This release is a pre-release and may not be stable for production use.
Agentic Workspace
Persistent operating context and dynamic control for coding agents.
Agentic Workspace (AW) helps coding agents enter a repository with the right guidance, continue unfinished work across sessions, and preserve useful lessons without turning every task into a workflow.
It builds on repository instructions and skills with persistent, source-owned context and a small Rust-backed tool surface for exact current information and bounded operations. Keep your existing agent, editor, source tree, tests, and review process; AW connects them to the operating context that matters for the task at hand.
Get started · Everyday use · Documentation · Releases
Why AW?
A repository instruction file can explain how to work in a project. By itself, it cannot tell a new session where a multi-step task stopped, which retained lesson is relevant now, whether earlier verification still supports a claim, or which deeper procedure is worth loading for this change.
As work spans sessions and agents, that context has to come from somewhere. Without a deliberate home, it tends to disappear into chat, duplicate into prose, or be reconstructed from source, issues, and history.
AW keeps only the operating context whose availability can materially change agent behavior, then makes the relevant part cheap to reach:
| Need | What AW provides |
|---|---|
| Find the right guidance | Task-relevant instructions, source references, and reusable skills. |
| Continue interrupted work | Retained outcomes, constraints, accepted progress, blockers, and next actions. |
| Know what to verify | Relevant checking procedures, recorded evidence, and visible gaps. |
| Hand work to another agent | Bounded assignments with explicit context, constraints, and return expectations. |
| Avoid repeated rediscovery | Useful lessons and corrections retained with the appropriate owner. |
The goal is less repeated explanation, searching, handoff reconstruction, and repair—not a larger prompt or a new workflow to manage.
Small tasks stay small. A typo fix does not need Planning, Memory, Verification, delegation, or another artifact merely because those capabilities are available.
What using it looks like
Imagine an API change that spans two sessions:
Add pagination to the users API without breaking existing clients.
In a repository with API guidance and verification procedures configured, the agent can use AW to find the relevant contract, load a useful implementation procedure, and identify the checks expected for the change. It still reads the source, reasons about the design, and implements with its ordinary tools.
If work stops partway through, Planning can preserve the intended outcome, accepted progress, unresolved questions, and next action.
In a later session:
Continue the pagination work.
The next agent can recover that continuation rather than reconstructing the previous conversation. Changed assumptions and missing evidence remain things to check; a recorded result is not automatically fresh proof.
The same principle applies to a handoff: preserve enough for the receiving agent to do bounded work without copying the entire parent session. Returned work still needs appropriate integration and verification.
How it works
Skills teach procedure. Repository instructions and configuration set policy. Domain owners hold current state and evidence. Tools provide exact current information and controlled operations. The agent supplies judgment.
A small repository entry point leads the agent to AW's canonical workspace-startup skill. That skill explains how to reach relevant sources, ask the runtime for current facts when they matter, and load specialized procedures only when useful.
The underlying model is deliberately small:
Find the relevant context → Do the work → Update what matters
Internally, AW resolves a compact operating contract, exposes supported actions, and reconciles their consequences afterward. That machinery is a substrate for the agent, not a phase machine the user has to operate around every task.
Source code, documentation, tests, decisions, and other canonical repository material remain in their existing homes. AW routes to those sources rather than importing the repository into a second knowledge system.
Get started
Use the installation and adoption guide for the release class you intend to run. Stable support, release candidates, and previews have different evidence and support boundaries; exact install commands and platform claims belong to the selected release and its receipts rather than this README.
For support-bearing installs, follow the generated install projection to the selected release's distribution-install-readiness.json receipt and its exact installation command.
Adopt a repository
Installing the runtime and adopting a repository are separate operations. After installing the selected artifact, run ordinary start against the target Git repository:
agentic-workspace start --target . \
--task "Inspect this repository" \
--format json
If the repository is not yet adopted and the selected artifact includes the current adoption owner, Configuration returns the exact repository-adoption request. Follow that request and execute only the returned authorized action. Adoption establishes the small package-owned host footprint and managed AGENTS.md fence; it does not invent repository policy, choose optional modules, or create Planning, Memory, or Verification state.
In an adopted repository
The repository's small entry point leads to the canonical workspace-startup skill. Agent hosts with supported native skill discovery can expose the same skill directly.
For an initial check, ask your agent:
Use this repository's Agentic Workspace setup to identify the guidance and checks relevant to an API change. Do not modify anything yet.
For direct inspection, use the same start boundary with the actual task. After adoption, continue giving your agent ordinary work; the canonical skill teaches it when AW is useful, so you should not need to run a manual command sequence around every change.
Installation and adoption · Everyday use · CLI reference
Your repository, your rules
AW is designed to fit around the project rather than reorganize it.
