foreman
Dispatch-and-acceptance control desk for farming coding work out to background agents. Probes which worker backend is actually usable, gives each task its own git worktree, sends it to a worker agent via the handoff CLI, takes delivery only as a real commit inside a path whitelist, then gates the me
as observed 2026-10-13T16:37:28.889Z- Identifier
foreman- Source
- ClawHub
- Version observed
- 2.0.3
- Source repository
- not published
- Repository observation
- No source repository listed
- First observed here
- 2026-08-28T22:06:26.689Z
- Observations recorded
- 6
- Installs (reported upstream)
- 1
- Weekly downloads (upstream)
- 675
- Declared license
- MIT-0
Observation history
2026-10-13T16:37:28.889Z
Fields that differed: changelog latestVersion topics
| Field | Before | After |
|---|---|---|
changelog |
"2.0.1: restores the optional caged worker (foreman-cworker.sh) removed in 2.0.0. Removing it did not remove the underlying risk — workers were simply unsandboxed instead — and cos | "Metadata only: set topics (ai-workflow,dispatch,acceptance); categories unchanged. No content change." |
latestVersion |
"2.0.1" | "2.0.3" |
topics |
[] | ["acceptance","ai-workflow","dispatch"] |
2026-09-17T19:21:47.048Z
Fields that differed: license description
| Field | Before | After |
|---|---|---|
license |
null | "MIT-0" |
description |
"Dispatch-and-acceptance control desk for farming coding work out to background agents. Probes which worker backend is actually usable, gives each task its own git worktree, sends | null |
2026-09-14T16:18:15.028Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"1.1.1: pins the worker supply chain (handoff-cli==4.0.2, base image by digest, claude-code@2.1.270; the caged worker only runs an immutable sha256 image reference) and validates w | "2.0.1: restores the optional caged worker (foreman-cworker.sh) removed in 2.0.0. Removing it did not remove the underlying risk — workers were simply unsandboxed instead — and cos |
latestVersion |
"1.1.1" | "2.0.1" |
2026-09-13T15:17:50.529Z
Fields that differed: changelog description latestVersion summary
| Field | Before | After |
|---|---|---|
changelog |
"Supersedes 1.0.4, which was published without its intended change. Documents the credential boundary of the caged worker inline: where DEEPSEEK_API_KEY comes from, that it is expo | "1.1.1: pins the worker supply chain (handoff-cli==4.0.2, base image by digest, claude-code@2.1.270; the caged worker only runs an immutable sha256 image reference) and validates w |
description |
"Dispatch-and-acceptance control desk for farming coding work out to background agents. Sends executable tasks to worker agents via the handoff CLI, takes delivery against a path w | "Dispatch-and-acceptance control desk for farming coding work out to background agents. Probes which worker backend is actually usable, gives each task its own git worktree, sends |
latestVersion |
"1.0.5" | "1.1.1" |
summary |
"Dispatch-and-acceptance control desk for farming coding work out to background agents. Sends executable tasks to worker agents via the handoff CLI, takes delivery against a path w | "Dispatch-and-acceptance control desk for farming coding work out to background agents. Probes which worker backend is actually usable, gives each task its own git worktree, sends |
2026-08-29T23:02:09.653Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Security hardening: removed a curl-pipe-to-bash hint, stopped echoing the value of ANTHROPIC_BASE_URL (it can carry a token), replaced a stat of the codex credential file with 'co | "Supersedes 1.0.4, which was published without its intended change. Documents the credential boundary of the caged worker inline: where DEEPSEEK_API_KEY comes from, that it is expo |
latestVersion |
"1.0.3" | "1.0.5" |
Correction
If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.