@litfamily/lithermes 1.0.23 → 1.0.24

package/README.md

@@ -1,14 +1,14 @@
-<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/cover-motion.webp" width="100%" alt="LitFamily motion cover: five armored robots power on one by one, the LitHermes robot wakes with glowing eyes and a lit frame, then LITFAMILY and KEEP THE WORK LIT. light up." /></picture></p>
+<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/cover-motion.webp" width="100%" alt="LitFamily motion cover: five armored robots power on one by one, the LitHermes robot wakes with glowing eyes and a lit frame, then LITFAMILY and KEEP THE WORK LIT. light up." /></picture></p>
 
 <p align="center">
-<a href="#install"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/badge-version.svg" alt="1.0.23" /></a>
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/badge-license.svg" alt="MIT license" /></a>
+<a href="#install"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/badge-version.svg" alt="1.0.24" /></a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/badge-license.svg" alt="MIT license" /></a>
 </p>
 
 <p align="center">
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/lucide-book-open.svg" width="16" alt="" /> Guide</a> &nbsp;
-<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition film</a> &nbsp;
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/lucide-book-open.svg" width="16" alt="" /> Guide</a> &nbsp;
+<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition film</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
 </p>
 
 # LitHermes
@@ -17,7 +17,7 @@
 
 A plugin for **Hermes Agent**. Put `lit` in front of a request, and Hermes plans the task, does it, checks what it did and leaves a note that the next session can pick up.
 
-**[README and docs on GitHub](https://github.com/wjgoarxiv/lithermes#readme)** · [한국어](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/README_Ko-KR.md)
+**[README and docs on GitHub](https://github.com/wjgoarxiv/lithermes#readme)** · [한국어](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/README_Ko-KR.md)
 
 ## Install
 

package/README_Ko-KR.md

@@ -1,14 +1,14 @@
-<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/cover-motion.webp" width="100%" alt="LitFamily 모션 커버: 다섯 로봇 패널이 차례로 켜지고, LitHermes 로봇의 눈과 테두리가 빛난 뒤 LITFAMILY와 KEEP THE WORK LIT. 문구가 밝아지는 영상" /></picture></p>
+<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/cover-motion.webp" width="100%" alt="LitFamily 모션 커버: 다섯 로봇 패널이 차례로 켜지고, LitHermes 로봇의 눈과 테두리가 빛난 뒤 LITFAMILY와 KEEP THE WORK LIT. 문구가 밝아지는 영상" /></picture></p>
 
 <p align="center">
-<a href="#설치"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/badge-version.svg" alt="1.0.23" /></a>
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/badge-license.svg" alt="MIT license" /></a>
+<a href="#설치"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/badge-version.svg" alt="1.0.24" /></a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/badge-license.svg" alt="MIT license" /></a>
 </p>
 
 <p align="center">
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.ko.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/lucide-book-open.svg" width="16" alt="" /> 안내</a> &nbsp;
-<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition 영상</a> &nbsp;
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.ko.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/lucide-book-open.svg" width="16" alt="" /> 안내</a> &nbsp;
+<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition 영상</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
 </p>
 
 # LitHermes
@@ -17,7 +17,7 @@
 
 **Hermes Agent**용 플러그인입니다. 요청 앞에 `lit`을 붙이면 Hermes가 작업을 계획하고, 해내고, 한 일을 확인한 뒤, 다음 세션이 이어받을 수 있는 기록을 남깁니다.
 
-**[GitHub의 README와 문서](https://github.com/wjgoarxiv/lithermes/blob/main/README_Ko-KR.md)** · [English](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.23/README.md)
+**[GitHub의 README와 문서](https://github.com/wjgoarxiv/lithermes/blob/main/README_Ko-KR.md)** · [English](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.24/README.md)
 
 ## 설치
 

package/assets/lithermes-plugin/README.md

@@ -174,6 +174,18 @@ CLI/plugin name, not the npm package name.
   Native `/goal` is user-managed and unobserved; users may manage it themselves.
   LitHermes has no cache-coherent host controller/post-judge API and performs no automatic update, clear, or resume. Durable `goal_*` state is authoritative for
   criteria, evidence, and completion.
+- The `transform_tool_result` hook is the one post-execution hook whose return
+  value Hermes keeps. After a `terminal` or `execute_code` call it looks for DOCX,
+  PPTX and Markdown files modified while the call ran, in a bounded walk of the
+  call's working directories and the folders of paths named in the command, code
+  or output (depth 4, 4,000 entries per folder, 6 files, 16 MiB per Office file;
+  hidden, dependency and internal `plans/` / `evidence/` / `.hermes/` paths are
+  skipped). Office text goes through the bundled extractor and the LitHumanizer
+  detector. A block-tier finding adds `LIT_HUMANIZER_SCRIPT_DELIVERABLE_BLOCK`
+  with the file, rule ids and matched words to that result's `error` field, so the
+  model reads it before its next step. It instructs a rebuild and cannot refuse
+  the write: the file already exists, and the command's exit code is left as it
+  ran. Each file version is judged once per session.
 - The `post_api_request` observer consumes Hermes' normalized numeric `usage`
   receipt only (`input_tokens`, `output_tokens`, `prompt_tokens`,
   `total_tokens`, `reasoning_tokens`, `cache_read_tokens`, and

package/assets/lithermes-plugin/__init__.py

@@ -434,7 +434,7 @@ def _setup_lithermes_cli(parser) -> None:
         "contract schema: lithermes_llm_contract/v1 headings include #contract.activation, "
         "#contract.inputs, #contract.outputs, #contract.evidence, and #contract.hard_stops\n"
         "hooks: on_session_start, pre_llm_call, pre_tool_call, pre_command, post_tool_call, "
-        "post_api_request, subagent_stop, transform_llm_output, on_session_finalize, on_session_reset\n"
+        "transform_tool_result, post_api_request, subagent_stop, transform_llm_output, on_session_finalize, on_session_reset\n"
         "bounded work: schema 3 via /lit-loop init|status|resume|cancel|complete and lithermes_work_progress\n"
         "wikify knowledge: hermes lithermes knowledge status|query|capture|save|review\n"
         "run `hermes lithermes status` for versions + full surface, or `doctor` for health checks"
@@ -604,6 +604,10 @@ def _post_tool_call(**kwargs: Any) -> None:
     return core.post_tool_call(**kwargs)
 
 
+def _transform_tool_result(**kwargs: Any) -> str | None:
+    return deliverable_hedge_guard.transform_tool_result(**kwargs)
+
+
 def _on_session_start(**kwargs: Any) -> None:
     return core.on_session_start(**kwargs)
 
