MulmoClaude

v0.9.6 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 15d LLM Frameworks

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Updates Highlights, Also, and https://www.npmjs.com/package/mulmoclaude/v/0.9.6 across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature	Low	Adds QR code in remote‑host popover for pairing mobile PWA without typing URL. Adds QR code in remote‑host popover for pairing mobile PWA without typing URL. Source: llm_adapter@2026-07-15 Confidence: high	—
Dependency	Low	Updates package mulmoclaude to version 0.9.6. Updates package mulmoclaude to version 0.9.6. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix
Bugfix	Medium	Fixes npm `file:` specifiers emitting non‑POSIX separators on Windows, breaking CI installs. Fixes npm `file:` specifiers emitting non‑POSIX separators on Windows, breaking CI installs. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Fixes Whisper crashing on late partial‑file open error during model download. Fixes Whisper crashing on late partial‑file open error during model download. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Fixes scheduler startup race causing lost turns and false success reports. Fixes scheduler startup race causing lost turns and false success reports. Source: llm_adapter@2026-07-15 Confidence: low	—
Bugfix	Medium	Fixes `isTestEnv` misdetection of any path containing "test", preventing yarn dev 401 errors. Fixes `isTestEnv` misdetection of any path containing "test", preventing yarn dev 401 errors. Source: llm_adapter@2026-07-15 Confidence: low	—
Bugfix	Medium	Fixes MCP broker startup failure on Windows due to missing junction fallback. Fixes MCP broker startup failure on Windows due to missing junction fallback. Source: llm_adapter@2026-07-15 Confidence: low	—
Bugfix	Medium	Fixes npx nested node_modules not being bind‑mounted into the container. Fixes npx nested node_modules not being bind‑mounted into the container. Source: llm_adapter@2026-07-15 Confidence: low	—
Bugfix	Medium	Resolves scheduler startup race, staggers same‑minute firings and recovers lost turns. Resolves scheduler startup race, staggers same‑minute firings and recovers lost turns. Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix	Low	Corrects `isTestEnv` to match argv exactly, preventing false 401 errors in yarn dev. Corrects `isTestEnv` to match argv exactly, preventing false 401 errors in yarn dev. Source: granite4.1:30b@2026-07-15-audit Confidence: low	—

Full changelog

Highlights

MCP broker `handlePermission not found` — full family fix (#2058)

The sandbox MCP broker could fail to come up, dropping every mcp__mulmoclaude__* tool at once — so the CLI reported the missing permission-prompt tool instead of the real cause. Fixed across two layers, each with regression tests (mapped in plans/mcp-broker-availability-matrix.md):

Windows junction fallback now covers every workspace scope (#2052) — the /app/pkg_modules fallback covered only @mulmoclaude/*, so @mulmobridge/* dangled inside the Linux container and the broker died at load. Verified on real Windows CI (WSL2 + native dockerd, real NTFS junctions).
npx nested node_modules mounted (#2056) — deps npm nests in the launcher's own node_modules (instead of hoisting them) are now bind-mounted into the container.
Scheduler startup race (#2057) — a spawned chat's broker can lose the startup race to the CLI's first tool call. Now same-minute firings are staggered (capped to half a tick), a lost race is auto-recovered by replaying the turn once (guarded against double-execution and aborts), and a spawned-but-failed run records its real error instead of a false "success".

Remote host: mobile PWA QR code (#2054)

The remote-host popover now shows a QR code for the mobile PWA — pair a phone without typing the URL.

Fixed

isTestEnv no longer misdetects any path containing "test" (which caused yarn dev 401s) — exact argv match now (#2064).
npm file: specifiers emit POSIX separators, fixing Windows CI installs (#2048).
Whisper absorbs a late partial-file open error during model download instead of crashing the stream (#2046, #2047).

Also

Internal refactors clearing the max-lines-per-function lint ratchet (whisper, relay, composables) and a dependency refresh.

📦 npm: [email protected]

Full Changelog

See CHANGELOG.md.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track MulmoClaude

Get notified when new releases ship.

About MulmoClaude

All releases →

Related context

Related tools

Earlier breaking changes

v1.1.1 Moves Google token store to ~/.config/mulmo/google-token.json
v0.6.4 `General` role split into lean `General` and new `Personal` role; Encore seed role pinned to Personal.