Kungfu is one product across desktop and command line. Each delivery surface states its own actual availability and release evidence—an unavailable interface never borrows another interface's claim.
Visual workspace
Coming soonA native visual workspace for Agent Work Management, durable continuity, and human-Agent collaboration. No public GUI download is released today.
Platform-specific macOS, Windows, and Linux availability will appear here only when qualified.
Terminal and automation
Current status belowThe standalone Kungfu CLI is a thin, auditable projection of the signed Buildchain release channel. It does not invent a second latest pointer or silently change channels.
Check Command Line availabilityThe source contract is undergoing protected review and native-platform qualification. Until a signed Alpha publication and public read-back complete, /install.sh and /install.ps1 return a machine-readable unavailable result and fail without changing the machine.
After the page names an available signed channel, the convenience form will be:
curl --fail --proto '=https' --tlsv1.2 https://kungfu.tech/install.sh | sh
The current route exits nonzero without downloading or installing anything. Do not substitute a source fixture for it.
After the page names an available signed channel, the convenience form will be:
irm https://kungfu.tech/install.ps1 | iex
The current route throws an unavailable error without downloading or installing anything. The qualified Windows Alpha archive may be unsigned: trust comes from signed release-channel evidence, an immutable URL, and a published SHA-256 digest. Authenticode is not a qualification requirement for this Alpha.
The released page will publish immutable installer URLs, exact byte sizes, SHA-256 digests, signed-channel and artifact roots, source SHA, platform matrix, and Release Passport coordinates. Higher-assurance and CI use should download the immutable file, compare the published digest, inspect it locally, then execute with an explicit channel or version.
The default install is per-user. It does not request sudo or Administrator rights and does not edit shell or PowerShell profiles, registry, services, scheduled tasks, global PATH, or package-manager databases.
Homebrew, WinGet, MSI, deb/rpm, desktop-companion, and unknown installations remain under their existing owner. The archive bootstrap refuses to overwrite manager-owned bytes.
The friendly HTTPS script is a convenience boundary, not complete provenance. Before selecting bytes, the installer checks its pinned channel file, archive size and digest, platform trust, Ed25519 channel authority, product manifest, platform and architecture, install source, artifact roots, and Release Passport. The staged CLI repeats those checks and emits a rooted receipt before the launcher changes.