-
Notifications
You must be signed in to change notification settings - Fork 0
chore: update radioactive-ralph packages to 0.35.6 #71
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,38 @@ | ||
| cask "radioactive-ralph-gui" do | ||
| version "0.35.6" | ||
|
|
||
| on_arm do | ||
| sha256 "bfb91101a7114f2053cca5421bd5ee8b75d87c5708395e356b4b2befe994da0c" | ||
| url "https://github.com/jbcom/radioactive-ralph/releases/download/v#{version}/radioactive-ralph_#{version}_darwin_arm64.dmg" | ||
| end | ||
| on_intel do | ||
| sha256 "498d3a3035655a109c4df1f2649fe63b0a72ff6538e6cfb87667a4a568e72303" | ||
| url "https://github.com/jbcom/radioactive-ralph/releases/download/v#{version}/radioactive-ralph_#{version}_darwin_amd64.dmg" | ||
| end | ||
|
|
||
| name "radioactive-ralph" | ||
| desc "Supervised-execution runtime for local AI-agent CLIs" | ||
| homepage "https://github.com/jbcom/radioactive-ralph" | ||
|
|
||
| app "radioactive-ralph.app" | ||
|
|
||
| # The app is ad-hoc signed (free, no Apple Developer cert), so Gatekeeper | ||
| # would quarantine it on first launch. Strip the quarantine attribute after | ||
| # install so it opens cleanly — the standard OSS-cask approach for an | ||
| # un-notarized app. (Homebrew does NOT remove quarantine by default.) | ||
| postflight do | ||
| system_command "/usr/bin/xattr", | ||
| args: ["-dr", "com.apple.quarantine", "#{appdir}/radioactive-ralph.app"], | ||
| sudo: false | ||
|
Comment on lines
+19
to
+26
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🔒 Security & Privacy | 🟠 Major | 🏗️ Heavy lift 🧩 Analysis chain🏁 Script executed: #!/bin/bash
set -eu
printf '%s\n' '--- cask ---'
cat -n Casks/radioactive-ralph-gui.rb
printf '%s\n' '--- related references ---'
rg -n -i --glob '!vendor' --glob '!node_modules' \
'radioactive-ralph(\.app| GUI|gui)|Radioactive Ralph\.app|com\.apple\.quarantine|postflight|xattr' .
printf '%s\n' '--- tracked filenames ---'
git ls-files | rg -i 'radioactive|ralph|homebrew|cask|validate_homebrew'Repository: jbcom/pkgs Length of output: 2632 🌐 Web query:
💡 Result: In macOS, the com.apple.quarantine extended attribute (xattr) acts as the primary trigger for Gatekeeper security checks [1][2]. When a file is downloaded from the internet by a compliant application (like Safari, Mail, or many web browsers), the OS automatically attaches this attribute [1][3][2]. Role of com.apple.quarantine and Gatekeeper: 1. Trigger: The presence of the com.apple.quarantine xattr signals to macOS that the file has originated from an untrusted network source [3][4]. 2. Validation: Upon the first launch of an app or executable with this attribute, Gatekeeper initiates a security assessment [1][5]. This includes verifying code signatures, checking for notarization, and scanning for known malware signatures via XProtect [6][1][7]. 3. Execution Policy: * Ad hoc signed, unnotarized apps: When an app is quarantined and lacks proper notarization, Gatekeeper will by default refuse to launch it [1][8]. Users may be presented with a warning dialog; in many cases, the standard double-click will fail, and the user must explicitly bypass this (e.g., by right-clicking and selecting Open in Finder) or override it in System Settings (Privacy & Security) [6][9][8]. * Absence of xattr: Files lacking this attribute (e.g., those created locally, compiled yourself, or downloaded via certain command-line tools like curl that do not set the flag) are generally exempt from initial Gatekeeper provenance and notarization checks [1][2][4]. Management of the attribute: The xattr can be inspected or removed using the terminal command xattr [2][10]. * View attribute: xattr -p com.apple.quarantine /path/to/app [1] * Remove attribute: xattr -d com.apple.quarantine /path/to/app [1][2] Removing the quarantine attribute effectively bypasses Gatekeeper checks for that specific file, as it eliminates the trigger that initiates the validation process [1][2][4]. Apple maintains these protections to ensure that software has been vetted, and disabling them—especially for untrusted binaries—removes a critical layer of defense against malware [1][9][7]. Citations:
🏁 Script executed: #!/bin/bash
set -eu
printf '%s\n' '--- release metadata ---'
curl -fsSL https://api.github.com/repos/jbcom/radioactive-ralph/releases/tags/v0.35.6 \
| jq '{tag_name, draft, prerelease, assets: [.assets[] | {name, browser_download_url, size}]}' || true
printf '%s\n' '--- repository validation ---'
cat -n test/validate_homebrew_test.rb
printf '%s\n' '--- validator ---'
cat -n scripts/validate-homebrew.rbRepository: jbcom/pkgs Length of output: 10525 🌐 Web query:
💡 Result: In Homebrew Cask, there is no specific "quarantine xattr app stanza" provided for general use in Cask files. Homebrew manages application quarantining and extended attributes ( Citations:
🏁 Script executed: #!/bin/bash
set -eu
printf '%s\n' '--- upstream repository metadata ---'
curl -fsSL https://api.github.com/repos/jbcom/radioactive-ralph \
| jq '{default_branch, archived, pushed_at, html_url}' || true
printf '%s\n' '--- releases ---'
curl -fsSL 'https://api.github.com/repos/jbcom/radioactive-ralph/releases?per_page=10' \
| jq '[.[] | {tag_name, draft, prerelease, assets: [.assets[].name]}]' || true
printf '%s\n' '--- tags ---'
curl -fsSL 'https://api.github.com/repos/jbcom/radioactive-ralph/tags?per_page=20' \
| jq '[.[] | {name, commit: .commit.sha}]' || true
printf '%s\n' '--- likely bundle references in upstream default branch ---'
branch="$(curl -fsSL https://api.github.com/repos/jbcom/radioactive-ralph | jq -r .default_branch)"
curl -fsSL "https://api.github.com/repos/jbcom/radioactive-ralph/git/trees/${branch}?recursive=1" \
| jq -r '.tree[]?.path' \
| rg -i '(\.app|dmg|electron|tauri|bundle|macos|darwin)' || trueRepository: jbcom/pkgs Length of output: 4020 🌐 Web query:
💡 Result: To remove the quarantine attribute from an application on macOS—a common requirement for apps downloaded outside the Mac App Store—you should use the xattr command line tool. This is a system-level operation independent of Homebrew. You can remove the quarantine attribute from an application by running the following command in your terminal: xattr -r -d com.apple.quarantine /path/to/your/app.app Explanation of the command: - xattr: The utility used to display and manipulate extended attributes of filesystem objects. - -r: Applies the operation recursively to the directory and its contents (important for app bundles). - -d: Deletes the specified extended attribute. - com.apple.quarantine: The name of the quarantine attribute applied by macOS Gatekeeper. - /path/to/your/app.app: The path to the application bundle you wish to unquarantine. Homebrew itself does not provide a built-in command to strip quarantine attributes from Casks; its configuration stanzas, such as uninstall or zap, are designed for removing files and resources during the uninstallation process, not for modifying security attributes of installed applications [1]. Citations: 🏁 Script executed: #!/bin/bash
set -eu
tag='v0.35.6'
repo='jbcom/radioactive-ralph'
printf '%s\n' '--- tagged packaging tree ---'
curl -fsSL "https://api.github.com/repos/${repo}/git/trees/${tag}?recursive=1" \
| jq -r '.tree[]?.path' \
| rg -i '(^|/)(packaging/macos|.*(dmg|app|bundle|manifest|sign|notari|entitle).*)' \
| head -200
printf '%s\n' '--- tagged packaging files ---'
for path in \
packaging/macos \
scripts/ci/finalize_gui_bundle.sh \
scripts/ci/prepare_package_manifests_bundle.sh
do
url="https://raw.githubusercontent.com/${repo}/${tag}/${path}"
printf '\n--- %s ---\n' "$path"
curl -fsSL "$url" | rg -n -i \
'app|bundle|dmg|sign|notari|codesign|xattr|quarantine|product_name|display_name' || true
doneRepository: jbcom/pkgs Length of output: 5465 🏁 Script executed: #!/bin/bash
set -eu
printf '%s\n' '--- tag commit verification ---'
curl -fsSL https://api.github.com/repos/jbcom/radioactive-ralph/commits/e48e2bf9cc101f89e8a438fc6f4367b982d808e0 \
| jq '{sha, html_url, commit: {message: .commit.message}}'Repository: jbcom/pkgs Length of output: 477 Do not remove the quarantine attribute automatically. This command recursively removes 🤖 Prompt for AI AgentsSource: MCP tools |
||
| end | ||
|
|
||
| caveats <<~EOS | ||
| Install the CLI cask, start the supervisor, and register a project: | ||
|
|
||
| brew install --cask radioactive-ralph | ||
| radioactive_ralph service install | ||
| cd /path/to/repo && radioactive_ralph --init | ||
|
|
||
| The desktop app and the terminal UI are peers on the same local supervisor. | ||
| EOS | ||
| end | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,50 @@ | ||
| # This file was generated by GoReleaser. DO NOT EDIT. | ||
| cask "radioactive-ralph" do | ||
| version "0.35.6" | ||
|
|
||
| on_macos do | ||
| on_intel do | ||
| sha256 "6052a41f4784a847c5601c730d634a443203a17d5f8e4de9615ed5207b67ab69" | ||
| url "https://github.com/jbcom/radioactive-ralph/releases/download/v#{version}/radioactive_ralph_#{version}_darwin_amd64.tar.gz" | ||
|
Comment on lines
+7
to
+8
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift 🧩 Analysis chain🏁 Script executed: #!/bin/bash
set -u
printf '%s\n' '--- cask: radioactive-ralph ---'
cat -n Casks/radioactive-ralph.rb
printf '%s\n' '--- cask: radioactive-ralph-gui ---'
cat -n Casks/radioactive-ralph-gui.rb
printf '%s\n' '--- bucket: radioactive-ralph ---'
cat -n bucket/radioactive-ralph.json
printf '%s\n' '--- release assets: v0.35.6 ---'
curl -LfsS \
-H 'Accept: application/vnd.github+json' \
'https://api.github.com/repos/jbcom/radioactive-ralph/releases/tags/v0.35.6' |
jq -r '.assets[] | [.name, .browser_download_url, .size] | `@tsv`'Repository: jbcom/pkgs Length of output: 5367 🏁 Script executed: #!/bin/bash
set -u
urls=(
"https://github.com/jbcom/radioactive-ralph/releases/download/v0.35.6/radioactive_ralph_0.35.6_darwin_amd64.tar.gz"
"https://github.com/jbcom/radioactive-ralph/releases/download/v0.35.6/radioactive_ralph_0.35.6_darwin_arm64.tar.gz"
"https://github.com/jbcom/radioactive-ralph/releases/download/v0.35.6/radioactive_ralph_0.35.6_linux_amd64.tar.gz"
"https://github.com/jbcom/radioactive-ralph/releases/download/v0.35.6/radioactive_ralph_0.35.6_linux_arm64.tar.gz"
"https://github.com/jbcom/radioactive-ralph/releases/download/v0.35.6/radioactive-ralph_0.35.6_darwin_arm64.dmg"
"https://github.com/jbcom/radioactive-ralph/releases/download/v0.35.6/radioactive-ralph_0.35.6_darwin_amd64.dmg"
"https://github.com/jbcom/radioactive-ralph/releases/download/v0.35.6/radioactive_ralph_0.35.6_windows_amd64.zip"
)
printf '%s\n' '--- referenced download URLs ---'
for url in "${urls[@]}"; do
curl -LIsS --max-time 20 -o /dev/null \
-w '%{http_code}\t%{url_effective}\t' "$url"
printf '%s\n' "${url##*/}"
done
printf '%s\n' '--- release lookup ---'
curl -sS -o /tmp/ralph-release.json -w 'HTTP %{http_code}\n' \
-H 'Accept: application/vnd.github+json' \
'https://api.github.com/repos/jbcom/radioactive-ralph/releases/tags/v0.35.6'
if [ -s /tmp/ralph-release.json ]; then
jq -r 'if .message then .message else (.tag_name + "\t" + (.assets | length | tostring)) end' \
/tmp/ralph-release.json
fi
printf '%s\n' '--- matching tags ---'
curl -fsSL \
-H 'Accept: application/vnd.github+json' \
'https://api.github.com/repos/jbcom/radioactive-ralph/tags?per_page=100' |
jq -r '.[].name' | grep -E '^(v)?0\.35\.6$' || true
printf '%s\n' '--- latest releases ---'
curl -fsSL \
-H 'Accept: application/vnd.github+json' \
'https://api.github.com/repos/jbcom/radioactive-ralph/releases?per_page=10' |
jq -r '.[] | [.tag_name, .draft, .prerelease] | `@tsv`'Repository: jbcom/pkgs Length of output: 1598 Publish the seven v0.35.6 release assets. The 📍 Affects 3 files
🤖 Prompt for AI AgentsSource: MCP tools |
||
| end | ||
| on_arm do | ||
| sha256 "bf8c80c093b9856d76fca142ce8fa936c74733f60a3823f601394099ee91331b" | ||
| url "https://github.com/jbcom/radioactive-ralph/releases/download/v#{version}/radioactive_ralph_#{version}_darwin_arm64.tar.gz" | ||
| end | ||
| end | ||
|
|
||
| on_linux do | ||
| on_intel do | ||
| sha256 "c781655efb0df54f53ac750c8751d7296922dfb1b97c261f40671048e4cdda3e" | ||
| url "https://github.com/jbcom/radioactive-ralph/releases/download/v#{version}/radioactive_ralph_#{version}_linux_amd64.tar.gz" | ||
| end | ||
| on_arm do | ||
| sha256 "691027809962c0ea9d62da0a8fc75692e39370ebbf2b627e24ec0e0e346915f0" | ||
| url "https://github.com/jbcom/radioactive-ralph/releases/download/v#{version}/radioactive_ralph_#{version}_linux_arm64.tar.gz" | ||
| end | ||
| end | ||
|
|
||
| name "radioactive-ralph" | ||
| desc "Supervised-execution runtime for local AI-agent CLIs" | ||
| homepage "https://github.com/jbcom/radioactive-ralph" | ||
|
|
||
| livecheck do | ||
| skip "Auto-generated on release." | ||
| end | ||
|
|
||
| binary "radioactive_ralph" | ||
|
|
||
| # No zap stanza required | ||
|
|
||
| caveats <<~EOS | ||
| Next step — start the supervisor, then register a project: | ||
|
|
||
| radioactive_ralph service install | ||
| radioactive_ralph --init | ||
|
|
||
| Run `radioactive_ralph` inside a registered project for the | ||
| read-only TUI once the supervisor is running. Full docs: | ||
|
|
||
| https://jonbogaty.com/radioactive-ralph/getting-started/ | ||
| EOS | ||
| end | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,22 +1,22 @@ | ||
| { | ||
| "version": "0.8.2", | ||
| "version": "0.35.6", | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
This manifest bump and the two new casks leave AGENTS.md reference: AGENTS.md:L73-L77 Useful? React with 👍 / 👎. |
||
| "architecture": { | ||
| "64bit": { | ||
