feat: claude search

app/api/web-search/route.ts

@@ -2,21 +2,25 @@
  * Web Search API
  *
  * POST /api/web-search
- * Simple JSON request/response using Tavily search.
+ * Supports multiple search providers (Tavily, Claude).
  */
 
 import { NextRequest } from 'next/server';
 import { callLLM } from '@/lib/ai/llm';
 import { searchWithTavily, formatSearchResultsAsContext } from '@/lib/web-search/tavily';
+import { searchWithClaude } from '@/lib/web-search/claude';
+import { WEB_SEARCH_PROVIDERS } from '@/lib/web-search/constants';
 import { resolveWebSearchApiKey } from '@/lib/server/provider-config';
+import { validateUrlForSSRF } from '@/lib/server/ssrf-guard';
 import { createLogger } from '@/lib/logger';
-import { apiError, apiSuccess } from '@/lib/server/api-response';
+import { API_ERROR_CODES, apiError, apiSuccess } from '@/lib/server/api-response';
 import {
   buildSearchQuery,
   SEARCH_QUERY_REWRITE_EXCERPT_LENGTH,
 } from '@/lib/server/search-query-builder';
 import { resolveModelFromHeaders } from '@/lib/server/resolve-model';
 import type { AICallFn } from '@/lib/generation/pipeline-types';
+import type { WebSearchProviderId } from '@/lib/web-search/types';
 
 const log = createLogger('WebSearch');
 
@@ -28,23 +32,47 @@ export async function POST(req: NextRequest) {
       query: requestQuery,
       pdfText,
       apiKey: clientApiKey,
+      providerId: requestProviderId,
+      providerConfig,
     } = body as {
       query?: string;
       pdfText?: string;
       apiKey?: string;
+      providerId?: WebSearchProviderId;
+      providerConfig?: {
+        modelId?: string;
+        baseUrl?: string;
+        tools?: Array<{ type: string; name: string }>;
+      };
     };
     query = requestQuery;
 
+    // Provider must be explicitly specified
+    const providerId: WebSearchProviderId | null = requestProviderId ?? null;
+
     if (!query || !query.trim()) {
       return apiError('MISSING_REQUIRED_FIELD', 400, 'query is required');
     }
 
-    const apiKey = resolveWebSearchApiKey(clientApiKey);
+    if (!providerId) {
+      return apiError(
+        'MISSING_PROVIDER',
+        400,
+        'Web search provider is not selected. Please select a provider in the toolbar.',
+      );
+    }
+
+    if (!(providerId in WEB_SEARCH_PROVIDERS)) {
+      return apiError('INVALID_REQUEST', 400, `Unknown web search provider: ${providerId}`);
+    }
+
+    const apiKey = resolveWebSearchApiKey(providerId, clientApiKey);
     if (!apiKey) {
+      const envVar = providerId === 'claude' ? 'ANTHROPIC_API_KEY' : 'TAVILY_API_KEY';
       return apiError(
         'MISSING_API_KEY',
         400,
-        'Tavily API key is not configured. Set it in Settings → Web Search or set TAVILY_API_KEY env var.',
+        `${providerId} API key is not configured. Set it in Settings → Web Search or set ${envVar} env var.`,
       );
     }
 
@@ -75,13 +103,45 @@ export async function POST(req: NextRequest) {
     const searchQuery = await buildSearchQuery(query, boundedPdfText, aiCall);
 
     log.info('Running web search API request', {
+      provider: providerId,
       hasPdfContext: searchQuery.hasPdfContext,
       rawRequirementLength: searchQuery.rawRequirementLength,
       rewriteAttempted: searchQuery.rewriteAttempted,
       finalQueryLength: searchQuery.finalQueryLength,
     });
 
-    const result = await searchWithTavily({ query: searchQuery.query, apiKey });
+    // Validate client-supplied base URL against SSRF in all environments
+    if (providerConfig?.baseUrl) {
+      const ssrfError = await validateUrlForSSRF(providerConfig.baseUrl);
+      if (ssrfError) {
+        return apiError(API_ERROR_CODES.INVALID_URL, 400, ssrfError);
+      }
+    }
+
+    const baseUrl =
+      providerConfig?.baseUrl || WEB_SEARCH_PROVIDERS[providerId].defaultBaseUrl || '';
+
+    let result;
+    switch (providerId) {
+      case 'claude': {
+        result = await searchWithClaude({
+          query: searchQuery.query,
+          apiKey,
+          baseUrl,
+          modelId: providerConfig?.modelId,
+          tools: providerConfig?.tools,
+        });
+        break;
+      }
+      case 'tavily': {
+        result = await searchWithTavily({
+          query: searchQuery.query,
+          apiKey,
+          baseUrl,
+        });
+        break;
+      }
+    }
     const context = formatSearchResultsAsContext(result);
 
     return apiSuccess({

app/generation-preview/page.tsx

@@ -300,15 +300,25 @@ function GenerationPreviewContent() {
         setWebSearchSources([]);
 
