Hermes Agent
e3a0ee87b3
An undocumented tool is, from inside an agent session, indistinguishable from a tool that was never written. The framework shipped 26 git wrappers and named 6 of them in its resident index docs — 23% discoverability, with pr-review.sh among the missing. The observable consequence was an agent obeying Constitution gate 7 as best it could see it, reaching for raw curl, sending GitHub's APPROVE to a Gitea host, and getting HTTP 200 with the review silently filed PENDING. Three times. That is not a discipline failure and no amount of prose fixes it. Four changes, each converting a rule that decayed into a mechanism that cannot: - check-tools-index.sh (new, CI-blocking): every tool in an enforced suite must be named in a resident index doc, and every tool an index names must exist. The git suite is enforced now; other suites report coverage without failing, so the ratchet tightens one reviewed PR at a time instead of landing as one sweep. The enforced list is framework-owned rather than a marker inside operator-owned TOOLS.md — a doc marker would let an operator silence the gate on exactly the host where it matters most. Carries --self-test, because a checker that only ever passes is indistinguishable from one that is not running. - TOOLS-REFERENCE.md: complete 28-entry git index, plus the APPROVED/APPROVE dialect note that explains why pr-review.sh is not a formality. - mosaic-worktree.sh + wrapper-guard.sh (upstreamed): the rule "big work goes on a work filesystem" already existed in prose, and 255 GB accumulated in $HOME across 842 directories anyway, under five simultaneous placement conventions on one host. The helper therefore exposes no placement decision — given a branch name, every path is derived from `git worktree list --porcelain`. Worktrees rather than clones because enumerability is the only thing that makes reclaim safe, and reclaim is by evidence (clean tree + no unpushed commits), never by size or age. The guard blocks three mechanically-detectable mistakes and nothing else: a checkout into $HOME, a raw provider-API write to an endpoint that has a wrapper, and the literal APPROVE event. Reads pass untouched. - STANDARDS.md: model tiering as a standard, named by capability class so it survives a model generation. Start cheapest, escalate on evidence, benchmark before demoting a task class, and keep the class->model binding in operator config with the DB-backed config service as the end state. Registering the guard in runtime/claude/settings.json is the point of upstreaming it: ~/.claude/settings.json is a framework-managed copy, so a hand-added hook there is destroyed by the next upgrade. In the template it survives, and it reaches every host instead of one.
318 lines
6.1 KiB
JSON
318 lines
6.1 KiB
JSON
{
|
|
"model": "opus",
|
|
"hooks": {
|
|
"PreCompact": [
|
|
{
|
|
"matcher": ".*",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "python3 \"$HOME/.config/mosaic/tools/lease-broker/revoke-lease.py\" --runtime claude --reason pre-compact"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"SessionStart": [
|
|
{
|
|
"matcher": "compact",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "python3 \"$HOME/.config/mosaic/tools/lease-broker/revoke-lease.py\" --runtime claude --reason session-start-compact"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"matcher": "resume|clear",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "python3 \"$HOME/.config/mosaic/tools/lease-broker/revoke-lease.py\" --runtime claude --reason session-start-rollover --bump-generation"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"PreToolUse": [
|
|
{
|
|
"matcher": ".*",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "python3 ~/.config/mosaic/tools/lease-broker/mutator-gate.py --runtime claude --recovery-command ~/.config/mosaic/tools/lease-broker/recover-context.py",
|
|
"timeout": 3
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"matcher": "Write|Edit|MultiEdit",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "~/.config/mosaic/tools/qa/prevent-memory-write.sh",
|
|
"timeout": 10
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"matcher": "Bash",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "~/.config/mosaic/tools/git/wrapper-guard.sh",
|
|
"timeout": 10
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"PostToolUse": [
|
|
{
|
|
"matcher": "Edit|MultiEdit|Write",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "~/.config/mosaic/tools/qa/qa-hook-stdin.sh",
|
|
"timeout": 60
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"matcher": "Edit|MultiEdit|Write",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "~/.config/mosaic/tools/qa/typecheck-hook.sh",
|
|
"timeout": 30
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"Stop": [
|
|
{
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "python3 ~/.config/mosaic/tools/lease-broker/receipt-observer-client.py --runtime claude --latest-entry",
|
|
"timeout": 3
|
|
},
|
|
{
|
|
"type": "command",
|
|
"command": "~/.config/mosaic/tools/qa/reflect-stop-hook.sh",
|
|
"timeout": 15
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"enabledPlugins": {
|
|
"frontend-design@claude-plugins-official": true,
|
|
"feature-dev@claude-plugins-official": true,
|
|
"code-review@claude-plugins-official": true,
|
|
"pr-review-toolkit@claude-plugins-official": true
|
|
},
|
|
"skipDangerousModePermissionPrompt": true,
|
|
"allowedCommands": [
|
|
"npm",
|
|
"npm install",
|
|
"npm run",
|
|
"npm test",
|
|
"npm build",
|
|
"npm start",
|
|
"npm run dev",
|
|
"npm run build",
|
|
"npm run lint",
|
|
"npm run typecheck",
|
|
"npm run test:ci",
|
|
"npm run test:e2e",
|
|
"npm run test:unit",
|
|
"npm run test:integration",
|
|
"npm run test:cov",
|
|
"npm run test:security",
|
|
"npm run security:scan",
|
|
"npm run security:audit",
|
|
"npm run performance:benchmark",
|
|
"npm run build:dev",
|
|
"npm run build:prod",
|
|
"npm run test",
|
|
"npm run test:watch",
|
|
"npm run migrate",
|
|
"npm run migrate:rollback",
|
|
"npm run db:seed",
|
|
"npm run db:reset",
|
|
"node",
|
|
"yarn",
|
|
"pnpm",
|
|
"npx",
|
|
"npx tsc",
|
|
"npx eslint",
|
|
"npx prettier",
|
|
"npx jest",
|
|
"npx vitest",
|
|
"git",
|
|
"git add",
|
|
"git commit",
|
|
"git push",
|
|
"git pull",
|
|
"git status",
|
|
"git diff",
|
|
"git log",
|
|
"git branch",
|
|
"git checkout",
|
|
"git merge",
|
|
"git init",
|
|
"git remote",
|
|
"git fetch",
|
|
"git reset",
|
|
"git rebase",
|
|
"git stash",
|
|
"git tag",
|
|
"git show",
|
|
"git config",
|
|
"gh",
|
|
"gh issue",
|
|
"gh pr",
|
|
"gh repo",
|
|
"gh api",
|
|
"docker",
|
|
"docker build",
|
|
"docker run",
|
|
"docker ps",
|
|
"docker logs",
|
|
"docker exec",
|
|
"docker stop",
|
|
"docker start",
|
|
"docker pull",
|
|
"docker push",
|
|
"docker-compose",
|
|
"docker-compose up",
|
|
"docker-compose down",
|
|
"docker-compose build",
|
|
"docker-compose logs",
|
|
"docker-compose ps",
|
|
"docker-compose exec",
|
|
"kubectl",
|
|
"kubectl get",
|
|
"kubectl describe",
|
|
"kubectl logs",
|
|
"kubectl apply",
|
|
"kubectl delete",
|
|
"kubectl port-forward",
|
|
"mkdir",
|
|
"touch",
|
|
"chmod",
|
|
"chown",
|
|
"ls",
|
|
"cd",
|
|
"pwd",
|
|
"cp",
|
|
"mv",
|
|
"rm",
|
|
"cat",
|
|
"echo",
|
|
"head",
|
|
"tail",
|
|
"grep",
|
|
"grep -E",
|
|
"grep -r",
|
|
"find",
|
|
"find -name",
|
|
"find -type",
|
|
"find -path",
|
|
"find -exec",
|
|
"find . -type f",
|
|
"find . -type d",
|
|
"wc",
|
|
"sort",
|
|
"uniq",
|
|
"curl",
|
|
"wget",
|
|
"ping",
|
|
"netstat",
|
|
"ss",
|
|
"lsof",
|
|
"psql",
|
|
"pg_dump",
|
|
"pg_restore",
|
|
"sqlite3",
|
|
"jest",
|
|
"vitest",
|
|
"playwright",
|
|
"cypress",
|
|
"artillery",
|
|
"lighthouse",
|
|
"tsc",
|
|
"eslint",
|
|
"prettier",
|
|
"snyk",
|
|
"semgrep",
|
|
"tar",
|
|
"gzip",
|
|
"unzip",
|
|
"zip",
|
|
"which",
|
|
"whoami",
|
|
"id",
|
|
"env",
|
|
"export",
|
|
"source",
|
|
"sleep",
|
|
"date",
|
|
"uptime",
|
|
"df",
|
|
"du",
|
|
"free",
|
|
"top",
|
|
"htop",
|
|
"ps",
|
|
"tree",
|
|
"jq",
|
|
"sed",
|
|
"awk",
|
|
"xargs",
|
|
"tee",
|
|
"test",
|
|
"true",
|
|
"false",
|
|
"basename",
|
|
"dirname",
|
|
"realpath",
|
|
"readlink",
|
|
"stat",
|
|
"file",
|
|
"make",
|
|
"cmake",
|
|
"gcc",
|
|
"g++",
|
|
"clang",
|
|
"python",
|
|
"python3",
|
|
"pip",
|
|
"pip3",
|
|
"pip install",
|
|
"poetry",
|
|
"pipenv",
|
|
"go",
|
|
"go build",
|
|
"go test",
|
|
"go run",
|
|
"go mod",
|
|
"cargo",
|
|
"rustc",
|
|
"ruby",
|
|
"gem",
|
|
"bundle",
|
|
"rake",
|
|
"java",
|
|
"javac",
|
|
"mvn",
|
|
"gradle",
|
|
"dotnet",
|
|
"msbuild",
|
|
"php",
|
|
"composer",
|
|
"perl",
|
|
"cpan",
|
|
"nohup"
|
|
],
|
|
"enableAllMcpTools": true
|
|
}
|