@uvl000/claude-trace 3.0.13-workflowexp.1

package/dist/intercept/forward-proxy.js

@@ -0,0 +1,368 @@
+"use strict";
+/**
+ * @file forward-proxy.ts
+ * @description Independent HTTP/HTTPS forward proxy for vibe-coding-proxy.
+ *
+ * Unlike the existing reverse proxy, this server is configured through
+ * HTTP_PROXY/HTTPS_PROXY and does not spawn or manage any coding CLI process.
+ * HTTPS traffic is tunneled by default; only allowlisted hosts are decrypted
+ * with the local MITM CA so model API JSON can be logged.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ForwardProxyServer = void 0;
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const net = __importStar(require("net"));
+const tls = __importStar(require("tls"));
+const cli_common_1 = require("../cli/cli-common");
+const mitm_cert_1 = require("./mitm-cert");
+const proxy_log_writer_1 = require("./proxy-log-writer");
+const proxy_targets_1 = require("./proxy-targets");
+/** Hop-by-hop headers that must not be forwarded upstream. */
+const HOP_BY_HOP_HEADERS = new Set([
+    "connection",
+    "keep-alive",
+    "proxy-authenticate",
+    "proxy-authorization",
+    "proxy-connection",
+    "te",
+    "trailer",
+    "transfer-encoding",
+    "upgrade",
+]);
+/**
+ * HTTP forward proxy with optional allowlist-scoped HTTPS MITM logging.
+ */
+class ForwardProxyServer {
+    /** @param config - Bind, logging, target matching, and MITM options. */
+    constructor(config = {}) {
+        this.mitmSocketHosts = new WeakMap();
+        this.started = false;
+        this.stopped = false;
+        this.config = {
+            host: config.host || "127.0.0.1",
+            port: config.port ?? 0,
+            logDirectory: config.logDirectory || ".vibe-coding-proxy",
+            logBaseName: config.logBaseName || "",
+            includeAllRequests: config.includeAllRequests || false,
+            openBrowser: config.openBrowser || false,
+            logSensitiveHeaders: config.logSensitiveHeaders || false,
+            disableMitm: config.disableMitm || false,
+            caDir: config.caDir || (0, mitm_cert_1.defaultCaDir)(),
+        };
+        this.targets = new proxy_targets_1.ProxyTargetMatcher({
+            targetUrls: config.targetUrls,
+            mitmHosts: config.mitmHosts,
+        });
+        this.logger = new proxy_log_writer_1.ProxyLogWriter({
+            logDirectory: this.config.logDirectory,
+            logBaseName: this.config.logBaseName,
+            includeAllRequests: this.config.includeAllRequests,
+            openBrowser: this.config.openBrowser,
+            logSensitiveHeaders: this.config.logSensitiveHeaders,
+            tool: "vibe-coding-proxy",
+        });
+        this.ca = new mitm_cert_1.MitmCertificateAuthority(this.config.caDir);
+        this.server = http.createServer((req, res) => {
+            this.handlePlainHttpRequest(req, res);
+        });
+        this.server.on("connect", (req, socket, head) => {
+            this.handleConnect(req, socket, head);
+        });
+        this.server.on("clientError", (_error, socket) => {
+            socket.destroy();
+        });
+        this.mitmHttpServer = http.createServer((req, res) => {
+            this.handleMitmHttpRequest(req, res);
+        });
+        this.mitmHttpServer.on("clientError", (_error, socket) => {
+            socket.destroy();
+        });
+    }
+    /**
+     * Start the forward proxy and return the URL clients should use.
+     * @returns Listen information, log paths, and CA certificate path when MITM is enabled.
+     */
+    async start() {
+        if (this.started) {
+            throw new Error("Forward proxy is already started");
+        }
+        if (!this.config.disableMitm && this.targets.isEmpty()) {
+            throw new Error("At least one --target-url or --mitm-host is required when MITM is enabled");
+        }
+        const caInfo = this.config.disableMitm ? undefined : this.ca.ensureAuthority();
+        return new Promise((resolve, reject) => {
+            this.server.once("error", reject);
+            this.server.listen(this.config.port, this.config.host, () => {
+                this.started = true;
+                this.server.off("error", reject);
+                const address = this.server.address();
+                if (!address || typeof address === "string") {
+                    reject(new Error("Failed to resolve proxy listen address"));
+                    return;
+                }
+                const url = `http://${this.config.host}:${address.port}`;
+                resolve({
+                    host: this.config.host,
+                    port: address.port,
+                    url,
+                    logs: this.logger.getPaths(),
+                    caCertPath: caInfo?.certPath,
+                });
+            });
+        });
+    }
+    /** Stop the proxy and finalize logging output. */
+    stop() {
+        if (this.stopped) {
+            return;
+        }
+        this.stopped = true;
+        this.server.close();
+        try {
+            this.mitmHttpServer.close();
+        }
+        catch {
+            // The MITM parser server is fed accepted sockets manually and may never listen.
+        }
+        this.logger.stop();
+    }
+    /** Handle non-CONNECT requests sent through HTTP_PROXY. */
+    handlePlainHttpRequest(req, res) {
+        let target;
+        try {
+            target = resolvePlainHttpTarget(req);
+        }
+        catch (error) {
+            res.writeHead(400);
+            res.end(`Bad proxy request: ${error.message}`);
+            return;
+        }
+        void this.forwardHttpExchange(req, res, target, this.targets.shouldLogUrl(target.fullUrl));
+    }
+    /** Handle HTTPS CONNECT by tunneling or starting allowlist-scoped MITM. */
+    handleConnect(req, clientSocket, head) {
+        const authority = req.url || "";
+        const { hostname, port } = (0, proxy_targets_1.splitHostPort)(authority);
+        clientSocket.on("error", (error) => {
+            (0, cli_common_1.traceRuntimeError)(`vibe-coding-proxy: client socket error for ${authority}: ${error.message}`, this.config.logDirectory);
+        });
+        if (this.config.disableMitm || !this.targets.shouldMitmHost(authority)) {
+            this.tunnelConnect(authority, hostname, port, clientSocket, head);
+            return;
+        }
+        try {
+            const pair = this.ca.getCertificateForHost(hostname);
+            clientSocket.write("HTTP/1.1 200 Connection Established\r\nProxy-agent: vibe-coding-proxy\r\n\r\n");
+            const secureContext = tls.createSecureContext({ key: pair.key, cert: pair.cert });
+            const tlsSocket = new tls.TLSSocket(clientSocket, {
+                isServer: true,
+                secureContext,
+            });
+            if (head.length > 0) {
+                tlsSocket.unshift(head);
+            }
+            tlsSocket.once("secure", () => {
+                this.mitmSocketHosts.set(tlsSocket, hostname);
+                this.mitmHttpServer.emit("connection", tlsSocket);
+            });
+            tlsSocket.on("error", (error) => {
+                (0, cli_common_1.traceRuntimeError)(`vibe-coding-proxy: MITM TLS error for ${authority}: ${error.message}`, this.config.logDirectory);
+            });
+        }
+        catch (error) {
+            (0, cli_common_1.traceRuntimeError)(`vibe-coding-proxy: failed MITM setup for ${authority}: ${error}`, this.config.logDirectory);
+            clientSocket.write("HTTP/1.1 502 Bad Gateway\r\n\r\n");
+            clientSocket.destroy();
+        }
+    }
+    /** Handle HTTP requests after CONNECT TLS has been decrypted. */
+    handleMitmHttpRequest(req, res) {
+        const host = this.mitmSocketHosts.get(req.socket) || String(req.headers.host || "");
+        let target;
+        try {
+            target = resolveMitmTarget(req, host);
+        }
+        catch (error) {
+            res.writeHead(400);
+            res.end(`Bad MITM request: ${error.message}`);
+            return;
+        }
+        void this.forwardHttpExchange(req, res, target, this.targets.shouldLogUrl(target.fullUrl));
+    }
+    /** Open a raw TCP tunnel for non-MITM CONNECT targets. */
+    tunnelConnect(authority, hostname, port, clientSocket, head) {
