[tannevaled]

The deck's project, left of the editor: themes, kinds, data files and media, laid out the way the slides command and the VS Code extension read them.

The panel. It is a toolkit.FileTree (go-widgets/toolkit v0.335.0, go-widgets/toolkit#498) over the draft project of the store from #28.

• Shown: deck.md, slides.yaml, themes/, kinds/, media/.
• Opening a file edits it in the same editor. The language comes from the extension (Markdown, YAML, HCL, JSON, CSS), and go-slides' diagnostics show for kinds and config files.
• File operations:
  • rename with F2
  • new file or new folder
  • delete, after a confirmation
  • drag a file onto a folder to move it
  • a context menu, also on Shift+F10
• WAI-ARIA APG treeview keyboard handling, and Seti icons.

Project menu.

• New theme from default, gaia or uncover, built with @import. The new theme joins the Theme list.
• New kind and new data file, both from templates.
• Each new file is listed in slides.yaml. Renames and deletions are followed there too.

Media. Media dropped or pasted on the editor are stored as bytes in media/, and the deck names them (![](media/x.png)). The deck no longer holds them as data: URIs.

• Why not blob: URLs from the page: I checked in Chrome. A blob: URL made by the page is refused in the opaque-origin sandbox ("Not allowed to load local resource").
• What happens instead: the page posts the bytes to the preview, rail and presenter frames. Each frame makes its own blob:null/… URLs and puts them in place of the paths.
• Sandbox and CSP: the sandbox is unchanged. The only CSP change is adding blob: to media-src and font-src.
• Save as ▸ HTML page inlines the media as data: URIs.
• Limits: 8 MiB per file and 64 MiB per project. Usage is shown under the panel.

Project in and out.

• Download project (.zip).
• Open project from a .zip, or from a folder. For a folder it uses the File System Access API where available, and <input webkitdirectory> otherwise.
• The importer refuses:
  • paths outside the project (.., absolute paths, backslashes)
  • symlinks
  • more than 256 files or more than 1024 entries
  • files over 8 MiB (each file is read through a size limit)
  • archives that inflate more than 100× their size
• Fuzzing: FuzzImportZip, 2.3M runs, no finding.

Share link. When the project holds more than the deck, Share says the link carries only the deck and offers the .zip instead.

Verified.

• browsertest/files.cjs (added to CI) runs in headless Chrome:
  • a theme made from the menu and picked in the Theme list colours the h1 #4f46e5
  • a kind is applied (invert)
  • a dropped PNG shows as a background through blob:null/… and decodes
  • the project is downloaded as a .zip and reopened from that file with the same files
• drive.cjs passes, updated for the drop going into media/.
• slides build deck.md on the exported project, unzipped, builds it with the project theme.

Cost of 20 MiB of media.

	Time
Edit reaches the preview, no media	30 ms (median of 7)
Edit reaches the preview, with 20 MiB of media	30 ms (median of 7)
A new document (theme change), media posted again	~270 ms

Load average was about 10–14 during these runs. Both edit rows were measured in the same run.

Not in this PR. The PDF, PPTX and ODP exports from #29 still render the deck alone, without the project's themes, kinds or media. That is a follow-up: exporter.Export has to take the project's files.

🤖 Generated with Claude Code