@litfamily/lithermes 1.0.32 → 1.0.33

package/assets/lithermes-plugin/skills/readme-studio/templates/remotion/package.json

@@ -3,5 +3,6 @@
   "private": true,
   "type": "module",
   "scripts": {"render": "remotion render", "still": "remotion still"},
-  "dependencies": {"@remotion/cli":"4.0.526", "remotion":"4.0.526", "react":"19.3.0", "react-dom":"19.3.0"}
+  "dependencies": {"@remotion/cli":"4.0.526", "remotion":"4.0.526", "react":"19.3.0", "react-dom":"19.3.0"},
+  "overrides": {"zod": "4.6.6"}
 }

package/assets/lithermes-plugin/skills/rules/SKILL.md

@@ -169,7 +169,7 @@ priority rules.
   `paths` and Copilot `applyTo` aliases. A Cursor-style comma-separated scalar
   (`globs: *.ts,*.tsx`) is split into separate patterns.
 - **Glob support is a documented SUBSET**, not picomatch. `**`, `*`, `?`,
-  `[seq]`, `{a,b}` and a leading `!` work. Extglob (`@(a|b)`) and POSIX classes
+  `[seq]`, `{a,b}` and a leading (!) work. Extglob (`@(a|b)`) and POSIX classes
   (`[[:alpha:]]`) do NOT — a rule using them silently matches nothing. The full
   divergence list lives in `rules/globmatch.py` `DIVERGENCES`; read it before
   claiming a glob "should have" matched.

package/assets/lithermes-plugin/skills/visual-qa/references/complete-contract.md

@@ -485,7 +485,7 @@ isolated Hermes home. Use `--hermes-home`; never `--home`.
 
 ```text
 $ node packages/lithermes-installer/bin/lithermes.js install --yes --offline --no-hud --hermes-home "$ISOLATED"
-Installed LitHermes 1.0.32
+Installed LitHermes 1.0.33
 plugin: $ISOLATED/plugins/lithermes
 model config: updated
 
@@ -502,7 +502,7 @@ installed payload: PASS
 enabled config: PASS
 
 $ hermes lithermes doctor
-[OK] plugin.yaml readable (version 1.0.32)
+[OK] plugin.yaml readable (version 1.0.33)
 [OK] skills bundled: 40
 [OK] litgoal durable runtime importable
 ```

package/assets/{lithermes-plugin → npm-channel}/auto_update.py

@@ -42,6 +42,8 @@ INSTALL_TIMEOUT_SECONDS = 90.0
 MAX_RESPONSE_BYTES = 64 * 1024
 AUTO_UPDATE_GUARD_ENV = "LITHERMES_AUTO_UPDATE_RUNNING"
 INSTALLER_DISTRIBUTION = "npm"
+NPM_CHANNEL_MARKER_NAME = ".lithermes-npm-channel"
+NPM_CHANNEL_MARKER_TEXT = "lithermes npm channel\n"
 ATTEMPT_RECORD_NAME = "auto-update-attempt.json"
 # A broken npm fetch blocked each new session's first reply for about 70 s, so
 # after a failed install the bridge waits a day before it tries the same
@@ -244,19 +246,51 @@ def _read_install_receipt(home: Path) -> dict[str, Any] | None:
     return _read_state_json(home, "auto-update-receipt.json")
 
 
+def _plugin_dir(home: Path, manifest: dict[str, Any] | None) -> Path:
+    """Prefer the receipt's plugin path when it is a real directory, not a link."""
+
+    raw = manifest.get("pluginPath") if isinstance(manifest, dict) else None
+    if isinstance(raw, str) and raw.strip():
+        candidate = Path(raw).expanduser()
+        try:
+            info = candidate.lstat()
+        except OSError:
+            info = None
+        if info is not None and stat.S_ISDIR(info.st_mode) and not stat.S_ISLNK(info.st_mode):
+            return candidate
+    return home / "plugins" / "lithermes"
+
+
+def _channel_marker_matches(root: Path) -> bool:
+    marker = root / NPM_CHANNEL_MARKER_NAME
+    expected = NPM_CHANNEL_MARKER_TEXT.encode("utf-8")
+    try:
+        info = marker.lstat()
+        if not stat.S_ISREG(info.st_mode) or stat.S_ISLNK(info.st_mode):
+            return False
+        fd = os.open(marker, os.O_RDONLY | getattr(os, "O_NOFOLLOW", 0))
+        try:
+            data = os.read(fd, len(expected) + 1)
+        finally:
+            os.close(fd)
+    except OSError:
+        return False
+    return data == expected
+
+
 def _is_npm_channel(home: Path) -> bool:
-    """Return true only for a manifest written by the npm installer.
-
-    Hermes catalog/git installs copy the plugin tree directly and do not create the
-    installer's ownership receipt.  The explicit distribution marker makes a stale
-    receipt fail closed too: a catalog payload must never use it as permission to
-    fetch and replace itself.  Older receipts without the marker are intentionally
-    treated as non-npm until the user runs the installer once, which preserves the
-    catalog safety boundary over an ambiguous channel.
+    """Return true only for an npm receipt that also carries the channel marker.
+
+    The receipt lives outside the plugin directory and survives a catalog replace,
+    so ``distribution: npm`` alone is not permission to fetch and replace the
+    tree. The marker is written only by the npm installer, into the plugin
+    directory, and a catalog copy never contains it. A symlink is not the marker.
     """
 
     manifest = _read_state_json(home, "install-manifest.json")
-    return isinstance(manifest, dict) and manifest.get("distribution") == INSTALLER_DISTRIBUTION
+    if not (isinstance(manifest, dict) and manifest.get("distribution") == INSTALLER_DISTRIBUTION):
+        return False
+    return _channel_marker_matches(_plugin_dir(home, manifest))
 
