Update setup-hf-config.mjs

setup-hf-config.mjs

@@ -1,10 +1,15 @@
-import fs from "node:fs";
+import fs   from "node:fs";
 import path from "node:path";
 import https from "node:https";
 
 // ============================================================
-// OpenClaw HF Spaces - GitHub Models 支持版
-// 支持通过环境变量 OPENCLAW_GITHUB_MODEL 自由切换免费模型
+// OpenClaw HF Spaces - Production Config Writer
+//
+// PATCH MODE: if openclaw.json already exists and is valid JSON,
+// only update: auth, env.vars, channels, workspace path.
+// ALL user settings from Control UI are preserved.
+//
+// FRESH MODE: if no config exists, write full template.
 // ============================================================
 
 var HOME        = process.env.OPENCLAW_HOME || process.env.HOME || "/home/user";
@@ -15,128 +20,182 @@ var SPACE_HOST  = (process.env.SPACE_HOST || "").trim();
 
 console.log("[setup] Starting… HOME=" + HOME);
 
+function parseList(val) {
+if (!val || !val.trim()) return [];
+return val.split(",").map(function(s) { return s.trim(); }).filter(Boolean);
+}
 function envStr(key) { return (process.env[key] || "").trim(); }
 
 // –– auth –––––––––––––––––––––––––
 var gatewayToken    = envStr("OPENCLAW_GATEWAY_TOKEN");
 var gatewayPassword = envStr("OPENCLAW_GATEWAY_PASSWORD");
 if (!gatewayToken && !gatewayPassword) {
-  console.error("[setup] FATAL: set OPENCLAW_GATEWAY_TOKEN or OPENCLAW_GATEWAY_PASSWORD");
-  process.exit(0);
+console.error("[setup] FATAL: set OPENCLAW_GATEWAY_TOKEN or OPENCLAW_GATEWAY_PASSWORD");
+process.exit(0);
 }
 
-// –– GitHub Models 支持（免费模型大全） –––––––––––––––––––––––––
-var githubModelInput = envStr("OPENCLAW_GITHUB_MODEL") || "gpt-4o-mini";
-
-const githubModelMap = {
-  // OpenAI 系列（免费额度最高优先推荐）
-  "gpt-4o":          "gpt-4o",
-  "gpt-4o-mini":     "gpt-4o-mini",
-  "o1-mini":         "o1-mini",
-  "o1":              "o1",
-
-  // DeepSeek 系列（推理/数学/代码很强）
-  "deepseek-r1":     "deepseek-ai/DeepSeek-R1",
-  "deepseek-v3":     "deepseek-ai/DeepSeek-V3",
-
-  // Meta Llama 系列
-  "llama-4-maverick": "meta-llama/Llama-4-Maverick-17B",
-  "llama-4-scout":    "meta-llama/Llama-4-Scout-17B",
-  "llama-3.3-70b":    "meta-llama/Llama-3.3-70B-Instruct",
-
-  // Google Gemma 系列（轻量且强）
-  "gemma-4-31b":     "google/gemma-4-31B-it",
-  "gemma-4-26b":     "google/gemma-4-26B-A4B-it",
-
-  // Qwen 系列（中文+代码优秀）
-  "qwen3.5-72b":     "Qwen/Qwen3.5-72B-Instruct",
-  "qwen3-coder":     "Qwen/Qwen3-Coder-30B-A3B",
-
-  // 其他常用免费模型
-  "phi-4":           "microsoft/phi-4",
-  "mistral-small":   "mistralai/Mistral-Small-3.1",
-  "glm-4":           "zai-org/GLM-4",
-};
-
-const selectedModel = githubModelMap[githubModelInput] || githubModelInput;
-
-console.log(`[setup] Using GitHub Model: ${selectedModel} (set via OPENCLAW_GITHUB_MODEL = ${githubModelInput})`);
-
-// –– 其他原有逻辑保持不变（auth、env、telegram 等） –––––––––––––––––––––––––
-var EXCLUDE_PREFIXES = ["OPENCLAW_", "SPACE_", "SYSTEM_", "HF_", "NODE_", "PATH", "HOME", "USER", "PWD", "LANG", "LC_", "npm_", "HOSTNAME", "SHELL", "TERM", "SHLVL"];
-var INCLUDE_SUFFIXES = ["_API_KEY", "_SECRET_KEY", "_ACCESS_TOKEN", "_BOT_TOKEN", "_AUTH_TOKEN", "_APP_KEY"];
-
+// –– model ———————————————––
+var defaultModel = envStr("OPENCLAW_HF_DEFAULT_MODEL") || "google/gemini-2.0-flash";
+
+// –– provider keys —————————————–
+var EXCLUDE_PREFIXES = [
+"OPENCLAW_", "SPACE_", "SYSTEM_", "HF_",
+"NODE_", "PATH", "HOME", "USER", "PWD", "LANG", "LC_",
+"npm_", "HOSTNAME", "SHELL", "TERM", "SHLVL"
+];
+var INCLUDE_SUFFIXES = [
+"_API_KEY", "_SECRET_KEY", "_ACCESS_TOKEN",
+"_BOT_TOKEN", "_AUTH_TOKEN", "_APP_KEY"
+];
 function isProviderKey(k) {
-  for (let prefix of EXCLUDE_PREFIXES) if (k.startsWith(prefix)) return false;
-  for (let suffix of INCLUDE_SUFFIXES) if (k.endsWith(suffix)) return true;
-  return false;
+var i;
+for (i = 0; i < EXCLUDE_PREFIXES.length; i++) {
+if (k.indexOf(EXCLUDE_PREFIXES[i]) === 0) return false;
 }
-
-var providerKeys = Object.keys(process.env).filter(k => isProviderKey(k) && envStr(k)).sort();
-
-var trustedProxies = ["10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16", "127.0.0.1"];
-
+for (i = 0; i < INCLUDE_SUFFIXES.length; i++) {
+var s = INCLUDE_SUFFIXES[i];
+if (k.length > s.length && k.indexOf(s) === k.length - s.length) return true;
+}
+return false;
+}
+var providerKeys = Object.keys(process.env).filter(function(k) {
+return isProviderKey(k) && (process.env[k] || "").trim();
+}).sort();
+
+console.log("[setup] Provider keys (" + providerKeys.length + "): " + providerKeys.join(", "));
+
+// –– trusted proxies —————————————
+var envProxies     = parseList(envStr("OPENCLAW_GATEWAY_TRUSTED_PROXIES"));
+var trustedProxies = envProxies.length > 0 ? envProxies : [
+"10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16",
+"10.16.0.0/12",   "10.20.0.0/12",
+"10.16.4.123",    "10.16.7.92",   "10.16.18.232",
+"10.16.34.155",   "10.16.43.133", "10.16.1.206",
+"10.16.37.110",   "10.16.43.246",
+"10.20.1.9",      "10.20.1.222",
+"10.20.26.157",   "10.20.31.87",
+"10.20.0.1",      "172.17.0.1",   "127.0.0.1"
+];
+
+// –– helpers ———————————————–
 function buildAuth() {
-  return gatewayToken ? { mode: "token", token: gatewayToken } : { mode: "password", password: gatewayPassword };
+return gatewayToken
+? { mode: "token",    token:    gatewayToken    }
+: { mode: "password", password: gatewayPassword };
 }
-
 function buildEnvVars() {
-  var vars = {};
-  providerKeys.forEach(pk => { vars[pk] = envStr(pk); });
-  return vars;
+var vars = {};
+providerKeys.forEach(function(pk) { vars[pk] = (process.env[pk] || "").trim(); });
+return vars;
 }
-
 function buildTelegramChannel(token) {
-  return { telegram: { enabled: true, accounts: { main: { botToken: token, apiRoot: "https://api.telegram.org" } } } };
+return {
+telegram: {
+enabled:  true,
+accounts: { main: { botToken: token, apiRoot: "https://api.telegram.org" } }
+}
+};
+}
+
+function tgRequest(token, method, body) {
+return new Promise(function(resolve) {
+var data = JSON.stringify(body || {});
+var req  = https.request({
+hostname: "api.telegram.org",
+path:     "/bot" + token + "/" + method,
+method:   "POST",
+headers:  { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(data) }
+}, function(res) {
+var buf = "";
+res.on("data", function(c) { buf += c; });
+res.on("end",  function() { try { resolve(JSON.parse(buf)); } catch (e) { resolve(null); } });
+});
+req.on("error", function() { resolve(null); });
+req.setTimeout(8000, function() { req.destroy(); resolve(null); });
+req.write(data);
+req.end();
+});
 }
 
 // –– main –––––––––––––––––––––––––
 (async function() {
-  fs.mkdirSync(STATE_DIR, { recursive: true });
-  fs.mkdirSync(WORKSPACE, { recursive: true });
-  fs.mkdirSync(path.join(WORKSPACE, "memory"), { recursive: true });
-
-  var token = envStr("TELEGRAM_BOT_TOKEN");
-
-  if (fs.existsSync(CONFIG_PATH)) {
-    var raw = fs.readFileSync(CONFIG_PATH, "utf-8").trim();
-    var parsed = null;
-    try { parsed = JSON.parse(raw); } catch (e) {}
-
-    if (parsed) {
-      parsed.gateway = parsed.gateway || {};
-      parsed.gateway.auth = buildAuth();
-      parsed.gateway.trustedProxies = trustedProxies;
-      parsed.agents = parsed.agents || {};
-      parsed.agents.defaults = parsed.agents.defaults || {};
-      parsed.agents.defaults.model = selectedModel;
-      parsed.agents.defaults.workspace = WORKSPACE;
-      parsed.env = parsed.env || {};
-      parsed.env.vars = buildEnvVars();
-      if (token) parsed.channels = buildTelegramChannel(token);
-
-      fs.copyFileSync(CONFIG_PATH, CONFIG_PATH + ".bak");
-      fs.writeFileSync(CONFIG_PATH, JSON.stringify(parsed, null, 2), "utf-8");
-      console.log(`[setup] Patched with model: ${selectedModel}`);
-      return;
-    }
+fs.mkdirSync(STATE_DIR, { recursive: true });
+fs.mkdirSync(WORKSPACE,  { recursive: true });
+fs.mkdirSync(path.join(WORKSPACE, "memory"), { recursive: true });
+
+var token = envStr("TELEGRAM_BOT_TOKEN");
+
+// Register webhook if possible
+if (token && SPACE_HOST) {
+var url = "https://" + SPACE_HOST + "/tg-webhook";
+var r = await tgRequest(token, "setWebhook", {
+url: url, drop_pending_updates: true, max_connections: 10
+});
+if (r && r.ok) {
+console.log("[setup] Telegram: webhook registered -> " + url);
+} else {
+console.log("[setup] Telegram: webhook failed. Open in browser:");
+console.log("  https://api.telegram.org/bot" + token +
+"/setWebhook?url=" + url + "&drop_pending_updates=true");
+}
+} else if (!token) {
+console.log("[setup] Telegram: disabled (no TELEGRAM_BOT_TOKEN)");
+}
+
+// –– PATCH MODE: existing valid config found ––
+if (fs.existsSync(CONFIG_PATH)) {
+var raw    = fs.readFileSync(CONFIG_PATH, "utf-8").trim();
+var parsed = null;
+try { parsed = JSON.parse(raw); } catch (e) { /* fall through to fresh write */ }
+
+if (parsed) {
+  parsed.gateway                   = parsed.gateway         || {};
+  parsed.gateway.auth              = buildAuth();
+  if (!parsed.gateway.trustedProxies || parsed.gateway.trustedProxies.length < 5) {
+    parsed.gateway.trustedProxies  = trustedProxies;
   }
+  parsed.agents                    = parsed.agents          || {};
+  parsed.agents.defaults           = parsed.agents.defaults || {};
+  parsed.agents.defaults.workspace = WORKSPACE;
+  parsed.env                       = parsed.env             || {};
+  parsed.env.vars                  = buildEnvVars();
+  if (token) parsed.channels       = buildTelegramChannel(token);
+
+  fs.copyFileSync(CONFIG_PATH, CONFIG_PATH + ".bak");
+  fs.writeFileSync(CONFIG_PATH, JSON.stringify(parsed, null, 2), "utf-8");
+  console.log("[setup] Patched existing config (user settings preserved)");
+  console.log("[setup]   env.vars  = " + providerKeys.length);
+  console.log("[setup]   workspace = " + WORKSPACE);
+  return;
+}
+}
 
-  // Fresh mode
-  var config = {
-    gateway: {
-      auth: buildAuth(),
-      controlUi: { allowInsecureAuth: true, allowedOrigins: ["*"], dangerouslyDisableDeviceAuth: true, dangerouslyAllowHostHeaderOriginFallback: true },
-      trustedProxies: trustedProxies
-    },
-    agents: { defaults: { model: selectedModel, workspace: WORKSPACE } },
-    env: { vars: buildEnvVars() }
-  };
-  if (token) config.channels = buildTelegramChannel(token);
-
-  fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2), "utf-8");
-  console.log(`[setup] Fresh config created with model: ${selectedModel}`);
-})().catch(e => {
-  console.error("[setup] Fatal: " + e.message);
-  process.exit(0);
+// –– FRESH MODE: no config or invalid config ––
+console.log("[setup] Writing fresh config template");
+var config = {
+gateway: {
+auth:           buildAuth(),
+controlUi: {
+allowInsecureAuth:                        true,
+allowedOrigins:                           ["*"],
+dangerouslyDisableDeviceAuth:             true,
+dangerouslyAllowHostHeaderOriginFallback: true
+},
+trustedProxies: trustedProxies
+},
+agents: { defaults: { model: defaultModel, workspace: WORKSPACE } },
+env:    { vars: buildEnvVars() }
+};
+if (token) config.channels = buildTelegramChannel(token);
+
+fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2), "utf-8");
+console.log("[setup] Done.");
+console.log("[setup]   auth      = " + (gatewayToken ? "token" : "password"));
+console.log("[setup]   model     = " + defaultModel);
+console.log("[setup]   workspace = " + WORKSPACE);
+console.log("[setup]   proxies   = " + trustedProxies.length);
+console.log("[setup]   env.vars  = " + providerKeys.length);
+})().catch(function(e) {
+console.error("[setup] Fatal: " + e.message);
+process.exit(0);
 });