This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryMCP tool commands and analyst context now enforce predefined ledger categories, preventing arbitrary values.
Full changelog
Fixes
- MCP: 카테고리 강제 적용 —
add_balance,add_flow,add_monthly툴 설명과 zod 스키마에 허용 카테고리 목록을 명시. Claude가 임의 카테고리를 사용하지 않고ledger-categories.ts에 정의된 값만 사용하도록 강제.- Balance 카테고리:
cash,savings,housing_sub,usd_cash,cash_other,domestic_stock,overseas_stock,real_estate,pension,vehicle,deposit,asset_other,credit_card,short_term_other,loan,long_term_other - Flow 카테고리:
salary,business,dividends,interest,income_other,personal,insurance,phone,utilities,rent,maintenance,loan_repayment,expense_other
- Balance 카테고리:
- MCP:
setup_statusanalyst_context에 카테고리 가이드 추가 — 대화 시작 시 로드되는 컨텍스트에도 유효 카테고리 목록을 포함해 이중으로 강제.
Breaking Changes
- Removed ability to use arbitrary categories in `add_balance`, `add_flow`, `add_monthly` commands; only predefined values from `ledger-categories.ts` are accepted.
- Analyst context `setup_status` now includes and enforces the same category whitelist, doubling enforcement.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About evan-moon/firma
Local-first CLI asset tracker for overseas stock investors with Claude Desktop MCP integration. 13 tools for portfolio tracking, net worth snapshots, cash flow analysis, and market research (earnings, insider trades, SEC filings)
Related context
Related tools
Beta — feedback welcome: [email protected]