This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryUpdates Highlights, Host-neutral link guidance, and Hardening across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Broker enforces HTTPS for callback URLs and restricts consent URL to accounts.google.com. Broker enforces HTTPS for callback URLs and restricts consent URL to accounts.google.com. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Medium |
Google Tasks and Drive tools added: list/create/complete tasks, list/create/read Drive files scoped to app‑created files only. Google Tasks and Drive tools added: list/create/complete tasks, list/create/read Drive files scoped to app‑created files only. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Link Google without Cloud setup: one‑click consent, no client secret needed. Link Google without Cloud setup: one‑click consent, no client secret needed. Source: llm_adapter@2026-07-17 Confidence: low |
— |
| Feature | Low |
Link Google without Cloud project or client JSON; broker supplies secret automatically. Link Google without Cloud project or client JSON; broker supplies secret automatically. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Low |
Linking process is stateless; no tokens or codes stored on server, refresh tokens remain client‑side only. Linking process is stateless; no tokens or codes stored on server, refresh tokens remain client‑side only. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Low |
Existing Google links continue to function with correct client reuse during renewal. Existing Google links continue to function with correct client reuse during renewal. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Low |
Allow bringing own desktop OAuth client JSON for fully local flow; broker defers to it if present. Allow bringing own desktop OAuth client JSON for fully local flow; broker defers to it if present. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Low |
Added Google Tasks commands: list task lists, add tasks, complete tasks. Added Google Tasks commands: list task lists, add tasks, complete tasks. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Bugfix | Low |
Host‑neutral link guidance now correctly applies to both MulmoClaude and MulmoTerminal hosts. Host‑neutral link guidance now correctly applies to both MulmoClaude and MulmoTerminal hosts. Source: llm_adapter@2026-07-17 Confidence: low |
— |
| Bugfix | Low |
Resolved npm caret range issue so new google tools are available to [email protected] users. Resolved npm caret range issue so new google tools are available to [email protected] users. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Refactor | Low |
Linking guidance made host‑neutral; each host's help now shows specific steps. Linking guidance made host‑neutral; each host's help now shows specific steps. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
Full changelog
Highlights
Link Google with no Cloud setup (#2131)
Linking now takes a click and a consent screen — no Google Cloud project, no client JSON. Google demands a client secret at its token endpoint even under PKCE, which is what used to dead-end users at "OAuth クライアント認証情報が見つかりません". The mulmoserver broker applies that secret on your behalf.
It is stateless: it stores no token and no authorization code. Its callback hands the code — never a token — back to your machine, which performs the exchange itself. Refresh tokens still live only on your machine (~/.config/mulmo/), so there is no central store to breach.
- Bring your own OAuth client? A desktop client JSON in
~/.secrets/still wins and keeps the whole flow local — self-hosters lose nothing. - Existing links keep working: tokens record which client minted them, and renewals use the right one.
- Hardening: the broker URL must be HTTPS unless loopback, and the consent URL it returns must be
https://accounts.google.combefore any browser opens.
Google Tasks and Drive tools (#2115)
The google tool gains seven kinds — list task lists, list / add / complete tasks, and list / create / read Drive files. Drive is drive.file-scoped: the app only ever sees files it created, never your wider Drive.
These shipped in packages earlier today but could not reach
npx [email protected]users — a 0.x caret range does not cross a minor, so the launcher never resolved them. This release is what actually delivers them.
Host-neutral link guidance (#2128)
The unlinked-state guidance named MulmoClaude-only flows, misdirecting MulmoTerminal users (the plugin runs on both hosts). Wording is now host-neutral; each host's own help carries the specific steps.
📦 npm: [email protected]
Full Changelog
See CHANGELOG.md for the complete list.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About MulmoClaude
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]