@astrale-os/shell-react 0.2.7 → 0.2.9

package/dist/application/apps/app-host.d.ts

@@ -1,7 +1,8 @@
 import type { NodeRefInput } from '@astrale-os/kernel-client';
-import type { ApplicationNode, AppSession, IntentRegistry, SandboxProfile } from '@astrale-os/shell';
+import type { ApplicationNode, AppSession, IntentRegistry } from '@astrale-os/shell';
 import type { CSSProperties, ReactNode } from 'react';
-import type { ViewHostHandle } from '../../window/host.js';
+import type { SandboxPolicy, ViewHostHandle } from '../../window/host.js';
+import type { ViewDescriptor } from '../../window/lifecycle/mount.js';
 import type { WindowState } from '../../window/lifecycle/states.js';
 /** The states `AppHost`'s fallback answers — the frame's, plus the two OS phases. */
 export type AppHostFallbackState = WindowState | {
@@ -11,6 +12,8 @@ export type AppHostFallbackState = WindowState | {
 };
 export interface AppHostProps {
     app: ApplicationNode | NodeRefInput;
+    /** Override the entry View while keeping the application's delegated session alive. */
+    view?: NodeRefInput | ViewDescriptor;
     /**
      * Default target node delivered to the app's view as `targetNodeId` (API §12.2).
      * Container-anchored apps need one — the dock passes the current space. A deeper
@@ -21,7 +24,7 @@ export interface AppHostProps {
     capabilities?: {
         intents: readonly (keyof IntentRegistry)[];
     };
-    sandbox?: SandboxProfile | null;
+    sandbox?: SandboxPolicy;
     fallback?: (state: AppHostFallbackState) => ReactNode;
     onSession?: (session: AppSession) => void;
     className?: string;

package/dist/application/apps/app-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-host.d.ts","sourceRoot":"","sources":["../../../src/application/apps/app-host.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACpG,OAAO,KAAK,EAAE,aAAa,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AAWnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAE1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAMnE,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAA;AAEjC,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,eAAe,GAAG,YAAY,CAAA;IACnC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAA;KAAE,CAAA;IAC7D,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,SAAS,CAAA;IACrD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAA;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB;AAED,eAAO,MAAM,OAAO,yGAoEnB,CAAA"}
+{"version":3,"file":"app-host.d.ts","sourceRoot":"","sources":["../../../src/application/apps/app-host.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACpF,OAAO,KAAK,EAAE,aAAa,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AAWnE,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAMnE,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAA;AAEjC,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,eAAe,GAAG,YAAY,CAAA;IACnC,uFAAuF;IACvF,IAAI,CAAC,EAAE,YAAY,GAAG,cAAc,CAAA;IACpC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAA;KAAE,CAAA;IAC7D,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,SAAS,CAAA;IACrD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAA;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB;AAED,eAAO,MAAM,OAAO,yGAqEnB,CAAA"}

package/dist/application/apps/app-host.js

@@ -53,7 +53,8 @@ export const AppHost = forwardRef(function AppHost(props, ref) {
         return box(fallback?.({ phase: 'crashed', error }) ?? null);
     if (session === null)
         return box(fallback?.({ phase: 'opening' }) ?? null);
-    if (session.view === null)
+    const view = props.view ?? session.view;
+    if (view === null)
         return box(fallback?.({ phase: 'no-view' }) ?? null);
-    return (_jsx(ViewHost, { ref: ref, view: session.view, node: props.node, credential: session.credential, capabilities: props.capabilities ?? { intents: [] }, sandbox: props.sandbox, fallback: fallback ? (s) => fallback(s) : undefined, className: className, style: style }));
+    return (_jsx(ViewHost, { ref: ref, view: view, node: props.node, credential: session.credential, capabilities: props.capabilities ?? { intents: [] }, sandbox: props.sandbox, fallback: fallback ? (s) => fallback(s) : undefined, className: className, style: style }));
 });

package/dist/application/apps/domains.hook.d.ts

@@ -0,0 +1,7 @@
+import type { DomainSearchResult } from '@astrale-os/shell';
+import type { ReadState } from '../../graph/memory/read/envelope.js';
+export interface DomainsResult extends ReadState {
+    readonly domains: readonly DomainSearchResult[];
+}
+export declare function useDomains(): DomainsResult;
+//# sourceMappingURL=domains.hook.d.ts.map

package/dist/application/apps/domains.hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.hook.d.ts","sourceRoot":"","sources":["../../../src/application/apps/domains.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAI3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAQpE,MAAM,WAAW,aAAc,SAAQ,SAAS;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAChD;AAED,wBAAgB,UAAU,IAAI,aAAa,CAoB1C"}

package/dist/application/apps/domains.hook.js

@@ -0,0 +1,18 @@
+import { useMemo } from 'react';
+import { useAsyncResource } from '../../graph/async.js';
+import { useShell } from '../../session/shell.hook.js';
+import { isOsPlaneAvailable } from '../user/user.store.js';
+const NO_DOMAINS = [];
+export function useDomains() {
+    const shell = useShell();
+    const available = isOsPlaneAvailable(shell);
+    const result = useAsyncResource(available ? () => shell.apps.searchDomains() : null, NO_DOMAINS, [shell, available]);
+    return useMemo(() => ({
+        domains: result.data,
+        pending: result.pending,
+        error: result.error,
+        live: false,
+        seq: 0,
+        refetch: result.refetch,
+    }), [result]);
+}

package/dist/application/index.d.ts

@@ -7,6 +7,8 @@ export { useSpace } from './spaces/space.hook.js';
 export type { SpaceResult } from './spaces/space.hook.js';
 export { useApps } from './apps/apps.hook.js';
 export type { AppsResult } from './apps/apps.hook.js';
+export { useDomains } from './apps/domains.hook.js';
+export type { DomainsResult } from './apps/domains.hook.js';
 export { useOpenApp } from './apps/open-app.hook.js';
 export { AppHost } from './apps/app-host.js';
 export type { AppHostFallbackState, AppHostProps } from './apps/app-host.js';
@@ -14,5 +16,5 @@ export { AppLogo } from './apps/app-logo.js';
 export type { AppLogoProps } from './apps/app-logo.js';
 export { useRoles } from './roles.hook.js';
 export type { RolesResult } from './roles.hook.js';
-export type { ApplicationNode, AppSession, RoleNode, SpaceNode, UserNode } from '@astrale-os/shell';
+export type { ApplicationNode, AppSession, DomainSearchResult, RoleNode, SpaceNode, UserNode, } from '@astrale-os/shell';
 //# sourceMappingURL=index.d.ts.map

package/dist/application/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/application/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACjD,YAAY,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAGlD,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/application/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACjD,YAAY,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAGlD,YAAY,EACV,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,QAAQ,EACR,SAAS,EACT,QAAQ,GACT,MAAM,mBAAmB,CAAA"}

package/dist/application/index.js

@@ -1,11 +1,13 @@
 // application — API §12.2. The OS-plane hooks over the shell package's
 // `shell.user/spaces/apps` namespaces + the window module: useUser, useSpaces,
-// useCurrentSpace, useSpace, useApps, useRoles, useOpenApp, AppHost, AppLogo.
+// useCurrentSpace, useSpace, useApps, useDomains, useRoles, useOpenApp,
+// AppHost, AppLogo.
 export { useUser } from './user/user.hook.js';
 export { useSpaces } from './spaces/spaces.hook.js';
 export { useCurrentSpace } from './spaces/current-space.hook.js';
 export { useSpace } from './spaces/space.hook.js';
 export { useApps } from './apps/apps.hook.js';
+export { useDomains } from './apps/domains.hook.js';
 export { useOpenApp } from './apps/open-app.hook.js';
 export { AppHost } from './apps/app-host.js';
 export { AppLogo } from './apps/app-logo.js';

package/dist/application/user/user.store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.store.d.ts","sourceRoot":"","sources":["../../../src/application/user/user.store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAExD,MAAM,MAAM,SAAS,GACjB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GAC7C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE;AACxC,qFAAqF;GACnF;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAE7C,eAAO,MAAM,SAAS,2BAAkC,CAAA;AAKxD,sEAAsE;AACtE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAExD;AAcD;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB3D;AAED,wFAAwF;AACxF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAoBhD"}
+{"version":3,"file":"user.store.d.ts","sourceRoot":"","sources":["../../../src/application/user/user.store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAExD,MAAM,MAAM,SAAS,GACjB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GAC7C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE;AACxC,qFAAqF;GACnF;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAE7C,eAAO,MAAM,SAAS,2BAAkC,CAAA;AAKxD,sEAAsE;AACtE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAExD;AAeD;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB3D;AAED,wFAAwF;AACxF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAoBhD"}

package/dist/application/user/user.store.js

@@ -7,7 +7,8 @@ export function isOsPlaneAvailable(shell) {
 }
 function osPlaneError(cause) {
     const detail = cause instanceof Error ? cause.message : String(cause);
-    return new Error(`The OS plane is unavailable (useUser/useSpaces/useApps): shell.user.me() could not resolve ` +
+    return new Error(`The OS plane is unavailable (useUser/useSpaces/useApps/useDomains): ` +
+        `shell.user.me() could not resolve ` +
         `— the workspace/shell domain may not be installed for this identity. (${detail})`);
 }
 /**

package/dist/index.d.ts

@@ -25,12 +25,12 @@ export type { LinkProps, MissingPolicy, NavAdapter, NavLocation, NavScopeHandle,
 export { SelectionScope, useSelection } from './selection/index.js';
 export type { Selection, SelectionScopeProps } from './selection/index.js';
 export { useCloseGuard, useTargetNode, useViewsFor, useWindow, useWindowList, useWindows, ViewHost, ViewStage, } from './window/index.js';
-export type { CloseGuard, CloseVerdict, ViewDescriptor, ViewHostProps, ViewSource, ViewHostHandle, ViewsForResult, WindowListEntry, WindowState, WindowView, } from './window/index.js';
+export type { CloseGuard, CloseVerdict, ResolvedSource, SandboxPolicy, ViewDescriptor, ViewHostProps, ViewSource, ViewHostHandle, ViewsForResult, WindowListEntry, WindowState, WindowView, } from './window/index.js';
 export { useEmitIntent, useIntent, useSendIntent } from './intents/index.js';
 export type { EmitIntent, IntentCtx, IntentPayload, IntentReply, SendIntent, } from './intents/index.js';
-export { AppHost, AppLogo, useApps, useCurrentSpace, useOpenApp, useRoles, useSpace, useSpaces, useUser, } from './application/index.js';
-export type { AppHostFallbackState, AppHostProps, AppLogoProps, AppsResult, CurrentSpaceResult, RolesResult, SpaceResult, SpacesResult, } from './application/index.js';
-export type { ApplicationNode, AppSession, RoleNode, SpaceNode, UserNode } from '@astrale-os/shell';
+export { AppHost, AppLogo, useApps, useCurrentSpace, useOpenApp, useRoles, useDomains, useSpace, useSpaces, useUser, } from './application/index.js';
+export type { AppHostFallbackState, AppHostProps, AppLogoProps, AppsResult, CurrentSpaceResult, RolesResult, DomainsResult, SpaceResult, SpacesResult, } from './application/index.js';
+export type { ApplicationNode, AppSession, DomainSearchResult, RoleNode, SpaceNode, UserNode, } from '@astrale-os/shell';
 export type { Action, ReadState, ReadOptions, Windowed } from './graph/index.js';
 export * from './graph/guards.error.js';
 export { DESCRIPTION_KEY, NAME_KEY, STATUS_KEY, descriptionOf, nameOf, normalizeRef, statusOf, } from '@astrale-os/kernel-client';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAChG,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAGxD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACjE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAKjD,OAAO,EACL,OAAO,EACP,WAAW,EACX,QAAQ,EACR,OAAO,EACP,SAAS,EACT,OAAO,EACP,QAAQ,EACR,SAAS,GACV,MAAM,kBAAkB,CAAA;AACzB,YAAY,EACV,eAAe,EACf,cAAc,EACd,WAAW,EACX,UAAU,EACV,IAAI,EACJ,UAAU,EACV,WAAW,EACX,UAAU,EACV,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGhF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC/F,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,cAAc,EACd,cAAc,EACd,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,UAAU,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,GACZ,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,SAAS,EACT,aAAa,EACb,UAAU,EACV,WAAW,EACX,cAAc,EACd,aAAa,EACb,WAAW,EACX,SAAS,EACT,QAAQ,EACR,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAG1E,OAAO,EACL,aAAa,EACb,aAAa,EACb,WAAW,EACX,SAAS,EACT,aAAa,EACb,UAAU,EACV,QAAQ,EACR,SAAS,GACV,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,UAAU,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,EACd,eAAe,EACf,WAAW,EACX,UAAU,GACX,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC5E,YAAY,EACV,UAAU,EACV,SAAS,EACT,aAAa,EACb,WAAW,EACX,UAAU,GACX,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EACL,OAAO,EACP,OAAO,EACP,OAAO,EACP,eAAe,EACf,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,OAAO,GACR,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,WAAW,EACX,YAAY,GACb,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAGnG,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAGhF,cAAc,yBAAyB,CAAA;AAGvC,OAAO,EACL,eAAe,EACf,QAAQ,EACR,UAAU,EACV,aAAa,EACb,MAAM,EACN,YAAY,EACZ,QAAQ,GACT,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,KAAK,EACL,SAAS,EACT,WAAW,EACX,KAAK,EACL,aAAa,EACb,YAAY,EACZ,eAAe,EACf,SAAS,GACV,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,YAAY,EACZ,aAAa,EACb,UAAU,EACV,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,EACb,WAAW,GACZ,MAAM,iCAAiC,CAAA;AACxC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAA;AACpE,YAAY,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAGpD,YAAY,EACV,WAAW,EACX,YAAY,EACZ,eAAe,EACf,KAAK,EACL,WAAW,EACX,MAAM,GACP,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAChG,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAGxD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACjE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAKjD,OAAO,EACL,OAAO,EACP,WAAW,EACX,QAAQ,EACR,OAAO,EACP,SAAS,EACT,OAAO,EACP,QAAQ,EACR,SAAS,GACV,MAAM,kBAAkB,CAAA;AACzB,YAAY,EACV,eAAe,EACf,cAAc,EACd,WAAW,EACX,UAAU,EACV,IAAI,EACJ,UAAU,EACV,WAAW,EACX,UAAU,EACV,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGhF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC/F,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,cAAc,EACd,cAAc,EACd,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,UAAU,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,GACZ,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,SAAS,EACT,aAAa,EACb,UAAU,EACV,WAAW,EACX,cAAc,EACd,aAAa,EACb,WAAW,EACX,SAAS,EACT,QAAQ,EACR,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAG1E,OAAO,EACL,aAAa,EACb,aAAa,EACb,WAAW,EACX,SAAS,EACT,aAAa,EACb,UAAU,EACV,QAAQ,EACR,SAAS,GACV,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,UAAU,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,cAAc,EACd,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,EACd,eAAe,EACf,WAAW,EACX,UAAU,GACX,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC5E,YAAY,EACV,UAAU,EACV,SAAS,EACT,aAAa,EACb,WAAW,EACX,UAAU,GACX,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EACL,OAAO,EACP,OAAO,EACP,OAAO,EACP,eAAe,EACf,UAAU,EACV,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,OAAO,GACR,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,WAAW,EACX,YAAY,GACb,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EACV,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,QAAQ,EACR,SAAS,EACT,QAAQ,GACT,MAAM,mBAAmB,CAAA;AAG1B,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAGhF,cAAc,yBAAyB,CAAA;AAGvC,OAAO,EACL,eAAe,EACf,QAAQ,EACR,UAAU,EACV,aAAa,EACb,MAAM,EACN,YAAY,EACZ,QAAQ,GACT,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,KAAK,EACL,SAAS,EACT,WAAW,EACX,KAAK,EACL,aAAa,EACb,YAAY,EACZ,eAAe,EACf,SAAS,GACV,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,YAAY,EACZ,aAAa,EACb,UAAU,EACV,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,EACb,WAAW,GACZ,MAAM,iCAAiC,CAAA;AACxC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAA;AACpE,YAAY,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAGpD,YAAY,EACV,WAAW,EACX,YAAY,EACZ,eAAe,EACf,KAAK,EACL,WAAW,EACX,MAAM,GACP,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/index.js

@@ -27,7 +27,7 @@ export { useCloseGuard, useTargetNode, useViewsFor, useWindow, useWindowList, us
 // ─── intents (§11) ───────────────────────────────────────────────────────────
 export { useEmitIntent, useIntent, useSendIntent } from './intents/index.js';
 // ─── application — the OS plane (§12) ────────────────────────────────────────
-export { AppHost, AppLogo, useApps, useCurrentSpace, useOpenApp, useRoles, useSpace, useSpaces, useUser, } from './application/index.js';
+export { AppHost, AppLogo, useApps, useCurrentSpace, useOpenApp, useRoles, useDomains, useSpace, useSpaces, useUser, } from './application/index.js';
 // ─── error taxonomy (§1.4) — guards + classes, re-exported from kernel-client ─
 export * from './graph/guards.error.js';
 // ─── re-exported kernel-client types (one import surface, §0 preamble) ───────

package/dist/window/host.d.ts

@@ -1,7 +1,7 @@
 import type { NodeRefInput } from '@astrale-os/kernel-client';
 import type { CloseResult, IntentRegistry, MountCredential, SandboxProfile } from '@astrale-os/shell';
 import type { CSSProperties, ReactNode } from 'react';
-import type { ViewSource } from './lifecycle/mount.js';
+import type { ResolvedSource, ViewSource } from './lifecycle/mount.js';
 import type { WindowState } from './lifecycle/states.js';
 /** Imperative handle on a mounted `ViewHost` (API §10). */
 export interface ViewHostHandle {
@@ -13,13 +13,15 @@ export interface ViewHostHandle {
     /** The one explicit remount. */
     refresh(): void;
 }
+/** Static iframe sandbox flags, an explicit opt-out, or a policy over the resolved mount. */
+export type SandboxPolicy = SandboxProfile | null | ((source: ResolvedSource) => SandboxProfile | null);
 export type ViewHostProps = ViewSource & {
     /** Node this view opens on — delivered as `targetNodeId`; a change retargets. */
     node?: NodeRefInput;
     capabilities?: {
         intents: readonly (keyof IntentRegistry)[];
     };
-    sandbox?: SandboxProfile | null;
+    sandbox?: SandboxPolicy;
     credential?: MountCredential;
     /** Rendered inside the anchor while the frame is not `ready`. */
     fallback?: (state: WindowState) => ReactNode;

package/dist/window/host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/window/host.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACd,eAAe,EAEf,cAAc,EAEf,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,aAAa,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AAqBnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAcxD,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAC3E,gCAAgC;IAChC,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG;IACvC,iFAAiF;IACjF,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAA;KAAE,CAAA;IAC7D,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IAC/B,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,SAAS,CAAA;IAC5C,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAA;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB,CAAA;AAYD,eAAO,MAAM,QAAQ,0GAyQpB,CAAA"}
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/window/host.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACd,eAAe,EAEf,cAAc,EAEf,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,aAAa,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AAqBnE,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAcxD,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAC3E,gCAAgC;IAChC,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,6FAA6F;AAC7F,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,IAAI,GACJ,CAAC,CAAC,MAAM,EAAE,cAAc,KAAK,cAAc,GAAG,IAAI,CAAC,CAAA;AAEvD,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG;IACvC,iFAAiF;IACjF,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAA;KAAE,CAAA;IAC7D,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,SAAS,CAAA;IAC5C,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAA;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB,CAAA;AAYD,eAAO,MAAM,QAAQ,0GA4RpB,CAAA"}

package/dist/window/host.js

@@ -131,6 +131,14 @@ export const ViewHost = forwardRef(function ViewHost(props, ref) {
             else
                 hub.stashForAdopt(mountKey, record);
         }
+        /** A pre-ready failure must not leave an empty stage slot over the fallback UI. */
+        function crashAndRelease(error) {
+            const slot = slotRef.current;
+            slotRef.current = null;
+            lastRectRef.current = null;
+            slot?.release();
+            setStateSafe({ phase: 'crashed', windowId: windowIdRef.current ?? undefined, error });
+        }
         // Adopt a live window a just-unmounted same-source host left behind.
         if (!wasRefresh) {
             const adopted = hub.takeAdopt(mountKey);
@@ -160,20 +168,32 @@ export const ViewHost = forwardRef(function ViewHost(props, ref) {
             catch (err) {
                 // No window yet (source resolution failed) — windowId honestly absent.
                 if (!cancelled)
-                    setStateSafe({ phase: 'crashed', error: err });
+                    crashAndRelease(err);
                 return;
             }
             if (cancelled)
                 return;
             const usedHandshake = handshake === 'none' ? 'none' : resolved.handshake;
             const deliveredTarget = refToId(p.node);
+            let sandbox;
+            try {
+                sandbox =
+                    typeof p.sandbox === 'function'
+                        ? p.sandbox({ ...resolved, handshake: usedHandshake })
+                        : p.sandbox;
+            }
+            catch (err) {
+                if (!cancelled)
+                    crashAndRelease(err);
+                return;
+            }
             const params = {
                 host: slotRef.current.element,
                 url: resolved.url,
                 functionId: resolved.functionId,
                 capabilities: { intents: p.capabilities?.intents ?? [] },
                 targetNodeId: deliveredTarget,
-                sandbox: p.sandbox,
+                sandbox,
                 handshake: usedHandshake,
                 credential: p.credential,
             };
@@ -206,7 +226,7 @@ export const ViewHost = forwardRef(function ViewHost(props, ref) {
                     await mountWith('none', true);
                     return;
                 }
-                setStateSafe({ phase: 'crashed', windowId: windowIdRef.current ?? undefined, error: err });
+                crashAndRelease(err);
             }
         }
         function begin(controller) {

package/dist/window/index.d.ts

@@ -1,6 +1,6 @@
 export { ViewStage } from './stage.js';
 export { ViewHost } from './host.js';
-export type { ViewHostProps, ViewHostHandle } from './host.js';
+export type { SandboxPolicy, ViewHostProps, ViewHostHandle } from './host.js';
 export { useWindows, useWindowList } from './hooks/windows.hook.js';
 export type { WindowListEntry } from './hooks/windows.hook.js';
 export { useWindow } from './hooks/window.hook.js';
@@ -10,6 +10,6 @@ export type { ViewsForResult } from './hooks/views-for.hook.js';
 export { useTargetNode } from './hooks/target-node.hook.js';
 export { useCloseGuard } from './hooks/close-guard.hook.js';
 export type { CloseGuard, CloseVerdict } from './hooks/close-guard.hook.js';
-export type { ViewDescriptor, ViewSource, Node } from './lifecycle/mount.js';
+export type { ResolvedSource, ViewDescriptor, ViewSource, Node } from './lifecycle/mount.js';
 export type { WindowState } from './lifecycle/states.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/window/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/window/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACnE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC3E,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC5E,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/window/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpC,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACnE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC3E,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC5F,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/window/lifecycle/mount.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../../../src/window/lifecycle/mount.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAE5D,+EAA+E;AAC/E,MAAM,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AAExE,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,cAAc,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AA6CD,4EAA4E;AAC5E,wBAAsB,aAAa,CACjC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,cAAc,CAAC,CAgBzB;AAED,uEAAuE;AACvE,wBAAgB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAOpD;AAED,wEAAwE;AACxE,wBAAgB,OAAO,CAAC,GAAG,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKzE;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGlE;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAMlF"}
+{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../../../src/window/lifecycle/mount.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAE5D,+EAA+E;AAC/E,MAAM,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AAExE,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,cAAc,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAAA;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AA2ED,4EAA4E;AAC5E,wBAAsB,aAAa,CACjC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,cAAc,CAAC,CAgBzB;AAED,uEAAuE;AACvE,wBAAgB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAOpD;AAED,wEAAwE;AACxE,wBAAgB,OAAO,CAAC,GAAG,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAKzE;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGlE;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAMlF"}

package/dist/window/lifecycle/mount.js

@@ -24,7 +24,7 @@ async function resolveViewRef(kernel, ref, handshakeHint) {
     if (node === null)
         throw new Error(`ViewHost: view not found (${toPath(ref)})`);
     const props = node.props ?? {};
-    const url = props.url;
+    const url = viewUrl(props);
     if (typeof url !== 'string' || url.length === 0) {
         throw new Error('ViewHost: resolved view has no url');
     }
@@ -32,6 +32,37 @@ async function resolveViewRef(kernel, ref, handshakeHint) {
     const id = node.id ?? slugOfUrl(url);
     return { url, handshake, functionId: id };
 }
+/** Resolve both the legacy flat url and the canonical Function binding. */
+function viewUrl(props) {
+    if (typeof props.url === 'string' && props.url.length > 0)
+        return props.url;
+    const direct = remoteUrlOf(props.binding);
+    if (direct !== undefined)
+        return direct;
+    // Raw graph props can be keyed by the property's canonical graph key rather
+    // than its local slug. The binding value remains self-describing.
+    for (const value of Object.values(props)) {
+        const remoteUrl = remoteUrlOf(value);
+        if (remoteUrl !== undefined)
+            return remoteUrl;
+    }
+    return undefined;
+}
+function remoteUrlOf(value) {
+    let binding = value;
+    if (typeof binding === 'string') {
+        try {
+            binding = JSON.parse(binding);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    if (binding === null || typeof binding !== 'object')
+        return undefined;
+    const remoteUrl = binding.remoteUrl;
+    return typeof remoteUrl === 'string' && remoteUrl.length > 0 ? remoteUrl : undefined;
+}
 function normalizeHandshake(value) {
     return value === 'none' ? 'none' : 'shell';
 }

