mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-07 09:10:55 +00:00
f586e19790
Unquoted `<< EOF` heredocs in nanoclaw .env file creation cause shell expansion of the API key value. If an API key contains `$`, backticks, or `\`, the value is silently corrupted or could trigger command execution. Replace with `printf '%s'` which safely writes the value without interpretation. Also fix unquoted variable expansion in upload_config_file's mv command and the github-codespaces/openclaw.sh config heredoc. Fixes 34 scripts across all cloud providers. Agent: security-auditor Co-authored-by: A <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
87 lines
2.9 KiB
Bash
87 lines
2.9 KiB
Bash
#!/bin/bash
|
|
set -eo pipefail
|
|
|
|
# Source common functions - try local file first, fall back to remote
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
|
|
if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
|
|
source "$SCRIPT_DIR/lib/common.sh"
|
|
else
|
|
eval "$(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/github-codespaces/lib/common.sh)"
|
|
fi
|
|
|
|
log_info "OpenClaw on GitHub Codespaces"
|
|
echo ""
|
|
|
|
# 1. Ensure gh CLI and authentication
|
|
ensure_gh_cli
|
|
ensure_gh_auth
|
|
|
|
# 2. Get repository and create codespace
|
|
REPO="${GITHUB_REPO:-OpenRouterTeam/spawn}"
|
|
MACHINE="${CODESPACE_MACHINE:-basicLinux32gb}"
|
|
IDLE_TIMEOUT="${CODESPACE_IDLE_TIMEOUT:-30m}"
|
|
|
|
log_step "Creating codespace for repo: $REPO"
|
|
CODESPACE=$(create_codespace "$REPO" "$MACHINE" "$IDLE_TIMEOUT")
|
|
|
|
if [[ -z "$CODESPACE" ]]; then
|
|
log_error "Failed to create codespace"
|
|
exit 1
|
|
fi
|
|
|
|
log_info "Codespace created: $CODESPACE"
|
|
|
|
# Set CODESPACE_NAME for upload_file/run_server/inject_env_vars helpers
|
|
CODESPACE_NAME="$CODESPACE"
|
|
|
|
# 3. Wait for codespace to be ready
|
|
wait_for_codespace "$CODESPACE"
|
|
|
|
# 4. Install bun and openclaw
|
|
log_step "Installing bun..."
|
|
run_server "curl -fsSL https://bun.sh/install | bash && export BUN_INSTALL=\$HOME/.bun && export PATH=\$BUN_INSTALL/bin:\$PATH && bun install -g openclaw"
|
|
log_info "openclaw installed"
|
|
|
|
# 5. Get OpenRouter API key
|
|
echo ""
|
|
if [[ -n "${OPENROUTER_API_KEY:-}" ]]; then
|
|
log_info "Using OpenRouter API key from environment"
|
|
else
|
|
OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180)
|
|
fi
|
|
|
|
# 6. Get model preference
|
|
MODEL_ID=$(get_model_id_interactive "openrouter/auto" "OpenClaw") || exit 1
|
|
|
|
# 7. Inject environment variables via safe temp file upload
|
|
inject_env_vars \
|
|
"OPENROUTER_API_KEY=${OPENROUTER_API_KEY}" \
|
|
"ANTHROPIC_API_KEY=${OPENROUTER_API_KEY}" \
|
|
"ANTHROPIC_BASE_URL=https://openrouter.ai/api"
|
|
|
|
# 8. Setup openclaw config
|
|
log_step "Configuring openclaw..."
|
|
CONFIG_TEMP=$(mktemp)
|
|
chmod 600 "${CONFIG_TEMP}"
|
|
track_temp_file "${CONFIG_TEMP}"
|
|
|
|
printf '{\n "modelId": "%s",\n "provider": "anthropic"\n}\n' "${MODEL_ID}" > "${CONFIG_TEMP}"
|
|
|
|
upload_file "${CONFIG_TEMP}" "/tmp/openclaw_config.json"
|
|
run_server "mkdir -p ~/.config/openclaw && mv /tmp/openclaw_config.json ~/.config/openclaw/config.json"
|
|
|
|
echo ""
|
|
log_info "GitHub Codespace setup completed successfully!"
|
|
log_info "Codespace: $CODESPACE"
|
|
echo ""
|
|
|
|
# 9. Start openclaw gateway in background, then TUI
|
|
log_step "Starting openclaw..."
|
|
log_info "To delete codespace later, run: gh codespace delete --codespace $CODESPACE --force"
|
|
echo ""
|
|
sleep 1
|
|
|
|
# Launch openclaw gateway in background, then tui
|
|
run_server "source ~/.bashrc && export BUN_INSTALL=\$HOME/.bun && export PATH=\$BUN_INSTALL/bin:\$PATH && nohup openclaw gateway > /tmp/openclaw-gateway.log 2>&1 &"
|
|
sleep 2
|
|
run_server "source ~/.bashrc && export BUN_INSTALL=\$HOME/.bun && export PATH=\$BUN_INSTALL/bin:\$PATH && openclaw tui"
|