@agimon-ai/po-core 0.0.0-alpha.106 → 0.0.0-alpha.108

package/dist/inputTemplate.cjs

@@ -0,0 +1,5 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_index = require("./src/services/inputTemplate/index.cjs");
+exports.hasInputTemplate = require_index.hasInputTemplate;
+exports.parseInputTemplate = require_index.parseInputTemplate;
+exports.renderInputTemplate = require_index.renderInputTemplate;

package/dist/inputTemplate.d.mts

@@ -0,0 +1,3 @@
+import { InputTemplateOptions, InputTemplatePart } from "./src/services/inputTemplate/type.mjs";
+import { hasInputTemplate, parseInputTemplate, renderInputTemplate } from "./src/services/inputTemplate/index.mjs";
+export { type InputTemplateOptions, type InputTemplatePart, hasInputTemplate, parseInputTemplate, renderInputTemplate };

package/dist/inputTemplate.mjs

@@ -0,0 +1 @@
+export { hasInputTemplate, parseInputTemplate, renderInputTemplate } from "./src/services/inputTemplate/index.mjs";

package/dist/src/services/inputTemplate/index.cjs

@@ -0,0 +1,120 @@
+let liquidjs = require("liquidjs");
+//#region src/services/inputTemplate/index.ts
+const MAX_BYTES = 65536;
+const MAX_REFERENCES = 16;
+const NAME = /^[A-Za-z_][A-Za-z0-9_]*$/u;
+const FORBIDDEN = /* @__PURE__ */ new Set([
+	"__proto__",
+	"prototype",
+	"constructor"
+]);
+const liquid = new liquidjs.Liquid({
+	strictVariables: true,
+	strictFilters: true,
+	ownPropertyOnly: true
+});
+function invalid() {
+	return /* @__PURE__ */ new Error("Unsupported input template");
+}
+function validName(name) {
+	return NAME.test(name) && !FORBIDDEN.has(name);
+}
+/** Includes unsupported template openings so they fail closed rather than being typed literally. */
+function hasInputTemplate(value) {
+	return /\$\{|\{\{|\{%/u.test(value);
+}
+/** Interpolation only. No tags, filters, dynamic keys, expressions or recursive evaluation. */
+function parseInputTemplate(value) {
+	if (typeof value !== "string" || new TextEncoder().encode(value).length > MAX_BYTES) throw invalid();
+	const parts = [];
+	const openings = /\$\{|\{\{|\{%/gu;
+	let cursor = 0;
+	let references = 0;
+	for (let match = openings.exec(value); match; match = openings.exec(value)) {
+		const open = match.index;
+		if (open > cursor) parts.push({
+			kind: "text",
+			text: value.slice(cursor, open)
+		});
+		if (match[0] === "{%") throw invalid();
+		const closing = match[0] === "${" ? "}" : "}}";
+		const close = value.indexOf(closing, open + 2);
+		if (close === -1) throw invalid();
+		const reference = /^(env|secret|secrets)\.([A-Za-z_][A-Za-z0-9_]*)$/u.exec(value.slice(open + 2, close).trim());
+		if (!reference || !validName(reference[2]) || ++references > MAX_REFERENCES) throw invalid();
+		parts.push({
+			kind: reference[1] === "env" ? "env" : "secret",
+			name: reference[2]
+		});
+		cursor = close + closing.length;
+		openings.lastIndex = cursor;
+	}
+	if (references === 0) throw invalid();
+	if (cursor < value.length) parts.push({
+		kind: "text",
+		text: value.slice(cursor)
+	});
+	return parts;
+}
+async function abortable(work, signal) {
+	signal.throwIfAborted();
+	let cancel = () => {};
+	const aborted = new Promise((_resolve, reject) => {
+		cancel = () => reject(invalid());
+		signal.addEventListener("abort", cancel, { once: true });
+	});
+	try {
+		return await Promise.race([work, aborted]);
+	} finally {
+		signal.removeEventListener("abort", cancel);
+	}
+}
+/** Resolves host-declared values, then renders them as Liquid data, never as Liquid source. */
+async function renderInputTemplate(parts, options) {
+	try {
+		let references = 0;
+		let bytes = 0;
+		for (const part of parts) if (part.kind === "text" && typeof part.text === "string") bytes += new TextEncoder().encode(part.text).length;
+		else if ((part.kind === "env" || part.kind === "secret") && validName(part.name)) references += 1;
+		else throw invalid();
+		if (references > MAX_REFERENCES || bytes > MAX_BYTES || parts.length > 33) throw invalid();
+		const values = Object.create(null);
+		const cache = /* @__PURE__ */ new Map();
+		let source = "";
+		for (const [index, part] of parts.entries()) {
+			options.signal.throwIfAborted();
+			let value;
+			if (part.kind === "text") value = part.text;
+			else {
+				const key = `${part.kind}.${part.name}`;
+				if (cache.has(key)) value = cache.get(key);
+				else {
+					const resolved = part.kind === "env" ? options.readEnv(part.name) : await abortable(Promise.resolve().then(() => {
+						options.signal.throwIfAborted();
+						return options.resolveSecret(part.name);
+					}), options.signal);
+					if (typeof resolved !== "string" || part.kind === "secret" && !resolved) throw invalid();
+					value = resolved;
+					if (part.kind === "secret") options.onResolved(value);
+					cache.set(key, value);
+				}
+			}
+			bytes += part.kind === "text" ? 0 : new TextEncoder().encode(value).length;
+			if (bytes > MAX_BYTES) throw invalid();
+			values[`v${index}`] = value;
+			source += `{{ values.v${index} }}`;
+		}
+		options.signal.throwIfAborted();
+		const rendered = await liquid.parseAndRender(source, { values });
+		options.signal.throwIfAborted();
+		return rendered;
+	} catch {
+		throw new Error("Input template resolution failed");
+	}
+}
+//#endregion
+exports.hasInputTemplate = hasInputTemplate;
+exports.parseInputTemplate = parseInputTemplate;
+exports.renderInputTemplate = renderInputTemplate;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/inputTemplate/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["Liquid"],"sources":["../../../../src/services/inputTemplate/index.ts"],"sourcesContent":["import { Liquid } from 'liquidjs';\n\nimport type { InputTemplateOptions, InputTemplatePart } from './type';\n\nconst MAX_BYTES = 65_536;\nconst MAX_REFERENCES = 16;\nconst NAME = /^[A-Za-z_][A-Za-z0-9_]*$/u;\nconst FORBIDDEN = new Set(['__proto__', 'prototype', 'constructor']);\nconst liquid = new Liquid({ strictVariables: true, strictFilters: true, ownPropertyOnly: true });\n\nfunction invalid(): Error {\n  return new Error('Unsupported input template');\n}\n\nfunction validName(name: string): boolean {\n  return NAME.test(name) && !FORBIDDEN.has(name);\n}\n\n/** Includes unsupported template openings so they fail closed rather than being typed literally. */\nexport function hasInputTemplate(value: string): boolean {\n  return /\\$\\{|\\{\\{|\\{%/u.test(value);\n}\n\n/** Interpolation only. No tags, filters, dynamic keys, expressions or recursive evaluation. */\nexport function parseInputTemplate(value: string): InputTemplatePart[] {\n  if (typeof value !== 'string' || new TextEncoder().encode(value).length > MAX_BYTES) throw invalid();\n  const parts: InputTemplatePart[] = [];\n  const openings = /\\$\\{|\\{\\{|\\{%/gu;\n  let cursor = 0;\n  let references = 0;\n  for (let match = openings.exec(value); match; match = openings.exec(value)) {\n    const open = match.index;\n    if (open > cursor) parts.push({ kind: 'text', text: value.slice(cursor, open) });\n    if (match[0] === '{%') throw invalid();\n    const closing = match[0] === '${' ? '}' : '}}';\n    const close = value.indexOf(closing, open + 2);\n    if (close === -1) throw invalid();\n    const reference = /^(env|secret|secrets)\\.([A-Za-z_][A-Za-z0-9_]*)$/u.exec(value.slice(open + 2, close).trim());\n    if (!reference || !validName(reference[2]!) || ++references > MAX_REFERENCES) throw invalid();\n    parts.push({ kind: reference[1] === 'env' ? 'env' : 'secret', name: reference[2]! });\n    cursor = close + closing.length;\n    openings.lastIndex = cursor;\n  }\n  if (references === 0) throw invalid();\n  if (cursor < value.length) parts.push({ kind: 'text', text: value.slice(cursor) });\n  return parts;\n}\n\nasync function abortable<T>(work: Promise<T>, signal: AbortSignal): Promise<T> {\n  signal.throwIfAborted();\n  let cancel = () => {};\n  const aborted = new Promise<never>((_resolve, reject) => {\n    cancel = () => reject(invalid());\n    signal.addEventListener('abort', cancel, { once: true });\n  });\n  try {\n    return await Promise.race([work, aborted]);\n  } finally {\n    signal.removeEventListener('abort', cancel);\n  }\n}\n\n/** Resolves host-declared values, then renders them as Liquid data, never as Liquid source. */\nexport async function renderInputTemplate(\n  parts: readonly InputTemplatePart[],\n  options: InputTemplateOptions,\n): Promise<string> {\n  try {\n    let references = 0;\n    let bytes = 0;\n    // Validate the whole input before the first lookup, including caller-constructed parts.\n    for (const part of parts) {\n      if (part.kind === 'text' && typeof part.text === 'string') bytes += new TextEncoder().encode(part.text).length;\n      else if ((part.kind === 'env' || part.kind === 'secret') && validName(part.name)) references += 1;\n      else throw invalid();\n    }\n    if (references > MAX_REFERENCES || bytes > MAX_BYTES || parts.length > MAX_REFERENCES * 2 + 1) throw invalid();\n    const values: Record<string, string> = Object.create(null);\n    const cache = new Map<string, string>();\n    let source = '';\n    for (const [index, part] of parts.entries()) {\n      options.signal.throwIfAborted();\n      let value: string;\n      if (part.kind === 'text') value = part.text;\n      else {\n        const key = `${part.kind}.${part.name}`;\n        if (cache.has(key)) value = cache.get(key)!;\n        else {\n          const resolved =\n            part.kind === 'env'\n              ? options.readEnv(part.name)\n              : await abortable(\n                  Promise.resolve().then(() => {\n                    options.signal.throwIfAborted();\n                    return options.resolveSecret(part.name);\n                  }),\n                  options.signal,\n                );\n          if (typeof resolved !== 'string' || (part.kind === 'secret' && !resolved)) throw invalid();\n          value = resolved;\n          if (part.kind === 'secret') options.onResolved(value);\n          cache.set(key, value);\n        }\n      }\n      bytes += part.kind === 'text' ? 0 : new TextEncoder().encode(value).length;\n      if (bytes > MAX_BYTES) throw invalid();\n      values[`v${index}`] = value;\n      source += `{{ values.v${index} }}`;\n    }\n    options.signal.throwIfAborted();\n    const rendered = await liquid.parseAndRender(source, { values });\n    options.signal.throwIfAborted();\n    return rendered;\n  } catch {\n    throw new Error('Input template resolution failed');\n  }\n}\n"],"mappings":";;AAIA,MAAM,YAAY;AAClB,MAAM,iBAAiB;AACvB,MAAM,OAAO;AACb,MAAM,4BAAY,IAAI,IAAI;CAAC;CAAa;CAAa;AAAa,CAAC;AACnE,MAAM,SAAS,IAAIA,SAAAA,OAAO;CAAE,iBAAiB;CAAM,eAAe;CAAM,iBAAiB;AAAK,CAAC;AAE/F,SAAS,UAAiB;CACxB,uBAAO,IAAI,MAAM,4BAA4B;AAC/C;AAEA,SAAS,UAAU,MAAuB;CACxC,OAAO,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI;AAC/C;;AAGA,SAAgB,iBAAiB,OAAwB;CACvD,OAAO,iBAAiB,KAAK,KAAK;AACpC;;AAGA,SAAgB,mBAAmB,OAAoC;CACrE,IAAI,OAAO,UAAU,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,SAAS,WAAW,MAAM,QAAQ;CACnG,MAAM,QAA6B,CAAC;CACpC,MAAM,WAAW;CACjB,IAAI,SAAS;CACb,IAAI,aAAa;CACjB,KAAK,IAAI,QAAQ,SAAS,KAAK,KAAK,GAAG,OAAO,QAAQ,SAAS,KAAK,KAAK,GAAG;EAC1E,MAAM,OAAO,MAAM;EACnB,IAAI,OAAO,QAAQ,MAAM,KAAK;GAAE,MAAM;GAAQ,MAAM,MAAM,MAAM,QAAQ,IAAI;EAAE,CAAC;EAC/E,IAAI,MAAM,OAAO,MAAM,MAAM,QAAQ;EACrC,MAAM,UAAU,MAAM,OAAO,OAAO,MAAM;EAC1C,MAAM,QAAQ,MAAM,QAAQ,SAAS,OAAO,CAAC;EAC7C,IAAI,UAAU,IAAI,MAAM,QAAQ;EAChC,MAAM,YAAY,oDAAoD,KAAK,MAAM,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;EAC9G,IAAI,CAAC,aAAa,CAAC,UAAU,UAAU,EAAG,KAAK,EAAE,aAAa,gBAAgB,MAAM,QAAQ;EAC5F,MAAM,KAAK;GAAE,MAAM,UAAU,OAAO,QAAQ,QAAQ;GAAU,MAAM,UAAU;EAAI,CAAC;EACnF,SAAS,QAAQ,QAAQ;EACzB,SAAS,YAAY;CACvB;CACA,IAAI,eAAe,GAAG,MAAM,QAAQ;CACpC,IAAI,SAAS,MAAM,QAAQ,MAAM,KAAK;EAAE,MAAM;EAAQ,MAAM,MAAM,MAAM,MAAM;CAAE,CAAC;CACjF,OAAO;AACT;AAEA,eAAe,UAAa,MAAkB,QAAiC;CAC7E,OAAO,eAAe;CACtB,IAAI,eAAe,CAAC;CACpB,MAAM,UAAU,IAAI,SAAgB,UAAU,WAAW;EACvD,eAAe,OAAO,QAAQ,CAAC;EAC/B,OAAO,iBAAiB,SAAS,QAAQ,EAAE,MAAM,KAAK,CAAC;CACzD,CAAC;CACD,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,OAAO,CAAC;CAC3C,UAAU;EACR,OAAO,oBAAoB,SAAS,MAAM;CAC5C;AACF;;AAGA,eAAsB,oBACpB,OACA,SACiB;CACjB,IAAI;EACF,IAAI,aAAa;EACjB,IAAI,QAAQ;EAEZ,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,SAAS,UAAU,OAAO,KAAK,SAAS,UAAU,SAAS,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;OACnG,KAAK,KAAK,SAAS,SAAS,KAAK,SAAS,aAAa,UAAU,KAAK,IAAI,GAAG,cAAc;OAC3F,MAAM,QAAQ;EAErB,IAAI,aAAa,kBAAkB,QAAQ,aAAa,MAAM,SAAS,IAAwB,MAAM,QAAQ;EAC7G,MAAM,SAAiC,OAAO,OAAO,IAAI;EACzD,MAAM,wBAAQ,IAAI,IAAoB;EACtC,IAAI,SAAS;EACb,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GAAG;GAC3C,QAAQ,OAAO,eAAe;GAC9B,IAAI;GACJ,IAAI,KAAK,SAAS,QAAQ,QAAQ,KAAK;QAClC;IACH,MAAM,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK;IACjC,IAAI,MAAM,IAAI,GAAG,GAAG,QAAQ,MAAM,IAAI,GAAG;SACpC;KACH,MAAM,WACJ,KAAK,SAAS,QACV,QAAQ,QAAQ,KAAK,IAAI,IACzB,MAAM,UACJ,QAAQ,QAAQ,CAAC,CAAC,WAAW;MAC3B,QAAQ,OAAO,eAAe;MAC9B,OAAO,QAAQ,cAAc,KAAK,IAAI;KACxC,CAAC,GACD,QAAQ,MACV;KACN,IAAI,OAAO,aAAa,YAAa,KAAK,SAAS,YAAY,CAAC,UAAW,MAAM,QAAQ;KACzF,QAAQ;KACR,IAAI,KAAK,SAAS,UAAU,QAAQ,WAAW,KAAK;KACpD,MAAM,IAAI,KAAK,KAAK;IACtB;GACF;GACA,SAAS,KAAK,SAAS,SAAS,IAAI,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;GACpE,IAAI,QAAQ,WAAW,MAAM,QAAQ;GACrC,OAAO,IAAI,WAAW;GACtB,UAAU,cAAc,MAAM;EAChC;EACA,QAAQ,OAAO,eAAe;EAC9B,MAAM,WAAW,MAAM,OAAO,eAAe,QAAQ,EAAE,OAAO,CAAC;EAC/D,QAAQ,OAAO,eAAe;EAC9B,OAAO;CACT,QAAQ;EACN,MAAM,IAAI,MAAM,kCAAkC;CACpD;AACF"}

package/dist/src/services/inputTemplate/index.d.mts

@@ -0,0 +1,10 @@
+import { InputTemplateOptions, InputTemplatePart } from "./type.mjs";
+//#region src/services/inputTemplate/index.d.ts
+/** Includes unsupported template openings so they fail closed rather than being typed literally. */
+export declare function hasInputTemplate(value: string): boolean;
+/** Interpolation only. No tags, filters, dynamic keys, expressions or recursive evaluation. */
+export declare function parseInputTemplate(value: string): InputTemplatePart[];
+/** Resolves host-declared values, then renders them as Liquid data, never as Liquid source. */
+export declare function renderInputTemplate(parts: readonly InputTemplatePart[], options: InputTemplateOptions): Promise<string>;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/services/inputTemplate/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/inputTemplate/index.ts"],"mappings":";;;wBAmBgB,iBAAiB;;wBAKjB,mBAAmB,gBAAgB;;wBAuC7B,oBACpB,gBAAgB,qBAChB,SAAS,uBACR"}

package/dist/src/services/inputTemplate/index.mjs

@@ -0,0 +1,118 @@
+import { Liquid } from "liquidjs";
+//#region src/services/inputTemplate/index.ts
+const MAX_BYTES = 65536;
+const MAX_REFERENCES = 16;
+const NAME = /^[A-Za-z_][A-Za-z0-9_]*$/u;
+const FORBIDDEN = /* @__PURE__ */ new Set([
+	"__proto__",
+	"prototype",
+	"constructor"
+]);
+const liquid = new Liquid({
+	strictVariables: true,
+	strictFilters: true,
+	ownPropertyOnly: true
+});
+function invalid() {
+	return /* @__PURE__ */ new Error("Unsupported input template");
+}
+function validName(name) {
+	return NAME.test(name) && !FORBIDDEN.has(name);
+}
+/** Includes unsupported template openings so they fail closed rather than being typed literally. */
+function hasInputTemplate(value) {
+	return /\$\{|\{\{|\{%/u.test(value);
+}
+/** Interpolation only. No tags, filters, dynamic keys, expressions or recursive evaluation. */
+function parseInputTemplate(value) {
+	if (typeof value !== "string" || new TextEncoder().encode(value).length > MAX_BYTES) throw invalid();
+	const parts = [];
+	const openings = /\$\{|\{\{|\{%/gu;
+	let cursor = 0;
+	let references = 0;
+	for (let match = openings.exec(value); match; match = openings.exec(value)) {
+		const open = match.index;
+		if (open > cursor) parts.push({
+			kind: "text",
+			text: value.slice(cursor, open)
+		});
+		if (match[0] === "{%") throw invalid();
+		const closing = match[0] === "${" ? "}" : "}}";
+		const close = value.indexOf(closing, open + 2);
+		if (close === -1) throw invalid();
+		const reference = /^(env|secret|secrets)\.([A-Za-z_][A-Za-z0-9_]*)$/u.exec(value.slice(open + 2, close).trim());
+		if (!reference || !validName(reference[2]) || ++references > MAX_REFERENCES) throw invalid();
+		parts.push({
+			kind: reference[1] === "env" ? "env" : "secret",
+			name: reference[2]
+		});
+		cursor = close + closing.length;
+		openings.lastIndex = cursor;
+	}
+	if (references === 0) throw invalid();
+	if (cursor < value.length) parts.push({
+		kind: "text",
+		text: value.slice(cursor)
+	});
+	return parts;
+}
+async function abortable(work, signal) {
+	signal.throwIfAborted();
+	let cancel = () => {};
+	const aborted = new Promise((_resolve, reject) => {
+		cancel = () => reject(invalid());
+		signal.addEventListener("abort", cancel, { once: true });
+	});
+	try {
+		return await Promise.race([work, aborted]);
+	} finally {
+		signal.removeEventListener("abort", cancel);
+	}
+}
+/** Resolves host-declared values, then renders them as Liquid data, never as Liquid source. */
+async function renderInputTemplate(parts, options) {
+	try {
+		let references = 0;
+		let bytes = 0;
+		for (const part of parts) if (part.kind === "text" && typeof part.text === "string") bytes += new TextEncoder().encode(part.text).length;
+		else if ((part.kind === "env" || part.kind === "secret") && validName(part.name)) references += 1;
+		else throw invalid();
+		if (references > MAX_REFERENCES || bytes > MAX_BYTES || parts.length > 33) throw invalid();
+		const values = Object.create(null);
+		const cache = /* @__PURE__ */ new Map();
+		let source = "";
+		for (const [index, part] of parts.entries()) {
+			options.signal.throwIfAborted();
+			let value;
+			if (part.kind === "text") value = part.text;
+			else {
+				const key = `${part.kind}.${part.name}`;
+				if (cache.has(key)) value = cache.get(key);
+				else {
+					const resolved = part.kind === "env" ? options.readEnv(part.name) : await abortable(Promise.resolve().then(() => {
+						options.signal.throwIfAborted();
+						return options.resolveSecret(part.name);
+					}), options.signal);
+					if (typeof resolved !== "string" || part.kind === "secret" && !resolved) throw invalid();
+					value = resolved;
+					if (part.kind === "secret") options.onResolved(value);
+					cache.set(key, value);
+				}
+			}
+			bytes += part.kind === "text" ? 0 : new TextEncoder().encode(value).length;
+			if (bytes > MAX_BYTES) throw invalid();
+			values[`v${index}`] = value;
+			source += `{{ values.v${index} }}`;
+		}
+		options.signal.throwIfAborted();
+		const rendered = await liquid.parseAndRender(source, { values });
+		options.signal.throwIfAborted();
+		return rendered;
+	} catch {
+		throw new Error("Input template resolution failed");
+	}
+}
+//#endregion
+export { hasInputTemplate, parseInputTemplate, renderInputTemplate };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/inputTemplate/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/inputTemplate/index.ts"],"sourcesContent":["import { Liquid } from 'liquidjs';\n\nimport type { InputTemplateOptions, InputTemplatePart } from './type';\n\nconst MAX_BYTES = 65_536;\nconst MAX_REFERENCES = 16;\nconst NAME = /^[A-Za-z_][A-Za-z0-9_]*$/u;\nconst FORBIDDEN = new Set(['__proto__', 'prototype', 'constructor']);\nconst liquid = new Liquid({ strictVariables: true, strictFilters: true, ownPropertyOnly: true });\n\nfunction invalid(): Error {\n  return new Error('Unsupported input template');\n}\n\nfunction validName(name: string): boolean {\n  return NAME.test(name) && !FORBIDDEN.has(name);\n}\n\n/** Includes unsupported template openings so they fail closed rather than being typed literally. */\nexport function hasInputTemplate(value: string): boolean {\n  return /\\$\\{|\\{\\{|\\{%/u.test(value);\n}\n\n/** Interpolation only. No tags, filters, dynamic keys, expressions or recursive evaluation. */\nexport function parseInputTemplate(value: string): InputTemplatePart[] {\n  if (typeof value !== 'string' || new TextEncoder().encode(value).length > MAX_BYTES) throw invalid();\n  const parts: InputTemplatePart[] = [];\n  const openings = /\\$\\{|\\{\\{|\\{%/gu;\n  let cursor = 0;\n  let references = 0;\n  for (let match = openings.exec(value); match; match = openings.exec(value)) {\n    const open = match.index;\n    if (open > cursor) parts.push({ kind: 'text', text: value.slice(cursor, open) });\n    if (match[0] === '{%') throw invalid();\n    const closing = match[0] === '${' ? '}' : '}}';\n    const close = value.indexOf(closing, open + 2);\n    if (close === -1) throw invalid();\n    const reference = /^(env|secret|secrets)\\.([A-Za-z_][A-Za-z0-9_]*)$/u.exec(value.slice(open + 2, close).trim());\n    if (!reference || !validName(reference[2]!) || ++references > MAX_REFERENCES) throw invalid();\n    parts.push({ kind: reference[1] === 'env' ? 'env' : 'secret', name: reference[2]! });\n    cursor = close + closing.length;\n    openings.lastIndex = cursor;\n  }\n  if (references === 0) throw invalid();\n  if (cursor < value.length) parts.push({ kind: 'text', text: value.slice(cursor) });\n  return parts;\n}\n\nasync function abortable<T>(work: Promise<T>, signal: AbortSignal): Promise<T> {\n  signal.throwIfAborted();\n  let cancel = () => {};\n  const aborted = new Promise<never>((_resolve, reject) => {\n    cancel = () => reject(invalid());\n    signal.addEventListener('abort', cancel, { once: true });\n  });\n  try {\n    return await Promise.race([work, aborted]);\n  } finally {\n    signal.removeEventListener('abort', cancel);\n  }\n}\n\n/** Resolves host-declared values, then renders them as Liquid data, never as Liquid source. */\nexport async function renderInputTemplate(\n  parts: readonly InputTemplatePart[],\n  options: InputTemplateOptions,\n): Promise<string> {\n  try {\n    let references = 0;\n    let bytes = 0;\n    // Validate the whole input before the first lookup, including caller-constructed parts.\n    for (const part of parts) {\n      if (part.kind === 'text' && typeof part.text === 'string') bytes += new TextEncoder().encode(part.text).length;\n      else if ((part.kind === 'env' || part.kind === 'secret') && validName(part.name)) references += 1;\n      else throw invalid();\n    }\n    if (references > MAX_REFERENCES || bytes > MAX_BYTES || parts.length > MAX_REFERENCES * 2 + 1) throw invalid();\n    const values: Record<string, string> = Object.create(null);\n    const cache = new Map<string, string>();\n    let source = '';\n    for (const [index, part] of parts.entries()) {\n      options.signal.throwIfAborted();\n      let value: string;\n      if (part.kind === 'text') value = part.text;\n      else {\n        const key = `${part.kind}.${part.name}`;\n        if (cache.has(key)) value = cache.get(key)!;\n        else {\n          const resolved =\n            part.kind === 'env'\n              ? options.readEnv(part.name)\n              : await abortable(\n                  Promise.resolve().then(() => {\n                    options.signal.throwIfAborted();\n                    return options.resolveSecret(part.name);\n                  }),\n                  options.signal,\n                );\n          if (typeof resolved !== 'string' || (part.kind === 'secret' && !resolved)) throw invalid();\n          value = resolved;\n          if (part.kind === 'secret') options.onResolved(value);\n          cache.set(key, value);\n        }\n      }\n      bytes += part.kind === 'text' ? 0 : new TextEncoder().encode(value).length;\n      if (bytes > MAX_BYTES) throw invalid();\n      values[`v${index}`] = value;\n      source += `{{ values.v${index} }}`;\n    }\n    options.signal.throwIfAborted();\n    const rendered = await liquid.parseAndRender(source, { values });\n    options.signal.throwIfAborted();\n    return rendered;\n  } catch {\n    throw new Error('Input template resolution failed');\n  }\n}\n"],"mappings":";;AAIA,MAAM,YAAY;AAClB,MAAM,iBAAiB;AACvB,MAAM,OAAO;AACb,MAAM,4BAAY,IAAI,IAAI;CAAC;CAAa;CAAa;AAAa,CAAC;AACnE,MAAM,SAAS,IAAI,OAAO;CAAE,iBAAiB;CAAM,eAAe;CAAM,iBAAiB;AAAK,CAAC;AAE/F,SAAS,UAAiB;CACxB,uBAAO,IAAI,MAAM,4BAA4B;AAC/C;AAEA,SAAS,UAAU,MAAuB;CACxC,OAAO,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI;AAC/C;;AAGA,SAAgB,iBAAiB,OAAwB;CACvD,OAAO,iBAAiB,KAAK,KAAK;AACpC;;AAGA,SAAgB,mBAAmB,OAAoC;CACrE,IAAI,OAAO,UAAU,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,SAAS,WAAW,MAAM,QAAQ;CACnG,MAAM,QAA6B,CAAC;CACpC,MAAM,WAAW;CACjB,IAAI,SAAS;CACb,IAAI,aAAa;CACjB,KAAK,IAAI,QAAQ,SAAS,KAAK,KAAK,GAAG,OAAO,QAAQ,SAAS,KAAK,KAAK,GAAG;EAC1E,MAAM,OAAO,MAAM;EACnB,IAAI,OAAO,QAAQ,MAAM,KAAK;GAAE,MAAM;GAAQ,MAAM,MAAM,MAAM,QAAQ,IAAI;EAAE,CAAC;EAC/E,IAAI,MAAM,OAAO,MAAM,MAAM,QAAQ;EACrC,MAAM,UAAU,MAAM,OAAO,OAAO,MAAM;EAC1C,MAAM,QAAQ,MAAM,QAAQ,SAAS,OAAO,CAAC;EAC7C,IAAI,UAAU,IAAI,MAAM,QAAQ;EAChC,MAAM,YAAY,oDAAoD,KAAK,MAAM,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;EAC9G,IAAI,CAAC,aAAa,CAAC,UAAU,UAAU,EAAG,KAAK,EAAE,aAAa,gBAAgB,MAAM,QAAQ;EAC5F,MAAM,KAAK;GAAE,MAAM,UAAU,OAAO,QAAQ,QAAQ;GAAU,MAAM,UAAU;EAAI,CAAC;EACnF,SAAS,QAAQ,QAAQ;EACzB,SAAS,YAAY;CACvB;CACA,IAAI,eAAe,GAAG,MAAM,QAAQ;CACpC,IAAI,SAAS,MAAM,QAAQ,MAAM,KAAK;EAAE,MAAM;EAAQ,MAAM,MAAM,MAAM,MAAM;CAAE,CAAC;CACjF,OAAO;AACT;AAEA,eAAe,UAAa,MAAkB,QAAiC;CAC7E,OAAO,eAAe;CACtB,IAAI,eAAe,CAAC;CACpB,MAAM,UAAU,IAAI,SAAgB,UAAU,WAAW;EACvD,eAAe,OAAO,QAAQ,CAAC;EAC/B,OAAO,iBAAiB,SAAS,QAAQ,EAAE,MAAM,KAAK,CAAC;CACzD,CAAC;CACD,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,OAAO,CAAC;CAC3C,UAAU;EACR,OAAO,oBAAoB,SAAS,MAAM;CAC5C;AACF;;AAGA,eAAsB,oBACpB,OACA,SACiB;CACjB,IAAI;EACF,IAAI,aAAa;EACjB,IAAI,QAAQ;EAEZ,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,SAAS,UAAU,OAAO,KAAK,SAAS,UAAU,SAAS,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;OACnG,KAAK,KAAK,SAAS,SAAS,KAAK,SAAS,aAAa,UAAU,KAAK,IAAI,GAAG,cAAc;OAC3F,MAAM,QAAQ;EAErB,IAAI,aAAa,kBAAkB,QAAQ,aAAa,MAAM,SAAS,IAAwB,MAAM,QAAQ;EAC7G,MAAM,SAAiC,OAAO,OAAO,IAAI;EACzD,MAAM,wBAAQ,IAAI,IAAoB;EACtC,IAAI,SAAS;EACb,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GAAG;GAC3C,QAAQ,OAAO,eAAe;GAC9B,IAAI;GACJ,IAAI,KAAK,SAAS,QAAQ,QAAQ,KAAK;QAClC;IACH,MAAM,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK;IACjC,IAAI,MAAM,IAAI,GAAG,GAAG,QAAQ,MAAM,IAAI,GAAG;SACpC;KACH,MAAM,WACJ,KAAK,SAAS,QACV,QAAQ,QAAQ,KAAK,IAAI,IACzB,MAAM,UACJ,QAAQ,QAAQ,CAAC,CAAC,WAAW;MAC3B,QAAQ,OAAO,eAAe;MAC9B,OAAO,QAAQ,cAAc,KAAK,IAAI;KACxC,CAAC,GACD,QAAQ,MACV;KACN,IAAI,OAAO,aAAa,YAAa,KAAK,SAAS,YAAY,CAAC,UAAW,MAAM,QAAQ;KACzF,QAAQ;KACR,IAAI,KAAK,SAAS,UAAU,QAAQ,WAAW,KAAK;KACpD,MAAM,IAAI,KAAK,KAAK;IACtB;GACF;GACA,SAAS,KAAK,SAAS,SAAS,IAAI,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;GACpE,IAAI,QAAQ,WAAW,MAAM,QAAQ;GACrC,OAAO,IAAI,WAAW;GACtB,UAAU,cAAc,MAAM;EAChC;EACA,QAAQ,OAAO,eAAe;EAC9B,MAAM,WAAW,MAAM,OAAO,eAAe,QAAQ,EAAE,OAAO,CAAC;EAC/D,QAAQ,OAAO,eAAe;EAC9B,OAAO;CACT,QAAQ;EACN,MAAM,IAAI,MAAM,kCAAkC;CACpD;AACF"}

package/dist/src/services/inputTemplate/type.d.mts

@@ -0,0 +1,17 @@
+//#region src/services/inputTemplate/type.d.ts
+export type InputTemplatePart = {
+  readonly kind: 'text';
+  readonly text: string;
+} | {
+  readonly kind: 'env' | 'secret';
+  readonly name: string;
+};
+/** Host-owned lookups only. Never expose this renderer as a secret-reading model tool. */
+export interface InputTemplateOptions {
+  readEnv(name: string): string | undefined;
+  resolveSecret(name: string): Promise<string>;
+  onResolved(value: string): void;
+  readonly signal: AbortSignal;
+}
+//#endregion
+//# sourceMappingURL=type.d.mts.map

package/dist/src/services/inputTemplate/type.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.d.mts","names":[],"sources":["../../../../src/services/inputTemplate/type.ts"],"mappings":";YAAY;WACG;WAAuB;;WACvB;WAAiC;;;iBAG/B;EACf,QAAQ;EACR,cAAc,eAAe;EAC7B,WAAW;WACF,QAAQ"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agimon-ai/po-core",
-  "version": "0.0.0-alpha.106",
+  "version": "0.0.0-alpha.108",
   "description": "Po runtime systems and reusable core services.",
   "keywords": [
     "ai",
@@ -568,6 +568,11 @@
       "import": "./dist/telemetry.mjs",
       "require": "./dist/telemetry.cjs"
     },
+    "./inputTemplate": {
+      "types": "./dist/inputTemplate.d.mts",
+      "import": "./dist/inputTemplate.mjs",
+      "require": "./dist/inputTemplate.cjs"
+    },
     "./testMode": {
       "types": "./dist/testMode.d.mts",
       "import": "./dist/testMode.mjs",
@@ -579,8 +584,8 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@agimon-ai/po-logsink": "0.0.1-alpha.88",
-    "@agimon-ai/po-web-security": "0.0.0-alpha.106",
+    "@agimon-ai/po-logsink": "0.0.1-alpha.90",
+    "@agimon-ai/po-web-security": "0.0.0-alpha.108",
     "@deepseek-ai/cordis": "4.0.5",
     "@earendil-works/chord": "1.5.0",
     "@earendil-works/pi-agent-core": "1.5.0",
@@ -597,6 +602,7 @@
     "gpt-tokenizer": "4.1.0",
     "hono": "4.13.13",
     "ignore": "7.0.12",
+    "liquidjs": "10.30.0",
     "minimatch": "10.2.6",
     "protobufjs": "8.8.1",
     "typebox": "1.4.2",
@@ -605,7 +611,7 @@
     "yaml": "2.9.1"
   },
   "devDependencies": {
-    "@agimon-ai/vibe-lint-plugin-po-core": "0.0.0-alpha.106",
+    "@agimon-ai/vibe-lint-plugin-po-core": "0.0.0-alpha.108",
     "@apidevtools/swagger-parser": "^13.1.0",
     "@asyncapi/parser": "^3.6.4",
     "@earendil-works/pi-ai": "1.5.0",