feat(cli): add pi as a supported coding agent

.github/ci-path-filters.yml

@@ -190,6 +190,21 @@ node:
 openclaw:
   - 'integrations/openclaw/**'
 
+# The pi extension is a hook client for the CLI gateway, so a change to the
+# adapter it posts against should re-run the extension's own suite.
+#
+# Only the adapter paths are listed, deliberately. `test-pi` is a TypeScript
+# typecheck plus Node tests against a *stub* gateway, so it cannot observe the
+# `/hooks/pi` route, the event classifier, or the session manager no matter what
+# changes there -- and `crates/cli/src/sessions/**` alone would put a full Node
+# matrix on nearly every CLI change. Those files are covered by the `rust`
+# filter, which matches every `crates/**/*.rs` file and runs the workspace tests
+# that exercise the route for real.
+pi:
+  - 'crates/cli/src/agents/pi/**'
+  - 'crates/cli/src/agents/shared/adapters.rs'
+  - 'integrations/pi/**'
+
 python:
   - 'crates/python/Cargo.toml'
   - 'crates/python/src/**'

.github/workflows/ci.yaml

@@ -175,6 +175,7 @@ jobs:
       ref_name: ${{ github.ref_name }}
       run_package: ${{ needs.ci_changes.outputs.run_node_package == 'true' }}
       run_openclaw: ${{ needs.ci_changes.outputs.run_openclaw == 'true' }}
+      run_pi: ${{ needs.ci_changes.outputs.run_pi == 'true' }}
 
   ci_python:
     name: Python

.github/workflows/ci_changes.yml

@@ -48,6 +48,9 @@ on:
       run_openclaw:
         description: 'Whether OpenClaw integration jobs should run'
         value: ${{ jobs.changes.outputs.run_openclaw }}
+      run_pi:
+        description: 'Whether pi integration jobs should run'
+        value: ${{ jobs.changes.outputs.run_pi }}
       run_python:
         description: 'Whether Python jobs should run'
         value: ${{ jobs.changes.outputs.run_python }}
@@ -77,9 +80,10 @@ jobs:
       run_docs: ${{ (inputs.full_ci || startsWith(inputs.ref_name, 'pull-request/')) && (inputs.full_ci || steps.filter.outputs.ci == 'true' || steps.filter.outputs.shared == 'true' || steps.filter.outputs.docs == 'true') }}
       run_go: ${{ inputs.full_ci || steps.filter.outputs.ci == 'true' || steps.filter.outputs.shared == 'true' || steps.filter.outputs.go == 'true' }}
       run_installer: ${{ inputs.full_ci || steps.filter.outputs.installer == 'true' }}
-      run_node: ${{ inputs.full_ci || steps.filter.outputs.ci == 'true' || steps.filter.outputs.shared == 'true' || steps.filter.outputs.node == 'true' || steps.filter.outputs.openclaw == 'true' }}
+      run_node: ${{ inputs.full_ci || steps.filter.outputs.ci == 'true' || steps.filter.outputs.shared == 'true' || steps.filter.outputs.node == 'true' || steps.filter.outputs.openclaw == 'true' || steps.filter.outputs.pi == 'true' }}
       run_node_package: ${{ inputs.full_ci || steps.filter.outputs.ci == 'true' || steps.filter.outputs.node_package == 'true' }}
       run_openclaw: ${{ inputs.full_ci || steps.filter.outputs.ci == 'true' || steps.filter.outputs.shared == 'true' || steps.filter.outputs.node == 'true' || steps.filter.outputs.openclaw == 'true' }}
+      run_pi: ${{ inputs.full_ci || steps.filter.outputs.ci == 'true' || steps.filter.outputs.shared == 'true' || steps.filter.outputs.node == 'true' || steps.filter.outputs.pi == 'true' }}
       run_python: ${{ inputs.full_ci || steps.filter.outputs.ci == 'true' || steps.filter.outputs.shared == 'true' || steps.filter.outputs.python == 'true' }}
       run_python_integration_langchain: ${{ inputs.full_ci || steps.filter.outputs.ci == 'true' || steps.filter.outputs.shared == 'true' || steps.filter.outputs.python_integration_langchain == 'true' }}
       run_python_package: ${{ inputs.full_ci || steps.filter.outputs.ci == 'true' || steps.filter.outputs.python_package == 'true' }}

.github/workflows/ci_node.yml

@@ -24,6 +24,11 @@ on:
         required: false
         default: false
         type: boolean
+      run_pi:
+        description: 'Whether to run pi integration checks'
+        required: false
+        default: false
+        type: boolean
     secrets:
       CODECOV_TOKEN:
         required: false
@@ -122,6 +127,11 @@ jobs:
         working-directory: ${{ env.NEMO_RELAY_CI_WORKSPACE }}
         run: just --set ci true test-openclaw
 
+      - name: Run pi integration checks
+        if: ${{ inputs.run_pi }}
+        working-directory: ${{ env.NEMO_RELAY_CI_WORKSPACE }}
+        run: just --set ci true test-pi
+
       - name: Upload Node coverage to Codecov
         uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6
         if: ${{ !startsWith(matrix.platform, 'windows') }}

.gitignore

@@ -86,3 +86,6 @@ CHANGELOG.md
 # Relay
 /.nemo-relay
 /artifacts/
+
+# Generated per machine by the dynamic-plugin recipe: local dylib name + sha256.
+examples/**/relay-plugin.local.toml

README.md

@@ -315,6 +315,7 @@ coverage.
 |:--|:--:|:--:|:--:|:--|
 | Claude Code | Yes | Yes | Partial | Hook forwarding, pre-tool blocking, and gateway-routed LLM observability are supported. |
 | Codex | Yes | Yes | Partial | Persistent install verifies the exact plugin hooks. Each `Stop` finalizes a turn snapshot; the supported generated schema does not install `SessionEnd`. |
+| pi | Partial | Yes | No | Proof of concept. A Relay-authored pi extension forwards tool and turn activity, gates tool calls, and points the active model's provider at the gateway when the gateway fronts that provider — which is what enables model-call enforcement and LLM spans. |
 | Hermes Agent | Yes | Yes | Partial | NeMo Relay is built into Hermes Agent, and Hermes Agent understands NeMo Relay plugin configurations. No separate observability plugin or Relay CLI setup is required. |
 
 ### Public API Integrations

crates/cli/src/agents/claude/adapter.rs

@@ -38,6 +38,12 @@ pub(crate) fn adapt(payload: Value, headers: &HeaderMap) -> AdapterOutcome {
                 "PermissionDenied",
                 "permissionDenied",
             ],
+            // Claude Code reports only the close of a turn (`Stop`); its turns stay
+            // lazily opened, and `PreCompact`/`PostCompact` are matched by the
+            // shared fallback rather than by an adapter-specific rule.
+            turn_start: &[],
+            turn_end: &["Stop", "stop"],
+            compaction: &[],
         },
     );
     // Response shape is decided by the primary event (first in the vec); secondary events like

crates/cli/src/agents/claude/mod.rs

@@ -19,6 +19,7 @@ pub(super) const DESCRIPTOR: AgentDescriptor = AgentDescriptor {
     hook_path: "/hooks/claude-code",
     version_product: "Claude Code",
     minimum_version: (2, 1, 121),
+    verified_through: None,
     hook_events: &[
         "SessionStart",
         "UserPromptSubmit",

crates/cli/src/agents/codex/adapter.rs

@@ -27,6 +27,12 @@ pub(crate) fn adapt(payload: Value, headers: &HeaderMap) -> AdapterOutcome {
             subagent_end: &["subagentStop", "subagentEnd", "subagent_stop"],
             tool_start: &["preToolUse", "toolStarted", "tool_start"],
             tool_end: &["postToolUse", "toolEnded", "tool_end", "toolFailed"],
+            // Codex reports only the close of a turn (`Stop`); its turns stay
+            // lazily opened, and `PreCompact`/`PostCompact` are matched by the
+            // shared fallback rather than by an adapter-specific rule.
+            turn_start: &[],
+            turn_end: &["Stop", "stop"],
+            compaction: &[],
         },
     );
     AdapterOutcome {

crates/cli/src/agents/codex/mod.rs

@@ -20,6 +20,7 @@ pub(super) const DESCRIPTOR: AgentDescriptor = AgentDescriptor {
     hook_path: "/hooks/codex",
     version_product: "codex-cli",
     minimum_version: (0, 143, 0),
+    verified_through: None,
     hook_events: &[
         "SessionStart",
         "UserPromptSubmit",