agent-fleet 0.1.0

Autonomous OSS-repo health for solo maintainers (Rust port of @p-vbordei/agent-fleet)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102

# agent-fleet (Rust)

[![CI](https://github.com/p-vbordei/agent-fleet-rs/actions/workflows/ci.yml/badge.svg)](https://github.com/p-vbordei/agent-fleet-rs/actions/workflows/ci.yml)
[![spec: v0.1](https://img.shields.io/badge/spec-v0.1-blue)](./SPEC.md)
[![license: Apache 2.0](https://img.shields.io/badge/license-Apache%202.0-green)](./LICENSE)

> **Idiomatic Rust port of [`@p-vbordei/agent-fleet`](https://github.com/p-vbordei/agent-fleet)** (on npm as `@p-vbordei/agent-fleet` v0.1.3). Autonomous OSS-repo health for solo maintainers — one config, one cron, N repos kept reviewed and dep-current. The CLI drives an Anthropic loop (via an injectable `AnthropicClient` trait) through a strict `gh`-only command allowlist gated by a C3 single-issue interlock. **54 tests** cover config validation, enroll, sandbox, the tick loop, and S1/S3/S5/S6 security invariants — all with mocked Anthropic + `gh`.

## What's in the box

- `agent-fleet enroll <name>` — bootstrap one repo with the five-file `typescript-bun` template kit plus a `.release-please-manifest.json` seeded from the target's `package.json`.
- `agent-fleet tick [<name>]` — single Anthropic-loop iteration against one or every fleet entry; opens at most one summary issue per repo.
- `agent-fleet` (no args) — usage hint; exits `64`.
- Strict `fleet.yaml` schema (`serde_yaml` with full validation).
- Sandbox: `gh`-only allowlist with a forbidden-prefix table for mutating subcommands, enforced before every shell call.
- DI-friendly: `AnthropicClient` is a trait, `ExecFn` is a boxed closure — no network or real `gh` in tests.

## Install

```bash
cargo install agent-fleet
```

Or build from source:

```bash
cargo build --release
./target/release/agent-fleet --help
```

## Quickstart

```bash
# Configure one repo:
cat > fleet.yaml <<'EOF'
fleet:
  - name: agent-id
    repo: yourname/agent-id
    path: ../agent-id
    template: typescript-bun
EOF

# Bootstrap the five-file kit + release-please manifest:
agent-fleet enroll agent-id
# enrolled agent-id: 6 files written

# Run one tick (reads ANTHROPIC_API_KEY from env, calls real gh):
ANTHROPIC_API_KEY=sk-ant-... agent-fleet tick agent-id
# tick agent-id: issue-created https://github.com/yourname/agent-id/issues/42
```

Library use with no network — both Anthropic and `gh` are stubbed — see [`examples/quickstart.rs`](./examples/quickstart.rs):

```bash
cargo run --example quickstart
# tick agent-id: issue-created https://github.com/yourname/agent-id/issues/123
```

## How it relates

| Repo | Role |
|---|---|
| [`agent-fleet`](https://github.com/p-vbordei/agent-fleet) | TypeScript reference (npm `@p-vbordei/agent-fleet`) — source of truth. |
| [`agent-fleet-py`](https://github.com/p-vbordei/agent-fleet-py) | Python port. |
| [`agent-fleet-rs`](https://github.com/p-vbordei/agent-fleet-rs) | Rust port (this repo). |

## Conformance + Security

The 54-test suite covers every clause in [SPEC.md](./SPEC.md):

- **C1** — enroll idempotency: second run produces a byte-identical tree.
- **C2** — enroll bounded write set: only the five template files (+ release-please manifest) are touched.
- **C3** — tick at-most-one issue: the loop refuses a second `gh issue create` in the same run.
- **C4** — tick read-only on code: forbidden-prefix table rejects mutating `gh pr/issue/release/repo/workflow/secret/variable/label` subcommands.
- **C5** — `fleet.yaml` strict schema: missing fields, extras, empty list, bad name/template all fail fast.
- **S1/S6** — secrets never appear in rendered prompts or sandbox rejection reasons.
- **S3** — sandbox rejects shell metacharacters (`|&;\`$<>(){}\\`) before any allowlist check.
- **S5** — `enroll` makes zero network calls (templates are vendored via `Cargo.toml`'s `include`).

```bash
cargo test
# 54 passed
```

See the TS reference's [conformance suite](https://github.com/p-vbordei/agent-fleet/tree/main/conformance) for the canonical fixtures.

## Architecture

See [docs/architecture.md](docs/architecture.md).

## Development

```bash
git clone https://github.com/p-vbordei/agent-fleet-rs
cd agent-fleet-rs
cargo build
cargo test
```

## License

Apache-2.0 — see [LICENSE](./LICENSE).