Description

When following the official quickstart flow, entering an OpenShell sandbox via nemoclaw <sandbox> connect and running openclaw tui fails with a Missing gateway auth token error. The CLI explicitly instructs the user to run the TUI inside the sandbox, but the sandbox environment does not have the required gateway authentication token injected to establish the connection.

Expected Behavior

nemoclaw connect should automatically bridge or mount a scoped OPENCLAW_GATEWAY_TOKEN (or equivalent SecretRef) into the interactive shell so the OpenClaw TUI can securely authenticate with the gateway proxy out-of-the-box, without requiring manual token injection.

Actual Behavior

The TUI crashes immediately with the following output:

(node:1341) [UNDICI-EHPA] Warning: EnvHttpProxyAgent is experimental, expect them to change at any time.
(Use `node --trace-warnings ...` to show where the warning was created)

🦞 OpenClaw 2026.4.9 (0512059) — Your config is valid, your assumptions are not.

Error: Missing gateway auth token.
Fix: set OPENCLAW_GATEWAY_TOKEN/OPENCLAW_GATEWAY_PASSWORD, pass --token/--password,
or resolve the configured secret provider for this credential.

Reproduction Steps

1. Connect to an existing sandbox from the host shell (e.g., a sandbox named tony):

   nemoclaw tony connect

2. Once inside the sandbox, execute the instructed command:

   openclaw tui

Environment

• Host OS: Ubuntu
• Environment: OpenShell Linux Sandbox
• OpenClaw Version: 2026.4.9 (0512059)

Debug Output

Logs

Checklist

• I confirmed this bug is reproducible
• I searched existing issues and this is not a duplicate