MulmoClaude

Highlights

• Fail closed on a misconfigured signing secret: a malformed or absent webhook signing secret now rejects the request instead of falling through.
• Secrets read as strings-or-absent: webhook credentials (LINE, Messenger, Teams, Telegram, WhatsApp) go through envSecret rather than String()-ing the binding, so a missing binding no longer becomes the literal "undefined".

📦 npm: @mulmobridge/[email protected]

What's Changed

• docs(publish-mulmoclaude): add app release + CHANGELOG step (mark latest) by @isamu in https://github.com/receptron/mulmoclaude/pull/2167
• docs(skills): add writing-style principles to mc-zenn skill by @isamu in https://github.com/receptron/mulmoclaude/pull/2168
• fix: allow retrying the Google link after abandoning browser consent by @isamu in https://github.com/receptron/mulmoclaude/pull/2171
• feat(collections): queryItems for file-backed collections (enriched JSONL + DuckDB) by @snakajima in https://github.com/receptron/mulmoclaude/pull/2165
• chore(release): @mulmoclaude/[email protected] + launcher range by @snakajima in https://github.com/receptron/mulmoclaude/pull/2172
• docs(plans): archive csv-duckdb-source plan (v1+v2 shipped); add BI extensions plan by @snakajima in https://github.com/receptron/mulmoclaude/pull/2175
• fix: derive Windows sandbox probe mounts from the shipped builder by @isamu in https://github.com/receptron/mulmoclaude/pull/2178
• feat(collections): flag fields — generic computed booleans + table filter chips by @snakajima in https://github.com/receptron/mulmoclaude/pull/2176
• fix(chat): stop auto-scroll from yanking the view while reading by @isamu in https://github.com/receptron/mulmoclaude/pull/2180
• feat(google-calendar): incremental sync via syncToken (#2095) by @isamu in https://github.com/receptron/mulmoclaude/pull/2182
• chore(lint): add a type-aware ESLint pass for any leaks and async bugs by @isamu in https://github.com/receptron/mulmoclaude/pull/2183
• feat(collections): filter menu — boolean/toggle chips, dropdown, checkbox tri-state icons by @snakajima in https://github.com/receptron/mulmoclaude/pull/2186
• feat(google-calendar): LLM-free scheduled sync into a collection (#2095) by @isamu in https://github.com/receptron/mulmoclaude/pull/2184
• fix: resolve floating and misused promises in server/ and src/ by @isamu in https://github.com/receptron/mulmoclaude/pull/2185
• chore: move merged plans to plans/done/ (#2146, #2182, #2184) by @isamu in https://github.com/receptron/mulmoclaude/pull/2190
• chore(google-calendar): reject an empty map, stay quiet when Google isn't linked (#2188) by @isamu in https://github.com/receptron/mulmoclaude/pull/2189
• docs: collection のデータ操作経路を文書化 by @isamu in https://github.com/receptron/mulmoclaude/pull/2198
• fix: resolve the remaining promise findings in packages/, ratchet the rules to error by @isamu in https://github.com/receptron/mulmoclaude/pull/2191
• chore(release): @mulmoclaude/collection-plugin 0.13.1 by @snakajima in https://github.com/receptron/mulmoclaude/pull/2187
• refactor: storage virtualization — CollectionStore seam, factory registry, sqlite backend (Stages 0–4) by @snakajima in https://github.com/receptron/mulmoclaude/pull/2203
• feat: desktop view image endpoint + storage-virtualization follow-through by @snakajima in https://github.com/receptron/mulmoclaude/pull/2204
• chore(lint): switch off three sonarjs rules that don't hold here by @isamu in https://github.com/receptron/mulmoclaude/pull/2205
• chore(release): @mulmoclaude/[email protected] — repair same-version drift by @snakajima in https://github.com/receptron/mulmoclaude/pull/2206
• feat: manageCollection に deleteItems アクションを追加 by @isamu in https://github.com/receptron/mulmoclaude/pull/2200
• fix: エージェントの直接 Write でもライブ更新イベントを発火する by @isamu in https://github.com/receptron/mulmoclaude/pull/2199
• chore(lint): switch off different-types-comparison — its premise doesn't hold here by @isamu in https://github.com/receptron/mulmoclaude/pull/2207
• fix: stop record fields stringifying to [object Object] in collection core by @isamu in https://github.com/receptron/mulmoclaude/pull/2208
• fix: type-check workspace dir config fields instead of String()-ing them by @isamu in https://github.com/receptron/mulmoclaude/pull/2210
• fix(collections): shadow-DOM-safe outside-click dismiss for the dropdown menus by @snakajima in https://github.com/receptron/mulmoclaude/pull/2212
• docs(sandbox): document the frozen-CLI failure mode — no pin (#2202) by @isamu in https://github.com/receptron/mulmoclaude/pull/2214
• fix: reject non-string skill names in manageSkills instead of String()-ing them by @isamu in https://github.com/receptron/mulmoclaude/pull/2211
• fix: stop the accounting router stringifying action args past the service guard by @isamu in https://github.com/receptron/mulmoclaude/pull/2215
• fix: read relay secrets as strings-or-absent instead of String()-ing the binding by @isamu in https://github.com/receptron/mulmoclaude/pull/2213
• fix: make collection id lookups agree on how a field becomes text by @isamu in https://github.com/receptron/mulmoclaude/pull/2223
• refactor: consolidate errorMessage / truncate into @mulmoclaude/core (#2217) by @isamu in https://github.com/receptron/mulmoclaude/pull/2219
• feat(collections): ontology graph panel — the /collections Map tab by @snakajima in https://github.com/receptron/mulmoclaude/pull/2218
• chore(release): bump 8 shared packages for the last 48h of fixes by @isamu in https://github.com/receptron/mulmoclaude/pull/2224

Full Changelog: https://github.com/receptron/mulmoclaude/compare/v1.3.0...@mulmobridge/[email protected]