@karoc/dsh-proxy 0.1.3 → 0.1.4

package/CHANGELOG.md

@@ -1,5 +1,84 @@
 # Changelog
 
+## [0.1.4] - 2026-09-25
+
+### Fixed
+
+- **DSH 0.1.7 icon rename (upstream commit `4937343a5e`, released from
+  `0.1.7-alpha.1`).** `IconChevronDownOutline14`, `IconGlobeOutline14` and
+  `IconLinkOutline14` no longer exist in `dsh-client-ui-primitives` — the size
+  suffix moved into each artwork's default and the name now carries the stroke
+  weight — so all three resolved to `undefined` and the Settings → Smoothly
+  Proxy section crashed on render (`React error #130`,
+  `slot entry crashed in 'settings.section'`). `src/client/ProxySection.tsx`
+  now imports the `*Regular` variants the built-in pages use. Rendered sizes: the chevron and the globe
+  stay 14 px (their artwork defaults); only the link moves from 14 px to its
+  16 px artwork default. **Support floor:** the client half requires dsh ≥ 0.1.7
+  **since v0.1.4** — **v0.1.3 remains the release for 0.1.2–0.1.6**.
+
+- **Loopback was only recognised as the literal `127.0.0.1`.** The routing guard
+  was `/^(127\.0\.0\.1|localhost|::1|0\.0\.0\.0)$/`, so every other address in the
+  `127.0.0.0/8` block (e.g. `127.0.0.2`, used by interface aliases and some
+  container setups) was sent to the **upstream proxy** when it was listed in
+  `proxiedHosts` — contradicting the documented "loopback targets are always
+  direct" guarantee. The guard now matches the whole `127/8` block. The spec
+  assertion that was supposed to pin this was **vacuous** (it asserted the
+  loopback hosts against a `proxiedHosts` list that did not contain them, so it
+  returned "direct" for the unlisted-host reason and would have stayed green with
+  the guard deleted) — it now lists them, adds a positive control, and covers
+  `127.0.0.2`; verified red against the old guard before the fix.
+- Dropped the dead `@deepseek-ai/dsh-client-runtime/client` entry from the
+  bundler externals and the client-boot spec: that package no longer ships with
+  DSH and nothing imports it (same stale reference as the `dsh.client.inject`
+  row removed above).
+
+### Tests
+
+- **`npm run verify:all` — every gate, one command, bound to the commit.**
+  It runs script syntax, the spec suite, the guarantee gate, the negative
+  controls and the release gate, and writes `{ts, commit, node, steps[]}` to the
+  gitignored `lib/verify-report.json`. `npm run verify:fresh` FAILS when HEAD no
+  longer matches the recorded commit — because a green claim is only as good as
+  the commit it was measured on, and this repo deliberately re-points tags for
+  unpublished versions. A failed step is a failed verification, never an
+  "unknown".
+- **Negative controls, now part of `npm test`** (`npm run test:controls`).
+  A gate nobody has seen fail is not evidence, so `scripts/test-negative-controls.mjs`
+  clones the committed tree per scenario, injects ONE defect, and asserts the
+  gate fails with the documented message: a dirty tree, a removed CHANGELOG
+  entry, a deleted release tag, a removed build artifact, and a guarantee row
+  whose pinning assertion no longer exists — plus a positive control (an
+  unmutated clone must pass both gates). 5/5 mutations caught.
+- **Guarantee gate, now part of `npm test`.** `docs/guarantees.md` lists this
+  plugin's negative guarantees and names the assertion label that pins each one;
+  `scripts/check-guarantees.mjs` fails the suite when a label disappears (12 rows
+  today, and the selector must exist in `scripts/*.spec.mjs`). Verified by
+  negative control: pointing a row at a non-existent label makes the gate FAIL.
+  The routing guard that shipped matching only the literal `127.0.0.1` stayed
+  invisible for months precisely because the assertion meant to pin it could not
+  fail — the gate plus the `127/8` assertion close that class of defect.
+
+### Changed
+
+- **The dsh floor is now declared, not just documented.** `package.json`
+  declares an optional peer dependency
+  `@deepseek-ai/dsh-client-ui-settings: ">=0.1.7-rc.1"`. The gate that reads it ships from **DSH 0.1.7-rc.1** on — it
+  compares every `@deepseek-ai/dsh*` peer against the running runtime and refuses
+  a plugin the runtime fails, printing the `dsh plugin allow-version` remedy.
+  Runtimes older than that gate evaluate **no** peers
+  and refuse nothing: on 0.1.2–0.1.6 the client half cannot render (the
+  `*Regular` icon names arrived in 0.1.7-alpha.1), so **v0.1.3 remains the
+  release for 0.1.2–0.1.6** — the 0.1.7 alphas have those icons and work. It is
+  marked `peerDependenciesMeta.optional` because the host supplies that package
+  at runtime, so npm installs nothing extra. Note the prerelease rule the range encodes (measured with the semver DSH
+  actually resolves — 7.8.5): `>=0.1.7` and `^0.1.7` do **not** match a
+  `0.1.7-rc.N` runtime, hence the explicit `-rc.1` floor. semver 7.7.4 answers
+  `true` for the caret form.
+- Removed the stale `@deepseek-ai/dsh-client-runtime` entry from
+  `dsh.client.inject`: that package no longer ships with DSH (11 versions exist on npm, but `latest`
+  is still the historical `0.0.1-rc.1` and nothing in the harness tree provides
+  it), and the loader silently ignored the unresolvable row.
+
 ## [0.1.3]
 
 - **Brand name**: Smoothly Proxy / 思磨力代理插件 — the plugin's user-visible

package/CONTRIBUTING.md

@@ -8,7 +8,8 @@ model-provider proxying.
 ```sh
 pnpm install        # dev deps (tsdown, typescript, react types)
 pnpm typecheck      # tsc --noEmit
-pnpm test           # typecheck + scripts/proxy-core.spec.mjs (13 scenarios)
+pnpm test           # node --test: proxy-core (13 scenarios) + host-route /
+                    # client-boot / cordis-mount specs (no external network)
 pnpm bundle         # emit lib/index.js + lib/client.js
 ```
 
@@ -24,7 +25,7 @@ To see the plugin live in the GUI, link it into a profile:
 ```jsonc
 // ~/.dsh/profiles/web/package.json
 "dependencies": { "@karoc/dsh-proxy": "link:/path/to/dsh-proxy", ... },
-"dsh": { "profile": { "bundles": ["@deepseek-ai/dsh-base", "@deepseek-ai/dsh-web-app", ..., "dsh-proxy"] } }
+"dsh": { "profile": { "bundles": ["@deepseek-ai/dsh-base", "@deepseek-ai/dsh-web-app", ..., "@karoc/dsh-proxy"] } }
 ```
 
 Then `cd ~/.dsh/profiles/web && pnpm install` and **restart `dsh web`**

package/README.md

@@ -29,12 +29,15 @@ desktop shell had.
 
 ## What it adds
 
-A new Settings section, **「思磨力代理 / Smoothly Proxy」**, placed after the
-built-in **Models** and **Model reasoning** pages. It shows:
+A new Settings section, **「思磨力代理 / Smoothly Proxy」** (nav order 25), placed
+after the built-in **Models** page and, when that plugin is installed, the
+external **Model reasoning** page. It shows:
 
 - an **upstream proxy card**: enable toggle, protocol selector (HTTP / HTTPS /
   SOCKS5), host, port, optional username/password, and a **Test connection**
-  button that verifies the upstream speaks its protocol;
+  button (a SOCKS5 handshake for SOCKS5, a `CONNECT` probe for HTTP; an HTTPS
+  upstream is only checked for TCP reachability — its TLS handshake is not
+  verified);
 - a **model providers** list — hosts read from your dsh `settings.yaml`
   (`llm-deepseek.baseURL`, `llm-pi-ai.providers.<n>.baseURL`, any `llm-*`
   namespace), labeled with the friendly display name where available;
@@ -119,8 +122,8 @@ A git install runs the package's `prepare` script to build the bundle. pnpm ≥
 Bump to the newest release with pnpm update (or re-add to pick up a newer git ref):
 
 ```sh
-dsh plugin --profile web update dsh-proxy
-# or, if the dependency spec is pinned: dsh plugin --profile web add dsh-proxy
+dsh plugin --profile web update @karoc/dsh-proxy
+# or, if the dependency spec is pinned: dsh plugin --profile web add @karoc/dsh-proxy
 ```
 
