@karoc/dsh-proxy
Smoothly Proxy (思磨力代理插件)：外部 DeepSeek Harness 插件——提供按主机路由和设置页面的模型提供商转发代理。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @karoc/dsh-proxy@0.1.3Proxy 以 @karoc/dsh-proxy 发布，当前版本为 0.1.3。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 简体中文
Smoothly Proxy (思磨力代理 / Smoothly) is an external DeepSeek Harness plugin: a model-provider forward proxy with per-host routing, plus a Settings page dedicated to model-provider proxying.
It runs a loopback forward proxy inside the dsh host process, points the
process's egress traffic at it (HTTP(S)_PROXY + NODE_USE_ENV_PROXY), and
routes only the hosts you select through an optional upstream proxy
(HTTP / HTTPS / SOCKS5, with optional Basic auth). Everything else stays
direct. Model-provider hosts are derived from your dsh settings.yaml, and
hosts observed in traffic are collected for you — both appear as checkboxes.
Why an external plugin: the built-in settings pages don't cover outbound proxying, and adding one to a built-in package would be overwritten by the next official release. This package ships as an installable bundle that never touches repository source, so official updates cannot clobber it.
The proxy engine and settings UI are extracted from
karoc/dsh-desktop (behavior preserved)
so a browser-only dsh web gets the same model-provider proxy controls the
desktop shell had.
A new Settings section, 「思磨力代理 / Smoothly Proxy」, placed after the built-in Models and Model reasoning pages. It shows:
settings.yaml
(llm-deepseek.baseURL, llm-pi-ai.providers.<n>.baseURL, any llm-*
namespace), labeled with the friendly display name where available;registry.npmjs.org install/update traffic), persisted into
proxy.json so they survive restarts;Check a host to route it through the upstream proxy. Saving writes
<DSH_HOME>/proxy.json; the running proxy re-reads the file on every
request, so changes take effect immediately — no dsh restart needed.
dsh host process
├─ undici fetch (model requests, web search) ──┐
├─ npm / pnpm / git / child CLIs ──────────────┤ HTTP(S)_PROXY → loopback proxy
└─ subagents ──────────────────────────────────┘ │
▼
127.0.0.1:<random> forward proxy (raw net/http)
│
┌───────────────────────────┴────────────┐
▼ ▼
hosts in proxiedHosts everything else
+ upstream enabled DIRECT (loopback ALWAYS direct)
│
▼
upstream proxy (HTTP/HTTPS/SOCKS5, optional Basic auth)
Safety rules (hard-coded, not configurable):
net/http, so it can never route its own
outbound connections back through itself.<DSH_HOME>/proxy.json # $DSH_HOME, or ~/.dsh by default
{
"upstream": { "enabled": false, "protocol": "http", "host": "", "port": 0, "username": "", "password": "" },
"proxiedHosts": ["api.deepseek.com"],
"knownHosts": ["api.deepseek.com", "registry.npmjs.org"]
}
knownHosts is written by the plugin (observed traffic); upstream and
proxiedHosts are written from the settings page. You can also hand-edit the
file while dsh runs — it is re-read live.
Prerequisites: a DeepSeek Harness install with the dsh CLI, plus pnpm (the dsh plugin command runs pnpm under the hood). This is an installable bundle — it is loaded by dsh, not imported as a library.
The package is published to npm as @karoc/dsh-proxy:
dsh plugin --profile web add @karoc/dsh-proxy
This installs the prebuilt bundle and appends it to the web profile. Then restart dsh web and open Settings → 思磨力代理 / Smoothly Proxy.
dsh plugin --profile web add github:karoc/dsh-proxy#<sha>
A git install runs the package's prepare script to build the bundle. pnpm ≥ 10 requires allowlisting that build once — copy the exact package key pnpm prints into the profile's pnpm-workspace.yaml under allowBuilds, then re-run add (see docs/user/develop/basic/publish.md in the DSH repo).
Bump to the newest release with pnpm update (or re-add to pick up a newer git ref):
dsh plugin --profile web update dsh-proxy
# or, if the dependency spec is pinned: dsh plugin --profile web add dsh-proxy
Then restart dsh web so the new client bundle loads.
dsh plugin --profile web remove dsh-proxy
This removes both the dependency and its bundle layer from the web profile. Restart dsh web for the section to disappear.
cordis.patch.yml # bundle layer: mounts the row that the client-modules
# service discovers (dsh.client manifest)
package.json # dsh.bundle (patch) + dsh.client (web) + exports["./client"]
tsdown.config.ts # self-contained build: node half + module-table client bundle
src/proxy-core.ts # forward proxy engine (HTTP+CONNECT, SOCKS5/HTTPS upstream,
# per-host routing, live config, test probe) — TS port of
# dsh-desktop's scripts/proxy.mjs
src/index.ts # host apply: starts the proxy, sets *PROXY env vars,
# registers /proxy/api (GET view / POST save·test·persist)
src/client/index.ts # client apply: register settings.section (id dsh-proxy)
src/client/ProxySection.tsx # the settings page (upstream card + host lists)
src/client/styles.ts # design-token styles (--dsw-alias-*) + injection
src/client/locales.ts # en/zh copy
scripts/proxy-core.spec.mjs # behavioral tests (13 scenarios, no network)
The host half serves the settings page over a same-origin HTTP route (the
built-in /api prefix is reserved for the gateway, so this uses /proxy/api):
GET /proxy/api → { upstream, proxiedHosts, knownHosts, hosts, providers, port }POST /proxy/api { op: 'save', upstream, proxiedHosts } → sanitized + persisted configPOST /proxy/api { op: 'test', upstream } → { ok, detail }POST /proxy/api { op: 'persist' } → merge observed hosts into knownHostspnpm install
pnpm bundle # emits lib/index.js + lib/client.js
pnpm test # tsc --noEmit + proxy-core.spec.mjs (13 scenarios)
pnpm release:check # release gate: docs/changelog/tag/tree/build/registry must all pass
pnpm publish # runs the gate (prepack/prepublishOnly), then postpublish verifies the live release
The bundle leaves the platform packages (react, @deepseek-ai/cordis,
@deepseek-ai/dsh-client-*) external — they resolve at runtime from the loader's
module table; everything else is inlined.
HTTP(S)_PROXY at itself.
Requests that dsh starts after this plugin's host apply() runs (any
subprocess, and undici fetches whose global dispatcher is still lazy) ride
the proxy. A dsh-internal fetch that already materialized its dispatcher
before plugin load may not route through it — a dsh restart is the documented
remedy (the desktop shell enforces the same boundary by setting env before
spawning dsh).npm/pnpm install/update traffic goes through the proxy like everything
else; toggling a host related to install/update takes effect on the next
install/update (already-in-flight operations keep their environment).ui-settings-general SettingsRoot.tsx navIcon(id) maps known ids and
falls back to a gear for every other id — including this section's
dsh-proxy. The settings.section registration has no icon field, so an
external plugin cannot set it without patching the shell. When DSH exposes a
per-section icon, use IconGlobeOutline14 from dsh-client-ui-primitives
for this section.@karoc/dsh-proxy (matching the npm package name). Hand-written link:
dependencies are not recognized as packages by newer loaders — install via
dsh plugin --profile web add @karoc/dsh-proxy (npm) or
dsh plugin --profile web add link:/path/to/dsh-proxy (source), then restart
dsh web.dsh-desktop) keeps its own proxy and tray settings
window — this plugin is a standalone extraction, not a replacement. Both can
coexist (e.g. install dsh-proxy into the shell's profile to get the
in-dsh settings page too).See CONTRIBUTING.md (development + release checklist) and CHANGELOG.md for version history.