@sanity/ailf 2.9.0 → 3.0.0

package/dist/_vendor/ailf-core/artifact-registry.d.ts

@@ -41,7 +41,7 @@ export type ArtifactMime = "application/json" | "application/x-ndjson" | "text/m
  */
 export type ArtifactTruncationPolicy = "reject" | "trailing-truncate" | "fielded-truncate" | "trial-oversize";
 /** The union of every artifact type known to AILF. */
-export type ArtifactType = "runManifest" | "scoreSummary" | "pipelineResult" | "pipelineContext" | "documentManifest" | "prComment" | "readinessReport" | "reportSnapshot" | "autoComparison" | "gapReport" | "sinkResults" | "callbackRequest" | "callbackResponse" | "configSnapshot" | "evalConfigGenerated" | "comparisonReport" | "discoveryReport" | "failureModes" | "taskDefinitions" | "renderedPrompts" | "rawResults" | "testOutputs" | "graderPrompts" | "graderJudgments" | "traces" | "evalResults";
+export type ArtifactType = "runManifest" | "scoreSummary" | "pipelineResult" | "pipelineContext" | "documentManifest" | "prComment" | "readinessReport" | "reportSnapshot" | "autoComparison" | "gapReport" | "sinkResults" | "callbackRequest" | "callbackResponse" | "configSnapshot" | "evalConfigGenerated" | "comparisonReport" | "discoveryReport" | "failureModes" | "taskDefinitions" | "renderedPrompts" | "rawResults" | "testOutputs" | "graderPrompts" | "graderJudgments" | "traces";
 /**
  * Result of parsing a per-entry key into a sanitized filename component.
  * Success carries the sanitized value; failure carries a reason for 4xx responses.

package/dist/_vendor/ailf-core/artifact-registry.js

@@ -333,7 +333,7 @@ function buildDescriptor(input) {
     };
 }
 // ---------------------------------------------------------------------------
-// The registry — 21 live descriptors + 1 deprecated (evalResults)
+// The registry — 21 live descriptors
 // ---------------------------------------------------------------------------
 /**
  * The canonical artifact descriptor for every artifact type. Iterate with
@@ -630,23 +630,6 @@ export const ARTIFACT_REGISTRY = {
         capBytes: 10_000_000,
         truncation: "trial-oversize",
     }),
-    /**
-     * @deprecated Emit removed in W0050 (no producer calls `emit("evalResults")`
-     * any more — `emit-eval-results.ts` decomposes the promptfoo aggregate into
-     * per-entry rawResults / renderedPrompts / graderPrompts / graderJudgments
-     * instead). Descriptor retained for read-compat on pre-W0050 reports until
-     * W0052 removes it entirely. No code path should re-introduce emission.
-     */
-    evalResults: buildDescriptor({
-        type: "evalResults",
-        slug: "eval-results",
-        layout: "bulk",
-        axes: ["run"],
-        entrySchema: unknownEntry,
-        mime: "application/json",
-        capBytes: 10_000_000,
-        optional: true,
-    }),
 };
 /** All artifact types in declaration order. */
 export const ARTIFACT_TYPES = Object.keys(ARTIFACT_REGISTRY);

package/dist/_vendor/ailf-core/batch-signing.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Batch signed-URL types (D0033 / W0052 M3).
+ *
+ * Contract shared between the API Gateway and Studio for the two batch
+ * endpoints that amortise signing over many artifacts in a single round-trip:
+ *
+ *   POST /v1/runs/:runId/artifacts/batch/read-urls
+ *   POST /v1/runs/:runId/artifacts/batch/upload-urls
+ *
+ * The batch shape is intentionally symmetric: request carries the set of
+ * artifact types and (for per-entry layouts) the entry keys; response carries
+ * signed URLs keyed by type and entry key. For bulk layouts the response key
+ * is the empty string, since bulk artifacts have no entry dimension.
+ *
+ * Validation is all-or-nothing per AC 4 — a single malformed entry key, an
+ * unknown artifact type, or a missing keys list for a per-entry type causes
+ * the whole request to 400 with zero signed URLs emitted.
+ *
+ * @see docs/design-docs/unified-run-artifacts.md § M3
+ * @see docs/decisions/D0033-unified-run-anchored-artifact-capture.md
+ */
+import type { ArtifactType } from "./artifact-registry.js";
+/** The empty entry-key sentinel used for bulk responses. */
+export declare const BULK_ENTRY_KEY: "";
+/**
+ * Batch request body.
+ *
+ * - `types` — the artifact types to sign. Must be non-empty. Unknown types
+ *   cause a 400.
+ * - `keys` — per-type arrays of entry keys. Required for per-entry layouts;
+ *   omitted (or an empty array) for bulk layouts. Extra keys for a bulk type
+ *   are rejected; missing keys for a per-entry type are rejected.
+ */
+export interface BatchSignRequest {
+    readonly types: readonly ArtifactType[];
+    readonly keys?: Partial<Record<ArtifactType, readonly string[]>>;
+}
+/** One signed read URL in a batch read response. */
+export interface BatchSignedReadUrl {
+    readonly url: string;
+    readonly path: string;
+    readonly expiresIn: number;
+}
+/** One signed upload URL in a batch upload response. */
+export interface BatchSignedUploadUrl {
+    readonly url: string;
+    readonly method: "PUT";
+    readonly path: string;
+    readonly expiresIn: number;
+    readonly requiredHeaders: Readonly<Record<string, string>>;
+}
+/**
+ * Batch response. Outer map is keyed by artifact type; inner map is keyed by
+ * entry key (empty string for bulk layouts). All types requested in the
+ * request body are present in the response, even when `keys[type]` was empty.
+ */
+export interface BatchSignReadResponse {
+    readonly bucket: string;
+    readonly urls: Partial<Record<ArtifactType, Readonly<Record<string, BatchSignedReadUrl>>>>;
+}
+export interface BatchSignUploadResponse {
+    readonly bucket: string;
+    readonly urls: Partial<Record<ArtifactType, Readonly<Record<string, BatchSignedUploadUrl>>>>;
+}

package/dist/_vendor/ailf-core/batch-signing.js

@@ -0,0 +1,23 @@
+/**
+ * Batch signed-URL types (D0033 / W0052 M3).
+ *
+ * Contract shared between the API Gateway and Studio for the two batch
+ * endpoints that amortise signing over many artifacts in a single round-trip:
+ *
+ *   POST /v1/runs/:runId/artifacts/batch/read-urls
+ *   POST /v1/runs/:runId/artifacts/batch/upload-urls
+ *
+ * The batch shape is intentionally symmetric: request carries the set of
+ * artifact types and (for per-entry layouts) the entry keys; response carries
+ * signed URLs keyed by type and entry key. For bulk layouts the response key
+ * is the empty string, since bulk artifacts have no entry dimension.
+ *
+ * Validation is all-or-nothing per AC 4 — a single malformed entry key, an
+ * unknown artifact type, or a missing keys list for a per-entry type causes
+ * the whole request to 400 with zero signed URLs emitted.
+ *
+ * @see docs/design-docs/unified-run-artifacts.md § M3
+ * @see docs/decisions/D0033-unified-run-anchored-artifact-capture.md
+ */
+/** The empty entry-key sentinel used for bulk responses. */
+export const BULK_ENTRY_KEY = "";

package/dist/_vendor/ailf-core/index.d.ts

@@ -16,9 +16,9 @@ export * from "./ports/index.js";
 export * from "./services/index.js";
 export * from "./examples/index.js";
 export * from "./artifact-registry.js";
+export * from "./batch-signing.js";
 export { defineConfig, defineFeatures, defineModeBase, defineModels, definePricingTable, definePreset, definePrompts, defineRubrics, defineSchedules, defineSinks, defineSources, defineTask, defineThresholds, } from "./config-helpers.js";
 export type { PricingEntry, PromptEntry, SourceEntry, } from "./config-helpers.js";
 export { env } from "./env-helper.js";
-export { NoOpArtifactCollector } from "./artifact-capture/noop-collector.js";
 export { NoOpArtifactWriter, NotImplementedError, } from "./ports/artifact-writer.js";
 export { assoc, type AssocContext } from "./artifact-capture/association.js";

