Minor Changes
-
0bf5032: Allow extensions to
importthe Nodehttp/httpsmodules. They resolve to a gated shim (request/getover the same allowlist-gatedfetch), never Node's real modules — so a plain-httpsSDK now builds, validates, and runs, with no raw socket and the same per-Project allowlist/SSRF guarantees asfetch.build.tsleaveshttp/https/node:http/node:httpsexternal instead of failing the bundle with "Could not resolve";staticAnalysis.tsallows those four ids while still rejecting every other Node built-in; and the localserve/loadBundlepath resolves them to the shim so local dev matches the deployed sandbox. Anhttp/httpsAgentis accepted but inert (pooling/TLS options ignored, one-time warning).