feat: claude search

[joseph-mpo-yeti]

Summary

Adds a new Claude-based web search provider (via Anthropic Messages + web_search_* tools) and upgrades the app to support multiple web search providers end-to-end (store, UI, API, and server generation), including SSRF protections for page/content fetching.

Related Issues

Closes #392

Changes

• Introduces searchWithClaude (including page-content enrichment + SSRF guard) and adds Claude/Tavily to WEB_SEARCH_PROVIDERS.
• Refactors web search settings/state to support provider selection, enable/disable toggle, Claude model/tool configuration, and server/env API key resolution.
• Updates the web-search API + generation flows (toolbar, preview, classroom generation) to pass provider + providerConfig; adds tests and icons.

Type of Change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Documentation update
• Refactoring (no functional changes)
• CI/CD or build changes

Verification

Steps to reproduce / test

1. pnpm build
2. pnpm start

Evidence

• CI passes (pnpm check && pnpm lint && npx tsc --noEmit)
• Manually tested locally
• Screenshots / recordings attached (if UI changes)

Before

After

Checklist

• My code follows the project's coding style
• I have performed a self-review of my code
• I have added/updated documentation as needed
• My changes do not introduce new warnings

[Copilot]

Pull request overview

Adds a Claude (Anthropic Messages + web_search tool) web-search provider and refactors the app’s web search feature to support multiple providers across settings storage, UI selection, and server/API generation flows (with SSRF protections for URL fetching).

Changes:

• Introduces searchWithClaude (including page-content enrichment + SSRF guard) and registers Claude/Tavily as web search providers.
• Refactors web search settings/state/UI to support provider selection, enable/disable toggle, Claude model/tool configuration, and server/env API-key resolution.
• Updates API + classroom generation + preview/toolbar flows to pass providerId and providerConfig, with added tests and provider icons.

Reviewed changes

Copilot reviewed 24 out of 25 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
tests/web-search/claude.test.ts	Adds unit coverage for Claude search behavior (tools defaults, page enrichment, SSRF blocks, errors).
tests/store/settings-web-search.test.ts	Tests web-search store defaults/rehydration and Claude tools persistence.
tests/server/provider-config.test.ts	Extends provider-config tests for provider-specific web search API key resolution (Tavily + Claude).
public/logos/tavily.svg	Adds Tavily logo asset for provider UI.
lib/web-search/types.ts	Extends web-search provider typing (adds claude, model metadata).
lib/web-search/tavily.ts	Refactors Tavily search to accept configurable baseUrl.
lib/web-search/constants.ts	Registers Tavily/Claude providers, icons, and Claude model list.
lib/web-search/claude.ts	Implements Claude web-search provider (Messages API + SSRF-guarded page fetching).
lib/types/web-search.ts	Makes WebSearchSource.score optional to support providers without scoring.
lib/store/settings.ts	Adds multi-provider web search settings (enabled toggle, provider selection, model/tools/models config, rehydrate helpers).
lib/server/provider-config.ts	Adds web-search provider/env mapping and provider-aware API key resolution.
lib/server/classroom-generation.ts	Wires provider selection/config into classroom generation web-search step (with SSRF baseUrl validation).
lib/server/api-response.ts	Adds MISSING_PROVIDER error code for API responses.
lib/i18n/locales/en-US.json	Updates web-search strings and adds new Claude/model/tool configuration labels.
lib/i18n/locales/ja-JP.json	Same as above for Japanese locale.
lib/i18n/locales/ru-RU.json	Same as above for Russian locale.
lib/i18n/locales/zh-CN.json	Same as above for Simplified Chinese locale.
components/settings/web-search-settings.tsx	Expands settings UI for per-provider keys/baseUrl plus Claude tools/models management and connection testing.
components/settings/web-search-model-dialog.tsx	Adds dialog to create/edit/test Claude models.
components/settings/tool-edit-dialog.tsx	Adds dialog to create/edit Claude tool definitions.
components/settings/index.tsx	Updates settings dialog state/selection to support nullable web search provider selection.
components/generation/generation-toolbar.tsx	Adds web-search toggle + provider/model selection popover (multi-provider aware).
app/page.tsx	Migrates old localStorage web-search toggle into Zustand store and routes toolbar toggle through store.
app/generation-preview/page.tsx	Sends providerId + providerConfig when calling /api/web-search.
app/api/web-search/route.ts	Updates web-search API to require providerId, validate baseUrl via SSRF guard, and route to Tavily/Claude.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[wyuc]

Rebase onto current main to resolve conflicts.

Two things to fix:

1. handleSaveModel doesn't check for duplicate model IDs. Add a uniqueness check before saving to avoid React key collisions.

2. i18n: ar-SA.json was just merged and several new keys were added recently (#418, #430, #435). Make sure all 4 locale files have the new web search keys after rebasing.

[wyuc]

Bug: searchWithClaude manually constructs the API URL (${baseUrl}/v1/messages) via proxyFetch, but test connection goes through the Anthropic SDK. These two paths handle base URLs differently, so test connection can pass while actual search 404s (e.g. when the base URL ends with /v1).

Fix: use the Anthropic SDK (messages.create) for the search call too, same as test connection. This aligns URL handling and avoids the manual endpoint construction entirely.

[wyuc]

The web_search tool needs allowed_callers: ["direct"] in the tool definition. Without it, models like Haiku that don't support programmatic tool calling will 400. Since the search call is always user-initiated (not model-to-model), "direct" is the correct caller type here.