dsh-proxy-port
English | 中文
Route DeepSeek Harness's own network calls — web_fetch, fetch(), anything that goes through undici — through a local HTTP proxy, chosen from the composer instead of a config file.
you: /proxy 7897
plugin: proxy http://127.0.0.1:7897
web_fetch and fetch() both use it
bypass: loopback only
source: saved state (enabled, host, port, proxyUrl)
Why this needs a plugin
web_fetch does not decide about proxies itself. It asks @deepseek-ai/dsh-http-proxy's proxyRouteFor(url), which reads that module's process-wide state: an installed policy, or "direct + DNS pinning". Two consequences follow.
- Installing a private undici dispatcher is not enough.
web_fetch would still see "direct" and keep pinning DNS, while plain fetch() took another route. The two halves would disagree, and only one of them is the tool the model actually calls.
- Setting
HTTP_PROXY in the environment is not enough either. The module snapshots the launch environment, so a variable set after boot is not what it routes by.
So this plugin drives the real thing, in the copy of the module the host already imported:
createRequire() against resources/app.asar resolves the true entry of @deepseek-ai/dsh-http-proxy; a profile plugin cannot resolve @deepseek-ai/* by name — see Install.import(pathToFileURL(entry)) loads that same file. ESM caches by URL, so this is the host's module instance, not a second copy.installProxyFromEnvironment(env, report) is called with a Map that answers env.get('http_proxy').value, the only shape that module reads.
The installed policy replaces the global undici dispatcher with a ProxyAgent factory and publishes http_proxy / https_proxy / all_proxy / no_proxy into process.env, so libraries that read the environment — and spawned children — agree with it.
Loopback addresses always bypass the proxy. SOCKS and PAC are rejected by that module: only http: / https: proxies are accepted.
Install
Requirements:
- DeepSeek Harness desktop
^0.2.1-rc.2 — the Electron build; the plugin locates the application archive to reach the host's own modules.
- A local HTTP proxy that speaks
CONNECT (Clash, Clash Verge, v2ray, mitmproxy, …).
The package declares engines.dsh, so a host outside that range refuses it at install time instead of loading it into a silent direct route.
A. From GitHub (recommended)
The plugin page's install dialog and the plugin_manager tool both accept a pnpm git spec. The repository root is the package, so this is the entire install:
github:Acr1mony/dsh-proxy-port#<commit>
git@github.com:Acr1mony/dsh-proxy-port.git#<commit>
There is no npm release: the repository is the distribution channel.
Pin a commit rather than a branch: this plugin drives a process-wide policy, so "whatever main was that day" is a bad thing to have written down.
Before pnpm starts, the manager probes github.com with git ls-remote (5 s, credential helpers disabled). When the probe fails, the dialog reports failedAt: 'spec-host' and suggests a registry mirror, which cannot help a git dependency — use the SSH form instead, or a local checkout below.
Bulk fetches also need a working route to github.com. If a plain git clone of this repository dies partway through (invalid index-pack output, Connection was reset), point git at your local proxy first:
git config --global http.https://github.com.proxy http://127.0.0.1:7890
B. From a local checkout
file:/path/to/dsh-proxy-port
The checkout is linked rather than copied, so edits take effect on the next launch.
C. By hand, through profile files
A profile plugin is a bundle: the plugin page lists bundles, so a bare loader row never appears there. From a checkout at /path/to/dsh-proxy-port, edit ~/.dsh/profiles/<profile>/package.json (on the desktop build the profile is desktop):
{
"dependencies": { "dsh-proxy-port": "file:/path/to/dsh-proxy-port" },
"dsh": { "profile": { "bundles": ["…", "dsh-proxy-port"] } }
}
Add a row override in the same directory's cordis.patch.yml — the row itself comes from this package's cordis.patch.yml, the profile only overrides defaults:
- id: dsh-proxy-port
name: dsh-proxy-port
config:
enabled: true
host: 127.0.0.1
port: 7890
proxyUrl: ''
noProxy: ''
childNodes: true
verifyUrl: https://example.com/
Then install the dependency with the pnpm that ships inside the app (resources/runtime/primary-runtime/dependencies/pnpm/bin/pnpm.cjs install) and restart.
dsh plugin --profile desktop add … is not an alternative here: the desktop profile is managed exclusively by the Electron application and the CLI refuses it.
Restart the application — without HMR the newly installed bundle is only loaded on the next start — then pick the port:
/proxy 7897
Usage
The port is a command, not a field. /proxy runs in the host, produces no model message, and costs no tokens.
| Input | Effect |
|---|
/proxy 7897 | Use http://127.0.0.1:7897 now, and from the next start |
/proxy · /proxy status | Current address, whether web_fetch really uses it, bypass list, source |
/proxy off · /proxy on | Uninstall / reinstall the policy (off restores the route that was in force before it) |
/proxy http://10.0.0.5:3128 | Full URL — also for an https: proxy or a non-loopback host |
/proxy 10.0.0.5:3128 | host:port |
| anything else | Usage text; nothing changes |
/proxy needs DSH's commands service (part of the base layer and of the Web client). The plugin asks for it optionally: a headless host without a command surface keeps the tool and skips the command instead of staying unmounted.
Where the value is stored
<profile>/local-proxy.json, written by the command:
{ "enabled": true, "host": "127.0.0.1", "port": 7897, "proxyUrl": "" }
Precedence: state file → row config → built-in defaults. The row config is what ships; the state file is what you chose. Nothing here has to be edited by hand.
Tool: local_proxy
The model-side view of the same state — for evidence, not convenience.
| Action | What it answers |
|---|
status | Is the policy installed? Which module file, which proxy URL, does proxyRouteFor(verifyUrl) say proxied, what is persisted |
set | Same effect as /proxy: change host/port/enabled/noProxy, persist, apply immediately |
diagnose | TCP reachability of the proxy port plus the route for one URL — no business request |
test | A real request (global fetch, then optionally ctx.web.fetch) and which route it took |
Configuration reference
Row config keys, all optional:
| Key | Default | Meaning |
|---|
enabled | true | false uninstalls the policy; every request goes direct |
host / port | 127.0.0.1 / 7890 | Proxy address; a bad port falls back to 7890 with a warning instead of failing the plugin |
proxyUrl | '' | Full proxy URL such as http://127.0.0.1:7897; wins over host/port |
noProxy | '' | Comma-separated bypass hosts; loopback is always bypassed |
childNodes | true | Publish the proxy variables plus NODE_USE_ENV_PROXY=1 for child processes |
verifyUrl | https://example.com/ | Target that status / diagnose / test use by default |
Tests
node test/smoke.mjs # real traffic traverses a proxy; dispose restores the previous route
node test/apply.mjs # mount, tool + command registration, persisted toggle, unmount
node test/command.mjs # /proxy parsing, persistence, remount keeps the chosen port
smoke.mjs starts a local proxy and asserts that the environment is published, proxyRouteFor says proxied, fetch() really traverses the proxy, loopback stays direct, and dispose restores both the route and the environment.apply.mjs mounts with a fake host context: apply(ctx, config) must register the tool and /proxy, ctx.effect() must install the policy, a persisted change must toggle it, and the disposer must uninstall it.command.mjs drives the command itself, including rejected input (abc, 70000, 0, host:99999), on / off / status, a full URL, and a remount that must still run on the persisted port.
The tests need a Node binary — no DSH installation — but one thing cannot come from this repository: an archive root to resolve the host's modules through. Plain Node cannot read a packed .asar, yet resolution is by path, so a directory with that name works. Copy @deepseek-ai/dsh-http-proxy and undici out of an installed DeepSeek Harness into <root>/resources/app.asar/dsh/node_modules/, then point DSH_LOCAL_PROXY_FIXTURE at <root> (the lookup also tries fixture/ in the repository and the author's private _probe tree). Without a HTTP proxy library present, apply.mjs still passes — the plugin warns and skips the install, which is the fallback it ships.
Limitations
- In-process Node only.
fetch, undici, and libraries that read http_proxy. A shell's curl or Python's requests follow their own environment, which childNodes only publishes — whether a child inherits it is the host's spawn policy.
- HTTP CONNECT only. No SOCKS5, no PAC; both are refused by the host module, not by this plugin.
- Electron archive layout. The module is located under
resources/app.asar; DSH_APP_ASAR overrides the location for an unusual install.
- One proxy per process. That is the granularity of the host's policy; a per-request proxy is not offered.
License
MIT
