mirror of
https://fastgit.cc/github.com/openclaw/openclaw
synced 2026-04-21 05:12:57 +08:00
900e291f31
* Actions: grant reusable release checks actions read * Actions: use read-all for reusable release checks * CI: add native cross-OS release checks * CI: wire Discord smoke secrets for cross-OS checks * CI: fix native cross-OS installer compatibility * CI: skip empty pnpm cache saves in matrix jobs * CI: honor workflow runner override envs * CI: finish native cross-OS update checks * CI: fix native cross-OS workflow regressions * Installer: capture Windows npm stderr safely * CI: harden cross-OS release checks * CI: resolve reusable workflow harness ref * CI: stabilize cross-OS dev update lanes * CI: tighten release-check workflow semantics * CI: repoint repaired git CLI on POSIX * CI: repair native dev-update shell handoff * CI: preserve real updater semantics * CI: harden supported release-check refs * CI: harden release-check refs and fresh mode * CI: skip dev-update for immutable tag refs * CI: repair fresh installer release checks * CI: fix native release check installer lanes * CI: install release checks from candidate artifacts * CI: use Windows cmd shims in release checks * Installer: run Windows npm shim via PowerShell * CI: pin dev update verification to candidate sha * CI: pin reusable harness and published installers * CI: isolate Windows dev-update PATH validation * CI: align Windows dev-update bootstrap validation * CI: avoid Windows installer gateway flake * CI: run cross-OS release checks via TypeScript * CI: bootstrap tsx for release-check workflow * CI: fix native release-check follow-ups * CI: tighten dev-update release checks * CI: peel annotated workflow refs * CI: harden native release checks * CI: fix release-check verifier drift * CI: fix release-check workflow drift * CI: fix release-check ref resolution * CI: harden Windows release-check gateway startup * CI: fix release-check fallback validation * CI: harden cross-os release checks * CI: pin dev-update release checks to candidate SHA * CI: resolve remote dev target refs * CI: detect cloned dev-update checkouts * CI: harden Windows release-check launcher * Windows: harden task fallback and runner overrides * Release checks: preserve Windows PATH and baseline version reads * CI: add release validation live lanes * CI: expand live and e2e release coverage * CI: add branch dispatch for live and e2e checks
85 lines
2.1 KiB
Bash
85 lines
2.1 KiB
Bash
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
profile_path="${1:-${RUNNER_TEMP:-/tmp}/openclaw-live.profile}"
|
|
|
|
mkdir -p "$(dirname "$profile_path")"
|
|
: >"$profile_path"
|
|
chmod 600 "$profile_path"
|
|
|
|
append_profile_env() {
|
|
local key="$1"
|
|
local value="${!key:-}"
|
|
if [[ -z "$value" || "$value" == "undefined" || "$value" == "null" ]]; then
|
|
return
|
|
fi
|
|
printf 'export %s=%q\n' "$key" "$value" >>"$profile_path"
|
|
}
|
|
|
|
write_secret_file() {
|
|
local destination="$1"
|
|
local source_env="$2"
|
|
local value="${!source_env:-}"
|
|
if [[ -z "$value" ]]; then
|
|
return
|
|
fi
|
|
mkdir -p "$(dirname "$destination")"
|
|
printf '%s' "$value" >"$destination"
|
|
chmod 600 "$destination"
|
|
}
|
|
|
|
for env_key in \
|
|
OPENAI_API_KEY \
|
|
OPENAI_BASE_URL \
|
|
ANTHROPIC_API_KEY \
|
|
ANTHROPIC_API_KEY_OLD \
|
|
ANTHROPIC_API_TOKEN \
|
|
BYTEPLUS_API_KEY \
|
|
CEREBRAS_API_KEY \
|
|
DASHSCOPE_API_KEY \
|
|
GROQ_API_KEY \
|
|
KIMI_API_KEY \
|
|
MODELSTUDIO_API_KEY \
|
|
MOONSHOT_API_KEY \
|
|
MISTRAL_API_KEY \
|
|
MINIMAX_API_KEY \
|
|
OPENCODE_API_KEY \
|
|
OPENCODE_ZEN_API_KEY \
|
|
OPENCLAW_LIVE_BROWSER_CDP_URL \
|
|
OPENCLAW_LIVE_SETUP_TOKEN \
|
|
OPENCLAW_LIVE_SETUP_TOKEN_MODEL \
|
|
OPENCLAW_LIVE_SETUP_TOKEN_PROFILE \
|
|
OPENCLAW_LIVE_SETUP_TOKEN_VALUE \
|
|
GEMINI_API_KEY \
|
|
GOOGLE_API_KEY \
|
|
OPENROUTER_API_KEY \
|
|
QWEN_API_KEY \
|
|
FAL_KEY \
|
|
RUNWAY_API_KEY \
|
|
DEEPGRAM_API_KEY \
|
|
TOGETHER_API_KEY \
|
|
VYDRA_API_KEY \
|
|
XAI_API_KEY \
|
|
ZAI_API_KEY \
|
|
Z_AI_API_KEY \
|
|
BYTEPLUS_ACCESS_KEY_ID \
|
|
BYTEPLUS_SECRET_ACCESS_KEY \
|
|
CLAUDE_CODE_OAUTH_TOKEN
|
|
do
|
|
append_profile_env "$env_key"
|
|
done
|
|
|
|
write_secret_file "$HOME/.codex/auth.json" OPENCLAW_CODEX_AUTH_JSON
|
|
write_secret_file "$HOME/.codex/config.toml" OPENCLAW_CODEX_CONFIG_TOML
|
|
write_secret_file "$HOME/.claude.json" OPENCLAW_CLAUDE_JSON
|
|
write_secret_file "$HOME/.claude/.credentials.json" OPENCLAW_CLAUDE_CREDENTIALS_JSON
|
|
write_secret_file "$HOME/.claude/settings.json" OPENCLAW_CLAUDE_SETTINGS_JSON
|
|
write_secret_file "$HOME/.claude/settings.local.json" OPENCLAW_CLAUDE_SETTINGS_LOCAL_JSON
|
|
write_secret_file "$HOME/.gemini/settings.json" OPENCLAW_GEMINI_SETTINGS_JSON
|
|
|
|
if [[ -n "${GITHUB_ENV:-}" ]]; then
|
|
{
|
|
echo "OPENCLAW_PROFILE_FILE=$profile_path"
|
|
} >>"$GITHUB_ENV"
|
|
fi
|