@osovv/vv-opencode 1.1.6 → 1.2.1

package/dist/plugins/web-tools/fetch-service.js

@@ -0,0 +1,169 @@
+// FILE: src/plugins/web-tools/fetch-service.ts
+// VERSION: 1.0.0
+// START_MODULE_CONTRACT
+//   PURPOSE: Build the provider-neutral web_fetch tool: input validation, permission request, provider dispatch, and structured text or attachment results.
+//   SCOPE: web_fetch ToolDefinition factory; delegates retrieval and conversion to the native, Spider, and direct Z.AI adapters.
+//   DEPENDS: [@opencode-ai/plugin, src/plugins/web-tools/config.ts, src/plugins/web-tools/providers/native-fetch.ts, src/plugins/web-tools/providers/spider.ts, src/plugins/web-tools/providers/zai.ts, src/plugins/web-tools/providers/exa.ts]
+//   LINKS: M-WEB-FETCH-SERVICE, M-WEB-NATIVE-FETCH, M-WEB-SPIDER, M-WEB-ZAI, M-WEB-MEDIA-LOADER, M-WEB-EXA, M-PLUGIN-WEB-TOOLS
+//   ROLE: RUNTIME
+//   MAP_MODE: EXPORTS
+// END_MODULE_CONTRACT
+//
+// START_MODULE_MAP
+//   WEB_FETCH_DEFAULT_TIMEOUT_SECONDS - Default per-call timeout in seconds.
+//   WEB_FETCH_MAX_TIMEOUT_SECONDS - Maximum model-configurable timeout in seconds.
+//   createWebFetchTool - Create the web_fetch ToolDefinition bound to a resolved fetch config.
+// END_MODULE_MAP
+//
+// START_CHANGE_SUMMARY
+//   LAST_CHANGE: [DIRECT-FIX - Applied web_fetch format and timeout defaults inside execute when OpenCode omits schema defaults at runtime.]
+//   LAST_CHANGE: [C-ZAI-DIRECT-WEB-PROVIDERS - Routed canonical web_fetch calls through the explicit-region direct Z.AI reader adapter.]
+//   LAST_CHANGE: [v1.0.0 - Initial web_fetch tool service.]
+// END_CHANGE_SUMMARY
+import { tool, } from "@opencode-ai/plugin";
+import { WebProviderError } from "./providers/exa.js";
+import { fetchNative } from "./providers/native-fetch.js";
+import { scrapeSpider } from "./providers/spider.js";
+import { fetchZai } from "./providers/zai.js";
+const z = tool.schema;
+export const WEB_FETCH_DEFAULT_TIMEOUT_SECONDS = 30;
+export const WEB_FETCH_MAX_TIMEOUT_SECONDS = 120;
+// START_BLOCK_RESULT_MAPPING
+function mediaSummary(attachment) {
+    const name = attachment.filename ? `\`${attachment.filename}\`` : "the requested resource";
+    return `Fetched ${name} as a ${attachment.mime} attachment.`;
+}
+function nativeResult(url, format, outcome) {
+    if (outcome.kind === "media") {
+        return {
+            title: `web_fetch: ${url}`,
+            output: mediaSummary(outcome.attachment),
+            attachments: [outcome.attachment],
+            metadata: { provider: "native", format, status: outcome.status },
+        };
+    }
+    return {
+        title: `web_fetch: ${url}`,
+        output: outcome.content,
+        metadata: { provider: "native", format, status: outcome.status },
+    };
+}
+function spiderResult(url, format, credentialSource, outcome) {
+    const metadata = {
+        provider: "spider",
+        format,
+        credentialSource,
+        ...outcome.metadata,
+    };
+    if (outcome.kind === "media") {
+        return {
+            title: `web_fetch: ${url}`,
+            output: mediaSummary(outcome.attachment),
+            attachments: [outcome.attachment],
+            metadata,
+        };
+    }
+    return { title: `web_fetch: ${url}`, output: outcome.content, metadata };
+}
+function zaiResult(url, format, region, credentialSource, outcome) {
+    const metadata = {
+        provider: "zai",
+        region,
+        format,
+        credentialSource,
+        ...outcome.metadata,
+    };
+    if (outcome.kind === "media") {
+        return {
+            title: `web_fetch: ${url}`,
+            output: mediaSummary(outcome.attachment),
+            attachments: [outcome.attachment],
+            metadata,
+        };
+    }
+    return { title: `web_fetch: ${url}`, output: outcome.content, metadata };
+}
+// END_BLOCK_RESULT_MAPPING
+/**
+ * Create the web_fetch tool bound to the resolved fetch configuration.
