Repository navigation
T102 — Installed hosts run the proxy, end to end #2772
Description
Task
| slice | size | difficulty | model | who | estimated lines |
|---|---|---|---|---|---|
| Installed hosts run the proxy | M | routine | standard | a person | 100 (0 code, 100 tests) |
On a Mac installed from a release, sign in with
min auth login, and a GitHub grant box runsgh api userthrough the proxy with no extra step.
Covers:
- none
Layers:
- mac:
- scripts/session-e2e.sh:
bep_first_slice_end_to_endon a Mac installed from the release, with a GitHub sign-in andE2E_BEP_PRIVATE_REPO, unchanged; the person also runs the close-out walk's stories 01 to 03 and posts both results on the epic ./scripts/session-e2e.sh bep_first_slice_end_to_end
- scripts/session-e2e.sh:
Waits on:
- T100 — Stage bep beside minvmd in the macOS release and install it #2771
- T101 — Build, sign and notarize bep in the macOS release #2770
- Hold the BEP keys in the Secure Enclave, with bep bundled under a provisioning profile #2812
Plan block
### T102 — Installed hosts run the proxy, end to end
slice: S14
kind: integration
covers: none
size: M
est: 0 code, 100 tests
executor: human
difficulty: routine
model: standard
diagnostics: `bep.log` beside the host daemon's state shows the proxy listening, and `min box audit` shows the admit
observability: the proxy's connection spans in `bep.log` name the box and the authority
layers:
- mac:
- scripts/session-e2e.sh: `bep_first_slice_end_to_end` on a Mac installed from the release, with a GitHub sign-in and `E2E_BEP_PRIVATE_REPO`, unchanged; the person also runs the close-out walk's stories 01 to 03 and posts both results on the epic
test: ./scripts/session-e2e.sh bep_first_slice_end_to_end
produces: none
consumes: none
proof: On a Mac installed from a release, sign in with `min auth login`, and a GitHub grant box runs `gh api user` through the proxy with no extra step.
depends on:
- blocked by gominimal/minimal#2771
- blocked by gominimal/minimal#2770
- blocked by gominimal/minimal#2812
Activity
norrietaylor commentedon Oct 31, 2026
This now also waits on #2812, the custody fix: Secure Enclave keys, with
bepbundled under a provisioning profile. The #2436 probe showed that a signed, notarizedbepstill gets an exportable key in the login keychain, so a releasebeprefuses to start on an installed Mac until #2812 lands. #2812 itself waits on the Apple setup in gominimal/inbox#1187.norrietaylor commentedon Nov 4, 2026
This now also waits on gominimal/inbox#1199:
min secret setrefuses every secret when the proxy is the installedbep.app.Generated by Claude Code