---
id: client-http-host
name: Shared reqwest client host (middleware stack, retry-after)
status: pending
depends_on: []
scope: narrow
risk: low
impact: component
level: implementation
tags: [client, phase-3]
---

## Description

Port the outbound HTTP client host from
`/workspace/@alkdev/alknet/crates/alknet-http/src/client/`:
`ClientWithMiddleware` shared across forwarding handlers;
`RetryTransientMiddleware` (exponential backoff) + inlined
`RetryAfterMiddleware` (parse Retry-After on 429/503, bounded URL→time
map); ArcSwap rebuild-and-swap for config hot-reload. Credential
injection is per-request from OperationContext.capabilities — never at
client construction, never from env vars.

## Acceptance Criteria

- [ ] Client host ported with the middleware stack; inlined Retry-After (bounded storage)
- [ ] ArcSwap hot-swap tested (config change → new pool)
- [ ] No env-var reads (invariant test)
- [ ] `cargo test` passes

## References

- docs/architecture/http-adapters.md (§HTTP client (reqwest))
- Old source: `/workspace/@alkdev/alknet/crates/alknet-http/src/client/{http_client,retry_after}.rs`

## Notes

> Agent fills during implementation.

## Summary

> Agent fills on completion.