Switch to agent-server by Canvinus · Pull Request #2 · appx-org/appx

Canvinus · 2026-05-23T19:58:43Z

Summary

Switches Appx's default agent path from legacy OpenCode to Pi through the separate agent-server service.

Adds Pi tooling/install/bootstrap support, version pinning, systemd wiring, and verification updates.
Proxies project-scoped Appx agent routes to agent-server with trusted project id/name/directory headers.
Scaffolds each project with first-party .pi harness files: prompt, guardrails extension, settings, and egress skill helper.
Adds the Pi Agent tab frontend with project sessions, provider-neutral SSE streaming, model selection, thinking level controls, stop/send behavior, and tool call rendering.
Adds Settings UI for Pi provider credentials, subscription login flows, custom providers such as LiteLLM, and legacy OpenCode fallback mode.
Updates README docs for Pi deployment, credentials, project-local harnesses, and the unified streaming contract.

Why

The old Appx flow was tied to one OpenCode backend. Pi gives Appx provider-flexible model selection, subscription auth, custom provider support, and project-local extensions, but Appx still needs a single browser contract and isolated sessions per project.

Validation

npm exec -- tsc -b passed locally.
VM task build passed.
VM task test passed.
VM appx.service active after installing the rebuilt binary.
VM dashboard smoke check returned HTTP 200 using the configured sslip host header.
Direct project isolation smoke test confirmed sessions created in one project directory did not appear in another.

Known Follow-Up

task lint still reports pre-existing React hook lint errors in EgressRequestDock.tsx and OpenCodeStatus.tsx; this PR does not change those files' hook patterns.

Dependency

Pairs with appx-org/agent-server#1, which provides project-scoped Pi runtimes and provider/model APIs.

Canvinus · 2026-05-25T16:22:38Z

@codex

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6aa47e1fed

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-05-25T16:29:47Z

+    if (res.status === 401) {
+      window.location.href = '/login';
+      throw new Error('Unauthorized');


Gate login redirect on Appx auth header

This new Pi API client redirects to /login on every HTTP 401, but /api/agent/* responses can also return 401 from the upstream agent backend (for example, backend token mismatch or provider-side auth errors) while the Appx session is still valid. Because the redirect ignores X-Appx-Auth: required, users get logged out for non-session failures and can enter a misleading re-login loop instead of seeing the actual agent error.

Useful? React with 👍 / 👎.

Sounds like a valid concern

chatgpt-codex-connector · 2026-05-25T16:29:47Z

 APPX_HOST=$APPX_HOST
 APPX_DATA=$APPX_DATA
 APPX_PORT=$APPX_PORT
+APPX_AGENT_SERVER_URL=http://127.0.0.1:4001


Persist configured agent-server URL in bootstrap env

The bootstrap template always writes APPX_AGENT_SERVER_URL=http://127.0.0.1:4001, which overrides any non-default value a deployer intended for first-time setup. In installations where agent-server runs on a different host/port, bootstrap completes with an unusable proxy target until the env file is manually corrected, so the generated config should honor the chosen/runtime value instead of hardcoding the default.

Useful? React with 👍 / 👎.

neuromaxer · 2026-05-25T17:13:45Z

+if [ ! -d /home/appx-agent/.pi ] && [ -d /home/opencode/.pi ]; then
+  cp -a /home/opencode/.pi /home/appx-agent/.pi


Leftover mention of opencode in [ -d /home/opencode/.pi ] and cp -a /home/opencode/.pi

neuromaxer · 2026-05-25T17:14:28Z

+  if id -u opencode >/dev/null 2>&1; then
+    pkill -u opencode -f '(^|/)agent-server( |$)|agent-server/dist/server\.js' 2>/dev/null || true


some more opencode leftovers

neuromaxer · 2026-05-25T17:19:12Z

+AGENT_SERVER_DIR="${AGENT_SERVER_DIR:-}"
+if [ -z "$AGENT_SERVER_DIR" ] && [ -d "$REPO_DIR/../agent-server" ]; then
+  AGENT_SERVER_DIR="$(cd "$REPO_DIR/../agent-server" && pwd)"
+fi

-if [ -n "$OPENCODE_NPM_VERSION" ] && [ "$CURRENT" = "$OPENCODE_NPM_VERSION" ]; then
-  echo "opencode already at $OPENCODE_NPM_VERSION"
+if [ -n "$AGENT_SERVER_DIR" ] && [ -f "$AGENT_SERVER_DIR/package.json" ]; then
+  echo "installing agent-server from $AGENT_SERVER_DIR..."
+  (
+    cd "$AGENT_SERVER_DIR"
+    npm ci
+    npm run build
+    npm install -g .
+  )
+  ln -sf "$NODE_BIN_DIR/agent-server" /usr/local/bin/agent-server
+  echo "agent-server installed: /usr/local/bin/agent-server"
 else
-  echo "installing opencode${OPENCODE_NPM_VERSION:+ $OPENCODE_NPM_VERSION} via npm..."
-  npm install -g "opencode-ai@${OPENCODE_NPM_VERSION:-latest}"
-  ln -sf "$NODE_BIN_DIR/opencode" /usr/local/bin/opencode
-  echo "opencode installed: $(/usr/local/bin/opencode --version 2>/dev/null)"
+  echo "agent-server repo not found; clone appx-org/agent-server next to appx or set AGENT_SERVER_DIR"


That's obviously brittle. Long term want to get it from npm registry

neuromaxer · 2026-05-25T17:22:09Z

@@ -1,3 +1,2 @@
 DROP INDEX IF EXISTS idx_assigned_port_unique;
 ALTER TABLE projects DROP COLUMN assigned_port;
-ALTER TABLE projects DROP COLUMN opencode_project_id;


Why we drop the opencode column without adding pi column? Where do we get info from?

To use Codex here, create a Codex account and connect to github.

neuromaxer · 2026-05-25T17:24:18Z

Cool idea! Really like how we can reduce attack surface by leveraging pi extensions

neuromaxer · 2026-05-25T17:25:17Z

We'll extend this template with references and existing app examples in the future

neuromaxer · 2026-05-25T17:29:10Z

Is there now just one Pi server for all apps created from agent-server? @codex

chatgpt-codex-connector · 2026-05-25T17:29:17Z

To use Codex here, create a Codex account and connect to github.

neuromaxer · 2026-05-25T17:32:06Z

What does this file do?

neuromaxer · 2026-05-25T17:43:30Z

Not really sure why we need it if agent-server is always in loopback (on same server as all apps)

This is reverse proxy to route calls made on appx UI to agent-server backend

neuromaxer · 2026-05-25T18:29:16Z

-	api.HandleFunc("GET /api/settings/api-key", handleGetAPIKeyStatus(a.Store))
-	api.HandleFunc("PUT /api/settings/api-key", handleSetAPIKey(a.Store, oc))
-	api.HandleFunc("DELETE /api/settings/api-key", handleDeleteAPIKey(a.Store, oc))


How do we handle API key in pi now?

neuromaxer · 2026-05-25T18:29:54Z

 	}
+	agentServerURL := rcfg.AgentServerURL
+	if agentServerURL == "" {
+		agentServerURL = "http://127.0.0.1:4001"


hardcoded - want to pass by env var

neuromaxer · 2026-05-25T18:31:04Z

+	api.Handle("GET /api/agent/{agentPath...}", agentGlobalProxy)
+	api.Handle("POST /api/agent/{agentPath...}", agentGlobalProxy)
+	api.Handle("PUT /api/agent/{agentPath...}", agentGlobalProxy)
+	api.Handle("DELETE /api/agent/{agentPath...}", agentGlobalProxy)
+	agentProxy := agentServerProxyHandler(pm, agentServerURL, rcfg.AgentServerToken)
+	api.Handle("GET /api/projects/{id}/agent/{agentPath...}", agentProxy)
+	api.Handle("POST /api/projects/{id}/agent/{agentPath...}", agentProxy)
+	api.Handle("PATCH /api/projects/{id}/agent/{agentPath...}", agentProxy)
+	api.Handle("DELETE /api/projects/{id}/agent/{agentPath...}", agentProxy)


Are those APIs mirroring agent-server?

yes, for reverse proxy

neuromaxer · 2026-05-25T18:37:12Z


-	// OpenCode health endpoint — registered on the outer mux before the /api/opencode/
-	// proxy so the more-specific pattern takes precedence. Protected by auth middleware.
-	mux.Handle("GET /api/opencode/health", a.Middleware(http.HandlerFunc(handleOpenCodeHealth(oc))))


We should prly have an endpoint for health of agent-server in case it gets stuck without failing and systemd doesn't restart it (there are no healthchecks in systemd afaik)

neuromaxer · 2026-05-25T18:41:24Z

+export interface AgentAuthProvider {
+  provider: string;
+  name: string;
+  configured: boolean;
+  credentialType?: 'api_key' | 'oauth';
+  source?: 'stored' | 'runtime' | 'environment' | 'fallback' | 'models_json_key' | 'models_json_command';
+  label?: string;
+  supportsApiKey: boolean;
+  supportsSubscription: boolean;
+  modelCount: number;
+  availableModelCount: number;
+}
+


All of those interfaces and agent-server UI in general should probably live in a dedicated repo (as part of agent-server?)

neuromaxer · 2026-05-25T18:43:32Z

+export type PiSessionInfo = {
+  id: string;
+  createdAt: string;
+  firstMessage: string;
+  messageCount: number;
+};
+
+export type ThinkingLevel = 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh';
+
+export type PiAgentModel = {
+  provider: string;
+  id: string;
+  name: string;
+  api: string;
+  reasoning: boolean;
+  available: boolean;
+  input: Array<'text' | 'image'>;
+  contextWindow: number;
+  maxTokens: number;
+  defaultThinkingLevel?: ThinkingLevel;
+};


Similar comment - it's best if backend and frontend for interacting with agents live in one place (e.g. agent-server) rather than be separated in two different repos. It's harder to keep them in sync in two different repos

neuromaxer · 2026-05-25T18:50:25Z

I don't think we have anything like that in any of the apps so far. I'm not sure but it looks like it's stepping into agent-server area of responsibility

It turns SSE stream from agent-server into renderable UiMessage

neuromaxer · 2026-05-25T18:53:33Z

That got quite bigger. Need to investigate

neuromaxer · 2026-05-25T19:11:11Z

-CURRENT=$(/usr/local/bin/opencode --version 2>/dev/null || echo "")
+AGENT_SERVER_DIR="${AGENT_SERVER_DIR:-}"
+if [ -z "$AGENT_SERVER_DIR" ] && [ -d "$REPO_DIR/../agent-server" ]; then
+  AGENT_SERVER_DIR="$(cd "$REPO_DIR/../agent-server" && pwd)"


I would actually pass agent-server dir via environment variables similarly to how we pass some other vars (I'll look for reference)

neuromaxer · 2026-05-27T19:43:39Z

+const thinkingLabels: Record<ThinkingLevel, string> = {
+  off: 'Off',
+  minimal: 'Minimal',
+  low: 'Low',
+  medium: 'Medium',
+  high: 'High',
+  xhigh: 'X-high',
+};


those are model-specific

neuromaxer · 2026-05-27T19:47:29Z

+const styles: Record<string, React.CSSProperties> = {
+  container: {
+    flex: 1,
+    display: 'flex',
+    flexDirection: 'column',
+    minHeight: 0,
+    overflow: 'hidden',
+  },


We should use tailwind css

neuromaxer · 2026-05-27T20:41:37Z

+	agentProjectIDHeader   = "X-Appx-Project-Id"
+	agentProjectNameHeader = "X-Appx-Project-Name"
+	agentProjectDirHeader  = "X-Appx-Project-Dir"


Probably need only "X-Appx-Project-Id" header, others are kind of redundant and should be passed once when creating the project

Pi switch refactor

Canvinus added 15 commits May 22, 2026 11:07

feat: scaffold pi project harness

e3c5815

chore(deps): resolve frontend audit advisories

365b09c

feat: support pi-only appx runtime

1d5fa7c

feat: route pi sessions through appx

293ebad

feat: manage pi runtime controls

21b37a5

feat: configure pi subscription and custom providers

a728f90

fix: refine pi subscription login fallback

d50c8cc

fix: polish pi subscription login panel

25de67d

fix: collapse custom provider editor

6bd808d

fix: separate pi credential modes

d4dbf24

fix: stabilize pi provider row focus

03b933b

fix: prevent stale opencode health on pi

db7e47a

fix: scope pi agent proxy by project

bbb4a72

fix: support pi content-indexed streaming events

941ecd6

docs: clarify pi streaming contract

55b65cd

Canvinus mentioned this pull request May 23, 2026

Switch to Pi appx-org/agent-server#1

Merged

Canvinus marked this pull request as ready for review May 23, 2026 20:00

Canvinus added 7 commits May 23, 2026 22:11

fix(appx): harden pi proxy and surface extension approvals

5fa2afb

chore(appx): run agent server in multi project mode

053bf5b

fix(appx): recover pi extension approval UI

e4b22ae

fix(appx): route pi agent traffic through egress proxy

e21d8be

fix(appx): recover stale pi session state

f52cb4a

refactor(appx): remove opencode backend

c752611

fix(appx): clean pi session lifecycle

6aa47e1

chatgpt-codex-connector Bot reviewed May 25, 2026

View reviewed changes

neuromaxer reviewed May 25, 2026

View reviewed changes

Comment thread internal/project/pi_harness.go Outdated

neuromaxer May 25, 2026

Copy link
Copy Markdown

Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What does this file do?

neuromaxer reviewed May 25, 2026

View reviewed changes

Comment thread web/src/pages/Settings.tsx

neuromaxer May 25, 2026

Copy link
Copy Markdown

Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That got quite bigger. Need to investigate

neuromaxer reviewed May 25, 2026

View reviewed changes

fix path after auth refactor

4dd3643

neuromaxer reviewed May 27, 2026

View reviewed changes

neuromaxer added 4 commits June 9, 2026 18:49

replace agent frontend with agent-chat package

07a9b7a

rebuild on change in agent-chat dir

34a560f

update readme

2533d85

Merge pull request #3 from appx-org/pi-switch-refactor

bddb18e

Pi switch refactor

neuromaxer changed the title ~~[codex] Add Pi agent backend and UI~~ Switch to agent-server Jun 9, 2026

neuromaxer merged commit 886380f into main Jun 9, 2026

		if [ ! -d /home/appx-agent/.pi ] && [ -d /home/opencode/.pi ]; then
		cp -a /home/opencode/.pi /home/appx-agent/.pi

		if id -u opencode >/dev/null 2>&1; then
		pkill -u opencode -f '(^\|/)agent-server( \|$)\|agent-server/dist/server\.js' 2>/dev/null \|\| true

Conversation

Canvinus commented May 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Why

Validation

Known Follow-Up

Dependency

Uh oh!

Canvinus commented May 25, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot May 25, 2026

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot May 25, 2026

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot May 25, 2026

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

neuromaxer commented May 25, 2026

Uh oh!

chatgpt-codex-connector Bot commented May 25, 2026

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Canvinus commented May 23, 2026 •

edited

Loading