release: v1.3.2 — fix WXT manifest scope validation by hoangsvit · Pull Request #78 · ePlus-DEV/gmail-alias-toolkit

hoangsvit · 2026-07-23T04:19:42Z

Summary

Fix WXT manifest scope handling and validation for the inline helper content script.

Type of Change

Areas Touched

Testing

yarn compile
yarn test
yarn build
Production manifest verification
Loaded the extension locally and tested the changed flow
Tested light and dark mode, if UI changed
Checked translations, if user-facing text changed

Unit-test coverage added

The manifest validator now has regression coverage for:

exact development allowlist success;
Firefox MV2 host patterns stored in permissions;
broad development content-script matches such as *://*/*;
broad development host permissions;
literal <all_urls> rejection in development;
missing development allowlist entries;
valid Firefox-style production manifests;
unrelated content scripts not satisfying inline-helper validation;
missing generated inline helper;
missing manifest files;
missing production host coverage.

Screenshots or Recording

N/A — no UI changes.

Notes for Reviewers

Production validation targets only the generated inline helper entry (content-scripts/content.js) instead of flattening matches from every manifest content script. Development scope remains restricted to the configured allowlist. Tests import the validator constants directly to avoid fixture drift.

Summary by CodeRabbit

New Features
- Added searchable, paginated management for sites with inline features disabled, including one-click re-enabling.
- Version displays now stay synchronized across the extension and website.
- Improved support for configuring inline helper coverage during development.
Bug Fixes
- Improved inline helper behavior on framed pages, including blank and embedded documents.
- Corrected garbled translations across supported languages.
Chores
- Updated the release version to 1.3.2.

This commit fixes the style issues introduced in c34f7e8 according to the output from Prettier. Details: #77

…on-mode fix: restore inline popup in production builds

qodo-code-review · 2026-07-23T04:19:48Z

Qodo reviews are paused for this user.

Troubleshooting steps vary by plan Learn more →

On a Teams plan?
Reviews resume once this user has a paid seat and their Git account is linked in Qodo.
Link Git account →

Using GitHub Enterprise Server, GitLab Self-Managed, or Bitbucket Data Center?
These require an Enterprise plan - Contact us
Contact us →

eplus-bot · 2026-07-23T04:19:52Z

Thank you for creating this pull request and helping make the project better.

We will review / merge it when we are online.

coderabbitai · 2026-07-23T04:20:08Z

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

@coderabbitai resume to resume automatic reviews.
@coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

▶️ Resume reviews
🔍 Trigger review

📝 Walkthrough

Walkthrough

The PR updates mode-specific content-script scoping and manifest validation, adds release-version resolution and popup site filtering, corrects localized strings, and adjusts CI, workflow, environment, and contributor configuration.

Changes

Manifest scope validation

Layer / File(s)	Summary
Mode-specific scope wiring `scripts/inline-dev-matches.*`, `wxt.config.ts`, `entrypoints/content/index.ts`, `.env.example`, `CONTRIBUTING.md`	Development matches are resolved from defaults and environment configuration, production uses `<all_urls>`, and framed pages use a resolved page URL.
Manifest validator `scripts/verify-manifest-scope.mjs`	Generated manifests are discovered and checked for mode-specific content-script matches, granted hosts, inline-helper presence, and invalid URL patterns.
Validator coverage and CI `tests/scripts/verify-manifest-scope.test.mjs`, `vitest.config.ts`, `.github/workflows/ci.yml`	Development and production fixtures cover validator behavior, MJS tests are discovered, and production Chrome scope is verified in CI for `main` and `dev` events.

Release version and popup updates

Layer / File(s)	Summary
Release version resolution `web/release-version.ts`, `web/vite.config.ts`, `src/version.ts`, `web/src/App.tsx`, `entrypoints/popup/components/Settings.tsx`, `package.json`, `tests/version.test.ts`, `tests/webReleaseVersion.test.ts`	Website builds resolve and inject a release version with package fallback, while UI displays and tests use the shared version value.
Disabled-site filtering and panel `src/utils/inlineSiteSettings.ts`, `entrypoints/popup/components/DisabledInlineSitesPanel.tsx`, `entrypoints/popup/components/Settings.tsx`, `tests/utils/inlineSiteSettings.test.ts`	Disabled inline sites support normalized filtering, pagination, empty states, and enable actions through a dedicated popup component.
Release metadata and build environment `entrypoints/popup/components/Settings.tsx`, `.env.example`	The changelog includes version 1.3.2 and example release configuration variables are documented.

Localization and workflow configuration

Layer / File(s)	Summary
Localization encoding corrections `public/_locales/*/messages.json`	Localized message values are rewritten with readable UTF-8 text while preserving message keys and placeholders.
Workflow and contributor configuration `.github/workflows/deploy-pages.yml`, `.github/workflows/pr-preview.yml`, `.github/ISSUE_TEMPLATE/bug_report.yml`, `CONTRIBUTING.md`	Build jobs receive `GITHUB_TOKEN`, the issue version placeholder is generalized, and contributor guidance covers inline development matches.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
  participant CIWorkflow
  participant ExtensionBuild
  participant ManifestVerifier
  participant OutputDirectory
  CIWorkflow->>ExtensionBuild: Build production extension
  ExtensionBuild->>OutputDirectory: Write manifest.json
  CIWorkflow->>ManifestVerifier: Verify production Chrome scope
  ManifestVerifier->>OutputDirectory: Read and validate manifests
  ManifestVerifier-->>CIWorkflow: Report success or set failure status

Possibly related PRs

ePlus-DEV/gmail-alias-toolkit#67: Modifies content-script URL matching and environment-dependent scope logic.
ePlus-DEV/gmail-alias-toolkit#73: Touches the same dev inline-helper URL and manifest scope handling.
ePlus-DEV/gmail-alias-toolkit#77: Relates to production content-script scope and CI manifest verification.

Suggested reviewers: eplus-bot

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title is specific and accurately reflects the main change: fixing WXT manifest scope validation for the release.
Docstring Coverage	✅ Passed	Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch dev

_{Comment @coderabbitai help to get the list of available commands.}

deepsource-io · 2026-07-23T04:22:35Z

DeepSource Code Review

We reviewed changes in 89ce43f...e134d88 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade	Security Reliability Complexity Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Jul 23, 2026 4:21a.m.	Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

eplus-bot

Approved by @eplus-bot after all pull request checks passed.

CI run: https://github.com/ePlus-DEV/gmail-alias-toolkit/actions/runs/29979273011

eplus-bot · 2026-07-23T04:22:41Z

Approved by @eplus-bot after all pull request checks passed.

Approval refresh: #14
CI updated: 2026-07-24T10:00:55Z
CI attempt: #1
Approval workflow: #400.1

CI run: https://github.com/ePlus-DEV/gmail-alias-toolkit/actions/runs/30084611804

This commit fixes the style issues introduced in f314e5e according to the output from Prettier. Details: #79

feat: add localized user guide links to popup and inline helper

eplus-bot

Approved by @eplus-bot after all pull request checks passed.

CI run: https://github.com/ePlus-DEV/gmail-alias-toolkit/actions/runs/30083848952

eplus-bot

Approved by @eplus-bot after all pull request checks passed.

CI run: https://github.com/ePlus-DEV/gmail-alias-toolkit/actions/runs/30084611804

github-actions · 2026-07-24T10:06:20Z

Thanks for helping make Gmail Alias Toolkit better!

hoangsvit and others added 8 commits July 21, 2026 09:34

Merge remote-tracking branch 'origin/main' into dev

213b444

Merge remote-tracking branch 'origin/main' into dev

5614201

fix: align inline helper with WXT environment

b353f92

test: verify production inline helper manifest

7f54aaf

ci: run checks for pull requests into dev

c34f7e8

style: format code with Prettier

9a00ad6

This commit fixes the style issues introduced in c34f7e8 according to the output from Prettier. Details: #77

fix: avoid console usage in manifest verifier

7a2c078

Merge pull request #77 from ePlus-DEV/agent/fix-inline-popup-producti…

e134d88

…on-mode fix: restore inline popup in production builds

eplus-bot added needs-review Pull request is ready for maintainer review build-ci Build, CI, release, or project configuration labels Jul 23, 2026

eplus-bot assigned hoangsvit Jul 23, 2026

eplus-bot self-requested a review July 23, 2026 04:19

eplus-bot previously approved these changes Jul 23, 2026

View reviewed changes

hoangsvit and others added 12 commits July 23, 2026 12:36

refactor: remove custom WXT development flag

4ed6cb5

chore: add one-time WXT environment cleanup

1a98dac

refactor: use WXT runtime environment directly

aff50e8

test: verify WXT manifest scope by mode

d19795e

test: verify WXT development and production scopes

874a63c

refactor: replace production-only manifest verifier

eb8212b

chore: no-op placeholder

d380e3c

chore: remove accidental placeholder

f314e5e

style: format code with Prettier

6604e91

This commit fixes the style issues introduced in f314e5e according to the output from Prettier. Details: #79

