let-them-talk 3.4.3 → 3.4.4

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## [3.4.4] - 2026-03-15
+
+### Fixed
+- Add project now accepts any existing directory (removed requirement for package.json or .git)
+- Init safely backs up corrupted .mcp.json and settings.json before overwriting
+
+### Changed
+- Removed plugin references from website and docs
+- Website updated with security features (LAN auth token, CSRF, CSP)
+
 ## [3.4.3] - 2026-03-15
 
 ### Removed — Plugin System

package/LICENSE

@@ -6,7 +6,7 @@ License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
 Parameters
 
 Licensor:             Dekelelz
-Licensed Work:        Let Them Talk v3.4.3
+Licensed Work:        Let Them Talk v3.4.4
                       The Licensed Work is (c) 2024-2026 Dekelelz.
 Additional Use Grant: You may make use of the Licensed Work, provided that
                       you may not use the Licensed Work for a Commercial

package/README.md

@@ -72,7 +72,7 @@ Run `npx let-them-talk init --all` to configure all three at once.
        |                       |                       |
        +----------- .agent-bridge/ directory ----------+
                     messages · agents · tasks
-                    profiles · workflows · plugins
+                    profiles · workflows · permissions
                               |
                               v
                     Web Dashboard :3000
@@ -84,7 +84,7 @@ Each terminal spawns its own MCP server process. All processes share a `.agent-b
 
 ## Highlights
 
-- **27 MCP tools** — messaging, tasks, workflows, profiles, workspaces, branching, plugins
+- **27 MCP tools** — messaging, tasks, workflows, profiles, workspaces, branching
 - **Premium dashboard** — glassmorphism UI, Inter font, gradient accents, SSE real-time (~200ms)
 - **Stats & analytics** — per-agent message counts, response times, hourly activity charts, velocity
 - **Conversation templates** — 4 built-in multi-agent workflows (Code Review, Debug Squad, Feature Dev, Research & Write)
@@ -96,7 +96,7 @@ Each terminal spawns its own MCP server process. All processes share a `.agent-b
 - **Compact view** — dense message toggle for power users, persists to localStorage
 - **Multi-format export** — HTML, Markdown, and JSON export
 - **CLI tools** — send messages and check status directly from the command line
-- **Plugin system** — extend with custom tools, 30s sandboxed execution
+- **Secure by default** — CSRF protection, LAN auth tokens, Content Security Policy, agent permissions
 - **Zero config** — one `npx` command, auto-detects your CLI, works immediately
 
 ## Agent Templates
@@ -147,7 +147,7 @@ Launch with `npx let-them-talk dashboard` — opens at `http://localhost:3000`.
 - Browser notifications and sound alerts
 - LAN mode for phone access
 
-## MCP Tools (27 + plugins)
+## MCP Tools (27)
 
 <details>
 <summary><strong>Messaging (13 tools)</strong></summary>
@@ -207,38 +207,6 @@ Launch with `npx let-them-talk dashboard` — opens at `http://localhost:3000`.
 
 </details>
 
-## Plugins
-
-Extend Let Them Talk with custom tools. Drop a `.js` file in `.agent-bridge/plugins/`.
-
-```javascript
-module.exports = {
-  name: 'my-tool',
-  description: 'What this tool does',
-  inputSchema: {
-    type: 'object',
-    properties: {
-      query: { type: 'string', description: 'Input text' }
-    },
-    required: ['query']
-  },
-  handler(args, ctx) {
-    // ctx: sendMessage, getAgents, getHistory, readFile, registeredName, dataDir
-    return { result: 'done', query: args.query };
-  }
-};
-```
-
-```bash
-npx let-them-talk plugin add my-tool.js    # install
-npx let-them-talk plugin list              # list installed
-npx let-them-talk plugin remove my-tool    # remove
-npx let-them-talk plugin enable my-tool    # enable
-npx let-them-talk plugin disable my-tool   # disable
-```
-
-Plugins run sandboxed with a 30-second timeout. Manage via CLI or dashboard.
-
 ## CLI Reference
 
 ```bash
@@ -248,7 +216,8 @@ npx let-them-talk init --template <name>   # use a team template
 npx let-them-talk templates                # list templates
 npx let-them-talk dashboard                # launch web dashboard
 npx let-them-talk reset                    # clear conversation data
-npx let-them-talk plugin <subcommand>      # manage plugins
+npx let-them-talk msg <agent> <text>       # send a message from CLI
+npx let-them-talk status                  # show active agents
 npx let-them-talk help                     # show help
 ```
 
@@ -268,7 +237,7 @@ Let Them Talk is a **local message broker**. It passes text messages between CLI
 
 **Does not:** access the internet, store API keys, run cloud services, or grant new filesystem access.
 
-**Built-in protections:** CORS restriction, XSS prevention, path traversal protection, symlink validation, origin enforcement, SSE connection limits, input validation, message size limits (1MB), plugin sandboxing (30s timeout).
+**Built-in protections:** CSRF custom header, LAN auth tokens, Content Security Policy, CORS restriction, XSS prevention, path traversal protection, symlink validation, origin enforcement, SSE connection limits, input validation, message size limits (1MB), agent permissions.
 
 **LAN mode:** Optional phone access exposes the dashboard to your local WiFi only. Requires explicit activation.
 

package/cli.js

@@ -8,7 +8,7 @@ const command = process.argv[2];
 
 function printUsage() {
   console.log(`
-  Let Them Talk — Agent Bridge v3.4.3
+  Let Them Talk — Agent Bridge v3.4.4
   MCP message broker for inter-agent communication
   Supports: Claude Code, Gemini CLI, Codex CLI
 
@@ -65,7 +65,12 @@ function setupClaude(serverPath, cwd) {
     try {
       mcpConfig = JSON.parse(fs.readFileSync(mcpConfigPath, 'utf8'));
       if (!mcpConfig.mcpServers) mcpConfig.mcpServers = {};
-    } catch {}
+    } catch {
+      // Backup corrupted file before overwriting
+      const backup = mcpConfigPath + '.backup';
+      fs.copyFileSync(mcpConfigPath, backup);
+      console.log('  [warn] Existing .mcp.json was invalid — backed up to .mcp.json.backup');
+    }
   }
 
   mcpConfig.mcpServers['agent-bridge'] = {
@@ -93,7 +98,11 @@ function setupGemini(serverPath, cwd) {
     try {
       settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
       if (!settings.mcpServers) settings.mcpServers = {};
-    } catch {}
+    } catch {
+      const backup = settingsPath + '.backup';
+      fs.copyFileSync(settingsPath, backup);
+      console.log('  [warn] Existing settings.json was invalid — backed up to settings.json.backup');
+    }
   }
 
   settings.mcpServers['agent-bridge'] = {

package/dashboard.html

@@ -2778,7 +2778,7 @@
   </div>
 </div>
 <div class="app-footer">
-  <span>Let Them Talk v3.4.3</span>
+  <span>Let Them Talk v3.4.4</span>
 </div>
 <div class="profile-popup" id="profile-popup" onclick="event.stopPropagation()">
   <div class="profile-popup-header">

package/dashboard.js

@@ -412,15 +412,7 @@ function apiAddProject(body) {
   const absPath = path.resolve(body.path);
   if (!fs.existsSync(absPath)) return { error: `Path does not exist: ${absPath}` };
 
-  // Restrict to paths under cwd or paths that look like project directories
-  const cwd = path.resolve(process.cwd());
-  if (!absPath.startsWith(cwd + path.sep) && absPath !== cwd) {
-    const hasProject = fs.existsSync(path.join(absPath, 'package.json')) ||
-                       fs.existsSync(path.join(absPath, '.git'));
-    if (!hasProject) {
-      return { error: 'Path must be a project directory (with package.json or .git)' };
-    }
-  }
+  // Any existing directory can be added as a project — user explicitly chose it
 
   const projects = getProjects();
   const name = body.name || path.basename(absPath);
@@ -1480,7 +1472,7 @@ server.listen(PORT, LAN_MODE ? '0.0.0.0' : '127.0.0.1', () => {
   const dataDir = resolveDataDir();
   const lanIP = getLanIP();
   console.log('');
-  console.log('  Let Them Talk - Agent Bridge Dashboard v3.4.3');
+  console.log('  Let Them Talk - Agent Bridge Dashboard v3.4.4');
   console.log('  ============================================');
   console.log('  Dashboard:  http://localhost:' + PORT);
   if (LAN_MODE && lanIP) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "let-them-talk",
-  "version": "3.4.3",
+  "version": "3.4.4",
   "description": "MCP message broker + web dashboard for inter-agent communication. Let AI CLI agents talk to each other.",
   "main": "server.js",
   "bin": {

package/server.js

@@ -1480,7 +1480,7 @@ function toolListBranches() {
 // --- MCP Server setup ---
 
 const server = new Server(
-  { name: 'agent-bridge', version: '3.0.0' },
+  { name: 'agent-bridge', version: '3.4.4' },
   { capabilities: { tools: {} } }
 );
 
@@ -1994,7 +1994,7 @@ async function main() {
   ensureDataDir();
   const transport = new StdioServerTransport();
   await server.connect(transport);
-  console.error('Agent Bridge MCP server v3.4.3 running (27 tools)');
+  console.error('Agent Bridge MCP server v3.4.4 running (27 tools)');
 }
 
 main().catch(console.error);