DSH Search & Proxy 0.5.0 · 搜索与代理

DSH 搜索与代理 / DSH Search & Proxy 正式使用新包名 dsh-search-proxy，仓库迁移至 Chaos-Paradox/dsh-search-proxy。自托管 SearXNG 搜索与可选进程代理并列展示，继续使用官方搜索时也可使用代理。

旧用户需迁移：停止后端 → 卸载旧包 → 将 id: web-search-searxng 条目中显式的 name: dsh-web-search-searxng 改为 name: dsh-search-proxy → 安装新包 → 完整重启。不要同时启用两个包。 完整迁移与回退说明。设置内容、实例凭据、代理记忆、内部路由与缓存目录沿用原标识。

新安装可在 DSH「插件 → 添加插件」粘贴本 Release 的 .tgz 下载地址，无需 Git。该包属于标准 npm/pnpm tarball；本 Release 不表示已发布 npm 注册表。

同时修复原有的 POSIX 固定端口停止后立即重启可能报端口占用的问题，使用 Python 标准库建立监听，并加入跨平台真实生命周期回归。代理和付费备用默认关闭，宿主最低要求保持未打补丁 DSH 0.2.1-alpha.2。

Validation: macOS 27.0.1 / arm64, Node 24.14.1 checks and Web runtime, pnpm 11.7.0 packaging. Baseline host 0.2.1-alpha.2 at d743267388641bc76f17c45ce8b4c231aed1d32c, unpatched. Plugin commit: 76bc532e7867ca3266a1785e409928b48708d809. Typecheck/build, 211 unit tests, 17 real host composition checks, clean managed setup with 3 real sources, fixed-port restart, actual tarball migration, authenticated search with preserved instance credentials, Web preference save and 10 real upstream sources, and exact final-package clean install all passed.

Linux/macOS/Windows CI for this exact commit passed, including fixed-port managed smoke. Detailed validation and limits. No rc.2 candidate, Node 22.19, full Electron, real paid API or real user proxy validation is claimed.

SHA-256 (dsh-search-proxy-0.5.0.tgz): dcc23f6be8207e49d978e796c6843fa6582d8af5befcef07c7826c2d096d6848. The final archive includes the current bilingual rename guide. Previous 0.4.1 assets retain their original names.

English: the package/repository and settings-page brand are now DSH Search & Proxy. Existing users must update any explicit package-name binding after removing the old package; see the English migration guide. Credentials, stored preferences, routes and proxy memory retain their old namespace. The optional process proxy can be used while retaining official search; speed improvements depend on the network and proxy.

v0.4.1 — 代理记忆、官方备用与路由恢复

中文

v0.4.1 发布代理记忆、官方备用与路由恢复，并包含此前尚未正式发版的本地运行环境透明化功能。

• 代理记忆与恢复：首次确认后按 profile 保存地址、端口和许可。重新启用插件或重启 DSH 自动恢复之前已开启的代理；主动关闭会保持关闭，也可清除记忆。升级后请完整重启 DSH 后端并刷新页面。
• 独立、默认关闭的付费备用：搜索失败后可选一次官方 Search API 重试；本地抓取遇到指定错误或验证页后可选一次官方 Fetch API 重试。两项必须分别明确开启并保存，旧版许可不会自动开启新 API；取消和本地安全策略拒绝不触发付费重试。
• 路由与费用状态：分别显示宿主搜索／抓取提供方、配置来源和已保存许可。官方设置绕过插件时仍提示付费路径；插件备用关闭不代表宿主官方路径免费。
• 主动恢复插件路由：查看两条变化后确认恢复为 searxng / searxng-http，保存并读回核对，保留其他设置和已有备用许可。只读或高优先级覆盖时给出手动步骤，不自动争抢用户选择。
• 首次准备与运行记录：缺少本地缓存时先显示下载摘要，确认后准备；增加活动记录、实际搜索报告和需单独确认的环境清理。

费用面板是配置快照，不是账单或扣费拦截。官方 Fetch 也可能失败。主动恢复保存的用户层路由在停用／卸载后保留，需要按路由说明删除覆盖或改选可用提供方。代理的作用范围与风险见代理说明。

安装／升级

在 DSH 插件管理器填写以下地址，或使用 CLI：

dsh plugin --profile <名称> add https://github.com/Chaos-Paradox/dsh-web-search-searxng#v0.4.1

也可下载本 Release 的 dsh-web-search-searxng-0.4.1.tgz，用同一命令安装本地绝对路径。最低／推荐宿主保持原版 DSH 0.2.1-alpha.2，无需宿主补丁。

验证与范围

• 本机 macOS 27.0.1 / arm64、Node 24.14.1、pnpm 11.7.0：类型、211 项测试、构建与 33 条目打包审计通过。
• 原版 alpha.2（d743267388641bc76f17c45ce8b4c231aed1d32c）及原版 macOS 桌面 rc.2 随附运行时（332895e0f7c9d4dbfb29729f5eb367fa263ff986）各 17 项真实组合通过。后者实际 Web 使用 Node 24.21.0，不等于验证了同名 GitHub 标签或全部 Electron 行为。
• 两套干净 profile 安装、启动、认证 RPC 与实际 Web 卡片通过；卡片真实搜索均返回 12 条来源。另通过全新托管准备、真实搜索、缓存重启、停止／退出清理，以及受保护外部实例鉴权与凭据隔离检查。
• Linux / macOS / Windows、Node 24 的本次 CI 全部通过：提交 CI、PR CI，均使用 Node 24.21.0。
• 没有调用真实收费 API。Node 22.19、全部架构／发行版、其他 DSH 版本与完整桌面功能未验证。peer 范围不代表逐版本承诺。

完整命令和范围：发布验证记录。

English

• Remembers explicitly approved proxy configuration per profile and restores an enabled proxy after plugin or backend restart.
• Adds independent, default-off official Search and Fetch API retries. Legacy consent does not enable either new API.
• Shows configured host routes and cost boundaries, with a reviewed Restore plugin routes action and manual recovery steps.
• Ships first-use download approval, runtime activity, search reports and confirmed cleanup.

Fully restart the DSH backend and refresh after updating. Official host routes can incur charges independently of plugin fallback switches. An explicit route restore preserves saved fallback permissions and remains a user selection after disable/removal. The minimum/recommended host stays unpatched DSH 0.2.1-alpha.2; the exact macOS desktop-bundled rc.2 runtime above was additionally exercised. No real paid API requests were made.

Source commit: 0deaff2198d1e4fac27dddcdb15f1800975651cd
Release commit: d94e433d265219ea8061ed9bc743fb4fa552f842

SHA-256 (dsh-web-search-searxng-0.4.1.tgz):

073b336379d276e8106a5b0d9866ebabaee9d7837a4e58cfebe76fe4be4a86e5

v0.3.1 — Optional instance authentication and host compatibility policy

SearXNG 实例鉴权现为可选配置：卡片支持自定义请求头名称与只写、遮罩的凭据值。默认仍不需要 API Key，本地自动托管继续使用无 Key 通路。 这是访问实例或其网关的凭据；Google/Bing 等上游引擎的 API Key 仍由 SearXNG 配置。

• 凭据通过 DSH 公开凭据服务保存，不进入普通设置或卡片读取响应；绑定实例地址、挂载路径和头名，切换目标不会转发旧凭据。
• 本地托管和官方备用不携带外部实例凭据；拒绝重定向，屏蔽含凭据的网络／解析／取消异常，改进 401/403 提示。
• 加入中英文宿主兼容与发布测试约定、AGENTS.md 和 PR 检查模板，更新 README 安装版本；兼容性文档包含在安装包内。

最低支持版与推荐版仍为未打补丁的 DSH 0.2.1-alpha.2（d743267388641bc76f17c45ce8b4c231aed1d32c）。peer 声明范围不是所有版本均经验证的保证；这个宿主没有公开的官方备用接口，显式开启时会报告限制，不会调用付费搜索。

本次发布验证：127 项插件测试、10 项真实宿主组合回归、三平台 CI、实际 tarball 在干净 Web profile 的卡片／鉴权／端口／生命周期／卸载验收均通过。托管真实上游查询返回 3 条来源，发布包卡片的无 Key 查询返回 10 条来源。完整宿主／Web 验收在 macOS arm64 + Node 24 上完成；Linux/Windows 的 CI 覆盖插件与托管生命周期，未执行完整 Web 流程。Node 22、其他架构和其他宿主版本本次未验证。

验证记录 · 中文 README · PR #5

---

Optional authentication headers are now available for protected SearXNG instances. Credentials use DSH's public credential service, are write-only on the card, and are bound to the effective endpoint/mount and header name. Authentication remains off by default; managed local search still needs no API key. Local requests and official fallback receive no instance credentials. Redirects are rejected and credential-bearing exceptions are sanitized.

This release also includes bilingual host compatibility/release testing policy and documentation. The minimum/recommended host remains unpatched DSH 0.2.1-alpha.2 at the pinned commit above; the peer range does not certify every host version. Official fallback is unavailable on this host. Full local host/Web acceptance passed on macOS arm64 + Node 24; Linux/Windows CI covers plugin checks and managed lifecycle only. See the validation record for commands, evidence and unverified combinations.

Installable archive: dsh-web-search-searxng-0.3.1.tgz. SHA-256: c08f6eff0b89fdffa68e0835bb49734d94093829f6ec42222621aaece83cee5c; also provided in SHA256SUMS.txt.

Release commit: 17d076f5d43d11a825e8dfdc32246ab39037e7dc. Final PR head 321ac259f2f076ae577f4598a86723def4c135fd passed all six checks (push, PR); the merged tree is identical. Repacking the final tree produces the same archive checksum as the tarball used for Web acceptance.

v0.3.0 — automatic local SearXNG & unpatched DSH compatibility

中文

0.3.0 提供本地 SearXNG 自动准备与管理，已在未打补丁的 DSH 0.2.1-alpha.2 上验证。

• 安装后自动准备服务：无需为 SearXNG 手动安装 Docker 或系统 Python。首次准备需要访问 GitHub/PyPI；卡片显示进度，后续复用 profile 内的缓存。
• 随 DSH 后端启停：查询间复用服务，正常退出后端、禁用或卸载插件时停止插件启动的进程。关闭浏览器标签页不会退出后端；不注册操作系统开机服务。
• 自动选择空闲端口：本地端口默认 0，实际地址自动同步。明确指定的端口被占用时会报错；改回 0 可恢复自动分配。
• 卡片管理服务与偏好：选择自动、本地托管或已有实例模式，设置引擎/语言，查看日志，启动、停止、重试或测试搜索。已有地址在默认自动模式下保留，外部实例的启停由部署者管理。
• 跨平台验证：Windows、macOS、Linux CI 已通过单元测试、构建、从空目录准备服务、缓存重启和退出清理。本机 macOS arm64 另验证了真实搜索和完整 Web 卡片；未覆盖所有架构、发行版或 DSH 版本。

从旧版升级

0.3.0 不再要求 v0.2.0 的宿主 configEffects 补丁或激活账本。路由改为 bundle 默认值，仍遵守较高优先级的用户配置；禁用/卸载恢复其余配置层，保留用户设置，不执行旧版逐字段回滚。旧补丁安装留下的账本或显式路由需按升级说明处理。

官方备用默认关闭，未打补丁的 DSH 0.2.1-alpha.2 缺少所需公开接口，因此即使勾选也不会发起官方搜索；失败会明确提示。声明的 DSH peer 范围不等于对其中所有版本的兼容保证。

安装

在 DSH 侧栏「插件 → 添加插件」填写以下地址，安装完成后选择「立即启用」：

https://github.com/Chaos-Paradox/dsh-web-search-searxng#v0.3.0

也可下载本 Release 附件 dsh-web-search-searxng-0.3.0.tgz，将其本机绝对路径交给插件安装器。压缩包已包含构建产物，无需用户构建。SHA256SUMS.txt 提供附件校验值。中文 README

English

Version 0.3.0 automatically prepares and manages local SearXNG and has been validated with unpatched DSH 0.2.1-alpha.2.

• No manual Docker or system Python setup for SearXNG. First preparation needs GitHub/PyPI access; subsequent launches reuse the profile cache.
• Owned services start with the enabled plugin, stay warm between searches, and stop on normal DSH backend shutdown, disablement or removal. Closing a browser tab does not stop the backend; no OS startup service is installed.
• Port 0 automatically binds a free loopback port and updates the effective endpoint. An occupied explicit port fails visibly; setting it back to 0 restores automatic allocation.
• The Plugins-page card manages service modes, engines/language, logs, start/stop/retry and direct test searches. Automatic mode preserves existing endpoints; external services remain operator-managed.
• Windows, macOS and Linux CI passed tests, builds, clean setup, cached restart and cleanup. Real upstream searches and the full Web card were also validated on macOS arm64. This is not a complete architecture, distribution or DSH version matrix.

Upgrade and compatibility

The v0.2.0 host patch, configEffects journal and activation gate are retired. Routing is now a bundle default respecting higher-priority user configuration. Disable/removal exposes the remaining layers and retains user settings rather than performing historical field rollback. Follow the upgrade notes for an older patched installation.

Official fallback remains off by default and is unavailable on unpatched DSH 0.2.1-alpha.2, even when enabled, because the required public API is absent. Failures report that limit without an official request. The declared peer range is not a guarantee for every DSH version.

Install https://github.com/Chaos-Paradox/dsh-web-search-searxng#v0.3.0 through Plugins → Add plugin, then choose Enable now, or download the attached installable tarball and use its absolute local path. Built artifacts are included. SHA256SUMS.txt contains the asset checksum. English README

Validation records: managed service and live Web checks, three-platform CI for the release documentation.

v0.2.0 — host-journaled routing takeover & opt-in official fallback

⚠️ Breaking — read before upgrading / 升级前必读

This release requires the companion DSH host integration in host-integration/dsh-config-effects.patch. An unmodified host refuses to activate the plugin with an explicit error — no silent fallback.

If you installed an earlier version, re-apply the bundle once after upgrading so the host can write its journal: disable and re-enable the bundle on the Plugins page (or dsh plugin --profile <name> remove + add).

本版本需要配套宿主集成补丁（见上）。未打补丁的宿主会明确拒绝激活，不会静默回退。从旧版升级后请重新应用一次 bundle（插件页禁用再启用，或 remove 后重新 add），让宿主补写卸载账本。

What's new

• Host-journaled routing takeover. The manifest declares dsh.bundle.configEffects; the host journals each field write (original presence/value + last write) into the profile YAML comment dsh-config-effects/v1, atomically with the values. Installing selects SearXNG by default while preserving your fetch provider; removal through the plugin manager restores the recorded pre-install route and settings, keeping later manual edits as reported conflicts.
• Fail-closed activation gate. Without the host integration, or when a home/CLI override owns the route, the plugin refuses to load with an actionable error instead of silently searching through the wrong provider.
• Opt-in official fallback (default off). A staged checkbox on the settings card. One failed SearXNG request is served once through the registered official provider via the new web.searchWithProvider seam — credentials, model, limits, session request logging, and disablement are inherited; no second credentialed instance exists. Degraded results carry a bilingual ⚠️ cost notice; attempts and fallbacks hit the host log with the reason. Cancelled requests never degrade.
• Simpler card. The provider switch is gone (the journal owns the route); the card is now endpoint / engines / language plus the fallback checkbox.

Quality benchmark

Third end-to-end run under the new architecture (10 questions, blinded judge, both rounds pinned explicitly at the invocation layer): cumulative 12 SearXNG wins, 11 official wins, 7 ties with near-identical averages — still "no quality difference". Details: docs/quality-benchmark.md (中文).

v0.1.0 — SearXNG web search provider

Highlights

First release: a DeepSeek Harness plugin routing web search (ctx.web) through your self-hosted SearXNG instance — no API key, no per-search cost, with a Settings → Plugins configuration card.

首个版本：DeepSeek Harness 插件，通过自托管 SearXNG 元搜索实例提供网页搜索——无需 API 密钥、无按次成本，附带 设置 → 插件 配置卡片。

• 🔍 SearXNG metasearch provider (searxng) / 元搜索提供方
• 🖥️ GUI settings card: endpoint, engines, language / 图形化配置卡片
• 🔒 No credentials; redirects fail closed / 无凭据，重定向失败关闭
• 🏠 Loopback, private network & subpath mounts / 支持回环、内网与子路径

Install / 安装: dsh plugin --profile <name> add https://github.com/Chaos-Paradox/dsh-web-search-searxng

Docs: English · 中文 · 日本語