@omnicross/core 0.2.0 → 0.2.1

package/dist/search.d.cts

@@ -0,0 +1,113 @@
+export { D as DEFAULT_SEARCH_EGRESS_POLICY, E as EgressDenialReason, a as EgressDnsLookup, S as SearchEgressPolicy, b as assertEgressAddressAllowed, c as createEgressGuardedDispatcher, d as createEgressGuardedLookup, f as findEgressDenial, v as validateEgressUrl } from './egress-I46O_p5L.cjs';
+export { D as DEFAULT_SEARCH_FRONTEND_MODES, S as SEARCH_FRONTEND_MODES, a as SEARCH_FRONTEND_NAMES, b as SEARCH_UNSUPPORTED_CAPABILITY_CODE, c as SearchFrontendMode, d as SearchFrontendModes, e as SearchFrontendName, i as isSearchFrontendMode, n as normalizeSearchFrontendModes, s as searchErrorHttpStatus, v as validateSearchFrontendModes } from './frontends-Doz0RaWu.cjs';
+import { SearchResult } from '@omnicross/contracts/search-types';
+import { S as SearchRuntime } from './runtime-t8AZacFF.cjs';
+export { a as SearchOrchestrator, b as SearchOrchestratorOptions, c as SearchProviderRegistry, d as SearchProviderRegistryOptions, e as SearchRegistryError, f as SearchRuntimeEventListener, g as SearchRuntimeOptions, h as createSearchRuntime, i as hashSearchQuery } from './runtime-t8AZacFF.cjs';
+import { WebSearchBackend } from './ports/web-search-backend.cjs';
+import 'node:dns';
+import 'undici';
+import '@omnicross/contracts/websearch-types';
+
+/**
+ * Result normalization — the baseline's safety checks, ported.
+ *
+ * A search result is untrusted input: it is produced by a page or an API the
+ * user does not control, and it is handed straight to a model that may follow
+ * the URL. The baseline (`elftia-search-baseline.md` §6.3/§6.4) filtered three
+ * things before letting results out of the orchestrator, and all three are kept
+ * here: a result needs a title, its URL must be a DIRECT result rather than a
+ * search-engine redirect, and the set must not repeat itself.
+ *
+ * One baseline behavior is deliberately NOT ported: **duplicate-only
+ * invalidation** — the rule that turned "exactly one survivor out of more than
+ * one structurally usable item" into `Provider returned only duplicate results`.
+ * It existed to catch a scrape that collapsed to a single repeated link, and
+ * 阶段2's HTTP providers now detect that themselves and raise `parse_failed`.
+ * For an API or host provider, one deduplicated result is a legitimate answer,
+ * not a failure. Recorded as an allowed difference for 阶段5's comparison.
+ *
+ * Normalization NEVER fails: it filters. Whether a search succeeded is the
+ * provider's answer, decided before these results get here — turning "every
+ * item was filtered" back into an error would hand the fallback policy a third
+ * outcome to interpret, which is exactly the conflation 阶段2 removed.
+ *
+ * @module search/normalize
+ */
+
+/** Results returned when the caller expresses no preference (baseline parity). */
+declare const DEFAULT_NORMALIZED_MAX_RESULTS = 5;
+/**
+ * Whether a URL points at a result rather than back at a search engine.
+ *
+ * Accepts only `http:`/`https:`; an unparseable URL is rejected. This is the
+ * check that keeps a SERP-redirect link — which re-runs a search instead of
+ * opening a page — out of a result set.
+ */
+declare function isDirectResultUrl(rawUrl: string): boolean;
+/**
+ * How many results to keep.
+ *
+ * `Math.max(1, …)` with no upper clamp, per baseline §4.4 — a provider's own
+ * limit is the provider's business, and imposing a second ceiling here would
+ * silently contradict whatever it declared in its capabilities.
+ *
+ * Non-finite input falls back to the default rather than propagating: 阶段2's
+ * `clampMaxResults` left `NaN` at baseline parity on purpose and named the
+ * runtime that owns option handling — this one — as where it should be
+ * normalized. Without this, a `NaN` reaches `slice(0, NaN)` and silently
+ * discards every result.
+ */
+declare function normalizedResultLimit(maxResults: number | undefined): number;
+/**
+ * Apply the baseline's safety checks to one provider's results.
+ *
+ * Order is preserved; trimming happens before every comparison, so dedupe sees
+ * the same URL string a consumer will.
+ */
+declare function normalizeSearchResults(results: readonly SearchResult[], maxResults?: number): SearchResult[];
+
+/**
+ * A legacy `WebSearchBackend` backed by the new runtime — migration scaffolding.
+ *
+ * **Nothing in Omnicross uses this yet, on purpose.** It exists so 阶段5 can
+ * move the remaining `WebSearchBackend` consumers (the Anthropic ingress
+ * `webSearchService` hint, anything a host passes in) onto the runtime one at a
+ * time instead of in a flag day. Like `@omnicross/contracts/search-compat`, it
+ * is Phase-1 debt with a scheduled deletion (阶段8) and is meant to be
+ * grep-able as such.
+ *
+ * The port TYPE stays exactly where it is — Elftia imports
+ * `@omnicross/core/ports/web-search-backend` directly — and this module only
+ * adds an implementation of it.
+ *
+ * The legacy conversions are NOT re-derived here: `toLegacyWebSearchResponse`
+ * and `searchErrorToLegacyWebSearchResponse` are child 2's single, tested
+ * mapping, and having a second one is how the two vocabularies would start to
+ * drift.
+ *
+ * @module search/webSearchBackendCompat
+ */
+
+/** Optional capabilities the runtime itself does not provide. */
+interface SearchRuntimeBackendOptions {
+    /**
+     * URL reading delegate.
+     *
+     * The runtime orchestrates `search` only — reading a URL stays with
+     * `web_fetch`'s own path until the reader story settles (阶段4+). Without a
+     * delegate, `readUrl` answers with a legacy failure response naming the
+     * missing capability rather than pretending to have read anything.
+     */
+    readUrl?: WebSearchBackend['readUrl'];
+}
+/**
+ * Present a {@link SearchRuntime} through the legacy port interface.
+ *
+ * `search` PINS the runtime to the requested provider: a legacy caller naming a
+ * provider is making an explicit choice, and quietly answering from a different
+ * one would both surprise it and send its query somewhere it did not ask for.
+ * Legacy callers that want fallback get it by looping, exactly as they do today.
+ */
+declare function searchRuntimeAsWebSearchBackend(runtime: SearchRuntime, options?: SearchRuntimeBackendOptions): WebSearchBackend;
+
+export { DEFAULT_NORMALIZED_MAX_RESULTS, SearchRuntime, type SearchRuntimeBackendOptions, isDirectResultUrl, normalizeSearchResults, normalizedResultLimit, searchRuntimeAsWebSearchBackend };

