- pnpm overrides pin every vulnerable transitive to its advisory's exact first-patched version, scoped to the advisory's own vulnerable range so no dependency is dragged across a major it didn't need (criticals: form-data 4.0.6, handlebars 4.7.9, protobufjs 7.5.5). - vitest < 3.2.6 is a critical (CVE fix floor) with no 0.x/1.x backport — forced major to ^3.2.6 in every package. Test scripts unify on `vitest run` (aci/ai ran bare watch mode). tools' vscode mock alias becomes absolute (vitest 3 dropped relative alias resolution). - packages/ai otel family 1.x → 2.x (core <2.8.0 advisory covers all 1.x): resourceFromAttributes, ATTR_* semconv, constructor spanProcessors. The previously-uncollectable telemetry suite now runs: ai 31 tests (was 16). - direct bumps: vite ^6.4.3 (site), esbuild ^0.25.8 (mcp), uuid ^11.1.1 (tools). packages/ai/package-lock.json deleted — stray npm lockfile in a pnpm workspace, carried 24 of the alerts. - ci: test step filtered @hanzo/tools but the package is @hanzo/cli-tools — the suite never ran in CI. Fixed; 87 tests now gate (behind the existing continue-on-error). pnpm 9 reads onlyBuiltDependencies from package.json, not pnpm-workspace.yaml — mirrored so native build scripts stay allowlisted. Verified: browser 243/243 + e2e 30/30 + build; aci 29/29; ai 31/31; cli-tools 87/87; site builds on vite 6; mcp builds on esbuild 0.25.
Hanzo.app - AI Development Platform Gateway
Central hub for downloading and accessing Hanzo AI across all platforms.
🚀 Quick Start
# Install dependencies (using pnpm)
pnpm install
# Start development server
pnpm dev
# Build for production
pnpm build
# Preview production build
pnpm preview
📦 Build Output
When you run pnpm build, the static files are generated in the dist directory:
dist/
├── index.html # Main landing page
└── src/
└── dev.html # Dev CLI landing page
📱 Available Platforms
- Desktop Apps: Windows, macOS, Linux
- Mobile Apps: iOS, Android
- Browser Extensions: Chrome, Firefox, Edge, Safari
- IDE Extensions: VS Code, JetBrains
- CLI Tools: Dev CLI (
@hanzo/dev), MCP Server (@hanzo/mcp) - Cloud Platform: cloud.hanzo.ai
🛠️ Development
Prerequisites
- Node.js 18+
- pnpm (install with
npm install -g pnpm)
Available Scripts
pnpm dev # Start dev server on port 3000
pnpm build # Build static site to dist/
pnpm preview # Preview built site on port 3001
pnpm clean # Clean dist directory
pnpm clean:all # Clean everything (dist, node_modules, lock file)
pnpm test # Run Playwright tests
pnpm test:ui # Run tests with UI
Testing
# Install Playwright browsers (first time only)
pnpm exec playwright install chromium
# Run tests
pnpm test
Deployment
The site can be deployed to any static hosting service. The dist directory contains all the files needed.
Vercel
pnpm build
vercel --prod ./dist
Netlify
pnpm build
netlify deploy --dir=dist --prod
GitHub Pages
pnpm build
# Push dist directory to gh-pages branch
📄 Pages
/- Main download hub for all Hanzo products/src/dev.html- Dev CLI specific landing page
🎨 Design
- Monochromatic black and white theme
- Hanzo logo integrated in header
- Responsive grid layout
- Smooth animations on scroll