@agimon-ai/po-workflow 0.0.0-alpha.106 → 0.0.0-alpha.108

package/dist/{RecoverWorkflowService-D3FAo5TS.cjs → RecoverWorkflowService-2WMhxaZd.cjs}

@@ -7415,6 +7415,36 @@ function failedExecution(error) {
 		stop: async () => void 0
 	};
 }
+const INPUT_TEMPLATE = /(?:\$\{\{|\{\{)[^}]*\binputs(?:\.|\[|\s)/u;
+const ENV_TEMPLATE = /(?:\$\{\{|\{\{)[^}]*\benv\.([^.}\s]+)/gu;
+/** Whether `value` expands an input into its text, directly or through an env key in `tainted`. */
+function expandsInput(value, tainted) {
+	const text = JSON.stringify(value ?? null);
+	return INPUT_TEMPLATE.test(text) || [...text.matchAll(ENV_TEMPLATE)].some((match) => tainted.has(match[1] ?? ""));
+}
+/**
+* Refuses a child job whose shell text would carry an input: a `run` that expands `inputs.*`, or
+* an `env.*` key whose job or step value does. Env values reach a command as its process
+* environment, never as command text, so an input there is safe until a `run` expands it.
+*/
+function assertStaticChildShell(definition) {
+	const jobTainted = /* @__PURE__ */ new Set();
+	for (const [key, value] of Object.entries(definition.env ?? {})) if (expandsInput(value, jobTainted)) jobTainted.add(key);
+	const check = (steps) => {
+		for (const step of steps) {
+			if (step.parallel) check(step.parallel);
+			if (step.run === void 0) continue;
+			const tainted = new Set(jobTainted);
+			for (const [key, value] of Object.entries(step.env ?? {})) if (expandsInput(value, jobTainted)) tainted.add(key);
+			if (expandsInput(step.run, tainted)) throw new Error("Child script inputs must arrive on stdin, never through shell interpolation.");
+		}
+	};
+	check([
+		...definition.preJob?.steps ?? [],
+		...definition.steps,
+		...definition.postJob?.steps ?? []
+	]);
+}
 /**
 * Runs workflow steps inside Po instead of a shell.
 *
@@ -7437,21 +7467,7 @@ function createStepExecutor(dependencies) {
 		const runtime = dependencies.runtime;
 		const workflow = child.context.config.workflow;
 		const parser = new WorkflowParserService(runtime);
-		const staticShell = (steps) => {
-			for (const step of steps) {
-				if (step.parallel) staticShell(step.parallel);
-				if (step.run !== void 0 && /(?:\$\{\{|\{\{)[^}]*\binputs(?:\.|\[|\s)/u.test(JSON.stringify({
-					run: step.run,
-					env: step.env,
-					jobEnv: child.definition.env
-				}))) throw new Error("Child script inputs must arrive on stdin, never through shell interpolation.");
-			}
-		};
-		staticShell([
-			...child.definition.preJob?.steps ?? [],
-			...child.definition.steps,
-			...child.definition.postJob?.steps ?? []
-		]);
+		assertStaticChildShell(child.definition);
 		const usages = [];
 		const evidence = [];
 		const logger = {
@@ -13576,4 +13592,4 @@ Object.defineProperty(exports, "workflowShellOutput", {
 	}
 });
 
-//# sourceMappingURL=RecoverWorkflowService-D3FAo5TS.cjs.map
+//# sourceMappingURL=RecoverWorkflowService-2WMhxaZd.cjs.map