Skip to main content

Agentic Workspace

PyPI npm crates.io

Persistent operating context and dynamic control for coding agents.

Agentic Workspace (AW) helps coding agents enter a repository with the right guidance, continue unfinished work across sessions, and preserve useful lessons without turning every task into a workflow.

It builds on repository instructions and skills with persistent, source-owned context and a small Rust-backed tool surface for exact current information and bounded operations. Keep your existing agent, editor, source tree, tests, and review process; AW connects them to the operating context that matters for the task at hand.

Customise repository behaviour · Get started · Everyday use · Documentation · Releases

Why AW?

A repository instruction file can explain how to work in a project. By itself, it cannot tell a new session where a multi-step task stopped, which retained lesson is relevant now, whether earlier verification still supports a claim, or which deeper procedure is worth loading for this change.

As work spans sessions and agents, that context has to come from somewhere. Without a deliberate home, it tends to disappear into chat, duplicate into prose, or be reconstructed from source, issues, and history.

AW keeps only the operating context whose availability can materially change agent behaviour, then makes the relevant part cheap to reach:

Need What AW provides
Find the right guidance Task-relevant instructions, source references, and reusable skills.
Continue interrupted work Retained outcomes, constraints, accepted progress, blockers, and next actions.
Know what to verify Relevant checking procedures, recorded evidence, and visible gaps.
Hand work to another agent Bounded assignments with explicit context, constraints, and return expectations.
Avoid repeated rediscovery Useful lessons and corrections retained with the appropriate owner.

The goal is less repeated explanation, searching, handoff reconstruction, and repair—not a larger prompt or a new workflow to manage.

Small tasks stay small. A typo fix does not need Planning, Memory, Verification, delegation, or another artefact merely because those capabilities are available.

What using it looks like

AW can help an agent find relevant project guidance and preserve unfinished work between sessions. The agent still reads the source, reasons about the design and implements changes with its ordinary tools.

For example, imagine an API change that spans two sessions in a repository with API guidance and verification procedures configured:

Add pagination to the users API without breaking existing clients.

The agent can use AW to find the relevant contract, load a useful implementation procedure and identify the checks expected for this change.

If work stops partway through, Planning can preserve the intended outcome, accepted progress, unresolved questions, and next action.

In a later session:

Continue the pagination work.

The next agent can recover that continuation rather than reconstructing the previous conversation. Changed assumptions and missing evidence remain things to check; a recorded result is not automatically fresh proof.

The same principle applies to a handoff: preserve enough for the receiving agent to do bounded work without copying the entire parent session. Returned work still needs appropriate integration and verification.

See everyday examples →

How it works

Skills teach procedure. Repository instructions and configuration set policy. Domain owners hold current state and evidence. Tools provide exact current information and controlled operations. The agent supplies judgement.

A small repository entry point leads the agent to AW's canonical workspace-startup skill. That skill explains how to reach relevant sources, ask the runtime for current facts when they matter, and load specialised procedures only when useful.

The underlying model is deliberately small:

Find the relevant context → Do the work → Update what matters

Internally, AW resolves a compact operating contract, exposes supported actions, and reconciles their consequences afterward. That machinery is a substrate for the agent, not a phase machine the user has to operate around every task.

Source code, documentation, tests, decisions, and other canonical repository material remain in their existing homes. AW routes to those sources rather than importing the repository into a second knowledge system.

Product model · Architecture

Trust and support

AW is not a sandbox. Repository-configured commands run with the caller's filesystem and credential authority. Review the repository and its execution routes before allowing them to run. Credentials belong in the host or environment's credential facilities, not checked-in AW state.

AW's operation boundaries and verification support do not replace human judgement, independent review, or existing security controls.

Exact package identities, installation commands, runtime versions, operating-system support, and prerelease/stable status are deliberately kept in release-bound or generated owners instead of copied into this landing page.

Installation and adoption · Threat model · Evidence and support

Get started

  1. Install AW using any supported distribution, either as a dev dependency in your repo (recommended) or as a globally accessible tool on your computer. See Getting started guide.
  2. From your repo root, run agentic-workspace setup using that installation and authorise the proposed integration.
  3. Give your agent an ordinary task, such as correcting a documentation error.

Installation supplies the runtime; setup adds the AW enclave and an AGENTS.md pointer. Your agent follows that pointer during ordinary work.

Your repository, your rules

AW is designed to fit around the project rather than reorganise it.

