dsh-provider-qoder 0.2.1 → 0.3.0

package/lib/index.js

@@ -4,6 +4,7 @@ import crypto, { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
+import { WebError } from "@deepseek-ai/dsh-web";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
 //#region src/qoder/catalog.ts
 const discoveredMetadataKeys = [
@@ -234,6 +235,12 @@ function getQoderUserStatusUrl(region = "global") {
 	const { openApiUrl } = resolveQoderEndpoints(region);
 	return `${openApiUrl}/api/v3/user/status`;
 }
+/** Path of the center web search route. */
+const qoderWebSearchPath = "/api/v1/webSearch/oneSearch";
+function getQoderWebSearchUrl(region = "global") {
+	const { centerUrl } = resolveQoderEndpoints(region);
+	return `${centerUrl.replace(/\/+$/u, "")}/algo${qoderWebSearchPath}?Encode=1`;
+}
 //#endregion
 //#region src/qoder/errors.ts
 /**
@@ -333,7 +340,9 @@ function redactLogValue(value, depth = 0) {
 	if (value instanceof Error) return {
 		name: value.name,
 		message: redactString(value.message),
-		..."code" in value ? { code: redactLogValue(value.code, depth + 1) } : {}
+		..."code" in value ? { code: redactLogValue(value.code, depth + 1) } : {},
+		..."cause" in value ? { cause: redactLogValue(value.cause, depth + 1) } : {},
+		...value instanceof AggregateError ? { errors: redactLogValue(value.errors, depth + 1) } : {}
 	};
 	if (Array.isArray(value)) return value.slice(0, maxEntries).map((item) => redactLogValue(item, depth + 1));
 	return Object.fromEntries(Object.entries(value).slice(0, maxEntries).map(([key, item]) => {
@@ -448,6 +457,7 @@ function buildAuthHeaders(body, requestURL, creds) {
 		"X-Request-Id": crypto.randomUUID()
 	};
 }
+const defaultResponseHeaderTimeoutMs = 6e4;
 const defaultMaxJsonBytes = 2 * 1024 * 1024;
 const defaultMaxErrorBytes = 16 * 1024;
 const metadataRetryBaseDelayMs = 200;
@@ -1426,13 +1436,20 @@ function normalizeQuota(raw) {
 		unit
 	};
 }
+/**
+* Normalize an epoch-millis (or parseable date string) expiry to ISO-8601.
+*
+* The provider uses the int64 maximum as a "never expires" sentinel, which is
+* outside the `Date` range: an unusable value resolves to `undefined` instead
+* of throwing, so one bad field cannot abort the whole account read.
+*/
 function normalizeExpiresAt(rawExpires) {
 	if (rawExpires === void 0 || rawExpires === null) return void 0;
-	if (typeof rawExpires === "number" && rawExpires > 0) return new Date(rawExpires).toISOString();
-	if (typeof rawExpires === "string" && rawExpires.length > 0) {
-		const parsed = Date.parse(rawExpires);
-		if (!Number.isNaN(parsed) && parsed > 0) return new Date(parsed).toISOString();
-	}
+	const parsed = typeof rawExpires === "number" ? rawExpires : typeof rawExpires === "string" && rawExpires.length > 0 ? Date.parse(rawExpires) : NaN;
+	if (!Number.isFinite(parsed) || parsed <= 0) return void 0;
+	const date = new Date(parsed);
+	if (!Number.isFinite(date.getTime())) return void 0;
+	return date.toISOString();
 }
 function asString(value) {
 	return typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
@@ -1447,6 +1464,76 @@ function asNumber(value) {
 		if (Number.isFinite(num)) return num;
 	}
 }
+/**
+* The provider names a resource package with internal identifiers (campaign
+* ids) that must never reach the UI, so the subscriber-facing copy only ever
+* comes from `displayLabels`.
+*/
+function findDisplayLabel(raw, dimension) {
+	if (!Array.isArray(raw)) return void 0;
+	for (const entry of raw) {
+		if (!entry || typeof entry !== "object") continue;
+		const obj = entry;
+		if (asString(obj.dimension) === dimension) return obj;
+	}
+}
+/**
+* Normalize one `displayLabels` entry into language-tagged copy.
+*
+* The provider's value lives under `valueI18n`/`value_i18n`, keyed by language
+* tag, plus `value` as the untagged fallback. An entry with neither is dropped
+* rather than surfaced as an empty label.
+*/
+function normalizeLocalizedText(raw) {
+	if (!raw || typeof raw !== "object") return void 0;
+	const obj = raw;
+	const values = {};
+	const localized = obj.valueI18n ?? obj.value_i18n;
+	if (localized && typeof localized === "object") for (const [locale, text] of Object.entries(localized)) {
+		const resolved = asString(text);
+		if (resolved !== void 0) values[locale] = resolved;
+	}
+	const fallback = asString(obj.value);
+	if (fallback === void 0 && Object.keys(values).length === 0) return void 0;
+	return {
+		values,
+		fallback: fallback ?? ""
+	};
+}
+/**
+* Normalize the dedicated (entitlement-scoped) resource packages.
+*
+* Copy is read from `displayLabels` only, never from `name`/`description`,
+* which carry internal campaign identifiers. Entries without a usable size are
+* dropped and a non-array value yields `undefined`, so an unexpected payload
+* never fails the account read that also feeds the model catalog.
+*/
+function normalizeResourcePackages(raw) {
+	if (!Array.isArray(raw)) return void 0;
+	const packages = [];
+	for (const entry of raw) {
+		if (!entry || typeof entry !== "object") continue;
+		const obj = entry;
+		const quota = normalizeQuota(obj);
+		if (quota === void 0 || quota.total <= 0 && quota.used <= 0 && quota.remaining <= 0) continue;
+		const id = asString(obj.id);
+		const title = normalizeLocalizedText(findDisplayLabel(obj.displayLabels ?? obj.display_labels, "title"));
+		const description = normalizeLocalizedText(findDisplayLabel(obj.displayLabels ?? obj.display_labels, "description"));
+		const expiresAt = normalizeExpiresAt(obj.expiresAt);
+		const available = asBoolean(obj.available);
+		const status = asString(obj.status);
+		packages.push({
+			...id !== void 0 ? { id } : {},
+			...title !== void 0 ? { title } : {},
+			...description !== void 0 ? { description } : {},
+			...quota,
+			...expiresAt !== void 0 ? { expiresAt } : {},
+			...available !== void 0 ? { available } : {},
+			...status !== void 0 ? { status } : {}
+		});
+	}
+	return packages.length > 0 ? packages : void 0;
+}
 function normalizeOrganization(raw) {
 	if (!raw || typeof raw !== "object") return void 0;
 	const obj = raw;
@@ -1569,6 +1656,14 @@ var QoderUsageReader = class {
 		if (pat) this.cache.delete(`${this.region}:${opaqueCredentialKey(pat)}`);
 		else this.cache.clear();
 	}
+	/**
+	* Read `GET /api/v2/quota/usage` and normalize it for the host/client seam.
+	*
+	* The `raw` echo keeps the upstream fields for diagnostics, but never
+	* `dedicatedResourcePackages`: those entries carry the campaign identifiers
+	* that the normalized list deliberately discards, and this payload crosses
+	* the seam into the browser.
+	*/
 	async fetchUsage(jobToken, signal) {
 		const data = await openApiJsonRequest(this.fetchImpl, {
 			url: getQoderUsageUrl(this.region),
@@ -1579,13 +1674,17 @@ var QoderUsageReader = class {
 			operation: "Usage",
 			logCategory: "account.usage"
 		});
+		const dedicatedResourcePackages = normalizeResourcePackages(data.dedicatedResourcePackages);
+		const rawUsage = { ...data };
+		delete rawUsage.dedicatedResourcePackages;
 		return {
 			userQuota: normalizeQuota(data.userQuota),
 			orgResourcePackage: normalizeQuota(data.orgResourcePackage),
+			...dedicatedResourcePackages !== void 0 ? { dedicatedResourcePackages } : {},
 			totalUsagePercentage: typeof data.totalUsagePercentage === "number" ? data.totalUsagePercentage : void 0,
 			isQuotaExceeded: typeof data.isQuotaExceeded === "boolean" ? data.isQuotaExceeded : false,
 			expiresAt: normalizeExpiresAt(data.expiresAt),
-			raw: data
+			raw: rawUsage
 		};
 	}
 	async fetchPlan(jobToken, signal) {
@@ -1659,6 +1758,163 @@ function qoderEncodeBody(plaintext) {
 	}
 	return out;
 }
+function searchAborted(signal, fallback) {
+	return new WebError("Web search was cancelled.", "WEB_ABORTED", { cause: signal?.aborted === true ? signal.reason : fallback });
+}
+function isAbortError(error) {
+	return error instanceof DOMException && error.name === "AbortError";
+}
+var QoderSearchClient = class {
+	fetchImpl;
+	region;
+	logger;
+	timeoutMs;
+	resolveCredentials;
+	refreshCredentials;
+	now;
+	constructor(options) {
+		this.fetchImpl = options.fetch ?? globalThis.fetch;
+		this.region = options.region ?? "global";
+		this.logger = options.logger;
+		this.timeoutMs = options.timeoutMs ?? 3e4;
+		this.resolveCredentials = options.resolveCredentials;
+		this.refreshCredentials = options.refreshCredentials;
+		this.now = options.now ?? Date.now;
+	}
+	async search(request, signal) {
+		if (signal?.aborted) throw searchAborted(signal);
+		let credentials = await this.resolveCredentials(signal);
+		if (signal?.aborted) throw searchAborted(signal);
+		const first = await this.attempt(request, credentials, signal);
+		if (first.result !== void 0) return first.result;
+		if (first.retryable && this.refreshCredentials !== void 0) {
+			this.logger?.debug?.("[web-search] refreshing credentials before retry", {
+				region: this.region,
+				reason: first.reason
+			});
+			try {
+				credentials = await this.refreshCredentials(signal);
+			} catch (error) {
+				if (signal?.aborted) throw searchAborted(signal, error);
+				throw new WebError(`Qoder credential refresh failed: ${String(error)}`, "WEB_PROVIDER_ERROR", { cause: error });
+			}
+			const second = await this.attempt(request, credentials, signal);
+			if (second.result !== void 0) return second.result;
+			throw new WebError(`Qoder web search failed: ${second.reason}`, "WEB_PROVIDER_ERROR");
+		}
+		throw new WebError(`Qoder web search failed: ${first.reason}`, "WEB_PROVIDER_ERROR");
+	}
+	async attempt(request, credentials, signal) {
+		const url = getQoderWebSearchUrl(this.region);
+		const innerPayload = {
+			query: request.query,
+			timeRange: "NoLimit",
+			contents: {
+				mainText: false,
+				markdownText: false,
+				summary: false
+			}
+		};
+		const encodedBody = qoderEncodeBody(JSON.stringify({
+			payload: JSON.stringify(innerPayload),
+			encodeVersion: "1"
+		}));
+		const timeout = AbortSignal.timeout(this.timeoutMs);
+		const requestSignal = signal !== void 0 ? AbortSignal.any([signal, timeout]) : timeout;
+		const startedAt = this.now();
+		this.logger?.debug?.("[web-search] started", {
+			region: this.region,
+			url,
+			query: request.query
+		});
+		let response;
+		try {
+			const authHeaders = buildAuthHeaders(encodedBody, url, credentials);
+			response = await this.fetchImpl(url, {
+				method: "POST",
+				headers: {
+					...authHeaders,
+					"Content-Type": "application/json",
+					"Accept": "application/json",
+					"Accept-Encoding": "identity"
+				},
+				body: encodedBody,
+				signal: requestSignal
+			});
+		} catch (error) {
+			if (signal?.aborted) throw searchAborted(signal, error);
+			if (timeout.aborted || isAbortError(error)) return {
+				retryable: false,
+				reason: "request timed out"
+			};
+			this.logger?.warn?.("[web-search] network failure", { region: this.region }, redactLogValue(error));
+			return {
+				retryable: false,
+				reason: `network failure: ${String(error)}`
+			};
+		}
+		const elapsedMs = this.now() - startedAt;
+		this.logger?.debug?.("[web-search] response received", {
+			status: response.status,
+			elapsedMs
+		});
+		if (!response.ok) return {
+			retryable: response.status === 401 || response.status === 403,
+			reason: `HTTP ${response.status} ${response.statusText}`.trim()
+		};
+		let text;
+		try {
+			text = await readLimitedText(response, defaultMaxJsonBytes, "Qoder web search response");
+		} catch (error) {
+			if (signal?.aborted) throw searchAborted(signal, error);
+			return {
+				retryable: false,
+				reason: `failed to read response body: ${String(error)}`
+			};
+		}
+		let parsed;
+		try {
+			parsed = JSON.parse(text);
+		} catch (error) {
+			return {
+				retryable: false,
+				reason: `invalid JSON response: ${String(error)}`
+			};
+		}
+		if (parsed.errorCode != null && parsed.errorCode !== 0) return {
+			retryable: false,
+			reason: `backend error code ${parsed.errorCode}: ${parsed.errorMsg ?? "unknown"}`
+		};
+		const rawItems = parsed.pageItems ?? [];
+		const sources = [];
+		const seen = /* @__PURE__ */ new Set();
+		for (const item of rawItems) {
+			if (!item.link || item.link.trim().length === 0) continue;
+			const link = item.link.trim();
+			if (seen.has(link)) continue;
+			seen.add(link);
+			sources.push({
+				url: link,
+				...item.title !== void 0 && item.title.trim().length > 0 ? { title: item.title.trim() } : {},
+				...item.snippet !== void 0 && item.snippet.trim().length > 0 ? { snippet: item.snippet.trim() } : {},
+				...item.publishedAt !== void 0 && item.publishedAt.trim().length > 0 ? { publishedAt: item.publishedAt.trim() } : {}
+			});
+		}
+		this.logger?.debug?.("[web-search] succeeded", {
+			region: this.region,
+			resultsCount: sources.length,
+			elapsedMs
+		});
+		return {
+			result: {
+				sources,
+				truncated: false
+			},
+			retryable: false,
+			reason: ""
+		};
+	}
+};
 //#endregion
 //#region src/qoder/transport/wire/thinking.ts
 const thinkingTags = [{
@@ -1866,10 +2122,18 @@ function finishKind(value) {
 	if (value === void 0 || value === null || value === "") return void 0;
 	if (value === "stop") return "stop";
 	if (value === "length") return "max-tokens";
-	if (value === "tool_calls" || value === "toolUse") return "tool-calls";
+	if (value === "tool_calls" || value === "toolUse" || value === "function_call") return "tool-calls";
 	if (value === "content_filter") throw new QoderLlmError("Qoder blocked the response through its content filter.", "PROVIDER_ERROR");
 	throw malformed(`Qoder returned unknown finish reason "${value}".`);
 }
+/** Whether a choice delta streams content, reasoning, or tool-call data. Control-only frames do not. */
+function carriesStreamDelta(delta) {
+	if (delta == null) return false;
+	if (Array.isArray(delta.tool_calls) && delta.tool_calls.length > 0) return true;
+	if (typeof delta.content === "string" && delta.content) return true;
+	if (typeof delta.reasoning_content === "string" && delta.reasoning_content) return true;
+	return false;
+}
 async function* parseQoderSse(stream, options = {}) {
 	const reader = stream.getReader();
 	const decoder = new TextDecoder();
@@ -1882,6 +2146,7 @@ async function* parseQoderSse(stream, options = {}) {
 	let activeTextual;
 	let pendingUsage;
 	let terminalKind = "stop";
+	let sawFinishReason = false;
 	let sawContent = false;
 	const maxBufferChars = options.maxBufferChars ?? 2097152;
 	const closeTextual = () => {
@@ -1985,7 +2250,11 @@ async function* parseQoderSse(stream, options = {}) {
 				const innerChunk = parseInner(body);
 				pendingUsage = tokenUsage(innerChunk) ?? pendingUsage;
 				for (const choice of innerChunk.choices ?? []) {
-					terminalKind = finishKind(choice.finish_reason) ?? terminalKind;
+					const kind = finishKind(choice.finish_reason);
+					if (kind !== void 0) {
+						terminalKind = kind;
+						sawFinishReason = true;
+					} else if (carriesStreamDelta(choice.delta)) sawFinishReason = false;
 					const delta = choice.delta;
 					if (!delta) continue;
 					if (typeof delta.reasoning_content === "string" && delta.reasoning_content) for (const segment of thinkingParser.pushReasoning(delta.reasoning_content)) for (const chunk of appendSegment(segment)) yield chunk;
@@ -2055,7 +2324,7 @@ async function* parseQoderSse(stream, options = {}) {
 		await reader.cancel().catch(() => void 0);
 		reader.releaseLock();
 	}
-	if (!sawDone) throw new QoderLlmError("SSE stream ended prematurely without [DONE].", "TRANSPORT");
+	if (!sawDone && !sawFinishReason) throw new QoderLlmError("SSE stream ended prematurely without [DONE].", "TRANSPORT");
 	for (const segment of thinkingParser.finish()) for (const chunk of appendSegment(segment)) yield chunk;
 	for (const chunk of closeTextual()) yield chunk;
 	for (const [, state] of [...toolCalls.entries()].sort(([left], [right]) => left - right)) {
@@ -2123,7 +2392,10 @@ async function* streamQoderChat(options, model, credentials, messages, dependenc
 	let headerTimedOut = false;
 	let idleTimedOut = false;
 	let idleTimer;
+	let chunkCount = 0;
+	let reqId;
 	const startedAt = performance.now();
+	let lastActivityAt = startedAt;
 	const onCallerAbort = () => requestController.abort(options.signal?.reason);
 	options.signal?.addEventListener("abort", onCallerAbort, { once: true });
 	const headerTimer = setTimeout(() => {
@@ -2131,6 +2403,7 @@ async function* streamQoderChat(options, model, credentials, messages, dependenc
 		requestController.abort("response header timeout");
 	}, dependencies.responseHeaderTimeoutMs);
 	const resetIdleTimer = () => {
+		lastActivityAt = performance.now();
 		if (idleTimer !== void 0) clearTimeout(idleTimer);
 		idleTimer = setTimeout(() => {
 			idleTimedOut = true;
@@ -2154,34 +2427,79 @@ async function* streamQoderChat(options, model, credentials, messages, dependenc
 			signal: requestController.signal
 		});
 		clearTimeout(headerTimer);
+		reqId = qoderRequestId(response.headers);
 		dependencies.logger?.debug?.("[Qoder Stream] Response headers received", {
 			region: dependencies.region,
 			status: response.status,
 			durationMs: Math.round(performance.now() - startedAt),
-			...qoderRequestId(response.headers) === void 0 ? {} : { requestId: qoderRequestId(response.headers) }
+			...reqId === void 0 ? {} : { requestId: reqId }
 		});
 		resetIdleTimer();
 		if (!response.ok) throw qoderHttpError(`Qoder upstream service returned HTTP ${response.status}.`, response);
 		if (!response.body) throw new QoderLlmError("Qoder response contains no readable body stream.", "EMPTY_RESPONSE");
-		yield* parseQoderSse(response.body, { onActivity: resetIdleTimer });
+		let firstChunkDurationMs;
+		let tokenUsage;
+		let finishReason;
+		const streamStartedAt = performance.now();
+		for await (const chunk of parseQoderSse(response.body, { onActivity: resetIdleTimer })) {
+			chunkCount++;
+			if (firstChunkDurationMs === void 0) {
+				firstChunkDurationMs = Math.round(performance.now() - startedAt);
+				dependencies.logger?.debug?.("[Qoder Stream] First chunk received", {
+					durationMs: firstChunkDurationMs,
+					...reqId === void 0 ? {} : { requestId: reqId }
+				});
+			}
+			if (chunk.type === "usage") tokenUsage = chunk.usage;
+			if (chunk.type === "finish") finishReason = chunk.reason.kind;
+			yield chunk;
+		}
+		dependencies.logger?.debug?.("[Qoder Stream] Stream completed", {
+			durationMs: Math.round(performance.now() - startedAt),
+			streamDurationMs: Math.round(performance.now() - streamStartedAt),
+			chunkCount,
+			...finishReason === void 0 ? {} : { finishReason },
+			...tokenUsage === void 0 ? {} : { usage: tokenUsage },
+			...reqId === void 0 ? {} : { requestId: reqId }
+		});
 	} catch (error) {
 		if (options.signal?.aborted) throw aborted$1("Request was aborted.");
+		const elapsedMs = Math.round(performance.now() - startedAt);
 		if (headerTimedOut) {
 			const failure = new QoderLlmError("Qoder model request exceeded its response header timeout.", "TIMEOUT");
-			dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure));
+			dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure), {
+				phase: "header",
+				elapsedMs,
+				timeoutMs: dependencies.responseHeaderTimeoutMs
+			});
 			throw failure;
 		}
 		if (idleTimedOut) {
 			const failure = new QoderLlmError("Qoder model stream exceeded its idle timeout.", "TIMEOUT");
-			dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure));
+			dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure), {
+				phase: "stream-idle",
+				chunkCount,
+				idleDurationMs: Math.round(performance.now() - lastActivityAt),
+				elapsedMs,
+				...reqId === void 0 ? {} : { requestId: reqId }
+			});
 			throw failure;
 		}
 		if (error instanceof QoderLlmError) {
-			dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(error));
+			dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(error), {
+				chunkCount,
+				elapsedMs,
+				...reqId === void 0 ? {} : { requestId: reqId }
+			});
 			throw error;
 		}
 		const failure = new QoderLlmError("Qoder transport request failed.", "TRANSPORT", { cause: error });
-		dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure), { cause: redactLogValue(error) });
+		dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure), {
+			chunkCount,
+			elapsedMs,
+			...reqId === void 0 ? {} : { requestId: reqId },
+			cause: redactLogValue(error)
+		});
 		throw failure;
 	} finally {
 		clearTimeout(headerTimer);
@@ -2209,6 +2527,7 @@ var DefaultQoderTransport = class {
 	modelFlights = new SingleFlight();
 	attachments;
 	imageUploader;
+	searchClient;
 	preserveThinking;
 	constructor(options) {
 		this.region = options.region;
@@ -2216,7 +2535,7 @@ var DefaultQoderTransport = class {
 		this.fetchImpl = options.fetch ?? globalThis.fetch;
 		this.logger = options.logger;
 		this.streamIdleTimeoutMs = options.streamIdleTimeoutMs ?? 3e5;
-		this.responseHeaderTimeoutMs = options.responseHeaderTimeoutMs ?? 3e4;
+		this.responseHeaderTimeoutMs = options.responseHeaderTimeoutMs ?? 6e4;
 		this.metadataTimeoutMs = options.metadataTimeoutMs;
 		this.attachments = options.attachments;
 		this.preserveThinking = options.preserveThinking;
@@ -2245,6 +2564,20 @@ var DefaultQoderTransport = class {
 				return this.auth.getCredentials(pat, signal);
 			}
 		});
+		this.searchClient = new QoderSearchClient({
+			fetch: this.fetchImpl,
+			logger: this.logger,
+			region: this.region,
+			resolveCredentials: async (signal) => {
+				const pat = await this.requirePat(signal);
+				return this.auth.getCredentials(pat, signal);
+			},
+			refreshCredentials: async (signal) => {
+				const pat = await this.requirePat(signal);
+				this.auth.clear(pat);
+				return this.auth.getCredentials(pat, signal);
+			}
+		});
 	}
 	stream(options, model) {
 		return this.generate(options, model);
@@ -2270,6 +2603,9 @@ var DefaultQoderTransport = class {
 			signal: options?.signal
 		});
 	}
+	async searchWeb(request, signal) {
+		return this.searchClient.search(request, signal);
+	}
 	async requirePat(signal) {
 		if (signal?.aborted) throw aborted("Qoder request was aborted.");
 		const pat = (await this.resolvePat()).trim();
@@ -2333,7 +2669,13 @@ const Config = z.object({
 	modelsByRegion: modelsByRegionSchema.default({}),
 	models: z.array(catalogModel),
 	streamIdleTimeoutMs: z.number().step(1).min(1).default(defaultStreamIdleTimeoutMs),
-	preserveThinking: z.boolean().default(true)
+	responseHeaderTimeoutMs: z.number().step(1).min(1).default(defaultResponseHeaderTimeoutMs),
+	preserveThinking: z.boolean().default(true),
+	webSearchMode: z.union([
+		"auto",
+		"always",
+		"disabled"
+	]).default("auto")
 });
 function resolveModels(models) {
 	const resolved = models ?? defaultModels;
@@ -2353,6 +2695,10 @@ function modelsFor(config, region, legacyModelsRegion = config.region ?? "global
 	return resolveModels(defaultModels);
 }
 //#endregion
+//#region src/dsh/provider.ts
+/** DSH model provider route, matching the plugin package name. */
+const QODER_PROVIDER_ID = "dsh-provider-qoder";
+//#endregion
 //#region src/dsh/adapter.ts
 /** Thin DSH adapter over the Qoder transport seam. */
 function modelInfo(provider, model) {
@@ -2369,11 +2715,12 @@ var QoderAdapter = class extends LlmAdapter {
 	catalogModels;
 	providerId;
 	providerName;
+	discoveries = /* @__PURE__ */ new WeakMap();
 	constructor(options) {
 		super();
 		this.resolveTransport = options.resolveTransport;
 		this.catalogModels = options.models && options.models.length > 0 ? options.models : defaultModels;
-		this.providerId = options.providerId ?? "qoder-official";
+		this.providerId = options.providerId ?? "dsh-provider-qoder";
 		this.providerName = options.providerName ?? "Qoder";
 	}
 	providerInfo(provider) {
@@ -2382,15 +2729,41 @@ var QoderAdapter = class extends LlmAdapter {
 			name: this.providerName
 		};
 	}
-	listModels(provider) {
-		return Promise.resolve(this.catalogModels.map((model) => modelInfo(provider, model)));
+	/** Refresh advertised metadata on catalog reads, sharing a five-minute transport-local cache. */
+	async listModels(provider) {
+		const transport = this.resolveTransport();
+		let cached = this.discoveries.get(transport);
+		if (cached === void 0) {
+			cached = { expiresAt: 0 };
+			this.discoveries.set(transport, cached);
+		}
+		const entry = cached;
+		if (entry.inflight === void 0 && Date.now() >= entry.expiresAt) entry.inflight = Promise.resolve().then(() => transport.discoverModels()).then((models) => {
+			entry.models = models;
+			entry.expiresAt = Date.now() + 300 * 1e3;
+		}).catch(() => {}).finally(() => {
+			entry.inflight = void 0;
+		});
+		await entry.inflight;
+		if (this.resolveTransport() !== transport) return this.listModels(provider);
+		return this.effectiveModels().map((model) => modelInfo(provider, model));
+	}
+	effectiveModels() {
+		return mergeQoderDiscoveryMetadata(this.catalogModels, this.discoveries.get(this.resolveTransport())?.models ?? []);
 	}
 	replaceModels(models) {
 		this.catalogModels = models;
 	}
+	/** Publish an explicit discovery without letting older in-flight reads overwrite it. */
+	updateDiscoveredModels(transport, models) {
+		this.discoveries.set(transport, {
+			models,
+			expiresAt: Date.now() + 300 * 1e3
+		});
+	}
 	resolveModel(provider, modelId, signal) {
 		if (signal?.aborted) return Promise.reject(new QoderLlmError("Qoder model resolution was aborted.", "ABORTED"));
-		const configured = this.catalogModels.find((model) => model.id === modelId);
+		const configured = this.effectiveModels().find((model) => model.id === modelId);
 		if (configured === void 0) return Promise.resolve({
 			provider,
 			id: modelId,
@@ -2413,11 +2786,64 @@ var QoderAdapter = class extends LlmAdapter {
 	}
 	stream(options) {
 		if (options.provider !== this.providerId) throw new QoderLlmError(`Qoder adapter does not own provider "${options.provider}".`, "INVALID_PROVIDER");
-		const model = this.catalogModels.find((candidate) => candidate.id === (options.model || "cmodel"));
+		const model = this.effectiveModels().find((candidate) => candidate.id === (options.model || "cmodel"));
 		return this.resolveTransport().stream(options, model);
 	}
 };
 //#endregion
+//#region src/dsh/search-provider.ts
+/**
+* DSH WebSearchProvider implementation with initiator-aware dynamic routing.
+*
+* Implements the `@deepseek-ai/dsh-web` capability seam, routing search queries
+* to Qoder Center when an agent runs with a Qoder model (`dsh-provider-qoder`),
+* or delegating to a fallback search provider when another model is active.
+*
+* @module dsh-provider-qoder/dsh/search-provider
+*/
+const QODER_SEARCH_PROVIDER_ID = "qoder";
+const QODER_MODEL_PROVIDER_ROUTE = QODER_PROVIDER_ID;
+var QoderSearchProvider = class {
+	id = QODER_SEARCH_PROVIDER_ID;
+	ctx;
+	resolveTransport;
+	searchClient;
+	getWebSearchMode;
+	fallbackProvider;
+	constructor(options) {
+		this.ctx = options.ctx;
+		this.resolveTransport = options.resolveTransport;
+		this.searchClient = options.searchClient;
+		this.getWebSearchMode = options.getWebSearchMode;
+		this.fallbackProvider = options.fallbackProvider;
+	}
+	available() {
+		return this.getWebSearchMode() !== "disabled";
+	}
+	async search(request, signal) {
+		const mode = this.getWebSearchMode();
+		if (mode === "disabled") throw new WebError("Qoder web search is disabled in settings.", "WEB_PROVIDER_UNAVAILABLE");
+		const agent = (this.ctx.get("agents") ?? this.ctx.agents)?.currentInitiator?.();
+		const defaultModelService = this.ctx.get("agentDefaultModel");
+		const providerRoute = agent?.options?.provider ?? defaultModelService?.get?.()?.provider;
+		if (mode === "always" || providerRoute === QODER_MODEL_PROVIDER_ROUTE) {
+			if (this.resolveTransport !== void 0) return this.resolveTransport().searchWeb(request, signal);
+			if (this.searchClient !== void 0) return this.searchClient.search(request, signal);
+			throw new WebError("No Qoder transport configured for web search.", "WEB_PROVIDER_ERROR");
+		}
+		const fallback = this.resolveFallback();
+		if (fallback && fallback.available()) return fallback.search(request, signal);
+		throw new WebError(`Current model provider is "${providerRoute ?? "unknown"}" rather than "${QODER_MODEL_PROVIDER_ROUTE}", and no fallback web search provider is available. Switch to a Qoder model or configure an ambient search provider.`, "WEB_PROVIDER_UNAVAILABLE");
+	}
+	resolveFallback() {
+		if (this.fallbackProvider && this.fallbackProvider.available()) return this.fallbackProvider;
+		const providers = this.ctx.get("web")?.searchProviders;
+		if (providers && typeof providers.entries === "function") {
+			for (const [id, provider] of providers.entries()) if (id !== "qoder" && provider.available()) return provider;
+		}
+	}
+};
+//#endregion
 //#region src/dsh/credential-contract.ts
 /** Shared DSH host/browser contract for the one managed Qoder credential. */
 const qoderCredentialRef = "QODER_MANAGED_CREDENTIAL";
@@ -2435,6 +2861,83 @@ async function resolveManagedQoderPat(credentials) {
 	if (hit === void 0 || isEnvironmentCredentialSource(hit.source)) return "";
 	return hit.value.trim();
 }
+/**
+* Absolute Fetch-route prefix. Connection mounts its shared, authenticated API
+* channel at `/api`, and every exact Fetch route lives directly below it.
+*/
+const qoderRpcApiPath = `/api/qoder-subscription`;
+/** Endpoints the account card and the model catalog call. */
+const qoderRpcEndpoints = ["account", "models"];
+/** Absolute Fetch-route path of one endpoint. */
+function qoderRpcPath(endpoint) {
+	return `${qoderRpcApiPath}/${endpoint}`;
+}
+/** Type guard for an untrusted endpoint name. */
+function isQoderRpcEndpoint(value) {
+	return typeof value === "string" && qoderRpcEndpoints.includes(value);
+}
+//#endregion
+//#region src/dsh/rpc.ts
+/**
+* Mount every Qoder settings endpoint on the shared API channel.
+*
+* Registering is caller-owned: the returned disposer removes the routes again,
+* so the caller can tie them to its fiber with `ctx.effect`.
+*
+* @param ctx - host context carrying the Connection service.
+* @param handler - decoded endpoint handler, shared by every endpoint.
+* @returns disposer removing every registered route.
+* @throws when Connection exposes no exact Fetch registry.
+*/
+function registerQoderRpc(ctx, handler) {
+	const registry = ctx.connection?.fetch;
+	if (typeof registry?.register !== "function") throw new Error("provider-qoder: connection exposes no exact Fetch route registry");
+	const disposers = qoderRpcEndpoints.map((endpoint) => registry.register({
+		path: qoderRpcPath(endpoint),
+		methods: ["POST"],
+		requestBody: "buffered",
+		fetch: (request) => handleQoderRpcRequest(endpoint, handler, request)
+	}));
+	return () => {
+		for (const dispose of disposers) if (typeof dispose === "function") dispose();
+	};
+}
+/**
+* Decode one request, run the endpoint handler, and encode its result.
+*
+* Failures stay inside the response envelope so the client keeps a single error
+* path; only a malformed body and a handler crash use a transport status.
