Spaces:
Sleeping
Sleeping
| # Resolve a writable durable root. /data is the mounted bucket; fall back to a | |
| # local (non-persistent) dir so the Space still boots before a bucket is attached. | |
| DATA_DIR="${DATA_DIR:-/data}" | |
| if ! mkdir -p "$DATA_DIR/workspaces" 2>/dev/null; then | |
| echo "WARN: $DATA_DIR is not writable — running EPHEMERAL (sessions/logins reset on restart)." | |
| echo " For durability, attach a private Storage Bucket mounted read-write at /data." | |
| DATA_DIR="$HOME/data" | |
| mkdir -p "$DATA_DIR/workspaces" | |
| fi | |
| export DATA_DIR | |
| # Put HOME on the durable bucket so EVERY agent's logins/config persist across | |
| # restarts (gemini ~/.gemini, opencode ~/.local/share, hermes ~/.hermes, etc.). | |
| export HOME="$DATA_DIR/home" | |
| mkdir -p "$HOME" | |
| # Claude/Codex keep their established dirs (so existing logins keep working). | |
| export CLAUDE_CONFIG_DIR="$DATA_DIR/state/claude" | |
| export CODEX_HOME="$DATA_DIR/state/codex" | |
| mkdir -p "$CLAUDE_CONFIG_DIR" "$CODEX_HOME" | |
| # NOTE: every var exported below must be listed in NON_SECRET (server/src/ | |
| # index.js) — this script runs after the build-time env snapshot, so anything | |
| # exported here would otherwise show up as a detected "secret" in Settings. | |
| # Fast, EPHEMERAL local area for tools / Python envs / package caches. Never the | |
| # /data bucket — object storage is slow for many-small-files and can't mmap or | |
| # lock well, so running libraries from it is painful. These reinstall on demand. | |
| export AM_LOCAL="/home/node/local" | |
| if ! mkdir -p "$AM_LOCAL/bin" 2>/dev/null; then AM_LOCAL="$DATA_DIR/.local-cache"; mkdir -p "$AM_LOCAL/bin"; fi | |
| export UV_CACHE_DIR="$AM_LOCAL/uv-cache" | |
| # Codex keeps a local SQLite database (logs_2.sqlite) in CODEX_HOME. SQLite on | |
| # the FUSE bucket corrupts (object storage can't lock/mmap properly) — codex | |
| # then reports "file is not a database" on startup. The DB is a rebuildable | |
| # cache derived from the rollouts, so it needs speed, not durability: point it | |
| # at local disk via symlink. When the local file vanishes on restart, codex | |
| # simply rebuilds it. | |
| mkdir -p "$AM_LOCAL/codex-db" | |
| if [ ! -L "$CODEX_HOME/logs_2.sqlite" ]; then | |
| rm -f "$CODEX_HOME/logs_2.sqlite" "$CODEX_HOME/logs_2.sqlite-wal" "$CODEX_HOME/logs_2.sqlite-shm" 2>/dev/null || true | |
| ln -s "$AM_LOCAL/codex-db/logs_2.sqlite" "$CODEX_HOME/logs_2.sqlite" | |
| fi | |
| export PIP_CACHE_DIR="$AM_LOCAL/pip-cache" | |
| export PYTHONPYCACHEPREFIX="$AM_LOCAL/pycache" | |
| export PYTHONUSERBASE="$AM_LOCAL/py" # pip install --user → local, fast | |
| export NPM_CONFIG_PREFIX="$AM_LOCAL/npm" # npm install -g → local, no root needed | |
| export PATH="$AM_LOCAL/py/bin:$AM_LOCAL/npm/bin:$AM_LOCAL/bin:$HOME/.local/bin:$PATH" | |
| # OpenClaw: its session engine fingerprints file metadata at nanosecond | |
| # precision and false-positives on the FUSE bucket ("session file changed while | |
| # embedded prompt lock was released"). Its state therefore lives on LOCAL disk, | |
| # with a durable copy on the bucket: restored on boot, synced back every 60s. | |
| # Worst case on an unclean stop: the last minute of chat history. | |
| # OpenClaw can't run its state on the FUSE bucket (its session fence | |
| # false-positives on unstable metadata) and it REJECTS symlinked paths (the | |
| # workspace boundary check). No symlinks, no env overrides — OpenClaw simply | |
| # gets its OWN HOME on local disk: a real, ordinary install from its point of | |
| # view. Durable copy on the bucket: restored on boot, synced back every 60s. | |
| # Worst case on an unclean stop: the last minute of claw state. | |
| export OPENCLAW_HOME="$AM_LOCAL/oc-home" # runner launches openclaw with HOME=$OPENCLAW_HOME | |
| export OPENCLAW_STATE_DIR="$OPENCLAW_HOME/.openclaw" # where the server finds its config/traces | |
| OC_BACKUP="$DATA_DIR/state/openclaw-backup" | |
| mkdir -p "$OPENCLAW_STATE_DIR" "$OC_BACKUP" | |
| # heal from the earlier symlink experiment | |
| [ -L "$HOME/.openclaw" ] && rm "$HOME/.openclaw" | |
| # seed local state: backup (freshest) first, then legacy dirs fill gaps (--update: never clobber newer) | |
| [ -n "$(ls -A "$OC_BACKUP" 2>/dev/null)" ] && rsync -a "$OC_BACKUP/" "$OPENCLAW_STATE_DIR/" 2>/dev/null | |
| for legacy in "$HOME/.openclaw.pre-symlink" "$HOME/.openclaw"; do | |
| if [ -d "$legacy" ] && [ ! -L "$legacy" ]; then | |
| rsync -a --update "$legacy/" "$OPENCLAW_STATE_DIR/" 2>/dev/null || true | |
| fi | |
| done | |
| # small comforts in the private HOME (harmless if missing) | |
| cp "$HOME/.gitconfig" "$OPENCLAW_HOME/.gitconfig" 2>/dev/null || true | |
| ( while :; do | |
| sleep 60 | |
| rsync -a --delete "$OPENCLAW_STATE_DIR/" "$OC_BACKUP/" 2>/dev/null || true | |
| done ) & | |
| # Durable, user-editable setup script. Runs on EVERY start (keep it idempotent); | |
| # seed a template on first boot. | |
| if [ ! -f "$DATA_DIR/install.sh" ]; then | |
| cat > "$DATA_DIR/install.sh" <<'EOF' | |
| #!/bin/sh | |
| # Runs at Space startup on the fast LOCAL disk (not the /data bucket). Re-runs on | |
| # every restart, so keep it idempotent. Log: /data/install.log | |
| # | |
| # Platform-provided vars: $AM_LOCAL (fast ephemeral root for tools/envs/caches), | |
| # $UV_CACHE_DIR, $PIP_CACHE_DIR. | |
| # | |
| # Examples -------------------------------------------------------------------- | |
| # CLI tools (land on PATH, local + fast): | |
| # uv tool install ruff | |
| # pip install --user httpie | |
| # npm install -g prettier | |
| # | |
| # A project's Python env — build it on LOCAL disk from the workspace lockfile | |
| # (never a .venv on the bucket). pyproject.toml/uv.lock stay in the workspace: | |
| # UV_PROJECT_ENVIRONMENT="$AM_LOCAL/envs/myproj" \ | |
| # sh -c 'cd /data/workspaces/myproj && uv sync' | |
| # ----------------------------------------------------------------------------- | |
| EOF | |
| fi | |
| # Run it BLOCKING so custom tools/envs are ready before any session starts — | |
| # but bounded: a hung install (e.g. curl to a dead host) must not brick the | |
| # Space with no UI to fix it. Log to a file and echo to the Space logs; capture | |
| # the real exit code; continue regardless. | |
| INSTALL_TIMEOUT="${INSTALL_TIMEOUT:-600}" | |
| echo "Running $DATA_DIR/install.sh (blocking, ${INSTALL_TIMEOUT}s limit)…" | |
| timeout "$INSTALL_TIMEOUT" sh "$DATA_DIR/install.sh" > "$DATA_DIR/install.log" 2>&1 | |
| INSTALL_CODE=$? | |
| cat "$DATA_DIR/install.log" | |
| if [ "$INSTALL_CODE" -eq 0 ]; then | |
| echo "[install.sh OK]" | |
| elif [ "$INSTALL_CODE" -eq 124 ]; then | |
| echo "[install.sh TIMED OUT after ${INSTALL_TIMEOUT}s — starting anyway; fix it via the Files browser, see $DATA_DIR/install.log]" | |
| else | |
| echo "[install.sh FAILED (exit $INSTALL_CODE) — starting anyway; fix it via the Files browser, see $DATA_DIR/install.log]" | |
| fi | |
| echo "[install.sh finished $(date -u) exit=$INSTALL_CODE]" >> "$DATA_DIR/install.log" | |
| exec node /app/server/src/index.js | |