v0.1.0-alpha.12 — benchmark-verified prebuilt Action

What's Changed

• Pin the Action to the benchmark-verified alpha.11 engine by @IamAngusU in #19

Full Changelog: v0.1.0-alpha.11...v0.1.0-alpha.12

v0.1.0-alpha.11 — benchmark hardening

What's Changed

• Harden matching and accelerate verified history rewrites by @IamAngusU in #17
• Release alpha.11 benchmark hardening by @IamAngusU in #18

Full Changelog: v0.1.0-alpha.10...v0.1.0-alpha.11

v0.1.0-alpha.9 - Safe unpublished cleanup

clean --unpushed is the safe default for local cleanup: it rewrites only unpublished commits on the current branch after verifying the configured upstream against the live remote. Stale tracking data, divergence, missing upstreams and differently named branches stop with a concrete recovery step.

The rewrite now reads every updated ref back from Git and compares the old and new tree tips. A mismatch triggers a guarded atomic rollback while the backup remains available. Exact Claude Code markers are covered by a source-linked real-message regression corpus, including GitHub squash messages.

The one-line installers still need no Go, sudo or UAC. When GitHub CLI is available they now verify each official binary against the hard-coded angusu-de/ByeClaude build attestation before replacing anything; checksum-only installation remains an explicit opt-out. The GitHub Action also runs a reviewed precompiled binary and does not install Go for consumers.

The guided terminal recommends unpublished-only cleanup, explains each choice in muted helper text, handles malformed input, and keeps the metrics view compact. Multiple exact identities can be managed through rules and the blacklist without adding fuzzy matching.

PR: #15

Public main CI: https://github.com/angusu-de/ByeClaude/actions/runs/38058909021

Build and attestation evidence: https://github.com/angusu-de/ByeClaude/actions/runs/38058927021

v0.1.0-alpha.8 - Verified Action and guided setup

This release completes the frictionless install and prebuilt CI path. The Windows and Unix quick starts are one pasted command: the installer detects the platform, downloads this release, verifies SHA-256, installs into a user-owned folder, attempts user PATH setup without requiring administrator rights, and opens the guided terminal only when the session is interactive.

The reusable GitHub Action downloads the reviewed alpha.7 audit engine instead of installing Go or compiling ByeClaude. Its version and all six platform digests are fixed in the Action revision and verified before execution. Full fetched history is checked, so old declared attribution can intentionally block a new workflow run; fetch-depth: 0 and that behavior are explicit in the copy-ready example.

Alpha.7 contains the broader exact Claude Code marker and Claude-Session handling, streaming history traversal, cancellation, tree-hash proof, guarded backup pruning, mirror-push protection, per-client demo limits, Go 1.27.2 security fixes, and release attestations. Alpha.8 packages that audited engine into the final Action and installer documentation.

PRs: #13 and #14
Public main CI: https://github.com/angusu-de/ByeClaude/actions/runs/38049465821
Build and attestation evidence: https://github.com/angusu-de/ByeClaude/actions/runs/38049500614

v0.1.0-alpha.7 - Attribution and release hardening

ByeClaude now detects and removes exact historical Claude Code end markers and Claude-Session trailers as well as matching Co-Authored-By identities. Matching stays deliberately narrow: quoted examples in message bodies are preserved, trailer keys are structured, and custom rules are not silently widened.

Large histories are streamed through the scan, plan and rewrite paths, Ctrl+C cancellation reaches Git operations, and every rewritten commit tree is checked before refs move. Recovery refs now have an explicit preview/confirm prune flow, while the pre-push hook blocks accidental publication of refs/byeclaude/*, including risky mirror pushes.

The demo adds a per-client concurrency cap. Release builds use Go 1.27.2, pass govulncheck and gosec, reproduce the full six-platform release set byte-for-byte, and create plus verify GitHub artifact attestations before publication.

The Action revision in this tag still uses the previously reviewed alpha.5 engine. Alpha.8 updates the Action's fixed engine pin and six checked-in digests to this alpha.7 release, preserving the rule that an Action never trusts an unpublished build.

PR: #13
Public CI: https://github.com/angusu-de/ByeClaude/actions/runs/38048205111
Build and attestation evidence: https://github.com/angusu-de/ByeClaude/actions/runs/38048548176

v0.1.0-alpha.10 - Verified prebuilt Action

This release makes the reviewed alpha.9 audit engine the pinned binary used by the reusable GitHub Action. All six Linux, macOS and Windows digests are committed with the Action and checked before execution. Consumer workflows do not install Go and do not compile ByeClaude.

The one-line Windows and Unix installers now default to alpha.10. They detect the platform, verify SHA-256, automatically verify the angusu-de/ByeClaude GitHub artifact attestation when GitHub CLI is present, install into a user-owned directory, attempt PATH setup without requiring elevation, and open the guided terminal only in an interactive session.

The Action intentionally checks all reachable fetched history. Existing attribution in an older commit can therefore block a new workflow; the copy-ready example requires a full checkout and calls this out before users make the check mandatory.

The alpha.9 engine includes safe unpublished-only cleanup, live remote verification, exact publication leases, Git-readback tree proof with rollback, the real-message regression corpus, compact guided metrics, exact multi-identity rules and copy-ready GitHub Support guidance.

PRs: #15 and #16

Public Action matrix: https://github.com/angusu-de/ByeClaude/actions/runs/38059971488

Build and attestation evidence: https://github.com/angusu-de/ByeClaude/actions/runs/38060349149

v0.1.0-alpha.6 - Prebuilt Action and one-line setup

Install ByeClaude with one copyable line, then continue straight into guided setup. The installer chooses the release binary, verifies SHA-256, configures user PATH and opens the guide in an interactive terminal. Git remains a prerequisite. Hooks and history still require separate confirmation; CI, redirected input/output and NoStart stay unattended.

The GitHub Action now uses a precompiled audit engine. Its version and all six platform digests are pinned in the Action source; the downloaded binary is verified before execution. No Go installation, runtime compilation, PATH setup or metrics recording occurs in the consuming job.

The Action checks all reachable fetched history. Older attribution can block an unrelated new commit or PR; the documentation and log make this explicit. A shallow checkout is rejected with a fetch-depth: 0 instruction. The default example needs no separate rules file.

Action revisions deliberately pin an already published engine: this revision uses the verified alpha.5 engine while the local installer supplies alpha.6. Provenance and update instructions are in action-release/README.md.

Validation includes actual prebuilt Action runs on Windows, macOS and Linux; malformed digest/download/version/input cases; real historical-ancestor and shallow-checkout fixtures; PowerShell installation and cancellation; and an interactive Unix installation-to-guide test. Release checks include the full platform, race, security, installer and reproducibility gates.

PR: #12
Public CI: https://github.com/angusu-de/ByeClaude/actions/workflows/ci.yml

v0.1.0-alpha.5 — live terminal dashboard

ByeClaude now presents local activity as a compact terminal dashboard with cyan totals, aligned rows and optional counting details.

• Open byeclaude metrics --watch, or choose m, then w in the menu. Totals update in place and + values show changes since opening the view. Enter returns. Reset counters, interrupted input and unavailable storage are handled explicitly.
• Scans and cleanup previews show actual commit-count progress; Git steps without a known total use a spinner. The guided menu highlights its current step and keeps cleanup confirmations explicit.
• Small terminals, redirected output, CI, NO_COLOR and --no-color use static output. JSON retains its existing schema.
• The README includes real Windows recordings of live metrics and a 16,000-commit preview. Demo counters are isolated from personal usage.
• Pinned Go terminal dependencies support terminal detection and sizing. byeclaude licenses includes their BSD notices; the SBOM records dependency versions.

Local metrics remain private to this computer. Counts describe completed operations, not guaranteed time savings. Existing PATH fallback, blacklist, backup and push guards are unchanged.

Validation: all ten public CI jobs on angusu-de, including Windows/macOS/Linux, race detection, fuzzing, coverage, installers, security checks and reproducible release builds. Release artifacts include checksums, CycloneDX SBOM and source provenance.

Changes: #11
CI: https://github.com/angusu-de/ByeClaude/actions/workflows/ci.yml

v0.1.0-alpha.4 - Local metrics and recoverable PATH setup

Local work metrics

Run byeclaude metrics or choose m in the terminal. See removed history credits, automatic commit-message edits, rewritten commits, corrected identity fields and blocked push attempts. Repeated scans count as activity, not extra work saved.

Counters stay on your computer. No analytics upload, repository names, email addresses or commit content are collected. Turn collection off or on, export JSON, or reset counters with explicit confirmation. CI pauses collection by default. Unavailable, corrupt or busy storage never blocks a Git operation.

An optional --seconds-per-credit 30 (also available in the menu) models manual editing effort using your assumption. It is clearly labelled as an estimate, not measured time savings.

Easier installation and recoverable PATH setup

Installers configure user PATH by default without UAC or sudo. If a preferred destination cannot be written, they try a user-owned folder. If optional PATH setup fails, the binary remains usable by its full path and the next interactive start offers Retry / Later / No. Scripts and Git hooks never show this prompt.

Use byeclaude path status, path setup or path skip. Windows supports -NoPath (and retains -AddToPath compatibility); BYECLAUDE_NO_PATH=1 opts out on either installer. Unix setup preserves existing shell settings and defers linked/managed or ambiguous profiles. Integrity-check failures still stop installation.

Terminal and documentation

The menu, help and installers now credit “Powered by angusu.de | Angus Uelsmann”. The README and metrics guide explain exactly what is counted, where it is stored, and how fallback/retry works. A real recorded Windows session demonstrates metrics and the explicit estimate.

Release binaries support Windows, Linux and macOS on amd64/arm64. Attached checksums, SBOM and build provenance allow verification; the metadata records are unsigned. This remains prerelease software.

Validation and source

All ten PR CI jobs passed. Linux CI measured 73.4% total statement coverage and 87.0% for the new metrics store. Checks include concurrent counters, process-crash lock recovery, disabled/corrupt/unavailable storage, real Git hook counts, literal shell-path quoting, installer fallback and nonfatal PATH errors. PowerShell 5 and 7 were tested locally, including the actual Windows user-PATH script.

The public build account angusu-de belongs to the same maintainer; it provides reproducible build evidence, not a third-party audit. Artifacts are promoted unchanged to this canonical release at source commit 4c91bf28a815d31471b5d939e775f4e036f0f244.

• PR CI for the tested source tree
• Full platform CI for the release commit
• Release gates and reproducible builds
• Live evidence and individual steps

v0.1.0-alpha.3 - Guided terminal and input recovery

Guided first use

Run byeclaude, then press Enter for a four-step walkthrough: choose blocked identities, check history, review cleanup, and protect future commits. Gray helper text explains each choice, and h explains the Git concepts. byeclaude guide starts the walkthrough directly.

Input recovery and safe defaults

• Correct invalid menu choices, rule labels, emails and folder paths without losing the selected repository.
• Confirm blacklist changes, hook installation and history cleanup separately. Enter never approves a pending change; incomplete input cannot confirm one.
• Reject oversized or hidden-control input, filter terminal controls in command output, and exit cleanly if the terminal connection fails.
• Empty, clean or blocked histories offer no cleanup confirmation. A changed repository or policy requires a new preview.

Getting started

The README now opens with platform-specific installation and the guided flow. Its GIF replays a real Windows session, including correction of an invalid email. The Windows installer example writes to the temporary directory so downloading it does not dirty your Git project.

The release retains saved multi-identity blacklists, guarded local backups/restores, atomic leased pushes, GitHub verification and reproducible binaries for Windows, Linux and macOS (amd64/arm64). The menu operates locally; publishing remains explicit. This is prerelease software.

Checksums, SBOM and build provenance are attached. Public CI runs on the maintainer's angusu-de account; the README badge opens that workflow directly.

Validation

All ten PR CI jobs passed, with 72.8% statement coverage on Linux. Input fuzzing, race detection, Windows/macOS/Linux tests, actual Windows hooks and recovery, both installers, static/dependency security checks and release reproducibility are included. Start and cancellation were also checked interactively in cmd, Windows PowerShell 5 and PowerShell 7.

Release assets are promoted unchanged from the maintainer's public mirror at source commit 23f25bdb7037b9f469c4e5ed348c7455d0c09c19.

• PR CI at the tested source tree
• Full CI at the release commit
• Release gates and reproducible builds
• Current badge evidence with individual steps

Verify downloads against SHA256SUMS.txt. SBOM.cdx.json records dependencies and BUILD-PROVENANCE.json binds artifact hashes to the source/toolchain. These are unsigned records, not a signed provenance claim.