+        const upstream = net.connect(port, hostname, () => {
+            clientSocket.write("HTTP/1.1 200 Connection Established\r\nProxy-agent: vibe-coding-proxy\r\n\r\n");
+            if (head.length > 0) {
+                upstream.write(head);
+            }
+            upstream.pipe(clientSocket);
+            clientSocket.pipe(upstream);
+            void this.logger.logConnectMetadata(authority, "CONNECT tunnel passed through without MITM");
+        });
+        upstream.on("error", (error) => {
+            (0, cli_common_1.traceRuntimeError)(`vibe-coding-proxy: CONNECT error for ${authority}: ${error.message}`, this.config.logDirectory);
+            if (!clientSocket.destroyed) {
+                clientSocket.write("HTTP/1.1 502 Bad Gateway\r\n\r\n");
+            }
+            clientSocket.destroy();
+        });
+        upstream.on("end", () => {
+            clientSocket.end();
+        });
+        clientSocket.on("end", () => {
+            upstream.end();
+        });
+    }
+    /** Forward a buffered HTTP request upstream while streaming the response back. */
+    forwardHttpExchange(req, res, target, forceLog) {
+        const requestTimestamp = Date.now();
+        const requestBodyChunks = [];
+        req.on("data", (chunk) => {
+            requestBodyChunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+        });
+        req.on("error", (error) => {
+            (0, cli_common_1.traceRuntimeError)(`vibe-coding-proxy: request stream error for ${target.fullUrl}: ${error.message}`, this.config.logDirectory);
+            if (!res.headersSent) {
+                res.writeHead(499);
+            }
+            res.end();
+        });
+        res.on("error", (error) => {
+            (0, cli_common_1.traceRuntimeError)(`vibe-coding-proxy: response stream error for ${target.fullUrl}: ${error.message}`, this.config.logDirectory);
+        });
+        req.on("end", () => {
+            const requestBody = Buffer.concat(requestBodyChunks);
+            const requestHeaders = buildUpstreamHeaders(req.headers, target);
+            const requestOptions = {
+                protocol: target.protocol,
+                hostname: target.hostname,
+                port: target.port,
+                path: target.path,
+                method: req.method,
+                headers: requestHeaders,
+            };
+            const requestModule = target.protocol === "https:" ? https : http;
+            const upstreamReq = requestModule.request(requestOptions, (upstreamRes) => {
+                const responseTimestamp = Date.now();
+                const responseChunks = [];
+                res.writeHead(upstreamRes.statusCode || 200, upstreamRes.headers);
+                upstreamRes.on("data", (chunk) => {
+                    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+                    responseChunks.push(buffer);
+                    res.write(buffer);
+                });
+                upstreamRes.on("error", (error) => {
+                    (0, cli_common_1.traceRuntimeError)(`vibe-coding-proxy: upstream response error for ${target.fullUrl}: ${error.message}`, this.config.logDirectory);
+                    res.end();
+                });
+                upstreamRes.on("end", () => {
+                    res.end();
+                    void this.logger.logExchange({
+                        method: req.method || "GET",
+                        url: target.fullUrl,
+                        requestHeaders: req.headers,
+                        requestBody,
+                        statusCode: upstreamRes.statusCode || 0,
+                        responseHeaders: upstreamRes.headers,
+                        responseChunks,
+                        requestTimestamp,
+                        responseTimestamp,
+                        forceLog,
+                    });
+                });
+            });
+            upstreamReq.on("error", (error) => {
+                (0, cli_common_1.traceRuntimeError)(`vibe-coding-proxy: upstream error for ${target.fullUrl}: ${error.message}`, this.config.logDirectory);
+                if (!res.headersSent) {
+                    res.writeHead(502);
+                    res.end(`Proxy error: ${error.message}`);
+                    return;
+                }
+                res.end();
+            });
+            if (requestBody.length > 0) {
+                upstreamReq.write(requestBody);
+            }
+            upstreamReq.end();
+        });
+    }
+}
+exports.ForwardProxyServer = ForwardProxyServer;
+/** Resolve absolute-form requests used by HTTP forward proxies. */
+function resolvePlainHttpTarget(req) {
+    const rawUrl = req.url || "/";
+    const parsed = rawUrl.startsWith("http://") || rawUrl.startsWith("https://")
+        ? new URL(rawUrl)
+        : new URL(`http://${String(req.headers.host || "")}${rawUrl}`);
+    return urlToTarget(parsed);
+}
+/** Resolve origin-form requests seen inside the decrypted CONNECT tunnel. */
+function resolveMitmTarget(req, fallbackHost) {
+    const rawUrl = req.url || "/";
+    const host = String(req.headers.host || fallbackHost);
+    const parsed = rawUrl.startsWith("http://") || rawUrl.startsWith("https://")
+        ? new URL(rawUrl)
+        : new URL(`https://${host}${rawUrl}`);
+    return urlToTarget(parsed);
+}
+/** Convert a parsed URL into upstream request coordinates. */
+function urlToTarget(parsed) {
+    const protocol = parsed.protocol === "http:" ? "http:" : "https:";
+    const port = parsed.port ? Number(parsed.port) : protocol === "http:" ? 80 : 443;
+    return {
+        protocol,
+        hostname: parsed.hostname,
+        port,
+        path: `${parsed.pathname || "/"}${parsed.search || ""}`,
+        fullUrl: parsed.toString(),
+    };
+}
+/** Build upstream headers by removing proxy-only hop-by-hop values. */
+function buildUpstreamHeaders(headers, target) {
+    const upstreamHeaders = {};
+    for (const [key, value] of Object.entries(headers)) {
+        if (!HOP_BY_HOP_HEADERS.has(key.toLowerCase())) {
+            upstreamHeaders[key] = value;
+        }
+    }
+    upstreamHeaders.host = target.port === (target.protocol === "http:" ? 80 : 443)
+        ? target.hostname
+        : `${target.hostname}:${target.port}`;
+    return upstreamHeaders;
+}
+//# sourceMappingURL=forward-proxy.js.map

package/dist/intercept/forward-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forward-proxy.js","sourceRoot":"","sources":["../../src/intercept/forward-proxy.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2CAA6B;AAC7B,6CAA+B;AAC/B,yCAA2B;AAC3B,yCAA2B;AAE3B,kDAAsD;AACtD,2CAAqE;AACrE,yDAAwE;AACxE,mDAAoE;AA8CpE,8DAA8D;AAC9D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IAClC,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,kBAAkB;IAClB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACT,CAAC,CAAC;AAEH;;GAEG;AACH,MAAa,kBAAkB;IAa9B,wEAAwE;IACxE,YAAY,SAA6B,EAAE;QAL1B,oBAAe,GAAG,IAAI,OAAO,EAAkB,CAAC;QACzD,YAAO,GAAG,KAAK,CAAC;QAChB,YAAO,GAAG,KAAK,CAAC;QAIvB,IAAI,CAAC,MAAM,GAAG;YACb,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW;YAChC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC;YACtB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,oBAAoB;YACzD,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,KAAK;YACtD,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK;YACxC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,KAAK;YACxD,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK;YACxC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAA,wBAAY,GAAE;SACrC,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,kCAAkB,CAAC;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,iCAAc,CAAC;YAChC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;YAClD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACpD,IAAI,EAAE,mBAAmB;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,GAAG,IAAI,oCAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC/C,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAoB,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACpD,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACV,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC;QAE/E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBAC3D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC7C,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;oBAC5D,OAAO;gBACR,CAAC;gBACD,MAAM,GAAG,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACzD,OAAO,CAAC;oBACP,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;oBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,GAAG;oBACH,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;oBAC5B,UAAU,EAAE,MAAM,EAAE,QAAQ;iBAC5B,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,IAAI;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;QACR,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC;YACJ,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACR,gFAAgF;QACjF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,2DAA2D;IACnD,sBAAsB,CAAC,GAAoB,EAAE,GAAmB;QACvE,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACJ,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,sBAAuB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1D,OAAO;QACR,CAAC;QACD,KAAK,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,2EAA2E;IACnE,aAAa,CAAC,GAAoB,EAAE,YAAwB,EAAE,IAAY;QACjF,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;QAChC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAA,6BAAa,EAAC,SAAS,CAAC,CAAC;QACpD,