@softspark/dsh-web-search-searxng
由 SearXNG 实例支持的 DeepSeek Harness 网络搜索提供商：无需供应商 API 密钥的元搜索，也无需通过账户关联查询。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:softspark/dsh-web-search-searxng#6c2d8ab86b70b4c9964a3f8b3e58cb5f5dc2eabfWeb Search Searxng 以 @softspark/dsh-web-search-searxng 发布，当前版本为 1.0.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A web-search provider for the DeepSeek Harness, backed by a SearXNG instance. No API key, no vendor account, and nothing for this plugin to store.
The harness ships one search provider and it is gated on DEEPSEEK_API_KEY. This registers a second one on the same seam and moves the selection onto it.
dsh plugin add @softspark/dsh-web-search-searxng
Then tell it where the instance is:
- id: web-search-searxng
name: '@softspark/dsh-web-search-searxng'
config:
baseURL: http://searxng:8080
This is an independently maintained SoftSpark integration. It is unofficial and is not affiliated with or endorsed by DeepSeek or the SearXNG project.
First public release.
ctx.web search provider, id searxng, and the bundle patch that actually selects it — registering alone changes nothing, and nothing reports that as an error.dsh-tool-web already renders title ?? hostname(url).Full history in CHANGELOG.md.
The harness ships one search provider, web-search-deepseek, and it is gated on DEEPSEEK_API_KEY. That is a sensible default and a poor fit for a workbench whose point is that no vendor account sits behind the agent's ordinary actions. The key is not just a payment detail: it is an identity, and it makes every query the agent runs attributable to one account held by one person.
Searching the web does not need that. A metasearch front end forwards the query to engines and returns what they say, and the account it does not have is the account nobody can correlate against.
What this does not claim. The engines still see the query, and so does whoever runs the instance. Pointing baseURL at a public SearXNG moves the trust from a vendor you have an account with to a stranger you do not — which is a different bargain, not a strictly better one. Run your own instance if the queries matter.
| Key | Default | Meaning |
|---|---|---|
baseURL | required | Absolute URL of the instance, without /search. No default: a guess would send queries somewhere you did not choose. |
timeoutMs | 15000 | Upper bound on one search. Between 1000 and 120000. |
language | unset | UI language passed through, e.g. pl or en-US. |
safeSearch | 0 | SearXNG safe-search level: 0 off, 1 moderate, 2 strict. |
categories | unset | Comma-separated categories, e.g. general,it. |
engines | unset | Comma-separated engine names, narrowing what the instance queries. |
Unset optional keys are omitted from the request rather than sent empty, so the instance's own defaults apply.
SearXNG does not enable the JSON output format by default. Without it, the instance answers the same URL with a rendered results page and HTTP 200 — which would read as "no results" if this provider did not check. Add it to the instance's settings.yml:
search:
formats:
- html
- json
The provider names this fix in the error when it sees HTML, so the failure is one you can act on rather than one you have to guess at.
Two rows, and both are needed:
- insert:
- id: web-search-searxng
name: '@softspark/dsh-web-search-searxng'
- patch:
- id: web
config:
searchProvider: searxng
Registering the provider alone changes nothing. The web seam resolves searchProvider at call time, and a configured id that is registered always wins — so while web.searchProvider still names deepseek-official, this provider is registered and never selected. The patch: row is what moves the selection.
Leaving the DeepSeek row mounted is otherwise harmless: without a key it reports itself unavailable. Removing it is still worth doing where the point is that no key path exists at all.
Selection is not order-dependent. The seam resolves the configured id at execution time. An id that is registered but unavailable fails as WEB_PROVIDER_CONFIGURED_UNAVAILABLE rather than silently falling back to another provider — a fallback would make "which engine answered this" unanswerable.
available() makes no network call. It reports whether an absolute http(s) base URL is configured. Whether the instance is reachable is a question for the search itself, and answering it in a usability check would make every provider listing a round trip.
Results are deduplicated by URL. Metasearch merges engines and the same page arrives more than once; the first occurrence wins, so the engine ordering the instance chose is preserved.
Optional fields are omitted, not invented. A result with no title returns no title. dsh-tool-web renders title ?? hostname(url) and is built for this.
Redirects are refused. A search URL that redirects is a misconfiguration or an interception, not a route to follow.
Errors name what to do. An unreachable instance, a non-2xx answer, a timeout, and an HTML answer are four distinct messages. None of them contains the query — an error is a place a search term should never leak into.
This plugin reads no credential and holds no key. It makes one outbound GET per search, to the baseURL you configured and nowhere else.
Report vulnerabilities per SECURITY.md.