@ikunin/sprintpilot 2.2.9 → 2.2.11

package/_Sprintpilot/bin/autopilot.js

@@ -632,6 +632,39 @@ function composeRuntimeState(persisted, profile, projectRoot) {
     remainingStoriesInEpic = epicStories.length;
   }
 
+  // Catch-all guard: if state.phase REQUIRES a story_key to emit a
+  // coherent action AND we still don't have one after every resolution
+  // path (queue / validator / sprint-status), reset phase to flowStart.
+  //
+  // Real-world scenario: a previous orchestrator version nulled
+  // current_story (e.g., v2.2.4's overzealous rejection) but didn't
+  // reset state.phase. Persisted state ends up with current_story: null
+  // at story_done. v2.2.9's reset only fires inside the rejection branch,
+  // so a NULL story_key doesn't trigger it (no rejection to fire). This
+  // guard catches that case + any future bug class where story_key
+  // ends up null at a story-bound phase.
+  //
+  // The reset is safe: the next emission re-enters story-start (or
+  // PREPARE_STORY_BRANCH per the migration rule) and picks the next
+  // pending story from queue / sprint-status.
+  const STORY_BOUND_PHASES_CATCH_ALL = new Set([
+    STATES.CHECK_READINESS,
+    STATES.DEV_RED,
+    STATES.DEV_GREEN,
+    STATES.CODE_REVIEW,
+    STATES.PATCH_APPLY,
+    STATES.PATCH_RETEST,
+    STATES.STORY_DONE,
+    STATES.STORY_LAND,
+  ]);
+  if (!resolvedStoryKey && STORY_BOUND_PHASES_CATCH_ALL.has(phase)) {
+    process.stderr.write(
+      `[autopilot] WARN phase "${phase}" requires a story_key but none resolved (queue empty, sprint-status lookup didn't fire for this phase). ` +
+        `Resetting to ${flowStart} so next emission re-enters story-start.\n`,
+    );
+    phase = flowStart;
+  }
+
   return {
     phase,
     story_key: resolvedStoryKey,

package/_Sprintpilot/manifest.yaml

@@ -1,6 +1,6 @@
 addon:
   name: sprintpilot
-  version: 2.2.9
+  version: 2.2.11
   description: Sprintpilot — autopilot and multi-agent addon for BMad Method (git workflow, parallel agents, autonomous story execution)
   bmad_compatibility: ">=6.2.0"
   modules:

package/_Sprintpilot/skills/sprint-autopilot-on/SKILL.md

@@ -23,6 +23,13 @@ Follow **`./workflow.orchestrator.md`** verbatim. Flow control lives in
 - Do not search for `workflow.md` or reconstruct it from memory; do not
   read cached BMad legacy patterns and apply them ahead of the
   orchestrator's state machine.
+- **Never pause on your own initiative.** `user_input { kind: 'pause' }`
+  is a HUMAN command. The autopilot's purpose is to drive without
+  stopping until `session_story_limit`, a TRUE BLOCKER, retry-budget
+  exhaustion, or `sprint_is_complete`. Heuristics like "PR opened,
+  time for review" / "natural breakpoint" / "let CI catch up" are NOT
+  valid reasons to pause — see `workflow.orchestrator.md` § "Pause is
+  human-only."
 
 `workflow.orchestrator.md` is the **sole authority** for the rest of the
 session.

package/_Sprintpilot/skills/sprint-autopilot-on/workflow.orchestrator.md

@@ -83,9 +83,33 @@ Wrap everything in `{ "status": "...", ... }` and pass to
 | `failure`             | `reason`, `diagnosis` (first-class — fed back into next retry), `recoverable: boolean`           |
 | `blocked`             | `blocker_kind` (one of the 5 TRUE BLOCKERS or recoverable kinds), `details`, `user_input_needed`, `consecutive_count?` |
 | `propose_alternative` | `reason`, `alternative` (full Action object), `urgency_hint?` (raises impact only). Low impact → auto-accepted; medium / high → orchestrator stores the alternative in `state.pending_alternative` and emits `user_prompt`. The user accepts via `user_input` `{ kind: 'accept_alternative' }` or rejects via `force_continue` (both clear `pending_alternative`). |
-| `user_input`          | `commands: UserCommand[]` (validated server-side; see user-commands.js). Kinds: `skip_story`, `abort_sprint`, `force_continue`, `override_decision`, `change_profile`, `pause` (cleanly halts THIS session; next `/sprint-autopilot-on` resumes), `accept_alternative` (dispatches the stored `pending_alternative`). |
+| `user_input`          | `commands: UserCommand[]` (validated server-side; see user-commands.js). Kinds: `skip_story`, `abort_sprint`, `force_continue`, `override_decision`, `change_profile`, `pause` (cleanly halts THIS session; next `/sprint-autopilot-on` resumes), `accept_alternative` (dispatches the stored `pending_alternative`). **NEVER send `pause` on your own initiative** — see "Pause is human-only" below. |
 | `verify_override`     | `evidence: { decision_log_ref?, explanation, expected_paths? }` — used when verify.js is wrong   |
 
+## Pause is human-only
+
+The autopilot's purpose is to **drive without stopping** until one of:
+- `session_story_limit` is reached (profile-defined; default 3, nano 5)
+- A TRUE BLOCKER (5 kinds, listed below) fires
+- The retry budget exhausts on a single phase
+- `sprint_is_complete` (last story done → halt with `handoff: sprint_finalize_pending`)
+- The **human user** explicitly asks to pause (e.g. types `/pause`, `pause autopilot`, or a similar direct instruction in chat)
+
+**DO NOT issue `user_input` `{ kind: 'pause' }` on your own.** Specifically, the following are NOT valid reasons to pause:
+
+- "Natural pause point" / "PR opened, time for human review"
+- "CI is still running for the previous story"
+- "Diff is large, let's get a checkpoint"
+- "Merge cadence" / "want to wait for review before next story"
+- Any heuristic about session length, story count, or work-in-progress
+
+Pause is a HUMAN command. If you think the user might want to pause, **don't pause — finish the story and proceed to the next per the queue / `resolveNextStoryKey`**. The user can pause at any time by typing the command themselves; the next `/sprint-autopilot-on` cleanly resumes. Your judgment about "natural breakpoints" defeats the autopilot's purpose.
+
+The only cases where you signal a halt yourself are:
+- `blocked` with one of the 5 TRUE BLOCKERS (creative-input-required, new external dep, etc.)
+- `failure` with `recoverable: false` (catastrophic, can't proceed even with retries)
+- `propose_alternative` at medium/high impact (the orchestrator escalates to a `user_prompt` itself)
+
 ## TRUE BLOCKER kinds (per AGENTS.md)
 
 `creative_user_input_required`, `new_external_dependency`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ikunin/sprintpilot",
-  "version": "2.2.9",
+  "version": "2.2.11",
   "description": "Sprintpilot — autopilot and multi-agent addon for BMad Method v6: git workflow, parallel agents, autonomous story execution",
   "license": "Apache-2.0",
   "repository": {