OctoSense desktop 0.1.0-rc.6

OctoSense desktop 0.1.0-rc.6 brings the in-app updater and WASI socket support to macOS (Apple Silicon), Windows (x64), and Linux (x64).

• Updates: open OctoSense Updates to check Stable, Release candidate, or Preview releases. Downloads are checked against a GitHub-signed checksum manifest before native installer handoff. RC builds default to the Release candidate channel.
• Rust/Wasm networking: compatible components can use ordinary TCP, UDP, and DNS, alongside the existing HTTP API. Waiting operations support cancellation and deadlines; per-app resource limits bound open connections. This does not make every Rust crate portable: native OS dependencies and raw IP sockets remain outside this interface.
• Developer compatibility: socket components declare host_api.required: {"wasm.sockets": 1} with host-api-v1 and wasm-components-v1. The updated App Flow SDK adds the marker. RC5 does not provide socket support.

Installing from RC5: download and install RC6 manually once. RC5 has no updater; RC6 introduces it for subsequent releases. The updater opens the platform's installation flow and does not silently replace the running application.

Packages: macOS DMG or app ZIP; Windows NSIS installer; Linux DEB or AppImage. This is a desktop release; Android Home has a separate release channel.

The release includes SHA256SUMS and its GitHub Sigstore attestation, SHA256SUMS.sigstore.json. The macOS package is not Developer ID signed or notarized, and the Windows installer is not Authenticode signed. The checksum attestation authenticates the release separately from those OS signatures. OAuth provider registrations still require operator configuration.

Source: f9f6fea9, including Wasm sockets #484 and updater #446. All 59 required local CI steps passed with no failed or skipped steps on the identical source tree; native Linux service/security and Windows checks also passed. Official release build.

Release validation: all three official package jobs and their privacy scans passed. All eight package/receipt files match the reviewed build artifacts and SHA256SUMS. RC6’s exact updater verifier accepted the GitHub signature, and refused modified checksums and a different release tag.

The actual macOS package passed Updates checks and public App Hub search, installation, launch and restart persistence for Repo Radar. Six isolated Linux startup checks passed using the DEB payload and extracted AppImage. Windows passed archive, executable, resource and kernel-receipt inspection; Windows GUI execution was not tested. Native installer handoff/replacement and full installed-app functionality were not exercised in this release acceptance. App Hub’s Install action remains below its permission review.

Public updater verification: after publication, the exact RC6 Client with a synthetic RC5 identity selected RC6 for all four desktop package targets and downloaded/reverified the Mac installer. The actual public Mac package reports up to date on RC and Preview, and unavailable on Stable; both tested Linux layouts report up to date on RC. No installer was opened.

---

OctoSense 桌面版 0.1.0-rc.6 为 macOS（Apple Silicon）、Windows（x64）和 Linux（x64）带来应用内更新器与 WASI 套接字支持。

• **应用更新：**打开 OctoSense Updates，检查稳定版、候选版或预览版。下载文件通过 GitHub 签名的校验清单验证后，再交给系统安装流程。RC 版本默认使用候选版更新通道。
• **Rust/Wasm 网络：**兼容组件可以使用普通 TCP、UDP 和 DNS，以及已有的 HTTP API。等待操作支持取消和超时，并按应用限制连接资源。并非所有 Rust crate 都因此可移植；原生系统依赖和原始 IP 套接字仍不属于此接口。
• **开发者兼容性：**套接字组件须保留 host-api-v1、wasm-components-v1，并声明 host_api.required: {"wasm.sockets": 1}。新版 App Flow SDK 会添加该标记。RC5 不支持套接字。

**从 RC5 升级：**请先手动下载并安装 RC6。RC5 没有更新器；RC6 引入更新器，用于后续版本。更新器会打开对应平台的安装流程，不会在后台静默替换正在运行的应用。

**安装包：**macOS DMG 或 app ZIP；Windows NSIS 安装程序；Linux DEB 或 AppImage。本次仅发布桌面版，Android Home 使用独立发布通道。

发布文件包含 SHA256SUMS 和 GitHub Sigstore 签名证明 SHA256SUMS.sigstore.json。macOS 安装包未使用 Developer ID 签名或公证，Windows 安装程序没有 Authenticode 签名；校验清单签名与这两类系统签名不同。OAuth 提供商注册仍需运营方配置。

源代码：f9f6fea9，包含 Wasm 套接字 #484 和更新器 #446。相同源代码树的 59 项必需本地 CI 步骤全部通过，无失败或跳过；原生 Linux 服务、安全测试和 Windows 检查也通过。正式发布构建。

发布验证： 三个平台的正式打包任务与隐私扫描全部通过。8 个安装包及收据文件与已验收的构建产物、SHA256SUMS 完全一致。RC6 的原版更新器验证代码接受了 GitHub 签名，并拒绝了篡改校验和与错误发布标签。

实际 macOS 安装包通过 Updates 检查，并从公开 App Hub 搜索、安装和打开 Repo Radar，重启后安装状态仍保留。使用 DEB 内容与解压后的 AppImage 完成了 6 项隔离 Linux 启动检查。Windows 通过归档、可执行文件、资源和内核收据检查；未执行 Windows 图形界面测试。本次发布验收没有执行原生安装程序交接、替换已安装程序或完整应用功能测试。App Hub 的 Install 按钮仍位于权限审核内容下方。

公开更新验证： 发布后，以模拟 RC5 身份运行的 RC6 原版 Client 为 4 种桌面安装包正确选出 RC6，并下载、重新验证了 Mac 安装包。实际公开 Mac 安装包的 RC、Preview 通道显示已是最新，Stable 通道显示无可用版本；两种已测试 Linux 布局的 RC 通道也显示已是最新。没有打开安装程序。

OctoSense desktop 0.1.0-rc.5

OctoSense desktop 0.1.0-rc.5

This prerelease adds native D3 charts to contained apps and Glance, with charts.d3@1 compatibility checks before installation. It also fixes the first Wasm-component HTTPS request when both Rustls providers are linked. Certificate verification and app isolation remain unchanged. Charts · HTTPS fix.

Built from 83d356c2 by the successful official workflow. Download macOS arm64 DMG/ZIP, Windows x64 installer, or Linux x64 DEB/AppImage below. All nine assets were verified against their full GitHub digests and SHA256SUMS; package and final privacy scans passed. Exact-source CI evidence.

Repo Radar v0.1.2 is now published in App Hub (signed catalog sequence 16). A fresh full public Mac download, using the default public store with no catalog overrides, passed 93/93 scoped native functional checks. All nine installed files matched the sealed app; five sessions exited cleanly. Coverage includes installation, GitHub HTTPS, native charts, release Markdown, watchlist persistence and Glance publication.

Known limits: the public run recorded nine UI stalls, up to 3.730 seconds; a separate 42-step title observation recorded seven, up to 9.020 seconds. One PR title was present in data and widgets but absent from an original captured frame; the follow-up did not reproduce it, so neither cause nor fix is proven. This is not a blanket UX or performance pass. Live model answers, Android, Windows/Linux GUI, an update to a second app version, and Glance Open project activation were not validated by this public-store test.

macOS has a linker ad-hoc signature, without Developer ID signing or notarization; see Apple’s Open Anyway instructions. The Windows installer has no Authenticode signature. Google/GitHub OAuth still requires distributor configuration. This desktop release does not upgrade Android Home.

---

OctoSense 桌面版 0.1.0-rc.5

此预发布版向受托管应用和 Glance 提供原生 D3 图表，并通过 charts.d3@1 在安装前检查兼容性。本版还修复了同时链接两种 Rustls provider 时，Wasm 组件第一次 HTTPS 请求失败的问题；证书验证和应用隔离规则保持不变。图表支持 · HTTPS 修复。

官方工作流已通过，源码为 83d356c2。下方提供 macOS arm64 DMG/ZIP、Windows x64 安装程序及 Linux x64 DEB/AppImage。九个发布文件均已完整核对 GitHub 摘要和 SHA256SUMS，各平台及最终隐私扫描均通过。对应源码的 CI 记录。

Repo Radar v0.1.2 已上架公开 App Hub，签名目录序号为 16。使用完整下载的公开 Mac 安装包、默认公开商店且不覆盖目录设置，完成 93/93 项限定范围的原生功能检查。安装后的九个文件均与已封装应用一致，五次会话均正常退出。覆盖安装、GitHub HTTPS、原生图表、发行说明 Markdown、自选列表持久化及 Glance 发布。

已知限制：公开商店测试记录到九次 UI 停顿，最长 3.730 秒；另一次 42 步标题观察记录到七次，最长 9.020 秒。原始截图中有一条 PR 标题未绘出，但数据和控件中均存在；后续观察未复现，原因及修复方法仍未确定。这不代表整体 UX 或性能验收通过。本次公开商店测试未验证真实模型回答、Android、Windows/Linux GUI、应用升级到第二个版本，或 Glance 的“Open project”跳转。

macOS 仅有链接器 ad-hoc 签名，未使用 Developer ID 签名，也未公证；请参阅 Apple 的“仍要打开”说明。Windows 安装程序没有 Authenticode 签名。Google/GitHub OAuth 仍需发行方配置。本次桌面发布不会升级 Android Home。

OctoSense desktop 0.1.0-rc.4

Desktop 0.1.0-rc.4 packages for macOS ARM64, Windows x64 and Linux x64. Release workflow passed; check downloads against the attached SHA256SUMS.

OctoSense Desktop RC4 includes shared WebAssembly components and a consistent public host API policy for Splash, app agents and components.

• Capability and network declarations describe usage; they no longer gate public API calls. Verified app identity, device consent, OS permissions, account scope, human write review, private storage and tool-sharing approvals remain enforced.
• Apps share immutable component code while keeping separate state and files. Installation still verifies publisher attestations and the Hub catalog.
• App Hub discovers the host contract before opening cards, explains unavailable apps, and supports reopening compatible apps after a cold restart. The loader binds each admitted app's identity before running its script.
• Slow compiled-cache reads fall back to verified source compilation after 50 ms, with at most two readers per process. Invocation limits are unchanged.

Release source: 9266b0083544d86bd7636543b5ff60c61b26460f, tagged desktop-v0.1.0-rc.4. It contains #457 plus the release-scanner correction #466; the correction changes no runtime source.

Before packaging, the runtime source passed 52/52 Mac/Linux CI steps, Windows embedded-browser checks, macOS native API 31/31 and full App Hub/component checks 11/11. Isolated OnePlus 6 packages passed component checks 28 native + 13 driver and API checks 31 native + 45 driver. These results belong to tested source 8b09e05d / merged 40ca21da, not the RC4 archives. See the component evidence and API evidence.

Windows validation passed 42/42 tests and the shell check at a8e170d4 (merged as af205d9c). That later test-only fix is not in RC4; excluding test-only additions, production source is unchanged. This does not establish binary or archive equivalence.

All nine final assets passed checksum, GitHub digest and package-receipt verification; package and final privacy scans passed. The final Mac archive is byte-identical to the candidate that passed 11/11 checks on its first attempt: real App Hub installs, cold restart, shared components and separate app state/files. This used a genuine GitHub-attested rehearsal catalog; the public catalog was unchanged. Earlier unpublished RC3 results remain separate in the evidence.

Unsigned packages: macOS has only a linker ad-hoc signature, with no Developer ID signature or notarization; Windows has no publisher signature. Signing jobs passed the original packages through because release certificates were absent. For a blocked Mac launch, see Apple’s app-specific opening instructions.

Embedded web pages need the platform browser prerequisites.

GitHub and Google sign-in still require distributor-supplied OAuth registrations; the release workflow provides none. Installing a connected app does not configure its provider login.

This is a desktop prerelease, not a Home upgrade. Live-model reasoning, real account writes, physical permission approval, OpenHarmony device execution and Windows/Linux installed-GUI acceptance are not established by these tests. iOS components are not supported.

---

桌面 0.1.0-rc.4 提供 macOS ARM64、Windows x64 和 Linux x64 安装包。发布工作流已通过；请用附件 SHA256SUMS 核对下载文件。

OctoSense 桌面 RC4 包含共享 WebAssembly 组件，以及适用于 Splash、应用 Agent 和组件的统一公开宿主 API 策略。

• 能力和网络声明用于说明用途，不再限制公开 API 调用。应用身份、设备同意、系统权限、账户范围、人工写入审核、私有存储及跨应用工具共享审批仍然生效。
• 应用共享不可变组件代码，状态和文件各自隔离。安装仍验证发布者证明及 Hub 目录。
• App Hub 在打开卡片前发现宿主 ABI，说明应用不可用的原因，并支持冷启动后重开兼容应用。加载器在运行脚本前绑定已准入应用的身份。
• 编译缓存读取超过 50 毫秒就回退到已验证源码编译，每进程最多保留两个读取线程；调用限制不变。

发行源码：9266b0083544d86bd7636543b5ff60c61b26460f，tag 为 desktop-v0.1.0-rc.4。它包含 #457 及发布扫描修复 #466；后者不修改运行时源码。

打包前，运行时源码通过 Mac/Linux CI 52/52 步、Windows 嵌入式浏览器检查、Mac 原生 API 31/31 和完整 App Hub/组件检查 11/11。独立 OnePlus 6 包通过组件检查 28 项原生断言加 13 项驱动检查，以及 API 检查 31 项原生断言加 45 项驱动检查。这些结果属于测试源码 8b09e05d / 合并提交 40ca21da，不代表 RC4 归档包验收。详见组件证据和 API 证据。

Windows 验证在 a8e170d4 通过 42/42 项测试及 Shell 编译检查（合并为 af205d9c）。该后续测试修复不在 RC4 中；排除测试专用更改后，生产源码不变，但这不证明二进制或归档包等价。

最终九个附件均通过校验和、GitHub 摘要及安装包收据校验；各安装包与最终附件集合均通过隐私扫描。最终 Mac 归档包与首次运行通过 11/11 项检查的候选包字节完全一致，覆盖真实 App Hub 安装、冷启动、共享组件及各应用独立状态/文件。测试使用真实 GitHub 证明支持的演练目录，没有修改公开目录。此前未发布的 RC3 结果在证据中单独保留。

**安装包未获发布者签名：**macOS 只有链接器生成的临时签名，没有 Developer ID 签名或公证；Windows 没有发布者签名。发布证书缺失，因此签名任务将原始包原样传递。Mac 首次启动若被阻止，可参阅 Apple 针对单个应用的打开说明。

嵌入网页需要相应的平台浏览器运行依赖。

GitHub 和 Google 登录仍需发行方提供 OAuth 注册信息；发布工作流未配置这些信息。从 App Hub 安装连接账户的应用不会自动配置服务商登录。

这是桌面预发布版，不会升级 Home。上述测试不代表真实模型推理、真实账户写入、实体权限批准、OpenHarmony 真机或 Windows/Linux 安装后界面验收；不支持 iOS 组件。

OctoSense Home 0.1.0-beta.2

OctoSense Home 0.1.0-beta.2

English | 简体中文

Home beta2 brings the current App Hub publishing format, SDK 1.10 host APIs and app-bundled Wasm functions to Android. It is a standalone launcher APK with an optional matching System Bridge APK, not a ROM image or a desktop update.

Install

• ARM64, Android 13 or newer; both APKs declare minimum API 33 and target API 35. This minimum is not a claim that every compatible device was tested.
• Install Home; add the Bridge from the same release for its available integration features. Ordinary installation does not grant ROM privileges or notification access.
• Both APKs use version code 2026100918 and the existing public beta1 signing identity. Verify downloads against SHA256SUMS. A differently signed ROM installation is a separate update track.

Certificate SHA-256: 6bf3927755714edb325ea7fbdc7c7e8780f4a103589d3ee5926b982773f11e34.

What changed

• App Hub supports GitHub-attested app releases. Apps can discover versioned host methods and declare SDK 1.10 capabilities; admission and app permissions still apply.
• Public APIs cover bounded file import/export, image selection, Android text sharing, fresh location, device calendar, reviewed Mail composition, short audio sessions and Video widget controls. These are specific services, not unrestricted access to all Android APIs.
• Admitted apps can ship bounded core-Wasm functions with cancellation, resource limits and fresh call instances. This does not provide WASI or arbitrary native-library loading.

Limits

• Google/GitHub OAuth client registrations are not bundled. GitHub needs distributor/operator configuration. Google Android authorization is unavailable until its native adapter is implemented. Live account and app-backend login are not validated by this release smoke.
• File transfers and image selection are limited to 1 MiB per file. Image selection chooses one PNG/JPEG/WebP document; it does not grant photo-library access. Text sharing reports chooser handoff, not delivery, and excludes attachments.
• Device-calendar writes and Mail sends require host-owned human review. Real mail delivery, calendar mutations, live location and hardware permissions remain unverified here.
• Audio recording is limited to 30 seconds; short-clip playback to 60 seconds and 1 MiB input. Cancellation or foreground loss discards an unfinished recording. These APIs do not provide speech recognition or background music streaming. Android video recording is unsupported; network-video redirects/HLS remain incompletely validated. Earlier local-video checks used a separate silent synthetic fixture.
• Quiet periodic Mail checks do not establish continuous background model execution. The optional desktop craft-engine set is not enabled by default in Home. Minor system status-bar glyph clipping was observed in the emulator and also in beta1; this is not full UX acceptance.

Verification and source

The APKs and home-v0.1.0-beta.2 tag use source f6759edd390d2cd6c7b0772bbbbc4432cdd4903c. Local Phone+ROM CI passed 28/28, with no failures or skips, on dd8587f9aceb2308824d33c8045340cf2b512dab. Both commits have exactly the same Git tree, d8ecef1b4cecb83a0ee612a84400aa7d766824d0; this is identical-tree validation, not an exact-commit CI claim for the APK build.

Final APK signatures, manifests and complete extracted-payload privacy checks passed. The exact signed pair passed an isolated API 35 emulator upgrade from beta1, retaining synthetic app data and UID, starting Home and binding Bridge, and verifying the installed kernel hash and --version. That direct executable probe does not establish a production app-agent or model session. Original build.json and separate CI/package receipts retain these boundaries.

The exact pair also passed fresh installation and visual navigation checks: Calculator 2 + 3 = 5, Android Back to Home, live App Hub catalog and the empty Glance view. The separate-package OnePlus 6 test passed 14/14 checks, including 7 + 8 = 15, edge Back, kernel execution under its app UID and retained synthetic data after restart. Its DEX, native libraries, assets and resource files match production; its identity, manifest and signing differ. The test package was removed, and the existing Home, Bridge and default launcher were unchanged. This is not a production APK upgrade test on the physical phone.

OctoSense Desktop 0.1.0-rc.2

RC2 includes SDK 1.10.0 and adds discoverable host APIs for installed OctoScript apps: files, location, reviewed Mail/Calendar operations and bounded foreground audio, with platform-specific support. It adds Video playback controls, enables bundled Wasm on macOS/Linux, and brings Rust engine tools and skills to the system assistant. Engine tools are not unrestricted third-party app APIs.

Platform / 平台	Downloads / 下载
macOS Apple Silicon	DMG · App ZIP
Linux x86_64	DEB · AppImage
Windows x64	Installer / 安装器

All three platforms’ package integrity and privacy checks passed. Source CI passed 49 steps; Mac packaged acceptance and Linux extracted-AppRun startup also passed. Linux package installation and FUSE launch remain untested; separate fixture results do not establish installer or real-account acceptance.

Before installing:

• Mac packages have verified ad-hoc signatures, without Apple Developer ID or notarization. Downloaded Gatekeeper behavior is untested.
• Windows packages have no embedded signing certificate; the installer has not been executed. WebView2 Runtime is required.
• Google/GitHub OAuth client registrations are not bundled; those sign-ins require distributor configuration.
• Local Video playback was validated. Network-video redirect and nested playlist allowlist enforcement remains incomplete.
• This desktop release leaves Android Home and ROM releases unchanged. Linux browser/account features require WebKitGTK and an unlocked Secret Service; AppImage uses host Wayland/Mesa libraries.

RC2 包含 SDK 1.10.0，向已安装的 OctoScript 应用开放可发现的文件、定位、宿主审核后的邮件/日历操作和有界前台音频 API，各平台支持不同。另有 Video 播放控制、macOS/Linux 应用自带 Wasm，以及系统助手的 Rust 引擎工具与技能；引擎工具并非向第三方应用无限开放。

三个平台的安装包完整性及隐私检查均已通过。源码 CI 的 49 个步骤、Mac 安装包验收及 Linux 解包后 AppRun 启动也已通过。Linux 安装和 FUSE 启动未测试；独立测试程序的结果不能替代安装器或真实账户验收。

安装前请注意：

• Mac 仅有已验证的 ad-hoc 签名，没有 Apple Developer ID 或公证，未测试下载后的 Gatekeeper 行为。
• Windows 没有内嵌签名证书，未执行安装器；需要 WebView2 Runtime。
• 不捆绑 Google/GitHub OAuth 客户端注册配置，需由发行方配置对应登录。
• 已验证本地 Video 播放；网络视频重定向及嵌套播放列表的白名单检查尚不完整。
• Android Home 和 ROM 发行版不变。Linux 网页/账户功能需要 WebKitGTK 和已解锁的 Secret Service；AppImage 使用宿主 Wayland/Mesa 库。

Read the full English notes / 完整中文说明. Verify downloads / 请核对下载：SHA256SUMS. Build, packaging and validation records / 构建、打包及验证记录：RELEASE-PROVENANCE.json.

OctoSense desktop 0.1.0-rc.1 — GitHub App Hub publishing

OctoSense desktop 0.1.0-rc.1 provides the compatible host for GitHub-authenticated App Hub publishing. Developers request admission through an App Hub issue and attest releases with GitHub Actions, without maintaining a separate publisher signing key. Existing key-signed apps retain their original update identity.

Built from 933abbcf. This is a prerelease; the separate Home/ROM release is unchanged.

Platform	Download
macOS Apple Silicon	OctoSense_0.1.0-rc.1_aarch64.dmg or OctoSense_0.1.0-rc.1_macos_aarch64.app.zip
Windows x64	octosense_0.1.0-rc.1_x64-setup.exe
Linux x64	octosense_0.1.0-rc.1_amd64.deb or octosense_0.1.0-rc.1_x86_64.AppImage

Embedded pages need GTK 3 and WebKitGTK 4.1 (or compatible 4.0) on Linux, or a supported Microsoft Edge WebView2 Runtime on Windows; neither engine is bundled. See the runtime prerequisites.

Check downloads against SHA256SUMS. RELEASE-PROVENANCE.json and the platform receipts identify the source, artifact hashes, build jobs and signing status. macOS was built and tested locally from this tag; Windows and Linux packages came from successful package jobs in the tagged release run. All three CI package jobs ultimately passed. The remaining signing and draft-release jobs were cancelled after the required artifacts were verified. This release uses the locally validated macOS package and the tagged CI Windows/Linux packages; it does not claim an overall successful workflow. These packages are not Developer ID signed/notarized or Windows publisher signed.

Included changes:

• GitHub catalog proofs and publisher continuity are checked during installation and updates; app contract 1.8.0 is supported.
• App-owned script tools run in the admitted app’s existing isolate, and runtime discovery reports the available host APIs.
• Connected account services retain credentials in the host; supported native input paths require human review for protected writes. Ordinary embedded web pages work on Windows and Linux X11/XWayland.
• Installed L0 cards follow their host pane’s position and scroll to controls below the viewport. Chinese fallback fonts and bundled resources are included.
• Release inspection extracts AppImages without executing them. Publishing credentials are excluded from scanner and extractor subprocess environments.

Try App Hub’s GitHub Notes, Inbox Assistant, Google Calendar, or Camera Card Demo. Public catalog sequence 13 contains their new GitHub-authenticated releases: 0.2.1 for the connected samples and 1.1.1 for Camera. Their fresh io.github.ymote.* IDs keep old installations and data separate; there is no automatic migration. These listings are macOS-only. Camera is a static storyboard, not a camera integration.

Validation:

• Exact release source: 44/44 required local CI steps passed, with no failures or skips, plus the exact-source Windows embedded-browser check.
• Three connected samples: public catalog search, install, update, local-draft retention and restart; 70 assertion groups across 15 native runs. Initial install/update used 128b0524; final reopening used the release source 933abbcf.
• Camera: public install/update and final-source reopening passed after recovery. The first automated Open attempt immediately after the update timed out; subsequent Library Open and restart worked. The initial failure’s cause is unproven and remains in the attached evidence.
• OnePlus 6: 8 publisher install/update checks and 5 L0 interaction checks passed on isolated packages built from the release source. Normal Home and personal accounts were untouched. Phone evidence distinguishes the test catalog from production sample admission.
• Platform packages and payloads passed privacy scans; Linux packages also passed a separate non-executing rescan. Windows/Linux installer GUI acceptance was not run.

Limitations:

• Google/GitHub OAuth client registrations are not bundled. Operators must provision them privately. These downloads alone do not enable connected account login; ordinary users should not need to create developer projects. Public Google verification is not established.
• Windows/Linux protected-write approval remains unsupported and fails closed. The connected samples are not offered for those platforms.
• This publishing rerun did not connect provider accounts, make external writes or exercise live models.
• Google Android authorization, Windows/Linux embedded backend authentication, and native Wayland embedding remain unsupported. Ordinary WebReader support is separate from authentication support.
• Wasm remains opt-in through wasm-lab, disabled in the default desktop package.

简体中文：桌面 0.1.0-rc.1 提供支持 GitHub 身份发布的 App Hub 宿主。开发者通过 Issue 申请上架，GitHub Actions 为版本生成证明，无需另存开发者签名私钥；旧签名应用继续遵守原有更新身份。上表提供 macOS Apple Silicon、Windows x64 和 Linux x64 下载，请核对 SHA256SUMS。macOS 在本机从同一源码构建，Windows/Linux 来自标签工作流已通过的打包任务；三个 CI 打包任务最终均已通过；所需文件验证完成后，取消了后续签名和草稿发布任务。本次采用已完成原生验收的本机 macOS 包及标签 CI 生成的 Windows/Linux 包，不把整个工作流标为成功。发行包没有 Apple Developer ID 签名、公证或 Windows 发布者签名。

此次包含应用自身工具执行、宿主 API 查询、L0 卡片定位与滚动、中文字体、GitHub 发布证明校验及 contract 1.8.0。公开目录第 13 版已上架四个新 ID 示例；前三个为 0.2.1，Camera 为 1.1.1，当前均仅声明支持 macOS，旧安装及数据不迁移。Camera 是静态界面示例。最终源码通过 44 项本地 CI；三个连接示例完成 15 次原生运行、70 组断言，最终源码复测通过。Camera 首次更新后的自动打开曾超时，之后通过 Library 打开及重启验证，初次失败原因尚未确定。OnePlus 6 的隔离包通过 8 项发布流程及 5 项 L0 交互检查，没有替换正常 Home 或读取个人账号。

发行包不含 Google/GitHub OAuth 客户端注册配置，仅下载安装仍不能启用账号连接，需运营方私下配置，不能要求普通用户创建开发者项目。此次未验证真实账号登录、远程写入或模型调用。Google Android 授权、Windows/Linux 内嵌后端登录和原生 Wayland 内嵌浏览器仍不支持；Wasm 默认关闭。Linux 内嵌网页需 GTK 3 与 WebKitGTK，Windows 需兼容的 WebView2 Runtime，发行包均未捆绑浏览器引擎。Windows/Linux 的受保护写入批准仍不支持，会安全拒绝；安装器的实际 GUI 验收也未运行。此桌面发行不更新手机 Home 或 ROM。

OctoSense desktop 0.1.0-beta.2 — connected App Hub preview

OctoSense desktop 0.1.0-beta.2 — connected App Hub preview

This macOS Apple Silicon preview adds the runtime needed to install and open
GitHub Notes, Inbox Assistant and Google Calendar from the official App Hub.
Each app is published by ymote and remains separately installed and permissioned.

Included runtime features:

• Shared host-owned GitHub/Google authorization and app-scoped connections.
• GitHub, Gmail and Google Calendar service access behind declared grants.
• The native Rinx Markdown editor used by GitHub Notes.
• Account-scoped app agents, exact draft review and Glance integration.
• Accurate App Hub disclosure of network access through shared host services.
• macOS Command-A reaches the focused app for Select All; Ctrl+Alt+A retains the window manager prefix.

Use App Hub Search for “GitHub Notes”, “Inbox Assistant” or “Google Calendar”,
review permissions, then Install and Open. No OctoSense cloud account is needed.
Provider sign-in requires a host OAuth registration; the release does not contain
provider credentials or connect to a personal account automatically. Configuration:
https://github.com/OctoSense-org/OctoSense/blob/desktop-v0.1.0-beta.2/crates/oauth-service/README.md

All 45 local CI steps passed on the exact release source across the desktop,
phone, apps and ROM workflows.

The final production package passed nine official Store functional checks and
six independently reviewed visual gates, including all three apps' local drafts
restored after a full restart. Original screenshots and source/bundle hashes:
https://github.com/OctoSense-org/OctoSense-App-Hub/tree/8de9ba11d82a1433fd70718174fe86e730fdd059/reviews/connected-apps-0.1.0

Preview boundaries: live GitHub/Google authorization, repository commits, Gmail
sends and Calendar writes have not been accepted. The native installation check
uses local drafts and the Inbox sample's clearly fictional examples. Provider
fixture tests are separate from that check. Google authorization on Android is
not implemented for these samples; Windows/Linux UI acceptance is not claimed.
The Calendar sample's assistant is advisory and cannot book events itself.

The Mac download is not Developer ID signed or notarized. Compare downloaded
files with SHA256SUMS. Source commit, kernel revision, resource notices and
validation details are recorded in the accompanying receipts. The native Store check uses ordinary input acknowledgement plus captured state/pixels. Frame-synchronous inputs in earlier Makepad runs and read-only captures in final validation reported submission errors; this is not a clean frame-latency or long-run stability result.

---

OctoSense 桌面版 0.1.0-beta.2：关联服务与 App Hub 预览

此 macOS Apple Silicon 预览版提供从官方 App Hub 安装并打开 GitHub Notes、
Inbox Assistant 和 Google Calendar 所需的运行时。三款应用由 ymote 发布，
分别安装、分别授权；不需要注册 OctoSense 云端账户。

在 App Hub 搜索应用名称，查看权限后选择 Install，再选择 Open。GitHub/Google
登录需要在宿主中配置 OAuth 应用注册。本发布包不包含提供方凭据，也不会自动
连接个人账户。配置说明：
https://github.com/OctoSense-org/OctoSense/blob/desktop-v0.1.0-beta.2/crates/oauth-service/README.zh-CN.md

发布源码通过 desktop、phone、apps、ROM 四个工作流的全部 45 项本地 CI 步骤。

最终生产包通过了九项官方商店功能检查和六项独立截图审查，包括完整重启后
恢复三款应用的本地草稿。原始截图和源码、应用包哈希：
https://github.com/OctoSense-org/OctoSense-App-Hub/tree/8de9ba11d82a1433fd70718174fe86e730fdd059/reviews/connected-apps-0.1.0

预览限制：尚未验收真实 GitHub/Google 登录、仓库提交、Gmail 发送或 Calendar
写入。原生安装验收使用本地草稿和 Inbox 明确标注的虚构示例；提供方模拟测试
单独记录。三款示例的 Android Google 登录尚未实现，未宣称 Windows/Linux
界面已验收。Calendar 示例的助手仅提供建议，不能自行预约。

Mac 下载包未经过 Developer ID 签名或公证。请用 SHA256SUMS 核对下载文件。
随附记录列出源码提交、内核版本、资源许可及验证范围。原生商店检查使用普通输入确认，随后核对界面状态和原始截图。此前 Makepad 帧同步输入确认以及最终验收中的只读截图均出现过提交错误，不宣称帧延迟或长期稳定性已通过验收。macOS 的 Command-A 全选快捷键冲突已修复，窗口管理器仍使用 Ctrl+Alt+A 前缀。

OctoSense Home 0.1.0-beta.1

OctoSense Home's first beta: the OctoSense shell as a phone app. You get a home screen with a glance screen, system apps (News, Photos, Maps, Camera, Mail, YouTube, AI providers), and an Assistant that works with each app's own agent.

This is a pre-release, and on Android it has one serious known issue (below). It is for people who want to try OctoSense on a phone and report what breaks.

Read this first: Android agents stop when the app leaves the screen

Android 15 cuts the network of an app that is not in front. If you switch to another app, or the screen turns off, while the Assistant or an app agent is working, its next call to the model fails within seconds. The request then disappears from the conversation. Keep OctoSense in front until an answer arrives. The fix is to keep the app in the foreground while an agent works and to retry once the network is back; it is in progress.

What was tested

• These APKs, Home with the System Bridge, on an Android 15 emulator (arm64):

  • Home starts, and its bundled kernel answers in the Assistant (with a local test model).
  • The notifications and controls panel opens from a pull down at the side of the home page.
  • Photos opens with its new Memories.

• A test build of the same code on the same emulator: in the panel, notifications showed as cards and a swipe dismissed them in Android, and volume, brightness and rotation changed Android's own settings.

• Soak tests: builds from 2 and 3 October ran against a real model (DeepSeek V4 Flash), with the app kept in front:

  • Android: a Redmi Note 12 on HyperOS ran about 210 agent turns. A OnePlus 6 on the OctoSense ROM ran 405 turns over 7 hours, with no crash and no restart.
  • HarmonyOS: a Mate 70 Air on HarmonyOS 6.1 ran 134 of 136 turns. The 2 misses were consent sheets the test driver did not answer.

  Changes since the soaks:

  • AI-curated Memories in Photos (#266);
  • Photos' previews on Home (#302);
  • the notifications and controls panel on phones without the OctoSense ROM (#319);
  • two smaller fixes (#270, #301).

Android

Download the APKs and check them against SHA256SUMS. They need a 64-bit ARM phone with Android 8.0 or later.

• OctoSenseHome_0.1.0-beta.1_arm64.apk: OctoSense Home.
• OctoSenseBridge_0.1.0-beta.1_arm64.apk (optional): the System Bridge, which feeds Home's notifications and controls panel.

Install them on the phone by opening each file, and allow installing apps from that source when Android asks. Or install from a computer:

adb install OctoSenseHome_0.1.0-beta.1_arm64.apk
adb install OctoSenseBridge_0.1.0-beta.1_arm64.apk

To make it your home screen, choose OctoSense in Settings → Apps → Default apps → Home app. The names vary by phone.

Notifications and controls. Pull down at the left side of the home page for notifications, and at the right side for controls.

• With the System Bridge installed, the panel lists your notifications: swipe a card left for its actions, or right to dismiss it.
• The controls set volume, brightness and rotation, and the torch on phones with a flash.
• Each needs one permission, granted on Android's own screens: tap Enable notifications in the panel, or Tap to set up on a control.
• Wi-Fi, Bluetooth and Do Not Disturb open Android's settings. On rooted phones, the Bridge can also switch Wi-Fi, Bluetooth and battery saver directly (not tested in this beta).

Both APKs are signed with the OctoSense Home release key. Later releases use the same key and install as updates. To check the signer, run apksigner verify --print-certs on an APK. The certificate SHA-256 digest must be 6bf3927755714edb325ea7fbdc7c7e8780f4a103589d3ee5926b982773f11e34.

If another OctoSense Home build is installed (package dev.makepad.octosense, or dev.makepad.octosense.bridge for the Bridge; for example one you built yourself), Android refuses these APKs because the signature differs. Uninstall the other build first. That deletes its data.

