Method perform

cli/plugins/builtin_http.go:176–227

perform executes the request through the shared hardened client.

(ctx context.Context, in httpArgs)

// perform executes the request through the shared hardened client.
func (p *BuiltinHTTPPlugin) perform(ctx context.Context, in httpArgs) (string, error) {
	if len(in.Body) > httpMaxRequestBody {
		return "", fmt.Errorf("@http: request body too large (%d bytes, limit %d)", len(in.Body), httpMaxRequestBody)
	}

	safeURL, err := validateWebTarget(in.URL)
	if err != nil {
		return "", fmt.Errorf("@http: refusing %q: %w", in.URL, err)
	}

	timeout := httpDefaultTimeout
	if in.TimeoutSeconds > 0 {
		timeout = time.Duration(in.TimeoutSeconds) * time.Second
		if timeout > httpMaxTimeout {
			timeout = httpMaxTimeout
		}
	}
	reqCtx, cancel := context.WithTimeout(ctx, timeout)
	defer cancel()

	var bodyReader io.Reader
	if in.Body != "" {
		bodyReader = strings.NewReader(in.Body)
	}
	req, err := http.NewRequestWithContext(reqCtx, in.Method, safeURL, bodyReader) //#nosec G704 -- URL validated by validateWebTarget + ssrfDialControl (metadata/link-local refused, redirects re-validated)
	if err != nil {
		return "", fmt.Errorf("@http: build request: %w", err)
	}
	req.Header.Set("User-Agent", fallbackUserAgent)
	for k, v := range in.Headers {
		// The proxy credential channel is operator-owned configuration; a tool
		// argument must never override it.
		if strings.EqualFold(k, "Proxy-Authorization") {
			continue
		}
		req.Header.Set(k, v)
	}

	start := time.Now()
	resp, err := webHTTPClient().Do(req) //#nosec G704 -- see request annotation above
	if err != nil {
		return "", fmt.Errorf("@http: %s %s failed after %s: %w", in.Method, in.URL, time.Since(start).Round(time.Millisecond), err)
	}
	defer func() { _ = resp.Body.Close() }()

	raw, err := io.ReadAll(io.LimitReader(resp.Body, httpMaxResponseBody+1))
	if err != nil {
		return "", fmt.Errorf("@http: read response: %w", err)
	}
	elapsed := time.Since(start).Round(time.Millisecond)
	return renderHTTPResponse(in, resp, raw, elapsed), nil
}

// renderHTTPResponse formats the model-facing response summary.
func renderHTTPResponse(in httpArgs, resp *http.Response, raw []byte, elapsed time.Duration) string {