This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+8 more
Affected surfaces
Summary
AI summaryCritical fix prevents launcher from clobbering the native Claude binary.
Full changelog
Native binary support for v2.1.113+
Starting with v2.1.113 Anthropic stopped shipping cli.js inside the @anthropic-ai/claude-code npm package — it became a thin loader that dispatches to a per-platform Bun standalone binary. The v1.0.6 installer hard-coded a cp …/cli.js step which broke for every user on v2.1.113 onwards (#40, #41, #42, #43, #45).
This release reworks the install pipeline so ClawGod patches the same Bun-compiled cli.js Anthropic actually ships:
- Locate the user's installed Bun standalone binary in
~/.local/share/claude/versions/ - Extract the embedded cli.js source from the
__BUNsegment (Mach-O / ELF / PE) and the.nodenative modules - Rewrite virtual
/$bunfs/...paths and the IIFE wrapper for Node-style require - Apply the existing 23 regex patches
- Run via Bun runtime — Bun's globals (
Bun.JSONL,Bun.spawn, etc.) are needed by the extracted source
What's new
- Auto re-patch on upgrade — wrapper stamps the source version; on any launch where the user's native binary has changed, ClawGod transparently re-extracts and re-patches before invoking the requested command.
clawgodcommand — unambiguous entry point alongsideclaude. Survives Windowsclaude.exe/claude.cmdshadowing and official self-update overwritingclaude.- 1h prompt cache fix — default
features.jsonnow enablestengu_prompt_cache_1h_configallowlist; previously fell back to 5m TTL and burned cache_creation tokens after short idles. - Sentinel-based patcher — 0-match patches are now reported as failures when the target sentinel is still present, instead of silently being marked "already applied".
Critical fix
The v1.0.6 launcher write used echo "$LAUNCHER_CONTENT" > "$CLAUDE_BIN". When $CLAUDE_BIN was the official symlink to ~/.local/share/claude/versions/<v>, the redirect followed the symlink and clobbered the real native binary. v1.0.7 always rms the launcher target before writing.
Prerequisites
You now need Claude Code's official native binary installed first (we patch the cli.js it ships):
curl -fsSL https://claude.ai/install.sh | bash # macOS / Linux
irm https://claude.ai/install.ps1 | iex # Windows
You also need:
- Node.js >= 18 (for the patcher)
- ripgrep on PATH (Bun's bundled rg is only reachable from inside the standalone binary)
- Bun — installer auto-installs from
bun.sh/installif missing
Install
macOS / Linux:
curl -fsSL https://github.com/0Chencc/clawgod/releases/latest/download/install.sh | bash
Windows (PowerShell):
irm https://github.com/0Chencc/clawgod/releases/latest/download/install.ps1 | iex
Verified
macOS arm64 against v2.1.117 / v2.1.118 / v2.1.119 native binaries — 23 patches applied with 0 failures; auto-repatch correctly handles version transitions; claude / clawgod / claude.orig coexist cleanly.
Closes: #40, #41, #42, #43, #45
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About clawgod
All releases →Related context
Beta — feedback welcome: [email protected]