mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-25 03:45:46 -06:00
Peter Steinberger
234df15a6d
* build(deps): refresh dependencies after cooldown Apply dependency, toolchain, action, image, and exact tool updates released by the inclusive 2026-08-16 seven-day cutoff. Adapt owner boundaries for the resulting CUA, logging, Teams, Markdown, native, and test-harness contract changes while retaining versions blocked by upstream compatibility constraints. * fix(ui): align markdown renderer env typing * fix(deps): align postcss and mistral peer contracts * fix(deps): repair refreshed dependency contracts * fix(deps): retain tslog startup budget * fix(ci): verify Android tools with SHA-256 * fix(ci): fence Android SDK cache version
72 lines
2.5 KiB
Bash
Executable File
72 lines
2.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -euo pipefail
|
|
|
|
source_root="${1:?trusted ClawHub CLI source root is required}"
|
|
destination="${2:?ClawHub CLI destination is required}"
|
|
github_output="${3:-}"
|
|
|
|
package_json="${source_root}/package.json"
|
|
package_lock="${source_root}/package-lock.json"
|
|
expected_lock_sha256="9606849698f041afdd2c2600633320f6b7c1e5136d06b98ce16c169c055c0f83"
|
|
expected_clawhub_integrity="sha512-VwM6FQrZVarFRDiEqG42npUeyCu/iLhPnpO+b7kKIGRXv+TA6Lb8pboHnIgT6cmjFEnW3j/pTbshWeDQMQ7QWQ=="
|
|
test -f "${package_json}"
|
|
test -f "${package_lock}"
|
|
if [[ -e "${destination}" || -L "${destination}" ]]; then
|
|
echo "ClawHub CLI destination must not already exist: ${destination}" >&2
|
|
exit 1
|
|
fi
|
|
|
|
install -d -m 0700 "${destination}"
|
|
install -m 0600 "${package_json}" "${destination}/package.json"
|
|
install -m 0600 "${package_lock}" "${destination}/package-lock.json"
|
|
|
|
lock_sha256="$(
|
|
CLAWHUB_CLI_LOCK="${package_lock}" \
|
|
node -e "const { createHash } = require('node:crypto'); const { readFileSync } = require('node:fs'); process.stdout.write(createHash('sha256').update(readFileSync(process.env.CLAWHUB_CLI_LOCK)).digest('hex'));"
|
|
)"
|
|
[[ "${lock_sha256}" == "${expected_lock_sha256}" ]] || {
|
|
echo "Pinned ClawHub CLI lock SHA-256 mismatch." >&2
|
|
exit 1
|
|
}
|
|
clawhub_integrity="$(
|
|
CLAWHUB_CLI_LOCK="${package_lock}" \
|
|
node -p "require(require('node:path').resolve(process.env.CLAWHUB_CLI_LOCK)).packages['node_modules/clawhub'].integrity"
|
|
)"
|
|
[[ "${clawhub_integrity}" == "${expected_clawhub_integrity}" ]] || {
|
|
echo "Pinned ClawHub CLI integrity mismatch." >&2
|
|
exit 1
|
|
}
|
|
|
|
# npm 12 misvalidates the lockfile root when this project is selected with --prefix.
|
|
# Running inside the copied project keeps its committed root metadata authoritative.
|
|
(
|
|
cd "${destination}"
|
|
npm ci \
|
|
--ignore-scripts \
|
|
--no-audit \
|
|
--no-fund \
|
|
--omit=dev
|
|
)
|
|
|
|
clawhub_version="$(
|
|
CLAWHUB_CLI_ROOT="${destination}" \
|
|
node -p "require(require('node:path').join(process.env.CLAWHUB_CLI_ROOT, 'node_modules/clawhub/package.json')).version"
|
|
)"
|
|
[[ "${clawhub_version}" == "0.23.3" ]] || {
|
|
echo "Pinned ClawHub CLI version mismatch: ${clawhub_version}" >&2
|
|
exit 1
|
|
}
|
|
test -x "${destination}/node_modules/.bin/clawhub"
|
|
clawhub_cli="${destination}/node_modules/.bin/clawhub"
|
|
|
|
echo "Materialized clawhub@${clawhub_version} from lock ${lock_sha256}."
|
|
if [[ -n "${github_output}" ]]; then
|
|
{
|
|
echo "cli=${clawhub_cli}"
|
|
echo "integrity=${clawhub_integrity}"
|
|
echo "lock_sha256=${lock_sha256}"
|
|
echo "version=${clawhub_version}"
|
|
} >> "${github_output}"
|
|
fi
|