Add plugin cli-agent-bridge

package.json

@@ -10,7 +10,7 @@
   "scripts": {
     "create": "node scripts/create-plugin.mjs",
     "check": "npm run validate && npm test",
-    "test": "node --test",
+    "test": "node --test --test-concurrency=1",
     "validate": "node scripts/validate.mjs"
   },
   "license": "Apache-2.0"

plugins/Hylouis233/cli-agent-bridge/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Hylouis233
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

plugins/Hylouis233/cli-agent-bridge/NOTICE

@@ -0,0 +1,14 @@
+cli-agent-bridge is an original implementation informed by the following
+open-source projects. Their licenses are retained where applicable.
+
+- claude-subagent-mcp (https://github.com/ltxzs/claude-subagent-mcp)
+  MIT License. Copyright (c) ltxzs contributors.
+  Its headless spawn, timeout, capture-cap, and git-snapshot patterns
+  informed server.mjs.
+
+- subagent-mcp (https://github.com/Heretyc/subagent-mcp)
+  Apache License 2.0. Copyright 2026 Lexi Blackburn.
+  Its delegated-CLI orchestration concepts informed the Skill guidance.
+
+- wshobson/agents (https://github.com/wshobson/agents)
+  Reference for multi-harness agent plugin packaging patterns.

plugins/Hylouis233/cli-agent-bridge/backends.json

@@ -0,0 +1,10 @@
+{
+  "$comment": "Backend command templates for cli-agent-bridge. <task> and <session> are placeholders. Edit command or buildArgs to point at another binary or add flags. Never store credentials here; each CLI uses your own local authentication.",
+  "backends": {
+    "claude": { "label": "Claude Code", "command": "claude", "buildArgs": ["-p", "<task>", "--output-format", "text", "--permission-mode", "acceptEdits"], "resumeArgs": ["-p", "<task>", "--output-format", "text", "--permission-mode", "acceptEdits", "--resume", "<session>"], "experimental": false },
+    "codex": { "label": "OpenAI Codex CLI", "command": "codex", "buildArgs": ["exec", "--", "<task>"], "resumeArgs": ["exec", "resume", "<session>", "--", "<task>"], "experimental": false },
+    "kimi": { "label": "Kimi Code", "command": "kimi", "buildArgs": ["-p", "<task>"], "resumeArgs": ["-S", "<session>", "-p", "<task>"], "experimental": false },
+    "zcode": { "label": "ZCode", "command": "zcode", "buildArgs": ["-p", "<task>"], "resumeArgs": null, "experimental": true, "notes": "Desktop ZCode builds have no verified headless mode; set command to your CLI if your distribution provides one." },
+    "dsh": { "label": "DeepSeek Harness (dsh)", "command": "dsh", "buildArgs": ["--profile", "headless", "<task>"], "resumeArgs": null, "experimental": true, "notes": "Uses the documented headless profile; requires a headless profile under DSH_HOME/profiles." }
+  }
+}

plugins/Hylouis233/cli-agent-bridge/git-executable.mjs

@@ -0,0 +1,146 @@
+import { constants } from "node:fs";
+import { access, appendFile, realpath, stat } from "node:fs/promises";
+import path from "node:path";
+
+let executablePromise = null;
+const pathCommandEntries = new Map();
+
+async function resolveGitExecutable() {
+  const names = process.platform === "win32" ? ["git.exe", "git.com"] : ["git"];
+  for (const rawDirectory of (process.env.PATH ?? "").split(path.delimiter)) {
+    const directory = rawDirectory.replace(/^"|"$/gu, "");
+    // Never let a relative PATH component reinterpret an untrusted workspace
+    // as an executable search root after a Git command changes cwd.
+    if (!directory || !path.isAbsolute(directory)) continue;
+    for (const name of names) {
+      const candidate = path.join(directory, name);
+      try {
+        await access(candidate, process.platform === "win32" ? constants.F_OK : constants.X_OK);
+        if (!(await stat(candidate)).isFile()) continue;
+        return await realpath(candidate);
+      } catch { /* try the next trusted PATH entry */ }
+    }
+  }
+  throw new Error("cannot locate git in an absolute PATH directory");
+}
+
+async function resolvePathCommandUncached(command) {
+  if (process.env.NODE_ENV === "test") {
+    const delayMs = Number(process.env.CLI_AGENT_BRIDGE_TEST_COMMAND_RESOLUTION_DELAY_MS ?? 0);
+    if (Number.isFinite(delayMs) && delayMs > 0) {
+      const startedFile = process.env.CLI_AGENT_BRIDGE_TEST_COMMAND_RESOLUTION_STARTED_FILE;
+      if (typeof startedFile === "string" && path.isAbsolute(startedFile)) {
+        await appendFile(startedFile, "started\n");
+      }
+      await new Promise((resolve) => setTimeout(resolve, delayMs));
+    }
+  }
+  if (path.isAbsolute(command)) {
+    try {
+      await access(command, process.platform === "win32" ? constants.F_OK : constants.X_OK);
+      return (await stat(command)).isFile() ? await realpath(command) : null;
+    } catch { return null; }
+  }
+  if (/[\\/]/u.test(command)) return null;
+  const extensions = process.platform === "win32"
+    ? (path.extname(command)
+        ? [""]
+        : [...(process.env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean), ".ps1"])
+    : [""];
+  for (const rawDirectory of (process.env.PATH ?? "").split(path.delimiter)) {
+    const directory = rawDirectory.replace(/^"|"$/gu, "");
+    if (!directory || !path.isAbsolute(directory)) continue;
+    for (const extension of extensions) {
+      const candidate = path.join(directory, command + extension);
+      try {
+        await access(candidate, process.platform === "win32" ? constants.F_OK : constants.X_OK);
+        if ((await stat(candidate)).isFile()) return await realpath(candidate);
+      } catch { /* continue searching */ }
+    }
+  }
+  return null;
+}
+
+function pathCommandEntry(command) {
+  if (typeof command !== "string" || !command) {
+    return { promise: Promise.resolve(null), settled: true, value: null, error: null };
+  }
+  if (!pathCommandEntries.has(command)) {
+    const entry = {
+      promise: resolvePathCommandUncached(command),
+      settled: false,
+      value: null,
+      error: null,
+      waiters: new Set(),
+    };
+    pathCommandEntries.set(command, entry);
+    // The core lookup has exactly one settlement reaction. Request-scoped
+    // waiters subscribe below and can be removed on cancel/deadline, so a
+    // permanently stalled filesystem lookup cannot retain one closure per
+    // abandoned request.
+    void entry.promise.then((resolved) => {
+      entry.settled = true;
+      entry.value = resolved;
+      for (const waiter of entry.waiters) waiter.resolve(resolved);
+      entry.waiters.clear();
+      // Retain positive results, but retry a missing/not-yet-installed CLI.
+      if (resolved === null && pathCommandEntries.get(command) === entry) {
+        pathCommandEntries.delete(command);
+      }
+    }, (error) => {
+      entry.settled = true;
+      entry.error = error;
+      for (const waiter of entry.waiters) waiter.reject(error);
+      entry.waiters.clear();
+      if (pathCommandEntries.get(command) === entry) pathCommandEntries.delete(command);
+    });
+  }
+  return pathCommandEntries.get(command);
+}
+
+export function resolvePathCommand(command) {
+  return pathCommandEntry(command).promise;
+}
+
+export function subscribePathCommand(command, resolve, reject) {
+  const entry = pathCommandEntry(command);
+  if (entry.settled) {
+    queueMicrotask(() => entry.error ? reject(entry.error) : resolve(entry.value));
+    return () => {};
+  }
+  const waiter = { resolve, reject };
+  entry.waiters.add(waiter);
+  return () => { entry.waiters.delete(waiter); };
+}
+
+export function trustedGitExecutable() {
+  executablePromise ??= resolveGitExecutable();
+  return executablePromise;
+}
+
+export async function safeGitInvocation(args, baseEnvironment = process.env) {
+  const safeArgs = [
+    // Git documents /dev/null as the way to disable hooks. Unlike a shared
+    // empty directory, this sink cannot be pre-created or populated by another
+    // local user before a coordination update-ref operation.
+    "-c", "core.hooksPath=/dev/null",
+    "-c", "core.fsmonitor=false",
+    "-c", "gc.autoDetach=false",
+    "-c", "maintenance.auto=false",
+    ...args,
+  ];
+  if (args[0] === "diff") safeArgs.splice(9, 0, "--no-ext-diff", "--no-textconv");
+  // Repository-routing variables must never leak from the process that
+  // launched the bridge. Clear every case variant of GIT_* (Windows
+  // environment names are case-insensitive), then restore only the settings
+  // required by these local, non-interactive bridge operations.
+  const env = Object.fromEntries(
+    Object.entries(baseEnvironment).filter(([name]) => !/^GIT_/iu.test(name)),
+  );
+  Object.assign(env, {
+    GIT_OPTIONAL_LOCKS: "0",
+    GIT_PAGER: "",
+    PAGER: "",
+  });
+  return { command: await trustedGitExecutable(), args: safeArgs, env };
+}

plugins/Hylouis233/cli-agent-bridge/mcp.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "cli-agent-bridge": {
+      "type": "stdio",
+      "command": "node",
+      "args": ["./server.mjs"]
+    }
+  }
+}

plugins/Hylouis233/cli-agent-bridge/plugin.json

@@ -0,0 +1,9 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "cli-agent-bridge",
+  "version": "0.1.0",
+  "description": "Delegate coding tasks from MiniMax Code to locally installed coding CLIs (Claude Code, Codex, Kimi Code, ZCode, DSH) through a dependency-free stdio MCP server with git-diff review.",
+  "author": { "name": "Hylouis233", "url": "https://github.com/Hylouis233" },
+  "license": "MIT",
+  "keywords": ["minimax-code", "plugin", "mcp", "multi-agent", "delegation", "orchestration"]
+}