Bridge
Tiny native runtime (~110 KB, written in C) that connects any machine to TODOforAI over an encrypted WebSocket channel. Zero runtime dependencies, single binary, deployable via one enrollment token.
Platform Support: ✅ Windows · ✅ macOS · ✅ Linux
Installation
macOS / Linux — interactive login:
Code
macOS / Linux — token enrollment (headless):
Code
Windows (PowerShell):
Code
Mint a token on an authenticated machine with todoforai-bridge enroll.
Alternative Downloads: GitHub Releases
Design
Bridges are islands by default. One guaranteed capability: accept commands from the backend over WebSocket and execute them. Everything else — SSH, port exposure, overlay networking, language runtimes — is configured by the AI on demand by running commands through this same channel.
Wire protocol
Code
No TLS. No OpenSSL. All crypto handled by Noise (monocypher + blake2b). End-to-end encryption; nginx/Cloudflare terminate external TLS, the Noise channel runs through unchanged.
Key Features
- Tiny footprint: ~110 KB stripped binary, libc only
- Zero dependencies: Single static binary, deployable anywhere
- End-to-end encrypted: Noise protocol, no TLS dependency
- Self-updating: Server-driven updates over the existing channel
- Cross-platform: POSIX + Windows (ConPTY, Win10 1809+)
Open Source: Full codebase available on GitHub