From 82e015429972273e3abb431cb092c5678c541eb4 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 7 May 2026 06:34:30 +0000 Subject: [PATCH 1/7] Initial plan From b99f282ba88c44cfad87096f129e252a5f580aaf Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 7 May 2026 06:37:41 +0000 Subject: [PATCH 2/7] Add release evidence mapping and package scaffolds for SourceOS product surfaces Agent-Logs-Url: https://github.com/SourceOS-Linux/homebrew-tap/sessions/7eb3ee96-a737-4dab-8f12-a8edcc214a49 Co-authored-by: mdheller <21163552+mdheller@users.noreply.github.com> --- Casks/bearbrowser.rb | 6 ++ Formula/agent-machine.rb | 11 ++ Formula/bearbrowser.rb | 11 ++ Formula/sourceos-devtools.rb | 38 +++++++ Formula/sourceos-syncd.rb | 38 +++++++ Formula/turtleterm.rb | 38 +++++++ README.md | 30 ++++++ release-evidence/workspace-operations.json | 120 +++++++++++++++++++++ 8 files changed, 292 insertions(+) create mode 100644 Formula/sourceos-devtools.rb create mode 100644 Formula/sourceos-syncd.rb create mode 100644 Formula/turtleterm.rb create mode 100644 README.md create mode 100644 release-evidence/workspace-operations.json diff --git a/Casks/bearbrowser.rb b/Casks/bearbrowser.rb index 8b3eb40..3b7ba38 100644 --- a/Casks/bearbrowser.rb +++ b/Casks/bearbrowser.rb @@ -1,6 +1,9 @@ cask "bearbrowser" do version "0.1.0-overlay" sha256 :no_check + release_evidence = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + checksum_record = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + rollback_note = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" # Scaffold only. Replace with the signed/notarized macOS app release asset once BearBrowser.app exists. url "https://github.com/SourceOS-Linux/BearBrowser/releases/download/v#{version}/BearBrowser-#{version}-macos-universal.dmg" @@ -12,5 +15,8 @@ caveats <<~EOS This cask is a release scaffold. Publish a signed and notarized BearBrowser.app DMG before promoting it into SourceOS-Linux/homebrew-tap. + Release package evidence: #{release_evidence} + Checksum record: #{checksum_record} + Rollback note: #{rollback_note} EOS end diff --git a/Formula/agent-machine.rb b/Formula/agent-machine.rb index 40ef30a..97e0477 100644 --- a/Formula/agent-machine.rb +++ b/Formula/agent-machine.rb @@ -6,6 +6,10 @@ class AgentMachine < Formula license "MIT" head "https://github.com/SourceOS-Linux/agent-machine.git", branch: "main" + RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + def install bin.install "bin/agent-machine" chmod 0755, bin/"agent-machine" @@ -40,6 +44,13 @@ def caveats Runtime directories are not created automatically yet. Future setup commands will manage /etc/agent-machine, /var/lib/agent-machine, and /run/agent-machine through SourceOS policy-aware activation flows. + + Release package evidence: + #{RELEASE_EVIDENCE} + Checksum record: + #{CHECKSUM_RECORD} + Rollback note: + #{ROLLBACK_NOTE} EOS end diff --git a/Formula/bearbrowser.rb b/Formula/bearbrowser.rb index 0205048..fd0b767 100644 --- a/Formula/bearbrowser.rb +++ b/Formula/bearbrowser.rb @@ -6,6 +6,10 @@ class Bearbrowser < Formula license "MPL-2.0" head "https://github.com/SourceOS-Linux/BearBrowser.git", branch: "main" + RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + depends_on "git" depends_on "python@3.12" @@ -71,6 +75,13 @@ def caveats Run bearbrowser-emit-event, bearbrowser-propose-action, bearbrowser-resolve-action, bearbrowser-memory-candidate, bearbrowser-page-summary, bearbrowser-governance-queue, bearbrowser-sidecar-open, and bearbrowser-verify-agent-sidecar for the local provenance/policy/memory/summary/agent sidecar plane. Run bearbrowser-verify-interactive-sidecar and bearbrowser-verify-native-shell for product-surface checks. Run bearbrowser-doctor for system status and bearbrowser-verify-build-lane for build-lane readiness. + + Release package