sgit-ai
Git-like encrypted vault management for the command line.
sgit-ai syncs encrypted vaults between your local filesystem and SGit-AI's Transfer API. Every file is encrypted client-side with AES-256-GCM before it leaves your machine — the server never sees plaintext.
Install
pip install sgit-ai
This gives you two CLI commands: sgit-ai and the shorthand sgit.
Quick Start
# Create a new encrypted vault
sgit init my-vault
# Add files to the working directory
cp important-doc.pdf my-vault/
# Commit and push
sgit commit "initial upload" -d my-vault
sgit push my-vault
# Clone an existing vault on another machine
sgit clone <vault-key>
Features
Encrypted Vault Sync
Clone, commit, push, and pull encrypted vaults — just like git, but every object is AES-256-GCM encrypted before upload.
sgit clone <vault-key> # Download and decrypt a vault
sgit status # Show uncommitted changes
sgit commit "my changes" # Snapshot local changes
sgit pull # Fetch and merge remote changes
sgit push # Upload to remote
sgit branches # List all branches
Client-Side Encryption
All crypto runs locally. The server stores only ciphertext.
- AES-256-GCM for file encryption with per-file HKDF-derived keys
- PBKDF2-SHA256 (600k iterations) for vault key derivation
- Content-addressable storage — encrypted objects stored by hash
- Web Crypto API compatible — byte-for-byte interop with browser implementations
PKI and Digital Signatures
Built-in public key infrastructure for signing and encrypting files between users.
sgit pki keygen # Generate RSA-4096 + ECDSA P-256 key pair
sgit pki sign doc.pdf --fingerprint <fp> # Create detached signature
sgit pki verify doc.pdf sig.json # Verify signature
sgit pki encrypt doc.pdf --recipient <fp> # Hybrid RSA-OAEP + AES-256-GCM encryption
sgit pki decrypt doc.pdf.enc --fingerprint <fp>
Vault Inspection
Debug and inspect the internals of any vault.
sgit inspect # Vault state overview
sgit log --oneline --graph # Commit history
sgit inspect-tree # Current tree entries
sgit inspect-stats # Object store statistics
sgit cat-object <id> # Decrypt and display an object
sgit fsck --repair # Verify integrity and repair
Credential and Remote Management
# Store vault keys under friendly aliases
sgit vault add my-project --vault-key <key>
sgit vault list
# Configure multiple remotes
sgit remote add origin <url> <vault-id>
sgit remote list
Architecture
sgit_ai/
├── cli/ # CLI commands (sgit-ai / sgit)
├── crypto/ # AES-256-GCM, PBKDF2, HKDF, RSA-OAEP, ECDSA
├── sync/ # Clone, commit, push, pull, merge, branching
├── api/ # SGit-AI Transfer API client
├── pki/ # Key store and contact keyring
├── objects/ # Content-addressable encrypted object store
├── schemas/ # Type_Safe data models
├── safe_types/ # Domain-specific validated types (zero raw primitives)
└── secrets/ # Local encrypted secrets store
Built on osbot-utils Type_Safe framework — all data fields use validated domain types, never raw primitives.
Development
# Install in dev mode
pip install -e ".[dev]"
# Run tests
pytest tests/unit/
# Run with coverage
pytest --cov=sgit_ai --cov-report=term-missing
License
Apache-2.0
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file sgit_ai-0.14.28.tar.gz.
File metadata
- Download URL: sgit_ai-0.14.28.tar.gz
- Upload date:
- Size: 244.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/7.0.0 CPython/3.12.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
0bb6aa2884f602814bed267ac93c385d6fea7c41d64b099bad1106c63ed3a245
|
|
| MD5 |
ad5a92c6254f0c3e1c9ed8518c230a06
|
|
| BLAKE2b-256 |
536c76c9b8e2a98d4336671ef060efb334450ec09c43dfd23d8166506e29eb11
|
File details
Details for the file sgit_ai-0.14.28-py3-none-any.whl.
File metadata
- Download URL: sgit_ai-0.14.28-py3-none-any.whl
- Upload date:
- Size: 389.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/7.0.0 CPython/3.12.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
c525211c77afb0094ef6f29b5bd4ade72655330c1e179ad9417b35a6c05e8bca
|
|
| MD5 |
1e6ed756b8d2c4809ab66b309a56fb0e
|
|
| BLAKE2b-256 |
8c0f07327a545ed1f3ddcdc21bdfb2b73ebc070081395261599431ff3b03f8f5
|
