NewA security reviewer, plus data and game developers

Put it on the board.
The agents ship it.

Tell the product-manager agent what you want. It writes the cards; eleven role agents analyse, design, build, review, test and ship them, and you approve the plan and the result. Open source, on your own machine.

TaskTrooper — Acme Billing

Runs the agents you already have

Claude CodeClaude CodecliCursorCursorcliOpenCodeOpenCodecliAntigravitycliAnthropicAnthropicOpenAIOpenAIGeminiGeminiGroqOllamaOllamaLM StudioLM StudiovLLMvLLMClaude CodeClaude CodecliCursorCursorcliOpenCodeOpenCodecliAntigravitycliAnthropicAnthropicOpenAIOpenAIGeminiGeminiGroqOllamaOllamaLM StudioLM StudiovLLMvLLM

How work flows

You talk to one agent. Two decisions stay yours.

The product manager turns every request into board tasks and brings the result back to you. In between, the board hands each card to the agent that owns its column. You approve the plan and the outcome; nobody relays context by hand.

  1. YouRequest
  2. PMPlans
  3. AnalysisArchitect
  4. Plan OKYou approve
  5. DesignDesigner
  6. BuildCode + PR
  7. ReviewArchitect + security
  8. QATests
  9. PM checkUAT
  10. Sign-offYou approve
  11. DeployRelease
  1. 1You ask the PM, the PM writes the cards

    Type what you want on the home screen. The product-manager agent reads the repository, writes the task with its assumptions, scope and acceptance criteria, and assigns it. It waits in the backlog until you approve it; then the agent picks it up.

    create_board_task  title="Idempotency-Key on POST /v1/invoices"  assignee=backend-developer
  2. 2Unclear? An analysis first, and you approve the plan

    When the technical path is not obvious, the architect writes an analysis report. Comment on any passage, answer its open questions and send everything back in one go; nothing is built until you approve the plan. A screen nobody has designed goes to the designer first, on the project's design system.

    analiz_review  →  plan approved  →  design D-4 approved  →  3 tasks created  ·  blocked_by enforced
  3. 3The right developer builds, two reviewers must approve

    Backend, frontend, mobile, data or game: the repository decides who builds. The developer checks out the task branch in its own workspace and starts a headless session with its prompt, skills and a per-run MCP token. In code review the architect and the security reviewer both read the PR, and the card moves on only when both approve. QA runs the build for real, the PM checks the result.

    commit_task_changes  →  PR #31  →  code_review (architect ✓ · security ✓)  →  in_qa  →  pm_uat
  4. 4Your sign-off, then the release engineer ships it

    After you accept the result, the release engineer merges the PR, deploys it the way the component ships, runs smoke checks and reads production errors before it calls the task released. A red check rolls it back.

    done (merge)  →  deploy (GitHub Actions)  →  smoke 6/6 · 0 new errors  →  released

Features

The whole loop, not another tracker

Plan, implement, review, test, merge, deploy, verify. Each step has an owner, and the owner is an agent running on your machine.

Dispatch

The board drives, not you

A card entering a column is dispatched to that column's agent. It does the work and hands the card to the next column, where the next agent takes over. Nobody presses run, and nobody relays context by hand.

  • Thirteen columns out of the box, all configurable
  • Blockers park a card until they land
  • A usage limit parks the task and resumes the same session
Todo
T-28
In Progress
T-28
backend-developer
Code Review
T-28
QA
T-28
eventtask.moved → in_progressdispatch backend-developer
Quality

QA that has to run something

The QA agent cannot pass a task without executing: a local boot, real requests, headless-browser screenshots, iOS and Android simulators. A written plan is not a verdict. It never reads the code, so it tests what the user would see.

  • Acceptance criteria are the checklist; every one needs a verdict
  • A separate agent from the one that wrote the code
  • Failed runs re-dispatch, bounded
QA round · T-29evidence: 4 calls
  • run_terminalnpm run dev · :3200 up
  • browser_screenshotsettings → limits · 1440×900
  • set_test_case_resultTC-3 rate limit header · pass
  • review_criterion3/3 criteria approved

A run with a plan and no execution is failed and re-dispatched.

Ship

Signed off, shipped, verified, or rolled back

Every task gets its own branch and pull request. After your sign-off the release engineer merges it and ships it the way that component ships: a GitHub Actions deploy on merge, a dispatched workflow, Vercel, or a batched, versioned release for desktop and mobile apps. It reads production logs and errors before it calls the task released.

  • A delivery profile per component: on merge, dispatch or batch
  • Smoke checks, a soak window and a new-errors budget on every deploy
  • Rollback through the provider: Vercel promote, Cloud Run traffic
release-engineer · T-24profile: on merge
  1. sign-offyou accepted the result
  2. mergePR #31 · squash → main
  3. deployGitHub Actions · Cloud Run · prod
  4. verifysmoke 6/6 · 0 new errors · soak 10m
  5. releasedT-24 · acme-api
A red smoke check or new errors call rollback_release: traffic goes back to the last good revision.
Projects

It knows the system it is changing

A project groups your repositories, and each repository is split into components with their stack, commands, checks, environments and cloud resources. A scanner fills it in, you confirm or override it, and every agent reads the brief before it touches code. The architecture map shows how the pieces fit.

  • Single services, monorepos and multi-repo projects
  • Detected facts are confirmed or overridden, never silently changed
  • Runtime logs and errors from Cloud Run, Vercel and AWS reach the agents
The Acme Billing project's architecture map in TaskTrooper: acme-mobile, acme-web and acme-api, with the Redis and PostgreSQL that acme-api uses.

Analysis you can mark up

The architect writes an HTML report. Comment on any passage, answer its open questions and send it all back in one go.

A preview for every PR

Vercel preview deployments per pull request, opened straight from the box where you accept the result.

Self-evolving playbooks

Agents review their own runs, scores and KPIs and propose changes to their skills and rules. A golden suite and a judge decide whether the change stays.

Memory in four scopes

Personal or team-wide, per repository or across all. Near-duplicates are refused.

Code understanding, locally

Repositories parsed with tree-sitter and embedded on your machine, so agents search semantically and see uncommitted edits.

Enforced ordering

blocked_by, deploy_depends_on, derived_from, discovered_from are relations the runtime acts on, not prose.

Your agents, your runtimes

Create agents from a template or from scratch. Each one picks its own runtime: Claude Code, Cursor, Antigravity or OpenCode as a local process, or Anthropic, OpenAI, Gemini, Groq or any OpenAI-compatible API.

Every token accounted for

Tokens per model and per day, agent CLI sessions and direct API calls alike, with the share served from the prompt cache.

Nothing to host

The desktop app starts an embedded Postgres and the Go backend. No account, no cloud, no login.

Multi-agent

Four sessions at once, each with its own tools

Every task runs in its own workspace, on its own branch, in its own CLI session. Every role has its own tool policy. So while the game developer runs its engine's tests, the security reviewer is reading another task's diff, QA is driving a browser against a third build and the release engineer is verifying a fourth in production. They never share a session and never step on each other's files. Eleven roles ship ready to work, led by the product manager: architect, security reviewer, UI designer, backend, frontend, mobile, data and game developers, QA and release engineer. Create your own agents from a template or from scratch, and give each one the runtime it works best on.

4 of 4 sessions running · max_concurrent_sessions: 4
game-developer
T-28 · Dash ability cooldown
In Progress · workspaces/task-28
run_terminalgodot --headless · gdUnit4commit_task_changesfeat: dash cooldown
claude_code · claude -p · 3f9a
Unity, Godot, Unreal, web or Bevy: whatever the repo runs. Opens the PR.
security-agent
T-27 · Signed upload URLs
Code Review · workspaces/task-27
grep_codefilepath.Join(uploadDir, name)move_board_taskneed_revision · SEC-1 HIGH
opencode · run · 5d0e
Reads the diff, never runs it. Blocks only on an exploitable finding.
qa-agent
T-25 · Blocker badge on cards
QA · workspaces/task-25
browser_screenshot/board?task=T-25mobile_launch_appiPhone 16 simulator
cursor_agent · agent -p · 81c2
Browser, simulators, shell. No code-reading tools: QA is black box.
release-engineer
T-24 · Overdue reminder emails
Done · workspaces/task-24
merge_task_pull_requestPR #31 · CI greenrun_smoke_checks6/6 · 0 new errors
claude_code · claude -p · 7be1
Merges, deploys, verifies production. Rolls back what breaks.
Tool policies per role
Allow-lists per agent, tightened again by column: a QA verdict column cannot write code, and only the release engineer merges and deploys.
Workspaces per task
A clone under the data directory per task, the task branch checked out before the agent starts. Files land in the tree the runner commits.
One board, many owners
The card is the hand-off. When a developer moves it to Code Review, the architect's and the security reviewer's sessions start, and it moves on only when both approve; nobody relays context by hand.
Your own agents, your own runtimes
Add an agent from a template or from scratch: prompt, skills, rules, tool policy, columns, memory. Each agent picks its provider, so a Cursor-based reviewer and a Claude Code developer share one board.

Screens

The app, as it runs on your machine

TaskTrooper 0.2 working on a sample project: an API, a web dashboard and a mobile app, with real agent runs.

The board. Each column has an owner. A card that lands in it is dispatched to that agent, and the card says so while the agent works.
The board

Each column has an owner. A card that lands in it is dispatched to that agent, and the card says so while the agent works.

A run, on the card. The developer ticks off each acceptance criterion as it lands, then leaves a note on the decisions it could not make alone.
A run, on the card

The developer ticks off each acceptance criterion as it lands, then leaves a note on the decisions it could not make alone.

Talking to the PM. The PM says what it filed and which calls it made for you, and the card waits in the backlog until you approve it.
Talking to the PM

The PM says what it filed and which calls it made for you, and the card waits in the backlog until you approve it.

Home: tell the PM. Ask for a feature, report a bug or ask what is on the board. The product manager turns it into tasks, and the strip underneath shows where a request goes next.
Home: tell the PM

Ask for a feature, report a bug or ask what is on the board. The product manager turns it into tasks, and the strip underneath shows where a request goes next.

Performance and self-evolution. Score, KPI targets, and the switch that lets an agent rewrite its own skills and rules from its results.
Performance and self-evolution

Score, KPI targets, and the switch that lets an agent rewrite its own skills and rules from its results.

Download

One install. Nothing to host.

You need git and one way to run agents: the Claude Code, Cursor, Antigravity or OpenCode CLI, or an API key. The app checks what is installed and shows the exact command for anything missing.