Skip to main content
Loss of provenance

A previous release had provenance metadata, but this release does not. View details.

Pre-release

This release is a pre-release and may not be stable for production use.

  tuvl
/ˈtuːvəl/  ·  തൂവൽ  ·  feather

Typed workflows of agents — code, database/HTTP/MCP tools, rules, models,
bounded tool loops and people — on a durable, journaled runtime,
built spec-first and served as REST, SSE and MCP.

Website  ·  Docs  ·  GitHub

tuvl 2.0 is a redesign with no 1.x compatibility layer — see the CHANGELOG. Versions follow SemVer.

A tuvl workflow is a graph of agents. Each agent has a typed contract — inputs, outputs, the signals it emits — and an engine that implements it:

Engine Determinism
code a Python function deterministic
tool a database, HTTP, blob storage or MCP operation deterministic
decide ordered rules, then an optional decision model deterministic → bounded
llm one structured model call bounded
loop a model using tools within hard budgets bounded
map a workflow run once for every item of a list as the child
human a form for a person external
pending a contract waiting for an implementation —

Signals route to the next agent or a named end. tuvl validate checks contracts, data flow, types and policy statically and prints each workflow's determinism profile and worst-case token cost. Every run is durable and journaled: it survives restarts, waits for people, can be paused, stepped and steered, and can be pinned and replayed as a zero-token test fixture.

kind: Workflow
version: tuvl/v2
metadata: { name: refund_flow, description: Handle a refund request }
spec:
  models: [Order, Refund]
  trigger:
    http: { path: /api/refunds, method: POST }
    input: { order_id: uuid, reason: str }
  agents:
    - id: load_order
      description: Load the order
      engine: tool
      inputs: { order_id: uuid }
      outputs: { order: Order }
      tool: { use: db, model: Order, op: read, where: { id: "{{ order_id }}" } }
      routes: { default: triage, not_found: END.missing, error: END.failed }
    - id: triage
      description: Decide how the refund is handled
      engine: decide
      inputs: { order: Order, reason: str }
      outputs: { lane: "enum[auto, review]" }
      decide:
        rules:
          - { when: "order.total > 500", then: review }
          - { when: "true", then: auto }
      routes: { auto: issue_refund, review: approval, error: END.failed }
    # … issue_refund (code), approval (human)
  outputs:
    default: { status: 200, body: { refund_id: "{{ refund.id }}" } }
    missing: { status: 404, body: { error: unknown order } }
    failed:  { status: 500, rollback: true, body: { error: refund failed } }

Install

uv tool install "tuvl[standard]"     # CLI + Insight (dev UI)
# or, in a project
uv add "tuvl[standard]"

tuvl alone is the production server; [standard] adds Insight, served only in dev mode, and the development tools (tuvl codegen, tuvl test, tuvl mcp). Features with their own packages are extras: tuvl[mcp], tuvl[redis], tuvl[vector], tuvl[otel-grpc]. tuvl ship installs only the ones a project uses.

Quick start

tuvl init demo --sample --preset gemini -y     # a ticket-triage project with a spec, tests and a lock
cd demo
tuvl validate --strict                         # contracts, data flow, cost
tuvl test                                      # offline tests
tuvl dev --auto-login                          # Insight at http://localhost:8885/insight

Spec-driven

tuvl spec new refund-automation      # write the intent (Markdown, with checked Data and Flows)
tuvl spec check                      # is the spec complete and consistent? (zero tokens)
tuvl spec verify                     # does the implementation match it, step by step?
tuvl spec status                     # task statuses, derived — never typed in
tuvl codegen                         # schemas, code stubs, tests (no model)

The coding agent builds; tuvl referees. Every step above is deterministic and spends no tokens. Coding agents get the same operations over MCP (tuvl mcp) and a skill set in .agents/skills/.

The CI gate:

tuvl validate --strict && tuvl codegen --check && tuvl lock --check && tuvl test && tuvl spec status --strict

Authoring with your coding agent

Already have Claude Code, Codex or Gemini CLI? tuvl can drive it from an idea to a packaged project, and accept only what its own checks (no model in the loop) pass:

tuvl spec import brief.pdf           # IDEA-SK-0004: a numbered, immutable copy of the brief
tuvl spec gen --idea IDEA-SK-0004    # your agent drafts SPEC-SK-0004-01 on a branch; a person approves it
tuvl spec approve SPEC-SK-0004-01 && tuvl spec tasks SPEC-SK-0004-01
tuvl codegen --spec SPEC-SK-0004-01 --all   # models and skeletons first, then your agent, one PR per task
tuvl review && tuvl ship --format both      # gate, image and a runnable archive

tuvl dev shows the same path in a terminal UI, and every step is in a local audit ledger. Details: docs/authoring.md.

Surfaces

  • REST + SSE: each workflow's route, POST /api/workflows/{name}/runs, runs, journal events, approvals, operator control; OpenAPI generated from the contracts.
  • MCP export: trigger.mcp.enabled lists a workflow as a tool on /mcp.
  • TypeScript: @tuvl/client with npx tuvl-client generate for typed inputs and outputs.
  • Insight: specs and task board, workflow canvas, runs with breakpoints, step mode and approvals, change-engine checks against pinned fixtures, judge calibration.

Production

tuvl lock && tuvl ship --tag registry/app:1.0    # gates, Dockerfile (pinned tuvl + only the extras you use), Helm chart
tuvl run --role api        # or: worker — scale HTTP and execution separately

Ed25519-signed JWT auth, default-deny triggers, scoped CRUD, approvals with no self-approval, secure fields kept away from models, optional Postgres row-level multi-tenancy.

Documentation

tuvl.dev · in this repository: agentic manual, runtime, engines, decide, loop and tools, judges, storage, models, spec-driven, Insight, API, CLI, security, observability.


License & contributing

tuvl is licensed under the Apache License, Version 2.0 — see LICENSE and NOTICE. It is free to use, modify and distribute, with an express patent grant. The name "tuvl" and the logos are not licensed for use as a brand (Apache-2.0 §6).

Releases up to and including 2.0.0b4 were published under the MIT License and remain available under it. Starting with 2.0.0b5 tuvl is Apache-2.0; see the changelog.

Development currently happens in a private repository, so the full source is not yet publicly browsable. This is temporary: the complete codebase will be published openly in a future release. In the meantime the project is open to contribution — bug reports, feature proposals, and patches are all welcome. See CONTRIBUTING to get started, or reach out at developer@tuvl.io.

Metadata

Release files for tuvl 2.0.0b7

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Loss of provenance

These files do not have provenance metadata, despite files in a prior release including this data.

We recommend further investigation before installing these files. View details.

Source distribution (sdist)

Source distribution for tuvl 2.0.0b7
File Size Uploaded Provenance
tuvl-2.0.0b7.tar.gz 7.8 MB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for tuvl 2.0.0b7
File Interpreter ABI Platform
tuvl-2.0.0b7-py3-none-any.whl Python 3 none any Details

Total release size: 8.4 MB

Release files / tuvl-2.0.0b7.tar.gz

Loss of provenance

This file belongs to a release without provenance metadata, despite a prior release including this data.

We recommend further investigation before installing this file. View details.

Download URL tuvl-2.0.0b7.tar.gz
Size 7.8 MB
Tags Source
SHA-256 checksum
How to use checksums
0862ea64c6aa3f29ce32b6930dcff347b6895100e6d298742db17525590466cd
BLAKE2b-256 checksum
How to use checksums
72fe5cb09126941097839dbc731b12bac718496f2ce55e94f7e60c6119390317
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via uv/0.13.3 {"installer":{"name":"uv","version":"0.13.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

Release files / tuvl-2.0.0b7-py3-none-any.whl

Loss of provenance

This file belongs to a release without provenance metadata, despite a prior release including this data.

We recommend further investigation before installing this file. View details.

Download URL tuvl-2.0.0b7-py3-none-any.whl
Size 645.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
dbe57b12cc5d7a1dc969de1218c0fde25e4b94f62a0322a5d2330a25ff255165
BLAKE2b-256 checksum
How to use checksums
4cefe81d73d2c221672f55e91b9eda0e281048872369bc4eabf37d7f4e945680
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via uv/0.13.3 {"installer":{"name":"uv","version":"0.13.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

Security for tuvl 2.0.0b7

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Loss of provenance

A previous release of these files had provenance metadata, but this release does not.

While this could reflect a routine change by the project maintainers, it may also indicate that the release files have been compromised.

Release comparison

  • Removed 2.0.0b3 2 files With provenance
  • Added 2.0.0b7 2 files Without provenance

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page