@hanzo/ui 8.0.57 → 8.0.58

package/dist/product/Palette.cjs

@@ -0,0 +1,65 @@
+'use client';"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Palette = Palette;
+const jsx_runtime_1 = require("react/jsx-runtime");
+/**
+ * Palette — the ⌘K bar, once, for every Hanzo surface.
+ *
+ * hanzo.app, console and chat each grew their own: three lists of what can be
+ * run, all hand-written, already disagreeing with each other and with the API.
+ * This is the component half of ending that. The other half is `GET /v1/commands`,
+ * which projects every operation the cloud answers out of the one route table —
+ * so a surface passes that list in and stops maintaining one.
+ *
+ * It is composed from `CommandDialog`, not from a hand-rolled Dialog around a
+ * bare `Command`. That distinction is the whole history: the stock dialog used to
+ * render `<Command>` with none of the palette's props forwarded, so a host could
+ * not read the highlighted row and therefore could not draw a preview beside the
+ * list — and hanzo.app rebuilt the dialog by hand for exactly that reason. The
+ * forwarding landed upstream in this package and named collapsing the hand-rolled
+ * palettes as the follow-up. This is that follow-up, so the hand-rolled shape does
+ * not come back here under a new name.
+ *
+ * Props in, callbacks out, like everything else in this layer: no transport, no
+ * store, no routing. It does not fetch the commands, does not run them, and does
+ * not know what a project or an org is. `onRun` receives the Op and the surface
+ * decides whether that means an HTTP call or a function in the page — which is
+ * why a route command and a local command are one type (see `match.ts`).
+ *
+ * The right-hand slot is `children`, and it is why a shared bar costs no surface
+ * its personality: hanzo.app keeps its live project preview and console keeps its
+ * `>` AI mode by passing them, not by forking this.
+ *
+ * Filtering is `survivors`. The safe-methods-browse rule, the per-group cap and
+ * the empty-query behaviour all live in `match.ts` as pure functions, so
+ * `shouldFilter` is off and the Command primitive is left holding the cursor and
+ * the view — which is also what makes the rule testable without a DOM.
+ */
+const react_1 = require("react");
+const gui_1 = require("@hanzo/gui");
+const gui_2 = require("../backends/gui/index.cjs");
+const match_1 = require("./match.cjs");
+function Palette({ open, onOpenChange, ops, onRun, active, onActive, search: controlled, onSearch, placeholder = "Search commands…", empty = "No results found.", limit, children, footer, height = 320, title = "Search commands", }) {
+    const [own, setOwn] = (0, react_1.useState)("");
+    const search = controlled ?? own;
+    const setSearch = (s) => {
+        setOwn(s);
+        onSearch?.(s);
+    };
+    const groups = (0, react_1.useMemo)(() => (0, match_1.survivors)(ops, search, limit), [ops, search, limit]);
+    return ((0, jsx_runtime_1.jsxs)(gui_2.CommandDialog, { open: open, onOpenChange: onOpenChange, title: title, description: placeholder, value: active, onValueChange: onActive, shouldFilter: false, children: [(0, jsx_runtime_1.jsx)(gui_2.CommandInput, { value: search, onValueChange: setSearch, placeholder: placeholder, color: "$color", placeholderTextColor: "$color11" }), (0, jsx_runtime_1.jsxs)(gui_1.XStack, { minH: height, children: [(0, jsx_runtime_1.jsxs)(gui_2.CommandList, { maxH: height, width: children ? "50%" : "100%", borderRightWidth: children ? 1 : 0, borderColor: "$borderColor", py: "$1", children: [groups.length === 0 && ((0, jsx_runtime_1.jsx)(gui_2.CommandEmpty, { children: (0, jsx_runtime_1.jsx)(gui_1.SizableText, { color: "$color11", children: empty }) })), groups.map(([group, items]) => ((0, jsx_runtime_1.jsx)(gui_2.CommandGroup, { heading: group, children: items.map((op) => ((0, jsx_runtime_1.jsxs)(gui_2.CommandItem, { value: op.id, onSelect: () => onRun(op), gap: "$2", children: [op.icon, (0, jsx_runtime_1.jsx)(gui_1.SizableText, { numberOfLines: 1, children: op.label }), op.hint ? ((0, jsx_runtime_1.jsx)(gui_1.SizableText, { numberOfLines: 1, fontSize: "$1", color: "$color11", children: op.hint })) : null, (0, jsx_runtime_1.jsx)(Method, { of: op }), op.end] }, op.id))) }, group)))] }), children ? (0, jsx_runtime_1.jsx)(gui_1.YStack, { width: "50%", children: children }) : null] }), footer ? ((0, jsx_runtime_1.jsx)(gui_1.XStack, { items: "center", gap: "$4", borderTopWidth: 1, borderColor: "$borderColor", px: "$3", py: "$2", children: footer })) : null] }));
+}
+/**
+ * The method, at the end of the row, for route commands only.
+ *
+ * It is the rule made visible rather than decoration: GET is what you reached by
+ * browsing, anything else is what you reached by naming it exactly, and somebody
+ * about to press ↵ on `platform apps-rollback` should be able to see which
+ * without reading the docs. A local command has no method and gets no tag.
+ */
+function Method({ of }) {
+    if (of.method === undefined)
+        return null;
+    return ((0, jsx_runtime_1.jsx)(gui_1.SizableText, { ml: "auto", fontFamily: "$mono", fontSize: 10, letterSpacing: 0.4, color: of.method === match_1.SAFE ? "$color11" : "$color", children: of.method }));
+}

