Update entrypoint.sh

entrypoint.sh

@@ -1,5 +1,8 @@
 #!/bin/sh
-# OpenClaw HF Spaces Entrypoint with Telegram safe polling
+
+# OpenClaw HF Spaces - Production Entrypoint
+
+# -- resolve writable home --
 
 if mkdir -p /data/.openclaw 2>/dev/null; then
   export OPENCLAW_HOME=/data
@@ -9,30 +12,44 @@ else
 fi
 echo "[entrypoint] OPENCLAW_HOME=$OPENCLAW_HOME"
 
-# Remove old Telegram polling lock to prevent 409 after HF restart
-LOCK_FILE="$OPENCLAW_HOME/.openclaw/.tg-polling-lock"
-[ -f "$LOCK_FILE" ] && rm -f "$LOCK_FILE" && echo "[entrypoint] Removed old Telegram lock"
-
-# Export secrets
+# -- dynamic provider key export --
+
+for VAR in $(env | cut -d= -f1); do
+  case "$VAR" in
+    OPENCLAW_*|SPACE_*|SYSTEM_*|HF_*|NODE_*|npm_*) continue ;;
+  esac
+  case "$VAR" in
+    *_API_KEY|*_SECRET_KEY|*_ACCESS_TOKEN|*_BOT_TOKEN|*_AUTH_TOKEN|*_APP_KEY)
+      VAL=$(printenv "$VAR" 2>/dev/null || true)
+      if [ -n "$VAL" ]; then
+        export "$VAR"
+        echo "[entrypoint] exported: $VAR"
+      fi
+      ;;
+  esac
+done
+
+# HF_TOKEN exported separately
 export HF_TOKEN="${HF_TOKEN:-}"
 
-# Run config setup
-echo "[entrypoint] Running setup…"
+# -- write openclaw config --
+echo "[entrypoint] Running setup..."
 node /app/spaces/huggingface/setup-hf-config.mjs || true
 echo "[entrypoint] Setup done."
 
-# Security audit
-[ -f /app/security-check.sh ] && sh /app/security-check.sh || true
-
-# Start sync manager
-[ -f /app/hf-sync-manager.mjs ] && node /app/hf-sync-manager.mjs & echo "[entrypoint] Sync manager started (PID $!)"
+# -- security audit (non-fatal) --
+if [ -f /app/security-check.sh ]; then
+  sh /app/security-check.sh || true
+fi
 
-# Create Telegram lock before starting gateway
-touch "$LOCK_FILE"
-echo "[entrypoint] Telegram lock created"
+# -- start sync manager in background --
+if [ -f /app/hf-sync-manager.mjs ]; then
+  (node /app/hf-sync-manager.mjs &)
+  echo "[entrypoint] Sync manager started"
+fi
 
-echo "[entrypoint] Starting gateway…"
+echo "[entrypoint] Starting gateway..."
 exec node /app/openclaw.mjs gateway \
---allow-unconfigured \
---bind lan \
---port 7860
+  --allow-unconfigured \
+  --bind lan \
+  --port 7860