Kiln 26.10.13.3

Kiln 26.10.13.3 — provider and account preview

Prebuilt Apple Silicon macOS and Linux x86_64 packages include native AI-provider adapters, durable recovery and new account authorization flows. No source build or Swift compiler is needed to run Kiln.

Changes

• Grok stdout/stderr readers use dedicated blocking I/O threads, preventing concurrent workers from starving the shared dispatch pool. A process handshake verifies device-code delivery before exit.

• Native Erebine, OpenAI Responses, Claude Messages, Grok Responses, DeepSeek Chat Completions and local Ollama profiles share Kiln's tool authorization and approval rules.

• ChatGPT account authorization adds the official OSS OAuth/PKCE flow, encrypted credentials, model discovery, refresh, returning-account registration and sign-out. Ownership includes the initiating SSH-key fingerprint.

• Grok CLI workers support API-key or official device-account login in isolated environments. Linux bubblewrap joins macOS sandbox-exec; unsupported isolation fails closed.

• Durable recovery records retain restart proposals and verified replacement evidence across reconnects, with duplicate-operation protection.

Download and run

Download the archive for your platform and its adjacent .sha256 file:

• kiln-26.10.13.3-macos-arm64.tar.gz
• kiln-26.10.13.3-linux-x86_64.tar.gz

On macOS, verify and extract:

shasum -a 256 -c kiln-26.10.13.3-macos-arm64.tar.gz.sha256
tar -xzf kiln-26.10.13.3-macos-arm64.tar.gz
cd kiln-26.10.13.3-macos-arm64

On Linux:

sha256sum -c kiln-26.10.13.3-linux-x86_64.tar.gz.sha256
tar -xzf kiln-26.10.13.3-linux-x86_64.tar.gz
cd kiln-26.10.13.3-linux-x86_64

Then, using your existing SSH public key:

./bin/kiln --version
./bin/kiln up --state "$HOME/.kiln" --authorized-keys "$HOME/.ssh/id_ed25519.pub"

From another terminal, inspect the host fingerprint before connecting:

ssh-keygen -lf "$HOME/.kiln/ssh-host-ed25519.pub"
ssh -e none -i ~/.ssh/id_ed25519 -p 2222 admin@127.0.0.1

Use ai providers to inspect routes. API keys belong in Vault; AI setup and account sign-in provide commands.

Acceptance and preview limits

Real native Erebine and cached local Ollama passed read-only fixture tool/result exchanges, streamed answers and cancellation after incoming content. OpenAI, Claude, Grok and DeepSeek API-key acceptance awaits available credentials. ChatGPT and Grok account flows are implemented and fixture-tested, but authenticated sign-in/inference awaits user consent. This release does not claim those accounts have been live-verified.

• macOS requires Apple Silicon; deployment target is macOS 14+. Packages are not Developer-ID signed or notarized.
• Linux packages include the Swift runtime but still require compatible OS libraries; see docs/packages.md. They are not fully static or universally distribution-compatible.
• Optional Grok CLI only: install the vendor executable separately. Linux CLI isolation additionally requires /usr/bin/bwrap and working unprivileged user namespaces. These are not requirements for ordinary native API chat. No unsandboxed fallback is provided.
• Keep state and the separate Vault master key outside the archive. Make cold backups and retain a compatible previous binary before upgrading; do not overwrite a running executable.
• Developer preview: trusted application processes, no automatic cluster failover or replicated storage. General coding agents, durable conversations and coordinated worker teams remain separate milestones.

Verified build evidence

Source revision: 78dd62216d7d8108f01924188f16dfccb482c911

• Server validation: Passed on macOS and Linux, including native Linux Grok isolation and 152 macOS tests.
• Package and fresh-install validation: All four jobs passed: both archives, clean installation and compatible upgrade/rollback.
• Credential scan: Passed; final archives were also scanned before upload.
• Downloaded archive and embedded provenance verification: Both archive checksums, exact source revision and all 61 file digests per platform matched. The downloaded macOS package passed local SSH, REST/WebSocket, crash recovery and persistent-state integration checks.

Archive SHA-256

8482e3f2dfeba30959095cc7972540df57663eb165da257ce3ba338380e598c8  kiln-26.10.13.3-linux-x86_64.tar.gz
792cd91df1014ac3e35698406d83164339c5d61b3fa0951debfc56d54afb9039  kiln-26.10.13.3-macos-arm64.tar.gz

Kiln 26.10.11.2 — prebuilt runtime

Kiln 26.10.11.2 — binary installation preview

Download Kiln for Apple Silicon macOS or Linux x86_64, verify the adjacent SHA-256 file, extract the archive and run bin/kiln. No source checkout or compiler is required.

Changed

Linux executables now link the Swift runtime directly. They no longer need a separate Swift runtime installation, including when the supervisor copies the example backend into managed application storage. Packaging rejects unresolved dependencies and external Swift shared libraries. Archives include upstream runtime license notices, file digests and build provenance.

The README and product website lead with binary installation. Source builds remain available for development. This changes distribution, not the runtime authorization or application isolation model.

Start

From the extracted directory, using an existing public SSH key:

./bin/kiln --version
./bin/kiln up --state "$HOME/.kiln" --authorized-keys "$HOME/.ssh/id_ed25519.pub"

From a second terminal, inspect the host fingerprint before connecting:

ssh-keygen -lf "$HOME/.kiln/ssh-host-ed25519.pub"
ssh -e none -i ~/.ssh/id_ed25519 -p 2222 admin@127.0.0.1

Requirements and boundaries

• macOS: Apple Silicon; deployment target macOS 14+, fresh-runner validation on macOS 15. The archive is not Developer-ID signed or notarized. The CI runner has standard Xcode installed; this is not a claim of testing every bare macOS installation.
• Linux: x86_64, validated on Ubuntu 24.04. Swift is included, but ordinary OS libraries remain required. See docs/packages.md for the apt command. This is not a fully static Linux executable or a claim of compatibility with every distribution.
• Keep runtime state and the separately stored Vault key outside the extracted package. Do not overwrite a running executable. Stop the runtime and session service before upgrading, retain the prior compatible version and make cold backups.
• Developer preview: application modules are trusted processes under the runtime's OS user. Automatic cluster failover, replicated storage, public ACME/TLS and native Apple clients are not shipped.

Verification

Source revision: d5721a552d77451c51d379ec23e868708e66fea7 (merged through PR #36).

• Server validation: macOS, Linux and resource enforcement passed.
• Release package validation: both builds, real SSH/REST/WebSocket integration, upgrade/compatible rollback, final artifact scans and both fresh-install jobs passed. Linux clean installation uses only OS libraries, with no Swift compiler or external Swift runtime mount.
• Source credential scanning: passed.
• Independently downloaded candidates matched both archive SHA-256 values, all 56 file digests per archive, embedded version and source revision. The macOS binary also returned 26.10.11.2 when executed locally.

Archive SHA-256

4647ad7316a5c702934f8d42f1f867cc88981c8e63e68cc5c63c9dfa9f11e46b  kiln-26.10.11.2-linux-x86_64.tar.gz
5e462e0cfb7ae9b59f04a685016ac21171b6180539d998d0de7d07e9035d3183  kiln-26.10.11.2-macos-arm64.tar.gz

Kiln 26.10.11.1 — developer preview

Kiln 26.10.11.1 — developer preview

Native Swift server runtime with supervised application processes, SSH administration, managed ingress, persistent terminal sessions and a constrained operations assistant.

Source: 9a0b0b2dde1aea526c220d331798d40ee4e20ab0.

Changes

• Named AI provider profiles and native local Ollama /api/chat support alongside Erebine. Profile switches explicitly start a new context; background tasks retain their original provider. Tools remain Kiln's fixed, authorized operations. No automatic fallback or model download.
• Bounded AI provider transport metrics and privacy-preserving SSH admission diagnostics.
• Offline delayed-stream, cancellation and terminal-renderer regression coverage, plus repeated recovery, actual EACCES and bounded disposable Linux tmpfs ENOSPC tests.
• Packaged upgrade and compatible rollback rehearsal from public 26.10.09.1 to this release and back, checking real REST/WebSocket traffic, SSH identity, Vault grants, denied access, stopped intent, application data and cold backups.

Verification

• Server validation: passed.
• Packaged binaries and fresh installs: all four jobs passed. Both platforms completed the packaged upgrade/rollback rehearsal; both fresh installs passed all six real integration groups. Downloaded archives independently matched their SHA-256 files, all 48 embedded file digests, release version, platform, source revision and license/notices.
• Secret scanning: passed; release packages also passed final-artifact scanning before upload.
• Additional exact-source macOS validation passed 103 tests, including live Erebine streaming (36 answer deltas) and a real Ollama tool round with multiple answer frames. Real OpenSSH terminal checks passed mouse actions, menus, metrics, paste/history, resize and cleanup. These smoke tests are interoperability evidence, not model-quality or performance guarantees.

Downloads and upgrade

The archives contain executables, documentation, Apache-2.0 licensing, dependency notices and build-info.json with the source revision and file digests. Verify the accompanying archive SHA-256 before extraction.

• macOS arm64: tested on macOS 15 without separately installing Swift 6.2.3 on the fresh-install runner; Xcode remains preinstalled there. This is not a bare macOS 14 validation. The package is not Developer-ID signed or notarized.
• Linux x86_64: requires compatible Swift 6.2.3 runtime libraries and the OS dependencies documented in docs/packages.md. It is not a self-contained static binary. Fresh-install validation uses a compiler-free Ubuntu 24.04 environment with only runtime libraries and OS dependencies.

Stop the runtime and persistent session service before upgrading. Retain the prior compatible package and make cold backups of state and separately stored Vault keys. The tested rollback pair is 26.10.09.1 ↔ 26.10.11.1 with compatible state; arbitrary schema downgrades and uninterrupted sessions are not guaranteed.

Limitations

This is a developer preview. Applications are trusted executables sharing Kiln's OS user, not hostile-code sandboxes. Hard budgets require delegated Linux cgroup v2; macOS rejects requested hard budgets. Logs may drop chunks under contention or storage failure. Peer adoption does not implement consensus, automatic workload placement/failover or replicated storage. Live connections do not survive node death.

Ollama requires an independently operated daemon and model; neither is bundled. Only literal loopback HTTP origins are accepted, but operators must still control whether their daemon/model routes inference remotely. Cross-client terminal and clipboard coverage remains incomplete.

Public ACME/TLS ingress, Cloudflare/Resend integrations, source-build delivery, replicated storage, appliance images and native Apple clients are not included. Publishing these artifacts does not upgrade an existing user node.

Archive SHA-256

056a762963c4624e9902cd042752cf385237c8d390f526adbfb01b491b087f78  kiln-26.10.11.1-linux-x86_64.tar.gz
784af35e3d97a70eb3650269f656424ae629cedf10f6949913353516c7a017cb  kiln-26.10.11.1-macos-arm64.tar.gz