[Godalin]

When an HTTP proxy is enabled in ArkOS4Clone's Wi-Fi settings, PortMaster can still attempt direct connections and time out downloading games. This was reproduced on an XF40H running ArkOS4Clone 09152026 with PortMaster 2026.07.28-1212 beta.

EmulationStation saves the proxy in es_settings.cfg and applies it to its own curl requests, without exporting standard proxy variables. PortMaster's sudo launch also filters inherited proxy variables.

This change reads enabled ArkOS HTTP settings before privilege escalation and passes the resulting proxy/bypass assignments to pugwash through env after sudo. Existing explicitly supplied HTTP(S)/ALL_PROXY variables take precedence and are passed through, including empty values; explicit bypass variables are also preserved. Missing or disabled settings leave the importer inactive.

The helper uses only the Python standard library, handles ES settings with multiple XML roots, and validates host/port and control characters before emitting any assignments. Bash passes values as array elements without evaluating shell text. Configuration errors do not abort startup, and warnings do not log proxy values or credentials. The helper is outside pylibs so it is available before pugwash extracts pylibs.zip, and is included by the existing release packaging.

Validation:

• python3 -m unittest discover -s tests -v: all 9 tests passed locally and on the XF40H (Python 3.7).
• bash -n PortMaster/PortMaster.sh and git diff --check passed.
• The final launcher setup was exercised on the handheld with PortMaster's actual sudo preserve-env arguments and bundled Requests library; a proxied HTTPS request to the GitHub API returned HTTP 200.
• Tests cover XML parsing, missing/disabled/malformed settings, IPv6, credentials, explicit environment precedence, bypass precedence, invalid values, and passing literal arguments through an environment-clearing sudo substitute.

Scope: the ArkOS settings importer supports HTTP proxies. SOCKS5 import is deliberately excluded because PySocks is not bundled. No read-timeout change is included. Full graphical startup and an uninterrupted large download through the patched GUI have not been tested.

[kloptops]

Thanks for this, it's a real problem, and your validation, logging and precedence rules all carried over.

I've pushed a rework onto your branch. The launcher was restructured in #350 (PortMaster.sh is now a stub, and the launch loop is in utils/pm_launch.txt), so instead of passing the proxy through env on the launch line, PortMaster now reads it in Python after sudo:

• harbourmaster.util.setup_proxy() runs at the start of pugwash's and harbourmaster's main(). That covers the GUI, autoinstall (whose runtime downloads the launch line missed) and the CLI.
• es_settings.cfg is found from SUDO_USER's home, then HOME, then /home/ark.
• There's no extra python3 process at launch, which would have run on every CFW.
• Your XML parsing, HTTP-only rule, host/port/control-character checks, credential-free logging and environment precedence are kept. One addition: a host with its own bad port (proxy:abc) is now refused even when ProxyPort is set.
• The tests moved to pytest in tests/test_proxy.py.

Tested on a device through a real HTTP proxy, with the device's default route removed: a port installs through the proxy, and fails without the settings.

[Godalin]

Thanks for reviewing and merging this!