dsh-web-search-pro 0.2.1 → 0.2.4

package/assets/skills/dsh-web-search-pro/SKILL.md

@@ -5,9 +5,9 @@ description: "Web research with web_call search.run (an evidence pack: only the
 
 # dsh-web-search-pro
 
-Two tools. `web_index` shows what exists; `web_call` runs one action and returns `{ok, action, result | error{code,message,hint,schema?}}` (you read the result as text). Actions are named `group.action`. Do not guess other tool names.
+Two tools. `web_index` shows what exists; `web_call` runs one action and returns `{ok, action, result | error{code,message,hint,schema?}}`. Actions are named `group.action`; do not guess other names.
 
-For web research prefer `search.run` over `web_search` + `web_fetch`: it returns filtered evidence, not whole result lists and pages. If the Host's own `web_search` already answers with an `Evidence pack ...` (it is routed through this plugin), treat it exactly like a `search.run` pack: read gaps, then `history.expand` or `read.fetch`.
+For web research prefer `search.run` over `web_search` + `web_fetch`: it returns filtered evidence, not whole result lists and pages. A Host `web_search` that answers with an `Evidence pack ...` (routed through this plugin) is a `search.run` pack: read gaps, then `history.expand` or `read.fetch`.
 
 ## 1. Search: evidence mode first
 
@@ -21,13 +21,13 @@ Pass `task` (one sentence: your goal, not the chat) or `profile` for an evidence
 {"action":"search.run","args":{"query":"量子计算 最新进展 2026","task":"了解 2026 年量子计算的最新进展","profile":"news_fact","needs":"最新的纠错进展;主要厂商的路线图","constraints":"[{\"kind\":\"time_window\",\"value\":\"2026\",\"strength\":\"soft\"}]"}}
 ```
 
-`needs` are `;`-separated sub-questions (default: the task). The query may be English while task and needs are Chinese.
+`needs` are `;`-separated sub-questions (default: the task). The query may be English with a Chinese task.
 
 ## 2. Read the pack before answering
 
 - Cite the evidence URLs. Every excerpt has an `evidenceId`.
 - **Coverage is heuristic.** A need listed in `gaps`, or an empty pack, does not mean the answer does not exist. Before saying "not found": expand or fetch, then try another source or phrasing (`gaps[].reason`: `no_candidates`, `no_page_content`, `weak_support`, `budget`).
-- `low relevance` entries only avoid an empty pack; do not lean on them.
+- `low relevance` entries only avoid an empty pack; do not rely on them.
 
 ```json call
 {"action":"history.expand","args":{"evidenceId":"e_1a2b3c"}}
@@ -53,7 +53,7 @@ A long page is capped; the reply gives `nextOffset`. Continue with `offset` (ser
 {"action":"search.recommend","args":{"task":"find the official documentation for Rust async runtimes","profile":"docs_code"}}
 ```
 
-returns at most 3 sources, ready ones first, with how to call each (`use`) and what is missing. Use one or two; add another only when the evidence is insufficient. Sources that need setup: tell the user what is missing (`references/sources.md`) instead of calling them.
+returns at most 3 sources, ready ones first, with how to call each (`use`) and what is missing. Use one or two; add another only when the evidence is insufficient. Needs setup: tell the user what is missing (`references/sources.md`), do not call it.
 
 Name sources only when you have a reason:
 
@@ -63,7 +63,7 @@ Name sources only when you have a reason:
 
 - `engines` takes ids from `search.recommend` / `sources.status` (aliases like `ddg` work; an unknown id lists the valid ones). Explicit engines are tried in order.
 - `platform` searches one site (`github`, `v2ex`, `bilibili`, `rss` with `url`, `zhihu`, `xiaohongshu`, `twitter`, ...). With `task`/`profile` it is the evidence source (gate, page reads and scoring as usual). If it is unavailable the call fails with what is missing: tell the user, or pass `allowFallback:true` to search the web engines instead. Platforms run a backend chain; logins are the user's job (`references/sources.md`).
-- **来源策略**: nothing configured = anonymous / free sources (English: Exa's keyless route, then ddg / bing; Chinese: ddg / bing). Sources the user configured a key for are promoted for their language; the user's settings `sources: {priority, disabled, budget}` are rankings and caps (a used-up source is skipped, never an error). `engines` always wins. Tiers: `references/sources.md`.
+- **来源策略**: nothing configured = anonymous / free sources (English: Exa's keyless route, then ddg / bing; Chinese: ddg / bing). Sources the user configured a key for are promoted for their language, `deepseek` (常用, billed) first; settings `sources: {priority, disabled, budget}` rank and cap them (a used-up source is skipped, never an error). `engines` always wins. Tiers: `references/sources.md`.
 
 ## 4. Constraints
 
@@ -75,14 +75,15 @@ Name sources only when you have a reason:
 
 ## 5. Budgets
 
-- `budget` (evidence mode): excerpt characters, default 6000, max 30000. Gaps caused by budget say so; raise it or expand.
-- `count`: max results (1-20). A page read is capped at 20000 characters by default; `maxChars` raises it per call.
-- Model scoring (when enabled) has a per-search and a daily token cap; `sources.status` shows usage (`references/judges.md`).
-- `cache.clear`, `history.delete`, `rules.upsert|remove|import` and `sources.install` change local state or the machine: run them only when the user asks.
+- `budget` (evidence mode): excerpt characters, default 6000, max 30000. Gaps caused by budget say so: raise it or expand.
+- `count`: max results (1-20). A page read is capped at 20000 characters; `maxChars` raises it.
+- Model scoring (when enabled) has token caps; `sources.status` shows usage (`references/judges.md`).
+- `cache.clear`, `history.delete`, `rules.upsert|remove|import`, `sources.install` and `config.*` change local state or the machine: run them only when the user asks.
+- The user asks you to reorder sources, switch one off or add a CLI as a source: `config.inspect` first, then `config.set_order` / `set_confidence` / `upsert_cli` (asks the user) with a real `reason`: `references/config.md`.
 
 ## 6. Browser hand-off
 
-For pages that need interaction, login, or a rendered DOM, use the dsh-browser plugin: see its skill `dsh-browser` or call `browser_index`. `read.snapshot` and browser-based platforms work only when it is installed and ready (`sources.status` shows `browser`).
+Pages that need interaction, login or a rendered DOM: the dsh-browser plugin (its skill `dsh-browser`, or `browser_index`). `read.snapshot` and browser platforms work only when it is installed and ready (`sources.status` shows `browser`).
 
 ## 7. When something fails
 
@@ -95,4 +96,4 @@ For pages that need interaction, login, or a rendered DOM, use the dsh-browser p
 | `DEADLINE` | retry narrower, fewer engines |
 | `ACTION_FAILED` | read the message; empty or failed engines are listed in the result (`enginesTried`, `fallbackNote`) |
 
-Quota, fake-IP errors, cooldowns: `references/troubleshooting.md`. Judge providers and rubrics (settings, not model-editable): `references/judges.md`. Keyed sources and the catalog: `references/sources.md`. Extraction rules for a badly read site: `rules.upsert`, then `read.fetch` with `fresh:true`.
+Quota, fake-IP, cooldowns: `references/troubleshooting.md`. Judge providers, rubrics (settings): `references/judges.md`. Keyed sources, catalog: `references/sources.md`. Bad extraction: `rules.upsert`, then `read.fetch` `fresh:true`.

package/assets/skills/dsh-web-search-pro/references/config.md

@@ -0,0 +1,36 @@
+# Changing the search order at run time: `config.*`
+
+Use these when the **user** asks you to change how searches are routed: put a source first or last, switch one off, trust one source less, change the backends a platform tries, or add a command-line tool as a source. Do not use them on your own initiative to "improve" results.
+
+The user's configuration (the profile) is the baseline. `config.*` writes a separate **overlay** on top of it. It applies at once to the next call, the user sees every change in the settings card ("Agent changes", with your reason and the time) and can adopt it into their configuration or revoke it. You cannot touch keys, paths, budgets or switches this way, and nothing you write deletes a baseline entry.
+
+## The order of work
+
+1. `config.inspect`: what is in force, which entries come from the overlay, the `revision`, the recent audit trail, and settings waiting for a plugin restart (`待重启`).
+2. Make one change with a real `reason` (3-300 characters, what the user asked and why). Pass `expectedRevision` from the inspect so a change made meanwhile (by the user in the card) is not overwritten.
+3. Tell the user what changed and that they can revoke it in the settings card.
+
+```json call
+{"action":"config.inspect","args":{}}
+```
+
+```json call
+{"action":"config.set_order","args":{"engines":["bing","ddg","exa"],"reason":"The user asked to try bing before ddg for Chinese queries","expectedRevision":0}}
+```
+
+## The actions
+
+- `config.set_order {engines?, priority?, disabled?, platform?, backends?}`: each list **replaces** the list in force (give the whole list). `platform` and `backends` go together: the whole backend chain of that platform. A custom CLI is written `custom-cli:<id>`. To stop using a source put it in `disabled`.
+- `config.set_confidence {id, value}`: 0..1, slightly lowers a source's weight when results are fused (1 = no change). Omit `value` to drop the overlay's entry.
+- `config.upsert_cli {id, spec}`: add or replace a custom CLI source. **It always asks the user first** (it lets the plugin run a local program; the prompt shows the command and argument templates). With no one to ask (a headless run) it is refused: tell the user instead. The spec must pass the same read-only checks as in the card (no login or write commands, no cookie or credential flags, no secrets). Try the spec's command yourself first only if the user asked you to; `sources.deps` shows whether the tool is installed.
+- `config.remove_cli {id}`: only a CLI the overlay added, and not while the overlay still names it in an order list. A CLI from the configuration is switched off with `config.set_order {disabled:[...,"custom-cli:<id>"]}`.
+- `config.reset {scope, id?}`: `all`, `order` (engines, priority, disabled), `confidence`, `cli`, `platform`; `id` narrows the last three to one entry. `reset all` also repairs an overlay file that could not be read.
+- `config.export`: the settings in force as YAML. Show it to the user if they want to keep the change in their configuration.
+
+## Errors
+
+- `INVALID_ARGS`: the message names the id or value the validators refused. Nothing was written.
+- `ACTION_FAILED` with "revision N, not M": someone changed the overlay since you read it. `config.inspect` again and decide again.
+- `CAPABILITY_UNAVAILABLE`: the overlay file is unreadable or no longer agrees with the configuration and is being ignored as a whole (the configuration applies as written). Ask the user, or `config.reset {scope:"all"}` if they agree.
+- `POLICY_DENIED`: the browser plugin's `automationMode` is read-only, or the user refused. Do not retry; ask the user.
+- Settings marked `待重启` in `config.inspect` / `sources.status` (`toolSurface`, `dbPath`, `registerProvider`, `providerId`, `timeoutMs`, `memoryCacheEntries`, `verbose`, `playwright.snapshotDir`) only take effect after the plugin restarts; tell the user, you cannot change them anyway.

package/assets/skills/dsh-web-search-pro/references/sources.md

@@ -8,9 +8,9 @@ Every source has a cost tier, shown by `search.recommend` and `sources.status`:
 
 - `anonymous`: no key, account or money (rate limits aside): `ddg`, `bing`, `exa` over its keyless MCP route (needs `mcporter` and an `exa` MCP server), `wikipedia`, `hackernews`, `stackexchange`, `openalex`, `semanticscholar`, `anysearch`, `github`, `arxiv`, `pubmed`, `v2ex`, `rss`, `searxng`.
 - `free-quota`: needs a key, account or login and is free to use: `tavily` (1000 credits a month), `brave` ($5 of credits a month, a card for identity), `linkup`, `serper` (2500 queries at sign-up, once), `jina` (10M tokens per new key, once), `baidu-qianfan` (100 calls a day), `exa` with an API key ($10 a month), `github-code` (a free token), login platforms.
-- `paid`: `bocha`, `metaso`, `zhipu` (no free allowance on the official pages).
+- `paid`: `deepseek` ($0.75 per 1,000 successful requests), `bocha`, `metaso`, `zhipu` (no free allowance on the official pages).
 
-Order of precedence for the automatic plan: (1) `engines` / `platform` in the call; (2) the user's `priority` list (setting `sources:`); (3) sources the user configured with a key, promoted for their language and profile (at most two, one per family); (4) otherwise the anonymous / free defaults. A paid source is used only when the user configured its key; `evidence.sourcePolicy: anonymous-only` never uses a source that needs a key, account or login. `budget: { <id>: {total, daily} }` under `sources:` (optional, nothing is capped by default) caps a source; a used-up one is skipped with a note and the plan falls back to free sources. `sources.status` shows used and remaining requests. Example for a Bocha account with 1000 requests: `sources: { budget: { bocha: { total: 1000, daily: 50 } } }`. These are the user's settings: do not change them, tell the user.
+Order of precedence for the automatic plan: (1) `engines` / `platform` in the call; (2) the user's `priority` list (setting `sources:`); (3) sources the user configured with a key, promoted for their language and profile (at most two, one per family; `deepseek`, the 常用 source, goes first of them in both languages, and leads a plain search's default chain while `engines` is the default list); (4) otherwise the anonymous / free defaults. A paid source is used only when the user configured its key; `evidence.sourcePolicy: anonymous-only` never uses a source that needs a key, account or login. `budget: { <id>: {total, daily} }` under `sources:` (optional, nothing is capped by default) caps a source; a used-up one is skipped with a note and the plan falls back to free sources. `sources.status` shows used and remaining requests. Example for a Bocha account with 1000 requests: `sources: { budget: { bocha: { total: 1000, daily: 50 } } }`. These are the user's settings: do not change them, tell the user.
 
 ## Kinds
 
@@ -19,6 +19,7 @@ Order of precedence for the automatic plan: (1) `engines` / `platform` in the ca
 
 | id | language | key variable |
 |---|---|---|
+| `deepseek` | zh + en, 常用 | `DEEPSEEK_API_KEY` (DeepSeek Search API; verified live 2026-10-26; billed, see below) |
 | `exa` | en | `EXA_API_KEY` |
 | `bocha` | zh | `BOCHA_SEARCH_API_KEY` (falls back to `BOCHA_JEV_API_KEY`; verified live 2026-10-04) |
 | `tavily` | en | `TAVILY_API_KEY` |
@@ -31,17 +32,18 @@ Order of precedence for the automatic plan: (1) `engines` / `platform` in the ca
 | `jina` | any | `JINA_API_KEY` |
 
 - **Self-hosted**: `searxng` needs `searxngUrl` in settings (no public instance is built in).
-- **CLI** (`sources.deps` lists them with `installation`: missing / detected / incompatible; `sources.install` installs one when the user asks): `bili`, `yt-dlp`, `twitter` (also needs `TWITTER_AUTH_TOKEN` and `TWITTER_CT0`), `xhs`, `zhihu`, `rdt`, `omnireach`, `gh`, `wx-search-cli`, `tanso`, standalone `opencli`, the user's own `cliAdapters`, `mcporter`, `agent-reach` (optional helper). See "Backend chains" below.
+- **CLI** (`sources.deps` lists them with `installation`: missing / detected / incompatible; `sources.install` installs one when the user asks): `bili`, `yt-dlp`, `twitter` (twitter-cli, an optional fallback; also needs `TWITTER_AUTH_TOKEN` and `TWITTER_CT0` in DSH credentials or the Host process environment, not just a shell profile), `xhs`, `zhihu`, `rdt` (optional fallbacks), `omnireach`, `gh`, `wx-search-cli`, `tanso`, standalone `opencli`, the user's own `cliAdapters`, `mcporter`, `agent-reach` (optional helper). See "Backend chains" below.
 - **Browser-based** (need dsh-browser and a saved login): `weibo`, `douban`, `tieba`, `douyin`, `kuaishou`, and the dsh-browser OpenCLI legs of `instagram` / `facebook` (and the last legs of `xiaohongshu`, `reddit`, `twitter`, `zhihu`).
 
 ## Backend chains (CLI adapters)
 
-Every platform is ONE source with an ordered chain of backends; the first usable one answers, empty or failing ones fall through. `sources.status` shows each platform's `chain` (order, state, why a backend is skipped). Defaults: `xiaohongshu`: opencli (standalone) > xhs > browser-opencli; `reddit`: rdt > opencli > browser-opencli; `zhihu`: zhihu > browser-search; `twitter`: twitter > opencli > browser-opencli; `bilibili`: bili; `youtube`: yt-dlp; `github`, `github-issues`, `github-code`: rest > gh; `wechat` (公众号): omnireach > wx-search-cli; `omnireach` (multi-source, never planned on its own). The user can reorder with `platformBackends: { <platform>: [ids] }` and add read-only adapters in `cliAdapters` (platform `custom-cli:<id>`); an invalid entry is ignored and explained in `sources.status` `notes`.
+Every platform is ONE source with an ordered chain of backends; the first usable one answers, empty or failing ones fall through. `sources.status` shows each platform's `chain` (order, state, why a backend is skipped). Defaults: `xiaohongshu`: opencli (standalone) > xhs > browser-opencli; `reddit`: opencli > rdt > browser-opencli; `zhihu`: opencli > zhihu > browser-search; `twitter`: opencli > twitter > browser-opencli (the four login platforms try the standalone OpenCLI first: it uses the login of the user's own day-to-day Chrome); `bilibili`: bili; `youtube`: yt-dlp; `github`, `github-issues`, `github-code`: rest > gh; `wechat` (公众号): omnireach > wx-search-cli; `omnireach` (multi-source, never planned on its own). The user can reorder with `platformBackends: { <platform>: [ids] }` (an explicit order is used as written) and add read-only adapters in `cliAdapters` (platform `custom-cli:<id>`); an invalid entry is ignored and explained in `sources.status` `notes`.
 
-- A backend that is not installed, has another contract (`incompatible`, with the reason) or is not logged in is skipped. When the whole chain is down the error names every backend and what to install or run. Report it; do not retry.
-- **Login is the user's job.** Never run `xhs login`, `rdt login`, `zhihu login`, `gh auth login` or anything like them, and never pass cookie options. Tell the user to run the CLI's own login. xhs, rdt and zhihu are not run until a saved login exists (without one they read browser cookies themselves).
-- Verification differs per adapter (`sources.deps` shows it): `live` (bili, gh repos, omnireach wechat), `contract-only` (help probed, no login-bound search run: xhs, zhihu, rdt, twitter, yt-dlp, wx-search-cli, standalone opencli), `docs-only` (tanso, from upstream docs). Treat contract-only and docs-only results as experimental.
+- A backend that is not installed, has another contract (`incompatible`, with the reason), is not logged in, was blocked by the site or failed is passed over; the result's notes say `skipped backends: <id>: <reason>` and the history names the backend that answered. When the whole chain is down the error names every backend and what to install or run. Report it; do not retry.
+- **Login is the user's job.** Never run `xhs login`, `rdt login`, `zhihu login`, `gh auth login` or anything like them, and never pass cookie options. For `xiaohongshu`, `zhihu`, `reddit` and `twitter` the recommended path is the standalone `opencli`, which uses the login of the user's own Chrome (the user logs in to the site there and has the OpenCLI Browser Bridge extension installed): when it reports "not logged in", tell the user to log in to that site in their Chrome and retry; do not look for a login command. The CLIs `xhs`, `rdt`, `zhihu`, `twitter` are optional fallbacks the user logs in with the tool's own login; they are not run until a saved login exists (without one they read browser cookies themselves). A failure that says the site "returned a web page instead of data" is a login wall, risk control or an IP block (Reddit blocks proxied addresses): report it, do not retry in a loop.
+- Verification differs per adapter (`sources.deps` shows it): `live` (bili, gh repos / issues / code, omnireach, yt-dlp, wx-search-cli, xhs, and standalone opencli for the twitter and zhihu sites), `contract-only` (help probed, output shape from the tool's source or docs, no successful search run: zhihu, rdt, twitter CLIs and standalone opencli for xiaohongshu / reddit; `sources.status` tags these backends), `docs-only` (tanso, from upstream docs). Treat contract-only and docs-only results as experimental.
 - The plugin only ever runs read commands (search); posting, liking, following and the like are refused by the adapter spec itself.
+- **User-defined CLIs** (`cliAdapters`, shown in the settings card under "Custom CLI"): registered as `custom-cli:<id>`. With `engine: true` one is a general engine that can go into `engines` (`engines=custom-cli:<id>`); with `platforms: [...]` it can sit in those platforms' backend chains. Their results carry `via`, `confidence` (when below 1) and `tag` ("user-defined, not verified by the plugin"): treat them as unverified. A spec with `output.lines: { mode: whole }` returns the tool's whole stdout as ONE result with a stand-in link `cli://<id>?q=...`: it is not a web page, evidence mode lists it but never fetches it, and its text is cut at `maxChars` with a note. the setting `sources: { confidence: { <id>: 0-1 } }` lowers how much a source weighs when several are fused (a custom CLI defaults to 0.5, built-ins to 1) and never drops a result. To test one without the panel: `sources.status`, then `search.run engines=custom-cli:<id>`.
 
 ## Platforms (one site or community)
 
@@ -57,6 +59,10 @@ Platforms are sources like any other (`sources.status` lists them with `kind: pl
 - `url` (rss only), `authProfile` and `rulePack` go with `platform`; `browserBindings` fill the last two per platform.
 - The user's own `customPlatforms` appear here as platforms too, under their key.
 
+## DeepSeek Search and Fetch (常用)
+
+`deepseek` is the plugin's common source: `POST https://api.deepseek.com/v1/tools/search`, the same API key as the DeepSeek models (`DEEPSEEK_API_KEY`, a DSH credential, or `keyedSources.deepseek.apiKey`). $0.75 per 1,000 SUCCESSFUL requests (empty results and failures are free; `count` does not change the price); calls through the Harness's own tools are free until 2026-11-01 Beijing time, but this plugin's direct calls are treated as billed. Results carry a model-ready `summary` (used as the excerpt), `date`, and the provider's own grades `rerankScore` (0-3, 1.5+ is good) and `authority` (0-4, 3+ is high): hints, not proof. Queries are cut to 128 characters (operators kept) and the result says so. 402 means the account balance is empty: tell the user to top it up. Cap it with the `sources` setting's `budget.deepseek`; turn it off by listing `deepseek` under its `disabled`. The Fetch API is `read.fetch mode:"deepseek"` (auto mode uses it as a fallback when `deepseekFetch` is on); its 403 / 404 are DeepSeek's answer, not the page's HTTP status.
+
 ## Setting a key (the user does this; never ask for the key value)
 
 A key is read from, in order: the literal in settings (`exaApiKey`, `keyedSources.<id>.apiKey`), a credentials reference (`...Env` / `apiKeyEnv` names a variable or credential), then the default variable above. Tell the user which variable to set, then call `sources.status` and check the source shows `credential: configured`. A key that is configured but rejected (401/403) is reported as an error, not a cooldown.

package/assets/skills/dsh-web-search-pro/references/troubleshooting.md

@@ -6,6 +6,7 @@ Start with `sources.status`: it makes no search request and shows engine state,
 |---|---|
 | `resolved to proxy fake-IP ...` | Clash/TUN fake-IP DNS (`198.18.0.0/15`, `fdfe:dcba:9876::/64`, `2001:2::/48`). Ask the user to enable `allowProxyFakeIp` in the plugin's advanced settings (default off). It trusts only those DNS answers; literal fake-IP URLs, localhost and other private addresses stay blocked. |
 | `quota_exhausted (HTTP 402)`, `ENGINE_QUOTA`, "no credit/quota" | The account or the anonymous tier is used up. It is not retried or cooled down. Use another source from `search.recommend`; for a keyed source tell the user to top up. Never retry in a loop. |
+| DeepSeek `HTTP 402 ... 余额不足` | The DeepSeek API balance is empty (Search and Fetch share it). Tell the user to top it up at platform.deepseek.com; the plugin falls back to the next source meanwhile. 408 / 429 / 5xx from DeepSeek are retried twice after a wait before they count as a failure. |
 | `ENGINE_RATE_LIMIT`, 429, a source in `cooldown` | The service said wait; the plugin respects `Retry-After`. Use a different source now; `cooldownUntil` shows when it is free. |
 | 401 / 403 on a keyed source | The key is rejected: the user must check it. It does not cool the source down. |
 | every engine returned nothing | Not an error. Rephrase, add a `site:` word, or try a source from `search.recommend`; a `fallbackNote` lists who was tried and skipped. |
@@ -13,10 +14,11 @@ Start with `sources.status`: it makes no search request and shows engine state,
 | `platform X unavailable ... dsh-browser` | A browser-based or OpenCLI platform without the dsh-browser plugin (or with an older one). `sources.status` -> `browser` says `missing` / `incomplete`. Use a non-browser source, or ask the user to install or update it. |
 | `dsh-browser 0.1.x is not supported by web-search-pro 0.2+` | Legacy browser: `sources.status` shows `browser: legacy (unsupported)`. `read.snapshot`, `read.fetch mode=playwright`, browser and OpenCLI platforms refuse; `auto` fetch skips the browser; everything else works. Tell the user to upgrade to `@anweat/dsh-browser ^0.2.0`; do not retry. |
 | `CAPABILITY_UNAVAILABLE`, `platform X unavailable: ...` | A platform you named cannot run: the message says what is missing (browser, login, CLI, token, settings switch, cooldown) and the hint has the setup text. Tell the user. In evidence mode `allowFallback:true` searches the web engines instead; the pack's notes say so. |
+| `opencli is not logged in`, or `the site returned a web page instead of data, or blocked the request` in a platform error or in `skipped backends` | The standalone OpenCLI uses the login of the user's own Chrome: ask the user to log in to that site in their Chrome (and check `opencli doctor` for the Browser Bridge extension). The second wording is a login wall, risk control or an IP block (Reddit blocks proxied addresses); report it, do not retry in a loop. The plugin never logs in for the user. |
 | platform result is empty with `no results: ...` in `fallbackNote` | The platform ran and returned nothing; the note is the platform's own hint (usually a missing login or changed page selectors). Not an error and not cooled down. |
 | login pages (`login_wall`), captcha | The text is not the content. Chinese communities need a saved, domain-scoped login (`browserBindings`). Do not try to bypass a captcha. |
 | `js_shell` / empty page text | The page needs JavaScript. With dsh-browser ready, `read.fetch` already tried a render in `auto` mode; otherwise `read.snapshot`, or add a site rule (`rules.upsert` with `contentSelectors`). |
-| twitter source `unavailable` | The `twitter` command, `enableCliBackends`, `agentReachEnabled` and `TWITTER_AUTH_TOKEN` + `TWITTER_CT0` must all be in place; the `note` says which is missing. `sources.deps` shows the install command. |
+| twitter source `unavailable` | The `twitter` command (twitter-cli 0.8.5+, its `search --help` must list `--json`), `enableCliBackends`, `agentReachEnabled` and `TWITTER_AUTH_TOKEN` + `TWITTER_CT0` must all be in place; the `note` says which is missing and where it looked. The tokens belong in DSH credentials (settings `twitterAuthToken` / `twitterCt0`, or the refs `twitterAuthTokenEnv` / `twitterCt0Env`) or in the Host process environment; a shell profile alone is not enough. Twitter results that look like field names or avatar/video links mean an old plugin parsing twitter-cli's default YAML (issue #38, fixed in 0.2.2). |
 | `model budget exceeded` in notes | The judge's token cap was reached; rule scores were used. Results remain valid. |
 | `partial: true` | The overall time limit (`timeoutMs` + 30 s) was reached; the pack holds what was ready. Expand or search again narrower. |
 | `NOT_FOUND` on an id | Ids (`history`, `evidenceId`) disappear when the query is deleted or cleared. List again with `history.list`. |

package/catalog/sources.v1.json

@@ -1,9 +1,10 @@
 {
  "$schema": "dsh-web-search-pro/source-catalog",
  "version": 1,
- "updated": "2026-10-06",
+ "updated": "2026-10-27",
  "description": "Known search sources, pure data. It never executes anything: only adapters registered in the provider registry can run; this file explains what is missing and how to set it up.",
  "entries": [
+  {"id":"deepseek","label":"DeepSeek Search API","kind":"api","operations":["search"],"languages":["zh","en"],"regions":["global","cn"],"profiles":["general","news_fact","experience","compare","docs_code"],"resultKinds":["web"],"auth":"key","costTier":"paid","keyEnv":["DEEPSEEK_API_KEY"],"provider":"deepseek","rank":5,"common":true,"install":"Create an API key at platform.deepseek.com and set DEEPSEEK_API_KEY (or a DSH credential / the settings key field). Optional cap: sources.budget.deepseek. Optional page reader: deepseekFetch.","license":"proprietary API service","cost":"paid: $0.75 per 1,000 successful requests, Search and Fetch each; empty results and failures are free (api-docs.deepseek.com/guides/search, 2026-10-26)","url":"https://api-docs.deepseek.com/guides/search/","verification":{"status":"verified","date":"2026-10-26","note":"8 Search + 4 Fetch live requests: result shape, summary / rerank_score / authority / date, operators, 128-char limit, 401 / 404 bodies; 403 and retry paths from the docs only"},"recommendedFor":["General web search in Chinese and English with a model-ready summary, a date, and the service's own rerank score and authority grade"],"notFor":["accounts without API balance (HTTP 402)","queries over 128 characters: they are cut, with a note"]},
   {"id":"seam","label":"DeepSeek native search (ctx.web)","kind":"api","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["general"],"resultKinds":["web"],"auth":"anonymous","costTier":"anonymous","requires":{"service":"ctx.web"},"provider":"seam","rank":60,"install":"Provided by the DSH host web capability; configure a web provider in the host.","license":"depends on the host provider","cost":"decided by the host provider behind ctx.web","verification":{"status":"verified","note":"shipped built-in"},"recommendedFor":["one general web query through whatever provider the host selected"],"notFor":["evidence of independence: the upstream index is unknown"]},
   {"id":"exa","label":"Exa","kind":"api","operations":["search"],"languages":["en"],"regions":["global"],"profiles":["general","news_fact","experience","compare","docs_code"],"resultKinds":["web"],"auth":"key","costTier":"anonymous","keyEnv":["EXA_API_KEY"],"provider":"exa","sourceFamily":"exa","rank":10,"install":"Set EXA_API_KEY (or exaApiKey). Without a key the mcporter MCP fallback works for plain queries only.","license":"proprietary API service","cost":"keyless MCP route (mcporter): anonymous, rate limited, verified 2026-10-04. API key route: $10 free credits monthly (https://exa.ai/pricing)","url":"https://exa.ai/docs/reference/search","verification":{"status":"verified","note":"shipped built-in"},"recommendedFor":["English semantic web search","docs and technical articles"],"notFor":["advanced filters through the mcporter fallback"]},
   {"id":"ddg","label":"DuckDuckGo","kind":"api","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["general","news_fact","experience","compare","docs_code","academic"],"resultKinds":["web"],"auth":"anonymous","costTier":"anonymous","provider":"ddg","rank":40,"install":"None (HTML endpoint, no key).","license":"free endpoint, no SLA","cost":"free","verification":{"status":"verified","note":"shipped built-in"},"recommendedFor":["default keyless general web search","site:/-term operators"],"notFor":["heavy or parallel use: rate limits and bot checks return empty pages"]},
@@ -14,17 +15,17 @@
   {"id":"github-code","label":"GitHub code search","kind":"api","operations":["search"],"languages":["*"],"regions":["global"],"auth":"key","costTier":"free-quota","keyEnv":["GITHUB_TOKEN","GH_TOKEN"],"sourceFamily":"github","license":"proprietary API service","cost":"free-quota: a free GitHub token is required; free within the REST search rate limits (https://docs.github.com/en/rest/search/search, 2026-10-04)","verification":{"status":"unverified","note":"REST search API; code search needs an authenticated request"},"profiles":["docs_code"],"resultKinds":["code"],"provider":"github-code","platform":"github-code","install":"Set GITHUB_TOKEN (or settings githubToken), or install gh and run `gh auth login` yourself: code search needs an authenticated request.","recommendedFor":["finding real usages of an API or a config key in public code"],"notFor":["use without a token","natural-language questions"]},
   {"id":"github-issues","label":"GitHub issues and pull requests","kind":"api","operations":["search"],"languages":["*"],"regions":["global"],"auth":"anonymous","costTier":"anonymous","keyEnv":["GITHUB_TOKEN","GH_TOKEN"],"sourceFamily":"github","license":"proprietary API service","cost":"free within GitHub API limits","verification":{"status":"unverified","note":"REST search API; no live check recorded"},"profiles":["docs_code","experience"],"resultKinds":["forum"],"provider":"github-issues","platform":"github-issues","install":"None; GITHUB_TOKEN (optional) raises the rate limit.","recommendedFor":["known bugs, workarounds and maintainer answers for an error message"],"notFor":["general web knowledge"]},
   {"id":"bilibili","label":"Bilibili (bili CLI)","kind":"cli","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["video"],"auth":"anonymous","costTier":"anonymous","requires":{"cli":"bili"},"provider":"bilibili","platform":"bilibili","install":"uv tool install --force git+https://github.com/public-clis/bilibili-cli (pinned revision; sources.deps shows the command).","license":"Apache-2.0 (public-clis/bilibili-cli)","cost":"free","verification":{"status":"verified","date":"2026-10-06","version":"0.6.2","note":"bili search --type video --max 2 --json parsed live; contract probed by sources.deps"},"recommendedFor":["Chinese video tutorials and reviews"],"notFor":["text-first factual questions","another PyPI package named bilibili-cli (different contract)"]},
-  {"id":"youtube","label":"YouTube (yt-dlp)","kind":"cli","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["experience"],"resultKinds":["video"],"auth":"anonymous","costTier":"anonymous","requires":{"cli":"yt-dlp"},"provider":"youtube","platform":"youtube","install":"uv tool install yt-dlp (or pip install yt-dlp).","license":"Unlicense (yt-dlp)","cost":"free","verification":{"status":"unverified","date":"2026-10-06","version":"2026.08.19","note":"contract-only: help probed, flags and print template from the shipped backend; no search run"},"recommendedFor":["video talks, demos and tutorials"],"notFor":["transcripts (not wired into this plugin)"]},
+  {"id":"youtube","label":"YouTube (yt-dlp)","kind":"cli","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["experience"],"resultKinds":["video"],"auth":"anonymous","costTier":"anonymous","requires":{"cli":"yt-dlp"},"provider":"youtube","platform":"youtube","install":"uv tool install yt-dlp (or pip install yt-dlp).","license":"Unlicense (yt-dlp)","cost":"free","verification":{"status":"verified","date":"2026-10-11","version":"2026.08.19","note":"yt-dlp ytsearch2:... --flat-playlist --print <template> run and parsed live"},"recommendedFor":["video talks, demos and tutorials"],"notFor":["transcripts (not wired into this plugin)"]},
   {"id":"v2ex","label":"V2EX","kind":"api","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["forum"],"auth":"anonymous","costTier":"anonymous","provider":"v2ex","platform":"v2ex","install":"None.","license":"free public site","cost":"free","verification":{"status":"verified","note":"shipped built-in"},"recommendedFor":["Chinese developer community experience"],"notFor":["English questions","official documentation"]},
   {"id":"arxiv","label":"arXiv","kind":"api","operations":["search"],"languages":["en"],"regions":["global"],"profiles":["academic"],"resultKinds":["paper"],"auth":"anonymous","costTier":"anonymous","provider":"arxiv","platform":"arxiv","sourceFamily":"arxiv","install":"None.","license":"free public API","cost":"free","verification":{"status":"verified","note":"shipped built-in"},"recommendedFor":["preprints in CS, physics, maths"],"notFor":["biomedicine (use PubMed)","peer-review status"]},
   {"id":"pubmed","label":"PubMed","kind":"api","operations":["search"],"languages":["en"],"regions":["global"],"profiles":["academic"],"resultKinds":["paper"],"auth":"anonymous","costTier":"anonymous","provider":"pubmed","platform":"pubmed","sourceFamily":"pubmed","install":"None.","license":"free public API (NCBI)","cost":"free","verification":{"status":"verified","note":"shipped built-in"},"recommendedFor":["biomedical and life-science literature"],"notFor":["computer science papers"]},
-  {"id":"twitter","label":"Twitter / X: twitter-cli, OpenCLI, dsh-browser","kind":"cli","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["experience","news_fact"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","keyEnv":["TWITTER_AUTH_TOKEN","TWITTER_CT0"],"requires":{"cli":"twitter"},"platform":"twitter","install":"Default chain: twitter-cli (uv tool install twitter-cli; export TWITTER_AUTH_TOKEN / TWITTER_CT0), standalone OpenCLI, then dsh-browser OpenCLI. Reorder with platformBackends.","license":"unknown","cost":"free (your account)","verification":{"status":"unverified","date":"2026-10-06","version":"0.8.5","note":"contract-only: twitter-cli help probed; no search run (needs your tokens)"},"recommendedFor":["live reactions and announcements by accounts"],"notFor":["anonymous use","a different program named twitter on PATH"],"provider":"twitter"},
-  {"id":"xiaohongshu","label":"Xiaohongshu (小红书): OpenCLI, xhs, dsh-browser","kind":"cli","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","platform":"xiaohongshu","install":"Default chain: standalone OpenCLI (npm i -g @jackwener/opencli + its Chrome bridge, your own login), then xhs (uv tool install xiaohongshu-cli; run `xhs login` yourself), then dsh-browser OpenCLI. Reorder with platformBackends.","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","verification":{"status":"unverified","date":"2026-10-06","note":"contract-only: opencli 1.8.8 command table and xhs 0.6.4 help probed; no search run (needs your login)"},"recommendedFor":["Chinese lifestyle and product experience notes"],"notFor":["use with no backend installed or logged in","high-volume crawling"],"provider":"xiaohongshu"},
-  {"id":"reddit","label":"Reddit: rdt, OpenCLI, dsh-browser","kind":"cli","operations":["search"],"languages":["en"],"regions":["global"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","platform":"reddit","install":"Default chain: rdt (uv tool install git+https://github.com/public-clis/rdt-cli; run `rdt login` yourself), standalone OpenCLI, then dsh-browser OpenCLI. Reorder with platformBackends.","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","verification":{"status":"unverified","date":"2026-10-06","note":"contract-only: rdt 0.4.2 help probed and output shape read from its source; no search run (needs your login)"},"recommendedFor":["English community experience threads"],"notFor":["use with no backend installed or logged in"],"provider":"reddit"},
+  {"id":"twitter","label":"Twitter / X: OpenCLI (your Chrome), twitter-cli, dsh-browser","kind":"cli","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["experience","news_fact"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"cli":"opencli"},"platform":"twitter","install":"Chain: standalone OpenCLI (npm i -g @jackwener/opencli + its Browser Bridge extension; log in to x.com in your own Chrome (the plugin never logs in)), optional twitter-cli (uv tool install twitter-cli; TWITTER_AUTH_TOKEN / TWITTER_CT0), dsh-browser OpenCLI. Reorder with platformBackends.","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","verification":{"status":"unverified","date":"2026-10-27","version":"1.8.8","note":"opencli 1.8.8 search run on the user's own Chrome and parsed (live fixture); the twitter-cli fallback is contract-only"},"recommendedFor":["live reactions and announcements by accounts"],"notFor":["anonymous use (needs an x.com login in your Chrome)","a different program named twitter on PATH (the twitter-cli fallback)"],"provider":"twitter"},
+  {"id":"xiaohongshu","label":"Xiaohongshu (小红书): OpenCLI, xhs, dsh-browser","kind":"cli","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","platform":"xiaohongshu","install":"Chain: standalone OpenCLI (npm i -g @jackwener/opencli + its Browser Bridge extension; log in to xiaohongshu.com in your own Chrome (the plugin never logs in)), optional xhs (uv tool install xiaohongshu-cli; run `xhs login` yourself), dsh-browser OpenCLI. Reorder with platformBackends.","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","verification":{"status":"unverified","date":"2026-10-27","note":"xhs 0.6.4 search run with a saved login and parsed (live fixture); opencli 1.8.8 answered AUTH_REQUIRED (no login in that Chrome), so its mapping is contract-only"},"recommendedFor":["Chinese lifestyle and product experience notes"],"notFor":["use with no backend installed or logged in","high-volume crawling"],"provider":"xiaohongshu"},
+  {"id":"reddit","label":"Reddit: OpenCLI (your Chrome), rdt, dsh-browser","kind":"cli","operations":["search"],"languages":["en"],"regions":["global"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","platform":"reddit","install":"Chain: standalone OpenCLI (npm i -g @jackwener/opencli + its Browser Bridge extension; log in to reddit.com in your own Chrome (the plugin never logs in)), optional rdt (uv tool install git+https://github.com/public-clis/rdt-cli; run `rdt login` yourself), dsh-browser OpenCLI. Reddit may block a proxied IP.","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","verification":{"status":"unverified","date":"2026-10-27","note":"contract-only: opencli 1.8.8 got an HTML page instead of JSON on a proxied network (mapped as a blocked failure); rdt 0.4.2 help probed; no successful search run"},"recommendedFor":["English community experience threads"],"notFor":["use with no backend installed or logged in"],"provider":"reddit"},
   {"id":"instagram","label":"Instagram via OpenCLI","kind":"cli","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"platform":"instagram","install":"Install the dsh-browser plugin (bundles OpenCLI) and log in to the site in its browser; check with browser_opencli_status.","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","verification":{"status":"unverified","note":"shipped backend runs `opencli instagram search`; not re-verified on a pinned OpenCLI version"},"recommendedFor":["visual social posts"],"notFor":["use without dsh-browser and a logged-in session"],"provider":"instagram"},
   {"id":"facebook","label":"Facebook via OpenCLI","kind":"cli","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"platform":"facebook","install":"Install the dsh-browser plugin (bundles OpenCLI) and log in to the site in its browser; check with browser_opencli_status.","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","verification":{"status":"unverified","note":"shipped backend runs `opencli facebook search`; not re-verified on a pinned OpenCLI version"},"recommendedFor":["public posts and pages"],"notFor":["use without dsh-browser and a logged-in session"],"provider":"facebook"},
   {"id":"rss","label":"RSS / Atom feeds","kind":"api","operations":["read"],"languages":["*"],"regions":["global"],"profiles":["news_fact"],"resultKinds":["web"],"auth":"anonymous","costTier":"anonymous","platform":"rss","install":"None; pass the feed URL as the url of search.run platform=rss.","license":"free","cost":"free","verification":{"status":"verified","note":"shipped built-in"},"recommendedFor":["latest items of a known feed or blog"],"notFor":["keyword search across the web"],"provider":"rss"},
-  {"id":"zhihu","label":"Zhihu (知乎): zhihu-cli, dsh-browser search page","kind":"cli","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","platform":"zhihu","install":"Default chain: zhihu-cli (PyPI pyzhihu-cli; run `zhihu login` yourself), then the dsh-browser search page with a saved login (browserBindings).","license":"n/a (reads the site you are logged in to)","cost":"free (your account)","verification":{"status":"unverified","date":"2026-10-06","version":"0.2.4","note":"contract-only: zhihu-cli help probed, output shape read from its source; no search run (needs your login)"},"recommendedFor":["Chinese Q&A and long-form answers"],"notFor":["use without a login","high-volume or unattended crawling","the Access-Secret zhihu CLI (a different tool)"],"provider":"zhihu"},
+  {"id":"zhihu","label":"Zhihu (知乎): OpenCLI (your Chrome), zhihu-cli, dsh-browser search page","kind":"cli","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","platform":"zhihu","install":"Chain: standalone OpenCLI (npm i -g @jackwener/opencli + its Browser Bridge extension; log in to zhihu.com in your own Chrome (the plugin never logs in)), optional zhihu-cli (PyPI pyzhihu-cli; run `zhihu login` yourself), dsh-browser search page with a saved login (browserBindings).","license":"n/a (reads the site you are logged in to)","cost":"free (your account)","verification":{"status":"unverified","date":"2026-10-27","version":"1.8.8","note":"opencli 1.8.8 search run on the user's own Chrome and parsed (live fixture: title, type, author, votes, link); zhihu-cli is contract-only"},"recommendedFor":["Chinese Q&A and long-form answers"],"notFor":["use without a login","high-volume or unattended crawling","the Access-Secret zhihu CLI (a different tool)"],"provider":"zhihu"},
   {"id":"weibo","label":"Weibo (微博) search page","kind":"browser","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"platform":"weibo","install":"Install dsh-browser, run scripts/save-login.mjs for the site and bind it with browserBindings.","license":"n/a (reads the site you are logged in to)","cost":"free (your account)","verification":{"status":"unverified","note":"best-effort selectors on the rendered search page; they break when the markup changes"},"recommendedFor":["Chinese real-time public reaction"],"notFor":["use without a saved login","high-volume or unattended crawling"],"provider":"weibo"},
   {"id":"douban","label":"Douban (豆瓣) search page","kind":"browser","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"platform":"douban","install":"Install dsh-browser, run scripts/save-login.mjs for the site and bind it with browserBindings.","license":"n/a (reads the site you are logged in to)","cost":"free (your account)","verification":{"status":"unverified","note":"best-effort selectors on the rendered search page; they break when the markup changes"},"recommendedFor":["Chinese reviews of books, films and music"],"notFor":["use without a saved login","high-volume or unattended crawling"],"provider":"douban"},
   {"id":"tieba","label":"Baidu Tieba (贴吧) search page","kind":"browser","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"platform":"tieba","install":"Install dsh-browser, run scripts/save-login.mjs for the site and bind it with browserBindings.","license":"n/a (reads the site you are logged in to)","cost":"free (your account)","verification":{"status":"unverified","note":"best-effort selectors on the rendered search page; they break when the markup changes"},"recommendedFor":["Chinese forum discussion"],"notFor":["use without a saved login","high-volume or unattended crawling"],"provider":"tieba"},
@@ -46,8 +47,8 @@
   {"kind":"api","operations":["search"],"regions":["cn"],"profiles":["general","news_fact","experience","compare","docs_code"],"resultKinds":["web"],"auth":"key","costTier":"paid","license":"proprietary API service","verification":{"status":"unverified","note":"contract from the official guide, API reference and error-code page; never called live (no key)"},"notFor":["GLM generated answers: only raw search_result is used; the query is cut to 70 characters"],"id":"zhipu","label":"Zhipu (智谱) web search","languages":["zh"],"keyEnv":["ZHIPU_API_KEY"],"install":"Set ZHIPU_API_KEY (or keyedSources.zhipu.apiKey / a credentials ref); key from open.bigmodel.cn. Standalone web_search endpoint, search_std. Inactive until a key is set.","cost":"paid: no free allowance stated; search_std 0.01 CNY, search_pro 0.03 CNY per request (docs.bigmodel.cn web-search guide, 2026-10-04)","url":"https://docs.bigmodel.cn/cn/guide/tools/web-search","recommendedFor":["second Chinese search source with one domain filter and a recency window"],"provider":"zhipu","rank":30},
   {"kind":"api","operations":["search"],"regions":["cn"],"profiles":["general","news_fact","experience","compare","docs_code"],"resultKinds":["web"],"auth":"key","costTier":"free-quota","license":"proprietary API service","verification":{"status":"unverified","note":"official page contradicts itself on the auth header: both Authorization and X-Appbuilder-Authorization are sent; never called live (no key)"},"notFor":["chat-completions generated answers: only web references are used; query cut to 72 units"],"id":"baidu-qianfan","label":"Baidu Qianfan (千帆) AI search","languages":["zh"],"keyEnv":["QIANFAN_API_KEY"],"install":"Set QIANFAN_API_KEY (or BAIDU_API_KEY / keyedSources.baidu-qianfan.apiKey); AppBuilder key from the Baidu AI cloud console. Inactive until a key is set.","cost":"free-quota: 100 calls per day, then paid post-payment (https://ai.baidu.com/ai-doc/AppBuilder/pmaxd1hvy)","url":"https://ai.baidu.com/ai-doc/AppBuilder/pmaxd1hvy","recommendedFor":["Chinese general web search with site, exclude and date-range filters"],"provider":"baidu-qianfan","rank":40,"sourceFamily":"baidu"},
   {"kind":"api","operations":["search"],"regions":["global"],"profiles":["general","news_fact","experience","compare","docs_code"],"resultKinds":["web"],"auth":"key","costTier":"paid","license":"proprietary API service","verification":{"status":"unverified","note":"no adapter yet; facts from vendor documentation"},"notFor":["use before an adapter exists in this plugin"],"id":"parallel","label":"Parallel Search API / CLI","languages":["en"],"keyEnv":["PARALLEL_API_KEY"],"sourceFamily":"parallel","install":"Planned adapter for /v1/search; or parallel-cli (OAuth or key).","cost":"paid: metered plan; no free allowance confirmed","url":"https://docs.parallel.ai/integrations/cli","recommendedFor":["higher limits than the anonymous MCP tier"]},
-  {"id":"wx-search-cli","label":"wx-search-cli (WeChat articles)","kind":"cli","operations":["search","read"],"languages":["zh"],"regions":["cn"],"profiles":["news_fact","experience","general"],"resultKinds":["social"],"auth":"anonymous","costTier":"anonymous","requires":{"cli":"wx-search-cli"},"install":"npm i -g wx-search-cli (Node). Second backend of the wechat platform; documented contract only.","license":"MIT","cost":"free","url":"https://github.com/tjx666/wx-search-cli","verification":{"status":"unverified","date":"2026-10-06","version":"0.1.0","note":"contract-only: help and version probed on a real install; output shape from the upstream README and source; no search run"},"recommendedFor":["WeChat official-account articles via Sogou search"],"notFor":["stable unattended use: Sogou redirects and captchas change"]},
-  {"id":"omnireach","label":"OmniReach CLI / MCP","kind":"cli","operations":["search","fetch","read"],"languages":["zh","en"],"regions":["global","cn"],"profiles":["experience","general"],"resultKinds":["social","web"],"auth":"anonymous","costTier":"anonymous","requires":{"cli":"omnireach"},"install":"Python package from github.com/Daily-AC/omnireach (uv tool install). search.run platform=omnireach runs its default sources; browser-backed sources stay opt-in in the tool.","license":"MIT","cost":"free","url":"https://github.com/Daily-AC/omnireach","verification":{"status":"unverified","date":"2026-10-06","version":"0.19.0-alpha","note":"contract probed; only the wechat source was run live (see the wechat entry); the multi-source command was not run"},"recommendedFor":["WeChat discovery, author work lists and media text"],"notFor":["assuming zero-config for every platform","private or logged-in sources (use their own CLI)"],"provider":"omnireach","platform":"omnireach"},
+  {"id":"wx-search-cli","label":"wx-search-cli (WeChat articles)","kind":"cli","operations":["search","read"],"languages":["zh"],"regions":["cn"],"profiles":["news_fact","experience","general"],"resultKinds":["social"],"auth":"anonymous","costTier":"anonymous","requires":{"cli":"wx-search-cli"},"install":"npm i -g wx-search-cli (Node). Second backend of the wechat platform; documented contract only.","license":"MIT","cost":"free","url":"https://github.com/tjx666/wx-search-cli","verification":{"status":"verified","date":"2026-10-26","version":"0.1.0","note":"search run live (zh / en / nonsense) and parsed: 10 rows per page, resolved mp.weixin.qq.com links; Sogou anti-spider prints [] with exit 0"},"recommendedFor":["WeChat official-account articles via Sogou search"],"notFor":["stable unattended use: Sogou redirects and captchas change"]},
+  {"id":"omnireach","label":"OmniReach CLI / MCP","kind":"cli","operations":["search","fetch","read"],"languages":["zh","en"],"regions":["global","cn"],"profiles":["experience","general"],"resultKinds":["social","web"],"auth":"anonymous","costTier":"anonymous","requires":{"cli":"omnireach"},"install":"Python package from github.com/Daily-AC/omnireach (uv tool install). search.run platform=omnireach runs five explicit keyless sources (hackernews, youtube, github, wechat, bilibili); the tool's automatic routing is never used because it adds Chrome-backed google / twitter when opencli is on PATH.","license":"MIT","cost":"free","url":"https://github.com/Daily-AC/omnireach","verification":{"status":"verified","date":"2026-10-26","version":"0.19.0-alpha","note":"multi-source search with an explicit --on hackernews,youtube,github,wechat,bilibili and the wechat source run live and parsed; the automatic routing was seen adding Chrome-backed google / twitter sources and is never used"},"recommendedFor":["WeChat discovery, author work lists and media text"],"notFor":["assuming zero-config for every platform","private or logged-in sources (use their own CLI)"],"provider":"omnireach","platform":"omnireach"},
   {"id":"opencli-tieba","label":"OpenCLI Tieba (贴吧)","kind":"cli","operations":["search","read"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"rank":70,"invoke":"dsh-browser: browser_opencli_catalog, then browser_opencli_run tieba","install":"Bundled with the dsh-browser plugin; needs its browser bridge and, for most sites, a logged-in session (browser_opencli_catalog lists the real commands).","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","url":"https://github.com/jackwener/OpenCLI/blob/main/docs/adapters/index.md","verification":{"status":"unverified","note":"commands from the OpenCLI adapter index (2026-09-30 research); verify against the installed version"},"recommendedFor":["commands: search, read"],"notFor":[]},
   {"id":"opencli-hupu","label":"OpenCLI Hupu (虎扑)","kind":"cli","operations":["search","read"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"rank":70,"invoke":"dsh-browser: browser_opencli_catalog, then browser_opencli_run hupu","install":"Bundled with the dsh-browser plugin; needs its browser bridge and, for most sites, a logged-in session (browser_opencli_catalog lists the real commands).","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","url":"https://github.com/jackwener/OpenCLI/blob/main/docs/adapters/index.md","verification":{"status":"unverified","note":"commands from the OpenCLI adapter index (2026-09-30 research); verify against the installed version"},"recommendedFor":["commands: search, detail"],"notFor":[]},
   {"id":"opencli-zhihu","label":"OpenCLI Zhihu (知乎)","kind":"cli","operations":["search","read","comments"],"languages":["zh"],"regions":["cn"],"profiles":["experience","general"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"rank":70,"invoke":"dsh-browser: browser_opencli_catalog, then browser_opencli_run zhihu","install":"Bundled with the dsh-browser plugin; needs its browser bridge and, for most sites, a logged-in session (browser_opencli_catalog lists the real commands).","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","url":"https://github.com/jackwener/OpenCLI/blob/main/docs/adapters/index.md","verification":{"status":"unverified","note":"commands from the OpenCLI adapter index (2026-09-30 research); verify against the installed version"},"recommendedFor":["commands: search, question, answer-detail, answer-comments"],"notFor":[]},
@@ -70,12 +71,13 @@
   {"id":"opencli-toutiao","label":"OpenCLI Toutiao (头条)","kind":"cli","operations":["read","trending"],"languages":["zh"],"regions":["cn"],"profiles":["news_fact"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"rank":70,"invoke":"dsh-browser: browser_opencli_catalog, then browser_opencli_run toutiao","install":"Bundled with the dsh-browser plugin; needs its browser bridge and, for most sites, a logged-in session (browser_opencli_catalog lists the real commands).","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","url":"https://github.com/jackwener/OpenCLI/blob/main/docs/adapters/index.md","verification":{"status":"unverified","note":"commands from the OpenCLI adapter index (2026-09-30 research); verify against the installed version"},"recommendedFor":["commands: articles, hot, recommend (no `search`)"],"notFor":["keyword search: no `search` command listed"]},
   {"id":"opencli-v2ex","label":"OpenCLI V2EX (OpenCLI)","kind":"cli","operations":["read","trending"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["forum"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"rank":70,"invoke":"dsh-browser: browser_opencli_catalog, then browser_opencli_run v2ex","install":"Bundled with the dsh-browser plugin; needs its browser bridge and, for most sites, a logged-in session (browser_opencli_catalog lists the real commands).","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","url":"https://github.com/jackwener/OpenCLI/blob/main/docs/adapters/index.md","verification":{"status":"unverified","note":"commands from the OpenCLI adapter index (2026-09-30 research); verify against the installed version"},"recommendedFor":["commands: hot, latest, topic (no `search`)"],"notFor":["keyword search through OpenCLI: use the built-in v2ex engine"]},
   {"id":"opencli-quark","label":"OpenCLI Quark (夸克)","kind":"cli","operations":["read"],"languages":["zh"],"regions":["cn"],"profiles":[],"resultKinds":["files"],"auth":"login","costTier":"free-quota","requires":{"browser":true},"rank":70,"invoke":"dsh-browser: browser_opencli_catalog, then browser_opencli_run quark","install":"Bundled with the dsh-browser plugin; needs its browser bridge and, for most sites, a logged-in session (browser_opencli_catalog lists the real commands).","license":"Apache-2.0 (OpenCLI)","cost":"free (your account)","url":"https://github.com/jackwener/OpenCLI/blob/main/docs/adapters/index.md","verification":{"status":"unverified","note":"commands from the OpenCLI adapter index (2026-09-30 research); verify against the installed version"},"recommendedFor":["commands: cloud-drive operations"],"notFor":["web or content search: a cloud-drive adapter"]},
-  {"id":"wechat","label":"WeChat official accounts (公众号): OmniReach, wx-search-cli","kind":"cli","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"anonymous","costTier":"anonymous","provider":"wechat","platform":"wechat","rank":70,"install":"Default chain: omnireach (uv tool install from Daily-AC/omnireach; `--on wechat`, Sogou, no key), then wx-search-cli (npm i -g wx-search-cli).","license":"MIT (OmniReach, wx-search-cli)","cost":"free; Sogou rate limits and captchas apply","url":"https://github.com/Daily-AC/omnireach","verification":{"status":"verified","date":"2026-10-06","version":"0.19.0-alpha","note":"omnireach search --on wechat --json returned parsed WeChat articles; wx-search-cli is docs-only"},"recommendedFor":["WeChat official-account articles on Chinese policy, industry and product topics"],"notFor":["stable unattended use: Sogou captchas make real_url empty","non-WeChat sources"]},
-  {"id":"xhs","label":"xhs (xiaohongshu-cli)","kind":"cli","operations":["search","read","comments"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"cli":"xhs"},"rank":60,"install":"uv tool install xiaohongshu-cli; run `xhs login` yourself (it reads your browser cookies). The plugin only runs `xhs search` and only with a saved login.","license":"see the upstream repository","cost":"free (your account)","url":"https://github.com/jackwener/xiaohongshu-cli","verification":{"status":"unverified","date":"2026-10-06","version":"0.6.4","note":"contract-only: help probed; output shape from the installed source; no search run"},"recommendedFor":["Chinese lifestyle and product experience notes"],"notFor":["write commands (post, like, comment, follow) are never run","use without a saved login"],"invoke":"search.run platform=xiaohongshu (a backend of its chain; set it first in platformBackends to prefer it)"},
-  {"id":"zhihu-cli","label":"zhihu-cli (pyzhihu-cli)","kind":"cli","operations":["search","read"],"languages":["zh"],"regions":["cn"],"profiles":["experience","compare"],"resultKinds":["qa"],"auth":"login","costTier":"free-quota","requires":{"cli":"zhihu"},"rank":60,"install":"uv tool install pyzhihu-cli (the command is `zhihu`); run `zhihu login` yourself. Not the Access-Secret zhihu-cli of dawnswwwww.","license":"see the upstream repository","cost":"free (your account)","url":"https://github.com/BAIGUANGMEI/zhihu-cli","verification":{"status":"unverified","date":"2026-10-06","version":"0.2.4","note":"contract-only: help probed; output shape from the installed source; no search run"},"recommendedFor":["Chinese Q&A and long-form answers"],"notFor":["publishing commands (ask, article, pin, vote) are never run","use without a saved login"],"invoke":"search.run platform=zhihu (a backend of its chain; set it first in platformBackends to prefer it)"},
-  {"id":"rdt","label":"rdt (rdt-cli)","kind":"cli","operations":["search","read"],"languages":["en"],"regions":["global"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"cli":"rdt"},"rank":60,"install":"uv tool install git+https://github.com/public-clis/rdt-cli; run `rdt login` yourself (it extracts browser cookies). The plugin only runs `rdt search` and only with a saved login.","license":"see the upstream repository","cost":"free (your account)","verification":{"status":"unverified","date":"2026-10-06","version":"0.4.2","note":"contract-only: help probed; --compact --json shape from the installed source; no search run"},"recommendedFor":["English community experience threads"],"notFor":["write commands (comment, upvote, save, subscribe) are never run","use without a saved login"],"invoke":"search.run platform=reddit (a backend of its chain; set it first in platformBackends to prefer it)"},