 
 def _utc_stamp(seconds: float | None = None) -> str:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@litfamily/lithermes",
-  "version": "1.0.32",
+  "version": "1.0.33",
   "description": "Hermes Agent plugin that plans, builds, checks and hands off your work when you add one word, lit, to a request.",
   "keywords": [
     "hermes-agent",

package/readme-assets/badge-version.svg

@@ -1 +1 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.32"><title>release: 1.0.32</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.32</text></g></svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.33"><title>release: 1.0.33</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.33</text></g></svg>

package/src/lib/canonicalCorpus.js

@@ -14,7 +14,7 @@ const EXPECTED = Object.freeze({
   tree: "9188410be0af35f2421ba300d91a0d7a7341caf0",
   fileCount: 167,
   totalBytes: 2596360,
-  digest: "b0d1a085de8856e7edeba24127d26875fe5473b80c0d95f6578addfdc801e445",
+  digest: "c921ed87f41b5aaef14ef480c791f1c36bbd3ec616eaccc32f5e1246fcc547e6",
   directories: ["design", "designpowers", "perfection", "ui-ux-db"],
   attributes: "corpus/** -text\nlegal/** -text\n",
   legal: [

package/src/lib/install.js

@@ -32,6 +32,9 @@ const { installSkins } = require("./skins");
 
 const packageRoot = path.resolve(__dirname, "..", "..");
 const assetRoot = path.join(packageRoot, "assets", "lithermes-plugin");
+const channelRoot = path.join(packageRoot, "assets", "npm-channel");
+const NPM_CHANNEL_MARKER_NAME = ".lithermes-npm-channel";
+const NPM_CHANNEL_MARKER_TEXT = "lithermes npm channel\n";
 const LEGACY_VENDOR_DIRS = new Map([
   ["vendor/022_handoff", "vendor/handoff"],
   ["vendor/045_scientific-visualization", "vendor/scientific-visualization"],
@@ -547,6 +550,24 @@ function previewModelRoute(flags = {}) {
   };
 }
 
+function stageNpmChannel(dest) {
+  const source = path.join(channelRoot, "auto_update.py");
+  const sourceStat = fs.lstatSync(source);
+  if (!sourceStat.isFile()) {
+    throw new LitHermesError("npm channel updater is missing.", 5);
+  }
+  const target = path.join(dest, "auto_update.py");
+  fs.copyFileSync(source, target);
+  fs.chmodSync(target, 0o644);
+  const marker = path.join(dest, NPM_CHANNEL_MARKER_NAME);
+  fs.writeFileSync(marker, NPM_CHANNEL_MARKER_TEXT, { encoding: "utf8", mode: 0o644 });
+  fs.chmodSync(marker, 0o644);
+  return [
+    { path: "auto_update.py", sha256: sha256(target) },
+    { path: NPM_CHANNEL_MARKER_NAME, sha256: sha256(marker) },
+  ];
+}
+
 function installLitHermes(flags = {}) {
   const dryRun = Boolean(flags["dry-run"]);
   const homeInfo = dryRun
@@ -655,6 +676,7 @@ function installLitHermes(flags = {}) {
     assertPluginParent(hermesHome);
     fs.rmSync(dest, { recursive: true, force: true });
     const files = copyTree(assetRoot, dest);
+    files.push(...stageNpmChannel(dest));
     onProgress("Writing Hermes config");
     checkState();
     let afterConfig = beforeConfig;

package/src/lib/skillPayload.js

@@ -221,7 +221,7 @@ function inspectSkillPayload(pluginPath, manifest, verifySourceHash = false, opt
     const failure = checkEntry(pluginPath, entryPath, expectedHash);
     if (failure) failures.push(failure);
   }
-  const allowedUnlisted = new Set(["payload-version.json"]);
+  const allowedUnlisted = new Set(["payload-version.json", "auto_update.py", ".lithermes-npm-channel"]);
   const allowedDirectories = new Set();
   for (const entryPath of inspected.entries.keys()) {
     const segments = entryPath.split("/");
@@ -237,20 +237,25 @@ function inspectSkillPayload(pluginPath, manifest, verifySourceHash = false, opt
     const directory = path.posix.dirname(entryPath);
     hostCacheDirectories.add(directory === "." ? "__pycache__/" : `${directory}/__pycache__/`);
   }
-  const isHostBytecode = (entryPath) => {
-    const source = hostBytecodeSource(entryPath);
-    if (!source || !inspected.entries.has(source)) return false;
+  const isRegularFile = (entryPath) => {
     try {
       return fs.lstatSync(path.join(pluginPath, ...entryPath.split("/"))).isFile();
     } catch {
       return false;
     }
   };
+  const isHostBytecode = (entryPath) => {
+    const source = hostBytecodeSource(entryPath);
+    if (!source || !(inspected.entries.has(source) || source === "auto_update.py")) return false;
+    return isRegularFile(entryPath);
+  };
+  const isNpmChannelFile = (entryPath) =>
+    (entryPath === "auto_update.py" || entryPath === ".lithermes-npm-channel") && isRegularFile(entryPath);
   const traversal = listPayloadEntries(pluginPath, options.readDirectory);
   for (const entryPath of traversal.entries) {
     if (
       inspected.entries.has(entryPath)
-      || allowedUnlisted.has(entryPath)
+      || (allowedUnlisted.has(entryPath) && (entryPath === "payload-version.json" || isNpmChannelFile(entryPath)))
       || allowedDirectories.has(entryPath)
       || hostCacheDirectories.has(entryPath)
       || isHostBytecode(entryPath)