blenderwright 2.0.1__tar.gz → 2.2.0__tar.gz

{blenderwright-2.0.1 → blenderwright-2.2.0}/.github/workflows/ci.yml

@@ -37,11 +37,19 @@ jobs:
         run: bandit -r src/ -ll  # low severity threshold; skip install_addon.py (subprocess by design)
       - name: Install project dependencies
         run: pip install -e ".[dev]"
-      - name: pip-audit
+      - name: pip-audit (fresh resolution)
         # Audits the environment, which now contains this project's declared
         # dependencies. The upgrade step above keeps the runner's own build
         # tooling current so drift in the image does not fail the build.
         run: pip-audit
+      - name: pip-audit (uv.lock)
+        # The step above resolves today's versions and passed for weeks while
+        # uv.lock, which is what `uv run` and every developer actually
+        # install, carried 64 known vulnerabilities. Audit the pins too.
+        run: |
+          pip install uv
+          uv export --all-extras --format requirements-txt --no-hashes --no-emit-project -o /tmp/uv-lock.txt
+          pip-audit --no-deps --disable-pip --strict -r /tmp/uv-lock.txt
 
   tests:
     name: Tests (${{ matrix.os }} / Python ${{ matrix.python-version }})

{blenderwright-2.0.1 → blenderwright-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: blenderwright
-Version: 2.0.1
+Version: 2.2.0
 Summary: The most intuitive and efficient MCP Server for Blender
 License-Expression: MIT
 License-File: LICENSE.md
@@ -24,26 +24,32 @@ The most intuitive and efficient MCP Server for Blender. Control Blender entirel
 
 **blenderwright goes beyond tool exposure: it guides the LLM to produce professional 3D results** through expert prompts, proven workflows, visual feedback, and mesh quality analysis.
 
-<small>A two-storey Western saloon from a single sentence: "create a Western style 2-story saloon, the outside is more important than any inside detail." Claude Code (Fable 5.1) built the false front, plank siding, balcony, batwing doors and street dressing, then relit it for dusk, all through blenderwright, in about twenty minutes with no manual modelling:</small>
+<small>A shuttle launch from two questions: "do you want to have a go at the space shuttle launch?" and then "could you animate the launch?" Claude Code (Fable 5.1) modelled the orbiter, tank, boosters and service tower, lit the plumes as emissive volumes and grew the exhaust cloud from metaballs. Keyframes lift the stack and tilt the camera after it, drivers stream the plumes and boil the smoke, and all 60 Cycles frames come back from a single `render_animation` call, all through blenderwright with no manual modelling:</small>
 
-![blenderwright saloon built from one prompt](https://raw.githubusercontent.com/HoldMyBeer-gg/blenderwright/main/saloon.png)
+![blenderwright space shuttle launch, animated](https://raw.githubusercontent.com/HoldMyBeer-gg/blenderwright/main/shuttle-launch.gif)
+
+<small>[Watch it with sound](https://blenderwright.holdmybeer.gg/shuttle-launch.mp4). Launch audio courtesy of NASA: STS-131, "Sound of Launch."</small>
 
-<small>A shuttle launch from one question: "do you want to have a go at the space shuttle launch?" Claude Code (Fable 5.1) modelled the orbiter, tank, boosters and service tower, lit the plumes as emissive volumes, grew the exhaust cloud from metaballs and rendered it in Cycles, all through blenderwright, in under twenty minutes with no manual modelling:</small>
+<small>The still it grew from, modelled and rendered in under twenty minutes:</small>
 
 ![blenderwright space shuttle launch built from one prompt](https://raw.githubusercontent.com/HoldMyBeer-gg/blenderwright/main/shuttle-launch.png)
 
+<small>A two-storey Western saloon from a single sentence: "create a Western style 2-story saloon, the outside is more important than any inside detail." Claude Code (Fable 5.1) built the false front, plank siding, balcony, batwing doors and street dressing, then relit it for dusk, all through blenderwright, in about twenty minutes with no manual modelling:</small>
+
+![blenderwright saloon built from one prompt](https://raw.githubusercontent.com/HoldMyBeer-gg/blenderwright/main/saloon.png)
+
 <small>Fifteen procedural materials, each built by a single `create_procedural_material` call. The selected ball's node graph below was generated entirely by that one call: coordinates, mapping, noise, height mask, colour ramp, and Principled BSDF, laid out and wired:</small>
 
 ![blenderwright procedural shader preview](https://raw.githubusercontent.com/HoldMyBeer-gg/blenderwright/main/shader-preview.png)
 
 ## Key Features
 
-- **[186 tools](https://blenderwright.holdmybeer.gg/)** across 27 modules covering every major Blender domain: modeling, mesh editing, materials, shader nodes, lighting, camera, animation, rendering, sculpting, UV mapping, physics, geometry nodes, rigging, curves, sweeps along a path, 3D-print checking, annotations, collections, file I/O, Bool Tool, viewport control, mesh quality analysis, and extension suggestions
+- **[191 tools](https://blenderwright.holdmybeer.gg/)** across 28 modules covering every major Blender domain: modeling, mesh editing, materials, shader nodes, lighting, camera, animation, rendering, sculpting, UV mapping, physics, geometry nodes, rigging, curves, sweeps along a path, 3D-print checking, annotations, collections, file I/O, Bool Tool, viewport control, mesh quality analysis, and extension suggestions
 - **12 expert prompts**: topology best practices, real-world scale references, lighting principles, studio setup, character basemesh workflow, PBR material guide, auto-critique feedback loop, and more
 - **Visual feedback loop**: fast viewport screenshots via OpenGL render (~ms, not seconds) with auto-critique prompts that guide the LLM to check its own work
 - **Mesh quality analysis**: structured reports covering non-manifold edges, loose vertices, zero-area faces, duplicate vertices, and wire edges
 - **Extension suggestions**: proactively recommends Bool Tool, LoopTools, and Node Wrangler when a task would benefit from them (skips already-installed extensions)
-- **Sandboxed code execution**: `execute_blender_code` blocks dangerous imports (`os`, `subprocess`, `socket`, etc.) and dangerous builtins (`exec`, `eval`, `open`) while allowing safe Blender operations
+- **Raw Python is opt-in**: `execute_blender_code` is off until you tick "Allow raw Python" in the N-panel, per session, never saved into the .blend. When on, every snippet is echoed to the console and listed in the panel. A restricted namespace blocks obvious mistakes (`os`, `subprocess`, `exec`, `open`, ...); it is a guard against accidents, not a security boundary
 - **Render-aware**: automatically detects when Blender is rendering and queues commands. Recovers from stuck render guards via `load_post` handler and reset command
 - **Blender 4.2+ compatible**: ships as a Blender Extension; tested against Blender 5.1 with EEVEE identifier, Annotation API, sculpt stroke_method, SLIM UV unwrap, Raycast shader node, and EEVEE light path intensity controls
 - **Custom port**: configure the server port from the N-panel UI (default: 9876, range: 1024–65535)
@@ -250,7 +256,7 @@ blenderwright includes 12 MCP prompts that guide the LLM toward professional-qua
 ## Tool Domains
 
 <details>
-<summary><strong>All 186 tools across 27 modules</strong></summary>
+<summary><strong>All 191 tools across 28 modules</strong></summary>
 
 Full reference with every parameter: **[blenderwright.holdmybeer.gg](https://blenderwright.holdmybeer.gg/)**
 
@@ -272,6 +278,7 @@ Full reference with every parameter: **[blenderwright.holdmybeer.gg](https://ble
 | Curves | 10 | Bezier/NURBS/path, 3D text, convert, reverse, handle types, cyclic, subdivide |
 | Sweep | 2 | Sweep a profile along a 3D path for tubes, hoses, cables and rails, with flip-free framing; check a path for bends too tight for the profile |
 | 3D Printing | 1 | Reversed normals, self-intersection, thin walls, shells and overhangs via Blender's 3D Print Toolbox |
+| Sequencer | 5 | Image-sequence strips, sound strips, list and remove strips, render to MP4, MKV or WebM with audio |
 | Sculpting | 8 | Brushes, remesh, multires, symmetry, dynamic topology, stroke_method |
 | UV Mapping | 4 | Smart project, unwrap (ANGLE_BASED, CONFORMAL, SLIM), projection, pack islands |
 | Physics | 9 | Rigid body, cloth, fluid, particles (velocity, rendering, delete), bake |
@@ -286,6 +293,31 @@ Full reference with every parameter: **[blenderwright.holdmybeer.gg](https://ble
 
 </details>
 
+### Toolsets
+
+Every tool is loaded by default, and that is the setting the featured renders were made with. The full set of schemas costs roughly 48k tokens per request, which is fine for Claude-class clients and too much for a local model on a 32k window. `BLENDERWRIGHT_TOOLSETS` (or `--toolsets`) trims it:
+
+| Value | Loads |
+|-------|-------|
+| unset or `all` | everything (default) |
+| `auto` | the core toolsets plus `list_toolsets` and `enable_toolset`; the model loads other groups as a task needs them |
+| `core` | scene, objects, transforms, modeling, mesh quality, lighting, camera, rendering, screenshot, viewport, collections |
+| `core,physics,animation` | any comma-separated list of toolset names; a toolset is one row of the table above |
+
+```json
+{
+  "mcpServers": {
+    "blenderwright": {
+      "command": "uvx",
+      "args": ["blenderwright"],
+      "env": { "BLENDERWRIGHT_TOOLSETS": "auto" }
+    }
+  }
+}
+```
+
+`auto` relies on the client honouring the MCP `tools/list_changed` notification. The bundled Ollama chat client picks `auto` on its own when the full set would take more than half of `--num-ctx`, and says so at startup.
+
 ## Architecture
 
 ```
@@ -317,7 +349,8 @@ AI Assistant <--stdio/MCP--> blenderwright server <--TCP socket--> Blender addon
 <summary><strong>Security</strong></summary>
 
 - **Localhost only**: The TCP socket binds to `127.0.0.1`, never exposed to the network.
-- **Sandboxed code execution**: `execute_blender_code` blocks 25 dangerous imports (`os`, `subprocess`, `socket`, `shutil`, `sys`, `ctypes`, `importlib`, `pathlib`, `signal`, `multiprocessing`, `pickle`, `shelve`, `tempfile`, `http`, `urllib`, `ftplib`, `smtplib`, `xmlrpc`, `code`, `codeop`, `compileall`, `webbrowser`, `antigravity`, `turtle`, `tkinter`) and removes dangerous builtins (`__import__`, `exec`, `eval`, `compile`, `open`, `globals`, `locals`, `vars`, `input`, `breakpoint`, `exit`, `quit`, `help`, `memoryview`). Safe Blender imports (`bpy`, `bmesh`, `mathutils`, `math`, `json`) are allowed.
+- **Raw Python is off by default**: `execute_blender_code` refuses to run until you tick "Allow raw Python" in the blenderwright N-panel. The switch is a `WindowManager` property, so it is per Blender session and is never written into a `.blend` file. Every run is echoed to the system console and the panel shows a count and the last snippet. The 191 structured tools do not need it.
+- **The restricted namespace is not a sandbox**: when raw Python is on, the import hook refuses 25 imports (`os`, `subprocess`, `socket`, `shutil`, `sys`, `ctypes`, `importlib`, `pathlib`, `signal`, `multiprocessing`, `pickle`, `shelve`, `tempfile`, `http`, `urllib`, `ftplib`, `smtplib`, `xmlrpc`, `code`, `codeop`, `compileall`, `webbrowser`, `antigravity`, `turtle`, `tkinter`) and the builtins `__import__`, `exec`, `eval`, `compile`, `open`, `globals`, `locals`, `vars`, `input`, `breakpoint`, `exit`, `quit`, `help` and `memoryview` are removed. That catches a model making a mistake. It does not contain an adversary: the code runs in-process with full `bpy`, and `bpy` alone can save files anywhere and run any operator. Treat "Allow raw Python" the way you would treat running a script someone else wrote: read what the model is about to run, and turn it off when you are done.
 - **Input validation**: All inputs pass through validators before reaching Blender: name sanitization, path traversal prevention, numeric range checks, enum allowlists.
 - **File safety**: Import operations disable `use_scripts_auto_execute` to prevent script injection from imported files. File extensions are checked against allowlists.
 - **Command allowlist**: The addon dispatcher only processes explicitly registered commands. Unknown commands are rejected.
@@ -369,7 +402,7 @@ blenderwright/
 │   ├── server.py           # FastMCP entry point
 │   ├── connection.py       # TCP client to Blender (with busy-retry)
 │   ├── validators.py       # Input validation
-│   ├── tools/              # 27 tool modules (186 tools)
+│   ├── tools/              # 28 tool modules (191 tools)
 │   ├── resources/          # MCP resources (scene, objects, materials)
 │   └── prompts/            # 12 expert prompt templates
 ├── addon/                  # Blender addon (zero external deps)

{blenderwright-2.0.1 → blenderwright-2.2.0}/README.md

@@ -6,26 +6,32 @@ The most intuitive and efficient MCP Server for Blender. Control Blender entirel
 
 **blenderwright goes beyond tool exposure: it guides the LLM to produce professional 3D results** through expert prompts, proven workflows, visual feedback, and mesh quality analysis.
 
-<small>A two-storey Western saloon from a single sentence: "create a Western style 2-story saloon, the outside is more important than any inside detail." Claude Code (Fable 5.1) built the false front, plank siding, balcony, batwing doors and street dressing, then relit it for dusk, all through blenderwright, in about twenty minutes with no manual modelling:</small>
+<small>A shuttle launch from two questions: "do you want to have a go at the space shuttle launch?" and then "could you animate the launch?" Claude Code (Fable 5.1) modelled the orbiter, tank, boosters and service tower, lit the plumes as emissive volumes and grew the exhaust cloud from metaballs. Keyframes lift the stack and tilt the camera after it, drivers stream the plumes and boil the smoke, and all 60 Cycles frames come back from a single `render_animation` call, all through blenderwright with no manual modelling:</small>
 
-![blenderwright saloon built from one prompt](https://raw.githubusercontent.com/HoldMyBeer-gg/blenderwright/main/saloon.png)
+![blenderwright space shuttle launch, animated](https://raw.githubusercontent.com/HoldMyBeer-gg/blenderwright/main/shuttle-launch.gif)
+
+<small>[Watch it with sound](https://blenderwright.holdmybeer.gg/shuttle-launch.mp4). Launch audio courtesy of NASA: STS-131, "Sound of Launch."</small>
 
-<small>A shuttle launch from one question: "do you want to have a go at the space shuttle launch?" Claude Code (Fable 5.1) modelled the orbiter, tank, boosters and service tower, lit the plumes as emissive volumes, grew the exhaust cloud from metaballs and rendered it in Cycles, all through blenderwright, in under twenty minutes with no manual modelling:</small>
+<small>The still it grew from, modelled and rendered in under twenty minutes:</small>
 
 ![blenderwright space shuttle launch built from one prompt](https://raw.githubusercontent.com/HoldMyBeer-gg/blenderwright/main/shuttle-launch.png)
 
+<small>A two-storey Western saloon from a single sentence: "create a Western style 2-story saloon, the outside is more important than any inside detail." Claude Code (Fable 5.1) built the false front, plank siding, balcony, batwing doors and street dressing, then relit it for dusk, all through blenderwright, in about twenty minutes with no manual modelling:</small>
+
+![blenderwright saloon built from one prompt](https://raw.githubusercontent.com/HoldMyBeer-gg/blenderwright/main/saloon.png)
+
 <small>Fifteen procedural materials, each built by a single `create_procedural_material` call. The selected ball's node graph below was generated entirely by that one call: coordinates, mapping, noise, height mask, colour ramp, and Principled BSDF, laid out and wired:</small>
 
 ![blenderwright procedural shader preview](https://raw.githubusercontent.com/HoldMyBeer-gg/blenderwright/main/shader-preview.png)
 
 ## Key Features
 
-- **[186 tools](https://blenderwright.holdmybeer.gg/)** across 27 modules covering every major Blender domain: modeling, mesh editing, materials, shader nodes, lighting, camera, animation, rendering, sculpting, UV mapping, physics, geometry nodes, rigging, curves, sweeps along a path, 3D-print checking, annotations, collections, file I/O, Bool Tool, viewport control, mesh quality analysis, and extension suggestions
+- **[191 tools](https://blenderwright.holdmybeer.gg/)** across 28 modules covering every major Blender domain: modeling, mesh editing, materials, shader nodes, lighting, camera, animation, rendering, sculpting, UV mapping, physics, geometry nodes, rigging, curves, sweeps along a path, 3D-print checking, annotations, collections, file I/O, Bool Tool, viewport control, mesh quality analysis, and extension suggestions
 - **12 expert prompts**: topology best practices, real-world scale references, lighting principles, studio setup, character basemesh workflow, PBR material guide, auto-critique feedback loop, and more
 - **Visual feedback loop**: fast viewport screenshots via OpenGL render (~ms, not seconds) with auto-critique prompts that guide the LLM to check its own work
 - **Mesh quality analysis**: structured reports covering non-manifold edges, loose vertices, zero-area faces, duplicate vertices, and wire edges
 - **Extension suggestions**: proactively recommends Bool Tool, LoopTools, and Node Wrangler when a task would benefit from them (skips already-installed extensions)
-- **Sandboxed code execution**: `execute_blender_code` blocks dangerous imports (`os`, `subprocess`, `socket`, etc.) and dangerous builtins (`exec`, `eval`, `open`) while allowing safe Blender operations
+- **Raw Python is opt-in**: `execute_blender_code` is off until you tick "Allow raw Python" in the N-panel, per session, never saved into the .blend. When on, every snippet is echoed to the console and listed in the panel. A restricted namespace blocks obvious mistakes (`os`, `subprocess`, `exec`, `open`, ...); it is a guard against accidents, not a security boundary
 - **Render-aware**: automatically detects when Blender is rendering and queues commands. Recovers from stuck render guards via `load_post` handler and reset command
 - **Blender 4.2+ compatible**: ships as a Blender Extension; tested against Blender 5.1 with EEVEE identifier, Annotation API, sculpt stroke_method, SLIM UV unwrap, Raycast shader node, and EEVEE light path intensity controls
 - **Custom port**: configure the server port from the N-panel UI (default: 9876, range: 1024–65535)
@@ -232,7 +238,7 @@ blenderwright includes 12 MCP prompts that guide the LLM toward professional-qua
 ## Tool Domains
 
 <details>
-<summary><strong>All 186 tools across 27 modules</strong></summary>
+<summary><strong>All 191 tools across 28 modules</strong></summary>
 
 Full reference with every parameter: **[blenderwright.holdmybeer.gg](https://blenderwright.holdmybeer.gg/)**
 
@@ -254,6 +260,7 @@ Full reference with every parameter: **[blenderwright.holdmybeer.gg](https://ble
 | Curves | 10 | Bezier/NURBS/path, 3D text, convert, reverse, handle types, cyclic, subdivide |
 | Sweep | 2 | Sweep a profile along a 3D path for tubes, hoses, cables and rails, with flip-free framing; check a path for bends too tight for the profile |
 | 3D Printing | 1 | Reversed normals, self-intersection, thin walls, shells and overhangs via Blender's 3D Print Toolbox |
+| Sequencer | 5 | Image-sequence strips, sound strips, list and remove strips, render to MP4, MKV or WebM with audio |
 | Sculpting | 8 | Brushes, remesh, multires, symmetry, dynamic topology, stroke_method |
 | UV Mapping | 4 | Smart project, unwrap (ANGLE_BASED, CONFORMAL, SLIM), projection, pack islands |
 | Physics | 9 | Rigid body, cloth, fluid, particles (velocity, rendering, delete), bake |
@@ -268,6 +275,31 @@ Full reference with every parameter: **[blenderwright.holdmybeer.gg](https://ble
 
 </details>
 
+### Toolsets
+
+Every tool is loaded by default, and that is the setting the featured renders were made with. The full set of schemas costs roughly 48k tokens per request, which is fine for Claude-class clients and too much for a local model on a 32k window. `BLENDERWRIGHT_TOOLSETS` (or `--toolsets`) trims it:
+
+| Value | Loads |
+|-------|-------|
+| unset or `all` | everything (default) |
+| `auto` | the core toolsets plus `list_toolsets` and `enable_toolset`; the model loads other groups as a task needs them |
+| `core` | scene, objects, transforms, modeling, mesh quality, lighting, camera, rendering, screenshot, viewport, collections |
+| `core,physics,animation` | any comma-separated list of toolset names; a toolset is one row of the table above |
+
+```json
+{
+  "mcpServers": {
+    "blenderwright": {
+      "command": "uvx",
+      "args": ["blenderwright"],
+      "env": { "BLENDERWRIGHT_TOOLSETS": "auto" }
+    }
+  }
+}
+```
+
+`auto` relies on the client honouring the MCP `tools/list_changed` notification. The bundled Ollama chat client picks `auto` on its own when the full set would take more than half of `--num-ctx`, and says so at startup.
+
 ## Architecture
 
 ```
@@ -299,7 +331,8 @@ AI Assistant <--stdio/MCP--> blenderwright server <--TCP socket--> Blender addon
 <summary><strong>Security</strong></summary>
 
 - **Localhost only**: The TCP socket binds to `127.0.0.1`, never exposed to the network.
-- **Sandboxed code execution**: `execute_blender_code` blocks 25 dangerous imports (`os`, `subprocess`, `socket`, `shutil`, `sys`, `ctypes`, `importlib`, `pathlib`, `signal`, `multiprocessing`, `pickle`, `shelve`, `tempfile`, `http`, `urllib`, `ftplib`, `smtplib`, `xmlrpc`, `code`, `codeop`, `compileall`, `webbrowser`, `antigravity`, `turtle`, `tkinter`) and removes dangerous builtins (`__import__`, `exec`, `eval`, `compile`, `open`, `globals`, `locals`, `vars`, `input`, `breakpoint`, `exit`, `quit`, `help`, `memoryview`). Safe Blender imports (`bpy`, `bmesh`, `mathutils`, `math`, `json`) are allowed.
+- **Raw Python is off by default**: `execute_blender_code` refuses to run until you tick "Allow raw Python" in the blenderwright N-panel. The switch is a `WindowManager` property, so it is per Blender session and is never written into a `.blend` file. Every run is echoed to the system console and the panel shows a count and the last snippet. The 191 structured tools do not need it.
+- **The restricted namespace is not a sandbox**: when raw Python is on, the import hook refuses 25 imports (`os`, `subprocess`, `socket`, `shutil`, `sys`, `ctypes`, `importlib`, `pathlib`, `signal`, `multiprocessing`, `pickle`, `shelve`, `tempfile`, `http`, `urllib`, `ftplib`, `smtplib`, `xmlrpc`, `code`, `codeop`, `compileall`, `webbrowser`, `antigravity`, `turtle`, `tkinter`) and the builtins `__import__`, `exec`, `eval`, `compile`, `open`, `globals`, `locals`, `vars`, `input`, `breakpoint`, `exit`, `quit`, `help` and `memoryview` are removed. That catches a model making a mistake. It does not contain an adversary: the code runs in-process with full `bpy`, and `bpy` alone can save files anywhere and run any operator. Treat "Allow raw Python" the way you would treat running a script someone else wrote: read what the model is about to run, and turn it off when you are done.
 - **Input validation**: All inputs pass through validators before reaching Blender: name sanitization, path traversal prevention, numeric range checks, enum allowlists.
 - **File safety**: Import operations disable `use_scripts_auto_execute` to prevent script injection from imported files. File extensions are checked against allowlists.
 - **Command allowlist**: The addon dispatcher only processes explicitly registered commands. Unknown commands are rejected.
@@ -351,7 +384,7 @@ blenderwright/
 │   ├── server.py           # FastMCP entry point
 │   ├── connection.py       # TCP client to Blender (with busy-retry)
 │   ├── validators.py       # Input validation
-│   ├── tools/              # 27 tool modules (186 tools)
+│   ├── tools/              # 28 tool modules (191 tools)
 │   ├── resources/          # MCP resources (scene, objects, materials)
 │   └── prompts/            # 12 expert prompt templates
 ├── addon/                  # Blender addon (zero external deps)

{blenderwright-2.0.1 → blenderwright-2.2.0}/addon/__init__.py

@@ -8,7 +8,7 @@ Blender's Python API.
 bl_info = {
     "name": "blenderwright",
     "author": "blenderwright",
-    "version": (2, 0, 1),
+    "version": (2, 2, 0),
     "blender": (4, 2, 0),
     "location": "View3D > Sidebar > blenderwright",
     "description": "MCP Server integration for AI-assisted 3D workflows",

{blenderwright-2.0.1 → blenderwright-2.2.0}/addon/blender_manifest.toml

@@ -1,7 +1,7 @@
 schema_version = "1.0.0"
 
 id = "blenderwright"
-version = "2.0.1"
+version = "2.2.0"
 name = "blenderwright"
 tagline = "MCP server integration for AI-assisted 3D workflows"
 maintainer = "jabberwock <88205+jabberwock@users.noreply.github.com>"

{blenderwright-2.0.1 → blenderwright-2.2.0}/addon/handlers/__init__.py

@@ -29,6 +29,7 @@ from . import (
     gpencil,
     sweep,
     print3d,
+    sequencer,
 )
 
 _modules = [
@@ -60,6 +61,7 @@ _modules = [
     gpencil,
     sweep,
     print3d,
+    sequencer,
 ]
 
 

blenderwright-2.2.0/addon/handlers/code_exec.py

@@ -0,0 +1,176 @@
+"""Blender addon handler for raw Python execution (off by default).
+
+What this is: a restricted namespace that blocks the obvious footguns
+(import os/subprocess/socket..., exec/eval/open/compile) so a model
+that makes a mistake fails loudly instead of touching the filesystem
+or the network by accident.
+
+What this is NOT: a security boundary. The code runs in-process inside
+Blender with full `bpy`, and `bpy` alone can save files anywhere and
+run any operator. A denylist cannot contain a determined adversary in
+the same interpreter, and this module does not claim to.
+
+So the real control is the switch, not the list:
+
+- `execute_code` is refused unless the user has ticked "Allow raw
+  Python" in the blenderwright N-panel. The flag lives on
+  `bpy.types.WindowManager`, so it is per session and is never saved
+  into a .blend file that could be handed to someone else.
+- Every snippet that runs is echoed to the system console and kept in
+  a short log that the panel displays, so the user can see what the
+  model actually did.
+"""
+
+import sys
+import io
+import time
+from collections import deque
+from .. import dispatcher
+
+
+# Name of the per-session switch registered on bpy.types.WindowManager
+# by ui_panel.register(). Not a Scene property on purpose: Scene props
+# are written into the .blend.
+SWITCH_PROP = "blenderwright_allow_code_exec"
+
+# How many recent runs the panel can show.
+EXEC_LOG_SIZE = 20
+_exec_log: deque = deque(maxlen=EXEC_LOG_SIZE)
+
+
+def is_enabled() -> bool:
+    """True only if the user turned raw Python on for this Blender session.
+
+    Anything other than a real `True` (missing property, wrong type, no
+    window manager yet, bpy not importable) counts as off.
+    """
+    try:
+        import bpy
+        flag = getattr(bpy.context.window_manager, SWITCH_PROP, False)
+    except Exception:
+        return False
+    return isinstance(flag, bool) and flag
+
+
+def get_exec_log() -> list:
+    """Copy of the recent-run log, oldest first."""
+    return list(_exec_log)
+
+
+def _record(code: str, ok: bool) -> None:
+    lines = code.strip().splitlines() or [""]
+    _exec_log.append({
+        "time": time.strftime("%H:%M:%S"),
+        "first_line": lines[0].strip(),
+        "lines": len(lines),
+        "ok": ok,
+    })
+
+
+# Modules refused by the import hook. A guard against accidental misuse by
+# the model, not a security control: see the module docstring.
+BLOCKED_MODULES = frozenset({
+    "os", "subprocess", "socket", "shutil", "sys", "ctypes",
+    "importlib", "pathlib", "signal", "multiprocessing",
+    "pickle", "shelve", "tempfile", "http", "urllib", "ftplib",
+    "smtplib", "xmlrpc", "code", "codeop", "compileall",
+    "webbrowser", "antigravity", "turtle", "tkinter",
+})
+
+# Builtins removed from the restricted namespace. Same caveat as above.
+_REMOVED_BUILTINS = frozenset({
+    "__import__", "exec", "eval", "compile", "open",
+    "globals", "locals", "vars", "input", "breakpoint",
+    "exit", "quit", "help", "memoryview",
+})
+
+# Reference to the real __import__ for the safe import hook
+_real_import = builtins_import = __builtins__.__import__ if hasattr(
+    __builtins__, "__import__"
+) else __builtins__["__import__"] if isinstance(__builtins__, dict) else __import__
+
+
+def _safe_import(name, *args, **kwargs):
+    """Import hook that refuses the modules in BLOCKED_MODULES."""
+    base_module = name.split(".")[0]
+    if base_module in BLOCKED_MODULES:
+        raise ImportError(
+            f"Module '{name}' is blocked inside execute_blender_code. "
+            f"Use the structured MCP tools instead of direct Python imports."
+        )
+    return _real_import(name, *args, **kwargs)
+
+
+def _build_safe_builtins():
+    """Build the restricted builtins dict."""
+    # Get all builtins as a dict
+    if isinstance(__builtins__, dict):
+        raw = dict(__builtins__)
+    else:
+        raw = {k: getattr(__builtins__, k) for k in dir(__builtins__)}
+
+    # Remove dangerous builtins
+    safe = {k: v for k, v in raw.items() if k not in _REMOVED_BUILTINS}
+
+    # Add our safe import hook
+    safe["__import__"] = _safe_import
+
+    return safe
+
+
+# Build once at module load
+SAFE_BUILTINS = _build_safe_builtins()
+
+
+def handle_execute_code(params: dict) -> dict:
+    """Run Python inside Blender, if the user has allowed it this session.
+
+    - Refuses with PermissionError while "Allow raw Python" is unticked.
+    - Echoes the snippet to the system console (stderr) and records it
+      in the exec log before running it.
+    - Runs in the restricted namespace (see module docstring for what
+      that does and does not mean) and captures stdout.
+    """
+    code = params.get("code", "")
+    if not code:
+        raise ValueError("No code provided")
+
+    if not is_enabled():
+        raise PermissionError(
+            "execute_blender_code is disabled. Raw Python is off by default; "
+            "tick 'Allow raw Python' in the blenderwright panel "
+            "(View3D > Sidebar > blenderwright) to enable it for this Blender "
+            "session, or use the structured tools instead."
+        )
+
+    # Echo to the real console so the user can see what ran, regardless
+    # of whether the MCP client shows tool inputs. Goes to stderr so it
+    # is never mixed into the captured stdout returned to the model.
+    print(
+        f"[blenderwright] execute_code ({time.strftime('%H:%M:%S')}):\n{code}",
+        file=sys.stderr,
+    )
+
+    # Capture stdout
+    old_stdout = sys.stdout
+    sys.stdout = buffer = io.StringIO()
+
+    try:
+        exec(code, {"__builtins__": SAFE_BUILTINS})
+        output = buffer.getvalue()
+        _record(code, ok=True)
+        return {
+            "output": output.strip(),
+            "success": True,
+        }
+    except Exception as e:
+        output = buffer.getvalue()
+        _record(code, ok=False)
+        raise RuntimeError(f"{type(e).__name__}: {e}\nOutput before error: {output}")
+    finally:
+        sys.stdout = old_stdout
+
+
+def register():
+    """Register code execution handler with the dispatcher."""
+    dispatcher.register_handler("execute_code", handle_execute_code)

{blenderwright-2.0.1 → blenderwright-2.2.0}/addon/handlers/objects.py

@@ -3,6 +3,7 @@
 import math
 
 import bpy
+import mathutils
 from .. import dispatcher
 
 # Map of primitive type to bpy.ops function
@@ -38,6 +39,29 @@ def _get_primitive_op(ptype: str):
     return ops_map.get(ptype)
 
 
+def _extent(obj) -> dict:
+    """The object's size and where it ends, in world space.
+
+    A caller placing the next part needs to know where this one stops. A
+    model assumed a primitive was one unit tall, scaled it by 18.5, and put
+    the nose cone at z=9.25, halfway up inside a body that reached 18.5.
+    Blender's cylinder is two units tall; the result says so now.
+    """
+    bpy.context.view_layer.update()
+    out = {"dimensions": [float(v) for v in obj.dimensions]}
+    try:
+        corners = [obj.matrix_world @ mathutils.Vector(c) for c in obj.bound_box]
+        xs, ys, zs = ([float(getattr(c, axis)) for c in corners] for axis in "xyz")
+        out["bounds"] = {
+            "min": [min(xs), min(ys), min(zs)],
+            "max": [max(xs), max(ys), max(zs)],
+        }
+    except Exception:
+        # No bound box (an empty), or something odd: the dimensions still help.
+        pass
+    return out
+
+
 def handle_create_object(params: dict) -> dict:
     """Create a primitive object in the scene."""
     obj_type = params.get("type", "CUBE")
@@ -65,6 +89,7 @@ def handle_create_object(params: dict) -> dict:
             "name": obj.name,
             "type": obj.type,
             "location": list(obj.location),
+            **_extent(obj),
         }
     except Exception as e:
         raise RuntimeError(f"Failed to create object: {e}")
@@ -100,6 +125,7 @@ def handle_create_polygon_prism(params: dict) -> dict:
             "type": obj.type,
             "location": list(obj.location),
             "sides": sides,
+            **_extent(obj),
         }
     except Exception as e:
         raise RuntimeError(f"Failed to create polygon prism: {e}")
@@ -260,6 +286,7 @@ def handle_create_threaded_shaft(params: dict) -> dict:
             "pitch": pitch,
             "thread_depth": thread_depth,
             "iterations": iterations,
+            **_extent(obj),
         }
     except Exception as e:
         raise RuntimeError(f"Failed to create threaded shaft: {e}")
@@ -510,9 +537,17 @@ def handle_join_objects(params: dict) -> dict:
         bpy.ops.object.join()
 
         result_obj = bpy.context.active_object
+        # The others are gone. A caller that uses one of their names on the
+        # next call gets "not found" and loses a round; say so here instead.
+        removed = [n for n in names if n != result_obj.name]
         return {
             "name": result_obj.name,
             "joined_count": len(names),
+            "removed": removed,
+            "note": (
+                f"{', '.join(removed)} no longer exist; their geometry is part of "
+                f"{result_obj.name}. Refer to {result_obj.name} from now on."
+            ),
             "success": True,
         }
     except ValueError: