@shipfox/expression 1.1.4 → 1.2.0

package/README.md

@@ -9,6 +9,14 @@ CEL checks and run-time evaluation for Shipfox workflow expressions.
 - **`WorkflowExpression`**: Stores the CEL tag, source, and check level.
 - **`ExpressionTypeEnvironment`**: Lists names and field types for typed checks.
 - **`evaluateWorkflowExpression`**: Runs a checked value against caller data.
+- **`evaluateWorkflowExpressionWithEnvironment`**: Runs a checked value against
+  a caller-owned CEL environment for explicitly scoped custom functions.
+- **`WorkflowExpressionEnvironment`**: The evaluate-only environment shape
+  accepted by the scoped evaluator.
+- **`createRangeEnvironment`**: Creates an opt-in evaluator with the bounded,
+  inclusive `range(start, stop, step)` config-templating function.
+- **`MAX_RANGE_ELEMENTS`**: The per-evaluation range materialization limit,
+  currently 1,000 values.
 - **`evaluateWorkflowPredicate`**: Returns `true` only for the boolean `true`.
 - **`parseWorkflowTemplate`**: Splits strings with `${{ ... }}` spans into
   ordered literal and expression segments.
@@ -69,6 +77,18 @@ const passed = evaluateWorkflowPredicate(expression, {
 - Treat the `event`, `inputs`, and open `jobs` contexts as untrusted.
   Interpolation field policies decide what untrusted data may reach each field.
 - Evaluation is deterministic and has no side effects.
+- Workflow evaluation does not include config-templating functions. Use a
+  caller-owned environment when a custom function is intentionally needed.
+- The config-templating range evaluator accepts CEL integers and safe integer
+  values from JavaScript contexts. It creates a fresh CEL environment and one
+  materialization budget for each evaluation, shared by nested range calls;
+  each evaluation can materialize at most 1,000 values.
+- Field resolution remains string-based by default. Callers rendering config
+  objects may opt into raw values for an exact single expression with
+  `preserveSingleExpressionType: true`; mixed literal and expression fields
+  remain strings. Under the `fail` policy, missing exact typed fields fail
+  rather than silently becoming an empty string; `runner-fill` segments remain
+  deferred for the runner instead of being hard-failed server-side.
 - The caller must pass values that match the checked data shape.
 - The evaluator does not read secrets, database rows, events, files, or external
   services.

package/dist/evaluator/evaluate-workflow-expression.d.ts

@@ -1,7 +1,17 @@
+import { type Environment } from '@marcbachmann/cel-js';
 import type { WorkflowExpression } from '../expression/workflow-expression.js';
 export type WorkflowExpressionEvaluationContext = Readonly<Record<string, unknown>>;
 export type WorkflowExpressionEvaluationValue = unknown;
+export type WorkflowExpressionEnvironment = Pick<Environment, 'evaluate'>;
 export declare function evaluateWorkflowExpression(expression: WorkflowExpression, context: WorkflowExpressionEvaluationContext): WorkflowExpressionEvaluationValue;
+/**
+ * Evaluate an expression against a caller-owned CEL environment.
+ *
+ * Workflow expressions deliberately continue to use the global CEL evaluator.
+ * Callers that need custom functions, such as config templating, must opt in
+ * by creating and passing their own environment.
+ */
+export declare function evaluateWorkflowExpressionWithEnvironment(expression: WorkflowExpression, context: WorkflowExpressionEvaluationContext, environment: WorkflowExpressionEnvironment): WorkflowExpressionEvaluationValue;
 export declare function evaluateWorkflowPredicate(expression: WorkflowExpression, context: WorkflowExpressionEvaluationContext): boolean;
 export interface FailClosedPredicateOutcome {
     readonly value: boolean;

package/dist/evaluator/evaluate-workflow-expression.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluate-workflow-expression.d.ts","sourceRoot":"","sources":["../../src/evaluator/evaluate-workflow-expression.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,sCAAsC,CAAC;AAG7E,MAAM,MAAM,mCAAmC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACpF,MAAM,MAAM,iCAAiC,GAAG,OAAO,CAAC;AAExD,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,mCAAmC,GAC3C,iCAAiC,CAMnC;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAET;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,mCAAmC,GAC3C,0BAA0B,CAS5B"}
+{"version":3,"file":"evaluate-workflow-expression.d.ts","sourceRoot":"","sources":["../../src/evaluator/evaluate-workflow-expression.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,KAAK,WAAW,EAAW,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,sCAAsC,CAAC;AAG7E,MAAM,MAAM,mCAAmC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACpF,MAAM,MAAM,iCAAiC,GAAG,OAAO,CAAC;AACxD,MAAM,MAAM,6BAA6B,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AAE1E,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,mCAAmC,GAC3C,iCAAiC,CAMnC;AAED;;;;;;GAMG;AACH,wBAAgB,yCAAyC,CACvD,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,mCAAmC,EAC5C,WAAW,EAAE,6BAA6B,GACzC,iCAAiC,CAMnC;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAET;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,kBAAkB,EAC9B,OAAO,EAAE,mCAAmC,GAC3C,0BAA0B,CAS5B"}

package/dist/evaluator/evaluate-workflow-expression.js

@@ -7,6 +7,19 @@ export function evaluateWorkflowExpression(expression, context) {
         throw new WorkflowExpressionEvaluationError(error);
     }
 }
+/**
+ * Evaluate an expression against a caller-owned CEL environment.
+ *
+ * Workflow expressions deliberately continue to use the global CEL evaluator.
+ * Callers that need custom functions, such as config templating, must opt in
+ * by creating and passing their own environment.
+ */ export function evaluateWorkflowExpressionWithEnvironment(expression, context, environment) {
+    try {
+        return environment.evaluate(expression.source, context);
+    } catch (error) {
+        throw new WorkflowExpressionEvaluationError(error);
+    }
+}
 export function evaluateWorkflowPredicate(expression, context) {
     return evaluateWorkflowExpression(expression, context) === true;
 }

package/dist/evaluator/evaluate-workflow-expression.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/evaluator/evaluate-workflow-expression.ts"],"sourcesContent":["import {evaluate} from '@marcbachmann/cel-js';\nimport type {WorkflowExpression} from '../expression/workflow-expression.js';\nimport {WorkflowExpressionEvaluationError} from './errors.js';\n\nexport type WorkflowExpressionEvaluationContext = Readonly<Record<string, unknown>>;\nexport type WorkflowExpressionEvaluationValue = unknown;\n\nexport function evaluateWorkflowExpression(\n  expression: WorkflowExpression,\n  context: WorkflowExpressionEvaluationContext,\n): WorkflowExpressionEvaluationValue {\n  try {\n    return evaluate(expression.source, context);\n  } catch (error) {\n    throw new WorkflowExpressionEvaluationError(error);\n  }\n}\n\nexport function evaluateWorkflowPredicate(\n  expression: WorkflowExpression,\n  context: WorkflowExpressionEvaluationContext,\n): boolean {\n  return evaluateWorkflowExpression(expression, context) === true;\n}\n\nexport interface FailClosedPredicateOutcome {\n  readonly value: boolean;\n  readonly evaluationFailed: boolean;\n}\n\nexport function evaluateWorkflowPredicateFailClosed(\n  expression: WorkflowExpression,\n  context: WorkflowExpressionEvaluationContext,\n): FailClosedPredicateOutcome {\n  try {\n    return {value: evaluateWorkflowPredicate(expression, context), evaluationFailed: false};\n  } catch (error) {\n    if (error instanceof WorkflowExpressionEvaluationError) {\n      return {value: false, evaluationFailed: true};\n    }\n    throw error;\n  }\n}\n"],"names":["evaluate","WorkflowExpressionEvaluationError","evaluateWorkflowExpression","expression","context","source","error","evaluateWorkflowPredicate","evaluateWorkflowPredicateFailClosed","value","evaluationFailed"],"mappings":"AAAA,SAAQA,QAAQ,QAAO,uBAAuB;AAE9C,SAAQC,iCAAiC,QAAO,cAAc;AAK9D,OAAO,SAASC,2BACdC,UAA8B,EAC9BC,OAA4C;IAE5C,IAAI;QACF,OAAOJ,SAASG,WAAWE,MAAM,EAAED;IACrC,EAAE,OAAOE,OAAO;QACd,MAAM,IAAIL,kCAAkCK;IAC9C;AACF;AAEA,OAAO,SAASC,0BACdJ,UAA8B,EAC9BC,OAA4C;IAE5C,OAAOF,2BAA2BC,YAAYC,aAAa;AAC7D;AAOA,OAAO,SAASI,oCACdL,UAA8B,EAC9BC,OAA4C;IAE5C,IAAI;QACF,OAAO;YAACK,OAAOF,0BAA0BJ,YAAYC;YAAUM,kBAAkB;QAAK;IACxF,EAAE,OAAOJ,OAAO;QACd,IAAIA,iBAAiBL,mCAAmC;YACtD,OAAO;gBAACQ,OAAO;gBAAOC,kBAAkB;YAAI;QAC9C;QACA,MAAMJ;IACR;AACF"}
+{"version":3,"sources":["../../src/evaluator/evaluate-workflow-expression.ts"],"sourcesContent":["import {type Environment, evaluate} from '@marcbachmann/cel-js';\nimport type {WorkflowExpression} from '../expression/workflow-expression.js';\nimport {WorkflowExpressionEvaluationError} from './errors.js';\n\nexport type WorkflowExpressionEvaluationContext = Readonly<Record<string, unknown>>;\nexport type WorkflowExpressionEvaluationValue = unknown;\nexport type WorkflowExpressionEnvironment = Pick<Environment, 'evaluate'>;\n\nexport function evaluateWorkflowExpression(\n  expression: WorkflowExpression,\n  context: WorkflowExpressionEvaluationContext,\n): WorkflowExpressionEvaluationValue {\n  try {\n    return evaluate(expression.source, context);\n  } catch (error) {\n    throw new WorkflowExpressionEvaluationError(error);\n  }\n}\n\n/**\n * Evaluate an expression against a caller-owned CEL environment.\n *\n * Workflow expressions deliberately continue to use the global CEL evaluator.\n * Callers that need custom functions, such as config templating, must opt in\n * by creating and passing their own environment.\n */\nexport function evaluateWorkflowExpressionWithEnvironment(\n  expression: WorkflowExpression,\n  context: WorkflowExpressionEvaluationContext,\n  environment: WorkflowExpressionEnvironment,\n): WorkflowExpressionEvaluationValue {\n  try {\n    return environment.evaluate(expression.source, context);\n  } catch (error) {\n    throw new WorkflowExpressionEvaluationError(error);\n  }\n}\n\nexport function evaluateWorkflowPredicate(\n  expression: WorkflowExpression,\n  context: WorkflowExpressionEvaluationContext,\n): boolean {\n  return evaluateWorkflowExpression(expression, context) === true;\n}\n\nexport interface FailClosedPredicateOutcome {\n  readonly value: boolean;\n  readonly evaluationFailed: boolean;\n}\n\nexport function evaluateWorkflowPredicateFailClosed(\n  expression: WorkflowExpression,\n  context: WorkflowExpressionEvaluationContext,\n): FailClosedPredicateOutcome {\n  try {\n    return {value: evaluateWorkflowPredicate(expression, context), evaluationFailed: false};\n  } catch (error) {\n    if (error instanceof WorkflowExpressionEvaluationError) {\n      return {value: false, evaluationFailed: true};\n    }\n    throw error;\n  }\n}\n"],"names":["evaluate","WorkflowExpressionEvaluationError","evaluateWorkflowExpression","expression","context","source","error","evaluateWorkflowExpressionWithEnvironment","environment","evaluateWorkflowPredicate","evaluateWorkflowPredicateFailClosed","value","evaluationFailed"],"mappings":"AAAA,SAA0BA,QAAQ,QAAO,uBAAuB;AAEhE,SAAQC,iCAAiC,QAAO,cAAc;AAM9D,OAAO,SAASC,2BACdC,UAA8B,EAC9BC,OAA4C;IAE5C,IAAI;QACF,OAAOJ,SAASG,WAAWE,MAAM,EAAED;IACrC,EAAE,OAAOE,OAAO;QACd,MAAM,IAAIL,kCAAkCK;IAC9C;AACF;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,0CACdJ,UAA8B,EAC9BC,OAA4C,EAC5CI,WAA0C;IAE1C,IAAI;QACF,OAAOA,YAAYR,QAAQ,CAACG,WAAWE,MAAM,EAAED;IACjD,EAAE,OAAOE,OAAO;QACd,MAAM,IAAIL,kCAAkCK;IAC9C;AACF;AAEA,OAAO,SAASG,0BACdN,UAA8B,EAC9BC,OAA4C;IAE5C,OAAOF,2BAA2BC,YAAYC,aAAa;AAC7D;AAOA,OAAO,SAASM,oCACdP,UAA8B,EAC9BC,OAA4C;IAE5C,IAAI;QACF,OAAO;YAACO,OAAOF,0BAA0BN,YAAYC;YAAUQ,kBAAkB;QAAK;IACxF,EAAE,OAAON,OAAO;QACd,IAAIA,iBAAiBL,mCAAmC;YACtD,OAAO;gBAACU,OAAO;gBAAOC,kBAAkB;YAAI;QAC9C;QACA,MAAMN;IACR;AACF"}

package/dist/evaluator/index.d.ts

@@ -1,3 +1,4 @@
 export { WorkflowExpressionEvaluationError, type WorkflowExpressionEvaluationFailureReason, workflowExpressionEvaluationErrorCode, } from './errors.js';
-export { evaluateWorkflowExpression, evaluateWorkflowPredicate, evaluateWorkflowPredicateFailClosed, type FailClosedPredicateOutcome, type WorkflowExpressionEvaluationContext, type WorkflowExpressionEvaluationValue, } from './evaluate-workflow-expression.js';
+export { evaluateWorkflowExpression, evaluateWorkflowExpressionWithEnvironment, evaluateWorkflowPredicate, evaluateWorkflowPredicateFailClosed, type FailClosedPredicateOutcome, type WorkflowExpressionEnvironment, type WorkflowExpressionEvaluationContext, type WorkflowExpressionEvaluationValue, } from './evaluate-workflow-expression.js';
+export { createRangeEnvironment, MAX_RANGE_ELEMENTS } from './range.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/evaluator/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/evaluator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,KAAK,yCAAyC,EAC9C,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,mCAAmC,EACnC,KAAK,0BAA0B,EAC/B,KAAK,mCAAmC,EACxC,KAAK,iCAAiC,GACvC,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/evaluator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,KAAK,yCAAyC,EAC9C,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,yCAAyC,EACzC,yBAAyB,EACzB,mCAAmC,EACnC,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,mCAAmC,EACxC,KAAK,iCAAiC,GACvC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAC,sBAAsB,EAAE,kBAAkB,EAAC,MAAM,YAAY,CAAC"}

package/dist/evaluator/index.js

@@ -1,4 +1,5 @@
 export { WorkflowExpressionEvaluationError, workflowExpressionEvaluationErrorCode } from './errors.js';
-export { evaluateWorkflowExpression, evaluateWorkflowPredicate, evaluateWorkflowPredicateFailClosed } from './evaluate-workflow-expression.js';
+export { evaluateWorkflowExpression, evaluateWorkflowExpressionWithEnvironment, evaluateWorkflowPredicate, evaluateWorkflowPredicateFailClosed } from './evaluate-workflow-expression.js';
+export { createRangeEnvironment, MAX_RANGE_ELEMENTS } from './range.js';
 
 //# sourceMappingURL=index.js.map

package/dist/evaluator/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/evaluator/index.ts"],"sourcesContent":["export {\n  WorkflowExpressionEvaluationError,\n  type WorkflowExpressionEvaluationFailureReason,\n  workflowExpressionEvaluationErrorCode,\n} from './errors.js';\nexport {\n  evaluateWorkflowExpression,\n  evaluateWorkflowPredicate,\n  evaluateWorkflowPredicateFailClosed,\n  type FailClosedPredicateOutcome,\n  type WorkflowExpressionEvaluationContext,\n  type WorkflowExpressionEvaluationValue,\n} from './evaluate-workflow-expression.js';\n"],"names":["WorkflowExpressionEvaluationError","workflowExpressionEvaluationErrorCode","evaluateWorkflowExpression","evaluateWorkflowPredicate","evaluateWorkflowPredicateFailClosed"],"mappings":"AAAA,SACEA,iCAAiC,EAEjCC,qCAAqC,QAChC,cAAc;AACrB,SACEC,0BAA0B,EAC1BC,yBAAyB,EACzBC,mCAAmC,QAI9B,oCAAoC"}
+{"version":3,"sources":["../../src/evaluator/index.ts"],"sourcesContent":["export {\n  WorkflowExpressionEvaluationError,\n  type WorkflowExpressionEvaluationFailureReason,\n  workflowExpressionEvaluationErrorCode,\n} from './errors.js';\nexport {\n  evaluateWorkflowExpression,\n  evaluateWorkflowExpressionWithEnvironment,\n  evaluateWorkflowPredicate,\n  evaluateWorkflowPredicateFailClosed,\n  type FailClosedPredicateOutcome,\n  type WorkflowExpressionEnvironment,\n  type WorkflowExpressionEvaluationContext,\n  type WorkflowExpressionEvaluationValue,\n} from './evaluate-workflow-expression.js';\nexport {createRangeEnvironment, MAX_RANGE_ELEMENTS} from './range.js';\n"],"names":["WorkflowExpressionEvaluationError","workflowExpressionEvaluationErrorCode","evaluateWorkflowExpression","evaluateWorkflowExpressionWithEnvironment","evaluateWorkflowPredicate","evaluateWorkflowPredicateFailClosed","createRangeEnvironment","MAX_RANGE_ELEMENTS"],"mappings":"AAAA,SACEA,iCAAiC,EAEjCC,qCAAqC,QAChC,cAAc;AACrB,SACEC,0BAA0B,EAC1BC,yCAAyC,EACzCC,yBAAyB,EACzBC,mCAAmC,QAK9B,oCAAoC;AAC3C,SAAQC,sBAAsB,EAAEC,kBAAkB,QAAO,aAAa"}

package/dist/evaluator/range.d.ts

@@ -0,0 +1,6 @@
+import type { WorkflowExpressionEnvironment } from './evaluate-workflow-expression.js';
+/** Maximum number of values a config-template range may materialize. */
+export declare const MAX_RANGE_ELEMENTS = 1000;
+/** Create the opt-in range evaluator for config templating. */
+export declare function createRangeEnvironment(): WorkflowExpressionEnvironment;
+//# sourceMappingURL=range.d.ts.map

package/dist/evaluator/range.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"range.d.ts","sourceRoot":"","sources":["../../src/evaluator/range.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,6BAA6B,EAAC,MAAM,mCAAmC,CAAC;AAErF,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AA+CxC,+DAA+D;AAC/D,wBAAgB,sBAAsB,IAAI,6BAA6B,CAWtE"}

package/dist/evaluator/range.js

@@ -0,0 +1,46 @@
+import { Environment } from '@marcbachmann/cel-js';
+/** Maximum number of values a config-template range may materialize. */ export const MAX_RANGE_ELEMENTS = 1_000;
+const RANGE_FUNCTION_SIGNATURE = 'range(dyn, dyn, dyn): list<int>';
+function materializeRange(start, stop, step) {
+    const values = [];
+    for(let value = start; value <= stop; value += step)values.push(value);
+    return values;
+}
+function rangeElementCount(start, stop, step) {
+    if (step <= 0n) throw new RangeError('range step must be positive');
+    if (start > stop) return 0n;
+    return (stop - start) / step + 1n;
+}
+function toCelInteger(value, name) {
+    if (typeof value === 'bigint') return value;
+    if (typeof value === 'number' && Number.isSafeInteger(value)) return BigInt(value);
+    throw new RangeError(`${name} must be a safe integer`);
+}
+function evaluateRange(budget, start, stop, step) {
+    const startValue = toCelInteger(start, 'range start');
+    const stopValue = toCelInteger(stop, 'range stop');
+    const stepValue = toCelInteger(step, 'range step');
+    const count = rangeElementCount(startValue, stopValue, stepValue);
+    if (count > BigInt(budget.remaining)) {
+        throw new RangeError(`range evaluation budget exceeded; ${count} elements requested with ${budget.remaining} remaining`);
+    }
+    const values = materializeRange(startValue, stopValue, stepValue);
+    budget.remaining -= values.length;
+    return values;
+}
+/** Create the opt-in range evaluator for config templating. */ export function createRangeEnvironment() {
+    return {
+        evaluate (expression, context) {
+            const budget = {
+                remaining: MAX_RANGE_ELEMENTS
+            };
+            const environment = new Environment({
+                unlistedVariablesAreDyn: true
+            });
+            environment.registerFunction(RANGE_FUNCTION_SIGNATURE, (start, stop, step)=>evaluateRange(budget, start, stop, step));
+            return environment.evaluate(expression, context);
+        }
+    };
+}
+
+//# sourceMappingURL=range.js.map

package/dist/evaluator/range.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/evaluator/range.ts"],"sourcesContent":["import {type Context, Environment} from '@marcbachmann/cel-js';\nimport type {WorkflowExpressionEnvironment} from './evaluate-workflow-expression.js';\n\n/** Maximum number of values a config-template range may materialize. */\nexport const MAX_RANGE_ELEMENTS = 1_000;\nconst RANGE_FUNCTION_SIGNATURE = 'range(dyn, dyn, dyn): list<int>';\n\ninterface RangeBudget {\n  remaining: number;\n}\n\nfunction materializeRange(start: bigint, stop: bigint, step: bigint): bigint[] {\n  const values: bigint[] = [];\n  for (let value = start; value <= stop; value += step) values.push(value);\n  return values;\n}\n\nfunction rangeElementCount(start: bigint, stop: bigint, step: bigint): bigint {\n  if (step <= 0n) throw new RangeError('range step must be positive');\n  if (start > stop) return 0n;\n\n  return (stop - start) / step + 1n;\n}\n\nfunction toCelInteger(value: unknown, name: string): bigint {\n  if (typeof value === 'bigint') return value;\n  if (typeof value === 'number' && Number.isSafeInteger(value)) return BigInt(value);\n  throw new RangeError(`${name} must be a safe integer`);\n}\n\nfunction evaluateRange(\n  budget: RangeBudget,\n  start: unknown,\n  stop: unknown,\n  step: unknown,\n): bigint[] {\n  const startValue = toCelInteger(start, 'range start');\n  const stopValue = toCelInteger(stop, 'range stop');\n  const stepValue = toCelInteger(step, 'range step');\n  const count = rangeElementCount(startValue, stopValue, stepValue);\n  if (count > BigInt(budget.remaining)) {\n    throw new RangeError(\n      `range evaluation budget exceeded; ${count} elements requested with ${budget.remaining} remaining`,\n    );\n  }\n\n  const values = materializeRange(startValue, stopValue, stepValue);\n  budget.remaining -= values.length;\n  return values;\n}\n\n/** Create the opt-in range evaluator for config templating. */\nexport function createRangeEnvironment(): WorkflowExpressionEnvironment {\n  return {\n    evaluate(expression: string, context?: Context) {\n      const budget = {remaining: MAX_RANGE_ELEMENTS};\n      const environment = new Environment({unlistedVariablesAreDyn: true});\n      environment.registerFunction(RANGE_FUNCTION_SIGNATURE, (start, stop, step) =>\n        evaluateRange(budget, start, stop, step),\n      );\n      return environment.evaluate(expression, context);\n    },\n  };\n}\n"],"names":["Environment","MAX_RANGE_ELEMENTS","RANGE_FUNCTION_SIGNATURE","materializeRange","start","stop","step","values","value","push","rangeElementCount","RangeError","toCelInteger","name","Number","isSafeInteger","BigInt","evaluateRange","budget","startValue","stopValue","stepValue","count","remaining","length","createRangeEnvironment","evaluate","expression","context","environment","unlistedVariablesAreDyn","registerFunction"],"mappings":"AAAA,SAAsBA,WAAW,QAAO,uBAAuB;AAG/D,sEAAsE,GACtE,OAAO,MAAMC,qBAAqB,MAAM;AACxC,MAAMC,2BAA2B;AAMjC,SAASC,iBAAiBC,KAAa,EAAEC,IAAY,EAAEC,IAAY;IACjE,MAAMC,SAAmB,EAAE;IAC3B,IAAK,IAAIC,QAAQJ,OAAOI,SAASH,MAAMG,SAASF,KAAMC,OAAOE,IAAI,CAACD;IAClE,OAAOD;AACT;AAEA,SAASG,kBAAkBN,KAAa,EAAEC,IAAY,EAAEC,IAAY;IAClE,IAAIA,QAAQ,EAAE,EAAE,MAAM,IAAIK,WAAW;IACrC,IAAIP,QAAQC,MAAM,OAAO,EAAE;IAE3B,OAAO,AAACA,CAAAA,OAAOD,KAAI,IAAKE,OAAO,EAAE;AACnC;AAEA,SAASM,aAAaJ,KAAc,EAAEK,IAAY;IAChD,IAAI,OAAOL,UAAU,UAAU,OAAOA;IACtC,IAAI,OAAOA,UAAU,YAAYM,OAAOC,aAAa,CAACP,QAAQ,OAAOQ,OAAOR;IAC5E,MAAM,IAAIG,WAAW,GAAGE,KAAK,uBAAuB,CAAC;AACvD;AAEA,SAASI,cACPC,MAAmB,EACnBd,KAAc,EACdC,IAAa,EACbC,IAAa;IAEb,MAAMa,aAAaP,aAAaR,OAAO;IACvC,MAAMgB,YAAYR,aAAaP,MAAM;IACrC,MAAMgB,YAAYT,aAAaN,MAAM;IACrC,MAAMgB,QAAQZ,kBAAkBS,YAAYC,WAAWC;IACvD,IAAIC,QAAQN,OAAOE,OAAOK,SAAS,GAAG;QACpC,MAAM,IAAIZ,WACR,CAAC,kCAAkC,EAAEW,MAAM,yBAAyB,EAAEJ,OAAOK,SAAS,CAAC,UAAU,CAAC;IAEtG;IAEA,MAAMhB,SAASJ,iBAAiBgB,YAAYC,WAAWC;IACvDH,OAAOK,SAAS,IAAIhB,OAAOiB,MAAM;IACjC,OAAOjB;AACT;AAEA,6DAA6D,GAC7D,OAAO,SAASkB;IACd,OAAO;QACLC,UAASC,UAAkB,EAAEC,OAAiB;YAC5C,MAAMV,SAAS;gBAACK,WAAWtB;YAAkB;YAC7C,MAAM4B,cAAc,IAAI7B,YAAY;gBAAC8B,yBAAyB;YAAI;YAClED,YAAYE,gBAAgB,CAAC7B,0BAA0B,CAACE,OAAOC,MAAMC,OACnEW,cAAcC,QAAQd,OAAOC,MAAMC;YAErC,OAAOuB,YAAYH,QAAQ,CAACC,YAAYC;QAC1C;IACF;AACF"}

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { WorkflowExpressionEvaluationError, type WorkflowExpressionEvaluationFailureReason, workflowExpressionEvaluationErrorCode, } from './evaluator/errors.js';
-export { evaluateWorkflowExpression, evaluateWorkflowPredicate, evaluateWorkflowPredicateFailClosed, type FailClosedPredicateOutcome, type WorkflowExpressionEvaluationContext, type WorkflowExpressionEvaluationValue, } from './evaluator/evaluate-workflow-expression.js';
+export { evaluateWorkflowExpression, evaluateWorkflowExpressionWithEnvironment, evaluateWorkflowPredicate, evaluateWorkflowPredicateFailClosed, type FailClosedPredicateOutcome, type WorkflowExpressionEnvironment, type WorkflowExpressionEvaluationContext, type WorkflowExpressionEvaluationValue, } from './evaluator/evaluate-workflow-expression.js';
+export { createRangeEnvironment, MAX_RANGE_ELEMENTS } from './evaluator/range.js';
 export { createWorkflowExpression, unsafeWorkflowExpressionFromSource, } from './expression/create-workflow-expression.js';
 export { InvalidWorkflowExpressionError, invalidWorkflowExpressionErrorCode, } from './expression/errors.js';
 export type { CreateWorkflowExpressionParams, ExpressionScalarType, ExpressionType, ExpressionTypeEnvironment, ValidCelExpression, WorkflowExpression, WorkflowExpressionCheck, WorkflowExpressionCheckOptions, } from './expression/workflow-expression.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,KAAK,yCAAyC,EAC9C,qCAAqC,GACtC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,mCAAmC,EACnC,KAAK,0BAA0B,EAC/B,KAAK,mCAAmC,EACxC,KAAK,iCAAiC,GACvC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,8BAA8B,EAC9B,oBAAoB,EACpB,cAAc,EACd,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,oCAAoC,EACpC,iCAAiC,EACjC,WAAW,EACX,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,sBAAsB,EAAC,MAAM,0BAA0B,CAAC;AAChE,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,GACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAC,8BAA8B,EAAC,MAAM,sCAAsC,CAAC;AACpF,OAAO,EACL,eAAe,EACf,aAAa,EACb,4BAA4B,EAC5B,gCAAgC,EAChC,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAC,wBAAwB,EAAC,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EACL,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,GACnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,uBAAuB,EAC5B,6BAA6B,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,8BAA8B,EAAC,MAAM,2BAA2B,CAAC;AACzE,YAAY,EACV,aAAa,EACb,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAC,KAAK,gBAAgB,EAAE,eAAe,EAAC,MAAM,4BAA4B,CAAC;AAClF,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,+BAA+B,EAC/B,mCAAmC,GACpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,wBAAwB,EAC7B,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,EAC5B,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,sBAAsB,EAAC,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAC,+BAA+B,EAAC,MAAM,mDAAmD,CAAC;AAClG,OAAO,EAAC,qBAAqB,EAAC,MAAM,uCAAuC,CAAC;AAC5E,YAAY,EACV,2BAA2B,EAC3B,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,0BAA0B,EAC1B,KAAK,UAAU,EACf,8BAA8B,EAC9B,4BAA4B,EAC5B,sBAAsB,EACtB,6BAA6B,EAC7B,iCAAiC,EACjC,gCAAgC,EAChC,0CAA0C,EAC1C,0CAA0C,EAC1C,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EACpC,8BAA8B,EAC9B,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,8BAA8B,EACnC,kBAAkB,EAClB,KAAK,yCAAyC,EAC9C,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,EACrC,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,oCAAoC,EACpC,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,EAC5B,qCAAqC,EACrC,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,wCAAwC,EACxC,qCAAqC,EACrC,0CAA0C,EAC1C,kCAAkC,EAClC,2BAA2B,EAC3B,mCAAmC,EACnC,uBAAuB,GACxB,MAAM,wCAAwC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,KAAK,yCAAyC,EAC9C,qCAAqC,GACtC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,yCAAyC,EACzC,yBAAyB,EACzB,mCAAmC,EACnC,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,mCAAmC,EACxC,KAAK,iCAAiC,GACvC,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAC,sBAAsB,EAAE,kBAAkB,EAAC,MAAM,sBAAsB,CAAC;AAChF,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,8BAA8B,EAC9B,oBAAoB,EACpB,cAAc,EACd,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,oCAAoC,EACpC,iCAAiC,EACjC,WAAW,EACX,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,sBAAsB,EAAC,MAAM,0BAA0B,CAAC;AAChE,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,GACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAC,8BAA8B,EAAC,MAAM,sCAAsC,CAAC;AACpF,OAAO,EACL,eAAe,EACf,aAAa,EACb,4BAA4B,EAC5B,gCAAgC,EAChC,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAC,wBAAwB,EAAC,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EACL,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,GACnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,uBAAuB,EAC5B,6BAA6B,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,8BAA8B,EAAC,MAAM,2BAA2B,CAAC;AACzE,YAAY,EACV,aAAa,EACb,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAC,KAAK,gBAAgB,EAAE,eAAe,EAAC,MAAM,4BAA4B,CAAC;AAClF,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,+BAA+B,EAC/B,mCAAmC,GACpC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,wBAAwB,EAC7B,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,EAC5B,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,sBAAsB,EAAC,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAC,+BAA+B,EAAC,MAAM,mDAAmD,CAAC;AAClG,OAAO,EAAC,qBAAqB,EAAC,MAAM,uCAAuC,CAAC;AAC5E,YAAY,EACV,2BAA2B,EAC3B,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,0BAA0B,EAC1B,KAAK,UAAU,EACf,8BAA8B,EAC9B,4BAA4B,EAC5B,sBAAsB,EACtB,6BAA6B,EAC7B,iCAAiC,EACjC,gCAAgC,EAChC,0CAA0C,EAC1C,0CAA0C,EAC1C,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EACpC,8BAA8B,EAC9B,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,8BAA8B,EACnC,kBAAkB,EAClB,KAAK,yCAAyC,EAC9C,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,EACrC,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,oCAAoC,EACpC,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,EAC5B,qCAAqC,EACrC,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,wCAAwC,EACxC,qCAAqC,EACrC,0CAA0C,EAC1C,kCAAkC,EAClC,2BAA2B,EAC3B,mCAAmC,EACnC,uBAAuB,GACxB,MAAM,wCAAwC,CAAC"}

package/dist/index.js

@@ -1,5 +1,6 @@
 export { WorkflowExpressionEvaluationError, workflowExpressionEvaluationErrorCode } from './evaluator/errors.js';
-export { evaluateWorkflowExpression, evaluateWorkflowPredicate, evaluateWorkflowPredicateFailClosed } from './evaluator/evaluate-workflow-expression.js';
+export { evaluateWorkflowExpression, evaluateWorkflowExpressionWithEnvironment, evaluateWorkflowPredicate, evaluateWorkflowPredicateFailClosed } from './evaluator/evaluate-workflow-expression.js';
+export { createRangeEnvironment, MAX_RANGE_ELEMENTS } from './evaluator/range.js';
 export { createWorkflowExpression, unsafeWorkflowExpressionFromSource } from './expression/create-workflow-expression.js';
 export { InvalidWorkflowExpressionError, invalidWorkflowExpressionErrorCode } from './expression/errors.js';
 export { coerceStepOutputs, jsonSchemaToExpressionType, outputDeclarationsToExpressionFields, outputDeclarationToExpressionType, outputTypes, validateJsonSchema } from './outputs/index.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export {\n  WorkflowExpressionEvaluationError,\n  type WorkflowExpressionEvaluationFailureReason,\n  workflowExpressionEvaluationErrorCode,\n} from './evaluator/errors.js';\nexport {\n  evaluateWorkflowExpression,\n  evaluateWorkflowPredicate,\n  evaluateWorkflowPredicateFailClosed,\n  type FailClosedPredicateOutcome,\n  type WorkflowExpressionEvaluationContext,\n  type WorkflowExpressionEvaluationValue,\n} from './evaluator/evaluate-workflow-expression.js';\nexport {\n  createWorkflowExpression,\n  unsafeWorkflowExpressionFromSource,\n} from './expression/create-workflow-expression.js';\nexport {\n  InvalidWorkflowExpressionError,\n  invalidWorkflowExpressionErrorCode,\n} from './expression/errors.js';\nexport type {\n  CreateWorkflowExpressionParams,\n  ExpressionScalarType,\n  ExpressionType,\n  ExpressionTypeEnvironment,\n  ValidCelExpression,\n  WorkflowExpression,\n  WorkflowExpressionCheck,\n  WorkflowExpressionCheckOptions,\n} from './expression/workflow-expression.js';\nexport {\n  type CoerceStepOutputsResult,\n  coerceStepOutputs,\n  type JsonSchemaValidationResult,\n  jsonSchemaToExpressionType,\n  type OutputDeclarations,\n  type OutputType,\n  type OutputTypeDeclaration,\n  outputDeclarationsToExpressionFields,\n  outputDeclarationToExpressionType,\n  outputTypes,\n  type StepOutputCoercionError,\n  type StepOutputCoercionErrorReason,\n  validateJsonSchema,\n} from './outputs/index.js';\nexport {isBareContextReference} from './plan/bare-reference.js';\nexport {\n  analyzeContextKeyAccess,\n  analyzeContextRootKeyAccess,\n  type ContextKeyAccessAnalysis,\n  type ContextKeyAccessReference,\n  type ContextKeyAccessViolation,\n  type ContextRootKeyAccessAnalysis,\n  type ContextRootKeyAccessReference,\n} from './plan/context-key-access.js';\nexport {evaluatePlannedPredicateAtSite} from './plan/evaluate-planned-predicate.js';\nexport {\n  capTraceEntries,\n  capTraceValue,\n  EVALUATION_TRACE_MAX_ENTRIES,\n  EVALUATION_TRACE_VALUE_CAP_BYTES,\n  type EvaluationTraceEntry,\n  type EvaluationTraceLimitEntry,\n  type EvaluationTraceRowEntry,\n  evaluationTraceEntry,\n  predicateTraceEntry,\n} from './plan/evaluation-trace.js';\nexport {extractExactContextRoots} from './plan/extract-exact-context-roots.js';\nexport {\n  type FrozenResolvedField,\n  freezeResolvedFieldAtSite,\n  resolveFieldAtSite,\n  type SiteResolvedField,\n  type WorkflowTemplateDiagnostic,\n  type WorkflowTemplateFailurePolicy,\n} from './plan/freeze.js';\nexport {\n  type FrozenPlannedRunCommand,\n  freezePlannedRunCommandAtSite,\n} from './plan/freeze-run-command.js';\nexport {\n  type FieldPlan,\n  type FieldPlanResult,\n  type PlanViolation,\n  planInterpolationField,\n} from './plan/plan-field.js';\nexport {predicateSourceIsBooleanShaped} from './plan/predicate-shape.js';\nexport type {\n  ResolvedField,\n  ResolvedFieldDeferredSegment,\n  ResolvedFieldLiteralSegment,\n  ResolvedFieldSegment,\n} from './plan/resolved-field.js';\nexport {type RoutedExpression, routeExpression} from './plan/route-expression.js';\nexport {\n  type ServerEvaluabilityResult,\n  type ServerEvaluabilityViolation,\n  validateServerEvaluable,\n} from './plan/validate-server-evaluable.js';\nexport {\n  WorkflowTemplateResolutionError,\n  workflowTemplateResolutionErrorCode,\n} from './resolver/errors.js';\nexport {\n  type HoistedPlannedRunCommand,\n  hoistPlannedRunCommand,\n  type PlannedRunCommandBinding,\n  type RunCommandHoistOptions,\n  UnsafeRunInterpolationError,\n  unsafeRunInterpolationErrorCode,\n} from './run/hoist-run-command.js';\nexport {\n  InvalidWorkflowTemplateError,\n  invalidWorkflowTemplateErrorCode,\n} from './template/errors.js';\nexport {extractCelContextRoots} from './template/extract-cel-context-roots.js';\nexport {extractCelUntrustedPathAccesses} from './template/extract-cel-untrusted-path-accesses.js';\nexport {parseWorkflowTemplate} from './template/parse-workflow-template.js';\nexport type {\n  WorkflowTemplateExprSegment,\n  WorkflowTemplateLiteralSegment,\n  WorkflowTemplateSegment,\n} from './template/template-segment.js';\nexport {\n  type AvailabilitySite,\n  availabilitySites,\n  buildTypedRootsEnvironment,\n  type FillTarget,\n  getWorkflowContextAvailability,\n  getWorkflowContextDefinition,\n  getWorkflowContextHost,\n  getWorkflowContextSensitivity,\n  getWorkflowContextTypeEnvironment,\n  getWorkflowContextUntrustedPaths,\n  getWorkflowInterpolationFieldFailurePolicy,\n  getWorkflowPredicateFieldMinimumFillTarget,\n  type OpenWorkflowContextDefinition,\n  type ReservedRootDefinition,\n  type RunnerWorkflowContextDefinition,\n  resolveContextRootAvailability,\n  resolveContextRootHost,\n  rootsAvailableAt,\n  runnerFillTarget,\n  type TypedWorkflowContextDefinition,\n  unavailableRootsAt,\n  type WorkflowContextAvailabilityReferenceEntry,\n  type WorkflowContextDefinition,\n  type WorkflowContextHost,\n  type WorkflowContextName,\n  type WorkflowContextReservedRoot,\n  type WorkflowContextSensitivity,\n  type WorkflowContextShape,\n  type WorkflowContextTrustTier,\n  type WorkflowFieldFailurePolicy,\n  type WorkflowInterpolationFailurePolicy,\n  type WorkflowInterpolationField,\n  type WorkflowInterpolationFieldPolicy,\n  type WorkflowJobTypeOverlay,\n  type WorkflowPredicateField,\n  type WorkflowStepTypeOverlay,\n  workflowContextAvailabilityReference,\n  workflowContextDefinitions,\n  workflowContextHosts,\n  workflowContextNames,\n  workflowContextReservedRoots,\n  workflowContextRootRequiresLiteralKey,\n  workflowContextSensitivities,\n  workflowContextTrustTiers,\n  workflowFieldFailurePolicies,\n  workflowInterpolationFieldAcceptsContext,\n  workflowInterpolationFieldAcceptsHost,\n  workflowInterpolationFieldAcceptsTrustTier,\n  workflowInterpolationFieldPolicies,\n  workflowInterpolationFields,\n  workflowPredicateFieldFailurePolicy,\n  workflowPredicateFields,\n} from './workflow-context/workflow-context.js';\n"],"names":["WorkflowExpressionEvaluationError","workflowExpressionEvaluationErrorCode","evaluateWorkflowExpression","evaluateWorkflowPredicate","evaluateWorkflowPredicateFailClosed","createWorkflowExpression","unsafeWorkflowExpressionFromSource","InvalidWorkflowExpressionError","invalidWorkflowExpressionErrorCode","coerceStepOutputs","jsonSchemaToExpressionType","outputDeclarationsToExpressionFields","outputDeclarationToExpressionType","outputTypes","validateJsonSchema","isBareContextReference","analyzeContextKeyAccess","analyzeContextRootKeyAccess","evaluatePlannedPredicateAtSite","capTraceEntries","capTraceValue","EVALUATION_TRACE_MAX_ENTRIES","EVALUATION_TRACE_VALUE_CAP_BYTES","evaluationTraceEntry","predicateTraceEntry","extractExactContextRoots","freezeResolvedFieldAtSite","resolveFieldAtSite","freezePlannedRunCommandAtSite","planInterpolationField","predicateSourceIsBooleanShaped","routeExpression","validateServerEvaluable","WorkflowTemplateResolutionError","workflowTemplateResolutionErrorCode","hoistPlannedRunCommand","UnsafeRunInterpolationError","unsafeRunInterpolationErrorCode","InvalidWorkflowTemplateError","invalidWorkflowTemplateErrorCode","extractCelContextRoots","extractCelUntrustedPathAccesses","parseWorkflowTemplate","availabilitySites","buildTypedRootsEnvironment","getWorkflowContextAvailability","getWorkflowContextDefinition","getWorkflowContextHost","getWorkflowContextSensitivity","getWorkflowContextTypeEnvironment","getWorkflowContextUntrustedPaths","getWorkflowInterpolationFieldFailurePolicy","getWorkflowPredicateFieldMinimumFillTarget","resolveContextRootAvailability","resolveContextRootHost","rootsAvailableAt","runnerFillTarget","unavailableRootsAt","workflowContextAvailabilityReference","workflowContextDefinitions","workflowContextHosts","workflowContextNames","workflowContextReservedRoots","workflowContextRootRequiresLiteralKey","workflowContextSensitivities","workflowContextTrustTiers","workflowFieldFailurePolicies","workflowInterpolationFieldAcceptsContext","workflowInterpolationFieldAcceptsHost","workflowInterpolationFieldAcceptsTrustTier","workflowInterpolationFieldPolicies","workflowInterpolationFields","workflowPredicateFieldFailurePolicy","workflowPredicateFields"],"mappings":"AAAA,SACEA,iCAAiC,EAEjCC,qCAAqC,QAChC,wBAAwB;AAC/B,SACEC,0BAA0B,EAC1BC,yBAAyB,EACzBC,mCAAmC,QAI9B,8CAA8C;AACrD,SACEC,wBAAwB,EACxBC,kCAAkC,QAC7B,6CAA6C;AACpD,SACEC,8BAA8B,EAC9BC,kCAAkC,QAC7B,yBAAyB;AAWhC,SAEEC,iBAAiB,EAEjBC,0BAA0B,EAI1BC,oCAAoC,EACpCC,iCAAiC,EACjCC,WAAW,EAGXC,kBAAkB,QACb,qBAAqB;AAC5B,SAAQC,sBAAsB,QAAO,2BAA2B;AAChE,SACEC,uBAAuB,EACvBC,2BAA2B,QAMtB,+BAA+B;AACtC,SAAQC,8BAA8B,QAAO,uCAAuC;AACpF,SACEC,eAAe,EACfC,aAAa,EACbC,4BAA4B,EAC5BC,gCAAgC,EAIhCC,oBAAoB,EACpBC,mBAAmB,QACd,6BAA6B;AACpC,SAAQC,wBAAwB,QAAO,wCAAwC;AAC/E,SAEEC,yBAAyB,EACzBC,kBAAkB,QAIb,mBAAmB;AAC1B,SAEEC,6BAA6B,QACxB,+BAA+B;AACtC,SAIEC,sBAAsB,QACjB,uBAAuB;AAC9B,SAAQC,8BAA8B,QAAO,4BAA4B;AAOzE,SAA+BC,eAAe,QAAO,6BAA6B;AAClF,SAGEC,uBAAuB,QAClB,sCAAsC;AAC7C,SACEC,+BAA+B,EAC/BC,mCAAmC,QAC9B,uBAAuB;AAC9B,SAEEC,sBAAsB,EAGtBC,2BAA2B,EAC3BC,+BAA+B,QAC1B,6BAA6B;AACpC,SACEC,4BAA4B,EAC5BC,gCAAgC,QAC3B,uBAAuB;AAC9B,SAAQC,sBAAsB,QAAO,0CAA0C;AAC/E,SAAQC,+BAA+B,QAAO,oDAAoD;AAClG,SAAQC,qBAAqB,QAAO,wCAAwC;AAM5E,SAEEC,iBAAiB,EACjBC,0BAA0B,EAE1BC,8BAA8B,EAC9BC,4BAA4B,EAC5BC,sBAAsB,EACtBC,6BAA6B,EAC7BC,iCAAiC,EACjCC,gCAAgC,EAChCC,0CAA0C,EAC1CC,0CAA0C,EAI1CC,8BAA8B,EAC9BC,sBAAsB,EACtBC,gBAAgB,EAChBC,gBAAgB,EAEhBC,kBAAkB,EAgBlBC,oCAAoC,EACpCC,0BAA0B,EAC1BC,oBAAoB,EACpBC,oBAAoB,EACpBC,4BAA4B,EAC5BC,qCAAqC,EACrCC,4BAA4B,EAC5BC,yBAAyB,EACzBC,4BAA4B,EAC5BC,wCAAwC,EACxCC,qCAAqC,EACrCC,0CAA0C,EAC1CC,kCAAkC,EAClCC,2BAA2B,EAC3BC,mCAAmC,EACnCC,uBAAuB,QAClB,yCAAyC"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export {\n  WorkflowExpressionEvaluationError,\n  type WorkflowExpressionEvaluationFailureReason,\n  workflowExpressionEvaluationErrorCode,\n} from './evaluator/errors.js';\nexport {\n  evaluateWorkflowExpression,\n  evaluateWorkflowExpressionWithEnvironment,\n  evaluateWorkflowPredicate,\n  evaluateWorkflowPredicateFailClosed,\n  type FailClosedPredicateOutcome,\n  type WorkflowExpressionEnvironment,\n  type WorkflowExpressionEvaluationContext,\n  type WorkflowExpressionEvaluationValue,\n} from './evaluator/evaluate-workflow-expression.js';\nexport {createRangeEnvironment, MAX_RANGE_ELEMENTS} from './evaluator/range.js';\nexport {\n  createWorkflowExpression,\n  unsafeWorkflowExpressionFromSource,\n} from './expression/create-workflow-expression.js';\nexport {\n  InvalidWorkflowExpressionError,\n  invalidWorkflowExpressionErrorCode,\n} from './expression/errors.js';\nexport type {\n  CreateWorkflowExpressionParams,\n  ExpressionScalarType,\n  ExpressionType,\n  ExpressionTypeEnvironment,\n  ValidCelExpression,\n  WorkflowExpression,\n  WorkflowExpressionCheck,\n  WorkflowExpressionCheckOptions,\n} from './expression/workflow-expression.js';\nexport {\n  type CoerceStepOutputsResult,\n  coerceStepOutputs,\n  type JsonSchemaValidationResult,\n  jsonSchemaToExpressionType,\n  type OutputDeclarations,\n  type OutputType,\n  type OutputTypeDeclaration,\n  outputDeclarationsToExpressionFields,\n  outputDeclarationToExpressionType,\n  outputTypes,\n  type StepOutputCoercionError,\n  type StepOutputCoercionErrorReason,\n  validateJsonSchema,\n} from './outputs/index.js';\nexport {isBareContextReference} from './plan/bare-reference.js';\nexport {\n  analyzeContextKeyAccess,\n  analyzeContextRootKeyAccess,\n  type ContextKeyAccessAnalysis,\n  type ContextKeyAccessReference,\n  type ContextKeyAccessViolation,\n  type ContextRootKeyAccessAnalysis,\n  type ContextRootKeyAccessReference,\n} from './plan/context-key-access.js';\nexport {evaluatePlannedPredicateAtSite} from './plan/evaluate-planned-predicate.js';\nexport {\n  capTraceEntries,\n  capTraceValue,\n  EVALUATION_TRACE_MAX_ENTRIES,\n  EVALUATION_TRACE_VALUE_CAP_BYTES,\n  type EvaluationTraceEntry,\n  type EvaluationTraceLimitEntry,\n  type EvaluationTraceRowEntry,\n  evaluationTraceEntry,\n  predicateTraceEntry,\n} from './plan/evaluation-trace.js';\nexport {extractExactContextRoots} from './plan/extract-exact-context-roots.js';\nexport {\n  type FrozenResolvedField,\n  freezeResolvedFieldAtSite,\n  resolveFieldAtSite,\n  type SiteResolvedField,\n  type WorkflowTemplateDiagnostic,\n  type WorkflowTemplateFailurePolicy,\n} from './plan/freeze.js';\nexport {\n  type FrozenPlannedRunCommand,\n  freezePlannedRunCommandAtSite,\n} from './plan/freeze-run-command.js';\nexport {\n  type FieldPlan,\n  type FieldPlanResult,\n  type PlanViolation,\n  planInterpolationField,\n} from './plan/plan-field.js';\nexport {predicateSourceIsBooleanShaped} from './plan/predicate-shape.js';\nexport type {\n  ResolvedField,\n  ResolvedFieldDeferredSegment,\n  ResolvedFieldLiteralSegment,\n  ResolvedFieldSegment,\n} from './plan/resolved-field.js';\nexport {type RoutedExpression, routeExpression} from './plan/route-expression.js';\nexport {\n  type ServerEvaluabilityResult,\n  type ServerEvaluabilityViolation,\n  validateServerEvaluable,\n} from './plan/validate-server-evaluable.js';\nexport {\n  WorkflowTemplateResolutionError,\n  workflowTemplateResolutionErrorCode,\n} from './resolver/errors.js';\nexport {\n  type HoistedPlannedRunCommand,\n  hoistPlannedRunCommand,\n  type PlannedRunCommandBinding,\n  type RunCommandHoistOptions,\n  UnsafeRunInterpolationError,\n  unsafeRunInterpolationErrorCode,\n} from './run/hoist-run-command.js';\nexport {\n  InvalidWorkflowTemplateError,\n  invalidWorkflowTemplateErrorCode,\n} from './template/errors.js';\nexport {extractCelContextRoots} from './template/extract-cel-context-roots.js';\nexport {extractCelUntrustedPathAccesses} from './template/extract-cel-untrusted-path-accesses.js';\nexport {parseWorkflowTemplate} from './template/parse-workflow-template.js';\nexport type {\n  WorkflowTemplateExprSegment,\n  WorkflowTemplateLiteralSegment,\n  WorkflowTemplateSegment,\n} from './template/template-segment.js';\nexport {\n  type AvailabilitySite,\n  availabilitySites,\n  buildTypedRootsEnvironment,\n  type FillTarget,\n  getWorkflowContextAvailability,\n  getWorkflowContextDefinition,\n  getWorkflowContextHost,\n  getWorkflowContextSensitivity,\n  getWorkflowContextTypeEnvironment,\n  getWorkflowContextUntrustedPaths,\n  getWorkflowInterpolationFieldFailurePolicy,\n  getWorkflowPredicateFieldMinimumFillTarget,\n  type OpenWorkflowContextDefinition,\n  type ReservedRootDefinition,\n  type RunnerWorkflowContextDefinition,\n  resolveContextRootAvailability,\n  resolveContextRootHost,\n  rootsAvailableAt,\n  runnerFillTarget,\n  type TypedWorkflowContextDefinition,\n  unavailableRootsAt,\n  type WorkflowContextAvailabilityReferenceEntry,\n  type WorkflowContextDefinition,\n  type WorkflowContextHost,\n  type WorkflowContextName,\n  type WorkflowContextReservedRoot,\n  type WorkflowContextSensitivity,\n  type WorkflowContextShape,\n  type WorkflowContextTrustTier,\n  type WorkflowFieldFailurePolicy,\n  type WorkflowInterpolationFailurePolicy,\n  type WorkflowInterpolationField,\n  type WorkflowInterpolationFieldPolicy,\n  type WorkflowJobTypeOverlay,\n  type WorkflowPredicateField,\n  type WorkflowStepTypeOverlay,\n  workflowContextAvailabilityReference,\n  workflowContextDefinitions,\n  workflowContextHosts,\n  workflowContextNames,\n  workflowContextReservedRoots,\n  workflowContextRootRequiresLiteralKey,\n  workflowContextSensitivities,\n  workflowContextTrustTiers,\n  workflowFieldFailurePolicies,\n  workflowInterpolationFieldAcceptsContext,\n  workflowInterpolationFieldAcceptsHost,\n  workflowInterpolationFieldAcceptsTrustTier,\n  workflowInterpolationFieldPolicies,\n  workflowInterpolationFields,\n  workflowPredicateFieldFailurePolicy,\n  workflowPredicateFields,\n} from './workflow-context/workflow-context.js';\n"],"names":["WorkflowExpressionEvaluationError","workflowExpressionEvaluationErrorCode","evaluateWorkflowExpression","evaluateWorkflowExpressionWithEnvironment","evaluateWorkflowPredicate","evaluateWorkflowPredicateFailClosed","createRangeEnvironment","MAX_RANGE_ELEMENTS","createWorkflowExpression","unsafeWorkflowExpressionFromSource","InvalidWorkflowExpressionError","invalidWorkflowExpressionErrorCode","coerceStepOutputs","jsonSchemaToExpressionType","outputDeclarationsToExpressionFields","outputDeclarationToExpressionType","outputTypes","validateJsonSchema","isBareContextReference","analyzeContextKeyAccess","analyzeContextRootKeyAccess","evaluatePlannedPredicateAtSite","capTraceEntries","capTraceValue","EVALUATION_TRACE_MAX_ENTRIES","EVALUATION_TRACE_VALUE_CAP_BYTES","evaluationTraceEntry","predicateTraceEntry","extractExactContextRoots","freezeResolvedFieldAtSite","resolveFieldAtSite","freezePlannedRunCommandAtSite","planInterpolationField","predicateSourceIsBooleanShaped","routeExpression","validateServerEvaluable","WorkflowTemplateResolutionError","workflowTemplateResolutionErrorCode","hoistPlannedRunCommand","UnsafeRunInterpolationError","unsafeRunInterpolationErrorCode","InvalidWorkflowTemplateError","invalidWorkflowTemplateErrorCode","extractCelContextRoots","extractCelUntrustedPathAccesses","parseWorkflowTemplate","availabilitySites","buildTypedRootsEnvironment","getWorkflowContextAvailability","getWorkflowContextDefinition","getWorkflowContextHost","getWorkflowContextSensitivity","getWorkflowContextTypeEnvironment","getWorkflowContextUntrustedPaths","getWorkflowInterpolationFieldFailurePolicy","getWorkflowPredicateFieldMinimumFillTarget","resolveContextRootAvailability","resolveContextRootHost","rootsAvailableAt","runnerFillTarget","unavailableRootsAt","workflowContextAvailabilityReference","workflowContextDefinitions","workflowContextHosts","workflowContextNames","workflowContextReservedRoots","workflowContextRootRequiresLiteralKey","workflowContextSensitivities","workflowContextTrustTiers","workflowFieldFailurePolicies","workflowInterpolationFieldAcceptsContext","workflowInterpolationFieldAcceptsHost","workflowInterpolationFieldAcceptsTrustTier","workflowInterpolationFieldPolicies","workflowInterpolationFields","workflowPredicateFieldFailurePolicy","workflowPredicateFields"],"mappings":"AAAA,SACEA,iCAAiC,EAEjCC,qCAAqC,QAChC,wBAAwB;AAC/B,SACEC,0BAA0B,EAC1BC,yCAAyC,EACzCC,yBAAyB,EACzBC,mCAAmC,QAK9B,8CAA8C;AACrD,SAAQC,sBAAsB,EAAEC,kBAAkB,QAAO,uBAAuB;AAChF,SACEC,wBAAwB,EACxBC,kCAAkC,QAC7B,6CAA6C;AACpD,SACEC,8BAA8B,EAC9BC,kCAAkC,QAC7B,yBAAyB;AAWhC,SAEEC,iBAAiB,EAEjBC,0BAA0B,EAI1BC,oCAAoC,EACpCC,iCAAiC,EACjCC,WAAW,EAGXC,kBAAkB,QACb,qBAAqB;AAC5B,SAAQC,sBAAsB,QAAO,2BAA2B;AAChE,SACEC,uBAAuB,EACvBC,2BAA2B,QAMtB,+BAA+B;AACtC,SAAQC,8BAA8B,QAAO,uCAAuC;AACpF,SACEC,eAAe,EACfC,aAAa,EACbC,4BAA4B,EAC5BC,gCAAgC,EAIhCC,oBAAoB,EACpBC,mBAAmB,QACd,6BAA6B;AACpC,SAAQC,wBAAwB,QAAO,wCAAwC;AAC/E,SAEEC,yBAAyB,EACzBC,kBAAkB,QAIb,mBAAmB;AAC1B,SAEEC,6BAA6B,QACxB,+BAA+B;AACtC,SAIEC,sBAAsB,QACjB,uBAAuB;AAC9B,SAAQC,8BAA8B,QAAO,4BAA4B;AAOzE,SAA+BC,eAAe,QAAO,6BAA6B;AAClF,SAGEC,uBAAuB,QAClB,sCAAsC;AAC7C,SACEC,+BAA+B,EAC/BC,mCAAmC,QAC9B,uBAAuB;AAC9B,SAEEC,sBAAsB,EAGtBC,2BAA2B,EAC3BC,+BAA+B,QAC1B,6BAA6B;AACpC,SACEC,4BAA4B,EAC5BC,gCAAgC,QAC3B,uBAAuB;AAC9B,SAAQC,sBAAsB,QAAO,0CAA0C;AAC/E,SAAQC,+BAA+B,QAAO,oDAAoD;AAClG,SAAQC,qBAAqB,QAAO,wCAAwC;AAM5E,SAEEC,iBAAiB,EACjBC,0BAA0B,EAE1BC,8BAA8B,EAC9BC,4BAA4B,EAC5BC,sBAAsB,EACtBC,6BAA6B,EAC7BC,iCAAiC,EACjCC,gCAAgC,EAChCC,0CAA0C,EAC1CC,0CAA0C,EAI1CC,8BAA8B,EAC9BC,sBAAsB,EACtBC,gBAAgB,EAChBC,gBAAgB,EAEhBC,kBAAkB,EAgBlBC,oCAAoC,EACpCC,0BAA0B,EAC1BC,oBAAoB,EACpBC,oBAAoB,EACpBC,4BAA4B,EAC5BC,qCAAqC,EACrCC,4BAA4B,EAC5BC,yBAAyB,EACzBC,4BAA4B,EAC5BC,wCAAwC,EACxCC,qCAAqC,EACrCC,0CAA0C,EAC1CC,kCAAkC,EAClCC,2BAA2B,EAC3BC,mCAAmC,EACnCC,uBAAuB,QAClB,yCAAyC"}

package/dist/plan/freeze.d.ts

@@ -8,14 +8,14 @@ export interface WorkflowTemplateDiagnostic {
     readonly expression: string;
     readonly contextRoots: readonly string[];
 }
-export interface FrozenResolvedField {
-    readonly value: string;
+export interface FrozenResolvedField<Value = string> {
+    readonly value: Value;
     readonly diagnostics: readonly WorkflowTemplateDiagnostic[];
     readonly trace: readonly EvaluationTraceEntry[];
 }
-export type SiteResolvedField = {
+export type SiteResolvedField<Value = string> = {
     readonly kind: 'frozen';
-    readonly value: string;
+    readonly value: Value;
     readonly diagnostics: readonly WorkflowTemplateDiagnostic[];
     readonly trace: readonly EvaluationTraceEntry[];
 } | {
@@ -24,6 +24,14 @@ export type SiteResolvedField = {
     readonly diagnostics: readonly WorkflowTemplateDiagnostic[];
     readonly trace: readonly EvaluationTraceEntry[];
 };
+interface ResolveFieldAtSiteParams {
+    readonly field: ResolvedField;
+    readonly failurePolicy: WorkflowInterpolationFailurePolicy;
+    readonly site: AvailabilitySite;
+    readonly context: WorkflowExpressionEvaluationContext;
+    /** Preserve the value of an exact single expression instead of stringifying it. */
+    readonly preserveSingleExpressionType?: boolean;
+}
 /**
  * Segment lifecycle:
  *
@@ -33,16 +41,19 @@ export type SiteResolvedField = {
  * Value fields follow their declared policy at their fill target. Predicates use
  * the planned predicate entry point and fail closed when evaluation is deferred.
  */
-export declare function freezeResolvedFieldAtSite(params: {
-    readonly field: ResolvedField;
-    readonly failurePolicy: WorkflowInterpolationFailurePolicy;
-    readonly site: AvailabilitySite;
-    readonly context: WorkflowExpressionEvaluationContext;
+export declare function freezeResolvedFieldAtSite(params: ResolveFieldAtSiteParams & {
+    readonly preserveSingleExpressionType: true;
+}): FrozenResolvedField<unknown>;
+export declare function freezeResolvedFieldAtSite(params: ResolveFieldAtSiteParams & {
+    readonly preserveSingleExpressionType?: false;
 }): FrozenResolvedField;
-export declare function resolveFieldAtSite(params: {
-    readonly field: ResolvedField;
-    readonly failurePolicy: WorkflowInterpolationFailurePolicy;
-    readonly site: AvailabilitySite;
-    readonly context: WorkflowExpressionEvaluationContext;
+export declare function freezeResolvedFieldAtSite(params: ResolveFieldAtSiteParams): FrozenResolvedField<unknown>;
+export declare function resolveFieldAtSite(params: ResolveFieldAtSiteParams & {
+    readonly preserveSingleExpressionType: true;
+}): SiteResolvedField<unknown>;
+export declare function resolveFieldAtSite(params: ResolveFieldAtSiteParams & {
+    readonly preserveSingleExpressionType?: false;
 }): SiteResolvedField;
+export declare function resolveFieldAtSite(params: ResolveFieldAtSiteParams): SiteResolvedField<unknown>;
+export {};
 //# sourceMappingURL=freeze.d.ts.map

package/dist/plan/freeze.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"freeze.d.ts","sourceRoot":"","sources":["../../src/plan/freeze.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mCAAmC,EAEzC,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,kCAAkC,EACxC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAC,KAAK,oBAAoB,EAAuB,MAAM,uBAAuB,CAAC;AAEtF,OAAO,KAAK,EACV,aAAa,EAGd,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,6BAA6B,GAAG,kCAAkC,CAAC;AAE/E,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC5D,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC5D,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC5D,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD,CAAC;AAEN;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE;IAChD,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,kCAAkC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,mCAAmC,CAAC;CACvD,GAAG,mBAAmB,CA4CtB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,kCAAkC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,mCAAmC,CAAC;CACvD,GAAG,iBAAiB,CAmDpB"}
+{"version":3,"file":"freeze.d.ts","sourceRoot":"","sources":["../../src/plan/freeze.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mCAAmC,EAEzC,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,kCAAkC,EACxC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAC,KAAK,oBAAoB,EAAuB,MAAM,uBAAuB,CAAC;AAEtF,OAAO,KAAK,EACV,aAAa,EAGd,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,6BAA6B,GAAG,kCAAkC,CAAC;AAE/E,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAmB,CAAC,KAAK,GAAG,MAAM;IACjD,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC5D,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD;AAED,MAAM,MAAM,iBAAiB,CAAC,KAAK,GAAG,MAAM,IACxC;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC5D,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC5D,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD,CAAC;AAEN,UAAU,wBAAwB;IAChC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,kCAAkC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,mCAAmC,CAAC;IACtD,mFAAmF;IACnF,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACjD;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,wBAAwB,GAAG;IAAC,QAAQ,CAAC,4BAA4B,EAAE,IAAI,CAAA;CAAC,GAC/E,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAChC,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,wBAAwB,GAAG;IAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,KAAK,CAAA;CAAC,GACjF,mBAAmB,CAAC;AACvB,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,wBAAwB,GAC/B,mBAAmB,CAAC,OAAO,CAAC,CAAC;AA+ChC,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,wBAAwB,GAAG;IAAC,QAAQ,CAAC,4BAA4B,EAAE,IAAI,CAAA;CAAC,GAC/E,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC9B,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,wBAAwB,GAAG;IAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,KAAK,CAAA;CAAC,GACjF,iBAAiB,CAAC;AACrB,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC"}

package/dist/plan/freeze.js

@@ -4,61 +4,53 @@ import { WorkflowTemplateResolutionError } from '../resolver/errors.js';
 import { resolveContextRootAvailability } from '../workflow-context/workflow-context.js';
 import { evaluationTraceEntry } from './evaluation-trace.js';
 import { shouldFillAtSite } from './fill.js';
-/**
- * Segment lifecycle:
- *
- * `{expr}` -> plan -> `{deferred, fillTarget}` -> freeze at a site at or after
- * `fillTarget` -> `{literal}`. Runner-fill segments are never filled server-side.
- *
- * Value fields follow their declared policy at their fill target. Predicates use
- * the planned predicate entry point and fail closed when evaluation is deferred.
- */ export function freezeResolvedFieldAtSite(params) {
+export function freezeResolvedFieldAtSite(params) {
     let value = '';
+    let typedValue;
+    let hasTypedValue = false;
     const diagnostics = [];
     const trace = [];
+    const preserveSingleExpressionType = isExactSingleExpressionField(params);
     for (const segment of params.field.segments){
         if (segment.kind === 'literal') {
             value += segment.value;
             continue;
         }
         if (!shouldFillAtSite(segment.fillTarget, params.site)) {
+            if (exactTypedFieldRequiresFailure(params, segment)) {
+                throw typedFieldNotFillableAtSite(segment);
+            }
             diagnostics.push(missingPathDiagnostic(segment));
             continue;
         }
-        try {
-            const literal = coerceWorkflowValueToString(evaluateWorkflowExpression(segment.expression, params.context));
-            value += literal;
-            trace.push(fillTraceEntry(segment, params.site, literal));
-        } catch (error) {
-            if (error instanceof WorkflowExpressionEvaluationError && error.reason === 'missing-path') {
-                if (missingPathRequiresFailure(segment, params.failurePolicy, params.site)) {
-                    throw new WorkflowTemplateResolutionError({
-                        source: segment.expression.source,
-                        cause: error
-                    });
-                }
-                diagnostics.push(missingPathDiagnostic(segment));
-                trace.push(fillTraceEntry(segment, params.site, '', true));
-                continue;
-            }
-            throw new WorkflowTemplateResolutionError({
-                source: segment.expression.source,
-                cause: error
-            });
+        const evaluated = evaluateFillableSegment(params, segment);
+        trace.push(evaluated.trace);
+        if (evaluated.kind === 'degraded') {
+            diagnostics.push(evaluated.diagnostic);
+            continue;
+        }
+        if (preserveSingleExpressionType) {
+            typedValue = evaluated.value;
+            hasTypedValue = true;
+        } else {
+            value += evaluated.literal;
         }
     }
     return {
-        value,
+        value: preserveSingleExpressionType && hasTypedValue ? typedValue : value,
         diagnostics,
         trace
     };
 }
 export function resolveFieldAtSite(params) {
     let value = '';
+    let typedValue;
+    let hasTypedValue = false;
     const diagnostics = [];
     const trace = [];
     const segments = [];
     let hasResidual = false;
+    const preserveSingleExpressionType = isExactSingleExpressionField(params);
     for (const segment of params.field.segments){
         if (segment.kind === 'literal') {
             value += segment.value;
@@ -70,35 +62,26 @@ export function resolveFieldAtSite(params) {
             segments.push(segment);
             continue;
         }
-        try {
-            const literal = coerceWorkflowValueToString(evaluateWorkflowExpression(segment.expression, params.context));
-            value += literal;
+        const evaluated = evaluateFillableSegment(params, segment);
+        trace.push(evaluated.trace);
+        if (evaluated.kind === 'degraded') {
+            diagnostics.push(evaluated.diagnostic);
             segments.push({
                 kind: 'literal',
-                value: literal
-            });
-            trace.push(fillTraceEntry(segment, params.site, literal));
-        } catch (error) {
-            if (error instanceof WorkflowExpressionEvaluationError && error.reason === 'missing-path') {
-                if (missingPathRequiresFailure(segment, params.failurePolicy, params.site)) {
-                    throw new WorkflowTemplateResolutionError({
-                        source: segment.expression.source,
-                        cause: error
-                    });
-                }
-                diagnostics.push(missingPathDiagnostic(segment));
-                segments.push({
-                    kind: 'literal',
-                    value: ''
-                });
-                trace.push(fillTraceEntry(segment, params.site, '', true));
-                continue;
-            }
-            throw new WorkflowTemplateResolutionError({
-                source: segment.expression.source,
-                cause: error
+                value: ''
             });
+            continue;
+        }
+        if (preserveSingleExpressionType) {
+            typedValue = evaluated.value;
+            hasTypedValue = true;
+        } else {
+            value += evaluated.literal;
         }
+        segments.push({
+            kind: 'literal',
+            value: evaluated.literal
+        });
     }
     if (hasResidual) return {
         kind: 'residual',
@@ -110,11 +93,44 @@ export function resolveFieldAtSite(params) {
     };
     return {
         kind: 'frozen',
-        value,
+        value: preserveSingleExpressionType && hasTypedValue ? typedValue : value,
         diagnostics,
         trace
     };
 }
+function isExactSingleExpressionField(params) {
+    return params.preserveSingleExpressionType === true && params.field.segments.length === 1 && params.field.segments[0]?.kind === 'deferred';
+}
+function evaluateFillableSegment(params, segment) {
+    try {
+        const value = evaluateWorkflowExpression(segment.expression, params.context);
+        const literal = coerceWorkflowValueToString(value);
+        return {
+            kind: 'evaluated',
+            value,
+            literal,
+            trace: fillTraceEntry(segment, params.site, literal)
+        };
+    } catch (error) {
+        if (error instanceof WorkflowExpressionEvaluationError && error.reason === 'missing-path') {
+            if (fieldMissingPathRequiresFailure(params, segment)) {
+                throw new WorkflowTemplateResolutionError({
+                    source: segment.expression.source,
+                    cause: error
+                });
+            }
+            return {
+                kind: 'degraded',
+                diagnostic: missingPathDiagnostic(segment),
+                trace: fillTraceEntry(segment, params.site, '', true)
+            };
+        }
+        throw new WorkflowTemplateResolutionError({
+            source: segment.expression.source,
+            cause: error
+        });
+    }
+}
 function fillTraceEntry(segment, site, value, degraded = false) {
     return evaluationTraceEntry({
         expression: segment.expression.source,
@@ -127,6 +143,18 @@ function fillTraceEntry(segment, site, value, degraded = false) {
         } : {}
     });
 }
+function fieldMissingPathRequiresFailure(params, segment) {
+    return isExactSingleExpressionField(params) && params.failurePolicy === 'fail' || missingPathRequiresFailure(segment, params.failurePolicy, params.site);
+}
+function exactTypedFieldRequiresFailure(params, segment) {
+    return isExactSingleExpressionField(params) && params.failurePolicy === 'fail' && segment.fillTarget !== 'runner-fill';
+}
+function typedFieldNotFillableAtSite(segment) {
+    return new WorkflowTemplateResolutionError({
+        source: segment.expression.source,
+        cause: new Error('Typed field is not fillable at this site.')
+    });
+}
 function missingPathDiagnostic(segment) {
     return {
         reason: 'missing-path',