Enum FloatingSurfaceHostMessage 

pub enum FloatingSurfaceHostMessage {
    DeviceDisplayMoveResult {
        request: u64,
        result: Result<(), String>,
    },
    DeviceShellOperation {
        request: u64,
        operation: DeviceShellOperation,
    },
    CaptureProtectionApplied {
        generation: u64,
        protected: bool,
    },
    HostShellAllowed {
        allowed: bool,
    },
    DesktopBounds {
        bounds: [f64; 4],
    },
    PaintKeyframe,
    PaintStop,
    PrepareSurface {
        id: String,
        token: String,
        rect: [f64; 4],
        content_rect: [f64; 4],
        transfer_covered: bool,
        coordinate_offset: [f64; 2],
    },
    Adopted {
        id: String,
        rect: [f64; 4],
    },
    Suspended {
        id: String,
    },
    Reattach {
        id: String,
    },
    Closed {
        id: String,
    },
    Appearance {
        theme: Option<ThemeDocument>,
        network_status: Option<HostNetworkStatus>,
        workspace_hue: Option<f32>,
        your_colour: Option<String>,
    },
}

Shell → app lifecycle. The shell supplies one authoritative combined desktop coordinate space and explicitly acknowledges ownership changes; transports must not infer either from timing.

Variants

DeviceDisplayMoveResult

Admission/delivery result. The owner’s published topology confirms application.

Fields

request: u64

result: Result<(), String>

DeviceShellOperation

The authenticated device owner selected Terminal’s device-shell target. This requests its ordinary permission flow; it is not a grant.

Fields

request: u64

operation: DeviceShellOperation

CaptureProtectionApplied

Sent only after the compositor has installed the requested policy.

Fields

generation: u64

protected: bool

HostShellAllowed

The trusted desktop’s answer, after supervisor admission.

Fields

allowed: bool

DesktopBounds

Fields

bounds: [f64; 4]

PaintKeyframe

Someone started watching this app’s window: send its page as a paint stream, starting from a whole frame.

PaintStop

Nobody watches the window any more: stop capturing the page.

PrepareSurface

Authorises creation of one secondary toplevel. token is random and scoped to this authenticated connection; merely copying an app id can never gain overlay authority.

Fields

id: String

token: String

rect: [f64; 4]

content_rect: [f64; 4]

transfer_covered: bool

True when the shell has already installed a frozen, pixel-exact transfer frame for this surface. The app can hide its in-window copy immediately in that case; if capture failed it keeps drawing until the native surface acknowledges its first buffer.

coordinate_offset: [f64; 2]

App-local → desktop pointer-coordinate translation. Kept separate from clamped window geometry so a live drag can rebase without treating compositor clamping as pointer motion.

Adopted

Fields

id: String

rect: [f64; 4]

Suspended

The shell has hidden, but retained, the authenticated native surface. A later Present for the same connection/id resumes that exact surface instead of issuing a new capability or renderer.

Fields

id: String

Reattach

Fields

id: String

Closed

Fields

id: String

Appearance

Where and for whom the app’s window is shown (crate::theme::WindowAppearance): the temperature of the workspace holding it and the person’s colour. Sent when the app connects and again whenever either changes — a workspace switch, a new wallpaper, a window moved to another workspace, a colour chosen in Settings.

Fields

theme: Option<ThemeDocument>

The host’s configured palette; apps cannot read its settings file through their private sandbox configuration directory.

network_status: Option<HostNetworkStatus>

Absent on older hosts or launches without network access.

workspace_hue: Option<f32>

OKLCH degrees; absent while the workspace has no temperature.

your_colour: Option<String>

A presence hue by its stored name (PresenceHue::id).

Implementations

impl FloatingSurfaceHostMessage

pub fn appearance(appearance: &WindowAppearance) -> FloatingSurfaceHostMessage

The message that tells a window appearance.

pub fn appearance_with_theme( appearance: &WindowAppearance, theme: &Theme, ) -> FloatingSurfaceHostMessage

The host’s configured theme and the window’s workspace appearance.

pub fn configured_theme(&self) -> Option<Theme>

Validate the host’s authored palette before applying it.

pub fn window_appearance(&self) -> Option<WindowAppearance>

What an Self::Appearance message says, None for any other. A colour this build does not name, or a hue that is not a number, counts as unsaid.

Trait Implementations

impl Clone for FloatingSurfaceHostMessage

fn clone(&self) -> FloatingSurfaceHostMessage

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FloatingSurfaceHostMessage

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for FloatingSurfaceHostMessage

fn deserialize<__D>( __deserializer: __D, ) -> Result<FloatingSurfaceHostMessage, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for FloatingSurfaceHostMessage

fn eq(&self, other: &FloatingSurfaceHostMessage) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for FloatingSurfaceHostMessage

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FloatingSurfaceHostMessage