Use this command to install Ledgerful with WinGet:
winget install --id=Ledgerful.Ledgerful -e
Ledgerful: A Local-First Command-Line Tool for Change Intelligence
Ledgerful is a local-first command-line tool designed to provide deterministic change intelligence within your development workflow. It offers essential capabilities such as impact and risk analysis, signed provenance for code changes, verification planning, and local knowledge-graph indexing. This powerful tool ensures developers can make informed decisions by understanding the implications of their code modifications.
Key Features:
Impact Analysis: Automatically assesses the potential effects of code changes on your project, helping you anticipate risks and consequences.
Provenance Tracking: Ensures every change is recorded with signed provenance, providing a transparent history of modifications.
Verification Planning: Generates deterministic verification plans to guide testing efforts, enhancing code quality and reliability.
Local Knowledge-Graph Indexing: Builds a comprehensive index of your codebase for efficient querying and analysis without relying on external services.
Target Audience and Benefits:
Ideal for developers and DevOps teams seeking deterministic insights into their code changes, Ledgerful offers:
Enhanced decision-making through clear impact assessments.
Improved code quality with structured verification plans.
Transparent change tracking, fostering trust among team members.
Install Ledgerful via winget to integrate it seamlessly into your workflow. This tool empowers you to manage code changes effectively and maintain high standards of software development.
README
Ledgerful
Ledgerful is a local-first Rust CLI for change intelligence and Gemini-assisted development. It turns repository edits into deterministic impact packets, risk summaries, hotspot rankings, targeted verification plans, and bounded Gemini context.
The tool is designed to stay local and explain its work. It does not act as an autonomous coding agent.
Ledgerful: existing ledgerful commands, hooks, and .ledgerful/ state directories keep working unchanged. New installs also provide ledgerful and the short ldg alias.
Scoop:scoop bucket add ledgerful https://github.com/Ryan-AI-Studios/scoop-bucket then scoop install ledgerful
winget:winget install Ledgerful.Ledgerful (accepted 2026-07-30; community package version may lag engine releases)
Apt and other distro packages are not planned. Manifests and release-time bump automation live under packaging/; channel details in docs/package-distribution.md.
If ledgerful --version is older than the latest published release, you may have multiple installs on PATH — see the PATH / version FAQ.
Manual install from a checkout (compiles from source):
See docs/installation.md for installer options, release assets, package managers, and agent bootstrap instructions.
Quickstart
ledgerful init
ledgerful doctor
ledgerful index
ledgerful scan
ledgerful impact
ledgerful verify
ledgerful hotspots
ledgerful ask "What should I verify next?"
Commands
init: create .ledgerful/, starter config, starter rules, and .gitignore wiring.
doctor: report platform, shell, path, and tool health.
index: parse source code to build structural, entrypoint, call-graph, data-model, observability, and semantic vector indices. Supports SCIP ingestion.
scan: summarize staged and unstaged git changes.
watch: debounce file-system events into persisted batches.
impact: generate latest-impact.json with symbols, imports, runtime usage, complexity, temporal coupling, hotspots, CI predictions, and federated impact.
verify: build and run a deterministic verification plan using structural impact, temporal coupling, CI predictions, and Bayesian failure probability ordering. Includes --explain for LLM failure rationales.
ask: send sanitized impact context to Gemini or a local LLM. Supports natural-language --semantic codebase search.
search: sub-millisecond regex search via Tantivy trigrams and ranked BM25 codebase queries.
hotspots: rank files by temporal change frequency multiplied by complexity.
surfaces (alias tour): read-only inventory of advanced surfaces (ready / empty / gated). Does not enable coverage. Engine dogfood uses committed .env.example + policies/ so schema and security can show ready after index.
mcp: run the Model Context Protocol stdio server for AI agent integration; also mcp install|uninstall|status for Top-N host config (claude-code, cursor, codex, copilot).
viz: export an interactive HTML Knowledge Graph visualization of codebase dependencies and risk heatmaps.
federate: export public interfaces, scan sibling repositories, and show live federated peers (path identity; federate scan prunes stale cache).
daemon: optional LSP server with diagnostics, Hover, CodeLens, stale-data handling, and lifecycle management.
reset: remove derived local state. Preserves ledger.db by default; use --include-ledger to remove provenance data.
demo: generate a synthetic invoice-service repo with real signed ledger entries and a SOC2 evidence export. Fully offline, ~15-30s; cleans up by default (--keep to inspect).
export evidence: export a SOC2 evidence zip from the CLI (same artifact as the dashboard button). --profile soc2 --out [--force].
timings: local-only command self-timing (which of your commands is slow, and why). See docs/self-timing.md.
Common Workflows
Generate an impact report using first-parent git history:
ledgerful impact
Include all parent traversal for merge-heavy repositories:
ledgerful impact --all-parents
Run predictive verification:
ledgerful verify
Disable prediction and use rule-only verification:
top-level mcpServers in ~/.claude.json (not projects[cwd])
cursor
user
mcpServers in ~/.cursor/mcp.json
codex
user
[mcp_servers.ledgerful] in ~/.codex/config.toml
copilot
project
top-level servers + "type":"stdio" in .vscode/mcp.json
Launcher: --launcher auto (default) prefers a PATH ledgerful binary with
args ["mcp"]; falls back to npx -y @ledgerful/mcp-server (Windows prefers
npx.cmd) with a pin-lag warning when the binary is missing. Prefer PATH over
npx when both exist — published npm may lag the engine.
Written ≠ connected: a successful install updates config files only. Hosts may
still require trust/approve prompts (Codex project trust, Claude Code approve,
VS Code MCP trust). Reload the host after install.
Bare ledgerful mcp / ledgerful mcp serve still start the stdio server.
Manual / npm wrapper (optional):
npx @ledgerful/mcp-server
The npm wrapper downloads a checksummed GitHub release binary and launches
ledgerful mcp. Set LEDGERFUL_MCP_BIN_OVERRIDE to a local binary for
development or CI smoke tests.
Use federated intelligence across sibling repositories: