pi-goal-list-loop-audit 0.26.7 → 0.26.9

package/README.md

@@ -199,7 +199,7 @@ No external watchdog plugin needed.
 /glla tokenlimit=10000000            # per-goal token budget (default: off) → GLOBAL
 /glla tokenlimit=0                   # explicitly no cap (the default)
 /glla wedgealert=30                  # hung-command alert minutes (default: 30, 0 = off)
-/glla autoresume=on                  # held goals/loops auto-resume in fresh sessions (unattended rigs)
+/glla autoresume=on                  # auto-resume goals/loops on session LOAD too (default: hold on load, auto-resume on reload/fork; off: never)
 /glla auditcap=5                     # pause the goal after N consecutive auditor disapprovals (default 5, 0 = unlimited)
 /glla aggressivemode=on               # keep-going defaults: autoResume, cap 10, stuck 10, wedge off, quota auto-retry, cap→TODOs
 /glla quotaretryminutes=60            # minutes before auto-retrying a quota-exhausted auditor

package/extensions/goal-loop-core.ts

@@ -660,8 +660,21 @@ export function cloneGoal(goal: Goal): Goal {
  * setting for unattended restarts). One mechanical predicate; no heuristics.
  */
 export function shouldAutoResumeOnSessionStart(reason: string | undefined, autoResume: boolean | undefined): boolean {
+  // v0.26.9 tri-state:
+  //   true      → auto-resume on EVERY session start (unattended rigs).
+  //   false     → never auto-resume; always hold for an explicit resume.
+  //   undefined → DEFAULT: a human LOADING a session ("startup"/"new"/
+  //               "resume", or old pi reporting no reason) must not trigger
+  //               work — show the held popup, they resume explicitly.
+  //               In-session MACHINERY ("reload"/"fork") auto-resumes so an
+  //               extension reload or session fork never strands work.
+  // Mid-session continuation (agent_end chains, heartbeat refires,
+  // post-compaction, list/loop transitions) is not gated here at all — it
+  // auto-continues forever unless a super-stuck brake (stall escalation,
+  // stale-api terminal, pending-latch watchdog) stops it loudly.
   if (autoResume === true) return true;
-  return reason === "resume" || reason === "reload" || reason === "fork";
+  if (autoResume === false) return false;
+  return reason === "reload" || reason === "fork";
 }
 
 /**

package/extensions/loops/goal.ts

@@ -3221,7 +3221,7 @@ async function cmdSettings(args: string, ctx: ExtensionContext): Promise<void> {
         patch.autoResume = true;
         changed = true;
       } else if (["off", "false", "0", "no", "unset"].includes(value)) {
-        patch.autoResume = undefined;
+        patch.autoResume = false; // v0.26.8: explicit off must persist — undefined now means ON
         changed = true;
       } else {
         ctx.ui.notify(`autoresume must be on or off, got: ${value}`, "warning");
@@ -3329,7 +3329,7 @@ async function cmdSettings(args: string, ctx: ExtensionContext): Promise<void> {
   saveSettings(scope, ctx.cwd, patch);
   const effective = loadSettings(ctx.cwd);
   ctx.ui.notify(
-    `Saved to ${scope} config. Effective now: model=${effective.auditorModel ?? "(session model)"} thinking=${effective.auditorThinkingLevel ?? "(session)"} notify=${effective.notifyCmd ?? "(off)"} tokenLimit=${effective.tokenLimit ?? 0}${(effective.tokenLimit ?? 0) > 0 ? "" : " (off)"} autoResume=${effective.autoResume === true ? "on" : "off"} auditFeedbackChars=${effective.auditFeedbackChars ?? DEFAULT_AUDIT_FEEDBACK_CHARS}${(effective.auditFeedbackChars ?? DEFAULT_AUDIT_FEEDBACK_CHARS) === 0 ? " (full report)" : ""}\n` +
+    `Saved to ${scope} config. Effective now: model=${effective.auditorModel ?? "(session model)"} thinking=${effective.auditorThinkingLevel ?? "(session)"} notify=${effective.notifyCmd ?? "(off)"} tokenLimit=${effective.tokenLimit ?? 0}${(effective.tokenLimit ?? 0) > 0 ? "" : " (off)"} autoResume=${effective.autoResume === true ? "on" : effective.autoResume === false ? "off" : "default (hold on load)"} auditFeedbackChars=${effective.auditFeedbackChars ?? DEFAULT_AUDIT_FEEDBACK_CHARS}${(effective.auditFeedbackChars ?? DEFAULT_AUDIT_FEEDBACK_CHARS) === 0 ? " (full report)" : ""}\n` +
     `Note: the auditor runs without extensions — it must be a built-in provider, not an extension-registered one.`,
     "info",
   );
@@ -3444,7 +3444,7 @@ export default function (pi: ExtensionAPI): void {
       ["thinking=", "auditor thinking level: /glla thinking=high"],
       ["notify=", "desktop push command: /glla notify='notify-send pi \"$1\"'"],
       ["tokenlimit=", "per-goal token budget (0 = off): /glla tokenlimit=2000000"],
-      ["autoresume=", "on: auto-resume held goals/loops in fresh sessions"],
+      ["autoresume=", "default: hold when a session is loaded, auto-resume on reload/fork; on: always auto-resume; off: never"],
       ["auditcap=", "N: pause goal after N consecutive auditor disapprovals (default 5, 0 = unlimited)"],
       ["auditfeedbackchars=", "cap on executor-visible disapproval report chars (0 = full report, the default)"],
       ["aggressivemode=", "on: keep-going defaults — autoResume, cap 10, stuck 10, wedge off, quota auto-retry, cap→TODOs"],
@@ -3641,12 +3641,14 @@ export default function (pi: ExtensionAPI): void {
     } catch (err) {
       ctx.ui.notify(`glla subagent override sync failed: ${err instanceof Error ? err.message : String(err)}`, "warning");
     }
-    // Restore gate (v0.21.0): a fresh session ("startup"/"new", or a pi too
-    // old to report a reason) has no conversation context for the restored
-    // work — HOLD instead of auto-firing, so opening pi in a folder never
-    // starts working before you can even load your session. Sessions with
-    // history ("resume"/"reload"/"fork") auto-resume; /glla autoresume=on
-    // opts a project into auto-resume everywhere (unattended rigs).
+    // Restore gate (v0.26.9 tri-state): a human LOADING a session
+    // ("startup"/"new"/"resume", or no reason) HOLDS — the popup shows what
+    // is waiting and nothing starts until they resume explicitly. In-session
+    // machinery ("reload"/"fork") auto-resumes. /glla autoresume=on opts a
+    // project into auto-resume everywhere (unattended rigs); autoresume=off
+    // never auto-resumes. Once running, the chain auto-continues forever
+    // unless a super-stuck brake (stall escalation / stale-api / latch)
+    // stops it loudly.
     const autoResume = shouldAutoResumeOnSessionStart(event?.reason, resolveEffectiveAggressiveSettings(loadSettings(ctx.cwd)).autoResume);
     // v0.25.0 (contract item 6): aggressiveMode announces every auto-event.
     if (
@@ -3668,7 +3670,7 @@ export default function (pi: ExtensionAPI): void {
         state.loop = { ...l, active: false, stopReason: HELD_ON_RESTORE };
         persistState(ctx);
         ctx.ui.notify(
-          `Loop held on restore (fresh session, no work started): ${l.target.slice(0, 60)} — /loop to resume, /glla autoresume=on to auto-resume in this project.`,
+          `Loop held on restore: ${l.target.slice(0, 60)} — /loop to resume, /glla autoresume=on to auto-resume on session load in this project.`,
           "info",
         );
       }
@@ -3687,7 +3689,7 @@ export default function (pi: ExtensionAPI): void {
         const resumeHint = `${resumeCmd} to continue${queued > 0 ? ` (+${queued} waiting in the list)` : ""} · /glla autoresume=on to auto-resume in this project`;
         updateGoal({
           status: "paused",
-          pauseReason: "restored in a fresh session — no work started",
+          pauseReason: "restored on session load — held for explicit resume",
           pauseSuggestedAction: resumeHint,
         }, ctx);
         ctx.ui.notify(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-goal-list-loop-audit",
-  "version": "0.26.7",
+  "version": "0.26.9",
   "description": "Goal. Loop. Audit. Done. — a pi-coding-agent extension that supervises long-running work, with isolated auditor on each completion. Beat bamboozling by design: the auditor runs in a fresh session with no extensions, no skills, no editor — only the read tools needed to verify your goal.",
   "license": "MIT",
   "author": "dracon",