package/dist/window/stage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stage.d.ts","sourceRoot":"","sources":["../../src/window/stage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,OAAO,CAAA;AA4BxD,wBAAgB,SAAS,IAAI,YAAY,CAiBxC"}
+{"version":3,"file":"stage.d.ts","sourceRoot":"","sources":["../../src/window/stage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,OAAO,CAAA;AA6BxD,wBAAgB,SAAS,IAAI,YAAY,CAiBxC"}

package/dist/window/stage.js

@@ -20,6 +20,7 @@ const STAGE_STYLE = {
     left: 0,
     right: 0,
     bottom: 0,
+    zIndex: 20,
     pointerEvents: 'none',
 };
 export function ViewStage() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/shell-react",
-  "version": "0.2.7",
+  "version": "0.2.9",
   "description": "Astrale shell-react — the React face of the shell (provider, hooks, view components)",
   "license": "Apache-2.0",
   "repository": {
@@ -44,7 +44,7 @@
     "react-dom": "^19.2.0",
     "typescript": "~6.0.1-rc",
     "vitest": "^3.2.4",
-    "@astrale-os/shell": "0.3.5"
+    "@astrale-os/shell": "0.3.7"
   },
   "peerDependencies": {
     "@astrale-os/shell": ">=0.2.0 <1.0.0",

package/src/application/apps/app-host.tsx

@@ -1,5 +1,5 @@
 import type { NodeRefInput } from '@astrale-os/kernel-client'
-import type { ApplicationNode, AppSession, IntentRegistry, SandboxProfile } from '@astrale-os/shell'
+import type { ApplicationNode, AppSession, IntentRegistry } from '@astrale-os/shell'
 import type { CSSProperties, ReactElement, ReactNode } from 'react'
 
 /**
@@ -11,7 +11,7 @@ import type { CSSProperties, ReactElement, ReactNode } from 'react'
  */
 import { forwardRef, useEffect, useRef, useState } from 'react'
 
-import type { ViewHostHandle } from '../../window/host.js'
+import type { SandboxPolicy, ViewHostHandle } from '../../window/host.js'
 import type { ViewDescriptor } from '../../window/lifecycle/mount.js'
 import type { WindowState } from '../../window/lifecycle/states.js'
 
@@ -27,6 +27,8 @@ export type AppHostFallbackState =
 
 export interface AppHostProps {
   app: ApplicationNode | NodeRefInput
+  /** Override the entry View while keeping the application's delegated session alive. */
+  view?: NodeRefInput | ViewDescriptor
   /**
    * Default target node delivered to the app's view as `targetNodeId` (API §12.2).
    * Container-anchored apps need one — the dock passes the current space. A deeper
@@ -35,7 +37,7 @@ export interface AppHostProps {
    */
   node?: NodeRefInput
   capabilities?: { intents: readonly (keyof IntentRegistry)[] }
-  sandbox?: SandboxProfile | null
+  sandbox?: SandboxPolicy
   fallback?: (state: AppHostFallbackState) => ReactNode
   onSession?: (session: AppSession) => void
   className?: string
@@ -94,12 +96,13 @@ export const AppHost = forwardRef<ViewHostHandle, AppHostProps>(
     // A session-open failure has no window yet — `windowId` is honestly absent (§10).
     if (error !== undefined) return box(fallback?.({ phase: 'crashed', error }) ?? null)
     if (session === null) return box(fallback?.({ phase: 'opening' }) ?? null)
-    if (session.view === null) return box(fallback?.({ phase: 'no-view' }) ?? null)
+    const view = props.view ?? session.view
+    if (view === null) return box(fallback?.({ phase: 'no-view' }) ?? null)
 
     return (
       <ViewHost
         ref={ref}
-        view={session.view as ViewDescriptor}
+        view={view}
         node={props.node}
         credential={session.credential}
         capabilities={props.capabilities ?? { intents: [] }}

package/src/application/apps/domains.hook.ts

@@ -0,0 +1,37 @@
+import type { DomainSearchResult } from '@astrale-os/shell'
+
+import { useMemo } from 'react'
+
+import type { ReadState } from '../../graph/memory/read/envelope.js'
+
+import { useAsyncResource } from '../../graph/async.js'
+import { useShell } from '../../session/shell.hook.js'
+import { isOsPlaneAvailable } from '../user/user.store.js'
+
+const NO_DOMAINS: readonly DomainSearchResult[] = []
+
+export interface DomainsResult extends ReadState {
+  readonly domains: readonly DomainSearchResult[]
+}
+
+export function useDomains(): DomainsResult {
+  const shell = useShell()
+  const available = isOsPlaneAvailable(shell)
+  const result = useAsyncResource<readonly DomainSearchResult[]>(
+    available ? () => shell.apps.searchDomains() : null,
+    NO_DOMAINS,
+    [shell, available],
+  )
+
+  return useMemo(
+    () => ({
+      domains: result.data,
+      pending: result.pending,
+      error: result.error,
+      live: false,
+      seq: 0,
+      refetch: result.refetch,
+    }),
+    [result],
+  )
+}

