cloud-integrity-check 0.1.0__py3-none-any.whl

cloud_integrity_check/__init__.py

@@ -0,0 +1,9 @@
+"""cloud-integrity-check — hash files into a manifest and verify integrity later.
+
+Detects silent corruption, truncation or tampering after a cloud round-trip
+(upload/download/sync). Pure standard library (hashlib) — no custom crypto.
+"""
+from .core import compute_manifest, verify, hash_file, Report
+
+__all__ = ["compute_manifest", "verify", "hash_file", "Report"]
+__version__ = "0.1.0"

cloud_integrity_check/cli.py

@@ -0,0 +1,36 @@
+from __future__ import annotations
+import argparse, json, sys
+from .core import compute_manifest, verify
+
+
+def main(argv=None) -> int:
+    p = argparse.ArgumentParser(prog="cloud-integrity-check",
+        description="Hash files into a manifest and verify integrity after a cloud round-trip.")
+    sub = p.add_subparsers(dest="cmd", required=True)
+    c = sub.add_parser("create", help="create a manifest of a file or directory")
+    c.add_argument("path"); c.add_argument("-o", "--out", default="integrity.json")
+    c.add_argument("--algo", default="sha256")
+    v = sub.add_parser("verify", help="verify a path against a manifest")
+    v.add_argument("manifest"); v.add_argument("path"); v.add_argument("--algo", default="sha256")
+    a = p.parse_args(argv)
+
+    if a.cmd == "create":
+        m = compute_manifest(a.path, a.algo)
+        with open(a.out, "w", encoding="utf-8") as f:
+            json.dump({"algo": a.algo, "files": m}, f, indent=2)
+        print(f"Wrote {a.out} ({len(m)} file(s), {a.algo}).")
+        return 0
+
+    with open(a.manifest, encoding="utf-8") as f:
+        data = json.load(f)
+    m = data.get("files", data)
+    rep = verify(m, a.path, data.get("algo", a.algo))
+    print(f"OK: {len(rep.ok)}  Changed: {len(rep.changed)}  Missing: {len(rep.missing)}  Added: {len(rep.added)}")
+    for label, items in (("CHANGED", rep.changed), ("MISSING", rep.missing), ("ADDED", rep.added)):
+        for it in items:
+            print(f"  {label}: {it}")
+    return 0 if rep.intact else 2
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

cloud_integrity_check/core.py

@@ -0,0 +1,61 @@
+from __future__ import annotations
+import hashlib
+import os
+from dataclasses import dataclass, field
+from typing import Dict, List
+
+CHUNK = 1024 * 1024  # 1 MiB
+
+
+def hash_file(path: str, algo: str = "sha256") -> str:
+    """Return the hex digest of a file, read in chunks (memory-safe for big files)."""
+    h = hashlib.new(algo)
+    with open(path, "rb") as f:
+        for block in iter(lambda: f.read(CHUNK), b""):
+            h.update(block)
+    return h.hexdigest()
+
+
+def compute_manifest(root: str, algo: str = "sha256") -> Dict[str, str]:
+    """Map every file under root to its hash, keyed by POSIX-style relative path.
+
+    A single file yields a one-entry manifest keyed by its basename.
+    """
+    if os.path.isfile(root):
+        return {os.path.basename(root): hash_file(root, algo)}
+    manifest: Dict[str, str] = {}
+    for dirpath, _dirs, files in os.walk(root):
+        for name in files:
+            full = os.path.join(dirpath, name)
+            rel = os.path.relpath(full, root).replace(os.sep, "/")
+            manifest[rel] = hash_file(full, algo)
+    return manifest
+
+
+@dataclass
+class Report:
+    ok: List[str] = field(default_factory=list)        # unchanged
+    changed: List[str] = field(default_factory=list)    # hash differs
+    missing: List[str] = field(default_factory=list)    # in manifest, not on disk
+    added: List[str] = field(default_factory=list)      # on disk, not in manifest
+
+    @property
+    def intact(self) -> bool:
+        return not (self.changed or self.missing)
+
+
+def verify(manifest: Dict[str, str], root: str, algo: str = "sha256") -> Report:
+    """Compare a stored manifest against the current state of root."""
+    current = compute_manifest(root, algo)
+    rep = Report()
+    for path, digest in manifest.items():
+        if path not in current:
+            rep.missing.append(path)
+        elif current[path] != digest:
+            rep.changed.append(path)
+        else:
+            rep.ok.append(path)
+    for path in current:
+        if path not in manifest:
+            rep.added.append(path)
+    return rep

cloud_integrity_check-0.1.0.dist-info/METADATA

@@ -0,0 +1,68 @@
+Metadata-Version: 2.4
+Name: cloud-integrity-check
+Version: 0.1.0
+Summary: Hash files into a manifest and verify their integrity after a cloud upload/download/sync — detect silent corruption, truncation or tampering. Standard-library only.
+Project-URL: Homepage, https://priviy.com
+Project-URL: Documentation, https://priviy.com
+Author: Eric Gerard
+License: MIT
+License-File: LICENSE
+Keywords: backup,checksum,cloud,integrity,manifest,sha256,tamper,verification
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: End Users/Desktop
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Security
+Classifier: Topic :: System :: Archiving :: Backup
+Classifier: Topic :: Utilities
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+
+# cloud-integrity-check
+
+Hash your files into a manifest, then **verify they are byte-for-byte intact**
+after a cloud upload, download or sync. Catches silent corruption, truncation
+or tampering that you would otherwise not notice. **Standard library only**
+(SHA-256 via `hashlib`) — no dependencies, no custom crypto.
+
+## Install
+
+```
+pip install cloud-integrity-check
+```
+
+## Use
+
+```
+# Before uploading: snapshot the integrity of a file or folder
+cloud-integrity-check create ~/Documents -o documents.json
+
+# After downloading from your cloud: verify nothing changed
+cloud-integrity-check verify documents.json ~/Documents
+```
+
+Output reports per-file `OK / CHANGED / MISSING / ADDED`, and exits non-zero if
+anything changed or went missing — handy in scripts and CI.
+
+## As a library
+
+```python
+from cloud_integrity_check import compute_manifest, verify
+
+m = compute_manifest("/data")
+report = verify(m, "/data")
+print(report.intact, report.changed, report.missing)
+```
+
+## Why
+
+End-to-end encrypted clouds protect *confidentiality*; this verifies
+*integrity* — that what you get back is exactly what you stored. A practical
+companion to a zero-knowledge backup. More on private, verifiable cloud storage:
+**[priviy.com](https://priviy.com)**.
+
+## License
+
+MIT

cloud_integrity_check-0.1.0.dist-info/RECORD

@@ -0,0 +1,8 @@
+cloud_integrity_check/__init__.py,sha256=P7GTEG9y8hwUUYy8Zfvc4ub-QnTRS1Iz82eNHM5nLRA,392
+cloud_integrity_check/cli.py,sha256=hT6X77PfXIiFaECx_KjXM-NHnLFEkrcpvaGYG1MUjHo,1566
+cloud_integrity_check/core.py,sha256=FthM1BY20QYsnZfoKEkKD-UBeUDiL9EJispCNXPwd_A,2073
+cloud_integrity_check-0.1.0.dist-info/METADATA,sha256=Fjx9i7OTHpRZSXb-K3XbCz6knDgrxm9lHzf4OBU2lgY,2193
+cloud_integrity_check-0.1.0.dist-info/WHEEL,sha256=mffPy8wBnZQn2VnJUU5jE99KsxaSfiyMHV9Yt0aLVxs,87
+cloud_integrity_check-0.1.0.dist-info/entry_points.txt,sha256=Id1SVBgQYFxf5y5f653l0l2otyE4Ju-MA0JqTVcU5cQ,73
+cloud_integrity_check-0.1.0.dist-info/licenses/LICENSE,sha256=8lsqmsA61fjwx9wiQPaJIcsgHocgr0Lih-on1Kfz0xI,486
+cloud_integrity_check-0.1.0.dist-info/RECORD,,

cloud_integrity_check-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.30.1
+Root-Is-Purelib: true
+Tag: py3-none-any

cloud_integrity_check-0.1.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+cloud-integrity-check = cloud_integrity_check.cli:main

cloud_integrity_check-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,11 @@
+MIT License
+
+Copyright (c) 2026 Eric Gerard
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including the rights to use, copy, modify,
+merge, publish, distribute, sublicense, and/or sell copies, subject to the
+above copyright notice and this permission notice being included.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND.