What is clibridge CLAUDE.md?

Repository-specific instructions for CliBridge, a TypeScript service that sends requests through different AI command-line tools. They document its technology choices, limitations, checks, and common failure cases.

Use them when developing, testing, or diagnosing CliBridge workflows, provider support, structured output, images, credentials, or command execution.

They help an agent avoid hidden authentication errors, unsupported features, bad command paths, and unsafe access settings.

How mateusoliveirab/clibridge configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to mateusoliveirab/clibridge. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/mateusoliveirab/clibridge/main/CLAUDE.md

Clone the repo

git clone --depth 1 https://github.com/mateusoliveirab/clibridge

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/mateusoliveirab/clibridge/claude-md/github.svg)](https://agentmods.dev/instructions/mateusoliveirab/clibridge/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/mateusoliveirab/clibridge/claude-md"><img src="https://agentmods.dev/badge/instructions/mateusoliveirab/clibridge/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/mateusoliveirab/clibridge/claude-md"><img src="https://agentmods.dev/badge/instructions/mateusoliveirab/clibridge/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 475 This file is loaded in full into every session.

When invoked 475 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00475	$0.00475
Opus 5.5	$0.00190	$0.00190
Sonnet 5.5	$0.00095	$0.00095
Haiku 4.5	$0.00047	$0.00047

Measured 2mo ago against content hash 48cf93548970, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

clibridge CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 28 lines

How it starts

The opening of the file, as written. The whole thing — 28 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

Stack

Node.js >=20.19.4 · TypeScript · @modelcontextprotocol/sdk · tsx · node:test

AGENTS.md is the shared, tool-neutral contributor contract. Keep this file limited to Claude-specific operational context; do not duplicate its rules.

Gotchas

Fallback Masquerading: Broker-level fallbacks can mask API/credential failures during tests/validations. Always set disableFallback: true in diagnostics, matrix, or environment check scripts to expose genuine rate limits, auth errors, or credit exhaustion.
Workflow Template Interpolation: Shell validation commands in workflows (not just agent prompts) must render template variables (e.g. {{inputs.filename}}) before execution.
Gemini Structured Output — Gemini CLI does not support JSON Schema output natively. The broker must perform client-side schema validation on the stdout payload.
Agy Capabilities — Agy CLI does not support schemas or images. Reject requests requesting these capabilities in the broker before dispatch.
CLI Path Validation — Always assert that provider binaries are on the user's PATH before invoking them to avoid cryptic execution failures.
Read-Only Enforcement — access: 'read-only' on a provider without sandbox support is rejected with UNSUPPORTED_SANDBOX. Only the workflow executor may set allowUnenforcedAccess: true (it detects mutations via per-phase git-state snapshots, including HEAD/stash laundering); never expose that option to direct run_agent callers.
Safe Pushing & Clean — Git push or branch reset/clean commands require explicit user confirmation.

Commands

npm run build — Compile TypeScript to JavaScript using esbuild.
npm test — Run all unit tests.
npm run test:coverage — Run unit tests with code coverage report.
npm run typecheck — Run TypeScript type checking.
npm run ci — Run the required offline pull-request gate.
npm run verify:fast — Run typecheck and scoped tests.
npm run live:validate — Run strict validation against local CLI binaries (with fallbacks disabled).
npm run smoke — Dry-run validation of provider configurations.

Read the full file on GitHub · 28 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 28 lines · 475 tokens per session scan A 48cf93548970

Subscribe to this mod's changes

clibridge CLAUDE.md is an instructions file published in the GitHub repository mateusoliveirab/clibridge (0 stars, last pushed 2mo ago), licensed MIT. It adds 475 tokens to every session, about $0.0019 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Building agents

clibridge CLAUDE.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
clibridge CLAUDE.mdmateusoliveirab/clibridge	Instructions file	0	2mo ago	MIT	A	475	Claude Code
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	5,516	GitHub Copilot
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	today	MIT	A	4,680	Codex, OpenCode
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	275k	3d ago	MIT	A	4,313	Codex, OpenCode

clibridge: Instructions file for Claude Code