# whisper - the official Whisper CLI, packaged for COPR from the upstream release.
#
# The whisper CLI (github.com/whisper-sec/whisper-cli, MIT) is a statically-linked
# Go binary. This spec installs the official, signed linux/amd64 and linux/arm64
# release binaries verbatim, so the packaged binary is bit-for-bit identical to the
# upstream release and the build needs no network access and no Go toolchain - it is
# therefore reproducible across every COPR chroot (fedora-40/41/rawhide, epel-9).

# Prebuilt, already-stripped static Go binary: no debuginfo, and do not let rpm
# post-process (strip/mangle) the ELF, so the installed bytes match the signed
# release asset exactly (verifiable against the upstream checksums.txt).
%global debug_package %{nil}
%global __brp_strip %{nil}
%global __brp_strip_static_archive %{nil}
%global __brp_strip_comment_note %{nil}

Name:           whisper
Version:        0.210.1
Release:        1%{?dist}
Summary:        A routable IPv6 identity and safe egress for AI agents

License:        MIT
URL:            https://github.com/whisper-sec/whisper-cli

# Official release binaries (verified against the release checksums.txt).
Source0:        https://github.com/whisper-sec/whisper-cli/releases/download/v%{version}/whisper-linux-amd64
Source1:        https://github.com/whisper-sec/whisper-cli/releases/download/v%{version}/whisper-linux-arm64
# Upstream source archive - used only for LICENSE, README and third-party notices.
Source2:        https://github.com/whisper-sec/whisper-cli/archive/v%{version}/whisper-cli-%{version}.tar.gz

# Only linux/amd64 and linux/arm64 binaries are published upstream.
ExclusiveArch:  x86_64 aarch64

%description
The official Whisper CLI: give an AI agent a real, routable IPv6 /128 identity
(AS219419), verifiable from the outside, with safe egress that leaves from that
address. One command to register, connect, and verify.

This package installs the upstream, statically-linked release binary unmodified.

%prep
# Unpack ONLY the source archive (Source2) for LICENSE / README / notices; the
# release binaries (Source0/Source1) are installed as-is and never unpacked.
%setup -q -T -b 2 -n whisper-cli-%{version}

%build
# Nothing to compile: the binaries are the official upstream release artifacts.

%install
%ifarch x86_64
install -D -m0755 %{SOURCE0} %{buildroot}%{_bindir}/whisper
%endif
%ifarch aarch64
install -D -m0755 %{SOURCE1} %{buildroot}%{_bindir}/whisper
%endif

%check
# Guard: the installed binary must report the packaged version, or the build fails.
%{buildroot}%{_bindir}/whisper --version
%{buildroot}%{_bindir}/whisper --version | grep -qw '%{version}'

%files
%license LICENSE
%doc README.md THIRD-PARTY-NOTICES.md
%{_bindir}/whisper

%changelog
* Wed Jul 01 2026 Whisper Security <packages@whisper.online> - 0.124.3-1
- Package the official whisper CLI v0.124.3 (prebuilt linux/amd64 + linux/arm64 release binaries).