v0.3.0 - DeepSeek Harness Web Search

Highlights

• Renames the repository and package to deepseek-harness-web-search-plugin so the web-search purpose is explicit.
• Keeps TaroCub optional while preserving /tarocub companion guidance.
• Adds source-traceable Brave/Tavily live search, URL extraction, provider status, and explicit health checks.
• Preserves compatibility with existing tarocub-deepseek-harness-plugin installations in TaroCub-managed hosts.
• Treats empty DSH credential environment variables as missing so configured Codex Search MCP credentials can be reused.

Migration

Remove the former package, install github:cloveric/deepseek-harness-web-search-plugin, restart Harness, and verify exactly one mcp-cctb-search client.

Verification

29 plugin tests, TypeScript typecheck, deterministic bundle check, dry-run package audit, and secret scans passed.

v0.2.2

Security and reliability

• Redact configured Brave/Tavily credentials and common authorization tokens from every MCP result, provider error, and fallback diagnostic.
• Bound provider diagnostics so oversized upstream failures cannot flood tool output.
• Reject non-HTTP(S) extract inputs and filter unsafe provider-returned citation URLs.
• Keep deterministic bundled output and the same native DeepSeek Harness component identity.

TaroCub v0.1.281 adds the corresponding managed-host validation and safe fallback when a Harness profile has a missing, altered, or mismatched plugin patch.

Verification

• 28 plugin tests passed
• TypeScript typecheck passed
• deterministic bundle check passed
• npm pack dry-run passed
• npm audit --omit=dev: 0 vulnerabilities
• repository and history secret scans passed

DeepSeek Harness Search Plugin v0.2.1

Fixed

• Makes standalone builds deterministic by installing and verifying against this repository's own lockfile.
• Prevents dependency-resolution differences between the TaroCub monorepo and GitHub Actions from changing the committed MCP bundle.

Verification

• TypeScript typecheck passed.
• 23 tests passed.
• Committed bundle reproducibility check passed.
• Package dry-run and npm audit passed.

This release supersedes v0.2.0.

TaroCub DeepSeek Harness Search Plugin v0.2.0

Native Search MCP for DeepSeek Harness

• Adds web_search, web_extract, provider_status, and health_check as native mcp__cctb_search__* tools.
• Ships a self-contained, committed JavaScript runtime with no production package dependencies.
• Supports Brave discovery, Tavily research/extraction, verify mode, source logs, fallback notices, timestamps, ranks, domains, and content hashes.
• Integrates cleanly with TaroCub while preserving Harness-native plugin/MCP ownership.

安装

dsh plugin --profile web add github:cloveric/tarocub-deepseek-harness-plugin

配置 BRAVE_API_KEY 和/或 TAVILY_API_KEY 后重启 Harness。详细运维、验证、迁移和安全说明见中英文 README。

No npm package was published.