@hanzo/ui 8.0.57 → 8.0.59

package/README.md

@@ -114,6 +114,98 @@ import { registerField } from '@hanzo/ui/data'
 registerField('rating', { Display: MyStars, Input: MyStarPicker })
 ```
 
+## Analytics — one flag, and the components report themselves
+
+```tsx
+import { Hanzo } from '@hanzo/ui'
+
+<Hanzo analytics={{ product: 'console', ingestKey: process.env.NEXT_PUBLIC_EVENT_INGEST_KEY }}>
+  <App />
+</Hanzo>
+```
+
+That is the entire wiring. Every click, form change, submit and route change
+inside the tree arrives on the ONE front door (`POST /v1/event`) annotated with
+the component it happened on — no `onClick` handler anywhere reports anything,
+and no call site changes:
+
+```jsonc
+{
+  "event": "$click",
+  "$el": "card/button[Save]",      // the significant-node trail, root→leaf
+  "$role": "button",
+  "$component": "button",          // from the data-slot every primitive carries
+  "$name": "Save"
+}
+```
+
+Component names are real **in production**. Every primitive here stamps a
+`data-slot` through one helper (`slot()`), and the capture engine reads it — so
+attribution does not depend on React fiber owners, which a production build
+minifies away. A component that wants a better name than its slot says so once,
+on itself: `data-hz-name="SaveButton"` outranks everything.
+
+### What it is made of — one of each
+
+| Concern | Package | There is exactly one |
+|---|---|---|
+| Client + wire | [`@hanzo/event`](../../pkgs/event) | endpoint `POST /v1/event`, batched, beacon-on-unload |
+| Capture engine | [`@hanzo/observe`](../../pkgs/observe) | delegated listeners, semantic annotation, redaction |
+| Provider + consent | `@hanzogui/telemetry` | `<TelemetryProvider/>`, which `analytics` renders |
+
+`analytics` is a **prop, not a default**. Mounting a component library must
+never start a network conversation the app did not ask for: without it `<Hanzo>`
+renders no provider, installs no listener and sends nothing.
+
+### It cannot double-count
+
+An app that already mounts `<TelemetryProvider/>` itself leaves `analytics`
+off — but if both are mounted, the events still do not double. The capture
+engine installs *delegated* listeners on a root, so two engines on one root
+would report every interaction twice; a page-wide claim (`Symbol.for`, so
+duplicate copies of the package in one bundle still see each other) gives the
+root to the first engine and leaves any later one inert. Both providers also
+resolve the same client, so there is one session and one stream either way.
+
+### Privacy
+
+Consent decides whether any of it runs: Global Privacy Control, Do Not Track,
+and a stored choice a consent banner records — which outranks the browser signal
+in **both** directions, because that is what explicit means. Beyond that:
+
+- **Input values are withheld.** `$input`/`$change` carry the field's kind and
+  value length, never the typed text.
+- **Sensitive fields are never captured at all** — password, email, card, cvv,
+  token, ssn — not even a length.
+- **`data-hz-private`** on any element excludes its whole subtree.
+
+### One ingest key
+
+`ingestKey` is a publishable `pk-…` — write-only, safe in a bundle, minted per
+org with `POST /v1/keys {"type":"publishable"}`. Omit it and the client reads
+`NEXT_PUBLIC_EVENT_INGEST_KEY` from the build env, which is the spelling the
+fleet already carries end to end (KMS holds `deploy/EVENT_INGEST_KEY`; the
+Dockerfile takes it as a build-arg and re-exports it with the `NEXT_PUBLIC_`
+prefix Next needs to inline it). A surface with no key reports only for whoever
+is signed in and silently drops every logged-out visitor — the door refuses an
+unattributable write rather than filing it where its owner cannot read it.
+
+For a page with no build step at all, the same client ships as a script tag:
+`@hanzo/event/hz.js`, with `data-ingest-key="pk-…"`.
+
+### Naming a moment the components cannot see
+
+Autocapture reports what was clicked; it cannot know that a click *was* a
+checkout. Curated events live on `@hanzo/ui/product`, one closed verb set over
+one event name, on the same client and the same stream:
+
+```tsx
+import { useEmit, InstrumentSurface } from '@hanzo/ui/product'
+
+const emit = useEmit()
+emit({ component: 'PlanCard', action: 'select', id: 'pro' })
+```
+
 ## Design principles
 
 - **One home, no duplication** — components are extracted, never copied. The record layer's source of truth stays in `@hanzo/data`; `@hanzo/ui` composes it.

package/dist/product/Palette.cjs

@@ -0,0 +1,65 @@
+'use client';"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Palette = Palette;
+const jsx_runtime_1 = require("react/jsx-runtime");
+/**
+ * Palette — the ⌘K bar, once, for every Hanzo surface.
+ *
+ * hanzo.app, console and chat each grew their own: three lists of what can be
+ * run, all hand-written, already disagreeing with each other and with the API.
+ * This is the component half of ending that. The other half is `GET /v1/commands`,
+ * which projects every operation the cloud answers out of the one route table —
+ * so a surface passes that list in and stops maintaining one.
+ *
+ * It is composed from `CommandDialog`, not from a hand-rolled Dialog around a
+ * bare `Command`. That distinction is the whole history: the stock dialog used to
+ * render `<Command>` with none of the palette's props forwarded, so a host could
+ * not read the highlighted row and therefore could not draw a preview beside the
+ * list — and hanzo.app rebuilt the dialog by hand for exactly that reason. The
+ * forwarding landed upstream in this package and named collapsing the hand-rolled
+ * palettes as the follow-up. This is that follow-up, so the hand-rolled shape does
+ * not come back here under a new name.
+ *
+ * Props in, callbacks out, like everything else in this layer: no transport, no
+ * store, no routing. It does not fetch the commands, does not run them, and does
+ * not know what a project or an org is. `onRun` receives the Op and the surface
+ * decides whether that means an HTTP call or a function in the page — which is
+ * why a route command and a local command are one type (see `match.ts`).
+ *
+ * The right-hand slot is `children`, and it is why a shared bar costs no surface
+ * its personality: hanzo.app keeps its live project preview and console keeps its
+ * `>` AI mode by passing them, not by forking this.
+ *
+ * Filtering is `survivors`. The safe-methods-browse rule, the per-group cap and
+ * the empty-query behaviour all live in `match.ts` as pure functions, so
+ * `shouldFilter` is off and the Command primitive is left holding the cursor and
+ * the view — which is also what makes the rule testable without a DOM.
+ */
+const react_1 = require("react");
+const gui_1 = require("@hanzo/gui");
+const gui_2 = require("../backends/gui/index.cjs");
+const match_1 = require("./match.cjs");
+function Palette({ open, onOpenChange, ops, onRun, active, onActive, search: controlled, onSearch, placeholder = "Search commands…", empty = "No results found.", limit, children, footer, height = 320, title = "Search commands", }) {
+    const [own, setOwn] = (0, react_1.useState)("");
+    const search = controlled ?? own;
+    const setSearch = (s) => {
+        setOwn(s);
+        onSearch?.(s);
+    };
+    const groups = (0, react_1.useMemo)(() => (0, match_1.survivors)(ops, search, limit), [ops, search, limit]);
+    return ((0, jsx_runtime_1.jsxs)(gui_2.CommandDialog, { open: open, onOpenChange: onOpenChange, title: title, description: placeholder, value: active, onValueChange: onActive, shouldFilter: false, children: [(0, jsx_runtime_1.jsx)(gui_2.CommandInput, { value: search, onValueChange: setSearch, placeholder: placeholder, color: "$color", placeholderTextColor: "$color11" }), (0, jsx_runtime_1.jsxs)(gui_1.XStack, { minH: height, children: [(0, jsx_runtime_1.jsxs)(gui_2.CommandList, { maxH: height, width: children ? "50%" : "100%", borderRightWidth: children ? 1 : 0, borderColor: "$borderColor", py: "$1", children: [groups.length === 0 && ((0, jsx_runtime_1.jsx)(gui_2.CommandEmpty, { children: (0, jsx_runtime_1.jsx)(gui_1.SizableText, { color: "$color11", children: empty }) })), groups.map(([group, items]) => ((0, jsx_runtime_1.jsx)(gui_2.CommandGroup, { heading: group, children: items.map((op) => ((0, jsx_runtime_1.jsxs)(gui_2.CommandItem, { value: op.id, onSelect: () => onRun(op), gap: "$2", children: [op.icon, (0, jsx_runtime_1.jsxs)(gui_1.XStack, { flex: 1, items: "center", gap: "$2", overflow: "hidden", children: [(0, jsx_runtime_1.jsx)(gui_1.SizableText, { numberOfLines: 1, shrink: 0, children: op.label }), op.hint ? ((0, jsx_runtime_1.jsx)(gui_1.SizableText, { numberOfLines: 1, flex: 1, fontSize: "$1", color: "$color11", children: op.hint })) : null] }), (0, jsx_runtime_1.jsx)(Method, { of: op }), op.end] }, op.id))) }, group)))] }), children ? (0, jsx_runtime_1.jsx)(gui_1.YStack, { width: "50%", children: children }) : null] }), footer ? ((0, jsx_runtime_1.jsx)(gui_1.XStack, { items: "center", gap: "$4", borderTopWidth: 1, borderColor: "$borderColor", px: "$3", py: "$2", children: footer })) : null] }));
+}
+/**
+ * The method, at the end of the row, for route commands only.
+ *
+ * It is the rule made visible rather than decoration: GET is what you reached by
+ * browsing, anything else is what you reached by naming it exactly, and somebody
+ * about to press ↵ on `platform apps-rollback` should be able to see which
+ * without reading the docs. A local command has no method and gets no tag.
+ */
+function Method({ of }) {
+    if (of.method === undefined)
+        return null;
+    return ((0, jsx_runtime_1.jsx)(gui_1.SizableText, { shrink: 0, fontFamily: "$mono", fontSize: 10, letterSpacing: 0.4, color: of.method === match_1.SAFE ? "$color11" : "$color", children: of.method }));
+}

package/dist/product/Palette.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Palette — the ⌘K bar, once, for every Hanzo surface.
+ *
+ * hanzo.app, console and chat each grew their own: three lists of what can be
+ * run, all hand-written, already disagreeing with each other and with the API.
+ * This is the component half of ending that. The other half is `GET /v1/commands`,
+ * which projects every operation the cloud answers out of the one route table —
+ * so a surface passes that list in and stops maintaining one.
+ *
+ * It is composed from `CommandDialog`, not from a hand-rolled Dialog around a
+ * bare `Command`. That distinction is the whole history: the stock dialog used to
+ * render `<Command>` with none of the palette's props forwarded, so a host could
+ * not read the highlighted row and therefore could not draw a preview beside the
+ * list — and hanzo.app rebuilt the dialog by hand for exactly that reason. The
+ * forwarding landed upstream in this package and named collapsing the hand-rolled
+ * palettes as the follow-up. This is that follow-up, so the hand-rolled shape does
+ * not come back here under a new name.
+ *
+ * Props in, callbacks out, like everything else in this layer: no transport, no
+ * store, no routing. It does not fetch the commands, does not run them, and does
+ * not know what a project or an org is. `onRun` receives the Op and the surface
+ * decides whether that means an HTTP call or a function in the page — which is
+ * why a route command and a local command are one type (see `match.ts`).
+ *
+ * The right-hand slot is `children`, and it is why a shared bar costs no surface
+ * its personality: hanzo.app keeps its live project preview and console keeps its
+ * `>` AI mode by passing them, not by forking this.
+ *
+ * Filtering is `survivors`. The safe-methods-browse rule, the per-group cap and
+ * the empty-query behaviour all live in `match.ts` as pure functions, so
+ * `shouldFilter` is off and the Command primitive is left holding the cursor and
+ * the view — which is also what makes the rule testable without a DOM.
+ */
+import { type ReactNode } from "react";
+import { type Op } from "./match.js";
+export type PaletteProps = {
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    /** Everything runnable, local commands and route commands alike. */
+    ops: Op[];
+    /** Run one. The surface decides what running it means. */
+    onRun: (op: Op) => void;
+    /**
+     * The highlighted row's id (controlled). A surface drawing a preview beside the
+     * list needs to know what is highlighted.
+     */
+    active?: string;
+    onActive?: (id: string) => void;
+    /** The typed query. Uncontrolled unless a surface wants to read it. */
+    search?: string;
+    onSearch?: (search: string) => void;
+    placeholder?: string;
+    /** Shown when nothing survives the search. */
+    empty?: ReactNode;
+    /** Rows per group. See `survivors` — a render budget, not a preference. */
+    limit?: number;
+    /** The right-hand panel. Absent, the list takes the full width. */
+    children?: ReactNode;
+    /** The bar along the bottom — key hints, usually. */
+    footer?: ReactNode;
+    /** How tall the list is. It scrolls inside this. */
+    height?: number;
+    /** The dialog's accessible name. */
+    title?: string;
+};
+export declare function Palette({ open, onOpenChange, ops, onRun, active, onActive, search: controlled, onSearch, placeholder, empty, limit, children, footer, height, title, }: PaletteProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=Palette.d.ts.map

package/dist/product/Palette.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Palette.d.ts","sourceRoot":"","sources":["../../src/product/Palette.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,KAAK,SAAS,EAAqB,MAAM,OAAO,CAAA;AAWzD,OAAO,EAAmB,KAAK,EAAE,EAAE,MAAM,SAAS,CAAA;AAElD,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,OAAO,CAAA;IACb,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAA;IACrC,oEAAoE;IACpE,GAAG,EAAE,EAAE,EAAE,CAAA;IACT,0DAA0D;IAC1D,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,IAAI,CAAA;IACvB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mEAAmE;IACnE,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,qDAAqD;IACrD,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,wBAAgB,OAAO,CAAC,EACtB,IAAI,EACJ,YAAY,EACZ,GAAG,EACH,KAAK,EACL,MAAM,EACN,QAAQ,EACR,MAAM,EAAE,UAAU,EAClB,QAAQ,EACR,WAAgC,EAChC,KAA2B,EAC3B,KAAK,EACL,QAAQ,EACR,MAAM,EACN,MAAY,EACZ,KAAyB,GAC1B,EAAE,YAAY,2CAqFd"}

package/dist/product/Palette.js

@@ -0,0 +1,63 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Palette — the ⌘K bar, once, for every Hanzo surface.
+ *
+ * hanzo.app, console and chat each grew their own: three lists of what can be
+ * run, all hand-written, already disagreeing with each other and with the API.
+ * This is the component half of ending that. The other half is `GET /v1/commands`,
+ * which projects every operation the cloud answers out of the one route table —
+ * so a surface passes that list in and stops maintaining one.
+ *
+ * It is composed from `CommandDialog`, not from a hand-rolled Dialog around a
+ * bare `Command`. That distinction is the whole history: the stock dialog used to
+ * render `<Command>` with none of the palette's props forwarded, so a host could
+ * not read the highlighted row and therefore could not draw a preview beside the
+ * list — and hanzo.app rebuilt the dialog by hand for exactly that reason. The
+ * forwarding landed upstream in this package and named collapsing the hand-rolled
+ * palettes as the follow-up. This is that follow-up, so the hand-rolled shape does
+ * not come back here under a new name.
+ *
+ * Props in, callbacks out, like everything else in this layer: no transport, no
+ * store, no routing. It does not fetch the commands, does not run them, and does
+ * not know what a project or an org is. `onRun` receives the Op and the surface
+ * decides whether that means an HTTP call or a function in the page — which is
+ * why a route command and a local command are one type (see `match.ts`).
+ *
+ * The right-hand slot is `children`, and it is why a shared bar costs no surface
+ * its personality: hanzo.app keeps its live project preview and console keeps its
+ * `>` AI mode by passing them, not by forking this.
+ *
+ * Filtering is `survivors`. The safe-methods-browse rule, the per-group cap and
+ * the empty-query behaviour all live in `match.ts` as pure functions, so
+ * `shouldFilter` is off and the Command primitive is left holding the cursor and
+ * the view — which is also what makes the rule testable without a DOM.
+ */
+import { useMemo, useState } from "react";
+import { SizableText, XStack, YStack } from "@hanzo/gui";
+import { CommandDialog, CommandEmpty, CommandGroup, CommandInput, CommandItem, CommandList, } from "../backends/gui/index.js";
+import { SAFE, survivors } from "./match.js";
+export function Palette({ open, onOpenChange, ops, onRun, active, onActive, search: controlled, onSearch, placeholder = "Search commands…", empty = "No results found.", limit, children, footer, height = 320, title = "Search commands", }) {
+    const [own, setOwn] = useState("");
+    const search = controlled ?? own;
+    const setSearch = (s) => {
+        setOwn(s);
+        onSearch?.(s);
+    };
+    const groups = useMemo(() => survivors(ops, search, limit), [ops, search, limit]);
+    return (_jsxs(CommandDialog, { open: open, onOpenChange: onOpenChange, title: title, description: placeholder, value: active, onValueChange: onActive, shouldFilter: false, children: [_jsx(CommandInput, { value: search, onValueChange: setSearch, placeholder: placeholder, color: "$color", placeholderTextColor: "$color11" }), _jsxs(XStack, { minH: height, children: [_jsxs(CommandList, { maxH: height, width: children ? "50%" : "100%", borderRightWidth: children ? 1 : 0, borderColor: "$borderColor", py: "$1", children: [groups.length === 0 && (_jsx(CommandEmpty, { children: _jsx(SizableText, { color: "$color11", children: empty }) })), groups.map(([group, items]) => (_jsx(CommandGroup, { heading: group, children: items.map((op) => (_jsxs(CommandItem, { value: op.id, onSelect: () => onRun(op), gap: "$2", children: [op.icon, _jsxs(XStack, { flex: 1, items: "center", gap: "$2", overflow: "hidden", children: [_jsx(SizableText, { numberOfLines: 1, shrink: 0, children: op.label }), op.hint ? (_jsx(SizableText, { numberOfLines: 1, flex: 1, fontSize: "$1", color: "$color11", children: op.hint })) : null] }), _jsx(Method, { of: op }), op.end] }, op.id))) }, group)))] }), children ? _jsx(YStack, { width: "50%", children: children }) : null] }), footer ? (_jsx(XStack, { items: "center", gap: "$4", borderTopWidth: 1, borderColor: "$borderColor", px: "$3", py: "$2", children: footer })) : null] }));
+}
+/**
+ * The method, at the end of the row, for route commands only.
+ *
+ * It is the rule made visible rather than decoration: GET is what you reached by
+ * browsing, anything else is what you reached by naming it exactly, and somebody
+ * about to press ↵ on `platform apps-rollback` should be able to see which
+ * without reading the docs. A local command has no method and gets no tag.
+ */
+function Method({ of }) {
+    if (of.method === undefined)
+        return null;
+    return (_jsx(SizableText, { shrink: 0, fontFamily: "$mono", fontSize: 10, letterSpacing: 0.4, color: of.method === SAFE ? "$color11" : "$color", children: of.method }));
+}
+//# sourceMappingURL=Palette.js.map

package/dist/product/Palette.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Palette.js","sourceRoot":"","sources":["../../src/product/Palette.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAkB,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAExD,OAAO,EACL,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,WAAW,GACZ,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAW,MAAM,SAAS,CAAA;AAiClD,MAAM,UAAU,OAAO,CAAC,EACtB,IAAI,EACJ,YAAY,EACZ,GAAG,EACH,KAAK,EACL,MAAM,EACN,QAAQ,EACR,MAAM,EAAE,UAAU,EAClB,QAAQ,EACR,WAAW,GAAG,kBAAkB,EAChC,KAAK,GAAG,mBAAmB,EAC3B,KAAK,EACL,QAAQ,EACR,MAAM,EACN,MAAM,GAAG,GAAG,EACZ,KAAK,GAAG,iBAAiB,GACZ;IACb,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,UAAU,IAAI,GAAG,CAAA;IAChC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE;QAC9B,MAAM,CAAC,CAAC,CAAC,CAAA;QACT,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;IACf,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;IAEjF,OAAO,CACL,MAAC,aAAa,IACZ,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,YAAY,EAC1B,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,QAAQ,EACvB,YAAY,EAAE,KAAK,aAEnB,KAAC,YAAY,IACX,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,SAAS,EACxB,WAAW,EAAE,WAAW,EACxB,KAAK,EAAC,QAAQ,EACd,oBAAoB,EAAC,UAAU,GAC/B,EACF,MAAC,MAAM,IAAC,IAAI,EAAE,MAAM,aAClB,MAAC,WAAW,IACV,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAChC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAClC,WAAW,EAAC,cAAc,EAC1B,EAAE,EAAC,IAAI,aAEN,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CACtB,KAAC,YAAY,cACX,KAAC,WAAW,IAAC,KAAK,EAAC,UAAU,YAAE,KAAK,GAAe,GACtC,CAChB,EACA,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAC9B,KAAC,YAAY,IAAa,OAAO,EAAE,KAAK,YACrC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CACjB,MAAC,WAAW,IAAa,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,EAAC,IAAI,aACvE,EAAE,CAAC,IAAI,EAQR,MAAC,MAAM,IAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAC,QAAQ,EAAC,GAAG,EAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,aACxD,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,YACrC,EAAE,CAAC,KAAK,GACG,EACb,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CACT,KAAC,WAAW,IAAC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAC,IAAI,EAAC,KAAK,EAAC,UAAU,YACnE,EAAE,CAAC,IAAI,GACI,CACf,CAAC,CAAC,CAAC,IAAI,IACD,EACT,KAAC,MAAM,IAAC,EAAE,EAAE,EAAE,GAAI,EACjB,EAAE,CAAC,GAAG,KApBS,EAAE,CAAC,EAAE,CAqBT,CACf,CAAC,IAxBe,KAAK,CAyBT,CAChB,CAAC,IACU,EACb,QAAQ,CAAC,CAAC,CAAC,KAAC,MAAM,IAAC,KAAK,EAAC,KAAK,YAAE,QAAQ,GAAU,CAAC,CAAC,CAAC,IAAI,IACnD,EACR,MAAM,CAAC,CAAC,CAAC,CACR,KAAC,MAAM,IACL,KAAK,EAAC,QAAQ,EACd,GAAG,EAAC,IAAI,EACR,cAAc,EAAE,CAAC,EACjB,WAAW,EAAC,cAAc,EAC1B,EAAE,EAAC,IAAI,EACP,EAAE,EAAC,IAAI,YAEN,MAAM,GACA,CACV,CAAC,CAAC,CAAC,IAAI,IACM,CACjB,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,EAAE,EAAE,EAAc;IAChC,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACxC,OAAO,CACL,KAAC,WAAW,IACV,MAAM,EAAE,CAAC,EACT,UAAU,EAAC,OAAO,EAClB,QAAQ,EAAE,EAAE,EACZ,aAAa,EAAE,GAAG,EAClB,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,YAEhD,EAAE,CAAC,MAAM,GACE,CACf,CAAA;AACH,CAAC"}

package/dist/product/index.cjs

@@ -111,6 +111,13 @@ __exportStar(require("./FadeIn.cjs"), exports);
 __exportStar(require("./Field.cjs"), exports);
 __exportStar(require("./HanzoMark.cjs"), exports);
 __exportStar(require("./PageHeader.cjs"), exports);
+// Palette — the ONE ⌘K bar, plus its opener. The list it renders is not written
+// down anywhere: cloud publishes `GET /v1/commands`, the fifth projection of the
+// one route table, and a surface passes it in. `match.ts` holds the matching
+// rule (safe methods browse, unsafe methods must be named) as pure functions.
