[staging CI] unslothai/unsloth#7238

.gitattributes

@@ -1,2 +1,13 @@
 # Normalize Python files to LF line endings
 *.py text eol=lf
+
+# Always check out shell scripts with LF endings. Without this rule a Windows
+# clone (core.autocrlf=true) rewrites them to CRLF, and the trailing \r breaks
+# them when run in WSL/Linux (e.g. `set -e` -> "set: Illegal option -").
+*.sh text eol=lf
+
+# Normalize Unsloth frontend sources to LF. Scoped to the frontend tree (rather
+# than repo-wide *.ts/*.tsx/... rules) so the policy can't force LF on files
+# elsewhere. text=auto lets Git detect and leave binary assets (logos, fonts)
+# untouched while text files (.ts/.tsx/.json/.html/.svg/...) are stored as LF.
+studio/frontend/** text=auto eol=lf

.github/CODEOWNERS

@@ -6,10 +6,10 @@
 /unsloth/models/rl_replacements.py @Datta0 @pluesclues @danielhanchen
 /unsloth/trainer.py @danielhanchen
 /unsloth/models/sentence_transformer.py @Etherll @danielhanchen
-/unsloth/save.py @rolandtannous @danielhanchen
+/unsloth/save.py @danielhanchen
 /unsloth/tokenizer_utils.py @mmathew23 @danielhanchen
-/unsloth/chat_templates.py @rolandtannous @danielhanchen
-/unsloth/ollama_template_mappers.py @rolandtannous @danielhanchen
+/unsloth/chat_templates.py @danielhanchen
+/unsloth/ollama_template_mappers.py @danielhanchen
 /unsloth/kernels/moe/*.py @Datta0
 /unsloth/import_fixes.py @danielhanchen
 /unsloth/device_type.py @danielhanchen
@@ -45,14 +45,14 @@
 /unsloth/utils/hf_hub.py @mmathew23
 /unsloth/utils/packing.py @mmathew23
 
-/cli/ @rolandtannous @Manan17
-/studio/frontend/ @Shine1i @rolandtannous @Manan17
+/cli/ @Manan17
+/studio/frontend/ @Shine1i @Manan17
 /studio/frontend/public/ @Shine1i
-/studio/backend/ @rolandtannous
-/studio/backend/core/data_recipe/ @rolandtannous
-/studio/backend/tests/ @rolandtannous @danielhanchen
-/tests/ @rolandtannous @danielhanchen
-/scripts/ @rolandtannous @danielhanchen
+/studio/backend/
+/studio/backend/core/data_recipe/
+/studio/backend/tests/ @danielhanchen
+/tests/ @danielhanchen
+/scripts/ @danielhanchen
 
 # Snapshot data for the notebook linter / Colab oracle. Drift in these
 # files changes the pin floor for every Unsloth notebook, so refreshes

.github/scripts/agent-guides-install.sh

@@ -0,0 +1,108 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-only
+# Copyright 2026-present the Unsloth AI Inc. team. All rights reserved.
+#
+# Install one coding-agent CLI for the Local Agent Guides CI. Isolated as
+# failure class (b) "agent package install failed": npm/curl flakiness here
+# is the single biggest source of false reds, so installs retry with
+# backoff and the only ::error:: this script can emit is class (b). The
+# install recipes mirror the install_hint strings in
+# unsloth_cli/commands/start.py at HEAD.
+#
+# Usage: agent-guides-install.sh <agent>
+#   agent in: claude codex hermes openclaw opencode pi
+set -uo pipefail
+
+AGENT="${1:?usage: agent-guides-install.sh <agent>}"
+mkdir -p logs
+LOG="logs/install-${AGENT}.log"
+
+install_fail() {
+  echo "::error::[agent install failed] agent=${AGENT}: $* (class (b): the agent CLI did not install; not a server or guide problem)." >&2
+  echo "---- tail $LOG ----" >&2
+  tail -60 "$LOG" 2>/dev/null || true
+  exit 1
+}
+
+# npm registry flakiness is common in CI; retry 3x with linear backoff.
+# Extra npm flags may precede the package (e.g. npm_retry --ignore-scripts pkg).
+npm_retry() {
+  local i
+  for i in 1 2 3; do
+    if npm install -g "$@" >> "$LOG" 2>&1; then
+      return 0
+    fi
+    echo "[install] npm install -g $* attempt $i failed; backing off $((i * 10))s" | tee -a "$LOG"
+    sleep "$((i * 10))"
+  done
+  return 1
+}
+
+# curl|bash installers, retried at the curl layer. We download to a temp file
+# first and only execute on a fully successful fetch, so a truncated download
+# (network hiccup mid-stream) can never run a half-written installer.
+curl_bash() {
+  local url="$1"; shift
+  local i tmp
+  tmp="$(mktemp)"
+  for i in 1 2 3; do
+    if curl -fsSL --retry 3 --retry-delay 5 "$url" -o "$tmp" 2>>"$LOG" \
+        && bash "$tmp" "$@" >> "$LOG" 2>&1; then
+      rm -f "$tmp"
+      return 0
+    fi
+    echo "[install] curl|bash $url attempt $i failed; backing off $((i * 10))s" | tee -a "$LOG"
+    sleep "$((i * 10))"
+  done
+  rm -f "$tmp"
+  return 1
+}
+
+echo "[install] agent=$AGENT (log=$LOG)"
+case "$AGENT" in
+  claude)
+    # start.py install_hint: curl -fsSL https://claude.ai/install.sh | bash
+    curl_bash "https://claude.ai/install.sh" || install_fail "claude installer failed"
+    # The installer drops the binary under ~/.local/bin.
+    echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+    ;;
+  codex)
+    # start.py install_hint: npm install -g @openai/codex
+    npm_retry "@openai/codex" || install_fail "npm install -g @openai/codex failed"
+    ;;
+  opencode)
+    # start.py install_hint: npm install -g opencode-ai
+    npm_retry "opencode-ai" || install_fail "npm install -g opencode-ai failed"
+    ;;
+  openclaw)
+    # start.py install_hint: curl -fsSL https://openclaw.ai/install.sh | bash
+    # npm is the more deterministic path in CI and matches the agent's docs;
+    # fall back to the start.py curl installer if the npm tag is missing.
+    if ! npm_retry "openclaw@latest"; then
+      curl_bash "https://openclaw.ai/install.sh" || install_fail "openclaw install failed (npm + curl)"
+      echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+    fi
+    ;;
+  hermes)
+    # start.py install_hint:
+    #   curl -fsSL .../NousResearch/hermes-agent/main/scripts/install.sh | bash
+    curl_bash "https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh" \
+      --non-interactive --skip-setup --skip-browser --no-skills \
+      || install_fail "hermes installer failed"
+    echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+    ;;
+  pi)
+    # start.py install_hint: npm install -g --ignore-scripts @earendil-works/pi-coding-agent
+    # (--ignore-scripts matches Pi's documented recipe; exercising the exact hint
+    # catches guide drift). The CLI moved from the now-deprecated @mariozechner
+    # scope to @earendil-works (the old scope is frozen, so installing it would
+    # test a stale Pi against the API).
+    npm_retry --ignore-scripts "@earendil-works/pi-coding-agent" \
+      || install_fail "npm install -g --ignore-scripts @earendil-works/pi-coding-agent failed"
+    ;;
+  *)
+    install_fail "unknown agent '$AGENT'"
+    ;;
+esac
+
+echo "[install] OK for $AGENT"

.github/scripts/assert-llama-loads.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: AGPL-3.0-only
+# Copyright 2026-present the Unsloth AI Inc. team. All rights reserved.
+#
+# Assert Unsloth installed a llama.cpp that loads and runs on THIS macOS. Tests
+# the contract that matters (binaries load and their minimum-OS is <= this host)
+# instead of the old "did install.sh fall back to a source build?" grep, since a
+# source build with a correct deployment target is a valid outcome.
+set -uo pipefail
+
+UNSLOTH_HOME="${STUDIO_HOME:-$HOME/.unsloth}"
+LLAMA_DIR="${LLAMA_CPP_DIR:-$UNSLOTH_HOME/llama.cpp}"
+BIN_DIR="$LLAMA_DIR/build/bin"
+
+fail() {
+  echo "::error::$*"
+  if [ -f logs/install.log ]; then
+    echo "---- install.log (llama.cpp lines) ----"
+    grep -E "llama-prebuilt|llama\.cpp|macos prebuilt|falling back" logs/install.log | tail -80 || true
+  fi
+  exit 1
+}
+
+SERVER="$(find "$LLAMA_DIR" -type f -name 'llama-server' 2>/dev/null | head -1)"
+QUANT="$(find "$LLAMA_DIR" -type f -name 'llama-quantize' 2>/dev/null | head -1)"
+[ -n "$SERVER" ] || fail "llama-server not found under $LLAMA_DIR after install"
+[ -n "$QUANT" ]  || fail "llama-quantize not found under $LLAMA_DIR after install"
+
+HOST_VER="$(sw_vers -productVersion 2>/dev/null || echo '0')"
+HOST_MAJOR="${HOST_VER%%.*}"
+
+# Static minimum-OS check on every Mach-O we ship. vtool ships with the Xcode
+# command line tools, which GitHub macOS runners always have; if it is somehow
+# missing we skip the static check and rely on the runtime launch below.
+if command -v vtool >/dev/null 2>&1; then
+  while IFS= read -r macho; do
+    [ -n "$macho" ] || continue
+    minos="$(vtool -show-build "$macho" 2>/dev/null | awk '/minos/{print $2; exit}')"
+    [ -n "$minos" ] || continue
+    min_major="${minos%%.*}"
+    if [ "$min_major" -gt "$HOST_MAJOR" ] 2>/dev/null; then
+      fail "$(basename "$macho") is built for macOS $minos but this runner is macOS $HOST_VER (prebuilt is newer than the host)"
+    fi
+  done < <(find "$BIN_DIR" -type f \( -name '*.dylib' -o -name 'llama-server' -o -name 'llama-quantize' \) 2>/dev/null)
+fi
+
+# Runtime launch: --version forces dyld to load every linked dylib (including
+# libggml-metal.dylib). A missing Metal symbol or too-new binary fails here.
+if ! "$SERVER" --version >/tmp/llama-server-version.txt 2>&1; then
+  echo "---- llama-server --version output ----"
+  cat /tmp/llama-server-version.txt || true
+  fail "llama-server failed to launch on macOS $HOST_VER (dyld load / symbol error)"
+fi
+
+echo "llama.cpp load validation passed on macOS $HOST_VER"
+echo "  server: $SERVER"
+sed -n '1,4p' /tmp/llama-server-version.txt 2>/dev/null || true