WorldWriter 3a30c605b3 feat(plugins): add thread-local tool whitelist to pre_tool_call gate ...

Adds set_thread_tool_whitelist / clear_thread_tool_whitelist to
hermes_cli/plugins.py. When set on the current thread, restricts which
tools can pass through get_pre_tool_call_block_message; non-whitelisted
tools are blocked with a configurable deny message.

Mirrors the per-thread approval-callback pattern already used by
set_approval_callback (tools/terminal_tool.py:190). Used by
_spawn_background_review to deny non-memory/non-skill tools at runtime
while inheriting the parent agent's full tools schema for prefix-cache
parity (see follow-up commit).

Tests cover allow / deny / clear / cross-thread isolation.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-13 22:12:47 -07:00

..

__init__.py

chore: release v0.13.0 (2026.5.7) (#21406)

2026-05-07 09:22:48 -07:00

_parser.py

fix: add dashboard to CLI help epilogue and Docker CI smoke test

2026-05-07 06:16:23 -07:00

_subprocess_compat.py

feat(windows): close remaining POSIX-only landmines — TUI crash, kanban waitpid, AF_UNIX sandbox, /bin/bash, npm .cmd shims, cwd tracking, detach flags

2026-05-08 14:27:40 -07:00

auth_commands.py

fix(minimax): harden OAuth dashboard and runtime

2026-05-11 22:15:16 -07:00

auth.py

perf(tools): cache get_nous_auth_status() and load_env() to fix slow hermes tools menus (#25341)

2026-05-13 18:40:14 -07:00

azure_detect.py

chore: remove unused imports and dead locals (ruff F401, F841) (#17010)

2026-04-28 06:46:45 -07:00

backup.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

banner.py

feat(codex-runtime): optional codex app-server runtime for OpenAI/Codex models (#24182)

2026-05-13 17:18:15 -07:00

browser_connect.py

fix(browser): address Copilot review on /browser connect

2026-04-28 22:11:10 -07:00

callbacks.py

fix: ESC cancels secret/sudo prompts, clearer skip messaging (#9902)

2026-04-14 16:11:37 -07:00

checkpoints.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

claw.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

cli_output.py

refactor: remove dead code — 1,784 lines across 77 files (#9180)

2026-04-13 16:32:04 -07:00

clipboard.py

feat: fix img pasting in new ink plus newline after tools

2026-04-11 13:14:32 -05:00

codex_models.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

codex_runtime_plugin_migration.py

feat(codex-runtime): optional codex app-server runtime for OpenAI/Codex models (#24182)

2026-05-13 17:18:15 -07:00

codex_runtime_switch.py

feat(codex-runtime): optional codex app-server runtime for OpenAI/Codex models (#24182)

2026-05-13 17:18:15 -07:00

colors.py

…

commands.py

feat(codex-runtime): optional codex app-server runtime for OpenAI/Codex models (#24182)

2026-05-13 17:18:15 -07:00

completion.py

test(cli): strengthen zsh completion regression coverage

2026-05-13 09:34:15 -07:00

config.py

perf(tools): cache get_nous_auth_status() and load_env() to fix slow hermes tools menus (#25341)

2026-05-13 18:40:14 -07:00

copilot_auth.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

cron.py

feat(cron): add no_agent mode for script-only cron jobs (watchdog pattern) (#19709)

2026-05-04 12:31:01 -07:00

curator.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

curses_ui.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

debug.py

fix(debug): redact log content at upload time in hermes debug share

2026-05-03 11:42:20 -07:00

default_soul.py

…

dingtalk_auth.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

doctor.py

fix(doctor): skip /models health check for providers that don't support it

2026-05-12 17:12:25 -07:00

dump.py

refactor(env): use shared Hermes dotenv loader

2026-05-05 10:13:13 -07:00

env_loader.py

feat(cross-platform): psutil for PID/process management + Windows footgun checker

2026-05-08 14:27:40 -07:00

fallback_cmd.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

gateway_windows.py

fix(gateway): preserve Ctrl+C for Windows foreground runs

2026-05-09 14:34:18 -07:00

gateway.py

fix(gateway): reduce systemd restart delay

2026-05-12 17:11:25 -07:00

goals.py

feat(nous): unified client=hermes-client-v<version> tag on every Portal request (#24779)

2026-05-12 20:49:20 -07:00

hooks.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

kanban_db.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

kanban_diagnostics.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

kanban_specify.py

feat(nous): unified client=hermes-client-v<version> tag on every Portal request (#24779)

2026-05-12 20:49:20 -07:00

kanban.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

logs.py

feat: component-separated logging with session context and filtering (#7991)

2026-04-11 17:23:36 -07:00

main.py

feat(custom): prompt and persist explicit api_mode for custom providers

2026-05-13 13:21:33 -07:00

mcp_config.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

memory_setup.py

fix(security): reduce unnecessary shell=True in subprocess calls

2026-05-13 10:31:22 -07:00

model_catalog.py

codebase: add encoding='utf-8' to all bare open() calls (PLW1514)

2026-05-08 14:27:40 -07:00

model_normalize.py

fix(opencode-go): keep users on opencode-go instead of hijacking to native providers (#20802)

2026-05-06 09:08:33 -07:00

model_switch.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

models.py

feat(providers): rename Alibaba Cloud to Qwen Cloud, reorder picker (#24835)

2026-05-12 22:43:41 -07:00

nous_subscription.py

feat(web): add SearXNG as a native search-only backend

2026-05-06 10:05:29 -07:00

oneshot.py

fix: make session search initialize session db

2026-05-09 14:36:58 -07:00

pairing.py

fix(pairing): enforce lockout on approve_code, not just generate_code (#10195) (#21325)

2026-05-07 07:18:21 -07:00

platforms.py

feat: complete plugin platform parity — all 12 integration points

2026-04-29 21:56:51 -07:00

plugins_cmd.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

plugins.py

feat(plugins): add thread-local tool whitelist to pre_tool_call gate

2026-05-13 22:12:47 -07:00

profile_distribution.py

feat(profile): shareable profile distributions via git (#20831)

2026-05-08 10:04:32 -07:00

profiles.py

refactor(profiles): remove dead generate_bash_completion / generate_zsh_completion

2026-05-13 09:34:15 -07:00

providers.py

fix: prevent bare 'custom' slug in model.provider (#17478)

2026-04-30 04:32:11 -07:00

pt_input_extras.py

fix(cli): make Ctrl+Enter insert newline on WSL/SSH/Windows Terminal (#22777)

2026-05-09 12:48:14 -07:00

pty_bridge.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

relaunch.py

fix(windows): prefer npm.cmd over npm.ps1, skip .py argv0 in relaunch

2026-05-08 14:27:40 -07:00

runtime_provider.py

feat(codex-runtime): optional codex app-server runtime for OpenAI/Codex models (#24182)

2026-05-13 17:18:15 -07:00

security_advisories.py

feat(security): supply-chain advisory checker + lazy-install framework + tiered install fallback (#24220)

2026-05-12 01:02:25 -07:00

setup.py

feat(video_gen): unified video_generate tool with pluggable provider backends (#25126)

2026-05-13 16:39:41 -07:00

skills_config.py

refactor(config): migrate remaining 33 cfg_get call sites (#17311)

2026-04-29 04:03:03 -07:00

skills_hub.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

skin_engine.py

fix(tui): honor skin highlight colors (#20895)

2026-05-06 14:01:56 -07:00

slack_cli.py

fix(slack): enable writable app home DMs in manifest

2026-05-08 17:01:12 -07:00

status.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

stdio.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

timeouts.py

refactor(timeouts): drop redundant ImportError in except clause

2026-04-26 20:48:20 -07:00

tips.py

feat: Ctrl+Enter inserts newline on Windows Terminal

2026-05-08 14:27:40 -07:00

tools_config.py

fix(tools-config): write video_gen.provider on Reconfigure tool path (#25307)

2026-05-13 17:31:54 -07:00

uninstall.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00

vercel_auth.py

feat: add Vercel Sandbox backend

2026-04-29 07:22:33 -07:00

voice.py

fix(tui): restore voice push-to-talk parity (#20897)

2026-05-06 15:49:59 -07:00

web_server.py

fix(dashboard): rescan plugins when cached directory is removed

2026-05-12 16:41:33 -07:00

webhook.py

chore: ruff auto-fix PLR6201 — tuple → set in membership tests (#23937)

2026-05-11 11:13:25 -07:00