pi-lean-dimension 0.5.0 → 0.6.0

package/node_modules/pi-lean-portal/index.ts

@@ -15,7 +15,7 @@ import type { PythonBridgeConfig } from "./backends/python-adapter.js";
 import { sessionManager } from "./core/shared/session-manager.js";
 import { removeAllSnapshotFiles } from "./core/shared/snapshot-cache.js";
 import initBrowserToggle from "./browser-toggle.js";
-import { updateFooterStatus, getLastCtx, setLastCtx } from "./tools/utils.js";
+import { updateFooterStatus, setLastCtx } from "./tools/utils.js";
 import { deleteSessionKey, resetTaskIds } from "./core/shared/task-id.js";
 import { resetToggleModuleState } from "./browser-toggle.js";
 import { registerGuideProvider } from "./core/guides.js";
@@ -214,23 +214,6 @@ export default function (pi: ExtensionAPI) {
 	// --- Register commands ------------------------------------------
 	initBrowserToggle(pi);
 
-	// --- Profile change callback for TUI status updates ------------
-	router.setOnProfileChange((taskId, profileName, profileMode) => {
-		// Update TUI status bar on any profile lifecycle event
-		const lastCtx = getLastCtx();
-		if (lastCtx) {
-			updateFooterStatus(lastCtx);
-		}
-
-		// Debug logging when BROWSER_DEBUG is set
-		if (process.env.BROWSER_DEBUG) {
-			const parts = [`[browser] profile_changed: task=${taskId}`];
-			if (profileName) parts.push(`profile=${profileName}`);
-			if (profileMode) parts.push(`mode=${profileMode}`);
-			console.error(parts.join(" "));
-		}
-	});
-
 	// --- Startup ----------------------------------------------------
 	pi.on("session_start", async (_event, ctx) => {
 		const pluginNames = pluginRegistry.available().join(", ");

package/node_modules/pi-lean-portal/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-lean-portal",
-	"version": "0.5.0",
+	"version": "0.6.0",
 	"description": "Interactive Playwright web browsing for Pi. Chromium and Firefox built in; author stealth backends on either engine. Snapshots and screenshots cache to disk, saving context. Configurable profiles/cookies. Agents write site guides, auto-matched by domain.",
 	"keywords": [
 		"pi-package",
@@ -32,6 +32,7 @@
 		"browser-profile.ts",
 		"browser-cookies.ts",
 		"browser-status.ts",
+		"browser-install.ts",
 		"LICENSE",
 		"backends/",
 		"!backends/python-base/.venv/",

package/node_modules/pi-lean-portal/tools/browser-navigate.ts

@@ -137,9 +137,13 @@ export const browserNavigateTool = defineTool({
 			// If the browser executable is not installed, notify the user with install instructions.
 			const isInstallError =
 				result.error && result.error.toLowerCase().includes("not installed");
-			if (isInstallError) {
+			// Python backends (chromium-py, firefox-py, stealth -py backends) report a
+			// missing venv Playwright wheel — their error already carries the accurate
+			// pip install hint, and /web install cannot fix that, so stay quiet.
+			const isPythonBackend = result.backendUsed?.endsWith("-py") ?? false;
+			if (isInstallError && !isPythonBackend) {
 				ctx?.ui?.notify(
-					"Browser not installed. Run: npx playwright install chromium firefox",
+					"Browser not installed. Run /web install to install it.",
 					"warning",
 				);
 			}

package/node_modules/pi-lean-portal/tools/utils.ts

@@ -29,10 +29,9 @@ export function contentText(
 // ─── Status bar ─────────────────────────────────────────────────
 
 /**
- * Retained reference to the most recent extension context for use by
- * the browser.profile event listener (which fires asynchronously from
- * tool execution contexts). Updated on session_start and cleared on
- * session_shutdown.
+ * Retained reference to the most recent extension context, so event
+ * handlers that fire outside a tool/ctx scope (e.g. browser-toggle's
+ * toolset changed/restored listeners) can still repaint the status bar.
  */
 let _lastCtx: {
 	ui: {
@@ -62,12 +61,12 @@ export function updateFooterStatus(ctx: {
 	ctx.ui.setStatus("browser", `${dot} ${body}`);
 }
 
-/** @internal — used by index.ts's profile event listener */
+/** @internal — read by browser-toggle's event-driven status repaint */
 export function getLastCtx(): typeof _lastCtx {
 	return _lastCtx;
 }
 
-/** @internal — set by index.ts on startup/shutdown */
+/** @internal — updated on session_start/session_tree, cleared on shutdown */
 export function setLastCtx(ctx: typeof _lastCtx): void {
 	_lastCtx = ctx;
 }

package/node_modules/pi-lean-search/AGENTS.md

@@ -47,7 +47,7 @@ Search owns the `search` status bar slot, shown only when `pi-lean-search` is in
 - `○ searxng` — search tools off
 - *(no slot)* — unconfigured: no `searxng.url` in settings; a one-time warning notify on Pi process boot (`session_start` `reason: "startup"` only, not `/new`/`/resume`/`/fork`) points at the setting
 
-Search probes SearXNG reachability on `session_start` and `/searxng-status` and sets the glyph color. Portal writes the `○ searxng` off state when `/web off` is called — search overrides with the health-colored glyph on the next probe. (The `browser` slot is owned by `pi-lean-portal`; see that package's `AGENTS.md`.)
+Search probes SearXNG reachability on `session_start` and `/searxng-status` and sets the glyph color. Search itself writes the `○ searxng` off state: its `/web off` co-activation mirror (see "Peer relationship") disables the `pi-lean-dimension.search` toolset, and the resulting `changed` event re-renders the glyph; the health-colored glyph returns on the next probe. (The `browser` slot is owned by `pi-lean-portal`; see that package's `AGENTS.md`.)
 
 ## Graceful degradation
 
@@ -64,5 +64,7 @@ notify at Pi startup (boot only, not `/new`/`/resume`/`/fork`) points at the
 `pi-lean-search` declares `pi-lean-portal` as a **soft peer**
 (`peerDependencies` + `peerDependenciesMeta.optional: true`). Search-only
 installs are valid — the tool works standalone, it just doesn't get a `/web`
-toggle. Portal lists `"web-search"` in its `SIBLING_TOOL_NAMES` set so
-`/web on|off` picks it up automatically when both are installed.
+toggle. Co-activation is search-owned: search listens on `pi-tool-masking`'s
+`TOOLSET_EVENTS.changed` and mirrors `pi-lean-dimension.web`, so `/web on|off`
+enables/disables search's own toolset when both are installed (portal has no
+reference to `web-search`).

package/node_modules/pi-lean-search/__tests__/web-search.test.ts

@@ -23,7 +23,6 @@ function mockSearchPi(initialActive?: string[]) {
 	let active = initialActive ?? ["web-search"];
 	const eventEmitter = new EventEmitter();
 	const handlers = new Map<string, Array<(...args: any[]) => void>>();
-	const entryCalls: Array<{ customType: string; data: unknown }> = [];
 
 	// A minimal mock of the ExtensionAPI. We intentionally don't mock
 	// _everything_ — only the methods the extension code actually calls.
@@ -33,9 +32,7 @@ function mockSearchPi(initialActive?: string[]) {
 		setActiveTools: vi.fn((names: string[]) => {
 			active = [...names];
 		}),
-		appendEntry: vi.fn((customType: string, data?: unknown) => {
-			entryCalls.push({ customType, data });
-		}),
+		appendEntry: vi.fn(),
 		registerCommand: vi.fn(),
 		registerTool: vi.fn(),
 		on: vi.fn(<T>(event: string, handler: (event: T, ctx: any) => void) => {
@@ -54,7 +51,7 @@ function mockSearchPi(initialActive?: string[]) {
 		},
 	} as unknown as ExtensionAPI;
 
-	return { pi, events: eventEmitter, handlers, entryCalls };
+	return { pi, events: eventEmitter, handlers };
 }
 
 // ─── Config reader (mocked fs) ──────────────────────────────────
@@ -109,18 +106,6 @@ describe("readSearxngUrl", () => {
 		expect(readSearxngUrl()).toBeUndefined();
 	});
 
-	it("returns the URL when searxng.url is set (global)", () => {
-		vi.mocked(readFileSync).mockImplementation((path: unknown) => {
-			if (typeof path === "string" && path.includes(".pi/agent/settings")) {
-				return JSON.stringify({
-					searxng: { url: "http://localhost:8888" },
-				});
-			}
-			return JSON.stringify({});
-		});
-		expect(readSearxngUrl()).toBe("http://localhost:8888");
-	});
-
 	it("project settings override global settings", () => {
 		vi.mocked(readFileSync).mockImplementation((path: unknown) => {
 			if (typeof path === "string" && path.includes(".pi/agent/settings")) {
@@ -158,8 +143,8 @@ describe("readSearxngUrl", () => {
 // ─── Tool definition structural checks ──────────────────────────
 
 describe("webSearchTool", () => {
-	// The exact name is a cross-package contract: portal's SIBLING_TOOL_NAMES and
-	// SEARCH_WEB_SPEC.names use Set.has() on it for the /web on|off toggle.
+	// The exact name is load-bearing: SEARCH_WEB_SPEC.names uses Set.has()
+	// membership to mask/restore it with the /web co-activation toggle.
 	it("has the correct name", () => {
 		expect(webSearchTool.name).toBe("web-search");
 	});
@@ -172,46 +157,33 @@ describe("webSearchTool", () => {
 	});
 
 	describe("renderResult answer badge", () => {
-		it("shows 💡 badge when answerCount > 0 and no results", () => {
-			const mockTheme = {
-				fg: (_style: string, text: string) => text,
-			} as any;
-			const result = (webSearchTool.renderResult as any)(
-				{
-					content: [{ text: "" }],
-					details: { answerCount: 2, query: "weather" },
-				} as any,
-				{ expanded: false, isPartial: false },
-				mockTheme,
+		const theme = { fg: (_style: string, text: string) => text } as any;
+		const render = (details: unknown, expanded = false) =>
+			(webSearchTool.renderResult as any)(
+				{ content: [{ text: "" }], details },
+				{ expanded, isPartial: false },
+				theme,
 				{} as any,
-			) as any;
+			) as { text: string };
+
+		it("shows 💡 badge when answerCount > 0 and no results", () => {
+			const result = render({ answerCount: 2, query: "weather" });
 			expect(result.text).toContain("💡");
 			expect(result.text).toContain("2 answer(s)");
 			expect(result.text).toContain('"weather"');
 		});
 
 		it("shows 💡 badge alongside 🔍 when both answers and results present", () => {
-			const mockTheme = {
-				fg: (_style: string, text: string) => text,
-			} as any;
-			const result = (webSearchTool.renderResult as any)(
-				{
-					content: [{ text: "" }],
-					details: {
-						answerCount: 1,
-						resultCount: 3,
-						query: "test",
-						results: [
-							{ title: "A", url: "http://a.com", engine: "google" },
-							{ title: "B", url: "http://b.com", engine: "google" },
-							{ title: "C", url: "http://c.com", engine: "google" },
-						],
-					},
-				} as any,
-				{ expanded: false, isPartial: false },
-				mockTheme,
-				{} as any,
-			) as any;
+			const result = render({
+				answerCount: 1,
+				resultCount: 3,
+				query: "test",
+				results: [
+					{ title: "A", url: "http://a.com", engine: "google" },
+					{ title: "B", url: "http://b.com", engine: "google" },
+					{ title: "C", url: "http://c.com", engine: "google" },
+				],
+			});
 			expect(result.text).toContain("💡");
 			expect(result.text).toContain("1 answer(s)");
 			expect(result.text).toContain("🔍");
@@ -219,29 +191,21 @@ describe("webSearchTool", () => {
 		});
 
 		it("shows answer text above results when expanded", () => {
-			const mockTheme = {
-				fg: (_style: string, text: string) => text,
-			} as any;
-			const result = (webSearchTool.renderResult as any)(
+			const result = render(
 				{
-					content: [{ text: "" }],
-					details: {
-						answerCount: 1,
-						resultCount: 1,
-						query: "weather berlin",
-						answers: [
-							{
-								template: "answer/weather.html",
-								text: "Berlin: 14°C, light rain",
-							},
-						],
-						results: [{ title: "A", url: "http://a.com" }],
-					},
-				} as any,
-				{ expanded: true, isPartial: false },
-				mockTheme,
-				{} as any,
-			) as any;
+					answerCount: 1,
+					resultCount: 1,
+					query: "weather berlin",
+					answers: [
+						{
+							template: "answer/weather.html",
+							text: "Berlin: 14°C, light rain",
+						},
+					],
+					results: [{ title: "A", url: "http://a.com" }],
+				},
+				true,
+			);
 			const answerIdx = result.text.indexOf("Berlin: 14°C, light rain");
 			const resultIdx = result.text.indexOf("A");
 			expect(answerIdx).toBeGreaterThan(-1);
@@ -250,22 +214,14 @@ describe("webSearchTool", () => {
 		});
 
 		it("shows answer text when expanded with no results", () => {
-			const mockTheme = {
-				fg: (_style: string, text: string) => text,
-			} as any;
-			const result = (webSearchTool.renderResult as any)(
+			const result = render(
 				{
-					content: [{ text: "" }],
-					details: {
-						answerCount: 1,
-						query: "avg 1 2 3",
-						answers: [{ template: "answer/legacy.html", text: "2" }],
-					},
-				} as any,
-				{ expanded: true, isPartial: false },
-				mockTheme,
-				{} as any,
-			) as any;
+					answerCount: 1,
+					query: "avg 1 2 3",
+					answers: [{ template: "answer/legacy.html", text: "2" }],
+				},
+				true,
+			);
 			expect(result.text).toContain("💡");
 			expect(result.text).toContain("2");
 		});
@@ -309,11 +265,6 @@ describe("buildSearchUrl", () => {
 		expect(second).toContain("pageno=2");
 	});
 
-	it("omits empty-string optional params", () => {
-		const url = buildSearchUrl("http://localhost:8888", "test", baseOptions);
-		expect(url).toBe("http://localhost:8888/search?format=json&q=test");
-	});
-
 	it("passes through optional params when set", () => {
 		const url = buildSearchUrl("http://localhost:8888", "test", {
 			...baseOptions,
@@ -357,6 +308,60 @@ describe("execute answer rendering", () => {
 			}),
 		);
 
+	// Headers arrive at once; the body read only settles on abort.
+	const mockStallingFetch = () =>
+		vi.stubGlobal(
+			"fetch",
+			vi.fn().mockImplementation((_url: string, init: { signal?: AbortSignal }) =>
+				Promise.resolve({
+					ok: true,
+					status: 200,
+					text: () =>
+						new Promise((_resolve, reject) => {
+							init.signal?.addEventListener(
+								"abort",
+								() =>
+									reject(new DOMException("The operation was aborted", "AbortError")),
+								{ once: true },
+							);
+						}),
+				}),
+			),
+		);
+
+	const runSearch = (params: Record<string, unknown>) =>
+		webSearchTool.execute("call", params as any, undefined, undefined, {} as any);
+
+	it("degrades gracefully when searxng.url is unconfigured", async () => {
+		vi.mocked(readFileSync).mockReturnValue(JSON.stringify({ theme: "dark" }));
+		const fetchMock = vi.fn();
+		vi.stubGlobal("fetch", fetchMock);
+
+		const r = (await runSearch({ query: "anything" })) as any;
+		expect(r.details.unconfigured).toBe(true);
+		expect(r.content[0].text).toContain("Web search is not configured");
+		expect(fetchMock).not.toHaveBeenCalled();
+	});
+
+	it("times out when the body stalls after the headers arrive", async () => {
+		vi.useFakeTimers();
+		try {
+			mockStallingFetch();
+
+			const pending = runSearch({ query: "stalled", timeout: 1 });
+
+			// Fire the abort timer deterministically instead of waiting on it.
+			await vi.advanceTimersByTimeAsync(1000);
+			const result = await pending;
+
+			const r = result as any;
+			expect(r.details.timedOut).toBe(true);
+			expect(r.content[0].text).toContain("timed out after 1s");
+		} finally {
+			vi.useRealTimers();
+		}
+	});
+
 	it("legacy answer renders + bypasses empty-results early return", async () => {
 		mockFetch({
 			results: [],
@@ -364,13 +369,7 @@ describe("execute answer rendering", () => {
 			suggestions: [],
 		});
 
-		const result = await webSearchTool.execute(
-			"call-1",
-			{ query: "614.24" },
-			undefined,
-			undefined,
-			{} as any,
-		);
+		const result = await runSearch({ query: "614.24" });
 		const r = result as any;
 		expect(r.content[0].text).toContain("614.24");
 		expect(r.content[0].text).not.toContain("No web search results found");
@@ -399,13 +398,7 @@ describe("execute answer rendering", () => {
 			suggestions: [],
 		});
 
-		const result = await webSearchTool.execute(
-			"call-2",
-			{ query: "weather berlin" },
-			undefined,
-			undefined,
-			{} as any,
-		);
+		const result = await runSearch({ query: "weather berlin" });
 		// Uses server-provided summary
 		const r = result as any;
 		expect(r.content[0].text).toContain("Berlin: 14°C, light rain");
@@ -413,8 +406,6 @@ describe("execute answer rendering", () => {
 		expect(r.content[0].text).toContain("feels like 12°C");
 		expect(r.content[0].text).toContain("humidity 80%");
 		expect(r.content[0].text).toContain("wind 18km/h");
-		// forecasts not rendered
-		expect(r.content[0].text).not.toContain("forecast");
 		// source
 		expect(r.content[0].text).toContain("open-meteo");
 	});
@@ -426,13 +417,7 @@ describe("execute answer rendering", () => {
 			suggestions: [],
 		});
 
-		const result = await webSearchTool.execute(
-			"call-3",
-			{ query: "future" },
-			undefined,
-			undefined,
-			{} as any,
-		);
+		const result = await runSearch({ query: "future" });
 		const r = result as any;
 		expect(r.content[0].text).toContain("x");
 	});
@@ -452,22 +437,13 @@ describe("execute answer rendering", () => {
 			suggestions: [],
 		});
 
-		const result = await webSearchTool.execute(
-			"call-5",
-			{ query: "answer of life" },
-			undefined,
-			undefined,
-			{} as any,
-		);
+		const result = await runSearch({ query: "answer of life" });
 		// Answer above results
 		const r = result as any;
 		const answerIdx = r.content[0].text.indexOf("42");
 		const resultIdx = r.content[0].text.indexOf("Result 1");
 		expect(answerIdx).toBeGreaterThanOrEqual(0);
 		expect(resultIdx).toBeGreaterThan(answerIdx);
-		// Both present
-		expect(r.content[0].text).toContain("42");
-		expect(r.content[0].text).toContain("Result 1");
 	});
 });
 
@@ -530,3 +506,80 @@ describe("pi-lean-dimension.web co-activation mirror", () => {
 		expect(pi.setActiveTools).not.toHaveBeenCalled();
 	});
 });
+
+// ─── session_start: health probe + status glyph ──────────────
+
+describe("session_start glyph", () => {
+	function mockCtx() {
+		const setStatus = vi.fn();
+		const notify = vi.fn();
+		const ctx = {
+			ui: {
+				setStatus,
+				notify,
+				// Style-tagged passthrough so glyph color states are assertable.
+				theme: { fg: (c: string, t: string) => `${c}:${t}` },
+			},
+		};
+		return { ctx: ctx as any, setStatus, notify };
+	}
+
+	async function fireSessionStart(reason: string) {
+		const { pi, handlers } = mockSearchPi();
+		searchExtension(pi);
+		const { ctx, setStatus, notify } = mockCtx();
+		// index.ts registers its handler after defineToolset's, so it's last.
+		await handlers.get("session_start")!.at(-1)!({ reason }, ctx);
+		return { setStatus, notify };
+	}
+
+	afterEach(() => {
+		vi.unstubAllGlobals();
+	});
+
+	it("unconfigured at startup: clears slot and warns once", async () => {
+		vi.mocked(readFileSync).mockReturnValue(JSON.stringify({ theme: "dark" }));
+
+		const { setStatus, notify } = await fireSessionStart("startup");
+
+		expect(setStatus).toHaveBeenCalledWith("search", "");
+		expect(notify).toHaveBeenCalledTimes(1);
+		expect(notify).toHaveBeenCalledWith(
+			expect.stringContaining("not configured"),
+			"warning",
+		);
+	});
+
+	const configuredSettings = () =>
+		vi
+			.mocked(readFileSync)
+			.mockReturnValue(
+				JSON.stringify({ searxng: { url: "http://localhost:8888" } }),
+			);
+
+	it("reachable at startup: healthy accent glyph + info notify", async () => {
+		configuredSettings();
+		vi.stubGlobal("fetch", vi.fn().mockResolvedValue({ ok: true, status: 200 }));
+
+		const { setStatus, notify } = await fireSessionStart("startup");
+
+		expect(setStatus).toHaveBeenCalledWith("search", "accent:● searxng");
+		expect(notify).toHaveBeenCalledWith(
+			expect.stringContaining("available"),
+			"info",
+		);
+	});
+
+	it("unreachable at startup: error glyph + warning notify", async () => {
+		configuredSettings();
+		vi.stubGlobal("fetch", vi.fn().mockRejectedValue(new Error("ECONNREFUSED")));
+
+		const { setStatus, notify } = await fireSessionStart("startup");
+
+		expect(setStatus).toHaveBeenCalledWith("search", "error:● searxng");
+		expect(notify).toHaveBeenCalledWith(
+			expect.stringContaining("unreachable"),
+			"warning",
+		);
+	});
+});

package/node_modules/pi-lean-search/index.ts

@@ -177,9 +177,6 @@ export { _resetStateForTest };
 // ─── Extension entry point ───────────────────────────────────────
 
 export default function (pi: ExtensionAPI) {
-	// Read config at startup
-	_searxngUrl = readSearxngUrl();
-
 	// ── Register the web-search tool ─────────────────────────
 	pi.registerTool(webSearchTool);
 

package/node_modules/pi-lean-search/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-lean-search",
-	"version": "0.5.0",
+	"version": "0.6.0",
 	"description": "SearXNG web search for Pi. Self-hosted or public instance, no API keys or quotas; returns a setup message instead of erroring when unreachable. Pairs with pi-lean-portal's /web toggle or works standalone.",
 	"keywords": [
 		"pi-package",

package/node_modules/pi-lean-search/web-search-tool.ts

@@ -393,6 +393,19 @@ export const webSearchTool = defineTool({
 			controller.abort();
 		}, timeoutSeconds * 1000);
 
+		// Abort can surface in either fetch or the body read; label it correctly.
+		const abortFail = () => {
+			if (timedOut) {
+				return fail(
+					`Web search timed out after ${timeoutSeconds}s. ` +
+						`The SearXNG instance at \`${searxngUrl}\` may be slow ` +
+						"or unresponsive.",
+					{ timedOut: true, timeout: timeoutSeconds },
+				);
+			}
+			return fail("Web search was cancelled.", { cancelled: true });
+		};
+
 		try {
 			// ── Layer 1: Connection-level error handling ──
 			let response: Response;
@@ -402,20 +415,11 @@ export const webSearchTool = defineTool({
 					headers: { Accept: "application/json" },
 				});
 			} catch (connectionErr) {
-				clearTimeout(timeoutId);
 				if (
 					connectionErr instanceof DOMException &&
 					connectionErr.name === "AbortError"
 				) {
-					if (timedOut) {
-						return fail(
-							`Web search timed out after ${timeoutSeconds}s. ` +
-								`The SearXNG instance at \`${searxngUrl}\` may be slow ` +
-								"or unresponsive.",
-							{ timedOut: true, timeout: timeoutSeconds },
-						);
-					}
-					return fail("Web search was cancelled.", { cancelled: true });
+					return abortFail();
 				}
 				return fail(
 					"Web search connection failed: " +
@@ -426,8 +430,6 @@ export const webSearchTool = defineTool({
 				);
 			}
 
-			clearTimeout(timeoutId);
-
 			// ── Layer 2: HTTP error handling ──
 			if (!response.ok) {
 				return fail(
@@ -444,6 +446,10 @@ export const webSearchTool = defineTool({
 					? (JSON.parse(text) as SearXNGResponse)
 					: { results: [], answers: [], suggestions: [] };
 			} catch (parseErr) {
+				// Abort can surface here if the body read stalls past the timeout.
+				if (parseErr instanceof DOMException && parseErr.name === "AbortError") {
+					return abortFail();
+				}
 				return fail(
 					"Web search returned unexpected response format. " +
 						"SearXNG may be misconfigured. Error: " +
@@ -545,7 +551,6 @@ export const webSearchTool = defineTool({
 				},
 			};
 		} catch (unexpectedErr) {
-			clearTimeout(timeoutId);
 			return fail(
 				"An unexpected error occurred during web search: " +
 					(unexpectedErr instanceof Error
@@ -553,6 +558,10 @@ export const webSearchTool = defineTool({
 						: String(unexpectedErr)),
 				{ unexpectedError: true },
 			);
+		} finally {
+			// Timer stays armed through the body read, so `timeout` bounds the
+			// whole request, not just the response headers.
+			clearTimeout(timeoutId);
 		}
 	},