+ * execute validates http or https schemes, asks permission key web_fetch with patterns [url],
+ * routes textual extraction to native, Spider, or direct Z.AI reader, returns media as attachments with a short
+ * Markdown summary in the same ToolResult, and reports metadata
+ * { provider, format, credentialSource?, status?, durationMs? }.
+ * Native fetch requires no credential; Spider and Z.AI validate credentials at execution time
+ * with actionable messages naming the environment variable and web.fetch.apiKey.
+ */
+export function createWebFetchTool(resolved) {
+    return tool({
+        description: "Fetch a known HTTP or HTTPS URL using the configured provider. Returns Markdown, text, raw HTML, or an image/PDF attachment.",
+        args: {
+            url: z.string().min(1).describe("The HTTP or HTTPS URL to retrieve."),
+            format: z
+                .enum(["markdown", "text", "html"])
+                .default("markdown")
+                .describe("Output format for textual resources; defaults to markdown."),
+            timeout: z
+                .number()
+                .positive()
+                .max(WEB_FETCH_MAX_TIMEOUT_SECONDS)
+                .default(WEB_FETCH_DEFAULT_TIMEOUT_SECONDS)
+                .describe("Timeout in seconds, greater than 0 and at most 120."),
+        },
+        async execute(args, context) {
+            let parsedUrl;
+            try {
+                parsedUrl = new URL(args.url);
+            }
+            catch {
+                throw new Error("web_fetch requires a valid HTTP or HTTPS URL");
+            }
+            if (parsedUrl.protocol !== "http:" && parsedUrl.protocol !== "https:") {
+                throw new Error(`web_fetch supports only HTTP and HTTPS URLs; received ${parsedUrl.protocol || "unknown scheme"}`);
+            }
+            const format = args.format ?? "markdown";
+            const timeoutSeconds = args.timeout ?? WEB_FETCH_DEFAULT_TIMEOUT_SECONDS;
+            await context.ask({
+                permission: "web_fetch",
+                patterns: [args.url],
+                always: [],
+                metadata: { provider: resolved.provider, format },
+            });
+            const timeoutMs = timeoutSeconds * 1000;
+            if (resolved.provider === "native") {
+                const outcome = await fetchNative({
+                    url: args.url,
+                    format,
+                    abort: context.abort,
+                    timeoutMs,
+                });
+                return nativeResult(args.url, format, outcome);
+            }
+            if (!resolved.credential) {
+                throw new WebProviderError(resolved.provider, "MISSING_CREDENTIAL", `missing credential for ${resolved.provider}: set ${resolved.envVar ?? "SPIDER_API_KEY"} or ${resolved.configField ?? "web.fetch.apiKey"}`);
+            }
+            if (resolved.provider === "zai") {
+                if (!resolved.region) {
+                    throw new Error("web.fetch.region is required when provider is zai");
+                }
+                const outcome = await fetchZai({
+                    url: args.url,
+                    format,
+                    region: resolved.region,
+                    credential: resolved.credential,
+                    abort: context.abort,
+                    timeoutMs,
+                });
+                return zaiResult(args.url, format, resolved.region, resolved.credential.source, outcome);
+            }
+            const outcome = await scrapeSpider({
+                url: args.url,
+                format,
+                credential: resolved.credential,
+                abort: context.abort,
+                timeoutMs,
+            });
+            return spiderResult(args.url, format, resolved.credential.source, outcome);
+        },
+    });
+}
+//# sourceMappingURL=fetch-service.js.map

package/dist/plugins/web-tools/fetch-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-service.js","sourceRoot":"","sources":["../../../src/plugins/web-tools/fetch-service.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,iBAAiB;AACjB,wBAAwB;AACxB,4JAA4J;AAC5J,iIAAiI;AACjI,gPAAgP;AAChP,+HAA+H;AAC/H,kBAAkB;AAClB,sBAAsB;AACtB,sBAAsB;AACtB,EAAE;AACF,mBAAmB;AACnB,6EAA6E;AAC7E,mFAAmF;AACnF,+FAA+F;AAC/F,iBAAiB;AACjB,EAAE;AACF,uBAAuB;AACvB,6IAA6I;AAC7I,yIAAyI;AACzI,4DAA4D;AAC5D,qBAAqB;AAErB,OAAO,EACL,IAAI,GAIL,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAA2B,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,YAAY,EAAsB,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAyB,MAAM,oBAAoB,CAAC;AAErE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;AAEtB,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,CAAC;AACpD,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAIjD,6BAA6B;AAC7B,SAAS,YAAY,CAAC,UAA0B;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAC3F,OAAO,WAAW,IAAI,SAAS,UAAU,CAAC,IAAI,cAAc,CAAC;AAC/D,CAAC;AAED,SAAS,YAAY,CACnB,GAAW,EACX,MAAmB,EACnB,OAA2B;IAE3B,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,cAAc,GAAG,EAAE;YAC1B,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACjE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,cAAc,GAAG,EAAE;QAC1B,MAAM,EAAE,OAAO,CAAC,OAAO;QACvB,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,GAAW,EACX,MAAmB,EACnB,gBAAkC,EAClC,OAAsB;IAEtB,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE,QAAQ;QAClB,MAAM;QACN,gBAAgB;QAChB,GAAG,OAAO,CAAC,QAAQ;KACpB,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,cAAc,GAAG,EAAE;YAC1B,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;YACjC,QAAQ;SACT,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,cAAc,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAChB,GAAW,EACX,MAAmB,EACnB,MAAiC,EACjC,gBAAkC,EAClC,OAAyB;IAEzB,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE,KAAK;QACf,MAAM;QACN,MAAM;QACN,gBAAgB;QAChB,GAAG,OAAO,CAAC,QAAQ;KACpB,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,cAAc,GAAG,EAAE;YAC1B,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;YACjC,QAAQ;SACT,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,cAAc,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC3E,CAAC;AACD,2BAA2B;AAE3B;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgC;IACjE,OAAO,IAAI,CAAC;QACV,WAAW,EACT,8HAA8H;QAChI,IAAI,EAAE;YACJ,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;YACrE,MAAM,EAAE,CAAC;iBACN,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;iBAClC,OAAO,CAAC,UAAU,CAAC;iBACnB,QAAQ,CAAC,4DAA4D,CAAC;YACzE,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,GAAG,CAAC,6BAA6B,CAAC;iBAClC,OAAO,CAAC,iCAAiC,CAAC;iBAC1C,QAAQ,CAAC,qDAAqD,CAAC;SACnE;QACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO;YACzB,IAAI,SAAc,CAAC;YACnB,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CACb,yDAAyD,SAAS,CAAC,QAAQ,IAAI,gBAAgB,EAAE,CAClG,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAgB,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;YACtD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,IAAI,iCAAiC,CAAC;YAEzE,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,UAAU,EAAE,WAAW;gBACvB,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;gBACpB,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE;aAClD,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,cAAc,GAAG,IAAI,CAAC;YACxC,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC;oBAChC,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,MAAM;oBACN,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACzB,MAAM,IAAI,gBAAgB,CACxB,QAAQ,CAAC,QAAQ,EACjB,oBAAoB,EACpB,0BAA0B,QAAQ,CAAC,QAAQ,SAAS,QAAQ,CAAC,MAAM,IAAI,gBAAgB,OAAO,QAAQ,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAC3I,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;gBACvE,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;oBAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,MAAM;oBACN,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC;gBACjC,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,MAAM;gBACN,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS;aACV,CAAC,CAAC;YACH,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/plugins/web-tools/html-markdown.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Convert an HTML document to GitHub-flavored Markdown.
+ * Removes script and style content, keeps links as [text](href),
+ * and preserves headings, lists, and code blocks.
+ * Returns an empty string for empty or whitespace-only input.
+ */
+export declare function convertHtmlToMarkdown(html: string): string;
+/**
+ * Extract visible text from an HTML document.
+ * Removes script and style content, decodes entities, and collapses whitespace runs.
+ * Returns an empty string for empty or whitespace-only input.
+ */
+export declare function convertHtmlToText(html: string): string;

package/dist/plugins/web-tools/html-markdown.js

@@ -0,0 +1,82 @@
+// FILE: src/plugins/web-tools/html-markdown.ts
+// VERSION: 1.0.0
+// START_MODULE_CONTRACT
+//   PURPOSE: Convert HTML locally to Markdown or plain text for the native fetch provider.
+//   SCOPE: Turndown-based Markdown conversion and htmlparser2-based text extraction, both stripping script and style content.
+//   DEPENDS: [turndown, htmlparser2]
+//   LINKS: [M-WEB-HTML-MARKDOWN, M-WEB-NATIVE-FETCH]
+//   ROLE: RUNTIME
+//   MAP_MODE: EXPORTS
+// END_MODULE_CONTRACT
+//
+// START_MODULE_MAP
+//   convertHtmlToMarkdown - Convert an HTML document to GitHub-flavored Markdown.
+//   convertHtmlToText - Extract visible text from an HTML document.
+// END_MODULE_MAP
+//
+// START_CHANGE_SUMMARY
+//   LAST_CHANGE: [v1.0.0 - Initial local HTML to Markdown and text conversion for the native fetch provider.]
+// END_CHANGE_SUMMARY
+import { Parser } from "htmlparser2";
+import TurndownService from "turndown";
+// START_BLOCK_MARKDOWN
+let sharedTurndown;
+function getTurndown() {
+    if (!sharedTurndown) {
+        sharedTurndown = new TurndownService({
+            headingStyle: "atx",
+            codeBlockStyle: "fenced",
+            bulletListMarker: "-",
+        });
+        sharedTurndown.remove(["script", "style"]);
+    }
+    return sharedTurndown;
+}
+/**
+ * Convert an HTML document to GitHub-flavored Markdown.
+ * Removes script and style content, keeps links as [text](href),
+ * and preserves headings, lists, and code blocks.
+ * Returns an empty string for empty or whitespace-only input.
+ */
+export function convertHtmlToMarkdown(html) {
+    if (!html || html.trim() === "") {
+        return "";
+    }
+    return getTurndown().turndown(html).trim();
+}
+// END_BLOCK_MARKDOWN
+// START_BLOCK_TEXT
+/**
+ * Extract visible text from an HTML document.
+ * Removes script and style content, decodes entities, and collapses whitespace runs.
+ * Returns an empty string for empty or whitespace-only input.
+ */
+export function convertHtmlToText(html) {
+    if (!html || html.trim() === "") {
+        return "";
+    }
+    let text = "";
+    let skipDepth = 0;
+    const parser = new Parser({
+        onopentag(name) {
+            if (name === "script" || name === "style") {
+                skipDepth += 1;
+            }
+        },
+        ontext(data) {
+            if (skipDepth === 0) {
+                text += data;
+            }
+        },
+        onclosetag(name) {
+            if (name === "script" || name === "style") {
+                skipDepth = Math.max(0, skipDepth - 1);
+            }
+        },
+    }, { decodeEntities: true });
+    parser.write(html);
+    parser.end();
+    return text.replace(/\s+/g, " ").trim();
+}
+// END_BLOCK_TEXT
+//# sourceMappingURL=html-markdown.js.map

package/dist/plugins/web-tools/html-markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html-markdown.js","sourceRoot":"","sources":["../../../src/plugins/web-tools/html-markdown.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,iBAAiB;AACjB,wBAAwB;AACxB,2FAA2F;AAC3F,8HAA8H;AAC9H,qCAAqC;AACrC,qDAAqD;AACrD,kBAAkB;AAClB,sBAAsB;AACtB,sBAAsB;AACtB,EAAE;AACF,mBAAmB;AACnB,kFAAkF;AAClF,oEAAoE;AACpE,iBAAiB;AACjB,EAAE;AACF,uBAAuB;AACvB,8GAA8G;AAC9G,qBAAqB;AAErB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,eAAe,MAAM,UAAU,CAAC;AAEvC,uBAAuB;AACvB,IAAI,cAA2C,CAAC;AAEhD,SAAS,WAAW;IAClB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,IAAI,eAAe,CAAC;YACnC,YAAY,EAAE,KAAK;YACnB,cAAc,EAAE,QAAQ;YACxB,gBAAgB,EAAE,GAAG;SACtB,CAAC,CAAC;QACH,cAAc,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AACD,qBAAqB;AAErB,mBAAmB;AACnB;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,SAAS,CAAC,IAAI;YACZ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC1C,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI;YACT,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,IAAI,IAAI,IAAI,CAAC;YACf,CAAC;QACH,CAAC;QACD,UAAU,CAAC,IAAI;YACb,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC1C,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;KACF,EACD,EAAE,cAAc,EAAE,IAAI,EAAE,CACzB,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,MAAM,CAAC,GAAG,EAAE,CAAC;IACb,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AACD,iBAAiB"}

package/dist/plugins/web-tools/http.d.ts

@@ -0,0 +1,34 @@
+export type WebHttpErrorCode = "NETWORK_ERROR" | "TIMEOUT" | "ABORTED" | "OVERSIZED" | "HTTP_ERROR";
+/** Transport-level failure. status is set only for HTTP_ERROR. Messages never include credentials. */
+export declare class WebHttpError extends Error {
+    readonly code: WebHttpErrorCode;
+    readonly status?: number;
+    constructor(code: WebHttpErrorCode, message: string, status?: number);
+}
+export type BoundedHttpRequest = {
+    url: string;
+    method?: "GET" | "POST";
+    headers?: Record<string, string>;
+    body?: string;
+    /** Wall-clock timeout in milliseconds. */
+    timeoutMs: number;
+    /** Hard response body cap in bytes. */
+    maxBytes: number;
+    /** Optional caller abort signal; combined with the internal timeout controller. */
+    abort?: AbortSignal;
+};
+export type BoundedHttpResponse = {
+    status: number;
+    headers: Headers;
+    bytes: Uint8Array;
+    finalUrl: string;
+};
+/** Minimal fetch-compatible callable; avoids Bun-specific fetch properties for injectable mocks. */
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+/** Default cap for textual responses (5 MiB). */
+export declare const DEFAULT_TEXT_MAX_BYTES: number;
+/** Default cap for media responses (20 MiB). */
+export declare const DEFAULT_MEDIA_MAX_BYTES: number;
+/** Default request timeout (30 seconds). */
+export declare const DEFAULT_REQUEST_TIMEOUT_MS = 30000;
+export declare function requestBounded(request: BoundedHttpRequest, fetchImpl?: FetchLike): Promise<BoundedHttpResponse>;

