@litfamily/lithermes 1.0.6 → 1.0.8

package/README.md

@@ -1,7 +1,7 @@
-<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/cover-motion.webp" width="100%" alt="LitHermes cover art. A lime signal moves through orbital paths above the HERMES AGENT wordmark; a still frame from this motion cover appears when reduced motion is preferred." /></picture></p>
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/cover.webp" width="100%" alt="Five armored robots, one for each LitFamily product, beneath the words KEEP THE WORK LIT." /></p>
+<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/cover-motion.webp" width="100%" alt="LitHermes cover art. A lime signal moves through orbital paths above the HERMES AGENT wordmark; a still frame from this motion cover appears when reduced motion is preferred." /></picture></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/cover.webp" width="100%" alt="Five armored robots, one for each LitFamily product, beneath the words KEEP THE WORK LIT." /></p>
 
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/ascii-readme.svg" width="480" alt="LIT ASCII B mark" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/ascii-readme.svg" width="480" alt="LIT ASCII B mark" /></p>
 
 <details>
 <summary>Copy ASCII logo</summary>
@@ -31,19 +31,19 @@
 
 </details>
 
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/lithermes-wordmark.svg" width="480" alt="LITHERMES display type" /></p>
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/lithermes-clay-icon.png" width="160" alt="LitHermes clay mark" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/lithermes-wordmark.svg" width="480" alt="LITHERMES display type" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/lithermes-clay-icon.png" width="160" alt="LitHermes clay mark" /></p>
 
 <p align="center">
-<a href="#install"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/badge-version.svg" alt="1.0.6" /></a>
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/badge-license.svg" alt="MIT license" /></a>
+<a href="#install"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/badge-version.svg" alt="1.0.8" /></a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/badge-license.svg" alt="MIT license" /></a>
 </p>
 
 <p align="center">
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/lucide-book-open.svg" width="16" alt="" /> Docs</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/lucide-book-open.svg" width="16" alt="" /> Docs</a> &nbsp;
 <a href="#install">Install</a> &nbsp;
-<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition</a> &nbsp;
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
+<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
 </p>
 
 # LitHermes
@@ -52,11 +52,11 @@
 
 **What it is:** LitHermes connects planning, execution, review, and handoff inside **Hermes Agent**.
 
-[한국어](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/README_Ko-KR.md) · [npm](https://www.npmjs.com/package/@litfamily/lithermes) · [GitHub](https://github.com/wjgoarxiv/lithermes)
+[한국어](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/README_Ko-KR.md) · [npm](https://www.npmjs.com/package/@litfamily/lithermes) · [GitHub](https://github.com/wjgoarxiv/lithermes)
 
 ## Install
 
-Source version: `@litfamily/lithermes@1.0.6`. Have Hermes Agent and Node.js 18+ installed, with write access to your Hermes home (normally `~/.hermes`).
+Source version: `@litfamily/lithermes@1.0.8`. Have Hermes Agent and Node.js 18+ installed, with write access to your Hermes home (normally `~/.hermes`).
 
 The installer targets your Hermes home. For an isolated trial, set `HERMES_HOME` to a new empty directory before installation and use that same value when starting Hermes. Keep your existing home and settings. `--no-patch-installed-hermes` also prevents compatibility edits to the detected host installation outside that profile.
 

package/README_Ko-KR.md

@@ -1,7 +1,7 @@
-<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/cover-motion.webp" width="100%" alt="LitHermes 표지. 라임색 신호가 궤도를 지나 HERMES AGENT 워드마크로 이어집니다. 모션을 줄이도록 설정하면 이 모션 표지에서 추출한 정지 프레임을 표시합니다." /></picture></p>
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/cover.webp" width="100%" alt="LitFamily 다섯 제품을 나타내는 장갑 로봇 패널과 KEEP THE WORK LIT. 문구" /></p>
+<p align="center"><picture><source media="(prefers-reduced-motion: reduce)" srcset="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/cover-motion-still.webp" /><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/cover-motion.webp" width="100%" alt="LitHermes 표지. 라임색 신호가 궤도를 지나 HERMES AGENT 워드마크로 이어집니다. 모션을 줄이도록 설정하면 이 모션 표지에서 추출한 정지 프레임을 표시합니다." /></picture></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/cover.webp" width="100%" alt="LitFamily 다섯 제품을 나타내는 장갑 로봇 패널과 KEEP THE WORK LIT. 문구" /></p>
 
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/ascii-readme.svg" width="480" alt="LIT ASCII B 마크" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/ascii-readme.svg" width="480" alt="LIT ASCII B 마크" /></p>
 
 <details>
 <summary>ASCII 로고 복사</summary>
@@ -31,19 +31,19 @@
 
 </details>
 
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/lithermes-wordmark.svg" width="480" alt="LITHERMES 디스플레이 서체" /></p>
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/lithermes-clay-icon.png" width="160" alt="LitHermes 클레이 마크" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/lithermes-wordmark.svg" width="480" alt="LITHERMES 디스플레이 서체" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/lithermes-clay-icon.png" width="160" alt="LitHermes 클레이 마크" /></p>
 
 <p align="center">
-<a href="#설치"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/badge-version.svg" alt="1.0.6" /></a>
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/badge-license.svg" alt="MIT license" /></a>
+<a href="#설치"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/badge-version.svg" alt="1.0.8" /></a>
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/badge-license.svg" alt="MIT license" /></a>
 </p>
 
 <p align="center">
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.ko.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/lucide-book-open.svg" width="16" alt="" /> 문서</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/docs/guide.ko.md"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/lucide-book-open.svg" width="16" alt="" /> 문서</a> &nbsp;
 <a href="#설치">설치</a> &nbsp;
-<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition</a> &nbsp;
-<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
+<a href="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/ignition-film.mp4"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/lucide-play.svg" width="16" alt="" /> Ignition</a> &nbsp;
+<a href="https://github.com/wjgoarxiv/lithermes/blob/main/LICENSE"><img src="https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/readme-assets/lucide-shield-check.svg" width="16" alt="" /> MIT</a>
 </p>
 
 # LitHermes
@@ -52,11 +52,11 @@
 
 **무엇인가요:** LitHermes는 **Hermes Agent**에서 계획, 실행, 검토, 인계를 이어갑니다.
 
-[English](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.6/README.md) · [npm](https://www.npmjs.com/package/@litfamily/lithermes) · [GitHub](https://github.com/wjgoarxiv/lithermes)
+[English](https://cdn.jsdelivr.net/npm/@litfamily/lithermes@1.0.8/README.md) · [npm](https://www.npmjs.com/package/@litfamily/lithermes) · [GitHub](https://github.com/wjgoarxiv/lithermes)
 
 ## 설치
 
-소스 기준 버전은 `@litfamily/lithermes@1.0.6`입니다. Hermes Agent와 Node.js 18+가 필요하며, Hermes 홈(기본 `~/.hermes`)에 쓰기 권한이 있어야 합니다.
+소스 기준 버전은 `@litfamily/lithermes@1.0.8`입니다. Hermes Agent와 Node.js 18+가 필요하며, Hermes 홈(기본 `~/.hermes`)에 쓰기 권한이 있어야 합니다.
 
 설치기는 Hermes 홈을 대상으로 합니다. 별도 체험을 하려면 설치 전에 `HERMES_HOME`을 새 빈 디렉터리로 지정하고 Hermes를 시작할 때도 같은 값을 사용하세요. 기존 홈과 설정은 보관합니다. `--no-patch-installed-hermes`는 해당 프로필 밖에서 감지된 호스트 설치본에 호환성 패치를 적용하지 못하게 합니다.
 

package/assets/lithermes-plugin/diagnostics.py

@@ -84,6 +84,27 @@ _OPENAI_CATALOG_EFFORTS = {
 }
 _REVIEWER_ROUTE_NAME = "".join(chr(code) for code in (109, 111, 109, 117, 115))
 SUPPORTED_HERMES_HOST_VERSIONS = frozenset(("0.17.0", "0.19.0"))
+_MINIMUM_HERMES_HOST_VERSION = (0, 17, 0)
+
+
+def _classify_hermes_host_version(host_version: str) -> str:
+    if re.fullmatch(r"[0-9]+\.[0-9]+\.[0-9]+", host_version) is None:
+        return "unsupported"
+    version = tuple(int(part) for part in host_version.split("."))
+    if version < _MINIMUM_HERMES_HOST_VERSION:
+        return "unsupported"
+    if host_version in SUPPORTED_HERMES_HOST_VERSIONS:
+        return "verified"
+    return "beyond-verified"
+
+
+def _beyond_verified_host_note(host_version: str) -> str | None:
+    if _classify_hermes_host_version(host_version) != "beyond-verified":
+        return None
+    return (
+        f"[NOTE] Hermes host {host_version} is beyond the verified matrix "
+        "(0.17.0, 0.19.0); diagnostics are read-only"
+    )
 
 
 @dataclass(frozen=True, slots=True)
@@ -94,6 +115,7 @@ class ModelCapabilities:
     child_effort: str
     concurrency: int
     async_batches: int
+    shared_async_cap: bool
     spawn_depth: int
     flat: bool
     approved: bool
@@ -149,14 +171,31 @@ def _host_config_path() -> Path:
     return home / "config.yaml"
 
 
+def _is_secret_looking_scalar(value: object) -> bool:
+    if not isinstance(value, str):
+        return False
+    trimmed = value.strip()
+    if not trimmed or re.fullmatch(r"(?:true|false|null)", trimmed, re.IGNORECASE):
+        return False
+    if re.fullmatch(r"[A-Z][A-Z0-9_]*", trimmed) and "_" in trimmed:
+        return False
+    if re.fullmatch(r"\$\{[A-Z][A-Z0-9_]*\}", trimmed):
+        return False
+    return not re.search(r"(?:^|[-_])(redacted|placeholder)(?:[-_]|$)", trimmed, re.IGNORECASE)
+
+
 def _has_credential_key(value: object) -> bool:
     if isinstance(value, dict):
-        return any(
-            _CREDENTIAL_KEY_RE.search(
-                re.sub(r"([a-z0-9])([A-Z])", r"\1_\2", str(key)).replace("-", "_")
-            ) or _has_credential_key(child)
-            for key, child in value.items()
-        )
+        for key, child in value.items():
+            normalized = re.sub(
+                r"([a-z0-9])([A-Z])", r"\1_\2", str(key or "")
+            ).replace("-", "_")
+            if (
+                _CREDENTIAL_KEY_RE.search(normalized)
+                and _is_secret_looking_scalar(child)
+            ) or _has_credential_key(child):
+                return True
+        return False
     if isinstance(value, list):
         return any(_has_credential_key(child) for child in value)
     return False
@@ -203,7 +242,7 @@ def _cataloged_route(model: object, effort: object) -> bool:
 
 
 def _parse_capabilities(host_version: str) -> CapabilityResult:
-    if host_version not in SUPPORTED_HERMES_HOST_VERSIONS:
+    if _classify_hermes_host_version(host_version) == "unsupported":
         return UnavailableCapabilities("unsupported Hermes host version")
     try:
         text = _host_config_path().read_text(encoding="utf-8")
@@ -221,7 +260,8 @@ def _parse_capabilities(host_version: str) -> CapabilityResult:
         return UnavailableCapabilities("malformed host config")
     if _has_credential_key(config):
         return UnavailableCapabilities("credential-risk host config")
-    if config.get("_config_version") != 30:
+    schema_version = config.get("_config_version")
+    if type(schema_version) is not int or schema_version < 30:
         return UnavailableCapabilities("unknown host config schema")
     for key in _SAFE_CHILDREN:
         if key in config and not isinstance(config[key], dict):
@@ -256,7 +296,8 @@ def _parse_capabilities(host_version: str) -> CapabilityResult:
     child_effort = effort if child_effort_raw is None or child_effort_raw == "" else child_effort_raw
     child_provider = provider if child_provider_raw is None or child_provider_raw == "" else child_provider_raw
     concurrency_raw = delegation_config.get("max_concurrent_children", "")
-    async_raw = delegation_config.get("max_async_children", 3)
+    shared_async_cap = schema_version >= 33
+    async_raw = 1 if shared_async_cap else delegation_config.get("max_async_children", 3)
     depth_raw = delegation_config.get("max_spawn_depth", 1)
     orchestrator_enabled = delegation_config.get("orchestrator_enabled", True)
     delegation_provider = delegation_config.get("provider") or provider
@@ -355,6 +396,7 @@ def _parse_capabilities(host_version: str) -> CapabilityResult:
         child_effort=child_effort,
         concurrency=concurrency,
         async_batches=async_batches,
+        shared_async_cap=shared_async_cap,
         spawn_depth=spawn_depth,
         flat=flat,
         approved=approved,
@@ -369,16 +411,22 @@ def _recursion_detail(spawn_depth: int, flat: bool) -> str:
     return f"hard (configured depth {spawn_depth}, flat via orchestrator kill switch)"
 
 
+def _concurrency_detail(concurrency: int, async_batches: int, shared_async_cap: bool) -> str:
+    if shared_async_cap:
+        return f"per batch {concurrency}; background cap {concurrency}; potential children {concurrency}"
+    return f"per batch {concurrency}; async batches {async_batches}; potential children {concurrency * async_batches}"
+
+
 def _capability_status_lines(host_version: str) -> list[str]:
     result = _parse_capabilities(host_version)
     match result:
-        case ModelCapabilities(parent_model=parent_model, parent_effort=parent_effort, child_model=child_model, child_effort=child_effort, concurrency=concurrency, async_batches=async_batches, spawn_depth=spawn_depth, flat=flat):
+        case ModelCapabilities(parent_model=parent_model, parent_effort=parent_effort, child_model=child_model, child_effort=child_effort, concurrency=concurrency, async_batches=async_batches, shared_async_cap=shared_async_cap, spawn_depth=spawn_depth, flat=flat):
             lines = [
                 f"parent model: {parent_model}",
                 f"parent effort: {parent_effort}",
                 f"global child route: configured ({child_model}, effort {child_effort}, provider inherited)",
                 "child execution proof: unavailable (delegate_task receipt required)",
-                f"concurrency: hard (per batch {concurrency}; async batches {async_batches}; potential children {concurrency * async_batches})",
+                f"concurrency: hard ({_concurrency_detail(concurrency, async_batches, shared_async_cap)})",
                 f"recursion: {_recursion_detail(spawn_depth, flat)}",
                 "auto-compaction: unavailable (ratio-only compression; no exact 650K schema)",
                 f"runtime: hard ({_OPENAI_PROVIDER} {_RESPONSES_MODE})",
@@ -408,7 +456,7 @@ def _capability_status_lines(host_version: str) -> list[str]:
 def status_report(host_version: str | None = None) -> str:
     version = host_version or hermes_host_version()
     skills = _skill_names()
-    return "\n".join([
+    lines = [
         f"LitHermes plugin {plugin_version()}   (Hermes host {version})",
         f"plugin dir: {PLUGIN_ROOT}",
         f"hooks ({len(HOOKS)}): {', '.join(HOOKS)}",
@@ -424,7 +472,11 @@ def status_report(host_version: str | None = None) -> str:
         f"litgoal evidence kinds: {', '.join(_evidence_kinds())}",
         f"scientific visualization: {_science.dependency_summary()}",
         *_capability_status_lines(version),
-    ])
+    ]
+    host_note = _beyond_verified_host_note(version)
+    if host_note:
+        lines.insert(1, host_note)
+    return "\n".join(lines)
 
 
 def doctor_report(host_version: str | None = None) -> tuple[list[str], int]:
@@ -463,14 +515,17 @@ def doctor_report(host_version: str | None = None) -> tuple[list[str], int]:
         lines.append(f"[OK] Hermes host detected (v{version})")
     else:
         lines.append("[NOTE] Hermes host version unknown (running outside Hermes?)")
+    host_note = _beyond_verified_host_note(version)
+    if host_note:
+        lines.append(host_note)
     capabilities = _parse_capabilities(version)
     match capabilities:
-        case ModelCapabilities(parent_model=parent_model, parent_effort=parent_effort, child_model=child_model, child_effort=child_effort, concurrency=concurrency, async_batches=async_batches, spawn_depth=spawn_depth, flat=flat):
+        case ModelCapabilities(parent_model=parent_model, parent_effort=parent_effort, child_model=child_model, child_effort=child_effort, concurrency=concurrency, async_batches=async_batches, shared_async_cap=shared_async_cap, spawn_depth=spawn_depth, flat=flat):
             lines.extend([
                 f"[OK] parent model {parent_model} / effort {parent_effort}",
                 f"[NOTE] global child route configured ({child_model}, effort {child_effort}, provider inherited)",
                 "[NOTE] child execution proof unavailable (delegate_task receipt required)",
-                f"[OK] concurrency hard (per batch {concurrency}; async batches {async_batches}; potential children {concurrency * async_batches})",
+                f"[OK] concurrency hard ({_concurrency_detail(concurrency, async_batches, shared_async_cap)})",
                 f"[{'OK' if flat else 'WARN'}] recursion {_recursion_detail(spawn_depth, flat)}",
                 "[OK] auto-compaction unavailable (ratio-only compression; no exact 650K schema)",
                 f"[OK] runtime hard ({_OPENAI_PROVIDER} {_RESPONSES_MODE})",

package/assets/lithermes-plugin/payload-version.json

@@ -1,7 +1,7 @@
 {
-  "syncedAt": "2026-09-24T07:38:36.208Z",
+  "syncedAt": "2026-09-24T16:39:30.023Z",
   "source": "bundled-payload",
-  "sourceHash": "ae1d45a687de0c01415820ff467295f77a175cc393e4923b940729668f58c49b",
+  "sourceHash": "95a5f8d9b4057baaa3d73a74a48bc99d953dd8a31403b7b80126c1e98340c091",
   "files": [
     {
       "path": "NOTICE.md",
@@ -85,7 +85,7 @@
     },
     {
       "path": "diagnostics.py",
-      "sha256": "8d8196c1c50a6dfa44a68f8681a22b3c84428776bc7b0af1847d80d30346f0d0"
+      "sha256": "fc4c902009704378e31fe511e7d85ad48474fc3198706417f90ac6eb2956b9e8"
     },
     {
       "path": "handoff.py",
@@ -157,7 +157,7 @@
     },
     {
       "path": "plugin.yaml",
-      "sha256": "9a82f3005c45dab04f48b1bdd4ef79937bdbf7dae7e0f2fcd9a5a391a64c3c96"
+      "sha256": "200f3ae31a7b4623a2a09f3a9fcb1af87e7638db16ddb19a6f64ef03e0864d04"
     },
     {
       "path": "provider_metrics.py",
@@ -1245,7 +1245,7 @@
     },
     {
       "path": "skills/frontend-ui-ux/references/complete-contract.md",
-      "sha256": "1a7d471fc7a12ec4eb74d7a78110e5104564a64417f2687e90df89dd80c3b249"
+      "sha256": "50973cdab59eeea6bc699d1da32856ce20b810c56fcb3ceb14d09b387f4782d2"
     },
     {
       "path": "skills/frontend-ui-ux/references/composition.md",
@@ -1969,7 +1969,7 @@
     },
     {
       "path": "skills/visual-qa/references/complete-contract.md",
-      "sha256": "fa3842123069e693ee20784e40f08e79a9e0f6854bf62af89d44f9faf13c39f8"
+      "sha256": "6df5e613de62f49e3aa7d78251bcd916d2dea419a679598a0099a761d5f68fcd"
     },
     {
       "path": "skills/visual-qa/schemas/evidence-manifest-v1alpha1.schema.json",

package/assets/lithermes-plugin/plugin.yaml

@@ -1,5 +1,5 @@
 name: lithermes
-version: 1.0.6
+version: 1.0.8
 description: "Hermes-native workflow toolkit: litgoal durable runtime, 5-lane review orchestrator, Litwork commands, skills, and prompt steering."
 author: "LitHermes contributors"
 kind: standalone

package/assets/lithermes-plugin/skills/frontend-ui-ux/references/complete-contract.md

@@ -431,7 +431,7 @@ isolated Hermes home. Use `--hermes-home`; never `--home`.
 
 ```text
 $ node packages/lithermes-installer/bin/lithermes.js install --yes --offline --no-hud --hermes-home "$ISOLATED"
-Installed LitHermes 1.0.6
+Installed LitHermes 1.0.8
 plugin: $ISOLATED/plugins/lithermes
 model config: updated
 
@@ -448,7 +448,7 @@ installed payload: PASS
 enabled config: PASS
 
 $ hermes lithermes doctor
-[OK] plugin.yaml readable (version 1.0.6)
+[OK] plugin.yaml readable (version 1.0.8)
 [OK] skills bundled: 32
 [OK] litgoal durable runtime importable
 ```

package/assets/lithermes-plugin/skills/visual-qa/references/complete-contract.md

@@ -485,7 +485,7 @@ isolated Hermes home. Use `--hermes-home`; never `--home`.
 
 ```text
 $ node packages/lithermes-installer/bin/lithermes.js install --yes --offline --no-hud --hermes-home "$ISOLATED"
-Installed LitHermes 1.0.6
+Installed LitHermes 1.0.8
 plugin: $ISOLATED/plugins/lithermes
 model config: updated
 
@@ -502,7 +502,7 @@ installed payload: PASS
 enabled config: PASS
 
 $ hermes lithermes doctor
-[OK] plugin.yaml readable (version 1.0.6)
+[OK] plugin.yaml readable (version 1.0.8)
 [OK] skills bundled: 32
 [OK] litgoal durable runtime importable
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@litfamily/lithermes",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "npx/bunx installer for the LitHermes Hermes plugin",
   "license": "MIT",
   "repository": {

package/readme-assets/badge-version.svg

@@ -1 +1 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.6"><title>release: 1.0.6</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.6</text></g></svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.8"><title>release: 1.0.8</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.8</text></g></svg>

package/src/lib/check.js

@@ -1,7 +1,7 @@
 const fs = require("node:fs");
 const path = require("node:path");
 const { spawnSync } = require("node:child_process");
-const { configHasLitHermes, inspectHermesCapabilities, readConfig, readExternalSkillDirsConfig } = require("./config");
+const { configHasLitHermes, formatConcurrencyCapability, inspectHermesCapabilities, readConfig, readExternalSkillDirsConfig } = require("./config");
 const { detectHermesRuntimeRepo, detectHermesVersion, ensureHermesHome, expandHome, inspectHermesHostCapabilities, LitHermesError } = require("./hermesDiscovery");
 const { formatManagedRoute } = require("./modelRoutePolicy");
 const { inspectPythonCache } = require("./files");
@@ -271,7 +271,7 @@ function doctorLitHermes(flags = {}) {
     `skill shadow check: ${skillShadows.length ? "WARNING" : "PASS"}`,
     ...skillShadows.map(formatSkillShadowWarning),
     `auto-compaction: ${auto.status}${auto.reason ? ` (${auto.reason})` : ""}`,
-		`concurrency: ${concurrency.status}${concurrency.status === "hard" ? ` (per batch ${concurrency.limit}; async batches ${concurrency.asyncBatchLimit}; potential children ${concurrency.potentialChildCeiling})` : ` (${concurrency.reason})`}`,
+		`concurrency: ${formatConcurrencyCapability(concurrency)}`,
 		`recursion: ${recursion.status}${recursion.status === "hard" ? recursion.flatBy === "depth" ? ` (depth ${recursion.limit}, flat)` : ` (configured depth ${recursion.limit}, flat via orchestrator kill switch)` : ` (${recursion.reason})`}`,
     `model route safety: ${modelSafety.status}${modelSafety.code ? ` (${modelSafety.code}; ${modelSafety.reason})` : ` (${modelSafety.reason})`}`,
     `runtime: ${runtime.status}${runtime.status === "hard" ? ` (${runtime.provider} ${runtime.apiMode})` : ` (${runtime.reason})`}`,

package/src/lib/install.js

@@ -5,6 +5,7 @@ const {
   configHasLitHermes,
   disableLitHermesConfig,
   enableLitHermesConfig,
+  formatConcurrencyCapability,
   inspectHermesCapabilities,
   planModelConfig,
   readConfig,
@@ -245,9 +246,7 @@ function capabilityLines(plan, { dryRun = false } = {}) {
   const auto = autoCompaction.status === "hard"
     ? `hard (${autoCompaction.limit} tokens)`
     : `unavailable (${autoCompaction.reason.replace(/^Hermes 0\.17\.0 exposes /, "")})`;
-  const sync = concurrency.status === "hard"
-    ? `hard (per batch ${concurrency.limit}; async batches ${concurrency.asyncBatchLimit}; potential children ${concurrency.potentialChildCeiling})`
-    : `${concurrency.status} (${concurrency.reason})`;
+  const sync = formatConcurrencyCapability(concurrency);
   const nesting = recursion.status === "hard"
     ? recursion.flatBy === "depth"
       ? `hard (depth ${recursion.limit}, flat)`

package/src/lib/modelConfig.js

@@ -1,7 +1,7 @@
 const fs = require("node:fs");
 const path = require("node:path");
 const { writeFileAtomic } = require("./files");
-const { OPENAI_PROVIDER, RESPONSES_MODE, classifyHostVersion,
+const { OPENAI_PROVIDER, RESPONSES_MODE, VERIFIED_CONFIG_VERSION, classifyHostVersion,
   exactHostVersion, parseBoundary, sourceHash } = require("./modelConfigBoundary");
 const {
   ASTRA_MODEL,
@@ -138,6 +138,14 @@ function unavailableCapabilities(reason) {
   };
 }
 
+function formatConcurrencyCapability(concurrency) {
+  if (concurrency.status !== "hard") return `${concurrency.status} (${concurrency.reason})`;
+  if (concurrency.sharedAsyncCap) {
+    return `hard (per batch ${concurrency.limit}; background cap ${concurrency.backgroundCap}; potential children ${concurrency.potentialChildCeiling})`;
+  }
+  return `hard (per batch ${concurrency.limit}; async batches ${concurrency.asyncBatchLimit}; potential children ${concurrency.potentialChildCeiling})`;
+}
+
 function safeOriginalDispatchId(dispatch) {
   if (typeof dispatch !== "string" || !/^[A-Za-z0-9._:/-]{1,128}$/.test(dispatch)) return null;
   return dispatch;
@@ -199,9 +207,11 @@ function inspectHermesCapabilities(text, options = {}) {
   }
   const concurrency = boundary.document.getIn(["delegation", "max_concurrent_children"]);
   const asyncBatches = boundary.document.getIn(["delegation", "max_async_children"]);
+  const configVersion = boundary.document.get("_config_version");
+  const sharedAsyncCap = configVersion >= 33;
   const spawnDepth = boundary.document.getIn(["delegation", "max_spawn_depth"]);
   const orchestratorEnabled = boundary.document.getIn(["delegation", "orchestrator_enabled"]);
-  const effectiveAsyncBatches = Number.isInteger(asyncBatches) ? asyncBatches : 3;
+  const effectiveAsyncBatches = sharedAsyncCap ? 1 : Number.isInteger(asyncBatches) ? asyncBatches : 3;
   const effectiveSpawnDepth = Number.isInteger(spawnDepth) ? spawnDepth : 1;
   const flatDelegation = effectiveSpawnDepth === 1 || orchestratorEnabled === false;
   const contextLength = boundary.document.getIn(["model", "context_length"]);
@@ -234,12 +244,15 @@ function inspectHermesCapabilities(text, options = {}) {
     concurrency: concurrency === 20
       ? {
         status: "hard",
-        reason: "effective synchronous concurrency is configured to 20",
+        reason: sharedAsyncCap
+          ? "effective concurrency and background work share the configured cap of 20"
+          : "effective synchronous concurrency is configured to 20",
         observedSource: "delegation.max_concurrent_children",
         limit: 20,
         scope: "per-batch",
-        asyncBatchLimit: effectiveAsyncBatches,
-        potentialChildCeiling: 20 * effectiveAsyncBatches,
+        ...(sharedAsyncCap
+          ? { sharedAsyncCap: true, backgroundCap: 20, potentialChildCeiling: 20 }
+          : { asyncBatchLimit: effectiveAsyncBatches, potentialChildCeiling: 20 * effectiveAsyncBatches }),
       }
       : {
         status: "unavailable",
@@ -379,15 +392,22 @@ function planModelConfig(text, options = {}) {
   document.setIn(["delegation", "max_spawn_depth"], 1);
   document.setIn(["delegation", "orchestrator_enabled"], false);
   const plannedText = document.toString({ lineWidth: 0 });
+  const beyondVerifiedReasons = [];
+  if (classifyHostVersion(options.hostVersion).status === "beyond-verified") {
+    beyondVerifiedReasons.push(`Hermes ${request.hostVersion} is beyond the verified matrix; source and runtime markers verified, model schema written`);
+  }
+  const configVersion = document.get("_config_version");
+  if (configVersion > VERIFIED_CONFIG_VERSION) {
+    beyondVerifiedReasons.push(`config schema ${configVersion} is beyond the verified ceiling ${VERIFIED_CONFIG_VERSION}`);
+  }
   return {
     action: "write",
     backupAllowed: true,
     capabilities: inspectHermesCapabilities(plannedText, { ...options, ...route }),
     classification,
-    reason:
-      classifyHostVersion(options.hostVersion).status === "beyond-verified"
-        ? `Hermes ${request.hostVersion} is beyond the verified matrix; source and runtime markers verified, model schema written`
-        : `verified Hermes ${request.hostVersion} model schema`,
+    reason: beyondVerifiedReasons.length
+      ? beyondVerifiedReasons.join("; ")
+      : `verified Hermes ${request.hostVersion} model schema`,
     request,
     sourceHash: sourceHash(String(text || "")),
     text: plannedText,
@@ -429,6 +449,7 @@ function applyModelConfigPlan(hermesHome, plan) {
 module.exports = {
   applyModelConfigPlan,
   classifyModelConfig,
+  formatConcurrencyCapability,
   inspectHermesCapabilities,
   planModelConfig,
   revalidateModelConfigPlan,

package/src/lib/modelConfigBoundary.js

@@ -17,6 +17,7 @@ const MINIMUM_HOST_VERSION = "0.17.0";
 // malformed, which must still be reported as unsupported.
 const NOT_PROBED_HOST_VERSION = "__lithermes_dry_run_not_probed__";
 const CONFIG_VERSION = 30;
+const VERIFIED_CONFIG_VERSION = 45;
 const CREDENTIAL_KEY = /(^|[_-])(api[_-]?key|client[_-]?secret|auth[_-]?token|(?:aws[_-]?)?access[_-]?key(?:[_-]?id)?|(?:ssh[_-]?)?private[_-]?key|token|password|passphrase|secret|credential|authorization)([_-]|$)/i;
 const MAP_PATHS = ["model", "agent", "delegation", "compression"];
 const SCALAR_PATHS = [
@@ -165,8 +166,9 @@ function parseBoundary(text, options = {}) {
     return { error: "malformed host config" };
   }
   const credentialKey = findCredentialRiskKey(document);
-  if (document.get("_config_version") !== CONFIG_VERSION) {
-    return { error: `unknown host config schema; expected version ${CONFIG_VERSION}` };
+  const configVersion = document.get("_config_version");
+  if (!Number.isInteger(configVersion) || configVersion < CONFIG_VERSION) {
+    return { error: `unknown host config schema; expected integer version >= ${CONFIG_VERSION}` };
   }
   for (const key of MAP_PATHS) {
     const node = document.get(key, true);
@@ -208,6 +210,7 @@ module.exports = {
   NOT_PROBED_HOST_VERSION,
   OPENAI_PROVIDER,
   RESPONSES_MODE,
+  VERIFIED_CONFIG_VERSION,
   classifyHostVersion,
   exactHostVersion,
   parseBoundary,