KachraClean 0.1.5 (security update)

A security update before the public launch. Nothing changes in what KachraClean finds; it is stricter about what it will move.

• Results from an earlier session are no longer pre-selected. The saved report lives on disk, where any program running as you could edit it, so only a scan made in the current session pre-selects its safe items.
• Each category is checked against what its scan really reports before anything moves. For example, an AI model must be inside a model cache or be a recognised weights file, and a duplicate must be in Downloads. Data that belongs to macOS and Apple apps (Safari, Contacts, Calendars, Notes, device backups, Photos and Music libraries) is always refused, as are more credential locations (~/.config/gcloud, ~/.config/gh, SSH keys outside ~/.ssh, folders that hold a login token).
• Docker: only Docker Desktop's own docker CLI, signed by Docker Inc, is run for the breakdown. A docker found in Homebrew or your home folder is no longer run, because programs KachraClean starts inherit its Full Disk Access.
• Smaller hardening: exact matching of app group containers, quoted names in copyable commands, and cleanup rules compiled into the app.

Details are in SECURITY.md and the case-study log.

Download KachraClean-0.1.5.dmg, open it and drag KachraClean to Applications. KachraClean is released without an Apple Developer account, so the app is ad-hoc signed but not notarized: macOS will ask you to confirm the first launch (System Settings → Privacy & Security → Open Anyway). Check the checksum below first, or build it from source. See the README.

SHA-256 of KachraClean-0.1.5.dmg:

bfb1b5ada17ec567c879b6986473d4caa10346bf5dc8013f54e8807b0ec26993

KachraClean 0.1.4 (crash fix)

Fixes a crash when moving items to the Trash while the Disk Explorer was showing their folder. The items were moved, but the app quit and the Undo for that clean was lost. Anything affected can be restored from the Trash with Put Back.

Download KachraClean-0.1.4.dmg, open it and drag KachraClean to Applications. The app isn't notarized yet; see the README for how to open it the first time.

KachraClean 0.1.3

What's new

Old installers. Disk images and installer packages in Downloads and on the Desktop, matched by name to the apps they installed. Nothing is mounted or opened. Installers for apps that are already installed are marked safe; the rest are marked review.

What grew since last time. Each scan keeps a small summary. The Overview shows what grew by 100 MB or more since an earlier day, and the Disk Explorer marks folders that changed by 500 MB or more ("+18 GB since 12 Oct"). It starts working from your second day of scans.

Docker breakdown. If Docker is installed, the scan asks Docker what it can free and lists Docker's own commands (unused images, build cache, stopped containers, unused volumes) with Copy buttons. KachraClean never runs them for you.

Fix: the app's data folder is now private to your user account, including folders created by earlier versions.

Install

Download the DMG and drag KachraClean to Applications. The app is not notarized, so the first time, right-click it and choose Open (or use System Settings → Privacy & Security → Open Anyway).

SHA-256: 70436106adaa013f52260982456800efc184449feaf31237062c947af9b9c6ae

KachraClean 0.1.2

What's new

Disk Explorer. Every folder in your home, biggest first, in Finder-style columns. Sizes fill in live; a + means part of a folder couldn't be read. Suggestions from the scan are marked, and folders that hold them say how much. "Rest of the disk" shows what lies outside your home folder. Move to Trash asks first, says whether KachraClean recognises the item, and can be undone. Also on the command line: kachra explore [folder].

Clean what's in view. Inside a category, Move to Trash now moves only that category's selection. Selections elsewhere are mentioned, never included. The Overview's Clean button says which categories it includes.

Which projects use each model. Hugging Face and Ollama models show the code projects that mention them, or that none do.

Smaller fixes: the Select menu respects search; items hidden by a filter are counted; filters reset between categories; emptied categories explain themselves; stale scans aren't pre-selected and say why; Never Suggest Again can be undone.

Install

Download the DMG, drag KachraClean to Applications. The app is not notarized: the first time, right-click → Open (or System Settings → Privacy & Security → Open Anyway).

SHA-256: f4611adbce1a8fd6044470584fed8e16ca8033a24a24f97b0cb67fcc57625956

KachraClean 0.1.1 (safety update)

Safety update. Everyone on 0.1.0 should update.

Fixed

• Login tokens could be pre-selected as cache. Files in ~/.cache (for example the Hugging Face login token) were listed as safe caches. Now only folders in ~/.cache are listed, and they are marked review.
• Hugging Face: files that a model folder links to outside the cache are no longer counted as part of the model.
• Ollama: model manifests can no longer point blob paths outside the model folder.
• Apps: app identifiers and names are validated before being used to find an app's related data.
• Large files: sharded model weights are grouped only inside a real model folder, never a folder that merely contains a vae/ or transformer/ subfolder.
• Undo now also restores items that were only partly cleaned.
• Scans more than a day old are no longer pre-selected.

Hardened

• The cleaner re-checks every path before moving it. It refuses credentials and keys, keychains, Mail, Messages, iCloud and other cloud folders, and anything that doesn't match its category.
• The saved scan report is readable only by you.
• The app is signed with the hardened runtime.

Install: download KachraClean-0.1.1.dmg, open it and drag KachraClean to Applications, replacing the old copy. This is a new build, so macOS may ask you to grant Full Disk Access again. It is not notarized yet: on first launch use System Settings → Privacy & Security → Open Anyway.

SHA-256: 896c7ebd05ee8f5e77fffc591a2aca34e491db93ab293eca5a7fcd638716497c

KachraClean 0.1.0 (preview)

Superseded by 0.1.1, a safety update. Please use 0.1.1.

First preview of KachraClean, an open-source storage cleaner for macOS.

Install: download KachraClean-0.1.0.dmg, open it, and drag KachraClean to Applications. Requires macOS 14 or later; universal build for Apple silicon and Intel.

First launch: this build is not notarized yet. After the first blocked launch, go to System Settings → Privacy & Security and click Open Anyway, or run xattr -dr com.apple.quarantine /Applications/KachraClean.app.

What it finds

• Code project dependencies and build output (node_modules, .venv, Rust target, …), ranked by how long the project has been idle
• AI models one by one: Hugging Face, Ollama, and loose weight files
• Large files such as videos, disk images and archives, with Quick Look
• Developer tool caches, app caches, logs and duplicate downloads
• Installed apps with their usage and everything they store

Safety

Nothing is removed without a preview. Items go to the Trash, never deleted outright, and the last clean can be undone. Every rule carries a safety level and a reason.

SHA-256 of the DMG: 56544407f386889d5fb9c52351610279dc94363b356b4d57cc44393db8062e8b