$ the-wire · showcase
pwc-cli exposes every read-only command as an MCP tool
By RepoJournal · Filed · About Hugging Face · Composed from the cited sources · methodology
11 people shipped this
cursor
@cursor
2 cited
NielsRogge
@NielsRogge
1 cited
Bob Ok
@blipbyte
1 cited
jiqing-feng
@jiqing-feng
1 cited
Fausto Milletari
@faustomilletari
1 cited
lakshayxi
@lakshayxi
1 cited
David Corvoysier
@dacorvo
hf-security-analysis[bot]
@hf-security-analysis[bot]
Yih-Dar
@ydshieh
adithya-s-k
@adithya-s-k
mugenkyou
@mugenkyou
pwc-cli turns its read-only research commands into ten typed MCP tools backed by the CLI's own parser, while transformers fixes a broken RoPE path and several silent correctness bugs in model outputs.
Mirror every read-only pwc command as an MCP tool huggingface/pwc-cli
Each read-only pwc research command is now one MCP tool with every research flag as a typed parameter, and the handlers run in-process through the CLI's own parser rather than a second implementation of query logic. Results still carry the full pwc ... --json document as data alongside the typed projections existing clients read.
[GPTNeoXJapanese] Fix RoPE ignoring partial_rotary_factor (#48652) huggingface/transformers
GPTNeoXJapanese built inv_freq over the full head_dim while the attention layer rotates only head_size * partial_rotary_factor, so cos/sin never matched the rotated slice. Any rotary_pct != 1.0 raised a RuntimeError; the rotary module is no longer copied from LlamaRotaryEmbedding, which has no partial rotary support.
Fix ESMFold2 ligand iPLDDT weighting: mol_type non-polymer code is 3, not 4 (#48831) huggingface/transformers
The confidence head compared mol_type against 4, but the non-polymer code is 3, so is_ligand was always zero: ligand tokens were never double-weighted and never dropped from the polymer interface mask. Only complex_iplddt changes, from 0.645601 to 0.587880 on a 77-token protein+ligand complex with 41 ligand tokens.
Fix `reset` on the dynamic cache layers (#48809) huggingface/transformers
Dynamic cache reset now drops the layer states instead of zeroing them in place, tested through generate the way users hit it. If you reuse a cache across calls, the memory the old states held is actually released now.
fix: clear 0.4.3 blockers with cancel-safe teardown huggingface/OpenEnv
OpenEnv's 0.4.3 blockers get a cancel-safe teardown: graceful current-socket teardown runs in a tracked, shielded task, and reconnect cannot open a replacement session until a cancelled close handshake finishes. The release also picks up the discovery path and XDG cache fixes from the superseded branch.
Fix Gradio Playground MCP argument parsing huggingface/OpenEnv
MCP call_tool actions now have their JSON string arguments parsed at the web preprocessing boundary, fixing issue 1080 while normal typed payloads keep strict deserialization and invalid JSON still passes through existing Pydantic validation. Related: the MCP production path was routed back through HTTP /mcp JSON-RPC instead of the WebSocket step() fallback.
chore(deps): aggregate envs Dependabot updates huggingface/OpenEnv
The envs Dependabot rollup was rebased onto current main so the remaining lockfile security bumps, including cryptography 50, stay mergeable after the nine commits that landed overnight. Quiet elsewhere: funes switched its build and Linux CI to system protoc, and containers and configuration files across the transformers workflows were hardened.