evidence: + #{RELEASE_EVIDENCE} + Checksum record: + #{CHECKSUM_RECORD} + Rollback note: + #{ROLLBACK_NOTE} EOS end diff --git a/Formula/sourceos-devtools.rb b/Formula/sourceos-devtools.rb new file mode 100644 index 0000000..7d16a56 --- /dev/null +++ b/Formula/sourceos-devtools.rb @@ -0,0 +1,38 @@ +class SourceosDevtools < Formula + desc "SourceOS devtools packaging scaffold" + homepage "https://github.com/SourceOS-Linux/sourceos-devtools" + url "https://github.com/SourceOS-Linux/sourceos-devtools.git", branch: "main" + version "0.1.0-dev" + license "MIT" + head "https://github.com/SourceOS-Linux/sourceos-devtools.git", branch: "main" + + RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + + def install + libexec.install Dir["*"] + (bin/"sourceos-devtools").write <<~EOS + #!/usr/bin/env bash + set -euo pipefail + echo "sourceos-devtools source staged at #{libexec}" + EOS + end + + def caveats + <<~EOS + sourceos-devtools release/package scaffold only. Runtime governance remains in the source repository contracts and CI gates. + + Release package evidence: + #{RELEASE_EVIDENCE} + Checksum record: + #{CHECKSUM_RECORD} + Rollback note: + #{ROLLBACK_NOTE} + EOS + end + + test do + assert_match "sourceos-devtools source staged", shell_output("#{bin}/sourceos-devtools") + end +end diff --git a/Formula/sourceos-syncd.rb b/Formula/sourceos-syncd.rb new file mode 100644 index 0000000..fe763db --- /dev/null +++ b/Formula/sourceos-syncd.rb @@ -0,0 +1,38 @@ +class SourceosSyncd < Formula + desc "SourceOS sync daemon packaging scaffold" + homepage "https://github.com/SourceOS-Linux/sourceos-syncd" + url "https://github.com/SourceOS-Linux/sourceos-syncd.git", branch: "main" + version "0.1.0-dev" + license "MIT" + head "https://github.com/SourceOS-Linux/sourceos-syncd.git", branch: "main" + + RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + + def install + libexec.install Dir["*"] + (bin/"sourceos-syncd").write <<~EOS + #!/usr/bin/env bash + set -euo pipefail + echo "sourceos-syncd source staged at #{libexec}" + EOS + end + + def caveats + <<~EOS + sourceos-syncd release/package scaffold only. Runtime governance remains in the source repository contracts and CI gates. + + Release package evidence: + #{RELEASE_EVIDENCE} + Checksum record: + #{CHECKSUM_RECORD} + Rollback note: + #{ROLLBACK_NOTE} + EOS + end + + test do + assert_match "sourceos-syncd source staged", shell_output("#{bin}/sourceos-syncd") + end +end diff --git a/Formula/turtleterm.rb b/Formula/turtleterm.rb new file mode 100644 index 0000000..8721c9b --- /dev/null +++ b/Formula/turtleterm.rb @@ -0,0 +1,38 @@ +class Turtleterm < Formula + desc "SourceOS TurtleTerm product-surface packaging scaffold" + homepage "https://github.com/SourceOS-Linux/TurtleTerm" + url "https://github.com/SourceOS-Linux/TurtleTerm.git", branch: "main" + version "0.1.0-dev" + license "MIT" + head "https://github.com/SourceOS-Linux/TurtleTerm.git", branch: "main" + + RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + + def install + libexec.install Dir["*"] + (bin/"turtleterm").write <<~EOS + #!/usr/bin/env bash + set -euo pipefail + echo "TurtleTerm source staged at #{libexec}" + EOS + end + + def caveats + <<~EOS + TurtleTerm release/package scaffold only. Runtime governance remains in the source repository contracts and CI gates. + + Release package evidence: + #{RELEASE_EVIDENCE} + Checksum record: + #{CHECKSUM_RECORD} + Rollback note: + #{ROLLBACK_NOTE} + EOS + end + + test do + assert_match "TurtleTerm source staged", shell_output("#{bin}/turtleterm") + end +end diff --git a/README.md b/README.md new file mode 100644 index 0000000..28151f2 --- /dev/null +++ b/README.md @@ -0,0 +1,30 @@ +# SourceOS Homebrew Tap + +This repository is the SourceOS distribution surface for Homebrew formulas/casks. It is not a runtime governance authority. + +## Release evidence mapping + +Release/package operations and evidence for product surfaces are tracked in: + +- `release-evidence/workspace-operations.json` + +The evidence map includes: + +- operation types: + - `release.package.prepare` + - `release.formula.update` + - `release.checksum.verify` + - `release.evidence.attach` + - `release.rollback.record` +- required release artifacts/evidence: + - package formula + - checksum record + - release note + - rollback note + - build/test evidence link + - source commit reference + - artifact provenance record + +## Governance boundary + +Hard rule: packaging is distribution, not runtime governance. Releases carried by this tap must map back to source repositories where contracts, tests, and policy gates are enforced. diff --git a/release-evidence/workspace-operations.json b/release-evidence/workspace-operations.json new file mode 100644 index 0000000..e509b3d --- /dev/null +++ b/release-evidence/workspace-operations.json @@ -0,0 +1,120 @@ +{ + "packagingAuthority": { + "repository": "SourceOS-Linux/homebrew-tap", + "role": "distribution", + "nonAuthorityNote": "Packaging is distribution, not runtime governance; source contracts, tests, and policy gates stay in each source repository." + }, + "requiredOperationTypes": [ + "release.package.prepare", + "release.formula.update", + "release.checksum.verify", + "release.evidence.attach", + "release.rollback.record" + ], + "integrationTargets": [ + "https://github.com/SocioProphet/delivery-excellence/issues/8", + "https://github.com/SourceOS-Linux/sourceos-devtools/issues/19", + "https://github.com/SocioProphet/workspace-inventory/issues/4", + "https://github.com/SourceOS-Linux/BearBrowser/issues/20", + "https://github.com/SourceOS-Linux/agent-machine/issues/18", + "https://github.com/SourceOS-Linux/sourceos-syncd/issues/3", + "https://github.com/SocioProphet/prophet-core-ledger/issues/1" + ], + "workspaceOperations": [ + { + "surface": "SourceOS-Linux/BearBrowser", + "operationTypes": [ + "release.package.prepare", + "release.formula.update", + "release.checksum.verify", + "release.evidence.attach", + "release.rollback.record" + ], + "artifacts": { + "packageFormula": "Formula/bearbrowser.rb + Casks/bearbrowser.rb", + "checksumRecord": "sha256:no_check (scaffold) with release checksum tracked in this record and source release assets", + "releaseNote": "https://github.com/SourceOS-Linux/BearBrowser/releases", + "rollbackNote": "If provenance/checksum/test evidence fails, keep existing formula version and revert cask/formula bump in homebrew-tap before republish.", + "buildTestEvidenceLink": "https://github.com/SourceOS-Linux/BearBrowser/actions", + "sourceCommitReference": "https://github.com/SourceOS-Linux/BearBrowser/commits/main", + "artifactProvenanceRecord": "https://github.com/SourceOS-Linux/BearBrowser" + } + }, + { + "surface": "SourceOS-Linux/agent-machine", + "operationTypes": [ + "release.package.prepare", + "release.formula.update", + "release.checksum.verify", + "release.evidence.attach", + "release.rollback.record" + ], + "artifacts": { + "packageFormula": "Formula/agent-machine.rb", + "checksumRecord": "git-source install at tagged commit; release checksum recorded alongside tagged source tarball in source repo release", + "releaseNote": "https://github.com/SourceOS-Linux/agent-machine/releases", + "rollbackNote": "Revert formula update to previous known-good commit and rerun source repo contract/test gates before publishing again.", + "buildTestEvidenceLink": "https://github.com/SourceOS-Linux/agent-machine/actions", + "sourceCommitReference": "https://github.com/SourceOS-Linux/agent-machine/commits/main", + "artifactProvenanceRecord": "https://github.com/SourceOS-Linux/agent-machine" + } + }, + { + "surface": "SourceOS-Linux/TurtleTerm", + "operationTypes": [ + "release.package.prepare", + "release.formula.update", + "release.checksum.verify", + "release.evidence.attach", + "release.rollback.record" + ], + "artifacts": { + "packageFormula": "Formula/turtleterm.rb", + "checksumRecord": "git-source install at tagged commit; release checksum tracked in source release artifacts", + "releaseNote": "https://github.com/SourceOS-Linux/TurtleTerm/releases", + "rollbackNote": "Revert formula update in homebrew-tap and restore prior package version until source contracts and tests pass.", + "buildTestEvidenceLink": "https://github.com/SourceOS-Linux/TurtleTerm/actions", + "sourceCommitReference": "https://github.com/SourceOS-Linux/TurtleTerm/commits/main", + "artifactProvenanceRecord": "https://github.com/SourceOS-Linux/TurtleTerm" + } + }, + { + "surface": "SourceOS-Linux/sourceos-devtools", + "operationTypes": [ + "release.package.prepare", + "release.formula.update", + "release.checksum.verify", + "release.evidence.attach", + "release.rollback.record" + ], + "artifacts": { + "packageFormula": "Formula/sourceos-devtools.rb", + "checksumRecord": "git-source install at tagged commit; release checksum tracked in source release artifacts", + "releaseNote": "https://github.com/SourceOS-Linux/sourceos-devtools/releases", + "rollbackNote": "Revert formula update and preserve last known-good package state until contracts/tests/policy gates succeed.", + "buildTestEvidenceLink": "https://github.com/SourceOS-Linux/sourceos-devtools/actions", + "sourceCommitReference": "https://github.com/SourceOS-Linux/sourceos-devtools/commits/main", + "artifactProvenanceRecord": "https://github.com/SourceOS-Linux/sourceos-devtools" + } + }, + { + "surface": "SourceOS-Linux/sourceos-syncd", + "operationTypes": [ + "release.package.prepare", + "release.formula.update", + "release.checksum.verify", + "release.evidence.attach", + "release.rollback.record" + ], + "artifacts": { + "packageFormula": "Formula/sourceos-syncd.rb", + "checksumRecord": "git-source install at tagged commit; release checksum tracked in source release artifacts", + "releaseNote": "https://github.com/SourceOS-Linux/sourceos-syncd/releases", + "rollbackNote": "Revert formula update and restore prior release until source repo gates and evidence pass.", + "buildTestEvidenceLink": "https://github.com/SourceOS-Linux/sourceos-syncd/actions", + "sourceCommitReference": "https://github.com/SourceOS-Linux/sourceos-syncd/commits/main", + "artifactProvenanceRecord": "https://github.com/SourceOS-Linux/sourceos-syncd" + } + } + ] +} From fceb1bb11aa5cd718cf301983c3da00e450f3645 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 7 May 2026 06:38:44 +0000 Subject: [PATCH 3/7] Align BearBrowser cask evidence metadata naming Agent-Logs-Url: https://github.com/SourceOS-Linux/homebrew-tap/sessions/7eb3ee96-a737-4dab-8f12-a8edcc214a49 Co-authored-by: mdheller <21163552+mdheller@users.noreply.github.com> --- Casks/bearbrowser.rb | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/Casks/bearbrowser.rb b/Casks/bearbrowser.rb index 3b7ba38..0931461 100644 --- a/Casks/bearbrowser.rb +++ b/Casks/bearbrowser.rb @@ -1,9 +1,9 @@ cask "bearbrowser" do version "0.1.0-overlay" sha256 :no_check - release_evidence = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - checksum_record = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - rollback_note = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" # Scaffold only. Replace with the signed/notarized macOS app release asset once BearBrowser.app exists. url "https://github.com/SourceOS-Linux/BearBrowser/releases/download/v#{version}/BearBrowser-#{version}-macos-universal.dmg" @@ -15,8 +15,8 @@ caveats <<~EOS This cask is a release scaffold. Publish a signed and notarized BearBrowser.app DMG before promoting it into SourceOS-Linux/homebrew-tap. - Release package evidence: #{release_evidence} - Checksum record: #{checksum_record} - Rollback note: #{rollback_note} + Release package evidence: #{RELEASE_EVIDENCE} + Checksum record: #{CHECKSUM_RECORD} + Rollback note: #{ROLLBACK_NOTE} EOS end From e4bdfdb7ec15423d6e5d073a258a249a7d68626a Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 7 May 2026 06:40:08 +0000 Subject: [PATCH 4/7] Refine evidence metadata constants and cask variable style Agent-Logs-Url: https://github.com/SourceOS-Linux/homebrew-tap/sessions/7eb3ee96-a737-4dab-8f12-a8edcc214a49 Co-authored-by: mdheller <21163552+mdheller@users.noreply.github.com> --- Casks/bearbrowser.rb | 10 ++++------ Formula/agent-machine.rb | 10 ++++------ Formula/bearbrowser.rb | 10 ++++------ Formula/sourceos-devtools.rb | 10 ++++------ Formula/sourceos-syncd.rb | 10 ++++------ Formula/turtleterm.rb | 10 ++++------ 6 files changed, 24 insertions(+), 36 deletions(-) diff --git a/Casks/bearbrowser.rb b/Casks/bearbrowser.rb index 0931461..93b9830 100644 --- a/Casks/bearbrowser.rb +++ b/Casks/bearbrowser.rb @@ -1,9 +1,7 @@ cask "bearbrowser" do version "0.1.0-overlay" sha256 :no_check - RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + release_evidence_record = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" # Scaffold only. Replace with the signed/notarized macOS app release asset once BearBrowser.app exists. url "https://github.com/SourceOS-Linux/BearBrowser/releases/download/v#{version}/BearBrowser-#{version}-macos-universal.dmg" @@ -15,8 +13,8 @@ caveats <<~EOS This cask is a release scaffold. Publish a signed and notarized BearBrowser.app DMG before promoting it into SourceOS-Linux/homebrew-tap. - Release package evidence: #{RELEASE_EVIDENCE} - Checksum record: #{CHECKSUM_RECORD} - Rollback note: #{ROLLBACK_NOTE} + Release package evidence: #{release_evidence_record} + Checksum record: #{release_evidence_record} + Rollback note: #{release_evidence_record} EOS end diff --git a/Formula/agent-machine.rb b/Formula/agent-machine.rb index 97e0477..79c176f 100644 --- a/Formula/agent-machine.rb +++ b/Formula/agent-machine.rb @@ -6,9 +6,7 @@ class AgentMachine < Formula license "MIT" head "https://github.com/SourceOS-Linux/agent-machine.git", branch: "main" - RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + RELEASE_EVIDENCE_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" def install bin.install "bin/agent-machine" @@ -46,11 +44,11 @@ def caveats /run/agent-machine through SourceOS policy-aware activation flows. Release package evidence: - #{RELEASE_EVIDENCE} + #{RELEASE_EVIDENCE_RECORD} Checksum record: - #{CHECKSUM_RECORD} + #{RELEASE_EVIDENCE_RECORD} Rollback note: - #{ROLLBACK_NOTE} + #{RELEASE_EVIDENCE_RECORD} EOS end diff --git a/Formula/bearbrowser.rb b/Formula/bearbrowser.rb index fd0b767..a1a983e 100644 --- a/Formula/bearbrowser.rb +++ b/Formula/bearbrowser.rb @@ -6,9 +6,7 @@ class Bearbrowser < Formula license "MPL-2.0" head "https://github.com/SourceOS-Linux/BearBrowser.git", branch: "main" - RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + RELEASE_EVIDENCE_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" depends_on "git" depends_on "python@3.12" @@ -77,11 +75,11 @@ def caveats Run bearbrowser-doctor for system status and bearbrowser-verify-build-lane for build-lane readiness. Release package evidence: - #{RELEASE_EVIDENCE} + #{RELEASE_EVIDENCE_RECORD} Checksum record: - #{CHECKSUM_RECORD} + #{RELEASE_EVIDENCE_RECORD} Rollback note: - #{ROLLBACK_NOTE} + #{RELEASE_EVIDENCE_RECORD} EOS end diff --git a/Formula/sourceos-devtools.rb b/Formula/sourceos-devtools.rb index 7d16a56..b0c0566 100644 --- a/Formula/sourceos-devtools.rb +++ b/Formula/sourceos-devtools.rb @@ -6,9 +6,7 @@ class SourceosDevtools < Formula license "MIT" head "https://github.com/SourceOS-Linux/sourceos-devtools.git", branch: "main" - RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + RELEASE_EVIDENCE_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" def install libexec.install Dir["*"] @@ -24,11 +22,11 @@ def caveats sourceos-devtools release/package scaffold only. Runtime governance remains in the source repository contracts and CI gates. Release package evidence: - #{RELEASE_EVIDENCE} + #{RELEASE_EVIDENCE_RECORD} Checksum record: - #{CHECKSUM_RECORD} + #{RELEASE_EVIDENCE_RECORD} Rollback note: - #{ROLLBACK_NOTE} + #{RELEASE_EVIDENCE_RECORD} EOS end diff --git a/Formula/sourceos-syncd.rb b/Formula/sourceos-syncd.rb index fe763db..36784f7 100644 --- a/Formula/sourceos-syncd.rb +++ b/Formula/sourceos-syncd.rb @@ -6,9 +6,7 @@ class SourceosSyncd < Formula license "MIT" head "https://github.com/SourceOS-Linux/sourceos-syncd.git", branch: "main" - RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + RELEASE_EVIDENCE_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" def install libexec.install Dir["*"] @@ -24,11 +22,11 @@ def caveats sourceos-syncd release/package scaffold only. Runtime governance remains in the source repository contracts and CI gates. Release package evidence: - #{RELEASE_EVIDENCE} + #{RELEASE_EVIDENCE_RECORD} Checksum record: - #{CHECKSUM_RECORD} + #{RELEASE_EVIDENCE_RECORD} Rollback note: - #{ROLLBACK_NOTE} + #{RELEASE_EVIDENCE_RECORD} EOS end diff --git a/Formula/turtleterm.rb b/Formula/turtleterm.rb index 8721c9b..9876bef 100644 --- a/Formula/turtleterm.rb +++ b/Formula/turtleterm.rb @@ -6,9 +6,7 @@ class Turtleterm < Formula license "MIT" head "https://github.com/SourceOS-Linux/TurtleTerm.git", branch: "main" - RELEASE_EVIDENCE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - CHECKSUM_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - ROLLBACK_NOTE = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + RELEASE_EVIDENCE_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" def install libexec.install Dir["*"] @@ -24,11 +22,11 @@ def caveats TurtleTerm release/package scaffold only. Runtime governance remains in the source repository contracts and CI gates. Release package evidence: - #{RELEASE_EVIDENCE} + #{RELEASE_EVIDENCE_RECORD} Checksum record: - #{CHECKSUM_RECORD} + #{RELEASE_EVIDENCE_RECORD} Rollback note: - #{ROLLBACK_NOTE} + #{RELEASE_EVIDENCE_RECORD} EOS end From 5609a77cc7b8a163cfd259cd6750db6d5e4e4b1c Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 7 May 2026 06:41:08 +0000 Subject: [PATCH 5/7] Simplify BearBrowser cask evidence links to inline values Agent-Logs-Url: https://github.com/SourceOS-Linux/homebrew-tap/sessions/7eb3ee96-a737-4dab-8f12-a8edcc214a49 Co-authored-by: mdheller <21163552+mdheller@users.noreply.github.com> --- Casks/bearbrowser.rb | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/Casks/bearbrowser.rb b/Casks/bearbrowser.rb index 93b9830..351e1e0 100644 --- a/Casks/bearbrowser.rb +++ b/Casks/bearbrowser.rb @@ -1,7 +1,6 @@ cask "bearbrowser" do version "0.1.0-overlay" sha256 :no_check - release_evidence_record = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" # Scaffold only. Replace with the signed/notarized macOS app release asset once BearBrowser.app exists. url "https://github.com/SourceOS-Linux/BearBrowser/releases/download/v#{version}/BearBrowser-#{version}-macos-universal.dmg" @@ -13,8 +12,8 @@ caveats <<~EOS This cask is a release scaffold. Publish a signed and notarized BearBrowser.app DMG before promoting it into SourceOS-Linux/homebrew-tap. - Release package evidence: #{release_evidence_record} - Checksum record: #{release_evidence_record} - Rollback note: #{release_evidence_record} + Release package evidence: https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json + Checksum record: https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json + Rollback note: https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json EOS end From 7fcb17184cf64483b66c46063b7888896868a4f7 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 7 May 2026 06:41:50 +0000 Subject: [PATCH 6/7] Deduplicate BearBrowser cask evidence link with file-level constant Agent-Logs-Url: https://github.com/SourceOS-Linux/homebrew-tap/sessions/7eb3ee96-a737-4dab-8f12-a8edcc214a49 Co-authored-by: mdheller <21163552+mdheller@users.noreply.github.com> --- Casks/bearbrowser.rb | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/Casks/bearbrowser.rb b/Casks/bearbrowser.rb index 351e1e0..d1eeb81 100644 --- a/Casks/bearbrowser.rb +++ b/Casks/bearbrowser.rb @@ -1,3 +1,5 @@ +EVIDENCE_RECORD_URL = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" + cask "bearbrowser" do version "0.1.0-overlay" sha256 :no_check @@ -12,8 +14,8 @@ caveats <<~EOS This cask is a release scaffold. Publish a signed and notarized BearBrowser.app DMG before promoting it into SourceOS-Linux/homebrew-tap. - Release package evidence: https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json - Checksum record: https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json - Rollback note: https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json + Release package evidence: #{EVIDENCE_RECORD_URL} + Checksum record: #{EVIDENCE_RECORD_URL} + Rollback note: #{EVIDENCE_RECORD_URL} EOS end From 4b8306ee01b0cddce285c0e999726274cb937233 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 7 May 2026 06:42:47 +0000 Subject: [PATCH 7/7] Align cask evidence constant scope and structure packageFormula record Agent-Logs-Url: https://github.com/SourceOS-Linux/homebrew-tap/sessions/7eb3ee96-a737-4dab-8f12-a8edcc214a49 Co-authored-by: mdheller <21163552+mdheller@users.noreply.github.com> --- Casks/bearbrowser.rb | 9 ++++----- release-evidence/workspace-operations.json | 5 ++++- 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/Casks/bearbrowser.rb b/Casks/bearbrowser.rb index d1eeb81..ae5b200 100644 --- a/Casks/bearbrowser.rb +++ b/Casks/bearbrowser.rb @@ -1,8 +1,7 @@ -EVIDENCE_RECORD_URL = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" - cask "bearbrowser" do version "0.1.0-overlay" sha256 :no_check + RELEASE_EVIDENCE_RECORD = "https://github.com/SourceOS-Linux/homebrew-tap/blob/main/release-evidence/workspace-operations.json" # Scaffold only. Replace with the signed/notarized macOS app release asset once BearBrowser.app exists. url "https://github.com/SourceOS-Linux/BearBrowser/releases/download/v#{version}/BearBrowser-#{version}-macos-universal.dmg" @@ -14,8 +13,8 @@ caveats <<~EOS This cask is a release scaffold. Publish a signed and notarized BearBrowser.app DMG before promoting it into SourceOS-Linux/homebrew-tap. - Release package evidence: #{EVIDENCE_RECORD_URL} - Checksum record: #{EVIDENCE_RECORD_URL} - Rollback note: #{EVIDENCE_RECORD_URL} + Release package evidence: #{RELEASE_EVIDENCE_RECORD} + Checksum record: #{RELEASE_EVIDENCE_RECORD} + Rollback note: #{RELEASE_EVIDENCE_RECORD} EOS end diff --git a/release-evidence/workspace-operations.json b/release-evidence/workspace-operations.json index e509b3d..2b549c4 100644 --- a/release-evidence/workspace-operations.json +++ b/release-evidence/workspace-operations.json @@ -31,7 +31,10 @@ "release.rollback.record" ], "artifacts": { - "packageFormula": "Formula/bearbrowser.rb + Casks/bearbrowser.rb", + "packageFormula": [ + "Formula/bearbrowser.rb", + "Casks/bearbrowser.rb" + ], "checksumRecord": "sha256:no_check (scaffold) with release checksum tracked in this record and source release assets", "releaseNote": "https://github.com/SourceOS-Linux/BearBrowser/releases", "rollbackNote": "If provenance/checksum/test evidence fails, keep existing formula version and revert cask/formula bump in homebrew-tap before republish.",