@@ -35,7 +35,7 @@ Change the binding in Chrome’s **Extensions → Keyboard shortcuts**. If Chrom
 
 Type a shortcut such as `go/handbook` or `sim/handbook` in Chrome’s address bar. Both work once you're signed in to Sim and Links is on for your organization.
 
-For suggestions, type `sim`, press **Space**, and enter part of a link name. If Chrome searches instead of opening a shortcut, open the Sim extension and sign in. If it still searches, enable your search engine under the extension’s **+ → Browser shortcuts**. Other searches stay unchanged.
+For suggestions, type `sim`, press **Space**, and enter part of a link name. If Chrome searches instead of opening a shortcut, open the Sim extension and sign in.
 
 See [Links](/search/sim-links#open-links-from-the-address-bar) for supported inputs, Glean conflicts, and team rollout. Administrators can [allow the extension for a Chrome organizational unit](https://support.google.com/chrome/a/answer/6306504).
 
 
@@ -23,12 +23,6 @@ For suggestions, type `sim`, press **Space**, and enter part of a name. Matching
 
 This can happen if you installed the extension while signed out, or just cleared your browsing history. Opening the Sim extension and signing in fixes the first case, and the second fixes itself within a week. Until then, a trailing slash (`go/handbook/`) or `http://go/handbook` tells Chrome to navigate directly.
 
-To catch these searches automatically, open the extension’s **+ → Browser shortcuts** and turn on your search engine. Approve Chrome’s site-access prompt if shown. Google (`google.com`), Bing, DuckDuckGo, and Yahoo are supported. Other searches and your default search engine stay unchanged.
-
-This handles whole shortcuts such as `go/handbook` or `go/jira/123`. For spaces, query parameters, unsupported search sites, or blocked site access, use `sim` + **Space** or the full `https://www.sim.ai/sim/<name>` address.
-
-Turning shortcuts off keeps site access. To remove it, open Chrome’s **Extensions → Manage extensions → Sim → Details**.
-
 ### Roll out to your team
 
 Administrators can [force-install Sim for Chrome](https://support.google.com/chrome/a/answer/6306504) for an organizational unit. Shortcuts start working once each person signs in through the extension, or the next time Chrome starts after they've signed in.
 
@@ -68,7 +68,7 @@ other workspace resources or browser-control tools.
   capture across sites; switching tabs alone does not extract content.
 - No history permission, bookmarks, cookie API, debugger, native messaging, external messaging,
   or arbitrary remote code execution. The only network interception is the static
-  `sim/` and `go/` redirect rule above, plus opt-in search recovery.
+  `sim/` and `go/` redirect rule above.
 - Background network requests are limited to two. Once a week at browser start, and after
   signing in to the panel, the worker asks the Sim origin whether links are on for the session;
   if so, it opens `http://go/` and `http://sim/` in background tabs that close themselves, which
 
@@ -32,19 +32,18 @@ SIM_EXTENSION_DEV=1 SIM_EXTENSION_ORIGIN=http://localhost:3000 bun run --cwd app
 - Required capabilities: `activeTab`, `scripting`, `sidePanel`, `storage`, `contextMenus`, `declarativeNetRequestWithHostAccess`, and access to the configured Sim origin and to `http(s)://sim/*` and `http(s)://go/*`.
 - Type `sim`, press Space, enter the name, and press Enter to open an organization's [link](https://docs.sim.ai/search/sim-links). `go/<name>` opens the same link. Chrome treats bare `go/<name>` or `sim/<name>` as a search until its history holds that short host, so on install, and at browser start once a week, the extension opens `http://go/` and `http://sim/` in background tabs that close themselves. It does this only once Sim says links are on for the signed-in session, so `go/x` stays an ordinary search for everyone else; signing in through the side panel checks again. Chrome counts a visit to an unfamiliar single-label host as typed, which is what the address bar checks, and repeating covers history that expires after 90 days or is cleared. A trailing slash (`go/<name>/`) always selects navigation. A single static redirect rule rewrites top-level navigations to `http(s)://sim/*` and `http(s)://go/*` to `<Sim origin>/sim/*` with the path and query unchanged. The `sim` and `go` host permissions exist only for that rule: every navigation to those hosts is redirected before it loads, and no other request is matched or observed. An organization that already serves an intranet host named `sim` or `go` should not install this build, since its links would be redirected to Sim. When another extension (such as another go-links tool) also redirects `go/`, Chrome applies the most recently installed extension's rule.
 - The `sim` address-bar keyword (`sim`, then Space) lists matching Sim links while you type and opens what you enter through the same resolver. For these suggestions, the background worker sends the text typed before the first `/` or `?`, and nothing else, unless that text contains a space (a search) or is longer than a link name can be, to `<Sim origin>/api/sim-links/suggestions` with the signed-in session, and the extension's content security policy allows connections to that origin alone. Unlisted links are never suggested.
-- **+ → Browser shortcuts** separately opts into recovery for exact Google, Bing, DuckDuckGo, or Yahoo HTTPS search hosts. After a direct Chrome permission grant, dynamic request rules redirect only top-level GET requests with one query parameter containing a whole `go/<name>` or `sim/<name>` shortcut. Only that value reaches `/sim-links/recover`, which validates it and redirects to the existing authenticated resolver. Ordinary search terms, additional search parameters, subframes, and unsupported inputs are not forwarded. Chrome applies these rules without an extension search-URL observer. Turning a provider off removes its rules while preserving site access; revoking access clears its recovery choice. This does not enable page reference or change the default search provider.
 - Optional HTTP/HTTPS access is requested together by **Allow across websites**, from a direct user action. Chrome's `activeTab` access is temporary and does not follow arbitrary new sites.
 - Page capture runs on demand in Chrome's isolated world. It excludes editable fields, inputs, hidden elements, scripts, and embedded documents. It reads only the top frame. PDF viewers and canvas documents may have no accessible text.
 - Extraction stops at 50,000 text characters, 150,000 serialized UTF-8 bytes, 15,000 visited nodes, or 150ms. The composer exposes truncation.
 - Attached pages share a 150,000-character and 450,000-byte snapshot budget per message, within the general 100-context ceiling. Shorter pages can share the available budget without a separate page-count restriction.
 - Source URLs omit credentials, query parameters, and fragments. Human-readable text can still contain sensitive information; it is the user-selected material they review and send into their conversation.
 - Snapshots stay in memory until handed to Sim and acknowledged or expired after 30 seconds. For captures, extension storage contains only a short-lived intent with a tab/document identity and a SHA-256 URL digest, never raw URLs, captured text, or credentials. Closing a tab or navigating invalidates its pending intent. Sim applies its normal conversation retention once a message is sent.
 - No browser history permission, bookmarks, cookie access, debugger access, remote extension JavaScript, arbitrary network proxy, or background content collection is requested. Incognito use is disabled.
-- The iframe bridge checks both the exact configured origin and the exact frame, then validates versioned messages. The hosted composer may request only page capture, selection capture, the native page-access and browser-shortcut dialogs, or the browser's fixed microphone settings page. Requests require the current conversation nonce and Chrome transient user activation; arbitrary URLs, tabs, script execution, and network operations are never accepted. Permission grants still require a click in the extension-owned page-access control and browser approval. Shortcut settings are advertised separately so older installed shells keep working without the new action.
+- The iframe bridge checks both the exact configured origin and the exact frame, then validates versioned messages. The hosted composer may request only page capture, selection capture, the native page-access dialog, or the browser's fixed microphone settings page. Requests require the current conversation nonce and Chrome transient user activation; arbitrary URLs, tabs, script execution, and network operations are never accepted. Permission grants still require a click in the extension-owned page-access control and browser approval.
 - Captures and queued toolbar intents are scoped to the receiving conversation. Changing conversation, workspace, or account discards an unfinished handoff. Captured attachments remain explicit snapshots when the source tab changes.
 - The complete hosted document, including portaled source dialogs and menus, is blocked from session replay. Clipboard writing and microphone capture are delegated only to the configured Sim origin; clipboard reading and camera access are not delegated. Voice input starts only after the user clicks the microphone and the browser grants permission. The shared Sim voice service streams microphone audio to ElevenLabs for transcription into the editable draft. Stop ends capture while allowing the final transcript to arrive; Send and conversation changes cancel unfinished transcription. There is no tab-audio capture or background recording.
 
-With **Reference current page** enabled, a composer Send requests a single fresh snapshot for that conversation. Local storage holds only this preference, search recovery choices, and when the short hosts were last visited. A tab change does not read any content. Explicit snapshots take precedence; access denial, navigation and timeouts keep the draft unsent. **Allow across websites** works even when Chrome hides the active address; no address entry is required. The grant covers HTTP and HTTPS sites across tabs until the user revokes or restricts it in browser settings. Uploaded screenshot files stay in the hosted app’s normal attachment flow.
+With **Reference current page** enabled, a composer Send requests a single fresh snapshot for that conversation. Local storage holds only this preference and when the short hosts were last visited. A tab change does not read any content. Explicit snapshots take precedence; access denial, navigation and timeouts keep the draft unsent. **Allow across websites** works even when Chrome hides the active address; no address entry is required. The grant covers HTTP and HTTPS sites across tabs until the user revokes or restricts it in browser settings. Uploaded screenshot files stay in the hosted app’s normal attachment flow.
 
 ## Verification
 
 
@@ -96,14 +96,6 @@ const fixture = Bun.serve({
     )
   },
 })
-const searchProviders = [
-  { id: 'google', hosts: ['www.google.com', 'google.com'], path: '/search', parameter: 'q' },
-  { id: 'bing', hosts: ['www.bing.com', 'bing.com'], path: '/search', parameter: 'q' },
-  { id: 'duckduckgo', hosts: ['duckduckgo.com', 'www.duckduckgo.com'], path: '/', parameter: 'q' },
-  { id: 'yahoo', hosts: ['search.yahoo.com'], path: '/search', parameter: 'p' },
-] as const
-const searchRequests: { url: string; method: string }[] = []
-let searchFixture: ReturnType<typeof Bun.serve> | undefined
 const temporary = await mkdtemp(resolve(tmpdir(), 'sim-extension-e2e-'))
 const extensionPath = resolve(temporary, 'extension')
 let context: BrowserContext | undefined
@@ -147,50 +139,6 @@ try {
     )
     assert(!existsSync(rejectedOutput), 'Invalid key material reached build output')
   })
-  const searchKey = resolve(temporary, 'search-key.pem')
-  const searchCertificate = resolve(temporary, 'search-cert.pem')
-  const certificate = spawnSync(
-    'openssl',
-    [
-      'req',
-      '-x509',
-      '-newkey',
-      'rsa:2048',
-      '-nodes',
-      '-days',
-      '1',
-      '-keyout',
-      searchKey,
-      '-out',
-      searchCertificate,
-      '-subj',
-      '/CN=extension-search.test',
-    ],
-    { encoding: 'utf8', timeout: 10_000 }
-  )
-  assert(certificate.status === 0, 'Could not create the isolated search fixture certificate')
-  searchFixture = Bun.serve({
-    hostname: '127.0.0.1',
-    port: 0,
-    tls: { key: await readFile(searchKey), cert: await readFile(searchCertificate) },
-    fetch(request) {
-      const path = new URL(request.url).pathname
-      if (path === '/' || path === '/search')
-        searchRequests.push({ url: request.url, method: request.method })
-      return new Response(
-        '<!doctype html><title>Local search fixture</title><h1>Search fixture</h1>',
-        {
-          headers: { 'content-type': 'text/html' },
-        }
-      )
-    },
-  })
-  const searchHosts = searchProviders.flatMap((provider) => [...provider.hosts])
-  const searchPort = searchFixture.port
-  const fixtureSearchHosts = [...searchHosts, 'm.google.com', 'www.google.com.evil.test']
-  const resolverRules = fixtureSearchHosts
-    .map((host) => `MAP ${host} 127.0.0.1:${searchPort}`)
-    .join(', ')
   const origin = `http://127.0.0.1:${fixture.port}`
   const pageOrigin = `http://localhost:${fixture.port}`
   const built = spawnSync(process.execPath, ['scripts/build.ts', `--outdir=${extensionPath}`], {
@@ -200,18 +148,14 @@ try {
   })
   assert(built.status === 0, `Extension build failed: ${built.stderr}`)
   const manifest = JSON.parse(await readFile(resolve(extensionPath, 'manifest.json'), 'utf8'))
-  // Pregrants isolate routing from consent; approved search hosts resolve to the local fixture.
-  manifest.host_permissions.push(
-    `${pageOrigin}/*`,
-    ...fixtureSearchHosts.map((host) => `https://${host}/*`)
-  )
+  // Pregrants isolate routing from consent.
+  manifest.host_permissions.push(`${pageOrigin}/*`)
   await writeFile(resolve(extensionPath, 'manifest.json'), JSON.stringify(manifest))
   context = await chromium.launchPersistentContext(resolve(temporary, 'profile'), {
     channel: 'chromium',
     headless: true,
     ignoreHTTPSErrors: true,
     args: [
-      `--host-resolver-rules=${resolverRules}`,
       '--no-proxy-server',
       '--enable-unsafe-extension-debugging',
       `--disable-extensions-except=${extensionPath}`,
@@ -1430,121 +1374,6 @@ try {
       await expect(app.locator('body')).toHaveAttribute('data-reference-request', denied.requestId)
     }
   )
-  await check(
-    'Opted-in shortcut recovery redirects only explicit searches on the chosen providers',
-    async () => {
-      const tab = await page.context().newPage()
-      const toggle = async (provider: string, enabled: boolean) => {
-        const result = await panel.evaluate(
-          ({ provider, enabled }) =>
-            chrome.runtime.sendMessage({ type: 'set-search-recovery', provider, enabled }),
-          { provider, enabled }
-        )
-        assert(
-          result?.ok === true,
-          `Could not ${enabled ? 'enable' : 'disable'} ${provider} recovery`
-        )
-      }
-      const unchanged = async (url: string) => {
-        await tab.goto(url)
-        assert(tab.url() === url, `An ordinary or ambiguous search was redirected: ${url}`)
