Add Ollama Cloud auth wiring and deploy-time provider env support

Author: Intina47

.env.example

@@ -24,6 +24,8 @@ MDE_GEMINI_SEMANTIC_MODEL=gemini-2.5-flash
 
 # Ollama provider settings
 MDE_OLLAMA_HOST=http://localhost:11434
+OLLAMA_API_KEY=
+MDE_OLLAMA_API_KEY=
 MDE_OLLAMA_EMBEDDING_MODEL=nomic-embed-text
 MDE_OLLAMA_SEMANTIC_MODEL=llama3.1
 

Dockerfile

@@ -19,7 +19,7 @@ RUN python -m pip install --no-cache-dir --upgrade pip \
     && python -m pip install --no-cache-dir \
       --index-url https://download.pytorch.org/whl/cpu \
       --extra-index-url https://pypi.org/simple \
-      .
+      ".[ollama]"
 
 RUN chmod +x /app/scripts/docker-entrypoint.sh
 

scripts/deploy_gcp_cloud_run.sh

@@ -26,6 +26,8 @@ DB_URL_SECRET_NAME="${DB_URL_SECRET_NAME:-orbit-db-url}"
 DB_URL_SECRET_VERSION="${DB_URL_SECRET_VERSION:-latest}"
 JWT_SECRET_NAME="${JWT_SECRET_NAME:-orbit-jwt-secret}"
 JWT_SECRET_VERSION="${JWT_SECRET_VERSION:-latest}"
+OLLAMA_API_KEY_SECRET_NAME="${OLLAMA_API_KEY_SECRET_NAME:-}"
+OLLAMA_API_KEY_SECRET_VERSION="${OLLAMA_API_KEY_SECRET_VERSION:-latest}"
 
 ORBIT_ENV="${ORBIT_ENV:-production}"
 ORBIT_JWT_ISSUER="${ORBIT_JWT_ISSUER:-orbit}"
@@ -53,6 +55,11 @@ ORBIT_MAX_BATCH_ITEMS="${ORBIT_MAX_BATCH_ITEMS:-100}"
 ORBIT_CORS_ALLOW_ORIGINS="${ORBIT_CORS_ALLOW_ORIGINS:-https://your-frontend.vercel.app}"
 ORBIT_OTEL_SERVICE_NAME="${ORBIT_OTEL_SERVICE_NAME:-orbit-api}"
 ORBIT_OTEL_EXPORTER_ENDPOINT="${ORBIT_OTEL_EXPORTER_ENDPOINT:-}"
+MDE_EMBEDDING_PROVIDER="${MDE_EMBEDDING_PROVIDER:-deterministic}"
+MDE_SEMANTIC_PROVIDER="${MDE_SEMANTIC_PROVIDER:-context}"
+MDE_OLLAMA_HOST="${MDE_OLLAMA_HOST:-}"
+MDE_OLLAMA_EMBEDDING_MODEL="${MDE_OLLAMA_EMBEDDING_MODEL:-nomic-embed-text}"
+MDE_OLLAMA_SEMANTIC_MODEL="${MDE_OLLAMA_SEMANTIC_MODEL:-llama3.1}"
 
 env_vars=(
   "ORBIT_API_HOST=0.0.0.0"
@@ -83,11 +90,18 @@ env_vars=(
   "ORBIT_MAX_BATCH_ITEMS=${ORBIT_MAX_BATCH_ITEMS}"
   "ORBIT_CORS_ALLOW_ORIGINS=${ORBIT_CORS_ALLOW_ORIGINS}"
   "ORBIT_OTEL_SERVICE_NAME=${ORBIT_OTEL_SERVICE_NAME}"
+  "MDE_EMBEDDING_PROVIDER=${MDE_EMBEDDING_PROVIDER}"
+  "MDE_SEMANTIC_PROVIDER=${MDE_SEMANTIC_PROVIDER}"
+  "MDE_OLLAMA_EMBEDDING_MODEL=${MDE_OLLAMA_EMBEDDING_MODEL}"
+  "MDE_OLLAMA_SEMANTIC_MODEL=${MDE_OLLAMA_SEMANTIC_MODEL}"
 )
 
 if [[ -n "${ORBIT_OTEL_EXPORTER_ENDPOINT}" ]]; then
   env_vars+=("ORBIT_OTEL_EXPORTER_ENDPOINT=${ORBIT_OTEL_EXPORTER_ENDPOINT}")
 fi
+if [[ -n "${MDE_OLLAMA_HOST}" ]]; then
+  env_vars+=("MDE_OLLAMA_HOST=${MDE_OLLAMA_HOST}")
+fi
 
 gcloud_args=(
   run
@@ -117,6 +131,13 @@ gcloud_args=(
   "MDE_DATABASE_URL=${DB_URL_SECRET_NAME}:${DB_URL_SECRET_VERSION},ORBIT_JWT_SECRET=${JWT_SECRET_NAME}:${JWT_SECRET_VERSION}"
 )
 
+if [[ -n "${OLLAMA_API_KEY_SECRET_NAME}" ]]; then
+  gcloud_args+=(
+    --set-secrets
+    "OLLAMA_API_KEY=${OLLAMA_API_KEY_SECRET_NAME}:${OLLAMA_API_KEY_SECRET_VERSION}"
+  )
+fi
+
 set_env_vars_value="^#^$(IFS='#'; echo "${env_vars[*]}")"
 gcloud_args+=(
   --set-env-vars

src/memory_engine/providers/adapters.py

@@ -276,7 +276,12 @@ def __init__(self, model: str | None = None, host: str | None = None) -> None:
         if client_cls is None:
             msg = "ollama.Client class is unavailable."
             raise RuntimeError(msg)
-        self._client: Any = client_cls(host=host or os.getenv("MDE_OLLAMA_HOST"))
+        resolved_host = host or os.getenv("MDE_OLLAMA_HOST")
+        api_key = os.getenv("MDE_OLLAMA_API_KEY") or os.getenv("OLLAMA_API_KEY")
+        client_kwargs: dict[str, Any] = {"host": resolved_host}
+        if api_key:
+            client_kwargs["headers"] = {"Authorization": f"Bearer {api_key}"}
+        self._client: Any = client_cls(**client_kwargs)
         self._model = model or os.getenv("MDE_OLLAMA_SEMANTIC_MODEL", "llama3.1")
 
     def understand(self, event: RawEvent) -> SemanticUnderstanding:
@@ -315,7 +320,12 @@ def __init__(
         if client_cls is None:
             msg = "ollama.Client class is unavailable."
             raise RuntimeError(msg)
-        self._client: Any = client_cls(host=host or os.getenv("MDE_OLLAMA_HOST"))
+        resolved_host = host or os.getenv("MDE_OLLAMA_HOST")
+        api_key = os.getenv("MDE_OLLAMA_API_KEY") or os.getenv("OLLAMA_API_KEY")
+        client_kwargs: dict[str, Any] = {"host": resolved_host}
+        if api_key:
+            client_kwargs["headers"] = {"Authorization": f"Bearer {api_key}"}
+        self._client: Any = client_cls(**client_kwargs)
         self._model = model or os.getenv(
             "MDE_OLLAMA_EMBEDDING_MODEL", "nomic-embed-text"
         )