feat(proxy): add debug-mode proxy routing #10467

hannesrudolph · 2026-01-05T15:22:16Z

Summary

Adds debug-mode proxy settings (debugProxy.enabled, debugProxy.serverUrl, debugProxy.tlsInsecure) and initializes a debug-only global proxy/TLS bypass so extension network traffic can be routed through an intercepting proxy during F5 runs.

Changes

Add debugProxy.enabled setting to explicitly enable/disable proxy routing
Add debugProxy.serverUrl setting with default http://127.0.0.1:8888
Add debugProxy.tlsInsecure setting to disable TLS verification for MITM proxy inspection
Settings organized alphabetically for logical display in VS Code Settings UI
Initialize proxy module early during activation
Implement proxy routing using global-agent plus an undici global dispatcher (and patch fetch in debug mode)
Ensure global-agent / undici are external in the extension bundle
Add unit tests for proxy behavior
Add translations for all supported languages

Testing

Enable debugProxy.enabled in VS Code settings
Start a local MITM proxy (e.g., mitmproxy, Charles, Proxyman) on http://127.0.0.1:8888
If the proxy uses TLS interception, enable debugProxy.tlsInsecure
Run the extension in debug mode (F5)
Verify network requests are routed through the proxy

Important

Adds debug-mode proxy routing to the Roo Code extension, enabling network traffic to be routed through a proxy during development, with new settings, implementation in networkProxy.ts, and comprehensive tests.

Behavior:
- Adds debugProxy.enabled, debugProxy.serverUrl, and debugProxy.tlsInsecure settings in package.json for proxy configuration.
- Initializes proxy configuration early in activate() in extension.ts to route network traffic through a proxy in debug mode.
- Uses global-agent and undici to handle proxy routing and TLS settings.
Implementation:
- Implements initializeNetworkProxy() in networkProxy.ts to set up proxy based on settings.
- Adds getProxyConfig(), isProxyEnabled(), and isDebugMode() functions in networkProxy.ts.
- Configures global-agent and undici for proxy routing in networkProxy.ts.
Testing:
- Adds unit tests in networkProxy.spec.ts to verify proxy configuration and behavior.
- Mocks global-agent and vscode for testing purposes.
Misc:
- Adds type declarations for global-agent in global-agent.d.ts.
- Updates translations in multiple package.nls.*.json files for new settings descriptions.

^{This description was created by}^{for 82ccf6c. You can customize this summary. It will automatically update as commits are pushed.}

roomote · 2026-01-05T15:22:42Z

Oroocle See task on Roo Cloud

Re-review complete. No new issues found in the latest commit.

Redact proxy URL credentials from debug logs (avoid logging GLOBAL_AGENT_* values)
Avoid or scope the permanent globalThis.fetch patch in debug proxy mode

Previous reviews

f3a1258: Review #1

c113a80: Review #2

fd383e4: Review #3

5a5533e: Review #4

8213bd2: Review #5

23dc152: Review #6

409a744: Review #7

bad7fc7: Review #8

e47e8de: Review #9

4714d65: Review #10

_{Mention @roomote in a comment to request specific changes to this pull request or fix all unresolved issues.}

src/utils/networkProxy.ts

roomote · 2026-01-05T15:28:08Z

src/utils/networkProxy.ts

+		// Setting a dispatcher on our `undici` dependency does NOT affect that internal fetch.
+		// To ensure Roo Code's `fetch()` calls are proxied, patch global fetch in debug mode.
+		if (!fetchPatched) {
+			globalThis.fetch = undiciFetch as unknown as typeof fetch


configureUndiciProxy() permanently patches globalThis.fetch when a proxy is configured in debug mode. Because this module is initialized unconditionally on activation, this can affect unrelated debug-only behaviors and makes it hard to reason about fetch semantics in extension-host tests/debug sessions. Suggest gating the patch behind an explicit internal flag or only patching where Roo Code actually uses fetch (for example, wrap/centralize fetch usage) so the behavior change is scoped.

_{Fix it with Roo Code or mention @roomote and request a fix.}

src/package.nls.ru.json

src/package.nls.zh-TW.json

ellipsis-dev · 2026-01-05T16:26:57Z

src/utils/__tests__/networkProxy.spec.ts

+			mockConfig.get.mockReturnValue("http://localhost:8080")
+			const context = createMockContext(vscode.ExtensionMode.Production)
+
+			expect(() => {


This test uses expect(() => { void initializeNetworkProxy(...) }) to check that no error is thrown. Since initializeNetworkProxy is async, errors may be missed. Convert the test to async and use await expect(initializeNetworkProxy(...)).resolves.not.toThrow() to properly catch async errors.

src/utils/networkProxy.ts

jr · 2026-01-06T18:47:15Z

src/utils/networkProxy.ts

+	loggingEnabled = config.isDebugMode || config.enabled || config.tlsInsecure
+	consoleLoggingEnabled = config.isDebugMode && !outputChannel
+
+	log(`Initializing network proxy module...`)


How much (if any) of this do you want to log when it is disabled?

Added early-exit at the top of initializeNetworkProxy() so when debug mode is disabled, we skip all work including logging. Zero overhead in production.

src/utils/networkProxy.ts

jr

Can extensionContext.extensionMode ever change in process's lifespan? If not, we might want to stop early in initializeNetworkProxy and not do anything at all unless we're in debug mode?

Address review feedback from jr: - Check extensionMode at top of initializeNetworkProxy and return immediately if not in debug mode (extensionMode is immutable for process lifetime) - Remove verbose logging when proxy is disabled - Remove unnecessary typeof guard for onDidChangeConfiguration - Remove redundant trailing comment

hannesrudolph · 2026-01-06T20:16:09Z

Re: @jr's review about early exit when not in debug mode:

Yes, extensionContext.extensionMode is immutable for the process lifetime. I've added an early-exit at lines 121-126:

// extensionMode is immutable for the process lifetime - exit early if not in debug mode.
// This avoids any overhead (listeners, logging, etc.) in production.
const isDebugMode = context.extensionMode === vscode.ExtensionMode.Development
if (!isDebugMode) {
    return
}

This ensures zero overhead (no listeners, no logging, nothing) in production builds.

hannesrudolph requested review from cte, jr and mrubens as code owners January 5, 2026 15:22

github-project-automation bot added this to Roo Code Roadmap and Roo Code Roadmap Jan 5, 2026

github-project-automation bot moved this to Triage in Roo Code Roadmap Jan 5, 2026

github-project-automation bot moved this to New in Roo Code Roadmap Jan 5, 2026

dosubot bot added size:XL This PR changes 500-999 lines, ignoring generated files. Enhancement New feature or request labels Jan 5, 2026

hannesrudolph added 2 commits January 5, 2026 08:23

feat(proxy): add debug-mode proxy routing

506f5a4

fix(proxy): handle non-string proxyUrl and missing VS Code listener

e47e8de

hannesrudolph force-pushed the feat/debug-proxy branch from 4714d65 to e47e8de Compare January 5, 2026 15:25

github-advanced-security bot found potential problems Jan 5, 2026

View reviewed changes

src/utils/networkProxy.ts Fixed Show fixed Hide fixed

roomote bot reviewed Jan 5, 2026

View reviewed changes

src/utils/networkProxy.ts Outdated Show resolved Hide resolved

roomote bot reviewed Jan 5, 2026

View reviewed changes

hannesrudolph added the Issue/PR - Triage New issue. Needs quick review to confirm validity and assign labels. label Jan 5, 2026

i18n: add proxy setting description translations

bad7fc7

ellipsis-dev bot reviewed Jan 5, 2026

View reviewed changes

src/package.nls.ru.json Outdated Show resolved Hide resolved

fix(proxy): redact proxy logs and avoid TLS bypass

409a744

ellipsis-dev bot reviewed Jan 5, 2026

View reviewed changes

src/package.nls.zh-TW.json Outdated Show resolved Hide resolved

roomote bot approved these changes Jan 5, 2026

View reviewed changes

fix(proxy): lazy-load proxy deps in debug mode

23dc152

ellipsis-dev bot reviewed Jan 5, 2026

View reviewed changes

roomote bot approved these changes Jan 5, 2026

View reviewed changes

feat(proxy): add debug-only TLS disable toggle

8213bd2

github-advanced-security bot found potential problems Jan 5, 2026

View reviewed changes

src/utils/networkProxy.ts Fixed Show fixed Hide fixed

roomote bot approved these changes Jan 5, 2026

View reviewed changes

fix: add missing i18n key for proxy TLS toggle

5a5533e

github-advanced-security bot found potential problems Jan 5, 2026

View reviewed changes

src/utils/networkProxy.ts Dismissed Show dismissed Hide dismissed

roomote bot approved these changes Jan 5, 2026

View reviewed changes

daniel-lxs approved these changes Jan 6, 2026

View reviewed changes

dosubot bot added the lgtm This PR has been approved by a maintainer label Jan 6, 2026

jr reviewed Jan 6, 2026

View reviewed changes

src/utils/networkProxy.ts Outdated Show resolved Hide resolved

jr reviewed Jan 6, 2026

View reviewed changes

src/utils/networkProxy.ts Outdated Show resolved Hide resolved

jr reviewed Jan 6, 2026

View reviewed changes

roomote bot approved these changes Jan 6, 2026

View reviewed changes

jr approved these changes Jan 6, 2026

View reviewed changes

hannesrudolph merged commit 503f402 into main Jan 6, 2026
10 checks passed

github-project-automation bot moved this from New to Done in Roo Code Roadmap Jan 6, 2026

github-project-automation bot moved this from Triage to Done in Roo Code Roadmap Jan 6, 2026

hannesrudolph deleted the feat/debug-proxy branch January 6, 2026 20:17

hannesrudolph mentioned this pull request Jan 6, 2026

[ENHANCEMENT] Global enhanced logging to VS Code Output + warning banner #8098

Closed

mini2s added a commit to zgsm-ai/costrict that referenced this pull request Jan 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(proxy): add debug-mode proxy routing #10467

feat(proxy): add debug-mode proxy routing #10467

Uh oh!

hannesrudolph commented Jan 5, 2026 •

edited

Loading

Uh oh!

roomote bot commented Jan 5, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

roomote bot Jan 5, 2026

Uh oh!

Uh oh!

Uh oh!

ellipsis-dev bot Jan 5, 2026

Uh oh!

Uh oh!

Uh oh!

jr Jan 6, 2026

Uh oh!

hannesrudolph Jan 6, 2026

Uh oh!

Uh oh!

Uh oh!

jr left a comment

Uh oh!

hannesrudolph commented Jan 6, 2026

Uh oh!

Uh oh!

feat(proxy): add debug-mode proxy routing #10467

feat(proxy): add debug-mode proxy routing #10467

Uh oh!

Conversation

hannesrudolph commented Jan 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes

Testing

Uh oh!

roomote bot commented Jan 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

roomote bot Jan 5, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

ellipsis-dev bot Jan 5, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

jr Jan 6, 2026

Choose a reason for hiding this comment

Uh oh!

hannesrudolph Jan 6, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

jr left a comment

Choose a reason for hiding this comment

Uh oh!

hannesrudolph commented Jan 6, 2026

Uh oh!

Uh oh!

hannesrudolph commented Jan 5, 2026 •

edited

Loading

roomote bot commented Jan 5, 2026 •

edited

Loading