Add plugin cli-agent-bridge

[Hylouis233]

Migrated from hetaoBackend/MiniMax-Code-Plugins#16; the earlier review history remains there. Current head: 902b194.

---

What changes

Adds the hosted Plugin plugins/Hylouis233/cli-agent-bridge: a dependency-free stdio MCP server
and same-name Skill that let MiniMax Code delegate bounded coding tasks to locally installed
Claude Code, Codex CLI, Kimi Code, ZCode, or DSH processes inside a Git repository, then review
the resulting workspace and commit changes.

The server exposes three tools:

• list_backends reports configured CLIs, availability, versions, and experimental notes.
• workspace_status returns a bounded Git snapshot: status, staged/unstaged diff stats, changed
  files (including untracked paths), HEAD and symbolic HEAD, and refs.
• delegate_task runs one backend and returns bounded output, before/after Git snapshots, moved
  refs, and an attributed commits block. Dirty worktrees are rejected unless allowDirty=true;
  unsupported resume requests fail instead of silently starting a fresh session.

Safety and concurrency behavior

• Calls targeting the same Git common directory serialize across subdirectory aliases, symlinks,
  linked worktrees, independent MCP clients, and bridge processes. Independent clones can run in
  parallel.
• Coordination state lives in a private bare lock store under the Git common directory and never
  enters the target repository. Lease acquisition and recovery use compare-and-swap owner records;
  uncertain worker termination fails closed behind a shared quarantine marker.
• Cancellation and the overall deadline cover discovery, lock waits, snapshots, the backend, and
  post-run attribution. The supported Windows path uses a kill-on-close Job Object and confirms
  tree termination before releasing the repository lease.
• Git attribution handles unborn HEADs, symbolic-HEAD changes, force-moved and non-commit refs,
  fetched history, more than 256 baseline tips, linked worktrees, submodules, unusual path bytes,
  and staged/untracked changes without presenting truncated evidence as complete.
• Trace2 worktree resolution is interruption-aware, yields during large session sets, caches
  repeated identities, and fails commit attribution closed when a POSIX realpath cannot be proven.
• The server makes no network calls and stores no credentials or session logs. The selected backend
  CLI uses the user's own authentication and may send task/workspace data to its provider.

Requirements and platform disclosure

• Node.js 20 or newer and Git on PATH; the target workspace must be a Git repository.
• Production delegation and workspace inspection are supported on Windows. Linux, macOS, and BSD
  fail closed before backend configuration, workspace access, Git resolution, or executable
  probing because this dependency-free server cannot prove containment after an arbitrary local
  worker asks a host service to launch outside its original process tree.
• Backend CLIs must already be installed, authenticated, and configured by the user. Claude,
  Codex, and Kimi templates are non-experimental; ZCode and DSH remain explicitly experimental.
• No credentials, installers, native binaries, private endpoints, or telemetry are bundled.

Latest review follow-ups

Current head also closes the review gaps left after the earlier Copilot follow-up:

• workspace-lock deadline and cancellation failures return structured MCP results;
• Trace2 session resolution continues observing cancellation/deadlines and does not leave a late
  rejected realpath promise unhandled;
• repeated worktree identities are cached, while unresolved POSIX identities fail attribution
  closed;
• the Trace2 capability probe reads raw emitted events instead of invoking the parser under test;
• environment-gated tests return immediately after context.skip();
• the Windows workflow invokes the four explicit test files, and both CI checkout pins use the
  canonical 40-character actions/checkout@v7.0.1 commit SHA.

Verification

Verified locally on current head 902b194:

• npm run validate: all 9 hosted Plugins and both examples validated.
• Explicit cli-agent-bridge suite: 219 tests, 199 passed, 20 platform-specific skips, 0 failed.
  The skips are Windows-only or other OS-specific fixtures on the macOS verification host.
• Four focused Trace2 regressions all executed and passed: bounded/interrupted provenance,
  unresolved-identity fail-closed behavior, successive fetch detection, and partial-fetch
  uncertainty.
• node --check passes for the server and integration test file.
• actionlint reports zero diagnostics for .github/workflows/ci.yml.
• git diff --check is clean.

The upstream PR currently has no GitHub-hosted Windows run for this head. The workflow is present
and statically validated, but no hosted runner result is currently available. No skipped
[code]smith check is being presented as test evidence.

Submission checklist

• Plugin path, manifest name, license, examples, requirements, platforms, accounts, network/data
  behavior, and experimental backends are disclosed.
• No scaffold TODOs, credentials, symlinks, installers, or native binaries are included.
• Repository validation and the local current-head plugin suite pass.
• GitHub-hosted Windows job passes on the current head.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[hetaoBackend]

Please address the repository-scope regression before merge:

This plugin changes the root package.json test script from node --test to node --test --test-concurrency=1. That changes test execution semantics for every existing plugin and masks concurrency regressions globally. Please move the serialization requirement into the cli-agent-bridge-specific test command/fixtures, or provide a repository-level justification and regression evidence showing why all tests must become serial.

The plugin is Windows-only and that limitation is disclosed; the blocking issue here is the unrelated root-level test behavior change. The current [code]smith check is SKIPPED.

[hetaoBackend]

当前 head 18e26e2 的自带 suite 实测为 218 tests：194 pass、4 fail、20 skipped，仍有阻塞：

• a cross-process lock waiter obeys the delegation deadline 在 tests/server.test.mjs:2458 得到缺失 result，随后 TypeError: Cannot read properties of undefined (reading structuredContent)。
• provenance reads are bounded and interruptible、successive fetches are detected even after FETCH_HEAD is overwritten、a partially successful nonzero fetch makes provenance uncertain 均实际 sawFetch: false，未达到预期的 fail-closed 证据。
• 插件声明 production 仅支持 Windows，但跨平台/Trace2 相关测试没有正确 gate；Windows Job Object 路径在当前环境被跳过。需要修复这些测试/实现问题，或提供可靠的目标平台 CI 证据，不能在所有 [code]smith Checks 为 SKIPPED 时放行。

请先解决 deadline/provenance 失败并补足 Windows 运行证据，再重新提交。

[Hylouis233]

Head 1a4dfb0 relative to the previous 18e26e2 run:

• Cross-process lock deadline: withWorkspaceLock / delegateTask / the tools/call handler treat WorkspaceLockDeadlineError and cancellation as structured MCP results. A waiter that reaches the delegation deadline returns { timedOut: true, error: /waiting for the workspace lock/ } instead of an undefined tools/call payload.
• Trace2 fetch provenance: worktrees are matched by resolved path plus POSIX realpath, so a fetch recorded under a tmpdir symlink sets sawFetch: true. Windows skips realpath so the case-sensitive identity fixture stays fail-closed.
• Tests: Windows-only skips carry an explicit reason; successive and partial fetch tests pass gitWorktreeRoot into readBackendGitProvenance and skip only if a local Trace2 probe cannot prove a fetch.
• Root package.json remains "test": "node --test". Plugin suites serialize through tests/plugin-test-lock.mjs instead of changing repository-wide concurrency.

The Windows Job Object path remained platform-gated on this head, and no new Windows CI log was available at that point.

[Hylouis233]

Head 9d80ab1 added windows-cli-agent-bridge on windows-latest in .github/workflows/ci.yml.

The job was configured to invoke the cli-agent-bridge test directories. The existing Ubuntu validate job and the root package.json command ("test": "node --test") were unchanged on that head.

[Hylouis233]

Current head is 902b194 (b1b89e1 production/tests + 902b194 Windows CI command).

This follow-up closes the three review threads left on the merged fork PR:

• Trace2 session resolution now uses interruptible thunk-started realpath calls, caches repeated identities, yields/re-checks cancellation and deadlines, and fails POSIX identity errors closed.
• Both environment-gated tests return immediately after context.skip().
• The capability probe inspects raw Trace2 events independently; setup/Git/I/O/parse errors now fail instead of being cached as “unsupported”.
• The Windows job runs the four explicit test files rather than passing directories to node --test; both CI checkout pins now use the canonical 40-character v7.0.1 SHA.

Current-head local evidence:

• npm run validate: 9 hosted Plugins + both examples validated.
• Explicit cli-agent-bridge suite: 219 total, 199 passed, 20 OS-specific skipped, 0 failed.
• Four focused Trace2 regressions: 4 passed, 0 skipped/failed.
• node --check, actionlint, and git diff --check: clean.

The PR body now reflects the actual head and Windows-only production support. It explicitly leaves the GitHub-hosted Windows run unchecked; no skipped [code]smith result is being presented as CI evidence.