Update Dockerfile

Dockerfile

@@ -7,6 +7,66 @@ COPY entrypoint.sh /app/entrypoint.sh
 COPY hf-sync-manager.mjs /app/hf-sync-manager.mjs
 COPY security-check.sh /app/security-check.sh
 
+# ============================================================
+# PATCH: fix meta.lastTouchedAt triggering unnecessary gateway restarts
+# See: https://github.com/openclaw/openclaw/issues/11744
+#
+# meta.lastTouchedAt is updated on every config write but is not in
+# BASE_RELOAD_RULES, so matchRule() returns null and triggers a full
+# gateway restart (SIGUSR1) on every config save.
+#
+# Fix: inject {prefix:"meta",kind:"none"} into BASE_RELOAD_RULES
+# so meta.* changes are classified as no-ops.
+# ============================================================
+RUN node -e " \
+  const fs = require('fs'); \
+  const path = require('path'); \
+  const { execSync } = require('child_process'); \
+  \
+  function findBundles() { \
+    try { \
+      const out = execSync('find /app -name \"gateway-cli*.js\" -not -path \"*/node_modules/*\" 2>/dev/null').toString().trim(); \
+      return out ? out.split('\n').filter(Boolean) : []; \
+    } catch(e) { return []; } \
+  } \
+  \
+  const bundles = findBundles(); \
+  if (bundles.length === 0) { \
+    console.log('[patch] No gateway-cli bundle found - skipping'); \
+    process.exit(0); \
+  } \
+  \
+  let patched = 0; \
+  bundles.forEach(function(file) { \
+    let src = fs.readFileSync(file, 'utf-8'); \
+    if (src.includes('prefix:\"meta\"') || src.includes(\"prefix:'meta'\")) { \
+      console.log('[patch] Already patched: ' + file); \
+      return; \
+    } \
+    const patterns = [ \
+      ['{prefix:\"channels\",kind:', '{prefix:\"meta\",kind:\"none\"},{prefix:\"channels\",kind:'], \
+      ['{prefix:\"update\",kind:', '{prefix:\"meta\",kind:\"none\"},{prefix:\"update\",kind:'], \
+      ['{prefix:\"agents\",kind:', '{prefix:\"meta\",kind:\"none\"},{prefix:\"agents\",kind:'] \
+    ]; \
+    let applied = false; \
+    for (let i = 0; i < patterns.length; i++) { \
+      if (src.includes(patterns[i][0])) { \
+        src = src.replace(patterns[i][0], patterns[i][1]); \
+        applied = true; \
+        break; \
+      } \
+    } \
+    if (applied) { \
+      fs.writeFileSync(file, src, 'utf-8'); \
+      console.log('[patch] Patched: ' + file); \
+      patched++; \
+    } else { \
+      console.log('[patch] Pattern not found in: ' + file + ' (may need manual check)'); \
+    } \
+  }); \
+  console.log('[patch] Done. Files patched: ' + patched + '/' + bundles.length); \
+" || echo "[patch] Patch step failed (non-fatal, continuing build)"
+
 RUN chmod +x /app/entrypoint.sh \
              /app/security-check.sh && \
     mkdir -p /home/user && \
@@ -20,4 +80,4 @@ USER node
 
 EXPOSE 7860
 
-ENTRYPOINT ["/app/entrypoint.sh"]
+ENTRYPOINT ["/app/entrypoint.sh"]