package/dist/search.d.ts

@@ -0,0 +1,113 @@
+export { D as DEFAULT_SEARCH_EGRESS_POLICY, E as EgressDenialReason, a as EgressDnsLookup, S as SearchEgressPolicy, b as assertEgressAddressAllowed, c as createEgressGuardedDispatcher, d as createEgressGuardedLookup, f as findEgressDenial, v as validateEgressUrl } from './egress-I46O_p5L.js';
+export { D as DEFAULT_SEARCH_FRONTEND_MODES, S as SEARCH_FRONTEND_MODES, a as SEARCH_FRONTEND_NAMES, b as SEARCH_UNSUPPORTED_CAPABILITY_CODE, c as SearchFrontendMode, d as SearchFrontendModes, e as SearchFrontendName, i as isSearchFrontendMode, n as normalizeSearchFrontendModes, s as searchErrorHttpStatus, v as validateSearchFrontendModes } from './frontends-Doz0RaWu.js';
+import { SearchResult } from '@omnicross/contracts/search-types';
+import { S as SearchRuntime } from './runtime-t8AZacFF.js';
+export { a as SearchOrchestrator, b as SearchOrchestratorOptions, c as SearchProviderRegistry, d as SearchProviderRegistryOptions, e as SearchRegistryError, f as SearchRuntimeEventListener, g as SearchRuntimeOptions, h as createSearchRuntime, i as hashSearchQuery } from './runtime-t8AZacFF.js';
+import { WebSearchBackend } from './ports/web-search-backend.js';
+import 'node:dns';
+import 'undici';
+import '@omnicross/contracts/websearch-types';
+
+/**
+ * Result normalization — the baseline's safety checks, ported.
+ *
+ * A search result is untrusted input: it is produced by a page or an API the
+ * user does not control, and it is handed straight to a model that may follow
+ * the URL. The baseline (`elftia-search-baseline.md` §6.3/§6.4) filtered three
+ * things before letting results out of the orchestrator, and all three are kept
+ * here: a result needs a title, its URL must be a DIRECT result rather than a
+ * search-engine redirect, and the set must not repeat itself.
+ *
+ * One baseline behavior is deliberately NOT ported: **duplicate-only
+ * invalidation** — the rule that turned "exactly one survivor out of more than
+ * one structurally usable item" into `Provider returned only duplicate results`.
+ * It existed to catch a scrape that collapsed to a single repeated link, and
+ * 阶段2's HTTP providers now detect that themselves and raise `parse_failed`.
+ * For an API or host provider, one deduplicated result is a legitimate answer,
+ * not a failure. Recorded as an allowed difference for 阶段5's comparison.
+ *
+ * Normalization NEVER fails: it filters. Whether a search succeeded is the
+ * provider's answer, decided before these results get here — turning "every
+ * item was filtered" back into an error would hand the fallback policy a third
+ * outcome to interpret, which is exactly the conflation 阶段2 removed.
+ *
+ * @module search/normalize
+ */
+
+/** Results returned when the caller expresses no preference (baseline parity). */
+declare const DEFAULT_NORMALIZED_MAX_RESULTS = 5;
+/**
+ * Whether a URL points at a result rather than back at a search engine.
+ *
+ * Accepts only `http:`/`https:`; an unparseable URL is rejected. This is the
+ * check that keeps a SERP-redirect link — which re-runs a search instead of
+ * opening a page — out of a result set.
+ */
+declare function isDirectResultUrl(rawUrl: string): boolean;
+/**
+ * How many results to keep.
+ *
+ * `Math.max(1, …)` with no upper clamp, per baseline §4.4 — a provider's own
+ * limit is the provider's business, and imposing a second ceiling here would
+ * silently contradict whatever it declared in its capabilities.
+ *
+ * Non-finite input falls back to the default rather than propagating: 阶段2's
+ * `clampMaxResults` left `NaN` at baseline parity on purpose and named the
+ * runtime that owns option handling — this one — as where it should be
+ * normalized. Without this, a `NaN` reaches `slice(0, NaN)` and silently
+ * discards every result.
+ */
+declare function normalizedResultLimit(maxResults: number | undefined): number;
+/**
+ * Apply the baseline's safety checks to one provider's results.
+ *
+ * Order is preserved; trimming happens before every comparison, so dedupe sees
+ * the same URL string a consumer will.
+ */
+declare function normalizeSearchResults(results: readonly SearchResult[], maxResults?: number): SearchResult[];
+
+/**
+ * A legacy `WebSearchBackend` backed by the new runtime — migration scaffolding.
+ *
+ * **Nothing in Omnicross uses this yet, on purpose.** It exists so 阶段5 can
+ * move the remaining `WebSearchBackend` consumers (the Anthropic ingress
+ * `webSearchService` hint, anything a host passes in) onto the runtime one at a
+ * time instead of in a flag day. Like `@omnicross/contracts/search-compat`, it
+ * is Phase-1 debt with a scheduled deletion (阶段8) and is meant to be
+ * grep-able as such.
+ *
+ * The port TYPE stays exactly where it is — Elftia imports
+ * `@omnicross/core/ports/web-search-backend` directly — and this module only
+ * adds an implementation of it.
+ *
+ * The legacy conversions are NOT re-derived here: `toLegacyWebSearchResponse`
+ * and `searchErrorToLegacyWebSearchResponse` are child 2's single, tested
+ * mapping, and having a second one is how the two vocabularies would start to
+ * drift.
+ *
+ * @module search/webSearchBackendCompat
+ */
+
+/** Optional capabilities the runtime itself does not provide. */
+interface SearchRuntimeBackendOptions {
+    /**
+     * URL reading delegate.
+     *
+     * The runtime orchestrates `search` only — reading a URL stays with
+     * `web_fetch`'s own path until the reader story settles (阶段4+). Without a
+     * delegate, `readUrl` answers with a legacy failure response naming the
+     * missing capability rather than pretending to have read anything.
+     */
+    readUrl?: WebSearchBackend['readUrl'];
+}
+/**
+ * Present a {@link SearchRuntime} through the legacy port interface.
+ *
+ * `search` PINS the runtime to the requested provider: a legacy caller naming a
+ * provider is making an explicit choice, and quietly answering from a different
+ * one would both surprise it and send its query somewhere it did not ask for.
+ * Legacy callers that want fallback get it by looping, exactly as they do today.
+ */
+declare function searchRuntimeAsWebSearchBackend(runtime: SearchRuntime, options?: SearchRuntimeBackendOptions): WebSearchBackend;
+
+export { DEFAULT_NORMALIZED_MAX_RESULTS, SearchRuntime, type SearchRuntimeBackendOptions, isDirectResultUrl, normalizeSearchResults, normalizedResultLimit, searchRuntimeAsWebSearchBackend };

package/dist/search.js

@@ -0,0 +1,57 @@
+import {
+  DEFAULT_NORMALIZED_MAX_RESULTS,
+  SearchOrchestrator,
+  SearchProviderRegistry,
+  SearchRegistryError,
+  createSearchRuntime,
+  hashSearchQuery,
+  isDirectResultUrl,
+  normalizeSearchResults,
+  normalizedResultLimit
+} from "./chunk-LFPQ2OVH.js";
+import "./chunk-NLUOTJWB.js";
+import {
+  DEFAULT_SEARCH_EGRESS_POLICY,
+  assertEgressAddressAllowed,
+  createEgressGuardedDispatcher,
+  createEgressGuardedLookup,
+  findEgressDenial,
+  validateEgressUrl
+} from "./chunk-DBBR6RHF.js";
+import {
+  DEFAULT_SEARCH_FRONTEND_MODES,
+  SEARCH_FRONTEND_MODES,
+  SEARCH_FRONTEND_NAMES,
+  SEARCH_UNSUPPORTED_CAPABILITY_CODE,
+  isSearchFrontendMode,
+  normalizeSearchFrontendModes,
+  searchErrorHttpStatus,
+  searchRuntimeAsWebSearchBackend,
+  validateSearchFrontendModes
+} from "./chunk-MZEGQSKQ.js";
+export {
+  DEFAULT_NORMALIZED_MAX_RESULTS,
+  DEFAULT_SEARCH_EGRESS_POLICY,
+  DEFAULT_SEARCH_FRONTEND_MODES,
+  SEARCH_FRONTEND_MODES,
+  SEARCH_FRONTEND_NAMES,
+  SEARCH_UNSUPPORTED_CAPABILITY_CODE,
+  SearchOrchestrator,
+  SearchProviderRegistry,
+  SearchRegistryError,
+  assertEgressAddressAllowed,
+  createEgressGuardedDispatcher,
+  createEgressGuardedLookup,
+  createSearchRuntime,
+  findEgressDenial,
+  hashSearchQuery,
+  isDirectResultUrl,
+  isSearchFrontendMode,
+  normalizeSearchFrontendModes,
+  normalizeSearchResults,
+  normalizedResultLimit,
+  searchErrorHttpStatus,
+  searchRuntimeAsWebSearchBackend,
+  validateEgressUrl,
+  validateSearchFrontendModes
+};

package/dist/transformer/transformers/AnthropicTransformer.cjs

@@ -1,10 +1,10 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkSQMAEDNEcjs = require('../../chunk-SQMAEDNE.cjs');
-require('../../chunk-5RSZYQJH.cjs');
+var _chunkPOUTD5AMcjs = require('../../chunk-POUTD5AM.cjs');
 require('../../chunk-6DDYNS2B.cjs');
+require('../../chunk-5RSZYQJH.cjs');
 require('../../chunk-77USGNRW.cjs');
 require('../../chunk-IUL4VWNU.cjs');
 
 
-exports.AnthropicTransformer = _chunkSQMAEDNEcjs.AnthropicTransformer;
+exports.AnthropicTransformer = _chunkPOUTD5AMcjs.AnthropicTransformer;

package/dist/transformer/transformers/AnthropicTransformer.js

@@ -1,8 +1,8 @@
 import {
   AnthropicTransformer
-} from "../../chunk-6OC3ORW6.js";
-import "../../chunk-FU7EAR73.js";
+} from "../../chunk-EUZRH544.js";
 import "../../chunk-LFEH7CEO.js";
+import "../../chunk-FU7EAR73.js";
 import "../../chunk-WYVGULTQ.js";
 import "../../chunk-ZLNHPUFA.js";
 export {

package/dist/transformer/transformers.cjs

@@ -3,7 +3,10 @@
 
 
 
-var _chunkTVYA5JSQcjs = require('../chunk-TVYA5JSQ.cjs');
+var _chunkZAPN7XA6cjs = require('../chunk-ZAPN7XA6.cjs');
+
+
+var _chunkKIQ2HA2Acjs = require('../chunk-KIQ2HA2A.cjs');
 
 
 var _chunkNOITAVHAcjs = require('../chunk-NOITAVHA.cjs');
@@ -12,12 +15,9 @@ var _chunkNOITAVHAcjs = require('../chunk-NOITAVHA.cjs');
 var _chunkQWNUOR7Fcjs = require('../chunk-QWNUOR7F.cjs');
 
 
-var _chunkSQMAEDNEcjs = require('../chunk-SQMAEDNE.cjs');
-require('../chunk-5RSZYQJH.cjs');
+var _chunkPOUTD5AMcjs = require('../chunk-POUTD5AM.cjs');
 require('../chunk-6DDYNS2B.cjs');
-
-
-var _chunkKIQ2HA2Acjs = require('../chunk-KIQ2HA2A.cjs');
+require('../chunk-5RSZYQJH.cjs');
 
 
 var _chunkVXRTQZF2cjs = require('../chunk-VXRTQZF2.cjs');
@@ -34,4 +34,4 @@ require('../chunk-IUL4VWNU.cjs');
 
 
 