package/src/application/index.ts

@@ -1,6 +1,7 @@
 // application — API §12.2. The OS-plane hooks over the shell package's
 // `shell.user/spaces/apps` namespaces + the window module: useUser, useSpaces,
-// useCurrentSpace, useSpace, useApps, useRoles, useOpenApp, AppHost, AppLogo.
+// useCurrentSpace, useSpace, useApps, useDomains, useRoles, useOpenApp,
+// AppHost, AppLogo.
 export { useUser } from './user/user.hook.js'
 export { useSpaces } from './spaces/spaces.hook.js'
 export type { SpacesResult } from './spaces/spaces.hook.js'
@@ -10,6 +11,8 @@ export { useSpace } from './spaces/space.hook.js'
 export type { SpaceResult } from './spaces/space.hook.js'
 export { useApps } from './apps/apps.hook.js'
 export type { AppsResult } from './apps/apps.hook.js'
+export { useDomains } from './apps/domains.hook.js'
+export type { DomainsResult } from './apps/domains.hook.js'
 export { useOpenApp } from './apps/open-app.hook.js'
 export { AppHost } from './apps/app-host.js'
 export type { AppHostFallbackState, AppHostProps } from './apps/app-host.js'
@@ -19,4 +22,11 @@ export { useRoles } from './roles.hook.js'
 export type { RolesResult } from './roles.hook.js'
 
 // The OS node/session types (from the shell package, single import surface).
-export type { ApplicationNode, AppSession, RoleNode, SpaceNode, UserNode } from '@astrale-os/shell'
+export type {
+  ApplicationNode,
+  AppSession,
+  DomainSearchResult,
+  RoleNode,
+  SpaceNode,
+  UserNode,
+} from '@astrale-os/shell'

package/src/application/user/user.store.ts

@@ -31,7 +31,8 @@ interface UserSurface {
 function osPlaneError(cause: unknown): Error {
   const detail = cause instanceof Error ? cause.message : String(cause)
   return new Error(
-    `The OS plane is unavailable (useUser/useSpaces/useApps): shell.user.me() could not resolve ` +
+    `The OS plane is unavailable (useUser/useSpaces/useApps/useDomains): ` +
+      `shell.user.me() could not resolve ` +
       `— the workspace/shell domain may not be installed for this identity. (${detail})`,
   )
 }

package/src/index.ts

@@ -106,6 +106,8 @@ export {
 export type {
   CloseGuard,
   CloseVerdict,
+  ResolvedSource,
+  SandboxPolicy,
   ViewDescriptor,
   ViewHostProps,
   ViewSource,
@@ -134,6 +136,7 @@ export {
   useCurrentSpace,
   useOpenApp,
   useRoles,
+  useDomains,
   useSpace,
   useSpaces,
   useUser,
@@ -145,11 +148,19 @@ export type {
   AppsResult,
   CurrentSpaceResult,
   RolesResult,
+  DomainsResult,
   SpaceResult,
   SpacesResult,
 } from './application/index.js'
 // OS node/session types (from the shell package, single import surface).
-export type { ApplicationNode, AppSession, RoleNode, SpaceNode, UserNode } from '@astrale-os/shell'
+export type {
+  ApplicationNode,
+  AppSession,
+  DomainSearchResult,
+  RoleNode,
+  SpaceNode,
+  UserNode,
+} from '@astrale-os/shell'
 
 // ─── shared envelopes (§1) ───────────────────────────────────────────────────
 export type { Action, ReadState, ReadOptions, Windowed } from './graph/index.js'

package/src/window/host.tsx

@@ -28,7 +28,7 @@ import {
 } from 'react'
 
 import type { AdoptRecord } from './adopt.js'
-import type { ViewSource } from './lifecycle/mount.js'
+import type { ResolvedSource, ViewSource } from './lifecycle/mount.js'
 import type { WindowState } from './lifecycle/states.js'
 import type { SlotRect, StageController, StageSlot } from './placement.js'
 
@@ -51,11 +51,17 @@ export interface ViewHostHandle {
   refresh(): void
 }
 
+/** Static iframe sandbox flags, an explicit opt-out, or a policy over the resolved mount. */
+export type SandboxPolicy =
+  | SandboxProfile
+  | null
+  | ((source: ResolvedSource) => SandboxProfile | null)
+
 export type ViewHostProps = ViewSource & {
   /** Node this view opens on — delivered as `targetNodeId`; a change retargets. */
   node?: NodeRefInput
   capabilities?: { intents: readonly (keyof IntentRegistry)[] }
-  sandbox?: SandboxProfile | null
+  sandbox?: SandboxPolicy
   credential?: MountCredential
   /** Rendered inside the anchor while the frame is not `ready`. */
   fallback?: (state: WindowState) => ReactNode
@@ -204,6 +210,15 @@ export const ViewHost = forwardRef<ViewHostHandle, ViewHostProps>(
         else hub.stashForAdopt(mountKey, record)
       }
 
+      /** A pre-ready failure must not leave an empty stage slot over the fallback UI. */
+      function crashAndRelease(error: unknown): void {
+        const slot = slotRef.current
+        slotRef.current = null
+        lastRectRef.current = null
+        slot?.release()
+        setStateSafe({ phase: 'crashed', windowId: windowIdRef.current ?? undefined, error })
+      }
+
       // Adopt a live window a just-unmounted same-source host left behind.
       if (!wasRefresh) {
         const adopted = hub.takeAdopt(mountKey)
@@ -232,20 +247,30 @@ export const ViewHost = forwardRef<ViewHostHandle, ViewHostProps>(
           resolved = await resolveSource(shell.kernel, sourceOf(p))
         } catch (err) {
           // No window yet (source resolution failed) — windowId honestly absent.
-          if (!cancelled) setStateSafe({ phase: 'crashed', error: err })
+          if (!cancelled) crashAndRelease(err)
           return
         }
         if (cancelled) return
 
         const usedHandshake = handshake === 'none' ? 'none' : resolved.handshake
         const deliveredTarget = refToId(p.node)
+        let sandbox: SandboxProfile | null | undefined
+        try {
+          sandbox =
+            typeof p.sandbox === 'function'
+              ? p.sandbox({ ...resolved, handshake: usedHandshake })
+              : p.sandbox
+        } catch (err) {
+          if (!cancelled) crashAndRelease(err)
+          return
+        }
         const params: MountParams = {
           host: slotRef.current!.element,
           url: resolved.url,
           functionId: resolved.functionId,
           capabilities: { intents: p.capabilities?.intents ?? [] },
           targetNodeId: deliveredTarget,
-          sandbox: p.sandbox,
+          sandbox,
           handshake: usedHandshake,
           credential: p.credential,
         }
@@ -277,7 +302,7 @@ export const ViewHost = forwardRef<ViewHostHandle, ViewHostProps>(
             await mountWith('none', true)
             return
           }
-          setStateSafe({ phase: 'crashed', windowId: windowIdRef.current ?? undefined, error: err })
+          crashAndRelease(err)
         }
       }
 

package/src/window/index.ts

@@ -3,7 +3,7 @@
 // target-node + close-guard, and the (G5) view-resolution hook.
 export { ViewStage } from './stage.js'
 export { ViewHost } from './host.js'
-export type { ViewHostProps, ViewHostHandle } from './host.js'
+export type { SandboxPolicy, ViewHostProps, ViewHostHandle } from './host.js'
 export { useWindows, useWindowList } from './hooks/windows.hook.js'
 export type { WindowListEntry } from './hooks/windows.hook.js'
 export { useWindow } from './hooks/window.hook.js'
@@ -13,5 +13,5 @@ export type { ViewsForResult } from './hooks/views-for.hook.js'
 export { useTargetNode } from './hooks/target-node.hook.js'
 export { useCloseGuard } from './hooks/close-guard.hook.js'
 export type { CloseGuard, CloseVerdict } from './hooks/close-guard.hook.js'
-export type { ViewDescriptor, ViewSource, Node } from './lifecycle/mount.js'
+export type { ResolvedSource, ViewDescriptor, ViewSource, Node } from './lifecycle/mount.js'
 export type { WindowState } from './lifecycle/states.js'

package/src/window/lifecycle/mount.ts

@@ -62,7 +62,7 @@ async function resolveViewRef(
   const node = await kernel.get(toPath(ref))
   if (node === null) throw new Error(`ViewHost: view not found (${toPath(ref)})`)
   const props = (node as { id?: string; props?: Record<string, unknown> }).props ?? {}
-  const url = props.url
+  const url = viewUrl(props)
   if (typeof url !== 'string' || url.length === 0) {
     throw new Error('ViewHost: resolved view has no url')
   }
@@ -71,6 +71,36 @@ async function resolveViewRef(
   return { url, handshake, functionId: id }
 }
 
+/** Resolve both the legacy flat url and the canonical Function binding. */
+function viewUrl(props: Record<string, unknown>): string | undefined {
+  if (typeof props.url === 'string' && props.url.length > 0) return props.url
+
+  const direct = remoteUrlOf(props.binding)
+  if (direct !== undefined) return direct
+
+  // Raw graph props can be keyed by the property's canonical graph key rather
+  // than its local slug. The binding value remains self-describing.
+  for (const value of Object.values(props)) {
+    const remoteUrl = remoteUrlOf(value)
+    if (remoteUrl !== undefined) return remoteUrl
+  }
+  return undefined
+}
+
+function remoteUrlOf(value: unknown): string | undefined {
+  let binding = value
+  if (typeof binding === 'string') {
+    try {
+      binding = JSON.parse(binding)
+    } catch {
+      return undefined
+    }
+  }
+  if (binding === null || typeof binding !== 'object') return undefined
+  const remoteUrl = (binding as { remoteUrl?: unknown }).remoteUrl
+  return typeof remoteUrl === 'string' && remoteUrl.length > 0 ? remoteUrl : undefined
+}
+
 function normalizeHandshake(value: unknown): 'shell' | 'none' {
   return value === 'none' ? 'none' : 'shell'
 }

package/src/window/stage.tsx

@@ -23,6 +23,7 @@ const STAGE_STYLE: CSSProperties = {
   left: 0,
   right: 0,
   bottom: 0,
+  zIndex: 20,
   pointerEvents: 'none',
 }