[codex] Accept Tart project release formulas (#20)

fkorotkov-oai · web-flow · commit 95069a347673 · 2026-07-07T14:04:22.000-04:00
* Accept Tart project release formulas

* Update README.md

* Update README.md

* Restore required validation check name
diff --git a/.github/workflows/auto-merge-goreleaser.yml b/.github/workflows/auto-merge-goreleaser.yml
@@ -1,4 +1,4 @@
-name: Auto-merge GoReleaser cask PRs
+name: Auto-merge GoReleaser Homebrew PRs
 
 on:
   workflow_run:
@@ -29,7 +29,7 @@ jobs:
       pr-number: ${{ steps.verify.outputs.pr-number }}
 
     steps:
-      - name: Verify PR is an eligible GoReleaser cask update
+      - name: Verify PR is an eligible GoReleaser recipe update
         id: verify
         env:
           GH_TOKEN: ${{ github.token }}
@@ -45,25 +45,39 @@ jobs:
             exit 1
           fi
 
+          case "${VALIDATED_HEAD_BRANCH}" in
+            openai-*) expected_path="Casks/openai.rb" ;;
+            orchard-*) expected_path="Formula/orchard.rb" ;;
+            softnet-*) expected_path="Formula/softnet.rb" ;;
+            tart-guest-agent-*) expected_path="Formula/tart-guest-agent.rb" ;;
+            tart-*) expected_path="Formula/tart.rb" ;;
+            *)
+              echo "Unexpected GoReleaser branch: ${VALIDATED_HEAD_BRANCH}"
+              exit 1
+              ;;
+          esac
+
           data="$(gh pr view "${PR_NUMBER}" --repo "${REPO}" \
             --json author,baseRefName,body,files,headRefName,headRefOid,headRepositoryOwner,isCrossRepository,isDraft,state,statusCheckRollup)"
 
           echo "${data}" | jq -e \
             --arg sha "${VALIDATED_SHA}" \
             --arg head_branch "${VALIDATED_HEAD_BRANCH}" \
+            --arg expected_path "${expected_path}" \
             '
               .state == "OPEN" and
               .isDraft == false and
               .author.login == "app/openai-homebrew-releaser" and
               .baseRefName == "main" and
               .headRefName == $head_branch and
-              (.headRefName | test("^openai-[0-9]+\\.[0-9]+\\.[0-9]+$")) and
+              (.headRefName | test("^(openai|orchard|softnet|tart|tart-guest-agent)-[0-9]+\\.[0-9]+\\.[0-9]+$")) and
               .headRefOid == $sha and
               .headRepositoryOwner.login == "openai" and
               .isCrossRepository == false and
               ((.body // "") | contains("Automated with [GoReleaser]")) and
               (.files | length == 1) and
-              (.files[0].path == "Casks/openai.rb") and
+              (.files[0].path == $expected_path) and
+              ((.files[0].changeType == "ADDED") or (.files[0].changeType == "MODIFIED")) and
               any(.statusCheckRollup[]?;
                 .__typename == "CheckRun" and
                 .workflowName == "Validate cask" and
@@ -74,7 +88,7 @@ jobs:
             '
 
           changed_files="$(gh pr diff "${PR_NUMBER}" --repo "${REPO}" --name-only)"
-          if [ "${changed_files}" != "Casks/openai.rb" ]; then
+          if [ "${changed_files}" != "${expected_path}" ]; then
             echo "Unexpected changed files:"
             printf '%s\n' "${changed_files}"
             exit 1
diff --git a/.github/workflows/validate-cask.yml b/.github/workflows/validate-cask.yml
@@ -23,42 +23,19 @@ jobs:
           persist-credentials: false
 
       - name: Check Ruby syntax
-        run: ruby -c Casks/openai.rb
+        run: |
+          recipe_directories=(Casks)
+          if [ -d Formula ]; then
+            recipe_directories+=(Formula)
+          fi
+          find "${recipe_directories[@]}" -name '*.rb' -type f -print0 | \
+            xargs -0 -n1 ruby -c
 
       - name: Tap local repository
         run: brew tap openai/tools "$GITHUB_WORKSPACE"
 
       - name: Check Homebrew can load the tap
         run: brew readall openai/tools
 
-      - name: Validate generated cask structure
-        run: |
-          ruby <<'RUBY'
-          cask = File.read("Casks/openai.rb")
-
-          checks = {
-            "generated header" => cask.start_with?("# This file was generated by GoReleaser. DO NOT EDIT.\n"),
-            "openai cask token" => cask.match?(/^cask "openai" do$/),
-            "semantic version" => cask.match?(/^  version "\d+\.\d+\.\d+"$/),
-            "homepage" => cask.include?('  homepage "https://developers.openai.com/api/docs"'),
-            "binary" => cask.include?('  binary "openai"'),
-            "manpage" => cask.include?('  manpage "man/man1/openai.1.gz"'),
-          }
-
-          expected_artifacts = {
-            "macos amd64 zip" => /openai_#\{version\}_macos_amd64\.zip/,
-            "macos arm64 zip" => /openai_#\{version\}_macos_arm64\.zip/,
-            "linux amd64 tarball" => /openai_#\{version\}_linux_amd64\.tar\.gz/,
-            "linux arm64 tarball" => /openai_#\{version\}_linux_arm64\.tar\.gz/,
-          }
-
-          expected_artifacts.each do |name, pattern|
-            checks[name] = cask.match?(pattern)
-          end
-
-          checks["release host"] = cask.scan(%r{https://github\.com/openai/openai-cli/releases/download/v#\{version\}/}).length == 4
-          checks["sha256 count"] = cask.scan(/^\s+sha256 "[a-f0-9]{64}"$/).length == 4
-
-          failed = checks.select { |_name, passed| !passed }.keys
-          abort("Cask validation failed: #{failed.join(', ')}") if failed.any?
-          RUBY
+      - name: Validate generated recipe structure
+        run: ruby scripts/validate_recipes.rb
diff --git a/README.md b/README.md
@@ -12,6 +12,17 @@ brew install openai/tools/openai
 
 The cask definition is generated by the OpenAI CLI release workflow.
 
+## Tart-related projects
+
+[Tart](https://github.com/openai/tart)-related projects publish the following formulas:
+
+```sh
+brew install openai/tools/tart
+brew install openai/tools/softnet
+brew install openai/tools/orchard
+brew install openai/tools/tart-guest-agent
+```
+
 ## License
 
 Copyright 2026 OpenAI
diff --git a/scripts/validate_recipes.rb b/scripts/validate_recipes.rb
@@ -0,0 +1,78 @@
+# frozen_string_literal: true
+
+require "uri"
+
+def validate(name, checks)
+  failed = checks.reject { |_description, passed| passed }.keys
+  abort("#{name} validation failed: #{failed.join(', ')}") unless failed.empty?
+end
+
+cask = File.read("Casks/openai.rb")
+cask_checks = {
+  "generated header" => cask.start_with?("# This file was generated by GoReleaser. DO NOT EDIT.\n"),
+  "openai cask token" => cask.match?(/^cask "openai" do$/),
+  "semantic version" => cask.match?(/^  version "\d+\.\d+\.\d+"$/),
+  "homepage" => cask.include?('  homepage "https://developers.openai.com/api/docs"'),
+  "binary" => cask.include?('  binary "openai"'),
+  "manpage" => cask.include?('  manpage "man/man1/openai.1.gz"'),
+  "macos amd64 zip" => cask.match?(/openai_#\{version\}_macos_amd64\.zip/),
+  "macos arm64 zip" => cask.match?(/openai_#\{version\}_macos_arm64\.zip/),
+  "linux amd64 tarball" => cask.match?(/openai_#\{version\}_linux_amd64\.tar\.gz/),
+  "linux arm64 tarball" => cask.match?(/openai_#\{version\}_linux_arm64\.tar\.gz/),
+  "release host" => cask.scan(%r{https://github\.com/openai/openai-cli/releases/download/v#\{version\}/}).length == 4,
+  "sha256 count" => cask.scan(/^\s+sha256 "[a-f0-9]{64}"$/).length == 4,
+}
+validate("Casks/openai.rb", cask_checks)
+
+formulas = {
+  "Formula/orchard.rb" => {
+    class_name: "Orchard",
+    repository: "orchard",
+    install: 'bin.install "orchard"',
+  },
+  "Formula/softnet.rb" => {
+    class_name: "Softnet",
+    repository: "softnet",
+    install: 'bin.install "softnet"',
+  },
+  "Formula/tart-guest-agent.rb" => {
+    class_name: "TartGuestAgent",
+    repository: "tart-guest-agent",
+    install: 'bin.install "tart-guest-agent"',
+  },
+  "Formula/tart.rb" => {
+    class_name: "Tart",
+    repository: "tart",
+    install: 'bin.write_exec_script "#{libexec}/tart.app/Contents/MacOS/tart"',
+    dependency: 'depends_on "openai/tools/softnet"',
+  },
+}
+
+unknown_formulas = Dir["Formula/*.rb"] - formulas.keys
+abort("Unexpected formula: #{unknown_formulas.join(', ')}") unless unknown_formulas.empty?
+
+formulas.each do |path, expected|
+  next unless File.exist?(path)
+
+  formula = File.read(path)
+  version = formula[/^\s*version "(\d+\.\d+\.\d+)"$/, 1]
+  urls = formula.scan(/^\s*url "([^"]+)"$/).flatten
+  shas = formula.scan(/^\s*sha256 "([a-f0-9]+)"$/).flatten
+  release_url = if version
+    %r{\Ahttps://github\.com/openai/#{Regexp.escape(expected[:repository])}/releases/download/v?#{Regexp.escape(version)}/[^/]+\z}
+  end
+  artifact_name = %r{/#{Regexp.escape(expected[:repository])}(?:[-_.][^/]+)?\z}
+
+  checks = {
+    "generated header" => formula.include?("# This file was generated by GoReleaser. DO NOT EDIT.\n"),
+    "formula class" => formula.match?(/^class #{expected[:class_name]} < Formula$/),
+    "semantic version" => !version.nil?,
+    "homepage" => formula.include?(%Q(homepage "https://github.com/openai/#{expected[:repository]}")),
+    "release URLs" => !urls.empty? && release_url && urls.all? { |url| url.match?(release_url) },
+    "artifact names" => !urls.empty? && urls.all? { |url| URI.decode_www_form_component(url).match?(artifact_name) },
+    "sha256 values" => shas.length == urls.length && shas.all? { |sha| sha.match?(/\A[a-f0-9]{64}\z/) },
+    "binary install" => formula.include?(expected[:install]),
+    "tap dependency" => !expected[:dependency] || formula.include?(expected[:dependency]),
+  }
+  validate(path, checks)
+end
