fix(web): 适配 Moonshot K3 原生搜索协议

按官方 Formula API 完成 K3 工具声明、fiber 执行和结果回填链路，并保留 K2.6 旧协议兼容。\n\n复用 Kimi Code 端点常量，记录未实网验证的降级决策及智谱中国站存量配置影响。

Signed-off-by: hexin <372726039@qq.com>

Author: h3c-hexin

CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- Z.AI configurations using `https://open.bigmodel.cn/api/paas/v4` are now
+  treated as official Zhipu routes for model-alias normalization, credential
+  scoping, and native web search. Existing unknown model IDs continue to pass
+  through unchanged.
+
 ## [0.9.5] - 2026-08-08
 
 Codewhale v0.9.5 consolidates the terminal application into one compiled

crates/config/src/route/capabilities.rs

@@ -7,7 +7,10 @@
 
 use serde::{Deserialize, Serialize};
 
-use crate::{DEFAULT_MOONSHOT_BASE_URL, ProviderKind, provider_base_url_is_official};
+use crate::{
+    DEFAULT_KIMI_CODE_BASE_URL, DEFAULT_MOONSHOT_BASE_URL, ProviderKind,
+    provider_base_url_is_official,
+};
 
 /// Whether a resolved provider/model offering supports one capability.
 #[derive(Debug, Clone, Copy, Default, PartialEq, Eq, Serialize, Deserialize)]
@@ -86,6 +89,8 @@ pub(crate) fn documented_server_side_web_search(
             wire_model_id.as_str(),
             "deepseek-v4-flash" | "deepseek-v4-pro" | "deepseek-v4-flash-vision-exp"
         ),
+        // K3 uses the Formula API official-tools channel; K2.6 retains the
+        // earlier `$web_search` contract with thinking disabled.
         "moonshot" => matches!(wire_model_id.as_str(), "kimi-k3" | "kimi-k2.6"),
         "modelstudio-token-plan" => matches!(
             wire_model_id.as_str(),
@@ -121,7 +126,7 @@ pub(crate) fn documented_server_side_web_search_for_route(
     }
 
     if provider == ProviderKind::Moonshot
-        && normalized == "https://api.kimi.com/coding/v1"
+        && normalized == DEFAULT_KIMI_CODE_BASE_URL
         && matches!(
             wire_model_id.trim().to_ascii_lowercase().as_str(),
             "k3" | "k3-256k" | "kimi-for-coding" | "kimi-for-coding-highspeed"
@@ -143,8 +148,8 @@ pub(crate) fn documented_server_side_web_search_for_route(
         | ProviderKind::Anthropic
         | ProviderKind::Xai
         | ProviderKind::XiaomiMimo => true,
-        // Moonshot's built-in `$web_search` contract belongs to the exact
-        // direct API product. Kimi Code's exact `/coding/v1` product is
+        // Moonshot's Formula/legacy `$web_search` contracts belong to the
+        // exact direct API product. Kimi Code's exact `/coding/v1` product is
         // handled above; adjacent coding paths must remain fail-closed.
         ProviderKind::Moonshot => normalized == DEFAULT_MOONSHOT_BASE_URL,
         // Token Plan exposes Harness web_search only on its Responses API.
@@ -245,6 +250,14 @@ mod tests {
             documented_server_side_web_search("deepseek", "deepseek-v4-flash"),
             CapabilityState::Supported
         );
+        assert_eq!(
+            documented_server_side_web_search("moonshot", "kimi-k2.6"),
+            CapabilityState::Supported
+        );
+        assert_eq!(
+            documented_server_side_web_search("moonshot", "kimi-k3"),
+            CapabilityState::Supported
+        );
         assert_eq!(
             documented_server_side_web_search("modelstudio-token-plan", "qwen3.8-max"),
             CapabilityState::Supported
@@ -282,6 +295,14 @@ mod tests {
             ),
             CapabilityState::Supported
         );
+        assert_eq!(
+            documented_server_side_web_search_for_route(
+                ProviderKind::Moonshot,
+                "kimi-k2.6",
+                "https://api.moonshot.ai/v1",
+            ),
+            CapabilityState::Supported
+        );
         assert_eq!(
             documented_server_side_web_search_for_route(
                 ProviderKind::ModelstudioTokenPlan,

