v1.3.0

v1.3.0 — Auth Architecture Fix

Fixed

• Tier detection: Content script is now the sole auth authority. Background worker no longer attempts independent session validation that fails and overwrites the correct tier.
• Quota tracking: Hourly usage resets correctly when the hour passes. No more stale 1000/1000 states.
• Admin support: Admin role correctly maps to pro tier across all endpoints (session, tier, analyze).
• Rescue Pass recognition: Extension correctly shows Rescue Pass tier and 1000/h limit.
• Session persistence: Stored profile is preserved when token refresh fails, preventing unnecessary tier reversion to free.
• Watchlist DELETE: Fixed 415 Unsupported Media Type on watchlist removal.

Changed

• Removed periodic background profile refresh interval (5min) — content script polls every 10s instead.
• clearSessionState() now has a recency guard to prevent race conditions with concurrent session updates.
• correctLocalUsageFromBackend() simplified — no more unreliable API calls from background worker.
• Popup requests fresh usage correction from backend on every open.

Requires

• Backend deployment with hourly quota reset fix and admin→pro mapping.