livepilot 1.27.0 → 1.27.2

package/CHANGELOG.md

@@ -1,5 +1,73 @@
 # Changelog
 
+## v1.27.2 — 2026-06-23
+
+Maintenance release: M4L bridge response-correlation + chunk-reassembly hardening, plan-routing fixes, a Python 3.11 floor with clearer install diagnostics, and a Remote Script Group-track crash guard. No change to the tool surface (467 tools / 56 domains). Re-frozen LivePilot_Analyzer.amxd (analyzer reports 1.27.2).
+
+### Fixed — M4L bridge
+- Correlate responses by request id across batched reads (`get_params` / `get_hidden_params` / `get_auto_state`): the id is captured per command in the analyzer JS and echoed on both single-packet and chunked responses, so an interleaved or timed-out command can no longer resolve another command's future.
+- Chunk reassembly buckets per request id, bounds-checks the chunk index, and requires every index present before reassembling — fixes a `KeyError` / silent-loss + full-timeout path on duplicate or out-of-range chunks.
+- Non-blocking UDP socket so the miditool response path cannot stall the asyncio event loop; clear the capture future after completion.
+
+### Fixed — routing & Remote Script
+- `compressor_set_sidechain` now classifies as an MCP tool (TCP Remote Script path) instead of being mis-routed to the M4L JS bridge; `get_master_rms` is now dispatchable in plans; removed the dead duplicate `get_simpler_file_path` bridge entry.
+- `get_track_info` no longer crashes on Group/Return tracks (guards the LOM-fragile arm/input properties).
+- `reload_handlers` reports per-module reload errors instead of silently swallowing them.
+- Connection retry tears down the stale socket under the lock.
+
+### Changed — install & docs
+- Raised the Python floor to 3.11 (numpy/scipy publish no wheels for 3.9/3.10) with a clear pre-flight message; pip failures surface captured output + a version hint, and the expected grpcio-tools resolver warning is pre-announced.
+- `consult_ableton_knowledge` docstrings corrected; fast brief now notes the `mcp__Ableton_Knowledge__` prefix and that the knowledge MCP is optional; fixed an over-permissive tool-name test.
+
+
+## v1.27.1 — 2026-06-21
+
+Maintenance release: 35 verified fixes from a deep multi-agent audit, recursive installed-plugin scanning, and Windows-CI hardening. No change to the tool surface (467 tools / 56 domains).
+
+### Restored — tools that were silently broken
+- `augment_with_samples`, `get_composition_plan`, `propose_composer_branches` — crashed or returned nothing since the v1.24 refactor removed section templates; they now degrade to a single full-length section.
+- `check_clip_key_consistency` — always returned `"unknown"` (removed FastMCP `.fn` accessor).
+- `compare_phrase_renders` — returned an identical empty critique; now analyzes each render.
+
+### Fixed — correctness
+- Reference engine: project spectrum and stereo width are now populated (gap analysis previously ran against an all-zero project).
+- `infer_section_purposes`: drops are no longer mislabeled as tension.
+- Grader: master/return/group tracks identified by their real field names (group containers were inflating track counts).
+- Hook salience: the memorability boost no longer fires on every candidate.
+- Mix: the `flat_dynamics` critic is now reachable (`over_compressed` is a 3–6 dB band).
+- Wavetable adapter uses the real `Osc 1 Pos` parameter name.
+- Simpler slice playback uses the correct base note (36+N); `vibe_fit` energy proxy normalized.
+- Harmony and phrase-grid analysis read from the correct clip slot.
+- `exclude_globs` now match files inside named directories.
+- A single shared technique store so in-session saves are visible to recall/search.
+- Read-only prefix matcher no longer misclassifies mutating tools as safe.
+- Atlas id/name collisions no longer shadow entries; the overlay index is no longer rescanned per namespace.
+- AMXD device-type map recognizes MIDI Tool devices (Live 12.1+).
+- `apply_full_plan_v2` postflight no longer deletes a reused existing track.
+- Fatigue level no longer diluted by low-severity issues; energy-arc no longer desyncs on skipped scenes; `create_preview_set` no longer silently overwrites an existing set.
+
+### Fixed — installed-plugin scanning (#44)
+- The plugin scanner now recurses into vendor subfolders (e.g. `VST3/<Vendor>/Plugin.vst3`); nested plugins are found and vendor folders are no longer emitted as junk inventory records.
+
+### Fixed — safety and resources
+- Splice `is_free` misclassification that could bypass credit/quota gating.
+- Experiment rollback undoes only `remote_command` steps (no longer reverts unrelated edits).
+- Timed-out write commands are dropped instead of re-executing later on the main thread.
+- Order-tolerant M4L bridge chunk reassembly (no permanent response loss on UDP reordering).
+- Installer install-path guard hardened; Splice bearer token gated to splice.com HTTPS hosts; non-numeric Live version strings tolerated instead of crashing the capability probe.
+
+### Performance
+- Blocking sample I/O (SQLite, file decode, FFT, network) moved off the asyncio event loop.
+- Capped previously-unbounded tool responses (`atlas_device_info`, `extension_atlas_search`, corpus synthesis briefs, piano-roll matrix, plugin `sdk_metadata`).
+- Deduped redundant session round-trips (`enter_wonder_mode`, `build_project_brain`).
+
+### CI and tooling
+- Fixed the Windows CI matrix (cp1252 `UnicodeEncodeError` in verifier scripts; POSIX-path test fixture).
+- `build_mcpb.sh` enforces `.mcpbignore`; portable dev scripts.
+
+### Dependencies
+- fastmcp, soundfile 0.14.0, grpcio 1.81.1, protobuf 7.35.1.
+
 ## v1.27.0 — 2026-06-16
 
