Skip to content

clawgod

v1.0.7 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo AI Coding Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai assistant claude-ai claude-code claw clawcode
+8 more
limit linux macos patch skill vibe-coded vibe-coding windows

Affected surfaces

breaking_upgrade

Summary

AI summary

Critical fix prevents launcher from clobbering the native Claude binary.

Full changelog

Native binary support for v2.1.113+

Starting with v2.1.113 Anthropic stopped shipping cli.js inside the @anthropic-ai/claude-code npm package — it became a thin loader that dispatches to a per-platform Bun standalone binary. The v1.0.6 installer hard-coded a cp …/cli.js step which broke for every user on v2.1.113 onwards (#40, #41, #42, #43, #45).

This release reworks the install pipeline so ClawGod patches the same Bun-compiled cli.js Anthropic actually ships:

  1. Locate the user's installed Bun standalone binary in ~/.local/share/claude/versions/
  2. Extract the embedded cli.js source from the __BUN segment (Mach-O / ELF / PE) and the .node native modules
  3. Rewrite virtual /$bunfs/... paths and the IIFE wrapper for Node-style require
  4. Apply the existing 23 regex patches
  5. Run via Bun runtime — Bun's globals (Bun.JSONL, Bun.spawn, etc.) are needed by the extracted source

What's new

  • Auto re-patch on upgrade — wrapper stamps the source version; on any launch where the user's native binary has changed, ClawGod transparently re-extracts and re-patches before invoking the requested command.
  • clawgod command — unambiguous entry point alongside claude. Survives Windows claude.exe/claude.cmd shadowing and official self-update overwriting claude.
  • 1h prompt cache fix — default features.json now enables tengu_prompt_cache_1h_config allowlist; previously fell back to 5m TTL and burned cache_creation tokens after short idles.
  • Sentinel-based patcher — 0-match patches are now reported as failures when the target sentinel is still present, instead of silently being marked "already applied".

Critical fix

The v1.0.6 launcher write used echo "$LAUNCHER_CONTENT" > "$CLAUDE_BIN". When $CLAUDE_BIN was the official symlink to ~/.local/share/claude/versions/<v>, the redirect followed the symlink and clobbered the real native binary. v1.0.7 always rms the launcher target before writing.

Prerequisites

You now need Claude Code's official native binary installed first (we patch the cli.js it ships):

curl -fsSL https://claude.ai/install.sh | bash       # macOS / Linux
irm https://claude.ai/install.ps1 | iex              # Windows

You also need:

  • Node.js >= 18 (for the patcher)
  • ripgrep on PATH (Bun's bundled rg is only reachable from inside the standalone binary)
  • Bun — installer auto-installs from bun.sh/install if missing

Install

macOS / Linux:

curl -fsSL https://github.com/0Chencc/clawgod/releases/latest/download/install.sh | bash

Windows (PowerShell):

irm https://github.com/0Chencc/clawgod/releases/latest/download/install.ps1 | iex

Verified

macOS arm64 against v2.1.117 / v2.1.118 / v2.1.119 native binaries — 23 patches applied with 0 failures; auto-repatch correctly handles version transitions; claude / clawgod / claude.orig coexist cleanly.

Closes: #40, #41, #42, #43, #45

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track clawgod

Get notified when new releases ship.

Sign up free

About clawgod

All releases →

Beta — feedback welcome: [email protected]