A simplified host repository looks like this:
your-repository/
├── AGENTS.md # Small managed entry point inside a repo-owned file
├── src/, docs/, tests/ # Existing project contents
└── .agentic-workspace/ # Package integration plus optional owner state
The current public adoption footprint is Configuration-owned and deliberately small. Package-managed skills, ownership/read-profile metadata, provenance, and adoption identity stay distinct from repo-owned configuration, module-owned state, local data, and promoted output.
You can express a repository-wide correction in ordinary language:
For this repository, read the API contract before changing public response fields.
Or make the scope explicitly local:
Only on this machine, use this executable path when invoking AW.
The agent can route the change to the appropriate instruction or configuration owner and verify whether it was retained. A promise in chat is not a saved rule, and a local preference should not silently become shared repository policy.
Reusable methods belong in skills. Binding rules belong in instructions or configuration. Current work and evidence stay with the capabilities responsible for them.
The same Configuration-owned footprint is used for adoption, refresh, and removal. De-adoption removes only authenticated package-owned integration, preserves repo-owned configuration and domain state, and refuses to erase edited or unowned content merely because it sits under an AW path.
Configuration reference · Repository footprint
Add structure where it helps
AW includes optional first-party capabilities for recurring coordination costs:
Planning preserves execution continuity: intended outcome, constraints, progress, blockers, and next action.
Memory retains useful observations and lessons that would otherwise be expensive to rediscover. Advice can be reconsidered when its dependencies change; a note is not automatically policy.
Verification makes checking procedures, evidence, and known gaps reusable. Passing a check supports the claim it actually tests, not every claim about the finished work.
These are peer capabilities, not mandatory workflow stages. Repositories can use what repays its cost and leave unrelated capabilities out of the current task's context.
Repository-specific rules and procedures do not require a new module. Modules are for independently reusable capabilities with their own domain state or operations.
Works with agents rather than replacing them
Agentic Workspace is not an autonomous coding agent. It gives the agent already working in the repository better operating context and safer repository-native control.
An agent with runtime access can query current owner state and use supported operations. A repository-only reviewer can follow the same canonical skill and generated read profile to recover relevant recorded intent, constraints, progress, and advice, while live machine state, fresh proof, and effect permission remain unknown.
The ordinary deterministic product semantics live in a shared Rust core. Native, Python, TypeScript, and JSON-facing surfaces project or bind that authority rather than defining separate workflow behavior. The host project's implementation language does not need to match AW's runtime implementation.
Host integrations still differ. Provider independence does not mean every agent host discovers skills identically or every model follows repository guidance perfectly; current support and evidence remain release- and environment-bound.
Trust and support
AW is not a sandbox. Repository-configured commands run with the caller's filesystem and credential authority. Review the repository and its execution routes before allowing them to run. Credentials belong in the host or environment's credential facilities, not checked-in AW state.
AW's operation boundaries and verification support do not replace human judgment, independent review, or existing security controls.
Exact package identities, installation commands, runtime versions, operating-system support, and prerelease/stable status are deliberately kept in release-bound or generated owners instead of copied into this landing page.
Installation and adoption · Threat model · Evidence and support
Learn more
Use AW: Installation and adoption · Everyday use · Configuration
Understand AW: Product overview · Architecture · Design principles · Modules
Look up details: CLI reference · Installed surfaces · Full documentation
Contributing
For changes to Agentic Workspace itself, start with the contributor playbook. Use the repository's issue templates to report a problem or propose a change.
Contributions should make useful work easier to complete, continue, or verify while keeping unnecessary context, framework surface, and repository residue low.
License
MIT.
Release files for agentic-workspace 1.0.0rc6
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| agentic_workspace-1.0.0rc6.tar.gz | 1.1 MB | Details |
Built distributions (wheels)
| File | Reset | |||
|---|---|---|---|---|
| agentic_workspace-1.0.0rc6-py3-none-win_arm64.whl | Python 3 | none | Windows ARM64 | Details |
| agentic_workspace-1.0.0rc6-py3-none-win_amd64.whl | Python 3 | none | Windows x86-64 | Details |
| agentic_workspace-1.0.0rc6-py3-none-manylinux_2_39_x86_64.whl | Python 3 | none | Linux glibc 2.39+ x86-64 | Details |
| agentic_workspace-1.0.0rc6-py3-none-manylinux_2_39_aarch64.whl | Python 3 | none | Linux glibc 2.39+ ARM64 | Details |
| agentic_workspace-1.0.0rc6-py3-none-macosx_15_0_x86_64.whl | Python 3 | none | macOS 15.0+ x86-64 | Details |
| agentic_workspace-1.0.0rc6-py3-none-macosx_14_0_arm64.whl | Python 3 | none | macOS 14.0+ ARM64 | Details |
Total release size: 36.0 MB
Release files / agentic_workspace-1.0.0rc6.tar.gz
| Download URL | agentic_workspace-1.0.0rc6.tar.gz |
|---|---|
| Size | 1.1 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
5c97ad83490d97dbe9bfa973cbe89e2831502f5c2e5fc65ef1c3ed85b6f8b262
|
|
BLAKE2b-256 checksum How to use checksums |
0d219efe670e2970369d93570f13f406f783e050b3f2d0d1a980c733ba651fa8
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 18, 2026.
Transparency logRelease files / agentic_workspace-1.0.0rc6-py3-none-win_arm64.whl
| Download URL | agentic_workspace-1.0.0rc6-py3-none-win_arm64.whl |
|---|---|
| Size | 5.4 MB |
| Tags | Python 3 Windows ARM64 |
|
SHA-256 checksum How to use checksums |
0ea26f83e8e353e09ce59744711edf0b2c8030b4bbddb8f67e828ad45cbcb48c
|
|
BLAKE2b-256 checksum How to use checksums |
6a9ab5ac6d0be1aa3122929ff4436aa1effed23a4197e5c0b062131f8e88621c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 18, 2026.
Transparency logRelease files / agentic_workspace-1.0.0rc6-py3-none-win_amd64.whl
| Download URL | agentic_workspace-1.0.0rc6-py3-none-win_amd64.whl |
|---|---|
| Size | 5.9 MB |
| Tags | Python 3 Windows x86-64 |
|
SHA-256 checksum How to use checksums |
aa7f5b61301d55bd695b1415fe8f5053f073a8f8b374e27bb6fdb46e3ac738ab
|
|
BLAKE2b-256 checksum How to use checksums |
34e0b8a35de3b99081de6b5a1a8e44c9530cefe5c3647742cad6a2ae475f3107
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 18, 2026.
Transparency logRelease files / agentic_workspace-1.0.0rc6-py3-none-manylinux_2_39_x86_64.whl
| Download URL | agentic_workspace-1.0.0rc6-py3-none-manylinux_2_39_x86_64.whl |
|---|---|
| Size | 6.2 MB |
| Tags | Linux glibc 2.39+ x86-64 Python 3 |
|
SHA-256 checksum How to use checksums |
fc4e29a06904c1e58019bce8ad8682210c1820a254e9f5576bb2fa202f81a6c4
|
|
BLAKE2b-256 checksum How to use checksums |
96b06bc708c090587ae019f83e986761ff28a7633b996d3a36357fe00ac5075f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 18, 2026.
Transparency logRelease files / agentic_workspace-1.0.0rc6-py3-none-manylinux_2_39_aarch64.whl
| Download URL | agentic_workspace-1.0.0rc6-py3-none-manylinux_2_39_aarch64.whl |
|---|---|
| Size | 5.9 MB |
| Tags | Linux glibc 2.39+ ARM64 Python 3 |
|
SHA-256 checksum How to use checksums |
dbff78073f8bd8052add4128e0eede9717d57244cf3f69ea56fd039744820561
|
|
BLAKE2b-256 checksum How to use checksums |
7dd5c9ef607bb1bed8d563bc18f94cb26909d48331dc7206e3307ed46185ae7c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 18, 2026.
Transparency logRelease files / agentic_workspace-1.0.0rc6-py3-none-macosx_15_0_x86_64.whl
| Download URL | agentic_workspace-1.0.0rc6-py3-none-macosx_15_0_x86_64.whl |
|---|---|
| Size | 6.0 MB |
| Tags | Python 3 macOS 15.0+ x86-64 |
|
SHA-256 checksum How to use checksums |
5ef8b1ea215d0de07fb992220c877ed42fe3680df104d03d4687e9fe0cc2682b
|
|
BLAKE2b-256 checksum How to use checksums |
645606f19780c43c8d284650c94491a4fa5768f8fb2d59c94262dd6fa5adce51
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 18, 2026.
Transparency logRelease files / agentic_workspace-1.0.0rc6-py3-none-macosx_14_0_arm64.whl
| Download URL | agentic_workspace-1.0.0rc6-py3-none-macosx_14_0_arm64.whl |
|---|---|
| Size | 5.5 MB |
| Tags | Python 3 macOS 14.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
67f2155b0b2e9c4efaac5979d12c8e1b7d31e98b3457bfed30aac4e684aaf3cb
|
|
BLAKE2b-256 checksum How to use checksums |
e5d80c4807a1c28f3c1b339cd7931ad6b585bb6a9fc795b82a81697529e288cf
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 18, 2026.
Transparency log