Function createSystemProxyController

apps/desktop/src/main/sysproxy.ts:34–258

(
  opts: SystemProxyControllerOptions,
)

 * for the whole machine — callers MUST disable() on quit.
 */
export function createSystemProxyController(
  opts: SystemProxyControllerOptions,
): SystemProxyController {
  const { host, port } = opts
  const platform = opts.platform ?? process.platform
  const exec = opts.exec ?? defaultExec

  // Last applied bypass list, surfaced via describe().
  let lastBypass: string[] = []

  const describe = () => ({ port, bypass: lastBypass })

  // ---- macOS (networksetup) ----

  // List enabled network services, skipping the informational header line and
  // any '*'-prefixed (disabled) service.
  async function darwinEnabledServices(): Promise<string[]> {
    const { stdout } = await exec('networksetup -listallnetworkservices')
    return stdout
      .split('\n')
      .slice(1) // drop the "An asterisk (*) denotes..." header
      .map((l) => l.trim())
      .filter((l) => l.length > 0 && !l.startsWith('*'))
  }

  async function darwinEnable(bypass: string[]): Promise<void> {
    const services = await darwinEnabledServices()
    for (const svc of services) {
      await exec(`networksetup -setwebproxy "${svc}" ${host} ${port}`)
      await exec(`networksetup -setsecurewebproxy "${svc}" ${host} ${port}`)
      await exec(`networksetup -setsocksfirewallproxy "${svc}" ${host} ${port}`)
      await exec(`networksetup -setwebproxystate "${svc}" on`)
      await exec(`networksetup -setsecurewebproxystate "${svc}" on`)
      await exec(`networksetup -setsocksfirewallproxystate "${svc}" on`)
      if (bypass.length > 0) {
        await exec(
          `networksetup -setproxybypassdomains "${svc}" ${bypass.join(' ')}`,
        )
      }
    }
  }

  async function darwinDisable(): Promise<void> {
    const services = await darwinEnabledServices()
    for (const svc of services) {
      await exec(`networksetup -setwebproxystate "${svc}" off`)
      await exec(`networksetup -setsecurewebproxystate "${svc}" off`)
      await exec(`networksetup -setsocksfirewallproxystate "${svc}" off`)
      // Anti-lockout: also clear any PAC/auto-config so quit/disable can never
      // leave the machine pointing at a dead loopback PAC URL.
      await exec(`networksetup -setautoproxystate "${svc}" off`)
    }
  }

  async function darwinSetAutoProxy(url: string): Promise<void> {
    const services = await darwinEnabledServices()
    for (const svc of services) {
      await exec(`networksetup -setautoproxyurl "${svc}" ${url}`)