tr1v3r/dsh-proxy

@tr1v3r/dsh-proxy is a DeepSeek Harness native plugin shipped as a bundle that integrates through the dsh.profile.bundles field in the target profile's package.json. It hijacks undici's well-known global dispatcher slot read by globalThis.fetch, redirecting every in-process outbound request — LLM providers reached via pi-ai, the dedicated dsh-llm-deepseek route, web_search/web_fetch calls, and streamable-http MCP servers — through an HTTP(S) CONNECT or SOCKS5 proxy. Installation requires editing ~/.config/dsh/profiles/<name>/package.json to add the dependency and merge the bundle name, then running dsh plugin --profile <name> install --no-frozen-lockfile, followed by a single DSH restart to register it; from that moment onward no restarts are needed again, since switching happens entirely through settings or hot-reloaded YAML.

The plugin exposes three runtime modes — manual, direct, and system — toggleable from the Web Settings → General → Network proxy control or by editing the dsh-proxy entry in cordis.patch.yml. manual mode routes via the configured proxy URL with an optional noProxy matcher (undici-style bare entries, host:port, * wildcard, and dot-boundary semantics); system mode follows ambient HTTP_PROXY/HTTPS_PROXY/ALL_PROXY/NO_PROXY env vars and falls back to macOS System Settings proxy (scutil --proxy), re-detected on each save rather than continuously polled. With exportEnv: true (default) the same variables are propagated into the dsh process so child processes spawned after a switch — bash-tool curl/git, stdio MCP servers — follow the new route, while user-set boot env vars are preserved and restored on disable. The target audience is developers and operators behind firewalls or VPN fronts who need instant proxy rerouting without restarting the host application, and the demo node scripts/demo.mjs shows the dispatcher switching mid-flight.

Dependencies include DSH ≥ 0.1.7-rc.1, because the boot probe (scripts/boot-probe.mjs) and runtime rely on createRuntimeResolution / PluginPackages exports that older builds lack; with DSH 0.1.5.x the probe fails with TypeError: createRuntimeResolution is not a function, which can be sidestepped by pointing DSH_ROOT at a scratch install such as npm install --prefix /tmp/dsh-probe-root @deepseek-ai/dsh@0.1.7-rc.1. Unit and end-to-end tests run via npm test; npm install is otherwise sufficient. Credentials embedded as user:pass@ in the proxy URL are stored plaintext in cordis.patch.yml and settings persistence, and with exportEnv: true they leak into child process environments visible to ps -E or /proc/<PID>/environ for the same user, so sensitive setups should point at a local unauthenticated proxy. Limits: loopback destinations bypass by default (bypassLoopback: false overrides), the pi-ai Bedrock route is handled by the AWS SDK rather than this plugin, the built-in browser host runs as a separate process and needs its own proxy configuration, undici's SOCKS5 agent remains experimental upstream, retired dispatchers are force-destroyed after a 30-second grace that can interrupt long streams, and system mode does not cover Windows registry, Linux-desktop settings, or PAC. License is MIT.