mirror of
https://github.com/qwibitai/nanoclaw.git
synced 2026-07-06 18:52:03 +08:00
gavrielc
c82f062d57
Nothing has read data/env/env since commit 1a07869 removed the container
mount, yet setup still wrote the full .env (live tokens included) there.
Drop every writer and correct the stale comments/docs that described it.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
136 lines
4.3 KiB
Bash
Executable File
136 lines
4.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
#
|
|
# Install the Teams adapter, persist TEAMS_APP_ID / _PASSWORD / _TENANT_ID /
|
|
# _TYPE to .env, and restart the service. Non-interactive —
|
|
# the operator-facing Azure portal walkthroughs live in
|
|
# setup/channels/teams.ts. Credentials come in via env vars:
|
|
# TEAMS_APP_ID (required)
|
|
# TEAMS_APP_PASSWORD (required — client secret value from Azure)
|
|
# TEAMS_APP_TYPE (required — SingleTenant | MultiTenant)
|
|
# TEAMS_APP_TENANT_ID (required when type=SingleTenant)
|
|
#
|
|
# Emits exactly one status block on stdout (ADD_TEAMS) at the end. All chatty
|
|
# progress messages go to stderr so setup:auto's raw-log capture sees the
|
|
# full story without cluttering the final block for the parser.
|
|
set -euo pipefail
|
|
|
|
PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
cd "$PROJECT_ROOT"
|
|
|
|
# Keep in sync with .claude/skills/add-teams/SKILL.md.
|
|
ADAPTER_VERSION="@chat-adapter/teams@4.29.0"
|
|
|
|
# Resolve which remote carries the channels branch — handles forks where
|
|
# upstream lives on a different remote than `origin`.
|
|
# shellcheck source=setup/lib/channels-remote.sh
|
|
source "$PROJECT_ROOT/setup/lib/channels-remote.sh"
|
|
CHANNELS_REMOTE=$(resolve_channels_remote)
|
|
CHANNELS_BRANCH="${CHANNELS_REMOTE}/channels"
|
|
|
|
emit_status() {
|
|
local status=$1 error=${2:-}
|
|
local already=${ADAPTER_ALREADY_INSTALLED:-false}
|
|
echo "=== NANOCLAW SETUP: ADD_TEAMS ==="
|
|
echo "STATUS: ${status}"
|
|
echo "ADAPTER_VERSION: ${ADAPTER_VERSION}"
|
|
echo "ADAPTER_ALREADY_INSTALLED: ${already}"
|
|
[ -n "$error" ] && echo "ERROR: ${error}"
|
|
echo "=== END ==="
|
|
}
|
|
|
|
log() { echo "[add-teams] $*" >&2; }
|
|
|
|
if [ -z "${TEAMS_APP_ID:-}" ]; then
|
|
emit_status failed "TEAMS_APP_ID env var not set"
|
|
exit 1
|
|
fi
|
|
if [ -z "${TEAMS_APP_PASSWORD:-}" ]; then
|
|
emit_status failed "TEAMS_APP_PASSWORD env var not set"
|
|
exit 1
|
|
fi
|
|
if [ -z "${TEAMS_APP_TYPE:-}" ]; then
|
|
emit_status failed "TEAMS_APP_TYPE env var not set (SingleTenant|MultiTenant)"
|
|
exit 1
|
|
fi
|
|
if [ "${TEAMS_APP_TYPE}" = "SingleTenant" ] && [ -z "${TEAMS_APP_TENANT_ID:-}" ]; then
|
|
emit_status failed "TEAMS_APP_TENANT_ID required when TEAMS_APP_TYPE=SingleTenant"
|
|
exit 1
|
|
fi
|
|
|
|
need_install() {
|
|
[ ! -f src/channels/teams.ts ] && return 0
|
|
! grep -q "^import './teams.js';" src/channels/index.ts 2>/dev/null && return 0
|
|
return 1
|
|
}
|
|
|
|
ADAPTER_ALREADY_INSTALLED=true
|
|
if need_install; then
|
|
ADAPTER_ALREADY_INSTALLED=false
|
|
log "Fetching channels branch…"
|
|
git fetch "$CHANNELS_REMOTE" channels >&2 2>/dev/null || {
|
|
emit_status failed "git fetch ${CHANNELS_REMOTE} channels failed"
|
|
exit 1
|
|
}
|
|
|
|
log "Copying adapter from ${CHANNELS_BRANCH}…"
|
|
git show "${CHANNELS_BRANCH}:src/channels/teams.ts" > src/channels/teams.ts
|
|
|
|
# Append self-registration import if missing.
|
|
if ! grep -q "^import './teams.js';" src/channels/index.ts; then
|
|
echo "import './teams.js';" >> src/channels/index.ts
|
|
fi
|
|
|
|
log "Installing ${ADAPTER_VERSION}…"
|
|
pnpm install "${ADAPTER_VERSION}" >&2 2>/dev/null || {
|
|
emit_status failed "pnpm install ${ADAPTER_VERSION} failed"
|
|
exit 1
|
|
}
|
|
|
|
log "Building…"
|
|
pnpm run build >&2 2>/dev/null || {
|
|
emit_status failed "pnpm run build failed"
|
|
exit 1
|
|
}
|
|
else
|
|
log "Adapter files already installed — skipping install phase."
|
|
fi
|
|
|
|
# Persist credentials.
|
|
touch .env
|
|
upsert_env() {
|
|
local key=$1 value=$2
|
|
if grep -q "^${key}=" .env; then
|
|
awk -v k="$key" -v v="$value" \
|
|
'BEGIN{FS=OFS="="} $1==k {print k "=" v; next} {print}' \
|
|
.env > .env.tmp && mv .env.tmp .env
|
|
else
|
|
echo "${key}=${value}" >> .env
|
|
fi
|
|
}
|
|
upsert_env TEAMS_APP_ID "$TEAMS_APP_ID"
|
|
upsert_env TEAMS_APP_PASSWORD "$TEAMS_APP_PASSWORD"
|
|
upsert_env TEAMS_APP_TYPE "$TEAMS_APP_TYPE"
|
|
if [ -n "${TEAMS_APP_TENANT_ID:-}" ]; then
|
|
upsert_env TEAMS_APP_TENANT_ID "$TEAMS_APP_TENANT_ID"
|
|
fi
|
|
|
|
log "Restarting service so the new adapter picks up the credentials…"
|
|
# shellcheck source=setup/lib/install-slug.sh
|
|
source "$PROJECT_ROOT/setup/lib/install-slug.sh"
|
|
case "$(uname -s)" in
|
|
Darwin)
|
|
launchctl kickstart -k "gui/$(id -u)/$(launchd_label)" >&2 2>/dev/null || true
|
|
;;
|
|
Linux)
|
|
systemctl --user restart "$(systemd_unit)" >&2 2>/dev/null \
|
|
|| sudo systemctl restart "$(systemd_unit)" >&2 2>/dev/null \
|
|
|| true
|
|
;;
|
|
esac
|
|
|
|
# Give the Teams adapter a moment to register its webhook before the driver
|
|
# continues.
|
|
sleep 5
|
|
|
|
emit_status success
|