@dsh-plugin/dsh-network-settings

A DeepSeek Harness plugin that bundles three network capabilities — User-Agent rewriting (from @dsh-plugin/dsh-user-agent), a HTTP / HTTPS-CONNECT / SOCKS5 proxy (from dsh-net-proxy), and configurable request auto-retry — all driven from a single 网络设置 (Network) tab in the Web settings.

Features

• User-Agent rewriting — force a custom User-Agent on every outgoing request that uses global fetch (LLM API calls from dsh-llm-deepseek, web search, HTTP tools, …), overriding the caller's own header. Toggle on/off, edit the string, applies to the very next request.
• Network proxy — route the agent's network requests through an HTTP (CONNECT tunnel) or SOCKS5 proxy, with optional username/password, NO_PROXY direct-connection list (host / suffix / host:port / IPv4 CIDR / * / <local>), and a request timeout. A 测试连接 (Test connection) button runs a real connectivity + latency probe (proxy TCP handshake, total round-trip, target HTTP status) from the settings page.
• Request auto-retry — configure the maximum request retry count (0 = off): when an outbound request fails with a network-layer error (undici connect/timeout/reset codes) or a retryable status (429, 500, 502, 503, 504), it is retried automatically with bounded exponential backoff (500 ms base, 10 s cap) + 10% jitter. Aborts (user cancellation) and non-replayable streaming bodies are never retried; the request body is replayed only when it is replayable (string / URLSearchParams / ArrayBuffer / Blob / FormData).
• One settings tab, three independent sections — the UA, proxy, and retry sections each have their own 保存 (Save) button; changes are applied live on the next request without a restart. All values live in the standard dsh-network-settings user-settings namespace.
• Clean lifecycle — globalThis.fetch is wrapped only while the plugin runs; the original fetch is captured once and restored on stop / update / removal.
• Same-origin probe route — /_dsh/dsh-network-settings/probe performs the proxy connectivity test (read-only, never writes config).

Install

The package is a dsh bundle plugin (dsh.bundle.patch), installable with the standard dsh plugin add command:

dsh plugin add @dsh-plugin/dsh-network-settings
# or, with a specific profile
dsh plugin --profile web add @dsh-plugin/dsh-network-settings

Then open Settings → 网络设置 in the Web GUI: edit any of the three sections and hit its 保存 button.

Replacing the old plugins

This plugin supersedes both @dsh-plugin/dsh-user-agent and dsh-net-proxy (it implements their full functionality). Remove them from the profile once installed:

dsh plugin remove @dsh-plugin/dsh-user-agent
dsh plugin remove net-proxy

Existing data is migrated automatically: if the old ~/.dsh/net-proxy.json (or $DSH_HOME/net-proxy.json) exists, its proxy fields are merged into the plugin's base layer on startup (values you save in the 网络设置 tab always win).

Configuration

Plugin entry (cordis.patch.yml / profile override) — the values act as the composition base layer and are merged with the user-settings section:

Field	Type	Default	Meaning
uaEnabled	boolean	true	UA rewriting master switch; when off the caller's User-Agent passes through.
userAgent	string	DeepSeek-Harness/0.1 (+https://github.com/deepseek-ai/dsh)	The User-Agent applied to every rewritten request.
proxyEnabled	boolean	false	Proxy master switch; when off requests go direct.
proxyProtocol	string	http	Proxy protocol: http (CONNECT tunnel) or socks5.
proxyHost	string	127.0.0.1	Proxy address.
proxyPort	number	7890	Proxy port.
proxyUsername	string	''	Optional proxy username.
proxyPassword	string	''	Optional proxy password.
proxyNoProxy	string[]	['127.0.0.1','localhost','::1']	Direct-connection host list; matched requests bypass the proxy.
proxyTimeoutMs	number	60000	Proxy request timeout in ms.
retryEnabled	boolean	true	Auto-retry master switch.
maxRetries	number	2	Maximum request retry count (0 = no retries).

How it works

• The host half installs the dsh-network-settings settings namespace (installSettingsSection) and wraps globalThis.fetch once with a three-layer stack, read per request: retry → User-Agent rewrite → proxy → original fetch. Each attempt of a retried request re-reads the latest resolved config, so saved changes apply to the very next request.
• The proxy engine is the ported dsh-net-proxy implementation (HTTP absolute-URL forwarding, HTTPS via CONNECT, SOCKS5 negotiation with RFC 1929 auth, streaming response bodies with gzip / br / deflate decoding, HTTP/2 via ALPN, redirect following, NO_PROXY matching).
• The browser half registers the settings.section tab and reads/writes the namespace through the connection's ApiProxy (api.settings.describe / update), the same seam the aux/mainline DSH plugins use; the proxy connectivity test goes through the same-origin probe route.

Development

npm install          # dev deps + auto-installed peers
npm run build        # tsc (host + client) + strip client module-ification artifact
npm test             # node --test (TypeScript tests run natively on Node ≥ 23.6)
npm pack --dry-run   # inspect published contents

All source — host, proxy engine, settings UI, and tests — is TypeScript.

License

MIT