tool-compass 2.5.0__tar.gz → 2.5.2__tar.gz

{tool_compass-2.5.0 → tool_compass-2.5.2}/.env.example

@@ -18,9 +18,19 @@
 # External Services
 # =============================================================================
 
-# Ollama server URL for embeddings
+# Ollama server URL for embeddings (used when embedding_provider=ollama)
 OLLAMA_URL=http://localhost:11434
 
+# Embedding provider override (ollama | openai | openai-compatible).
+# Wins over compass_config.json embedding_provider for first-run bootstrap.
+# TOOL_COMPASS_EMBEDDING_PROVIDER=ollama
+
+# API key for openai / openai-compatible embeddings. Wins over the
+# embedding_api_key field in compass_config.json — keep the secret out of
+# the on-disk config. Required when embedding_provider is openai or
+# openai-compatible (unless the server accepts unauthenticated calls).
+# TOOL_COMPASS_EMBEDDING_API_KEY=
+
 # ComfyUI server URL (for AI image generation backend)
 COMFYUI_URL=http://localhost:8188
 

tool_compass-2.5.2/.gitattributes

@@ -0,0 +1,17 @@
+# Shell scripts and the Dockerfile MUST keep LF, on every platform.
+#
+# Earned on the sibling xrpl-camp repo the same day this landed: an entrypoint
+# script checked out with CRLF on Windows (core.autocrlf) makes the shebang
+# `#!/bin/sh\r`, and Linux then tries to exec an interpreter literally named
+# `/bin/sh\r`. It fails with "no such file or directory" naming the SCRIPT, so
+# it reads like a missing file rather than a line-ending problem.
+#
+# CI never catches it -- a Linux runner checks out LF and builds fine. Only a
+# contributor building the image on Windows hits it, which is the worst place
+# for a defect to live: invisible to the people who could fix it.
+*.sh text eol=lf
+Dockerfile text eol=lf
+docker-entrypoint.sh text eol=lf
+
+# Keep the rest normalised in the repo and native in the working tree.
+* text=auto

{tool_compass-2.5.0 → tool_compass-2.5.2}/.github/dependabot.yml

@@ -16,25 +16,6 @@ updates:
         patterns: ["*"]
         update-types: ["minor", "patch"]
 
-  # Daily security-only overlay (CT-B-006) — CVE updates from the GitHub
-  # Advisory Database don't wait the monthly cadence. open-pull-requests-limit
-  # raised to 10 since these are infrequent and load-bearing.
-  # NOTE: Dependabot security advisories are auto-emitted; this second entry
-  # exists to give them their own schedule/labels/PR cap independent of the
-  # monthly version-update entry above. The `allow: dependency-type: all`
-  # block scopes this entry to all dependencies; security advisories are
-  # always opened regardless of the version-update grouping rules.
-  - package-ecosystem: "pip"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-    allow:
-      - dependency-type: "all"
-    labels:
-      - "security"
-      - "dependencies"
-
   # =============================================================================
   # github-actions — workflow file action references
   # =============================================================================
@@ -48,22 +29,10 @@ updates:
         patterns: ["*"]
         update-types: ["minor", "patch"]
 
-  # Daily security-only overlay for actions (CT-B-006).
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-    allow:
-      - dependency-type: "all"
-    labels:
-      - "security"
-      - "dependencies"
-
   # =============================================================================
   # docker — Dockerfile base-image FROM directives (CT-B-005)
   # =============================================================================
-  # Pairs with the digest-pinned `FROM python:3.11-slim@sha256:...` in
+  # Pairs with the digest-pinned `FROM python:3.12-slim@sha256:...` in
   # Dockerfile (CT-B-003). Without this ecosystem entry the digest pin
   # would become a stale anchor with no machine-readable refresh path.
   - package-ecosystem: "docker"
@@ -75,15 +44,3 @@ updates:
       all-docker:
         patterns: ["*"]
         update-types: ["minor", "patch"]
-
-  # Daily security-only overlay for docker base images (CT-B-006).
-  - package-ecosystem: "docker"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-    allow:
-      - dependency-type: "all"
-    labels:
-      - "security"
-      - "dependencies"

{tool_compass-2.5.0 → tool_compass-2.5.2}/.github/workflows/ci.yml

@@ -1,3 +1,14 @@
+# --- Measured CI cost (dogfood-swarm SKILL item 8) --------------------------
+# 10 billable min per push across 8 jobs (6.1 min actual wall time),
+# measured 2026-07-04 from run 28722872805. Most expensive jobs:
+#     2 min  Org URL sanity check  (1.1 min wall)
+#     2 min  Python 3.12 on ubuntu-latest  (1.9 min wall)
+#     2 min  Integration Tests  (1.4 min wall)
+# GitHub bills per JOB, rounded UP to the minute, x2 Windows / x10 macOS, so
+# billable minutes exceed wall time - many short jobs cost more than one long
+# one. This number is measured, never estimated; re-measure after any change:
+#   gh api repos/mcp-tool-shop-org/tool-compass/actions/runs/<id>/jobs
+# ---------------------------------------------------------------------------
 # Tool Compass CI Pipeline
 # Runs tests on pushes and PRs that touch code or config.
 # Also handles GitHub Pages deploy for site/** changes on main (folded in from
@@ -15,6 +26,12 @@ on:
       - 'requirements*.txt'
       - 'pyproject.toml'
       - 'Dockerfile'
+      - 'docker-compose.yml'
+      - 'Makefile'
+      - 'fly.toml'
+      - '.pre-commit-config.yaml'
+      - '.dockerignore'
+      - 'npm/**'
       - 'site/**'
       - '.github/workflows/**'
   pull_request:
@@ -26,6 +43,12 @@ on:
       - 'requirements*.txt'
       - 'pyproject.toml'
       - 'Dockerfile'
+      - 'docker-compose.yml'
+      - 'Makefile'
+      - 'fly.toml'
+      - '.pre-commit-config.yaml'
+      - '.dockerignore'
+      - 'npm/**'
       - 'site/**'
       - '.github/workflows/**'
   # TST-FT-002: nightly-fuzz job runs Hypothesis in `nightly` profile
@@ -73,7 +96,7 @@ jobs:
       - name: Set up Python (pre-commit)
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
-          python-version: '3.11'
+          python-version: '3.12'
 
       # CT-B-018: run the pre-commit hooks (ruff format + ruff check +
       # standard hygiene + gitleaks). Same hooks the contributor runs
@@ -122,22 +145,46 @@ jobs:
     timeout-minutes: 15
     # PR-scoped concurrency (see workflow-top NOTE).
     concurrency:
-      group: test-${{ matrix.python-version }}-${{ github.event.pull_request.number || github.run_id }}
+      group: test-${{ matrix.python-version }}-${{ matrix.os }}-${{ github.event.pull_request.number || github.run_id }}
       cancel-in-progress: ${{ github.event_name == 'pull_request' }}
     permissions:
       contents: read
+    # Windows runners default to pwsh, which does not accept `\` line
+    # continuations used below. Git Bash is on the image.
+    defaults:
+      run:
+        shell: bash
 
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest]
-        # Two versions per user's hard rule (max 2 Python versions). Covers
-        # current stable + latest supported, keeping requires-python honest.
-        # 3.13 dropped from CI matrix: hnswlib 0.8.0's cp313 wheel SIGILLs on
-        # GitHub ubuntu-latest runners (AVX instruction gap). pyproject still
-        # declares 3.13 support; once hnswlib ships a forgiving cp313 wheel
-        # or we switch to a pluggable vector backend (IDX-FT-001), re-add it.
-        python-version: ['3.11', '3.12']
+        # Two-cell OS matrix (ubuntu + windows). macos-latest is x10 billable
+        # and is covered by the release-binaries darwin-arm64 freeze, not
+        # every-push pytest. Do not revive 3.11/3.13: those were dropped for
+        # runner SIGILL on hnswlib/numpy wheels (see comment below).
+        os: [ubuntu-latest, windows-latest]
+        # One version, because one is all this repo can currently test.
+        #
+        # 3.13 was dropped earlier: hnswlib 0.8.0's cp313 wheel SIGILLs on
+        # GitHub ubuntu-latest runners (AVX instruction gap).
+        #
+        # 3.11 is dropped here 2026-09-08 for the SAME reason, now reaching
+        # numpy: pytest died at collection with "Illegal instruction (core
+        # dumped)" importing numpy._core._multiarray_umath. Reproducible across
+        # a rerun, and 3.12 passed the same commit both times. Version pinning
+        # would not have helped -- the last green run used the SAME numpy 2.1.3
+        # on the SAME runner image, so the wheel's CPU dispatch, not its
+        # version, is what changed underneath.
+        #
+        # READ THIS AS A RUNNER LIMITATION, NOT A LANGUAGE ONE. Nothing here
+        # needs 3.12 syntax; 3.11 is dropped because prebuilt wheels crash on
+        # GitHub's ubuntu-latest CPUs, not because the code stopped supporting
+        # it. requires-python was raised to >=3.12 in the same commit so the
+        # package stops claiming an interpreter no gate exercises -- a green
+        # badge over an untested runtime is worse than a narrow matrix.
+        # Reinstating 3.11 is a deliberate decision with its own test strategy
+        # (a self-hosted runner, or a source build of hnswlib/numpy).
+        python-version: ['3.12']
 
     steps:
       - name: Checkout repository
@@ -159,39 +206,39 @@ jobs:
       - name: Run tests
         run: |
           pytest -v --tb=short -m "not integration" \
-            --junitxml=junit-${{ matrix.python-version }}.xml
+            --junitxml=junit-${{ matrix.python-version }}-${{ matrix.os }}.xml
 
       - name: Upload JUnit report
         if: always()
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
-          name: junit-reports-${{ matrix.python-version }}
-          path: junit-${{ matrix.python-version }}.xml
+          name: junit-reports-${{ matrix.python-version }}-${{ matrix.os }}
+          path: junit-${{ matrix.python-version }}-${{ matrix.os }}.xml
           if-no-files-found: warn
           # CT-B-012: JUnit reports are short-lived diagnostic data — only
           # useful for the most recent few runs. Default 90d is wasted.
           retention-days: 14
 
       - name: Run tests with coverage
-        if: matrix.python-version == '3.11' && matrix.os == 'ubuntu-latest'
+        if: matrix.python-version == '3.12' && matrix.os == 'ubuntu-latest'
         run: |
           pytest --cov=. --cov-report=xml --cov-report=term -m "not integration"
 
       - name: Upload coverage to Codecov
-        if: matrix.python-version == '3.11' && matrix.os == 'ubuntu-latest'
+        if: matrix.python-version == '3.12' && matrix.os == 'ubuntu-latest'
         uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v5
         with:
           file: coverage.xml
           fail_ci_if_error: false
 
       - name: Run pip-audit (report only)
-        if: matrix.python-version == '3.11' && matrix.os == 'ubuntu-latest'
+        if: matrix.python-version == '3.12' && matrix.os == 'ubuntu-latest'
         run: |
           pip-audit -r requirements.txt --format json --output pip-audit-report.json || true
         # Non-blocking: full output captured as artifact for reviewers.
 
       - name: Upload pip-audit report
-        if: matrix.python-version == '3.11' && matrix.os == 'ubuntu-latest'
+        if: matrix.python-version == '3.12' && matrix.os == 'ubuntu-latest'
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: pip-audit-report
@@ -205,10 +252,34 @@ jobs:
       # `pip-audit -r requirements.txt` reports no known vulnerabilities. The
       # report-only artifact step above still runs for the full JSON snapshot.
       - name: Audit dependencies for vulnerabilities
-        if: matrix.python-version == '3.11' && matrix.os == 'ubuntu-latest'
+        if: matrix.python-version == '3.12' && matrix.os == 'ubuntu-latest'
         run: |
           pip-audit -r requirements.txt
 
+  npm-wrapper:
+    name: npm wrapper tests
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    concurrency:
+      group: npm-wrapper-${{ github.event.pull_request.number || github.run_id }}
+      cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Setup Node
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        with:
+          node-version: 22
+
+      - name: Install and test npm wrapper
+        working-directory: npm
+        run: |
+          npm install --no-audit --no-fund
+          npm test
+
   # TST-FT-002: nightly Hypothesis fuzzing. Runs on schedule (Mon/Wed/Fri 09:00
   # UTC) or manually via workflow_dispatch. Never runs on push/PR — nightly-only.
   # On failure, opens a tracking issue via actions/github-script.
@@ -229,7 +300,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
-          python-version: '3.11'
+          python-version: '3.12'
           cache: 'pip'
           cache-dependency-path: 'requirements*.txt'
 
@@ -292,7 +363,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
-          python-version: '3.11'
+          python-version: '3.12'
           cache: 'pip'
           cache-dependency-path: 'requirements*.txt'
 
@@ -338,14 +409,26 @@ jobs:
         continue-on-error: true  # Integration tests may be flaky
 
   docker:
-    name: Docker Build
+    name: Docker ${{ matrix.target }}
     runs-on: ubuntu-latest
     needs: test
     # CT-B-011: docker buildx + gha cache; 20 min covers a cold-cache build.
     timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - target: mcp-gateway
+            tag: tool-compass:test-gateway
+            port: 8080
+            smoke: health
+          - target: production
+            tag: tool-compass:test-ui
+            port: 7860
+            smoke: bind
     # PR-scoped concurrency (see workflow-top NOTE).
     concurrency:
-      group: docker-${{ github.event.pull_request.number || github.run_id }}
+      group: docker-${{ matrix.target }}-${{ github.event.pull_request.number || github.run_id }}
       cancel-in-progress: ${{ github.event_name == 'pull_request' }}
     permissions:
       contents: read
@@ -355,16 +438,45 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
       - name: Build Docker image
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
         with:
           context: .
+          target: ${{ matrix.target }}
           push: false
-          tags: tool-compass:test
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          load: true
+          tags: ${{ matrix.tag }}
+          cache-from: type=gha,scope=ci-${{ matrix.target }}
+          cache-to: type=gha,mode=max,scope=ci-${{ matrix.target }}
+
+      - name: Smoke run
+        run: |
+          set -euo pipefail
+          docker run -d --name tc-smoke -p ${{ matrix.port }}:${{ matrix.port }} ${{ matrix.tag }}
+          cleanup() { docker logs tc-smoke || true; docker rm -f tc-smoke || true; }
+          trap cleanup EXIT
+          for _ in $(seq 1 45); do
+            if [ "${{ matrix.smoke }}" = "health" ]; then
+              if curl -sf "http://127.0.0.1:${{ matrix.port }}/health"; then
+                echo "gateway /health ok"
+                exit 0
+              fi
+            else
+              # Bind smoke: any HTTP response (or even a reset after accept)
+              # means the UI process bound 7860. Do not use curl -f — Gradio
+              # may 4xx before the app is fully ready.
+              if curl -sS --connect-timeout 2 -o /dev/null \
+                   "http://127.0.0.1:${{ matrix.port }}/"; then
+                echo "ui port ${{ matrix.port }} bound"
+                exit 0
+              fi
+            fi
+            sleep 2
+          done
+          echo "::error::docker smoke (${{ matrix.target }}) did not become ready on port ${{ matrix.port }}"
+          exit 1
 
   # ===========================================================================
   # GitHub Pages build + deploy (folded in from former pages.yml)
@@ -425,4 +537,4 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
       - id: deployment
-        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
+        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1

{tool_compass-2.5.0 → tool_compass-2.5.2}/.github/workflows/publish.yml

@@ -60,7 +60,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
-          python-version: '3.11'
+          python-version: '3.12'
 
       - name: Install build tools
         run: |
@@ -107,7 +107,7 @@ jobs:
           path: dist/
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
         with:
           # CT-B-009: emit SLSA build provenance attestations for the wheel
           # and sdist. PyPI verifies the attestation against the workflow's
@@ -116,7 +116,7 @@ jobs:
           attestations: true
 
   docker:
-    name: Publish to GHCR
+    name: Publish ${{ matrix.stage }} to GHCR
     runs-on: ubuntu-latest
     # PyPI ships first (CDS-B-005). If PyPI fails, Docker must not ship a
     # half-release; if PyPI succeeds, Docker becomes the recoverable tail.
@@ -124,6 +124,16 @@ jobs:
     # CT-B-011: multi-arch buildx (linux/amd64 + linux/arm64) + push to GHCR
     # is the longest leg; 30 min covers the warm cache path with headroom.
     timeout-minutes: 30
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          # mcp-gateway is the last Dockerfile stage; pin it explicitly so a
+          # later debug/sbom stage cannot silently retarget :latest.
+          - stage: gateway
+            target: mcp-gateway
+          - stage: ui
+            target: production
     permissions:
       contents: read
       packages: write
@@ -142,7 +152,7 @@ jobs:
           ref: ${{ github.event.workflow_run.head_branch || github.event.release.tag_name || github.ref_name }}
 
       - name: Log in to GHCR
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -164,43 +174,52 @@ jobs:
           V="${REF#v}"
           echo "version=${V}" >> "$GITHUB_OUTPUT"
           echo "major_minor=$(echo "$V" | cut -d. -f1-2)" >> "$GITHUB_OUTPUT"
-          echo "resolved=${V} (event=${{ github.event_name }} ref=${REF})"
+          echo "resolved=${V} (event=${{ github.event_name }} ref=${REF} stage=${{ matrix.stage }})"
 
