Update setup-hf-config.mjs

setup-hf-config.mjs

@@ -1,62 +1,131 @@
 import fs from "node:fs";
 import path from "node:path";
+import https from "node:https";
 
 var HOME = process.env.OPENCLAW_HOME || process.env.HOME || "/home/user";
 var STATE_DIR = path.join(HOME, ".openclaw");
 var CONFIG_PATH = path.join(STATE_DIR, "openclaw.json");
+var SPACE_HOST = (process.env.SPACE_HOST || "").trim();
 
+console.log("[setup] Starting… HOME=" + HOME);
+
+// -- helpers --
+function parseList(val) {
+if (!val || !val.trim()) return [];
+return val.split(",").map(function(s){ return s.trim(); }).filter(Boolean);
+}
 function envStr(key) { return (process.env[key] || "").trim(); }
 
-// --- 1. 基础配置（保证你能正常登录和连接TG） ---
+// -- auth --
 var gatewayToken = envStr("OPENCLAW_GATEWAY_TOKEN");
+var gatewayPassword = envStr("OPENCLAW_GATEWAY_PASSWORD");
+if (!gatewayToken && !gatewayPassword) {
+console.error("[setup] FATAL: set OPENCLAW_GATEWAY_TOKEN or OPENCLAW_GATEWAY_PASSWORD in Secrets");
+process.exit(0);
+}
+
+// -- default model --
+var defaultModel = envStr("OPENCLAW_HF_DEFAULT_MODEL") || "google/gemini-2.0-flash";
+
+// -- dynamic provider key detection --
+var EXCLUDE_PREFIXES = [
+"OPENCLAW_", "SPACE_", "SYSTEM_", "HF_",
+"NODE_", "PATH", "HOME", "USER", "PWD", "LANG", "LC_",
+"npm_", "HOSTNAME", "SHELL", "TERM", "SHLVL"
+];
+var INCLUDE_SUFFIXES = [
+"_API_KEY", "_SECRET_KEY", "_ACCESS_TOKEN",
+"_BOT_TOKEN", "_AUTH_TOKEN", "_APP_KEY"
+];
+function isProviderKey(k){
+for (let i=0;i<EXCLUDE_PREFIXES.length;i++){ if(k.indexOf(EXCLUDE_PREFIXES[i])===0) return false; }
+for (let i=0;i<INCLUDE_SUFFIXES.length;i++){
+let s=INCLUDE_SUFFIXES[i];
+if(k.length>s.length && k.indexOf(s)===k.length-s.length) return true;
+}
+return false;
+}
+
+var allKeys = Object.keys(process.env);
+var providerKeys = allKeys.filter(k => isProviderKey(k) && envStr(k));
+providerKeys.sort();
+console.log("[setup] Detected provider keys ("+providerKeys.length+"):");
+providerKeys.forEach(k=>console.log("  + "+k));
+
+// -- trusted proxies --
+var envProxies = parseList(envStr("OPENCLAW_GATEWAY_TRUSTED_PROXIES"));
+var trustedProxies = envProxies.length>0 ? envProxies : [
+"10.16.0.0/12","10.20.0.0/12",
+"10.16.4.123","10.16.7.92","10.16.18.232",
+"10.16.34.155","10.16.43.133","10.16.1.206",
+"10.16.37.110","10.16.43.246",
+"10.20.1.9","10.20.1.222",
+"10.20.26.157","10.20.31.87",
+"10.20.0.1","172.17.0.1"
+];
+
+// -- build config --
 var config = {
-  gateway: {
-    auth: gatewayToken ? { mode: "token", token: gatewayToken } : { mode: "password", password: "123" },
-    controlUi: { allowInsecureAuth: true, allowedOrigins: ["*"], dangerouslyDisableDeviceAuth: true, dangerouslyAllowHostHeaderOriginFallback: true },
-    trustedProxies: ["10.16.0.0/12", "10.20.0.0/12", "172.17.0.1"]
-  },
-  agents: { defaults: { model: "openai/gpt-4o-mini" } },
-  env: { vars: {} }
+gateway: {
+auth: gatewayToken ? { mode:"token", token:gatewayToken } : { mode:"password", password:gatewayPassword },
+controlUi: { allowInsecureAuth:true, allowedOrigins:["*"], dangerouslyDisableDeviceAuth:true, dangerouslyAllowHostHeaderOriginFallback:true },
+trustedProxies: trustedProxies
+},
+agents: { defaults:{ model:defaultModel } },
+env: { vars:{} }
 };
+providerKeys.forEach(pk=>{ config.env.vars[pk] = envStr(pk); });
 
-if (process.env.TELEGRAM_BOT_TOKEN) {
-  config.channels = { telegram: { enabled: true, accounts: { main: { botToken: process.env.TELEGRAM_BOT_TOKEN, apiRoot: "https://api.telegram.org" } } } };
-}
+// -- Telegram webhook setup --
+async function setupTelegram(){
+var token = envStr("TELEGRAM_BOT_TOKEN");
+if(!token){ console.log("[setup] Telegram: disabled (no TELEGRAM_BOT_TOKEN)"); return; }
 
-fs.mkdirSync(STATE_DIR, { recursive: true });
-fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2), "utf-8");
-
-
-// --- 2. 🚀 终极杀招：暴力写入底层 auth-profiles.json 强制替换域名！ ---
-var agentDir = path.join(STATE_DIR, "agents", "main", "agent");
-fs.mkdirSync(agentDir, { recursive: true });
-var authProfilePath = path.join(agentDir, "auth-profiles.json");
-
-// 自动读取你在 HF Secrets 里设置的 G4F 网址和密码
-var customBaseUrl = envStr("OPENAI_BASE_URL"); 
-var customPassword = envStr("OPENAI_API_KEY") || "sk-woyaobaipiao2026";
-
-if (customBaseUrl) {
-  var authProfiles = {
-    "profiles": {
-      "openai:default": {
-        "type": "token",
-        "provider": "openai",
-        "token": customPassword,
-        "apiRoot": customBaseUrl,    // 强制修改 OpenAI 根域名
-        "baseURL": customBaseUrl     // 双保险，防止不同版本参数名不同
-      },
-      "openai-codex:default": {
-        "type": "token",
-        "provider": "openai-codex",
-        "token": customPassword,
-        "apiRoot": customBaseUrl,
-        "baseURL": customBaseUrl
-      }
-    }
-  };
-  fs.writeFileSync(authProfilePath, JSON.stringify(authProfiles, null, 2), "utf-8");
-  console.log("[setup] 成功！底层域名已强制修改为: " + customBaseUrl);
+if(SPACE_HOST){
+var webhookUrl = "https://" + SPACE_HOST + "/tg-webhook";
+var r = await new Promise(resolve=>{
+var data = JSON.stringify({ url:webhookUrl, drop_pending_updates:true, max_connections:10 });
+var req = https.request({
+hostname: "api.telegram.org",
+path: "/bot"+token+"/setWebhook",
+method: "POST",
+headers: { "Content-Type":"application/json", "Content-Length": Buffer.byteLength(data) }
+}, res=>{
+let buf="";
+res.on("data",c=>buf+=c);
+res.on("end", ()=>{ try{ resolve(JSON.parse(buf)) } catch(e){ resolve(null) } });
+});
+req.on("error", ()=>resolve(null));
+req.setTimeout(8000, ()=>{ req.destroy(); resolve(null); });
+req.write(data);
+req.end();
+});
+if(r && r.ok) console.log("[setup] Telegram: webhook registered -> "+webhookUrl);
+else {
+console.log("[setup] Telegram: auto-registration failed (HF outbound blocked)");
+console.log("[setup] Telegram: open this URL in your browser once:");
+console.log("  https://api.telegram.org/bot"+token+"/setWebhook?url="+webhookUrl+"&drop_pending_updates=true");
+}
 } else {
-  console.log("[setup] 警告：没有在环境变量找到 OPENAI_BASE_URL");
-}
+console.log("[setup] Telegram: set SPACE_HOST in Variables for auto webhook registration");
+}
+
+config.channels = { telegram:{ enabled:true, accounts:{ main:{ botToken:token, apiRoot:"https://api.telegram.org" } } } };
+console.log("[setup] Telegram: configured");
+}
+
+(async function main(){
+await setupTelegram();
+try{
+fs.mkdirSync(STATE_DIR,{recursive:true});
+if(fs.existsSync(CONFIG_PATH)) fs.copyFileSync(CONFIG_PATH, CONFIG_PATH+".bak");
+fs.writeFileSync(CONFIG_PATH, JSON.stringify(config,null,2),"utf-8");
+}catch(e){ console.error("[setup] Write failed: "+e.message); process.exit(0); }
+
+console.log("[setup] Done.");
+console.log("[setup]   auth      = "+(gatewayToken?"token":"password"));
+console.log("[setup]   model     = "+defaultModel);
+console.log("[setup]   proxies   = "+trustedProxies.length);
+console.log("[setup]   env.vars  = "+providerKeys.length);
+console.log("[setup]   config    = "+CONFIG_PATH);
+})().catch(e=>{ console.error("[setup] Fatal: "+e.message); process.exit(0); });