@hanzo/ui 8.0.56 → 8.0.58

package/dist/backends/gui/switch.cjs

@@ -3,13 +3,53 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Switch = void 0;
 const jsx_runtime_1 = require("react/jsx-runtime");
-/** Switch — 36×20 track, 16px thumb, `touch()` to the 44px floor everywhere. */
+/**
+ * Switch — a 36×20 pill, 16px thumb, `touch()` to the 44px floor everywhere.
+ *
+ * `minHeight` is NOT redundant beside `height`, and omitting it was the bug.
+ * gui's own `size` variant returns `{ height, minHeight, width }` for the
+ * default `$true` size, and setting `height` here overrode only two of the
+ * three — min-height beats height, always — so the 29px floor survived and
+ * every switch in every app rendered 36×29 instead of 36×20. At that ratio the
+ * browser clamps `borderRadius: 1000` to 10px, so it was not even a pill: a
+ * rounded rectangle with a small dot adrift inside it.
+ *
+ * State is carried by COLOUR, not by the thumb's 14px of travel alone. gui's
+ * default checked treatment is `$backgroundActive`, which in this theme resolves
+ * to the same value the unchecked track already has — measured live, on and off
+ * were pixel-identical apart from that translation. A state expressed only as
+ * position is one a screenshot, a narrow column and a low-vision reader all fail
+ * to read. `activeStyle` is the hook gui honours for exactly this: it is pulled
+ * out of props before Tamagui can mistake it for the press pseudo-style, and it
+ * REPLACES `$backgroundActive` rather than layering over it.
+ *
+ * The white is spent on ON and nowhere else. A resting page is mostly switches
+ * that are off, and a near-white thumb on every one of them is a field of lights
+ * with no signal in it — which is what a full page of these actually looked
+ * like. Off is muted, on is filled, and the loudest treatment is the one that
+ * means something.
+ */
 const gui_1 = require("@hanzo/gui");
 const slot_1 = require("./slot.cjs");
 const gesture_1 = require("./gesture.cjs");
+const TRACK_W = 36;
 const TRACK_H = 20;
 const THUMB = 16;
-const Switch = (props) => ((0, jsx_runtime_1.jsx)(gui_1.Switch, { ...(0, slot_1.slot)('switch'), width: 36, height: TRACK_H, padding: 2, flexShrink: 0, 
+const Switch = ({ disabled, ...props }) => ((0, jsx_runtime_1.jsx)(gui_1.Switch, { ...(0, slot_1.slot)('switch'), width: TRACK_W, height: TRACK_H, minHeight: TRACK_H, padding: 2, flexShrink: 0, backgroundColor: "$color3", 
     // Without an explicit border the UA's 2px outset button border shows.
-    borderWidth: 1, borderColor: "$borderColor", ...(0, gesture_1.touch)(TRACK_H, 44, 'y'), ...props, children: (0, jsx_runtime_1.jsx)(gui_1.Switch.Thumb, { ...(0, slot_1.slot)('switch-thumb'), width: THUMB, height: THUMB }) }));
+    borderWidth: 1, borderColor: "$borderColor", activeStyle: { backgroundColor: '$color12', borderColor: '$color12' }, 
+    // Stated rather than left to a `disabledStyle` this backend uses nowhere
+    // else: a control that ignores its own disabled prop looks identical to a
+    // live one, and the page this was found on had a disabled switch sitting
+    // beside eight enabled ones with nothing to tell them apart.
+    disabled: disabled, opacity: disabled ? 0.5 : 1, cursor: disabled ? 'not-allowed' : 'pointer', ...(0, gesture_1.touch)(TRACK_H, 44, 'y'), ...props, children: (0, jsx_runtime_1.jsx)(gui_1.Switch.Thumb, { ...(0, slot_1.slot)('switch-thumb'), width: THUMB, height: THUMB, backgroundColor: "$color10", 
+        // `bg`, and it is the only one of the three spellings that is both typed
+        // and correct. The Thumb's activeStyle is typed as the SHORTHAND style set:
+        // `backgroundColor` paints but is not in that type; `background` is in it
+        // and compiles to a SEPARATE `_background-` class that races the base
+        // `_bg-` one on load order rather than replacing it; `bg` replaces it.
+        // Consumers build with ignoreBuildErrors, so the first would have shipped
+        // an error nobody sees and the second a colour that lands or does not
+        // depending on stylesheet order.
+        activeStyle: { bg: '$color1' } }) }));
 exports.Switch = Switch;

package/dist/backends/gui/switch.d.ts

@@ -1,7 +1,32 @@
-/** Switch — 36×20 track, 16px thumb, `touch()` to the 44px floor everywhere. */
+/**
+ * Switch — a 36×20 pill, 16px thumb, `touch()` to the 44px floor everywhere.
+ *
+ * `minHeight` is NOT redundant beside `height`, and omitting it was the bug.
+ * gui's own `size` variant returns `{ height, minHeight, width }` for the
+ * default `$true` size, and setting `height` here overrode only two of the
+ * three — min-height beats height, always — so the 29px floor survived and
+ * every switch in every app rendered 36×29 instead of 36×20. At that ratio the
+ * browser clamps `borderRadius: 1000` to 10px, so it was not even a pill: a
+ * rounded rectangle with a small dot adrift inside it.
+ *
+ * State is carried by COLOUR, not by the thumb's 14px of travel alone. gui's
+ * default checked treatment is `$backgroundActive`, which in this theme resolves
+ * to the same value the unchecked track already has — measured live, on and off
+ * were pixel-identical apart from that translation. A state expressed only as
+ * position is one a screenshot, a narrow column and a low-vision reader all fail
+ * to read. `activeStyle` is the hook gui honours for exactly this: it is pulled
+ * out of props before Tamagui can mistake it for the press pseudo-style, and it
+ * REPLACES `$backgroundActive` rather than layering over it.
+ *
+ * The white is spent on ON and nowhere else. A resting page is mostly switches
+ * that are off, and a near-white thumb on every one of them is a field of lights
+ * with no signal in it — which is what a full page of these actually looked
+ * like. Off is muted, on is filled, and the loudest treatment is the one that
+ * means something.
+ */
 import { Switch as GuiSwitch } from '@hanzo/gui';
 import type { ComponentProps } from 'react';
 export type SwitchProps = ComponentProps<typeof GuiSwitch>;
-declare const Switch: (props: SwitchProps) => import("react/jsx-runtime").JSX.Element;
+declare const Switch: ({ disabled, ...props }: SwitchProps) => import("react/jsx-runtime").JSX.Element;
 export { Switch };
 //# sourceMappingURL=switch.d.ts.map

package/dist/backends/gui/switch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"switch.d.ts","sourceRoot":"","sources":["../../../src/backends/gui/switch.tsx"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,OAAO,CAAA;AAO3C,MAAM,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,SAAS,CAAC,CAAA;AAE1D,QAAA,MAAM,MAAM,GAAI,OAAO,WAAW,4CAmBjC,CAAA;AAED,OAAO,EAAE,MAAM,EAAE,CAAA"}
+{"version":3,"file":"switch.d.ts","sourceRoot":"","sources":["../../../src/backends/gui/switch.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,OAAO,CAAA;AAQ3C,MAAM,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,SAAS,CAAC,CAAA;AAE1D,QAAA,MAAM,MAAM,GAAI,wBAAwB,WAAW,4CAuClD,CAAA;AAED,OAAO,EAAE,MAAM,EAAE,CAAA"}

package/dist/backends/gui/switch.js

@@ -1,13 +1,53 @@
 'use client';
 import { jsx as _jsx } from "react/jsx-runtime";
-/** Switch — 36×20 track, 16px thumb, `touch()` to the 44px floor everywhere. */
+/**
+ * Switch — a 36×20 pill, 16px thumb, `touch()` to the 44px floor everywhere.
+ *
+ * `minHeight` is NOT redundant beside `height`, and omitting it was the bug.
+ * gui's own `size` variant returns `{ height, minHeight, width }` for the
+ * default `$true` size, and setting `height` here overrode only two of the
+ * three — min-height beats height, always — so the 29px floor survived and
+ * every switch in every app rendered 36×29 instead of 36×20. At that ratio the
+ * browser clamps `borderRadius: 1000` to 10px, so it was not even a pill: a
+ * rounded rectangle with a small dot adrift inside it.
+ *
+ * State is carried by COLOUR, not by the thumb's 14px of travel alone. gui's
+ * default checked treatment is `$backgroundActive`, which in this theme resolves
+ * to the same value the unchecked track already has — measured live, on and off
+ * were pixel-identical apart from that translation. A state expressed only as
+ * position is one a screenshot, a narrow column and a low-vision reader all fail
+ * to read. `activeStyle` is the hook gui honours for exactly this: it is pulled
+ * out of props before Tamagui can mistake it for the press pseudo-style, and it
+ * REPLACES `$backgroundActive` rather than layering over it.
+ *
+ * The white is spent on ON and nowhere else. A resting page is mostly switches
+ * that are off, and a near-white thumb on every one of them is a field of lights
+ * with no signal in it — which is what a full page of these actually looked
+ * like. Off is muted, on is filled, and the loudest treatment is the one that
+ * means something.
+ */
 import { Switch as GuiSwitch } from '@hanzo/gui';
 import { slot } from './slot.js';
 import { touch } from './gesture.js';
+const TRACK_W = 36;
 const TRACK_H = 20;
 const THUMB = 16;
-const Switch = (props) => (_jsx(GuiSwitch, { ...slot('switch'), width: 36, height: TRACK_H, padding: 2, flexShrink: 0, 
+const Switch = ({ disabled, ...props }) => (_jsx(GuiSwitch, { ...slot('switch'), width: TRACK_W, height: TRACK_H, minHeight: TRACK_H, padding: 2, flexShrink: 0, backgroundColor: "$color3", 
     // Without an explicit border the UA's 2px outset button border shows.
-    borderWidth: 1, borderColor: "$borderColor", ...touch(TRACK_H, 44, 'y'), ...props, children: _jsx(GuiSwitch.Thumb, { ...slot('switch-thumb'), width: THUMB, height: THUMB }) }));
+    borderWidth: 1, borderColor: "$borderColor", activeStyle: { backgroundColor: '$color12', borderColor: '$color12' }, 
+    // Stated rather than left to a `disabledStyle` this backend uses nowhere
+    // else: a control that ignores its own disabled prop looks identical to a
+    // live one, and the page this was found on had a disabled switch sitting
+    // beside eight enabled ones with nothing to tell them apart.
+    disabled: disabled, opacity: disabled ? 0.5 : 1, cursor: disabled ? 'not-allowed' : 'pointer', ...touch(TRACK_H, 44, 'y'), ...props, children: _jsx(GuiSwitch.Thumb, { ...slot('switch-thumb'), width: THUMB, height: THUMB, backgroundColor: "$color10", 
+        // `bg`, and it is the only one of the three spellings that is both typed
+        // and correct. The Thumb's activeStyle is typed as the SHORTHAND style set:
+        // `backgroundColor` paints but is not in that type; `background` is in it
+        // and compiles to a SEPARATE `_background-` class that races the base
+        // `_bg-` one on load order rather than replacing it; `bg` replaces it.
+        // Consumers build with ignoreBuildErrors, so the first would have shipped
+        // an error nobody sees and the second a colour that lands or does not
+        // depending on stylesheet order.
+        activeStyle: { bg: '$color1' } }) }));
 export { Switch };
 //# sourceMappingURL=switch.js.map

package/dist/backends/gui/switch.js.map

@@ -1 +1 @@
-{"version":3,"file":"switch.js","sourceRoot":"","sources":["../../../src/backends/gui/switch.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ,gFAAgF;AAChF,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAEjC,MAAM,OAAO,GAAG,EAAE,CAAA;AAClB,MAAM,KAAK,GAAG,EAAE,CAAA;AAIhB,MAAM,MAAM,GAAG,CAAC,KAAkB,EAAE,EAAE,CAAC,CACrC,KAAC,SAAS,OACJ,IAAI,CAAC,QAAQ,CAAC,EAClB,KAAK,EAAE,EAAE,EACT,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,CAAC,EACV,UAAU,EAAE,CAAC;IACb,sEAAsE;IACtE,WAAW,EAAE,CAAC,EACd,WAAW,EAAC,cAAc,KACtB,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,KACvB,KAAK,YAET,KAAC,SAAS,CAAC,KAAK,OACV,IAAI,CAAC,cAAc,CAAC,EACxB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,KAAK,GACb,GACQ,CACb,CAAA;AAED,OAAO,EAAE,MAAM,EAAE,CAAA"}
+{"version":3,"file":"switch.js","sourceRoot":"","sources":["../../../src/backends/gui/switch.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAEjC,MAAM,OAAO,GAAG,EAAE,CAAA;AAClB,MAAM,OAAO,GAAG,EAAE,CAAA;AAClB,MAAM,KAAK,GAAG,EAAE,CAAA;AAIhB,MAAM,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAe,EAAE,EAAE,CAAC,CACtD,KAAC,SAAS,OACJ,IAAI,CAAC,QAAQ,CAAC,EAClB,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,CAAC,EACV,UAAU,EAAE,CAAC,EACb,eAAe,EAAC,SAAS;IACzB,sEAAsE;IACtE,WAAW,EAAE,CAAC,EACd,WAAW,EAAC,cAAc,EAC1B,WAAW,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE;IACrE,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,6DAA6D;IAC7D,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAC3B,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,KACxC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,KACvB,KAAK,YAET,KAAC,SAAS,CAAC,KAAK,OACV,IAAI,CAAC,cAAc,CAAC,EACxB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,KAAK,EACb,eAAe,EAAC,UAAU;QAC1B,yEAAyE;QACzE,4EAA4E;QAC5E,0EAA0E;QAC1E,sEAAsE;QACtE,uEAAuE;QACvE,0EAA0E;QAC1E,sEAAsE;QACtE,iCAAiC;QACjC,WAAW,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,GAC9B,GACQ,CACb,CAAA;AAED,OAAO,EAAE,MAAM,EAAE,CAAA"}

package/dist/product/Palette.cjs

@@ -0,0 +1,65 @@
+'use client';"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Palette = Palette;
+const jsx_runtime_1 = require("react/jsx-runtime");
+/**
+ * Palette — the ⌘K bar, once, for every Hanzo surface.
+ *
+ * hanzo.app, console and chat each grew their own: three lists of what can be
+ * run, all hand-written, already disagreeing with each other and with the API.
+ * This is the component half of ending that. The other half is `GET /v1/commands`,
+ * which projects every operation the cloud answers out of the one route table —
+ * so a surface passes that list in and stops maintaining one.
+ *
+ * It is composed from `CommandDialog`, not from a hand-rolled Dialog around a
+ * bare `Command`. That distinction is the whole history: the stock dialog used to
+ * render `<Command>` with none of the palette's props forwarded, so a host could
+ * not read the highlighted row and therefore could not draw a preview beside the
+ * list — and hanzo.app rebuilt the dialog by hand for exactly that reason. The
+ * forwarding landed upstream in this package and named collapsing the hand-rolled
+ * palettes as the follow-up. This is that follow-up, so the hand-rolled shape does
+ * not come back here under a new name.
+ *
+ * Props in, callbacks out, like everything else in this layer: no transport, no
+ * store, no routing. It does not fetch the commands, does not run them, and does
+ * not know what a project or an org is. `onRun` receives the Op and the surface
+ * decides whether that means an HTTP call or a function in the page — which is
+ * why a route command and a local command are one type (see `match.ts`).
+ *
+ * The right-hand slot is `children`, and it is why a shared bar costs no surface
+ * its personality: hanzo.app keeps its live project preview and console keeps its
+ * `>` AI mode by passing them, not by forking this.
+ *
+ * Filtering is `survivors`. The safe-methods-browse rule, the per-group cap and
+ * the empty-query behaviour all live in `match.ts` as pure functions, so
+ * `shouldFilter` is off and the Command primitive is left holding the cursor and
+ * the view — which is also what makes the rule testable without a DOM.
+ */
+const react_1 = require("react");
+const gui_1 = require("@hanzo/gui");
+const gui_2 = require("../backends/gui/index.cjs");
+const match_1 = require("./match.cjs");
+function Palette({ open, onOpenChange, ops, onRun, active, onActive, search: controlled, onSearch, placeholder = "Search commands…", empty = "No results found.", limit, children, footer, height = 320, title = "Search commands", }) {
+    const [own, setOwn] = (0, react_1.useState)("");
+    const search = controlled ?? own;
+    const setSearch = (s) => {
+        setOwn(s);
+        onSearch?.(s);
+    };
+    const groups = (0, react_1.useMemo)(() => (0, match_1.survivors)(ops, search, limit), [ops, search, limit]);
+    return ((0, jsx_runtime_1.jsxs)(gui_2.CommandDialog, { open: open, onOpenChange: onOpenChange, title: title, description: placeholder, value: active, onValueChange: onActive, shouldFilter: false, children: [(0, jsx_runtime_1.jsx)(gui_2.CommandInput, { value: search, onValueChange: setSearch, placeholder: placeholder, color: "$color", placeholderTextColor: "$color11" }), (0, jsx_runtime_1.jsxs)(gui_1.XStack, { minH: height, children: [(0, jsx_runtime_1.jsxs)(gui_2.CommandList, { maxH: height, width: children ? "50%" : "100%", borderRightWidth: children ? 1 : 0, borderColor: "$borderColor", py: "$1", children: [groups.length === 0 && ((0, jsx_runtime_1.jsx)(gui_2.CommandEmpty, { children: (0, jsx_runtime_1.jsx)(gui_1.SizableText, { color: "$color11", children: empty }) })), groups.map(([group, items]) => ((0, jsx_runtime_1.jsx)(gui_2.CommandGroup, { heading: group, children: items.map((op) => ((0, jsx_runtime_1.jsxs)(gui_2.CommandItem, { value: op.id, onSelect: () => onRun(op), gap: "$2", children: [op.icon, (0, jsx_runtime_1.jsx)(gui_1.SizableText, { numberOfLines: 1, children: op.label }), op.hint ? ((0, jsx_runtime_1.jsx)(gui_1.SizableText, { numberOfLines: 1, fontSize: "$1", color: "$color11", children: op.hint })) : null, (0, jsx_runtime_1.jsx)(Method, { of: op }), op.end] }, op.id))) }, group)))] }), children ? (0, jsx_runtime_1.jsx)(gui_1.YStack, { width: "50%", children: children }) : null] }), footer ? ((0, jsx_runtime_1.jsx)(gui_1.XStack, { items: "center", gap: "$4", borderTopWidth: 1, borderColor: "$borderColor", px: "$3", py: "$2", children: footer })) : null] }));
+}
+/**
+ * The method, at the end of the row, for route commands only.
+ *
+ * It is the rule made visible rather than decoration: GET is what you reached by
+ * browsing, anything else is what you reached by naming it exactly, and somebody
+ * about to press ↵ on `platform apps-rollback` should be able to see which
+ * without reading the docs. A local command has no method and gets no tag.
+ */
+function Method({ of }) {
+    if (of.method === undefined)
+        return null;
+    return ((0, jsx_runtime_1.jsx)(gui_1.SizableText, { ml: "auto", fontFamily: "$mono", fontSize: 10, letterSpacing: 0.4, color: of.method === match_1.SAFE ? "$color11" : "$color", children: of.method }));
+}

package/dist/product/Palette.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Palette — the ⌘K bar, once, for every Hanzo surface.
+ *
+ * hanzo.app, console and chat each grew their own: three lists of what can be
+ * run, all hand-written, already disagreeing with each other and with the API.
+ * This is the component half of ending that. The other half is `GET /v1/commands`,
+ * which projects every operation the cloud answers out of the one route table —
+ * so a surface passes that list in and stops maintaining one.
+ *
+ * It is composed from `CommandDialog`, not from a hand-rolled Dialog around a
+ * bare `Command`. That distinction is the whole history: the stock dialog used to
+ * render `<Command>` with none of the palette's props forwarded, so a host could
+ * not read the highlighted row and therefore could not draw a preview beside the
+ * list — and hanzo.app rebuilt the dialog by hand for exactly that reason. The
+ * forwarding landed upstream in this package and named collapsing the hand-rolled
+ * palettes as the follow-up. This is that follow-up, so the hand-rolled shape does
+ * not come back here under a new name.
+ *
+ * Props in, callbacks out, like everything else in this layer: no transport, no
+ * store, no routing. It does not fetch the commands, does not run them, and does
+ * not know what a project or an org is. `onRun` receives the Op and the surface
+ * decides whether that means an HTTP call or a function in the page — which is
+ * why a route command and a local command are one type (see `match.ts`).
+ *
+ * The right-hand slot is `children`, and it is why a shared bar costs no surface
+ * its personality: hanzo.app keeps its live project preview and console keeps its
+ * `>` AI mode by passing them, not by forking this.
+ *
+ * Filtering is `survivors`. The safe-methods-browse rule, the per-group cap and
+ * the empty-query behaviour all live in `match.ts` as pure functions, so
+ * `shouldFilter` is off and the Command primitive is left holding the cursor and
+ * the view — which is also what makes the rule testable without a DOM.
+ */
+import { type ReactNode } from "react";
+import { type Op } from "./match.js";
+export type PaletteProps = {
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    /** Everything runnable, local commands and route commands alike. */
+    ops: Op[];
+    /** Run one. The surface decides what running it means. */
+    onRun: (op: Op) => void;
+    /**
+     * The highlighted row's id (controlled). A surface drawing a preview beside the
+     * list needs to know what is highlighted.
+     */
+    active?: string;
+    onActive?: (id: string) => void;
+    /** The typed query. Uncontrolled unless a surface wants to read it. */
+    search?: string;
+    onSearch?: (search: string) => void;
+    placeholder?: string;
+    /** Shown when nothing survives the search. */
+    empty?: ReactNode;
+    /** Rows per group. See `survivors` — a render budget, not a preference. */
+    limit?: number;
+    /** The right-hand panel. Absent, the list takes the full width. */
+    children?: ReactNode;
+    /** The bar along the bottom — key hints, usually. */
+    footer?: ReactNode;
+    /** How tall the list is. It scrolls inside this. */
+    height?: number;
+    /** The dialog's accessible name. */
+    title?: string;
+};
+export declare function Palette({ open, onOpenChange, ops, onRun, active, onActive, search: controlled, onSearch, placeholder, empty, limit, children, footer, height, title, }: PaletteProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=Palette.d.ts.map

package/dist/product/Palette.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Palette.d.ts","sourceRoot":"","sources":["../../src/product/Palette.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,KAAK,SAAS,EAAqB,MAAM,OAAO,CAAA;AAWzD,OAAO,EAAmB,KAAK,EAAE,EAAE,MAAM,SAAS,CAAA;AAElD,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,OAAO,CAAA;IACb,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAA;IACrC,oEAAoE;IACpE,GAAG,EAAE,EAAE,EAAE,CAAA;IACT,0DAA0D;IAC1D,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,IAAI,CAAA;IACvB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mEAAmE;IACnE,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,qDAAqD;IACrD,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,wBAAgB,OAAO,CAAC,EACtB,IAAI,EACJ,YAAY,EACZ,GAAG,EACH,KAAK,EACL,MAAM,EACN,QAAQ,EACR,MAAM,EAAE,UAAU,EAClB,QAAQ,EACR,WAAgC,EAChC,KAA2B,EAC3B,KAAK,EACL,QAAQ,EACR,MAAM,EACN,MAAY,EACZ,KAAyB,GAC1B,EAAE,YAAY,2CA0Ed"}

package/dist/product/Palette.js

@@ -0,0 +1,63 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Palette — the ⌘K bar, once, for every Hanzo surface.
+ *
+ * hanzo.app, console and chat each grew their own: three lists of what can be
+ * run, all hand-written, already disagreeing with each other and with the API.
+ * This is the component half of ending that. The other half is `GET /v1/commands`,
+ * which projects every operation the cloud answers out of the one route table —
+ * so a surface passes that list in and stops maintaining one.
+ *
+ * It is composed from `CommandDialog`, not from a hand-rolled Dialog around a
+ * bare `Command`. That distinction is the whole history: the stock dialog used to
+ * render `<Command>` with none of the palette's props forwarded, so a host could
+ * not read the highlighted row and therefore could not draw a preview beside the
+ * list — and hanzo.app rebuilt the dialog by hand for exactly that reason. The
+ * forwarding landed upstream in this package and named collapsing the hand-rolled
+ * palettes as the follow-up. This is that follow-up, so the hand-rolled shape does
+ * not come back here under a new name.
+ *
+ * Props in, callbacks out, like everything else in this layer: no transport, no
+ * store, no routing. It does not fetch the commands, does not run them, and does
+ * not know what a project or an org is. `onRun` receives the Op and the surface
+ * decides whether that means an HTTP call or a function in the page — which is
+ * why a route command and a local command are one type (see `match.ts`).
+ *
+ * The right-hand slot is `children`, and it is why a shared bar costs no surface
+ * its personality: hanzo.app keeps its live project preview and console keeps its
+ * `>` AI mode by passing them, not by forking this.
+ *
+ * Filtering is `survivors`. The safe-methods-browse rule, the per-group cap and
+ * the empty-query behaviour all live in `match.ts` as pure functions, so
+ * `shouldFilter` is off and the Command primitive is left holding the cursor and
+ * the view — which is also what makes the rule testable without a DOM.
+ */
+import { useMemo, useState } from "react";
+import { SizableText, XStack, YStack } from "@hanzo/gui";
+import { CommandDialog, CommandEmpty, CommandGroup, CommandInput, CommandItem, CommandList, } from "../backends/gui/index.js";
+import { SAFE, survivors } from "./match.js";
+export function Palette({ open, onOpenChange, ops, onRun, active, onActive, search: controlled, onSearch, placeholder = "Search commands…", empty = "No results found.", limit, children, footer, height = 320, title = "Search commands", }) {
+    const [own, setOwn] = useState("");
+    const search = controlled ?? own;
+    const setSearch = (s) => {
+        setOwn(s);
+        onSearch?.(s);
+    };
+    const groups = useMemo(() => survivors(ops, search, limit), [ops, search, limit]);
+    return (_jsxs(CommandDialog, { open: open, onOpenChange: onOpenChange, title: title, description: placeholder, value: active, onValueChange: onActive, shouldFilter: false, children: [_jsx(CommandInput, { value: search, onValueChange: setSearch, placeholder: placeholder, color: "$color", placeholderTextColor: "$color11" }), _jsxs(XStack, { minH: height, children: [_jsxs(CommandList, { maxH: height, width: children ? "50%" : "100%", borderRightWidth: children ? 1 : 0, borderColor: "$borderColor", py: "$1", children: [groups.length === 0 && (_jsx(CommandEmpty, { children: _jsx(SizableText, { color: "$color11", children: empty }) })), groups.map(([group, items]) => (_jsx(CommandGroup, { heading: group, children: items.map((op) => (_jsxs(CommandItem, { value: op.id, onSelect: () => onRun(op), gap: "$2", children: [op.icon, _jsx(SizableText, { numberOfLines: 1, children: op.label }), op.hint ? (_jsx(SizableText, { numberOfLines: 1, fontSize: "$1", color: "$color11", children: op.hint })) : null, _jsx(Method, { of: op }), op.end] }, op.id))) }, group)))] }), children ? _jsx(YStack, { width: "50%", children: children }) : null] }), footer ? (_jsx(XStack, { items: "center", gap: "$4", borderTopWidth: 1, borderColor: "$borderColor", px: "$3", py: "$2", children: footer })) : null] }));
+}
+/**
+ * The method, at the end of the row, for route commands only.
+ *
+ * It is the rule made visible rather than decoration: GET is what you reached by
+ * browsing, anything else is what you reached by naming it exactly, and somebody
+ * about to press ↵ on `platform apps-rollback` should be able to see which
+ * without reading the docs. A local command has no method and gets no tag.
+ */
+function Method({ of }) {
+    if (of.method === undefined)
+        return null;
+    return (_jsx(SizableText, { ml: "auto", fontFamily: "$mono", fontSize: 10, letterSpacing: 0.4, color: of.method === SAFE ? "$color11" : "$color", children: of.method }));
+}
+//# sourceMappingURL=Palette.js.map

package/dist/product/Palette.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Palette.js","sourceRoot":"","sources":["../../src/product/Palette.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAkB,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAExD,OAAO,EACL,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAW,MAAM,SAAS,CAAA;AAiClD,MAAM,UAAU,OAAO,CAAC,EACtB,IAAI,EACJ,YAAY,EACZ,GAAG,EACH,KAAK,EACL,MAAM,EACN,QAAQ,EACR,MAAM,EAAE,UAAU,EAClB,QAAQ,EACR,WAAW,GAAG,kBAAkB,EAChC,KAAK,GAAG,mBAAmB,EAC3B,KAAK,EACL,QAAQ,EACR,MAAM,EACN,MAAM,GAAG,GAAG,EACZ,KAAK,GAAG,iBAAiB,GACZ;IACb,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,UAAU,IAAI,GAAG,CAAA;IAChC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE;QAC9B,MAAM,CAAC,CAAC,CAAC,CAAA;QACT,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;IACf,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;IAEjF,OAAO,CACL,MAAC,aAAa,IACZ,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,YAAY,EAC1B,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,QAAQ,EACvB,YAAY,EAAE,KAAK,aAEnB,KAAC,YAAY,IACX,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,SAAS,EACxB,WAAW,EAAE,WAAW,EACxB,KAAK,EAAC,QAAQ,EACd,oBAAoB,EAAC,UAAU,GAC/B,EACF,MAAC,MAAM,IAAC,IAAI,EAAE,MAAM,aAClB,MAAC,WAAW,IACV,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAChC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAClC,WAAW,EAAC,cAAc,EAC1B,EAAE,EAAC,IAAI,aAEN,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CACtB,KAAC,YAAY,cACX,KAAC,WAAW,IAAC,KAAK,EAAC,UAAU,YAAE,KAAK,GAAe,GACtC,CAChB,EACA,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAC9B,KAAC,YAAY,IAAa,OAAO,EAAE,KAAK,YACrC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CACjB,MAAC,WAAW,IAAa,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,EAAC,IAAI,aACvE,EAAE,CAAC,IAAI,EACR,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,YAAG,EAAE,CAAC,KAAK,GAAe,EACtD,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CACT,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAC,IAAI,EAAC,KAAK,EAAC,UAAU,YAC1D,EAAE,CAAC,IAAI,GACI,CACf,CAAC,CAAC,CAAC,IAAI,EACR,KAAC,MAAM,IAAC,EAAE,EAAE,EAAE,GAAI,EACjB,EAAE,CAAC,GAAG,KATS,EAAE,CAAC,EAAE,CAUT,CACf,CAAC,IAbe,KAAK,CAcT,CAChB,CAAC,IACU,EACb,QAAQ,CAAC,CAAC,CAAC,KAAC,MAAM,IAAC,KAAK,EAAC,KAAK,YAAE,QAAQ,GAAU,CAAC,CAAC,CAAC,IAAI,IACnD,EACR,MAAM,CAAC,CAAC,CAAC,CACR,KAAC,MAAM,IACL,KAAK,EAAC,QAAQ,EACd,GAAG,EAAC,IAAI,EACR,cAAc,EAAE,CAAC,EACjB,WAAW,EAAC,cAAc,EAC1B,EAAE,EAAC,IAAI,EACP,EAAE,EAAC,IAAI,YAEN,MAAM,GACA,CACV,CAAC,CAAC,CAAC,IAAI,IACM,CACjB,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,EAAE,EAAE,EAAc;IAChC,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACxC,OAAO,CACL,KAAC,WAAW,IACV,EAAE,EAAC,MAAM,EACT,UAAU,EAAC,OAAO,EAClB,QAAQ,EAAE,EAAE,EACZ,aAAa,EAAE,GAAG,EAClB,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,YAEhD,EAAE,CAAC,MAAM,GACE,CACf,CAAA;AACH,CAAC"}

package/dist/product/index.cjs

@@ -111,6 +111,13 @@ __exportStar(require("./FadeIn.cjs"), exports);
 __exportStar(require("./Field.cjs"), exports);
 __exportStar(require("./HanzoMark.cjs"), exports);
 __exportStar(require("./PageHeader.cjs"), exports);
+// Palette — the ONE ⌘K bar, plus its opener. The list it renders is not written
+// down anywhere: cloud publishes `GET /v1/commands`, the fifth projection of the
+// one route table, and a surface passes it in. `match.ts` holds the matching
+// rule (safe methods browse, unsafe methods must be named) as pure functions.
+__exportStar(require("./Palette.cjs"), exports);
+__exportStar(require("./match.cjs"), exports);
+__exportStar(require("./useCommandK.cjs"), exports);
 __exportStar(require("./PrimaryButton.cjs"), exports);
 __exportStar(require("./ProductIcon.cjs"), exports);
 __exportStar(require("./ProviderLogo.cjs"), exports);

package/dist/product/index.d.ts

@@ -31,6 +31,9 @@ export * from './FadeIn.js';
 export * from './Field.js';
 export * from './HanzoMark.js';
 export * from './PageHeader.js';
+export * from './Palette.js';
+export * from './match.js';
+export * from './useCommandK.js';
 export * from './PrimaryButton.js';
 export * from './ProductIcon.js';
 export * from './ProviderLogo.js';

package/dist/product/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAaA,cAAc,UAAU,CAAA;AAKxB,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAGjB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAA;AAK/D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AASjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAKvB,cAAc,QAAQ,CAAA;AAKtB,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAK5B,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAOzB,cAAc,cAAc,CAAA;AAK5B,cAAc,YAAY,CAAA;AAO1B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAI7B,cAAc,cAAc,CAAA;AAG5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AASvB,cAAc,UAAU,CAAA;AAKxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAaA,cAAc,UAAU,CAAA;AAKxB,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAGjB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAA;AAK/D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AASjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAKvB,cAAc,QAAQ,CAAA;AAKtB,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAK5B,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAOzB,cAAc,cAAc,CAAA;AAK5B,cAAc,YAAY,CAAA;AAO1B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAI7B,cAAc,cAAc,CAAA;AAG5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAM5B,cAAc,WAAW,CAAA;AACzB,cAAc,SAAS,CAAA;AACvB,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AASvB,cAAc,UAAU,CAAA;AAKxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAA"}

package/dist/product/index.js

@@ -82,6 +82,13 @@ export * from './FadeIn.js';
 export * from './Field.js';
 export * from './HanzoMark.js';
 export * from './PageHeader.js';
+// Palette — the ONE ⌘K bar, plus its opener. The list it renders is not written
+// down anywhere: cloud publishes `GET /v1/commands`, the fifth projection of the
+// one route table, and a surface passes it in. `match.ts` holds the matching
+// rule (safe methods browse, unsafe methods must be named) as pure functions.
+export * from './Palette.js';
+export * from './match.js';
+export * from './useCommandK.js';
 export * from './PrimaryButton.js';
 export * from './ProductIcon.js';
 export * from './ProviderLogo.js';

package/dist/product/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,wEAAwE;AACxE,EAAE;AACF,kFAAkF;AAClF,6EAA6E;AAE7E,kFAAkF;AAClF,gEAAgE;AAChE,cAAc,UAAU,CAAA;AAExB,2EAA2E;AAC3E,+EAA+E;AAC/E,4CAA4C;AAC5C,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAEjB,6EAA6E;AAC7E,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,SAAS,CAAA;AAE/D,+EAA+E;AAC/E,8EAA8E;AAC9E,qCAAqC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AAEjC,gFAAgF;AAChF,6EAA6E;AAC7E,mFAAmF;AACnF,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,8DAA8D;AAC9D,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AAEtB,iFAAiF;AACjF,2EAA2E;AAC3E,8EAA8E;AAC9E,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAE5B,6EAA6E;AAC7E,yEAAyE;AACzE,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAEzB,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,mDAAmD;AACnD,cAAc,cAAc,CAAA;AAE5B,gFAAgF;AAChF,iFAAiF;AACjF,2EAA2E;AAC3E,cAAc,YAAY,CAAA;AAE1B,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,kFAAkF;AAClF,oBAAoB;AACpB,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAE7B,8EAA8E;AAC9E,sBAAsB;AACtB,cAAc,cAAc,CAAA;AAE5B,mEAAmE;AACnE,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,uEAAuE;AAEvE,iFAAiF;AACjF,kFAAkF;AAClF,kEAAkE;AAClE,cAAc,UAAU,CAAA;AAExB,sEAAsE;AACtE,+EAA+E;AAC/E,8EAA8E;AAC9E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAgB,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,wEAAwE;AACxE,EAAE;AACF,kFAAkF;AAClF,6EAA6E;AAE7E,kFAAkF;AAClF,gEAAgE;AAChE,cAAc,UAAU,CAAA;AAExB,2EAA2E;AAC3E,+EAA+E;AAC/E,4CAA4C;AAC5C,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAEjB,6EAA6E;AAC7E,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,SAAS,CAAA;AAE/D,+EAA+E;AAC/E,8EAA8E;AAC9E,qCAAqC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AAEjC,gFAAgF;AAChF,6EAA6E;AAC7E,mFAAmF;AACnF,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,8DAA8D;AAC9D,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AAEtB,iFAAiF;AACjF,2EAA2E;AAC3E,8EAA8E;AAC9E,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAE5B,6EAA6E;AAC7E,yEAAyE;AACzE,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAEzB,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,mDAAmD;AACnD,cAAc,cAAc,CAAA;AAE5B,gFAAgF;AAChF,iFAAiF;AACjF,2EAA2E;AAC3E,cAAc,YAAY,CAAA;AAE1B,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,kFAAkF;AAClF,oBAAoB;AACpB,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAE7B,8EAA8E;AAC9E,sBAAsB;AACtB,cAAc,cAAc,CAAA;AAE5B,mEAAmE;AACnE,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAE5B,gFAAgF;AAChF,iFAAiF;AACjF,6EAA6E;AAC7E,8EAA8E;AAC9E,cAAc,WAAW,CAAA;AACzB,cAAc,SAAS,CAAA;AACvB,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,uEAAuE;AAEvE,iFAAiF;AACjF,kFAAkF;AAClF,kEAAkE;AAClE,cAAc,UAAU,CAAA;AAExB,sEAAsE;AACtE,+EAA+E;AAC/E,8EAA8E;AAC9E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAgB,MAAM,aAAa,CAAA"}

package/dist/product/match.cjs

@@ -0,0 +1,76 @@
+'use client';"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.survivors = exports.match = exports.SAFE = void 0;
+const command_logic_1 = require("../backends/gui/command.logic.cjs");
+/** The one method that is safe to stumble onto: no side effect, idempotent. */
+exports.SAFE = 'GET';
+/**
+ * Whether `op` survives `search`, and how well. `0` hides it.
+ *
+ * # Safe methods browse; unsafe methods must be named
+ *
+ * Typing "delete" into a bar holding 2,323 operations offers four dozen
+ * destructive fleet operations to somebody who wanted to delete a project. The
+ * rule that fixes it needs no second list and no curation, because the method is
+ * already in the registry and already means exactly this:
+ *
+ *   - GET matches fuzzily. It is safe and idempotent; browsing costs nothing.
+ *   - every other method needs an exact PREFIX of `group label` — the same
+ *     "service operation" a CLI would type. You cannot stumble onto
+ *     `platform apps-rollback`; you have to name it.
+ *
+ * One rule, over data already present, mapping onto the semantics the methods
+ * already carry.
+ *
+ * # An empty search hides every route, and that is not a shortcut
+ *
+ * With no query a fuzzy matcher matches everything, and everything is 2,323 rows
+ * the moment the dialog opens — which is not a list, it is a stalled browser and
+ * a scroll bar nobody can use. So the Run group is a SEARCH, not a browse: it is
+ * empty until you type, and what remains on open is the surface's own handful of
+ * local commands, which is what a person opening ⌘K with no query wants anyway.
+ *
+ * A local command has no method and is therefore always reachable — it is one of
+ * a few, declared by the surface, and there is nothing to protect anyone from.
+ */
+const match = (op, search) => {
+    const q = search.trim().toLowerCase();
+    const route = op.method !== undefined;
+    if (!q)
+        return route ? 0 : 1;
+    const named = `${op.group} ${op.label}`.toLowerCase();
+    if (route && op.method !== exports.SAFE)
+        return named.startsWith(q) ? 1 : 0;
+    return (0, command_logic_1.score)(named, q, op.hint ? [op.hint] : undefined);
+};
+exports.match = match;
+/**
+ * The ops that survive `search`, grouped for rendering: headings in the order the
+ * caller listed them, rows ranked within each, empty groups dropped.
+ *
+ * `limit` caps each group. A GET search for "list" still matches hundreds, and a
+ * palette that renders hundreds is the same stalled browser the empty query would
+ * be — the cap is what keeps one keystroke's cost bounded whatever was typed.
+ */
+const survivors = (ops, search, limit = 50) => {
+    const groups = new Map();
+    for (const op of ops) {
+        const rank = (0, exports.match)(op, search);
+        if (rank <= 0)
+            continue;
+        const got = groups.get(op.group);
+        if (got)
+            got.push([op, rank]);
+        else
+            groups.set(op.group, [[op, rank]]);
+    }
+    const out = [];
+    for (const [group, ranked] of groups) {
+        // Sort by rank, ties keeping the caller's order — a surface that ordered its
+        // projects by recency must not have that undone by a scoring tie.
+        ranked.sort((a, b) => b[1] - a[1]);
+        out.push([group, ranked.slice(0, limit).map(([op]) => op)]);
+    }
+    return out;
+};
+exports.survivors = survivors;

package/dist/product/match.d.ts

@@ -0,0 +1,78 @@
+/**
+ * What the ⌘K bar shows for what you typed, as one pure function.
+ *
+ * The bar's list is not hand-written any more. hanzo.app's cloud publishes
+ * `GET /v1/commands` — every operation the API answers, projected from the same
+ * route table the OpenAPI document, the MCP tools and the `hanzo` CLI come from —
+ * so a surface hands the whole list in and this decides what survives a search.
+ *
+ * That list is 2,323 operations, and that number is what makes the rule below
+ * more than a preference.
+ */
+import type { ReactNode } from 'react';
+/**
+ * One runnable thing in the bar.
+ *
+ * A command that names a route and a command that runs in the page are the SAME
+ * type here; only the surface's `onRun` tells them apart. `method` is what says
+ * which — it is present exactly when the command is an HTTP operation, and it is
+ * the only field the matching rule reads.
+ */
+export interface Op {
+    /** Stable identity. The registry's operationId, or a surface-local name. */
+    id: string;
+    /** The heading it files under — a service ("projects"), or a surface's own. */
+    group: string;
+    /** What it is called: the operation token ("deployments-list"), or a phrase. */
+    label: string;
+    /** One line of help. The operation's summary, when it has one. */
+    hint?: string;
+    /** The HTTP method, when this names a route. Absent means it runs in the page. */
+    method?: string;
+    /** Drawn at the start of the row. */
+    icon?: ReactNode;
+    /** Drawn at the end of the row — a status dot, a shortcut. */
+    end?: ReactNode;
+}
+/** The one method that is safe to stumble onto: no side effect, idempotent. */
+export declare const SAFE = "GET";
+/**
+ * Whether `op` survives `search`, and how well. `0` hides it.
+ *
+ * # Safe methods browse; unsafe methods must be named
+ *
+ * Typing "delete" into a bar holding 2,323 operations offers four dozen
+ * destructive fleet operations to somebody who wanted to delete a project. The
+ * rule that fixes it needs no second list and no curation, because the method is
+ * already in the registry and already means exactly this:
+ *
+ *   - GET matches fuzzily. It is safe and idempotent; browsing costs nothing.
+ *   - every other method needs an exact PREFIX of `group label` — the same
+ *     "service operation" a CLI would type. You cannot stumble onto
+ *     `platform apps-rollback`; you have to name it.
+ *
+ * One rule, over data already present, mapping onto the semantics the methods
+ * already carry.
+ *
+ * # An empty search hides every route, and that is not a shortcut
+ *
+ * With no query a fuzzy matcher matches everything, and everything is 2,323 rows
+ * the moment the dialog opens — which is not a list, it is a stalled browser and
+ * a scroll bar nobody can use. So the Run group is a SEARCH, not a browse: it is
+ * empty until you type, and what remains on open is the surface's own handful of
+ * local commands, which is what a person opening ⌘K with no query wants anyway.
+ *
+ * A local command has no method and is therefore always reachable — it is one of
+ * a few, declared by the surface, and there is nothing to protect anyone from.
+ */
+export declare const match: (op: Op, search: string) => number;
+/**
+ * The ops that survive `search`, grouped for rendering: headings in the order the
+ * caller listed them, rows ranked within each, empty groups dropped.
+ *
+ * `limit` caps each group. A GET search for "list" still matches hundreds, and a
+ * palette that renders hundreds is the same stalled browser the empty query would
+ * be — the cap is what keeps one keystroke's cost bounded whatever was typed.
+ */
+export declare const survivors: (ops: Op[], search: string, limit?: number) => Array<[string, Op[]]>;
+//# sourceMappingURL=match.d.ts.map

package/dist/product/match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"match.d.ts","sourceRoot":"","sources":["../../src/product/match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAItC;;;;;;;GAOG;AACH,MAAM,WAAW,EAAE;IACjB,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAA;IACV,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAA;IACb,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAA;IACb,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qCAAqC;IACrC,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,SAAS,CAAA;CAChB;AAED,+EAA+E;AAC/E,eAAO,MAAM,IAAI,QAAQ,CAAA;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,KAAK,GAAI,IAAI,EAAE,EAAE,QAAQ,MAAM,KAAG,MAQ9C,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,GAAI,KAAK,EAAE,EAAE,EAAE,QAAQ,MAAM,EAAE,cAAU,KAAG,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAiBrF,CAAA"}

package/dist/product/match.js

@@ -0,0 +1,72 @@
+'use client';import { score } from '../backends/gui/command.logic.js';
+/** The one method that is safe to stumble onto: no side effect, idempotent. */
+export const SAFE = 'GET';
+/**
+ * Whether `op` survives `search`, and how well. `0` hides it.
+ *
+ * # Safe methods browse; unsafe methods must be named
+ *
+ * Typing "delete" into a bar holding 2,323 operations offers four dozen
+ * destructive fleet operations to somebody who wanted to delete a project. The
+ * rule that fixes it needs no second list and no curation, because the method is
+ * already in the registry and already means exactly this:
+ *
+ *   - GET matches fuzzily. It is safe and idempotent; browsing costs nothing.
+ *   - every other method needs an exact PREFIX of `group label` — the same
+ *     "service operation" a CLI would type. You cannot stumble onto
+ *     `platform apps-rollback`; you have to name it.
+ *
+ * One rule, over data already present, mapping onto the semantics the methods
+ * already carry.
+ *
+ * # An empty search hides every route, and that is not a shortcut
+ *
+ * With no query a fuzzy matcher matches everything, and everything is 2,323 rows
+ * the moment the dialog opens — which is not a list, it is a stalled browser and
+ * a scroll bar nobody can use. So the Run group is a SEARCH, not a browse: it is
+ * empty until you type, and what remains on open is the surface's own handful of
+ * local commands, which is what a person opening ⌘K with no query wants anyway.
+ *
+ * A local command has no method and is therefore always reachable — it is one of
+ * a few, declared by the surface, and there is nothing to protect anyone from.
+ */
+export const match = (op, search) => {
+    const q = search.trim().toLowerCase();
+    const route = op.method !== undefined;
+    if (!q)
+        return route ? 0 : 1;
+    const named = `${op.group} ${op.label}`.toLowerCase();
+    if (route && op.method !== SAFE)
+        return named.startsWith(q) ? 1 : 0;
+    return score(named, q, op.hint ? [op.hint] : undefined);
+};
+/**
+ * The ops that survive `search`, grouped for rendering: headings in the order the
+ * caller listed them, rows ranked within each, empty groups dropped.
+ *
+ * `limit` caps each group. A GET search for "list" still matches hundreds, and a
+ * palette that renders hundreds is the same stalled browser the empty query would
+ * be — the cap is what keeps one keystroke's cost bounded whatever was typed.
+ */
+export const survivors = (ops, search, limit = 50) => {
+    const groups = new Map();
+    for (const op of ops) {
+        const rank = match(op, search);
+        if (rank <= 0)
+            continue;
+        const got = groups.get(op.group);
+        if (got)
+            got.push([op, rank]);
+        else
+            groups.set(op.group, [[op, rank]]);
+    }
+    const out = [];
+    for (const [group, ranked] of groups) {
+        // Sort by rank, ties keeping the caller's order — a surface that ordered its
+        // projects by recency must not have that undone by a scoring tie.
+        ranked.sort((a, b) => b[1] - a[1]);
+        out.push([group, ranked.slice(0, limit).map(([op]) => op)]);
+    }
+    return out;
+};
+//# sourceMappingURL=match.js.map

package/dist/product/match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"match.js","sourceRoot":"","sources":["../../src/product/match.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AA2BrD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,CAAA;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAM,EAAE,MAAc,EAAU,EAAE;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACrC,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,KAAK,SAAS,CAAA;IACrC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE5B,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAA;IACrD,IAAI,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnE,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AACzD,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAS,EAAE,MAAc,EAAE,KAAK,GAAG,EAAE,EAAyB,EAAE;IACxF,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAA;IACrD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC9B,IAAI,IAAI,IAAI,CAAC;YAAE,SAAQ;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;QAChC,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;;YACxB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACzC,CAAC;IACD,MAAM,GAAG,GAA0B,EAAE,CAAA;IACrC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,6EAA6E;QAC7E,kEAAkE;QAClE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAClC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/dist/product/useCommandK.cjs

@@ -0,0 +1,46 @@
+'use client';"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useCommandK = useCommandK;
+/**
+ * useCommandK — the ONE keybinding for the command palette.
+ *
+ * ⌘K / Ctrl-K always toggles (even from a text field — it is the universal
+ * palette shortcut and nothing else may claim it). `/` also opens it, but ONLY
+ * when the user is NOT typing in a field, so a slash inside an input, a textarea
+ * or a contenteditable types a slash. Pass `slash: false` to bind ⌘K alone.
+ *
+ * That second rule is why chat needs no exception written for it. Its composer is
+ * a TEXTAREA, so the global `/` never fires there and the composer's own prompts
+ * popover keeps the key it has. The same rule makes a `/` typed into the palette's
+ * own input a literal slash. There is no precedence to encode — the one condition
+ * already answers all three, and the instinct to add an exception would be adding
+ * dead code.
+ *
+ * One hook, so every surface that hosts the palette shares identical behaviour
+ * instead of a divergent inline listener each. It moved here from hanzo.app,
+ * which is where it was already correct.
+ */
+const react_1 = require("react");
+function isEditable(target) {
+    const el = target;
+    if (!el || typeof HTMLElement === "undefined" || !(el instanceof HTMLElement))
+        return false;
+    const tag = el.tagName;
+    return tag === "INPUT" || tag === "TEXTAREA" || tag === "SELECT" || el.isContentEditable;
+}
+function useCommandK(onTrigger, opts) {
+    const slash = opts?.slash !== false;
+    (0, react_1.useEffect)(() => {
+        const onKey = (e) => {
+            const cmdK = (e.metaKey || e.ctrlKey) && !e.altKey && e.key.toLowerCase() === "k";
+            const slashKey = slash && e.key === "/" && !e.metaKey && !e.ctrlKey && !e.altKey && !isEditable(e.target);
+            if (cmdK || slashKey) {
+                e.preventDefault();
+                onTrigger();
+            }
+        };
+        window.addEventListener("keydown", onKey);
+        return () => window.removeEventListener("keydown", onKey);
+    }, [onTrigger, slash]);
+}

package/dist/product/useCommandK.d.ts

@@ -0,0 +1,4 @@
+export declare function useCommandK(onTrigger: () => void, opts?: {
+    slash?: boolean;
+}): void;
+//# sourceMappingURL=useCommandK.d.ts.map

package/dist/product/useCommandK.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCommandK.d.ts","sourceRoot":"","sources":["../../src/product/useCommandK.ts"],"names":[],"mappings":"AA8BA,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAenF"}

package/dist/product/useCommandK.js

@@ -0,0 +1,44 @@
+'use client';
+/**
+ * useCommandK — the ONE keybinding for the command palette.
+ *
+ * ⌘K / Ctrl-K always toggles (even from a text field — it is the universal
+ * palette shortcut and nothing else may claim it). `/` also opens it, but ONLY
+ * when the user is NOT typing in a field, so a slash inside an input, a textarea
+ * or a contenteditable types a slash. Pass `slash: false` to bind ⌘K alone.
+ *
+ * That second rule is why chat needs no exception written for it. Its composer is
+ * a TEXTAREA, so the global `/` never fires there and the composer's own prompts
+ * popover keeps the key it has. The same rule makes a `/` typed into the palette's
+ * own input a literal slash. There is no precedence to encode — the one condition
+ * already answers all three, and the instinct to add an exception would be adding
+ * dead code.
+ *
+ * One hook, so every surface that hosts the palette shares identical behaviour
+ * instead of a divergent inline listener each. It moved here from hanzo.app,
+ * which is where it was already correct.
+ */
+import { useEffect } from "react";
+function isEditable(target) {
+    const el = target;
+    if (!el || typeof HTMLElement === "undefined" || !(el instanceof HTMLElement))
+        return false;
+    const tag = el.tagName;
+    return tag === "INPUT" || tag === "TEXTAREA" || tag === "SELECT" || el.isContentEditable;
+}
+export function useCommandK(onTrigger, opts) {
+    const slash = opts?.slash !== false;
+    useEffect(() => {
+        const onKey = (e) => {
+            const cmdK = (e.metaKey || e.ctrlKey) && !e.altKey && e.key.toLowerCase() === "k";
+            const slashKey = slash && e.key === "/" && !e.metaKey && !e.ctrlKey && !e.altKey && !isEditable(e.target);
+            if (cmdK || slashKey) {
+                e.preventDefault();
+                onTrigger();
+            }
+        };
+        window.addEventListener("keydown", onKey);
+        return () => window.removeEventListener("keydown", onKey);
+    }, [onTrigger, slash]);
+}
+//# sourceMappingURL=useCommandK.js.map

package/dist/product/useCommandK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCommandK.js","sourceRoot":"","sources":["../../src/product/useCommandK.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAEZ;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAEjC,SAAS,UAAU,CAAC,MAA0B;IAC5C,MAAM,EAAE,GAAG,MAA4B,CAAA;IACvC,IAAI,CAAC,EAAE,IAAI,OAAO,WAAW,KAAK,WAAW,IAAI,CAAC,CAAC,EAAE,YAAY,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3F,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAA;IACtB,OAAO,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,QAAQ,IAAI,EAAE,CAAC,iBAAiB,CAAA;AAC1F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAqB,EAAE,IAA0B;IAC3E,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,KAAK,CAAA;IACnC,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,CAAC,CAAgB,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,CAAA;YACjF,MAAM,QAAQ,GACZ,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YAC1F,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;gBACrB,CAAC,CAAC,cAAc,EAAE,CAAA;gBAClB,SAAS,EAAE,CAAA;YACb,CAAC;QACH,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACzC,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAC3D,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;AACxB,CAAC"}

package/dist/styles.css

@@ -2109,6 +2109,8 @@
 :root ._bg-background{background-color:var(--background);}
 :root ._bg-backgroundA94988999{background-color:var(--backgroundActive);}
 :root ._bg-borderColor{background-color:var(--borderColor);}
+:root ._bg-color1{background-color:var(--color1);}
+:root ._bg-color10{background-color:var(--color10);}
 :root ._bg-color12{background-color:var(--color12);}
 :root ._bg-color2{background-color:var(--color2);}
 :root ._bg-color3{background-color:var(--color3);}
@@ -2128,6 +2130,7 @@
 @media (hover) {:root:root  ._borderBottomColor-0hover-color8._borderBottomColor-0hover-color8:hover{border-bottom-color:var(--color8) !important;}}
 :root ._borderBottomColor-backgroundF3405682._borderBottomColor-backgroundF3405682{border-bottom-color:var(--backgroundFocus);}
 :root ._borderBottomColor-borderColor._borderBottomColor-borderColor{border-bottom-color:var(--borderColor);}
+:root ._borderBottomColor-color12._borderBottomColor-color12{border-bottom-color:var(--color12);}
 :root ._borderBottomColor-color6._borderBottomColor-color6{border-bottom-color:var(--color6);}
 :root ._borderBottomColor-transparent._borderBottomColor-transparent{border-bottom-color:transparent;}
 :root ._borderBottomWidth-0px._borderBottomWidth-0px{border-bottom-width:0px;}
@@ -2143,6 +2146,7 @@
 @media (hover) {:root:root  ._borderLeftColor-0hover-color8._borderLeftColor-0hover-color8:hover{border-left-color:var(--color8) !important;}}
 :root ._borderLeftColor-backgroundF3405682._borderLeftColor-backgroundF3405682{border-left-color:var(--backgroundFocus);}
 :root ._borderLeftColor-borderColor._borderLeftColor-borderColor{border-left-color:var(--borderColor);}
+:root ._borderLeftColor-color12._borderLeftColor-color12{border-left-color:var(--color12);}
 :root ._borderLeftColor-color6._borderLeftColor-color6{border-left-color:var(--color6);}
 :root ._borderLeftColor-transparent._borderLeftColor-transparent{border-left-color:transparent;}
 :root ._borderLeftWidth-0px._borderLeftWidth-0px{border-left-width:0px;}
@@ -2158,6 +2162,7 @@
 @media (hover) {:root:root  ._brc-0hover-color8._brc-0hover-color8:hover{border-right-color:var(--color8) !important;}}
 :root ._brc-backgroundF3405682._brc-backgroundF3405682{border-right-color:var(--backgroundFocus);}
 :root ._brc-borderColor._brc-borderColor{border-right-color:var(--borderColor);}
+:root ._brc-color12._brc-color12{border-right-color:var(--color12);}
 :root ._brc-color6._brc-color6{border-right-color:var(--color6);}
 :root ._brc-transparent._brc-transparent{border-right-color:transparent;}
 :root ._brs-solid._brs-solid{border-right-style:solid;}
@@ -2174,6 +2179,7 @@
 @media (hover) {:root:root  ._btc-0hover-color8._btc-0hover-color8:hover{border-top-color:var(--color8) !important;}}
 :root ._btc-backgroundF3405682._btc-backgroundF3405682{border-top-color:var(--backgroundFocus);}
 :root ._btc-borderColor._btc-borderColor{border-top-color:var(--borderColor);}
+:root ._btc-color12._btc-color12{border-top-color:var(--color12);}
 :root ._btc-color6._btc-color6{border-top-color:var(--color6);}
 :root ._btc-transparent._btc-transparent{border-top-color:transparent;}
 :root ._btlr-100000px{border-top-left-radius:100000px;}
@@ -2278,8 +2284,8 @@
 :root ._maxW-32px{max-width:32px;}
 :root ._maxW-600px{max-width:600px;}
 :root ._minH-16px{min-height:16px;}
+:root ._minH-20px{min-height:20px;}
 :root ._minH-24px{min-height:24px;}
-:root ._minH-29px{min-height:29px;}
 :root ._minH-32px{min-height:32px;}
 :root ._minH-36px{min-height:36px;}
 :root ._minH-40px{min-height:40px;}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/ui",
-  "version": "8.0.56",
+  "version": "8.0.58",
   "type": "module",
   "description": "Hanzo UI — the one canonical Hanzo component library, on @hanzo/gui + @hanzo/design. ONE substrate: every component renders through @hanzo/gui primitives, so the same import works on web, native (expo) and desktop (Tauri). Self-contained (theme.css), presentational, host-agnostic, clean-room.",
   "exports": {