@astrale-os/shell-react 0.4.0-beta.14 → 0.4.0-beta.15

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.4.0-beta.15](https://github.com/astrale-os/shell/compare/shell-react-v0.4.0-beta.14...shell-react-v0.4.0-beta.15) (2026-09-07)
+
+
+### ⚠ BREAKING CHANGES
+
+* **react:** preflight exact-class instance method targets ([#182](https://github.com/astrale-os/shell/issues/182))
+* **runtime:** simplify Shell users, groups and invitations ([#187](https://github.com/astrale-os/shell/issues/187))
+
+### Features
+
+* **domain:** migrate Shell to project environments ([#183](https://github.com/astrale-os/shell/issues/183)) ([ec72b5d](https://github.com/astrale-os/shell/commit/ec72b5d11fea5ff3266d1fd0a823c4eff5cc6d3e))
+* **react:** preflight exact-class instance method targets ([#182](https://github.com/astrale-os/shell/issues/182)) ([305e92f](https://github.com/astrale-os/shell/commit/305e92f0578309e5e94d8fd78d874f7c5a60ee46))
+* **runtime:** simplify Shell users, groups and invitations ([#187](https://github.com/astrale-os/shell/issues/187)) ([7f00279](https://github.com/astrale-os/shell/commit/7f002791edae81944e6e80940834dee49212aa26))
+
+
+### Bug Fixes
+
+* **react:** require the Shell User and Group API release ([#196](https://github.com/astrale-os/shell/issues/196)) ([df34749](https://github.com/astrale-os/shell/commit/df3474972a54c30816a02fc3510b478299bea4f1))
+
 ## [0.4.0-beta.14](https://github.com/astrale-os/shell/compare/shell-react-v0.4.0-beta.13...shell-react-v0.4.0-beta.14) (2026-09-04)
 
 

package/dist/application/apps/app-host.d.ts

@@ -1,5 +1,5 @@
 import type { Key } from '@astrale-os/sdk/schema';
-import type { App, HostCapabilities, ResolvedView } from '@astrale-os/shell';
+import type { HostCapabilities, ResolvedView } from '@astrale-os/shell';
 import type { CSSProperties, ReactNode } from 'react';
 import type { ViewHostHandle } from '../../window/host.js';
 import type { WindowState } from '../../window/lifecycle/states.js';
@@ -9,7 +9,7 @@ export type AppHostFallbackState = WindowState | {
     readonly phase: 'no-view';
 };
 export interface AppHostProps {
-    app: App | Key.Origin;
+    app: Key.Origin;
     /** Override the installed Domain entry View. */
     view?: ResolvedView;
     capabilities?: HostCapabilities;

package/dist/application/apps/app-host.js

@@ -7,7 +7,7 @@ export const AppHost = forwardRef(function AppHost(props, ref) {
     const open = useOpenApp();
     const [opened, setOpened] = useState(undefined);
     const [error, setError] = useState(undefined);
-    const origin = typeof props.app === 'string' ? props.app : props.app.origin;
+    const origin = props.app;
     const openRef = useRef(open);
     openRef.current = open;
     useEffect(() => {

package/dist/application/apps/open-app.hook.d.ts

@@ -1,5 +1,5 @@
 import type { Key } from '@astrale-os/sdk/schema';
-import type { App, ResolvedView } from '@astrale-os/shell';
+import type { ResolvedView } from '@astrale-os/shell';
 import type { Action } from '../../graph/action.js';
 /** Resolve one installed Domain's ordinary entry View. */
-export declare function useOpenApp(): Action<[App | Key.Origin], ResolvedView | null>;
+export declare function useOpenApp(): Action<[Key.Origin], ResolvedView | null>;

package/dist/application/apps/open-app.hook.js

@@ -3,5 +3,5 @@ import { useShell } from '../../session/shell.hook.js';
 /** Resolve one installed Domain's ordinary entry View. */
 export function useOpenApp() {
     const shell = useShell();
-    return useAction((app) => shell.apps.open(app));
+    return useAction((origin) => shell.views.entrypoint(origin));
 }

package/dist/application/index.d.ts

@@ -1,15 +1,7 @@
 export { useUser } from './user/user.hook.js';
-export { useSpaces } from './spaces/spaces.hook.js';
-export type { SpacesResult } from './spaces/spaces.hook.js';
-export { useCurrentSpace } from './spaces/current-space.hook.js';
-export type { CurrentSpaceResult } from './spaces/current-space.hook.js';
-export { useSpace } from './spaces/space.hook.js';
-export type { SpaceResult } from './spaces/space.hook.js';
-export { useApps } from './apps/apps.hook.js';
-export type { AppsResult } from './apps/apps.hook.js';
 export { useOpenApp } from './apps/open-app.hook.js';
 export { AppHost } from './apps/app-host.js';
 export type { AppHostFallbackState, AppHostProps } from './apps/app-host.js';
 export { AppLogo } from './apps/app-logo.js';
 export type { AppLogoProps } from './apps/app-logo.js';
-export type { App, NodeTarget, ResolvedView, SpaceNode, UserNode } from '@astrale-os/shell';
+export type { NodeTarget, ResolvedView, UserNode } from '@astrale-os/shell';

package/dist/application/index.js

@@ -1,12 +1,4 @@
-// application — API §12.2. The OS-plane hooks over the shell package's
-// `shell.user/spaces/apps` namespaces + the window module: useUser, useSpaces,
-// useCurrentSpace, useSpace, useApps, useOpenApp,
-// AppHost, AppLogo.
 export { useUser } from './user/user.hook.js';
-export { useSpaces } from './spaces/spaces.hook.js';
-export { useCurrentSpace } from './spaces/current-space.hook.js';
-export { useSpace } from './spaces/space.hook.js';
-export { useApps } from './apps/apps.hook.js';
 export { useOpenApp } from './apps/open-app.hook.js';
 export { AppHost } from './apps/app-host.js';
 export { AppLogo } from './apps/app-logo.js';

package/dist/application/user/user.hook.d.ts

@@ -1,6 +1,6 @@
 /**
- * useUser (API §12.2) — self as the shell-domain `User` (typed
- * firstName/lastName/email). The provider PRE-RESOLVES it at boot (`primeUser`),
+ * useUser — self as a Shell.User descendant, preserving canonical graph property
+ * keys. The provider PRE-RESOLVES it at boot (`primeUser`),
  * so `useUser` is synchronous below the provider (API §2). OS-plane absent → throws
  * descriptively to the nearest boundary; a never-primed shell suspends on first use
  * (§1.4). FLAG: not yet re-rendered on rename — becomes live via a memory shape.

package/dist/application/user/user.store.d.ts

@@ -1,8 +1,8 @@
 /**
  * The OS-plane user store (API §2/§12.2). Provider-boot priming (`primeUser`) seeds
  * the per-Shell user cache so `useUser` is synchronous, and tracks OS-plane
- * availability: a missing/rejecting `shell.user.me` marks the plane down (the other
- * OS hooks then read idle) without failing boot. A never-primed shell falls back to
+ * availability: a missing/rejecting `shell.user.me` is retained in the User cache
+ * without failing boot. A never-primed shell falls back to
  * a lazy cold read that SUSPENDS on first use (§1.4).
  */
 import type { Shell, UserNode } from '@astrale-os/shell';
@@ -22,8 +22,6 @@ export type UserEntry = {
     error: unknown;
 };
 export declare const userCache: WeakMap<Shell, UserEntry>;
-/** Is the OS plane (shell.user/spaces/apps) usable for this shell? */
-export declare function isOsPlaneAvailable(shell: Shell): boolean;
 /**
  * Provider-boot priming (API §2). Best-effort: seed the user cache so `useUser`
  * is synchronous, or mark the OS plane down. NEVER throws — boot must not fail on

package/dist/application/user/user.store.js

@@ -1,13 +1,7 @@
 export const userCache = new WeakMap();
-/** Shells whose OS plane could not be resolved at boot — OS hooks read idle. */
-const osPlaneDown = new WeakSet();
-/** Is the OS plane (shell.user/spaces/apps) usable for this shell? */
-export function isOsPlaneAvailable(shell) {
-    return !osPlaneDown.has(shell);
-}
 function osPlaneError(cause) {
     const detail = cause instanceof Error ? cause.message : String(cause);
-    return new Error(`The OS plane is unavailable (useUser/useSpaces/useApps/useDomains): ` +
+    return new Error(`The Shell User is unavailable (useUser): ` +
         `shell.user.me() could not resolve ` +
         `— the workspace/shell domain may not be installed for this identity. (${detail})`);
 }
@@ -19,7 +13,6 @@ function osPlaneError(cause) {
 export async function primeUser(shell) {
     const me = shell.user?.me;
     if (typeof me !== 'function') {
-        osPlaneDown.add(shell);
         userCache.set(shell, {
             status: 'unavailable',
             error: osPlaneError('shell.user.me is not a function'),
@@ -28,11 +21,9 @@ export async function primeUser(shell) {
     }
     try {
         const value = await me.call(shell.user);
-        osPlaneDown.delete(shell);
         userCache.set(shell, { status: 'resolved', value });
     }
     catch (error) {
-        osPlaneDown.add(shell);
         userCache.set(shell, { status: 'unavailable', error: osPlaneError(error) });
     }
 }

package/dist/index.d.ts

@@ -20,12 +20,12 @@ export { useEmitIntent, useIntent, useSendIntent } from './intents/index.js';
 export type { EmitIntent, IntentCtx, IntentPayload, IntentReply, SendIntent, } from './intents/index.js';
 export { Can, ConnectionBoundary, CredentialBoundary, defaultViewError, defaultViewLoading, GraphBoundary, Astrale, ViewBoundary, ViewErrorBoundary, } from './components/index.js';
 export type { AstraleProps, ViewErrorBoundaryProps } from './components/index.js';
-export { AppHost, AppLogo, useApps, useCurrentSpace, useOpenApp, useSpace, useSpaces, useUser, } from './application/index.js';
-export type { AppHostFallbackState, AppHostProps, AppLogoProps, AppsResult, CurrentSpaceResult, SpaceResult, SpacesResult, } from './application/index.js';
+export { AppHost, AppLogo, useOpenApp, useUser } from './application/index.js';
+export type { AppHostFallbackState, AppHostProps, AppLogoProps } from './application/index.js';
 export { NodeId } from '@astrale-os/sdk/graph/node';
 export { NodePath, Path } from '@astrale-os/sdk/graph/path';
 export type { Node } from '@astrale-os/sdk/graph/node';
 export type { PathLike } from '@astrale-os/sdk/graph/path';
 export type { AuthApi, Identity, PolicyDecisionInput } from '@astrale-os/sdk/auth';
 export type { DomainBinding } from '@astrale-os/shell';
-export type { App, CloseResult, CredentialSnapshot, HostCapabilities, IntentRegistry, KernelClient, MountCredential, NodeTarget, Shell, ShellConfig, SpaceNode, UserNode, ViewLocation, ViewPresentation, ViewPresentationRequest, Window, } from '@astrale-os/shell';
+export type { CloseResult, CredentialSnapshot, HostCapabilities, IntentRegistry, KernelClient, MountCredential, NodeTarget, Shell, ShellConfig, UserNode, ViewLocation, ViewPresentation, ViewPresentationRequest, Window, } from '@astrale-os/shell';

package/dist/index.js

@@ -17,7 +17,7 @@ export { useEmitIntent, useIntent, useSendIntent } from './intents/index.js';
 // Headless composition kit.
 export { Can, ConnectionBoundary, CredentialBoundary, defaultViewError, defaultViewLoading, GraphBoundary, Astrale, ViewBoundary, ViewErrorBoundary, } from './components/index.js';
 // Shell application conveniences.
-export { AppHost, AppLogo, useApps, useCurrentSpace, useOpenApp, useSpace, useSpaces, useUser, } from './application/index.js';
+export { AppHost, AppLogo, useOpenApp, useUser } from './application/index.js';
 // Canonical identity carriers used by View props and rich hooks.
 export { NodeId } from '@astrale-os/sdk/graph/node';
 export { NodePath, Path } from '@astrale-os/sdk/graph/path';

package/dist/schema/action.hook.d.ts

@@ -2,14 +2,14 @@ import type { SessionRequestOptions } from '@astrale-os/sdk/client/session';
 import type { NodeId } from '@astrale-os/sdk/graph/node';
 import type { QueryAST, QueryDefinition } from '@astrale-os/sdk/query';
 import type { Domain } from '@astrale-os/sdk/schema';
-import type { CallableInputOf, CallableResultOf, MethodInheritance, ResolvedFunction, ResolvedMethod } from '@astrale-os/sdk/schema';
-type ExecutableInheritance = Exclude<MethodInheritance, 'abstract'>;
-type InstanceMethod = ResolvedMethod<unknown, unknown, false, ExecutableInheritance>;
-type StaticMethod = ResolvedMethod<unknown, unknown, true, ExecutableInheritance>;
+import type { CallableInputOf, CallableResultOf, ClassKey, ResolvedFunction, ResolvedMethod } from '@astrale-os/sdk/schema';
+type InstanceMethod = ResolvedMethod<unknown, unknown, false, false>;
+type StaticMethod = ResolvedMethod<unknown, unknown, true, false>;
 type Callable = ResolvedFunction | InstanceMethod | StaticMethod;
-/** Stable identity of an instance Method receiver; the Kernel resolves and authorizes its Class. */
+/** Receiver identity with optional observed Class for early rejection; the Kernel checks live Class. */
 export interface ActionReceiver {
     readonly id: NodeId;
+    readonly class?: ClassKey;
 }
 declare const QUERY_REFRESH: unique symbol;
 export interface QueryRefresh {

package/dist/schema/action.hook.js

@@ -41,7 +41,7 @@ export function useAction(callable, options = {}) {
         const { refresh: _refresh, onError: _onError, ...request } = policy;
         try {
             const result = isInstanceMethod(current)
-                ? await kernel.session.invoke(reference(bindingRef.current.domain, current)(receiverPath(args[0])), args[1], request)
+                ? await kernel.session.invoke(reference(bindingRef.current.domain, current)(receiverPath(args[0], current)), args[1], request)
                 : await kernel.session.invoke(reference(bindingRef.current.domain, current), args[0], request);
             const refresh = policy.refresh ?? 'all';
             if (refresh === 'all')
@@ -80,7 +80,11 @@ function projectAction(action) {
 function isInstanceMethod(callable) {
     return 'owner' in callable && callable.static === false;
 }
-function receiverPath(receiver) {
+function receiverPath(receiver, method) {
+    const observedClass = receiver.class;
+    if (observedClass !== undefined && observedClass !== method.owner.key) {
+        throw new TypeError(`Method ${method.key} requires exact receiver Class ${method.owner.key}.`);
+    }
     return Path.id(receiver.id);
 }
 function queryRefreshIdentity(definition) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/shell-react",
-  "version": "0.4.0-beta.14",
+  "version": "0.4.0-beta.15",
   "description": "Astrale shell-react — the React face of the shell (provider, hooks, view components)",
   "license": "Apache-2.0",
   "repository": {
@@ -26,12 +26,12 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "@astrale-os/shell": ">=0.5.0-beta.13 <1.0.0",
+    "@astrale-os/shell": ">=0.5.0-beta.15 <1.0.0",
     "jose": "^6.2.8",
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@astrale-os/sdk": "0.5.0-beta.109",
+    "@astrale-os/sdk": "0.5.0-beta.123",
     "@testing-library/dom": "^10.4.0",
     "@testing-library/react": "^16.3.0",
     "@types/node": "^26.2.0",
@@ -46,7 +46,7 @@
     "vitest": "4.1.10"
   },
   "peerDependencies": {
-    "@astrale-os/sdk": ">=0.5.0-beta.109 <1.0.0",
+    "@astrale-os/sdk": ">=0.5.0-beta.123 <1.0.0",
     "react": ">=18",
     "react-dom": ">=18"
   },

package/src/application/apps/app-host.tsx

@@ -1,5 +1,5 @@
 import type { Key } from '@astrale-os/sdk/schema'
-import type { App, HostCapabilities, ResolvedView } from '@astrale-os/shell'
+import type { HostCapabilities, ResolvedView } from '@astrale-os/shell'
 import type { CSSProperties, ReactElement, ReactNode } from 'react'
 
 import { forwardRef, useEffect, useRef, useState } from 'react'
@@ -16,7 +16,7 @@ export type AppHostFallbackState =
   | { readonly phase: 'no-view' }
 
 export interface AppHostProps {
-  app: App | Key.Origin
+  app: Key.Origin
   /** Override the installed Domain entry View. */
   view?: ResolvedView
   capabilities?: HostCapabilities
@@ -31,7 +31,7 @@ export const AppHost = forwardRef<ViewHostHandle, AppHostProps>(
     const open = useOpenApp()
     const [opened, setOpened] = useState<ResolvedView | null | undefined>(undefined)
     const [error, setError] = useState<unknown>(undefined)
-    const origin = typeof props.app === 'string' ? props.app : props.app.origin
+    const origin = props.app
     const openRef = useRef(open)
     openRef.current = open
 

package/src/application/apps/open-app.hook.ts

@@ -1,12 +1,12 @@
 import type { Key } from '@astrale-os/sdk/schema'
-import type { App, ResolvedView } from '@astrale-os/shell'
+import type { ResolvedView } from '@astrale-os/shell'
 
 import type { Action } from '../../graph/action.js'
 
 import { useAction } from '../../graph/action.js'
 import { useShell } from '../../session/shell.hook.js'
 /** Resolve one installed Domain's ordinary entry View. */
-export function useOpenApp(): Action<[App | Key.Origin], ResolvedView | null> {
+export function useOpenApp(): Action<[Key.Origin], ResolvedView | null> {
   const shell = useShell()
-  return useAction((app: App | Key.Origin) => shell.apps.open(app))
+  return useAction((origin: Key.Origin) => shell.views.entrypoint(origin))
 }

package/src/application/index.ts

@@ -1,20 +1,8 @@
-// application — API §12.2. The OS-plane hooks over the shell package's
-// `shell.user/spaces/apps` namespaces + the window module: useUser, useSpaces,
-// useCurrentSpace, useSpace, useApps, useOpenApp,
-// AppHost, AppLogo.
 export { useUser } from './user/user.hook.js'
-export { useSpaces } from './spaces/spaces.hook.js'
-export type { SpacesResult } from './spaces/spaces.hook.js'
-export { useCurrentSpace } from './spaces/current-space.hook.js'
-export type { CurrentSpaceResult } from './spaces/current-space.hook.js'
-export { useSpace } from './spaces/space.hook.js'
-export type { SpaceResult } from './spaces/space.hook.js'
-export { useApps } from './apps/apps.hook.js'
-export type { AppsResult } from './apps/apps.hook.js'
 export { useOpenApp } from './apps/open-app.hook.js'
 export { AppHost } from './apps/app-host.js'
 export type { AppHostFallbackState, AppHostProps } from './apps/app-host.js'
 export { AppLogo } from './apps/app-logo.js'
 export type { AppLogoProps } from './apps/app-logo.js'
 // The OS node/session types (from the shell package, single import surface).
-export type { App, NodeTarget, ResolvedView, SpaceNode, UserNode } from '@astrale-os/shell'
+export type { NodeTarget, ResolvedView, UserNode } from '@astrale-os/shell'

package/src/application/user/user.hook.ts

@@ -1,6 +1,6 @@
 /**
- * useUser (API §12.2) — self as the shell-domain `User` (typed
- * firstName/lastName/email). The provider PRE-RESOLVES it at boot (`primeUser`),
+ * useUser — self as a Shell.User descendant, preserving canonical graph property
+ * keys. The provider PRE-RESOLVES it at boot (`primeUser`),
  * so `useUser` is synchronous below the provider (API §2). OS-plane absent → throws
  * descriptively to the nearest boundary; a never-primed shell suspends on first use
  * (§1.4). FLAG: not yet re-rendered on rename — becomes live via a memory shape.

