ckdn 1.0.0__tar.gz

ckdn-1.0.0/.editorconfig

@@ -0,0 +1,21 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+# SPDX-License-Identifier: MIT
+
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = space
+indent_size = 4
+
+[*.{yml,yaml,toml,md,svg}]
+indent_size = 2
+
+[*.py]
+indent_size = 4
+
+[Makefile]
+indent_style = tab

ckdn-1.0.0/.github/CODEOWNERS

@@ -0,0 +1,5 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+# SPDX-License-Identifier: MIT
+
+# Default owner for the whole repository.
+* @orenlab

ckdn-1.0.0/.github/ISSUE_TEMPLATE/bug.yml

@@ -0,0 +1,62 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+# SPDX-License-Identifier: MIT
+name: Bug report
+description: Something is broken or a digest/status looks wrong
+title: "[bug] "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for filing a bug. For security issues use
+        [Security Advisories](https://github.com/orenlab/ckdn/security/advisories/new)
+        instead.
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+      description: What went wrong in one or two sentences?
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Steps to reproduce
+      description: Minimal commands / ckdn.toml snippets.
+      placeholder: |
+        ckdn init
+        ckdn run lint
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+      description: Paste the compact digest JSON if relevant (redact secrets).
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: ckdn version
+      placeholder: "ckdn --version"
+    validations:
+      required: true
+  - type: input
+    id: python
+    attributes:
+      label: Python version
+      placeholder: "python --version"
+    validations:
+      required: true
+  - type: textarea
+    id: env
+    attributes:
+      label: Environment
+      description: OS, how ckdn was installed (uv tool / path / PYTHONPATH).

ckdn-1.0.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,10 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+# SPDX-License-Identifier: MIT
+blank_issues_enabled: false
+contact_links:
+  - name: Security report
+    url: https://github.com/orenlab/ckdn/security/advisories/new
+    about: Report a vulnerability privately (do not file a public issue).
+  - name: Discussions
+    url: https://github.com/orenlab/ckdn/discussions
+    about: Questions and ideas that are not bugs or feature requests.

ckdn-1.0.0/.github/ISSUE_TEMPLATE/feature.yml

@@ -0,0 +1,37 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+# SPDX-License-Identifier: MIT
+name: Feature request
+description: Propose a parser, alias behavior, or CLI improvement
+title: "[feat] "
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What gap does this fill for agent / CI loops?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposal
+      description: Desired behavior, config shape, and non-goals if any.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Workarounds today (generic parser, external script, …).
+  - type: checkboxes
+    id: constraints
+    attributes:
+      label: Constraints you accept
+      options:
+        - label: Stdlib-only runtime (no new published dependencies)
+          required: true
+        - label: Digests stay sparse (ckdn.digest/2 omit-empty rules)
+          required: true
+        - label: Parsers report facts; reconcile owns status
+          required: true

ckdn-1.0.0/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,20 @@
+<!--
+SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+SPDX-License-Identifier: MIT
+-->
+## Summary
+
+<!-- What and why (1–3 bullets). -->
+
+-
+
+## Test plan
+
+- [ ] `uv run pytest`
+- [ ] `uv run ruff check src tests`
+- [ ] `uv run mypy src/ckdn`
+- [ ] Manual: `ckdn run <relevant-check>` digest looks correct (sparse on pass)
+
+## Notes
+
+<!-- Breaking digest/schema changes? Update DIGEST_SCHEMA and README. -->

ckdn-1.0.0/.github/dependabot.yml

@@ -0,0 +1,20 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+# SPDX-License-Identifier: MIT
+
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: uv
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    groups:
+      dev-python:
+        patterns:
+          - "*"

ckdn-1.0.0/.github/workflows/ci.yml

@@ -0,0 +1,56 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+# SPDX-License-Identifier: MIT
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.12", "3.13", "3.14"]
+    steps:
+      - uses: actions/checkout@v7
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.3.2
+        with:
+          enable-cache: true
+          python-version: ${{ matrix.python-version }}
+      - name: Sync
+        run: uv sync --extra dev --extra mcp
+      - name: Ruff
+        run: uv run ruff check src tests
+      - name: Mypy
+        run: uv run mypy src/ckdn
+      - name: Ty
+        run: uv run ty check src/ckdn
+      - name: Pytest
+        run: uv run pytest -q
+
+  codeclone:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+      pull-requests: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+
+      - name: Run CodeClone
+        uses: orenlab/codeclone/.github/actions/codeclone@v2.1.0a1
+        with:
+          fail-on-new: "true"
+          sarif: "true"
+          pr-comment: "true"

ckdn-1.0.0/.github/workflows/publish.yml

@@ -0,0 +1,113 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+# SPDX-License-Identifier: MIT
+name: publish
+run-name: >-
+  publish • ${{ github.event_name }} •
+  ${{ github.event.release.tag_name || inputs.repository || github.ref_name }}
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      repository:
+        description: Target package index
+        required: true
+        default: testpypi
+        type: choice
+        options:
+          - testpypi
+          - pypi
+
+permissions:
+  contents: read
+
+concurrency:
+  group: publish-${{ github.event.release.tag_name || github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v8.3.2
+        with:
+          enable-cache: true
+          python-version: "3.13"
+
+      - name: Verify release tag matches project version
+        if: ${{ github.event_name == 'release' }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          project_version="$(python - <<'PY'
+          import pathlib, tomllib
+          payload = tomllib.loads(pathlib.Path("pyproject.toml").read_text(encoding="utf-8"))
+          print(payload["project"]["version"])
+          PY
+          )"
+          release_tag="${{ github.event.release.tag_name }}"
+          normalized_tag="${release_tag#v}"
+          if [ "$normalized_tag" != "$project_version" ]; then
+            echo "release tag $release_tag does not match project version $project_version" >&2
+            exit 1
+          fi
+
+      - name: Build distributions
+        run: uv build
+
+      - name: Validate distributions
+        run: uv run --with twine twine check dist/*
+
+      - name: Upload distributions
+        uses: actions/upload-artifact@v7
+        with:
+          name: python-package-distributions
+          path: dist/
+          if-no-files-found: error
+
+  publish-testpypi:
+    if: ${{ github.event_name == 'workflow_dispatch' && inputs.repository == 'testpypi' }}
+    needs: build
+    runs-on: ubuntu-latest
+    environment: testpypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Download distributions
+        uses: actions/download-artifact@v8
+        with:
+          name: python-package-distributions
+          path: dist/
+
+      - name: Publish to TestPyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
+
+  publish-pypi:
+    if: >-
+      ${{
+        github.event_name == 'release' ||
+        (github.event_name == 'workflow_dispatch' && inputs.repository == 'pypi')
+      }}
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Download distributions
+        uses: actions/download-artifact@v8
+        with:
+          name: python-package-distributions
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

ckdn-1.0.0/.gitignore

@@ -0,0 +1,16 @@
+.agent-runs/
+__pycache__/
+*.pyc
+dist/
+.venv/
+.codeclone/
+.idea/
+*.egg-info/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.DS_Store
+.coverage
+htmlcov/
+build/
+*.whl

ckdn-1.0.0/.pre-commit-config.yaml

@@ -0,0 +1,72 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+# SPDX-License-Identifier: MIT
+default_install_hook_types: [pre-commit, pre-push]
+
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: check-merge-conflict
+      - id: end-of-file-fixer
+      - id: trailing-whitespace
+      - id: check-toml
+      - id: check-yaml
+      - id: check-json
+      - id: check-ast
+      - id: debug-statements
+      - id: check-case-conflict
+      - id: check-symlinks
+      - id: destroyed-symlinks
+      - id: detect-private-key
+      - id: mixed-line-ending
+        args: [--fix=lf]
+      - id: forbid-submodules
+
+  - repo: local
+    hooks:
+      - id: ruff-format
+        name: Ruff (format)
+        entry: uv run ruff format .
+        language: system
+        pass_filenames: false
+        stages: [pre-commit]
+
+      - id: ruff-check
+        name: Ruff (lint)
+        entry: uv run ruff check .
+        language: system
+        pass_filenames: false
+        stages: [pre-commit]
+
+      - id: mypy
+        name: Mypy
+        entry: uv run mypy
+        language: system
+        pass_filenames: false
+        always_run: true
+        stages: [pre-commit]
+
+      - id: ty
+        name: Ty
+        entry: uv run ty check .
+        language: system
+        pass_filenames: false
+        always_run: true
+        stages: [pre-commit]
+
+      - id: codeclone
+        name: CodeClone
+        entry: uv run codeclone
+        language: system
+        pass_filenames: false
+        args: [".", "--ci"]
+        always_run: true
+        stages: [pre-commit]
+
+      - id: pytest
+        name: Pytest
+        entry: uv run pytest -q
+        language: system
+        pass_filenames: false
+        always_run: true
+        stages: [pre-push]

ckdn-1.0.0/CHANGELOG.md

@@ -0,0 +1,33 @@
+<!--
+SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+SPDX-License-Identifier: MIT
+-->
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.0.0] - 2026-07-11
+
+### Added
+
+- Initial public release of **ckdn** (checkdown): deterministic check runner
+  and bounded log digester for AI-assisted development loops
+- Atomic checks and configurable aliases (`members`, optional `fail_fast`)
+- Tier-1 parsers: pytest, ruff, coverage, ty, mypy, pyright, pylint, bandit,
+  pip-audit, SARIF, reformat text, generic
+- Sparse schemas: digest `ckdn.digest/2`, alias aggregate `ckdn.aggregate/1`,
+  meta `ckdn.meta/1`
+- CLI: `run`, `show`, `list`, `checks`, `gc`, `init` (writes a starter
+  `ckdn.toml`)
+- Stdlib-only core runtime; MIT license; security and contribution docs
+- Optional FastMCP stdio server (`ckdn[mcp]` / `ckdn-mcp`) exposing
+  `list_checks`, `run_check`, `run_group`, `get_digest`, `list_runs`,
+  `get_evidence`
+- Application facade (`ckdn.app`) shared by CLI and MCP so reconcile/digest
+  semantics stay single-sourced
+
+[Unreleased]: https://github.com/orenlab/ckdn/compare/v1.0.0...HEAD
+[1.0.0]: https://github.com/orenlab/ckdn/releases/tag/v1.0.0

ckdn-1.0.0/CODE_OF_CONDUCT.md

@@ -0,0 +1,77 @@
+<!--
+SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+SPDX-License-Identifier: MIT
+-->
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, caste, color, religion, or sexual
+identity and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment:
+
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility and apologizing to those affected by our mistakes,
+  and learning from the experience
+- Focusing on what is best not just for us as individuals, but for the overall
+  community
+
+Examples of unacceptable behavior:
+
+- The use of sexualized language or imagery, and sexual attention or advances of
+  any kind
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or email address,
+  without their explicit permission
+- Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement Responsibilities
+
+Community leaders are responsible for clarifying and enforcing our standards of
+acceptable behavior and will take appropriate and fair corrective action in
+response to any behavior that they deem inappropriate, threatening, offensive,
+or harmful.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the community leaders responsible for enforcement at
+**rozhnovskiydenis@gmail.com**.
+
+All complaints will be reviewed and investigated promptly and fairly.
+
+## Enforcement Guidelines
+
+Community leaders will follow these Community Impact Guidelines in determining
+the consequences for any action they deem in violation of this Code of Conduct:
+
+1. **Correction** — private warning and clarification of expectations.
+2. **Warning** — consequences for continued behavior.
+3. **Temporary ban** — no interaction for a specified period.
+4. **Permanent ban** — permanent ban from community spaces.
+
+## Attribution
+
+This Code of Conduct is adapted from the
+[Contributor Covenant](https://www.contributor-covenant.org/), version 2.1,
+available at
+https://www.contributor-covenant.org/version/2/1/code_of_conduct.html.

ckdn-1.0.0/CONTRIBUTING.md

@@ -0,0 +1,49 @@
+<!--
+SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+SPDX-License-Identifier: MIT
+-->
+# Contributing
+
+Thanks for helping with **ckdn** (checkdown).
+
+## Development setup
+
+```bash
+uv sync --extra dev --extra mcp
+uv run pre-commit install   # if you use pre-commit
+uv run pytest
+uv run ruff check src tests
+uv run mypy src/ckdn
+uv run ty check src/ckdn
+# coverage check needs pytest-cov (in the dev extra):
+# uv run ckdn run coverage
+```
+
+Core package stays **stdlib only** (`dependencies = []`). The MCP server is the optional
+`mcp` extra (`fastmcp`); sync it for MCP tests and local `ckdn-mcp`.
+
+## Pull requests
+
+1. Keep changes focused; prefer small PRs.
+2. Add or update tests for behavior changes (especially reconcile /
+   parser guards and digest shape).
+3. Update [CHANGELOG.md](CHANGELOG.md) under `[Unreleased]` for user-facing changes.
+4. Do not commit `.agent-runs/`, `.venv/`, or CodeClone state
+   (`.codeclone/`, baseline updates unless explicitly requested).
+5. Fill in the PR template.
+
+## Coding norms
+
+- Python ≥ 3.11, **stdlib only** in the published package (`dependencies = []`).
+- Parsers report facts; they never decide final status (`ckdn.reconcile` does).
+- Digests stay sparse (`ckdn.digest/2`): omit empty / zero / false defaults.
+- Prefer machine-readable artifacts under `{run_dir}` over terminal scraping.
+
+## Security
+
+See [SECURITY.md](SECURITY.md). Do not file public issues for vulnerabilities.
+
+## License
+
+By contributing, you agree that your contributions are licensed under the
+[MIT License](LICENSE).

ckdn-1.0.0/LICENSE

@@ -0,0 +1,24 @@
+SPDX-FileCopyrightText: Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+SPDX-License-Identifier: MIT
+
+MIT License
+
+Copyright (c) 2026 Den Rozhnovskiy <rozhnovskiydenis@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.