Yeachan-Heo/oh-my-claudecode v4.9.2

v4.9.2 — Security hardening, project memory, Korean i18n, 50+ fixes

on GitHub

What's Changed

Features

• Project Memory: Progressive disclosure injection with hot-path tracking (e6511ece)
• HUD: Auto-detect terminal width for responsive wrapping (03691be7)
• i18n: Korean transliteration for learned skill triggers + keyword detection (d8fb7d0e, bc9a6934)
• Deep Interview: Strengthened ambiguity scoring and brownfield confirmations (e5cc15e3)
• Skills: Improved trigger guidance, builtin skills in auto-slash command discovery (7eaddd55, 04ec073d)

Security

• 7 verified security vulnerabilities resolved (1d810be0)
• Shell injection prevention in ralphthon tmux commands (9e7e0030)

Bug Fixes — Core

• Ralplan: Fail closed on stale subagent counts; keep non-interactive ralplan moving through consensus stages
• Cancel skill: 9 hardening commits — session ownership guard, OMC_STATE_DIR support, non-git fallback, infinite loop prevention
• Team orchestration: Race conditions and logic errors resolved; codex worker registration lookups
• Model routing: Bedrock [1m] model suffix deadlock for sub-agents (851380eb)
• HUD: Transcript parsing, caching, setup config preservation hardened
• Verification: Revert manual checks to passed:false with pending_manual_review status
• Builtin skills: Correct skills directory resolution in bundled CLI mode
• MCP: Harden standalone handler registration against TS2589 regressions
• Notepad: Avoid repeated regex compilation on stable headers
• Observability: Restore logging for critical best-effort failures via swallowed-error utility
• Paths: XDG-style global OMC paths on Unix without breaking legacy state
• Process utils: Consolidated isProcessAlive with EPERM handling
• 50+ additional verified bug fixes across hooks, features, HUD, MCP, notifications, team orchestration

Bug Fixes — i18n

• Korean substring false positive prevention
• Narrowed keyword patterns, removed generic cancel aliases
• Informational intent filter improvements

Tests

• New test suites: keyword-detector Korean, transliteration-map, bedrock-lm-suffix hook, model-routing, non-interactive-env, paths, swallowed-error, scaling, worker-canonicalization, HUD context/omc-state, installer
• CI portability fixes for home-directory-sensitive tests

Contributors

• @Yeachan-Heo — ralplan hardening, XDG paths, version management, Kotlin MCP parity
• @seunggwansong — Korean i18n: transliteration, keyword detection, informational filters (19 commits)
• @EunHyunsu — Cancel skill hardening (10 commits)
• @bellman — Builtin skills, MCP hardening, notepad perf, project-memory, HUD, brownfield planning
• @riftzen-bit — 50+ bug fixes, security vulnerabilities, verification, Copilot review issues
• @paul — MCP/hooks/CLI bug fixes, shell injection prevention, unused import cleanup
• @TotoKr — HUD responsive wrapping, session-start plugin mode warning
• @devswha — ARCHITECTURE.md documentation expansion
• @Ethan-Stark — Bedrock model suffix deadlock fix
• @Seungwoo-Lee — isProcessAlive consolidation with EPERM handling
• @Dries-Samyn — Auto-slash-command builtin skills discovery

Install / Update

npm install -g oh-my-claude-sisyphus@4.9.2

Or reinstall the plugin:

claude /install-plugin oh-my-claudecode

Full Changelog: v4.9.1...v4.9.2

🤖 Generated with Claude Code