feat: Add online installer and auto-config for autoHandoff

[jellydn]

What

This PR introduces an online installer script to simplify the setup of Ralph. It also enables the installer to automatically configure the recommended setting for users.

Why

• To make it easier and faster for users to start using Ralph.
• To ensure that the feature is enabled by default, improving the out-of-the-box experience.
• To allow users to easily install the PRD and Ralph skills globally.

How

Run the installer script:

curl -sSL https://raw.githubusercontent.com/jellydn/ralph/feature/online-installer/install.sh | bash

1. Verify that the scripts/ralph directory is created with ralph.sh and prompt.md.
2. Check that scripts/ralph/ralph.sh is executable.
3. Verify that your ~/.config/amp/settings.json file now includes the amp.experimental.autoHandoff setting.
4. Install skills globally and verify they are in ~/.config/amp/skills/.

[snarktank]

Thanks @jellydn - can you share a video of you using this and verifying it works?

[jellydn]

@snarktank Sure, here you are: https://s.itman.fyi/G0bNBgJJ

[snarktank]

Hey, thanks so much for putting this together! Really appreciate you taking the time to contribute.

I love the idea of making installation easier, but I have some security concerns with the curl | bash pattern that I'm not comfortable shipping:

• If the repo were ever compromised, everyone installing would automatically run malicious code
• No way for users to verify the script before it modifies their system
• Pulling from main means untested changes could go out immediately

These are industry-wide concerns with this pattern, not anything specific to your implementation.

Would you be open to reworking this to either:

1. Provide a download-then-run approach with checksums, or
2. Use versioned releases instead of main?

Totally understand if you don't have time for that - just wanted to explain why I can't merge as-is. Thanks again for trying to improve the repo.

[jellydn]

Hi, I see your point and here is the plan Are you okay with this approach? Thanks.

[jellydn]

FYI - Tested on https://github.com/jellydn/ralph/releases/tag/v1.0.0-beta.1

[snarktank]

Thanks for putting together this plan and testing it! This looks good to me.

One small request before I merge: can you add a download-verify-run option to the README alongside the curl | bash? Something like:

# Or download and inspect first
curl -O https://github.com/snarktank/ralph/releases/latest/download/install-from-release.sh
less install-from-release.sh  # inspect
bash install-from-release.sh

That way users who want to verify before running have a clear path. Once that's in, I'll merge.

[jellydn]

Sure @snarktank No problem, thanks.