Rewrite in Go with native age encryption

- Single binary, no external age CLI needed
- Cross-platform (Win/Mac/Linux, amd64/arm64)
- Native filippo.io/age encryption
- --dry-run flag for push/pull
- doctor command for setup verification
- goreleaser + GitHub Actions for releases

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: FelixIsaac

.github/workflows/ci.yaml

@@ -0,0 +1,44 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  build:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        go: ['1.21']
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ matrix.go }}
+
+      - name: Build
+        run: go build -v ./...
+
+      - name: Test
+        run: go test -v ./...
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.21'
+
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v4
+        with:
+          version: latest

.github/workflows/release.yaml

@@ -0,0 +1,32 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.21'
+
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          distribution: goreleaser
+          version: latest
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -0,0 +1,14 @@
+# Binary (root only)
+/claude-code-sync
+/claude-code-sync.exe
+/dist/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db

.goreleaser.yaml

@@ -0,0 +1,75 @@
+version: 2
+
+project_name: claude-code-sync
+
+before:
+  hooks:
+    - go mod tidy
+
+builds:
+  - id: claude-code-sync
+    main: ./cmd/claude-code-sync
+    binary: claude-code-sync
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - darwin
+      - windows
+    goarch:
+      - amd64
+      - arm64
+    ldflags:
+      - -s -w -X main.version={{.Version}}
+
+archives:
+  - id: default
+    format: tar.gz
+    name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
+    format_overrides:
+      - goos: windows
+        format: zip
+    files:
+      - README.md
+      - LICENSE
+
+checksum:
+  name_template: 'checksums.txt'
+
+changelog:
+  sort: asc
+  filters:
+    exclude:
+      - '^docs:'
+      - '^test:'
+      - '^chore:'
+      - Merge pull request
+      - Merge branch
+
+brews:
+  - repository:
+      owner: felixisaac
+      name: homebrew-tap
+    directory: Formula
+    homepage: https://github.com/felixisaac/claude-code-sync
+    description: Sync Claude Code configs across machines via GitHub with age encryption
+    license: MIT
+    install: |
+      bin.install "claude-code-sync"
+    test: |
+      system "#{bin}/claude-code-sync", "version"
+
+scoops:
+  - repository:
+      owner: felixisaac
+      name: scoop-bucket
+    homepage: https://github.com/felixisaac/claude-code-sync
+    description: Sync Claude Code configs across machines via GitHub with age encryption
+    license: MIT
+
+release:
+  github:
+    owner: felixisaac
+    name: claude-code-sync
+  draft: false
+  prerelease: auto

README.md

@@ -5,57 +5,48 @@ Secure cross-platform CLI to sync [Claude Code](https://claude.com/claude-code)
 ## Why?
 
 - **Multi-machine developers**: Keep your custom commands, agents, skills, and settings in sync across desktop, laptop, and SSH servers
-- **Security**: API keys and OAuth tokens are encrypted with age before pushing to GitHub
+- **Security**: API keys and OAuth tokens are encrypted with native age before pushing to GitHub
 - **Simple**: Just `push` and `pull` - no learning curve, no complex setup
-- **Open source**: Audit the code yourself - it's ~400 lines of bash/PowerShell
+- **Single binary**: No external dependencies except git - age encryption is built-in
 
 ## Features
 
 - Selective encryption (plain text for non-sensitive files, encrypted for secrets)
-- Cross-platform (bash for macOS/Linux, PowerShell for Windows)
+- Cross-platform single binary (Windows, macOS, Linux - amd64/arm64)
+- Native age encryption built-in (no external age CLI needed)
+- `--dry-run` flag for push and pull
 - Automatic backups before pull
 - Conflict detection with local backup
 - SHA256 integrity verification
+- `doctor` command to verify setup
 
 ## Prerequisites
 
-### age (encryption tool)
-
-**[age](https://github.com/FiloSottile/age)** is a simple, modern file encryption tool. claude-code-sync uses it to encrypt your sensitive files (API keys, OAuth tokens) before pushing to GitHub.
-
-```
-settings.json (contains secrets) → age encrypts → settings.json.age (unreadable) → GitHub
-```
-
-**Install age:**
-
-| Platform | Command |
-|----------|---------|
-| macOS | `brew install age` |
-| Ubuntu/Debian | `sudo apt install age` |
-| Windows (scoop) | `scoop bucket add extras && scoop install age` |
-| Windows (winget) | `winget install FiloSottile.age` |
-| Manual | [Download from releases](https://github.com/FiloSottile/age/releases) |
-
 ### git
 
-You'll also need `git` installed (you probably already have it).
+You'll need `git` installed (you probably already have it).
 
-## Installation
+**Note**: age encryption is now built into the binary - no external age CLI needed!
 
-The install script downloads `claude-code-sync` to `~/.local/bin/` and adds it to your PATH.
+## Installation
 
-**macOS/Linux:**
+**macOS (Homebrew):**
 ```bash
-curl -fsSL https://raw.githubusercontent.com/felixisaac/claude-code-sync/main/install.sh | bash
+brew install felixisaac/tap/claude-code-sync
 ```
 
-**Windows (PowerShell):**
+**Windows (Scoop):**
 ```powershell
-irm https://raw.githubusercontent.com/felixisaac/claude-code-sync/main/install.ps1 | iex
+scoop bucket add felixisaac https://github.com/felixisaac/scoop-bucket
+scoop install claude-code-sync
+```
+
+**Go:**
+```bash
+go install github.com/felixisaac/claude-code-sync@latest
 ```
 
-**Manual installation:** You can also just download `claude-code-sync` (Unix) or `claude-code-sync.ps1` (Windows) directly and put it somewhere in your PATH.
+**Manual:** Download the latest binary from [GitHub Releases](https://github.com/felixisaac/claude-code-sync/releases).
 
 ### First Time Setup
 
@@ -94,17 +85,16 @@ claude-code-sync pull
 | Command | Description |
 |---------|-------------|
 | `init [repo-url]` | Initialize sync (generate keys, clone/create repo) |
-| `push` | Encrypt and push configs to GitHub |
-| `pull` | Pull and decrypt configs from GitHub |
+| `push [--dry-run]` | Encrypt and push configs to GitHub |
+| `pull [--dry-run]` | Pull and decrypt configs from GitHub |
 | `status` | Show sync status |
+| `doctor` | Check system health and setup |
 | `import-key` | Import private key on new machine |
 | `export-key` | Display private key for backup |
 | `verify` | Verify file integrity |
-| `reset` | Delete all sync data (⚠️ deletes key!) |
-| `reset --keep-key` | Reset but preserve your private key |
+| `reset [--keep-key]` | Delete all sync data |
 | `unlink` | Disconnect from remote repo (keep local data) |
-| `check-update` | Check if a new version is available |
-| `update` | Download and install latest version |
+| `version` | Show version |
 | `help` | Show help |
 
 ## What Gets Synced
@@ -143,7 +133,7 @@ claude-code-sync pull
 ## Security
 
 ### Encryption
-- Uses [age](https://github.com/FiloSottile/age) (modern, audited encryption)
+- Uses [filippo.io/age](https://github.com/FiloSottile/age) Go library (built-in, no external CLI)
 - X25519 key exchange
 - ChaCha20-Poly1305 encryption
 

cmd/claude-code-sync/main.go

@@ -0,0 +1,17 @@
+package main
+
+import (
+	"os"
+
+	"github.com/felixisaac/claude-code-sync/internal/cmd"
+)
+
+// Set by goreleaser ldflags
+var version = "dev"
+
+func main() {
+	cmd.SetVersion(version)
+	if err := cmd.Execute(); err != nil {
+		os.Exit(1)
+	}
+}

go.mod

@@ -0,0 +1,19 @@
+module github.com/felixisaac/claude-code-sync
+
+go 1.24.5
+
+require (
+	filippo.io/age v1.2.1
+	github.com/fatih/color v1.18.0
+	github.com/spf13/cobra v1.10.2
+	gopkg.in/yaml.v3 v3.0.1
+)
+
+require (
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/spf13/pflag v1.0.9 // indirect
+	golang.org/x/crypto v0.24.0 // indirect
+	golang.org/x/sys v0.25.0 // indirect
+)

go.sum

@@ -0,0 +1,30 @@
+c2sp.org/CCTV/age v0.0.0-20240306222714-3ec4d716e805 h1:u2qwJeEvnypw+OCPUHmoZE3IqwfuN5kgDfo5MLzpNM0=
+c2sp.org/CCTV/age v0.0.0-20240306222714-3ec4d716e805/go.mod h1:FomMrUJ2Lxt5jCLmZkG3FHa72zUprnhd3v/Z18Snm4w=
+filippo.io/age v1.2.1 h1:X0TZjehAZylOIj4DubWYU1vWQxv9bJpo+Uu2/LGhi1o=
+filippo.io/age v1.2.1/go.mod h1:JL9ew2lTN+Pyft4RiNGguFfOpewKwSHm5ayKD/A4004=
+github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
+github.com/fatih/color v1.18.0 h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM=
+github.com/fatih/color v1.18.0/go.mod h1:4FelSpRwEGDpQ12mAdzqdOukCy4u8WUtOY6lkT/6HfU=
+github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
+github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
+github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
+github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
+github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU=
+github.com/spf13/cobra v1.10.2/go.mod h1:7C1pvHqHw5A4vrJfjNwvOdzYu0Gml16OCs2GRiTUUS4=
+github.com/spf13/pflag v1.0.9 h1:9exaQaMOCwffKiiiYk6/BndUBv+iRViNW+4lEMi0PvY=
+github.com/spf13/pflag v1.0.9/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
+golang.org/x/crypto v0.24.0 h1:mnl8DM0o513X8fdIkmyFE/5hTYxbwYOjDS/+rK6qpRI=
+golang.org/x/crypto v0.24.0/go.mod h1:Z1PMYSOR5nyMcyAVAIQSKCDwalqy85Aqn1x3Ws4L5DM=
+golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.25.0 h1:r+8e+loiHxRqhXVl6ML1nO3l1+oFoWbnlu2Ehimmi34=
+golang.org/x/sys v0.25.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=