From 21822ba29f28e339f483bb647242b035bf4f5fd8 Mon Sep 17 00:00:00 2001
From: YeonGyu-Kim <code.yeon.gyu@gmail.com>
Date: Sat, 11 Apr 2026 22:49:10 +0900
Subject: [PATCH] test(openclaw): cover shared gateway url validation

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
---
 src/openclaw/gateway-url-validation.test.ts | 34 +++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 src/openclaw/gateway-url-validation.test.ts

diff --git a/src/openclaw/gateway-url-validation.test.ts b/src/openclaw/gateway-url-validation.test.ts
new file mode 100644
index 000000000..aadf60e8a
--- /dev/null
+++ b/src/openclaw/gateway-url-validation.test.ts
@@ -0,0 +1,34 @@
+import { describe, expect, test } from "bun:test"
+import { validateGatewayUrl } from "./gateway-url-validation"
+
+describe("validateGatewayUrl", () => {
+  test("allows https and local http while rejecting remote or invalid urls", () => {
+    // given representative gateway urls
+    const httpsRemote = "https://example.com"
+    const httpRemote = "http://example.com"
+    const httpLocalhost = "http://localhost:3000"
+    const httpLoopback = "http://127.0.0.1:3000"
+    const httpIpv6Loopback = "http://[::1]:3000"
+    const invalidUrl = "not-a-url"
+
+    // when validating each url
+    const results = {
+      httpsRemote: validateGatewayUrl(httpsRemote),
+      httpRemote: validateGatewayUrl(httpRemote),
+      httpLocalhost: validateGatewayUrl(httpLocalhost),
+      httpLoopback: validateGatewayUrl(httpLoopback),
+      httpIpv6Loopback: validateGatewayUrl(httpIpv6Loopback),
+      invalidUrl: validateGatewayUrl(invalidUrl),
+    }
+
+    // then only https and localhost loopback urls are allowed
+    expect(results).toEqual({
+      httpsRemote: true,
+      httpRemote: false,
+      httpLocalhost: true,
+      httpLoopback: true,
+      httpIpv6Loopback: true,
+      invalidUrl: false,
+    })
+  })
+})