dsh-web-search-plugin 0.4.0 → 0.4.1

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 本项目的重要变更都记录在此。格式遵循 [Keep a Changelog](https://keepachangelog.com/zh-CN/1.1.0/)，版本号遵循 [Semantic Versioning](https://semver.org/lang/zh-CN/)。
 
+## [0.4.1] - 2026-09-10
+
+### 变更
+
+- **适配 DeepSeek Harness `0.1.5-rc.1`**：四个 DSH peerDependencies 提升到 `^0.1.5-rc.1`，Node.js 运行要求对齐为 `^22.19.0 || >=24.0.0`。
+- 浏览器端显式注入 `remote.credentials`，避免 API remote 尚未挂载时访问凭据服务的启动顺序竞态。
+- Bundle 覆盖 `web.config` 时保留上游 `fetchProvider: http`，不再因切换搜索 provider 而隐式清除抓取 provider。
+- Brave 的 `proxy` 仅作为 provider 级显式覆盖；留空时继承 DSH 的全局代理分发器，统一支持 `HTTP_PROXY` / `HTTPS_PROXY` / `ALL_PROXY` / `NO_PROXY`。
+- 版本号及 `User-Agent` 更新为 `0.4.1`。
+
 ## [0.4.0] - 2026-09-02
 
 ### 变更

package/README.md

@@ -29,7 +29,8 @@
 
 ## 运行要求
 
-- DeepSeek Harness `0.1.2-alpha.4`（最新 main）或更新
+- DeepSeek Harness `0.1.5-rc.1` 或兼容版本
+- Node.js `^22.19.0` 或 `>=24.0.0`
 - pnpm，用于通过 `dsh plugin` 把插件装进 profile
 
 ## 安装
@@ -72,7 +73,7 @@ dsh plugin --profile web add dsh-web-search-plugin
 | `country` | — | Brave 的 `country`（ISO 两位码，如 `cn`）；留空使用 Brave 默认 |
 | `searchLang` | — | Brave 的 `search_lang`（如 `zh-hans`）；留空使用 Brave 默认 |
 | `freshness` | — | Brave 的 `freshness`：`pd` / `pw` / `pm` / `py` |
-| `proxy` | — | Brave 使用的 HTTP(S) 代理；留空回退 `HTTPS_PROXY` / `HTTP_PROXY` |
+| `proxy` | — | Brave 使用的 HTTP(S) 代理覆盖；留空继承 DSH 的全局 `HTTP_PROXY` / `HTTPS_PROXY` / `ALL_PROXY` / `NO_PROXY` 策略 |
 | `serperApiKey` / `serperApiKeyEnv` / `serperBaseURL` | — / `SERPER_API_KEY` / — | Serper 的 key 字面量 / 凭据引用名 / 端点覆盖 |
 | `serpapiApiKey` / `serpapiApiKeyEnv` / `serpapiBaseURL` | — / `SERPAPI_API_KEY` / — | SerpApi 的 key 字面量 / 凭据引用名 / 端点覆盖 |
 | `exaApiKey` / `exaApiKeyEnv` / `exaBaseURL` | — / `EXA_API_KEY` / — | Exa 的 key 字面量 / 凭据引用名 / 端点覆盖 |

package/cordis.patch.yml

@@ -3,14 +3,16 @@
 # installs the package as a plain library: no loader row, no Host apply, no
 # `/plugins/<name>/client.js`.
 #
-# `searchProvider` is restated in full because a Cordis patch replaces the
-# targeted row's whole `config`. The profile's own cordis.patch.yml still
-# wins if it later overrides `web`. The seam id is `dsh-web-search`; the
-# backend (DeepSeek / Tavily / Brave) is the plugin's own `provider` setting.
+# `searchProvider` and the upstream `fetchProvider` are restated in full
+# because a Cordis patch replaces the targeted row's whole `config`. The
+# profile's own cordis.patch.yml still wins if it later overrides `web`. The
+# seam id is `dsh-web-search`; the backend (DeepSeek / Tavily / Brave) is the
+# plugin's own `provider` setting.
 - id: web
   name: '@deepseek-ai/dsh-web'
   config:
     searchProvider: dsh-web-search
+    fetchProvider: http
 
 # This plugin re-hosts the DeepSeek backend, so the in-box DeepSeek host
 # plugin is redundant: disabling it removes its `deepseek-official` provider

package/lib/brave.js

@@ -12,7 +12,6 @@
  */
 import { ProxyAgent } from "undici";
 import { WebError } from "@deepseek-ai/dsh-web";
-import { launchEnvironmentOf } from "@deepseek-ai/dsh-launch-environment";
 import { MAX_RESULTS_CAP, USER_AGENT, isAbortError, isPositiveInteger, resolveApiKey, resolveSecret, searchAborted, throwIfSearchAborted } from "./shared.js";
 
 /** Default Brave Search API web-results endpoint. */
@@ -123,9 +122,9 @@ export class BraveSearchProvider {
 	}
 
 	/**
-	 * Cached undici ProxyAgent for the current proxy URL. Node's fetch does not
-	 * read `HTTPS_PROXY` itself; a configured proxy (or the launch-environment
-	 * fallback) is how DNS for api.search.brave.com can go through a tunnel.
+	 * Cached undici ProxyAgent for an explicit provider-level proxy override.
+	 * With no override, fetch inherits the dispatcher installed by DSH so its
+	 * HTTP_PROXY / HTTPS_PROXY / ALL_PROXY / NO_PROXY policy remains intact.
 	 */
 	dispatcher(options) {
 		const proxy = options.proxy;
@@ -142,7 +141,6 @@ export class BraveSearchProvider {
 
 /** Project the plugin section into Brave backend options. */
 export function resolveBraveOptions(ctx, config) {
-	const environment = launchEnvironmentOf(ctx);
 	return {
 		...resolveSecret(ctx, {
 			literal: config.braveApiKey,
@@ -153,6 +151,6 @@ export function resolveBraveOptions(ctx, config) {
 		country: config.country,
 		searchLang: config.searchLang,
 		freshness: config.freshness,
-		proxy: config.proxy ?? environment.get("HTTPS_PROXY")?.value ?? environment.get("HTTP_PROXY")?.value
+		proxy: config.proxy
 	};
 }

package/lib/client.js

@@ -132,7 +132,7 @@ window.__ModuleLoader__.load({
 			freshnessMonth: "Past month",
 			freshnessYear: "Past year",
 			proxy: "Proxy",
-			proxyPlaceholder: "Leave blank to use HTTPS_PROXY / HTTP_PROXY.",
+			proxyPlaceholder: "Leave blank to inherit the DSH proxy settings.",
 			deepseekApiKeyEnv: "Credential reference",
 			deepseekApiKeyEnvHint: "Name of the credential/env var resolved for DeepSeek search.",
 			deepseekBaseURL: "Endpoint",
@@ -228,7 +228,7 @@ window.__ModuleLoader__.load({
 			freshnessMonth: "过去一月",
 			freshnessYear: "过去一年",
 			proxy: "代理",
-			proxyPlaceholder: "留空使用 HTTPS_PROXY / HTTP_PROXY环境变量",
+			proxyPlaceholder: "留空继承 DSH 全局代理设置",
 			deepseekApiKeyEnv: "凭据引用名",
 			deepseekApiKeyEnvHint: "DeepSeek 搜索解析的凭据/环境变量名。",
 			deepseekBaseURL: "接口地址",
@@ -1168,7 +1168,7 @@ window.__ModuleLoader__.load({
 			}, makeSection(ctx, controller)));
 		}
 
-		const inject = ["slots", "locale", "remote", "settingsScope"];
+		const inject = ["slots", "locale", "remote", "remote.credentials", "settingsScope"];
 
 		exports.apply = apply;
 		exports.inject = inject;

package/lib/index.js

@@ -17,7 +17,6 @@
  * @module dsh-web-search-plugin
  */
 import z from "@deepseek-ai/schemastery";
-import { launchEnvironmentOf } from "@deepseek-ai/dsh-launch-environment";
 import { MAX_RESULTS_CAP } from "./shared.js";
 import { TAVILY_DEFAULT_API_KEY_ENV, TAVILY_DEFAULT_BASE_URL, TavilySearchProvider, resolveTavilyOptions } from "./tavily.js";
 import { BRAVE_DEFAULT_API_KEY_ENV, BRAVE_DEFAULT_BASE_URL, BraveSearchProvider, resolveBraveOptions } from "./brave.js";
@@ -68,7 +67,7 @@ const Config = z.object({
 	searchLang: z.string().default(""),
 	/** Optional Brave `freshness` (`pd` / `pw` / `pm` / `py`). */
 	freshness: z.string().default(""),
-	/** Optional HTTP(S) proxy URL for Brave (falls back to HTTPS_PROXY / HTTP_PROXY). */
+	/** Optional HTTP(S) proxy URL for Brave; blank inherits DSH's global proxy policy. */
 	proxy: z.string().default(""),
 	/** Literal Serper API key; prefer {@link serperApiKeyEnv}. */
 	serperApiKey: z.string().role("secret").default(""),
@@ -173,7 +172,7 @@ function resolveOptions(ctx, config) {
 	// metadata row's default is not enough (self-hosted SearXNG, proxied
 	// providers, custom key refs).
 	const keySourceByProvider = {
-		brave: { literal: config.braveApiKey, envName: config.braveApiKeyEnv ?? BRAVE_DEFAULT_API_KEY_ENV, baseURL: config.braveBaseURL ?? "", proxy: config.proxy || launchEnvironmentOf(ctx).get("HTTPS_PROXY")?.value || launchEnvironmentOf(ctx).get("HTTP_PROXY")?.value || "" },
+		brave: { literal: config.braveApiKey, envName: config.braveApiKeyEnv ?? BRAVE_DEFAULT_API_KEY_ENV, baseURL: config.braveBaseURL ?? "", proxy: config.proxy ?? "" },
 		tavily: { literal: config.apiKey, envName: config.apiKeyEnv ?? TAVILY_DEFAULT_API_KEY_ENV, baseURL: config.baseURL ?? "" },
 		serper: { literal: config.serperApiKey, envName: config.serperApiKeyEnv ?? "SERPER_API_KEY", baseURL: config.serperBaseURL ?? "" },
 		serpapi: { literal: config.serpapiApiKey, envName: config.serpapiApiKeyEnv ?? "SERPAPI_API_KEY", baseURL: config.serpapiBaseURL ?? "" },

package/lib/shared.js

@@ -7,7 +7,7 @@ import { launchEnvironmentOf } from "@deepseek-ai/dsh-launch-environment";
 import { WebError } from "@deepseek-ai/dsh-web";
 
 /** Attribution header sent on every request. */
-export const USER_AGENT = "dsh-web-search-plugin/0.4.0";
+export const USER_AGENT = "dsh-web-search-plugin/0.4.1";
 /** Shared cap: Tavily `max_results` and Brave `count` both accept 1..20. */
 export const MAX_RESULTS_CAP = 20;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-web-search-plugin",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Unified web search for the DeepSeek Harness seam (ctx.web): DeepSeek (official), Tavily, Brave, Serper, SerpApi, Exa, SearXNG, Scavio, and Firecrawl backends",
   "keywords": [
     "dsh-plugin",
@@ -24,7 +24,7 @@
     "LICENSE"
   ],
   "engines": {
-    "node": ">=18"
+    "node": "^22.19.0 || >=24.0.0"
   },
   "exports": {
     ".": {
@@ -57,10 +57,10 @@
     "undici": "^6.21.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-web": "^0.1.2-alpha.4",
-    "@deepseek-ai/dsh-credentials": "^0.1.2-alpha.4",
-    "@deepseek-ai/dsh-settings": "^0.1.2-alpha.4",
-    "@deepseek-ai/dsh-launch-environment": "^0.1.2-alpha.4",
+    "@deepseek-ai/dsh-web": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-credentials": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-launch-environment": "^0.1.5-rc.1",
     "@deepseek-ai/schemastery": "^3.18.2",
     "@deepseek-ai/cordis": "^4.0.2"
   },