+__exportStar(require("./Palette.cjs"), exports);
+__exportStar(require("./match.cjs"), exports);
+__exportStar(require("./useCommandK.cjs"), exports);
 __exportStar(require("./PrimaryButton.cjs"), exports);
 __exportStar(require("./ProductIcon.cjs"), exports);
 __exportStar(require("./ProviderLogo.cjs"), exports);

package/dist/product/index.d.ts

@@ -31,6 +31,9 @@ export * from './FadeIn.js';
 export * from './Field.js';
 export * from './HanzoMark.js';
 export * from './PageHeader.js';
+export * from './Palette.js';
+export * from './match.js';
+export * from './useCommandK.js';
 export * from './PrimaryButton.js';
 export * from './ProductIcon.js';
 export * from './ProviderLogo.js';

package/dist/product/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAaA,cAAc,UAAU,CAAA;AAKxB,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAGjB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAA;AAK/D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AASjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAKvB,cAAc,QAAQ,CAAA;AAKtB,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAK5B,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAOzB,cAAc,cAAc,CAAA;AAK5B,cAAc,YAAY,CAAA;AAO1B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAI7B,cAAc,cAAc,CAAA;AAG5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AASvB,cAAc,UAAU,CAAA;AAKxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAaA,cAAc,UAAU,CAAA;AAKxB,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAGjB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,SAAS,CAAA;AAK/D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AASjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAKvB,cAAc,QAAQ,CAAA;AAKtB,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAK5B,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAOzB,cAAc,cAAc,CAAA;AAK5B,cAAc,YAAY,CAAA;AAO1B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAI7B,cAAc,cAAc,CAAA;AAG5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAM5B,cAAc,WAAW,CAAA;AACzB,cAAc,SAAS,CAAA;AACvB,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AASvB,cAAc,UAAU,CAAA;AAKxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAA"}

package/dist/product/index.js

@@ -82,6 +82,13 @@ export * from './FadeIn.js';
 export * from './Field.js';
 export * from './HanzoMark.js';
 export * from './PageHeader.js';
+// Palette — the ONE ⌘K bar, plus its opener. The list it renders is not written
+// down anywhere: cloud publishes `GET /v1/commands`, the fifth projection of the
+// one route table, and a surface passes it in. `match.ts` holds the matching
+// rule (safe methods browse, unsafe methods must be named) as pure functions.
+export * from './Palette.js';
+export * from './match.js';
+export * from './useCommandK.js';
 export * from './PrimaryButton.js';
 export * from './ProductIcon.js';
 export * from './ProviderLogo.js';

package/dist/product/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,wEAAwE;AACxE,EAAE;AACF,kFAAkF;AAClF,6EAA6E;AAE7E,kFAAkF;AAClF,gEAAgE;AAChE,cAAc,UAAU,CAAA;AAExB,2EAA2E;AAC3E,+EAA+E;AAC/E,4CAA4C;AAC5C,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAEjB,6EAA6E;AAC7E,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,SAAS,CAAA;AAE/D,+EAA+E;AAC/E,8EAA8E;AAC9E,qCAAqC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AAEjC,gFAAgF;AAChF,6EAA6E;AAC7E,mFAAmF;AACnF,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,8DAA8D;AAC9D,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AAEtB,iFAAiF;AACjF,2EAA2E;AAC3E,8EAA8E;AAC9E,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAE5B,6EAA6E;AAC7E,yEAAyE;AACzE,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAEzB,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,mDAAmD;AACnD,cAAc,cAAc,CAAA;AAE5B,gFAAgF;AAChF,iFAAiF;AACjF,2EAA2E;AAC3E,cAAc,YAAY,CAAA;AAE1B,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,kFAAkF;AAClF,oBAAoB;AACpB,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAE7B,8EAA8E;AAC9E,sBAAsB;AACtB,cAAc,cAAc,CAAA;AAE5B,mEAAmE;AACnE,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,uEAAuE;AAEvE,iFAAiF;AACjF,kFAAkF;AAClF,kEAAkE;AAClE,cAAc,UAAU,CAAA;AAExB,sEAAsE;AACtE,+EAA+E;AAC/E,8EAA8E;AAC9E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAgB,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,wEAAwE;AACxE,EAAE;AACF,kFAAkF;AAClF,6EAA6E;AAE7E,kFAAkF;AAClF,gEAAgE;AAChE,cAAc,UAAU,CAAA;AAExB,2EAA2E;AAC3E,+EAA+E;AAC/E,4CAA4C;AAC5C,OAAO,EACL,MAAM,EACN,aAAa,EACb,SAAS,EACT,SAAS,IAAI,eAAe,EAC5B,QAAQ,EACR,OAAO,EACP,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,GACN,MAAM,UAAU,CAAA;AAEjB,6EAA6E;AAC7E,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,SAAS,CAAA;AAE/D,+EAA+E;AAC/E,8EAA8E;AAC9E,qCAAqC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,cAAc,mBAAmB,CAAA;AAEjC,gFAAgF;AAChF,6EAA6E;AAC7E,mFAAmF;AACnF,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,8DAA8D;AAC9D,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AAEtB,iFAAiF;AACjF,2EAA2E;AAC3E,8EAA8E;AAC9E,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAE5B,6EAA6E;AAC7E,yEAAyE;AACzE,qFAAqF;AACrF,cAAc,QAAQ,CAAA;AACtB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,WAAW,CAAA;AAEzB,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,mDAAmD;AACnD,cAAc,cAAc,CAAA;AAE5B,gFAAgF;AAChF,iFAAiF;AACjF,2EAA2E;AAC3E,cAAc,YAAY,CAAA;AAE1B,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,kFAAkF;AAClF,oBAAoB;AACpB,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAE7B,8EAA8E;AAC9E,sBAAsB;AACtB,cAAc,cAAc,CAAA;AAE5B,mEAAmE;AACnE,cAAc,gBAAgB,CAAA;AAC9B,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AACvB,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAE5B,gFAAgF;AAChF,iFAAiF;AACjF,6EAA6E;AAC7E,8EAA8E;AAC9E,cAAc,WAAW,CAAA;AACzB,cAAc,SAAS,CAAA;AACvB,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA;AACxB,cAAc,SAAS,CAAA;AAEvB,mFAAmF;AACnF,qFAAqF;AACrF,uEAAuE;AAEvE,iFAAiF;AACjF,kFAAkF;AAClF,kEAAkE;AAClE,cAAc,UAAU,CAAA;AAExB,sEAAsE;AACtE,+EAA+E;AAC/E,8EAA8E;AAC9E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAgB,MAAM,aAAa,CAAA"}

package/dist/product/instrument.cjs

@@ -7,8 +7,13 @@
 // `EmptyState` or `ThemeToggle` reports the SAME interaction vocabulary with
 // zero app code. Nothing to wire, nothing to remember, nothing to drift.
 //
-//   import { emit, useEmit, InstrumentSurface } from '@hanzo/ui'
-//   <InstrumentSurface name="billing">…</InstrumentSurface>   // optional context
+//   import { emit, useEmit, InstrumentSurface } from '@hanzo/ui/product'
+//   <InstrumentSurface value="billing">…</InstrumentSurface>   // optional context
+//
+// This is the CURATED half. `<Hanzo analytics>` already reports every click,
+// change, submit and route change on its own, annotated with the component it
+// happened on — what autocapture cannot know is that a click WAS a checkout.
+// That is what this names. Same client, same stream, same front door.
