Sidebar-driven run navigation: replace the per-tab overlay with a native Firefox sidebar

build.mjs

@@ -1,5 +1,5 @@
 import * as esbuild from 'esbuild';
-import { copyFileSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
+import { copyFileSync, cpSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
 
 const watch = process.argv.includes('--watch');
 
@@ -20,6 +20,8 @@ const entries = [
   { entryPoints: ['src/popup/style.css'],     outfile: 'dist/style.css'     },
   { entryPoints: ['src/options/index.ts'],    outfile: 'dist/options.js'    },
   { entryPoints: ['src/options/style.css'],   outfile: 'dist/options.css'   },
+  { entryPoints: ['src/sidebar/index.ts'],    outfile: 'dist/sidebar.js'    },
+  { entryPoints: ['src/sidebar/style.css'],   outfile: 'dist/sidebar.css'   },
 ];
 
 function copyStatics() {
@@ -28,6 +30,11 @@ function copyStatics() {
   writeFileSync('dist/manifest.json', manifest);
   copyFileSync('src/popup/index.html',   'dist/popup.html');
   copyFileSync('src/options/index.html', 'dist/options.html');
+  copyFileSync('src/sidebar/index.html', 'dist/sidebar.html');
+  // Self-hosted fonts: fonts.css is loaded by all three surfaces; its url()s resolve to
+  // dist/fonts/*.woff2 (copied verbatim — not bundled, so esbuild never touches the woff2).
+  copyFileSync('src/styles/fonts.css', 'dist/fonts.css');
+  cpSync('src/styles/fonts', 'dist/fonts', { recursive: true });
 }
 
 if (watch) {

manifest.json

@@ -21,7 +21,12 @@
     "default_popup": "dist/popup.html",
     "default_title": "expurge"
   },
-  "permissions": ["storage", "tabs", "downloads", "scripting", "webNavigation"],
+  "sidebar_action": {
+    "default_panel": "dist/sidebar.html",
+    "default_title": "expurge",
+    "open_at_install": false
+  },
+  "permissions": ["storage", "tabs", "downloads"],
   "host_permissions": [
     "*://updates.expurge.dev/*"
   ],
@@ -38,9 +43,9 @@
     }
   },
   "_notes": {
-    "webNavigation": "In permissions for background webNavigation.onErrorOccurred (load-error skipping). Not yet wired in background/index.ts — implement when adding M9 brokers.",
+    "webNavigation": "Removed — was reserved for background webNavigation.onErrorOccurred (load-error skipping) but never wired. Re-add to permissions when M9 wires webNavigation.onErrorOccurred.",
     "host_permissions_update_server": "updates.expurge.dev: confirm subdomain before M7 ships. Background fetch needs host_permissions (not optional) to bypass CORS without user consent. If URL changes, update here.",
-    "m9_new_brokers": "Each new broker domain needs TWO entries: (1) optional_host_permissions so browser.permissions.request() can offer it at run start; (2) content_scripts.matches so the overlay injects. Both are required — either alone does not work.",
+    "m9_new_brokers": "Each new broker domain needs TWO entries: (1) optional_host_permissions so browser.permissions.request() can offer it at run start; (2) content_scripts.matches so the headless challenge reporter injects (challenge detection). Both are required — either alone does not work. Verdict UI lives in the window-level sidebar (sidebar_action), which needs no per-domain entry.",
     "m8_no_new_permissions": "Persistence opt-ins (M8) use storage.local only — no new permissions needed.",
     "firefox_ignores_underscore_keys": "Firefox logs a warning for unknown top-level keys but loads the extension. Remove _notes before AMO submission if it causes review friction."
   }

plan/expurge-progress.md

@@ -37,15 +37,24 @@ sections, redesigned popup (run-control-panel only). No persistence opt-ins.
 The popup currently contains the profile form and draft surfaces. Per the design interview,
 these move to the options page in M4+. The popup becomes a compact run control panel only.
 
-### Planned: overlay → sidebar migration (decided 2026-07-01, not yet built)
-
-The shipped in-page shadow-DOM overlay (`src/content/index.ts`) and its Restore-Overlay /
-PING / reinjection machinery are slated for replacement by a Firefox native **sidebar** — a
-persistent run-wide checklist that drives navigation. Adds a first-class `deferred` work-item
-state, a `MAX_OPEN_TABS=15` ceiling, per-broker `search.guidance`, and shrinks the content
-script to a headless challenge reporter. Full plan in **`plan/sidebar-nav.md`**; rationale in
-wherefore `2026-07-01-sidebar-run-navigation` (resolves Q-013, opens Q-015). The `content` /
-`popup` / `background` rows above document the **current** overlay build, not the target.
+### Done: overlay → sidebar migration (decided + built 2026-07-01)
+
+The in-page shadow-DOM overlay was **replaced by a Firefox native `sidebar_action`** — a
+persistent, window-level run-wide checklist that drives navigation itself. Beyond what the
+per-tab overlay could do, the sidebar adds an **interactive checklist** (grouped In progress /
+Waiting / Done; click any non-terminal row to jump to that tab) and an always-available
+**Defer** control. The migration also added a first-class `deferred` work-item state, a
+`MAX_OPEN_TABS=15` ceiling, per-broker `search.guidance`, a shared `progressOf`/`isComplete`
+definition, and shrank the content script to a **headless challenge reporter** (no UI, ~45
+lines). The reinjection machinery (Restore-Overlay / PING / `reinjectIfMissing` / `GET_ITEM`)
+is gone, and the dead `scripting` permission was dropped.
+
+View truth lives in one pure function, `deriveView` (`src/sidebar/state.ts`); the background
+builds its inputs and pushes `SIDEBAR_UPDATE`, and the sidebar renders without re-deriving.
+Full plan (§-by-§ with commit refs) in **`plan/sidebar-nav.md`**; rationale in wherefore
+`2026-07-01-sidebar-run-navigation` (resolves Q-013; Q-015 pending empirical Firefox check).
+The `content` / `popup` / `background` rows above describe the **pre-migration** build and are
+superseded by the sidebar architecture — see `sidebar-nav.md` for the current shape.
 
 ---