fix dockerfile, supervisord and app

Dockerfile

@@ -39,6 +39,9 @@ ENV OPENCLAW_GATEWAY_LOG_PATH=/tmp/openclaw-gateway.log
 ENV OPENCLAW_GATEWAY_ERR_LOG_PATH=/tmp/openclaw-gateway.err.log
 ENV OPENCLAW_DISABLE_BONJOUR=1
 ENV OPENCLAW_DISABLE_MDNS=1
+ENV OPENCLAW_ONBOARD_NONINTERACTIVE=1
+ENV OPENCLAW_CUSTOM_BASE_URL=https://researchengineering-agi.hf.space/v1
+ENV OPENCLAW_CUSTOM_MODEL_ID=deepseek-chat
 
 RUN mkdir -p /app/vault /app/.openclaw/state
 

app.py

@@ -32,6 +32,11 @@ OPENCLAW_STANDARD_UI_URL = os.getenv(
 OPENCLAW_STANDARD_UI_PUBLIC_URL = os.getenv("OPENCLAW_STANDARD_UI_PUBLIC_URL", "/openclaw/")
 OPENCLAW_GATEWAY_TOKEN = os.getenv("OPENCLAW_GATEWAY_TOKEN", "")
 OPENCLAW_STATE_CONFIG_PATH = Path(os.getenv("OPENCLAW_STATE_CONFIG_PATH", "/app/.openclaw/state/openclaw.json"))
+OPENCLAW_UI_QUERY_KEYS = [
+    k.strip()
+    for k in os.getenv("OPENCLAW_UI_QUERY_KEYS", "token,auth,access_token").split(",")
+    if k.strip()
+]
 GATEWAY_BOOT_LOG_PATH = Path(os.getenv("OPENCLAW_GATEWAY_LOG_PATH", "/tmp/openclaw-gateway.log"))
 GATEWAY_ERR_LOG_PATH = Path(os.getenv("OPENCLAW_GATEWAY_ERR_LOG_PATH", "/tmp/openclaw-gateway.err.log"))
 EXTERNAL_GATEWAY_MANAGED = os.getenv("EXTERNAL_GATEWAY_MANAGED", "0") == "1"
@@ -333,12 +338,12 @@ def llm_chat_completion(api_base: str, prompt: str, max_tokens: int, temperature
     return resp.json()
 
 
-def with_token(url: str, token: str) -> str:
+def with_token(url: str, token: str, query_key: str = "token") -> str:
     if not token:
         return url
     parts = urlsplit(url)
     query = dict(parse_qsl(parts.query, keep_blank_values=True))
-    query.setdefault("token", token)
+    query.setdefault(query_key, token)
     return urlunsplit((parts.scheme, parts.netloc, parts.path, urlencode(query), parts.fragment))
 
 
@@ -413,10 +418,11 @@ def resolve_ui_token() -> str:
     # 3) Validate token candidates against browser UI endpoint.
     for token in deduped:
         try:
-            probe_url = with_token(OPENCLAW_STANDARD_UI_URL, token)
-            resp = requests.get(probe_url, timeout=2, allow_redirects=True)
-            if resp.status_code < 400:
-                return token
+            for key in OPENCLAW_UI_QUERY_KEYS:
+                probe_url = with_token(OPENCLAW_STANDARD_UI_URL, token, key)
+                resp = requests.get(probe_url, timeout=2, allow_redirects=True)
+                if resp.status_code < 400:
+                    return token
         except Exception:
             continue
 
@@ -424,6 +430,20 @@ def resolve_ui_token() -> str:
     return resolve_gateway_token()
 
 
+def resolve_ui_query_key(token: str) -> str:
+    if not token:
+        return OPENCLAW_UI_QUERY_KEYS[0] if OPENCLAW_UI_QUERY_KEYS else "token"
+    for key in OPENCLAW_UI_QUERY_KEYS:
+        try:
+            probe_url = with_token(OPENCLAW_STANDARD_UI_URL, token, key)
+            resp = requests.get(probe_url, timeout=2, allow_redirects=True)
+            if resp.status_code < 400:
+                return key
+        except Exception:
+            continue
+    return OPENCLAW_UI_QUERY_KEYS[0] if OPENCLAW_UI_QUERY_KEYS else "token"
+
+
 def build_strategy_frame(data: pd.DataFrame, fast_period: int, slow_period: int) -> pd.DataFrame:
     frame = pd.DataFrame(index=data.index)
     frame["Close"] = data["Close"]
@@ -540,7 +560,8 @@ with std_ui_status_col:
     local_status = "Unavailable"
     proxy_status = "Unavailable"
     gateway_token = resolve_ui_token()
-    std_ui_url = with_token(OPENCLAW_STANDARD_UI_URL, gateway_token)
+    gateway_query_key = resolve_ui_query_key(gateway_token)
+    std_ui_url = with_token(OPENCLAW_STANDARD_UI_URL, gateway_token, gateway_query_key)
     try:
         ui_resp = requests.get(std_ui_url, timeout=2, allow_redirects=True)
         local_ok = ui_resp.status_code < 500
@@ -571,7 +592,7 @@ with std_ui_status_col:
         st.caption(f"Public URL: {OPENCLAW_STANDARD_UI_PUBLIC_URL}")
 
 with std_ui_embed_col:
-    public_ui_url = with_token(OPENCLAW_STANDARD_UI_PUBLIC_URL, gateway_token)
+    public_ui_url = with_token(OPENCLAW_STANDARD_UI_PUBLIC_URL, gateway_token, gateway_query_key)
     if public_ui_url and proxy_ok:
         st.caption(f"Embedded URL: {mask_token_in_url(public_ui_url)}")
         components.iframe(public_ui_url, height=560, scrolling=True)

supervisord.conf

@@ -5,7 +5,7 @@ pidfile=/tmp/supervisord.pid
 user=root
 
 [program:openclaw]
-command=/bin/sh -lc "python /app/scripts/bootstrap_gateway_token.py && openclaw gateway run --port 18789 --allow-unconfigured --dev"
+command=/bin/sh -lc "AUTH_FILE=/app/.openclaw/state/agents/dev/agent/auth-profiles.json; if [ \"${OPENCLAW_ONBOARD_NONINTERACTIVE:-1}\" = \"1\" ] && [ ! -s \"$AUTH_FILE\" ]; then echo '[onboard] running non-interactive setup'; openclaw onboard --non-interactive --mode local --auth-choice custom-api-key --custom-base-url \"${OPENCLAW_CUSTOM_BASE_URL}\" --custom-model-id \"${OPENCLAW_CUSTOM_MODEL_ID}\" --gateway-port 18789 --gateway-bind loopback --skip-skills --accept-risk --secret-input-mode plaintext || true; fi; python /app/scripts/bootstrap_gateway_token.py; exec openclaw gateway run --port 18789 --allow-unconfigured --dev"
 autorestart=true
 startsecs=5
 startretries=20