dsh-free-search 0.9.9 → 0.9.12

package/README.md

@@ -32,6 +32,7 @@ dsh 默认的搜索 provider 依赖 DeepSeek 官方 API key（`DEEPSEEK_API_KEY`
 - **多引擎可选**：DuckDuckGo（html/lite）、Bing、SearXNG（元搜索，支持自定义实例）、AnySearch、Exa、Tavily、Keenable、Firecrawl、Parallel、Perplexity、SerpBase、Serply、DeepSeek 官方、DeepSeek 原生搜索 API、You.com、百度千帆、Kimi、阿里云百炼、火山联网搜索（豆包搜索）、知乎全网/站内（`zhihu_global`/`zhihu_site`，经知乎开放平台 MCP）、OpenAI / Gemini / Claude 模型内置搜索
 - **网页设置页** —— 引擎切换 + API key 配置（UI 中 key 脱敏显示"已配置"）+ 中英文切换；入口在左侧「插件」页的组件行配置（`plugins.row.config`，DSH 0.1.7-rc.1+）。远程访问（VPS / 反向代理 / 自定义域名）下也能用：桥接接口沿用宿主的 Host 围栏，`--trusted-host` 与 `--public-url` 声明的地址会放行（#84）
 - **右侧浮动目录** —— 卡片右侧的页面留白里浮出「引擎 / 回退 / 语言池 / 搜索行为 / 抓取 / 性能」六个快捷跳转，滚动自动高亮当前项、点击平滑跳转；不占用正文宽度（正文布局与 0.9.6 一致），右侧留白不足时自动隐藏
+- **多 key 轮换** —— 任何 key 字段（或对应环境变量）都可以用逗号 / 分号 / 换行分隔多把 key；遇到 401/402/429（鉴权失败、额度耗尽）先轮换同一引擎的下一把，再走引擎回退
 - **弹出式切换命令** —— 聊天框输入 `/free-search-engine`，弹出引擎选择窗口，点选即切换（等效设置页 + 保存）
 - **引擎测试** —— `free_search_test` 工具让 agent 一键测试所有引擎；设置页也有"测试引擎"按钮（直测当前引擎，不走回退链，付费引擎无 key 会明确报错）
 - **全局引擎开关与回退优先级** —— 设置页可勾选/取消引擎（取消后全局生效：普通搜索 / Auto / `advanced_search` / `multi_search` / 引擎测试都不再用它），并可用 ↑↓ 调整全局回退顺序（一键恢复默认）
@@ -67,7 +68,7 @@ dsh 默认的搜索 provider 依赖 DeepSeek 官方 API key（`DEEPSEEK_API_KEY`
 | `exa` | Exa | 免费 | **无 key 也可用**（MCP 匿名），配 key 提升额度 |
 | `tavily` | Tavily | 免费 | **无 key 也可用**（keyless 匿名），配 key 提升额度 |
 | `keenable` | Keenable | 免费 | **无 key 也可用**（MCP 匿名），配 key 提升额度 |
-| `firecrawl` | Firecrawl | 免费 | **无 key 也可用**（官方免 key 匿名额度），配 key 提升限额 |
+| `firecrawl` | Firecrawl | 免费 | **无 key 也可用**（官方免 key 匿名额度），配 key 提升限额。注意：keyless 档按**出口 IP** 判定，VPN/代理出口会被 403 拒绝；插件会冷却 6 小时并说明原因（有 key 不受影响） |
 | `parallel` | Parallel | 免费 | **无 key 也可用**（官方 MCP 匿名额度），配 key 提升额度并支持精确时间过滤 |
 | `perplexity` | Perplexity | 付费 | 需 `PERPLEXITY_API_KEY` |
 | `serpbase` | SerpBase | 付费 | 需 `SERPBASE_API_KEY`（serpbase.dev，注册送 100 次免费额度） |
@@ -304,7 +305,9 @@ DSH 0.1.7-rc.1 起，配置跟随 profile 的插件条目保存：设置页与 `
 # profiles/<profile>/cordis.patch.yml 中该条目的 config：
 provider: bing              # ddg / ddg-lite / bing / searxng / anysearch / exa / tavily / keenable / firecrawl / parallel / perplexity / serpbase / serply / deepseek-official / deepseek-tools / you / baidu / kimi / aliyun / doubao / zhihu_global / zhihu_site / openai / gemini / claude / auto / multi
 fallbackOn: [quota, auth, bot-wall, transient, invalid-response, unknown]   # 允许触发回退的失败类别；[] = 任何失败都立即中止（默认全部）
-lang: zh                    # 搜索语言池/本地化（zh / en / ru …，不再被设置页强行改写）
+lang: zh                    # 搜索语言池/本地化（zh / en / ru …，不再被设置页强行改写）
+#   lang 决定：Bing 的 mkt/Accept-Language、Wikipedia 子域（ja → ja.wikipedia.org）、地理编码语言；
+#   我们自己渲染的文案只有中文/英文两套，其它语言（ja/ru/de…）一律走英文，避免回答前先塞一段中文（#92）。
 uiLang: zh                  # 设置页界面语言（zh / en）；留空则跟随 lang
 bingMarket: zh-CN           # Bing 市场；留空 = 自动（不发送 mkt）
 fetchProviderTakeover: true # false = 保留你显式 pin 的 fetchProvider: http
@@ -392,6 +395,20 @@ Search engine test:
 - **不可信边界与清洗**：严格遵守 `<untrusted-web-content>` 数据边界，正文 snippet 统一清洗。
 - ⚠️ 注：多源并发会消耗更多 API 配额，建议在需要多角度核验时按需使用。
 
+#### 输出契约（meta.uncertainty）
+
+`advanced_search` 与 `multi_search` 的输出多了一个可选字段 `meta.uncertainty`，用来告诉 agent「这次结果有多可信」，不影响原有 `provider` / `content` / `sources`：
+
+```json
+{ "provider": "multi", "sources": [ ... ],
+  "meta": { "uncertainty": { "level": "medium", "notes": ["只有 2 个来源"] } } }
+```
+
+- `level`：`high` / `medium` / `low`，按来源数量、站点是否同一家、带时间过滤却无发布时间、是否包含聚合站、是否有引擎失败等启发式判定；
+- `notes`：具体原因（中文）；`high` 时通常为空；
+- 渲染文本在非 `high` 时会追加一行 `Confidence: …`。
+
+这是**小步版**：只新增字段，旧解析不受影响。
 #### 抓取网页内容（web_fetch）
 
 搜索到 URL 后，可以让 agent **读取网页全文**（如"打开第一个链接看看内容"）。`web_fetch` 工具已启用（官方 `dsh-web-fetch-http` provider）：
@@ -472,7 +489,7 @@ Search engine test:
 
 #### 离线自检断言（tools/）
 
-仓库自带 **20 个**零依赖断言脚本（合计 **534 项**），**不需要 API key、不联网、不需要测试框架**，Node ≥ 20 即可跑：
+仓库自带 **24 个**零依赖断言脚本（合计 **555 项**），**不需要 API key、不联网、不需要测试框架**，Node ≥ 20 即可跑：
 
 | 脚本 | 覆盖 | 运行（项数） |
 |---|---|---|
@@ -492,6 +509,10 @@ Search engine test:
 | `assert-killtree-win32.mjs` | Windows 子进程树终止（#74）：不再依赖 `taskkill` | `node tools/assert-killtree-win32.mjs`（8） |
 | `assert-killtree-portable.mjs` | 跨平台 `killTree` 便携版契约 | `node tools/assert-killtree-portable.mjs`（5） |
 | `assert-parallel-mcp.mjs` | Parallel MCP 引擎：25 s 超时/调用方取消覆盖**响应体读取**、共享 SSE 解析器（通知/多行帧）、6 类错误路径、REST 精确时间过滤 | `node tools/assert-parallel-mcp.mjs`（15） |
+| `assert-output-language.mjs` | 语言分支（#92）：`searchLanguage` 支持 zh/en/ja/ru/de/es/fr/ko 其余回退 en、`outputLanguage` 只输出 zh/en、天气文案 ja→英文、置信度说明随语言、失败备注随语言 | `node tools/assert-output-language.mjs`（5） |
+| `assert-uncertainty.mjs` | 输出契约：0/1 源为 low、2 源与同站为 medium、3 个不同域为 high、时间过滤无日期、失败备注、聚合站提示 | `node tools/assert-uncertainty.mjs`（8） |
+| `assert-multikey.mjs` | 多 key 字段：单 key 不变、逗号/分号/换行分隔、空白项丢弃、空输入为空数组 | `node tools/assert-multikey.mjs`（3） |
+| `assert-firecrawl-keyless.mjs` | Firecrawl keyless 出口判定：403 + VPN/proxy 文案才算拒绝、普通 403 与 401/429/500 不算、冷却初始未触发 | `node tools/assert-firecrawl-keyless.mjs`（5） |
 | `assert-fetch-charset.mjs` | 抓取编码（#88）：`charset=gbk` / `gb2312` 按声明解码、无声明时嗅探 `<meta charset>` 与 http-equiv 形式、默认 UTF-8、未知 label 兜底 UTF-8 不抛错 | `node tools/assert-fetch-charset.mjs`（6） |
 | `assert-fetch-abort.mjs` | 抓取中断（#87）：压缩响应中途断连必须 reject（不再永久 pending）、明文断连同样 reject、abort 能打断停滞的 gzip 流、complete 响应与重定向仍正常 | `node tools/assert-fetch-abort.mjs`（6） |
 | `assert-bridge-access.mjs` | 桥接 Host 围栏（#84）：loopback 放行、remote peer 打 loopback Host 拒绝、`--trusted-host`（无端口匹配任意端口 / 带端口精确匹配）、`--public-url`、绑定地址、跨站与异源拒绝 | `node tools/assert-bridge-access.mjs`（11） |
@@ -547,6 +568,7 @@ This plugin provides multiple free search engines with automatic fallback, compl
 - **Multi-Engine Support** — DuckDuckGo (HTML / Lite), Bing, AnySearch AI, SearXNG (meta-search with custom instances), Exa, Tavily, Keenable, Firecrawl, Parallel, Perplexity, SerpBase, Serply, DeepSeek Official, You.com, Baidu Qianfan, Kimi, Aliyun Bailian, Volcano Doubao, Zhihu web-wide/site search (`zhihu_global`/`zhihu_site`, via the Zhihu open-platform MCP), and the model-based OpenAI / Gemini / Claude searches
 - **Web Settings UI** — Engine switching, API key configuration (keys masked as "configured" in the UI), and a Chinese/English toggle; the entry is the component-row config (`plugins.row.config`) on the sidebar Plugins page (DSH 0.1.7-rc.1+). Remote access (VPS, reverse proxy, custom domain) works too: the bridge reuses the host's own Host fence, so addresses declared with `--trusted-host` or `--public-url` are accepted (#84)
 - **Right-hand section rail** — A floating list (Engines / Fallback / Language pools / Search behaviour / Fetch / Performance) sits in the page margin to the right of the card: it highlights the section you are in while scrolling and jumps smoothly on click. It is rendered in a portal and never narrows the card, so the body layout is unchanged; it hides itself when the margin is too tight.
+- **Multi-key rotation** — Any key field (or its env var) accepts several keys separated by commas, semicolons or newlines; on 401/402/429 (bad key, quota exhausted) the same engine retries with the next key before the engine-level fallback runs
 - **Popup Switch Command** — Type `/free-search-engine` in the chat: a picker opens with all engines; click one to switch (equivalent to the settings page + save)
 - **Engine Testing** — `free_search_test` for the agent to check all engines in one call; the settings UI also has a "Test engine" button that tests the selected engine directly (no fallback chain; paid engines without a key report an explicit error)
 - **Global engine enable/disable & fallback priority** — uncheck engines you never want (applies everywhere: web_search fallback, Auto routing, advanced_search, multi_search, engine tests) and reorder the global fallback chain with ↑↓ (one-click reset)
@@ -582,7 +604,7 @@ If this plugin has been helpful, a ⭐ on [GitHub](https://github.com/DDDMUC/dsh
 | `exa` | Exa | Free | **Usable without a key** (anonymous MCP); configure a key for higher quota |
 | `tavily` | Tavily | Free | **Usable without a key** (keyless anonymous); configure a key for higher quota |
 | `keenable` | Keenable | Free | **Usable without a key** (anonymous MCP); configure a key for higher quota |
-| `firecrawl` | Firecrawl | Free | **Usable without a key** (official keyless anonymous quota); configure a key for higher limits |
+| `firecrawl` | Firecrawl | Free | **Usable without a key** (official keyless anonymous quota); a key adds higher limits. Note: the keyless tier is judged by **egress IP** — VPN/proxy egress gets a 403, in which case the plugin cools it down for 6 hours and says why (a key is unaffected) |
 | `parallel` | Parallel | Free | **Works without a key** (official MCP anonymous quota); a key raises limits and enables precise time filtering |
 | `perplexity` | Perplexity | Paid | Requires `PERPLEXITY_API_KEY` |
 | `serpbase` | SerpBase | Paid | Requires `SERPBASE_API_KEY` (serpbase.dev, 100 free queries on signup) |
@@ -820,7 +842,9 @@ The old `free-search:` section of `~/.dsh/settings.yaml` is **not** imported by
 # config of that entry in profiles/<profile>/cordis.patch.yml:
 provider: bing              # ddg / ddg-lite / bing / searxng / anysearch / exa / tavily / keenable / firecrawl / parallel / perplexity / serpbase / serply / deepseek-official / deepseek-tools / you / baidu / kimi / aliyun / doubao / zhihu_global / zhihu_site / openai / gemini / claude / auto / multi
 fallbackOn: [quota, auth, bot-wall, transient, invalid-response, unknown]   # failure classes allowed to trigger fallback; [] = abort on any failure (default: all)
-lang: zh                    # search language pools / localization (zh / en / ru …; no longer rewritten by the settings page)
+lang: zh                    # search language pools / localization (zh / en / ru …; no longer rewritten by the settings page)
+#   lang drives Bing's mkt/Accept-Language, the Wikipedia subdomain (ja → ja.wikipedia.org) and the geocoding language;
+#   text this plugin renders itself only exists in Chinese and English, so other languages (ja/ru/de…) get English rather than a wall of Chinese (#92).
 uiLang: zh                  # settings UI language (zh / en); empty = follow lang
 bingMarket: zh-CN           # Bing market; empty = automatic (no mkt sent)
 fetchProviderTakeover: true # false = keep the fetchProvider: http you pinned yourself
@@ -908,6 +932,20 @@ When you need **cross-source verification** to prevent biases or fail-safes from
 - **Untrusted Boundary**: Enforces the `<untrusted-web-content>` safety wrapper and trims snippets.
 - ⚠️ Note: Running multiple engines in parallel consumes more search quota; use on demand when high source diversity is needed.
 
+#### Output contract (meta.uncertainty)
+
+`advanced_search` and `multi_search` now return an optional `meta.uncertainty` field describing how much the result should be trusted; the existing `provider` / `content` / `sources` shape is unchanged:
+
+```json
+{ "provider": "multi", "sources": [ ... ],
+  "meta": { "uncertainty": { "level": "medium", "notes": ["only two sources"] } } }
+```
+
+- `level`: `high` / `medium` / `low`, derived from the number of sources, whether they all come from one site, a time filter without publish dates, aggregator hosts, and whether any engine failed;
+- `notes`: readable reasons; usually empty at `high`;
+- the rendered text appends a `Confidence: …` line whenever the level is not `high`.
+
+This is the **small step**: additive fields only, existing parsers keep working.
 #### Fetch Webpage Content (`web_fetch`)
 
 After searching, the agent can **read full webpage content** (e.g., *"Open the first link and summarize it"*). The `web_fetch` tool is enabled by default (official `dsh-web-fetch-http` provider):
@@ -988,7 +1026,7 @@ Restart `dsh web` after switching to apply changes.
 
 #### Offline self-check assertions (`tools/`)
 
-**Twenty** zero-dependency assertion scripts ship with the repo (**534 assertions** total): **no API keys, no network, no test framework**, Node ≥ 20:
+**Twenty-four** zero-dependency assertion scripts ship with the repo (**555 assertions** total): **no API keys, no network, no test framework**, Node ≥ 20:
 
 | Script | Covers | Run (count) |
 |---|---|---|
@@ -1008,6 +1046,10 @@ Restart `dsh web` after switching to apply changes.
 | `assert-killtree-win32.mjs` | Windows process-tree termination (#74): no longer relies on `taskkill` | `node tools/assert-killtree-win32.mjs` (8) |
 | `assert-killtree-portable.mjs` | portable `killTree` contract | `node tools/assert-killtree-portable.mjs` (5) |
 | `assert-parallel-mcp.mjs` | Parallel MCP engine: the 25 s timeout / caller abort covers the **body read**, shared SSE parser (notifications, multiline frames), six error paths, REST precise time filtering | `node tools/assert-parallel-mcp.mjs` (15) |
+| `assert-output-language.mjs` | language branches (#92): `searchLanguage` passes zh/en/ja/ru/de/es/fr/ko through and falls back to en, `outputLanguage` only returns zh/en, weather text is English for ja, and both confidence and failure notes follow the language | `node tools/assert-output-language.mjs` (5) |
+| `assert-uncertainty.mjs` | output contract: 0/1 source is low, two sources or a single site is medium, three distinct domains is high, time filter without dates, failure notes, aggregator caveat | `node tools/assert-uncertainty.mjs` (8) |
+| `assert-multikey.mjs` | multi-key fields: a single key is unchanged, comma/semicolon/newline separate keys, blank entries are dropped, empty input yields none | `node tools/assert-multikey.mjs` (3) |
+| `assert-firecrawl-keyless.mjs` | Firecrawl keyless egress refusal: only a 403 with the VPN/proxy wording counts, plain 403 and 401/429/500 do not, and the cooldown starts inactive | `node tools/assert-firecrawl-keyless.mjs` (5) |
 | `assert-fetch-charset.mjs` | fetch encoding (#88): `charset=gbk` / `gb2312` decoded as declared, `<meta charset>` and the http-equiv form sniffed when the header omits it, UTF-8 by default, and an unknown label falls back to UTF-8 instead of throwing | `node tools/assert-fetch-charset.mjs` (6) |
 | `assert-fetch-abort.mjs` | fetch interruption (#87): a compressed response cut mid-body rejects instead of hanging forever, identity truncation rejects too, abort breaks a stalled gzip stream, and complete responses plus redirects still work | `node tools/assert-fetch-abort.mjs` (6) |
 | `assert-bridge-access.mjs` | bridge Host fence (#84): loopback allowed, a remote peer behind a loopback Host refused, `--trusted-host` (port-less matches any port, explicit port matches exactly), `--public-url`, the bind address, cross-site and foreign-Origin refused | `node tools/assert-bridge-access.mjs` (11) |

package/lib/client.js

@@ -424,9 +424,9 @@ window.__ModuleLoader__.load({
         starCta: "Give a star",
       },
     };
-    const tt = (lang) => I18N[lang === "en" ? "en" : "zh"];
+    const tt = (lang) => I18N[String(lang ?? "").trim().toLowerCase() === "zh" ? "zh" : "en"];
     // 当前插件版本（与 lib/index.js 的 PLUGIN_VERSION 保持一致；跟随上游 v0.7.5）
-    const PLUGIN_VERSION = "0.9.9";
+    const PLUGIN_VERSION = "0.9.12";
     const PLUGIN_REPO_URL = "https://github.com/DDDMUC/dsh-free-search";
     // 右侧浮动目录（#85）：条目顺序即页面顺序，anchor 是页面里对应 field 的 id。
     const NAV_ITEMS = [
@@ -1127,7 +1127,7 @@ window.__ModuleLoader__.load({
 
       if (state.status === "loading") return null;
       const ready = state.status === "ready";
-      const t = tt(uiLang || (lang === "en" ? "en" : "zh"));
+      const t = tt(uiLang || (String(lang ?? "").trim().toLowerCase() === "zh" ? "zh" : "en"));
       const navLabels = {
         engines: t.navEngines,
         fallback: t.navFallback,
@@ -2157,7 +2157,7 @@ react_jsx_runtime.jsx("div", {
                   .map((e) => ({
                     id: e.id,
                     label: `${e.label}${e.badge === "AUTO" ? " · 智能路由" : e.badge === "MULTI" ? " · 并发合并" : e.badge === "FREE" ? " · 免费" : " · API Key"}`,
-                    detail: e.id === current ? (view?.value?.lang === "en" ? "current" : "当前") : undefined,
+                    detail: e.id === current ? (String(view?.value?.lang ?? "").trim().toLowerCase() === "zh" ? "当前" : "current") : undefined,
                     active: e.id === current,
                   }));
               },

package/lib/index.js

@@ -41,6 +41,113 @@ const DDG_LITE_URL = "https://lite.duckduckgo.com/lite/";
 const BING_URL = "https://www.bing.com/search";
 const TAVILY_URL = "https://api.tavily.com/search";
 const FIRECRAWL_URL = "https://api.firecrawl.dev/v2/search";
+// Firecrawl 的 keyless 档按出口 IP 判定：VPN/代理出口会被 403 拒绝。
+// 这个判定不随请求变化，遇到一次就冷却 6 小时，避免回退链每次都白等一次往返。
+// 冷却按「代理指纹」记账：换一套代理配置就视为换了出口，旧冷却自动失效。
+const FIRECRAWL_KEYLESS_COOLDOWN_MS = 6 * 60 * 60 * 1000;
+let firecrawlKeylessBlock = null; // { proxy, until }
+
+function proxyFingerprint() {
+  const names = ["HTTPS_PROXY", "https_proxy", "HTTP_PROXY", "http_proxy", "ALL_PROXY", "all_proxy", "NO_PROXY", "no_proxy"];
+  return names.map((name) => String(process.env[name] ?? "")).join("|");
+}
+
+/** 该错误是不是 Firecrawl 对 keyless 档的出口 IP 拒绝（而非 key 失效/限流）。 */
+export function isFirecrawlKeylessRefusal(status, body) {
+  if (status !== 403) return false;
+  return /vpn|proxy|without an api key|api key from here/i.test(String(body || ""));
+}
+
+/** 当前代理配置是否仍处于冷却中；代理配置变了就清掉旧记录。 */
+export function isFirecrawlKeylessBlocked(now = Date.now(), proxy = proxyFingerprint()) {
+  if (firecrawlKeylessBlock === null) return false;
+  if (firecrawlKeylessBlock.proxy !== proxy) {
+    firecrawlKeylessBlock = null;
+    return false;
+  }
+  if (now >= firecrawlKeylessBlock.until) {
+    firecrawlKeylessBlock = null;
+    return false;
+  }
+  return true;
+}
+
+// 输出契约（小步版）：给 advanced_search / multi_search 增加 meta.uncertainty。
+// 只做启发式提示，不改变结果本身；agent 可以据此决定是否二次核对。
+const UNCERTAINTY_AGGREGATORS = /(^|\.)(zhihu|sohu|sina|163|qq|toutiao|baijiahao|csdn|jianshu|medium|substack|reddit|quora|stackexchange)\./i;
+
+// 置信度说明的文案表：只有 zh / en 两套，其它语言回退 en（#92）。
+const UNCERTAINTY_NOTES = {
+  empty: { zh: "没有返回结果", en: "no results returned" },
+  single: { zh: "只有 1 个来源", en: "only one source" },
+  sameSite: { zh: "所有结果来自同一站点", en: "all results come from a single site" },
+  two: { zh: "只有 2 个来源", en: "only two sources" },
+  noDates: { zh: "带时间过滤但结果没有发布时间", en: "time filter applied but the results carry no publish dates" },
+  partial: { zh: "部分引擎失败，结果可能不完整", en: "some engines failed; the result may be incomplete" },
+  aggregator: { zh: "包含聚合站内容，建议二次核对", en: "includes aggregator content; worth a second look" },
+};
+
+export function assessUncertainty({ sources = [], timeRange = false, note: rawNote = "", lang } = {}) {
+  const note = (key) => UNCERTAINTY_NOTES[key][outputLanguage(lang) === "zh" ? "zh" : "en"];
+  const list = Array.isArray(sources) ? sources : [];
+  const notes = [];
+  const domains = new Set();
+  for (const source of list) {
+    try {
+      domains.add(new URL(String(source.url ?? "")).hostname.replace(/^www\./i, "").toLowerCase());
+    } catch {}
+  }
+  let level = "high";
+  if (list.length === 0) {
+    level = "low";
+    notes.push(note("empty"));
+  } else if (list.length === 1) {
+    level = "low";
+    notes.push(note("single"));
+  } else if (domains.size === 1) {
+    level = "medium";
+    notes.push(note("sameSite"));
+  } else if (list.length === 2) {
+    level = "medium";
+    notes.push(note("two"));
+  }
+  if (timeRange && list.every((source) => !source.publishedAt)) {
+    if (level === "high") level = "medium";
+    notes.push(note("noDates"));
+  }
+  if (rawNote && /fail|error|fallback|skipped|failed/i.test(rawNote)) {
+    level = "low";
+    notes.push(note("partial"));
+  }
+  if ([...domains].some((domain) => UNCERTAINTY_AGGREGATORS.test(domain))) {
+    notes.push(note("aggregator"));
+    if (level === "high") level = "medium";
+  }
+  return { level, notes };
+}
+
+// advanced_search / multi_search 的输出 schema 片段：只新增可选字段，不改既有结构。
+const UNCERTAINTY_SCHEMA = {
+  type: "object",
+  additionalProperties: false,
+  properties: {
+    uncertainty: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        level: { type: "string" },
+        notes: { type: "array", items: { type: "string" } },
+      },
+    },
+  },
+};
+/** 一个字段/环境变量里可以放多把 key：逗号、分号或换行分隔。 */
+export function splitApiKeys(raw) {
+  return String(raw ?? "").split(/[\n,;]+/).map((key) => key.trim()).filter(Boolean);
+}
+export function markFirecrawlKeylessBlocked(proxy = proxyFingerprint()) {
+  firecrawlKeylessBlock = { proxy, until: Date.now() + FIRECRAWL_KEYLESS_COOLDOWN_MS };
+}
 const PARALLEL_URL = "https://api.parallel.ai/v1/search";
 const PARALLEL_MCP_URL = "https://search.parallel.ai/mcp";
 const KEENABLE_URL = "https://api.keenable.ai/v1/search";
@@ -55,10 +162,27 @@ const ZHIHU_MCP_URL = "https://developer.zhihu.com/api/mcp/v1";
 const USER_AGENT =
   "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36";
 const ACCEPT_LANG = "zh-CN,zh;q=0.9,en;q=0.8";
+// 当前请求生效的 Accept-Language：由 lang（或显式 bingMarket）决定，搜索前设置（#92）。
+let activeAcceptLanguage = ACCEPT_LANG;
+export function setActiveAcceptLanguage(value) {
+  if (typeof value === "string" && value.trim() !== "") activeAcceptLanguage = value.trim();
+}
 
 // 语言 → Bing 本地化档案：{ market, acceptLang }。
 // lang 字段（设置页可切换）驱动 Bing 的 mkt + Accept-Language，让非中文用户
 // 也能拿到本地化结果（俄语搜俄文等）。bingMarket 显式设置时优先于映射。
+// #92：区分「搜索语言」与「输出语言」。
+// - searchLanguage：交给 provider 的参数（Wikipedia 主机、geocoding、Accept-Language）——支持的语言原样透传，未知回退 en；
+// - outputLanguage：我们自己渲染的文案（天气、置信度说明）——只有 zh/en 两套文案，其它语言回退 en，
+//   否则日语/俄语用户会在回答前拿到一整段中文。
+export function searchLanguage(lang) {
+  const tag = String(lang ?? "").trim().toLowerCase();
+  return Object.prototype.hasOwnProperty.call(LANG_PROFILES, tag) ? tag : "en";
+}
+
+export function outputLanguage(lang) {
+  return searchLanguage(lang) === "zh" ? "zh" : "en";
+}
 const LANG_PROFILES = {
   zh: { market: "zh-CN", acceptLang: "zh-CN,zh;q=0.9,en;q=0.8" },
   en: { market: "en-US", acceptLang: "en-US,en;q=0.9" },
@@ -256,7 +380,7 @@ function routeEngines(query, { timeRange, disabledEngines = [], fallbackOrder =
 }
 
 // 当前插件版本（发布时与 package.json 同步；跟随上游 v0.7.5，不在 PR 里 bump）
-const PLUGIN_VERSION = "0.9.9";
+const PLUGIN_VERSION = "0.9.12";
 // 检查更新的 npm registry 元数据地址（dsh-free-search 是 npmjs 上的公开包）
 const NPM_REGISTRY_URL = "https://registry.npmjs.org/dsh-free-search/latest";
 const PLUGIN_NPM_URL = "https://www.npmjs.com/package/dsh-free-search";
@@ -476,7 +600,7 @@ async function fetchHtml(url, signal, acceptLang) {
     const onAbort = () => controller.abort();
     signal?.addEventListener("abort", onAbort);
     response = await fetch(url, {
-      headers: { "user-agent": USER_AGENT, "accept-language": acceptLang ?? ACCEPT_LANG },
+      headers: { "user-agent": USER_AGENT, "accept-language": acceptLang ?? activeAcceptLanguage },
       signal: controller.signal,
       redirect: "follow",
     });
@@ -731,7 +855,19 @@ const EXA_MCP_URL = "https://mcp.exa.ai/mcp";
 // AnySearch: 免费匿名额度（无 key），可选 Bearer key 提额；结构化 JSON 结果
 // 401/403：本进程忽略该 key 值（不删除存储），改回匿名免费；不自动清空用户配置
 let ignoredAnysearchKey = "";
-const ANYSEARCH_KEY_INVALID_NOTE = "AnySearch key 无效，本次已忽略该 key，改回免费匿名";
+// 当前请求生效的输出语言（zh / en），由 lang 推导；只有我们自己渲染的文案用它（#92）。
+let activeOutputLanguage = "zh";
+export function setActiveOutputLanguage(value) {
+  activeOutputLanguage = String(value ?? "").trim().toLowerCase() === "zh" ? "zh" : "en";
+}
+export function getActiveOutputLanguage() {
+  return activeOutputLanguage;
+}
+const ANYSEARCH_KEY_INVALID_NOTE_ZH = "AnySearch key 无效，本次已忽略该 key，改回免费匿名档";
+const ANYSEARCH_KEY_INVALID_NOTE_EN = "AnySearch key was rejected; ignored it and used the anonymous tier";
+function anysearchKeyNote() {
+  return activeOutputLanguage === "zh" ? ANYSEARCH_KEY_INVALID_NOTE_ZH : ANYSEARCH_KEY_INVALID_NOTE_EN;
+}
 
 async function searchAnysearch(query, maxResults, signal, apiKey) {
   const trimmedKey = typeof apiKey === "string" ? apiKey.trim() : "";
@@ -769,7 +905,7 @@ async function searchAnysearch(query, maxResults, signal, apiKey) {
     signal?.removeEventListener("abort", onAbort);
   }
   if (response.status === 401 || response.status === 403) {
-    throw new Error(keyRejected ? `${ANYSEARCH_KEY_INVALID_NOTE} (HTTP ${response.status})` : `AnySearch API error (HTTP ${response.status})`);
+    throw new Error(keyRejected ? `${anysearchKeyNote()} (HTTP ${response.status})` : `AnySearch API error (HTTP ${response.status})`);
   }
   if (!response.ok) throw new Error(`AnySearch API error (HTTP ${response.status})`);
   const data = await response.json();
@@ -784,7 +920,7 @@ async function searchAnysearch(query, maxResults, signal, apiKey) {
         ...(r.snippet ? { snippet: String(r.snippet).slice(0, 300) } : {}),
       })),
     truncated: false,
-    ...(keyRejected || keyIgnoredSticky ? { content: ANYSEARCH_KEY_INVALID_NOTE } : {}),
+    ...(keyRejected || keyIgnoredSticky ? { content: anysearchKeyNote() } : {}),
   };
 }
 
@@ -1016,7 +1152,7 @@ async function searchStackOverflow(query, maxResults, signal) {
 }
 
 async function searchWikipedia(query, maxResults, signal, lang) {
-  const host = lang === "en" ? "en.wikipedia.org" : "zh.wikipedia.org";
+  const host = `${searchLanguage(lang)}.wikipedia.org`;
   const response = await fetch(
     `https://${host}/w/api.php?action=query&list=search&srsearch=${encodeURIComponent(query)}&format=json&srlimit=${maxResults ?? 5}`,
     {
@@ -1189,7 +1325,7 @@ async function fetchVideoHtml(url, signal, extraHeaders) {
     response = await fetch(url, {
       headers: {
         "user-agent": USER_AGENT,
-        "accept-language": ACCEPT_LANG,
+        "accept-language": activeAcceptLanguage,
         accept: "text/html,application/xhtml+xml,application/json;q=0.9,*/*;q=0.8",
         ...(extraHeaders ?? {}),
       },
@@ -1532,6 +1668,12 @@ async function searchFirecrawl(query, maxResults, apiKey, timeRange, signal) {
   }
   if (!response.ok) {
     const detail = await response.text().catch(() => "");
+    if (!apiKey && isFirecrawlKeylessRefusal(response.status, detail)) {
+      markFirecrawlKeylessBlocked();
+      throw new Error(
+        "Firecrawl keyless tier is blocked from this network (VPN/proxy egress) — set FIRECRAWL_API_KEY to use Firecrawl; cooling down for 6h (cleared automatically if you switch proxy)"
+      );
+    }
     if (response.status === 401) {
       throw new Error("Firecrawl API key is invalid (HTTP 401) - update it in Settings > Plugins > Free Search");
     }
@@ -3587,17 +3729,49 @@ function apply(ctx, config) {
   };
 
   // key 优先级：credentials（.credentials.yaml 凭据中心，官方推荐）> settings 的 free-search.<x>ApiKey（遗留兼容）> 环境变量
+  // 多 key：同一个字段/环境变量里用逗号（或分号/换行）分隔多个 key。
+  // 命中 auth/quota 失败时整条链重试一次并轮换到下一把，而不是直接判死。
+  const keyRings = new Map();
+  const ringFor = (envName, raw) => {
+    const keys = splitApiKeys(raw);
+    const signature = keys.join("\u0000");
+    const previous = keyRings.get(envName);
+    if (!previous || previous.signature !== signature) {
+      keyRings.set(envName, { keys, index: 0, signature });
+    }
+    return keyRings.get(envName);
+  };
+  const maxKeyRingLength = () => {
+    let max = 1;
+    for (const ring of keyRings.values()) max = Math.max(max, ring.keys.length);
+    return max;
+  };
+  const rotateAllKeyRings = () => {
+    for (const ring of keyRings.values()) {
+      if (ring.keys.length > 1) ring.index = (ring.index + 1) % ring.keys.length;
+    }
+  };
+  const isKeyRotationCandidate = (error) => {
+    const failure = classifyFailure(error);
+    return failure.class === "auth" || failure.class === "quota";
+  };
   const resolveApiKey = async (envName, settingsKey) => {
+    let raw = "";
     const credentials = getCredentials();
     if (credentials) {
       try {
         const resolved = await credentials.resolve(envName);
-        if (resolved?.value) return resolved.value;
+        if (resolved?.value) raw = resolved.value;
       } catch {}
     }
-    const cfg = current();
-    if (settingsKey && cfg[settingsKey]) return cfg[settingsKey];
-    return process.env[envName] ?? "";
+    if (!raw) {
+      const cfg = current();
+      if (settingsKey && cfg[settingsKey]) raw = cfg[settingsKey];
+      else raw = process.env[envName] ?? "";
+    }
+    if (!raw) return "";
+    const ring = ringFor(envName, raw);
+    return ring.keys[ring.index % ring.keys.length] ?? "";
   };
   // 豆包搜索：主 key 名 DOUBAO_SEARCH_API_KEY；官方示例也用 WEB_SEARCH_API_KEY，作为回退
   const resolveDoubaoKey = async () => {
@@ -3626,6 +3800,20 @@ function apply(ctx, config) {
     },
     // 单 query 结果缓存：key=query+maxResults+timeRangeLabel+preferred，Map 天然 LRU
     async search(request, signal) {
+      // 轮换时机：首次失败后 keyRings 已经填充，此时再判断有几把 key。
+      for (let attempt = 0; attempt < 10; attempt++) {
+        try {
+          return await provider.searchOnce(request, signal);
+        } catch (error) {
+          const keys = maxKeyRingLength();
+          if (keys <= 1 || attempt >= keys - 1 || !isKeyRotationCandidate(error)) throw error;
+          rotateAllKeyRings();
+          logger.warn(`free-search: retrying with the next API key (${error?.message ?? error})`);
+        }
+      }
+      throw new Error("all search engines failed");
+    },
+    async searchOnce(request, signal) {
       // 公共咽喉校验：web_search / advanced_search / raw-search 三条路径都经过这里
       if (request === null || typeof request !== "object" || typeof request.query !== "string" || request.query.trim().length === 0) {
         throw new Error("query is required");
@@ -3633,6 +3821,11 @@ function apply(ctx, config) {
       const cfg = current();
       // #72：本次请求生效的域名黑名单（模块级活动值；各结果咽喉点过滤读取它）
       setActiveBlockedDomains(cfg.blockedDomains);
+      // #92：Accept-Language 跟随 lang（显式 bingMarket 优先），不再固定中文
+      setActiveAcceptLanguage(
+        (cfg.bingMarket && MARKET_TO_LANG[cfg.bingMarket]) || LANG_PROFILES[searchLanguage(cfg.lang)].acceptLang
+      );
+      setActiveOutputLanguage(outputLanguage(cfg.lang));
       const disabledEngines = normalizeDisabledEngines(cfg.disabledEngines);
       const fallbackOnSet = new Set(normalizeFallbackOn(cfg.fallbackOn));
       const disabledSet = new Set(disabledEngines);
@@ -3783,6 +3976,11 @@ function apply(ctx, config) {
           } else if (engine === "firecrawl") {
             // firecrawl：无 key 也可用（官方免 key 匿名额度），有 key 走账号档（更高限额）
             const key = await resolveApiKey("FIRECRAWL_API_KEY", "firecrawlApiKey");
+            if (!key && isFirecrawlKeylessBlocked()) {
+              throw new Error(
+                "Firecrawl keyless tier is blocked from this network (VPN/proxy egress, remembered for 6h; switch proxy to retry) — configure FIRECRAWL_API_KEY or use another engine"
+              );
+            }
             result = await searchFirecrawl(request.query, request.maxResults, key, timeRange, effSignal);
           } else if (engine === "parallel") {
             // parallel：有 key 走 REST（支持 after_date 精确过滤），无 key 走 keyless MCP（免费匿名额度）
@@ -4288,6 +4486,9 @@ function apply(ctx, config) {
         }
         case "firecrawl": {
           const key = await resolveApiKey("FIRECRAWL_API_KEY", "firecrawlApiKey");
+          if (!key && isFirecrawlKeylessBlocked()) {
+            throw new Error("Firecrawl keyless tier is blocked from this network (VPN/proxy egress, remembered for 6h) — configure FIRECRAWL_API_KEY or use another engine");
+          }
           return await searchFirecrawl(q, n, key, tr);
         }
         case "parallel": {
@@ -4993,7 +5194,7 @@ function apply(ctx, config) {
           output: {
             schema: WEATHER_OUTPUT_SCHEMA,
             render(args, value) {
-              const lang = current().lang === "en" ? "en" : "zh";
+              const lang = outputLanguage(current().lang);
               const c = value.current ?? {};
               const lines = [];
               lines.push(lang === "en" ? `Weather for ${value.location}:` : `${value.location} 天气：`);
@@ -5013,7 +5214,8 @@ function apply(ctx, config) {
             },
           },
           async execute(args) {
-            const lang = current().lang === "en" ? "en" : "zh";
+            // 天气正文只提供 zh/en（回退 en），地理编码用真实搜索语言（ja 就查日文地名）。
+            const lang = searchLanguage(current().lang);
             const location = String(args.location ?? "").trim();
             if (!location) throw new Error("weather: location is required");
             return sanitizeWeatherResult(await fetchWeather(location, args.days, lang, undefined));
@@ -5077,6 +5279,7 @@ function apply(ctx, config) {
                     },
                   },
                 },
+                meta: UNCERTAINTY_SCHEMA,
               },
             },
             render(args, value) {
@@ -5084,7 +5287,12 @@ function apply(ctx, config) {
               const note = value.content ? String(value.content).trim() : "";
               // 空结果时区分「真的没搜到」与「引擎出错」：有 note（失败原因等）就展示，而不是谎报 No results
               const body = lines.length > 0 ? `${lines.join("\n")}${note ? `\n\n${note}` : ""}` : note || "No results found.";
-              return [{ type: "text", text: `Search (${value.provider}${args.timeRange ? `, timeRange=${args.timeRange}` : ""}):\n${wrapUntrustedBlock(body)}` }];
+              const uncertainty = value.meta?.uncertainty;
+              const confidence =
+                uncertainty && uncertainty.level !== "high"
+                  ? `\n\nConfidence: ${uncertainty.level}${Array.isArray(uncertainty.notes) && uncertainty.notes.length > 0 ? ` — ${uncertainty.notes.join("; ")}` : ""}`
+                  : "";
+              return [{ type: "text", text: `Search (${value.provider}${args.timeRange ? `, timeRange=${args.timeRange}` : ""}):\n${wrapUntrustedBlock(body)}${confidence}` }];
             },
           },
           async execute(args) {
@@ -5111,6 +5319,14 @@ function apply(ctx, config) {
                 }
                 return source;
               }),
+              meta: {
+                uncertainty: assessUncertainty({
+                  sources: result.sources ?? [],
+                  timeRange: Boolean(request.timeRange),
+                  note: typeof result.content === "string" ? result.content : "",
+                  lang: current().lang,
+                }),
+              },
             };
           },
           finalizeContent(exec, result) {
@@ -5173,6 +5389,7 @@ function apply(ctx, config) {
                     },
                   },
                 },
+                meta: UNCERTAINTY_SCHEMA,
               },
             },
             render(args, value) {
@@ -5183,7 +5400,12 @@ function apply(ctx, config) {
               const note = value.content ? String(value.content).trim() : "";
               // 空结果时区分「真的没搜到」与「引擎出错」：有 note（失败原因等）就展示，而不是谎报 No results
               const body = lines.length > 0 ? `${lines.join("\n")}${note ? `\n\n${note}` : ""}` : note || "No results found.";
-              return [{ type: "text", text: `Multi-Search (${value.provider}):\n${wrapUntrustedBlock(body)}` }];
+              const uncertainty = value.meta?.uncertainty;
+              const confidence =
+                uncertainty && uncertainty.level !== "high"
+                  ? `\n\nConfidence: ${uncertainty.level}${Array.isArray(uncertainty.notes) && uncertainty.notes.length > 0 ? ` — ${uncertainty.notes.join("; ")}` : ""}`
+                  : "";
+              return [{ type: "text", text: `Multi-Search (${value.provider}):\n${wrapUntrustedBlock(body)}${confidence}` }];
             },
           },
           async execute(args) {
@@ -5196,7 +5418,16 @@ function apply(ctx, config) {
             // where SearchProvider may use `truncated`. The tool schema is strict
             // (additionalProperties: false), so expose only declared tool fields here.
             const { truncated: _truncated, ...toolResult } = result;
-            return toolResult;
+            return {
+              ...toolResult,
+              meta: {
+                uncertainty: assessUncertainty({
+                  sources: toolResult.sources ?? [],
+                  note: typeof toolResult.content === "string" ? toolResult.content : "",
+                  lang: current().lang,
+                }),
+              },
+            };
           },
           finalizeContent(exec, result) {
             const text = result.content;

package/lib/weather.js

@@ -38,14 +38,20 @@ const WMO_CODES = {
   96: ["雷暴伴小冰雹", "Thunderstorm with slight hail"],
   99: ["雷暴伴大冰雹", "Thunderstorm with heavy hail"],
 };
-function wmoText(code, lang) {
+/** 天气文案只有 zh / en 两套；其它语言（ja/ru/…）走英文，避免整段中文（#92）。 */
+export function textLanguage(lang) {
+  return String(lang ?? "").trim().toLowerCase() === "zh" ? "zh" : "en";
+}
+
+export function wmoText(code, lang) {
+  const textLang = textLanguage(lang);
   const hit = WMO_CODES[code];
-  if (!hit) return lang === "en" ? "Unknown" : "未知";
-  return (lang === "en" ? hit[1] : hit[0]) + ` (WMO ${code})`;
+  if (!hit) return textLang === "zh" ? "未知" : "Unknown";
+  return (textLang === "zh" ? hit[0] : hit[1]) + ` (WMO ${code})`;
 }
 
-export async function geocodeLocation(name, signal) {
-  const params = new URLSearchParams({ name, count: "1", language: "zh", format: "json" });
+export async function geocodeLocation(name, signal, language = "en") {
+  const params = new URLSearchParams({ name, count: "1", language: String(language ?? "en") || "en", format: "json" });
   const response = await fetch(`${OPEN_METEO_GEOCODING_URL}?${params}`, {
     method: "GET",
     redirect: "error",
@@ -66,7 +72,7 @@ export async function geocodeLocation(name, signal) {
 }
 
 export async function fetchWeather(location, days, lang, signal) {
-  const geo = await geocodeLocation(location, signal);
+  const geo = await geocodeLocation(location, signal, lang);
   if (!geo) throw new Error(`could not geocode location "${location}" — try a nearby larger city`);
   const params = new URLSearchParams({
     latitude: String(geo.latitude),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-free-search",
-  "version": "0.9.9",
+  "version": "0.9.12",
   "description": "Free web search for DeepSeek Harness: 27 engines (Bing/DuckDuckGo/AnySearch/SearXNG/Exa/Tavily/Keenable/Firecrawl/Parallel keyless; Zhihu global/site via MCP and Perplexity/SerpBase/DeepSeek (official + native tools/search)/You.com/Baidu/Kimi/Aliyun/Doubao with key; OpenAI/Gemini/Claude model built-in search, explicit-only) + auto smart routing + global engine enable/disable & fallback priority + editable zh/en language pools + multi mode (parallel full language-pool merge) + multi_search cross-source tool + failure-aware fallback (quota/auth cooldown, transient retry, fallbackOn) + time filtering + platform search + domain blocklist (blockedDomains) + web_fetch, with web settings UI.",
   "type": "module",
   "main": "lib/index.js",