prefix-safe-json 0.1.0 → 0.2.0

package/dist/grammar/stack.js

@@ -0,0 +1,168 @@
+// ---------------------------------------------------------------------------
+// Grammar Stack — tracks nested JSON container state
+// ---------------------------------------------------------------------------
+import { createObjectFrame, createArrayFrame } from "./frame.js";
+import { appendPointer } from "./pointer.js";
+import { DiagnosticCode } from "../diagnostics/codes.js";
+import { createDiagnostic } from "../diagnostics/factory.js";
+/**
+ * Manages the stack of open JSON containers.
+ * Handles object/array nesting, expectations, and duplicate key detection.
+ */
+export class GrammarStack {
+    stack = [];
+    diagnostics = [];
+    hasDuplicateKey = false;
+    maxDepth;
+    constructor(maxDepth) {
+        this.maxDepth = maxDepth;
+    }
+    /** Current depth (number of open containers). */
+    get depth() {
+        return this.stack.length;
+    }
+    /** Whether any duplicate key has been seen. */
+    get hasDuplicate() {
+        return this.hasDuplicateKey;
+    }
+    /** Get the current (top) frame, or undefined if empty. */
+    get current() {
+        return this.stack[this.stack.length - 1];
+    }
+    /**
+     * Push a new object container.
+     * Returns the frame, or null if depth limit exceeded.
+     */
+    pushObject(byteStart) {
+        if (this.stack.length >= this.maxDepth) {
+            this.diagnostics.push(createDiagnostic(DiagnosticCode.E_LIMIT_DEPTH, "fatal", byteStart, `Maximum nesting depth ${this.maxDepth} exceeded`, false));
+            return null;
+        }
+        const parent = this.current ?? null;
+        const frame = createObjectFrame(parent, this.currentSegment(), byteStart);
+        this.stack.push(frame);
+        return frame;
+    }
+    /**
+     * Push a new array container.
+     * Returns the frame, or null if depth limit exceeded.
+     */
+    pushArray(byteStart) {
+        if (this.stack.length >= this.maxDepth) {
+            this.diagnostics.push(createDiagnostic(DiagnosticCode.E_LIMIT_DEPTH, "fatal", byteStart, `Maximum nesting depth ${this.maxDepth} exceeded`, false));
+            return null;
+        }
+        const parent = this.current ?? null;
+        const frame = createArrayFrame(parent, this.currentSegment(), byteStart);
+        this.stack.push(frame);
+        return frame;
+    }
+    /**
+     * Pop the current container.
+     * Returns the popped frame.
+     */
+    pop() {
+        return this.stack.pop();
+    }
+    /**
+     * Register an object key. Returns true if the key is new.
+     * If duplicate, emits diagnostic and returns false.
+     */
+    registerObjectKey(key, byteOffset) {
+        const frame = this.current;
+        if (!frame || frame.containerType !== "object" || !frame.seenKeys) {
+            return false;
+        }
+        if (frame.seenKeys.has(key)) {
+            this.hasDuplicateKey = true;
+            this.diagnostics.push(createDiagnostic(DiagnosticCode.E_DUPLICATE_KEY, "error", byteOffset, `Duplicate object key: ${JSON.stringify(key)}`, false, frame.path));
+            return false;
+        }
+        frame.seenKeys.add(key);
+        frame.currentKey = key;
+        return true;
+    }
+    /**
+     * Get the JSON Pointer path for where the next value will go.
+     */
+    currentValuePath() {
+        const frame = this.current;
+        if (!frame)
+            return "";
+        if (frame.containerType === "object") {
+            if (frame.currentKey !== undefined) {
+                return appendPointer(frame.path, frame.currentKey);
+            }
+            return frame.path;
+        }
+        // array
+        return appendPointer(frame.path, frame.nextArrayIndex);
+    }
+    /**
+     * The key/index that would lead from the current frame to its next child,
+     * without flattening it into a full path string. Same underlying value
+     * currentValuePath() uses; kept as a raw segment so a newly-pushed child
+     * frame can capture it in O(1) and defer the expensive path-string join
+     * (see grammar/frame.ts) until something actually reads `.path`.
+     */
+    currentSegment() {
+        const frame = this.current;
+        if (!frame)
+            return null;
+        if (frame.containerType === "object") {
+            return frame.currentKey !== undefined ? frame.currentKey : null;
+        }
+        return frame.nextArrayIndex;
+    }
+    /**
+     * Advance the array index after an element value is committed.
+     */
+    advanceArrayIndex() {
+        const frame = this.current;
+        if (frame && frame.containerType === "array") {
+            frame.nextArrayIndex++;
+        }
+    }
+    /**
+     * Take accumulated diagnostics and clear.
+     */
+    takeDiagnostics() {
+        const result = this.diagnostics;
+        this.diagnostics = [];
+        return result;
+    }
+    /**
+     * Check if the stack is empty (no open containers).
+     */
+    isEmpty() {
+        return this.stack.length === 0;
+    }
+    /**
+     * Get all frames (for snapshot/pending info).
+     */
+    getFrames() {
+        return this.stack;
+    }
+    /**
+     * Determine if all open containers can be safely closed by just appending '}' or ']'.
+     * This is true if no container is waiting for a colon or a value.
+     */
+    canSafelyCloseAll() {
+        for (const frame of this.stack) {
+            if (frame.containerType === "object") {
+                if (frame.objectExpectation === "colon" ||
+                    frame.objectExpectation === "value" ||
+                    frame.objectExpectation === "key_after_comma") {
+                    return false; // Missing colon or value or key
+                }
+            }
+            else {
+                if (frame.arrayExpectation === "value_after_comma") {
+                    return false; // Missing value after comma
+                }
+            }
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=stack.js.map

package/dist/grammar/stack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.js","sourceRoot":"","sources":["../../src/grammar/stack.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAG9E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D;;;GAGG;AACH,MAAM,OAAO,YAAY;IACf,KAAK,GAAmB,EAAE,CAAC;IAC3B,WAAW,GAAiB,EAAE,CAAC;IAC/B,eAAe,GAAG,KAAK,CAAC;IACxB,QAAQ,CAAS;IAEzB,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,iDAAiD;IACjD,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,+CAA+C;IAC/C,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,0DAA0D;IAC1D,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,SAAiB;QAC1B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CACnB,gBAAgB,CACd,cAAc,CAAC,aAAa,EAC5B,OAAO,EACP,SAAS,EACT,yBAAyB,IAAI,CAAC,QAAQ,WAAW,EACjD,KAAK,CACN,CACF,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QACpC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,SAAiB;QACzB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,WAAW,CAAC,IAAI,CACnB,gBAAgB,CACd,cAAc,CAAC,aAAa,EAC5B,OAAO,EACP,SAAS,EACT,yBAAyB,IAAI,CAAC,QAAQ,WAAW,EACjD,KAAK,CACN,CACF,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QACpC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,GAAW,EAAE,UAAkB;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CACnB,gBAAgB,CACd,cAAc,CAAC,eAAe,EAC9B,OAAO,EACP,UAAU,EACV,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAC9C,KAAK,EACL,KAAK,CAAC,IAAI,CACX,CACF,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QAEtB,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACnC,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,QAAQ;QACR,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;OAMG;IACK,cAAc;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,CAAC;QACD,OAAO,KAAK,CAAC,cAAc,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3B,IAAI,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;YAC7C,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACrC,IACE,KAAK,CAAC,iBAAiB,KAAK,OAAO;oBACnC,KAAK,CAAC,iBAAiB,KAAK,OAAO;oBACnC,KAAK,CAAC,iBAAiB,KAAK,iBAAiB,EAC7C,CAAC;oBACD,OAAO,KAAK,CAAC,CAAC,gCAAgC;gBAChD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,KAAK,CAAC,gBAAgB,KAAK,mBAAmB,EAAE,CAAC;oBACnD,OAAO,KAAK,CAAC,CAAC,4BAA4B;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/guard/ai-sdk.d.ts

@@ -0,0 +1,48 @@
+import { AiSdkExecutionGuard, ExecutionGuardOptions } from "./types.js";
+/**
+ * @public (Stable)
+ * Drop-in fail-closed execution guard for the Vercel AI SDK's `fullStream`.
+ * Composes `AiSdkStreamAdapter` with `createToolCallExecutionGate()` - same
+ * decision logic, same fail-closed guarantees, no new parser or coordinator.
+ * Does not depend on the `ai` package at runtime and does not import its
+ * types; `push()` accepts `unknown` and reads only the fields it needs.
+ *
+ * ```ts
+ * const guard = createAiSdkExecutionGuard({
+ *   schemas: {
+ *     write_file: {
+ *       type: "object",
+ *       properties: { path: { type: "string" }, content: { type: "string" } },
+ *       required: ["path", "content"],
+ *     },
+ *   },
+ * });
+ *
+ * for await (const part of result.fullStream) {
+ *   guard.push(part);
+ * }
+ *
+ * const final = guard.finish();
+ * for (const decision of final.decisions) {
+ *   if (decision.action === "execute") {
+ *     await tools[decision.name](decision.value);
+ *   }
+ * }
+ * ```
+ *
+ * Equivalent to composing the low-level API yourself:
+ *
+ * ```ts
+ * const gate = createToolCallExecutionGate(undefined, undefined, schemas);
+ * const adapter = new AiSdkStreamAdapter();
+ * for await (const part of result.fullStream) {
+ *   for (const normalized of adapter.push(part)) gate.push(normalized);
+ * }
+ * const final = gate.finish();
+ * ```
+ *
+ * Both APIs remain public; use this one for the common case, the low-level
+ * one when you need direct access to the adapter or gate instance.
+ */
+export declare function createAiSdkExecutionGuard(options?: ExecutionGuardOptions): AiSdkExecutionGuard;
+//# sourceMappingURL=ai-sdk.d.ts.map

package/dist/guard/ai-sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-sdk.d.ts","sourceRoot":"","sources":["../../src/guard/ai-sdk.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,mBAAmB,CAE9F"}

package/dist/guard/ai-sdk.js

@@ -0,0 +1,51 @@
+import { AiSdkStreamAdapter } from "../providers/ai-sdk.js";
+import { createProviderExecutionGuard } from "./provider-guard.js";
+/**
+ * @public (Stable)
+ * Drop-in fail-closed execution guard for the Vercel AI SDK's `fullStream`.
+ * Composes `AiSdkStreamAdapter` with `createToolCallExecutionGate()` - same
+ * decision logic, same fail-closed guarantees, no new parser or coordinator.
+ * Does not depend on the `ai` package at runtime and does not import its
+ * types; `push()` accepts `unknown` and reads only the fields it needs.
+ *
+ * ```ts
+ * const guard = createAiSdkExecutionGuard({
+ *   schemas: {
+ *     write_file: {
+ *       type: "object",
+ *       properties: { path: { type: "string" }, content: { type: "string" } },
+ *       required: ["path", "content"],
+ *     },
+ *   },
+ * });
+ *
+ * for await (const part of result.fullStream) {
+ *   guard.push(part);
+ * }
+ *
+ * const final = guard.finish();
+ * for (const decision of final.decisions) {
+ *   if (decision.action === "execute") {
+ *     await tools[decision.name](decision.value);
+ *   }
+ * }
+ * ```
+ *
+ * Equivalent to composing the low-level API yourself:
+ *
+ * ```ts
+ * const gate = createToolCallExecutionGate(undefined, undefined, schemas);
+ * const adapter = new AiSdkStreamAdapter();
+ * for await (const part of result.fullStream) {
+ *   for (const normalized of adapter.push(part)) gate.push(normalized);
+ * }
+ * const final = gate.finish();
+ * ```
+ *
+ * Both APIs remain public; use this one for the common case, the low-level
+ * one when you need direct access to the adapter or gate instance.
+ */
+export function createAiSdkExecutionGuard(options) {
+    return createProviderExecutionGuard(new AiSdkStreamAdapter(), options);
+}
+//# sourceMappingURL=ai-sdk.js.map

package/dist/guard/ai-sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-sdk.js","sourceRoot":"","sources":["../../src/guard/ai-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAGnE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAA+B;IACvE,OAAO,4BAA4B,CAAC,IAAI,kBAAkB,EAAE,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC"}

package/dist/guard/provider-guard.d.ts

@@ -0,0 +1,4 @@
+import { ProviderStreamAdapter } from "../providers/adapter.js";
+import { ExecutionGuard, ExecutionGuardOptions } from "./types.js";
+export declare function createProviderExecutionGuard<TRawEvent>(adapter: ProviderStreamAdapter<TRawEvent>, options?: ExecutionGuardOptions): ExecutionGuard<TRawEvent>;
+//# sourceMappingURL=provider-guard.d.ts.map

package/dist/guard/provider-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-guard.d.ts","sourceRoot":"","sources":["../../src/guard/provider-guard.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnE,wBAAgB,4BAA4B,CAAC,SAAS,EACpD,OAAO,EAAE,qBAAqB,CAAC,SAAS,CAAC,EACzC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,cAAc,CAAC,SAAS,CAAC,CA0B3B"}

package/dist/guard/provider-guard.js

@@ -0,0 +1,38 @@
+// ---------------------------------------------------------------------------
+// createProviderExecutionGuard — internal composition helper.
+//
+// Not exported from the package root in this release. Every high-level
+// per-provider guard (currently only createAiSdkExecutionGuard) is this
+// function applied to one ProviderStreamAdapter instance - no duplicated
+// state, no duplicated decision logic, no new parser or coordinator. Kept
+// internal (rather than public) until a second provider guard actually
+// needs it, per the "don't expose abstraction for its own sake" scoping
+// this release deliberately holds to - promoting it to a public export is a
+// non-breaking addition whenever that happens.
+// ---------------------------------------------------------------------------
+import { createToolCallExecutionGate } from "../gate/gate.js";
+export function createProviderExecutionGuard(adapter, options) {
+    const gate = createToolCallExecutionGate(options?.limits, options?.parserOptions, options?.schemas);
+    return {
+        push(rawEvent) {
+            for (const normalized of adapter.push(rawEvent)) {
+                gate.push(normalized);
+            }
+        },
+        snapshot() {
+            return gate.snapshot();
+        },
+        finish(meta) {
+            // If the provider stream already delivered its own terminal event
+            // through push() (the common case), the adapter is already
+            // `finished` and this is a no-op - meta is only consulted as a
+            // fail-closed backstop for a stream that ends without ever reporting
+            // why (see ProviderStreamAdapter.finish()'s own contract).
+            for (const normalized of adapter.finish(meta)) {
+                gate.push(normalized);
+            }
+            return gate.finish(meta);
+        },
+    };
+}
+//# sourceMappingURL=provider-guard.js.map

package/dist/guard/provider-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-guard.js","sourceRoot":"","sources":["../../src/guard/provider-guard.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8DAA8D;AAC9D,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,0EAA0E;AAC1E,uEAAuE;AACvE,wEAAwE;AACxE,4EAA4E;AAC5E,+CAA+C;AAC/C,8EAA8E;AAE9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAM9D,MAAM,UAAU,4BAA4B,CAC1C,OAAyC,EACzC,OAA+B;IAE/B,MAAM,IAAI,GAAG,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAEpG,OAAO;QACL,IAAI,CAAC,QAAmB;YACtB,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,QAAQ;YACN,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,CAAC,IAA4D;YACjE,kEAAkE;YAClE,2DAA2D;YAC3D,+DAA+D;YAC/D,qEAAqE;YACrE,2DAA2D;YAC3D,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/guard/types.d.ts

@@ -0,0 +1,48 @@
+import { StreamEndReason } from "../coordinator/protocol.js";
+import { CoordinatorLimits, JsonSchemaLike } from "../coordinator/types.js";
+import { ToolCallExecutionGateFinalResult, ExecutionDecision } from "../gate/types.js";
+import { ParserOptions } from "../types.js";
+/**
+ * High-level, provider-agnostic execution guard: composes a
+ * `ProviderStreamAdapter` with a `ToolCallExecutionGate` behind three
+ * methods. `push()`/`snapshot()`/`finish()` mirror the underlying gate's own
+ * shape exactly - this is a thinner call surface over the same object, not a
+ * parallel implementation with its own state or decision logic.
+ */
+export interface ExecutionGuard<TRawEvent = unknown> {
+    /** Feed one raw provider event (e.g. one `fullStream` part) through the adapter into the gate. */
+    push(rawEvent: TRawEvent): void;
+    /**
+     * In-flight view of every call's current decision. As with the underlying
+     * gate, every decision here is `"retry"` or `"reject"` - `"execute"` is
+     * only ever returned from `finish()`.
+     */
+    snapshot(): readonly ExecutionDecision[];
+    /**
+     * Signals stream completion and returns the final decision for every tool
+     * call the stream ever produced. Safe to call even if the underlying
+     * provider stream already delivered its own terminal event through
+     * `push()` - `meta` is only used as a fallback for a stream that ends
+     * without ever reporting why.
+     */
+    finish(meta?: {
+        reason?: StreamEndReason;
+        providerReason?: string;
+    }): ToolCallExecutionGateFinalResult;
+}
+/** Options accepted by every high-level provider execution guard factory. */
+export interface ExecutionGuardOptions {
+    /**
+     * Optional JSON Schema (draft-07) per tool name - same option
+     * `createToolCallExecutionGate()`/`createToolCallStreamCoordinator()`
+     * accept as their third constructor argument.
+     */
+    schemas?: Record<string, JsonSchemaLike>;
+    /** Coordinator-level limits (concurrent tool calls, tool name size, etc.). */
+    limits?: Partial<CoordinatorLimits>;
+    /** Per-call parser configuration (resource limits, repairs). */
+    parserOptions?: ParserOptions;
+}
+/** A guard specialized for the Vercel AI SDK's `fullStream` part shape. See `createAiSdkExecutionGuard`. */
+export type AiSdkExecutionGuard = ExecutionGuard<unknown>;
+//# sourceMappingURL=types.d.ts.map

package/dist/guard/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/guard/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,gCAAgC,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,WAAW,cAAc,CAAC,SAAS,GAAG,OAAO;IACjD,kGAAkG;IAClG,IAAI,CAAC,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;IAEhC;;;;OAIG;IACH,QAAQ,IAAI,SAAS,iBAAiB,EAAE,CAAC;IAEzC;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,eAAe,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,gCAAgC,CAAC;CACxG;AAED,6EAA6E;AAC7E,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAEzC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEpC,gEAAgE;IAChE,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,4GAA4G;AAC5G,MAAM,MAAM,mBAAmB,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC"}

package/dist/guard/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/guard/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/guard/types.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,85 @@
+/**
+ * @public (Stable)
+ * Creates a new Incremental JSON Parser instance.
+ */
+export { createParser } from "./parser.js";
+export type { IncrementalJsonParser, ParserOptions, PushResult, ParserSnapshot, FinalResult, ParserEvent, ValueCommittedEvent, ContainerClosedEvent, RepairAppliedEvent, DiagnosticEvent, DocumentCompleteEvent, StreamFinishedEvent, JsonValue, JsonObject, JsonArray, SyntaxStatus, StreamEndReason, PendingToken, RepairAction, Diagnostic, ParserLimits, } from "./types.js";
+/** @public (Stable) Default resource limits applied when none are supplied to `createParser()`. */
+export { DEFAULT_LIMITS } from "./limits.js";
+/** @public (Stable) Machine-readable parser diagnostic codes (see `Diagnostic.code`). */
+export { DiagnosticCode } from "./diagnostics/codes.js";
+/**
+ * @public (Stable)
+ * Creates a stream coordinator for mapping overlapping multi-tool streams.
+ */
+export { createToolCallStreamCoordinator } from "./coordinator/coordinator.js";
+export type { ToolCallStreamCoordinator, ToolCallState, JsonSchemaLike, CoordinatorLimits, CoordinatorDiagnostic, } from "./coordinator/types.js";
+export type { NormalizedToolStreamEvent, ProviderName } from "./coordinator/protocol.js";
+/**
+ * @public (Stable)
+ * Diagnostic code a custom `ProviderStreamAdapter` can emit (as a
+ * stream-wide `provider_diagnostic`, no `callRef`) to signal a
+ * content-safety/policy termination - the gate matches on this exact code
+ * to report `reason: "content_filtered"`. See docs/EXECUTION_GATE.md.
+ */
+export { CONTENT_FILTERED_DIAGNOSTIC_CODE } from "./coordinator/diagnostic-codes.js";
+/**
+ * @public (Stable)
+ * Fail-closed execution-decision layer built on top of the coordinator.
+ * Answers one question per tool call: is it safe to execute right now?
+ * See docs/EXECUTION_GATE.md.
+ */
+export { createToolCallExecutionGate } from "./gate/gate.js";
+export type { ToolCallExecutionGate, ToolCallExecutionGateFinalResult, ExecutionDecision, ExecuteDecision, NonExecutableDecision, ExecutionAction, ExecutionReason, DecisionEvidence, } from "./gate/types.js";
+/**
+ * @public (Stable)
+ * Drop-in fail-closed execution guard for the Vercel AI SDK's `fullStream`.
+ * Composes `AiSdkStreamAdapter` and `createToolCallExecutionGate()` - see
+ * `docs/EXECUTION_GATE.md#high-level-guards`.
+ */
+export { createAiSdkExecutionGuard } from "./guard/ai-sdk.js";
+export type { ExecutionGuard, AiSdkExecutionGuard, ExecutionGuardOptions } from "./guard/types.js";
+export type { ProviderStreamAdapter } from "./providers/adapter.js";
+/**
+ * @public (Experimental)
+ * OpenAI Chat Completions (legacy `function_call`) and Responses API
+ * streaming tool-call shape.
+ */
+export { OpenAIStreamAdapter } from "./providers/openai.js";
+/**
+ * @public (Experimental)
+ * Generic OpenAI-compatible `choices[].delta.tool_calls[]` streaming
+ * shape, shared by OpenAI's current API and most compatible endpoints.
+ */
+export { OpenAICompatibleStreamAdapter } from "./providers/openai-compatible.js";
+/**
+ * @public (Experimental)
+ * Anthropic Messages API streaming tool-call shape
+ * (`content_block_delta` / `input_json_delta`).
+ */
+export { AnthropicStreamAdapter } from "./providers/anthropic.js";
+/**
+ * @public (Experimental)
+ * Gemini's structured `functionCall` shape. Unlike the other adapters,
+ * Gemini delivers function-call arguments as an already-parsed object, not
+ * incremental raw JSON text - see docs/COMPATIBILITY.md for what that
+ * means for this adapter's guarantees.
+ */
+export { GeminiStreamAdapter } from "./providers/gemini.js";
+/**
+ * @public (Experimental)
+ * OpenRouter's streaming tool-call shape (a thin extension of the
+ * OpenAI-compatible shape above).
+ */
+export { OpenRouterStreamAdapter } from "./providers/openrouter.js";
+/**
+ * @public (Experimental)
+ * Vercel AI SDK's `fullStream` tool-call part shape
+ * (`tool-input-start`/`-delta`/`-end`, `tool-call`, `tool-result`,
+ * `tool-error`, `finish`, `error`, `abort`). Verified against `ai@5.0.240`,
+ * `ai@6.0.259`, `ai@7.0.70` - see docs/COMPATIBILITY.md. Prefer
+ * `createAiSdkExecutionGuard()` (Stable, above) for the common case; use
+ * this directly only if you need the adapter instance itself.
+ */
+export { AiSdkStreamAdapter } from "./providers/ai-sdk.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,YAAY,EAEV,qBAAqB,EACrB,aAAa,EAGb,UAAU,EACV,cAAc,EACd,WAAW,EAGX,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EAGnB,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,mGAAmG;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,yFAAyF;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD;;;GAGG;AACH,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,YAAY,EACV,yBAAyB,EACzB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzF;;;;;;GAMG;AACH,OAAO,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AAGrF;;;;;GAKG;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,YAAY,EACV,qBAAqB,EACrB,gCAAgC,EAChC,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAGzB;;;;;GAKG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAGnG,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAOpE;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;GAIG;AACH,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAEjF;;;;GAIG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE;;;;;;GAMG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;GAIG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;;;;;GAQG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -0,0 +1,99 @@
+// ---------------------------------------------------------------------------
+// Public API — prefix-safe-json
+//
+// Every exported function/class carries its own `@public (Stable)` or
+// `@public (Experimental)` classification directly above its own
+// declaration - never one comment shared across multiple export
+// statements, since a JSDoc/TSDoc comment attaches only to the single
+// declaration immediately following it, not to every statement a reader's
+// eye groups it with visually. Type-only exports grouped under a
+// `// <Section> API` comment inherit the classification of the
+// function/class they are declared alongside in that same section, unless
+// individually annotated otherwise.
+// ---------------------------------------------------------------------------
+/**
+ * @public (Stable)
+ * Creates a new Incremental JSON Parser instance.
+ */
+export { createParser } from "./parser.js";
+/** @public (Stable) Default resource limits applied when none are supplied to `createParser()`. */
+export { DEFAULT_LIMITS } from "./limits.js";
+/** @public (Stable) Machine-readable parser diagnostic codes (see `Diagnostic.code`). */
+export { DiagnosticCode } from "./diagnostics/codes.js";
+// Coordinator API
+/**
+ * @public (Stable)
+ * Creates a stream coordinator for mapping overlapping multi-tool streams.
+ */
+export { createToolCallStreamCoordinator } from "./coordinator/coordinator.js";
+/**
+ * @public (Stable)
+ * Diagnostic code a custom `ProviderStreamAdapter` can emit (as a
+ * stream-wide `provider_diagnostic`, no `callRef`) to signal a
+ * content-safety/policy termination - the gate matches on this exact code
+ * to report `reason: "content_filtered"`. See docs/EXECUTION_GATE.md.
+ */
+export { CONTENT_FILTERED_DIAGNOSTIC_CODE } from "./coordinator/diagnostic-codes.js";
+// Execution Safety Gate API
+/**
+ * @public (Stable)
+ * Fail-closed execution-decision layer built on top of the coordinator.
+ * Answers one question per tool call: is it safe to execute right now?
+ * See docs/EXECUTION_GATE.md.
+ */
+export { createToolCallExecutionGate } from "./gate/gate.js";
+// High-level execution guards
+/**
+ * @public (Stable)
+ * Drop-in fail-closed execution guard for the Vercel AI SDK's `fullStream`.
+ * Composes `AiSdkStreamAdapter` and `createToolCallExecutionGate()` - see
+ * `docs/EXECUTION_GATE.md#high-level-guards`.
+ */
+export { createAiSdkExecutionGuard } from "./guard/ai-sdk.js";
+// Provider adapters for various LLM network shapes. Each is independently
+// classified below - see docs/COMPATIBILITY.md for what "verified" means
+// per adapter (a specific tested SDK version vs. a documented wire shape).
+// All six may change if the upstream API/SDK shape they target changes.
+/**
+ * @public (Experimental)
+ * OpenAI Chat Completions (legacy `function_call`) and Responses API
+ * streaming tool-call shape.
+ */
+export { OpenAIStreamAdapter } from "./providers/openai.js";
+/**
+ * @public (Experimental)
+ * Generic OpenAI-compatible `choices[].delta.tool_calls[]` streaming
+ * shape, shared by OpenAI's current API and most compatible endpoints.
+ */
+export { OpenAICompatibleStreamAdapter } from "./providers/openai-compatible.js";
+/**
+ * @public (Experimental)
+ * Anthropic Messages API streaming tool-call shape
+ * (`content_block_delta` / `input_json_delta`).
+ */
+export { AnthropicStreamAdapter } from "./providers/anthropic.js";
+/**
+ * @public (Experimental)
+ * Gemini's structured `functionCall` shape. Unlike the other adapters,
+ * Gemini delivers function-call arguments as an already-parsed object, not
+ * incremental raw JSON text - see docs/COMPATIBILITY.md for what that
+ * means for this adapter's guarantees.
+ */
+export { GeminiStreamAdapter } from "./providers/gemini.js";
+/**
+ * @public (Experimental)
+ * OpenRouter's streaming tool-call shape (a thin extension of the
+ * OpenAI-compatible shape above).
+ */
+export { OpenRouterStreamAdapter } from "./providers/openrouter.js";
+/**
+ * @public (Experimental)
+ * Vercel AI SDK's `fullStream` tool-call part shape
+ * (`tool-input-start`/`-delta`/`-end`, `tool-call`, `tool-result`,
+ * `tool-error`, `finish`, `error`, `abort`). Verified against `ai@5.0.240`,
+ * `ai@6.0.259`, `ai@7.0.70` - see docs/COMPATIBILITY.md. Prefer
+ * `createAiSdkExecutionGuard()` (Stable, above) for the common case; use
+ * this directly only if you need the adapter instance itself.
+ */
+export { AiSdkStreamAdapter } from "./providers/ai-sdk.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gCAAgC;AAChC,EAAE;AACF,sEAAsE;AACtE,iEAAiE;AACjE,gEAAgE;AAChE,sEAAsE;AACtE,0EAA0E;AAC1E,iEAAiE;AACjE,+DAA+D;AAC/D,0EAA0E;AAC1E,oCAAoC;AACpC,8EAA8E;AAE9E;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiC3C,mGAAmG;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,yFAAyF;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,kBAAkB;AAClB;;;GAGG;AACH,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAS/E;;;;;;GAMG;AACH,OAAO,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AAErF,4BAA4B;AAC5B;;;;;GAKG;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAY7D,8BAA8B;AAC9B;;;;;GAKG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAM9D,0EAA0E;AAC1E,yEAAyE;AACzE,2EAA2E;AAC3E,wEAAwE;AAExE;;;;GAIG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;GAIG;AACH,OAAO,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAEjF;;;;GAIG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE;;;;;;GAMG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;GAIG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;;;;;GAQG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC"}