niceeval 0.13.1 → 0.13.2

package/dist/assertions/record/producer.cjs

@@ -3,6 +3,80 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createAssertionsDocumentBuilder = createAssertionsDocumentBuilder;
 const effect_1 = require("effect");
 const codec_ts_1 = require("./codec.cjs");
+const UTF8 = new TextEncoder();
+function encodedBytes(value) {
+    return UTF8.encode(JSON.stringify(value)).byteLength;
+}
+const DIAGNOSTIC_ROOT_KEYS = Object.freeze([
+    "code",
+    "message",
+    "path",
+    "expected",
+    "received",
+    "reason",
+    "locator",
+]);
+function compactDiagnostic(diagnostic, mode) {
+    if (mode === "minimal") {
+        return Object.freeze({
+            code: "diagnostic-truncated",
+            message: "matcher diagnostic details were omitted to fit the Assertions document limit",
+            path: Object.freeze([]),
+            truncation: Object.freeze({
+                code: "diagnostic-truncated",
+                reason: "document-limit",
+            }),
+        });
+    }
+    const root = {};
+    for (const key of DIAGNOSTIC_ROOT_KEYS) {
+        const value = diagnostic[key];
+        if (value !== undefined)
+            root[key] = value;
+    }
+    root.truncation = Object.freeze({
+        code: "diagnostic-truncated",
+        reason: "document-limit",
+    });
+    return Object.freeze(root);
+}
+function replaceDiagnostic(result, mode) {
+    if (result.diagnostic === undefined)
+        return result;
+    const diagnostic = compactDiagnostic(result.diagnostic, mode);
+    switch (result.state) {
+        case "matched": return Object.freeze({ ...result, diagnostic });
+        case "mismatched": return Object.freeze({ ...result, diagnostic });
+        case "unavailable": return Object.freeze({ ...result, diagnostic });
+        case "errored": return Object.freeze({ ...result, diagnostic });
+        case "not-applicable": return Object.freeze({ ...result, diagnostic });
+    }
+}
+function compactEntries(entries, mode) {
+    return Object.freeze(entries.map((entry) => Object.freeze({
+        ...entry,
+        result: replaceDiagnostic(entry.result, mode),
+    })));
+}
+function invalidDocument(message) {
+    return Object.freeze({ code: "assertions-document-invalid", message });
+}
+function firstSchemaIssue(error) {
+    try {
+        const issue = effect_1.ParseResult.ArrayFormatter.formatErrorSync(error)[0];
+        if (issue === undefined)
+            return undefined;
+        const path = issue.path.length === 0 ? "document" : issue.path.map(String).join(".");
+        const expected = issue.message.split(", actual ", 1)[0] ?? issue.message;
+        const message = expected.length <= 512
+            ? expected
+            : `${expected.slice(0, 511)}…`;
+        return `${path}: ${message}`;
+    }
+    catch {
+        return undefined;
+    }
+}
 /**
  * Assertion producers own normalization and ID allocation. This builder owns
  * neither Record paths nor blob streams: the later Attachment adapter supplies
@@ -35,19 +109,42 @@ function createAssertionsDocumentBuilder(input) {
             entries.push(Object.freeze({ entryId: entryId.right, ...entry }));
             return effect_1.Either.right(entryId.right);
         },
-        seal() {
+        seal(sealInput = {}) {
             if (sealed !== undefined) {
                 return effect_1.Either.right(sealed);
             }
-            const document = Object.freeze({
+            const maximumBytes = sealInput.maximumBytes ?? codec_ts_1.MAX_ASSERTION_DOCUMENT_BYTES;
+            if (!Number.isSafeInteger(maximumBytes) || maximumBytes <= 0 || maximumBytes > codec_ts_1.MAX_ASSERTION_DOCUMENT_BYTES) {
+                return effect_1.Either.left(invalidDocument(`Assertions framing has no positive entry budget within the ${codec_ts_1.MAX_ASSERTION_DOCUMENT_BYTES}-byte limit. ` +
+                    "Reduce assertion source sites or assertion count and retry."));
+            }
+            let document = Object.freeze({
                 entries: Object.freeze([...entries]),
             });
             if (!(0, codec_ts_1.isAssertionsRawDataGraph)(document)) {
-                return effect_1.Either.left({ code: "assertions-document-invalid" });
+                return effect_1.Either.left(invalidDocument("Assertions could not be saved because an entry contains a cyclic or non-JSON value. " +
+                    "Upgrade NiceEval and retry; if this persists, report assertions-document-invalid."));
+            }
+            let documentBytes = encodedBytes(document);
+            if (documentBytes > maximumBytes) {
+                document = Object.freeze({ entries: compactEntries(document.entries, "root") });
+                documentBytes = encodedBytes(document);
+            }
+            if (documentBytes > maximumBytes) {
+                document = Object.freeze({ entries: compactEntries(document.entries, "minimal") });
+                documentBytes = encodedBytes(document);
+            }
+            if (documentBytes > maximumBytes) {
+                return effect_1.Either.left(invalidDocument(`Assertions could not be saved after diagnostic compaction because entry framing is ` +
+                    `${documentBytes} bytes; ${maximumBytes} bytes remain after source sites within the ` +
+                    `${codec_ts_1.MAX_ASSERTION_DOCUMENT_BYTES}-byte limit. Large subject and evidence snapshots are already ` +
+                    "stored as blobs; reduce assertion count or matcher/display identity and retry."));
             }
             const encoded = effect_1.Schema.encodeUnknownEither(input.documentSchema, codec_ts_1.AssertionsExactParseOptions)(document);
             if (effect_1.Either.isLeft(encoded)) {
-                return effect_1.Either.left({ code: "assertions-document-invalid" });
+                const issue = firstSchemaIssue(encoded.left);
+                return effect_1.Either.left(invalidDocument(`Assertions could not be saved${issue === undefined ? "" : ` because ${issue}`}. ` +
+                    "Upgrade NiceEval and retry; if this persists, report assertions-document-invalid."));
             }
             sealed = document;
             return effect_1.Either.right(document);

package/dist/assertions/record/producer.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"producer.js","sourceRoot":"","sources":["producer.ts"],"names":[],"mappings":";;AA0CA,0EAiDC;AA3FD,mCAAwC;AACxC,yCAA4G;AAoC5G;;;;GAIG;AACH,SAAgB,+BAA+B,CAAmB,KAGjE;IACG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,IAAI,MAA+C,CAAC;IACpD,MAAM,OAAO,GAAuC;QAChD,MAAM,CAAC,KAAmC;YACtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,eAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,eAAM,CAAC,mBAAmB,CAAC,iCAAsB,EAAE,sCAA2B,CAAC,CAAC,WAAW,CAAC,CAAC;YAC7G,IAAI,eAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,OAAO,eAAM,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,WAAW;iBACvB,CAAC,CAAC;YACP,CAAC;YACD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,eAAM,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,WAAW;iBACvB,CAAC,CAAC;YACP,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAClE,OAAO,eAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,IAAI;YACA,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,eAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,QAAQ,GAAgC,MAAM,CAAC,MAAM,CAAC;gBACxD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;aACvC,CAAC,CAAC;YACH,IAAI,CAAC,IAAA,mCAAwB,EAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,OAAO,eAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,OAAO,GAAG,eAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,cAAc,EAAE,sCAA2B,CAAC,CAAC,QAAQ,CAAC,CAAC;YACxG,IAAI,eAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,OAAO,eAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,GAAG,QAAQ,CAAC;YAClB,OAAO,eAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;KACJ,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC","sourcesContent":["import { Either, Schema } from \"effect\";\nimport { AssertionEntryIdSchema, AssertionsExactParseOptions, isAssertionsRawDataGraph, } from \"./codec.ts\";\nimport type { AssertionDisplay, AssertionEntryId, AssertionEntry, AssertionLimitation, AssertionMaterial, AssertionCoverage, AssertionsDocument, SealedAssertionResult, WritableCriterionEnvelope, } from \"./model.ts\";\nexport interface AssertionEntryInput<BlobRef> {\n    readonly display: AssertionDisplay;\n    readonly criterion: WritableCriterionEnvelope;\n    readonly subject: AssertionMaterial<BlobRef>;\n    readonly evidence: readonly AssertionMaterial<BlobRef>[];\n    readonly coverage: AssertionCoverage;\n    readonly limitations: readonly AssertionLimitation[];\n    readonly result: SealedAssertionResult;\n}\nexport interface AssertionsEntryIdSource {\n    /** Must return a fresh `ae_[a-z0-9]{20}` candidate for this Attachment. */\n    readonly next: () => string;\n}\nexport type AssertionsProducerError = {\n    readonly code: \"assertion-entry-id-invalid\";\n    readonly entryId: string;\n} | {\n    readonly code: \"assertion-entry-id-duplicate\";\n    readonly entryId: string;\n} | {\n    readonly code: \"assertions-document-sealed\";\n} | {\n    readonly code: \"assertions-document-invalid\";\n};\nexport interface AssertionsDocumentBuilder<BlobRef> {\n    /** Appends exactly one completed Assertion in declaration/display order. */\n    readonly append: (entry: AssertionEntryInput<BlobRef>) => Either.Either<AssertionEntryId, AssertionsProducerError>;\n    /**\n     * Checks the writer-only exact document schema once and prevents subsequent\n     * appends. Repeated calls return the same sealed document without running\n     * an evaluator or minting another entry ID.\n     */\n    readonly seal: () => Either.Either<AssertionsDocument<BlobRef>, AssertionsProducerError>;\n}\n/**\n * Assertion producers own normalization and ID allocation. This builder owns\n * neither Record paths nor blob streams: the later Attachment adapter supplies\n * Record's local builder, so an entry cannot borrow another Attachment's ref.\n */\nexport function createAssertionsDocumentBuilder<BlobRef, Encoded>(input: {\n    readonly documentSchema: Schema.Schema<AssertionsDocument<BlobRef>, Encoded>;\n    readonly entryIds: AssertionsEntryIdSource;\n}): AssertionsDocumentBuilder<BlobRef> {\n    const entryIds = new Set<string>();\n    const entries: AssertionEntry<BlobRef>[] = [];\n    let sealed: AssertionsDocument<BlobRef> | undefined;\n    const builder: AssertionsDocumentBuilder<BlobRef> = {\n        append(entry: AssertionEntryInput<BlobRef>): Either.Either<AssertionEntryId, AssertionsProducerError> {\n            if (sealed !== undefined) {\n                return Either.left({ code: \"assertions-document-sealed\" });\n            }\n            const entryIdText = input.entryIds.next();\n            const entryId = Schema.decodeUnknownEither(AssertionEntryIdSchema, AssertionsExactParseOptions)(entryIdText);\n            if (Either.isLeft(entryId)) {\n                return Either.left({\n                    code: \"assertion-entry-id-invalid\",\n                    entryId: entryIdText,\n                });\n            }\n            if (entryIds.has(entryId.right)) {\n                return Either.left({\n                    code: \"assertion-entry-id-duplicate\",\n                    entryId: entryIdText,\n                });\n            }\n            entryIds.add(entryId.right);\n            entries.push(Object.freeze({ entryId: entryId.right, ...entry }));\n            return Either.right(entryId.right);\n        },\n        seal(): Either.Either<AssertionsDocument<BlobRef>, AssertionsProducerError> {\n            if (sealed !== undefined) {\n                return Either.right(sealed);\n            }\n            const document: AssertionsDocument<BlobRef> = Object.freeze({\n                entries: Object.freeze([...entries]),\n            });\n            if (!isAssertionsRawDataGraph(document)) {\n                return Either.left({ code: \"assertions-document-invalid\" });\n            }\n            const encoded = Schema.encodeUnknownEither(input.documentSchema, AssertionsExactParseOptions)(document);\n            if (Either.isLeft(encoded)) {\n                return Either.left({ code: \"assertions-document-invalid\" });\n            }\n            sealed = document;\n            return Either.right(document);\n        },\n    };\n    return Object.freeze(builder);\n}\n"]}