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAClC,IAAA,8BAAiB,EAAC,8CAA8C,SAAS,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1H,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACrD,YAAY,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;YACpG,MAAM,aAAa,GAAG,GAAG,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAClF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE;gBACjD,QAAQ,EAAE,IAAI;gBACd,aAAa;aACb,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC7B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC9C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC/B,IAAA,8BAAiB,EAAC,yCAAyC,SAAS,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACrH,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAA,8BAAiB,EAAC,4CAA4C,SAAS,KAAK,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC/G,YAAY,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACvD,YAAY,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;IACF,CAAC;IAED,iEAAiE;IACzD,qBAAqB,CAAC,GAAoB,EAAE,GAAmB;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACJ,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,qBAAsB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACzD,OAAO;QACR,CAAC;QACD,KAAK,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,0DAA0D;IAClD,aAAa,CACpB,SAAiB,EACjB,QAAgB,EAChB,IAAY,EACZ,YAAwB,EACxB,IAAY;QAEZ,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;YACjD,YAAY,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;YACpG,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5B,KAAK,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,4CAA4C,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAA,8BAAiB,EAAC,wCAAwC,SAAS,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACnH,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;gBAC7B,YAAY,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACxD,CAAC;YACD,YAAY,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACvB,YAAY,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,QAAQ,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,kFAAkF;IAC1E,mBAAmB,CAC1B,GAAoB,EACpB,GAAmB,EACnB,MAAqB,EACrB,QAAiB;QAEjB,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,iBAAiB,GAAa,EAAE,CAAC;QACvC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACzC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,IAAA,8BAAiB,EAAC,+CAA+C,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC/H,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YACD,GAAG,CAAC,GAAG,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,IAAA,8BAAiB,EAAC,gDAAgD,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjI,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAClB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACrD,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjE,MAAM,cAAc,GAAyB;gBAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,cAAc;aACvB,CAAC;YACF,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,EAAE;gBACzE,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACrC,MAAM,cAAc,GAAa,EAAE,CAAC;gBACpC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,IAAI,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;gBAClE,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;oBACjD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACnE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACnB,CAAC,CAAC,CAAC;gBACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACjC,IAAA,8BAAiB,EAAC,kDAAkD,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;oBAClI,GAAG,CAAC,GAAG,EAAE,CAAC;gBACX,CAAC,CAAC,CAAC;gBACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;wBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;wBAC3B,GAAG,EAAE,MAAM,CAAC,OAAO;wBACnB,cAAc,EAAE,GAAG,CAAC,OAAO;wBAC3B,WAAW;wBACX,UAAU,EAAE,WAAW,CAAC,UAAU,IAAI,CAAC;wBACvC,eAAe,EAAE,WAAW,CAAC,OAAO;wBACpC,cAAc;wBACd,gBAAgB;wBAChB,iBAAiB;wBACjB,QAAQ;qBACR,CAAC,CAAC;gBACJ,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjC,IAAA,8BAAiB,EAAC,yCAAyC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBACzH,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;oBACzC,OAAO;gBACR,CAAC;gBACD,GAAG,CAAC,GAAG,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAChC,CAAC;YACD,WAAW,CAAC,GAAG,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACJ,CAAC;CACD;AAzRD,gDAyRC;AAED,mEAAmE;AACnE,SAAS,sBAAsB,CAAC,GAAoB;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3E,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC;QACjB,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;IAChE,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CAAC,GAAoB,EAAE,YAAoB;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3E,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC;QACjB,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;IACvC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,8DAA8D;AAC9D,SAAS,WAAW,CAAC,MAAW;IAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACjF,OAAO;QACN,QAAQ;QACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI;QACJ,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE;QACvD,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE;KAC1B,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,SAAS,oBAAoB,CAAC,OAA4B,EAAE,MAAqB;IAChF,MAAM,eAAe,GAAwB,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAChD,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;IACF,CAAC;IACD,eAAe,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9E,CAAC,CAAC,MAAM,CAAC,QAAQ;QACjB,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,eAAe,CAAC;AACxB,CAAC"}

package/dist/intercept/header-redaction.d.ts

@@ -0,0 +1,7 @@
+import type { IncomingHttpHeaders } from "http";
+export declare const SENSITIVE_HEADER_PARTS: string[];
+type HeaderMap = IncomingHttpHeaders | Record<string, string | string[] | undefined>;
+/** Flatten headers and fully redact credentials unless explicitly requested. */
+export declare function processHeaders(headers: HeaderMap, includeSensitiveHeaders?: boolean): Record<string, string>;
+export {};
+//# sourceMappingURL=header-redaction.d.ts.map

package/dist/intercept/header-redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"header-redaction.d.ts","sourceRoot":"","sources":["../../src/intercept/header-redaction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAEhD,eAAO,MAAM,sBAAsB,UAUlC,CAAC;AAEF,KAAK,SAAS,GAAG,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;AAErF,gFAAgF;AAChF,wBAAgB,cAAc,CAC7B,OAAO,EAAE,SAAS,EAClB,uBAAuB,GAAE,OAAe,GACtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWxB"}

package/dist/intercept/header-redaction.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SENSITIVE_HEADER_PARTS = void 0;
+exports.processHeaders = processHeaders;
+exports.SENSITIVE_HEADER_PARTS = [
+    "authorization",
+    "x-api-key",
+    "x-auth-token",
+    "cookie",
+    "set-cookie",
+    "x-session-token",
+    "x-access-token",
+    "bearer",
+    "proxy-authorization",
+];
+/** Flatten headers and fully redact credentials unless explicitly requested. */
+function processHeaders(headers, includeSensitiveHeaders = false) {
+    const result = {};
+    for (const [key, value] of Object.entries(headers)) {
+        if (value === undefined)
+            continue;
+        const stringValue = Array.isArray(value) ? value.join(", ") : String(value);
+        const sensitive = exports.SENSITIVE_HEADER_PARTS.some((part) => key.toLowerCase().includes(part));
+        result[key] = sensitive && !includeSensitiveHeaders ? "[REDACTED]" : stringValue;
+    }
+    return result;
+}
+//# sourceMappingURL=header-redaction.js.map

package/dist/intercept/header-redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"header-redaction.js","sourceRoot":"","sources":["../../src/intercept/header-redaction.ts"],"names":[],"mappings":";;;AAiBA,wCAcC;AA7BY,QAAA,sBAAsB,GAAG;IACrC,eAAe;IACf,WAAW;IACX,cAAc;IACd,QAAQ;IACR,YAAY;IACZ,iBAAiB;IACjB,gBAAgB;IAChB,QAAQ;IACR,qBAAqB;CACrB,CAAC;AAIF,gFAAgF;AAChF,SAAgB,cAAc,CAC7B,OAAkB,EAClB,0BAAmC,KAAK;IAExC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,8BAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACtD,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAChC,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IAClF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/intercept/interceptor-loader.js

@@ -0,0 +1,26 @@
+// CommonJS loader for interceptor
+try {
+	// Try to load the compiled JS version first
+	const path = require("path");
+	const fs = require("fs");
+
+	const jsPath = path.join(__dirname, "interceptor.js");
+	const tsPath = path.join(__dirname, "interceptor.ts");
+
+	if (fs.existsSync(jsPath)) {
+		// Use compiled JavaScript
+		const { initializeInterceptor } = require("./interceptor.js");
+		initializeInterceptor();
+	} else if (fs.existsSync(tsPath)) {
+		// Use TypeScript via tsx
+		require("tsx/cjs/api").register();
+		const { initializeInterceptor } = require("./interceptor.ts");
+		initializeInterceptor();
+	} else {
+		console.error("Could not find interceptor file");
+		process.exit(1);
+	}
+} catch (error) {
+	console.error("Error loading interceptor:", error.message);
+	process.exit(1);
+}

package/dist/intercept/interceptor.d.ts

@@ -0,0 +1,164 @@
+/**
+ * @file Runtime fetch/HTTP interceptor for Claude Code V1 (Node.js script mode).
+ *
+ * Patches `global.fetch` and Node's `http`/`https` modules to capture Anthropic
+ * Messages API traffic (and optionally AWS Bedrock) before it reaches the upstream.
+ * Used when Claude Code is launched as a Node.js script via `--require interceptor-loader.js`.
+ * Native V2+ binaries use {@link ReverseProxyServer} instead.