 Probe-first Live 12.4 capability release.

package/README.md

@@ -38,6 +38,20 @@
 
 ---
 
+## What's New in v1.27.1
+
+A maintenance release that fixes 35 issues from a deep audit and restores tools that had silently broken:
+
+- **Restored tools** — `augment_with_samples`, `get_composition_plan`, `propose_composer_branches`, `check_clip_key_consistency`, and `compare_phrase_renders` were crashing or returning empty results; they now work.
+- **Recursive plugin scanning (#44)** — the User Corpus scanner now finds plugins nested in vendor subfolders (e.g. `VST3/<Vendor>/Plugin.vst3`) instead of only the top level.
+- **Truer analysis** — reference-gap, hook-salience, dynamics, drop-detection, harmony-slot, and grader fixes that previously produced fabricated or empty results.
+- **Safer & faster** — Splice credit-gating fixed, blocking sample I/O moved off the event loop, unbounded tool responses capped, and the M4L bridge no longer loses responses on UDP reordering.
+- **v1.27.0** added two read-only Live 12.4 capability-probe tools (`probe_link_audio`, `probe_stem_workflow`).
+
+Full details in the [CHANGELOG](CHANGELOG.md).
+
+---
+
 ## What LivePilot Does
 
 Most MCP servers are tool collections — they execute commands. LivePilot is an **agentic production system**. It has eight layers that work together:
@@ -473,7 +487,7 @@ Full track with song form: intro, verse, hook, breakdown, outro. Uses a two-phas
 - Native arrangement clips via `create_native_arrangement_clip` (one clip per section, looped to fill section length)
 - Zombie-track cleanup in postflight (removes tracks with no clips and no instrument device)
 - Drum-role pitch repair ported from fast mode
-- **Known gap (v1.25):** `KnowledgePack.atlas_candidates_per_role` is an empty stub — the agent currently falls through to `search_browser` filename matching instead of consulting the indexed atlas. This is BUG-FULL-MODE-24 and is the headline feature of v1.25.
+- **Atlas anchors:** role-level device knowledge is supplied through `KnowledgePack.atlas_anchors`, which consults the indexed atlas rather than filename matching. The older `atlas_candidates_per_role` field is a deprecated legacy stub, kept empty for back-compat.
 - Invoke with: *"Write a full [genre] track at [tempo] BPM"* or *"Build a full arrangement"*
 
 #### develop mode — `develop_apply`
@@ -492,7 +506,7 @@ All three modes share a `KnowledgePack` that provides structured creative contex
 - `event_lexicon` — 42 structural events across 7 categories (drum density, harmonic, texture, vocal, rhythm feel, tension, fx gesture)
 - `genre_context` — parses the 15-genre `genre-vocabularies.md` at load time
 - `artist_context` — parses the ~25-producer `artist-vocabularies.md` at load time
-- `atlas_candidates_per_role` — **stubbed in v1.25.0**, will be populated in v1.25
+- `atlas_anchors` — indexed-atlas device anchors per role (replaced the legacy `atlas_candidates_per_role` stub)
 
 #### Core composer tools
 
@@ -550,7 +564,7 @@ The V2 intelligence layer. These tools analyze, diagnose, plan, evaluate, and le
 
 ### Easiest: Claude Desktop Extension (1 click)
 
-Download [`livepilot.mcpb`](https://github.com/dreamrec/LivePilot/releases/latest) and double-click it.
+Download the latest `livepilot-<version>.mcpb` from the [Releases page](https://github.com/dreamrec/LivePilot/releases/latest) and double-click it.
 Claude Desktop installs everything automatically. Then:
 
 1. Open Ableton Live 12
@@ -584,10 +598,14 @@ Restart Ableton → Preferences → Link, Tempo & MIDI → Control Surface → *
 <details>
 <summary><strong>2. MCP Client</strong></summary>
 
-**Claude Code:**
+**Claude Code** — pick one (installing both registers the MCP server twice and collides on port 9878):
 ```bash
+# MCP server only:
 claude mcp add LivePilot -- npx livepilot
-claude plugin add github:dreamrec/LivePilot/plugin
+
+# Or the full plugin (MCP server + skills + slash commands):
+claude plugin marketplace add github:dreamrec/LivePilot
+claude plugin install livepilot@dreamrec-LivePilot
 ```
 
 **Codex App:**
@@ -680,7 +698,8 @@ npx livepilot --install-codex-plugin
 **Claude Code**
 
 ```bash
-claude plugin add github:dreamrec/LivePilot/plugin
+claude plugin marketplace add github:dreamrec/LivePilot
+claude plugin install livepilot@dreamrec-LivePilot
 ```
 
 | Command | What |
@@ -732,7 +751,7 @@ npx livepilot --version    # Show version
 | Requirement | Minimum |
 |-------------|---------|
 | Ableton Live | **12** (any edition). Suite required for Max for Live bridge and stock instruments |
-| Python | 3.9+ |
+| Python | 3.11+ (numpy/scipy ship no wheels for 3.9/3.10) |
 | Node.js | 18+ |
 | OS | macOS / Windows |
 | Splice | Desktop app with downloaded samples (optional — enables SQLite metadata search) |

package/bin/livepilot.js

@@ -15,6 +15,13 @@ const REQUIREMENTS = path.join(ROOT, "requirements.txt");
 // Python detection
 // ---------------------------------------------------------------------------
 
+// Minimum Python is 3.11, NOT 3.9: numpy>=2.4.6 and scipy>=1.17.1 (see
+// requirements.txt) publish no wheels and declare requires-python ">=3.11".
+// A 3.9/3.10 interpreter passes a looser gate, the venv is created, then
+// `pip install` aborts with a cryptic "no matching distribution" — the exact
+// install failure users hit. Gate here so we fail early with a clear message.
+const MIN_PY_MINOR = 11;
+
 function findPython() {
   // On Windows, also try the "py -3" launcher which avoids the
   // Microsoft Store stub that "python3" resolves to.
@@ -22,6 +29,7 @@ function findPython() {
     ? ["python", "python3", "py"]
     : ["python3", "python"];
 
+  let tooOld = null; // highest 3.x below the floor we saw, for a clear error
   for (const cmd of candidates) {
     try {
       const args = cmd === "py" ? ["-3", "--version"] : ["--version"];
@@ -33,17 +41,26 @@ function findPython() {
       if (match) {
         const major = parseInt(match[1], 10);
         const minor = parseInt(match[2], 10);
-        if (major === 3 && minor >= 9) {
+        if (major === 3 && minor >= MIN_PY_MINOR) {
           // For "py" launcher, the actual command to use is "py -3"
           const actualCmd = cmd === "py" ? "py" : cmd;
           const actualArgs = cmd === "py" ? ["-3"] : [];
           return { cmd: actualCmd, version: out, prefixArgs: actualArgs };
         }
+        // Found Python 3 but below 3.11 — remember the newest for diagnostics.
+        if (major === 3 && (!tooOld || minor > tooOld.minor)) {
+          tooOld = { version: out, minor };
+        }
       }
     } catch {
       // command not found or failed — try next
     }
   }
+  // Signal "present but too old" distinctly from "absent" so callers can give
+  // an actionable message instead of a misleading "not found".
+  if (tooOld) {
+    return { tooOld: true, version: tooOld.version };
+  }
   return null;
 }
 
@@ -84,6 +101,41 @@ function findOtherLiveClient(host, port) {
 // Virtual environment bootstrap
 // ---------------------------------------------------------------------------
 
+/**
+ * Run `pip install -r requirements.txt` with captured stderr so a failure
+ * yields an actionable message instead of an opaque "Command failed".
+ */
+function pipInstall(venvPy) {
+  // One pip resolver warning about grpcio-tools / protobuf<7 is EXPECTED and
+  // harmless: LivePilot imports only the pre-generated Splice stubs at runtime,
+  // never grpcio-tools. Pre-announce it so it doesn't read as a failure.
+  console.error("  (a single grpcio-tools/protobuf resolver warning is expected and safe)");
+  try {
+    execFileSync(venvPy, ["-m", "pip", "install", "-q", "-r", REQUIREMENTS], {
+      cwd: ROOT,
+      stdio: ["pipe", "pipe", "pipe"],
+      encoding: "utf-8",
+      timeout: 120000,
+    });
+  } catch (err) {
+    const stderr = (err && err.stderr ? String(err.stderr) : "").trim();
+    console.error("");
+    console.error("LivePilot: dependency installation failed.");
+    if (/No matching distribution|requires-python|Could not find a version/i.test(stderr)) {
+      console.error("  Most likely your Python is too old — LivePilot needs Python >= 3.11");
+      console.error("  (numpy/scipy ship no wheels for 3.9/3.10). Install 3.11+, delete the");
+      console.error("  .venv folder, and retry.");
+    }
+    const tail = stderr.split("\n").filter(Boolean).slice(-12);
+    if (tail.length) {
+      console.error("");
+      console.error("  pip output (last lines):");
+      for (const line of tail) console.error("    " + line);
+    }
+    throw err;
+  }
+}
+
 /**
  * Ensure a local .venv exists with dependencies installed.
  * Returns the path to the venv Python binary.
@@ -104,11 +156,7 @@ function ensureVenv(systemPython, prefixArgs) {
     } catch {
       // venv exists but deps missing — reinstall
       console.error("LivePilot: reinstalling Python dependencies...");
-      execFileSync(venvPy, ["-m", "pip", "install", "-q", "-r", REQUIREMENTS], {
-        cwd: ROOT,
-        stdio: ["pipe", "pipe", "inherit"],
-        timeout: 120000,
-      });
+      pipInstall(venvPy);
       return venvPy;
     }
   }
@@ -122,11 +170,7 @@ function ensureVenv(systemPython, prefixArgs) {
   });
 
   console.error("LivePilot: installing dependencies...");
-  execFileSync(venvPython(), ["-m", "pip", "install", "-q", "-r", REQUIREMENTS], {
-    cwd: ROOT,
-    stdio: ["pipe", "pipe", "inherit"],
-    timeout: 120000,
-  });
+  pipInstall(venvPython());
 
   return venvPython();
 }
@@ -262,11 +306,15 @@ async function doctor() {
 
   // 1. Python
   const pyInfo = findPython();
-  if (pyInfo) {
+  if (pyInfo && !pyInfo.tooOld) {
     console.log("  Python: %s (%s)", pyInfo.version, pyInfo.cmd);
+  } else if (pyInfo && pyInfo.tooOld) {
+    console.log("  Python: %s found, but LivePilot needs >= 3.11", pyInfo.version);
+    console.log("    Fix: install Python 3.11+ (numpy/scipy ship no wheels for 3.9/3.10)");
+    ok = false;
   } else {
-    console.log("  Python: NOT FOUND (need >= 3.9)");
-    console.log("    Fix: install Python 3.9+ and add to PATH");
+    console.log("  Python: NOT FOUND (need >= 3.11)");
+    console.log("    Fix: install Python 3.11+ and add to PATH");
     ok = false;
   }
 
@@ -686,10 +734,15 @@ async function setup() {
   // 1. Python
   console.log("Step 1/5: Checking Python...");
   const pyInfo = findPython();
-  if (pyInfo) {
+  if (pyInfo && !pyInfo.tooOld) {
     console.log("  ✓ %s", pyInfo.version);
+  } else if (pyInfo && pyInfo.tooOld) {
+    console.log("  ✗ %s found, but LivePilot needs Python >= 3.11", pyInfo.version);
+    console.log("    (numpy/scipy ship no wheels for 3.9/3.10 — pip would fail)");
+    console.log("    Install: brew install python@3.12 (macOS) or python.org (Windows)");
+    ok = false;
   } else {
-    console.log("  ✗ Python >= 3.9 not found");
+    console.log("  ✗ Python >= 3.11 not found");
     console.log("    Install: brew install python@3.12 (macOS) or python.org (Windows)");
     ok = false;
   }
@@ -722,7 +775,7 @@ async function setup() {
   // 3. Bootstrap Python venv
   console.log("");
   console.log("Step 3/5: Setting up Python environment...");
-  if (pyInfo) {
+  if (pyInfo && !pyInfo.tooOld) {
     try {
       ensureVenv(pyInfo.cmd, pyInfo.prefixArgs);
       console.log("  ✓ Virtual environment ready");
@@ -730,6 +783,8 @@ async function setup() {
       console.log("  ✗ Failed: %s", err.message);
       ok = false;
     }
+  } else if (pyInfo && pyInfo.tooOld) {
+    console.log("  ⊘ Skipped (%s found, need Python >= 3.11)", pyInfo.version);
   } else {
     console.log("  ⊘ Skipped (no Python)");
   }
@@ -823,8 +878,10 @@ async function main() {
     console.log("  --help        Show this help");
     console.log("");
     console.log("Environment:");
-    console.log("  LIVE_MCP_HOST   Remote Script host (default: 127.0.0.1)");
-    console.log("  LIVE_MCP_PORT   Remote Script port (default: 9878)");
+    console.log("  LIVE_MCP_HOST          Remote Script host (default: 127.0.0.1)");
+    console.log("  LIVE_MCP_PORT          Remote Script port (default: 9878)");
+    console.log("  LIVEPILOT_AUTO_INSTALL Auto-install Remote Script on launch (set to 'true')");
+    console.log("  LIVEPILOT_TCP_PORT     Override Remote Script port (Desktop Extension/MCPB)");
     return;
   }
 
@@ -915,12 +972,18 @@ async function main() {
 
   // Default: start MCP server
   const pyInfo = findPython();
-  if (!pyInfo) {
-    console.error("Error: Python >= 3.9 is required but was not found.");
+  if (!pyInfo || pyInfo.tooOld) {
+    if (pyInfo && pyInfo.tooOld) {
+      console.error("Error: found %s, but LivePilot requires Python >= 3.11.", pyInfo.version);
+      console.error("  numpy>=2.4.6 and scipy>=1.17.1 publish no wheels for Python 3.9/3.10,");
+      console.error("  so dependency installation would fail. Install Python 3.11 or newer.");
+    } else {
+      console.error("Error: Python >= 3.11 is required but was not found.");
+      console.error("  Install Python 3.11+ and ensure 'python3' or 'python' is on your PATH.");
+    }
     console.error("");
-    console.error("Install Python 3.9+ and ensure 'python3' or 'python' is on your PATH.");
     console.error("  macOS:   brew install python@3.12");
-    console.error("  Ubuntu:  sudo apt install python3");
+    console.error("  Ubuntu:  sudo apt install python3.12");
     console.error("  Windows: https://www.python.org/downloads/");
     process.exit(1);
   }

package/installer/install.js

@@ -46,23 +46,32 @@ function _assertSafeInstallPath(resolvedPath, candidates) {
     "/Applications/Ableton",
     "C:\\ProgramData\\Ableton",
   ];
-  // The detected Ableton candidate paths are always considered safe
+  // True iff `child` equals `root` or is a descendant of it. The path.sep
+  // suffix prevents `/Applications/Ableton-evil` from matching the
+  // `/Applications/Ableton` prefix (prefix-boundary check).
+  const within = (child, root) => {
+    const c = path.resolve(child);
+    const r = path.resolve(root);
+    return c === r || c.startsWith(r + path.sep);
+  };
+  // The destination must be a detected Ableton Remote Scripts dir, a descendant
+  // of one, or under a known-safe prefix. We deliberately do NOT treat an
+  // *ancestor* of a candidate as safe — that previously let
+  // LIVEPILOT_INSTALL_PATH=/ or /Applications slip through (candidate path
+  // "starts with" the broad parent), defeating the guard.
   for (const c of candidates) {
-    if (path.resolve(c.path).startsWith(path.resolve(resolvedPath))) {
-      return;
-    }
-    if (path.resolve(resolvedPath).startsWith(path.resolve(c.path))) {
+    if (within(resolvedPath, c.path)) {
       return;
     }
   }
-  const safe = allowedPrefixes.some((p) => resolvedPath.startsWith(path.resolve(p)));
-  if (!safe) {
-    throw new InstallerAbort(
-      `LIVEPILOT_INSTALL_PATH=${resolvedPath} is outside permitted directories. ` +
-      `Refusing to install. Allowed roots: ${allowedPrefixes.join(", ")}`,
-      { recoverable: false }
-    );
+  if (allowedPrefixes.some((p) => within(resolvedPath, p))) {
+    return;
   }
+  throw new InstallerAbort(
+    `LIVEPILOT_INSTALL_PATH=${resolvedPath} is outside permitted directories. ` +
+    `Refusing to install. Allowed roots: ${allowedPrefixes.join(", ")}`,
+    { recoverable: false }
+  );
 }
 
