diff --git a/build.sh b/build.sh
index cd6681e..d300bff 100755
--- a/build.sh
+++ b/build.sh
@@ -32,6 +32,7 @@ build() {
 
   # Copy other root files
   cp README.md "$out/" 2>/dev/null || true
+  cp test-suite.html "$out/" 2>/dev/null || true
 
   echo "  → $out/ ready"
 }
diff --git a/manifest.firefox.json b/manifest.firefox.json
index 912e723..d9e2661 100644
--- a/manifest.firefox.json
+++ b/manifest.firefox.json
@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Silent Send",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "Intercepts personal info and substitutes it with user-defined replacements before sending to AI services.",
   "browser_specific_settings": {
     "gecko": {
diff --git a/manifest.json b/manifest.json
index 2324715..5fa8daa 100644
--- a/manifest.json
+++ b/manifest.json
@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Silent Send",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "Intercepts personal info and substitutes it with user-defined replacements before sending to AI services.",
   "permissions": [
     "storage",
diff --git a/package.json b/package.json
index 97a2290..fcc67be 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "silent-send",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "private": true,
   "license": "BSL-1.1",
   "description": "Browser extension that substitutes personal data before sending to AI services",
diff --git a/src/options/options.html b/src/options/options.html
index 0b199ef..63852ae 100644
--- a/src/options/options.html
+++ b/src/options/options.html
@@ -631,7 +631,7 @@
     </section>
 
     <footer>
-      <p>Silent Send v0.9.0</p>
+      <p>Silent Send v0.9.2</p>
       <p style="font-size:11px;color:#9ca3af;margin-top:6px;max-width:600px">
         Silent Send is a convenience tool, not a security guarantee. Third-party sites may change how they send data at any time, which can cause missed substitutions without warning. You are responsible for verifying your data before sending. See the <a href="https://github.com/outis1one/silent-send/blob/main/LICENSE" target="_blank" style="color:#6b7280">LICENSE</a> for full terms.
       </p>
diff --git a/test-suite.html b/test-suite.html
index 7654017..712b2f3 100644
--- a/test-suite.html
+++ b/test-suite.html
@@ -29,8 +29,8 @@
     Load this page as an extension page (or inject via dev console on the Options page).<br>
     Tests exercise sync, encryption, storage, auto-redact, and domain management.
   </p>
-  <button class="primary" onclick="runAllTests()">Run All Tests</button>
-  <button onclick="document.getElementById('results').innerHTML=''">Clear</button>
+  <button class="primary" id="btnRunTests">Run All Tests</button>
+  <button id="btnClear">Clear</button>
   <div id="results" style="margin-top:16px"></div>
   <div id="summary"></div>
 
@@ -485,7 +485,8 @@
       // RUN ALL
       // ============================================================
 
-      window.runAllTests = async function() {
+      async function runAllTests() {
+        document.getElementById('results').innerHTML = '<p style="color:#6b7280">Running tests...</p>';
         const outcomes = [];
         for (const t of results) {
           try {
@@ -497,10 +498,18 @@
           }
         }
         renderResults(outcomes);
-      };
+      }
 
-      // Auto-register tests on load
+      // Wire up buttons (CSP blocks inline onclick)
+      document.getElementById('btnRunTests').addEventListener('click', runAllTests);
+      document.getElementById('btnClear').addEventListener('click', () => {
+        document.getElementById('results').innerHTML = '';
+        document.getElementById('summary').textContent = '';
+      });
+
+      // Show ready state
       console.log(`[Silent Send Tests] ${results.length} tests registered. Click "Run All Tests" to start.`);
+      document.getElementById('results').innerHTML = `<p style="color:#6b7280">${results.length} tests loaded. Click "Run All Tests" to start.</p>`;
     </script>
 </body>
 </html>