From e60b28fd1fd7104b85764f6790067da86beff230 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Sat, 7 Mar 2026 17:37:22 +0000
Subject: [PATCH] refactor(tui): dedupe gateway token resolution path

---
 src/tui/gateway-chat.ts | 23 +++++++----------------
 1 file changed, 7 insertions(+), 16 deletions(-)

diff --git a/src/tui/gateway-chat.ts b/src/tui/gateway-chat.ts
index a595cd7a70d..4001cba4008 100644
--- a/src/tui/gateway-chat.ts
+++ b/src/tui/gateway-chat.ts
@@ -369,7 +369,7 @@ export async function resolveGatewayConnection(
     };
   }
 
-  if (gatewayAuthMode === "token") {
+  const resolveToken = async () => {
     const localToken =
       explicitAuth.token || envToken
         ? { value: explicitAuth.token ?? envToken }
@@ -385,6 +385,11 @@ export async function resolveGatewayConnection(
         localToken.unresolvedRefReason ?? "Missing gateway auth token.",
       );
     }
+    return token;
+  };
+
+  if (gatewayAuthMode === "token") {
+    const token = await resolveToken();
     return {
       url,
       token,
@@ -418,21 +423,7 @@ export async function resolveGatewayConnection(
     };
   }
 
-  const localToken =
-    explicitAuth.token || envToken
-      ? { value: explicitAuth.token ?? envToken }
-      : await resolveConfiguredSecretInputString({
-          value: config.gateway?.auth?.token,
-          path: "gateway.auth.token",
-          env,
-          config,
-        });
-  const token = explicitAuth.token ?? envToken ?? localToken.value;
-  if (!token) {
-    throwGatewayAuthResolutionError(
-      localToken.unresolvedRefReason ?? "Missing gateway auth token.",
-    );
-  }
+  const token = await resolveToken();
   return {
     url,
     token,