type SupportedGatewaySecretInputPath,

} from "./secret-input-paths.js";

export type GatewayAuthSecretInputPath = Extract<

type GatewayAuthSecretInputPath = Extract<

SupportedGatewaySecretInputPath,

"gateway.auth.token" | "gateway.auth.password"

>;

export type GatewayAuthSecretRefResolutionParams = {

type GatewayAuthSecretRefResolutionParams = {

cfg: OpenClawConfig;

env: NodeJS.ProcessEnv;

mode?: GatewayAuthConfig["mode"];

return hasConfiguredSecretInput(readGatewaySecretInputValue(cfg, path), cfg.secrets?.defaults);

}

export function shouldResolveGatewayAuthSecretRef(params: {

function shouldResolveGatewayAuthSecretRef(params: {

mode?: GatewayAuthConfig["mode"];

path: GatewayAuthSecretInputPath;

hasPasswordCandidate: boolean;

return isTokenPath ? !params.hasPasswordCandidate : !params.hasTokenCandidate;

}

export function shouldResolveGatewayTokenSecretRef(

function shouldResolveGatewayTokenSecretRef(

params: Omit<GatewayAuthSecretRefResolutionParams, "cfg" | "env">,

): boolean {

return shouldResolveGatewayAuthSecretRef({

});

}

export function shouldResolveGatewayPasswordSecretRef(

function shouldResolveGatewayPasswordSecretRef(

params: Omit<GatewayAuthSecretRefResolutionParams, "cfg" | "env">,

): boolean {

return shouldResolveGatewayAuthSecretRef({

});

}

export async function resolveGatewayAuthSecretRefValue(params: {

async function resolveGatewayAuthSecretRefValue(params: {

cfg: OpenClawConfig;

env: NodeJS.ProcessEnv;

path: GatewayAuthSecretInputPath;

});

}

export async function resolveGatewayAuthSecretRef(params: {

async function resolveGatewayAuthSecretRef(params: {

cfg: OpenClawConfig;

env: NodeJS.ProcessEnv;

path: GatewayAuthSecretInputPath;

return nextConfig;

}

export async function resolveGatewayPasswordSecretRef(params: {

async function resolveGatewayPasswordSecretRef(params: {

cfg: OpenClawConfig;

env: NodeJS.ProcessEnv;

mode?: GatewayAuthConfig["mode"];