chore: align content script with WXT mode

ec7471e

fix: make one-time WXT mode replacement format-safe

bfff3c1

fix: align content script with WXT build mode

cc6a0cf

hoangsvit and others added 18 commits July 24, 2026 15:42

chore: prepare inline guide link patch

527fba0

feat: add user guide link to inline popup

ef95855

fix: guard browser locale resolution for user guide

c40d80d

fix: handle user guide navigation failures

bb89f81

fix: handle popup guide navigation errors

7cb836a

test: cover user guide navigation fallbacks

38f72aa

test: cover browser locale resolution for user guide

9ba3333

chore: prepare inline guide CSS cleanup

9c69c7e

style: align inline popup guide action

7387184

chore: add one-shot WXT locale migration

7bf49f4

fix: simplify generated locale coverage test

4e471c2

chore: prepare WXT locale migration trigger

73ce83a

chore: keep WXT locale migration ready

88f95c9

chore: add one-shot WXT locale migration script

99c4c2d

fix: simplify WXT locale migration workflow

825c707

refactor: use WXT locales for user guide labels

5b36146

test: document WXT locale coverage callbacks

0b81a66

Merge pull request #85 from ePlus-DEV/feat/add-user-guide-links

a4dca27

feat: add localized user guide links to popup and inline helper

hoangsvit dismissed eplus-bot’s stale review via a4dca27 July 24, 2026 09:47

eplus-bot self-requested a review July 24, 2026 09:47

hoangsvit temporarily deployed to pr-preview July 24, 2026 09:48 — with GitHub Actions Inactive

eplus-bot previously approved these changes Jul 24, 2026

View reviewed changes

feat: add user guide button to Settings and remove from PopupHeader

65282dc

hoangsvit dismissed eplus-bot’s stale review via 65282dc July 24, 2026 09:59

eplus-bot self-requested a review July 24, 2026 10:00

hoangsvit temporarily deployed to pr-preview July 24, 2026 10:01 — with GitHub Actions Inactive

eplus-bot approved these changes Jul 24, 2026

View reviewed changes

hoangsvit merged commit d427a1c into main Jul 24, 2026
12 checks passed

hoangsvit deployed to pr-preview July 24, 2026 10:07 — with GitHub Actions View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

release: v1.3.2 — fix WXT manifest scope validation#78

release: v1.3.2 — fix WXT manifest scope validation#78
hoangsvit merged 109 commits into
mainfrom
dev

hoangsvit commented Jul 23, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

qodo-code-review Bot commented Jul 23, 2026

Uh oh!

eplus-bot commented Jul 23, 2026

Uh oh!

coderabbitai Bot commented Jul 23, 2026 •

edited

Loading

Reviews paused

Walkthrough

Changes

Sequence Diagram(s)

Uh oh!

deepsource-io Bot commented Jul 23, 2026

Uh oh!

eplus-bot left a comment

Uh oh!

eplus-bot commented Jul 23, 2026 •

edited

Loading

Uh oh!

eplus-bot left a comment

Uh oh!

eplus-bot left a comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Uh oh!

Conversation

hoangsvit commented Jul 23, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Type of Change

Areas Touched

Testing

Unit-test coverage added

Screenshots or Recording

Notes for Reviewers

Summary by CodeRabbit

Uh oh!

qodo-code-review Bot commented Jul 23, 2026

Qodo reviews are paused for this user.

Uh oh!

eplus-bot commented Jul 23, 2026

Uh oh!

coderabbitai Bot commented Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Reviews paused

Walkthrough

Changes

Sequence Diagram(s)

Uh oh!

deepsource-io Bot commented Jul 23, 2026

DeepSource Code Review

PR Report Card

Code Review Summary

Uh oh!

eplus-bot left a comment

Choose a reason for hiding this comment

Uh oh!

eplus-bot commented Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

eplus-bot left a comment

Choose a reason for hiding this comment

Uh oh!

eplus-bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

hoangsvit commented Jul 23, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jul 23, 2026 •

edited

Loading

eplus-bot commented Jul 23, 2026 •

edited

Loading