Ai

OpenAgent v4.2.3 Introduces Package Layering and Security Fixes

OpenAgent v4.2.3 Introduces Package Layering and Security Fixes

Oh My OpenAgent just dropped v4.2.3, and it's a big one. With 96 commits and over 12,800 lines added, this release isn't just about new features—it's about structural integrity. The team extracted two new workspace packages and closed a critical security hole in rule file discovery. If you've been wrestling with flaky prompt dispatches since the v4.2.0 gate, this update should steady the ship.

What Changed

The headline is the extraction of rules-core and ast-grep-mcp into standalone packages. rules-core now handles all rule discovery, matching, caching, and nested AGENTS.md context resolution. That's a lot of logic moving out of the monolith. Meanwhile, ast-grep-mcp gives you a dedicated MCP (Model Context Protocol) server for AST-based grep. It’s a clean split that should make both debugging and contribution easier.

More importantly, this release closes a security hole in how rule files are discovered. The old code could pick up unintended files from the filesystem. Now there's a hardened discovery path that restricts what gets loaded. It's a subtle fix, but if you're running OpenAgent in multi-user or CI environments, it matters.

Every internal prompt dispatch path that was still flaky after v4.2.0's gate got hardened too. The team didn't say exactly which paths, but given the scale (96 commits, 296 files changed), it's safe to assume the reliability gains are broad.

Why It Matters

Package layering isn't just about code organization—it's about trust. When you extract core logic into a dedicated package, you're saying 'this part of the system is stable and worthy of reuse.' For developers building on OpenAgent, rules-core becomes a foundation you can depend on. And the security fix? That's the kind of patch that prevents a bad headline down the road.

The AST-grep MCP server is a nice touch too. It turns OpenAgent into a smarter code analysis tool, not just another LLM wrapper. That's a differentiator in a crowded market.

Personally, I'd have liked more transparency on which dispatch paths were flaky. But the commit count tells a story: the team is iterating fast. If you've been on the fence about upgrading, v4.2.3 feels like a safe bet. It's less about flashy new features and more about making the existing ones bulletproof.

Official Source: https://github.com/code-yeongyu/oh-my-openagent/releases/tag/v4.2.3