Update entrypoint.sh

entrypoint.sh

@@ -2,54 +2,74 @@
 
 # OpenClaw HF Spaces - Production Entrypoint
 
-# -- resolve writable home --
+# 
+
+# KEY: setup only runs ONCE per container lifetime.
+
+# On gateway restarts (SIGUSR1 -> full process restart),
+
+# setup is skipped so user-saved settings are preserved.
+
+# Marker file is in /tmp (cleared on container restart, not gateway restart).
+
+SETUP_MARKER="/tmp/.openclaw-setup-done"
+
+# –– resolve writable home ———————————
 
 if mkdir -p /data/.openclaw 2>/dev/null; then
-  export OPENCLAW_HOME=/data
+export OPENCLAW_HOME=/data
 else
-  export OPENCLAW_HOME=/home/user
-  mkdir -p /home/user/.openclaw
+export OPENCLAW_HOME=/home/user
+mkdir -p /home/user/.openclaw
 fi
 echo "[entrypoint] OPENCLAW_HOME=$OPENCLAW_HOME"
 
-# -- dynamic provider key export --
+# –– dynamic provider key export —————————
 
 for VAR in $(env | cut -d= -f1); do
-  case "$VAR" in
-    OPENCLAW_*|SPACE_*|SYSTEM_*|HF_*|NODE_*|npm_*) continue ;;
-  esac
-  case "$VAR" in
-    *_API_KEY|*_SECRET_KEY|*_ACCESS_TOKEN|*_BOT_TOKEN|*_AUTH_TOKEN|*_APP_KEY)
-      VAL=$(printenv "$VAR" 2>/dev/null || true)
-      if [ -n "$VAL" ]; then
-        export "$VAR"
-        echo "[entrypoint] exported: $VAR"
-      fi
-      ;;
-  esac
+case "$VAR" in
+OPENCLAW_*|SPACE_*|SYSTEM_*|HF_*|NODE_*|npm_*) continue ;;
+esac
+case "$VAR" in
+*_API_KEY|*_SECRET_KEY|*_ACCESS_TOKEN|*_BOT_TOKEN|*_AUTH_TOKEN|*_APP_KEY)
+VAL=$(printenv "$VAR" 2>/dev/null || true)
+if [ -n "$VAL" ]; then
+export "$VAR"
+echo "[entrypoint] exported: $VAR"
+fi
+;;
+esac
 done
 
-# HF_TOKEN exported separately
 export HF_TOKEN="${HF_TOKEN:-}"
 
-# -- write openclaw config --
-echo "[entrypoint] Running setup..."
+# –– run setup only on first boot –––––––––––––
+
+if [ ! -f "$SETUP_MARKER" ]; then
+echo "[entrypoint] First boot - running setup…"
 node /app/spaces/huggingface/setup-hf-config.mjs || true
+touch "$SETUP_MARKER"
 echo "[entrypoint] Setup done."
+else
+echo "[entrypoint] Gateway restart - skipping setup (user settings preserved)"
+fi
+
+# –– security audit (non-fatal) ––––––––––––––
 
-# -- security audit (non-fatal) --
 if [ -f /app/security-check.sh ]; then
-  sh /app/security-check.sh || true
+sh /app/security-check.sh || true
 fi
 
-# -- start sync manager in background --
+# –– start sync manager in background –––––––––––
+
 if [ -f /app/hf-sync-manager.mjs ]; then
-  (node /app/hf-sync-manager.mjs &)
-  echo "[entrypoint] Sync manager started"
+(node /app/hf-sync-manager.mjs &)
+echo "[entrypoint] Sync manager started"
 fi
 
 echo "[entrypoint] Starting gateway..."
+
 exec node /app/openclaw.mjs gateway \
-  --allow-unconfigured \
-  --bind lan \
-  --port 7860
+--allow-unconfigured \
+--bind lan \
+--port 7860