Weave 0.2.0 — the 46-tool developer workbench

Weave 0.2.0 — the 46-tool developer workbench

All seven npm packages are published at 0.2.0 with source-bound provenance. Install or explicitly upgrade your local workspace:

npx joinweave@0.2.0

The persistent MCP server exposes 46 tools: 17 core workspace, node, DHT and Strand tools, capability discovery, and 28 typed tools for Locus, Lens, Forum, Gnosis, Basis and Nexus. Runtime API 2 supplies persistent model data, safe missing-store reads and exact-byte operations. Native executable and service receipt versions intentionally remain 0.1.0; inspect the API with weave capabilities --json.

Upgrades preserve the existing identity and Strand data. Existing agent-client entries change only when you explicitly select the clients to migrate. The old MCP tree remains available for existing clients. For example, reconnect only Codex and Cursor:

npx joinweave@0.2.0 --yes --mcp-client codex,cursor

Modified files and unrelated settings are preserved. Shell and client configuration require consent. Uninstall retains identity and workspace data unless --purge is explicitly requested. This release does not automatically check for or apply GitHub updates.

Support and verified scope

Node.js 20+ with npm is required; native optional dependencies must be enabled. Prebuilt executables support macOS 11+ on arm64/x64 and Linux arm64/x64 with glibc 2.39+. Linux ARM64 also requires OpenSSL 3 runtime libraries (libssl.so.3 and libcrypto.so.3). Managed Linux installation requires a working systemd --user session. Windows, musl and older glibc are unsupported.

Each of the four native targets passed 137 tests; three existing SDK tests remain ignored per target. After npm publication, actual Linux x64 fresh-install and 0.1.3-to-0.2.0 upgrade acceptance passed on 2026-10-13, including a real user service, 46-tool persistent MCP startup and model persistence, native/MCP/manager PID parity, stop/start, authenticated crash recovery, retained identity/data and uninstall retention. This installed-flow evidence applies to Linux x64; cross-platform build/test qualification is separate.

Desktop and the Cores encrypted-persistence purchase pilot are not included in this release. No Apple Developer ID signing or notarization is claimed. OpenAgentID is not linked automatically. The public repository distributes Node tooling, licenses and approved native executables; native Rust source remains private.

Integrity and source

The seven attached npm archives are byte-identical to the published registry tarballs and the frozen public source commit. manifest.json is the exact public release manifest. The attached provenance bundles are already public through npm and bind each archive to the GitHub-hosted attestation run. Use SHA256SUMS to check the attached archives, manifest and provenance files.

Quickstart · MCP reference · Upgrade and recovery