Kujo v1.4.0 adds native scripting operations for package installers and command launchers, bounded web-data processing, and runtime correctness fixes. It is the compatible runtime foundation for the upcoming native Kennel client; Kennel is released separately.
Highlights
- Native package tooling on Linux/macOS: advisory file locks, ownership checks, atomic symlink publication and exact process replacement. These APIs enforce documented capabilities and input limits.
- Isolated installed-tool imports: opt-in
kujo run --isolated-importsandKUJO_ISOLATED_IMPORTS=1exclude the caller's directory and lockfile while preserving exact arguments. Default import behavior is unchanged. - Bounded native data processing: HTML tokenization, URL and text handling, streaming XML, JSON/JSONL artifacts, digests, HTTP downloads and repeated response headers.
- Safer publication and networking: confined handle-relative file publication, no-replace directory publication on Windows, explicit DNS/private-network routing policy, and private streaming AEAD outputs.
- Runtime consistency: imported VM callbacks, lexical scope unwinding, immutable worker captures, bounded regex reuse, and binary-file regression coverage.
Install or upgrade
Download a platform archive below and verify its SHA-256 checksum, or use the official installer:
curl -fsSL https://kujolang.ai/install.sh | bashFor a supported standalone Kujo v1.3.0 or later installation:
kujo upgrade 1.4.0
kujo --versionFor npm-managed installations:
npm install -g @kujolang/kujo-runtime@1.4.0Native binaries are supplied for Linux x64/ARM64, macOS x64/ARM64 and Windows x64. The new POSIX package-launcher APIs apply to Linux/macOS. Upgrading Kujo changes only the runtime; ecosystem packages retain their own update workflows.
The stable language, CLI and protocol contract schema versions remain 1.0.0. See the changelog, standard library, and installation guide for exact behavior and platform requirements.