pi-goal-list-loop-audit 0.18.0 → 0.18.1

package/extensions/goal-loop-core.ts

@@ -201,6 +201,21 @@ export function parseListImport(content: string): string[] {
   return items;
 }
 
+/**
+ * During a LIST drafting session the agent must not queue items one by one
+ * with list_add/list_activate — that bypasses the user's Confirm gate
+ * (observed in the wild: the agent decomposed a dump and ACTIVATED the first
+ * item with zero confirmation). The batch path is propose_goal_draft's
+ * items[]: one Confirm for the whole list. User commands (/list add) are
+ * unaffected — only the agent tools are gated.
+ */
+export function listMutationBlocked(draftingTarget: string | null): boolean {
+  return draftingTarget === "list";
+}
+
+export const LIST_DRAFTING_BLOCK_MESSAGE =
+  "LIST DRAFTING IN PROGRESS — do not queue items one by one. Decompose the request into an items[] array and call propose_goal_draft ONCE: the user confirms the whole batch in a single dialog. list_add / list_activate work again after the drafting session ends.";
+
 /**
  * Route natural-language text handed to `/list` with no subcommand verb
  * (v0.18.0). The user typed a dump — "fix x, do y, write docs" — not a

package/extensions/loops/goal.ts

@@ -36,6 +36,8 @@ import {
   resolveImportFile,
   routeGoalArgs,
   routeListText,
+  listMutationBlocked,
+  LIST_DRAFTING_BLOCK_MESSAGE,
   sumNewAssistantTokens,
   takeAt,
   goalArgsNeedDrafting,
@@ -1715,6 +1717,9 @@ function registerAgentTools(pi: any, ctx: ExtensionContext): void {
     }),
     async execute(_id, params, _signal, _onUpdate, execCtx) {
       const p = params as { items: string[] };
+      if (listMutationBlocked(draftingTarget)) {
+        return { content: [{ type: "text", text: LIST_DRAFTING_BLOCK_MESSAGE }], details: {} };
+      }
       if (!Array.isArray(p.items) || p.items.length === 0) {
         return { content: [{ type: "text", text: "No items given." }], details: {} };
       }
@@ -1746,6 +1751,9 @@ function registerAgentTools(pi: any, ctx: ExtensionContext): void {
     }),
     async execute(_id, params, _signal, _onUpdate, execCtx) {
       const p = params as { n: number };
+      if (listMutationBlocked(draftingTarget)) {
+        return { content: [{ type: "text", text: LIST_DRAFTING_BLOCK_MESSAGE }], details: {} };
+      }
       const n = Math.floor(p.n);
       if (!Number.isInteger(n) || n < 1) {
         return { content: [{ type: "text", text: "n must be a positive integer (1-based position)." }], details: {} };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-goal-list-loop-audit",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "description": "Goal. Loop. Audit. Done. — a pi-coding-agent extension that supervises long-running work, with isolated auditor on each completion. Beat bamboozling by design: the auditor runs in a fresh session with no extensions, no skills, no editor — only the read tools needed to verify your goal.",
   "license": "MIT",
   "author": "dracon",