SeemSeam/claude_codex_bridge

The Windows beta artifact is attached to the matching stable CCB GitHub release. Download ccb-windows-x86_64.zip and its .sha256 sidecar, verify the digest, extract the ZIP, then run:

.\install.ps1 install -Yes
ccb --print-version

It requires native Windows x64, Python 3.10+, WezTerm, Git Bash, and Herdr 0.8.0 or newer. The installer creates an install-local managed Python runtime. The binaries are unsigned, and ccb update remains diagnostic-only for this beta support tier; install a later Windows build by rerunning its validated install.ps1.

If npm is not convenient in your environment, download the matching package from Releases, unpack it, and install:

tar -xzf ccb-*.tar.gz
cd ccb-*
./install.sh install

Source install is intended only for development or temporary fallback:

git clone https://github.com/SeemSeam/claude_codex_bridge.git
cd claude_codex_bridge
./install.sh install

Source install links global ccb / ask back to the checkout. Regular users should prefer the npm package.

CCB 8.6.13 includes the Flutter CCB Mobile source in mobile/ and publishes the Android APK through GitHub Releases:

• Download CCB Mobile v8.6.13 APK
• App source: mobile/app
• Server gateway source: lib/mobile_gateway

Safety boundary:

• The CCB gateway binds to loopback by default, for example 127.0.0.1:8787.
• For direct LAN access, bind one specific private interface address (wildcard and public addresses are rejected): ccb install mobile --route-provider lan --listen 192.168.31.155:8787. The pairing URL is inferred from --listen; no forwarding process or --public-url is needed.
• Remote access uses Tailscale Serve, not Tailscale Funnel.
• CCB does not store Tailscale passwords, OAuth tokens, admin API tokens, or automatically modify tailnet ACLs/grants.
• The phone receives only the scopes authorized by the pairing profile, such as view, content, terminal, file upload, and file download.

| Role | Purpose | | :--- | :--- | | agentroles.ccb_self | CCB self-maintenance, config help, runtime diagnosis, protected recovery, and workflow orchestration. | | agentroles.archi | Architecture review, boundary checks, coupling analysis, maintainability risks, and follow-up gate advice. | | agentroles.frontend_engineer | Frontend design and implementation, design systems, accessibility, browser QA, and reviewed AGY delegation. | | agentroles.mobile_app_engineer | Mobile design and implementation for iOS, Android, React Native, Expo, Flutter, SwiftUI, Jetpack Compose, and more. | | agentroles.mother | Role creation, role source audit, role research, blueprint design, and Agent Roles spec compliance checks. | | agentroles.su_ccb | SU-CCB workflow operations for requirement analysis, planning, dispatch, review gates, archiving, and recovery. |

• Run OMP asks in the visible managed pane and use OMP's native completion evidence, so tool-using turns remain active until the final assistant result.
• Keep Config V1/V2 role selection focused on general roles and agentroles.ccb_self; workflow-specific ccb_* roles remain available to V3 rather than appearing in earlier schemas.
• Refocus current public provider guidance on the primary supported CLI families. DeepSeek CLI, Z.ai, and DeepSeek Harness remain implemented and documented in historical release notes, but are no longer presented as current headline support.
• No project, conversation, or configuration migration is required. Native Windows x64 and Herdr remain beta and isolated from the shared Linux/macOS runtime.

• Show Pi and OMP native conversations in CCB Mobile while preserving Provider-private session paths and transcript boundaries.
• Inherit Pi profile assets into Agent-private homes through immutable shared snapshots, and publish concurrent first-start snapshots atomically (PR #328).
• Preserve Git author and committer identity in managed Provider homes, and return Agent control immediately after an accepted ask submission (PRs #329 and #330).
• Refresh the WeChat community QR code. Restart managed Pi Agents to refresh projected profile assets; no project, conversation, pairing, or configuration migration is required.

• Restore bearer authentication for explicit Codex CLI 0.149.0 custom providers while keeping route-only local gateways unauthenticated.
• Add per-Agent Codex model catalog projection and model override support, preserve reconnect and custom tmux configuration behavior, and make Pi clear start a fresh context (PRs #321, #322, #325, and #326).
• Keep Herdr lifecycle synchronization and UTF-8 native startup inside Windows-owned implementations, without adding shared-to-Windows imports (PRs #320 and #323).
• Restart managed Codex Agents and CCB projects after upgrading. No project, conversation, pairing, or configuration migration is required.

