toolbar/menu primitives — square, copper-on-theme, compact app UI.
+// Native host app toolbar/menu primitives — square, copper-on-theme, compact app UI.
 // Zero eigenpal UI. Every interactive element uses onMouseDown + preventDefault so clicking
 // a control never steals the document selection before the command bridge formats it.
 const focusSafe = (fn) => (e) => {

package/dist/index.d.ts

@@ -78,10 +78,6 @@ export * from "./settings/settings.js";
 export * from "./settings/settingsBackend.js";
 export * from "./settings/themes.js";
 export * from "./state/bridgeEvents.js";
-export * from "./state/browserQa.js";
-export * from "./state/browserQaDocx.js";
-export * from "./state/browserQaPdf.js";
-export * from "./state/browserQaText.js";
 export * from "./state/diagnostics.js";
 export * from "./state/errors.js";
 export * from "./state/motion.js";

package/dist/index.js

@@ -80,10 +80,6 @@ export * from "./settings/settings.js";
 export * from "./settings/settingsBackend.js";
 export * from "./settings/themes.js";
 export * from "./state/bridgeEvents.js";
-export * from "./state/browserQa.js";
-export * from "./state/browserQaDocx.js";
-export * from "./state/browserQaPdf.js";
-export * from "./state/browserQaText.js";
 export * from "./state/diagnostics.js";
 export * from "./state/errors.js";
 export * from "./state/motion.js";

package/dist/settings/sections/MacFileAssociationsBlock.js

@@ -1,7 +1,7 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useMemo, useState } from "react";
 import { documentFormatEntries } from "../../documents/documentFormats.js";
-import { fileAssociationStatus, inTauri, isBrowserQaMode, openFileAssociationSettings, setFileAssociationDefaults, } from "../../state/tauriBridge.js";
+import { fileAssociationStatus, inTauri, openFileAssociationSettings, setFileAssociationDefaults, } from "../../state/tauriBridge.js";
 import { isMac, isWindows } from "../../platform.js";
 import { hostAppName } from "../../appName.js";
 export const SUPPORTED_ASSOCIATION_FORMATS = [
@@ -66,7 +66,7 @@ export function FileAssociationsBlock() {
     const [notice, setNotice] = useState("");
     const mac = isMac();
     const windows = isWindows();
-    const available = (mac || windows) && (inTauri() || isBrowserQaMode());
+    const available = (mac || windows) && inTauri();
     const allSelected = allFormatsSelected(selected);
     const extensionCounts = useMemo(() => new Map(SUPPORTED_ASSOCIATION_FORMATS.map((format) => [
         format.id,

package/dist/settings/themes.js

@@ -114,7 +114,15 @@ export const BASE_THEME_IDS = [
 ];
 /** Each choice owns a dark- and light-body value so the same intent remains readable. */
 export const ACCENT_PRESETS = [
-    { id: "blue", name: `${hostAppName()} blue`, dark: "#3FA3DE", light: "#0C6AA5" },
+    // A getter: the name reads hostAppName() when displayed, not at import, so setHostAppName() at host startup takes effect.
+    {
+        id: "blue",
+        get name() {
+            return `${hostAppName()} blue`;
+        },
+        dark: "#3FA3DE",
+        light: "#0C6AA5",
+    },
     { id: "copper", name: "Copper", dark: "#C46A3D", light: "#9D5530" },
     { id: "iris", name: "Iris", dark: "#A78BFA", light: "#6D4BC3" },
     { id: "amber", name: "Amber", dark: "#E0A458", light: "#87570E" },

