[ymote]

OctosCode (octos-org/octoscode-app) becomes a native app on desktop and phone, paired with OctoSense's own kernel automatically. Following the person's decision ("A"), it gets a kernel port held to a coding scope: no listener, no token, no pairing. The alternatives were host authority, or a new octos token class.

Design: ADR 0003, item 9 (in this PR)

• The port.
  • Makepad's OctosUiPort (makepad Desktop: host Rinx as the linked module it is #101, in makepad main 68d1f4ec since Repin makepad to main 68d1f4ec and Octoscript-Makepad to aa80f72c #349).
  • The module host claims it for the instance that opened it, as a peer link.
  • octosense_kernel::serve_scoped connects it as one more consumer of the private pipe, and sends Reset on a kernel restart.
  • Only an entry with "kernel": "coding" gets a port.
• The router is the whole boundary. Over the pipe octos applies none of its external checks, so crates/kernel/src/router.rs holds a scoped consumer to its Scope:
  • refused requests are answered by the router (and logged);
  • a session's frames wait for its tool list (session/tool_list/set);
  • the consumer hears only its own sessions, and host frames about them go to the shell;
  • results are filtered, and so are the notifications it lets through (Scope::rewrite): octos repeats an opened session as a session/open notification with its whole capability list;
  • it may answer only the kernel requests it was sent.
• The coding scope (crates/shell/src/coding_scope.rs).
  • Own sessions only: _main:api:code-<id>, no topic, profile _main.
  • Folders: its jail, or under a granted rw root (home on a desktop), never OctoSense or kernel data, hidden top-level folders, or a folder holding them.
  • A coding client's methods, with no provider, key or model edits, shutdown, peers, permission profiles or skill installs. Every advertised method list it gets, in a result or a notification, is trimmed to match.
  • Each session's tool list is octos's external-turn list, so no command runs yet. Commands come next: a shell-run tool approved per command, behind Setup's switch.
• Theme fix. The module host points the preludes' theme at mod.theme before a module registers. A styled isolate's diverged, so a module's own theme roles never reached its widgets.

Pins (one commit on main, after #349 and #350 merged)

• OctosCode: octoscode-app main f8561625.
  • deps: serve every makepad crate from the OctoSense-org fork #4 is the embedded mode.
  • deps: pin makepad to octoscript 1fdce27 (ported Octoscript VM) #7 builds the standalone app on the same makepad (68d1f4ec), Octoscript-Makepad (aa80f72c, unpatched), Octoscript (2e37d9e6) and octos (39e22d45) as this repository.
  • Fix OctoSense name in macOS menu bar #6 is its new logo.
• makepad and Octoscript-Makepad come from main, through Repin makepad to main 68d1f4ec and Octoscript-Makepad to aa80f72c #349. That includes makepad Desktop: host Rinx as the linked module it is #101, so there is no runtime patch, and ADR 0002: the system toolbox (granted research/crawl services and workflow templates) #77's design lowering. This PR only adds the octoscript-render patch to .sources.

No longer blocked on app-contract 1.3.0. Main already takes octosense-app-contract from App Hub 7bb63ff9 ([patch.crates-io], contract 1.4.0). That revision includes 1.3.0's octoscode reservation, so a_script_app_may_not_take_a_native_apps_id_or_namespace passes without a crates.io release.

Not run: a phone. Android is unverified.

Tests

• router 11, coding scope 4, module ports 2; tools 115.
• cargo test -p octosense-kernel: 62.
• Desktop shell: 857. Phone shell: 946, including the reserved-name test.
• End to end, hidden desktop, on 296d734 with a host kernel at octos 39e22d45 and OctosCode f8561625 (an earlier run used 8039d44c):
  • the port was granted;
  • 53 methods advertised, in the session/open result and in octos's session/open notification. Before the rewrite, the notification still carried all 102;
  • a code-… session opened in the picked folder, with OctosCode's new logo in its sidebar;
  • read_file and list_dir ran;
  • answers streamed in full (after OctosCode's envelope-ordering fix);
  • the strip returned to Ready;
  • the chrome follows the shell's palette;
  • OctosCode's model picker (octoscode-app deps: converge on the fork's octoscript revision (and fix the earlier diagnosis) #5) lists the providers' models but cannot switch them. profile/llm/select changes the _main profile's model, which the system agent shares, so it stays outside the scope; Setup owns it.

Upstream

• The live answers froze because octos sends a turn's terminal on a direct lane when the connection has no projection.envelope.v2, and the stdio pipe has none. OctosCode now holds out-of-order envelopes.
• The octos fix is fix(oup): deliver turn terminals after queued envelopes when v2 is not negotiated octos-org/octos#2692, merged and included in octos 39e22d45 (Pin octos main 39e22d45 #350).

🤖 Generated with Claude Code

[ymote]

Local CI passed on f942473 (tools/ci-local.sh --only desktop,phone,apps --linux-host, 23m24s, Darwin arm64; the ubuntu jobs on the Linux build host, Linux x86_64).

GitHub would run for this PR: desktop.yml, phone.yml, apps.yml. Merged on this local pass (macOS runner queue); GitHub CI runs on the merge commit on main.

Job	Step	Result	Time
ci-local / drift	The local mapping fits the workflows	PASS	-
desktop.yml / desktop	Prepare the pinned framework sources	PASS	1s
desktop.yml / desktop	Compile the desktop with the shared runtime	PASS	2m03s
desktop.yml / desktop	One copy of every shell source	PASS	-
desktop.yml / desktop	Desktop tools and scripts	PASS	23s
desktop.yml / desktop	One Makepad, App Hub, octos and Rinx in the locked graph	PASS	2s
desktop.yml / desktop	The native apps' generated places match native-apps.json	PASS	0s
desktop.yml / native-host-api	Prepare the pinned framework sources	PASS	1s
desktop.yml / native-host-api	Build the native acceptance host and pinned Hub CLI	PASS	36s
desktop.yml / native-host-api	Signed app tool calls a real OS permission API	PASS	3s
phone.yml / home	Prepare pinned sources and the reviewed runtime patch	PASS	1s
phone.yml / home	Validate launcher icons and Apple asset catalogs	PASS	6s
phone.yml / home	Compile Home and its bundled modules	PASS	2m27s
phone.yml / home	Verify the single runtime graph	PASS	4s
phone.yml / home	The native apps' generated places match native-apps.json	PASS	0s
phone.yml / home	The pinned octos revision	PASS	0s
phone.yml / home	Build octos (unless cached)	PASS	-
phone.yml / home	Build Home, App Hub admission and runtime policy tests	PASS	2m52s
phone.yml / home	Test Home, App Hub admission and runtime policy	PASS	11m18s
phone.yml / home	Two-lane scenario (real kernel, scripted model)	PASS	39s
apps.yml / services (linux)	python3 tools/setup.py	PASS	0s
apps.yml / services (linux)	Shared system app interface	PASS	0s
apps.yml / services (linux)	Kernel service	PASS	11s
apps.yml / services (linux)	App peers	PASS	24s
apps.yml / services (linux)	AI providers config	PASS	4s
apps.yml / services (linux)	Connected provider protocols and Linux host adapter	PASS	38s
apps.yml / services (linux)	L0 in-card chat (sys.chat, host side)	PASS	8s
apps.yml / services (linux)	System toolbox (workflow templates)	PASS	1m24s
apps.yml / kernel-security (linux)	python3 tools/setup.py	PASS	0s
apps.yml / kernel-security (linux)	The pinned octos revision	PASS	0s
apps.yml / kernel-security (linux)	Build octos (unless cached)	PASS	-
apps.yml / kernel-security (linux)	Real-kernel tests	PASS	31s
apps.yml / apps	python3 tools/setup.py	PASS	1s
apps.yml / apps	Host services (Mail, AI providers, News)	PASS	40s
apps.yml / apps	Connected accounts and Rinx editor	PASS	13s
apps.yml / apps	Shell AI services (crates/ai-host)	PASS	59s
apps.yml / apps	AppCard runtime setup safeguards	PASS	0s
apps.yml / apps	AppCard clippy (own crates; shared runtime compiles)	PASS	38s
apps.yml / apps	AppCard transport and store	PASS	16s
apps.yml / apps	One Makepad, App Hub, octos and Rinx in the locked graph	PASS	3s
linux-host / sandbox (linux)	python3 tools/setup.py	PASS	0s
linux-host / sandbox (linux)	Process sandbox on Linux (Landlock, seccomp)	PASS	1m19s

Notes:

• GitHub runs Python 3.12; this run used Python 3.9.6
• GitHub runs Python 3.12; the Linux host used Python 3.14.4