feat(release): ship the Homebrew formula from native release tarballs

[elkaix]

Requirement or Bug

Ship the Homebrew formula as the native binary, the way CodexBar's tap does: per-platform release tarballs, bumped by the release run, verified by a real install.

Stacked on #355 (shares update-brew-formula.mjs).

Bug Reproduction Steps

N/A (feature).

Root Cause

N/A (feature).

Code Changes

• update-brew-formula.mjs: renderFormula writes the whole formula from a template instead of patching one url line with a regex. The template has on_macos/on_linux × Hardware::CPU.arm?, one native pythinker-code-<target>.tar.gz url + sha256 per target, bin.install "pythinker", and a test do that asserts pythinker --version. The sha256 comes from the downloaded bytes, not from the sidecars. All four downloads share one 600 s poll that retries on 404. After the push, the script reads Formula/pythinker-code.rb back from the tap's main and fails if it differs. A rejected push gets up to 3 attempts with pull --rebase between them.
• release.yml:
  • update-brew-tap now also needs publish-native-assets. On 2.4.1 the tarballs appeared about 13 min after release finished.
  • New verify-brew-install job (macos-latest + ubuntu-latest) runs brew tap, brew install, brew test and compares --version with package.json.
  • Release lane summary reads BREW_RESULT from verify-brew-install.
• cli/update/source.ts: a native binary under a Homebrew Cellar counts as a homebrew install. detectNativeInstall() returns false there, so the binary never stages or swaps itself inside the Cellar, and brew upgrade is its update path. Every caller of detectNativeInstall() (update download, startup swap, source detection) goes through this one function.
• .agents/skills/release/SKILL.md: the brew section now describes this flow.

How this differs from CodexBar: CodexBar dispatches a tap-side workflow with a PAT. This PR keeps the existing GitHub App token, which pushes the formula directly. That needs no new secret and no workflow in the second repo. The substance is the same: a native per-platform formula, a 404 retry on assets, and a content check after the bump.

Behavior Changes and Affected Users

Behavior	Before	After	Who relies on the old behavior	Escape hatch
What brew install pymodel/tap/pythinker-code installs	npm tarball + depends_on "node"	native binary, no Node.js	Homebrew users on macOS and Linux	npm i -g @pymodel/pythinker-code
node formula after brew upgrade	a dependency	orphaned (brew autoremove may delete it)	users who rely on brew-managed node only through this formula	brew install node
opentui caveat in the formula	printed	removed (the native binary bundles it)	nobody	n/a
Install source of a native binary in /opt/homebrew/Cellar/… or /home/linuxbrew/.linuxbrew/Cellar/…	native (would stage and swap itself)	homebrew (shows the brew upgrade hint)	nobody; only this PR puts native binaries into the Cellar	n/a
Release lane brew result	the tap push job	the real install on macOS + Ubuntu	release operators	RELEASE_LANE_BREW=disabled (unchanged)

Inventory of the old npm-formula path and where each item went:

Old item	New place
depends_on "node"	dropped; the binary bundles Node
opentui caveat	dropped
npm tarball sha256 from the registry	sha256 of each release tarball from the downloaded bytes
npm 404 poll (600 s)	the same poll, shared across the 4 release tarballs
--version test	kept, now on the native binary

Test coverage:

• source.test.ts: Cellar paths on macOS and Linux → homebrew, and detectNativeInstall returns false. Both failed before the change.
• update-brew-formula.test.mjs: formula pairs in order, a missing target throws, an invalid sha256 throws.
• release-workflows.test.mjs: the brew needs and BREW_RESULT wiring.
• Manual check with real Homebrew on the 2.4.1 tarballs, done with brew install + brew test:
  • macOS arm64: the Developer ID signature stays intact.
  • Linux x64 (homebrew/brew container): --version prints 2.4.1.
• pnpm test:release 58/58; app update suites 329/329; tsc, lint, actionlint clean.

Checklist

• I have read the CONTRIBUTING document.
• I have linked a related issue (external PRs: issue must have a maintainer's /approve).
• I have added tests that prove my feature works.
• The behavior-change table above is complete, and every removed behavior or flipped default is named in the changeset and either has an escape hatch or was explicitly approved by a maintainer in this PR.
• Ran gen-changesets skill, or this PR needs no changeset.
• Ran gen-docs skill, or this PR needs no doc update.

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 18 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Repository: PyModel/pythinker-code/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 0964c1ee-b433-4f6f-83f8-c9ec7a2a7654

📥 Commits

Reviewing files that changed from the base of the PR and between 34b854a and d32f391.

📒 Files selected for processing (8)

• .agents/skills/release/SKILL.md
• .changeset/brew-native-formula.md
• .github/workflows/release.yml
• apps/pythinker-code/src/cli/update/source.ts
• apps/pythinker-code/test/cli/update/source.test.ts
• scripts/release/release-workflows.test.mjs
• scripts/release/update-brew-formula.mjs
• scripts/release/update-brew-formula.test.mjs

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

pnpm dlx https://pkg.pr.new/@pymodel/pythinker-code@d32f391

npx https://pkg.pr.new/@pymodel/pythinker-code@d32f391

commit: d32f391