This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryUpdates Highlights, RS256, and https://www.npmjs.com/package/@mulmobridge/line-works/v/0.1.0 across a mixed release.
Full changelog
First release of the LINE Works (enterprise LINE) bridge for MulmoClaude.
Note: LINE Works is a separate product from consumer LINE — use @mulmobridge/line for the consumer app.
Highlights
- Service-account JWT (RS256) → OAuth access token exchange, cached until 60 s before expiry
- Webhook HMAC-SHA256 signature verification with bot secret
- Private key via inline
LINEWORKS_PRIVATE_KEY(with\n) orLINEWORKS_PRIVATE_KEY_FILE - User-id allowlist (
LINEWORKS_ALLOWED_USERS) - 1:1 messages only (group / channel deferred to v0.2)
Public URL required — LINE Works uses webhook delivery.
📦 npm: @mulmobridge/[email protected]
📖 Setup: packages/bridges/line-works/README.md
What's Changed
- feat(bridges): land batch F (LINE Works + Nostr + Viber) on main by @isamu in https://github.com/receptron/mulmoclaude/pull/624
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About MulmoClaude
All releases →Related context
Related tools
Earlier breaking changes
- v0.6.4 `General` role split into lean `General` and new `Personal` role; Encore seed role pinned to Personal.
Beta — feedback welcome: [email protected]