A simplified host repository looks like this:

your-repository/
├── AGENTS.md              # Small managed entry point inside a repo-owned file
├── src/, docs/, tests/    # Existing project contents
└── .agentic-workspace/    # Package integration plus optional owner state

The current public adoption footprint is Configuration-owned and deliberately small. Package-managed skills, ownership/read-profile metadata, provenance, and adoption identity stay distinct from repo-owned configuration, module-owned state, local data, and promoted output.

You can express a repository-wide correction in ordinary language:

For this repository, read the API contract before changing public response fields.

Or make the scope explicitly local:

Only on this machine, use this executable path when invoking AW.

The agent can route the change to the appropriate instruction or configuration owner and verify whether it was retained. A promise in chat is not a saved rule, and a local preference should not silently become shared repository policy.

Reusable methods belong in skills. Binding rules belong in instructions or configuration. Current work and evidence stay with the capabilities responsible for them.

The same Configuration-owned footprint is used for adoption, refresh, and removal. De-adoption removes only authenticated package-owned integration, preserves repo-owned configuration and domain state, and refuses to erase edited or unowned content merely because it sits under an AW path.

Configuration reference · Repository footprint

Add structure where it helps

AW includes optional first-party capabilities for recurring coordination costs:

Planning preserves execution continuity: intended outcome, constraints, progress, blockers, and next action.

Memory retains useful observations and lessons that would otherwise be expensive to rediscover. Advice can be reconsidered when its dependencies change; a note is not automatically policy.

Verification makes checking procedures, evidence, and known gaps reusable. Passing a check supports the claim it actually tests, not every claim about the finished work.

These are peer capabilities, not mandatory workflow stages. Repositories can use what repays its cost and leave unrelated capabilities out of the current task's context.

Repository-specific rules and procedures do not require a new module. Modules are for independently owned domain capabilities, including read-only facts; persistence is optional.

Modules and extensions →

Works with agents rather than replacing them

Agentic Workspace is not an autonomous coding agent. It gives the agent already working in the repository better operating context and safer repository-native control.

An agent with runtime access can query current owner state and use supported operations. A repository-only reviewer can follow the same canonical skill and generated read profile to recover relevant recorded intent, constraints, progress, and advice, while live machine state, fresh proof, and effect permission remain unknown.

The ordinary deterministic product semantics live in a shared Rust core. Native, Python, TypeScript, and JSON-facing surfaces project or bind that authority rather than defining separate workflow behaviour. The host project's implementation language does not need to match AW's runtime implementation.

Host integrations still differ. Provider independence does not mean every agent host discovers skills identically or every model follows repository guidance perfectly; current support and evidence remain release- and environment-bound.

Evidence and support →

Learn more

Use AW: Installation and adoption · Everyday use · Configuration

Understand AW: Product overview · Architecture · Design principles · Modules

Look up details: CLI reference · Installed surfaces · Full documentation

Contributing

For changes to Agentic Workspace itself, start with the contributor playbook. Use the repository's issue templates to report a problem or propose a change.

Contributions should make useful work easier to complete, continue, or verify while keeping unnecessary context, framework surface, and repository residue low.

Licence

MIT.

Metadata

Release files for agentic-workspace 1.7.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for agentic-workspace 1.7.0
File Size Uploaded
agentic_workspace-1.7.0.tar.gz 923.4 kB Details

Built distributions (wheels)

Table of built distributions (wheels) for agentic-workspace 1.7.0
File
agentic_workspace-1.7.0-py3-none-win_arm64.whl Python 3 none Windows ARM64 Details
agentic_workspace-1.7.0-py3-none-win_amd64.whl Python 3 none Windows x86-64 Details
agentic_workspace-1.7.0-py3-none-manylinux_2_39_x86_64.whl Python 3 none Linux glibc 2.39+ x86-64 Details
agentic_workspace-1.7.0-py3-none-manylinux_2_39_aarch64.whl Python 3 none Linux glibc 2.39+ ARM64 Details
agentic_workspace-1.7.0-py3-none-macosx_15_0_x86_64.whl Python 3 none macOS 15.0+ x86-64 Details
agentic_workspace-1.7.0-py3-none-macosx_14_0_arm64.whl Python 3 none macOS 14.0+ ARM64 Details

Total release size: 41.2 MB

Release files / agentic_workspace-1.7.0.tar.gz

Download URL agentic_workspace-1.7.0.tar.gz
Size 923.4 kB
Tags Source
SHA-256 checksum
How to use checksums
ef20a7b7e480ab7e8fff1822fd8316add0a6826f590433c0f6e8bb7c825e1488
BLAKE2b-256 checksum
How to use checksums
c68c9e72a3ef69c952fa9fd4a2193c8ecfbbe68f2cb3bf4e0ee2eb0be93195d6
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.

Transparency log

Release files / agentic_workspace-1.7.0-py3-none-win_arm64.whl

Download URL agentic_workspace-1.7.0-py3-none-win_arm64.whl
Size 6.3 MB
Tags Python 3 Windows ARM64
SHA-256 checksum
How to use checksums
96b3545fab0851b3d2c89d9167497d05aefb307741e6ace14861ce181ac7d791
BLAKE2b-256 checksum
How to use checksums
41c693385f6ab752e34b3b7f395d0f1484de9f2d2d2378d5fc1c91b973a8c8a8
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.

Transparency log

Release files / agentic_workspace-1.7.0-py3-none-win_amd64.whl

Download URL agentic_workspace-1.7.0-py3-none-win_amd64.whl
Size 6.8 MB
Tags Python 3 Windows x86-64
SHA-256 checksum
How to use checksums
04f05bedbd19f335294f0acee5e08e03094f8d5ca87a65aaf9fd50a59f6d7fa2
BLAKE2b-256 checksum
How to use checksums
487e67d56b97087e0a6ea540c4099f3640f2a6d73ae9782b5c4652274c5b9ef6
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.

Transparency log

Release files / agentic_workspace-1.7.0-py3-none-manylinux_2_39_x86_64.whl

Download URL agentic_workspace-1.7.0-py3-none-manylinux_2_39_x86_64.whl
Size 7.2 MB
Tags Linux glibc 2.39+ x86-64 Python 3
SHA-256 checksum
How to use checksums
d99281c12e9eb81abaf6b4ae5d2102a3e644b9d21f88cefea1abfa72549cba07
BLAKE2b-256 checksum
How to use checksums
7dd871b1862fbb46b62388d553cdd9536d01e30a316bb8ce6d3a1a2567509d38
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.

Transparency log

Release files / agentic_workspace-1.7.0-py3-none-manylinux_2_39_aarch64.whl

Download URL agentic_workspace-1.7.0-py3-none-manylinux_2_39_aarch64.whl
Size 6.8 MB
Tags Linux glibc 2.39+ ARM64 Python 3
SHA-256 checksum
How to use checksums
58d6cffd9b19c074d7cb468b9e883b20b8ccfc36c8210a641af722b6ee6e6f91
BLAKE2b-256 checksum
How to use checksums
1b039ba4133efb6f11a466af03071f96129c4874bf5e3ceb796b35c35c3ed686
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.

Transparency log

Release files / agentic_workspace-1.7.0-py3-none-macosx_15_0_x86_64.whl

Download URL agentic_workspace-1.7.0-py3-none-macosx_15_0_x86_64.whl
Size 6.9 MB
Tags Python 3 macOS 15.0+ x86-64
SHA-256 checksum
How to use checksums
dad7656473549ceb0d6a9b2c236c8077414a8a94fdc2003827a1b63cd7edf265
BLAKE2b-256 checksum
How to use checksums
0c26ce3ea941e495f132618a7ddf1bbc885742bef2bb2d0564e79272d9afcffc
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.

Transparency log

Release files / agentic_workspace-1.7.0-py3-none-macosx_14_0_arm64.whl

Download URL agentic_workspace-1.7.0-py3-none-macosx_14_0_arm64.whl
Size 6.4 MB
Tags Python 3 macOS 14.0+ ARM64
SHA-256 checksum
How to use checksums
9675eb694d172f83d1b3193aa1beb6558d0eb9a6c6a03463cbb077f3599c1f4b
BLAKE2b-256 checksum
How to use checksums
126d3bf779fd97ec5707f278a7b344df4cab679c9c8d9d83321c09f5cab21192
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.

Transparency log

Release history Release notifications | RSS feed

2.0.0

7 release files

1.14.1

7 release files

1.14.0

7 release files

1.13.1

7 release files

1.9.1

7 release files

1.9.0

7 release files

1.8.0

7 release files

This release

1.7.0 This release

7 release files

1.6.0

7 release files

1.5.1

7 release files

1.5.0

7 release files

1.4.1

7 release files

1.4.0

7 release files

1.3.2

7 release files

1.2.0

7 release files

1.1.2

7 release files

1.1.1

7 release files

1.1.0

7 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page