refactor: rename public secure jinja mode

- rename the public RunConfig enum option from ginja to secure
  so the interface reads as native versus secure
- update docs and tests to use the new public enum member and
  keep the hardened renderer wired through the same engine seam

Signed-off-by: Eric W. Tramel <eric.tramel@gmail.com>

Author: eric-tramel

docs/code_reference/run_config.md

@@ -14,7 +14,7 @@ data_designer = DataDesigner()
 data_designer.set_run_config(dd.RunConfig(
     buffer_size=500,
     max_conversation_restarts=3,
-    jinja_rendering_engine=dd.JinjaRenderingEngine.GINJA,
+    jinja_rendering_engine=dd.JinjaRenderingEngine.SECURE,
 ))
 ```
 

packages/data-designer-config/src/data_designer/config/run_config.py

@@ -16,7 +16,7 @@ class JinjaRenderingEngine(StrEnum):
     """Template renderer used by the engine for user-supplied Jinja templates."""
 
     NATIVE = "native"
-    GINJA = "ginja"
+    SECURE = "secure"
 
 
 class ThrottleConfig(ConfigBase):
@@ -109,7 +109,7 @@ class RunConfig(ConfigBase):
             consolidated log block. Must be > 0. Default is 5.0.
         jinja_rendering_engine: Template renderer used for engine-side Jinja evaluation.
             ``native`` uses Jinja2's built-in sandbox with the standard filter set and
-            fewer Data Designer-specific restrictions. ``ginja`` uses Data Designer's
+            fewer Data Designer-specific restrictions. ``secure`` uses Data Designer's
             hardened sandbox with additional AST, filter, and output guards.
             Default is ``native``.
         throttle: AIMD throttle tuning parameters.  See ``ThrottleConfig`` for details.
@@ -129,7 +129,7 @@ class RunConfig(ConfigBase):
         default=JinjaRenderingEngine.NATIVE,
         description=(
             "Template renderer used for engine-side Jinja evaluation. "
-            "`native` uses Jinja2's built-in sandbox; `ginja` uses Data Designer's hardened sandbox."
+            "`native` uses Jinja2's built-in sandbox; `secure` uses Data Designer's hardened sandbox."
         ),
     )
     throttle: ThrottleConfig = Field(default_factory=ThrottleConfig)

packages/data-designer-config/tests/config/test_run_config.py

@@ -10,6 +10,6 @@ def test_run_config_defaults_to_native_jinja_renderer() -> None:
     assert JinjaRenderingEngine(RunConfig().jinja_rendering_engine) == JinjaRenderingEngine.NATIVE
 
 
-def test_run_config_accepts_ginja_renderer() -> None:
-    run_config = RunConfig(jinja_rendering_engine=JinjaRenderingEngine.GINJA)
-    assert JinjaRenderingEngine(run_config.jinja_rendering_engine) == JinjaRenderingEngine.GINJA
+def test_run_config_accepts_secure_renderer() -> None:
+    run_config = RunConfig(jinja_rendering_engine=JinjaRenderingEngine.SECURE)
+    assert JinjaRenderingEngine(run_config.jinja_rendering_engine) == JinjaRenderingEngine.SECURE

packages/data-designer-engine/src/data_designer/engine/processing/ginja/environment.py

@@ -509,7 +509,7 @@ def _create_render_environment(
         if record_str_fn is not None:
             env_kwargs["finalize"] = record_str_fn
             env_kwargs["prefer_dict_key_access"] = True
-        if self._get_jinja_rendering_engine() == JinjaRenderingEngine.GINJA:
+        if self._get_jinja_rendering_engine() == JinjaRenderingEngine.SECURE:
             return UserTemplateSandboxEnvironment(allowed_references=dataset_variables, **env_kwargs)
         return NativeJinjaSandboxEnvironment(allowed_references=dataset_variables, **env_kwargs)
 

packages/data-designer-engine/tests/engine/column_generators/generators/test_expression.py

@@ -176,12 +176,12 @@ def test_generate_respects_run_config_jinja_rendering_engine() -> None:
     native_result = native_generator.generate(df)
     assert native_result["joined"].tolist() == ["a-b"]
 
-    ginja_provider = Mock(spec=ResourceProvider)
-    ginja_provider.run_config = RunConfig(jinja_rendering_engine=JinjaRenderingEngine.GINJA)
-    ginja_generator = _create_test_generator(
+    secure_provider = Mock(spec=ResourceProvider)
+    secure_provider.run_config = RunConfig(jinja_rendering_engine=JinjaRenderingEngine.SECURE)
+    secure_generator = _create_test_generator(
         _create_test_config("joined", "{{ col1 | join('-') }}", "str"),
-        ginja_provider,
+        secure_provider,
     )
 
     with pytest.raises(UserTemplateUnsupportedFiltersError):
-        ginja_generator.generate(df)
+        secure_generator.generate(df)

packages/data-designer-engine/tests/engine/column_generators/utils/test_prompt_renderer.py

@@ -143,12 +143,12 @@ def test_prompt_renderer_uses_native_jinja_by_default() -> None:
     assert result == "Joined: Hello-World"
 
 
-def test_prompt_renderer_can_opt_into_ginja() -> None:
+def test_prompt_renderer_can_opt_into_secure_mode() -> None:
     config = LLMTextColumnConfig(name="test_column", prompt="Test prompt", model_alias="test_model")
     recipe = create_response_recipe(config)
     renderer = RecordBasedPromptRenderer(
         response_recipe=recipe,
-        jinja_rendering_engine=JinjaRenderingEngine.GINJA,
+        jinja_rendering_engine=JinjaRenderingEngine.SECURE,
     )
 
     with pytest.raises(PromptTemplateRenderError, match=r"\| join"):

packages/data-designer-engine/tests/engine/processing/ginja/test_environment.py

@@ -181,7 +181,7 @@ def test_with_jinja2_user_template_rendering_mixin(test_case, template_1, templa
 
     class Foo(WithJinja2UserTemplateRendering):
         def __init__(self, template_1: str, template_2: str = None):
-            self._jinja_rendering_engine = JinjaRenderingEngine.GINJA
+            self._jinja_rendering_engine = JinjaRenderingEngine.SECURE
             if template_2 is None:
                 # Single template
                 self.prepare_jinja2_template_renderer(template_1, dataset_variables=["safe"])

packages/data-designer-engine/tests/engine/sampling_gen/test_jinja_utils.py

@@ -129,5 +129,5 @@ def test_jinja_dataframe_can_switch_rendering_engines() -> None:
     with pytest.raises(UserTemplateUnsupportedFiltersError):
         JinjaDataFrame(
             "items | join('-')",
-            jinja_rendering_engine=JinjaRenderingEngine.GINJA,
+            jinja_rendering_engine=JinjaRenderingEngine.SECURE,
         ).to_column(df)