prefix-safe-json 0.1.0 → 0.2.0

package/README.md

@@ -4,8 +4,8 @@
 
 **Don't execute incomplete AI tool calls.**
 
-`prefix-safe-json` is a fail-closed integrity layer for streamed LLM tool
-calls. It distinguishes complete, unfabricated arguments from truncated
+`prefix-safe-json` is a fail-closed execution-integrity layer for streamed
+LLM tool calls. It distinguishes complete, unfabricated arguments from truncated
 ones — including ones a syntax-level JSON repairer can make *look* complete
 — before they reach a tool with real side effects (writing a file, running a
 command, sending a request).
@@ -94,12 +94,56 @@ provider, or framework hands it the data. See
 `test/guard/ai-sdk-compatibility.test.ts` for the cross-version test
 evidence.
 
+**Execution ownership: what must never also happen**
+
+The guard's decisions only mean something if it's the sole thing deciding
+whether your tool function runs. The pattern above works because it never
+gives the AI SDK's own tool-calling loop a chance to run your tool itself:
+
+- **Safe, supported pattern** — define your tools *without* an AI SDK-native
+  `execute` callback at all. Not even a no-op one: the guard treats any
+  `tool-result`/`tool-error` it observes as proof the SDK's tool loop
+  already invoked that call, and a no-op callback still produces one —
+  omitting `execute` entirely is what keeps the SDK from running the tool
+  itself in the first place. Consume `fullStream` yourself, and dispatch
+  manually — only for `action === "execute"` — after `guard.finish()`,
+  exactly as shown above.
+- **Unprotected / misuse pattern** — attach the real, irreversible operation
+  (or any `execute` implementation at all, no-op included) as the tool's own
+  AI SDK-native callback, *and* separately run the guard on the same
+  stream. The SDK can invoke `execute` as soon as it resolves that call's
+  input, independent of and often before this guard ever reaches a
+  decision. If that happens, the side effect has already run —
+  `prefix-safe-json` cannot retroactively undo it.
+
+The guard does defend against the second pattern in one specific way: a
+`tool-result` or `tool-error` part on `fullStream` is direct evidence the
+SDK's own loop already invoked *some* call. When it names a specific call
+(a real `toolCallId`), only that call is disqualified; when it doesn't, the
+guard cannot tell which in-flight call was affected and fails closed for
+**every** call in that stream rather than guess. Either way the guard never
+again reports `action: "execute"` for the affected call(s)
+(`reason: "sdk_execution_observed"`, which takes priority over every other
+rejection reason), so a caller who also runs the documented manual-dispatch
+loop will not invoke the tool function a *second* time. It does not undo
+whatever the SDK's own callback already did. See
+[`docs/EXECUTION_GATE.md`](docs/EXECUTION_GATE.md#execution-ownership-tool-resulttool-error-as-evidence)
+for the full behavior and test matrix.
+
 **Supported providers**: OpenAI (legacy `function_call` and Responses API),
 Anthropic, Gemini, OpenRouter, generic OpenAI-compatible endpoints, and the
 Vercel AI SDK. High-level guards currently ship for the AI SDK; every
 provider has a public low-level adapter (see below) that composes with
 `createToolCallExecutionGate()` the same way.
 
+`AiSdkStreamAdapter`/`createAiSdkExecutionGuard()` target the public
+`streamText()`/`generateText()` `fullStream` surface, whose `finishReason`
+is a plain unified string (`"stop"`, `"length"`, ...). They are not
+currently an adapter for the lower-level `@ai-sdk/provider` `doStream()`
+boundary (`LanguageModelV3`/`V4`), where finish reason is
+`{ unified, raw }`-object-shaped — building your own provider against that
+interface directly needs different handling of that field.
+
 Full semantics, the decision table, provider finish-reason mapping, and the
 high-level guard API: [`docs/EXECUTION_GATE.md`](docs/EXECUTION_GATE.md).
 
@@ -120,6 +164,8 @@ This library parses each chunk incrementally and provides:
 
 > The parser never fabricates missing data. It clearly distinguishes what is definite, what is pending, what was deterministically repaired, and what is lost.
 
+> **Valid JSON is not safe generation completion. Safe generation completion is not permission to execute a side effect.** Structural validity, confirmed completeness, and execution authority are three separate questions — the gate layer (below) answers all three before ever returning `execute`, not just the first. See [`docs/THREAT_MODEL.md`](docs/THREAT_MODEL.md) for the full guarantee/non-guarantee list.
+
 ## Why not a general "partial JSON" parser?
 
 Most streaming JSON helpers (including ones already used in the wild for
@@ -210,7 +256,9 @@ It does **not**:
   with complete, schema-valid arguments is still reported `execute`)
 
 See [`docs/EXECUTION_GATE.md`](docs/EXECUTION_GATE.md#limitations---what-this-does-not-protect-against)
-for the full list, including known internal limitations.
+for the full list, including known internal limitations, and
+[`docs/THREAT_MODEL.md`](docs/THREAT_MODEL.md) for the complete security
+objective, trust boundaries, and guarantee/non-guarantee list.
 
 ## Current Status
 
@@ -229,6 +277,7 @@ for the full list, including known internal limitations.
 - Optional per-tool JSON Schema validation on the coordinator (see below) — a value can be structurally complete and still not match what a tool declared it needs
 - `createToolCallExecutionGate()` — a fail-closed `execute` / `retry` / `reject` decision per tool call, built on top of the coordinator (see [`docs/EXECUTION_GATE.md`](docs/EXECUTION_GATE.md))
 - `createAiSdkExecutionGuard()` — a drop-in high-level guard for the Vercel AI SDK's `fullStream`, composing a provider adapter with the execution gate; every `ExecutionDecision` also carries an `evidence` object explaining why (see [`docs/EXECUTION_GATE.md`](docs/EXECUTION_GATE.md#high-level-guards))
+- SDK execution-ownership detection — direct evidence that the AI SDK's own tool loop already invoked a call (attributed or, when it can't be, stream-wide) permanently blocks this library from also authorizing it, with the highest rejection-reason priority of any disqualifier (see [`docs/EXECUTION_GATE.md`](docs/EXECUTION_GATE.md#execution-ownership-tool-resulttool-error-as-evidence))
 
 ### Not Yet Implemented
 
@@ -271,6 +320,11 @@ A schema mismatch also surfaces as a coordinator diagnostic (`E_SCHEMA_VALIDATIO
 npm install prefix-safe-json
 ```
 
+ESM only — `import`, not `require`. There is currently no CommonJS build.
+Node `>=18.0.0`. See [`docs/COMPATIBILITY.md`](docs/COMPATIBILITY.md) for
+the full ESM/Node/SemVer/Stable-vs-Experimental policy and the per-provider
+compatibility matrix.
+
 ## Low-level API: Quick Start
 
 The AI SDK guard (above) covers the common case. For other providers, or

package/dist/coordinator/coordinator.d.ts

@@ -0,0 +1,53 @@
+import { ParserOptions } from "../types.js";
+import { NormalizedToolStreamEvent, StreamEndReason } from "./protocol.js";
+import { ToolCallStreamCoordinator, ToolCallCoordinatorSnapshot, ToolCallCoordinatorEvent, ToolCallCoordinatorFinalResult, CoordinatorPushResult, CoordinatorLimits, JsonSchemaLike } from "./types.js";
+export declare class DefaultToolCallStreamCoordinator implements ToolCallStreamCoordinator {
+    private readonly limits;
+    private readonly parserOptions;
+    private readonly toolValidators;
+    private calls;
+    private sourceKeyToInternalId;
+    private callCounter;
+    private eventQueue;
+    private diagnostics;
+    private eventsProcessed;
+    private globalSequence;
+    private isFinished;
+    /**
+     * @param limits Coordinator-level limits (concurrent tool calls, tool name
+     *   size, etc.) — distinct from `parserOptions`, which configures each
+     *   underlying per-call IncrementalJsonParser (limits, repairs). Previously
+     *   there was no way to pass the latter through at all; every parser the
+     *   coordinator created was hardcoded to library defaults.
+     * @param toolSchemas Optional JSON Schema (draft-07) per tool name. When a
+     *   call for a registered tool reaches outcome "complete", its
+     *   `stableValue` is validated against the schema. Structural
+     *   prefix-safety (no truncated/fabricated values) and schema validity
+     *   are independent concerns — a value can be genuinely complete and
+     *   still not match what the tool declared it needs (wrong type, missing
+     *   required field the model never provided at all). Both must hold for
+     *   `executable` to be true. Schemas are compiled eagerly here so a
+     *   malformed schema fails fast at construction, not mid-stream.
+     */
+    constructor(limits?: Partial<CoordinatorLimits>, parserOptions?: ParserOptions, toolSchemas?: Record<string, JsonSchemaLike>);
+    push(event: NormalizedToolStreamEvent): CoordinatorPushResult;
+    private handleStart;
+    private handleIdentity;
+    private handleNameDelta;
+    private handleArgumentsDelta;
+    private handleCallEnd;
+    private finishCall;
+    private hasCallConflict;
+    private handleProviderDiagnostic;
+    private handleStreamEnd;
+    private getCall;
+    private addDiagnostic;
+    snapshot(): ToolCallCoordinatorSnapshot;
+    drainEvents(): readonly ToolCallCoordinatorEvent[];
+    finish(meta?: {
+        reason?: StreamEndReason;
+        providerReason?: string;
+    }): ToolCallCoordinatorFinalResult;
+}
+export declare function createToolCallStreamCoordinator(limits?: Partial<CoordinatorLimits>, parserOptions?: ParserOptions, toolSchemas?: Record<string, JsonSchemaLike>): ToolCallStreamCoordinator;
+//# sourceMappingURL=coordinator.d.ts.map

package/dist/coordinator/coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.d.ts","sourceRoot":"","sources":["../../src/coordinator/coordinator.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,aAAa,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,yBAAyB,EAAgB,eAAe,EAAE,MAAM,eAAe,CAAC;AACzF,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,8BAA8B,EAC9B,qBAAqB,EACrB,iBAAiB,EAIjB,cAAc,EACf,MAAM,YAAY,CAAC;AAwCpB,qBAAa,gCAAiC,YAAW,yBAAyB;IAChF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4B;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgC;IAC/D,OAAO,CAAC,KAAK,CAAgD;IAC7D,OAAO,CAAC,qBAAqB,CAAkC;IAC/D,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,WAAW,CAA+B;IAClD,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,UAAU,CAAS;IAE3B;;;;;;;;;;;;;;;OAeG;gBAED,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,EACnC,aAAa,CAAC,EAAE,aAAa,EAC7B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC;IAa9C,IAAI,CAAC,KAAK,EAAE,yBAAyB,GAAG,qBAAqB;IAgD7D,OAAO,CAAC,WAAW;IAqDnB,OAAO,CAAC,cAAc;IAgDtB,OAAO,CAAC,eAAe;IAqCvB,OAAO,CAAC,oBAAoB;IA8B5B,OAAO,CAAC,aAAa;IA6BrB,OAAO,CAAC,UAAU;IAoElB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,wBAAwB;IA6BhC,OAAO,CAAC,eAAe;IAyBvB,OAAO,CAAC,OAAO;IAcf,OAAO,CAAC,aAAa;IASrB,QAAQ,IAAI,2BAA2B;IAmBvC,WAAW,IAAI,SAAS,wBAAwB,EAAE;IAMlD,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,eAAe,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,8BAA8B;CAcrG;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,EACnC,aAAa,CAAC,EAAE,aAAa,EAC7B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GAC3C,yBAAyB,CAE3B"}

package/dist/coordinator/coordinator.js

@@ -0,0 +1,477 @@
+import { Ajv } from "ajv";
+import { createParser } from "../parser.js";
+import { DEFAULT_COORDINATOR_LIMITS } from "./types.js";
+import { SDK_EXECUTION_OBSERVED_DIAGNOSTIC_CODE, SDK_EXECUTION_ERROR_DIAGNOSTIC_CODE, } from "./diagnostic-codes.js";
+// A `provider_diagnostic` carrying either code is proof that a provider SDK's
+// own tool loop already invoked this call's `execute` callback (see the two
+// constants' own docs in diagnostic-codes.ts) - success and failure get
