Documentation: https://lkimuk.github.io/Wuwe/

Wuwe

Wuwe is a C++20 framework for building tool-using, stateful, and auditable AI agents in native applications, services, and command-line programs.

It provides independently usable modules for model access, resource-aware routing, typed tools, reusable Skills, reasoning with Best-of-N selection, reflection, planning, multi-agent collaboration, A2A, typed fan-out/fan-in orchestration, memory, retrieval-augmented generation, guardrails, evaluation, offline learning and adaptation, controlled exploration and discovery, MCP, networking, policy, approvals, audit, observability, and controlled execution.

Release support

Version 1.0.0 is verified on:

The codebase is kept portable, but macOS is not part of the 1.0.0 certification matrix. The default controlled_process backend is cross-platform; the opt-in restricted_process backend is available only on Windows in this release.

Wuwe 1.x follows semantic versioning for its documented public C++ source API.
Consumers should rebuild when upgrading the SDK; cross-release C++ ABI compatibility
is not promised. See Versioning and compatibility, the
1.0 migration guide, and CHANGELOG.md.

Capabilities

The complete module map and release boundaries are in the documentation overview.

Build

Requirements:

• CMake 3.25 or newer for the included presets
• Git
• a C++20 compiler
• vcpkg referenced through VCPKG_ROOT

Windows:

$env:VCPKG_ROOT = "D:\tools\vcpkg"

cmake --preset windows-vcpkg
cmake --build --preset windows-vcpkg-release
ctest --preset windows-vcpkg-release

Linux:

export VCPKG_ROOT="$HOME/vcpkg"

cmake --preset linux-vcpkg
cmake --build --preset linux-vcpkg-release
ctest --preset linux-vcpkg-release

The official Windows profile uses Schannel and SQLite. The Linux profile uses OpenSSL and SQLite. Dependencies are restored from the pinned vcpkg manifest into the build tree.

Hardening builds are opt-in and must use a separate build directory. Enable
WUWE_ENABLE_ADDRESS_SANITIZER for AddressSanitizer (plus UndefinedBehaviorSanitizer
on supported Clang/GCC toolchains), or WUWE_ENABLE_THREAD_SANITIZER for
ThreadSanitizer on supported Clang/GCC toolchains. The two modes are intentionally
mutually exclusive. Concurrency-sensitive tests carry the concurrency CTest label:

cmake -S . -B build-asan -DWUWE_ENABLE_ADDRESS_SANITIZER=ON
cmake --build build-asan
ctest --test-dir build-asan --output-on-failure

cmake -S . -B build-tsan -DWUWE_ENABLE_THREAD_SANITIZER=ON
cmake --build build-tsan
ctest --test-dir build-tsan -L concurrency --repeat until-fail:20 --output-on-failure

See Getting started and Dependencies.

For reusable agent behavior, see Skills. Skills assemble declared
instructions and requirements without executing scripts, granting capabilities, or
bypassing Tool Contract, approval, and audit boundaries.

Minimal client

#include <iostream>
#include <wuwe/wuwe.h>

int main() {
  wuwe::llm_config config {
    .model = "gpt-4.1-mini",
  };

  auto client = wuwe::make_llm_client("OpenAI", config);
  const auto response = client->complete("Explain RAII in one paragraph.");

  if (!response) {
    std::cerr << response.error_code.message() << '\n';
    return 1;
  }

  std::cout << response.content << '\n';
}

Set OPENAI_API_KEY before running the program. Other built-in providers use the same llm_client interface.

Consume an installed SDK

cmake_minimum_required(VERSION 3.20)
project(my_agent LANGUAGES CXX)

set(CMAKE_CXX_STANDARD 20)
set(CMAKE_CXX_STANDARD_REQUIRED ON)

find_package(wuwe 1 CONFIG REQUIRED)

add_executable(my_agent main.cpp)
target_link_libraries(my_agent PRIVATE wuwe::wuwe)

Add the Wuwe installation prefix to CMAKE_PREFIX_PATH when needed. The exported package requests the public dependencies enabled in that build.

Package

After building and testing:

.\tools\package-wuwe.ps1 -BuildDir build-vcpkg -Configuration Release

bash ./tools/package-wuwe.sh --build-dir build-linux-vcpkg --configuration Release

Each archive contains the static SDK, CMake package files, examples, docs, manifest.json, checksums, Apache Tika, and a platform-matched Temurin 21 JRE. SQLite and OpenSSL remain public link dependencies when enabled.

See Packaging.

Production boundaries

• controlled_process is a bounded subprocess backend, not a strong sandbox.
• SQLite is intended for local persistence. The SQLite knowledge index uses a C++ linear scan, not ANN search.
• Qdrant and other remote indexes are external services managed by the host.
• The host owns identity, secrets, user consent, approvals, retention, and deployment policy.
• Inspect package metadata and backend enforcement contracts instead of inferring capabilities.

License

Wuwe is distributed under the terms in LICENSE.