Workflow-driven
Authored workflows define tasks, gates, dependencies, schedules and handoffs rather than embedding one fixed automation path.
Coding workflows / Actor runtime / Built in Hew
Hewbers brings coding agents, independent review, repository checks and exact-head delivery into one self-hosted workflow. Written in Hew, it uses actors, explicit ownership and durable state to build toward reliable issue-to-merge operation.

01 / Workflow
Hewbers separates selection, implementation, review, verification and merge authority. Each decision is tied to the repository state it covers.
Poll configured backlogs, apply dependency and priority policy, then fence one eligible item to one run.
Create an isolated worktree and gather the issue, repository instructions, relevant files and workflow inputs.
Dispatch the configured coding provider with bounded tools, credentials, time and workspace authority.
A separate reviewer evaluates the exact authored head. Findings return to implementation on the same pull request.
Run repository-defined checks, observe provider CI and rebase or repair when the base or result changes.
A separate merge-review workflow rechecks approval, head, base and CI before merging and closing linked work.
Review findings, failed checks, changed bases and interrupted stages return through bounded repair or recovery paths instead of silently continuing.
Authored workflows define tasks, gates, dependencies, schedules and handoffs rather than embedding one fixed automation path.
Repository and coding-provider effects are treated as durable external actions whose accepted, failed or uncertain outcomes must be reconciled.
Claims, journals, exact-head review and intent-before-effect records let a restarted service continue without casually duplicating work.
02 / Execution model
The run owner holds lifecycle authority. Selected local workers perform stages; reviewed remote-worker source stays default-off and uncompiled. Provider callbacks and remote results are evidence, not permission to complete or release a run.
Lifecycle authority
Pins the workflow and runner inventory, holds the claim or PR lease, evaluates gates and decides completion or release.
Admission → ownership → terminal decision
Bounded execution
Run deterministic commands, coding agents and reviewers in selected local profiles; remote-worker source remains default-off and uncompiled.
Checked input → stage result → surrender
Restartable state
Record lifecycle events and derive status, trace, recovery and closeout views without rerunning completed effects.
Intent → effect → acknowledgement
Remote stagesReviewed source describes a default-off Kubernetes scratch-worker path with checked identity, scoped credentials and owner-held completion authority. The corrected worker remains uncompiled; worker execution, image behavior, live-cluster, full-chain and live Azure operation are unqualified. Earlier disposable-minikube checks apply to prior-stage scenarios, not this worker.
03 / Implemented
Selected local profiles have passed bounded checks; the current remote worker is default-off and uncompiled, not an operating capability.
The supervised service polls backlogs, checks dependencies and selects work under a claim. The Linux service runs under maintainer oversight; its recorded backlog is currently stalled before implementation can begin.
Reviewed source supports isolated Git worktree authoring through configured Copilot, Claude Code, Codex or OpenClaw-compatible adapters, with authored-head capture and branch publication in selected profiles. Workflow inputs are pinned to runs. A separate continuation source path can admit one unchanged local-start successor from terminal-owner evidence; it carries no context or execution budget, and successor execution is not established. A finished provider invocation is not successful coding completion: retained partial drafts do not authorize commits. Signing and trusted finalization stay outside the coding stage. Prompt, context and verifier-capture artifacts use restricted private files.
Reported selected scenarios exercise independent review of a pinned head and bounded repasses for reviewer, local-check and provider-CI failures on the same pull request. These cases do not establish general PR remediation. Website authorship is separate from protected verification and publication; this content update does not mean those later stages have run.
A distinct workflow selects eligible pull requests, holds a PR-specific lease, refreshes approval, head, base, labels and CI, then merges the reviewed head and closes linked issues.
Selected Goobers DSL 2 workflows have run through normal service commands. Reviewed source describes sequential tasks, bounded read-only branches, joins, repasses and selected schedules; newer command/script and graph profiles remain unqualified for runtime execution. Captured workflow inputs stay distinct from changes admitted for future runs.
GitHub and Gitea paths cover issue and pull-request discovery, labels, comments, branch publication, CI observation, merges and closeout in supported profiles. Controlled cases exercise selected CI polling, pagination and branch publication; this does not establish every live provider profile.
Hewbers preserves Goobers workflow contracts and operational ideas while implementing the runner, ownership and recovery model in Hew.
That makes Hewbers both a practical self-hosted coding system and a substantial concurrent application for Hew. The goal is broad workflow parity through complete operating outcomes, not a line-for-line port.
Meet the Hew language ↗05 / Direction
Restore backlog progress and verify newer Hew compatibility, then deepen remote stages, human-feedback repair, Nisshi event history, NATS communication and an install that does not require a checkout.
Read the current development direction →Now
Resume interrupted backlog work and demonstrate repeated reviewed changes under clear operating authority.
Now
Run checked image stages on disposable Kubernetes workers with scoped identity, recovery and owner-validated completion.
Next
Turn fresh pull-request comments and explicit decisions into bounded repair work.
Next
Use Nisshi for lifecycle events and NATS for authenticated communication between isolated agents.
Then
Install, configure, upgrade, restore and observe Hewbers without a source checkout.
Ongoing
Run more authored workflows, providers, controls and execution profiles through one Hew runtime.