dsh-coding-sidebar 1.0.3 → 1.0.4

package/lib/index.js

@@ -42,15 +42,12 @@ const SIDEBAR_PREFS_DEFAULTS = {
 	customCss: "",
 	titleBarCompat: false,
 	titleBarStripPx: 40,
-	htmlViewerNoSandbox: false,
-	htmlViewerDefaultUnsafe: false,
 	browserNoSandbox: false,
 	browserInterceptLinks: true,
 	browserInterceptHttp: true,
 	browserInterceptHttps: false,
 	browserAllowedLoopback: "",
 	tabsEnabled: {},
-	viewersEnabled: {},
 	pluginSettings: {}
 };
 //#endregion
@@ -114,15 +111,12 @@ const PrefsSchema = z.object({
 	customCss: z.string(),
 	titleBarCompat: z.boolean().default(false),
 	titleBarStripPx: z.number().step(1).min(0).max(120).default(40),
-	htmlViewerNoSandbox: z.boolean().default(false),
-	htmlViewerDefaultUnsafe: z.boolean().default(false),
 	browserNoSandbox: z.boolean().default(false),
 	browserInterceptLinks: z.boolean().default(true),
 	browserInterceptHttp: z.boolean().default(true),
 	browserInterceptHttps: z.boolean().default(false),
 	browserAllowedLoopback: z.string().default(""),
 	tabsEnabled: z.dict(z.boolean()).default({}),
-	viewersEnabled: z.dict(z.boolean()).default({}),
 	pluginSettings: z.dict(z.dict(z.any())).default({})
 });
 //#endregion
@@ -541,60 +535,6 @@ async function searchFiles(root, query, opts = {}) {
 		truncated
 	};
 }
-/**
-* Decode a route pathname into the session + absolute file path. Rejects
-* a wrong prefix (404), an empty path, malformed percent encoding, and a
-* missing sessionId or file path (400). The caller still must bound the
-* decoded path with the workspace real-path guard — a decoded `..`
-* segment resolves outside the cwd and is refused there.
-*/
-function decodeHtmlUrl(pathname) {
-	if (!pathname.startsWith("/sidebar/html/")) return {
-		ok: false,
-		status: 404,
-		message: "not an html route"
-	};
-	const rest = pathname.slice(14);
-	if (rest === "") return {
-		ok: false,
-		status: 400,
-		message: "invalid html route path"
-	};
-	let segments;
-	try {
-		segments = rest.split("/").map((segment) => decodeURIComponent(segment));
-	} catch {
-		return {
-			ok: false,
-			status: 400,
-			message: "malformed URL encoding"
-		};
-	}
-	const [sessionId, ...pathSegments] = segments;
-	if (sessionId === void 0 || sessionId === "") return {
-		ok: false,
-		status: 400,
-		message: "sessionId and file path are required"
-	};
-	const unc = pathSegments[0] === "";
-	const tail = unc ? pathSegments.slice(1) : pathSegments;
-	if (tail.length === 0 || tail.some((segment) => segment === "")) return {
-		ok: false,
-		status: 400,
-		message: "sessionId and file path are required"
-	};
-	let path;
-	if (unc) path = `//${tail.join("/")}`;
-	else if (/^[A-Za-z]:$/.test(tail[0] ?? "")) path = tail.join("/");
-	else path = `/${tail.join("/")}`;
-	return {
-		ok: true,
-		ref: {
-			sessionId,
-			path
-		}
-	};
-}
 //#endregion
 //#region src/browser-probe.ts
 /**
@@ -692,11 +632,7 @@ function isTrustedApiRequest(request, trustedHosts) {
 * only allowlisted chunk names are servable (no path traversal).
 */
 /** The chunk names the client may request (mirror of src/client/chunk-loader.ts). */
-const CHUNK_NAMES = [
-	"terminal",
-	"editor",
-	"mermaid"
-];
+const CHUNK_NAMES = ["terminal", "editor"];
 /** Directory of this host-half module (lib/ — the chunk scripts live next to it). */
 const LIB_DIR = dirname(fileURLToPath(import.meta.url));
 /** sha1 content hash shortened to 12 hex chars (same shape as the client-modules rev). */
@@ -3689,8 +3625,8 @@ function buildSidechatApi(ctx) {
 //#region src/index.ts
 /**
 * dsh-coding-sidebar host half: the /sidebar JSON API (explorer listing, file
-* read/write, git), the /sidebar/file media route (images), the /sidebar/html
-* preview route, the /sidebar/bundle lazy-chunk route (client code splits),
+* read/write, git), the /sidebar/file media route (file bytes / downloads),
+* the /sidebar/bundle lazy-chunk route (client code splits),
 * and the terminal WebSocket upgrade. Every route passes the same
 * browser-trust fence as the /api gateway — Host-header loopback or the
 * web runtime's `trustedHosts` (LAN IP literals sampled at boot plus
@@ -3721,10 +3657,7 @@ const MEDIA_TYPES = {
 	".svg": "image/svg+xml",
 	".bmp": "image/bmp",
 	".ico": "image/x-icon",
-	".avif": "image/avif",
-	".pdf": "application/pdf",
-	".html": "text/html",
-	".htm": "text/html"
+	".avif": "image/avif"
 };
 /** Content type served by /sidebar/file (binary-safe fallback for unknowns). */
 function mediaTypeForPath(path) {
@@ -4302,45 +4235,6 @@ function apply(ctx, config) {
 			}
 		}
 	}), "dsh-coding-sidebar: /sidebar/file media route");
-	ctx.effect(() => ctx.webServer.register({
-		kind: "prefix",
-		path: "/sidebar/html",
-		handler: async (req, res) => {
-			if (!fence(req)) {
-				res.writeHead(403);
-				res.end("forbidden");
-				return;
-			}
-			if (req.method !== "GET") {
-				res.writeHead(405);
-				res.end();
-				return;
-			}
-			try {
-				const decoded = decodeHtmlUrl(new URL(req.url ?? "/", "http://dsh.internal").pathname);
-				if (!decoded.ok) {
-					writeError(res, new SidebarError("bad-request", decoded.message, decoded.status));
-					return;
-				}
-				const { sessionId, path } = decoded.ref;
-				const absolute = await ensureWorkspacePath(await sessionCwdOf(ctx, sessionId), path);
-				const info = await stat(absolute);
-				if (!info.isFile() || info.size > resolved.mediaLimit) throw new SidebarError("fs-error", "not a file or too large", 400);
-				const type = mediaTypeForPath(absolute);
-				const body = await readFile(absolute);
-				res.writeHead(200, {
-					"content-type": type === "text/html" ? "text/html; charset=utf-8" : type,
-					"cache-control": "no-cache",
-					"x-content-type-options": "nosniff",
-					"referrer-policy": "no-referrer",
-					"content-security-policy": "sandbox allow-scripts allow-popups allow-downloads allow-modals; object-src 'none'"
-				});
-				res.end(body);
-			} catch (error) {
-				writeError(res, error);
-			}
-		}
-	}), "dsh-coding-sidebar: /sidebar/html preview route");
 	const wss = new WebSocketServer({ noServer: true });
 	ctx.effect(() => ctx.webServer.registerUpgrade({
 		path: "/sidebar/ws/terminal",

package/lib/types/bundle-route.d.ts

@@ -1,6 +1,6 @@
 import type { Context, SidebarHttpRequest, SidebarHttpResponse } from './context-types.ts';
 /** The chunk names the client may request (mirror of src/client/chunk-loader.ts). */
-export declare const CHUNK_NAMES: readonly ["terminal", "editor", "mermaid"];
+export declare const CHUNK_NAMES: readonly ["terminal", "editor"];
 export type ChunkName = (typeof CHUNK_NAMES)[number];
 /**
  * Build the /sidebar/bundle route handler. `fence` is the shared browser-

package/lib/types/client/SideCardSection.d.ts

@@ -1,7 +1,7 @@
 import type { PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
 import { type SidebarPrefs } from '../prefs-shared.ts';
 import type { SidebarStore } from './state.ts';
-import type { BetterSidebarService, FileViewerDescriptor, SidebarSettingToggle, TabDescriptor } from './service.ts';
+import type { BetterSidebarService, SidebarSettingToggle, TabDescriptor } from './service.ts';
 /** Injected business face: the shared store (prefs cache) + the sidebar service (registries). */
 export interface SideCardSectionInjected {
     store: SidebarStore;
@@ -43,7 +43,7 @@ export declare function FeatureSettingsRows(props: {
     valueSource?: (key: string) => unknown;
 }): import("react").JSX.Element;
 /**
- * The secondary settings popup body of one feature (tab or viewer):
+ * The secondary settings popup body of one registered tab:
  * - the host-prefs `toggles` rows, then the plugin-owned `pluginToggles`
  *   rows (their values live in `pluginSettings[feature.id]`, projected onto
  *   the prefs face so the shared row renderer reads them);
@@ -53,7 +53,7 @@ export declare function FeatureSettingsRows(props: {
  *   open-behavior picker) and still ship a custom configuration area.
  */
 export declare function SettingsBody(props: {
-    feature: TabDescriptor | FileViewerDescriptor;
+    feature: TabDescriptor;
     prefs: SidebarPrefs;
     store: SidebarStore;
     service: BetterSidebarService;

package/lib/types/client/TextEditor.d.ts

@@ -1,10 +1,20 @@
-import type { FileViewerProps } from './service.ts';
-/**
- * The sandbox tokens of the HTML preview iframe. NO allow-same-origin (the
- * preview must stay in an opaque origin — with the route's own origin it
- * could read session data) and NO allow-top-navigation (a previewed page
- * must not hijack the GUI). The user can disable the sandbox per-feature
- * in the side card settings (warned); the toggle below reflects it.
- */
-export declare const HTML_IFRAME_SANDBOX = "allow-scripts allow-popups allow-downloads allow-modals";
-export declare function TextEditor(props: FileViewerProps): import("react").JSX.Element;
+import type { EditorToolbarControls, EditorToolbarState } from './service.ts';
+import type { Context } from '../context-types.ts';
+import type { SessionScope } from './api.ts';
+import type { SidebarStore } from './state.ts';
+/** Props of the sidebar text editor (the editor tab's content). */
+export interface TextEditorProps {
+    ctx: Context;
+    store?: SidebarStore;
+    scope: SessionScope;
+    path: string;
+    /** fs.read text content (undefined while loading / for non-editable reads). */
+    content?: string;
+    truncated?: boolean;
+    /** 'host' skips the own toolbar row — the editor host's merged-mode header
+     *  renders it instead, fed through the two callbacks below. */
+    toolbar?: 'self' | 'host';
+    onToolbarState?: (state: EditorToolbarState) => void;
+    onToolbarControls?: (controls: EditorToolbarControls | null) => void;
+}
+export declare function TextEditor(props: TextEditorProps): import("react").JSX.Element;

package/lib/types/client/add-plugin-modal.d.ts

@@ -1,15 +1,11 @@
 import type { BetterSidebarService } from './service.ts';
-/** Which extension point the modal is adding a plugin for. */
-export type PluginKind = 'tab' | 'viewer';
 /** The modal body: the GitHub topic button + the recommended plugin list
  *  with per-entry jump/copy buttons (extracted for direct testing). */
 export declare function PluginListBody(props: {
     service: BetterSidebarService;
-    kind: PluginKind;
 }): import("react").JSX.Element;
 /** The modal itself (mounted only while open — see the module comment). */
 export declare function AddPluginModal(props: {
     service: BetterSidebarService;
     onClose: () => void;
-    kind: PluginKind;
 }): import("react").JSX.Element;

package/lib/types/client/api.d.ts

@@ -1,3 +1,11 @@
+/**
+ * Typed fetch wrapper over the /sidebar JSON API. Every call posts to
+ * `/sidebar/api/<method>` with the sessionId and — when known — the session's
+ * cwd from the client's own list summary. The host prefers its attached
+ * session header and uses the summary cwd only while the session is still
+ * hydrating at page load (a detached session would otherwise fail the
+ * request). Failures surface as {@link SidebarApiError} with the wire code.
+ */
 import type { LastActivity } from '../subagent-activity.ts';
 import type { SidechatThreadInfo } from '../sidechat-core.ts';
 import type { BrowserProbeResult } from './browser.ts';
@@ -259,17 +267,6 @@ export declare const api: {
         started: boolean;
     }>;
 };
-/** Absolute URL of the media route for one path (images only). */
-export declare function mediaUrl(scope: SessionScope, path: string): string;
 /** Absolute URL of the download route: serves raw bytes (binary-safe) with
  *  `Content-Disposition: attachment`, so the browser saves the file. */
 export declare function downloadUrl(scope: SessionScope, path: string): string;
-/**
- * Absolute URL of the HTML preview route (see html-route.ts): the path is
- * fully encoded so the previewed page's relative assets resolve back into
- * the same route with the session scope intact. The UNC marker is
- * platform-neutral — the host's requireAbsolute resolves the decoded
- * forward-slash `//server/share/...` form on both win32 and POSIX — so no
- * client-side platform signal is needed.
- */
-export declare function htmlUrl(scope: SessionScope, path: string): string;

package/lib/types/client/builtins/index.d.ts

@@ -1,18 +1,18 @@
 /**
- * Built-in registration: the plugin registers its own tab pages and file
- * previewers through the same {@link BetterSidebarService} external plugins
- * use — eating its own dogfood. The descriptors live next to their feature
- * modules (tabs.tsx / viewers.tsx); this module only aggregates them and
- * owns the disposer lifecycle (cordis auto-invokes it on fiber disposal,
- * HMR-safe).
+ * Built-in registration: the plugin registers its own tab pages through the
+ * same {@link BetterSidebarService} external plugins use — eating its own
+ * dogfood. The descriptors live next to their feature modules (tabs.tsx);
+ * this module only aggregates them and owns the disposer lifecycle (cordis
+ * auto-invokes it on fiber disposal, HMR-safe).
+ *
+ * (v1.0.4: the built-in file viewers were retired with the file-viewer
+ * registry — file preview is the host's job now.)
  */
 import type { Context } from '../../context-types.ts';
 import type { BetterSidebarService } from '../service.ts';
 import { type BuiltinTabOptions } from './tabs.tsx';
 /**
- * Register all built-in tabs and viewers with the service. Returns a
- * disposer that unregisters everything (cordis auto-invokes it on fiber
- * disposal). The `ctx` is threaded into tab descriptors that need it
- * (EditorHost reads `ctx.betterSidebar` for file-viewer matching).
+ * Register all built-in tabs with the service. Returns a disposer that
+ * unregisters everything (cordis auto-invokes it on fiber disposal).
  */
 export declare function registerBuiltins(ctx: Context, service: BetterSidebarService, options?: BuiltinTabOptions): () => void;

package/lib/types/client/chunk-loader.d.ts

@@ -1,11 +1,10 @@
 /**
- * Lazy chunk loader for the client bundle. The heavy preview/terminal
- * libraries (CodeMirror, xterm — the editor/terminal stacks, several MB)
- * live in separate build-time bundles (`lib/client-<name>.js`) fetched only
- * on first use of the feature that needs them, so startup downloads/parses
- * only the ~1MB core bundle. (The office stack — Univer / docx-preview /
- * pptx-renderer — is no longer bundled here: Office previews moved to the
- * recommended office plugin, see plugins-viewers.ts.)
+ * Lazy chunk loader for the client bundle. The heavy editor/terminal
+ * libraries (CodeMirror, xterm — several MB) live in separate build-time
+ * bundles (`lib/client-<name>.js`) fetched only on first use of the feature
+ * that needs them, so startup downloads/parses only the ~1MB core bundle.
+ * (v1.0.4: the mermaid chunk was retired with the file-viewer line; the
+ * office stack moved to the ecosystem even earlier.)
  *
  * How a chunk script works (see tsdown.config.ts chunkBundle):
  *
@@ -49,7 +48,7 @@
  * client.js); an edit that does land while a core HMR happens is caught by
  * the ETag comparison on the next activation.
  */
-export type ChunkName = 'terminal' | 'editor' | 'mermaid';
+export type ChunkName = 'terminal' | 'editor';
 /** The module exports a chunk factory provides (namespace-ish record). */
 export type ChunkExports = Record<string, unknown>;
 /**

package/lib/types/client/locales.d.ts

@@ -94,14 +94,6 @@ export declare const zh: {
     terminalDepsFailed: string;
     terminalDepsHint: string;
     terminalDepsProfile: string;
-    preview: string;
-    toc: string;
-    edit: string;
-    mermaidError: string;
-    mermaidZoomIn: string;
-    mermaidZoomOut: string;
-    mermaidZoomReset: string;
-    mermaidZoomHint: string;
     refresh: string;
     refreshUnsavedConfirm: string;
     save: string;
@@ -244,16 +236,8 @@ export declare const zh: {
     settingsShellArgsDesc: string;
     settingsShellArgsPlaceholder: string;
     settingsTabsTitle: string;
-    settingsViewersTitle: string;
     settingsGeneralTitle: string;
     settingsPopup: string;
-    settingsViewerCatchAll: string;
-    viewerImage: string;
-    viewerPdf: string;
-    viewerMarkdown: string;
-    viewerCode: string;
-    viewerBinary: string;
-    viewerHtml: string;
     browser: string;
     browserPlaceholder: string;
     browserGo: string;
@@ -264,14 +248,9 @@ export declare const zh: {
     browserBlockedLoopback: string;
     browserInvalid: string;
     browserNoSandboxWarning: string;
-    htmlNoSandboxWarning: string;
     sandboxStatusOn: string;
     sandboxUnlock: string;
     sandboxRestore: string;
-    settingsHtmlDefaultUnsafeTitle: string;
-    settingsHtmlDefaultUnsafeDesc: string;
-    settingsHtmlSandboxTitle: string;
-    settingsHtmlSandboxDesc: string;
     settingsBrowserSandboxTitle: string;
     settingsBrowserSandboxDesc: string;
     settingsBrowserLinksTitle: string;
@@ -352,10 +331,7 @@ export declare const zh: {
     jobKillError: string;
     addPluginsTabCard: string;
     addPluginsTabCardDesc: string;
-    addPluginsViewerCard: string;
-    addPluginsViewerCardDesc: string;
     addPluginsTabDesc: string;
-    addPluginsViewerDesc: string;
     addPluginsBrowseMore: string;
     addPluginsSearch: string;
     addPluginsNoMatch: string;
@@ -363,7 +339,6 @@ export declare const zh: {
     addPluginsEmpty: string;
     openPlugin: string;
     copyInstall: string;
-    pluginOfficeDesc: string;
     pluginFlowglassDesc: string;
     pluginGitForgeDesc: string;
     pluginGitRemotesDesc: string;
@@ -371,7 +346,6 @@ export declare const zh: {
     pluginSidebarQaDesc: string;
     pluginSshTunnelDesc: string;
     pluginTurnReviewDesc: string;
-    pluginVideoPreviewDesc: string;
     pluginDocsPanelDesc: string;
     pluginEgoBrowserDesc: string;
 };

package/lib/types/client/native-avoid.d.ts

@@ -0,0 +1,2 @@
+import type { SidebarStore } from './state.ts';
+export declare function installNativeSidebarAvoidance(store: SidebarStore): () => void;

package/lib/types/client/plugins-shared.d.ts

@@ -1,10 +1,10 @@
 /**
- * Shared vocabulary of the recommended plugin catalogs: the entry shape and
- * the GitHub topic URL. The two catalogs live in sibling modules —
- * `plugins-tabs.ts` (tab registrations) and `plugins-viewers.ts` (file
- * previewer registrations) — and are shown in the two "add plugin" modals
- * (Side card settings → the dashed cards at the end of the 侧边栏内容 /
- * 文件预览 grids).
+ * Shared vocabulary of the recommended plugin catalog: the entry shape and
+ * the GitHub topic URL. The catalog lives in the sibling module
+ * `plugins-tabs.ts` (tab registrations) and is shown in the "add plugin"
+ * modal (Side card settings → the dashed card at the end of the 侧边栏内容
+ * grid). (v1.0.4: the file-previewer catalog was retired with the
+ * file-viewer registry.)
  */
 /** The GitHub topic page listing every repo tagged `dsh-coding-sidebar`. */
 export declare const PLUGIN_TOPIC_URL = "https://github.com/topics/dsh-coding-sidebar";

package/lib/types/client/service.d.ts

@@ -1,10 +1,13 @@
 /**
  * The BetterSidebar client service: a registry that external plugins use
- * to contribute sidebar tab types and file previewers. The service is
- * published to the cordis context as `ctx.betterSidebar` (see
- * {@link ../context-types.ts}); consumers declare it in `inject` and call
- * `registerTab` / `registerFileViewer`, both returning a disposer that
- * cordis auto-invokes on fiber disposal (HMR-safe).
+ * to contribute sidebar tab types. The service is published to the cordis
+ * context as `ctx.betterSidebar` (see {@link ../context-types.ts});
+ * consumers declare it in `inject` and call `registerTab`, which returns a
+ * disposer that cordis auto-invokes on fiber disposal (HMR-safe).
+ *
+ * (v1.0.4: the file-viewer registry — `registerFileViewer` /
+ * `matchFileViewer` — was retired; file preview is the host's job now and
+ * the sidebar edits text only.)
  *
  * Design notes:
  * - The registry is synchronous-snapshot (Map + listener set) so React
@@ -15,9 +18,6 @@
  *   `single: true` is sugar for `dedupeKey: () => id`.
  * - `createTab` lets a descriptor own tab instantiation (the terminal
  *   builtin uses it to mint `terminal:<n>` ids and bump `nextTerminal`).
- * - `matchFileViewer` walks descriptors in priority order (desc, stable):
- *   per descriptor it tries `detect` first (when `head` bytes are given),
- *   then `exts`; `exts: []` is a catch-all that matches any path.
  */
 import type { ReactNode } from 'react';
 import type { Context } from '../context-types.ts';
@@ -50,7 +50,7 @@ export interface SidebarSettingSelectOption {
      *  option's icon too; without icons both are a single line of text. */
     icon?: ReactNode | ((size: number) => ReactNode);
 }
-/** One declarative setting of a tab/viewer, rendered as a nested row in the
+/** One declarative setting of a registered tab, rendered as a nested row in the
  *  Side card settings page (e.g. the Subagent page's "auto-open when a
  *  subagent appears" switch, or the terminal's custom font rows). `type`
  *  selects the control: 'switch' (default) renders the custom switch,
@@ -93,7 +93,7 @@ export interface SidebarSettingsRenderProps {
     /** Close the settings popup. */
     close(): void;
 }
-/** Declarative settings of one registered tab or file viewer. */
+/** Declarative settings of one registered tab. */
 export interface SidebarSettingsDeclaration {
     /**
      * Extra settings rows rendered under the feature's own row in the
@@ -223,78 +223,17 @@ export interface TabDescriptor {
     onClose?: (tab: SidebarTab, scope: SessionScope) => void;
     component: (props: TabComponentProps) => ReactNode;
 }
-/** How the host loads a file's bytes for one viewer. */
-export type FileFetchStrategy = 'none' | 'fsRead' | 'mediaUrl' | 'custom' | 'binary-download';
-/** Props every file viewer component receives. */
-export interface FileViewerProps {
-    ctx: Context;
-    store: SidebarStore;
-    scope: SessionScope;
-    path: string;
-    title: string;
-    /** The matching descriptor's id (`'code'`, `'my-plugin:csv'`). */
-    viewerId: string;
-    /** fsRead text content (fetchStrategy='fsRead'). */
-    content?: string;
-    truncated?: boolean;
-    /** mediaUrl for the path (fetchStrategy='mediaUrl'). */
-    mediaUrl?: string;
-    /** custom load() return value (fetchStrategy='custom'). */
-    customData?: unknown;
-    /** Internal (built-in text editor): 'host' asks the viewer to skip its own
-     *  toolbar row — the editor host's merged-mode header renders it instead,
