Skip to content

Tags: hanzoai/python-sdk

Tags

v2.4.0

Toggle v2.4.0's commit message
security: fix 3 HIGH + 3 MEDIUM findings from red team review

- H-1: guard negative abs_off in obj_bytes() (buffer read bypass)
- H-2: remove CERT_NONE from ZapClient TLS (MITM protection)
- H-3: add MAX_MESSAGE_SIZE check in ZapServer (OOM DoS)
- M-5: log exceptions instead of bare pass in server
- L-1: validate ZAP version in Message.parse()
- L-2: wrap req_id at u32 boundary in CloudClient

v2.3.0

Toggle v2.3.0's commit message
feat: add CloudClient and rewrite wire protocol for Rust compatibility

- Add CloudClient for luxfi/zap binary protocol (TCP + auto-TLS)
- Rewrite wire.py Builder/ObjectBuilder to match Rust single-buffer architecture
- Fix response field offsets (CLOUD_RESP_BODY=4, CLOUD_RESP_ERROR=12)
- Use signed i32 relative offsets from absolute positions
- 28 unit tests + cross-language integration test passing

hanzo-mcp-v0.15.0

Toggle hanzo-mcp-v0.15.0's commit message
hanzo-mcp v0.15.0 — HIP-0300 bidirectional action parity

v0.14.0

Toggle v0.14.0's commit message
feat(hanzo-mcp): 100% MCP/ZAP protocol parity with method pass-throug…

…h v0.14.0

- Add handle_method parameter to ZapServer for full MCP protocol parity
- Server routes resources/list, resources/read, prompts/list, prompts/get through ZAP
- All MCP methods work identically over ZAP binary WebSocket transport
- Matches Node @hanzo/mcp v2.4.0 ZAP parity implementation

hanzo-mcp-v0.13.1

Toggle hanzo-mcp-v0.13.1's commit message
feat(zap): ZAP WebSocket server for browser extension discovery

v2.2.0

Toggle v2.2.0's commit message
fix(ci): add hanzo-tools-ui to pyright exclude list

New package was missing from the pyright exclude, causing
"Cannot instantiate abstract class" error in CI lint.

hanzo-tools-computer-v0.5.3

Toggle hanzo-tools-computer-v0.5.3's commit message
fix(screen): write captures to file instead of returning inline base64

Screenshots and session frames are now saved to ~/.hanzo/screen/ and
the tool returns the file path. Prevents blowing up context with ~52K
chars of base64 per capture.

hanzo-tools-browser-v0.4.3

Toggle hanzo-tools-browser-v0.4.3's commit message
fix(browser): fix extension result passthrough, add DOM actions

- Fix result normalization: non-dict values no longer crash with **spread
- Add 20+ DOM actions to extension_actions set (get/set HTML/text,
  attributes, styles, classes, mutations, localStorage, cookies, etc.)
- Bump hanzo-tools-browser 0.4.3, hanzo-mcp 0.12.6

hanzo-mcp-v0.12.6

Toggle hanzo-mcp-v0.12.6's commit message
fix(browser): fix extension result passthrough, add DOM actions

- Fix result normalization: non-dict values no longer crash with **spread
- Add 20+ DOM actions to extension_actions set (get/set HTML/text,
  attributes, styles, classes, mutations, localStorage, cookies, etc.)
- Bump hanzo-tools-browser 0.4.3, hanzo-mcp 0.12.6

hanzo-mcp-v0.12.3

Toggle hanzo-mcp-v0.12.3's commit message
Release hanzo-mcp 0.12.3