After tinking with some similar toy projects, I feel like iframes with a well-defined APi to use with postMessage() (and maybe a small library to provide frame-internal matching toolbars/controls) are definitely the way to go here, since they remove the need to tightly couple your "OS" with your "apps".