!feat(plugins): add web fetch provider boundary (#59465)

* feat(plugins): add web fetch provider boundary

* feat(plugins): add web fetch provider modules

* refactor(web-fetch): remove remaining core firecrawl fetch config

* fix(web-fetch): address review follow-ups

* fix(web-fetch): harden provider runtime boundaries

* fix(web-fetch): restore firecrawl compare helper

* fix(web-fetch): restore env-based provider autodetect

* fix(web-fetch): tighten provider hardening

* fix(web-fetch): restore fetch autodetect and compat args

* chore(changelog): note firecrawl fetch config break

src/plugin-sdk/provider-web-fetch.ts

@@ -0,0 +1,30 @@
+// Public web-fetch registration helpers for provider plugins.
+
+import type {
+  WebFetchCredentialResolutionSource,
+  WebFetchProviderPlugin,
+  WebFetchProviderToolDefinition,
+} from "../plugins/types.js";
+export { jsonResult, readNumberParam, readStringParam } from "../agents/tools/common.js";
+export {
+  withStrictWebToolsEndpoint,
+  withTrustedWebToolsEndpoint,
+} from "../agents/tools/web-guarded-fetch.js";
+export { markdownToText, truncateText } from "../agents/tools/web-fetch-utils.js";
+export {
+  DEFAULT_CACHE_TTL_MINUTES,
+  DEFAULT_TIMEOUT_SECONDS,
+  normalizeCacheKey,
+  readCache,
+  readResponseText,
+  resolveCacheTtlMs,
+  resolveTimeoutSeconds,
+  writeCache,
+} from "../agents/tools/web-shared.js";
+export { enablePluginInConfig } from "../plugins/enable.js";
+export { wrapExternalContent, wrapWebContent } from "../security/external-content.js";
+export type {
+  WebFetchCredentialResolutionSource,
+  WebFetchProviderPlugin,
+  WebFetchProviderToolDefinition,
+};