fix(release): share one poll budget across brew tarballs and pin the brew jobs

Author: elkaix

.changeset/brew-native-formula.md

@@ -2,4 +2,4 @@
 '@pymodel/pythinker-code': minor
 ---
 
-Homebrew installs the native `pythinker` binary on macOS and Linux and no longer requires Node.js; a Homebrew install updates only through `brew upgrade`.
+Homebrew now installs the native `pythinker` binary on macOS and Linux, without Node.js.

scripts/release/release-workflows.test.mjs

@@ -32,6 +32,10 @@ void test('release workflow uses full push-boundary lane signals and isolated jo
   assert.match(workflow, /APPLE_CERTIFICATE_P12: \$\{\{ secrets\.MAC_CSC_LINK \}\}/u);
   assert.match(workflow, /APPLE_NOTARIZATION_KEY_P8: \$\{\{ secrets\.APPLE_API_KEY_P8 \}\}/u);
   assert.match(workflow, /^  update-brew-tap:\n    timeout-minutes: 20$/mu);
+  const brewJob = workflow.slice(workflow.indexOf('  update-brew-tap:'), workflow.indexOf('  verify-brew-install:'));
+  assert.match(brewJob, /needs:\n      - release\n      - publish-native-assets\n/u);
+  assert.match(workflow, /^  verify-brew-install:/mu);
+  assert.match(workflow, /BREW_RESULT: \$\{\{ needs\.verify-brew-install\.result \}\}/u);
 });
 
 void test('VS Code release supports isolated recovery and attests verified VSIX files', () => {

scripts/release/update-brew-formula.mjs

@@ -137,6 +137,9 @@ async function main() {
   const packageJson = JSON.parse(readFileSync(new URL('../../apps/pythinker-code/package.json', import.meta.url), 'utf8'));
   const version = packageJson.version;
 
+  // One budget for all four tarballs, so the poll always ends inside the
+  // job's timeout.
+  const deadline = Date.now() + ASSET_POLL_BUDGET_MS;
   const assets = {};
   for (const target of Object.values(BREW_TARGETS)) {
     const url = nativeTarballUrl(version, target);
@@ -148,7 +151,7 @@ async function main() {
           setTimeout(resolve, ms);
         }),
       now: () => Date.now(),
-      budgetMs: ASSET_POLL_BUDGET_MS,
+      budgetMs: Math.max(0, deadline - Date.now()),
       intervalMs: ASSET_POLL_INTERVAL_MS,
     });
     assets[target] = { url, sha256: createHash('sha256').update(body).digest('hex') };