@memberjunction/templates 6.2.0-edge.4 → 6.2.0-edge.6

package/README.md

@@ -85,6 +85,10 @@ if (result.Success) {
 }
 ```
 
+Stored templates are HTML-escaped by default. For plain text a model reads (AI prompt templates), pass
+`{ autoescape: false }` as the sixth argument: `Affineur & Owner` then stays `Affineur & Owner`. The raw render keeps
+the registered extensions, and a `{% template %}` embed inside it renders raw too.
+
 ### Simple Template Rendering
 
 For ad-hoc templates not stored in the database:
@@ -109,6 +113,23 @@ const subject = await engine.RenderTemplateSimple(
 // subject.Output: "Acme & Co — your invite"  (no entity encoding)
 ```
 
+### Variables a Template Reads
+
+`GetReferencedVariables()` parses a template's text and returns the top-level variable names it reads:
+
+```typescript
+const result = engine.GetReferencedVariables('{% for r in rows %}{{ r.name }}{% endfor %}{{ user.email }}');
+// result.Names: rows, r, user
+// result.Complete: true
+```
+
+- `Names` holds top-level names only: `{{ user.email }}` gives `user`. It also holds loop, `set`, filter and keyword-argument names, so treat it as a superset of the data keys the template reads.
+- The analysis follows stored templates named by a string literal in `{% include %}`, `{% import %}`, `{% from %}`, `{% extends %}` and `{% template %}`, and reads every content of each one. It does not follow a template named by an expression.
+- Of the custom tags, the analysis follows `{% template %}` and reads the arguments and body of `{% AIPrompt %}`. A tag from any other extension makes the result incomplete, because the extension's code can read data that the template text does not show.
+- `Complete: false` means "unknown", not "none". `Reason` tells why: a template is named by an expression, a named template does not exist or cannot be loaded, the text does not parse, or a tag comes from an extension the analysis does not know. A caller that keeps only the referenced data must keep all of it when the result is incomplete.
+- The engine returns the same frozen result for the same template text until `ClearTemplateCache()`. It does not cache a result with `ParseFailed: true` (the text, or a template it pulls in, does not parse).
+- The method sets up the Nunjucks environment and the registered extensions first, so it gives the same answer before and after the first `Config()`.
+
 ### Custom Nunjucks Filters
 
 The engine provides built-in filters for JSON operations:
@@ -215,9 +236,10 @@ graph LR
 | `Config()` | method | Load metadata and initialize Nunjucks environment |
 | `RenderTemplate()` | method | Render a stored template with validation |
 | `RenderTemplateSimple()` | method | Render an ad-hoc template string |
+| `GetReferencedVariables()` | method | List the top-level variables a template's text reads |
 | `AddTemplate()` | method | Add a template to the Nunjucks loader |
 | `SetupNunjucks()` | method | Re-initialize the Nunjucks environment |
-| `ClearTemplateCache()` | method | Clear cached compiled templates |
+| `ClearTemplateCache()` | method | Clear cached compiled templates and variable analysis results |
 
 ### Rendering Process
 

package/dist/NunjucksSandbox.js

@@ -195,10 +195,11 @@ function guardRegistryLookup(registry) {
 }
 /**
  * `obj.key` and `obj[key]`. The key is converted to a string once, so a computed key cannot change
- * between the check and the read. The member is checked before nunjucks reads it again; templates
- * cannot define accessors (the accessor helpers are restricted names), so both reads see the same value.
+ * between the check and the read. The member is read once (`memberVal`), checked against restricted/nunjucks
+ * values, and returned directly (or bound to `obj` when it is a method, matching nunjucks' `memberLookup`
+ * without evaluating `obj[key]` a second time).
  */
-function guardMemberLookup(original) {
+function guardMemberLookup(_original) {
     return (obj, val) => {
         if (obj === undefined || obj === null || typeof val === 'symbol') {
             return undefined;
@@ -210,9 +211,19 @@ function guardMemberLookup(original) {
         if (RESTRICTED_MEMBER_NAMES.has(key) && !isOwnDataValue(obj, key)) {
             return undefined;
         }
-        assertAllowed(obj, `members of a restricted value (reading "${key}")`);
-        assertAllowed(readMember(obj, key), `the member "${key}"`);
-        return original(obj, key);
+        if (RESTRICTED_VALUES.has(obj)) {
+            throw new TemplateSandboxError(`Templates may not access members of a restricted value (reading "${key}")`);
+        }
+        const memberVal = readMember(obj, key);
+        if (isRestrictedOrNunjucksValue(memberVal)) {
+            throw new TemplateSandboxError(`Templates may not access the member "${key}"`);
+        }
+        if (typeof memberVal === 'function') {
+            return function (...args) {
+                return memberVal.apply(obj, args);
+            };
+        }
+        return memberVal;
     };
 }
 /**
@@ -229,16 +240,22 @@ function guardContextOrFrameLookup() {
         if (value === undefined || (RESTRICTED_MEMBER_NAMES.has(name) && typeof value === 'function')) {
             return undefined;
         }
-        assertAllowed(value, `the name "${name}"`, context);
+        if (isRestrictedOrNunjucksValue(value, context)) {
+            throw new TemplateSandboxError(`Templates may not access the name "${name}"`);
+        }
         return value;
     };
 }
 /** A call such as `{{ fn(x) }}`. nunjucks passes the render context as `this`, so a call may not return it. */
 function guardCallWrap(original) {
     return (obj, name, context, args) => {
-        assertAllowed(obj, `the function "${name}"`, context);
+        if (isRestrictedOrNunjucksValue(obj, context)) {
+            throw new TemplateSandboxError(`Templates may not access the function "${name}"`);
+        }
         const result = original(obj, name, context, args);
-        assertAllowed(result, `the value returned by "${name}"`, context);
+        if (isRestrictedOrNunjucksValue(result, context)) {
+            throw new TemplateSandboxError(`Templates may not access the value returned by "${name}"`);
+        }
         return result;
     };
 }
@@ -271,7 +288,14 @@ function isNunjucksObject(value) {
     if (typeof value !== 'object' || value === null) {
         return false;
     }
-    return NUNJUCKS_MODULES.has(value) || NUNJUCKS_OBJECT_PROTOTYPES.some((prototype) => prototype.isPrototypeOf(value));
+    if (NUNJUCKS_MODULES.has(value)) {
+        return true;
+    }
+    const proto = Object.getPrototypeOf(value);
+    if (proto === Object.prototype || proto === Array.prototype || proto === null) {
+        return false;
+    }
+    return NUNJUCKS_OBJECT_PROTOTYPES.some((prototype) => prototype.isPrototypeOf(value));
 }
 /** Reads a member the way a template does, including members of primitive strings and numbers. */
 function readMember(obj, key) {
@@ -283,10 +307,11 @@ function pairKeyName(pair) {
     const value = typeof key === 'object' && key !== null ? readMember(key, 'value') : undefined;
     return typeof value === 'string' ? value : undefined;
 }
-/** Throws when a lookup or call would give a template a restricted value, the render context or another nunjucks object. */
-function assertAllowed(value, subject, context) {
-    if (RESTRICTED_VALUES.has(value) || isNunjucksObject(value) || (context !== undefined && value === context)) {
-        throw new TemplateSandboxError(`Templates may not access ${subject}`);
+/** Returns true when a lookup or call would give a template a restricted value, the render context or another nunjucks object. */
+function isRestrictedOrNunjucksValue(value, context) {
+    if (value === null || (typeof value !== 'object' && typeof value !== 'function')) {
+        return false;
     }
+    return RESTRICTED_VALUES.has(value) || isNunjucksObject(value) || (context !== undefined && value === context);
 }
 //# sourceMappingURL=NunjucksSandbox.js.map

package/dist/NunjucksSandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"NunjucksSandbox.js","sourceRoot":"","sources":["../src/NunjucksSandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AA4D9D,MAAM,QAAQ,GAAG,QAAwC,CAAC;AAK1D,yGAAyG;AACzG,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IACzD,aAAa;IACb,WAAW;IACX,WAAW;IACX,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;CACrB,CAAC,CAAC;AAEH,qHAAqH;AACrH,MAAM,iBAAiB,GAAyB,IAAI,GAAG,CAAU;IAC7D,QAAQ;IACR,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,WAAW;IACnC,CAAC,QAAQ,CAAC,MAAiD,CAAC,CAAC,CAAC,WAAW;IACzE,CAAC,KAAK,SAAS,CAAC,MAAuD,CAAC,CAAC,CAAC,WAAW;IACrF,UAAU,CAAC,IAAI;IACf,MAAM;IACN,OAAO;IACP,UAAU;IACV,UAAU,CAAC,OAAO;CACrB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC;AAE5D,8EAA8E;AAC9E,MAAM,sBAAsB,GAAW,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAE1F,gFAAgF;AAChF,MAAM,0BAA0B,GAAW,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;AAEjG,uHAAuH;AACvH,MAAM,0BAA0B,GAAsB,CAAC,sBAAsB,EAAE,0BAA0B,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAE7I,8CAA8C;AAC9C,MAAM,gBAAgB,GAAyB,IAAI,GAAG,CAAU;IAC5D,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK;CAC/G,CAAC,CAAC;AAEH,+FAA+F;AAC/F,MAAM,eAAe,GAAG,IAAI,OAAO,EAAiB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,qBAAqB;IACjC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC;IAC5D,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC1C,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC3E,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACzD,YAAY,CAAC,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,CAAC,CAAC;IACzE,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACjD,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACnD,YAAY,CAAC,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IAC/D,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACjF,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,sFAAsF;AACtF,SAAS,YAAY,CACjB,MAAS,EACT,IAAO,EACP,KAA+B;IAE/B,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO;IACX,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;AAC3B,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,QAAiC;IACjD,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7C,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,QAAqB;IAC3C,OAAO,SAAS,kBAAkB,CAAgB,IAAa,EAAE,KAAc;QAC3E,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,GAAG,2CAA2C,CAAC,CAAC;QAC7G,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,QAA2C;IAC/D,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACnD,OAAO,SAAS,YAAY,CAAgB,GAAG,SAAoB;YAC/D,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;IACN,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,SAAoB;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,mBAAmB,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,mBAAmB,EAAE,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,mBAAmB,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;IACL,CAAC;IACD,mBAAmB,CAAC,UAAU,GAAG,IAAI,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAChG,CAAC;AAED,mGAAmG;AACnG,SAAS,kBAAkB,CAAC,KAAc;IACtC,OAAO,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AAC9H,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,QAAiD;IAC3E,OAAO,CAAC,GAAG,EAAE,EAAE;QACX,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/H,MAAM,IAAI,oBAAoB,CAAC,uFAAuF,CAAC,CAAC;QAC5H,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,QAAyC;IAClE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,qBAAqB,CAAsC,IAAa;QAClG,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,UAAU,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxG,MAAM,IAAI,oBAAoB,CAAC,iGAAiG,CAAC,CAAC;QACtI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,GAAG,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,oBAAoB,CAAC,uFAAuF,GAAG,IAAI,CAAC,CAAC;QACnI,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,QAA8C;IACrE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAAC,4FAA4F,GAAG,IAAI,CAAC,CAAC;QACxI,CAAC;QACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,aAAa,CAAC,GAAG,EAAE,2CAA2C,GAAG,IAAI,CAAC,CAAC;QACvE,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,eAAe,GAAG,GAAG,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB;IAC9B,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5B,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC,EAAE,CAAC;YAC5F,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,aAAa,CAAC,KAAK,EAAE,aAAa,IAAI,GAAG,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC;AACN,CAAC;AAED,+GAA+G;AAC/G,SAAS,aAAa,CAAC,QAA0C;IAC7D,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAChC,aAAa,CAAC,GAAG,EAAE,iBAAiB,IAAI,GAAG,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,aAAa,CAAC,MAAM,EAAE,0BAA0B,IAAI,GAAG,EAAE,OAAO,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;AACN,CAAC;AAED,yHAAyH;AACzH,SAAS,UAAU,CAAC,OAA8B,EAAE,KAAoB,EAAE,IAAY;IAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAY,EAAE,GAAW;IAC7C,OAAO,GAAG,KAAK,WAAW;WACnB,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;WACvC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC;WACvB,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,UAAU,CAAC;AACtD,CAAC;AAED,uGAAuG;AACvG,SAAS,gBAAgB,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACzH,CAAC;AAED,kGAAkG;AAClG,SAAS,UAAU,CAAC,GAAY,EAAE,GAAW;IACzC,OAAQ,GAA8C,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,wHAAwH;AACxH,SAAS,WAAW,CAAC,IAAa;IAC9B,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,4HAA4H;AAC5H,SAAS,aAAa,CAAC,KAAc,EAAE,OAAe,EAAE,OAA+B;IACnF,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,oBAAoB,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;AACL,CAAC"}
+{"version":3,"file":"NunjucksSandbox.js","sourceRoot":"","sources":["../src/NunjucksSandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AA4D9D,MAAM,QAAQ,GAAG,QAAwC,CAAC;AAK1D,yGAAyG;AACzG,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IACzD,aAAa;IACb,WAAW;IACX,WAAW;IACX,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;CACrB,CAAC,CAAC;AAEH,qHAAqH;AACrH,MAAM,iBAAiB,GAAyB,IAAI,GAAG,CAAU;IAC7D,QAAQ;IACR,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,WAAW;IACnC,CAAC,QAAQ,CAAC,MAAiD,CAAC,CAAC,CAAC,WAAW;IACzE,CAAC,KAAK,SAAS,CAAC,MAAuD,CAAC,CAAC,CAAC,WAAW;IACrF,UAAU,CAAC,IAAI;IACf,MAAM;IACN,OAAO;IACP,UAAU;IACV,UAAU,CAAC,OAAO;CACrB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC;AAE5D,8EAA8E;AAC9E,MAAM,sBAAsB,GAAW,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAE1F,gFAAgF;AAChF,MAAM,0BAA0B,GAAW,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;AAEjG,uHAAuH;AACvH,MAAM,0BAA0B,GAAsB,CAAC,sBAAsB,EAAE,0BAA0B,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAE7I,8CAA8C;AAC9C,MAAM,gBAAgB,GAAyB,IAAI,GAAG,CAAU;IAC5D,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK;CAC/G,CAAC,CAAC;AAEH,+FAA+F;AAC/F,MAAM,eAAe,GAAG,IAAI,OAAO,EAAiB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,qBAAqB;IACjC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC;IAC5D,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC1C,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC3E,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACzD,YAAY,CAAC,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,CAAC,CAAC;IACzE,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACjD,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACnD,YAAY,CAAC,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IAC/D,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACjF,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,sFAAsF;AACtF,SAAS,YAAY,CACjB,MAAS,EACT,IAAO,EACP,KAA+B;IAE/B,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO;IACX,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;AAC3B,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,QAAiC;IACjD,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7C,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,QAAqB;IAC3C,OAAO,SAAS,kBAAkB,CAAgB,IAAa,EAAE,KAAc;QAC3E,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,GAAG,2CAA2C,CAAC,CAAC;QAC7G,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,QAA2C;IAC/D,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACnD,OAAO,SAAS,YAAY,CAAgB,GAAG,SAAoB;YAC/D,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;IACN,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,SAAoB;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,mBAAmB,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,mBAAmB,EAAE,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,mBAAmB,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;IACL,CAAC;IACD,mBAAmB,CAAC,UAAU,GAAG,IAAI,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAChG,CAAC;AAED,mGAAmG;AACnG,SAAS,kBAAkB,CAAC,KAAc;IACtC,OAAO,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AAC9H,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,QAAiD;IAC3E,OAAO,CAAC,GAAG,EAAE,EAAE;QACX,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/H,MAAM,IAAI,oBAAoB,CAAC,uFAAuF,CAAC,CAAC;QAC5H,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,QAAyC;IAClE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,qBAAqB,CAAsC,IAAa;QAClG,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,UAAU,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxG,MAAM,IAAI,oBAAoB,CAAC,iGAAiG,CAAC,CAAC;QACtI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,GAAG,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,oBAAoB,CAAC,uFAAuF,GAAG,IAAI,CAAC,CAAC;QACnI,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,SAA+C;IACtE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAAC,4FAA4F,GAAG,IAAI,CAAC,CAAC;QACxI,CAAC;QACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,oBAAoB,CAAC,oEAAoE,GAAG,IAAI,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,2BAA2B,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,GAAG,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;YAClC,OAAO,UAAU,GAAG,IAAe;gBAC/B,OAAQ,SAAiD,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC/E,CAAC,CAAC;QACN,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB;IAC9B,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5B,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC,EAAE,CAAC;YAC5F,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,2BAA2B,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,oBAAoB,CAAC,sCAAsC,IAAI,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC;AACN,CAAC;AAED,+GAA+G;AAC/G,SAAS,aAAa,CAAC,QAA0C;IAC7D,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAChC,IAAI,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,oBAAoB,CAAC,mDAAmD,IAAI,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;AACN,CAAC;AAED,yHAAyH;AACzH,SAAS,UAAU,CAAC,OAA8B,EAAE,KAAoB,EAAE,IAAY;IAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAY,EAAE,GAAW;IAC7C,OAAO,GAAG,KAAK,WAAW;WACnB,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;WACvC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC;WACvB,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,UAAU,CAAC;AACtD,CAAC;AAED,uGAAuG;AACvG,SAAS,gBAAgB,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,kGAAkG;AAClG,SAAS,UAAU,CAAC,GAAY,EAAE,GAAW;IACzC,OAAQ,GAA8C,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,wHAAwH;AACxH,SAAS,WAAW,CAAC,IAAa;IAC9B,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,kIAAkI;AAClI,SAAS,2BAA2B,CAAC,KAAc,EAAE,OAA+B;IAChF,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,OAAO,CAAC,CAAC;AACnH,CAAC"}

package/dist/TemplateEngine.d.ts

@@ -2,7 +2,8 @@ import { IMetadataProvider, UserInfo } from "@memberjunction/core";
 import { MJTemplateCategoryEntity, MJTemplateContentEntity, MJTemplateContentTypeEntity, MJTemplateEntityExtended, MJTemplateParamEntity } from "@memberjunction/core-entities";
 import nunjucks from 'nunjucks';
 import { BaseSingleton } from "@memberjunction/global";
-import { TemplateRenderResult } from '@memberjunction/templates-base-types';
+import { ReferencedVariablesResult } from "./TemplateVariableAnalysis.js";
+import { TemplateRenderOptions, TemplateRenderResult } from '@memberjunction/templates-base-types';
 /**
  * This class extends the nunjucks loader to allow adding templates directly to the loader
  */
@@ -54,8 +55,13 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
      * not ours, so we drive the render-layer init explicitly here after the cache is loaded.
      */
     Config(forceRefresh?: boolean, contextUser?: UserInfo, provider?: IMetadataProvider): Promise<void>;
-    /** One-time nunjucks environment + registered-extension setup, performed after the base templates load. */
+    /** One-time nunjucks environment + registered-extension setup. {@link Config} and {@link GetReferencedVariables} call it. */
     private ensureNunjucksInitialized;
+    /**
+     * Registers every {@link TemplateExtensionBase} subclass with the given environment.
+     * @returns the extension instances registered on `env`
+     */
+    private registerExtensions;
     /** True once the underlying TemplateEngineBase cache has loaded. */
     get Loaded(): boolean;
     get ContextUser(): UserInfo;
@@ -66,6 +72,7 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
     get TemplateContents(): MJTemplateContentEntity[];
     get TemplateParams(): MJTemplateParamEntity[];
     FindTemplate(templateName: string): MJTemplateEntityExtended;
+    FindTemplateByID(templateId: string): MJTemplateEntityExtended | undefined;
     SetupNunjucks(): void;
     private _nunjucksEnv;
     /**
@@ -76,7 +83,11 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
      * renders, not the stored-Template extension surface. Reset to `undefined` whenever the loader is rebuilt.
      */
     private _nunjucksEnvNoAutoescape?;
+    /** Environment with autoescape off and the registered extensions, for {@link RenderTemplate} with `autoescape: false`. Created lazily. */
+    private _nunjucksEnvRawTemplates?;
     private _templateLoader;
+    /** The extension instances registered on {@link _nunjucksEnv}. The variable analysis parses their custom tags. */
+    private _registeredExtensions;
     /**
      * Builds a Nunjucks environment bound to the shared template loader with our custom filters applied.
      * Single source of truth for env construction so the autoescape and no-autoescape environments never drift.
@@ -89,9 +100,18 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
      */
     private addCustomFilters;
     /**
-     * Cache for templates that have been created by nunjucks so we don't have to create them over and over
+     * Compiled templates per environment, then per template content ID, so a raw compile is never served to an
+     * escaping render. Tracks `sourceText` so in-place `AutoRefresh` updates to `TemplateText` recompile automatically.
      */
     private _templateCache;
+    /**
+     * Bounded LRU cache for ad-hoc templates rendered via {@link RenderTemplateSimple}.
+     * Keyed by `${autoescape ? '1:' : '0:'}${templateText}`.
+     */
+    private static readonly MAX_SIMPLE_TEMPLATE_CACHE_SIZE;
+    private _simpleTemplateCache;
+    /** {@link GetReferencedVariables} results by template text. */
+    private _referencedVariablesCache;
     AddTemplate(templateEntity: MJTemplateEntityExtended): void;
     /**
      * Renders a template with the given data.
@@ -100,8 +120,10 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
      * @param data
      * @param SkipValidation if true, validation is skipped entirely (or reduced to warnings depending on SuppressWarnings)
      * @param SuppressWarnings if true AND SkipValidation is true, no validation warnings are logged. When SkipValidation is true but SuppressWarnings is false, validation issues are logged as non-fatal warnings. Defaults to false.
+     * @param options `autoescape` (default `true`) toggles HTML escaping; pass `false` when the output is plain text for
+     *   a model, where `Affineur & Owner` must not become `Affineur &amp; Owner`
      */
-    RenderTemplate(templateEntity: MJTemplateEntityExtended, templateContent: MJTemplateContentEntity, data: any, SkipValidation?: boolean, SuppressWarnings?: boolean): Promise<TemplateRenderResult>;
+    RenderTemplate(templateEntity: MJTemplateEntityExtended, templateContent: MJTemplateContentEntity, data: any, SkipValidation?: boolean, SuppressWarnings?: boolean, options?: TemplateRenderOptions): Promise<TemplateRenderResult>;
     /**
      * Simple rendering utilty method. Use this to render any valid Nunjucks Template within the Nunjucks environment created by the Template Engine
      * without having to use the stored metadata (Templates/Template Contents/Template Params/etc) within the MJ database. This is useful when you have
@@ -112,37 +134,58 @@ export declare class TemplateEngineServer extends BaseSingleton<TemplateEngineSe
      *   `false` for plain-text contexts such as email subject lines, where `Acme & Co` must not become `Acme &amp; Co`.
      * @returns
      */
-    RenderTemplateSimple(templateText: string, data: any, options?: {
-        autoescape?: boolean;
-    }): Promise<TemplateRenderResult>;
+    RenderTemplateSimple(templateText: string, data: any, options?: TemplateRenderOptions): Promise<TemplateRenderResult>;
+    /**
+     * Returns the top-level variable names a template's text reads, following stored templates it
+     * pulls in by literal name (`{% include %}`, `{% import %}`, `{% from %}`, `{% extends %}`,
+     * `{% template %}`). It sets up the Nunjucks environment first, so the registered extensions' tags
+     * parse before the first {@link Config} too. The result is frozen and cached per template text until
+     * {@link ClearTemplateCache}; a result whose text does not parse is not cached.
+     */
+    GetReferencedVariables(templateText: string): ReferencedVariablesResult;
     /**
      * This method is responsible for creating a new Nunjucks template, caching it, and returning it.
      * If the templateContentId already had a template created, it will return that template from the cache.
      * @param templateId - must be provided if you want to cache the template, if not provided the template will not be cached
      * @param templateText
      * @param cacheTemplate - if true, the template will be cached, otherwise it will not be cached
+     * @param env the environment to compile against; defaults to the shared autoescape environment
      */
-    protected getNunjucksTemplate(templateContentId: string, templateText: string, cacheTemplate: boolean): any;
+    protected getNunjucksTemplate(templateContentId: string, templateText: string, cacheTemplate: boolean, env?: nunjucks.Environment): nunjucks.Template;
     /**
      * Simple utility method to create a new Nunjucks template object and bind it to a Nunjucks environment.
      * @param templateText
      * @param env the environment to bind to; defaults to the shared autoescape environment
      * @returns
      */
-    protected createNunjucksTemplate(templateText: string, env?: nunjucks.Environment): any;
+    protected createNunjucksTemplate(templateText: string, env?: nunjucks.Environment): nunjucks.Template;
     /**
      * Resolves the Nunjucks environment for an ad-hoc {@link RenderTemplateSimple} render. The autoescape:false
      * variant is created lazily on first use and cached, so callers that never opt out pay nothing.
      * @param autoescape whether the returned environment HTML-escapes output
      */
     private getSimpleRenderEnv;
+    /** The environment for {@link RenderTemplate} with `autoescape: false`, built on first use with the registered extensions. */
+    private getRawTemplateEnv;
+    /** Clears the compiled-template cache and the cached {@link GetReferencedVariables} results. */
     ClearTemplateCache(): void;
+    /**
+     * The user a render runs as: the one the caller passed, else the user of the render this one is
+     * nested in. There is no fallback to this engine's context user: that is whoever last configured
+     * the process-wide engine, so it may be another request's user. A render with no user runs its
+     * extensions with no user, and an extension that needs one fails the render with an error rather
+     * than run as nobody (an `{% AIPrompt %}` tag does). Every server caller should pass `ContextUser`.
+     */
+    private resolveRenderUser;
     /**
      * Promisifies the Nunjucks template rendering process.
      * @param template the Nunjucks template object
      * @param data the data to render the template with
+     * @param renderUser the user registered extensions act for during this render
      */
-    protected renderTemplateAsync(template: nunjucks.Template, data: any): Promise<string>;
+    protected renderTemplateAsync(template: nunjucks.Template, data: any, renderUser?: UserInfo): Promise<string>;
+    /** Renders `template` with `data`, inside the caller's render-user scope. */
+    private renderInCurrentScope;
     /**
      * Merges default values from template parameters with the provided data.
      * Content-specific parameters take precedence over global parameters when both define the same parameter name.

package/dist/TemplateEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TemplateEngine.d.ts","sourceRoot":"","sources":["../src/TemplateEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAY,QAAQ,EAAuB,MAAM,sBAAsB,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAChL,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,aAAa,EAAwB,MAAM,wBAAwB,CAAC;AAG7E,OAAO,EAAE,oBAAoB,EAAsB,MAAM,sCAAsC,CAAA;AAM/F;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,QAAQ,CAAC,MAAM;IAC9C,KAAK,UAAQ;IAEpB,qCAAqC;IACrC,IAAW,KAAK,YAEf;IACD,qCAAqC;IACrC,IAAW,KAAK,CAAC,KAAK,SAAA,EAErB;IAED,OAAO,CAAC,SAAS,CAA0D;IAE3E;;;;OAIG;IACI,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,wBAAwB;IAIzE;;;;OAIG;IACI,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG;IAY5C,yCAAyC;IAClC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG;CAG/C;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,aAAa,CAAC,oBAAoB,CAAC;IACzE,WAAkB,QAAQ,IAAI,oBAAoB,CAEjD;IAED;;;;;;OAMG;IACH,OAAO,KAAK,IAAI,GAEf;IAED,+FAA+F;IAC/F,OAAO,CAAC,YAAY,CAAC,CAAW;IAChC,OAAO,CAAC,uBAAuB,CAAkB;IAEjD;;;;;;;;OAQG;IACU,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAShH,2GAA2G;IAC3G,OAAO,CAAC,yBAAyB;IAuBjC,oEAAoE;IACpE,IAAW,MAAM,IAAI,OAAO,CAA6B;IACzD,IAAW,WAAW,IAAI,QAAQ,CAAuD;IACzF,IAAW,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAgC;IAGtE,IAAW,SAAS,IAAI,wBAAwB,EAAE,CAAgC;IAClF,IAAW,oBAAoB,IAAI,2BAA2B,EAAE,CAA2C;IAC3G,IAAW,kBAAkB,IAAI,wBAAwB,EAAE,CAAyC;IACpG,IAAW,gBAAgB,IAAI,uBAAuB,EAAE,CAAuC;IAC/F,IAAW,cAAc,IAAI,qBAAqB,EAAE,CAAqC;IAClF,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,wBAAwB;IAE5D,aAAa,IAAI,IAAI;IAM5B,OAAO,CAAC,YAAY,CAAuB;IAC3C;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB,CAAC,CAAuB;IACxD,OAAO,CAAC,eAAe,CAAuB;IAE9C;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAQnC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IA8BxB;;OAEG;IACH,OAAO,CAAC,cAAc,CAA4C;IAE3D,WAAW,CAAC,cAAc,EAAE,wBAAwB;IAK3D;;;;;;;OAOG;IACU,cAAc,CAAC,cAAc,EAAE,wBAAwB,EAAE,eAAe,EAAE,uBAAuB,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAiE/M;;;;;;;;;OASG;IACU,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqBrI;;;;;;OAMG;IACH,SAAS,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,GAAG,GAAG;IAgB3G;;;;;OAKG;IACH,SAAS,CAAC,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,QAAQ,CAAC,WAA+B,GAAG,GAAG;IAI1G;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAUnB,kBAAkB;IAIzB;;;;OAIG;cACa,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IAa5F;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,kBAAkB,CAAC,cAAc,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,GAAG;CAuD5G"}
+{"version":3,"file":"TemplateEngine.d.ts","sourceRoot":"","sources":["../src/TemplateEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAY,QAAQ,EAAuB,MAAM,sBAAsB,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAChL,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,aAAa,EAAwB,MAAM,wBAAwB,CAAC;AAG7E,OAAO,EAA8B,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAEnG,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAsB,MAAM,sCAAsC,CAAA;AAMtH;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,QAAQ,CAAC,MAAM;IAC9C,KAAK,UAAQ;IAEpB,qCAAqC;IACrC,IAAW,KAAK,YAEf;IACD,qCAAqC;IACrC,IAAW,KAAK,CAAC,KAAK,SAAA,EAErB;IAED,OAAO,CAAC,SAAS,CAA0D;IAE3E;;;;OAIG;IACI,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,wBAAwB;IAIzE;;;;OAIG;IACI,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG;IAY5C,yCAAyC;IAClC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG;CAG/C;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,aAAa,CAAC,oBAAoB,CAAC;IACzE,WAAkB,QAAQ,IAAI,oBAAoB,CAEjD;IAED;;;;;;OAMG;IACH,OAAO,KAAK,IAAI,GAEf;IAED,+FAA+F;IAC/F,OAAO,CAAC,YAAY,CAAC,CAAW;IAChC,OAAO,CAAC,uBAAuB,CAAkB;IAEjD;;;;;;;;OAQG;IACU,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAShH,6HAA6H;IAC7H,OAAO,CAAC,yBAAyB;IAajC;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAgB1B,oEAAoE;IACpE,IAAW,MAAM,IAAI,OAAO,CAA6B;IACzD,IAAW,WAAW,IAAI,QAAQ,CAAuD;IACzF,IAAW,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAgC;IAGtE,IAAW,SAAS,IAAI,wBAAwB,EAAE,CAAgC;IAClF,IAAW,oBAAoB,IAAI,2BAA2B,EAAE,CAA2C;IAC3G,IAAW,kBAAkB,IAAI,wBAAwB,EAAE,CAAyC;IACpG,IAAW,gBAAgB,IAAI,uBAAuB,EAAE,CAAuC;IAC/F,IAAW,cAAc,IAAI,qBAAqB,EAAE,CAAqC;IAClF,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,wBAAwB;IAC5D,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS;IAE1E,aAAa,IAAI,IAAI;IAQ5B,OAAO,CAAC,YAAY,CAAuB;IAC3C;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB,CAAC,CAAuB;IACxD,0IAA0I;IAC1I,OAAO,CAAC,wBAAwB,CAAC,CAAuB;IACxD,OAAO,CAAC,eAAe,CAAuB;IAC9C,kHAAkH;IAClH,OAAO,CAAC,qBAAqB,CAA4B;IAEzD;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAQnC;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IA8BxB;;;OAGG;IACH,OAAO,CAAC,cAAc,CAAyG;IAE/H;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,8BAA8B,CAAQ;IAC9D,OAAO,CAAC,oBAAoB,CAAwE;IAEpG,+DAA+D;IAC/D,OAAO,CAAC,yBAAyB,CAAgD;IAE1E,WAAW,CAAC,cAAc,EAAE,wBAAwB;IAK3D;;;;;;;;;OASG;IACU,cAAc,CAAC,cAAc,EAAE,wBAAwB,EAAE,eAAe,EAAE,uBAAuB,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkEhP;;;;;;;;;OASG;IACU,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqClI;;;;;;OAMG;IACI,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,yBAAyB;IAmB9E;;;;;;;OAOG;IACH,SAAS,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,GAAE,QAAQ,CAAC,WAA+B,GAAG,QAAQ,CAAC,QAAQ;IAyBxK;;;;;OAKG;IACH,SAAS,CAAC,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,QAAQ,CAAC,WAA+B,GAAG,QAAQ,CAAC,QAAQ;IAIxH;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAU1B,8HAA8H;IAC9H,OAAO,CAAC,iBAAiB;IAQzB,gGAAgG;IACzF,kBAAkB;IAMzB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;;;;OAKG;cACa,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAKnH,6EAA6E;IAC7E,OAAO,CAAC,oBAAoB;IAY5B;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,kBAAkB,CAAC,cAAc,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,GAAG;CA8D5G"}

package/dist/TemplateEngine.js

@@ -3,6 +3,8 @@ import nunjucks from 'nunjucks';
 import { BaseSingleton, MJGlobal, UUIDsEqual } from "@memberjunction/global";
 import { TemplateExtensionBase } from "./extensions/TemplateExtensionBase.js";
 import { HardenNunjucksRuntime } from "./NunjucksSandbox.js";
+import { CollectReferencedVariables } from "./TemplateVariableAnalysis.js";
+import { CurrentTemplateRenderUser, RunAsTemplateRenderUser } from "./TemplateRenderUser.js";
 import { TemplateEngineBase } from '@memberjunction/templates-base-types';
 // Stored templates are user-editable, so nunjucks is guarded as soon as the engine loads. The guard
 // is process-wide: it also covers nunjucks environments that other packages create.
@@ -60,10 +62,16 @@ export class TemplateEngineServer extends BaseSingleton {
     constructor() {
         super(...arguments);
         this._oneTimeLoadingComplete = false;
+        /** The extension instances registered on {@link _nunjucksEnv}. The variable analysis parses their custom tags. */
+        this._registeredExtensions = [];
         /**
-         * Cache for templates that have been created by nunjucks so we don't have to create them over and over
+         * Compiled templates per environment, then per template content ID, so a raw compile is never served to an
+         * escaping render. Tracks `sourceText` so in-place `AutoRefresh` updates to `TemplateText` recompile automatically.
          */
-        this._templateCache = new Map();
+        this._templateCache = new WeakMap();
+        this._simpleTemplateCache = new Map();
+        /** {@link GetReferencedVariables} results by template text. */
+        this._referencedVariablesCache = new Map();
     }
     static get Instance() {
         return super.getInstance();
@@ -95,7 +103,7 @@ export class TemplateEngineServer extends BaseSingleton {
         this.ClearTemplateCache(); // base templates (re)loaded — drop any stale compiled templates
         this.ensureNunjucksInitialized(contextUser);
     }
-    /** One-time nunjucks environment + registered-extension setup, performed after the base templates load. */
+    /** One-time nunjucks environment + registered-extension setup. {@link Config} and {@link GetReferencedVariables} call it. */
     ensureNunjucksInitialized(contextUser) {
         if (this._oneTimeLoadingComplete) {
             return;
@@ -104,17 +112,27 @@ export class TemplateEngineServer extends BaseSingleton {
         this._templateLoader = new TemplateEntityLoader();
         this._nunjucksEnv = this.createConfiguredNunjucksEnv(true);
         this._nunjucksEnvNoAutoescape = undefined; // rebound lazily against the fresh loader on next no-autoescape render
-        // get all of the extensions that are registered and register them with nunjucks
+        this._nunjucksEnvRawTemplates = undefined;
+        this._registeredExtensions = this.registerExtensions(this._nunjucksEnv, contextUser);
+    }
+    /**
+     * Registers every {@link TemplateExtensionBase} subclass with the given environment.
+     * @returns the extension instances registered on `env`
+     */
+    registerExtensions(env, contextUser) {
+        const registered = [];
         const extensions = MJGlobal.Instance.ClassFactory.GetAllRegistrations(TemplateExtensionBase);
         if (extensions && extensions.length > 0) {
             for (const ext of extensions) {
                 const SubClassConstructor = ext.SubClass;
                 const instance = new SubClassConstructor(contextUser);
                 if (ext.Key) {
-                    this._nunjucksEnv.addExtension(ext.Key, instance);
+                    env.addExtension(ext.Key, instance);
+                    registered.push(instance);
                 }
             }
         }
+        return registered;
     }
     /** True once the underlying TemplateEngineBase cache has loaded. */
     get Loaded() { return this.base.Loaded; }
@@ -127,10 +145,13 @@ export class TemplateEngineServer extends BaseSingleton {
     get TemplateContents() { return this.base.TemplateContents; }
     get TemplateParams() { return this.base.TemplateParams; }
     FindTemplate(templateName) { return this.base.FindTemplate(templateName); }
+    FindTemplateByID(templateId) { return this.base.FindTemplateByID(templateId); }
     SetupNunjucks() {
         this._templateLoader = new TemplateEntityLoader();
         this._nunjucksEnv = this.createConfiguredNunjucksEnv(true);
         this._nunjucksEnvNoAutoescape = undefined; // rebound lazily against the fresh loader on next no-autoescape render
+        this._nunjucksEnvRawTemplates = undefined;
+        this._simpleTemplateCache.clear();
     }
     /**
      * Builds a Nunjucks environment bound to the shared template loader with our custom filters applied.
@@ -178,6 +199,11 @@ export class TemplateEngineServer extends BaseSingleton {
             }
         });
     }
+    /**
+     * Bounded LRU cache for ad-hoc templates rendered via {@link RenderTemplateSimple}.
+     * Keyed by `${autoescape ? '1:' : '0:'}${templateText}`.
+     */
+    static { this.MAX_SIMPLE_TEMPLATE_CACHE_SIZE = 2000; }
     AddTemplate(templateEntity) {
         this._templateLoader.AddTemplate(templateEntity.ID, templateEntity);
     }
@@ -188,8 +214,10 @@ export class TemplateEngineServer extends BaseSingleton {
      * @param data
      * @param SkipValidation if true, validation is skipped entirely (or reduced to warnings depending on SuppressWarnings)
      * @param SuppressWarnings if true AND SkipValidation is true, no validation warnings are logged. When SkipValidation is true but SuppressWarnings is false, validation issues are logged as non-fatal warnings. Defaults to false.
+     * @param options `autoescape` (default `true`) toggles HTML escaping; pass `false` when the output is plain text for
+     *   a model, where `Affineur & Owner` must not become `Affineur & Owner`
      */
-    async RenderTemplate(templateEntity, templateContent, data, SkipValidation, SuppressWarnings) {
+    async RenderTemplate(templateEntity, templateContent, data, SkipValidation, SuppressWarnings, options) {
         try {
             if (!templateContent) {
                 return {
@@ -233,8 +261,9 @@ export class TemplateEngineServer extends BaseSingleton {
             }
             // Merge default values from parameters applicable to this content
             const mergedData = this.mergeDefaultValues(templateEntity, templateContent.ID, data);
-            const template = this.getNunjucksTemplate(templateContent.ID, templateContent.TemplateText, true);
-            const result = await this.renderTemplateAsync(template, mergedData);
+            const env = options?.autoescape === false ? this.getRawTemplateEnv() : this._nunjucksEnv;
+            const template = this.getNunjucksTemplate(templateContent.ID, templateContent.TemplateText, true, env);
+            const result = await this.renderTemplateAsync(template, mergedData, this.resolveRenderUser(options));
             return {
                 Success: true,
                 Output: result,
@@ -261,9 +290,26 @@ export class TemplateEngineServer extends BaseSingleton {
      */
     async RenderTemplateSimple(templateText, data, options) {
         try {
-            const env = this.getSimpleRenderEnv(options?.autoescape ?? true);
-            const template = this.createNunjucksTemplate(templateText, env);
-            const result = await this.renderTemplateAsync(template, data);
+            const autoescape = options?.autoescape ?? true;
+            const cacheKey = `${autoescape ? '1:' : '0:'}${templateText}`;
+            let template = this._simpleTemplateCache.get(cacheKey);
+            if (template) {
+                // Refresh LRU order
+                this._simpleTemplateCache.delete(cacheKey);
+                this._simpleTemplateCache.set(cacheKey, template);
+            }
+            else {
+                const env = this.getSimpleRenderEnv(autoescape);
+                template = this.createNunjucksTemplate(templateText, env);
+                if (this._simpleTemplateCache.size >= TemplateEngineServer.MAX_SIMPLE_TEMPLATE_CACHE_SIZE) {
+                    const oldestKey = this._simpleTemplateCache.keys().next().value;
+                    if (oldestKey !== undefined) {
+                        this._simpleTemplateCache.delete(oldestKey);
+                    }
+                }
+                this._simpleTemplateCache.set(cacheKey, template);
+            }
+            const result = await this.renderTemplateAsync(template, data, this.resolveRenderUser(options));
             return {
                 Success: true,
                 Output: result,
@@ -279,26 +325,61 @@ export class TemplateEngineServer extends BaseSingleton {
             };
         }
     }
+    /**
+     * Returns the top-level variable names a template's text reads, following stored templates it
+     * pulls in by literal name (`{% include %}`, `{% import %}`, `{% from %}`, `{% extends %}`,
+     * `{% template %}`). It sets up the Nunjucks environment first, so the registered extensions' tags
+     * parse before the first {@link Config} too. The result is frozen and cached per template text until
+     * {@link ClearTemplateCache}; a result whose text does not parse is not cached.
+     */
+    GetReferencedVariables(templateText) {
+        const cached = this._referencedVariablesCache.get(templateText);
+        if (cached) {
+            return cached;
+        }
+        this.ensureNunjucksInitialized(this.ContextUser);
+        const result = Object.freeze(CollectReferencedVariables(templateText, {
+            Extensions: this._registeredExtensions,
+            ResolveTemplateTexts: (name) => {
+                const template = this.FindTemplate(name);
+                return template ? template.Content.map((c) => c.TemplateText).filter((t) => !!t) : null;
+            },
+        }));
+        if (!result.ParseFailed) {
+            this._referencedVariablesCache.set(templateText, result);
+        }
+        return result;
+    }
     /**
      * This method is responsible for creating a new Nunjucks template, caching it, and returning it.
      * If the templateContentId already had a template created, it will return that template from the cache.
      * @param templateId - must be provided if you want to cache the template, if not provided the template will not be cached
      * @param templateText
      * @param cacheTemplate - if true, the template will be cached, otherwise it will not be cached
+     * @param env the environment to compile against; defaults to the shared autoescape environment
      */
-    getNunjucksTemplate(templateContentId, templateText, cacheTemplate) {
+    getNunjucksTemplate(templateContentId, templateText, cacheTemplate, env = this._nunjucksEnv) {
         if (templateContentId && cacheTemplate) {
-            let template = this._templateCache.get(templateContentId);
-            if (!template) {
-                template = this.createNunjucksTemplate(templateText);
-                this._templateCache.set(templateContentId, template);
+            let envCache = this._templateCache.get(env);
+            if (!envCache) {
+                envCache = new Map();
+                this._templateCache.set(env, envCache);
+            }
+            const cached = envCache.get(templateContentId);
+            if (cached && cached.sourceText === templateText) {
+                return cached.template;
             }
+            if (cached && cached.sourceText !== templateText) {
+                this._referencedVariablesCache.clear();
+            }
+            const template = this.createNunjucksTemplate(templateText, env);
+            envCache.set(templateContentId, { template, sourceText: templateText });
             return template;
         }
         else {
             // we don't have a template ID which means this is a dyanmic template, and so we don't want to do
             // anything with the cache, we just create a new nunjucks template and return it
-            return this.createNunjucksTemplate(templateText);
+            return this.createNunjucksTemplate(templateText, env);
         }
     }
     /**
@@ -324,16 +405,42 @@ export class TemplateEngineServer extends BaseSingleton {
         }
         return this._nunjucksEnvNoAutoescape;
     }
+    /** The environment for {@link RenderTemplate} with `autoescape: false`, built on first use with the registered extensions. */
+    getRawTemplateEnv() {
+        if (!this._nunjucksEnvRawTemplates) {
+            this._nunjucksEnvRawTemplates = this.createConfiguredNunjucksEnv(false);
+            this.registerExtensions(this._nunjucksEnvRawTemplates, this._contextUser);
+        }
+        return this._nunjucksEnvRawTemplates;
+    }
+    /** Clears the compiled-template cache and the cached {@link GetReferencedVariables} results. */
     ClearTemplateCache() {
-        this._templateCache.clear();
+        this._templateCache = new WeakMap();
+        this._simpleTemplateCache.clear();
+        this._referencedVariablesCache.clear();
+    }
+    /**
+     * The user a render runs as: the one the caller passed, else the user of the render this one is
+     * nested in. There is no fallback to this engine's context user: that is whoever last configured
+     * the process-wide engine, so it may be another request's user. A render with no user runs its
+     * extensions with no user, and an extension that needs one fails the render with an error rather
+     * than run as nobody (an `{% AIPrompt %}` tag does). Every server caller should pass `ContextUser`.
+     */
+    resolveRenderUser(options) {
+        return options?.ContextUser ?? CurrentTemplateRenderUser();
     }
     /**
      * Promisifies the Nunjucks template rendering process.
      * @param template the Nunjucks template object
      * @param data the data to render the template with
+     * @param renderUser the user registered extensions act for during this render
      */
-    async renderTemplateAsync(template, data) {
+    async renderTemplateAsync(template, data, renderUser) {
         HardenNunjucksRuntime(); // no-op unless something replaced a guarded nunjucks hook
+        return RunAsTemplateRenderUser(renderUser ?? this.resolveRenderUser(), () => this.renderInCurrentScope(template, data));
+    }
+    /** Renders `template` with `data`, inside the caller's render-user scope. */
+    renderInCurrentScope(template, data) {
         return new Promise((resolve, reject) => {
             template.render(data, (err, result) => {
                 if (err) {
@@ -364,16 +471,24 @@ export class TemplateEngineServer extends BaseSingleton {
         const mergedData = { ...data };
         // Get all parameters applicable to this content
         const params = templateEntity.GetParametersForContent(contentId);
+        if (!params || params.length === 0) {
+            return mergedData;
+        }
         // Group parameters by name to handle precedence
         const paramsByName = new Map();
-        // First add global parameters
-        params.filter(p => !p.TemplateContentID).forEach(p => {
-            paramsByName.set(p.Name, p);
-        });
-        // Then add/override with content-specific parameters
-        params.filter(p => UUIDsEqual(p.TemplateContentID, contentId)).forEach(p => {
-            paramsByName.set(p.Name, p);
-        });
+        // First add global parameters, then override with content-specific parameters
+        for (let i = 0; i < params.length; i++) {
+            const p = params[i];
+            if (!p.TemplateContentID) {
+                paramsByName.set(p.Name, p);
+            }
+        }
+        for (let i = 0; i < params.length; i++) {
+            const p = params[i];
+            if (p.TemplateContentID && UUIDsEqual(p.TemplateContentID, contentId)) {
+                paramsByName.set(p.Name, p);
+            }
+        }
         // Apply default values for missing parameters
         paramsByName.forEach((param, name) => {
             // Only apply default if the parameter is not already provided