Still
Still removes short-form video surfaces from YouTube, Instagram, Facebook, and TikTok. It is designed to be quiet infrastructure: no timers, streaks, locks, shame loops, or attention dashboards. Still removes Shorts and Reels while preserving regular YouTube, Instagram, and Facebook content; it blocks the TikTok website.
This repository is public so people who install Still can inspect what runs in the browser, how privacy is handled, how optional settings sync works, and how releases are tested.
Release status: See the dated release record
and release runbook for store rollout, verified coverage and remaining
gates. Check live store state before a release action.
Development
Requirements:
- Node.js 22.22.2+ within 22.x, 24.15.0+ within 24.x, or 26+ (required by the test toolchain)
- pnpm 11.x
- Supabase CLI and Docker for local database/function work
- Playwright Chromium for extension fixture tests
- Xcode 16+ for Apple targets
corepack enable
pnpm install --frozen-lockfile
pnpm exec playwright install chromium
pnpm lint
pnpm typecheck
pnpm test
pnpm build
pnpm exec playwright test --project=fixtures
Load unpacked development builds from:
- Chromium:
packages/ext-chromium/dist/chrome-mv3
- Firefox:
packages/ext-chromium/dist/firefox-mv3/manifest.json
Build output is generated and ignored by Git. Do not load the source directory as an extension.
Cloud auth and sync require local environment configuration; purchase flows are dormant in 2.x builds
(V3 activates them deliberately). Blocking and most
tests work without production credentials. Copy the relevant package-level .env.example file and
use local or development values only.
Apple helpers live in apps/apple/scripts/README.md.
Use the explicit V3 QA profiles for coherent modern settings builds and
artifact receipts. pnpm build:v3:local requires no backend; pnpm build:v3:test uses the approved
existing hosted backend with dedicated test accounts. Ordinary build commands keep their defaults.
What Still ships
| Surface | What it does |
|---|
| Browser extensions | Shared WebExtension code for Chromium and Firefox builds, with a data-driven content script for blocking short-form surfaces. |
| Safari extension | The same blocking core packaged as a Safari Web Extension. |
| Apple app | iOS and macOS host app for the Safari extension and native bridge, with StoreKit 2 purchase infrastructure (dormant in 2.x; activated by V3). |
| Supabase backend | Auth, settings sync, entitlement reconciliation, signed rule-set hosting, export, deletion, and selector canary functions. |
Product model
| Feature | Included |
|---|
| Free blocking | YouTube Shorts and Instagram/Facebook Reels removal; TikTok website blocking. No account or purchase required. |
| Optional free settings sync | Sign in with the same email on supported devices to sync your Still settings. |
| Still Pro (V3 direction) | Twelve optional extras, Off on fresh installs, for a one-time $9.99 lifetime payment. Never required for blocking or sync. |
On iPhone and iPad, Still works on websites opened in Safari, not inside native social-media apps.
Shipped 2.x is free; purchase infrastructure is disabled in those builds. The approved V3 direction
adds the optional Pro tier above — see STRATEGY.md and the
V3 release record.
Still does not collect browsing history. Host permissions are limited to youtube.com, instagram.com, facebook.com, and tiktok.com; the extension never requests <all_urls>.
Architecture
Still is a TypeScript-first monorepo with thin platform shells:
packages/
shared-types/ rule set, settings, and entitlement types
core/ rule engine, content script, Svelte UI, storage, sync, native bridge adapters
app-webview/ web UI embedded in the iOS and macOS host app
ext-chromium/ WXT MV3 extension for Chromium; also produces the Firefox build
ext-safari/ WXT Safari extension resources consumed by the Apple app
apps/
apple/ Xcode project for iOS, macOS, Safari extension, and StillKit
supabase/
migrations/ schema, RLS, indexes, and rule-set seed data
functions/ Edge Functions for billing, account, entitlement, and canary flows
tests/
fixtures/ recorded service pages used by Playwright
playwright/ extension integration tests
smoke/ non-gating real-site smoke checks
docs/
release/ current release runbooks, store assets and certification
adr/ accepted architecture decisions
solutions/ reusable implementation lessons
plans/ implementation plans with status and evidence
research/ dated external research and its sources
archive/ historical release/testing records
The blocking engine consumes a signed, versioned JSON rule set. Remote updates are data only: selectors, match patterns, action enum values, and tier metadata. They are schema-checked and Ed25519-verified before use; remote rule sets never ship executable code.
For shipped behavior and reconciliation rules, use the product specification;
per-release plans, build plans, screenshots, and release files live in
docs/release/history/.
For a deeper map, start with docs/README.md and docs/ARCHITECTURE.md.
Folder guides: core, Chromium/Firefox,
Safari, Apple webview,
shared types, Apple,
backend, and tests.
Trust signals
- CI runs lint, typecheck, unit tests, extension builds, Supabase function checks, and Playwright fixture tests on every PR.
main is protected by a GitHub ruleset requiring PRs and the required status checks before merge.- Real secrets are excluded from the repository. Tracked config files contain empty defaults or public client keys only.
- Store privacy copy lives in docs/privacy.html, and support copy lives in docs/support.html.
- Security reporting instructions live in SECURITY.md.
- The current release validation record lives in docs/release/VALIDATION.md.
Release operations
The release runbook starts at docs/release/README.md. It documents the Apple App Store, Chrome Web Store, Firefox AMO, RevenueCat, Supabase, and mobile-validation steps, including the human-gated credentials and portal work that cannot be automated safely.
Agent collaboration
Claude Code, Codex Personal, and Codex Work share repository-backed Compound Engineering knowledge.
All agents must follow AGENTS.md; Claude imports the same rules through
CLAUDE.md. Product direction lives in STRATEGY.md, and the knowledge
lifecycle is documented in docs/SHARED-BRAIN.md.
Contributing
Focused fixes and documentation improvements are welcome by prior maintainer agreement. Read
CONTRIBUTING.md before starting work, use the issue templates for bugs and feature
requests, and keep security-sensitive reports out of public issues.
License
See LICENSE. The repository is currently source-available for transparency, not open-source licensed for reuse.
