Airlock v0.1.7

Airlock v0.1.7 - Window Controls and Installer Fixes

Released: August 3, 2026

English | 简体中文 | 日本語

Fixed

• The custom desktop title bar now works on every platform. Minimize,
  maximize/restore, close, and the drag region were silently denied because
  the Tauri capability set only granted read-only window permissions; the
  required window-control permissions are now explicit.
• Windows installer cleanup: a locked temporary installer file no longer turns
  a successful install into an error (npm installer packages 0.1.8/0.1.9).

Verification

• Airlock_0.1.7_aarch64.dmg / Airlock_0.1.7_x64.dmg
• Windows Airlock_0.1.7_x64/x86/arm64-setup.exe
• Linux Airlock_0.1.7_amd64/aarch64.AppImage
• SHA256SUMS-v0.1.7.txt on the release page

Install with:

npm install -g airlock-relay && airlock-installer install --open

See the installation guide and
changelog.

---

Other languages / 其他语言 / 他言語

• 简体中文发布说明
• 日本語リリースノート
• English release notes

Airlock v0.1.6

Airlock v0.1.6 - Cross-Platform npm Installer Release

Released: August 2, 2026

English | 简体中文 | 日本語

Added

• airlock-installer install now works on every supported desktop platform:
  • macOS 12+ on Apple Silicon (bundled DMG) and Intel (release DMG);
  • Windows 10+ on x64, x86 (i686), and arm64 (pinned NSIS installer);
  • Linux x64 and arm64 (pinned AppImage installed to ~/.local/bin).
• Every platform downloads its pinned release asset, verifies the SHA-256
  against the published contract, and fails closed on mismatch or when the
  asset is not yet published.
• CI now produces macOS x64 DMG and Linux x64/arm64 AppImage/deb installer
  artifacts; all artifacts are attached to the release with fixed checksums.
• Linux AppImage/deb artifacts are GPG-signed with the Airlock Release Signing key; the public key and detached signatures are attached to the
  release (Airlock-gpg-pubkey.asc and .sig files).
• Raspberry Pi support: 64-bit Raspberry Pi OS installs the released arm64
  AppImage; 32-bit armv7 users can build the desktop bundle on the Pi with
  scripts/build-armv7-desktop.sh.

Release boundary

macOS arm64 remains the verified, ad-hoc signed release. macOS x64, Windows,
and Linux preview installers are unsigned: SmartScreen, Gatekeeper, or a missing
FUSE runtime may require extra steps. Linux ARMv7 (Raspberry Pi) remains a
Core/CLI-only target with no desktop bundle.

Verification

npm install -g airlock-relay && airlock-installer doctor

See SHA256SUMS-v0.1.6.txt on the release
page, the installation guide, and the
changelog.

---

Other languages / 其他语言 / 他言語

• 简体中文发布说明
• 日本語リリースノート
• English release notes

Airlock v0.1.5

Airlock v0.1.5 - Interactive Shell and Cross-Platform Bootstrap Release

Released: August 1, 2026

English | 简体中文 | 日本語

Added

• Optional per-route interactive SSH shells, disabled by default. Setting
  allow_interactive_shell: true (which requires allow_all_commands: true)
  lets PuTTY and ssh clients enter the upstream shell while Airlock still
  injects the stored upstream credentials. PTY metadata is forwarded only
  while the switch is enabled.
• Plain shell requests on non-interactive routes now receive actionable
  guidance instead of a refused shell, and single-command routes run their
  exact command when a shell is requested.
• Protected keyword egress rewrites for SSH commands.
• Explicit per-route SFTP permission, disabled by default, for modern
  scp/SFTP clients.
• Windows x64/x86/arm64 and Linux x64/arm64/ARMv7 Core and CLI
  cross-compilation with owner-only Windows named-pipe control, Credential
  Manager / Secret Service backends, Linux native prompts, and CI preview
  installer contracts that fail closed. Windows preview installers are
  attached to this release for manual testing and remain unsigned preview
  artifacts rather than public checksummed installers.

Fixed

• Interactive-shell PTY dimensions were forwarded transposed, causing garbled
  input display in terminals; the upstream session now receives the client's
  actual rows and columns.

Verification

• Airlock_0.1.5_aarch64.dmg
• Airlock_0.1.5_aarch64.app.zip
• SHA256SUMS-v0.1.5.txt

e404c805c8c410012eca0996158c0d69f48f107c4cd81f677c2391e37f3f59c3  Airlock_0.1.5_aarch64.dmg
9441efd974e0bff7a8ae92fe1fb5e255ed59e2548740a34564bfee0ea8aa60af  Airlock_0.1.5_aarch64.app.zip

go vet ./...
go test -race ./...

Release boundary

This is still a macOS Apple Silicon technical preview. The production-readiness
audit from v0.1.4 applies; it is not an independent third-party
certification. The application remains ad-hoc signed and not Apple-notarized.
Use the Keychain Strict profile for same-user hostile-process resistance, keep
LAN ingress private, and use a least-privilege upstream SSH account.

See the security policy,
installation guide, and
changelog.

Airlock v0.1.4

Airlock v0.1.4 - Production-Readiness Security Release

Released: July 31, 2026

English | 简体中文 | 日本語

Security changes

• Upgrade golang.org/x/crypto to v0.52.0, remediating the reachable SSH
  vulnerabilities identified in the prior dependency version.
• Bound simultaneous SSH connections and sessions, preventing a reachable SSH
  listener from consuming unbounded core resources.
• Bound simultaneous HTTP response streams across the gateway. LLM routes keep
  their additional per-route requests-per-minute and concurrency limits.
• Complete a maintainer-run production-readiness security audit. Read the
  audit record for scope, validation, and
  remaining operating boundaries.

Verification

• Airlock_0.1.4_aarch64.dmg
• Airlock_0.1.4_aarch64.app.zip
• SHA256SUMS-v0.1.4.txt

f137dade553d2ba174e747fb21b041f42d079188efec948b7c55dd0b7bc21d51  Airlock_0.1.4_aarch64.dmg
f331d3b285ce1a91aebcc18382f9f2503bfc34e4c327b97c8914a964ed76fbce  Airlock_0.1.4_aarch64.app.zip

go vet ./...
go test -race ./...
go run golang.org/x/vuln/cmd/govulncheck@latest ./...

The desktop and npm installer production dependencies were also checked with
npm audit --omit=dev.

Release boundary

This is still a macOS Apple Silicon technical preview. The audit was performed
by the maintainers; it is not an independent third-party certification. The
application remains ad-hoc signed and not Apple-notarized. Use the Keychain
Strict profile for same-user hostile-process resistance, keep LAN ingress
private, and use a least-privilege upstream SSH account.

See the security policy, installation guide,
and changelog.

Airlock v0.1.3

Airlock v0.1.3 - Port Recovery Release

Released: July 31, 2026

English | 简体中文 | 日本語

Highlights

• Add native listener-port management for the desktop core. HTTP and SSH ports
  can be changed independently to any two different unprivileged ports from
  1024 through 65535.
• Detect current-user processes listening on the configured ports, re-check the
  PID before acting, and offer a user-confirmed graceful termination request.
  Airlock never force-kills a process and never lists its own managed sidecar.
• Allow port changes while the local core is offline, then restart with the new
  settings and roll back automatically if startup fails.
• Keep legacy security settings compatible by defaulting missing listener ports
  to 4768 and 4770.

Download and verify

• Airlock_0.1.3_aarch64.dmg
• Airlock_0.1.3_aarch64.app.zip
• SHA256SUMS-v0.1.3.txt

221997b155a05e3613757402c5189fbc7ca95cb35854c02880c47134d7b174a9  Airlock_0.1.3_aarch64.dmg
17c15aaa03a9f99977d17cb0d14db8263716abd395e381aae502cbd884c5b401  Airlock_0.1.3_aarch64.app.zip

npm install -g airlock-relay && airlock-installer install --open

See the installation guide, security policy,
and previous v0.1.2 startup hotfix.

This remains a macOS Apple Silicon technical preview. It is ad-hoc signed and
not notarized; verify the checksum before first launch.

Airlock v0.1.2

Airlock v0.1.2 - Startup Hotfix

Released: July 31, 2026

English | 简体中文 | 日本語

Fixed

• Detect whether the desktop sidecar actually becomes ready at launch instead
  of leaving the interface indefinitely at "Waiting for local core".
• Keep the desktop interface available when the core cannot start, provide a
  retry action, and report a sanitized port-conflict or control-channel cause.
• Move control-state polling and core restart work off the interface path so a
  stalled local control socket cannot freeze the application.
• Change the npm installer command from DMG copy/open behavior to a verified,
  atomic installation of Airlock.app in ~/Applications; --open launches
  the app only after installation succeeds.

Download and verify

• Airlock_0.1.2_aarch64.dmg
• Airlock_0.1.2_aarch64.app.zip
• SHA256SUMS-v0.1.2.txt

e67082c731219cf6a9a9a282c10671ab831e66b1061c38bfcbf55b4fb7c065a5  Airlock_0.1.2_aarch64.dmg
c03a40de7f693533f8011472cd10418f76e1c20bc47a4d51dd0b004ca19f51fc  Airlock_0.1.2_aarch64.app.zip

npm install -g airlock-relay && airlock-installer install --open

See the installation guide and security policy.

This remains a macOS Apple Silicon technical preview. It is ad-hoc signed and
not notarized; verify the checksum before first launch.

Airlock v0.1.1

Airlock v0.1.1 - Technical Preview

Airlock v0.1.1 为 HTTP/Wget、SSH 与 LLM API 提供本地固定路由，把真实上游地址、账户密码和 API Key 留在受保护的本机存储中。

中文： 发布说明 · 安装指南 · 安全边界

Airlock v0.1.1 provides fixed local routes for HTTP/Wget, SSH, and LLM APIs while keeping real upstream addresses, account passwords, and API keys in protected local storage.

English: Release notes · Installation · Security boundaries

Highlights

• Relay fixed HTTP/Wget targets with method, path, redirect, and Range controls.
• Isolate SSH credentials with dual sessions, pinned host keys, custom local authentication, editable exact commands, optional unrestricted non-interactive exec, and local command audit.
• Manage existing SSH mappings: replace protected hosts, customize local
  username-to-host selection, rotate local credentials, add or delete mappings,
  and run identity-aware health checks.
• Record sanitized attempts against disabled routes and test the configured
  local proxy without exposing its protected URL.
• Route OpenAI-compatible and Anthropic-compatible APIs through secondary local keys, model allowlists, output/rate/concurrency limits, streaming, and optional in-memory token totals.
• Select Direct, Clash-compatible Proxy, or Auto egress per route.
• Start new installations with the prompt-free Standard profile (0600 local file + loopback); opt into stricter macOS Keychain storage when appropriate.
• Use a native themed desktop interface with explicit LAN and high-risk SSH confirmations.
• Check public release versions on demand, use the embedded multilingual guide, and prepare matching static Pages documentation without automatic download or installation.
• Filter routes by safe local metadata and run health checks only for the filtered result set; inspect installer and platform contracts through npm CLI status and doctor commands.

Download

This release supports Apple Silicon Macs running macOS 12 or newer. It does not include an Intel, Windows, or Linux package.

• Airlock_0.1.1_aarch64.dmg for normal installation
• Airlock_0.1.1_aarch64.app.zip as a portable archive
• SHA256SUMS-v0.1.1.txt for integrity verification

644b7310e51ebbd2668a40ee95699194903f3d73347a6c071f2b4140bffefc9b  Airlock_0.1.1_aarch64.dmg
72e7bc174e53c901cbca9a52af92615bb4e44ff094d19d919a112cc66824125a  Airlock_0.1.1_aarch64.app.zip

Security Notice

This is a prerelease technical preview, not a production security claim. The application is ad-hoc signed but is not Apple Developer ID signed or notarized, so macOS may show an unidentified-developer warning. Verify SHA256SUMS-v0.1.1.txt and follow the installation guide before opening it.

v0.1.1 has automated Go, Rust, frontend, npm-package, signature, and checksum verification, but it has not completed an independent production security audit. Capabilities do not yet have TTL or one-time semantics. LAN mode must not be exposed to the public Internet, and unrestricted SSH exec should use a dedicated least-privilege upstream account.

Full changes are listed in the changelog.

Airlock v0.1.0 - Technical Preview

Airlock v0.1.0 - Technical Preview

Airlock 的首个可下载技术预览版现已发布。它为 HTTP/Wget、SSH 与 LLM API 提供本地固定路由，把真实上游地址、账户密码和 API Key 留在受保护的本机存储中。

中文： 发布说明 · 安装指南 · 安全边界

Airlock's first downloadable technical preview is now available. It provides fixed local routes for HTTP/Wget, SSH, and LLM APIs while keeping real upstream addresses, account passwords, and API keys in protected local storage.

English: Release notes · Installation · Security boundaries

Highlights

• Relay fixed HTTP/Wget targets with method, path, redirect, and Range controls.
• Isolate SSH credentials with dual sessions, pinned host keys, custom local authentication, editable exact commands, optional unrestricted non-interactive exec, and local command audit.
• Route OpenAI-compatible and Anthropic-compatible APIs through secondary local keys, model allowlists, output/rate/concurrency limits, streaming, and optional in-memory token totals.
• Select Direct, Clash-compatible Proxy, or Auto egress per route.
• Start new installations with the prompt-free Standard profile (0600 local file + loopback); opt into stricter macOS Keychain storage when appropriate.
• Use a native themed desktop interface with explicit LAN and high-risk SSH confirmations.

Download

This release supports Apple Silicon Macs running macOS 12 or newer. It does not include an Intel, Windows, or Linux package.

• Airlock_0.1.0_aarch64.dmg for normal installation
• Airlock_0.1.0_aarch64.app.zip as a portable archive
• SHA256SUMS.txt for integrity verification

4d2424a1c63a70bbd97bc99577a1af41d24094ce7f3120f80f0f060be2eb94a2  Airlock_0.1.0_aarch64.dmg
1e12cd42ef8339a41181d72e8be6e4891e5aa692a95d7a13f328b19e0f8e8aec  Airlock_0.1.0_aarch64.app.zip

Security Notice

This is a prerelease technical preview, not a production security claim. The application is ad-hoc signed but is not Apple Developer ID signed or notarized, so macOS may show an unidentified-developer warning. Verify SHA256SUMS.txt and follow the installation guide before opening it.

v0.1.0 has automated race, unit, integration, frontend, Rust, lint, bundle, signature, DMG, and checksum verification, but it has not completed an independent production security audit. Capabilities do not yet have TTL or one-time semantics. LAN mode must not be exposed to the public Internet, and unrestricted SSH exec should use a dedicated least-privilege upstream account.

Full changes are listed in the changelog.