mlclaw 0.4.6 → 0.4.8

package/Dockerfile

@@ -1,8 +1,8 @@
 ARG OPENCLAW_VERSION=2026.7.1
 ARG OPENCLAW_BASE_IMAGE=ghcr.io/openclaw/openclaw:${OPENCLAW_VERSION}
-ARG BROKERKIT_PLUGIN_VERSION=0.3.2
-ARG BROKERKIT_VERSION=hf-broker/v0.4.0
-ARG MLCLAW_RUNTIME_IMAGE=ghcr.io/huggingface/mlclaw:0.4.6-openclaw-2026.7.1
+ARG BROKERKIT_PLUGIN_VERSION=0.3.4
+ARG BROKERKIT_VERSION=hf-broker/v0.4.2
+ARG MLCLAW_RUNTIME_IMAGE=ghcr.io/huggingface/mlclaw:0.4.8-openclaw-2026.7.1
 
 FROM golang:1.26.5-bookworm AS hf-broker-build
 ARG BROKERKIT_VERSION

package/README.md

@@ -5,8 +5,9 @@
 # ML Claw
 
 ML Claw deploys an OpenClaw agent on Hugging Face with durable state in a
-private Storage Bucket. The default deployment is a private Hugging Face Space
-with a browser gateway protected by Hugging Face OAuth.
+private Storage Bucket. The default deployment is a protected Hugging Face
+Space: its source stays private, its app URL is reachable, and the browser
+gateway is protected by ML Claw's Hugging Face OAuth session.
 
 [ml-intern](https://github.com/huggingface/ml-intern) is Hugging Face's
 open-source ML engineer for reading papers, training models, and shipping
@@ -53,21 +54,24 @@ app; the bootstrapper runs locally.
 
 The `hf` CLI login is a provisioning credential: ML Claw uses it to create and
 configure resources owned by your account. HF Broker uses a separate, durable
-fine-grained credential whose required permissions are versioned by BrokerKit.
-Interactive bootstrap opens Hugging Face's token form with those fields
-preselected, then accepts the new token through a hidden local prompt. Creating
-or replacing this credential never changes the active `hf` CLI login. For
-automation, pass a `0600` file through `--broker-hf-token-file`; ML Claw does
-not accept the token as a command-line value.
+fine-grained credential whose selected permissions form BrokerKit's hard
+upstream authority ceiling. Interactive bootstrap opens an empty Hugging Face
+token form so you can choose those permissions and resources, then accepts the
+new token through a hidden local prompt. Creating or replacing this credential
+never changes the active `hf` CLI login. For automation, pass a `0600` file
+through `--broker-hf-token-file`; ML Claw does not accept the token as a
+command-line value.
 
 The broker owns the selected credential; OpenClaw receives only a separate
 agent credential that can call the broker's typed, policy-checked routes. It
 cannot read the token or use the admin-only operator API. Rerunning bootstrap
 reuses a healthy saved broker credential without reopening the form. A missing,
-invalid, wrong-account, or under-scoped credential must be repaired before ML
-Claw continues; it never silently substitutes the active CLI login. Existing
-dedicated inference tokens remain supported through `MLCLAW_ROUTER_TOKEN`,
-`HF_ROUTER_TOKEN`, or `--router-token-file` during migration.
+invalid, or wrong-account credential must be repaired before ML Claw continues;
+it never silently substitutes the active CLI login. When a selected permission
+does not cover an operation, HF Broker denies that operation without weakening
+the rest of the deployment. Existing dedicated inference tokens remain
+supported through `MLCLAW_ROUTER_TOKEN`, `HF_ROUTER_TOKEN`, or
+`--router-token-file`.
 
 ## Default Flow
 
@@ -77,7 +81,7 @@ npx mlclaw@latest bootstrap --name mlclaw
 
 This creates:
 
-- a private Docker Space for the browser gateway when the account can host it;
+- a protected Docker Space for the browser gateway when the account can host it;
 - a private Storage Bucket for OpenClaw state after the Space is accepted;
 - no explicit Space hardware request unless you pass `--hardware`;
 - a Docker Space that starts from the prebuilt `ghcr.io/huggingface/mlclaw` image;
@@ -106,7 +110,7 @@ Open the Space, sign in with your Hugging Face account, and use the OpenClaw
 browser gateway directly. The gateway includes a small ML Claw control link
 for settings, status, credentials, and sign out.
 
-Create a public Space only when you explicitly want a public demo or template:
+Expose the Space source only when you explicitly want a public demo or template:
 
 ```bash
 npx mlclaw@latest bootstrap --name mlclaw --public-space