dsh-system-net
Make DeepSeek Harness follow your system network settings — route traffic through the operating system's proxy AND trust its certificate store, so TLS-intercepting accelerators and corporate proxies work without environment variables or a restart. 让 DeepSeek Harness 跟随系统网络设置：既走系统代理，也信任系统证书库，无需环境变量、无需重启。 适合在公司内网或需要网络代理环境下的用户。
Install
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:chickmat/dsh-system-netREADME
Read the full README ↗Configuration
Override in your profile's cordis.patch.yml:
- id: system-net
name: dsh-system-net
config:
proxyMode: auto
noProxy: 'internal.example.com'
extraCaFiles:
- 'C:/certs/corporate-ca.pem'
Proxy
| Field | Default | Description |
|---|---|---|
proxyMode | auto | auto: honour existing env → read system proxy → probe ports. manual: only proxyUrl. off: never touch the proxy |
proxyUrl | '' | proxy URL for manual, e.g. http://127.0.0.1:7890 |
probePorts | common ports | local ports probed in auto |
probeTimeoutMs | 600 | per-port probe timeout |
watchProxy | true | retry at an interval when no proxy was found at startup |
watchIntervalMs | 10000 | retry interval (ms) |
noProxy | '' | extra bypass entries (comma separated). loopback is always guaranteed by the official library |
Certificates
| Field | Default | Description |
|---|---|---|
includeSystem | true | merge the operating system certificate store |
includeDefault | true | keep Node's bundled Mozilla root set (recommended) |
extraCaFiles | [] | extra PEM files to trust |
propagateToChildren | true | extend the same trust to Node child processes spawned later (appends --use-system-ca to NODE_OPTIONS). Only applies where Node allows that flag — see below |
Shared
| Field | Default | Description |
|---|---|---|
enabled | true | master switch |
statusFile | '' | status file path; empty means $DSH_HOME/system-net-status.json |
selfCheck | true | perform one real request after loading |
selfCheckUrl | GitHub API | self-check target. If your accelerator does not cover GitHub, change this to something it does cover — otherwise the self-check fails (which does not mean the plugin failed; read proxy.installed) |
selfCheckTimeoutMs | 15000 | self-check timeout |