New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

ralphy-cli

Package Overview
Dependencies
Maintainers
1
Versions
16
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

ralphy-cli

Autonomous AI Coding Loop - Supports Claude Code, OpenCode, Codex, Cursor, Qwen-Code, Factory Droid, GitHub Copilot and Gemini CLI

latest
Source
npmnpm
Version
4.7.2
Version published
Maintainers
1
Created
Source

Ralphy

npm version

Join our Discord - Questions? Want to contribute? Join the community!

Ralphy

Autonomous AI coding loop. Runs AI agents on tasks until done.

Install

npm install -g ralphy-cli

# Then use anywhere
ralphy "add login button"
ralphy --prd PRD.md

Two Modes

Single task - just tell it what to do:

ralphy "add dark mode"
ralphy "fix the auth bug"

Task list - work through a PRD:

ralphy              # uses PRD.md
ralphy --prd tasks.md

Project Config

Optional. Stores rules the AI must follow.

ralphy --init              # auto-detects project settings
ralphy --config            # view config
ralphy --add-rule "use TypeScript strict mode"

Creates .ralphy/config.yaml:

project:
  name: "my-app"
  language: "TypeScript"
  framework: "Next.js"

commands:
  test: "npm test"
  lint: "npm run lint"
  build: "npm run build"

rules:
  - "use server actions not API routes"
  - "follow error pattern in src/utils/errors.ts"

boundaries:
  never_touch:
    - "src/legacy/**"
    - "*.lock"

Rules apply to all tasks (single or PRD).

AI Engines

ralphy              # Claude Code (default)
ralphy --opencode   # OpenCode
ralphy --cursor     # Cursor
ralphy --codex      # Codex
ralphy --qwen       # Qwen-Code
ralphy --droid      # Factory Droid
ralphy --copilot    # GitHub Copilot
ralphy --gemini     # Gemini CLI

Model Override

Override the default model for any engine:

ralphy --model sonnet "add feature"                    # use sonnet with Claude
ralphy --sonnet "add feature"                          # shortcut for above
ralphy --opencode --model opencode/glm-4.7-free "task" # custom OpenCode model
ralphy --qwen --model qwen-max "build api"             # custom Qwen model

Engine-Specific Arguments

Pass additional arguments to the underlying engine CLI using -- separator:

# Pass copilot-specific arguments
ralphy --copilot --model "claude-opus-4.5" --prd PRD.md -- --allow-all-tools --allow-all-urls --stream on

# Pass claude-specific arguments
ralphy --claude "add feature" -- --no-permissions-prompt

# Works with any engine
ralphy --cursor "fix bug" -- --custom-arg value

Everything after -- is passed directly to the engine CLI without interpretation.

Task Sources

Markdown file (default):

ralphy --prd PRD.md
## Tasks
- [ ] create auth
- [ ] add dashboard
- [x] done task (skipped)

Markdown folder (for large projects):

ralphy --prd ./prd/

When pointing to a folder, Ralphy reads all .md files and aggregates tasks:

prd/
  backend.md      # - [ ] create user API
  frontend.md     # - [ ] add login page
  infra.md        # - [ ] setup CI/CD

Tasks are tracked per-file so completion updates the correct file.

YAML:

ralphy --yaml tasks.yaml
tasks:
  - title: create auth
    completed: false
  - title: add dashboard
    completed: false

JSON:

ralphy --json PRD.json
{
  "tasks": [
    {
      "title": "create auth",
      "completed": false,
      "parallel_group": 1,
      "description": "Optional details"
    }
  ]
}

Titles must be unique.

GitHub Issues:

ralphy --github owner/repo
ralphy --github owner/repo --github-label "ready"

Parallel Execution

ralphy --parallel                  # 3 agents default
ralphy --parallel --max-parallel 5 # 5 agents

Each agent gets isolated worktree + branch:

Agent 1 → /tmp/xxx/agent-1 → ralphy/agent-1-create-auth
Agent 2 → /tmp/xxx/agent-2 → ralphy/agent-2-add-dashboard
Agent 3 → /tmp/xxx/agent-3 → ralphy/agent-3-build-api

Without --create-pr: auto-merges back to base branch, AI resolves conflicts. With --create-pr: keeps branches, creates PRs. With --no-merge: keeps branches without merging or creating PRs.

YAML parallel groups - control execution order:

tasks:
  - title: Create User model
    parallel_group: 1
  - title: Create Post model
    parallel_group: 1  # same group = runs together
  - title: Add relationships
    parallel_group: 2  # runs after group 1

Branch Workflow

ralphy --branch-per-task                # branch per task
ralphy --branch-per-task --create-pr    # + create PRs
ralphy --branch-per-task --draft-pr     # + draft PRs
ralphy --base-branch main               # branch from main

Branch naming: ralphy/<task-slug>

Browser Automation

Ralphy can use agent-browser to automate browser interactions during tasks.

ralphy "test the login flow" --browser    # force enable
ralphy "add checkout" --no-browser        # force disable
ralphy "build feature"                    # auto-detect (default)

When enabled, the AI gets browser commands:

  • agent-browser open <url> - navigate to URL
  • agent-browser snapshot - get element refs (@e1, @e2)
  • agent-browser click @e1 - click element
  • agent-browser type @e1 "text" - type into input
  • agent-browser screenshot <file> - capture screenshot

Use cases:

  • Testing UI after implementing features
  • Verifying deployments
  • Form filling and workflow testing

Config (.ralphy/config.yaml):

capabilities:
  browser: "auto"  # "auto", "true", or "false"

Webhook Notifications

Get notified when sessions complete via Discord, Slack, or custom webhooks.

Config (.ralphy/config.yaml):

notifications:
  discord_webhook: "https://discord.com/api/webhooks/..."
  slack_webhook: "https://hooks.slack.com/services/..."
  custom_webhook: "https://your-api.com/webhook"

Notifications include task completion counts and status (completed/failed).

Sandbox Mode

For large repos with big dependency directories, sandbox mode is faster than git worktrees:

ralphy --parallel --sandbox

How it works:

  • Symlinks read-only dependencies (node_modules, .git, vendor, .venv, .pnpm-store, .yarn, .cache)
  • Copies source files that agents might modify (src/, app/, lib/, config files, etc.)

Why use it:

  • Avoids duplicating gigabytes of node_modules across worktrees
  • Much faster sandbox creation for large monorepos
  • Changes sync back to original directory after each task

When to use worktrees instead (default):

  • Need full git history access in each sandbox
  • Running git commands that require a real repo
  • Smaller repos where worktree overhead is minimal

Parallel execution reliability:

  • If worktree operations fail (e.g., nested worktree repos), ralphy falls back to sandbox mode automatically
  • Retryable rate-limit or quota errors are detected and deferred for later retry
  • Local changes are stashed before the merge phase and restored after
  • Agents should not modify PRD files, .ralphy/progress.txt, .ralphy-worktrees, or .ralphy-sandboxes

Options

FlagWhat it does
--prd PATHtask file or folder (auto-detected, default: PRD.md)
--yaml FILEYAML task file
--json FILEJSON task file
--github REPOuse GitHub issues
--github-label TAGfilter issues by label
--sync-issue Nsync PRD progress to GitHub issue #N
--model NAMEoverride model for any engine
--sonnetshortcut for --claude --model sonnet
--parallelrun parallel
--max-parallel Nmax agents (default: 3)
--sandboxuse lightweight sandboxes instead of git worktrees
--no-mergeskip auto-merge in parallel mode
--branch-per-taskbranch per task
--base-branch NAMEbase branch
--create-prcreate PRs
--draft-prdraft PRs
--no-testsskip tests
--no-lintskip lint
--fastskip tests + lint
--no-commitdon't auto-commit
--max-iterations Nstop after N tasks
--max-retries Nretries per task (default: 3)
--retry-delay Nseconds between retries
--dry-runpreview only
--browserenable browser automation
--no-browserdisable browser automation
-v, --verbosedebug output
--initsetup .ralphy/ config
--configshow config
--add-rule "rule"add rule to config

Requirements

Required:

npm version (ralphy-cli):

  • Node.js 18+ or Bun

Bash version (ralphy.sh):

  • jq
  • yq (optional, for YAML tasks)
  • bc (optional, for cost calc)

Both versions:

  • gh (optional, for GitHub issues / --create-pr)
  • agent-browser (optional, for --browser)

Engine Details

EngineCLIPermissionsOutput
Claudeclaude--dangerously-skip-permissionstokens + cost
OpenCodeopencodefull-autotokens + cost
CodexcodexN/Atokens
Cursoragent--forceduration
Qwenqwen--approval-mode yolotokens
Droiddroid exec--auto mediumduration
Copilotcopilot--yolotokens
Geminigemini--yolotokens + cost

When an engine exits non-zero, ralphy includes the last lines of CLI output in the error message to make debugging easier.

License

MIT

Keywords

ai

FAQs

Package last updated on 05 Feb 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts