hanzo-dev
3ab5ae053c
- pnpm overrides pin every vulnerable transitive to its advisory's exact first-patched version, scoped to the advisory's own vulnerable range so no dependency is dragged across a major it didn't need (criticals: form-data 4.0.6, handlebars 4.7.9, protobufjs 7.5.5). - vitest < 3.2.6 is a critical (CVE fix floor) with no 0.x/1.x backport — forced major to ^3.2.6 in every package. Test scripts unify on `vitest run` (aci/ai ran bare watch mode). tools' vscode mock alias becomes absolute (vitest 3 dropped relative alias resolution). - packages/ai otel family 1.x → 2.x (core <2.8.0 advisory covers all 1.x): resourceFromAttributes, ATTR_* semconv, constructor spanProcessors. The previously-uncollectable telemetry suite now runs: ai 31 tests (was 16). - direct bumps: vite ^6.4.3 (site), esbuild ^0.25.8 (mcp), uuid ^11.1.1 (tools). packages/ai/package-lock.json deleted — stray npm lockfile in a pnpm workspace, carried 24 of the alerts. - ci: test step filtered @hanzo/tools but the package is @hanzo/cli-tools — the suite never ran in CI. Fixed; 87 tests now gate (behind the existing continue-on-error). pnpm 9 reads onlyBuiltDependencies from package.json, not pnpm-workspace.yaml — mirrored so native build scripts stay allowlisted. Verified: browser 243/243 + e2e 30/30 + build; aci 29/29; ai 31/31; cli-tools 87/87; site builds on vite 6; mcp builds on esbuild 0.25.
52 lines
1.1 KiB
JSON
52 lines
1.1 KiB
JSON
{
|
|
"name": "@hanzo/aci",
|
|
"version": "1.0.0",
|
|
"description": "Hanzo Agent Computer Interface - Cross-platform automation for AI agents",
|
|
"main": "dist/index.js",
|
|
"type": "module",
|
|
"scripts": {
|
|
"build": "tsc",
|
|
"dev": "tsc --watch",
|
|
"test": "vitest run",
|
|
"lint": "eslint src --ext .ts",
|
|
"prepublishOnly": "npm run build"
|
|
},
|
|
"keywords": [
|
|
"automation",
|
|
"agent",
|
|
"computer",
|
|
"interface",
|
|
"cross-platform",
|
|
"ai",
|
|
"robot"
|
|
],
|
|
"author": "Hanzo AI",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"jsautogui": "^2.0.9",
|
|
"@nut-tree-fork/nut-js": "^4.2.6",
|
|
"robotjs": "^0.6.0",
|
|
"sharp": "^0.33.5",
|
|
"tesseract.js": "^5.1.1"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^20.10.5",
|
|
"typescript": "^5.3.3",
|
|
"vitest": "^3.2.6",
|
|
"eslint": "^8.56.0",
|
|
"@typescript-eslint/eslint-plugin": "^6.19.0",
|
|
"@typescript-eslint/parser": "^6.19.0"
|
|
},
|
|
"engines": {
|
|
"node": ">=18.0.0"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/hanzoai/aci.git"
|
|
},
|
|
"homepage": "https://hanzo.ai",
|
|
"bugs": {
|
|
"url": "https://github.com/hanzoai/aci/issues"
|
|
}
|
|
}
|