dsh-grok-provider 0.1.7 → 0.1.9

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.1.9 - 2026-08-30
+
+- Add independent, default-off Web Search and X Search Provider settings for exact `grok-4.6`; keep every other dynamically discovered model Search-disabled until the same fixed-Proxy evidence exists.
+- Compile Harness function tools followed by `web_search` and `x_search` under one 128-tool and 16 MiB request budget, while preserving the byte-identical `0.1.7` request path when both settings are off and disabling Search for non-interactive `purpose` calls.
+- Bind each final request to a private response receipt so undeclared function names, disabled server tools, unknown events, malformed citations, and incomplete or out-of-order Search lifecycles fail closed before they can be projected into Harness.
+- Decode the fixed Proxy's standard Web Search lifecycle and its Grok-Build-specific four-name X Search `custom_tool_call` lifecycle as server-executed activity that emits no Harness tool-call chunks; observing either category suppresses encrypted reasoning replay for that response.
+- Preserve inline citation Markdown as assistant text while bounding and discarding structured citation metadata; never follow, preview, or download citation URLs.
+- Add bilingual Search risk disclosures to the existing Grok Build settings page through Harness `settingsScope`, without a second configuration RPC, renderer-local persistence, a production dependency, a new endpoint, or a new authentication mode.
+
+## 0.1.8 - 2026-08-30 (withdrawn)
+
+- Briefly published a Grok-only sidebar quota card that moved the sidebar's Grok quota querying and display ownership into the Provider, then withdrew the release by reverting that change.
+- The npm Registry version `dsh-grok-provider@0.1.8` remains permanently reserved and cannot be reused after unpublish; `latest` remains `0.1.7`, and the independent Search slice moves to `0.1.9`.
+
 ## 0.1.7 - 2026-08-29
 
 - Add a separate Host diagnostics RPC that reports the installed package version and a closed Grok Build CLI state/version without exposing executable paths, stderr, environment, proxy data, or OAuth URLs.
@@ -8,7 +22,7 @@
 - Keep runtime diagnostics single-flight and lifecycle-owned: capability teardown cancels and awaits inspection, cleanup failure latches the CLI instance and aborts its in-flight authentication actions, and serial authentication polling uses a request epoch to reject stale responses after user actions, settlement, or unmount.
 - Document the Windows pre-browser OIDC failure boundary and keep runtime diagnostics outside the authentication status polling path; the official CLI still owns sign-in URL generation and external-browser launch, so this release does not claim to repair Windows network/proxy conditions or to have verified network-reachable browser launch on a real Windows device.
 - Render the MIT-licensed `IconThinkOutline16` path geometry from `@deepseek-ai/dsh-client-ui-primitives@0.1.0-rc.7` for the one exact Grok Build settings navigation match through a scoped, lifecycle-owned compatibility layer; ambiguous labels or unexpected DOM structure retain the Host gear, unload removes every injected resource, and the bundled third-party notice preserves attribution.
-- Keep Web/X Search, image generation, new server-tool events, arbitrary URL downloads, API-key mode, and custom endpoints out of this maintenance release; the independent Search slice moves to `0.1.8`.
+- Keep Web/X Search, image generation, new server-tool events, arbitrary URL downloads, API-key mode, and custom endpoints out of this maintenance release; the independent Search slice moves to `0.1.9` because the sidebar-quota `0.1.8` release was withdrawn and its Registry version cannot be reused.
 
 ## 0.1.6 - 2026-08-28
 

package/README.en.md

@@ -2,9 +2,9 @@
 
 [简体中文](README.md) | [English](README.en.md)
 
-Use an already authenticated official Grok Build account from DeepSeek Harness, with dynamic model discovery, streaming reasoning, tool calls, and an account quota/model capability dashboard.
+Use an already authenticated official Grok Build account from DeepSeek Harness, with dynamic model discovery, streaming reasoning, image input, optional Web/X Search, tool calls, and an account quota/model capability dashboard.
 
-> Unofficial community project; not affiliated with xAI or DeepSeek Harness. The current source candidate is `0.1.7`; npm Registry `latest` and the most recently published stable release are both `0.1.6`. The project no longer publishes prereleases; stable defects are fixed in a new incremented stable version.
+> Unofficial community project; not affiliated with xAI or DeepSeek Harness. The current source candidate is `0.1.9`. Version `0.1.8` was published and then withdrawn, and npm version numbers cannot be reused; npm Registry `latest` and the current installable stable baseline remain `0.1.7`. The project no longer publishes prereleases; stable defects are fixed in a new incremented stable version.
 
 ## What it provides
 
@@ -15,6 +15,7 @@ Use an already authenticated official Grok Build account from DeepSeek Harness,
 | Models | Discovers every model visible to the account at runtime; no static model allowlist |
 | Conversations | Streaming Responses text, reasoning, encrypted reasoning replay, usage, and finish reasons |
 | Images | Only exact `grok-4.6` accepts bounded JPEG/PNG images from Harness attachments; `grok-4.5` and all other models remain text-only |
+| Search | The `0.1.9` candidate provides independent, default-off Web Search and X Search for exact `grok-4.6`; remote lifecycles are never misrepresented as local tools |
 | Tools | Returns function calls to the Harness permission layer; the provider never executes tools |
 | Account dashboard | Login status, weekly/monthly quota, reset time, dynamic model capabilities and reasoning efforts |
 | Surfaces | Bilingual Web settings and a closed `/grok` TUI command set |
@@ -35,14 +36,14 @@ grok --version
 grok models
 ```
 
-The official CLI opens a browser on first use. The provider supports only the official default `~/.grok` directory (`%USERPROFILE%\.grok` on Windows).
+When the network is reachable and OIDC discovery succeeds, the official CLI opens a browser on first use. The provider supports only the official default `~/.grok` directory (`%USERPROFILE%\.grok` on Windows).
 
 ### 2. Install the provider
 
-After `0.1.7` is published, install that exact version from npm:
+After `0.1.9` is published, install that exact version from npm:
 
