Skip to content

Security: Empty-Jing/claude-mem-opencode-bridge

Security

SECURITY.md

Security Policy

Supported Versions

Until the first stable release, only the latest commit on the default branch is supported. The bridge is pinned to claude-mem 13.12.4 and has been verified only on the environment listed in the README.

Reporting A Vulnerability

Use GitHub private vulnerability reporting when it is enabled for this repository. If private reporting is unavailable, open an issue that contains no exploit details or secrets and ask the maintainer for a private contact channel.

Do not include:

  • OpenCode authentication files or OAuth tokens.
  • ~/.claude-mem/settings.json.
  • ~/.claude-mem/opencode-server.env.
  • Bridge Bearer tokens.
  • Raw private conversations, observations, summaries, SQLite databases, or Chroma data.
  • Logs that have not been reviewed and redacted.

Include affected versions, operating system, a minimal redacted reproduction, expected behavior, and impact.

Operational Boundaries

  • The bridge must remain bound to 127.0.0.1.
  • Do not publish ports 37700, 37710, or 37711 through a container, tunnel, reverse proxy, or firewall rule.
  • Protect ~/.claude-mem/settings.json with mode 600 and its parent directory with mode 700.
  • Protect ~/.claude-mem/opencode-server.env with mode 600.
  • Treat conversation content and generated memories as sensitive local data.
  • Review the model provider's data handling policy before processing sensitive information.
  • Do not install or upgrade across unsupported claude-mem or OpenCode versions without revalidation.
  • Review installation scripts before running them. This repository does not recommend curl | sh installation.

Credential Design

The Bridge Token only authenticates the local Worker to the local bridge. It is not an OpenRouter key, an OpenAI key, or an OpenCode OAuth token. The bridge delegates model authentication and refresh to OpenCode and must never read OpenCode credential files.

The OpenCode Server password is a second local secret used only for HTTP Basic Auth between the Bridge and the dedicated OpenCode API on 127.0.0.1:37711. It is generated separately from the Bridge Token and is not an OAuth credential.

The dedicated OpenCode and Bridge services clear known Herdr process variables. The OpenCode process runs with --pure so that compression sessions do not load the interactive claude-mem plugin or recurse into the Worker.

There aren't any published security advisories