Spaces:
Running
Running
Avoid protected browser config keys in generated OpenClaw config
Browse files
README.md
CHANGED
|
@@ -57,7 +57,6 @@ secrets:
|
|
| 57 |
- [π» Local Development](#-local-development)
|
| 58 |
- [π CLI Access](#-cli-access)
|
| 59 |
- [π» JupyterLab Terminal](#-jupyterlab-terminal)
|
| 60 |
-
- [π Merge Comparison](#-merge-comparison)
|
| 61 |
- [ποΈ Architecture](#-architecture)
|
| 62 |
- [π Staying Alive](#-staying-alive)
|
| 63 |
- [π Troubleshooting](#-troubleshooting)
|
|
@@ -375,15 +374,6 @@ When enabled, the terminal notebook root is `/home/node`, so you can inspect Hug
|
|
| 375 |
> [!IMPORTANT]
|
| 376 |
> No extra secret needed β `GATEWAY_TOKEN` is automatically reused as `JUPYTER_TOKEN`. Set a separate `JUPYTER_TOKEN` secret only if you want a different terminal credential.
|
| 377 |
|
| 378 |
-
## π Merge Comparison
|
| 379 |
-
|
| 380 |
-
This repository is a merge of two sources:
|
| 381 |
-
|
| 382 |
-
- `anurag162008/HuggingClaw`: OpenClaw gateway, dashboard, Cloudflare proxy/keep-alive, Telegram/WhatsApp helpers, backup sync, key rotation, docs, and security metadata.
|
| 383 |
-
- Hugging Face `SpacesExamples/jupyterlab` template: JupyterLab Docker behavior, token login UX, Hugging Face-branded login template, pinned Jupyter packages, and Git LFS defaults for large model/data artifacts.
|
| 384 |
-
|
| 385 |
-
The main merge-specific change is the single-port router: HF Spaces exposes `7861`, while the router keeps OpenClaw at `/app/` and JupyterLab at `/terminal/` without leaking internal redirects such as `http://127.0.0.1:8888/...`.
|
| 386 |
-
|
| 387 |
## ποΈ Architecture
|
| 388 |
|
| 389 |
HuggingClaw uses a multi-layered approach to ensure stability and persistence on Hugging Face's ephemeral infrastructure.
|
|
|
|
| 57 |
- [π» Local Development](#-local-development)
|
| 58 |
- [π CLI Access](#-cli-access)
|
| 59 |
- [π» JupyterLab Terminal](#-jupyterlab-terminal)
|
|
|
|
| 60 |
- [ποΈ Architecture](#-architecture)
|
| 61 |
- [π Staying Alive](#-staying-alive)
|
| 62 |
- [π Troubleshooting](#-troubleshooting)
|
|
|
|
| 374 |
> [!IMPORTANT]
|
| 375 |
> No extra secret needed β `GATEWAY_TOKEN` is automatically reused as `JUPYTER_TOKEN`. Set a separate `JUPYTER_TOKEN` secret only if you want a different terminal credential.
|
| 376 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 377 |
## ποΈ Architecture
|
| 378 |
|
| 379 |
HuggingClaw uses a multi-layered approach to ensure stability and persistence on Hugging Face's ephemeral infrastructure.
|
start.sh
CHANGED
|
@@ -598,15 +598,11 @@ CONFIG_JSON=$(jq \
|
|
| 598 |
|
| 599 |
if [ "$BROWSER_SHOULD_ENABLE" = "true" ]; then
|
| 600 |
CONFIG_JSON=$(jq \
|
| 601 |
-
--arg execPath "$BROWSER_EXECUTABLE_PATH" \
|
| 602 |
'.browser = {
|
| 603 |
"enabled": true,
|
| 604 |
"defaultProfile": "openclaw",
|
| 605 |
"headless": true,
|
| 606 |
"noSandbox": true,
|
| 607 |
-
"executablePath": $execPath,
|
| 608 |
-
"localLaunchTimeoutMs": 45000,
|
| 609 |
-
"localCdpReadyTimeoutMs": 30000,
|
| 610 |
"extraArgs": [
|
| 611 |
"--no-sandbox",
|
| 612 |
"--disable-setuid-sandbox",
|
|
|
|
| 598 |
|
| 599 |
if [ "$BROWSER_SHOULD_ENABLE" = "true" ]; then
|
| 600 |
CONFIG_JSON=$(jq \
|
|
|
|
| 601 |
'.browser = {
|
| 602 |
"enabled": true,
|
| 603 |
"defaultProfile": "openclaw",
|
| 604 |
"headless": true,
|
| 605 |
"noSandbox": true,
|
|
|
|
|
|
|
|
|
|
| 606 |
"extraArgs": [
|
| 607 |
"--no-sandbox",
|
| 608 |
"--disable-setuid-sandbox",
|