From d0247748ba48476c3102d5c9286ba5f94b4ada82 Mon Sep 17 00:00:00 2001
From: Sebastian Mendel <github@sebastianmendel.de>
Date: Mon, 11 May 2026 08:31:12 +0200
Subject: [PATCH] feat(catalog): add mlr, gh-aw, and gh-aw-firewall
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add three new GitHub-release-binary catalog entries:

- **mlr** (Miller): awk/sed/cut/jq for CSV, TSV, JSON, and JSON Lines.
  Standard tar.gz layout (johnkerl/miller, v6.18.1+).
- **gh-aw**: GitHub Agentic Workflows — compiles natural-language
  Markdown workflow definitions into hardened GitHub Actions
  workflows. Direct-binary download (no archive), following the
  direnv pattern. Upstream's preferred install path is
  'gh extension install github/gh-aw'; documented in notes since
  gh extensions are not yet a modeled install_method.
- **gh-aw-firewall** (binary 'awf'): Squid-proxy egress firewall
  for sandboxing AI agent commands in Docker. Direct-binary
  download; uses 'x64' (not 'amd64') in asset names.

Catalog grows from 93 to 96 entries. All 598 catalog/installer
tests pass; smoke test green.

Signed-off-by: Sebastian Mendel <github@sebastianmendel.de>
---
 catalog/gh-aw-firewall.json | 21 +++++++++++++++++++++
 catalog/gh-aw.json          | 21 +++++++++++++++++++++
 catalog/mlr.json            | 21 +++++++++++++++++++++
 3 files changed, 63 insertions(+)
 create mode 100644 catalog/gh-aw-firewall.json
 create mode 100644 catalog/gh-aw.json
 create mode 100644 catalog/mlr.json

diff --git a/catalog/gh-aw-firewall.json b/catalog/gh-aw-firewall.json
new file mode 100644
index 0000000..afebe25
--- /dev/null
+++ b/catalog/gh-aw-firewall.json
@@ -0,0 +1,21 @@
+{
+  "name": "gh-aw-firewall",
+  "category": "platform",
+  "install_method": "github_release_binary",
+  "description": "GitHub Agentic Workflows Firewall: Squid-proxy-based egress firewall that sandboxes AI agent commands in a Docker container with a domain allowlist",
+  "homepage": "https://github.com/github/gh-aw-firewall",
+  "github_repo": "github/gh-aw-firewall",
+  "binary_name": "awf",
+  "download_url_template": "https://github.com/github/gh-aw-firewall/releases/download/{version}/awf-linux-{arch}",
+  "arch_map": {
+    "x86_64": "x64",
+    "aarch64": "arm64"
+  },
+  "notes": "Direct binary download, not an archive. Upstream uses 'x64' (not 'amd64') in asset names. Requires Docker at runtime to launch the sandboxed Squid proxy.",
+  "tags": [
+    "github",
+    "ci",
+    "agentic",
+    "security"
+  ]
+}
diff --git a/catalog/gh-aw.json b/catalog/gh-aw.json
new file mode 100644
index 0000000..f4e34b3
--- /dev/null
+++ b/catalog/gh-aw.json
@@ -0,0 +1,21 @@
+{
+  "name": "gh-aw",
+  "category": "platform",
+  "install_method": "github_release_binary",
+  "description": "GitHub Agentic Workflows: gh extension that compiles natural-language Markdown workflow definitions into hardened GitHub Actions workflows",
+  "homepage": "https://github.com/github/gh-aw",
+  "github_repo": "github/gh-aw",
+  "binary_name": "gh-aw",
+  "download_url_template": "https://github.com/github/gh-aw/releases/download/{version}/linux-{arch}",
+  "arch_map": {
+    "x86_64": "amd64",
+    "aarch64": "arm64",
+    "armv7l": "arm"
+  },
+  "notes": "Direct binary download, not an archive. Upstream's preferred install path is 'gh extension install github/gh-aw' (requires the gh CLI). The catalog uses a standalone binary install since gh extensions are not yet modeled as an install_method.",
+  "tags": [
+    "github",
+    "ci",
+    "agentic"
+  ]
+}
diff --git a/catalog/mlr.json b/catalog/mlr.json
new file mode 100644
index 0000000..d74f20c
--- /dev/null
+++ b/catalog/mlr.json
@@ -0,0 +1,21 @@
+{
+  "name": "mlr",
+  "category": "general",
+  "install_method": "github_release_binary",
+  "description": "Like awk/sed/cut/jq for name-indexed data such as CSV, TSV, JSON and JSON Lines",
+  "homepage": "https://miller.readthedocs.io/",
+  "github_repo": "johnkerl/miller",
+  "binary_name": "mlr",
+  "download_url_template": "https://github.com/johnkerl/miller/releases/download/{version}/miller-{version_nov}-linux-{arch}.tar.gz",
+  "arch_map": {
+    "x86_64": "amd64",
+    "aarch64": "arm64",
+    "armv7l": "armv7"
+  },
+  "tags": [
+    "data",
+    "csv",
+    "json",
+    "text-utils"
+  ]
+}