Skip to content

v2.0.1

Choose a tag to compare

@github-actions github-actions released this 04 Nov 08:34
· 11 commits to main since this release

v2.0.1

The wrapper-core release. hb-rest runs on anyapi-to-mcp
by default: the package owns the outbound policy and the request, while the wrapper surface
stays exactly where it was.

Changed

  • Wrapper transport is the anyapi-to-mcp core unless HB_WRAP_CORE=legacy (or
    KUANG_WRAP_CORE) is set. IPC channels, bridge routes, MCP tool names, the
    WrapRunResult shape and the <userData>/wrap layout are unchanged.
  • A wrapper that uses a feature the core cannot reproduce exactly stays on the original
    executor for that call, so one process serves old and new wrappers with no file migration.
  • Recipe rendering and credential redaction live in one shared module
    (src/main/wrap/render.ts), so a fix cannot land in one core and miss the other.
  • An oversized response on the core is refused as RESPONSE_TOO_LARGE instead of being
    truncated, and a core dry run reports header names only — every value is <redacted>.

Added

  • HB_USER_DATA_DIR (with the KUANG_USER_DATA_DIR fallback) points a build at a different
    profile, so a dev run and an installed build no longer fight over the single-instance lock.
  • npm run dev:isolated starts a second instance with its own profile and bridge port and
    prints the matching MCP client config.

Fixed

  • A dry-run preview now includes the query string. The core keeps the query out of the plan's
    URL, so previews were showing a request without its parameters.
  • A policy refusal keeps the code the wrapper surface publishes: a private or literal address
    is BLOCKED_ADDRESS and an unresolvable host is DNS_LOOKUP_FAILED, rather than every
    case collapsing into BLOCKED_HOST.

Full changelog: https://github.com/hyperbolictonic/hypagon/blob/main/CHANGELOG.md