Repository navigation
Pin makepad d653bc44 / Octoscript-Makepad 6cf2d90a / App Hub 40abb23b (14th sweep, #450) - #453
Merged
Merged
Conversation
Makepad main d653bc44 carries the end of the per-app Splash runtime gates under the ruling of 8 October 2026 (#450): #117 drops the URL, media, socket and instruction-budget gates, and #118 the capability check before a host.request (option (c), confirmed by the product owner). The storage jail, inert password fields and the runtime's own checks on location, saved lists, the camera preview and agent.notify stay; host services that need a grant check it themselves (the device service checks the app's grant and the person's device consent for every camera, microphone and location call). It also carries #110-#116: renderer, Android, Linux and TextFlow work. The runtime overlay is rebased onto the new base: 34 patches, tree 0e7e0dac. Resolved by hand: - Settings patch, Android IME: upstream defers HideTextIME (pending_ime_hide); ShowTextIME still skips a dismissed keyboard and publishes a new editor session, and now also cancels a pending hide; HideTextIME publishes the editor before deferring. - Settings patch, GL program cache: the validation state (NeedsValidation, Supported, Disabled, the probe of a fresh export) is applied to upstream's rewritten cache functions. - host-json-boundary and host-response-json: the capability pre-check they edited is gone. - host-response-json's raw-envelope test drops its refusal mode (the runtime no longer builds that envelope); host-api-runtime-fixes' nested callback test has the host refuse the location sample instead. makepad-map-script-api.patch is dropped: makepad#113 merged it. video-api-smoke no longer expects the runtime to refuse an unlisted URL. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…heck makepad#118 (#450) removed the runtime's capability check before a host.request, so two checks of the native acceptance run named its text: - a background location sample without consent is now refused by App Hub's dispatcher (a foreground-only method from a background surface), with the device service's consent check behind it; - an undeclared microphone recording from an agent's tool call is refused by the dispatcher too, and in the foreground by the audio service, which checks the family itself. Either refusal passes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
App Hub #191 repins App Hub to the same runtime, and with the budget gate gone a runaway app tool handler still fails at once (a captured-error sink catches the per-evaluation limit); net alone hands an isolate its network module. It also brings #186 (components under wasm-components-v1), #188 (wasi:http and octosense:host admission) and Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
ymote
force-pushed
the
chore/runtime-makepad-d653bc44
branch
from
October 10, 2026 02:34
62fc450 to
cf9a6a8
Compare
Contributor
Author
|
Local CI passed on cf9a6a8 ( GitHub would run for this PR: desktop.yml, phone.yml, apps.yml. Merged on this local pass (macOS runner queue); GitHub CI runs on the merge commit on main.
Notes:
Native GitHub acceptance passed on the same head: embedded-browser.yml. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The 14th runtime sweep. It pins makepad
maind653bc44, Octoscript-Makepad 6cf2d90a (OSM #82 and #83) and App Hub 40abb23b (App Hub #191). It also carries the end of the per-app Splash runtime gates, under the ruling of 8 October 2026 (#450).What the runtime change means
network.hosts,images,weband the budget become declarations.host.requestfor a family the app did not declare. This is option (c), which the product owner confirmed directly. Nothing replaces it in App Hub's dispatcher. A host service that needs a grant checks it itself: the device service checks the app's grant and the person's device consent for every camera, microphone and location call, and the model (Code::Capability), audio, files, glance, device calendar, wasm and Gmail event services and the script-app tool executor check theirs. By a source read, mail, news and calendar have no check of their own. (Corrected after merge: an earlier version of this text listed model among them.)agent.notify.netalone hands an isolate its network module;wasm-components-v1), test: a running turn is shown to the other lane (octos#2644, in the pin) #188 (wasi:httpandoctosense:hostadmission) and Script apps' agents ask the person questions; App Hub to 8512be70 #190 (shared components) to this pin.The runtime overlay
The overlay is rebased from 32d6415f onto d653bc44: 34 patches, tree 0e7e0dac.
makepad-map-script-api.patchis dropped, since makepad#113 merged it. Resolved by hand:HideTextIME(pending_ime_hide).ShowTextIMEstill skips a dismissed keyboard and publishes a new editor session, and now also cancels a pending hide.HideTextIMEpublishes the editor before deferring.program_cache_path, driver-keyed names).host-json-boundaryandhost-response-json. The capability pre-check they edited is gone. The raw-envelope test drops its refusal mode, because the runtime no longer builds that envelope.host-api-runtime-fixes. Its nested-callback test now has the host refuse the location sample.device-consent. It still addsset_device_consentnext toset_policy. Its consent check inservice_allowedstill guards the runtime's own reads. Host methods are guarded by the device service.Other changes
video-api-smokeno longer expects the runtime to refuse an unlisted URL.desktop.yml native-host-api):phone/docs/build-tool.md,phone/docs/makepad-fork.md, and the architecture and Mail docs' pins.rom/docs/home-build.mdfollows in its own PR, because a ROM path would need the two-run local gate. Dated evidence is untouched.Checks
cargo test -p makepad-widgets --libon the overlay: 319 passed and 5 failed. The 5 fail identically on plain makepadmain.cargo check --target aarch64-linux-android -p makepad-widgetspasses. The OpenHarmony check needs DevEco's C toolchain forringand was not run.python3 tools/setup.py --check --cargoandpython3 tools/native_apps.py --checkpass.tools/ci-local.sh --only apps,desktop,phone --linux-host --offload):tools/test-host-api-native.pypasses);tools/ci-local-merge.shwhen it passes.Not run: a phone or other device, Windows outside CI, and OpenHarmony.
🤖 Generated with Claude Code