dsh-tinyfish 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 viztor
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,206 @@
+# dsh-tinyfish
+
+[![npm](https://img.shields.io/npm/v/dsh-tinyfish.svg)](https://www.npmjs.com/package/dsh-tinyfish) [![downloads](https://img.shields.io/npm/dm/dsh-tinyfish.svg)](https://www.npmjs.com/package/dsh-tinyfish) [![ci](https://github.com/viztor/dsh-tinyfish/actions/workflows/ci.yml/badge.svg)](https://github.com/viztor/dsh-tinyfish/actions/workflows/ci.yml) [![license](https://img.shields.io/npm/l/dsh-tinyfish.svg)](https://github.com/viztor/dsh-tinyfish/blob/main/LICENSE) [![node](https://img.shields.io/badge/node-%3E%3D22.14-5FA04E.svg)](https://nodejs.org)
+
+**Search and fetch for the DeepSeek Harness, at $0.**
+
+A DSH bundle that makes [TinyFish](https://tinyfish.ai) the implementation of the harness's own `web_search` and `web_fetch` tools. Both endpoints are free, so the web path on your host stops costing money per call.
+
+|  | `dsh-web`'s default | with `dsh-tinyfish` |
+| --- | --- | --- |
+| search | `deepseek-official` | TinyFish `/search` via Monid, **$0** |
+| fetch | `http` | TinyFish `/fetch`, **$0**, returns clean Markdown |
+| turndown conversion | yes, on every fetch | **no** — the content is already Markdown |
+| reversibility | — | two words, no reinstall |
+
+## Install
+
+```sh
+cd ~/.dsh/profiles/web
+npm install dsh-tinyfish
+```
+
+Add the bundle to that profile's `package.json`, then restart DSH:
+
+```jsonc
+{
+  "dependencies": { "dsh-tinyfish": "^0.2.0" },
+  "dsh": {
+    "profile": {
+      "bundles": [
+        "@deepseek-ai/dsh-base",
+        "@deepseek-ai/dsh-web-app",
+        "dsh-tinyfish",
+      ],
+    },
+  },
+}
+```
+
+That is the whole install. The bundle's own `cordis.patch.yml` selects itself:
+
+```yaml
+- id: web
+  name: "@deepseek-ai/dsh-web"
+  config:
+    searchProvider: tinyfish
+    fetchProvider: tinyfish
+```
+
+Restarting matters: bundles are resolved when the harness boots, so `patchReload` will not pick up a newly mounted one.
+
+**To go back**, set those two back to `deepseek-official` and `http`. The bundle stays mounted and idle — registration and selection are separate, and only your profile decides which provider wins.
+
+**Requirements:** DSH **0.2.0+**, Node **22.14+**, and a credential (below). The harness supplies the `@deepseek-ai/*` peer packages; you do not install them.
+
+## Verify
+
+Ask the agent to search for something. Or check the wiring without an agent:
+
+```sh
+cd ~/.dsh/profiles/web
+node -e '
+  const m = require("dsh-tinyfish");
+  const ctx = { web: { registerSearchProvider(){}, registerFetchProvider(){} }, get: () => undefined };
+  m.apply(ctx, m.Config({}));
+  console.log("registered:", m.name, "| no throw above = wired");
+'
+```
+
+If search reports `WEB_PROVIDER_CREDENTIAL_MISSING` or `WEB_PROVIDER_UNAVAILABLE`, that is the next section.
+
+## Credentials
+
+A fresh install has none, and never will — a key inside an npm tarball would be published forever. Both endpoints are free, but both need an account.
+
+**In the profile patch (no restart needed).** The `web-tinyfish` row in your profile's `cordis.patch.yml` sets `apiKeyEnv`, which the harness resolves through its credentials service and the launch environment, and re-reads on every call — so a change takes effect on the next search.
+
+**By hand:**
+
+| channel | get a key | then |
+| --- | --- | --- |
+| `direct` default | [tinyfish.ai](https://tinyfish.ai) → API keys | `tinyfish auth login`, or `echo $KEY \| tinyfish auth set` |
+| `monid` | [app.monid.ai](https://app.monid.ai) | `monid keys add`, or `export MONID_API_KEY` |
+
+The default is `direct` because the package is named for TinyFish: a fresh install asks for the credential its own name implies rather than for an account at a different service. If you would rather go through Monid — it reuses a platform key a Monid MCP mount already holds, and costs the same — pin it in your own profile patch, which is a host decision and does not need a new release of this plugin:
+
+```yaml
+- id: web-tinyfish
+  config:
+    channel: monid
+```
+
+Resolution order, first match wins: a literal `apiKey` in the settings row → the harness credentials service → the launch environment → the live environment → the CLI stores. A failing credential service falls through to the next source rather than failing the search.
+
+## Configuration
+
+Everything lives in one row, `web-tinyfish`, edited in your profile's `cordis.patch.yml`. The row is validated, so an out-of-range value is rejected with a message rather than silently clamped.
+
+**Settings → Plugins → TinyFish** edits this row, if you prefer a form to a patch file. The plugin ships both halves: the provider the harness loads, and a client bundle that contributes the page. Changes are staged and written on save, and a key you type is stored by the harness rather than in your profile.
+
+The patch file is still the honest place for the first edit — it is where a selection that overrides someone else's layer belongs, and it needs no build. Use whichever suits the change.
+
+| key | default | meaning |
+| --- | --- | --- |
+| `channel` | `direct` | `monid` or `direct`; see [Credentials](#credentials) |
+| `apiKey` | _(unset)_ | literal credential for either channel; prefer a ref |
+| `apiKeyEnv` | `TINYFISH_API_KEY` | credential reference, or env var, for `direct` |
+| `monidKeyEnv` | `MONID_API_KEY` | credential reference, or env var, for `monid` |
+| `purpose` | _(unset)_ | goal statement; TinyFish ranks on it |
+| `attempts` | `3` | retries for a transient failure or an empty search (1–5) |
+| `filters.domainType` | _(unset)_ | `web` \| `news` \| `research_paper` |
+| `filters.language` / `.location` | _(unset)_ | geo targeting |
+| `filters.includeDomains` / `.excludeDomains` | _(unset)_ | comma-separated |
+| `monidBase` / `searchBase` / `fetchBase` | upstream | endpoint override, for staging |
+| `search` / `fetch` | `true` | offer this kind at all; `false` declines without unregistering |
+
+Search and fetch are switched independently. Both always register, so turning one off makes it report _unavailable_ rather than _missing_ — the harness tells those apart, and only the second means "I turned this off" rather than "the install is broken".
+
+```yaml
+- id: web-tinyfish
+  config:
+    search: true
+    fetch: false # keep TinyFish for search, let dsh-web use another fetch
+```
+
+### Where a value comes from
+
+Every setting resolves in the same three rungs — **row, then environment, then built-in default** — so a deployment can be retargeted without writing a patch file. This is the shape the shipped providers use for `$DEEPSEEK_SEARCH_BASE_URL`.
+
+| setting      | environment variable       |
+| ------------ | -------------------------- |
+| `monidBase`  | `TINYFISH_MONID_BASE_URL`  |
+| `searchBase` | `TINYFISH_SEARCH_BASE_URL` |
+| `fetchBase`  | `TINYFISH_FETCH_BASE_URL`  |
+
+An endpoint that does not parse makes the provider report itself unavailable rather than being trusted.
+
+### The credential, in order
+
+Resolved **per call**, so a key rotated anywhere below takes effect on the next search with no restart. First match wins:
+
+| # | source | set it by |
+| --- | --- | --- |
+| 1 | the `apiKey` literal | the row — a secret in config; prefer 2–3 |
+| 2 | the credentials service | `apiKeyEnv` (direct) or `monidKeyEnv` (monid) in the settings UI |
+| 3 | the launch environment | exported before DSH started |
+| 4 | the live environment | `MONID_API_KEY` / `TINYFISH_API_KEY` |
+| 5 | the channel's CLI store | `monid keys add` / `tinyfish auth login` |
+
+The harness services sit above the environment on purpose: a value someone typed into Settings is a more deliberate choice than one that merely happens to be exported. A failing service falls through to the next source rather than failing the search, and a host that mounts neither still works.
+
+### Two keys, one settings page
+
+The two channels authenticate against different services, so each has **its own** credential reference: `apiKeyEnv` (default `TINYFISH_API_KEY`) for `direct`, and `monidKeyEnv` (default `MONID_API_KEY`) for `monid`. Saving one never overwrites the other, so both can be live at once and switching channels back and forth loses nothing.
+
+The page shows the key for the **selected** channel only. Showing both at once would invite pasting the Monid platform key into the field TinyFish authenticates with — and a key sent to the wrong service fails as a 401, which reads as "that key is wrong" rather than as "that was the wrong field". The `apiKey` literal still overrides either channel; it exists for a patch file, and the settings page does not write it.
+
+## Why the fetch path is a real improvement
+
+`dsh-tool-web` renders a `kind: "html"` body by running **turndown** to convert HTML to Markdown, behind a depth cap with a `"[HTML content omitted]"` fallback. TinyFish already extracts clean Markdown in a browser-grade extractor, so this provider returns `kind: "text"` and the content reaches the model with no conversion step at all.
+
+## Two channels, one payload
+
+Monid is a thin envelope whose `output` is the direct response verbatim, and it forwards parameter names unchanged. One transport serves both, and nothing above it branches on which is active — a test asserts the two agree on the top hit for the same query.
+
+|        | `direct` (default)           | `monid`                    |
+| ------ | ---------------------------- | -------------------------- |
+| search | `GET api.search.tinyfish.ai` | `POST api.monid.ai/v1/run` |
+| fetch  | `POST api.fetch.tinyfish.ai` | `POST api.monid.ai/v1/run` |
+| auth   | `X-API-Key`                  | `Authorization: Bearer`    |
+| cost   | $0, direct                   | $0, on the Monid wallet    |
+
+## Behaviour worth knowing
+
+- **A 404 is a result, not an error.** A per-URL fetch failure comes back carrying its status, because that is resource state the model needs.
+- **`publishedAt` is honest.** TinyFish reports dates as human strings (`"Apr 30, 2026"`, `"1 year ago"`). What parses is coerced to ISO-8601; what does not is dropped rather than invented. Unzoned dates are read as UTC, so the same page reports the same day regardless of where the Worker ran.
+- **Search retries an empty result.** The upstream answers a valid query with nothing about one run in three, so a blank result is retried up to `attempts` before it is believed.
+- **A blocked run is terminal.** If a Monid workspace control stops a run, the error says why and links to top up. It is never retried.
+
+## Not included
+
+TinyFish's `agent` and `browser` surfaces are **not** exposed. They cost $0.016/step and $0.002/min, are metered against a wallet, and do not fit `ctx.web` — that seam has exactly two provider kinds, and an agent run is an action, not a search or a fetch. Use the `tinyfish` CLI directly when a page genuinely needs a real browser.
+
+## Development
+
+The toolchain is [Vite+](https://viteplus.dev): `vp pack` builds the library with tsdown, `vp test` runs Vitest, and `vp lint` / `vp fmt` are Oxlint and Oxfmt, type-aware. Lint and format settings live in the `lint` and `fmt` blocks of `vite.config.ts` — Vite+ disables nested Oxlint/Oxfmt configs, so a standalone `oxlint.config.ts` would be read by nobody.
+
+```sh
+pnpm install
+pnpm test               # 78 hermetic tests — no network, no credential
+pnpm run check          # format + lint + types
+pnpm run release:gate   # build, then the full gate
+pnpm run test:live      # the real APIs, still $0, needs credentials
+```
+
+`pnpm run ci` ends in one script, `scripts/check.mjs`, that runs six package checks in a single pass: `lib/` freshness, peer ranges npm can parse, the bundle contract, the harness surfaces still being present, no credentials in the tree, and — the one that earns its keep — packing the tarball, installing it with plain npm, and loading it. Each is proved by planting the regression it guards, and CI runs all of it.
+
+Full process and invariants: [`AGENTS.md`](./AGENTS.md).
+
+## Compatibility
+
+Requires **DSH 0.2.0+**; tested against 0.2.0-rc.1. The `@deepseek-ai/dsh-*` peers are `^0.2.0-rc.1`, so a DSH patch release will not orphan the plugin, and a 0.3 contract change still fails loudly rather than silently.
+
+## License
+
+MIT

package/cordis.patch.yml

@@ -0,0 +1,41 @@
+# Bundle patch for `dsh-tinyfish`.
