tools-local-model-import

Finds model files already downloaded to disk, lists them numbered, and imports the chosen one into Ollama as a PRIVATE-ONLY model: recorded in a manifest outside every project directory, so a front-end can offer it in local-model mode and nowhere else. Argument-vector subprocess only, bounded walk, no shell.

What it is for

Import a model file the operator already downloaded into Ollama, and mark it private-only.

The shape is deliberate: a big model arrives in ~/Downloads the way everything else does, and the operator should not have to hand-write a Modelfile, guess a name, or remember where it went. scan prints a numbered list; install <N> imports that one and restarts the service.

Private-only is the point, not a label. Every model imported here is recorded in a manifest under ~/.config/imp/, deliberately outside every project directory — the same reasoning as the never-send list, so an agent's own sandboxed file tools cannot read it. A front-end reads that manifest to offer these models in local-model mode and nowhere else.

Gate 1.5.6, stated before the code: 1. Input limits — the scan root is canonicalized and must sit under $HOME; the walk is depth- and entry-capped; every candidate is re-canonicalized and must still be under the root, so a symlink cannot point the import outside it. 2. Subprocess — foundation-bounded-io::exec::BoundedCommand only: binary path plus argument vector, wall-clock timeout, output caps. There is no shell form to misuse. The ollama binary path is allowlisted and must resolve to an existing file. 3. Advisory locks — N/A. This is a single-operator tool against a local daemon; there is no tenant keyspace to collide in. 4. Batch failure — one model per run. If ollama create fails, the manifest is not written: no partial record of an import that did not happen.

The operator's downloaded file is never moved, renamed, or modified. The generated Modelfile points AT it.

Capabilities

No public items.

How to use it

No examples/ target and no doctest in this crate's rustdoc. The tests listed under Verification are the closest executable usage.

Module structure

No public modules: the crate root is its whole surface.

Public surface

No public items.

No pub use re-exports: every item above is declared in this crate.

Boundary

Reaches into foundation.

Shares tier tools with 84 other crates: tools-advisory-reach, tools-archive-guard, tools-artifact-scaffold, tools-ask-ai-core, tools-ask-ais, tools-ask-gemini, tools-book, tools-book-report, … (84 total).

_What this crate deliberately does NOT own is a judgment. No committed registry records one for it, so none is stated here._

Where it sits

Tier flow. Which tiers this crate's own edges cross.

flowchart LR
  n_tools["tools"] --> n_foundation["foundation"]

Dependencies

Runtime, in this workspace.

Runtime, from outside the workspace.

Development. None.

Build. None.

Depended on by. Nothing in this workspace.

Signal flow — what reaches this crate, and what it reaches.

flowchart LR
  SELF["tools-local-model-import"]
  SELF -->|runtime| n_foundation_bounded_io["foundation-bounded-io"]
  classDef self fill:#1f883d,stroke:#1f883d,color:#fff;
  class SELF self;

Feature flags

No Cargo features are defined: every capability is unconditional, so no consumer can receive a half-wired crate.

Targets

Error model

No public error type was detected: no public item declares a type named *Error, and no public signature returns one.

Operational characteristics

No unsafe block, unsafe fn, unsafe impl or unsafe trait was found by the parser anywhere in this crate's source.

Configuration

Related capabilities

No workspace crate depends on this one.

Verification

What the tests establish, by name:

• a_manifest_line_cannot_be_split_by_a_name_containing_a_tab — src/main.rs
• a_suggested_name_is_something_ollama_will_accept — src/main.rs
• an_empty_scan_says_so_rather_than_printing_an_empty_list — src/main.rs
• ollama_is_driven_by_an_argument_vector_never_a_shell_string — src/main.rs
• only_real_model_files_are_candidates — src/main.rs
• the_listing_is_numbered_from_one_and_picked_by_number — src/main.rs
• the_manifest_lives_outside_every_project_directory — src/main.rs
• the_manifest_round_trips_and_survives_a_comment — src/main.rs
• the_modelfile_points_at_the_download_and_does_not_move_it — src/main.rs
• the_restart_is_the_service_manager_not_a_kill — src/main.rs

Documentation coverage

Metrics

pie showData
    title Rust source composition
    "Code" : 562
    "Blank or comment" : 134

Generation

Rendered by tools-corpus corpus readme from repository evidence alone, renderer schema 2, lexicon current. No model, network service or database was consulted. Regenerate with tools-corpus corpus readme --write; verify with --check.