Update start-openclaw.sh

start-openclaw.sh

@@ -1,14 +1,6 @@
 #!/bin/bash
 
-# ─────────────────────────────────────────────────────────────
-# OpenClaw Startup Script - FREE MODELS ONLY
-# All API keys are read from environment variables (HF Secrets)
-# No keys are hardcoded or written to logs
-# ─────────────────────────────────────────────────────────────
-
-set -e
-
-echo "===== OpenClaw Startup (Free Models Only) ====="
+echo "===== OpenClaw Startup ====="
 
 # ── TRAP: Backup saat container mati ─────────────────────────
 trap 'echo ">>> [TRAP] Container stopping — final backup..."; python3 /app/sync.py backup; echo ">>> [TRAP] Done."' EXIT SIGTERM SIGINT
@@ -23,143 +15,127 @@ mkdir -p /root/.openclaw/workspace/memory
 echo ">>> Directories ready."
 
 # ── 2. Restore backup ─────────────────────────────────────────
-python3 /app/sync.py restore
-echo ">>> Restore done."
+if [ -n "$HF_DATASET" ] && [ -n "$HF_TOKEN" ]; then
+    python3 /app/sync.py restore
+    echo ">>> Restore done."
+else
+    echo ">>> No HF_DATASET or HF_TOKEN - skipping restore"
+fi
 
-# ── 3. Fix DNS & Hosts (Telegram Fix) ────────────────────────
+# ── 3. Fix DNS for Telegram ────────────────────────────────────
 echo "nameserver 1.1.1.1" >> /etc/resolv.conf
 echo "nameserver 8.8.8.8" >> /etc/resolv.conf
 echo "149.154.166.110 api.telegram.org" >> /etc/hosts
-echo ">>> DNS fixed for Telegram."
-
-# ── 4. Chromium for Browser Tool ──────────────────────────────
-export PLAYWRIGHT_BROWSERS_PATH=/root/.openclaw/browsers
-CHROMIUM_PATH=$(find /root/.openclaw/browsers -name "chrome" -type f 2>/dev/null | head -1)
-
-if [ -z "$CHROMIUM_PATH" ]; then
-  echo ">>> Installing Chromium..."
-  OPENCLAW_NM=$(npm root -g 2>/dev/null)/openclaw/node_modules/playwright-core/cli.js
-  if timeout 180 node "$OPENCLAW_NM" install chromium 2>/dev/null; then
-    echo ">>> Chromium installed"
-  else
-    echo ">>> WARN: Chromium install skipped (non-critical)"
-  fi
-  CHROMIUM_PATH=$(find /root/.openclaw/browsers -name "chrome" -type f 2>/dev/null | head -1)
-fi
-
-# ── 5. Build FREE MODELS PROVIDERS (No API keys in config - use env substitution) ──
-# Note: OpenClaw will read ${VAR_NAME} from environment at runtime
-# This means API keys NEVER appear in the generated config file
+echo ">>> DNS fixed."
 
-# Start building providers JSON
+# ── 4. Build providers JSON (Pure bash - no jq required) ──────
 PROVIDERS_JSON="{}"
+PRIMARY_MODEL=""
 