-exports.AnthropicTransformer = _chunkSQMAEDNEcjs.AnthropicTransformer; exports.BUILTIN_TRANSFORMER_NAMES = _chunkTVYA5JSQcjs.BUILTIN_TRANSFORMER_NAMES; exports.BuiltinTransformers = _chunkTVYA5JSQcjs.BuiltinTransformers; exports.GeminiCodeAssistTransformer = _chunkVXRTQZF2cjs.GeminiCodeAssistTransformer; exports.GeminiTransformer = _chunkKIQ2HA2Acjs.GeminiTransformer; exports.OpenAIResponseTransformer = _chunkNOITAVHAcjs.OpenAIResponseTransformer; exports.OpenAITransformer = _chunkQWNUOR7Fcjs.OpenAITransformer; exports.getBuiltinTransformers = _chunkTVYA5JSQcjs.getBuiltinTransformers; exports.registerBuiltinTransformers = _chunkTVYA5JSQcjs.registerBuiltinTransformers;
+exports.AnthropicTransformer = _chunkPOUTD5AMcjs.AnthropicTransformer; exports.BUILTIN_TRANSFORMER_NAMES = _chunkZAPN7XA6cjs.BUILTIN_TRANSFORMER_NAMES; exports.BuiltinTransformers = _chunkZAPN7XA6cjs.BuiltinTransformers; exports.GeminiCodeAssistTransformer = _chunkVXRTQZF2cjs.GeminiCodeAssistTransformer; exports.GeminiTransformer = _chunkKIQ2HA2Acjs.GeminiTransformer; exports.OpenAIResponseTransformer = _chunkNOITAVHAcjs.OpenAIResponseTransformer; exports.OpenAITransformer = _chunkQWNUOR7Fcjs.OpenAITransformer; exports.getBuiltinTransformers = _chunkZAPN7XA6cjs.getBuiltinTransformers; exports.registerBuiltinTransformers = _chunkZAPN7XA6cjs.registerBuiltinTransformers;

package/dist/transformer/transformers.js

@@ -3,7 +3,10 @@ import {
   BuiltinTransformers,
   getBuiltinTransformers,
   registerBuiltinTransformers
-} from "../chunk-FJNKXOWE.js";
+} from "../chunk-2C3TTBS7.js";
+import {
+  GeminiTransformer
+} from "../chunk-HN74IGEO.js";
 import {
   OpenAIResponseTransformer
 } from "../chunk-V53ZEFXC.js";
@@ -12,12 +15,9 @@ import {
 } from "../chunk-7PIUVCKK.js";
 import {
   AnthropicTransformer
-} from "../chunk-6OC3ORW6.js";
-import "../chunk-FU7EAR73.js";
+} from "../chunk-EUZRH544.js";
 import "../chunk-LFEH7CEO.js";
-import {
-  GeminiTransformer
-} from "../chunk-HN74IGEO.js";
+import "../chunk-FU7EAR73.js";
 import {
   GeminiCodeAssistTransformer
 } from "../chunk-4VVCXVB7.js";

package/dist/transformer.cjs

@@ -2,19 +2,19 @@
 
 
 var _chunk7ZHBN75Ncjs = require('./chunk-7ZHBN75N.cjs');
+require('./chunk-GBHYAGX3.cjs');
 
 
 var _chunk3OPYJG76cjs = require('./chunk-3OPYJG76.cjs');
 
 
-var _chunkTVYA5JSQcjs = require('./chunk-TVYA5JSQ.cjs');
+var _chunkZAPN7XA6cjs = require('./chunk-ZAPN7XA6.cjs');
+require('./chunk-KIQ2HA2A.cjs');
 require('./chunk-NOITAVHA.cjs');
 require('./chunk-QWNUOR7F.cjs');
-require('./chunk-SQMAEDNE.cjs');
-require('./chunk-5RSZYQJH.cjs');
+require('./chunk-POUTD5AM.cjs');
 require('./chunk-6DDYNS2B.cjs');
-require('./chunk-KIQ2HA2A.cjs');
-require('./chunk-GBHYAGX3.cjs');
+require('./chunk-5RSZYQJH.cjs');
 require('./chunk-VXRTQZF2.cjs');
 require('./chunk-WX2E2G7H.cjs');
 require('./chunk-77USGNRW.cjs');
@@ -40,4 +40,4 @@ var _chunkIUL4VWNUcjs = require('./chunk-IUL4VWNU.cjs');
 
 
 
