chore(deps): update pi-subagents to 0.65.1

[patchmill-release-please-bot]

pi-subagents dependency upgrade

Updates pi-subagents from 0.61.0 to 0.65.1.

Release notes

v0.62.0

Pi subagents 0.62.0 makes delegated work safer and more predictable. Child agents can now provide completion evidence in a cleaner shape, and agent configs can keep specific tools out of reach. Scheduled work can stay tied to the session that created it, which helps avoid surprising cross-session runs. This release also tightens async recovery and Windows child launches, especially around forked runs and missing Pi CLI resolution.

Highlights

• Child agents can report completion evidence more cleanly and stay away from tools they should not use.
• Session-only schedules keep personal scheduled work tied to the session that created it.
• Async forked runs now start and resume in the working directory you requested.
• Windows child launches are more reliable, with clearer errors when Pi cannot find a valid CLI.
• External CLI and read-only recovery paths are sturdier when workers disappear or prompts include unusual line separators.

Full changelog

Highlights

• Child agents can report completion evidence more cleanly and stay away from tools they should not use.
• Session-only schedules keep personal scheduled work tied to the session that created it.
• Async forked runs now start and resume in the working directory you requested.
• Windows child launches are more reliable, with clearer errors when Pi cannot find a valid CLI.
• External CLI and read-only recovery paths are sturdier when workers disappear or prompts include unusual line separators.

Added

• Let native children with outputSchema include required acceptance evidence in the same structured_output call with acceptance.report: "on"; acceptance.report: "off" keeps fenced acceptance reports. Thanks @mapleluvr for #1770.
• Add per-agent excludeTools deny-lists that compose with Pi's ambient or explicit child tool selection. Thanks @expoli for #1776.
• Add session-only durable schedules that only run in the session that created them. Thanks @yangfeng20 for #1777.

Fixed

• Keep async forked runs in the requested child cwd when they start or resume. Thanks @stekman08 for #1785.
• Accept JSON-encoded acceptance objects from model tool calls, while still failing clearly for malformed strings. Thanks @mapleluvr for #1781.
• Keep steer and follow-up receipt statuses separate from their redacted message previews (#1773).
• Create async lifecycle sidecars before external CLI workers begin worktree changes, so disappeared runners are reported as failed runs. Thanks @fkhawajagh for #1764.
• Preserve explicit read-only intent when escaped line separators surround no-edit wording. Thanks @fkhawajagh for #1765.
• Launch child Pi processes through the resolved CLI JavaScript on Windows, and run JavaScript PI_SUBAGENT_PI_BINARY overrides with Node. Thanks @caohuipeng for #1768.
• Resolve the installed Pi CLI on Windows wrapper hosts from the forwarded package root, and report a clear error when no verified CLI can be found. Thanks @lux032 for #1780.

v0.63.0

pi-subagents 0.63.0 makes larger delegated workflows easier to follow and easier to keep isolated. Workflow progress is now clearer in status, Fleet, and live widgets, so you can see what is happening without expanding every child. Worktrunk users get managed worktrees automatically while native Git remains available as a fallback. This release also tightens several async and read-only edge cases so background work cleans up and reports results more reliably.

Highlights

• Workflow progress is easier to scan in status, Fleet, and live widgets.
• Additional agent folders can now be configured without copying definitions into one directory.
• Worktrunk users get managed worktrees automatically, with native Git available as the fallback.
• Fleet can jump straight into the selected child run's Herdr inspector.
• Async runs clean up and report edge cases more reliably.

Full changelog

Highlights

• Workflow progress is easier to scan in status, Fleet, and live widgets.
• Additional agent folders can now be configured without copying definitions into one directory.
• Worktrunk users get managed worktrees automatically, with native Git available as the fallback.
• Fleet can jump straight into the selected child run's Herdr inspector.
• Async runs clean up and report edge cases more reliably.

