feat(extension): production API URL, PH news site support, article auto-verify

- background.js: default apiBase → https://philverify.web.app/api
- manifest.json: fix host_permissions (add philverify.web.app, remove dead api.philverify.com)
- manifest.json: expand content_scripts to 14 Philippine news sites
(Rappler, Inquirer, GMA, PhilStar, Manila Times, MB, ABS-CBN, PNA, bworld, Interaksyon)
- content.js: fix 'Open full analysis' link localhost → https://philverify.web.app
- content.js: add autoVerifyPage() — on news article pages, injects a fixed
top banner with verdict, credibility score, and triggered signals; auto-dismisses
after 5s if Credible
- popup.js: fix 'Open Full Dashboard' localhost → https://philverify.web.app
- popup.html: update settings hint to show production URL

extension/background.js

@@ -20,7 +20,7 @@ const MAX_HISTORY  = 50
 
 // ── Default settings ──────────────────────────────────────────────────────────
 const DEFAULT_SETTINGS = {
-  apiBase:  'http://localhost:8000',
+  apiBase:  'https://philverify.web.app/api',
   autoScan: true,    // Automatically scan Facebook feed posts
 }
 

extension/content.js

@@ -220,7 +220,7 @@
           ${safeText(topSource.title?.slice(0, 60) ?? topSource.source_name ?? 'View source')} ↗
         </a>
       </div>` : ''}
-      <a href="http://localhost:5173" target="_blank" rel="noreferrer" class="pv-open-full">
+      <a href="https://philverify.web.app" target="_blank" rel="noreferrer" class="pv-open-full">
         Open full analysis ↗
       </a>
     `
@@ -373,7 +373,108 @@
 
   init()
 
-  // React to autoScan toggle without requiring page reload
+  // ── Auto-verify news article pages (non-Facebook) ─────────────────────────
+  // When the content script runs on a PH news site (not the homepage),
+  // it auto-verifies the current URL and injects a floating verdict banner.
+
+  const IS_FACEBOOK = window.location.hostname.includes('facebook.com')
+
+  async function autoVerifyPage() {
+    const url  = window.location.href
+    const path = new URL(url).pathname
+    // Skip homepages and section indexes (very short paths like / or /news)
+    if (!path || path.length < 8 || path.split('/').filter(Boolean).length < 2) return
+
+    const banner = document.createElement('div')
+    banner.id = 'pv-auto-banner'
+    banner.setAttribute('role', 'status')
+    banner.setAttribute('aria-live', 'polite')
+    banner.style.cssText = [
+      'position:fixed;top:0;left:0;right:0;z-index:2147483647',
+      'background:#141414;border-bottom:2px solid rgba(220,38,38,0.4)',
+      'padding:7px 16px;display:flex;align-items:center;justify-content:space-between;gap:12px',
+      'font-family:system-ui,sans-serif;font-size:11px;color:#a89f94',
+      'box-shadow:0 2px 16px rgba(0,0,0,0.6)',
+    ].join(';')
+
+    banner.innerHTML = `
+      <div style="display:flex;align-items:center;gap:8px;min-width:0;overflow:hidden;">
+        <span style="font-weight:800;letter-spacing:0.1em;color:#f5f0e8;flex-shrink:0;">
+          PHIL<span style="color:#dc2626">VERIFY</span>
+        </span>
+        <span id="pv-auto-status" style="display:flex;align-items:center;gap:6px;overflow:hidden;">
+          <span class="pv-spinner" aria-hidden="true"></span>
+          <span style="white-space:nowrap;">Verifying article…</span>
+        </span>
+      </div>
+      <div style="display:flex;align-items:center;gap:8px;flex-shrink:0;">
+        <a id="pv-open-full"
+           href="https://philverify.web.app"
+           target="_blank"
+           rel="noreferrer"
+           style="color:#dc2626;font-size:9px;font-weight:700;letter-spacing:0.1em;text-decoration:none;border:1px solid rgba(220,38,38,0.35);padding:3px 8px;border-radius:2px;white-space:nowrap;"
+           aria-label="Open PhilVerify dashboard">
+          FULL ANALYSIS ↗
+        </a>
+        <button id="pv-close-banner"
+          style="background:none;border:none;color:#5c554e;cursor:pointer;font-size:13px;padding:2px 4px;line-height:1;flex-shrink:0;"
+          aria-label="Dismiss PhilVerify banner">✕</button>
+      </div>
+    `
+
+    document.body.insertAdjacentElement('afterbegin', banner)
+    // Push page content down so banner doesn't overlap
+    document.documentElement.style.marginTop = '36px'
+
+    document.getElementById('pv-close-banner').addEventListener('click', () => {
+      banner.remove()
+      document.documentElement.style.marginTop = ''
+    })
+
+    try {
+      const response = await new Promise((resolve, reject) => {
+        chrome.runtime.sendMessage({ type: 'VERIFY_URL', url }, (resp) => {
+          if (chrome.runtime.lastError) reject(new Error(chrome.runtime.lastError.message))
+          else if (!resp?.ok)           reject(new Error(resp?.error ?? 'Unknown error'))
+          else                          resolve(resp.result)
+        })
+      })
+
+      const color   = VERDICT_COLORS[response.verdict] ?? '#5c554e'
+      const statusEl = document.getElementById('pv-auto-status')
+      if (statusEl) {
+        statusEl.innerHTML = `
+          <span style="width:8px;height:8px;border-radius:50%;background:${color};flex-shrink:0;" aria-hidden="true"></span>
+          <span style="color:${color};font-weight:700;">${safeText(response.verdict)}</span>
+          <span style="color:#5c554e;margin-left:2px;">${Math.round(response.final_score)}% credibility</span>
+          ${response.layer1?.triggered_features?.length
+            ? `<span style="color:#5c554e;margin-left:4px;font-size:9px;">· ${safeText(response.layer1.triggered_features[0])}</span>`
+            : ''}
+        `
+      }
+      banner.style.borderBottomColor = color + '88'
+      // Update full-analysis link to deep-link with the URL pre-filled
+      const fullLink = document.getElementById('pv-open-full')
+      if (fullLink) fullLink.href = `https://philverify.web.app`
+
+      // Auto-dismiss if credible and user hasn't interacted
+      if (response.verdict === 'Credible') {
+        setTimeout(() => {
+          if (document.contains(banner)) {
+            banner.remove()
+            document.documentElement.style.marginTop = ''
+          }
+        }, 5000)
+      }
+    } catch (_) {
+      banner.remove()
+      document.documentElement.style.marginTop = ''
+    }
+  }
+
+  if (!IS_FACEBOOK) {
+    autoVerifyPage()
+  }
   chrome.storage.onChanged.addListener((changes, area) => {
     if (area !== 'local' || !changes.settings) return
     const autoScan = changes.settings.newValue?.autoScan

extension/manifest.json

@@ -13,8 +13,8 @@
   "host_permissions": [
     "https://www.facebook.com/*",
     "https://facebook.com/*",
-    "http://localhost:8000/*",
-    "https://api.philverify.com/*"
+    "https://philverify.web.app/*",
+    "http://localhost:8000/*"
   ],
 
   "background": {
@@ -24,7 +24,31 @@
 
   "content_scripts": [
     {
-      "matches": ["https://www.facebook.com/*", "https://facebook.com/*"],
+      "matches": [
+        "https://www.facebook.com/*",
+        "https://facebook.com/*"
+      ],
+      "js": ["content.js"],
+      "css": ["content.css"],
+      "run_at": "document_idle"
+    },
+    {
+      "matches": [
+        "https://www.rappler.com/*",
+        "https://rappler.com/*",
+        "https://www.inquirer.net/*",
+        "https://business.inquirer.net/*",
+        "https://newsinfo.inquirer.net/*",
+        "https://technology.inquirer.net/*",
+        "https://www.gmanetwork.com/*",
+        "https://www.philstar.com/*",
+        "https://www.manilatimes.net/*",
+        "https://www.mb.com.ph/*",
+        "https://news.abs-cbn.com/*",
+        "https://www.pna.gov.ph/*",
+        "https://www.bworldonline.com/*",
+        "https://interaksyon.philstar.com/*"
+      ],
       "js": ["content.js"],
       "css": ["content.css"],
       "run_at": "document_idle"

extension/popup.html

@@ -427,7 +427,7 @@
         aria-describedby="api-base-hint"
       >
       <span id="api-base-hint" style="font-size:9px;color:var(--text-muted);">
-        Default: http://localhost:8000 — change for production deployment.
+        Production: https://philverify.web.app/api — use http://localhost:8000 for local dev.
       </span>
     </div>
     <div class="toggle-row">

extension/popup.js

@@ -78,7 +78,7 @@ function renderResult(result, container) {
         <div class="result-label" style="margin-bottom:4px;">Top Source</div>
         <a href="${safeUrl(topSource.url)}" target="_blank" rel="noreferrer">${safeText(topSource.title?.slice(0, 55) ?? topSource.source_name ?? 'View')} ↗</a>
       </div>` : ''}
-      <a class="open-full" href="http://localhost:5173" target="_blank" rel="noreferrer">
+      <a class="open-full" href="https://philverify.web.app" target="_blank" rel="noreferrer">
         Open Full Dashboard ↗
       </a>
     </div>