-     *  fed through the two callbacks below. Viewers that ignore these fields
-     *  render exactly as before. */
-    toolbar?: 'self' | 'host';
-    /** Internal: the viewer reports its toolbar state (mode/dirty/save). */
-    onToolbarState?: (state: EditorToolbarState) => void;
-    /** Internal: the viewer registers its toolbar commands on mount (null on
-     *  unmount). */
-    onToolbarControls?: (controls: EditorToolbarControls | null) => void;
-}
-/** The toolbar state a text editor reports to the host's merged-mode header. */
+/** The toolbar state the text editor reports to the host's merged-mode header. */
 export interface EditorToolbarState {
-    /** Whether the preview/edit mode toggle applies (markdown/html). */
-    modes: boolean;
-    mode: 'preview' | 'edit';
     dirty: boolean;
     /** Whether saving applies (text content loaded). */
     editable: boolean;
     saveState: 'idle' | 'saving' | 'saved' | 'failed';
 }
-/** The commands the host's merged-mode header sends back to the viewer. */
+/** The commands the host's merged-mode header sends back to the editor. */
 export interface EditorToolbarControls {
-    setMode(mode: 'preview' | 'edit'): void;
     save(): void;
 }
-/** Describes one file previewer (builtins register themselves too). */
-export interface FileViewerDescriptor {
-    /** Unique id (`'image'`, `'pdf'`, `'my-plugin:csv'`). */
-    id: string;
-    /** Display name for the settings inventory (falls back to `id` when absent). */
-    title?: string | (() => string);
-    /** Icon shown in the settings inventory. */
-    icon?: ReactNode | ((size: number) => ReactNode);
-    /** Lowercase extensions without leading dot (`['png','jpg']`). `[]` = match any (catch-all). */
-    exts: readonly string[];
-    /** Higher wins; default 0. Builtins use 0; the catch-all `code` viewer uses -100. */
-    priority?: number;
-    fetchStrategy: FileFetchStrategy;
-    /**
-     * Content sniff: when `head` bytes are available the descriptor's `detect`
-     * is consulted before its `exts` (per-descriptor, in priority order).
-     */
-    detect?: (path: string, head: Uint8Array) => boolean;
-    /** fetchStrategy='custom' loader. `signal` (v0.12.0+) aborts on viewer
-     *  teardown / re-match; loaders that ignore it keep working. */
-    load?: (path: string, scope: SessionScope, signal?: AbortSignal) => Promise<unknown>;
-    /**
-     * Declarative settings shown in the Side card settings page: every
-     * registered viewer gets an enable/disable switch (icon + title + exts).
-     */
-    settings?: SidebarSettingsDeclaration;
-    component: (props: FileViewerProps) => ReactNode;
-}
 /** One `openTab` request. */
 export interface OpenTabSeed {
     type: string;
@@ -316,9 +255,7 @@ export interface OpenTabSeed {
  */
 export interface BetterSidebarService {
     registerTab(descriptor: TabDescriptor): () => void;
-    registerFileViewer(descriptor: FileViewerDescriptor): () => void;
     getTabs(): readonly TabDescriptor[];
-    getFileViewers(): readonly FileViewerDescriptor[];
     /** Find a tab descriptor by id (undefined if not registered). */
     getTab(id: string): TabDescriptor | undefined;
     /**
@@ -328,13 +265,6 @@ export interface BetterSidebarService {
      * derived flows gate on it).
      */
     isTabEnabled(id: string): boolean;
-    /** Whether a file viewer is enabled (absent `viewersEnabled[id]` = enabled). */
-    isViewerEnabled(id: string): boolean;
-    /**
-     * Find a file viewer for a path (priority desc; detect first, then exts).
-     * Disabled viewers are skipped, so files fall through to the next match.
-     */
-    matchFileViewer(path: string, head?: Uint8Array): FileViewerDescriptor | undefined;
     /**
      * Open a tab (used by external tabs and the + menu). `title` overrides
      * the descriptor's title when given (the editor tab shows the file name);
@@ -433,7 +363,7 @@ export declare const SIDEBAR_SERVICE_VERSION: string;
 export declare const SIDEBAR_FEATURES: readonly ["badge", "tabLifecycle", "updateTab", "openFile", "targetedOpen", "stateSubscription", "tabMeta", "pluginSettings", "urlTarget", "settingSelect", "floatWindows"];
 /**
  * Create one BetterSidebar service bound to a store. The service owns the
- * tab/viewer registries (Map + listener set) and proxies openTab/closeTab
+ * tab registry (Map + listener set) and proxies openTab/closeTab
  * to the store's reducer. One instance per client plugin activation.
  */
 export declare function createBetterSidebarService(store: SidebarStore): BetterSidebarService;

package/lib/types/index.d.ts

@@ -3,7 +3,7 @@ import { Config, type ResolvedSidebarConfig, type SidebarConfig } from './config
 export { Config };
 export type { SidebarConfig, ResolvedSidebarConfig };
 export type { Context } from './context-types.ts';
-export type { BetterSidebarService, TabDescriptor, TabComponentProps, FileViewerDescriptor, FileViewerProps, FileFetchStrategy, } from './client/service.ts';
+export type { BetterSidebarService, TabDescriptor, TabComponentProps, } from './client/service.ts';
 /** Plugin identity for cordis.yml rows. */
 export declare const name = "dsh-coding-sidebar";
 /** Services required before mounting: the webserver routes, the session store, the web runtime's trusted hosts, and the tool registry. */

package/lib/types/prefs-shared.d.ts

@@ -124,22 +124,6 @@ export interface SidebarPrefs {
      * starts `strip` px below its top edge.
      */
     titleBarStripPx: number;
-    /**
-     * Whether the HTML previewer drops its sandboxed iframe. Sandbox ON (the
-     * default) renders previewed HTML in an opaque-origin iframe that cannot
-     * touch the GUI; turning it OFF runs the previewed page with the GUI's
-     * own origin — full read/write access to session files and internal
-     * APIs. Only for trusted local content; the setting copy warns.
-     */
-    htmlViewerNoSandbox: boolean;
-    /**
-     * Whether a newly opened HTML preview starts UNSANDBOXED (the per-surface
-     * temporary unlock pre-applied). Off by default: previews open sandboxed
-     * and the status row offers the one-tap unlock; when on, previews open
-     * in the red unsandboxed state and the status row offers a one-tap
-     * restore for the current file.
-     */
-    htmlViewerDefaultUnsafe: boolean;
     /**
      * Whether the browser tab drops its sandboxed iframe. Sandbox ON (the
      * default) keeps browsed sites in an opaque origin with no GUI access;
@@ -194,16 +178,9 @@ export interface SidebarPrefs {
      * own layouts" rule.
      */
     tabsEnabled: Record<string, boolean>;
-    /**
-     * Per-viewer enable switches, keyed by file viewer descriptor id
-     * (`'image'`, `'my-plugin:csv'`). An ABSENT key means enabled; a disabled
-     * viewer is skipped by `matchFileViewer` so files fall through to the
-     * next matching viewer (or the download button when none match).
-     */
-    viewersEnabled: Record<string, boolean>;
     /**
      * Plugin-owned settings blobs (v0.12.0+), keyed by descriptor id: each
-     * registered tab/viewer that declares `settings.pluginToggles` (or writes
+     * registered tab that declares `settings.pluginToggles` (or writes
      * through `settings.render`'s `updatePluginSetting`) persists its values
      * here — an open map, so third-party keys need no host PrefsSchema field.
      * Values are JSON-serializable (the row controls produce strings /