blun-king-cli 9.1.583 → 9.1.585

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 9.1.585 - 2026-09-08
+
+- Managed WebSearch validates result envelopes and source rows even when optional search status metadata is absent.
+- Malformed successful HTTP responses no longer appear as empty searches; invalid source rows fail the whole response before results or partial-source notices are returned.
+- Valid legacy responses, empty result arrays and empty string excerpts remain supported. Cancellation, request authentication, FetchURL and Telegram behavior are unchanged.
+
+## 9.1.584 - 2026-09-08
+
+- WebSearch forwards caller cancellation through the tool and managed HTTP search request, including response-body reads.
+- Already cancelled searches do not start provider work. Cancellation during credential lookup prevents a later search request; late search results are withheld.
+- Complete, partial and empty-result handling, citation output and normal authentication fallback remain unchanged. No new timeout or Telegram routing change.
+
 ## 9.1.583 - 2026-09-08
 
 - FetchURL now passes caller cancellation through the tool and both fetch providers to the HTTP request.

package/blun.mjs

@@ -265740,16 +265740,18 @@ var init_web_search = __esmMin((() => {
 				execute: (ctx) => this.execution(args, ctx)
 			};
 		}
-		async execution(args, { toolCallId, }) {
+		async execution(args, { toolCallId, signal }) {
         try {
+            signal?.throwIfAborted();
             let failedSources = 0;
-            const opts = { toolCallId, onNotice: notice => {
+            const opts = { toolCallId, signal, onNotice: notice => {
                     if (notice.code === 'partial-sources' && Number.isInteger(notice.failedSources)
                         && notice.failedSources > 0 && notice.failedSources <= 128) {
                         failedSources = Math.max(failedSources, notice.failedSources);
                     }
                 } };
             const results = await this.provider.search(args.query, opts);
+            signal?.throwIfAborted();
             const builder = new ToolResultBuilder({ maxLineLength: null });
             if (failedSources > 0) {
                 if (results.length === 0)
@@ -315281,24 +315283,45 @@ var init_blun_web_search = __esmMin((() => {
 			this.fetchImpl = options.fetchImpl ?? globalThis.fetch.bind(globalThis);
 		}
 		async search(query, options) {
+        const signal = options?.signal;
+        signal?.throwIfAborted();
         const body = { text_query: query };
         const bodyJson = JSON.stringify(body);
         const toolCallId = options?.toolCallId;
         const supportsNotices = typeof options?.onNotice === 'function';
-        const response = await this.post(bodyJson, toolCallId, supportsNotices);
+        const response = await this.post(bodyJson, toolCallId, supportsNotices, signal);
+        signal?.throwIfAborted();
         if (response.status === 401) {
             const detail = await safeReadText(response);
+            signal?.throwIfAborted();
             throw new Error(`Blun search request failed: HTTP 401 (auth/unauthorized). ${detail}`.trim());
         }
         if (response.status !== 200) {
             const detail = await safeReadText(response);
+            signal?.throwIfAborted();
             throw new Error(`Blun search request failed: HTTP ${String(response.status)}. ${detail}`.trim());
         }
         const json = (await response.json());
-        const raw = Array.isArray(json.search_results) ? json.search_results : [];
+        signal?.throwIfAborted();
+        if (!json || typeof json !== 'object' || Array.isArray(json) || !Array.isArray(json.search_results))
+            throw new Error('Invalid search results response.');
+        const raw = json.search_results;
+        if (!raw.every(row => {
+            if (!row || typeof row.title !== 'string' || !row.title.trim()
+                || typeof row.snippet !== 'string' || typeof row.url !== 'string')
+                return false;
+            try {
+                const url = new URL(row.url);
+                return (url.protocol === 'https:' || url.protocol === 'http:') && !url.username && !url.password;
+            }
+            catch {
+                return false;
+            }
+        }))
+            throw new Error('Invalid search results response.');
         const status = json.search_status;
         if (status !== undefined) {
-            if (!status || typeof status !== 'object' || !Array.isArray(json.search_results)
+            if (!status || typeof status !== 'object'
                 || !Number.isInteger(status.failed_sources) || typeof status.failed_sources !== 'number'
                 || status.failed_sources < 0 || status.failed_sources > 128
                 || (status.state !== 'complete' && status.state !== 'partial')
@@ -315306,25 +315329,13 @@ var init_blun_web_search = __esmMin((() => {
                 || (status.state === 'partial' && (status.failed_sources === 0 || raw.length === 0))) {
                 throw new Error('Invalid search status response.');
             }
-            if (!raw.every(row => {
-                if (!row || typeof row.title !== 'string' || !row.title.trim()
-                    || typeof row.snippet !== 'string' || typeof row.url !== 'string')
-                    return false;
-                try {
-                    const url = new URL(row.url);
-                    return (url.protocol === 'https:' || url.protocol === 'http:') && !url.username && !url.password;
-                }
-                catch {
-                    return false;
-                }
-            }))
-                throw new Error('Invalid search results response.');
             if (status.state === 'partial') {
                 if (!supportsNotices)
                     throw new Error('Partial search results require a notice consumer.');
                 options?.onNotice?.({ code: 'partial-sources', failedSources: status.failed_sources });
             }
         }
+        signal?.throwIfAborted();
         return raw.map((r) => {
             const out = {
                 title: r.title ?? '',
@@ -315338,10 +315349,12 @@ var init_blun_web_search = __esmMin((() => {
             return out;
         });
     }
-		async post(bodyJson, toolCallId, supportsNotices) {
+		async post(bodyJson, toolCallId, supportsNotices, signal) {
         const accessToken = await this.resolveApiKey();
+        signal?.throwIfAborted();
         return this.fetchImpl(this.baseUrl, {
             method: 'POST',
+            signal,
             headers: {
                 ...this.defaultHeaders,
                 Authorization: `Bearer ${accessToken}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.583",
+  "version": "9.1.585",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {