@litfamily/lithermes 1.0.5 → 1.0.7

package/README.md

@@ -1,7 +1,7 @@
-<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/cover-motion.webp" width="100%" alt="LitHermes cover art. A lime signal moves through orbital paths above the HERMES AGENT wordmark; a still frame from this motion cover appears when reduced motion is preferred." /></picture></p>
-<p align="center"><a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/cover.webp">View the static family cover</a></p>
+<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/cover-motion.webp" width="100%" alt="LitHermes cover art. A lime signal moves through orbital paths above the HERMES AGENT wordmark; a still frame from this motion cover appears when reduced motion is preferred." /></picture></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/cover.webp" width="100%" alt="Five armored robots, one for each LitFamily product, beneath the words KEEP THE WORK LIT." /></p>
 
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/ascii-readme.svg" width="480" alt="LIT ASCII B mark" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/ascii-readme.svg" width="480" alt="LIT ASCII B mark" /></p>
 
 <details>
 <summary>Copy ASCII logo</summary>
@@ -31,19 +31,19 @@
 
 </details>
 
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/lithermes-wordmark.svg" width="480" alt="LITHERMES display type" /></p>
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/lithermes-clay-icon.png" width="160" alt="LitHermes clay mark" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/lithermes-wordmark.svg" width="480" alt="LITHERMES display type" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/lithermes-clay-icon.png" width="160" alt="LitHermes clay mark" /></p>
 
 <p align="center">
-<a href="#install"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/badge-version.svg" alt="1.0.5" /></a>
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/badge-license.svg" alt="MIT license" /></a>
+<a href="#install"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/badge-version.svg" alt="1.0.7" /></a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/badge-license.svg" alt="MIT license" /></a>
 </p>
 
 <p align="center">
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/lucide-book-open.svg" width="16" alt="" /> Docs</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/lucide-book-open.svg" width="16" alt="" /> Docs</a> &nbsp;
 <a href="#install">Install</a> &nbsp;
-<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition</a> &nbsp;
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
+<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
 </p>
 
 # LitHermes
@@ -52,11 +52,11 @@
 
 **What it is:** LitHermes connects planning, execution, review, and handoff inside **Hermes Agent**.
 
-[한국어](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/README_Ko-KR.md) · [npm](https://www.npmjs.com/package/@litfamily/lithermes) · [GitHub](https://github.com/wjgoarxiv/lithermes)
+[한국어](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/README_Ko-KR.md) · [npm](https://www.npmjs.com/package/@litfamily/lithermes) · [GitHub](https://github.com/wjgoarxiv/lithermes)
 
 ## Install
 
-Source version: `@litfamily/lithermes@1.0.5`. Have Hermes Agent and Node.js 18+ installed, with write access to your Hermes home (normally `~/.hermes`).
+Source version: `@litfamily/lithermes@1.0.7`. Have Hermes Agent and Node.js 18+ installed, with write access to your Hermes home (normally `~/.hermes`).
 
 The installer targets your Hermes home. For an isolated trial, set `HERMES_HOME` to a new empty directory before installation and use that same value when starting Hermes. Keep your existing home and settings. `--no-patch-installed-hermes` also prevents compatibility edits to the detected host installation outside that profile.
 
@@ -161,6 +161,7 @@ For Telegram gateway dispatch, use `/lit_loop` and `/lit_plan`. The complete com
 - Native `/goal` is user-managed and unobserved. Durable `goal_*` state is authoritative; there is no automatic update, clear, or resume of native `/goal`.
 - Hermes uses a global child model route. Per-task model overrides and named reviewer routes are unavailable. A configuration receipt does not prove an effective child execution.
 - The generated negative gate matrix uses an isolated HOME and `HERMES_HOME`; its receipt is safe to compare across concurrent sessions.
+- Hermes resolves a bare skill name (not the `lithermes:<name>` explicit-load form) against Hermes `config.yaml`'s `skills.external_dirs` and local `<HERMES_HOME>/skills` before it reaches the LitHermes plugin. If one of those locations holds a same-named skill, `lithermes doctor` prints a `skill shadow check: WARNING` line naming the skill and the shadowing path; load the LitHermes copy explicitly as `lithermes:<name>`, or remove/rename the other copy. This warning never changes doctor's pass/fail exit status.
 
 ### Verify and uninstall
 
@@ -198,6 +199,4 @@ MIT License.
 
 ### LITFAMILY
 
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/cover.webp" width="100%" alt="Five armored robots, one for each LitFamily product, beneath the words KEEP THE WORK LIT." /></p>
-
 Install each product separately in its supported agent harness.

package/README_Ko-KR.md

@@ -1,7 +1,7 @@
-<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/cover-motion.webp" width="100%" alt="LitHermes 표지. 라임색 신호가 궤도를 지나 HERMES AGENT 워드마크로 이어집니다. 모션을 줄이도록 설정하면 이 모션 표지에서 추출한 정지 프레임을 표시합니다." /></picture></p>
-<p align="center"><a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/cover.webp">정지 패밀리 표지 보기</a></p>
+<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/cover-motion.webp" width="100%" alt="LitHermes 표지. 라임색 신호가 궤도를 지나 HERMES AGENT 워드마크로 이어집니다. 모션을 줄이도록 설정하면 이 모션 표지에서 추출한 정지 프레임을 표시합니다." /></picture></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/cover.webp" width="100%" alt="LitFamily 다섯 제품을 나타내는 장갑 로봇 패널과 KEEP THE WORK LIT. 문구" /></p>
 
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/ascii-readme.svg" width="480" alt="LIT ASCII B 마크" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/ascii-readme.svg" width="480" alt="LIT ASCII B 마크" /></p>
 
 <details>
 <summary>ASCII 로고 복사</summary>
@@ -31,19 +31,19 @@
 
 </details>
 
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/lithermes-wordmark.svg" width="480" alt="LITHERMES 디스플레이 서체" /></p>
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/lithermes-clay-icon.png" width="160" alt="LitHermes 클레이 마크" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/lithermes-wordmark.svg" width="480" alt="LITHERMES 디스플레이 서체" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/lithermes-clay-icon.png" width="160" alt="LitHermes 클레이 마크" /></p>
 
 <p align="center">
-<a href="#설치"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/badge-version.svg" alt="1.0.5" /></a>
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/badge-license.svg" alt="MIT license" /></a>
+<a href="#설치"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/badge-version.svg" alt="1.0.7" /></a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/badge-license.svg" alt="MIT license" /></a>
 </p>
 
 <p align="center">
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.ko.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/lucide-book-open.svg" width="16" alt="" /> 문서</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.ko.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/lucide-book-open.svg" width="16" alt="" /> 문서</a> &nbsp;
 <a href="#설치">설치</a> &nbsp;
-<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition</a> &nbsp;
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
+<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
 </p>
 
 # LitHermes
@@ -52,11 +52,11 @@
 
 **무엇인가요:** LitHermes는 **Hermes Agent**에서 계획, 실행, 검토, 인계를 이어갑니다.
 
-[English](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/README.md) · [npm](https://www.npmjs.com/package/@litfamily/lithermes) · [GitHub](https://github.com/wjgoarxiv/lithermes)
+[English](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.7/README.md) · [npm](https://www.npmjs.com/package/@litfamily/lithermes) · [GitHub](https://github.com/wjgoarxiv/lithermes)
 
 ## 설치
 
-소스 기준 버전은 `@litfamily/lithermes@1.0.5`입니다. Hermes Agent와 Node.js 18+가 필요하며, Hermes 홈(기본 `~/.hermes`)에 쓰기 권한이 있어야 합니다.
+소스 기준 버전은 `@litfamily/lithermes@1.0.7`입니다. Hermes Agent와 Node.js 18+가 필요하며, Hermes 홈(기본 `~/.hermes`)에 쓰기 권한이 있어야 합니다.
 
 설치기는 Hermes 홈을 대상으로 합니다. 별도 체험을 하려면 설치 전에 `HERMES_HOME`을 새 빈 디렉터리로 지정하고 Hermes를 시작할 때도 같은 값을 사용하세요. 기존 홈과 설정은 보관합니다. `--no-patch-installed-hermes`는 해당 프로필 밖에서 감지된 호스트 설치본에 호환성 패치를 적용하지 못하게 합니다.
 
@@ -161,6 +161,7 @@ Telegram gateway에서는 `/lit_loop`와 `/lit_plan` 별칭을 사용합니다.
 - native `/goal`은 사용자가 관리하며 plugin은 관찰하지 않습니다. durable `goal_*` 상태가 기준이며 native `/goal`을 자동으로 갱신·초기화·재개하지 않습니다.
 - Hermes 하위 모델은 공통 모델 경로를 사용합니다. 작업별 모델 재정의와 지정 reviewer 경로는 지원하지 않습니다. 설정 receipt가 실제 child 실행을 증명하지 않습니다.
 - 생성되는 negative gate matrix는 분리된 HOME과 `HERMES_HOME`을 사용하므로 동시 세션의 receipt를 비교할 수 있습니다.
+- Hermes는 bare skill 이름(명시적 로드 형태인 `lithermes:<name>`이 아닌 경우)을 Hermes `config.yaml`의 `skills.external_dirs`와 로컬 `<HERMES_HOME>/skills`에서 먼저 찾은 뒤 LitHermes plugin으로 넘어갑니다. 이 위치 중 하나에 같은 이름의 skill이 있으면 `lithermes doctor`가 `skill shadow check: WARNING` 줄로 해당 skill과 가리는 경로를 알려줍니다. `lithermes:<name>`으로 명시적으로 불러오거나, 다른 위치의 사본을 제거·이름 변경하세요. 이 경고는 doctor의 성공/실패 종료 상태를 바꾸지 않습니다.
 
 ### 확인 및 삭제
 
@@ -198,6 +199,4 @@ MIT License.
 
 ### LITFAMILY
 
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.5/readme-assets/cover.webp" width="100%" alt="LitFamily 다섯 제품을 나타내는 장갑 로봇 패널과 KEEP THE WORK LIT. 문구" /></p>
-
 각 제품은 지원하는 에이전트 환경에 따로 설치해 사용합니다.

package/assets/lithermes-plugin/core_contexts.py

@@ -106,8 +106,8 @@ _SKILL_ROUTE_CONTRACTS = {
         "implementation and rendered inspection. Record a compact direction and evolve the "
         "Design Contract with the work; do not stop at a contract or demand routine reapproval.",
         "Review-only and plan-only requests are read-only. Incidental UI words grant no write "
-        "authority. Ask one material question if the target or direction conflicts; retain "
-        "the answer on resume and continue once it resolves the conflict.",
+        "authority. Ask one material question per turn while target or direction conflicts or "
+        "named directions stay undecided (not defaults); retain answers, build once resolved.",
         "Every field you record must be one the shipped validator accepts. `design_contract_validation` "
         "answers `contract has unapproved keys [...]` and exits 1 on anything else; the reference "
         "documents name the real fields.",

package/assets/lithermes-plugin/diagnostics.py

@@ -84,6 +84,27 @@ _OPENAI_CATALOG_EFFORTS = {
 }
 _REVIEWER_ROUTE_NAME = "".join(chr(code) for code in (109, 111, 109, 117, 115))
 SUPPORTED_HERMES_HOST_VERSIONS = frozenset(("0.17.0", "0.19.0"))
+_MINIMUM_HERMES_HOST_VERSION = (0, 17, 0)
+
+
+def _classify_hermes_host_version(host_version: str) -> str:
+    if re.fullmatch(r"[0-9]+\.[0-9]+\.[0-9]+", host_version) is None:
+        return "unsupported"
+    version = tuple(int(part) for part in host_version.split("."))
+    if version < _MINIMUM_HERMES_HOST_VERSION:
+        return "unsupported"
+    if host_version in SUPPORTED_HERMES_HOST_VERSIONS:
+        return "verified"
+    return "beyond-verified"
+
+
+def _beyond_verified_host_note(host_version: str) -> str | None:
+    if _classify_hermes_host_version(host_version) != "beyond-verified":
+        return None
+    return (
+        f"[NOTE] Hermes host {host_version} is beyond the verified matrix "
+        "(0.17.0, 0.19.0); diagnostics are read-only"
+    )
 
 
 @dataclass(frozen=True, slots=True)
@@ -94,6 +115,7 @@ class ModelCapabilities:
     child_effort: str
     concurrency: int
     async_batches: int
+    shared_async_cap: bool
     spawn_depth: int
     flat: bool
     approved: bool
@@ -203,7 +225,7 @@ def _cataloged_route(model: object, effort: object) -> bool:
 
 
 def _parse_capabilities(host_version: str) -> CapabilityResult:
-    if host_version not in SUPPORTED_HERMES_HOST_VERSIONS:
+    if _classify_hermes_host_version(host_version) == "unsupported":
         return UnavailableCapabilities("unsupported Hermes host version")
     try:
         text = _host_config_path().read_text(encoding="utf-8")
@@ -221,7 +243,8 @@ def _parse_capabilities(host_version: str) -> CapabilityResult:
         return UnavailableCapabilities("malformed host config")
     if _has_credential_key(config):
         return UnavailableCapabilities("credential-risk host config")
-    if config.get("_config_version") != 30:
+    schema_version = config.get("_config_version")
+    if type(schema_version) is not int or schema_version < 30:
         return UnavailableCapabilities("unknown host config schema")
     for key in _SAFE_CHILDREN:
         if key in config and not isinstance(config[key], dict):
@@ -256,7 +279,8 @@ def _parse_capabilities(host_version: str) -> CapabilityResult:
     child_effort = effort if child_effort_raw is None or child_effort_raw == "" else child_effort_raw
     child_provider = provider if child_provider_raw is None or child_provider_raw == "" else child_provider_raw
     concurrency_raw = delegation_config.get("max_concurrent_children", "")
-    async_raw = delegation_config.get("max_async_children", 3)
+    shared_async_cap = schema_version >= 33
+    async_raw = 1 if shared_async_cap else delegation_config.get("max_async_children", 3)
     depth_raw = delegation_config.get("max_spawn_depth", 1)
     orchestrator_enabled = delegation_config.get("orchestrator_enabled", True)
     delegation_provider = delegation_config.get("provider") or provider
@@ -355,6 +379,7 @@ def _parse_capabilities(host_version: str) -> CapabilityResult:
         child_effort=child_effort,
         concurrency=concurrency,
         async_batches=async_batches,
+        shared_async_cap=shared_async_cap,
         spawn_depth=spawn_depth,
         flat=flat,
         approved=approved,
@@ -369,16 +394,22 @@ def _recursion_detail(spawn_depth: int, flat: bool) -> str:
     return f"hard (configured depth {spawn_depth}, flat via orchestrator kill switch)"
 
 
+def _concurrency_detail(concurrency: int, async_batches: int, shared_async_cap: bool) -> str:
+    if shared_async_cap:
+        return f"per batch {concurrency}; background cap {concurrency}; potential children {concurrency}"
+    return f"per batch {concurrency}; async batches {async_batches}; potential children {concurrency * async_batches}"
+
+
 def _capability_status_lines(host_version: str) -> list[str]:
     result = _parse_capabilities(host_version)
     match result:
-        case ModelCapabilities(parent_model=parent_model, parent_effort=parent_effort, child_model=child_model, child_effort=child_effort, concurrency=concurrency, async_batches=async_batches, spawn_depth=spawn_depth, flat=flat):
+        case ModelCapabilities(parent_model=parent_model, parent_effort=parent_effort, child_model=child_model, child_effort=child_effort, concurrency=concurrency, async_batches=async_batches, shared_async_cap=shared_async_cap, spawn_depth=spawn_depth, flat=flat):
             lines = [
                 f"parent model: {parent_model}",
                 f"parent effort: {parent_effort}",
                 f"global child route: configured ({child_model}, effort {child_effort}, provider inherited)",
                 "child execution proof: unavailable (delegate_task receipt required)",
-                f"concurrency: hard (per batch {concurrency}; async batches {async_batches}; potential children {concurrency * async_batches})",
+                f"concurrency: hard ({_concurrency_detail(concurrency, async_batches, shared_async_cap)})",
                 f"recursion: {_recursion_detail(spawn_depth, flat)}",
                 "auto-compaction: unavailable (ratio-only compression; no exact 650K schema)",
                 f"runtime: hard ({_OPENAI_PROVIDER} {_RESPONSES_MODE})",
@@ -408,7 +439,7 @@ def _capability_status_lines(host_version: str) -> list[str]:
 def status_report(host_version: str | None = None) -> str:
     version = host_version or hermes_host_version()
     skills = _skill_names()
-    return "\n".join([
+    lines = [
         f"LitHermes plugin {plugin_version()}   (Hermes host {version})",
         f"plugin dir: {PLUGIN_ROOT}",
         f"hooks ({len(HOOKS)}): {', '.join(HOOKS)}",
@@ -424,7 +455,11 @@ def status_report(host_version: str | None = None) -> str:
         f"litgoal evidence kinds: {', '.join(_evidence_kinds())}",
         f"scientific visualization: {_science.dependency_summary()}",
         *_capability_status_lines(version),
-    ])
+    ]
+    host_note = _beyond_verified_host_note(version)
+    if host_note:
+        lines.insert(1, host_note)
+    return "\n".join(lines)
 
 
 def doctor_report(host_version: str | None = None) -> tuple[list[str], int]:
@@ -463,14 +498,17 @@ def doctor_report(host_version: str | None = None) -> tuple[list[str], int]:
         lines.append(f"[OK] Hermes host detected (v{version})")
     else:
         lines.append("[NOTE] Hermes host version unknown (running outside Hermes?)")
+    host_note = _beyond_verified_host_note(version)
+    if host_note:
+        lines.append(host_note)
     capabilities = _parse_capabilities(version)
     match capabilities:
-        case ModelCapabilities(parent_model=parent_model, parent_effort=parent_effort, child_model=child_model, child_effort=child_effort, concurrency=concurrency, async_batches=async_batches, spawn_depth=spawn_depth, flat=flat):
+        case ModelCapabilities(parent_model=parent_model, parent_effort=parent_effort, child_model=child_model, child_effort=child_effort, concurrency=concurrency, async_batches=async_batches, shared_async_cap=shared_async_cap, spawn_depth=spawn_depth, flat=flat):
             lines.extend([
                 f"[OK] parent model {parent_model} / effort {parent_effort}",
                 f"[NOTE] global child route configured ({child_model}, effort {child_effort}, provider inherited)",
                 "[NOTE] child execution proof unavailable (delegate_task receipt required)",
-                f"[OK] concurrency hard (per batch {concurrency}; async batches {async_batches}; potential children {concurrency * async_batches})",
+                f"[OK] concurrency hard ({_concurrency_detail(concurrency, async_batches, shared_async_cap)})",
                 f"[{'OK' if flat else 'WARN'}] recursion {_recursion_detail(spawn_depth, flat)}",
                 "[OK] auto-compaction unavailable (ratio-only compression; no exact 650K schema)",
                 f"[OK] runtime hard ({_OPENAI_PROVIDER} {_RESPONSES_MODE})",

package/assets/lithermes-plugin/payload-version.json

@@ -1,7 +1,7 @@
 {
-  "syncedAt": "2026-09-23T12:56:08.744Z",
+  "syncedAt": "2026-09-24T15:44:37.289Z",
   "source": "bundled-payload",
-  "sourceHash": "e7ac8bd0623eb0ef78d7d97e76daa0bb3d5cd7aab909da0f0e2f3af19f08964b",
+  "sourceHash": "ab8de1105823a7d9d640d47cb0e65d2818dbb1080e5b6dc68898e6db21f5d831",
   "files": [
     {
       "path": "NOTICE.md",
@@ -37,7 +37,7 @@
     },
     {
       "path": "core_contexts.py",
-      "sha256": "0bb379b099bfedb9ce51141cae0f7c11a827fe35487249a9ca7fe6dfd345b257"
+      "sha256": "a60c32bd38a47ecac6bffc39a8549d2ea1b3b87733d666fbb1be4b5685f2fbbb"
     },
     {
       "path": "core_contract.py",
@@ -85,7 +85,7 @@
     },
     {
       "path": "diagnostics.py",
-      "sha256": "8d8196c1c50a6dfa44a68f8681a22b3c84428776bc7b0af1847d80d30346f0d0"
+      "sha256": "f81d995ed89fda91716db19aaed536c45b961211d41039186637b5f454d7701c"
     },
     {
       "path": "handoff.py",
@@ -157,7 +157,7 @@
     },
     {
       "path": "plugin.yaml",
-      "sha256": "6a3baf875b758fdf6d7973d5f9ef1a5727702452cd4b4a6f4a8268f130b32341"
+      "sha256": "7a95bad1937cb8d455e3c89d5d4ee300ea42e0fb1320357f024ff9cdbbb7aca3"
     },
     {
       "path": "provider_metrics.py",
@@ -1245,7 +1245,7 @@
     },
     {
       "path": "skills/frontend-ui-ux/references/complete-contract.md",
-      "sha256": "7aff009df5222d5cfbcdcc505f651104a7e8145c3b8477246c098a9f9b295f6f"
+      "sha256": "8d753d41b63d666bd1cdd64f8f580faa8bab5bae52ddab5c32c9c710e63f0f59"
     },
     {
       "path": "skills/frontend-ui-ux/references/composition.md",
@@ -1289,7 +1289,7 @@
     },
     {
       "path": "skills/frontend-ui-ux/references/production.md",
-      "sha256": "af5d4483340c2410572488c3c6239b0624e83fb24eabda0cc49398d091e85312"
+      "sha256": "f859bbca4a70621c4440feb4b288d6225e6ecdd206ef4e32baeea199526df2a3"
     },
     {
       "path": "skills/frontend-ui-ux/references/redesign-playbook.md",
@@ -1857,7 +1857,7 @@
     },
     {
       "path": "skills/readme-studio/SKILL.md",
-      "sha256": "40b9ed081c86db22386fd586903b6457248cbc1185b3a283c007f6bac0e98be4"
+      "sha256": "010f567e56dbfb73da49acbaa2762737a7351cd0856123e86ac49b5b8d2b3533"
     },
     {
       "path": "skills/readme-studio/references/decoration-patterns.md",
@@ -1873,7 +1873,7 @@
     },
     {
       "path": "skills/readme-studio/references/production-interview.md",
-      "sha256": "be6169bff980aef9813e86e6670763d92166efbdbaaa9fa1cc98b733f00224e4"
+      "sha256": "7ec8fcd79e3d55e8d17642696793f557717db0453ba7f0008eb3e80cc6e471a2"
     },
     {
       "path": "skills/readme-studio/references/type-and-images.md",
@@ -1969,7 +1969,7 @@
     },
     {
       "path": "skills/visual-qa/references/complete-contract.md",
-      "sha256": "c3008c41017bc548982cc424a3ec90bd338c2d5c2d49bebb5385a640531aabff"
+      "sha256": "b35b71a8751a90ac8ce40251b8a2d18860068db96e7bd4eedda88fd7b548b362"
     },
     {
       "path": "skills/visual-qa/schemas/evidence-manifest-v1alpha1.schema.json",

package/assets/lithermes-plugin/plugin.yaml

@@ -1,5 +1,5 @@
 name: lithermes
-version: 1.0.5
+version: 1.0.7
 description: "Hermes-native workflow toolkit: litgoal durable runtime, 5-lane review orchestrator, Litwork commands, skills, and prompt steering."
 author: "LitHermes contributors"
 kind: standalone

package/assets/lithermes-plugin/skills/frontend-ui-ux/references/complete-contract.md

@@ -431,7 +431,7 @@ isolated Hermes home. Use `--hermes-home`; never `--home`.
 
 ```text
 $ node packages/lithermes-installer/bin/lithermes.js install --yes --offline --no-hud --hermes-home "$ISOLATED"
-Installed LitHermes 1.0.5
+Installed LitHermes 1.0.7
 plugin: $ISOLATED/plugins/lithermes
 model config: updated
 
@@ -448,7 +448,7 @@ installed payload: PASS
 enabled config: PASS
 
 $ hermes lithermes doctor
-[OK] plugin.yaml readable (version 1.0.5)
+[OK] plugin.yaml readable (version 1.0.7)
 [OK] skills bundled: 32
 [OK] litgoal durable runtime importable
 ```

package/assets/lithermes-plugin/skills/frontend-ui-ux/references/production.md

@@ -4,7 +4,7 @@ Hermes loads this document through the selected frontend-ui-ux skill. Read the r
 
 Before editing, identify the actual page, stack, user task, preserved brand elements and actions/states. Keep this direction note small enough to revise. The evidence-capable v1beta2 contract remains the final inventory for verification, and evolves during the build. Older references that call this a freeze describe a versioned review snapshot, not an extra approval gate or a requirement to finish JSON before writing UI. Review/plan-only intent remains read-only even if other guidance says implement.
 
-There is no mandatory interview. Ask only when two plausible answers would materially change scope, architecture, permissions, accessibility, or visual direction. Ask one high-impact question at a time, wait for its answer, then resolve the next material uncertainty in a later turn; continue for as many rounds as materially necessary. Retain earlier answers across rounds in the conversation and task-local direction note, reread them on resume, and do not re-ask a resolved question. When the brief already bounds the work, state the default and proceed without pausing for an interview. Review, plan, and keyword-only requests remain read-only. A cancellation suspends new writes and captures partial status; resumption reuses confirmed assets and source.
+There is no mandatory interview. Ask only when two plausible answers would materially change scope, architecture, permissions, accessibility, or visual direction. Ask one high-impact question at a time, wait for its answer, then resolve the next material uncertainty in a later turn; continue for as many rounds as materially necessary. Retain earlier answers across rounds in the conversation and task-local direction note, reread them on resume, and do not re-ask a resolved question. If a brief lists competing visual directions and leaves them undecided, that choice is still open: calling each option "acceptable" is not a choice or a delegation. Ask it in a separate round after higher-impact questions are answered; you may recommend one option in the question, but do not declare a default for it or start building until the user chooses. A brief that gives no visual direction at all is different: use the authored default direction without asking. Defaults cover only what the brief settles, what it explicitly hands to you, and details that do not materially change the result. When the brief already bounds the work, state the default and proceed without pausing for an interview. Review, plan, and keyword-only requests remain read-only. A cancellation suspends new writes and captures partial status; resumption reuses confirmed assets and source.
 
 When the brief does not specify another direction, use the authored tokens in `references/default-editorial-pixel.json` and make an original, task-specific pixel illustration the primary visual anchor. Render each cell at least 6 CSS px and preserve crisp integer-grid edges with nearest-neighbor scaling; do not smooth or blur the illustration. Build the surrounding editorial hierarchy with generous spacing, compact display lines, a terminal accent and deliberate asymmetry. A rounded abstract symbol or a generic gradient cannot stand in for the task-specific illustration. Keep pixel art decorative when the task is conveyed in real text; add meaningful alternative text when it conveys unique content. Never borrow a reference site's artwork, proprietary font or copy.
 

package/assets/lithermes-plugin/skills/readme-studio/SKILL.md

@@ -23,7 +23,7 @@ Use the authorized repository, applicable instructions, current README, real pac
 | Mode | Trigger | Contract |
 | --- | --- | --- |
 | production | Create or improve the README/cover | Inspect facts, state defaults for a bounded brief, create scoped files and inspect the resulting composition |
-| question | Two plausible choices materially change scope, architecture, permissions, accessibility or visual direction | Apply `references/production-interview.md`; ask one high-impact question at a time and retain answers across rounds |
+| question | Two plausible choices materially change scope, architecture, permissions, accessibility or visual direction | Apply `references/production-interview.md`; ask one high-impact question at a time and retain answers across rounds; open competing directions: ask before choosing |
 | review/plan | Review-only or plan-only | Read-only findings or plan; no asset generation or file edits |
 | partial | A required tool, font, source or permission is absent | Name the affected deliverable and prerequisite; continue independent work |
 

package/assets/lithermes-plugin/skills/readme-studio/references/production-interview.md

@@ -6,6 +6,8 @@ There is no mandatory interview. Ask only when two plausible answers would mater
 
 When the brief already bounds the work, state the default and proceed. Use repository evidence and established identity for defaults; state assumptions that materially affect the result. Do not pause for a ceremonial approval of a bounded brief.
 
+If a brief lists competing visual directions and leaves them undecided, that choice is still open: calling each option "acceptable" is not a choice or a delegation. Ask it in a separate round after higher-impact questions are answered; you may recommend one option in the question, but do not declare a default for it or start building until the user chooses. A brief that gives no visual direction at all is different: follow established identity or the default cover direction without asking. Defaults cover only what the brief settles, what it explicitly hands to you, and details that do not materially change the result.
+
 ## How to ask
 
 Ask one high-impact question at a time, in one turn. Present the distinct alternatives that change the deliverable and name their practical effect. Do not combine unrelated decisions into a questionnaire or ask the user to repeat the brief. Wait for the answer before asking about another unresolved material choice. Continue for as many rounds as materially necessary, and stop once remaining choices can safely follow stated defaults.

package/assets/lithermes-plugin/skills/visual-qa/references/complete-contract.md

@@ -485,7 +485,7 @@ isolated Hermes home. Use `--hermes-home`; never `--home`.
 
 ```text
 $ node packages/lithermes-installer/bin/lithermes.js install --yes --offline --no-hud --hermes-home "$ISOLATED"
-Installed LitHermes 1.0.5
+Installed LitHermes 1.0.7
 plugin: $ISOLATED/plugins/lithermes
 model config: updated
 
@@ -502,7 +502,7 @@ installed payload: PASS
 enabled config: PASS
 
 $ hermes lithermes doctor
-[OK] plugin.yaml readable (version 1.0.5)
+[OK] plugin.yaml readable (version 1.0.7)
 [OK] skills bundled: 32
 [OK] litgoal durable runtime importable
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@litfamily/lithermes",
-  "version": "1.0.5",
+  "version": "1.0.7",
   "description": "npx/bunx installer for the LitHermes Hermes plugin",
   "license": "MIT",
   "repository": {

package/readme-assets/badge-version.svg

@@ -1 +1 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.5"><title>release: 1.0.5</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.5</text></g></svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.7"><title>release: 1.0.7</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.7</text></g></svg>

package/src/lib/check.js

@@ -1,8 +1,8 @@
 const fs = require("node:fs");
 const path = require("node:path");
 const { spawnSync } = require("node:child_process");
-const { configHasLitHermes, inspectHermesCapabilities, readConfig } = require("./config");
-const { detectHermesRuntimeRepo, detectHermesVersion, ensureHermesHome, inspectHermesHostCapabilities, LitHermesError } = require("./hermesDiscovery");
+const { configHasLitHermes, formatConcurrencyCapability, inspectHermesCapabilities, readConfig, readExternalSkillDirsConfig } = require("./config");
+const { detectHermesRuntimeRepo, detectHermesVersion, ensureHermesHome, expandHome, inspectHermesHostCapabilities, LitHermesError } = require("./hermesDiscovery");
 const { formatManagedRoute } = require("./modelRoutePolicy");
 const { inspectPythonCache } = require("./files");
 const { assetRoot, pluginDest } = require("./install");
@@ -112,6 +112,75 @@ function loadedStatusMatchesOrigin(output, expectedPluginPath) {
   }
 }
 
+function isRegularSkillFile(file) {
+  try {
+    return fs.lstatSync(file).isFile();
+  } catch {
+    return false;
+  }
+}
+
+// Bounded, non-symlink-following scan for `<HERMES_HOME>/skills/**/<id>/SKILL.md`.
+// Real local-skill trees are shallow, so a small depth/entry cap keeps this cheap
+// while still catching a collision a couple of category folders deep.
+function collectLocalSkillShadows(hermesHome, skillIds, { maxDepth = 3, maxEntries = 2000 } = {}) {
+  const remaining = new Set(skillIds);
+  const found = new Map();
+  let visited = 0;
+  function walk(dir, depth) {
+    if (!remaining.size || depth > maxDepth || visited >= maxEntries) return;
+    let entries;
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (!remaining.size || visited >= maxEntries) return;
+      visited += 1;
+      if (!entry.isDirectory()) continue;
+      const full = path.join(dir, entry.name);
+      if (remaining.has(entry.name)) {
+        const skillFile = path.join(full, "SKILL.md");
+        if (isRegularSkillFile(skillFile)) {
+          found.set(entry.name, skillFile);
+          remaining.delete(entry.name);
+          continue;
+        }
+      }
+      walk(full, depth + 1);
+    }
+  }
+  walk(path.join(hermesHome, "skills"), 0);
+  return found;
+}
+
+// Hermes resolves a bare skill name (not the `lithermes:<name>` explicit-load form)
+// against `skills.external_dirs` and local `<HERMES_HOME>/skills`; a same-named entry
+// there is picked instead of the LitHermes plugin copy. This is advisory: it never
+// changes doctor's pass/fail status, only surfaces the collision.
+function detectSkillShadows({ configText, hermesHome, skillIds = requiredSkills }) {
+  const externalDirs = readExternalSkillDirsConfig(configText)
+    .map((dir) => path.resolve(expandHome(dir)));
+  const localShadows = collectLocalSkillShadows(hermesHome, skillIds);
+  const warnings = [];
+  for (const id of skillIds) {
+    const externalDir = externalDirs.find((dir) => isRegularSkillFile(path.join(dir, id, "SKILL.md")));
+    if (externalDir) {
+      warnings.push({ id, path: path.join(externalDir, id, "SKILL.md"), source: "skills.external_dirs" });
+      continue;
+    }
+    const localPath = localShadows.get(id);
+    if (localPath) warnings.push({ id, path: localPath, source: "local skills" });
+  }
+  return warnings;
+}
+
+function formatSkillShadowWarning(shadow) {
+  return `WARNING: skill "${shadow.id}" bare name resolves to ${shadow.path} (${shadow.source}); `
+    + `use lithermes:${shadow.id} to load LitHermes's copy, or remove/rename the other copy.`;
+}
+
 function checkLitHermes(flags = {}) {
   const { hermesHome, hermesRepo } = ensureHermesHome(flags);
   const pluginPath = pluginDest(hermesHome);
@@ -187,6 +256,7 @@ function doctorLitHermes(flags = {}) {
 	const unsafeRecursion = recursion.status === "unavailable" && recursion.reason.startsWith("nested delegation");
 	const unsafeModelRoute = modelSafety.status === "blocked";
   const runtime = capabilities.runtime;
+  const skillShadows = detectSkillShadows({ configText, hermesHome });
   const lines = [
     `plugin discovery: ${installedPass && configOk ? "PASS" : "PATCH_AVAILABLE"}`,
     `bundled source: ${bundledPass ? "PASS" : "FAIL"}`,
@@ -198,8 +268,10 @@ function doctorLitHermes(flags = {}) {
     `installed payload: ${installedPass ? "PASS" : "FAIL"}`,
     `enabled config: ${configOk ? "PASS" : "PARTIAL"}`,
     `loaded plugin: ${loaded.status} (${loaded.reason})`,
+    `skill shadow check: ${skillShadows.length ? "WARNING" : "PASS"}`,
+    ...skillShadows.map(formatSkillShadowWarning),
     `auto-compaction: ${auto.status}${auto.reason ? ` (${auto.reason})` : ""}`,
-		`concurrency: ${concurrency.status}${concurrency.status === "hard" ? ` (per batch ${concurrency.limit}; async batches ${concurrency.asyncBatchLimit}; potential children ${concurrency.potentialChildCeiling})` : ` (${concurrency.reason})`}`,
+		`concurrency: ${formatConcurrencyCapability(concurrency)}`,
 		`recursion: ${recursion.status}${recursion.status === "hard" ? recursion.flatBy === "depth" ? ` (depth ${recursion.limit}, flat)` : ` (configured depth ${recursion.limit}, flat via orchestrator kill switch)` : ` (${recursion.reason})`}`,
     `model route safety: ${modelSafety.status}${modelSafety.code ? ` (${modelSafety.code}; ${modelSafety.reason})` : ` (${modelSafety.reason})`}`,
     `runtime: ${runtime.status}${runtime.status === "hard" ? ` (${runtime.provider} ${runtime.apiMode})` : ` (${runtime.reason})`}`,
@@ -222,6 +294,7 @@ module.exports = {
   checkGatewaySource,
   checkLitHermes,
   checkTuiSource,
+  detectSkillShadows,
   doctorLitHermes,
   enabledUserJsonIncludesPlugin,
   loadedStatusMatchesOrigin,

package/src/lib/config.js

@@ -1,5 +1,6 @@
 const fs = require("node:fs");
 const path = require("node:path");
+const { parseDocument } = require("yaml");
 const { writeFileAtomic } = require("./files");
 const modelConfig = require("./modelConfig");
 
@@ -205,6 +206,27 @@ function clearOutputStyleConfig(text) {
   return `${updated.replace(/\n*$/, "")}\n`;
 }
 
+// Hermes `skills.external_dirs` (config.yaml key, default []): bare-name skill
+// resolution searches these directories, so a same-named directory there can shadow
+// a LitHermes plugin skill (which is only reachable unambiguously as `lithermes:<name>`).
+// Malformed YAML fails closed to an empty list rather than throwing during doctor.
+function readExternalSkillDirsConfig(text) {
+  const str = String(text || "");
+  if (!str.trim()) return [];
+  try {
+    const document = parseDocument(str, { strict: true, uniqueKeys: true });
+    if (document.errors.length) return [];
+    const node = document.getIn(["skills", "external_dirs"], true);
+    const value = node && typeof node.toJS === "function" ? node.toJS(document) : node;
+    if (!Array.isArray(value)) return [];
+    return value
+      .filter((entry) => typeof entry === "string" && entry.trim())
+      .map((entry) => entry.trim());
+  } catch {
+    return [];
+  }
+}
+
 function writeConfig(hermesHome, text) {
   fs.mkdirSync(hermesHome, { recursive: true });
   writeFileAtomic(configPath(hermesHome), text, "utf8");
@@ -220,6 +242,7 @@ module.exports = {
   enableLitHermesConfig,
   readConfig,
   readDisplaySkinConfig,
+  readExternalSkillDirsConfig,
   readOutputStyleConfig,
   readTuiAgentsNudgeConfig,
   setDisplaySkinConfig,

package/src/lib/install.js

@@ -5,6 +5,7 @@ const {
   configHasLitHermes,
   disableLitHermesConfig,
   enableLitHermesConfig,
+  formatConcurrencyCapability,
   inspectHermesCapabilities,
   planModelConfig,
   readConfig,
@@ -245,9 +246,7 @@ function capabilityLines(plan, { dryRun = false } = {}) {
   const auto = autoCompaction.status === "hard"
     ? `hard (${autoCompaction.limit} tokens)`
     : `unavailable (${autoCompaction.reason.replace(/^Hermes 0\.17\.0 exposes /, "")})`;
-  const sync = concurrency.status === "hard"
-    ? `hard (per batch ${concurrency.limit}; async batches ${concurrency.asyncBatchLimit}; potential children ${concurrency.potentialChildCeiling})`
-    : `${concurrency.status} (${concurrency.reason})`;
+  const sync = formatConcurrencyCapability(concurrency);
   const nesting = recursion.status === "hard"
     ? recursion.flatBy === "depth"
       ? `hard (depth ${recursion.limit}, flat)`

package/src/lib/modelConfig.js

@@ -1,7 +1,7 @@
 const fs = require("node:fs");
 const path = require("node:path");
 const { writeFileAtomic } = require("./files");
-const { OPENAI_PROVIDER, RESPONSES_MODE, classifyHostVersion,
+const { OPENAI_PROVIDER, RESPONSES_MODE, VERIFIED_CONFIG_VERSION, classifyHostVersion,
   exactHostVersion, parseBoundary, sourceHash } = require("./modelConfigBoundary");
 const {
   ASTRA_MODEL,
@@ -138,6 +138,14 @@ function unavailableCapabilities(reason) {
   };
 }
 
+function formatConcurrencyCapability(concurrency) {
+  if (concurrency.status !== "hard") return `${concurrency.status} (${concurrency.reason})`;
+  if (concurrency.sharedAsyncCap) {
+    return `hard (per batch ${concurrency.limit}; background cap ${concurrency.backgroundCap}; potential children ${concurrency.potentialChildCeiling})`;
+  }
+  return `hard (per batch ${concurrency.limit}; async batches ${concurrency.asyncBatchLimit}; potential children ${concurrency.potentialChildCeiling})`;
+}
+
 function safeOriginalDispatchId(dispatch) {
   if (typeof dispatch !== "string" || !/^[A-Za-z0-9._:/-]{1,128}$/.test(dispatch)) return null;
   return dispatch;
@@ -199,9 +207,11 @@ function inspectHermesCapabilities(text, options = {}) {
   }
   const concurrency = boundary.document.getIn(["delegation", "max_concurrent_children"]);
   const asyncBatches = boundary.document.getIn(["delegation", "max_async_children"]);
+  const configVersion = boundary.document.get("_config_version");
+  const sharedAsyncCap = configVersion >= 33;
   const spawnDepth = boundary.document.getIn(["delegation", "max_spawn_depth"]);
   const orchestratorEnabled = boundary.document.getIn(["delegation", "orchestrator_enabled"]);
-  const effectiveAsyncBatches = Number.isInteger(asyncBatches) ? asyncBatches : 3;
+  const effectiveAsyncBatches = sharedAsyncCap ? 1 : Number.isInteger(asyncBatches) ? asyncBatches : 3;
   const effectiveSpawnDepth = Number.isInteger(spawnDepth) ? spawnDepth : 1;
   const flatDelegation = effectiveSpawnDepth === 1 || orchestratorEnabled === false;
   const contextLength = boundary.document.getIn(["model", "context_length"]);
@@ -234,12 +244,15 @@ function inspectHermesCapabilities(text, options = {}) {
     concurrency: concurrency === 20
       ? {
         status: "hard",
-        reason: "effective synchronous concurrency is configured to 20",
+        reason: sharedAsyncCap
+          ? "effective concurrency and background work share the configured cap of 20"
+          : "effective synchronous concurrency is configured to 20",
         observedSource: "delegation.max_concurrent_children",
         limit: 20,
         scope: "per-batch",
-        asyncBatchLimit: effectiveAsyncBatches,
-        potentialChildCeiling: 20 * effectiveAsyncBatches,
+        ...(sharedAsyncCap
+          ? { sharedAsyncCap: true, backgroundCap: 20, potentialChildCeiling: 20 }
+          : { asyncBatchLimit: effectiveAsyncBatches, potentialChildCeiling: 20 * effectiveAsyncBatches }),
       }
       : {
         status: "unavailable",
@@ -379,15 +392,22 @@ function planModelConfig(text, options = {}) {
   document.setIn(["delegation", "max_spawn_depth"], 1);
   document.setIn(["delegation", "orchestrator_enabled"], false);
   const plannedText = document.toString({ lineWidth: 0 });
+  const beyondVerifiedReasons = [];
+  if (classifyHostVersion(options.hostVersion).status === "beyond-verified") {
+    beyondVerifiedReasons.push(`Hermes ${request.hostVersion} is beyond the verified matrix; source and runtime markers verified, model schema written`);
+  }
+  const configVersion = document.get("_config_version");
+  if (configVersion > VERIFIED_CONFIG_VERSION) {
+    beyondVerifiedReasons.push(`config schema ${configVersion} is beyond the verified ceiling ${VERIFIED_CONFIG_VERSION}`);
+  }
   return {
     action: "write",
     backupAllowed: true,
     capabilities: inspectHermesCapabilities(plannedText, { ...options, ...route }),
     classification,
-    reason:
-      classifyHostVersion(options.hostVersion).status === "beyond-verified"
-        ? `Hermes ${request.hostVersion} is beyond the verified matrix; source and runtime markers verified, model schema written`
-        : `verified Hermes ${request.hostVersion} model schema`,
+    reason: beyondVerifiedReasons.length
+      ? beyondVerifiedReasons.join("; ")
+      : `verified Hermes ${request.hostVersion} model schema`,
     request,
     sourceHash: sourceHash(String(text || "")),
     text: plannedText,
@@ -429,6 +449,7 @@ function applyModelConfigPlan(hermesHome, plan) {
 module.exports = {
   applyModelConfigPlan,
   classifyModelConfig,
+  formatConcurrencyCapability,
   inspectHermesCapabilities,
   planModelConfig,
   revalidateModelConfigPlan,

package/src/lib/modelConfigBoundary.js

@@ -17,6 +17,7 @@ const MINIMUM_HOST_VERSION = "0.17.0";
 // malformed, which must still be reported as unsupported.
 const NOT_PROBED_HOST_VERSION = "__lithermes_dry_run_not_probed__";
 const CONFIG_VERSION = 30;
+const VERIFIED_CONFIG_VERSION = 45;
 const CREDENTIAL_KEY = /(^|[_-])(api[_-]?key|client[_-]?secret|auth[_-]?token|(?:aws[_-]?)?access[_-]?key(?:[_-]?id)?|(?:ssh[_-]?)?private[_-]?key|token|password|passphrase|secret|credential|authorization)([_-]|$)/i;
 const MAP_PATHS = ["model", "agent", "delegation", "compression"];
 const SCALAR_PATHS = [
@@ -165,8 +166,9 @@ function parseBoundary(text, options = {}) {
     return { error: "malformed host config" };
   }
   const credentialKey = findCredentialRiskKey(document);
-  if (document.get("_config_version") !== CONFIG_VERSION) {
-    return { error: `unknown host config schema; expected version ${CONFIG_VERSION}` };
+  const configVersion = document.get("_config_version");
+  if (!Number.isInteger(configVersion) || configVersion < CONFIG_VERSION) {
+    return { error: `unknown host config schema; expected integer version >= ${CONFIG_VERSION}` };
   }
   for (const key of MAP_PATHS) {
     const node = document.get(key, true);
@@ -208,6 +210,7 @@ module.exports = {
   NOT_PROBED_HOST_VERSION,
   OPENAI_PROVIDER,
   RESPONSES_MODE,
+  VERIFIED_CONFIG_VERSION,
   classifyHostVersion,
   exactHostVersion,
   parseBoundary,