-exports.THINK_LEVELS = _chunkIUL4VWNUcjs.THINK_LEVELS; exports.TransformerChainExecutor = _chunk7ZHBN75Ncjs.TransformerChainExecutor; exports.TransformerService = _chunk3OPYJG76cjs.TransformerService; exports.extractReasoningIntent = _chunkIUL4VWNUcjs.extractReasoningIntent; exports.normalizeThinkLevel = _chunkIUL4VWNUcjs.normalizeThinkLevel; exports.registerBuiltinTransformers = _chunkTVYA5JSQcjs.registerBuiltinTransformers; exports.resolveReasoningEffort = _chunkIUL4VWNUcjs.resolveReasoningEffort; exports.resolveReasoningPlan = _chunkIUL4VWNUcjs.resolveReasoningPlan; exports.resolveReasoningTokenLimit = _chunkIUL4VWNUcjs.resolveReasoningTokenLimit; exports.resolveRequestReasoning = _chunkIUL4VWNUcjs.resolveRequestReasoning; exports.resolveTargetModelCapabilities = _chunkIUL4VWNUcjs.resolveTargetModelCapabilities;
+exports.THINK_LEVELS = _chunkIUL4VWNUcjs.THINK_LEVELS; exports.TransformerChainExecutor = _chunk7ZHBN75Ncjs.TransformerChainExecutor; exports.TransformerService = _chunk3OPYJG76cjs.TransformerService; exports.extractReasoningIntent = _chunkIUL4VWNUcjs.extractReasoningIntent; exports.normalizeThinkLevel = _chunkIUL4VWNUcjs.normalizeThinkLevel; exports.registerBuiltinTransformers = _chunkZAPN7XA6cjs.registerBuiltinTransformers; exports.resolveReasoningEffort = _chunkIUL4VWNUcjs.resolveReasoningEffort; exports.resolveReasoningPlan = _chunkIUL4VWNUcjs.resolveReasoningPlan; exports.resolveReasoningTokenLimit = _chunkIUL4VWNUcjs.resolveReasoningTokenLimit; exports.resolveRequestReasoning = _chunkIUL4VWNUcjs.resolveRequestReasoning; exports.resolveTargetModelCapabilities = _chunkIUL4VWNUcjs.resolveTargetModelCapabilities;

package/dist/transformer.js

@@ -2,19 +2,19 @@ import "./chunk-WTQMX2Q6.js";
 import {
   TransformerChainExecutor
 } from "./chunk-EYGBM2VC.js";
+import "./chunk-MZNPGW5Q.js";
 import {
   TransformerService
 } from "./chunk-DK4A7DLE.js";
 import {
   registerBuiltinTransformers
-} from "./chunk-FJNKXOWE.js";
+} from "./chunk-2C3TTBS7.js";
+import "./chunk-HN74IGEO.js";
 import "./chunk-V53ZEFXC.js";
 import "./chunk-7PIUVCKK.js";
-import "./chunk-6OC3ORW6.js";
-import "./chunk-FU7EAR73.js";
+import "./chunk-EUZRH544.js";
 import "./chunk-LFEH7CEO.js";
-import "./chunk-HN74IGEO.js";
-import "./chunk-MZNPGW5Q.js";
+import "./chunk-FU7EAR73.js";
 import "./chunk-4VVCXVB7.js";
 import "./chunk-R4VCO2CB.js";
 import "./chunk-WYVGULTQ.js";

package/dist/{types-DsHBBk3h.d.cts → types-BSIJdsyl.d.cts}

@@ -10,6 +10,8 @@ import { SubscriptionAuthProfile } from './pipeline/SubscriptionAuthSource.cjs';
 import { AuthStrategy } from './pipeline/SubscriptionAuthStrategy.cjs';
 import { ProviderConfigSource } from './ports/provider-config-source.cjs';
 import { WebSearchBackend } from './ports/web-search-backend.cjs';
+import { d as SearchFrontendModes } from './frontends-Doz0RaWu.cjs';
+import { S as SearchRuntime } from './runtime-t8AZacFF.cjs';
 import { ImageArtifactMetadata, SensitiveOpaqueImageReference, ImageReferenceMetadata, ImageReferenceId, ImageAction, ImageQuality, ImageBackground, ImageOutputFormat, ImageGenerationErrorCode, ImageUsage, ImageArtifactId, ImageCapabilities, NormalizedImageRequest, ImageProviderEvent, ImageSize, ImageGenerationPublicError } from '@omnicross/contracts/image-generation-types';
 import { ApiFormat } from '@omnicross/contracts/llm-config';
 
@@ -1064,6 +1066,19 @@ interface ProviderProxyDeps {
      * ingress responds 502 (the factory is a hard dependency of THAT path only).
      */
     readonly anthropicIngressHandlerFactory?: AnthropicIngressHandlerFactory | null;
+    /**
+     * The ONE shared search runtime (plan 阶段5). Consumed by the managed
+     * Responses and Anthropic lanes; the same instance the outbound Codex route
+     * and `doctor search` see. Optional so embedders that never enable a managed
+     * mode compile and behave unchanged.
+     */
+    readonly searchRuntime?: SearchRuntime | null;
+    /**
+     * Per-frontend search modes, resolved ONCE per request from this snapshot
+     * before any wire bytes are emitted. Absent ⇒ the behavior-preserving
+     * defaults (`native` for both protocol frontends).
+     */
+    readonly searchFrontendModes?: SearchFrontendModes | null;
 }
 /**
  * Structural port for the usage recorder — only the `record` method.