package/dist/product/Palette.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Palette — the ⌘K bar, once, for every Hanzo surface.
+ *
+ * hanzo.app, console and chat each grew their own: three lists of what can be
+ * run, all hand-written, already disagreeing with each other and with the API.
+ * This is the component half of ending that. The other half is `GET /v1/commands`,
+ * which projects every operation the cloud answers out of the one route table —
+ * so a surface passes that list in and stops maintaining one.
+ *
+ * It is composed from `CommandDialog`, not from a hand-rolled Dialog around a
+ * bare `Command`. That distinction is the whole history: the stock dialog used to
+ * render `<Command>` with none of the palette's props forwarded, so a host could
+ * not read the highlighted row and therefore could not draw a preview beside the
+ * list — and hanzo.app rebuilt the dialog by hand for exactly that reason. The
+ * forwarding landed upstream in this package and named collapsing the hand-rolled
+ * palettes as the follow-up. This is that follow-up, so the hand-rolled shape does
+ * not come back here under a new name.
+ *
+ * Props in, callbacks out, like everything else in this layer: no transport, no
+ * store, no routing. It does not fetch the commands, does not run them, and does
+ * not know what a project or an org is. `onRun` receives the Op and the surface
+ * decides whether that means an HTTP call or a function in the page — which is
+ * why a route command and a local command are one type (see `match.ts`).
+ *
+ * The right-hand slot is `children`, and it is why a shared bar costs no surface
+ * its personality: hanzo.app keeps its live project preview and console keeps its
+ * `>` AI mode by passing them, not by forking this.
+ *
+ * Filtering is `survivors`. The safe-methods-browse rule, the per-group cap and
+ * the empty-query behaviour all live in `match.ts` as pure functions, so
+ * `shouldFilter` is off and the Command primitive is left holding the cursor and
+ * the view — which is also what makes the rule testable without a DOM.
+ */
+import { type ReactNode } from "react";
+import { type Op } from "./match.js";
+export type PaletteProps = {
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    /** Everything runnable, local commands and route commands alike. */
+    ops: Op[];
+    /** Run one. The surface decides what running it means. */
+    onRun: (op: Op) => void;
+    /**
+     * The highlighted row's id (controlled). A surface drawing a preview beside the
+     * list needs to know what is highlighted.
+     */
+    active?: string;
+    onActive?: (id: string) => void;
+    /** The typed query. Uncontrolled unless a surface wants to read it. */
+    search?: string;
+    onSearch?: (search: string) => void;
+    placeholder?: string;
+    /** Shown when nothing survives the search. */
+    empty?: ReactNode;
+    /** Rows per group. See `survivors` — a render budget, not a preference. */
+    limit?: number;
+    /** The right-hand panel. Absent, the list takes the full width. */
+    children?: ReactNode;
+    /** The bar along the bottom — key hints, usually. */
+    footer?: ReactNode;
+    /** How tall the list is. It scrolls inside this. */
+    height?: number;
+    /** The dialog's accessible name. */
+    title?: string;
+};
+export declare function Palette({ open, onOpenChange, ops, onRun, active, onActive, search: controlled, onSearch, placeholder, empty, limit, children, footer, height, title, }: PaletteProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=Palette.d.ts.map

package/dist/product/Palette.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Palette.d.ts","sourceRoot":"","sources":["../../src/product/Palette.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,KAAK,SAAS,EAAqB,MAAM,OAAO,CAAA;AAWzD,OAAO,EAAmB,KAAK,EAAE,EAAE,MAAM,SAAS,CAAA;AAElD,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,OAAO,CAAA;IACb,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAA;IACrC,oEAAoE;IACpE,GAAG,EAAE,EAAE,EAAE,CAAA;IACT,0DAA0D;IAC1D,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,IAAI,CAAA;IACvB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mEAAmE;IACnE,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,qDAAqD;IACrD,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,wBAAgB,OAAO,CAAC,EACtB,IAAI,EACJ,YAAY,EACZ,GAAG,EACH,KAAK,EACL,MAAM,EACN,QAAQ,EACR,MAAM,EAAE,UAAU,EAClB,QAAQ,EACR,WAAgC,EAChC,KAA2B,EAC3B,KAAK,EACL,QAAQ,EACR,MAAM,EACN,MAAY,EACZ,KAAyB,GAC1B,EAAE,YAAY,2CA0Ed"}

package/dist/product/Palette.js

@@ -0,0 +1,63 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Palette — the ⌘K bar, once, for every Hanzo surface.
+ *
+ * hanzo.app, console and chat each grew their own: three lists of what can be
+ * run, all hand-written, already disagreeing with each other and with the API.
+ * This is the component half of ending that. The other half is `GET /v1/commands`,
+ * which projects every operation the cloud answers out of the one route table —
+ * so a surface passes that list in and stops maintaining one.
+ *
+ * It is composed from `CommandDialog`, not from a hand-rolled Dialog around a
+ * bare `Command`. That distinction is the whole history: the stock dialog used to
+ * render `<Command>` with none of the palette's props forwarded, so a host could
+ * not read the highlighted row and therefore could not draw a preview beside the
+ * list — and hanzo.app rebuilt the dialog by hand for exactly that reason. The
+ * forwarding landed upstream in this package and named collapsing the hand-rolled
+ * palettes as the follow-up. This is that follow-up, so the hand-rolled shape does
+ * not come back here under a new name.
+ *
+ * Props in, callbacks out, like everything else in this layer: no transport, no
+ * store, no routing. It does not fetch the commands, does not run them, and does
+ * not know what a project or an org is. `onRun` receives the Op and the surface
+ * decides whether that means an HTTP call or a function in the page — which is
+ * why a route command and a local command are one type (see `match.ts`).
+ *
+ * The right-hand slot is `children`, and it is why a shared bar costs no surface
+ * its personality: hanzo.app keeps its live project preview and console keeps its
+ * `>` AI mode by passing them, not by forking this.
+ *
+ * Filtering is `survivors`. The safe-methods-browse rule, the per-group cap and
+ * the empty-query behaviour all live in `match.ts` as pure functions, so
+ * `shouldFilter` is off and the Command primitive is left holding the cursor and
+ * the view — which is also what makes the rule testable without a DOM.
+ */
+import { useMemo, useState } from "react";
+import { SizableText, XStack, YStack } from "@hanzo/gui";
+import { CommandDialog, CommandEmpty, CommandGroup, CommandInput, CommandItem, CommandList, } from "../backends/gui/index.js";
+import { SAFE, survivors } from "./match.js";
+export function Palette({ open, onOpenChange, ops, onRun, active, onActive, search: controlled, onSearch, placeholder = "Search commands…", empty = "No results found.", limit, children, footer, height = 320, title = "Search commands", }) {
+    const [own, setOwn] = useState("");
+    const search = controlled ?? own;
+    const setSearch = (s) => {
+        setOwn(s);
+        onSearch?.(s);
+    };
+    const groups = useMemo(() => survivors(ops, search, limit), [ops, search, limit]);
+    return (_jsxs(CommandDialog, { open: open, onOpenChange: onOpenChange, title: title, description: placeholder, value: active, onValueChange: onActive, shouldFilter: false, children: [_jsx(CommandInput, { value: search, onValueChange: setSearch, placeholder: placeholder, color: "$color", placeholderTextColor: "$color11" }), _jsxs(XStack, { minH: height, children: [_jsxs(CommandList, { maxH: height, width: children ? "50%" : "100%", borderRightWidth: children ? 1 : 0, borderColor: "$borderColor", py: "$1", children: [groups.length === 0 && (_jsx(CommandEmpty, { children: _jsx(SizableText, { color: "$color11", children: empty }) })), groups.map(([group, items]) => (_jsx(CommandGroup, { heading: group, children: items.map((op) => (_jsxs(CommandItem, { value: op.id, onSelect: () => onRun(op), gap: "$2", children: [op.icon, _jsx(SizableText, { numberOfLines: 1, children: op.label }), op.hint ? (_jsx(SizableText, { numberOfLines: 1, fontSize: "$1", color: "$color11", children: op.hint })) : null, _jsx(Method, { of: op }), op.end] }, op.id))) }, group)))] }), children ? _jsx(YStack, { width: "50%", children: children }) : null] }), footer ? (_jsx(XStack, { items: "center", gap: "$4", borderTopWidth: 1, borderColor: "$borderColor", px: "$3", py: "$2", children: footer })) : null] }));
+}
+/**
+ * The method, at the end of the row, for route commands only.
+ *
+ * It is the rule made visible rather than decoration: GET is what you reached by
+ * browsing, anything else is what you reached by naming it exactly, and somebody
+ * about to press ↵ on `platform apps-rollback` should be able to see which
+ * without reading the docs. A local command has no method and gets no tag.
+ */
+function Method({ of }) {
+    if (of.method === undefined)
+        return null;
+    return (_jsx(SizableText, { ml: "auto", fontFamily: "$mono", fontSize: 10, letterSpacing: 0.4, color: of.method === SAFE ? "$color11" : "$color", children: of.method }));
+}
+//# sourceMappingURL=Palette.js.map

package/dist/product/Palette.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Palette.js","sourceRoot":"","sources":["../../src/product/Palette.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAkB,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAExD,OAAO,EACL,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAW,MAAM,SAAS,CAAA;AAiClD,MAAM,UAAU,OAAO,CAAC,EACtB,IAAI,EACJ,YAAY,EACZ,GAAG,EACH,KAAK,EACL,MAAM,EACN,QAAQ,EACR,MAAM,EAAE,UAAU,EAClB,QAAQ,EACR,WAAW,GAAG,kBAAkB,EAChC,KAAK,GAAG,mBAAmB,EAC3B,KAAK,EACL,QAAQ,EACR,MAAM,EACN,MAAM,GAAG,GAAG,EACZ,KAAK,GAAG,iBAAiB,GACZ;IACb,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,UAAU,IAAI,GAAG,CAAA;IAChC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE;QAC9B,MAAM,CAAC,CAAC,CAAC,CAAA;QACT,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;IACf,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;IAEjF,OAAO,CACL,MAAC,aAAa,IACZ,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,YAAY,EAC1B,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,QAAQ,EACvB,YAAY,EAAE,KAAK,aAEnB,KAAC,YAAY,IACX,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,SAAS,EACxB,WAAW,EAAE,WAAW,EACxB,KAAK,EAAC,QAAQ,EACd,oBAAoB,EAAC,UAAU,GAC/B,EACF,MAAC,MAAM,IAAC,IAAI,EAAE,MAAM,aAClB,MAAC,WAAW,IACV,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAChC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAClC,WAAW,EAAC,cAAc,EAC1B,EAAE,EAAC,IAAI,aAEN,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CACtB,KAAC,YAAY,cACX,KAAC,WAAW,IAAC,KAAK,EAAC,UAAU,YAAE,KAAK,GAAe,GACtC,CAChB,EACA,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAC9B,KAAC,YAAY,IAAa,OAAO,EAAE,KAAK,YACrC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CACjB,MAAC,WAAW,IAAa,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,EAAC,IAAI,aACvE,EAAE,CAAC,IAAI,EACR,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,YAAG,EAAE,CAAC,KAAK,GAAe,EACtD,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CACT,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAC,IAAI,EAAC,KAAK,EAAC,UAAU,YAC1D,EAAE,CAAC,IAAI,GACI,CACf,CAAC,CAAC,CAAC,IAAI,EACR,KAAC,MAAM,IAAC,EAAE,EAAE,EAAE,GAAI,EACjB,EAAE,CAAC,GAAG,KATS,EAAE,CAAC,EAAE,CAUT,CACf,CAAC,IAbe,KAAK,CAcT,CAChB,CAAC,IACU,EACb,QAAQ,CAAC,CAAC,CAAC,KAAC,MAAM,IAAC,KAAK,EAAC,KAAK,YAAE,QAAQ,GAAU,CAAC,CAAC,CAAC,IAAI,IACnD,EACR,MAAM,CAAC,CAAC,CAAC,CACR,KAAC,MAAM,IACL,KAAK,EAAC,QAAQ,EACd,GAAG,EAAC,IAAI,EACR,cAAc,EAAE,CAAC,EACjB,WAAW,EAAC,cAAc,EAC1B,EAAE,EAAC,IAAI,EACP,EAAE,EAAC,IAAI,YAEN,MAAM,GACA,CACV,CAAC,CAAC,CAAC,IAAI,IACM,CACjB,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,EAAE,EAAE,EAAc;IAChC,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACxC,OAAO,CACL,KAAC,WAAW,IACV,EAAE,EAAC,MAAM,EACT,UAAU,EAAC,OAAO,EAClB,QAAQ,EAAE,EAAE,EACZ,aAAa,EAAE,GAAG,EAClB,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,YAEhD,EAAE,CAAC,MAAM,GACE,CACf,CAAA;AACH,CAAC"}

package/dist/product/index.cjs

@@ -111,6 +111,13 @@ __exportStar(require("./FadeIn.cjs"), exports);
 __exportStar(require("./Field.cjs"), exports);
 __exportStar(require("./HanzoMark.cjs"), exports);
 __exportStar(require("./PageHeader.cjs"), exports);
+// Palette — the ONE ⌘K bar, plus its opener. The list it renders is not written
+// down anywhere: cloud publishes `GET /v1/commands`, the fifth projection of the
+// one route table, and a surface passes it in. `match.ts` holds the matching
+// rule (safe methods browse, unsafe methods must be named) as pure functions.
+__exportStar(require("./Palette.cjs"), exports);
+__exportStar(require("./match.cjs"), exports);
+__exportStar(require("./useCommandK.cjs"), exports);
 __exportStar(require("./PrimaryButton.cjs"), exports);
 __exportStar(require("./ProductIcon.cjs"), exports);
 __exportStar(require("./ProviderLogo.cjs"), exports);

package/dist/product/index.d.ts

@@ -31,6 +31,9 @@ export * from './FadeIn.js';
 export * from './Field.js';
 export * from './HanzoMark.js';
 export * from './PageHeader.js';
+export * from './Palette.js';
+export * from './match.js';
+export * from './useCommandK.js';
 export * from './PrimaryButton.js';
 export * from './ProductIcon.js';
 export * from './ProviderLogo.js';

package/dist/product/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAaA,cAAc,UAAU,CAAA;AAKxB,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAGjB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAA;AAK/D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AASjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAKvB,cAAc,QAAQ,CAAA;AAKtB,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAK5B,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAOzB,cAAc,cAAc,CAAA;AAK5B,cAAc,YAAY,CAAA;AAO1B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAI7B,cAAc,cAAc,CAAA;AAG5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AASvB,cAAc,UAAU,CAAA;AAKxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAaA,cAAc,UAAU,CAAA;AAKxB,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAGjB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAA;AAK/D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AASjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAKvB,cAAc,QAAQ,CAAA;AAKtB,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAK5B,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAOzB,cAAc,cAAc,CAAA;AAK5B,cAAc,YAAY,CAAA;AAO1B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAI7B,cAAc,cAAc,CAAA;AAG5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAM5B,cAAc,WAAW,CAAA;AACzB,cAAc,SAAS,CAAA;AACvB,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AASvB,cAAc,UAAU,CAAA;AAKxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAA"}

package/dist/product/index.js

@@ -82,6 +82,13 @@ export * from './FadeIn.js';
 export * from './Field.js';
 export * from './HanzoMark.js';
 export * from './PageHeader.js';
+// Palette — the ONE ⌘K bar, plus its opener. The list it renders is not written
+// down anywhere: cloud publishes `GET /v1/commands`, the fifth projection of the
+// one route table, and a surface passes it in. `match.ts` holds the matching
+// rule (safe methods browse, unsafe methods must be named) as pure functions.
+export * from './Palette.js';
+export * from './match.js';
+export * from './useCommandK.js';
 export * from './PrimaryButton.js';
 export * from './ProductIcon.js';
 export * from './ProviderLogo.js';

