mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-12 21:53:00 -06:00
Peter Steinberger
fada067277
* feat(browser): add zero-click extension bootstrap Pre-register deterministic path-derived extension IDs and install a strict native messaging host. Keep the popup and options UI minimal while removing the obsolete copilot and page-share flows. * fix(browser): satisfy native bootstrap CI guards * test(browser): isolate native bootstrap Chrome roots * test(browser): flush native bootstrap profile before status * test(browser): seed Linux native bootstrap identity * fix(browser): preserve native bootstrap upgrade safety Allow immutable root-owned package inputs while keeping mutable state, manifests, and launchers user-owned. Preserve all retired copilot keys whenever active or unrecognized recovery custody remains. * fix(browser): preserve pending copilot custody Retired cleanup now removes copilot state only when the durable registry is exactly empty. Any session, archive, malformed value, future shape, or read failure preserves every retired key. * fix(browser): guard native bootstrap upgrades Fail closed while retired copilot custody remains and make discard durable across partial failures. Require exact launcher-embedded origins and repair full launcher drift without accepting mismatched registrations. * fix(browser): remove stale layout export * chore(release): leave changelog to release flow
108 lines
4.1 KiB
Bash
Executable File
108 lines
4.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Updates a self-hosted OpenClaw gateway that runs from this source checkout.
|
|
#
|
|
# Reference workflow for team-operated servers (see docs/install/updating.md).
|
|
# Simple installs should prefer `openclaw update` / `openclaw update --channel
|
|
# dev`; this script exists for checkouts that additionally need to:
|
|
# - preserve a local branch by rebasing it onto origin/main,
|
|
# - tolerate tracked build outputs that `pnpm build` rewrites,
|
|
# - build clean (incremental builds have shipped stale hashed chunks),
|
|
# - restart a custom service unit.
|
|
#
|
|
# Environment:
|
|
# OPENCLAW_UPDATE_RESTART_CMD restart command (default: openclaw gateway restart)
|
|
# set to "" to skip the restart step
|
|
# OPENCLAW_UPDATE_REMOTE git remote to update from (default: origin)
|
|
set -euo pipefail
|
|
|
|
log() { echo "[update-gateway] $*"; }
|
|
on_exit() {
|
|
local code=$?
|
|
if [ "$code" -ne 0 ]; then
|
|
echo "[update-gateway] FAILED (exit $code)" >&2
|
|
fi
|
|
}
|
|
trap on_exit EXIT
|
|
|
|
repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
cd "$repo_root"
|
|
|
|
remote="${OPENCLAW_UPDATE_REMOTE:-origin}"
|
|
|
|
# Never update over an in-progress git operation: aborting or rebasing on top
|
|
# of an operator's paused rebase/merge would discard their progress.
|
|
git_dir="$(git rev-parse --git-dir)"
|
|
if [ -d "$git_dir/rebase-merge" ] || [ -d "$git_dir/rebase-apply" ] || \
|
|
[ -f "$git_dir/MERGE_HEAD" ] || [ -f "$git_dir/CHERRY_PICK_HEAD" ]; then
|
|
log "a git rebase/merge/cherry-pick is in progress; finish or abort it first"
|
|
exit 1
|
|
fi
|
|
|
|
# Fail closed on any other local changes: an agent or operator may have
|
|
# uncommitted work in this checkout, and an update must never eat it.
|
|
if ! git diff --quiet || ! git diff --cached --quiet; then
|
|
log "working tree has local changes; commit, stash, or restore them first:"
|
|
status_lines="$(git status --short)"
|
|
head -20 <<<"$status_lines"
|
|
exit 1
|
|
fi
|
|
|
|
# dist, dist-runtime, and .artifacts/tsgo-cache are wholly disposable build
|
|
# outputs: every update deletes and regenerates them, tracked or not — never
|
|
# store anything there. Untracked files elsewhere are kept and only warned
|
|
# about (servers accumulate harmless scratch files). Accepted tradeoff: an
|
|
# untracked file a build tool happens to read stays in effect, same as before
|
|
# the update; operators own what they leave in the checkout.
|
|
untracked="$(git ls-files --others --exclude-standard)"
|
|
if [ -n "$untracked" ]; then
|
|
log "warning: untracked files present; they are kept and a build tool that reads them can affect the deployed output:"
|
|
head -10 <<<"$untracked"
|
|
fi
|
|
|
|
log "fetching ${remote}/main"
|
|
git fetch "$remote" main
|
|
|
|
branch="$(git rev-parse --abbrev-ref HEAD)"
|
|
if [ "$branch" = "main" ]; then
|
|
log "fast-forwarding main"
|
|
git merge --ff-only "${remote}/main"
|
|
else
|
|
# A server may carry a local branch (e.g. an agent's in-progress fix) on top
|
|
# of main. Rebase preserves that work while still deploying latest main;
|
|
# --rebase-merges keeps merge commits (and their conflict resolutions)
|
|
# instead of silently flattening them away.
|
|
log "rebasing local branch '$branch' onto ${remote}/main"
|
|
if ! git rebase --rebase-merges "${remote}/main"; then
|
|
git rebase --abort
|
|
log "rebase of '$branch' conflicts with ${remote}/main; resolve manually"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
log "installing dependencies"
|
|
pnpm install --frozen-lockfile
|
|
|
|
# Incremental builds have left stale hashed chunks and config validators from
|
|
# the previous revision in dist; a clean build is the reliable path.
|
|
log "clean building"
|
|
# These deletes must stay inside the checkout: a symlinked build dir would
|
|
# redirect the recursion into its target, so refuse symlinks outright.
|
|
for build_path in dist dist-runtime .artifacts; do
|
|
if [ -L "$build_path" ]; then
|
|
log "$build_path is a symlink; refusing to clean through it"
|
|
exit 1
|
|
fi
|
|
done
|
|
rm -rf dist dist-runtime .artifacts/tsgo-cache
|
|
pnpm build
|
|
|
|
restart_cmd="${OPENCLAW_UPDATE_RESTART_CMD-openclaw gateway restart}"
|
|
if [ -n "$restart_cmd" ]; then
|
|
log "restarting gateway: $restart_cmd"
|
|
bash -c "$restart_cmd"
|
|
else
|
|
log "restart skipped (OPENCLAW_UPDATE_RESTART_CMD is empty)"
|
|
fi
|
|
|
|
log "OK $(git rev-parse --short HEAD) ($branch)"
|