@gotgenes/pi-subagents 13.0.0 → 13.2.0

package/CHANGELOG.md

@@ -5,6 +5,23 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [13.2.0](https://github.com/gotgenes/pi-packages/compare/pi-subagents-v13.1.0...pi-subagents-v13.2.0) (2026-05-30)
+
+
+### Features
+
+* add delegate methods to SubagentSession for session encapsulation ([#277](https://github.com/gotgenes/pi-packages/issues/277)) ([038e906](https://github.com/gotgenes/pi-packages/commit/038e906312b00d18ff617caf68bce980db70a243))
+* add session-encapsulation methods to Agent ([#277](https://github.com/gotgenes/pi-packages/issues/277)) ([03b4382](https://github.com/gotgenes/pi-packages/commit/03b43820aa7bd4ab4f9a4cd15ae09a1217c317d4))
+
+## [13.1.0](https://github.com/gotgenes/pi-packages/compare/pi-subagents-v13.0.0...pi-subagents-v13.1.0) (2026-05-30)
+
+
+### Features
+
+* add createSubagentSession factory ([62c319d](https://github.com/gotgenes/pi-packages/commit/62c319d6703a6f58a829f372b609daea36170987))
+* add SubagentSession with turn-loop and disposal behavior ([69f8f4b](https://github.com/gotgenes/pi-packages/commit/69f8f4bf78431be990a9eb6fbe592e59cc313912))
+* dissolve the runner; Agent drives SubagentSession directly ([fbe71b0](https://github.com/gotgenes/pi-packages/commit/fbe71b02759551e60b4e22e96bb28299e444feb2))
+
 ## [13.0.0](https://github.com/gotgenes/pi-packages/compare/pi-subagents-v12.1.0...pi-subagents-v13.0.0) (2026-05-30)
 
 

package/dist/public.d.ts

@@ -45,7 +45,7 @@ interface AgentInvocation {
  * The child's working directory is supplied by a registered WorkspaceProvider
  * (the workspace seam); with no provider the child runs in the parent cwd.
  *
- * Phase-specific collaborators (execution, notification) are attached
+ * Phase-specific collaborators (subagentSession, notification) are attached
  * after construction as lifecycle information becomes available.
  */
 

package/docs/architecture/architecture.md

@@ -53,7 +53,8 @@ flowchart TB
         direction TB
         AgentManager["AgentManager<br/>(spawn, abort, collection)"]
         ConcurrencyQueue["ConcurrencyQueue<br/>(scheduling, drain)"]
-        AgentRunner["agent-runner<br/>(session, turns, results)"]
+        CreateSubagentSession["createSubagentSession<br/>(assembly factory)"]
+        SubagentSession["SubagentSession<br/>(turn loop, steer, dispose)"]
         Agent["Agent<br/>(status, behavior: abort/steer/run lifecycle)"]
         ParentSnapshot["ParentSnapshot<br/>(frozen parent state)"]
         Workspace["workspace<br/>(provider seam: child cwd + teardown)"]
@@ -85,13 +86,15 @@ flowchart TB
     end
 
     AgentTool --> AgentManager
-    AgentManager --> AgentRunner
-    AgentRunner --> SessionConfig
+    AgentManager --> Agent
+    Agent --> CreateSubagentSession & SubagentSession
+    CreateSubagentSession --> SubagentSession
+    CreateSubagentSession --> SessionConfig
     SessionConfig --> AgentTypeRegistry
     SessionConfig --> Prompts & Env
     AgentTypeRegistry --> DefaultAgents & CustomAgents
-    RecordObserver -.->|subscribes| AgentRunner
-    UIObserver -.->|subscribes| AgentRunner
+    RecordObserver -.->|subscribes| SubagentSession
+    UIObserver -.->|subscribes| SubagentSession
     Widget -.->|polls| AgentManager
 ```
 
@@ -108,7 +111,7 @@ classDiagram
         +error?: string
         +toolUses: number
         +lifetimeUsage: LifetimeUsage
-        +execution?: ExecutionState
+        +subagentSession?: SubagentSession
         +notification?: NotificationState
         +markRunning()
         +markCompleted()
@@ -120,14 +123,18 @@ classDiagram
         +run()
         +resume(prompt, signal)
         +abort(): boolean
-        +queueSteer(message)
-        +flushPendingSteers(session)
+        +steer(message): Promise<boolean>
+        +isSessionReady(): boolean
+        +getConversation(): string | undefined
+        +getContextPercent(): number | null
+        +subscribeToUpdates(fn): unsub | undefined
+        +messages: readonly unknown[]
         +completeRun(result)
         +failRun(err)
+        +disposeSession()
         +wireSignal(signal, onAbort)
         +attachObserver(unsub)
         +releaseListeners()
-        +setOnRunFinished(fn)
     }
 
     class AgentManager {
@@ -210,24 +217,31 @@ sequenceDiagram
     participant Tool as subagent tool
     participant Spawn as spawn-config
     participant Mgr as AgentManager
-    participant Runner as agent-runner
+    participant Ag as Agent
+    participant Factory as createSubagentSession
     participant Asm as assembleSessionConfig
+    participant Sub as SubagentSession
     participant Child as Child session
 
     LLM->>Tool: subagent(type, prompt, ...)
     Tool->>Spawn: resolveSpawnConfig(params)
     Spawn-->>Tool: ResolvedSpawnConfig
     Tool->>Mgr: spawn(snapshot, type, prompt, config)
-    Mgr->>Runner: runAgent(record, snapshot, options, io)
-    Runner->>Asm: assembleSessionConfig(type, ctx, opts, env, registry, io)
-    Asm-->>Runner: SessionConfig
-    Runner->>Child: create session + run turn loop
-    Child-->>Runner: result text
-    Runner-->>Mgr: update Agent
-    Note over Mgr: agent-observer subscribes to session events for stats
-    Note over Mgr: ui-observer subscribes for streaming state
+    Mgr->>Ag: run()
+    Ag->>Factory: createSubagentSession(params, deps)
+    Factory->>Asm: assembleSessionConfig(type, ctx, opts, env, registry, io)
+    Asm-->>Factory: SessionConfig
+    Factory->>Child: create session + bind extensions
+    Factory-->>Ag: SubagentSession (born complete)
+    Note over Ag: agent-observer + ui-observer subscribe to session events
+    Ag->>Sub: runTurnLoop(prompt, opts)
+    Sub->>Child: prompt + drive turn loop
+    Child-->>Sub: result text
+    Sub-->>Ag: TurnLoopResult
+    Ag-->>Mgr: update Agent
     Mgr-->>Tool: Agent
     Tool-->>LLM: formatted result
+    Note over Mgr: disposeSession() fires `disposed` at cleanup (resume-detectable)
 ```
 
 ## Module organization
@@ -257,17 +271,19 @@ src/
 │   ├── prompts.ts                  system prompt building
 │   ├── content-items.ts            shared message content parsing (tool-call names, assistant content)
 │   ├── context.ts                  parent conversation extraction
+│   ├── conversation.ts             render a session's messages as formatted text
 │   ├── env.ts                      git/platform detection
 │   ├── model-resolver.ts           fuzzy model name resolution
 │   └── session-dir.ts              session directory derivation
 │
 ├── lifecycle/                      agent execution and state tracking
 │   ├── agent-manager.ts            collection manager + observer wiring
-│   ├── agent-runner.ts             session creation, turn loop, tool filtering
+│   ├── create-subagent-session.ts  assembly factory: session creation, binding, tool filtering
+│   ├── subagent-session.ts         born-complete child session: turn loop, steer, dispose
+│   ├── turn-limits.ts              normalizeMaxTurns (turn-count policy)
 │   ├── agent.ts                    owns full execution lifecycle (run, abort, steer, workspace)
 │   ├── concurrency-queue.ts        background agent scheduling with configurable concurrency limit
 │   ├── parent-snapshot.ts          immutable spawn-time parent state
-│   ├── execution-state.ts          session/output phase state
 │   ├── child-lifecycle.ts          child-execution lifecycle event publisher
 │   ├── workspace.ts                workspace provider seam (generative extension surface)
 │   └── usage.ts                    token usage tracking
@@ -318,7 +334,7 @@ Record statistics (tool uses, token usage, compaction counts) are updated by `re
 UI streaming (active tools, response text, turn counts) is handled by `ui/ui-observer.ts`, which subscribes to the same session events independently.
 Neither observer wraps or forwards the other — both subscribe directly to the session.
 
-The widget reads agent state by polling a shared `Map<string, AgentActivityTracker>` on `SubagentRuntime` every 80 ms. The conversation viewer subscribes directly to `AgentSession` objects.
+The widget reads agent state by polling a shared `Map<string, AgentActivityTracker>` on `SubagentRuntime` every 80 ms. The conversation viewer subscribes to session events via `Agent.subscribeToUpdates()` and reads messages via `Agent.messages` — no direct `AgentSession` reference (#277).
 
 ## Cross-extension architecture
 
@@ -327,7 +343,7 @@ flowchart TD
     subgraph core["@gotgenes/pi-subagents"]
         direction TB
         exports["SubagentsService API<br/>publish / getSubagentsService<br/>SubagentRecord, SubagentStatus"]
-        engine["Tools: subagent, get_subagent_result,<br/>steer_subagent<br/>AgentManager, agent-runner"]
+        engine["Tools: subagent, get_subagent_result,<br/>steer_subagent<br/>AgentManager, createSubagentSession, SubagentSession"]
         ui_int["Internal UI: widget, viewer,<br/>/agents menu"]
     end
 
@@ -344,13 +360,14 @@ They declare this package as an optional peer dependency and use dynamic import
 - The three tools: `subagent` (née `Agent`), `get_subagent_result`, `steer_subagent`.
 - `AgentManager` — spawn, abort, resume, collection management, observer wiring.
 - `ConcurrencyQueue` — background agent scheduling with configurable concurrency limit.
-- `agent-runner` — session creation, turn loop, extension binding.
+- `createSubagentSession` — assembly factory: session creation and extension binding; returns a born-complete `SubagentSession`.
+- `SubagentSession` — the born-complete child session: drives the turn loop (`runTurnLoop`/`resumeTurnLoop`), steers, and disposes (firing `disposed` at true session disposal, so resume executions are registry-detected).
 - `child-lifecycle` — publishes the child-execution lifecycle (`spawning`, `session-created` before `bindExtensions()`, `completed`, `disposed`) on `pi.events`.
   Reactive consumers subscribe: `@gotgenes/pi-permission-system` registers each child session on `session-created` and unregisters it on `disposed`.
   This replaced the former outbound `permission-bridge` (#261, ADR 0002) — the core no longer looks up a named consumer.
 - `workspace` — the single generative seam (#262, ADR 0002): a registered `WorkspaceProvider` supplies a child's cwd plus bracketed `dispose()` at run-start.
   With no provider, children run in the parent cwd (default unchanged); the git worktree strategy lives behind this seam in `@gotgenes/pi-subagents-worktrees` (#263, the seam's first consumer).
-- `session-config` — pure configuration assembler (extracted from `agent-runner`).
+- `session-config` — pure configuration assembler (called by `createSubagentSession`).
 - `SubagentRuntime` — session-scoped state bag with methods.
 - `ParentSnapshot` — immutable snapshot of parent session state, captured once at spawn time.
 - `record-observer` — session-event observer that updates record statistics without callback threading.
@@ -532,20 +549,21 @@ This is achieved across phases: Phase 14 (strip policy), Phase 16 (invert depend
 These interfaces carry hidden dependencies that obscure true coupling.
 Bags with 10+ fields are the highest priority for decomposition.
 
-| Interface                   | Fields                                                      | Consumers                                         | Severity  |
-| --------------------------- | ----------------------------------------------------------- | ------------------------------------------------- | --------- |
-| `ResolvedSpawnConfig`       | 3 nested                                                    | foreground-runner, background-spawner, agent-tool | ✓ done    |
-| `AgentSpawnConfig`          | 13 → 13 (ParentSessionInfo nested)                          | agent-manager (internal)                          | ✓ done    |
-| `RunOptions`                | 9 (`RunContext` nested)                                     | agent-runner                                      | ✓ done    |
-| `SessionConfig`             | 6 (flat fields; extensions/noSkills/extras removed in #264) | agent-runner (output of assembler)                | ✓ done    |
-| `NotificationDetails`       | 10                                                          | notification                                      | Low (DTO) |
-| `ResourceLoaderOptions`     | 10                                                          | agent-runner (SDK bridge)                         | Low (SDK) |
-| `RunnerIO`                  | split → `EnvironmentIO` (3) + `SessionFactoryIO` (5+1)      | agent-runner                                      | ✓ done    |
-| `CreateSessionOptions`      | 9                                                           | agent-runner (SDK bridge)                         | Low (SDK) |
-| `AgentToolDeps`             | 8                                                           | agent-tool                                        | ✓ done    |
-| `AgentMenuDeps`             | 8                                                           | agent-menu                                        | ✓ done    |
-| `ConversationViewerOptions` | 8                                                           | conversation-viewer                               | Low       |
-| `AgentInit`                 | 8                                                           | agent                                             | Low       |
+| Interface                     | Fields                                                       | Consumers                                         | Severity  |
+| ----------------------------- | ------------------------------------------------------------ | ------------------------------------------------- | --------- |
+| `ResolvedSpawnConfig`         | 3 nested                                                     | foreground-runner, background-spawner, agent-tool | ✓ done    |
+| `AgentSpawnConfig`            | 13 → 13 (ParentSessionInfo nested)                           | agent-manager (internal)                          | ✓ done    |
+| `CreateSubagentSessionParams` | 6 (snapshot, type, cwd, parentSession, model, thinkingLevel) | create-subagent-session                           | ✓ done    |
+| `TurnLoopOptions`             | 4 (maxTurns, defaultMaxTurns, graceTurns, signal)            | subagent-session                                  | ✓ done    |
+| `SessionConfig`               | 6 (flat fields; extensions/noSkills/extras removed in #264)  | session-config (output of assembler)              | ✓ done    |
+| `NotificationDetails`         | 10                                                           | notification                                      | Low (DTO) |
+| `ResourceLoaderOptions`       | 10                                                           | create-subagent-session (SDK bridge)              | Low (SDK) |
+| `SubagentSessionIO`           | split → `EnvironmentIO` (3) + `SessionFactoryIO` (5+1)       | create-subagent-session                           | ✓ done    |
+| `CreateSessionOptions`        | 9                                                            | create-subagent-session (SDK bridge)              | Low (SDK) |
+| `AgentToolDeps`               | 8                                                            | agent-tool                                        | ✓ done    |
+| `AgentMenuDeps`               | 8                                                            | agent-menu                                        | ✓ done    |
+| `ConversationViewerOptions`   | 8                                                            | conversation-viewer                               | Low       |
+| `AgentInit`                   | 8                                                            | agent                                             | Low       |
 
 ### Complexity hotspots
 
@@ -575,6 +593,22 @@ The prior clone group between `agent-runner.ts` and `message-formatters.ts` was
 The 20-line clone group between `agent-config-editor.ts` and `agent-creation-wizard.ts` was resolved in #217 — extracted into `ui/agent-file-writer.ts` (`writeAgentFile`).
 One 11-line internal clone group remains within `agent-config-editor.ts` (lines 135–145 / 173–183).
 
+### Session encapsulation debt (Law of Demeter) — resolved by [#277] ✔️
+
+All consumer reach-throughs to the raw SDK `AgentSession` via `Agent.session` have been eliminated.
+`Agent.session` is removed; `SubagentSession.session` is marked `@internal` (lifecycle use only).
+The intent-revealing replacements added by [#277]:
+
+| Reach-through                            | Sites                                                                              | Replacement                                      |
+| ---------------------------------------- | ---------------------------------------------------------------------------------- | ------------------------------------------------ |
+| Steer buffer-or-deliver (was duplicated) | `service-adapter.ts`, `steer-tool.ts`                                              | `Agent.steer(message)`                           |
+| Conversation viewing                     | `get-result-tool.ts`, `agent-menu.ts`, `conversation-viewer.ts`                    | `Agent.getConversation()` / `Agent.messages`     |
+| Session-readiness guard                  | `agent-tool.ts`, `agent-manager.ts`                                                | `Agent.isSessionReady()`                         |
+| Context-window stats                     | `steer-tool.ts`, `get-result-tool.ts`, `notification.ts`, `conversation-viewer.ts` | `Agent.getContextPercent()`                      |
+| Live updates (subscription)              | `conversation-viewer.ts`                                                           | `Agent.subscribeToUpdates(fn)`                   |
+| Observer callback session param          | `background-spawner.ts`, `foreground-runner.ts`                                    | `agent.subagentSession` (narrowed callback)      |
+| Session disposal                         | `agent-manager.ts`                                                                 | `SubagentSession.dispose()` — resolved by [#265] |
+
 ### Proposed bag decompositions
 
 #### ResolvedSpawnConfig (15 fields → 3 value objects)
@@ -785,11 +819,13 @@ The `skills` curation axis collapsed symmetrically with `extensions`: `AgentConf
 - Depended on: Step 1 (deny-at-use over events).
 - Outcome: the `isolated`/`extensions`/`noSkills`/`skills` axis is gone; the guard is unconditional.
 
-#### Step 5: Born-complete child execution; dissolve the runner — [#265]
+#### Step 5: Born-complete child execution; dissolve the runner — [#265] ✅ Delivered
 
-With the cwd resolved through the provider seam (not relayed by `Agent`), child-session creation produces a born-complete execution (`{ session, outputFile?, dispose() }`).
-`Agent` owns session interaction directly (prompt, steer, abort, resume, turn limits, response collection); `runAgent` / `resumeAgent` / `ConcreteAgentRunner` / `RunOptions` / `RunResult` dissolve.
-Retain `getAgentConversation()` and `normalizeMaxTurns()`.
+`createSubagentSession()` is an assembly factory that returns a born-complete `SubagentSession` (session created, extensions bound, recursion guard applied).
+`SubagentSession` owns turn driving (`runTurnLoop`/`resumeTurnLoop`), steering, and disposal.
+`Agent.run()` is coordination, not assembly; `runAgent` / `resumeAgent` / `ConcreteAgentRunner` / `AgentRunner` / `RunOptions` / `RunResult` / `ExecutionState` dissolved.
+`getAgentConversation()` relocated to `session/conversation.ts`; `normalizeMaxTurns()` to `lifecycle/turn-limits.ts`.
+`disposed` now fires at true session disposal (cleanup), so resume executions are registry-detected (closing the gap deferred from #261).
 
 - Depends on: Steps 2–4.
 - Outcome: the "runner" concept is gone; `Agent.run()` is coordination, not assembly — the structural goal of the abandoned collaborator plan, reached cleanly.
@@ -885,7 +921,7 @@ If they land, upstream gains the peer-dep fix and the two RepOne patches.
 This fork continues independently regardless.
 
 Upstream fixes and ideas are cherry-picked when they align with this fork's scope.
-The upstream test suite is run periodically as a regression canary for the agent-runner core.
+The upstream test suite is run periodically as a regression canary for the session assembly core.
 
 [earendil-works/pi#4207]: https://github.com/earendil-works/pi/issues/4207
 [gotgenes/pi-packages]: https://github.com/gotgenes/pi-packages
@@ -915,3 +951,4 @@ The upstream test suite is run periodically as a regression canary for the agent
 [#263]: https://github.com/gotgenes/pi-packages/issues/263
 [#264]: https://github.com/gotgenes/pi-packages/issues/264
 [#265]: https://github.com/gotgenes/pi-packages/issues/265
+[#277]: https://github.com/gotgenes/pi-packages/issues/277

package/docs/plans/0265-born-complete-subagent-session.md

@@ -0,0 +1,330 @@
+---
+issue: 265
+issue_title: "Born-complete child execution; dissolve the runner"
+---
+
+# Born-complete `SubagentSession`; dissolve the runner
+
+## Problem Statement
+
+Phase 16, Step 5 of ADR 0002.
+Today a subagent run is assembled by a monolithic `runAgent()` (the "runner") in `src/lifecycle/agent-runner.ts`: it creates the child session, binds extensions, drives the turn loop, collects the result, and emits the child-execution lifecycle events.
+`Agent` then sequences workspace teardown and status transitions around it through an injected `AgentRunner` interface.
+With the cwd now resolved through the `WorkspaceProvider` seam (Step 2) and worktrees evicted to a sibling package (Step 3), there is nothing left for a separate runner layer to assemble.
+
+Child-session creation should instead produce a *born-complete* value object — a `SubagentSession` that wraps one SDK `AgentSession` plus its turn-driving and teardown — and the runner concept should dissolve.
+`Agent.run()` becomes coordination, not assembly.
+
+This step also closes the determinism gap deferred from #261: today `session-created`/`disposed` bracket only the first turn loop ("executing now"), so a resume — a *second* turn loop on the same session — fires no events and the permission system falls back to its filesystem-path heuristic.
+Moving unregistration to true session disposal shifts the registry from "executing now" to "exists", and resume executions become registry-detected for free.
+
+## Goals
+
+- Introduce a born-complete `SubagentSession` (`{ session, outputFile?, dispose() }` plus turn-driving behavior) produced by a `createSubagentSession()` factory.
+- `Agent` owns session interaction directly: it tells `SubagentSession` to run/resume turn loops, steer, and dispose — no injected runner.
+- Dissolve the runner: remove `runAgent`, `resumeAgent`, `ConcreteAgentRunner`, `AgentRunner`, `RunOptions`, `RunResult`, `ResumeOptions`.
+- Retain `getAgentConversation()` and `normalizeMaxTurns()` by relocating them to focused homes.
+- Move child-session registration to creation and unregistration to true session disposal, so resume executions are registry-detected (the `disposed` event fires at cleanup, not at run-completion).
+- No two-phase `setup()` / late-bound `cwd`: the factory receives a resolved `cwd` value and builds a session that is fully usable the moment it is returned.
+
+This is an internal structural refactor.
+The public `SubagentsService` surface (`spawn`, `resume`, `steer`, `registerWorkspaceProvider`) is unchanged, so the change is **non-breaking** for consumers — no `feat!:`.
+The one externally observable change is positive: the permission registry now detects resume executions.
+
+## Non-Goals
+
+- Renaming the `Agent` class to `Subagent` — deferred to its own follow-up issue (mechanical, ~19 files, orthogonal to this structural change).
+  In this issue the class stays `Agent`; only the new object is named `SubagentSession` (consistent with the existing `SubagentType` / `SubagentSessionDir` naming family).
+- Retiring the remaining `agent.session` reach-throughs (steer tool/service buffer-or-deliver, conversation viewing, resume-readiness guards) — tracked in #277.
+  `SubagentSession` exposes a `.session` accessor so the existing observer wiring and consumers keep working unchanged; #277 retires those.
+- A resume-aware workspace lifecycle (re-establishing a worktree before a resume).
+  A worktree's natural lifetime is one turn loop, not the session; worktree + resume is already degenerate today and stays so.
+  See Open Questions.
+- UI extraction (Phase 17).
+
+## Background
+
+Relevant modules:
+
+- `src/lifecycle/agent-runner.ts` — the runner being dissolved.
+  `runAgent()` does assembly + turn loop + result collection + lifecycle events; `resumeAgent()` re-prompts an existing session; `ConcreteAgentRunner` wraps both behind the `AgentRunner` interface injected into `AgentManager`.
+  Also currently the home of the retained `getAgentConversation()` and `normalizeMaxTurns()`, plus the SDK-bridge IO interfaces (`EnvironmentIO`, `SessionFactoryIO`, `RunnerIO`, `ResourceLoaderOptions`, `CreateSessionOptions`) and the recursion guard `filterActiveTools()`.
+- `src/lifecycle/agent.ts` — `Agent` holds `runner`, `execution: ExecutionState`, workspace prepare/dispose, status transitions, steer buffering, and `run()`/`resume()`.
+- `src/lifecycle/execution-state.ts` — `ExecutionState { session, outputFile }`, attached to `Agent` on session creation.
+  Subsumed by `SubagentSession`.
+- `src/lifecycle/agent-manager.ts` — constructs `Agent`s with the injected `runner`; disposes sessions in `removeRecord`/`dispose`/`cleanup`.
+- `src/lifecycle/child-lifecycle.ts` — the `ChildLifecyclePublisher` (`spawning`, `sessionCreated`, `completed`, `disposed`).
+  Unchanged here; only *when* `disposed` fires moves.
+- `src/lifecycle/workspace.ts` — the abstract `WorkspaceProvider`/`Workspace` seam.
+  The core has zero git/worktree knowledge; all worktree mechanics live in `@gotgenes/pi-subagents-worktrees`, untouched by this issue.
+- `src/session/session-config.ts` — `assembleSessionConfig()`, the pure assembler `runAgent()` calls.
+  Unchanged; the factory calls it instead.
+
+Registry semantics (the determinism gap): The permission system (`pi-permission-system/src/subagent-lifecycle-events.ts`) registers on `subagents:child:session-created` and unregisters on `subagents:child:disposed`, keyed by `sessionDir`.
+That subscription code does **not** change.
+Today `disposed` fires in `runAgent`'s `finally` (end of the first turn loop), so the registry entry is gone before any resume.
+After this change `disposed` fires when the session is truly disposed (`AgentManager` cleanup / session switch / shutdown), so the entry spans the session's whole existence — every turn loop, including resumes.
+
+The two-lifetimes fact (why Option A): A workspace's natural lifetime is **one turn loop** (the run): the `WorkspaceProvider`'s `dispose()` returns a `resultAddendum` that is folded into the run's result, so it must be called at run-completion.
+A session's lifetime spans **many turn loops** (run + resumes) and ends at cleanup.
+Different clocks ⇒ different resources.
+The workspace therefore stays a separate `Agent`-sequenced resource (prepare at run-start, dispose at run-completion, exactly as today); only the session becomes the born-complete object.
+
+AGENTS.md constraints that apply:
+
+- Ship-source package with a public type bundle (ADR 0003): none of the dissolved types (`RunOptions`, `RunResult`, `AgentRunner`) are part of `service.ts`, so `public.d.ts` is unaffected.
+  Run `pnpm run verify:public-types` is **not** required (no public-surface change), but `pnpm run check` is.
+- fallow dead-code: new exports (`SubagentSession`, `createSubagentSession`) must have a production consumer by the end of the work; transient intermediate commits where they are consumed only by tests are acceptable because fallow runs at pre-completion, against the final state.
+- `#src/` path-alias imports only; ES2024 target.
+
+## Design Overview
+
+Two new lifecycle modules replace the runner.
+
+### `SubagentSession` — the born-complete object (owns runtime behavior)
+
+```typescript
+/** Outcome of one turn loop. */
+export interface TurnLoopResult {
+  responseText: string;
+  aborted: boolean; // hard-aborted (max turns + grace exceeded)
+  steered: boolean; // soft-limit steer fired, finished in time
+}
+
+export interface TurnLoopOptions {
+  maxTurns?: number;
+  graceTurns?: number;
+  signal?: AbortSignal;
+}
+
+/**
+ * One child AgentSession plus its turn-driving and teardown — born complete.
+ * Construction (createSubagentSession) yields a fully usable instance: the
+ * session exists, extensions are bound, the recursion guard is applied.
+ */
+export class SubagentSession {
+  constructor(
+    private readonly _session: AgentSession,
+    private readonly meta: {
+      outputFile: string | undefined;
+      sessionDir: string;
+      agentName: string;
+      lifecycle: ChildLifecyclePublisher;
+    },
+  ) {}
+
+  /** Wrapped session — exposed for observer wiring + consumers; retired by #277. */
+  get session(): AgentSession { return this._session; }
+  get outputFile(): string | undefined { return this.meta.outputFile; }
+
+  /** Drive the initial run's turn loop; emits `completed` on success. */
+  runTurnLoop(prompt: string, opts: TurnLoopOptions): Promise<TurnLoopResult>;
+
+  /** Re-prompt the same session (resume); does not emit `completed`. */
+  resumeTurnLoop(prompt: string, signal?: AbortSignal): Promise<string>;
+
+  /** Deliver a steer to the live session. */
+  steer(message: string): Promise<void>;
+
+  /** Tear down: session.dispose() + emit `disposed` (registry unregister). */
+  dispose(): void;
+}
+```
+
+`runTurnLoop` / `resumeTurnLoop` absorb the turn-counting, soft/hard-limit steer+abort, abort-signal forwarding, and response-text collection currently inside `runAgent`/`resumeAgent`, plus the private helpers `collectResponseText`, `getLastAssistantText`, `forwardAbortSignal`.
+Placing them on `SubagentSession` (the object that owns the `AgentSession`) — rather than reaching through `subagentSession.session` from `Agent` — keeps the design free of the Law-of-Demeter violation that an inline-on-`Agent` or free-function approach would introduce.
+
+### `createSubagentSession` — the assembly factory
+
+```typescript
+export interface SubagentSessionDeps { // (was RunnerDeps)
+  io: SubagentSessionIO;               // EnvironmentIO & SessionFactoryIO (moved verbatim)
+  exec: ShellExec;
+  registry: AgentConfigLookup;
+  lifecycle: ChildLifecyclePublisher;
+}
+
+export interface CreateSubagentSessionParams {
+  snapshot: ParentSnapshot;
+  type: SubagentType;
+  cwd?: string;                  // resolved workspace cwd; undefined → parent cwd
+  parentSession?: ParentSessionInfo;
+  model?: Model<any>;
+  thinkingLevel?: ThinkingLevel;
+}
+
+export function createSubagentSession(
+  params: CreateSubagentSessionParams,
+  deps: SubagentSessionDeps,
+): Promise<SubagentSession>;
+```
+
+Body (the assembly portion of `runAgent`, unchanged in substance):
+
+1. `lifecycle.spawning(...)`.
+2. `detectEnv(exec, cwd ?? snapshot.cwd)` → `assembleSessionConfig(...)`.
+3. `createResourceLoader` → `reload()`; `createSessionManager` → `newSession(...)`; `createSession(...)`.
+4. Construct `SubagentSession` (session, outputFile, sessionDir, agentName, lifecycle).
+5. `lifecycle.sessionCreated({ sessionDir, agentName, parentSessionId })` — synchronous, before `bindExtensions()` (the pre-bind ordering the permission registry depends on).
+6. `try { await session.bindExtensions({}); applyRecursionGuard(session); } catch (err) { subagentSession.dispose(); throw err; }` — if binding fails *after* `sessionCreated`, dispose (emit `disposed` + `session.dispose()`) before rethrowing, so registration is never leaked.
+7. Return the `SubagentSession`.
+
+Note the factory takes a resolved `cwd` value, never the `WorkspaceProvider`.
+The provider stays inside `Agent` (Option A): threading the provider + its prepare-context through the factory just to call `prepare()` would be a parameter-relay smell; `cwd` is a value the factory consumes directly (`detectEnv`, `assembleSessionConfig`, `createSession`).
+
+### Lifecycle-event ownership
+
+| Event             | Emitted by                    | When                                                            |
+| ----------------- | ----------------------------- | --------------------------------------------------------------- |
+| `spawning`        | `createSubagentSession`       | run start, before session creation                              |
+| `session-created` | `createSubagentSession`       | after creation, before `bindExtensions()`                       |
+| `completed`       | `SubagentSession.runTurnLoop` | end of the run's turn loop (success path)                       |
+| `disposed`        | `SubagentSession.dispose`     | true session disposal (cleanup) — **moved** from run-completion |
+
+`resume` neither creates a session nor emits `completed`/`disposed` — it re-prompts the live session, preserving today's behavior.
+
+### `Agent.run()` — coordination, not assembly (consumer call-site sketch)
+
+```typescript
+async run(): Promise<void> {
+  this.markRunning(Date.now());
+  this.observer?.onStarted?.(this);
+  this.wireSignal(this._signal, () => this.abort());
+
+  let cwd: string | undefined;
+  try {                                            // workspace prepare — unchanged
+    const provider = this._getWorkspaceProvider?.();
+    if (provider) { this._workspace = await provider.prepare({ ... }); cwd = this._workspace?.cwd; }
+  } catch (err) { this.markError(err); this.releaseListeners(); this.observer?.onRunFinished?.(this); return; }
+
+  try {
+    this.subagentSession = await this._createSubagentSession({
+      snapshot: this._snapshot!, type: this.type, cwd,
+      parentSession: this._parentSession, model: this._model, thinkingLevel: this._thinkingLevel,
+    });
+  } catch (err) { this.failRun(err); return; }     // factory already disposed its own session
+
+  this.flushPendingSteers();                        // → this.subagentSession.steer(msg)
+  this.attachObserver(subscribeAgentObserver(this.subagentSession.session, this, { ... }));
+  this.observer?.onSessionCreated?.(this, this.subagentSession.session);
+
+  try {
+    const result = await this.subagentSession.runTurnLoop(this._prompt!, {
+      maxTurns: this._maxTurns, graceTurns: cfg?.graceTurns, signal: this.abortController.signal,
+      // (maxTurns resolution stays: per-call ?? agentMaxTurns ?? defaultMaxTurns, via normalizeMaxTurns)
+    });
+    this.completeRun(result);                       // workspace teardown + status; no execution rebuild
+  } catch (err) { this.failRun(err); }
+}
+```
+
+`Agent.resume()` becomes `await this.subagentSession!.resumeTurnLoop(prompt, signal)` wrapped in the existing reset/observer/markCompleted/markError/releaseListeners scaffolding — no runner.
+
+`completeRun(result: TurnLoopResult)` drops the `session`/`sessionFile` fields (the `SubagentSession` already holds them) and no longer rebuilds `execution`; it does workspace teardown (folding `resultAddendum`) and the status transition, exactly as today.
+
+`Agent.execution: ExecutionState` becomes `Agent.subagentSession?: SubagentSession`; the `session` / `outputFile` getters delegate to it.
+A new `Agent.disposeSession()` calls `this.subagentSession?.dispose()`, invoked by `AgentManager` where `record.session?.dispose?.()` is called today.
+
+The `subscribeAgentObserver(subagentSession.session, ...)` wiring and `observer.onSessionCreated(agent, session)` still pass the raw `AgentSession`; these are the observer reach-throughs explicitly deferred to #277.
+The `Agent.session` getter likewise still exposes the wrapped session for the external consumers (steer tool, get-result, menu) that #277 retires.
+
+### Edge cases
+
+- Creation failure after `session-created`: the factory disposes (emit `disposed` + `session.dispose()`) before rethrowing → no registry leak; symmetric with the success path.
+- Turn-loop throw: `SubagentSession` exists and stays registered; `Agent.failRun` runs (workspace teardown + error status); `disposed` fires later at cleanup — symmetric register/unregister regardless of run success or failure.
+- Graceful abort (max turns + grace): `runTurnLoop` returns `{ aborted: true }` and emits `completed` (matching today); a *thrown* error skips `completed`.
+
+## Module-Level Changes
+
+New:
+
+- `src/lifecycle/subagent-session.ts` — `SubagentSession` class, `TurnLoopResult`, `TurnLoopOptions`, and the private turn-loop helpers (`collectResponseText`, `getLastAssistantText`, `forwardAbortSignal`).
+- `src/lifecycle/create-subagent-session.ts` — `createSubagentSession`, `SubagentSessionDeps`, `CreateSubagentSessionParams`, the SDK-bridge IO interfaces moved from `agent-runner.ts` (`EnvironmentIO`, `SessionFactoryIO`, `SubagentSessionIO`, `ResourceLoaderLike`, `SessionManagerLike`, `ResourceLoaderOptions`, `CreateSessionOptions`), and the recursion guard `applyRecursionGuard`/`filterActiveTools` + `EXCLUDED_TOOL_NAMES`.
+- `src/lifecycle/turn-limits.ts` — `normalizeMaxTurns`.
+- `src/session/conversation.ts` — `getAgentConversation` + `formatAttribution`.
+
+Changed:
+
+- `src/lifecycle/agent.ts` — drop `runner`/`AgentRunner`/`RunResult`/`ExecutionState`; add injected `createSubagentSession` factory dep; `execution` → `subagentSession`; rewrite `run()`/`resume()`; `completeRun(result: TurnLoopResult)`; add `disposeSession()`; `flushPendingSteers()` delegates to `subagentSession.steer`; update the "missing runner" guard messages.
+- `src/lifecycle/agent-manager.ts` — `AgentManagerOptions.runner: AgentRunner` → `createSubagentSession: (params) => Promise<SubagentSession>`; pass it into each `Agent`; `removeRecord`/`dispose` call `record.disposeSession()` instead of `record.session?.dispose?.()`.
+- `src/index.ts` — drop `ConcreteAgentRunner`/`RunnerDeps`; build `SubagentSessionDeps`; pass `createSubagentSession: (p) => createSubagentSession(p, deps)` to `AgentManager`.
+- `src/tools/get-result-tool.ts` — import `getAgentConversation` from `#src/session/conversation`.
+- `src/tools/spawn-config.ts` — import `normalizeMaxTurns` from `#src/lifecycle/turn-limits`.
+- `src/settings.ts` — update the `normalizeMaxTurns()` doc-comment reference.
+- `src/runtime.ts` — update the `RunConfig` doc comment that mentions `RunOptions`.
+- `src/session/session-config.ts` — update doc comments referencing `runAgent()` → `createSubagentSession()`.
+- `docs/architecture/architecture.md` — update the domain dependency diagram (drop `agent-runner` node, add `SubagentSession`/`createSubagentSession`), the execution-flow sequence diagram, the current-layout listing (lifecycle dir), the dependency-bag inventory rows (`RunOptions`, `RunnerIO`, `CreateSessionOptions`, `ResourceLoaderOptions` now belong to the factory module), and mark Step 5 delivered.
+- `.pi/skills/package-pi-subagents/SKILL.md` — the "Lifecycle domain" table lists `agent-runner.ts`; update to the new modules.
+
+Removed (final step):
+
+- `src/lifecycle/agent-runner.ts` — `runAgent`, `resumeAgent`, `ConcreteAgentRunner`, `AgentRunner`, `RunOptions`, `RunResult`, `ResumeOptions`, `RunContext`, `RunnerDeps`, `RunnerIO` (all migrated or deleted).
+- `src/lifecycle/execution-state.ts` — `ExecutionState` (subsumed by `SubagentSession`).
+
+Symbol-removal sweep (grep before finalizing each removal step): `runAgent`, `resumeAgent`, `ConcreteAgentRunner`, `AgentRunner`, `RunResult`, `RunOptions`, `ResumeOptions`, `RunContext`, `RunnerDeps`, `RunnerIO`, `ExecutionState`, `execution-state`, `agent-runner`.
+
+## Test Impact Analysis
+
+New unit tests the extraction enables:
+
