pi-goal-list-loop-audit 0.38.95 → 0.38.96

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.38.96 — /glla resume + /loop resume release the load hold before probing (2026-09-23)
+
+- Field: a deterministic-400 manual hold cold-loaded (load hold engaged), then `/glla resume` consumed the manual hold and the goal stayed parked — the fired recovery probe died silently on the `supervisorPaused` gate, which includes `loadHoldAt`. No probe, no timer, stale resume text. `/glla resume` and `/loop resume` now release the cold-load hold at entry like `/goal resume` and agent-resume already do (audit/GLLA-RESUME-LOAD-HOLD-2026-09-23.md). Workaround on 0.38.95: run `/goal resume`.
+
 ## 0.38.95 — Stop the pause cycles: image-count clamp, ledger dedupe (2026-09-23)
 
 - The payload guard now clamps image blocks per request (default 4, the observed provider limit) as well as bytes — small screenshots fit the byte budget but 400'd on count (field 2026-09-21: `Image count 12 exceeds limit 4`). Oldest-first, keep-recent floor wins on conflict; eviction entries carry the remaining count (audit/PAUSES-2026-09-22.md).

package/docs/INDEX.md

@@ -16,7 +16,7 @@ Policy contracts and recent changes live in the `audit/` directory of the
   failback; v0.35.9 hardened cross-version npm tarball checks; v0.35.10
   handles multi-entry npm dry-run reports; v0.35.11 accepts both npm report
   shapes; v0.35.12 supports npm 12's keyed pack reports; v0.35.13 fixes stale-API recovery loops.
-  v0.35.14–v0.38.95 continue through the supervisor freeze (`/glla pause`),
+  v0.35.14–v0.38.96 continue through the supervisor freeze (`/glla pause`),
   load hold, auditor picker parity, Windows launch fix, zombie-watchdog
   subagent carve-out, due-wait backstop, the `/glla agents` visibility panel,
   durable state-root selection, blank-until-resume auditor context, frozen

package/extensions/goal-commands.ts

@@ -2481,6 +2481,16 @@ async function cmdGllaResume(ctx: ExtensionContext): Promise<void> {
     appendLedger(ctx.cwd, "supervisor_resume", { frozenMs });
     ctx.ui.notify(`Supervisor RESUMED after ${fmtElapsed(frozenMs)} — heartbeat re-arms, recovery probes, auto-resume, continuation dispatch, and auditor quiet notifies are live again.`, "info");
   }
+  // v0.38.96 (field 2026-09-23, dracon-utilities): /glla resume carries the
+  // same consent semantics as /goal resume, so it must release the cold-load
+  // hold too — otherwise manuallyResumeMainModelRecovery consumes the manual
+  // hold and its probe dies silently on the supervisorPaused gate (which
+  // includes loadHoldAt): no probe, no timer, goal still parked.
+  if (clearLoadHold(state)) {
+    persistState(ctx);
+    appendLedger(ctx.cwd, "load_hold_released", { via: "glla-resume" });
+    ctx.ui.notify("Load hold released — automation is live again.", "info");
+  }
   if (manuallyResumeMainModelRecovery(ctx)) return;
   if (state.mainModelRecovery?.retryAt || state.mainModelRecovery?.pendingModelSwitch) {
     clearMainModelRecoveryTimer();

package/extensions/goal-loop.ts

@@ -1015,6 +1015,14 @@ async function cmdLoop(args: string, ctx: ExtensionContext): Promise<void> {
 
   if (!sub || sub === "resume") {
     releaseInitialSessionLoadBarrier();
+    // v0.38.96 (field 2026-09-23): same release the held-loop path does
+    // below, but at entry — the recovery branches return before it, and a
+    // manual-resume probe fired under a load hold dies silently on the
+    // supervisorPaused gate (hold consumed, loop still held, nothing armed).
+    if (clearLoadHold(state)) {
+      persistState(ctx);
+      appendLedger(ctx.cwd, "load_hold_released", { via: "loop-resume" });
+    }
     if (state.mainModelRecovery?.manualResumeRequired && state.mainModelRecovery.kind === "loop") {
       manuallyResumeMainModelRecovery(ctx);
       return;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-goal-list-loop-audit",
-	"version": "0.38.95",
+	"version": "0.38.96",
 	"description": "Mission control for long running pi work: interview drafted goals, an audited task queue, and metric or audit loops that run for hours. Every completion is rechecked by a detached auditor with raw evidence, while Confirm drafts, decision pauses, and consent gates keep you in charge.",
 	"license": "AGPL-3.0-only",
 	"author": "dracon",