} from "@openclaw/normalization-core/string-normalization";

import { normalizeEnvVarKey } from "../infra/host-env-security.js";

import { parseTcpPort } from "../infra/tcp-port.js";

import { VERSION } from "../version.js";

import { resolveLaunchAgentPlistPath } from "./launchd.js";

import { isBunRuntime, isNodeRuntime } from "./runtime-binary.js";

import {

gatewayRuntimeNodeVersionManager: "gateway-runtime-node-version-manager",

gatewayRuntimeNodeSystemMissing: "gateway-runtime-node-system-missing",

gatewayTokenDrift: "gateway-token-drift",

gatewayServiceVersionMismatch: "gateway-service-version-mismatch",

launchdKeepAlive: "launchd-keep-alive",

launchdRunAtLoad: "launchd-run-at-load",

systemdAfterNetworkOnline: "systemd-after-network-online",

return null;

}

function auditGatewayServiceVersion(command: GatewayServiceCommand, issues: ServiceConfigIssue[]) {

const serviceVersion = command?.environment?.OPENCLAW_SERVICE_VERSION?.trim();

if (!serviceVersion || serviceVersion === VERSION) {

return;

}

issues.push({

code: SERVICE_AUDIT_CODES.gatewayServiceVersionMismatch,

message: `Gateway service was installed by OpenClaw ${serviceVersion}; current CLI is ${VERSION}.`,

detail: command?.sourcePath,

level: "recommended",

});

}

export async function auditGatewayServiceConfig(params: {

env: Record<string, string | undefined>;

command: GatewayServiceCommand;

auditManagedServiceEnvironment(params.command, issues, params.expectedManagedServiceEnvKeys);

auditProxyServiceEnvironment(params.command, issues);

auditGatewayToken(params.command, issues, params.expectedGatewayToken);

auditGatewayServiceVersion(params.command, issues);

auditGatewayServicePath(params.command, issues, params.env, platform, params.expectedServicePath);

await auditGatewayRuntime(params.env, params.command, issues, platform);