Mori v1.0.1

Mori 1.0.1

A patch release that makes Mori a more complete everyday file browser, plus video and tag fixes.

Mori remains a private, offline-first media and file browser: everything runs on your computer, with no account, no cloud, no telemetry and no network functionality. The full feature set is described in the Mori 1.0.0 release notes and in docs/features.md.

Highlights

File management

• Desktop-style selection in every view, in search results and with Include subfolders.
  • A click selects, and a double-click or Return opens.
  • Cmd/Ctrl+Click, Shift+Click, Shift+arrows and ⌘A/Ctrl+A select several items; Esc clears.
  • A selection bar shows "N selected" with Move to…, Copy to…, Tags, Favorite and Move to Trash.
• Move to… and Copy to… (M / ⇧M) for files and folders, one or many.
  • Mori shows what will happen first, including anything it refuses: Read-only Mode, protected folders, a folder into itself.
  • Name conflicts offer Keep Both, Replace (the existing file goes to the Trash first) or Skip. Nothing is overwritten in place.
  • A move to another drive copies, checks the copy, and only then sends the original to the Trash.
  • Partial failures are reported item by item. Undo moves items back (for moves to another drive, on macOS only, as it uses the Trash).
• Drag and drop onto folders in the grid, list and sidebar, with clear accept / refuse feedback. Dragging moves the whole selection through the same checks as Move to….
  • Sidebar folders expand when you hold over them.
  • Option/Alt copies.
• Manage the file you're viewing: the preview's … menu has Get Info, Favorites, Checksum, Rename, Move to…, Copy to… and Move to Trash. After a move or trash, the preview continues with the next file.

Quick Cleanup

• Go through a folder one file at a time from the keyboard: Keep (→ / K) or Mark for Trash (← / D), with Undo, Back, Skip and progress.
• Nothing moves while you review. Decisions are only staged. At the end you review the marked items, can restore any of them, and confirm once. They then go to the system Trash, never a permanent delete; on macOS, Undo brings them back.
• Held-down keys and bounced presses can't mark extra files, and protected files can't be marked.
• Unfinished cleanups can be resumed later. In Temporary Sessions and Private Inspection they are never saved, and while read-only the final step is unavailable.

Favorites and tags

• A clear Favorite star on each thumbnail: filled when set, an outline on hover, clickable without opening the file. List view has its own star, and the sidebar shows a Favorites count.
• Rename Tag… / Delete Tag… from a tag's right-click menu in the sidebar.
  • Renaming keeps every tagged item, and duplicate names are refused, never merged.
  • Deleting a tag removes only the tag: no files are deleted or changed.

Video fixes

• Quick Cleanup no longer crops portrait videos. Vertical clips (for example 720×1280) are now shown whole, with black bars at the sides, like in the normal viewer.
• Filmstrip frames keep the video's real shape. Portrait and rotated phone videos get narrow portrait frames instead of landscape crops.
• Video details report the displayed size of rotated phone videos.

Safety and privacy

• Every new file operation (move, copy, drag and drop, Quick Cleanup's final step) goes through the same backend checks as before: Read-only Mode, protected folders (Never Modify) and Private Inspection are enforced there, not just in the interface. Links are moved or copied as links; what they point to is never touched.
• Quick Cleanup's resumable sessions save only opaque item ids and decisions, never names or paths. They are listed in Privacy & Local Data, and are never written in temporary sessions.
• Dragging carries no file paths outside Mori, and files dropped from other apps are ignored.

Downloads and platform support

File	Platform	Status
Mori_1.0.1_macOS_arm64.dmg	macOS, Apple Silicon	Tested by hand on macOS 26, plus the automated tests
Mori_1.0.1_macOS_x64.dmg	macOS, Intel	Built and tested on an Intel runner; not tested on Intel hardware
Mori_1.0.1_Windows_x64-setup.exe / .msi	Windows 10/11, x64	Built, and its unit tests pass, in CI. Not yet tested by hand
Mori_1.0.1_Linux_x64.AppImage / .deb	Linux, x64	Built, and its unit and worker tests pass, in CI. Not yet tested by hand
SHA256SUMS.txt		SHA-256 of every file above

Installation is unchanged from 1.0.0. The builds aren't signed with a publisher certificate yet, so each system warns once; the 1.0.0 notes explain how to open Mori on each platform. Verify your download with shasum -a 256 -c SHA256SUMS.txt --ignore-missing (macOS, Linux) or Get-FileHash <file> -Algorithm SHA256 (PowerShell).

Known limitations

• Drag and drop works inside Mori only: you can't drag files out to Finder or other apps, or drop files from them into Mori.
• Folders with the same name are never merged: a folder name conflict offers Keep Both or Skip.
• Copying links on Windows needs Developer Mode.
• A move to another drive doesn't carry Mori's private, favorite or tag records to the new drive.
• No build is signed with a publisher certificate or notarized.
• Windows and Linux builds haven't been tested by hand yet, and have weaker decoder isolation than macOS.
• HEIC and PDF previews, new-drive detection and Undo for Trash are macOS features.
• Video and audio are played by the system's media engine, which runs outside Mori's sandbox. No sandbox is an absolute guarantee.

Mori v1.0.0

Mori 1.0.0

First stable release of Mori.

Mori is a private, offline media and file browser for inspecting local folders and external drives, including ones you don't trust. It browses them like a Finder-style gallery, and it previews photos, videos, PDFs and archives without handing the originals to other apps. It finds duplicates, reads metadata and checks file integrity. Everything runs on your computer: there is no account, no cloud, no telemetry and no network functionality.

Highlights

Browse and preview

• Fast local browsing of folders and external drives in Gallery, Grid and List views, with search, filters, subfolder views, a command palette and keyboard navigation.
• Safe previews: images and HEIC are decoded in a sandboxed worker and shown as re-encoded copies.
  • PDFs are rendered as bitmaps with nothing interactive executed.
  • Archives are listed, never extracted, with traversal and bomb checks.
  • Video plays with a filmstrip, audio with a waveform.

Inspect unknown drives

• Private Inspection: one step to browse a drive read-only, in a temporary session, with automatic decoding off. End Session clears everything Mori held about it.
• Safe Drive Mode: a drive Mori has never seen is indexed from filesystem metadata only, and nothing is decoded until you ask.
• Temporary Sessions: browse without Mori keeping an index, thumbnails, history or records afterwards.
• Real file type detection and risk indicators: disguised executables, double extensions, hidden direction characters, truncated or extreme media.

Protect your files and data

• Private folders: a visibility boundary inside Mori. Not encryption; your files are unchanged.
• Read-only Mode and protected folders (Never Modify), enforced in the backend.

Analyze

• Metadata inspection and a Sensitive Metadata scanner for location, device and personal fields, an offline Places map, and sanitized copies.
• Duplicate detection by content hash, and Similar Media by perceptual comparison.
  • Difference View and side-by-side comparison.
  • A suggested Best Copy that explains its reasons.
• SHA-256 integrity: checksums, Compare Integrity for two files, and folder integrity snapshots that report Unchanged / Changed / Missing / New.
• Storage analysis with a treemap, Media Health for broken and unsupported media, and Empty Folders.

Organize and manage

• Tags and favorites, kept in Mori's own data.
• Careful file operations: Move to Trash with Undo, and Delete Permanently behind an Operation Preview.

Diagnostics

• A self-test on synthetic files shows which media, security, privacy, network and ephemeral protections are verified on your installation, with no hard-coded check marks.

Privacy & security

• Privacy. Your files and what Mori learns about them stay on your computer. Privacy & Local Data lists everything Mori stores, with sizes, and lets you clear it selectively or reset Mori. Mori never deletes or changes your files when doing so.
• Security. Every file is treated as untrusted input. Decoding happens in worker processes that receive bytes, never paths. On macOS the system sandbox denies those workers file access, network access and new processes. Links are never followed.
• Offline. Core features work without an internet connection. The interface refuses every remote origin, and the decoder workers are denied network access by the OS sandbox. The main process has no network code, but it is not sandboxed from the network.
• Ephemeral inspection. Temporary sessions and Private Inspection keep their data in memory and clear it when the session ends. An automated test verifies that a session leaves nothing in Mori's own data.

Mori is not antivirus software: it reports observations, never verdicts like "safe". No sandbox is an absolute guarantee. Mori minimises its own traces but cannot remove those created by the operating system or other software. See SECURITY.md and the privacy inventory.

Downloads and platform support

File	Platform	Status
Mori_1.0.0_macOS_arm64.dmg	macOS, Apple Silicon	Tested by hand on macOS 26, plus the automated tests
Mori_1.0.0_macOS_x64.dmg	macOS, Intel	Built and tested on an Intel runner; launched under Rosetta, not on Intel hardware
Mori_1.0.0_Windows_x64-setup.exe / .msi	Windows 10/11, x64	Built, and its unit tests pass, in CI. Not yet tested by hand
Mori_1.0.0_Linux_x64.AppImage / .deb	Linux, x64	Built, and its unit and worker tests pass, in CI. Not yet tested by hand
SHA256SUMS.txt		SHA-256 of every file above

• macOS declares version 11 as its minimum; versions before 26 haven't been tested.
• Windows and Linux are earlier-stage builds:
  • Weaker isolation: decoder workers get resource limits and never receive file paths, but no OS sandbox denies them file access as on macOS.
  • macOS-only features: HEIC previews, PDF previews, new-drive detection and Undo for Trash.
  • Untested by hand: please report problems.

Installation

Verify your download (optional): shasum -a 256 -c SHA256SUMS.txt --ignore-missing on macOS and Linux, or Get-FileHash <file> -Algorithm SHA256 in PowerShell, compared with the line in SHA256SUMS.txt.

None of these builds is signed with a publisher certificate yet, so each system warns once. You never need to disable Gatekeeper, SmartScreen or any other protection.

macOS

1. Open the DMG and drag Mori into Applications, then open Mori.
2. macOS blocks the first launch with "Apple could not verify “Mori” is free of malware…":
   • macOS 15 and later:
     1. Click Done.
     2. Open System Settings → Privacy & Security.
     3. Click Open Anyway next to the Mori message, and confirm.
   • macOS 14 and earlier: Control-click Mori → Open → Open.

Windows

1. Run Mori_1.0.0_Windows_x64-setup.exe (or the .msi).
2. Microsoft Defender SmartScreen shows "Windows protected your PC" with Unknown publisher. Click More info → Run anyway.
3. Mori needs Microsoft Edge WebView2, which Windows 11 includes. If it's missing, the installer downloads it from Microsoft. That download is the installer, not Mori.

Linux

• AppImage:
  1. chmod +x Mori_1.0.0_Linux_x64.AppImage, then run it.
  2. It needs FUSE 2: sudo apt install libfuse2 on Ubuntu 22.04, or libfuse2t64 on 24.04.
• Debian/Ubuntu: sudo apt install ./Mori_1.0.0_Linux_x64.deb.
• Video and audio playback use the system's GStreamer plugins (for example gstreamer1.0-plugins-good and gstreamer1.0-libav).

Known limitations

• No build is signed with a publisher certificate or notarized (see Installation).
• Windows and Linux builds haven't been tested by hand yet, and have weaker decoder isolation than macOS.
• Video and audio are played by the system's media engine, which runs outside Mori's sandbox.
• HEIC and PDF previews, new-drive detection and Undo for Trash are macOS features.
• Similar Media results are estimates; review them before removing anything.
• Secure Overwrite is refused on APFS and SSDs, which includes a typical Mac. Mori never claims files are unrecoverable.
• Traces outside Mori's control remain possible: file-system journals, swap, snapshots, backups, crash reports, SSD behaviour, Spotlight, third-party software.