@clawos-dev/clawd 0.2.534 → 0.2.535

package/dist/cli.cjs

@@ -54624,6 +54624,32 @@ function upsertEnvFileVar(file, key, value) {
   import_node_fs28.default.writeFileSync(file, `${out.join("\n")}
 `, { encoding: "utf8", mode: 384 });
 }
+function readEnvFileVar(file, key) {
+  try {
+    return parseEnvFile(import_node_fs28.default.readFileSync(file, "utf8"))[key];
+  } catch {
+    return void 0;
+  }
+}
+function removeEnvFileVar(file, key) {
+  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) throw new Error(`invalid env name: ${key}`);
+  let lines;
+  try {
+    lines = import_node_fs28.default.readFileSync(file, "utf8").split("\n");
+  } catch {
+    return;
+  }
+  if (lines[lines.length - 1] === "") lines.pop();
+  const re2 = new RegExp(`^\\s*(?:export\\s+)?${key}=`);
+  const out = lines.filter((l2) => !re2.test(l2));
+  if (out.length === lines.length) return;
+  if (out.every((l2) => l2.trim() === "" || l2.trim().startsWith("#"))) {
+    import_node_fs28.default.rmSync(file, { force: true });
+    return;
+  }
+  import_node_fs28.default.writeFileSync(file, `${out.join("\n")}
+`, { encoding: "utf8", mode: 384 });
+}
 function readSecretTable(args) {
   return {
     ...args.bundleRoot ? readDir(args.bundleRoot, args.logger) : {},
@@ -59010,13 +59036,16 @@ async function storeGitCredential(exec, token) {
   return back?.token === token;
 }
 async function resolveGithubAuth(args) {
-  const fromGit = await readGitCredential(args.exec);
-  if (fromGit) return { token: fromGit.token, source: "git" };
   const fromFile = args.fileToken();
-  return fromFile ? { token: fromFile, source: "file" } : void 0;
+  if (fromFile) return { token: fromFile, source: "file" };
+  const fromGit = await readGitCredential(args.exec);
+  return fromGit ? { token: fromGit.token, source: "git" } : void 0;
 }
 async function storeGithubAuth(args) {
-  if (await storeGitCredential(args.exec, args.token)) return { token: args.token, source: "git" };
+  if (await storeGitCredential(args.exec, args.token)) {
+    args.clearFileToken();
+    return { token: args.token, source: "git" };
+  }
   args.writeFileToken(args.token);
   return { token: args.token, source: "file" };
 }
@@ -70418,7 +70447,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.534".length > 0 ? "0.2.534" : "dev";
+var version = "0.2.535".length > 0 ? "0.2.535" : "dev";
 
 // src/cli-probe/probe.ts
 var fs77 = __toESM(require("fs"), 1);
@@ -73214,15 +73243,17 @@ async function startDaemon(config) {
   const secretsBundleRoot = findSecretsBundleRoot(logger);
   const localSecretsDir = import_node_path79.default.join(config.dataDir, LOCAL_SECRETS_DIRNAME);
   const readSecrets = () => readSecretTable({ bundleRoot: secretsBundleRoot, overrideDir: localSecretsDir, logger });
+  const githubTokenFile = import_node_path79.default.join(localSecretsDir, GITHUB_TOKEN_FILE);
   const githubIdentity = createGithubIdentity({
-    resolve: () => resolveGithubAuth({ exec: runCommand, fileToken: () => readSecrets()[GITHUB_TOKEN_VAR] }),
+    resolve: () => resolveGithubAuth({ exec: runCommand, fileToken: () => readEnvFileVar(githubTokenFile, GITHUB_TOKEN_VAR) }),
     store: (token) => storeGithubAuth({
       exec: runCommand,
       token,
       writeFileToken: (t2) => {
-        upsertEnvFileVar(import_node_path79.default.join(localSecretsDir, GITHUB_TOKEN_FILE), GITHUB_TOKEN_VAR, t2);
-        logger.warn("github.identity.token-in-file", { reason: "git \u6CA1\u914D credential helper\uFF0Ctoken \u843D\u672C\u673A\u51ED\u636E\u8868", file: GITHUB_TOKEN_FILE });
-      }
+        upsertEnvFileVar(githubTokenFile, GITHUB_TOKEN_VAR, t2);
+        logger.warn("github.identity.token-in-file", { reason: "git \u4E0D\u6536\uFF08\u6CA1\u914D credential helper\uFF0C\u6216\u53EA\u6709 gh \u90A3\u4E2A\u53EA\u8BFB\u7684\uFF09\uFF0Ctoken \u843D\u672C\u673A\u51ED\u636E\u8868", file: GITHUB_TOKEN_FILE });
+      },
+      clearFileToken: () => removeEnvFileVar(githubTokenFile, GITHUB_TOKEN_VAR)
     }),
     api: (token) => createGithubApi({ token }),
     oauth: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawos-dev/clawd",
-  "version": "0.2.534",
+  "version": "0.2.535",
   "description": "Standalone clawd daemon — Claude Code (and future Codex) session server over WebSocket",
   "type": "module",
   "license": "MIT",