-        assert(
-          (await tab.title()) === 'Local search fixture',
-          'A provider request escaped the local fixture'
-        )
-      }
-      try {
-        for (const provider of searchProviders) {
-          const endpoint = `https://${provider.hosts[0]}${provider.path}`
-          const url = `${endpoint}?${provider.parameter}=sim%2Faskit`
-          await unchanged(url)
-          await toggle(provider.id, true)
-          for (const host of provider.hosts) {
-            for (const shortcut of SIM_LINK_HOSTS.flatMap((short) => [
-              `${short}%2Faskit`,
-              `${short}/jira/ABC-123`,
-            ])) {
-              const candidate = `https://${host}${provider.path}?client=chrome&${provider.parameter}=${shortcut}&source=qa`
-              const prior = searchRequests.filter((request) => request.url === candidate).length
-              await tab.goto(candidate)
-              assert(
-                tab.url() === `${origin}/sim-links/recover?q=${shortcut}`,
-                `${provider.id} lost the explicit shortcut`
-              )
-              assert(
-                searchRequests.filter((request) => request.url === candidate).length === prior,
-                'The matched shortcut reached the search provider'
-              )
-            }
-          }
-          for (const query of [
-            `${provider.parameter}=quarterly+planning`,
-            `${provider.parameter}=sim%2Faskit%20help`,
-            `${provider.parameter}=sim%2Faskit+help`,
-            `${provider.parameter}=sim%252Faskit`,
-            `${provider.parameter}=sim%2Faskit%ZZ`,
-            `${provider.parameter}=sim%2Faskit&${provider.parameter}=other`,
-            `${provider.parameter}=other&${provider.parameter}=sim%2Faskit`,
-            `${provider.parameter}=sim%2Faskit&%${provider.parameter.charCodeAt(0).toString(16)}=other`,
-          ])
-            await unchanged(`${endpoint}?${query}`)
-          await toggle(provider.id, false)
-          await unchanged(url)
-          assert(
-            await worker.evaluate(
-              (origins) => chrome.permissions.contains({ origins }),
-              provider.hosts.map((host) => `https://${host}/*`)
-            ),
-            'Disabling recovery removed a capture permission'
-          )
-        }
-        await toggle('google', true)
-        for (const url of [
-          'https://www.google.com/other?q=sim%2Faskit',
-          'https://m.google.com/search?q=sim%2Faskit',
-          'https://www.google.com.evil.test/search?q=sim%2Faskit',
-          'https://www.google.com/search?%71=sim%2Faskit',
-        ])
-          await unchanged(url)
-        const search = 'https://www.google.com/search?q=sim%2Faskit'
-        await tab.goto(`${origin}/post-fixture`)
-        await Promise.all([
-          tab.waitForNavigation(),
-          tab.evaluate((url) => {
-            const form = document.createElement('form')
-            form.method = 'POST'
-            form.action = url
-            document.body.append(form)
-            form.submit()
-          }, search),
-        ])
-        assert(
-          tab.url() === search &&
-            searchRequests.some((request) => request.url === search && request.method === 'POST'),
-          'A POST search was recovered'
-        )
-        await tab.goto(`${origin}/frame-fixture`)
-        await Promise.all([
-          tab.waitForEvent(
-            'framenavigated',
-            (child) => child.parentFrame() !== null && child.url() === search
-          ),
-          tab.evaluate((url) => {
-            const child = document.createElement('iframe')
-            child.src = url
-            document.body.append(child)
-          }, search),
-        ])
-        assert(
-          tab.url() === `${origin}/frame-fixture`,
-          'A subframe search changed the top-level page'
-        )
-        await toggle('google', false)
-      } finally {
-        await tab.close()
-      }
-    }
-  )
   await mkdir(dirname(output), { recursive: true })
   await panel.screenshot({ path: output.replace(/\.json$/, '.png'), fullPage: true })
 } catch (error) {
@@ -1559,7 +1388,6 @@ try {
 } finally {
   await context?.close()
   fixture.stop(true)
-  searchFixture?.stop(true)
   await mkdir(dirname(output), { recursive: true })
   await writeFile(output, JSON.stringify({ suite: 'browser-extension', checks }, null, 2))
   await rm(temporary, { recursive: true, force: true })