dsh-agent-proxy 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 1098441615
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,86 @@
-# Temporary Holding Version
+# dsh-agent-proxy
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+给 DSH 的设置页加一个「代理」开关：打开后，DSH 替你运行的 `git clone`、`npm install`、`pip install` 等命令走本机代理，不再因为连不上 GitHub / npm 而超时。
+
+## 它做什么
+
+打开开关时，插件从两个层面让命令走代理：
+
+**1. 工具配置文件**（对已经在运行的 shell 也生效）
+
+| 工具 | 写入 |
+| --- | --- |
+| git | `~/.gitconfig` 的 `[http] proxy`、`[https] proxy` |
+| npm | `~/.npmrc` 的 `proxy`、`https-proxy` |
+| pip | `pip.ini` / `pip.conf` 的 `[global] proxy` |
+
+打开前会记录每一项的原值；关闭时逐项还原（原本没有的键会被删掉，空下来的段/文件也会清理）。你原有的 `[user]`、`registry=`、`timeout=` 等其他配置不受影响。
+
+**2. 子进程环境变量**（对之后新起的命令生效）
+
+DSH 每次派生命令都会重建子进程环境，并重新套用它**启动时**解析出的代理策略，所以 `http_proxy` / `https_proxy` / `all_proxy` 这几个名字会在运行时被清掉。插件改用各工具自己的环境通道：
+
+```
+GIT_CONFIG_PARAMETERS        http.proxy / https.proxy（等于 git -c，不写文件）
+npm_config_proxy             npm_config_https_proxy
+PIP_PROXY                    PIP_HTTPS_PROXY
+http_proxy https_proxy all_proxy（及大写形式）、NODE_USE_ENV_PROXY=1
+```
+
+## 代理地址从哪来
+
+按优先级：
+
+1. 插件配置里的 `proxyUrl`；
+2. Windows 系统代理（HKCU Internet Settings，即 Clash / V2Ray 打开的「系统代理」）；
+3. DSH 启动时已导出的 `HTTPS_PROXY` / `HTTP_PROXY`。
+
+设置页开关下方会显示当前生效的地址与来源。
+
+## 安装
+
+从 npm 安装（发布后）：
+
+```bash
+dsh plugin --profile desktop add dsh-agent-proxy
+```
+
+也可以直接从本目录安装（本地开发）：
+
+```powershell
+dsh plugin --profile desktop add <本包目录>
+```
+
+安装后完全退出并重开 DSH，打开 **设置 → 代理**。
+
+## 配置
+
+开关状态保存在 `$DSH_HOME/agent-proxy.json`，重启后保留。需要固定地址时：
+
+```yaml
+- insert:
+    - id: agent-proxy
+      name: 'dsh-agent-proxy'
+      config:
+        enabled: true
+        proxyUrl: 'http://127.0.0.1:7890'
+```
+
+`proxyUrl` 留空即自动检测系统代理；`enabled` 只是状态文件尚不存在时的初始默认值。
+
+## 验证
+
+开启后让 DSH 执行：
+
+```bash
+git config --global --get http.proxy    # 应输出代理地址
+git ls-remote https://github.com/FNOSP/fnos-dsh HEAD
+```
+
+`git` 的详细输出里出现 `Trying 127.0.0.1:789x` 与 `CONNECT tunnel established` 即表示走了代理。
+
+## 已知边界
+
+- 只影响 DSH 派生的命令与 git/npm/pip 的全局代理配置；关闭后原值还原。
+- 代理地址只支持 HTTP(S) 代理（`http://host:port`），不支持 SOCKS5 / PAC。
+- 只认 `http_proxy` 且不读任何配置文件的命令（如某些 `curl` 调用）不一定被覆盖。

package/client.js

@@ -0,0 +1,255 @@
+window.__ModuleLoader__.load({
+  id: 'dsh-agent-proxy',
+  factory(require) {
+    const React = require('react');
+    const h = React.createElement;
+
+    const NS = 'dsh-agent-proxy';
+    const API = '/api/dsh-agent-proxy';
+
+    const ZH = {
+      title: '代理',
+      rowTitle: '代理 dsh',
+      rowHint: 'dsh 使用 git 等工具超时时可开启代理',
+      loading: '读取中…',
+      viaSystem: 'Windows 系统代理',
+      viaConfig: '配置中的代理',
+      viaEnv: '环境变量中的代理',
+      current: '当前代理',
+      noProxy: '未检测到系统代理，请先打开代理软件的系统代理，或在插件配置里填写 proxyUrl',
+      loadFailed: '读取代理状态失败',
+      toggleFailed: '切换失败',
+      saveFailed: '已生效，但没能写入配置，重启后会恢复为关闭',
+    };
+
+    const EN = {
+      title: 'Proxy',
+      rowTitle: 'Proxy for dsh',
+      rowHint: 'Turn this on when git and other tools keep timing out',
+      loading: 'Loading…',
+      viaSystem: 'Windows system proxy',
+      viaConfig: 'proxy from config',
+      viaEnv: 'proxy from environment',
+      current: 'Current proxy',
+      noProxy: 'No system proxy detected. Turn on your proxy client system proxy, or set proxyUrl in the plugin config.',
+      loadFailed: 'Failed to read the proxy state',
+      toggleFailed: 'Failed to switch',
+      saveFailed: 'Applied, but the setting could not be saved; it reverts to off after a restart',
+    };
+
+    const styles = {
+      card: {
+        border: '1px solid var(--dsw-alias-border-l2, #e3e6eb)',
+        background: 'var(--dsw-alias-bg-layer-3, #ffffff)',
+        borderRadius: '12px',
+        padding: '16px',
+        display: 'flex',
+        flexDirection: 'column',
+        gap: '8px',
+        boxSizing: 'border-box',
+      },
+      row: {
+        display: 'flex',
+        alignItems: 'flex-start',
+        justifyContent: 'space-between',
+        gap: '16px',
+      },
+      text: {
+        display: 'flex',
+        flexDirection: 'column',
+        gap: '6px',
+        minWidth: 0,
+      },
+      rowTitle: {
+        fontSize: '14px',
+        fontWeight: 500,
+        lineHeight: 1.4,
+        color: 'var(--dsw-alias-label-primary, #1f2329)',
+      },
+      hint: {
+        fontSize: '12px',
+        lineHeight: 1.5,
+        color: 'var(--dsw-alias-label-tertiary, #6b7280)',
+      },
+      detail: {
+        fontSize: '12px',
+        lineHeight: 1.5,
+        color: 'var(--dsw-alias-label-secondary, #57606a)',
+        wordBreak: 'break-all',
+      },
+      warn: {
+        fontSize: '12px',
+        lineHeight: 1.5,
+        color: 'var(--dsw-alias-label-warning, #9a6700)',
+      },
+      bad: {
+        fontSize: '12px',
+        lineHeight: 1.5,
+        color: 'var(--dsw-alias-label-danger, #cf222e)',
+      },
+    };
+
+    function Switch({ checked, disabled, label, onChange }) {
+      return h(
+        'button',
+        {
+          type: 'button',
+          role: 'switch',
+          'aria-checked': checked ? 'true' : 'false',
+          'aria-label': label,
+          'aria-busy': disabled ? 'true' : 'false',
+          disabled: disabled,
+          onClick: onChange,
+          style: {
+            position: 'relative',
+            flex: 'none',
+            width: '44px',
+            height: '24px',
+            padding: 0,
+            border: 'none',
+            borderRadius: '999px',
+            cursor: disabled ? 'default' : 'pointer',
+            background: checked
+              ? 'var(--dsw-alias-state-business-primary, #4f8cff)'
+              : 'var(--dsw-alias-bg-layer-2, #e9ecf2)',
+            opacity: disabled ? 0.65 : 1,
+            transition: 'background .16s',
+          },
+        },
+        h('span', {
+          'aria-hidden': true,
+          style: {
+            position: 'absolute',
+            top: '2px',
+            left: checked ? '22px' : '2px',
+            width: '20px',
+            height: '20px',
+            borderRadius: '50%',
+            background: '#ffffff',
+            boxShadow: '0 1px 2px rgba(0, 0, 0, .22)',
+            transition: 'left .16s',
+          },
+        }),
+      );
+    }
+
+    function AgentProxySection({ t }) {
+      const [state, setState] = React.useState(null);
+      const [busy, setBusy] = React.useState(false);
+      const [message, setMessage] = React.useState(null);
+
+      const load = React.useCallback(async () => {
+        try {
+          const response = await fetch(`${API}/state`, {
+            headers: { accept: 'application/json' },
+            credentials: 'same-origin',
+          });
+          const body = await response.json();
+          if (!body || body.ok !== true || !body.data) throw new Error(body && body.error ? body.error : 'bad response');
+          setState(body.data);
+          setMessage(null);
+        } catch (error) {
+          setMessage({ kind: 'bad', text: t('loadFailed') });
+        }
+      }, [t]);
+
+      React.useEffect(() => {
+        load();
+      }, [load]);
+
+      const toggle = async () => {
+        if (busy) return;
+        setBusy(true);
+        setMessage(null);
+        try {
+          const next = !(state && state.enabled);
+          const response = await fetch(`${API}/toggle`, {
+            method: 'POST',
+            credentials: 'same-origin',
+            headers: { 'content-type': 'application/json', 'x-dsh-agent-proxy': '1' },
+            body: JSON.stringify({ enabled: next }),
+          });
+          const body = await response.json();
+          if (!body || body.ok !== true || !body.data) {
+            throw new Error(body && body.error ? body.error : t('toggleFailed'));
+          }
+          setState(body.data);
+          if (body.data.saved === false) setMessage({ kind: 'warn', text: t('saveFailed') });
+          if (body.data.enabled && body.data.error) setMessage({ kind: 'bad', text: body.data.error });
+        } catch (error) {
+          setMessage({ kind: 'bad', text: String((error && error.message) || error) });
+          load();
+        } finally {
+          setBusy(false);
+        }
+      };
+
+      const enabled = Boolean(state && state.enabled);
+      const proxyUrl = state && (state.proxyUrl || state.detectedUrl);
+      const sourceLabel = (() => {
+        const source = state && (state.source || state.detectedSource);
+        if (source === 'system') return t('viaSystem');
+        if (source === 'config') return t('viaConfig');
+        if (source === 'env') return t('viaEnv');
+        return '';
+      })();
+
+      const lines = [];
+      if (message) lines.push(h('div', { key: 'msg', style: message.kind === 'warn' ? styles.warn : styles.bad }, message.text));
+      if (state === null && !message) lines.push(h('div', { key: 'loading', style: styles.hint }, t('loading')));
+      if (state && enabled && proxyUrl) {
+        lines.push(
+          h(
+            'div',
+            { key: 'detail', style: styles.detail },
+            `${t('current')}: ${proxyUrl}${sourceLabel ? `（${sourceLabel}）` : ''}`,
+          ),
+        );
+      }
+      if (state && !enabled && !proxyUrl) lines.push(h('div', { key: 'noproxy', style: styles.warn }, t('noProxy')));
+
+      return h(
+        'div',
+        { style: styles.card },
+        h(
+          'div',
+          { style: styles.row },
+          h(
+            'div',
+            { style: styles.text },
+            h('div', { style: styles.rowTitle }, t('rowTitle')),
+            h('div', { style: styles.hint }, t('rowHint')),
+          ),
+          h(Switch, {
+            checked: enabled,
+            disabled: busy || state === null,
+            label: t('rowTitle'),
+            onChange: toggle,
+          }),
+        ),
+        lines,
+      );
+    }
+
+    return {
+      inject: ['slots', 'locale'],
+      apply(ctx) {
+        ctx.effect(() => ctx.locale.register(NS, { zh: ZH, en: EN }), 'dsh-agent-proxy: copy dictionaries');
+        const t = ctx.locale.bind(NS);
+        ctx.slots.inject('settings.section', () =>
+          ctx.slots.register(
+            {
+              name: 'settings.section',
+              id: 'agent-proxy',
+              order: 17,
+              locale: NS,
+              label: () => t('title'),
+              inject: () => ({ t }),
+            },
+            AgentProxySection,
+          ),
+        );
+      },
+    };
+  },
+});

package/cordis.patch.yml

@@ -0,0 +1,14 @@
+# dsh-agent-proxy 的 bundle patch：把一个开启/关闭开关插入 profile 的插件树。
+# 安装后无需手动编辑 profile 的 cordis.patch.yml。
+#
+# 开关状态由插件通过 config editor 写回本行的 config，重启 DSH 后仍保留。
+# proxyUrl 留空表示自动读取 Windows 系统代理（Clash / V2Ray 等），也可显式填写：
+#   config:
+#     enabled: true
+#     proxyUrl: 'http://127.0.0.1:7890'
+- insert:
+    - id: agent-proxy
+      name: 'dsh-agent-proxy'
+      config:
+        enabled: false
+        proxyUrl: ''

package/icon.svg

@@ -0,0 +1,14 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" role="img" aria-label="Proxy switch">
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#3b82f6"/>
+      <stop offset="1" stop-color="#0ea5e9"/>
+    </linearGradient>
+  </defs>
+  <rect width="64" height="64" rx="15" fill="url(#bg)"/>
+  <circle cx="30" cy="30" r="14" fill="none" stroke="#ffffff" stroke-width="3"/>
+  <path d="M16 30h28M30 16c5 4 7.5 8.5 7.5 14S35 40 30 44c-5-4-7.5-8.5-7.5-14S25 20 30 16Z"
+        fill="none" stroke="#ffffff" stroke-width="3" stroke-linejoin="round"/>
+  <path d="M44 42l6 6M50 42v6h-6" fill="none" stroke="#ffffff" stroke-width="3"
+        stroke-linecap="round" stroke-linejoin="round"/>
+</svg>

package/index.js

@@ -0,0 +1,676 @@
+/**
+ * dsh-agent-proxy — a settings-page switch that makes the commands DSH runs
+ * (git clone, npm install, pip install …) go through a local HTTP proxy.
+ *
+ * Two layers are applied while the switch is on:
+ *
+ *   1. Tool configuration files — the only layer a shell that was already
+ *      running can see. DSH can keep a long-lived shell session, and that
+ *      process's environment never changes, so the environment alone cannot
+ *      reach it:
+ *        - git: `http.proxy` / `https.proxy` (global config, original value kept)
+ *        - npm: `proxy` / `https-proxy` in the user .npmrc
+ *        - pip: `proxy` in pip.ini / pip.conf
+ *      Every original value is recorded in `$DSH_HOME/agent-proxy.json` and
+ *      restored on switch-off.
+ *   2. The child environment, for tools spawned afterwards. The Harness
+ *      rebuilds it and re-applies its *launch-time* proxy policy, which clears
+ *      `http_proxy` / `https_proxy` / `all_proxy`; the per-tool names survive:
+ *        - `GIT_CONFIG_PARAMETERS` (git's own `-c` channel)
+ *        - `npm_config_proxy` / `npm_config_https_proxy`
+ *        - `PIP_PROXY` / `PIP_HTTPS_PROXY`
+ *
+ * Proxy address resolution, highest first:
+ *   1. the row's `config.proxyUrl`
+ *   2. the Windows system proxy (HKCU Internet Settings, when enabled)
+ *   3. a proxy already exported in the Harness environment
+ *
+ * `config.enabled` is only the initial default before the state file exists.
+ */
+
+import { execFileSync } from 'node:child_process'
+import { mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+
+export const name = 'dsh-agent-proxy'
+
+const API_PREFIX = '/api/dsh-agent-proxy'
+const MUTATION_HEADER = 'x-dsh-agent-proxy'
+const NODE_PROXY_FLAG = 'NODE_USE_ENV_PROXY'
+const PROXY_ENV_KEYS = ['http_proxy', 'https_proxy', 'all_proxy', 'HTTP_PROXY', 'HTTPS_PROXY', 'ALL_PROXY']
+const NPM_ENV_KEYS = ['npm_config_proxy', 'npm_config_https_proxy']
+const PIP_ENV_KEYS = ['PIP_PROXY', 'PIP_HTTPS_PROXY']
+/** Process-wide flag: this process currently carries the plugin's proxy values. */
+const APPLIED = Symbol.for('dsh-agent-proxy.applied')
+/** The environment as it was when this plugin first loaded in this process. */
+const ORIGINAL = Symbol.for('dsh-agent-proxy.original')
+
+/* --------------------------------------------------------------- utilities */
+
+function messageOf(error) {
+  if (!error) return '未知错误'
+  return String(error.message ?? error)
+}
+
+function trimOrEmpty(value) {
+  return typeof value === 'string' ? value.trim() : ''
+}
+
+/** One proxy URL from the accepted forms: URL, `host:port`, WinINET `http=…;https=…`. */
+function normalizeProxyUrl(raw) {
+  const value = trimOrEmpty(raw)
+  if (!value) return ''
+  if (value.includes('=')) {
+    const parts = value.split(';').map((part) => part.trim()).filter(Boolean)
+    const http = parts.find((part) => part.toLowerCase().startsWith('http=')) ?? parts[0]
+    const endpoint = http ? http.slice(http.indexOf('=') + 1).trim() : ''
+    return normalizeProxyUrl(endpoint)
+  }
+  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(value)) {
+    try {
+      const url = new URL(value)
+      if (!url.hostname) return ''
+      return value.replace(/\/+$/, '')
+    } catch {
+      return ''
+    }
+  }
+  if (/^[^\s/]+:\d{1,5}$/.test(value)) return `http://${value}`
+  return ''
+}
+
+/** HKCU Internet Settings proxy, or '' when Windows has no system proxy on. */
+function readWindowsSystemProxy() {
+  if (process.platform !== 'win32') return ''
+  let output = ''
+  try {
+    output = execFileSync(
+      'reg',
+      ['query', 'HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings'],
+      { encoding: 'utf8', windowsHide: true, timeout: 4000, stdio: ['ignore', 'pipe', 'ignore'] },
+    )
+  } catch {
+    return ''
+  }
+  const enabled = /ProxyEnable\s+REG_DWORD\s+0x([0-9a-f]+)/i.exec(output)
+  if (!enabled || Number.parseInt(enabled[1], 16) !== 1) return ''
+  const server = /ProxyServer\s+REG_SZ\s+([^\r\n]+)/i.exec(output)
+  return normalizeProxyUrl(server?.[1] ?? '')
+}
+
+function proxyFromEnvironment() {
+  for (const key of ['HTTPS_PROXY', 'https_proxy', 'HTTP_PROXY', 'http_proxy', 'ALL_PROXY', 'all_proxy']) {
+    const value = normalizeProxyUrl(process.env[key])
+    if (value) return value
+  }
+  return ''
+}
+
+/** Resolve the address to use, with a note about where it came from. */
+function resolveProxy(configured) {
+  const explicit = normalizeProxyUrl(configured)
+  if (explicit) return { url: explicit, source: 'config' }
+  const system = readWindowsSystemProxy()
+  if (system) return { url: system, source: 'system' }
+  const exported = proxyFromEnvironment()
+  if (exported) return { url: exported, source: 'env' }
+  return { url: '', source: '' }
+}
+
+/* -------------------------------------------------------------- persistence */
+
+function stateFile() {
+  const home = trimOrEmpty(process.env.DSH_HOME) || join(homedir(), '.dsh')
+  return join(home, 'agent-proxy.json')
+}
+
+function readState() {
+  try {
+    const parsed = JSON.parse(readFileSync(stateFile(), 'utf8'))
+    return parsed && typeof parsed === 'object' ? parsed : undefined
+  } catch {
+    return undefined
+  }
+}
+
+function writeState(state) {
+  const file = stateFile()
+  mkdirSync(dirname(file), { recursive: true })
+  writeFileSync(file, `${JSON.stringify(state, null, 2)}\n`)
+}
+
+/* --------------------------------------------------------------- git config */
+
+function gitconfigPath() {
+  const configured = trimOrEmpty(process.env.GIT_CONFIG_GLOBAL)
+  if (configured) return configured
+  return join(process.env.USERPROFILE || homedir(), '.gitconfig')
+}
+
+/** Section name of a header line; sub-section headers (`[http "url"]`) never match. */
+function sectionNameOf(line) {
+  const match = /^\s*\[([^\]]+)\]\s*$/.exec(line)
+  return match ? match[1].trim().toLowerCase() : undefined
+}
+
+function readSectionProxy(text, section) {
+  let value = ''
+  let current = ''
+  for (const line of splitLines(text)) {
+    const name = sectionNameOf(line)
+    if (name !== undefined) {
+      current = name
+      continue
+    }
+    if (current !== section) continue
+    const match = /^\s*proxy\s*=\s*(.*)$/i.exec(line)
+    if (match) value = match[1].trim()
+  }
+  return value
+}
+
+/** Replace (or delete, with `undefined`) the `proxy` key inside one plain section. */
+/** Drop sections that only kept a header after the proxy key was removed. */
+function squashEmptySections(text) {
+  const eol = text.includes('\r\n') ? '\r\n' : '\n'
+  const lines = splitLines(text)
+  const out = []
+  for (let index = 0; index < lines.length; index += 1) {
+    const name = sectionNameOf(lines[index])
+    if (name !== undefined) {
+      let hasContent = false
+      for (let next = index + 1; next < lines.length; next += 1) {
+        if (sectionNameOf(lines[next]) !== undefined) break
+        if (lines[next].trim() !== '') {
+          hasContent = true
+          break
+        }
+      }
+      if (!hasContent) {
+        while (index + 1 < lines.length && lines[index + 1].trim() === '') index += 1
+        continue
+      }
+    }
+    out.push(lines[index])
+  }
+  while (out.length && out[out.length - 1].trim() === '') out.pop()
+  return out.length ? out.join(eol) + eol : ''
+}
+
+function rewriteGitSection(text, section, proxy) {
+  const eol = text.includes('\r\n') ? '\r\n' : '\n'
+  const out = []
+  let current = ''
+  let found = false
+  for (const line of splitLines(text)) {
+    const name = sectionNameOf(line)
+    if (name !== undefined) {
+      current = name
+      out.push(line)
+      if (current === section) {
+        found = true
+        if (proxy !== undefined) out.push(`\tproxy = ${proxy}`)
+      }
+      continue
+    }
+    if (current === section && /^\s*proxy\s*=/i.test(line)) continue
+    out.push(line)
+  }
+  if (!found && proxy !== undefined) {
+    if (out.length && out[out.length - 1].trim() !== '') out.push('')
+    out.push(`[${section}]`, `\tproxy = ${proxy}`)
+  }
+  return out.length ? out.join(eol) + eol : ''
+}
+
+function readGitProxy() {
+  const text = readTextFile(gitconfigPath())
+  return { http: readSectionProxy(text, 'http'), https: readSectionProxy(text, 'https') }
+}
+
+function applyGitProxy(url) {
+  let text = readTextFile(gitconfigPath())
+  text = rewriteGitSection(text, 'http', url)
+  text = rewriteGitSection(text, 'https', url)
+  writeTextFile(gitconfigPath(), text)
+}
+
+function restoreGitProxy(saved) {
+  let text = readTextFile(gitconfigPath())
+  text = rewriteGitSection(text, 'http', trimOrEmpty(saved?.http) || undefined)
+  text = rewriteGitSection(text, 'https', trimOrEmpty(saved?.https) || undefined)
+  writeTextFile(gitconfigPath(), squashEmptySections(text))
+}
+
+/* --------------------------------------------------------------- npm config */
+
+function npmrcPath() {
+  const configured = trimOrEmpty(process.env.npm_config_userconfig)
+  if (configured) return configured
+  return join(process.env.USERPROFILE || homedir(), '.npmrc')
+}
+
+function splitLines(text) {
+  if (!text) return []
+  const lines = text.split(/\r?\n/)
+  if (lines.length && lines[lines.length - 1] === '') lines.pop()
+  return lines
+}
+
+function npmProxyValue(text) {
+  const values = { proxy: '', 'https-proxy': '' }
+  for (const line of splitLines(text)) {
+    const match = /^\s*(proxy|https-proxy)\s*=\s*(.*)$/i.exec(line)
+    if (match) values[match[1].toLowerCase()] = match[2].trim()
+  }
+  return values
+}
+
+function npmWithProxy(text, url) {
+  const eol = text.includes('\r\n') ? '\r\n' : '\n'
+  const lines = splitLines(text).filter((line) => !/^\s*(proxy|https-proxy)\s*=/i.test(line))
+  lines.push(`proxy=${url}`, `https-proxy=${url}`)
+  return lines.join(eol) + eol
+}
+
+function npmWithoutProxy(text, saved) {
+  const eol = text.includes('\r\n') ? '\r\n' : '\n'
+  const lines = splitLines(text).filter((line) => !/^\s*(proxy|https-proxy)\s*=/i.test(line))
+  if (trimOrEmpty(saved?.proxy)) lines.push(`proxy=${saved.proxy}`)
+  if (trimOrEmpty(saved?.['https-proxy'])) lines.push(`https-proxy=${saved['https-proxy']}`)
+  return lines.length ? lines.join(eol) + eol : ''
+}
+
+function readTextFile(path) {
+  try {
+    return readFileSync(path, 'utf8')
+  } catch {
+    return ''
+  }
+}
+
+function writeTextFile(path, text) {
+  if (text.trim() === '') {
+    try {
+      unlinkSync(path)
+    } catch {
+      // already gone
+    }
+    return
+  }
+  mkdirSync(dirname(path), { recursive: true })
+  writeFileSync(path, text)
+}
+
+/* --------------------------------------------------------------- pip config */
+
+function pipIniPath() {
+  const configured = trimOrEmpty(process.env.PIP_CONFIG_FILE)
+  if (configured) return configured
+  if (process.platform === 'win32') {
+    return join(process.env.APPDATA || join(homedir(), 'AppData', 'Roaming'), 'pip', 'pip.ini')
+  }
+  return join(homedir(), '.config', 'pip', 'pip.conf')
+}
+
+function pipProxyValue(text) {
+  let value = ''
+  let section = ''
+  for (const line of splitLines(text)) {
+    const header = /^\s*\[([^\]]+)\]\s*$/.exec(line)
+    if (header) {
+      section = header[1].trim().toLowerCase()
+      continue
+    }
+    if (section !== 'global') continue
+    const match = /^\s*proxy\s*=\s*(.*)$/i.exec(line)
+    if (match) value = match[1].trim()
+  }
+  return value
+}
+
+function pipWithProxy(text, url) {
+  const eol = text.includes('\r\n') ? '\r\n' : '\n'
+  const out = []
+  let inGlobal = false
+  let wrote = false
+  for (const line of splitLines(text)) {
+    const header = /^\s*\[([^\]]+)\]\s*$/.exec(line)
+    if (header) {
+      inGlobal = header[1].trim().toLowerCase() === 'global'
+      out.push(line)
+      if (inGlobal) {
+        out.push(`proxy = ${url}`)
+        wrote = true
+      }
+      continue
+    }
+    if (inGlobal && /^\s*proxy\s*=/i.test(line)) continue
+    out.push(line)
+  }
+  if (!wrote) {
+    if (out.length && out[out.length - 1].trim() !== '') out.push('')
+    out.push('[global]', `proxy = ${url}`)
+  }
+  return out.join(eol) + eol
+}
+
+function pipWithoutProxy(text, saved) {
+  const eol = text.includes('\r\n') ? '\r\n' : '\n'
+  const original = trimOrEmpty(saved?.proxy)
+  const out = []
+  let inGlobal = false
+  let wrote = false
+  for (const line of splitLines(text)) {
+    const header = /^\s*\[([^\]]+)\]\s*$/.exec(line)
+    if (header) {
+      inGlobal = header[1].trim().toLowerCase() === 'global'
+      out.push(line)
+      if (inGlobal && original) {
+        out.push(`proxy = ${original}`)
+        wrote = true
+      }
+      continue
+    }
+    if (inGlobal && /^\s*proxy\s*=/i.test(line)) continue
+    out.push(line)
+  }
+  if (original && !wrote) {
+    if (out.length && out[out.length - 1].trim() !== '') out.push('')
+    out.push('[global]', `proxy = ${original}`)
+  }
+  return out.length ? out.join(eol) + eol : ''
+}
+
+/* ------------------------------------------------ tool config orchestration */
+
+function captureToolConfig() {
+  const npmText = readTextFile(npmrcPath())
+  const pipText = readTextFile(pipIniPath())
+  return {
+    git: readGitProxy(),
+    npm: npmProxyValue(npmText),
+    pip: { proxy: pipProxyValue(pipText) },
+  }
+}
+
+function applyToolConfig(url) {
+  applyGitProxy(url)
+  writeTextFile(npmrcPath(), npmWithProxy(readTextFile(npmrcPath()), url))
+  writeTextFile(pipIniPath(), pipWithProxy(readTextFile(pipIniPath()), url))
+}
+
+function restoreToolConfig(saved) {
+  if (!saved) return
+  restoreGitProxy(saved.git)
+  writeTextFile(npmrcPath(), npmWithoutProxy(readTextFile(npmrcPath()), saved.npm))
+  writeTextFile(pipIniPath(), squashEmptySections(pipWithoutProxy(readTextFile(pipIniPath()), saved.pip)))
+}
+
+/* ---------------------------------------------------- per-tool environment */
+
+function isProxyKey(key) {
+  return PROXY_ENV_KEYS.some((candidate) => candidate.toLowerCase() === key.toLowerCase())
+}
+
+function isManagedKey(key) {
+  if (isProxyKey(key)) return true
+  if (key === NODE_PROXY_FLAG) return true
+  const upper = key.toUpperCase()
+  const lower = key.toLowerCase()
+  if (upper === 'GIT_CONFIG_PARAMETERS') return true
+  if (NPM_ENV_KEYS.includes(lower)) return true
+  if (PIP_ENV_KEYS.includes(upper)) return true
+  return false
+}
+
+/** Snapshot every managed environment entry exactly as it is now. */
+function captureProxyEnvironment() {
+  const snapshot = new Map()
+  for (const key of Object.keys(process.env)) {
+    if (isManagedKey(key)) snapshot.set(key, process.env[key])
+  }
+  return snapshot
+}
+
+/** `http.proxy` / `https.proxy` through git's environment config (no file edited). */
+function gitProxyParameters(url) {
+  const quote = (value) => `'${String(value).replace(/'/g, `'\\''`)}'`
+  const existing = trimOrEmpty(process.env.GIT_CONFIG_PARAMETERS)
+  const ours = [`${quote('http.proxy')}=${quote(url)}`, `${quote('https.proxy')}=${quote(url)}`]
+  return existing ? `${existing} ${ours.join(' ')}` : ours.join(' ')
+}
+
+function writeProxyEnvironment(url) {
+  for (const key of PROXY_ENV_KEYS) process.env[key] = url
+  process.env[NODE_PROXY_FLAG] = '1'
+  process.env.GIT_CONFIG_PARAMETERS = gitProxyParameters(url)
+  for (const key of NPM_ENV_KEYS) process.env[key] = url
+  for (const key of PIP_ENV_KEYS) process.env[key] = url
+}
+
+function restoreProxyEnvironment(snapshot) {
+  if (!snapshot) return
+  for (const key of Object.keys(process.env)) {
+    if (isManagedKey(key)) delete process.env[key]
+  }
+  for (const [key, value] of snapshot) {
+    if (value !== undefined) process.env[key] = value
+  }
+}
+
+if (globalThis[ORIGINAL] === undefined) globalThis[ORIGINAL] = captureProxyEnvironment()
+
+function restoreOriginalEnvironment() {
+  restoreProxyEnvironment(globalThis[ORIGINAL])
+}
+
+/* ------------------------------------------------------- settings transport */
+
+function jsonResponse(status, payload) {
+  return new Response(JSON.stringify(payload), {
+    status,
+    headers: {
+      'content-type': 'application/json; charset=utf-8',
+      'cache-control': 'no-store',
+    },
+  })
+}
+
+function fail(status, error) {
+  return jsonResponse(status, { ok: false, error })
+}
+
+async function readJsonBody(request, limit = 1 << 16) {
+  const text = await request.text()
+  if (Buffer.byteLength(text) > limit) {
+    throw Object.assign(new Error('request body is too large'), { statusCode: 413 })
+  }
+  if (!text.trim()) return {}
+  try {
+    return JSON.parse(text)
+  } catch {
+    throw Object.assign(new Error('request body is not valid JSON'), { statusCode: 400 })
+  }
+}
+
+/** Same-origin + explicit client marker, mirroring the Harness' own routes. */
+function guardMutation(request) {
+  if (request.headers.get(MUTATION_HEADER) !== '1') return 'missing client marker header'
+  const origin = request.headers.get('origin')
+  if (origin) {
+    try {
+      const requestHost = request.headers.get('host') ?? new URL(request.url).host
+      if (new URL(origin).host !== requestHost) return 'cross-origin mutation request'
+    } catch {
+      return 'invalid origin'
+    }
+  }
+  return undefined
+}
+
+/* ------------------------------------------------------------------ plugin */
+
+export function apply(ctx, rawConfig) {
+  const config = rawConfig && typeof rawConfig === 'object' ? rawConfig : {}
+
+  /** Live view exposed to the settings page. */
+  const status = { enabled: false, proxyUrl: '', source: '', error: '' }
+  // A config reload creates a new instance on top of the old environment; drop
+  // whatever the previous instance left before deciding the state again.
+  if (globalThis[APPLIED]) {
+    restoreOriginalEnvironment()
+    delete globalThis[APPLIED]
+  }
+
+  const detect = () => resolveProxy(config.proxyUrl)
+
+  const enable = () => {
+    if (status.enabled) return status
+    const resolved = detect()
+    if (!resolved.url) {
+      status.error = 'no-proxy'
+      return status
+    }
+    const existing = readState()
+    const restore = existing?.restore ?? captureToolConfig()
+    applyToolConfig(resolved.url)
+    writeProxyEnvironment(resolved.url)
+    writeState({ enabled: true, proxyUrl: resolved.url, restore })
+    globalThis[APPLIED] = true
+    status.enabled = true
+    status.proxyUrl = resolved.url
+    status.source = resolved.source
+    status.error = ''
+    return status
+  }
+
+  const disable = () => {
+    const restore = readState()?.restore
+    if (restore) {
+      try {
+        restoreToolConfig(restore)
+      } catch {
+        // A broken tool config must not keep the environment switched on.
+      }
+    }
+    restoreOriginalEnvironment()
+    delete globalThis[APPLIED]
+    writeState({ enabled: false })
+    status.enabled = false
+    status.proxyUrl = ''
+    status.source = ''
+    status.error = ''
+    return status
+  }
+
+  /** Read the full picture the settings page needs. */
+  const snapshot = () => {
+    const detected = detect()
+    return {
+      enabled: status.enabled,
+      proxyUrl: status.enabled ? status.proxyUrl : detected.url,
+      source: status.enabled ? status.source : detected.source,
+      detectedUrl: detected.url,
+      detectedSource: detected.source,
+      error: status.error,
+    }
+  }
+
+  const state = readState()
+  const wantOn = typeof state?.enabled === 'boolean' ? state.enabled : config.enabled === true
+  if (wantOn) enable()
+
+  ctx.effect(
+    () => () => {
+      // Plugin unload (disable / uninstall): never leave proxy values behind.
+      restoreOriginalEnvironment()
+      delete globalThis[APPLIED]
+    },
+    'dsh-agent-proxy: child process proxy environment',
+  )
+
+  const routes = [
+    {
+      path: `${API_PREFIX}/state`,
+      methods: ['GET', 'HEAD'],
+      requestBody: 'buffered',
+      async fetch() {
+        try {
+          return jsonResponse(200, { ok: true, data: snapshot() })
+        } catch (error) {
+          return fail(500, messageOf(error))
+        }
+      },
+    },
+    {
+      path: `${API_PREFIX}/toggle`,
+      methods: ['POST'],
+      requestBody: 'buffered',
+      async fetch(request) {
+        const rejected = guardMutation(request)
+        if (rejected) return fail(403, rejected)
+        try {
+          const body = await readJsonBody(request)
+          if (typeof body.enabled !== 'boolean') {
+            return fail(400, 'enabled 必须是布尔值')
+          }
+          if (body.enabled) {
+            enable()
+            if (!status.enabled) {
+              return fail(409, '未检测到代理地址：请先打开代理软件的系统代理，或在插件配置里填写 proxyUrl')
+            }
+          } else {
+            disable()
+          }
+          let stored = true
+          try {
+            const next = readState() ?? {}
+            writeState({ ...next, enabled: status.enabled })
+          } catch (error) {
+            stored = false
+            status.error = messageOf(error)
+          }
+          return jsonResponse(200, { ok: true, data: { ...snapshot(), saved: stored } })
+        } catch (error) {
+          return fail(error?.statusCode ?? 500, messageOf(error))
+        }
+      },
+    },
+  ]
+
+  const mount = (owner) => {
+    const connection = typeof owner.get === 'function' ? owner.get('connection') : undefined
+    const register = connection?.fetch?.register
+    if (typeof register !== 'function') return
+    owner.effect(() => {
+      const disposers = routes.map((route) =>
+        register({
+          path: route.path,
+          methods: route.methods,
+          requestBody: route.requestBody,
+          fetch: route.fetch,
+        }),
+      )
+      return () => {
+        for (const dispose of disposers) {
+          try {
+            const pending = dispose()
+            if (pending && typeof pending.catch === 'function') pending.catch(() => undefined)
+          } catch {
+            // already disposed
+          }
+        }
+      }
+    }, 'dsh-agent-proxy: settings routes')
+  }
+
+  try {
+    const mounted = typeof ctx.get === 'function' ? ctx.get('connection') : undefined
+    if (mounted?.fetch?.register) mount(ctx)
+    else if (typeof ctx.inject === 'function') ctx.inject(['connection'], (scope) => mount(scope))
+  } catch {
+    // Without a Web carrier the switch state still applies; only the page loses its bridge.
+  }
+}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Proxy switch",
+    "description": "Turns a local HTTP proxy on for the git, npm and pip commands DSH runs."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "代理",
+    "description": "让 DSH 运行的 git、npm、pip 等命令走本机代理。"
+  }
+}

package/package.json

@@ -1,6 +1,62 @@
 {
   "name": "dsh-agent-proxy",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "A settings-page switch that turns a local HTTP proxy on for the git, npm and pip commands DSH runs.",
+  "type": "module",
+  "license": "MIT",
+  "author": "1098441615",
+  "homepage": "https://github.com/1098441615/dsh-agent-proxy#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/1098441615/dsh-agent-proxy.git"
+  },
+  "bugs": {
+    "url": "https://github.com/1098441615/dsh-agent-proxy/issues"
+  },
+  "engines": {
+    "node": ">=20",
+    "dsh": ">=0.2.1 <0.3.0"
+  },
+  "icon": "icon.svg",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "cordis.patch.yml",
+    "locale/*.json",
+    "icon.svg",
+    "README.md",
+    "LICENSE"
+  ],
+  "keywords": [
+    "deepseek",
+    "harness",
+    "dsh",
+    "dsh-plugin",
+    "proxy",
+    "git",
+    "npm",
+    "pip",
+    "proxy-switch"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dsh": {
+    "bundle": { "patch": "./cordis.patch.yml" },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-locale"
+      ]
+    }
+  }
+}