Control Pi
from anywhere.

Pix runs next to Pi on your machine, then gives paired devices a direct or encrypted way to pick up the same sessions.

pix / protocol review connected
pi / session attached12ms · direct

you Check the relay boundary against the v1 schema.

Reading protocol/schema/v1.md

pi Relay forwards opaque frames. It does not parse application payloads.

you

encrypted channelauthorized workspacePi stays local
01 / A session, not a cloud workspacePi runs here. Pix lets you reach it there.
Why Pix

Pi stays local

Pix launches and supervises the Pi you already use. Your files and native JSONL sessions remain on the host.

Direct LAN first

Nearby devices use Bonjour discovery and a direct TCP path whenever the network allows it.

Encrypted remotely

The same Pix wire frames travel over the remote path, with the relay forwarding ciphertext only.

Workspaces are explicit

Only canonical workspace roots you authorize are exposed to a paired client.

Devices are paired

A client gets access after an explicit approval step on the host, and can be revoked later.

Open source by default

Host, CLI, protocol fixtures, relay, and the public macOS client are available to inspect.

brew tap ZainCheung/pix https://github.com/ZainCheung/pix.git
brew install --cask ZainCheung/pix/pix

A few common questions

Where does my code run?

On the machine where you run the Pix Host. Pix does not move your workspace into a hosted environment or create a second session store.

What happens when I am on the same network?

The client discovers the host over Bonjour and prefers a direct TCP connection. The encrypted Pix wire protocol is the same on that path.

Can the relay read my prompts or files?

No. The relay forwards authenticated opaque encrypted frames and does not decrypt, parse, queue, or persist application payloads.

What does install.sh install?

On Linux it downloads the matching release archive and installs the pix CLI into ~/.local/bin. On Apple Silicon it also installs Pix.app into ~/Applications.

Do I need an account?

No. Pix uses explicit workspace authorization and device pairing instead of a hosted account layer.