@llblab/pi-actors 0.45.1 → 0.46.0

package/dist/lib/tools-spawn.js

@@ -9,7 +9,6 @@ import * as AsyncRuns from "./async-runs.js";
 import { withFileMutationLock } from "./file-state.js";
 import * as ModelContext from "./model-context.js";
 import * as Paths from "./paths.js";
-import * as RecipesDiscovery from "./recipes-discovery.js";
 import * as RecipesUsage from "./recipes-usage.js";
 import * as Schema from "./schema.js";
 import * as ToolsResponse from "./tools-response.js";
@@ -18,17 +17,6 @@ const maybeJsonText = ToolsResponse.maybeJsonText;
 function getRunOwnerId(ctx) {
     return ctx.sessionManager?.getSessionId?.();
 }
-function shadowedRecipeLaunchDiagnostic(recipe) {
-    if (typeof recipe !== "string" ||
-        recipe.includes("/") ||
-        recipe.includes("~"))
-        return undefined;
-    const discovery = RecipesDiscovery.discoverRecipeSources([
-        { root: Paths.getRecipeRoot(), defaultTool: true, mutableUsage: true },
-        { root: Paths.getPackagedRecipeRoot(), defaultTool: false },
-    ]);
-    return RecipesDiscovery.getShadowedLaunchDiagnostic(discovery, recipe);
-}
 function draftRecipeName(run) {
     return `${run.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "") || "spawn"}.json`;
 }
@@ -60,16 +48,6 @@ function writeSpawnDraftRecipe(input, meta) {
     RecipesUsage.recordRecipeLaunch(path, new Date(), "spawn", Paths.getRecipeRoot());
     return path;
 }
-function enhanceSpawnRecipeError(error, recipe) {
-    const diagnostic = shadowedRecipeLaunchDiagnostic(recipe);
-    if (!diagnostic)
-        return error instanceof Error ? error : new Error(String(error));
-    const original = error instanceof Error ? error.message : String(error);
-    return Object.assign(new Error(`${original} reason=${diagnostic.reason} active_path=${diagnostic.active_path} blocked_fallback=${diagnostic.blocked_fallback} hint=${diagnostic.hint}`), {
-        ...diagnostic,
-        original_error: original,
-    });
-}
 function runIdFromTarget(target) {
     if (!target)
         return undefined;
@@ -90,8 +68,8 @@ export function createSpawnToolDefinition() {
         parameters: Schema.objectSchema({
             artifacts: Schema.looseObjectSchema("Optional named artifact paths for the spawned Run."),
             as: Schema.stringSchema("Optional Run identity in exact run:<id> form."),
-            file: Schema.stringSchema("Optional template Recipe reference. Supports paths, bare user/adjacent/std names, std:<name>, and skill:<skill>/<recipe>."),
-            recipe: Schema.stringSchema("Alias for file; qualified Skill/std or ordinary Recipe reference to spawn."),
+            file: Schema.stringSchema("Optional Recipe reference as <skill>/<recipe> or an explicit .json/.md file path."),
+            recipe: Schema.stringSchema("Alias for file."),
             template: Schema.unionSchema([
                 Schema.stringSchema("Inline command template string"),
                 Schema.arraySchema("Inline command-template sequence or parallel tree"),
@@ -112,34 +90,28 @@ export function createSpawnToolDefinition() {
                 : typeof input.recipe === "string"
                     ? input.recipe
                     : undefined;
-            let meta;
-            try {
-                meta = AsyncRuns.startRun({
-                    file: recipe,
-                    launch_source: "spawn",
-                    launch_correlation: { tool_call_id: toolCallId },
-                    ownerId: getRunOwnerId(ctx),
-                    ...(input.transport_context
-                        ? { transport_context: asRecord(input.transport_context) } : {}),
-                    run_id: runId,
-                    ...(input.template !== undefined
-                        ? {
-                            template: input.template,
-                        }
-                        : {}),
-                    values: ModelContext.withCurrentModelValues(asRecord(input.values), ctx),
-                    ...(input.artifacts &&
-                        typeof input.artifacts === "object" &&
-                        !Array.isArray(input.artifacts)
-                        ? {
-                            artifacts: input.artifacts,
-                        }
-                        : {}),
-                }, ctx.cwd);
-            }
-            catch (error) {
-                throw enhanceSpawnRecipeError(error, recipe);
-            }
+            const meta = AsyncRuns.startRun({
+                file: recipe,
+                launch_source: "spawn",
+                launch_correlation: { tool_call_id: toolCallId },
+                ownerId: getRunOwnerId(ctx),
+                ...(input.transport_context
+                    ? { transport_context: asRecord(input.transport_context) } : {}),
+                run_id: runId,
+                ...(input.template !== undefined
+                    ? {
+                        template: input.template,
+                    }
+                    : {}),
+                values: ModelContext.withCurrentModelValues(asRecord(input.values), ctx),
+                ...(input.artifacts &&
+                    typeof input.artifacts === "object" &&
+                    !Array.isArray(input.artifacts)
+                    ? {
+                        artifacts: input.artifacts,
+                    }
+                    : {}),
+            }, ctx.cwd, { skillContext: ctx.activeSkillRecipeContext });
             const draftRecipe = writeSpawnDraftRecipe(input, meta);
             const nextActions = ToolsResponse.runNextActions(meta.run);
             const details = {

package/dist/scripts/build-dist.mjs

@@ -40,12 +40,21 @@ writeFileSync(
   "utf8",
 );
 
-for (const dir of ["scripts", "recipes", "fixtures", "skills"]) {
+for (const dir of ["scripts", "fixtures", "skills"]) {
   cpSync(dir, join("dist", dir), { recursive: true });
 }
 
-const builtScripts = readdirSync(join("dist", "scripts"))
-  .filter((name) => name.endsWith(".mjs"))
-  .map((name) => join("dist", "scripts", name));
+function listModuleScripts(root) {
+  return readdirSync(root, { withFileTypes: true }).flatMap((entry) => {
+    const path = join(root, entry.name);
+    if (entry.isDirectory()) return listModuleScripts(path);
+    return entry.isFile() && entry.name.endsWith(".mjs") ? [path] : [];
+  });
+}
+
+const builtScripts = [
+  ...listModuleScripts(join("dist", "scripts")),
+  ...listModuleScripts(join("dist", "skills")),
+];
 
 run(process.execPath, ["--check", ...builtScripts]);

package/dist/skills/actors/SKILL.md

@@ -29,7 +29,7 @@ A Recipe defines execution. It may declare named typed args, inline fallbacks, c
 
 Do not declare Control for ordinary one-shot work. Runtime lifecycle actions such as `kill` stay runtime-owned and must not appear in Recipe Control declarations. Imported Recipes act as local definitions inside one Run; they do not create nested Runs unless execution explicitly spawns them.
 
-Prefer maintained packaged Recipes over ad hoc wrappers. Use `std:<recipe>` for exact packaged lookup and `skill:<skill>/<recipe-path>` for a component bundled with a Pi-active Skill. File-backed Recipes own `{recipe_dir}` and Skill Recipes own `{skill_dir}`; callers never pass or override these origins. Skill Recipes are components, not automatic tools. Keep model, thinking, mission, concurrency, quorum, and timeout choices caller-owned unless a Recipe documents a stable policy.
+Prefer maintained Skill-owned Recipes over ad hoc wrappers. Skill Recipe identity is `<active Skill name>/<Recipe filename stem>`; Recipe files have no top-level `name`. `SKILL.md` `name` is Pi host metadata matching its directory, not an additional pi-actors identity field. Use `<skill>/<recipe>` for an exact direct component or an explicit `.json` / `.md` path. Entry paths resolve from invocation `cwd`; relative imports resolve from the importing Recipe directory. File-backed Recipes own `{recipe_dir}` and Skill Recipes own `{skill_dir}`; callers never pass or override these origins. Skill Recipes are components, not automatic tools. Keep model, thinking, mission, concurrency, quorum, and timeout choices caller-owned unless a Recipe documents a stable policy.
 
 ## Trace
 
@@ -90,11 +90,11 @@ If work may outlive the current turn, needs steering, produces artifacts, fans o
 
 ## Top Recipes
 
-- [Repository health](../../recipes/pipeline-repo-health.json)
-- [Quorum review](../../recipes/pipeline-quorum-review.json)
-- [Artifact bundle](../../recipes/pipeline-artifact-bundle.json)
-- [Music player service](../../recipes/music-player.json)
-- [Resource locker service](../../recipes/resource-locker.json)
+- [Repository health](../project-work/recipes/repo-health.json)
+- [Quorum review](../swarm/recipes/quorum-review.json)
+- [Artifact bundle](../artifacts/recipes/bundle.json)
+- [Music player service](../media/recipes/player.json)
+- [Resource locker service](./recipes/resource-locker.json)
 
 ## Deep References
 

package/dist/skills/actors/recipes/recipe-validate.json

@@ -0,0 +1,11 @@
+{
+  "args": [
+    "target:path",
+    "all:bool"
+  ],
+  "defaults": {
+    "target": "recipes",
+    "all": "true"
+  },
+  "template": "{skill_dir}/scripts/validate-recipe.mjs {target} {all?--all:}"
+}

package/{recipes/utility-coordinator-lock-snapshot.json → dist/skills/actors/recipes/resource-locker-snapshot.json}

@@ -1,13 +1,11 @@
 {
   "args": [
-    "repo:path",
     "state_dir:path",
     "lines:int"
   ],
   "defaults": {
-    "repo": "~/.pi/agent/extensions/pi-actors",
     "state_dir": "~/.pi/agent/tmp/pi-actors/runs/coordinator-locker",
     "lines": "20"
   },
-  "template": "{repo}/scripts/locker.mjs snapshot --state-dir {state_dir} --lines {lines}"
+  "template": "{skill_dir}/scripts/resource-locker.mjs snapshot --state-dir {state_dir} --lines {lines}"
 }

package/dist/{recipes → skills/actors/recipes}/resource-locker.json

@@ -1,11 +1,9 @@
 {
   "async": true,
   "args": [
-    "repo:path",
     "lease_ms:int"
   ],
   "defaults": {
-    "repo": "~/.pi/agent/extensions/pi-actors",
     "lease_ms": "600000"
   },
   "control": [
@@ -23,5 +21,5 @@
     "locks": "{state_dir}/locks.json",
     "journal": "{state_dir}/journal.jsonl"
   },
-  "template": "{repo}/scripts/locker.mjs serve --state-dir {state_dir} --lease-ms {lease_ms}"
+  "template": "{skill_dir}/scripts/resource-locker.mjs serve --state-dir {state_dir} --lease-ms {lease_ms}"
 }

package/dist/{recipes/utility-run-ops-snapshot.json → skills/actors/recipes/run-ops-snapshot.json}

@@ -1,17 +1,15 @@
 {
   "args": [
-    "repo:path",
     "state_root:path",
     "run_id:string",
     "lines:int",
     "stale_minutes:int"
   ],
   "defaults": {
-    "repo": "~/.pi/agent/extensions/pi-actors",
     "state_root": "~/.pi/agent/tmp/pi-actors/runs",
     "run_id": "music",
     "lines": "80",
     "stale_minutes": "60"
   },
-  "template": "{repo}/scripts/recipe-utils.mjs run-ops-snapshot {state_root} {run_id} {lines} {stale_minutes}"
+  "template": "{skill_dir}/scripts/run-utils.mjs run-ops-snapshot {state_root} {run_id} {lines} {stale_minutes}"
 }

package/dist/skills/actors/recipes/run-summary.json

@@ -0,0 +1,9 @@
+{
+  "args": [
+    "state_root:path"
+  ],
+  "defaults": {
+    "state_root": "~/.pi/agent/tmp/pi-actors/runs"
+  },
+  "template": "{skill_dir}/scripts/run-utils.mjs run-summary {state_root}"
+}

package/dist/{scripts/locker.mjs → skills/actors/scripts/resource-locker.mjs}

@@ -21,12 +21,12 @@ import readline from "node:readline";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
 function packageRoot() {
-  return dirname(dirname(fileURLToPath(import.meta.url)));
+  return dirname(dirname(dirname(dirname(fileURLToPath(import.meta.url)))));
 }
 
 async function importRuntimeModule(name) {
   const root = packageRoot();
-  const compiled = join(root, "dist", "lib", `${name}.js`);
+  const compiled = join(root, "lib", `${name}.js`);
   const source = join(root, "lib", `${name}.ts`);
   return await import(pathToFileURL(existsSync(compiled) ? compiled : source).href);
 }

package/dist/skills/actors/scripts/run-utils.mjs

@@ -0,0 +1,164 @@
+#!/usr/bin/env node
+
+/** Actor-owned Run summary utilities. */
+
+// @ts-nocheck
+
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { basename, dirname, join, relative, resolve, sep } from "node:path";
+
+function fail(message) {
+  console.error(message);
+  process.exit(1);
+}
+
+function usage() {
+  console.error(`Usage:
+  run-utils.mjs run-summary <state-root>
+  run-utils.mjs run-ops-snapshot <state-root> <run-id> [lines] [stale-minutes]`);
+}
+
+function walkFiles(dir, maxDepth = 2, depth = 0, out = []) {
+  if (depth > maxDepth || !existsSync(dir)) return out;
+  for (const entry of readdirSync(dir)) {
+    const path = join(dir, entry);
+    const stat = statSync(path);
+    if (stat.isDirectory()) walkFiles(path, maxDepth, depth + 1, out);
+    else if (stat.isFile()) out.push(path);
+  }
+  return out;
+}
+
+function readJson(file) {
+  if (!existsSync(file)) return undefined;
+  try {
+    return JSON.parse(readFileSync(file, "utf8"));
+  } catch {
+    return undefined;
+  }
+}
+
+function getRunStatus(run, progress, result) {
+  if (progress?.phase) return progress.phase;
+  if (result?.code !== undefined) return result.code === 0 ? "done" : "failed";
+  return run.status ?? "unknown";
+}
+
+function collectRunSummary(rootValue) {
+  const root = resolve(rootValue.replace(/^~(?=\/|$)/, process.env.HOME ?? "~"));
+  const files = walkFiles(root, 2).filter((file) => basename(file) === "run.json");
+  const rows = [];
+  for (const file of files) {
+    const run = readJson(file);
+    if (!run) {
+      rows.push({ run: relative(root, file), status: "invalid-json", recipe: "", updated: "" });
+      continue;
+    }
+    const runDir = dirname(file);
+    const progress = readJson(join(runDir, "progress.json"));
+    const result = readJson(join(runDir, "result.json"));
+    rows.push({
+      run: run.run_id ?? run.run ?? relative(root, file).split(sep)[0],
+      status: getRunStatus(run, progress, result),
+      recipe: run.recipe ?? run.recipe_file ?? "",
+      updated:
+        progress?.updatedAt ??
+        result?.completedAt ??
+        run.updated_at ??
+        run.completed_at ??
+        run.started_at ??
+        "",
+    });
+  }
+  rows.sort((a, b) => `${a.status}:${a.run}`.localeCompare(`${b.status}:${b.run}`));
+  return rows;
+}
+
+function tailJsonl(fileValue, linesValue = "80") {
+  const file = resolve(fileValue.replace(/^~(?=\/|$)/, process.env.HOME ?? "~"));
+  if (!existsSync(file)) return [];
+  const lines = Number.parseInt(linesValue, 10);
+  const count = Number.isFinite(lines) && lines > 0 ? lines : 80;
+  return readFileSync(file, "utf8")
+    .trimEnd()
+    .split("\n")
+    .filter(Boolean)
+    .slice(-count)
+    .map((line) => {
+      try {
+        return JSON.parse(line);
+      } catch {
+        return { raw: line };
+      }
+    });
+}
+
+function runOpsSnapshot(
+  rootValue,
+  runIdValue = "music",
+  linesValue = "80",
+  staleMinutesValue = "60",
+) {
+  const runs = collectRunSummary(rootValue);
+  const root = resolve(rootValue.replace(/^~(?=\/|$)/, process.env.HOME ?? "~"));
+  const inspectedRun = String(runIdValue || "music");
+  const staleMs = Number(staleMinutesValue) * 60 * 1000;
+  const now = Date.now();
+  const recommendations = runs.flatMap((run) => {
+    const updatedMs = Date.parse(run.updated || "");
+    const stale =
+      Number.isFinite(updatedMs) &&
+      Number.isFinite(staleMs) &&
+      now - updatedMs > staleMs;
+    if (run.status === "running" && stale) {
+      return [{
+        run: run.run,
+        reason: "running-stale",
+        suggested_inspect: { target: `run:${run.run}`, view: "control" },
+      }];
+    }
+    if (["failed", "exited", "killed"].includes(run.status)) {
+      return [{
+        run: run.run,
+        reason: `terminal-${run.status}`,
+        suggested_inspect: { target: `run:${run.run}`, view: "trace" },
+      }];
+    }
+    return [];
+  });
+  console.log(JSON.stringify({
+    runs,
+    inspectedRun,
+    trace: tailJsonl(join(root, inspectedRun, "trace.jsonl"), linesValue),
+    recommendations,
+  }, null, 2));
+}
+
+function runSummary(rootValue) {
+  console.log(JSON.stringify(collectRunSummary(rootValue), null, 2));
+}
+
+function run(argv = process.argv.slice(2)) {
+  const [command, ...args] = argv;
+  if (command === "run-summary") {
+    runSummary(args[0] ?? "~/.pi/agent/tmp/pi-actors/runs");
+    return;
+  }
+  if (command === "run-ops-snapshot") {
+    runOpsSnapshot(
+      args[0] ?? "~/.pi/agent/tmp/pi-actors/runs",
+      args[1] ?? "music",
+      args[2],
+      args[3],
+    );
+    return;
+  }
+  usage();
+  fail(`Unknown command: ${command ?? ""}`);
+}
+
+try {
+  run();
+} catch (error) {
+  fail(error instanceof Error ? error.message : String(error));
+}

package/{scripts → dist/skills/actors/scripts}/validate-recipe.mjs

@@ -9,27 +9,49 @@
 
 import { existsSync, readdirSync, statSync } from "node:fs";
 import { homedir } from "node:os";
-import { dirname, join, resolve } from "node:path";
+import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
 function packageRoot() {
-  return dirname(dirname(fileURLToPath(import.meta.url)));
+  return dirname(dirname(dirname(dirname(fileURLToPath(import.meta.url)))));
 }
 
 async function importRuntimeModule(name) {
   const root = packageRoot();
-  const compiled = join(root, "dist", "lib", `${name}.js`);
+  const localCompiled = join(root, "lib", `${name}.js`);
+  const installedCompiled = join(root, "dist", "lib", `${name}.js`);
   const source = join(root, "lib", `${name}.ts`);
-  return await import(pathToFileURL(existsSync(compiled) ? compiled : source).href);
+  const module = existsSync(localCompiled)
+    ? localCompiled
+    : root.includes(`${sep}node_modules${sep}`) && existsSync(installedCompiled)
+      ? installedCompiled
+      : source;
+  return await import(pathToFileURL(module).href);
 }
 
-const { readResolvedRecipeConfig } = await importRuntimeModule("recipes-references");
+const {
+  createActiveSkillRecipeContext,
+  readRawRecipeConfig,
+  readResolvedRecipeConfig,
+} = await importRuntimeModule("recipes-references");
+
+const skillsDir = join(packageRoot(), "skills");
+const packageSkillContext = createActiveSkillRecipeContext(
+  existsSync(skillsDir)
+    ? readdirSync(skillsDir, { withFileTypes: true })
+        .filter((entry) => entry.isDirectory())
+        .map((entry) => ({
+          name: entry.name,
+          baseDir: join(skillsDir, entry.name),
+        }))
+    : [],
+);
 
 export function validateRecipeUsage() {
   return `Usage:
-  validate-recipe.mjs <recipe-file-or-dir> [--all] [--qa] [--summary]
+  validate-recipe.mjs <recipe-file-or-dir> [--all] [--skills] [--qa] [--summary]
 
-Validates one template recipe file, or all *.json/*.md files in a directory when --all is set. Add --qa for packaged-recipe quality checks, where diagnostics and warnings fail validation. Add --summary for compact CLI output.`;
+Validates one template Recipe file or all direct *.json/*.md files in a directory with --all. Use --skills on a Skills root to validate every direct <skill>/recipes component and reject nested files or duplicate stems. Add --qa for shipped-component capability checks, where diagnostics and warnings fail validation. Add --summary for compact CLI output.`;
 }
 
 function expandPath(value) {
@@ -63,6 +85,79 @@ function recipeFiles(target, all) {
     .map((file) => resolve(target, file));
 }
 
+function nestedRecipeFiles(root) {
+  return readdirSync(root, { withFileTypes: true }).flatMap((entry) => {
+    const path = join(root, entry.name);
+    if (entry.isDirectory()) return nestedRecipeFiles(path);
+    return entry.isFile() && /\.(?:json|md)$/.test(entry.name) ? [path] : [];
+  });
+}
+
+function scanSkillRecipes(target) {
+  if (!existsSync(target) || !statSync(target).isDirectory())
+    throw new Error(`Skills root is not a directory: ${target}`);
+  const skills = readdirSync(target, { withFileTypes: true })
+    .filter((entry) => entry.isDirectory())
+    .sort((a, b) => a.name.localeCompare(b.name));
+  const files = [];
+  const failures = [];
+  for (const skill of skills) {
+    const recipeDir = join(target, skill.name, "recipes");
+    if (!existsSync(recipeDir)) continue;
+    const direct = readdirSync(recipeDir, { withFileTypes: true });
+    const byStem = new Map();
+    for (const entry of direct) {
+      const path = join(recipeDir, entry.name);
+      if (entry.isDirectory()) {
+        for (const nested of nestedRecipeFiles(path)) {
+          failures.push({
+            file: nested,
+            ok: false,
+            error: `Nested Skill Recipe files are not allowed: ${relative(recipeDir, nested)}`,
+          });
+        }
+        continue;
+      }
+      if (!entry.isFile() || !/\.(?:json|md)$/.test(entry.name)) continue;
+      files.push(path);
+      const stem = basename(entry.name, extname(entry.name));
+      const previous = byStem.get(stem);
+      if (previous) {
+        failures.push({
+          file: path,
+          ok: false,
+          error: `Skill Recipe stem collision: ${skill.name}/${stem} has both ${extname(previous)} and ${extname(path)} files`,
+        });
+      } else byStem.set(stem, path);
+    }
+  }
+  let skillContext = packageSkillContext;
+  try {
+    skillContext = createActiveSkillRecipeContext(
+      skills.map((entry) => ({ name: entry.name, baseDir: join(target, entry.name) })),
+    );
+  } catch (error) {
+    failures.push({
+      file: target,
+      ok: false,
+      error: error instanceof Error ? error.message : String(error),
+    });
+  }
+  return {
+    files: files.sort((a, b) => a.localeCompare(b)),
+    failures,
+    skillContext,
+  };
+}
+
+function collectStrings(value, out = []) {
+  if (typeof value === "string") out.push(value);
+  else if (Array.isArray(value)) value.forEach((item) => collectStrings(item, out));
+  else if (value && typeof value === "object")
+    Object.values(value).forEach((item) => collectStrings(item, out));
+  return out;
+}
+
 function collectTemplateStrings(value, out = []) {
   if (typeof value === "string") out.push(value);
   else if (Array.isArray(value)) value.forEach((item) => collectTemplateStrings(item, out));
@@ -105,24 +200,35 @@ function validateArtifactDeclarations(config) {
 
 function validateHelperPaths(file, config) {
   const diagnostics = [];
+  const skillDir = dirname(dirname(file));
   for (const template of collectTemplateStrings(config.template)) {
     if (/(^|\s)(?:node\s+)?scripts\/[\w.-]+\.mjs/.test(template))
-      diagnostics.push("template: helper scripts must be referenced through {repo}/scripts for installed packages");
-    for (const match of template.matchAll(/\{repo\}\/scripts\/([^\s"']+\.mjs)/g)) {
-      const scriptPath = join(packageRoot(), "scripts", match[1]);
-      if (!existsSync(scriptPath))
-        diagnostics.push(`template: referenced helper script not found: scripts/${match[1]}`);
+      diagnostics.push("template: Skill helper scripts must be referenced through {skill_dir}/scripts");
+    for (const match of template.matchAll(/\{skill_dir\}\/([^\s"']+)/g)) {
+      const target = match[1].replace(/[),;]+$/, "");
+      if (!existsSync(join(skillDir, target)))
+        diagnostics.push(`template: referenced Skill helper not found: ${target}`);
     }
   }
   return diagnostics;
 }
 
+function validatePortablePaths(config) {
+  const diagnostics = [];
+  for (const value of collectStrings(config)) {
+    if (/^(?:\/home\/|\/Users\/|[A-Za-z]:[\\/])/.test(value))
+      diagnostics.push(`recipe: must not use a machine-local absolute path: ${value}`);
+  }
+  return diagnostics;
+}
+
 function qaDiagnostics(file, config) {
   const diagnostics = [];
   const warnings = [];
   if (config.mailbox !== undefined)
     diagnostics.push("recipe.mailbox was removed; use control actions and Trace events");
   diagnostics.push(...validateArtifactDeclarations(config));
+  diagnostics.push(...validatePortablePaths(config));
   diagnostics.push(...validateHelperPaths(file, config));
   const platformSpecificTemplate = collectTemplateStrings(config.template).some(
     (template) =>
@@ -139,12 +245,16 @@ function qaOk(qaReport) {
   return qaReport.diagnostics.length === 0 && qaReport.warnings.length === 0;
 }
 
-function validateFile(file, qa = false) {
+function validateFile(file, qa = false, skillContext = packageSkillContext) {
   try {
-    const config = readResolvedRecipeConfig(file);
+    const rawConfig = readRawRecipeConfig(file);
+    const config = readResolvedRecipeConfig(file, [], { skillContext });
     if (!config?.template)
       throw new Error("Recipe must define a non-empty template.");
-    const qaReport = qa ? qaDiagnostics(file, config) : { diagnostics: [], warnings: [] };
+    const expectedName = basename(file, extname(file));
+    if (config.name !== expectedName)
+      throw new Error(`Recipe identity mismatch: expected ${expectedName}, received ${config.name ?? "<none>"}`);
+    const qaReport = qa ? qaDiagnostics(file, rawConfig) : { diagnostics: [], warnings: [] };
     return {
       file,
       ok: qaOk(qaReport),
@@ -183,12 +293,19 @@ function validateFile(file, qa = false) {
 export function validateRecipes(argv) {
   const targetArg = argv.find((arg) => !arg.startsWith("-"));
   const all = argv.includes("--all");
+  const skills = argv.includes("--skills");
   const qa = argv.includes("--qa");
   if (!targetArg || argv.includes("--help") || argv.includes("-h")) {
     return { help: true, ok: Boolean(targetArg), usage: validateRecipeUsage() };
   }
-  const files = recipeFiles(expandPath(targetArg), all);
-  const results = files.map((file) => validateFile(file, qa));
+  const target = expandPath(targetArg);
+  const scan = skills
+    ? scanSkillRecipes(target)
+    : { files: recipeFiles(target, all), failures: [], skillContext: packageSkillContext };
+  const results = [
+    ...scan.failures,
+    ...scan.files.map((file) => validateFile(file, qa, scan.skillContext)),
+  ];
   const failed = results.filter((result) => !result.ok).length;
   return {
     ok: failed === 0,

package/dist/skills/artifacts/SKILL.md

@@ -0,0 +1,16 @@
+---
+name: artifacts
+description: Deterministic artifact writing, reporting, manifests, and bundles for reusable actor workflows.
+---
+
+# Artifacts
+
+Own reusable capabilities that turn bounded input or prior command output into declared files, reports, manifests, and artifact bundles.
+
+## Scope
+
+- Write or assemble caller-declared artifacts with explicit paths and overwrite policy.
+- Produce bounded human-readable reports and machine-readable manifests.
+- Compose validation evidence into artifact outputs without owning the validation policy.
+
+This Skill does not own repository workflow, multi-agent review methodology, Run lifecycle, retention policy, or transport delivery. Its Recipe identity is `artifacts/<filename stem>`; Recipe files have no top-level `name`. Cross-capability composition uses exact `<skill>/<recipe>` references; helper-backed Recipes use only this Skill's `scripts/` through `{skill_dir}`.