FROM node:22-slim

# Install system dependencies
RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*

# Install OpenClaw globally
RUN npm install -g openclaw@latest

# Create config directory
RUN mkdir -p /root/.openclaw

# Set up environment for Hugging Face Spaces
ENV PORT=7860
ENV OPENCLAW_GATEWAY_MODE=local
ENV OPENCLAW_GATEWAY_PASSWORD=${SETUP_PASSWORD}

# Expose the port (Hugging Face default)
EXPOSE 7860

# Create a startup script that generates config and starts OpenClaw
RUN echo '#!/bin/bash\n\
set -x\n\
\n\
# Check for required environment variables\n\
if [ -z "$GEMINI_API_KEY_1" ]; then\n\
  echo "ERROR: GEMINI_API_KEY_1 is not set. Agent will fail. Exiting."\n\
  exit 1\n\
fi\n\
\n\
# Create critical missing directories\n\
mkdir -p /root/.openclaw/agents/main/agent\n\
mkdir -p /root/.openclaw/agents/main/sessions\n\
mkdir -p /root/.openclaw/credentials\n\
\n\
# Remove auth-profiles.json if it exists to force env var usage\n\
rm -f /root/.openclaw/agents/main/agent/auth-profiles.json\n\
\n\
# Generate minimal config if not exists\n\
if [ ! -f /root/.openclaw/openclaw.json ]; then\n\
  cat > /root/.openclaw/openclaw.json << EOF\n\
{\n\
  "env": {\n\
    "GOOGLE_API_KEY": "${GEMINI_API_KEY_1}",\n\
    "GEMINI_API_KEY": "${GEMINI_API_KEY_1}",\n\
    "GOOGLE_GENERATIVE_AI_API_KEY": "${GEMINI_API_KEY_1}",\n\
    "PALM_API_KEY": "${GEMINI_API_KEY_1}"\n\
  },\n\
  "gateway": {\n\
    "mode": "local",\n\
    "bind": "lan",\n\
    "port": 7860,\n\
    "trustedProxies": ["0.0.0.0/0"],\n\
    "auth": {\n\
      "mode": "token",\n\
      "token": "${SETUP_PASSWORD}"\n\
    },\n\
    "controlUi": {\n\
      "allowInsecureAuth": true\n\
    }\n\
  },\n\
  "agents": {\n\
    "defaults": {\n\
      "model": {\n\
        "primary": "google/gemini-1.5-pro"\n\
      }\n\
    }\n\
  }\n\
}\n\
EOF\n\
fi\n\
\n\
# Fix permissions\n\
chmod 700 /root/.openclaw\n\
chmod 600 /root/.openclaw/openclaw.json\n\
chmod 600 /root/.openclaw/agents/main/agent/auth-profiles.json\n\
\n\
# Fix config if needed\n\
openclaw doctor --fix\n\
\n\
# Start OpenClaw gateway\n\
echo "Starting OpenClaw gateway on port 7860..."\n\
exec openclaw gateway run --port 7860\n\
' > /usr/local/bin/start-openclaw && chmod +x /usr/local/bin/start-openclaw

CMD ["/usr/local/bin/start-openclaw"]