Merge branch 'pip' into fix/pip-amd-extra

Resolves 85 conflicted files, all of which trace to the branch's pre-commit.ci commit 18673a5 rather than to any change this PR authored. Why the code side takes 'pip': At the merge base the pip branch's [tool.ruff] table had no line-length, so ruff-format fell back to its 88 column default and the pre-commit.ci run reformatted 682 files to 88 columns. Since then 3455b45 ("pip: track main's packaging and tooling config") added line-length = 100 to pip, matching main. The bot commit is therefore churn produced under a tooling config the base branch has since corrected, and re-running the hook on the merged tree reproduces pip's 100 column formatting, not the branch's. It also carries no behaviour: all 682 files it touches are .py, and every one of them is AST identical before and after, so dropping the reformat drops formatting only. The resolved tree is byte identical to pip everywhere except pyproject.toml. pyproject.toml (no textual conflict, but two semantic points): - torch>=2.4.0,<2.11.0 -> <2.12.0 was made independently on both sides, by this PR in cd50f9e and on pip in b22b243, with the identical value. The merged file keeps <2.12.0, so neither side is undone. This also matches the exclusive _TORCH_CEILING="2.12.0" that #7256 introduces in install.sh, which expands to torch>=2.4,<2.12.0. - The huggingfacenotorch and amd extras are this PR's remaining novel content; pip has neither. They are re-applied on top of pip's file. The one deliberate rewrite is huggingfacenotorch's unsloth_zoo floor, from >=2026.7.4 to >=2026.7.6: b22b243 raised every other unsloth_zoo pin on pip to 2026.7.6, and main's own huggingfacenotorch already says 2026.7.6, so keeping 2026.7.4 would have reintroduced a stale floor that the base branch had just retired. The amd extra is unchanged from main. Line level preservation was checked in both directions: all 90477 lines pip added since the merge base survive, and all 26 lines this branch added survive except the single unsloth_zoo floor noted above.
2026-07-27 13:37:06 +00:00 · 2026-07-27 13:37:06 +00:00 · 5ab9e7dbd4
commit 5ab9e7dbd4
parent 18673a562a 735fcde44c
1203 changed files with 98543 additions and 38564 deletions
--- a/.github/workflows/cross-platform-parity-ci.yml
+++ b/.github/workflows/cross-platform-parity-ci.yml
@ -1,18 +1,16 @@
 # SPDX-License-Identifier: AGPL-3.0-only
 # Copyright 2026-present the Unsloth AI Inc. team. All rights reserved.

-# Runs installer parity and autostart opt-out tests on Windows and macOS.
+# Runs installer parity and autostart opt-out tests across all three platforms.
 #
-# Why: that test is the guard that install.sh and install.ps1 stay in
-# sync, but today it only runs on ubuntu-latest (auto-discovered by
-# studio-backend-ci.yml's "Repo tests (CPU)" job). The test reads both
-# installer scripts, and on Windows Path.read_text() defaults to the
-# cp1252 locale encoding, so a non-cp1252 byte in install.sh (it already
-# contains a U+274C) raises UnicodeDecodeError there even though Linux and
-# macOS default to UTF-8. The reads were pinned to encoding="utf-8" in
-# #6166; this job keeps that from silently regressing by exercising the
-# test on the platforms it claims parity for. Pure pytest, no GPU,
-# sub-second, so the matrix is cheap.
+# Why: the parity test guards that install.sh and install.ps1 stay in sync.
+# It originally ran only on ubuntu-latest through studio-backend-ci.yml.
+# On Windows, Path.read_text() defaults to the cp1252 locale encoding, so a
+# non-cp1252 byte in install.sh raises UnicodeDecodeError even though Linux
+# and macOS default to UTF-8. The reads were pinned to encoding="utf-8" in
+# #6166; this matrix keeps that from silently regressing. Pure pytest, no GPU,
+# sub-second, so the matrix is cheap. Linux also runs the POSIX rollback test
+# under dash, matching the supported curl-to-sh installer path.

 name: Cross-platform parity

@ -23,6 +21,8 @@ on:
      - 'install.ps1'
      - 'tests/test_installer_skip_autostart.py'
      - 'tests/python/test_cross_platform_parity.py'
+      - 'tests/sh/test_install_rollback_lifecycle.sh'
+      - 'tests/studio/test_install_rollback_lifecycle.ps1'
      - '.github/workflows/cross-platform-parity-ci.yml'
  push:
    branches: [main]
@ -31,6 +31,8 @@ on:
      - 'install.ps1'
      - 'tests/test_installer_skip_autostart.py'
      - 'tests/python/test_cross_platform_parity.py'
+      - 'tests/sh/test_install_rollback_lifecycle.sh'
+      - 'tests/studio/test_install_rollback_lifecycle.ps1'
      - '.github/workflows/cross-platform-parity-ci.yml'
  workflow_dispatch:

@ -47,7 +49,7 @@ jobs:
    strategy:
      fail-fast: false
      matrix:
-        os: [windows-latest, macos-latest]
+        os: [ubuntu-latest, windows-latest, macos-latest]
    runs-on: ${{ matrix.os }}
    timeout-minutes: 10
    steps:
@ -67,3 +69,10 @@ jobs:
          tests/python/test_cross_platform_parity.py
          tests/test_installer_skip_autostart.py
          -q
+      - name: PowerShell rollback lifecycle tests
+        if: runner.os == 'Windows'
+        shell: pwsh
+        run: pwsh -NoProfile -File tests/studio/test_install_rollback_lifecycle.ps1
+      - name: POSIX rollback lifecycle tests
+        if: runner.os == 'Linux'
+        run: sh tests/sh/test_install_rollback_lifecycle.sh
--- a/.github/workflows/studio-backend-ci.yml
+++ b/.github/workflows/studio-backend-ci.yml
@ -30,6 +30,13 @@ on:
      - 'unsloth/**'
      - 'unsloth_cli/**'
      - 'tests/**'
+      # The root installers: tests/sh/*.sh and tests/studio/install/* assert
+      # against these two files, so a change here must run the suite that
+      # covers it. Without them an install-only edit (the shape most AMD/ROCm
+      # routing fixes take) skipped Backend CI entirely.
+      - 'install.sh'
+      - 'install.ps1'
+      - 'scripts/**'
      - 'pyproject.toml'
      - '.github/workflows/studio-backend-ci.yml'
  push:
@ -193,6 +200,7 @@ jobs:
            --ignore=tests/sh \
            --ignore=tests/studio/test_hardware_dispatch_matrix.py \
            --ignore=tests/studio/test_is_mlx_dispatch_gate.py \
+            --ignore=tests/studio/test_xpu_spoof_pipeline.py \
            --ignore=tests/vllm_compat \
            --ignore=tests/version_compat \
            -m 'not server and not e2e' \
@ -205,36 +213,43 @@ jobs:
        env:
          PYTHONPATH: ${{ github.workspace }}/studio
          UNSLOTH_COMPILE_DISABLE: '1'
-        # These two files mutate hardware.py module globals at runtime
-        # via the spoof fixtures, which leaks state into any other test
-        # that imports hardware. Run them in their own pytest invocation
-        # so the leak does not cross file boundaries.
+        # These files mutate hardware.py module globals at runtime via the
+        # spoof fixtures (CUDA/ROCm/XPU/MLX/CPU), which leaks state into any
+        # other test that imports hardware. Run them in their own pytest
+        # invocation so the leak does not cross file boundaries.
        run: |
          python -m pytest -q --tb=short \
            tests/studio/test_hardware_dispatch_matrix.py \
-            tests/studio/test_is_mlx_dispatch_gate.py
+            tests/studio/test_is_mlx_dispatch_gate.py \
+            tests/studio/test_xpu_spoof_pipeline.py

      - name: Shell installer tests
-        # Subset that does not depend on a writable / pristine install.sh
-        # tree; test_install_host_defaults.sh checks install.ps1 layout
-        # which has drifted (separate followup).
+        # Auto-discovered rather than allowlisted. The old hardcoded list had
+        # silently fallen seven files behind tests/run_all.sh, including
+        # test_strixhalo_wsl_reroute.sh -- the only shell coverage of the ROCm
+        # WSL reroute -- so that suite never ran on a PR. Skips are explicit,
+        # each with a reason, and tests/studio/test_ci_shell_suite_coverage.py
+        # fails if this step stops discovering the directory or the skip list
+        # grows without one.
+        #
+        # Skipped:
+        #   test_install_host_defaults.sh: asserts an install.ps1 layout that
+        #     has drifted (separate followup).
+        #   test_install_rollback_lifecycle.sh: already runs on both platforms
+        #     in cross-platform-parity-ci.yml.
        run: |
          set -e
-          for s in \
-              tests/sh/test_get_torch_index_url.sh \
-              tests/sh/test_mac_intel_compat.sh \
-              tests/sh/test_node_decision.sh \
-              tests/sh/test_studio_home_node_dir.sh \
-              tests/sh/test_system_node_readonly.sh \
-              tests/sh/test_nvcc_meets_llama_minimum.sh \
-              tests/sh/test_resolve_cuda_archs.sh \
-              tests/sh/test_tauri_install_exit_order.sh \
-              tests/sh/test_torch_constraint.sh \
-              tests/sh/test_torch_flavor.sh \
-              tests/sh/test_with_llama_cpp_dir_flag.sh \
-              tests/sh/test_with_llama_cpp_dir_link_behavior.sh; do
+          skip="test_install_host_defaults.sh test_install_rollback_lifecycle.sh"
+          found=0
+          for s in tests/sh/test_*.sh; do
+              case " $skip " in
+                  *" $(basename "$s") "*) echo "skipping $s (see workflow comment)"; continue ;;
+              esac
+              found=$((found + 1))
              echo "::group::$s"
              bash "$s"
              echo "::endgroup::"
          done
+          [ "$found" -gt 0 ] || { echo "::error::no shell tests discovered under tests/sh"; exit 1; }
+          echo "ran $found shell installer test files"

--- a/.github/workflows/studio-ui-smoke.yml
+++ b/.github/workflows/studio-ui-smoke.yml
@ -231,12 +231,69 @@ jobs:
          mkdir -p logs/playwright_extra
          python tests/studio/playwright_extra_ui.py

+      - name: UI font size scaling regression (Playwright)
+        env:
+          BASE_URL: http://127.0.0.1:18894
+          STUDIO_PW: ${{ env.STUDIO_EXTRA_NEW_PW }}
+          PW_ART_DIR: logs/playwright_fontscale
+        run: |
+          mkdir -p logs/playwright_fontscale
+          python tests/studio/playwright_ui_font_scale.py
+
      - name: Stop second Unsloth
        if: always()
        run: |
          kill "${STUDIO_EXTRA_PID}" 2>/dev/null || true
          sleep 2

+      # Model-picker per-model-config regression (PR #7207 re-land of #6647).
+      # Fourth Unsloth on its own port; loads the tiny GGUF and drives the
+      # picker's run-settings surface: Context Length persists across a reload,
+      # Reset clears the stored override (never pins it), and the infra models
+      # (RAG embedder + llama.cpp probe) stay hidden from the picker.
+      - name: Reset auth + boot Unsloth for model-config tests (port 18898)
+        run: |
+          unsloth studio reset-password
+          mkdir -p logs
+          UNSLOTH_API_ONLY=1 unsloth studio -H 127.0.0.1 -p 18898 \
+            > logs/studio_modelcfg.log 2>&1 &
+          echo "STUDIO_MODELCFG_PID=$!" >> "$GITHUB_ENV"
+
+      - name: Wait for /api/health on 18898
+        run: |
+          for i in $(seq 1 180); do
+            if curl -fs "http://127.0.0.1:18898/api/health" > /tmp/health4.json; then
+              jq -e '.status == "healthy"' /tmp/health4.json && break
+            fi
+            sleep 1
+          done
+          jq -e '.status == "healthy"' /tmp/health4.json
+
+      - name: Pass bootstrap pw for model-config test
+        run: |
+          NEW="CIModelCfg-$(python -c 'import secrets; print(secrets.token_urlsafe(16))')"
+          echo "::add-mask::$NEW"
+          echo "STUDIO_MODELCFG_NEW_PW=$NEW" >> "$GITHUB_ENV"
+
+      - name: Drive model-picker per-model-config with Playwright
+        env:
+          BASE_URL: http://127.0.0.1:18898
+          STUDIO_NEW_PW: ${{ env.STUDIO_MODELCFG_NEW_PW }}
+          PW_ART_DIR: logs/playwright_modelcfg
+          STUDIO_UI_STRICT: '1'
+          GGUF_REPO: ${{ env.GGUF_REPO }}
+          GGUF_VARIANT: ${{ env.GGUF_VARIANT }}
+          STUDIO_MODEL_HINT: gemma-3-270m
+        run: |
+          mkdir -p logs/playwright_modelcfg
+          python tests/studio/playwright_model_config.py
+
+      - name: Stop fourth Unsloth
+        if: always()
+        run: |
+          kill "${STUDIO_MODELCFG_PID}" 2>/dev/null || true
+          sleep 2
+
      # IME + multilingual paste regression (issue #5318 / PR #5327).
      # Third Unsloth on its own port so a hang here cannot poison the
      # earlier UI tests. No GGUF -- the bug surface is the composer.
@ -297,12 +354,15 @@ jobs:
          path: |
            logs/studio.log
            logs/studio_extra.log
+            logs/studio_modelcfg.log
            logs/studio_ime.log
            logs/install.log
            logs/server-logs/
            logs/playwright
            logs/playwright-permissions-*
            logs/playwright_extra
+            logs/playwright_fontscale
+            logs/playwright_modelcfg
            logs/playwright_ime
            logs/studio-permissions-*.log
          retention-days: 7
--- a/README.md
+++ b/README.md
@ -86,6 +86,13 @@ Replace `claude` with any supported agent:
 | OpenCode | `unsloth start opencode` |
 | Pi Coding Agent | `unsloth start pi` |

+Claude Code, Codex, OpenCode and Pi can keep their current model and use Unsloth as a local
+subagent:
+
+```bash
+unsloth start claude --as-subagent --model unsloth/model-GGUF:quant
+```
+
 ## 📥 Install
 Unsloth can be used in two ways: through **[Unsloth Studio](https://unsloth.ai/docs/new/studio/)**, the web UI, or through **Unsloth Core**, the code-based version. Each has different requirements.

@ -96,7 +103,7 @@ Unsloth Studio (Beta) works on **Windows, Linux, WSL** and **macOS**.
 * **NVIDIA:** Training works on RTX 30/40/50, Blackwell, DGX Spark, Station and more
 * **macOS:** Training, MLX and GGUF inference are ALL supported.
 * **AMD:** Training, RL, chat and deployment work on Windows, WSL and Linux. [Read the AMD guide](https://unsloth.ai/docs/basics/amd).
-* **Vulkan:** GGUF inference is supported on [compatible GPUs, including Intel GPUs](https://github.com/unslothai/unsloth/pull/5819).
+* **Vulkan:** GGUF inference is supported on [compatible GPUs, including Intel GPUs](https://github.com/unslothai/unsloth/pull/5819). Vulkan accelerates GGUF inference only; training still requires a supported PyTorch or MLX backend.
 * **Multi-GPU:** Available now, with a major upgrade on the way

 #### macOS, Linux, WSL:
@ -105,12 +112,28 @@ curl -fsSL https://unsloth.ai/install.sh | sh
 ```
 Use the same command to update.

+To force the Vulkan llama.cpp backend, set `UNSLOTH_FORCE_VULKAN=1` **before installing or updating**. The setting selects the llama.cpp binary bundle, so setting it only when launching Studio cannot replace an existing CPU bundle:
+
+```bash
+export UNSLOTH_FORCE_VULKAN=1
+curl -fsSL https://unsloth.ai/install.sh | sh
+```
+
 #### Windows:
 ```powershell
 irm https://unsloth.ai/install.ps1 | iex
 ```
 Use the same command to update.

+To force the Vulkan llama.cpp backend, set the environment variable before running the installer or updater:
+
+```powershell
+$env:UNSLOTH_FORCE_VULKAN=1
+irm https://unsloth.ai/install.ps1 | iex
+```
+
+Re-running the current installer replaces a previously selected CPU bundle when the backend differs. A separate Vulkan SDK is not required; the GPU driver must provide a working Vulkan runtime.
+
 #### Launch
 ```bash
 unsloth studio -p 8888
@ -256,6 +279,8 @@ unsloth studio -H 0.0.0.0 -p 8888
 ```
 The Cloudflare tunnel is **off by default**: `-H 0.0.0.0` exposes the raw port only, not a public internet URL. Pair the wildcard bind with `--cloudflare` (`unsloth studio -H 0.0.0.0 --cloudflare`) to also publish a public `https://*.trycloudflare.com` link, or prefer `--secure` (above), which keeps the raw port private. `--cloudflare` has no effect on a loopback bind.

+On a wildcard bind Unsloth works out the address to share by asking `ifconfig.me` for the public IP, then asks `check-host.net` whether that port is reachable so it can tell you if a firewall is in the way. Both contact a third party. Set `UNSLOTH_STUDIO_DISABLE_PUBLIC_CHECK=1` to skip them; the banner then shows the LAN address and no reachability line.
+
 The first time Unsloth is published on a public URL (`--secure` or `--cloudflare`) with the auto-generated admin password still in place, it asks for a new admin password in the terminal (masked input with confirmation) before the public link goes up. Without an attached terminal it warns instead and keeps the bootstrap deadline: Unsloth shuts down after `UNSLOTH_STUDIO_BOOTSTRAP_TIMEOUT` (default 1 hour) unless the password is changed in the web UI.

 For headless setups that cannot answer that prompt, set the initial admin password non-interactively with `--password` (only takes effect when no password is set yet; if one already exists it is a hard error, so rotate later with `unsloth studio reset-password`):
--- a/install.ps1
+++ b/install.ps1
@ -1416,13 +1416,82 @@ exit 0
            $suffix++
            $candidate = Join-Path $StudioHome "unsloth_studio.rollback.$stamp.$PID.$suffix"
        }
-        Move-Item -LiteralPath $ExistingDir -Destination $candidate -ErrorAction Stop
        $script:StudioVenvRollbackDir = $candidate
        $script:StudioVenvRollbackTarget = $ExistingDir
        $script:StudioVenvRollbackActive = $true
+        # Publish the rollback state before the atomic rename so interruption
+        # cannot land after Move-Item but before cleanup knows where the old venv went.
+        try {
+            Move-Item -LiteralPath $ExistingDir -Destination $candidate -ErrorAction Stop
+        } catch {
+            # A collision or ordinary rename failure leaves the original in place.
+            # Keep state active only when the rename happened before interruption.
+            if (Test-Path -LiteralPath $ExistingDir) {
+                $script:StudioVenvRollbackActive = $false
+                $script:StudioVenvRollbackDir = $null
+            }
+            throw
+        }
        substep "previous environment preserved for rollback"
    }

+    function Remove-StudioVenvTreeWithRetry {
+        param(
+            [Parameter(Mandatory = $true)][string]$Path,
+            [Parameter(Mandatory = $true)][string]$Label
+        )
+        $lastError = $null
+        for ($attempt = 1; $attempt -le 3; $attempt++) {
+            try {
+                Remove-Item -LiteralPath $Path -Recurse -Force -ErrorAction Stop
+            } catch {
+                $lastError = $_.Exception.Message
+            }
+            if (-not (Test-Path -LiteralPath $Path)) { return $true }
+            if ($attempt -lt 3) { Start-Sleep -Milliseconds (250 * $attempt) }
+        }
+        Write-Host "[WARN] Could not remove $Label at $Path" -ForegroundColor Yellow
+        if ($lastError) { Write-Host "       $lastError" -ForegroundColor Yellow }
+        return $false
+    }
+
+    function Test-StudioVenvRollbackMustBePreserved {
+        param([Parameter(Mandatory = $true)][System.IO.FileSystemInfo]$Rollback)
+        # Preserve anything outside the installer's timestamp.PID[.suffix] format.
+        if ($Rollback.Name -notmatch '^unsloth_studio\.rollback\.[0-9]{14}\.([0-9]+)(?:\.[0-9]+)?$') {
+            return $true
+        }
+        $ownerPid = 0
+        if (-not [int]::TryParse($Matches[1], [ref]$ownerPid)) { return $true }
+        if ($ownerPid -eq $PID) { return $true }
+        return $null -ne (Get-Process -Id $ownerPid -ErrorAction SilentlyContinue)
+    }
+
+    function Remove-StaleStudioVenvRollbacks {
+        try {
+            $rollbacks = @(
+                Get-ChildItem -LiteralPath $StudioHome -Directory -Force -ErrorAction Stop |
+                    Where-Object { $_.Name -like 'unsloth_studio.rollback.*' }
+            )
+        } catch {
+            Write-Host "[WARN] Could not inspect stale environment rollbacks in $StudioHome" -ForegroundColor Yellow
+            Write-Host "       $($_.Exception.Message)" -ForegroundColor Yellow
+            return
+        }
+        foreach ($rollback in $rollbacks) {
+            if (($rollback.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) {
+                Write-Host "[WARN] Refusing to remove rollback reparse point $($rollback.FullName)" -ForegroundColor Yellow
+                continue
+            }
+            # A concurrent installer may have moved its live venv aside. The PID
+            # in the generated name keeps this run from deleting its rescue copy.
+            if (Test-StudioVenvRollbackMustBePreserved -Rollback $rollback) { continue }
+            if (Remove-StudioVenvTreeWithRetry -Path $rollback.FullName -Label "stale environment rollback") {
+                substep "removed stale environment rollback $($rollback.Name)"
+            }
+        }
+    }
+
    function Restore-StudioVenvRollback {
        if (-not $script:StudioVenvRollbackActive) { return }
        $backup = $script:StudioVenvRollbackDir
@ -1434,7 +1503,9 @@ exit 0
        substep "restoring previous environment after failed install..." "Yellow"
        try {
            if (Test-Path -LiteralPath $target) {
-                Remove-Item -LiteralPath $target -Recurse -Force -ErrorAction SilentlyContinue
+                if (-not (Remove-StudioVenvTreeWithRetry -Path $target -Label "incomplete environment")) {
+                    throw "Could not remove incomplete environment at $target"
+                }
            }
            Move-Item -LiteralPath $backup -Destination $target -Force -ErrorAction Stop
            substep "restored previous environment"
@ -1449,13 +1520,17 @@ exit 0
    function Complete-StudioVenvRollback {
        if (-not $script:StudioVenvRollbackActive) { return }
        $backup = $script:StudioVenvRollbackDir
-        if ($backup -and (Test-Path -LiteralPath $backup)) {
-            Remove-Item -LiteralPath $backup -Recurse -Force -ErrorAction SilentlyContinue
-        }
+        # The replacement is committed. Disable restoration before deleting the
+        # backup so interruption cannot restore a partially deleted environment.
        $script:StudioVenvRollbackActive = $false
        $script:StudioVenvRollbackDir = $null
+        if ($backup -and (Test-Path -LiteralPath $backup)) {
+            Remove-StudioVenvTreeWithRetry -Path $backup -Label "environment rollback" | Out-Null
+        }
    }

+    $studioVenvReplacementCommitted = $false
+    try {
    if (Test-Path -LiteralPath $VenvPython) {
        # why: matching guard to the .venv branch below -- in env-mode
        # $StudioHome is a user-chosen workspace, so refuse to nuke an
@ -1842,12 +1917,14 @@ exit 0
            #    (gfx120X/110X/1151/1150/103X); unknown names fall back to CPU.
            elseif ($ROCmGpuLabel) {
                $nameArchTable = @(
-                    @{ P = "9070 XT|9080";                                        A = "gfx1201" }  # RDNA 4 (RX 9070 XT / 9080)
-                    @{ P = "9070|9060";                                           A = "gfx1200" }  # RDNA 4 (RX 9070 / 9060)
-                    @{ P = "8060S|8050S|8040S|Strix Halo|Ryzen AI Max|AI Max"; A = "gfx1151" }  # RDNA 3.5 (Strix Halo: Radeon 8060S/8050S/8040S iGPU, Ryzen AI Max+)
-                    @{ P = "890M|880M|860M|840M|Strix Point|Krackan|HX 37[05]|AI 9 HX|AI 9 36[05]|AI 7 35[05]|AI 5 34[05]|AI 7 PRO 35|AI 5 33"; A = "gfx1150" }  # RDNA 3.5 (Strix/Krackan Point: Radeon 890M/880M iGPU, Ryzen AI 9 HX 370/375)
-                    @{ P = "RX 7900|RX 7800|RX 7700(?!S)|PRO W7900|PRO W7800|PRO W7700"; A = "gfx1100" }  # RDNA 3 desktop/workstation (Navi 31)
-                    @{ P = "RX 7600|RX 7700S|RX 7650|PRO W7600|PRO W7500|PRO V710"; A = "gfx1102" }  # RDNA 3 (Navi 33)
+                    @{ P = "9070|9080";                                           A = "gfx1201" }  # RDNA 4 (Navi 48: RX 9070 XT / 9070 GRE / 9070 / 9080)
+                    @{ P = "9060";                                                A = "gfx1200" }  # RDNA 4 (Navi 44: RX 9060 XT / 9060)
+                    @{ P = "8065S|8060S|8050S|8040S|Strix Halo|Ryzen AI Max|AI Max"; A = "gfx1151" }  # RDNA 3.5 (Strix Halo + Gorgon Halo: Radeon 8065S/8060S/8050S/8040S iGPU, Ryzen AI Max / Max+)
+                    @{ P = "890M|880M|Strix Point|HX 37[05]|AI 9 HX|AI 9 36[05]"; A = "gfx1150" }  # RDNA 3.5 (Strix Point: Radeon 890M/880M, Ryzen AI 9 HX 370/375)
+                    @{ P = "860M|840M|Krackan|AI 7 35[05]|AI 5 34[05]|AI 7 PRO 35|AI 5 33"; A = "gfx1152" }  # RDNA 3.5 (Krackan Point: Radeon 860M/840M, Ryzen AI 7 350 / AI 5 340)
+                    @{ P = "RX 7900|PRO W7900|PRO W7800";                         A = "gfx1100" }  # RDNA 3 desktop/workstation (Navi 31)
+                    @{ P = "RX 7800|RX 7700(?!S)|PRO W7700|PRO V710";             A = "gfx1101" }  # RDNA 3 (Navi 32)
+                    @{ P = "RX 7600|RX 7700S|RX 7650|PRO W7600|PRO W7500";        A = "gfx1102" }  # RDNA 3 (Navi 33)
                    @{ P = "780M|760M|740M|Phoenix|Hawk Point|Z1 Extreme|Z2 Extreme"; A = "gfx1103" }  # RDNA 3 iGPU (Phoenix / Hawk Point)
                    @{ P = "RX 6900|RX 6800|RX 6750|RX 6700|PRO W6800|PRO W6900";  A = "gfx1030" }  # RDNA 2 (Navi 21) -- gfx103X family
                    @{ P = "RX 6650|RX 6600|PRO W6600|PRO W6650";                  A = "gfx1032" }  # RDNA 2 (Navi 23) -- gfx103X family
@ -2030,16 +2107,18 @@ exit 0
    # _strip_index_url_credentials (install.sh / py / setup.ps1).
    function Remove-IndexUrlCredentials {
        param([string]$Url)
-        $sep = $Url.IndexOf('://')
+        # Ordinal, not culture-aware: on non-English locales (e.g. th-TH) linguistic
+        # IndexOf treats "://" as ignorable, mis-locates it, and crashes Substring (issue #7279).
