entrypoint.sh

#!/bin/sh
set -e

CONFIG_FILE="/nullclaw-data/.nullclaw/config.json"
TEMPLATE_FILE="/app/config.template.json"

: "${DEFAULT_MODEL:=openrouter/anthropic/claude-sonnet-4}"
: "${PORT:=3000}"
: "${GATEWAY_HOST:=0.0.0.0}"
: "${REQUIRE_PAIRING:=true}"
: "${ALLOW_PUBLIC_BIND:=true}"
: "${AUTONOMY_LEVEL:=supervised}"
: "${WORKSPACE_ONLY:=true}"
: "${MAX_ACTIONS_PER_HOUR:=20}"
: "${MEMORY_BACKEND:=sqlite}"
: "${SANDBOX_BACKEND:=auto}"
: "${AUDIT_ENABLED:=true}"

build_providers() {
    providers=""
    first=1
    
    for provider in openrouter anthropic openai groq xai deepseek mistral vertex; do
        key_var=$(echo "$provider" | tr '[:lower:]' '[:upper:]')_API_KEY
        eval "key_value=\$$key_var"
        
        if [ -n "$key_value" ]; then
            [ $first -eq 0 ] && providers="${providers},"
            providers="${providers}\"${provider}\": {\"api_key\": \"${key_value}\"}"
            first=0
        fi
    done
    
    if [ -n "$OLLAMA_API_KEY" ]; then
        [ $first -eq 0 ] && providers="${providers},"
        providers="${providers}\"ollama\": {\"base_url\": \"${OLLAMA_API_KEY}\"}"
    fi
    
    echo "$providers"
}

build_channels() {
    channels="\"cli\": true"
    
    if [ -n "$TELEGRAM_BOT_TOKEN" ]; then
        allow_from="[]"
        if [ -n "$TELEGRAM_ALLOW_FROM" ]; then
            if [ "$TELEGRAM_ALLOW_FROM" = "*" ]; then
                allow_from="[\"*\"]"
            else
                allow_from=$(echo "$TELEGRAM_ALLOW_FROM" | sed 's/,/","/g' | sed 's/^/["/' | sed 's/$/"]/')
            fi
        fi
        channels="${channels},\"telegram\": {\"accounts\": {\"main\": {\"bot_token\": \"${TELEGRAM_BOT_TOKEN}\", \"allow_from\": ${allow_from}}}}"
        echo "  Telegram: enabled" >&2
    fi
    
    echo "$channels"
}

PROVIDERS=$(build_providers)

if [ -z "$PROVIDERS" ]; then
    echo "Error: No API keys provided."
    echo "Set at least one: OPENROUTER_API_KEY, ANTHROPIC_API_KEY, OPENAI_API_KEY, etc."
    exit 1
fi

CHANNELS=$(build_channels)

echo "Generating NullClaw config from template..."

sed -e "s|{{PROVIDERS}}|$PROVIDERS|g" \
    -e "s|{{CHANNELS}}|$CHANNELS|g" \
    -e "s|{{DEFAULT_MODEL}}|$DEFAULT_MODEL|g" \
    -e "s|{{GATEWAY_HOST}}|$GATEWAY_HOST|g" \
    -e "s|{{PORT}}|$PORT|g" \
    -e "s|{{REQUIRE_PAIRING}}|$REQUIRE_PAIRING|g" \
    -e "s|{{ALLOW_PUBLIC_BIND}}|$ALLOW_PUBLIC_BIND|g" \
    -e "s|{{AUTONOMY_LEVEL}}|$AUTONOMY_LEVEL|g" \
    -e "s|{{WORKSPACE_ONLY}}|$WORKSPACE_ONLY|g" \
    -e "s|{{MAX_ACTIONS_PER_HOUR}}|$MAX_ACTIONS_PER_HOUR|g" \
    -e "s|{{MEMORY_BACKEND}}|$MEMORY_BACKEND|g" \
    -e "s|{{SANDBOX_BACKEND}}|$SANDBOX_BACKEND|g" \
    -e "s|{{AUDIT_ENABLED}}|$AUDIT_ENABLED|g" \
    "$TEMPLATE_FILE" > "$CONFIG_FILE"

echo "Config generated:"
echo "  Model: $DEFAULT_MODEL"
echo "  Gateway: $GATEWAY_HOST:$PORT"
echo "  Autonomy: $AUTONOMY_LEVEL"

mkdir -p /nullclaw-data/workspace

exec nullclaw "$@"