ARG BROKERKIT_PLUGIN_VERSION=0.1.0
ARG BROKERKIT_VERSION=eb6a44fd57e94d08f21a3bff1fe0ca1c9317a419

FROM golang:1.26.5-bookworm AS hf-broker-build
ARG BROKERKIT_VERSION
RUN git init /src \
  && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "$BROKERKIT_VERSION" \
  && git -C /src checkout --detach FETCH_HEAD \
  && test "$(git -C /src rev-parse HEAD)" = "$BROKERKIT_VERSION" \
  && cd /src \
  && GOWORK=off go build -trimpath -o /out/hf-broker ./brokers/huggingface/cmd/hf-broker

FROM node:24-bookworm-slim AS brokerkit-plugin-build
ARG BROKERKIT_VERSION
RUN apt-get update   && apt-get install -y --no-install-recommends ca-certificates git   && rm -rf /var/lib/apt/lists/*   && git init /src   && git -C /src fetch --depth=1 https://github.com/osolmaz/brokerkit.git "$BROKERKIT_VERSION"   && git -C /src checkout --detach FETCH_HEAD   && test "$(git -C /src rev-parse HEAD)" = "$BROKERKIT_VERSION"
WORKDIR /src
RUN corepack enable   && pnpm install --frozen-lockfile   && pnpm --filter openclaw-brokerkit build   && pnpm --filter openclaw-brokerkit pack --pack-destination /out

FROM ghcr.io/openclaw/openclaw:2026.7.1-beta.5

LABEL org.opencontainers.image.source="https://github.com/osolmaz/mlclaw"
LABEL org.opencontainers.image.description="ML Claw runtime for OpenClaw on Hugging Face"

USER root
RUN apt-get update \
  && apt-get install -y --no-install-recommends ca-certificates gosu python3 python3-pip python3-venv zstd \
  && useradd --system --home-dir /var/lib/hf-broker --create-home --shell /usr/sbin/nologin hf-broker \
  && rm -rf /var/lib/apt/lists/*
RUN python3 -m pip install --break-system-packages --no-cache-dir \
  "huggingface_hub==1.19.0" \
  "datasets==5.0.0" \
  "safetensors==0.8.0" \
  "fastapi==0.137.1" \
  "pydantic==2.13.4" \
  "rich==15.0.0" \
  "starlette==1.3.1" \
  "typer==0.25.1" \
  "uvicorn==0.49.0" \
  "uv==0.11.28" \
  "hf-discover==1.3.7"
ARG BROKERKIT_PLUGIN_VERSION
COPY --from=brokerkit-plugin-build /out/openclaw-brokerkit-${BROKERKIT_PLUGIN_VERSION}.tgz /tmp/openclaw-brokerkit.tgz
RUN npm install --omit=dev --omit=peer --no-audit --no-fund --prefix /opt/openclaw-plugins   /tmp/openclaw-brokerkit.tgz   && rm /tmp/openclaw-brokerkit.tgz   && test -f /opt/openclaw-plugins/node_modules/openclaw-brokerkit/openclaw.plugin.json

COPY --chown=node:node runtime/hf-state-sync.js /app/hf-state-sync.js
COPY --chown=node:node runtime/hf-tooling-seed.js /app/hf-tooling-seed.js
COPY --chown=node:node runtime/mlclaw-space-runtime.js /app/mlclaw-space-runtime.js
COPY --from=hf-broker-build /out/hf-broker /usr/local/bin/hf-broker
COPY runtime/hf-broker.scope.json /app/hf-broker.scope.json
COPY --chown=node:node runtime/openclaw.default.json /app/openclaw.default.json
COPY --chown=node:node runtime/entrypoint.sh /app/entrypoint.sh
COPY --chown=node:node runtime/scripts/ /app/scripts/
COPY --chown=node:node assets/ /app/assets/
RUN base64 -d /app/assets/hf-logo.png.base64 > /app/assets/hf-logo.png   && rm /app/assets/hf-logo.png.base64   && chown node:node /app/assets/hf-logo.png   && chmod +x /app/entrypoint.sh

ENV PORT=7860
ENV MLCLAW_OPENCLAW_PORT=7861
ENV OPENCLAW_GATEWAY_PORT=7861
ENV OPENCLAW_LIVE_DIR=/home/node/.local/share/mlclaw/live
ENV OPENCLAW_STATE_DIR=/home/node/.local/share/mlclaw/live/.openclaw
ENV OPENCLAW_WORKSPACE_DIR=/home/node/.local/share/mlclaw/live/workspace
ENV OPENCLAW_CONFIG_PATH=/home/node/.local/share/mlclaw/live/.openclaw/openclaw.json
ENV OPENCLAW_DISABLE_BONJOUR=1
ENV MLCLAW_BROKERKIT_PLUGIN_PATH=/opt/openclaw-plugins/node_modules/openclaw-brokerkit

EXPOSE 7860

HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=5 CMD node -e "const port=process.env.PORT||'7860'; fetch('http://127.0.0.1:'+port+'/health').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"

CMD ["/app/entrypoint.sh"]