feat: Add centralized HTTP client configuration for Bedrock proxy/SSL support

[pballou]

Related GitHub Issue

Closes: #4446 and #8184

Description

This PR introduces a centralized HTTP client configuration utility to resolve proxy and SSL certificate verification issues with the AWS Bedrock provider.

Key Changes:

1. New Centralized HTTP Client Utility (src/utils/http-client.ts):

   • Consolidates proxy configuration (respecting HTTPS_PROXY/HTTP_PROXY/ALL_PROXY env vars and VS Code settings)
   • Manages custom CA certificate bundles (NODE_EXTRA_CA_CERTS, AWS_CA_BUNDLE)
   • Handles SSL verification settings (VS Code http.proxyStrictSSL)
   • Provides both Axios agent configs and Smithy NodeHttpHandler for AWS SDK v3
   • Implements proper proxy bypass logic for NO_PROXY patterns

2. Bedrock Provider Integration:

   • Updated src/api/providers/bedrock.ts to use getRooNodeHttpHandler()
   • Updated src/services/code-index/embedders/bedrock.ts for consistent behavior
   • Ensures all Bedrock requests (API calls, embeddings, credential resolution) respect proxy/CA settings

Design Decisions:

• Focused on Bedrock provider only to keep the PR scope manageable and avoid unintended side effects
• The centralized utility provides a reusable foundation for other providers if similar issues arise in the future
• Used AWS SDK's requestHandler configuration to ensure consistent behavior across all Bedrock operations
• Set requestTimeout: 0 to avoid SDK timeouts conflicting with application-level timeout handling

What This PR Does NOT Change:

• Other providers (OpenAI, LM Studio, Anthropic, etc.) continue to work as before
• No breaking changes to existing configurations

Test Procedure

Manual Testing:

1. Proxy Environment Test:

   # Set proxy environment variables
   export HTTPS_PROXY=http://proxy.example.com:8080
   export AWS_CA_BUNDLE=/path/to/custom-ca-bundle.pem
   
   # Configure Bedrock provider in Roo Code
   # Make API requests using Bedrock models
   # Verify requests go through proxy with custom CA
   
    VS Code Settings Test:
        Open VS Code Settings
        Set http.proxy to your proxy URL
        Set http.proxyStrictSSL to false (if testing with self-signed certs)
        Configure Bedrock provider
        Verify connections work with proxy settings
   
    No-Proxy Bypass Test:
   
    # Test that local/bypass hosts skip proxy
    export NO_PROXY="localhost,127.0.0.1,*.internal.company.com"
    # Verify requests to bypass hosts work correctly
   

Unit Test Coverage:

Existing Bedrock provider tests continue to pass
HTTP client utility includes comprehensive configuration logic

Environment Tested:

AWS Bedrock with proxy configuration
Custom CA certificate bundles
SSO credential resolution through proxy

Pre-Submission Checklist

Issue Linked: This PR is linked to an approved GitHub Issue (see "Related GitHub Issue" above).
Scope: My changes are focused on the linked issue (one major feature/fix per PR).
Self-Review: I have performed a thorough self-review of my code.
Testing: New and/or updated tests have been added to cover my changes (if applicable).
Documentation Impact: I have considered if my changes require documentation updates (see "Documentation Updates" section below).
Contribution Guidelines: I have read and agree to the [Contributor Guidelines](/CONTRIBUTING.md).

Get in Touch

Discord: pattywaggon

---

Important

Introduces centralized HTTP client configuration for proxy and SSL settings, updating Bedrock provider to use this utility for consistent request handling.

• Centralized HTTP Client Utility (http-client.ts):
  • Consolidates proxy configuration using HTTPS_PROXY, HTTP_PROXY, ALL_PROXY, and VS Code settings.
  • Manages custom CA certificates from NODE_EXTRA_CA_CERTS and AWS_CA_BUNDLE.
  • Handles SSL verification settings from VS Code http.proxyStrictSSL.
  • Provides Axios agent configs and Smithy NodeHttpHandler for AWS SDK v3.
  • Implements proxy bypass logic for NO_PROXY patterns.
• Bedrock Provider Integration:
  • Updates bedrock.ts and embedders/bedrock.ts to use getRooNodeHttpHandler().
  • Ensures Bedrock requests respect proxy/CA settings.
• Dependencies:
  • Adds @smithy/node-http-handler and proxy-agent to package.json.

^{This description was created by for 1f14849. You can customize this summary. It will automatically update as commits are pushed.}

[roomote]

Rooviewer   See task on Roo Cloud

Review complete. No issues found.

The implementation correctly introduces a centralized HTTP client configuration utility for Bedrock proxy and SSL support. The code properly handles proxy URLs, NO_PROXY bypass logic, custom CA certificates, and SSL verification settings. The integration with both the Bedrock provider and embedder is sound.

_{Mention @roomote in a comment to request specific changes to this pull request or fix all unresolved issues.}