 Then **restart `dsh web`** so the new client bundle loads.
@@ -128,7 +131,7 @@ Then **restart `dsh web`** so the new client bundle loads.
 ### Removing
 
 ```sh
-dsh plugin --profile web remove dsh-proxy
+dsh plugin --profile web remove @karoc/dsh-proxy
 ```
 
 This removes both the dependency and its bundle layer from the `web` profile. Restart `dsh web` for the section to disappear.
@@ -149,7 +152,8 @@ src/client/index.ts   # client apply: register settings.section (id dsh-proxy)
 src/client/ProxySection.tsx  # the settings page (upstream card + host lists)
 src/client/styles.ts  # design-token styles (--dsw-alias-*) + injection
 src/client/locales.ts # en/zh copy
-scripts/proxy-core.spec.mjs  # behavioral tests (13 scenarios, no network)
+scripts/*.spec.mjs    # behavioral tests: proxy-core.ts (13 scenarios) plus
+                      # host route / client boot / cordis mount — no network
 ```
 
 ### The /proxy/api route
@@ -157,7 +161,7 @@ scripts/proxy-core.spec.mjs  # behavioral tests (13 scenarios, no network)
 The host half serves the settings page over a same-origin HTTP route (the
 built-in `/api` prefix is reserved for the gateway, so this uses `/proxy/api`):
 
-- `GET  /proxy/api` → `{ upstream, proxiedHosts, knownHosts, hosts, providers, port }`
+- `GET  /proxy/api` → `{ ok, upstream, proxiedHosts, knownHosts, hosts, providers, port }`
 - `POST /proxy/api` `{ op: 'save', upstream, proxiedHosts }` → sanitized + persisted config
 - `POST /proxy/api` `{ op: 'test', upstream }` → `{ ok, detail }`
 - `POST /proxy/api` `{ op: 'persist' }` → merge observed hosts into `knownHosts`
@@ -167,7 +171,9 @@ built-in `/api` prefix is reserved for the gateway, so this uses `/proxy/api`):
 ```sh
 pnpm install
 pnpm bundle          # emits lib/index.js + lib/client.js
-pnpm test            # tsc --noEmit + proxy-core.spec.mjs (13 scenarios)
+pnpm typecheck        # tsc --noEmit
+pnpm test             # node --test: proxy-core (13 scenarios) + host-route /
+                      # client-boot / cordis-mount specs (no network)
 pnpm release:check   # release gate: docs/changelog/tag/tree/build/registry must all pass
 pnpm publish         # runs the gate (prepack/prepublishOnly), then postpublish verifies the live release
 ```
@@ -189,18 +195,31 @@ module table; everything else is inlined.
 - `npm`/`pnpm` install/update traffic goes through the proxy like everything
   else; toggling a host **related to install/update** takes effect on the next
   install/update (already-in-flight operations keep their environment).
+- **A SOCKS5 upstream only carries HTTPS targets.** SOCKS5 has no absolute-URI
+  HTTP mode, so a selected plain `http://` host falls back to direct through a
+  SOCKS5 upstream (the settings page states the same thing).
 - **Section nav icon is shell-assigned, not plugin-assigned.** The built-in
   `ui-settings-general` `SettingsRoot.tsx` `navIcon(id)` maps known ids and
   falls back to a gear for every other id — including this section's
   `dsh-proxy`. The `settings.section` registration has no icon field, so an
   external plugin cannot set it without patching the shell. When DSH exposes a
-  per-section icon, use `IconGlobeOutline14` from `dsh-client-ui-primitives`
+  per-section icon, use `IconGlobeOutlineRegular` from `dsh-client-ui-primitives`
   for this section.
-- **Works with dsh ≥ 0.1.2 when installed the official way.** The loader
+- **Requires dsh ≥ 0.1.7 since v0.1.4 — v0.1.3 remains the release for
+  0.1.2–0.1.6.** DSH 0.1.7 renamed the icon exports (`IconX14` → `IconXRegular`,
+  the stroke-weight naming; upstream commit `4937343a5e`), so this section
+  imports the `*Regular` variants. The floor is declared as an **optional peer
+  dependency** on `@deepseek-ai/dsh-client-ui-settings`, which the dsh ≥ 0.1.7
+  compatibility gate compares against the running dsh version — a mismatch
+  refuses the bundle and names the exact `dsh plugin allow-version` remedy.
+  dsh < 0.1.7 predates that gate, so those runtimes still load this plugin and
+  render a broken section — install v0.1.3 there.
+- **Install it the official way.** The loader
   entry name, bundle registration id, and host plugin name are all
-  `@karoc/dsh-proxy` (matching the npm package name). Hand-written `link:`
-  dependencies are not recognized as packages by newer loaders — install via
-  `dsh plugin --profile web add @karoc/dsh-proxy` (npm) or
+  `@karoc/dsh-proxy` (matching the npm package name). A hand-written `link:`
+  dependency only counts once the package manager has materialized it under the
+  profile's `node_modules` and the profile lists it in `dsh.profile.bundles` —
+  install via `dsh plugin --profile web add @karoc/dsh-proxy` (npm) or
   `dsh plugin --profile web add link:/path/to/dsh-proxy` (source), then restart
   `dsh web`.
 - The desktop shell (`dsh-desktop`) keeps its own proxy and tray settings

package/README.zh.md

@@ -16,9 +16,9 @@
 
 ## 它新增了什么
 
-一个放在内置 **Models** 与 **Model reasoning** 页之后的新设置项 **「思磨力代理 / Smoothly Proxy」**，包含：
+一个新的设置项 **「思磨力代理 / Smoothly Proxy」**（导航顺序 25），排在内置 **Models** 页以及（若装了该插件）外部 **Model reasoning** 页之后，包含：
 
-- **上游代理卡片**：启用开关、协议选择（HTTP / HTTPS / SOCKS5）、主机、端口、可选用户名/密码，以及**测试连接**按钮（验证上游是否会说对应协议）；
+- **上游代理卡片**：启用开关、协议选择（HTTP / HTTPS / SOCKS5）、主机、端口、可选用户名/密码，以及**测试连接**按钮（SOCKS5 上游走 SOCKS5 握手、HTTP 上游走 `CONNECT` 探测；HTTPS 上游只验证 TCP 可达——不校验其 TLS 握手）；
 - **模型提供方**列表——从你的 dsh `settings.yaml` 读取的主机（`llm-deepseek.baseURL`、`llm-pi-ai.providers.<n>.baseURL`、任意 `llm-*` 命名空间），有友好显示名时以显示名标注；
 - **其它已观测主机**列表——代理在流量中见过的主机（含 `registry.npmjs.org` 等安装/更新流量），持久化进 `proxy.json` 以跨重启保留；
 - **搜索框**——输入时按主机 / 名称过滤上面两个列表。
@@ -93,8 +93,8 @@ git 安装会运行包的 `prepare` 脚本构建 bundle。pnpm ≥ 10 需要先
 用 pnpm update 升到最新版（或重 `add` 以拉取更新的 git ref）：
 
 ```sh
-dsh plugin --profile web update dsh-proxy
-# 或，若依赖规格被 pin 住：dsh plugin --profile web add dsh-proxy
+dsh plugin --profile web update @karoc/dsh-proxy
+# 或，若依赖规格被 pin 住：dsh plugin --profile web add @karoc/dsh-proxy
 ```
 
 然后**重启 `dsh web`** 以加载新客户端 bundle。
@@ -102,7 +102,7 @@ dsh plugin --profile web update dsh-proxy
 ### 卸载
 
 ```sh
-dsh plugin --profile web remove dsh-proxy
+dsh plugin --profile web remove @karoc/dsh-proxy
 ```
 
 同时从 `web` profile 移除依赖与 bundle 层。重启 `dsh web` 后该设置项消失。
@@ -120,14 +120,15 @@ src/client/index.ts   # client apply：注册 settings.section（id dsh-proxy）
 src/client/ProxySection.tsx  # 设置页（上游卡片 + 主机列表）
 src/client/styles.ts  # design-token 样式（--dsw-alias-*）+ 注入
 src/client/locales.ts # en/zh 文案
-scripts/proxy-core.spec.mjs  # 行为测试（13 场景，无外部网络）
+scripts/*.spec.mjs    # 行为测试：proxy-core.ts（13 场景）+ host route / client
+                      # boot / cordis mount，全程无外部网络
 ```
 
 ### /proxy/api 路由
 
 host 半区用同源 HTTP 路由为设置页供数（内置 `/api` 前缀被 gateway 占用，故用 `/proxy/api`）：
 
-- `GET  /proxy/api` → `{ upstream, proxiedHosts, knownHosts, hosts, providers, port }`
+- `GET  /proxy/api` → `{ ok, upstream, proxiedHosts, knownHosts, hosts, providers, port }`
 - `POST /proxy/api` `{ op: 'save', upstream, proxiedHosts }` → 清洗后持久化的配置
 - `POST /proxy/api` `{ op: 'test', upstream }` → `{ ok, detail }`
 - `POST /proxy/api` `{ op: 'persist' }` → 把观测主机并入 `knownHosts`
@@ -137,7 +138,9 @@ host 半区用同源 HTTP 路由为设置页供数（内置 `/api` 前缀被 gat
 ```sh
 pnpm install
 pnpm bundle          # 产出 lib/index.js + lib/client.js
-pnpm test            # tsc --noEmit + proxy-core.spec.mjs（13 场景）
+pnpm typecheck        # tsc --noEmit
+pnpm test             # node --test：proxy-core（13 场景）+ host-route /
+                      # client-boot / cordis-mount，无外部网络
 pnpm release:check   # 发布门禁：文档/changelog/tag/工作区/构建/registry 全过
 pnpm publish         # 跑门禁（prepack/prepublishOnly），随后 postpublish 验证线上发布
 ```
@@ -148,8 +151,10 @@ bundle 把平台包（`react`、`@deepseek-ai/cordis`、`@deepseek-ai/dsh-client
 
 - **代理是进程级出站点，不是模型逐请求读的开关。** 它通过把进程的 `HTTP(S)_PROXY` 指向自身来实现。本插件 host `apply()` 之后 dsh 发起的请求（任何子进程、以及 global dispatcher 仍是惰性的 undici fetch）会走代理。若某个 dsh 内部 fetch 在插件加载前就已实体化了 dispatcher，可能不会走它——文档化的解法是重启 dsh（桌面壳通过 spawn dsh 前设环境变量来施加同样的边界）。
 - `npm`/`pnpm` 安装/更新流量与其它一样走代理；改动**与安装/更新相关的主机**会在下次安装/更新时生效（已在进行的操作保留其环境）。
-- **设置页导航图标由壳分配，插件无法自定义。** 内置 `ui-settings-general` 的 `SettingsRoot.tsx` `navIcon(id)` 只映射已知 id，其它 id（包括本节的 `dsh-proxy`）一律齿轮。`settings.section` 注册没有 icon 字段，外部插件不 patch 壳就改不了。等 DSH 开放每节图标后，本节建议用 `dsh-client-ui-primitives` 的 `IconGlobeOutline14`。
-- **dsh ≥ 0.1.2 需以官方方式安装才生效。** loader entry 名、bundle 注册 id、host 插件名三者均为 `@karoc/dsh-proxy`（与 npm 包名一致）。新版 loader 不再把手写 `link:` 依赖识别为包——请用 `dsh plugin --profile web add @karoc/dsh-proxy`（npm）或 `dsh plugin --profile web add link:/path/to/dsh-proxy`（源码）安装，然后重启 `dsh web`。
+- **SOCKS5 上游只承载 HTTPS 目标。** SOCKS5 没有 absolute-URI 的 HTTP 模式，因此选中的纯 `http://` 主机会退回直连（设置页也写明了这一点）。
+- **设置页导航图标由壳分配，插件无法自定义。** 内置 `ui-settings-general` 的 `SettingsRoot.tsx` `navIcon(id)` 只映射已知 id，其它 id（包括本节的 `dsh-proxy`）一律齿轮。`settings.section` 注册没有 icon 字段，外部插件不 patch 壳就改不了。等 DSH 开放每节图标后，本节建议用 `dsh-client-ui-primitives` 的 `IconGlobeOutlineRegular`。
+- **本节自 v0.1.4 起要求 dsh ≥ 0.1.7（0.1.2–0.1.6 请用 v0.1.3）。** DSH 0.1.7 改了图标导出名（`IconX14` → `IconXRegular`，尺寸后缀并入 artwork 默认值、名字改为承载笔画权重；上游 commit `4937343a5e`），本节现在导入 `*Regular` 变体。该下限已声明为对 `@deepseek-ai/dsh-client-ui-settings` 的**可选 peer 依赖**，由 dsh ≥ 0.1.7 的兼容门禁按运行时版本判定（不匹配则拒绝加载该 bundle，并给出 `dsh plugin allow-version` 的具体解法）。0.1.7 之前的 dsh 没有这道门禁，仍会加载本插件并渲染出坏掉的分区——那些运行时请用 v0.1.3。
+- **需以官方方式安装才生效。** loader entry 名、bundle 注册 id、host 插件名三者均为 `@karoc/dsh-proxy`（与 npm 包名一致）。手写 `link:` 依赖只有在包管理器把它落到 profile 的 `node_modules` 下、且 profile 的 `dsh.profile.bundles` 列出它之后才算数——请用 `dsh plugin --profile web add @karoc/dsh-proxy`（npm）或 `dsh plugin --profile web add link:/path/to/dsh-proxy`（源码）安装，然后重启 `dsh web`。
 - 桌面壳（`dsh-desktop`）保留自己的代理与托盘设置窗口——本插件是独立抽取，不是替代品。两者可共存（例如把 `dsh-proxy` 装进壳的 profile，同时获得 dsh 内设置页）。
 
 ## License

package/cordis.patch.yml

@@ -1,6 +1,7 @@
 # Bundle layer applied when a profile lists this package. The row names the
 # package so the host loader resolves the node half and client-modules serves
-# exports["./client"] at /plugins/dsh-proxy/client.js. The host half starts the
+# exports["./client"] at /plugins/@karoc/dsh-proxy/client.js (the browser row
+# id is the package name, not the runtime plugin id). The host half starts the
 # loopback forward proxy and registers /proxy/api; the client half registers
 # the settings.section settings page. The loader entry `name` must equal the
 # npm package name (@karoc/dsh-proxy) — client-modules resolves it as a

package/lib/client.js

@@ -76,7 +76,7 @@ window.__ModuleLoader__.load({
 					onClick: () => {
 						setOpen((v) => !v);
 					},
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: matched?.label ?? t("protocolHttp") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, {})]
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: matched?.label ?? t("protocolHttp") }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutlineRegular, {})]
 				})
 			});
 		}
@@ -370,7 +370,7 @@ window.__ModuleLoader__.load({
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("proxiedHostsHint") }),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Input, {
 								className: "dsh-proxy-search",
-								icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconGlobeOutline14, {}),
+								icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconGlobeOutlineRegular, {}),
 								placeholder: t("searchPlaceholder"),
 								value: query,
 								onChange: (e) => {
@@ -427,7 +427,7 @@ window.__ModuleLoader__.load({
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
 							variant: "outline",
 							size: "md",
-							icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconLinkOutline14, {}),
+							icon: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconLinkOutlineRegular, {}),
 							disabled: testing || !enabled,
 							onClick: () => {
 								test();

