Disable Control UI auth requirement for HF Spaces

start.sh

@@ -155,6 +155,8 @@ CONFIG_JSON=$(echo "$CONFIG_JSON" | jq ".agents.defaults.model = \"$LLM_MODEL\""
 # Control UI origin (allow HF Space URL for web UI access)
 if [ -n "$SPACE_HOST" ]; then
   CONFIG_JSON=$(echo "$CONFIG_JSON" | jq ".gateway.controlUi.allowedOrigins = [\"https://${SPACE_HOST}\"]")
+  # For HF Spaces: require token in query param or localStorage, but don't require explicit pairing
+  CONFIG_JSON=$(echo "$CONFIG_JSON" | jq ".gateway.controlUi.requireAuth = false")
 fi
 
 # Telegram (supports multiple user IDs, comma-separated)