+{"version":3,"file":"producer.js","sourceRoot":"","sources":["producer.ts"],"names":[],"mappings":";;AAuHA,0EA0EC;AAjMD,mCAAqD;AACrD,yCAA0I;AA2B1I,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAC/B,SAAS,YAAY,CAAC,KAAc;IAChC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AACzD,CAAC;AACD,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,MAAM;IACN,SAAS;IACT,MAAM;IACN,UAAU;IACV,UAAU;IACV,QAAQ;IACR,SAAS;CACH,CAAC,CAAC;AACZ,SAAS,iBAAiB,CAAC,UAA6B,EAAE,IAAwB;IAC9E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,8EAA8E;YACvF,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,gBAAgB;aAC3B,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IACD,MAAM,IAAI,GAAgD,EAAE,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS;YACnB,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,gBAAgB;KAC3B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AACD,SAAS,iBAAiB,CAAC,MAA6B,EAAE,IAAwB;IAC9E,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAC/B,OAAO,MAAM,CAAC;IAClB,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC9D,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,KAAK,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,KAAK,aAAa,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3E,CAAC;AACL,CAAC;AACD,SAAS,cAAc,CAAU,OAA2C,EAAE,IAAwB;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACtD,GAAG,KAAK;QACR,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC;KAChD,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AACD,SAAS,eAAe,CAAC,OAAe;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,6BAAsC,EAAE,OAAO,EAAE,CAAC,CAAC;AACpF,CAAC;AACD,SAAS,gBAAgB,CAAC,KAA6B;IACnD,IAAI,CAAC;QACD,MAAM,KAAK,GAAG,oBAAW,CAAC,cAAc,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,KAAK,KAAK,SAAS;YACnB,OAAO,SAAS,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC;QACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG;YAClC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;QACnC,OAAO,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,CAAC;QACH,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC;AAaD;;;;GAIG;AACH,SAAgB,+BAA+B,CAAmB,KAGjE;IACG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,IAAI,MAA+C,CAAC;IACpD,MAAM,OAAO,GAAuC;QAChD,MAAM,CAAC,KAAmC;YACtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,eAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,eAAM,CAAC,mBAAmB,CAAC,iCAAsB,EAAE,sCAA2B,CAAC,CAAC,WAAW,CAAC,CAAC;YAC7G,IAAI,eAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,OAAO,eAAM,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,WAAW;iBACvB,CAAC,CAAC;YACP,CAAC;YACD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,eAAM,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,WAAW;iBACvB,CAAC,CAAC;YACP,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAClE,OAAO,eAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,YAED,EAAE;YACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,eAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,IAAI,uCAA4B,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC,IAAI,YAAY,GAAG,uCAA4B,EAAE,CAAC;gBAC1G,OAAO,eAAM,CAAC,IAAI,CAAC,eAAe,CAAC,8DAA8D,uCAA4B,eAAe;oBACxI,6DAA6D,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,QAAQ,GAAgC,MAAM,CAAC,MAAM,CAAC;gBACtD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;aACvC,CAAC,CAAC;YACH,IAAI,CAAC,IAAA,mCAAwB,EAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,OAAO,eAAM,CAAC,IAAI,CAAC,eAAe,CAAC,sFAAsF;oBACrH,mFAAmF,CAAC,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;gBAC/B,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChF,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;gBAC/B,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;gBACnF,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;gBAC/B,OAAO,eAAM,CAAC,IAAI,CAAC,eAAe,CAAC,qFAAqF;oBACpH,GAAG,aAAa,WAAW,YAAY,8CAA8C;oBACrF,GAAG,uCAA4B,gEAAgE;oBAC/F,gFAAgF,CAAC,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,OAAO,GAAG,eAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,cAAc,EAAE,sCAA2B,CAAC,CAAC,QAAQ,CAAC,CAAC;YACxG,IAAI,eAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC7C,OAAO,eAAM,CAAC,IAAI,CAAC,eAAe,CAAC,gCAAgC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,IAAI;oBACjH,mFAAmF,CAAC,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,GAAG,QAAQ,CAAC;YAClB,OAAO,eAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;KACJ,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC","sourcesContent":["import { Either, ParseResult, Schema } from \"effect\";\nimport { AssertionEntryIdSchema, AssertionsExactParseOptions, MAX_ASSERTION_DOCUMENT_BYTES, isAssertionsRawDataGraph, } from \"./codec.ts\";\nimport type { BoundedJsonObject, BoundedJsonValue, AssertionDisplay, AssertionEntryId, AssertionEntry, AssertionLimitation, AssertionMaterial, AssertionCoverage, AssertionsDocument, SealedAssertionResult, WritableCriterionEnvelope, } from \"./model.ts\";\nexport interface AssertionEntryInput<BlobRef> {\n    readonly display: AssertionDisplay;\n    readonly criterion: WritableCriterionEnvelope;\n    readonly subject: AssertionMaterial<BlobRef>;\n    readonly evidence: readonly AssertionMaterial<BlobRef>[];\n    readonly coverage: AssertionCoverage;\n    readonly limitations: readonly AssertionLimitation[];\n    readonly result: SealedAssertionResult;\n}\nexport interface AssertionsEntryIdSource {\n    /** Must return a fresh `ae_[a-z0-9]{20}` candidate for this Attachment. */\n    readonly next: () => string;\n}\nexport type AssertionsProducerError = {\n    readonly code: \"assertion-entry-id-invalid\";\n    readonly entryId: string;\n} | {\n    readonly code: \"assertion-entry-id-duplicate\";\n    readonly entryId: string;\n} | {\n    readonly code: \"assertions-document-sealed\";\n} | {\n    readonly code: \"assertions-document-invalid\";\n    readonly message: string;\n};\nconst UTF8 = new TextEncoder();\nfunction encodedBytes(value: unknown): number {\n    return UTF8.encode(JSON.stringify(value)).byteLength;\n}\nconst DIAGNOSTIC_ROOT_KEYS = Object.freeze([\n    \"code\",\n    \"message\",\n    \"path\",\n    \"expected\",\n    \"received\",\n    \"reason\",\n    \"locator\",\n] as const);\nfunction compactDiagnostic(diagnostic: BoundedJsonObject, mode: \"root\" | \"minimal\"): BoundedJsonObject {\n    if (mode === \"minimal\") {\n        return Object.freeze({\n            code: \"diagnostic-truncated\",\n            message: \"matcher diagnostic details were omitted to fit the Assertions document limit\",\n            path: Object.freeze([]),\n            truncation: Object.freeze({\n                code: \"diagnostic-truncated\",\n                reason: \"document-limit\",\n            }),\n        });\n    }\n    const root: globalThis.Record<string, BoundedJsonValue> = {};\n    for (const key of DIAGNOSTIC_ROOT_KEYS) {\n        const value = diagnostic[key];\n        if (value !== undefined)\n            root[key] = value;\n    }\n    root.truncation = Object.freeze({\n        code: \"diagnostic-truncated\",\n        reason: \"document-limit\",\n    });\n    return Object.freeze(root);\n}\nfunction replaceDiagnostic(result: SealedAssertionResult, mode: \"root\" | \"minimal\"): SealedAssertionResult {\n    if (result.diagnostic === undefined)\n        return result;\n    const diagnostic = compactDiagnostic(result.diagnostic, mode);\n    switch (result.state) {\n        case \"matched\": return Object.freeze({ ...result, diagnostic });\n        case \"mismatched\": return Object.freeze({ ...result, diagnostic });\n        case \"unavailable\": return Object.freeze({ ...result, diagnostic });\n        case \"errored\": return Object.freeze({ ...result, diagnostic });\n        case \"not-applicable\": return Object.freeze({ ...result, diagnostic });\n    }\n}\nfunction compactEntries<BlobRef>(entries: readonly AssertionEntry<BlobRef>[], mode: \"root\" | \"minimal\"): readonly AssertionEntry<BlobRef>[] {\n    return Object.freeze(entries.map((entry) => Object.freeze({\n        ...entry,\n        result: replaceDiagnostic(entry.result, mode),\n    })));\n}\nfunction invalidDocument(message: string): AssertionsProducerError {\n    return Object.freeze({ code: \"assertions-document-invalid\" as const, message });\n}\nfunction firstSchemaIssue(error: ParseResult.ParseError): string | undefined {\n    try {\n        const issue = ParseResult.ArrayFormatter.formatErrorSync(error)[0];\n        if (issue === undefined)\n            return undefined;\n        const path = issue.path.length === 0 ? \"document\" : issue.path.map(String).join(\".\");\n        const expected = issue.message.split(\", actual \", 1)[0] ?? issue.message;\n        const message = expected.length <= 512\n            ? expected\n            : `${expected.slice(0, 511)}…`;\n        return `${path}: ${message}`;\n    }\n    catch {\n        return undefined;\n    }\n}\nexport interface AssertionsDocumentBuilder<BlobRef> {\n    /** Appends exactly one completed Assertion in declaration/display order. */\n    readonly append: (entry: AssertionEntryInput<BlobRef>) => Either.Either<AssertionEntryId, AssertionsProducerError>;\n    /**\n     * Checks the writer-only exact document schema once and prevents subsequent\n     * appends. Repeated calls return the same sealed document without running\n     * an evaluator or minting another entry ID.\n     */\n    readonly seal: (input?: {\n        readonly maximumBytes?: number;\n    }) => Either.Either<AssertionsDocument<BlobRef>, AssertionsProducerError>;\n}\n/**\n * Assertion producers own normalization and ID allocation. This builder owns\n * neither Record paths nor blob streams: the later Attachment adapter supplies\n * Record's local builder, so an entry cannot borrow another Attachment's ref.\n */\nexport function createAssertionsDocumentBuilder<BlobRef, Encoded>(input: {\n    readonly documentSchema: Schema.Schema<AssertionsDocument<BlobRef>, Encoded>;\n    readonly entryIds: AssertionsEntryIdSource;\n}): AssertionsDocumentBuilder<BlobRef> {\n    const entryIds = new Set<string>();\n    const entries: AssertionEntry<BlobRef>[] = [];\n    let sealed: AssertionsDocument<BlobRef> | undefined;\n    const builder: AssertionsDocumentBuilder<BlobRef> = {\n        append(entry: AssertionEntryInput<BlobRef>): Either.Either<AssertionEntryId, AssertionsProducerError> {\n            if (sealed !== undefined) {\n                return Either.left({ code: \"assertions-document-sealed\" });\n            }\n            const entryIdText = input.entryIds.next();\n            const entryId = Schema.decodeUnknownEither(AssertionEntryIdSchema, AssertionsExactParseOptions)(entryIdText);\n            if (Either.isLeft(entryId)) {\n                return Either.left({\n                    code: \"assertion-entry-id-invalid\",\n                    entryId: entryIdText,\n                });\n            }\n            if (entryIds.has(entryId.right)) {\n                return Either.left({\n                    code: \"assertion-entry-id-duplicate\",\n                    entryId: entryIdText,\n                });\n            }\n            entryIds.add(entryId.right);\n            entries.push(Object.freeze({ entryId: entryId.right, ...entry }));\n            return Either.right(entryId.right);\n        },\n        seal(sealInput: {\n            readonly maximumBytes?: number;\n        } = {}): Either.Either<AssertionsDocument<BlobRef>, AssertionsProducerError> {\n            if (sealed !== undefined) {\n                return Either.right(sealed);\n            }\n            const maximumBytes = sealInput.maximumBytes ?? MAX_ASSERTION_DOCUMENT_BYTES;\n            if (!Number.isSafeInteger(maximumBytes) || maximumBytes <= 0 || maximumBytes > MAX_ASSERTION_DOCUMENT_BYTES) {\n                return Either.left(invalidDocument(`Assertions framing has no positive entry budget within the ${MAX_ASSERTION_DOCUMENT_BYTES}-byte limit. ` +\n                    \"Reduce assertion source sites or assertion count and retry.\"));\n            }\n            let document: AssertionsDocument<BlobRef> = Object.freeze({\n                entries: Object.freeze([...entries]),\n            });\n            if (!isAssertionsRawDataGraph(document)) {\n                return Either.left(invalidDocument(\"Assertions could not be saved because an entry contains a cyclic or non-JSON value. \" +\n                    \"Upgrade NiceEval and retry; if this persists, report assertions-document-invalid.