Add plugin cli-agent-bridge

package.json

@@ -10,7 +10,7 @@
   "scripts": {
     "create": "node scripts/create-plugin.mjs",
     "check": "npm run validate && npm test",
-    "test": "node --test",
+    "test": "node --test --test-concurrency=1",
     "validate": "node scripts/validate.mjs"
   },
   "license": "Apache-2.0"

plugins/Hylouis233/cli-agent-bridge/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Hylouis233
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

plugins/Hylouis233/cli-agent-bridge/NOTICE

@@ -0,0 +1,14 @@
+cli-agent-bridge is an original implementation informed by the following
+open-source projects. Their licenses are retained where applicable.
+
+- claude-subagent-mcp (https://github.com/ltxzs/claude-subagent-mcp)
+  MIT License. Copyright (c) ltxzs contributors.
+  Its headless spawn, timeout, capture-cap, and git-snapshot patterns
+  informed server.mjs.
+
+- subagent-mcp (https://github.com/Heretyc/subagent-mcp)
+  Apache License 2.0. Copyright 2026 Lexi Blackburn.
+  Its delegated-CLI orchestration concepts informed the Skill guidance.
+
+- wshobson/agents (https://github.com/wshobson/agents)
+  Reference for multi-harness agent plugin packaging patterns.

plugins/Hylouis233/cli-agent-bridge/backends.json

@@ -0,0 +1,10 @@
+{
+  "$comment": "Backend command templates for cli-agent-bridge. <task> and <session> are placeholders. Edit command or buildArgs to point at another binary or add flags. Never store credentials here; each CLI uses your own local authentication.",
+  "backends": {
+    "claude": { "label": "Claude Code", "command": "claude", "buildArgs": ["-p", "<task>", "--output-format", "text", "--permission-mode", "acceptEdits"], "resumeArgs": ["-p", "<task>", "--output-format", "text", "--permission-mode", "acceptEdits", "--resume", "<session>"], "experimental": false },
+    "codex": { "label": "OpenAI Codex CLI", "command": "codex", "buildArgs": ["exec", "--", "<task>"], "resumeArgs": ["exec", "resume", "<session>", "--", "<task>"], "experimental": false },
+    "kimi": { "label": "Kimi Code", "command": "kimi", "buildArgs": ["-p", "<task>"], "resumeArgs": ["-S", "<session>", "-p", "<task>"], "experimental": false },
+    "zcode": { "label": "ZCode", "command": "zcode", "buildArgs": ["-p", "<task>"], "resumeArgs": null, "experimental": true, "notes": "Desktop ZCode builds have no verified headless mode; set command to your CLI if your distribution provides one." },
+    "dsh": { "label": "DeepSeek Harness (dsh)", "command": "dsh", "buildArgs": ["--profile", "headless", "<task>"], "resumeArgs": null, "experimental": true, "notes": "Uses the documented headless profile; requires a headless profile under DSH_HOME/profiles." }
+  }
+}

plugins/Hylouis233/cli-agent-bridge/git-executable.mjs

@@ -0,0 +1,132 @@
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import { access, mkdir, realpath, stat } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+
+let executablePromise = null;
+let hooksRootPromise = null;
+const pathCommandPromises = new Map();
+
+function userScope() {
+  let identity;
+  try {
+    const user = os.userInfo();
+    identity = Number.isInteger(user.uid) && user.uid >= 0
+      ? process.platform + ":uid:" + String(user.uid)
+      : process.platform + ":" + user.username + ":" + user.homedir;
+  } catch {
+    identity = process.platform + ":" + (process.env.USERNAME ?? process.env.USER ?? os.homedir());
+  }
+  return createHash("sha256").update(identity).digest("hex").slice(0, 20);
+}
+
+const DISABLED_HOOKS_ROOT = path.join(
+  os.tmpdir(), "minimax-cli-agent-bridge-git-" + userScope(), "disabled-hooks",
+);
+
+async function resolveGitExecutable() {
+  const names = process.platform === "win32" ? ["git.exe", "git.com"] : ["git"];
+  for (const rawDirectory of (process.env.PATH ?? "").split(path.delimiter)) {
+    const directory = rawDirectory.replace(/^"|"$/gu, "");
+    // Never let a relative PATH component reinterpret an untrusted workspace
+    // as an executable search root after a Git command changes cwd.
+    if (!directory || !path.isAbsolute(directory)) continue;
+    for (const name of names) {
+      const candidate = path.join(directory, name);
+      try {
+        await access(candidate, process.platform === "win32" ? constants.F_OK : constants.X_OK);
+        if (!(await stat(candidate)).isFile()) continue;
+        return await realpath(candidate);
+      } catch { /* try the next trusted PATH entry */ }
+    }
+  }
+  throw new Error("cannot locate git in an absolute PATH directory");
+}
+
+async function resolvePathCommandUncached(command) {
+  if (path.isAbsolute(command)) {
+    try {
+      await access(command, process.platform === "win32" ? constants.F_OK : constants.X_OK);
+      return (await stat(command)).isFile() ? await realpath(command) : null;
+    } catch { return null; }
+  }
+  if (/[\\/]/u.test(command)) return null;
+  const extensions = process.platform === "win32"
+    ? (path.extname(command)
+        ? [""]
+        : [...(process.env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean), ".ps1"])
+    : [""];
+  for (const rawDirectory of (process.env.PATH ?? "").split(path.delimiter)) {
+    const directory = rawDirectory.replace(/^"|"$/gu, "");
+    if (!directory || !path.isAbsolute(directory)) continue;
+    for (const extension of extensions) {
+      const candidate = path.join(directory, command + extension);
+      try {
+        await access(candidate, process.platform === "win32" ? constants.F_OK : constants.X_OK);
+        if ((await stat(candidate)).isFile()) return await realpath(candidate);
+      } catch { /* continue searching */ }
+    }
+  }
+  return null;
+}
+
+export function resolvePathCommand(command) {
+  if (typeof command !== "string" || !command) return Promise.resolve(null);
+  if (!pathCommandPromises.has(command)) {
+    const resolution = resolvePathCommandUncached(command);
+    pathCommandPromises.set(command, resolution);
+    // Share an in-flight lookup and retain positive results, but do not make a
+    // missing/not-yet-installed CLI permanent for the lifetime of the server.
+    // The identity guard prevents an older completion from deleting a newer
+    // retry that has already occupied the same cache slot.
+    void resolution.then((resolved) => {
+      if (resolved === null && pathCommandPromises.get(command) === resolution) {
+        pathCommandPromises.delete(command);
+      }
+    }, () => {
+      if (pathCommandPromises.get(command) === resolution) pathCommandPromises.delete(command);
+    });
+  }
+  return pathCommandPromises.get(command);
+}
+
+export function trustedGitExecutable() {
+  executablePromise ??= resolveGitExecutable();
+  return executablePromise;
+}
+
+async function disabledHooksRoot() {
+  hooksRootPromise ??= mkdir(DISABLED_HOOKS_ROOT, { recursive: true, mode: 0o700 })
+    .then(() => DISABLED_HOOKS_ROOT)
+    .catch((error) => {
+      hooksRootPromise = null;
+      throw error;
+    });
+  return await hooksRootPromise;
+}
+
+export async function safeGitInvocation(args) {
+  const safeArgs = [
+    "-c", "core.hooksPath=" + await disabledHooksRoot(),
+    "-c", "core.fsmonitor=false",
+    "-c", "gc.autoDetach=false",
+    "-c", "maintenance.auto=false",
+    ...args,
+  ];
+  if (args[0] === "diff") safeArgs.splice(9, 0, "--no-ext-diff", "--no-textconv");
+  const env = {
+    ...process.env,
+    GIT_OPTIONAL_LOCKS: "0",
+    GIT_PAGER: "",
+    PAGER: "",
+  };
+  for (const name of [
+    "GIT_ALTERNATE_OBJECT_DIRECTORIES", "GIT_CONFIG_COUNT", "GIT_DIR", "GIT_DIFF_OPTS",
+    "GIT_EXTERNAL_DIFF", "GIT_INDEX_FILE", "GIT_OBJECT_DIRECTORY", "GIT_WORK_TREE",
+  ]) delete env[name];
+  for (const name of Object.keys(env)) {
+    if (/^GIT_CONFIG_(?:KEY|VALUE)_\d+$/u.test(name)) delete env[name];
+  }
+  return { command: await trustedGitExecutable(), args: safeArgs, env };
+}

plugins/Hylouis233/cli-agent-bridge/mcp.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "cli-agent-bridge": {
+      "type": "stdio",
+      "command": "node",
+      "args": ["./server.mjs"]
+    }
+  }
+}

plugins/Hylouis233/cli-agent-bridge/plugin.json

@@ -0,0 +1,9 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "cli-agent-bridge",
+  "version": "0.1.0",
+  "description": "Delegate coding tasks from MiniMax Code to locally installed coding CLIs (Claude Code, Codex, Kimi Code, ZCode, DSH) through a dependency-free stdio MCP server with git-diff review.",
+  "author": { "name": "Hylouis233", "url": "https://github.com/Hylouis233" },
+  "license": "MIT",
+  "keywords": ["minimax-code", "plugin", "mcp", "multi-agent", "delegation", "orchestration"]
+}