Update entrypoint.sh

entrypoint.sh

@@ -1,11 +1,31 @@
 #!/bin/sh
 
-OPENCLAW_HOME="${OPENCLAW_HOME:-/data/openclaw}"
-mkdir -p "$OPENCLAW_HOME/.openclaw" 2>/dev/null || true
+# OpenClaw HF Spaces - Production Entrypoint
+# Storage: HF Storage Bucket mounted at /data (100 GB, persists across restarts)
+
+# -- resolve writable home ----------------------------------------
+
+OPENCLAW_HOME=/home/user
+mkdir -p /home/user/.openclaw
+
+if [ -d /data ]; then
+  if touch /data/.bucket-write-test 2>/dev/null; then
+    rm -f /data/.bucket-write-test
+    OPENCLAW_HOME=/data
+    mkdir -p /data/.openclaw
+    echo "[entrypoint] Storage bucket at /data is writable - using persistent storage"
+  else
+    echo "[entrypoint] WARNING: /data exists but is not writable - falling back to ephemeral /home/user"
+  fi
+else
+  echo "[entrypoint] WARNING: /data not found - bucket may not be mounted, using ephemeral /home/user"
+fi
 
 export OPENCLAW_HOME
 echo "[entrypoint] OPENCLAW_HOME=$OPENCLAW_HOME"
 
+# -- dynamic provider key export ----------------------------------
+
 for VAR in $(env | cut -d= -f1); do
   case "$VAR" in
     OPENCLAW_*|SPACE_*|SYSTEM_*|HF_*|NODE_*|npm_*) continue ;;
@@ -23,14 +43,23 @@ done
 
 export HF_TOKEN="${HF_TOKEN:-}"
 
+# -- run setup (patch mode: preserves user settings) --------------
+
 echo "[entrypoint] Running setup..."
 node /app/spaces/huggingface/setup-hf-config.mjs || true
 echo "[entrypoint] Setup done."
 
+# -- security audit -----------------------------------------------
+
 if [ -f /app/security-check.sh ]; then
   sh /app/security-check.sh || true
 fi
 
+# -- auto-approve pending device pairings -------------------------
+
+# Sub-agents connecting as nodes require device pairing.
+# This loop detects pending pairing requests and approves them automatically.
+
 (
   DEVICES_DIR="$OPENCLAW_HOME/.openclaw/devices"
   mkdir -p "$DEVICES_DIR"
@@ -69,12 +98,17 @@ try {
     fs.writeFileSync(pendingPath, '[]');
     console.log('[auto-pair] Approved ' + toApprove.length + ' device(s)');
   }
-} catch(e) { }
+} catch(e) { /* ignore */ }
 JSEOF
     fi
   done
 ) &
 
+# -- gateway loop -------------------------------------------------
+
+# Gateway exits on config save (OpenClaw full process restart).
+# Loop keeps container alive and restarts gateway in 2s.
+
 echo "[entrypoint] Starting gateway loop..."
 while true; do
   echo "[entrypoint] Gateway starting..."
@@ -85,4 +119,4 @@ while true; do
   EXIT_CODE=$?
   echo "[entrypoint] Gateway exited (code $EXIT_CODE) - restarting in 2s..."
   sleep 2
-done
+done