package/src/application/user/user.store.ts

@@ -1,8 +1,8 @@
 /**
  * The OS-plane user store (API §2/§12.2). Provider-boot priming (`primeUser`) seeds
  * the per-Shell user cache so `useUser` is synchronous, and tracks OS-plane
- * availability: a missing/rejecting `shell.user.me` marks the plane down (the other
- * OS hooks then read idle) without failing boot. A never-primed shell falls back to
+ * availability: a missing/rejecting `shell.user.me` is retained in the User cache
+ * without failing boot. A never-primed shell falls back to
  * a lazy cold read that SUSPENDS on first use (§1.4).
  */
 import type { Shell, UserNode } from '@astrale-os/shell'
@@ -16,14 +16,6 @@ export type UserEntry =
 
 export const userCache = new WeakMap<Shell, UserEntry>()
 
-/** Shells whose OS plane could not be resolved at boot — OS hooks read idle. */
-const osPlaneDown = new WeakSet<Shell>()
-
-/** Is the OS plane (shell.user/spaces/apps) usable for this shell? */
-export function isOsPlaneAvailable(shell: Shell): boolean {
-  return !osPlaneDown.has(shell)
-}
-
 interface UserSurface {
   user?: { me?: () => Promise<UserNode> }
 }
@@ -31,7 +23,7 @@ interface UserSurface {
 function osPlaneError(cause: unknown): Error {
   const detail = cause instanceof Error ? cause.message : String(cause)
   return new Error(
-    `The OS plane is unavailable (useUser/useSpaces/useApps/useDomains): ` +
+    `The Shell User is unavailable (useUser): ` +
       `shell.user.me() could not resolve ` +
       `— the workspace/shell domain may not be installed for this identity. (${detail})`,
   )
@@ -45,7 +37,6 @@ function osPlaneError(cause: unknown): Error {
 export async function primeUser(shell: Shell): Promise<void> {
   const me = (shell as unknown as UserSurface).user?.me
   if (typeof me !== 'function') {
-    osPlaneDown.add(shell)
     userCache.set(shell, {
       status: 'unavailable',
       error: osPlaneError('shell.user.me is not a function'),
@@ -54,10 +45,8 @@ export async function primeUser(shell: Shell): Promise<void> {
   }
   try {
     const value = await me.call((shell as unknown as UserSurface).user)
-    osPlaneDown.delete(shell)
     userCache.set(shell, { status: 'resolved', value })
   } catch (error) {
-    osPlaneDown.add(shell)
     userCache.set(shell, { status: 'unavailable', error: osPlaneError(error) })
   }
 }

package/src/index.ts

@@ -175,25 +175,8 @@ export {
 export type { AstraleProps, ViewErrorBoundaryProps } from './components/index.js'
 
 // Shell application conveniences.
-export {
-  AppHost,
-  AppLogo,
-  useApps,
-  useCurrentSpace,
-  useOpenApp,
-  useSpace,
-  useSpaces,
-  useUser,
-} from './application/index.js'
-export type {
-  AppHostFallbackState,
-  AppHostProps,
-  AppLogoProps,
-  AppsResult,
-  CurrentSpaceResult,
-  SpaceResult,
-  SpacesResult,
-} from './application/index.js'
+export { AppHost, AppLogo, useOpenApp, useUser } from './application/index.js'
+export type { AppHostFallbackState, AppHostProps, AppLogoProps } from './application/index.js'
 
 // Canonical identity carriers used by View props and rich hooks.
 export { NodeId } from '@astrale-os/sdk/graph/node'
@@ -205,7 +188,6 @@ export type { DomainBinding } from '@astrale-os/shell'
 
 // Shell contracts retained at the package root for custom full-app composition.
 export type {
-  App,
   CloseResult,
   CredentialSnapshot,
   HostCapabilities,
@@ -215,7 +197,6 @@ export type {
   NodeTarget,
   Shell,
   ShellConfig,
-  SpaceNode,
   UserNode,
   ViewLocation,
   ViewPresentation,

package/src/schema/action.hook.ts

@@ -5,7 +5,7 @@ import type { Domain } from '@astrale-os/sdk/schema'
 import type {
   CallableInputOf,
   CallableResultOf,
-  MethodInheritance,
+  ClassKey,
   ResolvedFunction,
   ResolvedMethod,
 } from '@astrale-os/sdk/schema'
@@ -22,14 +22,14 @@ import { useAction as useAsyncAction } from '../graph/action.js'
 import { useGraphStore } from '../graph/store.js'
 import { bindingFor } from './domain.hook.js'
 
-type ExecutableInheritance = Exclude<MethodInheritance, 'abstract'>
-type InstanceMethod = ResolvedMethod<unknown, unknown, false, ExecutableInheritance>
-type StaticMethod = ResolvedMethod<unknown, unknown, true, ExecutableInheritance>
+type InstanceMethod = ResolvedMethod<unknown, unknown, false, false>
+type StaticMethod = ResolvedMethod<unknown, unknown, true, false>
 type Callable = ResolvedFunction | InstanceMethod | StaticMethod
 
-/** Stable identity of an instance Method receiver; the Kernel resolves and authorizes its Class. */
+/** Receiver identity with optional observed Class for early rejection; the Kernel checks live Class. */
 export interface ActionReceiver {
   readonly id: NodeId
+  readonly class?: ClassKey
 }
 
 const QUERY_REFRESH = Symbol('shell-react.query-refresh')
@@ -114,7 +114,7 @@ export function useAction<C extends Callable>(
               reference(
                 bindingRef.current.domain,
                 current,
-              )(receiverPath(args[0] as ActionReceiver)),
+              )(receiverPath(args[0] as ActionReceiver, current)),
               args[1] as never,
               request,
             )
@@ -165,7 +165,11 @@ function isInstanceMethod(callable: Callable): callable is InstanceMethod {
   return 'owner' in callable && callable.static === false
 }
 
