Skip to main content

Sutra

Governed AI-development workspaces for Claude Code, Codex CLI, and future coding runtimes.

One .sutra/ source of truth. Many AI runtimes. Policy-driven autonomy. Evidence-backed delivery.

What is Sutra?

Sutra turns any repository into a governed AI-development workspace with:

  • Reusable agents — specialized AI roles (backend, frontend, security, QA)
  • Skills — composable methodology packs (TDD, code review, planning)
  • Commands — structured workflows (/implement, /review, /ship)
  • Guardrails — command deny lists, approval gates, path restrictions
  • Evidence — audit trails for every AI-assisted session

Installation

You can install Sutra CLI globally using pipx:

pipx install sutra-cli

Alternatively, you can run it on the fly without installing using uvx:

uvx --from sutra-cli sutra --help

For local development installation:

git clone https://github.com/aincloudtools/sutra.git
cd sutra
pip install -e .

Quick Start

# Initialize a workspace in your target repository
cd your-project
sutra init --profile fullstack --runtime claude

# Add Codex as a second runtime
sutra runtime add codex

# Detect your stack
sutra context refresh

# Validate setup
sutra policy validate
sutra doctor

# Sync changes to runtimes
sutra sync

Then open Claude Code and use:

/implement add login validation
/review
/ship

Commands

Command Description
sutra init Initialize a governed workspace
sutra sync Sync .sutra/ to configured runtimes
sutra doctor Validate workspace integrity
sutra context refresh Scan repo and update context
sutra context show Display current context
sutra context diff Show context changes
sutra policy validate Validate policy files
sutra guard enable Enable all guardrails
sutra guard disable Disable guardrails
sutra guard careful Enable destructive-command warnings
sutra guard freeze <path> Restrict edits to a path
sutra runtime add <runtime> Add a new runtime
sutra report Generate evidence report

Architecture

.sutra/              ← Source of truth (you own this)
├── sutra.yaml       ← Workspace config
├── project.yaml     ← Stack and validation
├── runtimes.yaml    ← Runtime settings
├── context/         ← AI project context
├── agents/          ← Agent role definitions
├── skills/          ← Composable skill packs
├── commands/        ← Slash command workflows
├── policies/        ← Guardrails and approval gates
└── evidence/        ← Audit trails

CLAUDE.md            ← Generated for Claude Code
.claude/             ← Generated for Claude Code
AGENTS.md            ← Generated for Codex CLI

Profiles

Profile Agents Best For
fullstack backend, frontend, security, QA Full-stack web apps
backend backend, security, QA API/service projects
frontend frontend, QA Frontend-only projects

Roadmap

See ROADMAP.md for the detailed vision, target architecture, and target build phases.

License

MIT

Metadata

Release files for sutra-cli 0.3.9

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for sutra-cli 0.3.9
File Size Uploaded Provenance Actions
sutra_cli-0.3.9.tar.gz 234.2 kB With provenance Details for sutra_cli-0.3.9.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for sutra-cli 0.3.9
File Interpreter ABI Platform Actions
sutra_cli-0.3.9-py3-none-any.whl Python 3 none any Details for sutra_cli-0.3.9-py3-none-any.whl

Total release size: 446.8 kB

Release files / sutra_cli-0.3.9.tar.gz

Download URL sutra_cli-0.3.9.tar.gz
Size 234.2 kB
Tags Source
SHA-256 checksum
How to use checksums
af903c71a805d248122f61bda6527130a75cd28fd61d1af5cbe56a92199dc65c
BLAKE2b-256 checksum
How to use checksums
e3a26c8d586f2c83932a50164930207fb467311b0c81ccadc0e2c8d47af0ac07
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on May 31, 2026.

Transparency log

Release files / sutra_cli-0.3.9-py3-none-any.whl

Download URL sutra_cli-0.3.9-py3-none-any.whl
Size 212.7 kB
Tags Python 3
SHA-256 checksum
How to use checksums
5827cb96f83d47c6d886c2dafb3f8921f931667e06008c8bb3e2df4da17e0a1b
BLAKE2b-256 checksum
How to use checksums
dc09969fd14ff1c1dbf10fbb073959bea756382350dacc597e6256dd28308878
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on May 31, 2026.

Transparency log

Security for sutra-cli 0.3.9

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for sutra_cli-0.3.9.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on May 31, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page