picard-store 0.2.0__tar.gz

picard_store-0.2.0/.editorconfig

@@ -0,0 +1,17 @@
+root = true
+
+[*]
+end_of_line = lf
+insert_final_newline = true
+charset = utf-8
+
+[*.py]
+indent_style = space
+indent_size = 4
+
+[*.{yml,yaml,toml}]
+indent_style = space
+indent_size = 2
+
+[*.md]
+trim_trailing_whitespace = false

picard_store-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,44 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+        python-version: ["3.11", "3.12", "3.13"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: pip install -e ".[dev]"
+
+      - name: Run tests
+        run: python -m pytest --tb=short -q -p no:timeout
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Check syntax
+        run: python -m py_compile picard/orchestrator.py picard/crypto.py picard/index.py picard/config.py picard/cli.py picard/web.py picard/mcp_server.py
+
+      - name: Verify imports
+        run: python -c "from picard.orchestrator import Orchestrator; from picard.cli import app; print('OK')"

picard_store-0.2.0/.github/workflows/publish.yml

@@ -0,0 +1,41 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  build:
+    name: Build distribution
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Build wheel and sdist
+        run: |
+          pip install build
+          python -m build
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - uses: pypa/gh-action-pypi-publish@release/v1

picard_store-0.2.0/.github/workflows/tests.yml

@@ -0,0 +1,32 @@
+name: Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+        python-version: ["3.11", "3.12"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev]"
+          pip install aiohttp openpyxl paho-mqtt pytest-timeout fastapi uvicorn httpx
+
+      - name: Run tests
+        run: python -m pytest --tb=short -q --timeout=120

picard_store-0.2.0/.gitignore

@@ -0,0 +1,71 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+*.egg
+*.egg-info/
+dist/
+build/
+*.whl
+sdist/
+wheels/
+
+# Virtual environments
+.venv/
+venv/
+ENV/
+env/
+
+# IDE / Editor
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# Claude Code
+.claude/
+
+# Testing / Coverage
+.coverage
+.coverage.*
+htmlcov/
+.pytest_cache/
+.tox/
+.nox/
+
+# Type checking
+.mypy_cache/
+.pytype/
+.pyre/
+
+# Ruff / Linting
+.ruff_cache/
+
+# OS artifacts
+Thumbs.db
+Desktop.ini
+.DS_Store
+._*
+nul
+
+# Design assets
+.design/
+
+# PICARD runtime
+.picard/
+
+# Environment / Secrets
+.env
+.env.*
+*.pem
+*.key
+*.keyfile
+
+# Jupyter
+.ipynb_checkpoints/
+
+# Distribution / Packaging
+*.tar.gz
+*.zip

picard_store-0.2.0/CHANGELOG.md

@@ -0,0 +1,90 @@
+# Changelog
+
+## 0.2.0 (2026-10-12)
+
+### Added
+- Version gap detection in `fsck`: reports missing version numbers in the per-path version history
+- Web dashboard screenshots in README with full UI overview and adapter registry views
+- `docs/identifying-picard-in-the-wild.md`: three-layer observability analysis across 18 platforms
+- Blockchain adapter rewrites: Nostr (BIP-340 Schnorr), Solana (compact-u16 + Memo v2), NEAR (Borsh + Ed25519), Ethereum (EIP-1559), Polygon (EIP-1559), Stellar (manage_data, 6144 bytes/chunk), Tezos (server-side forge + Ed25519 watermark), Cardano (pycardano + AlonzoMetadata label 8888)
+- Optional dependency support: `pycardano`, `eth_account`/`web3`, `stellar_sdk` skipped gracefully in tests when not installed
+- Intentional write-path friction in package registry adapters (PyPI, npm, crates.io, RubyGems) to prevent accidental use against public registries
+
+### Changed
+- README restructured: cleaner hero, collapsible origin story, screenshots before quickstart, CLI as tables, tier headings with colons, legal section as collapsible
+- Version bumped to 0.2.0
+
+### Fixed
+- `fsck.py`: `version_gaps` field was declared but never computed; now implemented
+- Solana `test_write_chunk`: mock updated to match rewritten adapter (two RPC calls, `_load_seed` patched)
+- Stellar, NEAR, Tezos, Cardano, Polygon test mocks updated to match rewritten adapter internals
+- Adapter count in README: 260 corrected to 259
+- Test count in README: 4159 corrected to 4236 (now 4156 passing)
+
+---
+
+## 0.1.0 (2025-05-15)
+
+Initial feature-complete release.
+
+### Core
+- AES-256-GCM encryption with Argon2id key derivation (per-block salt + nonce)
+- Ciphertext format v2 with version + algorithm header for cipher agility
+- Legacy format backward compatibility with automatic detection
+- HKDF-SHA256 sub-keys per adapter with version rotation
+- Sealed envelope format (indistinguishable from random data)
+- PCHK wire format for chunk encoding
+- Block cache (LRU, TTL, thread-safe, key zeroization)
+- Derived key cache (HMAC-SHA256 keyed, TTL, zeroization on eviction)
+- AESGCM cipher object caching alongside derived keys
+
+### Storage
+- 260 protocol adapters across 15+ categories
+- Persistent aiohttp sessions with proper cleanup for 91 HTTP adapters
+- RAID levels 0/1/5/10 across adapter pools with XOR parity reconstruction
+- Scatter profiles: quiet, resilient, speed, paranoid
+- Parallel block scatter (8-way semaphore), parallel verify, stream prefetch
+- Adapter config validation (name, RAID level, block size bounds)
+
+### Filesystem
+- Full filesystem semantics: directories, symlinks, versioning, partial reads
+- FUSE mount (Linux/macOS/Windows via WinFSP)
+- WebDAV server with Basic auth for native OS file manager access
+- Journaling with crash recovery
+- fsck integrity checking and repair
+- Streaming I/O for files larger than RAM
+
+### Interfaces
+- CLI with 35+ commands, progress bars, --json output
+- Web dashboard (dark/light theme, drag-and-drop, storage health)
+- MCP server for agent-accessible storage
+- HTTP transport with HMAC-SHA256 auth and replay protection
+- Peer discovery
+
+### Error Handling
+- CLI: Clean error messages for all 20+ commands (no raw tracebacks)
+- MCP: Structured error responses for all tool failures
+- Web: Proper HTTP status codes (409 for non-empty directory delete)
+
+### Security
+- Post-quantum symmetric-only data path (128-bit security vs Grover)
+- CSRF protection, XSS prevention, security headers
+- Path traversal prevention, SSRF blocking
+- SQL injection prevention (PostgreSQL adapter)
+- GraphQL injection prevention (Arweave adapter)
+- Input validation on all MCP tool inputs
+- WebDAV Basic auth
+- Config key whitelist
+
+### Networking
+- Tor integration: per-adapter SOCKS5 routing, hidden services, .onion peers
+- VPN device binding per adapter
+- Browser automation (Playwright headless/headed fallback)
+
+### Infrastructure
+- Encrypted index (AES-256-GCM at rest)
+- Recursive CTE tree queries
+- Bulk list queries (eliminate N+1)
+- Thread-safe index writes, journal atomicity
+- GitHub Actions CI (3 OSes x 3 Python versions)
+- 4159 tests

picard_store-0.2.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-2026 Christopher Neitzert
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

picard_store-0.2.0/License.md

@@ -0,0 +1,66 @@
+# THE YOURBADBUSINESSIDEA NONCOMMERCIAL LICENSE (v1.0-beta)
+
+Also known as the "Go ahead, break it in your lab, but just don’t use it in your YC pitch" license.
+
+Copyright © 2025 Christopher Neitzert
+
+## TL;DR
+
+This code is free for:
+- Research
+- Education
+- Personal projects
+- Hackerspaces
+
+It is **not** free for:
+- Startups
+- Enterprise anything
+- Crypto-anything
+- Sales decks
+- “AI-enabled” SaaS
+- That guy with the pitch deck and no product
+- Any commerical expression
+---
+
+## THE RULES
+
+### Allowed Uses
+
+You are allowed to:
+- Use, modify, and tinker with the code non-commercially
+- Share it with attribution
+- Publish blog posts and academic papers that explain how clever you are for understanding it
+- Teach it in classes, workshops, or over drinks
+- Fork it and remix it into something wilder, weirder, or slightly less broken
+
+### Forbidden Uses
+
+You may NOT:
+- Sell it
+- Include it in any product or service that makes money
+- Use it for consulting, freelance, or work-for-hire gigs
+- Use it in VC-backed anything
+- Monetize it, even indirectly (ads, analytics, etc.)
+- Launder it through Google Translate and call it your own
+
+If you’re making money, you're using the wrong license. Email me. Let’s talk.
+
+---
+
+## LEGAL BACKSTOP
+
+This license is inspired by and includes the full terms of the [Polyform Noncommercial License](https://polyformproject.org/licenses/noncommercial/1.0.0/).
+
+That means:
+- You need to read that document also
+- You get the freedom to explore and learn.
+- I retain the right to keep you from exploiting educational software for cash.
+
+---
+
+## WANT A COMMERCIAL LICENSE?
+
+Sure. Let’s make a deal. I’m not unreasonable. But you will pay artists, hackers, and whoever wrote that one cursed regex.  
+
+Reach out: ChristopherNeitzert@neitzert.com  
+License terms are available for companies, universities, repentant founders, and lunatics who think they can make money with this.