📡 feat: Add Authenticated Proxy Mode for Browser RUM Telemetry

[upman]

Summary

• Add proxy RUM mode where the browser sends OTLP traffic to /api/rum with the LibreChat bearer token.
• Validate the token on the backend, then forward traces/logs to RUM_PROXY_TARGET_URL without forwarding auth headers.
• Keep the browser proxy path fixed and configure only the collector target server-side.

Validation

• Jest coverage for config, proxy handler, and frontend token wiring.
• ESLint on touched files.
• Local browser test: RUM traces reached a dummy collector through the backend proxy.

Note

Proxy-mode RUM depends on the LibreChat backend/auth path, so it will not independently detect full backend outages or failures before auth/bootstrap. Those should stay covered by backend metrics and synthetic availability checks.

One follow up could be to break the proxy into a separate pod/process to reduce reliance of the backend being available

[danny-avila]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. What shall we delve into next?

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".