package/dist/product/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,wEAAwE;AACxE,EAAE;AACF,kFAAkF;AAClF,6EAA6E;AAE7E,kFAAkF;AAClF,gEAAgE;AAChE,cAAc,UAAU,CAAA;AAExB,2EAA2E;AAC3E,+EAA+E;AAC/E,4CAA4C;AAC5C,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAEjB,6EAA6E;AAC7E,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,SAAS,CAAA;AAE/D,+EAA+E;AAC/E,8EAA8E;AAC9E,qCAAqC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AAEjC,gFAAgF;AAChF,6EAA6E;AAC7E,mFAAmF;AACnF,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,8DAA8D;AAC9D,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AAEtB,iFAAiF;AACjF,2EAA2E;AAC3E,8EAA8E;AAC9E,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAE5B,6EAA6E;AAC7E,yEAAyE;AACzE,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAEzB,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,mDAAmD;AACnD,cAAc,cAAc,CAAA;AAE5B,gFAAgF;AAChF,iFAAiF;AACjF,2EAA2E;AAC3E,cAAc,YAAY,CAAA;AAE1B,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,kFAAkF;AAClF,oBAAoB;AACpB,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAE7B,8EAA8E;AAC9E,sBAAsB;AACtB,cAAc,cAAc,CAAA;AAE5B,mEAAmE;AACnE,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,uEAAuE;AAEvE,iFAAiF;AACjF,kFAAkF;AAClF,kEAAkE;AAClE,cAAc,UAAU,CAAA;AAExB,sEAAsE;AACtE,+EAA+E;AAC/E,8EAA8E;AAC9E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAgB,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,wEAAwE;AACxE,EAAE;AACF,kFAAkF;AAClF,6EAA6E;AAE7E,kFAAkF;AAClF,gEAAgE;AAChE,cAAc,UAAU,CAAA;AAExB,2EAA2E;AAC3E,+EAA+E;AAC/E,4CAA4C;AAC5C,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAEjB,6EAA6E;AAC7E,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,SAAS,CAAA;AAE/D,+EAA+E;AAC/E,8EAA8E;AAC9E,qCAAqC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AAEjC,gFAAgF;AAChF,6EAA6E;AAC7E,mFAAmF;AACnF,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,8DAA8D;AAC9D,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AAEtB,iFAAiF;AACjF,2EAA2E;AAC3E,8EAA8E;AAC9E,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAE5B,6EAA6E;AAC7E,yEAAyE;AACzE,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAEzB,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,mDAAmD;AACnD,cAAc,cAAc,CAAA;AAE5B,gFAAgF;AAChF,iFAAiF;AACjF,2EAA2E;AAC3E,cAAc,YAAY,CAAA;AAE1B,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,kFAAkF;AAClF,oBAAoB;AACpB,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAE7B,8EAA8E;AAC9E,sBAAsB;AACtB,cAAc,cAAc,CAAA;AAE5B,mEAAmE;AACnE,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAE5B,gFAAgF;AAChF,iFAAiF;AACjF,6EAA6E;AAC7E,8EAA8E;AAC9E,cAAc,WAAW,CAAA;AACzB,cAAc,SAAS,CAAA;AACvB,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,uEAAuE;AAEvE,iFAAiF;AACjF,kFAAkF;AAClF,kEAAkE;AAClE,cAAc,UAAU,CAAA;AAExB,sEAAsE;AACtE,+EAA+E;AAC/E,8EAA8E;AAC9E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAgB,MAAM,aAAa,CAAA"}

package/dist/product/match.cjs

@@ -0,0 +1,76 @@
+'use client';"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.survivors = exports.match = exports.SAFE = void 0;
+const command_logic_1 = require("../backends/gui/command.logic.cjs");
+/** The one method that is safe to stumble onto: no side effect, idempotent. */
+exports.SAFE = 'GET';
+/**
+ * Whether `op` survives `search`, and how well. `0` hides it.
+ *
+ * # Safe methods browse; unsafe methods must be named
+ *
+ * Typing "delete" into a bar holding 2,323 operations offers four dozen
+ * destructive fleet operations to somebody who wanted to delete a project. The
+ * rule that fixes it needs no second list and no curation, because the method is
+ * already in the registry and already means exactly this:
+ *
+ *   - GET matches fuzzily. It is safe and idempotent; browsing costs nothing.
+ *   - every other method needs an exact PREFIX of `group label` — the same
+ *     "service operation" a CLI would type. You cannot stumble onto
+ *     `platform apps-rollback`; you have to name it.
+ *
+ * One rule, over data already present, mapping onto the semantics the methods
+ * already carry.
+ *
+ * # An empty search hides every route, and that is not a shortcut
+ *
+ * With no query a fuzzy matcher matches everything, and everything is 2,323 rows
+ * the moment the dialog opens — which is not a list, it is a stalled browser and
+ * a scroll bar nobody can use. So the Run group is a SEARCH, not a browse: it is
+ * empty until you type, and what remains on open is the surface's own handful of
+ * local commands, which is what a person opening ⌘K with no query wants anyway.
+ *
+ * A local command has no method and is therefore always reachable — it is one of
+ * a few, declared by the surface, and there is nothing to protect anyone from.
+ */
+const match = (op, search) => {
+    const q = search.trim().toLowerCase();
+    const route = op.method !== undefined;
+    if (!q)
+        return route ? 0 : 1;
+    const named = `${op.group} ${op.label}`.toLowerCase();
+    if (route && op.method !== exports.SAFE)
+        return named.startsWith(q) ? 1 : 0;
+    return (0, command_logic_1.score)(named, q, op.hint ? [op.hint] : undefined);
+};
+exports.match = match;
+/**
+ * The ops that survive `search`, grouped for rendering: headings in the order the
+ * caller listed them, rows ranked within each, empty groups dropped.
+ *
+ * `limit` caps each group. A GET search for "list" still matches hundreds, and a
+ * palette that renders hundreds is the same stalled browser the empty query would
+ * be — the cap is what keeps one keystroke's cost bounded whatever was typed.
+ */
+const survivors = (ops, search, limit = 50) => {
+    const groups = new Map();
+    for (const op of ops) {
+        const rank = (0, exports.match)(op, search);
+        if (rank <= 0)
+            continue;
+        const got = groups.get(op.group);
+        if (got)
+            got.push([op, rank]);
+        else
+            groups.set(op.group, [[op, rank]]);
+    }
+    const out = [];
+    for (const [group, ranked] of groups) {
+        // Sort by rank, ties keeping the caller's order — a surface that ordered its
+        // projects by recency must not have that undone by a scoring tie.
+        ranked.sort((a, b) => b[1] - a[1]);
+        out.push([group, ranked.slice(0, limit).map(([op]) => op)]);
+    }
+    return out;
+};
+exports.survivors = survivors;

package/dist/product/match.d.ts

@@ -0,0 +1,78 @@
+/**
+ * What the ⌘K bar shows for what you typed, as one pure function.
+ *
+ * The bar's list is not hand-written any more. hanzo.app's cloud publishes
+ * `GET /v1/commands` — every operation the API answers, projected from the same
+ * route table the OpenAPI document, the MCP tools and the `hanzo` CLI come from —
+ * so a surface hands the whole list in and this decides what survives a search.
+ *
+ * That list is 2,323 operations, and that number is what makes the rule below
+ * more than a preference.
+ */
+import type { ReactNode } from 'react';
+/**
+ * One runnable thing in the bar.
+ *
+ * A command that names a route and a command that runs in the page are the SAME
+ * type here; only the surface's `onRun` tells them apart. `method` is what says
+ * which — it is present exactly when the command is an HTTP operation, and it is
+ * the only field the matching rule reads.
+ */
+export interface Op {
+    /** Stable identity. The registry's operationId, or a surface-local name. */
+    id: string;
+    /** The heading it files under — a service ("projects"), or a surface's own. */
+    group: string;
+    /** What it is called: the operation token ("deployments-list"), or a phrase. */
+    label: string;
+    /** One line of help. The operation's summary, when it has one. */
+    hint?: string;
+    /** The HTTP method, when this names a route. Absent means it runs in the page. */
+    method?: string;
+    /** Drawn at the start of the row. */
+    icon?: ReactNode;
+    /** Drawn at the end of the row — a status dot, a shortcut. */
+    end?: ReactNode;
+}
+/** The one method that is safe to stumble onto: no side effect, idempotent. */
+export declare const SAFE = "GET";
+/**
+ * Whether `op` survives `search`, and how well. `0` hides it.
+ *
+ * # Safe methods browse; unsafe methods must be named
+ *
+ * Typing "delete" into a bar holding 2,323 operations offers four dozen
+ * destructive fleet operations to somebody who wanted to delete a project. The
+ * rule that fixes it needs no second list and no curation, because the method is
+ * already in the registry and already means exactly this:
+ *
+ *   - GET matches fuzzily. It is safe and idempotent; browsing costs nothing.
+ *   - every other method needs an exact PREFIX of `group label` — the same
+ *     "service operation" a CLI would type. You cannot stumble onto
+ *     `platform apps-rollback`; you have to name it.
+ *
+ * One rule, over data already present, mapping onto the semantics the methods
+ * already carry.
+ *
+ * # An empty search hides every route, and that is not a shortcut
+ *
+ * With no query a fuzzy matcher matches everything, and everything is 2,323 rows
+ * the moment the dialog opens — which is not a list, it is a stalled browser and
+ * a scroll bar nobody can use. So the Run group is a SEARCH, not a browse: it is
+ * empty until you type, and what remains on open is the surface's own handful of
+ * local commands, which is what a person opening ⌘K with no query wants anyway.
+ *
+ * A local command has no method and is therefore always reachable — it is one of
+ * a few, declared by the surface, and there is nothing to protect anyone from.
+ */
+export declare const match: (op: Op, search: string) => number;
+/**
+ * The ops that survive `search`, grouped for rendering: headings in the order the
+ * caller listed them, rows ranked within each, empty groups dropped.
+ *
+ * `limit` caps each group. A GET search for "list" still matches hundreds, and a
+ * palette that renders hundreds is the same stalled browser the empty query would
+ * be — the cap is what keeps one keystroke's cost bounded whatever was typed.
+ */
+export declare const survivors: (ops: Op[], search: string, limit?: number) => Array<[string, Op[]]>;
+//# sourceMappingURL=match.d.ts.map

package/dist/product/match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"match.d.ts","sourceRoot":"","sources":["../../src/product/match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAItC;;;;;;;GAOG;AACH,MAAM,WAAW,EAAE;IACjB,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAA;IACV,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAA;IACb,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAA;IACb,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qCAAqC;IACrC,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,SAAS,CAAA;CAChB;AAED,+EAA+E;AAC/E,eAAO,MAAM,IAAI,QAAQ,CAAA;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,KAAK,GAAI,IAAI,EAAE,EAAE,QAAQ,MAAM,KAAG,MAQ9C,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,GAAI,KAAK,EAAE,EAAE,EAAE,QAAQ,MAAM,EAAE,cAAU,KAAG,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAiBrF,CAAA"}

package/dist/product/match.js

@@ -0,0 +1,72 @@
+'use client';import { score } from '../backends/gui/command.logic.js';
+/** The one method that is safe to stumble onto: no side effect, idempotent. */
+export const SAFE = 'GET';
+/**
+ * Whether `op` survives `search`, and how well. `0` hides it.
+ *
+ * # Safe methods browse; unsafe methods must be named
+ *
+ * Typing "delete" into a bar holding 2,323 operations offers four dozen
+ * destructive fleet operations to somebody who wanted to delete a project. The
+ * rule that fixes it needs no second list and no curation, because the method is
+ * already in the registry and already means exactly this:
+ *
+ *   - GET matches fuzzily. It is safe and idempotent; browsing costs nothing.
+ *   - every other method needs an exact PREFIX of `group label` — the same
+ *     "service operation" a CLI would type. You cannot stumble onto
+ *     `platform apps-rollback`; you have to name it.
+ *
+ * One rule, over data already present, mapping onto the semantics the methods
+ * already carry.
+ *
+ * # An empty search hides every route, and that is not a shortcut
+ *
+ * With no query a fuzzy matcher matches everything, and everything is 2,323 rows
+ * the moment the dialog opens — which is not a list, it is a stalled browser and
+ * a scroll bar nobody can use. So the Run group is a SEARCH, not a browse: it is
+ * empty until you type, and what remains on open is the surface's own handful of
+ * local commands, which is what a person opening ⌘K with no query wants anyway.
+ *
+ * A local command has no method and is therefore always reachable — it is one of
+ * a few, declared by the surface, and there is nothing to protect anyone from.
+ */
+export const match = (op, search) => {
+    const q = search.trim().toLowerCase();
+    const route = op.method !== undefined;
+    if (!q)
+        return route ? 0 : 1;
+    const named = `${op.group} ${op.label}`.toLowerCase();
+    if (route && op.method !== SAFE)
+        return named.startsWith(q) ? 1 : 0;
+    return score(named, q, op.hint ? [op.hint] : undefined);
+};
+/**
+ * The ops that survive `search`, grouped for rendering: headings in the order the
+ * caller listed them, rows ranked within each, empty groups dropped.
+ *
+ * `limit` caps each group. A GET search for "list" still matches hundreds, and a
+ * palette that renders hundreds is the same stalled browser the empty query would
+ * be — the cap is what keeps one keystroke's cost bounded whatever was typed.
+ */
+export const survivors = (ops, search, limit = 50) => {
+    const groups = new Map();
+    for (const op of ops) {
+        const rank = match(op, search);
+        if (rank <= 0)
+            continue;
+        const got = groups.get(op.group);
+        if (got)
+            got.push([op, rank]);
+        else
+            groups.set(op.group, [[op, rank]]);
+    }
+    const out = [];
+    for (const [group, ranked] of groups) {
+        // Sort by rank, ties keeping the caller's order — a surface that ordered its
+        // projects by recency must not have that undone by a scoring tie.
+        ranked.sort((a, b) => b[1] - a[1]);
+        out.push([group, ranked.slice(0, limit).map(([op]) => op)]);
+    }
+    return out;
+};
+//# sourceMappingURL=match.js.map

package/dist/product/match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"match.js","sourceRoot":"","sources":["../../src/product/match.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AA2BrD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,CAAA;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAM,EAAE,MAAc,EAAU,EAAE;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACrC,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,KAAK,SAAS,CAAA;IACrC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE5B,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAA;IACrD,IAAI,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnE,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AACzD,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAS,EAAE,MAAc,EAAE,KAAK,GAAG,EAAE,EAAyB,EAAE;IACxF,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAA;IACrD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC9B,IAAI,IAAI,IAAI,CAAC;YAAE,SAAQ;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;QAChC,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;;YACxB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACzC,CAAC;IACD,MAAM,GAAG,GAA0B,EAAE,CAAA;IACrC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,6EAA6E;QAC7E,kEAAkE;QAClE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAClC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/dist/product/useCommandK.cjs

