A local-first coding-agent switchboard for Claude Code, Codex, Headroom, RTK, and copyable context packs for other agents.
AI Switchboard now ships as more than a routing toggle. The current main branch includes:
- One-click optimization modes: Full optimization, Headroom only, RTK only, and Off, with reversible Doctor repair flows.
- Codex + Claude routing: managed local routing through Headroom where supported, with oversized-turn safety handling and Codex repair guidance.
- Prompt-cache optimization groundwork: provider cache metric parsing, cache-read ratio calculation, stable-prefix ordering, and optimization snapshots.
- Preemptive compaction planning: threshold-based compaction decisions before oversized requests turn into hard 413 failures.
- Repo Intelligence + Agent Session packs: local repository indexing, copyable context packs, agent handoffs, freshness warnings, CLI exports, and read-only MCP documentation.
- Savings attribution: RTK command-output savings, Repo Intelligence token-avoidance estimates, add-on attribution rows for MarkItDown, Ponytail, Caveman, and Compact Chinese profiles.
- Redundancy/model-routing primitives: backend modules for duplicate payload detection and cheaper-model routing policy decisions.
- Live Token X-Ray + Daily Briefing: content-free local session analysis, confidence-labelled savings/context evidence, daily recommendations, 365-day briefing history, secret-free export, and scoped analytics deletion controls.
- Retro switchboard UI: the menu bar app now has a compact switchboard-style theme with brass controls, visible scroll behavior, and menubar-width layout fixes.
Still in progress: public installed-app smoke and reboot-level Doctor/Rollback/uninstall proof, deeper live redundancy reporting, and broader long-running Repo Memory MCP supervision.
These captures show the current menu bar UI surface and live setup/status panels.
| Switchboard status | Repo Intelligence / Agent Session | Add-ons / optimization stack |
|---|---|---|
 |
 |
 |
Visible docs:
- Plan status ledger
- Product roadmap plan
- Agent Control Center implementation plan
- Agent Memory implementation plan
- Live Token X-Ray and Daily AI Usage Briefing implementation plan
- Implementation plan reconciliation
- Fable security implementation plan
- Adapter lifecycle
- Benchmarks
- Repo map
- Repo map compact context
PR and release materials:
- Pull request template
- Alternate pull request template
- CI workflow
- macOS CI workflow
- Rust/Tauri workflow
- Release macOS workflow
- Release macOS staging workflow
- Security workflow
- Test workflow
- Vendor wheel build workflow
AI Switchboard is a privacy-first platform for turning local coding-agent optimizations on and off. The macOS app, AI Switchboard for Mac, manages supported client routing, shell-output compression, local add-ons, Doctor repairs, and read-only repo context packs from one menu bar app.
Switchboard is local-first, not offline-only. Claude, OpenAI, and other provider model calls still go to the configured remote APIs. Switchboard state, reversible client config edits, Doctor repair data, add-on setup, telemetry defaults, and Repo Intelligence metadata stay on your Mac.
Current status: active productization branch. The standalone repository is public and GitHub release v0.0.0 now carries the signed/notarized Apple Silicon DMG Mac-AI-Switchboard_0.0.0-signed-notarized-aarch64.dmg plus checksum, signed Apple Silicon updater bundle, updater signature, and reachable latest.json.
For local development, run npm run app:run or use the Codex desktop Run action. Both point at script/build_and_run.sh, which stops any existing app process and launches the Tauri development build. Use script/build_and_run.sh --verify when you want a one-command launch health check.
Created so far: Start Agent Session, Claude/Codex managed routing, one-click Claude/Codex connector verification prompts, bounded Gemini/OpenCode adapter work, managed connector sidecar coverage, read-only Repo Intelligence APIs, expanded lightweight symbol parsing, repo-memory MCP lifecycle/supervision evidence, savings attribution ledger, safe config dry-runs, Doctor timeline/repair copy, Rollback Center native restore/cleanup, guarded native undo-all for ready rollback rows, release-readiness evidence surfaces, Caveman profiles including opt-in Compact Chinese, and trust-hardening guards for remote destinations, local-only account flows, external links, and app-owned branding.
Still left: provider-specific native config writes beyond the promoted sidecar set, real long-running repo-memory MCP process supervision beyond service-health checks, deeper Repo Intelligence graph ranking, user-approved safe config writes with verification/rollback for more connectors, reboot-level Rollback/Doctor/uninstall proof, public installed-app smoke confirmation, and remaining legal/privacy/network-audit hardening.
| Tool or area | Status | Automatic routing | RTK support | Repo packs | Notes |
|---|---|---|---|---|---|
| Claude Code | Managed | Yes | Yes | Yes | Reversible config edits and hook setup. |
| Codex | Managed | Yes | Partial | Yes | Provider block, direct-bypass handling, and Doctor repair flows. |
| Headroom | Core runtime | Yes | No | No | Local optimization proxy used by managed clients. |
| RTK | Core add-on | No | Yes | No | Command-output compression for shells and agent tool output. |
| Repo Intelligence | Supported | No | No | Yes | Read-only repo summaries, context packs, and agent handoffs. |
| Gemini CLI | Limited managed adapter | Limited | No | Yes | Shell/base-url routing adapter exists; provider/account mutation remains gated. |
| OpenCode | Limited managed adapter | Limited | No | Yes | Provider adapter work exists; lifecycle gates still decide native writes. |
| Cursor | Guided | No | No | Yes | Copyable packs and settings detection today. |
| Windsurf | Guided | No | No | Yes | Copyable packs and settings detection today. |
| Goose | Managed MCP | Yes | No | Yes | Read-only Repo Memory MCP bridge with provider/model routing still manual. |
| Aider, Continue, Qwen Code, Amazon Q Developer CLI, Zed AI | Managed sidecar/editor | Yes | No | Yes | Switchboard-owned routing markers with Doctor verification, rollback, and Off cleanup; provider/account state remains manual. |
| Cursor, Grok / xAI CLI | Gated | No | No | Yes | Manual workflow, detection evidence, and automation gates until reversible native writes are proven. |
| MarkItDown, Ponytail, Caveman | Add-on | No | Depends | No | Local helper add-ons with explicit install/disable flows. |
See Connector Support for the status vocabulary and per-tool guardrails.
| Mode | What It Does | Typical Use |
|---|---|---|
| Full optimization | Routes supported clients through Headroom and enables RTK shell-output compression. | Daily coding-agent work with the full local optimization layer. |
| Headroom only | Routes supported clients through the local Headroom proxy while leaving shell output unchanged. | Prompt/context optimization without shell command rewriting. |
| RTK only | Keeps LLM traffic direct and enables RTK shell-output compression. | When a client should bypass Headroom or a large Codex request hits compression refusal. |
| Off | Removes local routing hooks and disables RTK integration. | Clean pass-through mode before debugging client config or comparing behavior. |
Switchboard separates requested mode from active mode. If a mode is requested but a dependency is missing, the app shows the active subset and points you to Doctor.
Doctor currently repairs:
- Headroom runtime reachability.
- Reversible Claude Code and Codex setup for supported installed tools.
- RTK installation and shell integration.
- Codex oversized-turn preflight that routes around Headroom before
413 compression_refused. - Repo Intelligence stale or missing index warnings.
- Repo Memory MCP configuration for read-only agent access to Repo Intelligence packs.
- Managed connector status, dry-run evidence, and safe manual workflow guidance.
For real-world Codex compression failures such as:
unexpected status 413 Payload Too Large: compression_refused
Switchboard preflights oversized Codex turns and routes them around Headroom before a compression refusal. Doctor still exposes Reset Codex for stale fallback direct-routing state. See Codex Compression Troubleshooting.
If Codex instead reports:
The '' model is not supported using Codex with a ChatGPT account.
that is a Codex model/provider configuration problem, not the usual Headroom compression path. Use Doctor to re-apply the managed Codex provider block, then choose a Codex-supported ChatGPT model before retrying.
Headroom is the managed local optimization runtime used by Switchboard for proxy routing and prompt/context compression. Switchboard installs it into app-owned storage and controls whether supported clients route through it.
The public macOS app name is AI Switchboard for Mac. Current compatibility builds may still use the legacy Mac AI Switchboard bundle, command, and storage names while the platform rebrand is staged. Primary app storage is:
~/Library/Application Support/Mac AI Switchboard
On first launch after upgrading from older builds, Switchboard copies legacy ~/Library/Application Support/Headroom storage into the app storage path and records config/migrations.json. The legacy directory is preserved for one-release compatibility with existing runtimes, logs, receipts, backups, cleanup paths, and reversible client setup state.
RTK is the local command-output compression layer. Switchboard can make it available in supported shells and agent workflows so large command output is reduced before it reaches a context window.
This repository also uses RTK for contributor commands. See AGENTS.md for the local command prefix used in this checkout.
MarkItDown is an optional local add-on for converting PDFs and Office documents into cleaner Markdown before an agent reads them. It is useful when you want document context without pasting large raw files into a chat.
Ponytail is an optional local add-on that nudges coding agents toward smaller, less over-engineered changes. It complements RTK and Repo Intelligence by reducing unnecessary implementation sprawl rather than compressing output after the fact.
Caveman is an optional prompt/profile layer for terse internal handoffs and command summaries. It includes scoped and aggressive profiles, plus an experimental opt-in Compact Chinese profile. Compact Chinese is limited to private internal planning notes and handoffs; user-facing, legal, safety, debugging, and release-readiness content stays in the requested language with full detail.
Repo Intelligence is a read-only local indexer and handoff generator. It scans a local repository, classifies files, estimates context size, summarizes implementation/test/config areas, and produces bounded packs for agents.
Read-only foundation: the app now ships a read-only foundation for local repo index, context packs, persisted summary, Doctor warnings, and clear/copy UI. Read-only local repo index, context packs, persisted summary, Doctor warnings, and clear/copy UI are available before any agent starts reading files. The CLI now exposes an agent-readable --manifest for agents that need to discover packs without rescanning the repo, plus --session/--start-session for mac_ai_switchboard.agent_session_preparation payloads with freshness, task type, recommended mode, selected handoff, managed connector readiness, and optional budgeted context.
Useful commands:
Prefer the Switchboard CLI for new docs and handoffs:
npm run switchboard -- repo-intelligence <repo-path>
npm run switchboard -- repo-intelligence <repo-path> --manifest
npm run switchboard -- repo-intelligence <repo-path> --list-agents
npm run switchboard -- repo-intelligence <repo-path> --pack implementation --format markdown
npm run switchboard -- repo-intelligence <repo-path> --agent codex --format markdown
npm run switchboard -- repo-intelligence <repo-path> --agent gemini --format json
npm run switchboard -- repo-intelligence <repo-path> --start-session --agent codex --budget 6000 --format markdownThe legacy npm script remains supported:
npm run repo:intelligence -- <repo-path>
npm run repo:intelligence -- <repo-path> --manifest
npm run repo:intelligence -- <repo-path> --list-agents
npm run repo:intelligence -- <repo-path> --pack implementation --format markdown
npm run repo:intelligence -- <repo-path> --agent codex --format markdown
npm run repo:intelligence -- <repo-path> --session --agent codex --task verification --headroom-healthy --rtk-healthy --format markdown
npm run repo:intelligence -- <repo-path> --start-session --agent codex --task verification --budget 6000 --format markdown
npm run repo:intelligence -- <repo-path> --agent gemini --format jsonSupported handoff targets include claude, codex, gemini, opencode, aider, goose, cursor, continue, grok, qwen, amazonq, windsurf, and zed. Default packs exclude secret-like paths such as .env*, private-key folders, certificates, and signing keys.
Repo Memory MCP is the read-only agent-consumption surface for Repo Intelligence. It exposes context packs, symbol lookup, and dependent-edge queries to supported agents without modifying the repository. The app surfaces lifecycle status in Mode Inspector, provides an Install MCP action, and Doctor can repair missing Repo Memory MCP configuration. The release verifier includes npm run check:repo-memory-mcp.
Current repo-memory MCP supervision records app-session active state, last-check evidence, stale-config detection, and managed command health for the descriptor, repo-memory script, and Node entrypoint. Connector bridge setup recipes are documented for supported agents. Real long-running process supervision remains roadmap work.
See docs/repo-memory-mcp.md, docs/repo-intelligence-plan.md, and docs/architecture.md.
Switchboard separates measured, estimated, and inferred savings instead of merging them into one opaque number.
- Headroom engine session deltas are now written as append-only measured attribution events and exposed through a read-only backend command.
- RTK reports command-output savings through its own gain/today stats and measured backend attribution events.
- Repo Intelligence records estimated best-pack token-avoidance events after successful index builds.
- MarkItDown, Ponytail, Caveman, and Compact Chinese record durable inferred template events when enabled until each source has stronger measured runtime counters.
- Savings ledger exports include confidence labels, evidence, caveats, and attribution percentages by confidence.
Switchboard is designed to be reversible and explicit. Depending on mode and installed tools, it may write:
~/Library/Application Support/Mac AI Switchboardfor managed runtimes, tools, logs, receipts, backups, caches, and Repo Intelligence summaries.~/Library/Application Support/Headroommay remain as preserved legacy storage after migration.~/.claude/settings.jsonand~/.claude/hooks/when Claude Code routing or RTK hooks are enabled.~/.codex/config.tomland shell profile managed blocks when Codex routing is enabled.- macOS Keychain entries for app/session secrets.
~/Library/LaunchAgents/only if launch at login is enabled.
Managed config blocks are fenced with # >>> headroom:... >>> markers and backups are written before edits where client configuration is changed.
Rollback Center inventories every managed local footprint with targets, markers, backup expectations, restore mode, evidence requirements, and Off-cleanup boundaries. It also provides guarded execution previews with undo-all order and exact confirmation phrases.
Native rollback execution is currently allowlisted for Codex/OpenCode backup restores, Gemini managed cleanup, read-only Repo Memory MCP cleanup for Goose, sidecar-backed cleanup rows for Aider, Qwen Code, Amazon Q Developer CLI, and managed editor cleanup rows for Windsurf and Zed. The guarded native undo-all flow executes only ready allowlisted rows and leaves manual or dedicated cleanup rows blocked.
Off mode removes routing hooks and RTK integration. Runtime files, logs, receipts, and keychain entries remain so the next launch is fast. Uninstall cleanup is covered in docs/install.md.
See Threat Model for the local proxy bind/auth boundary, raw-message logging limits, and future hardening plan.
Normal macOS users will install a signed DMG once releases are published:
- Download the current AI Switchboard for Mac DMG from GitHub Releases. During the compatibility window, artifacts may still be named
Mac-AI-Switchboard_<version>.dmg. - Drag AI Switchboard for Mac into Applications. Current compatibility bundles may still appear as Mac AI Switchboard in Finder and
/Applications. - Launch the app and approve local runtime install on first run.
- Choose Full optimization, Headroom only, RTK only, or Off.
Until signed DMGs are published, build from source:
git clone https://github.com/tarunag10/mac-ai-switchboard.git
cd mac-ai-switchboard
npm install
cat > .env <<'EOF'
HEADROOM_LOCAL_ONLY="1"
VITE_HEADROOM_LOCAL_ONLY="1"
VITE_HEADROOM_REMOTE_TELEMETRY="0"
EOF
npm run tauri devSee docs/install.md for the current install and smoke-test checklist. See docs/platform-support.md for macOS, Linux, and Windows support status.
For a local macOS-only unsigned test build, run:
npm run build:mac:local-installUnsigned DMGs are local build output under src-tauri/target/release/bundle/dmg/. They are useful for internal testing, but they are ignored by git and should not be treated as public release artifacts.
The local install command installs, ad-hoc signs, smoke-checks, and opens the current compatibility app bundle at /Applications/Mac AI Switchboard.app. For automation that should not open the app window, run MAC_AI_SWITCHBOARD_SKIP_OPEN=1 npm run build:mac:local-install.
npm install
npm run tauri devLocal-only builds should use:
HEADROOM_LOCAL_ONLY="1"
VITE_HEADROOM_LOCAL_ONLY="1"
VITE_HEADROOM_REMOTE_TELEMETRY="0"Remote telemetry, support, and update services are off by default. AI Switchboard does not include a remote account, billing, checkout, or paid pricing API.
Useful checks:
npm run test:all
npm run smoke:preflight
npm run release:ready -- --json
cargo test --manifest-path src-tauri/Cargo.tomlClean Rust build artifacts when needed:
cargo clean --manifest-path src-tauri/Cargo.tomlsrc/ React + Tauri frontend
src-tauri/src/lib.rs Tauri commands, tray wiring, modes, Doctor, updates
src-tauri/src/state.rs App state and dashboard shaping
src-tauri/src/tool_manager.rs Managed runtime and tool installation
src-tauri/src/client_adapters.rs Client detection and reversible setup
src-tauri/src/repo_intelligence.rs Read-only repo indexing and context packs
src/lib/managedChanges.ts Rollback Center inventory, dry-run, and execution-preview contracts
src/lib/savingsCalculator.ts Savings ledger display helpers
src-tauri/src/insights.rs Local recommendations
scripts/ Release, smoke, repo-intelligence, and validation helpers
docs/ Architecture, install, release, troubleshooting docs
research/ Tool compatibility and planning notes
Updates ship outside the App Store through Tauri's updater and GitHub Releases. Local DMG builds and release workflows run validation before artifacts are published. See docs/macos-release.md.
Public download surfaces should use AI Switchboard for the platform and AI Switchboard for Mac for the macOS app. Link downloads to GitHub Releases rather than committing or mirroring local DMGs. During the compatibility window, release assets may still use Mac-AI-Switchboard_<version>.dmg names so updater feeds, installed-app smoke checks, and existing automation keep working.
Maintainer commands:
npm run build:mac:dmg
npm run release:ready -- --strict
npm run smoke:installed -- --confirmUse ./scripts/bump-version.sh <version> to update version files together. main is the stable channel, staging is the release-candidate channel, and stable promotions should land through release PRs after staging validation.
Managed tools are pinned so users get one known-good version per desktop release. Automatic background upgrades are disabled.
headroom-ai is controlled in src-tauri/src/tool_manager.rs by:
HEADROOM_PINNED_VERSIONHEADROOM_PINNED_WHEEL_URLHEADROOM_PINNED_SHA256
RTK, Python standalone runtime, vendor wheel indexes, MarkItDown, and Ponytail follow the same release philosophy: pinned versions, explicit checksums where applicable, and upgrades through desktop app releases rather than surprise background changes.
Source code is MIT-licensed. Official app names, icons, signing identities, update endpoints, release artifacts, and distribution channels are not licensed for reuse. Forks should use their own app name, bundle identifier, signing identity, and update channel.
Public contributions are welcome, but no pull request from another person, bot, fork, dependency-update service, or external contributor should be merged unless Tarun Agarwal explicitly approves it.
See GOVERNANCE.md, MAINTAINERS.md, CONTRIBUTING.md, SECURITY.md, PRIVACY.md, TERMS.md, CODE_OF_CONDUCT.md, SUPPORT.md, TRADEMARKS.md, NOTICE, docs/remote-destinations.md, and docs/repository-settings.md.