plugin
AppKit plugin (registered name: web-search) that owns the resolved
web-search runtime - the URL policy, result / length caps, timeout, and
default approval gate the webSearchTool / webFetchTool
read. Registering it resolves and logs the effective config (which URL
policy is in force, the caps) so a misconfiguration is visible in the boot
logs rather than on the first search, and installs the plugin’s
execute() as the runtime’s executor so every outbound call picks up
AppKit’s cache / retry / timeout / telemetry chain.
The plugin also implements AppKit’s ToolProvider, so an AppKit agent gets
web_search / web_fetch without going through Mastra; the Mastra tools in
tool.ts are the other half and share the same runtime.