Plugin Store · Hook · Gate
Run your hook logic out-of-process.
A hook in busbar 1.5.0 is always a signed, dlopen'd plugin — the retired socket/webhook transports are gone. Webrequest is the first-party bridge back to out-of-process logic: it forwards each hook op (decide/transform/notify/configure/describe/status) as a POST to a URL you run, and returns the capped JSON reply verbatim. Busbar's own hooks::wire normalizers parse that reply — this plugin is a pure network relay, never a second copy of the hook semantics.
It exists for two reasons: migrating existing out-of-process hook logic onto 1.5.0 without a rewrite, and isolating untrusted hook code — the brain runs remotely behind this trusted, signed forwarder, which owns the outbound call.
The forwarder itself is hardened, not just a bare HTTP client: the configured URL is SSRF-guarded at load and reconfigure time (loopback sidecars allowed; link-local, IMDS, RFC1918, CGNAT, and cloud-metadata targets blocked), redirects are disabled on the client so a target can't 30x you to an internal host at runtime, the reply body is size-capped before allocation and depth-guarded before parse, and userinfo is stripped from every error string.
Install it
Download the signed tarball for your platform (button above), drop it in plugins/, and reference it from a pool or global_hooks:
pools:
smart:
hooks:
- { module: busbar-webrequest, settings: { url: "https://sidecar.internal/decide" },
kind: gate, timeout_ms: 5, on_error: nothing }
members: [...]Independently versioned from busbar itself — pin both explicitly in production. Requires busbar 1.5.0+.