+        $sep = $Url.IndexOf('://', [System.StringComparison]::Ordinal)
        if ($sep -lt 0) { return $Url }
        $scheme = $Url.Substring(0, $sep)
        $rest = $Url.Substring($sep + 3)
        # Drop query / fragment (may hold auth tokens).
        $q = $rest.IndexOfAny([char[]]('?', '#'))
        if ($q -ge 0) { $rest = $rest.Substring(0, $q) }
-        $slash = $rest.IndexOf('/')
+        $slash = $rest.IndexOf('/', [System.StringComparison]::Ordinal)
        $authority = if ($slash -ge 0) { $rest.Substring(0, $slash) } else { $rest }
-        $at = $authority.LastIndexOf('@')
+        $at = $authority.LastIndexOf('@', [System.StringComparison]::Ordinal)
        $host_ = if ($at -ge 0) { $authority.Substring($at + 1) } else { $authority }
        if ($slash -ge 0) { return "${scheme}://${host_}$($rest.Substring($slash))" }
        return "${scheme}://${host_}"
@ -2126,8 +2205,13 @@ exit 0
        $archFamilyMap = @{
            "gfx1201" = "gfx120X-all"; "gfx1200" = "gfx120X-all"  # RDNA 4
            "gfx1151" = "gfx1151";     "gfx1150" = "gfx1150"       # RDNA 3.5 (Strix Halo/Point)
+            "gfx1152" = "gfx1152"                                  # RDNA 3.5 (Krackan Point)
            "gfx1103" = "gfx110X-all"; "gfx1102" = "gfx110X-all"   # RDNA 3
            "gfx1101" = "gfx110X-all"; "gfx1100" = "gfx110X-all"
+            "gfx1036" = "gfx103X-all"; "gfx1035" = "gfx103X-all"   # RDNA 2 (RX 6000)
+            "gfx1034" = "gfx103X-all"; "gfx1033" = "gfx103X-all"
+            "gfx1032" = "gfx103X-all"; "gfx1031" = "gfx103X-all"
+            "gfx1030" = "gfx103X-all"
            "gfx90a"  = "gfx90a";      "gfx908"  = "gfx908"        # MI200/MI100
        }
        # gfx120X (RDNA 4) and gfx1151/gfx1150 (Strix) have a null-pointer bug in
@ -2143,6 +2227,7 @@ exit 0
        $torchFloorMap = @{
            "gfx1201" = "torch>=2.11.0,<2.12.0"; "gfx1200" = "torch>=2.11.0,<2.12.0"
            "gfx1151" = "torch>=2.11.0,<2.12.0"; "gfx1150" = "torch>=2.11.0,<2.12.0"
+            "gfx1152" = "torch>=2.11.0,<2.12.0"
        }
        # Companion ranges track the torch ceiling so pip resolves a consistent
        # trio on AMD's per-arch index (each published independently). Mirrors
@ -2150,10 +2235,12 @@ exit 0
        $torchvisionFloorMap = @{
            "gfx1201" = "torchvision>=0.26.0,<0.27.0"; "gfx1200" = "torchvision>=0.26.0,<0.27.0"
            "gfx1151" = "torchvision>=0.26.0,<0.27.0"; "gfx1150" = "torchvision>=0.26.0,<0.27.0"
+            "gfx1152" = "torchvision>=0.26.0,<0.27.0"
        }
        $torchaudioFloorMap = @{
            "gfx1201" = "torchaudio>=2.11.0,<2.12.0"; "gfx1200" = "torchaudio>=2.11.0,<2.12.0"
            "gfx1151" = "torchaudio>=2.11.0,<2.12.0"; "gfx1150" = "torchaudio>=2.11.0,<2.12.0"
+            "gfx1152" = "torchaudio>=2.11.0,<2.12.0"
        }
        $archFamily = if ($ROCmGfxArch -and $archFamilyMap.ContainsKey($ROCmGfxArch)) { $archFamilyMap[$ROCmGfxArch] } else { $null }
        if ($archFamily) {
@ -2183,7 +2270,7 @@ exit 0
            $_pinRocm211 = ([int]$Matches[1] -eq 7 -and [int]$Matches[2] -eq 2)
        }
        # Only the 2.11-allowlist gfx arches need the floor; others publish <2.11 and stay bare.
-        $_pinGfx211 = @('gfx120x-all', 'gfx1151', 'gfx1150') -contains $_pinLeaf
+        $_pinGfx211 = @('gfx120x-all', 'gfx1151', 'gfx1150', 'gfx1152') -contains $_pinLeaf
        if ($_pinGfx211 -or $_pinRocm211) {
            $ROCmIndexUrl = $TorchIndexUrl
            $ROCmTorchFloor = "torch>=2.11.0,<2.12.0"
@ -2266,7 +2353,7 @@ exit 0
        if ($SkipTorch) {
            # No-torch: install unsloth + unsloth-zoo with --no-deps, then
            # runtime deps (typer, safetensors, transformers, etc.) with --no-deps.
-            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth (migrated no-torch)" { uv pip install --python $VenvPython --no-deps --reinstall-package unsloth --reinstall-package unsloth-zoo "unsloth>=2026.7.3" "unsloth-zoo>=2026.7.3" }
+            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth (migrated no-torch)" { uv pip install --python $VenvPython --no-deps --reinstall-package unsloth --reinstall-package unsloth-zoo "unsloth>=2026.7.5" "unsloth-zoo>=2026.7.6" }
            if ($baseInstallExit -eq 0) {
                # Resolve pydantic WITH deps so pip pins pydantic-core
                # to the matching version (no-torch-runtime.txt below
@ -2280,7 +2367,7 @@ exit 0
                }
            }
        } else {
-            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth (migrated)" { uv pip install --python $VenvPython --reinstall-package unsloth --reinstall-package unsloth-zoo "unsloth>=2026.7.3" "unsloth-zoo>=2026.7.3" }
+            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth (migrated)" { uv pip install --python $VenvPython --reinstall-package unsloth --reinstall-package unsloth-zoo "unsloth>=2026.7.5" "unsloth-zoo>=2026.7.6" }
        }
        if ($baseInstallExit -ne 0) {
            Write-Host "[ERROR] Failed to install unsloth (exit code $baseInstallExit)" -ForegroundColor Red
@ -2354,7 +2441,7 @@ exit 0
        if ($SkipTorch) {
            # No-torch: install unsloth + unsloth-zoo with --no-deps, then
            # runtime deps (typer, safetensors, transformers, etc.) with --no-deps.
-            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth (no-torch)" { uv pip install --python $VenvPython --no-deps --upgrade-package unsloth --upgrade-package unsloth-zoo "unsloth>=2026.7.3" "unsloth-zoo>=2026.7.3" }
+            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth (no-torch)" { uv pip install --python $VenvPython --no-deps --upgrade-package unsloth --upgrade-package unsloth-zoo "unsloth>=2026.7.5" "unsloth-zoo>=2026.7.6" }
            if ($baseInstallExit -eq 0) {
                # Same pydantic-with-deps trick as the migrated branch.
                $baseInstallExit = Invoke-InstallCommandRetry -Label "install pydantic" { uv pip install --python $VenvPython pydantic }
@ -2366,7 +2453,7 @@ exit 0
                }
            }
        } elseif ($StudioLocalInstall) {
-            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth (local)" { uv pip install --python $VenvPython --upgrade-package unsloth "unsloth>=2026.7.3" "unsloth-zoo>=2026.7.3" }
+            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth (local)" { uv pip install --python $VenvPython --upgrade-package unsloth "unsloth>=2026.7.5" "unsloth-zoo>=2026.7.6" }
        } else {
            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth" { uv pip install --python $VenvPython --upgrade-package unsloth -- "$PackageName" }
        }
@ -2394,7 +2481,7 @@ exit 0
        Write-TauriLog "STEP" "Installing unsloth"
        substep "installing unsloth (this may take a few minutes)..."
        if ($StudioLocalInstall) {
-            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth (auto torch backend)" { uv pip install --python $VenvPython "unsloth-zoo>=2026.7.3" "unsloth>=2026.7.3" --torch-backend=auto }
+            $baseInstallExit = Invoke-InstallCommandRetry -Label "install unsloth (auto torch backend)" { uv pip install --python $VenvPython "unsloth-zoo>=2026.7.6" "unsloth>=2026.7.5" --torch-backend=auto }
            if ($baseInstallExit -ne 0) {
                Write-Host "[ERROR] Failed to install unsloth (exit code $baseInstallExit)" -ForegroundColor Red
                return (Exit-InstallFailure "Failed to install unsloth (exit code $baseInstallExit)" $baseInstallExit)
@ -2420,6 +2507,13 @@ exit 0
        }
    }

+    $installedPackageVersion = (& $VenvPython -c "from importlib.metadata import version; import sys; print(version(sys.argv[1]))" $PackageName 2>$null | Out-String).Trim()
+    if ($LASTEXITCODE -eq 0 -and $installedPackageVersion) {
+        step $PackageName "$installedPackageVersion installed"
+    } else {
+        substep "[WARN] installed $PackageName version could not be determined" "Yellow"
+    }
+
    # ── Enforce the installed torch flavor matches the detected GPU build ──
    # PEP 440 ignores the +cpu/+cuXXX/+rocm local label in a version range, so uv
    # keeps a stale torch==X+cpu against a CUDA index and setup.ps1 then loops on
@ -2675,6 +2769,13 @@ exit 0
    }
    Refresh-SessionPath  # sync current session with registry
    Complete-StudioVenvRollback
+    $studioVenvReplacementCommitted = $true
+    Remove-StaleStudioVenvRollbacks
+    } finally {
+        if (-not $studioVenvReplacementCommitted) {
+            Restore-StudioVenvRollback
+        }
+    }

    # Env-mode session export AFTER Refresh-SessionPath; otherwise a legacy
    # User PATH entry (Machine > User > current $env:Path) would win.
--- a/install.sh
+++ b/install.sh
@ -475,14 +475,20 @@ _start_studio_venv_replacement() {
    _stamp=$(date +%Y%m%d%H%M%S 2>/dev/null || echo "time")
    _candidate="$STUDIO_HOME/unsloth_studio.rollback.$_stamp.$$"
    _suffix=0
-    while [ -e "$_candidate" ]; do
+    while [ -e "$_candidate" ] || [ -L "$_candidate" ]; do
        _suffix=$((_suffix + 1))
        _candidate="$STUDIO_HOME/unsloth_studio.rollback.$_stamp.$$.$_suffix"
    done
-    mv "$_existing_dir" "$_candidate"
    _VENV_ROLLBACK_DIR="$_candidate"
    _VENV_ROLLBACK_TARGET="$_existing_dir"
    _VENV_ROLLBACK_ACTIVE=true
+    # Publish the rollback state before the atomic rename so a signal cannot
+    # land after mv but before the exit handlers know where the old venv went.
+    if ! mv "$_existing_dir" "$_candidate"; then
+        _VENV_ROLLBACK_ACTIVE=false
+        _VENV_ROLLBACK_DIR=""
+        return 1
+    fi
    substep "previous environment preserved for rollback"
 }

@ -503,13 +509,68 @@ _restore_studio_venv_replacement() {
    fi
 }

-_commit_studio_venv_replacement() {
-    [ "$_VENV_ROLLBACK_ACTIVE" = true ] || return 0
-    if [ -n "$_VENV_ROLLBACK_DIR" ] && [ -d "$_VENV_ROLLBACK_DIR" ]; then
-        rm -rf "$_VENV_ROLLBACK_DIR" || true
+_studio_venv_rollback_must_be_preserved() {
+    _rollback_name=${1##*/}
+    _rollback_metadata=${_rollback_name#unsloth_studio.rollback.}
+    _rollback_stamp=${_rollback_metadata%%.*}
+    _rollback_process=${_rollback_metadata#*.}
+    # Preserve anything outside the installer's timestamp.PID[.suffix] format.
+    [ "$_rollback_process" != "$_rollback_metadata" ] || return 0
+    case "$_rollback_stamp" in
+        time) ;;
+        ''|*[!0-9]*) return 0 ;;
+        *) [ "${#_rollback_stamp}" -eq 14 ] || return 0 ;;
+    esac
+    _rollback_pid=${_rollback_process%%.*}
+    case "$_rollback_pid" in
+        ''|*[!0-9]*) return 0 ;;
+    esac
+    _rollback_suffix=${_rollback_process#*.}
+    if [ "$_rollback_suffix" != "$_rollback_process" ]; then
+        case "$_rollback_suffix" in ''|*[!0-9]*) return 0 ;; esac
    fi
-    _VENV_ROLLBACK_ACTIVE=false
-    _VENV_ROLLBACK_DIR=""
+    kill -0 "$_rollback_pid" 2>/dev/null
+}
+
+_prune_stale_studio_venv_rollbacks() {
+    for _stale_rollback in "$STUDIO_HOME"/unsloth_studio.rollback.*; do
+        [ -d "$_stale_rollback" ] || continue
+        if [ -L "$_stale_rollback" ]; then
+            echo "⚠️  Refusing to remove rollback symlink $_stale_rollback" >&2
+            continue
+        fi
+        # A concurrent installer may have moved its live venv aside. The PID in
+        # the generated name keeps this successful run from deleting its rescue copy.
+        _studio_venv_rollback_must_be_preserved "$_stale_rollback" && continue
+        if rm -rf "$_stale_rollback"; then
+            substep "removed stale environment rollback ${_stale_rollback##*/}"
+        else
+            echo "⚠️  Could not remove stale environment rollback $_stale_rollback" >&2
+        fi
+    done
+}
+
+_commit_studio_venv_replacement() {
+    if [ "$_VENV_ROLLBACK_ACTIVE" = true ]; then
+        _rollback_to_remove="$_VENV_ROLLBACK_DIR"
+        # The new environment is already committed. Clear the restore state
+        # before deletion so an interrupt cannot replace it with a half-deleted backup.
+        _VENV_ROLLBACK_ACTIVE=false
+        _VENV_ROLLBACK_DIR=""
+        if [ -n "$_rollback_to_remove" ] && [ -d "$_rollback_to_remove" ]; then
+            if ! rm -rf "$_rollback_to_remove"; then
+                echo "⚠️  Could not remove environment rollback $_rollback_to_remove" >&2
+            fi
+        fi
+    fi
+    # Only prune older orphaned copies after the replacement has succeeded, so
+    # an interrupted install never discards the last known-good environment.
+    _prune_stale_studio_venv_rollbacks
+}
+
+_cleanup_install_temporaries() {
+    [ -n "${_UV_OVERRIDE_TMPDIR:-}" ] && rm -rf "$_UV_OVERRIDE_TMPDIR" 2>/dev/null || true
+    [ -n "${_UNSLOTH_TORCH_OVERRIDES:-}" ] && rm -f "$_UNSLOTH_TORCH_OVERRIDES" 2>/dev/null || true
 }

 _on_install_exit() {
@ -517,15 +578,28 @@ _on_install_exit() {
    if [ "$_status" -ne 0 ]; then
        _restore_studio_venv_replacement
    fi
-    [ -n "${_UV_OVERRIDE_TMPDIR:-}" ] && rm -rf "$_UV_OVERRIDE_TMPDIR" 2>/dev/null || true
-    [ -n "${_UNSLOTH_TORCH_OVERRIDES:-}" ] && rm -f "$_UNSLOTH_TORCH_OVERRIDES" 2>/dev/null || true
+    _cleanup_install_temporaries
    exit "$_status"
 }
+
+_on_install_signal() {
+    _signal_status="$1"
+    # EXIT is disabled to avoid a second cleanup pass. Ignore further termination
+    # signals until the old environment is back in place.
+    trap - EXIT
+    trap '' HUP INT TERM
+    _restore_studio_venv_replacement
+    _cleanup_install_temporaries
+    exit "$_signal_status"
+}
 # Empty so an inherited value never reaches the trap's rm; only temp paths this
 # script creates below (spaced-path dir, torch-trio overrides) are removed.
 _UV_OVERRIDE_TMPDIR=""
 _UNSLOTH_TORCH_OVERRIDES=""
 trap _on_install_exit EXIT
+trap '_on_install_signal 129' HUP
+trap '_on_install_signal 130' INT
+trap '_on_install_signal 143' TERM

 # ── Helper: download a URL to a file (supports curl and wget) ──
 download() {
@ -551,6 +625,45 @@ _is_pkg_installed() {
    esac
 }

+# ── Helper: human-readable apt distro label for the sudo package prompt (#6207) ──
+# Reads /etc/os-release so the Accept? prompt can say which distro we detected and
+# that packages come from that distro's official apt repos (not a tarball).
+_apt_distro_description() {
+    # Plain ( ... ) subshell — not $() — so case/;; stays bash-3.2-safe on macOS.
+    # Bash 3.2 misparses case arms inside command substitution and errors on `;;`.
+    (
+        if [ ! -r /etc/os-release ]; then
+            printf 'a debian-like system'
+            exit 0
+        fi
+        # shellcheck disable=SC1091
+        . /etc/os-release 2>/dev/null || true
+        if [ -n "${NAME:-}" ] && [ -n "${VERSION_ID:-}" ]; then
+            _ad_label="$NAME $VERSION_ID"
+        elif [ -n "${PRETTY_NAME:-}" ]; then
+            _ad_label="$PRETTY_NAME"
+        elif [ -n "${NAME:-}" ]; then
+            _ad_label="$NAME"
+        else
+            printf 'a debian-like system'
+            exit 0
+        fi
+        case " ${ID:-} ${ID_LIKE:-} " in
+            *" debian "*|*" ubuntu "*) _ad_label="${_ad_label} (debian-like)" ;;
+        esac
+        printf '%s' "$_ad_label"
+    )
+}
+
+# ── Helper: can the controlling terminal actually be opened for reading? ──
+# `test -r` only checks permission bits, which look fine in containers and
+# systemd units where open() then fails with ENXIO. Probe with a real open.
+# The subshell is required: in dash a failed redirection on the special
+# builtin `:` exits the whole script.
+_can_read_tty() {
+    ( : </dev/tty ) >/dev/null 2>&1
+}
+
 # ── Helper: install packages via apt, escalating to sudo only if needed ──
 # Usage: _smart_apt_install pkg1 pkg2 pkg3 ...
 _smart_apt_install() {
@ -581,31 +694,73 @@ _smart_apt_install() {

    # Step 3: Escalate -- need elevated permissions for remaining packages
    if command -v sudo >/dev/null 2>&1; then
+        _ad_desc="$(_apt_distro_description)"
        echo ""
        echo "    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
        echo "    WARNING: We require sudo elevated permissions to install:"
        echo "    $_STILL_MISSING"
-        echo "    If you accept, we'll run sudo now, and it'll prompt your password."
+        echo "    Detected ${_ad_desc}."
+        echo "    If you accept, we'll run sudo apt-get to install these packages"
+        echo "    from your distro's official repositories (not a third-party tarball)."
        echo "    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
        echo ""
-        printf "    Accept? [Y/n] "
-        if [ -r /dev/tty ]; then
-            read -r REPLY </dev/tty || REPLY="y"
-        else
-            REPLY="y"
-        fi
-        case "$REPLY" in
-            [nN]*)
+        if _can_read_tty; then
+            printf "    Accept? [Y/n] "
+            # The device opened, so a failed read is EOF, not consent: decline,
+            # as the autostart prompt below does. Enter is still yes (a
+            # successful read of an empty line).
+            read -r REPLY </dev/tty || REPLY="n"
+            case "$REPLY" in
+                [nN]*)
+                    echo ""
+                    echo "    Please install these packages first, then re-run Unsloth Studio setup:"
+                    echo "    sudo apt-get update -y && sudo apt-get install -y $_STILL_MISSING"
+                    exit 1
+                    ;;
+            esac
+            # Mirror the headless branch: on a sudoers denial, a wrong password
+            # or an apt error, say what to run by hand instead of letting set -e
+            # abort on a bare sudo/apt message.
+            if sudo apt-get update -y </dev/null &&
+                sudo apt-get install -y $_STILL_MISSING </dev/null; then
+                :
+            else
                echo ""
-                echo "    Please install these packages first, then re-run Unsloth Studio setup:"
+                echo "    Could not install these packages: $_STILL_MISSING"
+                echo "    See the error above."
+                echo "    Please install them first, then re-run Unsloth Studio setup:"
                echo "    sudo apt-get update -y && sudo apt-get install -y $_STILL_MISSING"
                exit 1
-                ;;
-            *)
-                sudo apt-get update -y </dev/null
-                sudo apt-get install -y $_STILL_MISSING </dev/null
-                ;;
-        esac
+            fi
+        else
+            # Nobody can answer a prompt or type a password here. -n makes sudo
+            # refuse rather than prompt into a closed stdin, which is how #7307
+            # died. Probe with the real commands: `sudo -l` answers whether they
+            # are *authorized*, not whether running them needs authentication.
+            # -k ignores any cached timestamp, so only a real NOPASSWD rule gets
+            # through, not someone's sudo in another shell minutes ago. Per
+            # sudo(8), -k alongside a command ignores the cached credentials and
+            # "will not update" them, so other sessions keep theirs.
+            echo "    No terminal to confirm on; trying passwordless sudo."
+            if sudo -n -k apt-get update -y </dev/null &&
+                sudo -n -k apt-get install -y $_STILL_MISSING </dev/null; then
+                echo "    Installed with passwordless sudo."
+            else
+                echo ""
+                echo "    Could not install these packages: $_STILL_MISSING"
+                echo "    Detected ${_ad_desc}."
+                # Either sudo refused, or apt failed on a bad repo, dpkg lock or
+                # network outage. sudo exits 1 on an auth/config problem and
+                # when the command cannot be executed, but otherwise passes the
+                # command's own status through, so state both causes.
+                echo "    Either sudo needs a password here, or apt-get itself"
+                echo "    failed; see the error above. With no terminal to"
+                echo "    authenticate on, this cannot be done unattended."
+                echo "    Please install them first, then re-run Unsloth Studio setup:"
+                echo "    sudo apt-get update -y && sudo apt-get install -y $_STILL_MISSING"
+                exit 1
+            fi
+        fi
    else
        echo ""
        echo "    sudo is not available on this system."
@ -1636,7 +1791,7 @@ _maybe_reroute_strixhalo_to_2404() {
    # CUDA_VISIBLE_DEVICES=""/-1 and the /proc/driver/nvidia fallback for PATH/timeout gaps.
    if _has_usable_nvidia_gpu; then return 0; fi
    # Strix APUs show in /proc/cpuinfo; discrete cards don't, so also try WMI. Either reroutes.
-    if ! grep -qiE 'Ryzen AI Max|Radeon 80[0-9]0S|Strix Halo' /proc/cpuinfo 2>/dev/null \
+    if ! grep -qiE 'Ryzen AI Max|Radeon 80[0-9][05]S|Strix Halo' /proc/cpuinfo 2>/dev/null \
       && ! _wsl_amd_gpu_name >/dev/null 2>&1; then
        return 0
    fi
@ -2115,18 +2270,155 @@ _has_amd_rocm_gpu() {
         amd-smi list 2>/dev/null | awk '/^GPU[[:space:]]*[:\[][[:space:]]*[0-9]/{ found=1 } END{ exit !found }'; then
        return 0
    elif [ -e /dev/kfd ] && \
-         awk 'FNR==1{ gpu=0; amd=0 } /gpu_id/{ gpu=($2+0>0) } /vendor_id/{ amd=($2==4098) } \
-              gpu && amd { found=1 } END{ exit !found }' \
+         awk '/vendor_id/ && $2 == 4098 { found = 1 } END { exit !found }' \
             /sys/class/kfd/kfd/topology/nodes/*/properties 2>/dev/null; then
-        # vendor_id 4098 = 0x1002 (AMD). NVIDIA open kernel module (driver
-        # 560+) can register KFD topology nodes with non-zero gpu_id but
-        # vendor_id 4318 (0x10DE). Require AMD vendor to avoid misrouting
-        # NVIDIA-only hosts to the ROCm install path.
+        # vendor_id 4098 = 0x1002 (AMD) marks a GPU node: the KFD CPU node
+        # reports vendor_id 0, so any 4098 node is an AMD GPU. NVIDIA's open
+        # kernel module (driver 560+) registers KFD nodes as vendor_id 4318
+        # (0x10DE), so this never false-positives on NVIDIA-only hosts.
+        # The prior check also required a gpu_id line, but gpu_id is a SIBLING
+        # sysfs file, not a line in properties -- it never matched, so the
+        # fallback silently missed every ROCm-less AMD host (issue: fresh
+        # Arch/CachyOS boxes reporting "no GPU detected").
        return 0
    fi
    return 1
 }

+# Returns 0 if an AMD display GPU is on the PCI bus even when ROCm can't use it
+# (e.g. a Strix Halo iGPU with no /dev/kfd). Only sharpens the "no GPU detected"
+# hint. vendor 0x1002 = AMD/ATI; class 0x03* = display controller.
+_amd_gpu_present_via_pci() {
+    [ -d /sys/bus/pci/devices ] || return 1
+    for _pci_vendor in /sys/bus/pci/devices/*/vendor; do
+        [ -r "$_pci_vendor" ] || continue
+        read -r _v < "$_pci_vendor" 2>/dev/null || continue
+        [ "$_v" = "0x1002" ] || continue
+        _cls="${_pci_vendor%vendor}class"
+        [ -r "$_cls" ] || continue
+        read -r _c < "$_cls" 2>/dev/null || continue
+        case "$_c" in 0x03*) return 0 ;; esac
+    done
+    return 1
+}
+
+# Map a gfx arch to the AMD pip index family (mirrors install.ps1 $archFamilyMap).
+_amd_arch_index_family_for_gfx() {
+    case "$1" in
+        gfx1201|gfx1200) echo gfx120X-all ;;
+        gfx1151) echo gfx1151 ;;
+        gfx1150) echo gfx1150 ;;
+        gfx1152) echo gfx1152 ;;
+        gfx1103|gfx1102|gfx1101|gfx1100) echo gfx110X-all ;;
+        gfx1036|gfx1035|gfx1034|gfx1033|gfx1032|gfx1031|gfx1030) echo gfx103X-all ;;
+        gfx90a) echo gfx90a ;;
+        gfx908) echo gfx908 ;;
+        *) return 1 ;;
+    esac
+}
+
+# Map a GPU marketing name to gfx arch (kept in sync with install.ps1 nameArchTable).
+_infer_amd_gfx_arch_from_gpu_name() {
+    case "$1" in
+        *9070*|*9080*) echo gfx1201 ;;
+        *9060*) echo gfx1200 ;;
+        *"8065S"*|*"8060S"*|*"8050S"*|*"8040S"*|*"Strix Halo"*|*"Ryzen AI Max"*|*"AI Max"*) echo gfx1151 ;;
+        *"890M"*|*"880M"*|*"Strix Point"*|*"HX 37"*|*"AI 9 HX"*|*"AI 9 36"*) echo gfx1150 ;;
+        *"860M"*|*"840M"*|*"Krackan"*|*"AI 7 35"*|*"AI 5 34"*|*"AI 7 PRO 35"*|*"AI 5 33"*) echo gfx1152 ;;
+        *"RX 7600"*|*"RX 7700S"*|*"RX 7650"*|*"PRO W7600"*|*"PRO W7500"*) echo gfx1102 ;;
+        *"RX 7800"*|*"RX 7700"*|*"PRO W7700"*|*"PRO V710"*) echo gfx1101 ;;
+        *"RX 7900"*|*"PRO W7900"*|*"PRO W7800"*) echo gfx1100 ;;
+        *"780M"*|*"760M"*|*"740M"*|*"Phoenix"*|*"Hawk Point"*|*"Z1 Extreme"*|*"Z2 Extreme"*) echo gfx1103 ;;
+        *"RX 6900"*|*"RX 6800"*|*"RX 6750"*|*"RX 6700"*|*"PRO W6800"*|*"PRO W6900"*) echo gfx1030 ;;
+        *"RX 6650"*|*"RX 6600"*|*"PRO W6600"*|*"PRO W6650"*) echo gfx1032 ;;
+        *"RX 6500"*|*"RX 6400"*|*"RX 6300"*|*"PRO W6400"*|*"PRO W6500"*) echo gfx1034 ;;
+        *) return 1 ;;
+    esac
+}
+
+# Best-effort gfx inference when ROCm tools can't see the GPU (unslothai#7301).
+# Mirrors install.ps1 arch resolution on Windows ($HasROCm false, $ROCmGfxArch set).
+_infer_linux_amd_gfx_arch() {
+    if [ -n "${UNSLOTH_ROCM_GFX_ARCH:-}" ]; then
+        printf '%s\n' "$(printf '%s' "$UNSLOTH_ROCM_GFX_ARCH" | tr '[:upper:]' '[:lower:]')"
+        return 0
+    fi
+    # On WSL /proc/cpuinfo and lspci still report the host APU, but without the
+    # ROCDXG bridge (librocdxg over /dev/dxg) the AMD wheels can't reach the GPU;
+    # keep the CPU fallback there unless that runtime is present (the explicit
+    # override above still wins). Mirrors install_python_stack.py.
+    _gpu_evidence=""
+    if [ -e /dev/dxg ] || grep -qi microsoft /proc/version 2>/dev/null; then
+        for _d in /opt/rocm/lib /opt/rocm/lib64 /opt/rocm-*/lib /opt/rocm-*/lib64; do
+            { [ -e "$_d/librocdxg.so" ] || [ -e "$_d/librocdxg.so.1" ]; } && _rocdxg=1 && break
+        done
+        [ -n "${_rocdxg:-}" ] || return 1
+        # WSL enumerates no PCI display device; /dev/dxg + librocdxg IS the
+        # GPU evidence there.
+        _gpu_evidence=1
+    elif _amd_gpu_present_via_pci; then
+        _gpu_evidence=1
+    fi
+    # /proc/cpuinfo leaks the HOST CPU model into VMs/containers that received
+    # no AMD GPU, so the CPU-model text alone is not GPU evidence: require an
+    # AMD display device (PCI vendor 0x1002, class 0x03*) before trusting it.
+    # The lspci fallback below needs no gate; an AMD display line IS evidence.
+    if [ -n "$_gpu_evidence" ] && grep -qiE 'Ryzen AI Max|Radeon 80[0-9][05]S|Strix Halo' /proc/cpuinfo 2>/dev/null; then
+        echo gfx1151
+        return 0
+    fi
+    if [ -n "$_gpu_evidence" ] && grep -qiE '890M|880M|Strix Point|HX 37[05]|AI 9 HX|AI 9 36[05]' /proc/cpuinfo 2>/dev/null; then
+        echo gfx1150
+        return 0
+    fi
+    if [ -n "$_gpu_evidence" ] && grep -qiE '860M|840M|Krackan|AI 7 35[05]|AI 5 34[05]|AI 7 PRO 35|AI 5 33' /proc/cpuinfo 2>/dev/null; then
+        echo gfx1152
+        return 0
+    fi
+    if command -v lspci >/dev/null 2>&1; then
+        # A non-AMD controller can enumerate first (Intel/ASPEED before an AMD
+        # dGPU), so scan every display-class line and take the first AMD one
+        # that maps. The vendor guard is case-SENSITIVE (a -i "ATI" would match
+        # "CorporATIon" on every Intel/NVIDIA line); whole-line matching also
+        # survives the 0000: PCI domain prefix. Mirrors install_python_stack.py.
+        _amd_disp=$(lspci -nn 2>/dev/null | grep -E 'VGA compatible controller|3D controller|Display controller' | grep -E 'AMD|ATI' || true)
+        while IFS= read -r _ln; do
+            [ -n "$_ln" ] || continue
+            if _gfx=$(_infer_amd_gfx_arch_from_gpu_name "$_ln"); then
+                echo "$_gfx"
+                return 0
+            fi
+        done <<EOF
+$_amd_disp
+EOF
+    fi
+    return 1
+}
+
+# Reads the AMD gfx arch for wheel-index decisions: a user-set
+# UNSLOTH_ROCM_GFX_ARCH is authoritative (lowercased), else rocminfo, then
+# amd-smi. rocminfo/amd-smi honor ROCR/HIP_VISIBLE_DEVICES, so a container mask
+# (e.g. ROCR_VISIBLE_DEVICES=-1) would hide a GPU that the env-independent KFD
+# detection still sees -- the tool probes run with the masks cleared. Prints the
+# gfx token(s) or nothing when unreadable, and always returns 0 (a failing probe
+# as the last command would trip set -e in callers' assignments). Shared by
+# get_torch_index_url's gfx gate and the runtime-less reroute gate so the two
+# can never disagree on what "readable" means.
+_probe_amd_gfx_arch() {
+    _ensure_rocm_probe_env
+    _pg=$(printf '%s' "${UNSLOTH_ROCM_GFX_ARCH:-}" | tr '[:upper:]' '[:lower:]')
+    if [ -z "$_pg" ] && command -v rocminfo >/dev/null 2>&1; then
+        _pg=$( (unset ROCR_VISIBLE_DEVICES HIP_VISIBLE_DEVICES; rocminfo 2>/dev/null) | grep -oE 'gfx[1-9][0-9a-z]{2,3}' || true)
+    fi
+    if [ -z "$_pg" ] && command -v amd-smi >/dev/null 2>&1; then
+        _pg=$( (unset ROCR_VISIBLE_DEVICES HIP_VISIBLE_DEVICES; amd-smi list 2>/dev/null) | grep -oE 'gfx[1-9][0-9a-z]{2,3}' || true)
+        if [ -z "$_pg" ]; then
+            _pg=$( (unset ROCR_VISIBLE_DEVICES HIP_VISIBLE_DEVICES; amd-smi static --asic 2>/dev/null) | grep -oE 'gfx[1-9][0-9a-z]{2,3}' || true)
+        fi
+    fi
+    printf '%s\n' "$_pg"
+}
+
 # ── Detect GPU and choose PyTorch index URL ──
 # Mirrors Get-TorchIndexUrl in install.ps1.
 # On CPU-only machines this returns the cpu index, avoiding the solver
@ -2180,6 +2472,29 @@ get_torch_index_url() {
        if ! _has_amd_rocm_gpu; then
            echo "$_base/cpu"; return
        fi
+        # A generic rocm index is only safe when the gfx arch is readable: the
+        # Strix reroute (gfx1150/1151 -> arch-specific index) learns gfx from
+        # rocminfo/amd-smi, so if those are missing OR do not enumerate the GPU, an
+        # unknown-arch box might be Strix and would get the broken _grouped_mm
+        # wheels. Probe via the shared helper (override first, then rocminfo/amd-smi
+        # with visibility masks cleared); if the arch is unreadable, never guess a
+        # rocm index. A KFD-only host whose arch is still inferable from hardware
+        # IDs (PCI/cpuinfo/lspci) returns the cpu index and lets the runtime-less
+        # reroute below upgrade it to AMD per-arch wheels -- the reroute gate uses
+        # this same probe, so the handoff can't misfire. Only when inference fails
+        # too is CPU final, with the actionable warning.
+        _amd_gfx_probe=$(_probe_amd_gfx_arch)
+        if [ -z "$_amd_gfx_probe" ]; then
+            if _amd_inferred_gfx=$(_infer_linux_amd_gfx_arch 2>/dev/null) && \
+               [ -n "$_amd_inferred_gfx" ] && \
+               _amd_arch_index_family_for_gfx "$_amd_inferred_gfx" >/dev/null 2>&1; then
+                echo "[WARN] AMD GPU detected but rocminfo/amd-smi can't read its gfx arch -- inferring $_amd_inferred_gfx from hardware IDs." >&2
+                echo "$_base/cpu"; return
+            fi
+            echo "[WARN] AMD GPU detected but its gfx arch can't be read (rocminfo/amd-smi missing or not enumerating the GPU) -- installing CPU-only PyTorch." >&2
+            echo "[WARN] For GPU PyTorch, install or repair rocminfo/amd-smi (e.g. sudo pacman -S rocm-hip-sdk) and re-run this installer." >&2
+            echo "$_base/cpu"; return
+        fi
        # AMD GPU confirmed -- detect ROCm version
        _rocm_tag=""
        _rocm_tag=$({ command -v amd-smi >/dev/null 2>&1 && \
@ -2196,7 +2511,11 @@ get_torch_index_url() {
            { command -v rpm >/dev/null 2>&1 && \
                ver="$(rpm -q --qf '%{VERSION}\n' rocm-core 2>/dev/null)" && \
                [ -n "$ver" ] && \
-                printf '%s\n' "$ver" | awk -F'[.-]' '{print "rocm"$1"."$2; exit}'; }) 2>/dev/null
+                printf '%s\n' "$ver" | awk -F'[.-]' '{print "rocm"$1"."$2; exit}'; }) 2>/dev/null || _rocm_tag=""
+        # ^ || guard: when EVERY version source is missing (e.g. rocminfo present
+        # but rocm-core not installed, so dpkg-query/rpm exit 1), the whole ||
+        # chain fails and set -e would kill the installer BEFORE the actionable
+        # no-version WARN below -- exactly the fresh-install case it exists for.
        # Validate _rocm_tag: must match "rocmX.Y" with major >= 1
        case "$_rocm_tag" in
            rocm[1-9]*.[0-9]*) : ;;  # valid (major >= 1)
@ -2232,12 +2551,27 @@ get_torch_index_url() {
            esac
            return
        fi
-        # AMD GPU confirmed by rocminfo/amd-smi but ROCm version could not be
-        # read from any source (amd-smi, /opt/rocm/.info/version, hipconfig,
-        # dpkg, rpm).  Warn explicitly rather than silently installing CPU PyTorch.
-        echo "[WARN] AMD GPU detected but ROCm version could not be determined -- falling back to CPU-only PyTorch" >&2
-        echo "[WARN] Ensure one of the following is accessible: amd-smi, hipconfig, /opt/rocm/.info/version, rocm-core package" >&2
-        echo "[WARN] To install ROCm: https://rocm.docs.amd.com/en/latest/deploy/linux/index.html" >&2
+        # AMD GPU confirmed (rocminfo/amd-smi or the KFD topology fallback) but
+        # no ROCm/HIP install was found to read the version from (amd-smi,
+        # /opt/rocm/.info/version, hipconfig, dpkg, rpm). This is the common
+        # fresh-install case: the GPU is real, but with no ROCm userspace the
+        # correct PyTorch build can't be selected. Warn with an actionable fix
+        # rather than silently installing CPU PyTorch.
+        # A user-set UNSLOTH_ROCM_GFX_ARCH seeded the probe above, so rocminfo/
+        # amd-smi may still be unable to see the GPU; when the named arch maps to
+        # a wheel family, the runtime-less reroute (gated on the override) will
+        # install the AMD per-arch wheels -- a CPU-only warning here would be
+        # false for that path. Defer like the inferable-arch branch does.
+        if [ -n "${UNSLOTH_ROCM_GFX_ARCH:-}" ] && \
+           _amd_arch_index_family_for_gfx "$_amd_gfx_probe" >/dev/null 2>&1; then
+            echo "[WARN] AMD GPU detected with no readable ROCm version, but UNSLOTH_ROCM_GFX_ARCH=$_amd_gfx_probe is set -- routing to AMD per-arch wheels." >&2
+            echo "$_base/cpu"; return
+        fi
+        echo "[WARN] AMD GPU detected, but no ROCm/HIP install was found to select the matching GPU PyTorch build -- falling back to CPU-only PyTorch." >&2
+        echo "[WARN] Install the ROCm/HIP SDK, then re-run this installer:" >&2
+        echo "[WARN]   Arch / CachyOS : sudo pacman -S rocm-hip-sdk" >&2
+        echo "[WARN]   other distros  : https://rocm.docs.amd.com/en/latest/deploy/linux/index.html" >&2
+        echo "[WARN] Minimum required for version detection: amd-smi, hipconfig, /opt/rocm/.info/version, or the rocm-core package." >&2
        echo "$_base/cpu"; return
    fi
    # Parse CUDA version from nvidia-smi output (POSIX-safe, no grep -P).
@ -2649,7 +2983,7 @@ _maybe_bootstrap_rocm_wsl() {
    [ -e /dev/dxg ] || return 0
    # Strix APUs show in /proc/cpuinfo (the CPU model); discrete cards don't, so also
    # ask the Windows host. Either signal suffices; the bootstrap detects arch from rocminfo.
-    if ! grep -qiE 'Ryzen AI Max|Radeon 80[0-9]0S|Strix Halo' /proc/cpuinfo 2>/dev/null \
+    if ! grep -qiE 'Ryzen AI Max|Radeon 80[0-9][05]S|Strix Halo' /proc/cpuinfo 2>/dev/null \
       && ! _wsl_amd_gpu_name >/dev/null 2>&1; then
        return 0
    fi
@ -2735,6 +3069,72 @@ fi

 TORCH_INDEX_URL=$(get_torch_index_url)

+# Linux: ROCm runtime missing but a supported AMD gfx arch is inferable (Strix Halo
+# in /proc/cpuinfo, lspci marketing name, UNSLOTH_ROCM_GFX_ARCH). Route to AMD's
+# per-arch wheels like install.ps1 does on Windows (unslothai#7301).
+# Gated on the runtime probes NOT naming a gfx: either no AMD GPU is detected at
+# all (_has_amd_rocm_gpu false), or the GPU is visible only through the
+# env-independent KFD topology while rocminfo/amd-smi can't read its arch
+# (KFD-only host, unslothai#7314 -- before the KFD detection fix these hosts
+# reached this reroute via the false branch, so the empty-probe condition
+# preserves that routing). A */cpu index chosen WITH a readable gfx
+# (unsupported/unreadable ROCm version, after its own warning) is a deliberate
+# fallback -- rerouting it would contradict that decision, and stays excluded
+# because the shared probe returns its gfx. An explicit UNSLOTH_ROCM_GFX_ARCH
+# override stays authoritative either way.
+if [ "$_torch_index_pinned" = false ] && [ "$SKIP_TORCH" = false ] && \
+   ! _has_usable_nvidia_gpu && \
+   { [ -n "${UNSLOTH_ROCM_GFX_ARCH:-}" ] || ! _has_amd_rocm_gpu || \
+     [ -z "$(_probe_amd_gfx_arch)" ]; } && \
+   case "$(uname -s)" in Linux) true ;; *) false ;; esac && \
+   case "$_ARCH" in x86_64|amd64) true ;; *) false ;; esac; then
+    # ROCm torch wheels are x86_64-only; get_torch_index_url returns CPU on other
+    # arches, so an inferred/overridden gfx must not reroute arm64 to AMD wheels.
+    case "$TORCH_INDEX_URL" in
+        */cpu)
+            _linux_inferred_gfx=$(_infer_linux_amd_gfx_arch 2>/dev/null || true)
+            if [ -n "$_linux_inferred_gfx" ]; then
+                _amd_family=$(_amd_arch_index_family_for_gfx "$_linux_inferred_gfx") || _amd_family=""
+                if [ -n "$_amd_family" ]; then
+                    _amd_mirror="${UNSLOTH_AMD_ROCM_MIRROR:-https://repo.amd.com/rocm/whl}"
+                    while [ "${_amd_mirror%/}" != "$_amd_mirror" ]; do
+                        _amd_mirror="${_amd_mirror%/}"
+                    done
+                    TORCH_INDEX_URL="${_amd_mirror}/${_amd_family}/"
+                    # Hand the inferred arch to setup.sh (llama.cpp): it re-probes
+                    # ROCm on its own, and on these runtime-less hosts its probes
+                    # find nothing, so without this it classifies the box as
+                    # non-ROCm and installs the CPU prebuilt while torch just got
+                    # AMD per-arch wheels. setup.sh and install_llama_prebuilt.py
+                    # both honor UNSLOTH_ROCM_GFX_ARCH, so exporting it is the
+                    # whole handoff (a user-set override re-exports unchanged).
+                    export UNSLOTH_ROCM_GFX_ARCH="$_linux_inferred_gfx"
+                    case "$_linux_inferred_gfx" in
+                        gfx1201|gfx1200|gfx1151|gfx1150|gfx1152)
+                            TORCH_CONSTRAINT="torch>=2.11.0,<2.12.0"
+                            TORCHVISION_CONSTRAINT="torchvision>=0.26.0,<0.27.0"
+                            TORCHAUDIO_CONSTRAINT="torchaudio>=2.11.0,<2.12.0"
+                            ;;
+                    esac
+                    echo "" >&2
+                    # KFD-only hosts reach this reroute with /dev/kfd present
+                    # (that's what detected them), so don't claim it's missing.
+                    if _has_amd_rocm_gpu; then
+                        echo "  [WARN] AMD GPU visible via the kernel driver (KFD) but rocminfo/amd-smi can't read its gfx arch; using $_linux_inferred_gfx." >&2
+                    else
+                        echo "  [WARN] ROCm runtime not visible (/dev/kfd, rocminfo, amd-smi) but $_linux_inferred_gfx inferred." >&2
+                    fi
+                    echo "  [WARN] Routing to AMD arch-specific wheels ($(_strip_index_url_credentials "$TORCH_INDEX_URL"))." >&2
+                    echo "  [WARN] These wheels bundle their own ROCm runtime; install the kernel stack for native compute:" >&2
+                    echo "  [WARN]   https://docs.unsloth.ai/get-started/install-and-update/amd" >&2
+                    echo "  [WARN] Tip: set UNSLOTH_ROCM_GFX_ARCH=$_linux_inferred_gfx to skip inference next time." >&2
+                    echo "" >&2
+                fi
+            fi
+            ;;
+    esac
+fi
+
 # Export the resolved torch backend ("cuda", "rocm", or "cpu") so that
 # downstream scripts (setup.sh -> install_python_stack.py) know what was
 # chosen here and can skip ROCm-specific repair steps on CUDA/CPU hosts.
@ -2779,7 +3179,7 @@ fi
 # and a bare name can resolve a 2.12 ABI-mismatched wheel. Match on the FINAL leaf so a
 # custom mirror with a gfx/rocm7.2 path segment but a cu*/cpu family isn't forced.
 case "$_torch_index_leaf" in
-    rocm7.2|gfx120x-all|gfx1151|gfx1150)
+    rocm7.2|gfx120x-all|gfx1151|gfx1150|gfx1152)
        TORCH_CONSTRAINT="torch>=2.11.0,<2.12.0"
        TORCHVISION_CONSTRAINT="torchvision>=0.26.0,<0.27.0"
        TORCHAUDIO_CONSTRAINT="torchaudio>=2.11.0,<2.12.0"
@ -2818,29 +3218,64 @@ case "$TORCH_INDEX_URL" in
        fi
        ;;
 esac
-# ── Strix Halo / Strix Point: force rocm7.2 wheels, bypass Radeon repo ───────
-# gfx1151 (Strix Halo) and gfx1150 (Strix Point) have a ROCm 7.1 driver bug
-# that causes a segfault in torch._grouped_mm (moe_utils.py line 167).
-# The Radeon repo now ships cp313 wheels for rocm-rel-7.1, so when
-# _amd_gpu_radeon=true the installer silently lands on the broken combo.
-# Detect these GPUs when TORCH_INDEX_URL is rocm7.1 and override to rocm7.2.
-case "$TORCH_INDEX_URL" in
-    */rocm7.1|*/rocm7.1.*)
+# 0 when a rocmX.Y index leaf ($1, the final path segment) is older than floor
+# $2.$3 (int compare, so rocm7.2 < rocm7.13). Non-rocm leaves (gfx*, cu*, cpu) and
+# non-numeric versions return 1. Leaf-based (like $_torch_index_leaf) so a mirror
+# base holding its own rocm token compares the family leaf, not the base path.
+_rocm_leaf_below() {
+    case "$1" in rocm[0-9]*.[0-9]*) : ;; *) return 1 ;; esac
+    _rb=${1#rocm}; _maj=${_rb%%.*}; _min=${_rb#*.}; _min=${_min%%.*}
+    case "$_maj$_min" in *[!0-9]*) return 1 ;; esac
+    if [ "$_maj" -lt "$2" ]; then return 0; fi
+    if [ "$_maj" -eq "$2" ] && [ "$_min" -lt "$3" ]; then return 0; fi
+    return 1
+}
+# ── Strix Halo / Strix Point: route to the AMD arch-specific index ───────────
+# gfx1151/gfx1150 need torch 2.11+rocm7.13 from repo.amd.com/rocm/whl/gfx<arch>/,
+# which carries AMD's real fixes (the rocm7.1 _grouped_mm segfault, moe_utils.py:167,
+# and later Strix kernel bugs). Every generic pytorch.org index below rocm7.13 lacks
+# them (and the Radeon repo can be offline, unslothai#7264), so reroute a detected
+# Strix GPU whenever the picked index is older than the arch build -- covers today's
+# rocm6.0-7.2 and any future 7.x < 7.13; rocm7.13+ already has the fixes, so leave it.
+case "$_torch_index_leaf" in
+    rocm[0-9]*)
        # Collect every gfx token in rocminfo / amd-smi enumeration order
        # (skip duplicates), then index by HIP_VISIBLE_DEVICES /
        # ROCR_VISIBLE_DEVICES so a mixed Strix iGPU + non-Strix dGPU box
        # where the user selected the dGPU does NOT get rerouted to the
        # Strix per-gfx index.
-        _gfx_all=""
-        if command -v rocminfo >/dev/null 2>&1; then
-            _gfx_all=$(rocminfo 2>/dev/null | grep -oE 'gfx[1-9][0-9a-z]{2,3}')
+        # || true on each probe: no gfx match makes grep exit 1, which under
+        # set -euo pipefail would abort the installer before the next fallback
+        # runs (now that the case matches every rocm* index, not just rocm7.1).
+        # A user-supplied UNSLOTH_ROCM_GFX_ARCH overrides probing (mirrors setup.sh
+        # and the display block), so a Strix override still reaches the arch index.
+        _gfx_all=$(printf '%s' "${UNSLOTH_ROCM_GFX_ARCH:-}" | tr '[:upper:]' '[:lower:]')
+        if [ -z "$_gfx_all" ] && command -v rocminfo >/dev/null 2>&1; then
+            _gfx_all=$(rocminfo 2>/dev/null | grep -oE 'gfx[1-9][0-9a-z]{2,3}' || true)
        fi
        if [ -z "$_gfx_all" ] && command -v amd-smi >/dev/null 2>&1; then
-            _gfx_all=$(amd-smi list 2>/dev/null | grep -oE 'gfx[1-9][0-9a-z]{2,3}')
+            _gfx_all=$(amd-smi list 2>/dev/null | grep -oE 'gfx[1-9][0-9a-z]{2,3}' || true)
            # PowerShell paths also probe `amd-smi static --asic`; mirror it
            # so a host with hipinfo-less amd-smi reports the gfx target.
            if [ -z "$_gfx_all" ]; then
-                _gfx_all=$(amd-smi static --asic 2>/dev/null | grep -oE 'gfx[1-9][0-9a-z]{2,3}')
+                _gfx_all=$(amd-smi static --asic 2>/dev/null | grep -oE 'gfx[1-9][0-9a-z]{2,3}' || true)
+            fi
+        fi
+        # get_torch_index_url reads the arch with ROCR/HIP masks cleared, so a
+        # mask hiding every agent (e.g. ROCR_VISIBLE_DEVICES=-1) still lands
+        # here on a generic rocm index; re-probe unmasked or a masked-out Strix
+        # box keeps the broken generic wheels. Partial masks never get here
+        # (they enumerate at least one agent above) and keep their selection.
+        # ${VAR+x} (not :-): a SET-but-empty mask also hides every agent and
+        # must trigger the re-probe too.
+        if [ -z "$_gfx_all" ] && [ -n "${ROCR_VISIBLE_DEVICES+x}${HIP_VISIBLE_DEVICES+x}" ]; then
+            if command -v rocminfo >/dev/null 2>&1; then
+                _gfx_all=$( (unset ROCR_VISIBLE_DEVICES HIP_VISIBLE_DEVICES; rocminfo 2>/dev/null) | grep -oE 'gfx[1-9][0-9a-z]{2,3}' || true)
+            fi
+            if [ -z "$_gfx_all" ] && command -v amd-smi >/dev/null 2>&1; then
+                _gfx_all=$( (unset ROCR_VISIBLE_DEVICES HIP_VISIBLE_DEVICES; amd-smi list 2>/dev/null) | grep -oE 'gfx[1-9][0-9a-z]{2,3}' || true)
+                [ -z "$_gfx_all" ] && \
+                    _gfx_all=$( (unset ROCR_VISIBLE_DEVICES HIP_VISIBLE_DEVICES; amd-smi static --asic 2>/dev/null) | grep -oE 'gfx[1-9][0-9a-z]{2,3}' || true)
            fi
        fi
        _runtime_gfx=""
@ -2863,15 +3298,16 @@ case "$TORCH_INDEX_URL" in
        fi
        _strix_gfx=""
        case "$_runtime_gfx" in
-            gfx1151|gfx1150) _strix_gfx="$_runtime_gfx" ;;
+            gfx1151|gfx1150|gfx1152) _strix_gfx="$_runtime_gfx" ;;
        esac
-        if [ -n "$_strix_gfx" ]; then
+        # Skip rocm7.13+ generic indexes: they already ship the fixes, so the
+        # arch build (rocm7.13) would be a downgrade rather than a rescue.
+        if [ -n "$_strix_gfx" ] && _rocm_leaf_below "$_torch_index_leaf" 7 13; then
            echo "" >&2
-            echo "  [WARN] $_strix_gfx (Strix) + ROCm 7.1 detected -- known _grouped_mm segfault" >&2
-            echo "  [WARN] ROCm 7.1 wheels are broken for gfx1150/gfx1151 (moe_utils.py:167)" >&2
-            echo "  [WARN] Routing to AMD arch-specific index (torch 2.11+rocm7.13 has the real fix)" >&2
-            echo "  [WARN] Upgrade ROCm to 7.2+ to use the standard index:" >&2
-            echo "  [WARN]   https://rocm.docs.amd.com/en/latest/deploy/linux/index.html" >&2
+            echo "  [WARN] $_strix_gfx (Strix) detected -- routing to the AMD arch-specific index" >&2
+            echo "  [WARN] torch 2.11+rocm7.13 has AMD's real gfx1150/gfx1151 fixes (the ROCm 7.1" >&2
+            echo "  [WARN] _grouped_mm segfault, moe_utils.py:167, and later Strix kernel bugs)," >&2
+            echo "  [WARN] and is more reliable than the rocm7.2 index or an offline Radeon repo." >&2
            echo "" >&2
            # AMD's arch-specific index serves torch 2.11.0+rocm7.13.0 which has AMD's
            # actual fix for the gfx1151/gfx1150 _grouped_mm kernel bug -- preferred
@ -2958,12 +3394,14 @@ elif case "$TORCH_INDEX_URL" in */rocm*|*/gfx*) true ;; *) false ;; esac; then
        # gfx1102 matched BEFORE gfx1100 so the spaceless "RX 7700S" lands on
        # gfx1102 (bash case has no negative lookahead like the PS tables).
        case "$_gpu_disp_mkt" in
-            *"9070 XT"*|*9080*)                                                                            _gpu_disp_gfx="gfx1201" ;;  # RDNA 4
-            *9070*|*9060*)                                                                                 _gpu_disp_gfx="gfx1200" ;;  # RDNA 4
-            *"8060S"*|*"8050S"*|*"8040S"*|*"Strix Halo"*|*"Ryzen AI Max"*|*"AI Max"*) _gpu_disp_gfx="gfx1151" ;;  # RDNA 3.5 (Strix Halo: Radeon 8060S/8050S/8040S iGPU, Ryzen AI Max+)
-            *"890M"*|*"880M"*|*"860M"*|*"840M"*|*"Strix Point"*|*"Krackan"*|*"HX 37"*|*"AI 9 HX"*|*"AI 9 36"*|*"AI 7 35"*|*"AI 5 34"*|*"AI 7 PRO 35"*|*"AI 5 33"*) _gpu_disp_gfx="gfx1150" ;;  # RDNA 3.5 (Strix/Krackan Point: Radeon 890M/880M iGPU, Ryzen AI 9 HX 370/375)
-            *"RX 7600"*|*"RX 7700S"*|*"RX 7650"*|*"PRO W7600"*|*"PRO W7500"*|*"PRO V710"*)                  _gpu_disp_gfx="gfx1102" ;;  # RDNA 3 (Navi 33)
-            *"RX 7900"*|*"RX 7800"*|*"RX 7700"*|*"PRO W7900"*|*"PRO W7800"*|*"PRO W7700"*)                  _gpu_disp_gfx="gfx1100" ;;  # RDNA 3 desktop / workstation (Navi 31)
+            *9070*|*9080*)                                                                                 _gpu_disp_gfx="gfx1201" ;;  # RDNA 4 (Navi 48)
+            *9060*)                                                                                        _gpu_disp_gfx="gfx1200" ;;  # RDNA 4 (Navi 44)
+            *"8065S"*|*"8060S"*|*"8050S"*|*"8040S"*|*"Strix Halo"*|*"Ryzen AI Max"*|*"AI Max"*) _gpu_disp_gfx="gfx1151" ;;  # RDNA 3.5 (Strix Halo + Gorgon Halo: Radeon 8065S/8060S/8050S/8040S iGPU, Ryzen AI Max / Max+)
+            *"890M"*|*"880M"*|*"Strix Point"*|*"HX 37"*|*"AI 9 HX"*|*"AI 9 36"*) _gpu_disp_gfx="gfx1150" ;;  # RDNA 3.5 (Strix Point: Radeon 890M/880M, Ryzen AI 9 HX 370/375)
+            *"860M"*|*"840M"*|*"Krackan"*|*"AI 7 35"*|*"AI 5 34"*|*"AI 7 PRO 35"*|*"AI 5 33"*) _gpu_disp_gfx="gfx1152" ;;  # RDNA 3.5 (Krackan Point: Radeon 860M/840M, Ryzen AI 7 350 / AI 5 340)
+            *"RX 7600"*|*"RX 7700S"*|*"RX 7650"*|*"PRO W7600"*|*"PRO W7500"*)                              _gpu_disp_gfx="gfx1102" ;;  # RDNA 3 (Navi 33)
+            *"RX 7800"*|*"RX 7700"*|*"PRO W7700"*|*"PRO V710"*)                                            _gpu_disp_gfx="gfx1101" ;;  # RDNA 3 (Navi 32)
+            *"RX 7900"*|*"PRO W7900"*|*"PRO W7800"*)                                                       _gpu_disp_gfx="gfx1100" ;;  # RDNA 3 desktop / workstation (Navi 31)
            *"780M"*|*"760M"*|*"740M"*|*"Phoenix"*|*"Hawk Point"*|*"Z1 Extreme"*|*"Z2 Extreme"*)            _gpu_disp_gfx="gfx1103" ;;  # RDNA 3 iGPU (Phoenix / Hawk Point)
            *"RX 6900"*|*"RX 6800"*|*"RX 6750"*|*"RX 6700"*|*"PRO W6800"*|*"PRO W6900"*)                    _gpu_disp_gfx="gfx1030" ;;  # RDNA 2 (Navi 21)
            *"RX 6650"*|*"RX 6600"*|*"PRO W6600"*|*"PRO W6650"*)                                            _gpu_disp_gfx="gfx1032" ;;  # RDNA 2 (Navi 23)
@ -2995,6 +3433,17 @@ elif case "$TORCH_INDEX_URL" in */rocm*|*/gfx*) true ;; *) false ;; esac; then
 elif [ "$OS" = "macos" ] && [ "$_ARCH" = "arm64" ]; then
    # Apple Silicon: PyTorch gets Metal (MPS) acceleration over unified memory, so not CPU-only.
    step "gpu" "Apple Silicon (Metal, unified memory)"
+elif _has_amd_rocm_gpu; then
+    if [ "$_torch_index_pinned" = true ]; then
+        # An explicit UNSLOTH_TORCH_INDEX_URL/_FAMILY pin skipped all probing;
+        # do not claim ROCm is unusable when a CPU/other index was requested.
+        step "gpu" "AMD GPU (torch index pinned: $_torch_index_leaf)" "$C_WARN"
+    else
+        # AMD GPU visible to the kernel but the torch index stayed CPU: no usable
+        # ROCm userspace to pick a wheel. "none" would repeat the false diagnosis
+        # this installer used to give.
+        step "gpu" "AMD GPU (no usable ROCm -- CPU fallback)" "$C_WARN"
+    fi
 else
    step "gpu" "none (CPU-only)" "$C_WARN"
 fi
@ -3003,8 +3452,17 @@ fi
 case "$TORCH_INDEX_URL" in
    */cpu)
        if [ "$SKIP_TORCH" = false ] && [ "$OS" != "macos" ]; then
-            substep "No GPU detected -- installing CPU-only PyTorch." "$C_WARN"
-            if [ "$OS" = "wsl" ]; then
+            if [ "$_torch_index_pinned" = true ]; then
+                # An explicit CPU pin is a request, not a detection failure:
+                # skip the SDK guidance (ROCm may be perfectly healthy here).
+                substep "CPU-only PyTorch (index pinned via UNSLOTH_TORCH_INDEX_URL / _FAMILY)."
+            elif _has_amd_rocm_gpu; then
+                substep "AMD GPU detected, but no usable ROCm/HIP install -- installing CPU-only PyTorch." "$C_WARN"
+                substep "Install the ROCm/HIP SDK and re-run this installer for GPU PyTorch." "$C_WARN"
+            else
+                substep "No GPU detected -- installing CPU-only PyTorch." "$C_WARN"
+            fi
+            if [ "$OS" = "wsl" ] && [ "$_torch_index_pinned" = false ]; then
                # WSL + no GPU detected (detection above found nothing). Common
                # cause: an AMD GPU whose ROCm-on-WSL runtime isn't exposed yet --
                # /dev/dxg present (graphics) but no ROCm runtime.
@ -3031,6 +3489,13 @@ case "$TORCH_INDEX_URL" in
                substep "  driver is current; or run unsloth/scripts/install_rocm_wsl_strixhalo.sh yourself."
            else
                substep "AMD ROCm users: see https://docs.unsloth.ai/get-started/install-and-update/amd"
+                # Only when ROCm truly can't see the GPU: a detected-but-too-old
+                # ROCm (rocminfo works, wheels need 6.0+) has its own guidance.
+                if ! _has_amd_rocm_gpu && _amd_gpu_present_via_pci; then
+                    substep "An AMD GPU is on the PCI bus but ROCm cannot see it (no /dev/kfd," "$C_WARN"
+                    substep "  rocminfo, or amd-smi). Install the ROCm kernel stack so /dev/kfd exists;"
+                    substep "  Strix Halo (gfx1151/gfx1150) needs a recent kernel (6.11+) and ROCm 7.x."
+                fi
            fi
            substep "Re-run with --no-torch for GGUF-only (faster, no PyTorch):"
            substep "  curl -fsSL https://unsloth.ai/install.sh | sh -s -- --no-torch"
@ -3096,7 +3561,7 @@ if [ "$_MIGRATED" = true ]; then
        # to prevent transitive torch resolution.
        run_install_cmd_retry "install unsloth (migrated no-torch)" uv pip install --python "$_VENV_PY" --no-deps \
            --reinstall-package unsloth --reinstall-package unsloth-zoo \
-            "unsloth>=2026.7.3" "unsloth-zoo>=2026.7.3"
+            "unsloth>=2026.7.5" "unsloth-zoo>=2026.7.6"
        # Resolve pydantic WITH deps so pip pins pydantic-core to the
        # matching version (no-torch-runtime.txt below is --no-deps).
        # All transitive deps are torch-free.
@ -3113,7 +3578,7 @@ if [ "$_MIGRATED" = true ]; then
        run_install_cmd_retry "install unsloth (migrated)" uv pip install --python "$_VENV_PY" \
            ${_UNSLOTH_TORCH_OVERRIDES:+--overrides "$_UNSLOTH_TORCH_OVERRIDES"} \
            --reinstall-package unsloth --reinstall-package unsloth-zoo \
-            "unsloth>=2026.7.3" "unsloth-zoo>=2026.7.3" ${_MLX_LM_EXCLUDE_ARG:-}
+            "unsloth>=2026.7.5" "unsloth-zoo>=2026.7.6" ${_MLX_LM_EXCLUDE_ARG:-}
        [ -n "$_UNSLOTH_TORCH_OVERRIDES" ] && rm -f "$_UNSLOTH_TORCH_OVERRIDES"
        _UNSLOTH_TORCH_OVERRIDES=""
    fi
@ -3337,7 +3802,7 @@ elif [ -n "$TORCH_INDEX_URL" ]; then
        # runtime deps (typer, safetensors, transformers, etc.) with --no-deps.
        run_install_cmd_retry "install unsloth (no-torch)" uv pip install --python "$_VENV_PY" --no-deps \
            --upgrade-package unsloth --upgrade-package unsloth-zoo \
-            "unsloth>=2026.7.3" "unsloth-zoo>=2026.7.3"
+            "unsloth>=2026.7.5" "unsloth-zoo>=2026.7.6"
        # Same pydantic-with-deps trick as the migrated branch.
        run_install_cmd_retry "install pydantic (with deps for compatible core)" \
            uv pip install --python "$_VENV_PY" pydantic
@ -3356,7 +3821,7 @@ elif [ -n "$TORCH_INDEX_URL" ]; then
    elif [ "$STUDIO_LOCAL_INSTALL" = true ]; then
        run_install_cmd_retry "install unsloth (local)" uv pip install --python "$_VENV_PY" \
            ${_UNSLOTH_TORCH_OVERRIDES:+--overrides "$_UNSLOTH_TORCH_OVERRIDES"} \
-            --upgrade-package unsloth "unsloth>=2026.7.3" "unsloth-zoo>=2026.7.3"
+            --upgrade-package unsloth "unsloth>=2026.7.5" "unsloth-zoo>=2026.7.6"
        substep "overlaying local repo (editable)..."
        run_install_cmd "overlay local repo" uv pip install --python "$_VENV_PY" -e "$_REPO_ROOT" --no-deps
        substep "overlaying unsloth-zoo from git main..."
@ -3384,7 +3849,7 @@ else
    tauri_log "STEP" "Installing Unsloth"
    substep "installing unsloth (this may take a few minutes)..."
    if [ "$STUDIO_LOCAL_INSTALL" = true ]; then
-        run_install_cmd_retry "install unsloth (auto torch backend)" uv pip install --python "$_VENV_PY" "unsloth-zoo>=2026.7.3" "unsloth>=2026.7.3" --torch-backend=auto
+        run_install_cmd_retry "install unsloth (auto torch backend)" uv pip install --python "$_VENV_PY" "unsloth-zoo>=2026.7.6" "unsloth>=2026.7.5" --torch-backend=auto
        substep "overlaying local repo (editable)..."
        run_install_cmd "overlay local repo" uv pip install --python "$_VENV_PY" -e "$_REPO_ROOT" --no-deps
        substep "overlaying unsloth-zoo from git main..."
@ -3396,6 +3861,15 @@ else
    fi
 fi

+_installed_package_version=$("$_VENV_PY" -c \
+    'from importlib.metadata import version; import sys; print(version(sys.argv[1]))' \
+    "$PACKAGE_NAME" 2>/dev/null || true)
+if [ -n "$_installed_package_version" ]; then
+    step "$PACKAGE_NAME" "$_installed_package_version installed"
+else
+    substep "[WARN] installed $PACKAGE_NAME version could not be determined" "$C_WARN"
+fi
+
 # ── Enforce the installed torch flavor matches the detected GPU build ──
 # PEP 440 ignores the +cpu/+cuXXX/+rocm local label in a version range, so uv
 # keeps a stale torch==X+cpu against a GPU index and the venv silently trains on
@ -3629,9 +4103,11 @@ echo ""
 # In non-interactive environments (Docker, CI, cloud-init) just print instructions.
 if [ "$_SKIP_AUTOSTART" != true ] && [ -t 1 ]; then
    echo ""
-    printf "  Start Unsloth Studio now? [Y/n] "
    # No readable answer (closed/EOF tty) defaults to no; Enter is still yes.
-    if [ -r /dev/tty ]; then
+    # Prompt only when something can answer: `test -r` passes on the unopenable
+    # /dev/tty found in containers, leaving a dangling question in the log.
+    if _can_read_tty; then
+        printf "  Start Unsloth Studio now? [Y/n] "
        read -r _reply </dev/tty || _reply="n"
    else
        _reply="n"
--- a/pyproject.toml
+++ b/pyproject.toml
@ -25,7 +25,7 @@ classifiers = [
    "Topic :: Scientific/Engineering :: Artificial Intelligence",
 ]
 dependencies = [
-    "unsloth_zoo>=2026.7.4",
+    "unsloth_zoo>=2026.7.6",
    "wheel>=0.42.0",
    "packaging",
    "torch>=2.4.0,<2.12.0",
@ -48,10 +48,13 @@ dependencies = [
    "diffusers",
    "transformers>=4.51.3,!=4.52.0,!=4.52.1,!=4.52.2,!=4.52.3,!=4.53.0,!=4.54.0,!=4.55.0,!=4.55.1,!=4.57.0,!=4.57.4,!=4.57.5,!=5.0.0,!=5.1.0,<=5.5.0",
    "trl>=0.18.2,!=0.19.0,<=0.24.0",
-    "typer",
+    "typer>=0.12.0",
    "pydantic",
    "pyyaml",
    "nest-asyncio",
+    # Every CLI command imports studio.backend.*, which reaches structlog at
+    # module level. The rest of the server stack lives in the studio extra.
+    "structlog>=24.1.0",
 ]

 [project.scripts]
@ -64,10 +67,12 @@ version = {attr = "unsloth.models._utils.__version__"}
 include-package-data = true

 [tool.setuptools.package-data]
+unsloth_cli = ["codex_fallback_prompt.md", "pi_subagent.ts"]
 studio = [
    "*.sh",
    "*.ps1",
    "*.bat",
+    "node_prebuilt_pins.json",
    "frontend/dist/**/*",
    "frontend/*.json",
    "frontend/*.ts",
@ -77,6 +82,8 @@ studio = [
    "frontend/.git*",
    "backend/requirements/**/*",
    "backend/plugins/**/*",
+    "backend/assets/**/*.jinja",
+    "backend/assets/**/*.html",
    "backend/core/data_recipe/oxc-validator/*.json",
    "backend/core/data_recipe/oxc-validator/*.mjs",
 ]
@ -86,12 +93,39 @@ include = ["unsloth*", "unsloth_cli*", "studio", "studio.backend*"]
 exclude = ["images*", "tests*", "*.node_modules", "*.node_modules.*"]

 [project.optional-dependencies]
+# Studio's server stack. Mirrors studio/backend/requirements/studio.txt;
+# test_studio_extra_matches_requirements.py catches drift.
+studio = [
+    "typer",
+    "fastapi",
+    "uvicorn",
+    "pydantic",
+    "packaging",
+    "matplotlib==3.10.9",
+    "pandas",
+    "nest_asyncio",
+    "datasets==4.3.0",
+    "pyjwt",
+    "huggingface-hub==0.36.2",
+    "structlog>=24.1.0",
+    "diceware",
+    "ddgs",
+    "cryptography>=42.0.0",
+    "boto3>=1.34.0",
+    "httpx>=0.27.0",
+    "fastmcp>=3.0.2",
+    "sqlite-vec==0.1.9",
+    "pymupdf==1.27.2.3",
+    "pymupdf4llm==0.3.4",
+    "python-docx==1.2.0",
+]
+
 triton = [
    "triton>=3.0.0 ; ('linux' in sys_platform)",
    "triton-windows ; (sys_platform == 'win32') and (platform_machine == 'AMD64' or platform_machine == 'x86_64')",
 ]
 huggingface = [
-    "unsloth_zoo>=2026.7.4",
+    "unsloth_zoo>=2026.7.6",
    "wheel>=0.42.0",
    "packaging",
    "torchvision",
@ -110,13 +144,13 @@ huggingface = [
    "transformers>=4.51.3,!=4.52.0,!=4.52.1,!=4.52.2,!=4.52.3,!=4.53.0,!=4.54.0,!=4.55.0,!=4.55.1,!=4.57.0,!=4.57.4,!=4.57.5,!=5.0.0,!=5.1.0,<=5.5.0",
    "trl>=0.18.2,!=0.19.0,<=0.24.0",
    "sentence-transformers",
-    "typer",
+    "typer>=0.12.0",
    "pydantic",
    "pyyaml",
    "nest-asyncio",
 ]
 huggingfacenotorch = [
-    "unsloth_zoo>=2026.7.4",
+    "unsloth_zoo>=2026.7.6",
    "wheel>=0.42.0",
    "packaging",
    "numpy",
@ -513,7 +547,7 @@ colab-ampere-torch220 = [
    "unsloth[flashattention]",
 ]
 colab-new = [
-    "unsloth_zoo>=2026.7.4",
+    "unsloth_zoo>=2026.7.6",
    "packaging",
    "tyro",
    "transformers>=4.51.3,!=4.52.0,!=4.52.1,!=4.52.2,!=4.52.3,!=4.53.0,!=4.54.0,!=4.55.0,!=4.55.1,!=4.57.0,!=4.57.4,!=4.57.5,!=5.0.0,!=5.1.0,<=5.5.0",
@ -529,7 +563,7 @@ colab-new = [
    "bitsandbytes>=0.45.5,!=0.46.0,!=0.48.0",
    "unsloth[triton]",
    "sentence-transformers",
-    "typer",
+    "typer>=0.12.0",
    "pydantic",
    "pyyaml",
    "nest-asyncio",
@ -781,6 +815,7 @@ repository = "https://github.com/unslothai/unsloth"

 [tool.ruff]
 target-version = "py311"
+line-length = 100
 force-exclude = true
 extend-exclude = [
    "*chat_templates.py",
@ -812,4 +847,5 @@ ignore = [
 # Narrow the default test discovery so `pytest` from the repo root
 # does NOT pick up the GPU-heavy tests under tests/python, tests/qlora,
 # etc. The CI security job runs `pytest tests/security` explicitly.
+pythonpath = ["."]
 testpaths = ["tests/security"]
--- a/scripts/build_whisper_cpp.sh
+++ b/scripts/build_whisper_cpp.sh
@ -0,0 +1,71 @@
+#!/bin/sh
+# Build whisper.cpp's whisper-server for Studio's GGUF dictation engine.
+#
+# Installs into the managed Studio home so the backend's binary discovery
+# (core/inference/stt_ggml_sidecar.py::find_whisper_server_binary) picks it up:
+#   <UNSLOTH_STUDIO_HOME>/whisper.cpp/build/bin/whisper-server   (custom home)
+#   ~/.unsloth/whisper.cpp/build/bin/whisper-server              (default)
+#
+# Usage:
+#   ./scripts/build_whisper_cpp.sh              # build the pinned tag
+#   WHISPER_CPP_TAG=v1.9.0 ./scripts/build_whisper_cpp.sh
+#
+# Requires: git, cmake, a C/C++ toolchain (the same prerequisites as a
+# llama.cpp source build). GPU backends are auto-detected by whisper.cpp's
+# CMake (Metal on macOS; set GGML_CUDA=1 to force a CUDA build on Linux).
+
+set -eu
+
+WHISPER_CPP_SOURCE="${WHISPER_CPP_SOURCE:-https://github.com/ggml-org/whisper.cpp}"
+WHISPER_CPP_TAG="${WHISPER_CPP_TAG:-v1.9.1}"
+
+STUDIO_HOME="${UNSLOTH_STUDIO_HOME:-${STUDIO_HOME:-}}"
+CUSTOM_STUDIO_HOME=false
+if [ -n "$STUDIO_HOME" ]; then
+    CUSTOM_STUDIO_HOME=true
+    INSTALL_DIR="$STUDIO_HOME/whisper.cpp"
+else
+    INSTALL_DIR="$HOME/.unsloth/whisper.cpp"
+fi
+
+command -v git >/dev/null 2>&1 || { echo "ERROR: git is required" >&2; exit 1; }
+command -v cmake >/dev/null 2>&1 || { echo "ERROR: cmake is required" >&2; exit 1; }
+
+# Same policy as studio/setup.sh's _assert_studio_owned_or_absent: never delete
+# a directory under a custom Studio home unless Studio itself created it (the
+# marker file below). Protects a user-managed whisper.cpp/src from rm -rf.
+STUDIO_OWNED_MARKER=".unsloth-studio-owned"
+if [ "$CUSTOM_STUDIO_HOME" = true ] && [ -e "$INSTALL_DIR" ] && \
+   [ ! -f "$INSTALL_DIR/$STUDIO_OWNED_MARKER" ]; then
+    echo "ERROR: $INSTALL_DIR already exists and is not marked as an Unsloth-owned whisper.cpp build tree." >&2
+    echo "       Move it aside or choose an empty UNSLOTH_STUDIO_HOME before re-running." >&2
+    exit 1
+fi
+
+echo "==> Building whisper.cpp ($WHISPER_CPP_TAG) into $INSTALL_DIR"
+mkdir -p "$INSTALL_DIR"
+: > "$INSTALL_DIR/$STUDIO_OWNED_MARKER"
+
+if [ ! -d "$INSTALL_DIR/src/.git" ]; then
+    rm -rf "$INSTALL_DIR/src"
+    git clone --depth 1 --branch "$WHISPER_CPP_TAG" "$WHISPER_CPP_SOURCE" "$INSTALL_DIR/src"
+else
+    git -C "$INSTALL_DIR/src" fetch --depth 1 origin "$WHISPER_CPP_TAG"
+    git -C "$INSTALL_DIR/src" checkout FETCH_HEAD
+fi
+
+CMAKE_FLAGS="-DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIBS=OFF"
+if [ "${GGML_CUDA:-0}" = "1" ]; then
+    CMAKE_FLAGS="$CMAKE_FLAGS -DGGML_CUDA=ON"
+fi
+
+# shellcheck disable=SC2086
+cmake -S "$INSTALL_DIR/src" -B "$INSTALL_DIR/src/build" $CMAKE_FLAGS
+NCPU="$(getconf _NPROCESSORS_ONLN 2>/dev/null || echo 4)"
+cmake --build "$INSTALL_DIR/src/build" --config Release --target whisper-server -j"$NCPU"
+
+mkdir -p "$INSTALL_DIR/build/bin"
+cp "$INSTALL_DIR/src/build/bin/whisper-server" "$INSTALL_DIR/build/bin/whisper-server"
+
+echo "==> Installed $INSTALL_DIR/build/bin/whisper-server"
+"$INSTALL_DIR/build/bin/whisper-server" --help >/dev/null 2>&1 && echo "==> Binary runs OK"
--- a/scripts/check_frontend_dep_removal.py
+++ b/scripts/check_frontend_dep_removal.py
@ -52,9 +52,7 @@ EXPECTED_NOISE_FILES = {
 }

 # File types where a quoted string can be a module specifier.
-JS_LIKE_EXT = re.compile(
-    r"\.(ts|tsx|js|jsx|mjs|cjs|html|htm|css|scss|sass|json|jsonc)$"
-)
+JS_LIKE_EXT = re.compile(r"\.(ts|tsx|js|jsx|mjs|cjs|html|htm|css|scss|sass|json|jsonc)$")
 # Files where JS import patterns could be a real module reference (.mdx is
 # real ESM; .md code fences are not).
 SCRIPT_LIKE_EXT = re.compile(r"\.(ts|tsx|js|jsx|mjs|cjs|mdx)$")
@ -251,9 +249,7 @@ def classify(pkg: str, file: str, content: str) -> str | None:
    if is_script and re.search(rf"\bimport\(\s*['\"]{esc}{sub}['\"]\s*\)", content):
        return "dynamic_import"
    # require / require.resolve
-    if is_script and re.search(
-        rf"\brequire(?:\.resolve)?\(\s*['\"]{esc}{sub}['\"]\s*\)", content
-    ):
+    if is_script and re.search(rf"\brequire(?:\.resolve)?\(\s*['\"]{esc}{sub}['\"]\s*\)", content):
        return "require"
    # Re-exports: `export * from`, `export { x } from`, `export type { Foo } from`.
    if is_script and re.search(
@ -265,16 +261,12 @@ def classify(pkg: str, file: str, content: str) -> str | None:
    # HTML script / link. Match pkg as a complete path segment so
    # `/node_modules/foo-extra/...` is not treated as usage of `foo`.
    html_pkg = rf"{esc}(?:/[^'\"#?]*)?(?=['\"#?])"
-    if is_html and re.search(
-        rf"<script[^>]*src\s*=\s*['\"][^'\"]*/{html_pkg}", content
-    ):
+    if is_html and re.search(rf"<script[^>]*src\s*=\s*['\"][^'\"]*/{html_pkg}", content):
        return "html_script"
    if is_html and re.search(rf"<link[^>]*href\s*=\s*['\"][^'\"]*/{html_pkg}", content):
        return "html_link"
    # TypeScript triple-slash
-    if is_ts and re.search(
-        rf"///\s*<reference\s+types\s*=\s*['\"]{esc}{sub}['\"]", content
-    ):
+    if is_ts and re.search(rf"///\s*<reference\s+types\s*=\s*['\"]{esc}{sub}['\"]", content):
        return "tsc_triple_slash"
    # new URL("pkg/...", import.meta.url)
    if is_script and re.search(rf"\bnew\s+URL\(\s*['\"]{esc}{sub}['\"]", content):
@ -487,18 +479,12 @@ def _next_real_bin(words: list[str], idx: int) -> str | None:
        if first in {"npx", "pnpx", "bunx"} and idx + 1 < len(words):
            idx += 1
            continue
-        if (
-            first in {"pnpm", "yarn"}
-            and idx + 2 < len(words)
-            and words[idx + 1] in {"exec", "dlx"}
-        ):
+        if first in {"pnpm", "yarn"} and idx + 2 < len(words) and words[idx + 1] in {"exec", "dlx"}:
            idx += 2
            continue

        # 3. Wrapper bin (cross-env, dotenv): skip its flags and env prefixes.
-        bin_token = first.removeprefix("./node_modules/.bin/").removeprefix(
-            "node_modules/.bin/"
-        )
+        bin_token = first.removeprefix("./node_modules/.bin/").removeprefix("node_modules/.bin/")
        if bin_token in _SCRIPT_WRAPPERS and bin_token not in seen_wrappers:
            seen_wrappers.add(bin_token)
            idx += 1
@ -524,9 +510,7 @@ def _next_real_bin(words: list[str], idx: int) -> str | None:
    return None


-def scripts_bin_refs(
-    head_pkg: dict, bin_to_pkg: dict[str, str]
-) -> dict[str, list[str]]:
+def scripts_bin_refs(head_pkg: dict, bin_to_pkg: dict[str, str]) -> dict[str, list[str]]:
    """Return `{package_name: ['scripts.X: cmd', ...]}` for every package
    referenced via its bin name in package.json scripts.

@ -582,11 +566,7 @@ def tsconfig_compiler_types_refs() -> set[str]:
            if not isinstance(t, str):
                continue
            # `vite/client` resolves to the `vite` package.
-            pkg = (
-                t.split("/", 1)[0]
-                if not t.startswith("@")
-                else "/".join(t.split("/", 2)[:2])
-            )
+            pkg = t.split("/", 1)[0] if not t.startswith("@") else "/".join(t.split("/", 2)[:2])
            out.add(pkg)
    return out

@ -724,9 +704,7 @@ _file_lines_cache: dict[str, list[str]] = {}
 def _read_file(path: str) -> list[str]:
    if path not in _file_lines_cache:
        try:
-            _file_lines_cache[path] = (
-                Path(path).read_text(errors = "replace").splitlines()
-            )
+            _file_lines_cache[path] = Path(path).read_text(errors = "replace").splitlines()
        except (OSError, UnicodeDecodeError):
            _file_lines_cache[path] = []
    return _file_lines_cache[path]
@ -841,18 +819,14 @@ def find_types_runtime_usage(pkg: str, tsc_types: set[str]) -> list[Hit]:


 def main() -> int:
-    p = argparse.ArgumentParser(
-        description = __doc__, formatter_class = argparse.RawTextHelpFormatter
-    )
+    p = argparse.ArgumentParser(description = __doc__, formatter_class = argparse.RawTextHelpFormatter)
    p.add_argument(
        "--base",
        default = "origin/main",
        help = "git ref to diff against (default: origin/main). "
        "Examples: HEAD~1, main, a-tag, a-sha.",
    )
-    p.add_argument(
-        "--base-pkg", help = "optional override: read base package.json from this path"
-    )
+    p.add_argument("--base-pkg", help = "optional override: read base package.json from this path")
    p.add_argument(
        "--base-lock",
        help = "optional override: read base package-lock.json from this path. "
@ -944,9 +918,7 @@ def main() -> int:
                print(f"  - {w}")
            print()
        if missing_imports:
-            print(
-                f"Imports without a matching package.json dep ({len(missing_imports)}):"
-            )
+            print(f"Imports without a matching package.json dep ({len(missing_imports)}):")
            for file, ln, spec in missing_imports[:20]:
                print(f"  - {file}:{ln}  imports '{spec}'")
            print()
@ -984,9 +956,7 @@ def main() -> int:
            return 1
        return 0

-    print(
-        f"Checking {len(removed)} removed package(s) from studio/frontend/package.json"
-    )
+    print(f"Checking {len(removed)} removed package(s) from studio/frontend/package.json")
    print(f"Base: {args.base}    Head: working tree")
    print()

@ -1010,9 +980,7 @@ def main() -> int:
        top = f"node_modules/{name}"
        top_path = top if top in reachable_paths else None
        nested = sorted(
-            p
-            for p in reachable_paths
-            if p != top and p.endswith(f"/node_modules/{name}")
+            p for p in reachable_paths if p != top and p.endswith(f"/node_modules/{name}")
        )
        return top_path, nested

@ -1058,9 +1026,7 @@ def main() -> int:
    _print_hygiene()

    if failures:
-        print(
-            f"FAIL: {len(failures)} removed package(s) still referenced and not resolvable"
-        )
+        print(f"FAIL: {len(failures)} removed package(s) still referenced and not resolvable")
        for name, _ in failures:
            print(f"  - {name}")
        return 1
--- a/scripts/check_new_install_scripts.py
+++ b/scripts/check_new_install_scripts.py
@ -38,9 +38,7 @@ HIGH = "HIGH"
 class Finding:
    __slots__ = ("severity", "name", "version", "kind", "detail")

-    def __init__(
-        self, severity: str, name: str, version: str, kind: str, detail: str
-    ) -> None:
+    def __init__(self, severity: str, name: str, version: str, kind: str, detail: str) -> None:
        self.severity = severity
        self.name = name
        self.version = version
@ -163,9 +161,7 @@ def diff_new_install_scripts(base_lock: dict, head_lock: dict) -> list[Finding]:
        if key in base:
            continue  # pre-existing install-script dep; not in scope
        name = head[key]
-        version = (
-            key[len(name) + 1 :] if key.startswith(name + "@") else "<unversioned>"
-        )
+        version = key[len(name) + 1 :] if key.startswith(name + "@") else "<unversioned>"
        scripts = _fetch_registry_scripts(name, version)
        if scripts:
            detail = "; ".join(f"{h}={cmd!r}" for h, cmd in scripts.items())
--- a/scripts/enforce_kwargs_spacing.py
+++ b/scripts/enforce_kwargs_spacing.py
@ -123,9 +123,7 @@ def remove_redundant_passes(text: str) -> tuple[str, bool]:
    lines = text.splitlines(keepends=True)
    changed = False

-    for node in sorted(
-        redundant, key=lambda item: (item.lineno, item.col_offset), reverse=True
-    ):
+    for node in sorted(redundant, key=lambda item: (item.lineno, item.col_offset), reverse=True):
        start = node.lineno - 1
        end = (node.end_lineno or node.lineno) - 1
        if start >= len(lines):
@ -183,11 +181,7 @@ def remove_blank_after_short_import(text: str) -> tuple[str, bool]:
        out: list[list[ast.stmt]] = []
        for attr in ("body", "orelse", "finalbody"):
            val = getattr(node, attr, None)
-            if (
-                isinstance(val, list)
-                and val
-                and all(isinstance(s, ast.stmt) for s in val)
-            ):
+            if isinstance(val, list) and val and all(isinstance(s, ast.stmt) for s in val):
                out.append(val)
        return out

@ -205,9 +199,7 @@ def remove_blank_after_short_import(text: str) -> tuple[str, bool]:
                    j += 1
                if j + 1 < len(suite):  # an import block followed by another statement
                    last_imp, nxt = suite[j], suite[j + 1]
-                    gap = range(
-                        (last_imp.end_lineno or last_imp.lineno) + 1, nxt.lineno
-                    )
+                    gap = range((last_imp.end_lineno or last_imp.lineno) + 1, nxt.lineno)
                    nums = [n for n in gap if 1 <= n <= len(lines)]
                    if nums and all(lines[n - 1].strip() == "" for n in nums):
                        drop.update(nums)
@ -219,13 +211,7 @@ def remove_blank_after_short_import(text: str) -> tuple[str, bool]:
    return "".join(kept), True


-_STRING_TRIVIA = (
-    tokenize.NL,
-    tokenize.NEWLINE,
-    tokenize.COMMENT,
-    tokenize.INDENT,
-    tokenize.DEDENT,
-)
+_STRING_TRIVIA = (tokenize.NL, tokenize.NEWLINE, tokenize.COMMENT, tokenize.INDENT, tokenize.DEDENT)


 _DEF_MIN_PARAMS_FOR_MULTILINE = 3  # signatures with < this many params stay one line
--- a/scripts/lint_workflow_triggers.py
+++ b/scripts/lint_workflow_triggers.py
@ -29,9 +29,7 @@ from pathlib import Path
 try:
    import yaml
 except ImportError:
-    print(
-        "ERROR: PyYAML is required. Install with 'pip install pyyaml'", file = sys.stderr
-    )
+    print("ERROR: PyYAML is required. Install with 'pip install pyyaml'", file = sys.stderr)
    sys.exit(2)

 REPO_ROOT = Path(__file__).resolve().parents[1]
@ -54,14 +52,14 @@ def _normalise_on(on_field):

 def _load_workflow(path: Path):
    try:
-        return yaml.safe_load(path.read_text())
+        return yaml.safe_load(path.read_text(encoding = "utf-8"))
    except Exception as exc:
        print(f"ERROR: failed to parse {path}: {exc}", file = sys.stderr)
        sys.exit(2)


 def _extract_cache_keys(path: Path) -> list[str]:
-    text = path.read_text()
+    text = path.read_text(encoding = "utf-8")
    keys: list[str] = []
    for m in re.finditer(r"(?:^|\n)\s*key:\s*([^\n]+)", text):
        keys.append(m.group(1).strip())
@ -106,7 +104,7 @@ def main() -> int:

        for t in RESTRICTED_TRIGGERS:
            if t in triggers:
-                text = path.read_text()
+                text = path.read_text(encoding = "utf-8")
                if "lint:workflow_triggers-allow-workflow_run" not in text:
                    findings.append(
                        f"{path.name}: RESTRICTED trigger '{t}' requires an "
@ -135,9 +133,7 @@ def main() -> int:
                )

    if findings:
-        print(
-            "Workflow trigger lint failed with the following issues:", file = sys.stderr
-        )
+        print("Workflow trigger lint failed with the following issues:", file = sys.stderr)
        for f in findings:
            print(f"  - {f}", file = sys.stderr)
        return 1
--- a/scripts/lockfile_supply_chain_audit.py
+++ b/scripts/lockfile_supply_chain_audit.py
@ -459,9 +459,7 @@ def audit_npm_lockfile(path: Path) -> list[Finding]:
                    path = str(path),
                    package = key,
                    kind = "blocked-known-malicious",
-                    detail = (
-                        f"{pkg_name}@{version} is on the BLOCKED_NPM_VERSIONS list"
-                    ),
+                    detail = (f"{pkg_name}@{version} is on the BLOCKED_NPM_VERSIONS list"),
                )
            )

@ -665,9 +663,7 @@ def main(argv: list[str] | None = None) -> int:
        "--cargo-lockfile",
        action = "append",
        default = None,
-        help = (
-            "Path to a Cargo.lock (repeatable). Default: studio/src-tauri/Cargo.lock."
-        ),
+        help = ("Path to a Cargo.lock (repeatable). Default: studio/src-tauri/Cargo.lock."),
    )
    parser.add_argument(
        "--strict",
--- a/scripts/notebook_to_python.py
+++ b/scripts/notebook_to_python.py
@ -155,9 +155,7 @@ def convert_cell_to_python(source: str, *, allow_shell: bool = True) -> str:
                cmd_lines.append(lines[i].strip())
            full_cmd = "\n".join(cmd_lines)

-            result.extend(
-                _emit_shell_command(indent, full_cmd, allow_shell = allow_shell)
-            )
+            result.extend(_emit_shell_command(indent, full_cmd, allow_shell = allow_shell))

        # %cd path -> os.chdir(path)
        elif stripped.startswith("%cd "):
@ -280,9 +278,7 @@ def convert_notebook_to_script(
        source_name = source

    output_filename = filename.replace(".ipynb", ".py")
-    output_filename = (
-        output_filename.replace("(", "").replace(")", "").replace("-", "_")
-    )
+    output_filename = output_filename.replace("(", "").replace(")", "").replace("-", "_")

    if output_dir:
        output_path = os.path.join(output_dir, output_filename)
@ -301,9 +297,7 @@ def convert_notebook_to_script(
 def main():
    import argparse

-    class Formatter(
-        argparse.ArgumentDefaultsHelpFormatter, argparse.RawDescriptionHelpFormatter
-    ):
+    class Formatter(argparse.ArgumentDefaultsHelpFormatter, argparse.RawDescriptionHelpFormatter):
        pass

    parser = argparse.ArgumentParser(
@ -317,12 +311,8 @@ Examples:
  python notebook_to_python.py https://github.com/unslothai/notebooks/blob/main/nb/Oute_TTS_(1B).ipynb
 """,
    )
-    parser.add_argument(
-        "notebooks", nargs = "+", help = "Notebook files or URLs to convert."
-    )
-    parser.add_argument(
-        "-o", "--output", dest = "output_dir", default = ".", help = "Output directory."
-    )
+    parser.add_argument("notebooks", nargs = "+", help = "Notebook files or URLs to convert.")
+    parser.add_argument("-o", "--output", dest = "output_dir", default = ".", help = "Output directory.")
    # Default True for backwards compat; pass --no-allow-shell for untrusted notebooks.
    parser.add_argument(
        "--allow-shell",
--- a/scripts/notebook_validator.py
+++ b/scripts/notebook_validator.py
@ -87,9 +87,7 @@ COLAB_ORACLE_FILES: dict[str, str] = {
    "apt-list-gpu.txt": "colab_apt_list.gpu.txt",
    "os-info-gpu.txt": "colab_os_info.gpu.txt",
 }
-COLAB_ORACLE_BASE_URL = (
-    "https://raw.githubusercontent.com/googlecolab/backend-info/main/"
-)
+COLAB_ORACLE_BASE_URL = "https://raw.githubusercontent.com/googlecolab/backend-info/main/"

 # ----- Compat tables. PRs add rows as new releases land. ----- #

@ -97,8 +95,8 @@ COLAB_ORACLE_BASE_URL = (
 # Source: pytorch/torchcodec compatibility matrix on its README.
 TORCH_TORCHCODEC: dict[str, set[str]] = {
    "2.10": {"0.10"},
-    "2.9": {"0.7", "0.8", "0.9"},
-    "2.8": {"0.6"},
+    "2.9": {"0.8", "0.9"},
+    "2.8": {"0.6", "0.7"},
    "2.7": {"0.3", "0.4", "0.5"},
    "2.6": {"0.2", "0.3"},
    "2.5": {"0.1", "0.2"},
@ -189,9 +187,7 @@ def install_cells(nb: dict[str, Any]) -> list[tuple[int, str]]:
        if first and first[0].strip().startswith("%%capture"):
            out.append((i, src))
            continue
-        if re.search(
-            r"^[ \t]*!\s*(uv\s+)?pip\s+(install|uninstall)\b", src, re.MULTILINE
-        ):
+        if re.search(r"^[ \t]*!\s*(uv\s+)?pip\s+(install|uninstall)\b", src, re.MULTILINE):
            out.append((i, src))
    return out

@ -322,9 +318,7 @@ def parse_pip_line(line: str, line_no: int = 0) -> PipInvocation | None:
        if t in ("install", "uninstall"):
            continue
        packages.append(t)
-    return PipInvocation(
-        tool = tool, flags = flags, packages = packages, raw = line, line_no = line_no
-    )
+    return PipInvocation(tool = tool, flags = flags, packages = packages, raw = line, line_no = line_no)


 def _glue_line_continuations(text: str) -> list[tuple[int, str]]:
@ -409,9 +403,7 @@ def pypi_metadata(name: str, version: str) -> dict[str, Any] | None:
    return data


-def transitive_constraint(
-    name: str, version: str, target: str
-) -> tuple[str | None, list[str]]:
+def transitive_constraint(name: str, version: str, target: str) -> tuple[str | None, list[str]]:
    """Return (raw_specifier_string_or_None, list_of_(op,version) tuples)
    for the constraint that `name==version` places on `target`.
    """
@ -485,10 +477,7 @@ def resolved_set(install_cell: str, colab: dict[str, str]) -> dict[str, str]:
                    out[sp.name] = ver
                    pinned.add(sp.name)
                elif op == "<=" and sp.name not in pinned:
-                    if (
-                        sp.name not in upper_bounds
-                        or cmp_versions(ver, upper_bounds[sp.name]) < 0
-                    ):
+                    if sp.name not in upper_bounds or cmp_versions(ver, upper_bounds[sp.name]) < 0:
                        upper_bounds[sp.name] = ver
    # Apply upper bounds where Colab's preinstall violates them.
    for name, ub in upper_bounds.items():
@ -503,9 +492,7 @@ def resolved_set(install_cell: str, colab: dict[str, str]) -> dict[str, str]:
 # ----- Rules ----- #


-def rule_inst_001_git_plus(
-    install_cell: str, file: str, cell_idx: int
-) -> list[Finding]:
+def rule_inst_001_git_plus(install_cell: str, file: str, cell_idx: int) -> list[Finding]:
    findings: list[Finding] = []
    for inv in iter_pip_invocations(install_cell):
        if any("git+" in p for p in inv.packages) or "git+" in inv.raw:
@ -693,9 +680,7 @@ def rule_inst_005_transformers_tokenizers(
 _RE_DOUBLE_BANG = re.compile(r"^[ \t]*!{2,}\s*pip\b", re.MULTILINE)


-def rule_inst_006_double_bang(
-    install_cell: str, file: str, cell_idx: int
-) -> list[Finding]:
+def rule_inst_006_double_bang(install_cell: str, file: str, cell_idx: int) -> list[Finding]:
    findings: list[Finding] = []
    for m in _RE_DOUBLE_BANG.finditer(install_cell):
        line_no = install_cell.count("\n", 0, m.start()) + 1
@ -786,9 +771,7 @@ POLICY_CLAUSES_DEFAULT = [
 ]


-def extract_policy_clauses(
-    update_script: pathlib.Path,
-) -> list[tuple[str, re.Pattern[str], Any]]:
+def extract_policy_clauses(update_script: pathlib.Path) -> list[tuple[str, re.Pattern[str], Any]]:
    """Best-effort scan of update_all_notebooks.py for canonical phrases;
    falls back to POLICY_CLAUSES_DEFAULT (which we use directly today). The
    permissive regexes avoid false positives on template rewords."""