-# OpenCode Zen (Free Models) - Primary recommendation
+# OpenCode Zen
 if [ -n "$OPENCODE_API_KEY" ]; then
-    PROVIDERS_JSON=$(echo "$PROVIDERS_JSON" | jq '.opencode = {
-        "baseUrl": "https://opencode.ai/zen/v1",
-        "apiKey": "${OPENCODE_API_KEY}",
-        "api": "openai-completions",
-        "models": [
-            {"id": "minimax-m2.5-free", "name": "⭐ MiniMax M2.5 Free", "contextWindow": 200000},
-            {"id": "kimi-k2.5-free", "name": "⭐ Kimi K2.5 Free", "contextWindow": 256000},
-            {"id": "glm-5-free", "name": "GLM-5 Free", "contextWindow": 128000}
-        ]
-    }')
+    PROVIDERS_JSON='{
+  "opencode": {
+    "baseUrl": "https://opencode.ai/zen/v1",
+    "apiKey": "'"$OPENCODE_API_KEY"'",
+    "api": "openai-completions",
+    "models": [
+      {"id": "minimax-m2.5-free", "name": "MiniMax M2.5 Free", "contextWindow": 200000},
+      {"id": "kimi-k2.5-free", "name": "Kimi K2.5 Free", "contextWindow": 256000}
+    ]
+  }
+}'
     PRIMARY_MODEL="opencode/minimax-m2.5-free"
-    echo ">>> OpenCode Zen configured (FREE models)"
+    echo ">>> OpenCode Zen configured"
 fi
 
-# NVIDIA NIM (Free tier - requires API key from build.nvidia.com)
+# NVIDIA NIM
 if [ -n "$NVIDIA_NIM_KEY" ]; then
-    PROVIDERS_JSON=$(echo "$PROVIDERS_JSON" | jq '.["nvidia-nim"] = {
-        "baseUrl": "https://integrate.api.nvidia.com/v1",
-        "apiKey": "${NVIDIA_NIM_KEY}",
-        "api": "openai-completions",
-        "models": [
-            {"id": "nvidia/Kimi-N-Agent-Preview-1217", "name": "Kimi N (NVIDIA NIM)", "contextWindow": 128000},
-            {"id": "nvidia/nemotron-3-super-120b", "name": "Nemotron 3 Super", "contextWindow": 128000}
-        ]
-    }')
+    if [ "$PROVIDERS_JSON" != "{}" ]; then
+        PROVIDERS_JSON=$(echo "$PROVIDERS_JSON" | sed 's/}$//')
+        PROVIDERS_JSON="${PROVIDERS_JSON},
+  \"nvidia-nim\": {
+    \"baseUrl\": \"https://integrate.api.nvidia.com/v1\",
+    \"apiKey\": \"$NVIDIA_NIM_KEY\",
+    \"api\": \"openai-completions\",
+    \"models\": [
+      {\"id\": \"nvidia/Kimi-N-Agent-Preview-1217\", \"name\": \"Kimi N (NVIDIA NIM)\"}
+    ]
+  }
+}"
+    else
+        PROVIDERS_JSON='{
+  "nvidia-nim": {
+    "baseUrl": "https://integrate.api.nvidia.com/v1",
+    "apiKey": "'"$NVIDIA_NIM_KEY"'",
+    "api": "openai-completions",
+    "models": [
+      {"id": "nvidia/Kimi-N-Agent-Preview-1217", "name": "Kimi N (NVIDIA NIM)"}
+    ]
+  }
+}'
+    fi
     if [ -z "$PRIMARY_MODEL" ]; then
         PRIMARY_MODEL="nvidia-nim/nvidia/Kimi-N-Agent-Preview-1217"
     fi
-    echo ">>> NVIDIA NIM configured (FREE tier)"
+    echo ">>> NVIDIA NIM configured"
 fi
 
-# Groq (Free tier - 30 requests/minute)
+# Groq
 if [ -n "$GROQ_API_KEY" ]; then
-    PROVIDERS_JSON=$(echo "$PROVIDERS_JSON" | jq '.groq = {
-        "baseUrl": "https://api.groq.com/openai/v1",
-        "apiKey": "${GROQ_API_KEY}",
-        "api": "openai-completions",
-        "models": [
-            {"id": "llama-3.1-70b-versatile", "name": "Llama 3.1 70B (Groq)", "contextWindow": 128000},
-            {"id": "llama-3.1-8b-instant", "name": "Llama 3.1 8B (Groq)", "contextWindow": 128000},
-            {"id": "mixtral-8x7b-32768", "name": "Mixtral 8x7B (Groq)", "contextWindow": 32768}
-        ]
-    }')
-    if [ -z "$PRIMARY_MODEL" ]; then
-        PRIMARY_MODEL="groq/llama-3.1-70b-versatile"
-    fi
-    echo ">>> Groq configured (FREE tier - 30 req/min)"
-fi
-
-# OpenRouter (Free models via $1 free credit)
-if [ -n "$OPENROUTER_API_KEY" ]; then
-    PROVIDERS_JSON=$(echo "$PROVIDERS_JSON" | jq '.openrouter = {
-        "baseUrl": "https://openrouter.ai/api/v1",
-        "apiKey": "${OPENROUTER_API_KEY}",
-        "api": "openai-completions",
-        "models": [
-            {"id": "meta-llama/llama-3.3-70b-instruct:free", "name": "Llama 3.3 70B (Free)", "contextWindow": 128000},
-            {"id": "google/gemma-3-27b-it:free", "name": "Gemma 3 27B (Free)", "contextWindow": 8000},
-            {"id": "mistralai/mistral-7b-instruct:free", "name": "Mistral 7B (Free)", "contextWindow": 32768}
-        ]
-    }')
-    if [ -z "$PRIMARY_MODEL" ]; then
-        PRIMARY_MODEL="openrouter/meta-llama/llama-3.3-70b-instruct:free"
+    if [ "$PROVIDERS_JSON" != "{}" ]; then
+        PROVIDERS_JSON=$(echo "$PROVIDERS_JSON" | sed 's/}$//')
+        PROVIDERS_JSON="${PROVIDERS_JSON},
+  \"groq\": {
+    \"baseUrl\": \"https://api.groq.com/openai/v1\",
+    \"apiKey\": \"$GROQ_API_KEY\",
+    \"api\": \"openai-completions\",
+    \"models\": [
+      {\"id\": \"llama-3.1-70b-versatile\", \"name\": \"Llama 3.1 70B (Groq)\"}
+    ]
+  }
+}"
+    else
+        PROVIDERS_JSON='{
+  "groq": {
+    "baseUrl": "https://api.groq.com/openai/v1",
+    "apiKey": "'"$GROQ_API_KEY"'",
+    "api": "openai-completions",
+    "models": [
+      {"id": "llama-3.1-70b-versatile", "name": "Llama 3.1 70B (Groq)"}
+    ]
+  }
+}'
     fi
-    echo ">>> OpenRouter configured (FREE models)"
-fi
-
-# Google Gemini (Free tier - 60 requests/minute)
-if [ -n "$GEMINI_API_KEY" ]; then
-    PROVIDERS_JSON=$(echo "$PROVIDERS_JSON" | jq '.google = {
-        "baseUrl": "https://generativelanguage.googleapis.com/v1beta/openai",
-        "apiKey": "${GEMINI_API_KEY}",
-        "api": "openai-completions",
-        "models": [
-            {"id": "gemini-2.0-flash", "name": "Gemini 2.0 Flash (Free)", "contextWindow": 1048576},
-            {"id": "gemini-1.5-flash", "name": "Gemini 1.5 Flash (Free)", "contextWindow": 1048576}
-        ]
-    }')
     if [ -z "$PRIMARY_MODEL" ]; then
-        PRIMARY_MODEL="google/gemini-2.0-flash"
+        PRIMARY_MODEL="groq/llama-3.1-70b-versatile"
     fi
-    echo ">>> Google Gemini configured (FREE tier - 60 req/min)"
+    echo ">>> Groq configured"
 fi
 
