dsh-plugin-verified-search

An installable DeepSeek Harness plugin for current/latest/as-of searches that need explicit source scope and honest evidence gaps.

This project is the immediately installable companion to deepseek-harness Discussion #332. It does not claim that a search index is always current. It makes the retrieval procedure and returned structured-source boundary auditable.

What it changes

• Adds a model-facing verified_search tool with query and optional allowed_domains.
• Mounts Harness rc.6's built-in durable dsh-time-context every 60 seconds, covering the composition omission reported in Discussion #344.
• Hides and blocks the inherited legacy web_search for agents covered by the plugin.
• Requires absolute-date queries for mutable facts, a first-party allowlisted pass, and a separate unrestricted comparison pass.
• Calls DeepSeek's Anthropic-compatible Messages endpoint with native web_search_20250305.
• Records the exact credential-free auxiliary request before dispatch using Harness's persistence-known web/deepseek-search-llm-request event. The search query itself is durable session data, so never put a secret in it.
• Normalizes 1–20 bare ASCII hostnames and rejects schemes, paths, ports, wildcards, Unicode hostnames, and IP literals, including legacy IPv4 forms.
• Sends allowed_domains to DeepSeek, echoes it in the auxiliary prompt, and locally removes non-matching structured sources before capping results.
• Rejects credential-bearing source URLs and removes sensitive/tracking query parameters plus fragments before results enter tool/session logs.
• Joins citation excerpts to sources and exposes missing excerpts instead of treating a title or URL as verified content.

Install

Install the reviewed release tag:

dsh plugin --profile web add github:f0909172434/dsh-plugin-verified-search#v0.1.1
dsh --profile web --dump-config
dsh web

The repository commits its reviewed lib/ output and has no install-time build script. A pinned Git install therefore does not require allowBuilds or execute this package's development toolchain on the user's machine.

The plugin retrofits live search-capable agents on load. An already in-flight model request keeps its frozen tool header; the replacement appears on the next assembly. Presets that do not expose (including the shipped preset) receive no new capability.