@@ -643,6 +647,10 @@ def register(ctx) -> None:
     # it only buffers the mutated paths; pre_llm_call renders them into the
     # event-shaped skill route on the next turn.
     ctx.register_hook("post_tool_call", _post_tool_call)
+    # The one post-execution hook whose return Hermes keeps: a deliverable built by
+    # a terminal/execute_code script is checked and, on a block-tier finding, the
+    # tool result the model reads next carries the rebuild instruction.
+    ctx.register_hook("transform_tool_result", _transform_tool_result)
     # Hermes exposes normalized provider usage here. The callback records only
     # bounded numeric cache counters and hashed labels; raw request/response
     # compatibility fields are intentionally ignored.

package/assets/lithermes-plugin/deliverable_hedge_guard.py

@@ -3,6 +3,13 @@
 ``pre_tool_call`` can deny ``write_file`` and ``patch`` before persistence. The
 ``post_tool_call`` observer cannot undo a completed Office/PDF export, so those
 checks are advisory and ask for a source edit and rebuild.
+
+A deliverable built by a script never passes through ``write_file``. For
+``terminal`` and ``execute_code`` calls, ``transform_tool_result`` (the one
+post-execution hook whose return value Hermes keeps) looks for DOCX, PPTX and
+Markdown files modified while the call ran and, on a block-tier finding,
+rewrites the tool result the model reads next. The file is already on disk, so
+this instructs a rebuild; it cannot refuse the write.
 """
 
 from __future__ import annotations
@@ -14,6 +21,8 @@ import re
 import stat
 import subprocess
 import sys
+import time
+from collections import deque
 from dataclasses import dataclass
 from pathlib import Path
 from typing import Iterable
@@ -32,6 +41,18 @@ DETECT_TIMEOUT_SECONDS = 3
 TEXT_SUFFIXES = frozenset({".adoc", ".csv", ".htm", ".html", ".md", ".mdx", ".rst", ".svg", ".tex", ".txt"})
 OFFICE_SUFFIXES = frozenset({".docx", ".pptx", ".pdf"})
 READER_FACING_SUFFIXES = TEXT_SUFFIXES | OFFICE_SUFFIXES
+SCRIPT_TOOLS = frozenset({"terminal", "execute_code"})
+SCRIPT_DELIVERABLE_SUFFIXES = frozenset({".docx", ".md", ".pptx"})
+MAX_SCAN_ROOTS = 6
+MAX_SCAN_DEPTH = 4
+MAX_SCAN_ENTRIES_PER_ROOT = 4000
+MAX_SCAN_FILES = 6
+MAX_SCRIPT_OFFICE_BYTES = 16 * 1024 * 1024
+MAX_SCRIPT_AGGREGATE_BYTES = 32 * 1024 * 1024
+MAX_SCRIPT_TEXT_CHARS = 65_536
+MTIME_SLACK_SECONDS = 2.0
+_SKIP_SCAN_DIRS = frozenset({"node_modules", "__pycache__", "site-packages", "venv"})
+_PATH_TOKEN = re.compile(r"[^\s'\"`=<>|;&(),]+\.(?:docx|pptx|md|py|mjs|js|sh)\b", re.I)
 
 _QUOTED_SPAN = re.compile(
     r'"([^"\n]{1,2000})"|“([^”\n]{1,2000})”|'
@@ -58,12 +79,16 @@ _READ_BUDGET_EXCEEDED = _ReadBudgetExceeded()
 _ROOT_TURNS: dict[str, str] = {}
 _USER_QUOTES: dict[str, tuple[str, ...]] = {}
 _PENDING_ADVISORIES: dict[str, list[str]] = {}
+# File versions (device, inode, mtime, size) a script check already judged, per
+# session, so a later quick command does not repeat the same verdict.
+_SCRIPT_CHECKED: dict[str, list[tuple[int, int, int, int]]] = {}
 
 
 def reset_state() -> None:
     _ROOT_TURNS.clear()
     _USER_QUOTES.clear()
     _PENDING_ADVISORIES.clear()
+    _SCRIPT_CHECKED.clear()
 
 
 def release_session(session_id: object) -> None:
@@ -72,6 +97,7 @@ def release_session(session_id: object) -> None:
         _ROOT_TURNS.pop(key, None)
         _USER_QUOTES.pop(key, None)
         _PENDING_ADVISORIES.pop(key, None)
+        _SCRIPT_CHECKED.pop(key, None)
 
 
 def _bounded_set(mapping: dict[str, object], key: str, value: object) -> None:
@@ -167,12 +193,13 @@ def _read_stable_file_result(
     path_text: str,
     workspace: Path,
     byte_limit: int,
+    max_file_bytes: int = MAX_FILE_BYTES,
 ) -> _StableFile | _ReadBudgetExceeded | None:
     relative = _relative_artifact_path(path_text, workspace)
     directory_flags = _directory_flags()
     if relative is None or directory_flags is None or byte_limit < 0:
         return None
-    read_limit = min(MAX_FILE_BYTES, byte_limit)
+    read_limit = min(max_file_bytes, byte_limit)
     root_parts = tuple(part for part in workspace.parts if part != os.path.sep)
     directory_fds: list[int] = []
     edges: list[tuple[int, str, tuple[int, int], bool]] = []
@@ -211,7 +238,7 @@ def _read_stable_file_result(
             dir_fd=parent_fd,
         )
         initial = os.fstat(artifact_fd)
-        if not stat.S_ISREG(initial.st_mode) or initial.st_size > MAX_FILE_BYTES:
+        if not stat.S_ISREG(initial.st_mode) or initial.st_size > max_file_bytes:
             return None
         if initial.st_size > read_limit:
             return _READ_BUDGET_EXCEEDED
@@ -581,3 +608,163 @@ def observe_completed_paths(
                 "LIT_HUMANIZER_POSTWRITE_ADVISORY: the completed Office/PDF export has "
                 f"{blocks} block-tier and {warnings} warning-tier finding(s). Edit the source and rebuild; Hermes cannot undo a completed export.",
             )
+
+
+def _script_scan_roots(payload: dict, parsed: object, task_id: str, text: str) -> list[Path]:
+    """Directories a script call could have written into, most specific first."""
+    named: list[object] = [parsed.get("cwd") if isinstance(parsed, dict) else None, payload.get("workdir")]
+    terminal = sys.modules.get("tools.terminal_tool")
+    session_cwd = getattr(terminal, "get_session_cwd", None)
+    if callable(session_cwd) and task_id:
+        try:
+            named.append(session_cwd(task_id))
+        except Exception:  # noqa: BLE001 - a host helper failure only drops one candidate
+            pass
+    named.append(os.getcwd())
+    base = next((Path(str(item)).expanduser() for item in named if isinstance(item, str) and item and os.path.isdir(item)), Path.cwd())
+    for token in _PATH_TOKEN.findall(text)[:32]:
+        candidate = Path(token).expanduser()
+        named.insert(len(named) - 1, os.fspath((candidate if candidate.is_absolute() else base / candidate).parent))
+    roots: list[Path] = []
+    for item in named:
+        if not isinstance(item, str) or not item:
+            continue
+        try:
+            root = Path(item).expanduser().resolve(strict=True)
+        except (OSError, RuntimeError):
+            continue
+        if root.is_dir() and root not in roots:
+            roots.append(root)
+        if len(roots) >= MAX_SCAN_ROOTS:
+            break
+    return roots
+
+
+def _recent_deliverables(
+    roots: list[Path], since: float, checked: list[tuple[int, int, int, int]]
+) -> list[tuple[Path, Path, tuple[int, int, int, int]]]:
+    """Bounded breadth-first walk for deliverables modified at or after ``since``."""
+    found: list[tuple[Path, Path, tuple[int, int, int, int]]] = []
+    seen: set[tuple[int, int]] = set()
+    for root in roots:
+        queue: deque[tuple[Path, int]] = deque([(root, 0)])
+        entries = 0
+        while queue and entries < MAX_SCAN_ENTRIES_PER_ROOT:
+            directory, depth = queue.popleft()
+            try:
+                with os.scandir(directory) as iterator:
+                    for entry in iterator:
+                        entries += 1
+                        if entries > MAX_SCAN_ENTRIES_PER_ROOT:
+                            break
+                        name = entry.name
+                        if entry.is_dir(follow_symlinks=False):
+                            if (
+                                depth < MAX_SCAN_DEPTH
+                                and not name.startswith(".")
+                                and name not in _SKIP_SCAN_DIRS
+                                and not _INTERNAL_FILE.search(name)
+                            ):
+                                queue.append((Path(entry.path), depth + 1))
+                            continue
+                        if os.path.splitext(name)[1].lower() not in SCRIPT_DELIVERABLE_SUFFIXES:
+                            continue
+                        info = entry.stat(follow_symlinks=False)
+                        identity = (info.st_dev, info.st_ino)
+                        version = (info.st_dev, info.st_ino, info.st_mtime_ns, info.st_size)
+                        if (
+                            not stat.S_ISREG(info.st_mode)
+                            or info.st_mtime < since
+                            or identity in seen
+                            or version in checked
+                        ):
+                            continue
+                        relative = Path(entry.path).relative_to(root)
+                        if _relative_artifact_path(relative.as_posix(), root) is None:
+                            continue
+                        seen.add(identity)
+                        found.append((root, relative, version))
+                        if len(found) >= MAX_SCAN_FILES:
+                            return found
+            except OSError:
+                continue
+    return found
+
+
+def _script_block_message(hits: list[tuple[str, list[dict]]]) -> str:
+    parts = []
+    for name, blocks in hits:
+        refs = ", ".join(
+            f"{item['rule']}:{item['line']} \"{' '.join(item['match'].split())[:60]}\"" for item in blocks[:5]
+        )
+        extra = f" (+{len(blocks) - 5})" if len(blocks) > 5 else ""
+        parts.append(f"{name} ({refs}{extra})")
+    return (
+        "LIT_HUMANIZER_SCRIPT_DELIVERABLE_BLOCK: this call wrote reader-facing file(s) with block-tier "
+        f"LitHumanizer findings: {'; '.join(parts)}. The file is already on disk and is not ready to present. "
+        "Rewrite those sentences in the build source, then rebuild: state a real limit once as a fact beside "
+        "the number it affects, and say what the document is not for in your chat reply, not in the file."
+    )
+
+
+def transform_tool_result(
+    tool_name: object = None,
+    args: object = None,
+    result: object = None,
+    session_id: object = None,
+    task_id: object = None,
+    duration_ms: object = 0,
+    **_: object,
+) -> str | None:
+    """Check deliverables a terminal/execute_code call just built; rewrite its result on a block hit."""
+    if str(tool_name or "") not in SCRIPT_TOOLS or not isinstance(result, str):
+        return None
+    key = str(session_id or "") or str(task_id or "")
+    payload = args if isinstance(args, dict) else {}
+    try:
+        parsed = json.loads(result)
+    except (TypeError, ValueError):
+        parsed = None
+    elapsed = duration_ms / 1000 if isinstance(duration_ms, (int, float)) and duration_ms > 0 else 0.0
+    since = time.time() - elapsed - MTIME_SLACK_SECONDS
+    output = parsed.get("output") if isinstance(parsed, dict) else result
+    text = "\n".join(
+        str(value)[:MAX_SCRIPT_TEXT_CHARS]
+        for value in (payload.get("command"), payload.get("code"), output)
+        if isinstance(value, str)
+    )
+    roots = _script_scan_roots(payload, parsed, str(task_id or ""), text)
+    hits: list[tuple[str, list[dict]]] = []
+    remaining = MAX_SCRIPT_AGGREGATE_BYTES
+    checked = _SCRIPT_CHECKED.get(key, [])
+    for root, relative, version in _recent_deliverables(roots, since, checked):
+        suffix = relative.suffix.lower()
+        cap = MAX_SCRIPT_OFFICE_BYTES if suffix in OFFICE_SUFFIXES else MAX_FILE_BYTES
+        read = _read_stable_file_result(relative.as_posix(), root, remaining, max_file_bytes=cap)
+        if not isinstance(read, _StableFile):
+            _fail_open(key)
+            continue
+        remaining -= read.byte_count
+        try:
+            content = read.data.decode("utf-8") if suffix == ".md" else _extract_office(read.data, suffix)
+        except (OSError, RuntimeError, ValueError, subprocess.TimeoutExpired, ImportError):
+            _fail_open(key)
+            continue
+        findings = _run_detector(_mask_exact_user_quotes(content, key), relative.as_posix())
+        if findings is None:
+            _fail_open(key)
+            continue
+        checked = [*checked, version][-64:]
+        if key:
+            _bounded_set(_SCRIPT_CHECKED, key, checked)
+        blocks = [item for item in findings if item["severity"] == "block"]
+        if blocks:
+            hits.append((relative.as_posix(), blocks))
+    if not hits:
+        return None
+    message = _script_block_message(hits)
+    if isinstance(parsed, dict):
+        previous = parsed.get("error")
+        parsed["error"] = f"{previous}\n{message}" if previous else message
+        return json.dumps(parsed, ensure_ascii=False)
+    return f"{result}\n\n{message}"

package/assets/lithermes-plugin/diagnostics.py

@@ -43,6 +43,7 @@ HOOKS = (
     "pre_tool_call",
     "pre_command",
     "post_tool_call",
+    "transform_tool_result",
     "post_api_request",
     "subagent_stop",
     "transform_llm_output",

package/assets/lithermes-plugin/humanizer_detector.py

@@ -125,6 +125,17 @@ def _inline_code_as_spaces(line: str) -> str:
     return re.sub(r"(`+)[^`]*?\1", lambda match: " " * len(match.group(0)), line)
 
 
+_QUOTE_PREFIX = re.compile(r"^\s{0,3}>\s?")
+_BOLD_LABEL_QUOTE = re.compile(r"^\s{0,3}>\s?(?:\*\*|__)[^*_\n]{1,24}(?:\*\*|__)")
+
+
+def _callout_text(line: str) -> str:
+    """A quote opening with a bold label is the author's own callout; blank the marker and read it."""
+    if not _BOLD_LABEL_QUOTE.match(line):
+        return ""
+    return _inline_code_as_spaces(_QUOTE_PREFIX.sub(lambda prefix: " " * len(prefix.group(0)), line, count=1))
+
+
 def _source_rows(text: str) -> list[dict]:
     fence: tuple[str, int] | None = None
     caption_pending = 0
@@ -148,7 +159,10 @@ def _source_rows(text: str) -> list[dict]:
         if re.match(r"^\s{0,3}>", line):
             caption_pending = 0
             figure_active = False
-            rows.append({"line": line, "number": number, "candidate": "", "skipped": True, "caption": False, "caption_attribution": False})
+            rows.append({
+                "line": line, "number": number, "candidate": "", "callout": _callout_text(line),
+                "skipped": True, "caption": False, "caption_attribution": False,
+            })
             continue
         candidate = _inline_code_as_spaces(line)
         caption = _is_caption(line)
@@ -228,11 +242,13 @@ def _split_sentences(span: dict) -> list[dict]:
 
 def _rule_segments(rows: list[dict], rule: dict) -> list[dict]:
     skip_captions = "table_figure_caption" in rule["context"]
+    read_callouts = "blockquote_callout" in rule["context"]
     if rule["scope"] == "line":
         return [
-            {"text": row["candidate"], "line": row["number"]}
+            {"text": row["callout"] if row.get("callout") and read_callouts else row["candidate"], "line": row["number"]}
             for row in rows
-            if not row["skipped"] and not (skip_captions and (row["caption"] or row["caption_attribution"]))
+            if (read_callouts and row.get("callout"))
+            or (not row["skipped"] and not (skip_captions and (row["caption"] or row["caption_attribution"])))
         ]
     segments: list[dict] = []
     group: list[dict] = []
@@ -246,6 +262,10 @@ def _rule_segments(rows: list[dict], rule: dict) -> list[dict]:
 
     for row in rows:
         exempt = skip_captions and (row["caption"] or row["caption_attribution"])
+        if read_callouts and row.get("callout"):
+            flush()
+            segments.append({"text": row["callout"], "line": row["number"]})
+            continue
         if row["skipped"] or exempt or (rule["scope"] == "sentence" and not row["candidate"].strip()):
             flush()
         else:
@@ -269,9 +289,9 @@ def scan_text(text: str, rules: Iterable[dict] | None = None, file: str = "<stdi
     selected = list(rules) if rules is not None else load_rules()
     rows = _source_rows(str(text or ""))
     findings = []
-    cache: dict[tuple[str, bool], list[dict]] = {}
+    cache: dict[tuple[str, bool, bool], list[dict]] = {}
     for rule in selected:
-        key = (rule["scope"], "table_figure_caption" in rule["context"])
+        key = (rule["scope"], "table_figure_caption" in rule["context"], "blockquote_callout" in rule["context"])
         if key not in cache:
             # Scope is the only rule-specific segmentation property. A shallow
             # rule copy shares its context only when caption handling differs.

package/assets/lithermes-plugin/payload-version.json

@@ -1,7 +1,7 @@
 {
-  "syncedAt": "2026-10-15T09:46:03.900Z",
+  "syncedAt": "2026-10-17T05:27:18.436Z",
   "source": "bundled-payload",
-  "sourceHash": "164f684b1b783534bf9b71f657f9e9d86b321e018c4a1ac02e7abe3cf604edd6",
+  "sourceHash": "8c064731aa1b50d96ed0bd56d63fdf9f6035e990123543583024446fd0627c08",
   "files": [
     {
       "path": "NOTICE.md",
@@ -9,11 +9,11 @@
     },
     {
       "path": "README.md",
-      "sha256": "03256264acbaba328e51b82a527fe511db7f4ff907d0a74762bdaf0baadc8e20"
+      "sha256": "2749b24d24a2af75fc54f48d59916549fb876ea823a22a2881817cdb6542cbcf"
     },
     {
       "path": "__init__.py",
-      "sha256": "76cf72655600b82544e9047fab1f5f4030927803c0cfbc08fca311204f37d32c"
+      "sha256": "4793a2c3b1384528d59c725d7f33a6fd81995c6120906311888a5f17b5eec941"
     },
     {
       "path": "auto_handoff.py",
@@ -85,11 +85,11 @@
     },
     {
       "path": "deliverable_hedge_guard.py",
-      "sha256": "804cf1253064e94ac19db45df03a5eb2ed68ef968fe1658c720d56159bf29048"
+      "sha256": "084eb4381d8be3055eada034bf0c3c31339b9c766cbf3b19fd85042e2e254039"
     },
     {
       "path": "diagnostics.py",
-      "sha256": "88d7b76438c82755fb9456882994ab4efd70c889705c04095e5a12d1759425fb"
+      "sha256": "51200cd2a2d9782c16b09aaca32773ebbd46b501739094af185c8ea87009f696"
     },
     {
       "path": "handoff.py",
@@ -97,7 +97,7 @@
     },
     {
       "path": "humanizer_detector.py",
-      "sha256": "bca68ebaad84ab2fec5a41a91f293abe9e194011669ef03386611c8412561e97"
+      "sha256": "48e4f3a02326521769ac193b858eecbb90773cb765aa8d5794ffaa3c1dee2d62"
     },
     {
       "path": "humanizer_ko_metrics.py",
@@ -181,7 +181,7 @@
     },
     {
       "path": "plugin.yaml",
-      "sha256": "92d263e3abf96c4533db6814cfb6a104f3a8822e3de205106eaa4edff1c76338"
+      "sha256": "660275e3e5e46e75d21d4fc6a4a715f6a8cd95b4cc7cfc3c799a295d299d844d"
     },
     {
       "path": "provider_metrics.py",
@@ -1285,7 +1285,7 @@
     },
     {
       "path": "skills/frontend-ui-ux/references/complete-contract.md",
-      "sha256": "f872ab0d5e2c5a99c40fec7630df67c45c23a927b562fd35943e404204e756aa"
+      "sha256": "aee6777260bf314b911a54c8ae8f005f3111d6dafd9fafdc2e8e5fe76534e118"
     },
     {
       "path": "skills/frontend-ui-ux/references/composition.md",
@@ -3277,7 +3277,7 @@
     },
     {
       "path": "skills/lit-humanizer/SKILL.md",
-      "sha256": "1df63514da5f9295578c3fc7ff475ae911da2310ed43ca3e794759dc4414b66a"
+      "sha256": "47c562a344c89d16be5271f86874af556991dd5c9a26f45e0800eda5a08f5381"
     },
     {
       "path": "skills/lit-humanizer/assets/report-skeleton.md",
@@ -3513,11 +3513,11 @@
     },
     {
       "path": "skills/lit-humanizer/references/taxonomy.md",
-      "sha256": "d0958c702eb531f82612ff48d16134afbfd6c65b40bc80ebc4bce778a02b4238"
+      "sha256": "7bdda99ad8f2e1358b70f96e017d5a70b879251b4681f8752babaf7598030239"
     },
     {
       "path": "skills/lit-humanizer/rules.json",
-      "sha256": "806e8caaeea25b34fa7a2caf8957a4af6fe95e557d5db71fa6d6e90fcea7091c"
+      "sha256": "61f494bbbd9dee707b96b50308bf9c045d6b268218a442b3022b1c29194bb95c"
     },
     {
       "path": "skills/lit-humanizer/scripts/detect.py",
@@ -4405,7 +4405,7 @@
     },
     {
       "path": "skills/visual-qa/references/complete-contract.md",
-      "sha256": "daa71196ff16fc545fdaad07367cdcd425c9e5cd3cbcb10e20f28ba10f1c3be3"
+      "sha256": "cceb7ffbac840f63517aa2a47918a2d02b063b383c763942724f64881667e40c"
     },
     {
       "path": "skills/visual-qa/schemas/evidence-manifest-v1alpha1.schema.json",

package/assets/lithermes-plugin/plugin.yaml

@@ -1,5 +1,5 @@
 name: lithermes
-version: 1.0.23
+version: 1.0.24
 description: "Hermes-native workflow toolkit: litgoal durable runtime, 5-lane review orchestrator, Litwork commands, skills, and prompt steering."
 author: "LitHermes contributors"
 kind: standalone
@@ -10,6 +10,7 @@ hooks:
   - pre_tool_call
   - pre_command
   - post_tool_call
+  - transform_tool_result
   - post_api_request
   - subagent_stop
   - transform_llm_output
@@ -33,6 +34,7 @@ provides_hooks:
   - pre_tool_call
   - pre_command
   - post_tool_call
+  - transform_tool_result
   - post_api_request
   - subagent_stop
   - transform_llm_output

package/assets/lithermes-plugin/skills/frontend-ui-ux/references/complete-contract.md

@@ -445,7 +445,7 @@ isolated Hermes home. Use `--hermes-home`; never `--home`.
 
 ```text
 $ node packages/lithermes-installer/bin/lithermes.js install --yes --offline --no-hud --hermes-home "$ISOLATED"
-Installed LitHermes 1.0.23
+Installed LitHermes 1.0.24
 plugin: $ISOLATED/plugins/lithermes
 model config: updated
 
@@ -462,7 +462,7 @@ installed payload: PASS
 enabled config: PASS
 
 $ hermes lithermes doctor
-[OK] plugin.yaml readable (version 1.0.23)
+[OK] plugin.yaml readable (version 1.0.24)
 [OK] skills bundled: 36
 [OK] litgoal durable runtime importable
 ```

package/assets/lithermes-plugin/skills/lit-humanizer/SKILL.md

@@ -21,7 +21,7 @@ identity:
   invocation: "lithermes:<frontmatter.name>"
 surfaces:
   manifest: plugin.yaml
-  python_entrypoints: ["__init__.py:register", "core.py:pre_llm_call", "deliverable_hedge_guard.py:pre_tool_call"]
+  python_entrypoints: ["__init__.py:register", "core.py:pre_llm_call", "deliverable_hedge_guard.py:pre_tool_call", "deliverable_hedge_guard.py:transform_tool_result"]
   bundled_rule: rules/bundled-rules/lit-humanizer.md
   detector: skills/lit-humanizer/scripts/detect.py
 state:
@@ -60,7 +60,7 @@ after_payload_edit: "npm --prefix packages/lithermes-installer run sync-plugin -
 
 For a file edit, the Hermes `pre_tool_call` guard blocks block-tier findings in added text passed to `write_file` or `patch` for Markdown, HTML, text, TeX, CSV, SVG, reStructuredText, and AsciiDoc files. Warn-tier findings arrive as advisory context. Fenced code, inline code, exact quoted user spans, and internal `plans/`, `evidence/`, `HANDOFF*`, ledger, `.lit*/`, and `.hermes/` paths are excluded. The guard never scans unchanged file text. Use `write_file` or `patch` for prose edits when pre-save checking is required.
 
-DOCX/PPTX/PDF checks happen after a supported file-write event or when a script-like tool reports an explicit output path in its result. Hermes' `post_tool_call` is observer-only, so a finding cannot undo a completed export: revise the source and rebuild the file. DOCX/PPTX extraction uses Python's standard-library ZIP/XML support. PDF extraction uses host `pdftotext` when present; if it is unavailable or fails, the scan fails open and reports that boundary. Script-created files without a reported output path are outside automatic post-write inspection; run the detector explicitly after such a write.
+DOCX/PPTX/PDF checks happen after a supported file-write event or when a script-like tool reports an explicit output path in its result. Hermes' `post_tool_call` is observer-only, so a finding cannot undo a completed export: revise the source and rebuild the file. DOCX/PPTX extraction uses Python's standard-library ZIP/XML support. PDF extraction uses host `pdftotext` when present; if it is unavailable or fails, the scan fails open and reports that boundary. A DOCX, PPTX or Markdown file that a `terminal` or `execute_code` call builds is checked when that call returns: Hermes' `transform_tool_result` hook finds files modified while the call ran (the reported or session working directory, `workdir`, and folders of paths named in the command, code or output; bounded depth, file count and size, internal paths skipped) and, on a block-tier finding, puts `LIT_HUMANIZER_SCRIPT_DELIVERABLE_BLOCK` with the rule ids in that tool result's `error` field. The command's exit code stays as it ran, and the file stays on disk: edit the build source and rebuild before presenting it. A file written outside those folders, deeper than the scan, or by a background process after the call returned is not seen; run the detector on it explicitly.
 
 ## #contract.language_and_scope
 

package/assets/lithermes-plugin/skills/lit-humanizer/references/taxonomy.md

@@ -17,7 +17,7 @@ This original category comes from the 26 real lines in `examples/detector-valida
 - ko-bracket-status-tag and en-bracket-status-tag — ko/en, block. Replace bracket keys with a sentence describing the status.
 - ko-standalone-scope-disclaimer and en-standalone-scope-disclaimer — ko/en, block for stock disclaimers. Preserve a user-requested legal, medical or safety notice and place it once where it applies.
 - ko-status-negation (also catches 쓰지, 않습니다/않았습니다 endings and bold-wrapped endings), ko-mi-status, en-epistemic-negation and en-not-performed — warnings. A negative result or unperformed action may be the finding. Write the actor, scope and verb plainly; never turn unknown into false or an estimate into a fact.
-- ko-negative-pledge and en-negative-pledge — ko/en, block. A line that tells the reader what the document, a table or a number is not for (`동일 조건의 독립 성능 비교로 쓰지 않음`, `This is not intended as a head-to-head benchmark`) is a pledge to the reader. Move it to the chat reply, or restate the real limit as a data fact beside the number ("샘플은 한 공정 조건만 포함한다"). Operating rules, method lines and legal or financial notices ("원금을 보장하지 않습니다", "not a substitute for professional advice") are not pledges and pass; so does a negative finding such as 수율을 개선하지 않았다.
+- ko-negative-pledge and en-negative-pledge — ko/en, block. A line that tells the reader what the document, a table or a number is not for (`동일 조건의 독립 성능 비교로 쓰지 않음`, `This is not intended as a head-to-head benchmark`) is a pledge to the reader. Move it to the chat reply, or restate the real limit as a data fact beside the number ("샘플은 한 공정 조건만 포함한다"). Operating rules, method lines and legal or financial notices ("원금을 보장하지 않습니다", "not a substitute for professional advice") are not pledges and pass; so does a negative finding such as 수율을 개선하지 않았다. The same refusal covers the phrasings a model reaches for next (`이 표는 순위가 아닙니다`, `숫자끼리 서로 비교할 수 없습니다`, `This table is not a ranking`), while a plain instruction such as `Do not compare these values directly; convert to SI first` or a unit-mismatch rule is an operating rule and passes. A quote line is skipped unless it opens with a bold label (`> **주의:** …`); that is the author's own callout and is read like any other line.
 - ko-negative-pledge-repeat — ko, block, whole-text scope. Two or more sentences ending in 해석하지/주장하지/대표하지 + 않음, or in a claim noun + 이/가 + 아님, make a disclaimer list. One such sentence stays with the warning above.
 - ko-plain-meta-label-warn and en-plain-caveat-label — warnings for boundary headings. They may be useful in internal or technical packets.
 - en-knowledge-cutoff, en-ai-self-disclaimer, en-hope-helps and ko-chatbot-signoff — block. Remove the model wrapper or generic sign-off, then retain the answer.

package/assets/lithermes-plugin/skills/lit-humanizer/rules.json

@@ -884,14 +884,15 @@
       "id": "ko-negative-pledge",
       "lang": "ko",
       "severity": "block",
-      "pattern": "(?<![가-힣])(?:이|본|해당|위|아래)\\s+(?:자료|문서|보고서|슬라이드|덱|표|그림|그래프|차트|수치|결과|비교|분석|내용|예시)(?:은|는)\\s[^.!?\\n]{0,40}?(?:(?:해석하|의미하|주장하|대표하)(?:지\\s*(?:[*_]{1,2}\\s*)?(?:않(?:음|는다|습니다)|말\\s*것|마세요|마십시오)|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다))|(?:(?:비교|결론|벤치마크|순위|대표값|일반화)(?:이|가)|목적이|위한\\s*것이)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다)(?![가-힣]))|(?:비교|결론|벤치마크|순위|대표값|일반화)(?:으로|로)\\s*(?:[*_]{1,2}\\s*)?(?:쓰|사용하|해석하|읽|간주하|인용하)(?:지\\s*(?:[*_]{1,2}\\s*)?(?:않(?:음|는다|습니다)|말\\s*것|마세요|마십시오)|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다))|(?:공개|배포|대외|외부|홍보|발표|보고|비교|인용|공식)용\\s*(?:자료|문서|수치|표|그래프)(?:이|가)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다)(?![가-힣])",
+      "pattern": "(?<![가-힣])(?:이|본|해당|위|아래)\\s+(?:자료|문서|보고서|슬라이드|덱|표|그림|그래프|차트|수치|결과|비교|분석|내용|예시)(?:은|는)\\s[^.!?\\n]{0,40}?(?:(?:해석하|의미하|주장하|대표하)(?:지\\s*(?:[*_]{1,2}\\s*)?(?:않(?:음|는다|습니다)|말\\s*것|마세요|마십시오|말아\\s*주(?:세요|십시오))|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다)(?![가-힣]))|(?:(?:비교|결론|벤치마크|순위|대표값|일반화)(?:이|가)|목적이|(?:위한|려는)\\s*것이)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다)(?![가-힣])|순위표(?:이|가)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다|아니고)(?![가-힣]))|(?:비교|결론|벤치마크|순위|대표값|일반화)(?:처럼|으로|로)\\s*(?:[*_]{1,2}\\s*)?(?:쓰|사용하|해석하|읽|간주하|인용하)(?:지\\s*(?:[*_]{1,2}\\s*)?(?:않(?:음|는다|습니다)|말\\s*것|마세요|마십시오|말아\\s*주(?:세요|십시오))|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다)(?![가-힣]))|(?:공개|배포|대외|외부|홍보|발표|보고|비교|인용|공식)용\\s*(?:자료|문서|수치|표|그래프)(?:이|가)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다)(?![가-힣])|(?<![가-힣])(?:숫자|수치)(?:들)?(?:은|는|이|가|을|를|끼리|도)(?![가-힣])(?:(?!면\\s)[^.!?\\n]){0,40}?(?<![와과]\\s)(?<![와과])비교할\\s*수\\s*(?:는\\s*)?없(?:다|습니다|음|나)(?![가-힣])|(?<![가-힣])(?:숫자|수치)(?:들)?끼리\\s*(?:서로\\s*|직접\\s*)?비교(?:해서|하여|해)\\s[^.!?\\n]{0,30}?[\"”’']\\s*(?:는|라는)\\s*결론[^.!?\\n]{0,8}?(?:수\\s*없(?:다|습니다)(?![가-힣])|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다)(?![가-힣]))|(?:(?<![가-힣])(?:숫자|수치)(?:들)?|(?<![가-힣])(?:이|위|아래|본)\\s+(?:표|값|자료|그래프|차트))[^.!?\\n]{0,40}?(?:빠르|느리)다고\\s*판단하(?:지\\s*(?:[*_]{1,2}\\s*)?(?:말\\s*것|마세요|마십시오|말아\\s*주(?:세요|십시오))|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다)(?![가-힣]))|(?:빠르|느리)다[\"”’']?\\s*(?:는|라는)\\s*식으로\\s*읽(?:지\\s*(?:[*_]{1,2}\\s*)?(?:말\\s*것|마세요|마십시오|말아\\s*주(?:세요|십시오))|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다)(?![가-힣]))|만으로\\s[^.!?\\n]{0,40}?(?<![가-힣])순위를\\s*정하[^.!?\\n]{0,25}?(?:수\\s*없(?:다|습니다|음)(?![가-힣])|(?:해|하)서는\\s*안\\s*(?:됨|된다|됩니다)(?![가-힣]))|(?<![가-힣])순위[^.!?\\n]{0,20}?근거로\\s*(?:[*_]{1,2}\\s*)?사용할\\s*수\\s*(?:는\\s*)?없(?:다|습니다|음)(?![가-힣])|할\\s*수\\s*없는\\s*것\\s{0,3}:\\s{0,3}(?:[*_]{1,2}\\s{0,3})?[^.!?\\n]{0,30}?(?<![가-힣])순위를?\\s*매기거나|(?<![가-힣])표의\\s+(?:나열\\s+)?순서(?:는|가)\\s[^.!?\\n]{0,20}?(?<![가-힣])순위(?:(?:를|을)\\s*뜻하지\\s*(?:[*_]{1,2}\\s*)?않(?:음|는다|습니다)|(?:가|이)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다)(?![가-힣]))",
       "flags": "m",
       "scope": "line",
       "context": [
         "fenced_code",
-        "quoted_user_text"
+        "quoted_user_text",
+        "blockquote_callout"
       ],
-      "rationale": "A line that tells the reader what the document, a table or a number is not for is a pledge to the reader, not a finding, so the write is refused and the pledge goes to the chat reply or turns into a data fact. The pattern recognises three shapes: a self-reference such as 이 표 or 본 자료 followed by a negated claim verb or a claim noun plus 아님; a claim noun such as 비교 or 순위 followed by (으)로 and a negated use verb, which has no subject at all; and a purpose-용 noun such as 공개용 수치 followed by 아님. Use verbs after a self-reference, 근거, 평가, 증거 and 추천 are deliberately absent, as are the legal and financial notice verbs 대체하, 보장하 and 권유, because operating rules, method lines and standard notices end that way.",
+      "rationale": "A line that tells the reader what the document, a table or a number is not for is a pledge to the reader, not a finding, so the write is refused and the pledge goes to the chat reply or turns into a data fact. The pattern recognises these shapes: a self-reference such as 이 표 or 본 자료 followed by a negated claim verb, a claim noun plus 아님 (순위표 also takes 아니고), or 위한/-려는 것이 아님; a claim noun such as 비교 or 순위 followed by 처럼/(으)로 and a negated use or reading verb, including 말아 주세요; a purpose-용 noun such as 공개용 수치 followed by 아님; 숫자 or 수치 said to be incomparable (서로 비교할 수 없다) or compared among themselves toward a quoted verdict; a speed judgment or a quoted verdict forbidden for these numbers; ranking refused for this data (…만으로 순위를 정할 수 없다, 할 수 없는 것: 순위를 매기거나); and a table's row order said not to be a ranking. Use verbs after a self-reference, 근거, 평가, 증거 and 추천 stay out, and so do inference limits (결론 내릴 수 없다), operating rules (…근거로 사용하지 마십시오), conditional method facts (…면 비교할 수 없다), type-system rules (숫자 문자열을 그대로 비교하지 마십시오), reported speech and explainers (…면 안 된다는 반론), order notices with no table anchor, and the legal and financial notice verbs 대체하, 보장하 and 권유, because operating rules, method lines, manuals and standard notices end that way. A quote line that opens with a bold label (> **주의:** …) is read as the author's own callout; any other quote line is skipped.",
       "fixture_ids": [
         "ko-negative-pledge:positive",
         "ko-negative-pledge:negative"
@@ -906,7 +907,8 @@
       "scope": "document",
       "context": [
         "fenced_code",
-        "quoted_user_text"
+        "quoted_user_text",
+        "blockquote_callout"
       ],
       "rationale": "Two sentences in one text that each end in 해석하지, 주장하지 or 대표하지 plus 않음, or in a claim noun plus 이/가 아님, turn a document into a list of disclaimers. The verbs 의미하, 간주하 and 인용하 and the use verbs stay out because repeated definitions, data-processing rules and operating rules end that way. A single such sentence is left to the warning-tier ko-status-negation.",
       "fixture_ids": [
@@ -918,14 +920,15 @@
       "id": "en-negative-pledge",
       "lang": "en",
       "severity": "block",
-      "pattern": "\\b(?:this|these)\\s+(?:deck|report|document|analysis|table|chart|figure|figures|numbers|results|slide|comparison)\\s+(?:(?:is|are)\\s+not\\s+(?:intended|meant|to\\s+be\\s+(?:read|used|taken|interpreted))(?:\\s+to\\s+be\\s+(?:read|used|taken|interpreted))?\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|(?:should|must)\\s+not\\s+be\\s+(?:read|used|taken|interpreted)\\s+as\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|makes?\\s+no\\s+claims?\\s+(?:about|that|regarding|as\\s+to)\\b)|\\b(?:this|these)\\s+(?:is|are)\\s+not\\s+(?:intended|meant)\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|\\bthe\\s+(?:deck|report|document|analysis)\\s+makes?\\s+no\\s+claims?\\s+(?:about|that|regarding|as\\s+to)\\b|(?:^|\\s[-*]\\s)\\s*(?:[-*]\\s+|\\d+\\.\\s+)?(?:[*_]{1,2})?not\\s+(?:intended|meant|to\\s+be\\s+read|to\\s+be\\s+used)\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|\\b(?:this|these)\\s+(?:table|chart|figure|figures|numbers|results|comparison|analysis)\\s+(?:does|do)\\s+not\\s+constitute\\s+(?:an?\\s+)?[^.!?]{0,60}?\\b(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)",
+      "pattern": "\\b(?:this|these)\\s+(?:deck|report|document|analysis|table|chart|figure|figures|numbers|results|slide|comparison)\\s+(?:(?:is|are)\\s+not\\s+(?:intended|meant|to\\s+be\\s+(?:read|used|taken|interpreted))(?:\\s+to\\s+be\\s+(?:read|used|taken|interpreted))?\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|(?:should|must)\\s+not\\s+be\\s+(?:read|used|taken|interpreted)\\s+as\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|makes?\\s+no\\s+claims?\\s+(?:about|that|regarding|as\\s+to)\\b)|\\b(?:this|these)\\s+(?:is|are)\\s+not\\s+(?:intended|meant)\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|\\bthe\\s+(?:deck|report|document|analysis)\\s+makes?\\s+no\\s+claims?\\s+(?:about|that|regarding|as\\s+to)\\b|(?:^|\\s[-*]\\s)\\s*(?:[-*]\\s+|\\d+\\.\\s+)?(?:[*_]{1,2})?not\\s+(?:intended|meant|to\\s+be\\s+read|to\\s+be\\s+used)\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|\\b(?:this|these)\\s+(?:table|chart|figure|figures|numbers|results|comparison|analysis)\\s+(?:does|do)\\s+not\\s+constitute\\s+(?:an?\\s+)?[^.!?]{0,60}?\\b(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|\\bthey\\s+are\\s+not\\s+(?:an?\\s+)?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)(?=\\s*(?:[.!?*_]|$))|\\b(?:do\\s+not|don[’']t)\\s+compare\\s+(?:these|those)\\s+(?:numbers|figures|results|values|scores|latencies)(?:\\s+(?:with|to)\\s+(?:each\\s+other|one\\s+another)\\b|(?=\\s*(?:[.!?*_]|$)))|\\b(?:these|those|the)\\s+(?:numbers|figures)\\s+are\\s+not\\s+comparable(?:\\s+(?:with|to)\\s+(?:each\\s+other|one\\s+another)\\b|(?=\\s*(?:[.!?*_]|$)))|\\b(?:this|the|these|our)\\s+(?:table|chart|figure|graph|list|report|document|deck|slide|page|summary|overview|analysis)s?\\s+(?:is|are)\\s+not\\s+(?:(?:meant|intended)\\s+)?(?:(?:to\\s+be\\s+)?(?:an?\\s+)?(?:ranking|benchmark|comparison|leaderboard|endorsement)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)(?=\\s*(?:[.!?*_]|$))|to\\s+(?:rank|compare|benchmark)\\b)|\\b(?:do\\s+not|don[’']t)\\s+read\\s+(?:this|the|these|our)\\s+(?:table|chart|figure|graph|list|report|document|deck|slide|page|summary|overview|analysis)s?\\s+as\\s+(?:an?\\s+)?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)",
       "flags": "i",
       "scope": "sentence",
       "context": [
         "fenced_code",
-        "quoted_user_text"
+        "quoted_user_text",
+        "blockquote_callout"
       ],
-      "rationale": "A sentence that says the deck, report, table or figures are not meant to be read as a comparison, benchmark, ranking or evaluation is a pledge to the reader, not a finding. The pattern needs a comparison noun, so the data-fact sentence about a sample that does not represent a population and investment-advice notices pass. A match followed by a substitute, replacement or professional advice is dropped, which keeps the standard legal notice. A sentence-initial 'Not to be read as' list item is covered too.",
+      "rationale": "A sentence that says the deck, report, table or figures are not meant to be read as a comparison, benchmark, ranking or evaluation is a pledge to the reader, not a finding. The pattern needs a comparison noun, so the data-fact sentence about a sample that does not represent a population and investment-advice notices pass. A match followed by a substitute, replacement or professional advice is dropped, which keeps the standard legal notice. A sentence-initial 'Not to be read as' list item is covered, and so are the short closers 'They are not a ranking.', 'Do not compare these numbers (with each other).' and 'The numbers are not comparable.', and a deliverable subject (this table, the report, our deck) that is not a ranking, is not meant to rank or compare, or is not to be read as a ranking. A refusal that continues into a description or an instruction (compare these values directly; …) is left alone, and a bare 'this' is not a subject. A bold-label quote callout is read as the author's own line.",
       "fixture_ids": [
         "en-negative-pledge:positive",
         "en-negative-pledge:negative"

package/assets/lithermes-plugin/skills/visual-qa/references/complete-contract.md

@@ -485,7 +485,7 @@ isolated Hermes home. Use `--hermes-home`; never `--home`.
 
 ```text
 $ node packages/lithermes-installer/bin/lithermes.js install --yes --offline --no-hud --hermes-home "$ISOLATED"
-Installed LitHermes 1.0.23
+Installed LitHermes 1.0.24
 plugin: $ISOLATED/plugins/lithermes
 model config: updated
 
@@ -502,7 +502,7 @@ installed payload: PASS
 enabled config: PASS
 
 $ hermes lithermes doctor
-[OK] plugin.yaml readable (version 1.0.23)
+[OK] plugin.yaml readable (version 1.0.24)
 [OK] skills bundled: 36
 [OK] litgoal durable runtime importable
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@litfamily/lithermes",
-  "version": "1.0.23",
+  "version": "1.0.24",
   "description": "Hermes Agent plugin that plans, builds, checks and hands off your work when you add one word, lit, to a request.",
   "keywords": [
     "hermes-agent",

package/readme-assets/badge-version.svg

@@ -1 +1 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.23"><title>release: 1.0.23</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.23</text></g></svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.24"><title>release: 1.0.24</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.24</text></g></svg>