+*/
+async function handleQoderRpcRequest(endpoint, handler, request) {
+	if (request.signal.aborted) return Response.json({
+		ok: false,
+		error: {
+			code: "ABORTED",
+			message: "Request aborted",
+			details: { issues: [] }
+		}
+	});
+	let payload = {};
+	const body = await request.text();
+	if (body.trim().length > 0) try {
+		payload = JSON.parse(body);
+	} catch {
+		return new Response("body is not JSON", { status: 400 });
+	}
+	try {
+		return Response.json(await handler(endpoint, payload, request.signal));
+	} catch (error) {
+		if (request.signal.aborted) return Response.json({
+			ok: false,
+			error: {
+				code: "ABORTED",
+				message: "Request aborted",
+				details: { issues: [] }
+			}
+		});
+		return new Response(`handler failure: ${String(error)}`, { status: 500 });
+	}
+}
 //#endregion
 //#region src/dsh/plugin.ts
 const name = "provider-qoder";
@@ -2444,9 +2947,8 @@ const inject = [
 	"connection",
 	"attachments"
 ];
-const providerQoder = "qoder-official";
+const providerQoder = QODER_PROVIDER_ID;
 const settingsNamespace = "provider-qoder";
-const qoderChannel = "/qoder-subscription";
 const fiberDisposed = 4;
 const fiberUnloading = 5;
 function logError(error) {
@@ -2457,13 +2959,13 @@ function logError(error) {
 		..."code" in error ? { code: error.code } : {}
 	};
 }
-function publicError(message) {
+function publicError(code, message, details = { issues: [] }) {
 	return {
 		ok: false,
 		error: {
-			code: "internal",
+			code,
 			message,
-			details: { issues: [] }
+			details
 		}
 	};
 }
@@ -2476,7 +2978,9 @@ function apply(ctx, config = {}) {
 		modelsByRegion: { ...config.modelsByRegion },
 		...hasConfiguredModels ? { models: resolveModels(config.models) } : {},
 		streamIdleTimeoutMs: config.streamIdleTimeoutMs ?? 3e5,
-		preserveThinking: config.preserveThinking ?? true
+		responseHeaderTimeoutMs: config.responseHeaderTimeoutMs ?? 6e4,
+		preserveThinking: config.preserveThinking ?? true,
+		webSearchMode: config.webSearchMode ?? "auto"
 	};
 	let current = () => baseConfig;
 	let legacyModelsRegion = initialRegion;
@@ -2485,11 +2989,12 @@ function apply(ctx, config = {}) {
 		global: [],
 		china: []
 	};
-	const createTransport = (region, streamIdleTimeoutMs, preserveThinking, resolvePat = () => resolveManagedQoderPat(ctx.credentials)) => createQoderTransport({
+	const createTransport = (region, streamIdleTimeoutMs, responseHeaderTimeoutMs, preserveThinking, resolvePat = () => resolveManagedQoderPat(ctx.credentials)) => createQoderTransport({
 		region,
 		resolvePat,
 		logger,
 		streamIdleTimeoutMs,
+		responseHeaderTimeoutMs,
 		attachments: ctx.attachments,
 		preserveThinking
 	});
@@ -2500,14 +3005,17 @@ function apply(ctx, config = {}) {
 			region,
 			models: mergeQoderDiscoveryMetadata(modelsFor(value, region, legacyModelsRegion), discoveredCatalogs[region]),
 			streamIdleTimeoutMs: value.streamIdleTimeoutMs ?? 3e5,
-			preserveThinking: value.preserveThinking ?? true
+			responseHeaderTimeoutMs: value.responseHeaderTimeoutMs ?? 6e4,
+			preserveThinking: value.preserveThinking ?? true,
+			webSearchMode: value.webSearchMode ?? "auto"
 		};
 	};
 	const initial = resolveConfig();
-	let activeTransport = createTransport(initial.region, initial.streamIdleTimeoutMs, initial.preserveThinking);
+	let activeTransport = createTransport(initial.region, initial.streamIdleTimeoutMs, initial.responseHeaderTimeoutMs, initial.preserveThinking);
 	let activeTransportConfig = {
 		region: initial.region,
 		streamIdleTimeoutMs: initial.streamIdleTimeoutMs,
+		responseHeaderTimeoutMs: initial.responseHeaderTimeoutMs,
 		preserveThinking: initial.preserveThinking
 	};
 	const adapter = new QoderAdapter({
@@ -2519,11 +3027,12 @@ function apply(ctx, config = {}) {
 	const registration = ctx.llm.registerAdapter([providerQoder], adapter);
 	const refreshAdapter = () => {
 		const next = resolveConfig();
-		if (next.region !== activeTransportConfig.region || next.streamIdleTimeoutMs !== activeTransportConfig.streamIdleTimeoutMs || next.preserveThinking !== activeTransportConfig.preserveThinking) {
-			activeTransport = createTransport(next.region, next.streamIdleTimeoutMs, next.preserveThinking);
+		if (next.region !== activeTransportConfig.region || next.streamIdleTimeoutMs !== activeTransportConfig.streamIdleTimeoutMs || next.responseHeaderTimeoutMs !== activeTransportConfig.responseHeaderTimeoutMs || next.preserveThinking !== activeTransportConfig.preserveThinking) {
+			activeTransport = createTransport(next.region, next.streamIdleTimeoutMs, next.responseHeaderTimeoutMs, next.preserveThinking);
 			activeTransportConfig = {
 				region: next.region,
 				streamIdleTimeoutMs: next.streamIdleTimeoutMs,
+				responseHeaderTimeoutMs: next.responseHeaderTimeoutMs,
 				preserveThinking: next.preserveThinking
 			};
 		}
@@ -2577,8 +3086,10 @@ function apply(ctx, config = {}) {
 	});
 	const discoverModels = async (signal, suppliedPat) => {
 		const snapshot = resolveConfig();
+		const snapshotTransport = activeTransport;
 		const normalizedPat = suppliedPat?.trim();
-		const models = await (normalizedPat ? createTransport(snapshot.region, snapshot.streamIdleTimeoutMs, snapshot.preserveThinking, () => Promise.resolve(normalizedPat)) : activeTransport).discoverModels(signal);