package/dist/{types-CbglB73l.d.cts → types-Be-yt_6T.d.cts}

@@ -1,6 +1,6 @@
 import * as _omnicross_contracts_image_generation_types from '@omnicross/contracts/image-generation-types';
 import { ImageArtifactMetadata, ImageRequestOptions } from '@omnicross/contracts/image-generation-types';
-import { I as ImageAsset, p as ImageReferenceLease, K as OpenAIOperationHandler, h as ImageOrchestrator, L as OpenAIOperationHandlerContext, s as ImageReferenceStore, u as ImageRetentionPolicy } from './types-DsHBBk3h.cjs';
+import { I as ImageAsset, p as ImageReferenceLease, K as OpenAIOperationHandler, h as ImageOrchestrator, L as OpenAIOperationHandlerContext, s as ImageReferenceStore, u as ImageRetentionPolicy } from './types-BSIJdsyl.cjs';
 import { FileHandle } from 'node:fs/promises';
 
 type ResourceKind = 'input' | 'spool';

package/dist/{types-CVRge76p.d.ts → types-By9Tg6-I.d.ts}

@@ -10,6 +10,8 @@ import { SubscriptionAuthProfile } from './pipeline/SubscriptionAuthSource.js';
 import { AuthStrategy } from './pipeline/SubscriptionAuthStrategy.js';
 import { ProviderConfigSource } from './ports/provider-config-source.js';
 import { WebSearchBackend } from './ports/web-search-backend.js';
+import { d as SearchFrontendModes } from './frontends-Doz0RaWu.js';
+import { S as SearchRuntime } from './runtime-t8AZacFF.js';
 import { ImageArtifactMetadata, SensitiveOpaqueImageReference, ImageReferenceMetadata, ImageReferenceId, ImageAction, ImageQuality, ImageBackground, ImageOutputFormat, ImageGenerationErrorCode, ImageUsage, ImageArtifactId, ImageCapabilities, NormalizedImageRequest, ImageProviderEvent, ImageSize, ImageGenerationPublicError } from '@omnicross/contracts/image-generation-types';
 import { ApiFormat } from '@omnicross/contracts/llm-config';
 
@@ -1064,6 +1066,19 @@ interface ProviderProxyDeps {
      * ingress responds 502 (the factory is a hard dependency of THAT path only).
      */
     readonly anthropicIngressHandlerFactory?: AnthropicIngressHandlerFactory | null;
+    /**
+     * The ONE shared search runtime (plan 阶段5). Consumed by the managed
+     * Responses and Anthropic lanes; the same instance the outbound Codex route
+     * and `doctor search` see. Optional so embedders that never enable a managed
+     * mode compile and behave unchanged.
+     */
+    readonly searchRuntime?: SearchRuntime | null;
+    /**
+     * Per-frontend search modes, resolved ONCE per request from this snapshot
+     * before any wire bytes are emitted. Absent ⇒ the behavior-preserving
+     * defaults (`native` for both protocol frontends).
+     */
+    readonly searchFrontendModes?: SearchFrontendModes | null;
 }
 /**
  * Structural port for the usage recorder — only the `record` method.

package/dist/types-CbCZqLGg.d.cts

@@ -0,0 +1,127 @@
+import { SearchProviderId } from '@omnicross/contracts/search-types';
+
+/**
+ * Shared vocabulary for the API search slice (plan 阶段4).
+ *
+ * Config shapes, the transport seams, and the failure-stage vocabulary, in one
+ * place so the four adapters, the shared transport, the contributions factory
+ * and the doctor can agree on names without importing each other.
+ *
+ * The config shapes stay CORE-LOCAL rather than moving into
+ * `@omnicross/contracts`: their only consumers are in this package until
+ * 阶段5's daemon assembles real configuration, and promoting them then — with
+ * whatever that assembly actually needs — beats freezing a guess now. Recorded
+ * as an explicit deferral in the change's design.
+ *
+ * @module search/api/types
+ */
+
+/**
+ * The transport identity stamped on every failure this slice throws.
+ *
+ * Same client as the HTTP slice, declared separately rather than imported: the
+ * two subpaths are independent, and a shared constant would couple them for a
+ * five-character string.
+ */
+declare const SEARCH_API_TRANSPORT_ID = "undici";
+/**
+ * Which phase of an API search failed (plan §11.4).
+ *
+ * - `config` — a required key or host is absent; nothing was sent.
+ * - `egress` — the policy refused the target or a redirect hop.
+ * - `connect` — the request never produced a response (DNS, TCP, TLS).
+ * - `fetch` — a response arrived but its status is unusable.
+ * - `redirect` — the redirect chain exceeded its cap.
+ * - `body-cap` — the response body outgrew its byte cap mid-stream.
+ * - `parse` — the body is not the JSON shape this API documents.
+ */
+type SearchApiStage = 'config' | 'egress' | 'connect' | 'fetch' | 'redirect' | 'body-cap' | 'parse';
+/** Tavily: key required, host overridable. */
+interface TavilyProviderConfig {
+    /** API key. Comma-separated values rotate round-robin. */
+    apiKey: string;
+    /** Override for `https://api.tavily.com`. */
+    apiHost?: string;
+}
+/** Jina: key OPTIONAL — the search endpoint works unauthenticated (rate-limited). */
+interface JinaProviderConfig {
+    /** API key. Comma-separated values rotate round-robin. Omit to run keyless. */
+    apiKey?: string;
+    /** Override for `https://s.jina.ai`. */
+    apiHost?: string;
+}
+/** SearXNG: the HOST is the required setting; there is no API key. */
+interface SearxngProviderConfig {
+    /** Base URL of the SearXNG instance. Required — this is its "configured" signal. */
+    apiHost: string;
+    /** Basic-auth user. Sent only when both user and password are present. */
+    basicAuthUsername?: string;
+    /** Basic-auth password. Sent only when both user and password are present. */
+    basicAuthPassword?: string;
+}
+/** Zhipu and Z.AI: one wire contract, two ids, two default hosts. */
+interface ZhipuProviderConfig {
+    /** API key. Comma-separated values rotate round-robin. */
+    apiKey: string;
+    /** Override for the per-id default host; normalized onto `/web_search`. */
+    apiHost?: string;
+}
+/**
+ * Per-provider configuration, keyed by provider id.
+ *
+ * A provider absent from this object is UNCONFIGURED, not broken: it produces
+ * no contribution at all, so capability discovery never advertises something
+ * that cannot run.
+ */
+interface SearchApiProviderConfigs {
+    tavily?: TavilyProviderConfig;
+    jina?: JinaProviderConfig;
+    searxng?: SearxngProviderConfig;
+    zhipu?: ZhipuProviderConfig;
+    'z.ai'?: ZhipuProviderConfig;
+}
+/**
+ * One API request, as the shared transport takes it.
+ *
+ * `secrets` is the redaction input: every value listed is stripped out of any
+ * upstream text before it can reach an error message or a diagnostic. Tavily
+ * transmits its key in the request BODY, so an upstream 4xx that echoes the
+ * request would otherwise put the key straight into a log.
+ */
+interface SearchApiRequest {
+    /** Absolute request URL. Validated against the egress policy before use. */
+    url: string;
+    /** HTTP method. */
+    method: 'GET' | 'POST';
+    /** Request headers. Never logged, never echoed into an error. */
+    headers?: Record<string, string>;
+    /** Body to serialize as JSON. Omit for GET. */
+    jsonBody?: unknown;
+    /** Stamped onto every thrown error. */
+    providerId: SearchProviderId;
+    /** Human-readable provider name for failure messages (never the query). */
+    label: string;
+    /** Hard budget for this request in milliseconds. */
+    timeoutMs?: number;
+    /** Caller cancellation. Aborting surfaces as `cancelled`, never `timeout`. */
+    signal?: AbortSignal;
+    /** Credential values to redact from any upstream text. */
+    secrets?: ReadonlyArray<string | undefined>;
+}
+/**
+ * The seam every adapter calls: a request in, parsed JSON out.
+ *
+ * Deliberately `unknown` rather than generic. The transport cannot know an
+ * API's shape, and a generic here would be a promise it cannot keep — each
+ * adapter validates its own response and raises `parse_failed` itself, which is
+ * where that failure actually belongs.
+ */
+type SearchApiTransport = (request: SearchApiRequest) => Promise<unknown>;
+/**
+ * The low-level fetch primitive the shared transport drives — undici's `fetch`
+ * by default. Separate from {@link SearchApiTransport} so redirect, status and
+ * redaction behavior can be unit-tested without a network.
+ */
+type SearchApiFetch = (url: string, init: RequestInit) => Promise<Response>;
+
+export { type JinaProviderConfig as J, type SearchApiProviderConfigs as S, type TavilyProviderConfig as T, type ZhipuProviderConfig as Z, type SearchApiFetch as a, type SearchApiTransport as b, type SearxngProviderConfig as c, SEARCH_API_TRANSPORT_ID as d, type SearchApiRequest as e, type SearchApiStage as f };