Skip to content

MulmoClaude

v@mulmoclaude/[email protected] Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 13d LLM Frameworks
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Affected surfaces

auth

Summary

AI summary

Updates feat, config, and re across a mixed release.

Changes in this release

Feature Medium

Adds RemoteHost session persistence API with createHostSessionPersistence and createRemoteHostSession.

Adds RemoteHost session persistence API with createHostSessionPersistence and createRemoteHostSession.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Feature Low

Queues chat sends while the agent runs instead of locking input.

Queues chat sends while the agent runs instead of locking input.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Dependency Low

Bumps @mulmoclaude/core npm package to version 0.13.0.

Bumps @mulmoclaude/core npm package to version 0.13.0.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Medium

Fixes INTERNAL ASSERTION FAILED by making persistence a class for initializeAuth.

Fixes INTERNAL ASSERTION FAILED by making persistence a class for initializeAuth.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Medium

Improves reconnect handling to be non‑destructive, running validation before tearing down the previous session.

Improves reconnect handling to be non‑destructive, running validation before tearing down the previous session.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Medium

Adds error classification between expired/malformed blobs and transient failures to avoid forced re‑login on network blips.

Adds error classification between expired/malformed blobs and transient failures to avoid forced re‑login on network blips.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Low

Pins auth token in e2e‑live CI to stop intermittent 401 flake.

Pins auth token in e2e‑live CI to stop intermittent 401 flake.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Refactor Low

Bumps launcher and root packages to version 0.9.6.

Bumps launcher and root packages to version 0.9.6.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Full changelog

Highlights

RemoteHost session persistence (receptron/mulmoserver#50, case A') — a host's Firebase session can now be parked in the browser and restored after a server restart, without a re-login popup. First published release containing this core API (PR #2074) and its hardening from the mulmoclaude wiring (PR #2076).

  • New API

    • createHostSessionPersistence() — an in-memory Firebase Auth persistence that seeds from / exports back to an opaque blob (the session round-tripped through the browser's localStorage).
    • createRemoteHostSession(config) — a restartable Firebase session: open(seedBlob?, validate?), close(), exportSession(), onSessionChange().
    • New exports: isSeedableBlob, RemoteHostSessionValidate, HostAuthPersistenceClass, HostAuthPersistenceInstance.

  • Correctness / robustness (found during live integration)

    • Persistence is now a class, as initializeAuth requires — fixes INTERNAL ASSERTION FAILED: Expected a class definition that broke createRemoteHostSession.open().
    • Non-destructive (re)connect: open's new validate hook runs on the fresh app before the previous one is torn down, so a failed sign-in or an expired blob preserves a healthy live session instead of replacing it.
    • Reconnect error classification: isSeedableBlob + RemoteHostSessionExpiredError separate a genuinely expired/malformed session blob (drop it) from a transient failure (keep it), so a network blip no longer forces a re-login and a corrupt blob is not retried forever.

📦 npm: `@mulmoclaude/[email protected]`

What's Changed

  • update by @isamu in https://github.com/receptron/mulmoclaude/pull/2065
  • chore(mulmoclaude): bump launcher + root to 0.9.6 by @isamu in https://github.com/receptron/mulmoclaude/pull/2066
  • feat: queue chat sends while the agent runs instead of locking the input (#2067) by @isamu in https://github.com/receptron/mulmoclaude/pull/2068
  • fix: pin auth token in e2e-live CI to stop intermittent 401 flake (#2069) by @isamu in https://github.com/receptron/mulmoclaude/pull/2070
  • docs: document MCP stdio-under-Docker opt-in (hostExecInDocker) and env passing (#2071) by @isamu in https://github.com/receptron/mulmoclaude/pull/2072
  • feat(core): export/seed-able Firebase persistence + reconnect for RemoteHost (Phase 1, #2073) by @isamu in https://github.com/receptron/mulmoclaude/pull/2074
  • feat: persist RemoteHost Firebase session in the browser — mulmoclaude wiring (Phase 3, #2075) by @isamu in https://github.com/receptron/mulmoclaude/pull/2076

Full Changelog: https://github.com/receptron/mulmoclaude/compare/@mulmoclaude/[email protected]...@mulmoclaude/[email protected]

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track MulmoClaude

Get notified when new releases ship.

Sign up free

About MulmoClaude

All releases →

Related context

Earlier breaking changes

  • v1.1.1 Moves Google token store to ~/.config/mulmo/google-token.json
  • v0.6.4 `General` role split into lean `General` and new `Personal` role; Encore seed role pinned to Personal.

Beta — feedback welcome: [email protected]