@klarkxy/dsh-web-search-manager 0.1.0

package/lib/index.js

@@ -0,0 +1,1070 @@
+import { WEB_SEARCH_RPC_CHANNEL, defaultSettings, migrateSearchOrder, pickActiveSearch, providerKey, resolveSearchOrder, validateBaseURL } from "./contracts.js";
+import { credentialRef } from "@deepseek-ai/dsh-credentials";
+import { WebError } from "@deepseek-ai/dsh-web";
+import { DEEPSEEK_DEFAULT_API_VERSION, DEEPSEEK_DEFAULT_BASE_URL, DEEPSEEK_DEFAULT_MAX_TOKENS, DEEPSEEK_DEFAULT_MAX_USES, DEEPSEEK_DEFAULT_MODEL, DeepSeekSearchProvider } from "@deepseek-ai/dsh-web-search-deepseek";
+import { ExaSearchProvider } from "@deepseek-ai/dsh-web-search-exa";
+import { HttpFetchProvider } from "@deepseek-ai/dsh-web-fetch-http";
+import { defineDomain, domainTable } from "@deepseek-ai/dsh-storage-domain";
+import { z } from "zod";
+const SEARCH_ENGINE_PAGE = "https://lite.duckduckgo.com/lite/";
+const MAX_RESPONSE_BYTES$2 = 2e6;
+const USER_AGENT = "Mozilla/5.0 (compatible; dsh-editor-search/1.0)";
+function searchEngineUrl(query, page = SEARCH_ENGINE_PAGE) {
+	const url = new URL(page);
+	if (url.protocol !== "https:" || url.username || url.password) throw new Error("Invalid search page");
+	url.searchParams.set("q", query);
+	return url.href;
+}
+function decodeEntities(value) {
+	return value.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, "\"").replace(/&#39;/g, "'").replace(/&nbsp;/g, " ");
+}
+function stripTags(value) {
+	return value.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ");
+}
+function unwrapSearchHref(href, pageUrl) {
+	let raw = decodeEntities(href.trim());
+	let url;
+	try {
+		url = new URL(raw, pageUrl);
+	} catch {
+		return;
+	}
+	if (!["http:", "https:"].includes(url.protocol) || url.username || url.password) return;
+	const host = url.hostname;
+	if ((host === "duckduckgo.com" || host.endsWith(".duckduckgo.com")) && (url.pathname === "/l/" || url.pathname === "/l")) {
+		const nested = url.searchParams.get("uddg") ?? url.searchParams.get("u");
+		if (nested) {
+			try {
+				url = new URL(nested);
+			} catch {
+				return;
+			}
+			if (!["http:", "https:"].includes(url.protocol) || url.username || url.password) return;
+		}
+	}
+	const resultHost = url.hostname.replace(/^www\./, "");
+	if (resultHost === "duckduckgo.com" || resultHost.endsWith(".duckduckgo.com")) return;
+	return url.href;
+}
+function parseSearchEngineHtml(html, pageUrl = SEARCH_ENGINE_PAGE) {
+	const sources = [];
+	const seen = /* @__PURE__ */ new Set();
+	const re = /<a\b[^>]*href\s*=\s*(?:"([^"]*)"|'([^']*)')[^>]*>([\s\S]*?)<\/a>/gi;
+	let match;
+	while (match = re.exec(html)) {
+		const url = unwrapSearchHref(match[1] ?? match[2] ?? "", pageUrl);
+		if (!url || seen.has(url)) continue;
+		seen.add(url);
+		const title = decodeEntities(stripTags(match[3] ?? "")).trim().slice(0, 1e3);
+		sources.push(title ? {
+			url,
+			title
+		} : { url });
+	}
+	return sources;
+}
+async function readText(response, signal) {
+	const reader = response.body?.getReader();
+	if (!reader) throw new Error("Missing response");
+	let size = 0;
+	const chunks = [];
+	try {
+		while (true) {
+			signal?.throwIfAborted();
+			const { value, done } = await reader.read();
+			if (done) break;
+			size += value.length;
+			if (size > MAX_RESPONSE_BYTES$2) throw new Error("Response too large");
+			chunks.push(value);
+		}
+	} finally {
+		await reader.cancel().catch(() => {});
+		reader.releaseLock();
+	}
+	const bytes = new Uint8Array(size);
+	let offset = 0;
+	for (const chunk of chunks) {
+		bytes.set(chunk, offset);
+		offset += chunk.length;
+	}
+	return new TextDecoder().decode(bytes);
+}
+/** Adapter for `ctx.web.search`; `dsh-tool-web` still owns the model-facing `web_search` tool. */
+var SearchEngineProvider = class {
+	options;
+	id = "ddg";
+	constructor(options = {}) {
+		this.options = options;
+	}
+	available() {
+		return true;
+	}
+	async search(request, signal) {
+		if (!request.query?.trim() || request.query.length > 4e3) throw new WebError("查询无效。", "WEB_INVALID_REQUEST");
+		const count = request.maxResults ?? 5;
+		if (!Number.isInteger(count) || count < 1 || count > 20) throw new WebError("结果数须为 1 至 20。", "WEB_INVALID_REQUEST");
+		try {
+			signal?.throwIfAborted();
+			const url = searchEngineUrl(request.query.trim());
+			const response = await (this.options.fetch ?? fetch)(url, {
+				method: "GET",
+				redirect: "follow",
+				signal,
+				headers: {
+					accept: "text/html",
+					"user-agent": USER_AGENT
+				}
+			});
+			if (!response.ok) {
+				await response.body?.cancel().catch(() => {});
+				throw new WebError(`搜索页请求失败（HTTP ${response.status}）。`, "WEB_PROVIDER_ERROR");
+			}
+			const sources = parseSearchEngineHtml(await readText(response, signal), response.url || "https://lite.duckduckgo.com/lite/");
+			return {
+				sources: sources.slice(0, count),
+				truncated: sources.length > count
+			};
+		} catch (error) {
+			if (signal?.aborted) throw new WebError("搜索已取消。", "WEB_ABORTED");
+			if (error instanceof WebError) throw error;
+			throw new WebError("无法读取公开搜索页。", "WEB_PROVIDER_ERROR");
+		}
+	}
+};
+function record$1(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+async function readJSON$1(response, signal) {
+	const reader = response.body?.getReader();
+	if (!reader) throw new Error("Missing response");
+	let size = 0;
+	const chunks = [];
+	try {
+		while (true) {
+			signal?.throwIfAborted();
+			const { value, done } = await reader.read();
+			if (done) break;
+			size += value.length;
+			if (size > 2e6) throw new Error("Response too large");
+			chunks.push(value);
+		}
+	} finally {
+		await reader.cancel().catch(() => {});
+		reader.releaseLock();
+	}
+	const bytes = new Uint8Array(size);
+	let offset = 0;
+	for (const chunk of chunks) {
+		bytes.set(chunk, offset);
+		offset += chunk.length;
+	}
+	return JSON.parse(new TextDecoder().decode(bytes));
+}
+function httpsEndpoint(base, path = "") {
+	const url = new URL(base);
+	if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash) throw new Error("Invalid endpoint");
+	return `${url.href.replace(/\/+$/, "")}${path}`;
+}
+function sourceFrom(raw, urlKey, titleKey, snippetKey) {
+	const row = record$1(raw);
+	if (typeof row?.[urlKey] !== "string") return;
+	let url;
+	try {
+		url = new URL(row[urlKey]);
+	} catch {
+		return;
+	}
+	if (!["https:", "http:"].includes(url.protocol) || url.username || url.password) return;
+	const title = titleKey && typeof row[titleKey] === "string" ? row[titleKey].slice(0, 1e3) : void 0;
+	const snippet = snippetKey && typeof row[snippetKey] === "string" ? row[snippetKey].slice(0, 8e3) : void 0;
+	return {
+		url: url.href,
+		...title ? { title } : {},
+		...snippet ? { snippet } : {}
+	};
+}
+//#endregion
+//#region src/rest-search.ts
+function createRestSearch(spec) {
+	return class {
+		options;
+		id = spec.id;
+		constructor(options) {
+			this.options = options;
+		}
+		available() {
+			try {
+				httpsEndpoint(this.options.baseURL ?? spec.fallback, spec.path);
+				return Boolean(this.options.apiKey.trim());
+			} catch {
+				return false;
+			}
+		}
+		async search(request, signal) {
+			if (!this.available()) throw new WebError(`${spec.id} 配置不可用。`, "WEB_CREDENTIAL_MISSING");
+			if (!request.query?.trim() || request.query.length > 4e3) throw new WebError("查询无效。", "WEB_INVALID_REQUEST");
+			const count = request.maxResults ?? 5;
+			if (!Number.isInteger(count) || count < 1 || count > 20) throw new WebError("结果数须为 1 至 20。", "WEB_INVALID_REQUEST");
+			const query = request.query.trim();
+			try {
+				signal?.throwIfAborted();
+				const url = new URL(httpsEndpoint(this.options.baseURL ?? spec.fallback, spec.path));
+				for (const [key, value] of Object.entries(spec.query?.({
+					query,
+					count
+				}) ?? {})) url.searchParams.set(key, value);
+				const response = await (this.options.fetch ?? fetch)(url, {
+					method: spec.method,
+					redirect: "error",
+					signal,
+					headers: {
+						accept: "application/json",
+						...spec.headers(this.options.apiKey)
+					},
+					...spec.body ? { body: JSON.stringify(spec.body({
+						query,
+						count
+					})) } : {}
+				});
+				if (!response.ok) {
+					await response.body?.cancel().catch(() => {});
+					throw new WebError(`搜索请求失败（HTTP ${response.status}）。`, "WEB_PROVIDER_ERROR");
+				}
+				const sources = spec.parse(await readJSON$1(response, signal));
+				return {
+					sources: sources.slice(0, count),
+					truncated: sources.length > count
+				};
+			} catch (error) {
+				if (signal?.aborted) throw new WebError("搜索已取消。", "WEB_ABORTED");
+				if (error instanceof WebError) throw error;
+				throw new WebError("无法完成搜索请求。", "WEB_PROVIDER_ERROR");
+			}
+		}
+	};
+}
+const BraveSearchProvider = createRestSearch({
+	id: "brave",
+	fallback: "https://api.search.brave.com",
+	path: "/res/v1/web/search",
+	method: "GET",
+	headers: (apiKey) => ({ "x-subscription-token": apiKey }),
+	query: ({ query, count }) => ({
+		q: query,
+		count: String(count)
+	}),
+	parse(payload) {
+		const results = record$1(record$1(payload)?.web)?.results;
+		return Array.isArray(results) ? results.flatMap((row) => sourceFrom(row, "url", "title", "description") ?? []) : [];
+	}
+});
+const BochaSearchProvider = createRestSearch({
+	id: "bocha",
+	fallback: "https://api.bochaai.com",
+	path: "/v1/web-search",
+	method: "POST",
+	headers: (apiKey) => ({
+		authorization: `Bearer ${apiKey}`,
+		"content-type": "application/json"
+	}),
+	body: ({ query, count }) => ({
+		query,
+		count,
+		freshness: "noLimit",
+		summary: false
+	}),
+	parse(payload) {
+		const pages = record$1(record$1(record$1(payload)?.data)?.webPages)?.value ?? record$1(record$1(payload)?.webPages)?.value;
+		return Array.isArray(pages) ? pages.flatMap((row) => sourceFrom(row, "url", "name", "snippet") ?? []) : [];
+	}
+});
+const SerperSearchProvider = createRestSearch({
+	id: "serper",
+	fallback: "https://google.serper.dev",
+	path: "/search",
+	method: "POST",
+	headers: (apiKey) => ({
+		"x-api-key": apiKey,
+		"content-type": "application/json"
+	}),
+	body: ({ query, count }) => ({
+		q: query,
+		num: count
+	}),
+	parse(payload) {
+		const organic = record$1(payload)?.organic;
+		return Array.isArray(organic) ? organic.flatMap((row) => sourceFrom(row, "link", "title", "snippet") ?? []) : [];
+	}
+});
+const FirecrawlSearchProvider = createRestSearch({
+	id: "firecrawl",
+	fallback: "https://api.firecrawl.dev",
+	path: "/v1/search",
+	method: "POST",
+	headers: (apiKey) => ({
+		authorization: `Bearer ${apiKey}`,
+		"content-type": "application/json"
+	}),
+	body: ({ query, count }) => ({
+		query,
+		limit: count
+	}),
+	parse(payload) {
+		const data = record$1(payload)?.data;
+		return Array.isArray(data) ? data.flatMap((row) => sourceFrom(row, "url", "title", "description") ?? []) : [];
+	}
+});
+//#endregion
+//#region src/tavily.ts
+const MAX_RESPONSE_BYTES = 2e6;
+function endpoint(base) {
+	const url = new URL(base);
+	if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash) throw new Error("Invalid endpoint");
+	return `${url.href.replace(/\/+$/, "")}/search`;
+}
+function record(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+async function readJSON(response, signal) {
+	const reader = response.body?.getReader();
+	if (!reader) throw new Error("Missing response");
+	let size = 0;
+	const chunks = [];
+	try {
+		while (true) {
+			signal?.throwIfAborted();
+			const { value, done } = await reader.read();
+			if (done) break;
+			size += value.length;
+			if (size > MAX_RESPONSE_BYTES) throw new Error("Response too large");
+			chunks.push(value);
+		}
+		const bytes = new Uint8Array(size);
+		let offset = 0;
+		for (const chunk of chunks) {
+			bytes.set(chunk, offset);
+			offset += chunk.length;
+		}
+		return JSON.parse(new TextDecoder().decode(bytes));
+	} finally {
+		await reader.cancel().catch(() => {});
+		reader.releaseLock();
+	}
+}
+/** Direct REST adapter. No auxiliary LLM, retries, anonymous fallback or auto-depth. */
+var TavilySearchProvider = class {
+	options;
+	id = "tavily";
+	constructor(options) {
+		this.options = options;
+	}
+	available() {
+		try {
+			endpoint(this.options.baseURL ?? "https://api.tavily.com");
+			return Boolean(this.options.apiKey.trim());
+		} catch {
+			return false;
+		}
+	}
+	async search(request, signal) {
+		if (!this.available()) throw new WebError("Tavily 配置不可用。", "WEB_CREDENTIAL_MISSING");
+		if (!request.query?.trim() || request.query.length > 4e3) throw new WebError("查询无效。", "WEB_INVALID_REQUEST");
+		const count = request.maxResults ?? 5;
+		if (!Number.isInteger(count) || count < 1 || count > 20) throw new WebError("结果数须为 1 至 20。", "WEB_INVALID_REQUEST");
+		try {
+			signal?.throwIfAborted();
+			const response = await (this.options.fetch ?? fetch)(endpoint(this.options.baseURL ?? "https://api.tavily.com"), {
+				method: "POST",
+				redirect: "error",
+				signal,
+				headers: {
+					authorization: `Bearer ${this.options.apiKey}`,
+					"content-type": "application/json",
+					accept: "application/json"
+				},
+				body: JSON.stringify({
+					query: request.query.trim(),
+					max_results: count,
+					search_depth: "basic",
+					topic: "general",
+					auto_parameters: false,
+					include_answer: false,
+					include_raw_content: false,
+					include_images: false
+				})
+			});
+			if (!response.ok) {
+				await response.body?.cancel().catch(() => {});
+				throw new WebError(`Tavily 请求失败（HTTP ${response.status}）。`, "WEB_PROVIDER_ERROR");
+			}
+			const payload = record(await readJSON(response, signal));
+			if (!Array.isArray(payload?.results)) throw new Error("Invalid response shape");
+			const sources = [];
+			for (const raw of payload.results) {
+				const row = record(raw);
+				if (typeof row?.url !== "string") continue;
+				let url;
+				try {
+					url = new URL(row.url);
+				} catch {
+					continue;
+				}
+				if (!["https:", "http:"].includes(url.protocol) || url.username || url.password) continue;
+				sources.push({
+					url: url.href,
+					...typeof row.title === "string" ? { title: row.title.slice(0, 1e3) } : {},
+					...typeof row.content === "string" ? { snippet: row.content.slice(0, 8e3) } : {},
+					...typeof row.published_date === "string" && Number.isFinite(Date.parse(row.published_date)) ? { publishedAt: new Date(row.published_date).toISOString() } : {}
+				});
+			}
+			return {
+				sources: sources.slice(0, count),
+				truncated: sources.length > count
+			};
+		} catch (error) {
+			if (signal?.aborted) throw new WebError("Tavily 搜索已取消。", "WEB_ABORTED");
+			if (error instanceof WebError) throw error;
+			throw new WebError("Tavily 返回无效响应或网络连接失败。", "WEB_PROVIDER_ERROR");
+		}
+	}
+};
+//#endregion
+//#region src/builtins.ts
+function registerBuiltins(manager) {
+	const offEngine = manager.registerSearchProvider({
+		id: "ddg",
+		label: "DuckDuckGo",
+		billing: "none",
+		description: "无需注册。默认后端。"
+	}, () => new SearchEngineProvider());
+	const offDeepSeek = manager.registerSearchProvider({
+		id: "deepseek-official",
+		label: "DeepSeek 搜索",
+		description: "使用已配置的 DeepSeek API Key。可能产生额外搜索费用。",
+		defaultBaseURL: DEEPSEEK_DEFAULT_BASE_URL,
+		credentialRef: "DEEPSEEK_API_KEY",
+		credentialShared: true,
+		billing: "model-and-tools",
+		signupUrl: "https://platform.deepseek.com/api_keys"
+	}, (options) => new DeepSeekSearchProvider(() => ({
+		apiKey: options.apiKey,
+		baseURL: options.baseURL ?? DEEPSEEK_DEFAULT_BASE_URL,
+		model: DEEPSEEK_DEFAULT_MODEL,
+		apiVersion: DEEPSEEK_DEFAULT_API_VERSION,
+		maxTokens: DEEPSEEK_DEFAULT_MAX_TOKENS,
+		maxUses: DEEPSEEK_DEFAULT_MAX_USES
+	})));
+	const offExa = manager.registerSearchProvider({
+		id: "exa",
+		label: "Exa",
+		description: "独立 Search API。",
+		defaultBaseURL: "https://api.exa.ai",
+		credentialRef: "DSH_EDITOR_WEB_EXA_API_KEY",
+		billing: "request",
+		signupUrl: "https://dashboard.exa.ai/api-keys"
+	}, (options) => new ExaSearchProvider({
+		apiKey: options.apiKey ?? "",
+		baseURL: options.baseURL ?? "https://api.exa.ai",
+		searchType: "auto",
+		highlightsPerResult: 1
+	}));
+	const offBrave = manager.registerSearchProvider({
+		id: "brave",
+		label: "Brave",
+		description: "Brave Search API。",
+		defaultBaseURL: "https://api.search.brave.com",
+		credentialRef: "DSH_EDITOR_WEB_BRAVE_API_KEY",
+		billing: "request",
+		signupUrl: "https://api.search.brave.com"
+	}, (options) => new BraveSearchProvider({
+		apiKey: options.apiKey ?? "",
+		baseURL: options.baseURL
+	}));
+	const offBocha = manager.registerSearchProvider({
+		id: "bocha",
+		label: "博查",
+		description: "中文网页搜索 API。",
+		defaultBaseURL: "https://api.bochaai.com",
+		credentialRef: "DSH_EDITOR_WEB_BOCHA_API_KEY",
+		billing: "request",
+		signupUrl: "https://open.bochaai.com"
+	}, (options) => new BochaSearchProvider({
+		apiKey: options.apiKey ?? "",
+		baseURL: options.baseURL
+	}));
+	const offSerper = manager.registerSearchProvider({
+		id: "serper",
+		label: "Serper",
+		description: "Google 结果的 Search API。",
+		defaultBaseURL: "https://google.serper.dev",
+		credentialRef: "DSH_EDITOR_WEB_SERPER_API_KEY",
+		billing: "request",
+		signupUrl: "https://serper.dev"
+	}, (options) => new SerperSearchProvider({
+		apiKey: options.apiKey ?? "",
+		baseURL: options.baseURL
+	}));
+	const offFirecrawl = manager.registerSearchProvider({
+		id: "firecrawl",
+		label: "Firecrawl",
+		description: "网页搜索与提取 API。",
+		defaultBaseURL: "https://api.firecrawl.dev",
+		credentialRef: "DSH_EDITOR_WEB_FIRECRAWL_API_KEY",
+		billing: "request",
+		signupUrl: "https://www.firecrawl.dev"
+	}, (options) => new FirecrawlSearchProvider({
+		apiKey: options.apiKey ?? "",
+		baseURL: options.baseURL
+	}));
+	const offTavily = manager.registerSearchProvider({
+		id: "tavily",
+		label: "Tavily",
+		defaultBaseURL: "https://api.tavily.com",
+		description: "Search API；固定 basic 检索，不自动升级搜索深度。",
+		credentialRef: "DSH_EDITOR_WEB_TAVILY_API_KEY",
+		billing: "request",
+		signupUrl: "https://app.tavily.com"
+	}, (options) => new TavilySearchProvider({
+		apiKey: options.apiKey ?? "",
+		baseURL: options.baseURL
+	}));
+	const offHttp = manager.registerFetchProvider({
+		id: "http",
+		label: "HTTP 读取",
+		billing: "none",
+		description: "本机直连公开网页，无需 Key，不产生搜索费用。"
+	}, (options) => new HttpFetchProvider({
+		maxResponseBytes: 5e6,
+		maxBodyChars: options.maxFetchChars,
+		timeoutMs: options.timeoutMs,
+		maxRedirects: 5,
+		userAgent: "dsh-editor/managed-web"
+	}));
+	return () => {
+		offHttp();
+		offTavily();
+		offFirecrawl();
+		offSerper();
+		offBocha();
+		offBrave();
+		offExa();
+		offDeepSeek();
+		offEngine();
+	};
+}
+//#endregion
+//#region src/host-rpc.ts
+function registerHostRpc(ctx, channel, call) {
+	return ctx.webServer.register({
+		kind: "prefix",
+		path: channel,
+		handler: async (req, res) => {
+			if (!ctx.connection.requestRejection) {
+				res.writeHead(503);
+				res.end();
+				return;
+			}
+			const rejection = ctx.connection.requestRejection(req);
+			if (rejection !== void 0) {
+				res.writeHead(rejection);
+				res.end();
+				return;
+			}
+			const pathname = new URL(req.url ?? "/", "http://dsh.internal").pathname;
+			const endpoint = pathname.startsWith(`${channel}/`) ? pathname.slice(channel.length + 1) : "";
+			if (req.method !== "POST" || !/^[a-z.]+$/.test(endpoint)) {
+				res.writeHead(404);
+				res.end();
+				return;
+			}
+			if (String(req.headers["content-type"] ?? "").split(";")[0]?.trim() !== "application/json") {
+				res.writeHead(415);
+				res.end();
+				return;
+			}
+			const controller = new AbortController();
+			res.on("close", () => {
+				if (!res.writableEnded) controller.abort();
+			});
+			try {
+				const chunks = [];
+				let size = 0;
+				for await (const chunk of req) {
+					const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+					size += buffer.length;
+					if (size > 65536) {
+						res.writeHead(413, { connection: "close" });
+						res.end();
+						req.destroy();
+						return;
+					}
+					chunks.push(buffer);
+				}
+				let request;
+				try {
+					const parsed = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+					if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error();
+					request = parsed;
+				} catch {
+					res.writeHead(400);
+					res.end();
+					return;
+				}
+				if (request.type !== "client-request" || request.method !== endpoint || typeof request.rpcId !== "string") {
+					res.writeHead(400);
+					res.end();
+					return;
+				}
+				const result = await call(endpoint, request.payload, controller.signal);
+				if (!res.destroyed) {
+					res.writeHead(200, {
+						"content-type": "application/json",
+						"cache-control": "no-store"
+					});
+					res.end(JSON.stringify({
+						type: "server-response",
+						rpcId: request.rpcId,
+						result
+					}));
+				}
+			} catch {
+				if (!res.destroyed) {
+					res.writeHead(500);
+					res.end("network settings request failed");
+				}
+			}
+		}
+	});
+}
+//#endregion
+//#region src/manager.ts
+function fail(code, message) {
+	throw new WebError(message, code);
+}
+function bounded(value, min, max, label) {
+	if (!Number.isInteger(value) || value < min || value > max) fail("WEB_INVALID_CONFIG", `${label}须为 ${min} 至 ${max} 的整数。`);
+	return value;
+}
+/** Enforce cancellation even when an extension ignores its cooperative signal. */
+async function abortable(work, signal) {
+	signal.throwIfAborted();
+	let off = () => {};
+	const aborted = new Promise((_, reject) => {
+		const onAbort = () => reject(new WebError("网络请求已取消或超时。", "WEB_ABORTED"));
+		signal.addEventListener("abort", onAbort, { once: true });
+		off = () => signal.removeEventListener("abort", onAbort);
+	});
+	try {
+		return await Promise.race([Promise.resolve().then(() => {
+			signal.throwIfAborted();
+			return work();
+		}), aborted]);
+	} finally {
+		off();
+	}
+}
+/** Manages consent and provider lifecycle. Selection and execution stay in ctx.web. */
+var WebSearchManager = class {
+	options;
+	settings;
+	entries = /* @__PURE__ */ new Map();
+	listeners = /* @__PURE__ */ new Set();
+	pending = Promise.resolve();
+	epoch = 0;
+	suspended = false;
+	disposed = false;
+	storageFailed = false;
+	constructor(options) {
+		this.options = options;
+		const initial = structuredClone(options.initial ?? defaultSettings());
+		this.settings = {
+			...defaultSettings(),
+			...initial,
+			searchOrder: migrateSearchOrder(initial)
+		};
+	}
+	subscribe(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	notify() {
+		for (const listener of this.listeners) try {
+			listener();
+		} catch {}
+	}
+	knownSearchIds() {
+		return [...this.entries.values()].filter((entry) => entry.kind === "search").map((entry) => entry.descriptor.id);
+	}
+	keyed(id) {
+		return Boolean(this.entries.get(providerKey("search", id))?.descriptor.credentialRef);
+	}
+	configured(id) {
+		return Boolean(this.entries.get(providerKey("search", id))?.configured);
+	}
+	searchOrder(settings = this.settings) {
+		return resolveSearchOrder(this.knownSearchIds(), settings, (id) => this.keyed(id));
+	}
+	activeSearchId(settings = this.settings) {
+		return pickActiveSearch(this.searchOrder(settings), (id) => this.configured(id));
+	}
+	selected(entry) {
+		if (this.disposed || this.suspended || !entry.configured) return false;
+		if (entry.kind === "fetch") return this.settings.fetchEnabled && this.settings.fetchProvider === entry.descriptor.id && this.entries.get(providerKey("fetch", entry.descriptor.id)) === entry;
+		return this.settings.searchEnabled && this.activeSearchId() === entry.descriptor.id;
+	}
+	status() {
+		const entries = [...this.entries.values()];
+		return {
+			settings: structuredClone(this.settings),
+			storageFailed: this.storageFailed,
+			searchActive: entries.some((entry) => entry.kind === "search" && this.selected(entry)),
+			fetchActive: entries.some((entry) => entry.kind === "fetch" && this.selected(entry)),
+			providers: entries.map((entry) => ({
+				...entry.descriptor,
+				kind: entry.kind,
+				configured: entry.configured,
+				baseURL: this.settings.endpoints[providerKey(entry.kind, entry.descriptor.id)] ?? entry.descriptor.defaultBaseURL,
+				calls: entry.calls,
+				failures: entry.failures
+			})).sort((a, b) => providerKey(a.kind, a.id).localeCompare(providerKey(b.kind, b.id)))
+		};
+	}
+	async refresh() {
+		const epoch = this.epoch;
+		await Promise.all([...this.entries.entries()].map(async ([key, entry]) => {
+			let configured = !entry.descriptor.credentialRef;
+			if (entry.descriptor.credentialRef) try {
+				configured = Boolean((await this.options.resolveCredential(entry.descriptor.credentialRef))?.trim());
+			} catch {
+				configured = false;
+			}
+			if (this.disposed || epoch !== this.epoch || this.entries.get(key) !== entry) return;
+			if (entry.configured !== configured) {
+				entry.configured = configured;
+				if (!configured) this.abort(entry);
+			}
+		}));
+		this.notify();
+		return this.status();
+	}
+	abort(entry) {
+		for (const target of entry ? [entry] : this.entries.values()) for (const controller of target.active) controller.abort();
+	}
+	add(kind, descriptor) {
+		if (this.disposed) fail("WEB_DISABLED", "网络搜索插件已停止。");
+		const key = providerKey(kind, descriptor.id);
+		if (!/^[a-z][a-z0-9-]{0,63}$/.test(descriptor.id) || !descriptor.label.trim()) fail("WEB_INVALID_PROVIDER", "供应商标识或名称无效。");
+		if (descriptor.credentialRef && !/^[A-Z][A-Z0-9_]{1,127}$/.test(descriptor.credentialRef)) fail("WEB_INVALID_PROVIDER", "供应商凭据引用无效。");
+		if (descriptor.defaultBaseURL) validateBaseURL(descriptor.defaultBaseURL);
+		if (descriptor.signupUrl) try {
+			const url = new URL(descriptor.signupUrl);
+			if (url.protocol !== "https:" || url.username || url.password) fail("WEB_INVALID_PROVIDER", "注册地址须为 HTTPS。");
+		} catch {
+			fail("WEB_INVALID_PROVIDER", "注册地址须为 HTTPS。");
+		}
+		if (this.entries.has(key)) fail("WEB_DUPLICATE_PROVIDER", "供应商标识已注册。");
+		const entry = {
+			descriptor: Object.freeze({ ...descriptor }),
+			kind,
+			configured: !descriptor.credentialRef,
+			calls: 0,
+			failures: 0,
+			unregister() {},
+			active: /* @__PURE__ */ new Set()
+		};
+		this.entries.set(key, entry);
+		return entry;
+	}
+	registration(entry, register) {
+		const key = providerKey(entry.kind, entry.descriptor.id);
+		try {
+			entry.unregister = register();
+		} catch (error) {
+			this.entries.delete(key);
+			throw error;
+		}
+		this.refresh();
+		let removed = false;
+		return () => {
+			if (removed) return;
+			removed = true;
+			this.abort(entry);
+			this.entries.delete(key);
+			entry.unregister();
+			this.notify();
+		};
+	}
+	registerSearchProvider(descriptor, factory) {
+		const entry = this.add("search", descriptor);
+		return this.registration(entry, () => this.options.web.registerSearchProvider({
+			id: descriptor.id,
+			available: () => this.selected(entry),
+			search: (request, signal) => {
+				if (typeof request.query !== "string" || !request.query.trim() || request.query.length > 4e3) fail("WEB_INVALID_REQUEST", "查询须为 1 至 4000 字符。");
+				const count = Math.min(bounded(request.maxResults ?? this.settings.maxResults, 1, 100, "结果数"), this.settings.maxResults);
+				return this.execute(entry, signal, async (options, combined) => {
+					const provider = factory(options);
+					if (!provider.available()) fail("WEB_PROVIDER_ERROR", "供应商配置不可用。");
+					const result = await provider.search({
