aergia
autonomous coding agents, orchestrated and sandboxed
An 11-package TypeScript monorepo (~28K LOC over an 18-table SQLite schema under Drizzle) that turns a phone into a control plane for fleets of autonomous coding agents. Its defining piece is a transparent sandboxing layer: SDK PreToolUse hooks intercept each agent's file and shell tools — Read, Write, Edit, Glob, Grep, Bash — and re-execute them inside per-project Docker containers, path-rewritten between host and workspace and locked down with no-new-privileges, a read-only root filesystem, disabled networking, a non-root user, and memory/CPU caps.
A single Node.js gateway composes a 40-command grammY Telegram bot, a Hono HTTP/WebSocket API, and a fully typed 115-event bus that streams agent output and state live into a real-time React 19 dashboard. On top sits a multi-agent workflow engine with four execution topologies (single, pipeline, parallel fan-out, shared-memory collaborative), rate-limit-aware model failover, mid-stream token-limit enforcement, git checkpoint/restore, scoped persistent memory, and GitHub automation gated by three autonomy levels — with force-push always requiring human approval.
It is built like a service: ordered startup-recovery and graceful-shutdown sequences, container health monitoring with auto-restart, prompt-injection scanning and output secret-scrubbing — and held to strict TypeScript, zero-warning typed ESLint, and Knip dead-code gates.