The package manager for AI agent configuration
Define AI agent configuration once. Render it for every tool.
Author instructions, skills, hooks and MCP configs as versioned packages. Pin them to each repository, and Workloom renders the files each AI coding tool reads, holds risky assets for approval, and tells you when disk drifts from the desired state.
package @acme/base-instructions@2.1.0
- claudeCLAUDE.mdpassive_text · automatic
- claude.claude/skills/review/SKILL.mdpassive_text · automatic
- claude.claude/hooks/pre-commit.shexecutable_hook · needs approval
- codexAGENTS.mdpassive_text · automatic
- codex.codex/config.tomltool_permission · needs approval
Sample data · 1 package · 2 providers · 5 files · 2 held for approval
One source, every provider, nothing silent
- 01
Canonical packages
Versioned, immutable, organization-scoped bundles of AI configuration assets.
- 02
Provider-aware rendering
One package renders into each provider’s native files, the same way every time.
- 03
Trust gates
Hooks, MCP servers and tool permissions need approval before they touch disk.
- 04
Drift detection
Know when files on disk diverge from the desired state, and fail CI on it.
- 05
Monorepo targets
Each target in a workspace gets its own path, providers and packages.
- 06
Home workspaces and stacks
Share AI agent config across every project from your home directory.
- 07
Content scans and AI findings
A deterministic scan gates promotion; AI analysis only advises.
- 08
Organization governance
Roles, service accounts, API tokens, webhooks and an audit log per organization.
- 09
Metadata-only telemetry
Operational metadata only, with forbidden fields rejected by the schema.
From a package to files on disk
- Step 1
Define
Author a canonical package of instructions, skills, hooks and configs, then `wl push` it to the registry as a draft package version.
- Step 2
Review and promote
The content scan runs on the new version. Once it passes, `wl publish` moves the draft to pending_review, and an approver promotes it.
- Step 3
Assign
Create a workspace for a repository that pins package versions per target and provider, then `wl bind --registry <workspaceId>` connects a working directory to it.
- Step 4
Render
`wl pull` resolves the packages, renders each provider’s files from the render plan, and writes the lock file and state file under .loom/.
Stop copy-pasting AI config between repos
Put your instructions, skills and hooks in one registry, pin them per repository, and let CI tell you when anything drifts.