Skip to content

v0.2.0 — first public release

Choose a tag to compare

@MyAIPlugins MyAIPlugins released this 28 May 23:49
· 473 commits to main since this release

First public release of cli-agents-bridge — a vendor-agnostic IPC bridge between CLI agent sessions (Claude Code, Codex, Aider, Cline, ...) running in separate windows. Fork of PatilShreyas/claude-code-session-bridge v0.1.0 (MIT).

What's in it

  • 9 upstream bugs fixed structurally (BUG-1..BUG-9): live heartbeat, long-poll receive with recoverable late replies, role-based routing, scope-aware cleanup, longest-prefix session lookup, O_EXCL lock, stderr/exit-124 discipline, unified stale config, connect-peer heartbeat.
  • Role routing: hub-and-spoke val ↔ esc by default, --allow-mesh to override, observer read-only by design.
  • Namespace-isolated storage (~/.claude/cli-agents-bridge/) — no cross-destructive cleanup with the upstream plugin.
  • Security baseline: umask 077, dir/file perms 700/600, session-ID regex validation, atomic writes (fsync+rename), PID-lock, and SC-7 base-dir integrity check (symlink/owner/perms).
  • Single static Go binary, zero runtime deps (no jq, no Python).

Quality gates

Hardened across two pre-release passes:

  • Sprint 5 — triadic security audit (automated scan + line-by-line review + adversarial re-verify): SC-7 boot check, absolute DataDir resolution, migrate integrity.
  • Sprint 6 — manual smoke test: caught BUG-A (session-liveness PID model — register is one-shot, so listen now adopts the live PID) and BUG-B (JSON [] vs null hygiene), both invisible to the 158 green -race tests because the tests simulate the long-running process.

SECURITY.md documents only controls actually on the live code path — SC-3 (ownership check at read call-sites) is honestly listed as deferred to v0.2.1.

Install (v0.2.0 — source-first)

Pre-compiled multi-OS binaries (GoReleaser) land in a follow-up. For now, build from source (Go 1.25+):

git clone https://github.com/MyAIPlugins/cli-agents-bridge
cd cli-agents-bridge
make build && make install-plugin   # binary into plugins/cli-agents-bridge/bin/

Then, from a Claude Code session:

/plugin marketplace add /path/to/cli-agents-bridge
/plugin install cli-agents-bridge@cli-agents-bridge-marketplace

For shell use outside Claude Code: make install-dev symlinks the binary into ~/.local/bin/.

See README, SECURITY, PRIVACY, CHANGELOG.

🤖 Generated with Claude Code