+						query: request.query.trim(),
+						maxResults: count
+					}, combined);
+					const sources = result.sources.slice(0, count).filter((source) => {
+						try {
+							const url = new URL(source.url);
+							return ["http:", "https:"].includes(url.protocol) && !url.username && !url.password;
+						} catch {
+							return false;
+						}
+					}).map((source) => ({
+						...source,
+						title: source.title?.slice(0, 1e3),
+						snippet: source.snippet?.slice(0, 8e3)
+					}));
+					return {
+						...result,
+						content: result.content?.slice(0, 4e4),
+						sources,
+						truncated: result.truncated || result.sources.length > count
+					};
+				});
+			}
+		}));
+	}
+	registerFetchProvider(descriptor, factory) {
+		const entry = this.add("fetch", descriptor);
+		return this.registration(entry, () => this.options.web.registerFetchProvider({
+			id: descriptor.id,
+			available: () => this.selected(entry),
+			fetch: (request, signal) => this.execute(entry, signal, async (options, combined) => {
+				const provider = factory(options);
+				if (!provider.available()) fail("WEB_PROVIDER_ERROR", "供应商配置不可用。");
+				const result = await provider.fetch(request, combined);
+				const content = result.body.content.slice(0, options.maxFetchChars);
+				return {
+					...result,
+					body: {
+						...result.body,
+						content
+					},
+					truncated: result.truncated || content.length !== result.body.content.length
+				};
+			})
+		}));
+	}
+	async execute(entry, signal, run) {
+		if (!this.selected(entry)) fail("WEB_DISABLED", "请在设置 → 网络搜索中配置凭据并主动启用。");
+		const controller = new AbortController();
+		const timeout = setTimeout(() => controller.abort(), this.settings.timeoutMs);
+		const combined = signal ? AbortSignal.any([signal, controller.signal]) : controller.signal;
+		const epoch = this.epoch;
+		entry.active.add(controller);
+		let started = false;
+		try {
+			const ref = entry.descriptor.credentialRef;
+			const apiKey = ref ? await abortable(() => this.options.resolveCredential(ref), combined) : void 0;
+			if (ref && !apiKey?.trim()) {
+				entry.configured = false;
+				this.abort(entry);
+				this.notify();
+				fail("WEB_CREDENTIAL_MISSING", "搜索凭据已删除或不可用，请重新配置。");
+			}
+			if (epoch !== this.epoch || !this.selected(entry)) fail("WEB_DISABLED", "网络访问设置已改变，请重新发起请求。");
+			const options = {
+				apiKey,
+				baseURL: this.settings.endpoints[providerKey(entry.kind, entry.descriptor.id)] ?? entry.descriptor.defaultBaseURL,
+				timeoutMs: this.settings.timeoutMs,
+				maxFetchChars: this.settings.maxFetchChars
+			};
+			started = true;
+			entry.calls += 1;
+			const result = await abortable(() => run(options, combined), combined);
+			if (epoch !== this.epoch || !this.selected(entry)) fail("WEB_ABORTED", "网络请求已取消。");
+			return result;
+		} catch (error) {
+			if (started) entry.failures += 1;
+			const code = error instanceof WebError ? error.code : void 0;
+			if (code === "WEB_CREDENTIAL_MISSING") throw new WebError("搜索凭据不可用，请重新配置。", "WEB_CREDENTIAL_MISSING");
+			if (code === "WEB_DISABLED") throw new WebError("网络搜索未启用或设置已改变。", "WEB_DISABLED");
+			if (combined.aborted || code === "WEB_ABORTED") throw new WebError("网络请求已取消或超时。", "WEB_ABORTED");
+			throw new WebError("网络供应商请求失败，请检查凭据、额度和连接。未切换到其他供应商。", "WEB_PROVIDER_ERROR");
+		} finally {
+			clearTimeout(timeout);
+			entry.active.delete(controller);
+		}
+	}
+	update(next, expectedRevision) {
+		const task = this.pending.then(async () => {
+			if (this.disposed) fail("WEB_DISABLED", "网络搜索插件已停止。");
+			if (expectedRevision !== this.settings.revision) fail("WEB_CONFIG_CONFLICT", "设置已被其他页面修改，请刷新后重试。");
+			const proposed = {
+				...structuredClone(next),
+				revision: expectedRevision + 1
+			};
+			bounded(proposed.maxResults, 1, 20, "结果上限");
+			bounded(proposed.maxQueries, 1, 5, "查询上限");
+			bounded(proposed.timeoutMs, 1e3, 12e4, "超时毫秒数");
+			bounded(proposed.maxFetchChars, 1e3, 2e5, "正文长度");
+			for (const [key, value] of Object.entries(proposed.endpoints)) {
+				const entry = this.entries.get(key);
+				if (entry && !entry.descriptor.defaultBaseURL) fail("WEB_INVALID_CONFIG", "供应商不支持自定义地址。");
+				try {
+					proposed.endpoints[key] = validateBaseURL(value);
+				} catch {
+					fail("WEB_INVALID_CONFIG", "供应商地址须为无凭据、无查询参数的 HTTPS 地址。");
+				}
+			}
+			await this.refresh();
+			proposed.searchOrder = this.searchOrder(proposed);
+			proposed.searchProvider = this.activeSearchId(proposed);
+			if (proposed.searchEnabled && !proposed.searchProvider) fail("WEB_CREDENTIAL_MISSING", "请先选择已安装的供应商并填写有效凭据。");
+			if (proposed.searchEnabled && this.entries.get(providerKey("fetch", "http"))) {
+				proposed.fetchEnabled = true;
+				proposed.fetchProvider = "http";
+			}
+			if (!proposed.searchEnabled) proposed.fetchEnabled = false;
+			if (proposed.fetchEnabled) {
+				const entry = this.entries.get(providerKey("fetch", proposed.fetchProvider));
+				if (!entry) proposed.fetchEnabled = false;
+				else if (!entry.configured) fail("WEB_CREDENTIAL_MISSING", "请先选择已安装的供应商并填写有效凭据。");
+			}
+			this.suspended = true;
+			this.epoch += 1;
+			this.abort();
+			this.notify();
+			try {
+				await this.options.save(proposed);
+			} catch {
+				this.storageFailed = true;
+				this.notify();
+				fail("WEB_CONFIG_SAVE_FAILED", "设置保存失败。为避免意外联网，本次运行已暂停网络访问。");
+			}
+			this.settings = proposed;
+			this.storageFailed = false;
+			this.suspended = false;
+			this.notify();
+			return this.status();
+		});
+		this.pending = task.then(() => {}, () => {});
+		return task;
+	}
+	async dispose() {
+		this.disposed = true;
+		this.epoch += 1;
+		this.abort();
+		this.notify();
+		for (const entry of this.entries.values()) entry.unregister();
+		this.entries.clear();
+		this.listeners.clear();
+		await this.pending;
+	}
+};
+//#endregion
+//#region src/storage.ts
+const settingsSchema = z.object({
+	revision: z.number().int().nonnegative(),
+	searchEnabled: z.boolean(),
+	fetchEnabled: z.boolean(),
+	searchProvider: z.string().max(64),
+	fetchProvider: z.string().max(64),
+	searchOrder: z.array(z.string().min(1).max(64)).max(32),
+	maxResults: z.number().int().min(1).max(20),
+	maxQueries: z.number().int().min(1).max(5),
+	timeoutMs: z.number().int().min(1e3).max(12e4),
+	maxFetchChars: z.number().int().min(1e3).max(2e5),
+	endpoints: z.record(z.string().regex(/^(search|fetch):[a-z][a-z0-9-]{0,63}$/), z.string().max(2048)).refine((value) => Object.keys(value).length <= 50)
+}).strict();
+const updateSchema = z.object({
+	expectedRevision: z.number().int().nonnegative(),
+	settings: settingsSchema.omit({ revision: true })
+}).strict();
+const storedSettingsSchema = settingsSchema.extend({ searchOrder: settingsSchema.shape.searchOrder.optional() }).transform((settings) => ({
+	...settings,
+	searchOrder: migrateSearchOrder(settings)
+}));
+const webSettingsDomain = defineDomain({
+	name: "dsh_editor_web_search",
+	version: 1,
+	tables: { settings: domainTable(storedSettingsSchema) }
+});
+//#endregion
+//#region src/index.ts
+const name = "@klarkxy/dsh-web-search-manager";
+const inject = [
+	"web",
+	"credentials",
+	"storageDomain",
+	"connection",
+	"webServer"
+];
+async function apply(ctx) {
+	const host = ctx;
+	const domain = await ctx.storageDomain.open(webSettingsDomain);
+	const table = domain.table("settings");
+	const manager = new WebSearchManager({
+		web: ctx.web,
+		initial: table.get("global"),
+		resolveCredential: async (ref) => (await host.credentials.resolve(credentialRef(ref)))?.value,
+		save: (settings) => table.put("global", settings)
+	});
+	ctx.effect(() => async () => {
+		await manager.dispose();
+		await domain.close();
+	}, "web-search-manager.dispose");
+	ctx.provide("webSearchManager", manager);
+	ctx.effect(() => registerBuiltins(manager), "web-search-manager.providers");
+	ctx.effect(() => registerHostRpc(host, WEB_SEARCH_RPC_CHANNEL, async (endpoint, payload, signal) => {
+		try {
+			signal.throwIfAborted();
+			if (endpoint === "status") return {
+				ok: true,
+				value: await manager.refresh()
+			};
+			if (endpoint === "update") {
+				const parsed = updateSchema.safeParse(payload);
+				if (!parsed.success) return {
+					ok: false,
+					error: {
+						code: "WEB_INVALID_CONFIG",
+						message: "网络搜索设置格式无效。",
+						details: {}
+					}
+				};
+				return {
+					ok: true,
+					value: await manager.update(parsed.data.settings, parsed.data.expectedRevision)
+				};
+			}
+			if (endpoint === "test") return {
+				ok: true,
+				value: { sources: (await ctx.web.search({
+					query: "IANA example domains",
+					maxResults: 1
+				}, signal)).sources.length }
+			};
+			return {
+				ok: false,
+				error: {
+					code: "WEB_INVALID_REQUEST",
+					message: "未知操作。",
+					details: {}
+				}
+			};
+		} catch (error) {
+			return {
+				ok: false,
+				error: {
+					code: error instanceof WebError ? error.code : "WEB_REQUEST_FAILED",
+					message: error instanceof WebError ? error.message : "网络设置操作失败，请刷新后重试。",
+					details: {}
+				}
+			};
+		}
+	}), "web-search-manager.rpc");
+}
+//#endregion
+export { WebSearchManager, apply, inject, name };
+
+//# sourceMappingURL=index.js.map