awsettings

Docs · Source · pip install awsettings · The Aither World

The Aither World is an operating system for agents — a Linux you can hand to one, the runtimes it works in, and the tools it works with. awnix is the Linux underneath it; awsettings is one of its 46 bricks — each installs on its own, runs offline, and needs no account.

Start here: Point it at your agent's settings on one machine and have them show up on the next one you open.

Your agent's permissions and config, following you to the next machine.

pip install awsettings
awsettings hook install     # and never think about it again

Your coding agent keeps its permission allowlist, its enabled tool servers and its hooks in a local file. Open a session on a second machine — a laptop, a shell on a server, a dev container your phone just spun up — and none of it is there.

So you approve the same action again. By hand. Once per surface. Forever. And the copies drift apart while every one of them looks perfectly correct.

What you get

$ awsettings status
local:  /home/you/project/.claude/settings.local.json (present)
remote: file:/home/you/.awsettings/profile.json
hooks:  PostToolUse, SessionStart
a pull would apply 2 change(s):
  + permissions.allow: Bash(python tools/deploy.py:*)
  + enabledMcpjsonServers: my-server

$ awsettings pull
applied 2 change(s) to /home/you/project/.claude/settings.local.json:
  + permissions.allow: Bash(python tools/deploy.py:*)
  + enabledMcpjsonServers: my-server

Three rules it will not break

Credentials never travel — and they are dropped by name, not by inspecting the value. A "does this look like a token" heuristic passes every secret that does not look like one, and that failure is invisible until the secret is already published. env, apiKeyHelper, awsCredentialExport, sandbox.credentials and their kin stay on the machine they were typed on. awsettings push --dry-run prints exactly what would leave.

Arrays union; they are never replaced. Two machines both edit this file. With replace semantics, machine B silently loses the rule machine A never had — and neither of them can tell. Every list here merges.

A deny is one-way. A sync may add a deny or ask rule. It may never drop one. A lost allow rule costs you a prompt; a lost deny rule costs you the thing the deny existed to prevent, quietly, on a machine whose owner still believes it is there. If you genuinely want to remove one everywhere, --prune-denies says so out loud.

It writes the personal file, not the shared one

Only .claude/settings.local.json — gitignored, yours. Never the committed .claude/settings.json, because syncing your permission allowlist into a file your team reviews as policy hands everyone rules they never approved.

Autonomy is a hook, not a daemon

awsettings hook install

• SessionStart → pull. A new machine is stale before its first tool call, so that is when it catches up.
• A settings write → push, debounced. A rule you approve here is on its way to the others before you have finished the thought.

No background process. A daemon is a second thing to keep alive on every surface this exists to stop hand-maintaining — and when it dies, it dies quietly, which is the same failure as the drift it was meant to fix. Both hooks end in || true: a settings sync must never be able to fail a session open, because offline is the normal state of a laptop and the correct behaviour offline is to carry on.

Where the profile lives

No account required. The default is a plain JSON file in a folder you already sync — a git repo, a drive folder, a USB stick:

export AWSETTINGS_PROFILE=~/Dropbox/awsettings.json

Or point it at any endpoint that serves a JSON object on GET and merges one on PUT:

export AWSETTINGS_URL=https://example.com/api/settings/preferences
export AWSETTINGS_TOKEN=...     # environment only — never a command-line flag,
                                # which lands in shell history and the process list

A transport failure is never read as "no settings": both backends raise, and the CLI exits 2 rather than merging nothing and reporting success.

Exit codes

code	meaning
0	did the thing (or there was nothing to do — it says which)
1	a rule refused it
2	could not judge: profile unreachable, or a settings file would not parse

Prove it before you trust it

awsettings --self-test

Runs offline. Asserts that credentials neither leave nor arrive, that arrays union instead of replacing, that a deny is never dropped by default, that installing the hooks twice leaves one hook and does not clobber somebody else's, that a malformed settings file refuses rather than reading as empty, and that writes are atomic.

Licence

Apache-2.0.

The aw family

Standalone tools that share one idea: replace something you would otherwise have to trust with something you can check.

Each installs on its own, works offline, and needs no account.

	instead of trusting	you check
awdk	a framework's idea of how your agents should run	one loop you can read, pointed at a backend you already pay for
awskills	that an agent knows your procedure	the procedure written down, versioned, and loadable by any agent
awpack	that the pack you want shipped inside somebody's SDK, under whatever licence that SDK happens to carry	the pack as its own versioned artifact, with its own licence, that any agent runtime can install
awm	that memory stayed in its lane	tenant:user:project scopes, so a write cannot cross a boundary
awnode	a vendor's cloud with every prompt	a local gateway routing to backends you chose
awgraph	that grep found everything	an AST + tree-sitter call graph an agent can traverse
awgit	that no one else is editing this file	a lease, refused at commit time if you do not hold it
awdelphi	one agent's confident take on a decision	the round trace, the anonymity, and who dissents
awtoll	that your tooling is saving you context	the measured token cost of each tool call, and what the alternative cost
awseal	that the artifact came from who you think	an Ed25519 seal — the key that verifies is not the key that forges
awshare	that the download is intact	content-addressed bundles, verified on fetch
awnest	that there is a person on the other end	a verdict with evidence, where "we could not tell" is not "yes"
awnboard	a share link anyone who sees it can use	an invitation addressed to one person, for one gate, revocable
awnix	that the box is what you left it as	an immutable image you built, with atomic rollback
awrecover	that the restore worked	a restore that fully lands or does not land at all
awstorage	a du you ran last month, and a peers file that says 3 TB free	an inventory snapshot per node with a diff since the last one, and each tree classified re-fetchable or not
awrelay	a SaaS in the middle of your agents	findings, alerts and coordination over your own transport
awask	that anyone read the paragraph where you asked	the ask itself, with a button that steers the session that raised it
awmail	a mailbox somebody else can read	mail your agents send and receive over your own server
awfind	one vendor's idea of the web	results from whichever providers you configured
awbrowse	that the page said what you were told	the render, the DOM and the requests it made
gawbbonet	the model to keep a 300-message campaign coherent by itself	campaign facts recalled from scoped memory you can list and edit
aitherkvcache	a vendor's quantisation defaults	sub-byte KV cache kernels you can benchmark yourself
awrtifact	a hand-rolled split script and a hand-edited worker manifest	byte-verified parts in a release, served with Range + CORS, sizes asserted by a live gate
AitherZero	a pile of scripts nobody has numbered	numbered, discoverable automation with declarative playbooks
AitherConnect	what a page tells your browser to do	a federated search and desktop bridge you host
awreason	a confident paragraph	the phases it went through, and every tool call it made to get there
awrecurse	that everything you pasted in was actually read	which slices it opened, and what it concluded from each
awprism	the first explanation that fits	the ranked alternatives, and the observation that separates them
awrepl	what the agent believes the value is	the value, printed from the live session
awresearch	a summary of pages nobody opened	every claim against the source it came from
awfocus	twelve terminal tabs and a bad memory	one command that names every session, finds any transcript, and opens or steers the one you want
awgym	that a world model learned anything from the games it saw	transitions captured from real play, fed back, and the retrodiction score falling on grids it never saw
awpredict	a model because it trained without erroring	its prediction against a self-updating lookup, on the rows that are actually novel
awsh	that you already know the name of the command	what it decided your line meant, before it acts on it
awkno	that the docs site is up, or that you remember the family	the whole ecosystem in your terminal, with no network at all
awembed	a general-purpose embedder that has never seen your code	a held-out split of whole directories, scored teacher vs student vs int8
awtax	a closed tax app's sealed file you can never read again	a plain, provider-neutral schema of every figure, with the page it came from
awsettings (you are here)	that you will remember to re-approve the same thing on every box you work from	one profile, unioned rather than overwritten, with the credentials left behind

awnix is the ground floor — A Linux you can hand to an agent — immutable base, capabilities included.