• Refresh an existing Agent-private Claude Keychain credential after an external OAuth re-login, so a stopped managed restart does not keep using a revoked token (Issue #319).
• Preserve a Claude-private Keychain refresh when the inherited source credential is unchanged; external Claude Keychain services remain read-only.
• Fail closed for symlinked CCB credential projections and private Keychain inspection errors. No project, conversation, pairing, or configuration migration is required.

• Add the official DeepSeek Harness as the separate Developer Preview provider dsh, using its loopback HTTP/WebSocket service and exact native turn evidence.
• Make managed AGY 1.1.13 select private file token storage immediately, avoiding the keyring timeout without writing to the user's source HOME (Issue #318).
• Roll back Windows PR changes that crossed into shared Linux/macOS runtime code and add a trusted-base native-only PR gate that rejects future cross-platform leakage.
• Keep DSH clear, compact, exact-session restore, credentials, skills, and runtime state inside provider-native, agent-private boundaries.

• Reflow Agent terminal snapshots to the phone viewport while preserving the desktop tmux pane geometry.
• Keep terminal input and reconnection stable across LAN and Relay routes, and close active sessions cleanly during gateway shutdown.
• Keep terminal font size and shortcut order in the shared Terminal settings panel, with full-width inline terminal mode on phones and wide layouts.
• Reattach persisted Windows Herdr namespace and pane references with fail-closed capability checks (PR #304).

• Turn links to ordinary files in the current Agent's .ccb/workspaces/<agent>/... tree into authenticated Mobile download attachments.
• Keep the boundary fail-closed: other Agent workspaces, hidden workspace paths, and all other private .ccb runtime state remain unavailable.
• Preserve the existing Mobile client behavior and pairing model; no project configuration or state migration is required.

• Require exact, external approval before project configuration can execute tool-window commands or custom Provider command templates; use ccb config approve-commands for intentional values.
• Recover managed Codex conversations from the latest valid session when the current session record is corrupt, without silently clearing context.
• Add visible-pane Cursor execution, Pi native history, OMP Provider-config inheritance, and more reliable Windows process and namespace cleanup.
• Expand CCB Mobile with multi-session host terminals, Relay capability-negotiated Provider controls, and stronger native Windows readiness validation.

• Show selected-Agent Provider identity, configured/active/pending model and thinking state, Codex/Claude native session usage, and optional account quota in CCB Mobile.
• Persist supported model/thinking choices through guarded, restart-required host configuration without interrupting active work or exposing Provider credentials.
• Open project-window or Agent terminals directly from Mobile home and customize terminal shortcut visibility and order.
• Add the built-in ccb-compact Skill and ccb compact command with outstanding-work checks and fail-closed Provider command selection.
• Populate Config UI from the complete available Role catalog, retain native-session boundaries in Mobile history, and refresh the WeChat group QR image.

• Keep ccb-clear in every supported managed Agent and add the required ccb-diagnose Skill. Run $ccb_diagnose <agentname> to combine daemon, lineage, queue, inbox, trace, provider-log, and live Pane evidence for one Agent.
• Classify working, waiting-input, stale-prompt, Provider-error, dead/blank, and misframed Pane states; apply only evidence-backed bounded control-plane recovery and verify the Agent afterward.
• Generate a redacted incident draft after diagnosis, but require fresh user authorization before creating any GitHub issue.
• Recover abandoned mailbox deliveries without replaying business work, expose queue depth and active job identifiers in the sidebar, preserve Kiro login/settings through its isolated KIRO_HOME, forward Provider no-terminal timeout settings, and keep old Claude busy-turn records fenced from newly queued requests.
• Probe reconnect readiness against the active Codex Provider route so custom Provider capacity and connectivity failures can continue through the existing guarded recovery path.

• Resolve each configured API, token, URL, route, and account dimension from CCB-local authority first, then read only the missing dimensions from the current external Provider state.
• Refresh inherited state on a stopped Provider generation without writing back to the user's shell, Provider home, IDE, keyring, or remote login.
• Keep one stable CCB conversation and its workspace, queue, and history across authority generations. Same-authority sessions use native resume; supported Codex/Claude/Gemini import or fork when safe, otherwise CCB records a linked continuation instead of hiding history.
• Recover usable sessions affected by the withdrawn v8.5.5 migration shape without clearing them. The withdrawn v8.5.5 package is not reused.
• Install and automatically arm bundled codex-reconnect for managed Codex panes; terminal network and selected-model capacity failures receive one b