Skip to main content

Sange

Local-first developer-experience layer between humans and their version-control systems — eliminating boilerplate, enforcing safety, embedding AI assistance into every commit, branch, and release, and providing a secure dashboard (local or self-hosted) for fine-grained review, approval, scheduling, and orchestration.

CI License: Apache-2.0 Python 3.12+ OpenSSF Scorecard

Status: v0.1.0 tagged (2026-05-14), Phase 1 CLI surface complete on main. The architecture is locked (.design/sange-architecture.md, v4.4). pip install sange lights up once the PyPI trusted-publisher configuration completes — see docs/release.md::Step 0 and the v0.1.0 known-issues in CHANGELOG.md. Multi-arch Docker image available at ghcr.io/simsange/sange:v0.1.0. Track ongoing progress at .design/plans/checklist.md.

What Sange is

  • A workflow layer that wraps your chosen VCS (Git, SVN, Mercurial, Perforce) — never a replacement for it.
  • A commit message lifecycle (draft → pending_review → approved → committed → pushed → archived) with AI generation, prompt enhancer, and ≥50 normalized presets.
  • A release engine with signed bundles, SBOM, SLSA 3 provenance, and 6 destinations (GitHub / GitLab / OCI / S3 / generic registry / filesystem).
  • A history-purge subsystem with 8 pre-flight gates, hash-chained audit JSONL, typed-phrase confirmation, and per-VCS executors.
  • A local-first dashboard (Laravel 13 + Livewire 4 + WebAuthn passkeys) approachable to non-developers — accessible at https://sange.test by default; remote access via Cloudflare Tunnel / Tailscale / WireGuard / VPS.

What Sange is not

  • Not a fork of any VCS.
  • Not a competing wire protocol or repository host.
  • Not a closed-source SaaS — it's local-first, Apache-2.0, self-hostable.

Quickstart

The installer ships at the v0.1 release. Until then, install from source:

git clone https://github.com/simsange/sange.git
cd sange
python -m venv .venv && source .venv/bin/activate
pip install -e ".[dev,tui]"

# Verify install:
python -c "import sange; print(sange.__version__)"

When the v0.1 release ships:

# macOS / Linux:
curl -fsSL https://sange.sh/install.sh | sh   # checksum + sigstore verified

# Windows (PowerShell):
iwr -useb https://sange.sh/install.ps1 | iex

Documentation

All documentation lives under docs/. The canonical reference is the architecture deliverable in .design/sange-architecture.md; reader-oriented manuals are split per-tool, per-topic.

Live now:

Topic Path
Installation docs/installation.md
Quickstart docs/quickstart.md
Architecture (reader's guide) docs/architecture.md
Commit lifecycle walkthrough docs/tools/workflow/commit-lifecycle.md
Git adapter docs/tools/vcs/git.md
SVN adapter (planned for v0.5) docs/tools/vcs/svn.md
Python projects with Sange docs/tools/lang/python.md
Node.js projects with Sange docs/tools/lang/node.md
Roadmap (v0.1 → v4.0+) docs/governance/roadmap.md
ADR process docs/governance/adr-process.md
Privacy & telemetry docs/governance/privacy.md
Release procedure docs/release.md
Changelog CHANGELOG.md
ADR index (33 decisions) docs/adr/ and .design/plans/decisions-log.md
CLI reference docs/reference/cli-reference.md
Git command catalog (Appendix D) docs/reference/appendix-d-git-catalog.md
SVN command catalog (Appendix E) docs/reference/appendix-e-svn-catalog.md
Cross-VCS concept map (Appendix F) docs/reference/appendix-f-cross-vcs.md
Commit template library (Appendix G) docs/reference/appendix-g-commit-templates.md
Profile registry docs/reference/profile-registry.md
Config schema docs/reference/config-schema.md
Exit codes docs/reference/exit-codes.md
Operations Kit manifest docs/reference/kit-manifest.md
Threat model (STRIDE) docs/security/stride.md
Prompt-injection defense docs/security/prompt-injection.md
SLSA + SBOM docs/security/slsa-and-sbom.md
Architecture deliverable (canonical) .design/sange-architecture.md
Master checklist .design/plans/checklist.md

Planned (each lands as the relevant T-G-NNN task in .design/plans/checklist.md flips completed):

Topic Target Gates on
Release bundling docs/tools/release/bundle.md v0.5+ release engine
History purge docs/tools/security/purge.md v1.0 purge subsystem
Remote access docs/tools/ui/remote-access.md v1.0 Web UI
Premade ops kit docs/tools/ui/vps-setup.md v1.0 kit surface
Per-VCS reference (SVN / Hg / P4 / Pijul / Fossil / Plastic / Sapling) docs/tools/vcs/<vcs>.md per adapter shipping
Per-language profiles (beyond Python) docs/tools/lang/<lang>.md per-language sprint
JSON-RPC schema docs/reference/json-rpc-schema.md T-162 (v1.0)
Operations runbook docs/operations/ v0.5+ operator-facing

Audience

Sange is designed to be approachable to seven personas — non-developer founders, CTOs, cyber-security reviewers, junior engineers, senior staff engineers, DevOps/SRE, and OSS maintainers. A feature usable only by senior engineers, with no equivalently-safe path for the others, is a design defect. See .design/plans/positioning.md.

Etymology

Named after the sengi (Swahili for the elephant shrew), stylized as "Sange" for branding — short, memorable, evocative of the agile, resilient nature of the animal. See ADR-014 for the framing rationale.

License

Sange is licensed under the Apache License 2.0 (ADR-007). The patent grant matters for the plugin ecosystem and enterprise adoption.

Copyright © 2026 Simtabi LLC.

Reporting and contact

Metadata

Release files for sange 0.1.0.post1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for sange 0.1.0.post1
File Size Uploaded
sange-0.1.0.post1.tar.gz 228.0 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for sange 0.1.0.post1
File Interpreter ABI Platform
sange-0.1.0.post1-py3-none-any.whl Python 3 none any Details

Total release size: 351.6 kB

Release files / sange-0.1.0.post1.tar.gz

Download URL sange-0.1.0.post1.tar.gz
Size 228.0 kB
Tags Source
SHA-256 checksum
How to use checksums
927d0aafe823f751cbc7ad802d0e72b5f8c000f6effcbe810a0218fa577d882a
BLAKE2b-256 checksum
How to use checksums
e1116a293ae6520dacf934ef1491ba265acfbbf819ab13e40ceb640c0d8fef5e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on May 15, 2026.

Transparency log

Release files / sange-0.1.0.post1-py3-none-any.whl

Download URL sange-0.1.0.post1-py3-none-any.whl
Size 123.6 kB
Tags Python 3
SHA-256 checksum
How to use checksums
4711ea288f4dadc9a0e1378d5d1f0a85f3937f3f418fe9b1d13de3313cbd738b
BLAKE2b-256 checksum
How to use checksums
3da141310f7a95636b8de65c3ceb5633c1ef088a743f42b06134a345caf9b33f
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on May 15, 2026.

Transparency log

Release history Release notifications | RSS feed

This release

0.1.0.post1 This release

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page