@codemieai/code 0.15.6 → 0.15.8

package/dist/providers/plugins/sso/proxy/plugins/otlp.plugin.js

@@ -0,0 +1,215 @@
+import { logger } from '../../../../../utils/logger.js';
+import { sanitizeLogArgs } from '../../../../../utils/security.js';
+import { listSessionIds } from './otlp-spool/spool-paths.js';
+import { sweepSpool } from './otlp-spool/sweep.js';
+import { processSessionTick } from './otlp-spool/tick-processor.js';
+import { appendSpool } from './otlp-spool/spool-io.js';
+import { sendIntervalMs, sweepIntervalMs } from './otlp-spool/spool-config.js';
+/**
+ * Upper bound on the best-effort flush during proxy shutdown.
+ *
+ * Deliberately well below FORWARD_TIMEOUT_MS (10s) so a hung backend can never
+ * be the reason a proxy stop is slow. Cutting the flush short loses nothing:
+ * cursors are only advanced on success, so anything undelivered stays spooled
+ * and is sent by the next proxy start.
+ */
+const SHUTDOWN_FLUSH_TIMEOUT_MS = 5_000;
+const UUID_V4_RE = /[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}/i;
+function sendError(res, status, type, message) {
+    res.statusCode = status;
+    res.setHeader('Content-Type', 'application/json');
+    res.end(JSON.stringify({ type: 'error', error: { type, message } }));
+    return true;
+}
+class OtlpInterceptor {
+    credentials;
+    name = 'otlp-ingest';
+    tickHandle;
+    sweepHandle;
+    ticking = false;
+    stopped = false;
+    constructor(credentials) {
+        this.credentials = credentials;
+    }
+    async onProxyStart() {
+        // Recovery pass for anything a previous process left on disk (crash, or a
+        // stale-credential window that this restart just ended). Intentionally not
+        // awaited: the backlog may be large and proxy start must not block on network I/O.
+        void this.runTick('startup');
+        this.tickHandle = setInterval(() => void this.runTick('tick'), sendIntervalMs());
+        this.sweepHandle = setInterval(() => void this.runSweep(), sweepIntervalMs());
+    }
+    async onProxyStop() {
+        this.stopped = true;
+        if (this.tickHandle) {
+            clearInterval(this.tickHandle);
+        }
+        if (this.sweepHandle) {
+            clearInterval(this.sweepHandle);
+        }
+        this.tickHandle = undefined;
+        this.sweepHandle = undefined;
+        // Bounded final flush: better delivery latency, but shutdown must never hang.
+        await Promise.race([
+            this.tick().catch(() => undefined),
+            new Promise((resolve) => setTimeout(resolve, SHUTDOWN_FLUSH_TIMEOUT_MS)),
+        ]);
+    }
+    /** Serialize ticks: a slow backlog drain must not stack up concurrent passes. */
+    async runTick(label) {
+        if (this.stopped || this.ticking) {
+            return;
+        }
+        this.ticking = true;
+        try {
+            await this.tick();
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.debug(`[otlp-ingest] ${label} error`, ...sanitizeLogArgs({ err: msg }));
+        }
+        finally {
+            this.ticking = false;
+        }
+    }
+    async runSweep() {
+        if (this.stopped) {
+            return;
+        }
+        try {
+            await sweepSpool();
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.debug('[otlp-ingest] sweep error', ...sanitizeLogArgs({ err: msg }));
+        }
+    }
+    async tick() {
+        const creds = this.credentials;
+        if (!creds) {
+            return;
+        }
+        const sessionIds = await listSessionIds();
+        // Different sessions are independent (per-session locking happens inside
+        // processSessionTick), so they are processed concurrently.
