@codemieai/code 0.15.6 → 0.15.7

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.js

@@ -0,0 +1,73 @@
+import { unlink } from 'node:fs/promises';
+import { logger } from '../../../../../../utils/logger.js';
+import { sanitizeLogArgs } from '../../../../../../utils/security.js';
+import { SPOOL_STREAMS, listSessionIds, statusFile, streamFile, } from './spool-paths.js';
+import { withSessionLock } from './session-lock.js';
+import { createStatus, readStatus } from './session-status.js';
+import { isSessionDrained, lastActivityMs, readSpoolState } from './spool-state.js';
+import { abandonedSessionGraceMs, endedSessionGraceMs } from './spool-config.js';
+/**
+ * Lightweight garbage collection for the OTLP spool.
+ *
+ * Two cleanup paths, both of which require every stream to be drained
+ * (`fileSize === cursor`) so no undelivered bytes are ever destroyed:
+ *
+ * 1. Normally ended sessions (`endedAt` set): deleted once the end grace period
+ *    has elapsed since the later of `endedAt` and the last spool-file write, so
+ *    late hook/OTEL writes postpone cleanup.
+ * 2. Abandoned sessions (no `endedAt`): deleted once the abandonment timeout has
+ *    elapsed since the last spool-file write. Activity is read from spool-file
+ *    mtimes, never from the status file, because cursor updates rewrite the
+ *    status file without any new data arriving.
+ *
+ * Consequence: a live session that stays quiet (and fully drained) for longer
+ * than the abandonment timeout may have its spool removed. That is safe — the
+ * next producer write recreates the status and spool files from scratch.
+ */
+export async function sweepSpool() {
+    for (const sessionId of await listSessionIds()) {
+        try {
+            await sweepSession(sessionId);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.debug('[otlp-sweep] per-session error', ...sanitizeLogArgs({ sessionId, err: msg }));
+        }
+    }
+}
+async function sweepSession(sessionId) {
+    // Cheap unlocked pre-scan to keep the sweep off the hot path...
+    if (!(await isDeletable(sessionId)))
+        return;
+    await withSessionLock(sessionId, async () => {
+        // ...then re-read status, sizes and mtimes under the lock before deleting.
+        if (!(await isDeletable(sessionId)))
+            return;
+        await deleteSession(sessionId);
+    });
+}
+async function isDeletable(sessionId) {
+    const status = (await readStatus(sessionId)) ?? createStatus();
+    const spool = await readSpoolState(sessionId, status);
+    if (!isSessionDrained(spool))
+        return false;
+    const activityMs = await lastActivityMs(spool);
+    if (activityMs === null)
+        return false; // nothing on disk to clean up
+    const idleSince = status.endedAt !== undefined ? Math.max(status.endedAt, activityMs) : activityMs;
+    const timeoutMs = status.endedAt !== undefined ? endedSessionGraceMs() : abandonedSessionGraceMs();
+    return Date.now() - idleSince >= timeoutMs;
+}
+async function deleteSession(sessionId) {
+    const paths = [...SPOOL_STREAMS.map((s) => streamFile(sessionId, s)), statusFile(sessionId)];
+    for (const path of paths) {
+        try {
+            await unlink(path);
+        }
+        catch {
+            // File may already be gone
+        }
+    }
+    logger.debug('[otlp-sweep] swept session', ...sanitizeLogArgs({ sessionId }));
+}
+//# sourceMappingURL=sweep.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACL,aAAa,EACb,cAAc,EACd,UAAU,EACV,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEjF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,KAAK,MAAM,SAAS,IAAI,MAAM,cAAc,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,SAAiB;IAC3C,gEAAgE;IAChE,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO;IAE5C,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC1C,2EAA2E;QAC3E,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;YAAE,OAAO;QAC5C,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,SAAiB;IAC1C,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEtD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3C,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,8BAA8B;IAErE,MAAM,SAAS,GACb,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACnF,MAAM,SAAS,GACb,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC;IAEnF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,MAAM,KAAK,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.d.ts

@@ -0,0 +1,12 @@
+import type { SSOCredentials, JWTCredentials } from '../../../../../core/types.js';
+/**
+ * Process one tick for a single session: evaluate the completeness gate and,
+ * when it permits forwarding, dispatch a forward pass for the streams that
+ * actually have bytes after their cursor.
+ *
+ * A session stays gate-eligible for as long as its spool files are non-empty,
+ * so the pending-data check is what keeps a fully drained tick from issuing
+ * any HTTP requests.
+ */
+export declare function processSessionTick(sessionId: string, credentials: SSOCredentials | JWTCredentials): Promise<void>;
+//# sourceMappingURL=tick-processor.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tick-processor.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAUnF;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,cAAc,GAAG,cAAc,GAC3C,OAAO,CAAC,IAAI,CAAC,CA2Cf"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.js

@@ -0,0 +1,55 @@
+import { logger } from '../../../../../../utils/logger.js';
+import { sanitizeLogArgs } from '../../../../../../utils/security.js';
+import { withSessionLock } from './session-lock.js';
+import { readStatus, writeStatus } from './session-status.js';
+import { hasPendingData, readSpoolState } from './spool-state.js';
+import { gateDecision } from './completeness-gate.js';
+import { forwardSession } from './forwarder.js';
+import { areCredentialsStale } from './auth-state.js';
+const currentlyForwarding = new Set();
+/**
+ * Process one tick for a single session: evaluate the completeness gate and,
+ * when it permits forwarding, dispatch a forward pass for the streams that
+ * actually have bytes after their cursor.
+ *
+ * A session stays gate-eligible for as long as its spool files are non-empty,
+ * so the pending-data check is what keeps a fully drained tick from issuing
+ * any HTTP requests.
+ */
+export async function processSessionTick(sessionId, credentials) {
+    let shouldForward = false;
+    let hooksOnly = false;
+    await withSessionLock(sessionId, async () => {
+        const status = await readStatus(sessionId);
+        if (!status) {
+            return;
+        }
+        if (areCredentialsStale()) {
+            return;
+        }
+        const spool = await readSpoolState(sessionId, status);
+        const decision = gateDecision(spool, status);
+        const pending = hasPendingData(spool);
+        logger.debug('[otlp-tick] gate decision', ...sanitizeLogArgs({ sessionId, decision, pending, waitTicks: status.waitTicks }));
+        if (decision === 'send' || decision === 'hooks-only-force') {
+            shouldForward = pending;
+            hooksOnly = decision === 'hooks-only-force';
+        }
+        else if (decision === 'wait') {
+            status.waitTicks += 1;
+            await writeStatus(sessionId, status);
+        }
+        // 'noop': nothing written yet
+    });
+    if (!shouldForward || currentlyForwarding.has(sessionId)) {
+        return;
+    }
+    currentlyForwarding.add(sessionId);
+    try {
+        await forwardSession(sessionId, hooksOnly, credentials);
+    }
+    finally {
+        currentlyForwarding.delete(sessionId);
+    }
+}
+//# sourceMappingURL=tick-processor.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tick-processor.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,WAA4C;IAE5C,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,IAAI,mBAAmB,EAAE,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAEtC,MAAM,CAAC,KAAK,CACV,2BAA2B,EAC3B,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAClF,CAAC;QAEF,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YAC3D,aAAa,GAAG,OAAO,CAAC;YACxB,SAAS,GAAG,QAAQ,KAAK,kBAAkB,CAAC;QAC9C,CAAC;aAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;YACtB,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,8BAA8B;IAChC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,OAAO;IACT,CAAC;IAED,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp.plugin.d.ts

@@ -0,0 +1,14 @@
+import type { ProxyPlugin, PluginContext, ProxyInterceptor } from './types.js';
+export interface OtlpHookSpoolData {
+    agentName: string;
+    raw: string;
+    timestamp: number;
+}
+export declare class OtlpPlugin implements ProxyPlugin {
+    id: string;
+    name: string;
+    version: string;
+    priority: number;
+    createInterceptor(context: PluginContext): ProxyInterceptor;
+}
+//# sourceMappingURL=otlp.plugin.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otlp.plugin.d.ts","sourceRoot":"","sources":["../../../../../../src/providers/plugins/sso/proxy/plugins/otlp.plugin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAuB/E,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AA2OD,qBAAa,UAAW,YAAW,WAAW;IAC5C,EAAE,SAAmB;IACrB,IAAI,SAAoB;IACxB,OAAO,SAAW;IAClB,QAAQ,SAAM;IAEd,iBAAiB,CAAC,OAAO,EAAE,aAAa,GAAG,gBAAgB;CAK5D"}

package/dist/providers/plugins/sso/proxy/plugins/otlp.plugin.js

@@ -0,0 +1,221 @@
+import { appendFile, mkdir } from 'node:fs/promises';
+import { logger } from '../../../../../utils/logger.js';
+import { sanitizeLogArgs } from '../../../../../utils/security.js';
+import { listSessionIds, spoolRoot } from './otlp-spool/spool-paths.js';
+import { sweepSpool } from './otlp-spool/sweep.js';
+import { processSessionTick } from './otlp-spool/tick-processor.js';
+import { appendSpool } from './otlp-spool/spool-io.js';
+import { sendIntervalMs, sweepIntervalMs } from './otlp-spool/spool-config.js';
+/**
+ * Upper bound on the best-effort flush during proxy shutdown.
+ *
+ * Deliberately well below FORWARD_TIMEOUT_MS (10s) so a hung backend can never
+ * be the reason a proxy stop is slow. Cutting the flush short loses nothing:
+ * cursors are only advanced on success, so anything undelivered stays spooled
+ * and is sent by the next proxy start.
+ */
+const SHUTDOWN_FLUSH_TIMEOUT_MS = 5_000;
+const UUID_V4_RE = /[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}/i;
+function sendError(res, status, type, message) {
+    res.statusCode = status;
+    res.setHeader('Content-Type', 'application/json');
+    res.end(JSON.stringify({ type: 'error', error: { type, message } }));
+    return true;
+}
+class OtlpInterceptor {
+    credentials;
+    name = 'otlp-ingest';
+    tickHandle;
+    sweepHandle;
+    ticking = false;
+    stopped = false;
+    constructor(credentials) {
+        this.credentials = credentials;
+    }
+    async onProxyStart() {
+        // Recovery pass for anything a previous process left on disk (crash, or a
+        // stale-credential window that this restart just ended). Intentionally not
+        // awaited: the backlog may be large and proxy start must not block on network I/O.
+        void this.runTick('startup');
+        this.tickHandle = setInterval(() => void this.runTick('tick'), sendIntervalMs());
+        this.sweepHandle = setInterval(() => void this.runSweep(), sweepIntervalMs());
+    }
+    async onProxyStop() {
+        this.stopped = true;
+        if (this.tickHandle) {
+            clearInterval(this.tickHandle);
+        }
+        if (this.sweepHandle) {
+            clearInterval(this.sweepHandle);
+        }
+        this.tickHandle = undefined;
+        this.sweepHandle = undefined;
+        // Bounded final flush: better delivery latency, but shutdown must never hang.
+        await Promise.race([
+            this.tick().catch(() => undefined),
+            new Promise((resolve) => setTimeout(resolve, SHUTDOWN_FLUSH_TIMEOUT_MS)),
+        ]);
+    }
+    /** Serialize ticks: a slow backlog drain must not stack up concurrent passes. */
+    async runTick(label) {
+        if (this.stopped || this.ticking) {
+            return;
+        }
+        this.ticking = true;
+        try {
+            await this.tick();
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.debug(`[otlp-ingest] ${label} error`, ...sanitizeLogArgs({ err: msg }));
+        }
+        finally {
+            this.ticking = false;
+        }
+    }
+    async runSweep() {
+        if (this.stopped) {
+            return;
+        }
+        try {
+            await sweepSpool();
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.debug('[otlp-ingest] sweep error', ...sanitizeLogArgs({ err: msg }));
+        }
+    }
+    async tick() {
+        const creds = this.credentials;
+        if (!creds) {
+            return;
+        }
+        const sessionIds = await listSessionIds();
+        // Different sessions are independent (per-session locking happens inside
+        // processSessionTick), so they are processed concurrently.
+        await Promise.all(sessionIds.map((sessionId) => processSessionTick(sessionId, creds).catch((err) => {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.debug('[otlp-ingest] session tick error', ...sanitizeLogArgs({ sessionId, err: msg }));
+        })));
+    }
+    async handleRequest(ctx, _req, res, _httpClient) {
+        const { method, url } = ctx;
+        // Route: POST /v1/analytics/hooks
+        if (method === 'POST' && url === '/v1/analytics/hooks') {
+            return this.handleHooks(ctx, res);
+        }
+        // Route: POST /v1/analytics/otlp/logs|metrics|traces
+        if (method === 'POST' && url === '/v1/analytics/otlp/v1/logs') {
+            return this.handleOtlp(ctx, res, 'logs');
+        }
+        if (method === 'POST' && url === '/v1/analytics/otlp/v1/metrics') {
+            return this.handleOtlp(ctx, res, 'metrics');
+        }
+        if (method === 'POST' && url === '/v1/analytics/otlp/v1/traces') {
+            return this.handleOtlp(ctx, res, 'traces');
+        }
+        return false;
+    }
+    async handleHooks(ctx, res) {
+        if (!ctx.metadata.gatewayKeyValidated) {
+            logger.warn('[otlp-ingest] Rejected hooks request: gateway key not validated');
+            return sendError(res, 401, 'authentication_error', 'Unauthorized');
+        }
+        if (!ctx.requestBody) {
+            return sendError(res, 400, 'invalid_request_error', 'Empty body');
+        }
+        const rawOtlpHookSpoolData = ctx.requestBody.toString('utf-8');
+        let otlpHookSpoolData;
+        try {
+            otlpHookSpoolData = JSON.parse(rawOtlpHookSpoolData);
+        }
+        catch {
+            return sendError(res, 400, 'invalid_request_error', 'Invalid JSON');
+        }
+        // Validate agentName - dynamic import avoids circular dependency
+        try {
+            const { AgentRegistry } = await import('../../../../../agents/registry.js');
+            if (!AgentRegistry.getAnalyticsAgent(otlpHookSpoolData.agentName)) {
+                return sendError(res, 400, 'invalid_request_error', 'Unrecognized agentName');
+            }
+        }
+        catch {
+            return sendError(res, 400, 'invalid_request_error', 'Agent validation failed');
+        }
+        // Extract session_id from raw hook JSON
+        let sessionId = '';
+        try {
+            const hookEvent = JSON.parse(otlpHookSpoolData.raw);
+            sessionId = String(hookEvent['session_id'] ?? '');
+        }
+        catch { /* ignore */ }
+        if (!sessionId) {
+            // No session id — log and accept without spooling
+            logger.debug('[otlp-ingest] hooks: no session_id in raw, discarding');
+            res.statusCode = 202;
+            res.setHeader('Content-Type', 'application/json');
+            res.end(JSON.stringify({ accepted: true }));
+            return true;
+        }
+        const line = rawOtlpHookSpoolData + '\n';
+        try {
+            await appendSpool(sessionId, 'hooks', line);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.warn('[otlp-ingest] hooks disk write error', ...sanitizeLogArgs({ sessionId, err: msg }));
+            // Still respond 202 — data loss is logged but we don't block the hook
+        }
+        res.statusCode = 202;
+        res.setHeader('Content-Type', 'application/json');
+        res.end(JSON.stringify({ accepted: true }));
+        return true;
+    }
+    async handleOtlp(ctx, res, signal) {
+        if (!ctx.metadata.gatewayKeyValidated) {
+            logger.warn(`[otlp-ingest] Rejected ${signal} request: gateway key not validated`);
+            return sendError(res, 401, 'authentication_error', 'Unauthorized');
+        }
+        if (!ctx.requestBody) {
+            res.statusCode = 200;
+            res.end();
+            return true;
+        }
+        const bytes = ctx.requestBody;
+        // Extract session ID via UUID v4 regex on latin1-decoded bytes
+        const latin1Str = Buffer.from(bytes).toString('latin1');
+        const match = UUID_V4_RE.exec(latin1Str);
+        const sessionId = match ? match[0] : '';
+        if (!sessionId) {
+            // Append to _unresolved.alert for debugging
+            try {
+                await mkdir(spoolRoot(), { recursive: true });
+                await appendFile(`${spoolRoot()}/_unresolved.alert`, bytes);
+            }
+            catch { /* best-effort */ }
+            res.statusCode = 200;
+            res.end();
+            return true;
+        }
+        try {
+            await appendSpool(sessionId, signal, bytes);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.warn(`[otlp-ingest] ${signal} disk write error`, ...sanitizeLogArgs({ sessionId, err: msg }));
+        }
+        res.statusCode = 200;
+        res.end();
+        return true;
+    }
+}
+export class OtlpPlugin {
+    id = '@codemie/otlp';
+    name = 'OTLP Ingestion';
+    version = '1.0.0';
+    priority = 10;
+    createInterceptor(context) {
+        return new OtlpInterceptor(context.syncCredentials || context.credentials);
+    }
+}
+//# sourceMappingURL=otlp.plugin.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otlp.plugin.js","sourceRoot":"","sources":["../../../../../../src/providers/plugins/sso/proxy/plugins/otlp.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAMrD,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/E;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,UAAU,GAAG,sEAAsE,CAAC;AAQ1F,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe;IACnF,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe;IAQU;IAP7B,IAAI,GAAG,aAAa,CAAC;IAEb,UAAU,CAAkB;IAC5B,WAAW,CAAkB;IAC7B,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IAExB,YAA6B,WAA6C;QAA7C,gBAAW,GAAX,WAAW,CAAkC;IAAG,CAAC;IAE9E,KAAK,CAAC,YAAY;QAChB,0EAA0E;QAC1E,2EAA2E;QAC3E,mFAAmF;QACnF,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE7B,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAE7B,8EAA8E;QAC9E,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YAClC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;IAED,iFAAiF;IACzE,KAAK,CAAC,OAAO,CAAC,KAAa;QACjC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,iBAAiB,KAAK,QAAQ,EAAE,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,cAAc,EAAE,CAAC;QAE1C,yEAAyE;QACzE,2DAA2D;QAC3D,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3B,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CACV,kCAAkC,EAClC,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAC5C,CAAC;QACJ,CAAC,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,GAAiB,EACjB,IAAqB,EACrB,GAAmB,EACnB,WAA4B;QAE5B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAE5B,kCAAkC;QAClC,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;QAED,qDAAqD;QACrD,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,4BAA4B,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,+BAA+B,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,8BAA8B,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAiB,EAAE,GAAmB;QAC9D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;YAC/E,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAE,YAAY,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,oBAAoB,GAAG,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE/D,IAAI,iBAAoC,CAAC;QAEzC,IAAI,CAAC;YACH,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAsB,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAE,cAAc,CAAC,CAAC;QACtE,CAAC;QAED,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;YAC5E,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClE,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;QACjF,CAAC;QAED,wCAAwC;QACxC,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAA4B,CAAC;YAC/E,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,kDAAkD;YAClD,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACtE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,oBAAoB,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACjG,sEAAsE;QACxE,CAAC;QAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,GAAiB,EACjB,GAAmB,EACnB,MAAqC;QAErC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,qCAAqC,CAAC,CAAC;YACnF,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC;QAE9B,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAExC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,4CAA4C;YAC5C,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,MAAM,UAAU,CAAC,GAAG,SAAS,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,mBAAmB,EAAE,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACvG,CAAC;QAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,OAAO,UAAU;IACrB,EAAE,GAAG,eAAe,CAAC;IACrB,IAAI,GAAG,gBAAgB,CAAC;IACxB,OAAO,GAAG,OAAO,CAAC;IAClB,QAAQ,GAAG,EAAE,CAAC;IAEd,iBAAiB,CAAC,OAAsB;QACtC,OAAO,IAAI,eAAe,CACxB,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,WAAW,CAC/C,CAAC;IACJ,CAAC;CACF"}

package/dist/providers/plugins/sso/proxy/proxy-http-client.d.ts

@@ -3,7 +3,7 @@
  *
  * KISS: Does one thing well - forwards HTTP requests with streaming.
  * Memory efficient: Returns streams directly, no buffering.
- * Proxy support: Respects HTTP_PROXY/HTTPS_PROXY environment variables.
+ * Proxy support: Uses the shared environment/Windows/PAC resolver per request.
  */
 import http from 'http';
 export interface HTTPClientOptions {
@@ -21,11 +21,8 @@ export interface ForwardRequestOptions {
 export declare class ProxyHTTPClient {
     private directHttpsAgent;
     private directHttpAgent;
-    private proxyHttpsAgent;
-    private proxyHttpAgent;
     private timeout;
     private rejectUnauthorized;
-    private noProxyRules;
     constructor(options?: HTTPClientOptions);
     private getAgentForUrl;
     /**

package/dist/providers/plugins/sso/proxy/proxy-http-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-http-client.d.ts","sourceRoot":"","sources":["../../../../../src/providers/plugins/sso/proxy/proxy-http-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,IAAI,MAAM,MAAM,CAAC;AAUxB,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACxB;AAoKD;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,gBAAgB,CAAc;IACtC,OAAO,CAAC,eAAe,CAAa;IACpC,OAAO,CAAC,eAAe,CAA0B;IACjD,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,kBAAkB,CAAU;IACpC,OAAO,CAAC,YAAY,CAAgB;gBAExB,OAAO,GAAE,iBAAsB;IA+C3C,OAAO,CAAC,cAAc;IA6BtB;;;OAGG;IACG,OAAO,CACX,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;IA0IhC;;;OAGG;IACG,YAAY,CAChB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAC9B,UAAU,EAAE,IAAI,CAAC,cAAc,EAC/B,WAAW,GAAE,MAAM,EAAwC,GAC1D,OAAO,CAAC,IAAI,CAAC;IAsBhB;;;;OAIG;IACG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAUvE;;OAEG;IACH,KAAK,IAAI,IAAI;CAMd"}
+{"version":3,"file":"proxy-http-client.d.ts","sourceRoot":"","sources":["../../../../../src/providers/plugins/sso/proxy/proxy-http-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,IAAI,MAAM,MAAM,CAAC;AAQxB,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,gBAAgB,CAAc;IACtC,OAAO,CAAC,eAAe,CAAa;IACpC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,kBAAkB,CAAU;gBAExB,OAAO,GAAE,iBAAsB;YAqB7B,cAAc;IAS5B;;;OAGG;IACG,OAAO,CACX,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;IA0IhC;;;OAGG;IACG,YAAY,CAChB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAC9B,UAAU,EAAE,IAAI,CAAC,cAAc,EAC/B,WAAW,GAAE,MAAM,EAAwC,GAC1D,OAAO,CAAC,IAAI,CAAC;IAsBhB;;;;OAIG;IACG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAUvE;;OAEG;IACH,KAAK,IAAI,IAAI;CAId"}