fix: use global variable for token injection (works in incognito iframe)

When HF Spaces embeds the Control UI in an iframe, Chrome incognito
blocks third-party localStorage access. The token injection via
localStorage silently fails, leaving the UI unable to authenticate.

Changes:
- Add source patch: storage.ts reads window.__OPENCLAW_AUTH_TOKEN__
as fallback when localStorage token is empty/unavailable
- inject-token.sh: set window.__OPENCLAW_AUTH_TOKEN__ global variable
in addition to localStorage (global always works)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

patches/hf-spaces-global-token-fallback.patch

@@ -0,0 +1,37 @@
+diff --git a/ui/src/ui/storage.ts b/ui/src/ui/storage.ts
+index b32e6c3..763a543 100644
+--- a/ui/src/ui/storage.ts
++++ b/ui/src/ui/storage.ts
+@@ -17,6 +17,14 @@ export type UiSettings = {
+   locale?: string;
+ };
+ 
++// Read an injected auth token from a global variable.
++// Used by HF Spaces where localStorage may be unavailable
++// (e.g. third-party iframe in incognito mode).
++function getInjectedToken(): string {
++  const w = globalThis as Record<string, unknown>;
++  return typeof w.__OPENCLAW_AUTH_TOKEN__ === "string" ? (w.__OPENCLAW_AUTH_TOKEN__ as string) : "";
++}
++
+ export function loadSettings(): UiSettings {
+   const defaultUrl = (() => {
+     const proto = location.protocol === "https:" ? "wss" : "ws";
+@@ -25,7 +33,7 @@ export function loadSettings(): UiSettings {
+ 
+   const defaults: UiSettings = {
+     gatewayUrl: defaultUrl,
+-    token: "",
++    token: getInjectedToken(),
+     sessionKey: "main",
+     lastActiveSessionKey: "main",
+     theme: "system",
+@@ -47,7 +55,7 @@ export function loadSettings(): UiSettings {
+         typeof parsed.gatewayUrl === "string" && parsed.gatewayUrl.trim()
+           ? parsed.gatewayUrl.trim()
+           : defaults.gatewayUrl,
+-      token: typeof parsed.token === "string" ? parsed.token : defaults.token,
++      token: typeof parsed.token === "string" && parsed.token ? parsed.token : defaults.token,
+       sessionKey:
+         typeof parsed.sessionKey === "string" && parsed.sessionKey.trim()
+           ? parsed.sessionKey.trim()

scripts/inject-token.sh

@@ -11,7 +11,9 @@ if [ ! -f "$INDEX_HTML" ]; then
 fi
 
 # Create the injection script
-INJECT_SCRIPT="<script>!function(){var K='openclaw.control.settings.v1';try{var s=JSON.parse(localStorage.getItem(K)||'{}');s.token='${TOKEN}';localStorage.setItem(K,JSON.stringify(s))}catch(e){}}()</script>"
+# 1. Set window.__OPENCLAW_AUTH_TOKEN__ — always works (even when localStorage is blocked in iframe/incognito)
+# 2. Also try localStorage as a fallback for the original UI code path
+INJECT_SCRIPT="<script>window.__OPENCLAW_AUTH_TOKEN__='${TOKEN}';try{var K='openclaw.control.settings.v1',s=JSON.parse(localStorage.getItem(K)||'{}');s.token='${TOKEN}';localStorage.setItem(K,JSON.stringify(s))}catch(e){}</script>"
 
 # Use python3 for reliable string replacement (avoids sed delimiter issues)
 python3 -c "
@@ -20,7 +22,7 @@ f = '${INDEX_HTML}'
 with open(f, 'r') as fh:
     html = fh.read()
 inject = '''${INJECT_SCRIPT}'''
-if '</head>' in html and inject not in html:
+if '</head>' in html and '__OPENCLAW_AUTH_TOKEN__' not in html:
     html = html.replace('</head>', inject + '</head>')
     with open(f, 'w') as fh:
         fh.write(html)