dtormoen/tsk-tsk
Keeping your agents out of trouble with sandboxed coding agent automation
What's novel
Keeping your agents out of trouble with sandboxed coding agent automation
Code Analysis
8 files read · 3 roundsA Rust CLI tool that orchestrates AI coding agents (Claude Code, Codex) in sandboxed Docker/Podman containers with network isolation via proxy sidecars, parallel task scheduling with parent-child dependencies, and git-based result collection.
Strengths
Genuinely sophisticated infrastructure: dual-lock proxy synchronization (tokio Mutex + flock), platform-aware DIND storage strategy with kernel version detection, fingerprint-based proxy container sharing, config snapshotting to prevent agent security bypass, and JVM-specific proxy handling. The architecture is clean with clear separation between task orchestration, container management, agent abstraction, and git operations.
Weaknesses
Some files are extremely large (git.rs at 114kb, tsk_config.rs at 72kb, docker/mod.rs at 80kb) suggesting opportunities for further decomposition. The Agent trait uses object-safe dynamic dispatch which adds indirection, and the builder pattern in TaskBuilder, while functional, creates a very long struct with many optional fields that could be grouped.
Score Breakdown
Signal breakdown
Innovation
Craft
Traction
Scope
Evidence
Commits
504
Contributors
4
Files
167
Active weeks
32
Repository
Language
Rust
Stars
148
Forks
16
License
MIT