pi-goal-list-loop-audit 0.25.6 → 0.26.1

package/extensions/goal-loop-core.ts

@@ -11,6 +11,17 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import { execSync } from "node:child_process";
 
+/** v0.26.1: consecutive heartbeat refires without a real agent turn
+ * before the supervisor gives up (pauses the goal / stops the loop).
+ * 0 = never escalate (legacy silent-spin behavior). */
+export const DEFAULT_STALL_ESCALATION_REFIRES = 5;
+
+/** v0.26.1: pure gate — has the refire streak hit the escalation
+ * threshold? threshold 0 disables escalation entirely. */
+export function shouldEscalateStall(consecutiveStalls: number, threshold: number): boolean {
+  return threshold > 0 && consecutiveStalls >= threshold;
+}
+
 // =================================================================
 // Types
 // =================================================================

package/extensions/goal-loop-display.ts

@@ -81,17 +81,20 @@ export interface AuditDisplayProgress {
  * One-line status for ctx.ui.setStatus("pi-glla", …).
  * Returns undefined when nothing is being supervised (clears the segment).
  */
-export function buildStatusText(state: State, audit?: AuditDisplayProgress | null, now = Date.now(), theme?: DisplayTheme): string | undefined {
+export function buildStatusText(state: State, audit?: AuditDisplayProgress | null, now = Date.now(), theme?: DisplayTheme, extras?: { stalls?: number }): string | undefined {
   if (state.loop?.active) {
     const l = state.loop;
+    // v0.26.1: surface the refire streak — a spinning supervisor is the
+    // zombie signature (hegemon incident: 619 refires, 0 turns).
+    const stallSuffix = (extras?.stalls ?? 0) > 0 ? ` · ${paint(theme, "warning", `stalls:${extras!.stalls}`)}` : "";
     // v0.23.0: metricless spec loop — no arrow/best/stall, no plateau.
     if (!l.measureCmd) {
-      return `glla: loop ${paint(theme, "accent", "∞")} iter ${l.iteration}${l.maxIterations > 0 ? `/${l.maxIterations}` : ""} · metricless`;
+      return `glla: loop ${paint(theme, "accent", "∞")} iter ${l.iteration}${l.maxIterations > 0 ? `/${l.maxIterations}` : ""} · metricless${stallSuffix}`;
     }
     const arrow = paint(theme, "accent", l.direction === "min" ? "↓" : "↑");
     const stallText = `stall ${l.stallCount}/${l.plateauWindow}`;
     const stall = l.stallCount >= l.plateauWindow - 1 ? paint(theme, "warning", stallText) : stallText;
-    return `glla: loop ${arrow} iter ${l.iteration}/${l.maxIterations > 0 ? l.maxIterations : "∞"} · best ${l.bestValue ?? "n/a"} · ${stall}`;
+    return `glla: loop ${arrow} iter ${l.iteration}/${l.maxIterations > 0 ? l.maxIterations : "∞"} · best ${l.bestValue ?? "n/a"} · ${stall}${stallSuffix}`;
   }
   const g = state.goal;
   if (!g) return undefined;
@@ -146,8 +149,8 @@ function countTotal(g: Goal): number {
  * Widget lines for ctx.ui.setWidget("pi-glla", lines).
  * Returns undefined when nothing is worth showing.
  */
-export function buildWidgetLines(state: State, audit?: AuditDisplayProgress | null, now = Date.now(), theme?: DisplayTheme, width?: number): string[] | undefined {
-  if (state.loop?.active) return loopLines(state.loop, now, theme, width);
+export function buildWidgetLines(state: State, audit?: AuditDisplayProgress | null, now = Date.now(), theme?: DisplayTheme, width?: number, extras?: { stalls?: number }): string[] | undefined {
+  if (state.loop?.active) return loopLines(state.loop, now, theme, width, extras);
   const g = state.goal;
   if (!g) return undefined;
   if (g.status === "complete" || g.status === "aborted") return undefined;
@@ -202,12 +205,14 @@ function goalLines(g: Goal, state: State, audit: AuditDisplayProgress | null | u
   return lines;
 }
 
-function loopLines(l: LoopState, now: number, theme?: DisplayTheme, width?: number): string[] {
+function loopLines(l: LoopState, now: number, theme?: DisplayTheme, width?: number, extras?: { stalls?: number }): string[] {
+  // v0.26.1: the refire streak, shown only while nonzero.
+  const stallNote = (extras?.stalls ?? 0) > 0 ? ` · ${paint(theme, "warning", `stalls:${extras!.stalls}`)}` : "";
   // v0.23.0: metricless spec loop — no arrow/best/stall, no plateau.
   if (!l.measureCmd) {
     const lines = [
       `${paint(theme, "accent", "●")} ${truncate(l.target, budgetFor(width, 3, 64))}`,
-      `├─ loop ∞ iter ${l.iteration}${l.maxIterations > 0 ? `/${l.maxIterations}` : ""} · ${fmtElapsed(now - Date.parse(l.startedAt))}`,
+      `├─ loop ∞ iter ${l.iteration}${l.maxIterations > 0 ? `/${l.maxIterations}` : ""} · ${fmtElapsed(now - Date.parse(l.startedAt))}${stallNote}`,
       `└─ ${paint(theme, "dim", "metricless — work the spec (no plateau)")}`,
     ];
     if (l.branchName) lines.push(`⎇ ${paint(theme, "muted", truncate(l.branchName, budgetFor(width, 3, 50)))}`);

