Banteg Agent Workflows

Isolate Codex and Claude coding tasks with worktrees, sandboxes, and devcontainers.

Source repo
banteg/agents
Stars
★ 371
Last updated
5mo ago
Primary language
Python

At a glance

How it runs
CLI
Works with
Universal · cross-platformCodex · Claude CodeChatGPT · Claude.ai (Partial support)
Cost
Free software; you pay for model usage
Setup effort
Medium · a few setup steps
You'll need
GitDocker for the documented devcontainer workflowShell / CLINetwork accessLocal filesystem
Typical use
A developer running several coding assistants concurrently can assign each task its own worktree so their changing files do not interfere.
Not a fit if
  • Teams that need one entry point, a config contract, or a stable API
  • Users off macOS who want a ready cross-platform sandbox
  • Anyone unwilling to assemble Git, Homebrew, Docker, and GitHub CLI themselves

What does this agent do, and when should you use it?

This repository is a personal collection of workflows and helper scripts for coding assistants such as Codex and Claude Code, not a standalone general-purpose agent. Its central pattern is to create a separate Git worktree for each task, commit the result there, and then either discard the branch or open a pull request. It also documents macOS Seatbelt sandboxing, unattended devcontainer execution, archive-based code review, Telegram control, and completion notifications. The interfaces are command-line tools including Git, git-wt, Worktrunk, GitHub CLI, devc, and takopi, with outputs such as commits, branches, pull requests, ZIP archives, Git bundles, and notification messages. Its deployment boundary is primarily a local repository and shell, with Docker available for isolation; each workflow has its own dependencies rather than a single installation entry point.

A typical flow starts from a local Git repository and uses git wt feat/branch or wt switch -c -x codex feat/branch to create and enter an isolated worktree where a coding assistant edits files. The user can then run wt step commit to prepare a commit from the diff and prior commit style, or gh pr create to open a pull request. Afterward, wt merge can squash, rebase, merge into master, and remove the worktree and branch; git wt -d, git wt -D, and wt remove provide other cleanup paths. Claude Code can be placed inside the macOS Seatbelt sandbox through ~/.claude/settings.json, limiting writes outside the project and restricting network access. For unattended work, the included devcontainer/install.sh installs devc, which opens a tmux environment with Claude and Codex. Review inputs are produced with git archive as ZIP files or git bundle create repo.bundle --all when commit history is needed; takopi supplies Telegram control and resumable sessions, while the Codex notify script provides completion messages.

  1. A developer running several coding assistants concurrently can assign each task its own worktree so their changing files do not interfere.
  2. A macOS Claude Code user facing repeated permission prompts can enable Seatbelt and automatically allow Bash commands that are already sandboxed.
  3. A developer who wants Codex or Claude to run unattended can place the session in the documented Docker devcontainer and tmux environment.
  4. A maintainer requesting architecture, refactoring, debugging, or next-fix analysis from GPT, Claude, or Gemini can upload a Git-generated ZIP or bundle.
  5. A user who wants to monitor and resume coding sessions from a phone can adopt takopi, while someone needing only completion alerts can use the Telegram notify script.

How do you install or deploy this agent?

There is no single package, global installer, or complete dependency manifest for the repository; each workflow is configured separately. For the lightweight worktree option on a Homebrew system, run brew install k1LoW/tap/git-wt, add .worktrees to ~/.gitignore_global, and run git config wt.basedir .worktrees. Relative worktree paths require Git 2.48 or newer: enable them with git config --global worktree.useRelativePaths true and migrate existing worktrees with git worktree repair. The devcontainer path requires Docker—the author prefers OrbStack—and installs devc from the repository with ./devcontainer/install.sh self-install. Full Telegram control is installed with uv tool install takopi. The supplied material does not give a unified installation procedure for Worktrunk, the Codex notify script, or every runtime dependency.

How do you use this agent?

Run git wt feat/branch to create or switch to an isolated task, then clean it up with git wt -d feat/branch for a soft deletion or git wt -D feat/branch for a hard deletion of the worktree and branch. With Worktrunk, use wt switch -c -x codex feat/branch to create the worktree and launch Codex, wt step commit to prepare a commit, wt merge to merge and clean up, or wt remove to remove and prune. After installing the devcontainer helper, invoke devc /path/to/repo to enter tmux with Claude and Codex. For model review, create a repository snapshot with git archive HEAD -o code.zip, limit it to src with git archive HEAD:src -o src.zip, or preserve history with git bundle create repo.bundle --all. A pull request can be opened with gh pr create; this requires GitHub access and authentication, although credential setup is not documented in the supplied material.

What are this agent's strengths and limitations?

Pros
  • Separate Git worktrees give concurrent coding tasks concrete filesystem isolation and reduce collisions between assistants.
  • It offers both the small git-wt wrapper and the more complete Worktrunk lifecycle covering creation, commits, merging, and cleanup.
  • The workflows span local sandboxing, container isolation, remote Telegram control, and simple notifications, allowing different levels of automation.
  • git archive and git bundle provide compact, Git-native ways to deliver either a tracked snapshot or repository history for review.
Limitations
  • This is a personal workflow collection rather than a cohesive agent with one entry point, configuration contract, or stable API.
  • Different features depend on Git, Homebrew, Docker, GitHub CLI, uv, takopi, or third-party worktree wrappers that adopters must assemble themselves.
  • The Seatbelt setup is specific to Claude Code on macOS and is not a cross-platform sandbox solution.
  • The supplied material documents no test coverage, compatibility matrix, release policy, or failure-recovery procedure.
  • Commands such as git wt -D, wt merge, and cleanup operations remove worktrees or branches, so uncommitted work must be handled carefully.

How does this agent compare with similar options?

git-wt is presented as a simple wrapper for common worktree operations, while Worktrunk is the fuller option aligned with the create → pull request → merge → cleanup cycle and adds features such as install hooks and commit generation through the llm CLI. For repository review, the workflow favors native git archive or git bundle output over large XML or Markdown exports from repomix or code2prompt. For notifications, takopi provides streamed progress and resumable remote sessions, whereas the Codex notify script only sends a simple completion message.

Key facts side by side with the most closely related agents.

Agent Source review Form / cost Stars Updated Language Full support on
Banteg Agent Workflows This agent 47 · Major gaps CLIFree + model costs ★ 371 5mo ago Python Codex · Claude Code
SWE-AF Engineering Factory 55 · Major gaps CLIFree + model costs ★ 1.1k 4d ago Go ChatGPT · Codex · Claude Code · OpenAI API · Claude API
Alas Agent Workspace 79 · Good Desktop appFree + model costs ★ 24 today Swift Codex · Claude Code
dev-3.0 76 · Good Desktop app ★ 329 today TypeScript Codex · Claude Code

How does FollowAgents rate this agent?

FollowAgents source review · FARS-2.1
Major gaps
47/ 100 5-point scale 2.4 / 5
Trust 11/29
Reliability 6/14
Adaptability 10/18
Convention 7/18
Effectiveness 9/13
Verifiability 4/8
Why each dimension lost points
Trust11 / 29 · 1.9/5

The README says Seatbelt sandboxing limits writes to the project directory and restricts network access, and mentions devcontainer isolation. It also recommends auto-approving bash, unattended operation, and full Telegram control, without explaining sensitive-data handling, confirmation for external effects, or rollback. Those gaps lower the related scores. Git worktree, GitHub CLI, Telegram, and other tools are named, supporting source attribution.

Reliability6 / 14 · 2.1/5

The README is broadly consistent across its worktree, sandbox, devcontainer, planning and review, and notification workflows. However, key capabilities depend on external tools, with no version pinning, availability guarantees, or failure guidance, so dependency availability and failure messages score lower.

Adaptability10 / 18 · 2.8/5

It targets developers using coding agents such as Codex and Claude, and gives scenarios for isolated work, unattended runs, code review, and notifications, with concrete commands and configuration. It says little about capability boundaries or compatibility limits across environments.

Convention7 / 18 · 1.9/5

The README is organized by workflow and includes installation, configuration, and command examples. Naming and maintenance responsibility have only limited clues; there is no license information or version and change history, and platform and version limits appear only incidentally.

Effectiveness9 / 13 · 3.5/5

Commands, configuration snippets, and recommendations are directly usable in common agent development workflows. Worktree isolation and packaging repository context also offer concrete value. Benefits are mostly stated as the author's experience, with no outcome evaluation or cost comparison, so full marks are not justified.

Verifiability4 / 8 · 2.5/5

Several recommendations can be traced to named tools and concrete configuration. The supplied evidence is only a README, however, so other source files do not corroborate its functional claims. The document distinguishes personal preference from actionable steps and does not present experience as a test result.

Risks and how to mitigate them
  • The README recommends auto-approval and unattended operation; verify that the sandbox's limits on project data, network access, and external actions fit the intended use.
  • Some workflows remove worktrees and branches or control agents through Telegram; the README does not describe recovery steps or sensitive-data protections.
Evidence confidence: Low Reviewed Nov 08, 2026 Reviewed revision 809e106eb755
Review evidence readme.md
See the full review method →
Maintain this project? Add the FARS badge to your README

The badge shows the current review score and verdict and links back to this page. It refreshes about once an hour after a re-review.

FARS

[![FARS review](https://followagents.com/badge/banteg-agents.svg)](https://followagents.com/en/agents/banteg-agents)
<a href="https://followagents.com/en/agents/banteg-agents"><img src="https://followagents.com/badge/banteg-agents.svg" alt="FARS review"></a>

FAQ

Is this a deployable autonomous agent?
No. The supplied material describes workflows, configuration, and scripts for operating tools such as Codex and Claude Code; it does not expose a unified agent service or API.
Is Docker mandatory?
No. The Git worktree and local Seatbelt workflows do not require Docker. Docker is explicitly required for the documented unattended devcontainer approach.
Which steps require network access or accounts?
gh pr create requires GitHub access and authentication, while takopi and the notify script communicate through Telegram. Local worktree, archive, and bundle operations can run against the local repository.
Will these workflows work on Windows or Linux?
The worktree and devcontainer concepts are not stated to be macOS-only, but the material provides no complete Windows or Linux validation. The Seatbelt configuration is explicitly for macOS.
What is the main operational risk?
Merge and deletion commands can remove worktree directories and branches, particularly the hard-delete git wt -D path. No automatic backup or recovery mechanism is documented.
Was this page helpful?
View on GitHub ↗ Install ↓

Compare agents like this one

The same FARS review applied across the shortlist this agent qualifies for.