ollajev 0.2.0__tar.gz

ollajev-0.2.0/.editorconfig

@@ -0,0 +1,15 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = space
+indent_size = 2
+
+[*.py]
+indent_size = 4
+
+[*.md]
+trim_trailing_whitespace = false

ollajev-0.2.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,40 @@
+name: Bug report
+description: Something does not work as expected
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: For security problems, do not file here. Use a private security advisory (see SECURITY.md).
+  - type: textarea
+    id: what
+    attributes:
+      label: What happened
+      description: What you did, what you expected, and what you got instead.
+    validations:
+      required: true
+  - type: textarea
+    id: repro
+    attributes:
+      label: Steps to reproduce
+      description: The exact commands or requests. Include the model repo (for example SupersonicLabs/Julia-1).
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: ollajev version
+      description: Output of `ollajev --version`
+    validations:
+      required: true
+  - type: input
+    id: platform
+    attributes:
+      label: OS, Python and hardware
+      placeholder: macOS 15, Python 3.12, Apple M3
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs or traceback
+      render: text

ollajev-0.2.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Report a security vulnerability
+    url: https://github.com/nvkudva/ollajev/security/advisories/new
+    about: Report privately via a GitHub security advisory. Do not open a public issue. See SECURITY.md.

ollajev-0.2.0/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,21 @@
+name: Feature request
+description: Suggest an improvement or a new model family
+labels: [enhancement]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What are you trying to do that ollajev does not support?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered

ollajev-0.2.0/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,11 @@
+## What and why
+
+<!-- What does this change, and why? Link the issue if there is one. -->
+
+## Checklist
+
+- [ ] `uv run ruff check src tests`, `uv run ruff format --check src tests`, `uv run pyright` and `uv run pytest` pass
+- [ ] Tests added or updated
+- [ ] `CHANGELOG.md` updated under `[Unreleased]` for user-visible changes
+- [ ] Commits follow Conventional Commits
+- [ ] I am contributing this under the Apache-2.0 license

ollajev-0.2.0/.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      actions:
+        patterns: ["*"]
+  - package-ecosystem: uv
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      python-dependencies:
+        patterns: ["*"]

ollajev-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,64 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+      - run: uv sync --locked
+      - run: uv run ruff check src tests
+      - run: uv run ruff format --check src tests
+      - run: uv run pyright
+
+  test:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+      - run: uv sync --locked
+      - run: uv run pytest
+
+  supply-chain:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+      # Audits the locked runtime dependencies (no dev tools, not this project) against
+      # the PyPA advisory database. PYSEC-2026-2447 (diskcache 5.6.3) has no fixed version
+      # upstream, so it is ignored until one exists; remove the --ignore-vuln then.
+      - run: uv export --no-dev --locked --no-emit-project -o requirements-audit.txt
+      - run: uvx pip-audit --requirement requirements-audit.txt --disable-pip --ignore-vuln PYSEC-2026-2447
+
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+      - run: uv build
+      - run: uvx twine check dist/*
+      - name: Smoke test the built wheel in a clean venv
+        run: |
+          uv venv "$RUNNER_TEMP/smoke"
+          uv pip install --python "$RUNNER_TEMP/smoke/bin/python" dist/*.whl
+          "$RUNNER_TEMP/smoke/bin/ollajev" --version
+      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5
+        with:
+          name: dist
+          path: dist/

ollajev-0.2.0/.github/workflows/release.yml

@@ -0,0 +1,56 @@
+name: Release
+
+on:
+  push:
+    tags: ["v*"]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+      - name: Verify tag matches pyproject version
+        run: |
+          version=$(python3 -c "import tomllib; print(tomllib.load(open('pyproject.toml','rb'))['project']['version'])")
+          if [ "v$version" != "$GITHUB_REF_NAME" ]; then
+            echo "Tag $GITHUB_REF_NAME does not match pyproject version v$version" >&2
+            exit 1
+          fi
+      - run: uv build
+      - run: uvx twine check dist/*
+      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+
+  github-release:
+    needs: publish
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
+        with:
+          name: dist
+          path: dist/
+      - name: Create GitHub release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh release create "$GITHUB_REF_NAME" dist/* --repo "$GITHUB_REPOSITORY" --generate-notes --verify-tag

ollajev-0.2.0/.gitignore

@@ -0,0 +1,16 @@
+.venv/
+__pycache__/
+.pytest_cache/
+*.py[cod]
+*.log
+.DS_Store
+dist/
+.ruff_cache/
+.mypy_cache/
+*.egg-info/
+.env
+.coverage
+htmlcov/
+
+# Claude Code agent worktrees
+.claude/worktrees/

ollajev-0.2.0/.pre-commit-config.yaml

@@ -0,0 +1,15 @@
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: end-of-file-fixer
+      - id: trailing-whitespace
+      - id: check-yaml
+      - id: check-toml
+      - id: check-added-large-files
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.16.9
+    hooks:
+      - id: ruff-check
+        args: [--fix]
+      - id: ruff-format

ollajev-0.2.0/CHANGELOG.md

@@ -0,0 +1,67 @@
+# Changelog
+
+All notable changes to this project are documented here. The format follows
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project uses
+[Semantic Versioning](https://semver.org/).
+
+## [Unreleased]
+
+## [0.2.0] - 2026-10-05
+
+First release on PyPI: `uv tool install ollajev`.
+
+### Security
+
+- `POST /api/pull` no longer accepts `trust`; trusting a repo's Python code is CLI-only.
+- `OLLAJEV_API_KEY` requires a bearer token on every API route. Listening on a non-loopback
+  address without it is refused. On loopback, only `localhost`, `127.0.0.1` and `[::1]` are
+  accepted as Host (DNS-rebinding guard).
+- Model names reject `.`/`..` segments and foreign URL hosts.
+- Requests over `OLLAJEV_MAX_BODY_BYTES` (8 MiB) get 413. The demo page sends a Content-Security-Policy.
+
+### Changed
+
+- The demo page is now the playground, at `/playground`; `/demo` redirects there. The model manager's
+  button and the server banner say Playground.
+- `ollajev setup` (alias `tui`) is now a model manager: download, switch the default, unload, delete,
+  alias, inspect and serve from one screen. A Selected card shows the model at the cursor with buttons for
+  what applies to it, a Server card shows the running server with Playground, Logs, Restart and Stop, and the
+  status row lists the keys. Every button shows its key as `[key] label`. Ask is hidden for now.
+- The model manager uses the terminal's own colours and has no theme picker.
+- Keys: `a` adds a model, `f` filters, `c` gives a short name, `s` serves the selected model, `R` restarts
+  and `S` stops the server, `l` follows the server logs in a new terminal tab.
+- The model manager starts faster: listing downloads no longer imports PyTorch.
+- The playground opens on the model the server has loaded.
+
+- Config and logs now live in `~/.ollajev` (override with `OLLAJEV_HOME`). A config in the old OS
+  folder is read once and moved on the next save.
+- Dependencies use compatible ranges in `pyproject.toml`; `uv.lock` keeps exact versions.
+- Installers pin to a release tag.
+
+### Fixed
+
+- `install.sh` checks for a C and C++ compiler on Linux, which llama.cpp needs, and says how to install one.
+- A failing `systemctl` or `launchctl` call in `ollajev service` ends with its message, not a traceback.
+- Config writes are locked and atomic; a corrupt `config.json` is moved to `config.json.bad`.
+- A request can no longer run on a model the reaper just unloaded; eviction reads the slot table
+  under its lock.
+- Two pulls of the same repo cannot run at once; unexpected pull errors are logged, not sent to the client.
+- Repo-code imports are serialised.
+- Removing one quant no longer deletes a blob another revision still uses.
+- A failed download no longer leaves a pin.
+- A bad `OLLAJEV_HOST`, `OLLAJEV_KEEP_ALIVE` or `OLLAJEV_MAX_LOADED_MODELS` gives a one-line error naming the variable.
+
+### Added
+
+- Jev / System One API (`GET /v1/models`, `POST /v1/systemone`), drop-in for `typesafe-sdk`.
+- Adapters for seven model families: decider (PyTorch and llama.cpp GGUF), laya, Julia,
+  open-jev, kev, Intern-Decision and Decision-1.0. Sixteen curated models under 4 GB.
+- Ollama-style model names (`repo`, `repo:quant`, `repo:file.gguf`, `hf.co/` prefix), pinned to the
+  commit of first download.
+- Model manager: load on request, `keep_alive` unload, least-recently-used eviction.
+- Trust prompt per repo and commit for families that run code from the model repo.
+- Ollama-style management API (`/api/tags`, `ps`, `pull`, `show`, `delete`, `copy`, `stop`) and
+  CLI (`serve`, `setup`, `run`, `pull`, `list`, `ps`, `show`, `rm`, `stop`, `cp`, `service`).
+- Textual setup screen on first run; interactive `run`.
+- Demo page with a model picker and per-model limits.
+- `install.sh` / `install.ps1`, and a background service (launchd, systemd user unit).

ollajev-0.2.0/CODE_OF_CONDUCT.md

@@ -0,0 +1,133 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, caste, color, religion, or sexual
+identity and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment for our
+community include:
+
+* Demonstrating empathy and kindness toward other people
+* Being respectful of differing opinions, viewpoints, and experiences
+* Giving and gracefully accepting constructive feedback
+* Accepting responsibility and apologizing to those affected by our mistakes,
+  and learning from the experience
+* Focusing on what is best not just for us as individuals, but for the overall
+  community
+
+Examples of unacceptable behavior include:
+
+* The use of sexualized language or imagery, and sexual attention or advances of
+  any kind
+* Trolling, insulting or derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or email address,
+  without their explicit permission
+* Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement Responsibilities
+
+Community leaders are responsible for clarifying and enforcing our standards of
+acceptable behavior and will take appropriate and fair corrective action in
+response to any behavior that they deem inappropriate, threatening, offensive,
+or harmful.
+
+Community leaders have the right and responsibility to remove, edit, or reject
+comments, commits, code, wiki edits, issues, and other contributions that are
+not aligned to this Code of Conduct, and will communicate reasons for moderation
+decisions when appropriate.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+Examples of representing our community include using an official e-mail address,
+posting via an official social media account, or acting as an appointed
+representative at an online or offline event.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the community leaders responsible for enforcement by opening a
+[private security advisory](https://github.com/nvkudva/ollajev/security/advisories/new)
+on the repository, or by contacting the maintainer through the repository. All
+complaints will be reviewed and investigated promptly and fairly.
+
+All community leaders are obligated to respect the privacy and security of the
+reporter of any incident.
+
+## Enforcement Guidelines
+
+Community leaders will follow these Community Impact Guidelines in determining
+the consequences for any action they deem in violation of this Code of Conduct:
+
+### 1. Correction
+
+**Community Impact**: Use of inappropriate language or other behavior deemed
+unprofessional or unwelcome in the community.
+
+**Consequence**: A private, written warning from community leaders, providing
+clarity around the nature of the violation and an explanation of why the
+behavior was inappropriate. A public apology may be requested.
+
+### 2. Warning
+
+**Community Impact**: A violation through a single incident or series of
+actions.
+
+**Consequence**: A warning with consequences for continued behavior. No
+interaction with the people involved, including unsolicited interaction with
+those enforcing the Code of Conduct, for a specified period of time. This
+includes avoiding interactions in community spaces as well as external channels
+like social media. Violating these terms may lead to a temporary or permanent
+ban.
+
+### 3. Temporary Ban
+
+**Community Impact**: A serious violation of community standards, including
+sustained inappropriate behavior.
+
+**Consequence**: A temporary ban from any sort of interaction or public
+communication with the community for a specified period of time. No public or
+private interaction with the people involved, including unsolicited interaction
+with those enforcing the Code of Conduct, is allowed during this period.
+Violating these terms may lead to a permanent ban.
+
+### 4. Permanent Ban
+
+**Community Impact**: Demonstrating a pattern of violation of community
+standards, including sustained inappropriate behavior, harassment of an
+individual, or aggression toward or disparagement of classes of individuals.
+
+**Consequence**: A permanent ban from any sort of public interaction within the
+community.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage],
+version 2.1, available at
+[https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1].
+
+Community Impact Guidelines were inspired by
+[Mozilla's code of conduct enforcement ladder][Mozilla CoC].
+
+For answers to common questions about this code of conduct, see the FAQ at
+[https://www.contributor-covenant.org/faq][FAQ]. Translations are available at
+[https://www.contributor-covenant.org/translations][translations].
+
+[homepage]: https://www.contributor-covenant.org
+[v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html
+[Mozilla CoC]: https://github.com/mozilla/diversity
+[FAQ]: https://www.contributor-covenant.org/faq
+[translations]: https://www.contributor-covenant.org/translations

ollajev-0.2.0/CONTRIBUTING.md

@@ -0,0 +1,85 @@
+# Contributing
+
+## Setup
+
+```sh
+git clone https://github.com/nvkudva/ollajev.git
+cd ollajev
+uv sync                      # Python 3.12 environment with the dev tools
+uv run ollajev --help
+```
+
+## Checks
+
+Run these before opening a pull request. CI runs the same ones.
+
+```sh
+uv run ruff check src tests
+uv run ruff format --check src tests
+uv run pyright
+uv run pytest
+```
+
+`uv run pre-commit install` runs ruff on every commit.
+
+The tests load no model weights. To check a change against a real model, run the server and send
+it a request:
+
+```sh
+OLLAJEV_HOME=/tmp/ollajev-dev uv run ollajev serve SupersonicLabs/Julia-1 --port 8765
+```
+
+## Layout
+
+| Path | What it holds |
+|---|---|
+| `src/ollajev/ui/` | front ends: `cli.py` command line, `repl.py` for `ollajev run`, `tui.py` model manager |
+| `src/ollajev/server/` | HTTP routes: `api.py` Jev API, `admin.py` management API, `static/` playground page |
+| `src/ollajev/client.py` | talking to a running server, for the front ends |
+| `src/ollajev/manager.py` | loading, unloading and running models |
+| `src/ollajev/store.py`, `names.py` | model names, pinned downloads, trust |
+| `src/ollajev/adapters/` | one module per model family |
+| `src/ollajev/normalize.py` | answers in the TypeSafe shape |
+| `src/ollajev/_vendor/kev/` | kev's loader, vendored; do not edit except as noted in `VENDORED.md` |
+
+Everything else in `src/ollajev/` is the core. The core never imports `server/` or `ui/`, and `server/`
+never imports `ui/`; `tests/test_layout.py` checks this.
+
+## Adding a model family
+
+Add a module under `src/ollajev/adapters/` with a `FAMILY` object that implements the `Family`
+protocol in `adapters/__init__.py` (`matches`, `allow_patterns`, `limits`, `load`), and register it
+in `families()`. Set `runs_repo_code = True` if it imports Python from the model repo. Run the new
+model end to end through `/v1/systemone` before adding it to `catalog.py`.
+
+## Running tests
+
+```sh
+uv run pytest
+```
+
+## Lint and type check
+
+```sh
+uv run ruff check
+uv run pyright
+```
+
+## Releasing
+
+1. Bump `version` in `pyproject.toml`.
+2. Move the `[Unreleased]` entries in `CHANGELOG.md` under the new version.
+3. Commit, then tag `vX.Y.Z` and push the tag.
+
+`.github/workflows/release.yml` checks the tag matches `pyproject.toml`, builds, publishes to PyPI
+with trusted publishing, and creates the GitHub release.
+
+## Commits
+
+Use [Conventional Commits](https://www.conventionalcommits.org/) (`feat:`, `fix:`, `docs:` …) and
+add a line to `CHANGELOG.md` under `[Unreleased]` for user-visible changes.
+
+## License
+
+Contributions are made under the Apache-2.0 license, the same as the project. There is no CLA.
+Add a `Signed-off-by` line (`git commit -s`) if you like; it is not required.