mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-05 23:50:48 +00:00
local/continue.sh used a double-quoted heredoc to write the API key directly into ~/.continue/config.json without escaping. If the key contained double quotes, it could produce invalid JSON or inject additional config fields. Replace inline heredoc with the shared setup_continue_config helper which uses json_escape. Agent: security-auditor Co-authored-by: A <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
75 lines
2.1 KiB
Bash
75 lines
2.1 KiB
Bash
#!/bin/bash
|
|
set -eo pipefail
|
|
|
|
# Source common functions - try local file first, fall back to remote
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
|
|
if [[ -f "${SCRIPT_DIR}/lib/common.sh" ]]; then
|
|
source "${SCRIPT_DIR}/lib/common.sh"
|
|
else
|
|
eval "$(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/local/lib/common.sh)"
|
|
fi
|
|
|
|
log_info "Continue on local machine"
|
|
echo ""
|
|
|
|
# 1. Ensure local prerequisites
|
|
ensure_local_ready
|
|
|
|
# 2. Install Node.js if not already installed
|
|
if ! command -v node &>/dev/null; then
|
|
log_error "Node.js is required but not installed"
|
|
log_error "Please install Node.js from https://nodejs.org/"
|
|
exit 1
|
|
fi
|
|
|
|
# 3. Install Continue if not already installed
|
|
if command -v cn &>/dev/null; then
|
|
log_info "Continue already installed"
|
|
else
|
|
log_step "Installing Continue..."
|
|
npm install -g @continuedev/cli
|
|
fi
|
|
|
|
# Verify installation
|
|
if ! command -v cn &>/dev/null; then
|
|
log_error "Continue installation failed"
|
|
log_error "The 'cn' command is not available"
|
|
log_error "Try installing manually: npm install -g @continuedev/cli"
|
|
exit 1
|
|
fi
|
|
log_info "Continue installation verified"
|
|
|
|
# 4. Get OpenRouter API key
|
|
echo ""
|
|
if [[ -n "${OPENROUTER_API_KEY:-}" ]]; then
|
|
log_info "Using OpenRouter API key from environment"
|
|
else
|
|
OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180)
|
|
fi
|
|
|
|
# 5. Inject environment variables
|
|
log_step "Appending environment variables to ~/.zshrc..."
|
|
inject_env_vars_local upload_file run_server \
|
|
"OPENROUTER_API_KEY=${OPENROUTER_API_KEY}"
|
|
|
|
# 6. Configure Continue (uses json_escape to prevent injection)
|
|
setup_continue_config "${OPENROUTER_API_KEY}" \
|
|
"upload_file" \
|
|
"run_server"
|
|
|
|
echo ""
|
|
log_info "Local setup completed successfully!"
|
|
echo ""
|
|
|
|
# 7. Start Continue
|
|
if [[ -n "${SPAWN_PROMPT:-}" ]]; then
|
|
log_step "Executing Continue with prompt..."
|
|
source ~/.zshrc 2>/dev/null || true
|
|
cn -p "${SPAWN_PROMPT}"
|
|
else
|
|
log_step "Starting Continue..."
|
|
sleep 1
|
|
clear 2>/dev/null || true
|
|
source ~/.zshrc 2>/dev/null || true
|
|
exec cn
|
|
fi
|