Skip to main content
Loss of provenance

A previous release had provenance metadata, but this release does not. View details.

Pre-release

This release is a pre-release and may not be stable for production use.

Workweaver

License: AGPL-3.0-or-later

Workweaver turns a goal you state in plain language into finished work, with a receipt for every decision.

ww is the Alpha CLI for that product (Python 3.10+). It remains the generic edge harness for Workweaver. One install covers knowledge work, coding, WorkMemory, and bidirectional ACP — the same pipe, not four products.

Install

python -m pip install workweaver

On Windows, use the Python launcher:

py -m pip install workweaver

The same wheel exposes ww, workweaver, and python -m workweaver. Requires Python 3.10 or newer (the requires-python floor in pyproject.toml).

If the ww script is not on PATH, run the module form:

python -m workweaver --help

pipx install workweaver is optional when you want an isolated CLI environment. Repo-local install (python -m pip install -e . from the repo root) still works for active development.

The edge harness

ww is the local command surface:

  • Knowledge — goals, missions, skills, evidence, and receipts from the edge.
  • Coding — local execution legs for governed coding work.
  • WorkMemory — remember, recall, and forget through the same pipe as the rest of the harness. Writes queue locally when the API is unreachable and replay on sync.
  • Bidirectional ACP — ww acp start serves Workweaver to editors and other agents; ww acp invoke drives invited agents. Workweaver is both component and orchestrator.

WorkMemory is not a second install or a second product. It rides the same ww pipe.

Start

ww login
ww memory recall "what did we decide last week"
ww acp start

ww login opens the Workweaver sign-in flow and works for both sign-in and sign-up. CLI session metadata and bearer tokens are saved in ~/.workweaver/config.yaml with file mode 0600 by default; the CLI does not touch the OS keyring unless an operator explicitly sets WW_ALLOW_KEYRING=1 and installs the optional keyring extra.

Self-host and first-run deployment paths live in docs/SELF-HOST.md, including the prerequisites matrix that states what pip install covers and what each self-host topology still needs. They are not the primary listing story.

Package

Live listing: https://pypi.org/project/workweaver/.

Releases are cut by tag through .github/workflows/release-pypi.yml using PyPI Trusted Publishing (OIDC). No API tokens live in the repo. Tags matching pyproject.toml pre-release versions (e.g. v0.1.0a1) publish to TestPyPI; final versions publish to PyPI.

Release operators use the guarded repo targets instead of hand-rolling tags:

VERSION=0.1.13 make release-python-prepare
VERSION=0.1.13 make release-python-check
VERSION=0.1.13 make release-python-tag
VERSION=0.1.13 make release-python-smoke-public

Validate a prerelease against TestPyPI:

python -m pip install --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple/ workweaver

Then verify the installed CLI contract:

ww --version
ww memory --help
ww acp --help

Repository checks

Contributors validate infra cost posture with make cost-guard (offline fixed-floor register and Terraform resource review, also part of make check-meta); the contract it enforces lives in ops/cost/profile-cost-ceilings.json.

Canonical architecture and product truth live in:

  • policy/docs-index.yaml
  • docs/canonical/RUNTIME.md
  • docs/canonical/PRODUCT.md
  • docs/canonical/CLI.md
  • docs/reference/runtime/acp-contracts.md

Repository development

Development targets are defined in the repository Makefile. The structural fixed-floor cost guard is enforced in CI and locally with make cost-guard.

Metadata

Release files for workweaver 0.1.13.dev19

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Loss of provenance

These files do not have provenance metadata, despite files in a prior release including this data.

We recommend further investigation before installing these files. View details.

Source distribution (sdist)

Source distribution for workweaver 0.1.13.dev19
File Size Uploaded Provenance Actions
workweaver-0.1.13.dev19.tar.gz 29.4 MB Without provenance Details for workweaver-0.1.13.dev19.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for workweaver 0.1.13.dev19
File Interpreter ABI Platform Actions
workweaver-0.1.13.dev19-py3-none-any.whl Python 3 none any Details for workweaver-0.1.13.dev19-py3-none-any.whl

Total release size: 53.1 MB

Release files / workweaver-0.1.13.dev19.tar.gz

Loss of provenance

This file belongs to a release without provenance metadata, despite a prior release including this data.

We recommend further investigation before installing this file. View details.

Download URL workweaver-0.1.13.dev19.tar.gz
Size 29.4 MB
Tags Source
SHA-256 checksum
How to use checksums
72c9385c35abc895fbb94992e9f42e1acfedafae9a745267833bc289c1df3ac6
BLAKE2b-256 checksum
How to use checksums
d16844f11ddfca5916d10719d0432a23aab24c1e3e44aa0ca94b2a4037d7aad4
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.14.6

Release files / workweaver-0.1.13.dev19-py3-none-any.whl

Loss of provenance

This file belongs to a release without provenance metadata, despite a prior release including this data.

We recommend further investigation before installing this file. View details.

Download URL workweaver-0.1.13.dev19-py3-none-any.whl
Size 23.7 MB
Tags Python 3
SHA-256 checksum
How to use checksums
581cef169abf36d3f2ae29ac1d821220ef9bfe05557988f49d393824fc0ff70a
BLAKE2b-256 checksum
How to use checksums
9410bd4b5411de10bef46b3431acfea4de8b1fb7cf5e46bf7c97ec091c5a42dc
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.14.6

Security for workweaver 0.1.13.dev19

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Loss of provenance

A previous release of these files had provenance metadata, but this release does not.

While this could reflect a routine change by the project maintainers, it may also indicate that the release files have been compromised.

Release comparison

  • Removed 0.1.13 2 files With provenance
  • Added 0.1.13.dev19 2 files Without provenance

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page