Merge pull request #88 from anurag008w/edit

Enhance JupyterLab integration and improve environment handling

.env.example

@@ -247,6 +247,10 @@ LLM_API_KEY_FALLBACK_ENABLED=true
 # Generate: openssl rand -hex 32
 GATEWAY_TOKEN=your_gateway_token_here
 
+# [OPTIONAL] JupyterLab terminal token for /terminal/
+# Defaults to "huggingface" if unset. Set a strong token for private deployments.
+JUPYTER_TOKEN=huggingface
+
 # (Optional) Password auth — simpler alternative to token for casual users
 # If set, users can log in with this password instead of the token
 # OPENCLAW_PASSWORD=your_password_here

.gitattributes

@@ -0,0 +1,34 @@
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.arrow filter=lfs diff=lfs merge=lfs -text
+*.bin filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.ckpt filter=lfs diff=lfs merge=lfs -text
+*.ftz filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.h5 filter=lfs diff=lfs merge=lfs -text
+*.joblib filter=lfs diff=lfs merge=lfs -text
+*.lfs.* filter=lfs diff=lfs merge=lfs -text
+*.mlmodel filter=lfs diff=lfs merge=lfs -text
+*.model filter=lfs diff=lfs merge=lfs -text
+*.msgpack filter=lfs diff=lfs merge=lfs -text
+*.npy filter=lfs diff=lfs merge=lfs -text
+*.npz filter=lfs diff=lfs merge=lfs -text
+*.onnx filter=lfs diff=lfs merge=lfs -text
+*.ot filter=lfs diff=lfs merge=lfs -text
+*.parquet filter=lfs diff=lfs merge=lfs -text
+*.pb filter=lfs diff=lfs merge=lfs -text
+*.pickle filter=lfs diff=lfs merge=lfs -text
+*.pkl filter=lfs diff=lfs merge=lfs -text
+*.pt filter=lfs diff=lfs merge=lfs -text
+*.pth filter=lfs diff=lfs merge=lfs -text
+*.rar filter=lfs diff=lfs merge=lfs -text
+*.safetensors filter=lfs diff=lfs merge=lfs -text
+saved_model/**/* filter=lfs diff=lfs merge=lfs -text
+*.tar.* filter=lfs diff=lfs merge=lfs -text
+*.tflite filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.wasm filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text
+*tfevents* filter=lfs diff=lfs merge=lfs -text

.gitignore

@@ -1,21 +1,20 @@
-# personal workflows
-.github/workflows/
-.git*
 # env/secrets
 .env
 .env.*
+!.env.example
 *.pem
 *.key
 
 # node
 node_modules/
+gui/node_modules/
 npm-debug.log*
 yarn-debug.log*
 pnpm-debug.log*
 
 # python
 __pycache__/
-*.pyc
+*.py[cod]
 .venv/
 venv/
 
@@ -33,12 +32,10 @@ build/
 .cache/
 
 # temp
+.tmp/
 tmp/
 temp/
 
 # os junk
 .DS_Store
 Thumbs.db
-
-# gitignore itself
-.gitignore

CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.6.0] - 2026-05-14
+
+### Added
+
+- **Merged JupyterLab terminal** — added the Hugging Face JupyterLab template login page and `/terminal/` routing alongside the HuggingClaw dashboard and `/app/` OpenClaw Control UI.
+- **HF template parity files** — restored Git LFS defaults and project metadata/docs that were missing from the merged repository.
+
+### Fixed
+
+- **HF Spaces subpath routing** — normalized internal redirects and WebSocket forwarding so `/app/` and `/terminal/` stay mounted behind the single public Spaces port.
+- **Startup log noise** — removed the stale disabled `plugins.entries.acpx` config entry, switched Jupyter token/cookie options to `IdentityProvider.*`, and printed `/app/` with the trailing slash.
+- **Private Space navigation** — dashboard buttons now stay in-frame and startup logs print relative routes, avoiding raw `.hf.space` links that can show Hugging Face's outer 404 page on private Spaces.
+
 ## [1.5.0] - 2026-05-13
 
 ### Added

CONTRIBUTING.md

@@ -17,7 +17,7 @@ Thanks for your interest in contributing! 🦞
 1. Fork the repo
 2. Create a feature branch: `git checkout -b feature/my-feature`
 3. Make your changes
-4. Test locally with Docker: `docker build -t huggingclaw . && docker run -p 7860:7860 --env-file .env huggingclaw`
+4. Test locally with Docker: `docker build -t huggingclaw . && docker run -p 7861:7861 --env-file .env huggingclaw`
 5. Commit with a clear message
 6. Push and open a PR
 
@@ -27,6 +27,7 @@ Thanks for your interest in contributing! 🦞
 - No unnecessary dependencies
 
 ### Testing
+- If touching routing or Docker startup, verify both `/app/` (OpenClaw UI) and `/terminal/` (JupyterLab terminal).
 - Test with at least one LLM provider (Anthropic, OpenAI, or Google)
 - Test with and without Telegram enabled
 - Test with and without workspace backup enabled
@@ -38,7 +39,7 @@ Thanks for your interest in contributing! 🦞
 cp .env.example .env
 # Fill in your values
 docker build -t huggingclaw .
-docker run -p 7860:7860 --env-file .env huggingclaw
+docker run -p 7861:7861 --env-file .env huggingclaw
 ```
 
 ## Questions?

Dockerfile

@@ -1,7 +1,11 @@
 # ════════════════════════════════════════════════════════════════
-# 🦞 HuggingClaw — OpenClaw Gateway for HuggingFace Spaces
+# 🦞 HuggingClaw + 💻 JupyterLab Terminal
+# ════════════════════════════════════════════════════════════════
+# Port 7861 (exposed): Dashboard + reverse proxy
+#   /          → HuggingClaw dashboard
+#   /app/      → OpenClaw gateway (internal :7860)
+#   /terminal/ → JupyterLab terminal (internal :8888)
 # ════════════════════════════════════════════════════════════════
-# Multi-stage build: uses pre-built OpenClaw image for fast builds
 
 # ── Stage 1: Pull pre-built OpenClaw ──
 ARG OPENCLAW_VERSION=latest
@@ -10,8 +14,10 @@ FROM ghcr.io/openclaw/openclaw:${OPENCLAW_VERSION} AS openclaw
 # ── Stage 2: Runtime ──
 FROM node:22-slim
 ARG OPENCLAW_VERSION=latest
+ARG DEV_MODE=false
+ENV DEV_MODE=${DEV_MODE}
 
-# Install system dependencies
+# Install system dependencies (+ optional JupyterLab deps in DEV_MODE)
 RUN apt-get update && apt-get install -y \
     git \
     sudo \
@@ -45,9 +51,19 @@ RUN apt-get update && apt-get install -y \
     pip3 install --no-cache-dir --break-system-packages huggingface_hub && \
     rm -rf /var/lib/apt/lists/*
 
+# Install JupyterLab only when DEV_MODE is enabled (build-time)
+# This avoids installing large packages when terminal is not needed
+RUN if [ "${DEV_MODE}" = "true" ] || [ "${DEV_MODE}" = "1" ] || [ "${DEV_MODE}" = "yes" ] || [ "${DEV_MODE}" = "on" ]; then \
+      pip3 install --no-cache-dir --break-system-packages \
+        jupyterlab==4.5.7 \
+        tornado==6.5.5 \
+        ipywidgets==8.1.8 && \
+      # Copy login template into jupyter_server templates dir
+      python3 -c "from pathlib import Path; import shutil, jupyter_server; d=Path(jupyter_server.__file__).parent/'templates'; d.mkdir(parents=True,exist_ok=True); shutil.copyfile('/home/node/app/login.html', d/'login.html')" || true; \
+    fi
+
 # Reuse existing node user (UID 1000). Allow passwordless package-manager
-# commands only so runtime apt installs can be replayed after HF Space restarts
-# without granting unrestricted sudo access.
+# commands only so runtime apt installs can be replayed after HF Space restarts.
 RUN mkdir -p /home/node/app /home/node/.openclaw && \
     chown -R 1000:1000 /home/node && \
     printf '%s\n' \
@@ -60,8 +76,7 @@ RUN mkdir -p /home/node/app /home/node/.openclaw && \
 # Copy pre-built OpenClaw (skips npm install entirely — much faster!)
 COPY --from=openclaw --chown=1000:1000 /app /home/node/.openclaw/openclaw-app
 
-# Add Playwright in an isolated sidecar node_modules so we do not mutate the
-# bundled OpenClaw app dependency tree.
+# Add Playwright in an isolated sidecar node_modules
 RUN mkdir -p /home/node/browser-deps && \
     cd /home/node/browser-deps && \
     npm init -y && \
@@ -75,14 +90,23 @@ RUN ln -s /home/node/.openclaw/openclaw-app/openclaw.mjs /usr/local/bin/openclaw
 COPY --chown=1000:1000 cloudflare-proxy.js /opt/cloudflare-proxy.js
 COPY --chown=1000:1000 cloudflare-proxy-setup.py /home/node/app/cloudflare-proxy-setup.py
 COPY --chown=1000:1000 health-server.js /home/node/app/health-server.js
+COPY --chown=1000:1000 login.html /home/node/app/login.html
 COPY --chown=1000:1000 iframe-fix.cjs /home/node/app/iframe-fix.cjs
 COPY --chown=1000:1000 start.sh /home/node/app/start.sh
 COPY --chown=1000:1000 wa-guardian.js /home/node/app/wa-guardian.js
 COPY --chown=1000:1000 cloudflare-keepalive-setup.py /home/node/app/cloudflare-keepalive-setup.py
 COPY --chown=1000:1000 openclaw-sync.py /home/node/app/openclaw-sync.py
-RUN chmod +x /home/node/app/start.sh /home/node/app/cloudflare-proxy-setup.py /home/node/app/cloudflare-keepalive-setup.py /home/node/app/openclaw-sync.py
 COPY --chown=1000:1000 multi-provider-key-rotator.cjs /home/node/app/multi-provider-key-rotator.cjs
-RUN chmod +x /home/node/app/start.sh /home/node/app/cloudflare-proxy-setup.py /home/node/app/cloudflare-keepalive-setup.py /home/node/app/openclaw-sync.py /home/node/app/multi-provider-key-rotator.cjs
+COPY --chown=1000:1000 env-builder.html /home/node/app/env-builder.html
+COPY --chown=1000:1000 env-builder.js /home/node/app/env-builder.js
+COPY --chown=1000:1000 jupyter-devdata-sync.py /home/node/app/jupyter-devdata-sync.py
+# login.html template is now copied inside the DEV_MODE install block above
+RUN chmod +x /home/node/app/start.sh \
+              /home/node/app/cloudflare-proxy-setup.py \
+              /home/node/app/cloudflare-keepalive-setup.py \
+              /home/node/app/openclaw-sync.py \
+              /home/node/app/jupyter-devdata-sync.py \
+              /home/node/app/multi-provider-key-rotator.cjs
 
 USER node
 
@@ -94,10 +118,9 @@ ENV HOME=/home/node \
 
 WORKDIR /home/node/app
 
+# 7861 = public entrypoint (dashboard + proxy for both OpenClaw and JupyterLab)
 EXPOSE 7861
 
-# health-server.js exposes /health on 7861 and proxies to the gateway on 7860.
-# 90s start period covers OpenClaw's plugin install + gateway boot on cold start.
 HEALTHCHECK --interval=30s --timeout=5s --start-period=90s \
   CMD curl -fsS http://localhost:7861/health || exit 1
 

README.md

@@ -1,12 +1,17 @@
 ---
 title: HuggingClaw
 emoji: 🦞
-colorFrom: blue
-colorTo: purple
+colorFrom: red
+colorTo: blue
 sdk: docker
 app_port: 7861
-pinned: true
+pinned: false
 license: mit
+tags:
+  - openclaw
+  - jupyterlab
+  - terminal
+  - llm-gateway
 secrets:
   - name: LLM_API_KEY
     description: "Your LLM provider API key (e.g. Anthropic, OpenAI, Google, OpenRouter)."
@@ -14,6 +19,8 @@ secrets:
     description: "Model ID to use, e.g. google/gemini-2.5-flash or openai/gpt-4o."
   - name: GATEWAY_TOKEN
     description: "Strong token to secure your OpenClaw Control UI (generate: openssl rand -hex 32)."
+  - name: JUPYTER_TOKEN
+    description: "Optional strong token for the JupyterLab terminal at /terminal/ (defaults to huggingface)."
   - name: CLOUDFLARE_WORKERS_TOKEN
     description: "Cloudflare API token — auto-creates a Worker proxy and KeepAlive monitor."
   - name: TELEGRAM_ALLOWED_USERS
@@ -32,7 +39,7 @@ secrets:
 [![HF Space](https://img.shields.io/badge/🤗%20HuggingFace-Space-blue?style=flat-square)](https://huggingface.co/spaces)
 [![OpenClaw](https://img.shields.io/badge/OpenClaw-Gateway-red?style=flat-square)](https://github.com/openclaw/openclaw)
 
-**Your always-on AI assistant — free, no server needed.** HuggingClaw runs [OpenClaw](https://openclaw.ai) on HuggingFace Spaces, giving you a 24/7 AI chat assistant on Telegram and WhatsApp. It works with *any* large language model (LLM) – Claude, ChatGPT, Gemini, etc. – and even supports custom models via [OpenRouter](https://openrouter.ai). Deploy in minutes on the free HF Spaces tier (2 vCPU, 16GB RAM, 50GB) with automatic workspace backup to a HuggingFace Dataset so your chat history and settings persist across restarts.
+**Your always-on AI assistant — free, no server needed.** This merged Space runs [OpenClaw](https://openclaw.ai) plus a Hugging Face-style JupyterLab terminal on one HF Spaces port, giving you a 24/7 AI chat assistant on Telegram and WhatsApp. It works with *any* large language model (LLM) – Claude, ChatGPT, Gemini, etc. – and even supports custom models via [OpenRouter](https://openrouter.ai). Deploy in minutes on the free HF Spaces tier (2 vCPU, 16GB RAM, 50GB) with automatic workspace backup to a HuggingFace Dataset so your chat history and settings persist across restarts.
 
 ## Table of Contents
 
@@ -49,6 +56,8 @@ secrets:
 - [🤖 LLM Providers](#-llm-providers)
 - [💻 Local Development](#-local-development)
 - [🔗 CLI Access](#-cli-access)
+- [💻 JupyterLab Terminal](#-jupyterlab-terminal)
+- [🔍 Merge Comparison](#-merge-comparison)
 - [🏗️ Architecture](#-architecture)
 - [💓 Staying Alive](#-staying-alive)
 - [🐛 Troubleshooting](#-troubleshooting)
@@ -69,6 +78,7 @@ secrets:
 - 📊 **Visual Dashboard:** Beautiful Web UI to monitor uptime, sync status, and active models.
 - 🔔 **Webhooks:** Get notified on restarts or backup failures via standard webhooks.
 - 🔐 **Flexible Auth:** Secure the Control UI with either a gateway token or password.
+- 💻 **Optional Dev Terminal:** JupyterLab is available at `/terminal/` only when `DEV_MODE=true` (disabled by default).
 - 🏠 **100% HF-Native:** Runs entirely on HuggingFace’s free infrastructure (2 vCPU, 16GB RAM).
 
 ## 🎥 Video Tutorial
@@ -94,7 +104,7 @@ Navigate to your new Space's **Settings**, scroll down to the **Variables and se
 > [!TIP]
 > HuggingClaw is completely flexible! You only need these three secrets to get started. You can set other secrets later.
 
-Optional: if you want to pin a specific OpenClaw release instead of `latest`, add `OPENCLAW_VERSION` under **Variables** in your Space settings. For Docker Spaces, HF passes Variables as build args during image build, so this should be a Variable, not a Secret.
+Optional: set `DEV_MODE=true` (Variable) to enable JupyterLab support and install Jupyter dependencies at build time. You can also set `JUPYTER_TOKEN` as a Secret to replace the default terminal token (`huggingface`). If you want to pin a specific OpenClaw release instead of `latest`, add `OPENCLAW_VERSION` under **Variables** in your Space settings. For Docker Spaces, HF passes Variables as build args during image build, so these should be Variables, not Secrets (except tokens).
 
 ### Step 3: Deploy & Run
 
@@ -348,6 +358,30 @@ openclaw channels login --gateway https://YOUR_SPACE_NAME.hf.space
 # When prompted, enter your GATEWAY_TOKEN
 ```
 
+## 💻 JupyterLab Terminal
+
+The merged Space includes the Hugging Face JupyterLab template behavior inside the same container:
+
+| Path | Service | Internal Port | Notes |
+| :--- | :--- | :--- | :--- |
+| `/` | HuggingClaw dashboard | `7861` | Public HF Spaces entrypoint |
+| `/app/` | OpenClaw Control UI | `7860` | Mounted behind the local reverse proxy |
+| `/terminal/` | JupyterLab terminal (DEV_MODE only) | `8888` | Available only when `DEV_MODE=true`; token login uses `JUPYTER_TOKEN` (default `huggingface`) |
+
+When enabled, the terminal notebook root is `/home/node`, so you can inspect HuggingClaw files, logs, workspace state, and runtime scripts from the browser.
+
+> [!IMPORTANT]
+> For real deployments, set a strong `JUPYTER_TOKEN` secret. The `huggingface` default exists only to match the duplicateable Hugging Face JupyterLab template.
+
+## 🔍 Merge Comparison
+
+This repository is a merge of two sources:
+
+- `anurag162008/HuggingClaw`: OpenClaw gateway, dashboard, Cloudflare proxy/keep-alive, Telegram/WhatsApp helpers, backup sync, key rotation, docs, and security metadata.
+- Hugging Face `SpacesExamples/jupyterlab` template: JupyterLab Docker behavior, token login UX, Hugging Face-branded login template, pinned Jupyter packages, and Git LFS defaults for large model/data artifacts.
+
+The main merge-specific change is the single-port router: HF Spaces exposes `7861`, while the router keeps OpenClaw at `/app/` and JupyterLab at `/terminal/` without leaking internal redirects such as `http://127.0.0.1:8888/...`.
+
 ## 🏗️ Architecture
 
 HuggingClaw uses a multi-layered approach to ensure stability and persistence on Hugging Face's ephemeral infrastructure.
@@ -355,8 +389,9 @@ HuggingClaw uses a multi-layered approach to ensure stability and persistence on
 <details>
 <summary><b>Click to view technical details</b></summary>
 
-- **Dashboard (`/`)**: Management, monitoring, and keep-alive tools.
-- **Control UI (`/gateway`)**: Secure interface for managing agents and channels.
+- **Dashboard (`/`)**: Management, monitoring, and keep-alive tools (terminal controls appear only in DEV mode).
+- **Control UI (`/app/`)**: Secure interface for managing agents and channels, proxied to the OpenClaw gateway on internal port `7860`.
+- **JupyterLab Terminal (`/terminal/`)**: Browser terminal/notebook server on internal port `8888` (DEV mode only).
 - **Health Check (`/health`)**: Endpoint for uptime monitoring and readiness probes.
 - **Sync Engine**: Python background process managing HF Dataset persistence.
 - **Transparent Proxy**: Interceptor for requests to blocked domains (Telegram, etc.).
@@ -367,12 +402,15 @@ HuggingClaw uses a multi-layered approach to ensure stability and persistence on
 2. Resolve backup namespace and restore workspace from HF Dataset.
 3. Generate `openclaw.json` configuration.
 4. Launch background tasks (auto-sync, channel helpers).
-5. Start OpenClaw gateway and listen for connections.
+5. Start the local dashboard/reverse proxy and OpenClaw gateway (JupyterLab starts only when `DEV_MODE=true`).
 
 </details>
 
 ## 🐛 Troubleshooting
 
+- **Private Space 404:** If your Space is private, raw `https://<space>.hf.space/app/` or `/terminal/` links can show Hugging Face's own 404 page when opened outside the embedded App session. Open the Space's **App** tab first, then use the in-page dashboard buttons for `/app/` and `/terminal/`.
+- **Terminal 404 or redirect loop:** Open `/terminal/` with the trailing slash from the dashboard/App tab, rebuild after Dockerfile changes, and confirm `JUPYTER_TOKEN` is set correctly if you changed the default.
+- **Control UI 404:** Open `/app/` with the trailing slash from the dashboard/App tab; the reverse proxy rewrites backend redirects into this mount path.
 - **Missing secrets:** Ensure `LLM_API_KEY`, `LLM_MODEL`, and `GATEWAY_TOKEN` are set in your Space **Settings → Secrets**.
 - **Telegram bot issues:** Verify your `TELEGRAM_BOT_TOKEN`. Check Space logs for lines like `📱 Enabling Telegram`.
 - **Backup restore failing:** Make sure `HF_TOKEN` is valid and has write access to your HF account dataset. Set `HF_USERNAME` only if auto-detection is not available in your environment.
@@ -397,9 +435,9 @@ Similar projects by [@somratpro](https://github.com/somratpro) — all free, one
 
 ## 📚 Links
 
-- [OpenClaw Docs](https://docs.openclaw.ai)  
-- [OpenClaw GitHub](https://github.com/openclaw/openclaw)  
-- [HuggingFace Spaces Docs](https://huggingface.co/docs/hub/spaces)  
+- [OpenClaw Docs](https://docs.openclaw.ai)
+- [OpenClaw GitHub](https://github.com/openclaw/openclaw)
+- [HuggingFace Spaces Docs](https://huggingface.co/docs/hub/spaces)
 
 ## ❤️ Support
 
@@ -422,4 +460,4 @@ Contributions are welcome! Please see [CONTRIBUTING.md](CONTRIBUTING.md) for gui
 
 MIT — see [LICENSE](LICENSE) for details.
 
-*Made with ❤️ by [@somratpro](https://github.com/somratpro) for the OpenClaw community.*  
+*Made with ❤️ by [@somratpro](https://github.com/somratpro) for the OpenClaw community.*

SECURITY.md

@@ -16,6 +16,7 @@ When deploying HuggingClaw:
 
 - **Set your Space to Private** — prevents unauthorized access to your gateway
 - **Use a strong `GATEWAY_TOKEN`** — generate with `openssl rand -hex 32`
+- **Set a strong `JUPYTER_TOKEN`** — the `/terminal/` JupyterLab login defaults to `huggingface` only for template convenience
 - **Keep your HF token scoped** — use fine-grained tokens with minimum permissions
 - **Don't commit `.env` files** — the `.gitignore` already excludes them
 - **Use `TELEGRAM_ALLOWED_USERS`** — restricts bot access to your account only

cloudflare-proxy-setup.py

@@ -12,7 +12,8 @@ from pathlib import Path
 API_BASE = "https://api.cloudflare.com/client/v4"
 ENV_FILE = Path("/tmp/huggingclaw-cloudflare-proxy.env")
 DEFAULT_ALLOWED = [
-    # Messaging
+    # Messaging & social platforms — primary use-case for the Cloudflare proxy
+    # on HF Spaces (geo-restrictions on Telegram, Discord, WhatsApp, etc.).
     "api.telegram.org",
     "discord.com",
     "discordapp.com",
@@ -32,8 +33,6 @@ DEFAULT_ALLOWED = [
     # Video
     "youtube.com",
     "www.youtube.com",
-    # AI APIs
-    "api.openai.com",
     # Email HTTP APIs (SMTP ports are blocked; use these instead)
     "api.resend.com",
     "api.sendgrid.com",
@@ -43,6 +42,11 @@ DEFAULT_ALLOWED = [
     "google.com",
     "googleusercontent.com",
     "gstatic.com",
+    # NOTE: AI-provider domains (api.openai.com, api.anthropic.com, etc.) are
+    # intentionally NOT included here. Proxying AI calls routes API keys through
+    # the Cloudflare Worker without an explicit opt-in. Users who need AI API
+    # calls proxied (e.g. geo-restricted regions) can add specific domains via
+    # the CLOUDFLARE_PROXY_DOMAINS environment variable.
 ]
 
 

cloudflare-proxy.js

@@ -24,6 +24,8 @@ if (
 const DEBUG = process.env.CLOUDFLARE_PROXY_DEBUG === "true";
 const PROXY_SHARED_SECRET = (process.env.CLOUDFLARE_PROXY_SECRET || "").trim();
 const DEFAULT_PROXY_DOMAINS = [
+  // Messaging & social platforms — these are the primary use-case for the
+  // Cloudflare proxy on HF Spaces (geo-restrictions on Telegram, Discord, WA).
   "api.telegram.org", "discord.com", "discordapp.com",
   "gateway.discord.gg", "status.discord.com", "web.whatsapp.com",
   "graph.facebook.com", "graph.instagram.com",
@@ -31,9 +33,15 @@ const DEFAULT_PROXY_DOMAINS = [
   "api.linkedin.com", "www.linkedin.com",
   "open.tiktokapis.com", "oauth.reddit.com",
   "youtube.com", "www.youtube.com",
-  "api.openai.com",
+  // Email delivery
   "api.resend.com", "api.sendgrid.com", "api.mailgun.net",
+  // Google services
   "googleapis.com", "google.com", "googleusercontent.com", "gstatic.com",
+  // NOTE: AI-provider domains (api.openai.com, api.anthropic.com, etc.) are
+  // intentionally NOT included here. Proxying AI calls routes your API keys
+  // through the Cloudflare Worker without an explicit opt-in. Users who need
+  // AI API calls proxied (e.g. geo-restricted regions) can add specific
+  // domains via the CLOUDFLARE_PROXY_DOMAINS environment variable.
 ];
 const PROXY_DOMAINS_RAW = (process.env.CLOUDFLARE_PROXY_DOMAINS || "").trim();
 const PROXY_ALL = PROXY_DOMAINS_RAW === "*";

env-builder.html

@@ -0,0 +1,947 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>HuggingClaw · ENV Builder</title>
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600;700&family=Syne:wght@400;500;600;700;800&display=swap" rel="stylesheet">
+
+<style>
+/* ── Reset & Tokens ── */
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+:root {
+  --bg:        #0b0c0f;
+  --bg2:       #111318;
+  --bg3:       #181c23;
+  --bg4:       #1e2330;
+  --border:    #252b38;
+  --border2:   #2e3648;
+  --amber:     #f5a623;
+  --amber2:    #ffbe55;
+  --amber-dim: rgba(245,166,35,.12);
+  --amber-glow:rgba(245,166,35,.22);
+  --green:     #3dd68c;
+  --red:       #f05f5f;
+  --blue:      #5b8af5;
+  --text:      #e4e8f0;
+  --text2:     #8d97ad;
+  --text3:     #535f76;
+  --mono:      'JetBrains Mono', monospace;
+  --sans:      'Syne', sans-serif;
+  --r:         8px;
+  --r2:        12px;
+  --sidebar-w: 220px;
+  --panel-w:   340px;
+}
+
+html { scroll-behavior: smooth; height: 100%; }
+
+body {
+  font-family: var(--sans);
+  background: var(--bg);
+  color: var(--text);
+  height: 100vh;
+  overflow: hidden;
+  display: flex;
+  flex-direction: column;
+}
+
+/* ── Topbar ── */
+.topbar {
+  position: sticky;
+  top: 0;
+  z-index: 100;
+  height: 52px;
+  background: rgba(11,12,15,.9);
+  backdrop-filter: blur(14px);
+  border-bottom: 1px solid var(--border);
+  display: flex;
+  align-items: center;
+  padding: 0 20px;
+  gap: 16px;
+  flex-shrink: 0;
+}
+
+.topbar-logo {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  flex-shrink: 0;
+}
+
+.topbar-logo svg { width: 26px; height: 26px; }
+
+.topbar-wordmark {
+  font-weight: 800;
+  font-size: 14px;
+  letter-spacing: -.2px;
+  color: var(--text);
+  white-space: nowrap;
+}
+
+.topbar-wordmark em {
+  color: var(--amber);
+  font-style: normal;
+}
+
+.topbar-divider {
+  width: 1px;
+  height: 22px;
+  background: var(--border2);
+}
+
+.topbar-title {
+  font-size: 12px;
+  font-weight: 600;
+  color: var(--text2);
+  letter-spacing: .5px;
+  text-transform: uppercase;
+}
+
+.topbar-spacer { flex: 1; }
+
+.topbar-pill {
+  font-family: var(--mono);
+  font-size: 10px;
+  color: var(--amber);
+  background: var(--amber-dim);
+  border: 1px solid var(--amber-glow);
+  border-radius: 20px;
+  padding: 3px 10px;
+  letter-spacing: .5px;
+}
+
+/* ── Layout ── */
+.layout {
+  display: flex;
+  flex: 1;
+  min-height: 0;
+  height: calc(100vh - 52px);
+}
+
+/* ── Sidebar ── */
+.sidebar-wrap {
+  width: var(--sidebar-w);
+  flex-shrink: 0;
+  border-right: 1px solid var(--border);
+  background: var(--bg2);
+  display: flex;
+  flex-direction: column;
+  overflow: hidden;
+}
+
+.sidebar-scroll {
+  flex: 1;
+  overflow-y: auto;
+  padding: 14px 10px;
+}
+
+.sidebar-scroll::-webkit-scrollbar { width: 4px; }
+.sidebar-scroll::-webkit-scrollbar-track { background: transparent; }
+.sidebar-scroll::-webkit-scrollbar-thumb { background: var(--border2); border-radius: 4px; }
+
+/* sb-label rendered by JS */
+.sb-label {
+  font-size: 9px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 1.2px;
+  color: var(--text3);
+  padding: 0 8px 10px;
+}
+
+.nav-btn {
+  width: 100%;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 8px 10px;
+  border: none;
+  background: transparent;
+  cursor: pointer;
+  border-radius: var(--r);
+  text-align: left;
+  color: var(--text2);
+  font-family: var(--sans);
+  font-size: 12.5px;
+  font-weight: 500;
+  transition: background .15s, color .15s;
+  margin-bottom: 2px;
+}
+
+.nav-btn:hover { background: var(--bg3); color: var(--text); }
+.nav-btn.active {
+  background: var(--amber-dim);
+  color: var(--amber);
+  border: 1px solid var(--amber-glow);
+}
+
+.nav-icon { font-size: 13px; flex-shrink: 0; }
+.nav-label { flex: 1; }
+.nav-count {
+  font-family: var(--mono);
+  font-size: 10px;
+  font-weight: 600;
+  color: var(--text3);
+  background: var(--bg3);
+  border-radius: 10px;
+  padding: 1px 6px;
+  min-width: 20px;
+  text-align: center;
+  transition: background .2s, color .2s;
+}
+.nav-btn.active .nav-count {
+  background: var(--amber-glow);
+  color: var(--amber2);
+}
+
+/* ── Main ── */
+.main {
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+  overflow: hidden;
+}
+
+/* ── Toolbar ── */
+.toolbar {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 12px 20px;
+  border-bottom: 1px solid var(--border);
+  background: var(--bg2);
+  flex-shrink: 0;
+  flex-wrap: wrap;
+}
+
+.search-wrap {
+  position: relative;
+  flex: 1;
+  min-width: 160px;
+  max-width: 340px;
+}
+
+.search-icon {
+  position: absolute;
+  left: 10px;
+  top: 50%;
+  transform: translateY(-50%);
+  color: var(--text3);
+  pointer-events: none;
+  font-size: 12px;
+}
+
+#search {
+  width: 100%;
+  background: var(--bg3);
+  border: 1px solid var(--border2);
+  border-radius: var(--r);
+  padding: 7px 10px 7px 30px;
+  font-family: var(--mono);
+  font-size: 12px;
+  color: var(--text);
+  outline: none;
+  transition: border-color .15s;
+}
+
+#search:focus { border-color: var(--amber); }
+#search::placeholder { color: var(--text3); }
+
+.tb-sep {
+  width: 1px;
+  height: 24px;
+  background: var(--border2);
+}
+
+.btn {
+  display: inline-flex;
+  align-items: center;
+  gap: 5px;
+  padding: 6px 13px;
+  border-radius: var(--r);
+  border: 1px solid var(--border2);
+  background: var(--bg3);
+  color: var(--text2);
+  font-family: var(--sans);
+  font-size: 11.5px;
+  font-weight: 600;
+  cursor: pointer;
+  transition: all .15s;
+  white-space: nowrap;
+}
+
+.btn:hover { background: var(--bg4); color: var(--text); border-color: var(--border2); }
+
+.btn-amber {
+  background: var(--amber);
+  color: #0b0c0f;
+  border-color: var(--amber);
+}
+.btn-amber:hover { background: var(--amber2); border-color: var(--amber2); }
+
+.btn-ghost {
+  background: transparent;
+  border-color: transparent;
+  color: var(--text3);
+}
+.btn-ghost:hover { background: var(--bg3); color: var(--text2); border-color: var(--border2); }
+
+/* ── Content area ── */
+.content-wrap {
+  flex: 1;
+  display: flex;
+  min-height: 0;
+  overflow: hidden;
+}
+
+/* ── Sections scroll ── */
+.sections-scroll {
+  flex: 1;
+  overflow-y: auto;
+  padding: 16px 20px 80px;
+  min-width: 0;
+}
+
+.sections-scroll::-webkit-scrollbar { width: 5px; }
+.sections-scroll::-webkit-scrollbar-track { background: transparent; }
+.sections-scroll::-webkit-scrollbar-thumb { background: var(--border2); border-radius: 4px; }
+
+/* ── Section ── */
+.sec { margin-bottom: 28px; }
+.sec.sec-hidden { display: none !important; }
+
+.sec-header {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  margin-bottom: 12px;
+}
+
+.sec-icon { font-size: 14px; }
+.sec-title {
+  font-size: 11px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 1.2px;
+  color: var(--text3);
+}
+.sec-count {
+  font-family: var(--mono);
+  font-size: 10px;
+  color: var(--text3);
+  background: var(--bg3);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 1px 7px;
+}
+
+.sec-line {
+  flex: 1;
+  height: 1px;
+  background: var(--border);
+}
+
+.cards {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
+  gap: 9px;
+}
+
+/* ── ENV Card ── */
+.env-card {
+  background: var(--bg2);
+  border: 1px solid var(--border);
+  border-radius: var(--r2);
+  padding: 12px;
+  transition: border-color .2s, background .2s;
+}
+
+.env-card:hover { border-color: var(--border2); }
+.env-card.hidden { display: none; }
+
+.env-card.selected {
+  border-color: var(--amber-glow);
+  background: linear-gradient(135deg, var(--bg2) 80%, rgba(245,166,35,.04));
+}
+
+/* Critical cards get a red left-border accent */
+.env-card:has(.badge-critical) {
+  border-left: 3px solid rgba(240,80,80,.4);
+}
+.env-card:has(.badge-critical):hover {
+  border-left-color: rgba(240,80,80,.7);
+}
+.env-card:has(.badge-critical).selected {
+  border-left-color: #f05f5f;
+}
+
+/* Credential cards get an amber left-border accent */
+.env-card:has(.badge-credential) {
+  border-left: 3px solid rgba(220,140,60,.3);
+}
+
+.card-top {
+  display: flex;
+  align-items: flex-start;
+  gap: 9px;
+  margin-bottom: 9px;
+}
+
+.card-check {
+  width: 15px;
+  height: 15px;
+  accent-color: var(--amber);
+  flex-shrink: 0;
+  margin-top: 2px;
+  cursor: pointer;
+}
+
+.card-info { flex: 1; min-width: 0; }
+
+.card-key {
+  font-family: var(--mono);
+  font-size: 11.5px;
+  font-weight: 600;
+  color: var(--text);
+  letter-spacing: .3px;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.card-lbl {
+  font-size: 11px;
+  color: var(--text3);
+  margin-top: 2px;
+  line-height: 1.35;
+}
+
+.badge {
+  flex-shrink: 0;
+  font-family: var(--mono);
+  font-size: 9px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: .6px;
+  padding: 2px 7px;
+  border-radius: 20px;
+}
+
+/* critical — space breaks without this */
+.badge-critical {
+  background: rgba(240,80,80,.14);
+  color: #f05f5f;
+  border: 1px solid rgba(240,80,80,.3);
+}
+
+/* credential — sensitive key / token */
+.badge-credential {
+  background: rgba(220,140,60,.13);
+  color: #e09040;
+  border: 1px solid rgba(220,140,60,.28);
+}
+
+/* feature — enables an optional feature */
+.badge-feature {
+  background: rgba(70,140,250,.12);
+  color: #5a9eff;
+  border: 1px solid rgba(70,140,250,.25);
+}
+
+/* optional — safe to change freely */
+.badge-optional {
+  background: rgba(61,214,140,.10);
+  color: #3dd68c;
+  border: 1px solid rgba(61,214,140,.22);
+}
+
+/* advanced — power-user, risky if wrong */
+.badge-advanced {
+  background: rgba(160,100,230,.12);
+  color: #b07ae0;
+  border: 1px solid rgba(160,100,230,.25);
+}
+
+/* build-time — needs HF Space rebuild */
+.badge-build {
+  background: rgba(240,185,60,.12);
+  color: #e0b030;
+  border: 1px solid rgba(240,185,60,.28);
+}
+
+/* ── Card inputs ── */
+.card-input { position: relative; }
+
+.card-input input[type="text"],
+.card-input input[type="password"],
+.card-input input[type="number"],
+.card-input textarea,
+.card-input select {
+  width: 100%;
+  background: var(--bg3);
+  border: 1px solid var(--border);
+  border-radius: var(--r);
+  padding: 7px 10px;
+  font-family: var(--mono);
+  font-size: 11.5px;
+  color: var(--text);
+  outline: none;
+  transition: border-color .15s;
+  resize: vertical;
+}
+
+.card-input input[type="text"]:focus,
+.card-input input[type="password"]:focus,
+.card-input input[type="number"]:focus,
+.card-input textarea:focus,
+.card-input select:focus {
+  border-color: var(--amber);
+}
+
+.card-input textarea { min-height: 64px; }
+.card-input select {
+  cursor: pointer;
+  appearance: none;
+  background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 12 12'%3E%3Cpath fill='%238d97ad' d='M6 8L1 3h10z'/%3E%3C/svg%3E");
+  background-repeat: no-repeat;
+  background-position: right 10px center;
+  padding-right: 28px;
+}
+
+.card-input optgroup { color: var(--text2); font-weight: 600; }
+.card-input option { color: var(--text); background: var(--bg3); }
+
+/* ── Toggle ── */
+.toggle-shell { display: flex; align-items: center; gap: 8px; }
+.tog {
+  padding: 5px 14px;
+  border-radius: 20px;
+  border: 1px solid var(--border2);
+  background: var(--bg3);
+  color: var(--text3);
+  font-family: var(--mono);
+  font-size: 11px;
+  font-weight: 700;
+  cursor: pointer;
+  transition: all .18s;
+  letter-spacing: .5px;
+}
+.tog.on {
+  background: rgba(61,214,140,.15);
+  border-color: rgba(61,214,140,.4);
+  color: var(--green);
+}
+
+/* ── Picker shell ── */
+.picker-shell { display: flex; flex-direction: column; gap: 6px; }
+.picker-row { display: flex; gap: 6px; align-items: center; flex-wrap: wrap; }
+
+.picker-select {
+  flex: 1;
+  min-width: 0;
+  padding: 6px 28px 6px 8px !important;
+  font-size: 11px !important;
+}
+
+.mini-btn {
+  padding: 5px 9px;
+  border-radius: var(--r);
+  border: 1px solid var(--border2);
+  background: var(--bg3);
+  color: var(--text2);
+  font-family: var(--mono);
+  font-size: 10px;
+  font-weight: 600;
+  cursor: pointer;
+  transition: all .15s;
+  white-space: nowrap;
+}
+.mini-btn:hover { background: var(--bg4); color: var(--text); }
+
+/* ── Right panel ── */
+.right-panel {
+  width: var(--panel-w);
+  flex-shrink: 0;
+  border-left: 1px solid var(--border);
+  background: var(--bg2);
+  display: flex;
+  flex-direction: column;
+  overflow: hidden;
+}
+
+.panel-scroll {
+  flex: 1;
+  overflow-y: auto;
+  padding: 16px;
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+}
+
+.panel-scroll::-webkit-scrollbar { width: 4px; }
+.panel-scroll::-webkit-scrollbar-track { background: transparent; }
+.panel-scroll::-webkit-scrollbar-thumb { background: var(--border2); border-radius: 4px; }
+
+/* ── Panel block ── */
+.pblock {
+  background: var(--bg3);
+  border: 1px solid var(--border);
+  border-radius: var(--r2);
+  overflow: hidden;
+}
+
+.pblock-head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 10px 14px;
+  border-bottom: 1px solid var(--border);
+}
+
+.pblock-title {
+  font-size: 10.5px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 1px;
+  color: var(--text3);
+  display: flex;
+  align-items: center;
+  gap: 6px;
+}
+
+.pblock-body { padding: 12px 14px; display: flex; flex-direction: column; gap: 8px; }
+
+.pblock-body textarea,
+.pblock-body input[type="text"] {
+  width: 100%;
+  background: var(--bg);
+  border: 1px solid var(--border);
+  border-radius: var(--r);
+  padding: 8px 10px;
+  font-family: var(--mono);
+  font-size: 10.5px;
+  color: var(--text2);
+  outline: none;
+  resize: vertical;
+  transition: border-color .15s;
+}
+
+.pblock-body textarea:focus,
+.pblock-body input[type="text"]:focus {
+  border-color: var(--amber);
+  color: var(--text);
+}
+
+#importText { min-height: 80px; }
+#bundleOut { min-height: 60px; color: var(--amber2); }
+#envLineOut { font-size: 10px; }
+
+.row-btns { display: flex; gap: 6px; flex-wrap: wrap; }
+
+/* ── Summary ── */
+#summary {
+  font-size: 11.5px;
+  color: var(--text2);
+  line-height: 1.6;
+}
+
+#summary strong {
+  font-size: 15px;
+  color: var(--amber);
+  font-family: var(--mono);
+}
+
+.sum-keys {
+  margin-top: 8px;
+  display: flex;
+  flex-wrap: wrap;
+  gap: 4px;
+}
+
+.sum-key {
+  font-family: var(--mono);
+  font-size: 9.5px;
+  color: var(--text2);
+  background: var(--bg4);
+  border: 1px solid var(--border2);
+  border-radius: 4px;
+  padding: 2px 6px;
+}
+
+/* ── Custom Env section ── */
+#customSec {
+  margin-top: 8px;
+}
+
+.custom-row {
+  display: flex;
+  gap: 8px;
+  align-items: center;
+  margin-bottom: 8px;
+}
+
+.custom-row input {
+  flex: 1;
+  background: var(--bg3);
+  border: 1px solid var(--border);
+  border-radius: var(--r);
+  padding: 7px 10px;
+  font-family: var(--mono);
+  font-size: 11px;
+  color: var(--text);
+  outline: none;
+  transition: border-color .15s;
+  min-width: 0;
+}
+
+.custom-row input:focus { border-color: var(--amber); }
+.custom-row input:first-child { flex: 0 0 40%; }
+
+/* ── Toast ── */
+#toast {
+  position: fixed;
+  bottom: 24px;
+  left: 50%;
+  transform: translateX(-50%) translateY(20px);
+  background: var(--bg4);
+  border: 1px solid var(--border2);
+  color: var(--amber);
+  font-family: var(--mono);
+  font-size: 12px;
+  font-weight: 600;
+  padding: 9px 20px;
+  border-radius: 30px;
+  z-index: 9999;
+  opacity: 0;
+  transition: opacity .2s, transform .2s;
+  pointer-events: none;
+  box-shadow: 0 8px 32px rgba(0,0,0,.5);
+}
+
+#toast.show {
+  opacity: 1;
+  transform: translateX(-50%) translateY(0);
+}
+
+/* ── Scrollbar global ── */
+::-webkit-scrollbar { width: 6px; height: 6px; }
+::-webkit-scrollbar-track { background: transparent; }
+::-webkit-scrollbar-thumb { background: var(--border2); border-radius: 4px; }
+
+/* ── Responsive ── */
+@media (max-width: 900px) {
+  :root { --panel-w: 280px; --sidebar-w: 180px; }
+}
+
+@media (max-width: 700px) {
+  .right-panel { display: none; }
+  :root { --sidebar-w: 160px; }
+}
+
+@media (max-width: 520px) {
+  .sidebar-wrap { display: none; }
+  .topbar-divider, .topbar-title { display: none; }
+}
+
+/* ── Tag Legend (collapsible) ── */
+.tag-legend {
+  margin-bottom: 14px;
+  background: var(--bg2);
+  border: 1px solid var(--border);
+  border-radius: var(--r);
+  overflow: hidden;
+}
+.legend-summary {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 7px 12px;
+  cursor: pointer;
+  list-style: none;
+  user-select: none;
+  outline: none;
+}
+.legend-summary::-webkit-details-marker { display: none; }
+.legend-chips { display: flex; gap: 5px; flex-wrap: wrap; flex: 1; }
+.legend-hint {
+  font-size: 10px;
+  color: var(--text3);
+  white-space: nowrap;
+  flex-shrink: 0;
+}
+.tag-legend[open] .legend-hint { opacity: 0; }
+.legend-body {
+  padding: 8px 12px 10px;
+  border-top: 1px solid var(--border);
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+.legend-row {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  font-size: 11px;
+  color: var(--text2);
+}
+.legend-row .badge { flex-shrink: 0; width: 74px; text-align: center; }
+.legend-tip {
+  font-size: 9.5px;
+  color: var(--text3);
+  margin-top: 4px;
+  padding-top: 6px;
+  border-top: 1px solid var(--border);
+}
+</style>
+</head>
+
+<body>
+
+<!-- ── Topbar ── -->
+<header class="topbar">
+  <div class="topbar-logo">
+    <svg viewBox="0 0 64 64" fill="none" xmlns="http://www.w3.org/2000/svg">
+      <rect width="64" height="64" rx="14" fill="#1a1f2e"/>
+      <text x="10" y="46" font-size="40" font-family="monospace">🤗</text>
+      <circle cx="46" cy="20" r="10" fill="#f5a623"/>
+      <text x="40" y="25" font-size="14" font-family="monospace" fill="#0b0c0f">⚡</text>
+    </svg>
+    <span class="topbar-wordmark">Hugging<em>Claw</em></span>
+  </div>
+  <div class="topbar-divider"></div>
+  <span class="topbar-title">ENV Builder</span>
+  <div class="topbar-spacer"></div>
+  <span class="topbar-pill">v2025</span>
+</header>
+
+<!-- ── Layout ── -->
+<div class="layout">
+
+  <!-- ── Sidebar ── -->
+  <aside class="sidebar-wrap">
+    <div class="sidebar-scroll">
+      <div id="sidebar"></div>
+    </div>
+  </aside>
+
+  <!-- ── Main ── -->
+  <main class="main">
+
+    <!-- toolbar -->
+    <div class="toolbar">
+      <div class="search-wrap">
+        <span class="search-icon">⌕</span>
+        <input id="search" type="text" placeholder="Search variables…" autocomplete="off" spellcheck="false">
+      </div>
+
+      <div class="tb-sep"></div>
+
+      <button id="selectCommon" class="btn">★ Common</button>
+      <button id="selectVisible" class="btn">☑ Visible</button>
+      <button id="clearAll" class="btn btn-ghost">✕ Clear</button>
+    </div>
+
+    <!-- content row -->
+    <div class="content-wrap">
+
+      <!-- sections -->
+      <div class="sections-scroll">
+        <!-- Tag Legend (compact collapsible) -->
+        <details class="tag-legend" id="tagLegend">
+          <summary class="legend-summary">
+            <span class="legend-chips">
+              <span class="badge badge-critical">critical</span>
+              <span class="badge badge-credential">credential</span>
+              <span class="badge badge-feature">feature</span>
+              <span class="badge badge-optional">optional</span>
+              <span class="badge badge-advanced">advanced</span>
+              <span class="badge badge-build">build-time</span>
+            </span>
+            <span class="legend-hint">what do these mean?</span>
+          </summary>
+          <div class="legend-body">
+            <div class="legend-row"><span class="badge badge-critical">critical</span><span>Space won't work without this</span></div>
+            <div class="legend-row"><span class="badge badge-credential">credential</span><span>Sensitive key or token — never share</span></div>
+            <div class="legend-row"><span class="badge badge-feature">feature</span><span>Enables a specific optional feature</span></div>
+            <div class="legend-row"><span class="badge badge-optional">optional</span><span>Safe to change — nothing breaks</span></div>
+            <div class="legend-row"><span class="badge badge-advanced">advanced</span><span>Power-user setting — wrong value causes issues</span></div>
+            <div class="legend-row"><span class="badge badge-build">build-time</span><span>Needs HF Space rebuild to fully take effect</span></div>
+            <div class="legend-tip">💡 Type a tag name in search to filter by it</div>
+          </div>
+        </details>
+        <div id="sections"></div>
+
+        <!-- Custom Env section -->
+        <div id="customSec" class="sec" data-section="Custom Env">
+          <div class="sec-header">
+            <span class="sec-icon">🔧</span>
+            <span class="sec-title">Custom Env</span>
+            <div class="sec-line"></div>
+          </div>
+          <div id="customRows"></div>
+          <button id="addCustom" class="btn" style="margin-top:6px;">+ Add variable</button>
+        </div>
+      </div>
+
+      <!-- right panel -->
+      <aside class="right-panel">
+        <div class="panel-scroll">
+
+          <!-- Summary -->
+          <div class="pblock">
+            <div class="pblock-head">
+              <span class="pblock-title">📊 Summary</span>
+            </div>
+            <div class="pblock-body">
+              <div id="summary">No variables selected yet.</div>
+            </div>
+          </div>
+
+          <!-- Output -->
+          <div class="pblock">
+            <div class="pblock-head">
+              <span class="pblock-title">📦 Bundle Output</span>
+            </div>
+            <div class="pblock-body">
+              <textarea id="bundleOut" placeholder="Your encoded bundle will appear here…" readonly spellcheck="false"></textarea>
+              <input type="text" id="envLineOut" placeholder="HUGGINGCLAW_ENV_BUNDLE=…" readonly spellcheck="false">
+              <div class="row-btns">
+                <button id="copyBundle" class="btn btn-amber">⎘ Bundle</button>
+                <button id="copyEnvLine" class="btn">⎘ Env Line</button>
+                <button id="copyJson" class="btn">⎘ JSON</button>
+                <button id="applyBundle" class="btn btn-ghost">↺ Apply</button>
+              </div>
+            </div>
+          </div>
+
+          <!-- Import -->
+          <div class="pblock">
+            <div class="pblock-head">
+              <span class="pblock-title">📥 Import</span>
+            </div>
+            <div class="pblock-body">
+              <textarea id="importText" placeholder="Paste .env, JSON, or HUGGINGCLAW_ENV_BUNDLE=… here" spellcheck="false"></textarea>
+              <button id="applyImport" class="btn btn-amber" style="width:100%;">↓ Import & Apply</button>
+            </div>
+          </div>
+
+        </div>
+      </aside>
+
+    </div><!-- /content-wrap -->
+  </main>
+</div><!-- /layout -->
+
+<!-- Toast -->
+<div id="toast">Copied ✓</div>
+
+<!-- env-builder.js provides MODEL_CATALOGS, FIELDS, ICONS and all logic -->
+<script src="env-builder.js"></script>
+
+</body>
+</html>

