0.4.0 - 2026-10-12

Release Notes

Fixed

• The pip cache is found from pip's settings (PIP_CACHE_DIR, cache-dir
  in pip's config files, else the platform default) instead of running
  pip cache dir (#46). Running pip started the user's Python, whose startup
  lists editable installs' source folders, often in ~/Documents, which on
  macOS triggered a privacy prompt for the app running the scan. Scans are
  faster too.

Added

• --skip <PATH> (#44), a global, repeatable option: leave that exact
  folder out of every walk (scan, worktrees, clean). It is never listed
  or entered, so on macOS a protected folder (Desktop, Documents, Downloads)
  never triggers a privacy prompt. Give clean the same --skip as the scan
  that found its items. Worktrees reached by pointer are covered too (#48):
  one whose repository is in a skipped folder, or that lives in one, is left
  out unread.

• --progress json streams each detector's findings (#40): a findings
  event right after its detector event, with the finding objects exactly
  as in the final report. Across all events they are the report's findings,
  so GUIs can show results while the scan runs. Additive; stdout unchanged.

• Claude Code plugin (#41), installed with /plugin install lysosome --marketplace lysosome-dev/cli. When a session that ran in a linked git worktree ends, a background job checks it read-only with lysosome worktrees --days 0 and records it. The next session reports what is safe to reclaim, once. It adds /lysosome:status and /lysosome:tidy; tidy dry-runs, then cleans only after you confirm. With the opt-in auto_tidy setting (strip-merged / remove-merged), a merged task's worktree is tidied when its session really ends; nothing happens on /clear. Every cleanup is lysosome clean, so REVIEW worktrees are never touched.

• LYSOSOME_ACTOR (#41): clean records who asked as actor in the action log.

• --progress <auto|json|off> (#38), a global flag. json writes
  newline-delimited progress events to stderr (stdout keeps the report) for
  GUIs and scripts: phase_start / throttled advance / phase_finish, a
  detector event as each detector finishes, and plan plus one item event
  per item during clean --yes. Described by schema/progress.schema.json.
  off silences the spinner on a terminal; auto is today's behavior.

• clean --json item results gain trashed: [{original, location}] (#38):
  where each entry went inside the Trash. On macOS this is the real path
  NSFileManager reports, including renamed duplicates such as
  target 21-08-03-944. On Linux it comes from the freedesktop trash. Moving
  location back to original undoes the move. The action log records the
  same pairs. This is an additive schema change.

Install lysosome 0.4.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/lysosome-dev/cli/releases/download/v0.4.0/lysosome-installer.sh | sh

Install prebuilt binaries via Homebrew

brew install lysosome

Download lysosome 0.4.0

File	Platform	Checksum
lysosome-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
lysosome-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
lysosome-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
lysosome-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum
lysosome-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
lysosome-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum