gpu-container 0.1.3__tar.gz → 0.1.4__tar.gz

gpu_container-0.1.4/.claude/hooks/pre-tool-use.mjs

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+/**
+ * Wedge #1 PreToolUse hook — Tool-Call Conformance ADVISORY (deterministic floor; advisory + fail-open).
+ * gpu-container is a Python repo with no role-os dependency, so the floor is imported from the sibling
+ * role-os checkout by ABSOLUTE path (rig-specific: E:/AI/role-os). This reads
+ * .claude/role-os/tool-contracts.json from the session cwd, runs the schema + computable contract floor
+ * against the proposed call, and — only when the floor PROVES a violation — injects an advisory into context
+ * via the Claude Code hook protocol ({hookSpecificOutput:{hookEventName:"PreToolUse", additionalContext}}).
+ * It NEVER blocks (always exit 0) and NEVER throws — any error (incl. a missing role-os checkout) is a
+ * silent no-op, because a hook must not break a tool call.
+ */
+import { readFileSync } from "node:fs";
+import { pathToFileURL } from "node:url";
+
+const ROLE_OS_HOOKS = "E:/AI/role-os/src/hooks.mjs"; // rig-specific sibling checkout
+
+let input = {};
+try { input = JSON.parse(readFileSync(0, "utf-8").toString() || "{}"); } catch { /* no stdin */ }
+
+try {
+  const { conformanceAdvisory } = await import(pathToFileURL(ROLE_OS_HOOKS).href);
+  const note = conformanceAdvisory(input.cwd || process.cwd(), input.tool_name || "", input.tool_input);
+  if (note) {
+    console.log(JSON.stringify({
+      hookSpecificOutput: { hookEventName: "PreToolUse", additionalContext: note },
+    }));
+  }
+} catch { /* role-os checkout not present, or internal error -> no-op (never block a tool call) */ }
+
+process.exit(0);

gpu_container-0.1.4/.claude/role-os/tool-contracts.json

@@ -0,0 +1,639 @@
+{
+  "Read": {
+    "contract": "Read a file from the local filesystem. file_path must be an absolute path. 'limit' is the number of lines to read and must be a positive integer (> 0). 'offset' is the 0-based line to start reading from and must be non-negative (>= 0).",
+    "params": [
+      {
+        "name": "file_path",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "limit",
+        "type": "number",
+        "required": false
+      },
+      {
+        "name": "offset",
+        "type": "number",
+        "required": false
+      },
+      {
+        "name": "pages",
+        "type": "string",
+        "required": false
+      }
+    ],
+    "constraints": [
+      {
+        "kind": "cmp",
+        "op": "gt",
+        "left": "limit",
+        "right": 0
+      },
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "offset",
+        "right": 0
+      }
+    ]
+  },
+  "Edit": {
+    "contract": "Exact string replacement in a file. file_path, old_string, and new_string are all required strings. old_string must be DIFFERENT from new_string (replacing a string with itself is a no-op and is rejected). replace_all is an optional boolean.",
+    "params": [
+      {
+        "name": "file_path",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "old_string",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "new_string",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "replace_all",
+        "type": "boolean",
+        "required": false
+      }
+    ],
+    "constraints": [
+      {
+        "kind": "cmp",
+        "op": "ne",
+        "left": "old_string",
+        "right": {
+          "field": "new_string"
+        }
+      }
+    ]
+  },
+  "Write": {
+    "contract": "Write (overwrite) a file on the local filesystem. Both file_path (an absolute path) and content are required strings. No computable relational contract beyond the schema floor.",
+    "params": [
+      {
+        "name": "file_path",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "content",
+        "type": "string",
+        "required": true
+      }
+    ],
+    "constraints": []
+  },
+  "Bash": {
+    "contract": "Execute a bash command. 'command' is required. 'timeout' is in milliseconds and must not exceed 600000 (10 minutes); it must also be non-negative. run_in_background and dangerouslyDisableSandbox are optional booleans.",
+    "params": [
+      {
+        "name": "command",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "description",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "timeout",
+        "type": "number",
+        "required": false,
+        "max": 600000
+      },
+      {
+        "name": "run_in_background",
+        "type": "boolean",
+        "required": false
+      },
+      {
+        "name": "dangerouslyDisableSandbox",
+        "type": "boolean",
+        "required": false
+      }
+    ],
+    "constraints": [
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "timeout",
+        "right": 0
+      }
+    ]
+  },
+  "PowerShell": {
+    "contract": "Execute a PowerShell command. 'command' is required. 'timeout' is in milliseconds and must not exceed 600000 (10 minutes); it must also be non-negative. run_in_background and dangerouslyDisableSandbox are optional booleans.",
+    "params": [
+      {
+        "name": "command",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "description",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "timeout",
+        "type": "number",
+        "required": false,
+        "max": 600000
+      },
+      {
+        "name": "run_in_background",
+        "type": "boolean",
+        "required": false
+      },
+      {
+        "name": "dangerouslyDisableSandbox",
+        "type": "boolean",
+        "required": false
+      }
+    ],
+    "constraints": [
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "timeout",
+        "right": 0
+      }
+    ]
+  },
+  "Grep": {
+    "contract": "ripgrep content search. 'pattern' is required. 'output_mode' must be one of content|files_with_matches|count. The numeric context fields -A, -B, -C, and context are line counts and must be non-negative (>= 0). head_limit and offset are also non-negative integers (>= 0).",
+    "params": [
+      {
+        "name": "pattern",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "path",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "glob",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "type",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "output_mode",
+        "type": "string",
+        "required": false,
+        "enum": [
+          "content",
+          "files_with_matches",
+          "count"
+        ]
+      },
+      {
+        "name": "-A",
+        "type": "number",
+        "required": false
+      },
+      {
+        "name": "-B",
+        "type": "number",
+        "required": false
+      },
+      {
+        "name": "-C",
+        "type": "number",
+        "required": false
+      },
+      {
+        "name": "-n",
+        "type": "boolean",
+        "required": false
+      },
+      {
+        "name": "-i",
+        "type": "boolean",
+        "required": false
+      },
+      {
+        "name": "-o",
+        "type": "boolean",
+        "required": false
+      },
+      {
+        "name": "multiline",
+        "type": "boolean",
+        "required": false
+      },
+      {
+        "name": "head_limit",
+        "type": "number",
+        "required": false
+      },
+      {
+        "name": "offset",
+        "type": "number",
+        "required": false
+      },
+      {
+        "name": "context",
+        "type": "number",
+        "required": false
+      }
+    ],
+    "constraints": [
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "-A",
+        "right": 0
+      },
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "-B",
+        "right": 0
+      },
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "-C",
+        "right": 0
+      },
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "context",
+        "right": 0
+      },
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "head_limit",
+        "right": 0
+      },
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "offset",
+        "right": 0
+      }
+    ]
+  },
+  "Glob": {
+    "contract": "Fast file pattern matching. 'pattern' is required (e.g. **/*.ts). 'path' is an optional directory to search in. No computable relational contract beyond the schema floor.",
+    "params": [
+      {
+        "name": "pattern",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "path",
+        "type": "string",
+        "required": false
+      }
+    ],
+    "constraints": []
+  },
+  "AskUserQuestion": {
+    "contract": "Ask the user between 1 and 4 questions. 'questions' is a required array whose length must be >= 1 and <= 4.",
+    "params": [
+      {
+        "name": "questions",
+        "type": "array",
+        "required": true
+      }
+    ],
+    "constraints": [
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": {
+          "len": "questions"
+        },
+        "right": 1
+      },
+      {
+        "kind": "cmp",
+        "op": "le",
+        "left": {
+          "len": "questions"
+        },
+        "right": 4
+      }
+    ]
+  },
+  "ToolSearch": {
+    "contract": "Fetch deferred tool schemas. 'query' is required. 'max_results' is an optional result-count hint (the real schema enforces no min/integer bound). No computable relational contract beyond the schema floor.",
+    "params": [
+      {
+        "name": "query",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "max_results",
+        "type": "number",
+        "required": false
+      }
+    ],
+    "constraints": []
+  },
+  "Skill": {
+    "contract": "Invoke a skill by exact name. 'skill' is required. 'args' is optional. No computable relational contract beyond the schema floor.",
+    "params": [
+      {
+        "name": "skill",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "args",
+        "type": "string",
+        "required": false
+      }
+    ],
+    "constraints": []
+  },
+  "Agent": {
+    "contract": "Launch a subagent. description, prompt, and subagent_type are required. 'model' (when provided) must be one of sonnet|opus|haiku. 'isolation' (when provided) must be 'worktree'. IMPORTANT: subagent_type is an OPEN set — custom agent types are allowed — so do NOT add a membership constraint on subagent_type; that is genuinely-semantic, not computable.",
+    "params": [
+      {
+        "name": "description",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "prompt",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "subagent_type",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "model",
+        "type": "string",
+        "required": false,
+        "enum": [
+          "sonnet",
+          "opus",
+          "haiku"
+        ]
+      },
+      {
+        "name": "isolation",
+        "type": "string",
+        "required": false,
+        "enum": [
+          "worktree"
+        ]
+      },
+      {
+        "name": "run_in_background",
+        "type": "boolean",
+        "required": false
+      }
+    ],
+    "constraints": []
+  },
+  "mcp__ollama-intern__ollama_chat": {
+    "contract": "Chat with the local model. 'messages' is a required, NON-EMPTY array of {role,content} (length >= 1). model and system are optional strings.",
+    "params": [
+      {
+        "name": "messages",
+        "type": "array",
+        "required": true
+      },
+      {
+        "name": "model",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "system",
+        "type": "string",
+        "required": false
+      }
+    ],
+    "constraints": [
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": {
+          "len": "messages"
+        },
+        "right": 1
+      }
+    ]
+  },
+  "mcp__ollama-intern__ollama_classify": {
+    "contract": "Single-label classification. 'labels' is required. Provide EXACTLY ONE of 'text', 'source_path', or 'items' (the input source — exactly one must be present). 'threshold' is a confidence floor in [0,1]. 'per_file_max_chars' is in [1000,200000]. allow_none, frame, model are optional.",
+    "params": [
+      {
+        "name": "labels",
+        "required": true
+      },
+      {
+        "name": "text",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "source_path",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "items",
+        "type": "array",
+        "required": false
+      },
+      {
+        "name": "threshold",
+        "type": "number",
+        "required": false
+      },
+      {
+        "name": "allow_none",
+        "type": "boolean",
+        "required": false
+      },
+      {
+        "name": "frame",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "model",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "per_file_max_chars",
+        "type": "integer",
+        "required": false
+      }
+    ],
+    "constraints": [
+      {
+        "kind": "present",
+        "fields": [
+          "text",
+          "source_path",
+          "items"
+        ],
+        "count": 1
+      },
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "threshold",
+        "right": 0
+      },
+      {
+        "kind": "cmp",
+        "op": "le",
+        "left": "threshold",
+        "right": 1
+      },
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "per_file_max_chars",
+        "right": 1000
+      },
+      {
+        "kind": "cmp",
+        "op": "le",
+        "left": "per_file_max_chars",
+        "right": 200000
+      }
+    ]
+  },
+  "mcp__ollama-intern__ollama_corpus_search": {
+    "contract": "Concept search over a named corpus. 'corpus' and 'query' are required strings. 'mode' (when provided) must be one of semantic|lexical|hybrid|fact|title_path. 'top_k' is an integer in [1,100]. 'preview_chars' is an integer in [0,500].",
+    "params": [
+      {
+        "name": "corpus",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "query",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "mode",
+        "type": "string",
+        "required": false,
+        "enum": [
+          "semantic",
+          "lexical",
+          "hybrid",
+          "fact",
+          "title_path"
+        ]
+      },
+      {
+        "name": "top_k",
+        "type": "integer",
+        "required": false
+      },
+      {
+        "name": "preview_chars",
+        "type": "integer",
+        "required": false
+      },
+      {
+        "name": "explain",
+        "type": "boolean",
+        "required": false
+      },
+      {
+        "name": "filter",
+        "type": "object",
+        "required": false
+      }
+    ],
+    "constraints": [
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "top_k",
+        "right": 1
+      },
+      {
+        "kind": "cmp",
+        "op": "le",
+        "left": "top_k",
+        "right": 100
+      },
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "preview_chars",
+        "right": 0
+      },
+      {
+        "kind": "cmp",
+        "op": "le",
+        "left": "preview_chars",
+        "right": 500
+      }
+    ]
+  },
+  "mcp__ollama-intern__ollama_summarize_fast": {
+    "contract": "Summarize short text. 'text' is required. 'max_words' is the target length and is an integer in [10,400]. frame and model are optional.",
+    "params": [
+      {
+        "name": "text",
+        "type": "string",
+        "required": true
+      },
+      {
+        "name": "max_words",
+        "type": "integer",
+        "required": false
+      },
+      {
+        "name": "frame",
+        "type": "string",
+        "required": false
+      },
+      {
+        "name": "model",
+        "type": "string",
+        "required": false
+      }
+    ],
+    "constraints": [
+      {
+        "kind": "cmp",
+        "op": "ge",
+        "left": "max_words",
+        "right": 10
+      },
+      {
+        "kind": "cmp",
+        "op": "le",
+        "left": "max_words",
+        "right": 400
+      }
+    ]
+  }
+}

gpu_container-0.1.4/.claude/settings.json

@@ -0,0 +1,15 @@
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node .claude/hooks/pre-tool-use.mjs"
+          }
+        ]
+      }
+    ]
+  }
+}

{gpu_container-0.1.3 → gpu_container-0.1.4}/.github/workflows/release.yml

@@ -152,6 +152,18 @@ jobs:
             echo "::error::release tag ${TAG} does not match npm/package.json version ${PKG}"
             exit 1
           fi
+          # The launcher bin pins the version + tag it downloads binaries for. Gate it too:
+          # without this, a version bump that forgets bin/gpu-container.js would publish a
+          # launcher that fetches the PREVIOUS release's binaries/checksums while every other
+          # gate stays green (npm/package.json already matches the tag). Caught in v0.1.4 preflight.
+          if ! grep -q "version: \"${TAG}\"" npm/bin/gpu-container.js; then
+            echo "::error::npm/bin/gpu-container.js version literal does not match ${TAG}"
+            exit 1
+          fi
+          if ! grep -q "tag: \"v${TAG}\"" npm/bin/gpu-container.js; then
+            echo "::error::npm/bin/gpu-container.js tag literal does not match v${TAG}"
+            exit 1
+          fi
 
       - uses: actions/setup-node@v4
         with:

{gpu_container-0.1.3 → gpu_container-0.1.4}/CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.1.4] - 2026-06-08
+
+### Fixed
+- **npm provenance source link** now resolves to the launcher's `npm/` subdirectory — added `repository.directory: "npm"` to the launcher `package.json`. Cosmetic only: the 0.1.3 attestation was already valid (`npm audit signatures` passes); this points npm's provenance "source" link at the real package folder instead of the repo root.
+
+### Changed
+- **Release pipeline** now verifies the launcher's pinned binary `version` + `tag` (`npm/bin/gpu-container.js`) match the release tag before publishing — closing a gap where bumping the package version alone could publish a launcher that downloads the *previous* release's binaries (CI stayed green because it only gated `pyproject.toml` + `npm/package.json`).
+
 ## [0.1.3] - 2026-06-04
 
 ### Fixed

{gpu_container-0.1.3 → gpu_container-0.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gpu-container
-Version: 0.1.3
+Version: 0.1.4
 Summary: Model-aware inference memory-placement planner for single-GPU rigs — profile, plan, prove.
 Author-email: mcp-tool-shop <64996768+mcp-tool-shop@users.noreply.github.com>
 License-Expression: MIT

{gpu_container-0.1.3 → gpu_container-0.1.4}/gpu_container/__init__.py

@@ -6,4 +6,4 @@ grounds the measurement methodology lives in the docker-knowledge KB
 (readouts/docker-knowledge), seeded by the feasibility study-swarm.
 """
 
-__version__ = "0.1.3"
+__version__ = "0.1.4"

{gpu_container-0.1.3 → gpu_container-0.1.4}/npm/bin/gpu-container.js

@@ -5,14 +5,14 @@
 // the release-asset names from convention, downloads the platform binary from the gpu-container
 // GitHub Release, verifies its SHA256 against checksums-<version>.txt, caches it, and runs it with
 // full arg passthrough.
-//   binary:    gpu-container-0.1.3-linux-x64
-//   checksums: checksums-0.1.3.txt
+//   binary:    gpu-container-0.1.4-linux-x64
+//   checksums: checksums-0.1.4.txt
 process.env.MCPTOOLSHOP_LAUNCH_CONFIG = JSON.stringify({
   toolName: "gpu-container",
   owner: "mcp-tool-shop-org",
   repo: "gpu-container",
-  version: "0.1.3",
-  tag: "v0.1.3",
+  version: "0.1.4",
+  tag: "v0.1.4",
 });
 
 require("@mcptoolshop/npm-launcher/bin/mcptoolshop-launch.js");

{gpu_container-0.1.3 → gpu_container-0.1.4}/npm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gpu-container",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "gpu-container — model-aware inference memory-placement planner for single-GPU rigs. Zero-prerequisite npx install via a verified binary launcher.",
   "type": "commonjs",
   "license": "MIT",
@@ -32,7 +32,8 @@
   "author": "mcp-tool-shop",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/mcp-tool-shop-org/gpu-container.git"
+    "url": "git+https://github.com/mcp-tool-shop-org/gpu-container.git",
+    "directory": "npm"
   },
   "homepage": "https://github.com/mcp-tool-shop-org/gpu-container"
 }

{gpu_container-0.1.3 → gpu_container-0.1.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "gpu-container"
-version = "0.1.3"
+version = "0.1.4"
 description = "Model-aware inference memory-placement planner for single-GPU rigs — profile, plan, prove."
 readme = "README.md"
 requires-python = ">=3.10"