Update entrypoint.sh

entrypoint.sh

@@ -2,14 +2,6 @@
 
 # OpenClaw HF Spaces - Production Entrypoint
 
-# 
-# KEY: gateway runs in a while loop.
-# When OpenClaw does “full process restart” (on config save),
-# the gateway process exits but the container stays alive.
-# The loop catches the exit and restarts the gateway in ~1 second.
-# This eliminates: container crash, 1005/1006 permanent errors,
-# settings overwrite (setup only runs once per container lifetime).
-
 # –– resolve writable home ———————————
 
 if mkdir -p /data/.openclaw 2>/dev/null; then
@@ -39,10 +31,7 @@ done
 
 export HF_TOKEN="${HF_TOKEN:-}"
 
-# –– run setup ONCE ––––––––––––––––––––
-
-# setup.mjs uses patch mode: if openclaw.json exists, only update
-# auth/env.vars/channels, never overwrite user settings.
+# –– run setup (patch mode: preserves user settings) —––
 
 echo "[entrypoint] Running setup…"
 node /app/spaces/huggingface/setup-hf-config.mjs || true
@@ -54,30 +43,76 @@ if [ -f /app/security-check.sh ]; then
 sh /app/security-check.sh || true
 fi
 
-# –– start sync manager ONCE in background —————–
+# –– start sync manager in background –––––––––––
 
 if [ -f /app/hf-sync-manager.mjs ]; then
 (node /app/hf-sync-manager.mjs &)
 echo "[entrypoint] Sync manager started"
 fi
 
-# –– gateway loop ——————————————
+# –– auto-approve pending device pairings ——————
 
-# OpenClaw “full process restart” exits the gateway process (code 0).
-# Without this loop: container exits -> HF stops container -> crash.
-# With this loop: exit caught -> restart in 1s -> container stays alive.
-# Users see: brief 1005/1006 disconnect -> auto-reconnect in ~5-10s.
+# Sub-agents connecting as nodes require device pairing.
 
-echo "[entrypoint] Starting gateway loop…"
+# This loop detects pending pairing requests and approves them automatically.
 
+(
+DEVICES_DIR="$OPENCLAW_HOME/.openclaw/devices"
+mkdir -p "$DEVICES_DIR"
+echo "[auto-pair] Device auto-approval started"
 while true; do
-echo "[entrypoint] Gateway starting…"
+sleep 8
+PENDING="$DEVICES_DIR/pending.json"
+PAIRED="$DEVICES_DIR/paired.json"
+if [ -f "$PENDING" ]; then
+node - << 'JSEOF'
+const fs = require('fs');
+const devDir = process.env.OPENCLAW_HOME + '/.openclaw/devices';
+const pendingPath = devDir + '/pending.json';
+const pairedPath  = devDir + '/paired.json';
+try {
+const raw = fs.readFileSync(pendingPath, 'utf-8').trim();
+if (!raw || raw === '[]' || raw === '{}') process.exit(0);
+let pending = JSON.parse(raw);
+if (!Array.isArray(pending)) pending = Object.values(pending);
+if (pending.length === 0) process.exit(0);
+let paired = [];
+if (fs.existsSync(pairedPath)) {
+try { paired = JSON.parse(fs.readFileSync(pairedPath, 'utf-8')); } catch(e) {}
+}
+if (!Array.isArray(paired)) paired = [];
+const pairedIds = new Set(paired.map(function(d) { return d.id || d.deviceId || d.name; }));
+const toApprove = pending.filter(function(d) {
+return !pairedIds.has(d.id || d.deviceId || d.name);
+});
+if (toApprove.length > 0) {
+const approved = toApprove.map(function(d) {
+return Object.assign({}, d, { approved: true, approvedAt: new Date().toISOString() });
+});
+paired = paired.concat(approved);
+fs.writeFileSync(pairedPath, JSON.stringify(paired, null, 2));
+fs.writeFileSync(pendingPath, '[]');
+console.log('[auto-pair] Approved ' + toApprove.length + ' device(s)');
+}
+} catch(e) { /* ignore */ }
+JSEOF
+fi
+done
+) &
 
-node /app/openclaw.mjs gateway \
---allow-unconfigured \
---bind lan \
---port 7860
+# –– gateway loop ——————————————
+
+# Gateway exits on config save (OpenClaw full process restart).
+
+# Loop keeps container alive and restarts gateway in 2s.
 
+echo "[entrypoint] Starting gateway loop…"
+while true; do
+echo "[entrypoint] Gateway starting…"
+node /app/openclaw.mjs gateway   
+–allow-unconfigured   
+–bind lan   
+–port 7860
 EXIT_CODE=$?
 echo "[entrypoint] Gateway exited (code $EXIT_CODE) - restarting in 2s…"
 sleep 2