-function receiverPath(receiver: ActionReceiver): Path {
+function receiverPath(receiver: ActionReceiver, method: InstanceMethod): Path {
+  const observedClass = receiver.class
+  if (observedClass !== undefined && observedClass !== method.owner.key) {
+    throw new TypeError(`Method ${method.key} requires exact receiver Class ${method.owner.key}.`)
+  }
   return Path.id(receiver.id)
 }
 

package/dist/application/apps/apps.hook.d.ts

@@ -1,7 +0,0 @@
-import type { App } from '@astrale-os/shell';
-import type { ReadState } from '../../graph/memory/read/envelope.js';
-export interface AppsResult extends ReadState {
-    readonly apps: readonly App[];
-}
-/** Read the installed Domain applications available to the current Shell session. */
-export declare function useApps(): AppsResult;

package/dist/application/apps/apps.hook.js

@@ -1,19 +0,0 @@
-import { useMemo } from 'react';
-import { useAsyncResource } from '../../graph/async.js';
-import { useShell } from '../../session/shell.hook.js';
-import { isOsPlaneAvailable } from '../user/user.store.js';
-const NO_APPS = [];
-/** Read the installed Domain applications available to the current Shell session. */
-export function useApps() {
-    const shell = useShell();
-    const available = isOsPlaneAvailable(shell);
-    const result = useAsyncResource(available ? () => shell.apps.list() : null, NO_APPS, [shell, available]);
-    return useMemo(() => ({
-        apps: result.data,
-        pending: result.pending,
-        error: result.error,
-        live: false,
-        seq: 0,
-        refetch: result.refetch,
-    }), [result.data, result.pending, result.error, result.refetch]);
-}

package/dist/application/spaces/current-space.hook.d.ts

@@ -1,6 +0,0 @@
-import type { SpaceNode } from '@astrale-os/shell';
-import type { ReadState } from '../../graph/memory/read/envelope.js';
-export interface CurrentSpaceResult extends ReadState {
-    readonly space: SpaceNode | null;
-}
-export declare function useCurrentSpace(): CurrentSpaceResult;

package/dist/application/spaces/current-space.hook.js

@@ -1,27 +0,0 @@
-/**
- * useCurrentSpace (API §12.2) — the selected space, projected from the shared
- * per-Shell current-space store (so a switch anywhere re-themes it). One-shot
- * today (§12 flag); OS-plane-unavailable reads idle.
- */
-import { useEffect, useMemo, useSyncExternalStore } from 'react';
-import { useShell } from '../../session/shell.hook.js';
-import { isOsPlaneAvailable } from '../user/user.store.js';
-import { currentSpaceStore, idleSnapshot, noopSubscribe } from './current-space.store.js';
-export function useCurrentSpace() {
-    const shell = useShell();
-    const available = isOsPlaneAvailable(shell);
-    const store = currentSpaceStore(shell);
-    useEffect(() => {
-        if (available)
-            store.ensure();
-    }, [store, available]);
-    const snap = useSyncExternalStore(available ? store.subscribe : noopSubscribe, available ? store.getSnapshot : idleSnapshot, available ? store.getSnapshot : idleSnapshot);
-    return useMemo(() => ({
-        space: snap.space,
-        pending: snap.pending,
-        error: snap.error,
-        live: false,
-        seq: 0,
-        refetch: store.refresh,
-    }), [snap, store]);
-}

package/dist/application/spaces/current-space.store.d.ts

@@ -1,31 +0,0 @@
-/**
- * The shared current-space store (API §12.2). ONE reactive resolver per Shell, so
- * useCurrentSpace / useApps / useSpaces.selected all observe the SAME selected
- * space: a `switch` in any window re-themes every consumer in this window at once,
- * with a manual optimistic override applied ahead of the round-trip (§1.6). This
- * closes the same-window cross-hook divergence; cross-WINDOW liveness still waits
- * on the memory-shape move (§12 flag).
- */
-import type { Shell, SpaceNode } from '@astrale-os/shell';
-export interface CurrentSpaceSnapshot {
-    readonly space: SpaceNode | null;
-    readonly pending: boolean;
-    readonly error: unknown;
-}
-export declare const IDLE_SNAPSHOT: CurrentSpaceSnapshot;
-export declare const idleSnapshot: () => CurrentSpaceSnapshot;
-export declare const noopSubscribe: () => (() => void);
-export interface CurrentSpaceStore {
-    subscribe(cb: () => void): () => void;
-    getSnapshot(): CurrentSpaceSnapshot;
-    /** Kick a first load if the confirmed value was never fetched. */
-    ensure(): void;
-    /** Refetch the confirmed selected space; resolves when it lands. */
-    refresh(): Promise<void>;
-    /** Apply an optimistic override (a switch in flight) — every consumer re-renders. */
-    setOptimistic(space: SpaceNode | null): void;
-    /** Drop the optimistic override, revealing confirmed truth again. */
-    clearOptimistic(): void;
-}
-/** The one current-space store for a Shell (created on first touch). */
-export declare function currentSpaceStore(shell: Shell): CurrentSpaceStore;

package/dist/application/spaces/current-space.store.js

@@ -1,79 +0,0 @@
-// Stable idles for when the OS plane is unavailable (§12.2) — a fixed snapshot
-// and a no-op subscription keep `useSyncExternalStore` tear-free without touching
-// (and re-triggering a fetch on) the real current-space store.
-export const IDLE_SNAPSHOT = { space: null, pending: false, error: undefined };
-export const idleSnapshot = () => IDLE_SNAPSHOT;
-export const noopSubscribe = () => () => { };
-function createStore(load) {
-    let confirmed = null;
-    let loaded = false;
-    let pending = false;
-    let error = undefined;
-    let override = null;
-    let seq = 0;
-    let snap = { space: null, pending: false, error: undefined };
-    const listeners = new Set();
-    /** Recompute the projection (override wins) and notify only on a real change. */
-    function rebuild() {
-        const space = override !== null ? override.space : confirmed;
-        if (space === snap.space && pending === snap.pending && error === snap.error)
-            return;
-        snap = { space, pending, error };
-        for (const l of listeners)
-            l();
-    }
-    function fetch() {
-        const my = ++seq;
-        pending = true;
-        rebuild();
-        return load().then((space) => {
-            if (my !== seq)
-                return;
-            confirmed = space;
-            loaded = true;
-            pending = false;
-            error = undefined;
-            rebuild();
-        }, (e) => {
-            if (my !== seq)
-                return;
-            pending = false;
-            error = e;
-            rebuild();
-        });
-    }
-    return {
-        subscribe(cb) {
-            listeners.add(cb);
-            if (!loaded && !pending)
-                void fetch();
-            return () => listeners.delete(cb);
-        },
-        getSnapshot: () => snap,
-        ensure() {
-            if (!loaded && !pending)
-                void fetch();
-        },
-        refresh: () => fetch(),
-        setOptimistic(space) {
-            override = { space };
-            rebuild();
-        },
-        clearOptimistic() {
-            if (override === null)
-                return;
-            override = null;
-            rebuild();
-        },
-    };
-}
-const stores = new WeakMap();
-/** The one current-space store for a Shell (created on first touch). */
-export function currentSpaceStore(shell) {
-    let s = stores.get(shell);
-    if (s === undefined) {
-        s = createStore(() => shell.user.currentSpace());
-        stores.set(shell, s);
-    }
-    return s;
-}

package/dist/application/spaces/space.hook.d.ts

@@ -1,4 +0,0 @@
-import type { NodeTarget } from '@astrale-os/shell';
-import type { CurrentSpaceResult } from './current-space.hook.js';
-export type SpaceResult = CurrentSpaceResult;
-export declare function useSpace(ref: NodeTarget | null | undefined): SpaceResult;

package/dist/application/spaces/space.hook.js

@@ -1,28 +0,0 @@
-import { Path } from '@astrale-os/sdk/graph/path';
-/**
- * useSpace(ref) (API §12.2) — a single space by ref; `null`/`undefined` (or an
- * unavailable OS plane) is idle (§1.3). One-shot today (§12 flag).
- */
-import { useMemo } from 'react';
-import { useAsyncResource } from '../../graph/async.js';
-import { isIdleInput } from '../../graph/memory/read/idle.js';
-import { useShell } from '../../session/shell.hook.js';
-import { isOsPlaneAvailable } from '../user/user.store.js';
-export function useSpace(ref) {
-    const shell = useShell();
-    const idle = isIdleInput(ref) || !isOsPlaneAvailable(shell);
-    // The inline guard (not the stored `idle`) narrows `ref` to non-null below.
-    const key = idle ? null : targetKey(ref);
-    const res = useAsyncResource(idle ? null : () => shell.spaces.get(ref), null, [shell, key]);
-    return useMemo(() => ({
-        space: idle ? null : res.data,
-        pending: idle ? false : res.pending,
-        error: idle ? undefined : res.error,
-        live: false,
-        seq: 0,
-        refetch: res.refetch,
-    }), [idle, res]);
-}
-function targetKey(input) {
-    return typeof input === 'string' ? `text:${input}` : `path:${Path.from(input).raw}`;
-}

package/dist/application/spaces/spaces.hook.d.ts

@@ -1,12 +0,0 @@
-import type { NodeTarget, SpaceNode } from '@astrale-os/shell';
-import type { Action } from '../../graph/action.js';
-import type { ReadState } from '../../graph/memory/read/envelope.js';
-export interface SpacesResult extends ReadState {
-    /** Spaces-dir children, live (one-shot today), the caller's readable set. */
-    readonly spaces: readonly SpaceNode[];
-    /** The `selected_space` target — optimistically ahead during a `switch`. */
-    readonly selected: SpaceNode | null;
-    /** `user::switchSpace` with a manual optimistic overlay (§1.6). */
-    readonly switch: Action<[NodeTarget], void>;
-}
-export declare function useSpaces(): SpacesResult;

package/dist/application/spaces/spaces.hook.js

@@ -1,89 +0,0 @@
-import { Path } from '@astrale-os/sdk/graph/path';
-/**
- * useSpaces (API §12.2) — the spaces list, the selected space, and a `switch`
- * Action that repoints the `selected_space` edge. Reads the SAME per-Shell
- * current-space store as useCurrentSpace/useApps, so a switch re-themes every
- * consumer in the window at once — optimistically ahead of the round-trip (§1.6),
- * commit reconciles, failure rolls back. Reads are one-shot today (§12 flag).
- */
-import { useEffect, useMemo, useSyncExternalStore } from 'react';
-import { useAction } from '../../graph/action.js';
-import { useAsyncResource } from '../../graph/async.js';
-import { useShell } from '../../session/shell.hook.js';
-import { isOsPlaneAvailable } from '../user/user.store.js';
-import { currentSpaceStore, idleSnapshot, noopSubscribe } from './current-space.store.js';
-const NO_SPACES = [];
-export function useSpaces() {
-    const shell = useShell();
-    const available = isOsPlaneAvailable(shell);
-    const store = currentSpaceStore(shell);
-    const spacesRes = useAsyncResource(available ? () => shell.spaces.list() : null, NO_SPACES, [shell, available]);
-    useEffect(() => {
-        if (available)
-            store.ensure();
-    }, [store, available]);
-    const selectedSnap = useSyncExternalStore(available ? store.subscribe : noopSubscribe, available ? store.getSnapshot : idleSnapshot, available ? store.getSnapshot : idleSnapshot);
-    const spaces = spacesRes.data;
-    const switchAction = useAction(async (ref) => {
-        // Optimistic override on the SHARED store, so useCurrentSpace / useApps ahead
-        // of the round-trip too (§12.2). Only overlay a known target (a path ref that
-        // matches nothing in the list simply skips the preview).
-        const target = findSpace(spaces, ref);
-        if (target !== null)
-            store.setOptimistic(target);
-        try {
-            await shell.user.switchSpace(ref);
-            await store.refresh(); // reconcile confirmed truth BEFORE dropping the preview
-            store.clearOptimistic();
-        }
-        catch (error) {
-            store.clearOptimistic(); // rollback: reveal the confirmed (previous) space
-            throw error;
-        }
-    });
-    return useMemo(() => ({
-        spaces,
-        selected: selectedSnap.space,
-        switch: switchAction,
-        pending: spacesRes.pending || selectedSnap.pending,
-        error: spacesRes.error ?? selectedSnap.error,
-        live: false,
-        seq: 0,
-        refetch: async () => {
-            await Promise.all([spacesRes.refetch(), store.refresh()]);
-        },
-    }), [
-        spaces,
-        selectedSnap,
-        switchAction,
-        spacesRes.pending,
-        spacesRes.error,
-        spacesRes.refetch,
-        store,
-    ]);
-}
-/** The space in `spaces` denoted by `ref`, or `null` (path refs don't match by id). */
-function findSpace(spaces, ref) {
-    const id = refIdOf(ref);
-    if (id === null)
-        return null;
-    return spaces.find((s) => s.id === id) ?? null;
-}
-/** A bound-node-ish subject carries a graph id. */
-function hasId(x) {
-    return typeof x === 'object' && x !== null && 'id' in x;
-}
-/** The graph id a subject denotes, or `null` when it is a path (no id to match). */
-function refIdOf(x) {
-    if (hasId(x))
-        return x.id;
-    if (typeof x === 'string' && !x.startsWith('@') && !x.startsWith('/'))
-        return x;
-    try {
-        const path = Path.from(x);
-        return path.ast.anchor.kind === 'id' && path.ast.steps.length === 0 ? path.ast.anchor.id : null;
-    }
-    catch {
-        return null;
-    }
-}

package/src/application/apps/apps.hook.ts

@@ -1,38 +0,0 @@
-import type { App } from '@astrale-os/shell'
-
-import { useMemo } from 'react'
-
-import type { ReadState } from '../../graph/memory/read/envelope.js'
-
-import { useAsyncResource } from '../../graph/async.js'
-import { useShell } from '../../session/shell.hook.js'
-import { isOsPlaneAvailable } from '../user/user.store.js'
-
-const NO_APPS: readonly App[] = []
-
-export interface AppsResult extends ReadState {
-  readonly apps: readonly App[]
-}
-
-/** Read the installed Domain applications available to the current Shell session. */
-export function useApps(): AppsResult {
-  const shell = useShell()
-  const available = isOsPlaneAvailable(shell)
-  const result = useAsyncResource<readonly App[]>(
-    available ? () => shell.apps.list() : null,
-    NO_APPS,
-    [shell, available],
-  )
-
-  return useMemo<AppsResult>(
-    () => ({
-      apps: result.data,
-      pending: result.pending,
-      error: result.error,
-      live: false,
-      seq: 0,
-      refetch: result.refetch,
-    }),
-    [result.data, result.pending, result.error, result.refetch],
-  )
-}

package/src/application/spaces/current-space.hook.ts

@@ -1,43 +0,0 @@
-import type { SpaceNode } from '@astrale-os/shell'
-
-/**
- * useCurrentSpace (API §12.2) — the selected space, projected from the shared
- * per-Shell current-space store (so a switch anywhere re-themes it). One-shot
- * today (§12 flag); OS-plane-unavailable reads idle.
- */
-import { useEffect, useMemo, useSyncExternalStore } from 'react'
-
-import type { ReadState } from '../../graph/memory/read/envelope.js'
-
-import { useShell } from '../../session/shell.hook.js'
-import { isOsPlaneAvailable } from '../user/user.store.js'
-import { currentSpaceStore, idleSnapshot, noopSubscribe } from './current-space.store.js'
-
-export interface CurrentSpaceResult extends ReadState {
-  readonly space: SpaceNode | null
-}
-
-export function useCurrentSpace(): CurrentSpaceResult {
-  const shell = useShell()
-  const available = isOsPlaneAvailable(shell)
-  const store = currentSpaceStore(shell)
-  useEffect(() => {
-    if (available) store.ensure()
-  }, [store, available])
-  const snap = useSyncExternalStore(
-    available ? store.subscribe : noopSubscribe,
-    available ? store.getSnapshot : idleSnapshot,
-    available ? store.getSnapshot : idleSnapshot,
-  )
-  return useMemo(
-    () => ({
-      space: snap.space,
-      pending: snap.pending,
-      error: snap.error,
-      live: false,
-      seq: 0,
-      refetch: store.refresh,
-    }),
-    [snap, store],
-  )
-}

package/src/application/spaces/current-space.store.ts

@@ -1,110 +0,0 @@
-/**
- * The shared current-space store (API §12.2). ONE reactive resolver per Shell, so
- * useCurrentSpace / useApps / useSpaces.selected all observe the SAME selected
- * space: a `switch` in any window re-themes every consumer in this window at once,
- * with a manual optimistic override applied ahead of the round-trip (§1.6). This
- * closes the same-window cross-hook divergence; cross-WINDOW liveness still waits
- * on the memory-shape move (§12 flag).
- */
-import type { Shell, SpaceNode } from '@astrale-os/shell'
-
-export interface CurrentSpaceSnapshot {
-  readonly space: SpaceNode | null
-  readonly pending: boolean
-  readonly error: unknown
-}
-
-// Stable idles for when the OS plane is unavailable (§12.2) — a fixed snapshot
-// and a no-op subscription keep `useSyncExternalStore` tear-free without touching
-// (and re-triggering a fetch on) the real current-space store.
-export const IDLE_SNAPSHOT: CurrentSpaceSnapshot = { space: null, pending: false, error: undefined }
-export const idleSnapshot = (): CurrentSpaceSnapshot => IDLE_SNAPSHOT
-export const noopSubscribe = (): (() => void) => () => {}
-
-export interface CurrentSpaceStore {
-  subscribe(cb: () => void): () => void
-  getSnapshot(): CurrentSpaceSnapshot
-  /** Kick a first load if the confirmed value was never fetched. */
-  ensure(): void
-  /** Refetch the confirmed selected space; resolves when it lands. */
-  refresh(): Promise<void>
-  /** Apply an optimistic override (a switch in flight) — every consumer re-renders. */
-  setOptimistic(space: SpaceNode | null): void
-  /** Drop the optimistic override, revealing confirmed truth again. */
-  clearOptimistic(): void
-}
-
-function createStore(load: () => Promise<SpaceNode | null>): CurrentSpaceStore {
-  let confirmed: SpaceNode | null = null
-  let loaded = false
-  let pending = false
-  let error: unknown = undefined
-  let override: { space: SpaceNode | null } | null = null
-  let seq = 0
-  let snap: CurrentSpaceSnapshot = { space: null, pending: false, error: undefined }
-  const listeners = new Set<() => void>()
-
-  /** Recompute the projection (override wins) and notify only on a real change. */
-  function rebuild(): void {
-    const space = override !== null ? override.space : confirmed
-    if (space === snap.space && pending === snap.pending && error === snap.error) return
-    snap = { space, pending, error }
-    for (const l of listeners) l()
-  }
-
-  function fetch(): Promise<void> {
-    const my = ++seq
-    pending = true
-    rebuild()
-    return load().then(
-      (space) => {
-        if (my !== seq) return
-        confirmed = space
-        loaded = true
-        pending = false
-        error = undefined
-        rebuild()
-      },
-      (e: unknown) => {
-        if (my !== seq) return
-        pending = false
-        error = e
-        rebuild()
-      },
-    )
-  }
-
-  return {
-    subscribe(cb) {
-      listeners.add(cb)
-      if (!loaded && !pending) void fetch()
-      return () => listeners.delete(cb)
-    },
-    getSnapshot: () => snap,
-    ensure() {
-      if (!loaded && !pending) void fetch()
-    },
-    refresh: () => fetch(),
-    setOptimistic(space) {
-      override = { space }
-      rebuild()
-    },
-    clearOptimistic() {
-      if (override === null) return
-      override = null
-      rebuild()
-    },
-  }
-}
-
-const stores = new WeakMap<Shell, CurrentSpaceStore>()
-
-/** The one current-space store for a Shell (created on first touch). */
-export function currentSpaceStore(shell: Shell): CurrentSpaceStore {
-  let s = stores.get(shell)
-  if (s === undefined) {
-    s = createStore(() => shell.user.currentSpace())
-    stores.set(shell, s)
-  }
-  return s
-}