+		const models = await (normalizedPat ? createTransport(snapshot.region, snapshot.streamIdleTimeoutMs, snapshot.responseHeaderTimeoutMs, snapshot.preserveThinking, () => Promise.resolve(normalizedPat)) : snapshotTransport).discoverModels(signal);
+		adapter.updateDiscoveredModels(snapshotTransport, models);
 		discoveredCatalogs[snapshot.region] = models;
 		refreshAdapter();
 		await persistDiscoveredModels(snapshot.region);
@@ -2593,40 +3104,69 @@ function apply(ctx, config = {}) {
 			maxTokens: model.maxTokens
 		}));
 	});
-	if (ctx.connection?.rpc) {
-		const handler = async (endpoint, payload, signal) => {
-			if (endpoint !== "account" && endpoint !== "models") return publicError(`Unknown endpoint: ${endpoint}`);
-			signal.throwIfAborted();
-			if (endpoint === "models") try {
-				return {
-					ok: true,
-					value: await discoverModels(signal)
-				};
-			} catch (error) {
-				if (signal.aborted || error instanceof QoderLlmError && error.code === "ABORTED") throw error;
-				logger?.error?.("[Qoder RPC] Failed to discover models", logError(error));
-				return publicError(error instanceof Error ? error.message : "Failed to discover Qoder models");
-			}
-			const force = typeof payload === "object" && payload !== null && "force" in payload ? payload.force === true : false;
-			logger?.debug?.("[Qoder RPC] Reading subscriber account", { force });
+	const handler = async (endpoint, payload, signal) => {
+		if (!isQoderRpcEndpoint(endpoint)) return publicError("UNKNOWN_ENDPOINT", `Unknown endpoint: ${endpoint}`);
+		if (signal.aborted) return publicError("ABORTED", "Request aborted");
+		const executeRpc = async (operation, task) => {
 			try {
-				const account = await activeTransport.readAccount({
-					force,
-					signal
-				});
-				logger?.debug?.("[Qoder RPC] Subscriber account resolved");
 				return {
 					ok: true,
-					value: account
+					value: await task()
 				};
 			} catch (error) {
-				if (signal.aborted || error instanceof QoderLlmError && error.code === "ABORTED") throw error;
-				logger?.error?.("[Qoder RPC] Failed to read subscriber account", logError(error));
-				return publicError(error instanceof Error ? error.message : "Failed to load Qoder account");
+				if (signal.aborted || error instanceof QoderLlmError && error.code === "ABORTED") {
+					logger?.debug?.(`[Qoder RPC] ${operation} was aborted`);
+					return publicError("ABORTED", "Request aborted");
+				}
+				let code = "INTERNAL";
+				if (error instanceof QoderLlmError) if (error.code === "MISSING_CREDENTIAL" || error.code === "NO_CREDENTIALS") code = "NO_CREDENTIALS";
+				else if (error.code === "AUTH") code = "UNAUTHENTICATED";
+				else if (error.code === "TIMEOUT") code = "TIMEOUT";
+				else code = "UPSTREAM_ERROR";
+				logger?.error?.(`[Qoder RPC] Failed to ${operation}`, logError(error));
+				return publicError(code, error instanceof Error ? error.message : `Failed to ${operation}`);
 			}
 		};
-		ctx.effect(() => ctx.connection.rpc.handle(qoderChannel, handler), "provider-qoder: loopback account RPC");
+		if (endpoint === "models") return await executeRpc("discover Qoder models", () => discoverModels(signal));
+		const force = typeof payload === "object" && payload !== null && "force" in payload ? payload.force === true : false;
+		logger?.debug?.("[Qoder RPC] Reading subscriber account", { force });
+		const outcome = await executeRpc("load Qoder account", () => activeTransport.readAccount({
+			force,
+			signal
+		}));
+		if (outcome.ok) logger?.debug?.("[Qoder RPC] Subscriber account resolved");
+		return outcome;
+	};
+	try {
+		ctx.effect(() => registerQoderRpc(ctx, handler), "provider-qoder: settings RPC routes");
+	} catch (error) {
+		logger?.error?.("[Qoder RPC] Failed to register the settings RPC routes", logError(error));
 	}
+	ctx.inject(["web"], (webCtx) => {
+		const searchProvider = new QoderSearchProvider({
+			ctx,
+			resolveTransport: () => activeTransport,
+			getWebSearchMode: () => resolveConfig().webSearchMode ?? "auto"
+		});
+		webCtx.web.registerSearchProvider(searchProvider);
+		if (typeof webCtx.web.search === "function") {
+			const originalSearch = webCtx.web.search.bind(webCtx.web);
+			webCtx.effect(() => {
+				webCtx.web.search = async (request, signal) => {
+					const mode = resolveConfig().webSearchMode ?? "auto";
+					if (mode === "disabled") return originalSearch(request, signal);
+					const agent = (ctx.get("agents") ?? ctx.agents)?.currentInitiator?.();
+					const defaultModelService = ctx.get("agentDefaultModel");
+					const isQoderActive = (agent?.options?.provider ?? defaultModelService?.get?.()?.provider) === providerQoder;
+					if (mode === "always" || isQoderActive) return searchProvider.search(request, signal);
+					return originalSearch(request, signal);
+				};
+				return () => {
+					webCtx.web.search = originalSearch;
+				};
+			}, "provider-qoder: transparent web search router");
+		}
+	});
 }
 //#endregion
-export { Config, apply, inject, name };
+export { Config, QODER_SEARCH_PROVIDER_ID, QoderSearchClient, QoderSearchProvider, apply, getQoderWebSearchUrl, inject, name, qoderWebSearchPath };