Build it yourself

python3 tools/setup.py
cargo build --release --manifest-path .sources/makepad/tools/cargo_makepad/Cargo.toml
python3 rom/scripts/build-home.py --variant standalone --sdk <cargo-makepad Android SDK> \
  --android-sdk <Android SDK 35> --gradle-home <Gradle 8.11.1> --java-home <JDK 17> \
  --packager .sources/makepad/target/release/cargo-makepad \
  --sign-key <your key.pk8> --sign-cert <your cert.x509.pem> --output out/
adb install out/OctoSenseHome.apk

A build signed with your key cannot update the released APK, and the released APK cannot update your build. If you share your APK, build from a checkout (with CARGO_HOME) outside your home directory: source paths are compiled into it.

HarmonyOS

There is no installable package: a HarmonyOS app has to be signed for your own devices. Build it yourself:

1. In DevEco Studio, create a project with your bundle name and turn on automatic signing, with your device connected.
2. Copy that project's signingConfigs block into a JSON file outside this repository.
3. Build and install:

   python3 tools/setup.py
   cargo build --release --manifest-path .sources/makepad/tools/cargo_makepad/Cargo.toml
   python3 rom/scripts/build-home-ohos.py --deveco-home /Applications/DevEco-Studio.app/Contents \
     --signing-config <signing.json> --bundle-id <your bundle name> \
     --packager .sources/makepad/target/release/cargo-makepad
   hdc install -r rom/out/home/ohos/OctoSenseHome.hap

API keys you add in AI providers are kept in the app's private storage. This release includes the fix that makes them reach the agent on HarmonyOS (#311).

Known issues

• Android:
  • Agents stop when the app leaves the screen (above).
  • The Assistant's header sits under the status bar. We saw this on HyperOS and on Android 15.
  • On HyperOS with 3-button navigation, the Assistant's message field sits under the navigation bar, and answer buttons for an agent's question may not respond to taps. Type the answer instead.
• All:
  • A message sent while the agent is still following up on its last answer is refused. Send it again.
  • A question from an agent waits for your answer and blocks new messages until you answer it.
  • Answered consent notices stay at the bottom of the conversation.
  • Asking an agent to "update" a notice that does not exist yet makes it ask you instead of creating one.
• HarmonyOS:
  • The Assistant answers an app agent's reply on your next message rather than at once.
  • While you type, the word being composed shows only in the keyboard until it is committed.
  • Installing a different build can reset your agent consents.
• AppCard (the "Ask anything" tile) is opt-in and not in this build.

Build receipt: OctoSenseHome_0.1.0-beta.1_android-arm64.build.json (source commit, octos kernel revision and SHA-256, signing certificate).

OctoSense desktop 0.1.0-beta.1

OctoSense's first desktop beta. OctoSense is an agentic shell: a desktop where every app has its own AI agent, a system agent (the Assistant) can ask those agents for help, and a glance screen shows the cards they publish.

This is a pre-release. It is for people who want to try OctoSense and report what breaks. The packages are unsigned. The Windows installer has not been run.

What was tested

• macOS (Apple Silicon):
  • Hour-long soak: a development build from 3 October ran for an hour against a real model (DeepSeek V4 Flash). 253 of 253 agent turns completed, with no crash and no restart of the shell or its kernel. Two small fixes landed after it (#302, #270). The turns covered:
    • the Assistant (F8) working with app agents, web search and memory;
    • first-use consent for each app's agent;
    • app agents publishing and updating glance cards, shown as toasts;
    • several app agents answering one request.
  • Smoke test of this release's app: it starts from the bundle, its bundled kernel answers in the Assistant (with a local test model), and News, Notes and Photos open.
• Linux (x86_64): a smoke test of this release's .deb, unpacked, on Ubuntu 26.04 under Wayland: it starts, and its bundled kernel answers in the Assistant. There is no AppImage in this release: the one the workflow builds crashes on current Wayland systems, and its Assistant cannot start (#316).
• Windows (x64): the release workflow builds the installer and checks it for private paths. No one has run it yet.

Install

macOS 11 or later, Apple Silicon

1. Download OctoSense_0.1.0-beta.1_aarch64.dmg (or the zipped .app) and check it against SHA256SUMS.
2. Open the disk image and drag OctoSense to Applications.
3. The app is not signed. A downloaded copy is reported as damaged until you clear its download flag:

   xattr -dr com.apple.quarantine /Applications/OctoSense.app

4. Open OctoSense. Then open AI providers and add a model with your own API key, which is kept in your macOS keychain.
5. Press F8 to talk to the Assistant.

Linux (x86_64): Debian 12 or Ubuntu 22.04 and later

sudo apt install ./octosense_0.1.0-beta.1_amd64.deb
octosense

Windows (x64, untested)

Run octosense_0.1.0-beta.1_x64-setup.exe. It is unsigned, so SmartScreen warns first: choose More info, then Run anyway.

Each package has a build receipt (*.receipt.json) with its version, target, resources and the octos kernel's revision and SHA-256. To build from source instead, see the README. desktop/scripts/package.py builds these packages.

Known issues

• A message sent while the agent is still following up on its last answer is refused ("Wait for the current answer, or stop it first"). Send it again once the agent is idle.
• Answered consent notices stay at the bottom of the conversation.
• Memory grows over long sessions: in the soak, the shell went from 343 to 531 MB in an hour, and the kernel from 62 to 163 MB. Restart OctoSense if it gets large.
• AppCard (the "Ask anything" tile) is opt-in and not in this build.