agent-fleet (Rust)

Idiomatic Rust port of @p-vbordei/agent-fleet (on npm as @p-vbordei/agent-fleet v0.1.3). Autonomous OSS-repo health for solo maintainers — one config, one cron, N repos kept reviewed and dep-current. The CLI drives an Anthropic loop (via an injectable AnthropicClient trait) through a strict gh-only command allowlist gated by a C3 single-issue interlock. 54 tests cover config validation, enroll, sandbox, the tick loop, and S1/S3/S5/S6 security invariants — all with mocked Anthropic + gh.

What's in the box

agent-fleet enroll <name> — bootstrap one repo with the five-file typescript-bun template kit plus a .release-please-manifest.json seeded from the target's package.json.
agent-fleet tick [<name>] — single Anthropic-loop iteration against one or every fleet entry; opens at most one summary issue per repo.
agent-fleet (no args) — usage hint; exits 64.
Strict fleet.yaml schema (serde_yaml with full validation).
Sandbox: gh-only allowlist with a forbidden-prefix table for mutating subcommands, enforced before every shell call.
DI-friendly: AnthropicClient is a trait, ExecFn is a boxed closure — no network or real gh in tests.

Install

cargo install agent-fleet

Or build from source:

cargo build --release
./target/release/agent-fleet --help

Quickstart

# Configure one repo:
cat > fleet.yaml <<'EOF'
fleet:
  - name: agent-id
    repo: yourname/agent-id
    path: ../agent-id
    template: typescript-bun
EOF

# Bootstrap the five-file kit + release-please manifest:
agent-fleet enroll agent-id
# enrolled agent-id: 6 files written

# Run one tick (reads ANTHROPIC_API_KEY from env, calls real gh):
ANTHROPIC_API_KEY=sk-ant-... agent-fleet tick agent-id
# tick agent-id: issue-created https://github.com/yourname/agent-id/issues/42

Library use with no network — both Anthropic and gh are stubbed — see examples/quickstart.rs:

cargo run --example quickstart
# tick agent-id: issue-created https://github.com/yourname/agent-id/issues/123

How it relates

Repo	Role
`agent-fleet`	TypeScript reference (npm `@p-vbordei/agent-fleet`) — source of truth.
`agent-fleet-py`	Python port.
`agent-fleet-rs`	Rust port (this repo).

Conformance + Security

The 54-test suite covers every clause in SPEC.md:

C1 — enroll idempotency: second run produces a byte-identical tree.
C2 — enroll bounded write set: only the five template files (+ release-please manifest) are touched.
C3 — tick at-most-one issue: the loop refuses a second gh issue create in the same run.
C4 — tick read-only on code: forbidden-prefix table rejects mutating gh pr/issue/release/repo/workflow/secret/variable/label subcommands.
C5 — fleet.yaml strict schema: missing fields, extras, empty list, bad name/template all fail fast.
S1/S6 — secrets never appear in rendered prompts or sandbox rejection reasons.
S3 — sandbox rejects shell metacharacters (|&;\$<>(){}\`) before any allowlist check.
S5 — enroll makes zero network calls (templates are vendored via Cargo.toml's include).

cargo test
# 54 passed

See the TS reference's conformance suite for the canonical fixtures.

Architecture

See docs/architecture.md.

Development

git clone https://github.com/p-vbordei/agent-fleet-rs
cd agent-fleet-rs
cargo build
cargo test

License

Apache-2.0 — see LICENSE.

agent-fleet 0.1.0