From 7034b698d047b85175b7e79b47c75ff866732b38 Mon Sep 17 00:00:00 2001
From: Stilldrop1 <100170803+Stilldrop1@users.noreply.github.com>
Date: Thu, 27 Aug 2026 10:52:37 -0500
Subject: [PATCH] fix: re-enable http-outbound plugin permission (#3087)

The HTTP_OUTBOUND permission was wired up correctly in #2128, gating
whether a plugin's outbound HTTP requests are allowed via
wasi_http_hooks.allow_outbound. That block was accidentally dropped in
8ce513ff89 ("feat: more plugin features") when unrelated changes
overwrote the same permission-checking region in
wasm_host/mod.rs, leaving allow_outbound permanently false regardless
of the plugin's declared permissions.

This restores the check so a plugin granted http-outbound in its
manifest can actually make outbound HTTP calls again.
---
 crates/pumpkin/src/plugin/loader/wasm/wasm_host/mod.rs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/crates/pumpkin/src/plugin/loader/wasm/wasm_host/mod.rs b/crates/pumpkin/src/plugin/loader/wasm/wasm_host/mod.rs
index 66fd123f2..a40571643 100644
--- a/crates/pumpkin/src/plugin/loader/wasm/wasm_host/mod.rs
+++ b/crates/pumpkin/src/plugin/loader/wasm/wasm_host/mod.rs
@@ -277,6 +277,10 @@ impl WasmPlugin {
             builder.inherit_network();
         }
 
+        if has_permission(permissions::HTTP_OUTBOUND) {
+            store.data_mut().wasi_http_hooks.allow_outbound = true;
+        }
+
         // --- System Permissions & Environment Variables ---
 
         // Environment Variables