@te-river/opencode-team-mode 1.5.10 → 1.5.12

package/dist/tm/ptc/tool.js

@@ -8,47 +8,134 @@
 import { estimateTokens, shouldOffload, shorten } from "../config.js";
 import { detectContentType } from "../preview.js";
 import { tmError } from "../result.js";
+import { askUserForTarget } from "../perm-ask.js";
 import { BRIDGE_ALLOW } from "./contract.js";
 import { parsePtcArgs } from "./budgets.js";
 import { staticPscan } from "./pscan.js";
 import { runPtc } from "./driver.js";
 import { renderPtcSummary } from "./summary.js";
-// ---------- bridge over the real governed pipelines --------------------------
 /**
- * Real bridge: delegate each call to the corresponding exported pipeline,
- * `ctx` passed through untouched, and normalize the pipeline's `unknown`
- * result into `PtcCallResult` (TmErrorBody -> ok:false; anything else -> the
- * already-governed data).  Governance is entirely the pipelines'.
+ * Unwrap a web tool's ToolResult back into the PTC `{ok,data}`/`{ok:false,
+ * error}` shape.  The governed tools return `{output}` strings; a structured
+ * error renders with result.ts's pinned `[<tool> 失败 · phase=<phase>]`
+ * (optionally ` · line=<n>`) header line — the only machine-readable marker
+ * available at this boundary, so it is the split.  Anything else (inline
+ * text, an offload handle block) is an ok result; a handle's ref is already
+ * in the text for the program to feed back through tm.fetch.
  */
-export function pipelineBridge(pipelines, ctx) {
+function unwrapToolOutput(tool, output) {
+    const m = /^\[(\S+) 失败 · phase=([a-z]+)(?: · line=(-?\d+))?\]\n/.exec(output);
+    if (m && m[1] === tool) {
+        const phase = m[2];
+        const body = { tool, phase, message: output.slice(m[0].length) };
+        if (m[3] !== undefined)
+            Object.assign(body, { line: Number(m[3]) });
+        return { ok: false, error: body };
+    }
+    return { ok: true, data: output };
+}
+/**
+ * Build the OFFICIAL permission request the bridge raises for a bridged web
+ * call.  The permission name is the tool itself (`tm_search` / `tm_webfetch`),
+ * so the host evaluates the CALLER'S own ruleset — exactly as a direct tool
+ * call would: `deny` for a non-web role, and for a web-granted role
+ * (lead/researcher) the default ruleset is `ask`, so each bridged web call
+ * pops a confirmation dialog (store an `allow` rule to skip it) — NOT a
+ * silent pass.  The patterns carry the target host (webfetch) / engine
+ * (search) so any dialog that DOES pop is informative and no-secret.
+ */
+export function webBridgeAsk(tool, args) {
+    if (tool === "tm_webfetch") {
+        const url = typeof args.url === "string" ? args.url : "";
+        let host = "";
+        try {
+            host = url ? new URL(url).hostname : "";
+        }
+        catch {
+            host = "";
+        }
+        return {
+            permission: "tm_webfetch",
+            patterns: host ? [host, url] : ["*"],
+            metadata: { tool, via: "tm_ptc_run", host },
+        };
+    }
+    const engine = typeof args.engine === "string" ? args.engine : "auto";
+    return {
+        permission: "tm_search",
+        patterns: [`engine:${engine}`],
+        metadata: { tool, via: "tm_ptc_run", engine },
+    };
+}
+export function pipelineBridge(pipelines, ctx, web) {
     const pick = (tool) => tool === "tm_read"
         ? pipelines.tmRead
         : tool === "tm_grep"
             ? pipelines.tmGrep
             : tool === "tm_bash"
                 ? pipelines.tmBash
-                : pipelines.tmFetch;
+                : tool === "tm_fetch"
+                    ? pipelines.tmFetch
+                    : tool === "tm_search"
+                        ? web?.tm_search
+                        : web?.tm_webfetch;
     return {
         async call(tool, args) {
             if (!BRIDGE_ALLOW.includes(tool)) {
                 return { ok: false, error: tmError(tool, "args", "工具不在桥接白名单内").error };
             }
-            const res = await pick(tool)(args ?? {}, ctx);
+            const target = pick(tool);
+            if (!target) {
+                // a web bridge the caller's role / config never enabled
+                return {
+                    ok: false,
+                    error: tmError(tool, "args", "web 桥未启用（TM_PTC_WEB_BRIDGE=off 或未装配）").error,
+                };
+            }
+            // C2: an ACTIVE role gate for bridged web — BEFORE execute.  The bridge
+            // invokes the web tool's execute() directly, BYPASSING the host tool
+            // dispatch where agents.ts's `tm_search`/`tm_webfetch` = deny would
+            // otherwise block a non-web role, and the tools' own ctx.ask only pops
+            // for OUT-of-allowlist hosts (every default engine host is seeded).  So
+            // without this the web bridge was a privilege-escalation path.  Raise the
+            // SAME ruleset a direct call resolves: ctx.ask with the web permission
+            // name + target host/engine.  A web-granted role hits the default `ask`
+            // rule → a confirmation dialog per call (an `allow` rule skips it); a
+            // non-web role's deny rule throws → a permission error step; a
+            // rejection or a missing ask bridge is fail-CLOSED.
+            if (tool === "tm_search" || tool === "tm_webfetch") {
+                const outcome = await askUserForTarget(ctx, webBridgeAsk(tool, args ?? {}));
+                if (outcome !== "approved") {
+                    return {
+                        ok: false,
+                        error: tmError(tool, "permission", outcome === "rejected"
+                            ? `角色无权通过 PTC 桥接使用 ${tool}（ruleset deny / 用户拒绝）；web 桥仅授予 lead/researcher。`
+                            : `无法通过桥接校验 ${tool} 权限（ctx.ask 不可用）——已按最小权限拒绝。`).error,
+                    };
+                }
+            }
+            const res = typeof target === "function"
+                ? await target(args ?? {}, ctx)
+                : await target.execute(args ?? {}, ctx);
             if (res && typeof res === "object" && "error" in res) {
                 return { ok: false, error: res.error };
             }
+            if (tool === "tm_search" || tool === "tm_webfetch") {
+                return unwrapToolOutput(tool, String(res?.output ?? res ?? ""));
+            }
             return { ok: true, data: res };
         },
     };
 }
 // ---------- the tool definition ----------------------------------------------
-const PTC_RUN_DESCRIPTION = `Batch orchestration: ONE async program makes N governed tm_* calls with ZERO LLM round-trips — use it INSTEAD of chaining ≥3 tm_read / tm_grep / tm_bash calls toward the same goal (multi-file recon, bulk grep+read aggregation, cross-referencing search results).  Only a char-pinned aggregation summary returns to context, so ALWAYS \`return\` the aggregated value at the end of the program: unreturned inline results are discarded (offload handles stay retrievable via tm.fetch).
+const PTC_RUN_DESCRIPTION = `Batch orchestration: ONE async program makes N governed tm_* calls with ZERO LLM round-trips — use it INSTEAD of chaining ≥3 tm_read / tm_grep / tm_bash calls toward the same goal (multi-file recon, bulk grep+read aggregation, cross-referencing search results).  Best for READ-ONLY fan-out: reading many files, aggregating many searches, or any parallel read that would otherwise cost one LLM turn per call.  Only a char-pinned aggregation summary returns to context, so ALWAYS \`return\` the aggregated value at the end of the program: unreturned inline results are discarded (offload handles stay retrievable via tm.fetch).
 
 - Example: \`const out = []; for (const p of ["a.ts", "b.ts", "c.ts"]) { const f = await tm.read({ path: p }); if (f.ok) out.push({ p, head: String(f.data).slice(0, 400) }); } return out;\`
-- program: an async function body.  Available: \`tm.read(args)\`, \`tm.grep(args)\`, \`tm.bash(args)\`, \`tm.fetch(args)\` — same args as the tm_* four.  Each returns \`{ok:true, data}\` (data is already governed: inline text, or an offload handle you can tm.fetch again) or \`{ok:false, error:{tool,phase,line?,message}}\`.  \`return\` a value; it is JSON-serialized into the summary (capped 2000 chars, oversized → handle).
-- budgets (optional, tighten-only; clamped to TM_PTC_* ceilings): max_calls, max_errors, timeout_ms.  Hitting any budget stops the whole run (produced output is NOT lost).  Errors are retried at most once and only on idempotent phases (client/execute/store).
-- Governance is NOT bypassed: every bridged call runs the full tm_* pipeline (P2 path scope, P3 allowlist, R6, threshold offload + handles, TTL).  Status is one of ok | stopped-error-budget | stopped-call-budget | timeout | engine-error.
-- Programs containing require/import/process/globalThis/Deno/Bun/fs/net/child_process are rejected before execution (static pre-scan, auxiliary guard).
+- program: an async function body.  Available: \`tm.read(args)\`, \`tm.grep(args)\`, \`tm.bash(args)\`, \`tm.fetch(args)\` — same args as the tm_* four — plus the WEB bridges \`await tm.search({ query, engine? })\` and \`await tm.webfetch({ url, fields? })\` (identical args to tm_search / tm_webfetch).  Each returns \`{ok:true, data}\` (data is already governed: inline text, or an offload handle you can tm.fetch again) or \`{ok:false, error:{tool,phase,line?,message}}\`.  \`return\` a value; it is JSON-serialized into the summary (capped 2000 chars, oversized → handle).
+- Web bridge gating: tm.search / tm.webfetch run the REAL web tools under YOUR calling session's ctx, so the host evaluates them against YOUR agent's ruleset — a role without a web grant gets a \`permission\` error per call (bridged web is not a way around your tool whitelist), and \`TM_PTC_WEB_BRIDGE=off\` disables both.  GETs are idempotent, so a transient client/execute/store failure retries once; a permission/args error never does.
+- budgets (optional, tighten-only; clamped to TM_PTC_* ceilings): max_calls, max_errors, timeout_ms.  Hitting any budget stops the whole run (produced output is NOT lost).  Floors: max_calls 1 / max_errors 1 / timeout_ms 5000 ms; the summary echoes the EFFECTIVE budgets and flags every CLAMPED field (so a silently-narrowed budget is visible, not just the final number).  Errors are retried at most once and only on idempotent phases (client/execute/store).
+- Governance is NOT bypassed: every bridged call runs the full tm_* pipeline (P2 path scope, P3 allowlist, R6, threshold offload + handles, TTL).  Status is one of ok | stopped-error-budget | stopped-call-budget | timeout | engine-error | program-error (program-error = the program itself threw — no auto-degrade re-run; engine-error = engine fault — auto mode re-runs the WHOLE program on the inline engine).
+- Programs whose EXECUTABLE structure contains require/import/process/globalThis/Deno/Bun/fs/net/child_process are rejected before execution (static pre-scan, an auxiliary guard — NOT a security boundary).  The pre-scan STRIPS string / template-literal / comment bodies first, so a grep pattern or log message that merely MENTIONS one of those words is fine — you do NOT need to obfuscate them; only a real \`require(...)\` / \`process.x\` call site is caught.
 - Engine: TM_PTC_ENGINE=auto|worker|inline (auto tries worker first; on engine failure it re-runs the WHOLE program on inline with a degraded-engine mark — bridged calls are read-only, so a re-run is safe, and the fallback starts with fresh budgets under the same wall-clock deadline).`;
 /** Build the tm_ptc_run ToolDefinition.  Registered in the tool segment
  *  when the agent's whitelist grants tm_ptc_run (M3).  `deps.args` is the
@@ -56,7 +143,14 @@ const PTC_RUN_DESCRIPTION = `Batch orchestration: ONE async program makes N gove
  *  descriptor fallback below keeps the tool usable without zod. */
 export function buildPtcRunTool(deps) {
     const { cfg, store, nextStepId, ctx, accessToken } = deps;
-    const baseBridge = deps.bridge ?? (deps.pipelines ? pipelineBridge(deps.pipelines, ctx) : undefined);
+    // Per-call bridge factory.  The bridge MUST bind the CALLER's execute ctx,
+    // not the assembly-time `{ directory }`: tm_search / tm_webfetch run their
+    // `ctx.ask` permission probe against the calling agent's session ruleset, so
+    // a non-web role's bridged web call is denied by the host exactly as if that
+    // agent had called the tool directly.  A test-provided `deps.bridge` still
+    // wins (the §9 suite injects its own mock).
+    const makeBridge = (callCtx) => deps.bridge ??
+        (deps.pipelines ? pipelineBridge(deps.pipelines, callCtx ?? ctx, deps.webTools) : undefined);
     const expireAt = () => Date.now() + cfg.blackboardTtlDays * 24 * 60 * 60 * 1000;
     return {
         description: PTC_RUN_DESCRIPTION,
@@ -65,20 +159,23 @@ export function buildPtcRunTool(deps) {
             label: { descriptor: "label: string (optional, ≤80 chars)" },
             budgets: { descriptor: "budgets: { max_calls?, max_errors?, timeout_ms? } (optional, tighten-only)" },
         },
-        execute: async (rawArgs) => {
+        execute: async (rawArgs, callCtx) => {
             const parsed = parsePtcArgs(rawArgs ?? {}, cfg);
             if (!parsed.ok) {
                 return { output: `[${parsed.error.error.tool} 失败 · phase=${parsed.error.error.phase}]\n${parsed.error.error.message}` };
             }
-            // static pre-scan — reject programs with banned tokens before any
-            // engine runs.
+            // static pre-scan — reject programs with banned tokens in EXECUTABLE
+            // structure before any engine runs (string/comment literals are stripped
+            // first, so a grep pattern that merely MENTIONS `require` is not caught).
             const pscan = staticPscan(parsed.args.program);
             if (pscan.rejected) {
                 return {
-                    output: `[tm_ptc_run 失败 · phase=args]\n程序包含禁止标识符（${pscan.tokens.join(", ")}），已拒绝执行。PTC 桥接仅暴露 tm.read/tm.grep/tm.bash/tm.fetch；require/import/process 等不在桥接白名单内。`,
+                    output: `[tm_ptc_run 失败 · phase=args]\n程序包含禁止标识符（${pscan.tokens.join(", ")}），已拒绝执行。PTC 桥接仅暴露 tm.read/tm.grep/tm.bash/tm.fetch/tm.search/tm.webfetch（web 两项受 TM_PTC_WEB_BRIDGE 与角色权限门控）；require/import/process 等不在桥接白名单内。`,
                 };
             }
-            if (!baseBridge) {
+            // Re-bind the bridge to THIS call's ctx (role-gated web permission).
+            const bridge = makeBridge(callCtx);
+            if (!bridge) {
                 return {
                     output: "[tm_ptc_run 失败 · phase=client]\n桥接管线未提供。",
                 };
@@ -117,7 +214,7 @@ export function buildPtcRunTool(deps) {
                 parentStepId,
                 cfg,
                 store,
-                bridge: baseBridge,
+                bridge,
                 ...(deps.engine ? { engine: deps.engine } : {}),
             });
             const content = renderPtcSummary(outcome, offloadBlock);

package/dist/tm/ptc/tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../../src/tm/ptc/tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAiB,MAAM,cAAc,CAAA;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAGjD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAGtC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAE/C,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAAsB,EAAE,GAAY;IACjE,MAAM,IAAI,GAAG,CAAC,IAAgB,EAAE,EAAE,CAChC,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,SAAS,CAAC,MAAM;QAClB,CAAC,CAAC,IAAI,KAAK,SAAS;YAClB,CAAC,CAAC,SAAS,CAAC,MAAM;YAClB,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,SAAS,CAAC,MAAM;gBAClB,CAAC,CAAC,SAAS,CAAC,OAAO,CAAA;IAC3B,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI;YACnB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,KAAK,EAAE,CAAA;YACxE,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;YAC7C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAK,GAA+B,EAAE,CAAC;gBAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,GAA+B,CAAC,KAAK,EAAE,CAAA;YACrE,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;QAChC,CAAC;KACF,CAAA;AACH,CAAC;AAED,gFAAgF;AAEhF,MAAM,mBAAmB,GAAG;;;;;;;8RAOkQ,CAAA;AAE9R;;;mEAGmE;AACnE,MAAM,UAAU,eAAe,CAAC,IAU/B;IACC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IACzD,MAAM,UAAU,GACd,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACnF,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAC/E,OAAO;QACL,WAAW,EAAE,mBAAmB;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI;YACjB,OAAO,EAAE,EAAE,UAAU,EAAE,sEAAsE,EAAE;YAC/F,KAAK,EAAE,EAAE,UAAU,EAAE,qCAAqC,EAAE;YAC5D,OAAO,EAAE,EAAE,UAAU,EAAE,4EAA4E,EAAE;SACtG;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAuB,EAAE;YAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;YAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,eAAe,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAA;YACzH,CAAC;YACD,kEAAkE;YAClE,eAAe;YACf,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC9C,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,2CAA2C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,sFAAsF;iBACjK,CAAA;YACH,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO;oBACL,MAAM,EAAE,0CAA0C;iBACnD,CAAA;YACH,CAAC;YACD,4CAA4C;YAC5C,MAAM,YAAY,GAAG,UAAU,EAAE,CAAA;YACjC,mEAAmE;YACnE,gEAAgE;YAChE,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;gBAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;gBACnC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,YAAY,IAAI,IAAI,EAAE,EAAE;wBAC1D,IAAI,EAAE,YAAY;wBAClB,OAAO,EAAE,IAAI;wBACb,MAAM;wBACN,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC;wBACpC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;wBAC3B,QAAQ,EAAE,QAAQ,EAAE;qBACrB,CAAC,CAAA;oBACF,OAAO;wBACL,QAAQ,MAAM,CAAC,GAAG,EAAE;wBACpB,iBAAiB,WAAW,EAAE;wBAC9B,cAAc,MAAM,CAAC,QAAQ,EAAE;wBAC/B,WAAW,MAAM,EAAE;wBACnB,2DAA2D;qBAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBAC5B,CAAC;YACH,CAAC,CAAA;YACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC;gBAC3B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,YAAY;gBACZ,GAAG;gBACH,KAAK;gBACL,MAAM,EAAE,UAAU;gBAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACvD,2DAA2D;YAC3D,IAAI,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjE,OAAO;oBACL,MAAM,EACJ,aAAa,cAAc,CAAC,OAAO,CAAC,4BAA4B;wBAChE,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;wBAC5B,0BAA0B,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;iBACrD,CAAA;YACH,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAC5B,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../../src/tm/ptc/tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAiB,MAAM,cAAc,CAAA;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAGjD,OAAO,EAAE,OAAO,EAAgB,MAAM,cAAc,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAqB,MAAM,gBAAgB,CAAA;AAGpE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAyB/C;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,IAAgB,EAAE,MAAc;IACxD,MAAM,CAAC,GAAG,sDAAsD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAY,CAAA;QAC7B,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAA;QAChE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACnC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,IAAgB,EAAE,IAA6B;IAC1E,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QACxD,IAAI,IAAI,GAAG,EAAE,CAAA;QACb,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAA;QACX,CAAC;QACD,OAAO;YACL,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACpC,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;SAC5C,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IACrE,OAAO;QACL,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,CAAC,UAAU,MAAM,EAAE,CAAC;QAC9B,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE;KAC9C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAsB,EAAE,GAAY,EAAE,GAAmB;IACtF,MAAM,IAAI,GAAG,CACX,IAAgB,EAIJ,EAAE,CACd,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,SAAS,CAAC,MAAM;QAClB,CAAC,CAAC,IAAI,KAAK,SAAS;YAClB,CAAC,CAAC,SAAS,CAAC,MAAM;YAClB,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,SAAS,CAAC,MAAM;gBAClB,CAAC,CAAC,IAAI,KAAK,UAAU;oBACnB,CAAC,CAAC,SAAS,CAAC,OAAO;oBACnB,CAAC,CAAC,IAAI,KAAK,WAAW;wBACpB,CAAC,CAAC,GAAG,EAAE,SAAS;wBAChB,CAAC,CAAC,GAAG,EAAE,WAAW,CAAA;IAC9B,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI;YACnB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,KAAK,EAAE,CAAA;YACxE,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;YACzB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,wDAAwD;gBACxD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,sCAAsC,CAAC,CAAC,KAAK;iBAC3E,CAAA;YACH,CAAC;YACD,wEAAwE;YACxE,qEAAqE;YACrE,oEAAoE;YACpE,uEAAuE;YACvE,wEAAwE;YACxE,0EAA0E;YAC1E,uEAAuE;YACvE,wEAAwE;YACxE,sEAAsE;YACtE,+DAA+D;YAC/D,oDAAoD;YACpD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAA;gBAC3E,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;oBAC3B,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,OAAO,CACZ,IAAI,EACJ,YAAY,EACZ,OAAO,KAAK,UAAU;4BACpB,CAAC,CAAC,mBAAmB,IAAI,iDAAiD;4BAC1E,CAAC,CAAC,YAAY,IAAI,6BAA6B,CAClD,CAAC,KAAK;qBACR,CAAA;gBACH,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GACP,OAAO,MAAM,KAAK,UAAU;gBAC1B,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC;gBAC/B,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;YAC3C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAK,GAA+B,EAAE,CAAC;gBAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,GAA+B,CAAC,KAAK,EAAE,CAAA;YACrE,CAAC;YACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnD,OAAO,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAE,GAA4B,EAAE,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAA;YAC3F,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;QAChC,CAAC;KACF,CAAA;AACH,CAAC;AAED,gFAAgF;AAEhF,MAAM,mBAAmB,GAAG;;;;;;;;8RAQkQ,CAAA;AAE9R;;;mEAGmE;AACnE,MAAM,UAAU,eAAe,CAAC,IAW/B;IACC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IACzD,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,4CAA4C;IAC5C,MAAM,UAAU,GAAG,CAAC,OAAgB,EAAyB,EAAE,CAC7D,IAAI,CAAC,MAAM;QACX,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAC9F,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAC/E,OAAO;QACL,WAAW,EAAE,mBAAmB;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI;YACjB,OAAO,EAAE,EAAE,UAAU,EAAE,sEAAsE,EAAE;YAC/F,KAAK,EAAE,EAAE,UAAU,EAAE,qCAAqC,EAAE;YAC5D,OAAO,EAAE,EAAE,UAAU,EAAE,4EAA4E,EAAE;SACtG;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAuB,EAAE;YACvD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;YAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,eAAe,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAA;YACzH,CAAC;YACD,qEAAqE;YACrE,yEAAyE;YACzE,0EAA0E;YAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC9C,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,2CAA2C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,+IAA+I;iBAC1N,CAAA;YACH,CAAC;YACD,qEAAqE;YACrE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,MAAM,EAAE,0CAA0C;iBACnD,CAAA;YACH,CAAC;YACD,4CAA4C;YAC5C,MAAM,YAAY,GAAG,UAAU,EAAE,CAAA;YACjC,mEAAmE;YACnE,gEAAgE;YAChE,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;gBAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;gBACnC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,YAAY,IAAI,IAAI,EAAE,EAAE;wBAC1D,IAAI,EAAE,YAAY;wBAClB,OAAO,EAAE,IAAI;wBACb,MAAM;wBACN,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC;wBACpC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;wBAC3B,QAAQ,EAAE,QAAQ,EAAE;qBACrB,CAAC,CAAA;oBACF,OAAO;wBACL,QAAQ,MAAM,CAAC,GAAG,EAAE;wBACpB,iBAAiB,WAAW,EAAE;wBAC9B,cAAc,MAAM,CAAC,QAAQ,EAAE;wBAC/B,WAAW,MAAM,EAAE;wBACnB,2DAA2D;qBAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBAC5B,CAAC;YACH,CAAC,CAAA;YACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC;gBAC3B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,YAAY;gBACZ,GAAG;gBACH,KAAK;gBACL,MAAM;gBACN,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACvD,2DAA2D;YAC3D,IAAI,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjE,OAAO;oBACL,MAAM,EACJ,aAAa,cAAc,CAAC,OAAO,CAAC,4BAA4B;wBAChE,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;wBAC5B,0BAA0B,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;iBACrD,CAAA;YACH,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAC5B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/tm/search.d.ts

@@ -3,16 +3,27 @@
  *
  * One call, one query, clean results: the engine URL is built here, fetched
  * through the SAME pipeline as tm_webfetch (allowlist, manual redirects,
- * 20 s timeout, 2 MB cap) and collapsed into a numbered title+URL hit list
- * before governance — the agent never sees raw SERP chrome.  Two engines
- * return structured JSON (npm registry search, GitHub repo search API) and
- * render with versions/stars/descriptions.
+ * 20 s timeout, 2 MB cap) and collapsed into a numbered title+URL(+snippet)
+ * hit list before governance — the agent never sees raw SERP chrome.  The
+ * structured engines (npm registry, GitHub repo search, StackExchange
+ * question search, HN Algolia, MediaWiki) render with stars/score/tags/
+ * snippets.
  *
- * Engine set is chosen for mainland-China reachability without API keys:
- * bing CN + international (ensearch=1), sogou, 360 (so.com), baidu,
- * bilibili, plus the npm/GitHub data sources.  Baidu is the flakiest
- * (anti-bot) and stays in the table because it is sometimes the only
- * engine indexing CN-specific content — failures name the alternatives.
+ * T4 quality upgrade (live benchmark 2026-09-14, CN host): of the HTML
+ * SERPs only bing still returns real results — sogou/so/baidu serve
+ * anti-bot shells and bing-int (ensearch=1) is 100% dead — so they are
+ * REMOVED from the engine table (webfetch's domain whitelist keeps their
+ * hosts untouched; users can still fetch those URLs directly).  In their
+ * place two no-key JSON engines: stackoverflow (api.stackexchange.com,
+ * 300 req/day/IP — quota_remaining is tracked and auto-routing degrades to
+ * bing once exhausted) and hn (hn.algolia.com).
+ *
+ * `engine: "auto"` (the new default, TM_SEARCH_DEFAULT_ENGINE) classifies
+ * the query, fans out to the matching engine set IN PARALLEL, normalizes
+ * every engine's hits to SearchHit, dedupes by host+path and re-ranks
+ * with weighted RRF (stackoverflow 0.4 / bing 0.4 / others 0.2) into a
+ * top-10 list tagged with its source engine(s).  Explicit single-engine
+ * calls keep the classic per-engine render.
  *
  * tm_webfetch stays the "fetch a KNOWN URL" tool; tm_browser covers
  * JS-rendered pages.  All three share one domain allowlist and one
@@ -23,14 +34,52 @@ import { type TmConfig } from "./config.js";
 import type { TmPipelines } from "./pipelines.js";
 export interface SearchEngine {
     name: string;
-    /** html engines are extracted via extractSearchHits; json engines have
-     *  a dedicated renderer below. */
-    kind: "html" | "npm-json" | "github-json" | "wiki-json";
+    /** html engines are extracted via extractSearchHits; json engines have a
+     *  dedicated parser/renderer below. */
+    kind: "html" | "npm-json" | "github-json" | "wiki-json" | "so-json" | "hn-json";
     buildUrl: (encodedQuery: string) => string;
     /** Hint appended when the engine returns nothing usable. */
     alt: string;
+    /** Transform the RAW query before URL-encoding (CJK phrase protection,
+     *  GitHub qualifier folding).  Identity when absent. */
+    prepareQuery?: (query: string) => string;
 }
-/** The engine table — keys are the tm_search `engine` arg values. */
+/**
+ * CJK phrase protection: a multi-word Chinese query gets its CORE phrase
+ * (the token holding the most CJK chars, ≥2) wrapped in double quotes —
+ * CN SERPs otherwise free-match tokens across pages and drown the result
+ * list in tangential hits.  Single-word queries and already-quoted queries
+ * pass through untouched (never fabricate a phrase boundary, never fight
+ * the user's own quoting).  Applied to bing via prepareQuery; JSON query
+ * APIs are skipped because they treat quotes literally.
+ */
+export declare function protectCjkPhrase(query: string): string;
+export declare function foldGithubQualifiers(query: string): {
+    q: string;
+    qualifiers: string[];
+};
+export type QueryClass = "error-code" | "dev-ecosystem" | "cjk" | "general";
+export declare function classifyQuery(query: string): QueryClass;
+export declare const AUTO_ENGINE_KEY = "auto";
+/** Mutable SO quota state (per process).  api.stackexchange answers every
+ *  payload with quota_remaining/quota_max; hitting 0 flips `exhausted`
+ *  and engine:"auto" swaps the SO leg for bing until the process restarts
+ *  (the daily quota rolls over on the server, not here). */
+export declare const SO_QUOTA: {
+    max: number;
+    remaining: number | null;
+    exhausted: boolean;
+};
+export declare function resetSoQuota(): void;
+/** Resolve the auto route set for a query (exported for tests + PTC). */
+export declare function resolveAutoRoutes(query: string): {
+    routes: string[];
+    queryClass: QueryClass;
+    notes: string[];
+};
+/** The engine table — keys are the tm_search `engine` arg values.  The
+ *  dead CN SERPs (sogou/so/baidu/bing-int) are GONE, not even manually
+ *  selectable (2026-09-14 benchmark: anti-bot shells / 100% empty). */
 export declare const SEARCH_ENGINES: Record<string, SearchEngine>;
 export declare const SEARCH_ENGINE_NAMES: string[];
 /** npm registry search JSON → numbered package list (name@version — desc). */
@@ -40,9 +89,28 @@ export declare function renderGithubResults(query: string, body: string): string
 /** MediaWiki search API JSON (moegirl) → numbered entry list with
  *  tag-stripped snippets and direct article URLs. */
 export declare function renderWikiResults(query: string, body: string): string | null;
-/** Collapse an HTML SERP into the compact hit list; null when the engine
+/** StackExchange search JSON → numbered question list; the per-hit snippet
+ *  is SYNTHESIZED from the engine's own metadata (score/answers/tags —
+ *  search/advanced carries no body text).  The quota footer reflects the
+ *  tracked quota_remaining. */
+export declare function renderSoResults(query: string, body: string): string | null;
+/** HN Algolia story search JSON → numbered post list; the per-hit snippet
+ *  is the engine's own points/comments/date metadata. */
+export declare function renderHnResults(query: string, body: string): string | null;
+/** Collapse an HTML SERP into the compact hit list; [] when the engine
  *  gave nothing extractable (anti-bot shell / markup change). */
 export declare function extractHtmlResults(html: string): SearchHit[];
+/** host+path identity across engines (query/fragment/trailing-slash/www
+ *  ignored) — the fusion dedupe key. */
+export declare function dedupeKey(url: string): string;
+interface FusionGroup {
+    engine: string;
+    hits: SearchHit[];
+}
+/** Reciprocal Rank Fusion over the routed engines' hit lists: normalize →
+ *  host+path dedupe → score = Σ weight/(k+rank) → top-10, every hit tagged
+ *  with its contributing engine(s). */
+export declare function fuseRrf(groups: FusionGroup[], max?: number): SearchHit[];
 /** Build the tm_search ToolDefinition over the SHARED main pipelines
  *  instance.  `fetchImpl` is injectable for tests. */
 export declare function buildTmSearchTool(deps: {
@@ -55,4 +123,5 @@ export declare function buildTmSearchTool(deps: {
     args: Record<string, unknown>;
     execute: (rawArgs: Record<string, unknown>, ctx: unknown) => Promise<import("../types.js").ToolResult>;
 };
+export {};
 //# sourceMappingURL=search.d.ts.map

package/dist/tm/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/tm/search.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAkE,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAA;AAE9H,OAAO,EAAW,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEjD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ;sCACkC;IAClC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,WAAW,CAAA;IACvD,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IAC1C,4DAA4D;IAC5D,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,qEAAqE;AACrE,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAuDvD,CAAA;AAED,eAAO,MAAM,mBAAmB,UAA8B,CAAA;AAI9D,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmB3E;AAED,2EAA2E;AAC3E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsB9E;AAED;qDACqD;AACrD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2B5E;AAED;iEACiE;AACjE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,CAE5D;AAUD;sDACsD;AACtD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,SAAS,EAAE,WAAW,CAAA;IACtB,GAAG,EAAE,QAAQ,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,SAAS,CAAC,EAAE,SAAS,CAAA;CACtB,GAAG;IACF,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,aAAa,EAAE,UAAU,CAAC,CAAA;CACvG,CA8FA"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/tm/search.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAML,KAAK,SAAS,EACd,KAAK,SAAS,EACf,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAW,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEjD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ;2CACuC;IACvC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAA;IAC/E,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IAC1C,4DAA4D;IAC5D,GAAG,EAAE,MAAM,CAAA;IACX;4DACwD;IACxD,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;CACzC;AAID;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAkBtD;AAQD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CASvF;AAID,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,eAAe,GAAG,KAAK,GAAG,SAAS,CAAA;AAe3E,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAKvD;AASD,eAAO,MAAM,eAAe,SAAS,CAAA;AAQrC;;;4DAG4D;AAC5D,eAAO,MAAM,QAAQ,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAIjF,CAAA;AAED,wBAAgB,YAAY,IAAI,IAAI,CAInC;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAU9G;AAID;;uEAEuE;AACvE,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CA8CvD,CAAA;AAED,eAAO,MAAM,mBAAmB,UAA8B,CAAA;AA0F9D,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmB3E;AAED,2EAA2E;AAC3E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsB9E;AAED;qDACqD;AACrD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2B5E;AAED;;;+BAG+B;AAC/B,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAa1E;AAED;yDACyD;AACzD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW1E;AAED;iEACiE;AACjE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,CAE5D;AAsED;wCACwC;AACxC,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAS7C;AAED,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,SAAS,EAAE,CAAA;CAClB;AAED;;uCAEuC;AACvC,wBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,SAAkB,GAAG,SAAS,EAAE,CA+BjF;AA6BD;sDACsD;AACtD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,SAAS,EAAE,WAAW,CAAA;IACtB,GAAG,EAAE,QAAQ,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,SAAS,CAAC,EAAE,SAAS,CAAA;CACtB,GAAG;IACF,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,aAAa,EAAE,UAAU,CAAC,CAAA;CACvG,CA8JA"}