Skip to main content

Agentic Workspace

PyPI npm crates.io

Persistent, task-relevant project context for coding agents.

Agentic Workspace (AW) is an open-source developer tool you add to a Git repository to give coding agents persistent, task-relevant project context across sessions.

AW provides skills and command-line tools for finding project guidance, saving unfinished work and lessons, and checking whether earlier verification still applies.

Keep your existing coding agent, editor, source tree, tests and review process. Your project can use any programming language or framework.

Get started · Customise repository behaviour · Everyday use · Documentation · Releases

Why AW?

Knowledge about a repository belongs with the repository. Useful project knowledge should survive a change of session, developer or agent provider, rather than remain trapped in private conversations.

Not everything about a repository is relevant all the time. Loading all accumulated guidance and state into every session replaces rediscovery with context overload.

Scoped instructions and on-demand skills are useful foundations. Instructions set rules; skills explain reusable procedures. Neither an ever-longer instruction file nor a growing skill catalogue, by itself, keeps track of where a task stopped or whether earlier evidence still applies.

AW builds on both with saved task records, lessons and verification evidence, plus tools for reading and updating them. The aim is to reduce the cost of completing and maintaining work:

Team benefit How AW helps
Less repeated investigation Find relevant rules, sources and reusable procedures without loading unrelated guidance.
Cheaper continuation and handoffs Preserve intent, accepted progress and remaining work; give the receiving agent the relevant constraints and expected result.
Fewer repeated explanations Save project corrections as scoped instructions and useful lessons as advice for later work.
More focused verification Find relevant checking procedures, reuse evidence when it still applies and identify what remains unverified.
Less dependence on one agent provider Keep shared project context in the repository rather than one provider's conversation history.

Small tasks stay small. A typo fix does not need Planning, Memory, Verification, delegation, or another artefact merely because those capabilities are available.

How it works

A small entry in AGENTS.md points to the repository's workspace-startup skill. It teaches the agent when to read project sources, load a specialised procedure or query AW's tools.

The Rust-backed runtime reads applicable rules and saved records, reports relevant requirements and available operations, and checks current sources and permissions before supported updates. The agent still makes implementation decisions and uses its ordinary development tools.

Find the relevant context → Do the work → Update what matters

Source code, documentation, tests and decisions stay in their existing homes. AW points agents to those sources and saves useful working context alongside them, rather than copying the repository or the conversation into a second knowledge system.

Everyday examples · Product model · Architecture

Trust and support

AW is not a sandbox. Repository-configured commands run with the caller's filesystem access and credentials. Review the repository and the commands it can run before allowing them to execute. Credentials belong in the agent host or environment's credential facilities, not in checked-in AW files.

AW's controlled operations and checking support do not replace human judgement, independent review, or existing security controls.

Exact package identities, installation commands, runtime versions, operating-system support, and prerelease/stable status live with the selected release and generated references instead of being copied into this landing page.

Installation and setup · Threat model · Evidence and support

Get started

Use a Git working tree and an agent that can read repository instructions and run commands. The machine must be able to run a supported AW distribution; your project's language and build system need not match it.

  1. Install AW through npm, Python/uv, Cargo or a standalone release, either per repository or as a shared tool. Standalone binaries do not require a language toolchain. See the Getting started guide for platform requirements and installation commands.
  2. From the Git working-tree root, run agentic-workspace setup using that installation and authorise the proposed integration. For a repository-local npm installation, use npm exec --no -- agentic-workspace setup.
  3. Give your agent an ordinary task, such as correcting a documentation error.

Installation supplies the runtime; setup adds the .agentic-workspace/ directory and a small AGENTS.md pointer. Review and commit the shared integration files, leaving ignored local state alone. Project rules and checking procedures still need to be defined; setup does not infer them.

Your repository, your rules

AW is designed to fit around the project rather than reorganise it.

A simplified repository using AW looks like this:

your-repository/
├── AGENTS.md              # Small AW-managed entry point inside your project file
├── src/, docs/, tests/    # Existing project contents
└── .agentic-workspace/    # AW integration plus optional saved component state

AW setup deliberately adds only a small set of files. Package-managed skills and setup metadata stay separate from your project's configuration, component records, machine-local data, and any output deliberately written back into the repository.