| "url": "https://github.com/jbcom/radioactive-ralph/releases/download/v0.8.2/radioactive_ralph_0.8.2_windows_amd64.zip", | ||
| "url": "https://github.com/jbcom/radioactive-ralph/releases/download/v0.35.6/radioactive_ralph_0.35.6_windows_amd64.zip", | ||
| "bin": [ | ||
| "radioactive_ralph.exe" | ||
| ], | ||
| "hash": "25b629c2f384da7c2b6fc7ef81018fe557d81485920b3c532e69e57daa378375" | ||
| "hash": "3f0481d3c228ffbad272c9d66c4210c9f66dad7c91eab4ef80eb78d37c4503f5" | ||
| } | ||
| }, | ||
| "homepage": "https://github.com/jbcom/radioactive-ralph", | ||
| "license": "MIT", | ||
| "description": "Binary-first repo runtime with many Ralph personalities", | ||
| "description": "Native Windows foreground supervisor/client control plane only", | ||
| "post_install": [ | ||
| "Write-Host 'Next step — initialize a repo and let Fixit seed the first plan:'", | ||
| "Write-Host ' radioactive_ralph init'", | ||
| "Write-Host ' radioactive_ralph run --variant fixit --advise --topic bootstrap'", | ||
| "Write-Host ' radioactive_ralph service start'", | ||
| "Write-Host 'See https://jonbogaty.com/radioactive-ralph/getting-started/ for the full setup flow.'" | ||
| "Write-Host 'Native Windows provides only the foreground supervisor/client control plane:'", | ||
| "Write-Host ' radioactive_ralph --supervisor'", | ||
| "Write-Host 'Native Windows SCM install/start and provider-backed workers are disabled.'", | ||
| "Write-Host 'For provider-backed execution, install the Linux build inside WSL2 and use systemd --user.'", | ||
| "Write-Host 'See https://jonbogaty.com/radioactive-ralph/getting-started/ for the full platform-specific setup flow.'" | ||
| ] | ||
| } | ||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🩺 Stability & Availability | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
Repository: jbcom/pkgs
Length of output: 7353
🏁 Script executed:
Repository: jbcom/pkgs
Length of output: 6060
🏁 Script executed:
Repository: jbcom/pkgs
Length of output: 9926
🏁 Script executed:
Repository: jbcom/pkgs
Length of output: 455
🌐 Web query:
github.com/jbcom/radioactive-ralph v0.35.6 release assets radioactive ralph app bundle name💡 Result:
For the radioactive-ralph project (hosted at github.com/jbcom/radioactive-ralph), the application binary is named radioactive-ralph (using a hyphen) [1]. While the CLI command itself is often invoked as radioactive_ralph (using an underscore) [2][3][4], the underlying binary file name, particularly in the context of the desktop GUI packaging, is radioactive-ralph [1]. Regarding release assets, the project produces multiple platform-specific bundles for its desktop GUI, including.app (macOS),.AppImage (Linux), and.exe (Windows) [5][1][6]. These are typically installed via Homebrew casks (e.g., radioactive-ralph-gui for the desktop app) or downloaded directly from the GitHub releases page [5][6][7]. The project does not use a singular app bundle name across all platforms; rather, it uses a matrix of artifacts generated during its automated release process [1][7].
Citations:
🏁 Script executed:
Repository: jbcom/pkgs
Length of output: 798
Use a published release and matching DMG metadata. The v0.35.6 release and both referenced DMG URLs return 404, so this cask cannot install and its bundle name and SHA-256 values cannot be validated. Set
version, URLs, and checksums to a published release, then alignappand postflight with the DMG bundle name.🤖 Prompt for AI Agents