FROM node:22-bookworm

RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates tini \
  && rm -rf /var/lib/apt/lists/*

# OpenClaw fix gepinnt, damit Builds reproduzierbar bleiben
RUN npm install -g openclaw@2026.2.24

WORKDIR /app
ENV HOME=/app
ENV PORT=7860
ENV OPENCLAW_INTERNAL_PORT=18789
ENV OPENCLAW_STATE_DIR=/app/.openclaw
EXPOSE 7860

# Adapter-Dependency
RUN npm install --prefix /app --omit=dev http-proxy

RUN chown -R node:node /app
USER node

COPY --chown=node:node setup-hf-config.mjs /app/setup-hf-config.mjs
COPY --chown=node:node hf-worker-adapter.mjs /app/hf-worker-adapter.mjs

ENTRYPOINT ["/usr/bin/tini","--"]

CMD ["bash","-lc", "\
set -euo pipefail; \
node /app/setup-hf-config.mjs; \
openclaw gateway run --port ${OPENCLAW_INTERNAL_PORT} --bind loopback & \
OPENCLAW_PID=$!; \
trap 'kill ${OPENCLAW_PID} 2>/dev/null || true' INT TERM EXIT; \
node /app/hf-worker-adapter.mjs \
"]