wmux Now Refuses Browser-Automation Calls That Don't Name Their Workspace, Closing a Cross-Workspace Page Hijack
openwong2kim/wmux — git-worktree fan-out for running Claude Code, Codex and Gemini in parallel — shipped v3.42.0 on 2026-08-13 at 23:52 UTC with a breaking safety change: a plugin or wire client that asked wmux to drive a browser page without declaring its workspace used to get whichever page was registered first, possibly one in an unrelated workspace, and now gets a non-retryable refusal (#810). The bundled MCP server, CLI and app UI already send workspace, so they're unaffected; `"mcp": {"mode": "shadow"}` in `~/.wmux/config.json` restores the old behavior. The release also completed the Simplified Chinese locale from ~390 to all 1,203 keys and fixed IME candidate windows chasing agent TUI redraws.
Source
↳ Follow the thread