@litfamily/lithermes 1.0.25 → 1.0.27

package/README.md

@@ -1,23 +1,23 @@
-<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/cover-motion.webp" width="100%" alt="LitFamily motion cover: five armored robots power on one by one, the LitHermes robot wakes with glowing eyes and a lit frame, then LITFAMILY and KEEP THE WORK LIT. light up." /></picture></p>
+<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/cover-motion.webp" width="100%" alt="LitFamily motion cover: five armored robots power on one by one, the LitHermes robot wakes with glowing eyes and a lit frame, then LITFAMILY and KEEP THE WORK LIT. light up." /></picture></p>
 
 <p align="center">
-<a href="#install"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/badge-version.svg" alt="1.0.25" /></a>
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/badge-license.svg" alt="MIT license" /></a>
+<a href="#install"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/badge-version.svg" alt="1.0.27" /></a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/badge-license.svg" alt="MIT license" /></a>
 </p>
 
 <p align="center">
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/lucide-book-open.svg" width="16" alt="" /> Guide</a> &nbsp;
-<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition film</a> &nbsp;
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/lucide-book-open.svg" width="16" alt="" /> Guide</a> &nbsp;
+<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition film</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
 </p>
 
 # LitHermes
 
 **Keep the work lit.**
 
-A plugin for **Hermes Agent**. Put `lit` in front of a request, and Hermes plans the task, does it, checks what it did and leaves a note that the next session can pick up.
+A plugin for **Hermes Agent**. Put `lit` in front of a request, and Hermes plans the task, does it, checks the result and writes down where things stand, so the next session can pick up where this one stopped.
 
-**[README and docs on GitHub](https://github.com/wjgoarxiv/lithermes#readme)** · [한국어](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/README_Ko-KR.md)
+**[README and docs on GitHub](https://github.com/wjgoarxiv/lithermes#readme)** · [한국어](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/README_Ko-KR.md)
 
 ## Install
 
@@ -27,7 +27,7 @@ You need Hermes Agent, Node.js 18 or later, and write access to your Hermes home
 npx --yes --package @litfamily/lithermes@latest -- lithermes install --yes --no-style
 ```
 
-It installs the plugin and updates your Hermes configuration without stopping to ask; `--no-style` skips the reply-style picker. To try it in a separate profile, set `HERMES_HOME` to an empty directory first. [More install options](https://github.com/wjgoarxiv/lithermes/blob/main/docs/install.md).
+The command copies the plugin into your Hermes home and switches it on, without stopping to ask; `--no-style` skips the question about reply style. To try it in a separate profile first, point `HERMES_HOME` at an empty directory before you install. [More install options](https://github.com/wjgoarxiv/lithermes/blob/main/docs/install.md).
 
 ## Your first task
 
@@ -37,7 +37,7 @@ Restart the Hermes CLI or gateway, then type:
 lit Build a to-do list in one HTML file without external dependencies. Implement add, complete, and delete; record what you checked and what remains.
 ```
 
-Once the work has started, the reply opens with a `🔥 **LIT IGNITED · <discipline>** 🔥` line. When it finishes, check the file yourself, then run `/lit-handoff` so the next session in this project can continue. [Automatic handoff](https://github.com/wjgoarxiv/lithermes/blob/main/docs/automatic-handoff.md) is off by default; `/lit-handoff auto on 60` (a whole number from 1 to 99) asks for a handoff before you run `/compact`.
+The reply opens with a `🔥 **LIT IGNITED · <discipline>** 🔥` line once the lit workflow has started. When the task is done, check the file yourself, then run `/lit-handoff` so the next session in this project can carry on from the note it writes. [Automatic handoff](https://github.com/wjgoarxiv/lithermes/blob/main/docs/automatic-handoff.md) is off by default; `/lit-handoff auto on 60` (a whole number from 1 to 99) asks for a handoff before you run `/compact`.
 
 ## What you get
 

package/README_Ko-KR.md

@@ -1,23 +1,23 @@
-<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/cover-motion.webp" width="100%" alt="LitFamily 모션 커버: 다섯 로봇 패널이 차례로 켜지고, LitHermes 로봇의 눈과 테두리가 빛난 뒤 LITFAMILY와 KEEP THE WORK LIT. 문구가 밝아지는 영상" /></picture></p>
+<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/cover-motion.webp" width="100%" alt="LitFamily 모션 커버: 다섯 로봇 패널이 차례로 켜지고, LitHermes 로봇의 눈과 테두리가 빛난 뒤 LITFAMILY와 KEEP THE WORK LIT. 문구가 밝아지는 영상" /></picture></p>
 
 <p align="center">
-<a href="#설치"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/badge-version.svg" alt="1.0.25" /></a>
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/badge-license.svg" alt="MIT license" /></a>
+<a href="#설치"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/badge-version.svg" alt="1.0.27" /></a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/badge-license.svg" alt="MIT license" /></a>
 </p>
 
 <p align="center">
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.ko.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/lucide-book-open.svg" width="16" alt="" /> 안내</a> &nbsp;
-<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition 영상</a> &nbsp;
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.ko.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/lucide-book-open.svg" width="16" alt="" /> 안내</a> &nbsp;
+<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition 영상</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
 </p>
 
 # LitHermes
 
 **Keep the work lit.**
 
-**Hermes Agent**용 플러그인입니다. 요청 앞에 `lit`을 붙이면 Hermes가 작업을 계획하고, 해내고, 한 일을 확인한 뒤, 다음 세션이 이어받을 수 있는 기록을 남깁니다.
+**Hermes Agent**용 플러그인입니다. 요청 앞에 `lit`을 붙이면 Hermes가 작업을 계획하고, 해내고, 결과를 확인한 뒤 어디까지 왔는지 적어 둡니다. 그래서 다음 세션이 그 기록을 읽고 멈춘 자리에서 이어 갈 수 있습니다.
 
-**[GitHub의 README와 문서](https://github.com/wjgoarxiv/lithermes/blob/main/README_Ko-KR.md)** · [English](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.25/README.md)
+**[GitHub의 README와 문서](https://github.com/wjgoarxiv/lithermes/blob/main/README_Ko-KR.md)** · [English](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.27/README.md)
 
 ## 설치
 
@@ -27,7 +27,7 @@ Hermes Agent와 Node.js 18 이상, 그리고 Hermes 홈(기본 `~/.hermes`)에
 npx --yes --package @litfamily/lithermes@latest -- lithermes install --yes --no-style
 ```
 
-플러그인을 설치하고 Hermes 설정을 고치는 동안 승인을 묻느라 멈추지 않습니다. `--no-style`은 답변 문체 고르기를 건너뜁니다. 따로 떼어 둔 프로필에서 써 보려면 먼저 `HERMES_HOME`을 빈 디렉터리로 지정하세요. 다른 옵션은 [설치 문서](https://github.com/wjgoarxiv/lithermes/blob/main/docs/install.ko.md)에 있습니다.
+이 명령은 플러그인을 Hermes 홈에 복사하고 켜 두며, 중간에 승인을 묻지 않습니다. `--no-style`은 답변 문체를 묻는 단계를 건너뜁니다. 따로 떼어 둔 프로필에서 먼저 써 보려면 설치 전에 `HERMES_HOME`을 빈 디렉터리로 지정하세요. 다른 옵션은 [설치 문서](https://github.com/wjgoarxiv/lithermes/blob/main/docs/install.ko.md)에 있습니다.
 
 ## 첫 작업
 
@@ -37,7 +37,7 @@ Hermes CLI 또는 gateway를 다시 시작한 뒤 이렇게 입력하세요.
 lit 외부 의존성 없이 HTML 파일 하나로 할 일 목록을 만들어줘. 추가·완료·삭제를 구현하고 확인한 내용과 다음 행동을 남겨줘.
 ```
 
-응답 첫 줄에 `🔥 **LIT IGNITED · <discipline>** 🔥`가 나오면 작업이 시작된 것입니다. 끝나면 파일을 직접 확인하고 `/lit-handoff`를 실행하세요. 같은 프로젝트의 다음 세션이 그 기록을 읽고 이어갑니다. [자동 핸드오프](https://github.com/wjgoarxiv/lithermes/blob/main/docs/automatic-handoff.ko.md)는 기본값이 꺼짐이고, `/lit-handoff auto on 60`(1에서 99 사이의 정수)을 켜 두면 `/compact` 전에 인계 기록을 먼저 요청합니다.
+응답 첫 줄에 `🔥 **LIT IGNITED · <discipline>** 🔥`가 나오면 lit 작업이 시작된 것입니다. 끝나면 파일을 직접 확인하고 `/lit-handoff`를 실행하세요. 같은 프로젝트의 다음 세션이 그 기록을 읽고 이어 갑니다. [자동 핸드오프](https://github.com/wjgoarxiv/lithermes/blob/main/docs/automatic-handoff.ko.md)는 기본값이 꺼짐이고, `/lit-handoff auto on 60`(1에서 99 사이의 정수)을 켜 두면 `/compact` 전에 인계 기록을 먼저 요청합니다.
 
 ## 할 수 있는 일
 

package/assets/lithermes-plugin/__init__.py

@@ -608,6 +608,7 @@ def _pre_tool_call(**kwargs: Any) -> dict[str, str] | None:
         args=kwargs.get("args"),
         session_id=kwargs.get("session_id"),
         workspace=kwargs.get("workspace"),
+        task_id=kwargs.get("task_id"),
     )
     if humanizer_denial is not None:
         return humanizer_denial

package/assets/lithermes-plugin/deliverable_hedge_guard.py

@@ -15,6 +15,7 @@ this instructs a rebuild; it cannot refuse the write.
 from __future__ import annotations
 
 import difflib
+import errno
 import json
 import os
 import re
@@ -171,22 +172,50 @@ def _directory_flags() -> int | None:
     return os.O_RDONLY | directory | nofollow | getattr(os, "O_CLOEXEC", 0)
 
 
-def _relative_artifact_path(path_text: str, workspace: Path) -> Path | None:
+def _project_root() -> Path | None:
+    """The Hermes launch directory (this process's cwd), widened to the git toplevel above it."""
+    try:
+        launch = Path(os.getcwd()).resolve(strict=True)
+    except (OSError, RuntimeError):
+        return None
+    return next((folder for folder in (launch, *launch.parents) if (folder / ".git").exists()), launch)
+
+
+def _locate_artifact(path_text: str, workspace: Path) -> tuple[Path, Path] | None:
+    """(read root, path under it) for a reader copy, or None for internal and non-reader paths.
+
+    A path outside the working directory (absolute, or ``../`` after a terminal ``cd``) is
+    still a deliverable when it lies inside the launch project: it is judged by its path
+    under the project and read under its own parent. Anything outside both is skipped.
+    """
     candidate = Path(path_text).expanduser()
     target = candidate if candidate.is_absolute() else workspace / candidate
     absolute = Path(os.path.abspath(os.fspath(target)))
     try:
-        relative = absolute.relative_to(workspace)
+        root, relative = workspace, absolute.relative_to(workspace)
+        judged = relative
     except ValueError:
-        return None
+        project = _project_root()
+        root, relative = Path(os.path.realpath(absolute.parent)), Path(absolute.name)
+        try:
+            judged = (root / relative).relative_to(project) if project else None
+        except ValueError:
+            judged = None
+        if judged is None:
+            return None
     if (
         not relative.parts
         or any(part in {"", ".", ".."} for part in relative.parts)
         or relative.suffix.lower() not in READER_FACING_SUFFIXES
-        or _INTERNAL_FILE.search(relative.as_posix())
+        or _INTERNAL_FILE.search(judged.as_posix())
     ):
         return None
-    return relative
+    return root, relative
+
+
+def _relative_artifact_path(path_text: str, workspace: Path) -> Path | None:
+    located = _locate_artifact(path_text, workspace)
+    return located[1] if located else None
 
 
 def _read_stable_file_result(
@@ -195,10 +224,11 @@ def _read_stable_file_result(
     byte_limit: int,
     max_file_bytes: int = MAX_FILE_BYTES,
 ) -> _StableFile | _ReadBudgetExceeded | None:
-    relative = _relative_artifact_path(path_text, workspace)
+    located = _locate_artifact(path_text, workspace)
     directory_flags = _directory_flags()
-    if relative is None or directory_flags is None or byte_limit < 0:
+    if located is None or directory_flags is None or byte_limit < 0:
         return None
+    workspace, relative = located
     read_limit = min(max_file_bytes, byte_limit)
     root_parts = tuple(part for part in workspace.parts if part != os.path.sep)
     directory_fds: list[int] = []
@@ -387,20 +417,31 @@ def _run_detector(text: str, path_text: str) -> list[dict] | None:
             or finding["line"] < 1
             or finding["line_end"] < finding["line"]
             or not isinstance(finding.get("match"), str)
+            or not isinstance(finding.get("lines", []), list)
+            or not all(isinstance(line, int) for line in finding.get("lines", []))
         ):
             return None
     return findings
 
