openclaw-multi-auto 1.0.9 → 1.1.1

package/scripts/termux-auth-widget.sh

@@ -0,0 +1,81 @@
+#!/data/data/com.termux/files/usr/bin/bash
+# OpenClaw Auth Widget for Termux
+# Place in ~/.shortcuts/ for Termux:Widget
+#
+# This widget checks auth status and helps with re-auth if needed.
+# It's designed for quick one-tap checking from phone home screen.
+
+# Server hostname (via Tailscale or SSH config)
+SERVER="${OPENCLAW_SERVER:-${CLAWDBOT_SERVER:-l36}}"
+
+# Check auth status
+termux-toast "Checking OpenClaw auth..."
+
+STATUS=$(ssh "$SERVER" '$HOME/openclaw/scripts/claude-auth-status.sh simple' 2>&1)
+EXIT_CODE=$?
+
+case "$STATUS" in
+    OK)
+        # Get remaining time
+        DETAILS=$(ssh "$SERVER" '$HOME/openclaw/scripts/claude-auth-status.sh json' 2>&1)
+        HOURS=$(echo "$DETAILS" | jq -r '.claude_code.status' | grep -oP '\d+(?=h)' || echo "?")
+
+        termux-vibrate -d 50
+        termux-toast "Auth OK (${HOURS}h left)"
+        ;;
+
+    CLAUDE_EXPIRING|OPENCLAW_EXPIRING|CLAWDBOT_EXPIRING)
+        termux-vibrate -d 100
+
+        # Ask if user wants to re-auth now
+        CHOICE=$(termux-dialog radio -t "Auth Expiring Soon" -v "Re-auth now,Check later,Dismiss")
+        SELECTED=$(echo "$CHOICE" | jq -r '.text // "Dismiss"')
+
+        case "$SELECTED" in
+            "Re-auth now")
+                termux-toast "Opening auth page..."
+                termux-open-url "https://console.anthropic.com/settings/api-keys"
+
+                # Show instructions
+                termux-dialog confirm -t "Re-auth Instructions" -i "1. Create/copy API key from browser
+2. Return here and tap OK
+3. SSH to server and paste key"
+
+                # Open terminal to server
+                am start -n com.termux/com.termux.app.TermuxActivity -a android.intent.action.MAIN
+                termux-toast "Run: ssh $SERVER '$HOME/openclaw/scripts/mobile-reauth.sh'"
+                ;;
+            *)
+                termux-toast "Reminder: Auth expires soon"
+                ;;
+        esac
+        ;;
+
+    CLAUDE_EXPIRED|OPENCLAW_EXPIRED|CLAWDBOT_EXPIRED)
+        termux-vibrate -d 300
+
+        CHOICE=$(termux-dialog radio -t "Auth Expired!" -v "Re-auth now,Dismiss")
+        SELECTED=$(echo "$CHOICE" | jq -r '.text // "Dismiss"')
+
+        case "$SELECTED" in
+            "Re-auth now")
+                termux-toast "Opening auth page..."
+                termux-open-url "https://console.anthropic.com/settings/api-keys"
+
+                termux-dialog confirm -t "Re-auth Steps" -i "1. Create/copy API key from browser
+2. Return here and tap OK to SSH"
+
+                am start -n com.termux/com.termux.app.TermuxActivity -a android.intent.action.MAIN
+                termux-toast "Run: ssh $SERVER '$HOME/openclaw/scripts/mobile-reauth.sh'"
+                ;;
+            *)
+                termux-toast "Warning: OpenClaw won't work until re-auth"
+                ;;
+        esac
+        ;;
+
+    *)
+        termux-vibrate -d 200
+        termux-toast "Error: $STATUS"
+        ;;
+esac

package/scripts/termux-quick-auth.sh

@@ -0,0 +1,30 @@
+#!/data/data/com.termux/files/usr/bin/bash
+# Quick Auth Check - Minimal widget for Termux
+# Place in ~/.shortcuts/ for Termux:Widget
+#
+# One-tap: shows status toast
+# If expired: directly opens auth URL
+
+SERVER="${OPENCLAW_SERVER:-${CLAWDBOT_SERVER:-l36}}"
+
+STATUS=$(ssh -o ConnectTimeout=5 "$SERVER" '$HOME/openclaw/scripts/claude-auth-status.sh simple' 2>&1)
+
+case "$STATUS" in
+    OK)
+        termux-toast -s "Auth OK"
+        ;;
+    *EXPIRING*)
+        termux-vibrate -d 100
+        termux-toast "Auth expiring soon - tap again if needed"
+        ;;
+    *EXPIRED*|*MISSING*)
+        termux-vibrate -d 200
+        termux-toast "Auth expired - opening console..."
+        termux-open-url "https://console.anthropic.com/settings/api-keys"
+        sleep 2
+        termux-notification -t "OpenClaw Re-Auth" -c "After getting key, run: ssh $SERVER '~/openclaw/scripts/mobile-reauth.sh'" --id openclaw-auth
+        ;;
+    *)
+        termux-toast "Connection error"
+        ;;
+esac

package/scripts/termux-sync-widget.sh

@@ -0,0 +1,25 @@
+#!/data/data/com.termux/files/usr/bin/bash
+# OpenClaw OAuth Sync Widget
+# Syncs Claude Code tokens to OpenClaw on l36 server
+# Place in ~/.shortcuts/ on phone for Termux:Widget
+
+termux-toast "Syncing OpenClaw auth..."
+
+# Run sync on l36 server
+SERVER="${OPENCLAW_SERVER:-${CLAWDBOT_SERVER:-l36}}"
+RESULT=$(ssh "$SERVER" '/home/admin/openclaw/scripts/sync-claude-code-auth.sh' 2>&1)
+EXIT_CODE=$?
+
+if [ $EXIT_CODE -eq 0 ]; then
+    # Extract expiry time from output
+    EXPIRY=$(echo "$RESULT" | grep "Token expires:" | cut -d: -f2-)
+
+    termux-vibrate -d 100
+    termux-toast "OpenClaw synced! Expires:${EXPIRY}"
+
+    # Optional: restart openclaw service
+    ssh "$SERVER" 'systemctl --user restart openclaw' 2>/dev/null
+else
+    termux-vibrate -d 300
+    termux-toast "Sync failed: ${RESULT}"
+fi

package/scripts/test-cleanup-docker.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+IMAGE_NAME="${OPENCLAW_CLEANUP_SMOKE_IMAGE:-${CLAWDBOT_CLEANUP_SMOKE_IMAGE:-openclaw-cleanup-smoke:local}}"
+
+echo "==> Build image: $IMAGE_NAME"
+docker build \
+  -t "$IMAGE_NAME" \
+  -f "$ROOT_DIR/scripts/docker/cleanup-smoke/Dockerfile" \
+  "$ROOT_DIR"
+
+echo "==> Run cleanup smoke test"
+docker run --rm -t "$IMAGE_NAME"

package/scripts/test-force.ts

@@ -0,0 +1,59 @@
+#!/usr/bin/env -S node --import tsx
+import { spawnSync } from "node:child_process";
+import os from "node:os";
+import path from "node:path";
+import { forceFreePort, type PortProcess } from "../src/cli/ports.js";
+
+const DEFAULT_PORT = 18789;
+
+function killGatewayListeners(port: number): PortProcess[] {
+  try {
+    const killed = forceFreePort(port);
+    if (killed.length > 0) {
+      console.log(
+        `freed port ${port}; terminated: ${killed
+          .map((p) => `${p.command} (pid ${p.pid})`)
+          .join(", ")}`,
+      );
+    } else {
+      console.log(`port ${port} already free`);
+    }
+    return killed;
+  } catch (err) {
+    console.error(`failed to free port ${port}: ${String(err)}`);
+    return [];
+  }
+}
+
+function runTests() {
+  const isolatedLock =
+    process.env.OPENCLAW_GATEWAY_LOCK ??
+    path.join(os.tmpdir(), `openclaw-gateway.lock.test.${Date.now()}`);
+  const result = spawnSync("pnpm", ["vitest", "run"], {
+    stdio: "inherit",
+    env: {
+      ...process.env,
+      OPENCLAW_GATEWAY_LOCK: isolatedLock,
+    },
+  });
+  if (result.error) {
+    console.error(`pnpm test failed to start: ${String(result.error)}`);
+    process.exit(1);
+  }
+  process.exit(result.status ?? 1);
+}
+
+function main() {
+  const port = Number.parseInt(process.env.OPENCLAW_GATEWAY_PORT ?? `${DEFAULT_PORT}`, 10);
+
+  console.log(`🧹 test:force - clearing gateway on port ${port}`);
+  const killed = killGatewayListeners(port);
+  if (killed.length === 0) {
+    console.log("no listeners to kill");
+  }
+
+  console.log("running pnpm test…");
+  runTests();
+}
+
+main();

package/scripts/test-hotspots.mjs

@@ -0,0 +1,83 @@
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+function parseArgs(argv) {
+  const args = {
+    config: "vitest.unit.config.ts",
+    limit: 20,
+    reportPath: "",
+  };
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg === "--config") {
+      args.config = argv[i + 1] ?? args.config;
+      i += 1;
+      continue;
+    }
+    if (arg === "--limit") {
+      const parsed = Number.parseInt(argv[i + 1] ?? "", 10);
+      if (Number.isFinite(parsed) && parsed > 0) {
+        args.limit = parsed;
+      }
+      i += 1;
+      continue;
+    }
+    if (arg === "--report") {
+      args.reportPath = argv[i + 1] ?? "";
+      i += 1;
+      continue;
+    }
+  }
+  return args;
+}
+
+function formatMs(value) {
+  return `${value.toFixed(1)}ms`;
+}
+
+const opts = parseArgs(process.argv.slice(2));
+const reportPath =
+  opts.reportPath || path.join(os.tmpdir(), `openclaw-vitest-hotspots-${Date.now()}.json`);
+
+if (!(opts.reportPath && fs.existsSync(reportPath))) {
+  const run = spawnSync(
+    "pnpm",
+    ["vitest", "run", "--config", opts.config, "--reporter=json", "--outputFile", reportPath],
+    {
+      stdio: "inherit",
+      env: process.env,
+    },
+  );
+
+  if (run.status !== 0) {
+    process.exit(run.status ?? 1);
+  }
+}
+
+const report = JSON.parse(fs.readFileSync(reportPath, "utf8"));
+const fileResults = (report.testResults ?? [])
+  .map((result) => {
+    const start = typeof result.startTime === "number" ? result.startTime : 0;
+    const end = typeof result.endTime === "number" ? result.endTime : 0;
+    const testCount = Array.isArray(result.assertionResults) ? result.assertionResults.length : 0;
+    return {
+      file: typeof result.name === "string" ? result.name : "unknown",
+      durationMs: Math.max(0, end - start),
+      testCount,
+    };
+  })
+  .toSorted((a, b) => b.durationMs - a.durationMs);
+
+const top = fileResults.slice(0, opts.limit);
+const totalDurationMs = fileResults.reduce((sum, item) => sum + item.durationMs, 0);
+console.log(
+  `\n[test-hotspots] top ${String(top.length)} by file duration (${formatMs(totalDurationMs)} total)`,
+);
+for (const [index, item] of top.entries()) {
+  const label = String(index + 1).padStart(2, " ");
+  const duration = formatMs(item.durationMs).padStart(10, " ");
+  const tests = String(item.testCount).padStart(4, " ");
+  console.log(`${label}. ${duration} | tests=${tests} | ${item.file}`);
+}

package/scripts/test-install-sh-docker.sh

@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+SMOKE_IMAGE="${OPENCLAW_INSTALL_SMOKE_IMAGE:-${CLAWDBOT_INSTALL_SMOKE_IMAGE:-openclaw-install-smoke:local}}"
+NONROOT_IMAGE="${OPENCLAW_INSTALL_NONROOT_IMAGE:-${CLAWDBOT_INSTALL_NONROOT_IMAGE:-openclaw-install-nonroot:local}}"
+INSTALL_URL="${OPENCLAW_INSTALL_URL:-${CLAWDBOT_INSTALL_URL:-https://openclaw.bot/install.sh}}"
+CLI_INSTALL_URL="${OPENCLAW_INSTALL_CLI_URL:-${CLAWDBOT_INSTALL_CLI_URL:-https://openclaw.bot/install-cli.sh}}"
+SKIP_NONROOT="${OPENCLAW_INSTALL_SMOKE_SKIP_NONROOT:-${CLAWDBOT_INSTALL_SMOKE_SKIP_NONROOT:-0}}"
+LATEST_DIR="$(mktemp -d)"
+LATEST_FILE="${LATEST_DIR}/latest"
+
+echo "==> Build smoke image (upgrade, root): $SMOKE_IMAGE"
+docker build \
+  -t "$SMOKE_IMAGE" \
+  -f "$ROOT_DIR/scripts/docker/install-sh-smoke/Dockerfile" \
+  "$ROOT_DIR/scripts/docker"
+
+echo "==> Run installer smoke test (root): $INSTALL_URL"
+docker run --rm -t \
+  -v "${LATEST_DIR}:/out" \
+  -e OPENCLAW_INSTALL_URL="$INSTALL_URL" \
+  -e OPENCLAW_INSTALL_METHOD=npm \
+  -e OPENCLAW_INSTALL_LATEST_OUT="/out/latest" \
+  -e OPENCLAW_INSTALL_SMOKE_PREVIOUS="${OPENCLAW_INSTALL_SMOKE_PREVIOUS:-${CLAWDBOT_INSTALL_SMOKE_PREVIOUS:-}}" \
+  -e OPENCLAW_INSTALL_SMOKE_SKIP_PREVIOUS="${OPENCLAW_INSTALL_SMOKE_SKIP_PREVIOUS:-${CLAWDBOT_INSTALL_SMOKE_SKIP_PREVIOUS:-0}}" \
+  -e OPENCLAW_NO_ONBOARD=1 \
+  -e DEBIAN_FRONTEND=noninteractive \
+  "$SMOKE_IMAGE"
+
+LATEST_VERSION=""
+if [[ -f "$LATEST_FILE" ]]; then
+  LATEST_VERSION="$(cat "$LATEST_FILE")"
+fi
+
+if [[ "$SKIP_NONROOT" == "1" ]]; then
+  echo "==> Skip non-root installer smoke (OPENCLAW_INSTALL_SMOKE_SKIP_NONROOT=1)"
+else
+  echo "==> Build non-root image: $NONROOT_IMAGE"
+  docker build \
+    -t "$NONROOT_IMAGE" \
+    -f "$ROOT_DIR/scripts/docker/install-sh-nonroot/Dockerfile" \
+    "$ROOT_DIR/scripts/docker"
+
+  echo "==> Run installer non-root test: $INSTALL_URL"
+  docker run --rm -t \
+    -e OPENCLAW_INSTALL_URL="$INSTALL_URL" \
+    -e OPENCLAW_INSTALL_METHOD=npm \
+    -e OPENCLAW_INSTALL_EXPECT_VERSION="$LATEST_VERSION" \
+    -e OPENCLAW_NO_ONBOARD=1 \
+    -e DEBIAN_FRONTEND=noninteractive \
+    "$NONROOT_IMAGE"
+fi
+
+if [[ "${OPENCLAW_INSTALL_SMOKE_SKIP_CLI:-${CLAWDBOT_INSTALL_SMOKE_SKIP_CLI:-0}}" == "1" ]]; then
+  echo "==> Skip CLI installer smoke (OPENCLAW_INSTALL_SMOKE_SKIP_CLI=1)"
+  exit 0
+fi
+
+if [[ "$SKIP_NONROOT" == "1" ]]; then
+  echo "==> Skip CLI installer smoke (non-root image skipped)"
+  exit 0
+fi
+
+echo "==> Run CLI installer non-root test (same image)"
+docker run --rm -t \
+  --entrypoint /bin/bash \
+  -e OPENCLAW_INSTALL_URL="$INSTALL_URL" \
+  -e OPENCLAW_INSTALL_CLI_URL="$CLI_INSTALL_URL" \
+  -e OPENCLAW_NO_ONBOARD=1 \
+  -e DEBIAN_FRONTEND=noninteractive \
+  "$NONROOT_IMAGE" -lc "curl -fsSL \"$CLI_INSTALL_URL\" | bash -s -- --set-npm-prefix --no-onboard"

package/scripts/test-install-sh-e2e-docker.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+IMAGE_NAME="${OPENCLAW_INSTALL_E2E_IMAGE:-${CLAWDBOT_INSTALL_E2E_IMAGE:-openclaw-install-e2e:local}}"
+INSTALL_URL="${OPENCLAW_INSTALL_URL:-${CLAWDBOT_INSTALL_URL:-https://openclaw.bot/install.sh}}"
+
+OPENAI_API_KEY="${OPENAI_API_KEY:-}"
+ANTHROPIC_API_KEY="${ANTHROPIC_API_KEY:-}"
+ANTHROPIC_API_TOKEN="${ANTHROPIC_API_TOKEN:-}"
+OPENCLAW_E2E_MODELS="${OPENCLAW_E2E_MODELS:-${CLAWDBOT_E2E_MODELS:-}}"
+
+echo "==> Build image: $IMAGE_NAME"
+docker build \
+  -t "$IMAGE_NAME" \
+  -f "$ROOT_DIR/scripts/docker/install-sh-e2e/Dockerfile" \
+  "$ROOT_DIR/scripts/docker/install-sh-e2e"
+
+echo "==> Run E2E installer test"
+docker run --rm \
+  -e OPENCLAW_INSTALL_URL="$INSTALL_URL" \
+  -e OPENCLAW_INSTALL_TAG="${OPENCLAW_INSTALL_TAG:-${CLAWDBOT_INSTALL_TAG:-latest}}" \
+  -e OPENCLAW_E2E_MODELS="$OPENCLAW_E2E_MODELS" \
+  -e OPENCLAW_INSTALL_E2E_PREVIOUS="${OPENCLAW_INSTALL_E2E_PREVIOUS:-${CLAWDBOT_INSTALL_E2E_PREVIOUS:-}}" \
+  -e OPENCLAW_INSTALL_E2E_SKIP_PREVIOUS="${OPENCLAW_INSTALL_E2E_SKIP_PREVIOUS:-${CLAWDBOT_INSTALL_E2E_SKIP_PREVIOUS:-0}}" \
+  -e OPENAI_API_KEY="$OPENAI_API_KEY" \
+  -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
+  -e ANTHROPIC_API_TOKEN="$ANTHROPIC_API_TOKEN" \
+  "$IMAGE_NAME"

package/scripts/test-live-gateway-models-docker.sh

@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+IMAGE_NAME="${OPENCLAW_IMAGE:-${CLAWDBOT_IMAGE:-openclaw:local}}"
+CONFIG_DIR="${OPENCLAW_CONFIG_DIR:-${CLAWDBOT_CONFIG_DIR:-$HOME/.openclaw}}"
+WORKSPACE_DIR="${OPENCLAW_WORKSPACE_DIR:-${CLAWDBOT_WORKSPACE_DIR:-$HOME/.openclaw/workspace}}"
+PROFILE_FILE="${OPENCLAW_PROFILE_FILE:-${CLAWDBOT_PROFILE_FILE:-$HOME/.profile}}"
+
+PROFILE_MOUNT=()
+if [[ -f "$PROFILE_FILE" ]]; then
+  PROFILE_MOUNT=(-v "$PROFILE_FILE":/home/node/.profile:ro)
+fi
+
+echo "==> Build image: $IMAGE_NAME"
+docker build -t "$IMAGE_NAME" -f "$ROOT_DIR/Dockerfile" "$ROOT_DIR"
+
+echo "==> Run gateway live model tests (profile keys)"
+docker run --rm -t \
+  --entrypoint bash \
+  -e COREPACK_ENABLE_DOWNLOAD_PROMPT=0 \
+  -e HOME=/home/node \
+  -e NODE_OPTIONS=--disable-warning=ExperimentalWarning \
+  -e OPENCLAW_LIVE_TEST=1 \
+  -e OPENCLAW_LIVE_GATEWAY_MODELS="${OPENCLAW_LIVE_GATEWAY_MODELS:-${CLAWDBOT_LIVE_GATEWAY_MODELS:-modern}}" \
+  -e OPENCLAW_LIVE_GATEWAY_PROVIDERS="${OPENCLAW_LIVE_GATEWAY_PROVIDERS:-${CLAWDBOT_LIVE_GATEWAY_PROVIDERS:-}}" \
+  -e OPENCLAW_LIVE_GATEWAY_MAX_MODELS="${OPENCLAW_LIVE_GATEWAY_MAX_MODELS:-${CLAWDBOT_LIVE_GATEWAY_MAX_MODELS:-24}}" \
+  -e OPENCLAW_LIVE_GATEWAY_MODEL_TIMEOUT_MS="${OPENCLAW_LIVE_GATEWAY_MODEL_TIMEOUT_MS:-${CLAWDBOT_LIVE_GATEWAY_MODEL_TIMEOUT_MS:-}}" \
+  -v "$CONFIG_DIR":/home/node/.openclaw \
+  -v "$WORKSPACE_DIR":/home/node/.openclaw/workspace \
+  "${PROFILE_MOUNT[@]}" \
+  "$IMAGE_NAME" \
+  -lc "set -euo pipefail; [ -f \"$HOME/.profile\" ] && source \"$HOME/.profile\" || true; cd /app && pnpm test:live"

package/scripts/test-live-models-docker.sh

@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+IMAGE_NAME="${OPENCLAW_IMAGE:-${CLAWDBOT_IMAGE:-openclaw:local}}"
+CONFIG_DIR="${OPENCLAW_CONFIG_DIR:-${CLAWDBOT_CONFIG_DIR:-$HOME/.openclaw}}"
+WORKSPACE_DIR="${OPENCLAW_WORKSPACE_DIR:-${CLAWDBOT_WORKSPACE_DIR:-$HOME/.openclaw/workspace}}"
+PROFILE_FILE="${OPENCLAW_PROFILE_FILE:-${CLAWDBOT_PROFILE_FILE:-$HOME/.profile}}"
+
+PROFILE_MOUNT=()
+if [[ -f "$PROFILE_FILE" ]]; then
+  PROFILE_MOUNT=(-v "$PROFILE_FILE":/home/node/.profile:ro)
+fi
+
+echo "==> Build image: $IMAGE_NAME"
+docker build -t "$IMAGE_NAME" -f "$ROOT_DIR/Dockerfile" "$ROOT_DIR"
+
+echo "==> Run live model tests (profile keys)"
+docker run --rm -t \
+  --entrypoint bash \
+  -e COREPACK_ENABLE_DOWNLOAD_PROMPT=0 \
+  -e HOME=/home/node \
+  -e NODE_OPTIONS=--disable-warning=ExperimentalWarning \
+  -e OPENCLAW_LIVE_TEST=1 \
+  -e OPENCLAW_LIVE_MODELS="${OPENCLAW_LIVE_MODELS:-${CLAWDBOT_LIVE_MODELS:-modern}}" \
+  -e OPENCLAW_LIVE_PROVIDERS="${OPENCLAW_LIVE_PROVIDERS:-${CLAWDBOT_LIVE_PROVIDERS:-}}" \
+  -e OPENCLAW_LIVE_MAX_MODELS="${OPENCLAW_LIVE_MAX_MODELS:-${CLAWDBOT_LIVE_MAX_MODELS:-48}}" \
+  -e OPENCLAW_LIVE_MODEL_TIMEOUT_MS="${OPENCLAW_LIVE_MODEL_TIMEOUT_MS:-${CLAWDBOT_LIVE_MODEL_TIMEOUT_MS:-}}" \
+  -e OPENCLAW_LIVE_REQUIRE_PROFILE_KEYS="${OPENCLAW_LIVE_REQUIRE_PROFILE_KEYS:-${CLAWDBOT_LIVE_REQUIRE_PROFILE_KEYS:-}}" \
+  -v "$CONFIG_DIR":/home/node/.openclaw \
+  -v "$WORKSPACE_DIR":/home/node/.openclaw/workspace \
+  "${PROFILE_MOUNT[@]}" \
+  "$IMAGE_NAME" \
+  -lc "set -euo pipefail; [ -f \"$HOME/.profile\" ] && source \"$HOME/.profile\" || true; cd /app && pnpm test:live"