prefix-safe-json 0.0.1-alpha.2 → 0.0.1-alpha.4

package/dist/gate/types.d.ts

@@ -0,0 +1,184 @@
+import { JsonValue, Diagnostic } from "../types.js";
+import { CoordinatorDiagnostic, CoordinatorPushResult, ToolCallCoordinatorEvent } from "../coordinator/types.js";
+import { NormalizedToolStreamEvent, ProviderName, StreamEndReason } from "../coordinator/protocol.js";
+/**
+ * What to do with a tool call right now.
+ *
+ * - `"execute"`: the arguments are complete, unfabricated, and (if a schema
+ *   was registered for this tool) schema-valid. Safe to run.
+ * - `"retry"`: the provider's output was incomplete or truncated. There is
+ *   nothing wrong with the data received so far - there just isn't a
+ *   trustworthy complete value yet. Re-request/continue generation.
+ * - `"reject"`: the data itself is the problem (malformed JSON, a schema
+ *   mismatch, a resource limit, a provider-side error, or a content-policy
+ *   termination). Re-sending the exact same partial input will not fix it.
+ */
+export type ExecutionAction = "execute" | "retry" | "reject";
+/**
+ * Machine-readable classification of *why* an `ExecutionAction` was chosen.
+ * See `docs/EXECUTION_GATE.md` for the full decision table.
+ */
+export type ExecutionReason = "complete" | "truncated" | "stream_incomplete" | "schema_invalid" | "malformed" | "resource_limit" | "provider_error" | "content_filtered" | "unknown";
+/**
+ * Why a decision came out the way it did - observability, not a second
+ * decision input. Every field here is read-only, derived state already held
+ * elsewhere (`ToolCallState`, the stream-level `DecisionContext`); nothing
+ * on this object ever feeds back into `decideExecution()`'s own logic, and
+ * changing what it reports can never change `action`/`executable`/`reason`.
+ *
+ * Deliberately excludes anything that would require new cross-layer
+ * plumbing to derive reliably (e.g. a received-chunk count - the parser
+ * only tracks cumulative bytes, not `push()` call counts, and adding that
+ * tracking purely to populate a metric here was judged not worth the
+ * coupling for this release).
+ */
+export interface DecisionEvidence {
+    /** Which provider adapter produced this call (`ToolCallState.provider`). */
+    readonly provider: ProviderName;
+    /**
+     * The provider's own, pre-normalization finish/stop reason string, when
+     * the stream-ending event carried one (e.g. `"length"`, `"max_output_tokens"`,
+     * `"content_filter"`). `undefined` when the stream never reported one, or
+     * reported one without a `providerReason` (e.g. a default `finish()` call
+     * with no `meta`).
+     */
+    readonly providerReason?: string;
+    /** The normalized, library-level stream-end reason applied to this call. */
+    readonly streamEndReason: StreamEndReason;
+    /**
+     * Whether a real `provider_stream_end` reason was ever observed, as
+     * opposed to the neutral `"unknown"` default a gate reports before any
+     * stream-end signal has arrived at all. `true` here does NOT mean the
+     * reason was safe - a confirmed `"length"` still has `terminalConfirmed:
+     * true` - only that the stream's end state is genuinely known rather than
+     * merely unclassified or never observed.
+     */
+    readonly terminalConfirmed: boolean;
+    /**
+     * Whether the parser's root JSON container actually closed
+     * (`ToolCallState.parser.rootComplete`) - independent of whether that
+     * closure was genuine or reached via a safe-close repair, and independent
+     * of whether the stream-end reason makes it trustworthy. A syntactically
+     * complete value cut short by `length` has `structurallyComplete: true`
+     * and `parserExecutable: false` at the same time - that combination *is*
+     * the scenario this library exists to catch.
+     */
+    readonly structurallyComplete: boolean;
+    /** `ToolCallState.parser.executable`, verbatim - the parser's own fail-closed verdict. */
+    readonly parserExecutable: boolean;
+    /**
+     * `ToolCallState.schemaValid`, verbatim. `undefined` when no schema was
+     * registered for this tool, or the call never reached a structurally
+     * complete outcome.
+     */
+    readonly schemaValid?: boolean;
+    /** Total bytes received for this call's argument stream (`ToolCallState.parser.receivedBytes`). */
+    readonly receivedBytes: number;
+}
+interface ExecutionDecisionCommon {
+    /** The coordinator's internal call identifier (see `ToolCallState.internalId`). */
+    readonly internalId: string;
+    readonly toolCallId?: string;
+    readonly toolIndex?: number;
+    readonly name?: string;
+    /**
+     * Whatever was safely committed for this call, complete or not - present
+     * for both executable and non-executable decisions so a caller can see
+     * *what part* of a rejected/retried call was genuinely received (e.g. a
+     * `path` field that arrived before a `content` field got cut off).
+     * Never the source of truth for whether it's safe to act on - that's
+     * `action`/`executable`. Absent only when nothing was ever committed.
+     */
+    readonly stableValue?: JsonValue;
+    /** This call's own parser diagnostics, verbatim (`ToolCallState.parser.diagnostics`). */
+    readonly parserDiagnostics: readonly Diagnostic[];
+    /** Coordinator-level diagnostics attributable to this call, verbatim. */
+    readonly coordinatorDiagnostics: readonly CoordinatorDiagnostic[];
+    /**
+     * Why this decision came out the way it did. See `DecisionEvidence` -
+     * always present, purely observational, never a second source of truth