+ */
+/** Configuration for {@link ClaudeTrafficLogger}. */
+export interface InterceptorConfig {
+    /** Directory for JSONL and HTML log files. */
+    logDirectory?: string;
+    /** Base name for log files; falls back to env `CLAUDE_TRACE_LOG_NAME` or timestamp. */
+    logBaseName?: string;
+    /** Regenerate HTML after each logged pair. */
+    enableRealTimeHTML?: boolean;
+    /** Console log verbosity (currently unused; reserved for future use). */
+    logLevel?: "debug" | "info" | "warn" | "error";
+}
+/**
+ * Captures Claude API request/response pairs by monkey-patching fetch and Node HTTP.
+ *
+ * Writes append-only JSONL logs and optionally regenerates a self-contained HTML
+ * report after each exchange. Sensitive headers are redacted by default.
+ */
+export declare class ClaudeTrafficLogger {
+    /** Absolute path to the log directory. */
+    private logDir;
+    /** Append-only JSONL log file path. */
+    private logFile;
+    /** Self-contained HTML report output path. */
+    private htmlFile;
+    /** In-flight requests awaiting a matching response (keyed by generated request id). */
+    private pendingRequests;
+    /** Completed request/response pairs held in memory for HTML regeneration. */
+    private pairs;
+    /** Resolved configuration with defaults applied. */
+    private config;
+    /** Frontend bundle renderer for HTML reports. */
+    private htmlGenerator;
+    /**
+     * Initializes log paths, creates the log directory, and clears the JSONL file.
+     *
+     * @param config - Logger configuration; sensible defaults are applied.
+     */
+    constructor(config?: InterceptorConfig);
+    /**
+     * Returns true when a URL targets the Claude Messages API (or all Anthropic/Bedrock
+     * traffic when `CLAUDE_TRACE_INCLUDE_ALL_REQUESTS=true`).
+     *
+     * Respects `ANTHROPIC_BASE_URL` for custom proxy endpoints.
+     *
+     * @param url - Request URL as a string or `URL` object.
+     */
+    private isClaudeAPI;
+    /** Generates a unique correlation id for pairing requests with responses. */
+    private generateRequestId;
+    /**
+     * Redacts sensitive header values by truncating to prefix/suffix.
+     *
+     * @param headers - Flat header map from fetch or Node HTTP options.
+     * @returns Copy of headers with sensitive values partially redacted.
+     */
+    private redactSensitiveHeaders;
+    /** Clones a fetch Response so the body can be read for logging without consuming it. */
+    private cloneResponse;
+    /**
+     * Normalizes request body into a log-friendly value.
+     *
+     * Parses JSON strings, expands FormData entries, and passes through other types.
+     *
+     * @param body - Raw request body from fetch `init.body` or Node `req.write` chunks.
+     */
+    private parseRequestBody;
+    /**
+     * Reads and classifies a fetch Response body for logging.
+     *
+     * JSON responses are parsed; SSE and text responses are stored as raw strings.
+     *
+     * @param response - Cloned fetch Response (safe to consume).
+     */
+    private parseResponseBody;
+    /** Installs both fetch and Node HTTP instrumentation. */
+    instrumentAll(): void;
+    /**
+     * Patches `global.fetch` to intercept Claude API calls.
+     *
+     * Idempotent: skips if already marked with `__claudeTraceInstrumented`.
+     * Non-Claude URLs pass through to the original fetch unchanged.
+     */
+    instrumentFetch(): void;
+    /**
+     * Patches Node's `http` and `https` `request`/`get` methods.
+     *
+     * Some Claude Code versions use Node HTTP instead of fetch for API calls.
+     * Each method is patched at most once via a `__claudeTraceInstrumented` marker.
+     */
+    instrumentNodeHTTP(): void;
+    /**
+     * Wraps a Node HTTP(S) request to capture body and response for Claude API URLs.
+     *
+     * Intercepts `req.write` to accumulate the request body, then logs on `res.end`.
+     *
+     * @param originalRequest - Unpatched `http.request` or `https.request`.
+     * @param options - Request options or URL string.
+     * @param callback - Optional response callback passed to the original request.
+     * @param isHttps - Whether the underlying module is `https`.
+     * @returns The outbound `ClientRequest` with wrapped `write`.
+     */
+    private interceptNodeRequest;
+    /**
+     * Reconstructs a full URL string from Node HTTP request options.