 
+def _touches_changed(finding: dict, changed: set[int]) -> bool:
+    """A document-scope finding lists its occurrence lines; any other finding counts its whole span."""
+    if "lines" in finding:
+        return any(line in changed for line in finding["lines"])
+    return any(finding["line"] <= line <= finding["line_end"] for line in changed)
+
+
 def _changed_findings(text: str, path_text: str, changed: set[int], session_id: str) -> list[dict] | None:
     findings = _run_detector(_mask_exact_user_quotes(text, session_id), path_text)
     if findings is None:
         return None
-    return [
-        finding
-        for finding in findings
-        if any(finding["line"] <= line <= finding["line_end"] for line in changed)
-    ]
+    return [finding for finding in findings if _touches_changed(finding, changed)]
+
+
+NEGATION_ADVICE = (
+    "negation-cluster: several negations sit in one place. Say what the thing is first, then add the caveat once. "
+    "Example: write \"18,420 visits in total, including repeat visits\" instead of \"18,420 is not the number of residents\"."
+)
 
 
 def _block_message(findings: list[dict]) -> dict[str, str] | None:
@@ -409,9 +450,10 @@ def _block_message(findings: list[dict]) -> dict[str, str] | None:
         return None
     refs = ", ".join(f"{item['rule']}:{item['line']}" for item in blocks[:5])
     extra = f" (+{len(blocks) - 5})" if len(blocks) > 5 else ""
+    advice = f" {NEGATION_ADVICE}" if any(item["rule"] == "negation-cluster" for item in blocks) else ""
     return {
         "action": "block",
-        "message": f"LitHumanizer blocked {len(blocks)} block-tier finding(s) in added prose ({refs}{extra}). Revise the added wording; warnings remain contextual review signals.",
+        "message": f"LitHumanizer blocked {len(blocks)} block-tier finding(s) in added prose ({refs}{extra}). Revise the added wording; warnings remain contextual review signals.{advice}",
     }
 
 
@@ -420,6 +462,8 @@ def _warn_if_needed(session_id: str, findings: list[dict]) -> None:
     if warnings:
         refs = ", ".join(f"{item['rule']}:{item['line']}" for item in warnings[:5])
         _queue_advisory(session_id, f"LitHumanizer warning-tier review signal(s) in added prose: {refs}. Consider them in context; they are not a ban or authorship judgment.")
+        if any(item["rule"] == "negation-cluster" for item in warnings):
+            _queue_advisory(session_id, NEGATION_ADVICE)
 
 
 def _fail_open(session_id: str) -> None:
@@ -435,8 +479,12 @@ def _read_previous(path_text: str, workspace: Path) -> str | None:
             return None
     target = Path(path_text).expanduser()
     target = target if target.is_absolute() else workspace / target
-    if result is None and not target.exists() and not target.is_symlink():
-        return ""
+    try:
+        if result is None and not target.exists() and not target.is_symlink():
+            return ""
+    except OSError as error:
+        # No file can sit at a path the system refuses to name, so the whole edit is new text.
+        return "" if error.errno == errno.ENAMETOOLONG else None
     return None
 
 
@@ -450,7 +498,11 @@ def _check_text_change(session_id: str, path_text: str, proposed: str, workspace
     if previous is None:
         _fail_open(session_id)
         return None
-    if len(previous.encode("utf-8")) > MAX_DETECT_BYTES:
+    return _check_proposed(session_id, path_text, previous, proposed)
+
+
+def _check_proposed(session_id: str, path_text: str, previous: str, proposed: str) -> dict[str, str] | None:
+    if len(proposed.encode("utf-8")) > MAX_DETECT_BYTES or len(previous.encode("utf-8")) > MAX_DETECT_BYTES:
         _fail_open(session_id)
         return None
     changed = _changed_lines(previous, proposed)
@@ -464,33 +516,106 @@ def _check_text_change(session_id: str, path_text: str, proposed: str, workspace
     return _block_message(findings)
 
 
-def _patch_added_chunks(patch_text: str) -> list[tuple[str, str]]:
-    chunks: list[tuple[str, str]] = []
-    path = ""
-    kind = ""
-    added: list[str] = []
-
-    def flush() -> None:
-        nonlocal added
-        if path and kind in {"Add", "Update"} and added:
-            chunks.append((path, "\n".join(added)))
-        added = []
-
-    for line in patch_text.splitlines():
+def _patch_operations(patch_text: str) -> list[tuple[str, str, list[tuple[str, list[tuple[str, str]]]]]]:
+    """V4A Add/Update operations as (kind, path, hunks); a hunk is (context hint, [(prefix, line)])."""
+    operations: list[tuple[str, str, list[tuple[str, list[tuple[str, str]]]]]] = []
+    hunks: list[tuple[str, list[tuple[str, str]]]] | None = None
+    for raw in patch_text.split("\n"):
+        line = raw[:-1] if raw.endswith("\r") else raw
         header = _V4A_FILE.match(line)
         if header:
-            flush()
-            kind, path = header.group(1), header.group(2).strip()
-        elif _V4A_MOVE.match(line):
-            flush()
-        elif line.startswith("+++") or line.startswith("---"):
-            flush()
-        elif line.startswith("+"):
-            added.append(line[1:])
+            hunks = [] if header.group(1) in {"Add", "Update"} else None
+            if hunks is not None:
+                operations.append((header.group(1), header.group(2).strip(), hunks))
+        elif _V4A_MOVE.match(line) or line.startswith("*** "):
+            continue
+        elif hunks is None or not line or line.startswith(("+++", "---", "\\")):
+            continue
+        elif line.startswith("@@"):
+            hint = re.match(r"@@\s*(.+?)\s*@@", line)
+            hunks.append((hint.group(1) if hint else "", []))
         else:
-            flush()
-    flush()
-    return chunks
+            if not hunks:
+                hunks.append(("", []))
+            hunks[-1][1].append((line[0], line[1:]) if line[0] in "+- " else (" ", line))
+    return [(kind, path, [hunk for hunk in found if hunk[1]]) for kind, path, found in operations]
+
+
+def _apply_hunks(previous: str, hunks: list[tuple[str, list[tuple[str, str]]]]) -> str | None:
+    """Apply V4A hunks the way Hermes places them; None when a hunk does not match exactly once."""
+    text = previous
+    for hint, lines in hunks:
+        search = [content for prefix, content in lines if prefix != "+"]
+        replace = "\n".join(content for prefix, content in lines if prefix != "-")
+        if not search:
+            if hint and text.count(hint) > 1:
+                return None
+            if hint and hint in text:
+                eol = text.find("\n", text.find(hint))
+                text = text + "\n" + replace if eol == -1 else text[: eol + 1] + replace + "\n" + text[eol + 1 :]
+            else:
+                text = text.rstrip("\n") + "\n" + replace + "\n"
+            continue
+        pattern = "\n".join(search)
+        if not pattern.strip() or text.count(pattern) != 1:
+            return None
+        text = text.replace(pattern, replace, 1)
+    return text
+
+
+def _hunk_text(hunks: list[tuple[str, list[tuple[str, str]]]]) -> tuple[str, set[int]]:
+    """Context and added lines with a blank line at every hunk break; the added lines count as changed."""
+    lines: list[str] = []
+    changed: set[int] = set()
+    for _hint, hunk in hunks:
+        if lines:
+            lines.append("")
+        for prefix, content in hunk:
+            if prefix == "-":
+                continue
+            lines.append(content)
+            if prefix == "+":
+                changed.add(len(lines))
+    return "\n".join(lines) + "\n", changed
+
+
+def _check_patch_operation(
+    session_id: str, kind: str, path_text: str, hunks: list[tuple[str, list[tuple[str, str]]]], workspace: Path
+) -> dict[str, str] | None:
+    previous = _read_previous(path_text, workspace)
+    if previous is not None:
+        proposed = "\n".join(c for _h, hunk in hunks for p, c in hunk if p == "+") + "\n" if kind == "Add" else _apply_hunks(previous, hunks)
+        if proposed is not None:
+            return _check_proposed(session_id, path_text, previous, proposed)
+    text, changed = _hunk_text(hunks)
+    if not changed:
+        return None
+    if len(text.encode("utf-8")) > MAX_DETECT_BYTES:
+        _fail_open(session_id)
+        return None
+    findings = _changed_findings(text, path_text, changed, session_id)
+    if findings is None:
+        _fail_open(session_id)
+        return None
+    _warn_if_needed(session_id, findings)
+    return _block_message(findings)
+
+
+def _file_tool_base(task_id: object) -> str:
+    """The directory Hermes resolves a relative file-tool path against: the session cwd a terminal ``cd`` recorded."""
+    terminal = sys.modules.get("tools.terminal_tool")
+    session_cwd = getattr(terminal, "get_session_cwd", None)
+    if callable(session_cwd):
+        try:
+            recorded = session_cwd(str(task_id or "") or None)
+        except Exception:  # noqa: BLE001 - a host helper failure falls back to the next anchor
+            recorded = None
+        if isinstance(recorded, str) and os.path.isabs(recorded) and os.path.isdir(recorded):
+            return recorded
+    configured = os.environ.get("TERMINAL_CWD", "")
+    if os.path.isabs(configured) and os.path.isdir(configured):
+        return configured
+    return os.getcwd()
 
 
 def pre_tool_call(
@@ -499,6 +624,7 @@ def pre_tool_call(
     session_id: object,
     *,
     workspace: object = None,
+    task_id: object = None,
 ) -> dict[str, str] | None:
     """Block block-tier findings before Hermes persists a supported text edit."""
     name = str(tool_name or "")
@@ -507,7 +633,7 @@ def pre_tool_call(
     if not key or name not in {"write_file", "patch"}:
         return None
     try:
-        root = Path(workspace or Path.cwd()).expanduser().resolve(strict=True)
+        root = Path(workspace or _file_tool_base(task_id)).expanduser().resolve(strict=True)
     except (OSError, RuntimeError):
         _fail_open(key)
         return None
@@ -525,21 +651,18 @@ def pre_tool_call(
         if not isinstance(old_string, str) or not isinstance(new_string, str):
             return None
         previous = _read_previous(path_text, root)
+        if previous == "" and old_string:
+            return _check_text_change(key, path_text, new_string, root)
         if previous is None or old_string not in previous:
             _fail_open(key)
             return None
         proposed = previous.replace(old_string, new_string) if payload.get("replace_all") else previous.replace(old_string, new_string, 1)
         return _check_text_change(key, path_text, proposed, root)
     if mode == "patch" and isinstance(payload.get("patch"), str):
-        for path_text, added_text in _patch_added_chunks(payload["patch"]):
+        for kind, path_text, hunks in _patch_operations(payload["patch"]):
             if not _path_is_reader_copy(path_text, root):
                 continue
-            findings = _changed_findings(added_text, path_text, set(range(1, len(added_text.splitlines()) + 1)), key)
-            if findings is None:
-                _fail_open(key)
-                continue
-            _warn_if_needed(key, findings)
-            denial = _block_message(findings)
+            denial = _check_patch_operation(key, kind, path_text, hunks, root)
             if denial:
                 return denial
     return None

package/assets/lithermes-plugin/diagnostics.py

@@ -185,22 +185,6 @@ def _host_config_path() -> Path:
     return home / "config.yaml"
 
 
-def _retired_hint_data_line() -> str | None:
-    # The Jev skill hint is gone. Files it wrote under Hermes home are left for the
-    # user to delete; doctor only says where they are.
-    state = _host_config_path().parent / "lithermes"
-    try:
-        found = any(
-            entry.name == "jev-trace.jsonl" or entry.name.startswith("jev-last-")
-            for entry in state.iterdir()
-        )
-    except OSError:
-        return None
-    if not found:
-        return None
-    return f"old Jev data can be deleted at {state}/jev-*"
-
-
 def _is_secret_looking_scalar(value: object) -> bool:
     if not isinstance(value, str):
         return False
@@ -583,9 +567,6 @@ def doctor_report(host_version: str | None = None) -> tuple[list[str], int]:
     )
     healthy = healthy and knowledge_ok
     lines.append(f"[NOTE] {_provider_metrics.capability_line()}")
-    retired_hint = _retired_hint_data_line()
-    if retired_hint:
-        lines.append(f"[NOTE] {retired_hint}")
     handoff_tag, handoff_text = _auto_handoff.doctor_line()
     lines.append(f"[{handoff_tag}] {handoff_text}")
     if version != "unknown":

package/assets/lithermes-plugin/humanizer_detector.py

@@ -282,8 +282,98 @@ def _matches_language(rule: dict, text: str) -> bool:
     return True
 
 
+NEGATION_CLUSTER_ID = "negation-cluster"
+NEGATION_BLOCK_KO = 2
+NEGATION_BLOCK_TOTAL = 3
+NEGATION_WARN_TOTAL = 2
+_NEGATION_KO = re.compile(r"아닙니다|아님|아니다|아니며|아니라|아닌")
+_NEGATION_KO_REWORD = re.compile(
+    r"(?:로|으로) (?:읽을|볼|해석할|간주할) 수 없|(?:로|으로) 보지 않|(?:을|를) (?:뜻하지|의미하지|나타내지|가리키지) 않"
+    r"|(?:와|과)는 다(?:릅니다|르다|름|르며|르고|르므로)|(?:로|으로) (?:읽으면|보면|해석하면) 안 "
+)
+_NEGATION_EN = re.compile(r"\b(?:is not|are not|isn't|aren't|not a|rather than)\b", re.IGNORECASE)
+_NEGATION_EN_REWORD = re.compile(
+    r"\b(?:should not|cannot|can't|must not) be (?:read|taken|interpreted|treated) as\b|\b(?:does|do) not (?:mean|represent|indicate)\b",
+    re.IGNORECASE,
+)
+_TABLE_RULE_ROW = re.compile(r"[\s|:-]+")
+_SHORT_TABLE_CELL = 12
+STDIN_WARNING_CAP = 256
+STDIN_BLOCK_CAP = 1024
+STDIN_OUTPUT_BYTES = 1024 * 1024
+
+
+def _negations(text: str) -> list[tuple[re.Match, bool]]:
+    """Definitional negations in ``text`` as (match, is_korean), plain and reworded forms alike."""
+    found = [(match, True) for pattern in (_NEGATION_KO, _NEGATION_KO_REWORD) for match in pattern.finditer(text)]
+    found += [(match, False) for pattern in (_NEGATION_EN, _NEGATION_EN_REWORD) for match in pattern.finditer(text)]
+    return sorted(found, key=lambda item: item[0].start())
+
+
+def _negation_finding(file: str, units: list[tuple[str, int]], excerpt: str) -> dict | None:
+    """Block on two Korean or three negations in total, warn on exactly two."""
+    hits = [(match, korean, line) for text, line in units for match, korean in _negations(text)]
+    korean = sum(1 for _match, is_korean, _line in hits if is_korean)
+    if korean >= NEGATION_BLOCK_KO or len(hits) >= NEGATION_BLOCK_TOTAL:
+        severity = "block"
+    elif len(hits) >= NEGATION_WARN_TOTAL:
+        severity = "warn"
+    else:
+        return None
+    return {
+        "file": str(file),
+        "rule": NEGATION_CLUSTER_ID,
+        "severity": severity,
+        "line": min(line for _match, _korean, line in hits),
+        "line_end": max(line for _match, _korean, line in hits),
+        "match": " … ".join(match.group(0) for match, _korean, _line in hits)[:240],
+        "excerpt": re.sub(r"\s+", " ", excerpt.strip())[:180],
+    }
+
+
+def negation_cluster_findings(rows: list[dict], file: str = "<stdin>") -> list[dict]:
+    """Count definitional negations per paragraph, list block or table column.
+
+    Fenced code and blockquote rows are already skipped and inline code is
+    blanked by ``_source_rows``; a skipped or blank row ends a block. The line
+    engine has no block scope, so this check sits beside it.
+    """
+    blocks: list[list[dict]] = []
+    current: list[dict] = []
+    for row in rows:
+        if row["skipped"] or not row["candidate"].strip():
+            if current:
+                blocks.append(current)
+            current = []
+        else:
+            current.append(row)
+    if current:
+        blocks.append(current)
+    findings = []
+    for block in blocks:
+        excerpt = " ".join(row["candidate"] for row in block)
+        if all(row["candidate"].lstrip().startswith("|") for row in block):
+            columns: dict[int, list[tuple[str, int]]] = {}
+            for row in block:
+                if _TABLE_RULE_ROW.fullmatch(row["candidate"]):
+                    continue
+                cells = [cell.strip() for cell in row["candidate"].strip().strip("|").split("|")]
+                for index, cell in enumerate(cells):
+                    if len(cell) > _SHORT_TABLE_CELL:
+                        columns.setdefault(index, []).append((cell, row["number"]))
+            candidates = [_negation_finding(file, cells, excerpt) for cells in columns.values()]
+        else:
+            candidates = [_negation_finding(file, [(row["candidate"], row["number"]) for row in block], excerpt)]
+        findings.extend(item for item in candidates if item is not None)
+    return findings
+
+
 def scan_text(text: str, rules: Iterable[dict] | None = None, file: str = "<stdin>") -> list[dict]:
-    """Return at most one finding per rule segment with canonical line mapping."""
+    """Return at most one finding per rule segment with canonical line mapping.
+
+    With the bundled rule set (``rules`` omitted) the block-scoped
+    ``negation-cluster`` check is added; an explicit rule list scans only those rules.
+    """
     if _is_internal_path(file):
         return []
     selected = list(rules) if rules is not None else load_rules()
@@ -303,15 +393,24 @@ def scan_text(text: str, rules: Iterable[dict] | None = None, file: str = "<stdi
             if match is None:
                 continue
             excerpt = re.sub(r"\s+", " ", segment["text"].strip())[:180]
-            findings.append({
+            line = _line_at_offset(segment, match.start())
+            line_end = _line_at_offset(segment, max(match.start(), match.end() - 1))
+            finding = {
                 "file": str(file),
                 "rule": rule["id"],
                 "severity": rule["severity"],
-                "line": _line_at_offset(segment, match.start()),
-                "line_end": _line_at_offset(segment, max(match.start(), match.end() - 1)),
+                "line": line,
+                "line_end": line_end,
                 "match": match.group(0)[:240],
                 "excerpt": excerpt,
-            })
+            }
+            if rule["scope"] == "document":
+                # A document-scope match runs from its first occurrence to its last; the
+                # lines between belong to neither, so only the two ends are occurrence lines.
+                finding["lines"] = sorted({line, line_end})
+            findings.append(finding)
+    if rules is None:
+        findings.extend(negation_cluster_findings(rows, file))
     return findings
 
 
@@ -354,6 +453,19 @@ def main(argv: list[str] | None = None) -> int:
     except (OSError, UnicodeError, ValueError, json.JSONDecodeError, RuntimeError) as error:
         print(f"LIT_HUMANIZER_SCAN_ERROR: {error}", file=sys.stderr)
         return 3
+    if args.stdin_json:
+        # The pre-write guard rejects oversized output; warnings must never crowd out a block,
+        # and a flood of blocks is trimmed so the guard still sees one instead of failing open.
+        # Each finding repeats the path, so the output is also capped by bytes, blocks first.
+        warnings = [finding for finding in findings if finding["severity"] != "block"]
+        blocks = [finding for finding in findings if finding["severity"] == "block"]
+        kept, size = [], 2
+        for finding in blocks[:STDIN_BLOCK_CAP] + warnings[:STDIN_WARNING_CAP]:
+            size += len(json.dumps(finding, ensure_ascii=False, separators=(",", ":")).encode("utf-8")) + 1
+            if size > STDIN_OUTPUT_BYTES and kept:
+                break
+            kept.append(finding)
+        findings = kept
     if args.stdin_json or args.json:
         print(json.dumps(findings, ensure_ascii=False, separators=(",", ":")))
     else:

package/assets/lithermes-plugin/payload-version.json

@@ -1,7 +1,7 @@
 {
-  "syncedAt": "2026-10-18T09:42:50.174Z",
+  "syncedAt": "2026-10-19T12:29:49.086Z",
   "source": "bundled-payload",
-  "sourceHash": "91ef78ac52df745352ac069cd0872ee6a17253c4fa55b5577e52482b9b329971",
+  "sourceHash": "2bb93dc4c7d46d48dcc893b33faebb7065d343a2f636fadb1d25f1695c1ef23d",
   "files": [
     {
       "path": "NOTICE.md",
@@ -13,7 +13,7 @@
     },
     {
       "path": "__init__.py",
-      "sha256": "057f8d630323ac427a48749c05cbd23076810fb66fa78821c6ab16076574127c"
+      "sha256": "3ccd142c77ef0dc3039d0c61f8e6ee7a8e39ea02c3889ba7908b044467ac7286"
     },
     {
       "path": "auto_handoff.py",
@@ -85,11 +85,11 @@
     },
     {
       "path": "deliverable_hedge_guard.py",
-      "sha256": "084eb4381d8be3055eada034bf0c3c31339b9c766cbf3b19fd85042e2e254039"
+      "sha256": "f65110568952f197e93452e8a9d01c21cd75479b987110d36e9b05a78f34a302"
     },
     {
       "path": "diagnostics.py",
-      "sha256": "1fd173995dd1abc1d58cc719ecd351f91bd1c65c9056fdffa064fda684f18318"
+      "sha256": "13fdef893d10cecdffdbb61daf64629e5ccbf4777964e75930ca34017472828e"
     },
     {
       "path": "handoff.py",
@@ -97,7 +97,7 @@
     },
     {
       "path": "humanizer_detector.py",
-      "sha256": "48e4f3a02326521769ac193b858eecbb90773cb765aa8d5794ffaa3c1dee2d62"
+      "sha256": "675bd49ffb0c581c6f47a52945ddc9ef205071a722fd3f708c76252c1fa11804"
     },
     {
       "path": "humanizer_ko_metrics.py",
@@ -177,7 +177,7 @@
     },
     {
       "path": "plugin.yaml",
-      "sha256": "d9eae351c038cfaff91980666d4d3ebe8f2ad82f31bf8ef9539fb4c4ad088e84"
+      "sha256": "7af0cc7db4c684a51fa874d1aff88dac3bba80c18346820b30b3afc78631b5a8"
     },
     {
       "path": "provider_metrics.py",
@@ -201,7 +201,7 @@
     },
     {
       "path": "rules/bundled-rules/lit-humanizer.md",
-      "sha256": "aad3a931da64fa2dd67eb80503a976d7f61a3f885e5aca4178f562789e19266e"
+      "sha256": "f926c9f456daf7cd5dc081d0e9f2e15d3a7aa73cb37c75d292076a00810b6d34"
     },
     {
       "path": "rules/bundled-rules/windows-git-bash.md",
@@ -1281,7 +1281,7 @@
     },
     {
       "path": "skills/frontend-ui-ux/references/complete-contract.md",
-      "sha256": "df99f8f532c06232220537041128d8a5480bb60aedbbe3af8909444aaa8944ac"
+      "sha256": "f3d9ba63058388aba9ecd7684b15ae7d544ac488d7be1f78ce06886f18fbc623"
     },
     {
       "path": "skills/frontend-ui-ux/references/composition.md",
@@ -3273,7 +3273,7 @@
     },
     {
       "path": "skills/lit-humanizer/SKILL.md",
-      "sha256": "47c562a344c89d16be5271f86874af556991dd5c9a26f45e0800eda5a08f5381"
+      "sha256": "1fb63c16cb88adee827b2aa9bdce4edb0fcd88adf9c331d29597556f996d4fb9"
     },
     {
       "path": "skills/lit-humanizer/assets/report-skeleton.md",
@@ -4401,7 +4401,7 @@
     },
     {
       "path": "skills/visual-qa/references/complete-contract.md",
-      "sha256": "16ccc6a685865e00a226fbdbbdf1d4e170ca9c37731a94974ea135f281032e51"
+      "sha256": "0ed07370f299c81cfdd7fc6c26c8d3e4af784286df25234a425ee8ec3cd7a3b3"
     },
     {
       "path": "skills/visual-qa/schemas/evidence-manifest-v1alpha1.schema.json",

package/assets/lithermes-plugin/plugin.yaml

@@ -1,5 +1,5 @@
 name: lithermes
-version: 1.0.25
+version: 1.0.27
 description: "Hermes-native workflow toolkit: litgoal durable runtime, 5-lane review orchestrator, Litwork commands, skills, and prompt steering."
 author: "LitHermes contributors"
 kind: standalone

package/assets/lithermes-plugin/rules/bundled-rules/lit-humanizer.md

@@ -9,6 +9,8 @@ Apply to new chat prose and file content. Read only text you add or change. Pres
 
 Block only clear drafting residue such as label-only evidence/source lines, stacked generic caveats, model disclaimers, or chatbot sign-offs. Treat vocabulary, contrast, triads, and rhythm as warnings to inspect; keep accurate, natural language. Preserve facts, numbers, names, citations, modality, scope, register, and useful structure. Never infer authorship or optimize a detector score.
 
+Say what a number or thing is first, then add a needed caveat once: write "18,420회는 같은 사람의 반복 방문을 포함한 방문 횟수 합계입니다" in place of `18,420회는 주민 수가 아님`. The `write_file`/`patch` guard denies a paragraph, list or table column holding two Korean definitional negations or three in any language; rewordings such as `~로 읽을 수 없음` and `does not mean` count too. Two that are not both Korean draw a `negation-cluster` warning.
+
 Use citations in the requested format. State a material risk once, plainly, in the chat reply; keep a reader deliverable focused on its purpose. Keep internal plans, evidence, ledgers, status, and machine-readable records detailed.
 
 The `write_file`/`patch` pre-tool guard can deny block-tier text before save. Office and PDF extraction runs after a completed write, so a block means fix the source and rebuild. If asked to revise prose, return the requested content without an audit preamble; do not change files or fetch sources unless the user asked.

package/assets/lithermes-plugin/skills/frontend-ui-ux/references/complete-contract.md

@@ -445,7 +445,7 @@ isolated Hermes home. Use `--hermes-home`; never `--home`.
 
 ```text
 $ node packages/lithermes-installer/bin/lithermes.js install --yes --offline --no-hud --hermes-home "$ISOLATED"
-Installed LitHermes 1.0.25
+Installed LitHermes 1.0.27
 plugin: $ISOLATED/plugins/lithermes
 model config: updated
 
@@ -462,7 +462,7 @@ installed payload: PASS
 enabled config: PASS
 
 $ hermes lithermes doctor
-[OK] plugin.yaml readable (version 1.0.25)
+[OK] plugin.yaml readable (version 1.0.27)
 [OK] skills bundled: 36
 [OK] litgoal durable runtime importable
 ```

package/assets/lithermes-plugin/skills/lit-humanizer/SKILL.md

@@ -60,6 +60,8 @@ after_payload_edit: "npm --prefix packages/lithermes-installer run sync-plugin -
 
 For a file edit, the Hermes `pre_tool_call` guard blocks block-tier findings in added text passed to `write_file` or `patch` for Markdown, HTML, text, TeX, CSV, SVG, reStructuredText, and AsciiDoc files. Warn-tier findings arrive as advisory context. Fenced code, inline code, exact quoted user spans, and internal `plans/`, `evidence/`, `HANDOFF*`, ledger, `.lit*/`, and `.hermes/` paths are excluded. The guard never scans unchanged file text. Use `write_file` or `patch` for prose edits when pre-save checking is required.
 
+Lead with what a number or thing is. A run of definitions by negation leaves the reader to assemble the meaning from what was ruled out. Write "18,420회는 같은 사람의 반복 방문을 포함한 방문 횟수 합계입니다" in place of `18,420회는 주민 수가 아님. 고유 방문자 수도 아님.`, and give a needed caveat once; an honest limit such as "고유 이용자 지표는 자료에 없습니다" stays. The detector's `negation-cluster` check counts, in each paragraph, list block or Markdown table column (cells of 12 characters or fewer are ignored), after removing fenced code, inline code and `>` quote lines: the Korean forms `아닙니다`, `아님`, `아니다`, `아니며`, `아니라`, `아닌` and their rewordings `~로 읽을 수 없음`, `~로 볼 수 없음`, `~로 보지 않음`, `~을 뜻하지 않음`, `~와는 다름`, `~로 읽으면 안 됨`; the English forms `is not`, `are not`, `isn't`, `aren't`, `not a`, `rather than` and the rewordings `should not be read as`, `does not mean`. Two Korean hits, or three in any language, make it block-tier: the `pre_tool_call` guard denies the `write_file` or `patch`, and the denial text Hermes returns as the tool result carries the rewrite advice and this example. Exactly two hits that are not both Korean stay a warn-tier advisory and the write goes through. Rewording `아님` into `~로 읽을 수 없음` counts the same. Put a bad example you need to show in inline code or a `>` quote so the guard skips it.
+
 DOCX/PPTX/PDF checks happen after a supported file-write event or when a script-like tool reports an explicit output path in its result. Hermes' `post_tool_call` is observer-only, so a finding cannot undo a completed export: revise the source and rebuild the file. DOCX/PPTX extraction uses Python's standard-library ZIP/XML support. PDF extraction uses host `pdftotext` when present; if it is unavailable or fails, the scan fails open and reports that boundary. A DOCX, PPTX or Markdown file that a `terminal` or `execute_code` call builds is checked when that call returns: Hermes' `transform_tool_result` hook finds files modified while the call ran (the reported or session working directory, `workdir`, and folders of paths named in the command, code or output; bounded depth, file count and size, internal paths skipped) and, on a block-tier finding, puts `LIT_HUMANIZER_SCRIPT_DELIVERABLE_BLOCK` with the rule ids in that tool result's `error` field. The command's exit code stays as it ran, and the file stays on disk: edit the build source and rebuild before presenting it. A file written outside those folders, deeper than the scan, or by a background process after the call returned is not seen; run the detector on it explicitly.
 
 ## #contract.language_and_scope

package/assets/lithermes-plugin/skills/visual-qa/references/complete-contract.md

@@ -485,7 +485,7 @@ isolated Hermes home. Use `--hermes-home`; never `--home`.
 
 ```text
 $ node packages/lithermes-installer/bin/lithermes.js install --yes --offline --no-hud --hermes-home "$ISOLATED"
-Installed LitHermes 1.0.25
+Installed LitHermes 1.0.27
 plugin: $ISOLATED/plugins/lithermes
 model config: updated
 
@@ -502,7 +502,7 @@ installed payload: PASS
 enabled config: PASS
 
 $ hermes lithermes doctor
-[OK] plugin.yaml readable (version 1.0.25)
+[OK] plugin.yaml readable (version 1.0.27)
 [OK] skills bundled: 36
 [OK] litgoal durable runtime importable
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@litfamily/lithermes",
-  "version": "1.0.25",
+  "version": "1.0.27",
   "description": "Hermes Agent plugin that plans, builds, checks and hands off your work when you add one word, lit, to a request.",
   "keywords": [
     "hermes-agent",

package/readme-assets/badge-version.svg

@@ -1 +1 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.25"><title>release: 1.0.25</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.25</text></g></svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.27"><title>release: 1.0.27</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.27</text></g></svg>

package/src/lib/files.js

@@ -106,6 +106,29 @@ function writeFileAtomic(filePath, data, encoding) {
   }
 }
 
+// The payload-relative source a host-written bytecode path belongs to, or null.
+// Only CPython's own layout counts: <dir>/__pycache__/<module>.<tag>[.opt-N].pyc.
+function hostBytecodeSource(relative) {
+  const segments = relative.split("/");
+  if (segments.length < 2 || segments[segments.length - 2] !== "__pycache__") return null;
+  const match = /^([^.]+)\.[a-zA-Z][a-zA-Z0-9_-]*(?:\.opt-[0-9]+)?\.pyc$/.exec(segments[segments.length - 1]);
+  return match ? [...segments.slice(0, -2), `${match[1]}.py`].join("/") : null;
+}
+
+// Removes the host bytecode for one removed source module, then its cache
+// folder once empty. Anything else in that folder stays where it is.
+function removeHostBytecode(sourceFile) {
+  const cacheDir = path.join(path.dirname(sourceFile), "__pycache__");
+  if (!fs.lstatSync(cacheDir, { throwIfNoEntry: false })?.isDirectory()) return;
+  const stem = path.basename(sourceFile, ".py");
+  for (const entry of fs.readdirSync(cacheDir, { withFileTypes: true })) {
+    if (entry.isFile() && hostBytecodeSource(`__pycache__/${entry.name}`) === `${stem}.py`) {
+      fs.unlinkSync(path.join(cacheDir, entry.name));
+    }
+  }
+  if (fs.readdirSync(cacheDir).length === 0) fs.rmdirSync(cacheDir);
+}
+
 function removeEmptyDirs(dir, stopAt) {
   let current = dir;
   while (current && current !== stopAt && current.startsWith(stopAt) && fs.existsSync(current)) {
@@ -118,9 +141,11 @@ function removeEmptyDirs(dir, stopAt) {
 module.exports = {
   cleanPythonCache,
   copyTree,
+  hostBytecodeSource,
   inspectPythonCache,
   listFiles,
   removeEmptyDirs,
+  removeHostBytecode,
   sha256,
   writeFileAtomic,
 };

package/src/lib/install.js

@@ -15,7 +15,7 @@ const {
   revalidateModelConfigPlan,
   writeConfig,
 } = require("./config");
-const { copyTree, removeEmptyDirs, sha256, writeFileAtomic } = require("./files");
+const { copyTree, removeEmptyDirs, removeHostBytecode, sha256, writeFileAtomic } = require("./files");
 const { assertStateParent, assertPluginParent, defaultHermesHome, defaultHermesRepo, detectHermesRuntimeRepo, detectHermesVersion, ensureHermesHome, inspectHermesHostCapabilities, LitHermesError } = require("./hermesDiscovery");
 const { NOT_PROBED_HOST_VERSION } = require("./modelConfigBoundary");
 const { patchInstalledHermes, patchManifestPath, rollbackPatches } = require("./patch");
@@ -802,6 +802,7 @@ function uninstallLitHermes(flags = {}) {
       const file = path.join(dest, entry.path);
       if (isInstalledRegularFile(dest, entry.path) && sha256(file) === entry.sha256) {
         fs.unlinkSync(file);
+        if (entry.path.endsWith(".py")) removeHostBytecode(file);
         removeEmptyDirs(path.dirname(file), dest);
       }
     }

package/src/lib/skillPayload.js

@@ -1,7 +1,7 @@
 const crypto = require("node:crypto");
 const fs = require("node:fs");
 const path = require("node:path");
-const { sha256 } = require("./files");
+const { hostBytecodeSource, sha256 } = require("./files");
 const {
   captureRegularFile,
   parseJsonRejectingDuplicateKeys,
@@ -229,12 +229,31 @@ function inspectSkillPayload(pluginPath, manifest, verifySourceHash = false, opt
       allowedDirectories.add(`${segments.slice(0, index).join("/")}/`);
     }
   }
+  // Hermes imports the plugin with bytecode writing on, so CPython caches for
+  // shipped modules are expected host output; any other cache content is not.
+  const hostCacheDirectories = new Set();
+  for (const entryPath of inspected.entries.keys()) {
+    if (!entryPath.endsWith(".py")) continue;
+    const directory = path.posix.dirname(entryPath);
+    hostCacheDirectories.add(directory === "." ? "__pycache__/" : `${directory}/__pycache__/`);
+  }
+  const isHostBytecode = (entryPath) => {
+    const source = hostBytecodeSource(entryPath);
+    if (!source || !inspected.entries.has(source)) return false;
+    try {
+      return fs.lstatSync(path.join(pluginPath, ...entryPath.split("/"))).isFile();
+    } catch {
+      return false;
+    }
+  };
   const traversal = listPayloadEntries(pluginPath, options.readDirectory);
   for (const entryPath of traversal.entries) {
     if (
       inspected.entries.has(entryPath)
       || allowedUnlisted.has(entryPath)
       || allowedDirectories.has(entryPath)
+      || hostCacheDirectories.has(entryPath)
+      || isHostBytecode(entryPath)
     ) continue;
     failures.push({ ...entryLabel(entryPath), reason: "unexpected" });
   }