📦 @goodandready/dsh-grok-xsearch

⚡ Overview

dsh-grok-xsearch equips your DeepSeek Harness agents with real-time X (Twitter) intelligence and a suite of dedicated analytical tools.

By leveraging authenticated SuperGrok OAuth sessions with the xAI Responses API (POST /responses), agents can query live breaking news, developer sentiment, community threads, author timelines, viral trends, and Community Notes fact-checking without expensive per-query X API tiers.

graph LR
    subgraph AgentAction [DSH Agent Reasoning]
        Agent[🤖 Agent: Live X Context Required] --> Select{Tool Selector}
        Select --> T1[x_search: Deep Search]
        Select --> T2[x_author_profile: Stance & Timeline]
        Select --> T3[x_trending_topics: Live Trends]
        Select --> T4[x_fact_check_notes: Community Notes]
        Select --> T5[x_thread_reader: Thread Context]
        Select --> T6[x_find_experts: Expert Discovery]
    end

    subgraph SearchEngine [dsh-grok-xsearch Execution Engine]
        T1 & T2 & T3 & T4 --> Cache{In-Memory TTL Cache}
        Cache -->|Hit| DirectReturn[Cached Result: Instant]
        Cache -->|Miss| Filter[Filter & Multimodal Normalizer]
        Filter --> Auth{SuperGrok PKCE OAuth}
    end

    subgraph UpstreamX [xAI Responses API]
        Auth --> xAI[xAI Responses Endpoint: tool type x_search]
        xAI -->|Rate Limit 429| Fallback[Smart Fallback: Grok 4.5]
        Fallback --> xAI
        xAI --> Raw[Live Posts, Metrics & Annotations]
    end

    subgraph ContextAssembly [Rich Formatting & Deduplication]
        Raw --> Dedup[Citation Deduplication & Tweet Parsing]
        Dedup --> CacheSave[Save Cache: 5 min TTL]
        CacheSave --> Output[Structured Output & Clickable Citations]
        Output --> Agent
    end

    style AgentAction fill:#1e1e2e,stroke:#89b4fa,stroke-width:2px,color:#cdd6f4
    style SearchEngine fill:#181825,stroke:#cba6f7,stroke-width:2px,color:#cdd6f4
    style UpstreamX fill:#11111b,stroke:#a6e3a1,stroke-width:2px,color:#cdd6f4
    style ContextAssembly fill:#181825,stroke:#f38ba8,stroke-width:2px,color:#cdd6f4

🛠️ Complete Tool Suite Reference

The plugin registers six purpose-built tools in ctx.tools:

1. x_search — Deep Post & Thread Search

General-purpose natural language search across X posts, threads, media, and engagement metrics.

2. x_author_profile — Author Timeline & Position Analysis

Inspects an expert or developer's recent discussions, technical stances, and shared insights on X.

3. x_trending_topics — Real-Time Trend Discovery

Uncovers emerging topics, breaking announcements, viral threads, and community discussions.

4. x_fact_check_notes — Community Notes & Fact-Checking

Investigates claims, viral rumors, or news stories for Community Notes, expert rebuttals, and corrections on X.

5. x_thread_reader — Thread Reconstruction & Discussion Reader

Reconstructs full multi-tweet threads, author continuations, and high-engagement discussion trees by tweet URL or numeric status ID.

6. x_find_experts — Domain Expert & Key Opinion Leader Discovery

Discovers verified practitioners, seminal researchers, and high-signal domain contributors on X by topic or technology.

🛡️ Resilience & Performance Features

• Smart Model Fallback (429 Rate Limit): When grok-4.6 encounters temporary upstream rate limits (HTTP 429), the execution engine automatically falls back to grok-4.5 or grok-4-fast-reasoning, ensuring uninterrupted agent workflow.
• In-Memory TTL Caching: Identical queries within a 5-minute window are served instantly from the local cache, conserving xAI API quotas.
• Citation Deduplication & Parsing: Citations are parsed into structured references with author handles (@handle), status IDs, and clickable URLs.
• Full Multi-Language UI: Settings card supports English, Russian, and Chinese localization via ctx.locale.register.

⚙️ Configuration (settings.yaml / Web UI)

dsh-grok-xsearch:
  enabled: true
  grokClientId: "<YOUR_GROK_OAUTH_CLIENT_ID>"
  model: "grok-4.6"
  timeoutSeconds: 180
  retries: 2
  autoFallbackModel: true
  enableCache: true
  cacheTtlSeconds: 300

Compatibility & Stability

• Version 0.3.14 (Settings De-duplication & Plugin Card Exclusivity):

  • Removed Redundant settings.section Fallback: Settings are surfaced exclusively within the collapsible card under Settings → Plugins (settings.plugin.item), removing duplicate root sidebar entries (#51).
  • Diagnostic Slot Logging: Unavailability of settings.plugin.item slot now logs an actionable warning via ctx.logger.warn instead of masking errors with a redundant root section.

• Version 0.3.13 (Lifecycle State Cleanup & Export Hygiene):

  • Cordis Lifecycle Disposers: clearPendingStore, clearRefreshMutex, and clearModelsCache connected to the plugin effect disposer in lib/index.js, preventing memory retention and stale state across sessions and restarts (#48).
  • Comprehensive Logout Flush: Route /dsh-grok-xsearch/logout guaranteed to flush stored tokens, pending OAuth PKCE requests, token refresh mutex, and the cached models catalog.
  • Manual Cache Clear Route: Route /dsh-grok-xsearch/cache/clear flushes both query results cache and the models catalog cache.
  • Export Modifier Hygiene: Stripped unneeded export keywords from internal-only functions and constants across models.js, oauth-pending.js, and updater.js.

• Version 0.3.12 (One-Click Updater, Route Security Hardening & Client Decomposition):

  • One-Click Updater (lib/updater.js): Added host-side /api/dsh-grok-xsearch/update route and settings card update UI for version checking, update status inspection, and one-click upgrades with semver prerelease support and standard pnpm package resolution.
  • Fail-Closed Route Security: Upgraded write routes (/config, /cache/clear, /oauth/complete, /logout, /api/dsh-grok-xsearch/update) with strict loopback and origin/referer verification protecting against DNS rebinding and cross-site request forgery (CSRF).
  • Client UI Decomposition: Streamlined and decomposed lib/client.js below 600 lines with reusable input field helpers and compact layout while strictly retaining browser ModuleLoader self-containment.
  • Tool Registration Resilience: Safe companion tool registration wrapped with ctx.logger.warn to log diagnostics instead of silent error swallowing.
  • Locale Lifecycle Disposer: Client locale registration moved inside ctx.effect with disposer cleanup.
  • Package Metadata Alignment: Populated dsh.client.inject with @deepseek-ai/dsh-client-locale and @deepseek-ai/dsh-client-ui-settings.

• Version 0.3.10 (UI Redesign & Comprehensive Hardening):

  • Unified dsh-clinebot Styling: Rebuilt settings surface to mirror the reference dsh-clinebot architecture: isolated .gx-section-card containers, soft translucent status badges, adaptive inputs, and native --dsw-alias-* styling tokens.
  • Slot Error Isolation: Integrated React ErrorBoundary component around settings views to catch and isolate runtime errors with inline retry capabilities, preventing parent DSH slot crashes.
  • Interactive Cache Telemetry Meter: Added live LRU cache visualizer (.gx-bar-container, track, and animated percentage fill) with one-click cache purge action.
  • Safe Service Resolution: Replaced brittle credentials proxy accesses with defensive resolution (typeof ctx?.get === 'function' ? ctx.get('credentials') : ctx?.credentials) in lib/token-manager.js.
  • Dynamic User-Agent: Configured dynamic package version detection (dsh-grok-xsearch/${PKG_VERSION}) in lib/xsearch.js for upstream telemetry.
  • Dead Code Pruning: Eliminated legacy uncalled functions publicAccountView, requestOrigin, and webCallbackUri.
  • Extended Test Coverage: Added test/helpers.test.mjs verifying blob.js, oauth.js, http.js, wire.js, pkce.js, and jwt.js (58/58 test suite passing).

• Version 0.3.9 (Robustness & Resilience Hardening):

  • Token Request Socket Timeout: formTokenRequest in lib/wire.js now enforces a strict 15-second AbortSignal.timeout preventing hanging sockets during token exchanges or refresh attempts.
  • Auto-Eviction of Invalid Credentials: When upstream refresh returns fatal invalid_grant or HTTP 400, stored invalid credentials blob is automatically purged from DSH credentials store to prevent infinite retry storms.
  • OAuth Error Handling in Callback: Handles ?error= and ?error_description= query parameters from xAI OAuth provider (e.g. user denied permissions) cleanly, displaying actionable instructions instead of cryptic "Missing code" errors.
  • Proactive Cache Pruning & Capacity Limits: SEARCH_CACHE (search queries) and MODELS_CACHE (xAI model catalog) proactively prune expired entries upon insertion and enforce upper capacity bounds to prevent memory bloat.
  • UI Cache Management: The settings card now displays live in-memory cache usage and provides an interactive "Clear cache" button calling /dsh-grok-xsearch/cache/clear.
  • Formal Design Contract: Added comprehensive docs/design/DESIGN.md specifying all agent tools, UI card states, foundations, user flows, and locked design decisions.

• Version 0.3.8 (Architecture & Stability Hardening):

  • Single-Flight OAuth Mutex: Prevents concurrent request token refresh races by consolidating simultaneous refresh triggers into a single upstream request.
  • Auto-Recovery on HTTP 401 Unauthorized: If an access token expires mid-operation, tools automatically perform an explicit token refresh and retry the search query transparently.
  • Network & Transient Error Backoff: Added exponential backoff retry logic for upstream network and 5xx transient failures.
  • In-Memory Catalog Caching: Cached xAI model catalog lookups (listModelsForSettings, 15-minute TTL) eliminate UI setting panel loading stalls.
  • Citation Canonicalization & Tracking Stripping: Automatically removes URL tracking parameters (?s=, ?t=, ref_src, utm_*) and harmonizes twitter.com into canonical https://x.com/<handle>/status/<id> citations to eliminate duplicate citations.
  • Streamlined OAuth Pending Store: Replaced multi-file disk pending store with a lightweight in-memory Map with automatic TTL expiration.
  • Settings Scope Race Elimination: Removed dual-write race in client settings UI to use single authoritative HTTP config persistence.

• Version 0.3.3: Hardens compatibility with mixed DeepSeek Harness alpha/rc peer resolutions. All four registered tools expose an object-root JSON Schema (type: "object" with properties and required) even when an older dsh-tools runtime returns the legacy property-map form. Tool behavior and OAuth/API contracts are unchanged.

📦 Quick Installation

dsh plugin --profile web add @goodandready/dsh-grok-xsearch

[!IMPORTANT] Authenticate your SuperGrok session in Settings → Plugins → Grok X Search & Intelligence Suite.

🔌 HTTP API Routes

📄 License

MIT © GooDAnDReaDY