shim 0.2.0__py3-none-any.whl

shim-0.2.0.dist-info/METADATA

@@ -0,0 +1,382 @@
+Metadata-Version: 2.4
+Name: shim
+Version: 0.2.0
+Summary: Local sensitive-data detection, prompt reporting, opt-in prompt blocking, verified Claude tool-event masking, and API-traffic watching
+Author: shim Engineering
+License-Expression: Apache-2.0
+License-File: LICENSE
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security
+Requires-Dist: phonenumbers==9.0.37
+Requires-Dist: rich==15.0.0
+Requires-Dist: tomli==2.3.0 ; python_full_version < '3.11'
+Requires-Dist: tomli-w==1.2.0
+Requires-Dist: typer==0.23.2
+Requires-Python: >=3.9, <3.14
+Project-URL: Homepage, https://github.com/GetSHIM/shim-cli
+Project-URL: Repository, https://github.com/GetSHIM/shim-cli
+Project-URL: Issues, https://github.com/GetSHIM/shim-cli/issues
+Project-URL: Documentation, https://github.com/GetSHIM/shim-cli#readme
+Description-Content-Type: text/markdown
+
+<p align="center">
+  <a href="https://getshim.tech">
+    <img src="https://raw.githubusercontent.com/GetSHIM/shim-cli/main/docs/assets/shim-logo.svg" alt="shim" width="280">
+  </a>
+</p>
+
+<h1 align="center">shim Guard</h1>
+
+<p align="center">
+  <strong>Local traffic visibility and privacy controls for coding agents.</strong><br>
+  <a href="https://getshim.tech">getshim.tech</a>
+</p>
+
+<p align="center">
+  <a href="https://pypi.org/project/shim/"><img src="https://img.shields.io/pypi/v/shim.svg?logo=pypi&amp;label=PyPI" alt="PyPI version"></a>
+  <a href="https://github.com/GetSHIM/shim-cli/actions/workflows/ci.yml"><img src="https://github.com/GetSHIM/shim-cli/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
+  <a href="https://pypi.org/project/shim/"><img src="https://img.shields.io/pypi/pyversions/shim.svg?logo=python&amp;logoColor=white" alt="Python versions"></a>
+  <a href="https://github.com/GetSHIM/shim-cli/blob/main/LICENSE"><img src="https://img.shields.io/github/license/GetSHIM/shim-cli.svg" alt="License"></a>
+  <a href="https://github.com/GetSHIM/shim-cli/stargazers"><img src="https://img.shields.io/github/stars/GetSHIM/shim-cli.svg?style=flat&amp;logo=github" alt="GitHub stars"></a>
+</p>
+
+shim Guard shows you what your coding agent actually sends to the model — how
+many tokens went where, what the turn cost, and which secrets and personal data
+were in it — and masks what it can before the model sees it. The hook and
+detector add no network destination, account, API key, or telemetry. The opt-in
+`shim watch` proxy forwards only to the provider the client already uses.
+
+Two commands, two different questions:
+
+| Command | Answers |
+| --- | --- |
+| `shim watch -- claude` | What did this session actually send, and what did it cost? |
+| `shim install claude` | Mask secrets and personal data in eligible tool results, every session, automatically. |
+
+> [!WARNING]
+> shim Guard is alpha software and a best-effort guard, not a data-loss
+> prevention boundary. Read the [privacy limitations](https://github.com/GetSHIM/shim-cli/blob/main/docs/privacy.md) before
+> using it with sensitive data.
+
+## Measure a session
+
+Nobody can tell you where their agent's context window actually goes. `shim
+watch` puts a local proxy in front of the client for one command, forwards
+every byte unchanged, and reports what went past:
+
+```console
+shim watch -- claude
+shim watch -- claude -p "explain this repo"
+```
+
+```text
+shim watch — 8s, 1 requests
+  input     109,678 tokens  (exact)
+    cache read   91,562   83%
+    cache write  18,114
+  output    157 tokens  (exact)
+  where the input went  (approximate — split by byte share)
+    tools     ~      90,001   82%
+    system    ~      10,361    9%
+    messages  ~       9,185    8%
+  @ files   1 inlined, 354 bytes (invisible to hooks)
+  found     2 EMAIL in traffic
+  spend     ~$0.10  (approximate, 2026-08-30 prices)
+```
+
+On the session above, **the tools array was 82% of the input tokens** — before
+a single line of the user's own code. That is one session on one repository,
+not a universal figure, which is the point: it is your number and you have no
+other way to get it.
+
+Token counts come from the provider's own `usage` block and are exact. How
+they divide between sections has no ground truth on the wire, so it is
+inferred from byte share, marked `~`, and always sums to the exact total.
+Exact and inferred figures never share a column.
+
+It also covers what hooks structurally cannot see: files pulled in with `@` are
+inlined by the client while it builds the prompt, so no hook fires for them,
+and the system prompt, the tools array and the token counts are never handed to
+a hook at all.
+
+**It forwards and measures. It does not modify.** Not one byte of a request is
+changed, no request body is ever written to disk, and nothing is transmitted
+anywhere except to the provider the client was already talking to. The proxy
+binds to loopback, exists for the length of the command, and nothing is left
+behind — no shell profile is edited and no setting is changed.
+
+Overhead measured against a live session: about 6 ms of proxy plumbing plus a
+23 ms TLS handshake per request. Scanning the body costs more than that, but it
+runs after the request has been sent, inside the window where the provider is
+already thinking, so it does not delay anything.
+
+Claude Code is verified. Codex runs with a warning — a ChatGPT sign-in behind a
+third-party proxy is documented but untested. Copilot is out of scope: it
+accepts a custom endpoint only through bring-your-own-key, which removes GitHub
+authentication altogether, so there is nothing to watch.
+
+## Supported clients
+
+| Client | Your typed prompt | Tool input and results |
+| --- | --- | --- |
+| [Claude Code](https://github.com/anthropics/claude-code) | Reports what it found and lets it through; blocks under `enforce` | Eligible structured arguments and inbound results are masked; commands and local writes are report-or-deny only |
+| [Codex CLI](https://github.com/openai/codex) | Reports what it found and lets it through; blocks under `enforce` | Not installed — no verified native tool-event adapter |
+| [GitHub Copilot CLI](https://github.com/github/copilot-cli) | Replaces the model-facing prompt with the redacted text | Not installed — no verified native tool-event adapter |
+
+Tool coverage is verified against a running client, not derived from
+documentation. `shim doctor <client>` prints exactly which events are installed
+and what shim can and cannot change at each one.
+
+shim Guard detects email addresses, phone numbers, credit cards, IBANs, IP and
+MAC addresses, US SSNs, Turkish national and tax IDs, secrets, and database
+URIs. Checksums are verified where they exist, so a mistyped IBAN or national
+ID is not reported.
+
+It deliberately stays quiet on values that name nobody: loopback and
+unspecified addresses (`127.0.0.1`, `0.0.0.0`, `::1`) and connection strings to
+them that carry no credentials (`redis://localhost:6379/0`). Private ranges,
+real hosts, and anything with a `user:password@` are still detected. Once
+`0.0.0.0` and `127.0.0.1` both read as `<IP_ADDRESS_1>`, the model can no
+longer tell "listen on every interface" from "loopback only" — detection that
+fires where there is nothing to find is how people learn to ignore it.
+
+Detection runs locally without an account, API key, network request, daemon,
+telemetry, or prompt history.
+
+## Install
+
+shim Guard supports CPython 3.9 through 3.13 on macOS and Linux, including
+the system `python3` on macOS. Choose one package manager:
+
+```console
+uv tool install --compile-bytecode shim
+# or
+pipx install shim
+```
+
+If you installed the previous `shim-guard` distribution, uninstall it before
+installing `shim`; both distributions provide the same commands.
+
+Preview and install the hook for your client:
+
+```console
+shim install codex --dry-run
+shim install codex
+shim doctor codex
+```
+
+Replace `codex` with `claude` or `copilot` as needed. Run `shim help` for all
+commands.
+
+### Marketplace plugins
+
+Codex and Claude Code users can install the repository's marketplace plugin:
+
+```console
+codex plugin marketplace add GetSHIM/shim-cli
+codex plugin add shim-guard@shim-guard
+```
+
+```text
+/plugin marketplace add GetSHIM/shim-cli
+/plugin install shim-guard@shim-guard
+```
+
+The marketplace plugin and `shim install` are alternative hook-registration
+methods. Do not use both for the same client. Release-tag Claude plugins bundle
+the hook archive and need only Python 3.9 or newer; the Codex plugin currently
+uses `shim-guard-hook` from the installed CLI package. A development checkout
+may not contain the release archive.
+
+## Use
+
+Once the hook is installed, use your client normally. To inspect text directly,
+pipe it through `scan` or `redact`:
+
+```console
+printf '%s' 'Contact me at alice@example.com' | shim scan
+printf '%s' 'Contact me at alice@example.com' | shim redact
+```
+
+Both commands read standard input. Do not pass real prompts as command-line
+arguments, where they may be recorded in shell history or process listings.
+
+> [!IMPORTANT]
+> **With the default configuration, shim Guard does not prevent a secret you
+> type into a prompt from reaching the model. It tells you afterwards.**
+> Codex and Claude Code offer no field for rewriting a submitted prompt, so the
+> only way to stop one is to refuse the sentence you just typed — which is
+> disruptive and rare enough that it is not the default. Set
+> `user-prompt = "enforce"` in `[mode]` to block instead. Copilot's
+> `userPromptTransformed` event does support a model-facing replacement. Claude
+> tool results are masked at the verified installed events.
+
+## See what it did
+
+shim says nothing when it works, so it keeps a short record of its own
+decisions. Claude's verified `Stop` hook shows the total at the end of a turn
+where something changed:
+
+```text
+shim — this session
+  masked    60 EMAIL  (Read customers.csv)
+            60 IBAN  (Read customers.csv)
+            60 PHONE  (Read customers.csv)
+            60 TR_NATIONAL_ID  (Read customers.csv)
+  flagged   1 INSTRUCTION_OVERRIDE  (Read runbook.md)
+            1 HIDDEN_TEXT  (Read runbook.md)
+  overhead  62 ms median, 119 ms p95
+```
+
+That is a real session against Claude Code, not an illustration: a 5.5 KB
+customer file, every value in it replaced before the model saw it, and a
+document in the repository caught trying to give the agent instructions. Run
+under `shim watch` at the same time, the proxy — which reads the actual wire,
+independently of the hook — reported two email addresses in the whole session,
+both from the client's own system messages. None of the sixty reached the
+model.
+
+`shim report` prints the same summary on demand, and `--json` makes it
+scriptable. It reads the newest temporary spool first; if none remains, it
+falls back to the retained ledger, if you turned that on.
+
+## Shrink tool results
+
+At Claude's verified `PostToolUse` event, shim compacts eligible tool results
+before the model reads them, so the context window fills more slowly. Nothing
+is ever truncated or summarised, and a result that cannot be shrunk safely is
+left unchanged by the diet. Two transforms ship; only lossless JSON compaction
+is on by default:
+
+| Transform | What it does |
+| --- | --- |
+| `json` | Removes the whitespace *between* JSON tokens. Every number literal, duplicate key and string survives byte-for-byte, because this is a lexer rather than a parse and re-serialise. Lossless. |
+| `whitespace` | Strips trailing spaces and tabs from the end of each line. Line count is never changed. Not byte-for-byte: a Markdown hard line break is two trailing spaces, and it does not survive this. |
+
+It applies to tool *results* only — never to a tool's arguments, never to
+anything written to your disk, and never under `mode = "observe"`.
+
+**The diet also never touches a result that shows you a file.** `Edit` matches its
+`old_string` against what is on disk, not against what the model was shown, so
+compacting a pretty-printed file on the way in makes the next edit of that file
+miss. Reads, notebooks and edit results are unchanged by the diet; sensitive
+values can still be masked according to policy. Fetched pages, command output
+and tool results are where the saving comes from.
+
+Turn it off with `shim config --no-diet`, or name individual transforms in the
+config file. Trailing-whitespace removal is opt in because it can remove a
+Markdown hard line break:
+
+```toml
+diet = ["json", "whitespace"]   # or false to disable entirely
+```
+
+While reading results shim also flags text that is trying to give the model
+orders — "ignore all previous instructions", impersonated system messages,
+invisible characters. These are **reported and never acted on**: rewriting a
+tool result because it reads as imperative would corrupt legitimate content.
+They appear in the session summary as `flagged`, naming the file they came
+from — which is the only part you can act on:
+
+```
+  flagged   1 INSTRUCTION_OVERRIDE  (Read release-notes.md)
+            1 HIDDEN_TEXT  (Read release-notes.md)
+```
+
+The record holds entity names, counts and the file or URL involved — never the
+value that was found, and never a shell command. It lives in a private OS
+temporary file. Claude's installed `SessionEnd` hook deletes that session's
+file; clients without a verified lifecycle hook leave it to operating-system
+temporary cleanup. `shim config --ledger` opts in to monthly retained copies.
+A month becomes eligible for pruning 30 days after its end and is removed on a
+later ledger write; `shim ledger purge` deletes all ledger files immediately.
+Nothing is ever transmitted. See
+[Privacy](https://github.com/GetSHIM/shim-cli/blob/main/docs/privacy.md#what-is-recorded).
+
+## Configure detection
+
+All supported entity types are enabled by default. View or change the local
+policy with:
+
+```console
+shim config
+shim config --only EMAIL --only SECRET
+shim config --disable IP_ADDRESS --disable MAC_ADDRESS
+shim config --reset
+shim config --ledger        # keep the session record past the session
+shim config --no-diet       # stop shrinking tool results
+```
+
+`shim config` with no arguments prints the entity table plus the current
+ledger and diet state, so what shim keeps and what it rewrites is answerable
+without opening the file.
+
+Detection can also be narrowed for one tool at a time, which the CLI has no
+flag for — scan commands for secrets without scanning every file read for
+phone numbers:
+
+```toml
+[entities]
+Bash = ["SECRET", "DB_URI"]
+Read = ["SECRET"]
+```
+
+Every key in the file is optional. A file holding only `[mode]` or only
+`[entities]` is valid and everything else keeps its shipped default.
+
+Changes are previewed before they are saved. The CLI, installed hook, `scan`,
+and `redact` all use the same policy.
+
+## Privacy limitations
+
+- The host client receives the raw prompt before its hook runs, and other hooks
+  may receive it concurrently.
+- Detection is best-effort and may miss sensitive values.
+- A disabled, untrusted, crashed, or timed-out hook may fail open according to
+  client behavior.
+- Clients, providers, and other tools may retain data independently of shim.
+- Redacted temporary files may still contain missed sensitive content. Review
+  them before resubmission and delete them when finished.
+
+See [Privacy](https://github.com/GetSHIM/shim-cli/blob/main/docs/privacy.md) for the full trust boundary and
+[Compatibility](https://github.com/GetSHIM/shim-cli/blob/main/docs/compatibility.md) for tested versions and evidence.
+
+## Uninstall
+
+Remove shim Guard's hook before uninstalling the package:
+
+```console
+shim revert codex
+```
+
+Replace `codex` with the client you installed. `shim watch` needs no uninstall:
+it edits nothing, so there is nothing to undo.
+
+## Project documentation
+
+- [Architecture](https://github.com/GetSHIM/shim-cli/blob/main/docs/architecture.md)
+- [Compatibility](https://github.com/GetSHIM/shim-cli/blob/main/docs/compatibility.md)
+- [Privacy](https://github.com/GetSHIM/shim-cli/blob/main/docs/privacy.md)
+- [0.2.0 release notes](https://github.com/GetSHIM/shim-cli/blob/main/docs/releases/0.2.0.md)
+- [Contributing](https://github.com/GetSHIM/shim-cli/blob/main/CONTRIBUTING.md)
+- [Security policy](https://github.com/GetSHIM/shim-cli/blob/main/SECURITY.md)
+
+## Development
+
+Run the complete local check from the repository root:
+
+```console
+python scripts/check.py
+```
+
+## License
+
+Apache-2.0. See [LICENSE](https://github.com/GetSHIM/shim-cli/blob/main/LICENSE).

shim-0.2.0.dist-info/RECORD

@@ -0,0 +1,59 @@
+shim_guard/__init__.py,sha256=Zn1KFblwuFHiDRdRAiRnDBRkbPttWh44jKa5zG2ov0E,22
+shim_guard/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+shim_guard/cli/app.py,sha256=jeM-VhTWMo7dOyzLf1X5U23igHGn9DCYKodcJ9Sa22s,7503
+shim_guard/cli/configuration.py,sha256=pB03xu5fATBSSbS_zkLj4vMkhknG-d8sl_wAxarG3Wk,6103
+shim_guard/cli/diagnostics.py,sha256=XkE34QPDZKSti8B2qGASLzILF7K1EKYAiBgdEfY9nxc,14095
+shim_guard/cli/integrations.py,sha256=zkJibCkY4O8AAWL0-K3v716a4oFvqvgMm85_VskEy7s,8947
+shim_guard/cli/output.py,sha256=e41nct7sV3dcTDbAlXRXY_HHGMWXJPP8w85WI60oZw8,1397
+shim_guard/cli/privacy.py,sha256=L1kuQ1uB2F4WV8QLv7Q5Z4yk4esqseC2foy-tXKcWl0,2800
+shim_guard/cli/report.py,sha256=HCpMGA9KlVlarzyZSdFZL5ZSJLz9nn07l9CcNkCTJMA,3062
+shim_guard/cli/resolution.py,sha256=BtPiRZ9g5TeCxH_4Xt2uTKTS6w_KFeiEvdWaKe1nAVE,3037
+shim_guard/cli/watch.py,sha256=Yc7ds6u9yBDRLON9u90ZH5T3nwU20idOGOPLDJ9J_FI,2560
+shim_guard/clients/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+shim_guard/clients/claude/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+shim_guard/clients/claude/hook.py,sha256=jVW1IMf5t12WQy_oEKCXTc_lOKZtxskUV9l8OplroQA,587
+shim_guard/clients/claude/settings.py,sha256=Dvn0E18VaET0qVaVVJ9uUi14tXpjhgnqoPHhosViDTs,2367
+shim_guard/clients/claude/tool_events.py,sha256=g6oL2DJ2TRnGcvSHPfVK6KYtDtzVYNNqQktV_HUApFE,3859
+shim_guard/clients/codex/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+shim_guard/clients/codex/hook.py,sha256=FErdXZA7I_4KO_QC8OTColQsAIXYhGqw_CWd9r0vZWs,616
+shim_guard/clients/codex/settings.py,sha256=mDxDofBjV6jihgbyyzcHFMSZRNEeWg2WhnGrRPSFNEk,2851
+shim_guard/clients/copilot/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+shim_guard/clients/copilot/hook.py,sha256=MLvBtO85CdlDsNFHDBTtL3aE9dimMKvDIWHFmFO-D30,1578
+shim_guard/clients/copilot/settings.py,sha256=kELPERWT_V9WKPcP60pPxDnghXbks1PMJdN6B1RAXlU,2423
+shim_guard/clients/hook_settings.py,sha256=qkeXUidOVOK2qwdkCAi0FY3hSXagDU9puZQoapcZ0lA,4741
+shim_guard/clients/user_prompt_hook.py,sha256=Q9LKtXO3aZpptOfb-uhQFL2pogzlARq59wVwQFdzRf8,3988
+shim_guard/config.py,sha256=FoTf5cpZEg78jeZyNt_XKfLQwbiXYInLft_vZ8Vbajg,5721
+shim_guard/events/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+shim_guard/events/diet.py,sha256=6oJV2aPhLgD9kV00o_Qo3OXIsvs7SdrWTEAdRISs79M,2690
+shim_guard/events/injection.py,sha256=m2wydXGVI893xTmXL7OcGN_8InVfFrxprNwsLwTr2Nc,2242
+shim_guard/events/payload.py,sha256=92l3gihtg_Pm5jOhMwFQDzTj1F3tfMQXAkL2k8NR0Mg,4258
+shim_guard/events/pipeline.py,sha256=ieiPgurneE4LmT6m-80umzSWOx3aFI3lWZDtEeZKWPI,5261
+shim_guard/guard/__init__.py,sha256=sgnWf9-ri-7OWiD2kOlElpYSl7VaTxMRrTdDft0zTqQ,462
+shim_guard/guard/analyze.py,sha256=oZliXZ0tLylZHNDe-h8e1fwIPufRldgXQyyJh1nKNMQ,5912
+shim_guard/guard/entities.py,sha256=y3XRb4XDCVLew0kdY9A5nCdwhkobUWImk95lOuNrSCM,832
+shim_guard/guard/evaluate.py,sha256=QRn1sAl2TCYHzAmSHI-g9BACbRGMfoMVKj0jaDO_WWo,804
+shim_guard/guard/iban_patterns.py,sha256=VMSlF6lOIKDH7zoHQQohJW9mloEUdtfG6wrPE1Q64L0,4193
+shim_guard/guard/models.py,sha256=BpV4wRj5RwC-WopBsMGzUvPpBsrTpivwyVTAswqAhqU,2054
+shim_guard/guard/normalize.py,sha256=Lvj7P9P4MnBcrZc6WfS0hrOi_sjCcsIfBCvjzXobX0I,5824
+shim_guard/guard/recognizers.py,sha256=mTFFmAOgDB_1R39CcRBOzWklZGPXOg4KRt60tpxz_5w,15044
+shim_guard/guard/suffixes.py,sha256=yPvnTFlvXLzjdAutkG37kOFCrBheRLt4ERPt_A5KIOo,83328
+shim_guard/hook.py,sha256=k9yhvtKFzZcNphlSwVhoK8_7T9aaS_ziIadW5LO87AY,14866
+shim_guard/policy.py,sha256=1SQd8OOVSyBSuOguOFcwlu5ZDEbV1_6Yis1mGNnv_AE,2626
+shim_guard/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
+shim_guard/session/__init__.py,sha256=QTdXVEq4vm9ISp5wrJry0PidVvZ9OCQYavRcYQr95p0,112
+shim_guard/session/ledger.py,sha256=kPcTHaeZTVWn9EOLwFt_VdRdsZ25ix1s3y0Z4J-YJZ8,4720
+shim_guard/session/record.py,sha256=m0w3FBtyqnqcooYEyTo5Y1F-08zAQkH0GSvHxKrrsOQ,2167
+shim_guard/session/spool.py,sha256=3gxwyretFm-ZWgdunhMrQwIE4GzSsz4Dv31tfWW3_Zw,6422
+shim_guard/session/summary.py,sha256=FXJbCX_eZ7GoAkuZvcL2xRLKj3dEuK6pXrfWeicnaBg,6519
+shim_guard/settings_files/__init__.py,sha256=8DK5Ard46IO8QTf_wMvra6rOJWA4QgzLg3G29OW2o6g,312
+shim_guard/settings_files/files.py,sha256=XMQLkF6_pxFqDpfJ9U_aVOPLIQHglMACn2JvqS7WOXg,12045
+shim_guard/settings_files/plan.py,sha256=YignltdRrjVavrBtEwQZEVPopWiAtFJf1cmFOJl2G34,2180
+shim_guard/watch/__init__.py,sha256=RzhHUMMcpvCr0FGhnkY2uTDq92jg63Z84jBQBAp0kSM,77
+shim_guard/watch/measure.py,sha256=Ke8HsjBGkwymwwLmpof9y5QawgI-FfsfyPe_DUq6W-M,6728
+shim_guard/watch/proxy.py,sha256=pXrf3YsGUT3evbcTkerJpB77Lrbmju6YLvvBnnmYHNY,7357
+shim_guard/watch/report.py,sha256=hvhQINtkKFf7dSUNAbUpLdyhJw8hmlfVZKvxogtVs_Q,7022
+shim-0.2.0.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+shim-0.2.0.dist-info/WHEEL,sha256=4OL6Foqnnp3xRY5wMkjgc25_i5YJC6dKsC6LPcjqEoU,80
+shim-0.2.0.dist-info/entry_points.txt,sha256=5hz3v6bURUgKclGzILSC55m5sHTRk93AuXQ2R7YY4ZU,89
+shim-0.2.0.dist-info/METADATA,sha256=S5BSrs1JPZxQkCqxP-CCOpvRlsq22IfShL0SvGtbRPc,16742
+shim-0.2.0.dist-info/RECORD,,

shim-0.2.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: uv 0.12.5
+Root-Is-Purelib: true
+Tag: py3-none-any

shim-0.2.0.dist-info/entry_points.txt

@@ -0,0 +1,4 @@
+[console_scripts]
+shim = shim_guard.cli.app:main
+shim-guard-hook = shim_guard.hook:main
+

shim-0.2.0.dist-info/licenses/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

shim_guard/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.2.0"