the face is Zen, and it ships from @hanzo/font

One family. Font stacks name Zen and fall back to the native faces, tokens
name the role rather than a face, and the packages that used to supply a
face now point at @hanzo/font.

Self-hosted @font-face blocks are removed rather than renamed: rewriting the
family in one would leave a src pointing at a file this repo no longer ships.
@hanzo/font carries the binaries and declares the faces, so the local copies
go with the declaration that used them.

Comments naming a face we no longer use are deleted, not reworded.

Co-authored-by: Hanzo Dev <[email protected]>

LLM.md

@@ -468,7 +468,7 @@ reported that a build with `@hanzo/design` absent "emits a bare unresolved
 class, one `pnpm install` away. It does not. Removing the package and building
 was tried: Vite's postcss-import **hard-fails**,
 `[vite:css] [postcss] ENOENT: no such file or directory, open
-'@hanzo/design/styles.css'`, exit 1. The token layer cannot silently disappear
+'@hanzo/font/css'`, exit 1. The token layer cannot silently disappear
 from this build. What was actually true is narrower: the dev tree had not been
 installed, so `tokens.test.ts` could not run. It passes once deps are present.
 
@@ -551,7 +551,7 @@ below this repo, and one is already recorded above under 0.2.15):
 findings have been fixed IN @hanzo/design 0.3.0, so the workarounds are gone and
 this surface takes the system's answer.
 
-- **ONE import: `@hanzo/design/styles.css`.** `app.css` cherry-picked four of the
+- **ONE import: `@hanzo/font/css`.** `app.css` cherry-picked four of the
   nine token groups, so `--z-*`, `--shadow-*`, `--space-*`, `--font-*` and the
   element defaults did not exist here at all. Nothing broke visibly, because an
   unresolved `var()` paints nothing and reports no error — that silence is the

apps/web/src/app.css

@@ -29,7 +29,7 @@
  * the package (two variable woff2, SIL OFL-1.1), so tokens/fonts.css makes no
  * third-party request and the sign-in path can take the typeface along with
  * the colours. */
-@import '@hanzo/design/styles.css';
+@import '@hanzo/font/css';
 
 :root {
   color-scheme: dark;
@@ -650,7 +650,7 @@ select.hanzo-id-input option {
 }
 .hanzo-id-device-prompt strong { color: var(--text-primary); }
 .hanzo-id-device-code {
-  font-family: var(--font-mono);
+  font-family: Zen Mono, ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", monospace;
   font-size: var(--text-xl);
   letter-spacing: var(--tracking-widest);
   text-transform: uppercase;
@@ -669,7 +669,7 @@ select.hanzo-id-input option {
 }
 .hanzo-id-codebox {
   font: inherit;
-  font-family: var(--font-mono);
+  font-family: Zen Mono, ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", monospace;
   font-size: var(--text-2xl);
   text-align: center;
   text-transform: uppercase;
@@ -733,7 +733,7 @@ select.hanzo-id-input option {
   background: var(--white-05);
   border: 1px solid var(--white-10);
   border-radius: var(--radius-sm);
-  font-family: var(--font-mono);
+  font-family: Zen Mono, ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", monospace;
   letter-spacing: var(--tracking-widest);
   word-break: break-all;
 }
@@ -839,7 +839,7 @@ select.hanzo-id-input option {
   color: var(--muted-foreground);
   font-size: var(--text-sm);
   margin: -8px 0 0;
-  font-family: var(--font-mono);
+  font-family: Zen Mono, ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", monospace;
 }
 
 .hanzo-id-onboarding-actions { display: flex; gap: 10px; flex-wrap: wrap; }
@@ -847,7 +847,7 @@ select.hanzo-id-input option {
 
 .hanzo-id-summary { display: grid; grid-template-columns: auto 1fr; gap: 8px 16px; margin: 0; }
 .hanzo-id-summary dt { color: var(--muted-foreground); font-size: var(--text-sm); }
-.hanzo-id-summary dd { margin: 0; font-size: var(--text-sm); font-family: var(--font-mono); }
+.hanzo-id-summary dd { margin: 0; font-size: var(--text-sm); font-family: Zen Mono, ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", monospace; }
 
 /* Consent step */
 .hanzo-id-consent { display: flex; flex-direction: column; gap: 16px; }

pnpm-workspace.yaml

@@ -4,6 +4,9 @@ packages:
 
 allowBuilds:
   esbuild: true
+  sharp: set this to true or false
+  tiny-secp256k1: set this to true or false
+  workerd: set this to true or false
 
 # Security overrides: force patched transitives (Dependabot alerts).
 #   esbuild <0.28.1  → GHSA-gv7w-rqvm-qjhr (high), GHSA-g7r4-m6w7-qqqr (low)