Semlith Files

Added

• Settings › Cloud shows the org's stores this machine has not connected. The registry's remote list is what semlith cloud connect wrote, so a store the org created in the cloud afterwards never appeared locally, and the page offered to connect only when no store was connected at all. Now the org card lists each store the host offers that is not connected here, with a not connected here pill and its state, files and chunks, and Sync new stores adds them through the same connect the CLI runs. It is add only, and nothing is flagged unless the host answered. No new request: it reads the status the card already fetches.
• semlith cloud status says which stores are connected here. Each store line ends connected here or not connected here, read from the local registry for that org and host, and when any is not, a closing line names semlith cloud connect <org>.
• The Stores page's Remote stores card says Settings › Cloud connects stores added in the cloud later.

Security

• rustls-webpki 0.103.16 and webpki-roots 1.0.10 (RUSTSEC-2026-0382, RUSTSEC-2026-0381, both 2026-10-19): certificate verification could accept the distrusted emSign intermediates. semlith's HTTPS calls (the cloud, model downloads, semlith add, update checks) go through them.

Install

macOS and Linux

:::sh
curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/semlith/semlith/main/install.sh | sh

Windows

:::powershell
irm https://raw.githubusercontent.com/semlith/semlith/main/install.ps1 | iex

Or download the archive for your platform below, unpack it, and put semlith on your PATH. Intel macOS has no prebuilt binary: ONNX Runtime no longer publishes x86_64 macOS builds.

Verify a download against SHA256SUMS before running it, SHA256SUMS against its signature (release key SHA256:a5oJmrakIwDHEWTDWqWe51Ttt6m2tQ0dsGzIqyxDuxs) with echo "semlith-release ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICMTHiHMzeSHzzc+8UDZHUzJcvb6XGUBb+TJdFes91xm" > allowed_signers and ssh-keygen -Y verify -f allowed_signers -I semlith-release -n file -s SHA256SUMS.sig < SHA256SUMS, and its provenance with gh attestation verify <file> --repo semlith/semlith.