@simonyea/holysheep-cli 2.1.37 → 2.1.38

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@simonyea/holysheep-cli",
-  "version": "2.1.37",
+  "version": "2.1.38",
   "description": "Claude Code/Cursor/Cline API relay for China \u2014 \u00a51=$1, WeChat/Alipay payment, no credit card, no VPN. One command setup for all AI coding tools.",
   "scripts": {
-    "test": "node tests/droid.test.js && node tests/workspace-store.test.js && node tests/runtime-stale-upgrade.test.js && node tests/hermes.test.js && node tests/preflight.test.js && node tests/opencode-auth-purge.test.js && node tests/shell-winpath.test.js",
+    "test": "node tests/droid.test.js && node tests/workspace-store.test.js && node tests/runtime-stale-upgrade.test.js && node tests/hermes.test.js && node tests/preflight.test.js && node tests/opencode-auth-purge.test.js && node tests/shell-winpath.test.js && node tests/openclaw-atomic-write.test.js",
     "prepublishOnly": "node scripts/check-tarball-size.js"
   },
   "keywords": [

package/src/tools/openclaw.js

@@ -25,6 +25,96 @@ const OPENCLAW_DEFAULT_CLAUDE_MODEL = 'claude-sonnet-4-6'
 const OPENCLAW_DEFAULT_MINIMAX_MODEL = 'MiniMax-M2.7-highspeed'
 const OPENCLAW_PROVIDER_NAME = 'holysheep'
 
+/**
+ * [HolySheep fork v2.1.38 / hs26] Atomic JSON write.
+ *
+ * Background: `~/.openclaw/` accumulated 30+ `openclaw.json.clobbered.*`
+ * backup files (mtime span hours apart, content identical) — OpenClaw's
+ * own config layer detected that two processes raced `writeFileSync`
+ * against the same path and renamed the half-written file aside to avoid
+ * corruption. Each race produced a backup.
+ *
+ * Root cause: `fs.writeFileSync(path, data)` is NOT atomic — it opens +
+ * truncates + writes; a concurrent reader/writer can observe a partial
+ * file or overwrite between truncation and final bytes. POSIX
+ * `rename(tmp, final)` IS atomic on the same filesystem, so we:
+ *   1. Write to `${final}.tmp.${pid}.${rand}`
+ *   2. `fs.renameSync(tmp, final)`
+ * Windows: `rename` fails if target exists → retry via copyFile + unlink.
+ *
+ * Never leaves the final path in a half-written state. If two procs race,
+ * one's write wins atomically and the other's wins the next one; no
+ * .clobbered.* files get produced by OpenClaw.
+ */
+function atomicWriteJson(filePath, data) {
+  const dir = path.dirname(filePath)
+  fs.mkdirSync(dir, { recursive: true })
+  const body = JSON.stringify(data, null, 2)
+  const tmp = `${filePath}.tmp.${process.pid}.${Math.random().toString(36).slice(2, 10)}`
+  fs.writeFileSync(tmp, body, 'utf8')
+  try {
+    fs.renameSync(tmp, filePath)
+    return
+  } catch (renameErr) {
+    // Windows: rename fails if target exists. Fall back to copy+unlink.
+    // Also handles cross-device rename (EXDEV) in edge cases.
+    if (process.platform === 'win32' || renameErr.code === 'EXDEV' || renameErr.code === 'EEXIST') {
+      try {
+        fs.copyFileSync(tmp, filePath)
+        try { fs.unlinkSync(tmp) } catch {}
+        return
+      } catch (copyErr) {
+        try { fs.unlinkSync(tmp) } catch {}
+        throw copyErr
+      }
+    }
+    try { fs.unlinkSync(tmp) } catch {}
+    throw renameErr
+  }
+}
+
+/**
+ * [HolySheep fork v2.1.38 / hs26] Prune stale OpenClaw config backup files.
+ *
+ * Removes `~/.openclaw/openclaw.json.clobbered.*` older than 7 days. These
+ * are produced by OpenClaw itself when a racy `writeFileSync` is detected,
+ * but once our atomicWriteJson is in place no new ones should appear — this
+ * cleanup just garbage-collects the historical accumulation without touching
+ * `*.last-good` / `*.bak` / `*.pre-*` which users or other tooling may need.
+ *
+ * Safe: scoped to ONLY the exact glob `openclaw.json.clobbered.*` in the
+ * known OpenClaw dir. No-op if dir doesn't exist or user has no matching
+ * files. Best-effort (each unlink wrapped in try) so a single locked file
+ * won't block the rest of configure().
+ */
+function pruneClobberedBackups(maxAgeMs = 7 * 24 * 3600 * 1000) {
+  try {
+    if (!fs.existsSync(OPENCLAW_DIR)) return { scanned: 0, removed: 0 }
+    const entries = fs.readdirSync(OPENCLAW_DIR)
+    const cutoff = Date.now() - maxAgeMs
+    let scanned = 0
+    let removed = 0
+    for (const name of entries) {
+      if (!/^openclaw\.json\.clobbered\./.test(name)) continue
+      scanned++
+      const abs = path.join(OPENCLAW_DIR, name)
+      try {
+        const st = fs.statSync(abs)
+        if (st.mtimeMs < cutoff) {
+          fs.unlinkSync(abs)
+          removed++
+        }
+      } catch {
+        // locked / race — skip
+      }
+    }
+    return { scanned, removed }
+  } catch {
+    return { scanned: 0, removed: 0 }
+  }
+}
+
+
 function getOpenClawBinaryCandidates() {
   return isWin ? ['openclaw.cmd', 'openclaw'] : ['openclaw']
 }
@@ -161,8 +251,8 @@ function readBridgeConfig() {
 }
 
 function writeBridgeConfig(data) {
-  fs.mkdirSync(OPENCLAW_DIR, { recursive: true })
-  fs.writeFileSync(BRIDGE_CONFIG_FILE, JSON.stringify(data, null, 2), 'utf8')
+  // [HolySheep fork v2.1.38 / hs26] Atomic write — see atomicWriteJson.
+  atomicWriteJson(BRIDGE_CONFIG_FILE, data)
 }
 
 function updateBridgeConfig(patch) {
@@ -521,7 +611,9 @@ function writeManagedConfig(baseConfig, bridgeBaseUrl, apiKey, primaryModel, sel
     },
   }
 
-  fs.writeFileSync(CONFIG_FILE, JSON.stringify(nextConfig, null, 2), 'utf8')
+  // [HolySheep fork v2.1.38 / hs26] Atomic write — prevents the
+  // openclaw.json.clobbered.* pile-up from racing writeFileSync.
+  atomicWriteJson(CONFIG_FILE, nextConfig)
   return plan
 }
 
@@ -621,6 +713,17 @@ module.exports = {
     const chalk = require('chalk')
     console.log(chalk.gray('\n  ⚙️  正在配置 OpenClaw...'))
 
+    // [HolySheep fork v2.1.38 / hs26] Garbage-collect stale OpenClaw
+    // backup files from pre-atomic-write builds. Scoped to exact glob
+    // `openclaw.json.clobbered.*` older than 7 days — leaves .last-good
+    // and .bak files alone.
+    try {
+      const pruned = pruneClobberedBackups()
+      if (pruned.removed > 0) {
+        console.log(chalk.gray(`  → 已清理 ${pruned.removed} 个过期的 OpenClaw 配置备份（>7 天的 .clobbered.* 文件）`))
+      }
+    } catch {}
+
     const runtime = detectRuntime()
     if (!runtime.available) {
       throw new Error('未检测到 OpenClaw；请先全局安装，或确保 npx 可用')
@@ -816,4 +919,7 @@ module.exports = {
   },
   installCmd: 'npm install -g openclaw@latest',
   docsUrl: 'https://docs.openclaw.ai',
+  // [HolySheep fork v2.1.38 / hs26] Test-only exports.
+  _atomicWriteJson: atomicWriteJson,
+  _pruneClobberedBackups: pruneClobberedBackups,
 }

package/src/webui/aionui-runtime-fetcher.js

@@ -60,10 +60,10 @@ const VENDOR_DIR = path.join(__dirname, 'vendor', 'aionui')
 // new CLI release, the next `hs web` invocation on user machines will detect
 // the version drift and upgrade the cache in place.
 const DEFAULT_RUNTIME_URL =
-  'https://mail.holysheep.ai/app/cli/aionui-runtime-v1.9.18-holysheep-hs25.tar.gz'
+  'https://mail.holysheep.ai/app/cli/aionui-runtime-v1.9.18-holysheep-hs26.tar.gz'
 const DEFAULT_RUNTIME_SHA256 =
-  '9e2a47adf8a151c9ab6916d046ee9f268aa5f1589a961d1b0374b15508ed527b'
-const DEFAULT_RUNTIME_VERSION = '1.9.18-holysheep-hs25'
+  'e0502f21376d21b3797c51a3d932970c5a86e29076cadf3eeb2939941abb47ed'
+const DEFAULT_RUNTIME_VERSION = '1.9.18-holysheep-hs26'
 
 function isValidRuntimeDir(dir) {
   if (!dir) return false