This release includes 3 breaking changes for platform teams planning a safe upgrade.
Published 1mo
LLM Frameworks
✓ No known CVEs patched
✓ No known CVEs patched in this version
Affected surfaces
auth
breaking_upgrade
Summary
AI summaryBroad release touches Highlights, chore, client, and ui.
Full changelog
Highlights
- Bridge options passthrough runtime (#729): the socket handshake now sanitises the
auth.optionsbag (flat primitives only — nested objects, arrays, non-finite numbers, and prototype-polluting keys are all dropped) and the relay forwards it toStartChatFnasbridgeOptions. Host apps can look up their own keys (e.g. MulmoClaude readsdefaultRolefor new bridge sessions). - New exports (for host-side testing + inspection):
sanitiseOptions(raw)from./socket,resolveDefaultRole(opts, getRole, fallback, logger, transportId)from./relay. Not re-exported from the barrel — internal helpers exposed for unit tests. - Dep tightening:
@mulmobridge/protocolbumped to^0.1.4so the newBridgeOptionstype resolves on consumer installs.
📦 npm: @mulmobridge/[email protected]
What's Changed
- feat(tabs): overlay origin badge on role icon; bold unread labels by @snakajima in https://github.com/receptron/mulmoclaude/pull/699
- fix(ui): tighten top toolbar layout by @snakajima in https://github.com/receptron/mulmoclaude/pull/700
- chore(roles): remove Role Manager built-in role by @snakajima in https://github.com/receptron/mulmoclaude/pull/702
- feat(role): user-owned selector + session-role header by @snakajima in https://github.com/receptron/mulmoclaude/pull/701
- chore(roles): add suggested queries for General and Artist roles by @snakajima in https://github.com/receptron/mulmoclaude/pull/704
- docs(helps): promote wiki per-page chat and document Gemini API key by @snakajima in https://github.com/receptron/mulmoclaude/pull/705
- refactor(ui): move layout toggle and tool-call button into role header by @snakajima in https://github.com/receptron/mulmoclaude/pull/706
- chore: daily refactor sweep 2026-04-24 by @isamu in https://github.com/receptron/mulmoclaude/pull/712
- refactor(server): centralise err-instanceof-Error fallback on errorMe… by @isamu in https://github.com/receptron/mulmoclaude/pull/718
- Surface missing Gemini key via settings tab + toolbar badge by @snakajima in https://github.com/receptron/mulmoclaude/pull/717
- chore: ignore playwright test-results directory by @snakajima in https://github.com/receptron/mulmoclaude/pull/720
- refactor(client): mirror errorMessage fallback arg on the Vue side by @isamu in https://github.com/receptron/mulmoclaude/pull/721
- refactor(client): simplify spreadsheet preview card by @snakajima in https://github.com/receptron/mulmoclaude/pull/724
- chore: add Mag 7 market cap query to Office role by @snakajima in https://github.com/receptron/mulmoclaude/pull/726
- fix(i18n): translate 6 user-facing English strings (closes #713) by @isamu in https://github.com/receptron/mulmoclaude/pull/725
- fix(client): wiki page view cleanup by @snakajima in https://github.com/receptron/mulmoclaude/pull/727
- feat(bridges): opaque options passthrough (SLACK_BRIDGE_DEFAULT_ROLE etc.) by @isamu in https://github.com/receptron/mulmoclaude/pull/729
- fix(settings): reference + workspace dirs auto-save on add/remove (#716) by @isamu in https://github.com/receptron/mulmoclaude/pull/719
- feat(wiki): add create button on empty wiki page by @ystknsh in https://github.com/receptron/mulmoclaude/pull/678
- chore: remove files accidentally included in PR #678 by @ystknsh in https://github.com/receptron/mulmoclaude/pull/734
- chore: bump @mulmobridge/protocol 0.1.4 + chat-service 0.1.2 (options passthrough) by @isamu in https://github.com/receptron/mulmoclaude/pull/735
- chore: add Claude Code rule for German typographic quotes in de.ts by @ystknsh in https://github.com/receptron/mulmoclaude/pull/733
Full Changelog: https://github.com/receptron/mulmoclaude/compare/@mulmobridge/[email protected]...@mulmobridge/[email protected]
Breaking Changes
- Removed the built-in "Role Manager" role (chore(roles)).
- Sanitises `auth.options` to flat primitives only; nested objects, arrays, non‑finite numbers, and prototype‑polluting keys are dropped.
- Minimum version bump of `@mulmobridge/protocol` to ^0.1.4.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About MulmoClaude
All releases →Related context
Related tools
Earlier breaking changes
- v0.6.4 `General` role split into lean `General` and new `Personal` role; Encore seed role pinned to Personal.
Beta — feedback welcome: [email protected]