fix gateway token

app.py

@@ -558,12 +558,15 @@ with std_ui_status_col:
     except Exception:
         proxy_ok = False
 
-    st.markdown(f"Gateway Local ({std_ui_url}): {'🟢' if local_ok else '🔴'} {local_status}")
+    st.markdown(
+        f"Gateway Local ({mask_token_in_url(std_ui_url)}): "
+        f"{'🟢' if local_ok else '🔴'} {local_status}"
+    )
     st.markdown(
         f"Gateway Via Proxy ({OPENCLAW_PROXY_LOCAL_URL}): "
         f"{'🟢' if proxy_ok else '🔴'} {proxy_status}"
     )
-    st.caption(f"URL: {std_ui_url}")
+    st.caption(f"URL: {mask_token_in_url(std_ui_url)}")
     if OPENCLAW_STANDARD_UI_PUBLIC_URL:
         st.caption(f"Public URL: {OPENCLAW_STANDARD_UI_PUBLIC_URL}")
 

scripts/bootstrap_gateway_token.py

@@ -0,0 +1,36 @@
+import json
+import os
+from pathlib import Path
+
+
+def main() -> int:
+    token = os.getenv("OPENCLAW_GATEWAY_TOKEN", "").strip()
+    if not token:
+        return 0
+
+    state_path = Path("/app/.openclaw/state/openclaw.json")
+    state_path.parent.mkdir(parents=True, exist_ok=True)
+
+    data = {}
+    if state_path.exists():
+        try:
+            data = json.loads(state_path.read_text(encoding="utf-8"))
+        except Exception:
+            data = {}
+
+    gateway = data.get("gateway", {})
+    if not isinstance(gateway, dict):
+        gateway = {}
+    auth = gateway.get("auth", {})
+    if not isinstance(auth, dict):
+        auth = {}
+    auth["token"] = token
+    gateway["auth"] = auth
+    data["gateway"] = gateway
+
+    state_path.write_text(json.dumps(data, indent=2) + "\n", encoding="utf-8")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

supervisord.conf

@@ -5,7 +5,7 @@ pidfile=/tmp/supervisord.pid
 user=root
 
 [program:openclaw]
-command=/bin/sh -lc "openclaw gateway run --port 18789 --allow-unconfigured --dev"
+command=/bin/sh -lc "python /app/scripts/bootstrap_gateway_token.py && openclaw gateway run --port 18789 --allow-unconfigured --dev"
 autorestart=true
 startsecs=5
 startretries=20