@ -848,11 +831,7 @@ def cmd_drift(args: argparse.Namespace) -> int:
        print(f"FAIL: {update_script} not found", file = sys.stderr)
        return 2
    # Stash any pre-existing dirty state, run the updater, diff, restore.
-    head = (
-        subprocess.check_output(["git", "rev-parse", "HEAD"], cwd = nbdir)
-        .decode()
-        .strip()
-    )
+    head = subprocess.check_output(["git", "rev-parse", "HEAD"], cwd = nbdir).decode().strip()
    subprocess.run(
        ["git", "-C", str(nbdir), "stash", "--include-untracked"],
        check = False,
@ -953,9 +932,7 @@ def cmd_convert(args: argparse.Namespace) -> int:
                        hint = proc.stderr[-200:].strip(),
                    )
                )
-    print(
-        f"converted {len(notebooks) - len(failed)}/{len(notebooks)} notebooks to {out}"
-    )
+    print(f"converted {len(notebooks) - len(failed)}/{len(notebooks)} notebooks to {out}")
    _emit(failed)
    return 0 if not failed else 1

@ -965,11 +942,7 @@ def cmd_convert(args: argparse.Namespace) -> int:

 def cmd_lint(args: argparse.Namespace) -> int:
    nbdir = pathlib.Path(args.notebooks_dir).resolve()
-    colab_path = (
-        pathlib.Path(args.colab_pin).resolve()
-        if args.colab_pin
-        else COLAB_FALLBACK_FILE
-    )
+    colab_path = pathlib.Path(args.colab_pin).resolve() if args.colab_pin else COLAB_FALLBACK_FILE
    colab = parse_pip_freeze(colab_path)
    if not colab:
        print(
@ -1009,13 +982,9 @@ def cmd_lint(args: argparse.Namespace) -> int:
            first_cell = cells[0][0] if cells else None
            findings += rule_inst_003_peft_torchao(merged, oracle, rel, first_cell)
            findings += rule_inst_004_torchcodec_torch(merged, oracle, rel, first_cell)
-            findings += rule_inst_005_transformers_tokenizers(
-                merged, oracle, rel, first_cell
-            )
+            findings += rule_inst_005_transformers_tokenizers(merged, oracle, rel, first_cell)
            if not args.no_pypi:
-                findings += rule_inst_002_no_deps_transitive(
-                    merged, oracle, rel, first_cell
-                )
+                findings += rule_inst_002_no_deps_transitive(merged, oracle, rel, first_cell)
        findings += scan_user_cells(nb, rel)
    _emit(findings)
    return 0 if not any(f.severity == "error" for f in findings) else 1
@ -1190,9 +1159,7 @@ def cmd_colab_diff(args: argparse.Namespace) -> int:
            print(f"::warning::colab-diff: could not fetch {url}: {e}")
            continue
        if not snap_path.exists():
-            print(
-                f"::warning::colab-diff: no committed snapshot at {snap_path}; skipping"
-            )
+            print(f"::warning::colab-diff: no committed snapshot at {snap_path}; skipping")
            continue
        snapshot_text = snap_path.read_text(encoding = "utf-8", errors = "replace")
        parser = _COLAB_ORACLE_PARSERS[upstream_name]
--- a/scripts/scan_npm_packages.py
+++ b/scripts/scan_npm_packages.py
@ -770,8 +770,7 @@ def download_tarball(
                    written += len(chunk)
                    if written > max_bytes:
                        return dest, (
-                            f"download exceeded cap {max_bytes} bytes "
-                            f"after {written} bytes"
+                            f"download exceeded cap {max_bytes} bytes " f"after {written} bytes"
                        )
                    h.update(chunk)
                    out.write(chunk)
@ -868,11 +867,7 @@ def safe_extract(
                # each gets its own cap (both are bounded).
                header = src.read(16)
                is_binary = _looks_binary(name, header)
-                file_cap = (
-                    HARD_MAX_BINARY_FILE_BYTES
-                    if is_binary
-                    else HARD_MAX_TEXT_FILE_BYTES
-                )
+                file_cap = HARD_MAX_BINARY_FILE_BYTES if is_binary else HARD_MAX_TEXT_FILE_BYTES
                if declared > file_cap:
                    return (
                        f"member {name!r} declared size {declared} > "
@ -1200,11 +1195,7 @@ def _format_match(


 def _stream_overflow_digest(
-    matches,
-    lines: list[str],
-    sl_blanked: list[str],
-    ml_blanked: list[str],
-    nl: list[int],
+    matches, lines: list[str], sl_blanked: list[str], ml_blanked: list[str], nl: list[int]
 ) -> tuple[int, str]:
    """A single digest binding the LOGICAL line (the bound bracket-group context,
    not just the regex match text) of every overflow match in the iterable, plus
@ -1220,12 +1211,7 @@ def _stream_overflow_digest(


 def _fold_overflow_match(
-    h,
-    m: re.Match,
-    lines: list[str],
-    sl_blanked: list[str],
-    ml_blanked: list[str],
-    nl: list[int],
+    h, m: re.Match, lines: list[str], sl_blanked: list[str], ml_blanked: list[str], nl: list[int]
 ) -> None:
    """Fold one overflow match's whitespace-normalized logical-line context into the
    running hash ``h``. Shared by _stream_overflow_digest and the inline overflow
@ -1255,14 +1241,11 @@ def _evidence(
        return ""
    lines, sl_blanked, ml_blanked, nl = _index_text(text)
    shown = [
-        _format_match(text, lines, sl_blanked, ml_blanked, nl, m, max_chars)
-        for m in shown_matches
+        _format_match(text, lines, sl_blanked, ml_blanked, nl, m, max_chars) for m in shown_matches
    ]
    # Fold the rest (past the cap) into one digest as they arrive, never building a
    # second list. Byte-identical to digesting matches[_MAX_EVIDENCE_MATCHES:].
-    overflow_count, digest = _stream_overflow_digest(
-        it, lines, sl_blanked, ml_blanked, nl
-    )
+    overflow_count, digest = _stream_overflow_digest(it, lines, sl_blanked, ml_blanked, nl)
    if overflow_count:
        shown.append(f"(+{overflow_count} more) sha256:{digest}")
    return " | ".join(shown)
@ -1308,9 +1291,7 @@ _REGEX_PRECEDING_KEYWORDS = frozenset(
        "case",
    }
 )
-_IDENT_CHARS = frozenset(
-    "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_$"
-)
+_IDENT_CHARS = frozenset("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_$")


 def _slash_is_regex(prev_tok: str) -> bool:
@ -1566,9 +1547,7 @@ def scan_package_json(pkg: PackageEntry, rel: str, text: str) -> list[Finding]:
    if isinstance(opt, dict):
        for k, v in opt.items():
            if isinstance(v, str) and (
-                v.startswith("github:")
-                or v.startswith("git+")
-                or v.startswith("git://")
+                v.startswith("github:") or v.startswith("git+") or v.startswith("git://")
            ):
                findings.append(
                    Finding(
@ -1633,9 +1612,7 @@ def _outbound_host_evidence(text: str, host: str) -> str:
        ),
        # Host-config form: capture the whole line (path/headers/body), so a
        # changed outbound payload on the same hostname line reopens the key.
-        re.compile(
-            rf"[^\n]*(?:host|hostname)\s*:\s*['\"`]{host_re}['\"`][^\n]*", re.IGNORECASE
-        ),
+        re.compile(rf"[^\n]*(?:host|hostname)\s*:\s*['\"`]{host_re}['\"`][^\n]*", re.IGNORECASE),
    )
    # Record EVERY outbound context for the host, not just the first form that
    # matches: a file that already has a baselined URL for the host and later adds
@ -1664,16 +1641,12 @@ def _outbound_host_evidence(text: str, host: str) -> str:
                claimed.append((m.start(), m.end()))
                chosen.append(m)
            else:
-                _fold_overflow_match(
-                    overflow_hash, m, lines, sl_blanked, ml_blanked, nl
-                )
+                _fold_overflow_match(overflow_hash, m, lines, sl_blanked, ml_blanked, nl)
                overflow_count += 1
    if not chosen:
        return host
    chosen.sort(key = lambda m: m.start())
-    shown = [
-        _format_match(text, lines, sl_blanked, ml_blanked, nl, m, 1000) for m in chosen
-    ]
+    shown = [_format_match(text, lines, sl_blanked, ml_blanked, nl, m, 1000) for m in chosen]
    if overflow_count:
        shown.append(f"(+{overflow_count} more) sha256:{overflow_hash.hexdigest()}")
    return " | ".join(shown)
@ -1757,9 +1730,7 @@ def scan_text_blob(pkg: PackageEntry, rel: str, text: str) -> list[Finding]:
                filename = rel,
                pattern = "js-fetch-eval",
                evidence = _evidence(text, _JS_FETCH_EVAL),
-                detail = (
-                    "Function/eval against base64-decoded payload (obfuscated dropper shape)"
-                ),
+                detail = ("Function/eval against base64-decoded payload (obfuscated dropper shape)"),
            )
        )
    if _JS_ENV_TOKEN.search(text):
@ -1900,9 +1871,7 @@ def scan_one(pkg: PackageEntry, workspace: Path) -> tuple[list[Finding], str | N
 # Mirrors scan_packages.py. Regenerate with ``--write-baseline``.
 # ─────────────────────────────────────────────────────────────────────

-_DEFAULT_BASELINE_PATH = str(
-    Path(__file__).resolve().parent / "scan_npm_packages_baseline.json"
-)
+_DEFAULT_BASELINE_PATH = str(Path(__file__).resolve().parent / "scan_npm_packages_baseline.json")

 # Bumped when the entry-key semantics change. v3 adds an evidence hash so a new
 # payload under an already-listed package/path/pattern is not auto-suppressed; v2
@ -1990,9 +1959,7 @@ def _load_baseline(path: str) -> set[tuple[str, str, str, str]]:
        if not isinstance(e, dict):
            continue
        try:
-            evidence_hash = e.get("evidence_hash") or _evidence_hash(
-                e.get("evidence") or ""
-            )
+            evidence_hash = e.get("evidence_hash") or _evidence_hash(e.get("evidence") or "")
            if not e.get("evidence_hash"):
                legacy += 1
            keys.add(
@ -2239,8 +2206,7 @@ def main(argv: list[str] | None = None) -> int:
    if hard_errors or blocking:
        if blocking:
            print(
-                f"\n[scan-npm] FAIL: {len(blocking)} finding(s) "
-                f"at or above {threshold}",
+                f"\n[scan-npm] FAIL: {len(blocking)} finding(s) " f"at or above {threshold}",
                file = sys.stderr,
            )
        return 1
--- a/scripts/scan_packages.py
+++ b/scripts/scan_packages.py
@ -160,9 +160,7 @@ RE_EMBEDDED_KEYS = re.compile(
 )

 # Full PEM block (BEGIN..END), used to pin a multiline key body in evidence.
-RE_PEM_BLOCK = re.compile(
-    r"-----BEGIN[^\n]*KEY-----.*?-----END[^\n]*KEY-----", re.DOTALL
-)
+RE_PEM_BLOCK = re.compile(r"-----BEGIN[^\n]*KEY-----.*?-----END[^\n]*KEY-----", re.DOTALL)

 # Cloud metadata / IMDS endpoints
 RE_CLOUD_METADATA = re.compile(
@ -326,9 +324,7 @@ RE_CRYPTO_THEFT = re.compile(
 RE_PTH_IMPORT = re.compile(r"^\s*import\s+", re.MULTILINE)

 # openssl CLI invocations via subprocess (encrypted exfiltration)
-RE_OPENSSL_CLI = re.compile(
-    r"\bopenssl\s+(enc|rand|rsautl|pkeyutl|genrsa|dgst|s_client)\b"
-)
+RE_OPENSSL_CLI = re.compile(r"\bopenssl\s+(enc|rand|rsautl|pkeyutl|genrsa|dgst|s_client)\b")

 # Write to /tmp then execute (staged dropper)
 RE_TEMP_EXEC = re.compile(
@ -537,9 +533,7 @@ def check_pth_file(content: str, filename: str, package: str) -> list[Finding]:
 # A STRING after one of these tokens (and before a NEWLINE) is a bare
 # docstring/doctest/prose statement -- the dominant FP source -- so we blank it.
 # A string after `=` or `(` is real code and is never blanked.
-_LINE_START_TOKENS = frozenset(
-    {tokenize.NEWLINE, tokenize.NL, tokenize.INDENT, tokenize.DEDENT}
-)
+_LINE_START_TOKENS = frozenset({tokenize.NEWLINE, tokenize.NL, tokenize.INDENT, tokenize.DEDENT})


 def _is_fstring(tok_string: str) -> bool:
@ -1431,9 +1425,7 @@ def _extract_evidence(
            if len(head) > _MAX_LINE_CHARS:
                head = head[:_MAX_LINE_CHARS] + "..."
            return f"L{start}: {head} sha256:{digest}"
-        return "\n".join(
-            f"L{start + i}: {_cap_line(ln.rstrip())}" for i, ln in enumerate(span)
-        )
+        return "\n".join(f"L{start + i}: {_cap_line(ln.rstrip())}" for i, ln in enumerate(span))

    for i, line in enumerate(lines, 1):
        if pattern.search(line):
@ -1492,9 +1484,7 @@ def _embedded_key_evidence(content: str) -> str:
    ev = _extract_evidence(content, RE_EMBEDDED_KEYS)
    blocks = RE_PEM_BLOCK.findall(content)
    if blocks:
-        digest = hashlib.sha256(
-            "\n".join(blocks).encode("utf-8", "replace")
-        ).hexdigest()
+        digest = hashlib.sha256("\n".join(blocks).encode("utf-8", "replace")).hexdigest()
        ev = f"{ev} sha256:{digest}" if ev else f"sha256:{digest}"
    return ev

@ -1804,15 +1794,13 @@ def iter_archive_files(archive_path: str):
                # historically dereferenced them on extract.
                if member.issym() or member.islnk():
                    print(
-                        f"  [WARN] {path.name}: refused link member "
-                        f"{member.name!r}",
+                        f"  [WARN] {path.name}: refused link member " f"{member.name!r}",
                        file = sys.stderr,
                    )
                    continue
                if member.isdev() or member.isfifo():
                    print(
-                        f"  [WARN] {path.name}: refused special member "
-                        f"{member.name!r}",
+                        f"  [WARN] {path.name}: refused special member " f"{member.name!r}",
                        file = sys.stderr,
                    )
                    continue
@ -1987,9 +1975,7 @@ _SDIST_DOWNLOAD_TIMEOUT = 180
 # Never fetch an archive larger than we would be willing to scan (iter_archive_files cap).
 _MAX_SDIST_BYTES = HARD_MAX_TOTAL_BYTES
 # Direct sdist bytes only ever come from PyPI's own CDN; refuse anything else.
-_TRUSTED_PYPI_HOSTS = frozenset(
-    {"files.pythonhosted.org", "pypi.org", "pypi.python.org"}
-)
+_TRUSTED_PYPI_HOSTS = frozenset({"files.pythonhosted.org", "pypi.org", "pypi.python.org"})


 def _spec_pin_version(spec: str) -> str | None:
@ -2028,9 +2014,7 @@ def _release_files(meta: dict, version: str | None) -> list[dict]:

 def _release_has_wheel(meta: dict, version: str | None) -> bool:
    """True if the (pinned or latest) release publishes any bdist_wheel."""
-    return any(
-        f.get("packagetype") == "bdist_wheel" for f in _release_files(meta, version)
-    )
+    return any(f.get("packagetype") == "bdist_wheel" for f in _release_files(meta, version))


 def _is_trusted_pypi_url(url: str) -> bool:
@ -2156,14 +2140,10 @@ def _download_sdist_direct(
        return None, f"refusing non-PyPI sdist URL for {name}: {url[:80]}"
    # basename + sanitize keeps the path inside dest; the char class preserves
    # the real `.tar.gz` / `.zip` suffix so the archive reader picks the format.
-    safe_fname = (
-        _RE_PKG_NAME_SANITIZE.sub("_", os.path.basename(fname)) or "sdist.tar.gz"
-    )
+    safe_fname = _RE_PKG_NAME_SANITIZE.sub("_", os.path.basename(fname)) or "sdist.tar.gz"
    out = os.path.join(dest, safe_fname)
    try:
-        req = urllib.request.Request(
-            url, headers = {"Accept": "application/octet-stream"}
-        )
+        req = urllib.request.Request(url, headers = {"Accept": "application/octet-stream"})
        with urllib.request.urlopen(req, timeout = _SDIST_DOWNLOAD_TIMEOUT) as resp:
            if getattr(resp, "status", 200) != 200:
                return None, f"sdist HTTP {getattr(resp, 'status', '?')} for {name}"
@ -2178,10 +2158,7 @@ def _download_sdist_direct(
        )
        return out, None
    except Exception as exc:
-        return (
-            None,
-            f"sdist download failed for {name}: {type(exc).__name__}: {str(exc)[:120]}",
-        )
+        return None, f"sdist download failed for {name}: {type(exc).__name__}: {str(exc)[:120]}"


 def _pip_download_with_deps(
@ -2202,9 +2179,7 @@ def _pip_download_with_deps(
        dest,
    ] + list(specs)
    try:
-        proc = subprocess.run(
-            cmd, capture_output = True, text = True, timeout = timeout, env = env
-        )
+        proc = subprocess.run(cmd, capture_output = True, text = True, timeout = timeout, env = env)
        return proc.returncode, proc.stderr or ""
    except subprocess.TimeoutExpired:
        return 124, "pip download (with deps) timed out"
@ -2244,9 +2219,7 @@ def _resolve_per_spec_with_deps(
            spec,
        ]
        try:
-            proc = subprocess.run(
-                cmd, capture_output = True, text = True, timeout = 300, env = env
-            )
+            proc = subprocess.run(cmd, capture_output = True, text = True, timeout = 300, env = env)
        except subprocess.TimeoutExpired:
            download_errors.append(f"per-spec --with-deps timed out for {spec}")
            continue
@ -2258,9 +2231,7 @@ def _resolve_per_spec_with_deps(
            if fpath is None:
                download_errors.append(serr or f"sdist fetch failed for {name}")
                continue
-            sdist_dep_followups.extend(
-                _requires_dist_for(name, version, meta, download_errors)
-            )
+            sdist_dep_followups.extend(_requires_dist_for(name, version, meta, download_errors))
            continue
        # Has a wheel but the full transitive tree won't co-resolve
        # (ResolutionImpossible) -- typically a package the requirement file
@ -2280,9 +2251,7 @@ def _resolve_per_spec_with_deps(
            spec,
        ]
        try:
-            nd = subprocess.run(
-                nd_cmd, capture_output = True, text = True, timeout = 180, env = env
-            )
+            nd = subprocess.run(nd_cmd, capture_output = True, text = True, timeout = 180, env = env)
        except subprocess.TimeoutExpired:
            download_errors.append(f"per-spec --no-deps timed out for {spec}")
            continue
@ -2296,9 +2265,7 @@ def _resolve_per_spec_with_deps(
            # which --no-deps skips. Recover the declared deps so that class is
            # still scanned (each is fetched as a wheel or direct sdist below).
            if meta is not None:
-                sdist_dep_followups.extend(
-                    _requires_dist_for(name, version, meta, download_errors)
-                )
+                sdist_dep_followups.extend(_requires_dist_for(name, version, meta, download_errors))
            continue
        # --no-deps also failed: last-ditch sdist fetch at the pinned version.
        if meta is not None:
@ -2306,8 +2273,7 @@ def _resolve_per_spec_with_deps(
            if fpath is not None:
                continue
        download_errors.append(
-            f"per-spec failed for {spec} (with-deps and --no-deps): "
-            f"{nd.stderr.strip()[:240]}"
+            f"per-spec failed for {spec} (with-deps and --no-deps): " f"{nd.stderr.strip()[:240]}"
        )

    # Recover the transitive deps of sdist-only packages. A depth-bounded,
@ -2336,9 +2302,7 @@ def _resolve_per_spec_with_deps(
            dep,
        ]
        try:
-            proc = subprocess.run(
-                cmd, capture_output = True, text = True, timeout = 300, env = env
-            )
+            proc = subprocess.run(cmd, capture_output = True, text = True, timeout = 300, env = env)
        except subprocess.TimeoutExpired:
            print(f"  [WARN] dep download timed out for {dep}", file = sys.stderr)
            continue
@ -2346,21 +2310,14 @@ def _resolve_per_spec_with_deps(
            continue
        meta = _pypi_json(dep_name)
        if meta is None:
-            print(
-                f"  [WARN] could not resolve indirect dep {dep}; skipping",
-                file = sys.stderr,
-            )
+            print(f"  [WARN] could not resolve indirect dep {dep}; skipping", file = sys.stderr)
            continue
        if not _release_has_wheel(meta, dep_ver):
            fpath, serr = _download_sdist_direct(dep_name, dep_ver, dest, meta = meta)
            if fpath is None:
-                print(
-                    f"  [WARN] could not fetch sdist dep {dep}: {serr}", file = sys.stderr
-                )
+                print(f"  [WARN] could not fetch sdist dep {dep}: {serr}", file = sys.stderr)
            elif depth < _MAX_DEP_FOLLOWUP_DEPTH:
-                worklist.extend(
-                    (d, depth + 1) for d in _requires_dist_for(dep_name, dep_ver, meta)
-                )
+                worklist.extend((d, depth + 1) for d in _requires_dist_for(dep_name, dep_ver, meta))
            continue
        # Wheel published but its tree won't co-resolve (a sdist-only child).
        # Fetch the dep alone so it is scanned, then chase its own declared deps.
@ -2376,28 +2333,19 @@ def _resolve_per_spec_with_deps(
            dep,
        ]
        try:
-            nd = subprocess.run(
-                nd_cmd, capture_output = True, text = True, timeout = 180, env = env
-            )
+            nd = subprocess.run(nd_cmd, capture_output = True, text = True, timeout = 180, env = env)
        except subprocess.TimeoutExpired:
            print(f"  [WARN] dep --no-deps timed out for {dep}", file = sys.stderr)
            continue
        if nd.returncode == 0:
            if depth < _MAX_DEP_FOLLOWUP_DEPTH:
-                worklist.extend(
-                    (d, depth + 1) for d in _requires_dist_for(dep_name, dep_ver, meta)
-                )
+                worklist.extend((d, depth + 1) for d in _requires_dist_for(dep_name, dep_ver, meta))
            continue
        fpath, _serr = _download_sdist_direct(dep_name, dep_ver, dest, meta = meta)
        if fpath is None:
-            print(
-                f"  [WARN] could not resolve indirect dep {dep}; skipping",
-                file = sys.stderr,
-            )
+            print(f"  [WARN] could not resolve indirect dep {dep}; skipping", file = sys.stderr)
        elif depth < _MAX_DEP_FOLLOWUP_DEPTH:
-            worklist.extend(
-                (d, depth + 1) for d in _requires_dist_for(dep_name, dep_ver, meta)
-            )
+            worklist.extend((d, depth + 1) for d in _requires_dist_for(dep_name, dep_ver, meta))


 def download_packages(
@ -2462,9 +2410,7 @@ def download_packages(
                spec,
            ]
            try:
-                proc = subprocess.run(
-                    cmd, capture_output = True, text = True, timeout = 120, env = env
-                )
+                proc = subprocess.run(cmd, capture_output = True, text = True, timeout = 120, env = env)
            except subprocess.TimeoutExpired:
                download_errors.append(f"pip download timed out for {spec}")
                continue
@ -2474,9 +2420,7 @@ def download_packages(
                version = _spec_pin_version(spec)
                meta = _pypi_json(name)
                if meta is not None and not _release_has_wheel(meta, version):
-                    fpath, serr = _download_sdist_direct(
-                        name, version, pkg_dir, meta = meta
-                    )
+                    fpath, serr = _download_sdist_direct(name, version, pkg_dir, meta = meta)
                    if fpath is not None:
                        results.append((spec, fpath))
                        continue
@ -2503,9 +2447,7 @@ def _extract_pkg_name(spec: str) -> str:
    """Extract the package name from a pip spec string."""
    m = _RE_NAME.match(spec)
    return (
-        m.group(1)
-        if m
-        else spec.split("==")[0].split(">=")[0].split("<=")[0].split("[")[0].strip()
+        m.group(1) if m else spec.split("==")[0].split(">=")[0].split("<=")[0].split("[")[0].strip()
    )


@ -2848,9 +2790,7 @@ def _run_fix(critical_pkgs: set[str], entries: list[dict], max_search: int) -> N
            if git_entries:
                for e in git_entries:
                    src = e["source_file"] or "CLI"
-                    print(
-                        f"  [SKIP] {pkg_name} is a git URL dep in {src}, cannot auto-update"
-                    )
+                    print(f"  [SKIP] {pkg_name} is a git URL dep in {src}, cannot auto-update")
                    changes_summary.append(f"  SKIP  {pkg_name} (git URL)")
                continue

@ -2875,9 +2815,7 @@ def _run_fix(critical_pkgs: set[str], entries: list[dict], max_search: int) -> N
                shutil.rmtree(dl_dir, ignore_errors = True)

            if not current_ver:
-                print(
-                    f"  [WARN] Cannot determine current version of {pkg_name}, skipping fix"
-                )
+                print(f"  [WARN] Cannot determine current version of {pkg_name}, skipping fix")
                changes_summary.append(f"  SKIP  {pkg_name} (version unknown)")
                continue

@ -2894,9 +2832,7 @@ def _run_fix(critical_pkgs: set[str], entries: list[dict], max_search: int) -> N
                continue

            print(f"  [OK]   {pkg_name}: {current_ver} -> {safe_ver}")
-            changes_summary.append(
-                f"  FIX   {pkg_name}=={current_ver} -> {pkg_name}=={safe_ver}"
-            )
+            changes_summary.append(f"  FIX   {pkg_name}=={current_ver} -> {pkg_name}=={safe_ver}")

            # Update all occurrences in requirements files
            file_updates: dict[str, dict[int, str]] = {}
@ -2943,9 +2879,7 @@ def _find_requirements_files(root: str) -> list[str]:
        dirnames[:] = [
            d
            for d in dirnames
-            if not d.startswith(".")
