Summon

A field guide to the sovereign macOS launcher — every screen, captioned. Local-first, on-device AI, no account or telemetry.

brew install --cask naklitechie/tap/summon

Drawn from the product's UX reference. Type / to search, Esc to clear.

Launcher

The compact ⌥Space bar and its results — the front door.

Launcher & results

Launcher & results

⌥Space opens the bar — type to fuzzy-match apps, files, calculator, unit conversion, snippets, emoji and more. ↑↓ to navigate, ↩ to run, ⌘K for actions.

Alt-tab switcher

Alt-tab switcher

A launcher-native window switcher — running apps, filtered as you type, focused with a keystroke.

On-device AI

Answers come from Apple Foundation Models on your Mac; safe actions run instantly, destructive ones stage for one-click Accept. A question can be answered on-device or by searching the web — a keyless Wikipedia floor, or your own SearXNG — and only your query ever leaves.

Actions — safe runs, destructive confirms

Actions — safe runs, destructive confirms

Ask Summon to do something and it runs the safe, reversible ones instantly ('Volume set to 30%'), while destructive ones (empty trash, delete) stage for one-click Accept. The harness acts and reports truthfully — the AI never claims an action it didn't run.

Answer vs. action — staged

Answer vs. action — staged

A destructive action ('empty the trash') stages in amber for you to Accept or Reject. Summon never auto-runs it, and never claims it did one it only proposed — safe, reversible actions just run.

Web search & answer

Web search & answer

Ask a question and Summon can search the web — a keyless Wikipedia floor by default, or your own SearXNG on Apple's container runtime (no Docker Desktop) — then compose the answer on-device. Only your query leaves, and the first search asks permission.

The AI ladder

The AI ladder

Summon detects the best available on-device model — Apple Foundation Models first — and states the rung honestly. It is detected, never configured.

Quick Fix — rewrite in place

Quick Fix — rewrite in place

Hand selected text to the on-device model; the rewrite is staged for review before it replaces anything.

Degraded, still working

Degraded, still working

With no AI model available, search still works; the strip says so plainly, and AI returns the moment a rung is detected.

Clipboard

Local clipboard history, private by default.

Clipboard history

Clipboard history

⌥⇧C opens local clipboard history — text, images, HTML and RTF, all on this Mac, with an ignore list for sensitive apps.

First run & states

What a new user sees, and how Summon stays honest when there is nothing — or something is wrong.

First run — the empty state

First run — the empty state

A brand-new, zero-data Summon: the bar is ready before you've added anything, so nothing feels broken on day one.

Empty · error · degraded

Empty · error · degraded

The honest state gallery — how Summon looks when there is nothing to show, something failed, or the AI is unavailable.

Extend & automate

The agent face, and the (deferred) extension surface.

The agent face — CLI + socket

The agent face — CLI + socket

The same core behind a second door: a local CLI and a default-off UNIX socket. Every mutating action is journaled with actor= and staged for review, never auto-applied.

Extension permissions

Extension permissions

Every extension capability is an explicit, reviewable grant — no ambient access. (Extensions are a development surface, not shipped in v0.6.)

Design

The tokens the product — and this guide — are built from.

Design language

Design language

The dark-glass palette, accent, and type scale the whole app is built from — the same tokens theme this guide.