@epoch-agent/plugin-web 0.1.0 → 0.3.1

package/dist/index.js

@@ -11,8 +11,8 @@ function htmlToMarkdown(html) {
   );
   cleaned = cleaned.replace(/<br\s*\/?>/gi, "\n");
   cleaned = cleaned.replace(/<a[^>]*href="([^"]*)"[^>]*>([\s\S]*?)<\/a>/gi, (_, url, text) => {
-    const t = stripTags(text).trim();
-    return t ? `[${t}](${url})` : url;
+    const t5 = stripTags(text).trim();
+    return t5 ? `[${t5}](${url})` : url;
   });
   cleaned = cleaned.replace(
     /<img[^>]*src="([^"]*)"[^>]*alt="([^"]*)"[^>]*>/gi,
@@ -53,52 +53,35 @@ function stripTags(html) {
 function decodeEntities(text) {
   return text.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&nbsp;/g, " ");
 }
-
 // src/utils/url-safety.ts
 import { lookup } from "dns/promises";
 import { isIP } from "net";
 var ALLOWED_PROTOCOLS = ["http:", "https:"];
 var BLOCKED_IPV4 = [
   /^0\./,
-  // 当前网络 / 未指定
   /^10\./,
-  // class A private
   /^127\./,
-  // loopback
   /^169\.254\./,
-  // link-local（含云元数据 169.254.169.254）
   /^172\.(1[6-9]|2\d|3[01])\./,
-  // class B private
   /^192\.0\.0\./,
-  // IETF protocol assignments
   /^192\.0\.2\./,
-  // TEST-NET-1
   /^192\.168\./,
-  // class C private
   /^198\.1[89]\./,
-  // benchmark
   /^198\.51\.100\./,
-  // TEST-NET-2
   /^203\.0\.113\./,
-  // TEST-NET-3
   /^2(2[4-9]|3\d)\./,
-  // 224-239 组播
   /^2(4[0-9]|5[0-5])\./,
-  // 240-255 保留 / 广播
   /^100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\./
-  // 100.64/10 CGNAT
 ];
 var BLOCKED_HOSTNAMES = /* @__PURE__ */ new Set([
   "localhost",
   "localhost.localdomain",
   "ip6-localhost",
   "ip6-loopback",
-  // 云元数据端点
   "metadata.google.internal",
   "metadata.goog",
   "metadata",
   "instance-data",
-  // 常见的「解析到回环」的公共域名，用来绕过主机名检查
   "localtest.me",
   "lvh.me",
   "vcap.me"
@@ -168,7 +151,6 @@ async function checkUrlSafetyAsync(url) {
   }
   return sync;
 }
-
 // src/tools/web-fetch.ts
 var MAX_SIZE = 5 * 1024 * 1024;
 var MAX_REDIRECTS = 5;
@@ -299,7 +281,6 @@ function extractTitle(html, isHtml) {
   const m = html.match(/<title[^>]*>([\s\S]*?)<\/title>/i);
   return m && m[1] ? m[1].trim().slice(0, 200) : void 0;
 }
-
 // src/search/provider.ts
 var SearchError = class extends Error {
   constructor(message, status) {
@@ -345,7 +326,6 @@ function toResult(raw, keys) {
     ...publishedAt ? { publishedAt } : {}
   };
 }
-
 // src/tools/web-search.ts
 var DEFAULT_MAX_RESULTS = 5;
 var HARD_MAX_RESULTS = 20;
@@ -443,8 +423,10 @@ function createWebSearchExec(deps) {
     }
   };
 }
-
+// src/search/registry.ts
+import { t as t4 } from "@epoch-agent/infra";
 // src/search/brave.ts
+import { t } from "@epoch-agent/infra";
 var ENDPOINT = "https://api.search.brave.com/res/v1/web/search";
 var MAX_RESULTS = 20;
 function createBraveProvider(opts = {}) {
@@ -452,7 +434,7 @@ function createBraveProvider(opts = {}) {
   return {
     name: "brave",
     unavailableReason() {
-      return key() ? null : "\u7F3A\u5C11 BRAVE_SEARCH_API_KEY\uFF08\u5728 https://brave.com/search/api \u7533\u8BF7\u540E\u5199\u8FDB ~/.epoch/.env\uFF09";
+      return key() ? null : t("web_search_setup.need_brave_key");
     },
     async search(query, options) {
       const url = new URL(ENDPOINT);
@@ -507,22 +489,22 @@ function toFreshness(days) {
   if (days <= 366) return "py";
   return void 0;
 }
-
 // src/search/searxng.ts
+import { t as t2 } from "@epoch-agent/infra";
 function createSearxngProvider(opts) {
   return {
     name: "searxng",
     unavailableReason() {
       if (!opts.baseUrl?.trim()) {
-        return "searxng \u9700\u8981\u81EA\u5EFA\u5B9E\u4F8B\u5730\u5740\uFF08epoch config set search.baseUrl https://\u4F60\u7684\u5B9E\u4F8B\uFF09";
+        return t2("web_search_setup.searxng_need_base_url");
       }
       try {
         const url = new URL(opts.baseUrl);
         if (url.protocol !== "http:" && url.protocol !== "https:") {
-          return `searxng \u7684 baseUrl \u5FC5\u987B\u662F http(s)\uFF0C\u73B0\u5728\u662F ${url.protocol}`;
+          return t2("web_search_setup.searxng_bad_protocol", { protocol: url.protocol });
         }
       } catch {
-        return `searxng \u7684 baseUrl \u4E0D\u662F\u5408\u6CD5 URL\uFF1A${opts.baseUrl}`;
+        return t2("web_search_setup.searxng_bad_url", { url: opts.baseUrl });
       }
       return null;
     },
@@ -583,8 +565,8 @@ function timeRange(days) {
   if (days <= 366) return "year";
   return void 0;
 }
-
 // src/search/tavily.ts
+import { t as t3 } from "@epoch-agent/infra";
 var ENDPOINT2 = "https://api.tavily.com/search";
 var MAX_RESULTS2 = 20;
 function createTavilyProvider(opts = {}) {
@@ -592,14 +574,12 @@ function createTavilyProvider(opts = {}) {
   return {
     name: "tavily",
     unavailableReason() {
-      return key() ? null : "\u7F3A\u5C11 TAVILY_API_KEY\uFF08\u5728 https://tavily.com \u7533\u8BF7\u540E\u5199\u8FDB ~/.epoch/.env\uFF09";
+      return key() ? null : t3("web_search_setup.need_tavily_key");
     },
     async search(query, options) {
       const body = {
         query,
         max_results: Math.min(options.maxResults, MAX_RESULTS2),
-        // `basic` 而不是 `advanced`：后者贵一倍，而我们本来就不要正文 ——
-        // 模型看完 snippet 自己去 web_fetch
         search_depth: "basic"
       };
       if (options.recencyDays !== void 0 && options.recencyDays > 0) {
@@ -613,8 +593,6 @@ function createTavilyProvider(opts = {}) {
           method: "POST",
           headers: {
             "Content-Type": "application/json",
-            // Bearer 而不是 body 里的 api_key 字段：后者是旧写法，
-            // 且会让 key 出现在任何记录了请求体的地方
             Authorization: `Bearer ${key()}`
           },
           body: JSON.stringify(body),
@@ -638,7 +616,6 @@ function createTavilyProvider(opts = {}) {
     }
   };
 }
-
 // src/search/registry.ts
 var AUTO_ORDER = ["tavily", "brave", "searxng"];
 function createSearchProvider(type, config) {
@@ -652,22 +629,25 @@ function selectSearchProvider(config) {
   if (explicit) {
     const provider = createSearchProvider(explicit, config);
     const reason = provider.unavailableReason();
-    return reason ? { provider: null, detail: `\u914D\u7F6E\u6307\u5B9A\u4E86 ${explicit}\uFF0C\u4F46${reason}` } : { provider, detail: `\u4F7F\u7528 ${explicit}` };
+    return reason ? {
+      provider: null,
+      detail: t4("web_search_setup.explicit_unavailable", { provider: explicit, reason })
+    } : { provider, detail: t4("web_search_setup.explicit_ok", { provider: explicit }) };
   }
   const tried = [];
   for (const type of AUTO_ORDER) {
     const provider = createSearchProvider(type, config);
     const reason = provider.unavailableReason();
-    if (!reason) return { provider, detail: `\u81EA\u52A8\u9009\u7528 ${type}\uFF08\u6309\u51ED\u636E\u63A2\u6D4B\uFF09` };
+    if (!reason) return { provider, detail: t4("web_search_setup.auto", { provider: type }) };
     tried.push(reason);
   }
   return {
     provider: null,
-    // 把三家各自缺什么都列出来：用户多半只想配一家，让他自己挑最方便的那个
-    detail: `\u672A\u914D\u7F6E\u641C\u7D22\u540E\u7AEF\uFF0Cweb_search \u672A\u6CE8\u518C\u3002\u53EF\u9009\uFF1A${tried.join("\uFF1B")}`
+    detail: t4("web_search_setup.none", {
+      tried: tried.join(t4("web_search_setup.tried_sep"))
+    })
   };
 }
-
 // src/index.ts
 var webPlugin = {
   name: "@epoch-agent/plugin-web",
@@ -686,13 +666,8 @@ var webPlugin = {
         },
         required: ["url"]
       },
-      // `openWorldHint: true` 不只是元数据：core 的 tool-executor 用它决定
-      // 要不要把输出包进 `<tool_output untrusted="true">`。抓来的网页内容
-      // 作者既不是用户也不是我们，必须标成「数据」而不是「指令」回灌上下文。
       annotations: { readOnlyHint: true, idempotentHint: false, openWorldHint: true },
       operation: "network",
-      // 审批目标是 URL —— 五候选里没有 `url`，不给 describeTarget 就只能退回
-      // 参数 JSON，「批准抓这个站」下次照样弹窗
       describeTarget: (args) => String(args["url"] ?? ""),
       execute: execWebFetch
     }
@@ -717,14 +692,8 @@ function createWebSearchTool(provider, opts = {}) {
       },
       required: ["query"]
     },
-    // `openWorldHint: true` 是这里最重要的一行：core 的 tool-executor 用它决定
-    // 要不要把输出包进 `<tool_output untrusted="true">`。搜索结果是攻击者
-    // **可以主动投放**的内容（SEO 投毒 + 提示注入），是不可信内容里风险最高的一种。
-    // `idempotentHint: false` —— 同一个词今天明天搜出来的东西不一样
     annotations: { readOnlyHint: true, idempotentHint: false, openWorldHint: true },
     operation: "network",
-    // 审批目标是查询词而不是参数 JSON：`terminal` 那边批准的是命令，
-    // 这边批准的就该是「搜这个词」
     describeTarget: (args) => String(args["query"] ?? ""),
     execute: createWebSearchExec({ provider, ...opts })
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epoch-agent/plugin-web",
-  "version": "0.1.0",
+  "version": "0.3.1",
   "private": false,
   "description": "Web 抓取插件 — URL 安全校验 + HTML→Markdown + SSRF 防护",
   "repository": {
@@ -22,7 +22,8 @@
     "dist"
   ],
   "dependencies": {
-    "@epoch-agent/protocol": "0.1.0"
+    "@epoch-agent/infra": "0.3.1",
+    "@epoch-agent/protocol": "0.3.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",