home brow, other install options

Author: Hendler

.github/homebrew-templates/haisdk.rb.tmpl

@@ -0,0 +1,26 @@
+class Haisdk < Formula
+  include Language::Python::Virtualenv
+
+  desc "HAI SDK CLI for JACS registration and attestation workflows"
+  homepage "https://github.com/HumanAssisted/haisdk"
+  url "__HAISDK_SDIST_URL__"
+  sha256 "__HAISDK_SHA256__"
+  license "MIT"
+
+  depends_on "python@3.12"
+  depends_on "httpx"
+  depends_on "cryptography"
+  depends_on "jacs"
+
+  def install
+    python = Formula["python@3.12"].opt_bin/"python3.12"
+    venv = virtualenv_create(libexec, python, system_site_packages: true)
+    venv.pip_install buildpath
+    bin.install_symlink libexec/"bin/haisdk"
+  end
+
+  test do
+    assert_match "HAI SDK CLI", shell_output("#{bin}/haisdk --help")
+    assert_match "jacs version:", shell_output("#{Formula["jacs"].opt_bin}/jacs version")
+  end
+end

.github/homebrew-templates/jacs.rb.tmpl

@@ -0,0 +1,18 @@
+class Jacs < Formula
+  desc "JSON Agent Communication Standard command-line interface"
+  homepage "https://github.com/HumanAssisted/JACS"
+  url "https://crates.io/api/v1/crates/jacs/__JACS_VERSION__/download"
+  sha256 "__JACS_SHA256__"
+  license "Apache-2.0"
+
+  depends_on "rust" => :build
+
+  def install
+    system "cargo", "install", *std_cargo_args(path: "."), "--features", "cli", "--locked"
+  end
+
+  test do
+    assert_match "jacs version: #{version}", shell_output("#{bin}/jacs version")
+    assert_match "Usage: jacs [COMMAND]", shell_output("#{bin}/jacs --help")
+  end
+end

.github/workflows/homebrew.yml

@@ -0,0 +1,31 @@
+name: Homebrew Install Smoke Tests
+
+on:
+  push:
+    branches: ["master"]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  macos-brew-install:
+    runs-on: macos-latest
+    env:
+      HOMEBREW_NO_AUTO_UPDATE: "1"
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install JACS formula
+        run: brew install --formula ./Formula/jacs.rb
+
+      - name: Smoke test JACS CLI + MCP helpers
+        run: |
+          jacs version
+          jacs mcp --help
+
+      - name: Install HAISDK formula
+        run: brew install --formula --HEAD ./Formula/haisdk.rb
+
+      - name: Smoke test HAISDK CLI
+        run: |
+          haisdk --help
+          haisdk register --help

.github/workflows/nodejs.yml

@@ -2,14 +2,14 @@ name: Node.js (jacsnpm)
 
 on:
   push:
-    branches: [ "main" ]
+    branches: [ "master" ]
     paths:
       - 'jacsnpm/**'
       - 'jacs/**'  # jacsnpm depends on jacs
       - 'binding-core/**'  # jacsnpm verifyStandalone depends on binding-core
       - '.github/workflows/nodejs.yml'
   pull_request:
-    branches: [ "main" ]
+    branches: [ "master" ]
     paths:
       - 'jacsnpm/**'
       - 'jacs/**'  # jacsnpm depends on jacs

.github/workflows/python.yml

@@ -2,9 +2,9 @@ name: Python (jacs)
 
 on:
   push:
-    branches: [ "main" ]
+    branches: [ "master" ]
   pull_request:
-    branches: [ "main" ]
+    branches: [ "master" ]
   workflow_dispatch: # Allows manual triggering
 
 env:

.github/workflows/release-cli.yml

@@ -22,13 +22,19 @@ jobs:
           TAG="${GITHUB_REF#refs/tags/cli/v}"
           echo "version=$TAG" >> $GITHUB_OUTPUT
 