package/src/application/spaces/space.hook.ts

@@ -1,45 +0,0 @@
-import type { PathLike } from '@astrale-os/sdk/graph/path'
-import type { NodeTarget, SpaceNode } from '@astrale-os/shell'
-
-import { Path } from '@astrale-os/sdk/graph/path'
-/**
- * useSpace(ref) (API §12.2) — a single space by ref; `null`/`undefined` (or an
- * unavailable OS plane) is idle (§1.3). One-shot today (§12 flag).
- */
-import { useMemo } from 'react'
-
-import type { CurrentSpaceResult } from './current-space.hook.js'
-
-import { useAsyncResource } from '../../graph/async.js'
-import { isIdleInput } from '../../graph/memory/read/idle.js'
-import { useShell } from '../../session/shell.hook.js'
-import { isOsPlaneAvailable } from '../user/user.store.js'
-
-export type SpaceResult = CurrentSpaceResult
-
-export function useSpace(ref: NodeTarget | null | undefined): SpaceResult {
-  const shell = useShell()
-  const idle = isIdleInput(ref) || !isOsPlaneAvailable(shell)
-  // The inline guard (not the stored `idle`) narrows `ref` to non-null below.
-  const key = idle ? null : targetKey(ref as NodeTarget)
-  const res = useAsyncResource<SpaceNode | null>(
-    idle ? null : () => shell.spaces.get(ref as NodeTarget),
-    null,
-    [shell, key],
-  )
-  return useMemo(
-    () => ({
-      space: idle ? null : res.data,
-      pending: idle ? false : res.pending,
-      error: idle ? undefined : res.error,
-      live: false,
-      seq: 0,
-      refetch: res.refetch,
-    }),
-    [idle, res],
-  )
-}
-
-function targetKey(input: NodeTarget): string {
-  return typeof input === 'string' ? `text:${input}` : `path:${Path.from(input as PathLike).raw}`
-}

package/src/application/spaces/spaces.hook.ts

@@ -1,118 +0,0 @@
-import type { PathLike } from '@astrale-os/sdk/graph/path'
-import type { NodeTarget, SpaceNode } from '@astrale-os/shell'
-
-import { Path } from '@astrale-os/sdk/graph/path'
-/**
- * useSpaces (API §12.2) — the spaces list, the selected space, and a `switch`
- * Action that repoints the `selected_space` edge. Reads the SAME per-Shell
- * current-space store as useCurrentSpace/useApps, so a switch re-themes every
- * consumer in the window at once — optimistically ahead of the round-trip (§1.6),
- * commit reconciles, failure rolls back. Reads are one-shot today (§12 flag).
- */
-import { useEffect, useMemo, useSyncExternalStore } from 'react'
-
-import type { Action } from '../../graph/action.js'
-import type { ReadState } from '../../graph/memory/read/envelope.js'
-
-import { useAction } from '../../graph/action.js'
-import { useAsyncResource } from '../../graph/async.js'
-import { useShell } from '../../session/shell.hook.js'
-import { isOsPlaneAvailable } from '../user/user.store.js'
-import { currentSpaceStore, idleSnapshot, noopSubscribe } from './current-space.store.js'
-
-const NO_SPACES: readonly SpaceNode[] = []
-
-export interface SpacesResult extends ReadState {
-  /** Spaces-dir children, live (one-shot today), the caller's readable set. */
-  readonly spaces: readonly SpaceNode[]
-  /** The `selected_space` target — optimistically ahead during a `switch`. */
-  readonly selected: SpaceNode | null
-  /** `user::switchSpace` with a manual optimistic overlay (§1.6). */
-  readonly switch: Action<[NodeTarget], void>
-}
-
-export function useSpaces(): SpacesResult {
-  const shell = useShell()
-  const available = isOsPlaneAvailable(shell)
-  const store = currentSpaceStore(shell)
-
-  const spacesRes = useAsyncResource<readonly SpaceNode[]>(
-    available ? () => shell.spaces.list() : null,
-    NO_SPACES,
-    [shell, available],
-  )
-  useEffect(() => {
-    if (available) store.ensure()
-  }, [store, available])
-  const selectedSnap = useSyncExternalStore(
-    available ? store.subscribe : noopSubscribe,
-    available ? store.getSnapshot : idleSnapshot,
-    available ? store.getSnapshot : idleSnapshot,
-  )
-
-  const spaces = spacesRes.data
-
-  const switchAction = useAction(async (ref: NodeTarget): Promise<void> => {
-    // Optimistic override on the SHARED store, so useCurrentSpace / useApps ahead
-    // of the round-trip too (§12.2). Only overlay a known target (a path ref that
-    // matches nothing in the list simply skips the preview).
-    const target = findSpace(spaces, ref)
-    if (target !== null) store.setOptimistic(target)
-    try {
-      await shell.user.switchSpace(ref)
-      await store.refresh() // reconcile confirmed truth BEFORE dropping the preview
-      store.clearOptimistic()
-    } catch (error) {
-      store.clearOptimistic() // rollback: reveal the confirmed (previous) space
-      throw error
-    }
-  })
-
-  return useMemo<SpacesResult>(
-    () => ({
-      spaces,
-      selected: selectedSnap.space,
-      switch: switchAction,
-      pending: spacesRes.pending || selectedSnap.pending,
-      error: spacesRes.error ?? selectedSnap.error,
-      live: false,
-      seq: 0,
-      refetch: async () => {
-        await Promise.all([spacesRes.refetch(), store.refresh()])
-      },
-    }),
-    [
-      spaces,
-      selectedSnap,
-      switchAction,
-      spacesRes.pending,
-      spacesRes.error,
-      spacesRes.refetch,
-      store,
-    ],
-  )
-}
-
-/** The space in `spaces` denoted by `ref`, or `null` (path refs don't match by id). */
-function findSpace(spaces: readonly SpaceNode[], ref: NodeTarget): SpaceNode | null {
-  const id = refIdOf(ref)
-  if (id === null) return null
-  return spaces.find((s) => s.id === id) ?? null
-}
-
-/** A bound-node-ish subject carries a graph id. */
-function hasId(x: unknown): x is { readonly id: string } {
-  return typeof x === 'object' && x !== null && 'id' in x
-}
-
-/** The graph id a subject denotes, or `null` when it is a path (no id to match). */
-function refIdOf(x: NodeTarget | { readonly id: string }): string | null {
-  if (hasId(x)) return x.id
-  if (typeof x === 'string' && !x.startsWith('@') && !x.startsWith('/')) return x
-  try {
-    const path = Path.from(x as PathLike)
-    return path.ast.anchor.kind === 'id' && path.ast.steps.length === 0 ? path.ast.anchor.id : null
-  } catch {
-    return null
-  }
-}