This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+8 more
Affected surfaces
Summary
AI summaryUltraplan now correctly detects getter-based isEnabled and installer fetches Claude Code from npm when no local version exists.
Full changelog
Highlights
- Ultraplan finally works. The previous regex matched
isEnabled:()=>!1against a literaldescription:field, but Anthropic switched to a getter (get description(){...}) and a function-call gate (e.g.()=>la(),()=>bc(),()=>yn()) all the way back in v2.1.92.optional:truehad been silently masking the regex miss across roughly 30 releases — Ultraplan was effectively never patched until now. Verified live:isEnabled:()=>!0is in the running cli. - No more "install Claude Code first" prerequisite. When
~/.local/share/claude/versions/is empty, the installer now pulls the platform-specific tarball (@anthropic-ai/claude-code-<platform>) from npm, extracts the binary in a tempdir, and uses it as the cli.js source. This isnpm pack, notnpm install— no upstream postinstall hooks fire, noclaude.exeplaceholder gets written on Linux. Drift detection still treats~/.local/share/claude/versions/as the canonical update source after install.
Verified
- Patcher: 24 applied, 0 failed on v2.1.92 / v2.1.110 / v2.1.119 (was 23 + 1 silently-skipped Ultraplan in earlier releases).
- End-to-end: hiding
~/.local/share/claude/versions/and running install fetched@anthropic-ai/[email protected]from npm, extracted cli.js + 7 .node modules, applied patches, and ran cleanly under Bun.
Install
macOS / Linux:
curl -fsSL https://github.com/0Chencc/clawgod/releases/latest/download/install.sh | bash
Windows (PowerShell):
irm https://github.com/0Chencc/clawgod/releases/latest/download/install.ps1 | iex
Notes
- Ultraplan fix is in both
install.shandinstall.ps1. - npm fallback is currently
install.shonly; Windows still requires either an existing native install at%USERPROFILE%\.local\share\claude\versions\or a backed-upclaude.orig.exe. This will land in a follow-up.
Closes: #24
Refs: #48 (closed without merging — the PR's Node-runtime path can't execute Bun-bundled cli.js because of Bun.* API and ws dependencies; v1.0.7 already solved the same problem with the Bun runtime architecture)
Full changelog: https://github.com/0Chencc/clawgod/compare/v1.0.7...v1.0.8
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About clawgod
All releases →Related context
Beta — feedback welcome: [email protected]