piagent_
← ~/map

$ cat ~/map/pi-relay.md

pi-relay

Slash-command handoffs: the agent writes a sealed handoff, a successor session verifies it on the model you pick.

extensions✓ Sep 17

Facts

repository
github.com/jpowersdev/pi-relay ↗
GitHub Stars
★ 0
Forks
0
license
MIT
npm / mo
—
last push
Sep 17, 2026

install

Install a tagged release with pi install git:github.com/jpowersdev/pi-relay@v0.1.0 and restart pi; move to a newer tag by installing it explicitly, or try the current checkout without installing it permanently with pi -e git:github.com/jpowersdev/pi-relay

## TL;DR

A pi extension that adds a /relay command for durable session handoffs: the current agent writes a structured, sealed handoff of the work state, a fresh parent-linked session starts on a model selected from an interactive picker, and the destination agent verifies repository state in a read-only first turn before continuing.

## Key points

## FAQ

Q What happens to my current session if the handoff fails?

Nothing is replaced. The source session remains intact, relay stops when handoff creation or validation fails instead of switching sessions, and a validated handoff is kept if a later session switch is cancelled.

Q Where do handoffs live, and what is inside them?

Under ~/.pi/agent/handoffs/, outside project repositories. A handoff can contain repository status, file paths, implementation summaries, decisions, and a path to the source session; the directory is mode 0700, sealed files are 0600, files cap at 128 KiB, and they stay on disk until you remove them.

Q Does relay send my code anywhere?

The extension itself adds no network requests. The normal pi model turns used to write and verify a handoff send context through your configured model provider, and a handoff may contain repository status and file paths — which is why the README says to treat it as private development data.

Q Is relay a sandbox or a secret scanner?

No. The README is explicit: relay instructs an agent to inspect a workspace and write a local summary; it is not a sandbox or a secret scanner, and should not be used to process repositories or prompts you do not trust.

## References

## Related entries

## Guides

Last updated: Sep 17, 2026