-      - name: Check Cargo.toml version matches tag
+      - name: Check Cargo.toml versions match tag
         run: |
           TAG_VERSION="${{ steps.extract.outputs.version }}"
-          CARGO_VERSION=$(grep '^version = ' jacs/Cargo.toml | head -1 | sed 's/version = "\(.*\)"/\1/')
-          echo "Cargo version: $CARGO_VERSION, tag: $TAG_VERSION"
-          if [ "$CARGO_VERSION" != "$TAG_VERSION" ]; then
-            echo "::error::Version mismatch! jacs/Cargo.toml has $CARGO_VERSION but tag is $TAG_VERSION"
+          JACS_VERSION=$(grep '^version = ' jacs/Cargo.toml | head -1 | sed 's/version = "\(.*\)"/\1/')
+          MCP_VERSION=$(grep '^version = ' jacs-mcp/Cargo.toml | head -1 | sed 's/version = "\(.*\)"/\1/')
+          echo "jacs version: $JACS_VERSION, tag: $TAG_VERSION"
+          echo "jacs-mcp version: $MCP_VERSION, tag: $TAG_VERSION"
+          if [ "$JACS_VERSION" != "$TAG_VERSION" ]; then
+            echo "::error::Version mismatch! jacs/Cargo.toml has $JACS_VERSION but tag is $TAG_VERSION"
+            exit 1
+          fi
+          if [ "$MCP_VERSION" != "$TAG_VERSION" ]; then
+            echo "::error::Version mismatch! jacs-mcp/Cargo.toml has $MCP_VERSION but tag is $TAG_VERSION"
             exit 1
           fi
 
@@ -40,31 +46,30 @@ jobs:
         include:
           - os: macos-latest
             target: aarch64-apple-darwin
-            artifact_name: jacs-cli
-            asset_name: jacs-cli-${{ needs.verify-version.outputs.version }}-darwin-arm64
-            archive: tar.gz
+            asset_suffix: darwin-arm64
+            archive_ext: tar.gz
           - os: macos-14
             target: x86_64-apple-darwin
-            artifact_name: jacs-cli
-            asset_name: jacs-cli-${{ needs.verify-version.outputs.version }}-darwin-x64
-            archive: tar.gz
+            asset_suffix: darwin-x64
+            archive_ext: tar.gz
           - os: ubuntu-latest
             target: x86_64-unknown-linux-gnu
-            artifact_name: jacs-cli
-            asset_name: jacs-cli-${{ needs.verify-version.outputs.version }}-linux-x64
-            archive: tar.gz
+            asset_suffix: linux-x64
+            archive_ext: tar.gz
           - os: ubuntu-24.04-arm
             target: aarch64-unknown-linux-gnu
-            artifact_name: jacs-cli
-            asset_name: jacs-cli-${{ needs.verify-version.outputs.version }}-linux-arm64
-            archive: tar.gz
+            asset_suffix: linux-arm64
+            archive_ext: tar.gz
           - os: windows-latest
             target: x86_64-pc-windows-msvc
-            artifact_name: jacs-cli.exe
-            asset_name: jacs-cli-${{ needs.verify-version.outputs.version }}-windows-x64
-            archive: zip
+            asset_suffix: windows-x64
+            archive_ext: zip
 
     runs-on: ${{ matrix.os }}
+    env:
+      VERSION: ${{ needs.verify-version.outputs.version }}
+      CLI_ASSET_NAME: jacs-cli-${{ needs.verify-version.outputs.version }}-${{ matrix.asset_suffix }}
+      MCP_ASSET_NAME: jacs-mcp-${{ needs.verify-version.outputs.version }}-${{ matrix.asset_suffix }}
     steps:
       - uses: actions/checkout@v4
 
@@ -73,37 +78,51 @@ jobs:
           toolchain: '1.93'
           targets: ${{ matrix.target }}
 
-      - name: Build CLI binary
-        run: cargo build --release -p jacs --features cli --target ${{ matrix.target }}
+      - name: Build binaries
+        run: |
+          cargo build --release -p jacs --features cli --target ${{ matrix.target }}
+          cargo build --release -p jacs-mcp --target ${{ matrix.target }}
 
       - name: Smoke test (Unix)
         if: runner.os != 'Windows'
-        run: ./target/${{ matrix.target }}/release/jacs --version
+        run: |
+          ./target/${{ matrix.target }}/release/jacs --version
+          ./target/${{ matrix.target }}/release/jacs-mcp --help > /dev/null
 
       - name: Smoke test (Windows)
         if: runner.os == 'Windows'
-        run: .\target\${{ matrix.target }}\release\jacs.exe --version
+        shell: pwsh
+        run: |
+          .\target\${{ matrix.target }}\release\jacs.exe version
+          .\target\${{ matrix.target }}\release\jacs-mcp.exe --help | Out-Null
 
       - name: Package (Unix)
         if: runner.os != 'Windows'
         run: |
           cp target/${{ matrix.target }}/release/jacs jacs-cli
-          tar czf ${{ matrix.asset_name }}.tar.gz jacs-cli
-          shasum -a 256 ${{ matrix.asset_name }}.tar.gz > ${{ matrix.asset_name }}.tar.gz.sha256
+          cp target/${{ matrix.target }}/release/jacs-mcp jacs-mcp
+          tar czf ${CLI_ASSET_NAME}.tar.gz jacs-cli
+          tar czf ${MCP_ASSET_NAME}.tar.gz jacs-mcp
+          shasum -a 256 ${CLI_ASSET_NAME}.tar.gz > ${CLI_ASSET_NAME}.tar.gz.sha256
+          shasum -a 256 ${MCP_ASSET_NAME}.tar.gz > ${MCP_ASSET_NAME}.tar.gz.sha256
 
