blun-king-cli 9.1.584 → 9.1.585

package/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 9.1.585 - 2026-09-08
+
+- Managed WebSearch validates result envelopes and source rows even when optional search status metadata is absent.
+- Malformed successful HTTP responses no longer appear as empty searches; invalid source rows fail the whole response before results or partial-source notices are returned.
+- Valid legacy responses, empty result arrays and empty string excerpts remain supported. Cancellation, request authentication, FetchURL and Telegram behavior are unchanged.
+
 ## 9.1.584 - 2026-09-08
 
 - WebSearch forwards caller cancellation through the tool and managed HTTP search request, including response-body reads.

package/blun.mjs

@@ -315303,10 +315303,25 @@ var init_blun_web_search = __esmMin((() => {
         }
         const json = (await response.json());
         signal?.throwIfAborted();
-        const raw = Array.isArray(json.search_results) ? json.search_results : [];
+        if (!json || typeof json !== 'object' || Array.isArray(json) || !Array.isArray(json.search_results))
+            throw new Error('Invalid search results response.');
+        const raw = json.search_results;
+        if (!raw.every(row => {
+            if (!row || typeof row.title !== 'string' || !row.title.trim()
+                || typeof row.snippet !== 'string' || typeof row.url !== 'string')
+                return false;
+            try {
+                const url = new URL(row.url);
+                return (url.protocol === 'https:' || url.protocol === 'http:') && !url.username && !url.password;
+            }
+            catch {
+                return false;
+            }
+        }))
+            throw new Error('Invalid search results response.');
         const status = json.search_status;
         if (status !== undefined) {
-            if (!status || typeof status !== 'object' || !Array.isArray(json.search_results)
+            if (!status || typeof status !== 'object'
                 || !Number.isInteger(status.failed_sources) || typeof status.failed_sources !== 'number'
                 || status.failed_sources < 0 || status.failed_sources > 128
                 || (status.state !== 'complete' && status.state !== 'partial')
@@ -315314,19 +315329,6 @@ var init_blun_web_search = __esmMin((() => {
                 || (status.state === 'partial' && (status.failed_sources === 0 || raw.length === 0))) {
                 throw new Error('Invalid search status response.');
             }
-            if (!raw.every(row => {
-                if (!row || typeof row.title !== 'string' || !row.title.trim()
-                    || typeof row.snippet !== 'string' || typeof row.url !== 'string')
-                    return false;
-                try {
-                    const url = new URL(row.url);
-                    return (url.protocol === 'https:' || url.protocol === 'http:') && !url.username && !url.password;
-                }
-                catch {
-                    return false;
-                }
-            }))
-                throw new Error('Invalid search results response.');
             if (status.state === 'partial') {
                 if (!supportsNotices)
                     throw new Error('Partial search results require a notice consumer.');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.584",
+  "version": "9.1.585",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {