Publish dsh-search-mcp fork for newer DSH and Bailian WebSearch MCP.

Based on gxpppp/dsh-search-mcp; includes DSH web settings fixes, Clash fake-IP URL policy, and Bailian default server patch. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-10 06:00:45 +08:00 · 2026-09-12 08:51:32 +08:00 · 2026-09-12 08:51:32 +08:00 · d5c4d2006c
commit d5c4d2006c
16 changed files with 4821 additions and 0 deletions
--- a/test/compatibility.test.js
+++ b/test/compatibility.test.js
@ -0,0 +1,79 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const read = (path) => readFile(resolve(root, path), 'utf8');
+
+test('package exports resolve and RC2 dependencies stay pinned', async () => {
+  const pkg = JSON.parse(await read('package.json'));
+  assert.equal(pkg.exports['.'], './lib/index.js');
+  assert.equal(pkg.exports['./client'], './lib/client.browser.js');
+  assert.equal(pkg.engines.node, '>=20');
+
+  for (const name of [
+    '@deepseek-ai/dsh-api-remotes',
+    '@deepseek-ai/dsh-credentials',
+    '@deepseek-ai/dsh-launch-environment',
+    '@deepseek-ai/dsh-settings',
+    '@deepseek-ai/dsh-web',
+  ]) {
+    assert.equal(pkg.dependencies[name], '0.1.1-rc.2');
+  }
+  assert.equal(pkg.dependencies['@deepseek-ai/schemastery'], '3.18.1');
+  assert.equal(pkg.dependencies.undici, '6.28.0');
+  assert.equal(pkg.dependencies['ipaddr.js'], '2.5.0');
+  assert.equal(pkg.dependencies['@modelcontextprotocol/sdk'], '1.30.0');
+});
+
+test('RC2 browser bundle uses keyed settings slot and credential migration', async () => {
+  const client = await read('lib/client.browser.js');
+  assert.match(client, /name: "settings\.plugin\.item",\s+key: NS,/);
+  assert.doesNotMatch(client, /name: "settings\.plugin\.item",\s+id:/);
+  assert.match(client, /api\.settings\.describe\(\{\}\)/);
+  assert.match(client, /api\.credentials\.describe\(\{ refs: refs\.slice\(index, index \+ CREDENTIAL_DESCRIBE_BATCH_SIZE\) \}\)/);
+  assert.match(client, /api\.credentials\.set\(\{ ref, value \}\)/);
+  assert.match(client, /credentials\/reference-updated/);
+  assert.match(client, /CREDENTIAL_DESCRIBE_BATCH_SIZE = 64/);
+  assert.match(client, /api\.credentials\.unset\(\{ ref \}\)/);
+  assert.match(client, /rollbackSettingsWrites/);
+  assert.match(client, /legacyKeyBlocked/);
+  assert.match(client, /deepEqualJson\(current\[field\], value\)/);
+});
+
+test('known providers are CDKey-only while custom keeps advanced fields', async () => {
+  const client = await read('lib/client.browser.js');
+  const catalog = client.slice(client.indexOf('const CATALOG = {'), client.indexOf('const KIND_OPTIONS'));
+  assert.doesNotMatch(catalog, /https?:\/\//);
+  assert.doesNotMatch(catalog, /toolName|authParam|transport/);
+  assert.match(client, /const known = row\.kind !== "custom"/);
+  assert.match(client, /children: known \? \[/);
+  assert.match(client, /No endpoint is required for known providers/);
+  assert.match(client, /已知提供商不需要填写端点链接/);
+  assert.match(client, /kind, apiKey: "", apiKeyEnv: ""/);
+});
+
+test('HTTP transport pins DNS and applies one guarded fetch to every SDK request', async () => {
+  const transport = await read('lib/client.js');
+  assert.match(transport, /validateHttpEndpoint\(server\.url, \{ signal \}\)/);
+  assert.match(transport, /new Agent\(\{[\s\S]*connect: \{ lookup: validated\.lookup \}/);
+  assert.match(transport, /requestUrl\.origin !== expectedOrigin/);
+  assert.match(transport, /dispatcher: agent/);
+  assert.match(transport, /redirect: 'error'/);
+  assert.match(transport, /fetch: secureFetch/);
+  assert.match(transport, /await client\.close\(\)[\s\S]*await runtime\?\.close\(\)/);
+  assert.doesNotMatch(transport, /new URL\(server\.url\)[\s\S]*new StreamableHTTPClientTransport\(url, \{\s*requestInit:/);
+});
+test('bundle replaces built-in search and leaves default row endpoint-free', async () => {
+  const patch = await read('cordis.patch.yml');
+  assert.match(patch, /searchProvider: search-mcp/);
+  assert.match(patch, /- id: web-search-deepseek\s+disabled: true/);
+  assert.match(patch, /- id: tool-web\s+disabled: false/);
+  assert.match(patch, /fetch: false/);
+  assert.match(patch, /searchMaxResults: 50/);
+  assert.match(patch, /searchMaxQueries: 4/);
+  const defaultRow = patch.slice(patch.indexOf('- id: tavily'), patch.indexOf('- id: web'));
+  assert.doesNotMatch(defaultRow, /url:|toolName:|authParam:|transport:/);
+});