v1.0.1 — Dep-bump security release

v1.0.1 — 2026-05-15 — Dep-bump security release

Resolves Dependabot alerts inherited from the AIWander/hands → AIWander/AI-Hands
mirror-rename on 2026-05-15. No feature changes.

Resolved vulnerabilities

• HIGH: openssl 0.10.78 → 0.10.79 (GHSA-xp3w-r5p5-63rr) — undefined behavior
  in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs.
• MODERATE: openssl 0.10.78 → 0.10.79 (GHSA-xv59-967r-8726) — heap buffer
  overflow when encrypting with AES key-wrap-with-padding. Same bump as the
  HIGH alert above; one openssl-sys minor bump resolves both.
• LOW: lru 0.12.5 → 0.16.4 (GHSA-rhfx-m35p-ff5j) — IterMut violates
  Stacked Borrows by invalidating an internal HashMap pointer (unsound, not
  yet exploited). Required bumping rqrr 0.7 → 0.10 since rqrr 0.7.1 pinned
  lru ^0.12; rqrr 0.10.1 depends on lru ^0.16 and the public API surface
  used by AI-Hands (PreparedImage::prepare_from_greyscale, detect_grids,
  Grid::decode) is unchanged.

Build

• Both Windows targets rebuilt cleanly with cargo check --release passing.
• x64 hands.exe: 22.55 MB (vs v1.0.0 23.65 MB).
• ARM64 hands.exe: 19.01 MB (vs v1.0.0 19.95 MB).

v1.0.0 — AI-Hands launch

v1.0.0 — 2026-05-15 — AI-Hands launch

Rebrand of AIWander/hands → AIWander/AI-Hands. Same Rust codebase, fresh
versioning. The hands.exe binary name and hands:* MCP tool prefix are
unchanged — existing MCP configs in Claude Desktop, Claude Code, Cowork,
Codex CLI, Gemini CLI, LM Studio keep working without edits.

New in this release

• New tool: vision_screenshot_hidden_window — always-PrintWindow API
  captures a window's pixels without bringing it to the foreground. Replaces
  the behind=true mode of window_screenshot.
• window_title parameter on hands_capture — focus a named window via
  UIA before routing the capture.
• offset_x/offset_y on hands_click — when non-zero, every rung of
  the 7-rung click ladder resolves the element by its native method then
  coord-clicks at bbox.center + offset. When both zero, ref/selector
  click is preserved on rungs 1-4 for reliability.

Deprecation markers (handlers preserved)

• find_and_click → use hands_click (offsets now available on every rung)
• retry_click → use browser_click with retry option (coming in next browser-mcp release)
• read_screen_text → use vision_screenshot_ocr (optional window_title via hands_capture)
• type_into_window → use hands_type (already includes focus verification and chunked typing)
• window_screenshot (default mode) → use vision_screenshot; for hidden-window capture use vision_screenshot_hidden_window

Note on versioning

This is v1.0.0 of AIWander/AI-Hands, the renamed successor repo. The previous
repo (AIWander/hands) reached v1.3.5 before the rename; that history is
preserved in this repo's git log but v1.x.x tags have been stripped so the
tag list starts clean at v1.0.0. The codebase here is the v1.3.5 baseline
plus today's source improvements layered on top.

---