• feat(egress): http.request capability + allowed_hosts manifest (ADR 0023)

    Ghost released this 2026-07-07 18:00:29 +00:00 | 3 commits to main since this release

    Host-mediated outbound HTTP for wasm plugins: guest http.RoundTripper
    over the http.request capability; the host performs the request under
    policy. New egress package defines the host-pattern grammar (exact or
    multi-label wildcard, public-suffix rejected), matching, resource
    bounds, and the ErrDenied sentinel (ABI_ERROR_CODE_EGRESS_DENIED).
    plugin.mod gains first-class AllowedHosts + MaxResponseMB; manifest
    gains allowed_hosts=34, max_response_mb=35. CoreServices.OutboundHTTP
    carries the transport. Golden roundtrip + denial-mapping tests.

    Co-Authored-By: Claude Fable 5 noreply@anthropic.com

    Downloads