       - name: Package (Windows)
         if: runner.os == 'Windows'
         shell: pwsh
         run: |
           Copy-Item "target/${{ matrix.target }}/release/jacs.exe" "jacs-cli.exe"
-          Compress-Archive -Path "jacs-cli.exe" -DestinationPath "${{ matrix.asset_name }}.zip"
-          Get-FileHash "${{ matrix.asset_name }}.zip" -Algorithm SHA256 | ForEach-Object { "$($_.Hash.ToLower())  ${{ matrix.asset_name }}.zip" } | Out-File "${{ matrix.asset_name }}.zip.sha256" -Encoding ascii
+          Copy-Item "target/${{ matrix.target }}/release/jacs-mcp.exe" "jacs-mcp.exe"
+          Compress-Archive -Path "jacs-cli.exe" -DestinationPath "${env:CLI_ASSET_NAME}.zip"
+          Compress-Archive -Path "jacs-mcp.exe" -DestinationPath "${env:MCP_ASSET_NAME}.zip"
+          Get-FileHash "${env:CLI_ASSET_NAME}.zip" -Algorithm SHA256 | ForEach-Object { "$($_.Hash.ToLower())  ${env:CLI_ASSET_NAME}.zip" } | Out-File "${env:CLI_ASSET_NAME}.zip.sha256" -Encoding ascii
+          Get-FileHash "${env:MCP_ASSET_NAME}.zip" -Algorithm SHA256 | ForEach-Object { "$($_.Hash.ToLower())  ${env:MCP_ASSET_NAME}.zip" } | Out-File "${env:MCP_ASSET_NAME}.zip.sha256" -Encoding ascii
 
       - uses: actions/upload-artifact@v4
         with:
-          name: ${{ matrix.asset_name }}
+          name: binaries-${{ matrix.asset_suffix }}
           path: |
-            ${{ matrix.asset_name }}.*
+            ${{ env.CLI_ASSET_NAME }}.*
+            ${{ env.MCP_ASSET_NAME }}.*
 
   release:
     needs: [verify-version, build]
@@ -128,7 +147,9 @@ jobs:
           body: |
             ## JACS CLI v${{ needs.verify-version.outputs.version }}
 
-            Prebuilt CLI binaries for verifying and signing JACS documents.
+            Prebuilt binaries for:
+            - `jacs` (CLI)
+            - `jacs-mcp` (MCP server)
 
             ### Install
 
@@ -146,7 +167,12 @@ jobs:
             sudo mv jacs-cli /usr/local/bin/
             ```
 
-            Or install via npm/pip (ships with `jacs`).
+            Install MCP directly from the CLI (uses these platform assets by default):
+
+            ```bash
+            jacs mcp install
+            jacs mcp run
+            ```
 
             ### Verify checksums
             ```bash

.github/workflows/release-homebrew.yml

@@ -0,0 +1,129 @@
+name: Sync Homebrew Tap
+
+on:
+  push:
+    tags:
+      - 'cli/v*'
+      - 'crate/v*'
+  workflow_dispatch:
+    inputs:
+      jacs_version:
+        description: "JACS version for Formula/jacs.rb (defaults to tag or jacs/Cargo.toml)"
+        required: false
+      haisdk_version:
+        description: "HAISDK version for Formula/haisdk.rb (defaults to latest on PyPI)"
+        required: false
+      haisdk_pypi_package:
+        description: "PyPI package name for HAISDK"
+        required: false
+        default: "haisdk"
+      tap_repository:
+        description: "Homebrew tap repository (owner/repo)"
+        required: false
+        default: "HumanAssisted/homebrew-jacs"
+      tap_branch:
+        description: "Tap branch (stable branch is master)"
+        required: false
+        default: "master"
+
+permissions:
+  contents: read
+
+jobs:
+  sync-formulas:
+    if: ${{ secrets.HOMEBREW_TAP_TOKEN != '' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Resolve versions and artifact checksums
+        id: resolve
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          ref_name="${GITHUB_REF_NAME:-}"
+          jacs_version_input="${{ github.event.inputs.jacs_version }}"
+          haisdk_version_input="${{ github.event.inputs.haisdk_version }}"
+          haisdk_pkg_input="${{ github.event.inputs.haisdk_pypi_package }}"
+
+          if [[ -n "${jacs_version_input}" ]]; then
+            jacs_version="${jacs_version_input}"
+          elif [[ "${ref_name}" =~ ^cli/v(.+)$ ]]; then
+            jacs_version="${BASH_REMATCH[1]}"
+          elif [[ "${ref_name}" =~ ^crate/v(.+)$ ]]; then
+            jacs_version="${BASH_REMATCH[1]}"
+          else
+            jacs_version="$(grep '^version = ' jacs/Cargo.toml | head -1 | sed 's/version = "\(.*\)"/\1/')"
+          fi
+
+          haisdk_pkg="${haisdk_pkg_input:-haisdk}"
+          if [[ -z "${haisdk_pkg}" ]]; then
+            haisdk_pkg="haisdk"
+          fi
+
+          pypi_json="$(mktemp)"
+          curl -fsSL "https://pypi.org/pypi/${haisdk_pkg}/json" -o "${pypi_json}"
+
+          if [[ -n "${haisdk_version_input}" ]]; then
+            haisdk_version="${haisdk_version_input}"
+          else
+            haisdk_version="$(python3 -c 'import json,sys; print(json.load(open(sys.argv[1], encoding="utf-8"))["info"]["version"])' "${pypi_json}")"
+          fi
+
+          read -r haisdk_sdist_url haisdk_sha256 < <(python3 -c 'import json,sys; data=json.load(open(sys.argv[1], encoding="utf-8")); version=sys.argv[2]; entry=next((f for f in data.get("releases", {}).get(version, []) if f.get("packagetype")=="sdist"), None); (entry is not None) or sys.exit(f"No sdist found for version {version}"); print(entry["url"], entry["digests"]["sha256"])' "${pypi_json}" "${haisdk_version}")
+
+          jacs_crate="$(mktemp)"
+          curl -fsSL "https://crates.io/api/v1/crates/jacs/${jacs_version}/download" -o "${jacs_crate}"
+          jacs_sha256="$(sha256sum "${jacs_crate}" | awk '{print $1}')"
+
+          echo "jacs_version=${jacs_version}" >> "${GITHUB_OUTPUT}"
+          echo "jacs_sha256=${jacs_sha256}" >> "${GITHUB_OUTPUT}"
+          echo "haisdk_version=${haisdk_version}" >> "${GITHUB_OUTPUT}"
+          echo "haisdk_sdist_url=${haisdk_sdist_url}" >> "${GITHUB_OUTPUT}"
+          echo "haisdk_sha256=${haisdk_sha256}" >> "${GITHUB_OUTPUT}"
+          echo "haisdk_pypi_package=${haisdk_pkg}" >> "${GITHUB_OUTPUT}"
+
+      - name: Generate formula files
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p generated/Formula
+
+          sed \
+            -e "s|__JACS_VERSION__|${{ steps.resolve.outputs.jacs_version }}|g" \
+            -e "s|__JACS_SHA256__|${{ steps.resolve.outputs.jacs_sha256 }}|g" \
+            .github/homebrew-templates/jacs.rb.tmpl > generated/Formula/jacs.rb
+
+          sed \
+            -e "s|__HAISDK_SDIST_URL__|${{ steps.resolve.outputs.haisdk_sdist_url }}|g" \
+            -e "s|__HAISDK_SHA256__|${{ steps.resolve.outputs.haisdk_sha256 }}|g" \
+            .github/homebrew-templates/haisdk.rb.tmpl > generated/Formula/haisdk.rb
+
+      - name: Checkout Homebrew tap repository
+        uses: actions/checkout@v4
+        with:
+          repository: ${{ github.event.inputs.tap_repository || 'HumanAssisted/homebrew-jacs' }}
+          ref: ${{ github.event.inputs.tap_branch || 'master' }}
+          token: ${{ secrets.HOMEBREW_TAP_TOKEN }}
+          path: tap
+
+      - name: Publish updated formulas to tap
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p tap/Formula
+          cp generated/Formula/jacs.rb tap/Formula/jacs.rb
+          cp generated/Formula/haisdk.rb tap/Formula/haisdk.rb
+
+          cd tap
+          if git diff --quiet -- Formula/jacs.rb Formula/haisdk.rb; then
+            echo "No Homebrew formula changes to publish."
+            exit 0
+          fi
+
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add Formula/jacs.rb Formula/haisdk.rb
+          git commit -m "Update formulas: jacs v${{ steps.resolve.outputs.jacs_version }}, haisdk v${{ steps.resolve.outputs.haisdk_version }}"
+          git push origin HEAD:${{ github.event.inputs.tap_branch || 'master' }}