mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-06-01 14:30:27 +00:00
6ac59e6bb3
Three issues broke the OAuth callback server on macOS: 1. echo -e doesn't work in bash 3.x — \r\n appears as literal text in the HTTP response, browser gets malformed headers. Fix: pre-write response with printf to a file before the subshell. 2. local variables inside ( ... ) & subshell — undefined behavior in bash 3.x since subshells aren't function scope. Fix: use plain variables in subshells. 3. ((elapsed++)) when elapsed=0 evaluates to falsy — set -e kills the script on the first iteration of the timeout loop. Fix: use elapsed=$((elapsed + 1)) instead. Also simplified nc_listen detection to only check for BusyBox (the -p flag check could misfire on macOS nc). Applied to all 10 lib/common.sh files. Co-authored-by: Sprite <noreply@sprite.dev> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
233 lines
9.4 KiB
Bash
233 lines
9.4 KiB
Bash
#!/bin/bash
|
|
# Common bash functions for E2B sandbox spawn scripts
|
|
# Uses E2B CLI (e2b) — https://e2b.dev
|
|
# Sandboxes are lightweight VMs that start in ~150ms
|
|
# No SSH — uses `e2b sandbox exec` for commands
|
|
|
|
# ============================================================
|
|
# Provider-agnostic functions
|
|
# ============================================================
|
|
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
NC='\033[0m'
|
|
|
|
log_info() { echo -e "${GREEN}$1${NC}" >&2; }
|
|
log_warn() { echo -e "${YELLOW}$1${NC}" >&2; }
|
|
log_error() { echo -e "${RED}$1${NC}" >&2; }
|
|
|
|
safe_read() {
|
|
local prompt="$1" result=""
|
|
if [[ -t 0 ]]; then read -p "$prompt" result
|
|
elif echo -n "" > /dev/tty 2>/dev/null; then read -p "$prompt" result < /dev/tty
|
|
else log_error "Cannot read input: no TTY available"; return 1; fi
|
|
echo "$result"
|
|
}
|
|
|
|
nc_listen() {
|
|
local port=$1; shift
|
|
if nc --help 2>&1 | grep -q "BusyBox\|busybox"; then
|
|
nc -l -p "$port" "$@"
|
|
else nc -l "$port" "$@"; fi
|
|
}
|
|
|
|
open_browser() {
|
|
local url=$1
|
|
if command -v termux-open-url &>/dev/null; then termux-open-url "$url" </dev/null
|
|
elif command -v open &>/dev/null; then open "$url" </dev/null
|
|
elif command -v xdg-open &>/dev/null; then xdg-open "$url" </dev/null
|
|
else log_warn "Please open: ${url}"; fi
|
|
}
|
|
|
|
get_openrouter_api_key_manual() {
|
|
echo ""; log_warn "Manual API Key Entry"
|
|
echo -e "${YELLOW}Get your API key from: https://openrouter.ai/settings/keys${NC}"; echo ""
|
|
local api_key=""
|
|
while [[ -z "$api_key" ]]; do
|
|
api_key=$(safe_read "Enter your OpenRouter API key: ") || return 1
|
|
if [[ -z "$api_key" ]]; then log_error "API key cannot be empty"
|
|
elif [[ ! "$api_key" =~ ^sk-or-v1-[a-f0-9]{64}$ ]]; then
|
|
log_warn "Warning: API key format doesn't match expected pattern (sk-or-v1-...)"
|
|
local confirm=$(safe_read "Use this key anyway? (y/N): ") || return 1
|
|
if [[ "$confirm" =~ ^[Yy]$ ]]; then break; else api_key=""; fi
|
|
fi
|
|
done
|
|
log_info "API key accepted!"; echo "$api_key"
|
|
}
|
|
|
|
try_oauth_flow() {
|
|
local callback_port=${1:-5180}
|
|
log_warn "Attempting OAuth authentication..."
|
|
if ! command -v nc &>/dev/null; then log_warn "netcat (nc) not found"; return 1; fi
|
|
local callback_url="http://localhost:${callback_port}/callback"
|
|
local auth_url="https://openrouter.ai/auth?callback_url=${callback_url}"
|
|
local oauth_dir=$(mktemp -d) code_file="$oauth_dir/code"
|
|
log_warn "Starting local OAuth server on port ${callback_port}..."
|
|
|
|
# Write the HTTP response to a file (using printf for macOS bash 3.x compat)
|
|
local response_tpl="$oauth_dir/response.http"
|
|
printf 'HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n<html><head><style>body{font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#1a1a2e}.card{text-align:center;color:#fff}h1{color:#00d4aa}p{color:#ffffffcc}</style></head><body><div class="card"><h1>Authentication Successful!</h1><p>You can close this tab</p></div><script>setTimeout(function(){try{window.close()}catch(e){}},3000)</script></body></html>' > "$response_tpl"
|
|
|
|
# Background listener
|
|
(
|
|
while true; do
|
|
request=$(nc_listen "$callback_port" < "$response_tpl" 2>/dev/null | head -1) || break
|
|
|
|
case "$request" in
|
|
*"/callback?code="*)
|
|
echo "$request" | sed -n 's/.*code=\([^ &]*\).*/\1/p' > "$code_file"
|
|
break
|
|
;;
|
|
esac
|
|
done
|
|
) </dev/null &
|
|
local server_pid=$!; sleep 1
|
|
if ! kill -0 $server_pid 2>/dev/null; then log_warn "Failed to start OAuth server"; rm -rf "$oauth_dir"; return 1; fi
|
|
log_warn "Opening browser to authenticate with OpenRouter..."; open_browser "$auth_url"
|
|
local timeout=120 elapsed=0
|
|
while [[ ! -f "$code_file" ]] && [[ $elapsed -lt $timeout ]]; do sleep 1; elapsed=$((elapsed + 1)); done
|
|
kill $server_pid 2>/dev/null || true; wait $server_pid 2>/dev/null || true
|
|
if [[ ! -f "$code_file" ]]; then log_warn "OAuth timeout"; rm -rf "$oauth_dir"; return 1; fi
|
|
local oauth_code=$(cat "$code_file"); rm -rf "$oauth_dir"
|
|
log_warn "Exchanging OAuth code for API key..."
|
|
local key_response=$(curl -s -X POST "https://openrouter.ai/api/v1/auth/keys" \
|
|
-H "Content-Type: application/json" -d "{\"code\": \"$oauth_code\"}")
|
|
local api_key=$(echo "$key_response" | grep -o '"key":"[^"]*"' | sed 's/"key":"//;s/"$//')
|
|
if [[ -z "$api_key" ]]; then log_error "Failed to exchange OAuth code: ${key_response}"; return 1; fi
|
|
log_info "Successfully obtained OpenRouter API key via OAuth!"; echo "$api_key"
|
|
}
|
|
|
|
get_openrouter_api_key_oauth() {
|
|
local callback_port=${1:-5180}
|
|
local api_key=$(try_oauth_flow "$callback_port")
|
|
if [[ -n "$api_key" ]]; then echo "$api_key"; return 0; fi
|
|
echo ""; log_warn "OAuth authentication failed or unavailable"
|
|
log_warn "You can enter your API key manually instead"; echo ""
|
|
local manual_choice=$(safe_read "Would you like to enter your API key manually? (Y/n): ") || {
|
|
log_error "Cannot prompt for manual entry in non-interactive mode"
|
|
log_warn "Set OPENROUTER_API_KEY environment variable for non-interactive usage"; return 1
|
|
}
|
|
if [[ ! "$manual_choice" =~ ^[Nn]$ ]]; then
|
|
api_key=$(get_openrouter_api_key_manual); echo "$api_key"; return 0
|
|
else log_error "Authentication cancelled by user"; return 1; fi
|
|
}
|
|
|
|
# ============================================================
|
|
# E2B specific functions
|
|
# ============================================================
|
|
|
|
ensure_e2b_cli() {
|
|
if ! command -v e2b &>/dev/null; then
|
|
log_warn "Installing E2B CLI..."
|
|
npm install -g @e2b/cli 2>/dev/null || {
|
|
log_error "Failed to install E2B CLI. Install manually: npm install -g @e2b/cli"
|
|
return 1
|
|
}
|
|
fi
|
|
log_info "E2B CLI available"
|
|
}
|
|
|
|
ensure_e2b_token() {
|
|
if [[ -n "$E2B_API_KEY" ]]; then
|
|
log_info "Using E2B API key from environment"; return 0
|
|
fi
|
|
local config_dir="$HOME/.config/spawn" config_file="$config_dir/e2b.json"
|
|
if [[ -f "$config_file" ]]; then
|
|
local saved_key=$(python3 -c "import json; print(json.load(open('$config_file')).get('api_key',''))" 2>/dev/null)
|
|
if [[ -n "$saved_key" ]]; then
|
|
export E2B_API_KEY="$saved_key"
|
|
log_info "Using E2B API key from $config_file"; return 0
|
|
fi
|
|
fi
|
|
echo ""; log_warn "E2B API Key Required"
|
|
echo -e "${YELLOW}Get your API key from: https://e2b.dev/dashboard${NC}"; echo ""
|
|
local api_key=$(safe_read "Enter your E2B API key: ") || return 1
|
|
if [[ -z "$api_key" ]]; then log_error "API key is required"; return 1; fi
|
|
export E2B_API_KEY="$api_key"
|
|
mkdir -p "$config_dir"
|
|
cat > "$config_file" << EOF
|
|
{
|
|
"api_key": "$api_key"
|
|
}
|
|
EOF
|
|
chmod 600 "$config_file"
|
|
log_info "API key saved to $config_file"
|
|
}
|
|
|
|
get_server_name() {
|
|
if [[ -n "$E2B_SANDBOX_NAME" ]]; then
|
|
log_info "Using sandbox name from environment: $E2B_SANDBOX_NAME"
|
|
echo "$E2B_SANDBOX_NAME"; return 0
|
|
fi
|
|
local name=$(safe_read "Enter sandbox name: ")
|
|
if [[ -z "$name" ]]; then
|
|
log_error "Sandbox name is required"
|
|
log_warn "Set E2B_SANDBOX_NAME environment variable for non-interactive usage"; return 1
|
|
fi
|
|
echo "$name"
|
|
}
|
|
|
|
create_server() {
|
|
local name="$1"
|
|
local template="${E2B_TEMPLATE:-base}"
|
|
|
|
log_warn "Creating E2B sandbox '$name' (template: $template)..."
|
|
|
|
# Create sandbox and capture ID
|
|
local output=$(e2b sandbox create --template "$template" --name "$name" 2>&1)
|
|
E2B_SANDBOX_ID=$(echo "$output" | grep -oE '[a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12}' | head -1)
|
|
|
|
if [[ -z "$E2B_SANDBOX_ID" ]]; then
|
|
# Try alternate parsing
|
|
E2B_SANDBOX_ID=$(echo "$output" | grep -oE 'sandbox_[a-zA-Z0-9]+' | head -1)
|
|
fi
|
|
|
|
if [[ -z "$E2B_SANDBOX_ID" ]]; then
|
|
log_error "Failed to create sandbox: $output"
|
|
return 1
|
|
fi
|
|
|
|
export E2B_SANDBOX_ID
|
|
log_info "Sandbox created: ID=$E2B_SANDBOX_ID"
|
|
}
|
|
|
|
wait_for_cloud_init() {
|
|
log_warn "Installing base tools in sandbox..."
|
|
run_server "apt-get update -y && apt-get install -y curl unzip git zsh" >/dev/null 2>&1 || true
|
|
run_server "curl -fsSL https://bun.sh/install | bash" >/dev/null 2>&1 || true
|
|
run_server "curl -fsSL https://claude.ai/install.sh | bash" >/dev/null 2>&1 || true
|
|
run_server 'echo "export PATH=\"\$HOME/.claude/local/bin:\$HOME/.bun/bin:\$PATH\"" >> ~/.bashrc' >/dev/null 2>&1 || true
|
|
run_server 'echo "export PATH=\"\$HOME/.claude/local/bin:\$HOME/.bun/bin:\$PATH\"" >> ~/.zshrc' >/dev/null 2>&1 || true
|
|
log_info "Base tools installed"
|
|
}
|
|
|
|
# E2B uses sandbox exec instead of SSH
|
|
run_server() {
|
|
local cmd="$1"
|
|
e2b sandbox exec "$E2B_SANDBOX_ID" -- bash -c "$cmd"
|
|
}
|
|
|
|
upload_file() {
|
|
local local_path="$1"
|
|
local remote_path="$2"
|
|
# Upload via base64 encoding through exec
|
|
local content=$(base64 -w0 "$local_path" 2>/dev/null || base64 "$local_path")
|
|
e2b sandbox exec "$E2B_SANDBOX_ID" -- bash -c "echo '$content' | base64 -d > '$remote_path'"
|
|
}
|
|
|
|
interactive_session() {
|
|
local cmd="$1"
|
|
e2b sandbox exec "$E2B_SANDBOX_ID" -- bash -c "$cmd"
|
|
}
|
|
|
|
destroy_server() {
|
|
local sandbox_id="${1:-$E2B_SANDBOX_ID}"
|
|
log_warn "Destroying sandbox $sandbox_id..."
|
|
e2b sandbox kill "$sandbox_id" 2>/dev/null || true
|
|
log_info "Sandbox destroyed"
|
|
}
|
|
|
|
list_servers() {
|
|
e2b sandbox list
|
|
}
|