etki 0.1.0a2__tar.gz

etki-0.1.0a2/.claude/launch.json

@@ -0,0 +1,14 @@
+{
+  "version": "0.0.1",
+  "configurations": [
+    {
+      "name": "etki-preview",
+      "runtimeExecutable": "sh",
+      "runtimeArgs": [
+        "-c",
+        "ETKI_SESSION_SECRET=preview-secret-0123456789abcdef ETKI_DEMO_MODE=true ETKI_DEPS_ONLINE=true ETKI_ADMIN_USER=pmo ETKI_ADMIN_PASSWORD=pmo12345 uv run uvicorn etki.api.app:app --host 127.0.0.1 --port 8001"
+      ],
+      "port": 8001
+    }
+  ]
+}

etki-0.1.0a2/.dockerignore

@@ -0,0 +1,12 @@
+.git
+.venv
+.etki
+workspace
+**/__pycache__
+*.db
+.mypy_cache
+.ruff_cache
+.pytest_cache
+tests
+docs
+Etki_*.md

etki-0.1.0a2/.env.example

@@ -0,0 +1,41 @@
+# Etki ortam ayarları — bu dosyayı `.env` olarak kopyalayıp değerleri doldurun.
+#   cp .env.example .env
+# .env .gitignore'dadır; sırlar (API anahtarı) ASLA commit'lenmez.
+
+# --- LLM (sohbet + LLM kapsam çıkarımı için; opsiyonel) ---
+# Anthropic Claude API. Anahtar yoksa sistem deterministik/sezgisel çalışır.
+# NOT: LLM sağlayıcısı arayüzden de yönetilebilir (Ayarlar → Yapay Zekâ Asistanı,
+# pmo). Arayüzden kaydedilen değerler .etki/llm.json'da tutulur ve buradaki env
+# değerlerinden ÖNCELİKLİDİR; üretimde sırlar için env önerilir.
+ETKI_LLM_PROVIDER=anthropic
+
+# Anthropic Claude API anahtarı (https://console.anthropic.com/ → API Keys).
+# ANAHTAR BURAYA:
+ETKI_ANTHROPIC_API_KEY=sk-ant-...
+# Model (varsayılan claude-opus-4-8):
+# ETKI_ANTHROPIC_MODEL=claude-opus-4-8
+
+# --- Kimlik doğrulama / oturum (ÜRETİMDE ZORUNLU) ---
+# Session cookie imzalama secret'ı — uzun, rastgele bir değer (ör. `openssl rand -hex 32`).
+ETKI_SESSION_SECRET=change-me-uzun-rastgele-bir-deger
+# İlk PMO kullanıcısı (yalnızca hiç kullanıcı yoksa, açılışta bir kez oluşturulur):
+ETKI_ADMIN_USER=pmo
+ETKI_ADMIN_PASSWORD=change-me-guclu-parola
+
+# --- Veritabanı / Docker Postgres ---
+# Postgres parolası (docker-compose bunu kullanır):
+POSTGRES_PASSWORD=change-me-postgres-parola
+# ETKI_DB_URL=sqlite:///./etki.db
+# Canlı (Docker): postgresql+psycopg://postgres:${POSTGRES_PASSWORD}@db:5432/etki
+
+# --- Arka plan tazeleme (opsiyonel; ikisi de varsayılan KAPALI = 0) ---
+# Üretimde önerilen yol cron'dur (docs/RUNBOOK.md); tek-konteyner/pilot kurulumlar için:
+# ETKI_REINDEX_INTERVAL_HOURS=24   # tüm projeleri periyodik tam re-index et
+# ETKI_POOL_REFRESH_MINUTES=15     # efor havuzu tüketimini hafifçe tazele (re-index yok)
+
+# --- Diğer (opsiyonel) ---
+# ETKI_DEFAULT_LANGUAGE=tr      # varsayılan UI dili (tr|en|de); session/Accept-Language ezer
+# ETKI_MAX_UPLOAD_MB=20         # yükleme boyut sınırı
+# ETKI_DEMO_MODE=true           # triyaj ekranında örnek talep çiplerini göster
+# Jira/GLPI token'ları: UI'da `env:JIRA_TOKEN` referansı girip değeri burada verin:
+# JIRA_TOKEN=...

etki-0.1.0a2/.github/ISSUE_TEMPLATE/adapter_proposal.yml

@@ -0,0 +1,41 @@
+name: New adapter proposal
+description: Propose an integration with a work-item tracker, code host, document source or LLM endpoint
+labels: ["adapter", "enhancement"]
+body:
+  - type: input
+    id: vendor
+    attributes:
+      label: Vendor / system
+      placeholder: e.g. Azure DevOps, GitLab, Linear, Redmine, Confluence
+    validations:
+      required: true
+  - type: dropdown
+    id: port
+    attributes:
+      label: Which port does it implement?
+      options:
+        - WorkItemProvider (tickets + spent effort)
+        - CodeRepositoryProvider (repo access, churn, diff)
+        - DocumentSourceProvider (document listing + content)
+        - LLMClient (OpenAI-compatible / other LLM endpoint)
+    validations:
+      required: true
+  - type: textarea
+    id: capabilities
+    attributes:
+      label: Capabilities and API notes
+      description: |
+        Which capabilities can the vendor support (webhooks, real-time, effort tracking,
+        incremental diff)? Link the relevant API docs. Adapters must normalize vendor
+        quirks internally (e.g. map time-spent to `WorkItem.effort_seconds`) and degrade
+        gracefully when the server is unreachable.
+    validations:
+      required: true
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Checks
+      options:
+        - label: I read the "Writing an adapter" section in CONTRIBUTING.md
+          required: true
+        - label: I'd like to implement this myself

etki-0.1.0a2/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,35 @@
+name: Bug report
+description: Something doesn't work as documented
+labels: ["bug"]
+body:
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened?
+      description: What did you do, what did you expect, what happened instead?
+      placeholder: |
+        1. Started the demo with `docker compose -f docker-compose.demo.yml up`
+        2. Submitted the request "..."
+        3. Expected an OUT_OF_SCOPE decision, got ...
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: OS, Python version, how you run Etki (uv / Docker / compose), LLM provider if any.
+      placeholder: macOS 15, Python 3.12, docker compose demo profile, no LLM
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Relevant logs or output
+      render: shell
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Checks
+      options:
+        - label: I searched existing issues for this problem
+          required: true

etki-0.1.0a2/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Questions & ideas
+    url: https://github.com/yasinyaman/etki/discussions
+    about: Use Discussions for questions, design conversations and show-and-tell.
+  - name: Security reports
+    url: https://github.com/yasinyaman/etki/security/advisories/new
+    about: Please report vulnerabilities privately, not as public issues.

etki-0.1.0a2/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,22 @@
+name: Feature request
+description: Propose an improvement or new capability
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What are you trying to do that Etki doesn't support today?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+      description: How should it work? If it touches the decision engine, remember the invariants — estimates are ranges, EXCLUDED scope is first-class, every decision carries an evidence chain.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered

etki-0.1.0a2/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,14 @@
+## What & why
+
+<!-- What does this PR change, and what problem does it solve? Link the issue if any. -->
+
+## Checklist
+
+- [ ] `uv run pytest` passes
+- [ ] `uv run ruff check .` and `uv run mypy etki` pass
+- [ ] `uv run python -m eval.runner` passes — and this PR does **not** modify
+      `eval/datasets/frozen/golden_crs.json` together with engine/matching logic
+      (golden-set freeze rule, see CONTRIBUTING.md)
+- [ ] New adapter? Registered in `adapters/registry.py`, no vendor references in core,
+      tests use fakes / skip cleanly without a live server
+- [ ] UI strings added through the i18n catalog (tr/en/de)

etki-0.1.0a2/.github/workflows/ci.yml

@@ -0,0 +1,58 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # freeze guard diffs against the PR base / push range
+
+      # Answer-key freeze guard: engine/matching changes and eval dataset edits must
+      # not land in the same change set (see CONTRIBUTING.md). PRs check the whole
+      # range; pushes check each commit individually.
+      - name: Freeze guard
+        run: |
+          if [ "${{ github.event_name }}" = "pull_request" ]; then
+            python scripts/freeze_guard.py "origin/${{ github.base_ref }}...HEAD"
+          else
+            BEFORE="${{ github.event.before }}"
+            if [ -z "$BEFORE" ] || ! git cat-file -e "$BEFORE" 2>/dev/null; then
+              # Force-push or fresh history: fall back to the parent when it
+              # exists, else check all commits (the guard skips root commits).
+              BEFORE=$(git rev-parse --verify --quiet HEAD^ || true)
+            fi
+            if [ -n "$BEFORE" ]; then
+              python scripts/freeze_guard.py --per-commit "$BEFORE..HEAD"
+            else
+              python scripts/freeze_guard.py --per-commit "HEAD"
+            fi
+          fi
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true              # cache dependency downloads
+
+      - name: Sync dependencies
+        run: uv sync --frozen --dev       # match the lockfile exactly (no version drift)
+
+      - name: Lint (ruff)
+        run: uv run ruff check .
+
+      - name: Type check (mypy)
+        run: uv run mypy etki packages/etki-api/src/etki_api packages/etki-plugin-linear/src/etki_plugin_linear
+
+      - name: Tests (pytest + coverage)
+        run: uv run pytest --cov=etki --cov=etki_api --cov=etki_plugin_linear --cov-report=term-missing --cov-fail-under=70
+
+      - name: Build workspace packages (etki-api gate)
+        run: uv build --all-packages
+
+      - name: Gate / back-test (eval)
+        run: uv run python -m eval.runner

etki-0.1.0a2/.github/workflows/docs.yml

@@ -0,0 +1,26 @@
+# Docs site: mkdocs-material → GitHub Pages, on every push to master that touches docs.
+# One-time setup: repo Settings → Pages → Source: "Deploy from a branch" → branch gh-pages.
+name: Docs
+
+on:
+  push:
+    branches: [master]
+    paths:
+      - "docs/**"
+      - "mkdocs.yml"
+      - ".github/workflows/docs.yml"
+
+permissions:
+  contents: write # gh-pages push
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true
+      - run: uv sync --frozen --only-group docs
+      - run: uv run --no-sync mkdocs gh-deploy --force

etki-0.1.0a2/.github/workflows/release.yml

@@ -0,0 +1,129 @@
+# Release automation: push a tag like `v0.1.0a1` →
+#   1. re-run the full check suite (same as CI),
+#   2. build + push the Docker image to GHCR (ghcr.io/<owner>/etki),
+#   3. build the sdist/wheel and publish to PyPI (trusted publishing),
+#   4. create a GitHub Release with the matching CHANGELOG section.
+#
+# One-time setup required for PyPI: TWO trusted publishers on pypi.org for this
+# repository (both workflow: release.yml) — project `etki` with environment `pypi`,
+# project `etki-api` with environment `pypi-etki-api`. PyPI refuses two pending
+# publishers with the identical repo+workflow+environment config, hence the split.
+# Until configured the publish jobs fail; the other jobs are independent.
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write # GitHub Release
+  packages: write # GHCR push
+  id-token: write # PyPI trusted publishing
+
+jobs:
+  checks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+          enable-cache: true
+      - run: uv sync --frozen --dev
+      - run: uv run ruff check .
+      - run: uv run mypy etki packages/etki-api/src/etki_api packages/etki-plugin-linear/src/etki_plugin_linear
+      - run: uv run pytest --cov=etki --cov=etki_api --cov-fail-under=70
+      - run: uv run python -m eval.runner
+
+  docker:
+    needs: checks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository_owner }}/etki
+          tags: |
+            type=pep440,pattern={{version}}
+            type=raw,value=latest
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  # PyPI rejects two pending trusted publishers with the IDENTICAL config
+  # (repo + workflow + environment) — the environment name is the disambiguator.
+  # So each package publishes from its OWN job/environment:
+  #   project `etki`     ← environment `pypi`
+  #   project `etki-api` ← environment `pypi-etki-api`
+  # skip-existing lets a tag re-run without failing on versions already uploaded
+  # (etki-api only uploads when its version was actually bumped).
+  pypi:
+    needs: checks
+    runs-on: ubuntu-latest
+    environment: pypi
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+      - run: uv build # root member only = etki
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true
+
+  pypi-etki-api:
+    needs: checks
+    runs-on: ubuntu-latest
+    environment: pypi-etki-api
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+      - run: uv build --package etki-api
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true
+
+  github-release:
+    # NOT dependent on PyPI: the image + GitHub Release still go out even if the
+    # trusted publisher isn't configured yet (the pypi job can fail independently).
+    needs: [docker]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Extract changelog section for this version
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+          awk -v ver="$VERSION" '
+            $0 ~ "^## \\[" ver "\\]" {found=1; next}
+            found && /^## \[/ {exit}
+            found {print}
+          ' CHANGELOG.md > release-notes.md
+          if ! [ -s release-notes.md ]; then
+            echo "No CHANGELOG section for $VERSION; using a generic note." >&2
+            echo "See CHANGELOG.md for details." > release-notes.md
+          fi
+      - name: Create GitHub Release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release create "$GITHUB_REF_NAME" \
+            --title "Etki $GITHUB_REF_NAME" \
+            --notes-file release-notes.md \
+            $([[ "$GITHUB_REF_NAME" == *a* || "$GITHUB_REF_NAME" == *b* || "$GITHUB_REF_NAME" == *rc* ]] && echo --prerelease)

etki-0.1.0a2/.gitignore

@@ -0,0 +1,32 @@
+# Python
+__pycache__/
+*.py[cod]
+.venv/
+venv/
+*.egg-info/
+dist/
+build/
+
+# Araçlar
+.mypy_cache/
+.ruff_cache/
+.pytest_cache/
+
+# Ortam
+.env
+*.local.yaml
+connectors.yaml
+
+# İndeks artıkları
+.etki/
+workspace/
+
+# Veritabanı (yerel)
+*.db
+
+# Test/coverage artıkları
+.coverage
+coverage.xml
+
+# MkDocs build output
+site/