Merge pull request #80 from outis1one/claude/fix-firefox-signing-2qWJd

Bump version to 0.9.47

manifest.firefox.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Silent Send",
-  "version": "0.9.44",
+  "version": "0.9.47",
   "description": "Intercepts personal info and substitutes it with user-defined replacements before sending to AI services.",
   "browser_specific_settings": {
     "gecko": {

manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Silent Send",
-  "version": "0.9.44",
+  "version": "0.9.47",
   "description": "Intercepts personal info and substitutes it with user-defined replacements before sending to AI services.",
   "permissions": [
     "storage",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "silent-send",
-  "version": "0.9.44",
+  "version": "0.9.47",
   "private": true,
   "license": "MIT",
   "description": "Browser extension that substitutes personal data before sending to AI services",

sign-firefox.sh

@@ -86,7 +86,9 @@ for attempt in $(seq 1 $MAX_ATTEMPTS); do
   echo "=== Attempt $attempt: signing v$NEW_VERSION ==="
 
   # Capture output to check for specific errors
-  OUTPUT=$(npx web-ext sign \
+  # NODE_OPTIONS forces IPv4 DNS resolution first — Node.js 18+ defaults to IPv6,
+  # which silently fails when the system can't reach addons.mozilla.org over IPv6.
+  OUTPUT=$(NODE_OPTIONS='--dns-result-order=ipv4first' npx web-ext sign \
     --no-config-discovery \
     --source-dir "$SCRIPT_DIR/dist/firefox" \
     --artifacts-dir "$SCRIPT_DIR/dist/firefox-signed" \

src/background/service-worker.js

@@ -138,6 +138,12 @@ const messageHandlers = {
     sendResponse({ mappings });
   },
 
+  async 'add:mapping'(message, _sender, sendResponse) {
+    const newMapping = await Storage.addMapping(message.mapping);
+    const mappings = await Storage.getMappings();
+    sendResponse({ mapping: newMapping, mappings });
+  },
+
   async 'get:settings'(_message, _sender, sendResponse) {
     const settings = await Storage.getSettings();
     sendResponse({ settings });

src/content/content.js

@@ -280,7 +280,7 @@
     // 4. Auto-detect: scan the FINAL text for unconfigured PII
     //    Auto-redact if enabled, otherwise just warn
     if (settings.autoDetect !== false) {
-      const warnings = autoDetectPII(finalText, identity, { detectProperNouns: settings.detectProperNouns === true })
+      const warnings = autoDetectPII(finalText, identity, { detectProperNouns: settings.detectProperNouns === true, mappings })
         .filter(w => !ignoredDetections.has(w.value));
       if (warnings.length > 0) {
         // Auto-redact detected PII in the outbound text
@@ -471,6 +471,14 @@
       addAll(ident.names); addAll(ident.emails);
       addAll(ident.usernames); addAll(ident.hostnames); addAll(ident.phones);
     }
+    // Also skip values covered by mappings (both real and substitute)
+    if (opts?.mappings) {
+      for (const m of opts.mappings) {
+        if (!m.enabled) continue;
+        if (m.real) configured.add(m.real.toLowerCase());
+        if (m.substitute) configured.add(m.substitute.toLowerCase());
+      }
+    }
 
     const findings = [];
     for (const pat of PII_PATTERNS) {
@@ -1406,21 +1414,29 @@
         const fake = decodeURIComponent(btn.dataset.fake);
         const cat = btn.dataset.cat || 'general';
 
-        // Add to mappings via storage
-        const result = await getStorageData('ss_mappings');
-        const currentMappings = result || [];
-        currentMappings.push({
+        // Immediately dismiss this notification item (same as ignore)
+        btn.closest('.ss-ps-item').remove();
+        if (!preSendWarningEl.querySelector('.ss-ps-item')) {
+          preSendWarningEl.classList.remove('visible');
+        }
+
+        // Optimistically add to local mappings so re-scan skips this value
+        const tempMapping = {
           id: crypto.randomUUID(),
           real, substitute: fake,
           category: cat,
           caseSensitive: false,
           enabled: true,
           createdAt: Date.now(),
-        });
-        await setStorageData('ss_mappings', currentMappings);
+        };
+        mappings = [...mappings, tempMapping];
 
-        // Update local mappings so the fetch interceptor uses them immediately
-        mappings = currentMappings;
+        // Persist via background script (handles encryption);
+        // update local mappings with the authoritative list on success
+        addMappingViaBackground({ real, substitute: fake, category: cat })
+          .then(updatedMappings => {
+            if (updatedMappings.length) mappings = updatedMappings;
+          });
 
         // Replace the PII value in the current input right now
         if (inputEl) {
@@ -1429,11 +1445,6 @@
           if (inputScanTimer) clearTimeout(inputScanTimer);
           inputScanTimer = setTimeout(() => scanInputForPII(inputEl), 150);
         }
-
-        // Visual feedback
-        btn.textContent = '\u2714';
-        btn.style.color = '#4ade80';
-        btn.disabled = true;
       });
     });
 
@@ -1493,6 +1504,21 @@
     window.postMessage({ type: 'ss:storage-set', key, value }, '*');
   }
 
+  function addMappingViaBackground(mapping) {
+    return new Promise(resolve => {
+      const id = 'ss-add-' + Math.random();
+      const handler = (event) => {
+        if (event.data?.type === 'ss:add-mapping-result' && event.data.id === id) {
+          window.removeEventListener('message', handler);
+          resolve(event.data.mappings || []);
+        }
+      };
+      window.addEventListener('message', handler);
+      window.postMessage({ type: 'ss:add-mapping', mapping, id }, '*');
+      setTimeout(() => { window.removeEventListener('message', handler); resolve([]); }, 2000);
+    });
+  }
+
   // Scan input on type and paste
   let inputScanTimer = null;
 
@@ -1503,7 +1529,7 @@
       return;
     }
 
-    const warnings = autoDetectPII(text, identity, { detectProperNouns: settings.detectProperNouns === true })
+    const warnings = autoDetectPII(text, identity, { detectProperNouns: settings.detectProperNouns === true, mappings })
       .filter(w => !ignoredDetections.has(w.value));
     if (warnings.length > 0) {
       showPreSendWarning(warnings, target);

src/content/injector.js

@@ -193,6 +193,26 @@
       if (event.data?.type === 'ss:storage-set') {
         await api.storage.local.set({ [event.data.key]: event.data.value });
       }
+
+      if (event.data?.type === 'ss:add-mapping') {
+        try {
+          const response = await api.runtime.sendMessage({
+            type: 'add:mapping',
+            mapping: event.data.mapping,
+          });
+          window.postMessage({
+            type: 'ss:add-mapping-result',
+            id: event.data.id,
+            mappings: response?.mappings || [],
+          }, '*');
+        } catch {
+          window.postMessage({
+            type: 'ss:add-mapping-result',
+            id: event.data.id,
+            mappings: [],
+          }, '*');
+        }
+      }
     });
   }