From 705226d5e63e3fab372f4aede7aed2a24b672423 Mon Sep 17 00:00:00 2001
From: Blodhgarm <blodhgrm@gmail.com>
Date: Tue, 13 Oct 2026 22:09:01 -0500
Subject: [PATCH 1/2] feat: Add Slicer tab to moderation project view

Uses Iframe and bridge script to communicate with slicer to manage current workspace.
---
 .../src/components/project-review/index.vue   |   5 +
 .../project-review/layout/context.ts          |   5 +
 .../project-review/layout/panel.vue           |  18 ++-
 .../components/project-review/layout/types.ts |   1 +
 .../src/components/project-review/messages.ts |  12 ++
 .../project-review/slicer/bridge-storage.ts   |  39 +++++
 .../project-review/slicer/bridge.js           |  74 +++++++++
 .../project-review/slicer/index.vue           | 129 +++++++++++++++
 .../project-review/versions/version-card.vue  |  51 +++++-
 apps/frontend/src/locales/en-US/index.json    |   9 ++
 .../providers/project-review/review-slicer.ts |  52 +++++++
 package.json                                  |   2 +-
 packages/moderation/src/data/keybinds.ts      |   6 +
 packages/moderation/src/types/keybinds.ts     |   9 +-
 pnpm-lock.yaml                                | 147 ++++++++++--------
 15 files changed, 486 insertions(+), 73 deletions(-)
 create mode 100644 apps/frontend/src/components/project-review/slicer/bridge-storage.ts
 create mode 100644 apps/frontend/src/components/project-review/slicer/bridge.js
 create mode 100644 apps/frontend/src/components/project-review/slicer/index.vue
 create mode 100644 apps/frontend/src/providers/project-review/review-slicer.ts

diff --git a/apps/frontend/src/components/project-review/index.vue b/apps/frontend/src/components/project-review/index.vue
index 8e70580c36..53dc0e0c08 100644
--- a/apps/frontend/src/components/project-review/index.vue
+++ b/apps/frontend/src/components/project-review/index.vue
@@ -81,6 +81,7 @@
 			<template #permissions><Permissions :key="projectId" /></template>
 			<template #versions><Versions :key="projectId" /></template>
 			<template #tech-review><TechReview :key="projectId" /></template>
+			<template #slicer><Slicer :key="projectId" /></template>
 		</ProjectReviewLayout>
 		<template #fallback>
 			<p class="m-0 p-4 text-secondary" role="status">
@@ -122,6 +123,7 @@ import {
 	createReviewSession,
 	provideReviewSession,
 } from '~/providers/project-review/review-session'
+import { createReviewSlicer, provideReviewSlicer } from '~/providers/project-review/review-slicer'
 import {
 	createReviewSubmission,
 	provideReviewSubmission,
@@ -144,6 +146,7 @@ import QueueBar from './queue-bar.vue'
 import ReviewOutcomeButtons from './review-outcome-buttons/index.vue'
 import { createReviewContext, provideReviewContext } from './review-panel/context'
 import { createReviewShortcuts, provideReviewShortcuts, reviewShortcutBlocked } from './shortcuts'
+import Slicer from './slicer/index.vue'
 import TechReview from './tech-review/index.vue'
 import Versions from './versions/index.vue'
 
@@ -166,7 +169,9 @@ const {
 	selection,
 	isLoading,
 	navigation,
+	versions,
 } = injectProjectReviewPageContext()
+provideReviewSlicer(createReviewSlicer(projectId, versions))
 const visibleTabs = computed<readonly ProjectReviewTab[]>((previousTabs) => {
 	if (!project.value) {
 		return previousTabs ?? projectReviewTabs.filter((tab) => tab !== 'permissions')
diff --git a/apps/frontend/src/components/project-review/layout/context.ts b/apps/frontend/src/components/project-review/layout/context.ts
index be4febb17a..04e467a3ae 100644
--- a/apps/frontend/src/components/project-review/layout/context.ts
+++ b/apps/frontend/src/components/project-review/layout/context.ts
@@ -13,3 +13,8 @@ export const [injectProjectReviewContext, provideProjectReviewContext] =
 
 export const [injectReviewSlot, provideReviewSlot] =
 	createContext<Ref<ProjectReviewSlot>>('ProjectReviewSlot')
+
+/** Whether the surrounding panel is currently shown, e.g. it is the active tab in its group. */
+export const [injectReviewPanelVisible, provideReviewPanelVisible] = createContext<
+	Readonly<Ref<boolean>>
+>('ProjectReviewPanelVisible')
diff --git a/apps/frontend/src/components/project-review/layout/panel.vue b/apps/frontend/src/components/project-review/layout/panel.vue
index 39d8aa157f..378d089d8f 100644
--- a/apps/frontend/src/components/project-review/layout/panel.vue
+++ b/apps/frontend/src/components/project-review/layout/panel.vue
@@ -5,7 +5,8 @@
 			slotName === 'right' ||
 			slotName === 'disclosures' ||
 			slotName === 'permissions' ||
-			slotName === 'gallery'
+			slotName === 'gallery' ||
+			slotName === 'slicer'
 				? 'overflow-hidden'
 				: 'overflow-auto'
 		"
@@ -25,10 +26,10 @@
 <script setup lang="ts">
 import { useVIntl } from '@modrinth/ui'
 import type { IDockviewPanelProps } from 'dockview-vue'
-import { computed } from 'vue'
+import { computed, ref, watchEffect } from 'vue'
 
 import { projectReviewMessages as messages } from '../messages'
-import { injectProjectReviewContext, provideReviewSlot } from './context'
+import { injectProjectReviewContext, provideReviewPanelVisible, provideReviewSlot } from './context'
 import type { ProjectReviewSlot } from './types'
 
 defineOptions({ inheritAttrs: false })
@@ -43,6 +44,17 @@ const slotName = computed(() =>
 	'slot' in props.params ? props.params.slot : props.params.params.slot,
 )
 provideReviewSlot(slotName)
+const panelVisible = ref(true)
+watchEffect((onCleanup) => {
+	if (!('api' in props.params)) return
+	const api = props.params.api
+	panelVisible.value = api.isVisible
+	const subscription = api.onDidVisibilityChange((event) => {
+		panelVisible.value = event.isVisible
+	})
+	onCleanup(() => subscription.dispose())
+})
+provideReviewPanelVisible(panelVisible)
 const content = computed(() => slots[slotName.value])
 const panelHidden = computed(
 	() =>
diff --git a/apps/frontend/src/components/project-review/layout/types.ts b/apps/frontend/src/components/project-review/layout/types.ts
index 4b7811358e..33c2dbfca2 100644
--- a/apps/frontend/src/components/project-review/layout/types.ts
+++ b/apps/frontend/src/components/project-review/layout/types.ts
@@ -7,6 +7,7 @@ export const projectReviewTabs = [
 	'versions',
 	'permissions',
 	'tech-review',
+	'slicer',
 ] as const
 