+     *
+     * @param options - URL string or options object with host/path fields.
+     * @param isHttps - Whether the caller is the `https` module.
+     */
+    private parseNodeRequestURL;
+    /**
+     * Parses a raw response body string based on Content-Type (Node HTTP path).
+     *
+     * @param body - Accumulated response body from `res.on("data")`.
+     * @param contentType - Value of the `content-type` response header, if any.
+     */
+    private parseResponseBodyFromString;
+    /** Appends a single JSONL line for one request/response pair. */
+    private writePairToLog;
+    /** Regenerates the self-contained HTML report from all logged pairs. */
+    private generateHTML;
+    /**
+     * Flushes orphaned pending requests and optionally opens the HTML report.
+     *
+     * Called on process exit via {@link initializeInterceptor}. Requests that never
+     * received a response are logged with a `ORPHANED_REQUEST` note.
+     */
+    cleanup(): void;
+    /**
+     * Returns current logging statistics and output file paths.
+     *
+     * @returns Snapshot of pair count, pending request count, and log file paths.
+     */
+    getStats(): {
+        totalPairs: number;
+        pendingRequests: number;
+        logFile: string;
+        htmlFile: string;
+    };
+}
+/**
+ * Creates and activates the global traffic logger (singleton).
+ *
+ * Patches fetch/HTTP immediately and registers cleanup handlers for
+ * `exit`, `SIGINT`, `SIGTERM`, and `uncaughtException`.
+ *
+ * @param config - Optional logger configuration.
+ * @returns The active {@link ClaudeTrafficLogger} instance.
+ */
+export declare function initializeInterceptor(config?: InterceptorConfig): ClaudeTrafficLogger;
+/**
+ * Returns the active logger instance, or `null` if not yet initialized.
+ *
+ * @returns Global {@link ClaudeTrafficLogger} or `null`.
+ */
+export declare function getLogger(): ClaudeTrafficLogger | null;
+//# sourceMappingURL=interceptor.d.ts.map

package/dist/intercept/interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../../src/intercept/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,qDAAqD;AACrD,MAAM,WAAW,iBAAiB;IACjC,8CAA8C;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;CAC/C;AAED;;;;;GAKG;AACH,qBAAa,mBAAmB;IAC/B,0CAA0C;IAC1C,OAAO,CAAC,MAAM,CAAS;IACvB,uCAAuC;IACvC,OAAO,CAAC,OAAO,CAAS;IACxB,8CAA8C;IAC9C,OAAO,CAAC,QAAQ,CAAS;IACzB,uFAAuF;IACvF,OAAO,CAAC,eAAe,CAA+B;IACtD,6EAA6E;IAC7E,OAAO,CAAC,KAAK,CAAiB;IAC9B,oDAAoD;IACpD,OAAO,CAAC,MAAM,CAAoB;IAClC,iDAAiD;IACjD,OAAO,CAAC,aAAa,CAAgB;IAErC;;;;OAIG;gBACS,MAAM,GAAE,iBAAsB;IAmC1C;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IAoBnB,6EAA6E;IAC7E,OAAO,CAAC,iBAAiB;IAIzB;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAI9B,wFAAwF;YAC1E,aAAa;IAI3B;;;;;;OAMG;YACW,gBAAgB;IAsB9B;;;;;;OAMG;YACW,iBAAiB;IAuB/B,yDAAyD;IAClD,aAAa,IAAI,IAAI;IAK5B;;;;;OAKG;IACI,eAAe,IAAI,IAAI;IAyE9B;;;;;OAKG;IACI,kBAAkB,IAAI,IAAI;IA0CjC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAa3B;;;;;OAKG;YACW,2BAA2B;IAiBzC,iEAAiE;YACnD,cAAc;IAS5B,wEAAwE;YAC1D,YAAY;IAa1B;;;;;OAKG;IACI,OAAO,IAAI,IAAI;IAiCtB;;;;OAIG;IACI,QAAQ;;;;;;CAQf;AAQD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,mBAAmB,CA6BrF;AAED;;;;GAIG;AACH,wBAAgB,SAAS,IAAI,mBAAmB,GAAG,IAAI,CAEtD"}