FinderRight

• 从 1.2.0 及更早版本首次升级：旧版是 ad-hoc 签名，系统会视为不同的程序，即使开关显示已开启也需重新授权一次。最省事的做法：

  tccutil reset SystemPolicyAllFiles com.finderright.app
  tccutil reset Accessibility com.finderright.app

  然后重新打开 FinderRight 按引导授权。1.3.0 起使用固定证书，后续升级会保留授权。
• 自动更新：默认关闭；开启后每 6 小时检查一次，等待在途文件操作完成后，自动退出旧版、安装并启动新版。更新同时请求官网与 GitHub，优先采用可安装的新版本；没有新版的结果会再等另一渠道最多 800 毫秒，若两边都没有有效结果则继续等待正常超时，不会仅凭计时器报告“未发现新版本”。下载卡住会切换备用源；安装前核对 SHA-256、预期版本、四个组件的版本一致性与系统要求。当前使用证书签名时要求同一证书，当前应用或新包的签名读取失败都直接拒装，ad-hoc 旧版升级继续兼容已有发布流程。旧版备份保留到新版完成初始化确认后才删除（自动更新重启的后台启动同样确认）；上次更新尚未确认时，新的更新会暂停并提示先完成确认。
• 混用 Homebrew 与应用内更新：应用内更新不会同步 Homebrew 的版本记录，可能导致重复安装；Cask 声明了 auto_updates true，普通 brew upgrade 会跳过它。

iCloud Drive、Google Drive、OneDrive、Dropbox 等云盘是 macOS 的 File Provider 域，目录归云盘自己的扩展管理，第三方 Finder 扩展的右键菜单不会出现，完全磁盘访问也改变不了（见 Keka #1327 中转述的 Apple DTS 答复）。/Applications、/Users/Shared 等未注册目录同理。

在这些位置，FinderRight 的操作改由 右键 → 服务 提供：复制路径 / 复制文件名 / 复制文件内容 / 复制 SHA-256 / 复制项目相对路径 / 复制目录树 / 创建符号链接 / 转换为 PNG / 转换为 JPEG / 转换为 HEIC / 打开路径 / 新建文件 / 移动到 / 复制到 / 打开终端 / 打开编辑器 / 剪切 / 粘贴到此文件夹 / 压缩 / 解压。

• 粘贴：剪切后在目标目录空白处选「服务 → FinderRight：粘贴到此文件夹」；若空白处没有「服务」，可回到上一级右键目标文件夹。它移动的是 FinderRight 的剪切队列，而不是系统剪贴板。
• 新建文件、移动到 / 复制到会先弹确认框；取消不会操作文件。
• 「服务」菜单标题跟随系统语言，不随 FinderRight 的界面语言切换。
• 可在「设置 → 通用 → 显示」切换 在「服务」中显示 FinderRight，统一显示或隐藏全部服务项（默认显示）。若访达仍显示旧菜单，可点击「重启访达」刷新；重启可能中断正在进行的拷贝。

• 文件夹与 ZIP / TAR / TAR.GZ / TAR.BZ2 / TAR.XZ / 7z / RAR 使用只读目录列表，可展开子目录、点击列标题排序；不预览包内文件内容，不向磁盘解压。
• apk / ipa / jar / war / whl 按 ZIP 列出内容；rpm 列出负载中的文件（zstd 压缩的负载不支持）；iso 列出光盘目录；deb 与 pkg 只列出顶层成员（如 data.tar.xz、Payload），不再展开内层包。
• YAML / YML / TOML / INI 与按内容识别的文本、配置和源码支持 UTF-8 与带 BOM 的 UTF-16；超过 1 MiB 时只读取开头，在最后一个完整换行处截断并提示（没有换行时保留完整字符的前缀），仍支持语法高亮。
• .gitignore、.env 等点文件，Dockerfile 等无扩展名文件，.conf / .config / .cfg 等配置文件，系统不认识的源码（.go / .rs / .tsx / .vue / .scss / .sql / .proto / .tf 等）、.jsonl / .lock 等结构化文本，以及 .srt / .vtt / .tex / .org 等字幕与标记文档，都按内容识别：是文本则显示内容；Swift、Go、Rust、JS/TS、Python、Shell、JSON、YAML、TOML 支持轻量语法高亮，未知语言保持纯文本，不是文本（如 .DS_Store、可执行程序）则保留系统默认预览。TypeScript 的 .ts 被系统固定识别为视频，无法接管。
• Markdown（.md）渲染标题、列表、任务列表、表格、引用与代码块，已标明上述语言的围栏代码块也支持着色；着色跟随浅深色外观，单段超过 1 MiB 时降级为纯文本；最多 1 MiB；表格保留列对齐，保留脚注引用标记与定义正文（不提供脚注跳转）；开头的 YAML 元信息以原文显示；图片只显示替代文字，HTML 按原文显示，链接悬停可查看目标、右键可复制地址，但不可点击跳转，不加载任何外部资源。它是独立的预览扩展，可在设置里单独关闭；若 MarkEdit 等应用也提供 Markdown 预览，设置页会提示只保留一个。
• 文档预览在后台生成显示内容，减少 Notebook 与 SQLite 等复杂内容准备时的主线程阻塞。
• Jupyter Notebook（v4）最多读取 5 MiB、展示 200 个单元；渲染 Markdown、显示代码与已保存的文字输出，不执行代码、不加载外部资源，不显示图片与 HTML 输出。
• SQLite（.sqlite / .sqlite3）只读展示最多 20 张普通表的列名、类型和每表前 50 条记录，单元格最多展示 512 字节；跳过视图、虚拟表和生成列。使用主文件快照，不包含尚未合并到主文件的 WAL 数据。
• CSV / TSV 以表格显示（首行为表头，自动识别逗号 / 分号 / 制表符，支持 GBK 编码），最多显示 500 行 × 50 列；plist 显示为文本，二进制 plist 自动转换为 XML。
• 包含隐藏项；不展开符号链接或 .app 等文件包，不递归统计目录大小。
• 每层文件夹最多 2,000 项，压缩包最多 10,000 条记录，超出会提示内容不完整；其他压缩格式还受扫描资源上限约束。
• 不支持 ZIP64、分卷 ZIP；加密 ZIP 可显示条目但不解密。
• 预览扩展有独立的沙箱权限，主 App 的完全磁盘访问不会自动授予它。

• 加密 / 分卷压缩包：加密 ZIP 会弹密码框；加密的 7z / RAR 和分卷包无法解压，会提示失败并自动清理临时文件。
• 撤销：只支持单级撤销，与访达自己的撤销按先后顺序共存；文件被改过或原位置有同名项时跳过，删除一律进废纸篓。
• 新建文件：桌面新建不弹出访达窗口，其他目录仍自动选中新文件。
• 剪贴板新建：文件名默认 untitled，可修改；文本类型从下拉框选择，最后一项「自定义」可填写后缀；图片可选 PNG、JPEG 或 HEIC，JPEG 的透明区域会铺白底。文本和图片分别记住上次成功创建时的格式，包括自定义文本后缀；取消或创建失败不更新记忆。
• 开发者工具：复制哈希计算 SHA-256 / SHA-1 / MD5，多选与 shasum 格式一致；创建符号链接在原位置生成终端与开发工具可识别的符号链接。项目相对路径以最近 Git 仓库为基准；目录树最多 4 层、1,000 项和 128 KiB，跳过常见依赖与构建目录，不展开符号链接或文件包。文件比较使用紧凑窗口，未选齐时显示左右拖入框，选齐后收成顶部窄栏，下方按行并排显示新增、删除与行号，可随时移除或替换文件；只读支持 UTF-8 和带 BOM 的 UTF-16，每个文件最多 1 MiB、20,000 行。Git 状态支持切换和新建本地分支、暂存／取消暂存、提交，以及目录筛选和已暂存／未暂存 diff。提交前列出整个仓库的暂存文件，沿用 Git 身份、hooks 与签名配置；需要终端交互的流程暂不支持。拉取会把远端改动合并到当前分支，推送按当前分支的上游提交，两者都只通过 https、ssh 或 git 协议联网，并且需要仓库已在终端配置好远端与上游分支。不比较符号链接或子模块内容。自定义命令以 zsh 登录环境在后台执行，选中项通过 "$@" 传入；不支持交互输入和撤销，关闭输出窗口或退出应用会停止命令。自定义命令暂不提供云盘「服务」入口。
• 操作历史：仅保存在本机，默认保留最近 100 条（可选 0 / 50 / 500）；清空历史不影响文件和撤销。
• 剪切状态：粘贴过程中主 App 崩溃，未移动的项目会在下次启动时恢复回剪切队列。取消剪切失败时会提示原因，排除权限等问题后可重试。
• 语言：右键菜单即时切换，剪切角标文案需重启访达后生效。

• First upgrade from 1.2.0 or earlier: older builds were ad-hoc signed, so macOS treats the new one as a different app; re-grant permissions once even if the toggles look on. The easiest way:

  tccutil reset SystemPolicyAllFiles com.finderright.app
  tccutil reset Accessibility com.finderright.app

  Then reopen FinderRight and follow the onboarding. Since 1.3.0 a fixed certificate is used, so later upgrades keep permissions.
• Auto-update: off by default; when on, it checks every 6 hours, waits for in-flight file operations to finish, then exits the old version, installs and launches the new version. It queries the website and GitHub and accepts an installable new version immediately. A no-update result gives the other source up to 800 more milliseconds; if neither source has a valid result, the app waits for normal timeouts rather than reporting no update from a timer. Stalled downloads switch to the alternate source. SHA-256, the expected version, consistent component versions and system requirements are checked before installation. Certificate-signed builds require the same certificate; an unreadable signature — on either the current app or the update package — is rejected, while upgrading existing ad-hoc builds remains compatible. The old-version backup is removed only after the new version finishes initializing and confirms installation (the background relaunch of an automatic update confirms as well); while a previous update is unconfirmed, further updates pause and ask you to confirm first.
• Mixing Homebrew and in-app updates: in-app updates don't update Homebrew's version record, which may cause reinstalls; the cask declares auto_updates true, so a plain brew upgrade skips it.

iCloud Drive, Google Drive, OneDrive, Dropbox and similar services are File Provider domains on macOS, owned by the provider's own extension, so third-party Finder extension menus don't appear there, and Full Disk Access doesn't change that (see the Apple DTS reply quoted in Keka #1327). Unregistered folders such as /Applications and /Users/Shared behave the same way.

In these places FinderRight's actions are available under right-click → Services: Copy Path / Copy File Name / Copy File Content / Copy SHA-256 / Create Symbolic Link / Convert to PNG / Convert to JPEG / Convert to HEIC / Go to Folder / New File / Move To / Copy To / Open in Terminal / Open in Editor / Cut / Paste into This Folder / Compress / Extract.

• Paste: after cutting, right-click empty space in the destination and choose "Services → FinderRight: Paste into This Folder"; if Services is missing there, right-click the destination folder from its parent. It moves FinderRight's cut queue, not the system clipboard.
• New File and Move To / Copy To show a confirmation dialog first; cancelling does nothing.
• Service titles follow the system language, not FinderRight's language setting.
• In Settings → General → Display, use “Show FinderRight in Services” to show or hide all service items (shown by default). If Finder still shows the old menu, click “Relaunch Finder” to refresh it; relaunching may interrupt copies in progress.

• Folders and ZIP / TAR / TAR.GZ / TAR.BZ2 / TAR.XZ / 7z / RAR archives use read-only, expandable and sortable listings; no archived file-content preview or extraction to disk.
• apk / ipa / jar / war / whl are listed as ZIP; rpm lists its payload files (zstd-compressed payloads aren't supported); iso lists the disc directory; deb and pkg list only top-level members (such as data.tar.xz or Payload) without opening nested archives.
• YAML / YML / TOML / INI and content-detected text, configuration and source files use UTF-8 or BOM-marked UTF-16. Files over 1 MiB show only the bounded prefix through its last complete newline, with a notice and syntax highlighting; without a newline, the prefix ends at a complete character.
• Dotfiles such as .gitignore and .env, extensionless files such as Dockerfile, config files such as .conf / .config / .cfg, source code macOS doesn't recognize (.go / .rs / .tsx / .vue / .scss / .sql / .proto / .tf and more), structured text such as .jsonl / .lock, and subtitles or markup such as .srt / .vtt / .tex / .org are detected by content: text is displayed with lightweight syntax highlighting for Swift, Go, Rust, JS/TS, Python, Shell, JSON, YAML and TOML; unknown languages stay plain text, while non-text files (such as .DS_Store or executables) keep the system's default preview. TypeScript .ts files can't be taken over because macOS always treats them as video.
• Markdown (.md) renders headings, lists, task lists, tables, quotes and code blocks, up to 1 MiB; table column alignment is preserved, and footnote markers and definition text are preserved without jump navigation; leading YAML front matter is shown as-is; images show only their alt text, HTML is shown as plain text, hover over links to see their targets or right-click to copy their addresses; links don't open, and no external resources are loaded. It's a separate preview extension you can turn off in Settings; if another app such as MarkEdit also previews Markdown, Settings suggests keeping only one. Fenced code blocks tagged with the supported languages are also highlighted. Colors follow light/dark appearance; individual blocks over 1 MiB remain plain text.
• Document preview content is generated in the background to reduce main-thread blocking while preparing complex Notebook and SQLite previews.
• Jupyter Notebook v4 reads up to 5 MiB and displays up to 200 cells, with rendered Markdown, code and saved text outputs. Code is never executed, external resources are never loaded, and image/HTML outputs are omitted.
• SQLite (.sqlite / .sqlite3) displays names and types of columns and up to 50 rows from each of 20 ordinary tables, with a 512-byte cell display limit. Views, virtual tables and generated columns are skipped. Read-only previews use the main database file snapshot and omit uncheckpointed WAL changes.
• CSV / TSV files are shown as a table (first row as header; comma, semicolon or tab detected automatically; GBK encoding supported), up to 500 rows × 50 columns; plist files are shown as text, with binary plists converted to XML.
• Includes hidden items; doesn't follow symbolic links, browse app packages, or compute folder sizes.
• Up to 2,000 items per folder and 10,000 archive records, with a notice when truncated; other archive formats also have scan resource limits.
• ZIP64 and split ZIPs aren't supported; encrypted ZIPs list entries but aren't decrypted.
• The preview extension has its own sandbox permissions; the main app's Full Disk Access doesn't extend to it.

• Encrypted / multi-volume archives: encrypted ZIPs prompt for a password; encrypted 7z / RAR and split archives fail with a message, and temporary files are cleaned up.
• Undo: single-level only, interleaved with Finder's own undo; items that changed or whose original location is taken are skipped, and deletions always go to the Trash.
• New File: creating a file on the desktop does not open a Finder window; other folders still select the new file automatically.
• Create from Clipboard: the file name defaults to untitled and can be changed. Select a text file type from the dropdown, or use its final Custom option to enter an extension. Images can be saved as PNG, JPEG or HEIC; transparent areas are filled white for JPEG. Text and images separately remember the last successfully used format, including custom text extensions; cancelling or a failed creation keeps the previous choice.
• Developer Tools: Copy Hash computes SHA-256 / SHA-1 / MD5 with output matching shasum for multiple items. Make Symbolic Link creates symbolic links next to the originals that Terminal and developer tools recognize. Relative paths use the nearest Git repository. Directory trees show up to 4 levels, 1,000 items and 128 KiB, skip common dependency and build folders, and do not expand symbolic links or packages. File comparison uses a compact window: two drop areas before both files are selected, then slim file bars above aligned line numbers and additions/deletions. Files can be removed or replaced at any time. It is read-only and supports UTF-8 and UTF-16 with a BOM, up to 1 MiB and 20,000 lines per file. Git status supports switching and creating local branches, staging/unstaging, commits, folder filtering and staged/unstaged diffs. Review all staged files across the repository before committing. Git identity, hooks and signing settings are respected; workflows requiring terminal input are unsupported. Pull merges remote changes into the current branch, and push sends it to its upstream; both connect only over https, ssh or git, and require a remote and upstream branch already configured in Terminal. Content diffs for symbolic links or submodules are not provided. Custom commands run in a background login zsh, with selected items passed as "$@"; interactive input and undo are unavailable. Closing the output window or quitting stops the command. Custom commands are not currently available through Services in cloud folders.
• Operation history: stored only on this Mac, keeping the latest 100 entries by default (0 / 50 / 500 also available); clearing it doesn't affect files or undo.
• Cut state: if the main app crashes mid-paste, unmoved items return to the cut queue on next launch. If canceling cut fails, the app explains why; resolve the issue, such as permissions, and retry.
• Language: the context menu switches immediately; the cut badge label updates after Finder restarts.