feat(delegation): add operator-controlled capability lanes

hermes_cli/config.py

@@ -2460,6 +2460,11 @@ def _ensure_hermes_home_managed(home: Path):
                                      # (floor 30s) to enforce a hard cap.
         "reasoning_effort": "",  # subagent effort: "ultra", "max", "xhigh", "high",
                                  # "medium", "low", "minimal", "none" (empty = inherit)
+        # Operator-approved per-task capability lanes. The model can request only
+        # explore/engineer/review; each configured entry must contain provider,
+        # model, and reasoning_effort. Raw credentials and transport overrides
+        # are intentionally rejected from lane entries.
+        "lanes": {},
         "max_concurrent_children": 3,  # unified concurrency cap: max parallel children per batch
                                        # AND max concurrent background (background=true)
                                        # delegation units. New async dispatches beyond the cap

run_agent.py

@@ -6899,6 +6899,7 @@ def _dispatch_delegate_task(self, function_args: dict) -> str:
             role=function_args.get("role"),
             background=(not _is_subagent),
             parent_agent=self,
+            lane=function_args.get("lane"),
         )
 
     def _invoke_tool(self, function_name: str, function_args: dict, effective_task_id: str,