+// identical treatment here, since neither proves the absence of a partial
+// irreversible side effect, and this library only needs to know that
+// execution authority already left its hands.
+const SDK_EXECUTION_OBSERVED_CODES = new Set([
+    SDK_EXECUTION_OBSERVED_DIAGNOSTIC_CODE,
+    SDK_EXECUTION_ERROR_DIAGNOSTIC_CODE,
+]);
+class CoordinatorCallState {
+    internalId;
+    provider;
+    toolCallId;
+    toolIndex;
+    name;
+    nameComplete = false;
+    argumentStreamClosed = false;
+    parser;
+    status = "collecting";
+    schemaValid;
+    constructor(internalId, provider, parser) {
+        this.internalId = internalId;
+        this.provider = provider;
+        this.parser = parser;
+    }
+}
+export class DefaultToolCallStreamCoordinator {
+    limits;
+    parserOptions;
+    toolValidators;
+    calls = new Map();
+    sourceKeyToInternalId = new Map();
+    callCounter = 0;
+    eventQueue = [];
+    diagnostics = [];
+    eventsProcessed = 0;
+    globalSequence = 0;
+    isFinished = false;
+    /**
+     * @param limits Coordinator-level limits (concurrent tool calls, tool name
+     *   size, etc.) — distinct from `parserOptions`, which configures each
+     *   underlying per-call IncrementalJsonParser (limits, repairs). Previously
+     *   there was no way to pass the latter through at all; every parser the
+     *   coordinator created was hardcoded to library defaults.
+     * @param toolSchemas Optional JSON Schema (draft-07) per tool name. When a
+     *   call for a registered tool reaches outcome "complete", its
+     *   `stableValue` is validated against the schema. Structural
+     *   prefix-safety (no truncated/fabricated values) and schema validity
+     *   are independent concerns — a value can be genuinely complete and
+     *   still not match what the tool declared it needs (wrong type, missing
+     *   required field the model never provided at all). Both must hold for
+     *   `executable` to be true. Schemas are compiled eagerly here so a
+     *   malformed schema fails fast at construction, not mid-stream.
+     */
+    constructor(limits, parserOptions, toolSchemas) {
+        this.limits = { ...DEFAULT_COORDINATOR_LIMITS, ...limits };
+        this.parserOptions = parserOptions;
+        this.toolValidators = new Map();
+        if (toolSchemas) {
+            const ajv = new Ajv({ allErrors: true, strict: false });
+            for (const [toolName, schema] of Object.entries(toolSchemas)) {
+                this.toolValidators.set(toolName, ajv.compile(schema));
+            }
+        }
+    }
+    push(event) {
+        if (this.isFinished) {
+            this.addDiagnostic({
+                code: "E_EVENT_AFTER_STREAM_END",
+                severity: "error",
+                message: "Event pushed after stream end",
+            });
+            return { accepted: false };
+        }
+        if (this.eventsProcessed >= this.limits.maxNormalizedEvents) {
+            this.addDiagnostic({
+                code: "E_COORDINATOR_LIMIT_EVENTS",
+                severity: "fatal",
+                message: "Maximum normalized events exceeded",
+            });
+            return { accepted: false };
+        }
+        this.eventsProcessed++;
+        switch (event.type) {
+            case "tool_call_start":
+                this.handleStart(event);
+                break;
+            case "tool_call_identity":
+                this.handleIdentity(event);
+                break;
+            case "tool_call_name_delta":
+                this.handleNameDelta(event);
+                break;
+            case "tool_call_arguments_delta":
+                this.handleArgumentsDelta(event);
+                break;
+            case "tool_call_end":
+                this.handleCallEnd(event);
+                break;
+            case "provider_diagnostic":
+                this.handleProviderDiagnostic(event);
+                break;
+            case "provider_stream_end":
+                this.handleStreamEnd(event);
+                break;
+        }
+        return { accepted: true };
+    }
+    handleStart(event) {
+        const sourceKey = event.callRef.sourceKey;
+        const existingId = this.sourceKeyToInternalId.get(sourceKey);
+        if (existingId !== undefined) {
+            this.addDiagnostic({
+                code: "E_DUPLICATE_TOOL_CALL_START",
+                severity: "error",
+                internalId: existingId,
+                message: `Duplicate start for tool call sourceKey: ${sourceKey}`,
+            });
+            return;
+        }
+        if (this.calls.size >= this.limits.maxToolCalls) {
+            this.addDiagnostic({
+                code: "E_COORDINATOR_LIMIT_CALLS",
+                severity: "error",
+                message: "Maximum tool calls exceeded",
+            });
+            return;
+        }
+        const internalId = `call-${this.callCounter++}`;
+        this.sourceKeyToInternalId.set(sourceKey, internalId);
+        const parser = createParser(this.parserOptions);
+        const call = new CoordinatorCallState(internalId, event.provider, parser);
+        if (event.toolCallId !== undefined)
+            call.toolCallId = event.toolCallId;
+        if (event.toolIndex !== undefined)
+            call.toolIndex = event.toolIndex;
+        if (event.name !== undefined)
+            call.name = event.name;
+        this.calls.set(internalId, call);
+        this.eventQueue.push({
+            type: "tool_call_discovered",
+            sequence: this.globalSequence++,
+            internalId,
+            provider: event.provider,
+        });
+        if (event.toolCallId !== undefined || event.toolIndex !== undefined) {
+            this.eventQueue.push({
+                type: "tool_call_identity_updated",
+                sequence: this.globalSequence++,
+                internalId,
+                toolCallId: event.toolCallId,
+                toolIndex: event.toolIndex,
+            });
+        }
+    }
+    handleIdentity(event) {
+        const internalId = this.sourceKeyToInternalId.get(event.callRef.sourceKey);
+        if (!internalId)
+            return;
+        const call = this.getCall(internalId);
+        if (!call)
+            return;
+        let changed = false;
+        if (event.toolCallId !== undefined) {
+            if (call.toolCallId !== undefined && call.toolCallId !== event.toolCallId) {
+                this.addDiagnostic({
+                    code: "E_PROVIDER_IDENTITY_CONFLICT",
+                    severity: "error",
+                    internalId: call.internalId,
+                    message: `Conflicting ID: had ${call.toolCallId}, got ${event.toolCallId}`,
+                });
+                call.status = "invalid";
+            }
+            else if (call.toolCallId === undefined) {
+                call.toolCallId = event.toolCallId;
+                changed = true;
+            }
+        }
+        if (event.toolIndex !== undefined) {
+            if (call.toolIndex !== undefined && call.toolIndex !== event.toolIndex) {
+                this.addDiagnostic({
+                    code: "E_PROVIDER_INDEX_CONFLICT",
+                    severity: "error",
+                    internalId: call.internalId,
+                    message: `Conflicting index: had ${call.toolIndex}, got ${event.toolIndex}`,
+                });
+                call.status = "invalid";
+            }
+            else if (call.toolIndex === undefined) {
+                call.toolIndex = event.toolIndex;
+                changed = true;
+            }
+        }
+        if (changed) {
+            this.eventQueue.push({
+                type: "tool_call_identity_updated",
+                sequence: this.globalSequence++,
+                internalId: call.internalId,
+                toolCallId: call.toolCallId,
+                toolIndex: call.toolIndex,
+            });
+        }
+    }
+    handleNameDelta(event) {
+        const internalId = this.sourceKeyToInternalId.get(event.callRef.sourceKey);
+        if (!internalId)
+            return;
+        const call = this.getCall(internalId);
+        if (!call)
+            return;
+        if (call.status !== "collecting") {
+            this.addDiagnostic({
+                code: "E_NAME_DELTA_AFTER_END",
+                severity: "error",
+                internalId: call.internalId,
+                message: "Name delta after call ended",
+            });
+            return;
+        }
+        call.name = (call.name ?? "") + event.delta;
+        if (call.name.length > this.limits.maxToolNameBytes) {
+            this.addDiagnostic({
+                code: "E_TOOL_NAME_LIMIT",
+                severity: "error",
+                internalId: call.internalId,
+                message: "Tool name exceeded maximum length",
+            });
+            call.status = "invalid";
+        }
+        this.eventQueue.push({
+            type: "tool_name_updated",
+            sequence: event.sequence,
+            internalId: call.internalId,
+            name: call.name,
+            complete: false,
+        });
+    }
+    handleArgumentsDelta(event) {
+        const internalId = this.sourceKeyToInternalId.get(event.callRef.sourceKey);
+        if (!internalId)
+            return;
+        const call = this.getCall(internalId);
+        if (!call)
+            return;
+        if (call.status !== "collecting") {
+            this.addDiagnostic({
+                code: "E_ARGUMENT_DELTA_AFTER_END",
+                severity: "error",
+                internalId: call.internalId,
+                message: "Argument delta after call ended",
+            });
+            return;
+        }
+        call.parser.push(event.delta);
+        // Drain parser events and map them to coordinator events
+        const parserEvents = call.parser.drainEvents();
+        for (const pe of parserEvents) {
+            this.eventQueue.push({
+                type: "tool_argument_event",
+                sequence: this.globalSequence++,
+                internalId: call.internalId,
+                event: pe,
+            });
+        }
+    }
+    handleCallEnd(event) {
+        const internalId = this.sourceKeyToInternalId.get(event.callRef.sourceKey);
+        if (!internalId)
+            return;
+        const call = this.getCall(internalId);
+        if (!call)
+            return;
+        if (call.status !== "collecting")
+            return;
+        call.nameComplete = true;
+        call.argumentStreamClosed = true;
+        if (call.name !== undefined) {
+            this.eventQueue.push({
+                type: "tool_name_updated",
+                sequence: this.globalSequence++,
+                internalId: call.internalId,
+                name: call.name,
+                complete: true,
+            });
+        }
+        else {
+            this.addDiagnostic({
+                code: "E_TOOL_NAME_MISSING",
+                severity: "error",
