[chayapats]

Implements #449. Keenable becomes a selectable keyless search/fetch provider next to Parallel; Parallel stays the default and nothing changes unless the owner switches in Settings > Web research.

What changed

• New src/s14/keenable-protocol.ts: KeenableSearch client returning the same ParallelResult, over POST /v1/search/public and GET /v1/fetch/public with a fixed X-Keenable-Title: Jit header. One request per read, no key, no session id, no model name. Reuses publicOutbound/publicWebUrl, ParallelFailure, the byte cap and Retry-After parsing.
• src/s14/parallel.ts + parallel-types.ts: web.parallel.configure takes an optional provider (parallel | keenable), allowed only in anonymous mode so a saved Parallel key never reaches Keenable. read() picks the client; authority checks, outbound guard, deadline, output caps, evidence and citations are unchanged. Quota fencing is scoped per provider and a 429 never falls back to the other provider or a key. Absent provider means Parallel, so no migration.
• Settings page: collapsed Search provider (optional) card below the account section; keyed mode shows a note that switching needs the free mode first.
• Provider-neutral copy (1B): settings, evidence, setup note, lifecycle gains, model tool descriptions and the research system prompt render per the selected provider (new _keenable en/th strings; Parallel strings unchanged as defaults).
• ADR 0047: short Keenable opt-in section. Keyed Keenable mode stays out of scope.

Test notes

• New tests/s14-keenable.test.ts (7 tests, deterministic, no network): titled keyless search/fetch shape, excerpt vs full_content labels, fetch 404 to partial + not_found, 429 retry deadline + per-provider fencing, keyed-mode refusal + key isolation, oversize fails closed.
• Regression: tests/s14-parallel.test.ts + tests/s14-web-memory.test.ts (105 pass), acceptance/evidence/web-ui (58 pass), web-tools/input-evidence/adoption-web (107 pass).
• Typecheck clean (tsc --noEmit; needs GOMAXPROCS=1 GOGC=20 under a 2 GB container limit), git diff --check clean.
• Live run from this machine through the real gateway: web_search returned 5 results in ~1.1 s, web_fetch returned the example page with excerpt coverage.

Closes #449

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; all previous findings are fixed and no new blocking issues were found.

Summary

Adds Keenable as an owner-selected, keyless web provider while keeping Parallel as the default.

• Keenable handles public web searches and page reads without a key.
• Web research settings and evidence show the selected provider.

_{Reviews (2) · Last reviewed commit: "fix(s14): address Keenable review findin..." · Reviewed by Greptile}

[chayapats]

@greptileai