env-builder.js

@@ -0,0 +1,2527 @@
+const MODEL_CATALOGS = {
+  "LLM_MODEL": {
+    "Anthropic": [
+      "claude-opus-4-7",
+      "claude-opus-4-6",
+      "claude-opus-4-5",
+      "claude-opus-4-1",
+      "claude-sonnet-4-7",
+      "claude-sonnet-4-6",
+      "claude-sonnet-4-5",
+      "claude-haiku-4-5",
+      "claude-haiku-4-5-20251001",
+      "claude-haiku-3-5"
+    ],
+    "OpenAI": [
+      "gpt-5.4-pro",
+      "gpt-5.4",
+      "gpt-5.4-mini",
+      "gpt-5.4-nano",
+      "gpt-5.1",
+      "gpt-5",
+      "gpt-4.1",
+      "gpt-4.1-mini",
+      "gpt-4o",
+      "gpt-4o-mini",
+      "o3",
+      "o4-mini"
+    ],
+    "Gemini": [
+      "gemini-3.1-pro-preview",
+      "gemini-3.1-flash-preview",
+      "gemini-3-flash-preview",
+      "gemini-2.5-pro",
+      "gemini-2.5-flash",
+      "gemini-2.0-flash",
+      "gemini-flash-latest",
+      "gemini-pro-latest"
+    ],
+    "DeepSeek": [
+      "deepseek-v4-pro",
+      "deepseek-v4-flash",
+      "deepseek-v3.2",
+      "deepseek-chat",
+      "deepseek-reasoner",
+      "deepseek-r1",
+      "deepseek-r1-0528"
+    ],
+    "xAI": [
+      "grok-4.3",
+      "grok-4.1",
+      "grok-4",
+      "grok-3"
+    ],
+    "Groq": [
+      "groq/compound",
+      "groq/compound-mini",
+      "llama-3.1-8b-instant",
+      "llama-3.1-70b-versatile",
+      "llama-3.3-70b-versatile",
+      "meta-llama/llama-4-scout-17b-16e-instruct",
+      "openai/gpt-oss-20b",
+      "openai/gpt-oss-120b",
+      "qwen/qwen3-32b",
+      "mixtral-8x7b-32768"
+    ],
+    "Mistral": [
+      "mistral-large-latest",
+      "mistral-large-2",
+      "mistral-medium-3.5",
+      "mistral-small-latest",
+      "mistral-small-3.2",
+      "devstral-2",
+      "ocr-3-premier",
+      "voxtral-mini-transcribe-realtime",
+      "codestral-latest"
+    ],
+    "Cohere": [
+      "command-a",
+      "command-a-03-2025",
+      "command-a-translate-08-2025",
+      "command-a-reasoning-08-2025",
+      "command-a-vision-07-2025",
+      "command-r7b-12-2024",
+      "command-r-08-2024",
+      "command-r-plus-08-2024"
+    ],
+    "OpenRouter": [
+      "openrouter/free",
+      "openrouter/auto",
+      "anthropic/claude-opus-4-7",
+      "anthropic/claude-sonnet-4-6",
+      "anthropic/claude-haiku-4-5",
+      "openai/gpt-5.4",
+      "openai/gpt-4.1",
+      "openai/gpt-4o",
+      "openai/gpt-5.1",
+      "google/gemini-3.1-pro-preview",
+      "google/gemini-2.5-pro",
+      "deepseek/deepseek-v3.2",
+      "deepseek/deepseek-r1",
+      "moonshotai/kimi-k2.5",
+      "qwen/qwen3-32b",
+      "meta-llama/llama-3.3-70b-instruct"
+    ],
+    "Together": [
+      "moonshotai/Kimi-K2.5",
+      "deepseek-ai/DeepSeek-R1",
+      "Qwen/Qwen3-235B-A22B-Instruct-2507-tput",
+      "zai-org/GLM-5.1",
+      "google/gemma-4-31B-it",
+      "MiniMaxAI/MiniMax-M2.7",
+      "meta-llama/Llama-3.3-70B-Instruct-Turbo",
+      "openai/gpt-oss-20b",
+      "openai/gpt-oss-120b",
+      "mistralai/Mistral-Small-3.2-24B-Instruct-2506",
+      "moonshotai/Kimi-K2.5-Instruct"
+    ],
+    "OpenCode": [
+      "opencode/claude-opus-4-6",
+      "opencode/gpt-5.4",
+      "opencode-go/kimi-k2.5",
+      "opencode-go/qwen3-32b"
+    ],
+    "Cerebras": [
+      "cerebras/zai-glm-4.7",
+      "cerebras/deepseek-r1",
+      "cerebras/llama-4-scout-17b-16e-instruct",
+      "cerebras/qwen3-32b"
+    ],
+    "NVIDIA": [
+      "nvidia/nemotron-3-super-120b-a12b",
+      "nvidia/nemotron-4-340b-instruct",
+      "nvidia/llama-3.1-nemotron-70b-instruct"
+    ],
+    "KiloCode": [
+      "kilocode/anthropic/claude-opus-4.6",
+      "kilocode/anthropic/claude-sonnet-4.6",
+      "kilocode/openai/gpt-5.4",
+      "kilocode/google/gemini-2.5-pro"
+    ],
+    "Z.AI": [
+      "zai-org/GLM-5.1",
+      "zai-org/GLM-4.7",
+      "zai-org/GLM-4.5"
+    ],
+    "Moonshot": [
+      "moonshot/kimi-k2.5",
+      "moonshot/kimi-k2.5-thinking",
+      "moonshot/kimi-k2.5-coder"
+    ],
+    "MiniMax": [
+      "minimax/minimax-m2.7",
+      "minimax/minimax-m1.5",
+      "minimax/abab6.5s-chat"
+    ],
+    "Xiaomi": [
+      "xiaomi/mimo-v1",
+      "xiaomi/mimo-v2",
+      "xiaomi/mi-mo"
+    ],
+    "Volcano Engine": [
+      "volcengine/doubao-seed-1.6",
+      "volcengine/doubao-1.5-pro",
+      "volcengine/doubao-1.5-lite"
+    ],
+    "BytePlus": [
+      "byteplus/seed-1.6",
+      "byteplus/deepseek-v3.2",
+      "byteplus/doubao-seed-1.6"
+    ],
+    "Qianfan": [
+      "qianfan/ernie-4.5",
+      "qianfan/ernie-4.5-8k",
+      "qianfan/deepseek-v3.2",
+      "qianfan/ernie-x1"
+    ],
+    "ModelStudio": [
+      "modelstudio/qwen3-max",
+      "modelstudio/qwen3-coder",
+      "modelstudio/qwen3-32b"
+    ],
+    "Hugging Face": [
+      "meta-llama/Llama-3.3-70B-Instruct",
+      "Qwen/Qwen3-32B",
+      "google/gemma-4-31B-it",
+      "deepseek-ai/DeepSeek-V3.2",
+      "moonshotai/Kimi-K2.5"
+    ],
+    "Venice": [
+      "venice/gpt-5",
+      "venice/llama-3.3-70b",
+      "venice/deepseek-r1"
+    ],
+    "Synthetic": [
+      "synthetic/gpt-5",
+      "synthetic/claude-sonnet-4-6"
+    ],
+    "AI Gateway": [
+      "openai/gpt-5.4",
+      "anthropic/claude-sonnet-4-6",
+      "google/gemini-2.5-pro"
+    ],
+    "GitHub Copilot": [
+      "github-copilot/gpt-5",
+      "github-copilot/gpt-4.1",
+      "github-copilot/gpt-4o"
+    ],
+    "ZAI": [
+      "zai/glm-5",
+      "zai/glm-5-turbo",
+      "zai/glm-4.7",
+      "zai/glm-4.7-flash"
+    ],
+    "Kimi": [
+      "moonshot/kimi-k2.5",
+      "moonshot/kimi-k2.5-thinking"
+    ],
+    "HuggingFace": [
+      "huggingface/deepseek-ai/DeepSeek-R1",
+      "huggingface/meta-llama/Llama-3.3-70B-Instruct",
+      "huggingface/Qwen/Qwen3-32B"
+    ]
+  },
+  "OPENAI_MODELS": [
+    "gpt-5.4-pro",
+    "gpt-5.4",
+    "gpt-5.4-mini",
+    "gpt-5.4-nano",
+    "gpt-5.1",
+    "gpt-5",
+    "gpt-4.1",
+    "gpt-4.1-mini",
+    "gpt-4o",
+    "gpt-4o-mini",
+    "o3",
+    "o4-mini"
+  ],
+  "ANTHROPIC_MODELS": [
+    "anthropic/claude-opus-4-7",
+    "anthropic/claude-opus-4-6",
+    "anthropic/claude-opus-4-5",
+    "anthropic/claude-sonnet-4-6",
+    "anthropic/claude-sonnet-4-5",
+    "anthropic/claude-haiku-4-5"
+  ],
+  "GEMINI_MODELS": [
+    "google/gemini-3.1-pro-preview",
+    "google/gemini-3.1-flash-preview",
+    "google/gemini-3-flash-preview",
+    "google/gemini-2.5-pro",
+    "google/gemini-2.5-flash",
+    "google/gemini-2.0-flash"
+  ],
+  "DEEPSEEK_MODELS": [
+    "deepseek/deepseek-v4-pro",
+    "deepseek/deepseek-v4-flash",
+    "deepseek/deepseek-v3.2",
+    "deepseek/deepseek-chat",
+    "deepseek/deepseek-reasoner",
+    "deepseek/deepseek-r1",
+    "deepseek/deepseek-r1-0528"
+  ],
+  "OPENROUTER_MODELS": [
+    "openrouter/free",
+    "openrouter/auto",
+    "openrouter/anthropic/claude-sonnet-4-6",
+    "openrouter/anthropic/claude-opus-4-7",
+    "openrouter/anthropic/claude-haiku-4-5",
+    "openrouter/openai/gpt-5.4",
+    "openrouter/openai/gpt-4.1",
+    "openrouter/openai/gpt-4o",
+    "openrouter/openai/gpt-5.1",
+    "openrouter/google/gemini-3.1-pro-preview",
+    "openrouter/google/gemini-2.5-pro",
+    "openrouter/deepseek/deepseek-v3.2",
+    "openrouter/deepseek/deepseek-r1",
+    "openrouter/moonshotai/kimi-k2.5",
+    "openrouter/qwen/qwen3-32b"
+  ],
+  "GROQ_MODELS": [
+    "groq/compound",
+    "groq/compound-mini",
+    "llama-3.1-8b-instant",
+    "llama-3.1-70b-versatile",
+    "llama-3.3-70b-versatile",
+    "openai/gpt-oss-20b",
+    "openai/gpt-oss-120b",
+    "meta-llama/llama-4-scout-17b-16e-instruct",
+    "qwen/qwen3-32b",
+    "mixtral-8x7b-32768"
+  ],
+  "MISTRAL_MODELS": [
+    "mistral-large-latest",
+    "mistral-large-2",
+    "mistral-medium-3.5",
+    "mistral-small-latest",
+    "mistral-small-3.2",
+    "devstral-2",
+    "ocr-3-premier",
+    "voxtral-mini-transcribe-realtime",
+    "codestral-latest"
+  ],
+  "XAI_MODELS": [
+    "grok-4.3",
+    "grok-4.1",
+    "grok-4",
+    "grok-3"
+  ],
+  "COHERE_MODELS": [
+    "command-a",
+    "command-a-03-2025",
+    "command-a-translate-08-2025",
+    "command-a-reasoning-08-2025",
+    "command-a-vision-07-2025",
+    "command-r7b-12-2024",
+    "command-r-08-2024",
+    "command-r-plus-08-2024"
+  ],
+  "TOGETHER_MODELS": [
+    "moonshotai/Kimi-K2.5",
+    "deepseek-ai/DeepSeek-R1",
+    "Qwen/Qwen3-235B-A22B-Instruct-2507-tput",
+    "zai-org/GLM-5.1",
+    "google/gemma-4-31B-it",
+    "MiniMaxAI/MiniMax-M2.7",
+    "meta-llama/Llama-3.3-70B-Instruct-Turbo",
+    "openai/gpt-oss-20b",
+    "openai/gpt-oss-120b",
+    "mistralai/Mistral-Small-3.2-24B-Instruct-2506",
+    "moonshotai/Kimi-K2.5-Instruct"
+  ],
+  "CEREBRAS_MODELS": [
+    "cerebras/zai-glm-4.7",
+    "cerebras/deepseek-r1",
+    "cerebras/llama-4-scout-17b-16e-instruct",
+    "cerebras/qwen3-32b"
+  ],
+  "NVIDIA_MODELS": [
+    "nvidia/nemotron-3-super-120b-a12b",
+    "nvidia/nemotron-4-340b-instruct",
+    "nvidia/llama-3.1-nemotron-70b-instruct"
+  ],
+  "KILOCODE_MODELS": [
+    "kilocode/anthropic/claude-opus-4.6",
+    "kilocode/anthropic/claude-sonnet-4.6",
+    "kilocode/openai/gpt-5.4",
+    "kilocode/google/gemini-2.5-pro"
+  ],
+  "OPENCODE_MODELS": [
+    "opencode/claude-opus-4-6",
+    "opencode/gpt-5.4",
+    "opencode-go/kimi-k2.5",
+    "opencode-go/qwen3-32b"
+  ],
+  "ZAI_MODELS": [
+    "zai/glm-5",
+    "zai/glm-5-turbo",
+    "zai/glm-4.7",
+    "zai/glm-4.7-flash"
+  ],
+  "MOONSHOT_MODELS": [
+    "moonshot/kimi-k2.5",
+    "moonshot/kimi-k2.5-thinking",
+    "moonshot/kimi-k2.5-coder"
+  ],
+  "MINIMAX_MODELS": [
+    "minimax/minimax-m2.7",
+    "minimax/minimax-m1.5",
+    "minimax/abab6.5s-chat"
+  ],
+  "XIAOMI_MODELS": [
+    "xiaomi/mimo-v1",
+    "xiaomi/mimo-v2",
+    "xiaomi/mi-mo"
+  ],
+  "VOLCANO_ENGINE_MODELS": [
+    "volcengine/doubao-seed-1.6",
+    "volcengine/doubao-1.5-pro",
+    "volcengine/doubao-1.5-lite"
+  ],
+  "BYTEPLUS_MODELS": [
+    "byteplus/seed-1.6",
+    "byteplus/deepseek-v3.2",
+    "byteplus/doubao-seed-1.6"
+  ],
+  "QIANFAN_MODELS": [
+    "qianfan/ernie-4.5",
+    "qianfan/ernie-4.5-8k",
+    "qianfan/deepseek-v3.2",
+    "qianfan/ernie-x1"
+  ],
+  "MODELSTUDIO_MODELS": [
+    "modelstudio/qwen3-max",
+    "modelstudio/qwen3-coder",
+    "modelstudio/qwen3-32b"
+  ],
+  "KIMI_MODELS": [
+    "moonshot/kimi-k2.5",
+    "moonshot/kimi-k2.5-thinking",
+    "moonshot/kimi-k2.5-coder"
+  ],
+  "HUGGINGFACE_MODELS": [
+    "huggingface/deepseek-ai/DeepSeek-R1",
+    "huggingface/meta-llama/Llama-3.3-70B-Instruct",
+    "huggingface/Qwen/Qwen3-32B",
+    "huggingface/mistralai/Mistral-Small-3.2-24B-Instruct-2506"
+  ],
+  "GITHUB_COPILOT_MODELS": [
+    "github-copilot/gpt-5",
+    "github-copilot/gpt-4.1",
+    "github-copilot/gpt-4o"
+  ],
+  "AI_GATEWAY_MODELS": [],
+  "VENICE_MODELS": [],
+  "SYNTHETIC_MODELS": []
+};
+
+const FIELDS = [
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "LLM_MODEL",
+    "lbl": "Default model ID",
+    "type": "model",
+    "options_key": "LLM_MODEL",
+    "ph": "choose a provider model",
+    "common": 1,
+    "tag": "critical"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "LLM_API_KEY",
+    "lbl": "Primary provider API key",
+    "type": "password",
+    "ph": "sk-...",
+    "common": 1,
+    "tag": "credential"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "GATEWAY_TOKEN",
+    "lbl": "Control UI gateway token",
+    "type": "password",
+    "common": 1,
+    "tag": "critical"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "OPENCLAW_PASSWORD",
+    "lbl": "Optional password auth",
+    "type": "password",
+    "tag": "credential"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "OPENCLAW_VERSION",
+    "lbl": "Pin OpenClaw version",
+    "type": "text",
+    "ph": "latest",
+    "tag": "optional"
+  },
+{
+    "g": "Plugins",
+    "icon": "⚡",
+    "k": "LLM_API_KEY_FALLBACK_ENABLED",
+    "lbl": "Allow global LLM_API_KEY fallback",
+    "type": "toggle",
+    "ph": "true",
+    "tag": "advanced"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "DEV_MODE",
+    "lbl": "Enable dev mode",
+    "type": "toggle",
+    "ph": "false",
+    "common": 1,
+    "tag": "build"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_JUPYTER_ENABLED",
+    "lbl": "Enable Jupyter terminal",
+    "type": "toggle",
+    "ph": "false",
+    "common": 1,
+    "tag": "feature"
+  },
+{
+    "g": "DevData",
+    "icon": "⚡",
+    "k": "DEVDATA",
+    "lbl": "DevData switch",
+    "type": "toggle",
+    "ph": "on",
+    "common": 1,
+    "tag": "feature"
+  },
+{
+    "g": "DevData",
+    "icon": "⚡",
+    "k": "DEVDATA_DATASET_NAME",
+    "lbl": "DevData dataset name",
+    "type": "text",
+    "ph": "huggingclaw-devdata",
+    "common": 1,
+    "tag": "feature"
+  },
+{
+    "g": "DevData",
+    "icon": "⚡",
+    "k": "DEVDATA_SYNC_INTERVAL",
+    "lbl": "DevData sync interval (seconds)",
+    "type": "number",
+    "ph": "180",
+    "tag": "advanced"
+  },
+{
+    "g": "WhatsApp",
+    "icon": "⚡",
+    "k": "WHATSAPP_ENABLED",
+    "lbl": "Enable WhatsApp pairing",
+    "type": "toggle",
+    "ph": "false",
+    "common": 1,
+    "tag": "feature"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_CAPTURE_DISABLE",
+    "lbl": "Disable capture wrapper",
+    "type": "toggle",
+    "ph": "false",
+    "tag": "advanced"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_STARTUP_STRICT",
+    "lbl": "Stop on startup failure",
+    "type": "toggle",
+    "ph": "false",
+    "tag": "advanced"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_RUN",
+    "lbl": "Startup command (one-liner)",
+    "type": "textarea",
+    "tag": "optional"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_STARTUP_COMMANDS",
+    "lbl": "Multiline startup commands",
+    "type": "textarea",
+    "tag": "optional"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_STARTUP_SCRIPT",
+    "lbl": "Startup shell script",
+    "type": "textarea",
+    "tag": "optional"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_STARTUP_SCRIPT_B64",
+    "lbl": "Startup script (base64)",
+    "type": "textarea",
+    "tag": "optional"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_APT_PACKAGES",
+    "lbl": "APT packages to install",
+    "type": "textarea",
+    "tag": "optional"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_PIP_PACKAGES",
+    "lbl": "Pip packages to install",
+    "type": "textarea",
+    "tag": "optional"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_NPM_PACKAGES",
+    "lbl": "NPM packages to install",
+    "type": "textarea",
+    "tag": "optional"
+  },
+{
+    "g": "Startup",
+    "icon": "⚡",
+    "k": "HUGGINGCLAW_OPENCLAW_PLUGINS",
+    "lbl": "OpenClaw plugins to load",
+    "type": "textarea",
+    "tag": "optional"
+  },
+{
+    "g": "Network",
+    "icon": "⚡",
+    "k": "ALLOWED_ORIGINS",
+    "lbl": "Allowed CORS origins",
+    "type": "textarea",
+    "tag": "advanced"
+  },
+{
+    "g": "Network",
+    "icon": "⚡",
+    "k": "TRUSTED_PROXIES",
+    "lbl": "Trusted proxy CIDRs",
+    "type": "textarea",
+    "tag": "advanced"
+  },
+{
+    "g": "Network",
+    "icon": "⚡",
+    "k": "WEBHOOK_URL",
+    "lbl": "Webhook URL",
+    "type": "text",
+    "ph": "https://...",
+    "tag": "feature"
+  },
+{
+    "g": "Gateway",
+    "icon": "⚡",
+    "k": "GATEWAY_MAX_RESTARTS",
+    "lbl": "Gateway max restarts",
+    "type": "number",
+    "ph": "10",
+    "tag": "advanced"
+  },
+{
+    "g": "Gateway",
+    "icon": "⚡",
+    "k": "GATEWAY_READY_TIMEOUT",
+    "lbl": "Gateway ready timeout",
+    "type": "number",
+    "ph": "90",
+    "tag": "advanced"
+  },
+{
+    "g": "Gateway",
+    "icon": "⚡",
+    "k": "GATEWAY_RESTART_DELAY",
+    "lbl": "Gateway restart delay",
+    "type": "number",
+    "ph": "5",
+    "tag": "advanced"
+  },
+{
+    "g": "Gateway",
+    "icon": "⚡",
+    "k": "GATEWAY_VERBOSE",
+    "lbl": "Verbose gateway logs",
+    "type": "toggle",
+    "ph": "false",
+    "tag": "advanced"
+  },
+{
+    "g": "Logging",
+    "icon": "⚡",
+    "k": "OPENCLAW_CONSOLE_LOG_LEVEL",
+    "lbl": "Console log level",
+    "type": "select",
+    "options": [
+      "debug",
+      "info",
+      "warn",
+      "error"
+    ],
+    "ph": "info",
+    "tag": "optional"
+  },
+{
+    "g": "Logging",
+    "icon": "⚡",
+    "k": "OPENCLAW_FILE_LOG_LEVEL",
+    "lbl": "File log level",
+    "type": "select",
+    "options": [
+      "debug",
+      "info",
+      "warn",
+      "error"
+    ],
+    "ph": "info",
+    "tag": "optional"
+  },
+{
+    "g": "Logging",
+    "icon": "⚡",
+    "k": "OPENCLAW_CONSOLE_LOG_STYLE",
+    "lbl": "Console log style",
+    "type": "select",
+    "options": [
+      "pretty",
+      "json",
+      "compact"
+    ],
+    "ph": "pretty",
+    "tag": "optional"
+  },
+{
+    "g": "Plugins",
+    "icon": "⚡",
+    "k": "BROWSER_PLUGIN_MODE",
+    "lbl": "Browser plugin mode",
+    "type": "select",
+    "options": [
+      "auto",
+      "enabled",
+      "disabled"
+    ],
+    "ph": "auto",
+    "tag": "feature"
+  },
+{
+    "g": "Plugins",
+    "icon": "⚡",
+    "k": "ACP_PLUGIN_MODE",
+    "lbl": "ACP plugin mode",
+    "type": "select",
+    "options": [
+      "auto",
+      "enabled",
+      "disabled"
+    ],
+    "ph": "auto",
+    "tag": "feature"
+  },
+{
+    "g": "Cloudflare",
+    "icon": "⚡",
+    "k": "CLOUDFLARE_PROXY_DEBUG",
+    "lbl": "Cloudflare proxy debug",
+    "type": "toggle",
+    "ph": "false",
+    "tag": "advanced"
+  },
+{
+    "g": "Cloudflare",
+    "icon": "⚡",
+    "k": "CLOUDFLARE_KEEPALIVE_ENABLED",
+    "lbl": "Enable keep-awake worker",
+    "type": "toggle",
+    "ph": "true",
+    "tag": "feature"
+  },
+{
+    "g": "Cloudflare",
+    "icon": "⚡",
+    "k": "CLOUDFLARE_PROXY_URL",
+    "lbl": "Proxy worker URL",
+    "type": "text",
+    "ph": "https://your-proxy.workers.dev",
+    "common": 1,
+    "tag": "feature"
+  },
+{
+    "g": "Cloudflare",
+    "icon": "⚡",
+    "k": "CLOUDFLARE_PROXY_SECRET",
+    "lbl": "Proxy shared secret",
+    "type": "password",
+    "tag": "credential"
+  },
+{
+    "g": "Cloudflare",
+    "icon": "⚡",
+    "k": "CLOUDFLARE_PROXY_DOMAINS",
+    "lbl": "Extra domains to proxy",
+    "type": "textarea",
+    "ph": "api.sendgrid.com,slack.com",
+    "tag": "advanced"
+  },
+{
+    "g": "Cloudflare",
+    "icon": "⚡",
+    "k": "CLOUDFLARE_WORKERS_TOKEN",
+    "lbl": "Workers API token",
+    "type": "password",
+    "common": 1,
+    "tag": "credential"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "HF_USERNAME",
+    "lbl": "Hugging Face username",
+    "type": "text",
+    "common": 1,
+    "tag": "optional"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "HF_TOKEN",
+    "lbl": "HF write token",
+    "type": "password",
+    "common": 1,
+    "tag": "credential"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "BACKUP_DATASET_NAME",
+    "lbl": "Backup dataset name",
+    "type": "text",
+    "ph": "huggingclaw-backup",
+    "common": 1,
+    "tag": "optional"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "SYNC_INTERVAL",
+    "lbl": "Sync interval (seconds)",
+    "type": "number",
+    "ph": "180",
+    "common": 1,
+    "tag": "advanced"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "JUPYTER_TOKEN",
+    "lbl": "Jupyter access token",
+    "type": "password",
+    "ph": "huggingface",
+    "common": 1,
+    "tag": "credential"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "KEEP_ALIVE_INTERVAL",
+    "lbl": "Keep-alive ping interval (seconds)",
+    "type": "number",
+    "ph": "300",
+    "common": 1,
+    "tag": "advanced"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "OPENCLAW_DISABLE_BONJOUR",
+    "lbl": "Disable Bonjour/mDNS discovery",
+    "type": "toggle",
+    "ph": "false",
+    "tag": "advanced"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "OPENCLAW_RUNTIME_VERSION",
+    "lbl": "Pin runtime version",
+    "type": "text",
+    "ph": "latest",
+    "tag": "advanced"
+  },
+{
+    "g": "Core",
+    "icon": "⚡",
+    "k": "OPENCLAW_DISPLAY_VERSION",
+    "lbl": "Display version label",
+    "type": "text",
+    "ph": "",
+    "tag": "optional"
+  },
+{
+    "g": "Integrations",
+    "icon": "🔌",
+    "k": "CLOUDFLARE_ACCOUNT_ID",
+    "lbl": "Cloudflare account ID",
+    "type": "text",
+    "ph": "account-id",
+    "tag": "feature"
+  },
+{
+    "g": "Integrations",
+    "icon": "🔌",
+    "k": "CLOUDFLARE_WORKER_NAME",
+    "lbl": "Outbound proxy worker name",
+    "type": "text",
+    "ph": "huggingclaw-proxy",
+    "tag": "feature"
+  },
+{
+    "g": "Integrations",
+    "icon": "🔌",
+    "k": "CLOUDFLARE_KEEPALIVE_URL",
+    "lbl": "Keepalive worker URL",
+    "type": "text",
+    "ph": "https://your-worker.workers.dev",
+    "tag": "feature"
+  },
+{
+    "g": "Integrations",
+    "icon": "🔌",
+    "k": "CLOUDFLARE_KEEPALIVE_WORKER_NAME",
+    "lbl": "Keepalive worker name",
+    "type": "text",
+    "ph": "huggingclaw-keepalive",
+    "tag": "feature"
+  },
+{
+    "g": "Integrations",
+    "icon": "🔌",
+    "k": "CLOUDFLARE_KEEPALIVE_CRON",
+    "lbl": "Keepalive cron schedule",
+    "type": "text",
+    "ph": "*/5 * * * *",
+    "tag": "advanced"
+  },
+{
+    "g": "Integrations",
+    "icon": "🔌",
+    "k": "TELEGRAM_API_ROOT",
+    "lbl": "Telegram API root override",
+    "type": "text",
+    "ph": "https://api.telegram.org",
+    "tag": "advanced"
+  },
+{
+    "g": "Runtime",
+    "icon": "⚙️",
+    "k": "OPENCLAW_CONFIG_WATCH_INTERVAL",
+    "lbl": "Config watch interval (seconds)",
+    "type": "number",
+    "ph": "1",
+    "tag": "advanced"
+  },
+{
+    "g": "Runtime",
+    "icon": "⚙️",
+    "k": "OPENCLAW_CONFIG_SETTLE_SECONDS",
+    "lbl": "Config settle window (seconds)",
+    "type": "number",
+    "ph": "3",
+    "tag": "advanced"
+  },
+{
+    "g": "Runtime",
+    "icon": "⚙️",
+    "k": "JUPYTER_ROOT_DIR",
+    "lbl": "Jupyter root directory",
+    "type": "text",
+    "ph": "/home/node",
+    "tag": "advanced"
+  },
+{
+    "g": "Backup",
+    "icon": "💾",
+    "k": "WORKSPACE_GIT_USER",
+    "lbl": "Workspace git author email",
+    "type": "text",
+    "ph": "openclaw@example.com",
+    "tag": "optional"
+  },
+{
+    "g": "Backup",
+    "icon": "💾",
+    "k": "WORKSPACE_GIT_NAME",
+    "lbl": "Workspace git author name",
+    "type": "text",
+    "ph": "OpenClaw Bot",
+    "tag": "optional"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "ANTHROPIC_API_KEY",
+    "lbl": "Anthropic (Claude)",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "OPENAI_API_KEY",
+    "lbl": "OpenAI (GPT)",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "GOOGLE_API_KEY",
+    "lbl": "Google AI Studio",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "GEMINI_API_KEY",
+    "lbl": "Google Gemini",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "DEEPSEEK_API_KEY",
+    "lbl": "DeepSeek",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "OPENROUTER_API_KEY",
+    "lbl": "OpenRouter",
+    "type": "password",
+    "common": 1,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "OPENCODE_API_KEY",
+    "lbl": "OpenCode",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "KILOCODE_API_KEY",
+    "lbl": "KiloCode",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "ZAI_API_KEY",
+    "lbl": "Z.ai / GLM",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "MOONSHOT_API_KEY",
+    "lbl": "Moonshot / Kimi",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "MINIMAX_API_KEY",
+    "lbl": "MiniMax",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "XIAOMI_API_KEY",
+    "lbl": "Xiaomi / MiMo",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "VOLCANO_ENGINE_API_KEY",
+    "lbl": "Volcengine / Doubao",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "BYTEPLUS_API_KEY",
+    "lbl": "BytePlus",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "MISTRAL_API_KEY",
+    "lbl": "Mistral",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "XAI_API_KEY",
+    "lbl": "xAI (Grok)",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "NVIDIA_API_KEY",
+    "lbl": "NVIDIA",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "GROQ_API_KEY",
+    "lbl": "Groq",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "COHERE_API_KEY",
+    "lbl": "Cohere",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "TOGETHER_API_KEY",
+    "lbl": "Together AI",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "CEREBRAS_API_KEY",
+    "lbl": "Cerebras",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "QIANFAN_API_KEY",
+    "lbl": "Qianfan",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "MODELSTUDIO_API_KEY",
+    "lbl": "ModelStudio",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "KIMI_API_KEY",
+    "lbl": "Kimi",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "HUGGINGFACE_HUB_TOKEN",
+    "lbl": "Hugging Face token",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "COPILOT_GITHUB_TOKEN",
+    "lbl": "GitHub Copilot",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "VENICE_API_KEY",
+    "lbl": "Venice",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "SYNTHETIC_API_KEY",
+    "lbl": "Synthetic",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "AI_GATEWAY_API_KEY",
+    "lbl": "AI Gateway",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Provider Keys",
+    "icon": "🔑",
+    "k": "CLOUDFLARE_API_TOKEN",
+    "lbl": "Cloudflare API token",
+    "type": "password",
+    "common": 0,
+    "tag": "credential"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "ANTHROPIC_API_KEYS",
+    "lbl": "Anthropic pool (comma-sep)",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "OPENAI_API_KEYS",
+    "lbl": "OpenAI pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "GEMINI_API_KEYS",
+    "lbl": "Gemini pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "GOOGLE_API_KEYS",
+    "lbl": "Google pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "DEEPSEEK_API_KEYS",
+    "lbl": "DeepSeek pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "OPENROUTER_API_KEYS",
+    "lbl": "OpenRouter pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "OPENCODE_API_KEYS",
+    "lbl": "OpenCode pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "KILOCODE_API_KEYS",
+    "lbl": "KiloCode pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "ZAI_API_KEYS",
+    "lbl": "Z.ai / GLM pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "MOONSHOT_API_KEYS",
+    "lbl": "Moonshot / Kimi pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "MINIMAX_API_KEYS",
+    "lbl": "MiniMax pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "XIAOMI_API_KEYS",
+    "lbl": "Xiaomi pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "VOLCANO_ENGINE_API_KEYS",
+    "lbl": "Volcano Engine pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "BYTEPLUS_API_KEYS",
+    "lbl": "BytePlus pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "MISTRAL_API_KEYS",
+    "lbl": "Mistral pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "XAI_API_KEYS",
+    "lbl": "xAI pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "NVIDIA_API_KEYS",
+    "lbl": "NVIDIA pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "GROQ_API_KEYS",
+    "lbl": "Groq pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "COHERE_API_KEYS",
+    "lbl": "Cohere pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "TOGETHER_API_KEYS",
+    "lbl": "Together pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "CEREBRAS_API_KEYS",
+    "lbl": "Cerebras pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+{
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "HUGGINGFACE_HUB_TOKENS",
+    "lbl": "HF token pool",
+    "type": "text"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "OPENAI_MODELS",
+    "lbl": "Visible OpenAI models",
+    "type": "model_list",
+    "options_key": "OPENAI_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "ANTHROPIC_MODELS",
+    "lbl": "Visible Anthropic models",
+    "type": "model_list",
+    "options_key": "ANTHROPIC_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "GEMINI_MODELS",
+    "lbl": "Visible Gemini models",
+    "type": "model_list",
+    "options_key": "GEMINI_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "DEEPSEEK_MODELS",
+    "lbl": "Visible DeepSeek models",
+    "type": "model_list",
+    "options_key": "DEEPSEEK_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "OPENROUTER_MODELS",
+    "lbl": "Visible OpenRouter models",
+    "type": "model_list",
+    "options_key": "OPENROUTER_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "GROQ_MODELS",
+    "lbl": "Visible Groq models",
+    "type": "model_list",
+    "options_key": "GROQ_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "MISTRAL_MODELS",
+    "lbl": "Visible Mistral models",
+    "type": "model_list",
+    "options_key": "MISTRAL_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "XAI_MODELS",
+    "lbl": "Visible xAI models",
+    "type": "model_list",
+    "options_key": "XAI_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "COHERE_MODELS",
+    "lbl": "Visible Cohere models",
+    "type": "model_list",
+    "options_key": "COHERE_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "TOGETHER_MODELS",
+    "lbl": "Visible Together models",
+    "type": "model_list",
+    "options_key": "TOGETHER_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "CEREBRAS_MODELS",
+    "lbl": "Visible Cerebras models",
+    "type": "model_list",
+    "options_key": "CEREBRAS_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "NVIDIA_MODELS",
+    "lbl": "Visible NVIDIA models",
+    "type": "model_list",
+    "options_key": "NVIDIA_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "KILOCODE_MODELS",
+    "lbl": "Visible KiloCode models",
+    "type": "model_list",
+    "options_key": "KILOCODE_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "OPENCODE_MODELS",
+    "lbl": "Visible OpenCode models",
+    "type": "model_list",
+    "options_key": "OPENCODE_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "ZAI_MODELS",
+    "lbl": "Visible Z.ai / GLM models",
+    "type": "model_list",
+    "options_key": "ZAI_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "MOONSHOT_MODELS",
+    "lbl": "Visible Moonshot / Kimi models",
+    "type": "model_list",
+    "options_key": "MOONSHOT_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "MINIMAX_MODELS",
+    "lbl": "Visible MiniMax models",
+    "type": "model_list",
+    "options_key": "MINIMAX_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "XIAOMI_MODELS",
+    "lbl": "Visible Xiaomi models",
+    "type": "model_list",
+    "options_key": "XIAOMI_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "VOLCANO_ENGINE_MODELS",
+    "lbl": "Visible Volcano Engine models",
+    "type": "model_list",
+    "options_key": "VOLCANO_ENGINE_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "BYTEPLUS_MODELS",
+    "lbl": "Visible BytePlus models",
+    "type": "model_list",
+    "options_key": "BYTEPLUS_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "QIANFAN_MODELS",
+    "lbl": "Visible Qianfan models",
+    "type": "model_list",
+    "options_key": "QIANFAN_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "MODELSTUDIO_MODELS",
+    "lbl": "Visible ModelStudio models",
+    "type": "model_list",
+    "options_key": "MODELSTUDIO_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "KIMI_MODELS",
+    "lbl": "Visible Kimi models",
+    "type": "model_list",
+    "options_key": "KIMI_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "HUGGINGFACE_MODELS",
+    "lbl": "Visible Hugging Face models",
+    "type": "model_list",
+    "options_key": "HUGGINGFACE_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "GITHUB_COPILOT_MODELS",
+    "lbl": "Visible GitHub Copilot models",
+    "type": "model_list",
+    "options_key": "GITHUB_COPILOT_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+{
+    "g": "Custom Provider",
+    "icon": "🔌",
+    "k": "CUSTOM_PROVIDER_NAME",
+    "lbl": "Provider display name",
+    "type": "text",
+    "tag": "feature"
+  },
+{
+    "g": "Custom Provider",
+    "icon": "🔌",
+    "k": "CUSTOM_BASE_URL",
+    "lbl": "OpenAI-compatible base URL",
+    "type": "text",
+    "tag": "feature"
+  },
+{
+    "g": "Custom Provider",
+    "icon": "🔌",
+    "k": "CUSTOM_MODEL_ID",
+    "lbl": "Model ID",
+    "type": "model",
+    "options_key": "LLM_MODEL",
+    "ph": "custom model id",
+    "tag": "feature"
+  },
+{
+    "g": "Custom Provider",
+    "icon": "🔌",
+    "k": "CUSTOM_MODEL_NAME",
+    "lbl": "Friendly model name",
+    "type": "text",
+    "tag": "feature"
+  },
+{
+    "g": "Custom Provider",
+    "icon": "🔌",
+    "k": "CUSTOM_API_KEY",
+    "lbl": "Provider API key",
+    "type": "password",
+    "tag": "credential"
+  },
+{
+    "g": "Custom Provider",
+    "icon": "🔌",
+    "k": "CUSTOM_API_TYPE",
+    "lbl": "API type",
+    "type": "select",
+    "options": [
+      "openai-completions",
+      "openai-chat-completions",
+      "anthropic",
+      "gemini",
+      "openrouter"
+    ],
+    "ph": "openai-completions",
+    "tag": "feature"
+  },
+{
+    "g": "Custom Provider",
+    "icon": "🔌",
+    "k": "CUSTOM_CONTEXT_WINDOW",
+    "lbl": "Context window",
+    "type": "number",
+    "ph": "128000",
+    "tag": "advanced"
+  },
+{
+    "g": "Custom Provider",
+    "icon": "🔌",
+    "k": "CUSTOM_MAX_TOKENS",
+    "lbl": "Max output tokens",
+    "type": "number",
+    "ph": "500",
+    "tag": "advanced"
+  },
+{
+    "g": "Telegram",
+    "icon": "✈️",
+    "k": "TELEGRAM_BOT_TOKEN",
+    "lbl": "Bot token from BotFather",
+    "type": "password",
+    "common": 1,
+    "tag": "credential"
+  },
+{
+    "g": "Telegram",
+    "icon": "✈️",
+    "k": "TELEGRAM_ALLOWED_USERS",
+    "lbl": "Allowed user IDs (comma)",
+    "type": "text",
+    "ph": "123456789,987654321",
+    "common": 1,
+    "tag": "critical"
+  },
+{
+    "g": "Telegram",
+    "icon": "✈️",
+    "k": "TELEGRAM_USER_ID",
+    "lbl": "Single Telegram user ID",
+    "type": "text",
+    "tag": "optional"
+  },
+{
+    "g": "Telegram",
+    "icon": "✈️",
+    "k": "TELEGRAM_USER_IDS",
+    "lbl": "Telegram user IDs (comma)",
+    "type": "text",
+    "tag": "optional"
+  },
+{
+    "g": "Deployment",
+    "icon": "🧭",
+    "k": "APP_BASE",
+    "lbl": "Public app base path",
+    "type": "text",
+    "ph": "/app",
+    "tag": "advanced"
+  },
+{
+    "g": "Deployment",
+    "icon": "🧭",
+    "k": "BACKUP_DATASET",
+    "lbl": "Backup dataset alias",
+    "type": "text",
+    "ph": "huggingclaw-backup",
+    "tag": "optional"
+  },
+{
+    "g": "Deployment",
+    "icon": "🧭",
+    "k": "SPACE_AUTHOR_NAME",
+    "lbl": "HF Space author name",
+    "type": "text",
+    "tag": "optional"
+  },
+{
+    "g": "Deployment",
+    "icon": "🧭",
+    "k": "SPACE_HOST",
+    "lbl": "HF Space host domain",
+    "type": "text",
+    "tag": "optional"
+  },
+{
+    "g": "Deployment",
+    "icon": "🧭",
+    "k": "PORT",
+    "lbl": "Public dashboard port",
+    "type": "number",
+    "ph": "7861",
+    "tag": "advanced"
+  },
+{
+    "g": "Deployment",
+    "icon": "🧭",
+    "k": "GATEWAY_PORT",
+    "lbl": "OpenClaw internal port",
+    "type": "number",
+    "ph": "7860",
+    "tag": "advanced"
+  },
+{
+    "g": "Deployment",
+    "icon": "🧭",
+    "k": "JUPYTER_PORT",
+    "lbl": "Jupyter internal port",
+    "type": "number",
+    "ph": "8888",
+    "tag": "advanced"
+  },
+{
+    "g": "Deployment",
+    "icon": "🧭",
+    "k": "JUPYTER_BASE",
+    "lbl": "Jupyter public base path",
+    "type": "text",
+    "ph": "/terminal",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "AI_GATEWAY_API_KEYS",
+    "lbl": "AI Gateway pool (comma-sep)",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "COPILOT_GITHUB_TOKENS",
+    "lbl": "GitHub Copilot token pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "KIMI_API_KEYS",
+    "lbl": "Kimi pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "MODELSTUDIO_API_KEYS",
+    "lbl": "ModelStudio pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "QIANFAN_API_KEYS",
+    "lbl": "Qianfan pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "SYNTHETIC_API_KEYS",
+    "lbl": "Synthetic pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "VENICE_API_KEYS",
+    "lbl": "Venice pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "VENICE_MODELS",
+    "lbl": "Visible Venice models",
+    "type": "model_list",
+    "options_key": "VENICE_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+  {
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "SYNTHETIC_MODELS",
+    "lbl": "Visible Synthetic models",
+    "type": "model_list",
+    "options_key": "SYNTHETIC_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  }
+]
+
+const ICONS = {
+  All:'🏠', Core:'⚡', Startup:'🚀', DevData:'🧪', WhatsApp:'💬',
+  Cloudflare:'☁️', Gateway:'🔀', Logging:'📝', Network:'🌐', Plugins:'🔌',
+  Deployment:'🧭', 'Provider Keys':'🔑', 'Rotation Pools':'🔄',
+  'Model Lists':'📋', 'Custom Provider':'🧩', Telegram:'✈️',
+  Backup:'💾', Runtime:'⚙️', Integrations:'🔗', 'Custom Env':'🔧'
+};
+const $ = id => document.getElementById(id);
+const esc = s => String(s ?? '').replace(/[&<>"']/g, c => ({
+  '&': '&amp;',
+  '<': '&lt;',
+  '>': '&gt;',
+  '"': '&quot;',
+  "'": '&#39;'
+}[c]));
+const safeKey = k => /^[A-Z_][A-Z0-9_]*$/.test(k) && !['HUGGINGCLAW_ENV_BUNDLE', 'ENV_BUNDLE'].includes(k);
+
+function encodeBundle(obj) {
+  const j = JSON.stringify(obj);
+  let b = '';
+  for (const x of new TextEncoder().encode(j)) b += String.fromCharCode(x);
+  return btoa(b).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+}
+
+function decodeBundle(raw) {
+  try {
+    raw = String(raw || '').trim();
+    if (!raw) return {};
+
+    if (raw.includes('HUGGINGCLAW_ENV_BUNDLE=')) {
+      raw = raw.split('HUGGINGCLAW_ENV_BUNDLE=').pop().trim();
+    }
+
+    if (
+      (raw.startsWith('"') && raw.endsWith('"')) ||
+      (raw.startsWith("'") && raw.endsWith("'"))
+    ) {
+      raw = raw.slice(1, -1);
+    }
+
+    if (raw.startsWith('{')) return JSON.parse(raw);
+
+    const p = raw + '='.repeat((4 - raw.length % 4) % 4);
+    const b = atob(p.replace(/-/g, '+').replace(/_/g, '/'));
+    const bytes = Uint8Array.from(b, c => c.charCodeAt(0));
+    return JSON.parse(new TextDecoder().decode(bytes));
+  } catch {
+    return {};
+  }
+}
+
+function parseEnv(text) {
+  text = String(text || '').trim();
+  if (!text) return {};
+
+  if (
+    text.startsWith('{') ||
+    /^[A-Za-z0-9_-]{20,}$/.test(text) ||
+    text.includes('HUGGINGCLAW_ENV_BUNDLE=')
+  ) {
+    return decodeBundle(text);
+  }
+
+  const out = {};
+  for (let line of text.split(/\r?\n/)) {
+    line = line.trim();
+    if (!line || line.startsWith('#')) continue;
+    if (line.startsWith('export ')) line = line.slice(7).trim();
+    const i = line.indexOf('=');
+    if (i < 1) continue;
+
+    const key = line.slice(0, i).trim();
+    let val = line.slice(i + 1).trim();
+
+    if (
+      (val.startsWith('"') && val.endsWith('"')) ||
+      (val.startsWith("'") && val.endsWith("'"))
+    ) {
+      val = val.slice(1, -1);
+    }
+
+    if (safeKey(key)) out[key] = val;
+  }
+  return out;
+}
+
+function showToast(msg = 'Copied!') {
+  const t = $('toast');
+  t.textContent = msg;
+  t.classList.add('show');
+  setTimeout(() => t.classList.remove('show'), 1500);
+}
+
+let activeGroup = 'All';
+let customCount = 0;
+const GROUPS = ['All', ...[...new Set(FIELDS.map(f => f.g))], 'Custom Env'];
+
+function renderSidebar() {
+  const sb = $('sidebar');
+  sb.innerHTML = '<div class="sb-label">Groups</div>';
+  GROUPS.forEach(g => {
+    const btn = document.createElement('button');
+    btn.className = 'nav-btn' + (activeGroup === g ? ' active' : '');
+    btn.dataset.group = g;
+    const id = 'nc_' + g.replace(/\W/g, '_');
+    btn.innerHTML = `<span class="nav-icon">${ICONS[g] || '📁'}</span><span class="nav-label">${esc(g)}</span><span class="nav-count" id="${id}">0</span>`;
+    btn.onclick = () => {
+      activeGroup = g;
+      renderSidebar();
+      filter();
+    };
+    sb.appendChild(btn);
+  });
+}
+
+function renderOptionsHTML(field) {
+  const src = field.options || MODEL_CATALOGS[field.options_key] || [];
+
+  if (field.options_key === 'LLM_MODEL') {
+    const groups = MODEL_CATALOGS.LLM_MODEL || {};
+    return Object.entries(groups).map(([group, items]) => {
+      const options = items.map(v => `<option value="${esc(v)}">${esc(v)}</option>`).join('');
+      return `<optgroup label="${esc(group)}">${options}</optgroup>`;
+    }).join('');
+  }
+
+  if (Array.isArray(src)) {
+    return src.map(v => `<option value="${esc(v)}">${esc(v)}</option>`).join('');
+  }
+
+  return '';
+}
+
+function defaultValueFor(field) {
+  if (field.type === 'toggle') {
+    const on = String(field.ph ?? '').toLowerCase();
+    return ['1', 'true', 'yes', 'on', 'enabled'].includes(on) ? 'true' : 'false';
+  }
+  if (field.type === 'select') return String(field.ph ?? '');
+  return '';
+}
+
+function valueControlHTML(field) {
+  const key = esc(field.k);
+  const placeholder = esc(field.ph || field.lbl || '');
+  const isSecret = !!field.secret;
+  const isTextarea = field.type === 'textarea' || field.type === 'model_list';
+  const hasPicker = !!field.options_key || Array.isArray(field.options);
+  const inputType = isSecret ? 'password' : (field.type === 'number' ? 'number' : 'text');
+
+  let control = '';
+  if (field.type === 'toggle') {
+    const initial = defaultValueFor(field);
+    control = `
+      <div class="toggle-shell" data-toggle-row="1" data-field="${key}">
+        <input type="hidden" data-key="${key}" value="${initial}">
+        <button type="button" class="tog ${initial === 'true' ? 'on' : ''}" data-toggle="${key}">${initial === 'true' ? 'On' : 'Off'}</button>
+      </div>`;
+  } else if (isTextarea) {
+    control = `<textarea data-key="${key}" placeholder="${placeholder}" spellcheck="false"></textarea>`;
+  } else {
+    control = `<input type="${inputType}" data-key="${key}" placeholder="${placeholder}" spellcheck="false"/>`;
+  }
+
+  if (!hasPicker) return control;
+
+  const pickerMode = field.type === 'model_list' ? 'multi' : 'single';
+  const pickerLabel = field.type === 'model_list' ? 'Add model…' : 'Choose preset…';
+  return `
+    <div class="picker-shell" data-picker-shell="${key}" data-picker-mode="${pickerMode}">
+      <div class="picker-row">
+        <select class="picker-select" data-pick-for="${key}" aria-label="${esc(field.lbl || field.k)} presets">
+          <option value="">${esc(pickerLabel)}</option>
+          ${renderOptionsHTML(field)}
+          <option value="__custom__">Custom…</option>
+        </select>
+        <button type="button" class="mini-btn" data-custom-for="${key}">+ Custom</button>
+        <button type="button" class="mini-btn" data-clear-for="${key}">Clear</button>
+      </div>
+      ${control}
+    </div>`;
+
+  return control;
+}
+
+function cardHTML(f) {
+  const TAG_META = {
+    critical:   { cls: 'badge-critical',   lbl: 'critical'   },
+    credential: { cls: 'badge-credential', lbl: 'credential' },
+    feature:    { cls: 'badge-feature',    lbl: 'feature'    },
+    optional:   { cls: 'badge-optional',   lbl: 'optional'   },
+    advanced:   { cls: 'badge-advanced',   lbl: 'advanced'   },
+    build:      { cls: 'badge-build',      lbl: 'build-time' },
+  };
+  const tm = TAG_META[f.tag] || TAG_META.optional;
+  const badge = `<span class="badge ${tm.cls}">${tm.lbl}</span>`;
+
+  return `<div class="env-card" data-row data-group="${esc(f.g)}" data-search="${esc((f.g + ' ' + f.k + ' ' + (f.lbl || '') + ' ' + (f.tag || '')).toLowerCase())}">
+    <div class="card-top">
+      <input type="checkbox" class="card-check" data-check="${esc(f.k)}" ${f.common ? 'data-common="1"' : ''}>
+      <div class="card-info">
+        <div class="card-key">${esc(f.k)}</div>
+        <div class="card-lbl">${esc(f.lbl || '')}</div>
+      </div>
+      ${badge}
+    </div>
+    <div class="card-input">${valueControlHTML(f)}</div>
+  </div>`;
+}
+
+function addCustomRow(key = '', val = '', enabled = false) {
+  const id = customCount++;
+  const row = document.createElement('div');
+  row.className = 'custom-row';
+  row.dataset.customRow = id;
+  row.dataset.enabled = enabled ? '1' : '0';
+
+  row.innerHTML = `
+    <input data-ck="${id}" placeholder="CUSTOM_ENV_NAME" value="${esc(key)}">
+    <input data-cv="${id}" placeholder="value" value="${esc(val)}">
+    <button class="tog${enabled ? ' on' : ''}">${enabled ? 'On' : 'Off'}</button>
+  `;
+
+  $('customRows').appendChild(row);
+
+  row.querySelectorAll('input').forEach(el => el.addEventListener('input', refresh));
+  row.querySelector('button').onclick = () => {
+    const on = row.dataset.enabled !== '1';
+    row.dataset.enabled = on ? '1' : '0';
+    row.querySelector('button').textContent = on ? 'On' : 'Off';
+    row.querySelector('button').classList.toggle('on', on);
+    refresh();
+  };
+}
+
+function getFieldValueInput(key) {
+  return document.querySelector(`[data-key="${CSS.escape(key)}"]`);
+}
+
+function setFieldValue(key, value) {
+  const el = getFieldValueInput(key);
+  if (!el) return;
+  el.value = value ?? '';
+}
+
+function appendCsvValue(existing, next) {
+  const parts = String(existing || '').split(',').map(s => s.trim()).filter(Boolean);
+  const val = String(next || '').trim();
+  if (!val) return parts.join(', ');
+  if (!parts.includes(val)) parts.push(val);
+  return parts.join(', ');
+}
+
+function collect() {
+  const obj = {};
+  document.querySelectorAll('[data-key]').forEach(el => {
+    const key = el.dataset.key;
+    if (!key || !safeKey(key)) return;
+    // Only include if the card's checkbox is ticked
+    const chk = document.querySelector(`[data-check="${CSS.escape(key)}"]`);
+    if (!chk || !chk.checked) return;
+    const val = String(el.value ?? '').trim();
+    if (val) obj[key] = val;
+  });
+
+  document.querySelectorAll('[data-custom-row]').forEach(row => {
+    const id = row.dataset.customRow;
+    const key = (row.querySelector(`[data-ck="${id}"]`)?.value || '').trim();
+    const val = (row.querySelector(`[data-cv="${id}"]`)?.value || '').trim();
+    if (row.dataset.enabled === '1' && safeKey(key) && val) obj[key] = val;
+  });
+
+  return obj;
+}
+
+function refresh() {
+  const obj = collect();
+  const keys = Object.keys(obj).sort();
+  const bundle = keys.length ? encodeBundle(Object.fromEntries(keys.map(k => [k, obj[k]]))) : '';
+
+  $('bundleOut').value = bundle;
+  $('envLineOut').value = bundle ? `HUGGINGCLAW_ENV_BUNDLE=${bundle}` : '';
+
+  const s = $('summary');
+  if (keys.length) {
+    s.innerHTML = `<strong>${keys.length}</strong> variable${keys.length > 1 ? 's' : ''} selected<div class="sum-keys">${keys.map(k => `<span class="sum-key">${esc(k)}</span>`).join('')}</div>`;
+  } else {
+    s.innerHTML = 'No variables selected yet.';
+  }
+  updateCounts();
+}
+
+function markSelected() {
+  document.querySelectorAll('[data-row]').forEach(r => r.classList.toggle('selected', !!r.querySelector('[data-check]')?.checked));
+}
+
+function updateCounts() {
+  document.querySelectorAll('[id^="nc_"]').forEach(el => el.textContent = '0');
+  const byGrp = {};
+  document.querySelectorAll('[data-check]:checked').forEach(ch => {
+    const g = ch.closest('[data-row]')?.dataset.group;
+    if (g) byGrp[g] = (byGrp[g] || 0) + 1;
+  });
+  const custOn = document.querySelectorAll('[data-custom-row][data-enabled="1"]').length;
+  const total = Object.values(byGrp).reduce((a, b) => a + b, 0) + custOn;
+  const allEl = document.getElementById('nc_All'); if (allEl) allEl.textContent = total;
+  Object.entries(byGrp).forEach(([g, c]) => {
+    const el = document.getElementById('nc_' + g.replace(/\W/g, '_'));
+    if (el) el.textContent = c;
+  });
+  const custEl = document.getElementById('nc_Custom_Env'); if (custEl) custEl.textContent = custOn;
+}
+
+function filter() {
+  const q = $('search').value.trim().toLowerCase();
+  document.querySelectorAll('.sec[data-section]').forEach(sec => {
+    const grp = sec.dataset.section;
+    const gMatch = activeGroup === 'All' || activeGroup === grp;
+    if (!gMatch) { sec.classList.add('sec-hidden'); return; }
+    let any = false;
+    sec.querySelectorAll('[data-row]').forEach(card => {
+      const m = !q || card.dataset.search.includes(q);
+      card.classList.toggle('hidden', !m);
+      if (m) any = true;
+    });
+    sec.classList.toggle('sec-hidden', !any);
+  });
+  const cs = $('customSec');
+  if (cs) cs.style.display = (activeGroup === 'All' || activeGroup === 'Custom Env') ? '' : 'none';
+  document.querySelectorAll('.nav-btn').forEach(b => b.classList.toggle('active', b.dataset.group === activeGroup));
+}
+
+function clearForm() {
+  document.querySelectorAll('[data-check]').forEach(c => c.checked = false);
+  document.querySelectorAll('[data-key]').forEach(el => {
+    if (el.closest('[data-toggle-row]')) {
+      el.value = 'false';
+      const btn = el.closest('.toggle-shell')?.querySelector('[data-toggle]');
+      if (btn) {
+        btn.textContent = 'Off';
+        btn.classList.remove('on');
+      }
+      return;
+    }
+    el.value = '';
+  });
+  $('customRows').innerHTML = '';
+  customCount = 0;
+  addCustomRow();
+}
+
+function applyObj(obj, replace = false) {
+  if (replace) clearForm();
+  for (const [key, val] of Object.entries(obj || {})) {
+    if (!safeKey(key)) continue;
+    const inp = getFieldValueInput(key);
+    const chk = document.querySelector(`[data-check="${CSS.escape(key)}"]`);
+    if (inp && chk) {
+      inp.value = val;
+      chk.checked = true;
+      const btn = inp.closest('[data-toggle-row]')?.querySelector('[data-toggle]');
+      if (btn) {
+        const on = String(val).trim().toLowerCase() === 'true';
+        btn.textContent = on ? 'On' : 'Off';
+        btn.classList.toggle('on', on);
+        inp.value = on ? 'true' : 'false';
+      }
+    } else {
+      addCustomRow(key, val, true);
+    }
+  }
+  markSelected(); filter(); refresh();
+}
+
+function autoCheck(key) {
+  const chk = document.querySelector(`[data-check="${CSS.escape(key)}"]`);
+  if (chk && !chk.checked) {
+    chk.checked = true;
+    markSelected();
+  }
+}
+
+function handlePickerChange(sel) {
+  const key = sel.dataset.pickFor;
+  const mode = sel.closest('[data-picker-shell]')?.dataset.pickerMode || 'single';
+  const value = sel.value;
+  if (!key || !value) return;
+  if (value === '__custom__') {
+    sel.value = '';
+    return;
+  }
+  const inp = getFieldValueInput(key);
+  if (!inp) return;
+
+  if (mode === 'multi') {
+    inp.value = appendCsvValue(inp.value, value);
+  } else {
+    inp.value = value;
+  }
+  sel.value = '';
+  autoCheck(key);
+  refresh();
+}
+
+function promptCustomModel(btn) {
+  const key = btn.dataset.customFor;
+  const mode = btn.closest('[data-picker-shell]')?.dataset.pickerMode || 'single';
+  const inp = getFieldValueInput(key);
+  if (!inp) return;
+  const message = mode === 'multi'
+    ? 'Enter one or more custom model IDs separated by commas'
+    : 'Enter a custom model ID';
+  const initial = '';
+  const text = prompt(message, initial);
+  if (text === null) return;
+  const val = String(text).trim();
+  if (!val) return;
+  if (mode === 'multi') {
+    const vals = val.split(',').map(s => s.trim()).filter(Boolean);
+    let out = inp.value || '';
+    for (const v of vals) out = appendCsvValue(out, v);
+    inp.value = out;
+  } else {
+    inp.value = val;
+  }
+  autoCheck(key);
+  refresh();
+}
+
+function resetPickerField(btn) {
+  const key = btn.dataset.clearFor;
+  const inp = getFieldValueInput(key);
+  if (!inp) return;
+  if (inp.closest('[data-toggle-row]')) {
+    inp.value = 'false';
+    const toggleBtn = inp.closest('.toggle-shell')?.querySelector('[data-toggle]');
+    if (toggleBtn) {
+      toggleBtn.textContent = 'Off';
+      toggleBtn.classList.remove('on');
+    }
+  } else {
+    inp.value = '';
+  }
+  refresh();
+}
+
+function toggleField(key) {
+  const inp = getFieldValueInput(key);
+  if (!inp) return;
+  const on = String(inp.value || '').trim().toLowerCase() !== 'true';
+  inp.value = on ? 'true' : 'false';
+  const btn = inp.closest('.toggle-shell')?.querySelector('[data-toggle]');
+  if (btn) {
+    btn.textContent = on ? 'On' : 'Off';
+    btn.classList.toggle('on', on);
+  }
+  // Auto-check when turned on; uncheck when turned off
+  const chk = document.querySelector(`[data-check="${CSS.escape(key)}"]`);
+  if (chk) {
+    chk.checked = on;
+    markSelected();
+  }
+  refresh();
+}
+
+function bindFieldEvents() {
+  document.querySelectorAll('[data-check]').forEach(el => el.addEventListener('change', () => { markSelected(); refresh(); }));
+  document.querySelectorAll('[data-key]').forEach(el => el.addEventListener('input', refresh));
+  document.querySelectorAll('[data-toggle]').forEach(btn => btn.addEventListener('click', () => toggleField(btn.dataset.toggle)));
+  document.querySelectorAll('[data-pick-for]').forEach(sel => sel.addEventListener('change', () => handlePickerChange(sel)));
+  document.querySelectorAll('[data-custom-for]').forEach(btn => btn.addEventListener('click', () => promptCustomModel(btn)));
+  document.querySelectorAll('[data-clear-for]').forEach(btn => btn.addEventListener('click', () => resetPickerField(btn)));
+}
+
+function renderSections() {
+  const grouped = {};
+  FIELDS.forEach(f => { (grouped[f.g] ||= []).push(f); });
+
+  const wrap = $('sections');
+  wrap.innerHTML = '';
+  Object.entries(grouped).forEach(([grp, items]) => {
+    const sec = document.createElement('div');
+    sec.className = 'sec';
+    sec.dataset.section = grp;
+    sec.innerHTML = `
+      <div class="sec-header">
+        <span class="sec-icon">${ICONS[grp] || '📁'}</span>
+        <span class="sec-title">${esc(grp)}</span>
+        <span class="sec-count">${items.length}</span>
+        <div class="sec-line"></div>
+      </div>
+      <div class="cards">${items.map(cardHTML).join('')}</div>`;
+    wrap.appendChild(sec);
+  });
+  bindFieldEvents();
+}
+
+function copyText(text) {
+  return navigator.clipboard.writeText(text).then(
+    () => showToast('Copied ✓'),
+    () => {
+      const ta = document.createElement('textarea');
+      ta.value = text;
+      ta.style.position = 'fixed';
+      ta.style.left = '-9999px';
+      document.body.appendChild(ta);
+      ta.select();
+      document.execCommand('copy');
+      ta.remove();
+      showToast('Copied ✓');
+    }
+  );
+}
+
+// ── Init ──
+renderSidebar();
+renderSections();
+addCustomRow();
+filter();
+refresh();
+
+// ── Events ──
+$('search').oninput = filter;
+$('selectCommon').onclick = () => {
+  document.querySelectorAll('[data-common="1"]').forEach(c => c.checked = true);
+  markSelected();
+  refresh();
+};
+$('selectVisible').onclick = () => {
+  document.querySelectorAll('.sec:not(.sec-hidden) [data-row]:not(.hidden) [data-check]').forEach(c => c.checked = true);
+  markSelected();
+  refresh();
+};
+$('clearAll').onclick = () => {
+  clearForm();
+  markSelected();
+  filter();
+  refresh();
+};
+$('applyImport').onclick = () => {
+  try {
+    applyObj(parseEnv($('importText').value), true);
+    showToast('Imported ✓');
+  } catch (e) {
+    showToast('Import failed');
+    alert(e.message);
+  }
+};
+
+// Auto-import: paste karo aur turant parse + apply ho jaata hai
+$('importText').addEventListener('paste', () => {
+  setTimeout(() => {
+    try {
+      const val = $('importText').value.trim();
+      if (!val) return;
+      applyObj(parseEnv(val), true);
+      showToast('Auto-imported ✓');
+    } catch (e) {
+      showToast('Import failed');
+    }
+  }, 0);
+});
+
+// Live typing: jaise jaise type karo env format mein, bundle banta jaata hai
+$('importText').addEventListener('input', () => {
+  const val = $('importText').value.trim();
+  if (!val) return;
+  // Sirf agar valid env/bundle format lag raha ho tabhi auto-apply
+  const looksLikeEnv = val.includes('=') || val.startsWith('{') || /^[A-Za-z0-9_\-]{20,}$/.test(val);
+  if (looksLikeEnv) {
+    try {
+      applyObj(parseEnv(val), true);
+    } catch (e) { /* silent — user abhi type kar raha hai */ }
+  }
+});
+$('addCustom').onclick = () => addCustomRow();
+$('applyBundle').onclick = () => {
+  try {
+    applyObj(decodeBundle($('bundleOut').value), true);
+    showToast('Bundle applied ✓');
+  } catch (e) {
+    showToast('Invalid bundle');
+  }
+};
+$('copyBundle').onclick = () => copyText($('bundleOut').value);
+$('copyEnvLine').onclick = () => copyText($('envLineOut').value);
+$('copyJson').onclick = () => copyText(JSON.stringify(collect(), null, 2));

