mlclaw 0.3.2 → 0.3.5

package/Dockerfile

@@ -1,15 +1,15 @@
-ARG OPENCLAW_VERSION=2026.7.1-beta.5
+ARG OPENCLAW_VERSION=2026.7.1
 ARG OPENCLAW_BASE_IMAGE=ghcr.io/openclaw/openclaw:${OPENCLAW_VERSION}
-ARG BROKERKIT_PLUGIN_VERSION=0.1.0
-ARG BROKERKIT_VERSION=a2adf6e626bbd509605bb7c72a7f3a8b1c00f045
-ARG MLCLAW_RUNTIME_IMAGE=ghcr.io/osolmaz/mlclaw:0.3.2-openclaw-2026.7.1-beta.5
+ARG BROKERKIT_PLUGIN_VERSION=0.2.1
+ARG BROKERKIT_VERSION=hf-broker/v0.1.0
+ARG MLCLAW_RUNTIME_IMAGE=ghcr.io/osolmaz/mlclaw:0.3.5-openclaw-2026.7.1
 
 FROM golang:1.26.5-bookworm AS hf-broker-build
 ARG BROKERKIT_VERSION
 RUN git init /src \
-  && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "$BROKERKIT_VERSION" \
-  && git -C /src checkout --detach FETCH_HEAD \
-  && test "$(git -C /src rev-parse HEAD)" = "$BROKERKIT_VERSION" \
+  && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "refs/tags/$BROKERKIT_VERSION:refs/tags/$BROKERKIT_VERSION" \
+  && git -C /src checkout --detach "$BROKERKIT_VERSION" \
+  && test "$(git -C /src rev-parse "refs/tags/$BROKERKIT_VERSION^{commit}")" = "$(git -C /src rev-parse HEAD)" \
   && cd /src \
   && GOWORK=off go build -trimpath -o /out/hf-broker ./brokers/huggingface/cmd/hf-broker \
   && /out/hf-broker policy render \
@@ -23,21 +23,6 @@ RUN git init /src \
     --scope /out/hf-broker.scope.json \
     --manifest /out/hf-broker.policy-manifest.json
 
-FROM node:24-bookworm-slim AS brokerkit-plugin-build
-ARG BROKERKIT_VERSION
-RUN apt-get update \
-  && apt-get install -y --no-install-recommends ca-certificates git \
-  && rm -rf /var/lib/apt/lists/* \
-  && git init /src \
-  && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "$BROKERKIT_VERSION" \
-  && git -C /src checkout --detach FETCH_HEAD \
-  && test "$(git -C /src rev-parse HEAD)" = "$BROKERKIT_VERSION"
-WORKDIR /src
-RUN corepack enable \
-  && pnpm install --frozen-lockfile \
-  && pnpm --filter openclaw-brokerkit build \
-  && pnpm --filter openclaw-brokerkit pack --pack-destination /out
-
 # Stage 1: build the state-sync bundle so the runtime image needs no dev deps.
 FROM node:24-bookworm-slim AS sync-build
 WORKDIR /build
@@ -69,10 +54,8 @@ RUN python3 -m pip install --break-system-packages --no-cache-dir \
   "uv==0.11.28" \
   "hf-discover==1.3.7"
 ARG BROKERKIT_PLUGIN_VERSION
-COPY --from=brokerkit-plugin-build /out/openclaw-brokerkit-${BROKERKIT_PLUGIN_VERSION}.tgz /tmp/openclaw-brokerkit.tgz
 RUN npm install --omit=dev --omit=peer --no-audit --no-fund --prefix /opt/openclaw-plugins \
-  /tmp/openclaw-brokerkit.tgz \
-  && rm /tmp/openclaw-brokerkit.tgz \
+  "openclaw-brokerkit@${BROKERKIT_PLUGIN_VERSION}" \
   && test -f /opt/openclaw-plugins/node_modules/openclaw-brokerkit/openclaw.plugin.json
 
 COPY --from=sync-build /build/dist/hf-state-sync.js /app/hf-state-sync.js

package/dist/hf-tooling-seed.js

@@ -127,12 +127,18 @@ This workspace has Hugging Face tooling preinstalled. Use the Hugging Face CLI
 work.
 
 Protected Hugging Face mutations use the preconfigured HF Broker. Never ask
-the user for a Hugging Face token and never run \`hf auth login\`. Use the
-\`hf_repo_create\`, \`hf_operation_get\`, and \`hf_operation_wait\` MCP tools,
-or run \`hf-broker client repo create OWNER/NAME --type dataset\`. A protected
-action creates an approval in the ML Claw BrokerKit control and may also be
-sent through configured OpenClaw channels. The operation ID is resumable with
-\`hf-broker client operation wait ID\`.
+the user for a Hugging Face token and never run \`hf auth login\`. Choose the
+matching \`hf_*\` MCP tool for the operation. Omit \`request_id\` for a new
+operation unless you deliberately need an exact retry identity. Record the
+returned operation \`id\`, then use \`hf_operation_wait\` or
+\`hf_operation_get\` to observe completion. Use the bounded
+\`hf_operation_list\` tool, optionally filtered by \`request_id\`, to recover
+an operation after an ambiguous transport timeout.
+
+Never reuse a request ID for a different target or argument set. A request-ID
+conflict is durable: inspect the existing operation instead of restarting the
+broker. Protected actions appear in the ML Claw BrokerKit control and may also
+be sent through configured OpenClaw channels.
 
 After repository creation, use the brokered Git transport for repository
 contents. The limited broker credential is not a Hugging Face Hub token; do

package/dist/mlclaw-space-runtime.js

@@ -4698,7 +4698,7 @@ var approvalSchema = external_exports.object({
   pending_expires_at: external_exports.string().datetime({ offset: true }).optional(),
   active_expires_at: external_exports.string().datetime({ offset: true }).optional(),
   requested_duration_seconds: external_exports.number().int().positive().safe(),
-  requested_max_uses: external_exports.number().int().positive().safe(),
+  requested_max_uses: external_exports.number().int().positive().safe().nullable(),
   granted_max_uses: external_exports.number().int().positive().safe().nullable(),
   used_count: external_exports.number().int().nonnegative().safe(),
   request_reason: external_exports.string().max(2e3).optional(),
@@ -4712,10 +4712,10 @@ var approvalSchema = external_exports.object({
     facts: external_exports.array(displayFieldSchema).max(20).optional()
   }).strict(),
   presentation_unavailable: external_exports.boolean().optional(),
-  allowed_actions: external_exports.array(external_exports.enum(["approve", "deny", "cancel", "revoke"])).max(4),
+  allowed_actions: external_exports.array(external_exports.enum(["approve", "deny", "revoke"])).max(3),
   approval_bounds: external_exports.object({
     max_duration_seconds: external_exports.number().int().positive().safe(),
-    max_uses: external_exports.number().int().positive().safe()
+    max_uses: external_exports.number().int().positive().safe().nullable()
   }).strict().optional()
 }).strict();
 var approvalPageSchema = external_exports.object({
@@ -4808,10 +4808,10 @@ var BrokerOperatorClient = class {
           expected_revision: decision.expectedRevision,
           idempotency_key: decision.idempotencyKey,
           on_behalf_of: decision.onBehalfOf,
-          ...decision.durationSeconds || decision.maxUses ? {
+          ...decision.durationSeconds !== void 0 || decision.maxUses !== void 0 ? {
             constraints: {
-              ...decision.durationSeconds ? { duration_seconds: decision.durationSeconds } : {},
-              ...decision.maxUses ? { max_uses: decision.maxUses } : {}
+              ...decision.durationSeconds !== void 0 ? { duration_seconds: decision.durationSeconds } : {},
+              ...decision.maxUses !== void 0 ? { max_uses: decision.maxUses } : {}
             }
           } : {}
         })
@@ -7475,11 +7475,11 @@ var DelegatedBrokerKit = class {
       renewal_transport: "direct"
     };
   }
-  authorize(header) {
-    return this.authorizeSession(header)?.actor;
+  authorize(token) {
+    return this.authorizeSession(token)?.actor;
   }
-  authorizeSession(header) {
-    const encoded = authenticatedTokenPayload(header, (value) => this.sign(value));
+  authorizeSession(token) {
+    const encoded = authenticatedTokenPayload(token, (value) => this.sign(value));
     if (!encoded) return void 0;
     const payload = parseTokenPayload(encoded);
     return payload && tokenIsCurrent(payload, this.now()) ? { actor: payload.subject, sessionId: payload.nonce, access: payload.access } : void 0;
@@ -7750,16 +7750,21 @@ function decisionOptions(record, action, expectedRevision, actor, options) {
     idempotencyKey: decisionKey(record, action, actor),
     onBehalfOf: `mlclaw:${actor}`,
     ...options.durationSeconds ? { durationSeconds: options.durationSeconds } : {},
-    ...options.maxUses ? { maxUses: options.maxUses } : {}
+    ...options.maxUses !== void 0 ? { maxUses: options.maxUses } : {}
   };
 }
 function decisionWithinBounds(action, request, options) {
   if (options.durationSeconds === void 0 && options.maxUses === void 0) return true;
   const bounds = request.approval_bounds;
   return Boolean(
-    action === "approve" && bounds && options.durationSeconds !== void 0 && options.durationSeconds <= bounds.max_duration_seconds && options.maxUses !== void 0 && options.maxUses <= bounds.max_uses
+    action === "approve" && bounds && options.durationSeconds !== void 0 && options.durationSeconds <= bounds.max_duration_seconds && useLimitWithinBounds(options.maxUses, bounds.max_uses)
   );
 }
+function useLimitWithinBounds(requested, maximum) {
+  if (requested === void 0) return false;
+  if (requested === null) return maximum === null;
+  return maximum === null || requested <= maximum;
+}
 function assertDecisionAllowed(request, record, action, expectedRevision, options) {
   if (request.revision !== record.revision || request.revision !== expectedRevision) {
     throw delegatedError("revision_stale");
@@ -7768,10 +7773,8 @@ function assertDecisionAllowed(request, record, action, expectedRevision, option
     throw delegatedError("action_not_allowed");
   }
 }
-function authenticatedTokenPayload(header, sign3) {
-  if (!header?.startsWith("Bearer ")) return void 0;
-  const token = header.slice("Bearer ".length);
-  if (token.length > 4096) return void 0;
+function authenticatedTokenPayload(token, sign3) {
+  if (!token || token.length > 4096 || !/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/u.test(token)) return void 0;
   const [encoded, signature, extra] = token.split(".");
   return encoded && signature && extra === void 0 && safeEqual(signature, sign3(encoded)) ? encoded : void 0;
 }
@@ -8520,6 +8523,8 @@ function remainingUpstreamTimeout(deadline) {
 }
 
 // src/mlclaw-space-runtime/openclaw-config.ts
+var BROKER_MCP_CONNECTION_TIMEOUT_MS = 1e4;
+var BROKER_MCP_REQUEST_TIMEOUT_MS = 45e3;
 async function configureOpenClawGateway(config2) {
   const raw2 = await fs.readFile(config2.openclawConfigPath, "utf8");
   const openclawConfig = JSON.parse(raw2);
@@ -8562,16 +8567,52 @@ function configureBrokerMcpServer(openclawConfig, config2) {
   }
   const existing = objectValue2(servers["huggingface-broker"]);
   servers["huggingface-broker"] = {
-    ...existing,
+    ...preservedBrokerMcpFields(existing),
     command: "/usr/local/bin/hf-broker",
     args: ["mcp"],
+    connectionTimeoutMs: BROKER_MCP_CONNECTION_TIMEOUT_MS,
+    requestTimeoutMs: BROKER_MCP_REQUEST_TIMEOUT_MS,
     env: {
-      MLCLAW_HF_BROKER_URL: config2.brokerAgentUrl,
-      MLCLAW_HF_BROKER_AGENT_SECRET_FILE: config2.brokerAgentSecretFile
+      HF_BROKER_AGENT_ENDPOINT: brokerAgentEndpoint(config2.brokerAgentUrl),
+      HF_BROKER_SHARED_SECRET_FILE: config2.brokerAgentSecretFile
     },
     ...existing?.enabled === false ? { enabled: false } : { enabled: true }
   };
 }
+function brokerAgentEndpoint(agentUrl) {
+  const parsed = new URL(agentUrl);
+  if (parsed.protocol !== "http:" || !parsed.port || parsed.username || parsed.password) {
+    throw new Error("HF Broker agent URL must be an unauthenticated HTTP URL with an explicit port");
+  }
+  return `tcp://${parsed.host}`;
+}
+function preservedBrokerMcpFields(existing) {
+  const codex = preservedBrokerCodexConfig(objectValue2(existing?.codex));
+  return {
+    ...existing?.toolFilter && typeof existing.toolFilter === "object" ? { toolFilter: existing.toolFilter } : {},
+    ...typeof existing?.supportsParallelToolCalls === "boolean" ? { supportsParallelToolCalls: existing.supportsParallelToolCalls } : {},
+    ...codex ? { codex } : {}
+  };
+}
+function preservedBrokerCodexConfig(existing) {
+  const agents = brokerAgentScope(existing?.agents);
+  const defaultToolsApprovalMode = brokerApprovalMode(existing?.defaultToolsApprovalMode);
+  const nativeApprovalMode = brokerApprovalMode(existing?.default_tools_approval_mode);
+  const preserved = {
+    ...agents ? { agents } : {},
+    ...defaultToolsApprovalMode ? { defaultToolsApprovalMode } : {},
+    ...nativeApprovalMode ? { default_tools_approval_mode: nativeApprovalMode } : {}
+  };
+  return Object.keys(preserved).length > 0 ? preserved : void 0;
+}
+function brokerAgentScope(value) {
+  if (!Array.isArray(value)) return void 0;
+  const agents = value.filter((agent) => typeof agent === "string" && /^[a-z0-9][a-z0-9_-]{0,63}$/iu.test(agent.trim())).map((agent) => agent.trim());
+  return agents.length > 0 ? agents : void 0;
+}
+function brokerApprovalMode(value) {
+  return value === "auto" || value === "prompt" || value === "approve" ? value : void 0;
+}
 function configureBrokerKitPlugin(openclawConfig, config2) {
   const plugins = object(openclawConfig, "plugins");
   const load = object(plugins, "load");
@@ -9510,6 +9551,7 @@ function escapeHtml2(value) {
 }
 
 // src/mlclaw-space-runtime/app.ts
+var BROKERKIT_SESSION_HEADER = "brokerkit-session";
 function createSpaceRuntimeApp(config2, controls) {
   const app = new Hono2();
   const operatorBrokers = new OperatorBrokerRegistry(config2.operatorBrokers);
@@ -9649,7 +9691,7 @@ function createSpaceRuntimeApp(config2, controls) {
       return delegatedFailure(c, error);
     }
   });
-  for (const action of ["approve", "deny", "cancel", "revoke"]) {
+  for (const action of ["approve", "deny", "revoke"]) {
     app.post(`/mlclaw/api/brokerkit/requests/:handle/${action}`, async (c) => {
       const identity = delegatedIdentity(c, delegatedBrokerKit);
       if (!identity || identity.access !== "decide") return delegatedErrorResponse(c, "not_authorized", 401);
@@ -9660,7 +9702,7 @@ function createSpaceRuntimeApp(config2, controls) {
       const constraints = recordValue(body.constraints);
       const expectedRevision = positiveJsonInteger(body.expectedRevision);
       const durationSeconds = optionalPositiveJsonInteger(constraints?.durationSeconds);
-      const maxUses = optionalPositiveJsonInteger(constraints?.maxUses);
+      const maxUses = optionalUseLimitJsonInteger(constraints?.maxUses);
       if (!expectedRevision || body.constraints !== void 0 && (!constraints || Object.keys(constraints).some((key) => !["durationSeconds", "maxUses"].includes(key)) || durationSeconds === void 0 || maxUses === void 0) || durationSeconds === "invalid" || maxUses === "invalid" || action !== "approve" && (durationSeconds !== void 0 || maxUses !== void 0)) {
         return delegatedErrorResponse(c, "invalid_input", 400);
       }
@@ -9669,7 +9711,7 @@ function createSpaceRuntimeApp(config2, controls) {
           c,
           await delegatedBrokerKit.decide(c.req.param("handle"), action, expectedRevision, identity.actor, {
             ...typeof durationSeconds === "number" ? { durationSeconds } : {},
-            ...typeof maxUses === "number" ? { maxUses } : {}
+            ...typeof maxUses === "number" || maxUses === null ? { maxUses } : {}
           })
         );
       } catch (error) {
@@ -9677,6 +9719,7 @@ function createSpaceRuntimeApp(config2, controls) {
       }
     });
   }
+  app.all("/mlclaw/api/brokerkit/*", (c) => delegatedErrorResponse(c, "not_found", 404));
   app.post("/mlclaw/api/integrations/huggingface/disconnect", async (c) => {
     const auth = requireAdmin(c, config2);
     if (auth instanceof Response) {
@@ -10052,12 +10095,12 @@ function delegatedEventQuery(urlValue) {
 }
 function delegatedIdentity(c, delegated) {
   if (!delegatedOriginAllowed(c)) return void 0;
-  return delegated.authorizeSession(c.req.header("authorization"));
+  return delegated.authorizeSession(c.req.header(BROKERKIT_SESSION_HEADER));
 }
 function delegatedPreflight(c) {
   if (!delegatedOriginAllowed(c)) return delegatedErrorResponse(c, "not_authorized", 403);
   delegatedHeaders(c);
-  c.header("access-control-allow-headers", "authorization, content-type");
+  c.header("access-control-allow-headers", `${BROKERKIT_SESSION_HEADER}, content-type`);
   c.header("access-control-allow-methods", "GET, POST, OPTIONS");
   c.header("access-control-max-age", "300");
   return c.body(null, 204);
@@ -10080,13 +10123,22 @@ function delegatedFailure(c, error) {
     const status = error.status === 404 ? 404 : error.status === 409 ? 409 : 502;
     return delegatedErrorResponse(c, code, status);
   }
-  process.stderr.write(`[mlclaw] delegated BrokerKit request failed: ${formatError(error)}
-`);
+  process.stderr.write(
+    `[mlclaw] delegated BrokerKit request failed: route=${delegatedRouteLabel(c)} status=502 class=${safeErrorClass(error)}
+`
+  );
   return delegatedErrorResponse(c, "source_unavailable", 502);
 }
+function delegatedRouteLabel(c) {
+  const pathLabel = c.req.path.replace(/\/requests\/[^/]+/u, "/requests/:handle");
+  return `${c.req.method}:${pathLabel}`;
+}
+function safeErrorClass(error) {
+  const name = error instanceof Error ? error.name : typeof error;
+  return /^[A-Za-z][A-Za-z0-9]{0,79}$/u.test(name) ? name : "unknown";
+}
 function delegatedHeaders(c) {
   c.header("access-control-allow-origin", "null");
-  c.header("access-control-allow-credentials", "true");
   c.header("cache-control", "no-store");
   c.header("vary", "origin");
   c.header("x-content-type-options", "nosniff");
@@ -10263,6 +10315,10 @@ function optionalPositiveJsonInteger(value) {
   if (value === void 0) return void 0;
   return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : "invalid";
 }
+function optionalUseLimitJsonInteger(value) {
+  if (value === null) return null;
+  return optionalPositiveJsonInteger(value);
+}
 function fixedWindowRateLimit(limit, windowMs) {
   const windows = /* @__PURE__ */ new Map();
   return (key) => {

package/dist/mlclaw.mjs

@@ -14836,9 +14836,9 @@ function sseDataToText(raw) {
 import fs11 from "node:fs";
 import path12 from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-var DEFAULT_OPENCLAW_VERSION = "2026.7.1-beta.5";
-var DEFAULT_BROKERKIT_PLUGIN_VERSION = "0.1.0";
-var DEFAULT_BROKERKIT_VERSION = "a2adf6e626bbd509605bb7c72a7f3a8b1c00f045";
+var DEFAULT_OPENCLAW_VERSION = "2026.7.1";
+var DEFAULT_BROKERKIT_PLUGIN_VERSION = "0.2.1";
+var DEFAULT_BROKERKIT_VERSION = "hf-broker/v0.1.0";
 var DEFAULT_RUNTIME_IMAGE_REPOSITORY = "ghcr.io/osolmaz/mlclaw";
 var PACKAGE_METADATA = readPackageMetadata();
 var PACKAGE_VERSION = packageString("version", "unknown");
@@ -14981,9 +14981,9 @@ ARG BROKERKIT_VERSION=${BROKERKIT_VERSION}
 FROM golang:1.26.5-bookworm AS hf-broker-build
 ARG BROKERKIT_VERSION
 RUN git init /src \\
-  && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "$BROKERKIT_VERSION" \\
-  && git -C /src checkout --detach FETCH_HEAD \\
-  && test "$(git -C /src rev-parse HEAD)" = "$BROKERKIT_VERSION" \\
+  && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "refs/tags/$BROKERKIT_VERSION:refs/tags/$BROKERKIT_VERSION" \\
+  && git -C /src checkout --detach "$BROKERKIT_VERSION" \\
+  && test "$(git -C /src rev-parse "refs/tags/$BROKERKIT_VERSION^{commit}")" = "$(git -C /src rev-parse HEAD)" \\
   && cd /src \\
   && GOWORK=off go build -trimpath -o /out/hf-broker ./brokers/huggingface/cmd/hf-broker \\
   && /out/hf-broker policy render \\
@@ -14997,12 +14997,6 @@ RUN git init /src \\
     --scope /out/hf-broker.scope.json \\
     --manifest /out/hf-broker.policy-manifest.json
 
-FROM node:24-bookworm-slim AS brokerkit-plugin-build
-ARG BROKERKIT_VERSION
-RUN apt-get update   && apt-get install -y --no-install-recommends ca-certificates git   && rm -rf /var/lib/apt/lists/*   && git init /src   && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "$BROKERKIT_VERSION"   && git -C /src checkout --detach FETCH_HEAD   && test "$(git -C /src rev-parse HEAD)" = "$BROKERKIT_VERSION"
-WORKDIR /src
-RUN corepack enable   && pnpm install --frozen-lockfile   && pnpm --filter openclaw-brokerkit build   && pnpm --filter openclaw-brokerkit pack --pack-destination /out
-
 FROM ${OPENCLAW_BASE_IMAGE}
 
 LABEL org.opencontainers.image.source="https://github.com/osolmaz/mlclaw"
@@ -15026,8 +15020,7 @@ RUN python3 -m pip install --break-system-packages --no-cache-dir \\
   "uv==0.11.28" \\
   "hf-discover==1.3.7"
 ARG BROKERKIT_PLUGIN_VERSION
-COPY --from=brokerkit-plugin-build /out/openclaw-brokerkit-\${BROKERKIT_PLUGIN_VERSION}.tgz /tmp/openclaw-brokerkit.tgz
-RUN npm install --omit=dev --omit=peer --no-audit --no-fund --prefix /opt/openclaw-plugins   /tmp/openclaw-brokerkit.tgz   && rm /tmp/openclaw-brokerkit.tgz   && test -f /opt/openclaw-plugins/node_modules/openclaw-brokerkit/openclaw.plugin.json
+RUN npm install --omit=dev --omit=peer --no-audit --no-fund --prefix /opt/openclaw-plugins   "openclaw-brokerkit@\${BROKERKIT_PLUGIN_VERSION}"   && test -f /opt/openclaw-plugins/node_modules/openclaw-brokerkit/openclaw.plugin.json
 
 COPY --chown=node:node runtime/hf-state-sync.js /app/hf-state-sync.js
 COPY --chown=node:node runtime/hf-tooling-seed.js /app/hf-tooling-seed.js

package/entrypoint.sh

@@ -93,10 +93,8 @@ start_hf_broker() {
   HF_BROKER_HF_TOKEN_FILE="$HF_BROKER_RUN_DIR/hf-token" \
   HF_BROKER_SECRETS_FILE="$HF_BROKER_RUN_DIR/agent-secrets.conf" \
   HF_BROKER_OPERATOR_SECRETS_FILE="$HF_BROKER_RUN_DIR/operator-secrets.conf" \
-  HF_BROKER_BIND_ADDR=127.0.0.1 \
-  HF_BROKER_PORT=7863 \
-  HF_BROKER_OPERATOR_BIND_ADDR=127.0.0.1 \
-  HF_BROKER_OPERATOR_PORT=7864 \
+  HF_BROKER_AGENT_ENDPOINT=tcp://127.0.0.1:7863 \
+  HF_BROKER_OPERATOR_ENDPOINT=tcp://127.0.0.1:7864 \
   HF_BROKER_SCOPE_FILE=/app/hf-broker.scope.json \
   HF_BROKER_STATE_DIR="$HF_BROKER_STATE_DIR" \
   gosu hf-broker:hf-broker /usr/local/bin/hf-broker &

