pi-goal-list-loop-audit 0.38.52 → 0.38.53

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## 0.38.53 — Consent-safe GLLA delegation skill and list-draft staging (2026-09-13)
+
+Added the packaged `glla-delegate` skill for normal-chat goal/list delegation.
+It documents the consent ladder, main-session ownership, auto-activation warning,
+and tool-first usage without adding new runtime powers. Its quoted frontmatter
+is validated through Pi's public loader and the packed-file release gate.
+
+### Added
+
+- **Consent-safe delegation guidance:** explicit queue requests may use
+  `list_add`; discovered follow-ups are offered first; durable goals use
+  `propose_goal_draft`; speculative queueing, unowned activation, and agent
+  `/loop` control remain prohibited.
+- **Pasted-list policy:** supplied multi-line, bullet, numbered, and checklist
+  structure is preserved without an exact-versus-refined meta-question. Only a
+  genuinely ambiguous individual item remains eligible for clarification, with
+  one-record seeds retaining the normal draft path.
+- **Release/package coverage:** `skills/glla-delegate/SKILL.md` is allowlisted,
+  declared in `pi.skills`, required by the packed-artifact smoke, and loaded
+  with zero diagnostics in the release contract.
+
+### Fixed
+
+- **Draft staging:** interview and stale-entry gates remain ahead of Confirm;
+  confirmation remains ahead of conflict handling and enqueue.
+- **Paused list carryover:** a confirmed multi-item draft now routes its first
+  promotion through the carryover-aware activation choke point, archiving the
+  paused predecessor before starting the list head instead of leaving the batch
+  stranded behind it.
+
 ## 0.38.52 — Second Gemini-gap: gate-inventory table + per-finding Test Results (2026-09-12)
 
 Surveyed five more Antigravity report screenshots

package/README.md

@@ -157,7 +157,8 @@ quietly inventing an unbounded backlog.
 ```text
 /list "fix the cache. Done when: tests pass"
 /list plan.md                              # import a checklist or plan file
-/list                                     # show active and waiting items
+/list                                     # interview + Confirm for a context draft
+/list show                                # show active and waiting items
 /list start                                # activate the queued head, or draft one clear recent request
 /list next                                 # explicitly skip/activate the next item
 /list next <n>                             # explicitly choose a specific item
@@ -167,6 +168,13 @@ quietly inventing an unbounded backlog.
 /list cancel                               # stop the active item and drop waiting items
 ```
 
+A pasted multi-line, bulleted, numbered, or checklist-style list keeps its
+item wording and boundaries; GLLA does not ask for an “exact or refined” choice.
+Only a genuinely ambiguous individual item needs clarification. The packaged
+`skills/glla-delegate/SKILL.md` records the safe normal-chat delegation path:
+explicit queue requests may use `list_add`, while discovered follow-ups are
+offered first and durable goals remain Confirm-gated.
+
 Order is the default, not the law. Automatic advance normally uses the head of
 the queue, while `/list next <n>` or the agent's `list_activate` tool can choose
 another item. Numbering always matches `/list` output. After a list item is

package/docs/INDEX.md

@@ -16,7 +16,7 @@ Policy contracts and recent changes live in the `audit/` directory of the
   failback; v0.35.9 hardened cross-version npm tarball checks; v0.35.10
   handles multi-entry npm dry-run reports; v0.35.11 accepts both npm report
   shapes; v0.35.12 supports npm 12's keyed pack reports; v0.35.13 fixes stale-API recovery loops.
-  v0.35.14–v0.38.52 continue through the supervisor freeze (`/glla pause`),
+  v0.35.14–v0.38.53 continue through the supervisor freeze (`/glla pause`),
   load hold, auditor picker parity, Windows launch fix, zombie-watchdog
   subagent carve-out, due-wait backstop, the `/glla agents` visibility panel,
   durable state-root selection, blank-until-resume auditor context, frozen
@@ -25,7 +25,8 @@ Policy contracts and recent changes live in the `audit/` directory of the
   extensions, bounded zero-stream retry containment, crash-safe persistence,
   packed-artifact release verification, and the 2026-09-07 display/lifecycle/
   settings audit pass (abort-latch send guards, ownership compare-and-swap,
-  auditor inherit/clear parity) and the v0.38.25 post-objective summary
+  auditor inherit/clear parity), the v0.38.53 consent-safe `glla-delegate`
+  skill/list-drafting release, and the v0.38.25 post-objective summary
   (canonical approval render, persist + replay, audit-goal counts line), the v0.38.27 selective port of PRs #45/#46 (`/loop pause` soft-hold, widget subtask count), the v0.38.28 provenance-row closure fix, and the v0.38.29 compact active-card recovery/judgment projection; see CHANGELOG.md for the full trail.
 - `../README.md`: what the plugin is, install, quickstart, and the
   architectural guarantee (drafting + confirm + detached auditor).
@@ -37,6 +38,7 @@ Policy contracts and recent changes live in the `audit/` directory of the
 - `../README.md`: what the plugin is, install, quickstart
 - `SETTINGS.md`: canonical settings reference (files, precedence, every key)
 - `../INSTALL.md`: source install / local development setup
+- `../skills/glla-delegate/SKILL.md`: normal-chat goal/list delegation and consent ladder
 - `../CHANGELOG.md`: user-facing changelog; the first versioned heading is
   the current released package version (use `/glla version` to compare with
   the registry); post-release work may appear in `Unreleased` above it.

package/extensions/loops/goal-list-queue.ts

@@ -860,7 +860,7 @@ async function startDrafting(ctx: ExtensionContext, target: "goal" | "list" | "l
   // concatenation produced "…regular draft.Goal drafting — deep planning: …".
   const seededHint = (planNote ? `${planNote} ` : "") + (
     target === "list"
-      ? `${label}: free-text is valid without a "Done when:" clause — the agent will turn it into short list items and grill for concrete per-item contracts (nothing activates until you confirm). To skip drafting, include a per-item "Done when:" clause.`
+      ? `${label}: free-text is valid without a "Done when:" clause — the agent will turn it into short list items and grill for concrete per-item contracts (nothing activates until you confirm). If the seed is already a pasted multi-line, bulleted, numbered, or checklist-style list, use its wording and structure as supplied; do not ask whether it should be exact or refined. To skip drafting, include a per-item "Done when:" clause.`
       : target === "loop"
         ? `${label}: a loop target needs a metric and a direction — the agent will help you design them first (nothing activates until you confirm). Skip the interview entirely: /loop start "<target>" (bare = infinite metricless) or /loop start "<target>" measure="<cmd>" direction=min|max [window=5] [max=50] [time=h] [tokens=n] [branch=1].`
         : `${label}: the objective has no "Done when:" clause — the agent will grill you about it first (nothing activates until you confirm). Skip the interview entirely: /goal start <objective>.`);
@@ -877,7 +877,10 @@ async function startDrafting(ctx: ExtensionContext, target: "goal" | "list" | "l
           "for the big version. When the user has many items to enqueue at once ('queue these 50 audits'), propose them ALL AT " +
           "ONCE with the items[] parameter — one Confirm for the whole batch, never 50 separate proposals. Each items[] entry " +
           "is still a SHORT task — never an aggregate wrapper ('land all N findings' with a '≥N commits' contract is the " +
-          "canonical anti-pattern: the auto-committer squashes, the count fails, the auditor disapproves finished work).]",
+          "canonical anti-pattern: the auto-committer squashes, the count fails, the auditor disapproves finished work). " +
+          "For a pasted multi-line, bulleted, numbered, or checklist-style seed, preserve the supplied wording and structure, " +
+          "strip only import syntax and empty headings/lines, and propose items[] directly — do not ask whether it should be exact " +
+          "or refined; clarify only a genuinely ambiguous individual item.]",
       );
   }
   // v0.14.0: the LLM grills (its strength — v0.13.0's canned questionnaire

