@rulvar/evals 1.35.0 → 1.36.0

package/dist/index.d.ts

@@ -291,7 +291,10 @@ interface EvalCommitterOptions {
   committerId: string;
   /** The emitting sweep report; every claim's gate references it. */
   reportId: string;
-  /** CAS-rebase attempts; default 3. */
+  /**
+  * CAS rebase attempts; default 3. A positive integer, refused as a
+  * ConfigError before the first store read.
+  */
   attempts?: number;
 }
 /** One measured claim; claimExpiry applies the TTL from the decay table. */

package/dist/index.js

@@ -443,6 +443,16 @@ function judgeGrader(options) {
 * documented CAS-rebase recipe. Humans never call this; their path is
 * the human gate and it structurally cannot carry metrics.
 */
+/**
+* Local mirror of the core numeric intake idiom (v1.35.0 review P2-5):
+* the CAS loop bound is compared with `<`, and every comparison with NaN
+* is false, so an unvalidated NaN or nonpositive count skipped the loop
+* entirely and surfaced the generic 'unreachable' Error instead of a
+* typed refusal, while a fraction over ran by an attempt.
+*/
+function requireCasAttempts(value, site) {
+	if (!Number.isInteger(value) || value < 1) throw new ConfigError(`${site} must be a positive integer; got ${String(value)}`);
+}
 /** One measured claim; claimExpiry applies the TTL from the decay table. */
 function evalMeasuredClaim(input, committerId) {
 	return {
@@ -482,6 +492,7 @@ async function commitEvalMeasured(store, claims, options) {
 		gate
 	}));
 	const attempts = options.attempts ?? 3;
+	requireCasAttempts(attempts, "EvalCommitterOptions.attempts");
 	let lastCas;
 	for (let attempt = 0; attempt < attempts; attempt += 1) {
 		const snapshot = await store.current();
@@ -582,6 +593,7 @@ async function canaryFingerprint(engine, probes, options = {}) {
 */
 async function flipStaleOnCanaryDrift(store, model, freshFingerprint, options) {
 	const attempts = options?.attempts ?? 3;
+	requireCasAttempts(attempts, "flipStaleOnCanaryDrift attempts");
 	let lastCas;
 	for (let attempt = 0; attempt < attempts; attempt += 1) {
 		const snapshot = await store.current();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/evals",
-  "version": "1.35.0",
+  "version": "1.36.0",
   "description": "Rulvar evals: eval cases, golden outputs, rubric and judge graders, matrix sweeps, canary fingerprint.",
   "type": "module",
   "license": "Apache-2.0",
@@ -22,8 +22,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@rulvar/testing": "1.35.0",
-    "@rulvar/core": "1.35.0"
+    "@rulvar/core": "1.36.0",
+    "@rulvar/testing": "1.36.0"
   },
   "devDependencies": {
     "@types/node": "^22.20.0",