 //
 // ONE event name, structured properties — the taxonomy in @hanzo/event is a
 // CLOSED set, and its own rule for a product-specific moment is "the `action`

package/dist/product/instrument.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instrument.d.ts","sourceRoot":"","sources":["../../src/product/instrument.ts"],"names":[],"mappings":"AA6BA;kFACkF;AAClF,MAAM,MAAM,QAAQ,GAChB,OAAO,GACP,MAAM,GACN,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,MAAM,GACN,OAAO,CAAA;AAEX;+EAC+E;AAC/E,MAAM,WAAW,OAAO;IACtB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,QAAQ,CAAA;IAChB,yEAAyE;IACzE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX;;0CAEsC;IACtC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IACjC,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAOD;mEACmE;AACnE,eAAO,MAAM,iBAAiB,8CAA0B,CAAA;AAExD,iEAAiE;AACjE,eAAO,MAAM,UAAU,QAAO,MAAM,GAAG,SAAuC,CAAA;AAE9E;8EAC8E;AAC9E,wBAAgB,IAAI,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAQrC;AAED;gFACgF;AAChF,wBAAgB,OAAO,IAAI,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAM9C;AAED;;;;mFAImF;AACnF,wBAAgB,OAAO,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAO7D;AAED;;kCAEkC;AAClC,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,GAAG,SAAS,KAAG,MAA4B,CAAA"}
+{"version":3,"file":"instrument.d.ts","sourceRoot":"","sources":["../../src/product/instrument.ts"],"names":[],"mappings":"AAkCA;kFACkF;AAClF,MAAM,MAAM,QAAQ,GAChB,OAAO,GACP,MAAM,GACN,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,MAAM,GACN,OAAO,CAAA;AAEX;+EAC+E;AAC/E,MAAM,WAAW,OAAO;IACtB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,QAAQ,CAAA;IAChB,yEAAyE;IACzE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX;;0CAEsC;IACtC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IACjC,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAOD;mEACmE;AACnE,eAAO,MAAM,iBAAiB,8CAA0B,CAAA;AAExD,iEAAiE;AACjE,eAAO,MAAM,UAAU,QAAO,MAAM,GAAG,SAAuC,CAAA;AAE9E;8EAC8E;AAC9E,wBAAgB,IAAI,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAQrC;AAED;gFACgF;AAChF,wBAAgB,OAAO,IAAI,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAM9C;AAED;;;;mFAImF;AACnF,wBAAgB,OAAO,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAO7D;AAED;;kCAEkC;AAClC,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,GAAG,SAAS,KAAG,MAA4B,CAAA"}

package/dist/product/instrument.js

@@ -6,8 +6,13 @@
 // `EmptyState` or `ThemeToggle` reports the SAME interaction vocabulary with
 // zero app code. Nothing to wire, nothing to remember, nothing to drift.
 //
-//   import { emit, useEmit, InstrumentSurface } from '@hanzo/ui'
-//   <InstrumentSurface name="billing">…</InstrumentSurface>   // optional context
+//   import { emit, useEmit, InstrumentSurface } from '@hanzo/ui/product'
+//   <InstrumentSurface value="billing">…</InstrumentSurface>   // optional context
+//
+// This is the CURATED half. `<Hanzo analytics>` already reports every click,
+// change, submit and route change on its own, annotated with the component it
+// happened on — what autocapture cannot know is that a click WAS a checkout.
+// That is what this names. Same client, same stream, same front door.
 //
 // ONE event name, structured properties — the taxonomy in @hanzo/event is a
 // CLOSED set, and its own rule for a product-specific moment is "the `action`

package/dist/product/instrument.js.map

@@ -1 +1 @@
-{"version":3,"file":"instrument.js","sourceRoot":"","sources":["../../src/product/instrument.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,EAAE;AACF,iEAAiE;AACjE,kFAAkF;AAClF,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,gEAAgE;AAChE,0EAA0E;AAC1E,+EAA+E;AAC/E,8DAA8D;AAC9D,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,gFAAgF;AAChF,+CAA+C;AAE/C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAC9D,iFAAiF;AACjF,iFAAiF;AACjF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAoCnD;;4BAE4B;AAC5B,MAAM,cAAc,GAAG,aAAa,CAAqB,SAAS,CAAC,CAAA;AAEnE;mEACmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC,QAAQ,CAAA;AAExD,iEAAiE;AACjE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAuB,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAA;AAE9E;8EAC8E;AAC9E,MAAM,UAAU,IAAI,CAAC,CAAU;IAC7B,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE;QACzB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KAC7D,CAAC,CAAA;AACJ,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,OAAO;IACrB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,OAAO,WAAW,CAChB,CAAC,CAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAC9F,CAAC,OAAO,CAAC,CACV,CAAA;AACH,CAAC;AAED;;;;mFAImF;AACnF,MAAM,UAAU,OAAO,CAAC,QAAiB;IACvC,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,SAAS,CAAA;IACrE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5F,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,SAAS,CAAA;IACjC,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;kCAEkC;AAClC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAqB,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA"}
+{"version":3,"file":"instrument.js","sourceRoot":"","sources":["../../src/product/instrument.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,EAAE;AACF,yEAAyE;AACzE,mFAAmF;AACnF,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,gEAAgE;AAChE,0EAA0E;AAC1E,+EAA+E;AAC/E,8DAA8D;AAC9D,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,gFAAgF;AAChF,+CAA+C;AAE/C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAC9D,iFAAiF;AACjF,iFAAiF;AACjF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAoCnD;;4BAE4B;AAC5B,MAAM,cAAc,GAAG,aAAa,CAAqB,SAAS,CAAC,CAAA;AAEnE;mEACmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC,QAAQ,CAAA;AAExD,iEAAiE;AACjE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAuB,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAA;AAE9E;8EAC8E;AAC9E,MAAM,UAAU,IAAI,CAAC,CAAU;IAC7B,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE;QACzB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KAC7D,CAAC,CAAA;AACJ,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,OAAO;IACrB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,OAAO,WAAW,CAChB,CAAC,CAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAC9F,CAAC,OAAO,CAAC,CACV,CAAA;AACH,CAAC;AAED;;;;mFAImF;AACnF,MAAM,UAAU,OAAO,CAAC,QAAiB;IACvC,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,SAAS,CAAA;IACrE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5F,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,SAAS,CAAA;IACjC,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;kCAEkC;AAClC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAqB,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA"}

package/dist/product/match.cjs

@@ -0,0 +1,76 @@
+'use client';"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.survivors = exports.match = exports.SAFE = void 0;
+const command_logic_1 = require("../backends/gui/command.logic.cjs");
+/** The one method that is safe to stumble onto: no side effect, idempotent. */
+exports.SAFE = 'GET';
+/**
+ * Whether `op` survives `search`, and how well. `0` hides it.
+ *
+ * # Safe methods browse; unsafe methods must be named
+ *
+ * Typing "delete" into a bar holding 2,323 operations offers four dozen
+ * destructive fleet operations to somebody who wanted to delete a project. The
+ * rule that fixes it needs no second list and no curation, because the method is
+ * already in the registry and already means exactly this:
+ *
+ *   - GET matches fuzzily. It is safe and idempotent; browsing costs nothing.
+ *   - every other method needs an exact PREFIX of `group label` — the same
+ *     "service operation" a CLI would type. You cannot stumble onto
+ *     `platform apps-rollback`; you have to name it.
+ *
+ * One rule, over data already present, mapping onto the semantics the methods
+ * already carry.
+ *
+ * # An empty search hides every route, and that is not a shortcut
+ *
+ * With no query a fuzzy matcher matches everything, and everything is 2,323 rows
+ * the moment the dialog opens — which is not a list, it is a stalled browser and
+ * a scroll bar nobody can use. So the Run group is a SEARCH, not a browse: it is
+ * empty until you type, and what remains on open is the surface's own handful of
+ * local commands, which is what a person opening ⌘K with no query wants anyway.
+ *
+ * A local command has no method and is therefore always reachable — it is one of
+ * a few, declared by the surface, and there is nothing to protect anyone from.
+ */
+const match = (op, search) => {
+    const q = search.trim().toLowerCase();
+    const route = op.method !== undefined;
+    if (!q)
+        return route ? 0 : 1;
+    const named = `${op.group} ${op.label}`.toLowerCase();
+    if (route && op.method !== exports.SAFE)
+        return named.startsWith(q) ? 1 : 0;
+    return (0, command_logic_1.score)(named, q, op.hint ? [op.hint] : undefined);
+};
+exports.match = match;
+/**
+ * The ops that survive `search`, grouped for rendering: headings in the order the
+ * caller listed them, rows ranked within each, empty groups dropped.
+ *
+ * `limit` caps each group. A GET search for "list" still matches hundreds, and a
+ * palette that renders hundreds is the same stalled browser the empty query would
+ * be — the cap is what keeps one keystroke's cost bounded whatever was typed.
+ */
+const survivors = (ops, search, limit = 50) => {
+    const groups = new Map();
+    for (const op of ops) {
+        const rank = (0, exports.match)(op, search);
+        if (rank <= 0)
+            continue;
+        const got = groups.get(op.group);
+        if (got)
+            got.push([op, rank]);
+        else
+            groups.set(op.group, [[op, rank]]);
+    }
+    const out = [];
+    for (const [group, ranked] of groups) {
+        // Sort by rank, ties keeping the caller's order — a surface that ordered its
+        // projects by recency must not have that undone by a scoring tie.
+        ranked.sort((a, b) => b[1] - a[1]);
+        out.push([group, ranked.slice(0, limit).map(([op]) => op)]);
+    }
+    return out;
+};
+exports.survivors = survivors;

package/dist/product/match.d.ts

@@ -0,0 +1,78 @@
+/**
+ * What the ⌘K bar shows for what you typed, as one pure function.
+ *
+ * The bar's list is not hand-written any more. hanzo.app's cloud publishes
+ * `GET /v1/commands` — every operation the API answers, projected from the same
+ * route table the OpenAPI document, the MCP tools and the `hanzo` CLI come from —
+ * so a surface hands the whole list in and this decides what survives a search.
+ *
+ * That list is 2,323 operations, and that number is what makes the rule below
+ * more than a preference.
+ */
+import type { ReactNode } from 'react';
+/**
+ * One runnable thing in the bar.
+ *
+ * A command that names a route and a command that runs in the page are the SAME
+ * type here; only the surface's `onRun` tells them apart. `method` is what says
+ * which — it is present exactly when the command is an HTTP operation, and it is
+ * the only field the matching rule reads.
+ */
+export interface Op {
+    /** Stable identity. The registry's operationId, or a surface-local name. */
+    id: string;
+    /** The heading it files under — a service ("projects"), or a surface's own. */
+    group: string;
+    /** What it is called: the operation token ("deployments-list"), or a phrase. */
+    label: string;
+    /** One line of help. The operation's summary, when it has one. */
+    hint?: string;
+    /** The HTTP method, when this names a route. Absent means it runs in the page. */
+    method?: string;
+    /** Drawn at the start of the row. */
+    icon?: ReactNode;
+    /** Drawn at the end of the row — a status dot, a shortcut. */
+    end?: ReactNode;
+}
+/** The one method that is safe to stumble onto: no side effect, idempotent. */
+export declare const SAFE = "GET";
+/**
+ * Whether `op` survives `search`, and how well. `0` hides it.
+ *
+ * # Safe methods browse; unsafe methods must be named
+ *
+ * Typing "delete" into a bar holding 2,323 operations offers four dozen
+ * destructive fleet operations to somebody who wanted to delete a project. The
+ * rule that fixes it needs no second list and no curation, because the method is
+ * already in the registry and already means exactly this:
+ *
+ *   - GET matches fuzzily. It is safe and idempotent; browsing costs nothing.
+ *   - every other method needs an exact PREFIX of `group label` — the same
+ *     "service operation" a CLI would type. You cannot stumble onto
+ *     `platform apps-rollback`; you have to name it.
+ *
+ * One rule, over data already present, mapping onto the semantics the methods
+ * already carry.
+ *
+ * # An empty search hides every route, and that is not a shortcut
+ *
+ * With no query a fuzzy matcher matches everything, and everything is 2,323 rows
+ * the moment the dialog opens — which is not a list, it is a stalled browser and
+ * a scroll bar nobody can use. So the Run group is a SEARCH, not a browse: it is
+ * empty until you type, and what remains on open is the surface's own handful of
+ * local commands, which is what a person opening ⌘K with no query wants anyway.
+ *
+ * A local command has no method and is therefore always reachable — it is one of
+ * a few, declared by the surface, and there is nothing to protect anyone from.
+ */
+export declare const match: (op: Op, search: string) => number;
+/**
+ * The ops that survive `search`, grouped for rendering: headings in the order the
+ * caller listed them, rows ranked within each, empty groups dropped.
+ *
+ * `limit` caps each group. A GET search for "list" still matches hundreds, and a
+ * palette that renders hundreds is the same stalled browser the empty query would
+ * be — the cap is what keeps one keystroke's cost bounded whatever was typed.
+ */
+export declare const survivors: (ops: Op[], search: string, limit?: number) => Array<[string, Op[]]>;
+//# sourceMappingURL=match.d.ts.map

package/dist/product/match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"match.d.ts","sourceRoot":"","sources":["../../src/product/match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAItC;;;;;;;GAOG;AACH,MAAM,WAAW,EAAE;IACjB,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAA;IACV,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAA;IACb,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAA;IACb,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qCAAqC;IACrC,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,SAAS,CAAA;CAChB;AAED,+EAA+E;AAC/E,eAAO,MAAM,IAAI,QAAQ,CAAA;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,KAAK,GAAI,IAAI,EAAE,EAAE,QAAQ,MAAM,KAAG,MAQ9C,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,GAAI,KAAK,EAAE,EAAE,EAAE,QAAQ,MAAM,EAAE,cAAU,KAAG,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAiBrF,CAAA"}

package/dist/product/match.js

@@ -0,0 +1,72 @@
+'use client';import { score } from '../backends/gui/command.logic.js';
+/** The one method that is safe to stumble onto: no side effect, idempotent. */
+export const SAFE = 'GET';
+/**
+ * Whether `op` survives `search`, and how well. `0` hides it.
+ *
+ * # Safe methods browse; unsafe methods must be named
+ *
+ * Typing "delete" into a bar holding 2,323 operations offers four dozen
+ * destructive fleet operations to somebody who wanted to delete a project. The
+ * rule that fixes it needs no second list and no curation, because the method is
+ * already in the registry and already means exactly this:
+ *
+ *   - GET matches fuzzily. It is safe and idempotent; browsing costs nothing.
+ *   - every other method needs an exact PREFIX of `group label` — the same
+ *     "service operation" a CLI would type. You cannot stumble onto
+ *     `platform apps-rollback`; you have to name it.
+ *
+ * One rule, over data already present, mapping onto the semantics the methods
+ * already carry.
+ *
+ * # An empty search hides every route, and that is not a shortcut
+ *
+ * With no query a fuzzy matcher matches everything, and everything is 2,323 rows
+ * the moment the dialog opens — which is not a list, it is a stalled browser and
+ * a scroll bar nobody can use. So the Run group is a SEARCH, not a browse: it is
+ * empty until you type, and what remains on open is the surface's own handful of
+ * local commands, which is what a person opening ⌘K with no query wants anyway.
+ *
+ * A local command has no method and is therefore always reachable — it is one of
+ * a few, declared by the surface, and there is nothing to protect anyone from.
+ */
+export const match = (op, search) => {
+    const q = search.trim().toLowerCase();
+    const route = op.method !== undefined;
+    if (!q)
+        return route ? 0 : 1;
+    const named = `${op.group} ${op.label}`.toLowerCase();
+    if (route && op.method !== SAFE)
+        return named.startsWith(q) ? 1 : 0;
+    return score(named, q, op.hint ? [op.hint] : undefined);
+};
+/**
+ * The ops that survive `search`, grouped for rendering: headings in the order the
+ * caller listed them, rows ranked within each, empty groups dropped.
+ *
+ * `limit` caps each group. A GET search for "list" still matches hundreds, and a
+ * palette that renders hundreds is the same stalled browser the empty query would
+ * be — the cap is what keeps one keystroke's cost bounded whatever was typed.
