fix(onboard): warn that dashboard URL is printed only once

src/lib/agent-onboard.test.ts

@@ -76,14 +76,16 @@ describe("printDashboardUi — regression for #2078 (port 8642 is not a chat UI)
     expect(noteSpy).not.toHaveBeenCalled();
   });
 
-  it("keeps the existing tokenized URL wording for UI-kind agents", () => {
+  it("prints tokenized URL with save-now warning for UI-kind agents", () => {
     printDashboardUi("sandbox-y", "tok", uiAgent, {
       note: noteSpy,
       buildControlUiUrls: buildUrlsLoopback,
     });
 
     const output = logSpy.mock.calls.map((args) => String(args[0])).join("\n");
-    expect(output).toContain("Ficticious UI (tokenized URL; treat it like a password)");
+    expect(output).toContain(
+      "Ficticious UI (tokenized URL; treat it like a password; save it now - it will not be printed again)",
+    );
     expect(output).toContain("Port 19000 must be forwarded before opening this URL.");
     expect(output).toContain("http://127.0.0.1:19000/#token=tok");
   });

src/lib/agent-onboard.ts

@@ -252,7 +252,9 @@ export function printDashboardUi(
   }
 
   if (token) {
-    console.log(`  ${info.displayName} ${label} (tokenized URL; treat it like a password)`);
+    console.log(
+      `  ${info.displayName} ${label} (tokenized URL; treat it like a password; save it now - it will not be printed again)`,
+    );
     console.log(`  Port ${info.port} must be forwarded before opening this URL.`);
     for (const url of deps.buildControlUiUrls(token, info.port)) {
       console.log(`  ${url}`);

src/lib/onboard.ts

@@ -6270,7 +6270,9 @@ function printDashboard(sandboxName, model, provider, nimContainer = null, agent
       },
     });
   } else if (token) {
-    console.log("  OpenClaw UI (tokenized URL; treat it like a password)");
+    console.log(
+      "  OpenClaw UI (tokenized URL; treat it like a password; save it now - it will not be printed again)",
+    );
     for (const line of guidanceLines) {
       console.log(`  ${line}`);
     }