This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+11 more
Summary
AI summaryCtrl+C reliably stops configure wizard dead‑terminal issue and new OAuth flexibility plus “About mureo” menu are added.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds provider callback port and token-endpoint auth style for plugin OAuth Adds provider callback port and token-endpoint auth style for plugin OAuth Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Low |
Adds "About mureo" menu in configure with version and extension details Adds "About mureo" menu in configure with version and extension details Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Low |
Adds GET /api/about endpoint for programmatic about information Adds GET /api/about endpoint for programmatic about information Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Low |
Skips bare mureo MCP registration for multi‑account backends in agency installs Skips bare mureo MCP registration for multi‑account backends in agency installs Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Fixes Ctrl+C dead terminal issue during configure sessions Fixes Ctrl+C dead terminal issue during configure sessions Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Fixes macOS picker prompts to follow configure locale Fixes macOS picker prompts to follow configure locale Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Fixes plugin-credentials card race and ensures pre-fill of saved non‑secret values Fixes plugin-credentials card race and ensures pre-fill of saved non‑secret values Source: llm_adapter@2026-06-13 Confidence: high |
— |
Full changelog
Plugin OAuth flexibility for stricter providers, an "About mureo" menu in configure, and the definitive fix for the dead-terminal Ctrl+C problem during configure sessions.
Added
- Provider callback port + token-endpoint auth style for plugin OAuth (#220, #221) — plugins can declare the pre-registered loopback callback port and the token-endpoint authentication style their provider expects, so authorization-code flows work with consoles that pin both.
- Skip bare mureo MCP registration for multi-account backends (#222, #225) — agency installs no longer get the bare
mureoMCP entry the backend supersedes. - "About mureo" menu in configure (#229, #232, #233) — logo, installed mureo version, and every installed extension package with its version. Entry-point-based discovery (deduplicated, fault-isolated per entry point) via
GET /api/about; the tab is pinned as the last nav item, extension tabs slot in above it.
Fixed
- Ctrl+C dead terminal during configure (#227, #230, #234) — cooked mode is forced before the wait and re-asserted every second during it, so a raw-mode leak from plugin code mid-session self-heals within a tick and Ctrl+C reliably stops the wizard.
- macOS picker prompts follow the configure locale (#228, #231) — locale-keyed baked AppleScript prompts (en/ja) selected by the server-side session locale; the zero-injection design is unchanged.
- Plugin-credentials card race + pre-fill (#223, #224, #226) — duplicate renders deduplicated; saved non-secret values pre-fill the form.
Full Changelog: https://github.com/logly/mureo/compare/v0.9.31...v0.9.32
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About logly/mureo
Framework for AI agents (Claude Code, Cursor, Codex, Gemini) to operate Google Ads, Meta Ads, and Search Console. Grounded in a local STRATEGY.md — not metric-chasing. Defense-in-depth security, local-first. Apache 2.0.
Related context
Related tools
Beta — feedback welcome: [email protected]