mlclaw 0.4.5 → 0.4.6

package/Dockerfile

@@ -1,8 +1,8 @@
 ARG OPENCLAW_VERSION=2026.7.1
 ARG OPENCLAW_BASE_IMAGE=ghcr.io/openclaw/openclaw:${OPENCLAW_VERSION}
-ARG BROKERKIT_PLUGIN_VERSION=0.3.1
+ARG BROKERKIT_PLUGIN_VERSION=0.3.2
 ARG BROKERKIT_VERSION=hf-broker/v0.4.0
-ARG MLCLAW_RUNTIME_IMAGE=ghcr.io/huggingface/mlclaw:0.4.5-openclaw-2026.7.1
+ARG MLCLAW_RUNTIME_IMAGE=ghcr.io/huggingface/mlclaw:0.4.6-openclaw-2026.7.1
 
 FROM golang:1.26.5-bookworm AS hf-broker-build
 ARG BROKERKIT_VERSION

package/README.md

@@ -8,6 +8,10 @@ ML Claw deploys an OpenClaw agent on Hugging Face with durable state in a
 private Storage Bucket. The default deployment is a private Hugging Face Space
 with a browser gateway protected by Hugging Face OAuth.
 
+[ml-intern](https://github.com/huggingface/ml-intern) is Hugging Face's
+open-source ML engineer for reading papers, training models, and shipping
+models.
+
 The browser never receives an OpenClaw gateway token. ML Claw authenticates the
 signed-in Hugging Face user, then proxies HTTP and WebSocket traffic to
 OpenClaw on loopback using OpenClaw trusted-proxy auth.
@@ -386,12 +390,6 @@ Local gateways pass the broad credential only to the trusted state-sync
 supervisor for bucket I/O and to the trusted MCP integration proxy through a
 protected token file. Neither path passes it to OpenClaw.
 
-## Related
-
-[ml-intern](https://github.com/huggingface/ml-intern) is Hugging Face's
-open-source ML engineer for reading papers, training models, and shipping
-models.
-
 ## Costs
 
 - Browser Space gateway: `cpu-basic` is enough for the default browser gateway.

package/dist/mlclaw-space-runtime.js

@@ -10348,6 +10348,7 @@ function safeErrorClass(error) {
 }
 function delegatedHeaders(c) {
   c.header("access-control-allow-origin", "null");
+  c.header("access-control-allow-credentials", "true");
   c.header("cache-control", "no-store");
   c.header("vary", "origin");
   c.header("x-content-type-options", "nosniff");

package/dist/mlclaw.mjs

@@ -15375,7 +15375,7 @@ import fs12 from "node:fs";
 import path13 from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var DEFAULT_OPENCLAW_VERSION = "2026.7.1";
-var DEFAULT_BROKERKIT_PLUGIN_VERSION = "0.3.1";
+var DEFAULT_BROKERKIT_PLUGIN_VERSION = "0.3.2";
 var DEFAULT_BROKERKIT_VERSION = "hf-broker/v0.4.0";
 var DEFAULT_RUNTIME_IMAGE_REPOSITORY = "ghcr.io/huggingface/mlclaw";
 var PACKAGE_METADATA = readPackageMetadata();

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "mlclaw",
-  "version": "0.4.5",
+  "version": "0.4.6",
   "license": "MIT",
   "config": {
     "openclawVersion": "2026.7.1",
     "brokerkitVersion": "hf-broker/v0.4.0",
-    "brokerkitPluginVersion": "0.3.1",
+    "brokerkitPluginVersion": "0.3.2",
     "runtimeImageRepository": "ghcr.io/huggingface/mlclaw"
   },
   "repository": {