 export type ProjectReviewTab = (typeof projectReviewTabs)[number]
diff --git a/apps/frontend/src/components/project-review/messages.ts b/apps/frontend/src/components/project-review/messages.ts
index a75fdbd89c..fdf78bac68 100644
--- a/apps/frontend/src/components/project-review/messages.ts
+++ b/apps/frontend/src/components/project-review/messages.ts
@@ -138,6 +138,14 @@ export const projectReviewMessages = defineMessages({
 		id: 'moderation.project-review.tech-review',
 		defaultMessage: 'Tech Review',
 	},
+	slicer: {
+		id: 'moderation.project-review.slicer',
+		defaultMessage: 'Slicer',
+	},
+	slicerOpenExternal: {
+		id: 'moderation.project-review.slicerOpenExternal',
+		defaultMessage: 'Open in Slicer in a new tab',
+	},
 	showLeft: {
 		id: 'moderation.project-review.showLeft',
 		defaultMessage: 'Show project details',
@@ -637,6 +645,10 @@ export const projectReviewMessages = defineMessages({
 		id: 'moderation.project-review.openSlicer',
 		defaultMessage: 'Open in Slicer',
 	},
+	openVersionSlicer: {
+		id: 'moderation.project-review.openVersionSlicer',
+		defaultMessage: 'Open all files in Slicer',
+	},
 	scanAi: {
 		id: 'moderation.project-review.scanAi',
 		defaultMessage: 'Scan for AI-generated images',
diff --git a/apps/frontend/src/components/project-review/slicer/bridge-storage.ts b/apps/frontend/src/components/project-review/slicer/bridge-storage.ts
new file mode 100644
index 0000000000..eb8a34b927
--- /dev/null
+++ b/apps/frontend/src/components/project-review/slicer/bridge-storage.ts
@@ -0,0 +1,39 @@
+const STORAGE_KEY = 'moderation.project-review.slicer-bridge.v1'
+
+/**
+ * Version of `bridge.js`. Bump whenever the script changes so reviewers with an older copy
+ * installed in slicer are prompted to import the new one.
+ */
+export const SLICER_BRIDGE_VERSION = 2
+
+interface SavedSlicerBridge {
+	version: number
+}
+
+/** Returns the bridge version slicer last confirmed it has installed, if any. */
+export function readInstalledBridgeVersion(): number | undefined {
+	try {
+		const saved: SavedSlicerBridge | null = JSON.parse(localStorage.getItem(STORAGE_KEY) ?? 'null')
+		return typeof saved?.version === 'number' && Number.isFinite(saved.version)
+			? saved.version
+			: undefined
+	} catch {
+		return undefined
+	}
+}
+
+export function saveInstalledBridgeVersion(version: number) {
+	try {
+		localStorage.setItem(STORAGE_KEY, JSON.stringify({ version } satisfies SavedSlicerBridge))
+	} catch {
+		// no-op
+	}
+}
+
+export function forgetInstalledBridge() {
+	try {
+		localStorage.removeItem(STORAGE_KEY)
+	} catch {
+		// no-op
+	}
+}
diff --git a/apps/frontend/src/components/project-review/slicer/bridge.js b/apps/frontend/src/components/project-review/slicer/bridge.js
new file mode 100644
index 0000000000..322d1e53e9
--- /dev/null
+++ b/apps/frontend/src/components/project-review/slicer/bridge.js
@@ -0,0 +1,74 @@
+/**
+ * Slicer script injected into the embedded slicer.run iframe via its `script` URL parameter.
+ * It listens for `load` requests from the Modrinth moderation page and replaces the slicer
+ * workspace with the requested files.
+ *
+ * Slicer keeps imported scripts and loads them on startup, so several versions of this script may
+ * be installed at once. Only the newest one handles messages, and it announces its version in the
+ * `ready` handshake so the page knows whether it needs to import an update.
+ *
+ * The parent origin and version placeholders below are filled in by the page before injection.
+ */
+const PARENT_ORIGIN = '__MODRINTH_PARENT_ORIGIN__'
+const VERSION = Number('__MODRINTH_BRIDGE_VERSION__')
+const SOURCE = 'modrinth-slicer-bridge'
+const INSTANCE_KEY = '__modrinthSlicerBridge'
+
+let instance
+
+function post(message) {
+	window.parent.postMessage({ source: SOURCE, ...message }, PARENT_ORIGIN)
+}
+
+export default {
+	name: 'Modrinth moderation bridge',
+	description: 'Lets the Modrinth project review page load version files into slicer.',
+	version: '__MODRINTH_BRIDGE_VERSION__',
+	load(context) {
+		if (window.parent === window) return
+		const existing = window[INSTANCE_KEY]
+		if (existing && existing.version > VERSION) return
+		existing?.dispose()
+
+		let latestId
+		async function onMessage(event) {
+			if (event.source !== window.parent || event.origin !== PARENT_ORIGIN) return
+			const data = event.data
+			if (data?.source !== SOURCE || data.type !== 'load') return
+			latestId = data.id
+			try {
+				const files = await Promise.all(
+					data.files.map(async ({ url, name }) => {
+						const response = await fetch(url)
+						if (!response.ok) throw new Error(`${name}: HTTP ${response.status}`)
+						return { name, blob: await response.blob() }
+					}),
+				)
+				if (latestId !== data.id) return
+				await context.editor.clear()
+				await context.workspace.clear()
+				for (const { name, blob } of files) {
+					await context.workspace.add(name, blob)
+				}
+			} catch (error) {
+				context.notification.error('Could not load files from Modrinth', {
+					description: String(error?.message ?? error),
+				})
+			}
+		}
+
+		window.addEventListener('message', onMessage)
+		instance = {
+			version: VERSION,
+			dispose: () => window.removeEventListener('message', onMessage),
+		}
+		window[INSTANCE_KEY] = instance
+		post({ type: 'ready', version: VERSION })
+	},
+	unload() {
+		if (!instance || window[INSTANCE_KEY] !== instance) return
+		instance.dispose()
+		delete window[INSTANCE_KEY]
+		instance = undefined
+	},
+}
diff --git a/apps/frontend/src/components/project-review/slicer/index.vue b/apps/frontend/src/components/project-review/slicer/index.vue
new file mode 100644
index 0000000000..25bcf008f0
--- /dev/null
+++ b/apps/frontend/src/components/project-review/slicer/index.vue
@@ -0,0 +1,129 @@
+<template>
+	<iframe
+		v-if="frameSrc"
+		:key="frameKey"
+		ref="frame"
+		:src="frameSrc"
+		:title="formatMessage(messages.slicer)"
+		allow="clipboard-read; clipboard-write"
+		class="h-full w-full rounded-xl border border-solid border-surface-4 bg-surface-1"
+	/>
+	<p v-else-if="isLoading || versionsQuery.isPending.value" role="status" class="m-0">
+		{{ formatMessage(messages.loading) }}
+	</p>
+	<p v-else class="m-0 text-secondary">{{ formatMessage(messages.emptyVersions) }}</p>
+</template>
+
+<script setup lang="ts">
+import { useVIntl } from '@modrinth/ui'
+import { useEventListener } from '@vueuse/core'
+import { onScopeDispose, ref, useTemplateRef, watch } from 'vue'
+
+import { injectProjectReviewPageContext } from '~/providers/project-review'
+import { injectReviewSlicer, type SlicerTarget } from '~/providers/project-review/review-slicer'
+
+import { injectReviewPanelVisible } from '../layout/context'
+import { projectReviewMessages as messages } from '../messages'
+import bridgeSource from './bridge.js?raw'
+import {
+	forgetInstalledBridge,
+	readInstalledBridgeVersion,
+	saveInstalledBridgeVersion,
+	SLICER_BRIDGE_VERSION,
+} from './bridge-storage'
+
+const SLICER_ORIGIN = 'https://slicer.run'
+const BRIDGE_SOURCE = 'modrinth-slicer-bridge'
+const HANDSHAKE_TIMEOUT_MS = 15_000
+
+const { formatMessage } = useVIntl()
+const { isLoading, versionsQuery } = injectProjectReviewPageContext()
+const { target } = injectReviewSlicer()
+const panelVisible = injectReviewPanelVisible()
+const frame = useTemplateRef<HTMLIFrameElement>('frame')
+const bridgeScript = `data:text/javascript;base64,${btoa(
+	bridgeSource
+		.replaceAll('__MODRINTH_PARENT_ORIGIN__', window.location.origin)
+		.replaceAll('__MODRINTH_BRIDGE_VERSION__', String(SLICER_BRIDGE_VERSION)),
+)}`
+
+const frameKey = ref(0)
+const frameSrc = ref('')
+let bridgeReady = false
+let mountedWithScript = false
+let sentKey: string | undefined
+let handshakeTimer: ReturnType<typeof setTimeout> | undefined
+
+function bridgeInstalled() {
+	return (readInstalledBridgeVersion() ?? 0) >= SLICER_BRIDGE_VERSION
+}
+
+/**
+ * Mounts a fresh slicer instance. Files are passed through slicer's `url` parameters so they load
+ * even without the bridge; later targets are sent over the bridge once it handshakes.
+ *
+ * The bridge script is only passed along (which makes slicer prompt for an import) when it is not
+ * known to be installed. Otherwise slicer loads its saved copy, and if that copy never handshakes
+ * the install record is dropped and slicer is remounted with the script.
+ */
+function mount(next: SlicerTarget, withScript = !bridgeInstalled()) {
+	clearTimeout(handshakeTimer)
+	handshakeTimer = undefined
+	bridgeReady = false
+	mountedWithScript = withScript
+	sentKey = next.key
+	const params = new URLSearchParams(next.files.map(({ url }) => ['url', url]))
+	if (withScript) params.set('script', bridgeScript)
+	frameSrc.value = `${SLICER_ORIGIN}/?${params}`
+	frameKey.value++
+	if (!withScript) {
+		handshakeTimer = setTimeout(() => {
+			handshakeTimer = undefined
+			forgetInstalledBridge()
+			if (target.value) mount(target.value, true)
+		}, HANDSHAKE_TIMEOUT_MS)
+	}
+}
+
+function send(next: SlicerTarget) {
+	const targetWindow = frame.value?.contentWindow
+	if (!targetWindow) return
+	sentKey = next.key
+	targetWindow.postMessage(
+		{ source: BRIDGE_SOURCE, type: 'load', id: next.key, files: next.files },
+		SLICER_ORIGIN,
+	)
+}
+
+function onHandshake(version: number) {
+	clearTimeout(handshakeTimer)
+	handshakeTimer = undefined
+	if (version >= SLICER_BRIDGE_VERSION) {
+		saveInstalledBridgeVersion(version)
+	} else if (!mountedWithScript && target.value) {
+		mount(target.value, true)
+		return
+	}
+	bridgeReady = true
+	if (target.value && target.value.key !== sentKey) send(target.value)
+}
+
+watch(
+	[target, panelVisible],
+	([next, visible]) => {
+		if (!next || next.key === sentKey) return
+		if (bridgeReady) send(next)
+		else if (handshakeTimer === undefined && (frameSrc.value || visible)) mount(next)
+	},
+	{ immediate: true },
+)
+
+useEventListener('message', (event: MessageEvent) => {
+	if (event.origin !== SLICER_ORIGIN || event.source !== frame.value?.contentWindow) return
+	const data = event.data
+	if (data?.source !== BRIDGE_SOURCE || data.type !== 'ready') return
+	onHandshake(typeof data.version === 'number' ? data.version : 0)
+})
+
+onScopeDispose(() => clearTimeout(handshakeTimer))
+</script>
diff --git a/apps/frontend/src/components/project-review/versions/version-card.vue b/apps/frontend/src/components/project-review/versions/version-card.vue
index e928483a76..3a7d878138 100644
--- a/apps/frontend/src/components/project-review/versions/version-card.vue
+++ b/apps/frontend/src/components/project-review/versions/version-card.vue
@@ -44,6 +44,18 @@
 				}}</time>
 				<div class="flex gap-0">
 					<EditVersionMenu v-if="editable" color="default" size="sm" @edit="emit('edit', $event)" />
+					<Button
+						v-if="version.files.length"
+						v-tooltip="formatMessage(messages.openVersionSlicer)"
+						:aria-label="formatMessage(messages.openVersionSlicer)"
+						type="quiet"
+						circular
+						size="sm"
+						icon-only
+						@click="openVersionInSlicer"
+					>
+						<CoffeeIcon aria-hidden="true" />
+					</Button>
 					<ButtonLink
 						v-tooltip="formatMessage(messages.viewVersion)"
 						:to="versionHref"
@@ -76,18 +88,17 @@
 						<span v-if="file.file_type && file.file_type !== 'unknown'">{{
 							formatMessage(fileTypeMessages[file.file_type])
 						}}</span>
-						<ButtonLink
+						<Button
 							v-tooltip="formatMessage(messages.openSlicer)"
-							:href="`https://slicer.run/?url=${encodeURIComponent(file.url)}`"
 							:aria-label="formatMessage(messages.openSlicer)"
-							target="_blank"
 							type="quiet"
 							size="sm"
 							circular
 							icon-only
+							@click="openInSlicer([file])"
 						>
 							<CoffeeIcon aria-hidden="true" />
-						</ButtonLink>
+						</Button>
 						<Button
 							v-tooltip="formatMessage(messages.scanAi)"
 							:aria-label="formatMessage(messages.scanAi)"
@@ -336,14 +347,16 @@ import {
 import EnvironmentTags from '@modrinth/ui/src/components/project/EnvironmentTags.vue'
 import { formatVersionsForDisplay } from '@modrinth/utils'
 import { useQuery } from '@tanstack/vue-query'
-import { computed, ref } from 'vue'
+import { computed, nextTick, ref } from 'vue'
 
 import EditVersionMenu from '~/components/ui/create-project-version/EditVersionMenu.vue'
 import { projectQueryOptions } from '~/composables/queries/project'
 import { versionQueryOptions } from '~/composables/queries/version'
 import { injectProjectReviewPageContext } from '~/providers/project-review'
+import { injectReviewSlicer } from '~/providers/project-review/review-slicer'
 import type { EditVersionStage } from '~/providers/version/manage-version-modal'
 
+import { injectProjectReviewContext } from '../layout/context'
 import { projectReviewMessages as messages } from '../messages'
 import { useReviewInteraction } from '../shortcuts'
 
@@ -369,6 +382,8 @@ const formatBytes = useFormatBytes()
 const client = injectModrinthClient()
 const tags = injectTags(null)
 const { project, members } = injectProjectReviewPageContext()
+const slicer = injectReviewSlicer()
+const { openTab } = injectProjectReviewContext()
 const dependenciesOpen = ref(false)
 const card = ref<HTMLElement>()
 const dependenciesSection = ref<HTMLElement>()
@@ -466,8 +481,30 @@ const dependencies = computed<DependencyContext[]>(() =>
 			return typeDifference || dependencyName(a).localeCompare(dependencyName(b))
 		}),
 )
-function fileActions(file: Labrinth.Versions.v3.Version['files'][number]): ButtonMenuOption[] {
-	const options: ButtonMenuOption[] = []
+type VersionFile = Labrinth.Versions.v3.Version['files'][number]
+
+async function openInSlicer(files: VersionFile[]) {
+	slicer.open(files)
+	await nextTick()
+	openTab('slicer')
+}
+
+function openVersionInSlicer() {
+	return openInSlicer(props.version.files.toSorted((a, b) => Number(b.primary) - Number(a.primary)))
+}
+
+function fileActions(file: VersionFile): ButtonMenuOption[] {
+	const options: ButtonMenuOption[] = [
+		{
+			id: 'open-slicer-external',
+			type: 'link',
+			label: formatMessage(messages.slicerOpenExternal),
+			icon: ExternalIcon,
+			href: `https://slicer.run/?url=${encodeURIComponent(file.url)}`,
+			target: '_blank',
+			rel: 'noopener',
+		},
+	]
 	for (const algorithm of ['sha1', 'sha512'] as const) {
 		const hash = file.hashes[algorithm]
 		if (!hash) continue
diff --git a/apps/frontend/src/locales/en-US/index.json b/apps/frontend/src/locales/en-US/index.json
index 1abb4d0ca8..58482fa77f 100644
--- a/apps/frontend/src/locales/en-US/index.json
+++ b/apps/frontend/src/locales/en-US/index.json
@@ -3428,6 +3428,9 @@
   "moderation.project-review.openSlicer": {
     "message": "Open in Slicer"
   },
+  "moderation.project-review.openVersionSlicer": {
+    "message": "Open all files in Slicer"
+  },
   "moderation.project-review.optional": {
     "message": "Optional"
   },
@@ -3584,6 +3587,12 @@
   "moderation.project-review.skip": {
     "message": "Skip"
   },
+  "moderation.project-review.slicer": {
+    "message": "Slicer"
+  },
+  "moderation.project-review.slicerOpenExternal": {
+    "message": "Open in Slicer in a new tab"
+  },
   "moderation.project-review.slug": {
     "message": "Slug"
   },
diff --git a/apps/frontend/src/providers/project-review/review-slicer.ts b/apps/frontend/src/providers/project-review/review-slicer.ts
new file mode 100644
index 0000000000..98adc25f18
--- /dev/null
+++ b/apps/frontend/src/providers/project-review/review-slicer.ts
@@ -0,0 +1,52 @@
+import type { Labrinth } from '@modrinth/api-client'
+import { createContext } from '@modrinth/ui'
+import { computed, type Ref, shallowRef, watch } from 'vue'
+
+interface SlicerFile {
+	url: string
+	name: string
+}
+
+export interface SlicerTarget {
+	key: string
+	files: SlicerFile[]
+}
+
+type VersionFile = Labrinth.Versions.v3.Version['files'][number]
+
+export const [injectReviewSlicer, provideReviewSlicer] =
+	createContext<ReturnType<typeof createReviewSlicer>>('ProjectReviewSlicer')
+
+function toSlicerFile(file: VersionFile): SlicerFile {
+	return { url: file.url, name: file.filename }
+}
+
+/**
+ * Tracks the files the slicer tab should display for the current project. Until a reviewer picks
+ * files explicitly, the latest version's primary file is used.
+ */
+export function createReviewSlicer(
+	projectId: Readonly<Ref<string | undefined>>,
+	versions: Readonly<Ref<Labrinth.Versions.v3.Version[]>>,
+) {
+	const selected = shallowRef<SlicerTarget>()
+	let nextId = 0
+
+	watch(projectId, () => {
+		selected.value = undefined
+	})
+
+	const target = computed<SlicerTarget | undefined>(() => {
+		if (selected.value) return selected.value
+		const latest = versions.value[0]
+		const file = latest?.files.find(({ primary }) => primary) ?? latest?.files[0]
+		return file ? { key: `default:${file.url}`, files: [toSlicerFile(file)] } : undefined
+	})
+
+	function open(files: VersionFile[]) {
+		if (!files.length) return
+		selected.value = { key: `selected:${++nextId}`, files: files.map(toSlicerFile) }
+	}
+
+	return { target, open }
+}
diff --git a/package.json b/package.json
index 6ef08d7388..636e2cb9dd 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
 		"vue": "^3.5.43",
 		"yaml": "^2.8.2"
 	},
-	"packageManager": "pnpm@12.8.1",
+	"packageManager": "pnpm@12.11.2",
 	"engines": {
 		"node": ">=24.15.0"
 	},
diff --git a/packages/moderation/src/data/keybinds.ts b/packages/moderation/src/data/keybinds.ts
index 2802da6831..157264ae30 100644
--- a/packages/moderation/src/data/keybinds.ts
+++ b/packages/moderation/src/data/keybinds.ts
@@ -176,6 +176,12 @@ const keybinds: { [id: string]: KeybindListener } = {
 		scope: 'project-review',
 		action: (ctx) => ctx.openTab('tech-review'),
 	},
+	'review-tab-slicer': {
+		keybind: 'L',
+		description: 'Open slicer tab',
+		scope: 'project-review',
+		action: (ctx) => ctx.openTab('slicer'),
+	},
 	'toggle-collapse': {
 		keybind: 'Shift+C',
 		description: 'Toggle collapse/expand',
diff --git a/packages/moderation/src/types/keybinds.ts b/packages/moderation/src/types/keybinds.ts
index ddb145d894..70dab9c7c6 100644
--- a/packages/moderation/src/types/keybinds.ts
+++ b/packages/moderation/src/types/keybinds.ts
@@ -28,7 +28,14 @@ export type ModerationGlobalContext = {
 export type ModerationProjectReviewContext = {
 	scope: 'project-review'
 	openTab: (
-		tab: 'description' | 'gallery' | 'disclosures' | 'versions' | 'permissions' | 'tech-review',
+		tab:
+			| 'description'
+			| 'gallery'
+			| 'disclosures'
+			| 'versions'
+			| 'permissions'
+			| 'tech-review'
+			| 'slicer',
 	) => void
 }
 
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2a688f6ed6..1af434fea9 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,154 +6,179 @@ importers:
   .:
     configDependencies: {}
     packageManagerDependencies:
+      '@pnpm/exe':
+        specifier: 12.11.2
+        version: 12.11.2
       pnpm:
-        specifier: 12.8.1
-        version: 12.8.1
+        specifier: 12.11.2
+        version: 12.11.2
 
 packages:
 
-  '@pnpm/exe.android-arm64@12.8.1':
-    resolution: {integrity: sha512-siDxcidfz5eM6L2tJfik+i2bbUEw8UC7MZ3Yl2HYdRmqbdhHGAOQACtOOu6QVW4Jul4/w5wVKm+wM8ACtgh1Pg==}
+  '@pnpm/exe.android-arm64@12.11.2':
+    resolution: {integrity: sha512-owLw13OfPkEoY+hLBNeeG+dCFhywr7q2d/EHPz4mNL2RhKnv8gNwMARkjkiDQu234aItVwFNDeGnmQXm+ikkAg==}
     cpu: [arm64]
     os: [android]
 
-  '@pnpm/exe.android-x64@12.8.1':
-    resolution: {integrity: sha512-0F/uqPRc3aN4vLHsa0f+6fTtmsigFQ9/yxEU43fionF//pNHEd5e97b3w/nKIgqYMCUQCJphmBRMA9Q8/wlo9Q==}
+  '@pnpm/exe.android-x64@12.11.2':
+    resolution: {integrity: sha512-GYPkVebl4iokOA/4MPSpGoUVfFlsth7uqOCe1XiaiM23LAdvUOMJBObqHJijr89ZqjwHm9pO6vO45GRwJ2U2qA==}
     cpu: [x64]
     os: [android]
 
-  '@pnpm/exe.darwin-arm64@12.8.1':
-    resolution: {integrity: sha512-/rwavvMQJsl2RIxOHBnDF+4Gk+fhQFAY4M3PQZoKskJOEnaJcygG9p1xby6wcQcbS4d9dIubv09CQhufTgfmpw==}
+  '@pnpm/exe.darwin-arm64@12.11.2':
+    resolution: {integrity: sha512-n9M4On66y8FDxUAKgMO1FXt0qihyG4e+56p3/F0uo8Bx9KplW8BwKVnXigzCJ8aNM6sVVPkOE6M9XXbeVIxnZA==}
     cpu: [arm64]
     os: [darwin]
 
-  '@pnpm/exe.darwin-x64@12.8.1':
-    resolution: {integrity: sha512-htYt2gN7zqJKLhC99Ft6EUiO7myjZAZXfmGCTJUL1v+o7vE9hZdE1+fAkk4Oj1ZHNRti6b2woOxEkRkAusi8OQ==}
+  '@pnpm/exe.darwin-x64@12.11.2':
+    resolution: {integrity: sha512-oSW7n3sBT0c0cyk4kj10T2Y6Mpm+OFEiCAWozgX039tdoI6yqJF1uaFD3sw7ugLdu6VV3+uY0pa1TUZIPdxDWA==}
     cpu: [x64]
     os: [darwin]
 
-  '@pnpm/exe.freebsd-x64@12.8.1':
-    resolution: {integrity: sha512-PB5BULNgytxvExoOXUUeseS/DcpPENs+cg3iA6xHHeaLT4ctEGKSGXEbuj7USeqvo8JBpAx039hivnbzGqDwnA==}
+  '@pnpm/exe.freebsd-x64@12.11.2':
+    resolution: {integrity: sha512-qbzc3KoDpa/Lkf8vs3jnDe6dUUbso+6eLIyssYFMiliLpYNxn8dirk11YoNnOQcdHVB50v5RFls1Yid6ttT5pg==}
     cpu: [x64]
     os: [freebsd]
 
-  '@pnpm/exe.linux-arm64-musl@12.8.1':
-    resolution: {integrity: sha512-kKeyC/ArjrgdciQRBrOL0j9HtOI4gDRgoyP+eJ1CQKyadpKlf/DhDDyspXe07R3B9KagTVLUF2nlt6Dr5quFIg==}
+  '@pnpm/exe.linux-arm64-musl@12.11.2':
+    resolution: {integrity: sha512-uMEYDwKRktGwANubQ+kYCwmhNwg3Ik6qK89ahsbQ5cP30R/5FVJb/T99vr9XRUBC/A7mZI6eeT92oyVas9ACyg==}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@pnpm/exe.linux-arm64@12.8.1':
-    resolution: {integrity: sha512-q4s9a9X2O3N9aeUFooW24orNrxvu20+jyVUFR5RanPCqOKKPBrgs2iywMkBBx1aXkkzdWT54/mfz8Be8sJlWEw==}
+  '@pnpm/exe.linux-arm64@12.11.2':
+    resolution: {integrity: sha512-6e8ZAQUwFXAWHHHv5FesWqf/kEK04wuitBv5f/gxzkC0DiBfaixr+f+6JQede8SF4Ji5LcMwVFJbzAtffpWxEg==}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@pnpm/exe.linux-ppc64@12.8.1':
-    resolution: {integrity: sha512-F7XSjKJthwCh/L6abZiMpAfo2Cm61SZIT3e4dfgiIjESndlWaXCnfLKngSgZ/SEMsdmHT6dud3+kWIB3tw0/xQ==}
+  '@pnpm/exe.linux-ppc64@12.11.2':
+    resolution: {integrity: sha512-Ui8A4nepkVupx2VpuFfysEluMvWK6gTB5rgVts7Ss/+8dj0RD28x3F/seNeH/zSypgC6yKdV6qsKVQh/uffTuQ==}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@pnpm/exe.linux-riscv64@12.8.1':
-    resolution: {integrity: sha512-z1ecpIK/ZY08Unk69KWWE9867oaKUytGUjrHnBoGFAAhsK+q+0cfvBH+f5fWobJ7FX97leMlLO+gkJolddM45Q==}
+  '@pnpm/exe.linux-riscv64@12.11.2':
+    resolution: {integrity: sha512-i1yLdQ5bu+wjQ+srtFoJAaY2gN/+oXHFdjul4llCeoDxHE0rTIG3R41NhHfCjyFPW4+CpbBT58933CL9sMOCnA==}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
-  '@pnpm/exe.linux-s390x@12.8.1':
-    resolution: {integrity: sha512-KU6tnrBfu4uKXTq6N5qJwSm8FSrs9Wc8b5AUEsHK9bRXwNdsZ1/lRxG1++X29SKRW9OSNuDSjxASv5mAvGo1gA==}
+  '@pnpm/exe.linux-s390x@12.11.2':
+    resolution: {integrity: sha512-YS1/lhPjjTsN4QL50VaFZKRa3Uc/bDnhE8eKbJMFvuX06UuFS5YaiDg04APoZdfVSGqTfX27QAg7rfLMSWaqxA==}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@pnpm/exe.linux-x64-musl@12.8.1':
-    resolution: {integrity: sha512-eUE8BWJkDr2tJb/yrk0yVnszlmNqFarVxUlqiZ9BAkct28Nq/5g2H0tvMDmPA7fAQW3STNj+omJPPRVT+4s5sQ==}
+  '@pnpm/exe.linux-x64-musl@12.11.2':
+    resolution: {integrity: sha512-7eIxQR05fvJxCujUSKp5KTtehJ7QqrgqP/HD1+BcB/SaV2Be4XI1PEHiOgA1zxsiMIeMvTF6E4G4dYHrFjeXRg==}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@pnpm/exe.linux-x64@12.8.1':
-    resolution: {integrity: sha512-8bDZ0lZlCdi2rvnFul7EYgcC7zKeWSe76y8JV2oXobaS8p9i9d6PSf6LgLtTM0fI7R9Oh4eLCbveXyNDMmvZ+g==}
+  '@pnpm/exe.linux-x64@12.11.2':
+    resolution: {integrity: sha512-FK7QKe24AYgppJwO3mpooYptduuvIGqKJPi5ac7MdnWkjUy46JBfYhCW0grnkWKC8YOf0x+vGviuQqJEj3SpQQ==}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@pnpm/exe.win32-arm64@12.8.1':
-    resolution: {integrity: sha512-MsT0dlrRxnCRCHCaosNbhWpEiAFnFuMEu3KuDJDU41BXgTwiINxU8goloUSUDejWZUqKaUqNC/qUTihl9nFtqg==}
+  '@pnpm/exe.win32-arm64@12.11.2':
+    resolution: {integrity: sha512-PCTjVDdJb6VvraZxrEeFv6EqEA0hhIsAySx28e95J2Tqpi88hLpgOXgNqV0vpxq9A+b8GLQfyk/D+1UlJPv/YQ==}
     cpu: [arm64]
     os: [win32]
 
-  '@pnpm/exe.win32-x64@12.8.1':
-    resolution: {integrity: sha512-SWtPe0PsbTTk//gJND10tMdOfCYjrkq5+qV49hzVhY7xz2iJ339Rc+xwASlcvbwTfrvH39YNqpKYibD+CRGLwA==}
+  '@pnpm/exe.win32-x64@12.11.2':
+    resolution: {integrity: sha512-8sgX86OvRjJ3yZs/TvGR2L31wH9ScPZ+f+geKI3ikuB0RRiK3i4LlTRO8OXN6pdRqj8epMde4312MCjj7JsJdA==}
     cpu: [x64]
     os: [win32]
 
-  pnpm@12.8.1:
-    resolution: {integrity: sha512-9kupB1B/XOr+BsjTjmBS0BeURFgOwSed3Vv8EctIqoomRLZlmOB+dh2oSHKp/FfV+QK4f6SdAkGY1VhhKqu+RQ==}
+  '@pnpm/exe@12.11.2':
+    resolution: {integrity: sha512-uUudrvXShgp6yYRL/6XjeB2B2kbjE/alBdVWjFBP0jDiOnV5R83OpCWuGtc+Tn4stk0DEgO/x+vhEUTUf4x+Yw==}
+    engines: {node: '>=18.*'}
+    hasBin: true
+
+  pnpm@12.11.2:
+    resolution: {integrity: sha512-JaUWUqGWeFr18ovabf6NxYLr76SsHRgCIc4TkCMcX7dmN4IupLbkYzznSs3LCnf3Ja8RutOBd/3t2u6BipVcuQ==}
     engines: {node: '>=18.*'}
     hasBin: true
 
 snapshots:
 
-  '@pnpm/exe.android-arm64@12.8.1':
+  '@pnpm/exe.android-arm64@12.11.2':
     optional: true
 
-  '@pnpm/exe.android-x64@12.8.1':
+  '@pnpm/exe.android-x64@12.11.2':
     optional: true
 
-  '@pnpm/exe.darwin-arm64@12.8.1':
+  '@pnpm/exe.darwin-arm64@12.11.2':
     optional: true
 
-  '@pnpm/exe.darwin-x64@12.8.1':
+  '@pnpm/exe.darwin-x64@12.11.2':
     optional: true
 
-  '@pnpm/exe.freebsd-x64@12.8.1':
+  '@pnpm/exe.freebsd-x64@12.11.2':
     optional: true
 
-  '@pnpm/exe.linux-arm64-musl@12.8.1':
+  '@pnpm/exe.linux-arm64-musl@12.11.2':
     optional: true
 
-  '@pnpm/exe.linux-arm64@12.8.1':
+  '@pnpm/exe.linux-arm64@12.11.2':
     optional: true
 
-  '@pnpm/exe.linux-ppc64@12.8.1':
+  '@pnpm/exe.linux-ppc64@12.11.2':
     optional: true
 
-  '@pnpm/exe.linux-riscv64@12.8.1':
+  '@pnpm/exe.linux-riscv64@12.11.2':
     optional: true
 
-  '@pnpm/exe.linux-s390x@12.8.1':
+  '@pnpm/exe.linux-s390x@12.11.2':
     optional: true
 
-  '@pnpm/exe.linux-x64-musl@12.8.1':
+  '@pnpm/exe.linux-x64-musl@12.11.2':
     optional: true
 
-  '@pnpm/exe.linux-x64@12.8.1':
+  '@pnpm/exe.linux-x64@12.11.2':
     optional: true
 
-  '@pnpm/exe.win32-arm64@12.8.1':
+  '@pnpm/exe.win32-arm64@12.11.2':
     optional: true
 
-  '@pnpm/exe.win32-x64@12.8.1':
+  '@pnpm/exe.win32-x64@12.11.2':
     optional: true
 
-  pnpm@12.8.1:
+  '@pnpm/exe@12.11.2':
+    optionalDependencies:
+      '@pnpm/exe.android-arm64': 12.11.2
+      '@pnpm/exe.android-x64': 12.11.2
+      '@pnpm/exe.darwin-arm64': 12.11.2
+      '@pnpm/exe.darwin-x64': 12.11.2
+      '@pnpm/exe.freebsd-x64': 12.11.2
+      '@pnpm/exe.linux-arm64': 12.11.2
+      '@pnpm/exe.linux-arm64-musl': 12.11.2
+      '@pnpm/exe.linux-ppc64': 12.11.2
+      '@pnpm/exe.linux-riscv64': 12.11.2
+      '@pnpm/exe.linux-s390x': 12.11.2
+      '@pnpm/exe.linux-x64': 12.11.2
+      '@pnpm/exe.linux-x64-musl': 12.11.2
+      '@pnpm/exe.win32-arm64': 12.11.2
+      '@pnpm/exe.win32-x64': 12.11.2
+
+  pnpm@12.11.2:
     optionalDependencies:
-      '@pnpm/exe.android-arm64': 12.8.1
-      '@pnpm/exe.android-x64': 12.8.1
-      '@pnpm/exe.darwin-arm64': 12.8.1
-      '@pnpm/exe.darwin-x64': 12.8.1
-      '@pnpm/exe.freebsd-x64': 12.8.1
-      '@pnpm/exe.linux-arm64': 12.8.1
-      '@pnpm/exe.linux-arm64-musl': 12.8.1
-      '@pnpm/exe.linux-ppc64': 12.8.1
-      '@pnpm/exe.linux-riscv64': 12.8.1
-      '@pnpm/exe.linux-s390x': 12.8.1
-      '@pnpm/exe.linux-x64': 12.8.1
-      '@pnpm/exe.linux-x64-musl': 12.8.1
-      '@pnpm/exe.win32-arm64': 12.8.1
-      '@pnpm/exe.win32-x64': 12.8.1
+      '@pnpm/exe.android-arm64': 12.11.2
+      '@pnpm/exe.android-x64': 12.11.2
+      '@pnpm/exe.darwin-arm64': 12.11.2
+      '@pnpm/exe.darwin-x64': 12.11.2
+      '@pnpm/exe.freebsd-x64': 12.11.2
+      '@pnpm/exe.linux-arm64': 12.11.2
+      '@pnpm/exe.linux-arm64-musl': 12.11.2
+      '@pnpm/exe.linux-ppc64': 12.11.2
+      '@pnpm/exe.linux-riscv64': 12.11.2
+      '@pnpm/exe.linux-s390x': 12.11.2
+      '@pnpm/exe.linux-x64': 12.11.2
+      '@pnpm/exe.linux-x64-musl': 12.11.2
+      '@pnpm/exe.win32-arm64': 12.11.2
+      '@pnpm/exe.win32-x64': 12.11.2
 
 ---
 lockfileVersion: '9.0'

From ed6efa05af144fbb6d84db3435a96829c9cd64e2 Mon Sep 17 00:00:00 2001
From: Blodhgarm <blodhgrm@gmail.com>
Date: Tue, 13 Oct 2026 22:48:41 -0500
Subject: [PATCH 2/2] feat: Add support for external file slicer open urls
 within slicer tab

---
 .../project-review/slicer/bridge-storage.ts   |  2 +-
 .../project-review/slicer/bridge.js           | 81 +++++++++++++++----
 .../project-review/slicer/index.vue           | 51 +++++++-----
 .../project-review/versions/version-card.vue  | 18 ++---
 .../ui/moderation/ProjectC2paScanModal.vue    | 19 +++--
 .../tech-review/TechRevClassItem.vue          | 44 ++++++----
 .../tech-review/TechRevFileActions.vue        | 22 ++++-
 apps/frontend/src/locales/en-US/index.json    |  3 +
 .../providers/project-review/review-slicer.ts | 39 ++++++---
 9 files changed, 202 insertions(+), 77 deletions(-)

diff --git a/apps/frontend/src/components/project-review/slicer/bridge-storage.ts b/apps/frontend/src/components/project-review/slicer/bridge-storage.ts
index eb8a34b927..5669eebf49 100644
--- a/apps/frontend/src/components/project-review/slicer/bridge-storage.ts
+++ b/apps/frontend/src/components/project-review/slicer/bridge-storage.ts
@@ -4,7 +4,7 @@ const STORAGE_KEY = 'moderation.project-review.slicer-bridge.v1'
  * Version of `bridge.js`. Bump whenever the script changes so reviewers with an older copy
  * installed in slicer are prompted to import the new one.
  */
-export const SLICER_BRIDGE_VERSION = 2
+export const SLICER_BRIDGE_VERSION = 4
 
 interface SavedSlicerBridge {
 	version: number
diff --git a/apps/frontend/src/components/project-review/slicer/bridge.js b/apps/frontend/src/components/project-review/slicer/bridge.js
index 322d1e53e9..268e61335b 100644
--- a/apps/frontend/src/components/project-review/slicer/bridge.js
+++ b/apps/frontend/src/components/project-review/slicer/bridge.js
@@ -1,7 +1,7 @@
 /**
  * Slicer script injected into the embedded slicer.run iframe via its `script` URL parameter.
- * It listens for `load` requests from the Modrinth moderation page and replaces the slicer
- * workspace with the requested files.
+ * It listens for `load` requests from the Modrinth moderation page, replaces the slicer workspace
+ * with the requested files when they differ from what is loaded, and opens the requested entry.
  *
  * Slicer keeps imported scripts and loads them on startup, so several versions of this script may
  * be installed at once. Only the newest one handles messages, and it announces its version in the
@@ -14,12 +14,50 @@ const VERSION = Number('__MODRINTH_BRIDGE_VERSION__')
 const SOURCE = 'modrinth-slicer-bridge'
 const INSTANCE_KEY = '__modrinthSlicerBridge'
 
+const TAB_TYPES_BY_EXTENSION = {
+	image: ['jpg', 'jpeg', 'gif', 'png', 'webp'],
+	media: ['mp4', 'webm', 'ogg', 'mp3', 'wav', 'flac', 'mov', 'avi', 'm4a', 'aac', 'mkv'],
+	dump: ['hprof'],
+}
+
 let instance
 
 function post(message) {
 	window.parent.postMessage({ source: SOURCE, ...message }, PARENT_ORIGIN)
 }
 
+/** Picks the tab type slicer itself would use when opening an entry with this name. */
+function tabType(name) {
+	const extension = name.split('.').pop()?.toLowerCase() ?? ''
+	const match = Object.entries(TAB_TYPES_BY_EXTENSION).find(([, extensions]) =>
+		extensions.includes(extension),
+	)
+	return match?.[0] ?? 'code'
+}
+
+/**
+ * Finds a workspace entry by name. Falls back to the only entry sharing the same path below its
+ * top-level file, in case the top-level name differs from what the page expected.
+ */
+function findEntry(context, name) {
+	const exact = context.workspace.find(name)
+	if (exact) return exact
+	const separator = name.indexOf('/')
+	if (separator === -1) return null
+	const suffix = name.slice(separator)
+	const matches = context.workspace.entries().filter((entry) => entry.name.endsWith(suffix))
+	return matches.length === 1 ? matches[0] : null
+}
+
+/** Whether the workspace's top-level entries are exactly the given file names. */
+function isLoaded(context, names) {
+	const loaded = context.workspace
+		.entries()
+		.map((entry) => entry.name)
+		.filter((name) => !name.includes('/'))
+	return loaded.length === names.length && names.every((name) => loaded.includes(name))
+}
+
 export default {
 	name: 'Modrinth moderation bridge',
 	description: 'Lets the Modrinth project review page load version files into slicer.',
@@ -37,18 +75,33 @@ export default {
 			if (data?.source !== SOURCE || data.type !== 'load') return
 			latestId = data.id
 			try {
-				const files = await Promise.all(
-					data.files.map(async ({ url, name }) => {
-						const response = await fetch(url)
-						if (!response.ok) throw new Error(`${name}: HTTP ${response.status}`)
-						return { name, blob: await response.blob() }
-					}),
-				)
-				if (latestId !== data.id) return
-				await context.editor.clear()
-				await context.workspace.clear()
-				for (const { name, blob } of files) {
-					await context.workspace.add(name, blob)
+				if (
+					!isLoaded(
+						context,
+						data.files.map(({ name }) => name),
+					)
+				) {
+					const files = await Promise.all(
+						data.files.map(async ({ url, name }) => {
+							const response = await fetch(url)
+							if (!response.ok) throw new Error(`${name}: HTTP ${response.status}`)
+							return { name, blob: await response.blob() }
+						}),
+					)
+					if (latestId !== data.id) return
+					await context.workspace.clear()
+					for (const { name, blob } of files) {
+						await context.workspace.add(name, blob)
+					}
+				}
+				if (!data.entry) return
+				const entry = findEntry(context, data.entry)
+				if (entry) {
+					await context.editor.add(tabType(entry.name), entry)
+				} else {
+					context.notification.warning('Could not find file in workspace', {
+						description: data.entry,
+					})
 				}
 			} catch (error) {
 				context.notification.error('Could not load files from Modrinth', {
diff --git a/apps/frontend/src/components/project-review/slicer/index.vue b/apps/frontend/src/components/project-review/slicer/index.vue
index 25bcf008f0..12d470565a 100644
--- a/apps/frontend/src/components/project-review/slicer/index.vue
+++ b/apps/frontend/src/components/project-review/slicer/index.vue
@@ -22,7 +22,7 @@ import { onScopeDispose, ref, useTemplateRef, watch } from 'vue'
 import { injectProjectReviewPageContext } from '~/providers/project-review'
 import { injectReviewSlicer, type SlicerTarget } from '~/providers/project-review/review-slicer'
 
-import { injectReviewPanelVisible } from '../layout/context'
+import { injectProjectReviewContext, injectReviewPanelVisible } from '../layout/context'
 import { projectReviewMessages as messages } from '../messages'
 import bridgeSource from './bridge.js?raw'
 import {
@@ -38,7 +38,8 @@ const HANDSHAKE_TIMEOUT_MS = 15_000
 
 const { formatMessage } = useVIntl()
 const { isLoading, versionsQuery } = injectProjectReviewPageContext()
-const { target } = injectReviewSlicer()
+const { target, openRequests } = injectReviewSlicer()
+const { openTab } = injectProjectReviewContext()
 const panelVisible = injectReviewPanelVisible()
 const frame = useTemplateRef<HTMLIFrameElement>('frame')
 const bridgeScript = `data:text/javascript;base64,${btoa(
@@ -49,8 +50,10 @@ const bridgeScript = `data:text/javascript;base64,${btoa(
 
 const frameKey = ref(0)
 const frameSrc = ref('')
-let bridgeReady = false
-let mountedWithScript = false
+/** Highest bridge version that has handshaked with the current iframe, 0 when none has. */
+let bridgeVersion = 0
+/** Bridge version that received the last target, 0 when it was passed through URL parameters. */
+let deliveredVersion = 0
 let sentKey: string | undefined
 let handshakeTimer: ReturnType<typeof setTimeout> | undefined
 
@@ -63,22 +66,24 @@ function bridgeInstalled() {
  * even without the bridge; later targets are sent over the bridge once it handshakes.
  *
  * The bridge script is only passed along (which makes slicer prompt for an import) when it is not
- * known to be installed. Otherwise slicer loads its saved copy, and if that copy never handshakes
- * the install record is dropped and slicer is remounted with the script.
+ * known to be installed. Otherwise slicer loads its saved copies, and if no up to date copy
+ * handshakes in time the install record is dropped and slicer is remounted with the script.
  */
 function mount(next: SlicerTarget, withScript = !bridgeInstalled()) {
 	clearTimeout(handshakeTimer)
 	handshakeTimer = undefined
-	bridgeReady = false
-	mountedWithScript = withScript
+	bridgeVersion = 0
+	deliveredVersion = 0
 	sentKey = next.key
 	const params = new URLSearchParams(next.files.map(({ url }) => ['url', url]))
+	if (next.entry) params.set('file', next.entry)
 	if (withScript) params.set('script', bridgeScript)
 	frameSrc.value = `${SLICER_ORIGIN}/?${params}`
 	frameKey.value++
 	if (!withScript) {
 		handshakeTimer = setTimeout(() => {
 			handshakeTimer = undefined
+			if (bridgeVersion >= SLICER_BRIDGE_VERSION) return
 			forgetInstalledBridge()
 			if (target.value) mount(target.value, true)
 		}, HANDSHAKE_TIMEOUT_MS)
@@ -89,35 +94,45 @@ function send(next: SlicerTarget) {
 	const targetWindow = frame.value?.contentWindow
 	if (!targetWindow) return
 	sentKey = next.key
+	deliveredVersion = bridgeVersion
 	targetWindow.postMessage(
-		{ source: BRIDGE_SOURCE, type: 'load', id: next.key, files: next.files },
+		{ source: BRIDGE_SOURCE, type: 'load', id: next.key, files: next.files, entry: next.entry },
 		SLICER_ORIGIN,
 	)
 }
 
+/**
+ * Slicer starts every saved copy of the bridge, so older copies may handshake before the current
+ * one. Older copies are used until a current one takes over, which is then sent the target again
+ * since older copies may not support everything in it (such as opening an entry).
+ */
 function onHandshake(version: number) {
-	clearTimeout(handshakeTimer)
-	handshakeTimer = undefined
-	if (version >= SLICER_BRIDGE_VERSION) {
+	if (version <= bridgeVersion) return
+	bridgeVersion = version
+	const current = version >= SLICER_BRIDGE_VERSION
+	if (current) {
+		clearTimeout(handshakeTimer)
+		handshakeTimer = undefined
 		saveInstalledBridgeVersion(version)
-	} else if (!mountedWithScript && target.value) {
-		mount(target.value, true)
-		return
 	}
-	bridgeReady = true
-	if (target.value && target.value.key !== sentKey) send(target.value)
+	const next = target.value
+	if (!next) return
+	const outdatedDelivery = deliveredVersion > 0 && deliveredVersion < SLICER_BRIDGE_VERSION
+	if (next.key !== sentKey || (current && outdatedDelivery)) send(next)
 }
 
 watch(
 	[target, panelVisible],
 	([next, visible]) => {
 		if (!next || next.key === sentKey) return
-		if (bridgeReady) send(next)
+		if (bridgeVersion) send(next)
 		else if (handshakeTimer === undefined && (frameSrc.value || visible)) mount(next)
 	},
 	{ immediate: true },
 )
 
+watch(openRequests, () => openTab('slicer'))
+
 useEventListener('message', (event: MessageEvent) => {
 	if (event.origin !== SLICER_ORIGIN || event.source !== frame.value?.contentWindow) return
 	const data = event.data
diff --git a/apps/frontend/src/components/project-review/versions/version-card.vue b/apps/frontend/src/components/project-review/versions/version-card.vue
index 3a7d878138..62011049b3 100644
--- a/apps/frontend/src/components/project-review/versions/version-card.vue
+++ b/apps/frontend/src/components/project-review/versions/version-card.vue
@@ -95,7 +95,7 @@
 							size="sm"
 							circular
 							icon-only
-							@click="openInSlicer([file])"
+							@click="slicer.open([file.url])"
 						>
 							<CoffeeIcon aria-hidden="true" />
 						</Button>
@@ -347,7 +347,7 @@ import {
 import EnvironmentTags from '@modrinth/ui/src/components/project/EnvironmentTags.vue'
 import { formatVersionsForDisplay } from '@modrinth/utils'
 import { useQuery } from '@tanstack/vue-query'
-import { computed, nextTick, ref } from 'vue'
+import { computed, ref } from 'vue'
 
 import EditVersionMenu from '~/components/ui/create-project-version/EditVersionMenu.vue'
 import { projectQueryOptions } from '~/composables/queries/project'
@@ -356,7 +356,6 @@ import { injectProjectReviewPageContext } from '~/providers/project-review'
 import { injectReviewSlicer } from '~/providers/project-review/review-slicer'
 import type { EditVersionStage } from '~/providers/version/manage-version-modal'
 
-import { injectProjectReviewContext } from '../layout/context'
 import { projectReviewMessages as messages } from '../messages'
 import { useReviewInteraction } from '../shortcuts'
 
@@ -383,7 +382,6 @@ const client = injectModrinthClient()
 const tags = injectTags(null)
 const { project, members } = injectProjectReviewPageContext()
 const slicer = injectReviewSlicer()
-const { openTab } = injectProjectReviewContext()
 const dependenciesOpen = ref(false)
 const card = ref<HTMLElement>()
 const dependenciesSection = ref<HTMLElement>()
@@ -483,14 +481,12 @@ const dependencies = computed<DependencyContext[]>(() =>
 )
 type VersionFile = Labrinth.Versions.v3.Version['files'][number]
 
-async function openInSlicer(files: VersionFile[]) {
-	slicer.open(files)
-	await nextTick()
-	openTab('slicer')
-}
-
 function openVersionInSlicer() {
-	return openInSlicer(props.version.files.toSorted((a, b) => Number(b.primary) - Number(a.primary)))
+	slicer.open(
+		props.version.files
+			.toSorted((a, b) => Number(b.primary) - Number(a.primary))
+			.map(({ url }) => url),
+	)
 }
 
 function fileActions(file: VersionFile): ButtonMenuOption[] {
diff --git a/apps/frontend/src/components/ui/moderation/ProjectC2paScanModal.vue b/apps/frontend/src/components/ui/moderation/ProjectC2paScanModal.vue
index 181e49859b..721628f7e8 100644
--- a/apps/frontend/src/components/ui/moderation/ProjectC2paScanModal.vue
+++ b/apps/frontend/src/components/ui/moderation/ProjectC2paScanModal.vue
@@ -1,6 +1,7 @@
 <script setup lang="ts">
-import { ExternalIcon } from '@modrinth/assets'
+import { CoffeeIcon, ExternalIcon } from '@modrinth/assets'
 import {
+	Button,
 	ButtonLink,
 	defineMessages,
 	injectNotificationManager,
@@ -10,8 +11,10 @@ import {
 import { ref, useTemplateRef } from 'vue'
 
 import { fileDeclaresAi } from '~/helpers/c2pa.ts'
+import { injectReviewSlicer, slicerFileName } from '~/providers/project-review/review-slicer'
 
 const modalRef = useTemplateRef<InstanceType<typeof NewModal>>('modalRef')
+const slicer = injectReviewSlicer(null)
 const isScanning = ref(false)
 const { addNotification } = injectNotificationManager()
 const { formatMessage } = useVIntl()
@@ -90,10 +93,15 @@ async function scanFile(url: string) {
 }
 
 function createSlicerUrl(path: string) {
-	const downloadUrl = new URL(fileUrl.value!)
-	const fileName = downloadUrl.pathname.split('/').pop()
+	const url = fileUrl.value!
+	return `https://slicer.run/?file=${encodeURIComponent(`${slicerFileName(url)}/${path}`)}&url=${encodeURIComponent(url)}`
+}
 
-	return `https://slicer.run/?file=${encodeURIComponent(`${fileName}/${path}`)}&url=${encodeURIComponent(downloadUrl.toString())}`
+function openInSlicerTab(path: string) {
+	const url = fileUrl.value
+	if (!slicer || !url) return
+	slicer.open([url], `${slicerFileName(url)}/${path}`)
+	hide()
 }
 
 function openC2paModal(url: string) {
@@ -134,7 +142,8 @@ defineExpose({ openC2paModal, hide })
 						class="flex flex-row flex-wrap items-center justify-between gap-2 rounded-2xl bg-surface-2 p-4 font-semibold text-secondary"
 					>
 						{{ file }}
-						<ButtonLink :href="createSlicerUrl(file)" target="_blank">
+						<Button v-if="slicer" @click="openInSlicerTab(file)"> Open <CoffeeIcon /> </Button>
+						<ButtonLink v-else :href="createSlicerUrl(file)" target="_blank">
 							Open <ExternalIcon />
 						</ButtonLink>
 					</div>
diff --git a/apps/frontend/src/components/ui/moderation/tech-review/TechRevClassItem.vue b/apps/frontend/src/components/ui/moderation/tech-review/TechRevClassItem.vue
index a9472fd46b..9432cc139b 100644
--- a/apps/frontend/src/components/ui/moderation/tech-review/TechRevClassItem.vue
+++ b/apps/frontend/src/components/ui/moderation/tech-review/TechRevClassItem.vue
@@ -3,11 +3,13 @@ import {
 	CheckIcon,
 	ChevronDownIcon,
 	ClipboardCopyIcon,
+	CoffeeIcon,
 	CopyIcon,
 	ExternalIcon,
 	LoaderCircleIcon,
 } from '@modrinth/assets'
 import {
+	Button,
 	ButtonLink,
 	IconButton,
 	injectModrinthClient,
@@ -16,6 +18,8 @@ import {
 import { capitalizeString, highlightCodeLines } from '@modrinth/utils'
 import { computed, reactive, ref } from 'vue'
 
+import { injectReviewSlicer, slicerFileName } from '~/providers/project-review/review-slicer'
+
 import { getSeverityBadgeColor, truncateMiddle } from './helpers'
 import TechRevFlagBadges from './TechRevFlagBadges.vue'
 import TechRevVerdictButtons from './TechRevVerdictButtons.vue'
@@ -37,6 +41,7 @@ const emit = defineEmits<{
 }>()
 
 const client = injectModrinthClient()
+const slicer = injectReviewSlicer(null)
 const { addNotification } = injectNotificationManager()
 const { isPreReviewed, getMarkedFlagsCount } = injectTechReviewDecisions()
 
@@ -124,20 +129,19 @@ function trimSlashes(path: string): string {
 	return path
 }
 
-// Creates a slicer link with a group, removes trailing and leading slashes, and if no file extension found assume .class
-function createSlicerLink(url: string, group: ClassGroup | undefined) {
-	const uri = new URL(url)
-	const filename = uri.pathname.split('/').pop() || ''
-	if (group) {
-		const jarPath = trimSlashes(group.jar ? group.jar.replace('#', '/') : filename)
-		const filePath = trimSlashes(
-			group.filePath.startsWith('/') ? group.filePath.slice(1) : group.filePath,
-		)
-		const hasFileExtension = (filePath.split('/').pop() || '').includes('.')
-		const file = `${jarPath}/${hasFileExtension ? filePath : `${filePath}.class`}`
-		return `https://slicer.run/?url=${encodeURIComponent(url)}&file=${encodeURIComponent(file)}`
-	}
-	return `https://slicer.run/?url=${encodeURIComponent(url)}`
+/**
+ * Resolves the slicer workspace entry for a class group, removing trailing and leading slashes and
+ * assuming `.class` when the path has no file extension.
+ */
+function slicerEntry(url: string, group: ClassGroup) {
+	const jarPath = trimSlashes(group.jar ? group.jar.replace('#', '/') : slicerFileName(url))
+	const filePath = trimSlashes(group.filePath)
+	const hasFileExtension = (filePath.split('/').pop() || '').includes('.')
+	return `${jarPath}/${hasFileExtension ? filePath : `${filePath}.class`}`
+}
+
+function createSlicerLink(url: string, group: ClassGroup) {
+	return `https://slicer.run/?url=${encodeURIComponent(url)}&file=${encodeURIComponent(slicerEntry(url, group))}`
 }
 </script>
 
@@ -179,6 +183,18 @@ function createSlicerLink(url: string, group: ClassGroup | undefined) {
 							</span>
 						</div>
 					</Transition>
+					<Button
+						v-if="slicer"
+						v-tooltip="'Open file in Slicer tab'"
+						type="outlined"
+						circular
+						icon-only
+						@click.stop="
+							slicer.open([file.download_url], slicerEntry(file.download_url, classItem))
+						"
+					>
+						<CoffeeIcon />
+					</Button>
 					<ButtonLink
 						v-tooltip="'Open file in slicer'"
 						type="outlined"
diff --git a/apps/frontend/src/components/ui/moderation/tech-review/TechRevFileActions.vue b/apps/frontend/src/components/ui/moderation/tech-review/TechRevFileActions.vue
index b449d1e0a4..de3c5d7e89 100644
--- a/apps/frontend/src/components/ui/moderation/tech-review/TechRevFileActions.vue
+++ b/apps/frontend/src/components/ui/moderation/tech-review/TechRevFileActions.vue
@@ -1,6 +1,8 @@
 <script setup lang="ts">
-import { DownloadIcon, ExternalIcon } from '@modrinth/assets'
-import { ButtonLink, defineMessages, useFormatBytes, useVIntl } from '@modrinth/ui'
+import { CoffeeIcon, DownloadIcon, ExternalIcon } from '@modrinth/assets'
+import { Button, ButtonLink, defineMessages, useFormatBytes, useVIntl } from '@modrinth/ui'
+
+import { injectReviewSlicer } from '~/providers/project-review/review-slicer'
 
 import type { FlattenedFileReport } from './types'
 
@@ -8,6 +10,7 @@ defineProps<{
 	file: FlattenedFileReport
 }>()
 
+const slicer = injectReviewSlicer(null)
 const formatBytes = useFormatBytes()
 const { formatMessage } = useVIntl()
 const messages = defineMessages({
@@ -18,6 +21,10 @@ const messages = defineMessages({
 	},
 	slicer: { id: 'moderation.tech-review.file.slicer', defaultMessage: 'Slicer' },
 	openSlicer: { id: 'moderation.tech-review.file.open-slicer', defaultMessage: 'Open in Slicer' },
+	openSlicerTab: {
+		id: 'moderation.tech-review.file.open-slicer-tab',
+		defaultMessage: 'Open in Slicer tab',
+	},
 })
 </script>
 
@@ -40,6 +47,17 @@ const messages = defineMessages({
 		>
 			<DownloadIcon aria-hidden="true" />
 		</ButtonLink>
+		<Button
+			v-if="slicer"
+			v-tooltip="formatMessage(messages.openSlicerTab)"
+			:aria-label="formatMessage(messages.openSlicerTab)"
+			type="outlined"
+			icon-only
+			circular
+			@click="slicer.open([file.download_url])"
+		>
+			<CoffeeIcon aria-hidden="true" />
+		</Button>
 		<ButtonLink
 			v-tooltip="formatMessage(messages.openSlicer)"
 			type="outlined"
diff --git a/apps/frontend/src/locales/en-US/index.json b/apps/frontend/src/locales/en-US/index.json
index 58482fa77f..cc2b4b0153 100644
--- a/apps/frontend/src/locales/en-US/index.json
+++ b/apps/frontend/src/locales/en-US/index.json
@@ -3722,6 +3722,9 @@
   "moderation.tech-review.file.open-slicer": {
     "message": "Open in Slicer"
   },
+  "moderation.tech-review.file.open-slicer-tab": {
+    "message": "Open in Slicer tab"
+  },
   "moderation.tech-review.file.slicer": {
     "message": "Slicer"
   },
diff --git a/apps/frontend/src/providers/project-review/review-slicer.ts b/apps/frontend/src/providers/project-review/review-slicer.ts
index 98adc25f18..e73dbf7a6b 100644
--- a/apps/frontend/src/providers/project-review/review-slicer.ts
+++ b/apps/frontend/src/providers/project-review/review-slicer.ts
@@ -1,6 +1,6 @@
 import type { Labrinth } from '@modrinth/api-client'
 import { createContext } from '@modrinth/ui'
-import { computed, type Ref, shallowRef, watch } from 'vue'
+import { computed, type Ref, ref, shallowRef, watch } from 'vue'
 
 interface SlicerFile {
 	url: string
@@ -10,19 +10,29 @@ interface SlicerFile {
 export interface SlicerTarget {
 	key: string
 	files: SlicerFile[]
+	/** Workspace entry to open once the files are loaded, e.g. `mod.jar/com/example/Mod.class`. */
+	entry?: string
 }
 
-type VersionFile = Labrinth.Versions.v3.Version['files'][number]
-
 export const [injectReviewSlicer, provideReviewSlicer] =
 	createContext<ReturnType<typeof createReviewSlicer>>('ProjectReviewSlicer')
 
-function toSlicerFile(file: VersionFile): SlicerFile {
-	return { url: file.url, name: file.filename }
+/** Names a file the same way slicer does when loading it from its `url` parameter. */
+export function slicerFileName(url: string) {
+	const name = new URL(url).pathname.split('/').pop()
+	return name?.includes('.') ? name : 'input.jar'
+}
+
+function createTarget(urls: string[], entry?: string): SlicerTarget {
+	return {
+		key: JSON.stringify([urls, entry ?? null]),
+		files: urls.map((url) => ({ url, name: slicerFileName(url) })),
+		entry,
+	}
 }
 
 /**
- * Tracks the files the slicer tab should display for the current project. Until a reviewer picks
+ * Tracks the files the slicer tab should display for the current project. Until a reviewer opens
  * files explicitly, the latest version's primary file is used.
  */
 export function createReviewSlicer(
@@ -30,7 +40,7 @@ export function createReviewSlicer(
 	versions: Readonly<Ref<Labrinth.Versions.v3.Version[]>>,
 ) {
 	const selected = shallowRef<SlicerTarget>()
-	let nextId = 0
+	const openRequests = ref(0)
 
 	watch(projectId, () => {
 		selected.value = undefined
@@ -40,13 +50,18 @@ export function createReviewSlicer(
 		if (selected.value) return selected.value
 		const latest = versions.value[0]
 		const file = latest?.files.find(({ primary }) => primary) ?? latest?.files[0]
-		return file ? { key: `default:${file.url}`, files: [toSlicerFile(file)] } : undefined
+		return file ? createTarget([file.url]) : undefined
 	})
 
-	function open(files: VersionFile[]) {
-		if (!files.length) return
-		selected.value = { key: `selected:${++nextId}`, files: files.map(toSlicerFile) }
+	/**
+	 * Loads the given file URLs into the slicer tab and brings it to the front. Reopening the same
+	 * files with a different entry only opens that entry, without reloading the workspace.
+	 */
+	function open(urls: string[], entry?: string) {
+		if (!urls.length) return
+		selected.value = createTarget(urls, entry)
+		openRequests.value++
 	}
 
-	return { target, open }
+	return { target, open, openRequests }
 }