 /**

package/livepilot/.Codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "livepilot",
-  "version": "1.27.0",
+  "version": "1.27.2",
   "description": "Agentic production system for Ableton Live 12 \u2014 467 tools, 56 domains, 44 semantic moves, device atlas (5264 devices, 120 enriched, 7 indexes), Splice intelligence (gRPC + GraphQL describe-a-sound + preview + collections + presets), 9-band spectral perception auto-loaded via ensure_analyzer_on_master, Creative Director skill, technique memory, neo-Riemannian harmony, Euclidean rhythm, species counterpoint, MIDI I/O",
   "author": {
     "name": "Pilot Studio"

package/livepilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "livepilot",
-  "version": "1.27.0",
+  "version": "1.27.2",
   "description": "Agentic production system for Ableton Live 12 \u2014 467 tools, 56 domains, 44 semantic moves, device atlas (5264 devices, 120 enriched, 7 indexes), Splice intelligence (gRPC + GraphQL describe-a-sound + preview + collections + presets), 9-band spectral perception auto-loaded via ensure_analyzer_on_master, Creative Director skill, technique memory, neo-Riemannian harmony, Euclidean rhythm, species counterpoint, MIDI I/O",
   "author": {
     "name": "Pilot Studio"

package/livepilot/skills/livepilot-core/SKILL.md

@@ -198,14 +198,14 @@ Use when the user wants options, variants, or is stuck ("surprise me", "try some
 **Rule of thumb**: if the user asked for a specific fix, Flow A. If they asked "what would you do?" or mentioned feel/vibe without parameters, Flow B.
 
 ### Semantic Moves
-High-level musical intents that compile to deterministic tool sequences. 7 families (44 moves as of v1.27.0):
-- **mix** — `tighten_low_end`, `widen_stereo`, `make_punchier`, `darken_without_losing_width`, `reduce_repetition_fatigue`, `make_kick_bass_lock`, `reduce_foreground_competition`
-- **arrangement** — `refresh_repeated_section`, plus structural moves defined alongside mix
-- **transition** — `create_buildup_tension`, `smooth_scene_handoff`, `increase_contrast_before_payoff`, `bridge_sections`, `increase_forward_motion`, `open_chorus`, `create_breakdown`
-- **sound_design** — `add_warmth`, `add_texture`, `shape_transients`, `add_space`
-- **performance** — `recover_energy`, `decompress_tension`, `safe_spotlight`, `emergency_simplify`
-- **device_creation** — `create_chaos_modulator`, `create_feedback_resonator`, `create_wavefolder_effect`, `create_bitcrusher_effect`, `create_karplus_string`, `create_stochastic_texture`, `create_fdn_reverb` (procedural M4L device generation)
-- **sample** — `sample_chop_rhythm`, `sample_texture_layer`, `sample_vocal_ghost`, `sample_break_layer`, `sample_resample_destroy`, `sample_one_shot_accent` (registered from `sample_engine/moves.py`)
+High-level musical intents that compile to deterministic tool sequences. 7 families (44 moves as of v1.27.1):
+- **mix** (9) — `tighten_low_end`, `widen_stereo`, `make_punchier`, `darken_without_losing_width`, `reduce_repetition_fatigue`, `make_kick_bass_lock`, `set_track_routing`, `set_track_metadata`, `configure_send_architecture`
+- **device_creation** (9) — `create_chaos_modulator`, `create_feedback_resonator`, `create_wavefolder_effect`, `create_bitcrusher_effect`, `create_karplus_string`, `create_stochastic_texture`, `create_fdn_reverb`, `create_drum_rack_pad`, `build_send_chain` (procedural M4L device generation)
+- **sound_design** (7) — `add_warmth`, `add_texture`, `shape_transients`, `add_space`, `configure_device`, `remove_device`, `load_chord_source`
+- **sample** (6) — `sample_chop_rhythm`, `sample_texture_layer`, `sample_vocal_ghost`, `sample_break_layer`, `sample_resample_destroy`, `sample_one_shot_accent` (registered from `sample_engine/moves.py`)
+- **performance** (5) — `recover_energy`, `decompress_tension`, `safe_spotlight`, `emergency_simplify`, `configure_record_readiness`
+- **arrangement** (4) — `create_buildup_tension`, `smooth_scene_handoff`, `configure_groove`, `set_scene_metadata`
+- **transition** (4) — `bridge_sections`, `increase_forward_motion`, `open_chorus`, `create_breakdown`
 
 Use `list_semantic_moves(domain="mix")` to discover available moves.
 

package/livepilot/skills/livepilot-core/references/overview.md

@@ -1,4 +1,4 @@
-# LivePilot v1.27.0 — Architecture & Tool Reference
+# LivePilot v1.27.2 — Architecture & Tool Reference
 
 Agentic production system for Ableton Live 12. 467 tools across 56 domains. Device atlas (5264 devices, 120 enriched, 47 with aesthetic-tagged `signature_techniques`), spectral perception (M4L analyzer with 9-band FFT — sub_low / sub / low / low_mid / mid / high_mid / high / presence / air), technique memory, automation intelligence (16 curve types, 15 recipes), music theory (Krumhansl-Schmuckler, species counterpoint), generative algorithms (Euclidean rhythm, tintinnabuli, phase shift, additive process), neo-Riemannian harmony (PRL transforms, Tonnetz), MIDI file I/O, **LIVE Splice describe-a-sound + variations via captured GraphQL endpoints (v1.17)**, drum-rack pad-by-pad construction, live dead-device detection via meter sampling, role-aware Simpler defaults, session-record arrangement-automation workaround.
 
@@ -218,7 +218,7 @@ This turns "set EQ band 3 to -4 dB" into "cut 400 Hz by 4 dB, then read the spec
 | `memory_update` | Updates name, tags, or qualities | `technique_id`, `name`, `tags`, `qualities` |
 | `memory_delete` | Removes technique (backs up first) | `technique_id` |
 
-### Analyzer (30) — Real-time DSP analysis (requires LivePilot Analyzer M4L device on master track)
+### Analyzer (38) — Real-time DSP analysis (requires LivePilot Analyzer M4L device on master track)
 
 | Tool | What it does | Key params |
 |------|-------------|------------|

package/livepilot/skills/livepilot-evaluation/references/capability-modes.md

@@ -173,7 +173,7 @@ Live 12.4 introduces a new capability tier that unlocks native LOM access for sa
 **Tool signatures:** unchanged. Callers do not need to detect the tier —
 routing is transparent.
 
-**Probe-first 12.4 surfaces in v1.27.0:**
+**Probe-first 12.4 surfaces in v1.27.2:**
 - `probe_link_audio()` reports observed peer/input/routing visibility and
   returns `manual_only`, `readable`, `routable`, or `unavailable`.
 - `probe_stem_workflow()` reports observed callable paths and returns

package/m4l_device/livepilot_bridge.js

@@ -34,7 +34,7 @@ outlets = 2; // 0: to udpsend (responses), 1: to buffer~/status
 // Single source of truth for the bridge version — bumped alongside the
 // rest of the release manifest. Surfaced in the UI via messnamed("livepilot_version", ...)
 // so the frozen .amxd visibly reports which build it was last exported from.
-var VERSION = "1.27.0";
+var VERSION = "1.27.2";
 
 // ── State ──────────────────────────────────────────────────────────────────
 
@@ -45,6 +45,7 @@ var pitch_history = []; // Rolling buffer for key detection
 var MAX_PITCH_HISTORY = 128;
 var detected_key = "";
 var detected_scale = "";
+var current_response_request_id = "";
 
 // Capture state
 var capture_active = false;
@@ -85,9 +86,19 @@ function anything() {
     var cmd = messagename;
     if (cmd.charAt(0) === "/") cmd = cmd.substring(1);
     var args = _decode_arg_strings(arrayfromargs(arguments));
+    var request_id = "";
+    if (args.length > 0 && typeof args[args.length - 1] === "string") {
+        var last_arg = args[args.length - 1];
+        var request_prefix = "__livepilot_request_id:";
+        if (last_arg.indexOf(request_prefix) === 0) {
+            request_id = last_arg.substring(request_prefix.length);
+            args.pop();
+        }
+    }
 
     // Defer to low-priority thread for LiveAPI safety
     var task = new Task(function() {
+        current_response_request_id = request_id;
         try {
             dispatch(cmd, args);
         } catch(e) {
@@ -223,6 +234,11 @@ function cmd_get_params(args) {
 
     var batch_size = 8;
     var current = 0;
+    // Capture the request id now: read_batch reschedules itself via
+    // Task.schedule(20), and an interleaved command arriving in that gap can
+    // overwrite the module-level current_response_request_id before the final
+    // send_response fires. The closure keeps OUR id stable across batches.
+    var captured_request_id = current_response_request_id;
 
     function read_batch() {
         try {
@@ -246,7 +262,7 @@ function cmd_get_params(args) {
                 var next_task = new Task(read_batch);
                 next_task.schedule(20);
             } else {
-                send_response({"track": track_idx, "device": device_idx, "params": params});
+                send_response({"track": track_idx, "device": device_idx, "params": params}, captured_request_id);
             }
         } catch (e) {
             send_response({
@@ -254,7 +270,7 @@ function cmd_get_params(args) {
                 "track": track_idx,
                 "device": device_idx,
                 "partial_params": params
-            });
+            }, captured_request_id);
         }
     }
 
@@ -275,6 +291,9 @@ function cmd_get_hidden_params(args) {
     var params = [];
     var current = 0;
     var batch_size = 8;
+    // See cmd_get_params: capture the request id so the closure survives the
+    // Task.schedule(20) gaps without being clobbered by an interleaved command.
+    var captured_request_id = current_response_request_id;
 
     function read_batch() {
         try {
@@ -307,7 +326,7 @@ function cmd_get_hidden_params(args) {
                     "device_name": device_name,
                     "total_params": param_count,
                     "params": params
-                });
+                }, captured_request_id);
             }
         } catch (e) {
             send_response({
@@ -316,7 +335,7 @@ function cmd_get_hidden_params(args) {
                 "device": device_idx,
                 "device_name": device_name,
                 "partial_params": params
-            });
+            }, captured_request_id);
         }
     }
 
@@ -334,6 +353,9 @@ function cmd_get_auto_state(args) {
     var results = [];
     var current = 0;
     var batch_size = 8;
+    // See cmd_get_params: capture the request id so the closure survives the
+    // Task.schedule(20) gaps without being clobbered by an interleaved command.
+    var captured_request_id = current_response_request_id;
 
     function read_batch() {
         try {
@@ -362,7 +384,7 @@ function cmd_get_auto_state(args) {
                     "total_params": param_count,
                     "automated_params": results,
                     "automated_count": results.length
-                });
+                }, captured_request_id);
             }
         } catch (e) {
             send_response({
@@ -372,7 +394,7 @@ function cmd_get_auto_state(args) {
                 "total_params": param_count,
                 "automated_params": results,
                 "automated_count": results.length
-            });
+            }, captured_request_id);
         }
     }
 
@@ -689,22 +711,37 @@ function correlate(a, b) {
 
 // ── Response Encoding ──────────────────────────────────────────────────────
 
-function send_response(obj) {
-    var json = JSON.stringify(obj);
+function send_response(obj, explicit_id) {
+    var response = obj || {};
+    // Async/batched handlers (cmd_get_params et al.) capture the request id in
+    // a closure and pass it explicitly here, because the module-level
+    // current_response_request_id can be clobbered by an interleaved command
+    // that arrives during a Task.schedule() gap between batches.
+    var rid = (typeof explicit_id === "string" && explicit_id !== "")
+        ? explicit_id
+        : current_response_request_id;
+    if (rid) {
+        response._livepilot_request_id = rid;
+    }
+    var json = JSON.stringify(response);
     var encoded = base64_encode(json);
 
     // Check if chunking needed (Max OSC packet limit ~8KB)
     if (encoded.length < 1400) {
         outlet(0, "/response", encoded);
     } else {
-        // Split into chunks
+        // Split into chunks. The request id rides the chunk header (first arg)
+        // so the Python side buckets chunks per-response and never mixes two
+        // commands' chunks — the id inside the JSON can't be read until the
+        // chunks are reassembled.
         var chunk_size = 1400;
         var total = Math.ceil(encoded.length / chunk_size);
         for (var i = 0; i < total; i++) {
             var piece = encoded.substring(i * chunk_size, (i + 1) * chunk_size);
-            outlet(0, "/response_chunk", i, total, piece);
+            outlet(0, "/response_chunk", (rid || ""), i, total, piece);
         }
     }
+    current_response_request_id = "";
 }
 
 function base64_encode(str) {

package/mcp_server/__init__.py

@@ -1,2 +1,2 @@
 """LivePilot MCP Server — bridges MCP protocol to Ableton Live."""
-__version__ = "1.27.0"
+__version__ = "1.27.2"