Enhance Space Privacy Detection, Proxy Defaults, and Environment Builder UX

Dockerfile

@@ -105,6 +105,7 @@ RUN chmod +x /home/node/app/start.sh \
               /home/node/app/cloudflare-proxy-setup.py \
               /home/node/app/cloudflare-keepalive-setup.py \
               /home/node/app/openclaw-sync.py \
+              /home/node/app/jupyter-devdata-sync.py \
               /home/node/app/multi-provider-key-rotator.cjs
 
 USER node

cloudflare-proxy-setup.py

@@ -12,7 +12,8 @@ from pathlib import Path
 API_BASE = "https://api.cloudflare.com/client/v4"
 ENV_FILE = Path("/tmp/huggingclaw-cloudflare-proxy.env")
 DEFAULT_ALLOWED = [
-    # Messaging
+    # Messaging & social platforms — primary use-case for the Cloudflare proxy
+    # on HF Spaces (geo-restrictions on Telegram, Discord, WhatsApp, etc.).
     "api.telegram.org",
     "discord.com",
     "discordapp.com",
@@ -32,8 +33,6 @@ DEFAULT_ALLOWED = [
     # Video
     "youtube.com",
     "www.youtube.com",
-    # AI APIs
-    "api.openai.com",
     # Email HTTP APIs (SMTP ports are blocked; use these instead)
     "api.resend.com",
     "api.sendgrid.com",
@@ -43,6 +42,11 @@ DEFAULT_ALLOWED = [
     "google.com",
     "googleusercontent.com",
     "gstatic.com",
+    # NOTE: AI-provider domains (api.openai.com, api.anthropic.com, etc.) are
+    # intentionally NOT included here. Proxying AI calls routes API keys through
+    # the Cloudflare Worker without an explicit opt-in. Users who need AI API
+    # calls proxied (e.g. geo-restricted regions) can add specific domains via
+    # the CLOUDFLARE_PROXY_DOMAINS environment variable.
 ]
 
 

cloudflare-proxy.js

@@ -24,6 +24,8 @@ if (
 const DEBUG = process.env.CLOUDFLARE_PROXY_DEBUG === "true";
 const PROXY_SHARED_SECRET = (process.env.CLOUDFLARE_PROXY_SECRET || "").trim();
 const DEFAULT_PROXY_DOMAINS = [
+  // Messaging & social platforms — these are the primary use-case for the
+  // Cloudflare proxy on HF Spaces (geo-restrictions on Telegram, Discord, WA).
   "api.telegram.org", "discord.com", "discordapp.com",
   "gateway.discord.gg", "status.discord.com", "web.whatsapp.com",
   "graph.facebook.com", "graph.instagram.com",
@@ -31,10 +33,15 @@ const DEFAULT_PROXY_DOMAINS = [
   "api.linkedin.com", "www.linkedin.com",
   "open.tiktokapis.com", "oauth.reddit.com",
   "youtube.com", "www.youtube.com",
-  "api.openai.com",
-  "integrate.api.nvidia.com", "api.nvidia.com",
+  // Email delivery
   "api.resend.com", "api.sendgrid.com", "api.mailgun.net",
+  // Google services
   "googleapis.com", "google.com", "googleusercontent.com", "gstatic.com",
+  // NOTE: AI-provider domains (api.openai.com, api.anthropic.com, etc.) are
+  // intentionally NOT included here. Proxying AI calls routes your API keys
+  // through the Cloudflare Worker without an explicit opt-in. Users who need
+  // AI API calls proxied (e.g. geo-restricted regions) can add specific
+  // domains via the CLOUDFLARE_PROXY_DOMAINS environment variable.
 ];
 const PROXY_DOMAINS_RAW = (process.env.CLOUDFLARE_PROXY_DOMAINS || "").trim();
 const PROXY_ALL = PROXY_DOMAINS_RAW === "*";

env-builder.html

@@ -37,16 +37,16 @@
   --panel-w:   340px;
 }
 
-html { scroll-behavior: smooth; }
+html { scroll-behavior: smooth; height: 100%; }
 
 body {
   font-family: var(--sans);
   background: var(--bg);
   color: var(--text);
-  min-height: 100vh;
+  height: 100vh;
+  overflow: hidden;
   display: flex;
   flex-direction: column;
-  overflow-x: hidden;
 }
 
 /* ── Topbar ── */
@@ -330,6 +330,15 @@ body {
   letter-spacing: 1.2px;
   color: var(--text3);
 }
+.sec-count {
+  font-family: var(--mono);
+  font-size: 10px;
+  color: var(--text3);
+  background: var(--bg3);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 1px 7px;
+}
 
 .sec-line {
   flex: 1;
@@ -339,8 +348,8 @@ body {
 
 .cards {
   display: grid;
-  grid-template-columns: repeat(auto-fill, minmax(300px, 1fr));
-  gap: 10px;
+  grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
+  gap: 9px;
 }
 
 /* ── ENV Card ── */
@@ -360,6 +369,22 @@ body {
   background: linear-gradient(135deg, var(--bg2) 80%, rgba(245,166,35,.04));
 }
 
+/* Critical cards get a red left-border accent */
+.env-card:has(.badge-critical) {
+  border-left: 3px solid rgba(240,80,80,.4);
+}
+.env-card:has(.badge-critical):hover {
+  border-left-color: rgba(240,80,80,.7);
+}
+.env-card:has(.badge-critical).selected {
+  border-left-color: #f05f5f;
+}
+
+/* Credential cards get an amber left-border accent */
+.env-card:has(.badge-credential) {
+  border-left: 3px solid rgba(220,140,60,.3);
+}
+
 .card-top {
   display: flex;
   align-items: flex-start;
@@ -407,16 +432,46 @@ body {
   border-radius: 20px;
 }
 
-.badge-s {
-  background: rgba(240,95,95,.12);
-  color: var(--red);
-  border: 1px solid rgba(240,95,95,.25);
+/* critical — space breaks without this */
+.badge-critical {
+  background: rgba(240,80,80,.14);
+  color: #f05f5f;
+  border: 1px solid rgba(240,80,80,.3);
 }
 
-.badge-f {
-  background: rgba(61,214,140,.1);
-  color: var(--green);
-  border: 1px solid rgba(61,214,140,.2);
+/* credential — sensitive key / token */
+.badge-credential {
+  background: rgba(220,140,60,.13);
+  color: #e09040;
+  border: 1px solid rgba(220,140,60,.28);
+}
+
+/* feature — enables an optional feature */
+.badge-feature {
+  background: rgba(70,140,250,.12);
+  color: #5a9eff;
+  border: 1px solid rgba(70,140,250,.25);
+}
+
+/* optional — safe to change freely */
+.badge-optional {
+  background: rgba(61,214,140,.10);
+  color: #3dd68c;
+  border: 1px solid rgba(61,214,140,.22);
+}
+
+/* advanced — power-user, risky if wrong */
+.badge-advanced {
+  background: rgba(160,100,230,.12);
+  color: #b07ae0;
+  border: 1px solid rgba(160,100,230,.25);
+}
+
+/* build-time — needs HF Space rebuild */
+.badge-build {
+  background: rgba(240,185,60,.12);
+  color: #e0b030;
+  border: 1px solid rgba(240,185,60,.28);
 }
 
 /* ── Card inputs ── */
@@ -692,6 +747,56 @@ body {
   .sidebar-wrap { display: none; }
   .topbar-divider, .topbar-title { display: none; }
 }
+
+/* ── Tag Legend (collapsible) ── */
+.tag-legend {
+  margin-bottom: 14px;
+  background: var(--bg2);
+  border: 1px solid var(--border);
+  border-radius: var(--r);
+  overflow: hidden;
+}
+.legend-summary {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 7px 12px;
+  cursor: pointer;
+  list-style: none;
+  user-select: none;
+  outline: none;
+}
+.legend-summary::-webkit-details-marker { display: none; }
+.legend-chips { display: flex; gap: 5px; flex-wrap: wrap; flex: 1; }
+.legend-hint {
+  font-size: 10px;
+  color: var(--text3);
+  white-space: nowrap;
+  flex-shrink: 0;
+}
+.tag-legend[open] .legend-hint { opacity: 0; }
+.legend-body {
+  padding: 8px 12px 10px;
+  border-top: 1px solid var(--border);
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+.legend-row {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  font-size: 11px;
+  color: var(--text2);
+}
+.legend-row .badge { flex-shrink: 0; width: 74px; text-align: center; }
+.legend-tip {
+  font-size: 9.5px;
+  color: var(--text3);
+  margin-top: 4px;
+  padding-top: 6px;
+  border-top: 1px solid var(--border);
+}
 </style>
 </head>
 
@@ -746,6 +851,29 @@ body {
 
       <!-- sections -->
       <div class="sections-scroll">
+        <!-- Tag Legend (compact collapsible) -->
+        <details class="tag-legend" id="tagLegend">
+          <summary class="legend-summary">
+            <span class="legend-chips">
+              <span class="badge badge-critical">critical</span>
+              <span class="badge badge-credential">credential</span>
+              <span class="badge badge-feature">feature</span>
+              <span class="badge badge-optional">optional</span>
+              <span class="badge badge-advanced">advanced</span>
+              <span class="badge badge-build">build-time</span>
+            </span>
+            <span class="legend-hint">what do these mean?</span>
+          </summary>
+          <div class="legend-body">
+            <div class="legend-row"><span class="badge badge-critical">critical</span><span>Space won't work without this</span></div>
+            <div class="legend-row"><span class="badge badge-credential">credential</span><span>Sensitive key or token — never share</span></div>
+            <div class="legend-row"><span class="badge badge-feature">feature</span><span>Enables a specific optional feature</span></div>
+            <div class="legend-row"><span class="badge badge-optional">optional</span><span>Safe to change — nothing breaks</span></div>
+            <div class="legend-row"><span class="badge badge-advanced">advanced</span><span>Power-user setting — wrong value causes issues</span></div>
+            <div class="legend-row"><span class="badge badge-build">build-time</span><span>Needs HF Space rebuild to fully take effect</span></div>
+            <div class="legend-tip">💡 Type a tag name in search to filter by it</div>
+          </div>
+        </details>
         <div id="sections"></div>
 
         <!-- Custom Env section -->

env-builder.js

@@ -416,7 +416,7 @@ const MODEL_CATALOGS = {
 };
 
 const FIELDS = [
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "LLM_MODEL",
@@ -424,248 +424,258 @@ const FIELDS = [
     "type": "model",
     "options_key": "LLM_MODEL",
     "ph": "choose a provider model",
-    "common": 1
+    "common": 1,
+    "tag": "critical"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "LLM_API_KEY",
     "lbl": "Primary provider API key",
     "type": "password",
-    "secret": 1,
     "ph": "sk-...",
-    "common": 1
+    "common": 1,
+    "tag": "credential"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "GATEWAY_TOKEN",
     "lbl": "Control UI gateway token",
     "type": "password",
-    "secret": 1,
-    "common": 1
+    "common": 1,
+    "tag": "critical"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "OPENCLAW_PASSWORD",
     "lbl": "Optional password auth",
     "type": "password",
-    "secret": 1
+    "tag": "credential"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "OPENCLAW_VERSION",
     "lbl": "Pin OpenClaw version",
     "type": "text",
-    "ph": "latest"
+    "ph": "latest",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Plugins",
     "icon": "⚡",
     "k": "LLM_API_KEY_FALLBACK_ENABLED",
     "lbl": "Allow global LLM_API_KEY fallback",
     "type": "toggle",
-    "ph": "true"
+    "ph": "true",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "DEV_MODE",
     "lbl": "Enable dev mode",
     "type": "toggle",
     "ph": "false",
-    "common": 1
+    "common": 1,
+    "tag": "build"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_JUPYTER_ENABLED",
     "lbl": "Enable Jupyter terminal",
     "type": "toggle",
     "ph": "false",
-    "common": 1
+    "common": 1,
+    "tag": "feature"
   },
-  {
-    "g": "Core",
+{
+    "g": "DevData",
     "icon": "⚡",
     "k": "DEVDATA",
     "lbl": "DevData switch",
     "type": "toggle",
     "ph": "on",
-    "common": 1
+    "common": 1,
+    "tag": "feature"
   },
-  {
-    "g": "Core",
+{
+    "g": "DevData",
     "icon": "⚡",
     "k": "DEVDATA_DATASET_NAME",
     "lbl": "DevData dataset name",
     "type": "text",
     "ph": "huggingclaw-devdata",
-    "common": 1
+    "common": 1,
+    "tag": "feature"
   },
-  {
-    "g": "Core",
+{
+    "g": "DevData",
     "icon": "⚡",
     "k": "DEVDATA_SYNC_INTERVAL",
     "lbl": "DevData sync interval (seconds)",
     "type": "number",
-    "ph": "180"
+    "ph": "180",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "WhatsApp",
     "icon": "⚡",
     "k": "WHATSAPP_ENABLED",
     "lbl": "Enable WhatsApp pairing",
     "type": "toggle",
     "ph": "false",
-    "common": 1
+    "common": 1,
+    "tag": "feature"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_CAPTURE_DISABLE",
     "lbl": "Disable capture wrapper",
     "type": "toggle",
-    "ph": "false"
+    "ph": "false",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_STARTUP_STRICT",
     "lbl": "Stop on startup failure",
     "type": "toggle",
-    "ph": "false"
+    "ph": "false",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_RUN",
     "lbl": "Startup command (one-liner)",
-    "type": "textarea"
+    "type": "textarea",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_STARTUP_COMMANDS",
     "lbl": "Multiline startup commands",
-    "type": "textarea"
+    "type": "textarea",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_STARTUP_SCRIPT",
     "lbl": "Startup shell script",
-    "type": "textarea"
+    "type": "textarea",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_STARTUP_SCRIPT_B64",
     "lbl": "Startup script (base64)",
-    "type": "textarea"
+    "type": "textarea",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_APT_PACKAGES",
     "lbl": "APT packages to install",
-    "type": "textarea"
+    "type": "textarea",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_PIP_PACKAGES",
     "lbl": "Pip packages to install",
-    "type": "textarea"
+    "type": "textarea",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_NPM_PACKAGES",
     "lbl": "NPM packages to install",
-    "type": "textarea"
+    "type": "textarea",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Startup",
     "icon": "⚡",
     "k": "HUGGINGCLAW_OPENCLAW_PLUGINS",
     "lbl": "OpenClaw plugins to load",
-    "type": "textarea"
+    "type": "textarea",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Network",
     "icon": "⚡",
     "k": "ALLOWED_ORIGINS",
     "lbl": "Allowed CORS origins",
-    "type": "textarea"
+    "type": "textarea",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Network",
     "icon": "⚡",
     "k": "TRUSTED_PROXIES",
     "lbl": "Trusted proxy CIDRs",
-    "type": "textarea"
+    "type": "textarea",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Network",
     "icon": "⚡",
     "k": "WEBHOOK_URL",
     "lbl": "Webhook URL",
     "type": "text",
-    "ph": "https://..."
-  },
-  {
-    "g": "Core",
-    "icon": "⚡",
-    "k": "WS_MIN_PROTOCOL",
-    "lbl": "Min WebSocket protocol",
-    "type": "number",
-    "ph": "1"
-  },
-  {
-    "g": "Core",
-    "icon": "⚡",
-    "k": "WS_MAX_PROTOCOL",
-    "lbl": "Max WebSocket protocol",
-    "type": "number",
-    "ph": "5"
+    "ph": "https://...",
+    "tag": "feature"
   },
-  {
-    "g": "Core",
+{
+    "g": "Gateway",
     "icon": "⚡",
     "k": "GATEWAY_MAX_RESTARTS",
     "lbl": "Gateway max restarts",
     "type": "number",
-    "ph": "10"
+    "ph": "10",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Gateway",
     "icon": "⚡",
     "k": "GATEWAY_READY_TIMEOUT",
     "lbl": "Gateway ready timeout",
     "type": "number",
-    "ph": "90"
+    "ph": "90",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Gateway",
     "icon": "⚡",
     "k": "GATEWAY_RESTART_DELAY",
     "lbl": "Gateway restart delay",
     "type": "number",
-    "ph": "5"
+    "ph": "5",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Gateway",
     "icon": "⚡",
     "k": "GATEWAY_VERBOSE",
     "lbl": "Verbose gateway logs",
     "type": "toggle",
-    "ph": "false"
+    "ph": "false",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Logging",
     "icon": "⚡",
     "k": "OPENCLAW_CONSOLE_LOG_LEVEL",
     "lbl": "Console log level",
@@ -676,10 +686,11 @@ const FIELDS = [
       "warn",
       "error"
     ],
-    "ph": "info"
+    "ph": "info",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Logging",
     "icon": "⚡",
     "k": "OPENCLAW_FILE_LOG_LEVEL",
     "lbl": "File log level",
@@ -690,10 +701,11 @@ const FIELDS = [
       "warn",
       "error"
     ],
-    "ph": "info"
+    "ph": "info",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Logging",
     "icon": "⚡",
     "k": "OPENCLAW_CONSOLE_LOG_STYLE",
     "lbl": "Console log style",
@@ -703,10 +715,11 @@ const FIELDS = [
       "json",
       "compact"
     ],
-    "ph": "pretty"
+    "ph": "pretty",
+    "tag": "optional"
   },
-  {
-    "g": "Core",
+{
+    "g": "Plugins",
     "icon": "⚡",
     "k": "BROWSER_PLUGIN_MODE",
     "lbl": "Browser plugin mode",
@@ -716,10 +729,11 @@ const FIELDS = [
       "enabled",
       "disabled"
     ],
-    "ph": "auto"
+    "ph": "auto",
+    "tag": "feature"
   },
-  {
-    "g": "Core",
+{
+    "g": "Plugins",
     "icon": "⚡",
     "k": "ACP_PLUGIN_MODE",
     "lbl": "ACP plugin mode",
@@ -729,912 +743,985 @@ const FIELDS = [
       "enabled",
       "disabled"
     ],
-    "ph": "auto"
+    "ph": "auto",
+    "tag": "feature"
   },
-  {
-    "g": "Core",
+{
+    "g": "Cloudflare",
     "icon": "⚡",
     "k": "CLOUDFLARE_PROXY_DEBUG",
     "lbl": "Cloudflare proxy debug",
     "type": "toggle",
-    "ph": "false"
+    "ph": "false",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Cloudflare",
     "icon": "⚡",
     "k": "CLOUDFLARE_KEEPALIVE_ENABLED",
     "lbl": "Enable keep-awake worker",
     "type": "toggle",
-    "ph": "true"
+    "ph": "true",
+    "tag": "feature"
   },
-  {
-    "g": "Core",
+{
+    "g": "Cloudflare",
     "icon": "⚡",
     "k": "CLOUDFLARE_PROXY_URL",
     "lbl": "Proxy worker URL",
     "type": "text",
     "ph": "https://your-proxy.workers.dev",
-    "common": 1
+    "common": 1,
+    "tag": "feature"
   },
-  {
-    "g": "Core",
+{
+    "g": "Cloudflare",
     "icon": "⚡",
     "k": "CLOUDFLARE_PROXY_SECRET",
     "lbl": "Proxy shared secret",
     "type": "password",
-    "secret": 1
+    "tag": "credential"
   },
-  {
-    "g": "Core",
+{
+    "g": "Cloudflare",
     "icon": "⚡",
     "k": "CLOUDFLARE_PROXY_DOMAINS",
     "lbl": "Extra domains to proxy",
     "type": "textarea",
-    "ph": "api.sendgrid.com,slack.com"
+    "ph": "api.sendgrid.com,slack.com",
+    "tag": "advanced"
   },
-  {
-    "g": "Core",
+{
+    "g": "Cloudflare",
     "icon": "⚡",
     "k": "CLOUDFLARE_WORKERS_TOKEN",
     "lbl": "Workers API token",
     "type": "password",
-    "secret": 1,
-    "common": 1
+    "common": 1,
+    "tag": "credential"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "HF_USERNAME",
     "lbl": "Hugging Face username",
     "type": "text",
-    "common": 1
+    "common": 1,
+    "tag": "optional"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "HF_TOKEN",
     "lbl": "HF write token",
     "type": "password",
-    "secret": 1,
-    "common": 1
+    "common": 1,
+    "tag": "credential"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "BACKUP_DATASET_NAME",
     "lbl": "Backup dataset name",
     "type": "text",
     "ph": "huggingclaw-backup",
-    "common": 1
+    "common": 1,
+    "tag": "optional"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "SYNC_INTERVAL",
     "lbl": "Sync interval (seconds)",
     "type": "number",
     "ph": "180",
-    "common": 1
+    "common": 1,
+    "tag": "advanced"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "JUPYTER_TOKEN",
     "lbl": "Jupyter access token",
     "type": "password",
-    "secret": 1,
     "ph": "huggingface",
-    "common": 1
+    "common": 1,
+    "tag": "credential"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "KEEP_ALIVE_INTERVAL",
     "lbl": "Keep-alive ping interval (seconds)",
     "type": "number",
     "ph": "300",
-    "common": 1
+    "common": 1,
+    "tag": "advanced"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "OPENCLAW_DISABLE_BONJOUR",
     "lbl": "Disable Bonjour/mDNS discovery",
     "type": "toggle",
-    "ph": "false"
+    "ph": "false",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "OPENCLAW_RUNTIME_VERSION",
     "lbl": "Pin runtime version",
     "type": "text",
-    "ph": "latest"
+    "ph": "latest",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Core",
     "icon": "⚡",
     "k": "OPENCLAW_DISPLAY_VERSION",
     "lbl": "Display version label",
     "type": "text",
-    "ph": ""
+    "ph": "",
+    "tag": "optional"
   },
-  {
+{
     "g": "Integrations",
     "icon": "🔌",
     "k": "CLOUDFLARE_ACCOUNT_ID",
     "lbl": "Cloudflare account ID",
     "type": "text",
-    "ph": "account-id"
+    "ph": "account-id",
+    "tag": "feature"
   },
-  {
+{
     "g": "Integrations",
     "icon": "🔌",
     "k": "CLOUDFLARE_WORKER_NAME",
     "lbl": "Outbound proxy worker name",
     "type": "text",
-    "ph": "huggingclaw-proxy"
+    "ph": "huggingclaw-proxy",
+    "tag": "feature"
   },
-  {
+{
     "g": "Integrations",
     "icon": "🔌",
     "k": "CLOUDFLARE_KEEPALIVE_URL",
     "lbl": "Keepalive worker URL",
     "type": "text",
-    "ph": "https://your-worker.workers.dev"
+    "ph": "https://your-worker.workers.dev",
+    "tag": "feature"
   },
-  {
+{
     "g": "Integrations",
     "icon": "🔌",
     "k": "CLOUDFLARE_KEEPALIVE_WORKER_NAME",
     "lbl": "Keepalive worker name",
     "type": "text",
-    "ph": "huggingclaw-keepalive"
+    "ph": "huggingclaw-keepalive",
+    "tag": "feature"
   },
-  {
+{
     "g": "Integrations",
     "icon": "🔌",
     "k": "CLOUDFLARE_KEEPALIVE_CRON",
     "lbl": "Keepalive cron schedule",
     "type": "text",
-    "ph": "*/5 * * * *"
+    "ph": "*/5 * * * *",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Integrations",
     "icon": "🔌",
     "k": "TELEGRAM_API_ROOT",
     "lbl": "Telegram API root override",
     "type": "text",
-    "ph": "https://api.telegram.org"
+    "ph": "https://api.telegram.org",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Runtime",
     "icon": "⚙️",
     "k": "OPENCLAW_CONFIG_WATCH_INTERVAL",
     "lbl": "Config watch interval (seconds)",
     "type": "number",
-    "ph": "1"
+    "ph": "1",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Runtime",
     "icon": "⚙️",
     "k": "OPENCLAW_CONFIG_SETTLE_SECONDS",
     "lbl": "Config settle window (seconds)",
     "type": "number",
-    "ph": "3"
+    "ph": "3",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Runtime",
     "icon": "⚙️",
     "k": "JUPYTER_ROOT_DIR",
     "lbl": "Jupyter root directory",
     "type": "text",
-    "ph": "/home/node"
+    "ph": "/home/node",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Backup",
     "icon": "💾",
     "k": "WORKSPACE_GIT_USER",
     "lbl": "Workspace git author email",
     "type": "text",
-    "ph": "openclaw@example.com"
+    "ph": "openclaw@example.com",
+    "tag": "optional"
   },
-  {
+{
     "g": "Backup",
     "icon": "💾",
     "k": "WORKSPACE_GIT_NAME",
     "lbl": "Workspace git author name",
     "type": "text",
-    "ph": "OpenClaw Bot"
+    "ph": "OpenClaw Bot",
+    "tag": "optional"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "ANTHROPIC_API_KEY",
     "lbl": "Anthropic (Claude)",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "OPENAI_API_KEY",
     "lbl": "OpenAI (GPT)",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "GOOGLE_API_KEY",
     "lbl": "Google AI Studio",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "GEMINI_API_KEY",
     "lbl": "Google Gemini",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "DEEPSEEK_API_KEY",
     "lbl": "DeepSeek",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "OPENROUTER_API_KEY",
     "lbl": "OpenRouter",
     "type": "password",
-    "secret": 1,
-    "common": 1
+    "common": 1,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "OPENCODE_API_KEY",
     "lbl": "OpenCode",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "KILOCODE_API_KEY",
     "lbl": "KiloCode",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "ZAI_API_KEY",
     "lbl": "Z.ai / GLM",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "MOONSHOT_API_KEY",
     "lbl": "Moonshot / Kimi",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "MINIMAX_API_KEY",
     "lbl": "MiniMax",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "XIAOMI_API_KEY",
     "lbl": "Xiaomi / MiMo",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "VOLCANO_ENGINE_API_KEY",
     "lbl": "Volcengine / Doubao",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "BYTEPLUS_API_KEY",
     "lbl": "BytePlus",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "MISTRAL_API_KEY",
     "lbl": "Mistral",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "XAI_API_KEY",
     "lbl": "xAI (Grok)",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "NVIDIA_API_KEY",
     "lbl": "NVIDIA",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "GROQ_API_KEY",
     "lbl": "Groq",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "COHERE_API_KEY",
     "lbl": "Cohere",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "TOGETHER_API_KEY",
     "lbl": "Together AI",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "CEREBRAS_API_KEY",
     "lbl": "Cerebras",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "QIANFAN_API_KEY",
     "lbl": "Qianfan",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "MODELSTUDIO_API_KEY",
     "lbl": "ModelStudio",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "KIMI_API_KEY",
     "lbl": "Kimi",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "HUGGINGFACE_HUB_TOKEN",
     "lbl": "Hugging Face token",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "COPILOT_GITHUB_TOKEN",
     "lbl": "GitHub Copilot",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "VENICE_API_KEY",
     "lbl": "Venice",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "SYNTHETIC_API_KEY",
     "lbl": "Synthetic",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "AI_GATEWAY_API_KEY",
     "lbl": "AI Gateway",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Provider Keys",
     "icon": "🔑",
     "k": "CLOUDFLARE_API_TOKEN",
     "lbl": "Cloudflare API token",
     "type": "password",
-    "secret": 1,
-    "common": 0
+    "common": 0,
+    "tag": "credential"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "ANTHROPIC_API_KEYS",
     "lbl": "Anthropic pool (comma-sep)",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "OPENAI_API_KEYS",
     "lbl": "OpenAI pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "GEMINI_API_KEYS",
     "lbl": "Gemini pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "GOOGLE_API_KEYS",
     "lbl": "Google pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "DEEPSEEK_API_KEYS",
     "lbl": "DeepSeek pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "OPENROUTER_API_KEYS",
     "lbl": "OpenRouter pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "OPENCODE_API_KEYS",
     "lbl": "OpenCode pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "KILOCODE_API_KEYS",
     "lbl": "KiloCode pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "ZAI_API_KEYS",
     "lbl": "Z.ai / GLM pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "MOONSHOT_API_KEYS",
     "lbl": "Moonshot / Kimi pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "MINIMAX_API_KEYS",
     "lbl": "MiniMax pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "XIAOMI_API_KEYS",
     "lbl": "Xiaomi pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "VOLCANO_ENGINE_API_KEYS",
     "lbl": "Volcano Engine pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "BYTEPLUS_API_KEYS",
     "lbl": "BytePlus pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "MISTRAL_API_KEYS",
     "lbl": "Mistral pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "XAI_API_KEYS",
     "lbl": "xAI pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "NVIDIA_API_KEYS",
     "lbl": "NVIDIA pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "GROQ_API_KEYS",
     "lbl": "Groq pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "COHERE_API_KEYS",
     "lbl": "Cohere pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "TOGETHER_API_KEYS",
     "lbl": "Together pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "CEREBRAS_API_KEYS",
     "lbl": "Cerebras pool",
-    "type": "text"
+    "type": "text",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Rotation Pools",
     "icon": "🔄",
     "k": "HUGGINGFACE_HUB_TOKENS",
     "lbl": "HF token pool",
     "type": "text"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "OPENAI_MODELS",
     "lbl": "Visible OpenAI models",
     "type": "model_list",
     "options_key": "OPENAI_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "ANTHROPIC_MODELS",
     "lbl": "Visible Anthropic models",
     "type": "model_list",
     "options_key": "ANTHROPIC_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "GEMINI_MODELS",
     "lbl": "Visible Gemini models",
     "type": "model_list",
     "options_key": "GEMINI_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "DEEPSEEK_MODELS",
     "lbl": "Visible DeepSeek models",
     "type": "model_list",
     "options_key": "DEEPSEEK_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "OPENROUTER_MODELS",
     "lbl": "Visible OpenRouter models",
     "type": "model_list",
     "options_key": "OPENROUTER_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "GROQ_MODELS",
     "lbl": "Visible Groq models",
     "type": "model_list",
     "options_key": "GROQ_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "MISTRAL_MODELS",
     "lbl": "Visible Mistral models",
     "type": "model_list",
     "options_key": "MISTRAL_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "XAI_MODELS",
     "lbl": "Visible xAI models",
     "type": "model_list",
     "options_key": "XAI_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "COHERE_MODELS",
     "lbl": "Visible Cohere models",
     "type": "model_list",
     "options_key": "COHERE_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "TOGETHER_MODELS",
     "lbl": "Visible Together models",
     "type": "model_list",
     "options_key": "TOGETHER_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "CEREBRAS_MODELS",
     "lbl": "Visible Cerebras models",
     "type": "model_list",
     "options_key": "CEREBRAS_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "NVIDIA_MODELS",
     "lbl": "Visible NVIDIA models",
     "type": "model_list",
     "options_key": "NVIDIA_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "KILOCODE_MODELS",
     "lbl": "Visible KiloCode models",
     "type": "model_list",
     "options_key": "KILOCODE_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "OPENCODE_MODELS",
     "lbl": "Visible OpenCode models",
     "type": "model_list",
     "options_key": "OPENCODE_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "ZAI_MODELS",
     "lbl": "Visible Z.ai / GLM models",
     "type": "model_list",
     "options_key": "ZAI_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "MOONSHOT_MODELS",
     "lbl": "Visible Moonshot / Kimi models",
     "type": "model_list",
     "options_key": "MOONSHOT_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "MINIMAX_MODELS",
     "lbl": "Visible MiniMax models",
     "type": "model_list",
     "options_key": "MINIMAX_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "XIAOMI_MODELS",
     "lbl": "Visible Xiaomi models",
     "type": "model_list",
     "options_key": "XIAOMI_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "VOLCANO_ENGINE_MODELS",
     "lbl": "Visible Volcano Engine models",
     "type": "model_list",
     "options_key": "VOLCANO_ENGINE_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "BYTEPLUS_MODELS",
     "lbl": "Visible BytePlus models",
     "type": "model_list",
     "options_key": "BYTEPLUS_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "QIANFAN_MODELS",
     "lbl": "Visible Qianfan models",
     "type": "model_list",
     "options_key": "QIANFAN_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "MODELSTUDIO_MODELS",
     "lbl": "Visible ModelStudio models",
     "type": "model_list",
     "options_key": "MODELSTUDIO_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "KIMI_MODELS",
     "lbl": "Visible Kimi models",
     "type": "model_list",
     "options_key": "KIMI_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "HUGGINGFACE_MODELS",
     "lbl": "Visible Hugging Face models",
     "type": "model_list",
     "options_key": "HUGGINGFACE_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Model Lists",
     "icon": "📋",
     "k": "GITHUB_COPILOT_MODELS",
     "lbl": "Visible GitHub Copilot models",
     "type": "model_list",
     "options_key": "GITHUB_COPILOT_MODELS",
-    "ph": "Select models to build a comma list"
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   },
-  {
+{
     "g": "Custom Provider",
     "icon": "🔌",
     "k": "CUSTOM_PROVIDER_NAME",
     "lbl": "Provider display name",
-    "type": "text"
+    "type": "text",
+    "tag": "feature"
   },
-  {
+{
     "g": "Custom Provider",
     "icon": "🔌",
     "k": "CUSTOM_BASE_URL",
     "lbl": "OpenAI-compatible base URL",
-    "type": "text"
+    "type": "text",
+    "tag": "feature"
   },
-  {
+{
     "g": "Custom Provider",
     "icon": "🔌",
     "k": "CUSTOM_MODEL_ID",
     "lbl": "Model ID",
     "type": "model",
     "options_key": "LLM_MODEL",
-    "ph": "custom model id"
+    "ph": "custom model id",
+    "tag": "feature"
   },
-  {
+{
     "g": "Custom Provider",
     "icon": "🔌",
     "k": "CUSTOM_MODEL_NAME",
     "lbl": "Friendly model name",
-    "type": "text"
+    "type": "text",
+    "tag": "feature"
   },
-  {
+{
     "g": "Custom Provider",
     "icon": "🔌",
     "k": "CUSTOM_API_KEY",
     "lbl": "Provider API key",
     "type": "password",
-    "secret": 1
+    "tag": "credential"
   },
-  {
+{
     "g": "Custom Provider",
     "icon": "🔌",
     "k": "CUSTOM_API_TYPE",
@@ -1647,126 +1734,217 @@ const FIELDS = [
       "gemini",
       "openrouter"
     ],
-    "ph": "openai-completions"
+    "ph": "openai-completions",
+    "tag": "feature"
   },
-  {
+{
     "g": "Custom Provider",
     "icon": "🔌",
     "k": "CUSTOM_CONTEXT_WINDOW",
     "lbl": "Context window",
     "type": "number",
-    "ph": "128000"
+    "ph": "128000",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Custom Provider",
     "icon": "🔌",
     "k": "CUSTOM_MAX_TOKENS",
     "lbl": "Max output tokens",
     "type": "number",
-    "ph": "500"
+    "ph": "500",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Telegram",
     "icon": "✈️",
     "k": "TELEGRAM_BOT_TOKEN",
     "lbl": "Bot token from BotFather",
     "type": "password",
-    "secret": 1,
-    "common": 1
+    "common": 1,
+    "tag": "credential"
   },
-  {
+{
     "g": "Telegram",
     "icon": "✈️",
     "k": "TELEGRAM_ALLOWED_USERS",
     "lbl": "Allowed user IDs (comma)",
     "type": "text",
     "ph": "123456789,987654321",
-    "common": 1
+    "common": 1,
+    "tag": "critical"
   },
-  {
+{
     "g": "Telegram",
     "icon": "✈️",
     "k": "TELEGRAM_USER_ID",
     "lbl": "Single Telegram user ID",
-    "type": "text"
+    "type": "text",
+    "tag": "optional"
   },
-  {
+{
     "g": "Telegram",
     "icon": "✈️",
     "k": "TELEGRAM_USER_IDS",
     "lbl": "Telegram user IDs (comma)",
-    "type": "text"
+    "type": "text",
+    "tag": "optional"
   },
-  {
+{
     "g": "Deployment",
     "icon": "🧭",
     "k": "APP_BASE",
     "lbl": "Public app base path",
     "type": "text",
-    "ph": "/app"
+    "ph": "/app",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Deployment",
     "icon": "🧭",
     "k": "BACKUP_DATASET",
     "lbl": "Backup dataset alias",
     "type": "text",
-    "ph": "huggingclaw-backup"
+    "ph": "huggingclaw-backup",
+    "tag": "optional"
   },
-  {
+{
     "g": "Deployment",
     "icon": "🧭",
     "k": "SPACE_AUTHOR_NAME",
     "lbl": "HF Space author name",
-    "type": "text"
+    "type": "text",
+    "tag": "optional"
   },
-  {
+{
     "g": "Deployment",
     "icon": "🧭",
     "k": "SPACE_HOST",
     "lbl": "HF Space host domain",
-    "type": "text"
+    "type": "text",
+    "tag": "optional"
   },
-  {
+{
     "g": "Deployment",
     "icon": "🧭",
     "k": "PORT",
     "lbl": "Public dashboard port",
     "type": "number",
-    "ph": "7861"
+    "ph": "7861",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Deployment",
     "icon": "🧭",
     "k": "GATEWAY_PORT",
     "lbl": "OpenClaw internal port",
     "type": "number",
-    "ph": "7860"
+    "ph": "7860",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Deployment",
     "icon": "🧭",
     "k": "JUPYTER_PORT",
     "lbl": "Jupyter internal port",
     "type": "number",
-    "ph": "8888"
+    "ph": "8888",
+    "tag": "advanced"
   },
-  {
+{
     "g": "Deployment",
     "icon": "🧭",
     "k": "JUPYTER_BASE",
     "lbl": "Jupyter public base path",
     "type": "text",
-    "ph": "/terminal"
+    "ph": "/terminal",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "AI_GATEWAY_API_KEYS",
+    "lbl": "AI Gateway pool (comma-sep)",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "COPILOT_GITHUB_TOKENS",
+    "lbl": "GitHub Copilot token pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "KIMI_API_KEYS",
+    "lbl": "Kimi pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "MODELSTUDIO_API_KEYS",
+    "lbl": "ModelStudio pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "QIANFAN_API_KEYS",
+    "lbl": "Qianfan pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "SYNTHETIC_API_KEYS",
+    "lbl": "Synthetic pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Rotation Pools",
+    "icon": "🔄",
+    "k": "VENICE_API_KEYS",
+    "lbl": "Venice pool",
+    "type": "text",
+    "tag": "advanced"
+  },
+  {
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "VENICE_MODELS",
+    "lbl": "Visible Venice models",
+    "type": "model_list",
+    "options_key": "VENICE_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
+  },
+  {
+    "g": "Model Lists",
+    "icon": "📋",
+    "k": "SYNTHETIC_MODELS",
+    "lbl": "Visible Synthetic models",
+    "type": "model_list",
+    "options_key": "SYNTHETIC_MODELS",
+    "ph": "Select models to build a comma list",
+    "tag": "optional"
   }
-];
+]
 
 const ICONS = {
-  All:'🏠', Core:'⚡', Deployment:'🧭', 'Provider Keys':'🔑', 'Rotation Pools':'🔄',
-  'Model Lists':'📋', 'Custom Provider':'🔌', Telegram:'✈️', WhatsApp:'💬',
-  Cloudflare:'☁️', Backup:'💾', DevData:'🧪', Runtime:'⚙️', 'Custom Env':'🔧'
+  All:'🏠', Core:'⚡', Startup:'🚀', DevData:'🧪', WhatsApp:'💬',
+  Cloudflare:'☁️', Gateway:'🔀', Logging:'📝', Network:'🌐', Plugins:'🔌',
+  Deployment:'🧭', 'Provider Keys':'🔑', 'Rotation Pools':'🔄',
+  'Model Lists':'📋', 'Custom Provider':'🧩', Telegram:'✈️',
+  Backup:'💾', Runtime:'⚙️', Integrations:'🔗', 'Custom Env':'🔧'
 };
-
 const $ = id => document.getElementById(id);
 const esc = s => String(s ?? '').replace(/[&<>"']/g, c => ({
   '&': '&amp;',
@@ -1946,11 +2124,18 @@ function valueControlHTML(field) {
 }
 
 function cardHTML(f) {
-  const badge = f.secret
-    ? '<span class="badge badge-s">secret</span>'
-    : '<span class="badge badge-f">safe</span>';
+  const TAG_META = {
+    critical:   { cls: 'badge-critical',   lbl: 'critical'   },
+    credential: { cls: 'badge-credential', lbl: 'credential' },
+    feature:    { cls: 'badge-feature',    lbl: 'feature'    },
+    optional:   { cls: 'badge-optional',   lbl: 'optional'   },
+    advanced:   { cls: 'badge-advanced',   lbl: 'advanced'   },
+    build:      { cls: 'badge-build',      lbl: 'build-time' },
+  };
+  const tm = TAG_META[f.tag] || TAG_META.optional;
+  const badge = `<span class="badge ${tm.cls}">${tm.lbl}</span>`;
 
-  return `<div class="env-card" data-row data-group="${esc(f.g)}" data-search="${esc((f.g + ' ' + f.k + ' ' + (f.lbl || '')).toLowerCase())}">
+  return `<div class="env-card" data-row data-group="${esc(f.g)}" data-search="${esc((f.g + ' ' + f.k + ' ' + (f.lbl || '') + ' ' + (f.tag || '')).toLowerCase())}">
     <div class="card-top">
       <input type="checkbox" class="card-check" data-check="${esc(f.k)}" ${f.common ? 'data-common="1"' : ''}>
       <div class="card-info">
@@ -2241,6 +2426,7 @@ function renderSections() {
       <div class="sec-header">
         <span class="sec-icon">${ICONS[grp] || '📁'}</span>
         <span class="sec-title">${esc(grp)}</span>
+        <span class="sec-count">${items.length}</span>
         <div class="sec-line"></div>
       </div>
       <div class="cards">${items.map(cardHTML).join('')}</div>`;

health-server.js

@@ -54,49 +54,130 @@ function deriveHfSpaceUrl() {
 }
 const HF_SPACE_URL = deriveHfSpaceUrl();
 
-// Auto-detect space privacy via HF API at startup.
-// Caches result so every request doesn't hit the API.
-let SPACE_IS_PRIVATE = false;
+// ── Privacy Detection ──
+// Priority order:
+//   1. SPACE_PRIVACY env var ("public" / "private") — explicit user override, most reliable
+//   2. HF API call to huggingface.co — auto-detect
+//   3. Fail-secure default: treat as private if SPACE_ID is set
+
+// 1. Check explicit env var override first
+const _spacPrivacyEnv = (process.env.SPACE_PRIVACY || "").trim().toLowerCase();
+let SPACE_IS_PRIVATE;
+let _privacyDetectionDone = false;
+let _privacyDetectionResolve;
+const privacyDetectionReady = new Promise((res) => { _privacyDetectionResolve = res; });
+
+if (_spacPrivacyEnv === "public") {
+  // User explicitly set SPACE_PRIVACY=public — skip API call entirely
+  SPACE_IS_PRIVATE = false;
+  _privacyDetectionDone = true;
+  console.log("[health-server] Space privacy: public (SPACE_PRIVACY env var override)");
+  privacyDetectionReady.then ? void 0 : null;
+  _privacyDetectionResolve && _privacyDetectionResolve();
+} else if (_spacPrivacyEnv === "private") {
+  // User explicitly set SPACE_PRIVACY=private — skip API call entirely
+  SPACE_IS_PRIVATE = true;
+  _privacyDetectionDone = true;
+  console.log("[health-server] Space privacy: private (SPACE_PRIVACY env var override)");
+  _privacyDetectionResolve && _privacyDetectionResolve();
+} else {
+  // 2. Auto-detect via HF API (with fail-secure default)
+  // Default to private if SPACE_ID is set — gets corrected by API call below.
+  SPACE_IS_PRIVATE = !!SPACE_ID;
+}
+
 async function detectSpacePrivacy() {
-  if (!SPACE_ID) return;
-  try {
-    const token = (process.env.HF_TOKEN || "").trim();
-    const reqOptions = {
-      hostname: "huggingface.co",
-      path: `/api/spaces/${SPACE_ID}`,
-      method: "GET",
-      headers: Object.assign(
-        { "User-Agent": "HuggingClaw/health-server" },
-        token ? { Authorization: `Bearer ${token}` } : {}
-      ),
-    };
-    await new Promise((resolve) => {
-      const r = https.request(reqOptions, (res) => {
-        let body = "";
-        res.on("data", (chunk) => { body += chunk; });
-        res.on("end", () => {
-          try {
-            if (res.statusCode === 200) {
-              const data = JSON.parse(body);
-              SPACE_IS_PRIVATE = data.private === true;
-            } else if (res.statusCode === 404 && !token) {
-              // 404 with no token usually means private space
-              SPACE_IS_PRIVATE = true;
-            }
-          } catch {}
-          resolve();
+  // Skip if already resolved via env var
+  if (_spacPrivacyEnv === "public" || _spacPrivacyEnv === "private") return;
+  // Skip if not running on HF Spaces
+  if (!SPACE_ID) {
+    SPACE_IS_PRIVATE = false;
+    _privacyDetectionDone = true;
+    _privacyDetectionResolve();
+    return;
+  }
+
+  const token = (process.env.HF_TOKEN || "").trim();
+  const reqOptions = {
+    hostname: "huggingface.co",
+    path: `/api/spaces/${SPACE_ID}`,
+    method: "GET",
+    headers: Object.assign(
+      { "User-Agent": "HuggingClaw/health-server" },
+      token ? { Authorization: `Bearer ${token}` } : {}
+    ),
+  };
+
+  // Retry up to 5 times with increasing delay — covers transient failures at boot
+  const MAX_ATTEMPTS = 5;
+  let detected = false;
+
+  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
+    try {
+      const result = await new Promise((resolve) => {
+        const r = https.request(reqOptions, (apiRes) => {
+          let body = "";
+          apiRes.on("data", (chunk) => { body += chunk; });
+          apiRes.on("end", () => {
+            try {
+              if (apiRes.statusCode === 200) {
+                const data = JSON.parse(body);
+                // API confirmed privacy status
+                SPACE_IS_PRIVATE = data.private === true;
+                resolve({ ok: true, status: apiRes.statusCode });
+              } else if (apiRes.statusCode === 401 || apiRes.statusCode === 403) {
+                // 401/403 on /api/spaces means the space IS private and our token
+                // is missing or wrong. Mark as private.
+                SPACE_IS_PRIVATE = true;
+                resolve({ ok: true, status: apiRes.statusCode, forcedPrivate: true });
+              } else if (apiRes.statusCode === 404) {
+                // Space not found — shouldn't happen but treat as non-blocking; default stays.
+                resolve({ ok: false, status: apiRes.statusCode });
+              } else {
+                // Other non-200 — transient; retry
+                resolve({ ok: false, status: apiRes.statusCode });
+              }
+            } catch { resolve({ ok: false, status: apiRes.statusCode }); }
+          });
         });
+        r.on("error", (err) => resolve({ ok: false, error: err.message }));
+        r.setTimeout(8000, () => { r.destroy(); resolve({ ok: false, error: "timeout" }); });
+        r.end();
       });
-      r.on("error", resolve);
-      r.setTimeout(5000, () => { r.destroy(); resolve(); });
-      r.end();
-    });
-    console.log(`[health-server] Space privacy detected: ${SPACE_IS_PRIVATE ? "private" : "public"}`);
-  } catch {
-    // Network error — default to false (safe)
+
+      console.log(`[health-server] Privacy detection attempt ${attempt}/${MAX_ATTEMPTS}: status=${result.status || "network-error"} ok=${result.ok}`);
+
+      if (result.ok) { detected = true; break; }
+    } catch (err) {
+      console.warn(`[health-server] Privacy detection attempt ${attempt} threw: ${err.message}`);
+    }
+
+    const delay = Math.min(2000 * attempt, 10000); // 2s, 4s, 6s, 8s, 10s
+    if (attempt < MAX_ATTEMPTS) {
+      await new Promise((r) => setTimeout(r, delay));
+    }
   }
+
+  if (!detected) {
+    console.warn(
+      `[health-server] Privacy detection failed after ${MAX_ATTEMPTS} attempts — ` +
+      `defaulting to ${SPACE_IS_PRIVATE ? "private" : "public"}. ` +
+      `TIP: Set SPACE_PRIVACY=public (or private) in your Space secrets to skip API detection.`
+    );
+  } else {
+    console.log(`[health-server] Space privacy detected via HF API: ${SPACE_IS_PRIVATE ? "private" : "public"}`);
+  }
+
+  _privacyDetectionDone = true;
+  _privacyDetectionResolve();
+}
+
+// Only run API detection if env var override not used
+if (_spacPrivacyEnv !== "public" && _spacPrivacyEnv !== "private") {
+  detectSpacePrivacy();
+  // Re-check every 5 minutes so runtime public↔private changes are picked up
+  setInterval(detectSpacePrivacy, 5 * 60 * 1000);
 }
-detectSpacePrivacy();
 const CLOUDFLARE_KEEPALIVE_STATUS_FILE =
   "/tmp/huggingclaw-cloudflare-keepalive-status.json";
 
@@ -240,15 +321,63 @@ function renderDashboard(data) {
     <a class="hero-action env" data-space-link="env-builder" href="/env-builder">⚙️ Env Builder →</a>
   </div>
   <section class="overview">${tilesHtml}</section>
-  <footer>Built by <a href="https://github.com/somratpro" target="_blank" rel="noopener noreferrer" style="color:inherit;text-decoration:none">@somratpro</a>${JUPYTER_ENABLED ? " · Terminal by JupyterLab" : ""}<br><span>Public Spaces open via <code>.hf.space</code> directly. Private Spaces require the <a href="${HF_SPACE_URL || "#"}" target="_blank" rel="noopener noreferrer" style="color:inherit">Hugging Face App tab</a> for the authenticated session${HF_SPACE_URL ? ` — or share <code>huggingface.co/spaces/${SPACE_ID}</code>` : ""}.</span></footer>
+  <footer>Built by <a href="https://github.com/somratpro" target="_blank" rel="noopener noreferrer" style="color:inherit;text-decoration:none">@somratpro</a>${JUPYTER_ENABLED ? " · Terminal by JupyterLab" : ""}<br>Env Builder &amp; JupyterLab integration by<br><a href="https://github.com/anurag008w" target="_blank" rel="noopener noreferrer" style="color:inherit;text-decoration:none">@anurag</a></footer>
   </main>
   <script>
   document.querySelectorAll('.local-time').forEach(el=>{const d=new Date(el.getAttribute('data-iso'));if(!isNaN(d))el.textContent='At '+d.toLocaleTimeString()});
   const inEmbeddedApp = (() => { try { return window.top !== window.self; } catch { return true; } })();
   const isDirectHfSpaceHost = /\.hf\.space$/i.test(window.location.hostname);
   const HF_SPACE_URL = ${JSON.stringify(HF_SPACE_URL)};
-  const SPACE_IS_PRIVATE = ${JSON.stringify(SPACE_IS_PRIVATE)};
-  // ── Private Space Guard ──
+  // Server-side detected value (may be stale if page was cached — see /api/is-private)
+  let SPACE_IS_PRIVATE = ${JSON.stringify(SPACE_IS_PRIVATE)};
+
+  function applyLinkTargets() {
+    // Keep hero buttons in-frame for private spaces; open new tab for public spaces
+    // accessed via the HF iframe or directly at .hf.space.
+    const openInNewTab = !SPACE_IS_PRIVATE && (inEmbeddedApp || isDirectHfSpaceHost);
+    document.querySelectorAll('a[data-space-link]').forEach((a) => {
+      if (openInNewTab) {
+        a.setAttribute('target', '_blank');
+        a.setAttribute('rel', 'noopener noreferrer');
+      } else {
+        a.removeAttribute('target');
+        a.removeAttribute('rel');
+      }
+    });
+  }
+
+  applyLinkTargets();
+
+  // Always re-fetch the live privacy status from the server to handle:
+  // 1. Startup race condition where server rendered before API detection finished
+  // 2. Any mismatch between client-rendered value and actual server-side state
+  // 3. Public spaces where the fail-secure default (private) needs correcting
+  // Also retries after 4s in case the first fetch raced with a server-side retry.
+  function syncPrivacy() {
+    return fetch('/api/is-private', { cache: 'no-store' })
+      .then(r => r.json())
+      .then(d => {
+        if (d.isPrivate !== SPACE_IS_PRIVATE) {
+          SPACE_IS_PRIVATE = d.isPrivate;
+          applyLinkTargets(); // re-run: adds or removes target="_blank" on buttons
+        }
+        return d.isPrivate;
+      })
+      .catch(() => SPACE_IS_PRIVATE);
+  }
+
+  if (isDirectHfSpaceHost) {
+    // Immediate check on page load
+    syncPrivacy().then(isPrivate => {
+      // If space appears private after first check, re-verify after server retries
+      // complete (server retries up to 3×5s = ~15s). This catches the edge case
+      // where a PUBLIC space returned private due to a transient API failure.
+      if (isPrivate) {
+        setTimeout(syncPrivacy, 8000);
+        setTimeout(syncPrivacy, 16000);
+      }
+    });
+  }
   // Direct .hf.space access outside the HF App iframe has no valid session cookie
   // for private spaces — HF CDN returns 404 before the request reaches the container.
   // Redirect users to huggingface.co/spaces/... which authenticates them properly.
@@ -259,18 +388,6 @@ function renderDashboard(data) {
     document.body.appendChild(notice);
     setTimeout(() => { window.location.replace(HF_SPACE_URL); }, 300);
   }
-  // If inside the HF App iframe, force new-tab navigation so users can break out
-  // to the standalone Space host. Also keep direct .hf.space behavior opening new tabs.
-  const openInNewTab = inEmbeddedApp || isDirectHfSpaceHost;
-  document.querySelectorAll('a[data-space-link]').forEach((a) => {
-    if (openInNewTab) {
-      a.setAttribute('target', '_blank');
-      a.setAttribute('rel', 'noopener noreferrer');
-    } else {
-      a.removeAttribute('target');
-      a.removeAttribute('rel');
-    }
-  });
 </script>
 </body></html>`;
 }
@@ -279,7 +396,6 @@ function renderPrivateRedirect(targetUrl) {
   const safeUrl = escapeHtml(targetUrl);
   return `<!doctype html><html lang="en"><head>
   <meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/>
-  <meta http-equiv="refresh" content="3;url=${safeUrl}"/>
   <title>HuggingClaw — Private Space</title>
   <style>
     :root{color-scheme:dark}
@@ -302,8 +418,13 @@ function renderPrivateRedirect(targetUrl) {
     <div class="sub">Redirecting in 3 seconds&hellip;</div>
   </div>
   <script>
-    // Immediate redirect if JS available — don't wait for meta refresh
-    setTimeout(() => { window.location.replace(${JSON.stringify(targetUrl)}); }, 100);
+    // Only auto-redirect when NOT inside an iframe (e.g. HF App tab embeds this
+    // page in an iframe; navigating that iframe to huggingface.co is blocked by
+    // X-Frame-Options and causes "refused to connect" in the browser).
+    const _inFrame = (() => { try { return window.top !== window.self; } catch { return true; } })();
+    if (!_inFrame) {
+      setTimeout(() => { window.location.replace(${JSON.stringify(targetUrl)}); }, 100);
+    }
   </script>
 </body></html>`;
 }
@@ -403,6 +524,15 @@ function proxyHTTP(req, res, targetHost, targetPort, options = {}) {
 const server = http.createServer(async (req, res) => {
   const { pathname } = parseRequestUrl(req.url);
 
+  // Lightweight endpoint for client-side fallback detection.
+  // Called by the dashboard JS if it suspects the server-rendered SPACE_IS_PRIVATE
+  // value was stale (race condition at startup). No auth required — it's not sensitive.
+  if (pathname === "/api/is-private") {
+    if (!_privacyDetectionDone) await privacyDetectionReady;
+    res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    return res.end(JSON.stringify({ isPrivate: SPACE_IS_PRIVATE }));
+  }
+
   if (pathname === "/health") {
     const gatewayReady = await probePort(GATEWAY_HOST, GATEWAY_PORT, "/health");
     res.writeHead(gatewayReady ? 200 : 503, { "Content-Type": "application/json" });
@@ -435,11 +565,37 @@ const server = http.createServer(async (req, res) => {
   // and WebSocket upgrades pass through untouched.
   // /health and /status are always exempt so uptime monitors keep working.
   const isHtmlRequest = (req.headers.accept || "").includes("text/html");
+
+  // RACE CONDITION FIX: Wait for privacy detection to finish BEFORE computing
+  // isDirectHfSpaceRequest. Previously this const was computed immediately with
+  // the fail-secure default (SPACE_IS_PRIVATE=true), causing private redirects
+  // even when the space is actually public or the owner is accessing via HF App.
+  // After the very first HTML request, _privacyDetectionDone=true so no delay.
+  if (isHtmlRequest && !_privacyDetectionDone) await privacyDetectionReady;
+
+  // In-app navigation (clicking links within the HF iframe) sends a Referer
+  // from the same .hf.space origin — don't redirect those, only redirect
+  // fresh direct browser access that has no same-origin referer.
+  const referer = req.headers.referer || req.headers.referrer || "";
+  const isSameOriginNav = !!(referer && typeof req.headers.host === "string" &&
+    referer.startsWith(`https://${req.headers.host}`));
+  // When HF App embeds the space in an iframe, the initial request has
+  // Referer: https://huggingface.co/spaces/... (NOT .hf.space).
+  // HF handles authentication itself — if the user is not logged in, HF
+  // redirects them before the iframe ever loads. So a huggingface.co referer
+  // means the user is already authenticated; skip the private redirect.
+  const isFromHFApp = !!(referer && (
+    referer.startsWith("https://huggingface.co") ||
+    referer.startsWith("https://hf.co")
+  ));
+  // NOTE: computed AFTER detection is awaited above — always uses real value.
   const isDirectHfSpaceRequest = SPACE_IS_PRIVATE &&
     HF_SPACE_URL &&
     isHtmlRequest &&
     typeof req.headers.host === "string" &&
-    req.headers.host.endsWith(".hf.space");
+    req.headers.host.endsWith(".hf.space") &&
+    !isSameOriginNav &&
+    !isFromHFApp;
 
   if (pathname === "/env-builder" || pathname === "/env-builder/") {
     if (isDirectHfSpaceRequest) {
@@ -462,6 +618,7 @@ const server = http.createServer(async (req, res) => {
   }
 
   if (pathname === "/" || pathname === "/dashboard") {
+    // Detection already awaited above (in the isHtmlRequest guard) — no extra wait needed.
     if (isDirectHfSpaceRequest) {
       res.writeHead(200, { "Content-Type": "text/html" });
       return res.end(renderPrivateRedirect(HF_SPACE_URL));

login.html

@@ -8,7 +8,7 @@
   <img src="https://huggingface.co/front/assets/huggingface_logo-noborder.svg" alt="Hugging Face Logo" style="max-width: 120px; margin-bottom: 24px;">
   <h3>HuggingClaw Terminal</h3>
   <h4>Welcome to JupyterLab</h4>
-  <h5>The default token is <span style="color:orange;">huggingface</span></h5>
+  <p style="color:#666;">Enter the <strong>JUPYTER_TOKEN</strong> you set in your Space secrets to access the terminal.</p>
   <p style="color:#666;">This terminal is mounted at <code>/terminal/</code> inside the same Hugging Face Space as the OpenClaw UI.</p>
 
   {% if login_available %}

start.sh

@@ -458,8 +458,10 @@ inject_provider_models_from_env() {
   CONFIG_JSON=$(jq \
     --arg provider "$provider" \
     --argjson models "$models_json" \
-    '.models.mode = "merge"
-     | .models.providers[$provider] = ((.models.providers[$provider] // {}) + {models: $models})' <<<"$CONFIG_JSON")
+    'if .models.providers[$provider] then
+       .models.mode = "merge"
+       | .models.providers[$provider].models = $models
+     else . end' <<<"$CONFIG_JSON")
 }
 
 # Built-in provider model envs (optional)
@@ -838,6 +840,21 @@ warmup_browser() {
 
 # ── Start background services ──
 export LLM_MODEL="$LLM_MODEL"
+
+# ── Ensure key-rotator uses the correct HF token for huggingface.co calls ──
+# NODE_OPTIONS preloads multi-provider-key-rotator.cjs into health-server.js.
+# The rotator patches https.request and injects HUGGINGFACE_HUB_TOKEN (or
+# falls back to LLM_API_KEY) for any call to huggingface.co — including the
+# privacy-detection API call in detectSpacePrivacy(). If HUGGINGFACE_HUB_TOKEN
+# is not set (user's LLM provider is not HuggingFace), the rotator falls back
+# to LLM_API_KEY, which is the AI-provider key, NOT the HF owner token.
+# This causes a 401 on /api/spaces/${SPACE_ID} → privacy detection always
+# fails → SPACE_IS_PRIVATE stays true → public-space links never open in a
+# new tab.
+# Fix: seed HUGGINGFACE_HUB_TOKEN from HF_TOKEN when not already set.
+# HF Spaces auto-injects HF_TOKEN as the space owner's token, so this is safe.
+export HUGGINGFACE_HUB_TOKEN="${HUGGINGFACE_HUB_TOKEN:-${HF_TOKEN:-}}"
+
 # 10. Start Health Server & Dashboard
 node /home/node/app/health-server.js &
 HEALTH_PID=$!
@@ -1420,6 +1437,9 @@ if [ -n "${HUGGINGCLAW_OPENCLAW_PLUGINS:-}" ]; then
   fi
 fi
 
+# ── Fix config before running startup commands ──
+openclaw doctor --fix || true
+
 # ── Arbitrary startup commands from HF Variables/Secrets ──
 # Recommended: use one variable, HUGGINGCLAW_RUN, as a full bash script. If the
 # value starts with base64: or b64:, the rest is decoded and run as the script.
@@ -1561,6 +1581,7 @@ while true; do
     fi
   fi
 
+  openclaw doctor --fix || true
   echo "Launching OpenClaw gateway on port 7860..."
 
   GATEWAY_ARGS=(gateway run --port 7860 --bind lan)
@@ -1597,7 +1618,9 @@ while true; do
     echo "Gateway failed to start. Last 30 lines of log:"
     echo "────────────────────────────────────────────"
     tail -30 /home/node/.openclaw/gateway.log
-    exit 1
+    echo "Gateway failed — JupyterLab and env-builder still running. Retrying in 10s..."
+    sleep 10
+    continue
   fi
 
   # 11. Start WhatsApp Guardian after the gateway is accepting connections
@@ -1622,7 +1645,8 @@ while true; do
   GATEWAY_RESTART_COUNT=$((GATEWAY_RESTART_COUNT + 1))
   if [ "$GATEWAY_MAX_RESTARTS" != "0" ] && [ "$GATEWAY_RESTART_COUNT" -ge "$GATEWAY_MAX_RESTARTS" ]; then
     echo "Gateway exited with code ${GATEWAY_EXIT_CODE}; restart limit (${GATEWAY_MAX_RESTARTS}) reached."
-    exit "$GATEWAY_EXIT_CODE"
+    echo "Gateway stopped — JupyterLab and env-builder still running."
+    break
   fi
 
   echo "Gateway exited with code ${GATEWAY_EXIT_CODE}; restarting in ${GATEWAY_RESTART_DELAY}s..."

wa-guardian.js

@@ -91,7 +91,7 @@ async function createConnection() {
           method: "connect",
           params: {
             minProtocol: 3,
-            maxProtocol: 3,
+            maxProtocol: 4,
             client: {
               id: "gateway-client",
               version: "1.0.0",