restory 0.1.1__tar.gz

restory-0.1.1/.gitignore

@@ -0,0 +1,26 @@
+# Python
+__pycache__/
+*.pyc
+*.egg-info/
+build/
+dist/
+.pytest_tmp/
+.pytest-tmp/
+
+# Node / UI
+node_modules/
+restory/ui/.next/
+restory/ui/out/
+
+# restory local data
+.restory/
+
+# Editor / OS
+.vscode/
+.idea/
+Thumbs.db
+.claude/
+
+dist/
+test-env/
+*.whl

restory-0.1.1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DarkAxiom93
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

restory-0.1.1/PKG-INFO

@@ -0,0 +1,61 @@
+Metadata-Version: 2.5
+Name: restory
+Version: 0.1.1
+Summary: Restory CLI
+License-File: LICENSE
+Requires-Python: >=3.11
+Requires-Dist: fastapi>=0.110
+Requires-Dist: typer>=0.12
+Requires-Dist: uvicorn>=0.29
+Description-Content-Type: text/markdown
+
+# 🐕‍🦺 restory
+
+**restory records everything your AI coding agent touches, blocks the dangerous stuff, and restores your tree with one command.** Local-only.
+
+![restory in action](docs/demo.gif)
+
+```bash
+pip install restory && restory init
+```
+
+---
+
+## Why this exists
+
+AI coding agents (Claude Code, Cursor, Copilot) run as *you* — with your files, your keys, your shell. A single hallucination or a poisoned file in a repo can `rm -rf` your home dir or POST your `.env` to a pastebin. Allowlists don't catch it ([CVE-2026-22708](https://www.docker.com/blog/coding-agent-horror-stories-the-command-you-already-approved/)), and a container is too heavy for the inner loop.
+
+**restory** sits between the agent and your machine: it inspects the *effect* of every command before it runs, records the whole session, and restores it with one keystroke.
+
+## What it does
+
+- 🛑 **Blocks dangerous effects** — secret reads, network exfiltration, mass deletes, git-history nukes, writes outside the repo — *before* they execute.
+- 📼 **Records everything** — a live, local timeline of every file your agent touched and every command it ran.
+- ↩️ **One-command restore** — `restory undo --session` snaps your whole working tree back to where the session started.
+- 🔒 **Local-only** — no accounts, no cloud, nothing leaves your machine.
+
+## Install
+
+```bash
+pip install restory
+restory init        # installs hooks into .claude/settings.json
+restory open        # opens the live timeline at http://127.0.0.1:8765
+```
+
+Works on Windows, macOS, and Linux. Hook-based — no kernel driver, no container.
+
+## What restory does NOT do
+
+Being honest, because security tools that overpromise get torn apart:
+
+- It's **not a sandbox.** A determined attacker with code execution can bypass any command inspection — "argument inspection is theater." restory is defense-in-depth + visibility + instant restore, not a kernel jail.
+- It **won't catch every obfuscation.** It nails the common, high-value danger classes (exfil, mass-delete, secret reads, pipe-to-shell). Novel encodings can slip the classifier — that's what the restore net is for.
+- It **doesn't replace your judgment.** It surfaces what the agent tried and lets you reverse it. You're still the human in the loop.
+
+## How it works
+
+`restory init` installs `PreToolUse` / `PostToolUse` / `SessionStart` hooks. Every tool call the agent makes is classified for blast radius; dangerous effects are blocked with a reason, everything is logged to a local SQLite store, and the working tree is snapshotted to a shadow git repo so `undo` is exact.
+
+## License
+
+MIT

restory-0.1.1/README.md

@@ -0,0 +1,50 @@
+# 🐕‍🦺 restory
+
+**restory records everything your AI coding agent touches, blocks the dangerous stuff, and restores your tree with one command.** Local-only.
+
+![restory in action](docs/demo.gif)
+
+```bash
+pip install restory && restory init
+```
+
+---
+
+## Why this exists
+
+AI coding agents (Claude Code, Cursor, Copilot) run as *you* — with your files, your keys, your shell. A single hallucination or a poisoned file in a repo can `rm -rf` your home dir or POST your `.env` to a pastebin. Allowlists don't catch it ([CVE-2026-22708](https://www.docker.com/blog/coding-agent-horror-stories-the-command-you-already-approved/)), and a container is too heavy for the inner loop.
+
+**restory** sits between the agent and your machine: it inspects the *effect* of every command before it runs, records the whole session, and restores it with one keystroke.
+
+## What it does
+
+- 🛑 **Blocks dangerous effects** — secret reads, network exfiltration, mass deletes, git-history nukes, writes outside the repo — *before* they execute.
+- 📼 **Records everything** — a live, local timeline of every file your agent touched and every command it ran.
+- ↩️ **One-command restore** — `restory undo --session` snaps your whole working tree back to where the session started.
+- 🔒 **Local-only** — no accounts, no cloud, nothing leaves your machine.
+
+## Install
+
+```bash
+pip install restory
+restory init        # installs hooks into .claude/settings.json
+restory open        # opens the live timeline at http://127.0.0.1:8765
+```
+
+Works on Windows, macOS, and Linux. Hook-based — no kernel driver, no container.
+
+## What restory does NOT do
+
+Being honest, because security tools that overpromise get torn apart:
+
+- It's **not a sandbox.** A determined attacker with code execution can bypass any command inspection — "argument inspection is theater." restory is defense-in-depth + visibility + instant restore, not a kernel jail.
+- It **won't catch every obfuscation.** It nails the common, high-value danger classes (exfil, mass-delete, secret reads, pipe-to-shell). Novel encodings can slip the classifier — that's what the restore net is for.
+- It **doesn't replace your judgment.** It surfaces what the agent tried and lets you reverse it. You're still the human in the loop.
+
+## How it works
+
+`restory init` installs `PreToolUse` / `PostToolUse` / `SessionStart` hooks. Every tool call the agent makes is classified for blast radius; dangerous effects are blocked with a reason, everything is logged to a local SQLite store, and the working tree is snapshotted to a shadow git repo so `undo` is exact.
+
+## License
+
+MIT

restory-0.1.1/pyproject.toml

@@ -0,0 +1,21 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "restory"
+version = "0.1.1"
+description = "Restory CLI"
+readme = "README.md"
+requires-python = ">=3.11"
+dependencies = [
+    "typer>=0.12",
+    "fastapi>=0.110",
+    "uvicorn>=0.29",
+]
+
+[project.scripts]
+restory = "restory.cli:app"
+
+[tool.hatch.build.targets.wheel]
+packages = ["restory"]

restory-0.1.1/restory/__init__.py

@@ -0,0 +1,3 @@
+"""restory package."""
+
+__version__ = "0.1.0"

restory-0.1.1/restory/__main__.py

@@ -0,0 +1,5 @@
+"""Enable ``python -m restory`` to run the CLI."""
+
+from .cli import app
+
+app()