
Security News
6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hat
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.
@evolith/cli
Advanced tools
Evolith SDK CLI - Governance, standards validation, and AI agent integration for satellite repositories
Command-line interface for Evolith governance, standards validation, and AI agent integration.
npm install -g @evolith/cli
Download the latest binary from GitHub Releases and add to your PATH.
evolith --version
# evolith version 1.0.0
cd your-project
evolith init
This creates an evolith.yaml file with default configuration.
evolith validate
Output:
✓ Validating repository...
✓ Repository is compliant with Evolith standards
evolith agents install
# Select "standard" template when prompted
Validate repository compliance against Evolith standards.
evolith validate [options]
Options:
--satellite <path> Path to satellite repository (default: cwd)
--core <path> Path to Evolith Core
--format <format> Output format: json, table, yaml, markdown
--output <file> Write output to file
--ruleset <id> Validate specific ruleset (acl, open-core, inheritance)
Examples:
# Basic validation
evolith validate
# JSON output for automation
evolith validate --format json
# Table output for humans
evolith validate --format table
# Validate specific ruleset
evolith validate --ruleset acl
Manage Architecture Decision Records.
evolith adr <command>
Commands:
create Create new ADR
list List all ADRs
get Show ADR details
update Update existing ADR
matrix Show ADR matrix
Examples:
# Create new ADR
evolith adr create
# List all ADRs
evolith adr list
# Get specific ADR
evolith adr get ADR-0002
Manage governance standards.
evolith standards <command>
Commands:
init Initialize standards directory
list List all standards
get Show standard details
validate Validate against standards
export Export standard to markdown/json
Examples:
# Initialize standards
evolith standards init
# List standards
evolith standards list
Install and manage Evolith agents.
evolith agents <command>
Commands:
install Install new agent
list List installed agents
remove Remove agent
validate Validate agent ruleset
upgrade Upgrade agent
Examples:
# Interactive install
evolith agents install
# List agents
evolith agents list
View and manage command history.
evolith history [options]
Options:
--list List recent commands
--get <id> Show command details
--search <query> Search commands
--stats Show statistics
--clear Clear history
Examples:
# Show last 20 commands
evolith history
# Show statistics
evolith history --stats
# Search commands
evolith history --search validate
Generate shell completion scripts.
evolith completion --install <shell>
Supported shells: bash, zsh, fish
Examples:
# Install bash completion
evolith completion --install bash
# Install zsh completion
evolith completion --install zsh
The Evolith CLI includes an MCP server for AI agent integration.
evolith mcp serve
The server communicates via stdio JSON-RPC.
| Tool | Description |
|---|---|
evolith-validate | Validate repository compliance |
evolith-agent-install | Install new agent |
evolith-agent-list | List installed agents |
evolith-agent-validate | Validate agent ruleset |
evolith-architecture-validate | Validate architecture |
evolith-sdlc-handoff | Generate phase handoff |
evolith-sdlc-status | Show SDLC phase status |
evolith-config-get | Get configuration value |
evolith-config-set | Set configuration value |
evolith-metrics | Get MCP server metrics |
Add to ~/.cursor/mcp.json:
{
"mcpServers": {
"evolith": {
"command": "evolith",
"args": ["mcp", "serve"]
}
}
}
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"evolith": {
"command": "evolith",
"args": ["mcp", "serve"]
}
}
}
When integrated with an AI agent, you can have conversations like:
You: Validate my repository
Agent: Let me run the validation...
await mcp.callTool('evolith-validate', {
path: '/user/project',
format: 'summary'
})
Result: ✓ Repository is compliant with Evolith standards
Rules checked: 12
All gates passed
You: Show me the ADRs
Agent: Let me fetch the ADR list...
await mcp.callTool('evolith-adr-list', {})
Result: Found 5 ADRs:
- ADR-0001: Architecture Decision Record Template
- ADR-0002: Hexagonal Architecture (accepted)
- ADR-0003: Testing Pyramid (accepted)
Evolith uses an evolith.yaml file in the repository root:
coreRef:
version: "1.0.0"
path: "../evolith"
governance:
version: "1.0"
adrRegistry:
- id: "ADR-0001"
status: "accepted"
product:
name: "my-project"
type: "library"
runtime: "typescript"
All commands support multiple output formats:
# JSON (default for automation)
evolith validate --format json
# Table (human-readable)
evolith validate --format table
# YAML (pipeline integration)
evolith validate --format yaml
# Markdown (documentation)
evolith validate --format markdown
If evolith is not found after installation, ensure npm's global bin is in your PATH:
# Add to ~/.bashrc or ~/.zshrc
export PATH="$(npm config get prefix)/bin:$PATH"
Ensure the MCP server is running:
evolith mcp serve &
Check your evolith.yaml exists and is valid:
cat evolith.yaml
evolith validate --verbose
cd sdk/cli
npm install
npm run build
npm link # Link globally for testing
npm test
sdk/cli/
├── src/
│ ├── commands/ # CLI commands (adr, validate, agents, etc.)
│ ├── application/ # Use cases
│ ├── domain/ # Business logic (services, entities)
│ ├── infrastructure/# External integrations (catalog, CLI)
│ └── core/ # Shared (DI, observability, errors, MCP)
├── shell/ # Shell completion scripts
├── templates/ # Configuration templates
└── docs/ # Documentation
ISC
FAQs
Evolith Smart CLI - Governance, standards validation, and AI agent integration for satellite repositories
The npm package @evolith/cli receives a total of 0 weekly downloads. As such, @evolith/cli popularity was classified as not popular.
We found that @evolith/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.

Research
/Security News
Thirteen malicious Packagist themes expose visitors on unpatched iPhones to a WebKit-to-kernel exploit chain that steals device data and wallet seeds.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.