programgarden-core 1.16.0__tar.gz → 1.17.0__tar.gz

{programgarden_core-1.16.0 → programgarden_core-1.17.0}/PKG-INFO

@@ -1,15 +1,15 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.3
 Name: programgarden-core
-Version: 1.16.0
+Version: 1.17.0
 Summary: ProgramGarden Core - 노드 기반 DSL 핵심 타입 정의
-License-Expression: AGPL-3.0-or-later
+License: AGPL-3.0-or-later
 Author: 프로그램동산
 Author-email: coding@programgarden.com
 Requires-Python: >=3.12
+Classifier: License :: OSI Approved :: GNU Affero General Public License v3 or later (AGPLv3+)
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
-Classifier: Programming Language :: Python :: 3.14
 Requires-Dist: pydantic (>=2.0.0,<3.0.0)
 Description-Content-Type: text/markdown
 

{programgarden_core-1.16.0 → programgarden_core-1.17.0}/programgarden_core/__init__.py

@@ -126,6 +126,7 @@ __all__ = [
     "ExecutionError",
     "BalanceUnavailableError",
     "ConditionEvaluationError",
+    "MissingDependencyError",
     # Exceptions (Finance)
     "FinanceError",
     "AppKeyException",

{programgarden_core-1.16.0 → programgarden_core-1.17.0}/programgarden_core/exceptions.py

@@ -152,6 +152,45 @@ class ConditionEvaluationError(ExecutionError):
         super().__init__(message, node_id=node_id, details=details)
 
 
+class MissingDependencyError(ExecutionError):
+    """선택적 heavy 의존성(extra) 미설치/부분설치 — silent no-op 금지, 명시 에러.
+
+    Raised by community plugins/nodes that lazily import an optional heavy
+    dependency shipped behind a pyproject extra (e.g. ``portfolio`` →
+    pyportfolioopt, ``perf`` → quantstats). Importing must fail loud with a
+    concrete install hint instead of silently no-op'ing.
+
+    ``transitive=True`` distinguishes the case where the extra itself is
+    installed but one of its transitive dependencies is missing/broken
+    (e.g. quantstats present but ``pkg_resources``/matplotlib absent) from
+    the plain "extra not installed at all" case (``transitive=False``).
+    """
+
+    def __init__(
+        self,
+        message: str,
+        extra: Optional[str] = None,
+        package: Optional[str] = None,
+        install_hint: Optional[str] = None,
+        transitive: bool = False,
+        node_id: Optional[str] = None,
+        details: Optional[dict] = None,
+    ):
+        d = {
+            "code": "MISSING_OPTIONAL_DEPENDENCY",
+            "extra": extra,
+            "package": package,
+            "install_hint": install_hint,
+            "transitive": transitive,
+        }
+        d.update(details or {})
+        super().__init__(message, node_id=node_id, details=d)
+        self.extra = extra
+        self.package = package
+        self.install_hint = install_hint
+        self.transitive = transitive
+
+
 class DuplicateJobIdError(ProgramGardenError):
     """중복된 Job ID 오류
 

{programgarden_core-1.16.0 → programgarden_core-1.17.0}/programgarden_core/i18n/locales/en.json

@@ -66,6 +66,8 @@
   "nodes.FearGreedIndexNode.name": "Fear & Greed Index",
   "nodes.FundamentalDataNode.description": "Fetches company financial data via Financial Modeling Prep (FMP) API. Supports four data types: company profile, income statement, balance sheet, and key metrics. Configure period (annual/quarter) and limit (number of periods to fetch). Requires FMP API credentials. Outputs financial data array and query summary. Typical connection: WatchlistNode → FundamentalDataNode → ConditionNode (for fundamental screening) or → TableDisplayNode.",
   "nodes.FundamentalDataNode.name": "Fundamental Data (FMP)",
+  "nodes.PerformanceReportNode.name": "Performance Report (quantstats)",
+  "nodes.PerformanceReportNode.description": "Computes risk/return metrics (Sharpe, Sortino, max drawdown, CAGR, annualized volatility, Calmar) from an equity curve, price series, or return series using quantstats. Optionally computes beta and alpha against a benchmark series. Emits a drawdown time series and a formatted text report, and runs headless via the matplotlib Agg backend. Requires the optional 'perf' extra (pip install 'programgarden-community[perf]'); a missing or partially-installed extra raises a structured MissingDependencyError. Typical connection: BacktestEngineNode → PerformanceReportNode → TableDisplayNode.",
   "nodes.FieldMappingNode.description": "Renames field names in data objects to a standard format. Use to normalize external API responses so downstream nodes can access data with consistent field names (e.g., rename 'adj_close' to 'close', 'vol' to 'volume'). Configure mappings as from/to pairs. Outputs mapped_data with renamed fields. Set preserve_unmapped=true to keep original fields alongside renamed ones. Note: this node only renames fields — it does not generate or transform data values. Typical connection: HTTPRequestNode → FieldMappingNode → ConditionNode.",
   "nodes.FieldMappingNode.name": "Field Mapping",
   "nodes.FileReaderNode.description": "Reads PDF, TXT, CSV, JSON, MD, DOCX, and XLSX files and converts them to text and structured data. Supports batch processing of multiple files via file paths or base64 data input. The node handles parsing only — file sourcing (uploads, S3, HTTP, etc.) is handled externally. PDF: page range selection, table extraction support. CSV: configurable delimiter and header. XLSX: sheet selection. Security: only /app/data/ paths allowed, file size limits enforced. Outputs text array, data array, and metadata array (auto-iterate compatible). Typical connection: HTTPRequestNode → FileReaderNode → AIAgentNode (document analysis) or → ConditionNode. Can be used as an AI Agent tool.",
@@ -323,6 +325,12 @@
   "fields.FundamentalDataNode.limit": "Number of periods to fetch (most recent N). Default 1.",
   "fields.FundamentalDataNode.timeout_seconds": "API request timeout (seconds). Default 30s.",
   "fields.FundamentalDataNode.resilience": "Retry and fallback settings for API call failures",
+  "fields.PerformanceReportNode.data": "Input series: an array of numbers or of {date, <value_field>} objects (equity curve, price levels, or periodic returns).",
+  "fields.PerformanceReportNode.data_kind": "Kind of the input series: 'equity', 'prices', or 'returns'. Level series ('equity'/'prices') are converted to returns internally.",
+  "fields.PerformanceReportNode.value_field": "Key holding the numeric value when rows are objects (default 'close'; falls back to value/equity/return).",
+  "fields.PerformanceReportNode.benchmark": "Optional benchmark series (same format as data). When provided, beta and alpha are added to metrics.",
+  "fields.PerformanceReportNode.periods_per_year": "Annualization factor (252 for daily, 12 for monthly data). Default 252.",
+  "fields.PerformanceReportNode.risk_free_rate": "Annual risk-free rate as a fraction (e.g. 0.02 for 2%) for Sharpe/Sortino. Default 0.",
   "fields.HTTPRequestNode.body": "Request body for POST/PUT/PATCH. Automatically serialized to JSON.",
   "fields.HTTPRequestNode.credential_id": "Credential ID for authentication. Supports: http_bearer, http_header, http_basic, http_query",
   "fields.HTTPRequestNode.headers": "HTTP headers. Click + to add custom headers (e.g., Content-Type, X-API-Key).",
@@ -652,6 +660,12 @@
   "fieldNames.FundamentalDataNode.limit": "Limit",
   "fieldNames.FundamentalDataNode.timeout_seconds": "Timeout (sec)",
   "fieldNames.FundamentalDataNode.resilience": "Resilience",
+  "fieldNames.PerformanceReportNode.data": "Data Series",
+  "fieldNames.PerformanceReportNode.data_kind": "Data Kind",
+  "fieldNames.PerformanceReportNode.value_field": "Value Field",
+  "fieldNames.PerformanceReportNode.benchmark": "Benchmark",
+  "fieldNames.PerformanceReportNode.periods_per_year": "Periods / Year",
+  "fieldNames.PerformanceReportNode.risk_free_rate": "Risk-Free Rate",
   "fieldNames.HTTPRequestNode.body": "Request Body",
   "fieldNames.HTTPRequestNode.credential_id": "Credential",
   "fieldNames.HTTPRequestNode.headers": "Headers",
@@ -871,6 +885,10 @@
   "outputs.FearGreedIndexNode.value": "Fear & Greed Index (0~100)",
   "outputs.FundamentalDataNode.data": "Financial data array [{symbol, exchange, ...}]",
   "outputs.FundamentalDataNode.summary": "Query summary {data_type, symbol_count, record_count}",
+  "outputs.PerformanceReportNode.metrics": "Metrics object {sharpe, sortino, max_drawdown, cagr, volatility, calmar[, beta, alpha]} (null on insufficient data).",
+  "outputs.PerformanceReportNode.report": "Formatted multi-line performance report text.",
+  "outputs.PerformanceReportNode.drawdown_series": "Drawdown time series as an array of {date, drawdown}.",
+  "outputs.PerformanceReportNode.summary": "Summary {observations, return_points, data_kind, has_benchmark[, error]}.",
   "outputs.LLMModelNode.connection": "LLM connection info (connect to AI Agent node's ai_model port)",
   "outputs.MarketStatusNode.statuses": "Real-time market status list. Each entry: {market: canonical key (e.g. 'US'), jangubun: raw LS code (e.g. '9'), jstatus: raw LS status code (e.g. '21'), jstatus_label: English status label from the internal technical table (e.g. 'Market open'), is_open: bool respecting include_extended_hours, is_regular_open: regular-hours only, is_extended_open: includes pre/after-market, updated_at: ISO8601 timestamp}. Markets that have not received an event yet stay at jstatus='unknown' with is_open=False. The jstatus_label field is English-only (internal technical code table, not UI-translated).",
   "outputs.MarketStatusNode.event": "Most recent status transition event. Shape: {market, jstatus, jstatus_label, prev_jstatus, prev_jstatus_label, transitioned_at}. None until the first event arrives.",

{programgarden_core-1.16.0 → programgarden_core-1.17.0}/programgarden_core/i18n/locales/ko.json

@@ -70,6 +70,8 @@
   "nodes.FearGreedIndexNode.name": "공포/탐욕 지수",
   "nodes.FundamentalDataNode.description": "Financial Modeling Prep (FMP) API로 기업 재무 데이터를 조회합니다. 4가지 데이터 유형: 기업 프로필, 손익계산서, 대차대조표, 핵심 지표. 기간(연간/분기)과 조회 수(최근 N기)를 설정합니다. FMP API 인증 정보 필요. 출력: 재무 데이터 배열, 조회 요약. 일반적인 연결: WatchlistNode → FundamentalDataNode → ConditionNode (펀더멘털 스크리닝) 또는 → TableDisplayNode.",
   "nodes.FundamentalDataNode.name": "재무 데이터 (FMP)",
+  "nodes.PerformanceReportNode.name": "성과 리포트 (quantstats)",
+  "nodes.PerformanceReportNode.description": "자산곡선(equity)·가격·수익률 시계열로부터 quantstats 로 리스크·수익 지표(Sharpe, Sortino, 최대낙폭, CAGR, 연율 변동성, Calmar)를 산출합니다. 벤치마크 시계열을 지정하면 beta/alpha 를 추가로 계산합니다. 낙폭 시계열과 서식 리포트 텍스트를 출력하며, matplotlib Agg 백엔드로 헤드리스 동작합니다. 선택 'perf' extra 필요(pip install 'programgarden-community[perf]') — 미설치/부분설치 시 구조화된 MissingDependencyError 를 발생시킵니다. 대표 연결: BacktestEngineNode → PerformanceReportNode → TableDisplayNode.",
   "nodes.HTTPRequestNode.description": "GET, POST, PUT, PATCH, DELETE를 지원하는 외부 REST API 호출 노드입니다. URL({{ }} 표현식 지원), 헤더, 쿼리 파라미터, JSON 요청 본문을 설정합니다. 인증 방식: Bearer 토큰, 헤더 키, 기본 인증, 쿼리 파라미터. 서버 에러(5xx), 속도 제한(429), 네트워크 장애 시 자동 재시도 기능 내장. 출력: 응답 데이터, HTTP 상태 코드, 응답 헤더, 응답 시간(ms). 실시간 데이터 소스 연결 시 ThrottleNode 필수. 일반적인 연결: ThrottleNode → HTTPRequestNode → FieldMappingNode. AI Agent 도구로 사용 가능.",
   "nodes.HTTPRequestNode.name": "HTTP 요청",
   "nodes.HistoricalDataNode.description": "지정 기간의 과거 OHLCV(시가, 고가, 저가, 종가, 거래량) 차트 데이터를 조회합니다. 봉 종류: 1분, 5분, 15분, 1시간, 일봉, 주봉, 월봉. 수정주가(주식 분할/배당 반영) 활성화 권장(백테스트용). 이전 노드가 여러 종목을 출력하면 자동 반복 실행. 상위 BrokerNode 연결 필수. 일반적인 연결: WatchlistNode → HistoricalDataNode → ConditionNode 또는 → BacktestEngineNode. AI Agent 도구로 사용 가능.",
@@ -323,6 +325,12 @@
   "fields.FundamentalDataNode.limit": "가져올 기간 수 (최근 N개). 기본 1.",
   "fields.FundamentalDataNode.timeout_seconds": "API 요청 타임아웃 (초). 기본 30초.",
   "fields.FundamentalDataNode.resilience": "API 호출 실패 시 재시도 및 폴백 설정",
+  "fields.PerformanceReportNode.data": "입력 시계열: 숫자 배열 또는 {date, <value_field>} 객체 배열(자산곡선/가격/수익률).",
+  "fields.PerformanceReportNode.data_kind": "입력 종류: 'equity'/'prices'/'returns'. 레벨 시계열('equity'/'prices')은 내부에서 수익률로 변환됩니다.",
+  "fields.PerformanceReportNode.value_field": "행이 객체일 때 숫자 값을 담은 키(기본 'close'; value/equity/return 폴백).",
+  "fields.PerformanceReportNode.benchmark": "선택 벤치마크 시계열(data 와 동일 형식). 지정 시 beta/alpha 가 지표에 추가됩니다.",
+  "fields.PerformanceReportNode.periods_per_year": "연율화 계수(일간 252, 월간 12). 기본 252.",
+  "fields.PerformanceReportNode.risk_free_rate": "무위험 수익률(소수, 예 0.02=2%) — Sharpe/Sortino용. 기본 0.",
   "fields.HTTPRequestNode.body": "요청 본문 (POST/PUT/PATCH용). 자동으로 JSON 직렬화됨.",
   "fields.HTTPRequestNode.credential_id": "인증정보 ID. 지원: http_bearer, http_header, http_basic, http_query",
   "fields.HTTPRequestNode.headers": "HTTP 헤더. + 버튼으로 커스텀 헤더 추가 (예: Content-Type, X-API-Key).",
@@ -652,6 +660,12 @@
   "fieldNames.FundamentalDataNode.limit": "조회수",
   "fieldNames.FundamentalDataNode.timeout_seconds": "타임아웃(초)",
   "fieldNames.FundamentalDataNode.resilience": "재시도설정",
+  "fieldNames.PerformanceReportNode.data": "데이터 시계열",
+  "fieldNames.PerformanceReportNode.data_kind": "데이터 종류",
+  "fieldNames.PerformanceReportNode.value_field": "값 필드",
+  "fieldNames.PerformanceReportNode.benchmark": "벤치마크",
+  "fieldNames.PerformanceReportNode.periods_per_year": "연간 관측수",
+  "fieldNames.PerformanceReportNode.risk_free_rate": "무위험 수익률",
   "fieldNames.HTTPRequestNode.body": "요청본문",
   "fieldNames.HTTPRequestNode.credential_id": "인증정보",
   "fieldNames.HTTPRequestNode.headers": "헤더",
@@ -871,6 +885,10 @@
   "outputs.FearGreedIndexNode.value": "공포/탐욕 지수 (0~100)",
   "outputs.FundamentalDataNode.data": "재무 데이터 배열 [{symbol, exchange, ...}]",
   "outputs.FundamentalDataNode.summary": "조회 요약 {data_type, symbol_count, record_count}",
+  "outputs.PerformanceReportNode.metrics": "지표 객체 {sharpe, sortino, max_drawdown, cagr, volatility, calmar[, beta, alpha]} (데이터 부족 시 null).",
+  "outputs.PerformanceReportNode.report": "서식 성과 리포트 텍스트.",
+  "outputs.PerformanceReportNode.drawdown_series": "낙폭 시계열 [{date, drawdown}] 배열.",
+  "outputs.PerformanceReportNode.summary": "요약 {observations, return_points, data_kind, has_benchmark[, error]}.",
   "outputs.LLMModelNode.connection": "LLM 연결 정보 (AI 에이전트 노드의 ai_model 포트에 연결)",
   "outputs.MarketStatusNode.statuses": "실시간 시장 상태 리스트. 각 항목: {market: 표준 키(예: 'US'), jangubun: 원시 LS 코드(예: '9'), jstatus: 원시 상태 코드(예: '21'), jstatus_label: 내부 기술 테이블 기반 영문 상태 레이블(예: 'Market open'), is_open: include_extended_hours 반영한 bool, is_regular_open: 정규장만, is_extended_open: 프리/애프터마켓 포함, updated_at: ISO8601 타임스탬프}. 아직 이벤트를 수신하지 않은 시장은 jstatus='unknown' + is_open=False 상태로 유지됩니다. jstatus_label 필드값은 영문 (내부 기술 코드 테이블 기반, UI 번역 대상 아님).",
   "outputs.MarketStatusNode.event": "최신 상태 전이 이벤트. shape: {market, jstatus, jstatus_label, prev_jstatus, prev_jstatus_label, transitioned_at}. 첫 이벤트 수신 전까지 None.",

{programgarden_core-1.16.0 → programgarden_core-1.17.0}/programgarden_core/nodes/code.py

@@ -30,6 +30,22 @@ from programgarden_core.nodes.base import (
     OutputPort,
 )
 
+# ── Single source of truth for the sandbox import whitelist ─────────────────
+# The CodeNode sandbox's allowed-import set is owned by
+# programgarden_core.code_node.DEFAULT_ALLOWED_IMPORTS. Every AI-facing rendering
+# below (the `code` field help_text, _node_guide, _anti_patterns) is DERIVED from
+# it here — never hand-copied — so the schema surface can never drift from the
+# enforced whitelist. Guarded by test_codenode_allowed_imports_surface_no_drift.
+# code_node.py is stdlib-only, so this top-level import introduces no cycle.
+# NOTE: this reflects the SHIPPED default. An embedding host MAY widen the
+# whitelist at call time via `allowed_imports=`; this static surface does not
+# attempt to mirror host extensions (the shipped WorkflowExecutor pins the
+# default, so it is authoritative for chatbot-generated workflows).
+from programgarden_core.code_node import DEFAULT_ALLOWED_IMPORTS
+
+_ALLOWED_IMPORTS_SORTED: List[str] = sorted(DEFAULT_ALLOWED_IMPORTS)
+_ALLOWED_IMPORTS_CSV: str = ", ".join(_ALLOWED_IMPORTS_SORTED)
+
 
 class CodeNode(BaseNode):
     """
@@ -155,6 +171,11 @@ class CodeNode(BaseNode):
             "reason": "The binding layer checks port existence but never coerces shape; a wrong shape does not fail at the CodeNode — it fails downstream where the typed node reads it (e.g. order nodes expect the Symbol Data Format array of {symbol, exchange, ...}).",
             "alternative": "When feeding a typed market/order/condition node, return the standard shape: a list of {symbol, exchange, ...} dicts. When feeding a display/sink or If/Condition scalar, any shape works.",
         },
+        {
+            "pattern": "Importing a third-party numeric/data library — numpy, pandas, scipy, pandas-ta, TA-Lib, scikit-learn — inside execute()",
+            "reason": f"The sandbox enforces an import whitelist of pure-computation stdlib only ({_ALLOWED_IMPORTS_CSV}); any other import is rejected before the code runs with CODE_NODE_FORBIDDEN, and these libraries are not available in the sandbox.",
+            "alternative": "Hand-roll the calculation in pure Python using the allowed stdlib (math, statistics, collections, itertools, functools). E.g. a rolling mean via sum()/len over a slice, an RSI via a manual gain/loss loop, a covariance via statistics — no numpy/pandas needed.",
+        },
     ]
     _examples: ClassVar[List[Dict[str, Any]]] = [
         {
@@ -235,10 +256,27 @@ class CodeNode(BaseNode):
         ],
         "pitfalls": [
             "execute() must be defined exactly with that name; a missing/renamed function is rejected before run (CODE_NODE_NO_EXECUTE).",
-            "Only pure-computation stdlib imports are allowed (math, statistics, json, datetime, ...); os/socket/urllib/subprocess/open and introspection dunders are blocked (CODE_NODE_FORBIDDEN).",
+            f"Imports are whitelisted to pure-computation stdlib only — exactly: {_ALLOWED_IMPORTS_CSV}. "
+            "ANY other import is rejected before run with CODE_NODE_FORBIDDEN: third-party numeric/data "
+            "libraries (numpy, pandas, scipy, pandas-ta, TA-Lib, scikit-learn) are NOT available in the "
+            "sandbox, and I/O/system stdlib (os, sys, socket, subprocess, urllib, http, requests, open) is "
+            "blocked. Re-implement such functionality by hand in pure Python using the allowed stdlib.",
             "No credential/broker/network access — CodeNode cannot place orders or fetch data itself; feed it data from typed nodes.",
             "Declared output ports must all appear as keys in the returned dict, or they resolve to None.",
         ],
+        # Structured, machine-consumable whitelist for the AI chatbot — DERIVED
+        # from DEFAULT_ALLOWED_IMPORTS (single source of truth), never hand-listed.
+        "allowed_imports": list(_ALLOWED_IMPORTS_SORTED),
+        "import_policy": (
+            "The sandbox enforces an import WHITELIST. Only the modules in 'allowed_imports' "
+            "(pure-computation stdlib, shipped default) may be imported. Every non-stdlib "
+            "library — numpy, pandas, scipy, pandas-ta, TA-Lib, scikit-learn, etc. — and "
+            "every I/O/system stdlib module (os, sys, socket, subprocess, urllib, http, "
+            "requests, open) is rejected before execution with CODE_NODE_FORBIDDEN. If you "
+            "need such functionality, HAND-ROLL it in pure Python using only the allowed "
+            "modules (e.g. compute an SMA/RSI/z-score with math + statistics + collections "
+            "instead of importing pandas/numpy)."
+        ),
     }
 
     _inputs: ClassVar[List[InputPort]] = [
@@ -250,9 +288,9 @@ class CodeNode(BaseNode):
         OutputPort(name="result", type="any", description="i18n:outputs.CodeNode.result"),
     ]
 
-    _version: ClassVar[str] = "1.0.0"
-    _updated_at: ClassVar[str] = "2026-07-08"
-    _change_note: ClassVar[Optional[str]] = "Initial CodeNode (replaces the removed Dynamic_* injection mechanism)."
+    _version: ClassVar[str] = "1.0.1"
+    _updated_at: ClassVar[str] = "2026-07-11"
+    _change_note: ClassVar[Optional[str]] = "Surface sandbox import whitelist (from DEFAULT_ALLOWED_IMPORTS) in help_text/node_guide + numpy/pandas anti-pattern."
 
     def get_outputs(self) -> List[OutputPort]:
         """Build output ports from the per-instance `outputs` declaration.
@@ -296,7 +334,14 @@ class CodeNode(BaseNode):
                 ui_component=UIComponent.CUSTOM_CODE_EDITOR,
                 example="async def execute(data, params, context):\n    return {'result': data}",
                 expected_type="str",
-                help_text="Define async def execute(data, params, context). Sandboxed: no credentials/network/filesystem.",
+                help_text=(
+                    "Define async def execute(data, params, context). Sandboxed: no "
+                    "credentials/network/filesystem. Imports are whitelisted to pure-"
+                    f"computation stdlib only (shipped default): {_ALLOWED_IMPORTS_CSV}. "
+                    "Any other import — numpy, pandas, scipy, pandas-ta, TA-Lib, os, sys, "
+                    "socket, subprocess, urllib, requests, open — is rejected with "
+                    "CODE_NODE_FORBIDDEN; hand-roll such logic in pure Python."
+                ),
             ),
             "outputs": FieldSchema(
                 name="outputs",

{programgarden_core-1.16.0 → programgarden_core-1.17.0}/pyproject.toml

@@ -5,7 +5,7 @@ authors = [
 homepage = "https://programgarden.com"
 requires-python = ">=3.12"
 name = "programgarden-core"
-version = "1.16.0"
+version = "1.17.0"
 license = "AGPL-3.0-or-later"
 description = "ProgramGarden Core - 노드 기반 DSL 핵심 타입 정의"
 readme = "README.md"