[ymote]

Fixes the shell test that fails beside the glance tile tests, apps::tests::bundled_apps_open_without_catalog_files_or_child_processes, and its sibling apps::tests::the_system_apps_ship_as_card_apps, which compares the same list.

assertion `left == right` failed
  left: ["rinx", "reference", "sheets", "apphub", "news", "photos", "maps", "camera", "mail", "ai-providers", "youtube", "glancesweep", "glanceinput", "glancetile", "glancequiet"]
 right: ["rinx", "reference", "sheets", "apphub", "news", "photos", "maps", "camera", "mail", "ai-providers", "youtube"]

Cause

The glance tile tests register probe system apps (os.glancetile, os.glanceinput, os.glancequiet, os.glancesweep) with octosense_appstore::system::register_system_app. That registry is process-wide, has no removal, and is exactly what system_card_apps(), and with it bundled_catalog(), lists. Any catalog test that ran after a glance test in the same process therefore saw the probes as launcher rows. Which test ran first decided the outcome.

Fix

Only test code changes; production code is untouched.

• apps::test_system_apps (cfg(test)): register notes a test's system-app id, then registers it. is_test_app answers whether an id was noted.
• The glance tests' register_test_app registers through it.
• The tests of the build's own catalog (bundled_apps_open_without_catalog_files_or_child_processes, bundled_apps_receive_same_base_theme_without_recreation, the_system_apps_ship_as_card_apps) read the catalog, then drop rows whose manifest id a test noted (build_rows). The note comes before the registration and the filter after the read, so a probe the catalog lists has always been noted. Anything else unexpected still fails the comparison.

The scenario tests' os.news fixture is left as it is: it runs only with OCTOS_SCENARIO_TEST_KERNEL, in its own filtered run.

Evidence

All runs were on the Linux build host. "main" is the shell test binary built at b221f7b; "fix" is this branch.

Run	main	fix
apps::tests::bundled_apps_open_without_catalog_files_or_child_processes apps::tests::the_system_apps_ship_as_card_apps glance_card::, 50×	11 of 50 failed (the bundled test 8×, the system-apps test 11×, always with the glance probes in the list)	0 of 50
app_chat:: apps::tests:: glance_card::, 50×	10 of 50 failed (all the catalog test)	0 of 50
Whole octosense-shell --lib suite with the real kernel, 50×	the catalog tests failed in 6 runs	0 runs (also 10 runs through cargo test --locked --features mobile-apps -p octosense-shell --lib)

Not part of this flake, and seen in both columns of the whole-suite runs:

• app_chat::tests::the_panel_opens_a_sharing_context_and_sends_person_turns_there (1 of 50 on main, 5 of 50 with the fix) is an existing race on the process-wide approvals store. approvals::tests::the_relay_gets_decisions_made_before_it_was_installed calls init_memory() unconditionally, which drops app_chat's consent mid-test. Beside approvals:: alone it fails 50 of 50 on main.
• mobile_island::tests::a_fourth_activity_docks_the_oldest_finished_else_the_least_important (1 of 30 on both).
• The Linux-only sandbox::tests::a_program_reached_through_a_link_outside_its_roots_starts (ETXTBSY).
• clients::tests::every_registered_app_names_a_real_crate failed in every run on both binaries. It needs cargo's [env], which a test binary run directly does not have.

🤖 Generated with Claude Code

[ymote]

Merged in a merge train; local CI (Mac with rom toolchain + --linux-host) passed on the train head 72e5d55, which contains this PR.

• tools/ci-local.sh --only all --linux-host, started 2026-10-02T14:00:45: passed. Desktop, phone and apps passed on the Mac; apps services, kernel-security and linux-host / sandbox passed on the Linux build host. Its rom.yml steps were skipped on the Linux host, and the train doesn't trigger rom.yml.
• tools/ci-local.sh --only all on the Mac with the rom toolchain (JDK 17, Android SDK, node 24), started 2026-10-02T14:51:21: 42/42 steps passed, none skipped.

The train was #291, #293, #297, #294, #298, #295, #296, #299, #300 and #292, on main f6678b5. After the last merge, main 301be0c has the tested head's tree.