[ymote]

Moves the runtime from makepad 39a9de88 to makepad main c155f61d, through Octoscript-Makepad 2cc5ef37 (Octoscript-Makepad#71). The new makepad changes:

• Desktop release packages (macOS .app/.dmg, Windows NSIS, Linux .deb/.AppImage) and release-desktop workflow #94: Files, Task and Browser get an empty library beside each binary, so they can be native process apps.
• model: one-shot model calls for contained apps (model.complete) #95: Calculator, Clock, Notes, Reminders and Weather each open their own agent's link as a module and answer their tools there. The ai-services peer gains serve_tools, service_answer and as_service_call.
• YouTube as a contained system app (os.youtube) #96: hosted Notes and Reminders start empty; the standalone windows keep their samples.
• feat(toolbox): the octos research engine behind mod.research (blocked on octos#2582 + #2585 merge and the octos pin bump) #97: Files' chat panel only reads.
• feat: Talk to Octos, opt-in shared Octos for native, web and terminal clients #98: CEF keeps its stable profile under MAKEPAD_HOME when that is set, so a sandboxed Browser keeps it in its jail.

Nothing in this repository uses these yet; the native-apps PR that follows does.

What moves

• Root Cargo.toml: every makepad revision, plus octoscript-makepad/octoscript-node. In native-apps.json only the Sheets and Terminal revisions move. tools/native_apps.py has nothing to regenerate.
• Both native-runtime.lock.json files (root and apps/appcard/).
• runtime-patches.lock.json: base c155f61d, new tree 3eadf628.
  • The five patches (settings, system-back, IME inactive no-restart, Windows remote capture, Windows frame completion) reapply unchanged; none touches a file makepad Desktop release packages (macOS .app/.dmg, Windows NSIS, Linux .deb/.AppImage) and release-desktop workflow #94–feat: Talk to Octos, opt-in shared Octos for native, web and terminal clients #98 changed.
  • The tree was computed by applying them in order to c155f61d in a throwaway index. The same method reproduces the old tree 976bf55b on 39a9de88.
• Cargo.lock doesn't change. The docs under phone/docs that name the pinned hashes (build-tool.md, makepad-fork.md) are updated.
• rom/docs/home-build.md gets its own follow-up, as with Repin the runtime to makepad 39a9de88 (OpenHarmony idle and input, GL GPU timing, terminal shortcuts) #289/rom docs: the runtime's Makepad and Octoscript-Makepad hashes after #289 #303, so this PR doesn't trigger rom.yml.

Checks

• python3 tools/setup.py --update, python3 tools/setup.py --check --cargo and python3 tools/native_apps.py --check all pass.
• cargo check --locked -p octosense (with and without --features mobile-apps), and from phone/ cargo check --locked -p octosense-home --features mobile-apps: pass. tools/check-shell-graph.sh -p octosense: ok.
• makepad c155f61d itself: its tree is identical to the batch validated before merging. That batch passed cargo check of the ten changed packages with no new warnings, and their tests with only the known Reminders failure (theme_roles_come_from_each_roots_owning_vm, which also fails on 39a9de88).
• Local CI on the exact head runs before merging.

🤖 Generated with Claude Code

[ymote]

Local CI passed on c27576d (tools/ci-local.sh --only desktop,phone,apps --linux-host, 26m18s, Darwin arm64; the ubuntu jobs on the Linux build host, Linux x86_64).

GitHub would run for this PR: desktop.yml, phone.yml, apps.yml. Merged on this local pass (macOS runner queue); GitHub CI runs on the merge commit on main.

Job	Step	Result	Time
ci-local / drift	The local mapping fits the workflows	PASS	-
desktop.yml / desktop	Prepare the pinned framework sources	PASS	3s
desktop.yml / desktop	Compile the desktop with the shared runtime	PASS	3m52s
desktop.yml / desktop	One copy of every shell source	PASS	-
desktop.yml / desktop	Desktop tools and scripts	PASS	12s
desktop.yml / desktop	One Makepad, App Hub, octos and Rinx in the locked graph	PASS	10s
desktop.yml / desktop	The native apps' generated places match native-apps.json	PASS	0s
phone.yml / home	Prepare pinned sources and the reviewed runtime patch	PASS	2s
phone.yml / home	Compile Home and its bundled modules	PASS	2m33s
phone.yml / home	Verify the single runtime graph	PASS	2s
phone.yml / home	The native apps' generated places match native-apps.json	PASS	0s
phone.yml / home	The pinned octos revision	PASS	0s
phone.yml / home	Build octos (unless cached)	PASS	-
phone.yml / home	Build Home, App Hub admission and runtime policy tests	PASS	4m51s
phone.yml / home	Test Home, App Hub admission and runtime policy	PASS	8m51s
phone.yml / home	Two-lane scenario (real kernel, scripted model)	PASS	31s
apps.yml / services (linux)	python3 tools/setup.py	PASS	0s
apps.yml / services (linux)	Kernel service	PASS	10s
apps.yml / services (linux)	App peers	PASS	25s
apps.yml / services (linux)	AI providers config	PASS	4s
apps.yml / services (linux)	L0 in-card chat (sys.chat, host side)	PASS	9s
apps.yml / services (linux)	System toolbox (workflow templates)	PASS	1m31s
apps.yml / kernel-security (linux)	python3 tools/setup.py	PASS	0s
apps.yml / kernel-security (linux)	The pinned octos revision	PASS	-
apps.yml / kernel-security (linux)	Build octos (unless cached)	PASS	-
apps.yml / kernel-security (linux)	Real-kernel tests	PASS	31s
apps.yml / apps	python3 tools/setup.py	PASS	1s
apps.yml / apps	Host services (Mail, AI providers, News)	PASS	1m28s
apps.yml / apps	Shell AI services (crates/ai-host)	PASS	2m40s
apps.yml / apps	AppCard runtime setup safeguards	PASS	0s
apps.yml / apps	AppCard clippy (own crates; shared runtime compiles)	PASS	39s
apps.yml / apps	AppCard transport and store	PASS	19s
apps.yml / apps	One Makepad, App Hub, octos and Rinx in the locked graph	PASS	3s
linux-host / sandbox (linux)	python3 tools/setup.py	PASS	0s
linux-host / sandbox (linux)	Process sandbox on Linux (Landlock, seccomp)	PASS	1m23s

Notes:

• GitHub runs Python 3.12; this run used Python 3.9.6
• GitHub runs Python 3.12; the Linux host used Python 3.14.4