The popup connects on its own.

Opening it on a machine where everything is set up used to show an Unlock
button whose only job was to ask the host for the masterpassword — which the
host reads from your OS keyring itself, without asking you for anything. That
click bought nothing, so it is gone: the popup unlocks as it opens, and the
search field is ready as soon as the index is built. Searching from the address
bar warms the same index.

The button stays for the two cases where a click decides something. After you
press Lock, the extension stays locked for the rest of the browser session — a
lock that the next popup undid would be no lock at all. And when unlocking
fails, the popup now says why instead of silently offering the same button
again; a database with no keyring entry goes straight to the password field.

Also fixed: pressing Lock no longer came undone the next time the database was
synced. The host keeps watching the file, and the extension rebuilt its index
on any change — including for a database you had just locked.

No new permissions. The masterpassword still never passes through Firefox.

0.2.0 shipped a package built before the setup buttons were given their final
address. Both of them opened the project's repository page, and neither jumped
to the part that answers the problem you were actually looking at.

They now open the setup guide itself, at the section for the dead end you hit:
one for a host Firefox cannot reach, one for a database that has not been
registered yet.

The arrow keys also work again while the mouse is resting over the popup. The
list used to select on mouseover, and moving the selection rebuilds the list —
so the browser fired mouseover on whatever landed under a stationary pointer
and put the selection straight back. It now selects on real movement only.

When the popup cannot do anything useful, it now says why and points somewhere.

Two dead ends used to print a raw command line and leave it at that. If Firefox cannot reach the keepass-deltasync host, the popup now explains that the host is installed once, outside the browser, and offers a button to the setup guide. If the host is running but no database has been registered yet, that is a different problem, and it gets its own button.

The guide lives on the web rather than inside the add-on on purpose: the parts that go stale fastest are the paths each Firefox packaging looks in, and those can now be corrected without shipping a new version.

Nothing else changed. No new permissions, still no host permissions, and still nothing but titles, URLs and group paths ever reaches the browser.

Results are now grouped under their KeePass group, so a search reads as a
few blocks instead of one long list.

Addresses get the full width of the row: the scheme and the repeated
database name are no longer drawn, which leaves room for the path — the
part that actually tells two entries on the same host apart.

The selected row is clearly marked while you move through results with the
arrow keys, and the popup shows more of the list before it scrolls.

Icons mark group headings, unfolded addresses, and entries that have no
usable URL.