Skip to content

MANUAL RUN: Agent Office auto-update needs a Tauri updater key and a manifest host #2392

Closed

Description

@QuinnsCode

About 10 minutes, your hands. Tauri's updater (tauri-plugin-updater) needs two things an agent must not make:

  1. A minisign keypair: cargo tauri signer generate. Keep the private key in 1Password (varlock), and give the public key to a worker to put in shell/tauri.conf.json.
  2. Where latest.json lives (GitHub release asset is the cheapest) so the shell can check it.

After that a worker adds a Check for Updates item to the tray menu and the release step in desktop-drop.yml.

Part of #2282. Related: #2284.

Activity

  1. added
    manual runNeeds the owner to run it by hand (tokens, sign-ins); agents can't close it
    on Oct 27, 2026
  2. QuinnsCode commented on Oct 27, 2026

    @QuinnsCode
    OwnerAuthor

    Key generated; public key is in the shell config on #2391. Remaining for the owner: add TAURI_SIGNING_PRIVATE_KEY and TAURI_SIGNING_PRIVATE_KEY_PASSWORD as secrets, then a worker wires the release upload.

  3. QuinnsCode commented on Oct 27, 2026

    @QuinnsCode
    OwnerAuthor

    I think I did this already???

  4. QuinnsCode commented on Nov 3, 2026

    @QuinnsCode
    OwnerAuthor

    Answered per the 2026-11-03 audit (#3361).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    manual runNeeds the owner to run it by hand (tokens, sign-ins); agents can't close it

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions