@gatemux/dsh-gatemux-login 1.1.1 → 1.2.0

package/README.md

@@ -34,13 +34,17 @@ cannot be installed into from the CLI.
 
 ## What it does
 
-Installing this bundle changes three things about the composed profile:
+Installing this bundle changes four things about the composed profile:
 
 - Adds a GateMux account service that signs you in through GateMux's OAuth 2.0
   redirect flow (authorization code with PKCE `S256`).
 - Registers a model route, provider id `gatemux-account`, that authenticates
   every request with your own credential and advertises the models
   `https://rest.gatemux.ai` reports it serves over the Messages protocol.
+- Registers and selects a GateMux-native web search provider (`gatemux`), so
+  `web_search` uses the same account credential and Anthropic's
+  `web_search_20250305` server tool. GateMux requires its Claude Code client
+  marker in `system`; the provider sends it, and no DeepSeek API key is needed.
 - Turns off the shipped vendor account route (`deepseek-account` and
   `llm-deepseek-account`) so there is one account provider instead of two.
 
@@ -69,6 +73,8 @@ authorization opens in your browser and returns to the app.
 | `ACCOUNT_SIGN_IN_REQUIRED` | No credential yet. Sign in. |
 | `ACCOUNT_TOKEN_INVALID` | The credential was revoked, expired, or suspended. It has been discarded; sign in again. |
 | `ACCOUNT_QUOTA_EXCEEDED` | Your GateMux balance or spend cap is exhausted. Top up. |
+| `web_search` says "Sign in with GateMux" | The search provider uses the account credential; sign in from account settings. |
+| `web_search` returns no sources | GateMux did not execute the native tool. Check the `gatemux-search` row, or switch `web.searchProvider` to another backend. |
 | `Usage` or `Top up` reports "the operation could not be completed" in the desktop app | The desktop embeds these pages only when the provider supplies a platform session; GateMux does not yet. Open the same link in a browser tab. |
 | Balance shows "unavailable" | The account endpoint returned no wallet for this application. The usage link still opens the GateMux console in a browser. |
 | `ip_not_allowed` (HTTP 403) | Your network is not in the application's trusted egress IP allowlist. Re-authorizing will not fix it. |
@@ -89,7 +95,9 @@ catalog across a listing outage, and advertises `gatemux/deepseek-v4-flash` and
 `gatemux/deepseek-v4-pro` before the first read. Your credential is stored at
 `$DSH_HOME/.credentials.yaml` under the key `gatemux/account`, mode `0600`, and
 leaves your machine only as the `Authorization: Bearer` header on requests to
-`rest.gatemux.ai`.
+`rest.gatemux.ai`. Web search uses GateMux's native `web_search_20250305` server
+tool through the same account; the provider sends the Claude Code client marker
+GateMux requires. There is no DeepSeek API key and no second credential.
 
 To change the default model, or to override any value this bundle sets, add a row
 to `$DSH_HOME/profiles/<name>/cordis.patch.yml` — that layer is applied after

package/cordis.patch.yml

@@ -33,6 +33,12 @@
 - id: llm-deepseek-account
   disabled: true
 
+- id: web
+  name: '@deepseek-ai/dsh-web'
+  config:
+    searchProvider: gatemux
+    fetchProvider: http
+
 - insert:
     - id: gatemux-account
       name: '@gatemux/dsh-gatemux-login-core/account'
@@ -90,12 +96,24 @@
             inputModalities:
               - text
 
+    # GateMux native web search (Anthropic web_search_20250305). The provider
+    # sends GateMux's Claude Code client marker; without it the model answers
+    # without searching. Search is billed to the signed-in GateMux account.
+    - id: gatemux-search
+      name: '@gatemux/dsh-gatemux-login-core/search'
+      config:
+        baseURL: https://rest.gatemux.ai/v1
+        model: gatemux/deepseek-v4-flash
+        maxTokens: 2048
+        maxUses: 8
+
 # Point the default model at the user-funded route, so installing this bundle is
 # enough to start using it. A profile's own cordis.patch.yml is applied after
 # every bundle layer, so a user who prefers another default still overrides this.
+
 - id: agent-default-model
   name: '@deepseek-ai/dsh-agent-default-model'
   config:
     provider: gatemux-account
     model: gatemux/deepseek-v4-flash
-    reasoningEffort: high
+    reasoningEffort: high

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gatemux/dsh-gatemux-login",
-  "version": "1.1.1",
+  "version": "1.2.0",
   "type": "module",
   "description": "Sign in with GateMux for DeepSeek Harness: users pay from their own GateMux balance. International (gatemux.ai) bundle.",
   "publishConfig": {
@@ -30,7 +30,7 @@
   },
   "icon": "./icon.svg",
   "dependencies": {
-    "@gatemux/dsh-gatemux-login-core": "^1.0.1"
+    "@gatemux/dsh-gatemux-login-core": "^1.1.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",
@@ -40,7 +40,8 @@
     "@deepseek-ai/dsh-host-webserver": "^0.1.7-rc.2 || ^0.2.0-rc.2",
     "@deepseek-ai/dsh-launch-environment": "^0.1.7-rc.2 || ^0.2.0-rc.2",
     "@deepseek-ai/dsh-llm": "^0.1.7-rc.2 || ^0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm-deepseek": "^0.1.7-rc.2 || ^0.2.0-rc.2"
+    "@deepseek-ai/dsh-llm-deepseek": "^0.1.7-rc.2 || ^0.2.0-rc.2",
+    "@deepseek-ai/dsh-web": "^0.1.7-rc.2 || ^0.2.0-rc.2"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.4",
@@ -50,6 +51,7 @@
     "@deepseek-ai/dsh-host-webserver": "^0.1.7-rc.2 || ^0.2.0-rc.2",
     "@deepseek-ai/dsh-launch-environment": "^0.1.7-rc.2 || ^0.2.0-rc.2",
     "@deepseek-ai/dsh-llm": "^0.1.7-rc.2 || ^0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm-deepseek": "^0.1.7-rc.2 || ^0.2.0-rc.2"
+    "@deepseek-ai/dsh-llm-deepseek": "^0.1.7-rc.2 || ^0.2.0-rc.2",
+    "@deepseek-ai/dsh-web": "^0.1.7-rc.2 || ^0.2.0-rc.2"
   }
 }