Fix OpenClaw crash: Add coding-agent plugin to allow list

Fix Cain architecture: Align with parent HuggingClaw Node.js gateway

Infrastructure migration: Align Cain with HuggingClaw architecture

Delete openclaw.json with huggingface_hub

Upload openclaw.json with huggingface_hub

Upload openclaw.json with huggingface_hub

Upload openclaw.json with huggingface_hub

Upload openclaw.json with huggingface_hub

fix: revert to token auth with default "huggingclaw"

feat: default to no-auth mode — Control UI connects instantly

fix: restore dangerouslyDisableDeviceAuth for HF Spaces

config: set hardcoded gateway token "huggingclaw" as default

remove: drop gateway password/token auth entirely — device auth only

security: enforce device auth — only paired browsers can access Control UI

feat: switch auth from password to token mode (persists in browser)

fix: revert auth to password mode, add Telegram API auto-probe, background DNS

feat: switch auth from password to token for browser persistence

chore: default model → openai/gpt-oss-20b:free (OpenAI open-source)

chore: default repo → HuggingClaw-data, default model → DeepSeek V3 (free)

feat: professional README, .env.example, architecture diagram

feat: switch to password auth + project README

fix: add dangerouslyDisableDeviceAuth for remote WS connections

fix: use fixed auth token + python-based token injection + restore entrypoint inject

fix: disable auth (mode:none) + patch CSP frame-ancestors for HF iframe embedding

fix: use auth:{} instead of auth:false (object required)

fix: disable gateway auth (HF provides access control), remove token inject hack

fix: remove empty apiKey (config invalid), add HF origins to CSP allowedOrigins

perf: node user build (-104s chown), merge RUN layers (-170s), plugin whitelist (-40s)

feat: add timing to all stages, fix OPENROUTER_API_KEY crash, async DNS

deploy: HuggingClaw with original Dockerfile