Documentation
¶
Overview ¶
Command burrow-agent is the coding agent's control channel to Burrow: a capability-reduced, JSON-first command-line surface the agent invokes directly (ADR-0049). It carries the operate-verbs — the read-only siblings plus the mutating compute verbs (deploy, build, rollback, scale, autoscale, run) — while the ADMIN verbs (install, bootstrap, cluster setup, guard set, credential writes) are STRUCTURALLY ABSENT, not compiled into this binary, a stronger boundary than a runtime deny list. It authenticates to the control plane with the scoped control-plane credential (ADR-0038) and holds no cluster credentials (ADR-0005): in self-host it reaches the in-cluster control plane through the scoped, burrowd-only agent kubeconfig `burrow install` mints and the Kubernetes API-server proxy (ADR-0014). Every command prints its result as indented JSON so the agent can pipe, grep, and jq it; a mutating verb prints a structured outcome envelope (executed, held_for_confirmation, denied, or error) the agent can branch on and relay to the human (ADR-0020). Setting BURROW_AGENT_REQUIRE_SCOPED refuses the ambient-kubeconfig fallback entirely.
Source Files