-            and d not in skip_dirs
-            and not d.endswith(".egg-info")
+            if not d.startswith(".") and d not in skip_dirs and not d.endswith(".egg-info")
        ]
        dirname = os.path.basename(dirpath)
        for fname in sorted(filenames):
@ -3019,9 +2953,7 @@ def _canon_evidence(evidence: str) -> str:

 def _evidence_hash(evidence: str) -> str:
    """Stable digest of the canonical matched evidence."""
-    return hashlib.sha256(
-        _canon_evidence(evidence).encode("utf-8", "replace")
-    ).hexdigest()
+    return hashlib.sha256(_canon_evidence(evidence).encode("utf-8", "replace")).hexdigest()


 def _finding_key(f: Finding) -> tuple[str, str, str, str]:
@ -3063,9 +2995,7 @@ def _load_baseline(path: str) -> set[tuple[str, str, str, str]]:
            continue
        try:
            # Use the reviewed hash; else recompute it from the stored evidence.
-            evidence_hash = e.get("evidence_hash") or _evidence_hash(
-                e.get("evidence") or ""
-            )
+            evidence_hash = e.get("evidence_hash") or _evidence_hash(e.get("evidence") or "")
            if not e.get("evidence_hash"):
                legacy += 1
            keys.add(
@ -3221,9 +3151,7 @@ def main() -> int:
                print(f"    {f}")
            req_files.extend(found)
        else:
-            print(
-                f"  [WARN] No requirements files found in {scan_dir}/", file = sys.stderr
-            )
+            print(f"  [WARN] No requirements files found in {scan_dir}/", file = sys.stderr)

    # Build unified entry list: list of dicts with source tracking
    entries: list[dict] = []
--- a/scripts/scan_packages_baseline.json
+++ b/scripts/scan_packages_baseline.json
@ -1,5 +1,5 @@
 {
-  "_comment": "scan_packages.py allowlist. Each entry is a CRITICAL/HIGH finding manually judged benign. Matched on (package, package-relative file, check, evidence_hash); evidence_hash is over the matched code with L<NN>: markers stripped, so version bumps and line shifts do not reopen an entry but changed code does. severity and evidence are for review only. Regenerate with --write-baseline AFTER reviewing every line.",
+  "_comment": "scan_packages.py allowlist (reviewed). Each entry is a CRITICAL/HIGH finding manually judged benign. Matched on (package, package-relative file, check, evidence_hash); evidence_hash is over the matched code with L<NN>: markers stripped, so version bumps and line shifts do not reopen an entry but changed code does. severity and evidence are for review only. Regenerate with --write-baseline AFTER reviewing every line.",
  "version": 1,
  "entries": [
    {
@ -98,6 +98,14 @@
      "evidence": "L587:                                 while True: sha256:06c2c7f15d73bf192e5e3272c5ff5fcaeff7f6774fef5f4eca6ef473ae50e2b3",
      "evidence_hash": "57acd497f404c203e4450d0580ad85aa8a33406e8d64ad06fbac6cf47d97b24d"
    },
+    {
+      "package": "fastapi",
+      "file": "fastapi/routing.py",
+      "check": "C2 polling/beaconing loop detected",
+      "severity": "CRITICAL",
+      "evidence": "L592:                                 while True: sha256:84283c09277ded3296998b2a6a838744457b606829cf5ab5d0da6f222ff020a0",
+      "evidence_hash": "a7295004315e26a8f3c64fb837521e9fdd7268219bb43e000fb0236ab0259223"
+    },
    {
      "package": "fastmcp-slim",
      "file": "fastmcp/cli/apps_dev.py",
@ -303,8 +311,8 @@
      "file": "openai/_base_client.py",
      "check": "C2 polling/beaconing loop detected",
      "severity": "CRITICAL",
-      "evidence": "L264:         while True: sha256:95ca67e46d42354ae650abbdc5b0d97df8b0ed43187800bf40f5690c3901b94b",
-      "evidence_hash": "a57d8d15fed0bf04f9967dcc18a18b80bb19f4095675bccbb78ac0450d7fce14"
+      "evidence": "L274:         while True: sha256:90a38e5c1e26893c7c273354143612640e9a9c0f079d3e2b60612d79f24e80a6",
+      "evidence_hash": "1022e8e8649436ec64a98a9d9141d085452c49549fd2157b0278fc369a83ac66"
    },
    {
      "package": "openai",
@ -319,8 +327,8 @@
      "file": "openai/auth/_workload.py",
      "check": "Accesses cloud metadata/IMDS AND makes network calls",
      "severity": "CRITICAL",
-      "evidence": "IMDS: L96:             url = \"http://169.254.169.254/metadata/identity/oauth2/token\" | L149:             url = \"http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity\"\nNetwork: L77:     http_client: httpx.Client | None = None, | L108:                 with httpx.Client() as client: | L133:     http_client: httpx.Client | None = None, | L155:                 with httpx.Client() as client: | L248:         with httpx.Client() as client:",
-      "evidence_hash": "1581d9f4a23393e9af23fbe5ef9f66807b22c5b5a3f1fe167254c9ebee108567"
+      "evidence": "IMDS: L97:             url = \"http://169.254.169.254/metadata/identity/oauth2/token\" | L150:             url = \"http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity\"\nNetwork: L78:     http_client: httpx.Client | None = None, | L109:                 with httpx.Client() as client: | L134:     http_client: httpx.Client | None = None, | L156:                 with httpx.Client() as client: | L251:         exchange_client = DefaultHttpx2Client(follow_redirects=False) if self._use_httpx2 else httpx.Client()",
+      "evidence_hash": "9717e51cb961dc14c458955d91a1e48e3753997346ecea0106bded3a8d64bfe0"
    },
    {
      "package": "openai",
@ -343,8 +351,8 @@
      "file": "openai/resources/beta/responses/responses.py",
      "check": "C2 polling/beaconing loop detected",
      "severity": "CRITICAL",
-      "evidence": "L3999:         while True: sha256:df298b6eaf3416589b79f4ef283f8fb76e54d505bfda8840673f8e6419117e2e",
-      "evidence_hash": "10ce5cb5a7097fcff4042ddcfb4802edda60aa4b7b113c8b926a52ddb76f78c2"
+      "evidence": "L4000:         while True: sha256:f8ab538118daba9ec06e27399dbdc90a4521c3390e6a47a6348a1f180a83effd",
+      "evidence_hash": "31481ea83c687acc27144d72d3832d4fb98dd1c79fb5e0ddd85080de95997b9f"
    },
    {
      "package": "openai",
@ -359,16 +367,16 @@
      "file": "openai/resources/realtime/realtime.py",
      "check": "C2 polling/beaconing loop detected",
      "severity": "CRITICAL",
-      "evidence": "L310:         while True: sha256:458198ff3d3f05870bf98c9564cbfd68c739e57b9bbe4120ed81e3eb6af74a05",
-      "evidence_hash": "a3165d21e46b3ce553795daeae53e8f80e8e89c5cb228e68e6dcaff54bca5a89"
+      "evidence": "L311:         while True: sha256:5b63313072aae9ca28677e03426513ccf12221e4f4e0ea6c31efbe09790633b5",
+      "evidence_hash": "05e1af469d651b51673763a7c4cdf759af9472fb627b7b470adc28cc237bd650"
    },
    {
      "package": "openai",
      "file": "openai/resources/responses/responses.py",
      "check": "C2 polling/beaconing loop detected",
      "severity": "CRITICAL",
-      "evidence": "L3950:         while True: sha256:1ce0b5a388c747945cdfda1a71b77afdfd03ae840d7aa9fa62f02eb00aa5e29f",
-      "evidence_hash": "6de300ebb5e6e17cb51c89cbcdf08515a44655182f0776f0908a9d1043ebbcd7"
+      "evidence": "L3951:         while True: sha256:d68ef896bf0743ca430cfacb9a3353da1f3b9c51c3a21b6450a07a32b55aa2ac",
+      "evidence_hash": "160eecdd79b521bffbe8476f782b69a0724c35d1b19376a7600807165fd54f9f"
    },
    {
      "package": "openai",
@ -1545,6 +1553,78 @@
      "severity": "HIGH",
      "evidence": "Obfusc: L836:         code = compile(module, \"<werkzeug routing>\", \"exec\")\nExec: L736:         exec(code, globs, locs)",
      "evidence_hash": "5c0992c90f05c772abd94d00784f157de337e1f8567f8b3aee1b15e46c96cd5d"
+    },
+    {
+      "package": "unsloth-zoo",
+      "file": "tests/test_mlx_save_export_regressions.py",
+      "check": "Writes to /tmp and executes (staged dropper)",
+      "severity": "CRITICAL",
+      "evidence": "L165:         temporary_location=\"/tmp/ignored\", sha256:ab5c587f9ec31a0cc10ee55698ab133a417148d9d3f371bbc81b1e13fa119c13",
+      "evidence_hash": "93a11159147aad94f353ec4d2e0b8486b256abef88cd96d741813222cd32b138"
+    },
+    {
+      "package": "unsloth-zoo",
+      "file": "tests/test_vision_collator_audio.py",
+      "check": "Writes to /tmp and executes (staged dropper)",
+      "severity": "CRITICAL",
+      "evidence": "L111:         out = extract_audio_info(msgs({\"type\": \"audio\", key: \"/tmp/a.wav\"})) sha256:2efe23ffbe2b91b8403aec9b700736919b59e5ca770f8e1f5501651b44b7d398",
+      "evidence_hash": "d416b79dd17b24214f3f7653ac01354507d7bf0fc464dee30a4a4b8998f063ba"
+    },
+    {
+      "package": "openai",
+      "file": "openai/_base_client.py",
+      "check": "C2 polling/beaconing loop detected",
+      "severity": "CRITICAL",
+      "evidence": "L274:         while True: sha256:90a38e5c1e26893c7c273354143612640e9a9c0f079d3e2b60612d79f24e80a6",
+      "evidence_hash": "1022e8e8649436ec64a98a9d9141d085452c49549fd2157b0278fc369a83ac66"
+    },
+    {
+      "package": "openai",
+      "file": "openai/auth/_workload.py",
+      "check": "Accesses cloud metadata/IMDS AND makes network calls",
+      "severity": "CRITICAL",
+      "evidence": "IMDS: L97:             url = \"http://169.254.169.254/metadata/identity/oauth2/token\" | L150:             url = \"http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity\"\nNetwork: L78:     http_client: httpx.Client | None = None, | L109:                 with httpx.Client() as client: | L134:     http_client: httpx.Client | None = None, | L156:                 with httpx.Client() as client: | L251:         exchange_client = DefaultHttpx2Client(follow_redirects=False) if self._use_httpx2 else httpx.Client()",
+      "evidence_hash": "9717e51cb961dc14c458955d91a1e48e3753997346ecea0106bded3a8d64bfe0"
+    },
+    {
+      "package": "openai",
+      "file": "openai/resources/beta/responses/responses.py",
+      "check": "C2 polling/beaconing loop detected",
+      "severity": "CRITICAL",
+      "evidence": "L4000:         while True: sha256:f8ab538118daba9ec06e27399dbdc90a4521c3390e6a47a6348a1f180a83effd",
+      "evidence_hash": "31481ea83c687acc27144d72d3832d4fb98dd1c79fb5e0ddd85080de95997b9f"
+    },
+    {
+      "package": "openai",
+      "file": "openai/resources/realtime/realtime.py",
+      "check": "C2 polling/beaconing loop detected",
+      "severity": "CRITICAL",
+      "evidence": "L311:         while True: sha256:5b63313072aae9ca28677e03426513ccf12221e4f4e0ea6c31efbe09790633b5",
+      "evidence_hash": "05e1af469d651b51673763a7c4cdf759af9472fb627b7b470adc28cc237bd650"
+    },
+    {
+      "package": "openai",
+      "file": "openai/resources/responses/responses.py",
+      "check": "C2 polling/beaconing loop detected",
+      "severity": "CRITICAL",
+      "evidence": "L3951:         while True: sha256:d68ef896bf0743ca430cfacb9a3353da1f3b9c51c3a21b6450a07a32b55aa2ac",
+      "evidence_hash": "160eecdd79b521bffbe8476f782b69a0724c35d1b19376a7600807165fd54f9f"
+    },
+    {
+      "package": "unsloth-zoo",
+      "file": "tests/test_gemma4_forced_float32_ple_dtype.py",
+      "check": "Advanced obfuscation (marshal/compile/zlib) + exec/eval",
+      "severity": "HIGH",
+      "evidence": "Obfusc: L277:     compile(rewritten + _GEMMA4_PLE_CAST_HELPER, \"<gemma4-ple-generated>\", \"exec\") | L440:     compile(on, \"<gemma4-ple-append>\", \"exec\") | L468:     compile(generated, \"<gemma4-ple-crosspath>\", \"exec\")\nExec: L19:     exec(_GEMMA4_PLE_CAST_HELPER, namespace)",
+      "evidence_hash": "a85e24d8e7c431563cbd83b70f91a3b971abde0f37083d68e70984147960cc70"
+    },
+    {
+      "package": "unsloth-zoo",
+      "file": "tests/test_vision_collator_audio.py",
+      "check": "Writes to /tmp and executes (staged dropper)",
+      "severity": "CRITICAL",
+      "evidence": "L111:         out = extract_audio_info(msgs({\"type\": \"audio\", key: \"/tmp/a.wav\"})) sha256:022f81dd21acfc6a35a058de96132834c218404a9e37b3d09a7768a8c8f6c728",
+      "evidence_hash": "2d1e75446af120d9133a42aa8af426a839d3434d9dc109cc1d6c1b22ca1ddb75"
    }
  ]
 }
--- a/scripts/stamp_studio_release.py
+++ b/scripts/stamp_studio_release.py
@ -42,9 +42,7 @@ def _atomic_write_text(


 REPO_ROOT = Path(__file__).resolve().parents[1]
-BUILD_INFO_PATH = (
-    REPO_ROOT / "studio" / "backend" / "utils" / "_studio_release_build.py"
-)
+BUILD_INFO_PATH = REPO_ROOT / "studio" / "backend" / "utils" / "_studio_release_build.py"
 BUILD_INFO_SUFFIX = "studio/backend/utils/_studio_release_build.py"
 VERSION_RE = re.compile(r"^v\d+\.\d+\.\d+(?:-[0-9A-Za-z.][0-9A-Za-z.-]*)?$")
 GIT_DESCRIBE_SUFFIX_RE = re.compile(r"-\d+-g[0-9A-Fa-f]+(?:-dirty)?$")
@ -235,9 +233,7 @@ def _read_sdist_member(path: Path) -> str | None:

 def verify_dist(expected: str, dist_dir: Path) -> int:
    if not is_valid_version(expected):
-        print(
-            f"Invalid expected Unsloth release version: {expected!r}", file = sys.stderr
-        )
+        print(f"Invalid expected Unsloth release version: {expected!r}", file = sys.stderr)
        return 2

    artifacts = list(dist_dir.glob("*.whl")) + list(dist_dir.glob("*.tar.gz"))
@ -262,9 +258,7 @@ def verify_dist(expected: str, dist_dir: Path) -> int:
            print(failure, file = sys.stderr)
        return 2

-    print(
-        f"Verified Unsloth release version {expected} in {len(artifacts)} artifact(s)"
-    )
+    print(f"Verified Unsloth release version {expected} in {len(artifacts)} artifact(s)")
    return 0


--- a/scripts/sync_allow_scripts_pins.py
+++ b/scripts/sync_allow_scripts_pins.py
@ -74,9 +74,7 @@ def desired_key(name: str, versions: list[str]) -> str:
    return f"{name}@{' || '.join(versions)}"


-def compute_renames(
-    policy: dict, lock_versions: dict[str, list[str]]
-) -> dict[str, str]:
+def compute_renames(policy: dict, lock_versions: dict[str, list[str]]) -> dict[str, str]:
    renames: dict[str, str] = {}
    for key in policy:
        name, rng = split_spec(key)
@ -95,9 +93,7 @@ def main(argv: list[str] | None = None) -> int:
    ap = argparse.ArgumentParser(description = __doc__)
    mode = ap.add_mutually_exclusive_group(required = True)
    mode.add_argument("--check", action = "store_true", help = "exit 1 if pins are stale")
-    mode.add_argument(
-        "--fix", action = "store_true", help = "rewrite package.json in place"
-    )
+    mode.add_argument("--fix", action = "store_true", help = "rewrite package.json in place")
    ap.add_argument(
        "--dir",
        type = Path,
@ -109,26 +105,20 @@ def main(argv: list[str] | None = None) -> int:
    pkg_path = args.dir / "package.json"
    lock_path = args.dir / "package-lock.json"
    if not pkg_path.exists() or not lock_path.exists():
-        print(
-            f"sync-allow-scripts: nothing to do ({args.dir} has no package.json + lockfile)"
-        )
+        print(f"sync-allow-scripts: nothing to do ({args.dir} has no package.json + lockfile)")
        return 0

    pkg = json.loads(pkg_path.read_text(encoding = "utf-8"))
    policy = pkg.get("allowScripts")
    if not isinstance(policy, dict) or not policy:
-        print(
-            "sync-allow-scripts: no allowScripts policy in package.json, nothing to do"
-        )
+        print("sync-allow-scripts: no allowScripts policy in package.json, nothing to do")
        return 0

    lock = json.loads(lock_path.read_text(encoding = "utf-8"))
    renames = compute_renames(policy, script_versions_from_lock(lock))

    if not renames:
-        print(
-            f"sync-allow-scripts: {len(policy)} allowScripts entries in sync with the lockfile"
-        )
+        print(f"sync-allow-scripts: {len(policy)} allowScripts entries in sync with the lockfile")
        return 0

    for old, new in renames.items():
@ -142,9 +132,7 @@ def main(argv: list[str] | None = None) -> int:
        return 1

    pkg["allowScripts"] = {renames.get(k, k): v for k, v in policy.items()}
-    pkg_path.write_text(
-        json.dumps(pkg, indent = 2, ensure_ascii = False) + "\n", encoding = "utf-8"
-    )
+    pkg_path.write_text(json.dumps(pkg, indent = 2, ensure_ascii = False) + "\n", encoding = "utf-8")
    print(
        f"sync-allow-scripts: re-pinned {len(renames)} entr{'y' if len(renames) == 1 else 'ies'} in {pkg_path}"
    )
--- a/scripts/verify_comment_only_diff.py
+++ b/scripts/verify_comment_only_diff.py
@ -131,8 +131,7 @@ def _walk_yaml_diff(
    """Print a path-keyed summary of the first structural / scalar diff."""
    if type(b) is not type(a):
        print(
-            f"     type-diff at {prefix or '/'}: "
-            f"{type(b).__name__} -> {type(a).__name__}",
+            f"     type-diff at {prefix or '/'}: " f"{type(b).__name__} -> {type(a).__name__}",
        )
        return
    if isinstance(b, dict):
--- a/scripts/verify_import_hoist.py
+++ b/scripts/verify_import_hoist.py
@ -161,9 +161,7 @@ class _Builder(ast.NodeVisitor):

    def _visit_stmt(self, node: ast.AST, scope: Scope) -> None:
        if isinstance(node, (ast.Import, ast.ImportFrom)):
-            star = isinstance(node, ast.ImportFrom) and any(
-                a.name == "*" for a in node.names
-            )
+            star = isinstance(node, ast.ImportFrom) and any(a.name == "*" for a in node.names)
            if star:
                scope.star_import = True
            for alias in node.names:
@ -351,9 +349,7 @@ class _Builder(ast.NodeVisitor):
            self._bind_args(node.args, child)
            self._visit_expr(node.body, child)
            return
-        if isinstance(
-            node, (ast.ListComp, ast.SetComp, ast.GeneratorExp, ast.DictComp)
-        ):
+        if isinstance(node, (ast.ListComp, ast.SetComp, ast.GeneratorExp, ast.DictComp)):
            child = Scope("comp", f"{scope.qualname}.<comp>", scope)
            for i, gen in enumerate(node.generators):
                # first iterable evaluates in the enclosing scope
@ -612,9 +608,7 @@ def compare(before_src: str, after_src: str, path: str) -> list[tuple[str, str]]
        if tbefore and tbefore != tafter and (tbefore - tafter):
            lost = tbefore - tafter
            gained = tafter - tbefore
-            relocated = (
-                lost <= removed_module_targets and gained <= added_module_targets
-            )
+            relocated = lost <= removed_module_targets and gained <= added_module_targets
            if relocated:
                continue
            findings.append(
@ -639,9 +633,7 @@ def compare(before_src: str, after_src: str, path: str) -> list[tuple[str, str]]
    for scope, names in b["ambiguous"].items():
        new = names - a["ambiguous"].get(scope, set())
        for n in sorted(new):
-            findings.append(
-                ("WARN", f"{path}: AMBIGUOUS-BIND '{n}' import+non-import in {scope}")
-            )
+            findings.append(("WARN", f"{path}: AMBIGUOUS-BIND '{n}' import+non-import in {scope}"))

    # 6. TARGET-MISSING (informational): a scope stopped resolving to an import
    #    target. Real bugs are covered above; remaining cases are relocated code.
@ -653,9 +645,7 @@ def compare(before_src: str, after_src: str, path: str) -> list[tuple[str, str]]
                if t in added_module_targets
                else "  [target not re-added here -> likely relocated/deleted]"
            )
-            findings.append(
-                ("INFO", f"{path}: TARGET-MISSING {t} in scope {scope}{relocated}")
-            )
+            findings.append(("INFO", f"{path}: TARGET-MISSING {t} in scope {scope}{relocated}"))
    return findings


@ -800,9 +790,7 @@ def audit_files(paths: list[str]) -> int:
    ok = n_err == 0 and n_fp == 0
    print(
        "\nAUDIT:",
-        "ROBUST (no crashes, no false positives vs pyflakes)"
-        if ok
-        else "NEEDS WORK (see above)",
+        "ROBUST (no crashes, no false positives vs pyflakes)" if ok else "NEEDS WORK (see above)",
    )
    return 0 if ok else 1

@ -838,18 +826,12 @@ def main() -> int:
        blockers = [f for f in findings if f[0] == "BLOCKER"]
        warns = [f for f in findings if f[0] == "WARN"]
        infos = [f for f in findings if f[0] == "INFO"]
-        status = (
-            "CLEAN"
-            if not blockers and not warns
-            else ("BLOCKERS" if blockers else "WARNINGS")
-        )
+        status = "CLEAN" if not blockers and not warns else ("BLOCKERS" if blockers else "WARNINGS")
        print(f"\n=== {path}: {status} ===")
        for sev, m in blockers + warns + infos:
            print(f"  [{sev}] {m}")
        any_blocker = any_blocker or bool(blockers)
-    print(
-        "\nOVERALL:", "FAIL (blockers found)" if any_blocker else "PASS (no blockers)"
-    )
+    print("\nOVERALL:", "FAIL (blockers found)" if any_blocker else "PASS (no blockers)")
    return 1 if any_blocker else 0


--- a/studio/Unsloth_Studio_Colab.ipynb
+++ b/studio/Unsloth_Studio_Colab.ipynb
@ -1,134 +1,145 @@
 {
- "cells": [
-  {
-   "cell_type": "markdown",
-   "metadata": {
-    "id": "view-in-github",
-    "colab_type": "text"
-   },
-   "source": [
-    "<a href=\"https://colab.research.google.com/github/unslothai/unsloth/blob/main/studio/Unsloth_Studio_Colab.ipynb\" target=\"_parent\"><img src=\"https://colab.research.google.com/assets/colab-badge.svg\" alt=\"Open In Colab\"/></a>"
-   ]
+  "cells": [
+    {
+      "cell_type": "markdown",
+      "metadata": {
+        "id": "view-in-github",
+        "colab_type": "text"
+      },
+      "source": [
+        "<a href=\"https://colab.research.google.com/github/unslothai/unsloth/blob/main/studio/Unsloth_Studio_Colab.ipynb\" target=\"_parent\"><img src=\"https://colab.research.google.com/assets/colab-badge.svg\" alt=\"Open In Colab\"/></a>"
+      ]
+    },
+    {
+      "cell_type": "markdown",
+      "metadata": {
+        "id": "6b87de59"
+      },
+      "source": [
+        "To run this, press \"*Runtime*\" and press \"*Run all*\" on a **free** Tesla T4 Google Colab instance!\n",
+        "<div class=\"align-center\">\n",
+        "<a href=\"https://unsloth.ai/\"><img src=\"https://github.com/unslothai/unsloth/raw/main/images/unsloth%20new%20logo.png\" width=\"115\"></a>\n",
+        "<a href=\"https://discord.gg/unsloth\"><img src=\"https://github.com/unslothai/unsloth/raw/main/images/Discord button.png\" width=\"145\"></a>\n",
+        "<a href=\"https://unsloth.ai/docs/\"><img src=\"https://github.com/unslothai/unsloth/blob/main/images/documentation%20green%20button.png?raw=true\" width=\"125\"></a> Join Discord if you need help + ⭐ <i>Star us on <a href=\"https://github.com/unslothai/unsloth\">Github</a> </i> ⭐\n",
+        "</div>\n",
+        "\n",
+        "To install Unsloth Studio on your local device, follow [our guide](https://unsloth.ai/docs/new/unsloth-studio/install). Unsloth Studio is licensed [AGPL-3.0](https://github.com/unslothai/unsloth/blob/main/studio/LICENSE.AGPL-3.0).\n",
+        "\n",
+        "### Unsloth Studio\n",
+        "\n",
+        "Train and run open models with [**Unsloth Studio**](https://unsloth.ai/docs/new/unsloth-studio/start). NEW! Installation should now only take 2 mins!\n",
+        "\n",
+        "\n",
+        "We are actively working on making Unsloth Studio install on Colab T4 GPUs faster.\n",
+        "\n",
+        "[Features](https://unsloth.ai/docs/new/unsloth-studio#features) • [Quickstart](https://unsloth.ai/docs/new/unsloth-studio/start) • [Data Recipes](https://unsloth.ai/docs/new/unsloth-studio/data-recipe) • [Unsloth Chat](https://unsloth.ai/docs/new/unsloth-studio/chat) • [Export](https://unsloth.ai/docs/new/unsloth-studio/export)"
+      ],
+      "id": "6b87de59"
+    },
+    {
+      "cell_type": "markdown",
+      "metadata": {
+        "id": "e4206349"
+      },
+      "source": [
+        "<p align=\"left\"><img src=\"https://github.com/unslothai/unsloth/raw/main/studio/frontend/public/studio%20github%20landscape%20colab%20display.png\" width=\"600\"></p>"
+      ],
+      "id": "e4206349"
+    },
+    {
+      "cell_type": "markdown",
+      "metadata": {
+        "id": "27da2957"
+      },
+      "source": [
+        "### Setup: Clone repo and run setup"
+      ],
+      "id": "27da2957"
+    },
+    {
+      "cell_type": "code",
+      "metadata": {
+        "id": "27e68f91"
+      },
+      "source": "!git clone --depth 1 --branch main https://github.com/unslothai/unsloth.git\n%cd /content/unsloth\n!chmod +x studio/setup.sh && ./studio/setup.sh --local",
+      "execution_count": null,
+      "outputs": [],
+      "id": "27e68f91"
+    },
+    {
+      "cell_type": "markdown",
+      "metadata": {
+        "id": "3e1771a9"
+      },
+      "source": [
+        "### Start Unsloth Studio"
+      ],
+      "id": "3e1771a9"
+    },
+    {
+      "cell_type": "code",
+      "metadata": {
+        "id": "277e431e"
+      },
+      "source": [
+        "import sys\n",
+        "sys.path.insert(0, \"/content/unsloth/studio/backend\")\n",
+        "from colab import start\n",
+        "\n",
+        "# On Colab, start() auto-opens a Cloudflare link and prints admin login credentials.\n",
+        "# Use the Cloudflare link above the ready card to open Studio (in-cell iframes often stay blank).\n",
+        "start()\n",
+        "\n",
+        "# To skip the Cloudflare tunnel and try the in-notebook proxy iframe only:\n",
+        "# start(cloudflare=False)"
+      ],
+      "execution_count": null,
+      "outputs": [],
+      "id": "277e431e"
+    },
+    {
+      "cell_type": "markdown",
+      "metadata": {
+        "id": "f2b0c6a1"
+      },
+      "source": [
+        "And we're done! If you have any questions on Unsloth, we have a [Discord](https://discord.gg/unsloth) channel! If you find any bugs or want to keep updated with the latest LLM stuff, or need help, join projects etc, feel free to join our Discord!\n",
+        "\n",
+        "Some other resources:\n",
+        "1. Looking to use Unsloth locally? Read our [Installation Guide](https://unsloth.ai/docs/get-started/install) for details on installing Unsloth on Windows, Docker, AMD, Intel GPUs.\n",
+        "2. Learn how to do Reinforcement Learning with our [RL Guide and notebooks](https://unsloth.ai/docs/get-started/reinforcement-learning-rl-guide).\n",
+        "3. Read our guides and notebooks for [Text-to-speech (TTS)](https://unsloth.ai/docs/basics/text-to-speech-tts-fine-tuning) and [vision](https://unsloth.ai/docs/basics/vision-fine-tuning) model support.\n",
+        "4. Explore our [LLM Tutorials Directory](https://unsloth.ai/docs/models/tutorials-how-to-fine-tune-and-run-llms) to find dedicated guides for each model.\n",
+        "5. Need help with Inference? Read our [Inference & Deployment page](https://unsloth.ai/docs/basics/inference-and-deployment) for details on using vLLM, llama.cpp, Ollama etc.\n",
+        "\n",
+        "<div class=\"align-center\">\n",
+        "  <a href=\"https://unsloth.ai\"><img src=\"https://github.com/unslothai/unsloth/raw/main/images/unsloth%20new%20logo.png\" width=\"115\"></a>\n",
+        "  <a href=\"https://discord.gg/unsloth\"><img src=\"https://github.com/unslothai/unsloth/raw/main/images/Discord.png\" width=\"145\"></a>\n",
+        "  <a href=\"https://unsloth.ai/docs/\"><img src=\"https://github.com/unslothai/unsloth/blob/main/images/documentation%20green%20button.png?raw=true\" width=\"125\"></a>\n",
+        "\n",
+        "  Join Discord if you need help + ⭐️ <i>Star us on <a href=\"https://github.com/unslothai/unsloth\">Github</a> </i> ⭐️\n",
+        "\n",
+        "  <b>This notebook is licensed <a href=\"https://github.com/unslothai/unsloth/blob/main/studio/LICENSE.AGPL-3.0\">AGPL-3.0</a></b>\n",
+        "</div>"
+      ],
+      "id": "f2b0c6a1"
+    }
+  ],
+  "metadata": {
+    "accelerator": "GPU",
+    "colab": {
+      "gpuType": "T4",
+      "provenance": [],
+      "include_colab_link": true
+    },
+    "kernelspec": {
+      "display_name": "Python 3",
+      "name": "python3"
+    },
+    "language_info": {
+      "name": "python"
+    }
  },
-  {
-   "cell_type": "markdown",
-   "id": "6b87de59",
-   "metadata": {
-    "id": "6b87de59"
-   },
-   "source": [
-    "To run this, press \"*Runtime*\" and press \"*Run all*\" on a **free** Tesla T4 Google Colab instance!\n",
-    "<div class=\"align-center\">\n",
-    "<a href=\"https://unsloth.ai/\"><img src=\"https://github.com/unslothai/unsloth/raw/main/images/unsloth%20new%20logo.png\" width=\"115\"></a>\n",
-    "<a href=\"https://discord.gg/unsloth\"><img src=\"https://github.com/unslothai/unsloth/raw/main/images/Discord button.png\" width=\"145\"></a>\n",
-    "<a href=\"https://unsloth.ai/docs/\"><img src=\"https://github.com/unslothai/unsloth/blob/main/images/documentation%20green%20button.png?raw=true\" width=\"125\"></a> Join Discord if you need help + ⭐ <i>Star us on <a href=\"https://github.com/unslothai/unsloth\">Github</a> </i> ⭐\n",
-    "</div>\n",
-    "\n",
-    "To install Unsloth Studio on your local device, follow [our guide](https://unsloth.ai/docs/new/unsloth-studio/install). Unsloth Studio is licensed [AGPL-3.0](https://github.com/unslothai/unsloth/blob/main/studio/LICENSE.AGPL-3.0).\n",
-    "\n",
-    "### Unsloth Studio\n",
-    "\n",
-    "Train and run open models with [**Unsloth Studio**](https://unsloth.ai/docs/new/unsloth-studio/start). NEW! Installation should now only take 2 mins!\n",
-    "\n",
-    "\n",
-    "We are actively working on making Unsloth Studio install on Colab T4 GPUs faster.\n",
-    "\n",
-    "[Features](https://unsloth.ai/docs/new/unsloth-studio#features) • [Quickstart](https://unsloth.ai/docs/new/unsloth-studio/start) • [Data Recipes](https://unsloth.ai/docs/new/unsloth-studio/data-recipe) • [Unsloth Chat](https://unsloth.ai/docs/new/unsloth-studio/chat) • [Export](https://unsloth.ai/docs/new/unsloth-studio/export)"
-   ]
-  },
-  {
-   "cell_type": "markdown",
-   "id": "e4206349",
-   "metadata": {
-    "id": "e4206349"
-   },
-   "source": [
-    "<p align=\"left\"><img src=\"https://github.com/unslothai/unsloth/raw/main/studio/frontend/public/studio%20github%20landscape%20colab%20display.png\" width=\"600\"></p>"
-   ]
-  },
-  {
-   "cell_type": "markdown",
-   "id": "27da2957",
-   "metadata": {
-    "id": "27da2957"
-   },
-   "source": [
-    "### Setup: Clone repo and run setup"
-   ]
-  },
-  {
-   "cell_type": "code",
-   "execution_count": null,
-   "id": "27e68f91",
-   "metadata": {
-    "id": "27e68f91"
-   },
-   "outputs": [],
-   "source": "!git clone --depth 1 --branch main https://github.com/unslothai/unsloth.git\n%cd /content/unsloth\n!chmod +x studio/setup.sh && ./studio/setup.sh --local"
-  },
-  {
-   "cell_type": "markdown",
-   "id": "3e1771a9",
-   "metadata": {
-    "id": "3e1771a9"
-   },
-   "source": [
-    "### Start Unsloth Studio"
-   ]
-  },
-  {
-   "cell_type": "code",
-   "execution_count": null,
-   "id": "277e431e",
-   "metadata": {
-    "id": "277e431e"
-   },
-   "outputs": [],
-   "source": "import sys\nsys.path.insert(0, \"/content/unsloth/studio/backend\")\nfrom colab import start\n\n# Default: in-tab iframe only. start() blocks to keep the kernel alive.\nstart()\n\n# For a shareable Cloudflare link, replace start() above with:\n# start(cloudflare=True)"
-  },
-  {
-   "cell_type": "markdown",
-   "id": "f2b0c6a1",
-   "metadata": {
-    "id": "f2b0c6a1"
-   },
-   "source": [
-    "And we're done! If you have any questions on Unsloth, we have a [Discord](https://discord.gg/unsloth) channel! If you find any bugs or want to keep updated with the latest LLM stuff, or need help, join projects etc, feel free to join our Discord!\n",
-    "\n",
-    "Some other resources:\n",
-    "1. Looking to use Unsloth locally? Read our [Installation Guide](https://unsloth.ai/docs/get-started/install) for details on installing Unsloth on Windows, Docker, AMD, Intel GPUs.\n",
-    "2. Learn how to do Reinforcement Learning with our [RL Guide and notebooks](https://unsloth.ai/docs/get-started/reinforcement-learning-rl-guide).\n",
-    "3. Read our guides and notebooks for [Text-to-speech (TTS)](https://unsloth.ai/docs/basics/text-to-speech-tts-fine-tuning) and [vision](https://unsloth.ai/docs/basics/vision-fine-tuning) model support.\n",
-    "4. Explore our [LLM Tutorials Directory](https://unsloth.ai/docs/models/tutorials-how-to-fine-tune-and-run-llms) to find dedicated guides for each model.\n",
-    "5. Need help with Inference? Read our [Inference & Deployment page](https://unsloth.ai/docs/basics/inference-and-deployment) for details on using vLLM, llama.cpp, Ollama etc.\n",
-    "\n",
-    "<div class=\"align-center\">\n",
-    "  <a href=\"https://unsloth.ai\"><img src=\"https://github.com/unslothai/unsloth/raw/main/images/unsloth%20new%20logo.png\" width=\"115\"></a>\n",
-    "  <a href=\"https://discord.gg/unsloth\"><img src=\"https://github.com/unslothai/unsloth/raw/main/images/Discord.png\" width=\"145\"></a>\n",
-    "  <a href=\"https://unsloth.ai/docs/\"><img src=\"https://github.com/unslothai/unsloth/blob/main/images/documentation%20green%20button.png?raw=true\" width=\"125\"></a>\n",
-    "\n",
-    "  Join Discord if you need help + ⭐️ <i>Star us on <a href=\"https://github.com/unslothai/unsloth\">Github</a> </i> ⭐️\n",
-    "\n",
-    "  <b>This notebook is licensed <a href=\"https://github.com/unslothai/unsloth/blob/main/studio/LICENSE.AGPL-3.0\">AGPL-3.0</a></b>\n",
-    "</div>"
-   ]
-  }
- ],
- "metadata": {
-  "accelerator": "GPU",
-  "colab": {
-   "gpuType": "T4",
-   "provenance": [],
-   "include_colab_link": true
-  },
-  "kernelspec": {
-   "display_name": "Python 3",
-   "name": "python3"
-  },
-  "language_info": {
-   "name": "python"
-  }
- },
- "nbformat": 4,
- "nbformat_minor": 5
+  "nbformat": 4,
+  "nbformat_minor": 5
 }
--- a/studio/backend/assets/configs/full_finetune.yaml
+++ b/studio/backend/assets/configs/full_finetune.yaml
@ -30,6 +30,7 @@ lora:
  vision_all_linear: false
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/lora_text.yaml
+++ b/studio/backend/assets/configs/lora_text.yaml
@ -30,6 +30,7 @@ lora:
  vision_all_linear: false
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/default.yaml
+++ b/studio/backend/assets/configs/model_defaults/default.yaml
@ -33,6 +33,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/embedding/unsloth_Qwen3-Embedding-0.6B.yaml
+++ b/studio/backend/assets/configs/model_defaults/embedding/unsloth_Qwen3-Embedding-0.6B.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/embedding/unsloth_all-MiniLM-L6-v2.yaml
+++ b/studio/backend/assets/configs/model_defaults/embedding/unsloth_all-MiniLM-L6-v2.yaml
@ -30,6 +30,7 @@ lora:
    - "query"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/embedding/unsloth_bge-m3.yaml
+++ b/studio/backend/assets/configs/model_defaults/embedding/unsloth_bge-m3.yaml
@ -30,6 +30,7 @@ lora:
    - "value"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/embedding/unsloth_embeddinggemma-300m.yaml
+++ b/studio/backend/assets/configs/model_defaults/embedding/unsloth_embeddinggemma-300m.yaml
@ -33,6 +33,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/embedding/unsloth_gte-modernbert-base.yaml
+++ b/studio/backend/assets/configs/model_defaults/embedding/unsloth_gte-modernbert-base.yaml
@ -29,6 +29,7 @@ lora:
    - "Wqkv"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/ernie/unsloth_ERNIE-4.5-21B-A3B-PT.yaml
+++ b/studio/backend/assets/configs/model_defaults/ernie/unsloth_ERNIE-4.5-21B-A3B-PT.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/ernie/unsloth_ERNIE-4.5-VL-28B-A3B-PT.yaml
+++ b/studio/backend/assets/configs/model_defaults/ernie/unsloth_ERNIE-4.5-VL-28B-A3B-PT.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/falcon/tiiuae_Falcon-H1-0.5B-Instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/falcon/tiiuae_Falcon-H1-0.5B-Instruct.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_codegemma-7b-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_codegemma-7b-bnb-4bit.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_functiongemma-270m-it.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_functiongemma-270m-it.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-2-27b-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-2-27b-bnb-4bit.yaml
@ -33,6 +33,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-2-2b.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-2-2b.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3-270m-it.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3-270m-it.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3-27b-it.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3-27b-it.yaml
@ -29,6 +29,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3-4b-it.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3-4b-it.yaml
@ -29,6 +29,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3-4b-pt.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3-4b-pt.yaml
@ -29,6 +29,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3n-E4B-it.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3n-E4B-it.yaml
@ -29,6 +29,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3n-E4B.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-3n-E4B.yaml
@ -29,6 +29,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-26B-A4B-it.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-26B-A4B-it.yaml
@ -26,6 +26,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-26B-A4B.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-26B-A4B.yaml
@ -26,6 +26,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-31B-it.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-31B-it.yaml
@ -26,6 +26,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-31B.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-31B.yaml
@ -26,6 +26,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-E2B-it.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-E2B-it.yaml
@ -26,6 +26,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-E2B.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-E2B.yaml
@ -26,6 +26,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-E4B-it.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-E4B-it.yaml
@ -26,6 +26,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-E4B.yaml
+++ b/studio/backend/assets/configs/model_defaults/gemma/unsloth_gemma-4-E4B.yaml
@ -26,6 +26,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/gpt-oss/unsloth_gpt-oss-120b.yaml
+++ b/studio/backend/assets/configs/model_defaults/gpt-oss/unsloth_gpt-oss-120b.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/gpt-oss/unsloth_gpt-oss-20b.yaml
+++ b/studio/backend/assets/configs/model_defaults/gpt-oss/unsloth_gpt-oss-20b.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/granite/unsloth_granite-4.0-350m-unsloth-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/granite/unsloth_granite-4.0-350m-unsloth-bnb-4bit.yaml
@ -37,6 +37,7 @@ lora:
    - "shared_mlp.output_linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/granite/unsloth_granite-4.0-h-micro.yaml
+++ b/studio/backend/assets/configs/model_defaults/granite/unsloth_granite-4.0-h-micro.yaml
@ -37,6 +37,7 @@ lora:
    - "shared_mlp.output_linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/llama/unsloth_Llama-3.2-11B-Vision-Instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/llama/unsloth_Llama-3.2-11B-Vision-Instruct.yaml
@ -29,6 +29,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/llama/unsloth_Llama-3.2-1B-Instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/llama/unsloth_Llama-3.2-1B-Instruct.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/llama/unsloth_Llama-3.2-3B-Instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/llama/unsloth_Llama-3.2-3B-Instruct.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/llama/unsloth_Llama-3.3-70B-Instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/llama/unsloth_Llama-3.3-70B-Instruct.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/llama/unsloth_Meta-Llama-3.1-70B-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/llama/unsloth_Meta-Llama-3.1-70B-bnb-4bit.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/llama/unsloth_Meta-Llama-3.1-8B-Instruct-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/llama/unsloth_Meta-Llama-3.1-8B-Instruct-bnb-4bit.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/llama/unsloth_llama-3-8b-Instruct-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/llama/unsloth_llama-3-8b-Instruct-bnb-4bit.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/llama/unsloth_llama-3-8b-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/llama/unsloth_llama-3-8b-bnb-4bit.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/llasa/unsloth_Llasa-3B.yaml
+++ b/studio/backend/assets/configs/model_defaults/llasa/unsloth_Llasa-3B.yaml
@ -30,6 +30,7 @@ lora:
    - "v_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/mistral/unsloth_Magistral-Small-2509-unsloth-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/mistral/unsloth_Magistral-Small-2509-unsloth-bnb-4bit.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/mistral/unsloth_Ministral-3-3B-Instruct-2512.yaml
+++ b/studio/backend/assets/configs/model_defaults/mistral/unsloth_Ministral-3-3B-Instruct-2512.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/mistral/unsloth_Mistral-Nemo-Base-2407-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/mistral/unsloth_Mistral-Nemo-Base-2407-bnb-4bit.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/mistral/unsloth_Mistral-Small-Instruct-2409.yaml
+++ b/studio/backend/assets/configs/model_defaults/mistral/unsloth_Mistral-Small-Instruct-2409.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/mistral/unsloth_Pixtral-12B-2409.yaml
+++ b/studio/backend/assets/configs/model_defaults/mistral/unsloth_Pixtral-12B-2409.yaml
@ -29,6 +29,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: false
--- a/studio/backend/assets/configs/model_defaults/mistral/unsloth_mistral-7b-instruct-v0.3-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/mistral/unsloth_mistral-7b-instruct-v0.3-bnb-4bit.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/mistral/unsloth_mistral-7b-v0.3-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/mistral/unsloth_mistral-7b-v0.3-bnb-4bit.yaml
@ -33,6 +33,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/other/OuteAI_Llama-OuteTTS-1.0-1B.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/OuteAI_Llama-OuteTTS-1.0-1B.yaml
@ -33,6 +33,7 @@ lora:
    - "v_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/other/Spark-TTS-0.5B_LLM.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/Spark-TTS-0.5B_LLM.yaml
@ -38,6 +38,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/other/sesame_csm-1b.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/sesame_csm-1b.yaml
@ -37,6 +37,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/other/unsloth_GLM-4.7-Flash.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/unsloth_GLM-4.7-Flash.yaml
@ -35,6 +35,7 @@ lora:
    - "out_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/other/unsloth_LFM2-1.2B.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/unsloth_LFM2-1.2B.yaml
@ -29,6 +29,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/other/unsloth_Nemotron-3-Nano-30B-A3B.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/unsloth_Nemotron-3-Nano-30B-A3B.yaml
@ -37,6 +37,7 @@ lora:
    - "out_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/other/unsloth_PaddleOCR-VL.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/unsloth_PaddleOCR-VL.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/other/unsloth_answerdotai_ModernBERT-large.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/unsloth_answerdotai_ModernBERT-large.yaml
@ -33,6 +33,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/other/unsloth_orpheus-3b-0.1-ft.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/unsloth_orpheus-3b-0.1-ft.yaml
@ -38,6 +38,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/other/unsloth_tinyllama-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/unsloth_tinyllama-bnb-4bit.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/other/unsloth_whisper-large-v3.yaml
+++ b/studio/backend/assets/configs/model_defaults/other/unsloth_whisper-large-v3.yaml
@ -33,6 +33,7 @@ lora:
    - "v_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/phi/unsloth_Phi-3-medium-4k-instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/phi/unsloth_Phi-3-medium-4k-instruct.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/phi/unsloth_Phi-3.5-mini-instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/phi/unsloth_Phi-3.5-mini-instruct.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/phi/unsloth_Phi-4.yaml
+++ b/studio/backend/assets/configs/model_defaults/phi/unsloth_Phi-4.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/imdatta0_tiny_qwen3_moe_2.8B_0.7B.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/imdatta0_tiny_qwen3_moe_2.8B_0.7B.yaml
@ -36,6 +36,7 @@ lora:
    - "gate_up_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2-7B.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2-7B.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2-VL-7B-Instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2-VL-7B-Instruct.yaml
@ -29,6 +29,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-1.5B-Instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-1.5B-Instruct.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-7B.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-7B.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-Coder-1.5B-Instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-Coder-1.5B-Instruct.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-Coder-14B-Instruct.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-Coder-14B-Instruct.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-Coder-7B-Instruct-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-Coder-7B-Instruct-bnb-4bit.yaml
@ -34,6 +34,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-VL-7B-Instruct-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen2.5-VL-7B-Instruct-bnb-4bit.yaml
@ -29,6 +29,7 @@ lora:
    - "all-linear"
  use_rslora: false
  use_loftq: false
+  use_dora: false
  finetune_vision_layers: true
  finetune_language_layers: true
  finetune_attention_modules: true
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen3-0.6B.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen3-0.6B.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen3-14B-Base-unsloth-bnb-4bit.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen3-14B-Base-unsloth-bnb-4bit.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen3-14B.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen3-14B.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen3-30B-A3B-Instruct-2507.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen3-30B-A3B-Instruct-2507.yaml
@ -36,6 +36,7 @@ lora:
    - "gate_up_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen3-32B.yaml
+++ b/studio/backend/assets/configs/model_defaults/qwen/unsloth_Qwen3-32B.yaml
@ -35,6 +35,7 @@ lora:
    - "down_proj"
  use_rslora: false
  use_loftq: false
+  use_dora: false

 logging:
  enable_wandb: false
--- a/Show more
+++ b/Show more