+#
+# The plugin only *offers* the `tinyfish` provider on both seam kinds. Whether
+# it is actually used is the profile's decision, in `dsh-web`'s config:
+#
+#   - id: web
+#     name: '@deepseek-ai/dsh-web'
+#     config:
+#       searchProvider: tinyfish
+#       fetchProvider: tinyfish
+#
+# Both rows are kept separate from the plugin row so the id is set in one place
+# and swapping back to `deepseek-official` / `http` is a two-word edit rather
+# than a plugin removal. Registering a provider nobody selects is free.
+#
+# `channel` picks the upstream route and is deliberately NOT set here, so the
+# schema default stands: `direct`, which calls TinyFish's own API with the key
+# the `tinyfish` CLI stored in ~/.tinyfish/config.json. A package named for
+# TinyFish should not open by asking for an account at a different service.
+#
+# A host that prefers the Monid envelope — which reuses the credential a Monid
+# MCP mount already holds, and costs the same — pins it in its own patch layer,
+# where the preference belongs and where it can be changed without a new
+# release:
+#
+#   - id: web-tinyfish
+#     config:
+#       channel: monid
+#
+# `apiKey` is not set here either — a secret belongs in the environment, the
+# CLI's own store, or the harness credentials service, never in a patch file.
+- insert:
+    - id: web-tinyfish
+      name: "dsh-tinyfish"
+      config:
+        attempts: 3
+- id: web
+  name: "@deepseek-ai/dsh-web"
+  config:
+    searchProvider: tinyfish
+    fetchProvider: tinyfish

package/lib/client.js

@@ -0,0 +1,400 @@
+window.__ModuleLoader__.load({
+  id: "dsh-tinyfish",
+  factory: (require) => {
+    var module = { exports: {} };
+    var exports = module.exports;
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
+let react_jsx_runtime = require("react/jsx-runtime");
+//#region src/settings-page.tsx
+/**
+* `dsh-tinyfish` settings page — the client half of the bundle.
+*
+* The harness renders a plugin's settings form only when a client bundle
+* contributes a slot to the Plugins page. It never reads the plugin's `Config`
+* schema, so a package with no client half has no form however well its schema
+* is declared, and the harness degrades quietly rather than saying so.
+*
+* This is that half. It is bundled separately from `src/index.ts` — the host
+* half — into `lib/client.cjs`, wrapped in the `window.__ModuleLoader__.load`
+* call the web client expects, and the manifest declares both `dsh.bundle` and
+* `dsh.client`. Those two keys are read by different subsystems and never
+* consult each other, so one package can carry both and the user installs once.
+*
+* Nothing here writes as the user types. The form stages drafts and writes them
+* on save, so what is on screen is exactly what a save would store.
+*
+* @module dsh-tinyfish/settings-page
+*/
+/**
+* The settings namespace, spelled rather than imported.
+*
+* A client package must not depend on a Host package, so this string is
+* duplicated on purpose. It must equal the exported `name` of `src/index.ts`:
+* that is what the Plugins page keys the row by.
+*/
+const NS = "web-tinyfish";
+/**
+* Client-side services this page needs.
+*
+* `configForms` supplies the form scope, `slots` is how the page is
+* contributed, `locale` carries the dictionaries, and the two `remote` entries
+* are the credential reference and its invalidation events.
+*/
+const inject = [
+	"slots",
+	"locale",
+	"remote",
+	"remote.credentials",
+	"configForms"
+];
+/** English copy. */
+const en = {
+	title: "TinyFish",
+	description: "TinyFish-backed web search and fetch, at $0.",
+	channel: "Channel",
+	channelHint: "direct calls TinyFish with its own key; monid routes through a Monid key.",
+	apiKey: "API key",
+	apiKeyHint: "Stored outside the settings file. Leave blank to keep the current key.",
+	monidApiKey: "Monid platform key",
+	monidApiKeyHint: "Stored separately from the TinyFish key, so switching channels keeps both. `monid keys add` also works and takes precedence over this.",
+	apiKeySet: "A key is configured.",
+	apiKeyUnset: "No key is configured, so searches fail until one is set.",
+	purpose: "Purpose",
+	purposeHint: "Optional goal statement; TinyFish ranks results against it.",
+	attempts: "Attempts",
+	attemptsHint: "Retries for a transient failure or an empty result, 1 to 5.",
+	search: "Offer search",
+	searchHint: "When off, web_search falls through to another provider.",
+	fetch: "Offer fetch",
+	fetchHint: "When off, web_fetch falls through to another provider.",
+	channelDirect: "Direct",
+	channelMonid: "Monid",
+	bothOff: "Both providers are off, so this plugin is registered but answers nothing. Turn one back on to use it.",
+	overridden: "Overridden",
+	reset: "Reset to default",
+	invalidNumber: "Enter a whole number, or leave blank to use the default.",
+	invalidText: "This value was not accepted; leave blank to use the default.",
+	readOnly: "This deployment stores settings read-only.",
+	unavailable: "This plugin is not loaded, so it cannot be configured right now.",
+	save: "Save",
+	saving: "Saving…",
+	saveFailed: "The deployment did not accept these values; they were left for you to correct."
+};
+/** Simplified Chinese copy, for the profile locale this bundle was written in. */
+const zh = {
+	title: "TinyFish",
+	description: "基于 TinyFish 的网页搜索与抓取，零成本。",
+	channel: "通道",
+	channelHint: "direct 使用 TinyFish 自己的密钥；monid 通过 Monid 密钥转发。",
+	apiKey: "API Key",
+	apiKeyHint: "不写入设置文件。留空表示保持当前密钥。",
+	monidApiKey: "Monid 平台密钥",
+	monidApiKeyHint: "与 TinyFish 密钥分开保存，切换通道时两者都会保留。也可运行 `monid keys add`，其优先级高于此项。",
+	apiKeySet: "已配置密钥。",
+	apiKeyUnset: "未配置密钥，搜索会失败，直到设置为止。",
+	purpose: "目标说明",
+	purposeHint: "可选的目标描述；TinyFish 会据此排序结果。",
+	attempts: "尝试次数",
+	attemptsHint: "瞬时失败或结果为空时的重试次数，1 到 5。",
+	search: "提供搜索",
+	searchHint: "关闭后，web_search 会转由其他提供方处理。",
+	fetch: "提供抓取",
+	fetchHint: "关闭后，web_fetch 会转由其他提供方处理。",
+	channelDirect: "直连",
+	channelMonid: "Monid",
+	bothOff: "搜索与抓取均已关闭，此插件已注册但不再响应任何请求。重新开启其中一个即可恢复使用。",
+	overridden: "已覆盖",
+	reset: "恢复默认",
+	invalidNumber: "请填整数；留空表示使用默认值。",
+	invalidText: "该值未被接受；留空表示使用默认值。",
+	readOnly: "本部署的设置为只读。",
+	unavailable: "该插件当前未加载，暂时无法配置。",
+	save: "保存",
+	saving: "保存中…",
+	saveFailed: "本部署没有接受这些值，已保留供你修改。"
+};
+/** Field names in one place, so the form and its specs cannot drift apart. */
+const FIELD = {
+	channel: "channel",
+	apiKey: "apiKey",
+	apiKeyEnv: "apiKeyEnv",
+	monidApiKey: "monidApiKey",
+	monidKeyEnv: "monidKeyEnv",
+	purpose: "purpose",
+	attempts: "attempts",
+	search: "search",
+	fetch: "fetch"
+};
+/** Credential references the provider falls back to when the section names none. */
+const DEFAULT_API_KEY_REF = "TINYFISH_API_KEY";
+const DEFAULT_MONID_KEY_REF = "MONID_API_KEY";
+/**
+* A boolean field.
+*
+* The primitives ship a text and a number spec but no boolean one, and the Host
+* validates the stored value regardless — this only decides what a draft means.
+* `parse` returning `undefined` is what blocks the save on a typo instead of
+* silently discarding the edit, which is the difference between a visible
+* mistake and a setting that quietly did not apply.
+*
+* @param field - field name inside the namespace section.
+* @returns the field's conversion spec.
+*/
+/** What each accepted boolean draft stages. Anything absent blocks the save. */
+const BOOLEAN_DRAFTS = {
+	"": { kind: "clear" },
+	true: {
+		kind: "set",
+		value: true
+	},
+	false: {
+		kind: "set",
+		value: false
+	}
+};
+function settingsBooleanField(field) {
+	return {
+		field,
+		format: (value) => typeof value === "boolean" || typeof value === "number" ? String(value) : "",
+		parse: (text) => BOOLEAN_DRAFTS[text.trim().toLowerCase()]
+	};
+}
+/** The section fields this card edits, in render order. */
+const SPECS = [
+	(0, _deepseek_ai_dsh_client_ui_primitives.settingsTextField)(FIELD.channel),
+	(0, _deepseek_ai_dsh_client_ui_primitives.settingsTextField)(FIELD.purpose),
+	(0, _deepseek_ai_dsh_client_ui_primitives.settingsNumberField)(FIELD.attempts),
+	settingsBooleanField(FIELD.search),
+	settingsBooleanField(FIELD.fetch)
+];
+/**
+* The credential reference the section currently names.
+*
+* Read from the accepted section rather than from a draft, because the reference
+* is what the *provider* will resolve — a key typed against a reference that is
+* not yet saved would be stored where nothing looks for it.
+*
+* @param snapshot - the form scope's current snapshot.
+* @param which - which channel's reference to read.
+* @returns the reference name, or that channel's default.
+*/
+function refOf(snapshot, which) {
+	const section = snapshot?.value;
+	const field = which === "monid" ? FIELD.monidKeyEnv : FIELD.apiKeyEnv;
+	const named = section?.[field];
+	const fallback = which === "monid" ? DEFAULT_MONID_KEY_REF : DEFAULT_API_KEY_REF;
+	return typeof named === "string" && named.trim() !== "" ? named.trim() : fallback;
+}
+/** The labels the shared form frame renders. */
+const formLabels = (t) => ({
+	unavailable: t("unavailable"),
+	readOnly: t("readOnly"),
+	saveFailed: t("saveFailed"),
+	save: t("save"),
+	saving: t("saving")
+});
+/**
+* Render the Plugins list's one-line summary, or the settings form.
+*
+* @param props - the view asked for, locale copy, the form snapshot, its
+* actions, and the credential's configured state.
+* @returns the summary, or the form.
+*/
+/**
+* Resolve a boolean switch to its effective value.
+*
+* The draft text is authoritative when present; a blank draft means untouched,
+* so it falls back to the schema default (on for both switches). The Switch
+* only ever writes "true" or "false", so any other text cannot occur through
+* the UI — but the fallback keeps the control honest if the section arrives
+* in an unexpected shape.
+*/
+function switchValue(text) {
+	if (text === "false") return false;
+	return true;
+}
+function TinyfishCard(props) {
+	const { t } = props;
+	if (props.view === "summary") return t("description");
+	const state = props.useTinyfishCard((snapshot) => snapshot);
+	const disabled = !state.shell.writable;
+	const field = (name) => ({
+		id: `plugin-config-tinyfish-${name}`,
+		disabled,
+		overriddenLabel: t("overridden"),
+		resetLabel: t("reset"),
+		...state.fields[name],
+		onEdit: (text) => {
+			props.edit(name, text);
+		},
+		onReset: () => {
+			props.resetField(name);
+		}
+	});
+	const channel = (state.fields[FIELD.channel]?.text ?? "") === "monid" ? "monid" : "direct";
+	const key = state.keys[channel];
+	const keyChannel = channel === "monid" ? FIELD.monidApiKey : FIELD.apiKey;
+	const searchOn = switchValue(state.fields[FIELD.search]?.text ?? "");
+	const fetchOn = switchValue(state.fields[FIELD.fetch]?.text ?? "");
+	const resetButton = (name, overridden) => overridden && !disabled ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+		type: "button",
+		onClick: () => {
+			props.resetField(name);
+		},
+		children: t("reset")
+	}) : null;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(_deepseek_ai_dsh_client_ui_primitives.SettingsForm, {
+		labels: formLabels(t),
+		state: state.shell,
+		onSave: props.save,
+		onDiscard: props.discard,
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.SegmentedControl, {
+					id: `plugin-config-tinyfish-${FIELD.channel}`,
+					label: t("channel"),
+					value: channel,
+					options: [{
+						value: "direct",
+						label: t("channelDirect")
+					}, {
+						value: "monid",
+						label: t("channelMonid")
+					}],
+					onChange: (next) => {
+						props.edit(FIELD.channel, next);
+					},
+					disabled
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("channelHint") }),
+				resetButton(FIELD.channel, state.fields[FIELD.channel]?.overridden ?? false)
+			] }),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.SettingsSecretField, {
+				id: `plugin-config-tinyfish-${keyChannel}`,
+				label: channel === "monid" ? t("monidApiKey") : t("apiKey"),
+				hint: channel === "monid" ? t("monidApiKeyHint") : t("apiKeyHint"),
+				text: key.text,
+				disabled,
+				configured: key.named,
+				stateLabel: key.named ? t("apiKeySet") : t("apiKeyUnset"),
+				onEdit: (text) => {
+					props.edit(keyChannel, text);
+				}
+			}),
+			searchOn && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.SettingsValueField, {
+				...field(FIELD.purpose),
+				label: t("purpose"),
+				hint: t("purposeHint"),
+				invalidLabel: t("invalidText")
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.SettingsValueField, {
+				...field(FIELD.attempts),
+				label: t("attempts"),
+				hint: t("attemptsHint"),
+				invalidLabel: t("invalidNumber"),
+				numeric: true
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Switch, {
+					label: t("search"),
+					checked: searchOn,
+					onChange: (next) => {
+						props.edit(FIELD.search, String(next));
+					},
+					disabled
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("searchHint") }),
+				resetButton(FIELD.search, state.fields[FIELD.search]?.overridden ?? false)
+			] }),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Switch, {
+					label: t("fetch"),
+					checked: fetchOn,
+					onChange: (next) => {
+						props.edit(FIELD.fetch, next.toString());
+					},
+					disabled
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("fetchHint") }),
+				resetButton(FIELD.fetch, state.fields[FIELD.fetch]?.overridden ?? false)
+			] }),
+			!searchOn && !fetchOn && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("bothOff") })
+		]
+	});
+}
+/**
+* Mount the TinyFish settings page while the Host serves its namespace.
+*
+* @param ctx - the browser plugin context.
+*/
+function apply(ctx) {
+	ctx.effect(() => {
+		ctx.locale.register(NS, {
+			zh,
+			en
+		});
+	}, "dsh-tinyfish: dictionaries");
+	const scope = ctx.configForms.get(NS);
+	const model = new _deepseek_ai_dsh_client_ui_primitives.SettingsFormModel(scope, SPECS, [{
+		field: FIELD.apiKey,
+		write: async (text) => {
+			try {
+				await ctx.remote.credentials.set(refOf(scope.getSnapshot(), "direct"), text);
+				return true;
+			} catch {
+				return false;
+			}
+		}
+	}, {
+		field: FIELD.monidApiKey,
+		write: async (text) => {
+			try {
+				await ctx.remote.credentials.set(refOf(scope.getSnapshot(), "monid"), text);
+				return true;
+			} catch {
+				return false;
+			}
+		}
+	}]);
+	const store = model.bind(() => ({
+		shell: model.shell(),
+		fields: Object.fromEntries(SPECS.map((spec) => [spec.field, model.field(spec.field)])),
+		keys: {
+			direct: {
+				text: model.field(FIELD.apiKey).text,
+				named: refOf(scope.getSnapshot(), "direct") !== DEFAULT_API_KEY_REF
+			},
+			monid: {
+				text: model.field(FIELD.monidApiKey).text,
+				named: refOf(scope.getSnapshot(), "monid") !== DEFAULT_MONID_KEY_REF
+			}
+		}
+	}));
+	ctx.effect(() => () => {
+		model.dispose();
+	}, "dsh-tinyfish: form subscription");
+	ctx.effect(() => {
+		ctx.configForms.whileServed([NS], () => {
+			ctx.slots.inject("plugins.bundle.config", () => {
+				ctx.slots.register({
+					name: "plugins.bundle.config",
+					key: "dsh-tinyfish",
+					locale: NS,
+					inject: () => ({
+						hooks: { tinyfishCard: store },
+						...model.actions()
+					})
+				}, TinyfishCard);
+			});
+		});
+	}, "dsh-tinyfish: page");
+}
+//#endregion
+exports.NS = NS;
+exports.apply = apply;
+exports.inject = inject;
+
+    return module.exports;
+  },
+});