A previous release had provenance metadata, but this release does not. View details.
This release is a pre-release and may not be stable for production use.
Workweaver
Workweaver turns a goal you state in plain language into finished work, with a receipt for every decision.
ww is the Alpha CLI for that product (Python 3.10+). It remains the
generic edge harness for Workweaver. One install covers knowledge work,
coding, WorkMemory, and bidirectional ACP — the same pipe, not four
products.
Install
python -m pip install workweaver
On Windows, use the Python launcher:
py -m pip install workweaver
The same wheel exposes ww, workweaver, and python -m workweaver.
Requires Python 3.10 or newer (the requires-python floor in
pyproject.toml).
If the ww script is not on PATH, run the module form:
python -m workweaver --help
pipx install workweaver is optional when you want an isolated CLI
environment. Repo-local install (python -m pip install -e . from the
repo root) still works for active development.
The edge harness
ww is the local command surface:
- Knowledge — goals, missions, skills, evidence, and receipts from the edge.
- Coding — local execution legs for governed coding work.
- WorkMemory — remember, recall, and forget through the same pipe as the rest of the harness. Writes queue locally when the API is unreachable and replay on sync.
- Bidirectional ACP —
ww acp startserves Workweaver to editors and other agents;ww acp invokedrives invited agents. Workweaver is both component and orchestrator.
WorkMemory is not a second install or a second product. It rides the
same ww pipe.
Start
ww login
ww memory recall "what did we decide last week"
ww acp start
ww login opens the Workweaver sign-in flow and works for both sign-in
and sign-up. CLI session metadata and bearer tokens are saved in
~/.workweaver/config.yaml with file mode 0600 by default; the CLI
does not touch the OS keyring unless an operator explicitly sets
WW_ALLOW_KEYRING=1 and installs the optional keyring extra.
Self-host and first-run deployment paths live in
docs/SELF-HOST.md, including the
prerequisites matrix that states what pip install covers and what each
self-host topology still needs. They are not the primary listing story.
Package
Live listing: https://pypi.org/project/workweaver/.
Releases are cut by tag through .github/workflows/release-pypi.yml
using PyPI Trusted Publishing (OIDC). No API tokens live in the repo.
Tags matching pyproject.toml pre-release versions (e.g. v0.1.0a1)
publish to TestPyPI; final versions publish to PyPI.
Release operators use the guarded repo targets instead of hand-rolling tags:
VERSION=0.1.13 make release-python-prepare
VERSION=0.1.13 make release-python-check
VERSION=0.1.13 make release-python-tag
VERSION=0.1.13 make release-python-smoke-public
Validate a prerelease against TestPyPI:
python -m pip install --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple/ workweaver
Then verify the installed CLI contract:
ww --version
ww memory --help
ww acp --help
Repository checks
Contributors validate infra cost posture with make cost-guard (offline
fixed-floor register and Terraform resource review, also part of
make check-meta); the contract it enforces lives in
ops/cost/profile-cost-ceilings.json.
Canonical architecture and product truth live in:
policy/docs-index.yamldocs/canonical/RUNTIME.mddocs/canonical/PRODUCT.mddocs/canonical/CLI.mddocs/reference/runtime/acp-contracts.md
Repository development
Development targets are defined in the repository Makefile. The structural
fixed-floor cost guard is enforced in CI and locally with make cost-guard.
Metadata
Release files for workweaver 0.1.13.dev19
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Loss of provenance
These files do not have provenance metadata, despite files in a prior release including this data.
We recommend further investigation before installing these files. View details.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| workweaver-0.1.13.dev19.tar.gz | 29.4 MB | Without provenance | Details for workweaver-0.1.13.dev19.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| workweaver-0.1.13.dev19-py3-none-any.whl | Python 3 | none | any | Details for workweaver-0.1.13.dev19-py3-none-any.whl |
Total release size: 53.1 MB
Release files / workweaver-0.1.13.dev19.tar.gz
Loss of provenance
This file belongs to a release without provenance metadata, despite a prior release including this data.
We recommend further investigation before installing this file. View details.
| Download URL | workweaver-0.1.13.dev19.tar.gz |
|---|---|
| Size | 29.4 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
72c9385c35abc895fbb94992e9f42e1acfedafae9a745267833bc289c1df3ac6
|
|
BLAKE2b-256 checksum How to use checksums |
d16844f11ddfca5916d10719d0432a23aab24c1e3e44aa0ca94b2a4037d7aad4
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.14.6
|
Release files / workweaver-0.1.13.dev19-py3-none-any.whl
Loss of provenance
This file belongs to a release without provenance metadata, despite a prior release including this data.
We recommend further investigation before installing this file. View details.
| Download URL | workweaver-0.1.13.dev19-py3-none-any.whl |
|---|---|
| Size | 23.7 MB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
581cef169abf36d3f2ae29ac1d821220ef9bfe05557988f49d393824fc0ff70a
|
|
BLAKE2b-256 checksum How to use checksums |
9410bd4b5411de10bef46b3431acfea4de8b1fb7cf5e46bf7c97ec091c5a42dc
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.14.6
|
Security for workweaver 0.1.13.dev19
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Loss of provenance
A previous release of these files had provenance metadata, but this release does not.
While this could reflect a routine change by the project maintainers, it may also indicate that the release files have been compromised.
Release comparison
- Removed 0.1.13 2 files With provenance
- Added 0.1.13.dev19 2 files Without provenance
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.