🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@illodev/workfile

Package Overview
Dependencies
Maintainers
1
Versions
24
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@illodev/workfile

Repository-native protocol and local MCP server for Work, Docs, History and durable project Memory.

latest
Source
npmnpm
Version
0.9.0
Version published
Maintainers
1
Created
Source

@illodev/workfile

Repository-native protocol and local MCP server for Work, Docs, History and durable project Memory — everything lives as Markdown with restricted frontmatter inside your repository, owned by git, readable without any tool.

This package ships the complete surface: the workfile CLI, the programmatic core, a local HTTP API, a precompiled web interface and an MCP server for agents. It depends on nothing but @types/node; installing it adds no runtime tree to your project.

npm install -D @illodev/workfile     # or pnpm add -D / yarn add -D / bun add -d
npx workfile init
npx workfile ui                      # local interface
npx workfile mcp                     # MCP server (stdio)

What you get

  • Work — cards (T-NNNN) with statuses, areas, claims with actor and scope, hierarchy and archival. Sequential IDs heal deterministically after parallel-clone collisions (workfile card renumber --duplicates).
  • Docs — indexed read-only documents from your existing Markdown plus managed documents with stable IDs and review intervals.
  • History — changelog fragments merged into releases; the rendered changelog is derived, never hand-edited.
  • Memory — learnings, decisions, incidents, conventions and context as typed collections agents can query before repeating a mistake.
  • Agents — one canonical protocol synchronized into AGENTS.md, CLAUDE.md, Cursor and Copilot as compact managed blocks; workfile agents context --card T-0001 returns a bounded context bundle.
  • Doctorworkfile doctor validates the whole workspace and exits non-zero on errors, which makes it a natural CI and pre-commit gate.
  • Search — one query grammar across CLI, HTTP, MCP and UI; hybrid semantic ranking activates only when the repository explicitly declares a provider such as @illodev/workfile-search-local.

Workfile never sends repository content to a network service by itself.

As an MCP server

Point a client at it without installing anything. This is the invocation the official registry publishes for io.github.illodev/workfile:

{
  "mcpServers": {
    "workfile": {
      "command": "npx",
      "args": ["-y", "@illodev/workfile", "mcp"]
    }
  }
}

mcp is a subcommand, not a binary. Append --root PATH when the client starts somewhere other than the workspace, and --read-only to serve the read tools alone.

What it is not

Workfile is not an agent configurator. It does not install agents, ship a persona, route models or curate skills — tools like gentle-ai do that, and the two compose, because a well-configured agent still needs somewhere durable to write down what it did. Workfile answers what was done, who holds it and on what evidence, in files that outlive the agent, the session and this package. The boundaries section of the repository README makes the distinction concrete.

Documentation

Shipped inside this package under docs/:

  • Getting started — install, initialize, first loop.
  • CLI reference — every command, the query grammar, exit codes.
  • MCP server — tools, resources, prompts, the Claude Code plugin.
  • HTTP API — endpoints, conventions, stable error codes.
  • Interface — the local UI and the static demo build.
  • Security — threat model of the local server.
  • Specification — the normative protocol contract.

Repository

Part of the illodev/workfile monorepo — a pnpm workspace whose private root carries the version every published package ships with, in lockstep. The project develops itself with its own protocol: the cards, changelog and memory of this package's development live in the repository's .project/ directory.

License

MIT

Keywords

project-management

FAQs

Package last updated on 08 Aug 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts