geenii 0.4.0.dev4__tar.gz

geenii-0.4.0.dev4/.aiignore

@@ -0,0 +1,18 @@
+.idea/
+.venv/
+.geenii/
+bak/
+data/
+build/
+dist/
+__pycache__/
+.DS_Store
+*.log
+*.pyc
+.env
+*.local
+*.env
+*.bak
+*.secret
+*.pass
+*.password

geenii-0.4.0.dev4/.dockerignore

@@ -0,0 +1,16 @@
+.idea/
+.venv/
+.git/
+.github/
+.geenii/
+bak/
+data/
+build/
+docs/
+.env.local
+.env.development.local
+.env.test.local
+.env.*
+src/tests/
+x*.py
+__pycache__/

geenii-0.4.0.dev4/.github/workflows/ci.yml

@@ -0,0 +1,35 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+  # Lets the release workflow run the full CI before publishing.
+  workflow_call:
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+      - uses: astral-sh/ruff-action@v4.0.0
+        with:
+          src: src/
+
+  test:
+    name: Test (Python ${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.14"]
+    steps:
+      - uses: actions/checkout@v7
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        with:
+          python-version: ${{ matrix.python-version }}
+      - run: uv sync --locked --group dev
+      - run: uv run pytest tests/ -v

geenii-0.4.0.dev4/.github/workflows/publish_image_multiarch.yml

@@ -0,0 +1,111 @@
+name: Publish image
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+permissions: {}
+
+env:
+  IMAGE_TAG: ${{ github.ref_name }}
+  REPO_NAME: ${{ vars.DOCKERHUB_REPONAME }}
+  DOCKER_NAMESPACE: ${{ secrets.DOCKERHUB_USERNAME }}
+
+jobs:
+  validate:
+    name: Validate inputs
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check required variables
+        run: |
+          set -eu
+          : "${REPO_NAME:?DOCKERHUB_REPONAME variable is not set}"
+          : "${DOCKER_NAMESPACE:?DOCKERHUB_USERNAME secret is not set}"
+          : "${IMAGE_TAG:?github.ref_name is empty}"
+        env:
+          REPO_NAME: ${{ vars.DOCKERHUB_REPONAME }}
+          DOCKER_NAMESPACE: ${{ secrets.DOCKERHUB_USERNAME }}
+          IMAGE_TAG: ${{ github.ref_name }}
+
+  build:
+    name: Build ${{ matrix.platform }}
+    needs: validate
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - platform: linux/amd64
+            runner: ubuntu-latest
+            arch_tag: amd64
+          - platform: linux/arm64
+            runner: ubuntu-24.04-arm
+            arch_tag: arm64
+
+    runs-on: ${{ matrix.runner }}
+    environment: production
+
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v5
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Build and push arch image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./Dockerfile
+          platforms: ${{ matrix.platform }}
+          push: true
+          provenance: true
+          sbom: true
+          tags: |
+            ${{ env.DOCKER_NAMESPACE }}/${{ env.REPO_NAME }}:${{ env.IMAGE_TAG }}-${{ matrix.arch_tag }}
+          cache-from: type=gha,scope=${{ github.workflow }}-${{ matrix.arch_tag }}
+          cache-to: type=gha,mode=max,scope=${{ github.workflow }}-${{ matrix.arch_tag }}
+
+  manifest:
+    name: Create multi-arch manifest
+    needs: [validate, build]
+    runs-on: ubuntu-latest
+    environment: production
+
+    steps:
+      - name: Login to Docker Hub
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Create and push manifest
+        run: |
+          set -eux
+
+          docker buildx imagetools create \
+            -t $DOCKER_NAMESPACE/$REPO_NAME:$IMAGE_TAG \
+            -t $DOCKER_NAMESPACE/$REPO_NAME:latest \
+            $DOCKER_NAMESPACE/$REPO_NAME:$IMAGE_TAG-amd64 \
+            $DOCKER_NAMESPACE/$REPO_NAME:$IMAGE_TAG-arm64
+
+      - name: Inspect manifest
+        run: |
+          docker buildx imagetools inspect $DOCKER_NAMESPACE/$REPO_NAME:$IMAGE_TAG
+
+  smoke-test:
+    name: Smoke test
+    needs: manifest
+    runs-on: ubuntu-latest
+    steps:
+      - name: Pull and run image
+        run: |
+          set -eux
+          docker run --rm $DOCKER_NAMESPACE/$REPO_NAME:$IMAGE_TAG geenii --version

geenii-0.4.0.dev4/.github/workflows/release.yml

@@ -0,0 +1,101 @@
+name: Publish release
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  build:
+    name: Build ${{ matrix.platform }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - platform: linux/amd64
+            runner: ubuntu-latest
+            arch_tag: linux-amd64
+          - platform: linux/arm64
+            runner: ubuntu-24.04-arm
+            arch_tag: linux-arm64
+          - platform: darwin/amd64
+            runner: macos-latest
+            arch_tag: darwin-amd64
+          - platform: darwin/arm64
+            runner: macos-latest
+            arch_tag: darwin-arm64
+
+    runs-on: ${{ matrix.runner }}
+
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v7
+
+      - name: Setup Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: '3.14'
+
+      - name: Install uv
+        #run: pip install uv
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+
+#      - name: Build
+#        run: |
+#          ./build_bin.sh
+#          cp README.md LICENSE dist/
+#          TARBALL="geenii-${{ matrix.arch_tag }}.tar.gz"
+#          tar -czvf "$TARBALL" -C dist .
+#          if command -v sha256sum &>/dev/null; then
+#            sha256sum "$TARBALL" > "$TARBALL.sha256"
+#          else
+#            shasum -a 256 "$TARBALL" > "$TARBALL.sha256"
+#          fi
+
+      - name: Build
+        run: |
+          ./build_od.sh
+          cp README.md LICENSE dist/
+          TARBALL="geenii-${{ matrix.arch_tag }}-${{ github.ref_name }}.tar.gz"
+          tar -czvf "$TARBALL" -C dist .
+          if command -v sha256sum &>/dev/null; then
+            sha256sum "$TARBALL" > "$TARBALL.sha256"
+          else
+            shasum -a 256 "$TARBALL" > "$TARBALL.sha256"
+          fi
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: geenii-${{ matrix.arch_tag }}
+          path: |
+            geenii-${{ matrix.arch_tag }}-${{ github.ref_name }}.tar.gz
+            geenii-${{ matrix.arch_tag }}-${{ github.ref_name }}.tar.gz.sha256
+
+  release:
+    name: Create GitHub Release
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Download all artifacts
+        uses: actions/download-artifact@v6
+        with:
+          path: artifacts
+          merge-multiple: true
+
+      - name: Create release
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ github.ref_name }}
+        run: |
+          set -eux
+          ls -la artifacts/
+          gh release create "$TAG" artifacts/* \
+            --repo "$GITHUB_REPOSITORY" \
+            --title "$TAG" \
+            --generate-notes

geenii-0.4.0.dev4/.github/workflows/release_pypi.yml

@@ -0,0 +1,158 @@
+name: Release Python SDK
+
+on:
+  push:
+    tags: ["python-v*"]
+
+# Actions are pinned to commit SHAs (updated by Dependabot).
+permissions:
+  contents: read
+
+jobs:
+  check-version:
+    name: Check tag matches package version
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.version.outputs.version }}
+      prerelease: ${{ steps.version.outputs.prerelease }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+      - name: Compare tag with pyproject.toml version
+        id: version
+        env:
+          TAG: ${{ github.ref_name }}
+        run: |
+          version=$(uv version --short)
+          if [[ "${TAG}" != "python-v${version}" ]]; then
+            echo "::error::Tag ${TAG} does not match the package version ${version} in pyproject.toml (expected v${version})."
+            exit 1
+          fi
+          echo "version=${version}" >> "$GITHUB_OUTPUT"
+          # PEP 440 pre-releases (e.g. 1.0.0a1, 1.0.0b2, 1.0.0rc1, 1.0.0.dev1)
+          if [[ "${version}" =~ (a|b|rc|\.dev)[0-9]+$ ]]; then
+            echo "prerelease=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "prerelease=false" >> "$GITHUB_OUTPUT"
+          fi
+
+  #  ci:
+  #    name: CI
+  #    needs: check-version
+  #    uses: ./.github/workflows/ci.yml
+
+  build:
+    name: Build distributions
+    needs: [check-version]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        with:
+          enable-cache: false # never build release artifacts from a cache
+          python-version: '3.14'
+      - name: Build sdist and wheel
+        run: uv build --no-sources
+      - name: Check wheel
+        run: |
+          # -I keeps the current directory off sys.path
+          # --isolated uses a fresh environment, with nothing reused from a previous run.
+          uv run --isolated --no-project --with dist/*.whl \
+            python -I -c "import geenii, importlib.metadata as m; print(m.version('geenii'))"
+      - name: Check distribution metadata
+        run: uvx twine check --strict dist/*
+      - uses: actions/upload-artifact@v7
+        with:
+          name: dist
+          path: dist/
+          if-no-files-found: error
+
+  github-release:
+    name: Create GitHub release
+    needs: [check-version, build]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: dist
+          path: dist/
+      - name: Create release with distributions attached
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ github.ref_name }}
+          PRERELEASE: ${{ needs.check-version.outputs.prerelease }}
+          TITLE: "Geenii Python SDK"
+        run: |
+          flags=()
+          if [[ "${PRERELEASE}" == "true" ]]; then
+            flags+=(--prerelease)
+          fi
+          gh release create "${TAG}" dist/* \
+            --repo "${GITHUB_REPOSITORY}" \
+            --title "${TITLE} ${TAG}" \
+            --generate-notes \
+            --verify-tag \
+            "${flags[@]}"
+
+  # A dry run on TestPyPI; if the upload or the install check fails, nothing is published to PyPI.
+  publish-testpypi:
+    name: Publish to TestPyPI
+    needs: [check-version, build]
+    runs-on: ubuntu-latest
+    # Trusted publishing, like PyPI below, but configured on test.pypi.org.
+    environment:
+      name: testpypi
+      url: https://test.pypi.org/project/geenii/${{ needs.check-version.outputs.version }}/
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+        with:
+          repository-url: https://test.pypi.org/legacy/
+          # TestPyPI rejects re-uploads, so re-running a release whose PyPI step failed would fail here.
+          skip-existing: true
+#      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+#        with:
+#          enable-cache: false
+#          python-version: "3.14"
+#      - name: Install from TestPyPI
+#        env:
+#          VERSION: ${{ needs.check-version.outputs.version }}
+#        # Only TestPyPI is used as the index, which works because the package has no
+#        # required dependencies. New uploads can take a minute to appear, so retry.
+#        run: |
+#          for i in 1 2 3; do
+#            uv run --no-project --refresh \
+#              --index https://test.pypi.org/simple/ \
+#              --index-strategy unsafe-best-match \
+#              --with "geenii==${VERSION}" \
+#              python -c "import geenii; print(geenii.__version__)" && exit 0
+#            echo "Not available yet, retrying..."; sleep 20
+#          done
+#          exit 1
+
+  publish-pypi:
+    name: Publish to PyPI
+    needs: [check-version, publish-testpypi]
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/geenii/${{ needs.check-version.outputs.version }}/
+    permissions:
+      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+        with:
+          skip-existing: true

geenii-0.4.0.dev4/.github/workflows/reposcan.yml

@@ -0,0 +1,47 @@
+name: Repo Scan
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v7
+      
+    - name: Run Repo Scan
+      id: repo-scan
+      uses: fm-labs/action-repo-scan@v1.0.3
+      with:
+        path: '.'  # Optional: defaults to '.'
+      continue-on-error: true   # so the upload still runs if the scan exits non-zero
+
+    - name: Upload scan result
+      if: always()
+      uses: actions/upload-artifact@v7
+      with:
+        name: repo-scan-result
+        path: ${{ steps.scan.outputs.scan-file || '.repo-scan/scan-result.json' }}
+        if-no-files-found: warn
+        archive: 'false'
+
+    - name: Check scan status
+      run: |
+        if [ "${{ steps.repo-scan.outputs.exit-code }}" != "0" ]; then
+          echo "Repo scan failed!"
+          exit 1
+        else
+          echo "Repo scan passed successfully!"
+        fi        
+
+#    - name: Display scan results
+#      run: |
+#        echo "Repo scan completed with exit code: ${{ steps.repo-scan.outputs.exit-code }}"
+#        echo "Scan output:"
+#        echo "${{ steps.repo-scan.outputs.scan-output }}" || echo "No scan output"
+

geenii-0.4.0.dev4/.gitignore

@@ -0,0 +1,20 @@
+.cache/
+.idea/
+.venv/
+.geenii/
+bak/
+data/
+build/
+dist/
+/lib/
+.env
+.env.local
+.env.*
+*.local
+*.bak
+*.log
+__pycache__/
+.DS_Store
+src/*.egg-info/
+src/x*.py
+SUMMARY.md

geenii-0.4.0.dev4/.python-version

@@ -0,0 +1 @@
+3.14

geenii-0.4.0.dev4/DEVELOPER.md

@@ -0,0 +1,58 @@
+# geenii Developer Guide
+
+The geenii has a web service daemon that provides an API for managing agents, tools and skills.
+It is one of the core component of the OpenGeenii platform, responsible for executing AI agents and handling interactions.
+
+
+Full developer docs: [docs/index.md](docs/index.md#developer-guide). The server's API is described in
+[docs/developer-guide/server.md](docs/developer-guide/server.md), the web UI in
+[docs/developer-guide/web-ui.md](docs/developer-guide/web-ui.md).
+
+
+## Webserver
+
+### Run geenii web server
+
+```bash
+uvicorn --app-dir ./src geenii.server.server:app --port 33311
+```
+
+### Run geenii web server in dev mode
+
+```bash
+uvicorn --app-dir ./src geenii.server.server:app --port 33311 --reload
+```
+
+
+## Docker
+
+### Build the image
+
+```bash
+docker build -f ./Dockerfile -t geenii:latest --progress plain .
+```
+
+or using the helper script
+
+```bash
+./build_image.sh
+```
+
+### Run the container
+
+Example:
+
+```bash
+docker run --rm -it \
+  --env-file=.env.docker \
+  -e OLLAMA_HOST=host.docker.internal:11434 \
+  --add-host=host.docker.internal:host-gateway \
+  geenii:latest \
+  $@
+```
+
+or using the helper script:
+
+```bash
+./run.sh
+```

geenii-0.4.0.dev4/Dockerfile

@@ -0,0 +1,84 @@
+FROM python:3.14-alpine AS builder
+WORKDIR /builder
+
+# Install build dependencies for pyinstaller
+RUN apk add --no-cache \
+    bash \
+    build-base \
+    python3-dev \
+    libffi-dev zlib-dev curl ccache zstd-dev
+# Install uv
+COPY --from=docker.io/astral/uv:latest /uv /uvx /bin/
+#COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
+#RUN pip install uv
+# Install python dependencies
+COPY ./pyproject.toml ./uv.lock /builder/
+RUN uv sync --no-cache-dir --frozen --no-install-project
+
+COPY ./src/geenii /builder/src/geenii
+COPY ./README.md /builder/
+
+# build using pyinstaller
+COPY ./hooks /builder/hooks
+#COPY ./build_bin.sh /builder/build.sh
+COPY ./build_od.sh /builder/build.sh
+RUN mkdir -p ./build && mkdir -p ./dist && \
+    chmod +x /builder/build.sh && \
+    bash /builder/build.sh
+
+#RUN mkdir -p ./build && mkdir -p ./dist && \
+#    uv run pyinstaller --clean --onedir --distpath ./dist --workpath ./build --specpath ./build \
+#  --copy-metadata fastmcp \
+#  --additional-hooks-dir=hooks \
+#  --name geenii \
+#  ./src/geenii/cli/main.py || exit 1
+
+## build using nuitka
+#RUN uv run pip install "patchelf==0.17.2.1" zstandard ordered-set
+#RUN uv run python -m nuitka \
+#    --include-package=geenii \
+#    --include-package=mcp \
+#    --include-package=fastmcp \
+#    --include-distribution-metadata=fastmcp \
+#    --standalone \
+#    --onefile \
+#    --output-filename=geenii \
+#    --output-dir=dist \
+#    ./src/geenii/cli/main.py
+
+FROM python:3.14-alpine
+
+# Install system dependencies
+RUN apk add --no-cache \
+    bash \
+    curl \
+    git \
+    nodejs \
+    npm \
+    docker-cli \
+    openssl \
+    openssh-client \
+    && rm -rf /var/cache/apk/* \
+    && npm i -g pnpm
+
+# Create non-root user and group, set permissions for geenii and home directory
+RUN addgroup --gid 33311 -S geenii && adduser --uid 33311 -S geenii -G geenii && \
+    mkdir -p /geenii && \
+    chown -R geenii:geenii /geenii && \
+    mkdir -p /home/geenii && \
+    chown -R geenii:geenii /home/geenii
+
+# Binaries
+#COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
+COPY --from=docker.io/astral/uv:latest /uv /uvx /bin/
+#COPY --from=builder /builder/dist/geenii /usr/bin/geenii
+COPY --from=builder /builder/dist/geenii /opt/geenii/bin/
+RUN chmod +x /opt/geenii/bin/geenii && ln -sf /opt/geenii/bin/geenii /usr/bin/geenii
+
+#COPY ./container/entrypoint.sh /usr/bin/entrypoint
+#RUN chmod +x /usr/bin/entrypoint
+#ENTRYPOINT ["/usr/bin/entrypoint"]
+
+WORKDIR /workspace
+USER geenii
+CMD ["geenii", "--help"]

geenii-0.4.0.dev4/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 fm-labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.