health-server.js

@@ -1,58 +1,207 @@
-// Single public entrypoint for HF Spaces: local dashboard + reverse proxy to OpenClaw.
+// Single public entrypoint for HF Spaces: dashboard + reverse proxy to OpenClaw + JupyterLab.
 const http = require("http");
+const https = require("https");
 const fs = require("fs");
 const net = require("net");
 
-const PORT = 7861;
-const GATEWAY_PORT = 7860;
+function isTrue(value) {
+  return /^(true|1|yes|on)$/i.test(String(value || "").trim());
+}
+function normalizeBase(value, fallback) {
+  const raw = String(value || fallback || "").trim() || fallback;
+  if (!raw) return fallback;
+  const base = raw.startsWith("/") ? raw : `/${raw}`;
+  return base.replace(/\/+$/, "") || fallback;
+}
+
+const PORT = Number.parseInt(process.env.PORT || "7861", 10);
+const GATEWAY_PORT = Number.parseInt(process.env.GATEWAY_PORT || "7860", 10);
 const GATEWAY_HOST = "127.0.0.1";
+const JUPYTER_PORT = Number.parseInt(process.env.JUPYTER_PORT || "8888", 10);
+const JUPYTER_HOST = "127.0.0.1";
+const JUPYTER_BASE = normalizeBase(process.env.JUPYTER_BASE, "/terminal");
+const DEV_MODE_ENABLED = isTrue(process.env.DEV_MODE);
+const JUPYTER_ENABLED = /^(true|1|yes|on)$/i.test(
+  process.env.HUGGINGCLAW_JUPYTER_ENABLED || (DEV_MODE_ENABLED ? "true" : "false")
+);
 const startTime = Date.now();
 const LLM_MODEL = process.env.LLM_MODEL || "Not Set";
 const TELEGRAM_ENABLED = !!process.env.TELEGRAM_BOT_TOKEN;
-const WHATSAPP_ENABLED = /^true$/i.test(process.env.WHATSAPP_ENABLED || "");
+const WHATSAPP_ENABLED = isTrue(process.env.WHATSAPP_ENABLED);
 const WHATSAPP_STATUS_FILE = "/tmp/huggingclaw-wa-status.json";
 const HF_BACKUP_ENABLED = !!process.env.HF_TOKEN;
-const SYNC_INTERVAL = process.env.SYNC_INTERVAL || "180";
-const APP_BASE = "/app";
+const SYNC_INTERVAL = (process.env.SYNC_INTERVAL || "180").trim() || "180";
+const BACKUP_DATASET_NAME = (process.env.BACKUP_DATASET_NAME || process.env.BACKUP_DATASET || "huggingclaw-backup").trim() || "huggingclaw-backup";
+const DEVDATA_DATASET_NAME = (process.env.DEVDATA_DATASET_NAME || "huggingclaw-devdata").trim() || "huggingclaw-devdata";
+const DEVDATA_SYNC_INTERVAL = (process.env.DEVDATA_SYNC_INTERVAL || "180").trim() || "180";
+const DEVDATA_SEPARATE_DATASET = DEVDATA_DATASET_NAME !== BACKUP_DATASET_NAME;
+const DEVDATA_ENABLED = JUPYTER_ENABLED && HF_BACKUP_ENABLED && DEVDATA_SEPARATE_DATASET && !/^(off|false|0|no)$/i.test((process.env.DEVDATA || "on").trim());
+const APP_BASE = normalizeBase(process.env.APP_BASE, "/app");
 const SYNC_STATUS_FILE = "/tmp/sync-status.json";
+
+// ── Private Space redirect support ──
+// HF automatically sets SPACE_ID as "username/spacename" in every Space container.
+const SPACE_ID = (process.env.SPACE_ID || "").trim();
+function deriveHfSpaceUrl() {
+  if (SPACE_ID) return `https://huggingface.co/spaces/${SPACE_ID}`;
+  const host = (process.env.SPACE_HOST || "").replace(/\.hf\.space$/i, "");
+  const author = (process.env.SPACE_AUTHOR_NAME || "").trim().toLowerCase();
+  if (author && host.toLowerCase().startsWith(author + "-")) {
+    const spaceName = host.slice(author.length + 1);
+    return `https://huggingface.co/spaces/${process.env.SPACE_AUTHOR_NAME}/${spaceName}`;
+  }
+  return "";
+}
+const HF_SPACE_URL = deriveHfSpaceUrl();
+
+// ── Privacy Detection ──
+// Priority order:
+//   1. SPACE_PRIVACY env var ("public" / "private") — explicit user override, most reliable
+//   2. HF API call to huggingface.co — auto-detect
+//   3. Fail-secure default: treat as private if SPACE_ID is set
+
+// 1. Check explicit env var override first
+const _spacPrivacyEnv = (process.env.SPACE_PRIVACY || "").trim().toLowerCase();
+let SPACE_IS_PRIVATE;
+let _privacyDetectionDone = false;
+let _privacyDetectionResolve;
+const privacyDetectionReady = new Promise((res) => { _privacyDetectionResolve = res; });
+
+if (_spacPrivacyEnv === "public") {
+  // User explicitly set SPACE_PRIVACY=public — skip API call entirely
+  SPACE_IS_PRIVATE = false;
+  _privacyDetectionDone = true;
+  console.log("[health-server] Space privacy: public (SPACE_PRIVACY env var override)");
+  privacyDetectionReady.then ? void 0 : null;
+  _privacyDetectionResolve && _privacyDetectionResolve();
+} else if (_spacPrivacyEnv === "private") {
+  // User explicitly set SPACE_PRIVACY=private — skip API call entirely
+  SPACE_IS_PRIVATE = true;
+  _privacyDetectionDone = true;
+  console.log("[health-server] Space privacy: private (SPACE_PRIVACY env var override)");
+  _privacyDetectionResolve && _privacyDetectionResolve();
+} else {
+  // 2. Auto-detect via HF API (with fail-secure default)
+  // Default to private if SPACE_ID is set — gets corrected by API call below.
+  SPACE_IS_PRIVATE = !!SPACE_ID;
+}
+
+async function detectSpacePrivacy() {
+  // Skip if already resolved via env var
+  if (_spacPrivacyEnv === "public" || _spacPrivacyEnv === "private") return;
+  // Skip if not running on HF Spaces
+  if (!SPACE_ID) {
+    SPACE_IS_PRIVATE = false;
+    _privacyDetectionDone = true;
+    _privacyDetectionResolve();
+    return;
+  }
+
+  const token = (process.env.HF_TOKEN || "").trim();
+  const reqOptions = {
+    hostname: "huggingface.co",
+    path: `/api/spaces/${SPACE_ID}`,
+    method: "GET",
+    headers: Object.assign(
+      { "User-Agent": "HuggingClaw/health-server" },
+      token ? { Authorization: `Bearer ${token}` } : {}
+    ),
+  };
+
+  // Retry up to 5 times with increasing delay — covers transient failures at boot
+  const MAX_ATTEMPTS = 5;
+  let detected = false;
+
+  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
+    try {
+      const result = await new Promise((resolve) => {
+        const r = https.request(reqOptions, (apiRes) => {
+          let body = "";
+          apiRes.on("data", (chunk) => { body += chunk; });
+          apiRes.on("end", () => {
+            try {
+              if (apiRes.statusCode === 200) {
+                const data = JSON.parse(body);
+                // API confirmed privacy status
+                SPACE_IS_PRIVATE = data.private === true;
+                resolve({ ok: true, status: apiRes.statusCode });
+              } else if (apiRes.statusCode === 401 || apiRes.statusCode === 403) {
+                // 401/403 on /api/spaces means the space IS private and our token
+                // is missing or wrong. Mark as private.
+                SPACE_IS_PRIVATE = true;
+                resolve({ ok: true, status: apiRes.statusCode, forcedPrivate: true });
+              } else if (apiRes.statusCode === 404) {
+                // Space not found — shouldn't happen but treat as non-blocking; default stays.
+                resolve({ ok: false, status: apiRes.statusCode });
+              } else {
+                // Other non-200 — transient; retry
+                resolve({ ok: false, status: apiRes.statusCode });
+              }
+            } catch { resolve({ ok: false, status: apiRes.statusCode }); }
+          });
+        });
+        r.on("error", (err) => resolve({ ok: false, error: err.message }));
+        r.setTimeout(8000, () => { r.destroy(); resolve({ ok: false, error: "timeout" }); });
+        r.end();
+      });
+
+      console.log(`[health-server] Privacy detection attempt ${attempt}/${MAX_ATTEMPTS}: status=${result.status || "network-error"} ok=${result.ok}`);
+
+      if (result.ok) { detected = true; break; }
+    } catch (err) {
+      console.warn(`[health-server] Privacy detection attempt ${attempt} threw: ${err.message}`);
+    }
+
+    const delay = Math.min(2000 * attempt, 10000); // 2s, 4s, 6s, 8s, 10s
+    if (attempt < MAX_ATTEMPTS) {
+      await new Promise((r) => setTimeout(r, delay));
+    }
+  }
+
+  if (!detected) {
+    console.warn(
+      `[health-server] Privacy detection failed after ${MAX_ATTEMPTS} attempts — ` +
+      `defaulting to ${SPACE_IS_PRIVATE ? "private" : "public"}. ` +
+      `TIP: Set SPACE_PRIVACY=public (or private) in your Space secrets to skip API detection.`
+    );
+  } else {
+    console.log(`[health-server] Space privacy detected via HF API: ${SPACE_IS_PRIVATE ? "private" : "public"}`);
+  }
+
+  _privacyDetectionDone = true;
+  _privacyDetectionResolve();
+}
+
+// Only run API detection if env var override not used
+if (_spacPrivacyEnv !== "public" && _spacPrivacyEnv !== "private") {
+  detectSpacePrivacy();
+  // Re-check every 5 minutes so runtime public↔private changes are picked up
+  setInterval(detectSpacePrivacy, 5 * 60 * 1000);
+}
 const CLOUDFLARE_KEEPALIVE_STATUS_FILE =
   "/tmp/huggingclaw-cloudflare-keepalive-status.json";
 
 function parseRequestUrl(url) {
-  try {
-    return new URL(url, "http://localhost");
-  } catch {
-    return new URL("http://localhost/");
-  }
+  try { return new URL(url, "http://localhost"); }
+  catch { return new URL("http://localhost/"); }
 }
 
 function getSyncStatus() {
   try {
-    if (fs.existsSync(SYNC_STATUS_FILE)) {
+    if (fs.existsSync(SYNC_STATUS_FILE))
       return JSON.parse(fs.readFileSync(SYNC_STATUS_FILE, "utf8"));
-    }
   } catch {}
-  if (HF_BACKUP_ENABLED) {
-    return {
-      status: "configured",
-      message: `Backup is enabled. Waiting for sync window (${SYNC_INTERVAL}s).`,
-    };
-  }
+  if (HF_BACKUP_ENABLED)
+    return { status: "configured", message: `Backup enabled. Waiting for sync window (${SYNC_INTERVAL}s).` };
   return { status: "unknown", message: "No sync data yet" };
 }
 
 function readGuardianStatus() {
-  if (!WHATSAPP_ENABLED) {
-    return { configured: false, connected: false, pairing: false };
-  }
+  if (!WHATSAPP_ENABLED) return { configured: false, connected: false, pairing: false };
   try {
     if (fs.existsSync(WHATSAPP_STATUS_FILE)) {
-      const parsed = JSON.parse(fs.readFileSync(WHATSAPP_STATUS_FILE, "utf8"));
-      return {
-        configured: parsed.configured !== false,
-        connected: parsed.connected === true,
-        pairing: parsed.pairing === true,
-      };
+      const p = JSON.parse(fs.readFileSync(WHATSAPP_STATUS_FILE, "utf8"));
+      return { configured: p.configured !== false, connected: p.connected === true, pairing: p.pairing === true };
     }
   } catch {}
   return { configured: true, connected: false, pairing: false };
@@ -60,71 +209,42 @@ function readGuardianStatus() {
 
 function getKeepaliveStatus() {
   try {
-    if (fs.existsSync(CLOUDFLARE_KEEPALIVE_STATUS_FILE)) {
-      return JSON.parse(
-        fs.readFileSync(CLOUDFLARE_KEEPALIVE_STATUS_FILE, "utf8"),
-      );
-    }
+    if (fs.existsSync(CLOUDFLARE_KEEPALIVE_STATUS_FILE))
+      return JSON.parse(fs.readFileSync(CLOUDFLARE_KEEPALIVE_STATUS_FILE, "utf8"));
   } catch {}
   return null;
 }
 
-function probeGatewayHealth(timeoutMs = 1500) {
+function probePort(host, port, path, timeoutMs = 1500) {
   return new Promise((resolve) => {
-    const request = http.get(
-      {
-        hostname: GATEWAY_HOST,
-        port: GATEWAY_PORT,
-        path: "/health",
-        timeout: timeoutMs,
-      },
-      (response) => {
-        response.resume();
-        resolve(response.statusCode >= 200 && response.statusCode < 400);
-      },
-    );
-    request.on("timeout", () => {
-      request.destroy();
-      resolve(false);
+    const req = http.get({ hostname: host, port, path, timeout: timeoutMs }, (res) => {
+      res.resume();
+      resolve(res.statusCode >= 200 && res.statusCode < 400);
     });
-    request.on("error", () => resolve(false));
+    req.on("timeout", () => { req.destroy(); resolve(false); });
+    req.on("error", () => resolve(false));
   });
 }
 
 function formatUptime(ms) {
-  const total = Math.floor(ms / 1000);
-  const days = Math.floor(total / 86400);
-  const hours = Math.floor((total % 86400) / 3600);
-  const minutes = Math.floor((total % 3600) / 60);
-  if (days) return `${days}d ${hours}h ${minutes}m`;
-  if (hours) return `${hours}h ${minutes}m`;
-  return `${minutes}m`;
+  const t = Math.floor(ms / 1000);
+  const d = Math.floor(t / 86400), h = Math.floor((t % 86400) / 3600), m = Math.floor((t % 3600) / 60);
+  if (d) return `${d}d ${h}h ${m}m`;
+  if (h) return `${h}h ${m}m`;
+  return `${m}m`;
 }
 
-function escapeHtml(value) {
-  return String(value)
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-    .replace(/"/g, "&quot;");
+function escapeHtml(v) {
+  return String(v).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;");
 }
 
-function toneBadge(label, tone = "neutral") {
+function badge(label, tone = "neutral") {
   return `<span class="badge ${tone}">${escapeHtml(label)}</span>`;
 }
 
-function renderTile({
-  title,
-  value,
-  detail = "",
-  tone = "neutral",
-  meta = "",
-}) {
+function tile({ title, value, detail = "", tone = "neutral", meta = "" }) {
   return `<article class="tile ${tone}">
-    <div class="tile-head">
-      <span class="tile-title">${escapeHtml(title)}</span>
-      <span class="tile-dot"></span>
-    </div>
+    <div class="tile-head"><span class="tile-title">${escapeHtml(title)}</span><span class="tile-dot"></span></div>
     <div class="tile-value">${value}</div>
     ${detail ? `<div class="tile-detail">${detail}</div>` : ""}
     ${meta ? `<div class="tile-meta">${meta}</div>` : ""}
@@ -133,276 +253,467 @@ function renderTile({
 
 function renderDashboard(data) {
   const syncStatus = String(data.sync?.status || "unknown");
-  const syncTone = ["success", "restored", "synced", "configured"].includes(
-    syncStatus,
-  )
-    ? "ok"
-    : syncStatus === "disabled"
-      ? "warn"
-      : "neutral";
-  const backupDetail = data.sync?.message
-    ? escapeHtml(data.sync.message)
-    : "No status yet";
-
-  const keepaliveConfigured = data.keepalive?.configured === true;
-  const keepaliveStatus = String(
-    data.keepalive?.status ||
-      (process.env.CLOUDFLARE_WORKERS_TOKEN ? "pending" : "not configured"),
-  );
-  const keepAliveTone = keepaliveConfigured
-    ? "ok"
-    : process.env.CLOUDFLARE_WORKERS_TOKEN
-      ? "warn"
-      : "neutral";
-  const keepAliveDetail = keepaliveConfigured
-    ? `Pinging <code>${escapeHtml(data.keepalive.targetUrl || "/health")}</code>`
-    : process.env.CLOUDFLARE_WORKERS_TOKEN
-      ? "Worker pending or failed"
-      : "Not configured";
+  const syncTone = ["success","restored","synced","configured"].includes(syncStatus) ? "ok" : syncStatus === "disabled" ? "warn" : "neutral";
+  const kaConf = data.keepalive?.configured === true;
+  const kaStatus = String(data.keepalive?.status || (process.env.CLOUDFLARE_WORKERS_TOKEN ? "pending" : "not configured"));
+  const kaTone = kaConf ? "ok" : process.env.CLOUDFLARE_WORKERS_TOKEN ? "warn" : "neutral";
 
   const tiles = [
-    renderTile({
-      title: "Gateway",
-      value: toneBadge(
-        data.gatewayReady ? "Online" : "Offline",
-        data.gatewayReady ? "ok" : "off",
-      ),
-      detail: `Internal Port ${GATEWAY_PORT}`,
-      tone: data.gatewayReady ? "ok" : "off",
-    }),
-    renderTile({
-      title: "Model",
-      value: `<code>${escapeHtml(LLM_MODEL)}</code>`,
-      detail: `Primary LLM Configured`,
-      tone: "neutral",
-    }),
-    renderTile({
-      title: "Runtime",
-      value: escapeHtml(data.uptimeHuman),
-      detail: `Public Port ${PORT}`,
-      tone: "neutral",
-    }),
-    renderTile({
-      title: "Telegram",
-      value: toneBadge(
-        TELEGRAM_ENABLED ? "Enabled" : "Disabled",
-        TELEGRAM_ENABLED ? "ok" : "neutral",
-      ),
-      detail: TELEGRAM_ENABLED ? "Bot Channel active" : "Not configured",
-      tone: TELEGRAM_ENABLED ? "ok" : "neutral",
-    }),
-    renderTile({
-      title: "Backup",
-      value: toneBadge(syncStatus.toUpperCase(), syncTone),
-      detail: backupDetail,
-      tone: syncTone,
-      meta: data.sync?.timestamp
-        ? `<span class="local-time" data-iso="${data.sync.timestamp}"></span>`
-        : "",
-    }),
-    renderTile({
-      title: "Keep Awake",
-      value: toneBadge(
-        keepaliveConfigured ? "CF Cron" : keepaliveStatus.toUpperCase(),
-        keepAliveTone,
-      ),
-      detail: keepAliveDetail,
-      tone: keepAliveTone,
-    }),
-  ].join("");
-
-  return `<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
+    tile({ title: "Gateway", value: badge(data.gatewayReady ? "Online" : "Offline", data.gatewayReady ? "ok" : "off"), detail: `OpenClaw on internal port ${GATEWAY_PORT}`, tone: data.gatewayReady ? "ok" : "off" }),
+    tile({ title: "Model", value: `<code>${escapeHtml(LLM_MODEL)}</code>`, detail: "Primary LLM configured", tone: "neutral" }),
+    tile({ title: "Runtime", value: escapeHtml(data.uptimeHuman), detail: `Public port ${PORT}`, tone: "neutral" }),
+    tile({ title: "Telegram", value: badge(TELEGRAM_ENABLED ? "Enabled" : "Disabled", TELEGRAM_ENABLED ? "ok" : "neutral"), detail: TELEGRAM_ENABLED ? "Bot channel active" : "Not configured", tone: TELEGRAM_ENABLED ? "ok" : "neutral" }),
+  ];
+
+
+  tiles.push(
+    tile({ title: "Backup", value: badge(syncStatus.toUpperCase(), syncTone), detail: escapeHtml(data.sync?.message || "No status yet"), tone: syncTone, meta: data.sync?.timestamp ? `<span class="local-time" data-iso="${data.sync.timestamp}"></span>` : "" }),
+    tile({ title: "Keep Awake", value: badge(kaConf ? "CF Cron" : kaStatus.toUpperCase(), kaTone), detail: kaConf ? `Pinging <code>${escapeHtml(data.keepalive?.targetUrl || "/health")}</code>` : process.env.CLOUDFLARE_WORKERS_TOKEN ? "Worker pending or failed" : "Not configured", tone: kaTone }),
+  );
+
+  if (JUPYTER_ENABLED) {
+    tiles.push(tile({ title: "Terminal", value: badge(data.jupyterReady ? "Online" : "Starting…", data.jupyterReady ? "ok" : "warn"), detail: `JupyterLab at <a href="${JUPYTER_BASE}/" style="color:inherit">${JUPYTER_BASE}/</a>`, tone: data.jupyterReady ? "ok" : "warn" }));
+    tiles.push(tile({
+      title: "DevData",
+      value: badge(DEVDATA_ENABLED ? "Enabled" : "Disabled", DEVDATA_ENABLED ? "ok" : "neutral"),
+      detail: DEVDATA_ENABLED ? `Separate dataset <code>${escapeHtml(DEVDATA_DATASET_NAME)}</code>` : DEVDATA_SEPARATE_DATASET ? "Separate Jupyter dataset backup inactive" : "DevData dataset must be separate from main backup dataset",
+      tone: DEVDATA_ENABLED ? "ok" : "neutral",
+      meta: `Sync interval ${escapeHtml(DEVDATA_SYNC_INTERVAL)}s`,
+    }));
+  }
+
+  const tilesHtml = tiles.join("");
+
+  return `<!doctype html><html lang="en"><head>
+  <meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/>
   <title>HuggingClaw</title>
   <style>
-    :root { color-scheme: dark; --bg:#08080f; --panel:#12111b; --line:#26243a; --text:#f6f4ff; --muted:#7f7a9e; --soft:#b8b3d7; --good:#22c55e; --warn:#f5c542; --bad:#fb7185;  }
-    * { box-sizing:border-box; }
-    body { margin:0; min-height:100vh; font-family:Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; background:var(--bg); color:var(--text); font-size:13px; }
-    main { width:min(720px, calc(100% - 32px)); margin:0 auto; padding:36px 0 44px; }
-    header { text-align:center; margin-bottom:22px; }
-    h1 { margin:0; font-size:1.65rem; line-height:1; letter-spacing:0; }
-    .subtitle { margin-top:12px; color:var(--muted); font-size:.72rem; text-transform:uppercase; letter-spacing:.14em; font-weight:800; }
-    .hero-action { display:flex; width:100%; min-height:46px; align-items:center; justify-content:center; border-radius:8px; background:#fff; color:#000; text-decoration:none; font-weight:850; font-size:.98rem; margin:24px 0 20px; transition: opacity 0.15s ease; }
-    .hero-action:hover { opacity: 0.9; }
-    .overview { display:grid; grid-template-columns:repeat(2, minmax(0, 1fr)); gap:10px; margin-bottom:10px; }
-    .tile { border:1px solid var(--line); background:var(--panel); border-radius:11px; padding:18px; min-height:124px; display:flex; flex-direction:column; gap:10px; position:relative; }
-    .tile.ok { border-color:rgba(34,197,94,.22); }
-    .tile.warn { border-color:rgba(245,197,66,.24); }
-    .tile.off { border-color:rgba(251,113,133,.28); }
-    .tile-head { display:flex; align-items:center; justify-content:space-between; gap:12px; }
-    .tile-title { color:var(--muted); font-size:.67rem; letter-spacing:.18em; text-transform:uppercase; font-weight:850; }
-    .tile-dot { width:7px; height:7px; border-radius:50%; background:var(--line); }
-    .tile.ok .tile-dot { background:var(--good); }
-    .tile.warn .tile-dot { background:var(--warn); }
-    .tile.off .tile-dot { background:var(--bad); }
-    .tile-value { font-size:1.12rem; font-weight:850; overflow-wrap:anywhere; }
-    .tile-detail { color:var(--soft); line-height:1.45; font-size:.83rem; }
-    .tile-meta { color:var(--muted); line-height:1.4; font-size:.75rem; margin-top:auto; overflow-wrap:anywhere; }
-
-    code { background:#232234; border:1px solid #34324c; border-radius:6px; padding:2px 6px; color:var(--text); font-size:.9em; }
-    .badge { display:inline-flex; align-items:center; width:max-content; border:1px solid var(--line); border-radius:999px; padding:5px 10px; font-size:.72rem; font-weight:850; line-height:1; text-transform:uppercase; }
-    .badge.ok { color:var(--good); border-color:rgba(34,197,94,.34); background:rgba(34,197,94,.11); }
-    .badge.warn { color:var(--warn); border-color:rgba(245,197,66,.34); background:rgba(245,197,66,.11); }
-    .badge.off { color:var(--bad); border-color:rgba(251,113,133,.34); background:rgba(251,113,133,.11); }
-    .badge.neutral { color:var(--soft); }
-    footer { color:var(--muted); text-align:center; font-size:.74rem; margin-top:18px; }
-    footer .live { color:var(--good); }
-    @media (max-width: 700px) { .overview { grid-template-columns:1fr; } main { width:min(100% - 22px, 720px); padding-top:28px; } }
-  </style>
-</head>
-<body>
-  <main>
-    <header>
-      <h1>🦞 HuggingClaw</h1>
-      <div class="subtitle">OpenClaw Gateway Dashboard</div>
-    </header>
-    <a class="hero-action" href="${APP_BASE}/" target="_blank" rel="noopener noreferrer">Open Control UI -></a>
-    <section class="overview">
-      ${tiles}
-    </section>
-    <footer>Built by <a href="https://github.com/somratpro" target="_blank" rel="noopener noreferrer" style="color: var(--accent); text-decoration: none;">@somratpro</a></footer>
+    :root{color-scheme:dark;--bg:#08080f;--panel:#12111b;--line:#26243a;--text:#f6f4ff;--muted:#7f7a9e;--soft:#b8b3d7;--good:#22c55e;--warn:#f5c542;--bad:#fb7185}
+    *{box-sizing:border-box}body{margin:0;min-height:100vh;font-family:Inter,ui-sans-serif,system-ui,-apple-system,sans-serif;background:var(--bg);color:var(--text);font-size:13px}
+    main{width:min(720px,calc(100% - 32px));margin:0 auto;padding:36px 0 44px}
+    header{text-align:center;margin-bottom:22px}h1{margin:0;font-size:1.65rem;line-height:1}
+    .subtitle{margin-top:12px;color:var(--muted);font-size:.72rem;text-transform:uppercase;letter-spacing:.14em;font-weight:800}
+    .btn-row{display:flex;gap:12px;margin:24px 0 20px}
+    .hero-action{display:flex;flex:1;min-height:46px;align-items:center;justify-content:center;border-radius:8px;background:#fff;color:#000;text-decoration:none;font-weight:850;font-size:.98rem;transition:opacity .15s}
+    .hero-action:hover{opacity:.9}.hero-action.terminal{background:#1e1e2e;color:#cdd6f4;border:1px solid #45475a}.hero-action.env{background:#312e81;color:#eef2ff;border:1px solid #6366f1}
+    .overview{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px;margin-bottom:10px}
+    .tile{border:1px solid var(--line);background:var(--panel);border-radius:11px;padding:18px;min-height:124px;display:flex;flex-direction:column;gap:10px}
+    .tile.ok{border-color:rgba(34,197,94,.22)}.tile.warn{border-color:rgba(245,197,66,.24)}.tile.off{border-color:rgba(251,113,133,.28)}
+    .tile-head{display:flex;align-items:center;justify-content:space-between;gap:12px}
+    .tile-title{color:var(--muted);font-size:.67rem;letter-spacing:.18em;text-transform:uppercase;font-weight:850}
+    .tile-dot{width:7px;height:7px;border-radius:50%;background:var(--line)}
+    .tile.ok .tile-dot{background:var(--good)}.tile.warn .tile-dot{background:var(--warn)}.tile.off .tile-dot{background:var(--bad)}
+    .tile-value{font-size:1.12rem;font-weight:850;overflow-wrap:anywhere}.tile-detail{color:var(--soft);line-height:1.45;font-size:.83rem}
+    .tile-meta{color:var(--muted);line-height:1.4;font-size:.75rem;margin-top:auto;overflow-wrap:anywhere}
+    code{background:#232234;border:1px solid #34324c;border-radius:6px;padding:2px 6px;color:var(--text);font-size:.9em}
+    .badge{display:inline-flex;align-items:center;width:max-content;border:1px solid var(--line);border-radius:999px;padding:5px 10px;font-size:.72rem;font-weight:850;line-height:1;text-transform:uppercase}
+    .badge.ok{color:var(--good);border-color:rgba(34,197,94,.34);background:rgba(34,197,94,.11)}
+    .badge.warn{color:var(--warn);border-color:rgba(245,197,66,.34);background:rgba(245,197,66,.11)}
+    .badge.off{color:var(--bad);border-color:rgba(251,113,133,.34);background:rgba(251,113,133,.11)}
+    .badge.neutral{color:var(--soft)}
+    footer{color:var(--muted);text-align:center;font-size:.74rem;margin-top:18px}
+    @media(max-width:700px){.overview{grid-template-columns:1fr}main{width:min(100% - 22px,720px);padding-top:28px}.btn-row{flex-direction:column}}
+  </style></head><body><main>
+  <header><h1>🦞 HuggingClaw</h1><div class="subtitle">OpenClaw Gateway</div></header>
+  <div class="btn-row">
+    <a class="hero-action" data-space-link="app" href="${APP_BASE}/">Open Control UI →</a>
+    ${JUPYTER_ENABLED ? `<a class="hero-action terminal" data-space-link="terminal" href="${JUPYTER_BASE}/">💻 Open Terminal →</a>` : ""}
+    <a class="hero-action env" data-space-link="env-builder" href="/env-builder">⚙️ Env Builder →</a>
+  </div>
+  <section class="overview">${tilesHtml}</section>
+  <footer>Built by <a href="https://github.com/somratpro" target="_blank" rel="noopener noreferrer" style="color:inherit;text-decoration:none">@somratpro</a>${JUPYTER_ENABLED ? " · Terminal by JupyterLab" : ""}<br>Env Builder &amp; JupyterLab integration by<br><a href="https://github.com/anurag008w" target="_blank" rel="noopener noreferrer" style="color:inherit;text-decoration:none">@anurag</a></footer>
   </main>
   <script>
-    document.querySelectorAll('.local-time').forEach(el => {
-      const date = new Date(el.getAttribute('data-iso'));
-      if (!isNaN(date)) {
-        el.textContent = 'At ' + date.toLocaleTimeString();
+  document.querySelectorAll('.local-time').forEach(el=>{const d=new Date(el.getAttribute('data-iso'));if(!isNaN(d))el.textContent='At '+d.toLocaleTimeString()});
+  const inEmbeddedApp = (() => { try { return window.top !== window.self; } catch { return true; } })();
+  const isDirectHfSpaceHost = /\.hf\.space$/i.test(window.location.hostname);
+  const HF_SPACE_URL = ${JSON.stringify(HF_SPACE_URL)};
+  // Server-side detected value (may be stale if page was cached — see /api/is-private)
+  let SPACE_IS_PRIVATE = ${JSON.stringify(SPACE_IS_PRIVATE)};
+
+  function applyLinkTargets() {
+    // Keep hero buttons in-frame for private spaces; open new tab for public spaces
+    // accessed via the HF iframe or directly at .hf.space.
+    const openInNewTab = !SPACE_IS_PRIVATE && (inEmbeddedApp || isDirectHfSpaceHost);
+    document.querySelectorAll('a[data-space-link]').forEach((a) => {
+      if (openInNewTab) {
+        a.setAttribute('target', '_blank');
+        a.setAttribute('rel', 'noopener noreferrer');
+      } else {
+        a.removeAttribute('target');
+        a.removeAttribute('rel');
       }
     });
+  }
+
+  applyLinkTargets();
+
+  // Always re-fetch the live privacy status from the server to handle:
+  // 1. Startup race condition where server rendered before API detection finished
+  // 2. Any mismatch between client-rendered value and actual server-side state
+  // 3. Public spaces where the fail-secure default (private) needs correcting
+  // Also retries after 4s in case the first fetch raced with a server-side retry.
+  function syncPrivacy() {
+    return fetch('/api/is-private', { cache: 'no-store' })
+      .then(r => r.json())
+      .then(d => {
+        if (d.isPrivate !== SPACE_IS_PRIVATE) {
+          SPACE_IS_PRIVATE = d.isPrivate;
+          applyLinkTargets(); // re-run: adds or removes target="_blank" on buttons
+        }
+        return d.isPrivate;
+      })
+      .catch(() => SPACE_IS_PRIVATE);
+  }
+
+  if (isDirectHfSpaceHost) {
+    // Immediate check on page load
+    syncPrivacy().then(isPrivate => {
+      // If space appears private after first check, re-verify after server retries
+      // complete (server retries up to 3×5s = ~15s). This catches the edge case
+      // where a PUBLIC space returned private due to a transient API failure.
+      if (isPrivate) {
+        setTimeout(syncPrivacy, 8000);
+        setTimeout(syncPrivacy, 16000);
+      }
+    });
+  }
+  // Direct .hf.space access outside the HF App iframe has no valid session cookie
+  // for private spaces — HF CDN returns 404 before the request reaches the container.
+  // Redirect users to huggingface.co/spaces/... which authenticates them properly.
+  if (SPACE_IS_PRIVATE && isDirectHfSpaceHost && !inEmbeddedApp && HF_SPACE_URL) {
+    const notice = document.createElement('div');
+    notice.style.cssText = 'position:fixed;inset:0;display:flex;align-items:center;justify-content:center;background:#08080f;color:#f6f4ff;font-family:sans-serif;flex-direction:column;gap:16px;z-index:9999';
+    notice.innerHTML = '<span style="font-size:1.1rem">🔒 Private Space &mdash; Redirecting&hellip;</span><a href="' + HF_SPACE_URL + '" style="color:#a5b4fc;font-size:.85rem">Click here if not redirected</a>';
+    document.body.appendChild(notice);
+    setTimeout(() => { window.location.replace(HF_SPACE_URL); }, 300);
+  }
+</script>
+</body></html>`;
+}
+
+function renderPrivateRedirect(targetUrl) {
+  const safeUrl = escapeHtml(targetUrl);
+  return `<!doctype html><html lang="en"><head>
+  <meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/>
+  <title>HuggingClaw — Private Space</title>
+  <style>
+    :root{color-scheme:dark}
+    body{margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;
+         font-family:Inter,ui-sans-serif,system-ui,-apple-system,sans-serif;
+         background:#08080f;color:#f6f4ff;text-align:center;padding:24px}
+    .card{border:1px solid #26243a;background:#12111b;border-radius:14px;padding:36px 32px;max-width:440px}
+    h1{margin:0 0 12px;font-size:1.5rem}
+    p{color:#b8b3d7;line-height:1.6;margin:0 0 24px}
+    .btn{display:inline-flex;align-items:center;justify-content:center;
+         background:#fff;color:#000;font-weight:850;font-size:.95rem;
+         border-radius:8px;padding:12px 28px;text-decoration:none;transition:opacity .15s}
+    .btn:hover{opacity:.85}
+    .sub{color:#7f7a9e;font-size:.78rem;margin-top:16px}
+  </style></head><body>
+  <div class="card">
+    <h1>🔒 Private Space</h1>
+    <p>This HuggingFace Space is private. You need to be logged in to <strong>huggingface.co</strong> to access it.<br><br>Redirecting you now&hellip;</p>
+    <a class="btn" href="${safeUrl}">Open on Hugging Face →</a>
+    <div class="sub">Redirecting in 3 seconds&hellip;</div>
+  </div>
+  <script>
+    // Only auto-redirect when NOT inside an iframe (e.g. HF App tab embeds this
+    // page in an iframe; navigating that iframe to huggingface.co is blocked by
+    // X-Frame-Options and causes "refused to connect" in the browser).
+    const _inFrame = (() => { try { return window.top !== window.self; } catch { return true; } })();
+    if (!_inFrame) {
+      setTimeout(() => { window.location.replace(${JSON.stringify(targetUrl)}); }, 100);
+    }
   </script>
-</body>
-</html>`;
+</body></html>`;
 }
 
-const server = http.createServer(async (req, res) => {
-  const url = parseRequestUrl(req.url);
-  const pathname = url.pathname;
+function renderEnvBuilder() {
+  try {
+    return fs.readFileSync(require("path").join(__dirname, "env-builder.html"), "utf8");
+  } catch (exc) {
+    return `<!doctype html><title>Env Builder unavailable</title><pre>${escapeHtml(exc.message)}</pre>`;
+  }
+}
 
-  // 1. Dashboard Routes
-  if (pathname === "/health") {
-    const gatewayReady = await probeGatewayHealth();
-    res.writeHead(gatewayReady ? 200 : 503, {
-      "Content-Type": "application/json",
-    });
-    return res.end(
-      JSON.stringify({
-        status: gatewayReady ? "ok" : "degraded",
-        gatewayReady,
-        uptime: formatUptime(Date.now() - startTime),
-        sync: getSyncStatus(),
-        keepalive: getKeepaliveStatus(),
-      }),
-    );
+// ── Generic proxy ──
+function proxiedPath(url, { stripPrefix = "" } = {}) {
+  if (!stripPrefix) return url.pathname + url.search;
+  if (url.pathname === stripPrefix) return "/" + url.search;
+  if (url.pathname.startsWith(stripPrefix + "/")) {
+    return url.pathname.slice(stripPrefix.length) + url.search;
   }
+  return url.pathname + url.search;
+}
 
-  if (pathname === "/status") {
-    const gatewayReady = await probeGatewayHealth();
-    res.writeHead(200, { "Content-Type": "application/json" });
-    return res.end(
-      JSON.stringify({
-        model: LLM_MODEL,
-        uptime: formatUptime(Date.now() - startTime),
-        gatewayReady,
-        sync: getSyncStatus(),
-        whatsapp: readGuardianStatus(),
-        keepalive: getKeepaliveStatus(),
-      }),
-    );
+function rewriteProxyHeaders(headers, { publicPrefix = "", targetHost = "", targetPort = "" } = {}) {
+  const next = { ...headers };
+
+  // Keep browser redirects inside the public HF Space path. Backends may emit
+  // root-relative redirects ("/login") or absolute redirects pointing at their
+  // internal listener ("http://127.0.0.1:8888/..."). Both break from a browser
+  // if we do not normalize them back to the public mount path.
+  if (publicPrefix && typeof next.location === "string") {
+    try {
+      const internalOrigins = new Set([
+        "http://huggingclaw.local",
+        `http://${targetHost}:${targetPort}`,
+        `http://localhost:${targetPort}`,
+        `http://127.0.0.1:${targetPort}`,
+      ]);
+      const location = new URL(next.location, "http://huggingclaw.local");
+      if (internalOrigins.has(location.origin)) {
+        let path = location.pathname;
+        if (path !== publicPrefix && !path.startsWith(publicPrefix + "/")) {
+          path = publicPrefix + (path.startsWith("/") ? path : `/${path}`);
+        }
+        next.location = path + location.search + location.hash;
+      }
+    } catch {}
   }
 
-  if (pathname === "/" || pathname === "/dashboard") {
-    const gatewayReady = await probeGatewayHealth();
-    res.writeHead(200, { "Content-Type": "text/html" });
-    return res.end(
-      renderDashboard({
-        uptimeHuman: formatUptime(Date.now() - startTime),
-        gatewayReady,
-        sync: getSyncStatus(),
-        whatsapp: readGuardianStatus(),
-        keepalive: getKeepaliveStatus(),
-      }),
-    );
+  return next;
+}
+
+function sendServiceUnavailable(res) {
+  if (!res.headersSent) {
+    res.writeHead(503, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ status: "starting", message: "Service is initializing… please wait." }));
+  } else {
+    res.end();
   }
+}
 
-  // 2. OpenClaw Proxy Logic
-  const proxyHeaders = {
+function proxyHTTP(req, res, targetHost, targetPort, options = {}) {
+  const url = parseRequestUrl(req.url);
+  const headers = {
     ...req.headers,
-    host: `${GATEWAY_HOST}:${GATEWAY_PORT}`,
+    host: `${targetHost}:${targetPort}`,
     "x-forwarded-for": req.socket.remoteAddress,
     "x-forwarded-host": req.headers.host,
     "x-forwarded-proto": "https",
+    "x-forwarded-prefix": options.publicPrefix || "",
   };
 
-  const proxyReq = http.request(
-    {
-      hostname: GATEWAY_HOST,
-      port: GATEWAY_PORT,
-      path: pathname + url.search,
-      method: req.method,
-      headers: proxyHeaders,
-    },
-    (proxyRes) => {
-      res.writeHead(proxyRes.statusCode, proxyRes.headers);
-      proxyRes.pipe(res);
-      proxyRes.on("error", (err) => {
-        console.error("proxyRes error:", err);
-        res.end();
-      });
-    },
-  );
+  const canReplayRequest = req.method === "GET" || req.method === "HEAD";
+  const proxyOnce = (path, retryOn404) => {
+    const pr = http.request({ hostname: targetHost, port: targetPort, path, method: req.method, headers }, (pres) => {
+      if (canReplayRequest && retryOn404 && pres.statusCode === 404 && options.stripPrefix) {
+        pres.resume();
+        return proxyOnce(proxiedPath(url, { stripPrefix: options.stripPrefix }), false);
+      }
+      res.writeHead(pres.statusCode, rewriteProxyHeaders(pres.headers, { ...options, targetHost, targetPort }));
+      pres.pipe(res);
+      pres.on("error", () => res.end());
+    });
+    req.on("error", () => pr.destroy());
+    res.on("error", () => pr.destroy());
+    pr.on("error", () => sendServiceUnavailable(res));
+    req.pipe(pr);
+  };
 
-  req.on("error", (err) => {
-    console.error("req error:", err);
-    proxyReq.destroy();
-  });
+  // First try the public path as-is because OpenClaw and JupyterLab are both
+  // configured with base paths. If a backend still returns 404, retry with the
+  // mount prefix stripped; that covers images built before the base-path config
+  // took effect and avoids the common HF Spaces "404 at /app or /terminal" trap.
+  proxyOnce(url.pathname + url.search, !!options.retryWithoutPrefixOn404);
+}
 
-  res.on("error", (err) => {
-    console.error("res error:", err);
-    proxyReq.destroy();
-  });
+// ── HTTP server ──
+const server = http.createServer(async (req, res) => {
+  const { pathname } = parseRequestUrl(req.url);
+
+  // Lightweight endpoint for client-side fallback detection.
+  // Called by the dashboard JS if it suspects the server-rendered SPACE_IS_PRIVATE
+  // value was stale (race condition at startup). No auth required — it's not sensitive.
+  if (pathname === "/api/is-private") {
+    if (!_privacyDetectionDone) await privacyDetectionReady;
+    res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    return res.end(JSON.stringify({ isPrivate: SPACE_IS_PRIVATE }));
+  }
+
+  if (pathname === "/health") {
+    const gatewayReady = await probePort(GATEWAY_HOST, GATEWAY_PORT, "/health");
+    res.writeHead(gatewayReady ? 200 : 503, { "Content-Type": "application/json" });
+    return res.end(JSON.stringify({ status: gatewayReady ? "ok" : "degraded", gatewayReady, uptime: formatUptime(Date.now() - startTime), sync: getSyncStatus(), keepalive: getKeepaliveStatus() }));
+  }
+
+  if (pathname === "/status") {
+    const [gatewayReady, jupyterReady] = await Promise.all([
+      probePort(GATEWAY_HOST, GATEWAY_PORT, "/health"),
+      JUPYTER_ENABLED ? probePort(JUPYTER_HOST, JUPYTER_PORT, `${JUPYTER_BASE}/login`) : Promise.resolve(false),
+    ]);
+    res.writeHead(200, { "Content-Type": "application/json" });
+    return res.end(JSON.stringify({ model: LLM_MODEL, uptime: formatUptime(Date.now() - startTime), gatewayReady, jupyterReady, sync: getSyncStatus(), whatsapp: readGuardianStatus(), keepalive: getKeepaliveStatus() }));
+  }
 
-  proxyReq.on("error", (err) => {
-    console.error("proxyReq error:", err);
-    if (!res.headersSent) {
-      res.writeHead(503, { "Content-Type": "application/json" });
-      res.end(
-        JSON.stringify({
-          status: "starting",
-          message: "Gateway is initializing... or connection failed",
-        }),
-      );
-    } else {
-      res.end();
+  // Private space redirect — send users to the authenticated HF Spaces page.
+  // Works for both direct .hf.space links AND programmatic shares.
+  if (pathname === "/hf-redirect" || pathname === "/hf-redirect/") {
+    if (HF_SPACE_URL) {
+      res.writeHead(302, { Location: HF_SPACE_URL, "Cache-Control": "no-store" });
+      return res.end();
     }
-  });
+    res.writeHead(404, { "Content-Type": "text/plain" });
+    return res.end("SPACE_ID not configured.");
+  }
+
+  // ── Private Space Guard (server-side) ──
+  // Triggers automatically when SPACE_IS_PRIVATE=true (detected via HF API at startup).
+  // Only intercepts browser navigation (Accept: text/html) — API calls, assets,
+  // and WebSocket upgrades pass through untouched.
+  // /health and /status are always exempt so uptime monitors keep working.
+  const isHtmlRequest = (req.headers.accept || "").includes("text/html");
+
+  // RACE CONDITION FIX: Wait for privacy detection to finish BEFORE computing
+  // isDirectHfSpaceRequest. Previously this const was computed immediately with
+  // the fail-secure default (SPACE_IS_PRIVATE=true), causing private redirects
+  // even when the space is actually public or the owner is accessing via HF App.
+  // After the very first HTML request, _privacyDetectionDone=true so no delay.
+  if (isHtmlRequest && !_privacyDetectionDone) await privacyDetectionReady;
+
+  // In-app navigation (clicking links within the HF iframe) sends a Referer
+  // from the same .hf.space origin — don't redirect those, only redirect
+  // fresh direct browser access that has no same-origin referer.
+  const referer = req.headers.referer || req.headers.referrer || "";
+  const isSameOriginNav = !!(referer && typeof req.headers.host === "string" &&
+    referer.startsWith(`https://${req.headers.host}`));
+  // When HF App embeds the space in an iframe, the initial request has
+  // Referer: https://huggingface.co/spaces/... (NOT .hf.space).
+  // HF handles authentication itself — if the user is not logged in, HF
+  // redirects them before the iframe ever loads. So a huggingface.co referer
+  // means the user is already authenticated; skip the private redirect.
+  const isFromHFApp = !!(referer && (
+    referer.startsWith("https://huggingface.co") ||
+    referer.startsWith("https://hf.co")
+  ));
+  // NOTE: computed AFTER detection is awaited above — always uses real value.
+  const isDirectHfSpaceRequest = SPACE_IS_PRIVATE &&
+    HF_SPACE_URL &&
+    isHtmlRequest &&
+    typeof req.headers.host === "string" &&
+    req.headers.host.endsWith(".hf.space") &&
+    !isSameOriginNav &&
+    !isFromHFApp;
+
+  if (pathname === "/env-builder" || pathname === "/env-builder/") {
+    if (isDirectHfSpaceRequest) {
+      res.writeHead(200, { "Content-Type": "text/html" });
+      return res.end(renderPrivateRedirect(HF_SPACE_URL));
+    }
+    res.writeHead(200, { "Content-Type": "text/html" });
+    return res.end(renderEnvBuilder());
+  }
+
+  if (pathname === "/env-builder.js") {
+    try {
+      const js = fs.readFileSync(require("path").join(__dirname, "env-builder.js"), "utf8");
+      res.writeHead(200, { "Content-Type": "application/javascript" });
+      return res.end(js);
+    } catch (exc) {
+      res.writeHead(404, { "Content-Type": "text/plain" });
+      return res.end(`env-builder.js not found: ${exc.message}`);
+    }
+  }
+
+  if (pathname === "/" || pathname === "/dashboard") {
+    // Detection already awaited above (in the isHtmlRequest guard) — no extra wait needed.
+    if (isDirectHfSpaceRequest) {
+      res.writeHead(200, { "Content-Type": "text/html" });
+      return res.end(renderPrivateRedirect(HF_SPACE_URL));
+    }
+    const [gatewayReady, jupyterReady] = await Promise.all([
+      probePort(GATEWAY_HOST, GATEWAY_PORT, "/health"),
+      JUPYTER_ENABLED ? probePort(JUPYTER_HOST, JUPYTER_PORT, `${JUPYTER_BASE}/login`) : Promise.resolve(false),
+    ]);
+    res.writeHead(200, { "Content-Type": "text/html" });
+    return res.end(renderDashboard({ uptimeHuman: formatUptime(Date.now() - startTime), gatewayReady, jupyterReady, sync: getSyncStatus(), whatsapp: readGuardianStatus(), keepalive: getKeepaliveStatus() }));
+  }
 
-  req.pipe(proxyReq);
+  // JupyterLab terminal
+  if (pathname === JUPYTER_BASE || pathname.startsWith(JUPYTER_BASE + "/")) {
+    if (!JUPYTER_ENABLED) {
+      res.writeHead(404, { "Content-Type": "application/json" });
+      return res.end(JSON.stringify({ status: "disabled", message: "JupyterLab terminal is disabled. Set DEV_MODE=true to enable /terminal/." }));
+    }
+    if (isDirectHfSpaceRequest) {
+      res.writeHead(200, { "Content-Type": "text/html" });
+      return res.end(renderPrivateRedirect(HF_SPACE_URL));
+    }
+    return proxyHTTP(req, res, JUPYTER_HOST, JUPYTER_PORT, {
+      publicPrefix: JUPYTER_BASE,
+      // Jupyter is started with --ServerApp.base_url=/terminal/, so keep the
+      // /terminal prefix when proxying. Stripping it breaks static/theme URLs.
+      stripPrefix: "",
+      retryWithoutPrefixOn404: false,
+    });
+  }
+
+  // OpenClaw Control UI mounted under /app. Retry without the mount prefix on
+  // 404 so deployments keep working across OpenClaw basePath behavior changes.
+  if (pathname === APP_BASE || pathname.startsWith(APP_BASE + "/")) {
+    if (isDirectHfSpaceRequest) {
+      res.writeHead(200, { "Content-Type": "text/html" });
+      return res.end(renderPrivateRedirect(HF_SPACE_URL));
+    }
+    return proxyHTTP(req, res, GATEWAY_HOST, GATEWAY_PORT, {
+      publicPrefix: APP_BASE,
+      stripPrefix: APP_BASE,
+      retryWithoutPrefixOn404: true,
+    });
+  }
+
+  // Favicon — serve a minimal inline SVG so browsers don't proxy to the gateway
+  if (pathname === "/favicon.ico" || pathname === "/favicon.svg") {
+    const svg = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"><text y=".9em" font-size="90">🦞</text></svg>';
+    res.writeHead(200, { "Content-Type": "image/svg+xml", "Cache-Control": "public, max-age=86400" });
+    return res.end(svg);
+  }
+
+  // OpenClaw gateway API/static fallback (everything else)
+  if (isDirectHfSpaceRequest) {
+    res.writeHead(200, { "Content-Type": "text/html" });
+    return res.end(renderPrivateRedirect(HF_SPACE_URL));
+  }
+  proxyHTTP(req, res, GATEWAY_HOST, GATEWAY_PORT);
 });
 
+// ── WebSocket upgrade (JupyterLab kernels + terminals need this) ──
 server.on("upgrade", (req, socket, head) => {
-  const url = parseRequestUrl(req.url);
-  const proxyPath = url.pathname;
-  const proxySocket = net.connect(GATEWAY_PORT, GATEWAY_HOST, () => {
-    proxySocket.write(
-      `${req.method} ${proxyPath}${url.search} HTTP/${req.httpVersion}\r\n`,
-    );
+  const { pathname, search } = parseRequestUrl(req.url);
+  const isJupyter = JUPYTER_ENABLED && (pathname === JUPYTER_BASE || pathname.startsWith(JUPYTER_BASE + "/"));
+  const isApp = pathname === APP_BASE || pathname.startsWith(APP_BASE + "/");
+  const [targetHost, targetPort] = isJupyter ? [JUPYTER_HOST, JUPYTER_PORT] : [GATEWAY_HOST, GATEWAY_PORT];
+  const publicPrefix = isJupyter ? JUPYTER_BASE : isApp ? APP_BASE : "";
+  const targetPath = pathname + search;
+
+  const ps = net.connect(targetPort, targetHost, () => {
+    ps.write(`${req.method} ${targetPath} HTTP/${req.httpVersion}\r\n`);
+    ps.write(`Host: ${targetHost}:${targetPort}\r\n`);
+    ps.write(`X-Forwarded-For: ${req.socket.remoteAddress || ""}\r\n`);
+    ps.write(`X-Forwarded-Host: ${req.headers.host || ""}\r\n`);
+    ps.write("X-Forwarded-Proto: https\r\n");
+    if (publicPrefix) ps.write(`X-Forwarded-Prefix: ${publicPrefix}\r\n`);
     for (let i = 0; i < req.rawHeaders.length; i += 2) {
-      proxySocket.write(`${req.rawHeaders[i]}: ${req.rawHeaders[i + 1]}\r\n`);
+      const header = req.rawHeaders[i];
+      const lower = header.toLowerCase();
+      if (["host", "x-forwarded-for", "x-forwarded-host", "x-forwarded-proto", "x-forwarded-prefix"].includes(lower)) continue;
+      ps.write(`${header}: ${req.rawHeaders[i + 1]}\r\n`);
     }
-    proxySocket.write("\r\n");
-    if (head && head.length) proxySocket.write(head);
-    proxySocket.pipe(socket).pipe(proxySocket);
+    ps.write("\r\n");
+    if (head && head.length) ps.write(head);
+    ps.pipe(socket).pipe(ps);
   });
-  proxySocket.on("error", () => socket.destroy());
+  ps.on("error",     () => socket.destroy());
+  ps.on("close",     () => socket.destroy());
+  socket.on("error", () => ps.destroy());
+  socket.on("close", () => ps.destroy());
 });
 
 server.timeout = 0;
 server.keepAliveTimeout = 65000;
+server.on("error", (err) => console.error(`[health-server] Server error:`, err));
 server.listen(PORT, "0.0.0.0", () =>
-  console.log(
-    `🦞 HuggingClaw Dashboard on ${PORT} -> Gateway on ${GATEWAY_PORT}`,
-  ),
+  console.log(`🦞 HuggingClaw :${PORT} → Gateway :${GATEWAY_PORT}${JUPYTER_ENABLED ? ` | Terminal :${JUPYTER_PORT} at ${JUPYTER_BASE}/` : " | Terminal disabled"}`),
 );

iframe-fix.cjs

@@ -1,5 +1,6 @@
 process.on('uncaughtException', function(err) {
   if (err.code === 'EPIPE') return;
+  if (err.code === 'ECONNRESET' || err.code === 'ENOTCONN' || err.code === 'ERR_STREAM_DESTROYED') return;
   throw err;
 });
 /**

jupyter-devdata-sync.py

@@ -0,0 +1,302 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import os, shutil, socket, sys, tempfile, time
+from pathlib import Path
+
+HF_TOKEN = os.environ.get("HF_TOKEN", "").strip()
+HF_USERNAME = os.environ.get("HF_USERNAME", "").strip() or os.environ.get("SPACE_AUTHOR_NAME", "").strip()
+DATASET_NAME = os.environ.get("DEVDATA_DATASET_NAME", "").strip() or "huggingclaw-devdata"
+BACKUP_DATASET_NAME = os.environ.get("BACKUP_DATASET_NAME", "").strip() or os.environ.get("BACKUP_DATASET", "").strip() or "huggingclaw-backup"
+JUPYTER_ROOT = Path(os.environ.get("JUPYTER_ROOT_DIR", "/home/node")).resolve()
+INTERVAL = int((os.environ.get("DEVDATA_SYNC_INTERVAL", "").strip() or "180"))
+# BUG FIX #5: Respect max file size so giant files don't stall uploads.
+# Matches the 50 MB ceiling in openclaw-sync.py; override with DEVDATA_MAX_FILE_BYTES.
+MAX_FILE_SIZE_BYTES = int(
+    (os.environ.get("DEVDATA_MAX_FILE_BYTES", "").strip() or str(50 * 1024 * 1024))
+)
+
+def is_true(value):
+    return str(value).strip().lower() in {"1", "true", "yes", "on"}
+
+ENABLE = is_true(os.environ.get("DEVDATA", "on"))
+
+
+def classify_error(exc: Exception) -> str:
+    msg = str(exc).lower()
+    if isinstance(exc, PermissionError) or "permission denied" in msg:
+        return "filesystem-permission"
+    if any(k in msg for k in ("connection error", "fetch failed", "timeout", "temporarily unavailable", "network")):
+        return "network-provider"
+    if "unsafe" in msg or "malware" in msg or "security" in msg:
+        return "safety-scan"
+    return "general"
+
+# BUG FIX #4: ".local/share/Trash" in the original EXCLUDE set was a
+# multi-component path string that was never matched because parts-based
+# lookup compares individual directory names.  Added "Trash" as a standalone
+# component so any path with a "Trash" segment (e.g. .local/share/Trash/*)
+# is correctly skipped during snapshot and restore.
+EXCLUDE = {
+    ".cache",
+    "node_modules",
+    ".npm",
+    ".yarn",
+    "Trash",            # BUG FIX #4: covers .local/share/Trash (was ".local/share/Trash" — never matched)
+    ".ipynb_checkpoints",
+    ".openclaw",
+    "app",
+    "HuggingClaw",
+    "HuggingClaw-Workspace",
+    "browser-deps",
+    # Exclude Python/system package directories — these contain thousands of files
+    # (e.g. .local/lib/python3.11/site-packages/) and must not be synced to the
+    # HF Dataset. Syncing them causes 10,000+ file fetches on every restore and
+    # can restore a broken jsonschema that crashes JupyterLab on boot.
+    ".local",
+    "lib",
+    "site-packages",
+    "__pycache__",
+}
+
+
+def enabled():
+    dev = is_true(os.environ.get("DEV_MODE", ""))
+    separate_dataset = DATASET_NAME != BACKUP_DATASET_NAME
+    if ENABLE and dev and HF_TOKEN and not separate_dataset:
+        print("DevData sync disabled: DEVDATA_DATASET_NAME must be separate from BACKUP_DATASET_NAME.")
+    return ENABLE and dev and bool(HF_TOKEN) and separate_dataset
+
+def validate_jupyter_paths() -> None:
+    # JupyterLab theme/settings live under ~/.jupyter and ~/.local/share/jupyter.
+    # If these are not writable, settings can appear to "reset" every restart.
+    for required in (JUPYTER_ROOT, Path("/home/node/.jupyter"), Path("/home/node/.local/share/jupyter")):
+        try:
+            required.mkdir(parents=True, exist_ok=True)
+            probe = required / ".devdata-write-check"
+            probe.write_text("ok", encoding="utf-8")
+            probe.unlink(missing_ok=True)
+        except Exception as exc:
+            kind = classify_error(exc)
+            print(f"DevData warning [{kind}]: {required} is not writable; Jupyter settings may not persist ({exc})")
+
+def repo_id(api) -> str:
+    ns = HF_USERNAME
+    if not ns:
+        who = api.whoami()
+        ns = who.get("name") or who.get("user") or ""
+    if not ns:
+        raise RuntimeError("Cannot resolve HF namespace for devdata sync")
+    return f"{ns}/{DATASET_NAME}"
+
+# Filename patterns that must never be synced to a public/private HF Dataset.
+# These are matched against the *name* of each path component (not the full path),
+# so ".env" matches /home/node/.env and /home/node/subdir/.env alike.
+import fnmatch as _fnmatch
+
+SECRET_FILENAME_PATTERNS = {
+    ".env",           # dotenv files — almost always contain API keys
+    ".env.*",         # .env.local, .env.production, etc.
+    "*secret*",       # any file/dir whose name contains "secret"
+    "*secrets*",
+    "*_secret*",
+    "*-secret*",
+    "*key*",          # private keys, API key files
+    "*_key*",
+    "*-key*",
+    "*token*",        # token files
+    "*_token*",
+    "*-token*",
+    "*.pem",          # TLS/SSH private keys
+    "*.key",          # generic key files
+    "*.p12",          # PKCS#12 bundles
+    "*.pfx",
+    "credentials",    # common credential file names
+    "credentials.*",
+    ".netrc",         # stores plaintext passwords
+    ".htpasswd",
+}
+
+
+def _name_is_secret(name: str) -> bool:
+    """Return True if *name* matches any secret-exclusion pattern."""
+    name_lower = name.lower()
+    return any(_fnmatch.fnmatch(name_lower, pat) for pat in SECRET_FILENAME_PATTERNS)
+
+
+def should_skip(p: Path):
+    # Skip directories/files in the hard-coded exclude set.
+    parts = p.parts
+    if any(x in parts for x in EXCLUDE):
+        return True
+    # Skip any component whose name looks like a secret file/dir.
+    return any(_name_is_secret(part) for part in parts)
+
+def snapshot(src: Path, dst: Path):
+    for p in src.rglob("*"):
+        rel = p.relative_to(src)
+        if should_skip(rel):
+            continue
+        if p.is_symlink():
+            continue
+        target = dst / rel
+        if p.is_dir():
+            target.mkdir(parents=True, exist_ok=True)
+        elif p.is_file():
+            # BUG FIX #5: Skip files that exceed the size limit.
+            try:
+                if p.stat().st_size > MAX_FILE_SIZE_BYTES:
+                    continue
+            except OSError:
+                continue
+            target.parent.mkdir(parents=True, exist_ok=True)
+            try:
+                shutil.copy2(p, target)
+            except OSError:
+                pass
+
+def is_jupyter_running(port: int = 8888) -> bool:
+    """Return True if JupyterLab is already listening on *port*.
+
+    BUG FIX #2 (safety net): restore_once() must never run while JupyterLab
+    is active.  Overwriting files under JUPYTER_ROOT (runtime/ sockets, lab/
+    settings, kernel connection files) while JupyterLab is live corrupts its
+    state and causes it to exit within seconds.
+
+    The primary guard is the --restore / sync separation introduced in
+    BUG FIX #3, but this TCP probe stays as a hard backstop for any future
+    code path that might call restore_once() unexpectedly.
+    """
+    try:
+        with socket.create_connection(("127.0.0.1", port), timeout=2):
+            return True
+    except OSError:
+        return False
+
+def restore_once(api, rid: str):
+    from huggingface_hub.errors import RepositoryNotFoundError
+    tmp = Path(tempfile.mkdtemp(prefix="devdata-restore-"))
+    try:
+        snapshot_download(repo_id=rid, repo_type="dataset", local_dir=str(tmp), local_dir_use_symlinks=False, token=HF_TOKEN)
+        for p in tmp.rglob("*"):
+            rel = p.relative_to(tmp)
+            if should_skip(rel):
+                continue
+            if str(rel) == ".gitattributes":
+                continue
+            target = JUPYTER_ROOT / rel
+            if p.is_dir():
+                target.mkdir(parents=True, exist_ok=True)
+            elif p.is_file():
+                target.parent.mkdir(parents=True, exist_ok=True)
+                try:
+                    shutil.copy2(p, target)
+                except OSError as exc:
+                    kind = classify_error(exc)
+                    print(f"DevData restore skip [{kind}] (cannot write {target}): {exc}")
+        print(f"DevData restored from {rid}")
+    except RepositoryNotFoundError:
+        print(f"DevData dataset not found yet: {rid}")
+    except Exception as exc:
+        kind = classify_error(exc)
+        print(f"DevData restore warning [{kind}]: {exc}")
+    finally:
+        shutil.rmtree(tmp, ignore_errors=True)
+
+def prune_remote_deleted_files(api, rid: str, snapshot_dir: Path) -> None:
+    """BUG FIX #6: Delete from the HF dataset any files the user deleted
+    locally.  Without this, deleted files re-appear on the next Space restart
+    because restore_once() copies everything in the dataset back to disk.
+    Mirrors the prune_remote_deleted_files() logic in openclaw-sync.py.
+    """
+    try:
+        local_files = {
+            p.relative_to(snapshot_dir).as_posix()
+            for p in snapshot_dir.rglob("*")
+            if p.is_file()
+        }
+        remote_files = list(api.list_repo_files(repo_id=rid, repo_type="dataset"))
+        stale = [f for f in remote_files if f not in local_files and f != ".gitattributes"]
+        if stale:
+            api.delete_files(
+                delete_patterns=stale,
+                repo_id=rid,
+                repo_type="dataset",
+                commit_message=f"DevData prune {len(stale)} deleted file(s) {time.strftime('%Y-%m-%dT%H:%M:%SZ', time.gmtime())}",
+            )
+            print(f"DevData pruned {len(stale)} deleted file(s) from {rid}")
+    except Exception as exc:
+        kind = classify_error(exc)
+        print(f"DevData prune warning [{kind}]: {exc}")
+
+def sync_loop(api, rid: str):
+    while True:
+        tmp = Path(tempfile.mkdtemp(prefix="devdata-snap-"))
+        try:
+            snapshot(JUPYTER_ROOT, tmp)
+            upload_folder(
+                folder_path=str(tmp),
+                repo_id=rid,
+                repo_type="dataset",
+                token=HF_TOKEN,
+                commit_message=f"DevData sync {time.strftime('%Y-%m-%dT%H:%M:%SZ', time.gmtime())}",
+                ignore_patterns=[".git/*", ".git"],
+            )
+            print(f"DevData synced to {rid}")
+            # BUG FIX #6: Prune files deleted locally so they don't reappear on restore.
+            prune_remote_deleted_files(api, rid, tmp)
+        except Exception as exc:
+            kind = classify_error(exc)
+            print(f"DevData sync warning [{kind}]: {exc}")
+        finally:
+            shutil.rmtree(tmp, ignore_errors=True)
+        time.sleep(INTERVAL)
+
+
+if __name__ == "__main__":
+    if not enabled():
+        print("DevData sync disabled.")
+        raise SystemExit(0)
+
+    from huggingface_hub import HfApi, upload_folder, snapshot_download
+    from huggingface_hub.errors import RepositoryNotFoundError
+
+    api = HfApi(token=HF_TOKEN)
+    rid = repo_id(api)
+    try:
+        api.repo_info(repo_id=rid, repo_type="dataset")
+    except RepositoryNotFoundError:
+        api.create_repo(repo_id=rid, repo_type="dataset", private=True)
+
+    # ── BUG FIX #3: Restore must happen BEFORE JupyterLab starts ──────────
+    # The original code always called restore_once() here, but start.sh starts
+    # JupyterLab long before the gateway is ready and this script is launched.
+    # That made restore_once() ALWAYS run while JupyterLab was live, which
+    # overwrote its runtime/ sockets and settings → JupyterLab died.
+    #
+    # Fix: start.sh now calls  `python3 jupyter-devdata-sync.py --restore`
+    # BEFORE starting JupyterLab.  That --restore invocation does the restore
+    # and exits.  This background invocation (no --restore flag) skips straight
+    # to sync_loop so it never touches files while JupyterLab is running.
+    #
+    # BUG FIX #2 (safety net): If JupyterLab is somehow already running when
+    # this code path is reached, abort restore to avoid corrupting its state.
+    if "--restore" in sys.argv:
+        # Synchronous restore mode — called by start.sh before JupyterLab.
+        validate_jupyter_paths()
+        restore_once(api, rid)
+        raise SystemExit(0)
+
+    # Normal background sync mode — no restore; go straight to upload loop.
+    validate_jupyter_paths()
+    if is_jupyter_running():
+        print("DevData: background sync started (JupyterLab is live, restore already done by --restore).")
+    else:
+        # Fallback: JupyterLab not detected.  Should not normally happen
+        # because start.sh calls --restore before starting JupyterLab and then
+        # waits for the gateway before launching this background process.
+        # Log a warning and proceed to sync; do NOT restore to avoid racing
+        # with a JupyterLab that may be in the middle of starting up.
+        print("DevData: WARNING — JupyterLab not detected on port 8888. Skipping restore to be safe; starting sync loop.")
+
+    sync_loop(api, rid)

login.html

@@ -0,0 +1,59 @@
+{% extends "page.html" %}
+
+{% block stylesheet %}
+{% endblock %}
+
+{% block site %}
+<div id="jupyter-main-app" class="container" style="text-align:center; max-width: 760px; margin-top: 40px;">
+  <img src="https://huggingface.co/front/assets/huggingface_logo-noborder.svg" alt="Hugging Face Logo" style="max-width: 120px; margin-bottom: 24px;">
+  <h3>HuggingClaw Terminal</h3>
+  <h4>Welcome to JupyterLab</h4>
+  <p style="color:#666;">Enter the <strong>JUPYTER_TOKEN</strong> you set in your Space secrets to access the terminal.</p>
+  <p style="color:#666;">This terminal is mounted at <code>/terminal/</code> inside the same Hugging Face Space as the OpenClaw UI.</p>
+
+  {% if login_available %}
+  <div class="row" style="display:flex; justify-content:center; margin-top:24px;">
+    <div class="navbar col-sm-8">
+      <div class="navbar-inner">
+        <div class="container">
+          <div class="center-nav">
+            <form action="{{base_url}}login?next={{next}}" method="post" class="navbar-form pull-left">
+              {{ xsrf_form_html() | safe }}
+              {% if token_available %}
+              <label for="password_input"><strong>{% trans %}Jupyter token <span title="This is the secret you set up when deploying your JupyterLab terminal">ⓘ</span> {% endtrans %}</strong></label>
+              {% else %}
+              <label for="password_input"><strong>{% trans %}Jupyter password:{% endtrans %}</strong></label>
+              {% endif %}
+              <input type="password" name="password" id="password_input" class="form-control">
+              <button type="submit" class="btn btn-default" id="login_submit">{% trans %}Log in{% endtrans %}</button>
+            </form>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+  {% else %}
+  <p>{% trans %}No login available, you shouldn't be seeing this page.{% endtrans %}</p>
+  {% endif %}
+
+  <h5 style="margin-top:28px;"><a href="/dashboard">Back to HuggingClaw dashboard</a></h5>
+  <p>This login page is based on the Hugging Face JupyterLab Space template.</p>
+
+  {% if message %}
+  <div class="row">
+    {% for key in message %}
+    <div class="message {{key}}">
+      {{message[key]}}
+    </div>
+    {% endfor %}
+  </div>
+  {% endif %}
+  {% if token_available %}
+  {% block token_message %}
+  {% endblock token_message %}
+  {% endif %}
+</div>
+{% endblock %}
+
+{% block script %}
+{% endblock %}

multi-provider-key-rotator.cjs

@@ -166,6 +166,33 @@ const PROVIDERS = [
     envPlural:  'HUGGINGFACE_HUB_TOKENS',       // plural variant
     envSingular:'HUGGINGFACE_HUB_TOKEN',
   },
+  {
+    name:       'venice',
+    hostname:   /(?:^|\.)api\.venice\.ai$/i,
+    envPlural:  'VENICE_API_KEYS',
+    envSingular:'VENICE_API_KEY',
+  },
+  {
+    name:       'github-copilot',
+    hostname:   /(?:^|\.)api\.githubcopilot\.com$/i,
+    envPlural:  'COPILOT_GITHUB_TOKENS',
+    envSingular:'COPILOT_GITHUB_TOKEN',
+  },
+  {
+    name:       'qianfan',
+    // Baidu Qianfan / ERNIE
+    hostname:   /(?:^|\.)(?:aip|qianfan)\.baidubce\.com$/i,
+    envPlural:  'QIANFAN_API_KEYS',
+    envSingular:'QIANFAN_API_KEY',
+  },
+  {
+    name:       'modelstudio',
+    // Aliyun DashScope / Qwen (both qwen/* and modelstudio/* prefixes)
+    hostname:   /(?:^|\.)dashscope\.aliyuncs\.com$/i,
+    envPlural:  'MODELSTUDIO_API_KEYS',
+    envSingular:'MODELSTUDIO_API_KEY',
+  },
+
 ];
 
 // ─── Key loading ─────────────────────────────────────────────────────────────
@@ -298,10 +325,9 @@ function patchFetch() {
             const headers        = init.headers || (input && input.headers) || undefined;
             const patchedHeaders = setAuthHeader(headers, key);
             init = { ...init, headers: patchedHeaders };
-
-            if (input && typeof input === 'object' && !(input instanceof URL) && input.headers) {
-              try { input = new Request(input, { headers: patchedHeaders }); } catch { /* noop */ }
-            }
+            // NOTE: new Request(input, {headers}) yahan nahi karte — Request clone karna
+            // body stream ko disturb kar deta hai → UND_ERR_INVALID_ARG on POST requests.
+            // init.headers fetch spec ke mutabiq Request ke headers ko override kar deta hai.
           }
         }
       }
@@ -335,13 +361,17 @@ function patchHttpModule(mod) {
               ? { ...options, path: `${u.pathname}${u.search}` }
               : u.toString();
           } else if (typeof options === 'string' || options instanceof URL) {
+            // Convert string/URL to options object and inject auth header.
+            // Also preserve any extra options passed as args[1] (3-arg form of http.request).
             const u = new URL(String(options));
+            const extraOpts = (args[1] && typeof args[1] === 'object' && typeof args[1].on !== 'function') ? args[1] : {};
             args[0] = {
               protocol: u.protocol,
               hostname: u.hostname,
               port:     u.port,
               path:     `${u.pathname}${u.search}`,
-              headers:  { authorization: `Bearer ${key}` },
+              ...extraOpts,
+              headers:  setAuthHeader(extraOpts.headers, key),
             };
           } else if (options && typeof options === 'object') {
             args[0] = { ...options, headers: setAuthHeader(options.headers, key) };

openclaw-sync.py

@@ -53,8 +53,11 @@ CONFIG_SETTLE_SECONDS = max(
 HF_TOKEN = os.environ.get("HF_TOKEN", "").strip()
 HF_USERNAME = os.environ.get("HF_USERNAME", "").strip()
 SPACE_AUTHOR_NAME = os.environ.get("SPACE_AUTHOR_NAME", "").strip()
-BACKUP_DATASET_NAME = os.environ.get("BACKUP_DATASET_NAME", "huggingclaw-backup").strip()
-WHATSAPP_ENABLED = os.environ.get("WHATSAPP_ENABLED", "").strip().lower() == "true"
+BACKUP_DATASET_NAME = os.environ.get("BACKUP_DATASET_NAME", "").strip() or os.environ.get("BACKUP_DATASET", "").strip() or "huggingclaw-backup"
+def is_true(value):
+    return str(value).strip().lower() in {"1", "true", "yes", "on"}
+
+WHATSAPP_ENABLED = is_true(os.environ.get("WHATSAPP_ENABLED", ""))
 
 EXCLUDED_SYNC_DIRS = {
     "node_modules", ".git", "__pycache__", ".venv", "venv",

start.sh

@@ -8,7 +8,70 @@ umask 0077
 # ════════════════════════════════════════════════════════════════
 
 # ── Startup Banner ──
+trim_var() {
+  # Trim leading/trailing whitespace from a value.
+  printf '%s' "$1" | sed 's/^[[:space:]]*//;s/[[:space:]]*$//'
+}
+
+hc_is_true() {
+  case "$(printf '%s' "${1:-}" | tr '[:upper:]' '[:lower:]')" in
+    1|true|yes|on) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+load_env_bundle() {
+  # HUGGINGCLAW_ENV_BUNDLE is a single base64url-encoded JSON object generated
+  # by /env-builder. Existing individual env vars win over bundled values.
+  local bundle="${HUGGINGCLAW_ENV_BUNDLE:-${ENV_BUNDLE:-}}"
+  [ -n "$bundle" ] || return 0
+  eval "$(HUGGINGCLAW_ENV_BUNDLE="$bundle" python3 - <<'PYBUNDLE'
+import base64, json, os, re, shlex, sys
+
+raw = os.environ.get("HUGGINGCLAW_ENV_BUNDLE", "").strip()
+try:
+    if raw.startswith("{"):
+        data = json.loads(raw)
+    else:
+        padded = raw + "=" * (-len(raw) % 4)
+        data = json.loads(base64.urlsafe_b64decode(padded.encode()).decode())
+    if not isinstance(data, dict):
+        raise ValueError("bundle must decode to a JSON object")
+    for key, value in data.items():
+        if not re.fullmatch(r"[A-Z_][A-Z0-9_]*", str(key)):
+            continue
+        if str(key) in {"HUGGINGCLAW_ENV_BUNDLE", "ENV_BUNDLE"}:
+            continue
+        if os.environ.get(str(key), ""):
+            continue
+        if value is None or isinstance(value, (dict, list)):
+            continue
+        print(f"export {key}={shlex.quote(str(value))}")
+except Exception as exc:
+    print(f"Warning: invalid HUGGINGCLAW_ENV_BUNDLE ignored: {exc}", file=sys.stderr)
+PYBUNDLE
+)"
+}
+
+load_env_bundle
+
+# Normalize core env values so accidental surrounding spaces in HF Variables
+# do not block updates or cause stale comparisons/merges.
+LLM_MODEL="$(trim_var "${LLM_MODEL:-}")"
+GATEWAY_TOKEN="$(trim_var "${GATEWAY_TOKEN:-}")"
+OPENCLAW_PASSWORD="$(trim_var "${OPENCLAW_PASSWORD:-}")"
+LLM_API_KEY="$(trim_var "${LLM_API_KEY:-}")"
+CLOUDFLARE_PROXY_URL="$(trim_var "${CLOUDFLARE_PROXY_URL:-}")"
+
 OPENCLAW_VERSION="${OPENCLAW_VERSION:-latest}"
+APP_BASE="$(trim_var "${APP_BASE:-/app}")"
+JUPYTER_BASE="$(trim_var "${JUPYTER_BASE:-/terminal}")"
+PORT="$(trim_var "${PORT:-7861}")"
+GATEWAY_PORT="$(trim_var "${GATEWAY_PORT:-7860}")"
+JUPYTER_PORT="$(trim_var "${JUPYTER_PORT:-8888}")"
+BACKUP_DATASET_NAME="$(trim_var "${BACKUP_DATASET_NAME:-${BACKUP_DATASET:-huggingclaw-backup}}")"
+SPACE_AUTHOR_NAME="$(trim_var "${SPACE_AUTHOR_NAME:-}")"
+SPACE_HOST="$(trim_var "${SPACE_HOST:-}")"
 OPENCLAW_APP_DIR="/home/node/.openclaw/openclaw-app"
 OPENCLAW_RUNTIME_VERSION=""
 OPENCLAW_FILE_LOG_LEVEL_CONFIGURED=false
@@ -21,7 +84,21 @@ WHATSAPP_ENABLED_CONFIGURED=false
 [ "${WHATSAPP_ENABLED+x}" = "x" ] && WHATSAPP_ENABLED_CONFIGURED=true
 WHATSAPP_ENABLED="${WHATSAPP_ENABLED:-false}"
 WHATSAPP_ENABLED_NORMALIZED=$(printf '%s' "$WHATSAPP_ENABLED" | tr '[:upper:]' '[:lower:]')
-SYNC_INTERVAL="${SYNC_INTERVAL:-180}"
+DEV_MODE_RAW="${DEV_MODE:-false}"
+DEV_MODE_NORMALIZED=$(printf '%s' "$DEV_MODE_RAW" | tr '[:upper:]' '[:lower:]')
+DEV_MODE_ENABLED=false
+if hc_is_true "$DEV_MODE_NORMALIZED"; then
+  DEV_MODE_ENABLED=true
+fi
+SYNC_INTERVAL="$(trim_var "${SYNC_INTERVAL:-180}")"
+DEVDATA_DATASET_NAME="$(trim_var "${DEVDATA_DATASET_NAME:-huggingclaw-devdata}")"
+DEVDATA_SYNC_INTERVAL="$(trim_var "${DEVDATA_SYNC_INTERVAL:-180}")"
+DEVDATA_RAW="$(trim_var "${DEVDATA:-on}")"
+DEVDATA_NORMALIZED=$(printf '%s' "$DEVDATA_RAW" | tr '[:upper:]' '[:lower:]')
+DEVDATA_ENABLED=true
+if ! hc_is_true "$DEVDATA_NORMALIZED"; then
+  DEVDATA_ENABLED=false
+fi
 if [ -n "${SPACE_HOST:-}" ]; then
   OPENCLAW_CONSOLE_LOG_LEVEL="${OPENCLAW_CONSOLE_LOG_LEVEL:-warn}"
   OPENCLAW_FILE_LOG_LEVEL="${OPENCLAW_FILE_LOG_LEVEL:-info}"
@@ -39,7 +116,7 @@ else
 fi
 echo ""
 echo "  ╔══════════════════════════════════════════╗"
-echo "  ║          🦞 HuggingClaw Gateway          ║"
+echo "  ║     🦞 HuggingClaw + 💻 JupyterLab      ║"
 echo "  ╚══════════════════════════════════════════╝"
 echo ""
 
@@ -57,7 +134,7 @@ fi
 if [ -n "$ERRORS" ]; then
   echo "Missing required secrets:"
   echo -e "$ERRORS"
-echo "Add them in HF Spaces → Settings → Secrets"
+  echo "Add them in HF Spaces → Settings → Secrets"
   exit 1
 fi
 
@@ -175,6 +252,14 @@ promote_first_pool_key "CEREBRAS_API_KEY" "CEREBRAS_API_KEYS"
 promote_first_pool_key "VENICE_API_KEY" "VENICE_API_KEYS"
 promote_first_pool_key "SYNTHETIC_API_KEY" "SYNTHETIC_API_KEYS"
 promote_first_pool_key "COPILOT_GITHUB_TOKEN" "COPILOT_GITHUB_TOKENS"
+promote_first_pool_key "AI_GATEWAY_API_KEY" "AI_GATEWAY_API_KEYS"
+
+# kimi-coding uses Moonshot AI endpoint (api.moonshot.cn).
+# If KIMI_API_KEY is set but MOONSHOT_API_KEY is not, mirror it so the
+# multi-provider-key-rotator (which matches on api.moonshot.cn) injects it.
+if [ -z "${MOONSHOT_API_KEY:-}" ] && [ -n "${KIMI_API_KEY:-}" ]; then
+  export MOONSHOT_API_KEY="$KIMI_API_KEY"
+fi
 promote_first_pool_key "HUGGINGFACE_HUB_TOKEN" "HUGGINGFACE_HUB_TOKENS"
 
 # Compatibility aliases for Google provider secrets some users already have.
@@ -200,6 +285,11 @@ export NPM_CONFIG_PREFIX="${NPM_CONFIG_PREFIX:-/home/node/.local}"
 export npm_config_prefix="$NPM_CONFIG_PREFIX"
 export PYTHONUSERBASE="${PYTHONUSERBASE:-/home/node/.local}"
 export DEBIAN_FRONTEND="${DEBIAN_FRONTEND:-noninteractive}"
+# Show current working directory in terminal prompt (JupyterLab terminals can
+# otherwise display only "$" when PS1 is unset/minimal).
+if [ -z "${PS1:-}" ] || [ "$PS1" = "$ " ]; then
+  export PS1='\u@\h:\w\$ '
+fi
 STARTUP_FILE="/home/node/.openclaw/workspace/startup.sh"
 
 # ── Restore workspace/state from HF Dataset ──
@@ -368,8 +458,10 @@ inject_provider_models_from_env() {
   CONFIG_JSON=$(jq \
     --arg provider "$provider" \
     --argjson models "$models_json" \
-    '.models.mode = "merge"
-     | .models.providers[$provider] = ((.models.providers[$provider] // {}) + {models: $models})' <<<"$CONFIG_JSON")
+    'if .models.providers[$provider] then
+       .models.mode = "merge"
+       | .models.providers[$provider].models = $models
+     else . end' <<<"$CONFIG_JSON")
 }
 
 # Built-in provider model envs (optional)
@@ -433,6 +525,8 @@ fi
 #          plugins that the Control UI/dashboard needs to render correctly
 #          on HF Spaces. Without these the UI shows blank panels.
 #          telegram/whatsapp/browser/acpx are added conditionally below.
+#          Do not create a disabled acpx entry when the plugin is absent;
+#          OpenClaw reports that as a config warning on HF Spaces.
 #   DENY:  lmstudio crashes on boot when no local server is reachable;
 #          xai PLUGIN (separate from the xai model PROVIDER) is broken in
 #          current OpenClaw releases and prevents gateway start. Disabling
@@ -452,20 +546,17 @@ if [ "$WHATSAPP_ENABLED_NORMALIZED" = "true" ]; then
 fi
 
 # Apply plugin allow/deny + per-entry toggles in one jq pass.
-ACPX_DISABLED=false
-if [ "$ACP_PLUGIN_MODE" = "disabled" ]; then ACPX_DISABLED=true; fi
 BROWSER_DISABLED=true
 if [ "$BROWSER_SHOULD_ENABLE" = "true" ]; then BROWSER_DISABLED=false; fi
 
 CONFIG_JSON=$(jq \
   --argjson allow "$PLUGIN_ALLOW_JSON" \
-  --argjson acpxDisabled "$ACPX_DISABLED" \
   --argjson browserDisabled "$BROWSER_DISABLED" \
   '.plugins.allow = $allow
    | .plugins.deny = ["lmstudio","xai"]
    | .plugins.entries.lmstudio.enabled = false
    | .plugins.entries.xai.enabled = false
-   | (if $acpxDisabled then .plugins.entries.acpx.enabled = false else . end)
+   | del(.plugins.entries.acpx)
    | (if $browserDisabled then
         .plugins.entries.browser.enabled = false | .browser.enabled = false
       else . end)' <<<"$CONFIG_JSON")
@@ -513,6 +604,24 @@ if [ -n "${ALLOWED_ORIGINS:-}" ]; then
   CONFIG_JSON=$(echo "$CONFIG_JSON" | jq ".gateway.controlUi.allowedOrigins += $ORIGINS_JSON | .gateway.controlUi.allowedOrigins |= unique")
 fi
 
+resolve_telegram_api_root() {
+  local candidate="$(trim_var "${CLOUDFLARE_PROXY_URL:-}")"
+  if [ -n "$candidate" ]; then
+    case "$candidate" in
+      http://*|https://*)
+        printf '%s' "$candidate"
+        return 0
+        ;;
+      *)
+        echo "Warning: invalid CLOUDFLARE_PROXY_URL '$candidate' (must start with http:// or https://); falling back to direct Telegram API." >&2
+        ;;
+    esac
+  fi
+  printf '%s' "https://api.telegram.org"
+}
+TELEGRAM_API_ROOT="$(resolve_telegram_api_root)"
+
+
 # Telegram (supports multiple user IDs, comma-separated)
 if [ -n "${TELEGRAM_BOT_TOKEN:-}" ]; then
   CONFIG_JSON=$(echo "$CONFIG_JSON" | jq '.plugins.entries.telegram = {"enabled": true}')
@@ -525,12 +634,12 @@ if [ -n "${TELEGRAM_BOT_TOKEN:-}" ]; then
   # Force ipv4 for Telegram specifically as HF IPv6 often times out
   export NODE_OPTIONS="${NODE_OPTIONS:+$NODE_OPTIONS }--dns-result-order=ipv4first"
   
-  CONFIG_JSON=$(echo "$CONFIG_JSON" | jq --arg token "$CLEAN_TG_TOKEN" --arg proxy_url "${CLOUDFLARE_PROXY_URL:-}" '
+  CONFIG_JSON=$(echo "$CONFIG_JSON" | jq --arg token "$CLEAN_TG_TOKEN" --arg proxy_url "$TELEGRAM_API_ROOT" '
     .channels.telegram.enabled = true
     | .channels.telegram.botToken = $token
     | .channels.telegram.commands.native = false
     | .channels.telegram.timeoutSeconds = 60
-    | (if $proxy_url != "" then .channels.telegram.apiRoot = $proxy_url else .channels.telegram.apiRoot = "https://api.telegram.org" end)
+    | (if $proxy_url != "" then .channels.telegram.apiRoot = $proxy_url else . end)
     | .channels.telegram.retry = {
         "attempts": 5,
         "minDelayMs": 800,
@@ -594,7 +703,7 @@ if [ -f "$EXISTING_CONFIG" ]; then
      | .channels = ((.channels // {}) * ($desired.channels // {}))
      | .plugins.allow = (((.plugins.allow // []) + ($desired.plugins.allow // [])) | unique)
      | .plugins.deny = (((.plugins.deny // []) + ($desired.plugins.deny // [])) | unique)
-     | .plugins.entries = (($desired.plugins.entries // {}) * (.plugins.entries // {}))
+     | .plugins.entries = ((.plugins.entries // {}) * ($desired.plugins.entries // {}))
      | if $whatsappEnabled then
          ($desired.channels.whatsapp // {"dmPolicy": "pairing"}) as $desiredWhatsapp
          | .plugins.entries.whatsapp.enabled = true
@@ -649,8 +758,34 @@ fi
 if [ -n "${CLOUDFLARE_PROXY_URL:-}" ]; then
   echo "Proxy     : ${CLOUDFLARE_PROXY_URL}"
 fi
+RUNTIME_JUPYTER_ENABLED="$DEV_MODE_ENABLED"
+# Add user bin to PATH for jupyter-lab (installed in Dockerfile when DEV_MODE=true)
+export PATH="$HOME/.local/bin:$PATH"
+
+# Runtime install fallback: only attempt if DEV_MODE is enabled but install failed during build
+if [ "$DEV_MODE_ENABLED" = "true" ] && ! python3 -c "import jupyterlab" >/dev/null 2>&1; then
+  echo "DEV_MODE enabled but jupyter-lab is missing; attempting runtime install..."
+  if python3 -m pip install --user --no-cache-dir --break-system-packages "jupyterlab>=4.2,<5" "tornado>=6.3" "ipywidgets>=8.1"; then
+    echo "Runtime Jupyter install complete."
+    python3 -c "from pathlib import Path; import shutil, jupyter_server; d=Path(jupyter_server.__file__).parent/'templates'; d.mkdir(parents=True,exist_ok=True); shutil.copyfile('/home/node/app/login.html', d/'login.html')" || true
+  else
+    echo "WARNING: Runtime Jupyter install failed; disabling terminal for this boot."
+    RUNTIME_JUPYTER_ENABLED=false
+  fi
+fi
+if [ "$RUNTIME_JUPYTER_ENABLED" = "true" ] && ! python3 -c "import jupyterlab" >/dev/null 2>&1; then
+  echo "WARNING: jupyter-lab still unavailable; disabling terminal for this boot."
+  RUNTIME_JUPYTER_ENABLED=false
+fi
+export HUGGINGCLAW_JUPYTER_ENABLED="$RUNTIME_JUPYTER_ENABLED"
+
 if [ -n "${SPACE_HOST:-}" ]; then
-  echo "Control UI: https://${SPACE_HOST}/app"
+  if [ "$RUNTIME_JUPYTER_ENABLED" = "true" ]; then
+    echo "Routes    : /app/ (Control UI), /terminal/ (JupyterLab)"
+  else
+    echo "Routes    : /app/ (Control UI)"
+  fi
+  echo "Private   : open the Hugging Face App tab first; raw https://${SPACE_HOST}/... links can show HF 404 without the embedded Space session."
 fi
 echo ""
 
@@ -705,10 +840,124 @@ warmup_browser() {
 
 # ── Start background services ──
 export LLM_MODEL="$LLM_MODEL"
+
+# ── Ensure key-rotator uses the correct HF token for huggingface.co calls ──
+# NODE_OPTIONS preloads multi-provider-key-rotator.cjs into health-server.js.
+# The rotator patches https.request and injects HUGGINGFACE_HUB_TOKEN (or
+# falls back to LLM_API_KEY) for any call to huggingface.co — including the
+# privacy-detection API call in detectSpacePrivacy(). If HUGGINGFACE_HUB_TOKEN
+# is not set (user's LLM provider is not HuggingFace), the rotator falls back
+# to LLM_API_KEY, which is the AI-provider key, NOT the HF owner token.
+# This causes a 401 on /api/spaces/${SPACE_ID} → privacy detection always
+# fails → SPACE_IS_PRIVATE stays true → public-space links never open in a
+# new tab.
+# Fix: seed HUGGINGFACE_HUB_TOKEN from HF_TOKEN when not already set.
+# HF Spaces auto-injects HF_TOKEN as the space owner's token, so this is safe.
+export HUGGINGFACE_HUB_TOKEN="${HUGGINGFACE_HUB_TOKEN:-${HF_TOKEN:-}}"
+
 # 10. Start Health Server & Dashboard
 node /home/node/app/health-server.js &
 HEALTH_PID=$!
 
+start_jupyter_once() {
+  [ "$RUNTIME_JUPYTER_ENABLED" = "true" ] || return 0
+  if [ -n "${JUPYTER_PID:-}" ] && kill -0 "$JUPYTER_PID" 2>/dev/null; then
+    return 0
+  fi
+
+  # Security guard: refuse to start JupyterLab with the insecure default token.
+  # JupyterLab exposes a full shell — a weak token is equivalent to no auth.
+  if [ -z "${JUPYTER_TOKEN:-}" ] || [ "${JUPYTER_TOKEN}" = "huggingface" ]; then
+    echo "ERROR: JUPYTER_TOKEN is unset or still set to the insecure default (\"huggingface\")." >&2
+    echo "       JupyterLab grants full shell access. Set a strong, unique token in your Space secrets." >&2
+    echo "       Hint:  openssl rand -hex 32" >&2
+    echo "       DEV_MODE active but JupyterLab will NOT start until JUPYTER_TOKEN is changed." >&2
+    return 1
+  fi
+  JUPYTER_ROOT_DIR="${JUPYTER_ROOT_DIR:-/home/node}"
+  if [ "$JUPYTER_ROOT_DIR" = "/home/node/.openclaw/workspace" ] && [ "$DEVDATA_ENABLED" = "true" ]; then
+    echo "Jupyter root was set to OpenClaw workspace; moving Jupyter root to /home/node/devdata to keep BACKUP and DEVDATA datasets separate."
+    JUPYTER_ROOT_DIR="/home/node/devdata"
+  fi
+  mkdir -p "$JUPYTER_ROOT_DIR"
+  export JUPYTER_ROOT_DIR
+  if [ "$JUPYTER_ROOT_DIR" != "/home/node/app" ]; then
+    if [ -L "$JUPYTER_ROOT_DIR/HuggingClaw" ] || [ ! -e "$JUPYTER_ROOT_DIR/HuggingClaw" ]; then
+      ln -sfn /home/node/app "$JUPYTER_ROOT_DIR/HuggingClaw"
+    fi
+  fi
+  if [ "$JUPYTER_ROOT_DIR" != "/home/node/.openclaw/workspace" ]; then
+    if [ -L "$JUPYTER_ROOT_DIR/HuggingClaw-Workspace" ] || [ ! -e "$JUPYTER_ROOT_DIR/HuggingClaw-Workspace" ]; then
+      ln -sfn /home/node/.openclaw/workspace "$JUPYTER_ROOT_DIR/HuggingClaw-Workspace"
+    fi
+  fi
+
+  # Pre-create runtime directory
+  mkdir -p "$JUPYTER_ROOT_DIR/.jupyter"
+
+  echo "DEV_MODE enabled (${DEV_MODE_RAW}) — starting JupyterLab terminal on internal port 8888 (path: /terminal/) with root: $JUPYTER_ROOT_DIR"
+  JUPYTER_LOG_FILE="/tmp/jupyterlab.log"
+  
+  # Use explicit Python to avoid PATH issues; set memory-friendly limits
+  export PYTHONPATH=""
+  python3 -m jupyterlab \
+      --ip 127.0.0.1 \
+      --port 8888 \
+      --no-browser \
+      --IdentityProvider.token="$JUPYTER_TOKEN" \
+      --ServerApp.base_url=/terminal/ \
+      --ServerApp.terminals_enabled=True \
+      --ServerApp.terminado_settings='{"shell_command":["/bin/bash","-i"]}' \
+      --ServerApp.allow_origin='*' \
+      --ServerApp.allow_remote_access=True \
+      --ServerApp.trust_xheaders=True \
+      --ServerApp.tornado_settings="{'headers': {'Content-Security-Policy': 'frame-ancestors *'}}" \
+      --IdentityProvider.cookie_options="{'SameSite': 'None', 'Secure': True}" \
+      --ServerApp.disable_check_xsrf=True \
+      --LabApp.news_url=None \
+      --LabApp.check_for_updates_class=jupyterlab.NeverCheckForUpdate \
+      --ServerApp.log_level=WARN \
+      --ServerApp.root_dir="$JUPYTER_ROOT_DIR" \
+      >> "$JUPYTER_LOG_FILE" 2>&1 &
+  JUPYTER_PID=$!
+  export JUPYTER_PID
+  echo "JupyterLab started (PID: $JUPYTER_PID)"
+}
+
+# BUG FIX #3: DevData restore must happen BEFORE JupyterLab starts.
+# The background jupyter-devdata-sync.py process is only launched AFTER the
+# gateway is ready (20-90 s from now). If restore ran there, JupyterLab would
+# already be live and the file writes would corrupt its runtime state → crash.
+# Running --restore here (synchronous, before JupyterLab) solves that.
+if [ "$RUNTIME_JUPYTER_ENABLED" = "true" ] && \
+   [ "$DEVDATA_ENABLED" = "true" ] && \
+   [ -n "${HF_TOKEN:-}" ] && \
+   [ -f "/home/node/app/jupyter-devdata-sync.py" ] && \
+   [ "${DEVDATA_DATASET_NAME:-huggingclaw-devdata}" != "${BACKUP_DATASET_NAME:-huggingclaw-backup}" ]; then
+  echo "DevData  : restoring workspace from ${DEVDATA_DATASET_NAME:-huggingclaw-devdata} (before JupyterLab starts)..."
+  python3 /home/node/app/jupyter-devdata-sync.py --restore || \
+    echo "DevData  : restore warning (non-fatal); continuing startup."
+fi
+
+# Fix: reinstall jsonschema AFTER devdata restore — restore can overwrite a broken
+# version from .local/lib/python3.11/site-packages into the workspace, causing
+# JupyterLab to crash with a circular import error on every boot.
+if [ "$DEV_MODE_ENABLED" = "true" ]; then
+  if ! python3 -c "import jsonschema" >/dev/null 2>&1; then
+    echo "DevData  : jsonschema broken after restore — reinstalling (circular import fix)..."
+    python3 -m pip install --force-reinstall --no-cache-dir --break-system-packages "jsonschema>=4.0" >/dev/null 2>&1 || true
+    echo "DevData  : jsonschema reinstall done."
+  fi
+fi
+
+# 10.5. Start JupyterLab Terminal on internal port 8888 (DEV_MODE only)
+# Accessible via /terminal/ path through the health-server proxy
+if [ "$RUNTIME_JUPYTER_ENABLED" = "true" ]; then
+  start_jupyter_once
+else
+  echo "Jupyter terminal disabled for this boot (DEV_MODE=${DEV_MODE_RAW})."
+fi
+
 if [ -n "${CLOUDFLARE_WORKERS_TOKEN:-}" ]; then
   echo "Setting up Cloudflare KeepAlive monitor..."
   python3 /home/node/app/cloudflare-keepalive-setup.py || true
@@ -728,8 +977,14 @@ export NPM_CONFIG_PREFIX="${NPM_CONFIG_PREFIX:-/home/node/.local}"
 export npm_config_prefix="$NPM_CONFIG_PREFIX"
 export PYTHONUSERBASE="${PYTHONUSERBASE:-/home/node/.local}"
 export DEBIAN_FRONTEND="${DEBIAN_FRONTEND:-noninteractive}"
+if [ -z "${PS1:-}" ] || [ "$PS1" = "$ " ]; then
+  export PS1="\u@\h:\w\$ "
+fi
 STARTUP_FILE="/home/node/.openclaw/workspace/startup.sh"
 _hc_append() {
+  if [ "${HUGGINGCLAW_CAPTURE_DISABLE:-0}" = "1" ]; then
+    return 0
+  fi
   local line="$*"
   mkdir -p "$(dirname "$STARTUP_FILE")"
   touch "$STARTUP_FILE"
@@ -756,6 +1011,28 @@ _hc_append_cmd() {
     _hc_append "$cmd"
   fi
 }
+_hc_args_without_flags() {
+  local out=()
+  local arg
+  for arg in "$@"; do
+    case "$arg" in
+      ''|-) ;;
+      --*) ;;
+      -*) ;;
+      *) out+=("$arg") ;;
+    esac
+  done
+  printf '%s\n' "${out[@]}"
+}
+_hc_has_install_targets() {
+  local item
+  while IFS= read -r item; do
+    [ -n "$item" ] && return 0
+  done <<EOF
+$(_hc_args_without_flags "$@")
+EOF
+  return 1
+}
 _hc_allow_openclaw_plugins() {
   local config="/home/node/.openclaw/openclaw.json"
   [ -f "$config" ] || return 0
@@ -807,7 +1084,7 @@ apt-get() {
       _hc_apt_install "$@"
       local rc=$?
       if [ $rc -eq 0 ]; then
-        _hc_append_cmd "sudo apt-get update && sudo apt-get install -y" "$@"
+        _hc_has_install_targets "$@" && _hc_append_cmd "sudo apt-get update && sudo apt-get install -y" "$@"
       fi
       return $rc
       ;;
@@ -834,7 +1111,7 @@ apt() {
       _hc_apt_install "$@"
       local rc=$?
       if [ $rc -eq 0 ]; then
-        _hc_append_cmd "sudo apt-get update && sudo apt-get install -y" "$@"
+        _hc_has_install_targets "$@" && _hc_append_cmd "sudo apt-get update && sudo apt-get install -y" "$@"
       fi
       return $rc
       ;;
@@ -856,32 +1133,65 @@ apt() {
 }
 pip() {
   if [ "${1:-}" = "install" ] && [ -z "${VIRTUAL_ENV:-}" ] && ! _hc_has_arg --user "$@" && ! _hc_has_arg --prefix "$@"; then
-    command pip install --user "${@:2}"
+    command pip install --user --break-system-packages "${@:2}"
   else
     command pip "$@"
   fi
   local rc=$?
-  if [ $rc -eq 0 ] && [ "${1:-}" = "install" ]; then
+  # Skip capture when -r/--requirement is used: the requirements file won't exist on next boot
+  if [ $rc -eq 0 ] && [ "${1:-}" = "install" ] \
+      && ! _hc_has_arg -r "${@:2}" && ! _hc_has_arg --requirement "${@:2}" \
+      && _hc_has_install_targets "${@:2}"; then
     _hc_append_cmd "python3 -m pip install --user" "${@:2}"
   fi
   return $rc
 }
 pip3() {
   if [ "${1:-}" = "install" ] && [ -z "${VIRTUAL_ENV:-}" ] && ! _hc_has_arg --user "$@" && ! _hc_has_arg --prefix "$@"; then
-    command pip3 install --user "${@:2}"
+    command pip3 install --user --break-system-packages "${@:2}"
   else
     command pip3 "$@"
   fi
   local rc=$?
-  if [ $rc -eq 0 ] && [ "${1:-}" = "install" ]; then
+  if [ $rc -eq 0 ] && [ "${1:-}" = "install" ] \
+      && ! _hc_has_arg -r "${@:2}" && ! _hc_has_arg --requirement "${@:2}" \
+      && _hc_has_install_targets "${@:2}"; then
     _hc_append_cmd "python3 -m pip install --user" "${@:2}"
   fi
   return $rc
 }
+python() {
+  if [ "${1:-}" = "-m" ] && [ "${2:-}" = "pip" ] && [ "${3:-}" = "install" ] && [ -z "${VIRTUAL_ENV:-}" ] && ! _hc_has_arg --user "${@:3}" && ! _hc_has_arg --prefix "${@:3}"; then
+    command python -m pip install --user --break-system-packages "${@:4}"
+  else
+    command python "$@"
+  fi
+  local rc=$?
+  if [ $rc -eq 0 ] && [ "${1:-}" = "-m" ] && [ "${2:-}" = "pip" ] && [ "${3:-}" = "install" ] \
+      && ! _hc_has_arg -r "${@:4}" && ! _hc_has_arg --requirement "${@:4}" \
+      && _hc_has_install_targets "${@:4}"; then
+    _hc_append_cmd "python3 -m pip install --user" "${@:4}"
+  fi
+  return $rc
+}
+python3() {
+  if [ "${1:-}" = "-m" ] && [ "${2:-}" = "pip" ] && [ "${3:-}" = "install" ] && [ -z "${VIRTUAL_ENV:-}" ] && ! _hc_has_arg --user "${@:3}" && ! _hc_has_arg --prefix "${@:3}"; then
+    command python3 -m pip install --user --break-system-packages "${@:4}"
+  else
+    command python3 "$@"
+  fi
+  local rc=$?
+  if [ $rc -eq 0 ] && [ "${1:-}" = "-m" ] && [ "${2:-}" = "pip" ] && [ "${3:-}" = "install" ] \
+      && ! _hc_has_arg -r "${@:4}" && ! _hc_has_arg --requirement "${@:4}" \
+      && _hc_has_install_targets "${@:4}"; then
+    _hc_append_cmd "python3 -m pip install --user" "${@:4}"
+  fi
+  return $rc
+}
 npm() {
   command npm "$@"
   local rc=$?
-  if [ $rc -eq 0 ] && [ "${1:-}" = "install" ] && { [ "${2:-}" = "-g" ] || [ "${2:-}" = "--global" ]; }; then
+  if [ $rc -eq 0 ] && { [ "${1:-}" = "install" ] || [ "${1:-}" = "i" ]; } && { [ "${2:-}" = "-g" ] || [ "${2:-}" = "--global" ]; } && _hc_has_install_targets "${@:3}"; then
     _hc_append_cmd "npm install -g" "${@:3}"
   fi
   return $rc
@@ -889,15 +1199,37 @@ npm() {
 openclaw() {
   command openclaw "$@"
   local rc=$?
-  if [ $rc -eq 0 ] && [ "${1:-}" = "plugins" ] && [ "${2:-}" = "install" ]; then
+  if [ $rc -eq 0 ] && [ "${1:-}" = "plugins" ] && [ "${2:-}" = "install" ] && _hc_has_install_targets "${@:3}"; then
     _hc_allow_openclaw_plugins "${@:3}"
     _hc_append_cmd "openclaw plugins install" "${@:3}"
   fi
   return $rc
 }
+# uv pip install — increasingly popular fast pip replacement
+uv() {
+  command uv "$@"
+  local rc=$?
+  # Only capture: uv pip install ... (not uv pip sync, uv add, etc.)
+  # Skip if -r/--requirements flag present (file won't exist on next boot)
+  if [ $rc -eq 0 ] && [ "${1:-}" = "pip" ] && [ "${2:-}" = "install" ] \
+      && ! _hc_has_arg -r "${@:3}" && ! _hc_has_arg --requirements "${@:3}" \
+      && _hc_has_install_targets "${@:3}"; then
+    _hc_append_cmd "uv pip install" "${@:3}"
+  fi
+  return $rc
+}
+# pipx — isolated tool installs
+pipx() {
+  command pipx "$@"
+  local rc=$?
+  if [ $rc -eq 0 ] && [ "${1:-}" = "install" ] && _hc_has_install_targets "${@:2}"; then
+    _hc_append_cmd "pipx install" "${@:2}"
+  fi
+  return $rc
+}
 BASHRC
 cat > /home/node/.profile <<'PROFILE'
-[ -f ~/.bashrc ] && . ~/.bashrc
+[ -n "${BASH_VERSION:-}" ] && [ -f ~/.bashrc ] && . ~/.bashrc
 PROFILE
 echo "Shell capture wrappers ready."
 
@@ -935,7 +1267,7 @@ hc_run_startup_command() {
 
   echo "[startup:${source_label}] $command_text"
   set +e
-  bash -lc "$command_text"
+  HUGGINGCLAW_CAPTURE_DISABLE=1 bash -lc "$command_text"
   local rc=$?
   set -e
   if [ "$rc" -eq 0 ]; then
@@ -959,6 +1291,7 @@ hc_run_startup_script() {
     # Load HuggingClaw's install wrappers for env-provided scripts too, so
     # `apt install`, `pip install`, `npm install -g`, and OpenClaw plugin
     # installs behave the same way as they do in the interactive shell.
+    echo 'export HUGGINGCLAW_CAPTURE_DISABLE=1'
     echo '[ -f /home/node/.bashrc ] && . /home/node/.bashrc'
     printf '%s\n' "$script_text"
   } > "$script_file"
@@ -1076,7 +1409,7 @@ fi
 if [ -n "${HUGGINGCLAW_PIP_PACKAGES:-}" ]; then
   echo "Installing Python packages from HUGGINGCLAW_PIP_PACKAGES..."
   read -r -a HC_PIP_PACKAGES <<< "$HUGGINGCLAW_PIP_PACKAGES"
-  if python3 -m pip install --user "${HC_PIP_PACKAGES[@]}"; then
+  if python3 -m pip install --user --break-system-packages "${HC_PIP_PACKAGES[@]}"; then
     echo "HUGGINGCLAW_PIP_PACKAGES install complete."
   else
     HC_STARTUP_FAILURES=$((HC_STARTUP_FAILURES + 1))
@@ -1104,6 +1437,9 @@ if [ -n "${HUGGINGCLAW_OPENCLAW_PLUGINS:-}" ]; then
   fi
 fi
 
+# ── Fix config before running startup commands ──
+openclaw doctor --fix || true
+
 # ── Arbitrary startup commands from HF Variables/Secrets ──
 # Recommended: use one variable, HUGGINGCLAW_RUN, as a full bash script. If the
 # value starts with base64: or b64:, the rest is decoded and run as the script.
@@ -1165,6 +1501,38 @@ sync_before_gateway_restart() {
     echo "Warning: could not sync settled state before gateway restart"
 }
 
+start_background_devdata_sync() {
+  if [ "$DEV_MODE_ENABLED" != "true" ]; then
+    return 0
+  fi
+  if [ "$DEVDATA_ENABLED" != "true" ]; then
+    echo "DevData  : disabled by DEVDATA=${DEVDATA_RAW}"
+    return 0
+  fi
+  if [ -z "${HF_TOKEN:-}" ]; then
+    echo "DevData  : disabled (HF_TOKEN missing)"
+    return 0
+  fi
+  if [ "${DEVDATA_DATASET_NAME:-huggingclaw-devdata}" = "${BACKUP_DATASET_NAME:-huggingclaw-backup}" ]; then
+    echo "DevData  : disabled (DEVDATA_DATASET_NAME must be separate from BACKUP_DATASET_NAME)"
+    return 0
+  fi
+  if [ ! -f "/home/node/app/jupyter-devdata-sync.py" ]; then
+    echo "DevData  : script missing; skipped"
+    return 0
+  fi
+  # BUG FIX #1: Guard against spawning a second devdata-sync process on every
+  # gateway restart. Without this check, each restart launched a fresh
+  # jupyter-devdata-sync.py which called restore_once() while JupyterLab was
+  # already running, corrupting its runtime state and killing it.
+  if [ -n "${DEVDATA_SYNC_PID:-}" ] && kill -0 "$DEVDATA_SYNC_PID" 2>/dev/null; then
+    return 0
+  fi
+  echo "DevData  : enabled (dataset=${DEVDATA_DATASET_NAME:-huggingclaw-devdata})"
+  python3 -u /home/node/app/jupyter-devdata-sync.py >> /tmp/devdata-sync.log 2>&1 &
+  DEVDATA_SYNC_PID=$!
+}
+
 start_background_sync_once() {
   [ -n "${HF_TOKEN:-}" ] || return 0
 
@@ -1172,7 +1540,7 @@ start_background_sync_once() {
     return 0
   fi
 
-  python3 -u /home/node/app/openclaw-sync.py loop &
+  python3 -u /home/node/app/openclaw-sync.py loop >> /tmp/workspace-sync.log 2>&1 &
   SYNC_LOOP_PID=$!
 }
 
@@ -1189,6 +1557,31 @@ start_guardian_once() {
 }
 
 while true; do
+  # Check health-server process - restart if died unexpectedly
+  if [ -n "${HEALTH_PID:-}" ] && ! kill -0 "$HEALTH_PID" 2>/dev/null; then
+    echo "Warning: health-server exited (PID $HEALTH_PID dead); restarting..."
+    node /home/node/app/health-server.js &
+    HEALTH_PID=$!
+    echo "Health server restarted (PID: $HEALTH_PID)"
+  fi
+
+  # Check JupyterLab process - restart if died unexpectedly
+  if [ "$RUNTIME_JUPYTER_ENABLED" = "true" ]; then
+    if [ -n "${JUPYTER_PID:-}" ]; then
+      if ! kill -0 "$JUPYTER_PID" 2>/dev/null; then
+        echo "Warning: JupyterLab exited (PID $JUPYTER_PID dead); checking log..."
+        tail -5 /tmp/jupyterlab.log 2>/dev/null || echo "No log file"
+        echo "Attempting JupyterLab restart..."
+        unset JUPYTER_PID
+        start_jupyter_once
+      fi
+    else
+      # First start
+      start_jupyter_once
+    fi
+  fi
+
+  openclaw doctor --fix || true
   echo "Launching OpenClaw gateway on port 7860..."
 
   GATEWAY_ARGS=(gateway run --port 7860 --bind lan)
@@ -1225,7 +1618,9 @@ while true; do
     echo "Gateway failed to start. Last 30 lines of log:"
     echo "────────────────────────────────────────────"
     tail -30 /home/node/.openclaw/gateway.log
-    exit 1
+    echo "Gateway failed — JupyterLab and env-builder still running. Retrying in 10s..."
+    sleep 10
+    continue
   fi
 
   # 11. Start WhatsApp Guardian after the gateway is accepting connections
@@ -1238,6 +1633,7 @@ while true; do
   # config edits can make OpenClaw exit/reload, and the gateway loop below will
   # relaunch it without rerunning all startup code.
   start_background_sync_once
+  start_background_devdata_sync
 
   set +e
   wait "$GATEWAY_PID"
@@ -1249,7 +1645,8 @@ while true; do
   GATEWAY_RESTART_COUNT=$((GATEWAY_RESTART_COUNT + 1))
   if [ "$GATEWAY_MAX_RESTARTS" != "0" ] && [ "$GATEWAY_RESTART_COUNT" -ge "$GATEWAY_MAX_RESTARTS" ]; then
     echo "Gateway exited with code ${GATEWAY_EXIT_CODE}; restart limit (${GATEWAY_MAX_RESTARTS}) reached."
-    exit "$GATEWAY_EXIT_CODE"
+    echo "Gateway stopped — JupyterLab and env-builder still running."
+    break
   fi
 
   echo "Gateway exited with code ${GATEWAY_EXIT_CODE}; restarting in ${GATEWAY_RESTART_DELAY}s..."

wa-guardian.js

@@ -20,7 +20,7 @@ const { randomUUID } = require('node:crypto');
 const GATEWAY_URL = "ws://127.0.0.1:7860";
 const GATEWAY_TOKEN = process.env.GATEWAY_TOKEN || "huggingclaw";
 const WHATSAPP_ENABLED = /^true$/i.test(process.env.WHATSAPP_ENABLED || "");
-const CHECK_INTERVAL = 5000;
+const CHECK_INTERVAL = 30000;
 const WAIT_TIMEOUT = 120000;
 const POST_515_NO_LOGOUT_MS = 90 * 1000;
 const SUCCESS_COOLDOWN_MS = 60 * 1000;
@@ -91,7 +91,7 @@ async function createConnection() {
           method: "connect",
           params: {
             minProtocol: 3,
-            maxProtocol: 3,
+            maxProtocol: 4,
             client: {
               id: "gateway-client",
               version: "1.0.0",
@@ -141,7 +141,13 @@ async function callRpc(ws, method, params) {
       }
     };
     ws.on("message", handler);
-    ws.send(JSON.stringify({ type: "req", id, method, params }));
+    try {
+      ws.send(JSON.stringify({ type: "req", id, method, params }));
+    } catch (sendErr) {
+      ws.removeListener("message", handler);
+      reject(sendErr);
+      return;
+    }
     setTimeout(() => { ws.removeListener("message", handler); reject(new Error("RPC Timeout")); }, WAIT_TIMEOUT + 5000);
   });
 }
@@ -247,6 +253,13 @@ if (!WHATSAPP_ENABLED) {
   process.exit(0);
 }
 
+process.on("unhandledRejection", (reason) => {
+  const msg = reason && reason.message ? reason.message : String(reason);
+  if (!/RPC Timeout|Timeout/i.test(msg)) {
+    console.log(`[guardian] Unhandled rejection: ${msg}`);
+  }
+});
+
 writeStatus({ configured: true, connected: false, pairing: false });
 console.log("[guardian] WhatsApp Guardian active. Monitoring pairing status...");
 setInterval(checkStatus, CHECK_INTERVAL);