@sverka/sdk 0.2.23 → 0.2.25

package/dist/index.d.mts

@@ -87,7 +87,7 @@ type PlannerErrorCode = "ENTRY_NOT_FOUND" | "ROOT_NOT_FOUND" | "MISSING_INPUT" |
 export declare function expandMatrixSteps(steps: readonly StepDefinition[]): readonly StepDefinition[];
 //#endregion
 //#region src/errors.d.ts
-type SdkErrorCode = "INVALID_INTERPOLATION" | "INVALID_IMAGE" | "CONFIG_NOT_FOUND" | "CONFIG_INVALID" | "CONFIG_LOAD_FAILED" | "CONFIG_PATH_ESCAPE" | "EXECUTION_FAILED";
+type SdkErrorCode = "INVALID_INTERPOLATION" | "INVALID_IMAGE" | "CONFIG_NOT_FOUND" | "CONFIG_INVALID" | "CONFIG_LOAD_FAILED" | "CONFIG_PATH_ESCAPE" | "EXECUTION_FAILED" | "INVALID_FRONTMATTER" | "INVALID_STEP" | "INVALID_TRIGGER" | "EXTENDS_NOT_FOUND";
 export declare class SdkError extends Error {
   readonly cause?: unknown;
   readonly code: SdkErrorCode;
@@ -394,5 +394,49 @@ interface AgentStepBuilder {
  */
 export declare function agent(strings: TemplateStringsArray, ...values: readonly (string | Reference)[]): AgentStepBuilder;
 //#endregion
-export { type AgentStepBuilder, type Artifact, type ArtifactDeclaration, type BindRunPlanOptions, type CacheDeclaration, type CallPipelineBuilder, type ChangedFile, CheckError, type CheckErrorCode, type CheckOutput, type CheckResolver, type ComponentBuilder, CompositionError, CoreError, type CredentialDeclaration, DEFAULT_POLICY, type DetectedLanguage, type DetectedPackageManager, type DiscoverOptions, type DiscoveryErrorCode, type DiscoveryExplanation, type ExecutionResult, type ExecutorSpec, type Expression, type FailOnRule, type Finding, type FindingSource, type ImageRef, type LocalSignal, type LocalSignalType, type MonorepoMarker, type NetworkPolicy, type Operation, type OperationKind, type OperationOutcome, type OperationSpec, type PipelineConfig, type Plan, type PlanContext, type PlanMetadata, type PlanOperation, type PlanProposal, type PlanResult, type Planner, type PlannerErrorCode, PlanningError, type Policy, type PolicyConfig, type PolicyResult, type ProjectContext, type ProposedCheck, type ResolvedCheck, type Runtime, type RuntimeMode, type RuntimeResult, type SdkErrorCode, type Severity, type ShellProxy, type StepBuilder, type Sverka, type SverkaOptions, type Verdict, type Workflow, type WorkflowDefinition, computeFingerprint, computePlanId, createBaseline, createBuiltinResolver, createPolicy, evaluatePolicy, extractFindings, filterOnlyNew, loadBaseline, matrix, matrix$1 as matrixContext, normalizeSarif, parallel, pipeline, pipeline$1 as pipelineV0, run, run$1 as runContext, saveBaseline, updateBaseline, validatePlan, when, when$1 as whenV0, workflow };
+//#region src/markdown.d.ts
+/** Frontmatter shape (Spec 37 + Spec 54 `on:` alias and event kinds). */
+interface MarkdownFrontmatter {
+  readonly pipeline: string;
+  readonly triggers?: readonly MarkdownTrigger[];
+  /** gh-aw-style shorthand for `triggers`. */
+  readonly on?: string | readonly string[] | Record<string, unknown>;
+  readonly extends?: string;
+  readonly inputs?: Readonly<Record<string, Input>>;
+}
+/** A single frontmatter trigger entry. */
+interface MarkdownTrigger {
+  readonly kind: "push" | "changeRequest" | "manual" | "schedule" | "comment" | "issue";
+  readonly branches?: readonly string[];
+  readonly tags?: readonly string[];
+  readonly paths?: readonly string[];
+  readonly cron?: string;
+  readonly timezone?: string;
+  readonly mention?: string;
+  readonly on?: "mergeRequest" | "issue" | "commit";
+  readonly action?: "opened" | "reopened" | "labeled";
+  readonly labels?: readonly string[];
+}
+/**
+ * Parse a `.sverka.md` source string into a Project construct.
+ * `filePath` anchors `extends` resolution and error messages; without it
+ * `extends` cannot resolve and throws EXTENDS_NOT_FOUND.
+ */
+export declare function parseMarkdown(source: string, filePath?: string): Project;
+/**
+ * Read + parse a `.sverka.md` file. When frontmatter declares `extends`,
+ * the referenced config module is imported and the markdown pipeline is
+ * merged into that Project (Spec 37 escape hatch).
+ */
+export declare function loadMarkdownFile(path: string): Promise<Project>;
+//#endregion
+//#region src/markdown-errors.d.ts
+type MarkdownParseErrorCode = "INVALID_FRONTMATTER" | "INVALID_STEP" | "INVALID_TRIGGER" | "EXTENDS_NOT_FOUND";
+/** Raised when a `.sverka.md` file cannot be parsed into a Project. */
+export declare class MarkdownParseError extends SdkError {
+  readonly code: MarkdownParseErrorCode;
+  constructor(message: string, code: MarkdownParseErrorCode, cause?: unknown);
+}
+//#endregion
+export { type AgentStepBuilder, type Artifact, type ArtifactDeclaration, type BindRunPlanOptions, type CacheDeclaration, type CallPipelineBuilder, type ChangedFile, CheckError, type CheckErrorCode, type CheckOutput, type CheckResolver, type ComponentBuilder, CompositionError, CoreError, type CredentialDeclaration, DEFAULT_POLICY, type DetectedLanguage, type DetectedPackageManager, type DiscoverOptions, type DiscoveryErrorCode, type DiscoveryExplanation, type ExecutionResult, type ExecutorSpec, type Expression, type FailOnRule, type Finding, type FindingSource, type ImageRef, type LocalSignal, type LocalSignalType, type MarkdownFrontmatter, type MarkdownParseErrorCode, type MarkdownTrigger, type MonorepoMarker, type NetworkPolicy, type Operation, type OperationKind, type OperationOutcome, type OperationSpec, type PipelineConfig, type Plan, type PlanContext, type PlanMetadata, type PlanOperation, type PlanProposal, type PlanResult, type Planner, type PlannerErrorCode, PlanningError, type Policy, type PolicyConfig, type PolicyResult, type ProjectContext, type ProposedCheck, type ResolvedCheck, type Runtime, type RuntimeMode, type RuntimeResult, type SdkErrorCode, type Severity, type ShellProxy, type StepBuilder, type Sverka, type SverkaOptions, type Verdict, type Workflow, type WorkflowDefinition, computeFingerprint, computePlanId, createBaseline, createBuiltinResolver, createPolicy, evaluatePolicy, extractFindings, filterOnlyNew, loadBaseline, matrix, matrix$1 as matrixContext, normalizeSarif, parallel, pipeline, pipeline$1 as pipelineV0, run, run$1 as runContext, saveBaseline, updateBaseline, validatePlan, when, when$1 as whenV0, workflow };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/planner/bind.ts","../src/planner/planner.ts","../src/planner/errors.ts","../src/planner/matrix.ts","../src/errors.ts","../src/types.ts","../src/compat/config.ts","../src/sverka.ts","../src/compat/helpers.ts","../src/dollar.ts","../src/shell.ts","../src/artifact.ts","../src/pipeline.ts","../src/call-pipeline.ts","../src/component.ts","../src/when.ts","../src/expr.ts","../src/status.ts","../src/images.ts","../src/context.ts","../src/agent.ts"],"mappings":";;;;UAeiB;WACN,OAAO;WACP;WACA,SAAS,SAAS,eAAe;;;;;;wBAS5B,YAAY,SAAS,qBAAqB;;;;;;;wBAiO1C,sBACd,gBAAgB,kBAChB,oCACU;;;;;;UChNK;EACf,SAAS,SAAS,kBAAkB,QAAQ;EAC5C,KAAK,SAAS,iBAAiB,QAAQ;EACvC,YAAY,SAAS,qBAAqB;;wBAG5B,iBAAiB;UAIhB;EACf;EACA;EACA;;;;;;;;EAQA;;UAGe;EACf,SAAS;EACT,iBAAiB;EACjB;EACA;;;;;;;;qBCvEW,uBAAuB;WACzB,MAAM;WACG;EACN,YAAA,iBAAiB,MAAM,oBAAoB;;KAQ7C;;;;qBAUC,qBAAqB;WACvB,MAAM;WACG;EACN,YAAA,iBAAiB,MAAM,kBAAkB;;KAQ3C;;;;;;;;;;;;;;;wBCVI,kBACd,gBAAgB,4BACN;;;KC1BA;qBAUC,iBAAiB;WACV;WACT,MAAM;EAEH,YAAA,iBAAiB,MAAM,cAAc;;;;;;;UCLlC;;EAEf;;EAEA,UAAU,aAAW;;EAErB,SAAS;;;UAIM;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA,WAAW;;;UAII;EACf,KAAK,UAAU,gBAAgB,QAAQ;EACvC,OAAO,UAAU,gBAAgB,QAAQ;EACzC,QAAQ,UAAU,gBAAgB,QAAQ;;;UAI3B;;EAEf,SAAS;;EAET,qBAAqB;;EAErB,UAAU;;EAEV,MAAM;;;UAIS;;EAEf,mBAAmB;;EAEnB,cAAc;;EAEd,SAAS;;EAET;;;;;;EAMA;;EAEA,UAAU,oBAAoB;;EAE9B;;;;;;;;wBC/DoB,WAAW,eAAe;;;;;;;;wBAuB1B,aACpB,oBACA,gBACC,QAAQ;;;;;;;wBCqBK,aAAa,iBAAiB,gBAAgB;;wBAexC,KAAK,UAAU,gBAAgB,QAAQ;;wBAKvC,OAAO,UAAU,gBAAgB,QAAQ;;wBAKzC,QACpB,UAAU,gBACT,QAAQ;;;;wBClFK,KAAK,cAAc,IAAI,cAAY;;wBAKnC,eACd,YAAY,qBACX;;;UCGc;EACf,QAAQ,SAAS,SAAS,eAAe,sBAAsB;EAC/D,OAAO,iBAAiB,cAAc;EACtC,UAAU,2BAA2B;EACrC,QAAQ,SAAS,YAAU;EAC3B,QAAQ,aAAa;EACrB,UAAU,KAAK,YAAY;EAC3B,OAAO,MAAM,aAAa;EAC1B,cAAc,kBAAkB;EAChC,WAAW,kBAAkB;EAC7B,MAAM,UAAU,UAAU,aAAa;;;;;;;wBAuFzB,EACd,SAAS,yBACN,2BAA2B,eAC7B;;;;;;;;;;;UCpGc;GAEd,SAAS,yBAAyB,6BAA6B;GAE/D,sBAAsB;WAId,KAAK;WACL,KAAK;WACL,KAAK;WACL,KAAK;WACL,MAAM;WACN,MAAM;WACN,QAAQ;WACR,MAAM;WACN,OAAO;WACP,IAAI;WACJ,QAAQ;WACR,KAAK;YAEJ,cAAc;;;;;;;;;;;;;;;qBAsJb,OAAO;;;;wBCpLJ,SAAS,eAAe;;;UCAvB;EACf,SAAS,SAAS,eAAe;EACjC,QAAQ,eAAe,UAAU;EACjC,UAAU,eAAe,UAAU,aAAa;;;iBAIlC,WACd,SAAS,SACT,YACA,QAAQ,iBACP;;;UCNc;EACf,QACE,SAAS,SAAS,eAAe,sBAChC;EACH,UAAU,2BAA2B;EACrC,QAAQ,SAAS,YAAU;EAC3B,QAAQ,aAAa;EACrB,UAAU,KAAK,YAAY;EAC3B,cAAc,iBAAiB;EAC/B,MAAM,UAAU,UAAU,aAAa;;;;;;;wBAmEzB,aACd,gBACA,aAAa,SAAS,eAAe,YAAY,iBAChD;;;UC9Ec;EACf,QACE,SAAS,SAAS,eAAe,sBAChC;EACH,UAAU,2BAA2B;EACrC,QAAQ,SAAS,YAAU;EAC3B,QAAQ,aAAa;EACrB,UAAU,KAAK,YAAY;EAC3B,cAAc,iBAAiB;EAC/B,MAAM,UAAU,UAAU,aAAa;;;;;;;;wBAoEzB,UACd,cACA,iBACA,SAAS,SAAS,eAAe,YAAY,iBAC5C;;;;iBCrFa,OAAK,MAAM,YAAY;;;;;;;;;;wBCMvB,KACd,SAAS,yBACN,8CAA8C,eAChD;;;;;;;;wBCPa,OAAO,GAAG,aAAa;;;UCJtB;WACN;;;wBAIK,MAAM,cAAc;qBAgCvB;;;aAPM,QAAA;;;aAT8B,QAAA;;;;;;qBCRpC,KAAK,eAAe;;qBAGpB,SAAS,eAAe;;qBAGxB;;;;;;qBAOA;;;;;;;qBAQA;QAAA;;;cAKA;MAAA;WAAA;;;qBAMA,QAAQ,eAAe;;cAGvB,UAAQ,eAAe;;;UC1CnB;EACf,QACE,SAAS,SAAS,eAAe,sBAChC;EACH,OAAO,iBAAiB,cAAc;EACtC,UAAU,2BAA2B;EACrC,SAAS,gBAAgB,iBAAiB;EAC1C,OAAO,iBAAiB;EACxB,MAAM,gBAAgB;EACtB,UAAU,YAAY;EACtB,MAAM,UAAU,UAAU,aAAa;;;;;;;;wBAyEzB,MACd,SAAS,yBACN,2BAA2B,eAC7B"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/planner/bind.ts","../src/planner/planner.ts","../src/planner/errors.ts","../src/planner/matrix.ts","../src/errors.ts","../src/types.ts","../src/compat/config.ts","../src/sverka.ts","../src/compat/helpers.ts","../src/dollar.ts","../src/shell.ts","../src/artifact.ts","../src/pipeline.ts","../src/call-pipeline.ts","../src/component.ts","../src/when.ts","../src/expr.ts","../src/status.ts","../src/images.ts","../src/context.ts","../src/agent.ts","../src/markdown.ts","../src/markdown-errors.ts"],"mappings":";;;;UAeiB;WACN,OAAO;WACP;WACA,SAAS,SAAS,eAAe;;;;;;wBAS5B,YAAY,SAAS,qBAAqB;;;;;;;wBAiO1C,sBACd,gBAAgB,kBAChB,oCACU;;;;;;UChNK;EACf,SAAS,SAAS,kBAAkB,QAAQ;EAC5C,KAAK,SAAS,iBAAiB,QAAQ;EACvC,YAAY,SAAS,qBAAqB;;wBAG5B,iBAAiB;UAIhB;EACf;EACA;EACA;;;;;;;;EAQA;;UAGe;EACf,SAAS;EACT,iBAAiB;EACjB;EACA;;;;;;;;qBCvEW,uBAAuB;WACzB,MAAM;WACG;EACN,YAAA,iBAAiB,MAAM,oBAAoB;;KAQ7C;;;;qBAUC,qBAAqB;WACvB,MAAM;WACG;EACN,YAAA,iBAAiB,MAAM,kBAAkB;;KAQ3C;;;;;;;;;;;;;;;wBCVI,kBACd,gBAAgB,4BACN;;;KC1BA;qBAeC,iBAAiB;WACV;WACT,MAAM;EAEH,YAAA,iBAAiB,MAAM,cAAc;;;;;;;UCVlC;;EAEf;;EAEA,UAAU,aAAW;;EAErB,SAAS;;;UAIM;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA,WAAW;;;UAII;EACf,KAAK,UAAU,gBAAgB,QAAQ;EACvC,OAAO,UAAU,gBAAgB,QAAQ;EACzC,QAAQ,UAAU,gBAAgB,QAAQ;;;UAI3B;;EAEf,SAAS;;EAET,qBAAqB;;EAErB,UAAU;;EAEV,MAAM;;;UAIS;;EAEf,mBAAmB;;EAEnB,cAAc;;EAEd,SAAS;;EAET;;;;;;EAMA;;EAEA,UAAU,oBAAoB;;EAE9B;;;;;;;;wBC/DoB,WAAW,eAAe;;;;;;;;wBAuB1B,aACpB,oBACA,gBACC,QAAQ;;;;;;;wBCqBK,aAAa,iBAAiB,gBAAgB;;wBAexC,KAAK,UAAU,gBAAgB,QAAQ;;wBAKvC,OAAO,UAAU,gBAAgB,QAAQ;;wBAKzC,QACpB,UAAU,gBACT,QAAQ;;;;wBClFK,KAAK,cAAc,IAAI,cAAY;;wBAKnC,eACd,YAAY,qBACX;;;UCGc;EACf,QAAQ,SAAS,SAAS,eAAe,sBAAsB;EAC/D,OAAO,iBAAiB,cAAc;EACtC,UAAU,2BAA2B;EACrC,QAAQ,SAAS,YAAU;EAC3B,QAAQ,aAAa;EACrB,UAAU,KAAK,YAAY;EAC3B,OAAO,MAAM,aAAa;EAC1B,cAAc,kBAAkB;EAChC,WAAW,kBAAkB;EAC7B,MAAM,UAAU,UAAU,aAAa;;;;;;;wBAuFzB,EACd,SAAS,yBACN,2BAA2B,eAC7B;;;;;;;;;;;UCpGc;GAEd,SAAS,yBAAyB,6BAA6B;GAE/D,sBAAsB;WAId,KAAK;WACL,KAAK;WACL,KAAK;WACL,KAAK;WACL,MAAM;WACN,MAAM;WACN,QAAQ;WACR,MAAM;WACN,OAAO;WACP,IAAI;WACJ,QAAQ;WACR,KAAK;YAEJ,cAAc;;;;;;;;;;;;;;;qBAsJb,OAAO;;;;wBCpLJ,SAAS,eAAe;;;UCAvB;EACf,SAAS,SAAS,eAAe;EACjC,QAAQ,eAAe,UAAU;EACjC,UAAU,eAAe,UAAU,aAAa;;;iBAIlC,WACd,SAAS,SACT,YACA,QAAQ,iBACP;;;UCNc;EACf,QACE,SAAS,SAAS,eAAe,sBAChC;EACH,UAAU,2BAA2B;EACrC,QAAQ,SAAS,YAAU;EAC3B,QAAQ,aAAa;EACrB,UAAU,KAAK,YAAY;EAC3B,cAAc,iBAAiB;EAC/B,MAAM,UAAU,UAAU,aAAa;;;;;;;wBAmEzB,aACd,gBACA,aAAa,SAAS,eAAe,YAAY,iBAChD;;;UC9Ec;EACf,QACE,SAAS,SAAS,eAAe,sBAChC;EACH,UAAU,2BAA2B;EACrC,QAAQ,SAAS,YAAU;EAC3B,QAAQ,aAAa;EACrB,UAAU,KAAK,YAAY;EAC3B,cAAc,iBAAiB;EAC/B,MAAM,UAAU,UAAU,aAAa;;;;;;;;wBAoEzB,UACd,cACA,iBACA,SAAS,SAAS,eAAe,YAAY,iBAC5C;;;;iBCrFa,OAAK,MAAM,YAAY;;;;;;;;;;wBCMvB,KACd,SAAS,yBACN,8CAA8C,eAChD;;;;;;;;wBCPa,OAAO,GAAG,aAAa;;;UCJtB;WACN;;;wBAIK,MAAM,cAAc;qBAgCvB;;;aAPM,QAAA;;;aAT8B,QAAA;;;;;;qBCRpC,KAAK,eAAe;;qBAGpB,SAAS,eAAe;;qBAGxB;;;;;;qBAOA;;;;;;;qBAQA;QAAA;;;cAKA;MAAA;WAAA;;;qBAMA,QAAQ,eAAe;;cAGvB,UAAQ,eAAe;;;UC1CnB;EACf,QACE,SAAS,SAAS,eAAe,sBAChC;EACH,OAAO,iBAAiB,cAAc;EACtC,UAAU,2BAA2B;EACrC,SAAS,gBAAgB,iBAAiB;EAC1C,OAAO,iBAAiB;EACxB,MAAM,gBAAgB;EACtB,UAAU,YAAY;EACtB,MAAM,UAAU,UAAU,aAAa;;;;;;;;wBAyEzB,MACd,SAAS,yBACN,2BAA2B,eAC7B;;;;UCjEc;WACN;WACA,oBAAoB;;WAEpB,kCAAkC;WAClC;WACA,SAAS,SAAS,eAAe;;;UAI3B;WACN;WAEA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;;;;;;wBAiBK,cAAc,gBAAgB,oBAAoB;;;;;;wBAY5C,iBAAiB,eAAe,QAAQ;;;KC/ElD;;qBAOC,2BAA2B;WACrB,MAAM;EAEX,YAAA,iBAAiB,MAAM,wBAAwB"}

package/dist/index.mjs

@@ -2,11 +2,12 @@ import { existsSync, mkdtempSync, readFileSync, realpathSync } from "node:fs";
 import path, { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { createHash } from "node:crypto";
 import { spawn } from "node:child_process";
-import { AgentStep, ComponentStep, CompositionError, CoreError, Pipeline, PipelineCallStep, PlanningError, ShellStep, canonicalStringify, computeGraphId, computePlanId, computePlanId as computePlanId$1, computeRunPlanId, expandPipelineCalls, matrix, parallel, pipeline, run, validateGraph, validatePlan, validatePlan as validatePlan$1, when, workflow, workflow as workflow$1 } from "@sverka/workflow";
+import { AgentStep, ComponentStep, CompositionError, CoreError, Entry, Pipeline, PipelineCallStep, PlanningError, Project, ShellStep, canonicalStringify, computeGraphId, computePlanId, computePlanId as computePlanId$1, computeRunPlanId, expandPipelineCalls, matrix, parallel, pipeline, run, validateGraph, validatePlan, validatePlan as validatePlan$1, when, workflow, workflow as workflow$1 } from "@sverka/workflow";
 import { CheckError, DEFAULT_POLICY, DEFAULT_POLICY as DEFAULT_POLICY$1, computeFingerprint, createBaseline, createBuiltinResolver, createBuiltinResolver as createBuiltinResolver$1, createPolicy, createPolicy as createPolicy$1, evaluatePolicy, evaluatePolicy as evaluatePolicy$1, extractFindings, extractFindings as extractFindings$1, filterOnlyNew, filterOnlyNew as filterOnlyNew$1, loadBaseline, loadBaseline as loadBaseline$1, normalizeSarif, saveBaseline, updateBaseline } from "@sverka/verification";
 import { pathToFileURL } from "node:url";
-import { rm } from "node:fs/promises";
+import { readFile, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
+import { parse } from "yaml";
 //#region src/planner/internal/git-cli.ts
 /**
 * Resolve the absolute path to the `git` executable by searching `PATH`
@@ -2211,6 +2212,330 @@ function agent(strings, ...values) {
 	});
 }
 //#endregion
-export { $, CheckError, CompositionError, CoreError, DEFAULT_POLICY, DiscoveryError, PlannerError, PlanningError, SdkError, agent, artifact, bindRunPlan, callPipeline, change, component, computeFingerprint, computePlanId, computeReachableSteps, createBaseline, createBuiltinResolver, createPlanner, createPolicy, createSverka, defineWorkflow, env, evaluatePolicy, event, execute, expandMatrixSteps, expr, extractFindings, filterOnlyNew, findConfig, git, image, images, inputs, loadBaseline, loadWorkflow, matrix, matrix$1 as matrixContext, normalizeSarif, parallel, pipeline, pipeline$1 as pipelineV0, plan, run, run$1 as runContext, saveBaseline, secrets, shell, status, task, toPlan, updateBaseline, validatePlan, when, when$1 as whenV0, workflow };
+//#region src/markdown-errors.ts
+/** Raised when a `.sverka.md` file cannot be parsed into a Project. */
+var MarkdownParseError = class extends SdkError {
+	constructor(message, code, cause) {
+		super(message, code, cause);
+		this.name = "MarkdownParseError";
+	}
+};
+//#endregion
+//#region src/markdown.ts
+/**
+* Parse a `.sverka.md` source string into a Project construct.
+* `filePath` anchors `extends` resolution and error messages; without it
+* `extends` cannot resolve and throws EXTENDS_NOT_FOUND.
+*/
+function parseMarkdown(source, filePath) {
+	const { frontmatter, body } = splitFrontmatter(source, filePath);
+	const project = new Project(frontmatter.pipeline);
+	buildMarkdownPipeline(project, frontmatter, body, filePath);
+	return project;
+}
+/**
+* Read + parse a `.sverka.md` file. When frontmatter declares `extends`,
+* the referenced config module is imported and the markdown pipeline is
+* merged into that Project (Spec 37 escape hatch).
+*/
+async function loadMarkdownFile(path) {
+	const abs = isAbsolute(path) ? path : resolve(process.cwd(), path);
+	let source;
+	try {
+		source = await readFile(abs, "utf-8");
+	} catch (e) {
+		throw new MarkdownParseError(`cannot read markdown file: ${abs}`, "INVALID_FRONTMATTER", e);
+	}
+	const { frontmatter, body } = splitFrontmatter(source, abs);
+	if (frontmatter.extends !== void 0) {
+		const base = await loadExtends(frontmatter.extends, abs);
+		buildMarkdownPipeline(base, frontmatter, body, abs);
+		return base;
+	}
+	const project = new Project(frontmatter.pipeline);
+	buildMarkdownPipeline(project, frontmatter, body, abs);
+	return project;
+}
+function splitFrontmatter(source, filePath) {
+	const where = filePath !== void 0 ? ` in ${filePath}` : "";
+	const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(source);
+	if (m === null) throw new MarkdownParseError(`invalid .sverka.md${where}: missing YAML frontmatter (expected '---' delimiters)`, "INVALID_FRONTMATTER");
+	let parsed;
+	try {
+		parsed = parse(m[1]);
+	} catch (e) {
+		throw new MarkdownParseError(`invalid .sverka.md frontmatter${where}: ${e instanceof Error ? e.message : String(e)}`, "INVALID_FRONTMATTER", e);
+	}
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) throw new MarkdownParseError(`invalid .sverka.md frontmatter${where}: expected a mapping`, "INVALID_FRONTMATTER");
+	const fm = parsed;
+	if (typeof fm.pipeline !== "string" || fm.pipeline === "") throw new MarkdownParseError(`invalid .sverka.md frontmatter${where}: missing required 'pipeline' field`, "INVALID_FRONTMATTER");
+	return {
+		frontmatter: fm,
+		body: m[2]
+	};
+}
+function frontmatterTriggers(fm) {
+	return collectTriggerEntries(fm).map((entry, i) => toTrigger(entry, i));
+}
+/**
+* Normalize `triggers:` (array of objects) and `on:` (gh-aw shorthand:
+* string, list of kind strings, or map of kind → options) into uniform
+* entries. `triggers` wins when both are present.
+*/
+function collectTriggerEntries(fm) {
+	if (fm.triggers !== void 0) {
+		if (!Array.isArray(fm.triggers)) throw new MarkdownParseError("invalid .sverka.md frontmatter: 'triggers' must be an array", "INVALID_TRIGGER");
+		return fm.triggers.map((t) => {
+			if (typeof t !== "object" || t === null || typeof t.kind !== "string") throw new MarkdownParseError("invalid .sverka.md trigger: each entry needs a string 'kind'", "INVALID_TRIGGER");
+			const { kind, ...opts } = t;
+			return {
+				kind,
+				opts
+			};
+		});
+	}
+	if (fm.on === void 0) return [];
+	const on = fm.on;
+	if (typeof on === "string") return [{
+		kind: on,
+		opts: {}
+	}];
+	if (Array.isArray(on)) return on.map((kind) => {
+		if (typeof kind !== "string") throw new MarkdownParseError("invalid .sverka.md 'on': entries must be trigger kind strings", "INVALID_TRIGGER");
+		return {
+			kind,
+			opts: {}
+		};
+	});
+	if (typeof on === "object" && on !== null) return Object.entries(on).map(([kind, opts]) => ({
+		kind,
+		opts: typeof opts === "object" && opts !== null ? opts : {}
+	}));
+	throw new MarkdownParseError("invalid .sverka.md 'on': expected a trigger kind, list of kinds, or kind→options map", "INVALID_TRIGGER");
+}
+const FILTER_KEYS = [
+	"branches",
+	"tags",
+	"paths"
+];
+function toTrigger(entry, index) {
+	const { kind, opts } = entry;
+	const at = `trigger[${index}] (${kind})`;
+	const filter = buildFilter(opts, at);
+	switch (kind) {
+		case "push": return filter !== void 0 ? {
+			kind: "push",
+			filter
+		} : { kind: "push" };
+		case "changeRequest": return filter !== void 0 ? {
+			kind: "changeRequest",
+			filter
+		} : { kind: "changeRequest" };
+		case "manual": return filter !== void 0 ? {
+			kind: "manual",
+			filter
+		} : { kind: "manual" };
+		case "schedule": return toScheduleTrigger(opts, at);
+		case "comment": return toCommentTrigger(opts, at);
+		case "issue": return toIssueTrigger(opts, at);
+		default: throw new MarkdownParseError(`invalid .sverka.md ${at}: unknown trigger kind '${kind}'`, "INVALID_TRIGGER");
+	}
+}
+function toScheduleTrigger(opts, at) {
+	if (typeof opts.cron !== "string" || opts.cron === "") throw new MarkdownParseError(`invalid .sverka.md ${at}: schedule trigger requires a 'cron' string`, "INVALID_TRIGGER");
+	if (opts.timezone !== void 0 && typeof opts.timezone !== "string") throw new MarkdownParseError(`invalid .sverka.md ${at}: schedule 'timezone' must be a string`, "INVALID_TRIGGER");
+	return {
+		kind: "schedule",
+		cron: opts.cron,
+		...opts.timezone !== void 0 ? { timezone: opts.timezone } : {}
+	};
+}
+function toCommentTrigger(opts, at) {
+	const on = opts.on;
+	if (on !== void 0 && on !== "mergeRequest" && on !== "issue" && on !== "commit") throw new MarkdownParseError(`invalid .sverka.md ${at}: comment 'on' must be mergeRequest|issue|commit`, "INVALID_TRIGGER");
+	if (opts.mention !== void 0 && typeof opts.mention !== "string") throw new MarkdownParseError(`invalid .sverka.md ${at}: comment 'mention' must be a string`, "INVALID_TRIGGER");
+	return {
+		kind: "comment",
+		...opts.mention !== void 0 ? { mention: opts.mention } : {},
+		...on !== void 0 ? { on } : {}
+	};
+}
+function toIssueTrigger(opts, at) {
+	const action = opts.action;
+	if (action !== void 0 && action !== "opened" && action !== "reopened" && action !== "labeled") throw new MarkdownParseError(`invalid .sverka.md ${at}: issue 'action' must be opened|reopened|labeled`, "INVALID_TRIGGER");
+	const labels = opts.labels;
+	if (labels !== void 0 && (!Array.isArray(labels) || !labels.every((l) => typeof l === "string"))) throw new MarkdownParseError(`invalid .sverka.md ${at}: issue 'labels' must be an array of strings`, "INVALID_TRIGGER");
+	return {
+		kind: "issue",
+		...action !== void 0 ? { action } : {},
+		...labels !== void 0 ? { labels } : {}
+	};
+}
+function buildFilter(opts, at) {
+	const filter = {};
+	for (const key of FILTER_KEYS) {
+		const v = opts[key];
+		if (v === void 0) continue;
+		if (!Array.isArray(v) || !v.every((s) => typeof s === "string")) throw new MarkdownParseError(`invalid .sverka.md ${at}: '${key}' must be an array of strings`, "INVALID_TRIGGER");
+		filter[key] = v;
+	}
+	return Object.keys(filter).length > 0 ? filter : void 0;
+}
+const STEP_HEADING = /^##\s+(\S+)\s*$/;
+function parseSteps(body) {
+	const steps = [];
+	const lines = body.split("\n");
+	let i = 0;
+	while (i < lines.length) {
+		const heading = STEP_HEADING.exec(lines[i]);
+		if (heading === null) {
+			i++;
+			continue;
+		}
+		const id = heading[1];
+		const section = [];
+		let j = i + 1;
+		while (j < lines.length && !STEP_HEADING.test(lines[j])) {
+			section.push(lines[j]);
+			j++;
+		}
+		steps.push(parseStepSection(id, section));
+		i = j;
+	}
+	return steps;
+}
+/**
+* Parse one `- key: value` bullet line. Hand-rolled linear scan — a regex
+* over uncontrolled markdown is a ReDoS vector.
+*/
+function parseBulletLine(line) {
+	const isSpace = (c) => c !== void 0 && /\s/.test(c);
+	const isKeyChar = (c) => c !== void 0 && /[\w-]/.test(c);
+	if (!line.startsWith("-") || !isSpace(line[1])) return null;
+	let i = skipWhile(line, 1, isSpace);
+	if (!isKeyStart(line[i])) return null;
+	const keyStart = i;
+	i = skipWhile(line, i, isKeyChar);
+	const key = line.slice(keyStart, i);
+	i = skipWhile(line, i, isSpace);
+	if (line[i] !== ":") return null;
+	return {
+		key,
+		rest: line.slice(i + 1).trimStart()
+	};
+}
+function skipWhile(line, from, pred) {
+	let i = from;
+	while (i < line.length && pred(line[i])) i++;
+	return i;
+}
+function isKeyStart(c) {
+	return c !== void 0 && /[a-zA-Z_]/.test(c);
+}
+/**
+* Parse one `## step` section: `- key: value` bullets (indented blocks
+* belong to the preceding bullet). Non-bullet prose is ignored so a step
+* can carry documentation.
+*/
+function parseStepSection(id, lines) {
+	return toParsedStep(id, collectStepProps(id, lines));
+}
+/** Validate collected props and build the ParsedStep. */
+function toParsedStep(id, props) {
+	if (typeof props.command !== "string" || props.command === "") throw new MarkdownParseError(`invalid .sverka.md step '${id}': missing required '- command:' line`, "INVALID_STEP");
+	const dependsOn = props.dependsOn ?? props["depends_on"];
+	if (dependsOn !== void 0 && (!Array.isArray(dependsOn) || !dependsOn.every((d) => typeof d === "string"))) throw new MarkdownParseError(`invalid .sverka.md step '${id}': 'dependsOn' must be an array of step ids`, "INVALID_STEP");
+	if (props.timeout !== void 0 && (typeof props.timeout !== "number" || !Number.isFinite(props.timeout))) throw new MarkdownParseError(`invalid .sverka.md step '${id}': 'timeout' must be a number (ms)`, "INVALID_STEP");
+	if (props.image !== void 0 && typeof props.image !== "string") throw new MarkdownParseError(`invalid .sverka.md step '${id}': 'image' must be a string`, "INVALID_STEP");
+	return {
+		id,
+		command: props.command,
+		...dependsOn !== void 0 ? { dependsOn } : {},
+		...props.image !== void 0 ? { image: props.image } : {},
+		...props.timeout !== void 0 ? { timeout: props.timeout } : {},
+		...props.outputs !== void 0 ? { outputs: props.outputs } : {}
+	};
+}
+/**
+* Collect `- key: value` bullets (with indented continuation blocks) into
+* a props map. Non-bullet prose is ignored.
+*/
+function collectStepProps(id, lines) {
+	const props = {};
+	let i = 0;
+	while (i < lines.length) {
+		const bullet = parseBulletLine(lines[i]);
+		if (bullet === null) {
+			i++;
+			continue;
+		}
+		const { key, rest } = bullet;
+		if (rest === "") {
+			const block = [];
+			let j = i + 1;
+			while (j < lines.length && /^\s+\S/.test(lines[j])) {
+				block.push(lines[j]);
+				j++;
+			}
+			props[key] = block.length > 0 ? parseYamlScalar(block.join("\n"), id, key) : null;
+			i = j;
+		} else {
+			props[key] = parseYamlScalar(rest, id, key);
+			i++;
+		}
+	}
+	return props;
+}
+function parseYamlScalar(rest, stepId, key) {
+	try {
+		return parse(rest);
+	} catch (e) {
+		throw new MarkdownParseError(`invalid .sverka.md step '${stepId}': cannot parse '${key}' value: ${e instanceof Error ? e.message : String(e)}`, "INVALID_STEP", e);
+	}
+}
+function buildMarkdownPipeline(scope, fm, body, _filePath) {
+	const pipeline = new Pipeline(scope, fm.pipeline, { ...fm.inputs !== void 0 ? { inputs: fm.inputs } : {} });
+	const roots = parseSteps(body).map((step) => new ShellStep(pipeline, step.id, {
+		command: step.command,
+		...step.dependsOn !== void 0 ? { dependsOn: step.dependsOn } : {},
+		...step.image !== void 0 ? { runtime: {
+			mode: "container",
+			image: step.image
+		} } : {},
+		...step.timeout !== void 0 ? { timeout: step.timeout } : {},
+		...step.outputs !== void 0 ? { outputs: step.outputs } : {}
+	})).map((s) => s.node.id);
+	const triggers = frontmatterTriggers(fm);
+	const usedIds = /* @__PURE__ */ new Set();
+	for (const trigger of triggers) {
+		const base = `on-${trigger.kind}`;
+		let id = base;
+		let n = 2;
+		while (usedIds.has(id)) {
+			id = `${base}-${n}`;
+			n++;
+		}
+		const entry = new Entry(pipeline, id, {
+			trigger,
+			roots
+		});
+		usedIds.add(entry.node.id);
+	}
+}
+async function loadExtends(extendsPath, mdPath) {
+	const resolved = resolve(dirname(mdPath), extendsPath);
+	if (!existsSync(resolved)) throw new MarkdownParseError(`extends path does not resolve: ${extendsPath} (from ${mdPath})`, "EXTENDS_NOT_FOUND");
+	let mod;
+	try {
+		mod = await import(pathToFileURL(resolved).href);
+	} catch (e) {
+		throw new MarkdownParseError(`failed to load extends config ${extendsPath}: ${e instanceof Error ? e.message : String(e)}`, "EXTENDS_NOT_FOUND", e);
+	}
+	const construct = mod.project ?? mod.default;
+	if (typeof construct !== "object" || construct === null || !("node" in construct)) throw new MarkdownParseError(`extends config ${extendsPath} must export a Project or Pipeline`, "EXTENDS_NOT_FOUND");
+	return construct.node.scope ?? construct;
+}
+//#endregion
+export { $, CheckError, CompositionError, CoreError, DEFAULT_POLICY, DiscoveryError, MarkdownParseError, PlannerError, PlanningError, SdkError, agent, artifact, bindRunPlan, callPipeline, change, component, computeFingerprint, computePlanId, computeReachableSteps, createBaseline, createBuiltinResolver, createPlanner, createPolicy, createSverka, defineWorkflow, env, evaluatePolicy, event, execute, expandMatrixSteps, expr, extractFindings, filterOnlyNew, findConfig, git, image, images, inputs, loadBaseline, loadMarkdownFile, loadWorkflow, matrix, matrix$1 as matrixContext, normalizeSarif, parallel, parseMarkdown, pipeline, pipeline$1 as pipelineV0, plan, run, run$1 as runContext, saveBaseline, secrets, shell, status, task, toPlan, updateBaseline, validatePlan, when, when$1 as whenV0, workflow };
 
 //# sourceMappingURL=index.mjs.map