await tool?.execute?.("call", { url: "https://example.com/tokens/private?token=secret" });

expect(logSpy).toHaveBeenCalledWith(

expect.stringContaining("x-markdown-tokens: 1500 (https://example.com/...)"),

);

const tokenLogs = logSpy.mock.calls

.map(([message]) => message)

.filter((message) => message.includes("x-markdown-tokens"));

expect(tokenLogs).toHaveLength(1);

expect(tokenLogs).toEqual(["[web-fetch] x-markdown-tokens: 1500 (https://example.com/...)"]);

expect(tokenLogs[0]).not.toContain("token=secret");

expect(tokenLogs[0]).not.toContain("/tokens/private");

});