afaict, OpenClaw use gemini-cli for oauth, then bypassing gemini-cli and do the call directly.