pi-goal-list-loop-audit 0.38.36 → 0.38.38

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## 0.38.38 — elapsed-time duplication cut + PR #47 closed (2026-09-09)
+
+### Fixed
+
+- **Elapsed time in two places (field 20260909_002132):** the `setStatus` one-liner no longer carries `total …` on the idle/busy/working branches — other sessions' tab strips showed `glla: [WORKING] total …` under a card already reading it. The card head keeps the timer unconditionally; state + task/queue counts stay on the status line. (`Chrome Bridge`/`(indefinite)` framing is pi core, not GLLA — only our timer text was cut.)
+- **PR #47 triage:** KV-cache checkpoint complaint verified real on main but the strip shape is unsafe as-is (post-compaction blindness, no compensating pointer) — replied per-piece, gave the contributor a merge-based re-sync command, closed without merging per the #45/#46 precedent (live `active.jsonl`, 39-behind divergence, bundled features). Per-task audits stay held pending cost review.
+
+### Verification
+
+- New pins: status-without-timer + card-keeps-timer; full `release:check` 0 failures; `tsc --noEmit` clean.
+- Evidence: `audit/ELAPSED-DUPLICATION-PR47-2026-09-09.md`. No open PRs.
+
+## 0.38.37 — bullets + deliberate non-do (2026-09-09)
+
+### Fixed
+
+- **Auditor disapproval of v0.38.36 answered:** the posted summary now carries one `•` bullet per informing detail on both posted surfaces (chat + transcript); new optional `complete_goal` `leftOut` parameter renders as the closing `• Left out:` bullet on all three approval sites (fresh, detached-retry, Esc-anyway). Absent stays absent — never invented, filler drops. Recap/archive format unchanged.
+- **Stale pins updated deliberately:** approval-chat `deepEqual` expectations now bullet-prefixed.
+
+### Verification
+
+- New pins: bullet count/evidence + present/absent/filler non-do (render unit), end-to-end `leftOut` claim → posted bullet (MockPi).
+- Full `release:check`: 2040 pass / 2 skip / 0 fail across 204 files (`/var/tmp/glla-bullets-release-check2.log`, tarball `pi-goal-list-loop-audit-0.38.37.tgz`); `tsc --noEmit` clean.
+- Evidence: `audit/HUMAN-VOICE-SUMMARY-2026-09-08.md`.
+
 ## 0.38.36 — human-voice terminal summaries (2026-09-08)
 
 ### Fixed

package/docs/INDEX.md

@@ -18,7 +18,7 @@ For shipped docs, the relevant entry points are:
   failback; v0.35.9 hardened cross-version npm tarball checks; v0.35.10
   handles multi-entry npm dry-run reports; v0.35.11 accepts both npm report
   shapes; v0.35.12 supports npm 12's keyed pack reports; v0.35.13 fixes stale-API recovery loops.
-  v0.35.14–v0.38.36 continue through the supervisor freeze (`/glla pause`),
+  v0.35.14–v0.38.38 continue through the supervisor freeze (`/glla pause`),
   load hold, auditor picker parity, Windows launch fix, zombie-watchdog
   subagent carve-out, due-wait backstop, the `/glla agents` visibility panel,
   durable state-root selection, blank-until-resume auditor context, frozen

package/extensions/completion-summary.ts

@@ -200,7 +200,9 @@ export function buildApprovalChatLines(notice: {
 }): string[] {
   return [
     `✓ done — ${notice.outcome}`,
-    ...withoutStaleNext(notice.details),
+    // v0.38.37 (audit 2026-09-08): one verifiable-result bullet per
+    // informing detail — the Codex closing shape.
+    ...withoutStaleNext(notice.details).map((detail) => `• ${detail}`),
     notice.approval,
     ...(notice.counts ? [notice.counts] : []),
     notice.record,
@@ -240,6 +242,8 @@ export interface TerminalApprovalRenderInput {
   countsLine?: string;
   /** Override for the audit half of the counts line. */
   auditNote?: string;
+  /** v0.38.37: what the agent deliberately left out (complete_goal leftOut). */
+  leftOut?: string;
 }
 
 export interface TerminalApprovalRender {
@@ -271,7 +275,15 @@ export function buildTerminalApprovalRender(input: TerminalApprovalRenderInput):
   };
   const candidate = input.completionSummary ?? input.goal.completionSummary;
   const recap = compactTerminalCompletionSummary(facts, candidate);
-  const brief = terminalHumanBrief(facts, candidate);
+  const baseBrief = terminalHumanBrief(facts, candidate);
+  // v0.38.37 (audit 2026-09-08): the deliberate non-do comes from the
+  // agent's complete_goal leftOut claim — never invented. Filler ("none")
+  // drops via the same briefValueContent filter; absent stays absent.
+  const leftOut = input.leftOut?.trim();
+  const leftOutContent = leftOut ? briefValueContent(leftOut) : null;
+  const brief = leftOutContent
+    ? { ...baseBrief, details: [...baseBrief.details, `Left out: ${clipSummaryValue(leftOutContent, 120)}`] }
+    : baseBrief;
   const countsLine = input.countsLine ?? buildAuditCountsLine(input.goal, input.auditNote);
   return {
     chatLines: [
@@ -285,7 +297,7 @@ export function buildTerminalApprovalRender(input: TerminalApprovalRenderInput):
       ...(input.extras ?? []),
     ],
     recap,
-    transcriptLines: [...withoutStaleNext(brief.details), input.approval],
+    transcriptLines: [...withoutStaleNext(brief.details).map((detail) => `• ${detail}`), input.approval],
     countsLine,
     outcome: brief.outcome,
     approval: input.approval,

package/extensions/goal-loop-core.ts

@@ -280,6 +280,12 @@ export interface PendingCompletion {
   recoveryEpisodeKey?: string;
   /** Durable per-episode notice fence; display projections must consult it. */
   recoveryNoticeKeys?: string[];
+  /**
+   * v0.38.37: what the agent deliberately left out of this turn's work
+   * (complete_goal leftOut). Renders as the closing non-do bullet in the
+   * terminal user summary; absent means nothing was deliberately left out.
+   */
+  leftOut?: string;
   /**
    * Durable one-shot recovery fence. A parked claim may receive one
    * automatic retry after a validated healthy lifecycle/recovery event;

package/extensions/goal-loop-display.ts

@@ -1323,8 +1323,11 @@ function buildStatusTextBase(state: State, audit?: AuditDisplayProgress | null,
       // state + counts only. Freshness tails (`last host activity`,
       // `last stream`) duplicated the card-head `stream {age}` readout —
       // one surface owns liveness so the two can never disagree.
+      // v0.38.38 (field 20260909_002132): the elapsed `total …` duplicated
+      // the card head too (other sessions' tab strips showed
+      // `glla: [WORKING] total …` under a card already reading it) — the
+      // card owns the timer now; the status line keeps state + counts.
       const idleDetails = [
-        goalTotalText(g, now),
         (state.list?.length ?? 0) > 0 ? `${state.list!.length} queued` : "",
       ].filter(Boolean);
       return `glla: ${activityStateBadge("IDLE", theme, "warning")}${idleDetails.length > 0 ? ` ${idleDetails.join(" · ")}` : ""}${heldSuffix}`;
@@ -1335,7 +1338,6 @@ function buildStatusTextBase(state: State, audit?: AuditDisplayProgress | null,
     // like progress. Queued work is neither idle nor currently executing.
     if (activity === "busy") {
       const busyDetails = [
-        goalTotalText(g, now),
         g.taskList ? `${countDone(g)}/${countTotal(g)} tasks` : "",
         (state.list?.length ?? 0) > 0 ? `${state.list!.length} queued` : "",
       ].filter(Boolean);
@@ -1370,11 +1372,11 @@ function buildStatusTextBase(state: State, audit?: AuditDisplayProgress | null,
     const recovery = state.mainModelRecovery;
     const blockedByRecovery = queued && recovery && recovery.retryAt;
     const recoverySuffix = blockedByRecovery ? ` · parked on provider recovery` : "";
-    // Keep the screenshot-proven order: state, elapsed, freshness, then
-    // queue/task context. It scans like a compact instrument readout and
-    // remains useful when the above-editor card is hidden or scrolled away.
+    // Keep the screenshot-proven order: state, then queue/task context.
+    // It scans like a compact instrument readout and remains useful when
+    // the above-editor card is hidden or scrolled away. Elapsed `total …`
+    // lives on the card head only (v0.38.38, field 20260909_002132).
     const details = [
-      goalTotalText(g, now),
       g.taskList ? `${countDone(g)}/${countTotal(g)} tasks` : "",
       // v0.34.124: the QUEUED "why" — an accepted dispatch that pi has not
       // started. (The last-activity age that used to ride here moved to the

package/extensions/loops/goal-auditor-hooks.ts

@@ -1439,6 +1439,8 @@ async function retryStoredCompletionAudit(origin: CompletionAuditOrigin = "provi
       completionSummary: state.goal.completionSummary,
       approval: `— auditor ${result.model} approved${approvalVia}.`,
       record: approvalRecord,
+      // v0.38.37: the deliberate non-do the agent claimed, if any.
+      ...(claim.leftOut ? { leftOut: claim.leftOut } : {}),
       extras: inspectionSessionPath
         ? [`Auditor session kept for review: pi --session ${inspectionSessionPath} (or pi --fork ${inspectionSessionPath}).`]
         : [],

package/extensions/loops/goal-tools.ts

@@ -519,6 +519,13 @@ function registerAgentTools(pi: any): void {
           "and cross-checks the verification claim against real artifacts (see audit/COMPLETION-SUMMARY-POLICY-2026-08-19.md).",
       })),
       newObjective: Type.Optional(Type.String({ description: "v0.25.0 (contract item 15): when the work has legitimately shifted, pass the new objective here — it atomically replaces the goal objective AND the audit proceeds against the NEW objective in this same call. Do not use to dodge a legitimate disapproval; the auditor sees the change." })),
+      leftOut: Type.Optional(Type.String({
+        maxLength: 500,
+        description:
+          "v0.38.37: what this turn deliberately left out (scope cut, deferred item + why, in plain words). " +
+          "Renders as the closing `• Left out:` bullet in the user-facing terminal summary. " +
+          "Omit when nothing was deliberately left out — absent stays absent, never invented.",
+      })),
     }),
     async execute(_id, params, signal, _onUpdate, execCtx) {
       const foreign0 = foreignToolGuard(execCtx);
@@ -542,7 +549,7 @@ function registerAgentTools(pi: any): void {
         }
         return { content: [{ type: "text", text: `No active goal — it is ${state.goal.status}.` }], details: {} };
       }
-      const p = params as { completionSummary?: string; verificationSummary?: string; newObjective?: string };
+      const p = params as { completionSummary?: string; verificationSummary?: string; newObjective?: string; leftOut?: string };
       if (state.goal.repairTarget) {
         return {
           content: [{ type: "text", text: `This repair card cannot be completed yet. Redraft the original target as a confirmed task list with propose_task_list (include objective: ${state.goal.repairTarget.objective.slice(0, 180)}), then continue the real work.` }],
@@ -742,6 +749,9 @@ function registerAgentTools(pi: any): void {
       const completionClaim = beginCompletionAudit(ctx, {
         completionSummary: finalSummary,
         verificationSummary: p.verificationSummary,
+        // v0.38.37: the deliberate non-do rides the pending claim into
+        // the terminal render — the only source the summary may cite.
+        ...(p.leftOut?.trim() ? { leftOut: p.leftOut.trim().slice(0, 500) } : {}),
         at: nowIso(),
       }, "complete-goal");
       if (!completionClaim) {
@@ -1194,6 +1204,9 @@ function registerAgentTools(pi: any): void {
       // Escape hatch: the user aborted the audit (Esc). Offer the explicit
       // choice — complete WITHOUT audit, or keep working. (pi-goal-x parity.)
       if (result.error === "Auditor aborted.") {
+        // v0.38.37: capture the agent-claimed non-do before the claim is
+        // cleared below — the Esc-complete path renders the same voice.
+        const escLeftOut = state.goal.pendingCompletion?.leftOut;
         updateGoal({ status: "active", auditHistory: history, pendingCompletion: undefined, pauseReason: "audit aborted by user (Esc)" }, ctx);
         const abortConfirmCtx = freshCtxForGeneration(auditGeneration);
         if (!abortConfirmCtx) return staleToolResult();
@@ -1232,6 +1245,9 @@ function registerAgentTools(pi: any): void {
             approval: `— completed without audit (your choice).`,
             record: `— record: ${escArchivePath}`,
             auditNote: "completed without audit (your choice)",
+            // v0.38.37: the claim was cleared pre-confirm; the non-do was
+            // captured from it above.
+            ...(escLeftOut ? { leftOut: escLeftOut } : {}),
           });
           if (!archiveCurrentGoal(ctx, "complete", terminalReason)) {
             return {
@@ -1286,6 +1302,8 @@ function registerAgentTools(pi: any): void {
           completionSummary: state.goal.completionSummary,
           approval: `— auditor ${result.model} approved.`,
           record: manualArchiveRecord,
+          // v0.38.37: the deliberate non-do rides the durable claim.
+          ...(durableCompletionClaim.leftOut ? { leftOut: durableCompletionClaim.leftOut } : {}),
           extras: inspectionSessionPath
             ? [`Auditor session kept for review: pi --session ${inspectionSessionPath} (or pi --fork ${inspectionSessionPath}).`]
             : [],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-goal-list-loop-audit",
-  "version": "0.38.36",
+  "version": "0.38.38",
   "description": "Mission control for autonomous pi: interview-drafted goals, an audited task queue, and forever-loops (metric, spec, project-audit) that run for hours. A detached extension-less auditor process re-verifies every completion with raw evidence without holding the main pi turn; confirmed drafts, decision pauses and consent gates keep you in charge.",
   "license": "AGPL-3.0-only",
   "author": "dracon",

package/prompts/goal-loop-continuation.md

@@ -197,4 +197,4 @@ The orchestrator's backstop is the stall watchdog: three consecutive turns with
 
 `complete_goal` submits a nonterminal claim, not a completion verdict. While the detached audit is pending, do not say the goal is done/complete/approved or present a final success summary. Do not wait or poll. If a response is needed, give one brief pending-status sentence. GLLA posts the concrete outcome-first summary into chat after verified approval and durable archive, without needing another user prompt. Do not duplicate that summary. A rejected claim remains unfinished and repair work continues.
 
-The agent-written completionSummary is user-facing evidence, not a step log: open with the outcome in plain words, then one verifiable result per label with its proof inline (test counts, file paths, commit refs) — never raw run stats. Cut values at clause boundaries, never mid-word; state what was deliberately left out when it matters.
+The agent-written completionSummary is user-facing evidence, not a step log: open with the outcome in plain words, then one verifiable result per label with its proof inline (test counts, file paths, commit refs) — never raw run stats. Cut values at clause boundaries, never mid-word; pass what was deliberately left out as the complete_goal leftOut parameter — it renders as the closing bullet, and is omitted when absent.