@llblab/pi-actors 0.37.1 → 0.38.1

package/lib/recipes-discovery.ts

@@ -4,12 +4,14 @@
  * Owns filename identity discovery across prioritized recipe roots
  */
 
+import { execFileSync } from "node:child_process";
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { join } from "node:path";
 
 import * as CommandTemplates from "./command-templates.ts";
 import type { RegisteredTool } from "./config.ts";
+import * as ModelContext from "./model-context.ts";
 import type { TemplateRecipeConfig } from "./recipes-references.ts";
 import * as RecipesReferences from "./recipes-references.ts";
 import * as Schema from "./schema.ts";
@@ -233,6 +235,61 @@ function filesForSource(source: RecipesDiscoverySource): Array<{
     : [];
 }
 
+const WINDOWS_BROAD_WRITE_PRINCIPALS = [
+  "Everyone",
+  "BUILTIN\\Users",
+  "Authenticated Users",
+  "S-1-1-0",
+  "S-1-5-11",
+  "S-1-5-32-545",
+];
+
+const WINDOWS_WRITE_ACL_PATTERN = /\((?:[^)]*,)?(?:F|M|W|WD|AD|DC|GA|GW)(?:,[^)]*)?\)/i;
+
+export function hasBroadWindowsWriteAcl(icaclsOutput: string): boolean {
+  return icaclsOutput
+    .split(/\r?\n/)
+    .some((line) =>
+      WINDOWS_BROAD_WRITE_PRINCIPALS.some((principal) =>
+        line.includes(principal),
+      ) && WINDOWS_WRITE_ACL_PATTERN.test(line),
+    );
+}
+
+function getWindowsRecipeRootDiagnostics(root: string): string[] {
+  try {
+    const output = execFileSync("icacls", [root], {
+      encoding: "utf8",
+      windowsHide: true,
+      timeout: 5000,
+    });
+    if (!hasBroadWindowsWriteAcl(output)) return [];
+    return [
+      `Recipe root grants write access to broad Windows principals; review ACLs: ${root}`,
+    ];
+  } catch (error) {
+    return [
+      `Failed to inspect Windows ACL for recipe root ${root}: ${error instanceof Error ? error.message : String(error)}`,
+    ];
+  }
+}
+
+function getPosixRecipeRootDiagnostics(root: string): string[] {
+  const diagnostics: string[] = [];
+  const stat = statSync(root);
+  if ((stat.mode & 0o002) !== 0) {
+    diagnostics.push(
+      `Recipe root is world-writable; review permissions: ${root}`,
+    );
+  }
+  if ((stat.mode & 0o020) !== 0) {
+    diagnostics.push(
+      `Recipe root is group-writable; review ownership and permissions: ${root}`,
+    );
+  }
+  return diagnostics;
+}
+
 function getRecipeRootDiagnostics(sources: RecipesDiscoverySource[]): string[] {
   const diagnostics: string[] = [];
   const roots = new Set(
@@ -243,17 +300,11 @@ function getRecipeRootDiagnostics(sources: RecipesDiscoverySource[]): string[] {
   for (const root of roots) {
     try {
       if (!existsSync(root)) continue;
-      const stat = statSync(root);
-      if ((stat.mode & 0o002) !== 0) {
-        diagnostics.push(
-          `Recipe root is world-writable; review permissions: ${root}`,
-        );
-      }
-      if ((stat.mode & 0o020) !== 0) {
-        diagnostics.push(
-          `Recipe root is group-writable; review ownership and permissions: ${root}`,
-        );
-      }
+      diagnostics.push(
+        ...(process.platform === "win32"
+          ? getWindowsRecipeRootDiagnostics(root)
+          : getPosixRecipeRootDiagnostics(root)),
+      );
     } catch (error) {
       diagnostics.push(
         `Failed to inspect recipe root ${root}: ${error instanceof Error ? error.message : String(error)}`,
@@ -701,6 +752,20 @@ export function summarizeDiscovery(
         invalid: entry.invalid,
         shadows: entry.shadows,
         ...(entry.riskLabels.length ? { risk_labels: entry.riskLabels } : {}),
+        ...(entry.config &&
+        ModelContext.describeRecipeCurrentPolicy({
+          args: entry.config.args,
+          defaults: entry.config.defaults,
+          template: entry.config.template,
+        })
+          ? {
+              current_policy: ModelContext.describeRecipeCurrentPolicy({
+                args: entry.config.args,
+                defaults: entry.config.defaults,
+                template: entry.config.template,
+              }),
+            }
+          : {}),
         ...(entry.config?.imports ? { imports: entry.config.imports } : {}),
         ...(recipeUsage(entry.config)
           ? { usage: recipeUsage(entry.config) }

package/lib/recipes-references.ts

@@ -52,6 +52,8 @@ export interface TemplateRecipeDefinition {
   args?: string[];
   defaults?: Record<string, unknown>;
   parallel?: boolean;
+  concurrency?: number | string;
+  min_successful?: number | string;
   label?: string;
   when?: boolean | string;
   timeout?: number | string;
@@ -255,6 +257,8 @@ function getRecipeCommandTemplate(
     "args",
     "defaults",
     "parallel",
+    "concurrency",
+    "min_successful",
     "label",
     "when",
     "timeout",
@@ -1013,6 +1017,14 @@ export function readResolvedRecipeConfig(
     ...(typeof substituted.parallel === "boolean"
       ? { parallel: substituted.parallel }
       : {}),
+    ...(typeof substituted.concurrency === "number" ||
+    typeof substituted.concurrency === "string"
+      ? { concurrency: substituted.concurrency }
+      : {}),
+    ...(typeof substituted.min_successful === "number" ||
+    typeof substituted.min_successful === "string"
+      ? { min_successful: substituted.min_successful }
+      : {}),
     ...(typeof substituted.label === "string"
       ? { label: substituted.label }
       : {}),

package/lib/tools-local.ts

@@ -7,6 +7,7 @@
 import * as Rooms from "./rooms.ts";
 import * as AsyncRuns from "./async-runs.ts";
 import * as CommandTemplates from "./command-templates.ts";
+import * as ModelContext from "./model-context.ts";
 import type { RegisteredTool } from "./config.ts";
 import * as Execution from "./execution.ts";
 import * as Prompts from "./prompts.ts";
@@ -17,7 +18,7 @@ import * as ToolsResponse from "./tools-response.ts";
 
 type JsonSchema = Schema.JsonSchema;
 
-export interface RuntimeToolContext {
+export interface RuntimeToolContext extends ModelContext.CurrentModelContext {
   cwd: string;
   sessionManager?: { getSessionId?: () => string };
 }
@@ -178,8 +179,15 @@ export function createRuntimeToolDefinition(
               ownerId: getRunOwnerId(ctx),
               run_id: runId,
               tool: cfg.name,
+              policy_values: ModelContext.withCurrentModelValues(
+                { ...(cfg.recipe?.values ?? {}), ...values },
+                ctx,
+              ),
               values: Schema.normalizeRuntimeValues(
-                { ...(cfg.recipe?.values ?? {}), ...cfg.defaults, ...values },
+                ModelContext.withCurrentModelValues(
+                  { ...(cfg.recipe?.values ?? {}), ...cfg.defaults, ...values },
+                  ctx,
+                ),
                 cfg.argTypes,
               ),
             },
@@ -198,11 +206,14 @@ export function createRuntimeToolDefinition(
           };
         }
         if (isRecipe && recipeTemplate) {
-          const paramsWithDefaults = {
-            ...(cfg.recipe?.values ?? {}),
-            ...cfg.defaults,
-            ...(params as Record<string, unknown>),
-          };
+          const paramsWithDefaults = ModelContext.withCurrentModelValues(
+            {
+              ...(cfg.recipe?.values ?? {}),
+              ...cfg.defaults,
+              ...(params as Record<string, unknown>),
+            },
+            ctx,
+          );
           return await Execution.executeRegisteredTool(
             { ...cfg, template: recipeTemplate },
             Schema.normalizeRuntimeValues(paramsWithDefaults, cfg.argTypes),
@@ -214,7 +225,10 @@ export function createRuntimeToolDefinition(
         return await Execution.executeRegisteredTool(
           cfg,
           Schema.normalizeRuntimeValues(
-            params as Record<string, unknown>,
+            ModelContext.withCurrentModelValues(
+              params as Record<string, unknown>,
+              ctx,
+            ),
             cfg.argTypes,
           ),
           exec,

package/lib/tools-response.ts

@@ -40,6 +40,25 @@ function formatFailureCount(value: unknown): number | undefined {
   return Array.isArray(value) ? value.length : undefined;
 }
 
+function compactPolicyAxis(label: string, value: unknown): string | undefined {
+  const axis = asRecord(value);
+  const source = typeof axis.source === "string" ? axis.source : undefined;
+  if (!source || source === "unused") return undefined;
+  const renderedValue =
+    typeof axis.value === "string" && axis.value.trim()
+      ? `:${axis.value.trim()}`
+      : "";
+  return `${label}=${source}${renderedValue}`;
+}
+
+function compactModelPolicy(value: unknown): string[] {
+  const policy = asRecord(value);
+  return [
+    compactPolicyAxis("model", policy.model),
+    compactPolicyAxis("thinking", policy.thinking),
+  ].filter((token): token is string => Boolean(token));
+}
+
 export function actorRunNextActions(run: unknown): string[] {
   const id = String(run ?? "").trim();
   if (!id) return [];
@@ -56,6 +75,7 @@ export function compactAsyncRunStatus(value: unknown): string {
   const result = asRecord(status.result);
   const run = String(status.run ?? "<unknown>");
   const tokens = [`run=${run}`, `status=${String(status.status ?? "unknown")}`];
+  tokens.push(...compactModelPolicy(status.model_policy ?? progress.model_policy));
   if (status.tool) tokens.push(`tool=${String(status.tool)}`);
   if (status.recipe) tokens.push(`recipe=${String(status.recipe)}`);
   if (status.retire_when)
@@ -272,10 +292,15 @@ export function compactRecipeRegistry(
   const recommendations = Array.isArray(summary.recommendations)
     ? summary.recommendations.length
     : 0;
+  const currentPolicy = Array.isArray(summary.active)
+    ? (summary.active as Array<Record<string, unknown>>).filter(
+        (entry) => entry.current_policy,
+      ).length
+    : 0;
   const nextActions = Array.isArray(summary.next_actions)
     ? (summary.next_actions as string[])
     : [];
-  return `\nrecipes active=${active} drafts=${drafts} shadowed=${shadowed} invalid=${invalid} disabled=${disabled} recommendations=${recommendations} diagnostics=${diagnostics}${compactNextActions(nextActions)}`;
+  return `\nrecipes active=${active} drafts=${drafts} shadowed=${shadowed} invalid=${invalid} disabled=${disabled} current_policy=${currentPolicy} recommendations=${recommendations} diagnostics=${diagnostics}${compactNextActions(nextActions)}`;
 }
 
 export const DEFAULT_INSPECT_LINES = Limits.DEFAULT_INSPECT_LINES;

package/lib/tools-spawn.ts

@@ -9,13 +9,14 @@ import { join } from "node:path";
 
 import * as AsyncRuns from "./async-runs.ts";
 import * as Messages from "./messages.ts";
+import * as ModelContext from "./model-context.ts";
 import * as Paths from "./paths.ts";
 import * as RecipesDiscovery from "./recipes-discovery.ts";
 import * as Rooms from "./rooms.ts";
 import * as Schema from "./schema.ts";
 import * as ToolsResponse from "./tools-response.ts";
 
-export interface SpawnToolContext {
+export interface SpawnToolContext extends ModelContext.CurrentModelContext {
   cwd: string;
   sessionManager?: { getSessionId?: () => string };
 }
@@ -196,7 +197,10 @@ export function createSpawnToolDefinition<
                     input.template as AsyncRuns.AsyncRunStartParams["template"],
                 }
               : {}),
-            values: asRecord(input.values),
+            values: ModelContext.withCurrentModelValues(
+              asRecord(input.values),
+              ctx,
+            ),
             ...(input.artifacts &&
             typeof input.artifacts === "object" &&
             !Array.isArray(input.artifacts)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llblab/pi-actors",
-  "version": "0.37.1",
+  "version": "0.38.1",
   "private": false,
   "description": "Local Actor Kernel for Pi",
   "keywords": [

package/recipes/lens-swarm.json

@@ -10,6 +10,10 @@
     "model:string",
     "thinking:string",
     "tools:string",
+    "subagent_ttl_ms:int",
+    "reviewer_concurrency:string",
+    "min_successful_reviewers:int",
+    "merge_policy:string",
     "claim:string",
     "evidence_policy:string",
     "risk_policy:string",
@@ -21,12 +25,17 @@
       "architecture",
       "operator UX"
     ],
-    "thinking": "off",
+    "model": "{current_model}",
+    "thinking": "{current_thinking}",
     "tools": "",
+    "subagent_ttl_ms": 600000,
+    "reviewer_concurrency": "",
+    "min_successful_reviewers": 1,
+    "merge_policy": "Preserve partial reviewer reports, branch status, and degraded confidence markers. If reviewer evidence is below threshold, do not invent consensus.",
     "claim": "The reviewed scope has clear, evidence-based findings, risks, and recommended next actions.",
     "evidence_policy": "Cite inspected files, command outputs, or explicit uncertainty for every material claim.",
     "risk_policy": "Preserve minority high-impact risks and ideas; separate confirmed issues from hypotheses.",
-    "output_format": "Markdown sections: Summary, Consensus Findings, Minority Findings, Verification, Judge Notes, Risks, Next Actions."
+    "output_format": "Markdown sections: Status (complete/degraded/insufficient_data), Summary, Consensus Findings, Minority Findings, Verification, Judge Notes, Risks, Next Actions."
   },
   "mailbox": {
     "accepts": [
@@ -55,6 +64,10 @@
         "judge_model": "{model}",
         "thinking": "{thinking}",
         "tools": "{tools}",
+        "subagent_ttl_ms": "{subagent_ttl_ms}",
+        "reviewer_concurrency": "{reviewer_concurrency}",
+        "min_successful_reviewers": "{min_successful_reviewers}",
+        "merge_policy": "{merge_policy}",
         "evidence_policy": "{evidence_policy}",
         "risk_policy": "{risk_policy}",
         "output_format": "{output_format}"

package/recipes/pipeline-release-readiness.json

@@ -20,7 +20,12 @@
     "verifier_model:string",
     "merger_model:string",
     "judge_model:string",
-    "tools:string"
+    "thinking:string",
+    "tools:string",
+    "subagent_ttl_ms:int",
+    "reviewer_concurrency:string",
+    "min_successful_reviewers:int",
+    "merge_policy:string"
   ],
   "defaults": {
     "scope": ".",
@@ -36,7 +41,16 @@
       "documentation",
       "packaged skills"
     ],
-    "tools": ""
+    "reviewer_model": "{current_model}",
+    "verifier_model": "{current_model}",
+    "merger_model": "{current_model}",
+    "judge_model": "{current_model}",
+    "thinking": "{current_thinking}",
+    "tools": "",
+    "subagent_ttl_ms": 600000,
+    "reviewer_concurrency": "",
+    "min_successful_reviewers": 1,
+    "merge_policy": "Preserve partial reviewer reports, branch status, and degraded confidence markers. If reviewer evidence is below threshold, do not invent consensus."
   },
   "mailbox": {
     "accepts": [
@@ -90,8 +104,13 @@
         "verifier_model": "{verifier_model}",
         "merger_model": "{merger_model}",
         "judge_model": "{judge_model}",
+        "thinking": "{thinking}",
         "tools": "{tools}",
-        "output_format": "Markdown sections: Release Verdict, Blocking Issues, Package/Docs Risks, Validation Evidence, Publish Notes, Required Follow-up."
+        "subagent_ttl_ms": "{subagent_ttl_ms}",
+        "reviewer_concurrency": "{reviewer_concurrency}",
+        "min_successful_reviewers": "{min_successful_reviewers}",
+        "merge_policy": "{merge_policy}",
+        "output_format": "Markdown sections: Status (complete/degraded/insufficient_data), Release Verdict, Blocking Issues, Package/Docs Risks, Validation Evidence, Publish Notes, Required Follow-up."
       }
     },
     {

package/recipes/pipeline-review-readiness.json

@@ -11,7 +11,12 @@
     "verifier_model:string",
     "merger_model:string",
     "judge_model:string",
-    "tools:string"
+    "thinking:string",
+    "tools:string",
+    "subagent_ttl_ms:int",
+    "reviewer_concurrency:string",
+    "min_successful_reviewers:int",
+    "merge_policy:string"
   ],
   "defaults": {
     "lenses": [
@@ -21,7 +26,16 @@
       "operator UX"
     ],
     "release_gate": "The scope is safe to ship or hand to the next release step.",
-    "tools": ""
+    "reviewer_model": "{current_model}",
+    "verifier_model": "{current_model}",
+    "merger_model": "{current_model}",
+    "judge_model": "{current_model}",
+    "thinking": "{current_thinking}",
+    "tools": "",
+    "subagent_ttl_ms": 600000,
+    "reviewer_concurrency": "",
+    "min_successful_reviewers": 1,
+    "merge_policy": "Preserve partial reviewer reports, branch status, and degraded confidence markers. If reviewer evidence is below threshold, do not invent consensus."
   },
   "mailbox": {
     "accepts": [
@@ -45,8 +59,13 @@
       "verifier_model": "{verifier_model}",
       "merger_model": "{merger_model}",
       "judge_model": "{judge_model}",
+      "thinking": "{thinking}",
       "tools": "{tools}",
-      "output_format": "Markdown sections: Ship Verdict, Blocking Findings, Nonblocking Risks, Evidence, Required Follow-up."
+      "subagent_ttl_ms": "{subagent_ttl_ms}",
+      "reviewer_concurrency": "{reviewer_concurrency}",
+      "min_successful_reviewers": "{min_successful_reviewers}",
+      "merge_policy": "{merge_policy}",
+      "output_format": "Markdown sections: Status (complete/degraded/insufficient_data), Ship Verdict, Blocking Findings, Nonblocking Risks, Evidence, Required Follow-up."
     }
   }
 }

package/recipes/subagent-judge.json

@@ -13,7 +13,8 @@
     "rubric": "Judge evidence preservation, severity calibration, consensus purity, internal consistency, and merge bias.",
     "evidence": "Use the provided raw outputs or artifact paths; mark any missing evidence.",
     "output_format": "Markdown sections: Verdict, Issues, Evidence Preservation, Bias Risks, Required Fixes.",
-    "thinking": "medium",
+    "model": "{current_model}",
+    "thinking": "{current_thinking}",
     "tools": ""
   },
   "mailbox": {

package/recipes/subagent-merge.json

@@ -3,6 +3,7 @@
   "args": [
     "inputs:string",
     "mode:enum(consensus-first,risk-first)",
+    "merge_policy:string",
     "risk_policy:string",
     "output_format:string",
     "model:string",
@@ -11,9 +12,11 @@
   ],
   "defaults": {
     "mode": "consensus-first",
+    "merge_policy": "Preserve partial reviewer evidence, branch status, and degraded confidence markers.",
     "risk_policy": "Preserve minority severe findings and mark merger-added claims explicitly.",
     "output_format": "Markdown sections: Summary, Consensus, Minority Findings, Contradictions, Next Actions.",
-    "thinking": "medium",
+    "model": "{current_model}",
+    "thinking": "{current_thinking}",
     "tools": ""
   },
   "mailbox": {
@@ -27,5 +30,5 @@
       "run.failed"
     ]
   },
-  "template": "pi -p --model {model} --thinking {thinking} {tools?--tools:--no-tools} {tools} Merge these subagent outputs using mode {mode}: {inputs}. Risk policy: {risk_policy}. Output format: {output_format}"
+  "template": "pi -p --model {model} --thinking {thinking} {tools?--tools:--no-tools} {tools} Merge these subagent outputs using mode {mode}: {inputs}. Merge policy: {merge_policy}. Risk policy: {risk_policy}. Output format: {output_format}"
 }

package/recipes/subagent-normalize.json

@@ -11,7 +11,8 @@
   "defaults": {
     "format": "Markdown sections: Summary, Findings, Evidence, Risks, Next Actions.",
     "preservation_policy": "Do not change meaning, severity, evidence, or uncertainty while normalizing.",
-    "thinking": "off",
+    "model": "{current_model}",
+    "thinking": "{current_thinking}",
     "tools": ""
   },
   "mailbox": {

package/recipes/subagent-preflight.json

@@ -0,0 +1,29 @@
+{
+  "async": true,
+  "args": [
+    "stage:string",
+    "model:string",
+    "thinking:string",
+    "tools:string",
+    "output_format:string"
+  ],
+  "defaults": {
+    "stage": "subagent",
+    "model": "{current_model}",
+    "thinking": "{current_thinking}",
+    "tools": "",
+    "output_format": "Reply exactly: ACTOR_PREFLIGHT_OK"
+  },
+  "mailbox": {
+    "accepts": [
+      "control.kill"
+    ],
+    "emits": [
+      "preflight.completed",
+      "command.done",
+      "run.done",
+      "run.failed"
+    ]
+  },
+  "template": "pi -p --model {model} --thinking {thinking} {tools?--tools:--no-tools} {tools} Preflight check for stage {stage}. Confirm this model, thinking level, and tool policy can start before expensive fanout. Do not inspect files. {output_format}"
+}