feat(brave): support configurable search base url

docs/.generated/config-baseline.sha256

@@ -1,4 +1,4 @@
-3545cf963a093d50b69904f859544088212e6522905b72710eb7818caa154b89  config-baseline.json
+737056ad5544e24250ce91c000ae4a5fe0af751681a529f2e4710b383ef5d4e7  config-baseline.json
 2d132b4c2e3b0e0f2524fc1cc889d3be658ad0e40c970b2d367bf27348883658  config-baseline.core.json
 f42329d45c095881bd226bdb192c235980658fd250606d0c0badc2b12f12f5d3  config-baseline.channel.json
-38b16427911ba4ff19240097e5002fb892178fb3cefdc9c50fd98ad2044c02bf  config-baseline.plugin.json
+726c2fb81319f05be6977cdf5c9598884feafc600e6c76d482be626f4983bc32  config-baseline.plugin.json

docs/tools/brave-search.md

@@ -27,6 +27,7 @@ OpenClaw supports Brave Search API as a `web_search` provider.
           webSearch: {
             apiKey: "BRAVE_API_KEY_HERE",
             mode: "web", // or "llm-context"
+            baseUrl: "https://api.search.brave.com", // optional proxy/base URL override
           },
         },
       },
@@ -52,6 +53,12 @@ Legacy `tools.web.search.apiKey` still loads through the compatibility shim, but
 - `web` (default): normal Brave web search with titles, URLs, and snippets
 - `llm-context`: Brave LLM Context API with pre-extracted text chunks and sources for grounding
 
+`webSearch.baseUrl` can point Brave requests at a trusted Brave-compatible proxy
+or gateway. OpenClaw appends `/res/v1/web/search` or `/res/v1/llm/context` to
+the configured base URL and keeps the base URL in the cache key. Public
+endpoints must use `https://`; `http://` is accepted only for trusted loopback
+or private-network proxy hosts.
+
 ## Tool parameters
 
 <ParamField path="query" type="string" required>
@@ -123,6 +130,8 @@ await web_search({
 - `llm-context` mode supports `freshness` and bounded `date_after` + `date_before` ranges. It does not support `ui_lang`; `date_before` without `date_after` is rejected because Brave requires custom freshness ranges to include both start and end dates.
 - `ui_lang` must include a region subtag like `en-US`.
 - Results are cached for 15 minutes by default (configurable via `cacheTtlMinutes`).
+- Custom `webSearch.baseUrl` values are included in Brave cache identity, so
+  proxy-specific responses do not collide.
 - Enable the `brave.http` diagnostics flag to log Brave request URLs/query params, response status/timing, and search-cache hit/miss/write events while troubleshooting. The flag never logs the API key or response bodies, but search queries can be sensitive.
 
 ## Related