fix: force default auth token 'openclaw-space-default' to match client injection

scripts/sync_hf.py

@@ -372,11 +372,14 @@ class OpenClawFullSync:
                 if isinstance(locs, list) and "/dev/null" in locs:
                     data["plugins"]["locations"] = [l for l in locs if l != "/dev/null"]
 
-            # Force full gateway config for HF Spaces (no auth, trust proxy)
+            # Force full gateway config for HF Spaces
+            # Note: Dockerfile injects "openclaw-space-default" token into Control UI,
+            # so we MUST set it here to match what the browser sends.
             data["gateway"] = {
                 "mode": "local",
                 "bind": "lan",
                 "port": 7860,
+                "auth": {"token": "openclaw-space-default"},
                 "trustedProxies": ["0.0.0.0/0"],
                 "controlUi": {
                     "allowInsecureAuth": True,
@@ -386,7 +389,7 @@ class OpenClawFullSync:
                     ]
                 }
             }
-            print("[SYNC] Set gateway config (no auth, trustedProxies=all)")
+            print("[SYNC] Set gateway config (auth=default, trustedProxies=all)")
 
             # Ensure agents defaults
             data.setdefault("agents", {}).setdefault("defaults", {}).setdefault("model", {})
@@ -416,8 +419,16 @@ class OpenClawFullSync:
             with open(config_path, "w") as f:
                 json.dump(data, f, indent=2)
             print("[SYNC] Config patched and saved.")
+            
+            # Verify write
+            with open(config_path, "r") as f:
+                verify_data = json.load(f)
+                gw = verify_data.get("gateway", {})
+                print(f"[SYNC] VERIFY GATEWAY CONFIG: mode={gw.get('mode')}, port={gw.get('port')}, auth={gw.get('auth')}, trustedProxies={gw.get('trustedProxies')}")
+
         except Exception as e:
             print(f"[SYNC] Failed to patch config: {e}")
+            traceback.print_exc()
 
     def _ensure_telegram_credentials(self):
         """Configure Telegram bot token and allowed users."""