mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-23 12:53:58 +00:00
81bab47a74
Replace vulnerable heredoc patterns across 27 continue.sh scripts with setup_continue_config() helper that uses json_escape() + upload_config_file() to safely handle API keys containing special characters like quotes or braces. Also fix _save_token_to_config() in shared/common.sh which had the same unescaped heredoc vulnerability for local token storage. Relates to #104 Agent: security-auditor Co-authored-by: A <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
70 lines
2.1 KiB
Bash
70 lines
2.1 KiB
Bash
#!/bin/bash
|
|
set -eo pipefail
|
|
|
|
# Source common functions - try local file first, fall back to remote
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)"
|
|
# shellcheck source=ionos/lib/common.sh
|
|
if [[ -f "${SCRIPT_DIR}/lib/common.sh" ]]; then
|
|
source "${SCRIPT_DIR}/lib/common.sh"
|
|
else
|
|
eval "$(curl -fsSL https://raw.githubusercontent.com/OpenRouterTeam/spawn/main/ionos/lib/common.sh)"
|
|
fi
|
|
|
|
log_info "Continue on IONOS Cloud"
|
|
echo ""
|
|
|
|
# 1. Resolve IONOS credentials
|
|
ensure_ionos_credentials
|
|
|
|
# 2. Generate SSH key
|
|
ensure_ssh_key
|
|
|
|
# 3. Get server name and create server
|
|
SERVER_NAME=$(get_server_name)
|
|
create_server "${SERVER_NAME}"
|
|
|
|
# 4. Wait for SSH and cloud-init
|
|
verify_server_connectivity "${IONOS_SERVER_IP}"
|
|
wait_for_cloud_init "${IONOS_SERVER_IP}" 60
|
|
|
|
# 5. Install Continue CLI
|
|
log_warn "Installing Continue CLI..."
|
|
if ! run_server "${IONOS_SERVER_IP}" "command -v cn" >/dev/null 2>&1; then
|
|
run_server "${IONOS_SERVER_IP}" "npm install -g @continuedev/cli"
|
|
fi
|
|
|
|
# Verify installation succeeded
|
|
if ! run_server "${IONOS_SERVER_IP}" "command -v cn &> /dev/null"; then
|
|
log_error "Continue CLI installation verification failed"
|
|
log_error "The 'cn' command is not available on server ${IONOS_SERVER_IP}"
|
|
exit 1
|
|
fi
|
|
log_info "Continue CLI installation verified successfully"
|
|
|
|
# 6. Get OpenRouter API key
|
|
echo ""
|
|
if [[ -n "${OPENROUTER_API_KEY:-}" ]]; then
|
|
log_info "Using OpenRouter API key from environment"
|
|
else
|
|
OPENROUTER_API_KEY=$(get_openrouter_api_key_oauth 5180)
|
|
fi
|
|
|
|
log_warn "Setting up environment variables..."
|
|
inject_env_vars_ssh "${IONOS_SERVER_IP}" upload_file run_server \
|
|
"OPENROUTER_API_KEY=${OPENROUTER_API_KEY}"
|
|
|
|
# 7. Create Continue config file
|
|
setup_continue_config "${OPENROUTER_API_KEY}" \
|
|
"upload_file ${IONOS_SERVER_IP}" \
|
|
"run_server ${IONOS_SERVER_IP}"
|
|
|
|
echo ""
|
|
log_info "IONOS server setup completed successfully!"
|
|
log_info "Server: ${SERVER_NAME} (ID: ${IONOS_SERVER_ID}, IP: ${IONOS_SERVER_IP})"
|
|
echo ""
|
|
|
|
# 8. Start Continue CLI in TUI mode
|
|
log_warn "Starting Continue CLI in TUI mode..."
|
|
sleep 1
|
|
clear
|
|
interactive_session "${IONOS_SERVER_IP}" "source ~/.zshrc && cn"
|