MANUAL RUN: set Bob up with everything installed, and keeping itself updated #3397

About 2 to 3 hours on Bob (the 64 GB builder Mac), mostly waiting on downloads. Plugged in the whole time.

Everything Bob needs before the iOS day (#3306) and the agents' bun run builder runs, and how each one keeps itself up to date. The long version of each step is MAC_SETUP.md Parts 1, 2, 4 and 5; this is the checklist. Check the paste-back block at the bottom last and comment its output here, and an agent fixes anything missing.

1. macOS (30-60 min)

• System Settings > General > Software Update: install everything, restart, repeat until up to date.
• Same screen > Automatic Updates (the "i"): turn on Check for updates, Download new updates, Install Security Responses and system files. Leave "Install macOS updates" off, so a major update never lands mid-build.
• FileVault on, Firewall on.
• 100 GB or more free (Xcode, simulators and Docker take about 60 GB between them).
• Remote Login on (System Settings > General > Sharing). Note you@Your-Mac.local.

2. Apple's tools (1 h, mostly the Xcode download)

• Xcode, the full app, from the App Store. Open it once, accept the license, let it install its components.
• Xcode > Settings > Components: the iOS platform and an iPhone simulator runtime.
• Xcode > Settings > Accounts: sign in with your Apple ID. Note the Team ID for MANUAL RUN: the iOS block (Bob and Apple, all iOS owner-hands work in one day) #3306.
• sudo xcode-select -s /Applications/Xcode.app (so xcodebuild and swift use the full Xcode, not the Command Line Tools).
• App Store > Settings > Automatic Updates on, so Xcode updates itself.

3. Homebrew and what it installs (20 min)

• Homebrew, then the two echo ... >> ~/.zprofile lines it prints.
• brew install git gh node xcodegen
• brew install --cask docker blender tailscale; open Docker Desktop and Blender once each.
• Docker Desktop > Settings > Resources: about 48 GB memory, all CPUs, 120 GB disk. Settings > General: Start Docker Desktop when you sign in.
• brew doctor says "Your system is ready to brew".

What each is for: node runs the framework examples; xcodegen makes the iOS projects (#3306); Blender is headless model work (scripts/usdz.ts, the beast sheets, meshy-studio); Tailscale lets the office reach Bob off your Wi-Fi.

4. Bun, Rust and the builder (20 min)

• Rust: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh, then rustup target add wasm32-unknown-unknown (fm-daw, hippo-tycoon, auto-rig, motion-midi).
• The builder setup, which installs Bun if missing, makes three warm checkouts in ~/builder, turns sleep off on power and times one suite:

  curl -fsSL https://raw.githubusercontent.com/QuinnsCode/RustyBuns/main/scripts/builder-setup.sh | sh -s -- 3

• On the Mac you work on: ssh-copy-id you@Your-Mac.local, echo 'export BUILDER_HOST=you@Your-Mac.local' >> ~/.zshenv, restart the office, then bun run builder run scripts bun test ./ci-tier.test.ts says passing "on you@Your-Mac.local".

5. Keeping it all updated (10 min to set up)

• Homebrew upgrades itself and everything it installed every day:

  brew tap domt4/autoupdate && brew autoupdate start 86400 --upgrade --cleanup --immediate

  brew autoupdate status checks it. That covers git, gh, node, xcodegen, Docker, Blender and Tailscale.
• Weekly (MAC_SETUP.md Part 5), on Bob: bun upgrade, rustup update, and the builder-setup.sh line again (pulls main into each checkout and reinstalls). An agent can turn this into a launchd job if you'd rather never think about it: say so here.
• macOS and Xcode update themselves from step 1 and 2. After a macOS update, open Docker Desktop and Xcode once.

Paste-back check (2 min)

Run on Bob and comment the output here:

for c in "sw_vers -productVersion" "xcodebuild -version" "xcode-select -p" "xcrun simctl list runtimes" "swift --version" "xcodegen --version" "git --version" "gh --version" "node --version" "bun --version" "cargo --version" "rustup target list --installed" "docker info --format {{.ServerVersion}}" "/Applications/Blender.app/Contents/MacOS/Blender --version" "brew autoupdate status" "pmset -g"; do echo "== $c"; sh -c "$c" 2>&1 | head -4; done; df -h / | tail -1

6. Time Machine, once it all checks out (10 min, then the first backup runs on its own)

• Plug in the backup drive, System Settings > General > Time Machine > Add Backup Disk, encrypt it.
• Options: exclude ~/builder, ~/Library/Developer/Xcode/DerivedData, ~/Library/Developer/CoreSimulator and ~/Library/Containers/com.docker.docker (all rebuilt on demand, about 100 GB you don't need backed up).
• Let the first backup finish before the iOS day (MANUAL RUN: the iOS block (Bob and Apple, all iOS owner-hands work in one day) #3306), so a clean, set-up Bob is the restore point.

Part of #3306 (do this first). Long version: MAC_SETUP.md.