Generate gateway token during onboard

cmd/clawgo/cmd_onboard.go

@@ -44,6 +44,9 @@ func ensureConfigOnboard(configPath string, defaults *config.Config) (string, er
 	if defaults == nil {
 		return "", fmt.Errorf("defaults is nil")
 	}
+	if defaults.Gateway.Token == "" {
+		defaults.Gateway.Token = config.DefaultConfig().Gateway.Token
+	}
 
 	exists := true
 	if _, err := os.Stat(configPath); os.IsNotExist(err) {

cmd/clawgo/cmd_onboard_test.go

@@ -0,0 +1,31 @@
+package main
+
+import (
+	"testing"
+
+	"clawgo/pkg/config"
+)
+
+func TestEnsureConfigOnboardGeneratesGatewayToken(t *testing.T) {
+	t.Parallel()
+
+	configPath := t.TempDir() + "/config.json"
+	cfg := config.DefaultConfig()
+	cfg.Gateway.Token = ""
+
+	state, err := ensureConfigOnboard(configPath, cfg)
+	if err != nil {
+		t.Fatalf("ensureConfigOnboard failed: %v", err)
+	}
+	if state != "created" {
+		t.Fatalf("unexpected state: %s", state)
+	}
+
+	loaded, err := config.LoadConfig(configPath)
+	if err != nil {
+		t.Fatalf("load config failed: %v", err)
+	}
+	if loaded.Gateway.Token == "" {
+		t.Fatalf("expected gateway token to be generated")
+	}
+}