All plugins

sharewise

See what your photos and videos reveal before you share them. Reports, as yes/no counts only, exact location, location detail, time, device, unique IDs, owner name, captions, hidden thumbnails, edit history, depth maps and (videos) per-frame face data; on macOS finds faces, people, street names, house numbers and plates with Apple Vision on this computer; a local review page lets the user switch areas off, draw, move, resize, rotate and reshape them; hidden areas are rebuilt from their surroundings (faces) or become a blank plate in the sign's colour, so nothing of what was there is kept; copies drop all metadata except copyright and are re-read and verified. Videos (MOV, MP4, M4V, 3GP) are cleaned without re-encoding: metadata boxes, timed-metadata tracks and unreferenced media bytes are zeroed in a copy and the whole file is scanned; faces inside videos are not hidden. Disclosure — reads JPEG, HEIC, PNG, WebP and the video types above only in a folder the user names inside the home folder or on an external drive; refuses the operating system, disk roots, the whole home folder, ~/Library, hidden and locked items, symlinks and app-managed libraries. Writes only new copies to a Sharewise/ folder inside that folder and never writes or overwrites originals. sharewise_share takes check ids, photo numbers, fixed keep choices, the user's selection codes and areas to add (never file paths), is validated by its own pre_tool_call hook, and keeping location is escalated to Hermes' human-approval gate (fails closed with no human present). The agent can add areas but cannot switch them off; switching off comes from the review page's selection code (a design rule, not a cryptographic barrier). Stores the last 10 checks (paths, yes/no findings, area boxes), review pages with downsized photos and downsized finished copies in its plugin data folder; never stores metadata values or text read in photos. Sends to the model provider, as part of the conversation, the folder, file names and yes/no and area counts, and, only when the user asks for a visual check (sharewise_look), downsized finished copies that are already hidden and clean. Apple Vision runs on-device via pyobjc-framework-Vision (macOS only; elsewhere detection is off and areas can be drawn by hand). No network calls, model calls, shell commands or telemetry; no process-wide settings changed.

ardianreffaToolsv0.1.6Updated 1 hour ago

About

See what your photos and videos reveal before you share them. Reports, as yes/no counts only, exact location, location detail, time, device, unique IDs, owner name, captions, hidden thumbnails, edit history, depth maps and (videos) per-frame face data; on macOS finds faces, people, street names, house numbers and plates with Apple Vision on this computer; a local review page lets the user switch areas off, draw, move, resize, rotate and reshape them; hidden areas are rebuilt from their surroundings (faces) or become a blank plate in the sign's colour, so nothing of what was there is kept; copies drop all metadata except copyright and are re-read and verified. Videos (MOV, MP4, M4V, 3GP) are cleaned without re-encoding: metadata boxes, timed-metadata tracks and unreferenced media bytes are zeroed in a copy and the whole file is scanned; faces inside videos are not hidden. Disclosure — reads JPEG, HEIC, PNG, WebP and the video types above only in a folder the user names inside the home folder or on an external drive; refuses the operating system, disk roots, the whole home folder, ~/Library, hidden and locked items, symlinks and app-managed libraries. Writes only new copies to a Sharewise/ folder inside that folder and never writes or overwrites originals. sharewise_share takes check ids, photo numbers, fixed keep choices, the user's selection codes and areas to add (never file paths), is validated by its own pre_tool_call hook, and keeping location is escalated to Hermes' human-approval gate (fails closed with no human present). The agent can add areas but cannot switch them off; switching off comes from the review page's selection code (a design rule, not a cryptographic barrier). Stores the last 10 checks (paths, yes/no findings, area boxes), review pages with downsized photos and downsized finished copies in its plugin data folder; never stores metadata values or text read in photos. Sends to the model provider, as part of the conversation, the folder, file names and yes/no and area counts, and, only when the user asks for a visual check (sharewise_look), downsized finished copies that are already hidden and clean. Apple Vision runs on-device via pyobjc-framework-Vision (macOS only; elsewhere detection is off and areas can be drawn by hand). No network calls, model calls, shell commands or telemetry; no process-wide settings changed.

Sharewise

Sharewise: see what your photos reveal, hide what matters, share clean copies

See what your photos and videos reveal before you share them. A photo or video from a phone usually carries the exact place it was
taken (often to a few metres, with altitude and the direction you faced), the exact time, the phone model, unique
IDs, sometimes a hidden thumbnail of the original and a depth map. Sharewise tells you, in plain words, without ever
reading those values out; it finds the faces of strangers, street names, house numbers and licence plates; you
decide what to hide; it hides them for good and gives you verified clean copies. Originals are never changed.

You:     I want to post the Singapore photos in ~/Pictures/Singapore. Are they safe?
Hermes:  Checked exactly ~/Pictures/Singapore: 5 photos. All 5 store the exact place they were taken, the exact
         time, the phone model and unique IDs; 3 also hide a thumbnail of the original and a depth map.
         Want me to look for faces and street signs? You'll get a page to review each photo.
You:     Yes. [opens the page, switches off their own face, draws one more area, copies the code]
You:     SW1.3f9a1c2e.3.1,2.050495075050.h6n
Hermes:  Made 5 copies in ~/Pictures/Singapore/Sharewise: 9 areas hidden, every copy verified with no location,
         no hidden thumbnails, no IDs. Share those, not the originals.

How it works

  1. Check one folder you name. You get yes/no counts: location, location detail, time, device, unique IDs,
    owner name, captions, hidden thumbnails, editing history, depth maps. Videos (MOV, MP4, M4V, 3GP) are checked for
    location, dates and device.
  2. Review (macOS): Apple's Vision framework, on this computer, finds faces (on the whole photo and again on
    overlapping high-resolution tiles, so small faces in a crowd are found too) and text that can locate someone:
    street names, house or unit numbers, licence plates. People with no face found (often facing away) and other text
    (slides, shop signs) are proposed switched off. A local review page shows each photo before and after; click an
    area to switch it off or on, drag to add your own, and copy the selection code back to Hermes.
  3. Share: copies go to a Sharewise/ folder next to the photos. Every copy is re-read and verified. Video copies
    are not re-encoded: picture and sound samples stay byte-identical and the file keeps its size. Inside the copy,
    Sharewise blanks the movie and track metadata (location, accuracy, dates, make, model, software, lens, maker
    notes), drops timed-metadata tracks (iPhone Live Photo videos record per-frame face positions and IDs there),
    zeroes every byte of the media area that no picture or sound track uses (some phones leave a stray copy of the
    header there, location included), zeroes padding boxes (which can hold an old header), and sets header dates to
    zero. The finished copy is then scanned byte by byte, not just box by box. If a video's structure is unusual
    (sample tables unreadable, or more than 3% of the media area unreferenced), it is refused rather than risked.
  4. Visual second look (optional): Hermes can look at the finished copies, never the originals, for anything
    detection missed.

Hidden for good

Blur and pixelation keep a transformed copy of what was there and can sometimes be reversed or recognised.
Faces (ovals): Sharewise never looks at the pixels inside the oval when it fills it: they are discarded first, and the
patch is rebuilt only from the surroundings (weighted towards visible skin on the neck and ears, so it blends in), with
fresh random grain. The tests prove it: changing what was inside an oval does not change a single output pixel.
Signs, plates and house numbers (rectangles, rotated to follow the sign): the area becomes one flat colour, the sign's
own plate colour, with fresh grain, so the sign stays a sign with nothing written on it. Writing lives in the strokes,
not in the plate colour; the tests check that no fine detail is left. On the review page every area can be moved,
resized, rotated and switched between oval and rectangle.
The copy also drops hidden thumbnails and depth maps, which often still contain the original face.

Walls (enforced in code and tested)

  • No values ever leave Sharewise: no coordinates, times, devices, IDs, names, comments, and no words read in a
    photo: not in answers to Hermes, not in its reports, not in its database. Only yes/no and area categories.
  • Remove-only: Sharewise never adds or edits metadata. Copyright and licence notices are kept.
  • Originals are never written: copies are created new, never overwriting anything; plain JPEG cleaning is lossless.
  • Verified copies: a copy that still reveals something you did not choose to keep is deleted and reported.
    Videos are checked with a whole-file scan as well, because metadata can hide outside the official boxes.
  • Location is removed by default; keeping it shows Hermes' approval prompt.
  • The agent passes check ids, photo numbers and fixed choices only, never file paths. It may add areas to
    hide; it can never switch one off. Switching off comes from the review page's selection code. (This is a design
    rule against mistakes, not a cryptographic barrier against an agent that can read files.)
  • Allowed places only: folders inside your home folder or on external drives; the operating system, app data,
    hidden, locked and library folders are refused before anything is read.
  • Not a tracking tool: because no location or text is ever revealed, Sharewise cannot be used to find out where
    someone else's photo was taken.

Privacy and disclosure

  • Reads photos (JPEG, HEIC/HEIF, PNG, WebP) and videos (MOV, MP4, M4V, 3GP) in the folder you name, within the
    allowed places.
  • Writes only a Sharewise/ folder inside that folder, with new copies (-clean or -shared names). Replacing
    happens only for copies the same check made earlier.
  • Stores in Hermes' plugin data folder: the last 10 checks (file paths, yes/no findings, area boxes), review pages
    with downsized photos, and downsized finished copies for the visual check. No metadata values, no text from photos.
  • Sent to your model provider as part of the conversation: the folder, photo names, yes/no counts and area counts;
    with sharewise_look, downsized finished copies (already hidden and clean), only when you ask for a visual check.
  • Detection runs on-device with Apple Vision (macOS, pyobjc-framework-Vision). On Linux and Windows it is not
    available: checking, drawing areas by hand and clean copies still work.
  • No network calls, model calls, shell commands, background processes or telemetry. No process-wide settings changed.

Limitations

  • Detection is not perfect: it can miss small, turned or covered faces and blurry text, and can mark things that are
    not faces. Always look at the review page.
  • Hiding a face does not make a person anonymous to someone who knows them (clothes, hair, posture, place).
  • HEIC is converted to JPEG for sharing; photos with hidden areas are re-encoded (JPEG quality 92).
  • Faces and signs inside videos are not hidden: videos get metadata cleaning only. Keep options (time, device,
    location) apply to photos; video copies always drop all of them.
  • RAW files, TIFF and other video containers (AVI, MKV, WebM) are not cleaned (they can carry location too);
    Sharewise lists them as not checked.

Tools

| Tool | What it does | Changes files? |
|---|---|---|
| sharewise_check | Yes/no report of what the photos and videos in one folder reveal | No |
| sharewise_review | Detects areas; builds a before/after review page per photo | No (pages in its data folder) |
| sharewise_share | Hides the chosen areas, removes metadata, verifies, saves copies to Sharewise/ | New copies only |
| sharewise_look | Downsized finished copies for Hermes' visual check | No |

Development

python -m pytest
hermes plugins validate . --install-deps
hermes plugins doctor . --ci

License

MIT

README from the reviewed commit dd82698; it updates when the author re-pins.

More by ardianreffa

3 plugins by ardianreffa in the catalog.

ardianreffapickwise-photosA correction tool, not an art critic: culls a folder of photos locally. Flags blurry and unrecoverable shots, labels what an edit could rescue, keeps the best frame of every burst and explains every decision. Follows a brief in your own words ("concert, dark is fine, best 30", "moody low-key shots") and learns gradually from your corrections. Treats RAW+JPEG pairs as one photo, handles folders of thousands of photos in resumable steps, and reads JPEG, HEIC and camera or iPhone RAW (DNG, ARW, CR3, NEF and more) through their embedded previews, using only Pillow and pillow-heif. On request it makes local previews so Hermes can take a visual second look for closed eyes, a blurred subject or clear composition mistakes. Disclosure — reads image files in the folder you name (any folder the agent can reach; symlinks and hidden files skipped); writes only a Pickwise/ subfolder inside that folder (copy or reversible move) or .xmp rating sidecars that never replace existing ones; never deletes, overwrites or edits photos. The dry-run-then-confirm step is a tool argument the agent sets, not a Hermes approval prompt. Stores per-photo measurements, reports, learned preferences and (only when asked) downsized previews in its plugin data folder; no network calls, model calls, shell commands or telemetry. A visual check sends the chosen previews to the model provider through Hermes' own vision tool. Raises Pillow's image-size limit to 300 MP for the whole Hermes process.CommunitytoolsardianreffaspacewiseFree up space without the fear of losing what matters. Scans one folder you name for exact duplicates (one copy always stays), leftover .dmg/.pkg installers, similar photos (the sharpest stays) and blurry or near-black photos, and reports large videos, screenshots and other large files without ever proposing them. A local preview page shows what would stay and what would go; only categories you approve move to the Trash of the same disk, and spacewise_undo puts them back. Disclosure — reads image, video and installer files (and the name, size and date of other files) only in a folder you name inside your home folder or on an external drive; refuses the operating system, disk roots, the whole home folder, other users' and shared folders, ~/Library and ~/Applications, hidden and locked items, unreadable folders, symlinks, and app-managed libraries (Photos, Lightroom, Final Cut, iMovie, Music, apps, Time Machine); skips cloud placeholders without opening them. spacewise_trash takes only a scan id and categories (never file paths) and is escalated by its own pre_tool_call hook to Hermes' human-approval gate, so it follows the user's approval settings (YOLO, approvals off or approvals.cron_mode can let it through; with no human present it fails closed); each request gets a one-time rule key. Moves are same-disk renames into ~/.Trash or <drive>/.Trashes/<uid> (freedesktop Trash on Linux), never copies or deletions; files changed since the scan, hard-linked files and RAW+JPEG pairs are left alone. Stores per-file measurements and SHA-256 hashes, recent scans, Trash batches, reports and preview thumbnails in its plugin data folder. Sends to the model provider, as part of the conversation, the scanned folder, counts, sizes and names of listed photos, videos and installers; names of other large files stay in the local report. No network calls, model calls, shell commands or telemetry; no process-wide settings changed. Windows: scan and report only.Communitytools

Developer Mode

Explore built-in Hermes toolsets and actions.

HermesAgent

Developer?

Create a Hermes extension for Desktop or agent workflows.

Developer Section