@ian-pascoe/pi-minimal-subagents

Persistent nested subagents with bounded delegation for Pi

Packages

Package details

extensionskill

Install @ian-pascoe/pi-minimal-subagents from npm and Pi will load the resources declared by the package manifest.

$ pi install npm:@ian-pascoe/pi-minimal-subagents
Package
@ian-pascoe/pi-minimal-subagents
Version
0.7.2
Published
Sep 10, 2026
Downloads
2,161/mo · 403/wk
Author
ianpascoe_
License
MIT
Types
extension, skill
Size
423.7 KB
Dependencies
1 dependency · 5 peers
Pi manifest JSON
{
  "extensions": [
    "./src/index.ts"
  ],
  "skills": [
    "./skills"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

Minimal Subagents

Install and load

Install the package from npm:

pi install npm:@ian-pascoe/pi-minimal-subagents

Installing the Git collection enables every extension in the repository:

pi install git:github.com/ian-pascoe/pi-extensions

To select only Minimal Subagents from that Git package, set its extension filter in ~/.pi/agent/settings.json using the repository-relative path:

{
  "packages": [
    {
      "source": "git:github.com/ian-pascoe/pi-extensions",
      "extensions": ["packages/pi-minimal-subagents/src/index.ts"]
    }
  ]
}

From this package checkout, load the source directly with pi -e ./src/index.ts. Requires Node >=22.19.0 and Pi >=0.85.1.

Configuration

Configure the extension in Pi's standard settings files:

  • global: ~/.pi/agent/settings.json
  • project: ./.pi/settings.json, when the project is trusted

Project values override global values. Run /reload after editing either file.

Subagent Access

minimalSubagents.enabled controls whether the six Root Agent Coordinator Tools start active. It defaults to true; a trusted project value overrides the global value.

{
  "minimalSubagents": {
    "enabled": false
  }
}

Use /subagents to inspect or change access without editing JSON:

/subagents
/subagents status
/subagents enable|disable|reset
/subagents enable|disable|reset --global
/subagents enable|disable|reset --project

Bare /subagents means status. Unscoped changes apply to the selected session-tree branch. reset removes that override and follows project, global, then the built-in default. Scoped changes update both the selected branch and the chosen settings file; project changes require a trusted project. A malformed settings file is left unchanged and reported with its path.

Disabling Subagent Access removes all six Coordinator Tools from the Root Agent while preserving unrelated tools. It does not cancel or alter existing Child Agents, their Launch Contracts or fanout capability, Coordination Message delivery, or terminal-result delivery. Reload and resume preserve the selected branch override, /tree restores the newly selected branch, forks inherit the source branch, and a new branch without an override follows settings.

Model roles

minimalSubagents.modelRoles gives the parent agent advisory names for eligible models. The extension defines no roles itself, performs no task classification, and does not route launches. The parent still passes the ordinary model and thinking_level arguments separately.

{
  "minimalSubagents": {
    "modelRoles": {
      "budget": "opencode-go/glm-5.2:low",
      "design": {
        "model": "opencode-go/kimi-k3:high",
        "hint": "UI design, visual critique, and frontend polish"
      }
    }
  }
}

A recognized final suffix (off, minimal, low, medium, high, xhigh, or max) is a preferred thinking_level, not part of the canonical model passed to subagent. Unsuffixed roles leave thinking selection independent. Role names and hints are trimmed, single-line text. Names may be up to 64 characters and hints up to 500 characters. Models use canonical provider/model IDs and must be available under the effective enabledModels scope. The resolver matches the complete authored model ID first, so real colon-bearing IDs—including IDs ending in :high—remain exact model IDs; only an otherwise-unmatched recognized final suffix is treated as a thinking preference. A thinking level pinned in enabledModels neither supplies nor constrains a role preference, and normal spawn-time model-capability clamping still applies.

Global and project roles merge by name in settings order. Expanded role objects merge by field; a project string replaces the whole global entry. A project can remove one inherited role with null, or clear all inherited roles by setting modelRoles to null.

{
  "minimalSubagents": {
    "modelRoles": {
      "budget": null
    }
  }
}

Invalid or unavailable entries are omitted. The extension emits one consolidated startup warning and keeps every valid role.

Maximum delegation depth

minimalSubagents.maxSubagentDepth is a positive safe integer. It counts subagent levels beneath the interactive root: 1 permits root children, 2 also permits grandchildren, and so on. The default is 2.

{
  "minimalSubagents": {
    "maxSubagentDepth": 1
  }
}

A trusted project value replaces the global value. Project null restores the built-in default of 2. An invalid project value emits a warning and leaves a valid global value in effect.

Reloading with a lower depth does not delete existing agents or change their launch contracts. Before /reload invalidates the old extension runtime, the extension waits for active child and root work to settle, then disposes idle child runtimes. A deliberately non-settling agent can therefore delay reload indefinitely. The new limit controls restored tool availability and future spawn attempts; the root retains recursive hierarchy management.

Capabilities and persistence

Child sessions are persistent Pi sessions. Their launch contracts bound model, tool, project-context, session-context, delegation, and depth capabilities at creation; reloading does not silently broaden them. The default maximum depth is two levels beneath the interactive Root Agent.

The extension registers six coordinator tools for the Root Agent and fanout children: subagent, agent_message, subagent_wait, subagent_status, subagent_cancel, and subagent_delete. Ordinary non-fanout children receive only the three adjacent-coordination tools: agent_message, subagent_wait, and subagent_status.

Targeted subagent_status includes recent_activity, a bounded tail of message text, reasoning, tool calls, and tool results. It includes the current streaming assistant message but omits image data. Timeout Wait Events include the same detailed status snapshot.

The subagent tools argument distinguishes capability presets from exact lists: "read" grants read, grep, find, and ls; "modify" adds bash, edit, and write; an array such as ["read"] grants exactly the named ordinary tool and does not expand a preset. Coordinator tools are injected separately according to delegation and must not appear in tools; misuse returns an actionable error. Use the string preset when a child needs the complete discovery bundle. Child sessions load the Root Agent's configured settings and extensions, excluding the recursive pi-minimal-subagents entrypoint. Project Context controls only project-scoped AGENTS instructions and skills; omitting it retains user instructions and skills plus project settings, extensions, providers, and tools. A configured pi-codex-conversion adapter replaces a complete granted tool group only, including the "read" preset's read, grep, find, and ls tools. Exact tool arrays are replaced only when they contain the complete source group. Because Codex performs discovery through exec_command, an adapted "read" preset is not an enforced read-only boundary. Status reports effective adapter tools while the Launch Contract continues to record the originally granted capability names.

agent_message reports whether a message was delivered through an active parent wait, queued for the recipient, or failed. subagent_wait can return an intermediate Wait Event containing a Coordination Message before the child turn settles. That event claims only its message, so later unconsumed messages and the terminal result retain automatic fallback. If the turn has already settled, one wait returns its terminal result with queued messages in messages. Pass optional turn_id to address an older retained turn exactly. Without it, waits select the oldest observable claimed or pending turn before the active/latest turn. A caller may have only one outstanding wait for the same source turn; a concurrent duplicate is rejected instead of competing for one Wait Event. When timeout_ms expires, the wait returns an observational event: "timeout" with the requested turn identity and the same detailed Child Agent status used by targeted subagent_status. It removes only the waiter, leaving the child running and all pending delivery unclaimed. Abort signals remain errors.

The persisted Delivery Ledger records Coordination Messages, terminal results, globally increasing sequence, and wait ownership before delivery. Existing items retain their sequence; gaps from skipped malformed records are valid. Claims can name only active, latest, or retained turns. Wait-returned messages retain individual delivery evidence; terminal wait ownership remains durable across reloads, forks, and newer turns. Automatic fallback retains its ordered queue reservation while batching queued messages from one source turn into one Pi steer. Root-bound messages remain batchable while the root turn is active; a pending terminal result absorbs them. Child sessions drain all available steers before the next model call. Destination-session Delivery Evidence still settles each batched ledger item independently, preventing duplicate delivery and unbounded checkpoint growth. The pure Delivery Ledger state machine retains at most 20 pending wait-only terminal results per source agent; Coordination Messages are not removed by that terminal-retention limit. Delivered messages include stable delivery, source-agent, and source-turn identities in persisted details.

Deleting a child first verifies its session header and persistent identity, then uses the optional trash command when available and falls back to unlinking its session file. Deletion prunes pending delivery state and retained recent-message projections sourced from the complete deleted subtree. Restore and clone perform the same ownership check against the recorded child-session leaf. Restoration loads metadata and validates saved sessions without starting child runtimes or their extension services (including MCP Servers). Status, saved transcripts, settled-result waits, cancellation of idle children, and session management do not start runtimes. A message or an undelivered child-bound result opens only its recipient's runtime on demand; saved Delivery Evidence prevents already-delivered work from reopening it. Runtime initialization errors are reported when that child is first needed.

Registry replay and Delivery Evidence are scoped to the Root Agent's active session-tree branch. Registry writes use V2 records with complete field, identity, sequence, hierarchy, adjacency, destination, ordinary-tool ceiling, and coordinator-tool exclusion validation. Every available V2 agent has a selected leaf; only unavailable recovery placeholders may omit it. Valid V1 records and checkpoints migrate during replay; invalid owned records are skipped with semantic diagnostic codes rather than disabling the extension. Persisted message activity carries an explicit recorded_at from the coordinator clock.

/tree abandons old process-local work and restores the selected branch. Fork preparation is read-only; only confirmed fork shutdown interrupts work and clones the selected branch, so another extension can cancel a fork without freezing coordinator tools. Each clone records a new generation-specific identity/provenance pair, and the destination appends ownership for that clone's current session ID rather than reusing inherited ownership. If a process-local fork handoff is lost, recovery reads only the destination's selected branch and proceeds only when its canonical parentSession proves the source file; it never substitutes the source session's newer head.

Status and TUI

In TUI mode, /subagents or /subagents status opens a large, centered, framed overlay. Up/Down selects a Child Agent; Enter opens its Child Session Transcript. Escape returns to the tree, then Escape closes the overlay. The viewer is read-only: Root Agent input and ongoing agent work remain intact.

Two consecutive Left Arrow presses within 500 ms open the same viewer when the main editor is focused and completely empty. Drafts (including whitespace), dialogs, and other overlays retain normal navigation. Explicit key-repeat reports are ignored; legacy terminals cannot distinguish holding Left from two presses.

The viewer and compact widget prioritize sibling subtrees containing running Child Agents. Idle ancestors move with active descendants, parents stay above their children, and equally active siblings retain their original order. Viewer selection follows the Child Agent's identity through live reordering.

The transcript includes inherited context, earlier turns, pre-compaction messages, and live output on the selected saved branch. Abandoned branches and internal bookkeeping are excluded. Saved history can be inspected without restoring a runtime; missing or unverified sessions report an explanation rather than substituting another branch. Model-facing Recent Activity remains bounded.

Transcripts open at the latest output and refresh once per second. Up/Down scrolls by line, Page Up/Page Down by page. Scrolling up pauses following; End returns to live output. Reading position is retained through resize and tool expansion. Reasoning is visible, tool output starts collapsed, and Pi's configured tool-expansion key (normally Ctrl+O) reveals it. Images appear as explicit text placeholders rather than inline images.

The tree header reports the effective access source, authored settings, direct running/idle counts, and actual Coordinator Tool activation. Partial external activation is reported as N/6 active; status does not repair it.

RPC mode receives a concise status notification. JSON and print modes produce no observer-only output.

Visible Child Agent rows show the canonical provider/model:thinking Runtime Profile. Status uses the live Runtime Profile while a runtime exists and falls back to the immutable Launch Contract otherwise. Live changes are observational: they do not rewrite persistence or change nested spawn defaults.