@newrelic/preflight 0.0.1-pre.1 → 1.0.0

package/dist/platforms/zed-adapter.js

@@ -0,0 +1,72 @@
+const ZED_TOOL_MAP = {
+    open_file: 'Read',
+    read_file: 'Read',
+    create_file: 'Write',
+    write_file: 'Write',
+    edit_file: 'Edit',
+    delete_file: 'Delete',
+    search_files: 'Glob',
+    find_in_files: 'Grep',
+    search_in_file: 'Grep',
+    execute_command: 'Bash',
+    run_command: 'Bash',
+    list_files: 'Glob',
+    list_directory: 'Glob',
+};
+export class ZedAdapter {
+    platformName = 'zed';
+    async initialize(_config) {
+        // Zed spawns MCP servers as child processes. Tool calls arrive via stdio.
+    }
+    normalizeToolCall(raw) {
+        const event = raw;
+        const platformToolName = event.tool ?? 'unknown';
+        const toolName = ZED_TOOL_MAP[platformToolName] ?? 'Unknown';
+        return {
+            toolName,
+            platformToolName,
+            platform: this.platformName,
+            timestamp: event.timestamp ?? Date.now(),
+            durationMs: event.durationMs ?? null,
+            success: event.success ?? true,
+            ...(event.error !== undefined && { error: event.error }),
+            ...(event.inputSizeBytes !== undefined && { inputSizeBytes: event.inputSizeBytes }),
+            ...(event.outputSizeBytes !== undefined && { outputSizeBytes: event.outputSizeBytes }),
+            ...(event.filePath !== undefined && { filePath: event.filePath }),
+            ...(event.command !== undefined && { command: event.command }),
+            ...(event.sessionId !== undefined && { sessionId: event.sessionId }),
+        };
+    }
+    getSessionMetadata() {
+        return {
+            platform: this.platformName,
+            ...(process.env.ZED_EXTENSION_API_VERSION && {
+                ideVersion: process.env.ZED_EXTENSION_API_VERSION,
+            }),
+        };
+    }
+    getHookInstallInstructions() {
+        return [
+            'Zed Editor Setup:',
+            '1. Open Zed Settings (Cmd+,) and go to the "assistant" section',
+            '2. Add an MCP server entry:',
+            '   {',
+            '     "name": "preflight",',
+            '     "command": "npx",',
+            '     "args": ["preflight", "--stdio"],',
+            '     "env": {',
+            '       "NEW_RELIC_LICENSE_KEY": "<your-key>",',
+            '       "NEW_RELIC_ACCOUNT_ID": "<your-account-id>"',
+            '     }',
+            '   }',
+            '3. Restart Zed to activate.',
+        ].join('\n');
+    }
+    isSupported() {
+        return (process.env.ZED_SESSION_ID !== undefined ||
+            process.env.ZED_EXTENSION_API_VERSION !== undefined ||
+            process.env.MCP_CLIENT === 'zed' ||
+            process.env.ZED_ITEM_ID !== undefined);
+    }
+}
+//# sourceMappingURL=zed-adapter.js.map

package/dist/platforms/zed-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zed-adapter.js","sourceRoot":"","sources":["../../src/platforms/zed-adapter.ts"],"names":[],"mappings":"AAOA,MAAM,YAAY,GAA2B;IAC3C,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,MAAM;IACjB,WAAW,EAAE,OAAO;IACpB,UAAU,EAAE,OAAO;IACnB,SAAS,EAAE,MAAM;IACjB,WAAW,EAAE,QAAQ;IACrB,YAAY,EAAE,MAAM;IACpB,aAAa,EAAE,MAAM;IACrB,cAAc,EAAE,MAAM;IACtB,eAAe,EAAE,MAAM;IACvB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,MAAM;IAClB,cAAc,EAAE,MAAM;CACvB,CAAC;AAgBF,MAAM,OAAO,UAAU;IACZ,YAAY,GAAG,KAAK,CAAC;IAE9B,KAAK,CAAC,UAAU,CAAC,OAAuB;QACtC,0EAA0E;IAC5E,CAAC;IAED,iBAAiB,CAAC,GAAY;QAC5B,MAAM,KAAK,GAAG,GAAuB,CAAC;QACtC,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC;QACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,gBAAgB,CAAC,IAAI,SAAS,CAAC;QAE7D,OAAO;YACL,QAAQ;YACR,gBAAgB;YAChB,QAAQ,EAAE,IAAI,CAAC,YAAY;YAC3B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YACxC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YACxD,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;YACnF,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;YACtF,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,YAAY;YAC3B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI;gBAC3C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;aAClD,CAAC;SACH,CAAC;IACJ,CAAC;IAED,0BAA0B;QACxB,OAAO;YACL,mBAAmB;YACnB,gEAAgE;YAChE,6BAA6B;YAC7B,MAAM;YACN,2BAA2B;YAC3B,wBAAwB;YACxB,wCAAwC;YACxC,eAAe;YACf,+CAA+C;YAC/C,oDAAoD;YACpD,QAAQ;YACR,MAAM;YACN,6BAA6B;SAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,WAAW;QACT,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS;YACxC,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,SAAS;YACnD,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,KAAK;YAChC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CACtC,CAAC;IACJ,CAAC;CACF"}

package/dist/proxy/index.d.ts

@@ -0,0 +1,7 @@
+export type { ProxyToolCallRecord, ProxyRequestRecord, UpstreamConfig, ForwardResult, ProxyUpstream, } from './types.js';
+export { TRACKED_METHODS, shouldForwardHeader } from './types.js';
+export { HttpUpstream, ByteCountTransform } from './upstream-http.js';
+export { StdioUpstream } from './upstream-stdio.js';
+export { ProxyManager } from './proxy-manager.js';
+export type { ProxyManagerOptions } from './proxy-manager.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/proxy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/proxy/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/proxy/index.js

@@ -0,0 +1,5 @@
+export { TRACKED_METHODS, shouldForwardHeader } from './types.js';
+export { HttpUpstream, ByteCountTransform } from './upstream-http.js';
+export { StdioUpstream } from './upstream-stdio.js';
+export { ProxyManager } from './proxy-manager.js';
+//# sourceMappingURL=index.js.map

package/dist/proxy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/proxy/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/proxy/otlp-receiver.d.ts

@@ -0,0 +1,28 @@
+export interface OtlpReceiverOptions {
+    readonly port: number;
+    readonly bindAddress?: string;
+    readonly forwardEndpoint: string | null;
+    readonly forwardHeaders: Record<string, string>;
+    readonly enrichmentAttributes: Record<string, string>;
+    readonly maxBodyBytes?: number;
+    readonly bodyTimeoutMs?: number;
+    readonly rateLimitPerMinute?: number;
+    readonly apiKey?: string;
+}
+export declare class OtlpReceiver {
+    private readonly options;
+    private server;
+    private readonly rateLimiter;
+    constructor(options: OtlpReceiverOptions);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    private handleRequest;
+    private readBody;
+    private checkAuthentication;
+    private checkRateLimit;
+    private checkContentType;
+    enrichPayload(body: Buffer): Buffer;
+    private injectResourceAttributes;
+    private forward;
+}
+//# sourceMappingURL=otlp-receiver.d.ts.map

package/dist/proxy/otlp-receiver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otlp-receiver.d.ts","sourceRoot":"","sources":["../../src/proxy/otlp-receiver.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,MAAM,CAAgD;IAC9D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;gBAE/C,OAAO,EAAE,mBAAmB;IAOxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAUP,aAAa;IA+F3B,OAAO,CAAC,QAAQ;IA2EhB,OAAO,CAAC,mBAAmB;IAmB3B,OAAO,CAAC,cAAc;IA4BtB,OAAO,CAAC,gBAAgB;IAUxB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAcnC,OAAO,CAAC,wBAAwB;YAsBlB,OAAO;CAwBtB"}

package/dist/proxy/otlp-receiver.js

@@ -0,0 +1,319 @@
+import { createServer } from 'node:http';
+import { createGunzip, createInflate, createBrotliDecompress } from 'node:zlib';
+import { timingSafeEqual } from 'node:crypto';
+import { createLogger } from '../shared/index.js';
+import { validateSsrfUrl } from '../security/ssrf.js';
+const logger = createLogger('otlp-receiver');
+const DEFAULT_MAX_BODY_BYTES = 10 * 1024 * 1024; // 10 MiB
+const DEFAULT_BODY_TIMEOUT_MS = 30_000; // 30 s
+const DEFAULT_RATE_LIMIT_PER_MINUTE = 100;
+const RATE_LIMIT_WINDOW_MS = 60_000; // 60 seconds
+const ALLOWED_CONTENT_TYPES = new Set([
+    'application/json',
+    'application/x-protobuf',
+    'application/octet-stream',
+]);
+class BodyTooLargeError extends Error {
+}
+class RequestTimeoutError extends Error {
+}
+class RateLimitExceededError extends Error {
+}
+class AuthenticationError extends Error {
+}
+class UnsupportedContentTypeError extends Error {
+}
+export class OtlpReceiver {
+    options;
+    server = null;
+    rateLimiter = new Map();
+    constructor(options) {
+        if (options.forwardEndpoint !== null) {
+            validateSsrfUrl('OtlpReceiver forwardEndpoint', new URL(options.forwardEndpoint));
+        }
+        this.options = Object.freeze(options);
+    }
+    start() {
+        return new Promise((resolve, reject) => {
+            this.server = createServer((req, res) => void this.handleRequest(req, res));
+            // Use once() so the startup rejection handler is removed after start() resolves.
+            // A permanent on('error') handler is registered below after listen() succeeds.
+            this.server.once('error', reject);
+            this.server.on('checkContinue', (req, res) => {
+                res.writeContinue();
+                void this.handleRequest(req, res);
+            });
+            const host = this.options.bindAddress ?? '127.0.0.1';
+            this.server.listen(this.options.port, host, () => {
+                logger.info('OTLP receiver listening', { port: this.options.port, host });
+                // Permanent error handler for post-startup errors (e.g. EADDRINUSE on rebind).
+                this.server.on('error', (err) => logger.error('OTLP receiver error', { error: String(err) }));
+                resolve();
+            });
+        });
+    }
+    stop() {
+        return new Promise((resolve) => {
+            if (!this.server) {
+                resolve();
+                return;
+            }
+            this.server.close(() => resolve());
+        });
+    }
+    async handleRequest(req, res) {
+        const timeoutMs = this.options.bodyTimeoutMs ?? DEFAULT_BODY_TIMEOUT_MS;
+        req.setTimeout(timeoutMs, () => {
+            res.writeHead(408);
+            res.end();
+            req.destroy(new RequestTimeoutError('Request timed out'));
+        });
+        const path = req.url ?? '';
+        if (req.method !== 'POST' || !path.startsWith('/v1/')) {
+            res.writeHead(404);
+            res.end();
+            return;
+        }
+        try {
+            this.checkAuthentication(req);
+        }
+        catch (err) {
+            if (err instanceof AuthenticationError) {
+                res.writeHead(401);
+                res.end();
+                return;
+            }
+            throw err;
+        }
+        try {
+            this.checkRateLimit(req);
+        }
+        catch (err) {
+            if (err instanceof RateLimitExceededError) {
+                res.writeHead(429);
+                res.end();
+                return;
+            }
+            throw err;
+        }
+        try {
+            this.checkContentType(req);
+        }
+        catch (err) {
+            if (err instanceof UnsupportedContentTypeError) {
+                res.writeHead(415);
+                res.end();
+                return;
+            }
+            throw err;
+        }
+        try {
+            const body = await this.readBody(req);
+            const enriched = this.enrichPayload(body);
+            const contentType = req.headers['content-type'] ?? 'application/json';
+            if (this.options.forwardEndpoint) {
+                const result = await this.forward(enriched, path, contentType);
+                res.writeHead(result.statusCode ?? 200, { 'Content-Type': 'application/json' });
+                res.end(result.body);
+            }
+            else {
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end('{}');
+            }
+        }
+        catch (err) {
+            // Timeout callback may have already sent 408 and destroyed the socket.
+            // Guard every response write so we never call writeHead twice.
+            if (res.headersSent)
+                return;
+            if (err instanceof BodyTooLargeError) {
+                res.writeHead(413);
+                res.end();
+                return;
+            }
+            if (err instanceof RequestTimeoutError) {
+                // 408 already written by the setTimeout callback; just return.
+                return;
+            }
+            if (err instanceof Error && err.message.startsWith('Unsupported Content-Encoding:')) {
+                res.writeHead(415);
+                res.end();
+                return;
+            }
+            if (err instanceof Error &&
+                (err.message.includes('Incomplete body') || err.message === 'Request aborted')) {
+                res.writeHead(400);
+                res.end();
+                return;
+            }
+            logger.error('OTLP receiver error', {
+                error: err instanceof Error ? err.message : String(err),
+            });
+            res.writeHead(500);
+            res.end();
+        }
+    }
+    readBody(req) {
+        const maxBytes = this.options.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;
+        const contentLengthHeader = req.headers['content-length'];
+        const parsedContentLength = contentLengthHeader ? parseInt(contentLengthHeader, 10) : NaN;
+        const expectedBytes = Number.isFinite(parsedContentLength) ? parsedContentLength : null;
+        return new Promise((resolve, reject) => {
+            const contentEncoding = req.headers['content-encoding']?.toLowerCase() ?? '';
+            // Attach aborted listener early
+            req.on('aborted', () => {
+                reject(new Error('Request aborted'));
+            });
+            let stream = req;
+            let compressedBytes = 0;
+            let isCompressed = false;
+            if (contentEncoding === 'gzip') {
+                isCompressed = true;
+                // Track compressed bytes before piping
+                req.on('data', (chunk) => {
+                    compressedBytes += chunk.length;
+                });
+                stream = req.pipe(createGunzip());
+            }
+            else if (contentEncoding === 'deflate') {
+                isCompressed = true;
+                // Track compressed bytes before piping
+                req.on('data', (chunk) => {
+                    compressedBytes += chunk.length;
+                });
+                stream = req.pipe(createInflate());
+            }
+            else if (contentEncoding === 'br') {
+                isCompressed = true;
+                // Track compressed bytes before piping
+                req.on('data', (chunk) => {
+                    compressedBytes += chunk.length;
+                });
+                stream = req.pipe(createBrotliDecompress());
+            }
+            else if (contentEncoding && contentEncoding !== 'identity') {
+                reject(new Error(`Unsupported Content-Encoding: ${contentEncoding}`));
+                return;
+            }
+            const chunks = [];
+            let decompressedBytes = 0;
+            stream.on('data', (chunk) => {
+                decompressedBytes += chunk.length;
+                if (decompressedBytes > maxBytes) {
+                    // Reject without destroying the socket so the caller can still write the 413 response.
+                    reject(new BodyTooLargeError(`Request body exceeds ${maxBytes} bytes`));
+                    return;
+                }
+                chunks.push(chunk);
+            });
+            stream.on('end', () => {
+                // Verify we received the expected number of bytes based on Content-Length
+                if (expectedBytes !== null) {
+                    const receivedBytes = isCompressed ? compressedBytes : decompressedBytes;
+                    if (receivedBytes < expectedBytes) {
+                        reject(new Error(`Incomplete body: expected ${expectedBytes} bytes, received ${receivedBytes} bytes`));
+                        return;
+                    }
+                }
+                resolve(Buffer.concat(chunks));
+            });
+            stream.on('error', reject);
+        });
+    }
+    checkAuthentication(req) {
+        if (!this.options.apiKey) {
+            // No API key configured — authentication is optional
+            return;
+        }
+        const authHeader = req.headers.authorization;
+        const expectedAuth = `Bearer ${this.options.apiKey}`;
+        // Use timing-safe comparison to prevent timing-oracle attacks on the API key
+        const match = authHeader !== undefined &&
+            authHeader.length === expectedAuth.length &&
+            timingSafeEqual(Buffer.from(authHeader), Buffer.from(expectedAuth));
+        if (!match) {
+            throw new AuthenticationError('Invalid or missing authentication');
+        }
+    }
+    checkRateLimit(req) {
+        const rateLimitPerMinute = this.options.rateLimitPerMinute ?? DEFAULT_RATE_LIMIT_PER_MINUTE;
+        const remoteAddr = req.socket.remoteAddress ?? 'unknown';
+        const now = Date.now();
+        // Get or create request history for this IP
+        let timestamps = this.rateLimiter.get(remoteAddr);
+        if (!timestamps) {
+            timestamps = [];
+            this.rateLimiter.set(remoteAddr, timestamps);
+        }
+        // Prune timestamps older than the rate limit window.
+        while (timestamps.length > 0 && timestamps[0] < now - RATE_LIMIT_WINDOW_MS) {
+            timestamps.shift();
+        }
+        // Check if rate limit exceeded
+        if (timestamps.length >= rateLimitPerMinute) {
+            throw new RateLimitExceededError(`Rate limit exceeded: ${rateLimitPerMinute} requests per minute`);
+        }
+        // Record this request
+        timestamps.push(now);
+    }
+    checkContentType(req) {
+        const contentType = req.headers['content-type']?.split(';')[0]?.trim() ??
+            'application/json';
+        if (!ALLOWED_CONTENT_TYPES.has(contentType)) {
+            throw new UnsupportedContentTypeError(`Unsupported Content-Type: ${contentType}`);
+        }
+    }
+    enrichPayload(body) {
+        // For JSON-encoded OTLP (content-type: application/json), parse and inject attributes.
+        // For protobuf-encoded OTLP (content-type: application/x-protobuf), pass through unchanged
+        // (protobuf decoding requires additional dependencies — handle JSON only in v1).
+        try {
+            const parsed = JSON.parse(body.toString('utf-8'));
+            this.injectResourceAttributes(parsed, this.options.enrichmentAttributes);
+            return Buffer.from(JSON.stringify(parsed));
+        }
+        catch {
+            // Not JSON (likely protobuf) — forward as-is
+            return body;
+        }
+    }
+    injectResourceAttributes(payload, attrs) {
+        // OTLP JSON structure: { resourceSpans: [{ resource: { attributes: [...] }, ... }] }
+        // Also handle resourceMetrics and resourceLogs for /v1/metrics and /v1/logs
+        for (const key of ['resourceSpans', 'resourceMetrics', 'resourceLogs']) {
+            const resources = payload[key];
+            if (!Array.isArray(resources))
+                continue;
+            for (const resource of resources) {
+                if (!resource.resource)
+                    resource.resource = {};
+                if (!Array.isArray(resource.resource.attributes))
+                    resource.resource.attributes = [];
+                for (const [k, v] of Object.entries(attrs)) {
+                    resource.resource.attributes.push({ key: k, value: { stringValue: v } });
+                }
+            }
+        }
+    }
+    async forward(body, path, contentType) {
+        if (this.options.forwardEndpoint === null) {
+            throw new Error('forward() called with no forwardEndpoint configured');
+        }
+        validateSsrfUrl('OtlpReceiver forward endpoint', new URL(this.options.forwardEndpoint));
+        const url = `${this.options.forwardEndpoint}${path}`;
+        // SECURITY: client request headers are deliberately NOT propagated to upstream — only forwardHeaders + Content-Type.
+        // This prevents header injection attacks where a malicious client could inject headers into the upstream NR API call.
+        // Do not change without security review.
+        const response = await globalThis.fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': contentType,
+                ...this.options.forwardHeaders,
+            },
+            body: body,
+        });
+        const responseBody = await response.text();
+        return { statusCode: response.status, body: responseBody };
+    }
+}
+//# sourceMappingURL=otlp-receiver.js.map

package/dist/proxy/otlp-receiver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otlp-receiver.js","sourceRoot":"","sources":["../../src/proxy/otlp-receiver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAE7C,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AAC1D,MAAM,uBAAuB,GAAG,MAAM,CAAC,CAAC,OAAO;AAC/C,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,oBAAoB,GAAG,MAAM,CAAC,CAAC,aAAa;AAClD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,kBAAkB;IAClB,wBAAwB;IACxB,0BAA0B;CAC3B,CAAC,CAAC;AAEH,MAAM,iBAAkB,SAAQ,KAAK;CAAG;AACxC,MAAM,mBAAoB,SAAQ,KAAK;CAAG;AAC1C,MAAM,sBAAuB,SAAQ,KAAK;CAAG;AAC7C,MAAM,mBAAoB,SAAQ,KAAK;CAAG;AAC1C,MAAM,2BAA4B,SAAQ,KAAK;CAAG;AAclD,MAAM,OAAO,YAAY;IACN,OAAO,CAAsB;IACtC,MAAM,GAA2C,IAAI,CAAC;IAC7C,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE3D,YAAY,OAA4B;QACtC,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YACrC,eAAe,CAAC,8BAA8B,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK;QACH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5E,iFAAiF;YACjF,+EAA+E;YAC/E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC3C,GAAG,CAAC,aAAa,EAAE,CAAC;gBACpB,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBAC/C,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1E,+EAA+E;gBAC/E,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAC/B,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAC5D,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI;QACF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAoB,EAAE,GAAmB;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;QACxE,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,GAAG,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;gBACvC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;gBAC1C,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,2BAA2B,EAAE,CAAC;gBAC/C,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,kBAAkB,CAAC;YAEtE,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;gBAC/D,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAChF,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,+DAA+D;YAC/D,IAAI,GAAG,CAAC,WAAW;gBAAE,OAAO;YAC5B,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,GAAG,YAAY,mBAAmB,EAAE,CAAC;gBACvC,+DAA+D;gBAC/D,OAAO;YACT,CAAC;YACD,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,+BAA+B,CAAC,EAAE,CAAC;gBACpF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IACE,GAAG,YAAY,KAAK;gBACpB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,iBAAiB,CAAC,EAC9E,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;gBAClC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,GAAoB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;QACrE,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QAChF,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1F,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;QAExF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,eAAe,GAClB,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAwB,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAE/E,gCAAgC;YAChC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YAEH,IAAI,MAAM,GAA0B,GAAG,CAAC;YACxC,IAAI,eAAe,GAAG,CAAC,CAAC;YACxB,IAAI,YAAY,GAAG,KAAK,CAAC;YAEzB,IAAI,eAAe,KAAK,MAAM,EAAE,CAAC;gBAC/B,YAAY,GAAG,IAAI,CAAC;gBACpB,uCAAuC;gBACvC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,eAAe,IAAI,KAAK,CAAC,MAAM,CAAC;gBAClC,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBACzC,YAAY,GAAG,IAAI,CAAC;gBACpB,uCAAuC;gBACvC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,eAAe,IAAI,KAAK,CAAC,MAAM,CAAC;gBAClC,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;YACrC,CAAC;iBAAM,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;gBACpC,YAAY,GAAG,IAAI,CAAC;gBACpB,uCAAuC;gBACvC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,eAAe,IAAI,KAAK,CAAC,MAAM,CAAC;gBAClC,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,eAAe,IAAI,eAAe,KAAK,UAAU,EAAE,CAAC;gBAC7D,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,eAAe,EAAE,CAAC,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,iBAAiB,GAAG,CAAC,CAAC;YAC1B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAClC,iBAAiB,IAAI,KAAK,CAAC,MAAM,CAAC;gBAClC,IAAI,iBAAiB,GAAG,QAAQ,EAAE,CAAC;oBACjC,uFAAuF;oBACvF,MAAM,CAAC,IAAI,iBAAiB,CAAC,wBAAwB,QAAQ,QAAQ,CAAC,CAAC,CAAC;oBACxE,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACpB,0EAA0E;gBAC1E,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;oBAC3B,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC;oBACzE,IAAI,aAAa,GAAG,aAAa,EAAE,CAAC;wBAClC,MAAM,CACJ,IAAI,KAAK,CACP,6BAA6B,aAAa,oBAAoB,aAAa,QAAQ,CACpF,CACF,CAAC;wBACF,OAAO;oBACT,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,mBAAmB,CAAC,GAAoB;QAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACzB,qDAAqD;YACrD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAmC,CAAC;QACnE,MAAM,YAAY,GAAG,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAErD,6EAA6E;QAC7E,MAAM,KAAK,GACT,UAAU,KAAK,SAAS;YACxB,UAAU,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;YACzC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,mBAAmB,CAAC,mCAAmC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,GAAoB;QACzC,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;QAC5F,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,4CAA4C;QAC5C,IAAI,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC/C,CAAC;QAED,qDAAqD;QACrD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,CAAE,GAAG,GAAG,GAAG,oBAAoB,EAAE,CAAC;YAC5E,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,+BAA+B;QAC/B,IAAI,UAAU,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;YAC5C,MAAM,IAAI,sBAAsB,CAC9B,wBAAwB,kBAAkB,sBAAsB,CACjE,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAEO,gBAAgB,CAAC,GAAoB;QAC3C,MAAM,WAAW,GACd,GAAG,CAAC,OAAO,CAAC,cAAc,CAAwB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;YAC1E,kBAAkB,CAAC;QAErB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,2BAA2B,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,uFAAuF;QACvF,2FAA2F;QAC3F,iFAAiF;QACjF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA4B,CAAC;YAC7E,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACzE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,wBAAwB,CAC9B,OAAgC,EAChC,KAA6B;QAE7B,qFAAqF;QACrF,4EAA4E;QAC5E,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,iBAAiB,EAAE,cAAc,CAAC,EAAE,CAAC;YACvE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAEhB,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBAAE,SAAS;YAExC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,QAAQ,CAAC,QAAQ;oBAAE,QAAQ,CAAC,QAAQ,GAAG,EAAE,CAAC;gBAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,GAAG,EAAE,CAAC;gBACpF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3C,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,IAAY,EACZ,WAAmB;QAEnB,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,eAAe,CAAC,+BAA+B,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,GAAG,IAAI,EAAE,CAAC;QACrD,qHAAqH;QACrH,sHAAsH;QACtH,yCAAyC;QACzC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,WAAW;gBAC3B,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc;aAC/B;YACD,IAAI,EAAE,IAA2B;SAClC,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3C,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC7D,CAAC;CACF"}

package/dist/proxy/proxy-manager.d.ts

@@ -0,0 +1,47 @@
+/**
+ * ProxyManager — HTTP server that routes requests to upstream MCP servers
+ * with transparent forwarding and observability recording.
+ */
+import type { ProxyRequestRecord, ProxyToolCallRecord, ProxyUpstream, UpstreamConfig } from './types.js';
+export interface ProxyManagerOptions {
+    readonly port: number;
+    readonly onToolCall?: (record: ProxyToolCallRecord) => void;
+    readonly onRequest?: (record: ProxyRequestRecord) => void;
+    /** Timeout for reading the full request body (ms). Default: 30000. */
+    readonly bodyTimeoutMs?: number;
+    /** Maximum allowed request body size in bytes. Default: 10 MB. */
+    readonly maxBodyBytes?: number;
+    readonly otlpReceiverEnabled?: boolean;
+    readonly otlpReceiverPort?: number;
+    readonly otlpReceiverBindAddress?: string;
+    readonly otlpForwardEndpoint?: string | null;
+    readonly otlpForwardHeaders?: Record<string, string>;
+    readonly otlpEnrichmentAttributes?: Record<string, string>;
+}
+export declare class ProxyManager {
+    private readonly upstreams;
+    private httpServer;
+    private otlpReceiver;
+    private readonly options;
+    private readonly port;
+    private readonly onToolCall;
+    private readonly onRequest;
+    private readonly bodyTimeoutMs;
+    private readonly maxBodyBytes;
+    constructor(options: ProxyManagerOptions);
+    /** Register an upstream MCP server for proxying. */
+    registerUpstream(config: UpstreamConfig): void;
+    /** Get the list of registered upstream names. */
+    getUpstreamNames(): string[];
+    /** Get a registered upstream by name (for testing). */
+    getUpstream(name: string): ProxyUpstream | undefined;
+    /** Connect all upstreams and start the HTTP proxy server. */
+    start(): Promise<void>;
+    /** Stop the HTTP server and disconnect all upstreams. */
+    stop(): Promise<void>;
+    private handleRequest;
+    private forwardWithInterception;
+    private emitToolCallRecord;
+    private emitRequestRecord;
+}
+//# sourceMappingURL=proxy-manager.d.ts.map

package/dist/proxy/proxy-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-manager.d.ts","sourceRoot":"","sources":["../../src/proxy/proxy-manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAEV,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,cAAc,EACf,MAAM,YAAY,CAAC;AAYpB,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC1D,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5D;AAqCD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsD;IACjF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqD;IAC/E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,OAAO,EAAE,mBAAmB;IASxC,oDAAoD;IACpD,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAM9C,iDAAiD;IACjD,gBAAgB,IAAI,MAAM,EAAE;IAI5B,uDAAuD;IACvD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIpD,6DAA6D;IACvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA8E5B,yDAAyD;IACnD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YA6Bb,aAAa;YA+Db,uBAAuB;IAyBrC,OAAO,CAAC,kBAAkB;IA8C1B,OAAO,CAAC,iBAAiB;CAuB1B"}