macsai

Mac Sai is a free, BSD-licensed, open-source macOS utility providing cleaner, optimizer, and malware scanning capabilities as an alternative to paid tools like CleanMyMac. It requires macOS 14+ and is built with Swift 6 and SwiftUI. The app ships with 17 modules organized into five areas: **Cleanup**: Smart Scan runs all cleanup, protection, and performance modules in one click. System Junk scans 16+ categories including caches, logs, language files, broken preferences, iOS backups, Xcode junk, and AI-tool caches. It also performs Universal Binary thinning via `lipo` to rewrite fat Mach-O binaries to the native architecture. Additional modules cover Mail attachments, and Trash emptying across all volumes including external drives. **Protection**: Signature-based malware scanning at three depths (Quick, Balanced, Deep) targeting launch agents, daemons, browser extensions, and known adware patterns. Privacy module cleans Safari, Chrome, and Firefox history, cookies, and cache with time filters. Saved Wi-Fi lists and forgets preferred networks. Permissions Overview shows a read-only by-app view of TCC grants with deep-links to System Settings. **Performance**: Login item and launch agent management with per-item enable/disable. Maintenance module runs system tasks including RAM freeing, maintenance scripts, startup disk verification, Launch Services rebuild, Spotlight reindexing, DNS flush, and Time Machine snapshot thinning. **Applications**: Uninstaller with pattern matching across 17+ Library subdirectories, Reset to Defaults (wipes caches/preferences while keeping the app), and unused-app detection. Extensions module reviews preference panes, Internet Plug-Ins, and Safari extensions. Updater checks for app updates via Sparkle appcast feeds. **Files**: Space Lens provides a squarified-treemap visualization of disk usage. Large & Old Files finds files over 50 MB. Duplicates uses progressive detection (size grouping, partial SHA-256, full hash, inode verification) with a Consolidate mode using APFS copy-on-write clones. Shredder securely erases files in standard, permanent, and secure-overwrite modes. **Menu Bar Widget**: An independent glassmorphism process showing live CPU, memory, disk, battery, network, uptime, swap stats, actionable recommendations, malware-scan status, connected devices, and health alerts. Safety is emphasized throughout: a protected-paths blocklist excludes /System and critical directories, trash-first deletion with dry-run preview, TOCTOU prevention via symlink re-resolution, configurable excluded folders, chunked cancellable cleanup, and an in-app activity log. A privileged XPC helper handles root operations with kernel-enforced code-signing verification. The app reports zero telemetry, with no analytics, crash reporters, or trackers. Network access is limited to optional update checks and Sparkle feeds. The source and binary can be independently verified. Installation is via Homebrew (`brew install --cask mac-sai`), direct DMG download, or building from source with Swift 6. The project includes 862 XCTest tests covering safety guards, file operations, scanning state machines, and end-to-end cleanup cycles. Licensed BSD-3-Clause.