fix(ci): build Homebrew bottles for arm64 only

- The Intel `macos-14-large` larger runner requires a paid plan and never
  provisions here (jobs end with 0 steps), making the "4 platforms green"
  gate unsatisfiable and blocking every release
- Drop it from the bake matrix; the publish gate and the bottle-block
  generator now require the 3 arm64 platforms. Intel macOS installs build
  from source (`brew install` falls back automatically)
- Update the gate count (3), EXPECTED_TAGS, and the workflow/generator tests

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Codex <noreply@openai.com>

Author: 3 people

.github/scripts/generate-bottle-block.mjs

@@ -2,7 +2,7 @@ import { readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { pathToFileURL } from "node:url";
 
-const EXPECTED_TAGS = ["arm64_tahoe", "arm64_sequoia", "arm64_sonoma", "sonoma"];
+const EXPECTED_TAGS = ["arm64_tahoe", "arm64_sequoia", "arm64_sonoma"];
 const SYMBOL_CELLARS = new Set(["any", "any_skip_relocation"]);
 
 export function generateBottleBlock(jsonObjects, { expectedTags = EXPECTED_TAGS } = {}) {

.github/workflows/update-homebrew.yml

@@ -133,6 +133,9 @@ jobs:
       contents: write
     strategy:
       fail-fast: false
+      # Apple Silicon (arm64) bottles only. The Intel `macos-14-large` larger
+      # runner requires a paid plan and is unavailable here, so Intel macOS
+      # users install via source build (`brew install` falls back automatically).
       matrix:
         include:
           - os: macos-26
@@ -141,8 +144,6 @@ jobs:
             platform: arm64_sequoia
           - os: macos-14
             platform: arm64_sonoma
-          - os: macos-14-large
-            platform: sonoma
     steps:
       - name: Configure brew tap
         run: brew tap fitlab-ai/tap
@@ -206,12 +207,12 @@ jobs:
           path: ./bottles
           merge-multiple: true
 
-      - name: Require all four bottles
+      - name: Require all three bottles
         run: |
           COUNT=$(find ./bottles -name '*.bottle.json' | wc -l | tr -d ' ')
-          echo "Found $COUNT bottle JSON files (expected 4)"
-          if [ "$COUNT" -ne 4 ]; then
-            echo "::error::Expected 4 bottle JSON files but found $COUNT"
+          echo "Found $COUNT bottle JSON files (expected 3)"
+          if [ "$COUNT" -ne 3 ]; then
+            echo "::error::Expected 3 bottle JSON files but found $COUNT"
             exit 1
           fi
 

tests/core/release.test.ts

@@ -88,13 +88,12 @@ test("update-homebrew workflow syncs the tap after a successful release run", ()
   assert.match(workflow, /os: macos-26[\s\S]*platform: arm64_tahoe/);
   assert.match(workflow, /os: macos-15[\s\S]*platform: arm64_sequoia/);
   assert.match(workflow, /os: macos-14[\s\S]*platform: arm64_sonoma/);
-  assert.match(workflow, /os: macos-14-large[\s\S]*platform: sonoma/);
   assert.match(workflow, /brew install --build-bottle --formula --verbose agent-infra/);
   assert.match(workflow, /brew bottle --json --no-rebuild --root-url="\$ROOT_URL" agent-infra/);
   assert.match(workflow, /https:\/\/github\.com\/fitlab-ai\/agent-infra\/releases\/download\/v\$\{VERSION\}/);
   assert.match(workflow, /gh release upload "v\$\{VERSION\}"/);
   assert.match(workflow, /fail-fast: false/);
-  assert.match(workflow, /Expected 4 bottle JSON files but found/);
+  assert.match(workflow, /Expected 3 bottle JSON files but found/);
   assert.match(workflow, /publish-bottle:[\s\S]*needs: \[prepare-formula, bake-bottle\]/);
   assert.match(workflow, /generate-bottle-block\.mjs/);
   assert.match(workflow, /actions\/download-artifact@v7/);

tests/scripts/generate-bottle-block.test.ts

@@ -9,7 +9,7 @@ import { filePath } from "../helpers.ts";
 
 const scriptPath = filePath(".github/scripts/generate-bottle-block.mjs");
 const rootUrl = "https://github.com/fitlab-ai/agent-infra/releases/download/v0.6.2";
-const platforms = ["arm64_tahoe", "arm64_sequoia", "arm64_sonoma", "sonoma"];
+const platforms = ["arm64_tahoe", "arm64_sequoia", "arm64_sonoma"];
 
 function bottleJson(platform: string, sha256: string, options: { rootUrl?: string; cellar?: string } = {}) {
   return {
@@ -95,18 +95,18 @@ test("generate-bottle-block replaces the formula placeholder when a formula path
     assert.equal(result.status, 0, result.stderr);
     assert.match(formula, /  bottle do/);
     assert.match(formula, /root_url/);
-    assert.match(formula, /sha256 cellar: :any_skip_relocation, sonoma:/);
+    assert.match(formula, /sha256 cellar: :any_skip_relocation, arm64_sonoma:/);
   });
 });
 
 test("generate-bottle-block fails when an expected platform is missing", () => {
   withTempDir((dir) => {
-    writeBottles(dir, platforms.filter((platform) => platform !== "sonoma"));
+    writeBottles(dir, platforms.filter((platform) => platform !== "arm64_sonoma"));
 
     const result = runScript(["--bottles", dir]);
 
     assert.notEqual(result.status, 0);
-    assert.match(result.stderr, /missing bottle for platform: sonoma/);
+    assert.match(result.stderr, /missing bottle for platform: arm64_sonoma/);
   });
 });
 
@@ -117,7 +117,7 @@ test("generate-bottle-block fails when root URLs disagree", () => {
       path.join(dir, "agent-infra--0.6.2.arm64_sequoia.bottle.json"),
       JSON.stringify(bottleJson("arm64_sequoia", "2".repeat(64), { rootUrl: `${rootUrl}-other` }), null, 2),
     );
-    writeBottles(dir, ["arm64_sonoma", "sonoma"]);
+    writeBottles(dir, ["arm64_sonoma"]);
 
     const result = runScript(["--bottles", dir]);