+        await Promise.all(sessionIds.map((sessionId) => processSessionTick(sessionId, creds).catch((err) => {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.debug('[otlp-ingest] session tick error', ...sanitizeLogArgs({ sessionId, err: msg }));
+        })));
+    }
+    async handleRequest(ctx, _req, res, _httpClient) {
+        const { method, url } = ctx;
+        // Route: POST /v1/analytics/hooks
+        if (method === 'POST' && url === '/v1/analytics/hooks') {
+            return this.handleHooks(ctx, res);
+        }
+        // Route: POST /v1/analytics/otlp/logs|metrics|traces
+        if (method === 'POST' && url === '/v1/analytics/otlp/v1/logs') {
+            return this.handleOtlp(ctx, res, 'logs');
+        }
+        if (method === 'POST' && url === '/v1/analytics/otlp/v1/metrics') {
+            return this.handleOtlp(ctx, res, 'metrics');
+        }
+        if (method === 'POST' && url === '/v1/analytics/otlp/v1/traces') {
+            return this.handleOtlp(ctx, res, 'traces');
+        }
+        return false;
+    }
+    async handleHooks(ctx, res) {
+        if (!ctx.metadata.gatewayKeyValidated) {
+            logger.warn('[otlp-ingest] Rejected hooks request: gateway key not validated');
+            return sendError(res, 401, 'authentication_error', 'Unauthorized');
+        }
+        if (!ctx.requestBody) {
+            return sendError(res, 400, 'invalid_request_error', 'Empty body');
+        }
+        const rawOtlpHookSpoolData = ctx.requestBody.toString('utf-8');
+        let otlpHookSpoolData;
+        try {
+            otlpHookSpoolData = JSON.parse(rawOtlpHookSpoolData);
+        }
+        catch {
+            return sendError(res, 400, 'invalid_request_error', 'Invalid JSON');
+        }
+        // Validate agentName - dynamic import avoids circular dependency
+        try {
+            const { AgentRegistry } = await import('../../../../../agents/registry.js');
+            if (!AgentRegistry.getAnalyticsAgent(otlpHookSpoolData.agentName)) {
+                return sendError(res, 400, 'invalid_request_error', 'Unrecognized agentName');
+            }
+        }
+        catch {
+            return sendError(res, 400, 'invalid_request_error', 'Agent validation failed');
+        }
+        // Extract session_id from raw hook JSON
+        let sessionId = '';
+        try {
+            const hookEvent = JSON.parse(otlpHookSpoolData.raw);
+            sessionId = String(hookEvent['session_id'] ?? '');
+        }
+        catch { /* ignore */ }
+        if (!sessionId) {
+            // No session id — log and accept without spooling
+            logger.debug('[otlp-ingest] hooks: no session_id in raw, discarding');
+            res.statusCode = 202;
+            res.setHeader('Content-Type', 'application/json');
+            res.end(JSON.stringify({ accepted: true }));
+            return true;
+        }
+        const line = rawOtlpHookSpoolData + '\n';
+        try {
+            await appendSpool(sessionId, 'hooks', line);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.warn('[otlp-ingest] hooks disk write error', ...sanitizeLogArgs({ sessionId, err: msg }));
+            // Still respond 202 — data loss is logged but we don't block the hook
+        }
+        res.statusCode = 202;
+        res.setHeader('Content-Type', 'application/json');
+        res.end(JSON.stringify({ accepted: true }));
+        return true;
+    }
+    async handleOtlp(ctx, res, signal) {
+        if (!ctx.metadata.gatewayKeyValidated) {
+            logger.warn(`[otlp-ingest] Rejected ${signal} request: gateway key not validated`);
+            return sendError(res, 401, 'authentication_error', 'Unauthorized');
+        }
+        if (!ctx.requestBody) {
+            res.statusCode = 200;
+            res.end();
+            return true;
+        }
+        const bytes = ctx.requestBody;
+        // Extract session ID via UUID v4 regex on latin1-decoded bytes
+        const latin1Str = Buffer.from(bytes).toString('latin1');
+        const match = UUID_V4_RE.exec(latin1Str);
+        const sessionId = match ? match[0] : '';
+        if (!sessionId) {
+            logger.debug('[otlp-ingest] no session id in payload, dropping', ...sanitizeLogArgs({ signal, bytes: bytes.length }));
+            res.statusCode = 200;
+            res.end();
+            return true;
+        }
+        try {
+            await appendSpool(sessionId, signal, bytes);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.warn(`[otlp-ingest] ${signal} disk write error`, ...sanitizeLogArgs({ sessionId, err: msg }));
+        }
+        res.statusCode = 200;
+        res.end();
+        return true;
+    }
+}
+export class OtlpPlugin {
+    id = '@codemie/otlp';
+    name = 'OTLP Ingestion';
+    version = '1.0.0';
+    priority = 10;
+    createInterceptor(context) {
+        return new OtlpInterceptor(context.syncCredentials || context.credentials);
+    }
+}
+//# sourceMappingURL=otlp.plugin.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otlp.plugin.js","sourceRoot":"","sources":["../../../../../../src/providers/plugins/sso/proxy/plugins/otlp.plugin.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/E;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,UAAU,GAAG,sEAAsE,CAAC;AAQ1F,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe;IACnF,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe;IAQU;IAP7B,IAAI,GAAG,aAAa,CAAC;IAEb,UAAU,CAAkB;IAC5B,WAAW,CAAkB;IAC7B,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IAExB,YAA6B,WAA6C;QAA7C,gBAAW,GAAX,WAAW,CAAkC;IAAG,CAAC;IAE9E,KAAK,CAAC,YAAY;QAChB,0EAA0E;QAC1E,2EAA2E;QAC3E,mFAAmF;QACnF,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE7B,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAE7B,8EAA8E;QAC9E,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YAClC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;IAED,iFAAiF;IACzE,KAAK,CAAC,OAAO,CAAC,KAAa;QACjC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,iBAAiB,KAAK,QAAQ,EAAE,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,cAAc,EAAE,CAAC;QAE1C,yEAAyE;QACzE,2DAA2D;QAC3D,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3B,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CACV,kCAAkC,EAClC,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAC5C,CAAC;QACJ,CAAC,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,GAAiB,EACjB,IAAqB,EACrB,GAAmB,EACnB,WAA4B;QAE5B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAE5B,kCAAkC;QAClC,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC;QAED,qDAAqD;QACrD,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,4BAA4B,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,+BAA+B,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,8BAA8B,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAiB,EAAE,GAAmB;QAC9D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;YAC/E,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAE,YAAY,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,oBAAoB,GAAG,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE/D,IAAI,iBAAoC,CAAC;QAEzC,IAAI,CAAC;YACH,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAsB,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAE,cAAc,CAAC,CAAC;QACtE,CAAC;QAED,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;YAC5E,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClE,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;QACjF,CAAC;QAED,wCAAwC;QACxC,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAA4B,CAAC;YAC/E,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,kDAAkD;YAClD,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACtE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,oBAAoB,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACjG,sEAAsE;QACxE,CAAC;QAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,GAAiB,EACjB,GAAmB,EACnB,MAAqC;QAErC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,qCAAqC,CAAC,CAAC;YACnF,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC;QAE9B,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAExC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtH,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,mBAAmB,EAAE,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACvG,CAAC;QAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,OAAO,UAAU;IACrB,EAAE,GAAG,eAAe,CAAC;IACrB,IAAI,GAAG,gBAAgB,CAAC;IACxB,OAAO,GAAG,OAAO,CAAC;IAClB,QAAQ,GAAG,EAAE,CAAC;IAEd,iBAAiB,CAAC,OAAsB;QACtC,OAAO,IAAI,eAAe,CACxB,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,WAAW,CAC/C,CAAC;IACJ,CAAC;CACF"}

package/dist/providers/plugins/sso/proxy/proxy-http-client.d.ts

@@ -3,7 +3,7 @@
  *
  * KISS: Does one thing well - forwards HTTP requests with streaming.
  * Memory efficient: Returns streams directly, no buffering.
- * Proxy support: Respects HTTP_PROXY/HTTPS_PROXY environment variables.
+ * Proxy support: Uses the shared environment/Windows/PAC resolver per request.
  */
 import http from 'http';
 export interface HTTPClientOptions {
@@ -21,11 +21,8 @@ export interface ForwardRequestOptions {
 export declare class ProxyHTTPClient {
     private directHttpsAgent;
     private directHttpAgent;
-    private proxyHttpsAgent;
-    private proxyHttpAgent;
     private timeout;
     private rejectUnauthorized;
-    private noProxyRules;
     constructor(options?: HTTPClientOptions);
     private getAgentForUrl;
     /**

package/dist/providers/plugins/sso/proxy/proxy-http-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-http-client.d.ts","sourceRoot":"","sources":["../../../../../src/providers/plugins/sso/proxy/proxy-http-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,IAAI,MAAM,MAAM,CAAC;AAUxB,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACxB;AAoKD;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,gBAAgB,CAAc;IACtC,OAAO,CAAC,eAAe,CAAa;IACpC,OAAO,CAAC,eAAe,CAA0B;IACjD,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,kBAAkB,CAAU;IACpC,OAAO,CAAC,YAAY,CAAgB;gBAExB,OAAO,GAAE,iBAAsB;IA+C3C,OAAO,CAAC,cAAc;IA6BtB;;;OAGG;IACG,OAAO,CACX,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;IA0IhC;;;OAGG;IACG,YAAY,CAChB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAC9B,UAAU,EAAE,IAAI,CAAC,cAAc,EAC/B,WAAW,GAAE,MAAM,EAAwC,GAC1D,OAAO,CAAC,IAAI,CAAC;IAsBhB;;;;OAIG;IACG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAUvE;;OAEG;IACH,KAAK,IAAI,IAAI;CAMd"}
+{"version":3,"file":"proxy-http-client.d.ts","sourceRoot":"","sources":["../../../../../src/providers/plugins/sso/proxy/proxy-http-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,IAAI,MAAM,MAAM,CAAC;AAQxB,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,gBAAgB,CAAc;IACtC,OAAO,CAAC,eAAe,CAAa;IACpC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,kBAAkB,CAAU;gBAExB,OAAO,GAAE,iBAAsB;YAqB7B,cAAc;IAS5B;;;OAGG;IACG,OAAO,CACX,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;IA0IhC;;;OAGG;IACG,YAAY,CAChB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAC9B,UAAU,EAAE,IAAI,CAAC,cAAc,EAC/B,WAAW,GAAE,MAAM,EAAwC,GAC1D,OAAO,CAAC,IAAI,CAAC;IAsBhB;;;;OAIG;IACG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAUvE;;OAEG;IACH,KAAK,IAAI,IAAI;CAId"}

package/dist/providers/plugins/sso/proxy/proxy-http-client.js

@@ -3,185 +3,26 @@
  *
  * KISS: Does one thing well - forwards HTTP requests with streaming.
  * Memory efficient: Returns streams directly, no buffering.
- * Proxy support: Respects HTTP_PROXY/HTTPS_PROXY environment variables.
+ * Proxy support: Uses the shared environment/Windows/PAC resolver per request.
  */
 import { pipeline } from 'stream/promises';
 import https from 'https';
 import http from 'http';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-import { isIP } from 'node:net';
-import { HttpsProxyAgent } from 'https-proxy-agent';
-import { HttpProxyAgent } from 'http-proxy-agent';
 import { NetworkError } from './proxy-errors.js';
 import { logger } from '../../../../utils/logger.js';
-/**
- * Parse proxy URL from environment variables
- */
-function getProxyUrl(protocol) {
-    // Check protocol-specific proxy first, then fall back to generic HTTP_PROXY
-    if (protocol === 'https:') {
-        return process.env.HTTPS_PROXY || process.env.https_proxy ||
-            process.env.HTTP_PROXY || process.env.http_proxy;
-    }
-    return process.env.HTTP_PROXY || process.env.http_proxy;
-}
-function splitRules(raw) {
-    if (!raw)
-        return [];
-    return raw
-        .split(',')
-        .map(entry => entry.trim())
-        .filter(Boolean);
-}
-function parseIpv4(ip) {
-    const parts = ip.split('.');
-    if (parts.length !== 4)
-        return null;
-    const nums = parts.map(p => Number.parseInt(p, 10));
-    if (nums.some(n => !Number.isFinite(n) || n < 0 || n > 255))
-        return null;
-    return (((nums[0] << 24) >>> 0) | ((nums[1] << 16) >>> 0) | ((nums[2] << 8) >>> 0) | nums[3]) >>> 0;
-}
-function parseCidr(raw) {
-    const [ip, maskRaw] = raw.split('/');
-    if (!ip || !maskRaw)
-        return null;
-    const maskBits = Number.parseInt(maskRaw, 10);
-    if (!Number.isFinite(maskBits) || maskBits < 0 || maskBits > 32)
-        return null;
-    const base = parseIpv4(ip);
-    if (base === null)
-        return null;
-    return { base, maskBits };
-}
-function ipInCidr(ip, base, maskBits) {
-    const value = parseIpv4(ip);
-    if (value === null)
-        return false;
-    const mask = maskBits === 0 ? 0 : ((0xffffffff << (32 - maskBits)) >>> 0);
-    return (value & mask) === (base & mask);
-}
-function parseHostPort(raw) {
-    if (raw.startsWith('[')) {
-        const closingBracket = raw.indexOf(']');
-        if (closingBracket > 0 && raw[closingBracket + 1] === ':') {
-            const portRaw = raw.slice(closingBracket + 2);
-            const port = Number.parseInt(portRaw, 10);
-            if (/^\d+$/.test(portRaw) && port >= 1 && port <= 65535) {
-                return { host: raw.slice(1, closingBracket), port };
-            }
-        }
-        return { host: raw };
-    }
-    const separator = raw.lastIndexOf(':');
-    if (separator > 0 && raw.indexOf(':') === separator) {
-        const host = raw.slice(0, separator);
-        const portRaw = raw.slice(separator + 1);
-        const port = Number.parseInt(portRaw, 10);
-        if (/^\d+$/.test(portRaw) && port >= 1 && port <= 65535) {
-            return { host, port };
-        }
-    }
-    return { host: raw };
-}
-function parseNoProxyRules(values) {
-    const rules = [];
-    for (const raw of values) {
-        const value = raw.toLowerCase();
-        if (!value)
-            continue;
-        if (value === '*') {
-            rules.push({ kind: 'all' });
-            continue;
-        }
-        const cidr = parseCidr(value);
-        if (cidr) {
-            rules.push({ kind: 'cidr', ...cidr });
-            continue;
-        }
-        const { host, port } = parseHostPort(value);
-        if (host.startsWith('.')) {
-            rules.push({ kind: 'domain', value: host.slice(1), port });
-            continue;
-        }
-        rules.push({ kind: 'host', value: host, port });
-    }
-    return rules;
-}
-function readNpmNoProxyEntries() {
-    try {
-        const npmrcPath = join(homedir(), '.npmrc');
-        const raw = readFileSync(npmrcPath, 'utf-8');
-        const lines = raw.split(/\r?\n/);
-        for (const lineRaw of lines) {
-            const line = lineRaw.trim();
-            if (!line || line.startsWith('#') || line.startsWith(';'))
-                continue;
-            const eq = line.indexOf('=');
-            if (eq <= 0)
-                continue;
-            const key = line.slice(0, eq).trim().toLowerCase();
-            const value = line.slice(eq + 1).trim();
-            if (key === 'noproxy' || key === 'no-proxy') {
-                return splitRules(value);
-            }
-        }
-    }
-    catch {
-        // No user npmrc or unreadable file — ignore.
-    }
-    return [];
-}
-function matchesPort(rule, port) {
-    return rule.port === undefined || rule.port === port;
-}
-function shouldBypassProxy(hostname, port, rules) {
-    const host = hostname.toLowerCase();
-    for (const rule of rules) {
-        if (rule.kind === 'all') {
-            return true;
-        }
-        if (rule.kind === 'host') {
-            if (host === rule.value && matchesPort(rule, port))
-                return true;
-            continue;
-        }
-        if (rule.kind === 'domain') {
-            const matchesDomain = host === rule.value || host.endsWith(`.${rule.value}`);
-            if (matchesDomain && matchesPort(rule, port))
-                return true;
-            continue;
-        }
-        if (rule.kind === 'cidr' && isIP(host) === 4) {
-            if (ipInCidr(host, rule.base, rule.maskBits))
-                return true;
-        }
-    }
-    return false;
-}
+import { getProxyAgentForUrl, isTlsVerificationEnabled, } from '../../../../utils/system-proxy.js';
 /**
  * Simple streaming HTTP client for proxy forwarding
  */
 export class ProxyHTTPClient {
     directHttpsAgent;
     directHttpAgent;
-    proxyHttpsAgent;
-    proxyHttpAgent;
     timeout;
     rejectUnauthorized;
-    noProxyRules;
     constructor(options = {}) {
         // Use provided timeout or 0 for unlimited (AI requests can be very long)
         this.timeout = options.timeout || 0;
-        this.rejectUnauthorized = options.rejectUnauthorized ?? false;
-        // Check for proxy configuration from environment variables
-        const httpsProxyUrl = getProxyUrl('https:');
-        const httpProxyUrl = getProxyUrl('http:');
-        const envNoProxyEntries = splitRules(process.env.NO_PROXY || process.env.no_proxy);
-        const npmNoProxyEntries = readNpmNoProxyEntries();
-        this.noProxyRules = parseNoProxyRules([...envNoProxyEntries, ...npmNoProxyEntries]);
+        this.rejectUnauthorized = options.rejectUnauthorized ?? isTlsVerificationEnabled();
         // Connection pooling with keep-alive
         // NO timeout on agent - we handle it at request level
         const baseAgentOptions = {
@@ -189,55 +30,19 @@ export class ProxyHTTPClient {
             keepAlive: true,
             maxSockets: 50
         };
-        // Create HTTPS agent (with proxy support if configured)
-        if (httpsProxyUrl) {
-            logger.debug('[proxy-http-client] Using HTTPS proxy:', httpsProxyUrl);
-            this.proxyHttpsAgent = new HttpsProxyAgent(httpsProxyUrl, baseAgentOptions);
-        }
         this.directHttpsAgent = new https.Agent(baseAgentOptions);
-        // Create HTTP agent (with proxy support if configured)
-        if (httpProxyUrl) {
-            logger.debug('[proxy-http-client] Using HTTP proxy:', httpProxyUrl);
-            this.proxyHttpAgent = new HttpProxyAgent(httpProxyUrl, {
-                keepAlive: true,
-                maxSockets: 50
-            });
-        }
         this.directHttpAgent = new http.Agent({
             keepAlive: true,
             maxSockets: 50
         });
-        logger.debug('[proxy-http-client] NO_PROXY rules loaded', {
-            envRules: envNoProxyEntries,
-            npmRules: npmNoProxyEntries,
-            totalRules: this.noProxyRules.length,
-        });
     }
-    getAgentForUrl(url) {
-        const port = Number.parseInt(url.port, 10) || (url.protocol === 'https:' ? 443 : 80);
-        const bypass = shouldBypassProxy(url.hostname, port, this.noProxyRules);
-        if (url.protocol === 'https:') {
-            if (!bypass && this.proxyHttpsAgent) {
-                logger.debug('[proxy-http-client] Routing HTTPS request via proxy', { host: url.hostname, port });
-                return this.proxyHttpsAgent;
-            }
-            logger.debug('[proxy-http-client] Routing HTTPS request directly (no_proxy match or proxy disabled)', {
-                host: url.hostname,
-                port,
-                bypass,
-            });
-            return this.directHttpsAgent;
-        }
-        if (!bypass && this.proxyHttpAgent) {
-            logger.debug('[proxy-http-client] Routing HTTP request via proxy', { host: url.hostname, port });
-            return this.proxyHttpAgent;
-        }
-        logger.debug('[proxy-http-client] Routing HTTP request directly (no_proxy match or proxy disabled)', {
-            host: url.hostname,
-            port,
-            bypass,
+    async getAgentForUrl(url) {
+        const proxyAgent = await getProxyAgentForUrl(url, {
+            rejectUnauthorized: this.rejectUnauthorized,
+            keepAlive: true,
+            maxSockets: 50,
         });
-        return this.directHttpAgent;
+        return proxyAgent ?? (url.protocol === 'https:' ? this.directHttpsAgent : this.directHttpAgent);
     }
     /**
      * Forward request with streaming - no buffering
@@ -245,7 +50,7 @@ export class ProxyHTTPClient {
      */
     async forward(url, options) {
         const protocol = url.protocol === 'https:' ? https : http;
-        const agent = this.getAgentForUrl(url);
+        const agent = await this.getAgentForUrl(url);
         logger.debug('[http-client] Forwarding request to upstream', {
             url: url.toString(),
             method: options.method,
@@ -408,8 +213,6 @@ export class ProxyHTTPClient {
     close() {
         this.directHttpsAgent.destroy();
         this.directHttpAgent.destroy();
-        this.proxyHttpsAgent?.destroy();
-        this.proxyHttpAgent?.destroy();
     }
 }
 //# sourceMappingURL=proxy-http-client.js.map

package/dist/providers/plugins/sso/proxy/proxy-http-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-http-client.js","sourceRoot":"","sources":["../../../../../src/providers/plugins/sso/proxy/proxy-http-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAmBrD;;GAEG;AACH,SAAS,WAAW,CAAC,QAA4B;IAC/C,4EAA4E;IAC5E,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YAClD,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU,EAAE,IAAY,EAAE,QAAgB;IAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,cAAc,GAAG,CAAC,IAAI,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;gBACxD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,SAAS,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YACxD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAgB;IACzC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAEhC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB;IAC5B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEjC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC;gBAAE,SAAS;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBAC5C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,IAAuB,EAAE,IAAY;IACxD,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,IAAY,EAAE,KAAoB;IAC7E,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChE,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,IAAI,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7E,IAAI,aAAa,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1D,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,gBAAgB,CAAc;IAC9B,eAAe,CAAa;IAC5B,eAAe,CAA0B;IACzC,cAAc,CAAyB;IACvC,OAAO,CAAS;IAChB,kBAAkB,CAAU;IAC5B,YAAY,CAAgB;IAEpC,YAAY,UAA6B,EAAE;QACzC,yEAAyE;QACzE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,KAAK,CAAC;QAE9D,2DAA2D;QAC3D,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnF,MAAM,iBAAiB,GAAG,qBAAqB,EAAE,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,iBAAiB,CAAC,CAAC,GAAG,iBAAiB,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC;QAEpF,qCAAqC;QACrC,sDAAsD;QACtD,MAAM,gBAAgB,GAAG;YACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,EAAE;SACf,CAAC;QAEF,wDAAwD;QACxD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,aAAa,CAAC,CAAC;YACtE,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,gBAAgB,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAE1D,uDAAuD;QACvD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,YAAY,CAAC,CAAC;YACpE,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,YAAY,EAAE;gBACrD,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC;YACpC,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;YACxD,QAAQ,EAAE,iBAAiB;YAC3B,QAAQ,EAAE,iBAAiB;YAC3B,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;SACrC,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,GAAQ;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAExE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACpC,MAAM,CAAC,KAAK,CAAC,qDAAqD,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClG,OAAO,IAAI,CAAC,eAAe,CAAC;YAC9B,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,uFAAuF,EAAE;gBACpG,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,IAAI;gBACJ,MAAM;aACP,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACjG,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,sFAAsF,EAAE;YACnG,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,IAAI;YACJ,MAAM;SACP,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CACX,GAAQ,EACR,OAA8B;QAE9B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEvC,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;YAC3D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;YACnB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;SACxB,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,cAAc,GAAwB;gBAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;gBAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK;gBACL,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrF,4DAA4D;gBAC5D,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;aACnC,CAAC;YAEF,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE;gBACnD,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;oBAC5D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;oBACnB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;oBAChC,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC,CAAC;gBAEH,kCAAkC;gBAClC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;wBAC3D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;qBACpB,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACnB,MAAM,CAAC,KAAK,CAAC,mDAAmD,EAAE;wBAChE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;qBACpB,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACxB,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;wBAC3D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACnB,KAAK,EAAE,KAAK,CAAC,OAAO;qBACrB,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAU,EAAE,EAAE;gBAC7B,uEAAuE;gBACvE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;oBAChH,qEAAqE;oBACrE,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;wBAC/D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACnB,SAAS,EAAE,KAAK,CAAC,IAAI;qBACtB,CAAC,CAAC;oBACH,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBACnD,UAAkB,CAAC,SAAS,GAAG,IAAI,CAAC;oBACrC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACnB,OAAO;gBACT,CAAC;gBAED,+BAA+B;gBAC/B,uDAAuD;gBACvD,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,KAAK,cAAc;oBAC9B,KAAK,CAAC,IAAI,KAAK,WAAW;oBAC1B,KAAK,CAAC,IAAI,KAAK,YAAY;oBAC3B,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC;oBACzC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAE5D,IAAI,cAAc,EAAE,CAAC;oBACnB,mDAAmD;oBACnD,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;wBACzD,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACnB,SAAS,EAAE,KAAK,CAAC,IAAI;wBACrB,YAAY,EAAE,KAAK,CAAC,OAAO;wBAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ;qBACvB,CAAC,CAAC;oBACH,MAAM,CAAC,IAAI,YAAY,CAAC,+BAA+B,KAAK,CAAC,OAAO,EAAE,EAAE;wBACtE,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,eAAe;wBACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ;qBACvB,CAAC,CAAC,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,mDAAmD;oBACnD,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;wBAC1C,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACnB,SAAS,EAAE,KAAK,CAAC,IAAI;wBACrB,YAAY,EAAE,KAAK,CAAC,OAAO;wBAC3B,UAAU,EAAE,KAAK,CAAC,KAAK;qBACxB,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,oDAAoD;YACpD,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBACrB,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;wBACvD,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,CAAC,CAAC;oBACH,8CAA8C;oBAC9C,kDAAkD;gBACpD,CAAC,CAAC,CAAC;YACL,CAAC;YAED,0BAA0B;YAC1B,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACpB,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;oBAC7D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;oBACtD,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,yCAAyC;YACzC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACjD,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAChB,QAA8B,EAC9B,UAA+B,EAC/B,cAAwB,CAAC,mBAAmB,EAAE,YAAY,CAAC;QAE3D,mBAAmB;QACnB,UAAU,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC;QAEnD,uCAAuC;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACpE,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yCAAyC;YACzC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,QAA8B;QACnD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;CACF"}
+{"version":3,"file":"proxy-http-client.js","sourceRoot":"","sources":["../../../../../src/providers/plugins/sso/proxy/proxy-http-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAa3C;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,gBAAgB,CAAc;IAC9B,eAAe,CAAa;IAC5B,OAAO,CAAS;IAChB,kBAAkB,CAAU;IAEpC,YAAY,UAA6B,EAAE;QACzC,yEAAyE;QACzE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,wBAAwB,EAAE,CAAC;QAEnF,qCAAqC;QACrC,sDAAsD;QACtD,MAAM,gBAAgB,GAAG;YACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,EAAE;SACf,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAE1D,IAAI,CAAC,eAAe,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC;YACpC,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAQ;QACnC,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE;YAChD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;QACH,OAAO,UAAU,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClG,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CACX,GAAQ,EACR,OAA8B;QAE9B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAE7C,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;YAC3D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;YACnB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;SACxB,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,cAAc,GAAwB;gBAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;gBAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK;gBACL,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrF,4DAA4D;gBAC5D,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;aACnC,CAAC;YAEF,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE;gBACnD,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;oBAC5D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;oBACnB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;oBAChC,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC,CAAC;gBAEH,kCAAkC;gBAClC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;wBAC3D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;qBACpB,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACnB,MAAM,CAAC,KAAK,CAAC,mDAAmD,EAAE;wBAChE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;qBACpB,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACxB,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;wBAC3D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACnB,KAAK,EAAE,KAAK,CAAC,OAAO;qBACrB,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAU,EAAE,EAAE;gBAC7B,uEAAuE;gBACvE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;oBAChH,qEAAqE;oBACrE,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;wBAC/D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACnB,SAAS,EAAE,KAAK,CAAC,IAAI;qBACtB,CAAC,CAAC;oBACH,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBACnD,UAAkB,CAAC,SAAS,GAAG,IAAI,CAAC;oBACrC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACnB,OAAO;gBACT,CAAC;gBAED,+BAA+B;gBAC/B,uDAAuD;gBACvD,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,KAAK,cAAc;oBAC9B,KAAK,CAAC,IAAI,KAAK,WAAW;oBAC1B,KAAK,CAAC,IAAI,KAAK,YAAY;oBAC3B,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC;oBACzC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAE5D,IAAI,cAAc,EAAE,CAAC;oBACnB,mDAAmD;oBACnD,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;wBACzD,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACnB,SAAS,EAAE,KAAK,CAAC,IAAI;wBACrB,YAAY,EAAE,KAAK,CAAC,OAAO;wBAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ;qBACvB,CAAC,CAAC;oBACH,MAAM,CAAC,IAAI,YAAY,CAAC,+BAA+B,KAAK,CAAC,OAAO,EAAE,EAAE;wBACtE,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,eAAe;wBACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ;qBACvB,CAAC,CAAC,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,mDAAmD;oBACnD,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;wBAC1C,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACnB,SAAS,EAAE,KAAK,CAAC,IAAI;wBACrB,YAAY,EAAE,KAAK,CAAC,OAAO;wBAC3B,UAAU,EAAE,KAAK,CAAC,KAAK;qBACxB,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,oDAAoD;YACpD,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBACrB,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;wBACvD,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,CAAC,CAAC;oBACH,8CAA8C;oBAC9C,kDAAkD;gBACpD,CAAC,CAAC,CAAC;YACL,CAAC;YAED,0BAA0B;YAC1B,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACpB,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;oBAC7D,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;oBACtD,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,yCAAyC;YACzC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACjD,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAChB,QAA8B,EAC9B,UAA+B,EAC/B,cAAwB,CAAC,mBAAmB,EAAE,YAAY,CAAC;QAE3D,mBAAmB;QACnB,UAAU,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC;QAEnD,uCAAuC;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACpE,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yCAAyC;YACzC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,QAA8B;QACnD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;IACjC,CAAC;CACF"}

package/dist/providers/plugins/sso/proxy/sso.proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sso.proxy.d.ts","sourceRoot":"","sources":["../../../../../src/providers/plugins/sso/proxy/sso.proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAWH,OAAO,EAAE,WAAW,EAAgB,MAAM,kBAAkB,CAAC;AAI7D,OAAO,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,qBAAa,YAAY;IAOX,OAAO,CAAC,MAAM;IAN1B,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,SAAS,CAAc;gBAEX,MAAM,EAAE,WAAW;IAQvC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAuIrD;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyB3B;;;;;;;;;;;;OAYG;YACW,aAAa;IAwI3B;;OAEG;YACW,YAAY;IA2B1B;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;;OAGG;YACW,QAAQ;IAiBtB;;OAEG;YACW,cAAc;IAkG5B;;;OAGG;YACW,OAAO;YAqBP,wBAAwB;IAiCtC,OAAO,CAAC,sBAAsB;IAa9B;;OAEG;YACW,WAAW;IAsDzB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA6BzB;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAoB/B;;OAEG;YACW,iBAAiB;IAuB/B;;OAEG;YACW,gBAAgB;CAU/B"}
+{"version":3,"file":"sso.proxy.d.ts","sourceRoot":"","sources":["../../../../../src/providers/plugins/sso/proxy/sso.proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAYH,OAAO,EAAE,WAAW,EAAgB,MAAM,kBAAkB,CAAC;AAI7D,OAAO,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,qBAAa,YAAY;IAOX,OAAO,CAAC,MAAM;IAN1B,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,SAAS,CAAc;gBAEX,MAAM,EAAE,WAAW;IAQvC;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAuIrD;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyB3B;;;;;;;;;;;;OAYG;YACW,aAAa;IAwI3B;;OAEG;YACW,YAAY;IA2B1B;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;;OAGG;YACW,QAAQ;IAiBtB;;OAEG;YACW,cAAc;IAkG5B;;;OAGG;YACW,OAAO;YAqBP,wBAAwB;IAiCtC,OAAO,CAAC,sBAAsB;IAa9B;;OAEG;YACW,WAAW;IAsDzB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA6BzB;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAoB/B;;OAEG;YACW,iBAAiB;IAuB/B;;OAEG;YACW,gBAAgB;CAU/B"}

package/dist/providers/plugins/sso/proxy/sso.proxy.js

@@ -28,6 +28,7 @@ import { Readable } from 'stream';
 import { ProviderRegistry } from '../../../core/registry.js';
 import { AuthMethod } from '../../../core/types.js';
 import { logger } from '../../../../utils/logger.js';
+import { isTlsVerificationEnabled } from '../../../../utils/system-proxy.js';
 import { ProxyHTTPClient } from './proxy-http-client.js';
 import { AuthenticationError, NetworkError, TimeoutError, normalizeError } from './proxy-errors.js';
 import { getPluginRegistry } from './plugins/registry.js';
@@ -48,7 +49,7 @@ export class CodeMieProxy {
         // Initialize HTTP client with streaming support
         this.httpClient = new ProxyHTTPClient({
             timeout: config.timeout || 300000,
-            rejectUnauthorized: false // Allow self-signed certificates
+            rejectUnauthorized: isTlsVerificationEnabled()
         });
     }
     /**