Flue is the Astro of agents
The Astro team just dropped Flue. Pitch is short: like Claude Code, but 100% headless and programmable. TypeScript framework for building autonomous agents — runtime-agnostic, deploy on Node, Cloudflare Workers, GitHub Actions, anywhere. 1.7k stars and climbing.
The angle that matters: the Astro folks are not strangers to building frameworks. They specifically positioned this as a proper framework — think Astro or Next.js but for agents — not yet another agent SDK. Most of the agent's behavior lives in Markdown files (skills, context, AGENTS.md), not in code. That's the same skill-driven philosophy as Anthropic Skills, just with the runtime open and yours.
Sandbox is the underrated detail. Flue defaults to lightweight virtual sandboxes powered by just-bash instead of containers. Faster, cheaper, more scalable for the cases where you don't need full isolation. You can swap in stricter sandboxing when you do.
The structural argument: you own the entire stack — the agent, the harness, and the sandbox itself. No vendor lock-in on the runtime, no opaque billing layer, no rules someone else can change overnight. After the Cursor April 23 database delete, the HERMES.md billing leak, the OpenClaw filter incident in the past two weeks, that pitch lands harder than it would have a month ago. License is Apache-2.0.
Repo: https://github.com/withastro/flue
← Back to all articles
The angle that matters: the Astro folks are not strangers to building frameworks. They specifically positioned this as a proper framework — think Astro or Next.js but for agents — not yet another agent SDK. Most of the agent's behavior lives in Markdown files (skills, context, AGENTS.md), not in code. That's the same skill-driven philosophy as Anthropic Skills, just with the runtime open and yours.
Sandbox is the underrated detail. Flue defaults to lightweight virtual sandboxes powered by just-bash instead of containers. Faster, cheaper, more scalable for the cases where you don't need full isolation. You can swap in stricter sandboxing when you do.
The structural argument: you own the entire stack — the agent, the harness, and the sandbox itself. No vendor lock-in on the runtime, no opaque billing layer, no rules someone else can change overnight. After the Cursor April 23 database delete, the HERMES.md billing leak, the OpenClaw filter incident in the past two weeks, that pitch lands harder than it would have a month ago. License is Apache-2.0.
Repo: https://github.com/withastro/flue
Comments