         const wsSettings = useSettingsStore.getState();
-        const wsApiKey =
-          wsSettings.webSearchProvidersConfig?.[wsSettings.webSearchProviderId]?.apiKey;
+        const wsProviderId = wsSettings.webSearchProviderId;
+        const wsProviderConfig = wsProviderId
+          ? wsSettings.webSearchProvidersConfig?.[wsProviderId]
+          : null;
         const res = await fetch('/api/web-search', {
           method: 'POST',
           headers: getApiHeaders(),
           body: JSON.stringify({
             query: currentSession.requirements.requirement,
             pdfText: currentSession.pdfText || undefined,
-            apiKey: wsApiKey || undefined,
+            providerId: wsProviderId || undefined,
+            apiKey: wsProviderConfig?.apiKey || undefined,
+            providerConfig: wsProviderId
+              ? {
+                  modelId: wsProviderConfig?.modelId,
+                  baseUrl: wsProviderConfig?.baseUrl,
+                  tools: wsProviderConfig?.tools,
+                }
+              : undefined,
           }),
           signal,
         });

app/page.tsx

@@ -19,7 +19,7 @@
   BotOff,
   ChevronUp,
   Upload,
   Sparkles,
   Atom,
 } from 'lucide-react';
 import { useI18n } from '@/lib/hooks/use-i18n';
@@ -55,21 +55,18 @@
 
 const log = createLogger('Home');
 
-const WEB_SEARCH_STORAGE_KEY = 'webSearchEnabled';
 const RECENT_OPEN_STORAGE_KEY = 'recentClassroomsOpen';
 const INTERACTIVE_MODE_STORAGE_KEY = 'interactiveModeEnabled';
 
 interface FormState {
   pdfFile: File | null;
   requirement: string;
-  webSearch: boolean;
   interactiveMode: boolean;
 }
 
 const initialFormState: FormState = {
   pdfFile: null,
   requirement: '',
-  webSearch: false,
   interactiveMode: false,
 };
 
@@ -89,6 +86,8 @@
 
   // Model setup state
   const currentModelId = useSettingsStore((s) => s.modelId);
+  const webSearchEnabled = useSettingsStore((s) => s.webSearchEnabled);
+  const setWebSearchEnabled = useSettingsStore((s) => s.setWebSearchEnabled);
   const [recentOpen, setRecentOpen] = useState(true);
 
   // Hydrate client-only state after mount (avoids SSR mismatch)
@@ -101,16 +100,20 @@
       /* localStorage unavailable */
     }
     try {
-      const savedWebSearch = localStorage.getItem(WEB_SEARCH_STORAGE_KEY);
-      const savedInteractiveMode = localStorage.getItem(INTERACTIVE_MODE_STORAGE_KEY);
-      const updates: Partial<FormState> = {};
-      if (savedWebSearch === 'true') updates.webSearch = true;
-      if (savedInteractiveMode === 'true') updates.interactiveMode = true;
-      if (Object.keys(updates).length > 0) {
-        setForm((prev) => ({ ...prev, ...updates }));
+      // Migrate webSearchEnabled from old localStorage key into the Zustand store
+      const oldWebSearch = localStorage.getItem('webSearchEnabled');
+      if (oldWebSearch === 'true' && !useSettingsStore.getState().webSearchEnabled) {
+        const store = useSettingsStore.getState();
+        if (!store.webSearchProviderId) {
+          store.setWebSearchProvider('tavily');
+        }
+        store.setWebSearchEnabled(true);
       }
+      if (oldWebSearch !== null) localStorage.removeItem('webSearchEnabled');
+      const savedInteractiveMode = localStorage.getItem(INTERACTIVE_MODE_STORAGE_KEY);
+      if (savedInteractiveMode === 'true') setForm((prev) => ({ ...prev, interactiveMode: true }));
     } catch {
-      /* localStorage unavailable */
+      /* ignore */
     }
   }, []);
   /* eslint-enable react-hooks/set-state-in-effect */
@@ -204,7 +207,6 @@
   const updateForm = <K extends keyof FormState>(field: K, value: FormState[K]) => {
     setForm((prev) => ({ ...prev, [field]: value }));
     try {
-      if (field === 'webSearch') localStorage.setItem(WEB_SEARCH_STORAGE_KEY, String(value));
       if (field === 'interactiveMode')
         localStorage.setItem(INTERACTIVE_MODE_STORAGE_KEY, String(value));
       if (field === 'requirement') updateRequirementCache(value as string);
@@ -268,7 +270,7 @@
         requirement: form.requirement,
         userNickname: userProfile.nickname || undefined,
         userBio: userProfile.bio || undefined,
-        webSearch: form.webSearch || undefined,
+        webSearch: webSearchEnabled || undefined,
         interactiveMode: form.interactiveMode,
       };
 
@@ -513,8 +515,8 @@
             <div className="px-3 pb-3 flex items-end gap-2">
               <div className="flex-1 min-w-0">
                 <GenerationToolbar
-                  webSearch={form.webSearch}
-                  onWebSearchChange={(v) => updateForm('webSearch', v)}
+                  webSearch={webSearchEnabled}
+                  onWebSearchChange={setWebSearchEnabled}
                   onSettingsOpen={(section) => {
                     setSettingsSection(section);
                     setSettingsOpen(true);