package/dist/plugins/web-tools/http.js

@@ -0,0 +1,154 @@
+// FILE: src/plugins/web-tools/http.ts
+// VERSION: 1.0.0
+// START_MODULE_CONTRACT
+//   PURPOSE: Provide shared bounded HTTP execution for the web tools providers and media loader.
+//   SCOPE: Timeout enforcement, caller abort propagation, a hard response-size cap, redirect following, and a transport error taxonomy.
+//   DEPENDS: [none]
+//   LINKS: [M-WEB-HTTP, M-WEB-EXA, M-WEB-BRAVE, M-WEB-NATIVE-FETCH, M-WEB-SPIDER, M-WEB-MEDIA-LOADER]
+//   ROLE: RUNTIME
+//   MAP_MODE: EXPORTS
+// END_MODULE_CONTRACT
+//
+// START_MODULE_MAP
+//   WebHttpErrorCode - Transport error codes.
+//   WebHttpError - Transport-level error carrying a code and optional HTTP status.
+//   BoundedHttpRequest - Request input with timeout, size cap, and optional caller abort.
+//   BoundedHttpResponse - Response with status, headers, bytes, and final URL.
+//   FetchLike - Minimal fetch-compatible callable for injectable mocks.
+//   DEFAULT_TEXT_MAX_BYTES - Default cap for textual responses.
+//   DEFAULT_MEDIA_MAX_BYTES - Default cap for media responses.
+//   DEFAULT_REQUEST_TIMEOUT_MS - Default request timeout.
+//   requestBounded - Execute one bounded HTTP request.
+// END_MODULE_MAP
+//
+// START_CHANGE_SUMMARY
+//   LAST_CHANGE: [v1.0.0 - Initial bounded HTTP transport and error taxonomy for the unified web tools.]
+// END_CHANGE_SUMMARY
+/** Transport-level failure. status is set only for HTTP_ERROR. Messages never include credentials. */
+export class WebHttpError extends Error {
+    code;
+    status;
+    constructor(code, message, status) {
+        super(message);
+        this.name = "WebHttpError";
+        this.code = code;
+        this.status = status;
+    }
+}
+/** Default cap for textual responses (5 MiB). */
+export const DEFAULT_TEXT_MAX_BYTES = 5 * 1024 * 1024;
+/** Default cap for media responses (20 MiB). */
+export const DEFAULT_MEDIA_MAX_BYTES = 20 * 1024 * 1024;
+/** Default request timeout (30 seconds). */
+export const DEFAULT_REQUEST_TIMEOUT_MS = 30_000;
+// START_BLOCK_HELPERS
+function safeMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function mapTransportError(error, controller, timedOut, timeoutMs) {
+    if (controller.signal.aborted) {
+        if (timedOut) {
+            return new WebHttpError("TIMEOUT", `request timed out after ${timeoutMs}ms`);
+        }
+        return new WebHttpError("ABORTED", "request aborted by caller");
+    }
+    return new WebHttpError("NETWORK_ERROR", `network error: ${safeMessage(error)}`);
+}
+async function readBodyWithCap(response, maxBytes, controller) {
+    const body = response.body;
+    if (!body) {
+        return new Uint8Array(0);
+    }
+    const reader = body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (!value)
+                continue;
+            total += value.byteLength;
+            if (total > maxBytes) {
+                controller.abort();
+                throw new WebHttpError("OVERSIZED", `response body exceeded ${maxBytes} bytes`);
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        out.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return out;
+}
+// END_BLOCK_HELPERS
+// START_CONTRACT: requestBounded
+//   PURPOSE: Execute one bounded HTTP request.
+//   INPUTS: { request: BoundedHttpRequest; fetchImpl: injectable fetch implementation for tests }
+//   OUTPUTS: { BoundedHttpResponse - status, headers, bytes, and finalUrl }
+//   SIDE_EFFECTS: performs network I/O through fetchImpl; rejects with WebHttpError on failure
+//   LINKS: M-WEB-EXA, M-WEB-BRAVE, M-WEB-NATIVE-FETCH, M-WEB-SPIDER, M-WEB-MEDIA-LOADER
+// END_CONTRACT: requestBounded
+export async function requestBounded(request, fetchImpl = fetch) {
+    const controller = new AbortController();
+    let timedOut = false;
+    const timeout = setTimeout(() => {
+        timedOut = true;
+        controller.abort();
+    }, request.timeoutMs);
+    const onCallerAbort = () => controller.abort();
+    if (request.abort) {
+        if (request.abort.aborted) {
+            controller.abort();
+        }
+        else {
+            request.abort.addEventListener("abort", onCallerAbort, { once: true });
+        }
+    }
+    try {
+        let response;
+        try {
+            response = await fetchImpl(request.url, {
+                method: request.method ?? "GET",
+                headers: request.headers,
+                body: request.body,
+                signal: controller.signal,
+                redirect: "follow",
+            });
+        }
+        catch (error) {
+            throw mapTransportError(error, controller, timedOut, request.timeoutMs);
+        }
+        if (!response.ok) {
+            throw new WebHttpError("HTTP_ERROR", `HTTP ${response.status} for ${request.url}`, response.status);
+        }
+        let bytes;
+        try {
+            bytes = await readBodyWithCap(response, request.maxBytes, controller);
+        }
+        catch (error) {
+            if (error instanceof WebHttpError) {
+                throw error;
+            }
+            throw mapTransportError(error, controller, timedOut, request.timeoutMs);
+        }
+        return {
+            status: response.status,
+            headers: response.headers,
+            bytes,
+            finalUrl: response.url || request.url,
+        };
+    }
+    finally {
+        clearTimeout(timeout);
+        request.abort?.removeEventListener("abort", onCallerAbort);
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/plugins/web-tools/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/plugins/web-tools/http.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iBAAiB;AACjB,wBAAwB;AACxB,iGAAiG;AACjG,wIAAwI;AACxI,oBAAoB;AACpB,sGAAsG;AACtG,kBAAkB;AAClB,sBAAsB;AACtB,sBAAsB;AACtB,EAAE;AACF,mBAAmB;AACnB,8CAA8C;AAC9C,mFAAmF;AACnF,0FAA0F;AAC1F,+EAA+E;AAC/E,wEAAwE;AACxE,gEAAgE;AAChE,+DAA+D;AAC/D,0DAA0D;AAC1D,uDAAuD;AACvD,iBAAiB;AACjB,EAAE;AACF,uBAAuB;AACvB,yGAAyG;AACzG,qBAAqB;AAIrB,sGAAsG;AACtG,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IACvB,MAAM,CAAU;IAEzB,YAAY,IAAsB,EAAE,OAAe,EAAE,MAAe;QAClE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAyBD,iDAAiD;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACtD,gDAAgD;AAChD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,4CAA4C;AAC5C,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEjD,sBAAsB;AACtB,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAc,EACd,UAA2B,EAC3B,QAAiB,EACjB,SAAiB;IAEjB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,YAAY,CAAC,SAAS,EAAE,2BAA2B,SAAS,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,SAAS,EAAE,2BAA2B,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,YAAY,CAAC,eAAe,EAAE,kBAAkB,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAkB,EAClB,QAAgB,EAChB,UAA2B;IAE3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,0BAA0B,QAAQ,QAAQ,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,oBAAoB;AAEpB,iCAAiC;AACjC,+CAA+C;AAC/C,kGAAkG;AAClG,4EAA4E;AAC5E,+FAA+F;AAC/F,wFAAwF;AACxF,+BAA+B;AAC/B,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA2B,EAC3B,YAAuB,KAAK;IAE5B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAEtB,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1B,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;gBACtC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;gBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CACpB,YAAY,EACZ,QAAQ,QAAQ,CAAC,MAAM,QAAQ,OAAO,CAAC,GAAG,EAAE,EAC5C,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;gBAClC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK;YACL,QAAQ,EAAE,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;SACtC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/plugins/web-tools/index.d.ts

@@ -0,0 +1,18 @@
+import { type Config, type Plugin } from "@opencode-ai/plugin";
+/** Built-in permission ids suppressed at runtime while web-tools is enabled. */
+export declare const SUPPRESSED_BUILTIN_PERMISSIONS: readonly ["webfetch", "websearch"];
+/**
+ * Hide the built-in web tools by denying their permission keys in the merged runtime config.
+ * Skips any key the user configured explicitly so explicit user policy always wins.
+ * Mutates only the in-memory config object; no files are written.
+ */
+export declare function applyBuiltinSuppression(config: Config): void;
+/**
+ * WebToolsPlugin entry.
+ * Disabled toggle: returns empty hooks and injects nothing.
+ * Enabled: returns a config hook applying suppression and a tool map with exactly
+ * web_search and web_fetch. Startup logs include provider names and credential sources
+ * and never credential values; a git-tracked project config with an apiKey logs a warning
+ * naming the file without the value.
+ */
+export declare const WebToolsPlugin: Plugin;

package/dist/plugins/web-tools/index.js

@@ -0,0 +1,93 @@
+// FILE: src/plugins/web-tools/index.ts
+// VERSION: 1.0.0
+// START_MODULE_CONTRACT
+//   PURPOSE: Register the canonical web_search and web_fetch tools and suppress OpenCode built-ins at runtime while the web-tools plugin is enabled.
+//   SCOPE: Startup vvoc snapshot use, plugin toggle handling, runtime permission suppression, tool registration, and credential-safe diagnostics.
+//   DEPENDS: [@opencode-ai/plugin, src/lib/config-layers.ts, src/lib/plugin-toggle-config.ts, src/plugins/web-tools/config.ts, src/plugins/web-tools/search-service.ts, src/plugins/web-tools/fetch-service.ts]
+//   LINKS: [M-PLUGIN-WEB-TOOLS, M-WEB-CONFIG, M-WEB-SEARCH-SERVICE, M-WEB-FETCH-SERVICE]
+//   ROLE: RUNTIME
+//   MAP_MODE: EXPORTS
+// END_MODULE_CONTRACT
+//
+// START_MODULE_MAP
+//   SUPPRESSED_BUILTIN_PERMISSIONS - Built-in permission ids hidden while the plugin is enabled.
+//   applyBuiltinSuppression - Add runtime-only deny rules unless the user configured a key explicitly.
+//   WebToolsPlugin - Public plugin entry registering web_search and web_fetch.
+// END_MODULE_MAP
+//
+// START_CHANGE_SUMMARY
+//   LAST_CHANGE: [C-ZAI-DIRECT-WEB-PROVIDERS - Added credential-safe direct Z.AI region diagnostics while preserving the canonical tool surface.]
+//   LAST_CHANGE: [v1.0.0 - Initial WebToolsPlugin with runtime built-in suppression and credential-safe startup diagnostics.]
+// END_CHANGE_SUMMARY
+import { loadVvocConfig } from "../../lib/config-layers.js";
+import { isVvocPluginEnabled } from "../../lib/plugin-toggle-config.js";
+import { resolveWebRuntimeConfig, warnIfSecretBearingProjectConfigTracked } from "./config.js";
+import { createWebFetchTool } from "./fetch-service.js";
+import { createWebSearchTool } from "./search-service.js";
+/** Built-in permission ids suppressed at runtime while web-tools is enabled. */
+export const SUPPRESSED_BUILTIN_PERMISSIONS = ["webfetch", "websearch"];
+/**
+ * Hide the built-in web tools by denying their permission keys in the merged runtime config.
+ * Skips any key the user configured explicitly so explicit user policy always wins.
+ * Mutates only the in-memory config object; no files are written.
+ */
+export function applyBuiltinSuppression(config) {
+    config.permission ??= {};
+    const permission = config.permission;
+    for (const key of SUPPRESSED_BUILTIN_PERMISSIONS) {
+        if (permission[key] === undefined) {
+            permission[key] = "deny";
+        }
+    }
+}
+/**
+ * WebToolsPlugin entry.
+ * Disabled toggle: returns empty hooks and injects nothing.
+ * Enabled: returns a config hook applying suppression and a tool map with exactly
+ * web_search and web_fetch. Startup logs include provider names and credential sources
+ * and never credential values; a git-tracked project config with an apiKey logs a warning
+ * naming the file without the value.
+ */
+export const WebToolsPlugin = async ({ client, directory }) => {
+    const vvoc = await loadVvocConfig({ cwd: directory });
+    if (!isVvocPluginEnabled(vvoc.config, "web-tools")) {
+        return {};
+    }
+    const resolved = resolveWebRuntimeConfig(vvoc);
+    await client.app.log({
+        body: {
+            service: "web-tools",
+            level: "info",
+            message: "web tools configuration loaded",
+            extra: {
+                searchProvider: resolved.search.provider,
+                ...(resolved.search.provider === "zai" ? { searchRegion: resolved.search.region } : {}),
+                searchCredentialSource: resolved.search.credential?.source ?? "missing",
+                fetchProvider: resolved.fetch.provider,
+                ...(resolved.fetch.provider === "zai" ? { fetchRegion: resolved.fetch.region } : {}),
+                fetchCredentialSource: resolved.fetch.provider === "native"
+                    ? "not-required"
+                    : (resolved.fetch.credential?.source ?? "missing"),
+            },
+        },
+    });
+    for (const warning of resolved.warnings) {
+        await client.app.log({
+            body: { service: "web-tools", level: "warn", message: warning },
+        });
+    }
+    const trackedConfigWarning = warnIfSecretBearingProjectConfigTracked(vvoc);
+    if (trackedConfigWarning) {
+        await client.app.log({
+            body: { service: "web-tools", level: "warn", message: trackedConfigWarning },
+        });
+    }
+    return {
+        config: async (config) => applyBuiltinSuppression(config),
+        tool: {
+            web_search: createWebSearchTool(resolved.search),
+            web_fetch: createWebFetchTool(resolved.fetch),
+        },
+    };
+};
+//# sourceMappingURL=index.js.map

package/dist/plugins/web-tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugins/web-tools/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,iBAAiB;AACjB,wBAAwB;AACxB,qJAAqJ;AACrJ,kJAAkJ;AAClJ,gNAAgN;AAChN,yFAAyF;AACzF,kBAAkB;AAClB,sBAAsB;AACtB,sBAAsB;AACtB,EAAE;AACF,mBAAmB;AACnB,iGAAiG;AACjG,uGAAuG;AACvG,+EAA+E;AAC/E,iBAAiB;AACjB,EAAE;AACF,uBAAuB;AACvB,kJAAkJ;AAClJ,8HAA8H;AAC9H,qBAAqB;AAGrB,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,uCAAuC,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,gFAAgF;AAChF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,UAAU,EAAE,WAAW,CAAU,CAAC;AAEjF;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAqC,CAAC;IAChE,KAAK,MAAM,GAAG,IAAI,8BAA8B,EAAE,CAAC;QACjD,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAClC,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAW,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IACpE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QACnB,IAAI,EAAE;YACJ,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,gCAAgC;YACzC,KAAK,EAAE;gBACL,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;gBACxC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvF,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,IAAI,SAAS;gBACvE,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ;gBACtC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpF,qBAAqB,EACnB,QAAQ,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;oBAClC,CAAC,CAAC,cAAc;oBAChB,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,SAAS,CAAC;aACvD;SACF;KACF,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;SAChE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,oBAAoB,GAAG,uCAAuC,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,oBAAoB,EAAE,CAAC;QACzB,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,EAAE;SAC7E,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC;QACzD,IAAI,EAAE;YACJ,UAAU,EAAE,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChD,SAAS,EAAE,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC;SAC9C;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/plugins/web-tools/media-loader.d.ts

@@ -0,0 +1,26 @@
+import type { ToolAttachment } from "@opencode-ai/plugin";
+import { type FetchLike } from "./http.js";
+export declare const SUPPORTED_MEDIA_MIME_TYPES: readonly ["image/jpeg", "image/png", "image/gif", "image/webp", "application/pdf"];
+export type SupportedMediaMimeType = (typeof SUPPORTED_MEDIA_MIME_TYPES)[number];
+/** Unsupported-media failure. The message names the detected or declared MIME type and never includes the payload. */
+export declare class WebMediaError extends Error {
+    readonly code: "UNSUPPORTED";
+    readonly mime?: string;
+    constructor(message: string, mime?: string);
+}
+/**
+ * Sniff the media MIME type from leading bytes.
+ * Returns undefined when the signature matches no supported format.
+ */
+export declare function sniffMediaMimeType(bytes: Uint8Array): SupportedMediaMimeType | undefined;
+export declare function mediaAttachmentFromBytes(bytes: Uint8Array, source: {
+    url: string;
+    declaredContentType?: string;
+    maxBytes?: number;
+}): ToolAttachment;
+export declare function loadMediaAttachment(input: {
+    url: string;
+    abort?: AbortSignal;
+    timeoutMs?: number;
+    maxBytes?: number;
+}, fetchImpl?: FetchLike): Promise<ToolAttachment>;