feat(agent): web.search / web.fetch via Brave Search (WEB-1)

0 Fork 0

- adapters/websearch: Brave client (X-Subscription-Token, error classes),
  result normalization with redaction/truncation, SSRF guard, HTML→text fetch
  (10s, 512KB, text/html|text/plain only)
- modules/websearch: 10-min PG cache (region websearch), cross-process
  per-minute limit, web.fetch allowlist = URLs from the caller's latest
  web.search; POST /websearch/test
- settings.agent.webSearch (key write-only → secret_ref); settings card
  under Agent; web.* offered to the model only when enabled, plus a system
  prompt rule; outputs marked untrusted
- capability count 27 → 29; e2e E13; runbook docs/runbook/websearch.md

Co-Authored-By: Claude Opus 5.5 <[email protected]>

This commit is contained in:

rootandClaude Opus 5.5 committed 2026-09-29 00:14:08 +08:00

1 parent 40dd0e69e4

commit d53df25fc8

32 files changed

+1854 -39

No files matched your search

									
										packages/contracts/test/schemas.test.ts
									
		+2
		
												View File
												
				@@ -35,6 +35,8 @@ const STRING_CANDIDATES = [

				  "123456",

				  `lib:${UUID}`,

				  "30 3 * * *",

				  "ALL",

				  "zh-hans",

				];

				const NUMBER_CANDIDATES = [1, 50, 2024, 0.5, 0, 4096, 128000];