-# Fallback to Kilo AI (truly anonymous, no API key needed)
+# Fallback to Kilo (no API key needed)
 if [ -z "$PRIMARY_MODEL" ]; then
-    PROVIDERS_JSON=$(echo "$PROVIDERS_JSON" | jq '.kilo_gateway = {
-        "baseUrl": "https://api.kilo.ai/api/gateway",
-        "apiKey": "anonymous",
-        "api": "openai-completions",
-        "models": [
-            {"id": "kilo-auto/free", "name": "Kilo Auto Free (No API Key)", "contextWindow": 128000}
-        ]
-    }')
-    PRIMARY_MODEL="kilo_gateway/kilo-auto/free"
-    echo ">>> Kilo AI configured (FALLBACK - no API key needed)"
+    PROVIDERS_JSON='{
+  "kilo": {
+    "baseUrl": "https://api.kilo.ai/api/gateway",
+    "apiKey": "anonymous",
+    "api": "openai-completions",
+    "models": [
+      {"id": "kilo-auto/free", "name": "Kilo Auto Free (No API Key Needed)"}
+    ]
+  }
+}'
+    PRIMARY_MODEL="kilo/kilo-auto/free"
+    echo ">>> Using Kilo AI fallback (no API key needed)"
 fi
 
-# Set vision model (use same as primary or a specific vision model)
-VISION_MODEL="${VISION_MODEL:-$PRIMARY_MODEL}"
+# Close JSON if it was left open
+if [[ ! "$PROVIDERS_JSON" =~ }$ ]]; then
+    PROVIDERS_JSON="${PROVIDERS_JSON}
+}"
+fi
 
-# ── 6. Generate openclaw.json (NO API KEYS IN FILE - uses ${VAR} substitution) ──
-# CRITICAL: API keys are stored as ${ENV_VAR} not actual values
-# OpenClaw will resolve these at runtime from environment variables
+# ── 5. Generate openclaw.json ─────────────────────────────────
 cat > /root/.openclaw/openclaw.json <<EOF
 {
   "models": {
@@ -168,43 +144,7 @@ cat > /root/.openclaw/openclaw.json <<EOF
   "agents": {
     "defaults": {
       "model": {
-        "primary": "$PRIMARY_MODEL",
-        "fallbacks": ["kilo_gateway/kilo-auto/free"]
-      },
-      "imageModel": {
-        "primary": "$VISION_MODEL"
-      }
-    }
-  },
-  "commands": { "restart": true },
-  "browser": {
-    "enabled": true,
-    "requirePairing": false,
-    "headless": true,
-    "noSandbox": true,
-    "executablePath": "$CHROMIUM_PATH",
-    "defaultProfile": "openclaw",
-    "ssrfPolicy": { "dangerouslyAllowPrivateNetwork": true },
-    "profiles": {
-      "openclaw": {
-        "cdpPort": 18800,
-        "color": "0088FF"
-      }
-    }
-  },
-  "channels": {
-    "telegram": {
-      "enabled": true,
-      "botToken": "\${TELEGRAM_BOT_TOKEN}",
-      "dmPolicy": "allowlist",
-      "allowFrom": ["\${TELEGRAM_ALLOW_ID}"],
-      "webhookUrl": "https://\${SPACE_NAME}.hf.space/telegram/webhook",
-      "webhookSecret": "\${OPENCLAW_GATEWAY_PASSWORD}",
-      "webhookPath": "/telegram/webhook",
-      "webhookHost": "0.0.0.0",
-      "webhookPort": 8787,
-      "streaming": {
-        "mode": "partial"
+        "primary": "$PRIMARY_MODEL"
       }
     }
   },
@@ -213,90 +153,19 @@ cat > /root/.openclaw/openclaw.json <<EOF
     "bind": "lan",
     "port": 7862,
     "trustedProxies": ["0.0.0.0/0"],
-    "auth": { "mode": "token", "token": "\${OPENCLAW_GATEWAY_PASSWORD}" },
-    "http": {
-      "endpoints": {
-        "chatCompletions": { "enabled": true }
-      }
-    },
-    "controlUi": {
-      "enabled": true,
-      "allowInsecureAuth": true,
-      "dangerouslyDisableDeviceAuth": true,
-      "dangerouslyAllowHostHeaderOriginFallback": true
-    }
+    "auth": { "mode": "token", "token": "${OPENCLAW_GATEWAY_PASSWORD:-openclaw123}" }
   }
 }
 EOF
 
-echo ">>> openclaw.json generated (API keys use \${ENV_VAR} - never exposed)"
 echo ">>> Primary Model: $PRIMARY_MODEL"
 
-# ── 7. Disable Broken Speech Plugin ────────────────────────────
+# ── 6. Disable speech plugin ──────────────────────────────────
 mkdir -p /root/.openclaw/plugins
 echo '{"disabled": ["speech"]}' > /root/.openclaw/plugins/config.json
-echo ">>> Speech plugin disabled (avoids runtime-api.js error)"
 
-# ── 8. Node.js reverse proxy (Anti-Timeout) ────────────────────
-node -e "
-const http = require('http');
-const net  = require('net');
-process.on('uncaughtException', err => console.error('Proxy:', err.message));
-function proxyHttp(req, res, targetPort) {
-  const opts = { hostname: '127.0.0.1', port: targetPort, path: req.url, method: req.method, headers: req.headers };
-  const pr = http.request(opts, (r) => { res.writeHead(r.statusCode, r.headers); r.pipe(res, { end: true }); });
-  pr.on('error', () => {
-    res.writeHead(200, { 'Content-Type': 'text/html' });
-    res.end('<html style=\"background:#1e1e2e; color:#cdd6f4; text-align:center; padding-top:20%;\"><body><h2>🚀 OpenClaw is starting...</h2><p>Please refresh in a few seconds.</p></body></html>');
-  });
-  req.pipe(pr, { end: true });
-}
-function proxyWs(req, socket, head, targetPort) {
-  const conn = net.connect(targetPort, '127.0.0.1', () => {
-    conn.write('GET ' + req.url + ' HTTP/1.1\r\n' + Object.entries(req.headers).map(([k,v]) => k+': '+v).join('\r\n') + '\r\n\r\n');
-    if (head && head.length) conn.write(head);
-    socket.pipe(conn); conn.pipe(socket);
-  });
-  conn.on('error', () => socket.destroy());
-  socket.on('error', () => conn.destroy());
-}
-const server = http.createServer((req, res) => {
-  const port = req.url.startsWith('/telegram/webhook') ? 8787 : 7862;
-  proxyHttp(req, res, port);
-});
-server.on('upgrade', (req, socket, head) => {
-  const port = req.url.startsWith('/telegram/webhook') ? 8787 : 7862;
-  proxyWs(req, socket, head, port);
-});
-server.listen(7860, '0.0.0.0', () => console.log('Proxy on port 7860'));
-" &
-echo ">>> Proxy started on port 7860"
-
-# ── 9. Backup every 60 minutes ─────────────────────────────────
-(
-  sleep 60
-  python3 /app/sync.py backup
-  while true; do
-    sleep 3600
-    echo ">>> Scheduled backup..."
-    python3 /app/sync.py backup
-  done
-) &
-
-# ── 10. Run OpenClaw with auto-restart ─────────────────────────
-echo ">>> Running openclaw doctor..."
+# ── 7. Run OpenClaw ─────────────────────────────────────────
 openclaw doctor --fix
 
-RESTART_COUNT=0
-while true; do
-  RESTART_COUNT=$((RESTART_COUNT + 1))
-  echo ">>> [Loop #$RESTART_COUNT] Starting OpenClaw gateway..."
-
-  openclaw gateway run --port 7862
-  EXIT_CODE=$?
-
-  echo ">>> Gateway stopped (exit: $EXIT_CODE) — backing up..."
-  python3 /app/sync.py backup
-  echo ">>> Restarting in 5 seconds..."
-  sleep 5
-done
+echo ">>> Starting OpenClaw gateway..."
+exec openclaw gateway run --port 7862