[viewer12]

Summary

• Add Nexus Shell as a macOS Fleet-maintained app using the documented custom-tap flow.
• Include the generated app manifest, inventory/patch queries, install and uninstall scripts, and catalog icon.
• Track the vendor-hosted, versioned DMG for Apple Silicon Macs.

Developer disclosure: I maintain Nexus Shell and am submitting this catalog entry transparently.

Verified metadata

• Version: 1.6.9
• Bundle identifier: sameral.Nexus-Shell
• Team ID: 5MBFAB57U2
• Minimum macOS: Sonoma
• Architecture: Apple Silicon
• Installer SHA-256: 088938eb901760a3123be7c8df18a41d480f234358a3a56f248de88bcc83a61d
• Gatekeeper: accepted, notarized Developer ID

Testing

• Input schema validated with check-jsonschema.
• Maintained-app Go tests passed.
• Custom-tap API metadata and FMA output regenerated.
• Official DMG verified with PlistBuddy, codesign, spctl, and SHA-256.
• Generated JSON validated and git diff --check passed.
• QA'd all new/changed functionality manually.

Other checklist sections in the general Fleet PR template do not apply to this maintained-app catalog contribution.

Summary by CodeRabbit

• New Features
  • Added Nexus Shell to the maintained macOS software catalog.
  • Added support for installing, updating, uninstalling, and cleaning up Nexus Shell version 1.6.9.
  • Added Nexus Shell’s application icon to software listings.
  • Included macOS 14 or later on ARM64 system requirements.
  • Added safeguards to preserve app data during removal by moving related files to the user’s Trash.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 9c0d6524-5c19-48d1-8676-a3e441fc7de4

📥 Commits

Reviewing files that changed from the base of the PR and between 2ae52cf and d7ca4d3.

📒 Files selected for processing (3)

• ee/maintained-apps/inputs/homebrew/custom-tap/Casks/nexus-shell.rb
• ee/maintained-apps/inputs/homebrew/custom-tap/api/nexus-shell.json
• ee/maintained-apps/outputs/nexus-shell/darwin.json

🚧 Files skipped from review as they are similar to previous changes (3)

• ee/maintained-apps/inputs/homebrew/custom-tap/api/nexus-shell.json
• ee/maintained-apps/inputs/homebrew/custom-tap/Casks/nexus-shell.rb
• ee/maintained-apps/outputs/nexus-shell/darwin.json

---

Walkthrough

Adds Nexus Shell version 1.6.9 as a maintained macOS application. The change defines Homebrew cask metadata, Darwin installation and uninstallation behavior, catalog registration, cleanup paths, and frontend icon mapping.

Possibly related PRs

• fleetdm/fleet#50050: Modifies the maintained macOS app catalog and software icon registry with related app registration changes.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description check	✅ Passed	The description clearly states the purpose, scope, verified metadata, testing, and manual QA results for the maintained-app catalog contribution.
Title check	✅ Passed	The title clearly identifies the addition of Nexus Shell as a macOS Fleet-maintained app.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

❌ Patch coverage is 50.00000% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 68.53%. Comparing base (bc537a3) to head (d7ca4d3).
⚠️ Report is 773 commits behind head on main.

Files with missing lines	Patch %	Lines
...pages/SoftwarePage/components/icons/NexusShell.tsx	50.00%	1 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #50822   +/-   ##
=======================================
  Coverage   68.53%   68.53%           
=======================================
  Files        3977     3978    +1     
  Lines      256142   256170   +28     
  Branches    13818    13818           
=======================================
+ Hits       175535   175567   +32     
+ Misses      64985    64983    -2     
+ Partials    15622    15620    -2     

Flag	Coverage Δ
frontend	62.71% <50.00%> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[viewer12]

CI note: the failing Validate maintained apps inputs job stops during checkout before validation. The workflow fixes repository: fleetdm/fleet while using ${{ github.head_ref }}, so it looks for codex/add-nexus-shell-fma in the upstream repository instead of the PR head repository (viewer12/fleet). The branch and head commit d7ca4d3 are still available in the fork, and the Darwin maintained-app validation and product-related checks pass.

No Nexus Shell metadata error is shown by this failed job. I am happy to adjust anything on the PR if maintainers prefer a different approach.

[allenhouchins]

@viewer12 thanks for submitting. I am curious, do you have any plans to get this into homebrew natively without a custom tap? We've submitted these on behalf of developers before if you need help.

The only reason I ask is the "custom-tap" that we have created is for apps that can not be in homebrew that our customers have asked for. It doesn't function as a custom tap (like viewer12/tap/nexus-shell), it just tricks our ingesters into thinking its talking to a homebrew tap for apps not supported by homebrew. I can put Nexus Shell there if it must but that means it has to be manually updated every time there is a release versus we can ingest updates automatically from homebrew.

Let me know your thoughts or if you have any questions.

[viewer12]

Thanks — yes, I would appreciate help getting Nexus Shell into homebrew/cask natively.

I had held back because the canonical repository is a small, binary-only releases repository and its raw GitHub notability metrics are low. I have since rechecked the current Acceptable Casks guidance, which notes that those metrics may not represent an application whose repository is used only to host binaries. I understand that this permits review rather than guaranteeing acceptance.

The app otherwise follows the cask requirements:

• upstream Developer ID-signed and notarized DMG
• Apple silicon, macOS 14+
• an indefinitely usable free tier with optional paid features
• versioned releases and a stable machine-readable manifest: https://nexusshell.app/releases/latest.json
• currently maintained vendor tap: https://github.com/viewer12/homebrew-tap

If you prefer, I can open and maintain the native cask PR myself. If submitting it on behalf of the developer is easier for Fleet's workflow, I am happy to provide any metadata or verification you need.

For this Fleet PR, waiting for the native cask seems preferable to adding an entry that must be updated manually. Once the cask is accepted, I can update this branch to consume it.

[allenhouchins]

@AdamBaali could you assist @viewer12 with getting his app, Nexus Shell, into homebrew so we can rely on that feed instead of our custom tap workflow?

[AdamBaali]

@allenhouchins @viewer12 there is already a cask PR for this: Homebrew/homebrew-cask#280752. @viewer12 opened and closed it on 13 August over the self-submission notability threshold and a livecheck source that needed work.

That threshold is 225 stars, 90 forks or 90 watchers for a self-submission. The releases repo has 2 stars, so acceptance is unlikely. That said, maintainers can allow further review case by case, and a clean resubmission costs little, so it is worth another try. Happy to help get it in shape, we just should not plan the catalog entry around it landing.

I validated 1.7.0 on macOS 15.7.7. The GitHub asset matches the vendor manifest SHA-256, the app is Developer ID signed and notarized, and install, uninstall and reinstall are clean. Keep the GitHub asset URL here, the vendor download 403s Homebrew CI.

@viewer12 two fixes before you reopen:

• Livecheck: url :url with strategy :github_latest works on your v1.7.0 tags, no custom regex needed.
• Zap: brew generate-zap only finds three of six paths. It searches for case-insensitive substrings of the app bundle name, Nexus Shell.app, and the bundle identifier, sameral.Nexus-Shell. Your state directory is ~/Library/NexusShell, with no space, so it is not a substring of either and the tool cannot see it. Full set below, all confirmed removed by brew uninstall --zap. Your tap cask also lists ~/Library/Application Support/Nexus Shell with a space, which does not exist on disk. The real directory is NexusShell.

~/Library/Application Support/NexusShell
~/Library/Caches/CloudKit/sameral.Nexus-Shell
~/Library/Caches/sameral.Nexus-Shell
~/Library/HTTPStorages/sameral.Nexus-Shell
~/Library/NexusShell
~/Library/Preferences/sameral.Nexus-Shell.plist

One judgement call in that list: ~/Library/Application Support/NexusShell holds secrets.dat and recordings/, so zapping it removes saved connections, keys and session recordings. The Cookbook says a zap should not remove files the user created directly, so worth deciding deliberately either way. Same question applies to our uninstall script.

Reopen #280752 rather than opening a new one, and fill the template completely, the bot closed it last time for that.

Our uninstall script needs these same paths regardless of what Homebrew does.

[allenhouchins]

@viewer12 closing this for now due to your last comment in the homebrew repo: Homebrew/homebrew-cask#280752 (comment)

Feel free to notify me as soon as you get that added to homebrew. Looking forward to getting this added to Fleet's FMA catalog.