+- `SubagentSession` in isolation — construct with a mock `AgentSession` and a `ChildLifecyclePublisher` mock; assert `runTurnLoop` turn-limit behavior (soft steer, hard abort, grace window), response capture, `completed` emission, `resumeTurnLoop` re-prompt, `steer` delegation, and `dispose` (session.dispose + `disposed`).
+  Previously these lived as `runAgent`/`resumeAgent` tests entangled with assembly.
+- `createSubagentSession` — assembly + `spawning`/`session-created` ordering + dispose-on-creation-failure, with no turn-loop noise.
+
+Tests that become redundant / simplified:
+
+- `test/lifecycle/concrete-agent-runner.test.ts` — deleted; `ConcreteAgentRunner` is gone, its delegation coverage absorbed by the factory + `SubagentSession` tests.
+- `Agent.run()` tests no longer re-drive turn events through a mock runner; they assert coordination against a stub `SubagentSession` whose `runTurnLoop` resolves to a canned `TurnLoopResult`.
+
+Tests that must stay (genuinely exercise the layer):
+
+- The turn-limit behavior tests (now retargeted from the runner to `SubagentSession.runTurnLoop`).
+- The recursion-guard / extension-tool filtering tests (now `createSubagentSession`).
+- The child-lifecycle ordering tests (now split across the factory and `SubagentSession`).
+- The workspace prepare/dispose tests in `agent.test.ts` — unchanged (Option A leaves that path intact); only assertions that read `runner.run`'s args switch to reading the `createSubagentSession` factory params.
+
+## TDD Order
+
+Lift-and-shift: introduce the new modules alongside the runner, swap consumers atomically, delete the runner last.
+Each step compiles and the suite passes; run `pnpm run check` after every step that touches a shared interface.
+
+1. Extract `normalizeMaxTurns` → `src/lifecycle/turn-limits.ts`; update `agent-runner.ts` (internal use), `spawn-config.ts`, and the `settings.ts` comment; move `agent-runner-settings.test.ts` → `turn-limits.test.ts`.
+   Commit `refactor: extract normalizeMaxTurns to turn-limits`.
+2. Extract `getAgentConversation` → `src/session/conversation.ts`; update `get-result-tool.ts` import and `test/agent-conversation.test.ts` import.
+   Commit `refactor: extract getAgentConversation to session/conversation`.
+3. Add `SubagentSession` (`src/lifecycle/subagent-session.ts`) with `runTurnLoop`/`resumeTurnLoop`/`steer`/`dispose` + the turn-loop helpers (copied from `agent-runner.ts`; the originals are deleted in step 6 — transient duplication).
+   New `test/lifecycle/subagent-session.test.ts` (turn limits, response capture, `completed`/`disposed` emission, resume) — retargeted from the runner's turn-limit + final-output tests.
+   Commit `feat: add SubagentSession with turn-loop and disposal behavior`.
+4. Add `createSubagentSession` (`src/lifecycle/create-subagent-session.ts`) + `SubagentSessionDeps`/`CreateSubagentSessionParams` + the IO interfaces (moved; re-export from `agent-runner.ts` if still needed there, else copied) + the recursion guard.
+   New `test/lifecycle/create-subagent-session.test.ts` and `create-subagent-session-extension-tools.test.ts` — from the runner's assembly, `spawning`/`session-created` ordering, and recursion-guard tests, plus a dispose-on-creation-failure test.
+   Commit `feat: add createSubagentSession factory`.
+5. Swap `Agent` + `AgentManager` + `index.ts` to the factory/`SubagentSession`; drop `runner` from `AgentInit`/`AgentManagerOptions`/`index`; `execution` → `subagentSession`; add `disposeSession()`; `disposed` now fires at cleanup.
+   This is the atomic call-site swap (the `runner` dep is type-coupled across `Agent` ↔ `AgentManager` ↔ `index`), so it lands with its test updates in one commit: `agent.test.ts` (run/resume/completeRun/workspace/disposeSession sections), `agent-manager.test.ts` (`createManager` helper + the dispose-on-cleanup test), `test/helpers/manager-stubs.ts` (runner stubs → factory stubs), `test/print-mode.test.ts` (mock `createSubagentSession` instead of `runAgent`).
+   These are localized edits to large files, not full rewrites — the bulk of `agent.test.ts`/`agent-manager.test.ts` (status transitions, getters, queue) is untouched.
+   Commit `feat: dissolve the runner; Agent drives SubagentSession directly`.
+6. Delete `agent-runner.ts`, `execution-state.ts`, and `concrete-agent-runner.test.ts`; rename `test/helpers/runner-io.ts` → `subagent-session-io.ts` (and its factory functions); update `session-config.ts` / `runtime.ts` doc comments; run the symbol-removal grep sweep.
+   Commit `refactor: remove agent-runner and ExecutionState`.
+7. Update `docs/architecture/architecture.md` (diagrams, layout, bag inventory, mark Step 5 delivered) and the `package-pi-subagents` skill's lifecycle-domain table.
+   Commit `docs: record runner dissolution and SubagentSession (#265)`.
+
+## Risks and Mitigations
+
+- **Registry entry persists longer (cross-package behavior).**
+  `disposed` now fires at session disposal, so permission-registry entries live from creation to cleanup.
+  Mitigation: `AgentManager.dispose()` (session_shutdown) disposes every `SubagentSession`, firing `disposed` for each; the permission system's subscription is unchanged.
+  Verify with `pnpm -r run test` (the permission system mocks the bus, so no timing coupling).
+- **Transient duplication (steps 3–5).**
+  The turn-loop helpers and assembly exist in both `agent-runner.ts` and the new modules until step 6.
+  Mitigation: deleted in step 6; fallow runs at pre-completion against the final state.
+- **Large-file test edits in step 5.**
+  Mitigation: edits are confined to the run/resume/dispose describe blocks and the `createManager` helper; the new turn-limit/assembly coverage already lives in steps 3–4's dedicated files, so step 5 only adapts coordination assertions.
+- **`disposed` not fired on a path that disposes the raw session directly.**
+  Mitigation: grep for every `session?.dispose` / `.dispose()` on a session in `agent-manager.ts` and route all of them through `record.disposeSession()`.
+
+## Open Questions
+
+- Resume-aware workspaces: should a resumed worktree agent re-establish (or reattach) a workspace before the next `session.prompt()`?
+  Today it runs in the removed worktree directory (degenerate).
+  This needs `WorkspaceProvider` support for resume and is out of scope; capture as a follow-up if it becomes a real need.
+- Whether `completed` should also fire on resume (it does not today).
+  Deferred — preserve current behavior; revisit only with a concrete consumer.