源码快照 @ 2026-09-02 (source-only, 剔除非源码素材)

packaging/docker/microsandbox-entrypoint.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env sh
+set -eu
+
+OPENWORK_WORKSPACE="${OPENWORK_WORKSPACE:-/workspace}"
+OPENWORK_DATA_DIR="${OPENWORK_DATA_DIR:-/data/openwork-server}"
+OPENWORK_SIDECAR_DIR="${OPENWORK_SIDECAR_DIR:-/data/sidecars}"
+OPENWORK_PORT="${OPENWORK_PORT:-8787}"
+OPENWORK_TOKEN="${OPENWORK_TOKEN:-microsandbox-token}"
+OPENWORK_HOST_TOKEN="${OPENWORK_HOST_TOKEN:-microsandbox-host-token}"
+OPENWORK_APPROVAL_MODE="${OPENWORK_APPROVAL_MODE:-auto}"
+OPENWORK_CORS_ORIGINS="${OPENWORK_CORS_ORIGINS:-*}"
+OPENWORK_CONNECT_HOST="${OPENWORK_CONNECT_HOST:-127.0.0.1}"
+OPENWORK_EXTENSIONS_PLUGIN_DIR="${OPENWORK_EXTENSIONS_PLUGIN_DIR:-/opt/openwork/opencode-plugins}"
+HOME="${HOME:-/root}"
+USER="${USER:-root}"
+SHELL="${SHELL:-/bin/sh}"
+XDG_CONFIG_HOME="${XDG_CONFIG_HOME:-$HOME/.config}"
+XDG_CACHE_HOME="${XDG_CACHE_HOME:-$HOME/.cache}"
+XDG_DATA_HOME="${XDG_DATA_HOME:-$HOME/.local/share}"
+XDG_STATE_HOME="${XDG_STATE_HOME:-$HOME/.local/state}"
+
+if [ "$HOME" = "/" ]; then
+  HOME=/root
+  XDG_CONFIG_HOME="$HOME/.config"
+  XDG_CACHE_HOME="$HOME/.cache"
+  XDG_DATA_HOME="$HOME/.local/share"
+  XDG_STATE_HOME="$HOME/.local/state"
+fi
+
+export HOME USER SHELL XDG_CONFIG_HOME XDG_CACHE_HOME XDG_DATA_HOME XDG_STATE_HOME
+export OPENWORK_DATA_DIR OPENWORK_TOKEN OPENWORK_HOST_TOKEN OPENWORK_EXTENSIONS_PLUGIN_DIR
+export OPENWORK_MANAGE_OPENCODE=1
+export OPENWORK_OPENCODE_BIN=/usr/local/bin/opencode
+
+mkdir -p "$OPENWORK_WORKSPACE" "$OPENWORK_DATA_DIR" "$OPENWORK_SIDECAR_DIR"
+mkdir -p "$HOME" "$XDG_CONFIG_HOME" "$XDG_CACHE_HOME" "$XDG_DATA_HOME" "$XDG_STATE_HOME"
+
+printf '%s\n' "Starting OpenWork micro-sandbox"
+printf '%s\n' "- workspace: $OPENWORK_WORKSPACE"
+printf '%s\n' "- home: $HOME"
+printf '%s\n' "- openwork url: http://$OPENWORK_CONNECT_HOST:$OPENWORK_PORT"
+printf '%s\n' "- client token: $OPENWORK_TOKEN"
+printf '%s\n' "- host token: $OPENWORK_HOST_TOKEN"
+printf '%s\n' "- health: curl http://$OPENWORK_CONNECT_HOST:$OPENWORK_PORT/health"
+printf '%s\n' "- auth test: curl -H \"Authorization: Bearer $OPENWORK_TOKEN\" http://$OPENWORK_CONNECT_HOST:$OPENWORK_PORT/workspaces"
+
+exec openwork-server \
+  --workspace "$OPENWORK_WORKSPACE" \
+  --host 0.0.0.0 \
+  --port "$OPENWORK_PORT" \
+  --token "$OPENWORK_TOKEN" \
+  --host-token "$OPENWORK_HOST_TOKEN" \
+  --approval "$OPENWORK_APPROVAL_MODE" \
+  --cors "$OPENWORK_CORS_ORIGINS" \
+  --verbose