workpilot 0.31.2

Enterprise AI assistant — internal preview only

WorkPilot

An autonomous AI assistant that codes, communicates, and ships across your entire Microsoft stack — proactively and securely.

Website · Documentation · Changelog · Add to Teams

---

WorkPilot's runtime, credentials, memory, and session state stay on your machine. Content is sent only to the model providers and external channels you configure; the optional Cloud Gateway is a stateless relay.

Why WorkPilot?

Principle	Details
Your infra, your data	Runs on your machine or VM — nothing persisted outside your network
Your identity provider	Entra ID (Azure AD) SSO — no separate accounts or API keys to manage
Your compliance posture	Four security profiles (open → standard → controlled → restricted)
Your Microsoft stack	Native Teams bot, Outlook, Graph API, Azure DevOps integration

Install

With uv (recommended), pip, or the bootstrap script below:

uv tool install workpilot@latest
workpilot init          # guided setup
workpilot               # smart start — init if needed, then launch

One-click bootstrap (auto-installs uv + Python if needed)

Windows (PowerShell):

irm https://aka.ms/workpilot/install.ps1 | iex

macOS / Linux:

curl -fsSL https://aka.ms/workpilot/install.sh | bash

The bootstrap scripts install uv and ensure a compatible Python runtime is available if needed, then install WorkPilot via uv tool. Existing pip installs are migrated automatically.

Alternative: pip install

pip install --upgrade workpilot

Note: uv tool install is recommended over pip because it creates an isolated environment and avoids Windows file-lock issues during upgrades. To migrate an existing pip install to uv: re-run the bootstrap script or manually:

pip uninstall workpilot -y
uv tool install workpilot@latest

Platform notes

Platform	Notes
Windows	If workpilot isn't found after install, ensure the install location is on your PATH: %USERPROFILE%\.local\bin for uv, or %APPDATA%\Python\Python3x\Scripts for pip. Or use the bootstrap script.
macOS	You may need python3 instead of python. Homebrew: brew install python@3.11
Linux	sudo apt install python3.11 python3.11-venv if Python 3.11+ isn't available.

Three ways to use it

Terminal

workpilot chat               # interactive REPL
workpilot run "write tests"  # one-shot

Self-hosted web server

workpilot serve              # http://localhost:3003

Chat UI, REST API, WebSocket, and OpenAI-compatible /v1/chat/completions — all on your own server.

Microsoft Teams + Web Chat

workpilot cloud              # authenticate with Entra ID

A stateless Cloud Gateway relays messages between Teams and your machine over outbound WSS. Nothing is stored in the cloud.

Teams user? Add WorkPilot to Teams (Preview) then run workpilot serve to bring it online.

What it does

Capability	Details
Code	Read, write, edit, refactor, and debug across your entire codebase
Shell	Run commands, git, tests, build tools — sandboxed with deny-pattern controls
Browse	Web search, HTTP requests, and Playwright browser automation
Microsoft 365	Teams messages, Outlook email, calendar, Graph API, Azure DevOps
Delegate	Spawn sub-agents; delegate to GitHub Copilot or Claude Code in background
Skills	Markdown prompt overlays with auto-activation — bundled and custom
MCP	Connect external tool servers — namespaced tools, progressive loading, auto-reconnect
Schedule	Cron jobs, event triggers, heartbeat tasks, recurring automation

Built-in agents

Agent	Model	Purpose
default	auto	Full-capability orchestrator — user-facing, spawns sub-agents
Explorer	fast	Read-only codebase search, spawned for broad exploration
HistorySession	fast	Past-conversation recall for quotes, decisions, details, and referenced files

Custom agents can be added as Markdown files; five bundled template designs (coder, reviewer, tester, researcher, communicator) are deferred to v2.

Security

WorkPilot implements defense-in-depth at every layer:

Layer	Mechanisms
Access control	Entra ID SSO · 4 security profiles · per-agent tool scoping · RBAC roles
Runtime protection	Tool safety hooks · risk scoring · command sandbox · path sandbox · SSRF protection
Incident response	Append-only audit log · secret redaction · credential leak detection · manual E-stop

Architecture

Terminal / Web UI / Teams
        │
   Event-driven Message Bus
        │
   Agent Loop ──── Tool Registry ──── Skills (auto-inject)
   │    │               │
   │    │          MCP Servers
   │    │
   │      Model Provider + routing
   │
   Security Pipeline (preflight → execute → postflight)

See design/core-infra.md for the full architecture spec.

Development

git clone https://github.com/gim-home/WorkPilot.git
cd WorkPilot
pip install -e ".[dev]"        # editable install with dev dependencies
# Or, for dev + Claude Code integration:
pip install -e ".[dev,all]"
pytest tests/ -v               # full test suite
python -m ruff check && python -m ruff format

Microsoft-managed frontend development: npm commands run from web/ use web/.npmrc to route through the CFS-protected feed. See the registry setup.

All changes via pull request. Never push directly to main.

Links

• Official Website
• Documentation
• Changelog
• Add to Microsoft Teams (Preview)
• Architecture docs
• Cloud Gateway (.NET)