mlclaw 0.3.1 → 0.3.4

package/Dockerfile

@@ -1,17 +1,27 @@
-ARG OPENCLAW_VERSION=2026.7.1-beta.5
+ARG OPENCLAW_VERSION=2026.7.1
 ARG OPENCLAW_BASE_IMAGE=ghcr.io/openclaw/openclaw:${OPENCLAW_VERSION}
-ARG BROKERKIT_PLUGIN_VERSION=0.1.0
-ARG BROKERKIT_VERSION=fcfc5f2304436d952b18e7c9583bb378d1952776
-ARG MLCLAW_RUNTIME_IMAGE=ghcr.io/osolmaz/mlclaw:0.3.1-openclaw-2026.7.1-beta.5
+ARG BROKERKIT_PLUGIN_VERSION=0.2.1
+ARG BROKERKIT_VERSION=hf-broker/v0.1.0
+ARG MLCLAW_RUNTIME_IMAGE=ghcr.io/osolmaz/mlclaw:0.3.4-openclaw-2026.7.1
 
 FROM golang:1.26.5-bookworm AS hf-broker-build
 ARG BROKERKIT_VERSION
 RUN git init /src \
-  && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "$BROKERKIT_VERSION" \
-  && git -C /src checkout --detach FETCH_HEAD \
-  && test "$(git -C /src rev-parse HEAD)" = "$BROKERKIT_VERSION" \
+  && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "refs/tags/$BROKERKIT_VERSION:refs/tags/$BROKERKIT_VERSION" \
+  && git -C /src checkout --detach "$BROKERKIT_VERSION" \
+  && test "$(git -C /src rev-parse "refs/tags/$BROKERKIT_VERSION^{commit}")" = "$(git -C /src rev-parse HEAD)" \
   && cd /src \
-  && GOWORK=off go build -trimpath -o /out/hf-broker ./brokers/huggingface/cmd/hf-broker
+  && GOWORK=off go build -trimpath -o /out/hf-broker ./brokers/huggingface/cmd/hf-broker \
+  && /out/hf-broker policy render \
+    --preset request-all-agent-operations \
+    --client default \
+    --profile-out /out/hf-broker.policy-profile.json \
+    --output /out/hf-broker.scope.json \
+    --manifest-out /out/hf-broker.policy-manifest.json \
+  && /out/hf-broker doctor policy \
+    --profile /out/hf-broker.policy-profile.json \
+    --scope /out/hf-broker.scope.json \
+    --manifest /out/hf-broker.policy-manifest.json
 
 FROM node:24-bookworm-slim AS brokerkit-plugin-build
 ARG BROKERKIT_VERSION
@@ -19,9 +29,9 @@ RUN apt-get update \
   && apt-get install -y --no-install-recommends ca-certificates git \
   && rm -rf /var/lib/apt/lists/* \
   && git init /src \
-  && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "$BROKERKIT_VERSION" \
-  && git -C /src checkout --detach FETCH_HEAD \
-  && test "$(git -C /src rev-parse HEAD)" = "$BROKERKIT_VERSION"
+  && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "refs/tags/$BROKERKIT_VERSION:refs/tags/$BROKERKIT_VERSION" \
+  && git -C /src checkout --detach "$BROKERKIT_VERSION" \
+  && test "$(git -C /src rev-parse "refs/tags/$BROKERKIT_VERSION^{commit}")" = "$(git -C /src rev-parse HEAD)"
 WORKDIR /src
 RUN corepack enable \
   && pnpm install --frozen-lockfile \
@@ -69,7 +79,9 @@ COPY --from=sync-build /build/dist/hf-state-sync.js /app/hf-state-sync.js
 COPY --from=sync-build /build/dist/hf-tooling-seed.js /app/hf-tooling-seed.js
 COPY --from=sync-build /build/dist/mlclaw-space-runtime.js /app/mlclaw-space-runtime.js
 COPY --from=hf-broker-build /out/hf-broker /usr/local/bin/hf-broker
-COPY hf-broker.scope.json /app/hf-broker.scope.json
+COPY --from=hf-broker-build /out/hf-broker.scope.json /app/hf-broker.scope.json
+COPY --from=hf-broker-build /out/hf-broker.policy-profile.json /app/hf-broker.policy-profile.json
+COPY --from=hf-broker-build /out/hf-broker.policy-manifest.json /app/hf-broker.policy-manifest.json
 COPY --chown=node:node openclaw.default.json /app/openclaw.default.json
 COPY --chown=node:node entrypoint.sh /app/entrypoint.sh
 COPY --chown=node:node assets/ /app/assets/

package/README.md

@@ -209,10 +209,12 @@ merges every BrokerKit-compatible backend configured in
 `MLCLAW_OPERATOR_BROKERS_FILE` and lets administrators inspect, approve, deny,
 cancel, or revoke requests. The plugin registers the Gateway tab, while ML Claw
 serves the immutable packaged UI from its trusted HTTP boundary and gives it a
-small launcher inside the Gateway. Decisions open in an unframeable protected
-document with a renewable, short-lived, admin-bound browser token. Broker
-operator tokens remain in backend-only files and are never sent to the browser
-or OpenClaw. See
+small popover inside the Gateway. Administrators decide requests directly in
+the sandboxed popover when `MLCLAW_BROKERKIT_POPOVER_DECISIONS=true`; otherwise
+the popover remains read-only and decisions use the standalone protected page.
+Both flows use a renewable, short-lived, admin-bound browser token.
+Broker operator tokens remain in backend-only files and are never sent to the
+browser or OpenClaw. See
 [Operator Broker Configuration](docs/operator-brokers-config.md).
 
 - `/mlclaw/credentials`: connect or disconnect Hugging Face MCP and Research
@@ -239,9 +241,9 @@ MLCLAW_BRAND_SHORT_NAME=Bob
 MLCLAW_BRAND_THEME_COLOR=#111827
 MLCLAW_BRAND_LOGO=mlclaw.svg
 MLCLAW_BRAND_FAVICON=hf-logo.svg
-MLCLAW_BRAND_FAVICON_32=hf-logo.svg
+MLCLAW_BRAND_FAVICON_32=hf-logo.png
 MLCLAW_BRAND_FAVICON_ICO=hf-logo.svg
-MLCLAW_BRAND_APPLE_TOUCH_ICON=assistant-avatar.svg
+MLCLAW_BRAND_APPLE_TOUCH_ICON=hf-logo.png
 MLCLAW_BRAND_ASSISTANT_AVATAR=assistant-avatar.svg
 ```
 

package/dist/hf-tooling-seed.js

@@ -126,6 +126,24 @@ This workspace has Hugging Face tooling preinstalled. Use the Hugging Face CLI
 \`hf\`, \`hf-discover\`, and \`uv\` for Hub, dataset, model, Space, and bucket
 work.
 
+Protected Hugging Face mutations use the preconfigured HF Broker. Never ask
+the user for a Hugging Face token and never run \`hf auth login\`. Choose the
+matching \`hf_*\` MCP tool for the operation. Omit \`request_id\` for a new
+operation unless you deliberately need an exact retry identity. Record the
+returned operation \`id\`, then use \`hf_operation_wait\` or
+\`hf_operation_get\` to observe completion. Use the bounded
+\`hf_operation_list\` tool, optionally filtered by \`request_id\`, to recover
+an operation after an ambiguous transport timeout.
+
+Never reuse a request ID for a different target or argument set. A request-ID
+conflict is durable: inspect the existing operation instead of restarting the
+broker. Protected actions appear in the ML Claw BrokerKit control and may also
+be sent through configured OpenClaw channels.
+
+After repository creation, use the brokered Git transport for repository
+contents. The limited broker credential is not a Hugging Face Hub token; do
+not report it as missing Hub access.
+
 Hugging Face agent skills are available in both \`.agents/skills\` and
 \`skills\`. Prefer these skills when the task involves Hugging Face: