v0.1.0-alpha · receipts, HTML verifier, and CI merge gates ship today · desktop installers still unsigned

v0.1.0-alpha · technical early adopters

Start with receipts on a real PR.

There is no signed installer yet. Build the CLI and desktop app from source, or wait for a GitHub Release tag. Homebrew tap is not up.

Build from source

Requires Rust stable (see rust-toolchain.toml), Node 20+, and pnpm 9.

git clone https://github.com/Lucastil2212/peer-weave.git
cd peer-weave/peer-weave-app
export PW_KEYCHAIN_PASSPHRASE="your-strong-passphrase"
cargo build -p peerweave-cli --release
./target/release/peerweave-cli node init

# Desktop (Tauri)
pnpm install
cd apps/desktop && pnpm tauri build

Docs also mention cargo install peerweave-cli once crates.io publishes catch up. Until then, build from this repo.

CLI surface

Full Ask still runs in the desktop app. Receipt, policy, and identity commands work once traces and a keychain exist.

  • export PW_KEYCHAIN_PASSPHRASE='…' && pw node init

    Create ~/.peerweave with an encrypted keychain

  • pw receipt ask <event_id> --output receipts/pr-123.json

    Export a signed Ask receipt

  • pw receipt html receipts/pr-123.json --output receipts/pr-123.html

    Render the offline verifier page

  • pw receipt verify receipts/pr-123.json --policy pw-policy.toml

    Check signature and team policy

  • pw mcp import session.json --output receipt.json

    Import an external MCP session

  • pw space init ./my-project

    Initialize a local-first space

GitHub Action merge gate

Verifies Ed25519 signatures, receipt hash, and unsupported-claim policy. The action can download pw for you.

# .github/workflows/receipt-gate.yml
- uses: Lucastil2212/peer-weave/.github/actions/receipt-check@main
  with:
    receipt-path: receipts/pr-123.json
    max-unsupported-claims: '0'
    fail-on-unsigned: 'true'

VS Code extension

The in-repo extension under vscode-extension/ lists receipts, verifies them with pw, and opens the HTML verifier. It is not on the Marketplace yet — load it as an unpacked extension. Requires the CLI on PATH.

Desktop packages

CI can emit unsigned macOS / Linux / Windows bundles when a version tag is pushed. Code signing and a Homebrew tap are still open (peer-846q.9). Treat artifacts as developer-preview only.

macOS · Linux · Windows — unsigned when tagged

Get notified

We email when signed installers exist — plus occasional notes on the receipt workflow.

Release notes and alpha milestones. No drip sequence.