pi-goal-list-loop-audit 0.37.2 → 0.37.3

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.37.3 — pi 0.84 loop stall fix — agent_start fallback for continuation start proof (2026-09-02)
+
+### Fixed
+  `continuation_start_unacknowledged` stall on every `/loop` iteration under pi >=0.84 — `before_agent_start` is not emitted for `sendMessage({ deliverAs: "followUp" })` continuations, so the start proof never arrived (10/10 `loop_turn_sent` unacknowledged in issue #40). `dispatchStartAcknowledged` now accepts `agent_start`/`turn_start` as fallback while keeping `before_agent_start`+marker as primary; owner/generation/foreign fences still apply so only an unrelated manual turn in the same session could falsely settle — strictly better than 0% success. Ledger records `startProofSource` as `agent_start`/`turn_start` when fallback fires.
+
+  Hardcoded 60s retry backoff after the first 30s start-proof window is now env-configurable (`GLLA_CONTINUATION_RETRY_BACKOFF_MS`, legacy `GLLA_CONTINUATION_START_RETRY_BACKOFF_MS`) independent of `GLLA_CONTINUATION_START_TIMEOUT_MS`, so slow local models can extend both windows (observed 5m + 60s hard cap in issue #40 secondary).
+
+### Added
+  Regression pins for the fallback path and env var (`tests/loop-start-proof-fallback.test.ts`, `tests/stale-api-terminal.test.ts`, `tests/stall-handling.test.ts`).
+
 ## 0.37.2 — queued vs monitoring visuals and long-running daemon handling (2026-09-01)
 
 ### Added

package/docs/INDEX.md

@@ -18,7 +18,7 @@ For shipped docs, the relevant entry points are:
   failback; v0.35.9 hardened cross-version npm tarball checks; v0.35.10
   handles multi-entry npm dry-run reports; v0.35.11 accepts both npm report
   shapes; v0.35.12 supports npm 12's keyed pack reports; v0.35.13 fixes stale-API recovery loops.
-  v0.35.14–v0.37.2 continue through the supervisor freeze (`/glla pause`),
+  v0.35.14–v0.37.3 continue through the supervisor freeze (`/glla pause`),
   load hold, auditor picker parity, Windows launch fix, zombie-watchdog
   subagent carve-out, due-wait backstop, the `/glla agents` visibility panel,
   durable state-root selection, blank-until-resume auditor context, frozen

package/extensions/goal-continuation.ts

@@ -204,7 +204,11 @@ export function createGoalContinuation(flagsArg: ContinuationFlags, d: Continuat
 // self-heal; only the second window failure declares unacknowledged (the
 // explicit /list|/goal|/loop resume fallback for genuine provider stalls).
 const CONTINUATION_START_TIMEOUT_MS = Number(process.env.GLLA_CONTINUATION_START_TIMEOUT_MS ?? 30_000);
-const NO_TURN_START_RETRY_BACKOFF_MS = 60_000;
+const NO_TURN_START_RETRY_BACKOFF_MS = Number(
+  process.env.GLLA_CONTINUATION_RETRY_BACKOFF_MS ??
+  process.env.GLLA_CONTINUATION_START_RETRY_BACKOFF_MS ??
+  60_000,
+);
 let continuationStartTimeoutOverrideMs: number | null = null;
 let continuationRetryBackoffOverrideMs: number | null = null;
 function continuationStartTimeoutMs(): number {
@@ -568,21 +572,43 @@ export function dispatchStartAcknowledged(ctx: ExtensionContext, source: string,
   }
   // A dispatch has one accepted window and one start proof. Once a start was
   // recorded, later low-level events must not re-settle it; before that,
-  // events without the exact before_agent_start marker are unrelated manual
-  // activity and cannot clear the watchdog.
+  // only a marker-carrying before_agent_start or the pi>=0.84 fallback
+  // (agent_start/turn_start without a prompt) may clear the watchdog.
   const pending = pendingContinuationDispatch;
   if (!pending || pending.phase !== "accepted") return false;
-  if (source !== "before_agent_start" && !pending.startProofSource) return false;
+  // v0.37.3 (issue #40): pi >=0.84 does not emit before_agent_start for
+  // followUp continuations (sendMessage { deliverAs: "followUp" }) — the
+  // only delivery path for continuations. Gate on the strongest proof when
+  // available, but accept agent_start/turn_start as fallback so the
+  // continuation is not stuck at 0% success. Owner/generation/foreign
+  // checks below still fence the fallback to the same session/generation.
+  if (
+    source !== "before_agent_start" &&
+    source !== "agent_start" &&
+    source !== "turn_start" &&
+    !pending.startProofSource
+  )
+    return false;
   const record = pendingContinuationDispatch;
   if (!record || flags.sessionHandoffPending || flags.extensionApiStale || flags.staleTerminalDone || flags.zombieStoodDown) return false;
   if (record.generation !== flags.sessionGeneration || isForeignCtx(ctx)) return false;
   if (!dispatchMatchesOwner(record, flags.sessionGeneration, sessionManagerId(ctx))) return false;
   if ((record.kind === "goal" || record.kind === "stall") && (!state.goal || state.goal.id !== record.goalId || state.goal.status !== "active")) return false;
-  // before_agent_start is the required proof: it must carry this exact
-  // dispatch marker. Older low-level events without a prompt are liveness
-  // signals only; accepting them would let an unrelated manual turn settle
-  // this dispatch and suppress its recovery watchdog.
-  if (source !== "before_agent_start" || !dispatchPromptMatches(record, prompt)) return false;
+  // before_agent_start must carry this exact dispatch marker. The fallback
+  // (agent_start/turn_start) carries no prompt in pi >=0.84 for followUp
+  // turns — owner/generation/foreign above already fence it to the same
+  // session, so an unrelated manual turn in the same session is the only
+  // remaining false-positive, strictly better than never acknowledging.
+  if (source === "before_agent_start") {
+    if (!dispatchPromptMatches(record, prompt)) return false;
+  } else if (source === "agent_start" || source === "turn_start") {
+    // fallback — no prompt to match
+  } else {
+    // message_update / agent_end / other liveness signals cannot settle
+    // without an existing proof, and pending.phase !== "accepted" already
+    // blocks re-settlement after the first proof.
+    return false;
+  }
   const settledAt = Date.now();
   const started: ContinuationDispatch = {
     ...transitionDispatch(record, "started"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-goal-list-loop-audit",
-  "version": "0.37.2",
+  "version": "0.37.3",
   "description": "Mission control for autonomous pi: interview-drafted goals, an audited task queue, and forever-loops (metric, spec, project-audit) that run for hours. A detached extension-less auditor process re-verifies every completion with raw evidence without holding the main pi turn; confirmed drafts, decision pauses and consent gates keep you in charge.",
   "license": "AGPL-3.0-only",
   "author": "dracon",