package/lib/index.js

@@ -34,7 +34,7 @@ import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 *   * the proxy itself uses raw net/http (never undici's env-proxy), so it can
 *     never route its own outbound connections back through itself.
 */
-const LOOPBACK = /^(127\.0\.0\.1|localhost|::1|0\.0\.0\.0)$/i;
+const LOOPBACK = /^(127\.\d{1,3}\.\d{1,3}\.\d{1,3}|localhost|::1|0\.0\.0\.0)$/i;
 /** Upstream proxy protocol, defaulting to http (legacy configs have no field). */
 function upstreamProtocol(cfg) {
 	return String(cfg?.upstream?.protocol || "http").toLowerCase();

package/package.json

@@ -1,12 +1,16 @@
 {
   "name": "@karoc/dsh-proxy",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Smoothly Proxy (思磨力代理插件): external DeepSeek Harness plugin — a model-provider forward proxy with per-host routing and a Settings page.",
   "type": "module",
   "main": "lib/index.js",
   "exports": {
-    ".": { "default": "./lib/index.js" },
-    "./client": { "default": "./lib/client.js" },
+    ".": {
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "default": "./lib/client.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -20,11 +24,12 @@
     "LICENSE"
   ],
   "dsh": {
-    "bundle": { "patch": "./cordis.patch.yml" },
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
     "client": {
       "inject": [
         "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-slots",
         "@deepseek-ai/dsh-client-ui-primitives"
@@ -36,21 +41,43 @@
     "bundle": "tsdown --config ./tsdown.config.ts",
     "prepare": "tsdown --config ./tsdown.config.ts",
     "typecheck": "tsc --noEmit",
-    "test": "node --test scripts/proxy-core.spec.mjs scripts/host-route.spec.mjs scripts/client-boot.spec.mjs scripts/cordis-mount.spec.mjs",
+    "test": "node --test scripts/proxy-core.spec.mjs scripts/host-route.spec.mjs scripts/client-boot.spec.mjs scripts/cordis-mount.spec.mjs && node scripts/check-guarantees.mjs && node scripts/test-negative-controls.mjs",
     "accept": "node scripts/accept-gui.mjs && node scripts/verify-tooltip.mjs",
     "release:check": "node scripts/release-check.mjs",
     "prepack": "node scripts/release-check.mjs",
     "prepublishOnly": "node scripts/release-check.mjs && tsdown --config ./tsdown.config.ts",
-    "postpublish": "node scripts/post-publish-check.mjs"
+    "postpublish": "node scripts/post-publish-check.mjs",
+    "verify:guarantees": "node scripts/check-guarantees.mjs",
+    "test:controls": "node scripts/test-negative-controls.mjs",
+    "verify:all": "node scripts/verify-all.mjs",
+    "verify:fresh": "node scripts/verify-all.mjs --check-fresh"
   },
-  "engines": { "node": ">=18" },
-  "keywords": ["deepseek-harness", "dsh", "plugin", "proxy", "model-provider", "settings", "smoothly-proxy", "sp"],
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "plugin",
+    "proxy",
+    "model-provider",
+    "settings",
+    "smoothly-proxy",
+    "sp"
+  ],
   "author": "karoc",
   "license": "MIT",
-  "repository": { "type": "git", "url": "git+https://github.com/karoc/dsh-proxy.git" },
-  "bugs": { "url": "https://github.com/karoc/dsh-proxy/issues" },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/karoc/dsh-proxy.git"
+  },
+  "bugs": {
+    "url": "https://github.com/karoc/dsh-proxy/issues"
+  },
   "homepage": "https://github.com/karoc/dsh-proxy",
-  "publishConfig": { "access": "public" },
+  "publishConfig": {
+    "access": "public"
+  },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "@types/react": "~18.3.1",
@@ -58,5 +85,13 @@
     "tsdown": "^0.22.0",
     "typescript": "^5.6.0"
   },
-  "peerDependencies": { "react": "^18.2.0" }
+  "peerDependencies": {
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.7-rc.1",
+    "react": "^18.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-client-ui-settings": {
+      "optional": true
+    }
+  }
 }