ringlochid/banksia

The former Banksia project, now renamed Oh My Subagents, is a serious attempt to turn multi-agent delegation into a durable local runtime rather than another prompt wrapper. The implementation separates workflows, published revisions, tasks, members, assignments, waves, waits, checkpoints, replanning, and final results into controller-owned state. SQLAlchemy supports SQLite and optional PostgreSQL, while FastAPI, MCP, the CLI, and the React Console expose different views of the same operations. Codex and Claude integrations are explicit provider adapters instead of being woven through the domain model. The migration from Banksia is also handled carefully, with idempotent copying, conflict detection, service replacement, verification steps, and rollback guidance.
Security and engineering discipline are strong for a version 0.3.1 project. The controller only accepts loopback listeners and validates Host and Origin boundaries. Provider credentials receive private file permissions, internal MCP credentials are stored as digests, and capabilities default to denied rather than inheriting from parent agents. The repository has extensive unit, integration, end-to-end, concurrency, recovery, schema, CLI, HTTP, and Console tests. CI covers Linux, macOS, and Windows, with static analysis, type checking, OpenAPI drift detection, documentation checks, package verification, and frontend builds. The public and internal documentation is unusually thorough.
The largest concern is licensing clarity. The Python package declares MIT in pyproject.toml, but its bundled Console contains n8n-derived material under the more restrictive Sustainable Use License. The Console notice also states that a temporary n8n brand mark remains and must be replaced before public distribution. That should be resolved immediately, and the published package metadata should make the mixed licensing unmistakable. A formal security policy and threat model would also help a tool that stores provider credentials and launches command-capable agents. Finally, the PostgreSQL lane and real browser-backed Console tests are not part of the main Linux pull-request gate. Running those on scheduled builds or critical changes would give the project’s strongest claims about persistence, recovery, and visual operation better continuous proof.