feat: add SOCKS5/HTTP proxy support for all provider requests

[zergzorg]

Summary

Add minimal proxy support for personal use — all outgoing HTTP requests from providers/plugins can now be routed through a SOCKS5 or HTTP proxy.

Configuration

Create ~/.openusage/config.json:

{
  "proxy": {
    "enabled": true,
    "url": "socks5://127.0.0.1:10808"
  }
}

Details

• Zero overhead — config loaded once at startup via OnceLock, cached as pre-resolved reqwest::Proxy
• Localhost bypass — localhost, 127.0.0.1, ::1 always bypass the proxy (via reqwest::NoProxy)
• Graceful fallback — missing file, invalid JSON, or invalid URL → app continues without proxy
• SOCKS5 + HTTP/HTTPS — supported natively by reqwest
• No UI changes — file-only config
• No env vars — hardcoded path ~/.openusage/config.json

Changes

File	What
src-tauri/src/config.rs	New — config loader with OnceLock caching, NoProxy bypass, URL redaction
src-tauri/Cargo.toml	Added socks feature to reqwest
src-tauri/src/lib.rs	Early config load during app setup
src-tauri/src/plugin_engine/host_api.rs	Proxy applied to the single Client::builder() + connect_timeout

---

Summary by cubic

Add optional SOCKS5/HTTP proxy support for all provider/plugin HTTP requests, configurable via ~/.openusage/config.json. Defaults off; when enabled, requests use the proxy with a localhost bypass and safe fallback if the config is missing, invalid, or no home directory is found.

• New Features

  • Apply a pre-resolved reqwest::Proxy to the shared HTTP client (OnceLock; supports SOCKS5/HTTP).
  • Bypass proxy for localhost addresses.
  • Add connect_timeout aligned with the request timeout.
  • Redact credentials when logging the proxy URL.

• Bug Fixes

  • Avoid relative config path when the home directory is unavailable; proxy stays disabled in that case.

^{Written for commit 2c27806. Summary will update on new commits.}

[cubic-dev-ai]

1 issue found across 4 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="src-tauri/src/config.rs">

<violation number="1" location="src-tauri/src/config.rs:38">
P2: Config path falls back to relative CWD when home directory resolution fails, allowing unintended proxy config loading from `./.openusage/config.json`.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review, or fix all with cubic.}