
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
Put your AI coding agent on autopilot.
Point Ralphai at a GitHub issue. It drives your AI coding agent through fresh-session iterations — with branch isolation, build/test feedback loops, and stuck detection — until the PR is ready.
AI coding agents get worse the longer they run. As the conversation grows, the model drops older context: it forgets what it tried, repeats mistakes, and drifts.
Ralphai avoids this by starting each iteration with a fresh agent session: just the plan and a progress log. No conversation history to lose. No drift.
npx ralphai init --yes # auto-detect agent and project setup
ralphai run 42 # run GitHub issue #42
Ralphai creates an isolated worktree, drives your agent through build/test feedback loops, and opens a draft PR when done. init --yes auto-detects installed agents (checking Claude Code and OpenCode first) and your project's build/test commands.
Requires Node.js 18+ (or Bun/Deno) and a supported CLI agent.
npm install -g ralphai # install the CLI
npx skills add mfaux/ralphai -g # install agent skills (recommended)
Use the included skills to turn ideas into GitHub issues your agent can execute:
write-a-prd, then prd-to-issues to decompose it into labeled sub-issues. Ralphai processes them sequentially on one branch and opens a single aggregate PR.triage-issue to investigate and create a standalone issue. Each gets its own branch and PR.Both skills label the issues automatically (ralphai-prd / ralphai-standalone). You can also label issues by hand. Labels are configurable.
ralphai run 42 # run a specific issue (PRD or standalone)
ralphai run --drain # process all eligible issues until the queue is empty
ralphai run --dry-run # preview without changing anything
Each run creates an isolated worktree on a conventional <type>/<slug> branch, iterates the agent with fresh build/test feedback, and opens a draft PR when done. Stuck sub-issues are skipped so progress continues.
Ralphai surfaces extracted learnings in the draft PR — patterns the agent discovered during implementation. Promote useful ones to AGENTS.md or skill docs. More on learnings →
Running bare ralphai opens a TUI to browse the pipeline, pick issues, and launch runs without memorizing subcommands.
You can also drive Ralphai with local markdown files instead of GitHub issues — see Workflows → Local plan files.
ralphai # open the interactive menu
ralphai status # see what's queued, running, and completed
ralphai stop # stop the active runner (or --all)
ralphai run --resume # commit dirty state and continue
ralphai doctor # validate setup (agent, feedback, config, git)
ralphai reset # reset stuck plans
ralphai clean # remove archived plans and orphaned worktrees
Press Ctrl-C during a headless run to stop cleanly after the current iteration. Work is preserved and ralphai run picks up where it left off.
Ralphai works with any CLI agent that accepts a prompt argument. Claude Code and OpenCode are actively tested.
| Agent | Command | Status |
|---|---|---|
| Claude Code | claude -p | Tested |
| OpenCode | opencode run --agent build | Tested |
| Codex | codex exec | Untested |
| Gemini CLI | gemini -p | Untested |
| Aider | aider --message | Untested |
| Goose | goose run -t | Untested |
| Kiro | kiro-cli chat --no-interactive | Untested |
| Amp | amp -x | Untested |
MIT
FAQs
Autonomous task runner for AI coding agents
We found that ralphai demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.