+ */
+export const survivors = (ops, search, limit = 50) => {
+    const groups = new Map();
+    for (const op of ops) {
+        const rank = match(op, search);
+        if (rank <= 0)
+            continue;
+        const got = groups.get(op.group);
+        if (got)
+            got.push([op, rank]);
+        else
+            groups.set(op.group, [[op, rank]]);
+    }
+    const out = [];
+    for (const [group, ranked] of groups) {
+        // Sort by rank, ties keeping the caller's order — a surface that ordered its
+        // projects by recency must not have that undone by a scoring tie.
+        ranked.sort((a, b) => b[1] - a[1]);
+        out.push([group, ranked.slice(0, limit).map(([op]) => op)]);
+    }
+    return out;
+};
+//# sourceMappingURL=match.js.map

package/dist/product/match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"match.js","sourceRoot":"","sources":["../../src/product/match.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AA2BrD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,CAAA;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAM,EAAE,MAAc,EAAU,EAAE;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACrC,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,KAAK,SAAS,CAAA;IACrC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE5B,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAA;IACrD,IAAI,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnE,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AACzD,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAS,EAAE,MAAc,EAAE,KAAK,GAAG,EAAE,EAAyB,EAAE;IACxF,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAA;IACrD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC9B,IAAI,IAAI,IAAI,CAAC;YAAE,SAAQ;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;QAChC,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;;YACxB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACzC,CAAC;IACD,MAAM,GAAG,GAA0B,EAAE,CAAA;IACrC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,6EAA6E;QAC7E,kEAAkE;QAClE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAClC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/dist/product/useCommandK.cjs

@@ -0,0 +1,46 @@
+'use client';"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useCommandK = useCommandK;
+/**
+ * useCommandK — the ONE keybinding for the command palette.
+ *
+ * ⌘K / Ctrl-K always toggles (even from a text field — it is the universal
+ * palette shortcut and nothing else may claim it). `/` also opens it, but ONLY
+ * when the user is NOT typing in a field, so a slash inside an input, a textarea
+ * or a contenteditable types a slash. Pass `slash: false` to bind ⌘K alone.
+ *
+ * That second rule is why chat needs no exception written for it. Its composer is
+ * a TEXTAREA, so the global `/` never fires there and the composer's own prompts
+ * popover keeps the key it has. The same rule makes a `/` typed into the palette's
+ * own input a literal slash. There is no precedence to encode — the one condition
+ * already answers all three, and the instinct to add an exception would be adding
+ * dead code.
+ *
+ * One hook, so every surface that hosts the palette shares identical behaviour
+ * instead of a divergent inline listener each. It moved here from hanzo.app,
+ * which is where it was already correct.
+ */
+const react_1 = require("react");
+function isEditable(target) {
+    const el = target;
+    if (!el || typeof HTMLElement === "undefined" || !(el instanceof HTMLElement))
+        return false;
+    const tag = el.tagName;
+    return tag === "INPUT" || tag === "TEXTAREA" || tag === "SELECT" || el.isContentEditable;
+}
+function useCommandK(onTrigger, opts) {
+    const slash = opts?.slash !== false;
+    (0, react_1.useEffect)(() => {
+        const onKey = (e) => {
+            const cmdK = (e.metaKey || e.ctrlKey) && !e.altKey && e.key.toLowerCase() === "k";
+            const slashKey = slash && e.key === "/" && !e.metaKey && !e.ctrlKey && !e.altKey && !isEditable(e.target);
+            if (cmdK || slashKey) {
+                e.preventDefault();
+                onTrigger();
+            }
+        };
+        window.addEventListener("keydown", onKey);
+        return () => window.removeEventListener("keydown", onKey);
+    }, [onTrigger, slash]);
+}

package/dist/product/useCommandK.d.ts

@@ -0,0 +1,4 @@
+export declare function useCommandK(onTrigger: () => void, opts?: {
+    slash?: boolean;
+}): void;
+//# sourceMappingURL=useCommandK.d.ts.map

package/dist/product/useCommandK.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCommandK.d.ts","sourceRoot":"","sources":["../../src/product/useCommandK.ts"],"names":[],"mappings":"AA8BA,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAenF"}

package/dist/product/useCommandK.js

@@ -0,0 +1,44 @@
+'use client';
+/**
+ * useCommandK — the ONE keybinding for the command palette.
+ *
+ * ⌘K / Ctrl-K always toggles (even from a text field — it is the universal
+ * palette shortcut and nothing else may claim it). `/` also opens it, but ONLY
+ * when the user is NOT typing in a field, so a slash inside an input, a textarea
+ * or a contenteditable types a slash. Pass `slash: false` to bind ⌘K alone.
+ *
+ * That second rule is why chat needs no exception written for it. Its composer is
+ * a TEXTAREA, so the global `/` never fires there and the composer's own prompts
+ * popover keeps the key it has. The same rule makes a `/` typed into the palette's
+ * own input a literal slash. There is no precedence to encode — the one condition
+ * already answers all three, and the instinct to add an exception would be adding
+ * dead code.
+ *
+ * One hook, so every surface that hosts the palette shares identical behaviour
+ * instead of a divergent inline listener each. It moved here from hanzo.app,
+ * which is where it was already correct.
+ */
+import { useEffect } from "react";
+function isEditable(target) {
+    const el = target;
+    if (!el || typeof HTMLElement === "undefined" || !(el instanceof HTMLElement))
+        return false;
+    const tag = el.tagName;
+    return tag === "INPUT" || tag === "TEXTAREA" || tag === "SELECT" || el.isContentEditable;
+}
+export function useCommandK(onTrigger, opts) {
+    const slash = opts?.slash !== false;
+    useEffect(() => {
+        const onKey = (e) => {
+            const cmdK = (e.metaKey || e.ctrlKey) && !e.altKey && e.key.toLowerCase() === "k";
+            const slashKey = slash && e.key === "/" && !e.metaKey && !e.ctrlKey && !e.altKey && !isEditable(e.target);
+            if (cmdK || slashKey) {
+                e.preventDefault();
+                onTrigger();
+            }
+        };
+        window.addEventListener("keydown", onKey);
+        return () => window.removeEventListener("keydown", onKey);
+    }, [onTrigger, slash]);
+}
+//# sourceMappingURL=useCommandK.js.map

package/dist/product/useCommandK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCommandK.js","sourceRoot":"","sources":["../../src/product/useCommandK.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAEZ;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAEjC,SAAS,UAAU,CAAC,MAA0B;IAC5C,MAAM,EAAE,GAAG,MAA4B,CAAA;IACvC,IAAI,CAAC,EAAE,IAAI,OAAO,WAAW,KAAK,WAAW,IAAI,CAAC,CAAC,EAAE,YAAY,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3F,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAA;IACtB,OAAO,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,QAAQ,IAAI,EAAE,CAAC,iBAAiB,CAAA;AAC1F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAqB,EAAE,IAA0B;IAC3E,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,KAAK,CAAA;IACnC,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,KAAK,GAAG,CAAC,CAAgB,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,CAAA;YACjF,MAAM,QAAQ,GACZ,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YAC1F,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;gBACrB,CAAC,CAAC,cAAc,EAAE,CAAA;gBAClB,SAAS,EAAE,CAAA;YACb,CAAC;QACH,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACzC,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAC3D,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;AACxB,CAAC"}

package/dist/root.cjs

@@ -38,6 +38,7 @@ const jsx_runtime_1 = require("react/jsx-runtime");
  * this flag controls.
  */
 const gui_1 = require("@hanzo/gui");
+const telemetry_1 = require("@hanzogui/telemetry");
 const gui_config_1 = require("./gui-config.cjs");
 require("./styles.css");
 /** A stylesheet that did not reach the document is invisible until someone opens
@@ -58,10 +59,17 @@ const assertStylesheet = () => {
         'that does not process CSS imported from node_modules has dropped it. Import it ' +
         "directly instead: import '@hanzo/ui/styles.css'.");
 };
-const Hanzo = ({ children, theme = 'dark' }) => {
+const Hanzo = ({ children, theme = 'dark', analytics }) => {
     if (process.env.NODE_ENV !== 'production')
         assertStylesheet();
-    return ((0, jsx_runtime_1.jsx)(gui_1.GuiProvider, { config: gui_config_1.config, defaultTheme: theme, disableInjectCSS: true, children: children }));
+    const tree = ((0, jsx_runtime_1.jsx)(gui_1.GuiProvider, { config: gui_config_1.config, defaultTheme: theme, disableInjectCSS: true, children: children }));
+    // OUTSIDE the gui provider: capture is delegated at the document, so it does
+    // not need to be inside the styled tree, and an app that renders its own
+    // `<TelemetryProvider/>` above `<Hanzo>` then nests two providers of the same
+    // kind rather than interleaving them with the theme.
+    if (!analytics)
+        return tree;
+    return (0, jsx_runtime_1.jsx)(telemetry_1.TelemetryProvider, { ...(analytics === true ? {} : analytics), children: tree });
 };
 exports.Hanzo = Hanzo;
 exports.default = exports.Hanzo;

package/dist/root.d.ts

@@ -1,10 +1,35 @@
+import { type TelemetryConfig } from '@hanzogui/telemetry';
 import type { ReactNode } from 'react';
 import './styles.css';
 export type HanzoProps = {
     children?: ReactNode;
     /** Dark-first Hanzo identity. `light` retunes it. */
     theme?: 'dark' | 'light';
+    /**
+     * Interaction analytics for everything inside — OFF unless you ask.
+     *
+     *   <Hanzo analytics>                              // zero config
+     *   <Hanzo analytics={{ product: 'console' }}>     // named surface
+     *
+     * `true` is the whole setup: every click, form change, submit and route
+     * change inside this tree arrives on the ONE front door (`POST /v1/event`)
+     * annotated with the component it happened on — `card/button[Save]` — with
+     * input values withheld. Nothing to instrument at a call site.
+     *
+     * It is a PROP, not the default, because mounting a component library must
+     * never start a network conversation an app did not ask for. Off, this
+     * renders no provider, installs no listener and sends nothing.
+     *
+     * On, it is the one wiring: ONE client (@hanzo/event), ONE capture engine
+     * (@hanzo/observe), ONE endpoint, ONE publishable key — and consent decides
+     * whether any of it runs (Global Privacy Control, Do Not Track, and a stored
+     * choice a banner records, which outranks both). An app that already mounts
+     * `<TelemetryProvider/>` itself leaves this off; both would be the same
+     * client on the same stream, and the capture engine refuses a root another
+     * engine holds, so the events do not double either way.
+     */
+    analytics?: boolean | TelemetryConfig;
 };
-export declare const Hanzo: ({ children, theme }: HanzoProps) => import("react/jsx-runtime").JSX.Element;
+export declare const Hanzo: ({ children, theme, analytics }: HanzoProps) => import("react/jsx-runtime").JSX.Element;
 export default Hanzo;
 //# sourceMappingURL=root.d.ts.map

package/dist/root.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../src/root.tsx"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGtC,OAAO,cAAc,CAAA;AAErB,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CACzB,CAAA;AAqBD,eAAO,MAAM,KAAK,GAAI,qBAA8B,UAAU,4CAO7D,CAAA;AAED,eAAe,KAAK,CAAA"}
+{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../src/root.tsx"],"names":[],"mappings":"AAqCA,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGtC,OAAO,cAAc,CAAA;AAErB,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACxB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,eAAe,CAAA;CACtC,CAAA;AAqBD,eAAO,MAAM,KAAK,GAAI,gCAAyC,UAAU,4CAaxE,CAAA;AAED,eAAe,KAAK,CAAA"}

package/dist/root.js

@@ -35,6 +35,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * this flag controls.
  */
 import { GuiProvider } from '@hanzo/gui';
+import { TelemetryProvider } from '@hanzogui/telemetry';
 import { config } from './gui-config.js';
 import './styles.css';
 /** A stylesheet that did not reach the document is invisible until someone opens
@@ -55,10 +56,17 @@ const assertStylesheet = () => {
         'that does not process CSS imported from node_modules has dropped it. Import it ' +
         "directly instead: import '@hanzo/ui/styles.css'.");
 };
-export const Hanzo = ({ children, theme = 'dark' }) => {
+export const Hanzo = ({ children, theme = 'dark', analytics }) => {
     if (process.env.NODE_ENV !== 'production')
         assertStylesheet();
-    return (_jsx(GuiProvider, { config: config, defaultTheme: theme, disableInjectCSS: true, children: children }));
+    const tree = (_jsx(GuiProvider, { config: config, defaultTheme: theme, disableInjectCSS: true, children: children }));
+    // OUTSIDE the gui provider: capture is delegated at the document, so it does
+    // not need to be inside the styled tree, and an app that renders its own
+    // `<TelemetryProvider/>` above `<Hanzo>` then nests two providers of the same
+    // kind rather than interleaving them with the theme.
+    if (!analytics)
+        return tree;
+    return _jsx(TelemetryProvider, { ...(analytics === true ? {} : analytics), children: tree });
 };
 export default Hanzo;
 //# sourceMappingURL=root.js.map

package/dist/root.js.map

@@ -1 +1 @@
-{"version":3,"file":"root.js","sourceRoot":"","sources":["../src/root.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAGxC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,cAAc,CAAA;AAQrB;;;;;;qEAMqE;AACrE,IAAI,OAAO,GAAG,KAAK,CAAA;AACnB,MAAM,gBAAgB,GAAG,GAAG,EAAE;IAC5B,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAC3F,OAAO,GAAG,IAAI,CAAA;IACd,IAAI,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE;QAAE,OAAM;IACnG,MAAM,IAAI,KAAK,CACb,qFAAqF;QACnF,iFAAiF;QACjF,kDAAkD,CACrD,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,GAAG,MAAM,EAAc,EAAE,EAAE;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,gBAAgB,EAAE,CAAA;IAC7D,OAAO,CACL,KAAC,WAAW,IAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,kBAC/D,QAAQ,GACG,CACf,CAAA;AACH,CAAC,CAAA;AAED,eAAe,KAAK,CAAA"}
+{"version":3,"file":"root.js","sourceRoot":"","sources":["../src/root.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAwB,MAAM,qBAAqB,CAAA;AAG7E,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,cAAc,CAAA;AAgCrB;;;;;;qEAMqE;AACrE,IAAI,OAAO,GAAG,KAAK,CAAA;AACnB,MAAM,gBAAgB,GAAG,GAAG,EAAE;IAC5B,IAAI,OAAO,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAC3F,OAAO,GAAG,IAAI,CAAA;IACd,IAAI,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE;QAAE,OAAM;IACnG,MAAM,IAAI,KAAK,CACb,qFAAqF;QACnF,iFAAiF;QACjF,kDAAkD,CACrD,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,GAAG,MAAM,EAAE,SAAS,EAAc,EAAE,EAAE;IAC3E,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,gBAAgB,EAAE,CAAA;IAC7D,MAAM,IAAI,GAAG,CACX,KAAC,WAAW,IAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,kBAC/D,QAAQ,GACG,CACf,CAAA;IACD,6EAA6E;IAC7E,yEAAyE;IACzE,8EAA8E;IAC9E,qDAAqD;IACrD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,OAAO,KAAC,iBAAiB,OAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,YAAG,IAAI,GAAqB,CAAA;AACjG,CAAC,CAAA;AAED,eAAe,KAAK,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/ui",
-  "version": "8.0.57",
+  "version": "8.0.59",
   "type": "module",
   "description": "Hanzo UI — the one canonical Hanzo component library, on @hanzo/gui + @hanzo/design. ONE substrate: every component renders through @hanzo/gui primitives, so the same import works on web, native (expo) and desktop (Tauri). Self-contained (theme.css), presentational, host-agnostic, clean-room.",
   "exports": {