Pix Agent Harness Mono Repo

New issues and PRs from new contributors are auto-closed by default. Maintainers review auto-closed issues daily. See CONTRIBUTING.md.

Pix is a self-extensible coding agent harness with a terminal coding agent, agent runtime, unified LLM API, and TUI package.

• @chengshiliu16/pix-coding-agent: Interactive coding agent CLI
• @chengshiliu16/pix-agent-core: Agent runtime with tool calling and state management
• @chengshiliu16/pix-ai: Unified multi-provider LLM API (OpenAI, Anthropic, Google, …)

Documentation lives in packages/coding-agent/docs.

All Packages

Package	Description
@chengshiliu16/pix-ai	Unified multi-provider LLM API (OpenAI, Anthropic, Google, etc.)
@chengshiliu16/pix-agent-core	Agent runtime with tool calling and state management
@chengshiliu16/pix-coding-agent	Interactive coding agent CLI
@chengshiliu16/pix-tui	Terminal UI library with differential rendering

For Slack/chat automation and workflows see ChengShiLiu16/pix.

Permissions & Containerization

Pix does not include a built-in permission system for restricting filesystem, process, network, or credential access. By default, it runs with the permissions of the user and process that launched it.

If you need stronger boundaries, containerize or sandbox Pix. See packages/coding-agent/docs/containerization.md for three patterns:

• OpenShell: run the whole pix process in a policy-controlled sandbox.
• Gondolin extension: keep pix and provider auth on the host while routing built-in tools and ! commands into a local Linux micro-VM.
• Plain Docker: run the whole pix process in a local container for simple isolation.

Contributing

See CONTRIBUTING.md for contribution guidelines and AGENTS.md for project-specific rules (for both humans and agents).

Development

npm install --ignore-scripts  # Install all dependencies without running lifecycle scripts
npm run build        # Build all packages
npm run check        # Lint, format, and type check
./test.sh            # Run tests (skips LLM-dependent tests without API keys)
./pix-test.sh        # Run pix from sources (can be run from any directory)

Supply-chain hardening

We treat npm dependency changes as reviewed code changes.

• Direct external dependencies are pinned to exact versions. Internal workspace packages remain version-ranged.
• .npmrc sets save-exact=true and min-release-age=2 to avoid same-day dependency releases during npm resolution.
• package-lock.json is the dependency ground truth. Pre-commit blocks accidental lockfile commits unless PIX_ALLOW_LOCKFILE_CHANGE=1 is set.
• npm run check verifies pinned direct deps, native TypeScript import compatibility, and the generated coding-agent shrinkwrap.
• The published CLI package includes packages/coding-agent/npm-shrinkwrap.json, generated from the root lockfile, to pin transitive deps for npm users.
• Release smoke tests use npm run release:local to build, pack, and create isolated npm and Bun installs outside the repo before tagging a release.
• Local release installs, documented npm installs, and pix update --self use --ignore-scripts where supported.
• CI installs with npm ci --ignore-scripts, and a scheduled GitHub workflow runs npm audit --omit=dev plus npm audit signatures --omit=dev.
• Shrinkwrap generation has an explicit allowlist for dependency lifecycle scripts; new lifecycle-script deps fail checks until reviewed.

License

MIT