Yeachan-Heo/oh-my-claudecode v4.4.0

v4.4.0: tmux CLI Workers, On-Demand Workers & Security Hardening

on GitHub

oh-my-claudecode v4.4.0

This is a major release that rewrites how Codex and Gemini are integrated into OMC. The old MCP server architecture (x, g providers) has been replaced entirely by a tmux-based CLI worker runtime.

⚠️ Breaking Changes

Codex/Gemini MCP servers removed

mcp__x__ask_codex, mcp__g__ask_gemini, and ToolSearch("ask_codex") no longer work.

Migration: use /omc-teams N:codex "task" or /omc-teams N:gemini "task" instead.

✨ New Features

• /omc-teams skill — spawn claude, codex, or gemini CLI processes in tmux split-panes for parallel task execution
• On-demand worker lifecycle (#904) — workers spawn when a task arrives and die immediately when done; no more idle workers
• /ccg skill — Claude-Codex-Gemini tri-model orchestration; fans out backend tasks to Codex + UI tasks to Gemini simultaneously
• omc_run_team_cleanup MCP tool — kills only worker panes, never kill-session

🐛 Fixed

• Team session cleanup hardened — never kills the user's shell (SIGTERM → grace → SIGKILL per pane)
• omc_run_team_wait timeout no longer kills workers (#903)
• Windows: false "hook error" labels eliminated (#899, #902)
• HUD respects CLAUDE_CONFIG_DIR (#897)
• Hard-kill backstop and orphan PID detection (#901)
• Exit-code propagation from CLI workers
• docs/CLAUDE.md and skills/ccg/SKILL.md fully synced with tmux worker architecture

🔒 Security

• validateJobId() enforces /^omc-[a-z0-9]{1,12}$/ on all MCP tool inputs — prevents path traversal via forged job IDs
• Removed context_files path traversal vector from deleted Codex/Gemini MCP servers

📦 Install / Update

npm install -g oh-my-claude-sisyphus@4.4.0
# or
omc update

Full changelog: https://github.com/Yeachan-Heo/oh-my-claudecode/blob/main/CHANGELOG.md