The Aitherium ecosystem

Every repository here is public. Each publishes an aither-manifest.json beside its page, so any surface can read every sibling's — the network is browsable from any node in it.

repo	what it is	pages
awdk	Build AI agent fleets — 3 lines, any backend, local or cloud	docs
awskills	Portable agent skills — self-contained procedures an agent loads on demand	docs
awpack	First-party agent packs — the ones we build, versioned and installable on their own	docs
awm	A portable, scoped agent memory	docs
awnode	A lightweight local gateway — bridges your apps to the AI backends you chose	docs
awrun	A priority-aware queue and dispatcher for agentic runs and ad-hoc CI builds. It also judges whether the runner pool is big enough for the queue it is draining, and can ask a host to grow it -- reserving capacity is zero-sum, so a saturated pool needs more of it, not a different share of it	docs
awgraph	A semantic code graph for agents — AST + tree-sitter, call graphs	docs
awgit	Semantic version control on top of git — edit-ops and leases	docs
awdelphi	Anonymous multi-round expert panels — a converged answer with a trace	docs
awtoll	What every tool call costs you in context, measured from your own transcripts	docs
awseal	Sign an artifact so a stranger can verify it	docs
awshare	Publish an artifact and fetch it back verified	docs
awdit	An append-only audit trail whose gaps are DETECTABLE	docs
awbac	Role-based access control that fails closed and explains itself	docs
awiam	Who is this caller? A directory and session store that fails honestly	docs
awtunnel	Reach a service that has no public address	docs
awnest	Prove there is a human before you let them into the nest	docs
awnboard	A front gate you can put in front of anything, and hand someone the key to	docs
awnix	A Linux you can hand to an agent — immutable base, capabilities included	docs
awrecover	Labelled snapshots with an all-or-nothing restore	docs
awstorage	Every drive on every node, indexed, classified and diffed -- so you can see what you own before you delete it	docs
awrelay	Portable agent messaging — findings, alerts, coordination	docs
awask	Your agent asks you a question — and acts on your answer	docs
awmail	Give an agent an email address — send, and actually receive	docs
awnet	The agentic web — agents host a mesh, and agents join one	docs
awfind	A portable search client — query, results, ranking	docs
awbrowse	A portable browser client — navigate, console, network, DOM, screenshot	docs
awknowledge	How to run a coding agent so the result survives — the laws, with evidence	docs
gawbbonet	GobboNet campaigns with a real agent brain — scoped memory, graph recall	docs
aitherkvcache	Near-optimal KV cache quantization for LLM inference — sub-byte compression	docs
awrtifact	Deliberately chunk artifacts into GitHub release assets — the productized aitherkvcache mirror lane	docs
AitherZero	PowerShell 7+ automation framework — numbered, self-describing scripts	docs
AitherConnect	Browser extension — federated AI search, page context, and the Living OS overlay	docs
awreason	A portable reasoning client — sessions, phases, thoughts, and the chain that produced the answer	docs
awrecurse	Answer a question over a context far larger than the window — recursively, with the trace kept	docs
awprism	Turn a failure into ranked hypotheses — and say what would confirm each one	docs
awrepl	A REPL an agent can actually use — state that survives between turns	docs
awresearch	Ask a research question, get a cited report you can check	docs
awfocus	See, search and steer every Claude session from one command	docs
awgym	An ARC training gym — a game a world model can watch, and six roles that play through it	docs
awpredict	Predict what your environment does next, and how surprised you were	docs
awsh	Your terminal answers you -- type a question where a command would go	docs
awkno	The man page for the Aither World — every brick, stack and law, offline	docs
awembed	Train an embedding model that knows your corpus, and prove it beats the big one	docs
awtax	Turn any tax PDF -- returns, W-2, 1099, statements, even scans -- into structured data you can check	docs
awsettings (you are here)	Your agent's permissions and config, following you to the next machine	docs

<script src="aither-constellation.js"></script>