You can express a repository-wide correction in ordinary language:

For this repository, read the API contract before changing public response fields.

Or make the scope explicitly local:

Only on this machine, use this executable path when invoking AW.

The agent can save the change in the appropriate instruction or configuration file and verify that it was retained. A promise in chat is not a saved rule, and a local preference should not silently become shared repository policy.

Reusable methods belong in skills. Binding rules belong in instructions or configuration. Current work and evidence stay with the components that maintain them.

Setup, refresh, and removal use the same declared file set. Removing AW deletes only integration files that AW can verify it owns, preserves project configuration and saved component records, and refuses to erase edited or unrelated content merely because it sits under an AW path.

Configuration reference · Repository files

Add structure where it helps

AW includes optional first-party capabilities for recurring coordination costs:

Planning preserves unfinished work: intended outcome, constraints, progress, blockers, and next action.

Memory retains useful observations and lessons that would otherwise be expensive to rediscover. Advice can be reconsidered when its dependencies change; a note is not automatically policy.

Verification makes checking procedures, evidence, and known gaps reusable. Passing a check supports the claim it actually tests, not every claim about the finished work.

These are optional components, not mandatory workflow stages. Repositories can use what repays its cost and leave unrelated capabilities out of the current task's context.

Repository-specific rules and procedures do not require a new module. Modules are for distinct capabilities with their own responsibilities, including read-only facts; saving state is optional.

Modules and extensions →

Works with agents rather than replacing them

Agentic Workspace is not an autonomous coding agent. It gives the agent already working in the repository better project context and controlled ways to read or update AW-managed information.

An agent with runtime access can query the current records maintained by AW components and use supported operations. A repository-only reviewer can follow the same startup skill and generated read profile to recover recorded goals, constraints, progress, and advice, while live machine state, current test results, and permission to make changes remain unknown.

The product's shared behaviour lives in one Rust core. Native, Python, TypeScript, and JSON interfaces call that same implementation instead of defining separate workflow behaviour. The host project's implementation language does not need to match AW's runtime implementation.

Host integrations still differ. Provider independence does not mean every agent host discovers skills identically or every model follows repository guidance perfectly; current support and evidence remain release- and environment-bound.

Evidence and support →

Learn more

Use AW: Installation and adoption · Everyday use · Configuration

Understand AW: Product overview · Architecture · Design principles · Modules

Look up details: CLI reference · Installed surfaces · Full documentation

Contributing

For changes to Agentic Workspace itself, start with the contributor playbook. Use the repository's issue templates to report a problem or propose a change.

Contributions should make useful work easier to complete, continue, or verify while keeping unnecessary context, framework surface, and repository residue low.

Licence

MIT.

Metadata

Release files for agentic-workspace 1.17.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for agentic-workspace 1.17.0
File Size Uploaded Provenance Actions
agentic_workspace-1.17.0.tar.gz 1.1 MB With provenance Details for agentic_workspace-1.17.0.tar.gz

Built distributions (wheels)

Table of built distributions (wheels) for agentic-workspace 1.17.0
File Actions
agentic_workspace-1.17.0-py3-none-win_arm64.whl Python 3 none Windows ARM64 Details for agentic_workspace-1.17.0-py3-none-win_arm64.whl
agentic_workspace-1.17.0-py3-none-win_amd64.whl Python 3 none Windows x86-64 Details for agentic_workspace-1.17.0-py3-none-win_amd64.whl
agentic_workspace-1.17.0-py3-none-manylinux_2_39_x86_64.whl Python 3 none Linux glibc 2.39+ x86-64 Details for agentic_workspace-1.17.0-py3-none-manylinux_2_39_x86_64.whl
agentic_workspace-1.17.0-py3-none-manylinux_2_39_aarch64.whl Python 3 none Linux glibc 2.39+ ARM64 Details for agentic_workspace-1.17.0-py3-none-manylinux_2_39_aarch64.whl
agentic_workspace-1.17.0-py3-none-macosx_15_0_x86_64.whl Python 3 none macOS 15.0+ x86-64 Details for agentic_workspace-1.17.0-py3-none-macosx_15_0_x86_64.whl
agentic_workspace-1.17.0-py3-none-macosx_14_0_arm64.whl Python 3 none macOS 14.0+ ARM64 Details for agentic_workspace-1.17.0-py3-none-macosx_14_0_arm64.whl

Total release size: 45.4 MB

Release files / agentic_workspace-1.17.0.tar.gz

Download URL agentic_workspace-1.17.0.tar.gz
Size 1.1 MB
Tags Source
SHA-256 checksum
How to use checksums
13b10939045d3468ece20f260ce1959dd90241f0150e5a32a90c8feee8872af2
BLAKE2b-256 checksum
How to use checksums
303550b2004fba1e826174a532ce323fe4f4602b8813c7ce38a1e8dedaa83433
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

Release files / agentic_workspace-1.17.0-py3-none-win_arm64.whl

Download URL agentic_workspace-1.17.0-py3-none-win_arm64.whl
Size 6.9 MB
Tags Python 3 Windows ARM64
SHA-256 checksum
How to use checksums
259801d1c8e77259dc8efcbdc8d77edd6b0908d091460c3d492379949eb1943b
BLAKE2b-256 checksum
How to use checksums
c8ba585d9e79a251a8b775078041b40d3ba99dfbff9adabaf305a7fe7abbd026
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

Release files / agentic_workspace-1.17.0-py3-none-win_amd64.whl

Download URL agentic_workspace-1.17.0-py3-none-win_amd64.whl
Size 7.5 MB
Tags Python 3 Windows x86-64
SHA-256 checksum
How to use checksums
25a8d682318daab80c57e1a79abd305d179cca78c0c4775250640d4119d72e61
BLAKE2b-256 checksum
How to use checksums
54cc931bdf318c27c14b2d3ffeb3a5721aaf69031e3c427ce37a73dd642812aa
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

Release files / agentic_workspace-1.17.0-py3-none-manylinux_2_39_x86_64.whl

Download URL agentic_workspace-1.17.0-py3-none-manylinux_2_39_x86_64.whl
Size 7.9 MB
Tags Linux glibc 2.39+ x86-64 Python 3
SHA-256 checksum
How to use checksums
352ed700bf45a20e9bf5f05204d5d4df07665106aaaa22876cd407a3f9f96a15
BLAKE2b-256 checksum
How to use checksums
1b2aeae35d657785593b3f3d613fbd2898659ccf33b9ab1d31538543f65baa8c
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

Release files / agentic_workspace-1.17.0-py3-none-manylinux_2_39_aarch64.whl

Download URL agentic_workspace-1.17.0-py3-none-manylinux_2_39_aarch64.whl
Size 7.4 MB
Tags Linux glibc 2.39+ ARM64 Python 3
SHA-256 checksum
How to use checksums
41b9d186a55392e531b99b8d251df2249c9ac7f60f0d1d554d88f999f213815d
BLAKE2b-256 checksum
How to use checksums
feb1433ba0f3d0c16d33b8533bde15cfe18de817752fb2418184514c5f457d31
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

Release files / agentic_workspace-1.17.0-py3-none-macosx_15_0_x86_64.whl

Download URL agentic_workspace-1.17.0-py3-none-macosx_15_0_x86_64.whl
Size 7.6 MB
Tags Python 3 macOS 15.0+ x86-64
SHA-256 checksum
How to use checksums
f08d6676c63bc8e2e6283d3db9e0e3b296db11eb19e510e504c7a209ead550ad
BLAKE2b-256 checksum
How to use checksums
68ea9d046be80e5b76ec90dcb7640e6d800b9f8b644e114c0f07893290e8b579
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

Release files / agentic_workspace-1.17.0-py3-none-macosx_14_0_arm64.whl

Download URL agentic_workspace-1.17.0-py3-none-macosx_14_0_arm64.whl
Size 7.0 MB
Tags Python 3 macOS 14.0+ ARM64
SHA-256 checksum
How to use checksums
6486724a208802ae67851657fe1d6082626e6e83f77dc1744e8d31743c9e3985
BLAKE2b-256 checksum
How to use checksums
eda00dcf5105a0d114c761ab3ad2f2a513d6af4901b6982eef6a19f9c9a139d4
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

Security for agentic-workspace 1.17.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 7 files in this release have been uploaded with provenance metadata.

Select from 7 files

Attestation for agentic_workspace-1.17.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 30, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

1.17.0 This release

7 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page