@staix/agent-hub 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.6.0
+
+- Pi peer with managed local model routing, RPC and native terminal integration (#25).
+- Authenticated inference relay for DGX coding/fast aliases and loopback MLX Qwen3 8B inference on Apple Silicon.
+- Pi-first task routing with per-class backend selection; PII tasks remain restricted to the existing local worker.
+- Hub-approved file and shell tools with persistent session/tool-call receipts to prevent duplicate effects.
+- Protocol 9 and Pi session metadata for controlled recovery from protocol 8.
+
 ## 0.5.0
 
 - Controlled protocol-8 restart with private queue/session snapshots, manual-pause preservation, instance fencing and verified release (#21).

package/README.md

@@ -1,10 +1,10 @@
 # agent-hub
 
-Native multi-agent hub for one developer's machine: Claude Code, Codex, Kimi Code and a
+Native multi-agent hub for one developer's machine: Claude Code, Codex, Kimi Code, Pi and a
 hub-owned local-LLM worker collaborate as peers in independent project directories, with
 task-aware model routing (Switchyard) in front of a self-hosted gateway (OmniRoute).
 
-Status: 0.5.0. All six milestones of the design spec are implemented; the [smoke checklist](docs/smoke.md)
+Status: 0.6.0. All six milestones of the design spec are implemented; the [smoke checklist](docs/smoke.md)
 says what has and has not been verified against real agents.
 
 Version 0.5.0 adds [controlled upgrade and session recovery](docs/specs/2026-09-20-upgrade-recovery-design.md).
@@ -29,7 +29,7 @@ cd <your project> && ahub init && ahub up && ahub tail
 Or install the same version from GitHub:
 
 ```bash
-bun add -g github:STAIxBWLB/agent-hub#v0.5.0 && ahub setup
+bun add -g github:STAIxBWLB/agent-hub#v0.6.0 && ahub setup
 ```
 
 The installed commands remain `ahub` and `agent-hub`.
@@ -58,8 +58,51 @@ an N-peer message bus and attaches each agent through its native control surface
 | Claude Code | channel plugin push (`notifications/claude/channel`) | MCP tools | queued by Claude Code, grouped on next turn |
 | Codex | app-server `turn/start` (idle) / `turn/steer` (busy) | proxy intercepts `item/agentMessage` | steer or queue |
 | Kimi Code | ACP `session/prompt` | ACP `session/update` stream | queue (`turn.agent_busy`) |
+| Pi | RPC or managed native TUI extension | hub-approved tools | queued until `agent_settled` |
 | Local worker | hub-native agent loop | hub-native | hub-owned |
 
+## Pi with DGX and MLX
+
+Pi is optional. Install Pi separately and set `pi.enabled` to `true` in
+`.agenthub/config.json`. Set `pi.auto_start` to `true` to start its background
+peer with the hub. The project uses its existing OmniRoute connection for DGX;
+`pi.dgx_coding` and `pi.dgx_fast` select the gateway's configured model IDs.
+
+```bash
+ahub models setup       # dedicated Python 3.12 environment and pinned Qwen3 8B MLX weights
+ahub models start       # loopback-only Apple Silicon runtime
+ahub models status
+ahub pi --mode headless --backend auto
+ahub say @pi "Read the project and summarize the next small implementation task"
+ahub pi --mode tui     # switch the idle session to its native terminal
+```
+
+The default routing template assigns implementation, bulk edits and tests to
+DGX, and summaries/triage to MLX. Pi and the existing local worker take priority
+before cloud peers; planning and final review stay with Claude/Codex. Existing
+projects keep their routing file, so add `pi` to the relevant `peers` lists and
+set `pi_backend = "dgx"` or `"mlx"` for each class. PII tasks remain local-worker
+only. `--backend dgx` or `--backend mlx` explicitly pins a Pi session's backend.
+
+Pi connects to an authenticated relay with model aliases `dgx/coding`,
+`dgx/fast`, and `mlx/fast`; upstream gateway credentials stay in the hub.
+Its managed tools use the existing path guards, shell sandbox and terminal
+approval flow. Keep `ahub tail` open to approve write/edit/shell operations.
+Tool-call receipts survive daemon restart; an interrupted operation with an
+unknown outcome must be reconciled before repeating it. Cancelling a Pi turn
+does not automatically hand its task to a cloud peer.
+
+MLX uses a pinned Qwen3 8B 4-bit model, a 16K input budget and one generation
+at a time. `ahub models stop` stops only the runtime whose process identity
+matches its ownership record. Project hubs share the runtime; stopping a hub
+does not stop MLX. The relay can fall back from MLX to DGX before streaming
+starts. Inspect `ahub status` for requested routes and reported backend models.
+
+A project has one managed Pi session owner. Mode changes require the agent to
+settle and preserve the session file. Protocol 9 adds Pi recovery metadata;
+protocol-8 hubs can use controlled upgrade, while protocols 5-7 still require
+their matching CLI and an attended bootstrap.
+
 ## Runtime
 
 Bun + TypeScript. Single daemon per project directory, loopback only.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@staix/agent-hub",
-  "version": "0.5.0",
-  "description": "Native multi-agent hub: Claude Code, Codex, Kimi Code and a local worker as peers in one project",
+  "version": "0.6.0",
+  "description": "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   "license": "MIT",
   "type": "module",
   "bin": {

package/plugins/agent-hub/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hub",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Channel between Claude Code and the agent-hub daemon: peer messages from Codex, Kimi and the local worker arrive as channel events; hub_send replies.",
   "author": {
     "name": "Young Joon Lee",

package/plugins/agent-hub/server.js

@@ -15615,7 +15615,7 @@ function projectContext(cwd, env = process.env) {
 function stateDirFor(cwd) {
   return projectContext(cwd).stateDir;
 }
-var PROTOCOL = 8;
+var PROTOCOL = 9;
 function readControl(stateDir) {
   try {
     const status = JSON.parse(readFileSync2(join2(stateDir, "status.json"), "utf8"));
@@ -15645,12 +15645,14 @@ class ControlClient {
   constructor(ws) {
     this.ws = ws;
   }
-  static connect(stateDir, hello, timeoutMs = 3000) {
+  static connect(stateDir, hello, timeoutMs = 3000, protocol = PROTOCOL) {
+    if (protocol !== 8 && protocol !== PROTOCOL)
+      return Promise.reject(new Error(`unsupported recovery source protocol ${protocol}`));
     const control = readControl(stateDir);
     if (!control)
       return Promise.reject(new Error(`no hub running for ${stateDir} (run: ahub up)`));
-    if (control.protocol !== undefined && control.protocol !== PROTOCOL) {
-      return Promise.reject(Object.assign(new Error(`wire version mismatch: hub speaks ${control.protocol}, CLI speaks ${PROTOCOL}; stop it with its matching CLI, then upgrade and restart`), { code: 4426 }));
+    if (control.protocol !== undefined && control.protocol !== protocol) {
+      return Promise.reject(Object.assign(new Error(`wire version mismatch: hub speaks ${control.protocol}, CLI speaks ${protocol}; stop it with its matching CLI, then upgrade and restart`), { code: 4426 }));
     }
     if (hello.projectId && hello.projectId !== control.projectId || hello.instanceId && hello.instanceId !== control.instanceId || hello.projectRoot && hello.projectRoot !== control.cwd) {
       return Promise.reject(Object.assign(new Error("hub project or instance does not match the selected project"), { code: 4404 }));
@@ -15693,7 +15695,7 @@ class ControlClient {
         client.pending.delete(msg.rid);
         done(msg);
       };
-      ws.onopen = () => void client.request({ t: "hello", v: PROTOCOL, token: control.token, ...hello, ...expected }, timeoutMs).then((reply) => {
+      ws.onopen = () => void client.request({ t: "hello", v: protocol, token: control.token, ...hello, ...expected }, timeoutMs).then((reply) => {
         if (reply.t !== "welcome" || reply.ok === false)
           return refuse(new Error(reply.error ?? "hub refused handshake"));
         if (expected.projectId && reply.projectId !== expected.projectId || expected.instanceId && reply.instanceId !== expected.instanceId || expected.projectRoot && reply.cwd !== expected.projectRoot) {
@@ -15724,8 +15726,8 @@ class ControlClient {
 // package.json
 var package_default = {
   name: "@staix/agent-hub",
-  version: "0.5.0",
-  description: "Native multi-agent hub: Claude Code, Codex, Kimi Code and a local worker as peers in one project",
+  version: "0.6.0",
+  description: "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   license: "MIT",
   type: "module",
   bin: {
@@ -15798,7 +15800,7 @@ var ROLE_TEXT = {
   verifier: "verifier: run the checks a task names and report what passed and what did not in hub_task_done.",
   reviewer: "reviewer: when asked to review, read the change itself, then hub_review with approved or changes_requested and a note that says what to fix."
 };
-var DEFAULT_ROLES = { claude: ["planner", "reviewer"], codex: ["implementer"], kimi: ["implementer", "verifier"], local: ["implementer", "verifier"] };
+var DEFAULT_ROLES = { claude: ["planner", "reviewer"], codex: ["implementer"], kimi: ["implementer", "verifier"], local: ["implementer", "verifier"], pi: ["implementer", "verifier"] };
 function roleContract(peer, roles = DEFAULT_ROLES) {
   const mine = (roles[peer] ?? []).map((r) => ROLE_TEXT[r]).filter(Boolean);
   if (!mine.length)

package/src/adapters/pi.ts

@@ -0,0 +1,332 @@
+import { randomUUID } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, realpathSync } from "node:fs";
+import { join, resolve, relative } from "node:path";
+import { spawn, type ChildProcessWithoutNullStreams } from "node:child_process";
+import { renderDigest, replyParent, type Envelope, type PeerId } from "../hub/envelope.ts";
+import { BasePeer } from "../hub/peers.ts";
+import { stopOwnedProcess } from "../hub/child-process.ts";
+
+export interface PiModelDescriptor { id: string; name?: string; contextWindow?: number; maxTokens?: number; reasoning?: boolean; }
+export interface PiToolSchema { name: string; description?: string; parameters: Record<string, unknown>; }
+export interface PiRelay { url: string; token: string; models: PiModelDescriptor[]; }
+export interface PiOptions {
+  cwd: string; stateDir: string; cmd?: string[]; mode: "headless" | "tui"; backend: "auto" | "dgx" | "mlx"; sessionFile?: string; sessionId?: string;
+  model?: string;
+  relay: PiRelay; executeTool: (name: string, args: unknown, toolCallId: string, sessionId?: string) => Promise<string>; tools: PiToolSchema[];
+  preamble?: string;
+  selectModel?: (envs: Envelope[]) => Promise<string | undefined>; maxSteps?: number;
+  onTurnFailure?: (envs: Envelope[], reason: string) => Promise<void>;
+  watchdogMs?: number; log?: (line: string) => void;
+}
+export interface PiTuiLaunch { cmd: string; args: string[]; env: NodeJS.ProcessEnv; }
+type RpcMessage = { type?: string; id?: string | number; command?: string; success?: boolean; data?: any; [key: string]: any };
+function processSignature(pid: number): string | undefined { try { const result = Bun.spawnSync(["ps", "-p", String(pid), "-o", "lstart=,comm="], { stdout: "pipe", stderr: "pipe" }); if (result.exitCode !== 0) return undefined; const text = result.stdout.toString().trim(); return text ? new Bun.CryptoHasher("sha256").update(text).digest("hex") : undefined; } catch { return undefined; } }
+function ownerStillAlive(pid: number, signature: string | undefined): boolean { const current = processSignature(pid); if (current !== undefined) return current === signature; try { process.kill(pid, 0); return true; } catch { return false; } }
+
+const modelFor = (backend: PiOptions["backend"], models: PiModelDescriptor[]): string => {
+  const ids = models.map((m) => m.id);
+  const find = (needle: string) => ids.find((id) => id === needle) ?? needle;
+  if (backend === "mlx") return find("mlx/fast");
+  if (backend === "dgx") return find("dgx/coding");
+  return find(ids.find((id) => id === "dgx/coding") ? "dgx/coding" : ids.find((id) => id === "mlx/fast") ?? "dgx/coding");
+};
+
+export class PiPeer extends BasePeer {
+  private proc?: ChildProcessWithoutNullStreams;
+  private server?: ReturnType<typeof Bun.serve>;
+  private buffer = "";
+  private seq = 0;
+  private readonly pending = new Map<string, { resolve: (m: RpcMessage) => void; reject: (e: Error) => void }>();
+  private settledText = "";
+  private settledError = "";
+  private settledCancelled = false;
+  private currentReply?: Envelope;
+  private sessionId = "";
+  private sessionFile = "";
+  private activeEnvs: Envelope[] = [];
+  private activeTools = 0;
+  private agentRunning = false;
+  private owner = randomUUID();
+  private _tuiLaunch?: PiTuiLaunch;
+  private requestedModel = "";
+  private starting?: Promise<void>;
+  private ownerClaimed = false;
+  private ownerToken = "";
+  private stopping = true;
+  private ownerPid?: number;
+  private ownerSignature?: string;
+  private ownerMonitor?: ReturnType<typeof setInterval>;
+  private tuiExit?: Promise<void>;
+  private resolveTuiExit?: () => void;
+  private tuiCommands = new Map<string, { command: Record<string, unknown>; resolve: (value: any) => void; reject: (error: Error) => void }>();
+  private tuiQueue: Record<string, unknown>[] = [];
+  private tuiWaiters: Array<{ resolve: (command: Record<string, unknown> | undefined) => void; timer: ReturnType<typeof setTimeout> }> = [];
+
+  constructor(id: PeerId, private readonly opts: PiOptions) { super(id, opts.watchdogMs); }
+  get tuiLaunch(): PiTuiLaunch | undefined { return this._tuiLaunch; }
+  get acceptingTools(): boolean { return !this.stopping; }
+  /** Idle verified owners can be stopped; uncertain live owners and pending launches stay fenced. */
+  get recoveryReady(): boolean {
+    if (this.state === "busy" || this.starting || this.activeTools) return false;
+    if (this.opts.mode === "headless") return this.state === "idle" || !this.proc || this.proc.exitCode !== null;
+    if (this.state === "idle") return this.ownerClaimed && !!this.ownerPid && processSignature(this.ownerPid) === this.ownerSignature;
+    return this.stopping && !this.ownerClaimed && (!this.ownerPid || !ownerStillAlive(this.ownerPid, this.ownerSignature));
+  }
+  recoveryMetadata(): Record<string, unknown> { return { launch: { kind: "pi", cwd: this.opts.cwd, mode: this.opts.mode, backend: this.opts.backend, ...(this.opts.model ? { model: this.opts.model } : {}), ...(this.sessionFile ? { sessionFile: this.sessionFile } : {}) }, ...(this.sessionId ? { sessionId: this.sessionId } : {}), ...(this.sessionFile ? { sessionFile: this.sessionFile } : {}) }; }
+
+  async start(): Promise<void> {
+    if (this.starting) return this.starting;
+    this.starting = this.startImpl();
+    try { await this.starting; } finally { this.starting = undefined; }
+  }
+  private async startImpl(): Promise<void> {
+    this.stopping = false;
+    mkdirSync(this.opts.stateDir, { recursive: true });
+    const sessions = join(this.opts.stateDir, "pi-sessions");
+    mkdirSync(sessions, { recursive: true, mode: 0o700 });
+    if (this.opts.sessionFile) {
+      const file = realpathSync(this.opts.sessionFile);
+      const rel = relative(realpathSync(sessions), file);
+      if (!rel || rel.startsWith("..") || resolve(realpathSync(sessions), rel) !== file) throw new Error("Pi session file is outside the managed project session directory");
+      const header = JSON.parse(readFileSync(file, "utf8").split("\n", 1)[0]!);
+      if (header.type !== "session" || typeof header.cwd !== "string" || realpathSync(header.cwd) !== realpathSync(this.opts.cwd) || (this.opts.sessionId && header.id !== this.opts.sessionId)) throw new Error("Pi session header does not match the requested project/session");
+    }
+    const token = randomUUID();
+    this.tuiExit = new Promise((resolvePromise) => { this.resolveTuiExit = resolvePromise; });
+    const bridge = Bun.serve({ hostname: "127.0.0.1", port: 0, idleTimeout: 60, maxRequestBodySize: 2_000_000, fetch: async (request) => {
+      const origin = request.headers.get("origin"); if (origin) return new Response("forbidden", { status: 403 });
+      if (request.headers.get("authorization") !== `Bearer ${token}`) return new Response("forbidden", { status: 403 });
+      const url = new URL(request.url);
+      if (url.pathname === "/commands" && request.method === "GET") {
+        const command = await this.nextTuiCommand(25_000);
+        return Response.json(command ? { command } : { command: null });
+      }
+      if (request.method !== "POST") return new Response("method not allowed", { status: 405 });
+      const body = await request.json() as any;
+      if (url.pathname === "/event") { if (body.type === "session_start" && this.stopping) return Response.json({ ok: false, error: "Pi launch has ended" }, { status: 409 }); if (body.type === "session_start" && (typeof body.sessionId !== "string" || !body.sessionId || typeof body.sessionFile !== "string" || !body.sessionFile)) return Response.json({ ok: false, error: "Pi session identity is missing" }, { status: 400 }); if (body.type === "session_start" && this.ownerClaimed && (body.ownerToken !== this.ownerToken || body.pid !== this.ownerPid || body.signature !== this.ownerSignature || (this.sessionId && body.sessionId !== this.sessionId) || (this.sessionFile && body.sessionFile !== this.sessionFile))) return Response.json({ ok: false, error: "Pi session owner or identity already claimed" }, { status: 409 }); if (body.type === "session_start" && (!Number.isInteger(body.pid) || !body.signature || processSignature(body.pid) !== body.signature)) return Response.json({ ok: false, error: "Pi process identity is not verified" }, { status: 409 }); this.handleBridgeEvent(body); return Response.json({ ok: true }); }
+      if (url.pathname === "/ack") {
+        const pending = this.tuiCommands.get(String(body.id));
+        if (!pending) return Response.json({ ok: false }, { status: 404 });
+        this.tuiCommands.delete(String(body.id)); body.ok ? pending.resolve(body.result) : pending.reject(new Error(String(body.error ?? "Pi TUI command failed")));
+        return Response.json({ ok: true });
+      }
+      if (url.pathname === "/tool") {
+        if (this.stopping || this.state === "offline") return Response.json({ text: "error: Pi owner is stopped" }, { status: 409 });
+        this.activeTools++;
+        if (this.state === "idle") this.setState("busy");
+        if (this.state === "busy") this.touch();
+        try { return Response.json({ text: await this.opts.executeTool(String(body.name), body.args, String(body.toolCallId ?? ""), this.sessionId) }); }
+        catch (error) { return Response.json({ text: `error: ${(error as Error).message}` }, { status: 200 }); }
+        finally {
+          this.activeTools--;
+          if (this.state === "busy") {
+            if (!this.activeTools && !this.agentRunning && !this.activeEnvs.length) this.setState("idle");
+            else this.touch();
+          }
+        }
+      }
+      return new Response("not found", { status: 404 });
+    } });
+    this.server = bridge;
+    const extension = resolve(join(import.meta.dir, "../pi/extension.ts"));
+    const inherited: NodeJS.ProcessEnv = {};
+    for (const key of ["PATH", "HOME", "USER", "SHELL", "TMPDIR", "TERM", "TERM_PROGRAM", "LANG", "LC_ALL", "LC_CTYPE", "NO_COLOR", "CODEX_HOME"]) if (process.env[key]) inherited[key] = process.env[key];
+    const env: NodeJS.ProcessEnv = { ...inherited, PI_CODING_AGENT_DIR: join(this.opts.stateDir, "pi"), AGENTHUB_PI_BRIDGE_URL: `http://127.0.0.1:${bridge.port}`, AGENTHUB_PI_BRIDGE_TOKEN: token, AGENTHUB_PI_OWNER_TOKEN: token, AGENTHUB_PI_RELAY_URL: this.opts.relay.url, AGENTHUB_PI_RELAY_TOKEN: this.opts.relay.token, AGENTHUB_PI_MODELS: JSON.stringify(this.opts.relay.models), AGENTHUB_PI_TOOLS: JSON.stringify(this.opts.tools), AGENTHUB_PI_MAX_STEPS: String(this.opts.maxSteps ?? 30) };
+    const args = [ ...(this.opts.mode === "headless" ? ["--mode", "rpc"] : []), "--provider", "agent-hub-local", "--model", this.opts.model ?? modelFor(this.opts.backend, this.opts.relay.models), "--models", this.opts.relay.models.map((model) => `agent-hub-local/${model.id}`).join(","), "--no-builtin-tools", "--no-skills", "--no-prompt-templates", "--no-extensions", "--extension", extension, ...(this.opts.preamble ? ["--append-system-prompt", this.opts.preamble] : []), "--session-dir", join(this.opts.stateDir, "pi-sessions")];
+    if (this.opts.sessionFile) args.push("--session", this.opts.sessionFile); else if (this.opts.sessionId) args.push("--session-id", this.opts.sessionId);
+    const command = this.opts.cmd ?? ["pi"];
+    this._tuiLaunch = { cmd: command[0]!, args: [...command.slice(1), ...args], env };
+    if (this.opts.mode === "tui") { return; }
+    this.proc = spawn(command[0]!, [...command.slice(1), ...args], { cwd: this.opts.cwd, env, stdio: ["pipe", "pipe", "pipe"] });
+    this.proc.stdout.on("data", (chunk) => this.onOutput(String(chunk)));
+    this.proc.stderr.on("data", (chunk) => this.opts.log?.(`[${this.id}] ${String(chunk).trimEnd()}`));
+    this.proc.on("error", (error) => this.fail(error));
+    this.proc.on("exit", (code) => { if (code !== 0) this.fail(new Error(`pi exited with code ${code}`)); else this.setState("offline"); });
+    const state = await this.waitRpc("get_state", 15_000);
+    if (state.success !== true || typeof state.data?.sessionId !== "string" || typeof state.data?.sessionFile !== "string" || !state.data.sessionId || !state.data.sessionFile) throw new Error("Pi get_state did not prove session identity");
+    if ((this.opts.sessionId && state.data.sessionId !== this.opts.sessionId) || (this.opts.sessionFile && state.data.sessionFile !== this.opts.sessionFile)) {
+      throw new Error("Pi get_state session identity does not match the requested recovery session");
+    }
+    this.sessionId = state.data.sessionId; this.sessionFile = state.data.sessionFile;
+    if ((this.opts.sessionId && this.sessionId !== this.opts.sessionId) || (this.opts.sessionFile && this.sessionFile !== this.opts.sessionFile)) throw new Error("Pi startup session identity mismatch");
+    this.setState("idle");
+  }
+
+  async stop(): Promise<void> {
+    this.stopping = true;
+    this.clearOwnerMonitor();
+    if (this.opts.mode === "tui") {
+      const alive = () => !!this.ownerPid && ownerStillAlive(this.ownerPid, this.ownerSignature);
+      if (this.ownerClaimed && alive()) {
+        try {
+          await Promise.race([this.sendTui({ type: "shutdown" }), (async () => {
+            const deadline = Date.now() + 5_000;
+            while (alive() && Date.now() < deadline) await Bun.sleep(50);
+            if (alive()) throw new Error("Pi TUI shutdown was not acknowledged");
+          })()]);
+        }
+        catch (error) {
+          if (alive()) { this.setState("busy"); this.startOwnerMonitor(); throw error; }
+        }
+      }
+      const deadline = Date.now() + 5_000;
+      while (alive() && Date.now() < deadline) await Bun.sleep(50);
+      if (alive()) { this.setState("busy"); this.startOwnerMonitor(); throw new Error("Pi TUI owner process did not exit"); }
+      this.ownerClaimed = false;
+      this.resolveTuiExit?.(); this.resolveTuiExit = undefined;
+    }
+    const proc = this.proc;
+    if (proc && proc.exitCode === null) await stopOwnedProcess(proc);
+    this.proc = undefined;
+    for (const waiter of this.tuiWaiters) { clearTimeout(waiter.timer); waiter.resolve(undefined); }
+    this.tuiWaiters = [];
+    for (const pending of this.tuiCommands.values()) pending.reject(new Error("Pi owner stopped"));
+    this.tuiCommands.clear(); this.tuiQueue = [];
+    for (const pending of this.pending.values()) pending.reject(new Error("Pi owner stopped"));
+    this.pending.clear();
+    this.server?.stop(true); this.server = undefined; this.setState("offline");
+  }
+
+  async deliver(envs: Envelope[]): Promise<void> {
+    if (this.state !== "idle" || this.stopping) throw new Error(`${this.id} is not ready`);
+    this.setState("busy"); this.activeEnvs = envs; this.currentReply = replyParent(envs); this.settledText = "";
+    let attempted = false;
+    try {
+      const requested = await this.opts.selectModel?.(envs);
+      if (requested) await this.setRequestedModel(requested);
+      attempted = true;
+      if (this.opts.mode === "tui") await this.sendTui({ type: "prompt", message: renderDigest(envs, true) });
+      else await this.sendRpc({ type: "prompt", message: renderDigest(envs, true) });
+    } catch (error) {
+      if (!attempted) { this.activeEnvs = []; this.setState("idle"); throw error; }
+      // The prompt may have reached Pi even if its acknowledgement was lost.
+      // Fence the owner before reporting failure; never return it to the bus for replay.
+      await this.terminateFailedTurn(error instanceof Error ? error : new Error(String(error)));
+    }
+  }
+
+  async steer(envs: Envelope[]): Promise<void> {
+    if (this.state !== "busy" || this.stopping || envs.some((e) => e.kind !== "chat" || e.private || e.priority !== "important")) throw new Error("Pi workflow/private messages must queue");
+    const reply = replyParent([...this.activeEnvs, ...envs]);
+    this.activeEnvs.push(...envs); this.currentReply = reply;
+    try {
+      if (this.opts.mode === "tui") await this.sendTui({ type: "steer", message: renderDigest(envs, true) });
+      else await this.sendRpc({ type: "steer", message: renderDigest(envs, true) });
+    } catch (error) {
+      await this.terminateFailedTurn(error instanceof Error ? error : new Error(String(error)));
+    }
+  }
+
+  getRequestedModel(): string { return this.requestedModel; }
+  async setRequestedModel(model: string): Promise<void> {
+    const slash = model.indexOf("/");
+    const provider = "agent-hub-local";
+    const modelId = model;
+    if (this.opts.mode === "tui") await this.sendTui({ type: "set_model", provider, modelId }); else await this.sendRpc({ type: "set_model", provider, modelId });
+    this.requestedModel = model;
+  }
+
+  private handleBridgeEvent(event: any): void {
+    if (event.type === "session_start") {
+      if (!this.ownerClaimed) { this.ownerClaimed = true; this.ownerToken = String(event.ownerToken ?? ""); }
+      this.sessionId = String(event.sessionId ?? ""); this.sessionFile = String(event.sessionFile ?? "");
+      this.ownerPid = Number.isInteger(event.pid) ? event.pid : undefined; this.ownerSignature = typeof event.signature === "string" ? event.signature : undefined;
+      if ((this.opts.sessionId && this.sessionId !== this.opts.sessionId) || (this.opts.sessionFile && this.sessionFile !== this.opts.sessionFile)) { this.opts.log?.(`[${this.id}] Pi session identity mismatch`); return; }
+      this.startOwnerMonitor(); if (this.opts.mode === "tui") this.setState("idle");
+    }
+    if (event.type === "session_shutdown") { this.stopping = true; this.ownerClaimed = false; this.clearOwnerMonitor(); this.resolveTuiExit?.(); this.resolveTuiExit = undefined; this.setState("offline"); }
+    if (event.type === "agent_start") { this.agentRunning = true; this.setState("busy"); }
+    if (event.type === "activity" && this.state === "busy") this.touch();
+    if (event.type === "agent_end") {
+      this.settledText = typeof event.text === "string" ? event.text : "";
+      this.settledCancelled = event.cancelled === true;
+      this.settledError = event.failed ? String(event.error ?? "Pi agent run failed") : "";
+    }
+    if (event.type === "agent_settled") {
+      this.agentRunning = false;
+      if (typeof event.text === "string" && event.text.trim()) this.settledText = event.text;
+      const text = this.settledText.trim(); const error = this.settledError; const cancelled = this.settledCancelled;
+      this.settledText = ""; this.settledError = ""; this.settledCancelled = false;
+      if (cancelled) this.onMessage?.("Pi turn cancelled; inspect any partial effects before continuing.", { inReplyTo: this.currentReply });
+      else if (error) void this.opts.onTurnFailure?.(this.activeEnvs, error);
+      else if (text) this.onMessage?.(text, { inReplyTo: this.currentReply });
+      this.currentReply = undefined; this.activeEnvs = []; if (this.state === "busy" && !this.activeTools) this.setState("idle");
+    }
+  }
+
+  private onOutput(chunk: string): void {
+    this.buffer += chunk;
+    let index: number;
+    while ((index = this.buffer.indexOf("\n")) >= 0) { const line = this.buffer.slice(0, index).replace(/\r$/, ""); this.buffer = this.buffer.slice(index + 1); if (!line) continue; try { this.handleRpc(JSON.parse(line) as RpcMessage); } catch (error) { this.opts.log?.(`[${this.id}] invalid Pi RPC output: ${(error as Error).message}`); } }
+  }
+  private nextTuiCommand(timeout: number): Promise<Record<string, unknown> | undefined> {
+    const next = this.tuiQueue.shift(); if (next) return Promise.resolve(next);
+    return new Promise((resolvePromise) => { const entry = { resolve: resolvePromise, timer: setTimeout(() => { const i = this.tuiWaiters.indexOf(entry); if (i >= 0) this.tuiWaiters.splice(i, 1); resolvePromise(undefined); }, timeout) }; this.tuiWaiters.push(entry); });
+  }
+  private sendTui(command: Record<string, unknown>): Promise<any> {
+    const id = `ahub-${++this.seq}`;
+    const wire = { id, ...command };
+    return new Promise((resolvePromise, reject) => {
+      const timer = setTimeout(() => {
+        this.tuiCommands.delete(id);
+        this.tuiQueue = this.tuiQueue.filter((queued) => queued.id !== id);
+        reject(new Error(`Pi TUI ${String(command.type)} acknowledgement timed out`));
+      }, 30_000);
+      this.tuiCommands.set(id, { command: wire, resolve: (value) => { clearTimeout(timer); resolvePromise(value); }, reject: (error) => { clearTimeout(timer); reject(error); } });
+      const waiter = this.tuiWaiters.shift();
+      if (waiter) { clearTimeout(waiter.timer); waiter.resolve(wire); } else this.tuiQueue.push(wire);
+    });
+  }
+  private handleRpc(message: RpcMessage): void { if (["message_update", "tool_execution_update"].includes(message.type ?? "") && this.state === "busy") this.touch();  if (message.type === "agent_settled") return; // The authenticated extension is the single lifecycle source.
+    if (message.id !== undefined) { const pending = this.pending.get(String(message.id)); if (pending) { this.pending.delete(String(message.id)); message.success === false ? pending.reject(new Error(message.error ?? "Pi RPC command failed")) : pending.resolve(message); } } }
+  private sendRpc(command: Record<string, unknown>): Promise<RpcMessage> { if (!this.proc?.stdin.writable) return Promise.reject(new Error("Pi process is not running")); const id = `ahub-${++this.seq}`; return new Promise((resolvePromise, reject) => { const timer = setTimeout(() => { this.pending.delete(id); reject(new Error(`Pi RPC ${String(command.type)} timed out`)); }, 30_000); this.pending.set(id, { resolve: (m) => { clearTimeout(timer); resolvePromise(m); }, reject: (e) => { clearTimeout(timer); reject(e); } }); this.proc!.stdin.write(`${JSON.stringify({ id, ...command })}\n`); }); }
+  private async waitRpc(command: string, timeout: number): Promise<RpcMessage> {
+    let timer: ReturnType<typeof setTimeout> | undefined;
+    try { return await Promise.race([this.sendRpc({ type: command }), new Promise<never>((_, reject) => { timer = setTimeout(() => reject(new Error(`Pi ${command} timed out`)), timeout); })]); }
+    finally { clearTimeout(timer); }
+  }
+  private fail(error: Error): void {
+    for (const pending of this.pending.values()) pending.reject(error);
+    this.pending.clear();
+    const envs = this.activeEnvs; this.activeEnvs = [];
+    if (envs.length) {
+      this.onMessage?.("Pi turn failed; inspect its session and any partial effects before continuing.", { inReplyTo: this.currentReply });
+      void this.opts.onTurnFailure?.(envs, error.message).catch(() => this.opts.log?.("Pi failure handoff could not be completed"));
+    }
+    this.currentReply = undefined;
+    this.setState("offline");
+  }
+  private startOwnerMonitor(): void {
+    this.clearOwnerMonitor();
+    if (this.opts.mode !== "tui" || !this.ownerPid || !this.ownerSignature) return;
+    this.ownerMonitor = setInterval(() => {
+      if (!this.ownerPid || ownerStillAlive(this.ownerPid, this.ownerSignature)) return;
+      this.stopping = true; this.ownerClaimed = false; this.clearOwnerMonitor();
+      this.resolveTuiExit?.(); this.resolveTuiExit = undefined;
+      for (const pending of this.tuiCommands.values()) pending.reject(new Error("Pi owner exited"));
+      this.tuiCommands.clear(); this.tuiQueue = [];
+      this.fail(new Error("Pi owner process exited without session_shutdown"));
+    }, 500);
+    this.ownerMonitor.unref?.();
+  }
+  private clearOwnerMonitor(): void { if (this.ownerMonitor) clearInterval(this.ownerMonitor); this.ownerMonitor = undefined; }
+  private async terminateFailedTurn(error: Error): Promise<void> {
+    const envs = this.activeEnvs.slice(), reply = this.currentReply;
+    this.stopping = true;
+    try {
+      await this.stop();
+      // The process exit handler may already have reported this failure.
+      if (this.activeEnvs.length) this.fail(error);
+    } catch {
+      this.activeEnvs = envs; this.currentReply = reply;
+      this.stopping = true;
+      this.setState("busy");
+      this.opts.log?.("Pi owner could not be stopped; session remains fenced, no automatic escalation");
+    }
+  }
+  protected override onWatchdog(): void {
+    if (this.stopping) return;
+    if (this.activeTools) { this.touch(); return; }
+    void this.terminateFailedTurn(new Error("Pi run became inactive before agent_settled"));
+  }
+}

package/src/cli/main.ts

@@ -1,7 +1,8 @@
 #!/usr/bin/env bun
 import { spawn, spawnSync } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
 import { ControlClient, readControl } from "../hub/control-client.ts";
 import { loadConfig } from "../hub/daemon.ts";
 import { projectContext } from "../hub/project.ts";
@@ -22,6 +23,7 @@ import { childEnv } from "../hub/child-process.ts";
 import { abortRecovery, createOperation, publicOperation, registeredProjects, runRecovery, type RecoveryOperation } from "./upgrade.ts";
 import { makeRecoveryDriver, makeUpgradePlan, preserveSource } from "./upgrade-runtime.ts";
 import { recordTerminalLaunch } from "./terminal-recovery.ts";
+import { ensureMlx, inspectMlx, stopMlx } from "../models/mlx.ts";
 
 const USAGE = `agent-hub ${VERSION}: Claude Code, Codex and Kimi as peers in one project directory
 
@@ -40,6 +42,8 @@ const USAGE = `agent-hub ${VERSION}: Claude Code, Codex and Kimi as peers in one
   ahub claude [args...]         launch Claude Code with the hub channel   [--unattended]
   ahub codex [args...]          start the Codex adapter and attach the TUI [--unattended]
   ahub kimi [--model <alias>]   start Kimi headless under ACP
+  ahub pi [--mode headless|tui] [--backend auto|dgx|mlx] [--session-id <id>] [--session-file <path>]  start Pi
+  ahub models setup|status|start|stop  manage the pinned local MLX runtime
   ahub local [--route <id> | --model <id>]
                                start the hub-native worker on the self-hosted models (routing.toml)
   ahub say [@peer ...] <text>   send as the console user (no @peer = broadcast); delivered at once,
@@ -108,6 +112,34 @@ function exec(bin: string, argv: string[]): never {
   process.exit(res.status ?? 1);
 }
 
+function execWithEnv(bin: string, argv: string[], extra: NodeJS.ProcessEnv): never {
+  const env: NodeJS.ProcessEnv = { ...extra, AGENTHUB_STATE_DIR: stateDir, AGENTHUB_PROJECT_DIR: cwd };
+  delete env.AGENTHUB_RECOVERY_OPERATION;
+  delete env.AGENTHUB_UNATTENDED;
+  const res = spawnSync(bin, argv, { cwd, stdio: "inherit", env });
+  if (res.error) fail(`cannot run ${bin}: ${res.error.message}`);
+  process.exit(res.status ?? 1);
+}
+
+function piFlags(): { mode: "headless" | "tui"; backend?: "auto" | "dgx" | "mlx"; model?: string; sessionId?: string; sessionFile?: string } {
+  for (const flag of ["--mode", "--backend", "--model", "--session-id", "--session-file"]) {
+    const index = args.indexOf(flag);
+    if (index >= 0 && (!args[index + 1] || args[index + 1]!.startsWith("--"))) fail(`${flag} needs a value`);
+  }
+  const mode = (args.includes("--mode") ? args[args.indexOf("--mode") + 1] : "headless") as string;
+  const backend = (args.includes("--backend") ? args[args.indexOf("--backend") + 1] : undefined) as string | undefined;
+  const model = args.includes("--model") ? args[args.indexOf("--model") + 1] : undefined;
+  const sessionId = args.includes("--session-id") ? args[args.indexOf("--session-id") + 1] : undefined;
+  const sessionFile = args.includes("--session-file") ? args[args.indexOf("--session-file") + 1] : undefined;
+  const valueFlags = new Set(["--mode", "--backend", "--model", "--session-id", "--session-file"]);
+  for (let i = 0; i < args.length; i++) {
+    if (!valueFlags.has(args[i]!)) fail(`unknown Pi option: ${args[i]}`);
+    i++;
+  }
+  if (!["headless", "tui"].includes(mode) || (backend !== undefined && !["auto", "dgx", "mlx"].includes(backend)) || (sessionId && sessionFile)) fail("usage: ahub pi [--mode headless|tui] [--backend auto|dgx|mlx] [--model <alias>] [--session-id <id> | --session-file <path>]");
+  return { mode: mode as "headless" | "tui", ...(backend ? { backend: backend as "auto" | "dgx" | "mlx" } : {}), ...(model ? { model } : {}), ...(sessionId ? { sessionId } : {}), ...(sessionFile ? { sessionFile } : {}) };
+}
+
 async function projectRows() {
   const registry = new Registry();
   try { return await Promise.all(registry.list().map(async (project) => ({ ...project, ...await inspectProject(project) }))); }
@@ -363,6 +395,25 @@ const commands: Record<string, () => Promise<void> | void> = {
     console.log(res.already ? "kimi is already attached" : 'kimi attached (headless). Talk to it with: ahub say @kimi "..."');
   },
 
+  pi: async () => {
+    const options = piFlags();
+    const hub = await connect();
+    const res = await hub.request({ t: "start", peer: "pi", args: options, operationId: process.env.AGENTHUB_RECOVERY_OPERATION });
+    hub.close();
+    if (!res.ok) fail(res.error);
+    if (options.mode === "tui") {
+      const launch = res.launch;
+      if (!launch || typeof launch.cmd !== "string" || !Array.isArray(launch.args) || !launch.args.every((a: unknown) => typeof a === "string") || !launch.env || typeof launch.env !== "object") fail("Pi TUI launch metadata was not verified");
+      const launchEnv = { ...(launch.env as NodeJS.ProcessEnv) };
+      delete launchEnv.AGENTHUB_RECOVERY_OPERATION;
+      delete launchEnv.AGENTHUB_UNATTENDED;
+      const control = readControl(stateDir);
+      if (control?.instanceId) await recordTerminalLaunch("pi", cwd, stateDir, control.instanceId);
+      return execWithEnv(launch.cmd, launch.args, launchEnv);
+    }
+    console.log(res.already ? "pi is already attached" : 'pi attached (headless). Talk to it with: ahub say @pi "..."');
+  },
+
   local: async () => {
     const opt = (flag: string) => (args.includes(flag) ? args[args.indexOf(flag) + 1] ?? fail(`${flag} needs a value`) : undefined);
     const hub = await connect();
@@ -372,6 +423,24 @@ const commands: Record<string, () => Promise<void> | void> = {
     console.log(res.already ? "local is already attached" : `local attached on ${res.model}. Give it work with: ahub say @local "..."`);
   },
 
+  models: async () => {
+    const action = args[0] ?? "status";
+    const configured = loadConfig(cwd).mlx;
+    const runtimeDir = configured.runtimeDir ? resolve(cwd, configured.runtimeDir) : join(homedir(), ".agenthub", "runtimes", "mlx");
+    const modelPath = configured.modelPath ? resolve(cwd, configured.modelPath) : join(homedir(), ".agenthub", "models", "qwen3-8b-mlx");
+    const mlxOptions = { ...configured, runtimeDir, modelPath };
+    if (action === "status") return console.log(JSON.stringify(await inspectMlx(mlxOptions), null, 2));
+    if (action === "start") { const handle = await ensureMlx(mlxOptions); return console.log(JSON.stringify(handle.status(), null, 2)); }
+    if (action === "stop") { await stopMlx(mlxOptions); return console.log("MLX stopped"); }
+    if (action !== "setup") fail("usage: ahub models setup|status|start|stop");
+    const python = join(runtimeDir, "bin", "python");
+    const run = (argv: string[]) => { const result = spawnSync(argv[0]!, argv.slice(1), { cwd, stdio: "inherit" }); if (result.status !== 0) fail(`models setup failed: ${argv.join(" ")}`); };
+    if (!existsSync(python)) run(["uv", "venv", "--python", "3.12", runtimeDir]);
+    run(["uv", "pip", "install", "--python", python, "mlx-lm==0.31.3"]);
+    run([python, "-c", `from huggingface_hub import snapshot_download; snapshot_download(repo_id='Qwen/Qwen3-8B-MLX-4bit', revision='383413e909f3bc5303ce195ebbdf0339c5a1a2a3', local_dir=${JSON.stringify(modelPath)}, token=False)`]);
+    console.log(`MLX runtime and pinned model prepared at ${runtimeDir}`);
+  },
+
   say: async () => {
     const lead = args.findIndex((a) => !/^@[a-z][a-z0-9-]*$/.test(a)); // only leading @tokens are recipients
     const to = args.slice(0, lead === -1 ? args.length : lead).map((a) => a.slice(1));
@@ -503,6 +572,8 @@ const commands: Record<string, () => Promise<void> | void> = {
     console.log(`hub pid ${status.pid}, control 127.0.0.1:${status.controlPort}, ${status.cwd}`);
     const peers = Object.entries(status.peers as Record<string, { state: string; queued: number }>);
     for (const [id, p] of peers) console.log(`  ${id.padEnd(8)} ${p.state.padEnd(8)} queued ${p.queued}${(p as any).paused ? `  (${(p as any).paused})` : ""}${(p as any).servedBy ? `  last call: ${(p as any).servedBy}` : ""}`);
+    const models = (status as any).models?.backends as any[] | undefined;
+    if (models?.length) for (const backend of models) console.log(`  model    ${backend.kind ?? "unknown"}/${backend.alias ?? "unknown"} ${backend.state ?? "unknown"} active ${backend.active ?? 0}${backend.requestedModel ? ` requested ${backend.requestedModel}` : ""}${backend.actualModel ? ` actual ${backend.actualModel}` : ""}${backend.provider ? ` provider ${backend.provider}` : ""}`);
     if (status.switchyard) console.log(`  switchyard: ${status.switchyard}`);
     const counts = Object.entries(status.tasks ?? {}).map(([s, n]) => `${n} ${s}`).join(", ");
     if (counts) console.log(`  tasks: ${counts} (ahub board)`);
@@ -548,6 +619,9 @@ const commands: Record<string, () => Promise<void> | void> = {
     row(!!omni.apiKey(), "omniroute key", omni.apiKey() ? "present" : "missing: set OMNIROUTE_API_KEY or omniroute.api_key_file in .agenthub/config.json");
     const sy = spawnSync(process.env.AGENTHUB_SWITCHYARD_BIN ?? "switchyard-server", ["--version"], { encoding: "utf8" });
     row(sy.status === 0 ? true : undefined, "switchyard", sy.status === 0 ? sy.stdout.trim() : "not installed: ahub local uses fixed_model on OmniRoute (cargo install --locked switchyard-server)");
+    const mlxConfig = loadConfig(cwd).mlx;
+    const mlx = await inspectMlx({ ...mlxConfig, runtimeDir: mlxConfig.runtimeDir ? resolve(cwd, mlxConfig.runtimeDir) : undefined, modelPath: mlxConfig.modelPath ? resolve(cwd, mlxConfig.modelPath) : undefined });
+    row(mlx.state === "ready" || mlx.state === "stopped", "pi mlx", `${mlx.state}${mlx.model ? ` (${mlx.model})` : ""}${mlx.lastError ? `: ${mlx.lastError}` : ""}`);
 
     const memory = new MemoryClient();
     const mem = await memory.health();