@astrale-os/shell-react 0.2.8 → 0.2.9

package/dist/application/apps/app-host.d.ts

@@ -1,7 +1,8 @@
 import type { NodeRefInput } from '@astrale-os/kernel-client';
-import type { ApplicationNode, AppSession, IntentRegistry, SandboxProfile } from '@astrale-os/shell';
+import type { ApplicationNode, AppSession, IntentRegistry } from '@astrale-os/shell';
 import type { CSSProperties, ReactNode } from 'react';
-import type { ViewHostHandle } from '../../window/host.js';
+import type { SandboxPolicy, ViewHostHandle } from '../../window/host.js';
+import type { ViewDescriptor } from '../../window/lifecycle/mount.js';
 import type { WindowState } from '../../window/lifecycle/states.js';
 /** The states `AppHost`'s fallback answers — the frame's, plus the two OS phases. */
 export type AppHostFallbackState = WindowState | {
@@ -11,6 +12,8 @@ export type AppHostFallbackState = WindowState | {
 };
 export interface AppHostProps {
     app: ApplicationNode | NodeRefInput;
+    /** Override the entry View while keeping the application's delegated session alive. */
+    view?: NodeRefInput | ViewDescriptor;
     /**
      * Default target node delivered to the app's view as `targetNodeId` (API §12.2).
      * Container-anchored apps need one — the dock passes the current space. A deeper
@@ -21,7 +24,7 @@ export interface AppHostProps {
     capabilities?: {
         intents: readonly (keyof IntentRegistry)[];
     };
-    sandbox?: SandboxProfile | null;
+    sandbox?: SandboxPolicy;
     fallback?: (state: AppHostFallbackState) => ReactNode;
     onSession?: (session: AppSession) => void;
     className?: string;

package/dist/application/apps/app-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-host.d.ts","sourceRoot":"","sources":["../../../src/application/apps/app-host.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACpG,OAAO,KAAK,EAAE,aAAa,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AAWnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAE1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAMnE,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAA;AAEjC,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,eAAe,GAAG,YAAY,CAAA;IACnC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAA;KAAE,CAAA;IAC7D,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,SAAS,CAAA;IACrD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAA;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB;AAED,eAAO,MAAM,OAAO,yGAoEnB,CAAA"}
+{"version":3,"file":"app-host.d.ts","sourceRoot":"","sources":["../../../src/application/apps/app-host.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACpF,OAAO,KAAK,EAAE,aAAa,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AAWnE,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAMnE,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAA;AAEjC,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,eAAe,GAAG,YAAY,CAAA;IACnC,uFAAuF;IACvF,IAAI,CAAC,EAAE,YAAY,GAAG,cAAc,CAAA;IACpC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAA;KAAE,CAAA;IAC7D,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,SAAS,CAAA;IACrD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAA;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB;AAED,eAAO,MAAM,OAAO,yGAqEnB,CAAA"}

package/dist/application/apps/app-host.js

@@ -53,7 +53,8 @@ export const AppHost = forwardRef(function AppHost(props, ref) {
         return box(fallback?.({ phase: 'crashed', error }) ?? null);
     if (session === null)
         return box(fallback?.({ phase: 'opening' }) ?? null);
-    if (session.view === null)
+    const view = props.view ?? session.view;
+    if (view === null)
         return box(fallback?.({ phase: 'no-view' }) ?? null);
-    return (_jsx(ViewHost, { ref: ref, view: session.view, node: props.node, credential: session.credential, capabilities: props.capabilities ?? { intents: [] }, sandbox: props.sandbox, fallback: fallback ? (s) => fallback(s) : undefined, className: className, style: style }));
+    return (_jsx(ViewHost, { ref: ref, view: view, node: props.node, credential: session.credential, capabilities: props.capabilities ?? { intents: [] }, sandbox: props.sandbox, fallback: fallback ? (s) => fallback(s) : undefined, className: className, style: style }));
 });

package/dist/index.d.ts

@@ -25,7 +25,7 @@ export type { LinkProps, MissingPolicy, NavAdapter, NavLocation, NavScopeHandle,
 export { SelectionScope, useSelection } from './selection/index.js';
 export type { Selection, SelectionScopeProps } from './selection/index.js';
 export { useCloseGuard, useTargetNode, useViewsFor, useWindow, useWindowList, useWindows, ViewHost, ViewStage, } from './window/index.js';
-export type { CloseGuard, CloseVerdict, ViewDescriptor, ViewHostProps, ViewSource, ViewHostHandle, ViewsForResult, WindowListEntry, WindowState, WindowView, } from './window/index.js';
+export type { CloseGuard, CloseVerdict, ResolvedSource, SandboxPolicy, ViewDescriptor, ViewHostProps, ViewSource, ViewHostHandle, ViewsForResult, WindowListEntry, WindowState, WindowView, } from './window/index.js';
 export { useEmitIntent, useIntent, useSendIntent } from './intents/index.js';
 export type { EmitIntent, IntentCtx, IntentPayload, IntentReply, SendIntent, } from './intents/index.js';
 export { AppHost, AppLogo, useApps, useCurrentSpace, useOpenApp, useRoles, useDomains, useSpace, useSpaces, useUser, } from './application/index.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAChG,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAGxD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACjE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAKjD,OAAO,EACL,OAAO,EACP,WAAW,EACX,QAAQ,EACR,OAAO,EACP,SAAS,EACT,OAAO,EACP,QAAQ,EACR,SAAS,GACV,MAAM,kBAAkB,CAAA;AACzB,YAAY,EACV,eAAe,EACf,cAAc,EACd,WAAW,EACX,UAAU,EACV,IAAI,EACJ,UAAU,EACV,WAAW,EACX,UAAU,EACV,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGhF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC/F,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,cAAc,EACd,cAAc,EACd,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,UAAU,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,GACZ,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,SAAS,EACT,aAAa,EACb,UAAU,EACV,WAAW,EACX,cAAc,EACd,aAAa,EACb,WAAW,EACX,SAAS,EACT,QAAQ,EACR,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAG1E,OAAO,EACL,aAAa,EACb,aAAa,EACb,WAAW,EACX,SAAS,EACT,aAAa,EACb,UAAU,EACV,QAAQ,EACR,SAAS,GACV,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,UAAU,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,EACd,eAAe,EACf,WAAW,EACX,UAAU,GACX,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC5E,YAAY,EACV,UAAU,EACV,SAAS,EACT,aAAa,EACb,WAAW,EACX,UAAU,GACX,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EACL,OAAO,EACP,OAAO,EACP,OAAO,EACP,eAAe,EACf,UAAU,EACV,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,OAAO,GACR,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,WAAW,EACX,YAAY,GACb,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EACV,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,QAAQ,EACR,SAAS,EACT,QAAQ,GACT,MAAM,mBAAmB,CAAA;AAG1B,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAGhF,cAAc,yBAAyB,CAAA;AAGvC,OAAO,EACL,eAAe,EACf,QAAQ,EACR,UAAU,EACV,aAAa,EACb,MAAM,EACN,YAAY,EACZ,QAAQ,GACT,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,KAAK,EACL,SAAS,EACT,WAAW,EACX,KAAK,EACL,aAAa,EACb,YAAY,EACZ,eAAe,EACf,SAAS,GACV,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,YAAY,EACZ,aAAa,EACb,UAAU,EACV,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,EACb,WAAW,GACZ,MAAM,iCAAiC,CAAA;AACxC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAA;AACpE,YAAY,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAGpD,YAAY,EACV,WAAW,EACX,YAAY,EACZ,eAAe,EACf,KAAK,EACL,WAAW,EACX,MAAM,GACP,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAChG,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAGxD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACjE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAKjD,OAAO,EACL,OAAO,EACP,WAAW,EACX,QAAQ,EACR,OAAO,EACP,SAAS,EACT,OAAO,EACP,QAAQ,EACR,SAAS,GACV,MAAM,kBAAkB,CAAA;AACzB,YAAY,EACV,eAAe,EACf,cAAc,EACd,WAAW,EACX,UAAU,EACV,IAAI,EACJ,UAAU,EACV,WAAW,EACX,UAAU,EACV,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGhF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC/F,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,cAAc,EACd,cAAc,EACd,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,UAAU,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,GACZ,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,SAAS,EACT,aAAa,EACb,UAAU,EACV,WAAW,EACX,cAAc,EACd,aAAa,EACb,WAAW,EACX,SAAS,EACT,QAAQ,EACR,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAG1E,OAAO,EACL,aAAa,EACb,aAAa,EACb,WAAW,EACX,SAAS,EACT,aAAa,EACb,UAAU,EACV,QAAQ,EACR,SAAS,GACV,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,UAAU,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,cAAc,EACd,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,EACd,eAAe,EACf,WAAW,EACX,UAAU,GACX,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC5E,YAAY,EACV,UAAU,EACV,SAAS,EACT,aAAa,EACb,WAAW,EACX,UAAU,GACX,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EACL,OAAO,EACP,OAAO,EACP,OAAO,EACP,eAAe,EACf,UAAU,EACV,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,OAAO,GACR,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,WAAW,EACX,YAAY,GACb,MAAM,wBAAwB,CAAA;AAE/B,YAAY,EACV,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,QAAQ,EACR,SAAS,EACT,QAAQ,GACT,MAAM,mBAAmB,CAAA;AAG1B,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAGhF,cAAc,yBAAyB,CAAA;AAGvC,OAAO,EACL,eAAe,EACf,QAAQ,EACR,UAAU,EACV,aAAa,EACb,MAAM,EACN,YAAY,EACZ,QAAQ,GACT,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,KAAK,EACL,SAAS,EACT,WAAW,EACX,KAAK,EACL,aAAa,EACb,YAAY,EACZ,eAAe,EACf,SAAS,GACV,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,YAAY,EACZ,aAAa,EACb,UAAU,EACV,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,EACb,WAAW,GACZ,MAAM,iCAAiC,CAAA;AACxC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAA;AACpE,YAAY,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAGpD,YAAY,EACV,WAAW,EACX,YAAY,EACZ,eAAe,EACf,KAAK,EACL,WAAW,EACX,MAAM,GACP,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/window/host.d.ts

@@ -1,7 +1,7 @@
 import type { NodeRefInput } from '@astrale-os/kernel-client';
 import type { CloseResult, IntentRegistry, MountCredential, SandboxProfile } from '@astrale-os/shell';
 import type { CSSProperties, ReactNode } from 'react';
-import type { ViewSource } from './lifecycle/mount.js';
+import type { ResolvedSource, ViewSource } from './lifecycle/mount.js';
 import type { WindowState } from './lifecycle/states.js';
 /** Imperative handle on a mounted `ViewHost` (API §10). */
 export interface ViewHostHandle {
@@ -13,13 +13,15 @@ export interface ViewHostHandle {
     /** The one explicit remount. */
     refresh(): void;
 }
+/** Static iframe sandbox flags, an explicit opt-out, or a policy over the resolved mount. */
+export type SandboxPolicy = SandboxProfile | null | ((source: ResolvedSource) => SandboxProfile | null);
 export type ViewHostProps = ViewSource & {
     /** Node this view opens on — delivered as `targetNodeId`; a change retargets. */
     node?: NodeRefInput;
     capabilities?: {
         intents: readonly (keyof IntentRegistry)[];
     };
-    sandbox?: SandboxProfile | null;
+    sandbox?: SandboxPolicy;
     credential?: MountCredential;
     /** Rendered inside the anchor while the frame is not `ready`. */
     fallback?: (state: WindowState) => ReactNode;

package/dist/window/host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/window/host.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACd,eAAe,EAEf,cAAc,EAEf,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,aAAa,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AAqBnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAcxD,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAC3E,gCAAgC;IAChC,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG;IACvC,iFAAiF;IACjF,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAA;KAAE,CAAA;IAC7D,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IAC/B,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,SAAS,CAAA;IAC5C,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAA;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB,CAAA;AAYD,eAAO,MAAM,QAAQ,0GAyQpB,CAAA"}
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/window/host.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACd,eAAe,EAEf,cAAc,EAEf,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,aAAa,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AAqBnE,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAcxD,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAC3E,gCAAgC;IAChC,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,6FAA6F;AAC7F,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,IAAI,GACJ,CAAC,CAAC,MAAM,EAAE,cAAc,KAAK,cAAc,GAAG,IAAI,CAAC,CAAA;AAEvD,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG;IACvC,iFAAiF;IACjF,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAA;KAAE,CAAA;IAC7D,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,SAAS,CAAA;IAC5C,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAA;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB,CAAA;AAYD,eAAO,MAAM,QAAQ,0GA4RpB,CAAA"}

package/dist/window/host.js

@@ -131,6 +131,14 @@ export const ViewHost = forwardRef(function ViewHost(props, ref) {
             else
                 hub.stashForAdopt(mountKey, record);
         }
+        /** A pre-ready failure must not leave an empty stage slot over the fallback UI. */
+        function crashAndRelease(error) {
+            const slot = slotRef.current;
+            slotRef.current = null;
+            lastRectRef.current = null;
+            slot?.release();
+            setStateSafe({ phase: 'crashed', windowId: windowIdRef.current ?? undefined, error });
+        }
         // Adopt a live window a just-unmounted same-source host left behind.
         if (!wasRefresh) {
             const adopted = hub.takeAdopt(mountKey);
@@ -160,20 +168,32 @@ export const ViewHost = forwardRef(function ViewHost(props, ref) {
             catch (err) {
                 // No window yet (source resolution failed) — windowId honestly absent.
                 if (!cancelled)
-                    setStateSafe({ phase: 'crashed', error: err });
+                    crashAndRelease(err);
                 return;
             }
             if (cancelled)
                 return;
             const usedHandshake = handshake === 'none' ? 'none' : resolved.handshake;
             const deliveredTarget = refToId(p.node);
+            let sandbox;
+            try {
+                sandbox =
+                    typeof p.sandbox === 'function'
+                        ? p.sandbox({ ...resolved, handshake: usedHandshake })
+                        : p.sandbox;
+            }
+            catch (err) {
+                if (!cancelled)
+                    crashAndRelease(err);
+                return;
+            }
             const params = {
                 host: slotRef.current.element,
                 url: resolved.url,
                 functionId: resolved.functionId,
                 capabilities: { intents: p.capabilities?.intents ?? [] },
                 targetNodeId: deliveredTarget,
-                sandbox: p.sandbox,
+                sandbox,
                 handshake: usedHandshake,
                 credential: p.credential,
             };
@@ -206,7 +226,7 @@ export const ViewHost = forwardRef(function ViewHost(props, ref) {
                     await mountWith('none', true);
                     return;
                 }
-                setStateSafe({ phase: 'crashed', windowId: windowIdRef.current ?? undefined, error: err });
+                crashAndRelease(err);
             }
         }
         function begin(controller) {

package/dist/window/index.d.ts

@@ -1,6 +1,6 @@
 export { ViewStage } from './stage.js';
 export { ViewHost } from './host.js';
-export type { ViewHostProps, ViewHostHandle } from './host.js';
+export type { SandboxPolicy, ViewHostProps, ViewHostHandle } from './host.js';
 export { useWindows, useWindowList } from './hooks/windows.hook.js';
 export type { WindowListEntry } from './hooks/windows.hook.js';
 export { useWindow } from './hooks/window.hook.js';
@@ -10,6 +10,6 @@ export type { ViewsForResult } from './hooks/views-for.hook.js';
 export { useTargetNode } from './hooks/target-node.hook.js';
 export { useCloseGuard } from './hooks/close-guard.hook.js';
 export type { CloseGuard, CloseVerdict } from './hooks/close-guard.hook.js';
-export type { ViewDescriptor, ViewSource, Node } from './lifecycle/mount.js';
+export type { ResolvedSource, ViewDescriptor, ViewSource, Node } from './lifecycle/mount.js';
 export type { WindowState } from './lifecycle/states.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/window/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/window/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACnE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC3E,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC5E,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/window/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpC,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACnE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC3E,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC5F,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/window/stage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stage.d.ts","sourceRoot":"","sources":["../../src/window/stage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,OAAO,CAAA;AA4BxD,wBAAgB,SAAS,IAAI,YAAY,CAiBxC"}
+{"version":3,"file":"stage.d.ts","sourceRoot":"","sources":["../../src/window/stage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,OAAO,CAAA;AA6BxD,wBAAgB,SAAS,IAAI,YAAY,CAiBxC"}

package/dist/window/stage.js

@@ -20,6 +20,7 @@ const STAGE_STYLE = {
     left: 0,
     right: 0,
     bottom: 0,
+    zIndex: 20,
     pointerEvents: 'none',
 };
 export function ViewStage() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/shell-react",
-  "version": "0.2.8",
+  "version": "0.2.9",
   "description": "Astrale shell-react — the React face of the shell (provider, hooks, view components)",
   "license": "Apache-2.0",
   "repository": {
@@ -44,7 +44,7 @@
     "react-dom": "^19.2.0",
     "typescript": "~6.0.1-rc",
     "vitest": "^3.2.4",
-    "@astrale-os/shell": "0.3.6"
+    "@astrale-os/shell": "0.3.7"
   },
   "peerDependencies": {
     "@astrale-os/shell": ">=0.2.0 <1.0.0",

package/src/application/apps/app-host.tsx

@@ -1,5 +1,5 @@
 import type { NodeRefInput } from '@astrale-os/kernel-client'
-import type { ApplicationNode, AppSession, IntentRegistry, SandboxProfile } from '@astrale-os/shell'
+import type { ApplicationNode, AppSession, IntentRegistry } from '@astrale-os/shell'
 import type { CSSProperties, ReactElement, ReactNode } from 'react'
 
 /**
@@ -11,7 +11,7 @@ import type { CSSProperties, ReactElement, ReactNode } from 'react'
  */
 import { forwardRef, useEffect, useRef, useState } from 'react'
 
-import type { ViewHostHandle } from '../../window/host.js'
+import type { SandboxPolicy, ViewHostHandle } from '../../window/host.js'
 import type { ViewDescriptor } from '../../window/lifecycle/mount.js'
 import type { WindowState } from '../../window/lifecycle/states.js'
 
@@ -27,6 +27,8 @@ export type AppHostFallbackState =
 
 export interface AppHostProps {
   app: ApplicationNode | NodeRefInput
+  /** Override the entry View while keeping the application's delegated session alive. */
+  view?: NodeRefInput | ViewDescriptor
   /**
    * Default target node delivered to the app's view as `targetNodeId` (API §12.2).
    * Container-anchored apps need one — the dock passes the current space. A deeper
@@ -35,7 +37,7 @@ export interface AppHostProps {
    */
   node?: NodeRefInput
   capabilities?: { intents: readonly (keyof IntentRegistry)[] }
-  sandbox?: SandboxProfile | null
+  sandbox?: SandboxPolicy
   fallback?: (state: AppHostFallbackState) => ReactNode
   onSession?: (session: AppSession) => void
   className?: string
@@ -94,12 +96,13 @@ export const AppHost = forwardRef<ViewHostHandle, AppHostProps>(
     // A session-open failure has no window yet — `windowId` is honestly absent (§10).
     if (error !== undefined) return box(fallback?.({ phase: 'crashed', error }) ?? null)
     if (session === null) return box(fallback?.({ phase: 'opening' }) ?? null)
-    if (session.view === null) return box(fallback?.({ phase: 'no-view' }) ?? null)
+    const view = props.view ?? session.view
+    if (view === null) return box(fallback?.({ phase: 'no-view' }) ?? null)
 
     return (
       <ViewHost
         ref={ref}
-        view={session.view as ViewDescriptor}
+        view={view}
         node={props.node}
         credential={session.credential}
         capabilities={props.capabilities ?? { intents: [] }}

package/src/index.ts

@@ -106,6 +106,8 @@ export {
 export type {
   CloseGuard,
   CloseVerdict,
+  ResolvedSource,
+  SandboxPolicy,
   ViewDescriptor,
   ViewHostProps,
   ViewSource,

package/src/window/host.tsx

@@ -28,7 +28,7 @@ import {
 } from 'react'
 
 import type { AdoptRecord } from './adopt.js'
-import type { ViewSource } from './lifecycle/mount.js'
+import type { ResolvedSource, ViewSource } from './lifecycle/mount.js'
 import type { WindowState } from './lifecycle/states.js'
 import type { SlotRect, StageController, StageSlot } from './placement.js'
 
@@ -51,11 +51,17 @@ export interface ViewHostHandle {
   refresh(): void
 }
 
+/** Static iframe sandbox flags, an explicit opt-out, or a policy over the resolved mount. */
+export type SandboxPolicy =
+  | SandboxProfile
+  | null
+  | ((source: ResolvedSource) => SandboxProfile | null)
+
 export type ViewHostProps = ViewSource & {
   /** Node this view opens on — delivered as `targetNodeId`; a change retargets. */
   node?: NodeRefInput
   capabilities?: { intents: readonly (keyof IntentRegistry)[] }
-  sandbox?: SandboxProfile | null
+  sandbox?: SandboxPolicy
   credential?: MountCredential
   /** Rendered inside the anchor while the frame is not `ready`. */
   fallback?: (state: WindowState) => ReactNode
@@ -204,6 +210,15 @@ export const ViewHost = forwardRef<ViewHostHandle, ViewHostProps>(
         else hub.stashForAdopt(mountKey, record)
       }
 
+      /** A pre-ready failure must not leave an empty stage slot over the fallback UI. */
+      function crashAndRelease(error: unknown): void {
+        const slot = slotRef.current
+        slotRef.current = null
+        lastRectRef.current = null
+        slot?.release()
+        setStateSafe({ phase: 'crashed', windowId: windowIdRef.current ?? undefined, error })
+      }
+
       // Adopt a live window a just-unmounted same-source host left behind.
       if (!wasRefresh) {
         const adopted = hub.takeAdopt(mountKey)
@@ -232,20 +247,30 @@ export const ViewHost = forwardRef<ViewHostHandle, ViewHostProps>(
           resolved = await resolveSource(shell.kernel, sourceOf(p))
         } catch (err) {
           // No window yet (source resolution failed) — windowId honestly absent.
-          if (!cancelled) setStateSafe({ phase: 'crashed', error: err })
+          if (!cancelled) crashAndRelease(err)
           return
         }
         if (cancelled) return
 
         const usedHandshake = handshake === 'none' ? 'none' : resolved.handshake
         const deliveredTarget = refToId(p.node)
+        let sandbox: SandboxProfile | null | undefined
+        try {
+          sandbox =
+            typeof p.sandbox === 'function'
+              ? p.sandbox({ ...resolved, handshake: usedHandshake })
+              : p.sandbox
+        } catch (err) {
+          if (!cancelled) crashAndRelease(err)
+          return
+        }
         const params: MountParams = {
           host: slotRef.current!.element,
           url: resolved.url,
           functionId: resolved.functionId,
           capabilities: { intents: p.capabilities?.intents ?? [] },
           targetNodeId: deliveredTarget,
-          sandbox: p.sandbox,
+          sandbox,
           handshake: usedHandshake,
           credential: p.credential,
         }
@@ -277,7 +302,7 @@ export const ViewHost = forwardRef<ViewHostHandle, ViewHostProps>(
             await mountWith('none', true)
             return
           }
-          setStateSafe({ phase: 'crashed', windowId: windowIdRef.current ?? undefined, error: err })
+          crashAndRelease(err)
         }
       }
 

package/src/window/index.ts

@@ -3,7 +3,7 @@
 // target-node + close-guard, and the (G5) view-resolution hook.
 export { ViewStage } from './stage.js'
 export { ViewHost } from './host.js'
-export type { ViewHostProps, ViewHostHandle } from './host.js'
+export type { SandboxPolicy, ViewHostProps, ViewHostHandle } from './host.js'
 export { useWindows, useWindowList } from './hooks/windows.hook.js'
 export type { WindowListEntry } from './hooks/windows.hook.js'
 export { useWindow } from './hooks/window.hook.js'
@@ -13,5 +13,5 @@ export type { ViewsForResult } from './hooks/views-for.hook.js'
 export { useTargetNode } from './hooks/target-node.hook.js'
 export { useCloseGuard } from './hooks/close-guard.hook.js'
 export type { CloseGuard, CloseVerdict } from './hooks/close-guard.hook.js'
-export type { ViewDescriptor, ViewSource, Node } from './lifecycle/mount.js'
+export type { ResolvedSource, ViewDescriptor, ViewSource, Node } from './lifecycle/mount.js'
 export type { WindowState } from './lifecycle/states.js'

package/src/window/stage.tsx

@@ -23,6 +23,7 @@ const STAGE_STYLE: CSSProperties = {
   left: 0,
   right: 0,
   bottom: 0,
+  zIndex: 20,
   pointerEvents: 'none',
 }