shell: assert get_shell_surface() != NULL as appropriate