feat: migrate OPENCLAW_VERSION to build-time argument and hardcode health server ports

.env.example

@@ -164,13 +164,6 @@ SYNC_INTERVAL=600
 # Webhooks: Standard POST notifications for lifecycle events
 # WEBHOOK_URL=https://your-webhook-endpoint.com/log
 
-# ── OPTIONAL: Advanced ──
-# Pin OpenClaw version. Default: latest
-OPENCLAW_VERSION=latest
-
-# Health endpoint port. Default: 7861
-HEALTH_PORT=7861
-
 # Trusted proxies (comma-separated IPs)
 # Fixes "Proxy headers detected from untrusted address" behind reverse proxies
 # Only set if you see pairing/auth errors. Find IPs in Space logs (remote=x.x.x.x)

Dockerfile

@@ -4,10 +4,12 @@
 # Multi-stage build: uses pre-built OpenClaw image for fast builds
 
 # ── Stage 1: Pull pre-built OpenClaw ──
-FROM ghcr.io/openclaw/openclaw:latest AS openclaw
+ARG OPENCLAW_VERSION=latest
+FROM ghcr.io/openclaw/openclaw:${OPENCLAW_VERSION} AS openclaw
 
 # ── Stage 2: Runtime ──
 FROM node:22-slim
+ARG OPENCLAW_VERSION=latest
 
 # Install system dependencies
 RUN apt-get update && apt-get install -y \
@@ -30,7 +32,7 @@ COPY --from=openclaw --chown=1000:1000 /app /home/node/.openclaw/openclaw-app
 
 # Symlink openclaw CLI so it's available globally
 RUN ln -s /home/node/.openclaw/openclaw-app/openclaw.mjs /usr/local/bin/openclaw 2>/dev/null || \
-    npm install -g openclaw@latest
+    npm install -g openclaw@${OPENCLAW_VERSION}
 
 # Copy HuggingClaw files
 COPY --chown=1000:1000 dns-fix.js /opt/dns-fix.js
@@ -45,6 +47,7 @@ RUN chmod +x /home/node/app/start.sh /home/node/app/keep-alive.sh
 USER node
 
 ENV HOME=/home/node \
+    OPENCLAW_VERSION=${OPENCLAW_VERSION} \
     PATH=/home/node/.local/bin:/usr/local/bin:$PATH \
     NODE_OPTIONS="--require /opt/dns-fix.js"
 

README.md

@@ -75,6 +75,8 @@ Navigate to your new Space's **Settings**, scroll down to the **Variables and se
 > [!TIP]
 > HuggingClaw is completely flexible! You only need these three secrets to get started. You can set other secrets later.
 
+Optional: if you want to pin a specific OpenClaw release instead of `latest`, add `OPENCLAW_VERSION` under **Variables** in your Space settings. For Docker Spaces, HF passes Variables as build args during image build, so this should be a Variable, not a Secret.
+
 ### Step 3: Deploy & Run
 
 That's it! The Space will build the container and start up automatically. You can monitor the build process in the **Logs** tab.
@@ -126,7 +128,7 @@ Get notified when your Space restarts or if a backup fails:
 
 ## ⚙️ Full Configuration Reference
 
-See `.env.example` for complete settings. Key environment variables:
+See `.env.example` for runtime settings. Key configuration values:
 
 ### Core
 
@@ -165,8 +167,7 @@ See `.env.example` for complete settings. Key environment variables:
 
 | Variable           | Default  | Description                         |
 |--------------------|----------|-------------------------------------|
-| `OPENCLAW_VERSION` | `latest` | Pin a specific OpenClaw version     |
-| `HEALTH_PORT`      | `7861`   | Public dashboard / proxy port on HF Spaces |
+| `OPENCLAW_VERSION` | `latest` | Build-time pin for the OpenClaw image tag |
 
 ## 🤖 LLM Providers
 
@@ -226,7 +227,7 @@ cp .env.example .env
 **With Docker:**
 
 ```bash
-docker build -t huggingclaw .
+docker build --build-arg OPENCLAW_VERSION=latest -t huggingclaw .
 docker run -p 7861:7861 --env-file .env huggingclaw
 ```
 
@@ -289,7 +290,7 @@ HuggingClaw keeps the Space awake without external cron tools:
 - **Space keeps sleeping:** Check logs for `Keep-alive` messages. Ensure `KEEP_ALIVE_INTERVAL` isn’t set to `0`.
 - **Auth errors / proxy:** If you see reverse-proxy auth errors, add the logged IPs under `TRUSTED_PROXIES` (from logs `remote=x.x.x.x`).
 - **UI blocked (CORS):** Set `ALLOWED_ORIGINS=https://your-space-name.hf.space`.
-- **Version mismatches:** You can pin a specific OpenClaw version via the `OPENCLAW_VERSION` secret.
+- **Version mismatches:** Pin a specific OpenClaw build with the `OPENCLAW_VERSION` Variable in HF Spaces, or `--build-arg OPENCLAW_VERSION=...` locally.
 
 ## 📚 Links
 

health-server.js

@@ -3,8 +3,8 @@ const http = require("http");
 const fs = require("fs");
 const net = require("net");
 
-const PORT = Number(process.env.HEALTH_PORT || 7861);
-const GATEWAY_PORT = Number(process.env.GATEWAY_PORT || 7860);
+const PORT = 7861;
+const GATEWAY_PORT = 7860;
 const GATEWAY_HOST = "127.0.0.1";
 const startTime = Date.now();
 const LLM_MODEL = process.env.LLM_MODEL || "Not Set";

start.sh

@@ -251,6 +251,7 @@ echo ""
 echo "  ┌──────────────────────────────────────────┐"
 echo "  │  📋 Configuration Summary                │"
 echo "  ├──────────────────────────────────────────┤"
+printf "  │  %-40s │\n" "OpenClaw: $OPENCLAW_VERSION"
 printf "  │  %-40s │\n" "Model: $LLM_MODEL"
 if [ -n "$TELEGRAM_BOT_TOKEN" ]; then
 printf "  │  %-40s │\n" "Telegram: ✅ enabled"