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "mlclaw",
-  "version": "0.3.2",
+  "version": "0.3.5",
   "license": "MIT",
   "config": {
-    "openclawVersion": "2026.7.1-beta.5",
-    "brokerkitVersion": "a2adf6e626bbd509605bb7c72a7f3a8b1c00f045",
-    "brokerkitPluginVersion": "0.1.0",
+    "openclawVersion": "2026.7.1",
+    "brokerkitVersion": "hf-broker/v0.1.0",
+    "brokerkitPluginVersion": "0.2.1",
     "runtimeImageRepository": "ghcr.io/osolmaz/mlclaw"
   },
   "repository": {
@@ -55,8 +55,8 @@
     "pack:check": "node scripts/check-package.mjs",
     "prepack": "npm run build",
     "check:secrets": "node scripts/check-secrets.mjs",
-    "format": "prettier --check eslint.config.mjs vitest.config.ts vitest.stryker.config.ts package.json README.md src/hf-state-sync/archive.ts src/hf-state-sync/cli.ts src/hf-state-sync/paths.ts src/hf-state-sync/prepare.ts src/hf-state-sync/stage-worker.ts src/hf-state-sync/supervise.ts src/mlclaw-space-runtime/delegated-brokerkit.ts src/mlclaw-space-runtime/delegated-revisions.ts src/mlclaw-space-runtime/operator-brokers.ts src/mlclaw-space-runtime/openclaw-config.ts src/mlclaw-space-runtime/app.ts src/mlclaw-space-runtime/config.ts src/mlclaw-space-runtime/openai-credentials.ts src/mlclaw-space-runtime/server.ts src/mlclaw-space-runtime/shell.ts src/mlclaw-control-ui/src/main.tsx src/mlclaw-control-ui/src/styles.css src/mlclaw-control-ui/src/components/ui/utils.ts src/mlclaw/git.ts test/hf-state-sync.archive.test.ts test/hf-state-sync.roundtrip.test.ts test/hf-state-sync.supervise.test.ts test/mlclaw.bundle.test.ts test/mlclaw.delegated-brokerkit.test.ts test/mlclaw.generate-space.test.ts test/mlclaw.operator-brokers.test.ts test/mlclaw.runtime-image.test.ts test/mlclaw.space-runtime.test.ts docs/operator-brokers-config.md",
-    "format:write": "prettier --write eslint.config.mjs vitest.config.ts vitest.stryker.config.ts package.json README.md src/hf-state-sync/archive.ts src/hf-state-sync/cli.ts src/hf-state-sync/paths.ts src/hf-state-sync/prepare.ts src/hf-state-sync/stage-worker.ts src/hf-state-sync/supervise.ts src/mlclaw-space-runtime/delegated-brokerkit.ts src/mlclaw-space-runtime/delegated-revisions.ts src/mlclaw-space-runtime/operator-brokers.ts src/mlclaw-space-runtime/openclaw-config.ts src/mlclaw-space-runtime/app.ts src/mlclaw-space-runtime/config.ts src/mlclaw-space-runtime/openai-credentials.ts src/mlclaw-space-runtime/server.ts src/mlclaw-space-runtime/shell.ts src/mlclaw-control-ui/src/main.tsx src/mlclaw-control-ui/src/styles.css src/mlclaw-control-ui/src/components/ui/utils.ts src/mlclaw/git.ts test/hf-state-sync.archive.test.ts test/hf-state-sync.roundtrip.test.ts test/hf-state-sync.supervise.test.ts test/mlclaw.bundle.test.ts test/mlclaw.delegated-brokerkit.test.ts test/mlclaw.generate-space.test.ts test/mlclaw.operator-brokers.test.ts test/mlclaw.runtime-image.test.ts test/mlclaw.space-runtime.test.ts docs/operator-brokers-config.md",
+    "format": "prettier --check eslint.config.mjs vitest.config.ts vitest.stryker.config.ts package.json README.md src/hf-state-sync/archive.ts src/hf-state-sync/cli.ts src/hf-state-sync/paths.ts src/hf-state-sync/prepare.ts src/hf-state-sync/stage-worker.ts src/hf-state-sync/supervise.ts src/mlclaw-space-runtime/delegated-brokerkit.ts src/mlclaw-space-runtime/delegated-revisions.ts src/mlclaw-space-runtime/operator-brokers.ts src/mlclaw-space-runtime/openclaw-config.ts src/mlclaw-space-runtime/app.ts src/mlclaw-space-runtime/config.ts src/mlclaw-space-runtime/openai-credentials.ts src/mlclaw-space-runtime/server.ts src/mlclaw-space-runtime/shell.ts src/mlclaw-control-ui/src/main.tsx src/mlclaw-control-ui/src/styles.css src/mlclaw-control-ui/src/components/ui/utils.ts src/mlclaw/git.ts test/hf-state-sync.archive.test.ts test/hf-state-sync.roundtrip.test.ts test/hf-state-sync.supervise.test.ts test/mlclaw.brokerkit-agent-tools.test.ts test/mlclaw.bundle.test.ts test/mlclaw.delegated-brokerkit.test.ts test/mlclaw.generate-space.test.ts test/mlclaw.operator-brokers.test.ts test/mlclaw.runtime-image.test.ts test/mlclaw.space-runtime.test.ts docs/operator-brokers-config.md",
+    "format:write": "prettier --write eslint.config.mjs vitest.config.ts vitest.stryker.config.ts package.json README.md src/hf-state-sync/archive.ts src/hf-state-sync/cli.ts src/hf-state-sync/paths.ts src/hf-state-sync/prepare.ts src/hf-state-sync/stage-worker.ts src/hf-state-sync/supervise.ts src/mlclaw-space-runtime/delegated-brokerkit.ts src/mlclaw-space-runtime/delegated-revisions.ts src/mlclaw-space-runtime/operator-brokers.ts src/mlclaw-space-runtime/openclaw-config.ts src/mlclaw-space-runtime/app.ts src/mlclaw-space-runtime/config.ts src/mlclaw-space-runtime/openai-credentials.ts src/mlclaw-space-runtime/server.ts src/mlclaw-space-runtime/shell.ts src/mlclaw-control-ui/src/main.tsx src/mlclaw-control-ui/src/styles.css src/mlclaw-control-ui/src/components/ui/utils.ts src/mlclaw/git.ts test/hf-state-sync.archive.test.ts test/hf-state-sync.roundtrip.test.ts test/hf-state-sync.supervise.test.ts test/mlclaw.brokerkit-agent-tools.test.ts test/mlclaw.bundle.test.ts test/mlclaw.delegated-brokerkit.test.ts test/mlclaw.generate-space.test.ts test/mlclaw.operator-brokers.test.ts test/mlclaw.runtime-image.test.ts test/mlclaw.space-runtime.test.ts docs/operator-brokers-config.md",
     "lint": "eslint --max-warnings 0 src/mlclaw-space-runtime/delegated-brokerkit.ts src/mlclaw-space-runtime/delegated-revisions.ts src/mlclaw-space-runtime/operator-brokers.ts src/mlclaw-space-runtime/openclaw-config.ts",
     "coverage": "vitest run --coverage",
     "dry": "slophammer-ts dry .",