[michielbdejong]

Refs #1700

What

Self-hosted servers default to a hosted integration proxy, so wherever someone connects an external service the UI now says where that traffic goes and links to running your own proxy:

This traffic goes through localthought.io. If you want to run your own atomic-integration-proxy, follow the instructions here: self-hosting guide

• helpers/proxyTrafficHost.ts: the host to name. atomic.place for atomic.place and any subdomain (e.g. integrations.atomic.place); any other proxy is named by its own host, port included (localhost:8787). Lookalikes such as evilatomic.place or atomic.place.example.com are not treated as atomic.place.
• components/ProxyTrafficNotice.tsx: one small shared component that reads the configured proxy (useIntegrationProxy(), so the per-browser override in Settings applies) and always shows the self-hosting link.
• Shown in:
  • the app's Connect an account bar (AppFrame), the one place in this repo where a connection to an external service starts: plugins such as GitHub, Clockify and Notion now live in atomic-plugins and call store.proxy.connect(), which opens this bar. The bar's sentence used to include the full proxy origin. The notice now names the host, so that part of the sentence was removed.
  • Settings → Integration, under the integration proxy URL field.
• The default proxy origin is unchanged (VITE_INTEGRATION_PROXY_URL or https://localthought.io); integrations.atomic.place isn't live yet.

Translations

The catalogs were settled at the extractor's fixed point: pnpm clean-translations, then rm -rf src/locales/.wuchale and a vite run in this worktree. That run produced no further .po changes. Read the diff by hand: one entry was replaced (the connect sentence, which no longer contains the proxy origin), and the notice was added as one message with the host and the link as tags. No other strings moved.

Screenshots

Screenshots to follow: I could not upload them from the agent session. They were taken against a local atomic-server on this branch. The connect bar comes from a new App whose view calls store.proxy.connect({ platform: 'github' }).

Tests

• pnpm typecheck passes.
• vitest: the new proxyTrafficHost.test.ts has 6 tests, all passing. In the full run, 1222 tests passed. Two tests failed in sidebarDeletion.test.tsx (atomic:resource: vs did:ad:resource: subjects); that file doesn't touch this change. scripts/integration-mcp.test.mjs also failed, but it is a node:test file that pnpm test excludes from vitest.

🤖 Generated with Claude Code

[michielbdejong]

Merge-risk triage (2026-09-28). This is a read-only review of this PR's own diff. The rule it applies: nothing that works today may break for existing users or clients, and new behaviour is added alongside the old. The stack is being rebased onto develop as one chain before merging, so line references are against the current stacked base.

Verdict: SAFE

UI text only: a notice naming the proxy that carries the traffic, plus .po entries. No behaviour change.

Note: Follow-up: #1733 leaves a TODO(#1724) where this notice belongs in the Installation consent bar.

🤖 Generated with Claude Code

[michielbdejong]

Closing as part of the plugin-host stack cleanup (Q-101): not needed by atomic-plugins now. See the inventory at #1726 (comment). The branch is kept, and pin candidates are unaffected. Closed by Claude (VPS coordinator) on behalf of Michiel.