@litfamily/lithermes 1.0.29 → 1.0.31

package/README.md

@@ -1,14 +1,14 @@
-<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/cover-motion.webp" width="100%" alt="LitFamily motion cover: seven armored robots power on one by one, the LitHermes robot wakes with glowing eyes and a lit frame, then LITFAMILY and KEEP THE WORK LIT. light up." /></picture></p>
+<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/cover-motion.webp" width="100%" alt="LitFamily motion cover: seven armored robots power on one by one, the LitHermes robot wakes with glowing eyes and a lit frame, then LITFAMILY and KEEP THE WORK LIT. light up." /></picture></p>
 
 <p align="center">
-<a href="#install"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/badge-version.svg" alt="1.0.29" /></a>
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/badge-license.svg" alt="MIT license" /></a>
+<a href="#install"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/badge-version.svg" alt="1.0.31" /></a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/badge-license.svg" alt="MIT license" /></a>
 </p>
 
 <p align="center">
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/lucide-book-open.svg" width="16" alt="" /> Guide</a> &nbsp;
-<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition film</a> &nbsp;
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/lucide-book-open.svg" width="16" alt="" /> Guide</a> &nbsp;
+<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition film</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
 </p>
 
 # LitHermes
@@ -17,7 +17,7 @@
 
 A plugin for **Hermes Agent**. Put `lit` in front of a request, and Hermes plans the task, does it, checks the result and writes down where things stand, so the next session can pick up where this one stopped.
 
-**[README and docs on GitHub](https://github.com/wjgoarxiv/lithermes#readme)** · [한국어](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/README_Ko-KR.md)
+**[README and docs on GitHub](https://github.com/wjgoarxiv/lithermes#readme)** · [한국어](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/README_Ko-KR.md)
 
 ## Install
 
@@ -51,11 +51,14 @@ The reply opens with a `🔥 **LIT IGNITED · <discipline>** 🔥` line once the
 | `lit research <question>` | `litresearch` | Research with source notes |
 | `/lit-humanizer` | `lit-humanizer` | Revising Korean or English prose, meaning kept |
 | `/lit-diagram-drawer <brief>` | `lit-diagram-drawer` | A checked, editable diagram |
-| `/lit-pptx <brief>` | `lit-pptx` | A PowerPoint deck in one of eight named looks, with its Markdown source |
+| `/lit-schematic <brief>` | `lit-schematic` | A QA-gated P&ID, apparatus figure or isometric cutaway |
+| `/lit-pptx <brief>` | `lit-pptx` | A PowerPoint deck in one of thirteen named looks, with its Markdown source |
 | `/lit-docx <brief>` | `lit-docx` | A restrained Word document in one of six named shapes, with its Markdown source |
+| `/lit-hijack <brief>` | `lit-hijack` | A clean-room port of published know-how, licence-gated with parity proof |
+| `/lit-adhd [--here] [--since 7d] [--max 12]` | `lit-adhd` | A cross-session brief with gauges and one next step, read-only |
 | `/lit-typographic-motion <brief>` | `lit-typographic-motion` | A short film, treatment first |
 
-On a Telegram gateway, use `/lit_loop` and `/lit_plan`. Every skill also loads by name as `lithermes:<name>`, for example `lithermes:lit-pptx` or `lithermes:lit-docx`. [Skills and commands](https://github.com/wjgoarxiv/lithermes/blob/main/docs/skills.md) shows all 37 with pictures.
+On a Telegram gateway, use `/lit_loop` and `/lit_plan`. Every skill also loads by name as `lithermes:<name>`, for example `lithermes:lit-pptx` or `lithermes:lit-docx`. [Skills and commands](https://github.com/wjgoarxiv/lithermes/blob/main/docs/skills.md) shows all 39 with pictures.
 
 ## Check, update, remove
 

package/README_Ko-KR.md

@@ -1,14 +1,14 @@
-<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/cover-motion.webp" width="100%" alt="LitFamily 모션 커버: 일곱 로봇 패널이 차례로 켜지고, LitHermes 로봇의 눈과 테두리가 빛난 뒤 LITFAMILY와 KEEP THE WORK LIT. 문구가 밝아지는 영상" /></picture></p>
+<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/cover-motion.webp" width="100%" alt="LitFamily 모션 커버: 일곱 로봇 패널이 차례로 켜지고, LitHermes 로봇의 눈과 테두리가 빛난 뒤 LITFAMILY와 KEEP THE WORK LIT. 문구가 밝아지는 영상" /></picture></p>
 
 <p align="center">
-<a href="#설치"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/badge-version.svg" alt="1.0.29" /></a>
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/badge-license.svg" alt="MIT license" /></a>
+<a href="#설치"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/badge-version.svg" alt="1.0.31" /></a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/badge-license.svg" alt="MIT license" /></a>
 </p>
 
 <p align="center">
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.ko.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/lucide-book-open.svg" width="16" alt="" /> 안내</a> &nbsp;
-<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition 영상</a> &nbsp;
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.ko.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/lucide-book-open.svg" width="16" alt="" /> 안내</a> &nbsp;
+<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition 영상</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
 </p>
 
 # LitHermes
@@ -17,7 +17,7 @@
 
 **Hermes Agent**용 플러그인입니다. 요청 앞에 `lit`을 붙이면 Hermes가 작업을 계획하고, 해내고, 결과를 확인한 뒤 어디까지 왔는지 적어 둡니다. 그래서 다음 세션이 그 기록을 읽고 멈춘 자리에서 이어 갈 수 있습니다.
 
-**[GitHub의 README와 문서](https://github.com/wjgoarxiv/lithermes/blob/main/README_Ko-KR.md)** · [English](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.29/README.md)
+**[GitHub의 README와 문서](https://github.com/wjgoarxiv/lithermes/blob/main/README_Ko-KR.md)** · [English](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.31/README.md)
 
 ## 설치
 
@@ -51,11 +51,14 @@ lit 외부 의존성 없이 HTML 파일 하나로 할 일 목록을 만들어줘
 | `lit research <질문>` | `litresearch` | 출처 메모가 있는 조사 |
 | `/lit-humanizer` | `lit-humanizer` | 의미를 지키며 한국어·영어 문장 다듬기 |
 | `/lit-diagram-drawer <brief>` | `lit-diagram-drawer` | 검사를 거친, 편집 가능한 다이어그램 |
-| `/lit-pptx <brief>` | `lit-pptx` | 여덟 가지 디자인 방향 가운데 하나로 만든 PowerPoint 발표자료와 Markdown 원본 |
+| `/lit-schematic <brief>` | `lit-schematic` | QA 게이트를 거친 P&ID·장치도·아이소메트릭 단면도 |
+| `/lit-hijack <brief>` | `lit-hijack` | 라이선스 게이트와 parity 검증을 거친 공개 노하우의 클린룸 포팅 |
+| `/lit-adhd [--here] [--since 7d] [--max 12]` | `lit-adhd` | 게이지와 다음 한 단계로 최근 세션을 브리핑합니다. 읽기 전용입니다. |
+| `/lit-pptx <brief>` | `lit-pptx` | 열세 가지 디자인 방향 가운데 하나로 만든 PowerPoint 발표자료와 Markdown 원본 |
 | `/lit-docx <brief>` | `lit-docx` | 여섯 가지 문서 형식 가운데 하나로 짠 절제된 Word 문서와 Markdown 원본 |
 | `/lit-typographic-motion <brief>` | `lit-typographic-motion` | 트리트먼트부터 쓰는 짧은 영상 |
 
-Telegram gateway에서는 `/lit_loop`와 `/lit_plan`을 쓰세요. 모든 스킬은 `lithermes:<이름>`으로도 불러올 수 있습니다. 예를 들어 `lithermes:lit-pptx`, `lithermes:lit-docx`처럼 씁니다. 스킬 37개 전체는 [스킬과 명령](https://github.com/wjgoarxiv/lithermes/blob/main/docs/skills.ko.md)에서 그림과 함께 볼 수 있습니다.
+Telegram gateway에서는 `/lit_loop`와 `/lit_plan`을 쓰세요. 모든 스킬은 `lithermes:<이름>`으로도 불러올 수 있습니다. 예를 들어 `lithermes:lit-pptx`, `lithermes:lit-docx`처럼 씁니다. 스킬 39개 전체는 [스킬과 명령](https://github.com/wjgoarxiv/lithermes/blob/main/docs/skills.ko.md)에서 그림과 함께 볼 수 있습니다.
 
