// Gateway auth surface resolver.

// Centralizes credential precedence for probes and interactive clients.

import type { OpenClawConfig } from "../config/types.js";

import { hasConfiguredSecretInput } from "../config/types.secrets.js";

import { trimToUndefined, type ExplicitGatewayAuth } from "./credentials.js";

// Gateway auth-token source conflict detector.

// Warns when local env auth can diverge from managed gateway config auth.

import { normalizeOptionalString } from "@openclaw/normalization-core/string-coerce";

import type { OpenClawConfig } from "../config/types.openclaw.js";

import { normalizeSecretInputString, resolveSecretInputRef } from "../config/types.secrets.js";

}

if (params.env.OPENCLAW_SERVICE_KIND?.trim() === GATEWAY_SERVICE_KIND) {

// The managed gateway process intentionally uses its service env. The

// warning is for client shells where env precedence can surprise users.

return null;

}

// Gateway control-reply text classifier.

// Suppresses internal auto-reply tokens before they leak to chat surfaces.

import { isSilentReplyText, SILENT_REPLY_TOKEN } from "../auto-reply/tokens.js";

const SUPPRESSED_CONTROL_REPLY_TOKENS = [

if (token !== SILENT_REPLY_TOKEN && trimmed !== trimmed.toUpperCase()) {

return false;

}

// Bare fragments are common while streaming. Require a minimum prefix so

// ordinary words do not disappear just because they start like a token.

return normalized.length >= MIN_BARE_PREFIX_LENGTH_BY_TOKEN[token];

});

}

// Gateway legacy environment warning.

// Emits a one-shot notice for ignored pre-OpenClaw environment prefixes.

import { isVitestRuntimeEnv } from "../infra/env.js";

// Legacy env warnings are process-wide and intentionally one-shot so normal

const prefixCounts = new Map<LegacyEnvPrefix, number>();

for (const key of Object.keys(env)) {

// Count by prefix only; never print env names or values because some legacy

// names may still encode account/provider secrets.

const prefix = LEGACY_ENV_PREFIXES.find((candidate) => key.startsWith(candidate));

if (prefix) {

prefixCounts.set(prefix, (prefixCounts.get(prefix) ?? 0) + 1);

// Gateway known-weak credential guard.

// Rejects published placeholder auth values before the gateway starts.

import type { ResolvedGatewayAuth } from "./auth.js";

export const KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS = [

export function assertGatewayAuthNotKnownWeak(auth: ResolvedGatewayAuth): void {

if (auth.mode === "token") {

// Token/password checks stay separate because auth mode is exclusive and

// error text should name the credential the operator must rotate.

const token = auth.token?.trim() ?? "";

if (token && KNOWN_WEAK_GATEWAY_TOKENS.has(token)) {

throw new Error(

// Local embedded Gateway request context.

// Lets local agent paths reuse Gateway server methods without starting a server.

import { loadManifestModelCatalog } from "../agents/model-catalog.js";

import type { CliDeps } from "../cli/deps.types.js";

import type { OpenClawConfig } from "../config/types.openclaw.js";

// Gateway operator scope constants.

// Defines the closed set accepted by connection auth and method policy.

export const ADMIN_SCOPE = "operator.admin" as const;

export const READ_SCOPE = "operator.read" as const;

export const WRITE_SCOPE = "operator.write" as const;

// Gateway connection role policy.

// Separates node-role RPCs from operator RPCs before method scope checks.

import { isNodeRoleMethod } from "./method-scopes.js";

const GATEWAY_ROLES = ["operator", "node"] as const;