openclaw-multi-auto 1.0.9 → 1.1.1

package/scripts/install-maca.sh

@@ -0,0 +1,173 @@
+#!/usr/bin/env bash
+# =================================================================
+# OpenClaw 离线增强版部署脚本 (适配 bundledDependencies + 中国区镜像)
+# 核心逻辑：修复权限 -> 固化环境 -> 极速安装核心依赖 -> 实例初始化
+# =================================================================
+
+set -e
+
+# 颜色定义
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m'
+
+MIN_NODE_VERSION="22.12.0"
+
+echo -e "${BLUE}================================================${NC}"
+echo -e "${BLUE}   OpenClaw 极速一键部署       ${NC}"
+echo -e "${BLUE}================================================${NC}"
+
+# ==================== 1. 彻底修复权限污染 ====================
+echo -e "${YELLOW}🔧 正在修复本地环境权限...${NC}"
+# 收回被 root 误占用的 npm 目录所有权，防止 EACCES 报错
+sudo chown -R $(id -u):$(id -g) "$HOME/.npm" 2>/dev/null || true
+
+# --- 新增：NPM 10 物理去毒逻辑 (防止因旧配置导致 npm 崩溃) ---
+if [ -f "$HOME/.npmrc" ]; then
+    # 使用 sed 直接操作文件，避开已经崩溃的 npm 命令
+    sed -i '' '/sharp_binary_host/d' "$HOME/.npmrc" 2>/dev/null || sed -i '/sharp_binary_host/d' "$HOME/.npmrc" 2>/dev/null || true
+    sed -i '' '/sharp_libvips_binary_host/d' "$HOME/.npmrc" 2>/dev/null || sed -i '/sharp_libvips_binary_host/d' "$HOME/.npmrc" 2>/dev/null || true
+fi
+unset npm_config_sharp_binary_host
+unset npm_config_sharp_libvips_binary_host
+# -------------------------------------------------------
+
+# ==================== 2. 系统环境识别 ====================
+OS="$(uname -s)"
+ARCH="$(uname -m)"
+if [[ "$SHELL" == */zsh ]]; then
+    CONF_FILE="$HOME/.zshrc"
+else
+    CONF_FILE="$HOME/.bashrc"
+fi
+
+# ==================== 3. 基础编译工具链 (针对原生模块) ====================
+if [[ "$OS" == "Linux" ]]; then
+    echo -e "${YELLOW}🔍 检查系统编译依赖 (build-essential)...${NC}"
+    if command -v apt-get &> /dev/null; then
+        sudo apt-get update -qq && sudo apt-get install -y -qq build-essential python3 make gcc g++ 2>/dev/null || true
+    fi
+    # 强制让 npm 知道 python 路径，防止 node-pty 编译失败
+    PYTHON_PATH=$(command -v python3 || command -v python)
+    [ -n "$PYTHON_PATH" ] && npm config set python "$PYTHON_PATH" 2>/dev/null || true
+fi
+
+# ==================== 4. Node.js 环境镜像安装 ====================
+check_node() {
+    if ! command -v node &> /dev/null; then return 1; fi
+    local CUR_V=$(node -v | sed 's/v//')
+    # 简单的版本号比较逻辑
+    [[ "$(printf '%s\n%s' "$MIN_NODE_VERSION" "$CUR_V" | sort -V | head -n1)" == "$MIN_NODE_VERSION" ]]
+}
+
+if ! check_node; then
+    echo -e "${YELLOW}📥 正在从国内镜像站下载 Node.js v${MIN_NODE_VERSION}...${NC}"
+    DIST="linux-x64"
+    [[ "$OS" == "Darwin" ]] && DIST="darwin-x64"
+    [[ "$OS" == "Darwin" && "$ARCH" == "arm64" ]] && DIST="darwin-arm64"
+    [[ "$OS" == "Linux" && "$ARCH" == "aarch64" ]] && DIST="linux-arm64"
+    
+    URL="https://npmmirror.com/mirrors/node/v${MIN_NODE_VERSION}/node-v${MIN_NODE_VERSION}-${DIST}.tar.gz"
+    TEMP_DIR=$(mktemp -d)
+    curl -L "$URL" -o "$TEMP_DIR/node.tar.gz"
+    
+    sudo mkdir -p /usr/local/lib/nodejs
+    sudo tar -xzf "$TEMP_DIR/node.tar.gz" -C /usr/local/lib/nodejs
+    NODE_DIR=$(find /usr/local/lib/nodejs -maxdepth 1 -type d -name "node-v${MIN_NODE_VERSION}*")
+    
+    sudo ln -sf "$NODE_DIR/bin/node" /usr/local/bin/node
+    sudo ln -sf "$NODE_DIR/bin/npm" /usr/local/bin/npm
+    sudo ln -sf "$NODE_DIR/bin/npx" /usr/local/bin/npx
+    rm -rf "$TEMP_DIR"
+fi
+echo -e "${GREEN}✅ Node.js 环境已就绪: $(node -v)${NC}"
+
+# ==================== 5. 配置用户级全局路径 ====================
+echo -e "${YELLOW}🔧 配置用户全局安装路径 ($HOME/.npm-global)...${NC}"
+NPM_GLOBAL_BIN="$HOME/.npm-global"
+mkdir -p "$NPM_GLOBAL_BIN/bin"
+npm config set prefix "$NPM_GLOBAL_BIN"
+
+# 立即注入当前进程环境变量
+export PATH="$NPM_GLOBAL_BIN/bin:$PATH"
+# 永久注入配置文件
+if ! grep -q ".npm-global/bin" "$CONF_FILE" 2>/dev/null; then
+    echo -e "\n# OpenClaw PATH\nexport PATH=\"\$HOME/.npm-global/bin:\$PATH\"" >> "$CONF_FILE"
+fi
+
+# ==================== 6. 建立 GitHub 隧道 (针对插件克隆) ====================
+echo -e "${YELLOW}🚀 切换 GitHub 稳定隧道镜像 (moeyy 代理)...${NC}"
+git config --global url."https://github.moeyy.xyz/https://github.com/".insteadOf "https://github.com/"
+git config --global http.sslVerify false
+
+# ==================== 6.5 补全编译依赖与镜像 ====================
+echo -e "${YELLOW}🛠️  正在补全编译工具与二进制镜像...${NC}"
+
+# 1. 安装 pnpm (项目 package.json 明确要求使用 pnpm 10)
+npm install -g pnpm --registry=https://registry.npmmirror.com
+
+# 2. 确保 node-gyp 编译环境 (针对 macOS)
+if [[ "$OS" == "Darwin" ]]; then
+    export CFLAGS="-Wno-error=implicit-function-declaration"
+fi
+
+# ==================== 7. 安装核心依赖与 OpenClaw ====================
+echo -e "${YELLOW}📥 正在以 NPM 10 安全模式安装 (跳过脚本校验)...${NC}"
+
+# 1. 物理清理残留
+rm -rf ~/.npm-global/lib_node_modules/openclaw-multi-auto 2>/dev/null || true
+
+# 2. 注入二进制镜像 (环境变量方式)
+export SHARP_BINARY_HOST="https://npmmirror.com/mirrors/sharp"
+export SHARP_LIBVIPS_BINARY_HOST="https://npmmirror.com/mirrors/sharp-libvips"
+export NODEJS_ORG_MIRROR="https://npmmirror.com/mirrors/node"
+
+echo -e "${YELLOW}📥 正在执行全局安装...${NC}"
+
+# 核心改动：使用 --ignore-scripts 避开全局安装时的 sharp 报错
+npm install -g openclaw-multi-auto@latest \
+    --registry=https://registry.npmmirror.com \
+    --unsafe-perm=true
+
+# 3. 补救措施：手动确保 bin 链接正确
+npm link openclaw-multi-auto --registry=https://registry.npmmirror.com 2>/dev/null || true
+
+echo -e "${GREEN}✅ 程序包已部署。${NC}"
+
+# ==================== 8. 自动化实例初始化 ====================
+GLOBAL_ROOT=$(npm config get prefix)
+# 定位脚本路径
+CREATE_SCRIPT="$GLOBAL_ROOT/lib/node_modules/openclaw-multi-auto/scripts/create-instance.sh"
+
+if [ ! -f "$CREATE_SCRIPT" ]; then
+    # 兼容本地开发环境路径
+    CREATE_SCRIPT="$(pwd)/scripts/create-instance.sh"
+fi
+
+echo -e "${YELLOW}🏗️  正在调用全自动初始化程序...${NC}"
+
+if [ -f "$CREATE_SCRIPT" ]; then
+    chmod +x "$CREATE_SCRIPT"
+    # 执行全自动创建并启动逻辑
+    bash "$CREATE_SCRIPT" "yunwei" "18790" "$PROVIDER" "$USR_KEY"
+else
+    echo -e "${RED}⚠️  警告：未找到实例创建脚本（create-instance.sh），请检查安装。${NC}"
+fi
+
+# ==================== 9. 部署反馈 ====================
+INSTANCE_DIR="$HOME/openclaws/yunwei"
+if [ -d "$INSTANCE_DIR" ]; then
+    # 提取端口号用于展示
+    FINAL_PORT=$(grep '"port":' "$INSTANCE_DIR/config/openclaw.json" | awk -F': ' '{print $2}' | tr -d ', ' | xargs)
+    
+    echo -e "${GREEN}================================================${NC}"
+    echo -e "${GREEN}🎉 OpenClaw 环境部署及 [yunwei] 实例已上线！${NC}"
+    echo -e "🌐 访问地址: ${BLUE}http://localhost:${FINAL_PORT:-18790}${NC}"
+    echo -e "📄 实时日志: ${BLUE}tail -f ${INSTANCE_DIR}/workspace/server.log${NC}"
+    echo -e "💡 交互管理: ${YELLOW}openclaw tui${NC}"
+    echo -e "${GREEN}================================================${NC}"
+else
+    echo -e "${YELLOW}💡 环境安装完成。由于未自动创建实例，请手动运行 'create-instance.sh'。${NC}"
+fi

package/scripts/install.ps1

@@ -0,0 +1,329 @@
+# OpenClaw Installer for Windows (PowerShell)
+# Usage: iwr -useb https://openclaw.ai/install.ps1 | iex
+# Or: & ([scriptblock]::Create((iwr -useb https://openclaw.ai/install.ps1))) -NoOnboard
+
+param(
+    [string]$InstallMethod = "npm",
+    [string]$Tag = "latest",
+    [string]$GitDir = "$env:USERPROFILE\openclaw",
+    [switch]$NoOnboard,
+    [switch]$NoGitUpdate,
+    [switch]$DryRun
+)
+
+$ErrorActionPreference = "Stop"
+
+# Colors
+$ACCENT = "`e[38;2;255;77;77m"    # coral-bright
+$SUCCESS = "`e[38;2;0;229;204m"    # cyan-bright
+$WARN = "`e[38;2;255;176;32m"     # amber
+$ERROR = "`e[38;2;230;57;70m"     # coral-mid
+$MUTED = "`e[38;2;90;100;128m"    # text-muted
+$NC = "`e[0m"                     # No Color
+
+function Write-Host {
+    param([string]$Message, [string]$Level = "info")
+    $msg = switch ($Level) {
+        "success" { "$SUCCESS✓$NC $Message" }
+        "warn" { "$WARN!$NC $Message" }
+        "error" { "$ERROR✗$NC $Message" }
+        default { "$MUTED·$NC $Message" }
+    }
+    Microsoft.PowerShell.Host\Write-Host $msg
+}
+
+function Write-Banner {
+    Write-Host ""
+    Write-Host "${ACCENT}  🦞 OpenClaw Installer$NC" -Level info
+    Write-Host "${MUTED}  All your chats, one OpenClaw.$NC" -Level info
+    Write-Host ""
+}
+
+function Get-ExecutionPolicyStatus {
+    $policy = Get-ExecutionPolicy
+    if ($policy -eq "Restricted" -or $policy -eq "AllSigned") {
+        return @{ Blocked = $true; Policy = $policy }
+    }
+    return @{ Blocked = $false; Policy = $policy }
+}
+
+function Test-Admin {
+    $currentUser = [Security.Principal.WindowsIdentity]::GetCurrent()
+    $principal = New-Object Security.Principal.WindowsPrincipal($currentUser)
+    return $principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
+}
+
+function Ensure-ExecutionPolicy {
+    $status = Get-ExecutionPolicyStatus
+    if ($status.Blocked) {
+        Write-Host "PowerShell execution policy is set to: $($status.Policy)" -Level warn
+        Write-Host "This prevents scripts like npm.ps1 from running." -Level warn
+        Write-Host ""
+        
+        # Try to set execution policy for current process
+        try {
+            Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope Process -ErrorAction Stop
+            Write-Host "Set execution policy to RemoteSigned for current process" -Level success
+            return $true
+        } catch {
+            Write-Host "Could not automatically set execution policy" -Level error
+            Write-Host ""
+            Write-Host "To fix this, run:" -Level info
+            Write-Host "  Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope Process" -Level info
+            Write-Host ""
+            Write-Host "Or run PowerShell as Administrator and execute:" -Level info
+            Write-Host "  Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope LocalMachine" -Level info
+            return $false
+        }
+    }
+    return $true
+}
+
+function Get-NodeVersion {
+    try {
+        $version = node --version 2>$null
+        if ($version) {
+            return $version -replace '^v', ''
+        }
+    } catch { }
+    return $null
+}
+
+function Get-NpmVersion {
+    try {
+        $version = npm --version 2>$null
+        if ($version) {
+            return $version
+        }
+    } catch { }
+    return $null
+}
+
+function Install-Node {
+    Write-Host "Node.js not found" -Level info
+    Write-Host "Installing Node.js..." -Level info
+    
+    # Try winget first
+    if (Get-Command winget -ErrorAction SilentlyContinue) {
+        Write-Host "  Using winget..." -Level info
+        try {
+            winget install OpenJS.NodeJS.LTS --accept-package-agreements --accept-source-agreements 2>&1 | Out-Null
+            # Refresh PATH
+            $env:Path = [System.Environment]::GetEnvironmentVariable("Path","Machine") + ";" + [System.Environment]::GetEnvironmentVariable("Path","User")
+            Write-Host "  Node.js installed via winget" -Level success
+            return $true
+        } catch {
+            Write-Host "  Winget install failed: $_" -Level warn
+        }
+    }
+    
+    # Try chocolatey
+    if (Get-Command choco -ErrorAction SilentlyContinue) {
+        Write-Host "  Using chocolatey..." -Level info
+        try {
+            choco install nodejs-lts -y 2>&1 | Out-Null
+            $env:Path = [System.Environment]::GetEnvironmentVariable("Path","Machine") + ";" + [System.Environment]::GetEnvironmentVariable("Path","User")
+            Write-Host "  Node.js installed via chocolatey" -Level success
+            return $true
+        } catch {
+            Write-Host "  Chocolatey install failed: $_" -Level warn
+        }
+    }
+    
+    # Try scoop
+    if (Get-Command scoop -ErrorAction SilentlyContinue) {
+        Write-Host "  Using scoop..." -Level info
+        try {
+            scoop install nodejs-lts 2>&1 | Out-Null
+            $env:Path = [System.Environment]::GetEnvironmentVariable("Path","Machine") + ";" + [System.Environment]::GetEnvironmentVariable("Path","User")
+            Write-Host "  Node.js installed via scoop" -Level success
+            return $true
+        } catch {
+            Write-Host "  Scoop install failed: $_" -Level warn
+        }
+    }
+    
+    Write-Host "Could not install Node.js automatically" -Level error
+    Write-Host "Please install Node.js 22+ manually from: https://nodejs.org" -Level info
+    return $false
+}
+
+function Ensure-Node {
+    $nodeVersion = Get-NodeVersion
+    if ($nodeVersion) {
+        $major = [int]($nodeVersion -split '\.')[0]
+        if ($major -ge 22) {
+            Write-Host "Node.js v$nodeVersion found" -Level success
+            return $true
+        }
+        Write-Host "Node.js v$nodeVersion found, but need v22+" -Level warn
+    }
+    return Install-Node
+}
+
+function Get-GitVersion {
+    try {
+        $version = git --version 2>$null
+        if ($version) {
+            return $version
+        }
+    } catch { }
+    return $null
+}
+
+function Install-Git {
+    Write-Host "Git not found" -Level info
+    
+    if (Get-Command winget -ErrorAction SilentlyContinue) {
+        Write-Host "  Installing Git via winget..." -Level info
+        try {
+            winget install Git.Git --accept-package-agreements --accept-source-agreements 2>&1 | Out-Null
+            $env:Path = [System.Environment]::GetEnvironmentVariable("Path","Machine") + ";" + [System.Environment]::GetEnvironmentVariable("Path","User")
+            Write-Host "  Git installed" -Level success
+            return $true
+        } catch {
+            Write-Host "  Winget install failed" -Level warn
+        }
+    }
+    
+    Write-Host "Please install Git for Windows from: https://git-scm.com" -Level error
+    return $false
+}
+
+function Ensure-Git {
+    $gitVersion = Get-GitVersion
+    if ($gitVersion) {
+        Write-Host "$gitVersion found" -Level success
+        return $true
+    }
+    return Install-Git
+}
+
+function Install-OpenClawNpm {
+    param([string]$Version = "latest")
+    
+    Write-Host "Installing OpenClaw (openclaw@$Version)..." -Level info
+    
+    try {
+        # Use -ExecutionPolicy Bypass to handle restricted execution policy
+        npm install -g openclaw@$Version --no-fund --no-audit 2>&1
+        Write-Host "OpenClaw installed" -Level success
+        return $true
+    } catch {
+        Write-Host "npm install failed: $_" -Level error
+        return $false
+    }
+}
+
+function Install-OpenClawGit {
+    param([string]$RepoDir, [switch]$Update)
+    
+    Write-Host "Installing OpenClaw from git..." -Level info
+    
+    if (!(Test-Path $RepoDir)) {
+        Write-Host "  Cloning repository..." -Level info
+        git clone https://github.com/openclaw/openclaw.git $RepoDir 2>&1
+    } elseif ($Update) {
+        Write-Host "  Updating repository..." -Level info
+        git -C $RepoDir pull --rebase 2>&1
+    }
+    
+    # Install pnpm if not present
+    if (!(Get-Command pnpm -ErrorAction SilentlyContinue)) {
+        Write-Host "  Installing pnpm..." -Level info
+        npm install -g pnpm 2>&1
+    }
+    
+    # Install dependencies
+    Write-Host "  Installing dependencies..." -Level info
+    pnpm install --dir $RepoDir 2>&1
+    
+    # Build
+    Write-Host "  Building..." -Level info
+    pnpm --dir $RepoDir build 2>&1
+    
+    # Create wrapper
+    $wrapperDir = "$env:USERPROFILE\.local\bin"
+    if (!(Test-Path $wrapperDir)) {
+        New-Item -ItemType Directory -Path $wrapperDir -Force | Out-Null
+    }
+    
+    @"
+@echo off
+node "%~dp0..\openclaw\dist\entry.js" %*
+"@ | Out-File -FilePath "$wrapperDir\openclaw.cmd" -Encoding ASCII -Force
+    
+    Write-Host "OpenClaw installed" -Level success
+    return $true
+}
+
+function Add-ToPath {
+    param([string]$Path)
+    
+    $currentPath = [Environment]::GetEnvironmentVariable("Path", "User")
+    if ($currentPath -notlike "*$Path*") {
+        [Environment]::SetEnvironmentVariable("Path", "$currentPath;$Path", "User")
+        Write-Host "Added $Path to user PATH" -Level info
+    }
+}
+
+# Main
+function Main {
+    Write-Banner
+    
+    Write-Host "Windows detected" -Level success
+    
+    # Check and handle execution policy FIRST, before any npm calls
+    if (!(Ensure-ExecutionPolicy)) {
+        Write-Host ""
+        Write-Host "Installation cannot continue due to execution policy restrictions" -Level error
+        exit 1
+    }
+    
+    if (!(Ensure-Node)) {
+        exit 1
+    }
+    
+    if ($InstallMethod -eq "git") {
+        if (!(Ensure-Git)) {
+            exit 1
+        }
+        
+        if ($DryRun) {
+            Write-Host "[DRY RUN] Would install OpenClaw from git to $GitDir" -Level info
+        } else {
+            Install-OpenClawGit -RepoDir $GitDir -Update:(-not $NoGitUpdate)
+        }
+    } else {
+        # npm method
+        if (!(Ensure-Git)) {
+            Write-Host "Git is required for npm installs. Please install Git and try again." -Level warn
+        }
+        
+        if ($DryRun) {
+            Write-Host "[DRY RUN] Would install OpenClaw via npm (tag: $Tag)" -Level info
+        } else {
+            if (!(Install-OpenClawNpm -Version $Tag)) {
+                exit 1
+            }
+        }
+    }
+    
+    # Try to add npm global bin to PATH
+    try {
+        $npmPrefix = npm config get prefix 2>$null
+        if ($npmPrefix) {
+            Add-ToPath -Path "$npmPrefix"
+        }
+    } catch { }
+    
+    if (!$NoOnboard -and !$DryRun) {
+        Write-Host ""
+        Write-Host "Run 'openclaw onboard' to complete setup" -Level info
+    }
+    
+    Write-Host ""
+    Write-Host "🦞 OpenClaw installed successfully!" -Level success
+}
+
+Main

package/scripts/ios-configure-signing.sh

@@ -0,0 +1,100 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+IOS_DIR="${ROOT_DIR}/apps/ios"
+TEAM_ID_SCRIPT="${ROOT_DIR}/scripts/ios-team-id.sh"
+LOCAL_SIGNING_FILE="${IOS_DIR}/.local-signing.xcconfig"
+
+sanitize_identifier_segment() {
+  local raw="${1:-}"
+  raw="$(printf '%s' "$raw" | tr '[:upper:]' '[:lower:]')"
+  raw="$(printf '%s' "$raw" | sed -E 's/[^a-z0-9]+/-/g; s/^-+//; s/-+$//; s/-+/-/g')"
+  if [[ -z "$raw" ]]; then
+    raw="local"
+  fi
+  printf '%s\n' "$raw"
+}
+
+normalize_bundle_id() {
+  local raw="${1:-}"
+  raw="$(printf '%s' "$raw" | tr '[:upper:]' '[:lower:]')"
+  raw="$(printf '%s' "$raw" | sed -E 's/[^a-z0-9.-]+/-/g; s/\.+/./g; s/^-+//; s/[.-]+$//')"
+  if [[ -z "$raw" ]]; then
+    raw="ai.openclaw.ios.test.local"
+  fi
+  printf '%s\n' "$raw"
+}
+
+if [[ ! -x "${TEAM_ID_SCRIPT}" ]]; then
+  echo "ERROR: Missing team detection helper: ${TEAM_ID_SCRIPT}" >&2
+  exit 1
+fi
+
+team_id=""
+if team_id="$("${TEAM_ID_SCRIPT}" 2>/dev/null)"; then
+  :
+else
+  if [[ "${IOS_SIGNING_REQUIRED:-0}" == "1" ]]; then
+    "${TEAM_ID_SCRIPT}"
+    exit 1
+  fi
+
+  echo "WARN: Unable to detect an Apple Team ID; keeping existing iOS signing override (if any)." >&2
+  exit 0
+fi
+
+if [[ -n "${OPENCLAW_IOS_BUNDLE_SUFFIX:-}" ]]; then
+  identity_source="${OPENCLAW_IOS_BUNDLE_SUFFIX}"
+else
+  identity_source="${USER:-}"
+  if [[ -z "${identity_source}" ]]; then
+    identity_source="$(id -un 2>/dev/null || true)"
+  fi
+  team_segment="$(sanitize_identifier_segment "${team_id}")"
+  identity_source="${identity_source}-${team_segment}"
+fi
+bundle_suffix="$(sanitize_identifier_segment "${identity_source}")"
+
+bundle_base="${OPENCLAW_IOS_APP_BUNDLE_ID:-${OPENCLAW_IOS_BUNDLE_ID_BASE:-}}"
+if [[ -z "${bundle_base}" ]]; then
+  bundle_base="ai.openclaw.ios.test.${bundle_suffix}"
+fi
+bundle_base="$(normalize_bundle_id "${bundle_base}")"
+
+share_bundle_id="${OPENCLAW_IOS_SHARE_BUNDLE_ID:-${bundle_base}.share}"
+watch_app_bundle_id="${OPENCLAW_IOS_WATCH_APP_BUNDLE_ID:-${bundle_base}.watchkitapp}"
+watch_extension_bundle_id="${OPENCLAW_IOS_WATCH_EXTENSION_BUNDLE_ID:-${watch_app_bundle_id}.extension}"
+
+code_sign_style="${OPENCLAW_IOS_CODE_SIGN_STYLE:-Automatic}"
+app_profile="${OPENCLAW_IOS_APP_PROFILE:-}"
+share_profile="${OPENCLAW_IOS_SHARE_PROFILE:-}"
+
+tmp_file="$(mktemp "${TMPDIR:-/tmp}/openclaw-ios-signing.XXXXXX")"
+cat >"${tmp_file}" <<EOF
+// Auto-generated by scripts/ios-configure-signing.sh.
+// This file is local-only and should not be committed.
+// Override values with env vars if needed:
+// OPENCLAW_IOS_APP_BUNDLE_ID / OPENCLAW_IOS_BUNDLE_ID_BASE
+// OPENCLAW_IOS_SHARE_BUNDLE_ID / OPENCLAW_IOS_WATCH_APP_BUNDLE_ID / OPENCLAW_IOS_WATCH_EXTENSION_BUNDLE_ID
+// OPENCLAW_IOS_CODE_SIGN_STYLE / OPENCLAW_IOS_APP_PROFILE / OPENCLAW_IOS_SHARE_PROFILE
+OPENCLAW_CODE_SIGN_STYLE = ${code_sign_style}
+OPENCLAW_DEVELOPMENT_TEAM = ${team_id}
+// Keep legacy key for compatibility with older signing config paths.
+OPENCLAW_IOS_SELECTED_TEAM = ${team_id}
+OPENCLAW_APP_BUNDLE_ID = ${bundle_base}
+OPENCLAW_SHARE_BUNDLE_ID = ${share_bundle_id}
+OPENCLAW_WATCH_APP_BUNDLE_ID = ${watch_app_bundle_id}
+OPENCLAW_WATCH_EXTENSION_BUNDLE_ID = ${watch_extension_bundle_id}
+OPENCLAW_APP_PROFILE = ${app_profile}
+OPENCLAW_SHARE_PROFILE = ${share_profile}
+EOF
+
+if [[ -f "${LOCAL_SIGNING_FILE}" ]] && cmp -s "${tmp_file}" "${LOCAL_SIGNING_FILE}"; then
+  rm -f "${tmp_file}"
+  echo "iOS signing config already up to date: team=${team_id} app=${bundle_base}"
+  exit 0
+fi
+
+mv "${tmp_file}" "${LOCAL_SIGNING_FILE}"
+echo "Configured iOS signing: team=${team_id} app=${bundle_base}"