feat(commands): add /proxy and /ca_bundle command handlers

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: lzwjava

iclaw/commands/proxy.py

@@ -0,0 +1,43 @@
+import os
+
+
+def handle_proxy_command(current_proxy, arg):
+    if arg is None:
+        if current_proxy:
+            print(f"  proxy: {current_proxy}")
+        else:
+            print("  proxy: (not set)")
+        return current_proxy
+
+    if arg == "off":
+        print("  Proxy cleared.")
+        return None
+
+    if not (arg.startswith("http://") or arg.startswith("https://")):
+        print(f"  Invalid proxy URL: {arg}")
+        print("  Only http:// and https:// schemes are supported.")
+        return current_proxy
+
+    print(f"  Proxy set to {arg}")
+    return arg
+
+
+def handle_ca_bundle_command(current_ca_bundle, arg):
+    if arg is None:
+        if current_ca_bundle:
+            print(f"  ca_bundle: {current_ca_bundle}")
+        else:
+            print("  ca_bundle: (system default)")
+        return current_ca_bundle
+
+    if arg == "off":
+        print("  CA bundle cleared. Using system default.")
+        return None
+
+    abs_path = os.path.abspath(arg)
+    if not os.path.isfile(abs_path):
+        print(f"  File not found: {abs_path}")
+        return current_ca_bundle
+
+    print(f"  CA bundle set to {abs_path}")
+    return abs_path

tests/test_proxy_commands.py

@@ -0,0 +1,68 @@
+import os
+import unittest
+
+from iclaw.commands.proxy import handle_proxy_command, handle_ca_bundle_command
+
+
+class TestHandleProxyCommand(unittest.TestCase):
+    def test_show_current_proxy(self):
+        result = handle_proxy_command("http://proxy:8080", None)
+        self.assertEqual(result, "http://proxy:8080")
+
+    def test_show_no_proxy(self):
+        result = handle_proxy_command(None, None)
+        self.assertIsNone(result)
+
+    def test_set_proxy(self):
+        result = handle_proxy_command(None, "http://new:1234")
+        self.assertEqual(result, "http://new:1234")
+
+    def test_set_https_proxy(self):
+        result = handle_proxy_command(None, "https://secure:4321")
+        self.assertEqual(result, "https://secure:4321")
+
+    def test_clear_proxy(self):
+        result = handle_proxy_command("http://old:1234", "off")
+        self.assertIsNone(result)
+
+    def test_reject_socks_proxy(self):
+        result = handle_proxy_command(None, "socks5://proxy:1080")
+        self.assertIsNone(result)
+
+    def test_reject_invalid_scheme(self):
+        result = handle_proxy_command(None, "ftp://proxy:21")
+        self.assertIsNone(result)
+
+
+class TestHandleCaBundleCommand(unittest.TestCase):
+    def test_show_current_ca_bundle(self):
+        result = handle_ca_bundle_command("/path/cert.pem", None)
+        self.assertEqual(result, "/path/cert.pem")
+
+    def test_show_no_ca_bundle(self):
+        result = handle_ca_bundle_command(None, None)
+        self.assertIsNone(result)
+
+    def test_set_ca_bundle(self):
+        # Use a file that actually exists
+        path = os.path.abspath(__file__)
+        result = handle_ca_bundle_command(None, path)
+        self.assertEqual(result, path)
+
+    def test_set_ca_bundle_nonexistent_file(self):
+        result = handle_ca_bundle_command(None, "/nonexistent/cert.pem")
+        self.assertIsNone(result)
+
+    def test_clear_ca_bundle(self):
+        result = handle_ca_bundle_command("/path/cert.pem", "off")
+        self.assertIsNone(result)
+
+    def test_set_ca_bundle_resolves_relative_path(self):
+        # Use current file as a known existing file
+        rel_path = os.path.relpath(__file__)
+        result = handle_ca_bundle_command(None, rel_path)
+        self.assertEqual(result, os.path.abspath(rel_path))
+
+
+if __name__ == "__main__":
+    unittest.main()