Repository navigation
v2.0.1
v2.0.1
The wrapper-core release. hb-rest runs on anyapi-to-mcp
by default: the package owns the outbound policy and the request, while the wrapper surface
stays exactly where it was.
Changed
- Wrapper transport is the
anyapi-to-mcpcore unlessHB_WRAP_CORE=legacy(or
KUANG_WRAP_CORE) is set. IPC channels, bridge routes, MCP tool names, the
WrapRunResultshape and the<userData>/wraplayout are unchanged. - A wrapper that uses a feature the core cannot reproduce exactly stays on the original
executor for that call, so one process serves old and new wrappers with no file migration. - Recipe rendering and credential redaction live in one shared module
(src/main/wrap/render.ts), so a fix cannot land in one core and miss the other. - An oversized response on the core is refused as
RESPONSE_TOO_LARGEinstead of being
truncated, and a core dry run reports header names only — every value is<redacted>.
Added
HB_USER_DATA_DIR(with theKUANG_USER_DATA_DIRfallback) points a build at a different
profile, so a dev run and an installed build no longer fight over the single-instance lock.npm run dev:isolatedstarts a second instance with its own profile and bridge port and
prints the matching MCP client config.
Fixed
- A dry-run preview now includes the query string. The core keeps the query out of the plan's
URL, so previews were showing a request without its parameters. - A policy refusal keeps the code the wrapper surface publishes: a private or literal address
isBLOCKED_ADDRESSand an unresolvable host isDNS_LOOKUP_FAILED, rather than every
case collapsing intoBLOCKED_HOST.
Full changelog: https://github.com/hyperbolictonic/hypagon/blob/main/CHANGELOG.md