caurad — uvx / pip wrapper
Run the Caura broker from the Python ecosystem:
uvx caurad --help # package-name shorthand, kept working
uvx --from caurad caura --help # run the canonical command directly
pipx install caurad && caura --help # or install it
Interaction with the native installer
The PyPI wrapper and the native installer both provide a caura executable. If
both are installed, your shell runs whichever appears first on PATH, and the
two installations can be different versions. Use command -v caura to see
which executable wins, type -a caura to list every match, and caura version
to identify the selected version.
How it works
This package is a thin dispatcher — the broker itself is a single Go binary.
The currently published 0.10.1 package still exposes only caurad, and its
archive contains only the memclaw payload; this PR does not change that
release. The additive entry point first ships with a later tagged package.
On first canonical or compatibility entry-point invocation,
wrappers/uvx/caurad/cli.py detects your
platform, downloads the matching signed archive from the public release mirror,
verifies its SHA-256 against the published checksums.txt, caches the binary
under ~/.cache/memclawd/<version>/, and os.execvs it with your arguments.
Release A archives cache the root caura payload; older archives fall back to
their root compatibility payload. The caura and caurad entries both invoke
the payload as caura, while the legacy memclaw entry point retains its
established invocation name.
The install itself does NOT prefetch the binary — the download happens on first invocation. That keeps the package tiny and works under pipx / sandboxed installs where postinstall hooks don't fire.
The binary is downloaded from the public release mirror
(https://memclaw.net/memclaw/<tag>/) — the same source the
wrappers/curl/install.sh installer uses, not this repo's GitHub Releases
(which are private). SHA-256 verification is the integrity gate.
Environment overrides
Both are also read under their historical MEMCLAW_* spellings, which keep
working indefinitely; the CAURA_* name wins when it holds a non-empty value.
CAURA_BINARY_BASE— base URL of a release mirror (defaulthttps://memclaw.net/memclaw). Point it at an on-prem gateway's<origin>/memclawto install from a private deployment.CAURA_VERSION— pin a specific release tag instead of the installed package's version.
The published package version is set from the release tag by the PyPI-publish
workflow; the 0.0.0 in pyproject.toml is a placeholder for local checkouts.
Compatibility name
Existing pip install memclawd and uvx --from memclawd memclaw commands keep working through
the separate compatibility package, which depends on caurad. New installation
instructions should use the caura command above.
Licensed under Apache-2.0, matching the LICENSE at the repository root.
Metadata
Release files for caurad 0.10.3
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| caurad-0.10.3.tar.gz | 9.0 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| caurad-0.10.3-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 16.8 kB
Release files / caurad-0.10.3.tar.gz
| Download URL | caurad-0.10.3.tar.gz |
|---|---|
| Size | 9.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
96c8e55d353430987322f1d30e42132304be037ef944bb8fcd0bb14aeb677dd5
|
|
BLAKE2b-256 checksum How to use checksums |
14c141e6aa12de258a12b3659158dd1fff61f2ad3e1b83e682c4570a7549ca56
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 2, 2026.
Transparency logRelease files / caurad-0.10.3-py3-none-any.whl
| Download URL | caurad-0.10.3-py3-none-any.whl |
|---|---|
| Size | 7.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
56a10d5d280b72adef9b0461f7dc51c425ad3f443e7478c957875eafd519e345
|
|
BLAKE2b-256 checksum How to use checksums |
909acb6c193115abca53a4ea492ba485f8e45c301961ef99367d4cf78994cdf6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 2, 2026.
Transparency logSecurity for caurad 0.10.3
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for caurad-0.10.3.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 2, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.