v0.1.4

v0.1.4

Fix

• Headers now apply on subdomains of a granted domain. Under v0.1.3, a
  profile scoped to example.com applied on the apex but silently failed on
  api.example.com — the host permission did not cover the hosts the rule
  matched (FINDING-018). v0.1.4 requests *://*.<domain>/* alongside the
  apex, so a granted domain covers its subdomains. Verified on the wire.

Migration

• Domains granted under v0.1.3 are shown as gray ("not covered yet") after
  updating, with a notice, and apply again once re-approved with one click.
  Existing grants are preserved across the update; nothing is silently lost.

Notes

• No new permissions. The manifest remains declarativeNetRequestWithHostAccess
  and storage, with host access requested per-domain at grant time. No
  webRequest; the extension cannot read your traffic.
• Full wire evidence for this release, including the upgrade path and the
  reconciliation behavior, is in test/EVIDENCE.md (v0.1.4 — sitting C).
• Known open items are tracked in FINDINGS.md (021–025); none block this fix.