@@ -0,0 +1,46 @@
+'use client';"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useCommandK = useCommandK;
+/**
+ * useCommandK — the ONE keybinding for the command palette.
+ *
+ * ⌘K / Ctrl-K always toggles (even from a text field — it is the universal
+ * palette shortcut and nothing else may claim it). `/` also opens it, but ONLY
+ * when the user is NOT typing in a field, so a slash inside an input, a textarea
+ * or a contenteditable types a slash. Pass `slash: false` to bind ⌘K alone.
+ *
+ * That second rule is why chat needs no exception written for it. Its composer is
+ * a TEXTAREA, so the global `/` never fires there and the composer's own prompts
+ * popover keeps the key it has. The same rule makes a `/` typed into the palette's
+ * own input a literal slash. There is no precedence to encode — the one condition
+ * already answers all three, and the instinct to add an exception would be adding
+ * dead code.
+ *
+ * One hook, so every surface that hosts the palette shares identical behaviour
+ * instead of a divergent inline listener each. It moved here from hanzo.app,
+ * which is where it was already correct.
+ */
+const react_1 = require("react");
+function isEditable(target) {
+    const el = target;
+    if (!el || typeof HTMLElement === "undefined" || !(el instanceof HTMLElement))
+        return false;
+    const tag = el.tagName;
+    return tag === "INPUT" || tag === "TEXTAREA" || tag === "SELECT" || el.isContentEditable;
+}
+function useCommandK(onTrigger, opts) {
+    const slash = opts?.slash !== false;
+    (0, react_1.useEffect)(() => {
+        const onKey = (e) => {
+            const cmdK = (e.metaKey || e.ctrlKey) && !e.altKey && e.key.toLowerCase() === "k";
+            const slashKey = slash && e.key === "/" && !e.metaKey && !e.ctrlKey && !e.altKey && !isEditable(e.target);
+            if (cmdK || slashKey) {
+                e.preventDefault();
+                onTrigger();
+            }
+        };
+        window.addEventListener("keydown", onKey);
+        return () => window.removeEventListener("keydown", onKey);
+    }, [onTrigger, slash]);
+}

package/dist/product/useCommandK.d.ts

@@ -0,0 +1,4 @@
+export declare function useCommandK(onTrigger: () => void, opts?: {
+    slash?: boolean;
+}): void;
+//# sourceMappingURL=useCommandK.d.ts.map

package/dist/product/useCommandK.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCommandK.d.ts","sourceRoot":"","sources":["../../src/product/useCommandK.ts"],"names":[],"mappings":"AA8BA,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAenF"}

package/dist/product/useCommandK.js

@@ -0,0 +1,44 @@
+'use client';
+/**
+ * useCommandK — the ONE keybinding for the command palette.
+ *
+ * ⌘K / Ctrl-K always toggles (even from a text field — it is the universal
+ * palette shortcut and nothing else may claim it). `/` also opens it, but ONLY
+ * when the user is NOT typing in a field, so a slash inside an input, a textarea
+ * or a contenteditable types a slash. Pass `slash: false` to bind ⌘K alone.
+ *
+ * That second rule is why chat needs no exception written for it. Its composer is
+ * a TEXTAREA, so the global `/` never fires there and the composer's own prompts
+ * popover keeps the key it has. The same rule makes a `/` typed into the palette's
+ * own input a literal slash. There is no precedence to encode — the one condition
+ * already answers all three, and the instinct to add an exception would be adding
+ * dead code.
+ *
+ * One hook, so every surface that hosts the palette shares identical behaviour
+ * instead of a divergent inline listener each. It moved here from hanzo.app,
+ * which is where it was already correct.
+ */
+import { useEffect } from "react";
+function isEditable(target) {
+    const el = target;
+    if (!el || typeof HTMLElement === "undefined" || !(el instanceof HTMLElement))
+        return false;
+    const tag = el.tagName;
+    return tag === "INPUT" || tag === "TEXTAREA" || tag === "SELECT" || el.isContentEditable;
+}
+export function useCommandK(onTrigger, opts) {
+    const slash = opts?.slash !== false;
+    useEffect(() => {
+        const onKey = (e) => {
+            const cmdK = (e.metaKey || e.ctrlKey) && !e.altKey && e.key.toLowerCase() === "k";
+            const slashKey = slash && e.key === "/" && !e.metaKey && !e.ctrlKey && !e.altKey && !isEditable(e.target);
+            if (cmdK || slashKey) {
+                e.preventDefault();
+                onTrigger();
+            }
+        };
+        window.addEventListener("keydown", onKey);
+        return () => window.removeEventListener("keydown", onKey);
+    }, [onTrigger, slash]);
+}
+//# sourceMappingURL=useCommandK.js.map

package/dist/product/useCommandK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCommandK.js","sourceRoot":"","sources":["../../src/product/useCommandK.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAEZ;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAEjC,SAAS,UAAU,CAAC,MAA0B;IAC5C,MAAM,EAAE,GAAG,MAA4B,CAAA;IACvC,IAAI,CAAC,EAAE,IAAI,OAAO,WAAW,KAAK,WAAW,IAAI,CAAC,CAAC,EAAE,YAAY,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3F,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAA;IACtB,OAAO,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,QAAQ,IAAI,EAAE,CAAC,iBAAiB,CAAA;AAC1F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAqB,EAAE,IAA0B;IAC3E,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,KAAK,CAAA;IACnC,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,CAAC,CAAgB,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,CAAA;YACjF,MAAM,QAAQ,GACZ,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YAC1F,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;gBACrB,CAAC,CAAC,cAAc,EAAE,CAAA;gBAClB,SAAS,EAAE,CAAA;YACb,CAAC;QACH,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACzC,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAC3D,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;AACxB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/ui",
-  "version": "8.0.57",
+  "version": "8.0.58",
   "type": "module",
   "description": "Hanzo UI — the one canonical Hanzo component library, on @hanzo/gui + @hanzo/design. ONE substrate: every component renders through @hanzo/gui primitives, so the same import works on web, native (expo) and desktop (Tauri). Self-contained (theme.css), presentational, host-agnostic, clean-room.",
   "exports": {