// Cloudflare Markdown web_fetch tests cover direct markdown extraction,

// provider bypass, and privacy-safe token logging.

import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";

import type { LookupFn } from "../../infra/net/ssrf.js";

import * as logger from "../../logger.js";

});

it("bypasses Firecrawl when runtime metadata marks Firecrawl inactive", async () => {

// Runtime metadata is authoritative for the current credential snapshot; a

// stale configured provider should not force provider fallback.

const fetchSpy = vi

.fn()

.mockResolvedValue(

});

it("logs x-markdown-tokens when header is present", async () => {

// Token diagnostics are useful, but the logged URL must be scrubbed before

// query strings or private paths reach debug output.

const logSpy = vi.spyOn(logger, "logDebug").mockImplementation(() => {});

const fetchSpy = vi

.fn()

// Shared web_search provider tests cover module-local cache isolation.

import { describe, expect, it, vi } from "vitest";

describe("web_search shared cache", () => {

it("keeps cache entries module-local instead of exposing them on a global symbol", async () => {

// Cache state should die with the module instance; a global symbol would

// leak search payloads across tests, sessions, and plugin reloads.

vi.resetModules();

delete (globalThis as Record<PropertyKey, unknown>)[Symbol.for("openclaw.web-search.cache")];

// web_search redirect tests cover SSRF-guarded citation URL resolution.

import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";

const { withStrictWebToolsEndpointMock } = vi.hoisted(() => ({

});

it("resolves redirects via SSRF-guarded HEAD requests", async () => {

// Citation redirect resolution still touches arbitrary URLs, so it must

// route through the strict guarded fetch wrapper.

withStrictWebToolsEndpointMock.mockImplementation(async (_params, run) => {

return await run({

response: new Response(null, { status: 200 }),

// web_search signal tests cover abort propagation from the agent tool wrapper

// into provider runtime execution.

import { beforeEach, describe, expect, it, vi } from "vitest";

import { createWebSearchTool } from "./web-search.js";

});

it("passes the agent abort signal into web search runtime execution", async () => {

// Provider execution can be long-running; the outer agent cancellation

// signal must reach the runtime path.

const controller = new AbortController();

const tool = createWebSearchTool({ config: {} });