
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@evolith/cli
Advanced tools
Evolith SDK CLI - Governance, standards validation, and AI agent integration for satellite repositories
Command-line interface for Evolith governance, standards validation, and AI agent integration.
npm install -g @evolith/cli
Download the latest binary from GitHub Releases and add to your PATH.
evolith --version
# evolith version 1.0.0
cd your-project
evolith init
This creates an evolith.yaml file with default configuration.
evolith validate
Output:
✓ Validating repository...
✓ Repository is compliant with Evolith standards
evolith agents install
# Select "standard" template when prompted
Validate repository compliance against Evolith standards.
evolith validate [options]
Options:
--satellite <path> Path to satellite repository (default: cwd)
--core <path> Path to Evolith Core
--format <format> Output format: json, table, yaml, markdown
--output <file> Write output to file
--ruleset <id> Validate specific ruleset (acl, open-core, inheritance)
Examples:
# Basic validation
evolith validate
# JSON output for automation
evolith validate --format json
# Table output for humans
evolith validate --format table
# Validate specific ruleset
evolith validate --ruleset acl
Manage Architecture Decision Records.
evolith adr <command>
Commands:
create Create new ADR
list List all ADRs
get Show ADR details
update Update existing ADR
matrix Show ADR matrix
Examples:
# Create new ADR
evolith adr create
# List all ADRs
evolith adr list
# Get specific ADR
evolith adr get ADR-0002
Manage governance standards.
evolith standards <command>
Commands:
init Initialize standards directory
list List all standards
get Show standard details
validate Validate against standards
export Export standard to markdown/json
Examples:
# Initialize standards
evolith standards init
# List standards
evolith standards list
Install and manage Evolith agents.
evolith agents <command>
Commands:
install Install new agent
list List installed agents
remove Remove agent
validate Validate agent ruleset
upgrade Upgrade agent
Examples:
# Interactive install
evolith agents install
# List agents
evolith agents list
View and manage command history.
evolith history [options]
Options:
--list List recent commands
--get <id> Show command details
--search <query> Search commands
--stats Show statistics
--clear Clear history
Examples:
# Show last 20 commands
evolith history
# Show statistics
evolith history --stats
# Search commands
evolith history --search validate
Generate shell completion scripts.
evolith completion --install <shell>
Supported shells: bash, zsh, fish
Examples:
# Install bash completion
evolith completion --install bash
# Install zsh completion
evolith completion --install zsh
The Evolith CLI includes an MCP server for AI agent integration.
evolith mcp serve
The server communicates via stdio JSON-RPC.
| Tool | Description |
|---|---|
evolith-validate | Validate repository compliance |
evolith-agent-install | Install new agent |
evolith-agent-list | List installed agents |
evolith-agent-validate | Validate agent ruleset |
evolith-architecture-validate | Validate architecture |
evolith-sdlc-handoff | Generate phase handoff |
evolith-sdlc-status | Show SDLC phase status |
evolith-config-get | Get configuration value |
evolith-config-set | Set configuration value |
evolith-metrics | Get MCP server metrics |
Add to ~/.cursor/mcp.json:
{
"mcpServers": {
"evolith": {
"command": "evolith",
"args": ["mcp", "serve"]
}
}
}
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"evolith": {
"command": "evolith",
"args": ["mcp", "serve"]
}
}
}
When integrated with an AI agent, you can have conversations like:
You: Validate my repository
Agent: Let me run the validation...
await mcp.callTool('evolith-validate', {
path: '/user/project',
format: 'summary'
})
Result: ✓ Repository is compliant with Evolith standards
Rules checked: 12
All gates passed
You: Show me the ADRs
Agent: Let me fetch the ADR list...
await mcp.callTool('evolith-adr-list', {})
Result: Found 5 ADRs:
- ADR-0001: Architecture Decision Record Template
- ADR-0002: Hexagonal Architecture (accepted)
- ADR-0003: Testing Pyramid (accepted)
Evolith uses an evolith.yaml file in the repository root:
coreRef:
version: "1.0.0"
path: "../evolith"
governance:
version: "1.0"
adrRegistry:
- id: "ADR-0001"
status: "accepted"
product:
name: "my-project"
type: "library"
runtime: "typescript"
All commands support multiple output formats:
# JSON (default for automation)
evolith validate --format json
# Table (human-readable)
evolith validate --format table
# YAML (pipeline integration)
evolith validate --format yaml
# Markdown (documentation)
evolith validate --format markdown
If evolith is not found after installation, ensure npm's global bin is in your PATH:
# Add to ~/.bashrc or ~/.zshrc
export PATH="$(npm config get prefix)/bin:$PATH"
Ensure the MCP server is running:
evolith mcp serve &
Check your evolith.yaml exists and is valid:
cat evolith.yaml
evolith validate --verbose
cd sdk/cli
npm install
npm run build
npm link # Link globally for testing
npm test
sdk/cli/
├── src/
│ ├── commands/ # CLI commands (adr, validate, agents, etc.)
│ ├── application/ # Use cases
│ ├── domain/ # Business logic (services, entities)
│ ├── infrastructure/# External integrations (catalog, CLI)
│ └── core/ # Shared (DI, observability, errors, MCP)
├── shell/ # Shell completion scripts
├── templates/ # Configuration templates
└── docs/ # Documentation
ISC
FAQs
Evolith Smart CLI - Governance, standards validation, and AI agent integration for satellite repositories
The npm package @evolith/cli receives a total of 0 weekly downloads. As such, @evolith/cli popularity was classified as not popular.
We found that @evolith/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.