Python-first Coding Agent API and CLI.
Project description
sagent🪄
Typed Python library and CLI for multi-provider, multi-agent LLM applications.
Tutorial · Concepts · Providers · Tools · CLI · Sessions · Security · Architecture · API · Streaming · Compaction · Slack · Examples
from sagent import tools
from sagent.agent import Agent
from sagent.lib.json import json_freeze
from sagent.providers import Google
agent = Agent(
model=Google.from_env().model("gemini-2.5-flash"),
system="You are a scientist.",
tools=[tools.Read(), tools.Glob(), tools.Grep()],
)
result = await agent.run(json_freeze({"prompt": "analyze the CSV in ./data/"}))
print(result.content)
Why sagent exists
Most serious coding agents are CLIs, editor extensions, hosted assistants, or non-Python runtimes. Sagent gives you the agent runtime as typed Python objects you can import, compose, test, and embed. The CLI is one entry point over the library, not the center of the design.
Use Sagent when you want:
- a Python API first and a CLI second;
- provider swapping without changing the agent loop;
- custom tools as normal Python objects;
- session persistence and compaction;
- child agents and peer messaging for review, delegation, and map-reduce work.
Three pieces make Sagent distinctive:
- Hot-swappable providers. The same agent, tools, session, and compactor can run against Anthropic, OpenAI, Google, Moonshot, DashScope, MiniMax, or an OpenAI-compatible endpoint.
- Multi-agent primitives.
AgentSelf,AgentSpawn, andAgentSendlet agents inspect themselves, spawn isolated children, and send messages to named peers. - Typed runtime objects.
Agent,Tool,Message,Model, andProviderare Python protocols and dataclasses that can be used directly from application code.
What sagent does
- Runs agents against Anthropic, OpenAI, Google, Moonshot, DashScope, MiniMax, and OpenAI-compatible endpoints.
- Exposes tools for local files, shell commands, web access, paper search, and agent coordination.
- Keeps the same
Agentbehind CLI, Slack, parent agents, and application code. - Represents provider responses, tool calls, tool results, and user messages as typed
Messageobjects. - Lets agents call
AgentSelf,AgentSpawn, andAgentSendas ordinary tools.
Install
pip install sagent
Sagent requires Python 3.12.
Quickstart: CLI
export GOOGLE_API_KEY=...
sagent --provider Google --model gemini-2.5-flash
For non-interactive use, pipe a prompt on stdin:
printf 'Say hi in one sentence.' | \
sagent --provider Google --model gemini-2.5-flash \
--output-format json
Use --continue to resume the most recent session for this working directory, --session PATH for an explicit session directory, or --no-session-persistence when prompts and auto-memory should not be written to disk. Use --max-budget-usd N to cap API spend for the current run.
Quickstart: Python
import asyncio
from sagent import tools
from sagent.agent import Agent
from sagent.lib.json import json_freeze
from sagent.providers import Anthropic
async def main() -> None:
agent = Agent(
model=Anthropic.from_env().model("claude-sonnet-4-6"),
system="You are a concise coding assistant.",
tools=[tools.Read(), tools.Grep(), tools.Glob()],
)
result = await agent.run(json_freeze({"prompt": "Summarize README.md"}))
print(result.content)
asyncio.run(main())
Agent.run() accepts a JSON directive with a prompt key and returns a Message.
Provider setup
Sagent ships API-key providers for Anthropic, OpenAI, Google, Moonshot, DashScope, MiniMax, and generic OpenAI-compatible endpoints. Set the key for the provider you plan to use:
export ANTHROPIC_API_KEY=...
export OPENAI_API_KEY=...
export GOOGLE_API_KEY=...
export MOONSHOT_API_KEY=...
export DASHSCOPE_API_KEY=...
export MINIMAX_API_KEY=...
| Provider | Environment variable | Example model |
|---|---|---|
Anthropic |
ANTHROPIC_API_KEY |
claude-sonnet-4-6 |
OpenAI |
OPENAI_API_KEY |
gpt-4o |
Google |
GOOGLE_API_KEY |
gemini-2.5-flash |
Moonshot |
MOONSHOT_API_KEY |
kimi-k2-0905-preview |
DashScope |
DASHSCOPE_API_KEY |
qwen3-235b-a22b-instruct-2507 |
MiniMax |
MINIMAX_API_KEY |
MiniMax-M1 |
See Providers for more detail.
Examples
The examples/ directory contains small, runnable examples:
offline_custom_tool.py: run an agent/tool/model loop without API keys.decorator_tool.py: wrap a function as a tool.custom_tool.py: implement the fullToolprotocol.multi_agent_reviewer.py: spawn an isolated reviewer child.openai_compatible_provider.py: connect an OpenAI-compatible endpoint.
Start with the tutorial, then use the examples as copyable patterns.
Concepts
Sagent has five core contracts: Message, Tool, Model, Provider, and Agent.
Messageis the typed payload that crosses providers, tools, sessions, compaction, and UI surfaces.Toolreceives a JSON directive in a message and returns a message.Modelis the backend request/response interface.Providerowns authentication and constructs models.Agentowns the loop, model, tools, inbox, session, and compactor.
TextMessage is intentionally central: it is the common communication interface across the runtime.
See Concepts and Architecture.
Inbox zero
Most agent frameworks are turn-based: user sends a message, agent processes it, agent responds, repeat. Sagent instead uses a drain-run-check loop:
while True:
drain inbox into user messages
call model
if tool calls exist: dispatch tools and loop
if inbox is empty and model is done: go idle
The agent goes idle only when the inbox is empty and the model has nothing left to do. It wakes when anything lands in the inbox.
Every surface - REPL, Slack, CLI, parent agent, or application code - puts messages in the same inbox. User input, background task results, and agent-to-agent messages use the same mechanism instead of separate plumbing. User messages go to the front; background and peer messages append at the back.
Context-affecting slash commands follow the same rule. /clear is
queued and interpreted at the agent's single inbox drain point. Surface
local commands that do not mutate model context, such as /model, may
be handled by the REPL before entering the inbox.
Message: typed payloads plus graph edges
Sagent messages use MIME-style descriptors for heterogeneous payloads,
plus ids and parent ids for graph structure. The public Message union
contains TextMessage, BytesMessage, JsonMessage, and
MultipartMessage.
MultipartMessage content is recursive: compound messages hold nested
messages. An assistant turn containing text, thinking, and tool calls
uses the same message graph as a single text chunk. Descriptors such as
text/plain, multipart/x-tool-call, and application/x-done tell
callers how to interpret the payload.
Tool: one input message, one output message
Tools are normal Python objects with a small protocol:
class Tool(Protocol):
name: str
tool_id: str
description: str
directive_schema: JSON
supports_microcompaction: bool
def summary(self, msg: Message) -> str: ...
def prompt(self) -> str | None: ...
async def run(self, msg: Message) -> Message: ...
Input is a Message with a JSON directive. Output is a Message.
Expected tool failures return descriptor="text/x-error" rather than
raising through the agent loop.
Agent follows the same interface pattern as a tool. AgentSpawn is
a tool that builds a child Agent, runs it, and returns the child's
final output as a tool response. That is what makes recursive agent
composition work without a separate orchestration layer.
AgentSelf, AgentSpawn, AgentSend
AgentSelflets an agent inspect or mutate its own state: update status, compact context, clear context, change model, inspect diagnostics, and adjust token limits.AgentSpawncreates child agents with explicit tool/depth limits for isolated reviews, subtasks, and map-reduce work.AgentSenddelivers a message to another live named agent's inbox. This makes multi-agent coordination peer-to-peer rather than only parent-to-child.
Security and privacy
Sagent is an agent runtime, not a sandbox. Enabled tools run with the current
process permissions: Bash executes local commands, file tools read and write
accessible paths, and provider/network tools send data to their configured
services. Sessions are plaintext local state and may contain prompts, model
responses, tool results, file snippets, and paths.
Use narrow tool sets, pass --no-session-persistence for one-off sensitive
prompts so sessions and auto-memory are disabled, and run Sagent inside your own
OS/container sandbox when a task needs hard isolation. See
Security.
Current scope
Sagent does not currently include:
- MCP integration;
- LSP integration;
- native sandboxing;
- a desktop UI;
- a tree-sitter repo map;
- a hosted service;
- browser automation.
Adjacent projects
This comparison focuses on the runtime shape rather than every feature of each project.
| Project | Lang | Programmatic | Multi-provider | Compactor | Multi-agent |
|---|---|---|---|---|---|
| Sagent | Python | yes | yes | yes | inbox tools |
| aider | Python | no | yes | partial | no |
| Claude Code | closed | limited | Anthropic | yes | spawn-wait |
| Codex CLI | Rust | limited | OpenAI | no | no |
| Gemini CLI | TypeScript | limited | yes | no | |
| Cline | TypeScript | no | yes | partial | no |
| OpenClaw | TypeScript | limited | yes | no | yes |
| LangChain/LangGraph | Python | yes | yes | app-defined | graph state |
Positioning:
- aider is a git-native pair programmer centered on text edits and repo maps, not a general agent runtime.
- Claude Code, Codex CLI, and Gemini CLI are strong vendor CLIs, but not reusable Python libraries.
- Cline is an editor extension rather than an importable runtime.
- OpenClaw is a personal assistant platform with many channels.
- LangChain/LangGraph is a broad application framework; Sagent is a smaller typed agent runtime with a concrete inbox loop.
Architecture map
| Module | Role |
|---|---|
bin/cli.py |
Terminal entry point |
bin/slack.py |
Slack Socket Mode entry point |
agent/ |
Turn loop, retry, dispatch, sessions |
compactor.py |
Structured compaction and prompt-too-long retry |
custom_types.py |
Message, Tool, Model, Provider protocols |
providers/ |
Anthropic, OpenAI, Google, Moonshot, DashScope, MiniMax, OpenAI-compatible |
tools/ |
Built-in tools for files, shell, web, search, and agent coordination |
repl/ |
prompt_toolkit REPL and diff rendering |
sessions.py |
Per-cwd session storage |
prompt.py |
System prompt assembly |
Name
sagent (noun, neologism) /ˈseɪ.dʒənt/
From sage + agent.
An AI assistant that confidently performs a task you didn't ask for while ignoring the one you did.
"I asked the sagent to fix one failing test -- it deleted the test and reported all green."
Contributing
See CONTRIBUTING.md for local validation and public contribution flow.
License
Apache License 2.0
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file sagent-0.1.1.tar.gz.
File metadata
- Download URL: sagent-0.1.1.tar.gz
- Upload date:
- Size: 670.6 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
a70ec9c7d4a9eda4e71331c372d0949c581cde6fb445ea6f2d244e0ec0b25f56
|
|
| MD5 |
6b506f9408671e1ffff1a5ace13c9479
|
|
| BLAKE2b-256 |
0cab35f1ab07566ee11bb0b8b0450b5b882576690267cca4feb9ff55a7f0b4f5
|
Provenance
The following attestation bundles were made for sagent-0.1.1.tar.gz:
Publisher:
publish-pypi.yml on rekursiv-ai/sagent
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
sagent-0.1.1.tar.gz -
Subject digest:
a70ec9c7d4a9eda4e71331c372d0949c581cde6fb445ea6f2d244e0ec0b25f56 - Sigstore transparency entry: 1440300121
- Sigstore integration time:
-
Permalink:
rekursiv-ai/sagent@cddb7929dfe5591883313c92dfb0f2ec5c3e14a9 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/rekursiv-ai
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-pypi.yml@cddb7929dfe5591883313c92dfb0f2ec5c3e14a9 -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file sagent-0.1.1-py3-none-any.whl.
File metadata
- Download URL: sagent-0.1.1-py3-none-any.whl
- Upload date:
- Size: 321.5 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
2d7bf037f9b8566a20746262b9bcd961f023d1203d94d8d5d04c25941ecf904f
|
|
| MD5 |
9a943f65f2797f56875df616d8d30dff
|
|
| BLAKE2b-256 |
9504c75ab00752aa0457a572e289d7593705c658df9e1f03c432500d439ded85
|
Provenance
The following attestation bundles were made for sagent-0.1.1-py3-none-any.whl:
Publisher:
publish-pypi.yml on rekursiv-ai/sagent
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
sagent-0.1.1-py3-none-any.whl -
Subject digest:
2d7bf037f9b8566a20746262b9bcd961f023d1203d94d8d5d04c25941ecf904f - Sigstore transparency entry: 1440300154
- Sigstore integration time:
-
Permalink:
rekursiv-ai/sagent@cddb7929dfe5591883313c92dfb0f2ec5c3e14a9 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/rekursiv-ai
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-pypi.yml@cddb7929dfe5591883313c92dfb0f2ec5c3e14a9 -
Trigger Event:
workflow_dispatch
-
Statement type: