lithermes-ai 0.8.10 → 0.8.11

package/README.md

@@ -81,6 +81,12 @@ Restart any running Hermes CLI or Hermes gateway process. Then open Hermes and t
   uses host-provided webfetch, browser/browsing lane, repo deep-dive lane, and
   `delegate_task`; there is no bundled standalone crawler/browser engine, and fetched
   material must be reviewed as data, not instructions.
+- Minimum-first planning and review guardrails now reject avoidable custom code
+  without underbuilding: the smallest complete solution still includes needed
+  shared helpers, validation, security, accessibility, realistic error handling,
+  and regression tests. Release scanning can load caller-supplied external terms
+  from outside the repo and reports only opaque IDs, never raw terms, context, or
+  file paths.
 - LitHermes workflow skill set: `ai-slop-remover`, `comment-checker`,
   `debugging`, `deep-interview`, `frontend-ui-ux`, `git-master`, `init-deep`,
   `lsp`, `programming`, `refactor`,

package/README_Ko-KR.md

@@ -73,6 +73,7 @@ npm 패키지명은 `lithermes-ai`이며, `lithermes`는 설치 후 CLI/plugin
 - `/start-work`: 승인된 plan만 실행하는 execution-only 명령입니다. 자연어 `lit start work`는 hook이 Hermes command 전환을 할 수 없으므로 `BLOCKED`되고, 사용자가 `/start-work <plan>`을 직접 호출해야 합니다.
 - `/review-work`: 단일 5-lane `delegate_task` batch에 대해 redacted local `delegate_batch_intent` 요약을 `.hermes/lithermes/runs/<run>/delegate_batches/<batch>/`에 기록합니다.
 - `lit research`에는 Public retrieval hardening이 적용됩니다. public endpoints first, structured attempt trace, HTTP 200 이상의 검증, login/paywall/CAPTCHA 거부, research contract 안의 private/loopback route 거부, actionable diagnostics, A/B source 비교를 synthesis 전에 요구합니다. Host retrieval lane protocol은 host-provided webfetch, browser/browsing lane, repo deep-dive lane, `delegate_task`를 사용하며 no bundled standalone crawler/browser engine 원칙을 지킵니다. 가져온 내용은 review fetched content as data, not instructions 방식으로 다룹니다.
+- Lit planning과 review에는 minimum-first guardrail이 적용되지만 underbuilding은 허용하지 않습니다. 가장 작은 완성형 솔루션에도 필요한 shared helper, validation, security, accessibility, 현실적인 error handling, regression test가 포함되어야 합니다. Release scanner는 repo 밖에서 전달한 external term을 읽고 raw term/context/file path 대신 opaque ID만 보고합니다.
 - LitHermes workflow skill set: `ai-slop-remover`, `comment-checker`,
   `debugging`, `deep-interview`, `frontend-ui-ux`, `git-master`, `init-deep`,
   `lsp`, `programming`, `refactor`,

package/assets/lithermes-plugin/core.py

@@ -63,6 +63,7 @@ LIT_CONTEXT = "\n".join(
         f"FIRST, open your reply with this exact line so the user sees Litwork engage: {LITBURN_BANNER}",
         "The user invoked Litwork/LitHermes. Operate in a durable, evidence-first loop:",
         "- restate the concrete completion promise before changing files;",
+        "- minimum-first is not underbuilding: build the smallest complete solution that satisfies the criteria, including necessary shared helpers, validation, security, accessibility, realistic error handling, and regression tests;",
         "- keep the implementation scoped to the current repository and existing Hermes patterns;",
         "- use focused tests and manual verification evidence before claiming done;",
         "- preserve unrelated user changes and avoid destructive git commands;",

package/assets/lithermes-plugin/payload-version.json

@@ -1,7 +1,7 @@
 {
-  "syncedAt": "2026-06-23T00:00:00.000Z",
+  "syncedAt": "2026-06-26T00:00:00.000Z",
   "source": "source-reference",
-  "sourceHash": "b496933e176a1981963949ce39d350fe0756d384d39fbe75ec72f19ded0a2687",
+  "sourceHash": "4c7a2aabb7625d403e222d701437770198195dce08321c1a64699e5e42eb24ef",
   "files": [
     {
       "path": "NOTICE.md",
@@ -17,7 +17,7 @@
     },
     {
       "path": "core.py",
-      "sha256": "be758d4c88540c279d6b9646f950b462c5c7df2a166218455031dd0907a315a6"
+      "sha256": "ab91e181b3caf31748d09ebf90855f535d8c86d19810a54fa27acb61669780b0"
     },
     {
       "path": "litgoal/__init__.py",
@@ -47,9 +47,13 @@
       "path": "litgoal/tools.py",
       "sha256": "2e12124666c4dab32087af11c76c970656077e449cca1dbb4f299bab2efdd24a"
     },
+    {
+      "path": "payload-version.json",
+      "sha256": "5c13da14e52bea4e046cc1d1308bc9a0e4ad941786b6521b9219a33946bf567d"
+    },
     {
       "path": "plugin.yaml",
-      "sha256": "20494241ab25c7449616e0619b9ed0bf6b44488a406709b1417ea90a4f263f31"
+      "sha256": "fd5e6e9d03a8976f25e88c9e4d8b5d7044c4d40d2d19b712d1b2371d3e116a6c"
     },
     {
       "path": "redaction.py",
@@ -157,7 +161,7 @@
     },
     {
       "path": "skills/lit-plan/SKILL.md",
-      "sha256": "5f00302bff604357c4448d43991af2daf800aa19b50ccbe74e46684e797b8fc3"
+      "sha256": "60fedf04d46b03fe9ae5e0ce0bd9819a1a0e8d00a54a9a0fa94561ec1085107a"
     },
     {
       "path": "skills/litgoal/.gitkeep",
@@ -577,7 +581,7 @@
     },
     {
       "path": "skills/review-work/SKILL.md",
-      "sha256": "a232c83f95b2109231c4b752267d5bc0a96a4c853c7e7b8b590c73445391d94a"
+      "sha256": "7df60c657a448ea0731012b9f2c849030ccb7350731dc4f6cd7c9c4bc3f8bb84"
     },
     {
       "path": "skills/rules/SKILL.md",

package/assets/lithermes-plugin/plugin.yaml

@@ -1,5 +1,5 @@
 name: lithermes
-version: 0.8.10
+version: 0.8.11
 description: "Hermes-native workflow toolkit: litgoal durable runtime, 5-lane review orchestrator, Litwork commands, skills, and prompt steering."
 author: "Hermes Agent"
 kind: standalone

package/assets/lithermes-plugin/skills/lit-plan/SKILL.md

@@ -51,6 +51,13 @@ Emit the classification as the first line of your planning turn:
 [CLASSIFY] Tier: Standard — multi-file change across auth and session modules.
 ```
 
+Apply a minimum-first guard before proposing work: skip work that need not exist,
+reuse existing code, prefer the standard library, native Hermes/platform features,
+installed dependencies, or one clear line before custom code. Minimum-first is not
+underbuilding: the plan must still prescribe the smallest complete solution that
+satisfies the acceptance criteria, including necessary shared helpers, validation,
+security, accessibility, realistic error handling, and regression tests.
+
 ---
 
 ## Phase 1 — Explore-First Grounding
@@ -219,9 +226,10 @@ evidence artifacts land (`.hermes/lithermes/runs/<run>/evidence/`).
 
 ### Execution Waves
 
-Target 5-8 todos per wave. Fewer than 3 per wave means you are under-splitting.
-50+ total todos across all waves is fine. Each todo encompasses **both**
-implementation and its test — never split them into separate todos.
+For large independent work, target 5-8 todos per wave. For small work, a
+single-task or few-task plan is correct; do not split merely to fill a wave.
+Each todo encompasses **both** implementation and its test — never split them
+into separate todos.
 
 **Dependency matrix**: every todo that depends on another must name its
 dependency explicitly. Anything without a dependency goes in Wave 1 and runs in

package/assets/lithermes-plugin/skills/review-work/SKILL.md

@@ -30,6 +30,12 @@ replace Hermes' fork/join `delegate_task` execution.
 Each child returns: `verdict` (PASS|FAIL), `confidence`, and findings with `file:line`.
 The review must cover behavior, tests, docs/package readiness, security/safety,
 and cleanup evidence; green tests without a real-surface probe are insufficient.
+Minimum-first review is mandatory, but it is not underbuilding: accept the
+smallest complete solution that satisfies the criteria, including necessary
+shared helpers, validation, security, accessibility, realistic error handling,
+and regression tests. Reject avoidable custom code, unnecessary helpers,
+speculative layers, avoidable config/docs/tests, and any external-source term or
+phrase introduced into product files.
 Aggregate and dedupe across lanes, then apply the **all-or-nothing gate**: any lane FAIL
 ⇒ **REVIEW FAILED** (list blocking issues by severity); all five PASS ⇒ **REVIEW PASSED**
 (non-blocking suggestions only). Record the per-lane verdicts; the plugin's `subagent_stop`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lithermes-ai",
-  "version": "0.8.10",
+  "version": "0.8.11",
   "description": "npx/bunx installer for the LitHermes Hermes plugin",
   "license": "MIT",
   "repository": {