weftgate

A local second brain for coding agents. Understand the code. Remember decisions. Verify changes.

Give your agent compact source context, decisions that notice changed files, and verification gates for broken code connections. One Python package works through your terminal, MCP, native completion hooks, and GitHub Actions.

No API key. No runtime dependencies. Local storage. No automatic transcript capture. Context, recall and default verification make no network calls. Explicitly enabled test commands run your repository's code and can have their own side effects.

Watch the full demo · Transcript and reproducible evidence · How to write an oracle

Try it

pip install weftgate
cd /path/to/your/repo
weftgate setup --agents codex,claude,cursor,antigravity --hooks --instructions
weftgate doctor                   # inspect coverage and configured integrations
weftgate audit                    # find existing broken connections
weftgate resolve "your_function"  # compact source pointers
weftgate checkpoint               # changed code + evidence still needed

From source: pip install git+https://github.com/Avinash-Amudala/weftgate.git. For development, bash scripts/bootstrap.sh installs the extras and runs the offline self-test.

The demo uses an intentionally broken fixture, not a field benchmark:

REJECT  import 'requestz'       → did you mean requests?
REJECT  env var 'DATABSE_URL'   → did you mean DATABASE_URL?
REJECT  handler 'helth'         → did you mean health?

Fix the three names and the fixture passes. A computed key such as os.environ[key] returns review, because static analysis cannot establish its value. To reproduce: weftgate eval mutate --fixture --seed 13.

What the result means

The rule is block only on a positive, machine-checkable falsehood. Suggestions accompany findings when a nearby candidate exists. An accept verdict is not a test suite result or proof that the application works; inspect coverage with weftgate doctor.

Supported verification contracts

This is an early static analyzer with bounded parsers. It does not execute your app, replace tests or a security scanner, or cover every framework. Python, Node, and monorepo import resolution can depend on runtime configuration. Missing or ambiguous evidence must soften; please report a false block with a minimal reproduction. Historical field runs document methods and limitations, rather than a claim of zero false positives.

Use it with your agent

weftgate setup --agents all --hooks --instructions --dry-run
weftgate setup --agents codex,claude,cursor,antigravity --hooks --instructions

The standard-library MCP server requires no extra package. Example MCP configuration:

{"mcpServers": {"weftgate": {"command": "weftgate", "args": ["mcp"]}}}

Run the server with the repository as its working directory. weftgate setup --agents all writes supported project configs and prints snippets for clients with global settings. CLI and MCP use the same functions. The new tools are resolve, neighbors, card, remember, recall, forget, and checkpoint, alongside the existing gate tools.

Client versions, project trust and organization policy affect hook activation. MCP tools and rules alone do not force an agent to use the gate. Local hooks are guardrails; require the GitHub Action in branch protection to enforce merge checks. Integration paths, activation checks and official references.

A small agent workflow

weftgate card "POST /orders" --budget 1200
weftgate remember "Order idempotency" "Keep duplicate requests idempotent." --file app/orders.py
weftgate recall "orders"
weftgate check app/orders.py
weftgate checkpoint --run --require-ready

Use paths and routes that exist in your project. Configure the commands the last step should observe in weftgate.toml:

[weftgate.workflow]
commands = ["python -m pytest -q"]

--run explicitly permits execution of configured, allowlisted commands. A checkpoint distinguishes proven failures, review findings, missing test evidence and changes during verification. --require-ready exits 3 when evidence is incomplete. A ready checkpoint covers those contracts and commands only. Workflow details.

Context responses contain source pointers, not file bodies. The default budget is 1,500 estimated tokens with a hard cap of 6,000 UTF-8 JSON bytes. Actual model token counts vary. weftgate ledger reports payload bytes and gate events; it does not invent a savings percentage or equate every rejection with an avoided retry. Context coverage and budgets.

CLI and CI

git diff | weftgate check -
weftgate check --staged
weftgate check --path app/main.py --content proposed.py
weftgate claim '[{"kind":"route","method":"POST","path":"/users"}]'
weftgate audit --format=json
weftgate index --show routes

Exit codes: 0 allows the change, 1 blocks according to policy, 2 means a usage or configuration error. Use --format=github for workflow annotations.

name: Verify connections
on: [pull_request]
permissions:
  contents: read
jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
        with:
          fetch-depth: 0
      - uses: Avinash-Amudala/weftgate@v0.2.0
        with:
          mode: check             # or audit to inspect the repository

The Action supports base, paths (shell-quoted paths, no shell expansion), block-on, and python-version. Use a full checkout for diff ancestry. The pre-commit hooks use the same gate; pin rev: v0.2.0.

Configure the contract

# weftgate.toml
[weftgate]
oracles = ["env_vars", "imports_lockfile", "routes_fastapi"]
block_on = "reject"                 # reject | review | never
env_declared_in = [".env.example"]

Precedence: WEFTGATE_* environment variables, repository configuration, user configuration, then defaults. The index lives in the user cache, outside the repo. weftgate doctor explains the selected configuration and missing contracts.

Outcome claims such as “tests passed” need machine-checkable evidence. Re-running a named test command or probing a URL requires explicit --run and the configured allowlist. See security and execution boundaries.

Memory that notices changed code

The public package integrates a compact, repository-scoped subset of mnemo's lexical memory design. remember, recall and forget need no companion install. File hashes are checked before recall. Notes with changed or deleted sources stay hidden unless you explicitly request --include-stale. Review a note and replace it with remember --id ID to update its grounding.

An anchored note has unchanged source files; its prose is not proven true. Notes without sources are clearly unverified. Nothing captures your conversations automatically. Storage, privacy and legacy mnemo integration.

Contribute

bash scripts/bootstrap.sh
.venv/bin/ruff check .
.venv/bin/ruff format --check .
.venv/bin/mypy weftgate
.venv/bin/python -m weftgate.selftest
.venv/bin/python -m pytest -q --cov=weftgate --cov-fail-under=85

Start with CONTRIBUTING.md, the oracle guide, and AGENTS.md. New oracles need a real broken example, a correct example, and a dynamic case that reviews. Reproducible false blocks and missing-contract reports are especially useful.

Apache-2.0 · Changelog · Launch plan