Added

• Show workflow progress as stacked checklist summaries in status, Fleet, and live widget views (#1806).
• Add configurable extra agent scan directories with one-segment wildcard expansion. Thanks to @mystery4f for #1801.
• Make Worktrunk a first-class managed worktree provider, selected automatically when available with native Git as the fallback (#1800).
• Let Fleet open the selected async child in its child-specific Herdr inspector. Thanks to @stekman08 for #1790.

Changed

• Show workflow checklist phases first in collapsed views, while keeping child details available when expanded (#1810).

Fixed

• Keep isolated test runs from writing agent definitions into an inherited PI_CODING_AGENT_DIR. Thanks to @mapleluvr for #1809.
• Prevent nested tool-availability diagnostics from failing an otherwise valid parent result. Thanks to @robertvangor for #1802.
• Free async capacity correctly after workflows finish, even when saved step status is stale. Thanks to @boggylp for #1804.
• Make subagents.agentOverrides.<name> replace matching custom-agent frontmatter fields, consistently with builtin agents. Thanks to @expoli for #1796.
• Strip the trailing Pi turn-timing footer from child output. Thanks to @fkhawajagh for #1792.
• Keep inferred acceptance reports out of reviewer and read-only child prompts. Thanks to @expoli for #1797.
• Preserve coordinated read-only intent when direct async children resume, and show captured structured output in completion and status evidence. Thanks to @fkhawajagh for #1788.
• Keep macOS subagent tasks out of argv by delivering them through temporary files. Thanks to @josephkallas for #1793.

v0.64.0

This release makes watchdogs more useful before and during delegated work. They can now stop risky child launches up front, review diffs with a safer read-only tool, and reuse standing project guidance from WATCHDOG.md. Watchdog findings are also easier to notice because they show up in parent results, completion notices, acceptance evidence, and Fleet. Workflow status and async result reporting are less noisy and more accurate, especially around preflight checks, thinking metadata, and idle attention.

Highlights

• Watchdog can now warn or block child launches before they start, based on role and model rules.
• Watchdog reviews are easier to guide with safe diff access, reusable WATCHDOG.md instructions, and configurable child review cadence.
• Watchdog findings are easier to see in parent results, completion notices, acceptance evidence, and Fleet.
• Workflow status and async results are less noisy and more accurate.

Need to know

Affected users	Change
Users with watchdog config	Unsupported watchdog settings that never took effect are now rejected instead of silently accepted.
Users with autoFollow watchdog config	autoFollow is removed. Pi 0.84+ already continues after displayed boundary warnings, and repeated identical warnings stop after subagents.watchdog.stalemateRepeats.

Full changelog

Highlights

• Watchdog can now warn or block child launches before they start, based on role and model rules.
• Watchdog reviews are easier to guide with safe diff access, reusable WATCHDOG.md instructions, and configurable child review cadence.
• Watchdog findings are easier to see in parent results, completion notices, acceptance evidence, and Fleet.
• Workflow status and async results are less noisy and more accurate.

Added

• Add watchdog launch rules under subagents.watchdog.rules, with per-role model allow and deny globs that warn or block before a child starts.
• Give watchdog reviewers a read-only watchdog_diff tool for session-start diffs, untracked paths, path narrowing, and stat summaries.
• Run child watchdog reviews on a configurable cadence with children.cadence and children.overrides.<agent>.cadence.
• Show child watchdog warnings in parent results, acceptance evidence, completion notices, and Fleet wd:<n> chips.
• Load watchdog reviewer instructions from project and agent WATCHDOG.md files.

Changed

• Reject unsupported watchdog settings that never took effect: delivery, showDuringRun, syncBacklog, lateWarningPolicy, compactAtPercent, reviewRetryDelayMs, maxReviewFailures, asyncCompletion, and guidance.systemPromptPath.
• Remove watchdog auto-follow. Pi 0.84+ already continues after displayed boundary warnings, and repeated identical warnings now stop after subagents.watchdog.stalemateRepeats. The autoFollow settings block is now unknown.

Fixed

• Keep advisory preflight checks out of runtime workflow rows and queued checklist counts (#1821). Thanks @stekman08.
• Preserve effective thinking in completed async step results. Thanks to @Nickonomic for #1823.
• Forward workflow child control overrides through new and retained launches, and suppress idle needs-attention notices before the first assistant turn (#1817). Thanks @rrocxela.

v0.65.0

Subagents now run on native Pi sessions, so everyday delegation has fewer moving parts and less process-launch fragility. Workflow progress is easier to scan, with compact lane summaries and clearer supervisor messages in the parent session. Model selection is also safer: missing, excluded, or dynamically registered provider models now produce the right outcome instead of silently falling back or failing before provider setup completes.

Highlights:

• Native Pi-session subagents replace spawned pi child processes.
• Workflow status is easier to read with compact lane summaries and better supervisor cards.
• Model selection now fails clearly when configured candidates are unavailable.
• Managed worktrees support validated baseRef values and safer per-project nesting.
• Background children can use provider-extension models reliably, including router-style dynamic providers.

Need to know:

Affected users	Change
Agents that need MCP tools or provider-extension models	Use background children. Foreground children run in-process and no longer load ambient extensions.
Package import users	pi-subagents/pi-args is now pi-subagents/child-tool-plan.
Custom Pi binary users	PI_SUBAGENT_PI_BINARY now applies only to Herdr project panes and the profile model probe.

Full changelog:

[0.65.0] - 2026-09-04

Highlights

• Subagents now run through native Pi sessions instead of spawning separate pi processes, making delegation simpler and less fragile.
• Workflow status is easier to scan with compact lane summaries and clearer supervisor messages.
• Model selection fails clearly when configured models are unavailable, instead of silently using a provider default.
• Managed worktrees are safer and more flexible, with validated baseRef support and per-project nesting.
• Background children can use provider-extension models reliably, including dynamically registered models such as router providers.

Added

• Include sanitized model, provider, reason, and expiry details when no usable subagent model candidates remain. Thanks @AlexKucera for #1841.
• Allow managed worktrees to start from a validated baseRef instead of always using HEAD. Thanks @jaudiger for #1842.

Changed

• Run subagents as native Pi AgentSessions instead of spawned pi CLI processes (#1844). Foreground children run in the parent process, and background children run in the detached runner.
• Foreground children no longer load ambient extensions. Use background children for agents that need MCP tools or provider-extension models. Background children require Pi from the installed @earendil-works/pi-coding-agent package, not a standalone pi binary.
• Rename package subpath pi-subagents/pi-args to pi-subagents/child-tool-plan; PI_SUBAGENT_PI_BINARY now applies only to Herdr project panes and the profile model probe.
• Replace collapsed async workflow role summaries with a compact lane view while keeping full details available when expanded (#1827).
• Add contact_supervisor to the bundled reviewer and scout tool allowlists without adding mutation tools (#1846).

Fixed

• Drop only malformed persisted model-exclusion entries and rewrite the cleaned cache.
• Stop live workflow children when a run-level stop targets an in-memory async workflow controller.
• Fail closed when a fallback-only model configuration resolves no launch candidates. Thanks @AdenosineTP for #1853.
• Resolve native child models after child extensions register provider models. Thanks @mystery4f for #1855.
• Ignore stale authentication-related model exclusions after Pi's auth.json is refreshed, while preserving quota, rate-limit, overload, and model-unavailable exclusions. Thanks @wesleyfei1 for #1835.
• Show native supervisor requests and outbound replies as bounded TUI cards in parent sessions (#1845).
• Suppress stale async supervisor-request notices after the native request has already been answered (#1838). Thanks @VladimirGVP.
• Flush async workflow result assembly after session replacement when every child is already terminal, without permitting stale-context launches (#1833). Thanks @redcomet168.
• Accept calendar/platform claude --version output during Claude Code adapter preflight while retaining required launch-flag validation. Thanks @drouhard.
• Show passive local command availability for external CLI agents in capability listings without replacing launch preflight (#1829). Thanks @drouhard.
• Nest native managed worktrees under per-project directories while preserving unsafe-location checks (#1831). Thanks @moofone.

v0.65.1

pi-subagents 0.65.1 makes background runs more reliable, including on Pi 0.85.0 and with custom providers. Sessions stay alive until work and result delivery finish, while proxy connections and gateway model aliases behave more predictably. Parallel runs keep separate session logs, and worktree cleanup preserves complete patches before removing anything. This release also makes status displays and supervisor requests less repetitive.

Highlights

• Background sessions stay alive through completion and result delivery.
• Pi 0.85.0 background runs start without missing-package errors.
• Custom-provider models, configured gateway aliases, and proxy connections work more reliably.
• Parallel runs keep separate session logs, even in a shared directory.
• Worktree cleanup saves complete, usable patches before removing worktrees.

Full changelog

Highlights

• Background sessions stay alive until their work and result delivery finish.
• Background runs work on Pi 0.85.0 without missing-package errors.
• Custom-provider models and proxy connections work more reliably in background runs.
• Parallel children keep separate session logs, even with a shared log directory.
• Worktree cleanup preserves changes until a complete, usable patch has been saved.

Changed

• Clarify that switching execution modes after a failed run requires your approval (#1879).

Fixed

• Accept configured model aliases returned by gateways without changing the requested model. Thanks to @drudko-ias for #1897.
• Hide the empty, unlimited async capacity summary in Fleet. Thanks to @youssefsiam38 for #1892.
• Fix missing-server import errors in Pi 0.85.0 background runs, including runs that load extensions.
• Remove repeated metadata and reply instructions from supervisor request cards. Thanks to @youssefsiam38 for #1893.
• Stop foreground runs before contacting a provider when required tools are missing. Respect workflow async defaults and show each failure once. Thanks to @youssefsiam38 for #1891.
• Keep pi-web parent sessions alive while subagent work or completion delivery remains active. Thanks to @vcing for #1857.
• Avoid unnecessary startup delays and preserve active locks when process IDs are reused. Thanks to @ducaoya for #1878.
• Make extension-provided models available before starting child sessions, including on Pi versions without native provider queues. Thanks to @kevinkirkup for #1885.
• Handle long or unusual workflow IDs without creating invalid file paths. Thanks to @jstillwa for #1875.
• Avoid startup import errors when optional Pi packages are not installed beside the extension. Thanks to @VladimirGVP for #1860.
• Use custom provider streams for task classification only when they match the selected model's API. Thanks to @pwguler for #1874.
• Give concurrent children separate session files under an explicit sessionDir. Thanks to @dat9uy for #1859 and #1858.
• Honor proxy environment variables in detached background runs. Thanks to @jasonrale for #1867 and #1866.
• Allow previously unavailable models to run once they reappear in the model registry. Thanks to @x1prog for #1862.
• Resolve Pi package imports correctly in detached runs, including subpath imports. Thanks to @plopezlpz for #1871 and @pwguler for #1880.
• Initialize the theme before child extensions access ctx.ui.theme. Thanks to @danielmarbach for #1865.
• Save complete worktree patches, including binary changes, regardless of Git display settings. Validate them before removing worktrees. Thanks to @jeanduplessis for #1868.
• Accept acceptance: false alongside gate, treating it as omitted.

Changed files

• package.json
• package-lock.json
• npm-shrinkwrap.json
• nix/package.nix

Validation

• node --test src/pi/pi-subagents-dependency-contract.test.ts
• bun scripts/verify-pi-subagents-bun-workflow.mjs
• npm test
• node scripts/smoke-packed-artifact.mjs
• npm run lint
• scripts/update-npm-deps-hash.sh
• nix build .#patchmill --print-build-logs
• (cd result/share/patchmill && node --test --test-name-pattern='pi loads the resolved pi-subagents extension package without model execution' src/pi/pi-subagents-dependency-contract.test.ts)
• nix flake check --accept-flake-config --print-build-logs

This pull request is review-gated and does not auto-merge or publish.