Create setup-hf-config.mjs

setup-hf-config.mjs

@@ -0,0 +1,101 @@
+import fs from “node:fs”;
+import path from “node:path”;
+
+var home = process.env.OPENCLAW_HOME || process.env.HOME || “/home/user”;
+var stateDir = path.join(home, “.openclaw”);
+var configPath = path.join(stateDir, “openclaw.json”);
+
+function readGatewayToken() {
+var fromEnv = (process.env.OPENCLAW_GATEWAY_TOKEN || “”).trim();
+if (fromEnv) return fromEnv;
+var filePath = (process.env.OPENCLAW_GATEWAY_TOKEN_FILE || “”).trim();
+if (filePath && fs.existsSync(filePath)) {
+try {
+return fs.readFileSync(filePath, “utf-8”).trim();
+} catch (e) {
+return “”;
+}
+}
+return “”;
+}
+
+function parseList(val) {
+if (!val || !val.trim()) return [];
+return val.split(”,”).map(function(s) { return s.trim(); }).filter(Boolean);
+}
+
+var defaultModel = (process.env.OPENCLAW_HF_DEFAULT_MODEL || “”).trim() || “huggingface/deepseek-ai/DeepSeek-R1”;
+var gatewayToken = readGatewayToken();
+var gatewayPassword = (process.env.OPENCLAW_GATEWAY_PASSWORD || “”).trim();
+
+var DEFAULT_HF_TRUSTED_PROXY_IPS = [
+“10.16.4.123”,
+“10.16.7.92”,
+“10.16.18.232”,
+“10.16.34.155”,
+“10.16.43.133”,
+“10.20.1.9”,
+“10.20.1.222”,
+“10.20.26.157”,
+“10.20.31.87”,
+“10.20.0.1”,
+“172.17.0.1”
+];
+
+var trustedProxiesRaw = (process.env.OPENCLAW_GATEWAY_TRUSTED_PROXIES || “”).trim();
+var trustedProxies = trustedProxiesRaw ? parseList(trustedProxiesRaw) : DEFAULT_HF_TRUSTED_PROXY_IPS;
+var allowedOrigins = parseList(process.env.OPENCLAW_CONTROL_UI_ALLOWED_ORIGINS || “”);
+
+var config = {};
+try {
+if (fs.existsSync(configPath)) {
+config = JSON.parse(fs.readFileSync(configPath, “utf-8”));
+}
+} catch (e) {
+config = {};
+}
+
+if (!config.agents) config.agents = {};
+if (!config.agents.defaults) config.agents.defaults = {};
+if (!config.agents.defaults.model) config.agents.defaults.model = {};
+config.agents.defaults.model.primary = defaultModel;
+
+if (!config.gateway) config.gateway = {};
+
+var useTokenAuth = gatewayToken.length > 0;
+var usePasswordAuth = gatewayPassword.length > 0 && !useTokenAuth;
+
+if (useTokenAuth || usePasswordAuth) {
+if (!config.gateway.auth) config.gateway.auth = {};
+if (useTokenAuth) {
+config.gateway.auth.mode = “token”;
+config.gateway.auth.token = gatewayToken;
+} else {
+config.gateway.auth.mode = “password”;
+config.gateway.auth.password = gatewayPassword;
+}
+}
+
+if (!config.gateway.controlUi) config.gateway.controlUi = {};
+config.gateway.controlUi.dangerouslyDisableDeviceAuth = true;
+config.gateway.controlUi.allowInsecureAuth = true;
+
+if (allowedOrigins.length > 0) {
+config.gateway.controlUi.allowedOrigins = allowedOrigins;
+}
+
+config.gateway.trustedProxies = trustedProxies;
+
+try {
+fs.mkdirSync(stateDir, { recursive: true });
+fs.writeFileSync(configPath, JSON.stringify(config, null, 2), “utf-8”);
+} catch (e) {
+console.error(”[openclaw-hf-setup] failed to write config: “ + e.message);
+process.exit(0);
+}
+
+var authKind = useTokenAuth ? “token” : (usePasswordAuth ? “password” : “none”);
+console.log(”[openclaw-hf-setup] auth=” + authKind + “ trustedProxies=” + trustedProxies.length + “ model=” + defaultModel + “ -> “ + configPath);
+if (authKind === “none”) {
+console.warn(”[openclaw-hf-setup] No auth set. Add OPENCLAW_GATEWAY_TOKEN in Space Secrets.”);
+}