> didn't surface enough HTTP request/response access in their old API. I haven't checked yet if their Web Extension API surface includes what I needed

Nope, which is why uBlock Origin is still not possible.