-  {"id":"opencli","label":"OpenCLI (standalone)","kind":"cli","operations":["search"],"languages":["*"],"regions":["global","cn"],"profiles":["experience","general"],"resultKinds":["social","web"],"auth":"login","costTier":"free-quota","requires":{"cli":"opencli"},"rank":65,"install":"npm i -g @jackwener/opencli plus its Browser Bridge extension in your own Chrome (independent of dsh-browser). Used per site, only where `opencli list` shows a read `search` command.","license":"Apache-2.0","cost":"free (your account)","url":"https://github.com/jackwener/OpenCLI","verification":{"status":"unverified","date":"2026-10-06","version":"1.8.8","note":"contract-only: `opencli list -f json` command table read; -f json is the documented output option; no site search run"},"recommendedFor":["sites the table lists with a read search command: xiaohongshu, reddit, twitter, zhihu, weixin, hackernews, ..."],"notFor":["sites without a search command (douyin, v2ex, xiaoyuzhou, toutiao)","write commands (login, post, like, ...) are never run"]},
-  {"id":"gh","label":"GitHub CLI (gh)","kind":"cli","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["docs_code","compare"],"resultKinds":["code"],"auth":"login","costTier":"free-quota","requires":{"cli":"gh"},"rank":55,"install":"brew install gh (or winget install GitHub.cli); run `gh auth login` yourself. Fallback backend of github, github-issues and github-code.","license":"MIT","cost":"free within GitHub API limits","url":"https://cli.github.com","verification":{"status":"verified","date":"2026-10-06","version":"2.101.0","note":"gh search repos --json … parsed live; issues and code searches follow the documented JSON fields"},"recommendedFor":["repositories, issues and code with your own GitHub login"],"notFor":["use without gh auth login"],"invoke":"search.run platform=github (a backend of its chain; set it first in platformBackends to prefer it)"},
+  {"id":"wechat","label":"WeChat official accounts (公众号): OmniReach, wx-search-cli","kind":"cli","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"anonymous","costTier":"anonymous","provider":"wechat","platform":"wechat","rank":70,"install":"Default chain: omnireach (uv tool install from Daily-AC/omnireach; `--on wechat`, Sogou, no key), then wx-search-cli (npm i -g wx-search-cli).","license":"MIT (OmniReach, wx-search-cli)","cost":"free; Sogou rate limits and captchas apply","url":"https://github.com/Daily-AC/omnireach","verification":{"status":"verified","date":"2026-10-26","version":"0.19.0-alpha","note":"omnireach search --on wechat --json and wx-search-cli search both returned parsed WeChat articles (re-run 2026-10-26)"},"recommendedFor":["WeChat official-account articles on Chinese policy, industry and product topics"],"notFor":["stable unattended use: Sogou captchas make real_url empty","non-WeChat sources"]},
+  {"id":"xhs","label":"xhs (xiaohongshu-cli)","kind":"cli","operations":["search","read","comments"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"cli":"xhs"},"rank":60,"install":"uv tool install xiaohongshu-cli; run `xhs login` yourself (it reads your browser cookies). The plugin only runs `xhs search` and only with a saved login.","license":"see the upstream repository","cost":"free (your account)","url":"https://github.com/jackwener/xiaohongshu-cli","verification":{"status":"unverified","date":"2026-10-06","version":"0.6.4","note":"contract-only: help probed; output shape from the installed source; no search run"},"recommendedFor":["Chinese lifestyle and product experience notes"],"notFor":["write commands (post, like, comment, follow) are never run","use without a saved login"],"invoke":"search.run platform=xiaohongshu (the optional fallback of its chain, after the standalone OpenCLI; set it first in platformBackends to prefer it)"},
+  {"id":"twitter-cli","label":"twitter-cli (PyPI twitter-cli)","kind":"cli","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["experience","news_fact"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"cli":"twitter"},"rank":60,"install":"uv tool install twitter-cli (the command is `twitter`); set TWITTER_AUTH_TOKEN and TWITTER_CT0 in DSH credentials or the Host process environment. The plugin only runs `twitter search --json`.","url":"https://github.com/jackwener/twitter-cli","verification":{"status":"unverified","date":"2026-10-11","version":"0.8.5","note":"contract-only: help probed, --json envelope read from its source and issue #38; no search run by us (needs your tokens)"},"recommendedFor":["live reactions and announcements by accounts"],"notFor":["write commands (post, like, retweet, follow) are never run","use without both tokens","a different program named twitter on PATH"],"invoke":"search.run platform=twitter (the optional fallback of its chain, after the standalone OpenCLI; set it first in platformBackends to prefer it)","keyEnv":["TWITTER_AUTH_TOKEN","TWITTER_CT0"],"license":"see the upstream repository","cost":"free (your account)"},
+  {"id":"zhihu-cli","label":"zhihu-cli (pyzhihu-cli)","kind":"cli","operations":["search","read"],"languages":["zh"],"regions":["cn"],"profiles":["experience","compare"],"resultKinds":["qa"],"auth":"login","costTier":"free-quota","requires":{"cli":"zhihu"},"rank":60,"install":"uv tool install pyzhihu-cli (the command is `zhihu`); run `zhihu login` yourself. Not the Access-Secret zhihu-cli of dawnswwwww.","license":"see the upstream repository","cost":"free (your account)","url":"https://github.com/BAIGUANGMEI/zhihu-cli","verification":{"status":"unverified","date":"2026-10-06","version":"0.2.4","note":"contract-only: help probed; output shape from the installed source; no search run"},"recommendedFor":["Chinese Q&A and long-form answers"],"notFor":["publishing commands (ask, article, pin, vote) are never run","use without a saved login"],"invoke":"search.run platform=zhihu (the optional fallback of its chain, after the standalone OpenCLI; set it first in platformBackends to prefer it)"},
+  {"id":"rdt","label":"rdt (rdt-cli)","kind":"cli","operations":["search","read"],"languages":["en"],"regions":["global"],"profiles":["experience"],"resultKinds":["social"],"auth":"login","costTier":"free-quota","requires":{"cli":"rdt"},"rank":60,"install":"uv tool install git+https://github.com/public-clis/rdt-cli; run `rdt login` yourself (it extracts browser cookies). The plugin only runs `rdt search` and only with a saved login.","license":"see the upstream repository","cost":"free (your account)","verification":{"status":"unverified","date":"2026-10-06","version":"0.4.2","note":"contract-only: help probed; --compact --json shape from the installed source; no search run"},"recommendedFor":["English community experience threads"],"notFor":["write commands (comment, upvote, save, subscribe) are never run","use without a saved login"],"invoke":"search.run platform=reddit (the optional fallback of its chain, after the standalone OpenCLI; set it first in platformBackends to prefer it)"},
+  {"id":"opencli","label":"OpenCLI (standalone)","kind":"cli","operations":["search"],"languages":["*"],"regions":["global","cn"],"profiles":["experience","general"],"resultKinds":["social","web"],"auth":"login","costTier":"free-quota","requires":{"cli":"opencli"},"rank":65,"install":"npm i -g @jackwener/opencli + its Browser Bridge extension in your own Chrome. It uses that Chrome's login: log in to the sites there yourself, the plugin never logs in. First backend of the xiaohongshu, reddit, twitter and zhihu chains.","license":"Apache-2.0","cost":"free (your account)","url":"https://github.com/jackwener/OpenCLI","verification":{"status":"unverified","date":"2026-10-27","version":"1.8.8","note":"twitter and zhihu searches run and parsed (live fixtures); xiaohongshu answered AUTH_REQUIRED, reddit an HTML page (both mapped): those two mappings are contract-only"},"recommendedFor":["sites the table lists with a read search command: xiaohongshu, reddit, twitter, zhihu, weixin, hackernews, ..."],"notFor":["sites without a search command (douyin, v2ex, xiaoyuzhou, toutiao)","write commands (login, post, like, ...) are never run"]},
+  {"id":"gh","label":"GitHub CLI (gh)","kind":"cli","operations":["search"],"languages":["*"],"regions":["global"],"profiles":["docs_code","compare"],"resultKinds":["code"],"auth":"login","costTier":"free-quota","requires":{"cli":"gh"},"rank":55,"install":"brew install gh (or winget install GitHub.cli); run `gh auth login` yourself. Fallback backend of github, github-issues and github-code.","license":"MIT","cost":"free within GitHub API limits","url":"https://cli.github.com","verification":{"status":"verified","date":"2026-10-26","version":"2.101.0","note":"gh search repos, issues and code run live (zh / en / qualifier / empty) and parsed; the query is passed as separate words because gh quotes a one-token query as an exact phrase"},"recommendedFor":["repositories, issues and code with your own GitHub login"],"notFor":["use without gh auth login"],"invoke":"search.run platform=github (a backend of its chain; set it first in platformBackends to prefer it)"},
   {"id":"tanso","label":"Tanso (Bocha / Zhihu API CLI)","kind":"cli","operations":["search"],"languages":["zh"],"regions":["cn"],"profiles":["news_fact","general"],"resultKinds":["web"],"auth":"key","costTier":"paid","keyEnv":["BOCHA_API_KEY","ZHIHU_ACCESS_SECRET"],"requires":{"cli":"tanso"},"provider":"tanso","platform":"tanso","rank":80,"install":"npm i -g @geekjourneyx/tanso, then `tanso config init` and put your own keys in its config. search.run platform=tanso runs only the bocha_web and zhihu_search sources.","license":"MIT","cost":"paid: your own Bocha / Zhihu keys, billed by those providers (no free allowance confirmed for this route)","url":"https://github.com/geekjourneyx/tanso","verification":{"status":"unverified","date":"2026-10-06","version":"2.0.2","note":"docs-only: contract from the upstream README; not installed or run"},"recommendedFor":["an API-contract reference for Bocha and Zhihu from the command line"],"notFor":["use instead of the built-in Bocha provider when you only need Bocha","the Volcengine answer source (never selected)"]},
   {"id":"douyin-cli","label":"douyin-cli (tamnd)","kind":"cli","operations":["search","trending"],"languages":["zh"],"regions":["cn"],"profiles":["experience"],"resultKinds":["video"],"auth":"anonymous","costTier":"anonymous","requires":{"cli":"douyin"},"rank":90,"install":"brew install tamnd/tap/douyin or go install github.com/tamnd/douyin-cli/cmd/douyin@latest. Catalog only: no adapter, because the README does not document the search record fields.","license":"Apache-2.0","cost":"free","url":"https://github.com/tamnd/douyin-cli","verification":{"status":"unverified","date":"2026-10-06","version":"0.1.1","note":"docs-only: README read; output record fields undocumented, so no adapter spec was written"},"recommendedFor":["the open hot-search board (douyin hot)"],"notFor":["search from a datacenter or non-China IP: the README says it exits with code 4 behind the anti-bot wall","assuming a stable login-free search"]}
  ]

package/lib/actions/approval.js

@@ -8,6 +8,7 @@
  * present. Without it the mode is unknown and the strictest ordinary rule (`standard`: ask) applies.
  * @module web-search-pro/actions/approval
  */
+import { preflightArgs } from "./schema.js";
 import { CALL_TOOL, INDEX_TOOL, findAction, findActionByFlatTool } from "./registry.js";
 export const AUTOMATION_MODES = ['read-only', 'standard', 'autonomous', 'unrestricted'];
 /** Maps a model-visible tool call to the action it will run; undefined for tools that are not ours. */
@@ -26,7 +27,7 @@ const clip = (text, max = 80) => text.length > max ? text.slice(0, max) + '…'
 function describe(action, args) {
     const input = (args && typeof args === 'object' ? args : {});
     const parts = [];
-    for (const key of ['backend', 'installer', 'hostname', 'id', 'engine', 'olderThanDays']) {
+    for (const key of ['backend', 'installer', 'hostname', 'id', 'engine', 'olderThanDays', 'platform', 'scope']) {
         if (input[key] !== undefined)
             parts.push(`${key}=${clip(String(input[key]))}`);
     }
@@ -34,6 +35,23 @@ function describe(action, args) {
         parts.push(`rulesJson (${input.rulesJson.length} chars)`);
     return parts.length ? `${action} ${parts.join(' ')}` : action;
 }
+/** The command and argument templates of a custom CLI spec, for the prompt the user answers: what the plugin would be allowed to run. */
+export function describeCliSpec(spec) {
+    const input = (spec && typeof spec === 'object' ? spec : {});
+    const tokens = (value) => (Array.isArray(value) ? value.filter((token) => typeof token === 'string') : []).join(' ');
+    const search = input.search && typeof input.search === 'object' ? input.search : {};
+    const bins = Array.isArray(input.bins) ? input.bins.filter((bin) => typeof bin === 'string') : [];
+    const probe = input.probe && typeof input.probe === 'object' ? input.probe : {};
+    const env = input.env && typeof input.env === 'object' ? input.env : {};
+    const names = [...Array.isArray(env.required) ? env.required : [], ...Array.isArray(env.passthrough) ? env.passthrough : []].filter((name) => typeof name === 'string');
+    const parts = [
+        `command ${bins.join(' or ') || '(none)'}`,
+        `search: ${clip(tokens(search.argv), 160)}`,
+        `probe: ${clip(tokens(probe.versionArgs), 60)} ; ${clip(tokens(probe.helpArgs), 60)}`,
+        ...names.length ? [`reads environment variables ${clip(names.join(', '), 100)}`] : [],
+    ];
+    return parts.join('; ');
+}
 export function webPolicyDecision(actionName, args, mode) {
     const action = findAction(actionName);
     if (!action || action.approval === 'none')
@@ -46,6 +64,18 @@ export function webPolicyDecision(actionName, args, mode) {
             return { kind: 'allow' };
         return { kind: 'ask', reason: `${label}: Install an external Web Search Pro backend dependency` };
     }
+    if (action.approval === 'run-program') {
+        // Whoever the automation mode trusts, a new program is the user's decision: asked in every mode but read-only, which refuses.
+        if (mode === 'read-only')
+            return { kind: 'deny', reason: `Adding a custom CLI is disabled by automationMode=${mode}` };
+        const input = (args && typeof args === 'object' ? args : {});
+        return { kind: 'ask', reason: `${label}: Let Web Search Pro run a local program as a search source — ${describeCliSpec(input.spec)}` };
+    }
+    if (action.approval === 'config') {
+        if (mode === 'read-only')
+            return { kind: 'deny', reason: `Changing the Web Search Pro search order is disabled by automationMode=${mode}` };
+        return { kind: 'allow' };
+    }
     // local-write
     if (mode === 'read-only')
         return { kind: 'deny', reason: `Web Search Pro mutations are disabled by automationMode=${mode}` };
@@ -53,6 +83,25 @@ export function webPolicyDecision(actionName, args, mode) {
         return { kind: 'allow' };
     return { kind: 'ask', reason: `${label}: Modify Web Search Pro local state (cache, history or extraction rules)` };
 }
+/**
+ * What the `tools/pre-execute` hook decides for a resolved call: {@link webPolicyDecision}, except that a call `runAction` will
+ * refuse as INVALID_ARGS is let through unasked. Asking the user to approve (or denying) a call that cannot run only withholds the
+ * schema from the model (headless: "requires approval, but no approval channel is available"). Letting it through executes
+ * nothing, since `runAction` repeats the check (`preflightArgs`) before `execute`. This also holds in read-only mode: nothing
+ * runs, so the model gets the INVALID_ARGS reply with the schema rather than a refusal it cannot act on. A valid call is decided
+ * exactly as before. A failure of the check itself is not allowed to block the call: the ordinary decision applies.
+ */
+export function webCallDecision(actionName, args, mode) {
+    const action = findAction(actionName);
+    if (action && action.approval !== 'none') {
+        try {
+            if (!preflightArgs(action, args).ok)
+                return { kind: 'allow' };
+        }
+        catch { /* decide as for a valid call */ }
+    }
+    return webPolicyDecision(actionName, args, mode);
+}
 /** The dsh-browser automationMode, when the optional service is present and reports one. */
 export async function automationModeOf(browser) {
     const status = browser?.status;

package/lib/actions/approval.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/actions/approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAEvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,CAAU,CAAA;AAgBhG,uGAAuG;AACvG,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAgB;IAC/D,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACrD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAyC,CAAA;QAC7G,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAgB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAA;IACvI,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACtF,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,GAAG,GAAG,EAAE,EAAU,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAEpG,sFAAsF;AACtF,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAa;IAC7C,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAA;IACvF,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;QACxF,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,SAAS,CAAC,MAAM,SAAS,CAAC,CAAA;IAClG,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,IAAa,EAAE,IAAgC;IACnG,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACzC,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,yDAAyD,IAAI,EAAE,EAAE,CAAA;QAC1H,IAAI,IAAI,KAAK,cAAc;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QACrD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,yDAAyD,EAAE,CAAA;IACnG,CAAC;IACD,cAAc;IACd,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,2DAA2D,IAAI,EAAE,EAAE,CAAA;IAC5H,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC9E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,0EAA0E,EAAE,CAAA;AACpH,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAI,OAA4C,EAAE,MAAM,CAAA;IACpE,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IAClD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAO,MAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,cAAc,CAAA;QAC3G,OAAQ,gBAAuC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAuB,CAAC,CAAC,CAAC,SAAS,CAAA;IACvG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAA;IAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/actions/approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAEvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,CAAU,CAAA;AAgBhG,uGAAuG;AACvG,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAgB;IAC/D,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACrD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAyC,CAAA;QAC7G,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAgB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAA;IACvI,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACtF,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,GAAG,GAAG,EAAE,EAAU,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAEpG,sFAAsF;AACtF,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAa;IAC7C,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAA;IACvF,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;QAC7G,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,SAAS,CAAC,MAAM,SAAS,CAAC,CAAA;IAClG,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;AAC/D,CAAC;AAED,yIAAyI;AACzI,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAwB,CAAA;IACnF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtJ,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAiC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9G,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAChH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1G,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAA8B,CAAC,CAAC,CAAC,EAAE,CAAA;IAClG,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAA;IACvL,MAAM,KAAK,GAAG;QACZ,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,QAAQ,EAAE;QAC1C,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE;QAC3C,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE;QACrF,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,+BAA+B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;KACtF,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,IAAa,EAAE,IAAgC;IACnG,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACzC,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,yDAAyD,IAAI,EAAE,EAAE,CAAA;QAC1H,IAAI,IAAI,KAAK,cAAc;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QACrD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,yDAAyD,EAAE,CAAA;IACnG,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACtC,8HAA8H;QAC9H,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,qDAAqD,IAAI,EAAE,EAAE,CAAA;QACtH,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAA;QACvF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,iEAAiE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;IACxI,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,0EAA0E,IAAI,EAAE,EAAE,CAAA;QAC3I,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC1B,CAAC;IACD,cAAc;IACd,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,2DAA2D,IAAI,EAAE,EAAE,CAAA;IAC5H,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAC9E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,0EAA0E,EAAE,CAAA;AACpH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,IAAa,EAAE,IAAgC;IACjG,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACzC,IAAI,CAAC;YAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,iBAAiB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AAClD,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAI,OAA4C,EAAE,MAAM,CAAA;IACpE,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IAClD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAO,MAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,cAAc,CAAA;QAC3G,OAAQ,gBAAuC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAuB,CAAC,CAAC,CAAC,SAAS,CAAA;IACvG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAA;IAAC,CAAC;AAC9B,CAAC"}