package/dist/state/tauriBridge.d.ts

@@ -1,5 +1,4 @@
 import { type FileFingerprint, type LoadedDocument } from "../documents/types.js";
-import type { LicenseClient } from "@rightkit/license";
 import { isTauri } from "@rightkit/platform-ui";
 import { type Shell } from "@rightkit/tauri-shell";
 /** True when running inside the Tauri webview (vs. plain `vite dev` in a browser). */
@@ -12,7 +11,6 @@ export declare function getShell(): Shell;
  * reports a copy that did not happen (an absent browser clipboard used to read as success).
  */
 export declare function writeClipboardText(text: string): Promise<void>;
-export declare function isBrowserQaMode(): boolean;
 declare function invoke<T>(cmd: string, args?: Record<string, unknown>): Promise<T>;
 declare function listen<T>(event: string, callback: (event: {
     payload: T;
@@ -26,12 +24,6 @@ export declare const nativeIpc: {
     invoke: typeof invoke;
     listen: typeof listen;
 };
-/**
- * Browser-QA licence client (`@rightkit/license/testing`, in-memory, no network). Returns null
- * outside browser QA, so the caller uses the native client. The `testing` export resolves only
- * under the `development` condition and the call site folds to `false` in a release build.
- */
-export declare function browserQaLicenseClient(): Promise<LicenseClient | null>;
 /** Classified shape every bridge caller can rely on. `code` matches the Rust `HostError`
  *  variant in snake_case (e.g. "broker_denied", "file_not_found"), or "unknown" when the rejection
  *  didn't carry the envelope shape at all (a raw JS Error, a plain string, or something else). */
@@ -164,12 +156,6 @@ export declare const preparePdfSave: PreparePdfSave;
  *  `targetPath`/`documentSha256`; `affectedPages` is returned empty and `revision` as an
  *  empty-pages placeholder so the return type still satisfies `PdfCommitResult` structurally. */
 export declare const commitPdfSave: CommitPdfSave;
-/** Browser-QA-only: current bytes of the in-memory QA PDF "disk" at `path`, or `null` outside QA
- *  mode / for an untouched path. PdfViewer.tsx's post-commit reload uses this instead of
- *  re-fetching its `url` prop — a real Tauri stream token is a revocable token that re-resolves to
- *  the same (now-committed) file on every fetch, but browser QA's `url` is a static `data:` URL
- *  captured once at document-open time, which can never reflect a later commit on its own. */
-export declare function qaReloadPdfBytes(path: string): Promise<Uint8Array | null>;
 export declare function setInspectableHtmlPreview(token: string | null): void;
 /** Clear the DevTools owner, but only if `token` still owns it (a newer frame may have replaced it). */
 export declare function releaseInspectableHtmlPreview(token: string): void;

package/dist/state/tauriBridge.js

@@ -1,14 +1,6 @@
 import { baseName, formatFromPath, normalizeViewMode, } from "../documents/types.js";
 import { isTauri } from "@rightkit/platform-ui";
 import { createShell } from "@rightkit/tauri-shell";
-// Browser-QA fixture modules load on demand. Every call site sits behind `BROWSER_QA_BUILD` (a
-// build-time constant), so production builds fold the guard to `false`, drop these dynamic imports,
-// and never emit the fixture chunks. Keep static imports of these modules out of this file.
-const loadQaFixtures = () => import("./browserQa.js");
-const loadQaText = () => import("./browserQaText.js");
-const loadQaDocx = () => import("./browserQaDocx.js");
-const loadQaPdf = () => import("./browserQaPdf.js");
-const loadQaLicense = () => import("./browserQaLicense.js");
 /** True when running inside the Tauri webview (vs. plain `vite dev` in a browser). */
 const inTauri = isTauri;
 let shell = null;
@@ -17,13 +9,6 @@ export function getShell() {
     shell ??= createShell();
     return shell;
 }
-/**
- * Build-time switch for the browser-QA fixtures: `true` in `vite dev` and in the
- * `VITE_RIGHTKIT_BROWSER_QA=1` build, a literal `false` in production builds. Every QA branch in
- * this module is guarded with it, so the minifier drops those branches and nothing references the
- * `browserQa*` fixture modules in a production bundle.
- */
-const BROWSER_QA_BUILD = import.meta.env?.DEV || import.meta.env?.VITE_RIGHTKIT_BROWSER_QA === "1";
 /**
  * Write text to the system clipboard: through the shell's native clipboard in the app, through the
  * browser clipboard in browser QA. It rejects when no clipboard is available, so a caller never
@@ -39,15 +24,6 @@ export async function writeClipboardText(text) {
     }
     await navigator.clipboard.writeText(text);
 }
-export function isBrowserQaMode() {
-    const qaBuild = import.meta.env?.VITE_RIGHTKIT_BROWSER_QA === "1";
-    if (!import.meta.env?.DEV && !qaBuild)
-        return false;
-    if (typeof window === "undefined" || inTauri())
-        return false;
-    const params = new URLSearchParams(window.location.search);
-    return params.has("qa") || qaBuild;
-}
 async function invoke(cmd, args) {
     const { invoke } = await import("@tauri-apps/api/core");
     return invoke(cmd, args);
@@ -62,16 +38,6 @@ async function listen(event, callback) {
  * update Bearer; the webview only sends commands and receives validated display views.
  */
 export const nativeIpc = { invoke, listen };
-/**
- * Browser-QA licence client (`@rightkit/license/testing`, in-memory, no network). Returns null
- * outside browser QA, so the caller uses the native client. The `testing` export resolves only
- * under the `development` condition and the call site folds to `false` in a release build.
- */
-export async function browserQaLicenseClient() {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return (await loadQaLicense()).qaLicenseClient();
-    return null;
-}
 /** Classify an IPC rejection from `invoke()` into `{code, message}`. Tauri serializes a command's
  *  `Err(HostError)` using the envelope's own `#[serde(tag = "code", content = "message")]`
  *  representation, so a migrated command's rejection value IS already `{code, message}` — this
@@ -97,9 +63,6 @@ export function parseHostError(e) {
     return { code: "unknown", message: String(e) };
 }
 export async function openFileDialog() {
-    if (BROWSER_QA_BUILD && isBrowserQaMode()) {
-        return (await loadQaFixtures()).qaDialogPath();
-    }
     if (!inTauri()) {
         console.warn("openFileDialog: not in Tauri — open a real document via `pnpm tauri dev`.");
         return null;
@@ -108,27 +71,6 @@ export async function openFileDialog() {
 }
 export async function readDocument(path) {
     const format = formatFromPath(path);
-    if (BROWSER_QA_BUILD && isBrowserQaMode()) {
-        const qaDocx = await loadQaDocx();
-        const qaText = await loadQaText();
-        const savedDocx = qaDocx.readQaDocxDocument({
-            path,
-            displayName: baseName(path),
-            format,
-            content: "",
-        });
-        if (savedDocx)
-            return savedDocx;
-        const doc = await (await loadQaFixtures()).qaDocumentForPath(path);
-        if (doc) {
-            if (format === "pdf") {
-                const assetUrl = await (await loadQaPdf()).qaCurrentPdfAssetUrl(path);
-                return { ...doc, assetUrl: assetUrl ?? doc.assetUrl };
-            }
-            return qaText.readQaTextDocument(doc);
-        }
-        return qaText.readQaTextDocument({ path, displayName: baseName(path), format, content: "" });
-    }
     if (!inTauri()) {
         return { path, displayName: baseName(path), format, content: "" };
     }
@@ -191,10 +133,6 @@ export async function getPersistenceStatus() {
     return { degraded: status.degraded === true, quarantinedTo: status.quarantined_to ?? null };
 }
 export async function getInitialOpenPaths() {
-    if (BROWSER_QA_BUILD && isBrowserQaMode()) {
-        const path = (await loadQaFixtures()).qaInitialOpenPath();
-        return path ? [path] : [];
-    }
     if (!inTauri())
         return [];
     // The shell's open-paths gate: it grants and drains what argv / a second launch / macOS
@@ -325,8 +263,6 @@ export async function revokePath(path) {
 /** Write text, preserving the file's `encoding` (default UTF-8). Returns actual encoding plus the
  *  committed source SHA-256; in-place callers send the prior SHA for stale-source protection. */
 export async function writeDocument(path, content, encoding, expectedSourceSha256) {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return (await loadQaText()).writeQaTextDocument(path, content, encoding, expectedSourceSha256);
     if (!inTauri())
         throw new Error("Saving requires the desktop app.");
     const result = await invoke("write_document", {
@@ -344,9 +280,6 @@ export async function writeDocument(path, content, encoding, expectedSourceSha25
 // changing writeDocumentBytes's contract (out of scope here) — and a 32k-arg spread/apply call is
 // exactly the call-stack-pressure risk the loop below was already written to avoid. Not a clear
 // improvement, so kept unchanged per the audit's own guidance.
-function arrayBufferToBase64(ab) {
-    return byteArrayToBase64(new Uint8Array(ab));
-}
 function byteArrayToBase64(bytes) {
     let bin = "";
     const chunk = 0x8000;
@@ -362,11 +295,6 @@ function byteArrayToBase64(bytes) {
     return btoa(bin);
 }
 export async function writeDocumentBytes(path, data) {
-    if (BROWSER_QA_BUILD && isBrowserQaMode()) {
-        if (formatFromPath(path) === "docx")
-            await (await loadQaDocx()).writeQaDocxDocument(path, data, arrayBufferToBase64(data));
-        return;
-    }
     if (!inTauri())
         throw new Error("Saving requires the desktop app.");
     // Raw request body (like ocr_page): the DOCX bytes cross IPC as-is, with no JS base64 encode on
@@ -386,8 +314,6 @@ function pathToHex(path) {
  * reserializing its bytes. The desktop command owns both broker checks and the filesystem copy so
  * PDF Save As preserves signatures, encryption, widgets, and any bytes pdf.js cannot round-trip. */
 export async function copyDocument(sourcePath, targetPath) {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return;
     if (!inTauri())
         throw new Error("Saving requires the desktop app.");
     await invoke("copy_document", { sourcePath, targetPath });
@@ -412,9 +338,6 @@ export async function editImageExternal(path) {
         return;
     await invoke("edit_image_external", { path });
 }
-import { hostAppName } from "../appName.js";
-if (BROWSER_QA_BUILD && isBrowserQaMode())
-    void loadQaPdf().then((qaPdf) => qaPdf.registerViewrightQaGlobal());
 /** Normalizes an `invoke()` raw-body result (an `ArrayBuffer`, or occasionally already a
  *  `Uint8Array`/plain byte array depending on Tauri's IPC transport) into a `Uint8Array`. */
 function toUint8Array(body) {
@@ -431,9 +354,8 @@ function toUint8Array(body) {
  *  dynamic `@tauri-apps/api/core` import reach into `window.__TAURI_INTERNALS__`, which is
  *  `undefined` there and throws a raw, unclassified "Cannot read properties of undefined (reading
  *  'invoke')" instead of a `ClassifiedError` a caller's existing catch/`errorMessage` handling can
- *  show meaningfully. These six PDF-editor commands have no browser-QA fixture to fall back to
- *  (unlike `readDocument`'s `qaDocumentForPath`) — a real Rust backend is unavoidable for source
- *  inspection/composition/save — so the correct graceful behavior is a clean, classified rejection
+ *  show meaningfully. These six PDF-editor commands need the real Rust backend for source
+ *  inspection/composition/save, so the correct graceful behavior is a clean, classified rejection
  *  rather than either a raw crash or a fabricated result. */
 function requireTauriForPdfEdit(command) {
     if (!inTauri()) {
@@ -444,8 +366,6 @@ function requireTauriForPdfEdit(command) {
 export const ocrPage = async (png) => {
     // Browser QA has no Rust OCR backend, so the IPC-boundary fixture keeps the scanned-page UI
     // exercisable without moving a mock into the document components.
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return (await loadQaFixtures()).qaOcrLines();
     requireTauriForPdfEdit("ocr_page");
     const { invoke: tauriInvoke } = await import("@tauri-apps/api/core");
     return tauriInvoke("ocr_page", png);
@@ -460,8 +380,6 @@ let ocrAvailableProbe = null;
 export const ocrAvailable = () => {
     // Browser QA has no Rust OCR backend, so the IPC-boundary fixture keeps the scanned-page UI
     // exercisable without moving a mock into the document components.
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return Promise.resolve(true);
     if (!inTauri())
         return Promise.resolve(false);
     ocrAvailableProbe ??= invoke("ocr_available").catch(() => {
@@ -488,15 +406,11 @@ export const ocrBackendMissing = () => {
 export const inspectPdfPage = async (path, page) => {
     // Browser QA has no Rust content-stream walker, so the IPC-boundary fixture keeps Edit-text mode
     // reachable/non-crashing (islands always empty — source-text editing stays native-only).
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return (await loadQaPdf()).qaInspectPdfPage(path, page);
     requireTauriForPdfEdit("inspect_pdf_page");
     return invoke("inspect_pdf_page", { path, page });
 };
 /** §7.2 `list_pdf_fonts`. Returns the bundled + system font catalog available for embedding. */
 export const listPdfFonts = async () => {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return (await loadQaPdf()).qaListPdfFonts();
     requireTauriForPdfEdit("list_pdf_fonts");
     return invoke("list_pdf_fonts");
 };
@@ -504,8 +418,6 @@ export const listPdfFonts = async () => {
  *  disk bytes, for committed-unsaved-edit preview re-render — no token, no retained candidate, no
  *  writes. Candidate bytes use JSON; affected pages derive from request commands. */
 export const composePdfPreview = async (request) => {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return (await loadQaPdf()).qaComposePdfPreview(request);
     requireTauriForPdfEdit("compose_pdf_preview");
     const body = await invoke("compose_pdf_preview", {
         request: {
@@ -537,8 +449,6 @@ export const composePdfPreview = async (request) => {
  *  populated as an empty string (the backend recheck matches by page + text substring only, not by
  *  island id; see `pdf_save.rs`'s `structurally_verify_candidate`). */
 export const preparePdfSave = async (request) => {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return (await loadQaPdf()).qaPreparePdfSave(request);
     requireTauriForPdfEdit("prepare_pdf_save");
     const meta = await invoke("prepare_pdf_save", {
         request: {
@@ -573,8 +483,6 @@ export const preparePdfSave = async (request) => {
  *  `targetPath`/`documentSha256`; `affectedPages` is returned empty and `revision` as an
  *  empty-pages placeholder so the return type still satisfies `PdfCommitResult` structurally. */
 export const commitPdfSave = async (token, targetPath) => {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return (await loadQaPdf()).qaCommitPdfSave(token, targetPath);
     requireTauriForPdfEdit("commit_pdf_save");
     const result = await invoke("commit_pdf_save", {
         token,
@@ -587,16 +495,6 @@ export const commitPdfSave = async (token, targetPath) => {
         revision: { documentSha256: result.documentSha256, pageCount: 0, pages: [] },
     };
 };
-/** Browser-QA-only: current bytes of the in-memory QA PDF "disk" at `path`, or `null` outside QA
- *  mode / for an untouched path. PdfViewer.tsx's post-commit reload uses this instead of
- *  re-fetching its `url` prop — a real Tauri stream token is a revocable token that re-resolves to
- *  the same (now-committed) file on every fetch, but browser QA's `url` is a static `data:` URL
- *  captured once at document-open time, which can never reflect a later commit on its own. */
-export async function qaReloadPdfBytes(path) {
-    if (!BROWSER_QA_BUILD || !isBrowserQaMode())
-        return null;
-    return (await loadQaPdf()).qaCurrentPdfBytes(path);
-}
 /** Token of the interactive HTML preview that currently owns DevTools (the active tab's frame), or
  *  null. Set by the HTML preview frame; DevTools opens exactly that registered document. */
 let inspectableHtmlToken = null;
@@ -613,14 +511,14 @@ export function releaseInspectableHtmlPreview(token) {
  *  main webview is never inspectable. No-op without an active HTML preview or outside Tauri. */
 export async function openDevtools() {
     const token = inspectableHtmlToken;
-    if (!token || (BROWSER_QA_BUILD && isBrowserQaMode()) || !inTauri())
+    if (!token || !inTauri())
         return;
     await invoke("open_html_devtools", { token });
 }
 /** No-op: the macOS inspect-accelerator scope command was removed with the shell port (viewright#375). */
 export async function setDevtoolsShortcutScope(_enabled) { }
 export async function revealInFileExplorer(path) {
-    if ((BROWSER_QA_BUILD && isBrowserQaMode()) || !inTauri())
+    if (!inTauri())
         return;
     await invoke("reveal_in_file_explorer", { path });
 }
@@ -651,24 +549,10 @@ export async function printCurrentWebview() {
     }
 }
 export async function listSystemFonts() {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return ["Inter", "Source Serif 4", "JetBrains Mono", "Geist", "Newsreader"];
     if (!inTauri())
         return [];
     return invoke("list_system_fonts");
 }
-const QA_FILE_ASSOCIATION_FORMATS = ["md", "mdx", "txt", "pdf", "html", "docx", "image"];
-let qaPreferredAssociationFormats = new Set(["md", "mdx"]);
-function qaFileAssociationStatus() {
-    return {
-        formats: QA_FILE_ASSOCIATION_FORMATS.map((formatId) => ({
-            formatId,
-            extensions: [],
-            handlers: [],
-            allSet: qaPreferredAssociationFormats.has(formatId),
-        })),
-    };
-}
 function toFormatStatus(group) {
     return {
         formatId: group.id,
@@ -682,17 +566,10 @@ function toFormatStatus(group) {
     };
 }
 export async function fileAssociationStatus() {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return qaFileAssociationStatus();
     const status = await getShell().associations.status();
     return { formats: status.groups.map(toFormatStatus) };
 }
 export async function setFileAssociationDefaults(formatIds) {
-    if (BROWSER_QA_BUILD && isBrowserQaMode()) {
-        qaPreferredAssociationFormats = new Set(formatIds);
-        const status = qaFileAssociationStatus();
-        return { formats: status.formats, allSet: formatIds.length > 0 };
-    }
     // macOS: one NSWorkspace request per content type (system consent sheet), one shared 60 s
     // deadline (the shell default; the host clamps a given value to 1 to 120 s).
     const result = await getShell().associations.set(formatIds);
@@ -701,8 +578,6 @@ export async function setFileAssociationDefaults(formatIds) {
 /** Windows owns protected default-app choices. This opens Windows Default apps; the shell never
  * writes UserChoice registry hashes or claims a default changed. */
 export async function openFileAssociationSettings(_formatIds) {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return;
     await getShell().associations.openDefaultApps();
 }
 export async function saveSession(tabs) {
@@ -818,15 +693,11 @@ export function installExternalLinkGuard() {
     });
 }
 export async function saveFileDialog(defaultName, format) {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return `D:\\${hostAppName()} QA\\${defaultName ?? `untitled.${format ?? "txt"}`}`;
     if (!inTauri())
         return null;
     return invoke("save_file_dialog", { defaultName, format });
 }
 export async function grantKnownFileToken(token) {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return token;
     if (!inTauri())
         return null;
     return invoke("grant_known_file_token", { token });
@@ -840,15 +711,11 @@ export async function grantKnownFileToken(token) {
 //   - regrantSavedTarget: re-grant a path the host app itself just wrote (save-as, duplicate, DOCX
 //     save-as) — refused unless the exact path was written in the last few writes.
 export async function openLinkedDocument(target, from) {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return target;
     if (!inTauri())
         return null;
     return invoke("open_linked_document", { target, from: from ?? null });
 }
 export async function regrantSavedTarget(path) {
-    if (BROWSER_QA_BUILD && isBrowserQaMode())
-        return path;
     if (!inTauri())
         return null;
     return invoke("regrant_saved_target", { path });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rightkit/document-core",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Shared base for the document editors: platform bridge, settings, state, PDF helpers and the format registry.",
   "license": "MIT OR Apache-2.0",
   "type": "module",
@@ -248,14 +248,14 @@
   "dependencies": {
     "@codemirror/view": "^6.43.14",
     "@phosphor-icons/react": "^2.1.10",
-    "@rightkit/license": "^0.3.0",
+    "@rightkit/license": "^0.3.1",
     "@rightkit/logs": "^0.1.6",
-    "@rightkit/pdf-ui": "^0.2.0",
-    "@rightkit/platform-ui": "^0.4.0",
-    "@rightkit/react-shell": "^0.7.2",
-    "@rightkit/settings-ui": "^0.7.0",
-    "@rightkit/tauri-shell": "^0.1.3",
-    "@rightkit/theme": "^0.3.1",
+    "@rightkit/pdf-ui": "^0.3.0",
+    "@rightkit/platform-ui": "^0.4.1",
+    "@rightkit/react-shell": "^0.7.3",
+    "@rightkit/settings-ui": "^0.7.1",
+    "@rightkit/tauri-shell": "^0.1.4",
+    "@rightkit/theme": "^0.3.2",
     "@tauri-apps/api": "^2.12.2",
     "pdfjs-dist": "6.4.299"
   },
@@ -270,8 +270,7 @@
     "react": "^19.3.1",
     "react-dom": "^19.3.1",
     "typescript": "^7.0.2",
-    "vite": "^8.3.4",
-    "vitest": "^5.0.5"
+    "vite": "^8.3.4"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org",
@@ -284,7 +283,6 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.json && node scripts/copy-assets.mjs",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "pnpm --filter \"@rightkit/document-core^...\" run build && vitest run"
+    "typecheck": "tsc -p tsconfig.json --noEmit"
   }
 }

package/dist/state/browserQa.d.ts

@@ -1,21 +0,0 @@
-/**
- * Fixture documents + IPC-boundary fallbacks for browser QA mode (`VITE_RIGHTKIT_BROWSER_QA=1`,
- * `?qa=1&doc=<key>`) — the headless-Chrome harness `scripts/qa-browser-functional.mjs` drives, and
- * the manual escape hatch for poking the app in a plain browser tab outside Tauri. `qaOcrLines`
- * lives here; the PDF-edit-command mocks (`inspect_pdf_page`/`compose_pdf_preview`/
- * `prepare_pdf_save`/`commit_pdf_save`/`list_pdf_fonts`, plus the in-memory PDF "disk" and the
- * `window.__viewrightQa` assertion surface) live in the sibling `browserQaPdf.ts` instead, since
- * they need their own save-token/sha bookkeeping this file has no reason to carry.
- *
- * PDF coverage split: annotation editing (FreeText/Ink/Highlight/Stamp, via pdf.js's own
- * `AnnotationEditorLayer`/`saveDocument()`) + two-phase Save/Save As is fully exercised in browser
- * QA against `browserQaPdf.ts`'s mocks. Existing-text/add-text editing (`inspect_pdf_page`'s
- * `islands`) stays native-only — browser QA has no Rust content-stream walker, so that path is only
- * reachable/non-crashing here, never a real edit round trip.
- */
-import { type LoadedDocument } from "../documents/types.js";
-import type { OcrLine } from "../documents/pdf/pdfOcr.js";
-export declare function qaOcrLines(): OcrLine[];
-export declare function qaDialogPath(): string;
-export declare function qaInitialOpenPath(): string | null;
-export declare function qaDocumentForPath(path: string): Promise<LoadedDocument | null>;