\"));\n            }\n            let documentBytes = encodedBytes(document);\n            if (documentBytes > maximumBytes) {\n                document = Object.freeze({ entries: compactEntries(document.entries, \"root\") });\n                documentBytes = encodedBytes(document);\n            }\n            if (documentBytes > maximumBytes) {\n                document = Object.freeze({ entries: compactEntries(document.entries, \"minimal\") });\n                documentBytes = encodedBytes(document);\n            }\n            if (documentBytes > maximumBytes) {\n                return Either.left(invalidDocument(`Assertions could not be saved after diagnostic compaction because entry framing is ` +\n                    `${documentBytes} bytes; ${maximumBytes} bytes remain after source sites within the ` +\n                    `${MAX_ASSERTION_DOCUMENT_BYTES}-byte limit. Large subject and evidence snapshots are already ` +\n                    \"stored as blobs; reduce assertion count or matcher/display identity and retry.\"));\n            }\n            const encoded = Schema.encodeUnknownEither(input.documentSchema, AssertionsExactParseOptions)(document);\n            if (Either.isLeft(encoded)) {\n                const issue = firstSchemaIssue(encoded.left);\n                return Either.left(invalidDocument(`Assertions could not be saved${issue === undefined ? \"\" : ` because ${issue}`}. ` +\n                    \"Upgrade NiceEval and retry; if this persists, report assertions-document-invalid.\"));\n            }\n            sealed = document;\n            return Either.right(document);\n        },\n    };\n    return Object.freeze(builder);\n}\n"]}

package/dist/assertions/record/producer.d.cts

@@ -23,6 +23,7 @@ export type AssertionsProducerError = {
     readonly code: "assertions-document-sealed";
 } | {
     readonly code: "assertions-document-invalid";
+    readonly message: string;
 };
 export interface AssertionsDocumentBuilder<BlobRef> {
     /** Appends exactly one completed Assertion in declaration/display order. */
@@ -32,7 +33,9 @@ export interface AssertionsDocumentBuilder<BlobRef> {
      * appends. Repeated calls return the same sealed document without running
      * an evaluator or minting another entry ID.
      */
-    readonly seal: () => Either.Either<AssertionsDocument<BlobRef>, AssertionsProducerError>;
+    readonly seal: (input?: {
+        readonly maximumBytes?: number;
+    }) => Either.Either<AssertionsDocument<BlobRef>, AssertionsProducerError>;
 }
 /**
  * Assertion producers own normalization and ID allocation. This builder owns

package/dist/assertions/record/producer.d.mts

@@ -23,6 +23,7 @@ export type AssertionsProducerError = {
     readonly code: "assertions-document-sealed";
 } | {
     readonly code: "assertions-document-invalid";
+    readonly message: string;
 };
 export interface AssertionsDocumentBuilder<BlobRef> {
     /** Appends exactly one completed Assertion in declaration/display order. */
@@ -32,7 +33,9 @@ export interface AssertionsDocumentBuilder<BlobRef> {
      * appends. Repeated calls return the same sealed document without running
      * an evaluator or minting another entry ID.
      */
-    readonly seal: () => Either.Either<AssertionsDocument<BlobRef>, AssertionsProducerError>;
+    readonly seal: (input?: {
+        readonly maximumBytes?: number;
+    }) => Either.Either<AssertionsDocument<BlobRef>, AssertionsProducerError>;
 }
 /**
  * Assertion producers own normalization and ID allocation. This builder owns

package/dist/assertions/record/producer.d.ts

@@ -23,6 +23,7 @@ export type AssertionsProducerError = {
     readonly code: "assertions-document-sealed";
 } | {
     readonly code: "assertions-document-invalid";
+    readonly message: string;
 };
 export interface AssertionsDocumentBuilder<BlobRef> {
     /** Appends exactly one completed Assertion in declaration/display order. */
@@ -32,7 +33,9 @@ export interface AssertionsDocumentBuilder<BlobRef> {
      * appends. Repeated calls return the same sealed document without running
      * an evaluator or minting another entry ID.
      */
-    readonly seal: () => Either.Either<AssertionsDocument<BlobRef>, AssertionsProducerError>;
+    readonly seal: (input?: {
+        readonly maximumBytes?: number;
+    }) => Either.Either<AssertionsDocument<BlobRef>, AssertionsProducerError>;
 }
 /**
  * Assertion producers own normalization and ID allocation. This builder owns

package/dist/assertions/runtime.cjs

@@ -224,13 +224,21 @@ function captureAssertionSnapshot(value) {
  * bounded JSON copy that keeps their tree (field children and locators) for
  * show/view without granting those readers evaluator authority.
  */
-function captureMatchDiagnostic(value, depth = 0, seen = new WeakSet()) {
+function captureMatchDiagnostic(value, depth = 0, seen = new WeakSet(), budget = { remainingNodes: limits_ts_1.assertionRuntimeLimits.diagnosticNodes }) {
     if (value === undefined)
         return undefined;
-    if (depth >= limits_ts_1.assertionRuntimeLimits.jsonDepth || seen.has(value)) {
+    if (budget.remainingNodes <= 0) {
         return Object.freeze({
             code: "diagnostic-truncated",
-            message: depth >= limits_ts_1.assertionRuntimeLimits.jsonDepth
+            message: "matcher diagnostic exceeded the persisted node limit",
+            path: Object.freeze([]),
+        });
+    }
+    budget.remainingNodes -= 1;
+    if (depth >= limits_ts_1.assertionRuntimeLimits.diagnosticDepth || seen.has(value)) {
+        return Object.freeze({
+            code: "diagnostic-truncated",
+            message: depth >= limits_ts_1.assertionRuntimeLimits.diagnosticDepth
                 ? "matcher diagnostic exceeded the persisted depth limit"
                 : "matcher diagnostic contained a cycle",
             path: Object.freeze([]),
@@ -258,23 +266,55 @@ function captureMatchDiagnostic(value, depth = 0, seen = new WeakSet()) {
                 ? Object.freeze({ kind: "json-pointer", pointer: text(value.locator.pointer) })
                 : Object.freeze({ kind: "tool-occurrence", id: text(value.locator.id) });
         }
+        if (value.truncation !== undefined) {
+            output.truncation = Object.freeze({ ...value.truncation });
+        }
         if (value.children !== undefined) {
             const children = [];
             for (const child of value.children.slice(0, limits_ts_1.assertionRuntimeLimits.jsonArrayItems)) {
+                if (budget.remainingNodes <= 0)
+                    break;
                 const entry = {
                     index: child.index,
                     state: child.state,
                 };
                 if (child.label !== undefined)
                     entry.label = text(child.label);
-                const diagnostic = captureMatchDiagnostic(child.diagnostic, depth + 1, seen);
+                const diagnostic = captureMatchDiagnostic(child.diagnostic, depth + 1, seen, budget);
                 if (diagnostic !== undefined)
                     entry.diagnostic = diagnostic;
                 children.push(Object.freeze(entry));
             }
             output.children = Object.freeze(children);
+            if (children.length < value.children.length && output.truncation === undefined) {
+                output.truncation = Object.freeze({
+                    code: "diagnostic-truncated",
+                    reason: "sampled",
+                    captured: children.length,
+                    knownTotal: value.children.length,
+                });
+            }
         }
-        return Object.freeze(output);
+        const captured = Object.freeze(output);
+        const serialized = JSON.stringify(captured);
+        const originalBytes = UTF8.encode(serialized).byteLength;
+        if (originalBytes <= limits_ts_1.assertionRuntimeLimits.diagnosticBytes)
+            return captured;
+        return Object.freeze({
+            code: output.code,
+            message: output.message,
+            path: output.path,
+            ...(output.expected === undefined ? {} : { expected: output.expected }),
+            ...(output.received === undefined ? {} : { received: output.received }),
+            ...(output.reason === undefined ? {} : { reason: output.reason }),
+            ...(output.locator === undefined ? {} : { locator: output.locator }),
+            truncation: Object.freeze({
+                code: "diagnostic-truncated",
+                reason: "byte-limit",
+                limitBytes: limits_ts_1.assertionRuntimeLimits.diagnosticBytes,
+                originalBytes,
+            }),
+        });
     }
     finally {
         seen.delete(value);