 ```sh
-dsh plugin --profile web add dsh-grok-provider@0.1.7
+dsh plugin --profile web add dsh-grok-provider@0.1.9
 dsh web
 ```
 
@@ -65,6 +66,7 @@ The Web settings page shows:
 - the official installation link and “Check again” recovery when the CLI is missing or invalid;
 - used/remaining quota and the real billing-period reset time;
 - account-visible models, context windows, reasoning efforts, and image-input, streaming, and tool capabilities.
+- independent, default-off Web Search and X Search settings with nearby remote-query, additional-usage, citation, and prompt-injection disclosures.
 
 When protobuf-backed billing includes a complete weekly/monthly period but omits a zero-valued percentage, the page restores “0% used / 100% remaining.” Other incomplete responses remain unknown.
 
@@ -128,8 +130,8 @@ Uninstalling the provider does not remove the official Grok CLI or directly modi
 
 ## Sources and discovery
 
-- Current npm stable release: [dsh-grok-provider@0.1.6](https://www.npmjs.com/package/dsh-grok-provider/v/0.1.6)
-- Most recent GitHub release and integrity values: [v0.1.6](https://github.com/yoshino-xiao7/dsh-grok-provider/releases/tag/v0.1.6)
+- Current npm stable release: [dsh-grok-provider@0.1.7](https://www.npmjs.com/package/dsh-grok-provider/v/0.1.7)
+- Most recent GitHub release and integrity values: [v0.1.7](https://github.com/yoshino-xiao7/dsh-grok-provider/releases/tag/v0.1.7)
 - GitHub community discovery: the repository carries the DeepSeek Harness-recommended `dsh-plugin` and `dsh` topics
 - YukiRyou managed source: [deepseek-yukiryou-plugin-catalog](https://github.com/yoshino-xiao7/deepseek-yukiryou-plugin-catalog), still pinned to the real-device-accepted `dsh-grok-provider@0.1.0` and marking only `darwin-arm64`
 
@@ -137,19 +139,21 @@ Directory inclusion is not an endorsement by xAI or DeepSeek Harness. [Listing P
 
 ## Compatibility and scope
 
-| Item | `0.1.7` candidate status |
+| Item | `0.1.9` candidate status |
 | --- | --- |
 | DeepSeek Harness | Exact support for `0.1.1-rc.2` |
 | Node.js | `>=24.19.0` |
-| macOS arm64 | Real-network and isolated Harness acceptance completed |
-| Windows x64 | Covered by code and slow fakes; the final candidate must still pass Windows CI. On a reachable network the official CLI generates the URL and opens the browser, and that path has not yet completed real-device Windows acceptance for the `0.1.7` candidate |
+| macOS arm64 | The published `0.1.7` baseline completed real-network acceptance; `0.1.9` Search passed four isolated Web Harness cases under fail-closed fixtures |
+| Windows x64 | Covered by code, slow fakes, and passing `0.1.9` Windows 2022 CI. On a reachable network the official CLI generates the URL and opens the browser, and that path still lacks real-device Windows acceptance |
 | macOS x64 / Linux | Unsupported |
 | Grok CLI | No full-version lock; official path, `login --oauth` capability, and production OIDC credential contract are enforced |
 | Models | Every account catalog model whose backend has a strict codec in this release |
 
-`0.1.7` preserves the image boundary of published `0.1.6`: image input is enabled only for exact `grok-4.6`, while `grok-4.5` and every other dynamically discovered model remain text-only. Image sending from `0.1.6` has been confirmed in a real Harness conversation; `0.1.7` does not change the model set, image projection, or Responses wire. The account dashboard projects capability badges from that same catalog, so only image-capable models show “Image input.” Images must be verified JPEG/PNG projections from the Harness attachment service. Ordinary user content and images nested one level inside a tool result are supported, with `detail:"high"` fixed to the official xAI Responses image example; URLs, filesystem paths, file IDs, and caller-supplied data URLs are rejected. Private reasoning in ordinary user/system history is omitted while adjacent visible text remains ordered, so `subagent-settled` history and same-message reasoning no longer block image requests.
+`0.1.9` preserves the image boundary of published `0.1.7`: image input is enabled only for exact `grok-4.6`, while `grok-4.5` and every other dynamically discovered model remain text-only. Image sending has been confirmed in a real Harness conversation. Images must be verified JPEG/PNG projections from the Harness attachment service. Ordinary user content and images nested one level inside a tool result are supported with fixed `detail:"high"`; URLs, filesystem paths, file IDs, and caller-supplied data URLs are rejected. Private reasoning in ordinary user/system history is omitted while adjacent visible text remains ordered.
 
-Each projected image is limited to 4 MiB, 16,777,216 pixels, and 8192px per side. A request retains at most eight images and 8 MiB of projected image bytes. When a limit is exceeded, the globally oldest images are offloaded to Harness text placeholders; the final JSON remains capped at 16 MiB. Web/X Search, image generation, arbitrary downloads, API-key mode, multiple accounts, enterprise OIDC, ACP, and Headless agent wrapping remain out of scope; see the [capability roadmap](docs/11-capability-roadmap.md).
+Each projected image is limited to 4 MiB, 16,777,216 pixels, and 8192px per side. A request retains at most eight images and 8 MiB of projected image bytes. When a limit is exceeded, the globally oldest images are offloaded to Harness text placeholders; the final JSON remains capped at 16 MiB.
+
+The `0.1.9` candidate adds two default-off Search settings only for exact `grok-4.6`. Once enabled, ordinary conversation content and model-derived queries are sent to xAI and may incur additional usage. Web/X activity is already executed server-side and is not projected as a Harness-local tool call. Citation Markdown remains ordinary assistant text; bounded structured URL metadata is discarded, and the plugin never opens or downloads a citation. Search results are untrusted remote data, so verify sources before commands or file changes. Image generation, arbitrary downloads, API-key mode, multiple accounts, enterprise OIDC, ACP, and Headless agent wrapping remain out of scope; see the [capability roadmap](docs/11-capability-roadmap.md).
 
 ## How it works
 
@@ -175,7 +179,7 @@ Model IDs come from the runtime catalog rather than a hardcoded list. Image moda
 - The Host must perform a bounded read of the official `auth.json`, whose raw file may contain a refresh token. The parser does not use, cache, or persist that refresh token; it retains only validation metadata and a short-lived access-token lease.
 - The provider does not implement a refresh grant. Near expiry it may invoke one bounded official `grok models`, then reread and revalidate the official credential file.
 - Login subprocesses use fixed argv, a scrubbed environment, output limits, deadlines, cancellation, and no shell.
-- Prompts, tool results, and image projections selected for a request are sent to the xAI Grok Build service; the provider itself does not log that content, source images, or projected bytes.
+- Prompts, tool results, image projections selected for a request, and Search queries when enabled are sent to the xAI Grok Build service; the provider itself does not log that content, source images, projected bytes, or citation URLs.
 
 See the full [threat model](docs/03-security-threat-model.md). For vulnerabilities, read the [security policy](SECURITY.md) and never post tokens, `auth.json`, personal data, or full diagnostic logs in a public issue.
 
@@ -199,7 +203,7 @@ Run the official CLI directly first:
 
 If it times out at `auth.x.ai/.well-known/openid-configuration`, the failure occurs before a sign-in URL is generated; it is not a broken Provider browser button. Check Windows DNS, outbound HTTPS, firewall, VPN, and proxy settings—especially when the browser uses PAC/system proxy but the CLI process has no `HTTPS_PROXY`. Do not disable TLS verification or post proxy credentials, sign-in URLs, authorization codes, or tokens in an issue.
 
-The `0.1.7` settings page promptly settles this known discovery timeout and says that browser sign-in has not started. An authentication flow that is still running within the five-minute deadline remains cancellable, while unknown CLI output is reduced to a redacted generic error. This is accurate diagnosis of the failure boundary: the Provider does not open the browser itself and does not repair Windows DNS, proxy, firewall, VPN, or official-CLI behavior.
+The settings page promptly settles this known discovery timeout and says that browser sign-in has not started. An authentication flow that is still running within the five-minute deadline remains cancellable, while unknown CLI output is reduced to a redacted generic error. This is accurate diagnosis of the failure boundary: the Provider does not open the browser itself and does not repair Windows DNS, proxy, firewall, VPN, or official-CLI behavior.
 
 ### A model is missing
 
@@ -215,7 +219,7 @@ Versions through `0.1.2` could not convert some third-party tool-call histories
 
 ### Does Windows work?
 
-Windows x64 is covered by code and slow fakes, and the final candidate must still pass Windows CI. The official CLI still generates the sign-in URL and launches the external browser. Network-reachable browser launch has not yet been confirmed on a real Windows device for `0.1.7`, so it must not be described as fixed or verified.
+Windows x64 is covered by code, slow fakes, and passing `0.1.9` Windows 2022 CI. The official CLI still generates the sign-in URL and launches the external browser. Network-reachable browser launch has not yet been confirmed on a real Windows device, so it must not be described as fixed or verified.
 
 ## Development
 
@@ -250,8 +254,8 @@ Read the [contributing guide](CONTRIBUTING.md) before filing an issue or PR. Cha
 - [x] Publish `0.1.4`: image input only for exact `grok-4.6`; red/blue user/tool-result Proxy gates and final Harness attachment revalidation passed, while `grok-4.5` fails closed as text-only
 - [x] Publish `0.1.5`: maintenance for release binding, dashboard capability badges, and transactional Provider Runtime installation; the unique artifact, dual-platform CI, signatures, and SLSA provenance are verified
 - [x] Publish `0.1.6`: image-history reasoning compatibility and per-stage official-CLI deadline repair for Windows; image sending is confirmed in a real Harness conversation
-- [ ] Publish `0.1.7`: Provider/CLI version diagnostics, CLI installation recovery, redacted OIDC discovery-timeout settlement, and the `IconThinkOutline16` settings-navigation compatibility layer
-- [ ] Independent `0.1.8` slice: opt-in, default-off Web Search / X Search
+- [x] Publish `0.1.7`: Provider/CLI version diagnostics, CLI installation recovery, redacted OIDC discovery-timeout settlement, and the `IconThinkOutline16` settings-navigation compatibility layer
+- [ ] Publish `0.1.9`: opt-in, default-off Web Search / X Search; `0.1.8` was published and then withdrawn, and its npm version number cannot be reused
 - [ ] A subsequent slice: opt-in image generation (inline results only, committed through Harness attachments)
 - [ ] Complete independent Windows x64 acceptance and publish a later stable fix if needed
 

package/README.md

@@ -2,9 +2,9 @@
 
 [简体中文](README.md) | [English](README.en.md)
 
-让 DeepSeek Harness 使用你已登录的官方 Grok Build 账号：动态模型发现、流式推理、工具调用，以及账号额度与模型能力面板。
+让 DeepSeek Harness 使用你已登录的官方 Grok Build 账号：动态模型发现、流式推理、图片输入、可选 Web/X Search、工具调用，以及账号额度与模型能力面板。
 
-> 非官方社区项目，与 xAI 或 DeepSeek Harness 官方无隶属关系。当前源码候选版本为 `0.1.7`；npm Registry 的 `latest` 与最近发布的稳定版本均为 `0.1.6`。项目不再发行预发行版；正式版缺陷通过新的递增稳定版本修复。
+> 非官方社区项目，与 xAI 或 DeepSeek Harness 官方无隶属关系。当前源码候选版本为 `0.1.9`。`0.1.8` 曾发布后撤回，npm 版本号不可复用；npm Registry 的 `latest` 与当前可安装的稳定基线仍为 `0.1.7`。项目不再发行预发行版；正式版缺陷通过新的递增稳定版本修复。
 
 ## 它解决什么问题
 
@@ -15,6 +15,7 @@
 | 模型 | 运行时读取账号可见的全部 Grok Build 模型，不维护静态模型白名单 |
 | 对话 | Responses 流式文本、reasoning、加密 reasoning replay、usage 与 finish reason |
 | 图片 | 仅精确 `grok-4.6` 接收 Harness attachment 中有界的 JPEG/PNG 图片；`grok-4.5` 与其他模型保持 text-only |
+| 搜索 | `0.1.9` 候选为精确 `grok-4.6` 提供默认关闭、可分别开启的 Web Search / X Search；远端 lifecycle 不伪装成本地工具 |
 | 工具 | 将 function call 交回 Harness 权限层；Provider 本身不执行工具 |
 | 账户面板 | 登录状态、每周/月额度、重置时间、动态模型能力与 reasoning 档位 |
 | 界面 | Web 设置页中英文切换；TUI 提供闭合的 `/grok` 命令 |
@@ -35,14 +36,14 @@ grok --version
 grok models
 ```
 
-首次运行 Grok CLI 会打开浏览器登录。插件只支持官方默认的 `~/.grok`（Windows 为 `%USERPROFILE%\.grok`）目录。
+当网络可达且 OIDC discovery 成功时，首次运行 Grok CLI 会打开浏览器登录。插件只支持官方默认的 `~/.grok`（Windows 为 `%USERPROFILE%\.grok`）目录。
 
 ### 2. 安装 Provider
 
-`0.1.7` 发布后，从 npm 安装该精确版本：
+`0.1.9` 发布后，从 npm 安装该精确版本：
 
 ```sh
-dsh plugin --profile web add dsh-grok-provider@0.1.7
+dsh plugin --profile web add dsh-grok-provider@0.1.9
 dsh web
 ```
 
@@ -65,6 +66,7 @@ Web 设置页展示：
 - CLI 缺失或无效时的官方安装入口与“重新检测”操作；
 - 已使用/剩余额度和真实周期重置时间；
 - 当前账号可见模型、上下文窗口、reasoning 档位，以及图片输入、streaming 与 tool capability。
+- 默认关闭且相互独立的 Web Search / X Search 开关，以及远端检索、额外用量、citation 和 prompt injection 风险提示。
 
 当 protobuf-backed billing 返回完整的 weekly/monthly 周期但省略零值百分比时，页面会恢复为“已使用 0% / 剩余 100%”；其他不完整响应保持未知，不伪造额度。
 
@@ -128,8 +130,8 @@ dsh web
 
 ## 项目来源与发现
 
-- npm 当前稳定版：[dsh-grok-provider@0.1.6](https://www.npmjs.com/package/dsh-grok-provider/v/0.1.6)
-- GitHub 最近发行版与校验值：[v0.1.6](https://github.com/yoshino-xiao7/dsh-grok-provider/releases/tag/v0.1.6)
+- npm 当前稳定版：[dsh-grok-provider@0.1.7](https://www.npmjs.com/package/dsh-grok-provider/v/0.1.7)
+- GitHub 最近发行版与校验值：[v0.1.7](https://github.com/yoshino-xiao7/dsh-grok-provider/releases/tag/v0.1.7)
 - GitHub 社区发现：仓库已添加 DeepSeek Harness 官方推荐的 `dsh-plugin` 与 `dsh` Topics
 - YukiRyou 受管来源：[deepseek-yukiryou-plugin-catalog](https://github.com/yoshino-xiao7/deepseek-yukiryou-plugin-catalog)，当前仍锁定已完成真机验收的 `dsh-grok-provider@0.1.0`，且只标记 `darwin-arm64`
 
@@ -137,19 +139,21 @@ dsh web
 
 ## 兼容性与范围
 
-| 项目 | `0.1.7` 候选状态 |
+| 项目 | `0.1.9` 候选状态 |
 | --- | --- |
 | DeepSeek Harness | 精确支持 `0.1.1-rc.2` |
 | Node.js | `>=24.19.0` |
-| macOS arm64 | 已完成真实网络与隔离 Harness 验收 |
-| Windows x64 | 代码与 slow-fake 覆盖；正式候选仍需通过 Windows CI。网络可达时由官方 CLI 生成 URL 并打开浏览器，`0.1.7` 候选尚未完成该路径的 Windows 真机验收 |
+| macOS arm64 | 已发布的 `0.1.7` 基线已完成真实网络验收；`0.1.9` Search 已完成失败关闭 fixture 下的隔离 Web Harness 四场景验收 |
+| Windows x64 | 代码、slow-fake 与 `0.1.9` Windows 2022 CI 已通过；网络可达时由官方 CLI 生成 URL 并打开浏览器，该路径仍未完成 Windows 真机验收 |
 | macOS x64 / Linux | 不支持 |
 | Grok CLI | 不锁完整版本；严格校验官方路径、`login --oauth` 能力与生产 OIDC 凭据契约 |
 | 模型 | 当前账号目录中 backend 已被严格 codec 支持的全部模型 |
 
-`0.1.7` 沿用已发布 `0.1.6` 的图片边界：只为精确的 `grok-4.6` 开启图片输入；`grok-4.5` 与其他动态发现的模型继续按 text-only 处理。`0.1.6` 的图片发送已在真实 Harness 对话中确认可用，`0.1.7` 不改变模型集合、图片投影或 Responses wire。账户面板从同一模型目录投影能力标签，因此只有图片模型显示“图片输入”。图片只能来自 Harness attachment service 的已验证 JPEG/PNG 投影，支持普通用户内容和一层工具结果中的图片，并按 xAI 官方 Responses 图片示例固定使用 `detail:"high"`；不接受 URL、文件路径、file ID 或调用方预制的 data URL。普通 user/system 历史中的私有 reasoning 会被省略并保留相邻可见文本，因此 `subagent-settled` 历史和同消息 reasoning 不再阻断图片请求。
+`0.1.9` 沿用已发布 `0.1.7` 的图片边界：只为精确的 `grok-4.6` 开启图片输入；`grok-4.5` 与其他动态发现的模型继续按 text-only 处理。图片发送已在真实 Harness 对话中确认可用。图片只能来自 Harness attachment service 的已验证 JPEG/PNG 投影，支持普通用户内容和一层工具结果中的图片，并固定使用 `detail:"high"`；不接受 URL、文件路径、file ID 或调用方预制的 data URL。普通 user/system 历史中的私有 reasoning 会被省略并保留相邻可见文本。
 
-每张投影图片最多 4 MiB、16,777,216 像素且任一边不超过 8192px；每次请求最多保留 8 张、投影字节合计最多 8 MiB。超限时按全局最旧优先移除图片并保留 Harness 的文本占位，最终 JSON 仍受 16 MiB 上限约束。Web/X Search、图片生成、任意文件下载、API Key 模式、多账号、企业 OIDC、ACP 与 Headless agent 封装仍不在本版本范围内；后续切片见[能力路线图](docs/11-capability-roadmap.md)。
+每张投影图片最多 4 MiB、16,777,216 像素且任一边不超过 8192px；每次请求最多保留 8 张、投影字节合计最多 8 MiB。超限时按全局最旧优先移除图片并保留 Harness 的文本占位，最终 JSON 仍受 16 MiB 上限约束。
+
+`0.1.9` 候选只为精确 `grok-4.6` 增加两个默认关闭的 Search 开关。开启后，普通对话内容以及模型据此生成的检索词会交给 xAI，并可能产生额外用量。Web/X 是服务端已执行的检索过程，不会变成 Harness 本地工具调用；回答中的 citation Markdown 保留为普通文本，结构化 URL 元数据有界校验后丢弃，插件不会打开或下载引用。搜索结果属于不可信远端数据，执行命令或修改文件前应核实来源。图片生成、任意文件下载、API Key 模式、多账号、企业 OIDC、ACP 与 Headless agent 封装仍不在本版本范围内；后续切片见[能力路线图](docs/11-capability-roadmap.md)。
 
 ## 工作原理
 
@@ -175,7 +179,7 @@ dsh-grok-provider Host
 - Host 必须有界读取官方 `auth.json`，其原始文件可能包含 refresh token；解析器不使用、不缓存、不持久化 refresh token，只保留闭合校验所需元数据与短期 access-token lease。
 - 插件不实现 refresh grant；凭据临近过期时，只能有界调用一次官方 `grok models`，再重新读取并验证官方文件。
 - 登录子进程使用固定 argv、过滤后的环境、输出上限、deadline 与取消处理，不通过 shell 启动。
-- 提示词、工具结果以及用户选择发送的图片投影会发往 xAI Grok Build 服务；插件本身不记录这些内容、原图或投影字节。
+- 提示词、工具结果、用户选择发送的图片投影，以及启用 Search 后的检索词会发往 xAI Grok Build 服务；插件本身不记录这些内容、原图、投影字节或 citation URL。
 
 完整边界见[威胁模型](docs/03-security-threat-model.md)。发现安全问题时，请阅读[安全策略](SECURITY.md)，不要在公开 Issue 中提交 token、`auth.json`、个人信息或完整诊断日志。
 
@@ -199,7 +203,7 @@ dsh-grok-provider Host
 
 如果它在 `auth.x.ai/.well-known/openid-configuration` 超时，失败发生在生成登录链接之前，不是 Provider 的浏览器按钮失效。请检查 Windows 的 DNS、HTTPS 出站、防火墙、VPN 与代理；尤其是浏览器使用 PAC/系统代理、CLI 进程却没有 `HTTPS_PROXY` 的情况。不要关闭 TLS 校验，也不要把代理凭据、登录 URL、授权码或 token 提交到 Issue。
 
-`0.1.7` 设置页会及时结算这个已知 discovery 超时并显示“浏览器登录尚未开始”；实际仍在运行的五分钟登录流程可以取消，未知 CLI 输出只显示脱敏的通用错误。这是对失败边界的准确诊断，不是插件自行打开浏览器，也不修复 Windows 的 DNS、代理、防火墙、VPN 或官方 CLI 行为。
+设置页会及时结算这个已知 discovery 超时并显示“浏览器登录尚未开始”；实际仍在运行的五分钟登录流程可以取消，未知 CLI 输出只显示脱敏的通用错误。这是对失败边界的准确诊断，不是插件自行打开浏览器，也不修复 Windows 的 DNS、代理、防火墙、VPN 或官方 CLI 行为。
 
 ### 没有看到某个模型
 
@@ -215,7 +219,7 @@ dsh-grok-provider Host
 
 ### Windows 能用吗
 
-代码与 slow-fake 已覆盖 Windows x64，正式候选仍需通过 Windows CI。官方 CLI 仍负责生成登录 URL 与打开外部浏览器；`0.1.7` 尚未在网络可达的 Windows 真机上确认浏览器弹出，因此不能表述为该问题已经修复或验证。
+代码、slow-fake 与 `0.1.9` Windows 2022 CI 已覆盖 Windows x64。官方 CLI 仍负责生成登录 URL 与打开外部浏览器；网络可达的 Windows 真机浏览器弹出尚未确认，因此不能表述为该问题已经修复或验证。
 
 ## 开发
 
@@ -250,8 +254,8 @@ npm run pack:check
 - [x] 发布 `0.1.4`：仅精确 `grok-4.6` 图片输入；user/tool-result 红蓝语义 Proxy 门禁与最终 Harness attachment 复验通过，`grok-4.5` 失败关闭为 text-only
 - [x] 发布 `0.1.5`：发布链路、账户面板能力标签与 Provider Runtime 安装回滚维护版；唯一制品、双平台 CI、签名与 SLSA provenance 均已验证
 - [x] 发布 `0.1.6`：图片历史 reasoning 兼容与 Windows 官方 CLI 分阶段 deadline 修复版；图片发送已完成真实 Harness 验证
-- [ ] 发布 `0.1.7`：Provider/CLI 双版本诊断、CLI 安装恢复、OIDC discovery 超时脱敏结算与 `IconThinkOutline16` 设置导航兼容层
-- [ ] `0.1.8` 独立切片：默认关闭、用户分别开启的 Web Search / X Search
+- [x] 发布 `0.1.7`：Provider/CLI 双版本诊断、CLI 安装恢复、OIDC discovery 超时脱敏结算与 `IconThinkOutline16` 设置导航兼容层
+- [ ] 发布 `0.1.9`：默认关闭、用户分别开启的 Web Search / X Search；`0.1.8` 已发布后撤回且 npm 版本号不可复用
 - [ ] 再后续独立切片：默认关闭的图片生成（只收内联结果，提交 Harness attachment）
 - [ ] 完成 Windows x64 独立真机验收并按需发布后续稳定修复版
 

package/SECURITY.md

@@ -4,11 +4,13 @@
 
 ## 支持范围
 
-本安全策略对应源码候选版本 `0.1.7`；npm Registry 的 `latest` 与最近发布的稳定版本均为 `0.1.6`。DeepSeek Harness、Node.js 与操作系统按发布线明确维护；Grok CLI 不使用完整版本字符串作为信任门禁，而是严格校验官方默认路径、命令能力、生产 OIDC 凭据契约和固定服务端协议。macOS arm64 已完成真实验收，`0.1.6` 的图片发送也已在真实 Harness 对话中确认可用；Windows x64 有代码与 slow-fake 覆盖，正式候选仍需通过 Windows CI，且 `0.1.7` 尚未在网络可达的 Windows 真机上确认外部浏览器弹出。
+本安全策略对应源码候选版本 `0.1.9`。`0.1.8` 曾发布后撤回，npm 版本号不可复用；npm Registry 的 `latest` 与当前可安装的稳定基线仍为 `0.1.7`。DeepSeek Harness、Node.js 与操作系统按发布线明确维护；Grok CLI 不使用完整版本字符串作为信任门禁，而是严格校验官方默认路径、命令能力、生产 OIDC 凭据契约和固定服务端协议。已发布的 `0.1.7` 基线在 macOS arm64 完成真实验收，图片发送也已在真实 Harness 对话中确认可用；`0.1.9` Search 已完成失败关闭 fixture 下的隔离 Web Harness `ctx.llm` 四场景验收。macOS 14 / Windows 2022 CI 已通过，但浏览器手工对话、OAuth、真实账号/真实 xAI Search 请求和网络可达 Windows 真机外部浏览器弹出不在该隔离验收覆盖范围内。
 
-`0.1.7` 沿用已发布 `0.1.6` 的图片边界：只为精确 `grok-4.6` 提供有界图片输入；`grok-4.5` 与所有其他模型保持 text-only。普通 user/system 历史中的私有 reasoning 会被省略并保留相邻可见 text/image；只有有效的同 Provider assistant 历史可进入加密 reasoning replay，一层 tool-result 仍只接受公开 text/image。图片只能来自 Harness attachment service 的已验证 JPEG/PNG 投影，以 `detail:"high"` 发送，并受单图字节、像素、边长、数量、总字节与最终 JSON 上限约束；URL、路径、file ID 和调用方预制 data URL 都会被拒绝。
+`0.1.9` 沿用已发布 `0.1.7` 的图片边界：只为精确 `grok-4.6` 提供有界图片输入；`grok-4.5` 与所有其他模型保持 text-only。普通 user/system 历史中的私有 reasoning 会被省略并保留相邻可见 text/image；只有有效的同 Provider assistant 历史可进入加密 reasoning replay，一层 tool-result 仍只接受公开 text/image。图片只能来自 Harness attachment service 的已验证 JPEG/PNG 投影，以 `detail:"high"` 发送，并受单图字节、像素、边长、数量、总字节与最终 JSON 上限约束；URL、路径、file ID 和调用方预制 data URL 都会被拒绝。
 
-`0.1.7` 新增独立、single-flight 的运行时诊断，只向 renderer 投影 Provider 版本及闭合的 CLI 状态/安全版本号；可执行路径、stderr、环境、代理信息和 OAuth URL 均不得越过 Host 边界。CLI 缺失或无效时登录保持禁用，并只提供官方安装入口与重新检测。只有固定 OIDC discovery 地址与 timeout 特征同时匹配时才投影脱敏的网络超时原因；未知输出折叠为通用失败。官方 CLI 仍负责生成登录 URL 与打开外部浏览器，本版不修复系统 DNS、代理、防火墙、VPN 或 CLI 行为。`IconThinkOutline16` 兼容层只在 Harness `0.1.1-rc.2` 设置导航中唯一精确匹配并随 effect 卸载清理，不扩大 Host DOM 或网络边界。固定路径/argv、最小环境、无 shell、输出上限、取消和登录后凭据重验边界不变；本版不新增认证模式、Search、生成或 endpoint，Search 顺延至独立 `0.1.8` 切片。
+`0.1.7` 的闭合运行时诊断、CLI 安装恢复、OIDC timeout 脱敏结算和 `IconThinkOutline16` 兼容层在本版保持不变。官方 CLI 仍负责生成登录 URL 与打开外部浏览器；插件不修复系统 DNS、代理、防火墙、VPN 或 CLI 行为。
+
+`0.1.9` 只为精确 `grok-4.6` 增加两个默认关闭的 Web/X Search 开关。启用后，普通对话内容与模型生成的检索词会交给 xAI，并可能产生额外用量；结果和 citation 属于可能错误或含提示注入的不可信远端数据。Provider 只允许固定 Proxy 实测的 Web lifecycle 与四项 X custom-tool 名称，不把它们映射为 Harness 本地工具，不跟随或下载 citation URL，并在观察到 Search 后放弃该响应的 encrypted reasoning replay。后台 purpose、未验证模型、未启用类别、未知事件和未闭合 lifecycle 均失败关闭。固定路径/argv、最小环境、无 shell、输出上限、凭据、固定 origin 与 URL 拒绝边界不变；本版不新增生成、认证模式或 endpoint。
 
 ## 私下报告漏洞
 
@@ -25,7 +27,7 @@
 
 ## 不属于漏洞的情况
 
-- `0.1.7` 尚未完成网络可达 Windows 真机外部浏览器弹出验收这一已披露状态；
+- 网络可达 Windows 真机外部浏览器弹出尚未完成验收这一已披露状态；
 - 上游未提供额度字段时 UI 显示 unknown；
 - 不受支持的 CLI/Harness/平台版本被明确拒绝；
 - 官方 CLI 或 xAI 服务自身的行为，且无法由本插件边界缓解的问题。
@@ -36,4 +38,4 @@
 
 ---
 
-English summary: GitHub Private vulnerability reporting is enabled and is the preferred reporting channel. The current source candidate is `0.1.7`; npm Registry `latest` and the most recent stable release are `0.1.6`, whose image sending has been confirmed in a real Harness conversation. `0.1.7` preserves bounded JPEG/PNG input with `detail:"high"` only for exact `grok-4.6` and adds closed Provider/CLI version diagnostics, missing/invalid CLI recovery, and redacted settlement of the known OIDC discovery timeout. Executable paths, stderr, environment, proxy data, and OAuth URLs do not cross the Host boundary. Windows code and slow-fake coverage are present, while the final candidate still has to pass Windows CI. The official CLI still owns sign-in URL generation and external-browser launch; `0.1.7` does not repair Windows network configuration or claim network-reachable real-device browser acceptance. The lifecycle-owned `IconThinkOutline16` compatibility layer is exact-match and fail-safe for Harness `0.1.1-rc.2`. Fixed path/argv, no-shell, credential, origin, and URL-rejection boundaries remain unchanged; Search moves to an independent `0.1.8` slice, and no generation, new auth mode, or custom endpoint is added. Never send credentials, identity data, prompts, tool arguments, cookies, image bytes, or unreviewed diagnostics.
+English summary: GitHub Private vulnerability reporting is enabled and preferred. The current source candidate is `0.1.9`. Version `0.1.8` was published and then withdrawn, and npm version numbers cannot be reused; npm Registry `latest` and the current installable stable baseline remain `0.1.7`. Bounded JPEG/PNG input with fixed `detail:"high"` remains enabled only for exact `grok-4.6`; browser sign-in diagnostics remain closed and redacted, and the official CLI still owns URL generation and browser launch. The `0.1.9` candidate adds independent, default-off Web/X Search only for exact `grok-4.6`. Its four isolated Web Harness `ctx.llm` cases and macOS 14 / Windows 2022 CI have passed under fail-closed fixtures; this does not cover manual browser conversations, OAuth, a real account, real xAI Search requests, or network-reachable Windows browser launch. When enabled, prompts and model-derived queries reach xAI and may incur additional usage; results and citations are untrusted remote data. The provider accepts only the fixed-Proxy Web lifecycle and four verified X custom-tool names, emits no Harness-local tool calls for server search, never follows citation URLs, and suppresses encrypted reasoning replay after Search. Background-purpose calls, unverified models, disabled categories, unknown events, and incomplete lifecycles fail closed. Fixed path/argv, no-shell, credential, origin, and URL-rejection boundaries remain unchanged; no image generation, new auth mode, or custom endpoint is added. Never send credentials, identity data, prompts, tool arguments, cookies, image bytes, Search contents, or unreviewed diagnostics.

package/dist/client/client.js

@@ -28,6 +28,13 @@ window.__ModuleLoader__.load({
         weekly: "每周额度", monthly: "每月额度", currentPeriod: "当前额度周期",
         remaining: "剩余", used: "已使用", resetTime: "重置时间", resetUnknown: "上游未提供重置时间",
         usageUnknown: "上游未提供使用比例", quotaUnavailable: "暂时无法读取 Grok Build 额度。",
+        searchTitle: "在线搜索", searchDescription: "默认关闭，并分别控制普通 Grok 请求是否可调用 xAI 的远端搜索；当前仅精确 grok-4.6 支持，其他模型会失败关闭；后台摘要与会话标题不会启用搜索。",
+        webSearch: "Web Search", webSearchDescription: "允许 xAI 根据对话和生成的搜索词远端查询公开网页，可能产生额外用量。",
+        xSearch: "X Search", xSearchDescription: "允许 xAI 根据对话和生成的搜索词远端查询 X 帖子、用户与线程，可能产生额外用量。",
+        searchRisk: "搜索结果和 citation 是不可信的远端内容，可能包含错误或 prompt injection。执行敏感操作前请核实来源；插件不会打开或下载引用链接。",
+        searchEnabled: "已开启", searchDisabled: "已关闭", searchLoading: "正在读取搜索设置…",
+        searchUnavailable: "搜索设置暂时不可用；开关不可操作，也不会写入未知值。", searchReadOnly: "当前搜索设置不可写。",
+        searchSaveFailed: "搜索设置保存失败，已保留 Host 当前值。",
         modelsTitle: "当前账号可用的模型", modelsDescription: "模型来自 Grok Build 动态目录；Harness 模型选择器会显示这里列出的全部模型。",
         modelsUnavailable: "暂时无法读取模型目录。", noModels: "当前账号没有返回可用模型。",
         context: "上下文", reasoning: "推理档位", defaultEffort: "默认", text: "文本输入", image: "图片输入", streaming: "流式输出", tools: "工具调用",
@@ -54,6 +61,13 @@ window.__ModuleLoader__.load({
         weekly: "Weekly quota", monthly: "Monthly quota", currentPeriod: "Current quota period",
         remaining: "remaining", used: "Used", resetTime: "Resets", resetUnknown: "Reset time was not provided",
         usageUnknown: "Usage percentage was not provided", quotaUnavailable: "Grok Build quota is temporarily unavailable.",
+        searchTitle: "Online Search", searchDescription: "Off by default. These settings independently allow regular Grok requests to use xAI remote search. Only exact grok-4.6 is supported; other models fail closed. Background summaries and conversation titles do not use Search.",
+        webSearch: "Web Search", webSearchDescription: "Allows xAI to remotely query public web pages from the conversation and generated search terms, which may incur additional usage.",
+        xSearch: "X Search", xSearchDescription: "Allows xAI to remotely query X posts, users, and threads from the conversation and generated search terms, which may incur additional usage.",
+        searchRisk: "Search results and citations are untrusted remote content and may contain errors or prompt injection. Verify sources before sensitive actions; the plugin does not open or download citation links.",
+        searchEnabled: "On", searchDisabled: "Off", searchLoading: "Reading Search settings…",
+        searchUnavailable: "Search settings are temporarily unavailable. Controls are disabled and no unknown value will be written.", searchReadOnly: "Search settings are currently read-only.",
+        searchSaveFailed: "Search settings could not be saved. The current Host value was preserved.",
         modelsTitle: "Models available to this account", modelsDescription: "Models come from the live Grok Build catalog; every model listed here remains visible in the Harness model selector.",
         modelsUnavailable: "The model catalog is temporarily unavailable.", noModels: "This account returned no available models.",
         context: "Context", reasoning: "Reasoning", defaultEffort: "default", text: "Text input", image: "Image input", streaming: "Streaming", tools: "Tool calling",
@@ -61,6 +75,17 @@ window.__ModuleLoader__.load({
       },
     }
 
+    function decodeSearchConfig(value) {
+      if (value === null || typeof value !== "object" || Array.isArray(value)) return undefined
+      const webSearch = Object.getOwnPropertyDescriptor(value, "webSearch")
+      const xSearch = Object.getOwnPropertyDescriptor(value, "xSearch")
+      if (
+        !webSearch || !("value" in webSearch) || typeof webSearch.value !== "boolean"
+        || !xSearch || !("value" in xSearch) || typeof xSearch.value !== "boolean"
+      ) return undefined
+      return Object.freeze({ webSearch: webSearch.value, xSearch: xSearch.value })
+    }
+
     const navIconMarker = "data-dsh-grok-provider-nav-icon"
     const navIconStyleSelector = 'style[data-plugin-nav-icon="dsh-grok-provider"]'
     const navIconStateKey = Symbol.for("dsh-grok-provider.settings-nav-icon.v1")
@@ -178,6 +203,7 @@ window.__ModuleLoader__.load({
       .dsh-grok-runtime{display:flex;flex-wrap:wrap;gap:6px 14px;margin-top:10px;color:var(--dsw-alias-label-tertiary,var(--dsw-alias-label-secondary));font-size:11px;line-height:18px}.dsh-grok-runtime strong{color:var(--dsw-alias-label-secondary);font-weight:600}.dsh-grok-install{margin-top:13px;padding:12px 13px;border:1px solid rgb(217 155 43 / 30%);border-radius:11px;background:rgb(217 155 43 / 8%)}.dsh-grok-install strong{display:block;font-size:12px}.dsh-grok-install p{margin:4px 0 10px;color:var(--dsw-alias-label-secondary);font-size:11px;line-height:18px}.dsh-grok-link{display:inline-flex;align-items:center;height:32px;border-radius:999px;padding:0 12px;color:var(--dsw-static-deepseek-500,#4d6bfe);text-decoration:none;background:rgb(77 107 254 / 8%);font-size:11px}.dsh-grok-link:hover{text-decoration:underline}
       .dsh-grok-divider{height:1px;margin:18px 0;background:rgb(190 93 138 / 20%)}.dsh-grok-section-head{display:flex;align-items:center;justify-content:space-between;gap:12px}.dsh-grok-section-head h3{margin:0;font-size:15px;line-height:23px}.dsh-grok-section-head .dsh-grok-button{height:30px;padding:0 11px}
       .dsh-grok-quota{margin-top:15px}.dsh-grok-quota-row{display:flex;align-items:baseline;justify-content:space-between;gap:12px;margin-bottom:8px;color:var(--dsw-alias-label-secondary);font-size:13px}.dsh-grok-quota-name{color:var(--dsw-alias-label-primary);font-weight:600}.dsh-grok-progress{height:9px;overflow:hidden;border-radius:999px;background:rgb(190 93 138 / 13%)}.dsh-grok-progress-fill{height:100%;border-radius:inherit;background:linear-gradient(90deg,#d7448a,#ea1768);transition:width .25s ease}.dsh-grok-quota-meta{display:flex;flex-wrap:wrap;justify-content:space-between;gap:7px;margin-top:9px;color:var(--dsw-alias-label-secondary);font-size:12px;line-height:18px}.dsh-grok-muted{margin:12px 0 0;color:var(--dsw-alias-label-secondary);font-size:12px;line-height:19px}
+      .dsh-grok-search-head h3{margin:0;font-size:16px;line-height:24px}.dsh-grok-search-head p{margin:5px 0 0;color:var(--dsw-alias-label-secondary);font-size:12px;line-height:19px}.dsh-grok-search-list{margin-top:14px;border-top:1px solid rgb(190 93 138 / 18%)}.dsh-grok-search-row{display:grid;grid-template-columns:minmax(0,1fr) auto;align-items:center;gap:18px;padding:14px 0;border-bottom:1px solid rgb(190 93 138 / 18%)}.dsh-grok-search-copy strong{display:block;font-size:13px;line-height:20px}.dsh-grok-search-copy p{margin:3px 0 0;color:var(--dsw-alias-label-secondary);font-size:11px;line-height:18px}.dsh-grok-switch{position:relative;width:44px;height:25px;flex:none;border:0;border-radius:999px;padding:0;background:var(--dsw-alias-interactive-bg-hover);cursor:pointer;transition:background .18s ease}.dsh-grok-switch::after{content:"";position:absolute;top:3px;left:3px;width:19px;height:19px;border-radius:50%;background:var(--dsw-alias-bg-layer-1);box-shadow:0 1px 3px rgb(0 0 0 / 18%);transition:transform .18s ease}.dsh-grok-switch[data-checked="true"]{background:var(--dsw-static-deepseek-500,#4d6bfe)}.dsh-grok-switch[data-checked="true"]::after{transform:translateX(19px)}.dsh-grok-switch:disabled{cursor:default;opacity:.48}.dsh-grok-search-risk{margin:13px 0 0;padding:11px 12px;border-radius:10px;color:var(--dsw-alias-label-secondary);background:rgb(217 155 43 / 8%);font-size:11px;line-height:18px}.dsh-grok-search-status{margin:11px 0 0;color:var(--dsw-alias-label-secondary);font-size:11px;line-height:18px}.dsh-grok-visually-hidden{position:absolute;width:1px;height:1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap;clip-path:inset(50%)}
       .dsh-grok-models-head{padding:20px 20px 0}.dsh-grok-models-head h3{margin:0;font-size:16px;line-height:24px}.dsh-grok-models-head p{margin:5px 0 0;color:var(--dsw-alias-label-secondary);font-size:12px;line-height:19px}.dsh-grok-model-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px;padding:16px 20px 20px}.dsh-grok-model{min-width:0;border:1px solid var(--dsw-alias-border-l2);border-radius:13px;padding:14px;background:var(--dsw-alias-bg-layer-1)}.dsh-grok-model-title{display:flex;align-items:baseline;justify-content:space-between;gap:8px}.dsh-grok-model-title strong{overflow-wrap:anywhere;font-size:14px}.dsh-grok-model-id{overflow-wrap:anywhere;color:var(--dsw-alias-label-tertiary,var(--dsw-alias-label-secondary));font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:10px}.dsh-grok-model-description{margin:5px 0 10px;color:var(--dsw-alias-label-secondary);font-size:11px;line-height:17px}.dsh-grok-badges{display:flex;flex-wrap:wrap;gap:5px}.dsh-grok-badge{border-radius:999px;padding:2px 8px;color:var(--dsw-alias-label-secondary);background:var(--dsw-alias-interactive-bg-hover);font-size:10px;line-height:18px}.dsh-grok-badge[data-accent="true"]{color:#a9326b;background:rgb(215 68 138 / 11%)}.dsh-grok-efforts{margin-top:10px;color:var(--dsw-alias-label-secondary);font-size:10px;line-height:17px}.dsh-grok-footer{padding:0 20px 16px;color:var(--dsw-alias-label-tertiary,var(--dsw-alias-label-secondary));font-size:10px}
       .dsh-grok-notice{padding:13px 14px;border:1px solid rgb(229 72 77 / 28%);border-radius:11px;color:var(--dsw-alias-label-secondary);background:rgb(229 72 77 / 7%);font-size:12px;line-height:19px}.dsh-grok-error{margin:10px 0 0;color:var(--dsw-static-red-500,#e5484d);font-size:12px;line-height:19px}
       @media(max-width:680px){.dsh-grok-panel-inner,.dsh-grok-models-head{padding:16px}.dsh-grok-model-grid{grid-template-columns:1fr;padding:14px 16px 16px}.dsh-grok-account-head{align-items:flex-start;flex-direction:column}.dsh-grok-quota-row{align-items:flex-start;flex-direction:column;gap:3px}}
@@ -189,7 +215,7 @@ window.__ModuleLoader__.load({
       document.head.appendChild(style)
     }
 
-    function GrokSettings({ connection, t }) {
+    function GrokSettings({ connection, t, searchSettings }) {
       const [status, setStatus] = React.useState()
       const [dashboard, setDashboard] = React.useState()
       const [busy, setBusy] = React.useState(false)
@@ -200,6 +226,22 @@ window.__ModuleLoader__.load({
       const [diagnosticsError, setDiagnosticsError] = React.useState(false)
       const [statusEpoch] = React.useState(() => ({ value: 0 }))
       const [diagnosticsEpoch] = React.useState(() => ({ value: 0 }))
+      const [searchSnapshot, setSearchSnapshot] = React.useState(() => searchSettings.getSnapshot())
+      const [searchSaving, setSearchSaving] = React.useState()
+      const [searchSaveError, setSearchSaveError] = React.useState(false)
+      const [searchWrite] = React.useState(() => ({ field: undefined }))
+      React.useEffect(() => {
+        let active = true
+        const publish = () => {
+          if (active) setSearchSnapshot(searchSettings.getSnapshot())
+        }
+        const unsubscribe = searchSettings.subscribe(publish)
+        publish()
+        return () => {
+          active = false
+          unsubscribe()
+        }
+      }, [searchSettings])
       const call = React.useCallback(async (endpoint, payload = {}) => {
         const result = await connection.rpc.call("/grok-auth", endpoint, payload)
         if (!result || result.ok !== true) throw new Error("Grok account RPC failed")
@@ -314,6 +356,31 @@ window.__ModuleLoader__.load({
         statusEpoch.value += 1
         await Promise.all([refreshStatus({ includeDashboard: true }), refreshDiagnostics()])
       })
+      const updateSearchSetting = async (field, enabled) => {
+        const current = searchSettings.getSnapshot()
+        if (
+          current.status !== "ready" || current.writable !== true
+          || typeof current.value?.[field] !== "boolean" || current.value[field] === enabled
+          || searchWrite.field !== undefined
+        ) return
+        searchWrite.field = field
+        setSearchSaving(field)
+        setSearchSaveError(false)
+        try {
+          await searchSettings.set(field, enabled)
+          const settled = searchSettings.getSnapshot()
+          if (
+            settled.status !== "ready"
+            || typeof settled.value?.[field] !== "boolean"
+            || settled.value[field] !== enabled
+          ) setSearchSaveError(true)
+        } catch {
+          setSearchSaveError(true)
+        } finally {
+          searchWrite.field = undefined
+          setSearchSaving(undefined)
+        }
+      }
 
       if (!connection.isLoopback) return React.createElement("section", { className: "dsh-grok-page" },
         React.createElement("h2", null, t("title")), React.createElement("p", { className: "dsh-grok-notice" }, t("loopback")))
@@ -380,6 +447,25 @@ window.__ModuleLoader__.load({
           effortText && React.createElement("div", { className: "dsh-grok-efforts" }, `${t("reasoning")}：${effortText}`))
       }
 
+      const searchReady = searchSnapshot.status === "ready"
+      const searchWritable = searchReady && searchSnapshot.writable === true
+      const searchStatus = searchSnapshot.status === "loading" ? t("searchLoading")
+        : searchSnapshot.status !== "ready" ? t("searchUnavailable")
+          : !searchWritable ? t("searchReadOnly") : undefined
+      const renderSearchSetting = (field, labelKey, descriptionKey) => {
+        const enabled = searchReady && searchSnapshot.value?.[field] === true
+        const disabled = !searchWritable || searchSaving !== undefined
+        return React.createElement("div", { className: "dsh-grok-search-row", key: field },
+          React.createElement("div", { className: "dsh-grok-search-copy" },
+            React.createElement("strong", null, t(labelKey)),
+            React.createElement("p", null, t(descriptionKey))),
+          React.createElement("button", {
+            className: "dsh-grok-switch", type: "button", role: "switch",
+            "aria-checked": enabled, "aria-label": `${t(labelKey)}：${t(enabled ? "searchEnabled" : "searchDisabled")}`,
+            "data-checked": enabled, disabled, onClick: () => updateSearchSetting(field, !enabled),
+          }, React.createElement("span", { className: "dsh-grok-visually-hidden" }, t(enabled ? "searchEnabled" : "searchDisabled"))))
+      }
+
       const models = dashboard?.models
       return React.createElement("section", { className: "dsh-grok-page" },
         React.createElement("h2", null, t("title")), React.createElement("p", { className: "dsh-grok-description" }, t("description")),
@@ -413,6 +499,15 @@ window.__ModuleLoader__.load({
             React.createElement("div", { className: "dsh-grok-section-head" }, React.createElement("h3", null, t("usage")),
               React.createElement("button", { className: "dsh-grok-button", type: "button", disabled: busy || !available, onClick: manualRefresh }, busy ? t("refreshing") : t("refresh"))),
             renderQuota(), error && React.createElement("p", { className: "dsh-grok-error" }, t("unavailable")))),
+          React.createElement("article", { className: "dsh-grok-panel" }, React.createElement("div", { className: "dsh-grok-panel-inner" },
+            React.createElement("div", { className: "dsh-grok-search-head" },
+              React.createElement("h3", null, t("searchTitle")), React.createElement("p", null, t("searchDescription"))),
+            React.createElement("div", { className: "dsh-grok-search-list" },
+              renderSearchSetting("webSearch", "webSearch", "webSearchDescription"),
+              renderSearchSetting("xSearch", "xSearch", "xSearchDescription")),
+            React.createElement("p", { className: "dsh-grok-search-risk" }, t("searchRisk")),
+            searchStatus && React.createElement("p", { className: "dsh-grok-search-status", role: "status", "aria-live": "polite" }, searchStatus),
+            searchSaveError && React.createElement("p", { className: "dsh-grok-error", role: "alert" }, t("searchSaveFailed")))),
           React.createElement("article", { className: "dsh-grok-panel" },
             React.createElement("div", { className: "dsh-grok-models-head" }, React.createElement("h3", null, t("modelsTitle")), React.createElement("p", null, t("modelsDescription"))),
             React.createElement("div", { className: "dsh-grok-model-grid" },
@@ -432,14 +527,15 @@ window.__ModuleLoader__.load({
       return new Intl.NumberFormat().format(value)
     }
 
-    const inject = ["slots", "locale", "connection"]
+    const inject = ["slots", "locale", "connection", "settingsScope"]
     function apply(ctx) {
       ctx.effect(() => ctx.locale.register(namespace, dictionaries), "dsh-grok: dictionaries")
       ctx.effect(() => installSettingsNavIcon(), "dsh-grok: settings nav icon")
       const t = ctx.locale.bind(namespace)
+      const searchSettings = ctx.settingsScope.bind({ namespace: "llm-grok", decode: decodeSearchConfig })
       ctx.slots.inject("settings.section", () => ctx.slots.register({
         name: "settings.section", id: "grok-auth", order: 45, label: () => t("nav"), locale: namespace,
-        inject: () => ({ connection: ctx.connection, t }),
+        inject: () => ({ connection: ctx.connection, t, searchSettings }),
       }, GrokSettings))
     }
     module.exports.inject = inject

package/dist/host/index.mjs

@@ -28,14 +28,22 @@ import { createRuntimeDiagnostics } from "../internal/runtime-diagnostics.mjs"
 export const name = "llm-grok"
 export const inject = ["llm"]
 
-export const Config = Schema.object({})
+export const Config = Schema.object({
+  webSearch: Schema.boolean().default(false).description("Allow xAI Web Search for regular Grok requests"),
+  xSearch: Schema.boolean().default(false).description("Allow xAI X Search for regular Grok requests"),
+})
 
-export function apply(ctx) {
+export function apply(ctx, config) {
   const platform = process.platform
   if (platform !== "darwin" && platform !== "win32") {
     throw new TypeError("dsh-grok-provider supports macOS and Windows")
   }
 
+  const searchPolicy = Object.freeze({
+    webSearch: config.webSearch,
+    xSearch: config.xSearch,
+  })
+
   const homeDir = os.homedir()
   let refreshOfficialCredential
   let inspectOfficialCli
@@ -65,6 +73,7 @@ export function apply(ctx) {
       getGeneration,
       getAttachmentStore: () => ctx.get("attachments"),
       mapError: mapLlmError,
+      searchPolicy,
     }),
   })
   const authController = createAuthController({