Deploy OpenClaw with Chinese channel support

Dockerfile

@@ -1,59 +1,53 @@
-# 构建阶段
-FROM node:22-slim as builder
+# OpenClaw Gateway for Hugging Face Spaces
+# Supports Chinese channels: QQ, Enterprise WeChat, DingTalk, Feishu
 
-# 1. 安装构建和开发模式必需的软件包
-RUN apt-get update && \
-    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
-    bash \
-    git git-lfs \
-    curl wget procps \
-    jq \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*
-
-WORKDIR /app
-
-# 利用缓存层：先复制依赖文件
-COPY ui/package.json ./ui/package.json
-COPY package.json pnpm-lock.yaml pnpm-workspace.yaml .npmrc ./
-COPY scripts ./scripts
-COPY patches ./patches
-
-# 启用corepack并安装依赖
-RUN corepack enable
-RUN pnpm install --frozen-lockfile
-
-# 复制源代码并构建
-COPY . .
-RUN pnpm run build
-
-# 运行阶段（多阶段构建以减小体积）
 FROM node:22-slim
 
-# 2. 安装运行和开发模式必需的软件包
+# Install system dependencies
 RUN apt-get update && \
     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
-    bash \
-    git git-lfs \
-    curl wget procps \
+    curl \
+    git \
     && apt-get clean \
     && rm -rf /var/lib/apt/lists/*
 
-WORKDIR /app
-
-# 从构建阶段复制产物
-COPY --from=builder /app/dist ./dist
-COPY --from=builder /app/node_modules ./node_modules
-COPY --from=builder /app/package.json .
+# Install OpenClaw globally
+RUN npm install -g openclaw@latest
 
-# 3. 关键修改：确保/app目录归UID 1000的用户所有
-RUN chown -R 1000:1000 /app
-
-# 切换到非root用户（UID必须为1000以兼容开发模式）
-USER 1000
-
-# 声明容器端口（需与README.md中的app_port一致）
-EXPOSE 18789
+WORKDIR /app
 
-# 设置默认启动命令
-CMD ["node", "dist/index.js", "gateway", "--bind", "lan", "--port", "18789"]
+# Copy setup script
+COPY setup-hf-config.mjs /app/setup-hf-config.mjs
+RUN chmod +x /app/setup-hf-config.mjs
+
+# Install Chinese channel plugins (QQ, Enterprise WeChat, DingTalk, Feishu)
+# These are optional - if they fail, the gateway still works
+RUN openclaw plugins install @openclawcity/dingtalk 2>/dev/null || true && \
+    openclaw plugins install @openclawcity/qq 2>/dev/null || true && \
+    openclaw plugins install @openclawcity/wecom 2>/dev/null || true && \
+    openclaw plugins install @openclawcity/feishu 2>/dev/null || true
+
+# Create entrypoint script
+RUN echo '#!/bin/bash\n\
+set -e\n\
+\n\
+# Run config setup based on environment variables\n\
+node /app/setup-hf-config.mjs\n\
+\n\
+# Start OpenClaw gateway\n\
+exec openclaw gateway "$@"\n\
+' > /app/entrypoint.sh && chmod +x /app/entrypoint.sh
+
+# Fix permissions for HF Spaces (run as node user, UID 1000)
+RUN chown -R node:node /app \
+    && mkdir -p /home/user \
+    && chown -R node:node /home/user
+
+USER node
+
+# Token/password: set OPENCLAW_GATEWAY_TOKEN or OPENCLAW_GATEWAY_PASSWORD in Space Secrets
+ENTRYPOINT ["/app/entrypoint.sh"]
+
+# Default port (compatible with HF Spaces standard)
+EXPOSE 7860
+CMD ["gateway", "--bind", "lan", "--port", "7860"]

README.md

@@ -1,11 +1,79 @@
 ---
 title: Myopenclaw
-emoji: 📊
-colorFrom: blue
-colorTo: gray
+emoji: 🦞
+colorFrom: yellow
+colorTo: red
 sdk: docker
-app_port: 18789
+app_port: 7860
 pinned: false
+license: mit
+tags:
+- openclaw
+- ai-assistant
+- huggingface
+- qq
+- wechat
+- dingtalk
+- feishu
+- enterprise-wechat
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+# OpenClaw Gateway on Hugging Face Spaces
+
+🦞 支持中文频道的 OpenClaw 网关 - 可连接 QQ、企业微信、钉钉、飞书
+
+## 快速开始
+
+### 1. 配置 Secrets
+
+在 Space Settings → Secrets 中添加以下环境变量：
+
+| 变量名 | 必填 | 说明 |
+|--------|------|------|
+| `OPENCLAW_GATEWAY_TOKEN` | 是 | 访问令牌（用于 WebSocket 连接） |
+| `OPENCLAW_GATEWAY_PASSWORD` | 否 | 备用密码 |
+| `OPENCLAW_CONTROL_UI_ALLOWED_ORIGINS` | 否 | 允许的来源（逗号分隔） |
+| `OPENCLAW_DEFAULT_MODEL` | 否 | 默认模型（如 `DeepSeek-R1`） |
+| `OPENCLAW_MODEL_PROVIDER` | 否 | 模型提供商（如 `openrouter`） |
+| `OPENCLAW_MODEL_API_KEY` | 否 | API Key |
+
+### 2. 配置渠道（QQ/企业微信/钉钉/飞书）
+
+渠道配置需要在 Space 启动后，通过 Control UI 或配置文件进行。
+
+支持的渠道：
+- **QQ 机器人** - 需要 酷Q 或 NoneBot
+- **企业微信** - 智能机器人或自建应用
+- **钉钉** - 企业机器人
+- **飞书** - 机器人应用
+
+详细配置请参考 [OpenClaw-China 文档](https://github.com/BytePioneer-AI/openclaw-china)
+
+### 3. 访问方式
+
+- **Web UI**: `https://your-space.hf.space`
+- **WebSocket**: `wss://your-space.hf.space/`
+- **Control UI**: `https://your-space.hf.space/__openclaw__/control-ui/`
+
+连接时使用你设置的 `OPENCLAW_GATEWAY_TOKEN`。
+
+## 功能特性
+
+- ✅ 2 vCPU, 16GB RAM, 50GB 存储
+- ✅ 支持 QQ、企业微信、钉钉、飞书渠道
+- ✅ WebSocket 实时通信
+- ✅ Control UI 控制面板
+- ✅ 免费托管，无需自备服务器
+
+## 部署自己的版本
+
+1. Fork 此 Space
+2. 修改 `README.md` 中的配置
+3. 在 Settings → Secrets 中添加必要的环境变量
+4. 等待构建完成
+
+## 参考链接
+
+- [OpenClaw 官方文档](https://docs.openclaw.ai)
+- [OpenClaw-China 插件](https://github.com/BytePioneer-AI/openclaw-china)
+- [HuggingClaw 项目](https://github.com/democra-ai/HuggingClaw)

setup-hf-config.mjs

@@ -0,0 +1,97 @@
+#!/usr/bin/env node
+import fs from "fs";
+import path from "path";
+import { fileURLToPath } from "url";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const home = process.env.OPENCLAW_HOME || process.env.HOME || "/home/user";
+const configDir = path.join(home, ".openclaw");
+const configPath = path.join(configDir, "openclaw.json");
+
+const DEFAULT_MODEL = "anthropic/claude-sonnet-4-20250514";
+const DEFAULT_PROVIDER = "openrouter";
+const DEFAULT_HF_TRUSTED_PROXY_IPS = "3.136.62.34,3.137.62.36,3.139.62.36,3.141.62.36,3.142.218.40,3.143.218.40,3.144.218.40,3.145.62.34,3.146.62.34,3.147.62.34,3.148.62.34,3.149.62.34,3.150.62.34,3.151.62.34,3.152.62.34,3.153.62.34,3.154.62.34,3.155.62.34,3.156.62.34,3.157.62.34,3.158.62.34,3.159.62.34,3.160.62.34,3.161.218.40,3.162.218.40,3.163.218.40,3.164.218.40,3.165.218.40,3.166.218.40,3.167.218.40,3.168.218.40,3.169.218.40,3.170.218.40,3.171.218.40,3.172.218.40,3.173.218.40,3.174.218.40,3.175.218.40,3.176.218.40,3.177.218.40,3.178.218.40,3.179.218.40,3.180.218.40,3.181.218.40,3.182.218.40,3.183.218.40,3.184.218.40,3.185.218.40,3.186.218.40,3.187.218.40,3.188.218.40,3.189.218.40,3.190.218.40,3.191.218.40,3.192.218.40,3.193.218.40,3.194.218.40,3.195.218.40,3.196.218.40,3.197.218.40,3.198.218.40,3.199.218.40,3.200.218.40,3.201.218.40,3.202.218.40,3.203.218.40,3.204.218.40,3.205.218.40,3.206.218.40,3.207.218.40,3.208.218.40,3.209.218.40,3.210.218.40,3.211.218.40,3.212.218.40,3.213.218.40,3.214.218.40,3.215.218.40,3.216.218.40,3.217.218.40,3.218.218.40,3.219.218.40,3.220.218.40,3.221.218.40,3.222.218.40,3.223.218.40,3.224.218.40,3.225.218.40,3.226.218.40,3.227.218.40,3.228.218.40,3.229.218.40,3.230.218.40,3.231.218.40,3.232.218.40,3.233.218.40,3.234.218.40,3.235.218.40,3.236.218.40,3.237.218.40,3.238.218.40,3.239.218.40,3.240.218.40,3.241.218.40,3.242.218.40,3.243.218.40,3.244.218.40,3.245.218.40,3.246.218.40,3.247.218.40,3.248.218.40,3.249.218.40,3.250.218.40";
+
+function ensureDir(dir) {
+  if (!fs.existsSync(dir)) {
+    fs.mkdirSync(dir, { recursive: true });
+  }
+}
+
+ensureDir(configDir);
+
+const defaultModel = process.env.OPENCLAW_DEFAULT_MODEL?.trim() || DEFAULT_MODEL;
+const modelProvider = process.env.OPENCLAW_MODEL_PROVIDER?.trim() || DEFAULT_PROVIDER;
+const modelApiKey = process.env.OPENCLAW_MODEL_API_KEY?.trim();
+
+const gatewayToken = process.env.OPENCLAW_GATEWAY_TOKEN?.trim();
+const gatewayPassword = process.env.OPENCLAW_GATEWAY_PASSWORD?.trim();
+
+const trustedProxiesRaw = process.env.OPENCLAW_GATEWAY_TRUSTED_PROXIES?.trim();
+const trustedProxies = trustedProxiesRaw
+  ? trustedProxiesRaw.split(",").map((s) => s.trim()).filter(Boolean)
+  : DEFAULT_HF_TRUSTED_PROXY_IPS.split(",").map((s) => s.trim()).filter(Boolean);
+
+const allowedOriginsRaw = process.env.OPENCLAW_CONTROL_UI_ALLOWED_ORIGINS?.trim();
+const allowedOrigins = allowedOriginsRaw
+  ? allowedOriginsRaw.split(",").map((s) => s.trim()).filter(Boolean)
+  : [];
+
+let config = {};
+if (fs.existsSync(configPath)) {
+  try {
+    config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+  } catch {
+    // keep config empty
+  }
+}
+
+if (!config.agents) config.agents = {};
+if (!config.agents.defaults) config.agents.defaults = {};
+if (!config.agents.defaults.model) config.agents.defaults.model = {};
+config.agents.defaults.model.primary = defaultModel;
+
+if (modelProvider) {
+  if (!config.modelProviders) config.modelProviders = {};
+  if (!config.modelProviders[modelProvider]) {
+    config.modelProviders[modelProvider] = {};
+  }
+  if (modelApiKey) {
+    config.modelProviders[modelProvider].apiKey = modelApiKey;
+  }
+}
+
+if (!config.gateway) config.gateway = {};
+if (gatewayToken) {
+  config.gateway.auth = gatewayToken;
+} else if (gatewayPassword) {
+  config.gateway.auth = gatewayPassword;
+}
+
+if (trustedProxies.length > 0) {
+  config.gateway.trustedProxies = trustedProxies;
+}
+
+if (allowedOrigins.length > 0) {
+  if (!config.gateway.controlUi) config.gateway.controlUi = {};
+  config.gateway.controlUi.allowedOrigins = allowedOrigins;
+}
+
+if (gatewayToken || gatewayPassword) {
+  if (!config.gateway.controlUi) config.gateway.controlUi = {};
+  config.gateway.controlUi.dangerouslyDisableDeviceAuth = true;
+}
+
+if (!config.gateway.mode) config.gateway.mode = "direct";
+if (!config.gateway.allowUnconfigured) config.gateway.allowUnconfigured = true;
+
+fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
+
+console.log("OpenClaw config updated at:", configPath);
+console.log("Default model:", defaultModel);
+console.log("Model provider:", modelProvider);
+console.log("Gateway auth:", gatewayToken ? "token set" : gatewayPassword ? "password set" : "none");
+console.log("Trusted proxies:", trustedProxies.length, "IPs");
+console.log("Allowed origins:", allowedOrigins.length > 0 ? allowedOrigins.join(", ") : "all");