spawn/render/aider.sh
A cc23013e7c
fix: validate MODEL_ID from environment to prevent command injection (#548)
The get_model_id_interactive function returned MODEL_ID from env vars
without calling validate_model_id, bypassing the allowlist check. Also
migrated 13 legacy scripts from raw safe_read to get_model_id_interactive
which includes validation.

Agent: security-auditor

Co-authored-by: A <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-02-11 15:41:10 -08:00

64 lines
1.6 KiB
Bash
Executable file

#!/bin/bash
set -eo pipefail
# Source common functions - try local file first, fall back to remote
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
if [[ -f "$SCRIPT_DIR/lib/common.sh" ]]; then
source "$SCRIPT_DIR/lib/common.sh"
else
eval "$(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/render/lib/common.sh)"
fi
log_info "Aider on Render"
echo ""
# 1. Ensure Render CLI and API key
ensure_render_cli
ensure_render_api_key
# 2. Create service
SERVER_NAME=$(get_server_name)
create_server "$SERVER_NAME"
# 3. Wait for service readiness
wait_for_cloud_init
# 4. Install Aider
log_step "Installing Aider..."
run_server "pip install aider-chat"
# Verify installation
if ! run_server "command -v aider" >/dev/null 2>&1; then
log_error "Aider installation failed"
exit 1
fi
log_info "Aider installed"
# 5. Get OpenRouter API key
echo ""
if [[ -n "${OPENROUTER_API_KEY:-}" ]]; then
log_info "Using OpenRouter API key from environment"
else
OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180)
fi
# 6. Get model preference
MODEL_ID=$(get_model_id_interactive "openrouter/auto" "Aider") || exit 1
# 7. Inject environment variables
log_step "Setting up environment variables..."
inject_env_vars \
"OPENROUTER_API_KEY=${OPENROUTER_API_KEY}" \
"MODEL_ID=${MODEL_ID}"
echo ""
log_info "Render service setup completed successfully!"
log_info "Service: $RENDER_SERVICE_NAME (ID: $RENDER_SERVICE_ID)"
echo ""
# 8. Start Aider interactively
log_step "Starting Aider..."
sleep 1
clear
interactive_session "source /root/.bashrc && aider --model openrouter/\${MODEL_ID}"