dsh-model-proxy-switch 0.0.0-stage → 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-model-proxy-switch contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,77 @@
-# Temporary Holding Version
+# dsh-model-proxy-switch
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+English | [中文](#中文)
+
+A sidebar switch for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (`dsh`) that routes outbound requests — model API calls, model-list discovery, web search, HTTP MCP — through a local HTTP proxy, and restores direct connections when switched off.
+
+![icon](./icon.svg)
+
+## Why
+
+Some model relays are unreachable from a direct connection (the TLS handshake is reset), while the operating system's proxy reaches them fine. The harness resolves its proxy policy once at launch from the launch environment and never re-reads it, so flipping the OS proxy later does nothing. This plugin installs the same policy at runtime, on demand, as a toggle.
+
+## Features
+
+- **One switch in the sidebar** — a new "Proxy" entry next to Plugins, opening a small panel with the toggle, the active proxy address, and where it came from.
+- **Follows the system proxy by default** (`proxy: auto`) — on Windows it reads the `Internet Settings` registry values, so swapping proxy software or ports needs no edit. A fixed URL can be set in the plugin config instead.
+- **Optional per-host allowlist** — leave it empty to route every external address, or list domains (comma-separated, subdomains included) so only they go through the proxy. Loopback always stays direct.
+- **No restart, no `.env`** — toggling installs/disposes the process-wide dispatcher live; the choice persists across restarts in `~/.dsh/model-proxy.json`.
+- **Self-contained** — the proxy installer and its `undici` dependency are vendored, so the package has no runtime dependencies.
+
+## Install
+
+```sh
+dsh plugin --profile <profile> add dsh-model-proxy-switch
+```
+
+or from the Plugins page: **Add plugin → package name `dsh-model-proxy-switch`**, a Git URL, a tarball, or a local directory.
+
+## Usage
+
+1. Open **Proxy** in the sidebar.
+2. Flip **Use proxy** on. The address line shows the detected proxy and its source (`from system settings` / `from registry` / `from plugin config`).
+3. Optionally fill **Only proxy these hosts** (e.g. `api.example.com`) and save — everything else then stays direct.
+
+Configuration (bundle `cordis.patch.yml` or the row config): `proxy` (`auto` or an `http(s)://` URL), `bypass` (extra direct hosts), `hosts` (initial allowlist).
+
+Privacy: the plugin routes traffic you ask it to route and writes one small state file in the harness home. It collects nothing and calls nowhere on its own.
+
+---
+
+## 中文
+
+一个 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（`dsh`）的侧栏开关插件：开启后，模型 API、获取模型列表、网页搜索、MCP 等出网请求改走本地 HTTP 代理；关闭即恢复直连。
+
+### 解决什么问题
+
+有些模型中转站直连会被重置（TLS 握手被掐），但系统代理能通。而 DSH 只在启动时读一次代理环境变量，之后改系统代理没有用。这个插件把同样的代理策略做成了**运行时可开关**的按钮。
+
+### 功能
+
+- **侧栏一个开关**：「插件」旁边多出「代理」入口，面板里有开关、当前代理地址和来源标注。
+- **默认跟随系统代理**（`proxy: auto`）：Windows 下读注册表的 Internet Settings，换代理软件或端口不用改插件；也可以在配置里写死地址。
+- **域名白名单（可选）**：留空表示所有外部地址都走代理；填入域名（逗号分隔，含子域名）后只有这些域名走代理。本机回环永远直连。
