feat: Add centralized HTTP client configuration for Bedrock proxy/SSL support

[pballou]

Related GitHub Issue

Closes: #4446 and #8184

Description

This PR introduces a centralized HTTP client configuration utility to resolve proxy and SSL certificate verification issues with the AWS Bedrock provider.

Key Changes:

1. New Centralized HTTP Client Utility (src/utils/http-client.ts):

   • Consolidates proxy configuration (respecting HTTPS_PROXY/HTTP_PROXY/ALL_PROXY env vars and VS Code settings)
   • Manages custom CA certificate bundles (NODE_EXTRA_CA_CERTS, AWS_CA_BUNDLE)
   • Handles SSL verification settings (VS Code http.proxyStrictSSL)
   • Provides both Axios agent configs and Smithy NodeHttpHandler for AWS SDK v3
   • Implements proper proxy bypass logic for NO_PROXY patterns

2. Bedrock Provider Integration:

   • Updated src/api/providers/bedrock.ts to use getRooNodeHttpHandler()
   • Updated src/services/code-index/embedders/bedrock.ts for consistent behavior
   • Ensures all Bedrock requests (API calls, embeddings, credential resolution) respect proxy/CA settings

Design Decisions:

• Focused on Bedrock provider only to keep the PR scope manageable and avoid unintended side effects
• The centralized utility provides a reusable foundation for other providers if similar issues arise in the future
• Used AWS SDK's requestHandler configuration to ensure consistent behavior across all Bedrock operations
• Set requestTimeout: 0 to avoid SDK timeouts conflicting with application-level timeout handling

What This PR Does NOT Change:

• Other providers (OpenAI, LM Studio, Anthropic, etc.) continue to work as before
• No breaking changes to existing configurations

Test Procedure

Manual Testing:

1. Proxy Environment Test:

   # Set proxy environment variables
   export HTTPS_PROXY=http://proxy.example.com:8080
   export AWS_CA_BUNDLE=/path/to/custom-ca-bundle.pem
   
   # Configure Bedrock provider in Roo Code
   # Make API requests using Bedrock models
   # Verify requests go through proxy with custom CA
   
    VS Code Settings Test:
        Open VS Code Settings
        Set http.proxy to your proxy URL
        Set http.proxyStrictSSL to false (if testing with self-signed certs)
        Configure Bedrock provider
        Verify connections work with proxy settings
   
    No-Proxy Bypass Test:
   
    # Test that local/bypass hosts skip proxy
    export NO_PROXY="localhost,127.0.0.1,*.internal.company.com"
    # Verify requests to bypass hosts work correctly
   

Unit Test Coverage:

Existing Bedrock provider tests continue to pass
HTTP client utility includes comprehensive configuration logic

Environment Tested:

AWS Bedrock with proxy configuration
Custom CA certificate bundles
SSO credential resolution through proxy

Pre-Submission Checklist

Issue Linked: This PR is linked to an approved GitHub Issue (see "Related GitHub Issue" above).
Scope: My changes are focused on the linked issue (one major feature/fix per PR).
Self-Review: I have performed a thorough self-review of my code.
Testing: New and/or updated tests have been added to cover my changes (if applicable).
Documentation Impact: I have considered if my changes require documentation updates (see "Documentation Updates" section below).
Contribution Guidelines: I have read and agree to the [Contributor Guidelines](/CONTRIBUTING.md).

Get in Touch

Discord: pattywaggon

---

Important

Introduces centralized HTTP client configuration for AWS Bedrock provider, handling proxy and SSL settings via a new utility in http-client.ts.

• Centralized HTTP Client Utility (http-client.ts):
  • Consolidates proxy configuration using HTTPS_PROXY, HTTP_PROXY, ALL_PROXY, and VS Code settings.
  • Manages custom CA certificates from NODE_EXTRA_CA_CERTS and AWS_CA_BUNDLE.
  • Handles SSL verification settings from VS Code http.proxyStrictSSL.
  • Provides Axios agent configs and Smithy NodeHttpHandler for AWS SDK v3.
  • Implements proxy bypass logic for NO_PROXY patterns.
• Bedrock Provider Integration:
  • Updates bedrock.ts and embedders/bedrock.ts to use getRooNodeHttpHandler().
  • Ensures Bedrock requests respect proxy/CA settings.
• Dependencies:
  • Adds @smithy/node-http-handler and proxy-agent to package.json.

^{This description was created by for 5a98ad4. You can customize this summary. It will automatically update as commits are pushed.}

[roomote]

Rooviewer   See task on Roo Cloud

Review completed. No issues found.

This PR introduces a well-structured centralized HTTP client configuration utility for the Bedrock provider that correctly handles proxy settings, custom CA certificates, and SSL verification. The implementation properly integrates with both the Bedrock API client and credential resolution.

• No issues to resolve

_{Mention @roomote in a comment to request specific changes to this pull request or fix all unresolved issues.}