package/extensions/loops/goal-tools.ts

@@ -2440,17 +2440,26 @@ function registerAgentTools(pi: any): void {
         // v0.23.7: show ALL items in full — the user approves the whole
         // batch; hidden items would be approved blind.
         const preview = p.items.map((t, i) => `  ${i + 1}. ${t}`).join("\n");
-        const batchActivates = !state.goal || state.goal.status === "complete" || state.goal.status === "aborted";
+        const startsFromEmpty = !state.goal || state.goal.status === "complete" || state.goal.status === "aborted";
+        const replacesPaused = state.goal?.status === "paused";
+        const batchActivates = startsFromEmpty || replacesPaused;
+        const activationNote = startsFromEmpty
+          ? listQueue().length > 0
+            ? "\n\n(Confirming starts the current list head immediately.)"
+            : "\n\n(List is empty — confirming ACTIVATES the first proposed item immediately as the active goal.)"
+          : replacesPaused
+            ? "\n\n(A paused objective is held — confirming resolves that carryover and ACTIVATES the current list head. Reject if you only wanted to queue these items.)"
+            : "";
         let batchConfirmed = false;
         if (autoAccept) {
           batchConfirmed = true;
-          liveCtx.ui.notify(`List batch auto-accepted (Auto-accept drafts = on in /glla settings): ${p.items.length} items${batchActivates ? " — item 1 ACTIVATES now" : ""}.`, "info");
+          liveCtx.ui.notify(`List batch auto-accepted (Auto-accept drafts = on in /glla settings): ${p.items.length} items${batchActivates ? " — the list head ACTIVATES now" : ""}.`, "info");
           appendLedger(liveCtx.cwd, "draft_autoaccepted", { kind: "batch", count: p.items.length });
         } else {
           const c = await confirmDraft(
             liveCtx,
             "Confirm list batch",
-            `${p.items.length} items:\n${preview}${batchActivates ? "\n\n(List is empty — confirming ACTIVATES item 1 immediately as the active goal.)" : ""}`,
+            `${p.items.length} items:\n${preview}${activationNote}`,
           );
           const afterConfirm = freshCtxForGeneration(draftGeneration);
           if (!afterConfirm) {
@@ -2489,10 +2498,25 @@ function registerAgentTools(pi: any): void {
         }
         draftingTarget = null;
         await ((globalThis as any).restoreDrafterModel?.() ?? Promise.resolve());
-        const wasIdle = !state.goal || state.goal.status === "complete" || state.goal.status === "aborted";
+        // enqueueItems owns the empty/terminal-slot auto-start. A paused
+        // objective is different: preserve the one-confirm batch, then route
+        // promotion through the same carryover-aware choke point so the
+        // paused record is archived before the new list head starts.
+        const slotWasEmpty = !state.goal || state.goal.status === "complete" || state.goal.status === "aborted";
+        const pausedBeforeEnqueue = state.goal?.status === "paused";
         const n = enqueueItems(liveCtx, p.items, "drafted batch");
-        if (wasIdle) {
-          return { content: [{ type: "text", text: `${n} items confirmed; first activated (list was empty). Begin work now.` }], details: {} };
+        if (n === 0) {
+          return { content: [{ type: "text", text: "No new list items were queued — the proposed batch was empty after duplicate/persistence checks." }], details: {} };
+        }
+        if (pausedBeforeEnqueue && state.goal?.status === "paused") {
+          const activated = activateNextListItem(liveCtx);
+          if (activated) {
+            return { content: [{ type: "text", text: `${n} items confirmed; the list head activated after paused carryover resolution. Begin work now.` }], details: {} };
+          }
+          return { content: [{ type: "text", text: `${n} items confirmed and queued (${listQueue().length} waiting), but activation was held. The paused objective remains recoverable; retry list activation after fixing the reported issue.` }], details: {} };
+        }
+        if (slotWasEmpty && state.goal?.status === "active" && state.goal.policy === "list") {
+          return { content: [{ type: "text", text: `${n} items confirmed; the first list item activated. Begin work now.` }], details: {} };
         }
         return { content: [{ type: "text", text: `${n} items confirmed and added to the list (${listQueue().length} waiting).` }], details: {} };
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-goal-list-loop-audit",
-  "version": "0.38.52",
+  "version": "0.38.53",
   "description": "Mission control for autonomous pi: interview-drafted goals, an audited task queue, and forever-loops (metric, spec, project-audit) that run for hours. A detached extension-less auditor process re-verifies every completion with raw evidence without holding the main pi turn; confirmed drafts, decision pauses and consent gates keep you in charge.",
   "license": "AGPL-3.0-only",
   "author": "dracon",
@@ -29,6 +29,7 @@
   },
   "files": [
     "extensions",
+    "skills",
     "prompts",
     "schemas",
     "scripts",
@@ -45,6 +46,9 @@
   "pi": {
     "extensions": [
       "extensions/loops/goal.ts"
+    ],
+    "skills": [
+      "skills/glla-delegate"
     ]
   },
   "scripts": {

package/prompts/goal-loop-draft.md

@@ -71,6 +71,17 @@ While drafting, watch the seed's shape and recommend the right mode:
 The user invoked `/goal` with no objective. Your job is to turn their vague
 request into a **confirmed goal contract**. Do NOT start substantive work yet.
 
+## Pasted list seeds
+
+When this prompt is being used for `/list` and the user supplies a multi-line,
+bulleted, numbered, or checklist-style seed, use its structure and wording as
+provided. Strip only import syntax and empty headings/lines, then propose the
+resulting items together through `items[]`. Do not ask whether the user wants
+the list exact or refined: there is no such choice. Clarify only a genuinely
+ambiguous individual item; never turn a complete pasted list into a
+meta-choice. A direct user request to add such a list may use the normal
+bulk-enqueue path instead of drafting.
+
 ## Protocol
 
 1. If the request is vague, ask ONE focused question at a time. Offer a

package/prompts/goal-loop-plan.md

@@ -49,6 +49,16 @@ confirms.
    earn its place — decisions, constraints, and checkable outcomes only.
    Do not pad with boilerplate the user did not ask for.
 
+## Pasted list seeds
+
+When plan mode is used for `/list` and the user supplies a multi-line,
+bulleted, numbered, or checklist-style seed, preserve its item boundaries and
+wording as supplied. Normalize only import syntax and empty headings/lines;
+do not ask whether the list should be exact or refined. Clarify only a
+genuinely ambiguous individual item, never turn a complete pasted list into a
+meta-choice. Research may deepen contracts and verification, but it must not
+rewrite a clear pasted list merely to make it sound more polished.
+
 ## Hard rules (unchanged from regular drafting)
 
 - Do NOT start implementing during planning. Research is read-only.

package/scripts/release-pack-smoke.mjs

@@ -49,6 +49,7 @@ try {
     "scripts/goal-auditor-launch.mjs",
     "scripts/goal-auditor-worker.mjs",
     "scripts/release-pack-smoke.mjs",
+    "skills/glla-delegate/SKILL.md",
   ];
   const listing = run("tar", ["-tzf", tarball]);
   for (const file of required) {

package/skills/glla-delegate/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: glla-delegate
+description: "Use GLLA's audited goals and list queue from normal chat: queue explicit work, offer follow-ups before adding them, or draft a confirmed goal. Includes safe handling for pasted list-like input."
+---
+
+# GLLA delegation
+
+GLLA is not a scratch task list. A queued item becomes an audited goal, and
+when the queue is idle its first item may activate immediately. Use these
+tools in the main session only:
+
+- `list_status` is read-only and safe for inspection.
+- If the user explicitly asks to queue, add, backlog, or list work, call
+  `list_add` with the requested items. Do not turn a direct queue request
+  into an unnecessary interview.
+- If you discover a useful follow-up while doing other work, finish the
+  current request and offer to queue it first. Queue it without another
+  question only when the user has given standing permission such as
+  “queue follow-ups as you find them.”
+- If one durable, multi-hour objective is warranted, interview only what is
+  genuinely unknown, then call `propose_goal_draft`; the user's Confirm
+  dialog is the activation gate. Never activate a speculative raw seed.
+- Never call `list_activate` for an item the user has not selected or clearly
+  authorized. Never control `/loop` bounds, metrics, or stopping on the
+  user's behalf.
+
+## Pasted list-like input
+
+When the user supplies a multi-line, bulleted, numbered, or checklist-style
+list and asks to use or add it, use the structure and wording as supplied.
+Strip only import syntax and empty headings/lines, then pass the resulting
+items in one `list_add` call. Do **not** ask whether the user wants the list
+“exact” or “refined”; there is no such choice. Clarify only a genuinely
+ambiguous individual item, never turn a complete pasted list into a
+meta-choice.
+
+If a `/list` drafting session is already active, do not bypass its Confirm
+gate with `list_add`: pass the complete pasted set once as `items[]` to
+`propose_goal_draft` instead. This keeps one confirmation for the whole
+batch and prevents partial activation.
+
+Use the tools, not slash-command text, when acting. Worker and subagent
+sessions do not own GLLA state; respect a foreign-session refusal instead of
+routing around it.