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          flavor: |
+            latest=false
           # type=raw from the explicitly-resolved version (see Resolve step) —
           # NOT type=semver, which silently emits nothing under workflow_run
           # because github.ref is main, not the tag. Each enable=... gates its
           # raw tag so an empty/missing version never pushes a bogus tag.
+          # Gateway: :latest :gateway :X.Y.Z :X.Y
+          # UI:      :ui :ui-X.Y.Z
           tags: |
-            type=raw,value=${{ steps.ver.outputs.version }},enable=${{ steps.ver.outputs.version != '' }}
-            type=raw,value=${{ steps.ver.outputs.major_minor }},enable=${{ steps.ver.outputs.major_minor != '' }}
-            type=sha
-            type=raw,value=latest,enable={{is_default_branch}}
+            type=raw,value=${{ steps.ver.outputs.version }},enable=${{ matrix.stage == 'gateway' && steps.ver.outputs.version != '' }}
+            type=raw,value=${{ steps.ver.outputs.major_minor }},enable=${{ matrix.stage == 'gateway' && steps.ver.outputs.major_minor != '' }}
+            type=raw,value=latest,enable=${{ matrix.stage == 'gateway' }}
+            type=raw,value=gateway,enable=${{ matrix.stage == 'gateway' }}
+            type=sha,enable=${{ matrix.stage == 'gateway' }}
+            type=raw,value=ui-${{ steps.ver.outputs.version }},enable=${{ matrix.stage == 'ui' && steps.ver.outputs.version != '' }}
+            type=raw,value=ui,enable=${{ matrix.stage == 'ui' }}
+            type=sha,prefix=ui-,enable=${{ matrix.stage == 'ui' }}
 
       # QEMU is required to cross-build linux/arm64 from an amd64 runner.
       - name: Set up QEMU
         # SHA-pinned per SLSA L3 supply-chain hygiene (CT-B-002). publish job
         # carries packages:write — a compromised mutable v3 tag would inherit
         # GHCR write capability during a release window. Bump via dependabot.
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+        uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
       - name: Build and push
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
         with:
           context: .
+          target: ${{ matrix.target }}
           push: true
           platforms: linux/amd64,linux/arm64
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          cache-from: type=gha,scope=ghcr-${{ matrix.target }}
+          cache-to: type=gha,mode=max,scope=ghcr-${{ matrix.target }}
           # CT-B-009: SLSA provenance mode=max emits buildx provenance
           # attestation (including all input source digests) attached to the
           # image manifest. sbom: true emits an SPDX SBOM attestation in the
@@ -234,7 +253,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
-          python-version: '3.11'
+          python-version: '3.12'
 
       - name: PyPI smoke — install + --version matches tag
         run: |
@@ -264,22 +283,30 @@ jobs:
           }
 
       - name: Log in to GHCR (pull)
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Docker smoke — pull + --version matches tag
+      - name: Docker smoke — pull gateway + UI, --version matches tag
         run: |
           set -euo pipefail
           TAG="${{ steps.ver.outputs.tag }}"
           VERSION="${{ steps.ver.outputs.version }}"
-          IMAGE="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${VERSION}"
-          docker pull "$IMAGE"
-          OUT="$(docker run --rm --entrypoint tool-compass "$IMAGE" --version 2>&1 || true)"
-          echo "docker --version → $OUT"
+          GATEWAY="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${VERSION}"
+          UI="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:ui-${VERSION}"
+          docker pull "$GATEWAY"
+          docker pull "$UI"
+          OUT="$(docker run --rm --entrypoint tool-compass "$GATEWAY" --version 2>&1 || true)"
+          echo "docker gateway --version → $OUT"
           echo "$OUT" | grep -Fq "${VERSION}" || {
-            echo "::error::Docker smoke failed: --version output did not contain ${VERSION}"
+            echo "::error::Docker gateway smoke failed: --version output did not contain ${VERSION}"
+            exit 1
+          }
+          OUT_UI="$(docker run --rm --entrypoint tool-compass "$UI" --version 2>&1 || true)"
+          echo "docker ui --version → $OUT_UI"
+          echo "$OUT_UI" | grep -Fq "${VERSION}" || {
+            echo "::error::Docker UI smoke failed: --version output did not contain ${VERSION}"
             exit 1
           }