@memberjunction/templates 6.2.0-edge.3 → 6.2.0-edge.5

package/dist/NunjucksSandbox.js

@@ -0,0 +1,317 @@
+/**
+ * @fileoverview Guards nunjucks so templates cannot run JavaScript or reach server objects.
+ *
+ * nunjucks has no sandbox mode, and a template can attack it at two points:
+ * - **Compile time.** The compiler copies template-controlled names into the code it generates.
+ *   {@link HardenNunjucksRuntime} wraps the parser that the compiler calls, so every parsed template is
+ *   checked by `AssertTemplateTreeIsSafe` (`NunjucksCompileGuard.ts`) before it compiles. It also wraps
+ *   the code generator's `compilePair`, which writes dictionary keys and keyword arguments.
+ * - **Render time.** Every compiled template resolves bare names, member access and calls through
+ *   three functions on nunjucks' shared runtime module: `contextOrFrameLookup`, `memberLookup` and
+ *   `callWrap`. It builds macros with `makeMacro` and marks keyword arguments with `makeKeywordArgs`, and
+ *   it finds filters and tests with the environment's `getFilter` and `getTest`, which read plain
+ *   objects. Unguarded, a template can walk from any value to `Function`, or reach the render context
+ *   and change the shared environment. {@link HardenNunjucksRuntime} wraps those functions in place.
+ *
+ * The parser, the code generator, the runtime module and the `Environment` prototype are shared by every
+ * nunjucks environment in the process, so the guard covers all of them, including templates loaded
+ * through `include` and `import`.
+ * @module @memberjunction/templates
+ */
+import nunjucks from 'nunjucks';
+import { IsInheritedMemberName } from './InheritedMemberNames.js';
+import { AssertTemplateTreeIsSafe } from './NunjucksCompileGuard.js';
+import { TemplateSandboxError } from './TemplateSandboxError.js';
+const NUNJUCKS = nunjucks;
+/** Member names that lead from a value to its constructor or prototype, and from there to `Function`. */
+const RESTRICTED_MEMBER_NAMES = new Set([
+    'constructor',
+    'prototype',
+    '__proto__',
+    '__defineGetter__',
+    '__defineSetter__',
+    '__lookupGetter__',
+    '__lookupSetter__',
+]);
+/** Values a template may never hold: constructors that compile code from strings, and reflection over any object. */
+const RESTRICTED_VALUES = new Set([
+    Function,
+    (async () => undefined).constructor,
+    (function* () { }).constructor,
+    (async function* () { }).constructor,
+    globalThis.eval,
+    Object,
+    Reflect,
+    globalThis,
+    globalThis.process,
+].filter((value) => value !== undefined && value !== null));
+/** nunjucks' base `Obj` class, which render contexts and templates extend. */
+const NUNJUCKS_OBJ_PROTOTYPE = Object.getPrototypeOf(NUNJUCKS.Template.prototype);
+/** nunjucks' base `EmitterObj` class, which environments and loaders extend. */
+const NUNJUCKS_EMITTER_PROTOTYPE = Object.getPrototypeOf(NUNJUCKS.Environment.prototype);
+/** Prototypes of the objects nunjucks uses to render: contexts and templates, environments and loaders, and frames. */
+const NUNJUCKS_OBJECT_PROTOTYPES = [NUNJUCKS_OBJ_PROTOTYPE, NUNJUCKS_EMITTER_PROTOTYPE, NUNJUCKS.runtime.Frame.prototype];
+/** The nunjucks module and its submodules. */
+const NUNJUCKS_MODULES = new Set([
+    nunjucks, NUNJUCKS.runtime, NUNJUCKS.parser, NUNJUCKS.lib, NUNJUCKS.compiler, NUNJUCKS.lexer, NUNJUCKS.nodes,
+]);
+/** Guards this module installed, so hardening again does not wrap a guard in another guard. */
+const installedGuards = new WeakSet();
+/**
+ * Guards the nunjucks parser, code generator and runtime used by every nunjucks environment in this process. After this call:
+ * - a template whose names could change the compiled code fails to compile (see `AssertTemplateTreeIsSafe`)
+ * - a macro or call-block argument that a call leaves out is filled only from a keyword argument that the
+ *   call itself passes under that name, never from a member the keyword arguments inherit, so otherwise it
+ *   reads as empty
+ * - keyword arguments written at a call site must be an ordinary object literal: ones that inherit from anything
+ *   but `Object.prototype`, or that use a name that every object inherits (or `prototype`), throw, and the code
+ *   generator refuses such a name as a dictionary key or keyword argument too; keyword arguments passed as a
+ *   value (from render data, for example) are read through a copy of their own keys
+ * - a filter, test or global resolves only to a name the environment registered itself, never to a member
+ *   that every object inherits (such as `hasOwnProperty`); an object, a function or a symbol is refused as the name
+ * - a member named `constructor`, `prototype`, `__proto__` or one of the `__define/lookup Getter/Setter__`
+ *   accessors, written literally or computed while rendering, reads as `undefined`, unless it is an object's
+ *   own data that is not a function; `__proto__` always reads as `undefined`
+ * - a bare name resolves only to a template variable, an own key of the render data, or an own environment
+ *   global, never to a property that the render data or the globals inherit
+ * - a template may not read a member of the render context, an environment, a loader, a frame, a
+ *   template or a nunjucks module, and a lookup or call that would return one of them throws
+ * - a lookup or call that would produce or use `Function` (or its async and generator variants), `eval`,
+ *   `Object`, `Reflect`, `globalThis` or `process` throws a {@link TemplateSandboxError}
+ *
+ * Safe to call any number of times: a hook that already carries the guard is left as it is.
+ */
+export function HardenNunjucksRuntime() {
+    const { parser, compiler, runtime, Environment } = NUNJUCKS;
+    installGuard(parser, 'parse', guardParse);
+    installGuard(compiler.Compiler.prototype, 'compilePair', guardCompilePair);
+    installGuard(runtime, 'memberLookup', guardMemberLookup);
+    installGuard(runtime, 'contextOrFrameLookup', guardContextOrFrameLookup);
+    installGuard(runtime, 'callWrap', guardCallWrap);
+    installGuard(runtime, 'makeMacro', guardMakeMacro);
+    installGuard(runtime, 'makeKeywordArgs', guardMakeKeywordArgs);
+    installGuard(Environment.prototype, 'getFilter', guardRegistryLookup('filters'));
+    installGuard(Environment.prototype, 'getTest', guardRegistryLookup('tests'));
+    installGuard(Environment.prototype, 'getGlobal', guardRegistryLookup('globals'));
+}
+/** Replaces one hook with its guarded version, unless the hook is already a guard. */
+function installGuard(target, hook, guard) {
+    if (installedGuards.has(target[hook])) {
+        return;
+    }
+    const guarded = guard(target[hook]);
+    installedGuards.add(guarded);
+    target[hook] = guarded;
+}
+/** Parsing for the compiler: the tree is checked before nunjucks compiles it. */
+function guardParse(original) {
+    return (src, extensions, opts) => {
+        const tree = original(src, extensions, opts);
+        AssertTemplateTreeIsSafe(tree);
+        return tree;
+    };
+}
+/**
+ * The code generator writes a dictionary key or keyword argument as an object-literal key. A key that
+ * `IsInheritedMemberName` matches is refused here as well, so one that reaches the code generator without
+ * passing the parse-time check still cannot become an object-literal key.
+ */
+function guardCompilePair(original) {
+    return function guardedCompilePair(node, frame) {
+        const key = pairKeyName(node);
+        if (key !== undefined && IsInheritedMemberName(key)) {
+            throw new TemplateSandboxError(`Templates may not use "${key}" as a dictionary key or keyword argument`);
+        }
+        original.call(this, node, frame);
+    };
+}
+/**
+ * `runtime.makeMacro`, which builds every macro and call block. The macro it returns fills an argument that a
+ * call leaves out by reading the call's keyword arguments, and stores extra positional values in them. The
+ * guard gives nunjucks a copy of the keyword arguments without a prototype, holding only the keys the call
+ * passed, so neither step can reach an inherited member.
+ */
+function guardMakeMacro(original) {
+    return (argNames, kwargNames, func) => {
+        const macro = original(argNames, kwargNames, func);
+        return function guardedMacro(...macroArgs) {
+            return macro.apply(this, withOwnKeywordArguments(macroArgs));
+        };
+    };
+}
+/**
+ * The call's arguments, with its keyword arguments replaced by a copy of their own keys in an object without a
+ * prototype. A call without keyword arguments gets an empty copy, because nunjucks would read from a new plain object.
+ */
+function withOwnKeywordArguments(macroArgs) {
+    const last = macroArgs[macroArgs.length - 1];
+    const hasKeywordArguments = isKeywordArguments(last);
+    const ownKeywordArguments = Object.create(null);
+    if (hasKeywordArguments) {
+        for (const key of Object.keys(last)) {
+            ownKeywordArguments[key] = readMember(last, key);
+        }
+    }
+    ownKeywordArguments.__keywords = true;
+    return [...(hasKeywordArguments ? macroArgs.slice(0, -1) : macroArgs), ownKeywordArguments];
+}
+/** Keyword arguments as nunjucks recognizes them: an object or function that owns `__keywords`. */
+function isKeywordArguments(value) {
+    return (typeof value === 'object' || typeof value === 'function') && value !== null && Object.hasOwn(value, '__keywords');
+}
+/**
+ * `runtime.makeKeywordArgs`, which marks the object literal that a call site passes as keyword arguments. It must
+ * inherit from `Object.prototype`, as an object literal does, and must not own a key that `IsInheritedMemberName` matches.
+ */
+function guardMakeKeywordArgs(original) {
+    return (obj) => {
+        if (Object.getPrototypeOf(obj) !== Object.prototype || Object.getOwnPropertyNames(obj).some((key) => IsInheritedMemberName(key))) {
+            throw new TemplateSandboxError('Templates may only pass keyword arguments that are a plain object with ordinary names');
+        }
+        return original(obj);
+    };
+}
+/**
+ * `env.getFilter(name)`, `env.getTest(name)` and `env.getGlobal(name)`. nunjucks keeps each registry in a
+ * plain object, so a name such as `toString` would find the member every object inherits. Only a name the
+ * environment registered itself resolves. A name that is not there at all still fails as nunjucks reports it.
+ *
+ * The `select` and `reject` filters pass a template value as the name. The name is converted to a key once,
+ * and nunjucks receives that same key, so it reads the key the guard checked. An object, a function or a
+ * symbol is refused before conversion, because converting it could run template code.
+ */
+function guardRegistryLookup(registry) {
+    return (original) => function guardedRegistryLookup(name) {
+        if ((typeof name === 'object' && name !== null) || typeof name === 'function' || typeof name === 'symbol') {
+            throw new TemplateSandboxError('Templates may not use an object, a function or a symbol as the name of a filter, test or global');
+        }
+        const key = String(name);
+        const entries = this[registry];
+        if (key in entries && !Object.hasOwn(entries, key)) {
+            throw new TemplateSandboxError(`Templates may only use filters, tests and globals that the environment registered ("${key}")`);
+        }
+        return original.call(this, key);
+    };
+}
+/**
+ * `obj.key` and `obj[key]`. The key is converted to a string once, so a computed key cannot change
+ * between the check and the read. The member is read once (`memberVal`), checked against restricted/nunjucks
+ * values, and returned directly (or bound to `obj` when it is a method, matching nunjucks' `memberLookup`
+ * without evaluating `obj[key]` a second time).
+ */
+function guardMemberLookup(_original) {
+    return (obj, val) => {
+        if (obj === undefined || obj === null || typeof val === 'symbol') {
+            return undefined;
+        }
+        const key = String(val);
+        if (isNunjucksObject(obj)) {
+            throw new TemplateSandboxError(`Templates may not read members of the render context or other nunjucks objects (reading "${key}")`);
+        }
+        if (RESTRICTED_MEMBER_NAMES.has(key) && !isOwnDataValue(obj, key)) {
+            return undefined;
+        }
+        if (RESTRICTED_VALUES.has(obj)) {
+            throw new TemplateSandboxError(`Templates may not access members of a restricted value (reading "${key}")`);
+        }
+        const memberVal = readMember(obj, key);
+        if (isRestrictedOrNunjucksValue(memberVal)) {
+            throw new TemplateSandboxError(`Templates may not access the member "${key}"`);
+        }
+        if (typeof memberVal === 'function') {
+            return function (...args) {
+                return memberVal.apply(obj, args);
+            };
+        }
+        return memberVal;
+    };
+}
+/**
+ * A bare name such as `{{ user }}`: a template variable, then an own key of the render data, then an own
+ * environment global. The guard resolves the name itself, because nunjucks would also return members
+ * that the render data or the globals inherit.
+ */
+function guardContextOrFrameLookup() {
+    return (context, frame, name) => {
+        if (name === '__proto__') {
+            return undefined;
+        }
+        const value = ownBinding(context, frame, name);
+        if (value === undefined || (RESTRICTED_MEMBER_NAMES.has(name) && typeof value === 'function')) {
+            return undefined;
+        }
+        if (isRestrictedOrNunjucksValue(value, context)) {
+            throw new TemplateSandboxError(`Templates may not access the name "${name}"`);
+        }
+        return value;
+    };
+}
+/** A call such as `{{ fn(x) }}`. nunjucks passes the render context as `this`, so a call may not return it. */
+function guardCallWrap(original) {
+    return (obj, name, context, args) => {
+        if (isRestrictedOrNunjucksValue(obj, context)) {
+            throw new TemplateSandboxError(`Templates may not access the function "${name}"`);
+        }
+        const result = original(obj, name, context, args);
+        if (isRestrictedOrNunjucksValue(result, context)) {
+            throw new TemplateSandboxError(`Templates may not access the value returned by "${name}"`);
+        }
+        return result;
+    };
+}
+/** The value of a bare name: a template variable, else an own key of the render data, else an own environment global. */
+function ownBinding(context, frame, name) {
+    const variable = frame.lookup(name);
+    if (variable !== undefined) {
+        return variable;
+    }
+    const data = context.getVariables();
+    if (Object.hasOwn(data, name)) {
+        return readMember(data, name);
+    }
+    const globals = context.env.globals;
+    return Object.hasOwn(globals, name) ? readMember(globals, name) : undefined;
+}
+/**
+ * True when an object (not a function) stores data that is not a function under `key` itself, as
+ * `{"constructor": "Acme"}` does. A prototype's own `constructor` is a function, so it never counts,
+ * and neither does `__proto__`.
+ */
+function isOwnDataValue(obj, key) {
+    return key !== '__proto__'
+        && typeof obj === 'object' && obj !== null
+        && Object.hasOwn(obj, key)
+        && typeof readMember(obj, key) !== 'function';
+}
+/** True for the render context, an environment, a loader, a frame, a template or a nunjucks module. */
+function isNunjucksObject(value) {
+    if (typeof value !== 'object' || value === null) {
+        return false;
+    }
+    if (NUNJUCKS_MODULES.has(value)) {
+        return true;
+    }
+    const proto = Object.getPrototypeOf(value);
+    if (proto === Object.prototype || proto === Array.prototype || proto === null) {
+        return false;
+    }
+    return NUNJUCKS_OBJECT_PROTOTYPES.some((prototype) => prototype.isPrototypeOf(value));
+}
+/** Reads a member the way a template does, including members of primitive strings and numbers. */
+function readMember(obj, key) {
+    return obj[key];
+}
+/** The text of a dictionary key or keyword argument (a symbol or a quoted string), or `undefined` for any other key. */
+function pairKeyName(pair) {
+    const key = typeof pair === 'object' && pair !== null ? readMember(pair, 'key') : undefined;
+    const value = typeof key === 'object' && key !== null ? readMember(key, 'value') : undefined;
+    return typeof value === 'string' ? value : undefined;
+}
+/** Returns true when a lookup or call would give a template a restricted value, the render context or another nunjucks object. */
+function isRestrictedOrNunjucksValue(value, context) {
+    if (value === null || (typeof value !== 'object' && typeof value !== 'function')) {
+        return false;
+    }
+    return RESTRICTED_VALUES.has(value) || isNunjucksObject(value) || (context !== undefined && value === context);
+}
+//# sourceMappingURL=NunjucksSandbox.js.map

package/dist/NunjucksSandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NunjucksSandbox.js","sourceRoot":"","sources":["../src/NunjucksSandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AA4D9D,MAAM,QAAQ,GAAG,QAAwC,CAAC;AAK1D,yGAAyG;AACzG,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IACzD,aAAa;IACb,WAAW;IACX,WAAW;IACX,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;CACrB,CAAC,CAAC;AAEH,qHAAqH;AACrH,MAAM,iBAAiB,GAAyB,IAAI,GAAG,CAAU;IAC7D,QAAQ;IACR,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,WAAW;IACnC,CAAC,QAAQ,CAAC,MAAiD,CAAC,CAAC,CAAC,WAAW;IACzE,CAAC,KAAK,SAAS,CAAC,MAAuD,CAAC,CAAC,CAAC,WAAW;IACrF,UAAU,CAAC,IAAI;IACf,MAAM;IACN,OAAO;IACP,UAAU;IACV,UAAU,CAAC,OAAO;CACrB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC;AAE5D,8EAA8E;AAC9E,MAAM,sBAAsB,GAAW,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAE1F,gFAAgF;AAChF,MAAM,0BAA0B,GAAW,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;AAEjG,uHAAuH;AACvH,MAAM,0BAA0B,GAAsB,CAAC,sBAAsB,EAAE,0BAA0B,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAE7I,8CAA8C;AAC9C,MAAM,gBAAgB,GAAyB,IAAI,GAAG,CAAU;IAC5D,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK;CAC/G,CAAC,CAAC;AAEH,+FAA+F;AAC/F,MAAM,eAAe,GAAG,IAAI,OAAO,EAAiB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,qBAAqB;IACjC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC;IAC5D,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC1C,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC3E,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACzD,YAAY,CAAC,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,CAAC,CAAC;IACzE,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACjD,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACnD,YAAY,CAAC,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IAC/D,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACjF,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,sFAAsF;AACtF,SAAS,YAAY,CACjB,MAAS,EACT,IAAO,EACP,KAA+B;IAE/B,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO;IACX,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;AAC3B,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,QAAiC;IACjD,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7C,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,QAAqB;IAC3C,OAAO,SAAS,kBAAkB,CAAgB,IAAa,EAAE,KAAc;QAC3E,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,GAAG,2CAA2C,CAAC,CAAC;QAC7G,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,QAA2C;IAC/D,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACnD,OAAO,SAAS,YAAY,CAAgB,GAAG,SAAoB;YAC/D,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;IACN,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,SAAoB;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,mBAAmB,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,mBAAmB,EAAE,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,mBAAmB,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;IACL,CAAC;IACD,mBAAmB,CAAC,UAAU,GAAG,IAAI,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAChG,CAAC;AAED,mGAAmG;AACnG,SAAS,kBAAkB,CAAC,KAAc;IACtC,OAAO,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AAC9H,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,QAAiD;IAC3E,OAAO,CAAC,GAAG,EAAE,EAAE;QACX,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/H,MAAM,IAAI,oBAAoB,CAAC,uFAAuF,CAAC,CAAC;QAC5H,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,QAAyC;IAClE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,qBAAqB,CAAsC,IAAa;QAClG,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,UAAU,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxG,MAAM,IAAI,oBAAoB,CAAC,iGAAiG,CAAC,CAAC;QACtI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,GAAG,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,oBAAoB,CAAC,uFAAuF,GAAG,IAAI,CAAC,CAAC;QACnI,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,SAA+C;IACtE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAAC,4FAA4F,GAAG,IAAI,CAAC,CAAC;QACxI,CAAC;QACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,oBAAoB,CAAC,oEAAoE,GAAG,IAAI,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,2BAA2B,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,GAAG,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;YAClC,OAAO,UAAU,GAAG,IAAe;gBAC/B,OAAQ,SAAiD,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC/E,CAAC,CAAC;QACN,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB;IAC9B,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5B,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC,EAAE,CAAC;YAC5F,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,2BAA2B,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,oBAAoB,CAAC,sCAAsC,IAAI,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC;AACN,CAAC;AAED,+GAA+G;AAC/G,SAAS,aAAa,CAAC,QAA0C;IAC7D,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAChC,IAAI,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,oBAAoB,CAAC,mDAAmD,IAAI,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;AACN,CAAC;AAED,yHAAyH;AACzH,SAAS,UAAU,CAAC,OAA8B,EAAE,KAAoB,EAAE,IAAY;IAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAY,EAAE,GAAW;IAC7C,OAAO,GAAG,KAAK,WAAW;WACnB,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;WACvC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC;WACvB,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,UAAU,CAAC;AACtD,CAAC;AAED,uGAAuG;AACvG,SAAS,gBAAgB,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,kGAAkG;AAClG,SAAS,UAAU,CAAC,GAAY,EAAE,GAAW;IACzC,OAAQ,GAA8C,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,wHAAwH;AACxH,SAAS,WAAW,CAAC,IAAa;IAC9B,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,kIAAkI;AAClI,SAAS,2BAA2B,CAAC,KAAc,EAAE,OAA+B;IAChF,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,OAAO,CAAC,CAAC;AACnH,CAAC"}

package/dist/TemplateEngine.d.ts

@@ -2,7 +2,8 @@ import { IMetadataProvider, UserInfo } from "@memberjunction/core";
 import { MJTemplateCategoryEntity, MJTemplateContentEntity, MJTemplateContentTypeEntity, MJTemplateEntityExtended, MJTemplateParamEntity } from "@memberjunction/core-entities";
 import nunjucks from 'nunjucks';
 import { BaseSingleton } from "@memberjunction/global";
-import { TemplateRenderResult } from '@memberjunction/templates-base-types';
+import { ReferencedVariablesResult } from "./TemplateVariableAnalysis.js";
+import { TemplateRenderOptions, TemplateRenderResult } from '@memberjunction/templates-base-types';
 /**
  * This class extends the nunjucks loader to allow adding templates directly to the loader
  */
@@ -54,8 +55,13 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
      * not ours, so we drive the render-layer init explicitly here after the cache is loaded.
      */
     Config(forceRefresh?: boolean, contextUser?: UserInfo, provider?: IMetadataProvider): Promise<void>;
-    /** One-time nunjucks environment + registered-extension setup, performed after the base templates load. */
+    /** One-time nunjucks environment + registered-extension setup. {@link Config} and {@link GetReferencedVariables} call it. */
     private ensureNunjucksInitialized;
+    /**
+     * Registers every {@link TemplateExtensionBase} subclass with the given environment.
+     * @returns the extension instances registered on `env`
+     */
+    private registerExtensions;
     /** True once the underlying TemplateEngineBase cache has loaded. */
     get Loaded(): boolean;
     get ContextUser(): UserInfo;
@@ -66,6 +72,7 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
     get TemplateContents(): MJTemplateContentEntity[];
     get TemplateParams(): MJTemplateParamEntity[];
     FindTemplate(templateName: string): MJTemplateEntityExtended;
+    FindTemplateByID(templateId: string): MJTemplateEntityExtended | undefined;
     SetupNunjucks(): void;
     private _nunjucksEnv;
     /**
@@ -76,7 +83,11 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
      * renders, not the stored-Template extension surface. Reset to `undefined` whenever the loader is rebuilt.
      */
     private _nunjucksEnvNoAutoescape?;
+    /** Environment with autoescape off and the registered extensions, for {@link RenderTemplate} with `autoescape: false`. Created lazily. */
+    private _nunjucksEnvRawTemplates?;
     private _templateLoader;
+    /** The extension instances registered on {@link _nunjucksEnv}. The variable analysis parses their custom tags. */
+    private _registeredExtensions;
     /**
      * Builds a Nunjucks environment bound to the shared template loader with our custom filters applied.
      * Single source of truth for env construction so the autoescape and no-autoescape environments never drift.
@@ -89,9 +100,18 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
      */
     private addCustomFilters;
     /**
-     * Cache for templates that have been created by nunjucks so we don't have to create them over and over
+     * Compiled templates per environment, then per template content ID, so a raw compile is never served to an
+     * escaping render.
      */
     private _templateCache;
+    /**
+     * Bounded LRU cache for ad-hoc templates rendered via {@link RenderTemplateSimple}.
+     * Keyed by `${autoescape ? '1:' : '0:'}${templateText}`.
+     */
+    private static readonly MAX_SIMPLE_TEMPLATE_CACHE_SIZE;
+    private _simpleTemplateCache;
+    /** {@link GetReferencedVariables} results by template text. */
+    private _referencedVariablesCache;
     AddTemplate(templateEntity: MJTemplateEntityExtended): void;
     /**
      * Renders a template with the given data.
@@ -100,8 +120,10 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
      * @param data
      * @param SkipValidation if true, validation is skipped entirely (or reduced to warnings depending on SuppressWarnings)
      * @param SuppressWarnings if true AND SkipValidation is true, no validation warnings are logged. When SkipValidation is true but SuppressWarnings is false, validation issues are logged as non-fatal warnings. Defaults to false.
+     * @param options `autoescape` (default `true`) toggles HTML escaping; pass `false` when the output is plain text for
+     *   a model, where `Affineur & Owner` must not become `Affineur &amp; Owner`
      */
-    RenderTemplate(templateEntity: MJTemplateEntityExtended, templateContent: MJTemplateContentEntity, data: any, SkipValidation?: boolean, SuppressWarnings?: boolean): Promise<TemplateRenderResult>;
+    RenderTemplate(templateEntity: MJTemplateEntityExtended, templateContent: MJTemplateContentEntity, data: any, SkipValidation?: boolean, SuppressWarnings?: boolean, options?: TemplateRenderOptions): Promise<TemplateRenderResult>;
     /**
      * Simple rendering utilty method. Use this to render any valid Nunjucks Template within the Nunjucks environment created by the Template Engine
      * without having to use the stored metadata (Templates/Template Contents/Template Params/etc) within the MJ database. This is useful when you have
@@ -112,30 +134,40 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
      *   `false` for plain-text contexts such as email subject lines, where `Acme & Co` must not become `Acme &amp; Co`.
      * @returns
      */
-    RenderTemplateSimple(templateText: string, data: any, options?: {
-        autoescape?: boolean;
-    }): Promise<TemplateRenderResult>;
+    RenderTemplateSimple(templateText: string, data: any, options?: TemplateRenderOptions): Promise<TemplateRenderResult>;
+    /**
+     * Returns the top-level variable names a template's text reads, following stored templates it
+     * pulls in by literal name (`{% include %}`, `{% import %}`, `{% from %}`, `{% extends %}`,
+     * `{% template %}`). It sets up the Nunjucks environment first, so the registered extensions' tags
+     * parse before the first {@link Config} too. The result is frozen and cached per template text until
+     * {@link ClearTemplateCache}; a result whose text does not parse is not cached.
+     */
+    GetReferencedVariables(templateText: string): ReferencedVariablesResult;
     /**
      * This method is responsible for creating a new Nunjucks template, caching it, and returning it.
      * If the templateContentId already had a template created, it will return that template from the cache.
      * @param templateId - must be provided if you want to cache the template, if not provided the template will not be cached
      * @param templateText
      * @param cacheTemplate - if true, the template will be cached, otherwise it will not be cached
+     * @param env the environment to compile against; defaults to the shared autoescape environment
      */
-    protected getNunjucksTemplate(templateContentId: string, templateText: string, cacheTemplate: boolean): any;
+    protected getNunjucksTemplate(templateContentId: string, templateText: string, cacheTemplate: boolean, env?: nunjucks.Environment): nunjucks.Template;
     /**
      * Simple utility method to create a new Nunjucks template object and bind it to a Nunjucks environment.
      * @param templateText
      * @param env the environment to bind to; defaults to the shared autoescape environment
      * @returns
      */
-    protected createNunjucksTemplate(templateText: string, env?: nunjucks.Environment): any;
+    protected createNunjucksTemplate(templateText: string, env?: nunjucks.Environment): nunjucks.Template;
     /**
      * Resolves the Nunjucks environment for an ad-hoc {@link RenderTemplateSimple} render. The autoescape:false
      * variant is created lazily on first use and cached, so callers that never opt out pay nothing.
      * @param autoescape whether the returned environment HTML-escapes output
      */
     private getSimpleRenderEnv;
+    /** The environment for {@link RenderTemplate} with `autoescape: false`, built on first use with the registered extensions. */
+    private getRawTemplateEnv;
+    /** Clears the compiled-template cache and the cached {@link GetReferencedVariables} results. */
     ClearTemplateCache(): void;
     /**
      * Promisifies the Nunjucks template rendering process.

package/dist/TemplateEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TemplateEngine.d.ts","sourceRoot":"","sources":["../src/TemplateEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAY,QAAQ,EAAuB,MAAM,sBAAsB,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAChL,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,aAAa,EAAwB,MAAM,wBAAwB,CAAC;AAE7E,OAAO,EAAE,oBAAoB,EAAsB,MAAM,sCAAsC,CAAA;AAE/F;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,QAAQ,CAAC,MAAM;IAC9C,KAAK,UAAQ;IAEpB,qCAAqC;IACrC,IAAW,KAAK,YAEf;IACD,qCAAqC;IACrC,IAAW,KAAK,CAAC,KAAK,SAAA,EAErB;IAED,OAAO,CAAC,SAAS,CAA0D;IAE3E;;;;OAIG;IACI,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,wBAAwB;IAIzE;;;;OAIG;IACI,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG;IAY5C,yCAAyC;IAClC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG;CAG/C;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,aAAa,CAAC,oBAAoB,CAAC;IACzE,WAAkB,QAAQ,IAAI,oBAAoB,CAEjD;IAED;;;;;;OAMG;IACH,OAAO,KAAK,IAAI,GAEf;IAED,+FAA+F;IAC/F,OAAO,CAAC,YAAY,CAAC,CAAW;IAChC,OAAO,CAAC,uBAAuB,CAAkB;IAEjD;;;;;;;;OAQG;IACU,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAShH,2GAA2G;IAC3G,OAAO,CAAC,yBAAyB;IAuBjC,oEAAoE;IACpE,IAAW,MAAM,IAAI,OAAO,CAA6B;IACzD,IAAW,WAAW,IAAI,QAAQ,CAAuD;IACzF,IAAW,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAgC;IAGtE,IAAW,SAAS,IAAI,wBAAwB,EAAE,CAAgC;IAClF,IAAW,oBAAoB,IAAI,2BAA2B,EAAE,CAA2C;IAC3G,IAAW,kBAAkB,IAAI,wBAAwB,EAAE,CAAyC;IACpG,IAAW,gBAAgB,IAAI,uBAAuB,EAAE,CAAuC;IAC/F,IAAW,cAAc,IAAI,qBAAqB,EAAE,CAAqC;IAClF,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,wBAAwB;IAE5D,aAAa,IAAI,IAAI;IAM5B,OAAO,CAAC,YAAY,CAAuB;IAC3C;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB,CAAC,CAAuB;IACxD,OAAO,CAAC,eAAe,CAAuB;IAE9C;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAQnC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IA8BxB;;OAEG;IACH,OAAO,CAAC,cAAc,CAA4C;IAE3D,WAAW,CAAC,cAAc,EAAE,wBAAwB;IAK3D;;;;;;;OAOG;IACU,cAAc,CAAC,cAAc,EAAE,wBAAwB,EAAE,eAAe,EAAE,uBAAuB,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAiE/M;;;;;;;;;OASG;IACU,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqBrI;;;;;;OAMG;IACH,SAAS,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,GAAG,GAAG;IAgB3G;;;;;OAKG;IACH,SAAS,CAAC,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,QAAQ,CAAC,WAA+B,GAAG,GAAG;IAI1G;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAUnB,kBAAkB;IAIzB;;;;OAIG;cACa,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IAY5F;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,kBAAkB,CAAC,cAAc,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,GAAG;CAuD5G"}
+{"version":3,"file":"TemplateEngine.d.ts","sourceRoot":"","sources":["../src/TemplateEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAY,QAAQ,EAAuB,MAAM,sBAAsB,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAChL,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,aAAa,EAAwB,MAAM,wBAAwB,CAAC;AAG7E,OAAO,EAA8B,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAsB,MAAM,sCAAsC,CAAA;AAMtH;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,QAAQ,CAAC,MAAM;IAC9C,KAAK,UAAQ;IAEpB,qCAAqC;IACrC,IAAW,KAAK,YAEf;IACD,qCAAqC;IACrC,IAAW,KAAK,CAAC,KAAK,SAAA,EAErB;IAED,OAAO,CAAC,SAAS,CAA0D;IAE3E;;;;OAIG;IACI,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,wBAAwB;IAIzE;;;;OAIG;IACI,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG;IAY5C,yCAAyC;IAClC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG;CAG/C;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,aAAa,CAAC,oBAAoB,CAAC;IACzE,WAAkB,QAAQ,IAAI,oBAAoB,CAEjD;IAED;;;;;;OAMG;IACH,OAAO,KAAK,IAAI,GAEf;IAED,+FAA+F;IAC/F,OAAO,CAAC,YAAY,CAAC,CAAW;IAChC,OAAO,CAAC,uBAAuB,CAAkB;IAEjD;;;;;;;;OAQG;IACU,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAShH,6HAA6H;IAC7H,OAAO,CAAC,yBAAyB;IAajC;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAgB1B,oEAAoE;IACpE,IAAW,MAAM,IAAI,OAAO,CAA6B;IACzD,IAAW,WAAW,IAAI,QAAQ,CAAuD;IACzF,IAAW,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAgC;IAGtE,IAAW,SAAS,IAAI,wBAAwB,EAAE,CAAgC;IAClF,IAAW,oBAAoB,IAAI,2BAA2B,EAAE,CAA2C;IAC3G,IAAW,kBAAkB,IAAI,wBAAwB,EAAE,CAAyC;IACpG,IAAW,gBAAgB,IAAI,uBAAuB,EAAE,CAAuC;IAC/F,IAAW,cAAc,IAAI,qBAAqB,EAAE,CAAqC;IAClF,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,wBAAwB;IAC5D,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS;IAE1E,aAAa,IAAI,IAAI;IAQ5B,OAAO,CAAC,YAAY,CAAuB;IAC3C;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB,CAAC,CAAuB;IACxD,0IAA0I;IAC1I,OAAO,CAAC,wBAAwB,CAAC,CAAuB;IACxD,OAAO,CAAC,eAAe,CAAuB;IAC9C,kHAAkH;IAClH,OAAO,CAAC,qBAAqB,CAA4B;IAEzD;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAQnC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IA8BxB;;;OAGG;IACH,OAAO,CAAC,cAAc,CAAuE;IAE7F;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,8BAA8B,CAAQ;IAC9D,OAAO,CAAC,oBAAoB,CAAwE;IAEpG,+DAA+D;IAC/D,OAAO,CAAC,yBAAyB,CAAgD;IAE1E,WAAW,CAAC,cAAc,EAAE,wBAAwB;IAK3D;;;;;;;;;OASG;IACU,cAAc,CAAC,cAAc,EAAE,wBAAwB,EAAE,eAAe,EAAE,uBAAuB,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkEhP;;;;;;;;;OASG;IACU,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqClI;;;;;;OAMG;IACI,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,yBAAyB;IAmB9E;;;;;;;OAOG;IACH,SAAS,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,GAAE,QAAQ,CAAC,WAA+B,GAAG,QAAQ,CAAC,QAAQ;IAqBxK;;;;;OAKG;IACH,SAAS,CAAC,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,QAAQ,CAAC,WAA+B,GAAG,QAAQ,CAAC,QAAQ;IAIxH;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAU1B,8HAA8H;IAC9H,OAAO,CAAC,iBAAiB;IAQzB,gGAAgG;IACzF,kBAAkB;IAMzB;;;;OAIG;cACa,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IAa5F;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,kBAAkB,CAAC,cAAc,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,GAAG;CA8D5G"}