SMART-on-FHIR app: EHR/standalone launch, PKCE + server-side token exchange, FHIR R4 read (Patient/Condition/MedicationRequest/AllergyIntolerance/Observation/ DocumentReference) w/ Bundle pagination, 4 AI actions (summarize patient / draft note / extract problems&meds / ask). PHI stays server-side, never logged, read-only. 109 tests. On published @hanzo/ai@0.2.0. CI step added.