+     * for `action`/`executable`/`reason`.
+     */
+    readonly evidence: DecisionEvidence;
+}
+/**
+ * The one and only shape a decision can have when `action === "execute"`.
+ * `value` is a real, present `JsonValue` here - never `undefined`, never
+ * optional - because this is the single positive case: everything else in
+ * the gate exists to rule this out unless it's genuinely earned.
+ */
+export interface ExecuteDecision extends ExecutionDecisionCommon {
+    readonly action: "execute";
+    readonly executable: true;
+    readonly reason: "complete";
+    readonly value: JsonValue;
+    /**
+     * Narrowed to required here (unlike the inherited `name?: string`):
+     * the coordinator only ever transitions a call to `status: "complete"`
+     * when `name` is defined (see `DefaultToolCallStreamCoordinator.finishCall`
+     * - a call with no name is forced to `"invalid"` instead), so every
+     * `ExecuteDecision` genuinely has one. Encoding that here means
+     * `tools[decision.name](decision.value)` type-checks directly after
+     * narrowing on `action === "execute"`, with no non-null assertion needed.
+     */
+    readonly name: string;
+}
+/**
+ * Every other outcome. `value` does not exist on this type at all (not
+ * `undefined` - absent) - TypeScript itself refuses code that reads a
+ * "final executable value" off a call the gate did not clear for execution.
+ */
+export interface NonExecutableDecision extends ExecutionDecisionCommon {
+    readonly action: "retry" | "reject";
+    readonly executable: false;
+    readonly reason: Exclude<ExecutionReason, "complete">;
+}
+/**
+ * `ExecuteDecision | NonExecutableDecision` - a discriminated union on
+ * `action` (and redundantly on `executable`, for callers who prefer that
+ * check). Narrowing on either field gives you the right shape:
+ *
+ * ```ts
+ * if (decision.action === "execute") {
+ *   await tools[decision.name](decision.value); // JsonValue, not JsonValue|undefined
+ * }
+ * ```
+ */
+export type ExecutionDecision = ExecuteDecision | NonExecutableDecision;
+export interface ToolCallExecutionGateFinalResult {
+    /** One decision per tool call the coordinator ever created. */
+    readonly decisions: readonly ExecutionDecision[];
+    /**
+     * The full, unfiltered coordinator diagnostics list (same as
+     * `coordinator.snapshot().diagnostics`) - includes diagnostics with no
+     * associated call, e.g. `E_COORDINATOR_LIMIT_CALLS` fires for a call that
+     * hit the concurrent-call limit before a `ToolCallState` could even be
+     * created for it, so it can never appear in `decisions`.
+     */
+    readonly diagnostics: readonly CoordinatorDiagnostic[];
+}
+/**
+ * High-level fail-closed execution decision layer built on top of
+ * `ToolCallStreamCoordinator`. Answers one question per tool call: is it
+ * safe to execute right now? Callers never need to touch parser lexical
+ * state, coordinator event mechanics, or JSON Pointer paths - push provider
+ * events in, read `ExecutionDecision`s out.
+ */
+export interface ToolCallExecutionGate {
+    push(event: NormalizedToolStreamEvent): CoordinatorPushResult;
+    /**
+     * In-flight view. Every decision here is `"retry"` or `"reject"` -
+     * `"execute"` is only ever returned once the stream has genuinely
+     * finished (see `finish()`), since schema validity and prefix-safety are
+     * both only meaningful once a call has settled.
+     */
+    snapshot(): readonly ExecutionDecision[];
+    /** Drains the underlying coordinator's raw event queue, for advanced/UI consumers. */
+    drainEvents(): readonly ToolCallCoordinatorEvent[];
+    finish(meta?: {
+        reason?: StreamEndReason;
+        providerReason?: string;
+    }): ToolCallExecutionGateFinalResult;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/gate/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/gate/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAEtG;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE7D;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,WAAW,GACX,mBAAmB,GACnB,gBAAgB,GAChB,WAAW,GACX,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,SAAS,CAAC;AAEd;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAEhC;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAE1C;;;;;;;OAOG;IACH,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAEpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IAEvC,0FAA0F;IAC1F,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAEnC;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B,mGAAmG;IACnG,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,UAAU,uBAAuB;IAC/B,mFAAmF;IACnF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC;IAEjC,yFAAyF;IACzF,QAAQ,CAAC,iBAAiB,EAAE,SAAS,UAAU,EAAE,CAAC;IAElD,yEAAyE;IACzE,QAAQ,CAAC,sBAAsB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAElE;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAgB,SAAQ,uBAAuB;IAC9D,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAE1B;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAsB,SAAQ,uBAAuB;IACpE,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;CACvD;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG,eAAe,GAAG,qBAAqB,CAAC;AAExE,MAAM,WAAW,gCAAgC;IAC/C,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAEjD;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACxD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,KAAK,EAAE,yBAAyB,GAAG,qBAAqB,CAAC;IAE9D;;;;;OAKG;IACH,QAAQ,IAAI,SAAS,iBAAiB,EAAE,CAAC;IAEzC,sFAAsF;IACtF,WAAW,IAAI,SAAS,wBAAwB,EAAE,CAAC;IAEnD,MAAM,CAAC,IAAI,CAAC,EAAE;QACZ,MAAM,CAAC,EAAE,eAAe,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,gCAAgC,CAAC;CACtC"}

package/dist/gate/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/gate/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/gate/types.ts"],"names":[],"mappings":""}

package/dist/guard/ai-sdk.d.ts

@@ -0,0 +1,48 @@
+import { AiSdkExecutionGuard, ExecutionGuardOptions } from "./types.js";
+/**
+ * @public (Experimental)
+ * Drop-in fail-closed execution guard for the Vercel AI SDK's `fullStream`.
+ * Composes `AiSdkStreamAdapter` with `createToolCallExecutionGate()` - same
+ * decision logic, same fail-closed guarantees, no new parser or coordinator.
+ * Does not depend on the `ai` package at runtime and does not import its
+ * types; `push()` accepts `unknown` and reads only the fields it needs.
+ *
+ * ```ts
+ * const guard = createAiSdkExecutionGuard({
+ *   schemas: {
+ *     write_file: {
+ *       type: "object",
+ *       properties: { path: { type: "string" }, content: { type: "string" } },
+ *       required: ["path", "content"],
+ *     },
+ *   },
+ * });
+ *
+ * for await (const part of result.fullStream) {
+ *   guard.push(part);
+ * }
+ *
+ * const final = guard.finish();
+ * for (const decision of final.decisions) {
+ *   if (decision.action === "execute") {
+ *     await tools[decision.name](decision.value);
+ *   }
+ * }
+ * ```
+ *
+ * Equivalent to composing the low-level API yourself:
+ *
+ * ```ts
+ * const gate = createToolCallExecutionGate(undefined, undefined, schemas);
+ * const adapter = new AiSdkStreamAdapter();
+ * for await (const part of result.fullStream) {
+ *   for (const normalized of adapter.push(part)) gate.push(normalized);
+ * }
+ * const final = gate.finish();
+ * ```
+ *
+ * Both APIs remain public; use this one for the common case, the low-level
+ * one when you need direct access to the adapter or gate instance.
+ */
+export declare function createAiSdkExecutionGuard(options?: ExecutionGuardOptions): AiSdkExecutionGuard;
+//# sourceMappingURL=ai-sdk.d.ts.map

package/dist/guard/ai-sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-sdk.d.ts","sourceRoot":"","sources":["../../src/guard/ai-sdk.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,mBAAmB,CAE9F"}

package/dist/guard/ai-sdk.js

@@ -0,0 +1,51 @@
+import { AiSdkStreamAdapter } from "../providers/ai-sdk.js";
+import { createProviderExecutionGuard } from "./provider-guard.js";
+/**
+ * @public (Experimental)
+ * Drop-in fail-closed execution guard for the Vercel AI SDK's `fullStream`.
+ * Composes `AiSdkStreamAdapter` with `createToolCallExecutionGate()` - same
+ * decision logic, same fail-closed guarantees, no new parser or coordinator.
+ * Does not depend on the `ai` package at runtime and does not import its
+ * types; `push()` accepts `unknown` and reads only the fields it needs.
+ *
+ * ```ts
+ * const guard = createAiSdkExecutionGuard({
+ *   schemas: {
+ *     write_file: {
+ *       type: "object",
+ *       properties: { path: { type: "string" }, content: { type: "string" } },
+ *       required: ["path", "content"],
+ *     },
+ *   },
+ * });
+ *
+ * for await (const part of result.fullStream) {
+ *   guard.push(part);
+ * }
+ *
+ * const final = guard.finish();
+ * for (const decision of final.decisions) {
+ *   if (decision.action === "execute") {
+ *     await tools[decision.name](decision.value);
+ *   }
+ * }
+ * ```
+ *
+ * Equivalent to composing the low-level API yourself:
+ *
+ * ```ts
+ * const gate = createToolCallExecutionGate(undefined, undefined, schemas);
+ * const adapter = new AiSdkStreamAdapter();
+ * for await (const part of result.fullStream) {
+ *   for (const normalized of adapter.push(part)) gate.push(normalized);
+ * }
+ * const final = gate.finish();
+ * ```
+ *
+ * Both APIs remain public; use this one for the common case, the low-level
+ * one when you need direct access to the adapter or gate instance.
+ */
+export function createAiSdkExecutionGuard(options) {
+    return createProviderExecutionGuard(new AiSdkStreamAdapter(), options);
+}
+//# sourceMappingURL=ai-sdk.js.map

package/dist/guard/ai-sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-sdk.js","sourceRoot":"","sources":["../../src/guard/ai-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAGnE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAA+B;IACvE,OAAO,4BAA4B,CAAC,IAAI,kBAAkB,EAAE,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC"}

package/dist/guard/provider-guard.d.ts

@@ -0,0 +1,4 @@
+import { ProviderStreamAdapter } from "../providers/adapter.js";
+import { ExecutionGuard, ExecutionGuardOptions } from "./types.js";
+export declare function createProviderExecutionGuard<TRawEvent>(adapter: ProviderStreamAdapter<TRawEvent>, options?: ExecutionGuardOptions): ExecutionGuard<TRawEvent>;
+//# sourceMappingURL=provider-guard.d.ts.map

package/dist/guard/provider-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-guard.d.ts","sourceRoot":"","sources":["../../src/guard/provider-guard.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnE,wBAAgB,4BAA4B,CAAC,SAAS,EACpD,OAAO,EAAE,qBAAqB,CAAC,SAAS,CAAC,EACzC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,cAAc,CAAC,SAAS,CAAC,CA0B3B"}

package/dist/guard/provider-guard.js

@@ -0,0 +1,38 @@
+// ---------------------------------------------------------------------------
+// createProviderExecutionGuard — internal composition helper.
+//
+// Not exported from the package root in this release. Every high-level
+// per-provider guard (currently only createAiSdkExecutionGuard) is this
+// function applied to one ProviderStreamAdapter instance - no duplicated
+// state, no duplicated decision logic, no new parser or coordinator. Kept
+// internal (rather than public) until a second provider guard actually
+// needs it, per the "don't expose abstraction for its own sake" scoping
+// this release deliberately holds to - promoting it to a public export is a
+// non-breaking addition whenever that happens.
+// ---------------------------------------------------------------------------
+import { createToolCallExecutionGate } from "../gate/gate.js";
+export function createProviderExecutionGuard(adapter, options) {
+    const gate = createToolCallExecutionGate(options?.limits, options?.parserOptions, options?.schemas);
+    return {
+        push(rawEvent) {
+            for (const normalized of adapter.push(rawEvent)) {
+                gate.push(normalized);
+            }
+        },
+        snapshot() {
+            return gate.snapshot();
+        },
+        finish(meta) {
+            // If the provider stream already delivered its own terminal event
+            // through push() (the common case), the adapter is already
+            // `finished` and this is a no-op - meta is only consulted as a
+            // fail-closed backstop for a stream that ends without ever reporting
+            // why (see ProviderStreamAdapter.finish()'s own contract).
+            for (const normalized of adapter.finish(meta)) {
+                gate.push(normalized);
+            }
+            return gate.finish(meta);
+        },
+    };
+}
+//# sourceMappingURL=provider-guard.js.map

package/dist/guard/provider-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-guard.js","sourceRoot":"","sources":["../../src/guard/provider-guard.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8DAA8D;AAC9D,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,0EAA0E;AAC1E,uEAAuE;AACvE,wEAAwE;AACxE,4EAA4E;AAC5E,+CAA+C;AAC/C,8EAA8E;AAE9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAM9D,MAAM,UAAU,4BAA4B,CAC1C,OAAyC,EACzC,OAA+B;IAE/B,MAAM,IAAI,GAAG,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAEpG,OAAO;QACL,IAAI,CAAC,QAAmB;YACtB,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,QAAQ;YACN,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,CAAC,IAA4D;YACjE,kEAAkE;YAClE,2DAA2D;YAC3D,+DAA+D;YAC/D,qEAAqE;YACrE,2DAA2D;YAC3D,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/guard/types.d.ts

@@ -0,0 +1,48 @@
+import { StreamEndReason } from "../coordinator/protocol.js";
+import { CoordinatorLimits, JsonSchemaLike } from "../coordinator/types.js";
+import { ToolCallExecutionGateFinalResult, ExecutionDecision } from "../gate/types.js";
+import { ParserOptions } from "../types.js";
+/**
+ * High-level, provider-agnostic execution guard: composes a
+ * `ProviderStreamAdapter` with a `ToolCallExecutionGate` behind three
+ * methods. `push()`/`snapshot()`/`finish()` mirror the underlying gate's own
+ * shape exactly - this is a thinner call surface over the same object, not a
+ * parallel implementation with its own state or decision logic.
+ */
+export interface ExecutionGuard<TRawEvent = unknown> {
+    /** Feed one raw provider event (e.g. one `fullStream` part) through the adapter into the gate. */
+    push(rawEvent: TRawEvent): void;
+    /**
+     * In-flight view of every call's current decision. As with the underlying
+     * gate, every decision here is `"retry"` or `"reject"` - `"execute"` is
+     * only ever returned from `finish()`.
+     */
+    snapshot(): readonly ExecutionDecision[];
+    /**
+     * Signals stream completion and returns the final decision for every tool
+     * call the stream ever produced. Safe to call even if the underlying
+     * provider stream already delivered its own terminal event through
+     * `push()` - `meta` is only used as a fallback for a stream that ends
+     * without ever reporting why.
+     */
+    finish(meta?: {
+        reason?: StreamEndReason;
+        providerReason?: string;
+    }): ToolCallExecutionGateFinalResult;
+}
+/** Options accepted by every high-level provider execution guard factory. */
+export interface ExecutionGuardOptions {
+    /**
+     * Optional JSON Schema (draft-07) per tool name - same option
+     * `createToolCallExecutionGate()`/`createToolCallStreamCoordinator()`
+     * accept as their third constructor argument.
+     */
+    schemas?: Record<string, JsonSchemaLike>;
+    /** Coordinator-level limits (concurrent tool calls, tool name size, etc.). */
+    limits?: Partial<CoordinatorLimits>;
+    /** Per-call parser configuration (resource limits, repairs). */
+    parserOptions?: ParserOptions;
+}
+/** A guard specialized for the Vercel AI SDK's `fullStream` part shape. See `createAiSdkExecutionGuard`. */
+export type AiSdkExecutionGuard = ExecutionGuard<unknown>;
+//# sourceMappingURL=types.d.ts.map

package/dist/guard/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/guard/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,gCAAgC,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,WAAW,cAAc,CAAC,SAAS,GAAG,OAAO;IACjD,kGAAkG;IAClG,IAAI,CAAC,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;IAEhC;;;;OAIG;IACH,QAAQ,IAAI,SAAS,iBAAiB,EAAE,CAAC;IAEzC;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,eAAe,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,gCAAgC,CAAC;CACxG;AAED,6EAA6E;AAC7E,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAEzC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEpC,gEAAgE;IAChE,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,4GAA4G;AAC5G,MAAM,MAAM,mBAAmB,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC"}

package/dist/guard/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/guard/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/guard/types.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -11,8 +11,25 @@ export { DiagnosticCode } from "./diagnostics/codes.js";
  * Creates a stream coordinator for mapping overlapping multi-tool streams.
  */
 export { createToolCallStreamCoordinator } from "./coordinator/coordinator.js";
-export type { ToolCallStreamCoordinator, ToolCallState, JsonSchemaLike, } from "./coordinator/types.js";
-export type { NormalizedToolStreamEvent } from "./coordinator/protocol.js";
+export type { ToolCallStreamCoordinator, ToolCallState, JsonSchemaLike, CoordinatorLimits, CoordinatorDiagnostic, } from "./coordinator/types.js";
+export type { NormalizedToolStreamEvent, ProviderName } from "./coordinator/protocol.js";
+export { CONTENT_FILTERED_DIAGNOSTIC_CODE } from "./coordinator/diagnostic-codes.js";
+/**
+ * @public (Stable)
+ * Fail-closed execution-decision layer built on top of the coordinator.
+ * Answers one question per tool call: is it safe to execute right now?
+ * See docs/EXECUTION_GATE.md.
+ */
+export { createToolCallExecutionGate } from "./gate/gate.js";
+export type { ToolCallExecutionGate, ToolCallExecutionGateFinalResult, ExecutionDecision, ExecuteDecision, NonExecutableDecision, ExecutionAction, ExecutionReason, DecisionEvidence, } from "./gate/types.js";
+/**
+ * @public (Experimental)
+ * Drop-in fail-closed execution guard for the Vercel AI SDK's `fullStream`.
+ * Composes `AiSdkStreamAdapter` and `createToolCallExecutionGate()` - see
+ * `docs/EXECUTION_GATE.md#high-level-guards`.
+ */
+export { createAiSdkExecutionGuard } from "./guard/ai-sdk.js";
+export type { ExecutionGuard, AiSdkExecutionGuard, ExecutionGuardOptions } from "./guard/types.js";
 export type { ProviderStreamAdapter } from "./providers/adapter.js";
 /**
  * @public (Experimental)
@@ -24,4 +41,5 @@ export { OpenAICompatibleStreamAdapter } from "./providers/openai-compatible.js"
 export { AnthropicStreamAdapter } from "./providers/anthropic.js";
 export { GeminiStreamAdapter } from "./providers/gemini.js";
 export { OpenRouterStreamAdapter } from "./providers/openrouter.js";
+export { AiSdkStreamAdapter } from "./providers/ai-sdk.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,YAAY,EAEV,qBAAqB,EACrB,aAAa,EAGb,UAAU,EACV,cAAc,EACd,WAAW,EAGX,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EAGnB,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD;;;GAGG;AACH,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,YAAY,EACV,yBAAyB,EACzB,aAAa,EACb,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAG3E,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,YAAY,EAEV,qBAAqB,EACrB,aAAa,EAGb,UAAU,EACV,cAAc,EACd,WAAW,EAGX,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EAGnB,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD;;;GAGG;AACH,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,YAAY,EACV,yBAAyB,EACzB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AAGrF;;;;;GAKG;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,YAAY,EACV,qBAAqB,EACrB,gCAAgC,EAChC,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAGzB;;;;;GAKG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAGnG,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -14,6 +14,23 @@ export { DiagnosticCode } from "./diagnostics/codes.js";
  * Creates a stream coordinator for mapping overlapping multi-tool streams.
  */
 export { createToolCallStreamCoordinator } from "./coordinator/coordinator.js";
+export { CONTENT_FILTERED_DIAGNOSTIC_CODE } from "./coordinator/diagnostic-codes.js";
+// Execution Safety Gate API
+/**
+ * @public (Stable)
+ * Fail-closed execution-decision layer built on top of the coordinator.
+ * Answers one question per tool call: is it safe to execute right now?
+ * See docs/EXECUTION_GATE.md.
+ */
+export { createToolCallExecutionGate } from "./gate/gate.js";
+// High-level execution guards
+/**
+ * @public (Experimental)
+ * Drop-in fail-closed execution guard for the Vercel AI SDK's `fullStream`.
+ * Composes `AiSdkStreamAdapter` and `createToolCallExecutionGate()` - see
+ * `docs/EXECUTION_GATE.md#high-level-guards`.
+ */
+export { createAiSdkExecutionGuard } from "./guard/ai-sdk.js";
 /**
  * @public (Experimental)
  * Provider adapters for various LLM network shapes.
@@ -24,4 +41,5 @@ export { OpenAICompatibleStreamAdapter } from "./providers/openai-compatible.js"
 export { AnthropicStreamAdapter } from "./providers/anthropic.js";
 export { GeminiStreamAdapter } from "./providers/gemini.js";
 export { OpenRouterStreamAdapter } from "./providers/openrouter.js";
+export { AiSdkStreamAdapter } from "./providers/ai-sdk.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiC3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,kBAAkB;AAClB;;;GAGG;AACH,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAW/E;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiC3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,kBAAkB;AAClB;;;GAGG;AACH,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAS/E,OAAO,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AAErF,4BAA4B;AAC5B;;;;;GAKG;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAY7D,8BAA8B;AAC9B;;;;;GAKG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAM9D;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/lexer/scanner.d.ts

@@ -61,7 +61,6 @@ export declare class Scanner {
         type: "string" | "number" | "literal" | "unicode_escape" | "surrogate" | "none";
         buffer: string;
         byteStart: number;
-        isKey: boolean;
     };
     /**
      * Check numberBuffer against the parts of RFC 8259's number grammar that
@@ -95,7 +94,6 @@ export declare class Scanner {
     private processSurrogatePending;
     private processNumber;
     private processLiteral;
-    private processTrailingWhitespace;
     private beginString;
     private beginNumber;
     private beginLiteral;

package/dist/lexer/scanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/lexer/scanner.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAsB3E;;;;GAIG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,cAAc,CAAS;gBAEnB,OAAO,CAAC,EAAE,aAAa;IAQnC,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,OAAO,CAAsB;IAGrC,OAAO,CAAC,YAAY,CAAM;IAC1B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,eAAe,CAAK;IAG5B,OAAO,CAAC,gBAAgB,CAAM;IAC9B,OAAO,CAAC,aAAa,CAAK;IAC1B,wFAAwF;IACxF,OAAO,CAAC,cAAc,CAAK;IAG3B,OAAO,CAAC,YAAY,CAAM;IAC1B,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,cAAc,CAAS;IAG/B,OAAO,CAAC,aAAa,CAAM;IAC3B,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,gBAAgB,CAAK;IAG7B,yEAAyE;IACzE,OAAO,CAAC,iBAAiB,CAAK;IAG9B,0DAA0D;IAC1D,OAAO,CAAC,eAAe,CAAS;IAEhC,IAAI,YAAY,IAAI,YAAY,CAE/B;IAED;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI;IA2CtE;;;OAGG;IACH,UAAU,IAAI,KAAK,EAAE;IAMrB;;;OAGG;IACH,eAAe,IAAI,UAAU,EAAE;IAM/B,WAAW,IAAI,YAAY,EAAE;IAM7B;;OAEG;IACH,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAIxC;;OAEG;IACH,cAAc,IAAI;QAChB,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,gBAAgB,GAAG,WAAW,GAAG,MAAM,CAAC;QAChF,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;KAChB;IAgDD;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;OAUG;IACH,cAAc,IAAI,WAAW,GAAG,SAAS,GAAG,WAAW;IAuBvD;;;OAGG;IACH,eAAe,IAAI,OAAO;IA8B1B,OAAO,CAAC,iBAAiB;IAuCzB,OAAO,CAAC,aAAa;IAiErB,OAAO,CAAC,aAAa;IA6CrB,OAAO,CAAC,oBAAoB;IA8D5B,OAAO,CAAC,uBAAuB;IAqC/B,OAAO,CAAC,aAAa;IAiHrB,OAAO,CAAC,cAAc;IAoDtB,OAAO,CAAC,yBAAyB;IAkBjC,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,YAAY;IA2BpB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,cAAc;CAWvB"}
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/lexer/scanner.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAsB3E;;;;GAIG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,cAAc,CAAS;gBAEnB,OAAO,CAAC,EAAE,aAAa;IAQnC,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,OAAO,CAAsB;IAGrC,OAAO,CAAC,YAAY,CAAM;IAC1B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,eAAe,CAAK;IAG5B,OAAO,CAAC,gBAAgB,CAAM;IAC9B,OAAO,CAAC,aAAa,CAAK;IAC1B,wFAAwF;IACxF,OAAO,CAAC,cAAc,CAAK;IAG3B,OAAO,CAAC,YAAY,CAAM;IAC1B,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,cAAc,CAAS;IAG/B,OAAO,CAAC,aAAa,CAAM;IAC3B,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,gBAAgB,CAAK;IAG7B,yEAAyE;IACzE,OAAO,CAAC,iBAAiB,CAAK;IAG9B,0DAA0D;IAC1D,OAAO,CAAC,eAAe,CAAS;IAEhC,IAAI,YAAY,IAAI,YAAY,CAE/B;IAED;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI;IAqCtE;;;OAGG;IACH,UAAU,IAAI,KAAK,EAAE;IAMrB;;;OAGG;IACH,eAAe,IAAI,UAAU,EAAE;IAM/B,WAAW,IAAI,YAAY,EAAE;IAM7B;;OAEG;IACH,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAIxC;;OAEG;IACH,cAAc,IAAI;QAChB,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,gBAAgB,GAAG,WAAW,GAAG,MAAM,CAAC;QAChF,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KACnB;IA2CD;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;OAUG;IACH,cAAc,IAAI,WAAW,GAAG,SAAS,GAAG,WAAW;IAuBvD;;;OAGG;IACH,eAAe,IAAI,OAAO;IA8B1B,OAAO,CAAC,iBAAiB;IAuCzB,OAAO,CAAC,aAAa;IAiErB,OAAO,CAAC,aAAa;IA6CrB,OAAO,CAAC,oBAAoB;IA8D5B,OAAO,CAAC,uBAAuB;IAqC/B,OAAO,CAAC,aAAa;IAiHrB,OAAO,CAAC,cAAc;IAwDtB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,WAAW;IAOnB,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,YAAY;IA2BpB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,cAAc;CAWvB"}

package/dist/lexer/scanner.js

@@ -103,12 +103,6 @@ export class Scanner {
             case ScannerState.LiteralNull:
                 this.processLiteral(ch, byteOffset, charByteLength);
                 break;
-            case ScannerState.TrailingWhitespace:
-                this.processTrailingWhitespace(ch, byteOffset);
-                break;
-            case ScannerState.TrailingData:
-                // Consume all trailing data silently — diagnostic was already emitted
-                break;
             case ScannerState.Invalid:
             case ScannerState.Finished:
                 // No-op — terminal states
@@ -155,21 +149,18 @@ export class Scanner {
                     type: this.stringIsKey ? "object_key" : "string",
                     buffer: this.stringBuffer,
                     byteStart: this.stringByteStart,
-                    isKey: this.stringIsKey,
                 };
             case ScannerState.UnicodeEscape:
                 return {
                     type: "unicode_escape",
                     buffer: this.unicodeHexBuffer,
                     byteStart: this.stringByteStart,
-                    isKey: this.stringIsKey,
                 };
             case ScannerState.UnicodeSurrogatePending:
                 return {
                     type: "surrogate",
                     buffer: this.stringBuffer,
                     byteStart: this.stringByteStart,
-                    isKey: this.stringIsKey,
                 };
             case ScannerState.NumberInteger:
             case ScannerState.NumberFraction:
@@ -179,7 +170,6 @@ export class Scanner {
                     type: "number",
                     buffer: this.numberBuffer,
                     byteStart: this.numberByteStart,
-                    isKey: false,
                 };
             case ScannerState.LiteralTrue:
             case ScannerState.LiteralFalse:
@@ -188,10 +178,9 @@ export class Scanner {
                     type: "literal",
                     buffer: this.literalTarget.slice(0, this.literalIndex),
                     byteStart: this.literalByteStart,
-                    isKey: false,
                 };
             default:
-                return { type: "none", buffer: "", byteStart: 0, isKey: false };
+                return { type: "none", buffer: "", byteStart: 0 };
         }
     }
     /**
@@ -245,7 +234,7 @@ export class Scanner {
                     return "invalid";
                 }
                 this.emitToken(TokenType.Number, this.numberBuffer, this.numberByteStart, this.currentByteOffset + 1);
-                this.state = ScannerState.TrailingWhitespace;
+                this.state = ScannerState.Finished;
                 return "finalized";
             }
         }
@@ -266,7 +255,7 @@ export class Scanner {
                         ? TokenType.False
                         : TokenType.Null;
                 this.emitToken(type, this.literalTarget, this.literalByteStart, this.currentByteOffset + 1);
-                this.state = ScannerState.TrailingWhitespace;
+                this.state = ScannerState.Finished;
                 return true;
             }
         }
@@ -601,13 +590,6 @@ export class Scanner {
             this.state = ScannerState.Invalid;
         }
     }
-    processTrailingWhitespace(ch, byteOffset) {
-        if (isWhitespace(ch))
-            return;
-        // Non-whitespace after root value
-        this.emitDiagnostic(DiagnosticCode.E_TRAILING_DATA, "error", byteOffset, `Unexpected data after root JSON value: ${JSON.stringify(ch)}`, false);
-        this.state = ScannerState.TrailingData;
-    }
     // -----------------------------------------------------------------------
     // Helpers
     // -----------------------------------------------------------------------