@rcrsr/rill 0.7.2 → 0.8.1

package/dist/ext/exec/runner.js

@@ -0,0 +1,168 @@
+/**
+ * exec Extension Runner
+ *
+ * Handles process spawning with argument validation and security controls.
+ * Uses child_process.execFile() for shell injection prevention.
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { RuntimeError } from '../../error-classes.js';
+const execFileAsync = promisify(execFile);
+// ============================================================
+// VALIDATION
+// ============================================================
+/**
+ * Validate arguments against allowlist/blocklist rules.
+ *
+ * @param args - Command arguments to validate
+ * @param config - Command configuration with security rules
+ * @param commandName - Command name for error messages
+ * @throws RuntimeError RILL-R004 if validation fails
+ */
+function validateArgs(args, config, commandName) {
+    const { allowedArgs, blockedArgs } = config;
+    // Allowlist mode: every arg must be in allowedArgs
+    if (allowedArgs !== undefined) {
+        for (const arg of args) {
+            if (!allowedArgs.includes(arg)) {
+                // EC-14: Arg not in allowlist
+                throw new RuntimeError('RILL-R004', `arg "${arg}" not permitted for command "${commandName}"`, undefined, { commandName, arg, allowedArgs });
+            }
+        }
+    }
+    // Blocklist mode: no arg can be in blockedArgs
+    if (blockedArgs !== undefined) {
+        for (const arg of args) {
+            if (blockedArgs.includes(arg)) {
+                // EC-15: Arg in blocklist
+                throw new RuntimeError('RILL-R004', `arg "${arg}" is blocked for command "${commandName}"`, undefined, { commandName, arg, blockedArgs });
+            }
+        }
+    }
+}
+/**
+ * Check if stdin is supported by the command.
+ *
+ * @param config - Command configuration
+ * @param commandName - Command name for error messages
+ * @param hasStdin - Whether stdin was provided
+ * @throws RuntimeError RILL-R004 if stdin not supported but provided
+ */
+function validateStdin(config, commandName, hasStdin) {
+    if (hasStdin && !config.stdin) {
+        // EC-19: stdin not supported
+        throw new RuntimeError('RILL-R004', `command "${commandName}" does not support stdin`, undefined, { commandName });
+    }
+}
+// ============================================================
+// EXECUTION
+// ============================================================
+/**
+ * Execute command with process spawning and security controls.
+ *
+ * Uses execFile() to prevent shell injection attacks.
+ * Validates arguments against allowlist/blocklist rules.
+ * Returns stdout, stderr, and exit code (non-zero exit is not an error).
+ *
+ * @param commandName - Command name for error messages
+ * @param config - Command configuration with security rules
+ * @param args - Command arguments
+ * @param stdinData - Optional stdin data
+ * @param signal - Optional AbortSignal for cancellation
+ * @returns Command result with stdout, stderr, and exitCode
+ * @throws RuntimeError RILL-R004 for validation failures
+ * @throws RuntimeError RILL-R012 for timeout
+ * @throws RuntimeError RILL-R004 for output size limit exceeded
+ * @throws RuntimeError RILL-R004 for binary not found
+ *
+ * @example
+ * ```typescript
+ * const result = await runCommand('git', {
+ *   binary: 'git',
+ *   allowedArgs: ['status', '--short']
+ * }, ['status', '--short']);
+ * // Returns: { stdout: "...", stderr: "", exitCode: 0 }
+ * ```
+ */
+export async function runCommand(commandName, config, args, stdinData, signal) {
+    // Validate arguments against security rules
+    validateArgs(args, config, commandName);
+    // Validate stdin support
+    validateStdin(config, commandName, stdinData !== undefined);
+    // Prepare execFile options
+    const options = {
+        encoding: 'utf8',
+    };
+    if (config.timeout !== undefined) {
+        options.timeout = config.timeout;
+    }
+    if (config.maxBuffer !== undefined) {
+        options.maxBuffer = config.maxBuffer;
+    }
+    // Add cwd if provided
+    if (config.cwd !== undefined) {
+        options.cwd = config.cwd;
+    }
+    // Add env if provided
+    if (config.env !== undefined) {
+        options.env = config.env;
+    }
+    // Add stdin data if provided
+    if (stdinData !== undefined) {
+        options.input = stdinData;
+    }
+    // Add abort signal if provided
+    if (signal !== undefined) {
+        options.signal = signal;
+    }
+    try {
+        // Execute command using execFile (no shell interpolation)
+        const { stdout, stderr } = await execFileAsync(config.binary, args, options);
+        return {
+            stdout: String(stdout || ''),
+            stderr: String(stderr || ''),
+            exitCode: 0,
+        };
+    }
+    catch (err) {
+        // Handle execution errors
+        if (err && typeof err === 'object') {
+            const execError = err;
+            // EC-16: Binary not found
+            if (execError.code === 'ENOENT') {
+                throw new RuntimeError('RILL-R004', `binary not found: ${config.binary}`, undefined, { commandName, binary: config.binary });
+            }
+            // EC-18: Output exceeds limit (check multiple conditions)
+            const isMaxBufferError = execError.code === 'ERR_CHILD_PROCESS_STDOUT_MAXBUFFER' ||
+                execError.code === 'ERR_CHILD_PROCESS_STDERR_MAXBUFFER' ||
+                (execError.message &&
+                    execError.message.toLowerCase().includes('maxbuffer')) ||
+                (execError.killed === true &&
+                    execError.signal === 'SIGTERM' &&
+                    config.maxBuffer !== undefined);
+            if (isMaxBufferError) {
+                throw new RuntimeError('RILL-R004', `command output exceeds size limit`, undefined, { commandName, maxBuffer: config.maxBuffer });
+            }
+            // EC-17: Timeout (must check after maxBuffer to avoid confusion)
+            if (execError.killed === true && execError.signal === 'SIGTERM') {
+                const timeoutMs = config.timeout || 0;
+                throw new RuntimeError('RILL-R012', `command "${commandName}" timed out (${timeoutMs}ms)`, undefined, { commandName, timeoutMs });
+            }
+            // Non-zero exit code: return as CommandResult (not an error)
+            if ('stdout' in execError && 'stderr' in execError) {
+                // Extract exit code from error
+                const exitCode = 'code' in err && typeof err.code === 'number'
+                    ? err.code
+                    : 1;
+                return {
+                    stdout: String(execError.stdout || ''),
+                    stderr: String(execError.stderr || ''),
+                    exitCode,
+                };
+            }
+        }
+        // Unknown error: re-throw
+        throw err;
+    }
+}
+//# sourceMappingURL=runner.js.map

package/dist/ext/exec/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/ext/exec/runner.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAmC1C,+DAA+D;AAC/D,aAAa;AACb,+DAA+D;AAE/D;;;;;;;GAOG;AACH,SAAS,YAAY,CACnB,IAAuB,EACvB,MAAqB,EACrB,WAAmB;IAEnB,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAE5C,mDAAmD;IACnD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,8BAA8B;gBAC9B,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,QAAQ,GAAG,gCAAgC,WAAW,GAAG,EACzD,SAAS,EACT,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,CAClC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,0BAA0B;gBAC1B,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,QAAQ,GAAG,6BAA6B,WAAW,GAAG,EACtD,SAAS,EACT,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,CAClC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,MAAqB,EACrB,WAAmB,EACnB,QAAiB;IAEjB,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9B,6BAA6B;QAC7B,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,YAAY,WAAW,0BAA0B,EACjD,SAAS,EACT,EAAE,WAAW,EAAE,CAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,YAAY;AACZ,+DAA+D;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,WAAmB,EACnB,MAAqB,EACrB,IAAuB,EACvB,SAA8B,EAC9B,MAAgC;IAEhC,4CAA4C;IAC5C,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAExC,yBAAyB;IACzB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC;IAE5D,2BAA2B;IAC3B,MAAM,OAAO,GAQT;QACF,QAAQ,EAAE,MAAM;KACjB,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACnC,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACvC,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED,6BAA6B;IAC7B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED,+BAA+B;IAC/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC;QACH,0DAA0D;QAC1D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAC5C,MAAM,CAAC,MAAM,EACb,IAAgB,EAChB,OAAO,CACR,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YAC5B,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,0BAA0B;QAC1B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,GAOjB,CAAC;YAEF,0BAA0B;YAC1B,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,qBAAqB,MAAM,CAAC,MAAM,EAAE,EACpC,SAAS,EACT,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CACvC,CAAC;YACJ,CAAC;YAED,0DAA0D;YAC1D,MAAM,gBAAgB,GACpB,SAAS,CAAC,IAAI,KAAK,oCAAoC;gBACvD,SAAS,CAAC,IAAI,KAAK,oCAAoC;gBACvD,CAAC,SAAS,CAAC,OAAO;oBAChB,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACxD,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI;oBACxB,SAAS,CAAC,MAAM,KAAK,SAAS;oBAC9B,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;YAEpC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,mCAAmC,EACnC,SAAS,EACT,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAC7C,CAAC;YACJ,CAAC;YAED,iEAAiE;YACjE,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACtC,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,YAAY,WAAW,gBAAgB,SAAS,KAAK,EACrD,SAAS,EACT,EAAE,WAAW,EAAE,SAAS,EAAE,CAC3B,CAAC;YACJ,CAAC;YAED,6DAA6D;YAC7D,IAAI,QAAQ,IAAI,SAAS,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACnD,+BAA+B;gBAC/B,MAAM,QAAQ,GACZ,MAAM,IAAI,GAAG,IAAI,OAAQ,GAAyB,CAAC,IAAI,KAAK,QAAQ;oBAClE,CAAC,CAAG,GAAwB,CAAC,IAAe;oBAC5C,CAAC,CAAC,CAAC,CAAC;gBAER,OAAO;oBACL,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;oBACtC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;oBACtC,QAAQ;iBACT,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/ext/fetch/index.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Fetch Extension Factory
+ *
+ * Creates host functions for HTTP requests based on endpoint configuration.
+ * Scripts call endpoints with positional args or single dict argument.
+ * All URLs are constructed from config - scripts cannot specify arbitrary URLs.
+ */
+import type { ExtensionResult } from '../../runtime/ext/extensions.js';
+/** Parameter definition for endpoint */
+export interface EndpointParam {
+    readonly name: string;
+    readonly type: 'string' | 'number' | 'bool' | 'dict';
+    readonly required?: boolean | undefined;
+    readonly location: 'path' | 'query' | 'body' | 'header';
+    readonly defaultValue?: string | number | boolean | undefined;
+}
+/** Endpoint configuration with parameter declarations */
+export interface EndpointConfig {
+    readonly method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+    readonly path: string;
+    readonly params?: EndpointParam[] | undefined;
+    readonly headers?: Record<string, string> | undefined;
+    readonly body?: 'json' | 'form' | 'text' | undefined;
+    readonly responseFormat?: 'json' | 'text' | undefined;
+    readonly responseShape?: 'body' | 'full' | undefined;
+    readonly description?: string | undefined;
+}
+/** Fetch extension configuration */
+export interface FetchConfig {
+    readonly baseUrl: string;
+    readonly headers?: Record<string, string> | (() => Record<string, string>) | undefined;
+    readonly timeout?: number | undefined;
+    readonly retries?: number | undefined;
+    readonly retryDelay?: number | undefined;
+    readonly maxConcurrent?: number | undefined;
+    readonly responseFormat?: 'json' | 'text' | undefined;
+    readonly responseShape?: 'body' | 'full' | undefined;
+    readonly endpoints: Record<string, EndpointConfig>;
+}
+/**
+ * Create fetch extension with generated endpoint functions.
+ *
+ * Each endpoint in config becomes a host function.
+ * Scripts call endpoints with positional args or single dict.
+ * All URLs constructed from config - scripts cannot create arbitrary URLs.
+ *
+ * @param config - Fetch configuration with endpoints
+ * @returns ExtensionResult with endpoint functions and introspection
+ * @throws Error on invalid configuration
+ *
+ * @example
+ * ```typescript
+ * const api = createFetchExtension({
+ *   baseUrl: 'https://api.example.com',
+ *   endpoints: {
+ *     getUser: {
+ *       method: 'GET',
+ *       path: '/users/:id',
+ *       params: [
+ *         { name: 'id', type: 'string', location: 'path' }
+ *       ]
+ *     }
+ *   }
+ * });
+ * ```
+ */
+export declare function createFetchExtension(config: FetchConfig): ExtensionResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/ext/fetch/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ext/fetch/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAmBvE,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAC/D;AAED,yDAAyD;AACzD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED,oCAAoC;AACpC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EACb,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtB,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC9B,SAAS,CAAC;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACpD;AAgID;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,eAAe,CAoKzE"}

package/dist/ext/fetch/index.js

@@ -0,0 +1,259 @@
+/**
+ * Fetch Extension Factory
+ *
+ * Creates host functions for HTTP requests based on endpoint configuration.
+ * Scripts call endpoints with positional args or single dict argument.
+ * All URLs are constructed from config - scripts cannot specify arbitrary URLs.
+ */
+import { RuntimeError } from '../../error-classes.js';
+import { isDict, } from '../../runtime/core/callable.js';
+import { buildRequest, executeRequest, createSemaphore, } from './request.js';
+// ============================================================
+// PARAMETER MAPPING
+// ============================================================
+/**
+ * Convert EndpointParam to EndpointArg for request module.
+ * Maps type-aware parameters to location-based arguments.
+ *
+ * @param param - Parameter definition with type information
+ * @returns Argument definition for request builder
+ */
+function mapParamToArg(param) {
+    return {
+        name: param.name,
+        location: param.location,
+        required: param.required ?? true, // Default to required per spec
+    };
+}
+/**
+ * Convert EndpointConfig to InternalEndpointConfig for request module.
+ * Maps high-level endpoint config to request-compatible format.
+ *
+ * @param config - Public endpoint configuration
+ * @returns Request-compatible endpoint configuration
+ */
+function mapEndpointConfig(config) {
+    return {
+        method: config.method,
+        path: config.path,
+        args: config.params?.map(mapParamToArg),
+        headers: config.headers,
+        responseShape: config.responseShape ?? 'body',
+    };
+}
+// ============================================================
+// ARGUMENT PROCESSING
+// ============================================================
+/**
+ * Process arguments from positional or dict form.
+ * Supports two calling conventions:
+ * 1. Positional: endpoint(arg1, arg2, arg3)
+ * 2. Dict: endpoint({name: value, ...})
+ *
+ * @param args - Raw arguments from call site
+ * @param params - Parameter definitions
+ * @param functionName - Function name for error messages
+ * @returns Dict of argument name to value
+ * @throws RuntimeError on missing required parameter (EC-8)
+ */
+function processArguments(args, params, functionName) {
+    const result = {};
+    // Case 1: Single dict argument - extract named parameters
+    const firstArg = args[0];
+    if (args.length === 1 && firstArg !== undefined && isDict(firstArg)) {
+        const argsDict = firstArg;
+        for (const param of params) {
+            const value = argsDict[param.name];
+            if (value === undefined) {
+                // Check if parameter has default value
+                if (param.defaultValue !== undefined) {
+                    result[param.name] = param.defaultValue;
+                }
+                else if (param.required !== false) {
+                    // EC-8: Missing required parameter
+                    throw new RuntimeError('RILL-R001', `parameter "${param.name}" is required`, undefined, {
+                        functionName,
+                        paramName: param.name,
+                    });
+                }
+            }
+            else {
+                result[param.name] = value;
+            }
+        }
+        return result;
+    }
+    // Case 2: Positional arguments - map by position
+    for (let i = 0; i < params.length; i++) {
+        const param = params[i];
+        if (param === undefined)
+            continue;
+        const value = args[i];
+        if (value === undefined) {
+            // Check if parameter has default value
+            if (param.defaultValue !== undefined) {
+                result[param.name] = param.defaultValue;
+            }
+            else if (param.required !== false) {
+                // EC-8: Missing required parameter
+                throw new RuntimeError('RILL-R001', `parameter "${param.name}" is required`, undefined, {
+                    functionName,
+                    paramName: param.name,
+                });
+            }
+        }
+        else {
+            result[param.name] = value;
+        }
+    }
+    return result;
+}
+// ============================================================
+// FACTORY
+// ============================================================
+/**
+ * Create fetch extension with generated endpoint functions.
+ *
+ * Each endpoint in config becomes a host function.
+ * Scripts call endpoints with positional args or single dict.
+ * All URLs constructed from config - scripts cannot create arbitrary URLs.
+ *
+ * @param config - Fetch configuration with endpoints
+ * @returns ExtensionResult with endpoint functions and introspection
+ * @throws Error on invalid configuration
+ *
+ * @example
+ * ```typescript
+ * const api = createFetchExtension({
+ *   baseUrl: 'https://api.example.com',
+ *   endpoints: {
+ *     getUser: {
+ *       method: 'GET',
+ *       path: '/users/:id',
+ *       params: [
+ *         { name: 'id', type: 'string', location: 'path' }
+ *       ]
+ *     }
+ *   }
+ * });
+ * ```
+ */
+export function createFetchExtension(config) {
+    // Apply defaults
+    const timeout = config.timeout ?? 30000;
+    const retries = config.retries ?? 0;
+    const retryDelay = config.retryDelay ?? 1000;
+    const defaultResponseShape = config.responseShape ?? 'body';
+    // Create semaphore for concurrency control
+    const semaphore = createSemaphore(config.maxConcurrent);
+    // Track active requests for dispose()
+    const activeControllers = new Set();
+    // Convert config to request-compatible format
+    const requestConfig = {
+        baseUrl: config.baseUrl,
+        headers: config.headers,
+        timeout,
+        retryLimit: retries,
+        retryDelay,
+        maxConcurrent: config.maxConcurrent,
+        endpoints: Object.fromEntries(Object.entries(config.endpoints).map(([name, endpointConfig]) => [
+            name,
+            mapEndpointConfig(endpointConfig),
+        ])),
+    };
+    // ============================================================
+    // ENDPOINT FUNCTIONS
+    // ============================================================
+    const functions = {};
+    for (const [endpointName, endpointConfig] of Object.entries(config.endpoints)) {
+        const params = endpointConfig.params ?? [];
+        // Generate function for this endpoint
+        const endpointFn = async (args) => {
+            // Process arguments (positional or dict)
+            const processedArgs = processArguments(args, params, endpointName);
+            // Build request
+            const { url, options, responseShape } = buildRequest(requestConfig, endpointName, processedArgs);
+            // Create abort controller for this request
+            const controller = new AbortController();
+            activeControllers.add(controller);
+            try {
+                // Execute request
+                const result = await executeRequest(url, { ...options, signal: controller.signal }, requestConfig, endpointName, responseShape, semaphore);
+                return result;
+            }
+            finally {
+                activeControllers.delete(controller);
+            }
+        };
+        // Build parameter definitions for HostFunctionDefinition
+        const hostParams = params.map((param) => {
+            // Map EndpointParam type to HostFunctionParam type
+            const type = param.type === 'bool' ? 'bool' : param.type;
+            const hostParam = {
+                name: param.name,
+                type,
+            };
+            if (param.defaultValue !== undefined) {
+                hostParam.defaultValue = param.defaultValue;
+            }
+            return hostParam;
+        });
+        const returnType = (endpointConfig.responseShape ?? defaultResponseShape) === 'full'
+            ? 'dict'
+            : 'any';
+        const hostFunctionDef = {
+            params: hostParams,
+            fn: endpointFn,
+            ...(endpointConfig.description !== undefined
+                ? { description: endpointConfig.description }
+                : {}),
+            returnType,
+        };
+        functions[endpointName] = hostFunctionDef;
+    }
+    // ============================================================
+    // INTROSPECTION FUNCTION
+    // ============================================================
+    /**
+     * List all configured endpoints.
+     * IR-13: Returns list with name, method, path, description.
+     */
+    const endpoints = async () => {
+        const result = [];
+        for (const [name, endpointConfig] of Object.entries(config.endpoints)) {
+            result.push({
+                name,
+                method: endpointConfig.method,
+                path: endpointConfig.path,
+                description: endpointConfig.description ?? '',
+            });
+        }
+        return result;
+    };
+    functions['endpoints'] = {
+        params: [],
+        fn: endpoints,
+        description: 'List configured endpoints',
+        returnType: 'list',
+    };
+    // ============================================================
+    // DISPOSAL
+    // ============================================================
+    /**
+     * Abort all in-flight requests.
+     * AC-8: dispose() aborts in-flight requests.
+     */
+    const dispose = () => {
+        for (const controller of activeControllers) {
+            controller.abort();
+        }
+        activeControllers.clear();
+    };
+    // ============================================================
+    // EXTENSION RESULT
+    // ============================================================
+    const result = functions;
+    result.dispose = dispose;
+    return result;
+}
+//# sourceMappingURL=index.js.map

package/dist/ext/fetch/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ext/fetch/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGtD,OAAO,EACL,MAAM,GAEP,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAIL,YAAY,EACZ,cAAc,EACd,eAAe,GAChB,MAAM,cAAc,CAAC;AA2CtB,+DAA+D;AAC/D,oBAAoB;AACpB,+DAA+D;AAE/D;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAoB;IACzC,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,+BAA+B;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,MAAsB;IAC/C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,MAAM;KAC9C,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,sBAAsB;AACtB,+DAA+D;AAE/D;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CACvB,IAAiB,EACjB,MAAgC,EAChC,YAAoB;IAEpB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAG,QAAqC,CAAC;QAEvD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,uCAAuC;gBACvC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;gBAC1C,CAAC;qBAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;oBACpC,mCAAmC;oBACnC,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,cAAc,KAAK,CAAC,IAAI,eAAe,EACvC,SAAS,EACT;wBACE,YAAY;wBACZ,SAAS,EAAE,KAAK,CAAC,IAAI;qBACtB,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iDAAiD;IACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAElC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEtB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,uCAAuC;YACvC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;YAC1C,CAAC;iBAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBACpC,mCAAmC;gBACnC,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,cAAc,KAAK,CAAC,IAAI,eAAe,EACvC,SAAS,EACT;oBACE,YAAY;oBACZ,SAAS,EAAE,KAAK,CAAC,IAAI;iBACtB,CACF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+DAA+D;AAC/D,UAAU;AACV,+DAA+D;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,iBAAiB;IACjB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC;IAC7C,MAAM,oBAAoB,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC;IAE5D,2CAA2C;IAC3C,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAExD,sCAAsC;IACtC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAmB,CAAC;IAErD,8CAA8C;IAC9C,MAAM,aAAa,GAAyB;QAC1C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO;QACP,UAAU,EAAE,OAAO;QACnB,UAAU;QACV,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS,EAAE,MAAM,CAAC,WAAW,CAC3B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC;YAC/D,IAAI;YACJ,iBAAiB,CAAC,cAAc,CAAC;SAClC,CAAC,CACH;KACF,CAAC;IAEF,+DAA+D;IAC/D,qBAAqB;IACrB,+DAA+D;IAE/D,MAAM,SAAS,GAA2C,EAAE,CAAC;IAE7D,KAAK,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CACzD,MAAM,CAAC,SAAS,CACjB,EAAE,CAAC;QACF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,IAAI,EAAE,CAAC;QAE3C,sCAAsC;QACtC,MAAM,UAAU,GAAG,KAAK,EAAE,IAAiB,EAAsB,EAAE;YACjE,yCAAyC;YACzC,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YAEnE,gBAAgB;YAChB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,YAAY,CAClD,aAAa,EACb,YAAY,EACZ,aAAa,CACd,CAAC;YAEF,2CAA2C;YAC3C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAElC,IAAI,CAAC;gBACH,kBAAkB;gBAClB,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,GAAG,EACH,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EACzC,aAAa,EACb,YAAY,EACZ,aAAa,EACb,SAAS,CACV,CAAC;gBAEF,OAAO,MAAmB,CAAC;YAC7B,CAAC;oBAAS,CAAC;gBACT,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QAEF,yDAAyD;QACzD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,mDAAmD;YACnD,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAE9C,MAAM,SAAS,GAIX;gBACF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI;aACL,CAAC;YAEF,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACrC,SAAS,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;YAC9C,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,MAAM,UAAU,GACd,CAAC,cAAc,CAAC,aAAa,IAAI,oBAAoB,CAAC,KAAK,MAAM;YAC/D,CAAC,CAAE,MAAgB;YACnB,CAAC,CAAE,KAAe,CAAC;QAEvB,MAAM,eAAe,GAA2B;YAC9C,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,UAAU;YACd,GAAG,CAAC,cAAc,CAAC,WAAW,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,CAAC,WAAW,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,UAAU;SACX,CAAC;QAEF,SAAS,CAAC,YAAY,CAAC,GAAG,eAAe,CAAC;IAC5C,CAAC;IAED,+DAA+D;IAC/D,yBAAyB;IACzB,+DAA+D;IAE/D;;;OAGG;IACH,MAAM,SAAS,GAAG,KAAK,IAA0B,EAAE;QACjD,MAAM,MAAM,GAAgB,EAAE,CAAC;QAE/B,KAAK,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,IAAI,EAAE,cAAc,CAAC,IAAI;gBACzB,WAAW,EAAE,cAAc,CAAC,WAAW,IAAI,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,SAAS,CAAC,WAAW,CAAC,GAAG;QACvB,MAAM,EAAE,EAAE;QACV,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,2BAA2B;QACxC,UAAU,EAAE,MAAM;KACnB,CAAC;IAEF,+DAA+D;IAC/D,WAAW;IACX,+DAA+D;IAE/D;;;OAGG;IACH,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;YAC3C,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC,CAAC;IAEF,+DAA+D;IAC/D,mBAAmB;IACnB,+DAA+D;IAE/D,MAAM,MAAM,GAAoB,SAAS,CAAC;IAC1C,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/ext/fetch/request.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Fetch Request Module
+ * Handles URL building, retry logic, response parsing, and error handling
+ */
+/** Response shape configuration */
+export type ResponseShape = 'body' | 'full';
+/** Location of argument in request */
+export type ArgLocation = 'path' | 'query' | 'header' | 'body';
+/** Argument definition for endpoint */
+export interface EndpointArg {
+    readonly name: string;
+    readonly location: ArgLocation;
+    readonly required?: boolean | undefined;
+}
+/** Internal endpoint configuration for request building */
+export interface InternalEndpointConfig {
+    readonly path: string;
+    readonly method: string;
+    readonly args?: EndpointArg[] | undefined;
+    readonly headers?: Record<string, string> | undefined;
+    readonly responseShape?: ResponseShape | undefined;
+}
+/** Extension configuration */
+export interface FetchExtensionConfig {
+    readonly baseUrl: string;
+    readonly endpoints: Record<string, InternalEndpointConfig>;
+    readonly headers?: Record<string, string> | (() => Record<string, string>) | undefined;
+    readonly timeout?: number | undefined;
+    readonly retryLimit?: number | undefined;
+    readonly retryDelay?: number | undefined;
+    readonly maxConcurrent?: number | undefined;
+}
+/** Full response shape */
+export interface FullResponse {
+    readonly status: number;
+    readonly headers: Record<string, string>;
+    readonly body: unknown;
+}
+/** Fetch request options (compatible with fetch API) */
+export interface FetchOptions {
+    readonly method: string;
+    readonly headers: Record<string, string>;
+    body?: string | undefined;
+    signal?: AbortSignal | undefined;
+}
+/**
+ * Simple semaphore for limiting concurrent requests.
+ * Queues requests when limit is reached.
+ */
+declare class Semaphore {
+    private permits;
+    private readonly queue;
+    constructor(permits: number);
+    acquire(): Promise<void>;
+    release(): void;
+}
+/**
+ * Execute HTTP request with retry logic.
+ * Handles timeouts, network errors, and retries.
+ *
+ * @param url - Request URL
+ * @param options - Fetch options
+ * @param config - Extension configuration
+ * @param namespace - Extension namespace for error messages
+ * @param semaphore - Concurrency semaphore (optional)
+ * @returns Response body or full response
+ */
+export declare function executeRequest(url: string, options: FetchOptions, config: FetchExtensionConfig, namespace: string, responseShape: ResponseShape, semaphore?: Semaphore | undefined): Promise<unknown>;
+/**
+ * Create semaphore for concurrency control.
+ *
+ * @param maxConcurrent - Maximum concurrent requests
+ * @returns Semaphore instance or undefined if no limit
+ */
+export declare function createSemaphore(maxConcurrent: number | undefined): Semaphore | undefined;
+/**
+ * Build request from endpoint config and arguments.
+ *
+ * @param config - Extension configuration
+ * @param endpointName - Endpoint name
+ * @param args - Request arguments
+ * @returns Request URL and options
+ */
+export declare function buildRequest(config: FetchExtensionConfig, endpointName: string, args: Record<string, unknown>): {
+    url: string;
+    options: FetchOptions;
+    responseShape: ResponseShape;
+};
+export {};
+//# sourceMappingURL=request.d.ts.map

package/dist/ext/fetch/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../../src/ext/fetch/request.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,mCAAmC;AACnC,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5C,sCAAsC;AACtC,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE/D,uCAAuC;AACvC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,2DAA2D;AAC3D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CACpD;AAED,8BAA8B;AAC9B,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC3D,QAAQ,CAAC,OAAO,CAAC,EACb,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtB,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC9B,SAAS,CAAC;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED,0BAA0B;AAC1B,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAMD;;;GAGG;AACH,cAAM,SAAS;IACb,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;gBAEnC,OAAO,EAAE,MAAM;IAIrB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAU9B,OAAO,IAAI,IAAI;CAQhB;AAgOD;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,aAAa,EAC5B,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,GAChC,OAAO,CAAC,OAAO,CAAC,CA8HlB;AAMD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,SAAS,GAAG,SAAS,CAKvB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,oBAAoB,EAC5B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAE,CA2DtE"}