@heylemon/lemonade 0.4.7 → 0.4.9

package/dist/agents/system-prompt.js

@@ -173,7 +173,7 @@ export function buildAgentSystemPrompt(params) {
         ls: "List directory contents",
         exec: "Run shell commands (use lemon-* CLIs for integrations; for third-party apps like Trello/Jira/Asana use ONLY lemon-composio, never bare commands)",
         process: "Manage background exec sessions",
-        web_search: "Search the web (Brave API)",
+        web_search: "Search the web (DuckDuckGo by default, no API key needed)",
         web_fetch: "Fetch and extract readable content from a URL",
         // Channel docking: add login tools here when a channel needs interactive linking.
         browser: "Control Lemonade's dedicated browser (never the user's personal browser)",
@@ -393,7 +393,7 @@ export function buildAgentSystemPrompt(params) {
         "1. Service has a dedicated `lemon-*` CLI tool (Gmail, Calendar, Drive, Docs, Sheets, Slides, Notion, Slack, YouTube) → **always use the CLI tool**. Never open these in a browser or via URI.",
         '2. ANY other app/service (Trello, Jira, LinkedIn, HubSpot, Asana, Salesforce, Todoist, etc.) → **always run `lemon-composio search "<task>"`** first. Never say you can\'t do it without searching.',
         "3. If Composio has no results or connect fails → use Lemonade's dedicated `browser` tool as fallback to complete the task directly.",
-        "4. User wants an *answer* from the web → use `web_search` (+ `web_fetch` if needed).",
+        "4. User wants an *answer* from the web → use `web_search` (works out of the box, no API key needed). If it fails, use the `browser` tool to search Google as fallback. Never ask the user for API keys.",
         "5. User wants to *interact* with a page (fill forms, click buttons, scrape data) → use Lemonade's dedicated `browser` tool.",
         "6. User wants to *view* a general website (no CLI or Composio tool exists) → use Lemonade's dedicated `browser` tool to navigate there.",
         "",
@@ -489,7 +489,7 @@ export function buildAgentSystemPrompt(params) {
         '- "create a new doc" → `lemon-docs create "Untitled"` (CLI, not browser)',
         '- "start a Google Meet" → `browser` navigate to `https://meet.new`',
         '- "check my email" → `lemon-gmail list` (CLI, not browser)',
-        '- "what is the capital of France?" → use `web_search` (user wants the answer, not a page)',
+        '- "what is the capital of France?" → use `web_search` (always available)',
         "",
         "## IDE & Coding Agent Control",
         "Control AI coding agents via CLI — never type into GUI windows:",
@@ -537,6 +537,12 @@ export function buildAgentSystemPrompt(params) {
         "ALWAYS use the `cron` tool (action: add/update/remove/list/run/status) for managing cron jobs and reminders.",
         "NEVER use `exec` or shell commands to read/write cron files (e.g. ~/.lemonade/cron/jobs.json) directly — the gateway cron service will not detect the change.",
         "",
+        "### Choosing sessionTarget and payload kind",
+        "Pick the right type based on what the job needs to do:",
+        '- **Simple reminder/nudge** (just tell the user something) → `sessionTarget: "main"`, `payload.kind: "systemEvent"` with the reminder text.',
+        '- **Task that requires action** (send a message, fetch data, compose an email, etc.) → `sessionTarget: "isolated"`, `payload.kind: "agentTurn"` with the task as `message`. Set `deliver: true` and `channel` / `to` if the output should be sent to a channel (WhatsApp, Slack, email).',
+        "If a job needs the agent to actually DO something (send, search, compose, browse), it MUST be isolated+agentTurn. Using main+systemEvent for action tasks will silently fail because the agent doesn't get a full turn to execute tools.",
+        "",
         "### Cancelling / stopping reminders",
         "When the user asks to stop, cancel, turn off, or remove a reminder or recurring notification — in ANY phrasing — you MUST actually remove the cron job. Do NOT just acknowledge verbally.",
         "Steps: 1) `cron` action:list → find the matching job(s) by name/text/schedule, 2) `cron` action:remove with the jobId for each match.",

package/dist/agents/tools/web-search.js

@@ -1,8 +1,9 @@
 import { Type } from "@sinclair/typebox";
+import * as DDG from "duck-duck-scrape";
 import { formatCliCommand } from "../../cli/command-format.js";
 import { jsonResult, readNumberParam, readStringParam } from "./common.js";
 import { DEFAULT_CACHE_TTL_MINUTES, DEFAULT_TIMEOUT_SECONDS, normalizeCacheKey, readCache, readResponseText, resolveCacheTtlMs, resolveTimeoutSeconds, withTimeout, writeCache, } from "./web-shared.js";
-const SEARCH_PROVIDERS = ["brave", "perplexity"];
+const SEARCH_PROVIDERS = ["brave", "perplexity", "duckduckgo"];
 const DEFAULT_SEARCH_COUNT = 5;
 const MAX_SEARCH_COUNT = 10;
 const BRAVE_SEARCH_ENDPOINT = "https://api.search.brave.com/res/v1/web/search";
@@ -74,7 +75,9 @@ function resolveSearchProvider(search) {
         return "perplexity";
     if (raw === "brave")
         return "brave";
-    return "brave";
+    if (raw === "duckduckgo" || raw === "ddg")
+        return "duckduckgo";
+    return "duckduckgo";
 }
 function resolvePerplexityConfig(search) {
     if (!search || typeof search !== "object")
@@ -212,6 +215,25 @@ async function runPerplexitySearch(params) {
     const citations = data.citations ?? [];
     return { content, citations };
 }
+async function runDuckDuckGoSearch(params) {
+    const start = Date.now();
+    const searchResults = await DDG.search(params.query, {
+        safeSearch: DDG.SafeSearchType.MODERATE,
+    });
+    const results = (searchResults.results ?? []).slice(0, params.count).map((r) => ({
+        title: r.title ?? "",
+        url: r.url ?? "",
+        description: r.description?.replace(/<\/?b>/g, "") ?? "",
+        siteName: resolveSiteName(r.url ?? ""),
+    }));
+    return {
+        query: params.query,
+        provider: "duckduckgo",
+        count: results.length,
+        tookMs: Date.now() - start,
+        results,
+    };
+}
 async function runWebSearch(params) {
     const cacheKey = normalizeCacheKey(params.provider === "brave"
         ? `${params.provider}:${params.query}:${params.count}:${params.country || "default"}:${params.search_lang || "default"}:${params.ui_lang || "default"}:${params.freshness || "default"}`
@@ -239,6 +261,15 @@ async function runWebSearch(params) {
         writeCache(SEARCH_CACHE, cacheKey, payload, params.cacheTtlMs);
         return payload;
     }
+    if (params.provider === "duckduckgo") {
+        const ddgResult = await runDuckDuckGoSearch({
+            query: params.query,
+            count: params.count,
+            timeoutSeconds: params.timeoutSeconds,
+        });
+        writeCache(SEARCH_CACHE, cacheKey, ddgResult, params.cacheTtlMs);
+        return ddgResult;
+    }
     if (params.provider !== "brave") {
         throw new Error("Unsupported web search provider.");
     }
@@ -294,19 +325,22 @@ export function createWebSearchTool(options) {
         return null;
     const provider = resolveSearchProvider(search);
     const perplexityConfig = resolvePerplexityConfig(search);
-    const description = provider === "perplexity"
-        ? "Search the web using Perplexity Sonar (direct or via OpenRouter). Returns AI-synthesized answers with citations from real-time web search."
-        : "Search the web using Brave Search API. Supports region-specific and localized search via country and language parameters. Returns titles, URLs, and snippets for fast research.";
+    const descriptions = {
+        perplexity: "Search the web using Perplexity Sonar (direct or via OpenRouter). Returns AI-synthesized answers with citations from real-time web search.",
+        brave: "Search the web using Brave Search API. Supports region-specific and localized search via country and language parameters. Returns titles, URLs, and snippets for fast research.",
+        duckduckgo: "Search the web using DuckDuckGo (no API key required). Returns titles, URLs, and snippets for fast research.",
+    };
     return {
         label: "Web Search",
         name: "web_search",
-        description,
+        description: descriptions[provider] ?? descriptions.duckduckgo,
         parameters: WebSearchSchema,
         execute: async (_toolCallId, args) => {
+            let effectiveProvider = provider;
             const perplexityAuth = provider === "perplexity" ? resolvePerplexityApiKey(perplexityConfig) : undefined;
             const apiKey = provider === "perplexity" ? perplexityAuth?.apiKey : resolveSearchApiKey(search);
-            if (!apiKey) {
-                return jsonResult(missingSearchKeyPayload(provider));
+            if (!apiKey && provider !== "duckduckgo") {
+                effectiveProvider = "duckduckgo";
             }
             const params = args;
             const query = readStringParam(params, "query", { required: true });
@@ -315,7 +349,7 @@ export function createWebSearchTool(options) {
             const search_lang = readStringParam(params, "search_lang");
             const ui_lang = readStringParam(params, "ui_lang");
             const rawFreshness = readStringParam(params, "freshness");
-            if (rawFreshness && provider !== "brave") {
+            if (rawFreshness && effectiveProvider !== "brave") {
                 return jsonResult({
                     error: "unsupported_freshness",
                     message: "freshness is only supported by the Brave web_search provider.",
@@ -333,10 +367,10 @@ export function createWebSearchTool(options) {
             const result = await runWebSearch({
                 query,
                 count: resolveSearchCount(count, DEFAULT_SEARCH_COUNT),
-                apiKey,
+                apiKey: apiKey ?? "",
                 timeoutSeconds: resolveTimeoutSeconds(search?.timeoutSeconds, DEFAULT_TIMEOUT_SECONDS),
                 cacheTtlMs: resolveCacheTtlMs(search?.cacheTtlMinutes, DEFAULT_CACHE_TTL_MINUTES),
-                provider,
+                provider: effectiveProvider,
                 country,
                 search_lang,
                 ui_lang,

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.4.7",
-  "commit": "65ee54b903b6ee3cec348f46541ef82ccbcb229c",
-  "builtAt": "2026-02-24T11:18:11.706Z"
+  "version": "0.4.9",
+  "commit": "3b6838d381879be6654e0402185e231a15bf7f3c",
+  "builtAt": "2026-02-25T05:17:09.702Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-be64d0d57f69ca463e3b2ef7886f231d8d7b8e3ec39975cb49e8ce91204fc307
+edeb39165d712bc22ac4db917397e97d960bc33ac988beebcfb2148e4ca02cf6

package/dist/config/schema.js

@@ -143,7 +143,7 @@ const FIELD_LABELS = {
     "tools.message.broadcast.enabled": "Enable Message Broadcast",
     "tools.web.search.enabled": "Enable Web Search Tool",
     "tools.web.search.provider": "Web Search Provider",
-    "tools.web.search.apiKey": "Brave Search API Key",
+    "tools.web.search.apiKey": "Search API Key (Brave/Perplexity, optional)",
     "tools.web.search.maxResults": "Web Search Max Results",
     "tools.web.search.timeoutSeconds": "Web Search Timeout (sec)",
     "tools.web.search.cacheTtlMinutes": "Web Search Cache TTL (min)",
@@ -358,9 +358,9 @@ const FIELD_HELP = {
     "tools.message.crossContext.marker.prefix": 'Text prefix for cross-context markers (supports "{channel}").',
     "tools.message.crossContext.marker.suffix": 'Text suffix for cross-context markers (supports "{channel}").',
     "tools.message.broadcast.enabled": "Enable broadcast action (default: true).",
-    "tools.web.search.enabled": "Enable the web_search tool (requires a provider API key).",
-    "tools.web.search.provider": 'Search provider ("brave" or "perplexity").',
-    "tools.web.search.apiKey": "Brave Search API key (fallback: BRAVE_API_KEY env var).",
+    "tools.web.search.enabled": "Enable the web_search tool.",
+    "tools.web.search.provider": 'Search provider ("duckduckgo", "brave", or "perplexity"). Default: "duckduckgo" (free, no API key).',
+    "tools.web.search.apiKey": "Brave Search API key (fallback: BRAVE_API_KEY env var). Only needed for Brave provider.",
     "tools.web.search.maxResults": "Default number of results to return (1-10).",
     "tools.web.search.timeoutSeconds": "Timeout in seconds for web_search requests.",
     "tools.web.search.cacheTtlMinutes": "Cache TTL in minutes for web_search results.",

package/dist/config/zod-schema.agent-runtime.js

@@ -149,7 +149,9 @@ export const ToolPolicySchema = ToolPolicyBaseSchema.superRefine((value, ctx) =>
 export const ToolsWebSearchSchema = z
     .object({
     enabled: z.boolean().optional(),
-    provider: z.union([z.literal("brave"), z.literal("perplexity")]).optional(),
+    provider: z
+        .union([z.literal("brave"), z.literal("perplexity"), z.literal("duckduckgo")])
+        .optional(),
     apiKey: z.string().optional(),
     maxResults: z.number().int().positive().optional(),
     timeoutSeconds: z.number().int().positive().optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heylemon/lemonade",
-  "version": "0.4.7",
+  "version": "0.4.9",
   "description": "AI gateway CLI for Lemon - local AI assistant with integrations",
   "publishConfig": {
     "access": "restricted"
@@ -198,6 +198,7 @@
     "detect-libc": "^2.1.2",
     "discord-api-types": "^0.38.37",
     "dotenv": "^17.2.3",
+    "duck-duck-scrape": "^2.2.7",
     "express": "^5.2.1",
     "file-type": "^21.3.0",
     "grammy": "^1.39.3",