Nagori

Features

• Persistent clipboard history (text, images, file lists) stored locally in SQLite.
• Full-text search and pinning from a desktop palette or the nagori CLI.
• Built-in secret classifier that redacts API keys, JWTs, AWS / GitHub tokens, PEM blocks, credit-card numbers, and OTPs before they hit disk.
• User regex denylist for project-specific patterns.
• Auto-paste back into the previously focused window (Cmd/Ctrl+V synthesis).
• Quick actions on a selected entry: summarise, format JSON, extract tasks, redact secrets — all computed locally without any network calls.
• URL preview shows host on its own row with a punycode badge when the displayed Unicode host differs from its ASCII form; press Enter in the expanded preview to open the URL in the default browser after a confirm dialog (Public entries only, https / http only).
• Image preview uses a daemon-cached 512px thumbnail on row navigation so the palette stays responsive on multi-megabyte screenshots; the expanded preview switches to the original payload for click-to-zoom.
• Long-text preview shows head and tail with a middle-elided marker so the end of large logs / pastes stays visible; when the active search hit lands inside the elided range the preview flags it so you can expand to the 1 MiB full view (Public entries only).
• Quick Look preview on macOS — Cmd+Y in the palette opens the highlighted entry in the system Quick Look overlay (Public entries only). Windows and Linux Wayland surface the capability as Unsupported because neither OS ships a comparable system overlay.
• Bundled per-OS release artefacts with an in-app update-availability probe.

Install

Canary / pre-1.0. The 0.0.x line is a dogfooding canary. Bundles are published as GitHub pre-releases and the in-app updater only probes for new versions — it does not auto-install. Expect rough edges; see Known limitations before installing.

macOS bundles declare LSMinimumSystemVersion = 26.0 and the installer refuses to launch on earlier releases — the 0.0.x line is validated only against Tahoe. Linux additionally requires the wtype binary on $PATH for auto-paste and a Wayland compositor that exposes wlr_data_control or ext_data_control (sway, Hyprland, KDE Plasma 5.27+, …). See docs/platforms.md for the full compatibility matrix and troubleshooting.

Known limitations

• macOS .app / .dmg are unsigned. Gatekeeper warns on first launch; right-click → Open (or xattr -d com.apple.quarantine) to proceed.
• Windows NSIS bundle is unsigned. SmartScreen warns on first launch until an Authenticode EV certificate is in place; choose More info → Run anyway to proceed.
• Linux GNOME Wayland is not supported. GNOME exposes neither wlr_data_control nor ext_data_control, so the clipboard cannot be captured. X11 sessions are also out of scope.
• Linux global hotkeys do not register on pure Wayland. tauri-plugin-global-shortcut is X11-only upstream — toggle the palette from the tray icon instead.
• In-app updater is read-only. The desktop shell probes latest.json and surfaces "View release" / "Download manually" copy, but does not call download_and_install. Upgrade by downloading the bundle from the GitHub release page.
• Auto-paste fallback is manual. When the synthesised Cmd/Ctrl+V fails (restore-target lost, target app refused the paste, …), the entry is still copied to the clipboard and a paste_failed toast prompts you to paste manually — there is no automatic retry. The missing-Accessibility case is handled separately: the palette's status bar shows a persistent warning with a Setup shortcut instead of a transient toast.

Usage

1. Launch the desktop app — it starts the background daemon and registers a global hotkey (default Ctrl+Shift+V, Cmd+Shift+V on macOS). On Linux Wayland the upstream global-shortcut plugin is X11-only, so the registration fails and you toggle the palette from the tray icon instead.
2. Press the hotkey to open the palette, type to search, arrow keys to navigate, Enter to paste the highlighted entry back into the previous window.
3. Use Settings for privacy and hotkey configuration. Run nagori doctor if something feels off (the desktop app's Settings → Advanced → Diagnostics runs the same probe).

The nagori CLI ships inside the desktop app bundle. Homebrew cask installs link it onto your PATH automatically; for direct .dmg installs, open Settings → CLI → Command-line tool → Install nagori CLI to symlink it into ~/.local/bin. See docs/cli.md for details.

CLI quick reference:

nagori list --limit 10            # recent clips
nagori search "kubectl"           # full-text search
nagori paste <id>                 # copy + auto-paste an entry
nagori capabilities               # what this OS build supports

Full CLI reference: docs/cli.md.

FAQ

Where is my data stored? ~/Library/Application Support/nagori (macOS), %LOCALAPPDATA%\nagori (Windows), or $XDG_DATA_HOME/nagori (Linux).

Is the database encrypted? No. The DB file has restrictive filesystem permissions but is not encrypted at rest. Use FileVault / BitLocker / LUKS for full-disk protection. SQLCipher integration is on the roadmap.

How does secret redaction work? The default mode stores matched secrets as [REDACTED] and re-derives hashes and search tokens from the scrubbed form. Switch to Store full only if you need the raw bytes — details in docs/privacy.md.

Windows SmartScreen warns me on first launch. The NSIS installer is not yet Authenticode-signed, so every fresh download trips the warning until the certificate is in place. Choose More info → Run anyway to proceed.

Auto-paste does not work on Linux. Install wtype and confirm the compositor exposes zwp_virtual_keyboard_manager_v1 (run wtype test while a text field has focus). Troubleshooting steps live in docs/platforms.md.

The global hotkey does not register on Linux. tauri-plugin-global-shortcut is X11-only upstream. On pure Wayland sessions the registration fails and the Settings page prompts for a different binding — use the tray icon to toggle the palette until upstream support lands.

Documentation

• ARCHITECTURE.md — workspace layout and runtime topology.
• docs/platforms.md — compatibility matrix and per-OS notes.
• docs/privacy.md — privacy model, redaction, denylist.
• docs/cli.md — CLI reference.
• docs/ipc.md — IPC envelope and transport.

License

Licensed under the MIT License.