Docs

Releases

What shipped, in order. Downloads live on GitHub Releases.

0.5.1 (stable, current)

Released 20 October 2026. One fix, for Mac users.

• Teleport mode on a Mac works again. On every Mac with System Integrity Protection on, which is the default, the app crashed on the first connect in Teleport mode. The app's signature did not permit it to load macFUSE. It does now. Normal mode was not affected. All signed Mac builds since May had this.
• When the FUSE driver cannot be loaded, the app now shows an error and the session continues without the folder.
• Report problem keeps a crash report whole: the message limit went from 4,000 characters to 256 KB.

After the update, connect in Teleport mode once more. The first time, macOS shows "System Extension Blocked" and asks you to allow macFUSE in System Settings and restart. That dialog is expected; the steps are in Install on macOS.

0.5.0

Released 16 October 2026, together with the new keibidrop.com. The announcement has the short version.

A new desktop design, better connections and file sharing on Mac, Windows and Linux, and a new license.

From 0.5.0, the KEIBIDROP engine moves from MPL-2.0 to the GNU AGPL-3.0 (AGPL-3.0-only), and the desktop app, which was proprietary, moves to the AGPL-3.0 too. It stays free to use. A closed-source product that embeds it needs a commercial license. 0.4.8 and older keep the licenses they shipped with, and LICENSING.md has the details.

• The folder mode is now called Teleport.
• The desktop app has a new design with help in plain words, and it uses less CPU.
• The app offers to save a new friend as a contact.
• Editing the same big file together moves only what changed.
• Windows Explorer shows your friend's changes without a refresh.
• Report problem can attach the app's log, with personal details removed.
• Large folders no longer freeze the app, and a save interrupted by a dropped connection no longer damages the file.
• On a Mac, your friend's edits show up in the Teleport Folder at once, so git works there.
• A custom incoming port must be between 26000 and 27000.

Try it in your browser at web.keibidrop.com, or install it: macOS · Linux · Windows · NAS.

0.4.8

Three connection bugs that each ended a session that should have worked, and one link instead of a code.

• Two computers on the same network connect again. The side that created the room asked the relay whether its public address could be reached and went to the bridge on that answer, while the other side's dial to the local address was already succeeding. A home router with no port forward is closed to the relay and open to the machine in the next room.
• A session no longer dies a few seconds after it connects. The creating side closed its own winning bridge leg and the joining side kept writing to the dead socket.
• A lost heartbeat reconnects instead of ending the session. The app unmounted the folder and quit on reconnect attempt one of ten.
• Send one link instead of a code. The page it opens carries the download for their machine and your code; they install, paste it, and send theirs back. The app has a Copy invite link button, kd invite prints the link, and an assistant gets kd_invite through kdmcp.
• The desktop app, kd and kdmcp take their own ports, so installing more than one of them on a machine works.
• The Windows zip carries the desktop app, and the log file rotates instead of growing without limit.

Install: macOS · Linux · Windows · NAS.

0.4.7

Windows executables are signed, and reads stay direct when only one side of the pair can be reached.

• Windows executables are signed. Windows names KEIBISOFT S.R.L. as the publisher instead of an unknown one. SmartScreen builds its reputation over the releases that follow.
• Less data crosses the wire. A read that misses the cache fetches 2 MiB around it instead of 16 MiB, so an app that jumps around a large file moves a fraction of what it moved before.
• Reads stay direct when only one side is reachable. A laptop behind a home router paired with a NAS or a box with an open port keeps its direct connection for reads; only the return path uses the relay, and reads cost no relay credit.
• Direct connections work over IPv4. A NAS with a port forward and no IPv6 address is dialed directly. Both computers need this version.
• The cache survives a restart. Each cached file records the parts it holds, so they are reused instead of fetched again, and a fresh mount never serves empty bytes.
• The mount repairs itself. An eject or a file system driver restart mounts the folder again without dropping the other computer.
• Disconnects are detected in about 12 seconds instead of 25, and a saved contact reconnects on its own after the other computer restarts.
• Connection state is visible everywhere. The app, kd status and the kdmcp tool report the same state, lane and current speed.
• Two warnings that were missing: a save disk that is nearly full stops a read before it writes half a file, and a shared free relay lane says so once per session.

Install: macOS · Linux · Windows

0.4.6

Tell us how it went, from wherever you are, and Intel Macs get a DMG.

• Feedback from the app, the command line and agents. The app has a Feedback button with five stars and a text box. kd feedback and the standalone CLI take --stars 1 to 5 and any words. Assistants get a kd_feedback tool in kdmcp, so an agent can pass on what you said. A rating alone is enough; one word is enough.
• Intel Macs get a DMG. Download, open, drag to Applications, the same as on Apple Silicon. The tar.gz stays for scripts and Homebrew.
• The update notice fires only when a newer version exists. The 0.4.5 Intel and tar.gz builds told their own users that 0.4.5 was out, because the version was not stamped into them. Every build now carries its version.
• The guide inside the app matches the current screens: the switch for the same network, the code for anywhere else, the folder after the first connection, and a link to the full guide.

Install: macOS · Linux · Windows · NAS.

0.4.5

Edit from a NAS while traveling, and it keeps working through a restart, a lunch break and a jump into a clip nobody touched yet. The two minute demo: DaVinci Resolve on a laptop 400 km from the NAS; the setup for Resolve, Final Cut and Premiere Pro: edit from a NAS in DaVinci Resolve.

• Opening footage again after a restart costs nothing extra. A restart used to make every read fetch the same 16 MiB block again; importing four clips into Resolve moved 21 times their size and froze the app. The parts already on the laptop stay on the laptop.
• Close the laptop for lunch; the box is waiting when you come back. After a long absence the box gave up and stayed silent until someone restarted it. It now redials on its own until the laptop is back.
• The first frame after a jump arrives in half a second on a link that goes through the relay. It took 4 to 8 seconds.
• After a restart the mount shows every shared file, touched or untouched. It showed only the files that already had a local copy.
• Files that land on the box while you are connected show up within a minute. New setting rescan_shared_seconds (default 30, 0 turns it off), KD_RESCAN_SHARED_SECONDS for the container.
• A clean box restart reconnects in about 25 seconds, down from 112, and a box that crashed and came back reconnects at all.
• kd disconnect cancels a connect that is still waiting. kd create and kd join are marked advanced; kd connect picks the role.

Install: macOS · Linux · Windows · NAS.

0.4.4

The serving side in a container, and connecting from home to a box with an open port.

• A box that stays on can be the serving side. A NAS, a mini PC or a home server runs the container from one compose file; the laptop mounts the folder from anywhere. Image ghcr.io/keibisoft/keibidrop for amd64 and arm64, Unraid template in the repository. Guide: run KeibiDrop on a NAS.
• Connecting from a laptop behind a home router to a box with an open port works on every attempt. The joiner now waits for the box on its relay leg, an empty accept window keeps the box offering direct connections, and the box keeps its relay leg open between rounds.
• Tests for each of the three, including one that reproduces the relay race on the mock relay.

Install: macOS · Linux · Windows · NAS and home servers.

0.4.3

The stable release of the 0.4 line.

• MCP server. An agent pairs two machines and moves files on its own. One click from the MCP registry as io.github.KeibiSoft/keibidrop, or the .mcpb on the release page. 17 tools, async pulls, on macOS, Windows and Linux.
• Seven kd commands for scripts: wait-connected, wait-mount, connect-timeout, pull-async, transfer-status, transfers and mount-info, with timeouts on the blocking ones, process exit codes and stable error codes.
• Two-way editing never loses an edit. Edit the same file on both machines, disconnected or at the same instant, and the newer keeps the name while the older stays as a conflict copy. A delete cannot discard an edit its author never saw. Rename a folder and its contents stay reachable, and folders moved into each other settle to one layout.
• Fixed: a file saved while a peer delete was in flight could be removed.

Install: macOS · Linux · Windows.

0.4.2

Security hardening across the sync engine. There are no new features, and the peer protocol is unchanged.

• Reflected frames are refused. A connection rejects any frame whose nonce arrives from the wrong direction, which stops a reflection attack on an established session.
• Peer paths are checked at the door. A name that Windows would bend into .. or into the save folder itself is refused on every platform, so a peer cannot write outside the folder you shared.
• Read requests are clamped. A bad size or offset fails cleanly instead of wrapping on 32-bit devices.
• Handshake deadline. An inbound handshake gets 30 seconds, and the connection closes when it does not finish, so a peer that connects and then goes quiet cannot hold a connection slot. Bridge connections keep their full wait for a peer that is still on its way.
• Go toolchain at 1.25.14, which clears 27 standard-library CVEs. None of them were reachable from KeibiDrop.

0.4.1

• Read-only sharing. Set share_read_only = true and peers can read your files, while changes and new files from them are refused on your machine. Set mount_read_only = true and programs on your machine cannot write in the mounted folder.
• Preserved file times. Set preserve_metadata = true and received files keep the sender's modification time, access time, and permission bits.
• Connect on startup. Set auto_connect_peer to a saved contact and KeibiDrop connects to it when it starts. Set scan_shared_on_start = true and files already in the save folder are announced when a session starts.
• Prepaid relay credit. Paste a credit code in the desktop app's settings to get priority bandwidth through the relay.
• Fixed. An editor that saves through hidden rename files, such as TextEdit on macOS, could lose a delete and leave stale files on the peer, including inside git repositories on the shared folder. Deletes now propagate.

The settings above live in config.toml.

0.4.0

• Edit from both sides. Both peers can edit the same folder at the same time. When saves cross on one file, both sides converge on the newer edit and the older one is kept next to the file as a conflict file, so no edit is silently lost. Exercised with real applications (GIMP, OpenSCAD, git, pijul) on macOS, Windows, and Linux.
• Forward secrecy with zero downtime. Sessions re-key themselves in the background over a hybrid post-quantum exchange (ML-KEM-1024 + X25519). A key stolen in the future cannot decrypt traffic recorded today, and transfers keep running while the keys roll.
• A QUIC lane next to TCP. Seeks and control messages ride QUIC while bulk data stays on TCP, so jumping around in big media files is snappier. A session can also follow an IP change, for example Wi-Fi to hotspot, without remounting. Works through the relay in bridge mode too.
• Steadier connections over the internet. More tolerance on the first connect, a hardened accept path on WAN links, fewer wrong direct-vs-relay decisions, and no more mounts hanging after a rough disconnect.
• Pijul works over the mount, joining git for version control on a shared folder.
• Install fixes. The brew, apt, and .deb commands in the README work again.

History

Per-release changelogs, checksums (SHA256SUMS), and all artifacts: github.com/KeibiSoft/KeibiDrop/releases. How to update an install: Update or uninstall.