crates/tui/src/client/provider_native_search.rs

@@ -182,6 +182,23 @@ impl ProviderNativeSearchClient {
             .await
             .context("provider-native web search returned invalid JSON")
     }
+
+    pub(super) async fn get_json(&self, url: &str) -> Result<Value> {
+        let response = self
+            .inner
+            .send_with_retry(|| {
+                self.inner
+                    .http_client
+                    .get(url)
+                    .header("Accept", "application/json")
+            })
+            .await
+            .context("provider-native web search request failed")?;
+        response
+            .json::<Value>()
+            .await
+            .context("provider-native web search returned invalid JSON")
+    }
 }
 
 #[derive(Clone, Copy)]
@@ -510,7 +527,7 @@ fn bounded_answer(parts: Vec<String>) -> Option<String> {
 mod tests {
     use super::*;
     use crate::config::{Config, ProviderConfig, ProvidersConfig};
-    use wiremock::matchers::{body_partial_json, header, method, path};
+    use wiremock::matchers::{body_partial_json, body_string_contains, header, method, path};
     use wiremock::{Mock, MockServer, ResponseTemplate};
 
     fn request() -> ProviderNativeSearchRequest {
@@ -809,18 +826,82 @@ mod tests {
     }
 
     #[tokio::test]
-    async fn moonshot_adapter_declares_builtin_search_and_recovers_citations() {
+    async fn moonshot_k3_adapter_uses_formula_search_and_recovers_citations() {
         let server = MockServer::start().await;
+        Mock::given(method("GET"))
+            .and(path("/v1/formulas/moonshot/web-search:latest/tools"))
+            .and(header("authorization", "Bearer moonshot-test-key"))
+            .respond_with(ResponseTemplate::new(200).set_body_json(json!({
+                "object": "list",
+                "tools": [{
+                    "type": "function",
+                    "function": {
+                        "name": "web_search",
+                        "description": "Search the web",
+                        "parameters": {
+                            "type": "object",
+                            "properties": { "query": { "type": "string" } },
+                            "required": ["query"]
+                        }
+                    }
+                }]
+            })))
+            .expect(1)
+            .mount(&server)
+            .await;
         Mock::given(method("POST"))
             .and(path("/v1/chat/completions"))
             .and(header("authorization", "Bearer moonshot-test-key"))
             .and(body_partial_json(json!({
                 "model": "kimi-k3",
                 "tools": [{
-                    "type": "builtin_function",
-                    "function": { "name": "$web_search" }
+                    "type": "function",
+                    "function": { "name": "web_search" }
                 }]
             })))
+            .respond_with(ResponseTemplate::new(200).set_body_json(json!({
+                "choices": [{
+                    "finish_reason": "tool_calls",
+                    "message": {
+                        "role": "assistant",
+                        "content": "",
+                        "tool_calls": [{
+                            "id": "web_search:0",
+                            "type": "function",
+                            "function": {
+                                "name": "web_search",
+                                "arguments": "{\"query\":\"current release\"}"
+                            }
+                        }]
+                    }
+                }]
+            })))
+            .up_to_n_times(1)
+            .expect(1)
+            .mount(&server)
+            .await;
+        Mock::given(method("POST"))
+            .and(path(
+                "/v1/formulas/moonshot/web-search:latest/fibers",
+            ))
+            .and(header("authorization", "Bearer moonshot-test-key"))
+            .and(body_partial_json(json!({
+                "name": "web_search",
+                "arguments": "{\"query\":\"current release\"}"
+            })))
+            .respond_with(ResponseTemplate::new(200).set_body_json(json!({
+                "status": "succeeded",
+                "context": {
+                    "encrypted_output": "----MOONSHOT ENCRYPTED BEGIN----result----MOONSHOT ENCRYPTED END----"
+                }
+            })))
+            .expect(1)
+            .mount(&server)
+            .await;
+        Mock::given(method("POST"))
+            .and(path("/v1/chat/completions"))
+            .and(header("authorization", "Bearer moonshot-test-key"))
+            .and(body_string_contains("MOONSHOT ENCRYPTED BEGIN"))
             .respond_with(ResponseTemplate::new(200).set_body_json(json!({
                 "choices": [{
                     "finish_reason": "stop",