
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
weasley-frame
Advanced tools
Open-source live-web research workspace that turns a prompt into a verifiable, refreshable dataset.
Turn a plain-language research question into a sourced, refreshable dataset.

Weasley Frame coordinates search, extraction, schema inference, source verification, deduplication, and scheduled refreshes in one local-first workspace. Describe the table you need; the agents discover entities, investigate them in parallel, and produce rows you can inspect or export as CSV/XLSX.
browser
│
▼
Next.js 16 ─────── Convex functions + data
│ │
└──────── Fastify API ────┘
│
Mastra agents
│
TinyFish + OpenRouter
The frontend never owns server-side authentication logic. Browser requests are
proxied to the Fastify backend, while Convex owns the application data and
functions. See AGENTS.md for repository-specific development constraints.
Prerequisites:
Install the launcher and verify the machine:
npm install --global weasley-frame
weasley-frame doctor
Install the managed source checkout and start the local stack:
weasley-frame install
weasley-frame start
The app opens at http://localhost:3500. The launcher
stores its checkout under ~/.weasley/frame by default. Override it with
WEASLEY_FRAME_HOME.
For a one-off installation:
npx weasley-frame doctor
npx weasley-frame install
| Command | Purpose |
|---|---|
weasley-frame doctor | Check Node, Git, Docker, Compose, and Make |
weasley-frame install | Clone a shallow managed checkout |
weasley-frame update | Fast-forward a clean managed checkout |
weasley-frame start | Start or recover the complete local stack |
weasley-frame stop | Stop containers while preserving data |
weasley-frame path | Print the managed checkout path |
The updater refuses to touch a modified checkout, so local work is never silently overwritten.
git clone https://github.com/potatohoney-p/weasley-frame.git
cd weasley-frame
make dev
make dev installs frontend and backend dependencies, starts PostgreSQL and
self-hosted Convex, deploys the Convex functions, starts the local keychain
bridge, then starts the frontend, backend, and Mastra Studio.
| Service | Local URL |
|---|---|
| Weasley Frame | http://localhost:3500 |
| Fastify backend | http://localhost:3501 |
| Convex | http://localhost:3210 |
| Convex dashboard | http://localhost:6791 |
| Mastra Studio | http://localhost:4111 |
Common commands:
make dev # start or repair the stack
make convex-push # deploy changes under frontend/convex
make seed-public-datasets
make down # stop without deleting data
npm test # launcher regression tests
npm run build # backend + frontend production builds
The local setup screen stores credentials in your OS keychain.
| Variable | Required | Purpose |
|---|---|---|
TINYFISH_API_KEY | Yes | Web search and page retrieval |
OPENROUTER_API_KEY | Yes | Model routing for schema and research agents |
RESEND_API_KEY | No | Dataset-ready email notifications |
NEXT_PUBLIC_POSTHOG_KEY | No | Opt-in product analytics |
Create keys at TinyFish and OpenRouter. Weasley Frame is independent open-source software; provider names and marks remain the property of their respective owners.
Do not commit .env files or credentials. Local API keys are never written into
the repository.
weasley-frame/
├── bin/ npm launcher
├── frontend/ Next.js UI + Convex functions
├── backend/ Fastify API + Mastra workflows
├── db/ local PostgreSQL bootstrap
├── scripts/ release and authorization checks
├── tests/ launcher regression tests
└── docker-compose.dev.yml
127.0.0.1 and requires a generated token.SECURITY.md.Issues and pull requests are welcome. Before opening a PR:
npm test
npm run build
bash scripts/verify-authz.sh # requires the local stack
Please read CONTRIBUTING.md, keep credentials out of commits, and update docs
when a command, environment variable, or architecture boundary changes.
Copyright 2026 Weasley Contributors. Released under the Apache License 2.0. Third-party dependencies retain their own licenses.
FAQs
Open-source live-web research workspace that turns a prompt into a verifiable, refreshable dataset.
We found that weasley-frame demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.