dsh-free-search 0.8.5 → 0.8.7

package/lib/client.js

@@ -51,6 +51,13 @@ window.__ModuleLoader__.load({
       ".dshfs-select{color-scheme:light dark}",
       ".dshfs-select option, .dshfs-select optgroup{background-color:#ffffff;color:#1d1d1f}",
       "@media (prefers-color-scheme: dark){.dshfs-select{color-scheme:dark}.dshfs-select option, .dshfs-select optgroup{background-color:#1e1f24;color:#f5f5f7}}",
+      ".dshfs-textarea{border:1px solid rgba(0,0,0,.1);font:inherit;font-variant-numeric:tabular-nums;color:inherit;background:rgba(0,0,0,.03);border-radius:10px;padding:8px 12px;min-height:96px;height:auto;font-size:14px;line-height:1.5;transition:all 160ms cubic-bezier(.4,0,.2,1);width:100%;box-sizing:border-box;resize:vertical;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,\"Liberation Mono\",monospace}",
+      "@media (prefers-color-scheme: dark){.dshfs-textarea{border:1px solid rgba(255,255,255,.1);background:rgba(255,255,255,.05)}}",
+      ".dshfs-textarea:hover:not(:disabled){border-color:rgba(0,0,0,.2);background:rgba(0,0,0,.05)}",
+      "@media (prefers-color-scheme: dark){.dshfs-textarea:hover:not(:disabled){border-color:rgba(255,255,255,.2);background:rgba(255,255,255,.08)}}",
+      ".dshfs-textarea:focus-visible{outline:none;border-color:#0071e3;box-shadow:0 0 0 3px rgba(0,113,227,.25);background:#ffffff}",
+      "@media (prefers-color-scheme: dark){.dshfs-textarea:focus-visible{border-color:#0a84ff;box-shadow:0 0 0 3px rgba(10,132,255,.25);background:#1c1c1e}}",
+      ".dshfs-textarea:disabled{opacity:.5;cursor:default}",
       ".dshfs-ttl{width:100px}",
       ".dshfs-fieldRow{display:flex;align-items:center;gap:12px;flex-wrap:wrap}",
       ".dshfs-keyStorage{width:auto;min-width:200px}",
@@ -60,7 +67,7 @@ window.__ModuleLoader__.load({
       ".dshfs-platform{display:flex;align-items:center;gap:6px;color:inherit;font-size:14px;cursor:pointer}",
       ".dshfs-platform input{accent-color:#0071e3;width:16px;height:16px}",
       ".dshfs-priorityList{display:flex;flex-direction:column;gap:6px}",
-      ".dshfs-priorityRow{display:flex;align-items:center;gap:8px;padding:6px 8px;border:1px solid rgba(0,0,0,.08);border-radius:10px;background:rgba(0,0,0,.02)}",
+      ".dshfs-priorityRow{display:flex;align-items:center;gap:8px;padding:6px 8px;border:1px solid rgba(0,0,0,.08);border-radius:10px;background:rgba(0,0,0,.02);box-sizing:border-box;min-height:42px}",
       "@media (prefers-color-scheme: dark){.dshfs-priorityRow{border-color:rgba(255,255,255,.09);background:rgba(255,255,255,.035)}}",
       ".dshfs-priorityRowDisabled{opacity:.58}",
       ".dshfs-priorityIndex{width:26px;flex:none;color:#6e6e73;font-size:12px;font-variant-numeric:tabular-nums;text-align:right}",
@@ -204,6 +211,9 @@ window.__ModuleLoader__.load({
         platformHint: "为 agent 的 platform_search 工具启用平台。禁用的平台会被跳过。",
         cacheTtl: "结果缓存时长（分钟）",
         cacheTtlHint: "0 关闭缓存，最长 5 分钟。缩短可加快时效，延长可防限流、省额度。",
+        blockedDomainsLabel: "域名黑名单（blockedDomains）",
+        blockedDomainsHint: "一行一个域名，命中的站点及其所有子域都会从搜索结果里剔除（csdn.net 覆盖 blog.csdn.net）。留空＝不过滤。可以直接粘贴完整网址，scheme、路径和端口会被自动去掉。",
+        blockedDomainsWarn: (corrected, dupes, dropped) => `已忽略 ${dupes} 个重复项、${dropped} 行无法识别；${corrected} 行已自动修正为裸域名。规则对下一次搜索生效，旧结果缓存会同步失效。`,
         unavailable: "设置不可用 —— free-search 桥接未暴露。",
         saveFailed: "保存失败",
         saveFailedDetail: (d) => `保存失败：${d}`,
@@ -310,6 +320,9 @@ window.__ModuleLoader__.load({
         platformHint: "Enable platforms for the agent's platform_search tool. Disabled platforms are skipped.",
         cacheTtl: "Result cache TTL (minutes)",
         cacheTtlHint: "0 disables caching, max 5 minutes. Lower = fresher results, higher = less rate-limiting / fewer credits used.",
+        blockedDomainsLabel: "Domain blocklist (blockedDomains)",
+        blockedDomainsHint: "One domain per line. A matched site and all of its subdomains are dropped from search results (csdn.net covers blog.csdn.net). Leave empty to disable. Full URLs are accepted — scheme, path and port are stripped automatically.",
+        blockedDomainsWarn: (corrected, dupes, dropped) => `Ignored ${dupes} duplicate(s) and ${dropped} unrecognized line(s); corrected ${corrected} line(s) to bare domains. Rules apply to the next search, and the result cache is invalidated accordingly.`,
         unavailable: "Settings unavailable — the free-search bridge is not exposed.",
         saveFailed: "save failed",
         saveFailedDetail: (d) => `save failed: ${d}`,
@@ -355,7 +368,7 @@ window.__ModuleLoader__.load({
     };
     const tt = (lang) => I18N[lang === "en" ? "en" : "zh"];
     // 当前插件版本（与 lib/index.js 的 PLUGIN_VERSION 保持一致；跟随上游 v0.7.5）
-    const PLUGIN_VERSION = "0.8.5";
+    const PLUGIN_VERSION = "0.8.6";
     const ENGINES = [
       { id: "auto", label: "Auto · 智能路由", badge: "AUTO", link: null },
       { id: "multi", label: "Multi Search · 多引擎", badge: "MULTI", link: null },
@@ -414,6 +427,45 @@ window.__ModuleLoader__.load({
       if (!Array.isArray(value)) return FAILURE_CLASSES.map((cls) => cls.id);
       return [...new Set(value.filter((id) => FAILURE_CLASSES.some((cls) => cls.id === id)))];
     };
+    // 域名黑名单：本地解析（显示 + 保存）。
+    // 注意：清洗规则必须与 lib/domain_filter.js 的 normalizeDomainList 保持一致——
+    // 服务端也会规范化一次（用户可直接编辑 YAML 绕过 UI），两边结果相同才不会有"存进去对、读回来错"。
+    // 这里额外返回统计量，用于字段下方的非阻断提示。
+    const parseBlockedDomains = (text) => {
+      const lines = String(text ?? "")
+        .split("\n")
+        .map((line) => line.trim())
+        .filter(Boolean);
+      const stats = { corrected: 0, dupes: 0, dropped: 0 };
+      const seen = new Set();
+      const domains = [];
+      for (const line of lines) {
+        let s = line.toLowerCase();
+        const before = s;
+        s = s.replace(/^[a-z][a-z0-9+.-]*:\/\//, "");
+        const cut = s.search(/[/?#]/);
+        if (cut >= 0) s = s.slice(0, cut);
+        if (!s) {
+          stats.dropped++;
+          continue;
+        }
+        const colon = s.lastIndexOf(":");
+        if (colon >= 0 && /^\d+$/.test(s.slice(colon + 1))) s = s.slice(0, colon);
+        s = s.replace(/^www\./, "").replace(/\.+$/, "");
+        if (!s || !/^[a-z0-9][a-z0-9.-]*$/.test(s) || s.startsWith(".")) {
+          stats.dropped++;
+          continue;
+        }
+        if (before !== s) stats.corrected++;
+        if (seen.has(s)) {
+          stats.dupes++;
+          continue;
+        }
+        seen.add(s);
+        domains.push(s);
+      }
+      return { domains, stats };
+    };
 
     async function bridgeDescribe() {
       const response = await fetch(`${BRIDGE_PREFIX}/describe`, {
@@ -520,6 +572,7 @@ window.__ModuleLoader__.load({
       const [zhPool, setZhPool] = react.useState(DEFAULT_ZH_POOL);
       const [enPool, setEnPool] = react.useState(DEFAULT_EN_POOL);
       const [fallbackOn, setFallbackOn] = react.useState(FAILURE_CLASSES.map((cls) => cls.id));
+      const [blockedDomains, setBlockedDomains] = react.useState("");
       const [safeSearch, setSafeSearch] = react.useState("off");
       const [bingMarket, setBingMarket] = react.useState("zh-CN");
       const [anysearchKey, setAnysearchKey] = react.useState("");
@@ -624,6 +677,8 @@ window.__ModuleLoader__.load({
               setZhPool(normalizePoolIds(v.zhPool, DEFAULT_ZH_POOL));
               setEnPool(normalizePoolIds(v.enPool, DEFAULT_EN_POOL));
               setFallbackOn(normalizeFallbackOn(v.fallbackOn));
+      // 黑名单以文本形式回显（一行一个）；配置里存的是数组
+      setBlockedDomains((Array.isArray(v.blockedDomains) ? v.blockedDomains : []).join("\n"));
               setSafeSearch(v.safeSearch === "strict" || v.safeSearch === "moderate" ? v.safeSearch : "off");
               setBingMarket(v.bingMarket === undefined ? "zh-CN" : v.bingMarket);
               setLang(v.lang === "en" ? "en" : "zh");
@@ -763,6 +818,7 @@ window.__ModuleLoader__.load({
           ops.push({ op: "set", path: ["zhPool"], value: normalizePoolIds(zhPool, DEFAULT_ZH_POOL) });
           ops.push({ op: "set", path: ["enPool"], value: normalizePoolIds(enPool, DEFAULT_EN_POOL) });
           ops.push({ op: "set", path: ["fallbackOn"], value: normalizeFallbackOn(fallbackOn) });
+      ops.push({ op: "set", path: ["blockedDomains"], value: parseBlockedDomains(blockedDomains).domains });
           ops.push({ op: "set", path: ["lang"], value: lang });
           ops.push({ op: "set", path: ["keyStorage"], value: keyStorage });
           ops.push({ op: "set", path: ["safeSearch"], value: safeSearch });
@@ -1340,6 +1396,42 @@ react_jsx_runtime.jsx("div", {
                       }),
                     ],
                   }),
+                  react_jsx_runtime.jsx("div", {
+                    className: "dshfs-field",
+                    children: [
+                      react_jsx_runtime.jsx("div", {
+                        className: "dshfs-label",
+                        children: t.blockedDomainsLabel,
+                      }),
+                      react_jsx_runtime.jsx("textarea", {
+                        className: "dshfs-textarea",
+                        rows: 5,
+                        placeholder: "csdn.net\n51cto.com",
+                        value: blockedDomains,
+                        spellCheck: false,
+                        disabled: !ready || saving,
+                        onChange: (e) => {
+                          setBlockedDomains(e.target.value);
+                          setDirty(true);
+                          setFailed(false);
+                          setSaveError("");
+                        },
+                      }),
+                      react_jsx_runtime.jsx("p", {
+                        className: "dshfs-hint",
+                        children: t.blockedDomainsHint,
+                      }),
+                      (() => {
+                        // 轻量提示：从不阻断保存，只告诉用户哪些行被自动处理了
+                        const { stats } = parseBlockedDomains(blockedDomains);
+                        if (stats.corrected === 0 && stats.dupes === 0 && stats.dropped === 0) return null;
+                        return react_jsx_runtime.jsx("p", {
+                          className: "dshfs-hint",
+                          children: t.blockedDomainsWarn(stats.corrected, stats.dupes, stats.dropped),
+                        });
+                      })(),
+                    ],
+                  }),
                   react_jsx_runtime.jsx("div", {
                     className: "dshfs-field",
                     children: [

package/lib/domain_filter.js

@@ -0,0 +1,100 @@
+// #72 域名黑名单：在结果进入上下文前过滤内容农场（CSDN 等）。
+// 匹配语义（issue #72 约定）：
+//   - 域名相等或其子域命中（csdn.net 覆盖 blog.csdn.net）
+//   - 忽略大小写；www. 前缀归一；无 scheme / 无路径；
+//   - 不做正则（notcsdn.net 不得被 csdn.net 命中）
+// 生效方式：provider.search 入口按当次请求的 blockedDomains 设置"活动黑名单"，
+// uniqueSources 在收敛（去重 + limit）之前过滤——被屏蔽条目让位给后续候选，
+// 因此 maxResults 仍能填满，且 truncated 只在真正触及上限时为 true。
+
+let active = [];
+/**
+ * 配置清洗：把用户随手填的域名/URL 归一成裸域名规则。
+ * 处理 trim、scheme、路径/query/hash、端口、www.、大小写、去重（保序）、丢弃空值与非法行。
+ *
+ * 为什么要服务端兜底：blockedDomains 是 .volatile() 配置，用户可以直接编辑 YAML 绕过 UI，
+ * 所以规范化必须在 setActiveBlockedDomains 里做，而不是只做在设置页。
+ * isDomainBlocked 的匹配语义不受影响——规则只是被清洗成更可靠的等价形式。
+ */
+export function normalizeDomainList(list) {
+  if (!Array.isArray(list)) return [];
+  const out = [];
+  const seen = new Set();
+  for (const raw of list) {
+    let s = String(raw ?? "").trim().toLowerCase();
+    if (!s) continue;
+    // 去 scheme（http:// https:// 或其它的 protocol://）
+    s = s.replace(/^[a-z][a-z0-9+.-]*:\/\//, "");
+    // 去路径 / query / hash
+    const cut = s.search(/[/?#]/);
+    if (cut >= 0) s = s.slice(0, cut);
+    if (!s) continue;
+    // 去端口（仅当冒号后是纯数字）
+    const colon = s.lastIndexOf(":");
+    if (colon >= 0 && /^\d+$/.test(s.slice(colon + 1))) s = s.slice(0, colon);
+    // 去 www. 前缀与尾随点号
+    s = s.replace(/^www\./, "").replace(/\.+$/, "");
+    // 只接受"看起来像域名"的行：空格、下划线、中文等直接丢弃（它们永远匹配不到 host）
+    if (!s || !/^[a-z0-9][a-z0-9.-]*$/.test(s) || s.startsWith(".")) continue;
+    if (seen.has(s)) continue;
+    seen.add(s);
+    out.push(s);
+  }
+  return out;
+}
+
+/** 设置本次搜索生效的黑名单（provider.search / research 入口调用）。空数组 = 不过滤。 */
+export function setActiveBlockedDomains(list) {
+  active = normalizeDomainList(list);
+}
+export function getActiveBlockedDomains() {
+  return [...active];
+}
+
+function normalizeHost(host) {
+  return String(host ?? "").toLowerCase().trim().replace(/^www\./, "");
+}
+function normalizeRule(domain) {
+  return String(domain ?? "").toLowerCase().trim().replace(/^www\./, "").replace(/\/+$/, "");
+}
+
+/** 单个 URL 是否命中黑名单；URL 无法解析时返回 false（不误伤）。 */
+export function isDomainBlocked(url, blocked = active) {
+  if (!blocked || blocked.length === 0) return false;
+  let host;
+  try {
+    host = normalizeHost(new URL(String(url)).hostname);
+  } catch {
+    return false;
+  }
+  if (!host) return false;
+  return blocked.some((raw) => {
+    const rule = normalizeRule(raw);
+    if (!rule) return false;
+    return host === rule || host.endsWith("." + rule);
+  });
+}
+
+/** 列表过滤：结果条目统一为 { url } 形态，命中黑名的整条丢弃（保持原顺序=让位语义）。 */
+export function filterBlockedDomains(items, blocked = active) {
+  if (!blocked || blocked.length === 0) return items;
+  return items.filter((item) => !isDomainBlocked(item?.url, blocked));
+}
+
+/**
+ * 结果级收口：引擎返回的 { sources } 在交给上层（provider 返回值 / multi 合并 /
+ * runEngineTest / 工具 execute）之前统一过滤。
+ *
+ * 为什么需要它：uniqueSources 只是 40+ 个引擎里 29 个的"收敛去重"helper，
+ * searchAnysearch / searchPlatform 等 11 个引擎并不经过它（各自直接 return sources）。
+ * 只在 uniqueSources 里过滤会漏掉这些引擎——#72 首版就是这么漏的。
+ * 因此过滤必须落在"结果离开引擎"的所有咽喉点上，而不是某一个 helper 里。
+ *
+ * 无黑名单 / 无命中时原样返回（零分配），调用方可以直接重新赋值。
+ */
+export function applyBlockedFilterToResult(result) {
+  if (!result || !Array.isArray(result.sources)) return result;
+  const sources = filterBlockedDomains(result.sources);
+  if (sources.length === result.sources.length) return result;
+  return { ...result, sources };
+}

package/lib/fetch_provider.js

@@ -8,7 +8,9 @@
 import https from "node:https";
 import zlib from "node:zlib";
 import { spawn } from "node:child_process";
-import { existsSync } from "node:fs";
+import { existsSync, mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { callExa, callFirecrawl, callCrawl4ai } from "./fetch_upstream.js";
 
 const T1_MIN_CHARS = 300;
@@ -40,35 +42,65 @@ function findSystemBrowser() {
   return cachedBrowserPath;
 }
 
-function browserDumpDom(browserPath, url, { timeoutMs = 20000, signal } = {}) {
+function browserDumpDom(browserPath, url, { timeoutMs = 25000, signal } = {}) {
   return new Promise((resolve) => {
+    // 独立 user-data-dir：避免与用户正在运行的浏览器实例抢同一 profile（共享 profile 时无输出/立即退出）
+    let tmpDir;
     let child;
     try {
-      child = spawn(browserPath, ["--headless=new", "--disable-gpu", "--no-first-run", "--dump-dom", "--virtual-time-budget=10000", url], {
-        stdio: ["ignore", "pipe", "ignore"],
-        windowsHide: true,
-      });
+      tmpDir = mkdtempSync(join(tmpdir(), "dshfs-browser-"));
+      child = spawn(browserPath, [
+        "--headless=new",
+        "--disable-gpu",
+        "--no-first-run",
+        "--no-sandbox",
+        // 抑制崩溃上报/组件更新/账号同步：Windows 实测这些会在 tmp profile 下反复报错
+        // （Crashpad settings.dat 写入失败、get_updates failed）并偶发导致退出码异常/无输出
+        "--disable-breakpad",
+        "--disable-crashpad",
+        "--disable-component-update",
+        "--disable-sync",
+        `--user-data-dir=${tmpDir}`,
+        "--dump-dom",
+        "--virtual-time-budget=10000",
+        url,
+      ], { stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
     } catch {
+      if (tmpDir) try { rmSync(tmpDir, { recursive: true, force: true }); } catch { /* 忽略 */ }
       resolve(null);
       return;
     }
     let out = "";
     let done = false;
+    // 杀整棵进程树：Edge/Chrome 是多进程架构，child.kill() 只杀主进程会残留渲染子进程
+    const killTree = () => {
+      try {
+        spawn("taskkill", ["/pid", String(child.pid), "/T", "/F"], { windowsHide: true, stdio: "ignore" });
+      } catch {
+        try { child.kill(); } catch { /* 忽略 */ }
+      }
+    };
     const finish = (ok) => {
       if (done) return;
       done = true;
-      try {
-        child.kill();
-      } catch {
-        // 忽略
+      killTree();
+      if (tmpDir) {
+        // 浏览器进程退出后才能删 profile 目录；延迟清理，失败无所谓
+        setTimeout(() => { try { rmSync(tmpDir, { recursive: true, force: true }); } catch { /* 忽略 */ } }, 500);
       }
       resolve(ok && out.length > 0 ? out : null);
     };
     child.stdout.on("data", (c) => {
       if (out.length < 5 * 1024 * 1024) out += c.toString("utf8");
     });
+    // stderr 必须 pipe 且读取丢弃：Windows 上 Edge 无头模式 stderr 指向 NUL 会卡死（实测 exit=1/0 输出）
+    child.stderr.on("data", () => {});
     child.on("error", () => finish(false));
-    child.on("exit", () => finish(true));
+    // 以 exit 为准：Edge/Chrome 的渲染子进程会继承 stdout pipe，"close" 可能迟迟不触发；
+    // 稍等 200ms 让残余数据 flush 到齐（exit 与 stdout 到达之间有窗口）。
+    child.on("exit", (code) => {
+      setTimeout(() => finish(code === 0 || out.length > 0), 200);
+    });
     setTimeout(() => finish(false), timeoutMs);
     if (signal) {
       if (signal.aborted) finish(false);
@@ -139,17 +171,10 @@ export function createFetchProvider({ resolveApiKey, logger }) {
       const url = String(request?.url || "");
       if (!/^https:\/\//i.test(url)) throw new Error(`fs-quality-fetch: only https URLs are supported (got "${url.slice(0, 60)}")`);
       const errors = [];
-      // Referer：伪装为"站内点击"（部分反爬站对无 Referer 的匿名请求更严格）
-      const headers = { ...BROWSERISH };
-      try {
-        headers.Referer = new URL(url).origin + "/";
-      } catch {
-        // URL 已在上面校验过，理论到不了这里
-      }
 
       // T1：直连（文本类内容；二进制交给后层——exa 取正文，PDF 等仍由 firecrawl 处理）
       try {
-        const r = await httpsGetFollow(url, { headers, signal });
+        const r = await httpsGetFollow(url, { headers: BROWSERISH, signal });
         if (r.status < 400 && TEXTUAL.test(r.contentType) && r.text.length >= T1_MIN_CHARS) {
           return { url: r.url, statusCode: r.status, body: { kind: "html", content: r.text }, truncated: false };
         }

package/lib/index.js

@@ -9,6 +9,8 @@ import { mcpCall, mcpContentText } from "./mcp_adapter.js";
 import { registerResearchTool } from "./research.js";
 import { registerDomainSearchTool } from "./vertical.js";
 import { createFetchProvider } from "./fetch_provider.js";
+import { fetchWeather, sanitizeWeatherResult, WEATHER_OUTPUT_SCHEMA } from "./weather.js";
+import { setActiveBlockedDomains, getActiveBlockedDomains, isDomainBlocked, applyBlockedFilterToResult } from "./domain_filter.js";
 
 // 兼容 guard（#55）：Node 会优先解析插件目录下的嵌套依赖，若那里残留旧的
 // @deepseek-ai/schemastery（如 node_modules/dsh-free-search/node_modules/... -> 3.18.1），
@@ -240,7 +242,7 @@ function routeEngines(query, { timeRange, disabledEngines = [], fallbackOrder =
 }
 
 // 当前插件版本（发布时与 package.json 同步；跟随上游 v0.7.5，不在 PR 里 bump）
-const PLUGIN_VERSION = "0.8.5";
+const PLUGIN_VERSION = "0.8.6";
 // 检查更新的 npm registry 元数据地址（dsh-free-search 是 npmjs 上的公开包）
 const NPM_REGISTRY_URL = "https://registry.npmjs.org/dsh-free-search/latest";
 const PLUGIN_NPM_URL = "https://www.npmjs.com/package/dsh-free-search";
@@ -360,10 +362,12 @@ const CACHE_MAX_ENTRIES = 50;
 // fallback 条目（实际引擎 ≠ 首选引擎时）TTL = 配置 TTL 的 1/5（默认 5 分钟 → 60s）：
 // 首选引擎恢复后最多 1 分钟即可拿到新结果，避免回退结果被完整 TTL 钉死；首选成功条目仍用完整 TTL。
 
-function buildCacheKey(query, maxResults, timeRangeLabel, preferred, disabledEngines = [], fallbackOrder = []) {
+function buildCacheKey(query, maxResults, timeRangeLabel, preferred, disabledEngines = [], fallbackOrder = [], blockedDomains = []) {
   const disabledKey = normalizeDisabledEngines(disabledEngines).slice().sort().join(",");
   const orderKey = normalizeFallbackOrder(fallbackOrder).join(",");
-  return [query ?? "", maxResults ?? 5, timeRangeLabel ?? "", preferred, disabledKey, orderKey].join("\u0000");
+  // #72：黑名单参与 key——改动 blockedDomains 后旧缓存自然失效，不会 5 分钟内仍命中旧结果
+  const blockedKey = (Array.isArray(blockedDomains) ? blockedDomains : []).map((d) => String(d).toLowerCase().trim().replace(/^www\./, "")).slice().sort().join(",");
+  return [query ?? "", maxResults ?? 5, timeRangeLabel ?? "", preferred, disabledKey, orderKey, blockedKey].join("\u0000");
 }
 //#endregion
 
@@ -424,10 +428,14 @@ function extractDdgUrl(rel) {
   return rel;
 }
 
+// #72：收敛前过滤域名黑名单——先剔除被屏蔽条目，再去重 + 截断，
+// 因此后面的候选会自动补位（用户得到的是"满员的好结果"，而不是变短的结果）。
 function uniqueSources(sources, limit) {
+  const blocked = getActiveBlockedDomains();
+  const kept = blocked.length ? sources.filter((s) => !isDomainBlocked(s.url, blocked)) : sources;
   const seen = new Set();
   const out = [];
-  for (const s of sources) {
+  for (const s of kept) {
     if (s.url && !seen.has(s.url)) {
       seen.add(s.url);
       out.push(s);
@@ -569,14 +577,31 @@ function looksRelevant(query, sources) {
   });
 }
 
+// Bing 会把结果 URL 包成 bing.com/ck/a 跳转链接：真实地址在 u 参数（base64url，a1 前缀）
+function extractBingUrl(href) {
+  if (!href) return href;
+  const url = decodeEntities(href); // & -> &
+  if (!/^https?:\/\/(www\.)?bing\.com\/ck\/a/i.test(url)) return href;
+  try {
+    const u = new URL(url).searchParams.get("u");
+    if (!u) return href;
+    const b64 = u.startsWith("a1") ? u.slice(2) : u;
+    const decoded = Buffer.from(b64.replace(/-/g, "+").replace(/_/g, "/"), "base64").toString("utf8");
+    return /^https?:\/\//i.test(decoded) ? decoded : href;
+  } catch {
+    return href;
+  }
+}
+
 async function searchBing(query, maxResults, options, signal) {
-  // mkt：显式 bingMarket 优先；否则按 lang 映射（zh→zh-CN, ru→ru-RU ...）
+  // mkt：仅显式 bingMarket 才发。默认不发——mkt=zh-CN 在部分地区/线路会返回空 SERP 容器
+  // （#71：海外 IP + mkt=zh-CN → b_algo=0），Bing 会按 Accept-Language 自行本地化。
   const profile = LANG_PROFILES[options?.lang] ?? LANG_PROFILES.zh;
-  const market = options?.bingMarket ?? profile.market;
-  const params = new URLSearchParams({ q: query, mkt: market });
+  const params = new URLSearchParams({ q: query });
+  if (options?.bingMarket) params.set("mkt", options.bingMarket);
   // Accept-Language：显式 bingMarket 时按 market 反推（避免中文 header 污染），否则用 lang 档案
   const acceptLang = options?.bingMarket
-    ? (MARKET_TO_LANG[market] ?? ACCEPT_LANG)
+    ? (MARKET_TO_LANG[options.bingMarket] ?? ACCEPT_LANG)
     : (profile.acceptLang ?? ACCEPT_LANG);
   const adlt = options?.safeSearch ?? "off";
   if (adlt === "off") params.set("adlt", "off");
@@ -591,7 +616,7 @@ async function searchBing(query, maxResults, options, signal) {
     const snippetMatch = block.match(/<p[^>]*>([\s\S]*?)<\/p>/);
     if (!hrefMatch) continue;
     sources.push({
-      url: hrefMatch[1],
+      url: extractBingUrl(hrefMatch[1]),
       ...(titleMatch ? { title: stripTags(titleMatch[1]) } : {}),
       ...(snippetMatch ? { snippet: stripTags(snippetMatch[1]) } : {}),
     });
@@ -1203,112 +1228,9 @@ async function searchYoutube(query, maxResults, signal) {
   return { sources: uniqueSources(sources, maxResults ?? 10), truncated: false };
 }
 
-// ---------- Weather（Open-Meteo：geocoding + forecast，全部免 key） ----------
-const OPEN_METEO_GEOCODING_URL = "https://geocoding-api.open-meteo.com/v1/search";
-const OPEN_METEO_FORECAST_URL = "https://api.open-meteo.com/v1/forecast";
-// WMO weather code → 描述（中文/英文）
-const WMO_CODES = {
-  0: ["晴", "Clear sky"],
-  1: ["大部晴朗", "Mainly clear"],
-  2: ["多云", "Partly cloudy"],
-  3: ["阴", "Overcast"],
-  45: ["雾", "Fog"],
-  48: ["雾凇", "Depositing rime fog"],
-  51: ["毛毛雨（弱）", "Light drizzle"],
-  53: ["毛毛雨", "Moderate drizzle"],
-  55: ["毛毛雨（强）", "Dense drizzle"],
-  56: ["冻毛毛雨（弱）", "Light freezing drizzle"],
-  57: ["冻毛毛雨（强）", "Dense freezing drizzle"],
-  61: ["小雨", "Slight rain"],
-  63: ["中雨", "Moderate rain"],
-  65: ["大雨", "Heavy rain"],
-  66: ["冻雨（弱）", "Light freezing rain"],
-  67: ["冻雨（强）", "Heavy freezing rain"],
-  71: ["小雪", "Slight snow"],
-  73: ["中雪", "Moderate snow"],
-  75: ["大雪", "Heavy snow"],
-  77: ["雪粒", "Snow grains"],
-  80: ["阵雨（弱）", "Slight rain showers"],
-  81: ["阵雨", "Moderate rain showers"],
-  82: ["阵雨（强）", "Violent rain showers"],
-  85: ["阵雪（弱）", "Slight snow showers"],
-  86: ["阵雪（强）", "Heavy snow showers"],
-  95: ["雷暴", "Thunderstorm"],
-  96: ["雷暴伴小冰雹", "Thunderstorm with slight hail"],
-  99: ["雷暴伴大冰雹", "Thunderstorm with heavy hail"],
-};
-function wmoText(code, lang) {
-  const hit = WMO_CODES[code];
-  if (!hit) return lang === "en" ? "Unknown" : "未知";
-  return (lang === "en" ? hit[1] : hit[0]) + ` (WMO ${code})`;
-}
-
-async function geocodeLocation(name, signal) {
-  const params = new URLSearchParams({ name, count: "1", language: "zh", format: "json" });
-  const response = await fetch(`${OPEN_METEO_GEOCODING_URL}?${params}`, {
-    method: "GET",
-    redirect: "error",
-    headers: { accept: "application/json", "user-agent": "deepseek-harness/free-search" },
-    signal: AbortSignal.any([...(signal !== undefined ? [signal] : []), AbortSignal.timeout(15000)]),
-  });
-  if (!response.ok) throw new Error(`geocoding API error (HTTP ${response.status})`);
-  const data = await response.json();
-  const hit = data.results?.[0];
-  if (!hit) return null;
-  return {
-    name: hit.name,
-    admin: hit.admin1 ?? "",
-    country: hit.country ?? "",
-    latitude: hit.latitude,
-    longitude: hit.longitude,
-  };
-}
-
-async function fetchWeather(location, days, lang, signal) {
-  const geo = await geocodeLocation(location, signal);
-  if (!geo) throw new Error(`could not geocode location "${location}" — try a nearby larger city`);
-  const params = new URLSearchParams({
-    latitude: String(geo.latitude),
-    longitude: String(geo.longitude),
-    current: "temperature_2m,relative_humidity_2m,apparent_temperature,weather_code,wind_speed_10m",
-    daily: "weather_code,temperature_2m_max,temperature_2m_min,precipitation_probability_max",
-    timezone: "auto",
-    forecast_days: String(Math.min(Math.max(Number(days) || 3, 1), 7)),
-  });
-  const response = await fetch(`${OPEN_METEO_FORECAST_URL}?${params}`, {
-    method: "GET",
-    redirect: "error",
-    headers: { accept: "application/json", "user-agent": "deepseek-harness/free-search" },
-    signal: AbortSignal.any([...(signal !== undefined ? [signal] : []), AbortSignal.timeout(15000)]),
-  });
-  if (!response.ok) throw new Error(`forecast API error (HTTP ${response.status})`);
-  const data = await response.json();
-  const cur = data.current ?? {};
-  const daily = data.daily ?? {};
-  return {
-    location: [geo.name, geo.admin, geo.country].filter(Boolean).join(", "),
-    latitude: geo.latitude,
-    longitude: geo.longitude,
-    current: {
-      temperature: cur.temperature_2m,
-      apparent: cur.apparent_temperature,
-      humidity: cur.relative_humidity_2m,
-      wind: cur.wind_speed_10m,
-      code: cur.weather_code,
-      text: wmoText(cur.weather_code, lang),
-    },
-    daily: (daily.time ?? []).map((date, i) => ({
-      date,
-      min: daily.temperature_2m_min?.[i],
-      max: daily.temperature_2m_max?.[i],
-      code: daily.weather_code?.[i],
-      text: wmoText(daily.weather_code?.[i], lang),
-      precipitationProbability: daily.precipitation_probability_max?.[i],
-    })),
-    timezone: data.timezone ?? "",
-  };
-}
-
+// Weather（Open-Meteo）实现已抽至 lib/weather.js（fetchWeather / WEATHER_OUTPUT_SCHEMA /
+// sanitizeWeatherResult）；契约由 tools/assert-weather-contract.mjs 离线校验（#73）。
+
 // Vimeo：无官方免 key 搜索 API。尽力抓搜索页里内嵌的 /videos/<id> 数据；
 // 抓不到时由调用方退回网页搜索（site:vimeo.com）。
 async function searchVimeo(query, maxResults, signal) {
@@ -3158,6 +3080,8 @@ const Config = z.object({
   disabledEngines: z.array(z.string()).default([]).volatile(),
   fallbackOrder: z.array(z.string()).default([]).volatile(),
   fallbackOn: z.array(z.string()).default(DEFAULT_FALLBACK_ON).volatile(),
+  // #72 域名黑名单（默认空=不过滤；子域匹配；provider.search 入口置活动值，uniqueSources 收敛前过滤）
+  blockedDomains: z.array(z.string()).default([]).volatile(),
   cache: z.boolean().default(true).volatile(), // 单 query 结果缓存开关（防限流/省额度）
   cacheTtl: z.number().default(5).volatile(), // 缓存时长（分钟），0-5 可配置（使用处再 clamp）
   keyStorage: z.string().default("credentials").volatile(), // key 存储位置：credentials（凭据中心）| settings（设置页）
@@ -3405,6 +3329,8 @@ function apply(ctx, config) {
         throw new Error("query is required");
       }
       const cfg = current();
+      // #72：本次请求生效的域名黑名单（模块级活动值；各结果咽喉点过滤读取它）
+      setActiveBlockedDomains(cfg.blockedDomains);
       const disabledEngines = normalizeDisabledEngines(cfg.disabledEngines);
       const fallbackOnSet = new Set(normalizeFallbackOn(cfg.fallbackOn));
       const disabledSet = new Set(disabledEngines);
@@ -3425,7 +3351,7 @@ function apply(ctx, config) {
       const cacheTtlMs = (Math.min(Math.max(Number(cfg.cacheTtl) ?? 5, 0), 5)) * 60 * 1000;
       const cacheEnabled = cfg.cache !== false && cacheTtlMs > 0;
       const cacheKey = cacheEnabled
-        ? buildCacheKey(request.query, request.maxResults, timeRangeLabel, preferred, disabledEngines, fallbackOrder)
+        ? buildCacheKey(request.query, request.maxResults, timeRangeLabel, preferred, disabledEngines, fallbackOrder, cfg.blockedDomains)
         : null;
       if (cacheKey !== null) {
         const hit = searchCache.get(cacheKey);
@@ -3433,7 +3359,8 @@ function apply(ctx, config) {
           if (signal?.aborted) throw new Error("search aborted");
           searchCache.delete(cacheKey);
           searchCache.set(cacheKey, hit);
-          return { ...hit.value, sources: hit.value.sources?.slice(), _cache: "hit" };
+          // #72：缓存命中同样过一遍黑名单——首版修复前写入的缓存里可能残留屏蔽域名
+          return { ...applyBlockedFilterToResult({ ...hit.value, sources: hit.value.sources?.slice() }), _cache: "hit" };
         }
         if (hit) searchCache.delete(cacheKey);
       }
@@ -3710,6 +3637,12 @@ function apply(ctx, config) {
             continue;
           }
 
+          if (result.sources.length > 0) {
+            // #72 结果级收口：无论走哪个引擎（其中 11 个不经过 uniqueSources），
+            // 在写缓存与返回之前统一按黑名单过滤；全被屏蔽时视为该引擎 0 结果，继续下一个引擎。
+            result = applyBlockedFilterToResult(result);
+          }
+
           if (result.sources.length > 0) {
             usedEngine = engine;
             clearCooldown(engine);
@@ -3879,6 +3812,9 @@ function apply(ctx, config) {
   // 测试工具：让 agent 逐个测试所有搜索引擎，报告可用性
   const runEngineTest = async (engine, query, timeRange, maxResults = 2) => {
     const cfg = current();
+    // #72：runEngineTest 也被 multi_search 工具 / 设置页 bridge 直接调用，
+    // 不经过 provider.search，所以这里必须自行设置活动黑名单
+    setActiveBlockedDomains(cfg.blockedDomains);
     const q = query || "DeepSeek Harness";
     const n = Math.min(Math.max(Number(maxResults) || 2, 1), 20);
     const tr = parseTimeRange(timeRange);
@@ -4013,7 +3949,8 @@ function apply(ctx, config) {
       }
       return {
         ok: true,
-        sources: (result.sources ?? []).map((s) =>
+        // #72：成功结果出引擎前统一过滤，覆盖不经过 uniqueSources 的 11 个引擎
+        sources: applyBlockedFilterToResult({ sources: result.sources ?? [] }).sources.map((s) =>
           s.snippet ? { ...s, snippet: cleanSnippet(s.snippet, snippetCap(engine)) } : s
         ),
         truncated: result.truncated ?? false,
@@ -4027,6 +3964,8 @@ function apply(ctx, config) {
 
   runMultiSearch = async ({ query, maxResults, engines, timeRange } = {}) => {
     if (!query || !String(query).trim()) throw new Error("query is required");
+    // #72：multi_search 工具直连本函数、不经过 provider.search，自行设置活动黑名单
+    setActiveBlockedDomains(current().blockedDomains);
     const q = String(query).trim();
     const limit = Math.min(Math.max(Number(maxResults) || 8, 1), 20);
     const disabled = new Set(normalizeDisabledEngines(current().disabledEngines));
@@ -4091,8 +4030,13 @@ function apply(ctx, config) {
 
     const urlMap = new Map();
     let itemSeq = 0;
+    // #72：合并前过滤——引擎里未被 uniqueSources 覆盖的结果（如 anysearch）也在这里被挡住
+    const blockedRaw = getActiveBlockedDomains();
     for (const { engine, sources } of rawResults) {
-      for (const source of sources) {
+      const keptSources = blockedRaw.length
+        ? sources.filter((s) => !isDomainBlocked(s?.url, blockedRaw))
+        : sources;
+      for (const source of keptSources) {
         if (!source || !source.url) continue;
         let normUrl = String(source.url).trim();
         try {
@@ -4354,7 +4298,8 @@ function apply(ctx, config) {
               }
             }
             // lossless JSON 不允许 undefined 字段：剔除缺失字段
-            const sources = (result.sources ?? []).map((s) => {
+            // #72：platform_search 直连 searchPlatform（不经 provider.search/runEngineTest），在此收口过滤
+            const sources = applyBlockedFilterToResult({ sources: result.sources ?? [] }).sources.map((s) => {
               const source = {};
               if (s.url !== undefined && s.url !== null && s.url !== "") source.url = s.url;
               if (s.title !== undefined && s.title !== null && s.title !== "") source.title = String(s.title);
@@ -4477,38 +4422,7 @@ function apply(ctx, config) {
             days: { type: "number", description: "Forecast days (1-7, default 3)." },
           },
           output: {
-            schema: {
-              type: "object",
-              additionalProperties: false,
-              properties: {
-                location: { type: "string" },
-                current: {
-                  type: "object",
-                  additionalProperties: false,
-                  properties: {
-                    temperature: { type: "number" },
-                    apparent: { type: "number" },
-                    humidity: { type: "number" },
-                    wind: { type: "number" },
-                    text: { type: "string" },
-                  },
-                },
-                daily: {
-                  type: "array",
-                  items: {
-                    type: "object",
-                    additionalProperties: false,
-                    properties: {
-                      date: { type: "string" },
-                      min: { type: "number" },
-                      max: { type: "number" },
-                      text: { type: "string" },
-                      precipitationProbability: { type: "number" },
-                    },
-                  },
-                },
-              },
-            },
+            schema: WEATHER_OUTPUT_SCHEMA,
             render(args, value) {
               const lang = current().lang === "en" ? "en" : "zh";
               const c = value.current ?? {};
@@ -4533,7 +4447,7 @@ function apply(ctx, config) {
             const lang = current().lang === "en" ? "en" : "zh";
             const location = String(args.location ?? "").trim();
             if (!location) throw new Error("weather: location is required");
-            return await fetchWeather(location, args.days, lang, undefined);
+            return sanitizeWeatherResult(await fetchWeather(location, args.days, lang, undefined));
           },
           finalizeContent(exec, result) {
             const text = result.content;

package/lib/research.js

@@ -7,6 +7,7 @@ import { defineTool } from "@deepseek-ai/dsh-tools";
 import { getFresh, put as cachePut, search as cacheSearch } from "./cache.js";
 import { rerank, embed, cosineMatrix, decide, judgeQueryIntent } from "./rerank.js";
 import { httpsJson, htmlToText, callExa, callFirecrawl, callCrawl4ai } from "./fetch_upstream.js";
+import { isDomainBlocked } from "./domain_filter.js";
 
 // 模型组件的受控替身（测试/评审用；抓取层的替身在 fetch_upstream.js 的 CONTROLLED_STUBS）
 export const CONTROLLED_STUBS = { rerank: null, embed: null, decide: null, judgeQueryIntent: null };
@@ -227,6 +228,8 @@ export function buildClusters(sources) {
   let clusterSeq = 0;
   for (const s of sources) {
     if (!s || typeof s.url !== "string") continue;
+    // #72：黑名单域在候选构建阶段就剔除——items / 簇 / 正文三层都不会再出现它
+    if (isDomainBlocked(s.url)) continue;
     const key = normDedupeKey(s.url);
     if (seenKeys.has(key)) continue; // 同键（www/m/mobile 归一）只留首个原始 URL
     seenKeys.add(key);
@@ -649,21 +652,36 @@ export function canUseCache(fetchedAtMs, freshness, nowMs = Date.now()) {
   return [true, ""];
 }
 
-/** T1 平台 fetch（宿主第二参数支持 signal；deadline abort 在途请求）。 */
+/** T1 平台 fetch（宿主签名 fetch(request, signal?)，第二参必须是 AbortSignal 本体——
+ *  传 { signal } 包装对象会一路传到 https.request 抛 TypeError，浏览器层也会缺 addEventListener）。 */
 async function platformFetch(ctx, url, signal) {
-  try {
-    return await ctx.web.fetch({ url }, signal ? { signal } : undefined);
-  } catch (e) {
-    if (signal && !signal.aborted && e instanceof TypeError && /argument|parameters/i.test(String(e?.message))) {
-      return await ctx.web.fetch({ url }); // 老宿主不认第二参数：退回单参调用
-    }
-    throw e;
+  return await ctx.web.fetch({ url }, signal);
+}
+
+// 从 HTML 提取页面更新时间：article:modified_time / og:updated_time / JSON-LD dateModified / <time datetime>，
+// 取不到返回空串。
+function parseUpdatedFromHtml(html) {
+  const s = String(html ?? "");
+  const patterns = [
+    /<meta[^>]+property=["']article:modified_time["'][^>]+content=["']([^"']+)["']/i,
+    /<meta[^>]+content=["']([^"']+)["'][^>]+property=["']article:modified_time["']/i,
+    /<meta[^>]+property=["']og:updated_time["'][^>]+content=["']([^"']+)["']/i,
+    /<meta[^>]+content=["']([^"']+)["'][^>]+property=["']og:updated_time["']/i,
+    /"dateModified"\s*:\s*"([^"]+)"/i,
+    /<time[^>]+datetime=["']([^"']+)["']/i,
+  ];
+  for (const re of patterns) {
+    const m = s.match(re);
+    if (m && m[1]) return m[1];
   }
+  return "";
 }
 
 /** 单 URL 抓取（含缓存两分与四层回退；每次网络尝试都过预算 gate）。成功返回：
  *  { content, tier, truncated, fetchedAt(ISO，缓存命中=真实原抓时间), updatedAt(可取得时), cache } */
 async function fetchTiered(ctx, url, title, state, budget, intent) {
+  // #72：黑名单站点直接不抓（缓存也不读）；不算失败，不写 note——这是用户主动配置的过滤
+  if (isDomainBlocked(url)) return null;
   const now = Date.now();
   const cached = getFresh(url, DOC_CACHE_MAX_AGE_MS);
   if (cached && (intent.freshness === "none" || canUseCache(cached.fetched_at, intent.freshness, now)[0])) {

package/lib/weather.js

@@ -0,0 +1,177 @@
+// Weather（Open-Meteo：geocoding + forecast，全部免 key）
+// 与 lib/index.js 的 weather 工具配套。这里同时导出 output schema 与 sanitizeWeatherResult()，
+// 使 tools/assert-weather-contract.mjs 能离线校验「返回值 ↔ schema」逐字段对齐——
+// 0.8.4/0.8.5 曾因 schema 漏声明 latitude/longitude/timezone/current.code/daily[].code
+// 导致 additionalProperties:false 校验失败、工具 100% 不可用（issue #73）。
+
+const OPEN_METEO_GEOCODING_URL = "https://geocoding-api.open-meteo.com/v1/search";
+const OPEN_METEO_FORECAST_URL = "https://api.open-meteo.com/v1/forecast";
+
+// WMO weather code → 描述（中文/英文）
+const WMO_CODES = {
+  0: ["晴", "Clear sky"],
+  1: ["大部晴朗", "Mainly clear"],
+  2: ["多云", "Partly cloudy"],
+  3: ["阴", "Overcast"],
+  45: ["雾", "Fog"],
+  48: ["雾凇", "Depositing rime fog"],
+  51: ["毛毛雨（弱）", "Light drizzle"],
+  53: ["毛毛雨", "Moderate drizzle"],
+  55: ["毛毛雨（强）", "Dense drizzle"],
+  56: ["冻毛毛雨（弱）", "Light freezing drizzle"],
+  57: ["冻毛毛雨（强）", "Dense freezing drizzle"],
+  61: ["小雨", "Slight rain"],
+  63: ["中雨", "Moderate rain"],
+  65: ["大雨", "Heavy rain"],
+  66: ["冻雨（弱）", "Light freezing rain"],
+  67: ["冻雨（强）", "Heavy freezing rain"],
+  71: ["小雪", "Slight snow"],
+  73: ["中雪", "Moderate snow"],
+  75: ["大雪", "Heavy snow"],
+  77: ["雪粒", "Snow grains"],
+  80: ["阵雨（弱）", "Slight rain showers"],
+  81: ["阵雨", "Moderate rain showers"],
+  82: ["阵雨（强）", "Violent rain showers"],
+  85: ["阵雪（弱）", "Slight snow showers"],
+  86: ["阵雪（强）", "Heavy snow showers"],
+  95: ["雷暴", "Thunderstorm"],
+  96: ["雷暴伴小冰雹", "Thunderstorm with slight hail"],
+  99: ["雷暴伴大冰雹", "Thunderstorm with heavy hail"],
+};
+function wmoText(code, lang) {
+  const hit = WMO_CODES[code];
+  if (!hit) return lang === "en" ? "Unknown" : "未知";
+  return (lang === "en" ? hit[1] : hit[0]) + ` (WMO ${code})`;
+}
+
+export async function geocodeLocation(name, signal) {
+  const params = new URLSearchParams({ name, count: "1", language: "zh", format: "json" });
+  const response = await fetch(`${OPEN_METEO_GEOCODING_URL}?${params}`, {
+    method: "GET",
+    redirect: "error",
+    headers: { accept: "application/json", "user-agent": "deepseek-harness/free-search" },
+    signal: AbortSignal.any([...(signal !== undefined ? [signal] : []), AbortSignal.timeout(15000)]),
+  });
+  if (!response.ok) throw new Error(`geocoding API error (HTTP ${response.status})`);
+  const data = await response.json();
+  const hit = data.results?.[0];
+  if (!hit) return null;
+  return {
+    name: hit.name,
+    admin: hit.admin1 ?? "",
+    country: hit.country ?? "",
+    latitude: hit.latitude,
+    longitude: hit.longitude,
+  };
+}
+
+export async function fetchWeather(location, days, lang, signal) {
+  const geo = await geocodeLocation(location, signal);
+  if (!geo) throw new Error(`could not geocode location "${location}" — try a nearby larger city`);
+  const params = new URLSearchParams({
+    latitude: String(geo.latitude),
+    longitude: String(geo.longitude),
+    current: "temperature_2m,relative_humidity_2m,apparent_temperature,weather_code,wind_speed_10m",
+    daily: "weather_code,temperature_2m_max,temperature_2m_min,precipitation_probability_max",
+    timezone: "auto",
+    forecast_days: String(Math.min(Math.max(Number(days) || 3, 1), 7)),
+  });
+  const response = await fetch(`${OPEN_METEO_FORECAST_URL}?${params}`, {
+    method: "GET",
+    redirect: "error",
+    headers: { accept: "application/json", "user-agent": "deepseek-harness/free-search" },
+    signal: AbortSignal.any([...(signal !== undefined ? [signal] : []), AbortSignal.timeout(15000)]),
+  });
+  if (!response.ok) throw new Error(`forecast API error (HTTP ${response.status})`);
+  const data = await response.json();
+  const cur = data.current ?? {};
+  const daily = data.daily ?? {};
+  return {
+    location: [geo.name, geo.admin, geo.country].filter(Boolean).join(", "),
+    latitude: geo.latitude,
+    longitude: geo.longitude,
+    current: {
+      temperature: cur.temperature_2m,
+      apparent: cur.apparent_temperature,
+      humidity: cur.relative_humidity_2m,
+      wind: cur.wind_speed_10m,
+      code: cur.weather_code,
+      text: wmoText(cur.weather_code, lang),
+    },
+    daily: (daily.time ?? []).map((date, i) => ({
+      date,
+      min: daily.temperature_2m_min?.[i],
+      max: daily.temperature_2m_max?.[i],
+      code: daily.weather_code?.[i],
+      text: wmoText(daily.weather_code?.[i], lang),
+      precipitationProbability: daily.precipitation_probability_max?.[i],
+    })),
+    timezone: data.timezone ?? "",
+  };
+}
+
+// weather 工具的 output schema。与 fetchWeather 返回值逐字段对齐：
+// 任何一边增删字段都必须同步，否则 additionalProperties:false 会让工具调用失败（#73）。
+export const WEATHER_OUTPUT_SCHEMA = {
+  type: "object",
+  additionalProperties: false,
+  properties: {
+    location: { type: "string" },
+    latitude: { type: "number" },
+    longitude: { type: "number" },
+    timezone: { type: "string" },
+    current: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        temperature: { type: "number" },
+        apparent: { type: "number" },
+        humidity: { type: "number" },
+        wind: { type: "number" },
+        code: { type: "number" },
+        text: { type: "string" },
+      },
+    },
+    daily: {
+      type: "array",
+      items: {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+          date: { type: "string" },
+          min: { type: "number" },
+          max: { type: "number" },
+          code: { type: "number" },
+          text: { type: "string" },
+          precipitationProbability: { type: "number" },
+        },
+      },
+    },
+  },
+};
+
+// lossless JSON 不允许 undefined 字段：按"存在且有值"构造对象（与其它工具的做法一致）。
+export function sanitizeWeatherResult(r) {
+  return {
+    location: r.location,
+    ...(r.latitude !== undefined ? { latitude: r.latitude } : {}),
+    ...(r.longitude !== undefined ? { longitude: r.longitude } : {}),
+    ...(r.timezone ? { timezone: r.timezone } : {}),
+    current: {
+      ...(r.current?.temperature !== undefined ? { temperature: r.current.temperature } : {}),
+      ...(r.current?.apparent !== undefined ? { apparent: r.current.apparent } : {}),
+      ...(r.current?.humidity !== undefined ? { humidity: r.current.humidity } : {}),
+      ...(r.current?.wind !== undefined ? { wind: r.current.wind } : {}),
+      ...(r.current?.code !== undefined ? { code: r.current.code } : {}),
+      ...(r.current?.text ? { text: r.current.text } : {}),
+    },
+    daily: (r.daily ?? []).map((d) => ({
+      date: d.date,
+      ...(d.min !== undefined ? { min: d.min } : {}),
+      ...(d.max !== undefined ? { max: d.max } : {}),
+      ...(d.code !== undefined ? { code: d.code } : {}),
+      ...(d.text ? { text: d.text } : {}),
+      ...(d.precipitationProbability !== undefined ? { precipitationProbability: d.precipitationProbability } : {}),
+    })),
+  };
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-free-search",
-  "version": "0.8.5",
-  "description": "Free web search for DeepSeek Harness: 24 engines (Bing/DuckDuckGo/AnySearch/SearXNG/Exa/Tavily/Keenable/Firecrawl/Parallel keyless; Zhihu global/site via MCP and Perplexity/SerpBase/DeepSeek/You.com/Baidu/Kimi/Aliyun/Doubao with key; OpenAI/Gemini/Claude model built-in search, explicit-only) + auto smart routing + global engine enable/disable & fallback priority + editable zh/en language pools + multi mode (parallel full language-pool merge) + multi_search cross-source tool + failure-aware fallback (quota/auth cooldown, transient retry, fallbackOn) + time filtering + platform search + web_fetch, with web settings UI.",
+  "version": "0.8.7",
+  "description": "Free web search for DeepSeek Harness: 24 engines (Bing/DuckDuckGo/AnySearch/SearXNG/Exa/Tavily/Keenable/Firecrawl/Parallel keyless; Zhihu global/site via MCP and Perplexity/SerpBase/DeepSeek/You.com/Baidu/Kimi/Aliyun/Doubao with key; OpenAI/Gemini/Claude model built-in search, explicit-only) + auto smart routing + global engine enable/disable & fallback priority + editable zh/en language pools + multi mode (parallel full language-pool merge) + multi_search cross-source tool + failure-aware fallback (quota/auth cooldown, transient retry, fallbackOn) + time filtering + platform search + domain blocklist (blockedDomains) + web_fetch, with web settings UI.",
   "type": "module",
   "main": "lib/index.js",
   "exports": {
@@ -19,6 +19,8 @@
     "lib/vertical.js",
     "lib/fetch_provider.js",
     "lib/fetch_upstream.js",
+    "lib/weather.js",
+    "lib/domain_filter.js",
     "cordis.patch.yml"
   ],
   "keywords": [