 ## 확인, 업데이트, 삭제
 

package/assets/lithermes-plugin/README.md

@@ -86,6 +86,18 @@ CLI/plugin name, not the npm package name.
   installed diagram skill. Its Python checks cover source geometry, accessibility,
   content requirements, motion source rules, and visible-text findings; actual
   rendering remains a separate local capability.
+- `/lit-schematic <brief>` and the exact `lit-schematic` route load the
+  installed schematic skill. Drawings of real equipment (P&IDs, PFDs, apparatus
+  figures, isometric cutaways) belong here; abstract boxes-and-arrows stay with
+  `lithermes:lit-diagram-drawer`.
+- `/lit-hijack <brief>` and the exact `lit-hijack` route (also `lit hijack`,
+  `lit hijacking`, `lit 하이재킹`, `lit 하이잭`) load the installed hijack skill.
+  Published know-how enters only through capture with provenance, a licence gate,
+  a source-free spec and a parity proof.
+- `/lit-adhd [--here] [--since 7d] [--max 12]` and the exact `lit-adhd` route
+  (also `lit adhd`, `lit rewind`, `lit-rewind`) load the installed adhd skill.
+  One collector run reads the session store read-only and prints the
+  cross-session brief; a bare `go` continues the offered step within 30 minutes.
 - The `pre_llm_call` hook injects an Litwork directive when the user says
   a standalone `lit` or `litwork`. It also routes `lit plan`, `lit review`,
   `lit research`, `lit goal`, and durable `lit workflow` / `lit kanban` / `lit team`
@@ -179,7 +191,8 @@ CLI/plugin name, not the npm package name.
   `lithermes:frontend-ui-ux`, `lithermes:readme-studio`, `lithermes:lit-commit`,
     `lithermes:lit-crucible`, `lithermes:lit-init`, `lithermes:lit-recap`,
   `lithermes:lit-handoff`, `lithermes:lit-scientific-visualization`,
-  `lithermes:lit-diagram-drawer`,
+  `lithermes:lit-diagram-drawer`, `lithermes:lit-schematic`, `lithermes:lit-hijack`,
+  `lithermes:lit-adhd`,
     `lithermes:lsp`, `lithermes:lsp-setup`,
   `lithermes:litresearch`, `lithermes:lit-code`, `lithermes:refactor`,
   `lithermes:lit-burnoff`, `lithermes:review-work`,
@@ -379,7 +392,7 @@ npm --prefix packages/lithermes-installer run sync-plugin -- --in-place
   uses A/B checks, and keeps a claim/source/confidence/uncertainty graph. The
   acquisition procedure loads from `lithermes:litresearch` through `skill_view`.
 - `lit-crucible`, `lit-init`, `lit-recap`, `lit-handoff`,
-  `lit-scientific-visualization`, and `lit-diagram-drawer`: bounded bare or exact natural routes load the bundled
+  `lit-scientific-visualization`, `lit-diagram-drawer`, `lit-schematic`, `lit-hijack`, and `lit-adhd`: bounded bare or exact natural routes load the bundled
   skill body for the matching explicit skill; they do not fall back to generic
   Litwork.
 - `lit goal`: litgoal sets and keeps the finish line; lit-loop and start-work run toward it.

package/assets/lithermes-plugin/__init__.py

@@ -39,8 +39,11 @@ _NATIVE_COMMANDS = frozenset(
         "lit-handoff",
         "lit-scientific-visualization",
         "lit-diagram-drawer",
+        "lit-schematic",
         "lit-pptx",
         "lit-docx",
+        "lit-hijack",
+        "lit-adhd",
         "lit-typographic-motion",
         *core.KOREAN_PROSE_COMMANDS,
         *core.KOREAN_PROSE_ALIASES,
@@ -81,11 +84,11 @@ PORTED_SKILLS = [
     ),
     (
         "debugging",
-        "Use when something fails, hangs or returns a wrong result and the cause must be reproduced, fixed and rechecked.",
+        "Use when something fails, hangs or returns a wrong result; the cause must be reproduced, fixed and rechecked.",
     ),
     (
         "deep-interview",
-        "Run the LitHermes Socratic deep-interview clarity gate before planning.",
+        "Run the Socratic deep-interview clarity gate before planning.",
     ),
     (
         "frontend-ui-ux",
@@ -95,16 +98,28 @@ PORTED_SKILLS = [
         "lit-diagram-drawer",
         "Create clear, accessible, Korean-ready diagrams with product-local Python verification and optional export.",
     ),
+    (
+        "lit-schematic",
+        "Draw P&IDs, PFDs, apparatus figures and isometric cutaways; QA-gated SVG with PDF and 600 dpi PNG in full material colour.",
+    ),
     ("lit-pptx", "Create and inspect PowerPoint decks with the installed Office engine and QA gate."),
     ("lit-docx", "Create, edit, convert, and audit styled Word documents."),
-    ("lit-typographic-motion", "Direct an original film from a treatment, or a seamless README cover loop, gated before delivery."),
+    (
+        "lit-hijack",
+        "Port published know-how into your skill.",
+    ),
+    (
+        "lit-adhd",
+        "Cross-session brief with gauges and one next step.",
+    ),
+    ("lit-typographic-motion", "Direct an original film or a README cover loop, gated before delivery."),
     (
         "readme-studio",
         "Write factual READMEs and compose local covers with outlined type, honest image capability and verified motion.",
     ),
     (
         "lit-commit",
-        "Run the LitHermes git-history specialist for commits, rebases, blame, and bisect.",
+        "Run the git-history specialist for commits, rebases, blame and bisect.",
     ),
     (
         "lit-brainstorm",
@@ -112,7 +127,7 @@ PORTED_SKILLS = [
     ),
     (
         "lit-crucible",
-        "Stress-test a plan with Hermes-native delegate_task lanes before handing off to /lit-plan.",
+        "Stress-test a plan with delegate_task lanes before handing off to /lit-plan.",
     ),
     (
         "lit-init",
@@ -120,11 +135,11 @@ PORTED_SKILLS = [
     ),
     (
         "lsp",
-        "Use Hermes' native LSP diagnostics with LitHermes LSP guidance.",
+        "Use Hermes' native LSP diagnostics with LSP guidance.",
     ),
     (
         "lit-code",
-        "Use LitHermes programming references for Python, TypeScript, Go, and Rust.",
+        "Use programming references for Python, TypeScript, Go and Rust.",
     ),
     (
         "refactor",
@@ -156,7 +171,7 @@ PORTED_SKILLS = [
     ),
     (
         "litwork",
-        "Use when a defined code change must be carried to done: build, test, verify the real surface, report. Not for documents or decks.",
+        "Use when a defined code change must be carried to done: build, test, verify the real surface, report; not for documents or decks.",
     ),
     (
         "visual-qa",
@@ -172,7 +187,7 @@ PORTED_SKILLS = [
     ),
     (
         "litresearch",
-        "Use when a question needs broad cited research into prior work or how others solve it, with disputed claims checked at the source.",
+        "Use when a question needs broad cited research into prior work or how others solve it; disputed claims checked at the source.",
     ),
     (
         "lit-recap",
@@ -458,7 +473,7 @@ def _setup_lithermes_cli(parser) -> None:
         "slash commands: /lit /lit-loop /lit-plan /litgoal /review-work /start-work /deep-interview "
         "/lit-humanizer (legacy aliases: /lit-korean /text-naturalization /text-neutralization "
         "/korean-ai-slop-remover) /lit-recap "
-        "/lit-handoff /lit-scientific-visualization /lit-diagram-drawer /lit-pptx /lit-docx /lit-typographic-motion\n"
+        "/lit-handoff /lit-scientific-visualization /lit-diagram-drawer /lit-schematic /lit-pptx /lit-docx /lit-hijack /lit-adhd /lit-typographic-motion\n"
         f"skills: {len(PORTED_SKILLS)} lithermes:* skills — `hermes lithermes status` lists them\n"
         "contract schema: lithermes_llm_contract/v1 headings include #contract.activation, "
         "#contract.inputs, #contract.outputs, #contract.evidence, and #contract.hard_stops\n"
@@ -774,6 +789,12 @@ def register(ctx) -> None:
         description="Create and verify an accessible diagram from a supplied brief",
         args_hint="<diagram brief>",
     )
+    ctx.register_command(
+        "lit-schematic",
+        _command_handler(ctx, core.command_lit_schematic, "lit-schematic"),
+        description="Draw and QA-check a P&ID, PFD, apparatus figure or isometric cutaway from a supplied brief",
+        args_hint="<schematic brief>",
+    )
     for name in ("lit-pptx", "lit-docx"):
         ctx.register_command(
             name,
@@ -781,6 +802,24 @@ def register(ctx) -> None:
             description="Create and verify a PowerPoint deck" if name == "lit-pptx" else "Create and audit a Word document",
             args_hint="<document brief>",
         )
+    ctx.register_command(
+        "lit-hijack",
+        _command_handler(ctx, core.command_lit_hijack, "lit-hijack"),
+        description="Port published know-how into your own skill, clean-room",
+        args_hint="<urls or files> [into <target>]",
+    )
+    ctx.register_command(
+        "lit-adhd",
+        _command_handler(ctx, core.command_lit_adhd, "lit-adhd"),
+        description="Cross-session brief with gauges and one next step",
+        args_hint="[--here] [--since 7d] [--max 12]",
+    )
+    ctx.register_command(
+        "lit-rewind",
+        _command_handler(ctx, lambda raw: core.command_lit_adhd(raw, route="/lit-rewind"), "lit-adhd"),
+        description="Cross-session brief with gauges and one next step (alias of lit-adhd)",
+        args_hint="[--here] [--since 7d] [--max 12]",
+    )
     ctx.register_command(
         "lit-typographic-motion",
         _command_handler(ctx, core.command_motion_skill, "lit-typographic-motion"),

package/assets/lithermes-plugin/adhd_stack.py

@@ -0,0 +1,272 @@
+"""Per-session discipline stack and `go` continuation for lit-adhd.
+
+The prompt hook records each lit route activation as a frame in one guarded JSON file per
+workspace (``.hermes/lithermes/adhd/stack.json``) so a later brief in another session can see
+which disciplines are active. Hermes has a single chat lane per session and nothing can pause
+a discipline, so a session holds at most one active frame: pushing a new skill finishes the
+previous active frame, and there are no pause/resume transitions. lit-adhd and lit-recap are
+read-only disciplines and never push a frame, so a brief in the middle of a lit-loop leaves
+the loop exactly where it was.
+
+A bare ``go`` (also ``lit go``, ``ㄱㄱ``, ``고``, ``진행``, as the whole prompt) continues the
+step the last brief offered: the hook reads the next-step record the collector wrote for this
+session (``.hermes/lithermes/adhd/next-<session>.json``) and returns a short context note for
+the model. A plan saved under ``plans/`` during a lit-plan turn writes the same record
+(``start-plan``), so ``go`` right after planning shows that plan's ``/start-work`` command. A record older than 30 minutes, or no record at all, reads as no next step on
+record. Hermes has no typed ``go`` command; ``go`` is a word the hook consumes.
+"""
+from __future__ import annotations
+
+import json
+import os
+import re
+import tempfile
+from pathlib import Path
+from typing import Any
+
+STACK_VERSION = 1
+STACK_DIRNAME = "adhd"
+STACK_FILENAME = "stack.json"
+MAX_SESSIONS = 64
+MAX_FRAMES_PER_SESSION = 20
+MAX_STATE_BYTES = 2 * 1024 * 1024
+GO_TTL_SECONDS = 30 * 60
+
+# Read-only disciplines never push a stack frame.
+READ_ONLY_DISCIPLINES = frozenset({"lit-adhd", "lit-recap"})
+
+_GO_WORD = re.compile(r"^(?:go|lit go|ㄱㄱ|고|진행)$", re.IGNORECASE)
+_SESSION_SAFE = re.compile(r"[^A-Za-z0-9_-]")
+
+
+def match_go_word(text: str) -> bool:
+    """True when the whole prompt is a go word the hook should consume."""
+    return _GO_WORD.match(str(text or "").strip()) is not None
+
+
+def adhd_dir(workspace: Path | str) -> Path:
+    return Path(workspace) / ".hermes" / "lithermes" / STACK_DIRNAME
+
+
+def stack_path(workspace: Path | str) -> Path:
+    return adhd_dir(workspace) / STACK_FILENAME
+
+
+def next_step_path(workspace: Path | str, session_id: Any) -> Path:
+    safe = _SESSION_SAFE.sub("_", str(session_id or "session"))[:128] or "session"
+    return adhd_dir(workspace) / f"next-{safe}.json"
+
+
+def read_stack(workspace: Path | str) -> dict[str, Any]:
+    """The stack file, or {} when it is missing, oversized or malformed. Never raises."""
+    try:
+        path = stack_path(workspace)
+        if not path.is_file() or path.stat().st_size > MAX_STATE_BYTES:
+            return {}
+        data = json.loads(path.read_text(encoding="utf-8"))
+    except (OSError, ValueError):
+        return {}
+    return data if isinstance(data, dict) else {}
+
+
+def _write_stack(workspace: Path | str, data: dict[str, Any]) -> bool:
+    """Whole-file write through a temporary file. False when the write failed."""
+    try:
+        directory = adhd_dir(workspace)
+        # Refuse to write through a planted link: neither the adhd directory
+        # nor its `.hermes` parent may be a symlink. Missing paths are fine.
+        workspace_path = Path(workspace)
+        for probe in (directory, workspace_path / ".hermes"):
+            try:
+                if probe.is_symlink():
+                    return False
+            except OSError:
+                return False
+        directory.mkdir(parents=True, exist_ok=True)
+        fd, staging = tempfile.mkstemp(dir=str(directory), prefix="stack-", suffix=".tmp")
+        try:
+            with os.fdopen(fd, "w", encoding="utf-8") as handle:
+                json.dump({"version": STACK_VERSION, "sessions": data.get("sessions", {})}, handle)
+                handle.write("\n")
+            os.replace(staging, stack_path(workspace))
+        finally:
+            try:
+                os.unlink(staging)
+            except OSError:
+                pass
+        return True
+    except (OSError, ValueError):
+        return False
+
+
+def _frames(data: dict[str, Any], session_id: str) -> list[dict[str, Any]]:
+    sessions = data.get("sessions")
+    if not isinstance(sessions, dict):
+        return []
+    record = sessions.get(session_id)
+    if not isinstance(record, dict):
+        return []
+    frames = record.get("frames")
+    return [frame for frame in frames if isinstance(frame, dict)] if isinstance(frames, list) else []
+
+
+def push(workspace: Path | str, session_id: Any, skill: str, *, stage: str = "", at: str = "") -> bool:
+    """Record an activation: the previous active frame of this session finishes. Never raises."""
+    key = str(session_id or "")
+    skill = str(skill or "")
+    if not key or not skill or skill in READ_ONLY_DISCIPLINES:
+        return False
+    try:
+        data = read_stack(workspace)
+        sessions = data.get("sessions")
+        if not isinstance(sessions, dict):
+            sessions = {}
+            data["sessions"] = sessions
+        frames = _frames(data, key)
+        for frame in frames:
+            if frame.get("status") == "active":
+                frame["status"] = "finished"
+        frames.append({"skill": skill, "stage": stage, "status": "active", "at": at})
+        sessions[key] = {"frames": frames[-MAX_FRAMES_PER_SESSION:]}
+        while len(sessions) > MAX_SESSIONS:
+            oldest = next(iter(sessions))
+            if oldest == key:
+                break
+            del sessions[oldest]
+        return _write_stack(workspace, data)
+    except (OSError, ValueError):
+        return False
+
+
+def finish(workspace: Path | str, session_id: Any, skill: str = "") -> bool:
+    """Mark this session's latest active frame finished. Never raises."""
+    key = str(session_id or "")
+    if not key:
+        return False
+    try:
+        data = read_stack(workspace)
+        sessions = data.get("sessions")
+        if not isinstance(sessions, dict) or key not in sessions:
+            return False
+        frames = _frames(data, key)
+        for frame in reversed(frames):
+            if frame.get("status") == "active" and (not skill or frame.get("skill") == skill):
+                frame["status"] = "finished"
+                break
+        sessions[key] = {"frames": frames[-MAX_FRAMES_PER_SESSION:]}
+        return _write_stack(workspace, data)
+    except (OSError, ValueError):
+        return False
+
+
+def active_skill(workspace: Path | str, session_id: Any) -> str:
+    """The skill of this session's latest active frame, or "" when none is active."""
+    for frame in reversed(_frames(read_stack(workspace), str(session_id or ""))):
+        if frame.get("status") == "active":
+            return str(frame.get("skill") or "")
+    return ""
+
+
+def write_next_step(
+    workspace: Path | str, session_id: Any, kind: str, target: dict[str, Any], *, now: float | None = None
+) -> bool:
+    """Write this session's `{kind, target, at}` record, the shape the collector writes.
+
+    Refuses a symlinked adhd or ``.hermes`` directory and stages through an exclusive,
+    no-follow, pid-unique file, so a planted link is never written through. Never raises.
+    """
+    import time as _time
+    from datetime import datetime, timezone
+
+    try:
+        directory = adhd_dir(workspace)
+        for probe in (directory, Path(workspace) / ".hermes"):
+            if probe.is_symlink():
+                return False
+        directory.mkdir(parents=True, exist_ok=True)
+        at = datetime.fromtimestamp(now if now is not None else _time.time(), tz=timezone.utc)
+        payload = {"kind": kind, "target": target, "at": at.isoformat(timespec="milliseconds").replace("+00:00", "Z")}
+        path = next_step_path(workspace, session_id)
+        staging = path.with_name(f"{path.name}.{os.getpid()}.tmp")
+        flags = os.O_CREAT | os.O_EXCL | os.O_WRONLY | getattr(os, "O_NOFOLLOW", 0)
+        fd = os.open(staging, flags, 0o600)
+        try:
+            with os.fdopen(fd, "w", encoding="utf-8") as handle:
+                handle.write(json.dumps(payload) + "\n")
+            os.replace(staging, path)
+        except BaseException:
+            staging.unlink(missing_ok=True)
+            raise
+        return True
+    except (OSError, ValueError, TypeError):
+        return False
+
+
+def read_next_step(workspace: Path | str, session_id: Any) -> dict[str, Any] | None:
+    """This session's next-step record, or None when it is missing or malformed. Never raises."""
+    try:
+        path = next_step_path(workspace, session_id)
+        if not path.is_file() or path.stat().st_size > MAX_STATE_BYTES:
+            return None
+        data = json.loads(path.read_text(encoding="utf-8"))
+    except (OSError, ValueError):
+        return None
+    return data if isinstance(data, dict) and isinstance(data.get("kind"), str) else None
+
+
+def go_note(workspace: Path | str, session_id: Any, *, now: float | None = None) -> str:
+    """The context note a consumed `go` injects: what to do next, or that nothing is on record."""
+    import time as _time
+    from datetime import datetime, timezone
+
+    def _stamp(raw: str) -> float:
+        parsed = datetime.fromisoformat(raw.replace("Z", "+00:00"))
+        if parsed.tzinfo is None:
+            parsed = parsed.replace(tzinfo=timezone.utc)
+        return parsed.timestamp()
+
+    record = read_next_step(workspace, session_id)
+    if record is None:
+        return (
+            "The user typed `go` with no brief on record: no next-step record exists for this "
+            "session. Offer `lit adhd` for a cross-session brief instead of inventing a step."
+        )
+    try:
+        at = _stamp(str(record.get("at", "")))
+        now_s = now if now is not None else _time.time()
+        if now_s - at > GO_TTL_SECONDS:
+            raise ValueError("expired")
+    except (ValueError, OverflowError, TypeError):
+        return (
+            "The user typed `go` but the brief's next-step record is older than 30 minutes: it "
+            "has expired. Offer `lit adhd` for a fresh brief instead of continuing the old step."
+        )
+    kind = str(record.get("kind", "none")).replace("-", " ")
+    target = record.get("target") or {}
+    if not isinstance(target, dict):
+        # A hand-edited or foreign record may store a bare string here; treat
+        # it as an empty detail rather than raising on `.get`.
+        target = {}
+    detail = target.get("plan") or target.get("workId") or target.get("skill") or ""
+    if record.get("kind") == "start-plan" and detail:
+        return (
+            f"The user typed `go` after a brief whose next step is: start plan {detail} with "
+            f"`/start-work {detail}`. Present that command for the user to run; do not run it, "
+            "and do not start anything else."
+        )
+    if record.get("kind") == "approve-boundary":
+        return (
+            "YOUR TURN\n"
+            "The user typed `go` after a brief whose next step is a bounded-work boundary "
+            f"({detail}): show what it wants and ask the user to approve or deny it in chat. "
+            "Never approve it yourself."
+        )
+    if kind != "none":
+        return (
+            f"The user typed `go` after a brief whose next step is: {kind}"
+            f"{f' ({detail})' if detail else ''}. Continue that step in chat; start nothing else."
+        )
+    return (
+        "The user typed `go` but the brief recorded no next step: say there is none instead "
+        "of inventing one."
+    )

package/assets/lithermes-plugin/bounded_work.py

@@ -801,6 +801,45 @@ def _terminal_requirement(args: dict[str, Any]) -> tuple[str, list[Path]] | None
     return action, [_canonical_tool_path(args.get("workdir") or Path.cwd())]
 
 
+_OBSERVER_HERDR_READS = {
+    "pane": {"list", "read", "get", "layout"},
+    "agent": {"list", "get", "read"},
+    "tab": {"list"},
+    "workspace": {"list"},
+}
+_OBSERVER_FILTERS = {"grep", "rg", "head", "tail", "wc"}
+
+
+def classify_observation(command: Any) -> bool:
+    """True when a terminal command only reads: a herdr read or a grep/rg pipeline.
+
+    Pipes are the only shell control admitted; redirects, chaining, command
+    substitution and newlines still refuse, as in ``_terminal_requirement``.
+    """
+    text = str(command or "").strip()
+    if not text or _SHELL_CONTROL_RE.search(text.replace("|", "")):
+        return False
+    segments = text.split("|")
+    for index, segment in enumerate(segments):
+        try:
+            words = shlex.split(segment)
+        except ValueError:
+            return False
+        if not words:
+            return False
+        executable = Path(words[0]).name
+        if executable == "rg" and any(word.startswith("--pre") for word in words):
+            return False
+        if index == 0 and executable == "herdr":
+            if len(words) < 3 or words[2] not in _OBSERVER_HERDR_READS.get(words[1], set()):
+                return False
+        elif index == 0 and executable not in {"grep", "rg"}:
+            return False
+        elif index > 0 and executable not in _OBSERVER_FILTERS:
+            return False
+    return True
+
+
 def _tool_requirement(tool_name: str, args: dict[str, Any]) -> tuple[str, list[Path]] | None:
     if tool_name in _READ_ONLY_TOOLS:
         return None
@@ -866,6 +905,8 @@ def enforce_tool_authority(tool_name: Any, args: Any, session_id: Any) -> dict[s
     exact_session = str(session_id or "")
     bound = [state for state in states if state.get("active_session_id") == exact_session]
     if not exact_session or not bound:
+        if name == "terminal" and classify_observation(payload.get("command")):
+            return None
         return _block_tool("Bounded work mutation blocked: the exact Hermes session is not bound.")
     if any(state.get("status") == "paused" for state in bound):
         return _block_tool("Bounded work mutation blocked: this Hermes session has paused work.")