OVC: Olib Version Control

Secure, self-hosted version control: encrypted single-file repositories you can store anywhere.

Every commit, branch, tag, and file history lives in a single encrypted .ovc blob. Use OVC through the native desktop app, the browser UI, or the CLI. The desktop app includes its local service and works without a separate CLI installation.

Built by Olib AI

---

Documentation

• Getting Started: Installation, key generation, and basic workflow
• Desktop App: Native installers, onboarding, storage, and development
• CLI Reference: Full command listing, flags, and environment variables
• Architecture & Security Model: Repository format, encryption specs, RBAC, and cloud sync safety
• Actions Engine: Built-in checks, DAG scheduler, and Docker integration
• Web UI & Local LLM Integration: React web interface and AI features

---

Why OVC?

Modern teams need version control they fully own without giving up the convenience of cloud infrastructure.

• Self-hosted, zero trust: your code never touches a server you don't control; store encrypted repos on any cloud (iCloud, GCS, S3, Dropbox, NAS) while retaining full ownership
• Encrypted at rest and in transit: one encrypted file per repo; an attacker who intercepts the file sees only ciphertext
• One key pair does everything: encrypt repos, sign commits, verify teammates (no GPG needed)
• Works like Git: same mental model, same workflow, zero learning curve
• Collaboration-safe: file locking, conflict detection, and auto-merge for shared repos via any cloud storage

---

Key Features

• Encrypted at rest: XChaCha20-Poly1305 encryption with Ed25519+X25519 key pairs
• Single portable file: your entire repository lives in one .ovc file; store it on iCloud, GCS, S3, Dropbox, USB, NAS, or email it
• Commit signing & verification: Ed25519 signatures with verified / unverified badges in CLI and web UI
• One key, two purposes: same key encrypts repos AND signs commits (no GPG needed)
• Multi-user collaboration: share the .ovc file via any cloud storage; cross-process locking, conflict detection, write-ahead log, and auto-merge keep everyone's work safe
• Cloud sync: content-defined chunking via FastCDC; only changed parts transfer; supports local, GCS, and extensible backends
• Git-compatible: bidirectional import/export with full history fidelity
• Built-in Actions Engine: 28 built-in checks + custom shell commands, parallel execution with DAG dependencies, matrix strategy, secrets vault, retry logic
• Local LLM integration: AI-powered commit messages, PR review, diff explanation, and PR descriptions via any OpenAI-compatible local model (Ollama, LM Studio); multi-pass map-reduce pipeline handles diffs of any size
• Native desktop app: self-contained macOS, Windows, and Linux app with the local service and React UI included
• Premium web UI: commit graph with SVG lanes, split diff viewer, blame view, code search, command palette, commit actions, toast notifications
• Single binary: VCS + crypto + git bridge + cloud sync + actions engine + LLM integration + web server + React UI
• Access control (RBAC): per-user roles (read, write, admin, owner) with branch protection
• Memory-safe: unsafe_code = "forbid" workspace-wide; keys zeroed on drop via zeroize
• Security-hardened: constant-time auth, secret zeroization, path traversal protection, bounded resource allocation

---

Quick Start

Install

Desktop app

Download the installer for your platform from GitHub Releases:

• macOS: signed and notarized DMG for Apple Silicon or Intel
• Windows: MSI installer
• Linux: DEB package or portable AppImage

Open OVC after installation. The app starts its private local service automatically and guides new users through creating their first encrypted repository. The CLI is not required.

CLI

Linux & macOS:

curl -fsSL https://raw.githubusercontent.com/Olib-AI/ovc/main/scripts/install.sh | bash

Windows (PowerShell):

irm https://raw.githubusercontent.com/Olib-AI/ovc/main/scripts/install.ps1 | iex

Create your first repo

# Basic: .ovc file in current directory
ovc init --name my-project.ovc --key mykey

# With cloud sync: .ovc file on iCloud, code stays local
ovc init --name my-project.ovc --key mykey \
  --store ~/Library/Mobile\ Documents/com~apple~CloudDocs/ovc-repos/

Daily workflow

ovc add .                              # Stage all files
ovc commit -m "add feature X"          # Commit (auto-signed if OVC_SIGN_COMMITS=true)
ovc status                             # Working tree status
ovc log --oneline --graph              # Commit history with branch graph
ovc diff                               # View changes

---

Building from Source

Prerequisites

• Rust 1.85+ (edition 2024)
• Node.js 20+ (for frontend build only)

# Build frontend (embedded into the binary)
cd frontend && npm install && npm run build && cd ..

# Build the binary
cargo build --release

# Build the native desktop app on the current platform
cargo install cargo-bundle --version 0.11.0
cargo bundle --release -p ovc-desktop

# Install
sudo cp target/release/ovc /usr/local/bin/ovc

# Run tests
cargo test --workspace    # 200+ tests

# Lint
cargo clippy --workspace  # strict: all + pedantic + nursery

---

Contributing

1. Fork and clone the repo
2. Create a feature branch
3. Run cargo test --workspace and cargo clippy --workspace -- -D warnings
4. Submit a pull request

---

License

MIT License

Copyright (c) 2025 Olib AI <dev@olib.ai>

---

Built with Rust 2024 Edition by Olib AI