muster-agent-bin
LOW
maintainer gaougalos
0 votes
scanned 2026-10-26 07:44:04.928873
Why flagged
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
PKGBUILD
1
# Maintainer: gaou-piou <i.am.piou@gmail.com>
2
3
pkgname=muster-agent-bin
4
pkgver=0.3.13
5
pkgrel=1
6
pkgdesc='Agentic development environment (ADE) for Codex, Claude Code, OpenCode and local models'
7
arch=('x86_64')
8
url='https://themuster.dev'
9
license=('MIT')
10
depends=('gtk3' 'nss' 'libxss' 'libxtst' 'alsa-lib' 'libsecret' 'libnotify'
11
'at-spi2-core' 'xdg-utils')
12
optdepends=('libappindicator-gtk3: tray icon support'
13
'gnome-keyring: store credentials in the GNOME keyring'
14
'kwallet: store credentials in KWallet')
15
provides=('muster-agent')
16
conflicts=('muster-agent')
17
install=muster-agent-bin.install
18
options=('!strip' '!debug')
19
20
# Upstream ships Linux builds on GitHub releases under agent-v<version> tags, as
21
# a deb, a tarball and an AppImage -- all public, no gatekeeping (unlike
22
# codemeyo-bin, which hides behind an e-mail form and a file-id API).
23
#
24
# The deb is used as the source because it is the layout upstream actually
25
# maintains for Linux systems: /opt/muster-agent, a launcher that keeps the
26
# Chromium sandbox on wherever it can, icons in every hicolor size, a desktop
27
# entry, and an AppArmor profile in resources/. Repackaging it means no fuse2
28
# dependency and no AppImage mount at runtime, at the cost of a ~290 MB
29
# installed tree instead of a single 117 MB AppImage. The tarball asset is the
30
# same payload without the deb metadata; the deb is preferred because it also
31
# documents the runtime dependencies (see depends= above).
32
_deb="Muster-Agent-${pkgver}-linux-amd64.deb"
33
_url="https://github.com/musterhq/muster-code/releases/download/agent-v${pkgver}"
34
35
source=("${_deb}::${_url}/${_deb}"
36
"LICENSE::https://raw.githubusercontent.com/musterhq/muster-code/agent-v${pkgver}/LICENSE")
37
sha256sums=('0b923eb597da87f5c03baa9ce4239445734f4c19821573cbd1bb586129dad010'
38
'8be9dc5eea50ccc91e9c3be00ffd5c973531f2f0a7098e9bd979b4355523661e')
39
40
prepare() {
41
cd "${srcdir}"
42
# A .deb is an ar archive holding tar members; makepkg does not unpack it, so
43
# pull out data.tar.xz.
44
bsdtar -xf "${_deb}" data.tar.xz
45
}
46
47
package() {
48
# Unpack upstream's payload as-is: /opt/muster-agent (with resources/, the
49
# AppArmor profile and chrome-sandbox), the desktop entry and every hicolor
50
# icon size. --no-same-owner because the archive carries Debian uid/gid.
51
bsdtar -xf "${srcdir}/data.tar.xz" -C "${pkgdir}" --no-same-owner
52
53
# Debian convention; Arch has no /usr/share/doc and pacman cannot own files
54
# outside the package there anyway.
55
rm -rf "${pkgdir}/usr/share/doc"
56
57
# The deb's postinst creates this link (through update-alternatives there).
58
# It points at the launcher script, not at the Electron binary, so the
59
# sandbox detection keeps working.
60
install -dm755 "${pkgdir}/usr/bin"
61
ln -s '/opt/muster-agent/muster-agent' "${pkgdir}/usr/bin/muster-agent"
62
63
install -Dm644 "${srcdir}/LICENSE" \
64
"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
65
}
66
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-26 07:44:04 | Low | 1 |