unique_toolkit 2026.46.0.dev2__py3-none-any.whl → 2026.46.0.dev3__py3-none-any.whl

unique_toolkit/_common/experimental/write_up_agent/services/generation_handler/service.py

@@ -3,8 +3,6 @@
 import logging
 from typing import Any, Callable
 
-from jinja2 import Template
-
 from unique_toolkit._common.experimental.write_up_agent.schemas import (
     GroupData,
     ProcessedGroup,
@@ -21,6 +19,7 @@ from unique_toolkit._common.experimental.write_up_agent.services.generation_hand
     PromptBuildError,
     TokenLimitError,
 )
+from unique_toolkit._common.utils.jinja.sandbox import sandboxed_template
 from unique_toolkit.language_model import LanguageModelService
 from unique_toolkit.language_model.builder import MessagesBuilder
 
@@ -285,14 +284,14 @@ class GenerationHandler:
         """
         try:
             # Build system prompt
-            system_prompt = Template(
+            system_prompt = sandboxed_template(
                 self._config.prompts_config.system_prompt_template
             ).render(
                 common_instruction=self._config.common_instruction,
             )
 
             # Build user prompt with section name
-            user_prompt = Template(
+            user_prompt = sandboxed_template(
                 self._config.prompts_config.user_prompt_template
             ).render(
                 section_name=section_name,

unique_toolkit/_common/experimental/write_up_agent/services/template_handler/service.py

@@ -1,6 +1,6 @@
 """Template handler service."""
 
-from jinja2 import Template, TemplateError
+from jinja2 import TemplateError
 
 from unique_toolkit._common.experimental.write_up_agent.schemas import (
     GroupData,
@@ -18,6 +18,7 @@ from unique_toolkit._common.experimental.write_up_agent.services.template_handle
 from unique_toolkit._common.experimental.write_up_agent.services.template_handler.utils import (
     parse_template,
 )
+from unique_toolkit._common.utils.jinja.sandbox import sandboxed_template
 
 
 # TODO [UN-16142]: Simplify template logic
@@ -44,7 +45,7 @@ class TemplateHandler:
         self._template = template
 
         try:
-            self._jinja_template = Template(template, lstrip_blocks=True)
+            self._jinja_template = sandboxed_template(template, lstrip_blocks=True)
         except TemplateError as e:
             snippet = template[:100] + "..." if len(template) > 100 else template
             raise TemplateParsingError(

unique_toolkit/_common/utils/jinja/render.py

@@ -1,7 +1,6 @@
 from typing import Any
 
-from jinja2 import Template
-
+from unique_toolkit._common.utils.jinja.sandbox import sandboxed_template
 from unique_toolkit._common.utils.jinja.schema import Jinja2PromptParams
 
 
@@ -15,4 +14,4 @@ def render_template(
 
     params.update(kwargs)
 
-    return Template(template, lstrip_blocks=True).render(**params)
+    return sandboxed_template(template, lstrip_blocks=True).render(**params)

unique_toolkit/_common/utils/jinja/sandbox.py

@@ -0,0 +1,18 @@
+from functools import cache
+
+from jinja2 import Template
+from jinja2.sandbox import SandboxedEnvironment
+
+
+@cache
+def _sandboxed_environment(*, lstrip_blocks: bool) -> SandboxedEnvironment:
+    return SandboxedEnvironment(lstrip_blocks=lstrip_blocks)
+
+
+def sandboxed_template(source: str, *, lstrip_blocks: bool = False) -> Template:
+    """Compile a Jinja template under Jinja's sandbox restrictions.
+
+    Use this for templates that come from configuration. An expression the
+    sandbox rejects raises ``jinja2.exceptions.SecurityError``.
+    """
+    return _sandboxed_environment(lstrip_blocks=lstrip_blocks).from_string(source)

unique_toolkit/_common/utils/jinja/schema.py

@@ -3,7 +3,6 @@ from __future__ import annotations
 from datetime import date, datetime
 from typing import Annotated, Any
 
-from jinja2 import Template
 from pydantic import (
     BaseModel,
     ConfigDict,
@@ -12,6 +11,7 @@ from pydantic import (
     WrapSerializer,
 )
 
+from unique_toolkit._common.utils.jinja.sandbox import sandboxed_template
 from unique_toolkit.agentic.tools.tool import Tool
 
 
@@ -21,7 +21,7 @@ class Jinja2PromptParams(BaseModel):
     def render_template(self, template: str) -> str:
         params = self.model_dump(exclude_none=True, mode="json")
 
-        return Template(template, lstrip_blocks=True).render(**params)
+        return sandboxed_template(template, lstrip_blocks=True).render(**params)
 
 
 class ToolPromptParams(Jinja2PromptParams):

unique_toolkit/agentic/tools/a2a/evaluation/evaluator.py

@@ -2,10 +2,10 @@ import logging
 from typing import Any, NamedTuple, override
 
 import unique_sdk
-from jinja2 import Template
 from pydantic import BaseModel
 
 from unique_toolkit._common.execution import failsafe
+from unique_toolkit._common.utils.jinja.sandbox import sandboxed_template
 from unique_toolkit.agentic.evaluation.evaluation_manager import Evaluation
 from unique_toolkit.agentic.evaluation.exception import EvaluatorException
 from unique_toolkit.agentic.evaluation.schemas import (
@@ -292,7 +292,9 @@ class SubAgentEvaluationService(Evaluation):
             MessagesBuilder()
             .system_message_append(self._config.summarization_system_message)
             .user_message_append(
-                Template(self._config.summarization_user_message_template).render(
+                sandboxed_template(
+                    self._config.summarization_user_message_template
+                ).render(
                     sub_agents=sub_agents_display_data,
                 )
             )

{unique_toolkit-2026.46.0.dev2.dist-info → unique_toolkit-2026.46.0.dev3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: unique-toolkit
-Version: 2026.46.0.dev2
+Version: 2026.46.0.dev3
 Summary: 
 Author: Cedric Klinkert, Martin Fadler, Sadique Sheik, Fabian Schläpfer, Pascal Hauri, Ejiroghene Oki-Peter, Rami Azouz, Ricardo Visini, Sanzio Monti
 Author-email: Cedric Klinkert <cedric.klinkert@unique.ch>, Martin Fadler <martin.fadler@unique.ch>, Sadique Sheik <sadique@unique.ch>, Fabian Schläpfer <fabian@unique.ch>, Pascal Hauri <pascal@unique.ch>, Ejiroghene Oki-Peter <oki-peter.ejiroghene@unique.ai>, Rami Azouz <rami.ext@unique.ch>, Ricardo Visini <ricardo.visini@unique.ch>, Sanzio Monti <sanzio.monti@unique.ai>

{unique_toolkit-2026.46.0.dev2.dist-info → unique_toolkit-2026.46.0.dev3.dist-info}/RECORD

@@ -50,11 +50,11 @@ unique_toolkit/_common/experimental/write_up_agent/services/generation_handler/e
 unique_toolkit/_common/experimental/write_up_agent/services/generation_handler/prompts/config.py,sha256=ep8NJNyBEbKIN7FudkeAfFaHzl1JygJxfNR2Ab0MHU0,1153
 unique_toolkit/_common/experimental/write_up_agent/services/generation_handler/prompts/system_prompt.j2,sha256=U66WhKnA-_AHM-APCzHVRn2bu5rZMqRwyZ2kvAmF2xA,674
 unique_toolkit/_common/experimental/write_up_agent/services/generation_handler/prompts/user_prompt.j2,sha256=9OMngS80URT4g96c0pYWjIcZn2Jn-C2aSFUdE7uIfCs,709
-unique_toolkit/_common/experimental/write_up_agent/services/generation_handler/service.py,sha256=KkyWRVOTvayszIi_cfP8wLd_3feA4MyCJ-MXeQ5JKrw,12166
+unique_toolkit/_common/experimental/write_up_agent/services/generation_handler/service.py,sha256=oQKWdMs370R7TlwIjwGskgq6U6-g94RGO1irDYESp9E,12231
 unique_toolkit/_common/experimental/write_up_agent/services/template_handler/__init__.py,sha256=dyUAoV0uL-eEtSQQQ7XV8YMnNvwcyowiquZrgbhzNII,800
 unique_toolkit/_common/experimental/write_up_agent/services/template_handler/default_template.j2,sha256=mL2l4rvrQFEHvjZ8uf2uQFujoKsnT1CoYHbEC45zHDY,1036
 unique_toolkit/_common/experimental/write_up_agent/services/template_handler/exceptions.py,sha256=FGkJsbEeLwGDtFROH0TMxMFeXo4zfF40pXbLk6peYAo,1256
-unique_toolkit/_common/experimental/write_up_agent/services/template_handler/service.py,sha256=lg9rIbQKTzPhQTSWMt66z1X3hHnu8v7uIylV7Jn9vyY,6494
+unique_toolkit/_common/experimental/write_up_agent/services/template_handler/service.py,sha256=PLxJQfK-aTr5wIpRXzx0t5IT5kZKE4vwZhY-iGTK5z8,6568
 unique_toolkit/_common/experimental/write_up_agent/services/template_handler/utils.py,sha256=FeJhTAU7AUlSFCfFwmEzzI22PtAdFJluzsGeiEPK49Q,6393
 unique_toolkit/_common/experimental/write_up_agent/utils.py,sha256=I_OCDXCxY6uZk_fNQg_bIXHwjnN7ND_ngcisThnGGIc,739
 unique_toolkit/_common/feature_flags/schema.py,sha256=X32VqH4VMK7bhEfSd8Wbddl8FVs7Gh7ucuIEbmqc4Kw,268
@@ -74,8 +74,9 @@ unique_toolkit/_common/utils/__init__.py,sha256=qHrEy-3zkbFPdGFriRscPbGKuQfOuPi3
 unique_toolkit/_common/utils/files.py,sha256=cPJU3Y5DlAbdakPaF1vICOCOujMHESrP4b3RCJjtGj4,5871
 unique_toolkit/_common/utils/image/encode.py,sha256=IJhtTcIT_azhiDsPp15oYs2LPze2l-sGlZrJASHrDVI,658
 unique_toolkit/_common/utils/jinja/helpers.py,sha256=UQWj0hFMtnuUFYDJ8NKbEblvYE8DrWX1o7fKQU3H9IQ,262
-unique_toolkit/_common/utils/jinja/render.py,sha256=J5UBIWoljl-Us7SjZIap9wewcLTzpXjQpOgas_YTf3Y,482
-unique_toolkit/_common/utils/jinja/schema.py,sha256=HVHu7eQhHTl_ogYC1gOw9N1H6VTN8Xz783WzyAjgN20,1951
+unique_toolkit/_common/utils/jinja/render.py,sha256=D48hVbDcaGz_O01Xgawd3fBgbFIiZkThShZyjN96nBo,537
+unique_toolkit/_common/utils/jinja/sandbox.py,sha256=UAT5Au8pEDAwrZcseDc3m7uFpLx_3vtLQ4Ureqv0Jlc,633
+unique_toolkit/_common/utils/jinja/schema.py,sha256=uyGGN1uvcGTBBujs8KUrnMMND73MNC5YGJkSETVyUCo,2007
 unique_toolkit/_common/utils/jinja/utils.py,sha256=0SrwN6qfLlRJrl38HG7qsMr5-DwpABNnM9LpqpMgwUA,2814
 unique_toolkit/_common/utils/structured_output/__init__.py,sha256=nm_orZrlCXL0FPLUg0Jv6Ty1flXPkCgZ9caAWaS8rz8,38
 unique_toolkit/_common/utils/structured_output/schema.py,sha256=Tp7kDYcmKtnUhcuRkH86TSYhylRff0ZZJYb2dLkISts,131
@@ -157,7 +158,7 @@ unique_toolkit/agentic/tools/a2a/config.py,sha256=f0nkNaFpYYX1SC2n0ZtsO8r9_oYhor
 unique_toolkit/agentic/tools/a2a/evaluation/__init__.py,sha256=Efso468EQ4UANv140qcrRPCdX98-OQJfnrLqhgJ9pfE,412
 unique_toolkit/agentic/tools/a2a/evaluation/_utils.py,sha256=-fvd14FdEnQETGq-GRk7zdgJvsQt7_1UnM0T5kWEzgc,1947
 unique_toolkit/agentic/tools/a2a/evaluation/config.py,sha256=DLdDXWiXqkRgl-lmoSJxeMiXMScA4PFu2xVuMAqTHyA,2358
-unique_toolkit/agentic/tools/a2a/evaluation/evaluator.py,sha256=uJF2DrBOw6De38OfclU9i-jvPwhpimcs7fAJp7eyQGI,10914
+unique_toolkit/agentic/tools/a2a/evaluation/evaluator.py,sha256=dGd1CurVAdRqGfFV8Tx-WNyJ_8eA5wJEOiPQbgn1hiQ,11008
 unique_toolkit/agentic/tools/a2a/evaluation/summarization_user_message.j2,sha256=acP1YqD_sCy6DT0V2EIfhQTmaUKeqpeWNJ7RGgceo8I,271
 unique_toolkit/agentic/tools/a2a/manager.py,sha256=B5y69urCFCD2ROfAO2mTa-rCJRxUpOJpipPXL7ugpDI,3655
 unique_toolkit/agentic/tools/a2a/postprocessing/__init__.py,sha256=aVtUBPN7kDrqA6Bze34AbqQpcBBqpvfyJG-xF65w7R0,659
@@ -429,6 +430,6 @@ unique_toolkit/short_term_memory/service.py,sha256=2JMBEBn6GoyK-a0xvdcWpPft-3C74
 unique_toolkit/smart_rules/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 unique_toolkit/smart_rules/compile.py,sha256=vRe0aMJWuVIK-VsqomgxQImzke7MDmwgSxxJfYCa7zw,1386
 unique_toolkit/test_utilities/events.py,sha256=FLrhMh0A_mQutAUjoD0FdMcVQ4Gq31r35OVGzRjvLro,6760
-unique_toolkit-2026.46.0.dev2.dist-info/WHEEL,sha256=eh7sammvW2TypMMMGKgsM83HyA_3qQ5Lgg3ynoecH3M,79
-unique_toolkit-2026.46.0.dev2.dist-info/METADATA,sha256=Yjk6T35u6-_kF9-z5dA6asMpECJhr-JbDtDlSHVkXaA,7821
-unique_toolkit-2026.46.0.dev2.dist-info/RECORD,,
+unique_toolkit-2026.46.0.dev3.dist-info/WHEEL,sha256=eh7sammvW2TypMMMGKgsM83HyA_3qQ5Lgg3ynoecH3M,79
+unique_toolkit-2026.46.0.dev3.dist-info/METADATA,sha256=hwd2lpcpuRDDzxudDerD9o_Jqd9wIvAbUadPJu-Ytn4,7821
+unique_toolkit-2026.46.0.dev3.dist-info/RECORD,,