A keyboard-first Windows file manager by Beyond Marks, powered by Everything search and end-to-end encrypted device transfers.
| Capability | What it gives you |
|---|---|
| Instant local search | Search the live Everything index in milliseconds and filter by all items, files, or folders. |
| Search another PC | View indexed results from explicitly shared folders on a paired, online Windows PC. |
| Fetch only what you need | Mark one or more remote results and press Ctrl+T; Wrapper transfers only those items. |
| Visible progress | See the real stage, percentage, downloaded bytes, and destination while a transfer runs. |
| Private transfers | Files and manifests are encrypted on the source PC before upload and decrypted only on the destination PC. |
| Full file manager | Keyboard navigation, multiple panels, previews, metadata, archives, clipboard operations, themes, and more. |
Press Ctrl+G and type a name. Wrapper queries the live Everything index instead of walking the disk.
Press Shift+Tab to switch devices, Tab to choose ALL, FILES, or FOLDERS, and Space to mark remote results.
After Ctrl+T, Wrapper shows the transfer stage, actual downloaded bytes, percentage, and destination. Monitoring continues even if the search window is closed.
After decryption and integrity verification, Wrapper displays a completion popup with the destination folder.
- Windows 10 or Windows 11, x64.
- Internet access for sign-in, pairing, remote search, and transfers.
- Both PCs must use the same Google account for cloud features.
-
Download Wrapper-Setup-x64.exe.
-
Run it as administrator on both PCs.
-
The installer adds Wrapper to PATH, installs Everything 1.4 with its indexing service, installs the Everything SDK DLL, and installs Wrapper Agent.
-
Complete the Google sign-in window and register the PC when prompted.
-
Start Wrapper from PowerShell or Windows Terminal:
wrap
No separate runtime, Everything installation, SDK setup, or background-service setup is required.
Do these steps once after installing Wrapper on both computers.
On both PCs:
wrap auth login
wrap device register --name $env:COMPUTERNAME
wrap agent status
The default download destination is:
%USERPROFILE%\Downloads\Wrapper
On the PC that owns the files:
wrap share add C:\Users\you\Documents
wrap share list
Remote search and remote-requested transfers cannot leave these shared roots.
On PC A, create a ten-minute code:
wrap device code
On PC B, enter that code:
wrap device pair ABCD-EFGH
PC B prints a pairing ID. Approve it on PC A:
wrap device confirm PAIRING_ID
Verify the connection on either PC:
wrap device list
- Run wrap.
- Press Ctrl+G.
- Press Shift+Tab until the other PC is selected.
- Type a file or folder name.
- Press Space to mark multiple results, or leave the cursor on one result.
- Press Ctrl+T.
- Dismiss the request confirmation and watch the progress bar.
- Wrapper decrypts, verifies, and saves the result under Downloads\Wrapper, then displays its location.
| Shortcut | Action |
|---|---|
| Ctrl+G | Open Everything Global Search |
| Tab | Change ALL / FILES / FOLDERS |
| Shift+Tab | Change This PC / paired PC |
| ↑ / ↓ | Move through results |
| Space | Mark or unmark a remote result |
| Enter | Open a local result or mark a remote result |
| Ctrl+T | Request marked remote results or send a local selection |
| Esc | Close the search window |
wrap.exe
│ per-user named pipe
▼
wrapper-agent.exe
│
├── local Everything IPC ──► instant indexed search
│
└── signed HTTPS + Firebase authentication
│
▼
Cloud Run API
│ │
Firestore private GCS
metadata ciphertext
│
automatic deletion after 24h
The source PC creates a compressed archive, encrypts it with the destination device's age X25519 public key, and uploads ciphertext through a resumable session. The destination resumes interrupted downloads, decrypts into a staging directory, rejects unsafe archive entries, verifies the manifest and SHA-256 hashes, and then moves the verified files into place. Name conflicts use keep-both instead of silent overwrite.
- Remote search is limited to folders explicitly added with wrap share add.
- Search requests, search results, paths, manifests, archives, and file contents are end-to-end encrypted between paired devices.
- Device events are signed; local credentials and device identity are protected with Windows DPAPI.
- Cloud Storage receives ciphertext only. Transfer objects are scheduled for deletion after 24 hours, with a bucket lifecycle safety net.
- Transfers are capped at 20 GiB. Beta accounts are limited to 100 transfers and 50 GiB of ciphertext per rolling 24 hours.
- The service can see account/device identifiers, timestamps, transfer state, encrypted sizes, and normal network metadata.
Read the complete threat model in docs/SECURITY.md.
| Command | Purpose |
|---|---|
| wrap auth status | Show the signed-in account |
| wrap device list | List registered and paired devices |
| wrap share list | List remotely searchable roots |
| wrap transfer list | Inspect cloud transfer state |
| wrap agent status | Check the background agent |
| wrap agent stop | Stop the background agent |
| wrap agent start | Start the background agent |
| wrap device revoke DEVICE_ID | Revoke a lost or retired PC |
Run wrap device list on both PCs and confirm Wrapper Agent is running:
wrap agent status
wrap agent start
Both computers must be online, paired, signed into the same account, and running the current Wrapper version.
On the remote PC:
wrap agent stop
wrap agent start
Also confirm Everything is running and that the requested folder is listed by wrap share list.
Add its parent or the folder itself on the PC that owns it:
wrap share add D:\Shared
The default location is %USERPROFILE%\Downloads\Wrapper. Wrapper v1.8.0 also shows the destination during progress and in the completion popup.
Source builds require Go, and local Everything search on Windows requires Everything64.dll from the official Everything SDK.
git clone https://github.com/beyondmarks-ai/Wrapper.git
cd Wrapper
.\scripts\build.ps1 -EverythingDll C:\path\to\Everything64.dll
.\bin\wrap.exe
Create the all-in-one installer:
winget install JRSoftware.InnoSetup
.\scripts\package.ps1 -EverythingDll C:\path\to\Everything64.dll
The build script runs the test suite and produces bin\wrap.exe and bin\wrapper-agent.exe. The package script checksum-verifies the pinned official Everything MSI before bundling it.
For production cloud deployment, follow docs/DEPLOYMENT.md. Infrastructure lives in infra/ and the control API lives in backend/.
go mod tidy
gofmt -w .
go test ./...
go vet ./...
.\scripts\build.ps1 -SkipTests
terraform -chdir=infra fmt -check -recursive
terraform -chdir=infra validate
Wrapper is maintained and distributed by Beyond Marks under the MIT License.
Required licenses for upstream and bundled components are retained in NOTICE.md. Those notices satisfy redistribution requirements and do not indicate ownership of the Wrapper product.