Update Dockerfile

Dockerfile

@@ -3,16 +3,15 @@ FROM ghcr.io/openclaw/openclaw:latest
 USER root
 
 # Copy Space repo files into container
-COPY openclaw.json          /app/openclaw-template.json
-COPY setup-hf-config.mjs   /app/spaces/huggingface/setup-hf-config.mjs
-COPY entrypoint.sh          /app/entrypoint.sh
-COPY security-check.sh      /app/security-check.sh
-COPY diagnose.sh            /app/diagnose.sh
+COPY openclaw.json         /app/openclaw-template.json
+COPY setup-hf-config.mjs  /app/spaces/huggingface/setup-hf-config.mjs
+COPY entrypoint.sh         /app/entrypoint.sh
+COPY security-check.sh     /app/security-check.sh
 
-# PATCH: fix meta.lastTouchedAt triggering unnecessary gateway restarts
+# PATCH: suppress meta.lastTouchedAt from triggering gateway restarts
 # Issue: https://github.com/openclaw/openclaw/issues/11744
-# meta.lastTouchedAt is updated on every config write, but it is not in
-# BASE_RELOAD_RULES, so every config save triggers a full gateway restart.
+# Every config write updates meta.lastTouchedAt which is not in
+# BASE_RELOAD_RULES, causing a full gateway restart on every save.
 # Fix: inject {prefix:"meta",kind:"none"} into BASE_RELOAD_RULES.
 RUN node -e " \
   const fs = require('fs'); \
@@ -24,8 +23,7 @@ RUN node -e " \
     } catch(e) { return []; } \
   } \
   const bundles = findBundles(); \
-  if (bundles.length === 0) { console.log('[patch] No bundle found - skipping'); process.exit(0); } \
-  
+  if (bundles.length === 0) { console.log('[patch] No bundle found'); process.exit(0); } \
   let patched = 0; \
   bundles.forEach(function(file) { \
     let src = fs.readFileSync(file, 'utf-8'); \
@@ -34,8 +32,8 @@ RUN node -e " \
     } \
     const patterns = [ \
       ['{prefix:\"channels\",kind:', '{prefix:\"meta\",kind:\"none\"},{prefix:\"channels\",kind:'], \
-      ['{prefix:\"update\",kind:',   '{prefix:\"meta\",kind:\"none\"},{prefix:\"update\",kind:'], \
-      ['{prefix:\"agents\",kind:',   '{prefix:\"meta\",kind:\"none\"},{prefix:\"agents\",kind:'] \
+      ['{prefix:\"update\",kind:',   '{prefix:\"meta\",kind:\"none\"},{prefix:\"update\",kind:'],   \
+      ['{prefix:\"agents\",kind:',   '{prefix:\"meta\",kind:\"none\"},{prefix:\"agents\",kind:']    \
     ]; \
     let applied = false; \
     for (let i = 0; i < patterns.length; i++) { \
@@ -44,24 +42,23 @@ RUN node -e " \
         applied = true; break; \
       } \
     } \
-    if (applied) { fs.writeFileSync(file, src, 'utf-8'); \
-    console.log('[patch] Patched: ' + file); patched++; } \
-    else { console.log('[patch] Pattern not found: ' + file); \
+    if (applied) { \
+      fs.writeFileSync(file, src, 'utf-8'); \
+      console.log('[patch] Patched: ' + file); \
+      patched++; \
+    } else { \
+      console.log('[patch] Pattern not found in: ' + file); \
     } \
   }); \
-  console.log('[patch] Done. Patched: ' + patched + '/' + bundles.length); \
+  console.log('[patch] Done. ' + patched + '/' + bundles.length + ' file(s) patched'); \
 " || echo "[patch] Non-fatal: patch step failed"
 
-RUN chmod +x /app/entrypoint.sh \
-             /app/security-check.sh && \
-    mkdir -p /home/user && \
-    chown -R node:node /home/user && \
-    chown node:node /app/entrypoint.sh \
-                    /app/security-check.sh \
-                    /app/openclaw-template.json \
-                    /app/spaces/huggingface/setup-hf-config.mjs
+# Ensure /data is world-writable so HF Storage Bucket mount is accessible
+RUN chmod +x /app/entrypoint.sh /app/security-check.sh && \
+    mkdir -p /data && chmod 777 /data && \
+    mkdir -p /home/user && chmod 777 /home/user
 
-USER node
+USER root
 
 EXPOSE 7860