OhMyOpenCode Files

🏗️ Package Layering + Security Hardening

96 commits, 296 files, +12.8k / -4.3k lines. This release extracts two new workspace packages (rules-core, ast-grep-mcp), closes a security hole in rule file discovery, and hardens every internal prompt dispatch path that was still flaky after v4.2.0's gate.

📦 Two New Workspace Packages

packages/rules-core — Rule discovery, matching, caching, and nested AGENTS.md context resolution extracted from the monolith into a standalone package with zero harness imports. This is the first concrete step of the ROADMAP multi-harness refactor: rules-core can now be consumed by any agent harness, not just OpenCode.

packages/ast-grep-mcp — The native src/tools/ast-grep tool (with its NAPI binary dependency) is gone. AST-grep is now served as a built-in MCP server. User-facing tool names (ast_grep_search / ast_grep_replace) and disabled_tools config are preserved — nothing changes on the user side, but the binary bootstrapping is cleaner and the tool runs in its own process.

🔒 Symlink Escape Security Fix

Rule file discovery (findRuleFiles) now validates that every resolved path stays inside the workspace boundary. A hostile repo could previously point .github/copilot-instructions.md or .omo/rules/* at arbitrary host files (like ~/.ssh/id_rsa) via symlinks. Both individual file and directory scanning paths are now guarded.

🧠 Prompt Gate & Runtime Fallback Hardening

The prompt-async-gate introduced in v4.2.0 got a full second pass:

• DEFAULT_PROMPT_ASYNC_POST_DISPATCH_HOLD_MS raised from 250 ms to 2,000 ms — catches slow-provider session.error arrivals that the original window missed
• Runtime fallback now recognizes all OpenCode progress event shapes (message.part.updated, deltas, finished markers) — no more false-negative retry triggers on sessions that are actually making progress
• Team-mode message delivery races closed: reservation release on ambiguous failures, live delivery holds preserved after prompt failures
• Context recovery handles idle sessions; synthetic status: idle events now correctly trigger idle hooks

🌐 Web Overhaul

The marketing site (packages/web/) got a full decomposition and polish pass: 832-LOC landing page split into 10 components, 358-LOC manifesto into 9, design system tokens extracted into DESIGN.md, WCAG 1.3.1 fix (nested <main>), hero CTA now links to installation docs, and a responsive test matrix covering 6 viewports x 4 locales x 2 pages.

📝 Misc

• Comment-checker now parses apply_patch payloads (catches AI slop in patch-style edits, not just plain writes)
• Rules-injector transcript hydration: dedup cache seeded from session transcript after compaction, preventing duplicate injections
• .sisyphus/rules discovery restored with deprecation warning (planned removal v4.3.0)
• LSP MCP bootstrap fallback when CLI binary is unavailable

Minor Compatibility and Stability Release

This release carries compatibility-facing behavior changes and operational hardening. Read the summary below before upgrading or publishing.

• Rename transition updates across package detection, plugin/config compatibility, and install surfaces.
• Task and tool behavior updates, including delegate-task contract and runtime registration behavior.
• Task-system default behavior alignment so omitted configuration behaves consistently across runtime paths.
• Install and publish workflow hardening, including safer release sequencing and package/install fixes.

Commit Summary

• 4e4bb361 docs(release): finalize v4.2.3 release notes
• fbcc1435 fix(runtime-fallback): recognize completion progress events
• 2f5fc7c4 fix(rules-core): block symlinked rule directory escapes
• 330e437f docs(agents): regenerate hierarchical AGENTS.md for 2026-05-20
• 39aadbf9 fix(context-recovery): handle idle sessions
• caa751aa @jeongjin0 has signed the CLA in code-yeongyu/oh-my-openagent#4206
• c197c240 docs(agents): require merge commits for PRs
• 23396066 docs(release): expand v4.2.3 CHANGELOG and add OmO logo to README.ru.md
• a0d75d15 docs(prompt-gate): document DEFAULT_PROMPT_ASYNC_POST_DISPATCH_HOLD_MS 250 -> 2000
• b24dc6ee fix(rules-core): isolate package + block symlink escape from rule sources
• 89f69026 Merge pull request [#4205] from code-yeongyu/fix/comment-checker-apply-patch-payloads
• b5277251 Merge pull request [#4203] from code-yeongyu/fix/continuation-prompt-dispatch-20260520051014
• 3bd63020 fix(comment-checker): handle apply_patch payloads
• 7d9cc4fb Merge pull request [#4204] from code-yeongyu/hotfix/og-static-deploy-fix
• 6fd5e7c9 fix(web): switch OG image from next/og to static PNG file convention
• 5154ab4c Merge pull request [#4202] from code-yeongyu/feature/web-portfolio-refinement-20260520
• e9c44ddb fix(web): drop nested <main> on manifesto (WCAG 1.3.1)
• f5d5e980 fix(web): hero Get Started CTA -> /docs#installation (closes [#3848])
• 0ebba9eb fix(rules-injector): retry storage writes after cleanup race
• 4a72729a fix(plugin): run idle hooks for synthetic status idle
• 64997d5e test(web): responsive matrix — 6 viewports x 4 locales x 2 pages
• 623af759 feat(web): dynamic OG + Twitter card images via next/og
• 022eb784 refactor(web): decompose 358-LOC manifesto into 9 section components
• 4d5f58f0 refactor(web): decompose 832-LOC landing into 10 section components
• 78ca837e style(web): extract design system tokens + DESIGN.md
• 7e0406f4 fix(web): UX/a11y polish + middleware metadata route fix
• 68b80e03 perf(web): optimize CI + build pipeline
• 9799c54a chore(web): remove dead deps + safe version bumps
• faf2b021 fix(lsp): update lsp-tools-mcp cleanup
• 18b58914 docs(reference): cross-module rules injection comparison report
• fbe423a2 feat(rules-injector): hydrate dedup cache from session transcript
• 4de2782b Merge pull request [#4201] from code-yeongyu/fix/test-isolation-cross-test-state-leak
• f8d04d74 fix(test-isolation): isolate rules injector storage and fixture home
• c6dc266f test(test-isolation): add diagnostic regression test for cross-suite leak
• 504a7779 Merge pull request [#4200] from code-yeongyu/fix/rules-core-restore-sisyphus-with-deprecation-warning
• dd9dd428 Merge pull request [#4199] from code-yeongyu/fix/parent-wake-same-source-reservation-requeue
• 12aaff28 test(rules-core): isolate sisyphus deprecation warning assertion
• 53ddc470 test(rules-injector): align duplicate-cache mock types
• d92894a3 docs(changelog): document .sisyphus/rules restoration and planned removal in v4.3.0
• 1bab6ec4 fix(rules-core): restore .sisyphus/rules discovery with deprecation warning (planned removal v4.3.0)
• 7ffe823f test(rules-core): add red tests for restored .sisyphus/rules discovery + deprecation warning (BUG-G)
• 11d2cfb8 fix(background-agent): re-enqueue parent wake on same-source reservation instead of dropping
• ee8b80a5 test(background-agent): add red test for parent-wake drop on same-source reservation hold (BUG-E)
• 1760ffb6 Merge pull request [#4196] from code-yeongyu/fix/rules-core-fallback-to-workspace-when-no-project-root
• 1f9a581e fix(rules-core): fall back to workspace directory when no project root marker is found
• 2c62e729 test(rules-core): add red test for project rule discovery in markerless workspaces (BUG-F)
• 913cc089 Merge pull request [#4198] from code-yeongyu/fix/ast-grep-mcp-allow-absolute-paths-inside-workspace
• 4c7d7e8c Merge pull request [#4197] from code-yeongyu/fix/prompt-gate-event-shapes-and-finish-marker
• bd2823e8 Merge pull request [#4195] from code-yeongyu/fix/team-send-message-ambiguous-delivery-loss
• 9cdcb429 revert(agents-md): restore ROADMAP warning banner unrelated to this PR
• 2ea2159d fix(ast-grep-mcp): allow absolute paths whose realpath is inside the workspace
• b2e42e1b test(ast-grep-mcp): add red test for absolute paths inside workspace
• f8f4b572 fix(runtime-fallback,prompt-gate): recognize all OpenCode progress event shapes and boolean/completed finish markers
• 20efb79f test(runtime-fallback,prompt-gate): add red tests for event-shape and finish-marker blind spots (BUG-C+D)
• da5aa7f3 test(team-mode): allow reclaimed reservations to stay readable
• 579b8c38 docs(AGENTS.md): add aggressive refactoring-in-progress warning
• f79da77f test(team-mode): decouple resume history fixture from session routing
• af42f0ac test(team-mode): stabilize resume stale reservation history check
• 655dffbc fix(team-mode): release reservation on ambiguous failure, commit on success-path mark failure
• 7adb8336 test(team-mode): add red tests for ambiguous delivery loss (BUG-A + BUG-B)
• 847a8db2 fix(runtime-fallback): preserve accepted pending retries
• 6df148f0 fix(team-mode): close peer message delivery races
• d3e218f9 fix(prompt): treat post-dispatch failures as accepted
• f5402498 docs(readme): add OmO logo to hero section
• b2918fd4 fix(team-mode): close peer message delivery races
• bcea4a9d fix(prompt-gate): harden sync and team prompt dispatch
• 1492bffd fix(prompt-gate): harden internal prompt dispatch
• 6c63372e @lang-911 has signed the CLA in code-yeongyu/oh-my-openagent#4186
• 22cf4fcc @devswha has signed the CLA in code-yeongyu/oh-my-openagent#4181
• 49066e7e @JacobZyy has signed the CLA in code-yeongyu/oh-my-openagent#4180
• 3dd41422 fix(rules): drop legacy sisyphus rule sources
• 7db3a7f9 fix(team-mode): preserve live delivery holds after ambiguous prompt failure
• bb757514 fix(babysitter): avoid double prompt gate
• 44ef5dec fix(runtime-events): honor OpenCode progress shapes
• 38462aa9 fix(recovery): avoid duplicate continuation prompts
• e57bac3b fix(prompt-retry): preserve async holds without blocking validation fallbacks
• 5f733f47 fix(parent-wake): recognize sdk tool progress
• 67bd3249 fix(runtime-fallback): keep pending retry state on gate skip
• 98c3fee1 fix(prompt-gate): detect finish-only tool waits
• d3d2d491 fix(parent-wake): preserve stale tool-call wake escape
• dfc2e8e4 fix(prompt-retry): preserve peer prompt reservations
• b53a8b5e fix(parent-wake): close duplicate wake races
• f5f358ab fix(prompt-gate): ignore internal user tails in tool waits
• 63e4198d @jangByeongHui has signed the CLA in code-yeongyu/oh-my-openagent#4176
• 1f3245e8 Merge pull request [#4175] from code-yeongyu/fix/anthropic-assistant-prefill-tail
• 5f0e037d fix(plugin): cover Anthropic-family prefill guard
• 45d670a7 fix(plugin): constrain Anthropic prefill guard
• 3509bf47 fix(plugin): guard Anthropic assistant prefill tails
• 35d40cfd Merge pull request [#4173] from code-yeongyu/roadmap-refactor
• ff78aeda docs: add ROADMAP.md with package layering refactor plan
• 33b66376 fix(background-agent): defer live tool-turn wakes
• 6915f152 fix(todo-continuation): cancel stale ULW countdown
• 37bd866c Merge pull request [#4155] from code-yeongyu/feature/rules-astgrep-packages-20260518
• d8f6d59d docs: update rules and MCP inventories
• 06f67093 build: wire ast-grep MCP into release gates
• 05c09c1d fix(doctor): list all built-in MCP servers
• a86cc6af refactor(tools): remove native ast-grep tool
• ef09880e feat(mcp): register ast-grep as built-in MCP
• 499aff01 feat(mcp): add package-backed ast-grep MCP
• 4ea29e2c refactor(rules): delegate injectors to rules-core
• fb7d47f1 feat(rules): add shared rules-core package
• 472c2931 chore(packages): declare shared tool workspaces
• 25171a6c chore(hashline): update fixture dependencies
• a6f1950d fix(web): restore navigation smoke coverage
• 9a9d9bd5 fix(web): adapt build tooling
• 92a5a442 chore(web): update web dependencies
• f925d130 chore(deps): update root dependencies
• 6fe2f72c fix(mcp): bootstrap lsp when cli is unavailable
• f6fba0b1 chore(deps): bump @code-yeongyu/comment-checker to 0.8.0