refactor: optimize rate limiting, harden WebSocket parsing, update webhook payload formatting, and cleanup Docker assets

Dockerfile

@@ -65,7 +65,6 @@ RUN ln -s /home/node/.openclaw/openclaw-app/openclaw.mjs /usr/local/bin/openclaw
 # Copy HuggingClaw files
 COPY --chown=1000:1000 cloudflare-proxy.js /opt/cloudflare-proxy.js
 COPY --chown=1000:1000 cloudflare-proxy-setup.py /home/node/app/cloudflare-proxy-setup.py
-COPY --chown=1000:1000 cloudflare-worker.js /home/node/app/cloudflare-worker.js
 COPY --chown=1000:1000 health-server.js /home/node/app/health-server.js
 COPY --chown=1000:1000 iframe-fix.cjs /home/node/app/iframe-fix.cjs
 COPY --chown=1000:1000 start.sh /home/node/app/start.sh

health-server.js

@@ -13,7 +13,7 @@ const TELEGRAM_ENABLED = !!process.env.TELEGRAM_BOT_TOKEN;
 const WHATSAPP_ENABLED = /^true$/i.test(process.env.WHATSAPP_ENABLED || "");
 const WHATSAPP_STATUS_FILE = "/tmp/huggingclaw-wa-status.json";
 const HF_BACKUP_ENABLED = !!process.env.HF_TOKEN;
-const SYNC_INTERVAL = process.env.SYNC_INTERVAL || "600";
+const SYNC_INTERVAL = process.env.SYNC_INTERVAL || "180";
 const DASHBOARD_BASE = "/dashboard";
 const DASHBOARD_STATUS_PATH = `${DASHBOARD_BASE}/status`;
 const DASHBOARD_HEALTH_PATH = `${DASHBOARD_BASE}/health`;
@@ -135,6 +135,14 @@ function isRateLimited(req) {
   return recent.length > UPTIMEROBOT_RATE_MAX;
 }
 
+// Prune stale rate-limit buckets every 5 minutes to prevent unbounded growth.
+setInterval(() => {
+  const cutoff = Date.now() - UPTIMEROBOT_RATE_WINDOW_MS;
+  for (const [ip, timestamps] of uptimerobotRateMap) {
+    if (timestamps.every((ts) => ts < cutoff)) uptimerobotRateMap.delete(ip);
+  }
+}, 5 * 60 * 1000).unref();
+
 function isAllowedUptimeSetupOrigin(req) {
   const host = String(req.headers.host || "").toLowerCase();
   const origin = String(req.headers.origin || "").toLowerCase();

start.sh

@@ -450,9 +450,12 @@ echo ""
 
 # ── Trigger Webhook on Restart ──
 if [ -n "${WEBHOOK_URL:-}" ]; then
+  WEBHOOK_BODY=$(jq -n \
+    --arg model "$LLM_MODEL" \
+    '{"event":"restart","status":"success","message":"HuggingClaw gateway has started/restarted.","model":$model}')
   curl -s -X POST "$WEBHOOK_URL" \
        -H "Content-Type: application/json" \
-       -d '{"event":"restart", "status":"success", "message":"HuggingClaw gateway has started/restarted.", "model": "'"$LLM_MODEL"'"}' >/dev/null 2>&1 &
+       -d "$WEBHOOK_BODY" >/dev/null 2>&1 &
 fi
 
 # ── Trap SIGTERM for graceful shutdown ──

wa-guardian.js

@@ -9,7 +9,12 @@
 
 const fs = require("fs");
 const path = require("path");
-const { WebSocket } = require('/home/node/.openclaw/openclaw-app/node_modules/ws');
+let WebSocket;
+try {
+  ({ WebSocket } = require('ws'));
+} catch (_) {
+  ({ WebSocket } = require('/home/node/.openclaw/openclaw-app/node_modules/ws'));
+}
 const { randomUUID } = require('node:crypto');
 
 const GATEWAY_URL = "ws://127.0.0.1:7860";
@@ -76,7 +81,8 @@ async function createConnection() {
     let resolved = false;
 
     ws.on("message", (data) => {
-      const msg = JSON.parse(data.toString());
+      let msg;
+      try { msg = JSON.parse(data.toString()); } catch { return; }
 
       if (msg.type === "event" && msg.event === "connect.challenge") {
         ws.send(JSON.stringify({
@@ -123,7 +129,8 @@ async function callRpc(ws, method, params) {
   return new Promise((resolve, reject) => {
     const id = randomUUID();
     const handler = (data) => {
-      const msg = JSON.parse(data.toString());
+      let msg;
+      try { msg = JSON.parse(data.toString()); } catch { return; }
       if (msg.id === id) {
         ws.removeListener("message", handler);
         if (msg.ok === false) {
@@ -170,7 +177,7 @@ async function checkStatus() {
     isWaiting = true;
     writeStatus({ configured: true, connected: false, pairing: true });
     if (!hasShownWaitMessage) {
-      console.log("\n[guardian] 📱 WhatsApp pairing in progress. Please scan the QR code in the Control UI.");
+      console.log("\n[guardian] WhatsApp pairing in progress. Please scan the QR code in the Control UI.");
       hasShownWaitMessage = true;
     }
 
@@ -192,7 +199,7 @@ async function checkStatus() {
       if (linkedAfter515) {
         console.log("[guardian] 515 after scan: credentials saved, reloading config to start WhatsApp...");
       } else {
-        console.log("[guardian] ✅ Pairing completed! Reloading config...");
+        console.log("[guardian] Pairing completed! Reloading config...");
       }
 
       const getRes = await callRpc(ws, "config.get", {});
@@ -241,6 +248,6 @@ if (!WHATSAPP_ENABLED) {
 }
 
 writeStatus({ configured: true, connected: false, pairing: false });
-console.log("[guardian] ⚔️ WhatsApp Guardian active. Monitoring pairing status...");
+console.log("[guardian] WhatsApp Guardian active. Monitoring pairing status...");
 setInterval(checkStatus, CHECK_INTERVAL);
 setTimeout(checkStatus, 15000);