fix(bootstrap): don't die under pipefail when /etc/bux/env lacks a key

[Alezander9]

Problem

agent/bootstrap.sh runs under set -euo pipefail and parses single keys out of /etc/bux/env with:

BUX_CP_CODEX_URL="$(grep -E '^BUX_CP_CODEX_URL=' /etc/bux/env | tail -n1 | cut -d= -f2- | tr -d '"'\''')"

When the key is absent, grep exits 1, pipefail propagates that through the command substitution, and set -e kills the script — silently, since a no-match grep prints nothing. Both call sites already handle the empty-string result explicitly ("not set; skipping..."); execution just never reaches them.

At bake time install.sh seeds /etc/bux/env with only BROWSER_USE_API_KEY, so BUX_CP_CODEX_URL is always missing and every fresh AMI bake / cloud-repo bux-box build of main fails since #264/#267 (ENG-4785). Existing machines were shielded by cached docker layers holding a pre-ENG-4785 clone; new machines hit it immediately (this is how it was found — task dev in the cloud repo on a fresh laptop).

The same pattern is baked into the generated /usr/local/bin/bu-cp-token helper, which would exit 1 at runtime instead of printing empty when BUX_BOX_TOKEN is absent.

Fix

Append || true to both grep pipelines so a missing key yields the empty string the surrounding code already expects.

Verification

Ran the bake path (install.sh then this bootstrap.sh with the systemctl shim, BROWSER_USE_API_KEY=build-placeholder) in an ubuntu:24.04 container:

• before: silent exit 1 right after "pip installing"
• after: bootstrap: done, exit 0, with bootstrap: BUX_CP_CODEX_URL not set; skipping free-tier Codex provider on stderr as intended; bu-cp-token prints empty, exit 0

Note for cloud-repo users: after this merges, task bux:build:no-cache is needed once to bust the stale clone layer.

---

Summary by cubic

Stop bootstrap from exiting under pipefail when /etc/bux/env lacks optional keys. This restores fresh AMI bakes and bux-box builds by treating missing values as empty and skipping optional setup (ENG-4785).

• Bug Fixes

  • Added || true to grep pipelines for BUX_CP_CODEX_URL and BUX_BOX_TOKEN so missing keys yield empty strings.
  • agent/bootstrap.sh now reaches the "not set; skipping..." path; bu-cp-token prints empty and exits 0.

• Migration

  • Run task bux:build:no-cache once in the cloud repo to clear cached layers.

^{Written for commit 0256122. Summary will update on new commits.}

[cubic-dev-ai]

No issues found across 1 file

_{Re-trigger cubic}