feat: +ae context primitive - Agentic Entrepreneurship as first-class tool

.github/workflows/glocal-integrity.yml

@@ -0,0 +1,37 @@
+name: Glocal Integrity
+
+on:
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - "contest-submission/**"
+      - "scripts/verify_submission_integrity.py"
+      - "scripts/glocal_context_map.py"
+      - "glocal-monorepo.json"
+      - ".github/workflows/glocal-integrity.yml"
+  push:
+    branches: ["main"]
+    paths:
+      - "contest-submission/**"
+      - "scripts/verify_submission_integrity.py"
+      - "scripts/glocal_context_map.py"
+      - "glocal-monorepo.json"
+      - ".github/workflows/glocal-integrity.yml"
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - name: Verify Submission Integrity
+        run: python scripts/verify_submission_integrity.py
+      - name: Emit Glocal Context Map
+        run: python scripts/glocal_context_map.py > glocal-context-map.json
+      - name: Upload Context Map Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: glocal-context-map
+          path: glocal-context-map.json

.gitignore

@@ -53,3 +53,13 @@ environments/benchmarks/evals/
 
 # Release script temp files
 .release_notes.md
+
+# Vendored / nested third-party source trees (not first-party, large)
+tools/vlc/
+llm-bench-rig/
+media/
+movies/
+
+# mesh pairing runtime artifacts
+mesh_peers.json
+media/qrcodes/

.gitmodules

@@ -4,3 +4,6 @@
 [submodule "tinker-atropos"]
 	path = tinker-atropos
 	url = https://github.com/nousresearch/tinker-atropos
+[submodule "gpu-mcp"]
+	path = gpu-mcp
+	url = https://github.com/MYaelMendez/gpu-mcp.git

.vscode/extensions.json

@@ -0,0 +1,12 @@
+{
+    "recommendations": [
+        "ms-python.python",
+        "ms-python.vscode-pylance",
+        "ms-azuretools.vscode-docker",
+        "eamodio.gitlens",
+        "rust-lang.rust-analyzer",
+        "github.vscode-github-actions",
+        "github.copilot",
+        "github.copilot-chat"
+    ]
+}

.vscode/mcp.json

@@ -0,0 +1,37 @@
+{
+    "mcp.servers": {
+        "filesystem": {
+            "command": "npx",
+            "args": [
+                "--",
+                "-y",
+                "@modelcontextprotocol/server-filesystem",
+                "C:\\æ"
+            ]
+        },
+        "exec": {
+            "command": "npx",
+            "args": [
+                "--",
+                "-y",
+                "@modelcontextprotocol/server-exec"
+            ]
+        },
+        "search": {
+            "command": "npx",
+            "args": [
+                "--",
+                "-y",
+                "@modelcontextprotocol/server-search"
+            ]
+        },
+        "playwright": {
+            "command": "npx",
+            "args": [
+                "--",
+                "-y",
+                "@executeautomation/playwright-mcp-server@1.0.12"
+            ]
+        }
+    }
+}

.vscode/settings.json

@@ -0,0 +1,15 @@
+{
+    "files.autoSave": "afterDelay",
+    "terminal.integrated.defaultProfile.windows": "bash",
+    "terminal.integrated.profiles.windows": {
+        "bash": {
+            "path": "C:\\Program Files\\Git\\bin\\bash.exe",
+            "args": [],
+            "env": {}
+        }
+    },
+    "editor.minimap.enabled": true,
+    "chat.viewSessions.orientation": "stacked",
+    "window.commandCenter": true,
+    "telemetry.telemetryLevel": "off"
+}

CAPABILITIES.md

@@ -0,0 +1,76 @@
+# Hermes Viewport Computer — Capabilities
+
+## Runtime
+
+- **Conductor dispatcher** — deterministic `SchemeDispatcher` in `hermes_cli/conductor.py`
+- **Private client runtime** — bounded sovereign subagent surface (`pc://`)
+- **FastAPI bridge** — backend daemon on port `7860`
+- **Standalone viewport** — HTML shell on port `5173`
+
+## Omniverse Surfaces
+
+- `templates/omniverse.html` — NVIDIA Omniverse viewport shell
+  - Terminal prompt surfaces as `h://` globally
+  - Tab order: terminal, omniverse, monaco, media, entrepreneur
+- `omniverse://` — NVIDIA Omniverse mesh surface
+- `+æ://identity` — bounded mesh identity (`kind: bounded_private_client_mesh`)
+- `pc://mesh/global/<id>` / `pc://mesh/user/<user_id>/<id>` — per-user/global QR-addressable nodes
+- `templates/æ.html` — Omniverse-ready sovereign viewport shell
+  - Terminal prompt surfaces as `h://` globally
+  - Tab order: terminal, monaco, media, entrepreneur, stack, business, apis
+  - Monaco via `HermesSurface.dispatch/hydrate`
+- `apps/reachy/hermes-monaco.js` — standalone Monaco editor surface with CDN loader
+- `h://` / `H://` — global agentic domain, viewport cursor/CLI command prompt
+
+## Media Desktop
+
+- `+æ://media^ffmpeg` — deterministic media/graphics primitive
+- Runtime contract: bounded deterministic loop
+- Stack: Planner/Auditor + FFmpeg executor + manifest + local HTML/CSS surface
+- Supports multimodal media as sovereign private client capability
+
+## Entrepreneur Surface
+
+- `#startabusiness` — formation-ready agent surface
+- Doola-backed revenue primitive
+- Entrepreneuring as first-class bounded local-first private client surface
+
+## Scheme Registry
+
+- `c://cc <target>` — change execution context
+- `H:// <tail>` — global agentic domain
+- `pc://` / `pc://run <name>` / `pc://mesh/...` — private client address/runtime/mesh
+- `mcp://` / `mcp://tools` / `mcp://invoke` — tools surface via MCP
+- `vscode://` — viewport host: VS Code is the runtime surface for the local HTML/CSS/WASM viewport (the `v` in vscode = viewport, the mandate — not Visual Studio). Also reachable as `viewport://` and `hermes viewport open`.
+- `reachy://` — robot/operator surface
+- `NOUS://` — Nous Research provider/runtime
+- `llc://` / `daollc://` — business/governance/identity
+- `intent://` / `+æ://` — intent/permission/supremacy surface
+- `+æ://media^ffmpeg` — media primitive
+- `hermes://` — default runtime
+- `h://` / `h://æ^hub` — global cursor/CLI command prompt in HTML viewports
+
+## Bridge Endpoints
+
+- `POST /conductor` — scheme dispatch + QR mesh
+- `GET /mcp/tools` — tool catalog
+- `POST /mcp/invoke` — bounded tool execution
+- `GET /vscode/status` — control plane health
+- `POST /vscode/open` — open local path
+- `POST /vscode/uri` — open native URI
+
+## Scalar Supremacy
+
+- `_enforce_promote_scalar_supremacy()` in `conductor.py`
+- Blocks bare scalar authority tails before dispatchers mutate state
+- Enforces: most scalable formal implementation supersedes less scalable alternatives
+
+## Skill
+
+- `skills/æ/SKILL.md` — installable sovereign private client mesh primitive
+- Reference docs under `skills/æ/references/`
+
+## Test Coverage
+
+- `tests/hermes_cli/test_conductor.py` — dispatcher policy / overlap / run_pc / scalar supremacy
+- targeted run — 11 passed in targeted conductor verification

OPENSOURCEWARE_250.md

@@ -0,0 +1,75 @@
+# #opensourceware · #osw — THE WORKED EXAMPLE
+
+> **This monorepo is not built *for* #250. It *is* #250 —**
+> the reference example of #opensourceware (#osw): one person, one sovereign
+> stack, proving that agency — not just knowledge — can be open-sourced.
+
+```
+OCW → OSW
+Open CourseWare democratized knowledge.
+Open SourceWare democratizes agency.
+```
+
+## The mission
+
+- **#opensourceware #250** — help start **250 American businesses**.
+- **The challenge** — sponsors help start **250,000**.
+- **The care** — equip new owners with a working sovereign stack, not a slide deck.
+
+## Why this corpus is the example
+
+One operator (一人公司 / one-person company) runs the entire loop locally:
+intent → language → runtime → agent → business. No cloud dependency, no
+remote secrets, no gatekeeper. If it runs here, on one laptop, it runs for
+the next 250 — and the 250,000 after them. That is the proof.
+
+## The stack (the body, by limb)
+
+Every group below is one limb of a single body — the sovereign stack that lets
+one person spin up a business.
+
+| # | Limb | Role | Anchor artifacts |
+|---|------|------|------------------|
+| ① | **æ:// chassis** | agentic-language runtime | `hermes_cli/conductor.py` (aectx router), `qc64_basic.py` (+bæsic://), `mech/` |
+| ② | **vscode surface** | the operator's hands | `vscode-remote-use/` (extension, webLLM → æ:// chassis) |
+| ③ | **hermes runtime** | the brain | `hermes_runtime/`, `hermes_cli/` (dao, media, viewport, gateway) |
+| ④ | **reachy clerk** | the physical agent (Stripe) | `apps/reachy/` |
+| ⑤ | **blueprints** | org / protocol grammar | `blueprints/*.md` (DAO, +æ protocols, mech-lang, reachy) |
+| ⑥ | **HTML surfaces** | the viewports | `templates/*.html`, `landingpage/` |
+| ⑦ | **scripts / tools** | the workshop | `scripts/`, `tools/vlc/`, `crates/`, `pkg/` |
+| ⑧ | **infra / manifests** | the monorepo spine | `monorepo-manifest.json`, `glocal-monorepo.json`, `.github/` |
+
+## The naming ladder (canonical)
+
+```
+#opensourceware #250          →  the mission
+æ://                          →  agentic-language-chassis (aectx router)
+  æ://basic  (+bæsic://)      →  qc64 BASIC chassis (verified runtime)
+  æ://mech                    →  mech-lang reactive dataflow (spec grammar)
+  æ://glocal-agent            →  sovereign local agent → GPU-MCP
+  +æ://cc                     →  command & control surface
+vscode://                     →  viewport HOST (v = viewport, the mandate)
+pc://mesh/victus/local        →  canonical sovereign mesh
+```
+
+## Boundaries (truth over marketing)
+
+- **Verified:** æ:// chassis routes 30 live schemes (23 pytest passed); qc64
+  BASIC runs; vscode extension compiles (tsc clean).
+- **Spec-only:** mech-lang — `mechc` v0.3.5 fails silently on its own tests;
+  Mech is grammar we model against, not a runtime we lean on yet (revisit v0.4).
+- **Local-only:** RTX 3050 6GB, ollama brain, no cloud, no remote secrets.
+
+## Lineage
+
+Every commit in this corpus carries the trailer:
+
+```
+#opensourceware #250
+```
+
+Because when you tell the truth, you don't have to remember anything.
+
+**æ.store — the namespace that connects all of it.**
+
+#hermiphicationisinevitable

PR_BODY.md

@@ -0,0 +1,41 @@
+## Summary
+
+Hermes ships **no CUDA/NVIDIA skill**. This adds the first one, formalizing the `>_n:`
+operator grammar (`>_n: → nvidia (NemoClaw) → compute`, per AGENTS.md) as a concrete,
+agent-addressable GPU compute surface.
+
+Scope:
+- **SKILL.md** — the `>_n:` NemoClaw pattern, `nvidia-smi` host bridge for VS Code webviews,
+  the VS Code webview `file://` pitfall, WebGPU fallback, the `[N/A]`→`n/a` NaN guard, a
+  checkable verification checklist, **and the compiler layer** (nvcc kernels + NVIDIA CUDA
+  Tile IR as the backend under the surface).
+- **references/host-bridge.md** — the full `remoteUse.nvidia` extension handler plus the
+  complete webview↔host message contract.
+- **templates/nvidia-tiles.html** — the shipped green-NVIDIA 6-tile surface (GPU / Compute
+  Path / Processes / Bench / Routes / Envelope).
+
+## Why this belongs upstream
+
+- `mlops/` has no CUDA skill today (only `evaluation`, `huggingface-hub`, `inference`,
+  `models`). Every other major compute path has a skill; CUDA was the gap.
+- It is scoped to the Hermes operator grammar (`>_n:`) and the `remoteUse.*` VS Code surface
+  system, so it slots in beside `optimizing-attention-flash` and the surface-dev skills.
+
+## Verification
+
+- `npm run compile` (tsc) exits 0
+- `pytest secret_source_bridge/tests.py tests/hermes_runtime/test_computer_use.py` → 28/28
+- SKILL.md frontmatter validated (name + ≤1024-char description + version/author/license/metadata)
+- No secrets hardcoded
+- Surface render-verified (headless Edge)
+
+## Related
+
+- CUDA Tile IR (NVIDIA/cuda-tile): https://github.com/NVIDIA/cuda-tile — the MLIR kernel
+  compiler infra that sits under this surface (linked in Resources).
+
+## Test plan
+
+- [ ] `skills_list` / skill loader picks up `mlops/cuda` after a fresh session
+- [ ] `remoteUse.nvidia` opens the NVIDIA Tiles surface and telemetry populates via `nvidia-smi`
+- [ ] `nvcc matmul.cu -o matmul` compiles on a node with the CUDA toolkit (per Workflow 4)

PR_DESCRIPTION.md

@@ -0,0 +1,46 @@
+# Hermes Conductor — Scheme Dispatcher + Operator Grammar
+
+## Summary
+
+Adds a standalone, provider-neutral scheme dispatcher for Hermes intent routing.
+This introduces `SchemeDispatcher` as a compact, testable abstraction for
+operator URI grammar, plus first-class viewport/runtime surface definitions.
+
+## Scope
+
+- `hermes_cli/conductor.py` — refactored to `SchemeDispatcher` with runtime
+  registration, longest-prefix matching, and stable `run_hermes(payload)`
+  contract
+- `tests/hermes_cli/test_conductor.py` — dispatcher policy tests
+- `SPEC.md` — canonical operator grammar spec
+- `CAPABILITIES.md` — runtime/scheme/bridge capabilities
+- `skills/hermes-operator-grammar/SKILL.md` — reusable operator grammar skill
+
+## Behavior
+
+- Registered schemes are matched by longest prefix, not registration order
+- Builtin schemes include: `c://cc`, `pc://`, `pc://run`, `mcp://`,
+  `vscode://`, `reachy://`, `H://`, `hermes://`, `NOUS://`, `llc://`,
+  `daollc://`, `intent://`
+- Unknown input falls back to bounded hermes CLI subprocess execution
+- Returns stable contract: `ok`, `rc`, `stdout`, `stderr`, `surface`, `scheme`
+
+## Verification
+
+```
+python -m pytest tests/hermes_cli/test_conductor.py -q
+# 11 passed
+```
+
+Relevant targeted suite:
+```
+python -m pytest tests/hermes_cli -q -k "not (gateway or systemd or session_browse or update_gateway_restart or update_autostash or test_home_expansion or test_absolute_path_triggers_completion)"
+# 506 passed
+```
+
+## Notes
+
+- 2 pre-existing Windows-only failures remain in `test_path_completion.py`;
+  they are unrelated to this change
+- Rust/WASM crate draft present but not buildable in this environment
+- `contest-submission/` is intentionally untouched outside this PR scope