Herdr Suite: supervised AgentOps
Herdr-native tools for human-supervised agent work, built and maintained by StructuPath. Explore is the ready first workflow. Deliver is an attended Stage 2 lifecycle with strict task/report contracts. Browser and Guard provide supporting visibility and text-policy capabilities.
This repository is the canonical suite documentation source; each plugin README remains the detailed runtime reference.
Start with Explore
Explore with Swarm when you have one bounded coding task and want to compare several implementations. Swarm records a base SHA, gives each agent a separate worktree and branch, reports concrete change counts, and lets the operator preview and harvest a selected candidate.
The operator defines the comparison criterion, reviews diffs and tests, and chooses what lands. Agents commit locally and never push.
Deliver is attended
Deliver with Conductor is an attended Stage 2 workflow: visible role panes, repository/workspace-bound strict state, immutable task contracts, private report outboxes, deterministic one-CAS integration, exact-SHA reviewer and validator gates, and archival stand-down.
The pinned runtime does not provide approval receipts or approval-aware apply, suite adapters, unattended automation, automatic recovery, cryptographic report attestation, or protection against malicious same-UID processes.
Supporting trust capabilities
- Browser exposes a workspace browser session that an agent or operator can drive and record. The session is a trusted same-user boundary, and recordings may contain sensitive content.
- Guard observes rendered terminal text and offers advisory/best-effort policy. It is not a sandbox or authorization boundary for agent TUIs.
Pinned compatibility evidence
| Plugin | ID | Pinned release | Minimum Herdr | Explicitly tested | Purpose |
|---|---|---|---|---|---|
| Browser | structupath.browser |
0.5.0 |
0.7.0 |
0.7.4 |
Supporting browser visibility and recording |
| Guard | structupath.guard |
0.1.1 |
0.7.5 |
0.7.5 |
Supporting advisory text policy, audit, alert, and best-effort interrupt request |
| Swarm | structupath.swarm |
0.1.0 |
0.7.4 |
0.7.4, 0.7.5 |
Ready Explore workflow: parallel candidates and review-first harvest |
| Conductor | structupath.conductor |
0.3.0 |
0.7.5 |
0.7.5 |
Attended Deliver Stage 2: strict tasks/reports, one-CAS integration, exact-SHA gates, and archival stand-down |
Versions are plugin-specific evidence pinned in data/plugins.json, not a claim that every plugin was tested on one suite-wide Herdr version. Guard 0.1.1 passed its non-destructive Herdr 0.7.5 live smoke. Guard remains best-effort rendered-text policy: an accepted interrupt request is observable, but command prevention is unknown.
Composition and supervision boundaries
These plugins can be installed together, but the current runtime is not a single automatic pipeline.
| Component | System provides | Operator remains responsible for |
|---|---|---|
| Explore / Swarm | Worktree fan-out, change counts, previews, guarded harvest | Task bounds, candidate review, tests, slot selection, cleanup |
| Deliver / Conductor | Task-bound role panes, private report outboxes, deterministic integration, exact-SHA gates, and stand-down | Work direction, assertion review, approval decisions, conflicts, and ambiguous recovery |
| Browser | Shared visual browser surface and recording | Session privacy, action review, sensitive recording handling |
| Guard | Best-effort text matching, audit, alerts, interrupt attempts | Authoritative hooks, sandboxing, access control, log protection |
Herdr plugins and write-capable agents run as the same operating-system user. Treat them as trusted same-user principals. Worktrees reduce accidental file collisions and make changes reviewable; they are not sandboxes and do not prevent a worker from accessing other same-user files or processes.
Install by capability
# Ready first workflow
herdr plugin install StructuPath/herdr-swarm
# Attended Stage 2 delivery
herdr plugin install StructuPath/herdr-conductor
# Supporting visibility and policy
herdr plugin install StructuPath/herdr-browser
herdr plugin install StructuPath/herdr-guard
These commands are not a blanket claim about marketplace visibility. Inspect source and manifests before installing local plugins.
Health checks
herdr plugin list
herdr plugin action list
herdr plugin log list
herdr status server
plugin list confirms that a manifest parsed and is enabled; plugin action list confirms action registration. See each plugin page for its exact actions, prerequisites, and limits.