Update setup-hf-config.mjs

setup-hf-config.mjs

@@ -4,6 +4,8 @@ import https from "node:https";
 
 // ============================================================
 // OpenClaw HF Spaces - Production Config Writer
+// Runs ONCE per container lifetime (entrypoint.sh marker).
+// Always writes fresh config from env vars.
 // ============================================================
 
 var HOME        = process.env.OPENCLAW_HOME || process.env.HOME || "/home/user";
@@ -23,16 +25,6 @@ function envStr(key) {
 return (process.env[key] || "").trim();
 }
 
-function isValidJson(p) {
-try {
-if (!fs.existsSync(p)) return false;
-var c = fs.readFileSync(p, "utf-8").trim();
-if (!c) return false;
-JSON.parse(c);
-return true;
-} catch (e) { return false; }
-}
-
 // –– auth –––––––––––––––––––––––––
 
 var gatewayToken    = envStr("OPENCLAW_GATEWAY_TOKEN");
@@ -95,6 +87,34 @@ var trustedProxies = envProxies.length > 0 ? envProxies : [
 "127.0.0.1"
 ];
 
+// –– build config ——————————————
+
+var config = {
+gateway: {
+auth: gatewayToken
+? { mode: "token",    token:    gatewayToken    }
+: { mode: "password", password: gatewayPassword },
+controlUi: {
+allowInsecureAuth:                        true,
+allowedOrigins:                           ["*"],
+dangerouslyDisableDeviceAuth:             true,
+dangerouslyAllowHostHeaderOriginFallback: true
+},
+trustedProxies: trustedProxies
+},
+agents: {
+defaults: {
+model:     defaultModel,
+workspace: WORKSPACE
+}
+},
+env: { vars: {} }
+};
+
+providerKeys.forEach(function(pk) {
+config.env.vars[pk] = (process.env[pk] || "").trim();
+});
+
 // –– Telegram –––––––––––––––––––––––
 
 function tgRequest(token, method, body) {
@@ -122,8 +142,12 @@ req.end();
 });
 }
 
-async function buildTelegramChannel(token) {
-if (!token) return null;
+async function setupTelegram() {
+var token = envStr("TELEGRAM_BOT_TOKEN");
+if (!token) {
+console.log("[setup] Telegram: disabled (no TELEGRAM_BOT_TOKEN)");
+return;
+}
 
 if (SPACE_HOST) {
 var webhookUrl = "https://" + SPACE_HOST + "/tg-webhook";
@@ -141,10 +165,10 @@ console.log("  https://api.telegram.org/bot" + token +
 "/setWebhook?url=" + webhookUrl + "&drop_pending_updates=true");
 }
 } else {
-console.log("[setup] Telegram: set SPACE_HOST for auto webhook registration");
+console.log("[setup] Telegram: set SPACE_HOST for auto webhook");
 }
 
-return {
+config.channels = {
 telegram: {
 enabled:  true,
 accounts: {
@@ -152,93 +176,21 @@ main: { botToken: token, apiRoot: "https://api.telegram.org" }
 }
 }
 };
+console.log("[setup] Telegram: configured");
 }
 
 // –– main –––––––––––––––––––––––––
 
-(async function main() {
+(async function() {
 fs.mkdirSync(STATE_DIR, { recursive: true });
 fs.mkdirSync(WORKSPACE,  { recursive: true });
 fs.mkdirSync(path.join(WORKSPACE, "memory"), { recursive: true });
 
-var token = envStr("TELEGRAM_BOT_TOKEN");
-
-if (isValidJson(CONFIG_PATH)) {
-console.log("[setup] Existing config found - patching only env.vars and channels");
-
-var existing = JSON.parse(fs.readFileSync(CONFIG_PATH, "utf-8"));
-
-if (!existing.env) existing.env = {};
-if (!existing.env.vars) existing.env.vars = {};
-providerKeys.forEach(function(pk) {
-existing.env.vars[pk] = (process.env[pk] || "").trim();
-});
-
-if (token) {
-var ch = await buildTelegramChannel(token);
-if (ch) existing.channels = ch;
-console.log("[setup] Telegram: configured");
-}
-
-if (!existing.agents) existing.agents = {};
-if (!existing.agents.defaults) existing.agents.defaults = {};
-if (!existing.agents.defaults.workspace) {
-existing.agents.defaults.workspace = WORKSPACE;
-}
-
-if (!existing.gateway) existing.gateway = {};
-if (!existing.gateway.trustedProxies ||
-existing.gateway.trustedProxies.length === 0) {
-existing.gateway.trustedProxies = trustedProxies;
-}
+await setupTelegram();
 
+if (fs.existsSync(CONFIG_PATH)) {
 fs.copyFileSync(CONFIG_PATH, CONFIG_PATH + ".bak");
-fs.writeFileSync(CONFIG_PATH, JSON.stringify(existing, null, 2), "utf-8");
-
-console.log("[setup] Patch done (user settings preserved).");
-console.log("[setup]   env.vars = " + providerKeys.length);
-console.log("[setup]   config   = " + CONFIG_PATH);
-return;
 }
-
-console.log("[setup] No existing config - writing fresh template");
-
-var config = {
-gateway: {
-auth: gatewayToken
-? { mode: "token",    token:    gatewayToken    }
-: { mode: "password", password: gatewayPassword },
-controlUi: {
-allowInsecureAuth:                        true,
-allowedOrigins:                           ["*"],
-dangerouslyDisableDeviceAuth:             true,
-dangerouslyAllowHostHeaderOriginFallback: true
-},
-trustedProxies: trustedProxies
-},
-agents: {
-defaults: {
-model:     defaultModel,
-workspace: WORKSPACE
-}
-},
-env: { vars: {} }
-};
-
-providerKeys.forEach(function(pk) {
-config.env.vars[pk] = (process.env[pk] || "").trim();
-});
-
-if (token) {
-var channels = await buildTelegramChannel(token);
-if (channels) {
-config.channels = channels;
-console.log("[setup] Telegram: configured");
-}
-} else {
-console.log("[setup] Telegram: disabled (no TELEGRAM_BOT_TOKEN)");
-}
-
 fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2), "utf-8");
 
 console.log("[setup] Done.");