@clawos-dev/clawd 0.2.448 → 0.2.450

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/cli.cjs CHANGED
@@ -63666,7 +63666,7 @@ function computeMethodAccess(args) {
63666
63666
  }
63667
63667
 
63668
63668
  // src/version.ts
63669
- var version = "0.2.448".length > 0 ? "0.2.448" : "dev";
63669
+ var version = "0.2.450".length > 0 ? "0.2.450" : "dev";
63670
63670
 
63671
63671
  // src/cli-probe/probe.ts
63672
63672
  var fs68 = __toESM(require("fs"), 1);
@@ -1,15 +1,17 @@
1
1
  {
2
- "_comment": "preinstall ship 进 daemon defaults,daemon 启动时 refreshDaemonManagedDirs 把这文件同步到 ~/.clawd*/personas/persona-app-builder/.mcp.json。cc CLI 启动时(cwd=projects/<name>/)会向上找 persona dir 的 .mcp.json 自动加载。用 @aliyun-rds/supabase-mcp-server Mode 2 单实例直连(不再用 aliyun AK),底下接阿里云托管 supabase(公网 endpoint 121.196.249.178:80,项目 ra-ae0i57kef06s6ix / clawd-app-builder,杭州可用区J)。三件套(url + anon + service + jwt)明文写进这里跟旧的 aliyun AK 模式一样属于共享 demo 凭证——该 supabase 实例只承载 clawd demo 数据,泄漏面锁定在这个实例本身(不会波及阿里云账号内其它资源)。旧自建 supabase 120.26.157.138 已退役,旧共享 aliyun AK LTAI5tSebp9pyBLk2nxF5wDg 已 revoke。",
2
+ "_comment": "preinstall ship 进 daemon defaults,daemon 启动时 refreshDaemonManagedDirs 把这文件同步到 ~/.clawd*/personas/persona-app-builder/.mcp.json。cc CLI 启动时(cwd=projects/<name>/)会向上找 persona dir 的 .mcp.json 自动加载。用 @aliyun-rds/supabase-mcp-server Mode 2 单实例直连(不再用 aliyun AK),底下接阿里云托管 supabase(公网 endpoint 121.196.249.178:80,项目 ra-ae0i57kef06s6ix / clawd-app-builder,杭州可用区J)。旧自建 supabase 120.26.157.138 已退役,旧共享 aliyun AK LTAI5tSebp9pyBLk2nxF5wDg 已 revoke。**不要往这里加 --jwt-secret**:jwt-secret 是该实例的 JWT 签发密钥,拿到它可以自签任意 role/任意 user 的 token(含 service_role),下发出去等于把 anon/service key 的轮换能力一起交出去;而 MCP server 里它唯一的用处是 verify_jwt_secret 这个自检工具报个 found/preview(--jwt-secret 在其 CLI 里就标了 optional),建表读写和 auth user 管理都不经过它。**这份文件随 OTA 发给所有用户,所以这里放的每一把 key 都等于公开**:该实例上除 demo 数据外还有 clawd 自己的 clawd_prod/clawd_int schema(device_bindings 等),收敛方案见 doc/glossary/persona-cloud.md。",
3
3
  "mcpServers": {
4
4
  "supabase": {
5
5
  "type": "stdio",
6
6
  "command": "npx",
7
7
  "args": [
8
8
  "@aliyun-rds/supabase-mcp-server",
9
- "--supabase-url", "http://121.196.249.178:80",
10
- "--supabase-anon-key", "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJvbGUiOiJhbm9uIiwiaWF0IjoxNzgzMzEwODU1LCJleHAiOjEzMjkzOTUwODU1fQ.sHLZH8q2SGWYbNPEFOzTFlQEtjVK3z1DlEqoU_5Uyyg",
11
- "--supabase-service-role-key", "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJvbGUiOiJzZXJ2aWNlX3JvbGUiLCJpYXQiOjE3ODMzMTA4NTUsImV4cCI6MTMyOTM5NTA4NTV9.MdlymSh0DaJdiOVRmM3QnukUDtkOf_Eljh8_fpdLi8Q",
12
- "--jwt-secret", "P9ThaB8USJCYLQa3tcBB3oYGtKWu95LelFpQD3fo"
9
+ "--supabase-url",
10
+ "http://121.196.249.178:80",
11
+ "--supabase-anon-key",
12
+ "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJvbGUiOiJhbm9uIiwiaWF0IjoxNzgzMzEwODU1LCJleHAiOjEzMjkzOTUwODU1fQ.sHLZH8q2SGWYbNPEFOzTFlQEtjVK3z1DlEqoU_5Uyyg",
13
+ "--supabase-service-role-key",
14
+ "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJvbGUiOiJzZXJ2aWNlX3JvbGUiLCJpYXQiOjE3ODMzMTA4NTUsImV4cCI6MTMyOTM5NTA4NTV9.MdlymSh0DaJdiOVRmM3QnukUDtkOf_Eljh8_fpdLi8Q"
13
15
  ]
14
16
  }
15
17
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@clawos-dev/clawd",
3
- "version": "0.2.448",
3
+ "version": "0.2.450",
4
4
  "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
5
5
  "type": "module",
6
6
  "license": "MIT",