+                internalId: call.internalId,
+                message: "Tool name missing at end",
+            });
+        }
+    }
+    finishCall(call, reason) {
+        if (call.status !== "collecting")
+            return;
+        // For individual call end, we pass reason to the internal parser
+        const res = call.parser.finish({ reason });
+        // Determine the mapped coordinator outcome
+        let outcome = "invalid";
+        if (res.outcome === "valid") {
+            outcome = "complete";
+            if (call.name === undefined || this.hasCallConflict(call)) {
+                outcome = "invalid";
+            }
+        }
+        else if (res.outcome === "truncated") {
+            outcome = "truncated";
+        }
+        else if (res.outcome === "salvaged") {
+            outcome = "salvaged";
+        }
+        if (reason === "cancelled")
+            outcome = "cancelled";
+        call.status = outcome;
+        // Drain remaining parser events
+        const parserEvents = call.parser.drainEvents();
+        for (const pe of parserEvents) {
+            this.eventQueue.push({
+                type: "tool_argument_event",
+                sequence: this.globalSequence++,
+                internalId: call.internalId,
+                event: pe,
+            });
+        }
+        // Schema validation is a separate concern from structural
+        // prefix-safety: only meaningful once the value is genuinely complete,
+        // and only for tools with a registered schema.
+        if (outcome === "complete" && call.name !== undefined) {
+            const validator = this.toolValidators.get(call.name);
+            if (validator) {
+                call.schemaValid = validator(res.stableValue) === true;
+                if (!call.schemaValid) {
+                    const errors = (validator.errors ?? [])
+                        .map((e) => `${e.instancePath || "<root>"} ${e.message ?? ""}`.trim())
+                        .join("; ");
+                    this.addDiagnostic({
+                        code: "E_SCHEMA_VALIDATION_FAILED",
+                        severity: "error",
+                        internalId: call.internalId,
+                        message: `Tool call arguments for "${call.name}" do not match its schema: ${errors || "unknown validation error"}`,
+                    });
+                }
+            }
+        }
+        // Determine executable according to Executable Policy — structural
+        // completeness AND (if a schema is registered) schema validity.
+        const executable = outcome === "complete" && res.executable && call.schemaValid !== false;
+        this.eventQueue.push({
+            type: "tool_call_finished",
+            sequence: this.globalSequence++,
+            internalId: call.internalId,
+            outcome,
+            executable,
+        });
+    }
+    hasCallConflict(call) {
+        return this.diagnostics.some(d => d.internalId === call.internalId && (d.severity === "error" || d.severity === "fatal"));
+    }
+    handleProviderDiagnostic(event) {
+        const internalId = event.callRef ? this.sourceKeyToInternalId.get(event.callRef.sourceKey) : undefined;
+        this.addDiagnostic({
+            code: event.code,
+            severity: event.severity,
+            message: event.message,
+            internalId,
+        });
+        // Mirrors handleIdentity()'s existing "mutate call.status mid-stream, not
+        // only at finishCall() time" pattern for identity conflicts - this is
+        // the same kind of call-scoped fact that can be known before the stream
+        // ends and must not wait for it. Gated on "collecting" (first write
+        // wins, matching finishCall()'s own `if (call.status !== "collecting")
+        // return` guard) so this is a one-way transition: once set, no later
+        // event of any kind - including a duplicate of this same diagnostic -
+        // can move the call off "sdk_execution_observed". An unattributable
+        // diagnostic (no callRef, e.g. a malformed provider event with no
+        // correlatable ID) intentionally poisons nothing - there is no specific
+        // call to hold ineligible, and guessing one would be worse than leaving
+        // it to decide normally.
+        if (internalId !== undefined && SDK_EXECUTION_OBSERVED_CODES.has(event.code)) {
+            const call = this.calls.get(internalId);
+            if (call && call.status === "collecting") {
+                call.status = "sdk_execution_observed";
+            }
+        }
+    }
+    handleStreamEnd(event) {
+        this.isFinished = true;
+        // Close all open calls
+        for (const call of this.calls.values()) {
+            if (call.status === "collecting") {
+                if (!call.argumentStreamClosed) {
+                    this.addDiagnostic({
+                        code: "E_STREAM_ENDED_WITH_OPEN_CALL",
+                        severity: "error",
+                        internalId: call.internalId,
+                        message: "Stream ended with open call",
+                    });
+                }
+                this.finishCall(call, event.reason);
+            }
+        }
+        this.eventQueue.push({
+            type: "provider_stream_finished",
+            sequence: this.globalSequence++,
+            reason: event.reason,
+        });
+    }
+    getCall(internalId) {
+        const call = this.calls.get(internalId);
+        if (!call) {
+            this.addDiagnostic({
+                code: "E_TOOL_CALL_NOT_FOUND",
+                severity: "error",
+                internalId,
+                message: `Tool call ${internalId} not found`,
+            });
+            return undefined;
+        }
+        return call;
+    }
+    addDiagnostic(diag) {
+        this.diagnostics.push(diag);
+        this.eventQueue.push({
+            type: "coordinator_diagnostic",
+            sequence: this.globalSequence++,
+            diagnostic: diag,
+        });
+    }
+    snapshot() {
+        return {
+            calls: Array.from(this.calls.values()).map((c) => ({
+                internalId: c.internalId,
+                provider: c.provider,
+                toolCallId: c.toolCallId,
+                toolIndex: c.toolIndex,
+                name: c.name,
+                nameComplete: c.nameComplete,
+                parser: c.parser.snapshot(),
+                status: c.status,
+                schemaValid: c.schemaValid,
+            })),
+            diagnostics: [...this.diagnostics],
+            eventsProcessed: this.eventsProcessed,
+            isFinished: this.isFinished,
+        };
+    }
+    drainEvents() {
+        const events = this.eventQueue;
+        this.eventQueue = [];
+        return events;
+    }
+    finish(meta) {
+        if (!this.isFinished) {
+            this.handleStreamEnd({
+                type: "provider_stream_end",
+                sequence: this.eventsProcessed + 1,
+                provider: "unknown",
+                reason: meta?.reason ?? "unknown",
+                providerReason: meta?.providerReason,
+            });
+        }
+        return {
+            calls: this.snapshot().calls,
+        };
+    }
+}
+export function createToolCallStreamCoordinator(limits, parserOptions, toolSchemas) {
+    return new DefaultToolCallStreamCoordinator(limits, parserOptions, toolSchemas);
+}
+//# sourceMappingURL=coordinator.js.map

package/dist/coordinator/coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.js","sourceRoot":"","sources":["../../src/coordinator/coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAoB,MAAM,KAAK,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAOL,0BAA0B,EAI3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,GACpC,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,4EAA4E;AAC5E,wEAAwE;AACxE,0EAA0E;AAC1E,qEAAqE;AACrE,8CAA8C;AAC9C,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IAChE,sCAAsC;IACtC,mCAAmC;CACpC,CAAC,CAAC;AAEH,MAAM,oBAAoB;IACf,UAAU,CAAS;IACnB,QAAQ,CAAe;IAEhC,UAAU,CAAU;IACpB,SAAS,CAAU;IAEnB,IAAI,CAAU;IACd,YAAY,GAAY,KAAK,CAAC;IAC9B,oBAAoB,GAAY,KAAK,CAAC;IAE7B,MAAM,CAAwB;IAEvC,MAAM,GAA4B,YAAY,CAAC;IAC/C,WAAW,CAAW;IAEtB,YAAY,UAAkB,EAAE,QAAsB,EAAE,MAA6B;QACnF,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,gCAAgC;IAC1B,MAAM,CAAoB;IAC1B,aAAa,CAA4B;IACzC,cAAc,CAAgC;IACvD,KAAK,GAAsC,IAAI,GAAG,EAAE,CAAC;IACrD,qBAAqB,GAAwB,IAAI,GAAG,EAAE,CAAC;IACvD,WAAW,GAAG,CAAC,CAAC;IAChB,UAAU,GAA+B,EAAE,CAAC;IAC5C,WAAW,GAA4B,EAAE,CAAC;IAC1C,eAAe,GAAG,CAAC,CAAC;IACpB,cAAc,GAAG,CAAC,CAAC;IACnB,UAAU,GAAG,KAAK,CAAC;IAE3B;;;;;;;;;;;;;;;OAeG;IACH,YACE,MAAmC,EACnC,aAA6B,EAC7B,WAA4C;QAE5C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,0BAA0B,EAAE,GAAG,MAAM,EAAE,CAAC;QAC3D,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;QAChC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAgC;QACnC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,aAAa,CAAC;gBACjB,IAAI,EAAE,0BAA0B;gBAChC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,+BAA+B;aACzC,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC5D,IAAI,CAAC,aAAa,CAAC;gBACjB,IAAI,EAAE,4BAA4B;gBAClC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,iBAAiB;gBACpB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM;YACR,KAAK,oBAAoB;gBACvB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC3B,MAAM;YACR,KAAK,sBAAsB;gBACzB,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,2BAA2B;gBAC9B,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM;YACR,KAAK,eAAe;gBAClB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC1B,MAAM;YACR,KAAK,qBAAqB;gBACxB,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;gBACrC,MAAM;YACR,KAAK,qBAAqB;gBACxB,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC5B,MAAM;QACV,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,WAAW,CAAC,KAA8D;QAChF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAE1C,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,CAAC;gBACjB,IAAI,EAAE,6BAA6B;gBACnC,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,UAAU;gBACtB,OAAO,EAAE,4CAA4C,SAAS,EAAE;aACjE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAChD,IAAI,CAAC,aAAa,CAAC;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,6BAA6B;aACvC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE1E,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACvE,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACpE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAErD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;YAC/B,UAAU;YACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,4BAA4B;gBAClC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;gBAC/B,UAAU;gBACV,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,KAAiE;QACtF,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC1E,IAAI,CAAC,aAAa,CAAC;oBACjB,IAAI,EAAE,8BAA8B;oBACpC,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,OAAO,EAAE,uBAAuB,IAAI,CAAC,UAAU,SAAS,KAAK,CAAC,UAAU,EAAE;iBAC3E,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YAC1B,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACzC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;gBACnC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;gBACvE,IAAI,CAAC,aAAa,CAAC;oBACjB,IAAI,EAAE,2BAA2B;oBACjC,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,OAAO,EAAE,0BAA0B,IAAI,CAAC,SAAS,SAAS,KAAK,CAAC,SAAS,EAAE;iBAC5E,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YAC1B,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;gBACjC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,4BAA4B;gBAClC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,KAAmE;QACzF,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC;gBACjB,IAAI,EAAE,wBAAwB;gBAC9B,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,6BAA6B;aACvC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QAE5C,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,IAAI,CAAC,aAAa,CAAC;gBACjB,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,mCAAmC;aAC7C,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IAEO,oBAAoB,CAAC,KAAwE;QACnG,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC;gBACjB,IAAI,EAAE,4BAA4B;gBAClC,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE9B,yDAAyD;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/C,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,EAAE,EAAE;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,KAA4D;QAChF,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO;QAEzC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;QAEjC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACL,IAAI,CAAC,aAAa,CAAC;gBAClB,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,0BAA0B;aACpC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,IAA0B,EAAE,MAAuB;QACpE,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO;QAEzC,iEAAiE;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAE3C,2CAA2C;QAC3C,IAAI,OAAO,GAA4B,SAAS,CAAC;QACjD,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC3B,OAAO,GAAG,UAAU,CAAC;YACrB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,OAAO,GAAG,SAAS,CAAC;YACvB,CAAC;QACJ,CAAC;aAAM,IAAI,GAAG,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACtC,OAAO,GAAG,WAAW,CAAC;QACzB,CAAC;aAAM,IAAI,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACrC,OAAO,GAAG,UAAU,CAAC;QACxB,CAAC;QAED,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO,GAAG,WAAW,CAAC;QAElD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QAEtB,gCAAgC;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/C,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,EAAE,EAAE;aACV,CAAC,CAAC;QACL,CAAC;QAED,0DAA0D;QAC1D,uEAAuE;QACvE,+CAA+C;QAC/C,IAAI,OAAO,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;gBACvD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBACtB,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;yBACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,IAAI,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;yBACrE,IAAI,CAAC,IAAI,CAAC,CAAC;oBACd,IAAI,CAAC,aAAa,CAAC;wBACjB,IAAI,EAAE,4BAA4B;wBAClC,QAAQ,EAAE,OAAO;wBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,OAAO,EAAE,4BAA4B,IAAI,CAAC,IAAI,8BAA8B,MAAM,IAAI,0BAA0B,EAAE;qBACnH,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,gEAAgE;QAChE,MAAM,UAAU,GAAG,OAAO,KAAK,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC;QAE1F,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO;YACP,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,IAA0B;QAChD,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC;IAC5H,CAAC;IAEO,wBAAwB,CAAC,KAAkE;QACjG,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvG,IAAI,CAAC,aAAa,CAAC;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU;SACX,CAAC,CAAC;QAEH,0EAA0E;QAC1E,sEAAsE;QACtE,wEAAwE;QACxE,oEAAoE;QACpE,uEAAuE;QACvE,qEAAqE;QACrE,sEAAsE;QACtE,oEAAoE;QACpE,kEAAkE;QAClE,wEAAwE;QACxE,wEAAwE;QACxE,yBAAyB;QACzB,IAAI,UAAU,KAAK,SAAS,IAAI,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,GAAG,wBAAwB,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,KAAkE;QACxF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAEvB,uBAAuB;QACvB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC/B,IAAI,CAAC,aAAa,CAAC;wBACjB,IAAI,EAAE,+BAA+B;wBACrC,QAAQ,EAAE,OAAO;wBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,OAAO,EAAE,6BAA6B;qBACvC,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,UAAkB;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,aAAa,CAAC;gBACjB,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,OAAO;gBACjB,UAAU;gBACV,OAAO,EAAE,aAAa,UAAU,YAAY;aAC7C,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,aAAa,CAAC,IAA2B;QAC/C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE;YAC/B,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,QAAQ;QACN,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjD,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC3B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC;YACH,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;YAClC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED,WAAW;QACT,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,IAA4D;QACjE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,eAAe,CAAC;gBACnB,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,IAAI,CAAC,eAAe,GAAG,CAAC;gBAClC,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,SAAS;gBACjC,cAAc,EAAE,IAAI,EAAE,cAAc;aACrC,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK;SAC7B,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,+BAA+B,CAC7C,MAAmC,EACnC,aAA6B,EAC7B,WAA4C;IAE5C,OAAO,IAAI,gCAAgC,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAClF,CAAC"}