+- **不用重启、不用改 .env**：切换即时装卸全局 dispatcher，选择持久化在 `~/.dsh/model-proxy.json`。
+- **零依赖**：代理安装器和 `undici` 已内置于包内。
+
+### 安装
+
+```sh
+dsh plugin --profile <profile> add dsh-model-proxy-switch
+```
+
+或在插件页 **添加插件**，填包名 `dsh-model-proxy-switch`、Git 地址、压缩包或本地目录。
+
+### 使用
+
+1. 打开侧栏「代理」。
+2. 打开「使用代理」，地址行会显示检测到的代理及来源（跟随系统代理 / 注册表记录 / 插件配置）。
+3. 可选：在「只对这些域名走代理」里填域名（如 `api.wufannao.cc.cd`）并保存，其余流量保持直连。
+
+配置项（bundle 的 `cordis.patch.yml` 或行配置）：`proxy`（`auto` 或 `http(s)://` 地址）、`bypass`（额外直连域名）、`hosts`（初始白名单）。
+
+隐私：插件只按你的要求转发流量，并在 harness home 写一个很小的状态文件；不收集、不上报任何数据。
+
+## License
+
+MIT

package/client.js

@@ -0,0 +1,473 @@
+window.__ModuleLoader__.load({
+  id: 'dsh-model-proxy-switch',
+  factory(require) {
+    const React = require('react')
+    const h = React.createElement
+
+    const PACKAGE = 'dsh-model-proxy-switch'
+    const PANEL_ID = 'model-proxy'
+    const NS = 'modelProxy'
+
+    const codec = (typeSymbol, parse) => ({
+      mode: 'strict',
+      typeSymbol: PACKAGE + '#' + typeSymbol,
+      create: () => ({ parse }),
+    })
+    const booleanValue = codec('Boolean', (value) => {
+      if (typeof value !== 'boolean') throw new Error('Expected a boolean, got ' + typeof value)
+      return value
+    })
+    const hostsValue = codec('Hosts', (value) => {
+      if (typeof value !== 'string') throw new Error('Expected a string, got ' + typeof value)
+      return value
+    })
+    const jsonResult = codec('ModelProxyStatus', (value) => value)
+
+    const methodDescriptor = (method, parameters) => ({
+      id: PACKAGE + '#' + NS + '/' + method,
+      service: NS,
+      namespace: NS,
+      method,
+      invocation: { kind: 'direct' },
+      result: jsonResult,
+      parameters,
+    })
+    const jsonParameter = (name, parameterCodec) => ({ name, wire: name, source: 'json', codec: parameterCodec })
+
+    const REMOTE = {
+      package: PACKAGE,
+      descriptors: [
+        methodDescriptor('status', []),
+        methodDescriptor('setEnabled', [jsonParameter('enabled', booleanValue)]),
+        methodDescriptor('setHosts', [jsonParameter('hosts', hostsValue)]),
+      ],
+    }
+
+    const STRINGS = {
+      zh: {
+        nav: '代理',
+        title: '模型代理',
+        summary: '让模型 API、获取模型列表等出网请求走 HTTP 代理；关闭即直连。',
+        stateOn: '已开启',
+        stateOff: '已关闭',
+        label: '使用代理',
+        proxy: '代理地址',
+        sourceSystem: '跟随系统代理',
+        sourceRegistry: '注册表记录（系统代理未开启）',
+        sourceConfig: '插件配置',
+        sourceNone: '未检测到系统代理',
+        hostsLabel: '只对这些域名走代理',
+        hostsHint: '逗号分隔，留空表示所有外部地址。例：api.wufannao.cc.cd',
+        save: '保存',
+        saved: '已保存',
+        scope: '开关作用于整个宿主进程的出网请求：获取模型列表、模型调用、网页搜索、MCP 都走同一条链路；本机回环始终直连。',
+        saving: '正在切换…',
+        readFailed: '读取状态失败',
+        writeFailed: '切换失败',
+      },
+      en: {
+        nav: 'Proxy',
+        title: 'Model proxy',
+        summary: 'Routes model API and model-list requests through an HTTP proxy while on; off means direct.',
+        stateOn: 'On',
+        stateOff: 'Off',
+        label: 'Use proxy',
+        proxy: 'Proxy URL',
+        sourceSystem: 'from system settings',
+        sourceRegistry: 'from registry (system proxy off)',
+        sourceConfig: 'from plugin config',
+        sourceNone: 'no system proxy detected',
+        hostsLabel: 'Only proxy these hosts',
+        hostsHint: 'Comma-separated; empty means every external address. Example: api.wufannao.cc.cd',
+        save: 'Save',
+        saved: 'Saved',
+        scope: 'Process-wide switch: model discovery, model calls, web search and MCP share this route. Loopback always stays direct.',
+        saving: 'Switching…',
+        readFailed: 'Could not read the state',
+        writeFailed: 'Switch failed',
+      },
+    }
+
+    function translator(ctx) {
+      let lang = 'en'
+      try {
+        const raw = String((typeof navigator !== 'undefined' && navigator.language) || 'en').toLowerCase()
+        lang = raw.startsWith('zh') ? 'zh' : 'en'
+      } catch {}
+      return (key) => {
+        try {
+          const bound = ctx.locale && typeof ctx.locale.bind === 'function' ? ctx.locale.bind(NS) : undefined
+          const value = bound ? bound(key) : undefined
+          if (typeof value === 'string' && value !== key) return value
+        } catch {}
+        return (STRINGS[lang] && STRINGS[lang][key]) || key
+      }
+    }
+
+    const styles = {
+      page: {
+        boxSizing: 'border-box',
+        height: '100%',
+        overflowY: 'auto',
+        padding: '28px clamp(24px, 4vw, 48px) 48px',
+      },
+      inner: { maxWidth: 720, margin: '0 auto', display: 'flex', flexDirection: 'column', gap: 12 },
+      title: { margin: 0, fontSize: 18, fontWeight: 600, lineHeight: '26px' },
+      summary: { margin: 0, fontSize: 13, lineHeight: '20px', color: 'var(--dsw-alias-label-secondary)' },
+      card: {
+        marginTop: 8,
+        border: '1px solid var(--dsw-alias-border-l2)',
+        borderRadius: 12,
+        background: 'var(--dsw-alias-bg-base)',
+        padding: '4px 16px',
+      },
+      row: {
+        display: 'flex',
+        alignItems: 'center',
+        justifyContent: 'space-between',
+        gap: 16,
+        padding: '14px 0',
+        borderBottom: '0.5px solid var(--dsw-alias-border-l2)',
+      },
+      rowLast: { borderBottom: 'none' },
+      label: { fontSize: 13, fontWeight: 500, color: 'var(--dsw-alias-label-primary)' },
+      desc: { marginTop: 2, fontSize: 12, lineHeight: '18px', color: 'var(--dsw-alias-label-secondary)' },
+      toggle: (on, busy) => ({
+        flex: 'none',
+        minWidth: 96,
+        height: 30,
+        padding: '0 14px',
+        borderRadius: 15,
+        border: '1px solid ' + (on ? 'transparent' : 'var(--dsw-alias-border-l2)'),
+        background: on ? 'var(--dsw-alias-state-business-primary, #4176e6)' : 'var(--dsw-alias-bg-layer-2)',
+        color: on ? '#fff' : 'var(--dsw-alias-label-primary)',
+        fontSize: 13,
+        fontWeight: 500,
+        cursor: busy ? 'wait' : 'pointer',
+        opacity: busy ? 0.6 : 1,
+      }),
+      hostsInput: {
+        boxSizing: 'border-box',
+        width: '100%',
+        height: 32,
+        marginTop: 8,
+        padding: '0 10px',
+        border: '1px solid var(--dsw-alias-input-border, var(--dsw-alias-border-l2))',
+        borderRadius: 8,
+        background: 'var(--dsw-alias-input-bg, var(--dsw-alias-bg-layer-2))',
+        color: 'inherit',
+        font: 'inherit',
+        fontSize: 13,
+      },
+      saveButton: (busy) => ({
+        flex: 'none',
+        height: 30,
+        padding: '0 14px',
+        borderRadius: 8,
+        border: '1px solid var(--dsw-alias-border-l2)',
+        background: 'var(--dsw-alias-bg-layer-2)',
+        color: 'var(--dsw-alias-label-primary)',
+        fontSize: 13,
+        cursor: busy ? 'wait' : 'pointer',
+        opacity: busy ? 0.6 : 1,
+      }),
+      error: { margin: '4px 0 0', fontSize: 12, lineHeight: '18px', color: 'var(--dsw-alias-state-error-primary)' },
+    }
+
+    function NavIcon() {
+      return h(
+        'svg',
+        { viewBox: '0 0 16 16', width: 16, height: 16, 'aria-hidden': true, focusable: 'false' },
+        h('path', {
+          d: 'M2.5 5.5h6a2 2 0 1 0-2-2M13.5 10.5h-6a2 2 0 1 0 2 2',
+          fill: 'none',
+          stroke: 'currentColor',
+          strokeWidth: 1.4,
+          strokeLinecap: 'round',
+        }),
+        h('circle', { cx: 12, cy: 4.5, r: 1.5, fill: 'currentColor' }),
+        h('circle', { cx: 4, cy: 11.5, r: 1.5, fill: 'currentColor' }),
+      )
+    }
+
+    function sourceText(status, t) {
+      if (!status || !status.proxy) {
+        return status && status.proxySource === 'none' ? t('sourceNone') : '…'
+      }
+      const tag =
+        status.proxySource === 'system'
+          ? t('sourceSystem')
+          : status.proxySource === 'registry'
+            ? t('sourceRegistry')
+            : status.proxySource === 'config'
+              ? t('sourceConfig')
+              : ''
+      return t('proxy') + '：' + status.proxy + (tag ? '（' + tag + '）' : '')
+    }
+
+    function Panel({ remote, t }) {
+      const [status, setStatus] = React.useState(null)
+      const [busy, setBusy] = React.useState(false)
+      const [error, setError] = React.useState('')
+      const [hosts, setHosts] = React.useState('')
+      const [savedFlash, setSavedFlash] = React.useState(false)
+      const hostsDirty = React.useRef(false)
+      const loaded = React.useRef(false)
+
+      const describe = (result, fallback) => {
+        const error = result && result.error
+        if (error && typeof error === 'object') return error.message || JSON.stringify(error)
+        if (typeof error === 'string') return error
+        return fallback
+      }
+
+      React.useEffect(() => {
+        let alive = true
+        const read = () => {
+          remote
+            .status()
+            .then((result) => {
+              if (!alive) return
+              if (result && result.ok) {
+                loaded.current = true
+                setStatus(result.value)
+                if (!hostsDirty.current) {
+                  setHosts(result.value && typeof result.value.hosts === 'string' ? result.value.hosts : '')
+                }
+              } else if (!loaded.current) {
+                setError(describe(result, t('readFailed')))
+              }
+            })
+            .catch((cause) => {
+              if (alive && !loaded.current) setError((cause && cause.message) || t('readFailed'))
+            })
+        }
+        // No polling: refresh on open, on window focus, and after actions.
+        read()
+        const onFocus = () => read()
+        window.addEventListener('focus', onFocus)
+        return () => {
+          alive = false
+          window.removeEventListener('focus', onFocus)
+        }
+      }, [remote])
+
+      const toggle = () => {
+        if (!status || busy) return
+        setBusy(true)
+        setError('')
+        remote
+          .setEnabled(!status.enabled)
+          .then((result) => {
+            if (result && result.ok) {
+              setStatus(result.value)
+              return
+            }
+            setError(describe(result, t('writeFailed')))
+          })
+          .catch((cause) => setError((cause && cause.message) || t('writeFailed')))
+          .finally(() => setBusy(false))
+      }
+
+      const saveHosts = () => {
+        if (!status || busy) return
+        setBusy(true)
+        setError('')
+        remote
+          .setHosts(hosts)
+          .then((result) => {
+            if (result && result.ok) {
+              setStatus(result.value)
+              hostsDirty.current = false
+              setSavedFlash(true)
+              setTimeout(() => setSavedFlash(false), 1500)
+              return
+            }
+            setError(describe(result, t('writeFailed')))
+          })
+          .catch((cause) => setError((cause && cause.message) || t('writeFailed')))
+          .finally(() => setBusy(false))
+      }
+
+      const on = !!(status && status.enabled)
+      return h(
+        'div',
+        { style: styles.page },
+        h(
+          'div',
+          { style: styles.inner },
+          h('h1', { style: styles.title }, t('title')),
+          h('p', { style: styles.summary }, t('summary')),
+          h(
+            'div',
+            { style: styles.card },
+            h(
+              'div',
+              { style: styles.row },
+              h(
+                'div',
+                null,
+                h('div', { style: styles.label }, t('label')),
+                h('div', { style: styles.desc }, sourceText(status, t)),
+              ),
+              h(
+                'button',
+                {
+                  type: 'button',
+                  role: 'switch',
+                  'aria-checked': on,
+                  'aria-label': t('label'),
+                  disabled: busy || !status,
+                  style: styles.toggle(on, busy || !status),
+                  onClick: toggle,
+                },
+                busy ? t('saving') : on ? t('stateOn') : t('stateOff'),
+              ),
+            ),
+            h(
+              'div',
+              { style: styles.row },
+              h(
+                'div',
+                { style: { flex: 1, minWidth: 0 } },
+                h('div', { style: styles.label }, t('hostsLabel')),
+                h('div', { style: styles.desc }, t('hostsHint')),
+                h('input', {
+                  style: styles.hostsInput,
+                  value: hosts,
+                  placeholder: 'api.example.com, *.example.org',
+                  disabled: busy || !status,
+                  onChange: (event) => {
+                    hostsDirty.current = true
+                    setHosts(event.target.value)
+                  },
+                  onKeyDown: (event) => {
+                    if (event.key === 'Enter') saveHosts()
+                  },
+                }),
+              ),
+              h(
+                'button',
+                { type: 'button', disabled: busy || !status, style: styles.saveButton(busy || !status), onClick: saveHosts },
+                savedFlash ? t('saved') : t('save'),
+              ),
+            ),
+            h('div', { style: styles.rowLast }, h('div', { style: styles.desc }, t('scope'))),
+          ),
+          error ? h('p', { style: styles.error, role: 'alert' }, error) : null,
+        ),
+      )
+    }
+
+    // The 代理 row's icon slot now carries a sliding switch: clicking the
+    // switch toggles the proxy in place (and stops the click from bubbling to
+    // the row, so the detail panel does not open); clicking the row's label
+    // still opens the detail panel.
+    function ProxySwitch({ remote, t, size }) {
+      const [status, setStatus] = React.useState(null)
+      const [busy, setBusy] = React.useState(false)
+
+      const read = React.useCallback(() => {
+        remote.status().then((result) => {
+          if (result && result.ok) setStatus(result.value)
+        }).catch(() => {})
+      }, [remote])
+      React.useEffect(() => { read() }, [read])
+      // Keep the switch honest when the detail panel changes the state.
+      React.useEffect(() => {
+        const onFocus = () => read()
+        window.addEventListener('focus', onFocus)
+        return () => window.removeEventListener('focus', onFocus)
+      }, [read])
+
+      const on = !!(status && status.enabled)
+      const toggle = () => {
+        if (!status || busy) return
+        setBusy(true)
+        remote.setEnabled(!on).then((result) => {
+          if (result && result.ok) setStatus(result.value)
+        }).catch(() => {}).finally(() => setBusy(false))
+      }
+
+      const s = typeof size === 'number' && size > 0 ? size : 18
+      const height = Math.max(12, Math.round(s * 0.72))
+      const width = Math.round(height * 1.8)
+      const knob = Math.max(8, height - 4)
+      const label = on ? t('stateOn') + '，点击关闭' : t('stateOff') + '，点击开启'
+      return h('span', {
+        role: 'switch',
+        'aria-checked': on,
+        'aria-label': label,
+        title: label,
+        tabIndex: 0,
+        onClick: (event) => {
+          if (event && typeof event.stopPropagation === 'function') event.stopPropagation()
+          toggle()
+        },
+        onKeyDown: (event) => {
+          if (event.key === 'Enter' || event.key === ' ') {
+            event.preventDefault()
+            if (typeof event.stopPropagation === 'function') event.stopPropagation()
+            toggle()
+          }
+        },
+        style: {
+          position: 'relative',
+          display: 'inline-block',
+          width: width,
+          height: height,
+          borderRadius: height / 2,
+          background: on
+            ? 'var(--dsw-alias-state-business-primary, #4176e6)'
+            : 'var(--dsw-alias-bg-layer-3, rgba(128,128,128,0.35))',
+          transition: 'background .18s ease',
+          cursor: busy || !status ? 'wait' : 'pointer',
+          opacity: busy ? 0.55 : 1,
+          flexShrink: 0,
+          verticalAlign: 'middle',
+        },
+      },
+        h('span', {
+          style: {
+            position: 'absolute',
+            top: 2,
+            left: on ? width - knob - 2 : 2,
+            width: knob,
+            height: knob,
+            borderRadius: '50%',
+            background: '#fff',
+            boxShadow: '0 1px 2px rgba(0,0,0,.3)',
+            transition: 'left .18s ease',
+          },
+        }),
+      )
+    }
+
+    return {
+      inject: ['slots', 'remote'],
+      async apply(ctx) {
+        const t = translator(ctx)
+        const unmount = await ctx.remote.$mount(REMOTE)
+        const remote = ctx.get('remote.' + NS)
+        if (!remote) throw new Error('model-proxy: remote is not mounted')
+
+        // One 代理 row. Its icon slot renders the sliding switch, so the
+        // proxy can be toggled right here; the row itself still opens the
+        // detail panel (the switch stops propagation on its own clicks).
+        ctx.slots.inject('sidebar.panellist', () =>
+          ctx.slots.register(
+            { name: 'sidebar.panellist', id: PANEL_ID, order: 6, label: () => t('nav') },
+            (ownerProps) => h(ProxySwitch, { ...(ownerProps || {}), remote, t }),
+          ),
+        )
+        ctx.slots.inject('main', () =>
+          ctx.slots.register({ name: 'main', key: PANEL_ID }, () => h(Panel, { remote, t })),
+        )
+
+        return () => {
+          if (typeof unmount === 'function') unmount()
+        }
+      },
+    }
+  },
+})

package/cordis.patch.yml

@@ -0,0 +1,7 @@
+- insert:
+    - id: model-proxy
+      name: dsh-model-proxy-switch
+      config:
+        proxy: auto
+        bypass: localhost,127.0.0.1,::1
+        hosts: ''

package/icon.svg

@@ -0,0 +1,13 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="64" height="64">
+  <defs>
+    <linearGradient id="g" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#4c8dff"/>
+      <stop offset="1" stop-color="#7b5cff"/>
+    </linearGradient>
+  </defs>
+  <rect x="4" y="4" width="56" height="56" rx="14" fill="url(#g)"/>
+  <path d="M14 24h18a7 7 0 1 0-7-7" fill="none" stroke="#fff" stroke-width="4" stroke-linecap="round"/>
+  <path d="M50 40H32a7 7 0 1 0 7 7" fill="none" stroke="#fff" stroke-width="4" stroke-linecap="round"/>
+  <circle cx="45" cy="20" r="5" fill="#fff"/>
+  <circle cx="19" cy="44" r="5" fill="#fff"/>
+</svg>