_meta.json

{
  "slug": "fleet",
  "version": "4.0.1",
  "type": "installable-cli",
  "description": "Multi-agent fleet management for OpenClaw, Claude Code, Codex, Cursor, Windsurf, Gemini CLI, and custom agent stacks. One CLI to monitor, manage, and orchestrate your entire AI agent fleet. Fleet judges reliability, routes intelligently, tracks deltas, and keeps gateways, HTTP endpoints, Docker workers, and OS processes accountable. Network access stays limited to loopback and explicitly configured endpoints. Operator consent is required before install.",
  "requires": {
    "binaries": [
      "bash",
      "python3",
      "curl"
    ],
    "optionalBinaries": [
      "gh"
    ],
    "bashVersion": "4.0",
    "pythonVersion": "3.10"
  },
  "installSpec": {
    "method": "clawhub",
    "command": "clawhub install fleet",
    "manual": "git clone https://github.com/oguzhnatly/fleet.git && fleet/bin/fleet init",
    "initRequired": true,
    "initCommand": "fleet init",
    "initWrites": [
      "~/.fleet/config.json (chmod 600, tokenEnv preferred for agent auth)"
    ],
    "initReads": [
      "~/.openclaw/openclaw.json (read-only, one-time workspace path auto-detection)",
      "127.0.0.1:40000-50000 (loopback port scan, one-time gateway discovery during init)"
    ],
    "skipInit": "Manual alternative: clone repo, create ~/.fleet/config.json from templates/configs/minimal.json, add bin/ to PATH manually. No automatic writes.",
    "updateMechanism": {
      "command": "fleet update --check",
      "installCommand": "fleet update --install --yes",
      "source": "api.github.com/repos/oguzhnatly/fleet/releases/latest",
      "verification": "Install is explicit, confirmation-gated, restricted to oguzhnatly/fleet by default, and blocked unless a checksum is present or the operator explicitly allows an unverified archive.",
      "disableCheck": "Set FLEET_NO_UPDATE_CHECK=1 to disable background version check and update banner"
    },
    "optionalWrites": [
      "~/.local/bin/fleet (only with fleet init --link or --path)",
      "~/.bashrc or ~/.zshrc or ~/.profile (only with fleet init --path and confirmation)"
    ]
  },
  "envVars": {
    "optional": [
      {
        "name": "FLEET_CONFIG",
        "description": "Override path to fleet config file (default: ~/.fleet/config.json)"
      },
      {
        "name": "FLEET_LOG",
        "description": "Override path to dispatch log file (default: ~/.fleet/log.jsonl)"
      },
      {
        "name": "FLEET_WORKSPACE",
        "description": "Override workspace path (default: value from config)"
      },
      {
        "name": "FLEET_STATE_DIR",
        "description": "Override state persistence directory (default: ~/.fleet/state)"
      },
      {
        "name": "NO_COLOR",
        "description": "Disable colored terminal output when set to any value"
      },
      {
        "name": "FLEET_NO_UPDATE_CHECK",
        "description": "Set to any value to disable the background GitHub release check and update banner"
      },
      {
        "name": "FLEET_ADAPTER_TIMEOUT",
        "description": "Maximum seconds any single adapter health probe may take before the dispatcher returns an error result (default: 6)"
      },
      {
        "name": "FLEET_ADAPTERS_DIR",
        "description": "Override the user adapter drop in directory (default: ~/.fleet/adapters). Custom <type>.sh files placed here are auto loaded alongside the built in adapters."
      }
    ]
  },
  "permissions": {
    "reads": [
      "~/.fleet/config.json (agent gateway and runtime config created by fleet init)",
      "~/.fleet/state/ (delta tracking state created by fleet itself)",
      "~/.fleet/adapters/ (operator dropped custom adapter scripts loaded by the v4 adapter dispatcher)",
      "~/.openclaw*/agents/main/sessions/<fleet-session-id>.jsonl (active output stream of the operator's own fleet-named sessions only, full main session only with fleet watch --all --yes)",
      "~/.openclaw*/openclaw.json (gateway config, read-only, only during fleet init auto-detection)",
      "/proc/meminfo (memory usage, for fleet sitrep resource section, Linux only)"
    ],
    "writes": [
      "~/.fleet/ (config, state, logs, sanitized backups created by fleet itself)",
      "~/.local/bin/fleet (optional symlink only with fleet init --link or --path)",
      "~/.bashrc or ~/.zshrc or ~/.profile (only with fleet init --path and confirmation)"
    ],
    "network": [
      "127.0.0.1:<agent-ports> (loopback only, operator's own agent gateways listed in config)",
      "api.github.com (CI status reads via authenticated gh CLI, for fleet ci command only)",
      "Operator-configured endpoint URLs (health checks only, URLs the operator explicitly added to config)"
    ],
    "never": [
      "No connections to any address not in the operator's own config",
      "No reading of SSH keys, cloud credentials, browser storage, or OS keychain",
      "No reading of session files outside fleet-named sessions the operator dispatched",
      "No writing outside the installing user's home directory",
      "No sudo or elevated privilege execution",
      "No listening ports or inbound connections",
      "No transmitting tokens or credentials outside loopback"
    ]
  },
  "sensitive": {
    "preferredSecretSource": [
      "tokenEnv fields that point to operator-managed environment variables"
    ],
    "legacyPlaintext": [
      "~/.fleet/config.json may contain inline token fields for backwards compatibility, but tokenEnv is preferred"
    ],
    "hardening": "chmod 600 ~/.fleet/config.json. fleet audit warns on inline tokens, placeholder tokens, missing tokenEnv values, and loose permissions."
  },
  "install": {
    "method": "clawhub",
    "clawhub": "clawhub install fleet",
    "manual": "git clone https://github.com/oguzhnatly/fleet.git && fleet/bin/fleet init",
    "initBehavior": "fleet init scans loopback ports for running gateways, reads ~/.openclaw/openclaw.json for workspace path, and creates ~/.fleet/config.json with mode 600. Symlink creation requires fleet init --link. Shell rc modification requires fleet init --path and confirmation.",
    "consent": "Installing this skill authorizes local read-only checks. Dispatch, steer, parallel execution, kill, restore, credential-bearing backup, watch --all, and update install require confirmation or --yes from a current operator instruction."
  },
  "installable": true
}