feat: http:fetch permission + httpOrigins manifest field

2026-05-05 21:50:04 +02:00
parent ef8eb1d73b
commit 0885d3c13e
10 changed files with 225 additions and 9 deletions
@@ -41,6 +41,8 @@ export async function GET() {
      updatedAt: p.updatedAt,
      // Marks plugins loaded from PLUGIN_DEV_DIR. Surface in UI as a badge.
      dev: p.dev,
+      // Surface so clients can enforce api.http.fetch origin allowlists.
+      httpOrigins: p.httpOrigins,
      settingsSchema: undefined, // Will be read from the bundle's manifest
    }));