devclean v0.3.1
devclean v0.3.1
This patch makes the native macOS menu bar app ready for frictionless public distribution while preserving the v0.3 safety model.
Trusted macOS distribution
- Signs the universal app and bundled Rust helper with Developer ID Application.
- Enables hardened runtime and Apple secure timestamps.
- Requires Apple notarization acceptance and staples the ticket before packaging.
- Verifies strict code signatures and Gatekeeper acceptance in the release workflow.
Safety
- Swift remains an unprivileged presentation client; Rust still performs all scan, revalidation, quarantine, and deletion work.
- Exact-path cleanup still aborts before deletion if any selected candidate is stale.
- Signing credentials live only in GitHub encrypted secrets and an ephemeral CI keychain.
Installation
The crates.io package remains devclean-cli; it installs the devclean executable. The notarized universal menu bar archive contains Devclean.app and requires macOS 13 or newer.
Download the archive for your platform, verify SHA256SUMS, and run gh attestation verify <archive> -R tuanle96/devclean.