package/extensions/goal-settings.ts

@@ -49,6 +49,9 @@ export interface Settings {
   /** Consecutive stuck interventions before a loop stops (default 5,
    * 10 under aggressiveMode). */
   stuckMaxInterventions?: number;
+  /** v0.26.1: consecutive heartbeat refires without a real turn before
+   * the goal pauses / loop stops (default 5; 0 = never escalate). */
+  stallEscalationRefires?: number;
   /** on → propose_* drafts activate WITHOUT the Confirm dialog and the
    * interview floor is skipped — the seed carries the intent (unattended
    * rigs). Default off: nothing activates before the user confirms. */
@@ -60,6 +63,9 @@ export interface Settings {
    * override without the model pin so subagents share the session model and
    * its quota; "agent-default" restores upstream behavior. Applies to NEW
    * sessions (pi-subagents registers agents at session start). */
+  /** v0.26.0: reviewer (post-completion follow-up enqueuer) config —
+   * project-scoped; see extensions/reviewer.ts DEFAULT_REVIEWER_CONFIG. */
+  reviewer?: Record<string, unknown>;
   subagentModelStrategy?: SubagentModelStrategy;
   /** v0.24.6: per-agent-type model pin, e.g. { "Explore": "minimax/MiniMax-M3" }.
    * Always wins over subagentModelStrategy — the managed override is written
@@ -124,6 +130,7 @@ export const SETTINGS_KEYS: Array<keyof Settings> = [
   "aggressiveMode",
   "quotaRetryMinutes",
   "stuckMaxInterventions",
+  "stallEscalationRefires",
 ];
 
 /** Where each effective setting comes from (for the /glla display). */

package/extensions/loops/goal.ts

@@ -33,6 +33,7 @@ import {
   auditFeedbackExcerpt,
   DEFAULT_AUDIT_FEEDBACK_CHARS,
   DEFAULT_QUOTA_RETRY_MINUTES,
+  DEFAULT_STALL_ESCALATION_REFIRES,
   DEFAULT_TOKEN_LIMIT,
   classifyImpossibleReason,
   extractPendingTasks,
@@ -50,6 +51,7 @@ import {
   ledgerPath,
   crossRecommendMode,
   formatListDepth,
+  shouldEscalateStall,
   shouldSuppressHeartbeatForRecentShip,
   mergeSettings,
   parseListImport,
@@ -102,6 +104,13 @@ import {
   settingsProvenance,
   type Settings,
 } from "../goal-settings.js";
+import {
+  DEFAULT_REVIEWER_CONFIG,
+  resolveReviewerConfig,
+  reviewerMenuOptions,
+  runReviewer,
+  type ReviewerConfig,
+} from "../reviewer.js";
 import {
   discoverGllaProjects,
   parseLedgerEntries,
@@ -224,10 +233,16 @@ const countedLoopTokenMessages = new Set<string>();
 let lastActivityAt = Date.now();
 let lastWedgeAlertAt = 0;
 let heartbeatNudges = 0;
+// v0.26.1: consecutive heartbeat refires that produced NO real agent turn.
+// Resets only on real activity (agent_end / tool_call) — never on the
+// refire's own noteActivity, which is what made the hegemon zombie spin
+// self-sustaining (619 refires / 23.5h / zero turns).
+let consecutiveStalls = 0;
 let heartbeatTimer: NodeJS.Timeout | null = null;
 
-function noteActivity(): void {
+function noteActivity(real = false): void {
   lastActivityAt = Date.now();
+  if (real) consecutiveStalls = 0;
 }
 
 function isSupervising(): boolean {
@@ -249,8 +264,8 @@ function refreshUI(ctx: ExtensionContext): void {
     // Terminal width for truncation budgets: on wide terminals the widget
     // uses the room instead of cutting at fixed ~60-char floors.
     const width = process.stdout.columns || 80;
-    ctx.ui.setStatus("pi-glla", buildStatusText(state, latestAuditProgress, Date.now(), theme));
-    ctx.ui.setWidget("pi-glla", buildWidgetLines(state, latestAuditProgress, Date.now(), theme, width));
+    ctx.ui.setStatus("pi-glla", buildStatusText(state, latestAuditProgress, Date.now(), theme, { stalls: consecutiveStalls }));
+    ctx.ui.setWidget("pi-glla", buildWidgetLines(state, latestAuditProgress, Date.now(), theme, width, { stalls: consecutiveStalls }));
   } catch {
     // stale ctx — next event refreshes
   }
@@ -316,8 +331,36 @@ function heartbeatTick(): void {
     return;
   }
   noteActivity();
-  appendLedger(ctx.cwd, "heartbeat_refire", { nudgesSoFar: heartbeatNudges });
-  ctx.ui.notify("Heartbeat: supervisor active but session stalled — re-firing continuation.", "info");
+  consecutiveStalls++;
+  appendLedger(ctx.cwd, "heartbeat_refire", { nudgesSoFar: heartbeatNudges, consecutiveStalls });
+  // v0.26.1: a refire streak means the continuation is NOT landing (wedged
+  // message queue, stale API handle, dead turn trigger). Nudges can't catch
+  // this — they count turns, and a zombie runs none. Escalate to a loud,
+  // actionable stop instead of spinning silently forever.
+  const stallEscalation = loadSettings(ctx.cwd).stallEscalationRefires ?? DEFAULT_STALL_ESCALATION_REFIRES;
+  if (shouldEscalateStall(consecutiveStalls, stallEscalation)) {
+    consecutiveStalls = 0;
+    appendLedger(ctx.cwd, "stall_escalated", { threshold: stallEscalation, kind: isLoopActive() ? "loop" : "goal" });
+    if (isLoopActive()) {
+      clearLoopTimer();
+      state.loop = { ...state.loop!, active: false, stopReason: `stalled: ${stallEscalation} continuation refires landed no turn — the session is not continuing (wedged message queue or stale API). Restart pi, then /loop start again.` };
+      persistState(ctx);
+      ctx.ui.notify(`Loop stopped: ${stallEscalation} refires produced no turn — the continuation is not landing. Restart pi and /loop start.`, "warning");
+      notifyExternal(ctx, "Loop stopped: stalled (continuation not landing).");
+      return;
+    }
+    if (state.goal && state.goal.status === "active") {
+      updateGoal({
+        status: "paused",
+        pauseReason: `stalled: ${stallEscalation} continuation refires landed no turn`,
+        pauseSuggestedAction: "The continuation chain is broken in this process (wedged message queue or stale API). Restart pi, then /goal resume.",
+      }, ctx);
+      ctx.ui.notify(`Goal paused: ${stallEscalation} refires produced no turn. Restart pi, then /goal resume.`, "warning");
+      notifyExternal(ctx, "Goal paused: stalled (continuation not landing).");
+      return;
+    }
+  }
+  ctx.ui.notify(`Heartbeat: supervisor active but session stalled — re-firing continuation (stall ${consecutiveStalls}/${stallEscalation > 0 ? stallEscalation : "∞"}).`, "info");
   if (isLoopActive()) {
     scheduleLoopTick(ctx);
   } else {
@@ -408,7 +451,9 @@ function sendContinuation(goalId: string): void {
       content: continuationPrompt(state.goal!),
       display: false,
     }, { triggerTurn: true, deliverAs: "followUp" });
-  } catch {
+    appendLedger(ctx.cwd, "goal_continuation_sent", { goalId });
+  } catch (err) {
+    appendLedger(ctx.cwd, "goal_continuation_send_failed", { goalId, error: err instanceof Error ? err.message : String(err) });
     // API went stale mid-flight; next agent_end/session_start will reschedule.
   }
 }
@@ -517,7 +562,73 @@ function archiveCurrentGoal(ctx: ExtensionContext, status: Status, stopReason?:
   // (v0.2.0 bug: bare /list next silently consumed TWO items, found by the
   // pick-any-item verification in v0.10.0).
   if (goal.policy === "list" && status === "complete") {
-    activateNextListItem(ctx);
+    const advanced = activateNextListItem(ctx);
+    // v0.26.0: the queue just EMPTIED on a completion → list-complete.
+    if (!advanced) fireReviewer(ctx, { kind: "list", goalId: goal.id, objective: goal.objective, terminal: "goal-complete" });
+    return;
+  }
+  // v0.26.0: a /goal (non-list) reached a terminal state → maybe fire.
+  if (goal.policy !== "list") {
+    fireReviewer(ctx, { kind: "goal", goalId: goal.id, objective: goal.objective, terminal: status === "complete" ? "goal-complete" : status === "aborted" ? "goal-aborted" : "goal-paused" });
+  }
+}
+
+/**
+ * v0.26.0: bind the reviewer to the live session. Sources for finding
+ * extraction: the archived goal markdown + its audit reports + the
+ * durable audit log entries for this goal. List items are enqueued via
+ * the ONE enqueue path; /goal proposals go through the agent (which
+ * calls propose_goal_draft → the user's Confirm dialog).
+ */
+function fireReviewer(
+  ctx: ExtensionContext,
+  source: { kind: "goal" | "list"; goalId: string; objective: string; terminal: string },
+  opts: { manual?: boolean } = {},
+): void {
+  try {
+    const settings = loadSettings(ctx.cwd);
+    const config = resolveReviewerConfig(settings.reviewer as Partial<ReviewerConfig> | undefined);
+    const sources: Array<{ name: string; text: string }> = [];
+    try {
+      sources.push({ name: "archive", text: fs.readFileSync(archivedGoalPath(ctx.cwd, source.goalId), "utf-8") });
+    } catch {
+      /* archive md may not exist for manual review of a live goal */
+    }
+    const auditTexts = readAuditLog(ctx.cwd)
+      .filter((e) => e.goalId === source.goalId)
+      .map((e) => e.report);
+    for (const t of auditTexts) sources.push({ name: "audit", text: t });
+    let ledgerEntries: Array<{ type: string; at?: string; value?: any }> = [];
+    try {
+      ledgerEntries = parseLedgerEntries(fs.readFileSync(ledgerPath(ctx.cwd), "utf-8"));
+    } catch {
+      /* no ledger yet */
+    }
+    const outcome = runReviewer(config, source, {
+      cwd: ctx.cwd,
+      nowMs: Date.now(),
+      manual: opts.manual,
+      ledgerEntries,
+      sources,
+      enqueueListItems: (objectives) => enqueueItems(ctx, objectives, "reviewer"),
+      proposeGoal: (objective, reason) => {
+        try {
+          extensionApi?.sendUserMessage(
+            `[REVIEWER FOLLOW-UP — ${reason}. Propose this as a /goal via propose_goal_draft (the user Confirms or rejects): ${objective}]`,
+            { deliverAs: ctx.isIdle() ? "followUp" : "steer" },
+          );
+        } catch {
+          /* proposal best-effort */
+        }
+      },
+      notify: (message, level) => ctx.ui.notify(message, level),
+      ledger: (type, value) => appendLedger(ctx.cwd, type, value),
+    });
+    if (!outcome.fired && outcome.suppressedReason && opts.manual) {
+      ctx.ui.notify(`Reviewer suppressed: ${outcome.suppressedReason}`, "info");
+    }
+  } catch (err) {
+    ctx.ui.notify(`Reviewer failed (non-fatal): ${err instanceof Error ? err.message : String(err)}`, "warning");
   }
 }
 
@@ -1227,8 +1338,13 @@ function sendLoopTurn(): void {
       content: loopPrompt(loop, regressionNote, strategyNote, boundsNote, interventionNote, variantNote),
       display: false,
     }, { triggerTurn: true, deliverAs: "followUp" });
-  } catch {
-    // stale API — next agent_end reschedules
+    // v0.26.1: the send path is ledgered — the hegemon zombie spun 619
+    // refires with zero visibility into whether sends were landing.
+    appendLedger(ctx.cwd, "loop_turn_sent", { iteration: loop.iteration });
+  } catch (err) {
+    // stale API — next agent_end reschedules (but if none comes, the
+    // heartbeat's stall escalation stops the spin — v0.26.1).
+    appendLedger(ctx.cwd, "loop_turn_send_failed", { error: err instanceof Error ? err.message : String(err) });
   }
 }
 
@@ -2766,6 +2882,73 @@ async function openSettingsUI(ctx: ExtensionContext): Promise<void> {
   }
 }
 
+/** v0.26.0: /review <archived-goal-id> — manual reviewer invocation. */
+async function cmdReview(args: string, ctx: ExtensionContext): Promise<void> {
+  const id = args.trim();
+  if (!id) {
+    ctx.ui.notify("Usage: /review <goal-id> — see /goal archive for ids.", "info");
+    return;
+  }
+  // Resolve the id against the archive (suffix match allowed).
+  let goalId = id;
+  let objective = "(archived goal)";
+  try {
+    const files = fs.readdirSync(archiveDir(ctx.cwd)).filter((f) => f.endsWith(".md"));
+    const match = files.find((f) => f === `${id}.md`) ?? files.find((f) => f.includes(id));
+    if (!match) {
+      ctx.ui.notify(`No archived goal matching "${id}". /goal archive lists them.`, "warning");
+      return;
+    }
+    goalId = match.replace(/\.md$/, "");
+    const md = fs.readFileSync(path.join(archiveDir(ctx.cwd), match), "utf-8");
+    const objMatch = md.match(/## Objective\n\n> ([\s\S]*?)(?:\n\n|$)/);
+    if (objMatch) objective = objMatch[1]!.replace(/\n/g, " ").slice(0, 300);
+  } catch {
+    ctx.ui.notify(`No archive found for ${id}.`, "warning");
+    return;
+  }
+  fireReviewer(ctx, { kind: "goal", goalId, objective, terminal: "goal-complete" }, { manual: true });
+}
+
+/** v0.26.0: /glla reviewer — the reviewer config menu (project-scoped). */
+async function cmdReviewerSettings(ctx: ExtensionContext): Promise<void> {
+  if (!ctx.hasUI) {
+    const cfg = resolveReviewerConfig(loadSettings(ctx.cwd).reviewer as Partial<ReviewerConfig> | undefined);
+    ctx.ui.notify(`reviewer (project): ${JSON.stringify(cfg, null, 2)}`, "info");
+    return;
+  }
+  const load = () => resolveReviewerConfig(loadSettings(ctx.cwd).reviewer as Partial<ReviewerConfig> | undefined);
+  const save = (patch: Partial<ReviewerConfig>) => saveSettings("project", ctx.cwd, { reviewer: { ...load(), ...patch } as Record<string, unknown> });
+  for (;;) {
+    const cfg = load();
+    let choice: string | undefined;
+    try {
+      choice = await ctx.ui.select("Reviewer — post-completion follow-up enqueuer (project settings)", reviewerMenuOptions(cfg));
+    } catch {
+      return;
+    }
+    if (!choice || choice === "Done") return;
+    try {
+      if (choice.startsWith("Enabled")) save({ enabled: !cfg.enabled });
+      else if (choice.startsWith("Leverage mode")) save({ leverageMode: cfg.leverageMode === "fix-without-confirm" ? "confirm-all" : "fix-without-confirm" });
+      else if (choice.startsWith("Fire on goal-complete")) save({ fireOn: cfg.fireOn.includes("goal-complete") ? cfg.fireOn.filter((e) => e !== "goal-complete") : [...cfg.fireOn, "goal-complete"] });
+      else if (choice.startsWith("Fire on list-complete")) save({ fireOn: cfg.fireOn.includes("list-complete") ? cfg.fireOn.filter((e) => e !== "list-complete") : [...cfg.fireOn, "list-complete"] });
+      else if (choice.startsWith("Cascade: audit-on-clean")) save({ cascade: cfg.cascade.includes("fire-audit-on-clean") ? cfg.cascade.filter((c) => c !== "fire-audit-on-clean") : [...cfg.cascade, "fire-audit-on-clean"] });
+      else if (choice.startsWith("Max findings")) {
+        const v = await ctx.ui.input("Max findings per review", "1-50");
+        const n = Number(v?.trim());
+        if (Number.isSafeInteger(n) && n >= 1 && n <= 50) save({ maxFindingsPerReview: n });
+      } else if (choice.startsWith("Max reviews")) {
+        const v = await ctx.ui.input("Max reviewer fires per day", "1-100");
+        const n = Number(v?.trim());
+        if (Number.isSafeInteger(n) && n >= 1 && n <= 100) save({ maxReviewsPerDay: n });
+      }
+    } catch {
+      /* individual save failures are non-fatal */
+    }
+  }
+}
+
 /**
  * v0.25.2: /glla stats — one command, every project's rollup. Args:
  *   (none)            markdown table, all discovered projects
@@ -2858,6 +3041,10 @@ async function cmdSettings(args: string, ctx: ExtensionContext): Promise<void> {
     cmdAudits(trimmed.slice("audits".length).trim(), ctx);
     return;
   }
+  if (/^reviewer\b/.test(trimmed)) {
+    await cmdReviewerSettings(ctx);
+    return;
+  }
   if (!trimmed) {
     if (ctx.hasUI) {
       await openSettingsUI(ctx);
@@ -3009,6 +3196,19 @@ async function cmdSettings(args: string, ctx: ExtensionContext): Promise<void> {
           ctx.ui.notify(`quotaretryminutes must be a positive integer, got: ${value}`, "warning");
         }
       }
+    } else if (key === "stallescalation" || key === "stallescalationrefires") {
+      if (["unset", "default"].includes(value)) {
+        patch.stallEscalationRefires = undefined;
+        changed = true;
+      } else {
+        const n = Number.parseInt(value, 10);
+        if (Number.isInteger(n) && n >= 0) {
+          patch.stallEscalationRefires = n;
+          changed = true;
+        } else {
+          ctx.ui.notify(`stallescalation must be a non-negative integer (0 = never escalate), got: ${value}`, "warning");
+        }
+      }
     } else if (key === "stuckmax" || key === "stuckmaxinterventions") {
       if (["unset", "default"].includes(value)) {
         patch.stuckMaxInterventions = undefined;
@@ -3158,13 +3358,19 @@ export default function (pi: ExtensionAPI): void {
       ["aggressivemode=", "on: keep-going defaults — autoResume, cap 10, stuck 10, wedge off, quota auto-retry, cap→TODOs"],
       ["quotaretryminutes=", "N: minutes before auto-retrying a quota-exhausted auditor (default 60)"],
       ["stuckmax=", "N: consecutive stuck interventions before a loop stops (default 5)"],
+      ["stallescalation=", "N: heartbeat refires without a turn before goal pauses / loop stops (default 5, 0 = never)"],
       ["stats", "per-project ledger rollups: /glla stats [json|premature|project=<path>]"],
       ["audits", "audit-log browser: /glla audits [N|full] — recent verdicts from .pi-glla/audits.jsonl"],
       ["autoaccept=", "on: drafts activate without the Confirm dialog (unattended rigs)"],
+      ["reviewer", "reviewer config menu (post-completion follow-up enqueuer)"],
       ["project", "write a project override: /glla project key=value"],
     ]),
     handler: settingsHandler,
   });
+  pi.registerCommand("review", {
+    description: "Manually run the reviewer on an archived goal: /review <goal-id> — extracts findings, writes a report to .pi-glla/reviews/, enqueues bug-class fixes to /list, proposes architectural items as /goal. Bypasses the trigger gates (explicit user request).",
+    handler: (args: string, ctx: ExtensionContext) => { rememberCtx(ctx); return cmdReview(args, ctx); },
+  });
   pi.registerCommand("list", {
     description: "Loop 2: the list of audited goals — order is the default, not the law. /list <describe tasks or name a plan file> (dumps get shaped into items, files import, 'Done when:' adds directly) | /list show | /list resume | /list next [n] | /list remove <n> | /list clear | /list cancel",
     getArgumentCompletions: completions([
@@ -3173,6 +3379,7 @@ export default function (pi: ExtensionAPI): void {
       ["next", "activate the next item (or /list next <n> for position n)"],
       ["remove", "remove an item: /list remove <n>"],
       ["clear", "empty the list"],
+      ["depth", "queue depth, oldest item age, average item duration"],
       ["cancel", "stop the whole list: abort the active item + drop all waiting"],
     ]),
     handler: (args: string, ctx: ExtensionContext) => { rememberCtx(ctx); return cmdList(args, ctx); },
@@ -3217,6 +3424,30 @@ export default function (pi: ExtensionAPI): void {
     }
   }
 
+  // v0.26.1: compaction ends WITHOUT an agent_end (the compaction turn is
+  // not an agent turn), so the continuation chain can dangle until the
+  // 60s heartbeat notices. Re-arm it as soon as pi settles post-compact.
+  pi.on("session_compact", async (_event: any, ctx: ExtensionContext) => {
+    if (isForeignCtx(ctx)) return;
+    rememberCtx(ctx);
+    if (!isSupervising()) return;
+    appendLedger(ctx.cwd, "session_compact", {});
+    const settle = setTimeout(() => {
+      const c = freshCtx();
+      if (!c) return;
+      try {
+        if (c.isIdle() && !c.hasPendingMessages() && continuationTimer === null && loopTimer === null && isSupervising()) {
+          appendLedger(c.cwd, "compaction_refire", {});
+          if (isLoopActive()) scheduleLoopTick(c);
+          else scheduleContinuation(c, true);
+        }
+      } catch {
+        /* settle race — the 60s heartbeat covers it */
+      }
+    }, 2000);
+    settle.unref?.();
+  });
+
   pi.on("message_start", async (event: any, _ctx: ExtensionContext) => {
     // v0.14.0 drafting floor: count real user replies while drafting. Our
     // own injected draft prompt arrives as a user message — skip that one.
@@ -3399,7 +3630,7 @@ export default function (pi: ExtensionAPI): void {
     // v0.23.8: a subagent finishing must not drive the main session's
     // continuation loop.
     if (isForeignCtx(ctx)) return;
-    noteActivity();
+    noteActivity(true);
     // v0.25.2: per-goal turn telemetry (/glla stats).
     if (state.goal && state.goal.status === "active") {
       const t = state.goal.telemetry ?? { turns: 0, fileWrites: 0, bashCalls: 0 };
@@ -3500,7 +3731,7 @@ export default function (pi: ExtensionAPI): void {
 
   pi.on("tool_call", () => {
     toolCallsThisTurn++;
-    noteActivity();
+    noteActivity(true);
     // v0.24.0: count loop-iteration tool calls (narration-only detection).
     if (isLoopActive()) {
       state.loop!.toolsThisTurn = (state.loop!.toolsThisTurn ?? 0) + 1;

package/extensions/reviewer.ts

@@ -0,0 +1,276 @@
+// pi-goal-list-loop-audit — v0.26.0
+// extensions/reviewer.ts
+//
+// The Reviewer: post-completion follow-up enqueuer. Fires after a /goal
+// completes or a /list queue empties, extracts findings from the archive
+// + ledger, classifies them by leverage, writes a review report, and
+// cascades: bug/refactor findings → /list items (no Confirm, per the
+// leverage principle), architectural findings → /goal proposal (Confirm),
+// clean completions → audit /goal proposal, strategic-only → notify+idle.
+//
+// Deterministic by design (REVIEWER-DESIGN-2026-07-24: "makes NO new tool
+// calls — purely analytical"). All side effects are injected so tests
+// drive it without a pi host. /loop completions never trigger it.
+
+import * as fs from "node:fs";
+import * as path from "node:path";
+
+export interface ReviewerConfig {
+  enabled: boolean;
+  fireOn: Array<"goal-complete" | "list-complete">;
+  doNotFireOn: string[];
+  cascade: Array<"convert-findings-to-list" | "queue-leftovers" | "fire-audit-on-clean" | "notify-and-idle">;
+  auditCadence: string;
+  auditScope: string;
+  leverageMode: "fix-without-confirm" | "confirm-all";
+  confirmOn: string[];
+  maxFindingsPerReview: number;
+  maxReviewsPerDay: number;
+}
+
+export const DEFAULT_REVIEWER_CONFIG: ReviewerConfig = {
+  enabled: true,
+  fireOn: ["goal-complete", "list-complete"],
+  doNotFireOn: ["goal-aborted", "goal-paused"],
+  cascade: ["convert-findings-to-list", "queue-leftovers", "fire-audit-on-clean", "notify-and-idle"],
+  auditCadence: "every-clean-completion",
+  auditScope: "regression-scan",
+  leverageMode: "fix-without-confirm",
+  confirmOn: ["architectural-decision", "new-dependency", "schema-change"],
+  maxFindingsPerReview: 10,
+  maxReviewsPerDay: 20,
+};
+
+/** Merge a partial project-settings block over the defaults. */
+export function resolveReviewerConfig(block?: Partial<ReviewerConfig>): ReviewerConfig {
+  return { ...DEFAULT_REVIEWER_CONFIG, ...(block ?? {}) };
+}
+
+export type FindingClass = "bug" | "refactor" | "architectural" | "strategic";
+
+export interface Finding {
+  text: string;
+  source: string;
+  class: FindingClass;
+}
+
+/** Leverage classification (contract item 5). Order matters: strategic
+ * and architectural win over bug/refactor — "should we rewrite this
+ * broken schema" is a decision, not a fix. */
+const CLASS_PATTERNS: Array<{ class: FindingClass; re: RegExp }> = [
+  { class: "strategic", re: /\bshould we\b|\bdeprecat|ship this\??|strategic/i },
+  { class: "architectural", re: /\brewrite\b|new dependency|schema change|architectural|redesign/i },
+  { class: "bug", re: /\bTODO\b|\bFIXME\b|\bbug\b|\bissue\b|regression|broken|\bfixme\b/i },
+  { class: "refactor", re: /could be cleaner|consider refactoring|duplicat|refactor|left ?out|follow[\s-]?up|deferred/i },
+];
+
+export function classifyFindingText(line: string): FindingClass | undefined {
+  const t = line.trim();
+  if (t.length < 8) return undefined;
+  for (const { class: cls, re } of CLASS_PATTERNS) {
+    if (re.test(t)) return cls;
+  }
+  return undefined;
+}
+
+/** Scan source texts line-by-line for finding-shaped content. */
+export function extractFindings(sources: Array<{ name: string; text: string }>, max: number): Finding[] {
+  const out: Finding[] = [];
+  const seen = new Set<string>();
+  for (const { name, text } of sources) {
+    for (const line of text.split("\n")) {
+      const cls = classifyFindingText(line);
+      if (!cls) continue;
+      const clean = line.trim().replace(/^[-*>\s\[\]x]+/, "").slice(0, 200);
+      if (clean.length < 8 || seen.has(clean)) continue;
+      seen.add(clean);
+      out.push({ text: clean, source: name, class: cls });
+      if (out.length >= max) return out;
+    }
+  }
+  return out;
+}
+
+/** Runaway prevention (contract item 6/9): a reviewer fire in the last
+ * `windowMs` suppresses re-firing — reviewer-created work completing
+ * immediately must not recursively fire the reviewer. */
+export function reviewerFiredRecently(entries: Array<{ type: string; at?: string }>, windowMs: number, nowMs: number): boolean {
+  return entries.some((e) => e.type === "reviewer_fired" && e.at !== undefined && nowMs - Date.parse(e.at) < windowMs);
+}
+
+/** Per-day cap (contract item 10). */
+export function reviewsToday(entries: Array<{ type: string; at?: string }>, nowMs: number): number {
+  const day = new Date(nowMs).toISOString().slice(0, 10);
+  return entries.filter((e) => e.type === "reviewer_fired" && e.at?.startsWith(day)).length;
+}
+
+export interface ReviewReport {
+  goalId: string;
+  kind: "goal" | "list";
+  objective: string;
+  findings: Finding[];
+  cascadeStep: string;
+  at: string;
+}
+
+export function formatReviewReport(r: ReviewReport): string {
+  const byClass = (c: FindingClass) => r.findings.filter((f) => f.class === c);
+  const section = (title: string, items: Finding[]) =>
+    items.length === 0 ? "" : `\n## ${title}\n\n${items.map((f) => `- ${f.text} _(${f.source})_`).join("\n")}\n`;
+  return [
+    `# Review — ${r.goalId}`,
+    "",
+    `**Kind**: ${r.kind} · **At**: ${r.at}`,
+    "",
+    "## Summary",
+    "",
+    `Completed: ${r.objective.slice(0, 300)}`,
+    "",
+    `**Cascade step**: ${r.cascadeStep}`,
+    "",
+    `## Findings (${r.findings.length})`,
+    section("Bug-class (enqueued to /list, no Confirm)", byClass("bug")),
+    section("Refactor-class (enqueued to /list, no Confirm)", byClass("refactor")),
+    section("Architectural-class (proposed as /goal, Confirm required)", byClass("architectural")),
+    section("Strategic-class (notify only)", byClass("strategic")),
+    r.findings.length === 0 ? "\n(none — completion looks clean)\n" : "",
+  ].join("\n");
+}
+
+export function writeReviewReport(cwd: string, report: ReviewReport): string {
+  const dir = path.join(cwd, ".pi-glla", "reviews");
+  fs.mkdirSync(dir, { recursive: true });
+  const ts = report.at.replace(/[:.]/g, "-");
+  const file = path.join(dir, `${report.goalId}-${ts}.md`);
+  fs.writeFileSync(file, formatReviewReport(report));
+  return file;
+}
+
+/** Injectable side effects — goal.ts binds these to the live session. */
+export interface ReviewerDeps {
+  cwd: string;
+  nowMs: number;
+  /** /review <id> manual invocation — bypasses fireOn/doNotFireOn gates,
+   * the refire window, and the day cap (the user asked explicitly). */
+  manual?: boolean;
+  ledgerEntries: Array<{ type: string; at?: string; value?: any }>;
+  /** Source texts for finding extraction (archive md, audit reports). */
+  sources: Array<{ name: string; text: string }>;
+  enqueueListItems: (objectives: string[]) => void;
+  proposeGoal: (objective: string, reason: string) => void;
+  notify: (message: string, level: "info" | "warning") => void;
+  ledger: (type: string, value: Record<string, unknown>) => void;
+}
+
+export interface ReviewerOutcome {
+  fired: boolean;
+  suppressedReason?: string;
+  report?: ReviewReport;
+  reportPath?: string;
+  enqueued: number;
+  proposed: number;
+}
+
+export const REVIEWER_REFIRE_WINDOW_MS = 5 * 60_000;
+
+/** The reviewer lifecycle (contract item 1). */
+export function runReviewer(
+  config: ReviewerConfig,
+  source: { kind: "goal" | "list"; goalId: string; objective: string; terminal: string },
+  deps: ReviewerDeps,
+): ReviewerOutcome {
+  const none = (suppressedReason: string): ReviewerOutcome => ({ fired: false, suppressedReason, enqueued: 0, proposed: 0 });
+  if (!config.enabled && !deps.manual) return none("reviewer disabled");
+  const event = source.kind === "goal" ? `${source.terminal}` : "list-complete";
+  if (!deps.manual) {
+    if (config.doNotFireOn.includes(event)) return none(`doNotFireOn: ${event}`);
+    if (source.kind === "goal" && source.terminal !== "goal-complete") return none(`not a completion: ${source.terminal}`);
+    if (!config.fireOn.includes(source.kind === "goal" ? "goal-complete" : "list-complete")) return none("fireOn excludes this event");
+    if (reviewerFiredRecently(deps.ledgerEntries, REVIEWER_REFIRE_WINDOW_MS, deps.nowMs)) {
+      deps.ledger("reviewer_suppressed", { reason: "refire-window", goalId: source.goalId });
+      return none("reviewer fired within the last 5 minutes (runaway prevention)");
+    }
+    const today = reviewsToday(deps.ledgerEntries, deps.nowMs);
+    if (today >= config.maxReviewsPerDay) {
+      deps.ledger("reviewer_suppressed", { reason: "day-cap", count: today, cap: config.maxReviewsPerDay, goalId: source.goalId });
+      return none(`day cap reached (${today}/${config.maxReviewsPerDay})`);
+    }
+  }
+
+  const findings = extractFindings(deps.sources, config.maxFindingsPerReview);
+  const bugs = findings.filter((f) => f.class === "bug" || f.class === "refactor");
+  const architectural = findings.filter((f) => f.class === "architectural");
+  const strategic = findings.filter((f) => f.class === "strategic");
+
+  let enqueued = 0;
+  let proposed = 0;
+  let cascadeStep = "notify-and-idle";
+
+  // Cascade: findings → list items (leverage: fix-without-confirm).
+  const convertStep = source.kind === "goal" ? "convert-findings-to-list" : "queue-leftovers";
+  if (bugs.length > 0 && config.cascade.includes(convertStep)) {
+    deps.enqueueListItems(bugs.map((f) => f.text));
+    enqueued = bugs.length;
+    cascadeStep = convertStep;
+  }
+  // Architectural findings → /goal proposal WITH Confirm.
+  if (architectural.length > 0) {
+    deps.proposeGoal(
+      architectural.map((f) => f.text).join("; "),
+      `reviewer found ${architectural.length} architectural-class finding(s) — needs your Confirm`,
+    );
+    proposed += architectural.length;
+    cascadeStep = "propose-goal";
+  }
+  // Clean completion → audit /goal (opt-in cascade step).
+  if (findings.length === 0 && config.cascade.includes("fire-audit-on-clean")) {
+    deps.proposeGoal(
+      `Post-completion regression scan after ${source.goalId} (${config.auditScope})`,
+      "reviewer: completion looks clean — firing the audit step",
+    );
+    proposed++;
+    cascadeStep = "fire-audit-on-clean";
+  }
+
+  const report: ReviewReport = {
+    goalId: source.goalId,
+    kind: source.kind,
+    objective: source.objective,
+    findings,
+    cascadeStep,
+    at: new Date(deps.nowMs).toISOString(),
+  };
+  const reportPath = writeReviewReport(deps.cwd, report);
+  deps.ledger("reviewer_fired", {
+    goalId: source.goalId,
+    kind: source.kind,
+    findings: findings.length,
+    enqueued,
+    proposed,
+    cascadeStep,
+    report: path.relative(deps.cwd, reportPath),
+  });
+  deps.notify(
+    `Reviewer: ${findings.length} finding(s) — ${enqueued} enqueued to /list, ${proposed} proposed as /goal (${cascadeStep}). Report: ${path.relative(deps.cwd, reportPath)}`,
+    "info",
+  );
+  if (strategic.length > 0) {
+    deps.notify(`Reviewer: ${strategic.length} strategic finding(s) need YOUR call — see the report's Strategic section.`, "warning");
+  }
+  return { fired: true, report, reportPath, enqueued, proposed };
+}
+
+/** /glla reviewer menu options, derived from the config — extracted so
+ * the menu surface is unit-testable without a pi host. */
+export function reviewerMenuOptions(cfg: ReviewerConfig): string[] {
+  return [
+    `Enabled — ${cfg.enabled ? "ON" : "OFF"}`,
+    `Leverage mode — ${cfg.leverageMode} (bug/refactor findings)`,
+    `Fire on goal-complete — ${cfg.fireOn.includes("goal-complete") ? "ON" : "OFF"}`,
+    `Fire on list-complete — ${cfg.fireOn.includes("list-complete") ? "ON" : "OFF"}`,
+    `Cascade: audit-on-clean — ${cfg.cascade.includes("fire-audit-on-clean") ? "ON" : "OFF"}`,
+    `Max findings per review — ${cfg.maxFindingsPerReview}`,
+    `Max reviews per day — ${cfg.maxReviewsPerDay}`,
+    "Done",
+  ];
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-goal-list-loop-audit",
-  "version": "0.25.6",
+  "version": "0.26.1",
   "description": "Goal. Loop. Audit. Done. — a pi-coding-agent extension that supervises long-running work, with isolated auditor on each completion. Beat bamboozling by design: the auditor runs in a fresh session with no extensions, no skills, no editor — only the read tools needed to verify your goal.",
   "license": "MIT",
   "author": "dracon",