package/dist/_vendor/ailf-core/index.js

@@ -16,11 +16,11 @@ export * from "./ports/index.js";
 export * from "./services/index.js";
 export * from "./examples/index.js";
 export * from "./artifact-registry.js";
+export * from "./batch-signing.js";
 // ---------------------------------------------------------------------------
 // Architecture overhaul — Phase 0 helpers
 // ---------------------------------------------------------------------------
 export { defineConfig, defineFeatures, defineModeBase, defineModels, definePricingTable, definePreset, definePrompts, defineRubrics, defineSchedules, defineSinks, defineSources, defineTask, defineThresholds, } from "./config-helpers.js";
 export { env } from "./env-helper.js";
-export { NoOpArtifactCollector } from "./artifact-capture/noop-collector.js";
 export { NoOpArtifactWriter, NotImplementedError, } from "./ports/artifact-writer.js";
 export { assoc } from "./artifact-capture/association.js";

package/dist/_vendor/ailf-core/ports/context.d.ts

@@ -13,7 +13,6 @@
  */
 import type { RunId } from "../types/branded-ids.js";
 import type { DebugOptions, EvalMode, PluginRegistry } from "../types/index.js";
-import type { ArtifactCollector } from "./artifact-collector.js";
 import type { ArtifactWriter } from "./artifact-writer.js";
 import type { CacheStore } from "./cache-store.js";
 import type { DocFetcher } from "./doc-fetcher.js";
@@ -153,19 +152,10 @@ export interface ResolvedConfig {
     apiKey?: string;
     /** External preset file paths or npm package names to load */
     presets?: string[];
-    /** Whether artifact capture is enabled for this run (default: false) */
-    captureEnabled?: boolean;
-    /** Base directory for capture output (default: results/captures/) */
-    captureDir?: string;
-    /** Whether to compress capture output to tar.gz (default: true) */
-    captureCompress?: boolean;
-    /** Whether to include mode-specific extra artifacts (default: true) */
-    captureExtras?: boolean;
     /**
-     * D0033 / W0049 — the unified artifact surface. Wired into the writer in
-     * W0050; consumed by the writer factory to decide whether to attach a
-     * writer at all, where it writes to, and what to skip. These fields are
-     * additive and do not replace the legacy `capture*` fields until W0052.
+     * D0033 unified artifact surface. Consumed by the writer factory to
+     * decide whether to attach a writer at all, where it writes to, and
+     * what to skip. Legacy `capture*` fields were retired in W0052.
      */
     /** Disables all artifact writers — `--no-artifacts`. */
     artifactsDisabled?: boolean;
@@ -173,12 +163,8 @@ export interface ResolvedConfig {
     artifactsDir?: string;
     /** Run writers in dry-run mode — `--artifacts-dry-run`. */
     artifactsDryRun?: boolean;
-    /** Comma-separated artifact types to skip — `--capture-exclude`. */
+    /** Comma-separated artifact types to skip — `--artifacts-exclude`. */
     artifactsExclude?: readonly string[];
-    /** GCS bucket for capture upload (enables GCS decorator when set) */
-    captureGcsBucket?: string;
-    /** GCS object prefix for capture uploads (default: "captures/") */
-    captureGcsPrefix?: string;
     /**
      * GCS bucket for report artifact uploads. Defaults to "ailf-artifacts"
      * at the composition root — only set this to override (e.g., self-hosted
@@ -221,8 +207,6 @@ export interface AppContext {
     readonly artifactWriter: ArtifactWriter;
     /** Evaluation caching (filesystem + optional Content Lake fallback) */
     readonly cache?: CacheStore;
-    /** Artifact capture collector (no-op when --capture is not set) */
-    readonly collector: ArtifactCollector;
     /** Resolved pipeline configuration */
     readonly config: ResolvedConfig;
     /** Documentation context fetcher */

package/dist/_vendor/ailf-core/ports/index.d.ts

@@ -4,10 +4,8 @@
  * Ports define the contracts between the domain kernel and the outside world.
  * Adapters (in packages/eval) implement these interfaces.
  */
-export type { ArtifactCollector, CaptureFlushResult, CaptureManifest, CaptureManifestEntry, } from "./artifact-collector.js";
 export type { ArtifactEntry, ArtifactWriter } from "./artifact-writer.js";
 export { NoOpArtifactWriter } from "./artifact-writer.js";
-export type { ArtifactContentDiff, CaptureDiffReport, ComparisonMode, ComparisonOptions, InventoryDiff, JsonDiffEntry, MetadataComparison, ScoreComparison, SecurityScan, TimingComparison, } from "./capture-comparator.js";
 export type { CacheEntryMetadata, CacheKey, CacheLookupResult, CacheRecordInput, CacheStore, } from "./cache-store.js";
 export type { ConfigSource } from "./config-source.js";
 export type { AppContext, ReportSinkPort, ReportStorePort, ResolvedConfig, } from "./context.js";

package/dist/adapters/config-sources/file-config-adapter.js

@@ -120,10 +120,6 @@ function mapEvalConfigToResolvedConfig(config, rootDir) {
         allowedOrigins: config.allowedOrigins,
         searchMode: config.searchMode ?? "open",
         concurrency: config.concurrency,
-        captureEnabled: false,
-        captureDir: undefined,
-        captureCompress: true,
-        captureExtras: true,
         remote: false,
         apiUrl: "https://ailf-api.sanity.build",
         presets: config.presets,

package/dist/artifact-capture/redact-artifact.d.ts

@@ -1,9 +1,7 @@
 /**
- * Artifact redaction — strips sensitive data from captured artifacts before
- * they are written to disk.
- *
- * Applied during FilesystemArtifactCollector.flush() so that secrets
- * (resolved env vars, auth headers, session cookies) never reach storage.
+ * Artifact redaction — strips sensitive data from written artifacts so that
+ * secrets (resolved env vars, auth headers, session cookies) never reach
+ * local or remote storage.
  *
  * Two-layer approach:
  * 1. **Header stripping** — known-sensitive HTTP header keys are replaced

package/dist/artifact-capture/redact-artifact.js

@@ -1,9 +1,7 @@
 /**
- * Artifact redaction — strips sensitive data from captured artifacts before
- * they are written to disk.
- *
- * Applied during FilesystemArtifactCollector.flush() so that secrets
- * (resolved env vars, auth headers, session cookies) never reach storage.
+ * Artifact redaction — strips sensitive data from written artifacts so that
+ * secrets (resolved env vars, auth headers, session cookies) never reach
+ * local or remote storage.
  *
  * Two-layer approach:
  * 1. **Header stripping** — known-sensitive HTTP header keys are replaced

package/dist/cli.js

@@ -76,6 +76,60 @@ else if (process.argv.includes("--quiet") || process.argv.includes("-q")) {
     process.env.AILF_LOG_LEVEL = "quiet";
 }
 // ---------------------------------------------------------------------------
+// W0052 — hard-error on retired capture flags and env vars.
+// --------------------------------------------------------------------------
+// The legacy collector has been removed. Callers still using
+// --capture / --capture-dir / --no-capture-compress / --no-capture-extras
+// or AILF_CAPTURE* / AILF_LEGACY_COLLECTOR / AILF_UNIFIED_ARTIFACTS must
+// migrate to --artifacts-dir / --no-artifacts / --artifacts-exclude. We
+// print a clear pointer so failures don't bubble up as opaque "unknown
+// option" errors from Commander.
+// ---------------------------------------------------------------------------
+const RETIRED_FLAGS = [
+    "--capture",
+    "--capture-dir",
+    "--no-capture-compress",
+    "--no-capture-extras",
+    "--capture-exclude",
+];
+const RETIRED_ENV_VARS = [
+    "AILF_CAPTURE",
+    "AILF_CAPTURE_DIR",
+    "AILF_CAPTURE_COMPRESS",
+    "AILF_CAPTURE_EXTRAS",
+    "AILF_CAPTURE_GCS_BUCKET",
+    "AILF_CAPTURE_GCS_PREFIX",
+    "AILF_LEGACY_COLLECTOR",
+    "AILF_UNIFIED_ARTIFACTS",
+];
+function findRetiredFlag() {
+    for (const arg of process.argv) {
+        const bare = arg.split("=")[0];
+        if (RETIRED_FLAGS.includes(bare)) {
+            return bare;
+        }
+    }
+    return undefined;
+}
+function findRetiredEnv() {
+    for (const name of RETIRED_ENV_VARS) {
+        if (process.env[name] !== undefined)
+            return name;
+    }
+    return undefined;
+}
+const retiredFlag = findRetiredFlag();
+const retiredEnv = findRetiredEnv();
+if (retiredFlag || retiredEnv) {
+    const source = retiredFlag
+        ? `flag "${retiredFlag}"`
+        : `environment variable "${retiredEnv}"`;
+    console.error(`❌ ${source} was retired in W0052 along with the legacy artifact collector.`);
+    console.error("   Use --artifacts-dir / --no-artifacts / --artifacts-exclude instead.");
+    console.error("   See docs/cli.md and docs/decisions/D0033-unified-run-anchored-artifact-capture.md.");
+    process.exit(2);
+}
+// ---------------------------------------------------------------------------
 // Build CLI program
 // ---------------------------------------------------------------------------
 import { Command } from "commander";
@@ -134,6 +188,8 @@ import { createBaselineCommand } from "./commands/baseline.js";
 program.addCommand(createBaselineCommand().helpGroup(CommandGroup.CoreWorkflow));
 import { createPublishCommand } from "./commands/publish.js";
 program.addCommand(createPublishCommand().helpGroup(CommandGroup.CoreWorkflow));
+import { createRunsCommand } from "./commands/runs.js";
+program.addCommand(createRunsCommand().helpGroup(CommandGroup.CoreWorkflow));
 // ── Analysis & Reports ────────────────────────────────────────────────
 import { createReadinessReportCommand } from "./commands/readiness-report.js";
 program.addCommand(createReadinessReportCommand().helpGroup(CommandGroup.AnalysisReports));
@@ -179,8 +235,6 @@ program.addCommand(createLookupDocCommand().helpGroup(CommandGroup.PipelineInter
 import { createWebhookServerCommand } from "./commands/webhook-server.js";
 program.addCommand(createWebhookServerCommand().helpGroup(CommandGroup.PipelineInternals));
 // ── Developer Tools ───────────────────────────────────────────────────
-import { createCaptureCommand } from "./commands/capture.js";
-program.addCommand(createCaptureCommand().helpGroup(CommandGroup.DeveloperTools));
 import { createInteractiveCommand } from "./commands/interactive.js";
 program.addCommand(createInteractiveCommand().helpGroup(CommandGroup.DeveloperTools));
 // Shell completion — must be registered last (needs full program tree)

package/dist/commands/explain-handler.js

@@ -723,14 +723,10 @@ async function buildPipelineExplainPlan(actionCommand, rootDir) {
         taskSource: raw.taskSource,
         remoteCache: raw.remoteCache,
         config: raw.config,
-        capture: raw.capture ?? false,
-        captureCompress: raw.captureCompress ?? true,
-        captureExtras: raw.captureExtras ?? true,
-        captureDir: raw.captureDir,
         artifacts: raw.artifacts ?? true,
         artifactsDir: raw.artifactsDir,
         artifactsDryRun: raw.artifactsDryRun ?? false,
-        captureExclude: raw.captureExclude,
+        artifactsExclude: raw.artifactsExclude,
     };
     const resolved = computeResolvedOptions(withDefaults);
     const planOpts = {

package/dist/commands/pipeline-action.d.ts

@@ -63,10 +63,6 @@ export interface ResolvedOptions {
     urlArgs: string[];
     apiUrl: string;
     apiKey?: string;
-    captureEnabled: boolean;
-    captureDir?: string;
-    captureCompress: boolean;
-    captureExtras: boolean;
     /** D0033 / W0049 — unified artifact surface (W0050 wires it into writer). */
     artifactsDisabled: boolean;
     artifactsDir?: string;

package/dist/commands/pipeline-action.js

@@ -263,32 +263,25 @@ export function computeResolvedOptions(opts) {
         tagOption,
         taskSourceType: resolvedTaskSourceType,
         urlArgs,
-        captureEnabled: opts.capture,
-        captureDir: resolveArtifactsDir(opts),
-        captureCompress: opts.captureCompress !== false &&
-            process.env.AILF_CAPTURE_COMPRESS !== "0",
-        captureExtras: opts.captureExtras !== false && process.env.AILF_CAPTURE_EXTRAS !== "0",
         artifactsDisabled: opts.artifacts === false,
         artifactsDir: resolveArtifactsDir(opts),
         artifactsDryRun: opts.artifactsDryRun,
-        artifactsExclude: parseCaptureExcludeList(opts.captureExclude),
+        artifactsExclude: parseArtifactsExcludeList(opts.artifactsExclude),
     };
 }
 /**
- * Resolve the artifacts / capture output directory from CLI flags and env
- * vars. Precedence (highest first):
+ * Resolve the artifacts output directory from CLI flags and env vars.
+ * Precedence (highest first):
  *   1. `--artifacts-dir` flag
- *   2. `--capture-dir` flag (deprecated alias; no warning — silent rewrite)
- *   3. `AILF_ARTIFACTS_DIR` env var
- *   4. `AILF_CAPTURE_DIR` env var (deprecated alias; silent)
+ *   2. `AILF_ARTIFACTS_DIR` env var
+ *
+ * The `--capture-dir` / `AILF_CAPTURE_DIR` aliases were retired in W0052;
+ * callers of those names are rejected at CLI entry (see cli.ts).
  */
 function resolveArtifactsDir(opts) {
-    return (opts.artifactsDir ??
-        opts.captureDir ??
-        process.env.AILF_ARTIFACTS_DIR ??
-        process.env.AILF_CAPTURE_DIR);
+    return opts.artifactsDir ?? process.env.AILF_ARTIFACTS_DIR;
 }
-function parseCaptureExcludeList(raw) {
+function parseArtifactsExcludeList(raw) {
     if (!raw)
         return undefined;
     const list = raw
@@ -309,20 +302,6 @@ function resolveTaskSourceType(raw) {
 // ---------------------------------------------------------------------------
 // Pipeline entry point
 // ---------------------------------------------------------------------------
-/**
- * Module-level flag so the `--capture` deprecation warning fires exactly
- * once per process even when `executePipeline` is invoked multiple times
- * (e.g. tests, long-lived dev loops).
- */
-let warnedCaptureDeprecation = false;
-function warnCaptureDeprecationIfNeeded(cliOpts) {
-    if (!cliOpts.capture)
-        return;
-    if (warnedCaptureDeprecation)
-        return;
-    warnedCaptureDeprecation = true;
-    console.warn("--capture is deprecated and will be removed in a future release; use --artifacts-dir or --no-artifacts instead");
-}
 /**
  * Execute the evaluation pipeline.
  *
@@ -332,7 +311,6 @@ function warnCaptureDeprecationIfNeeded(cliOpts) {
  * 4. Delegate to the PipelineOrchestrator
  */
 export async function executePipeline(cliOpts) {
-    warnCaptureDeprecationIfNeeded(cliOpts);
     // When --config is provided, resolve config from file instead of CLI flags
     if (cliOpts.config) {
         const { existsSync } = await import("fs");
@@ -357,25 +335,13 @@ export async function executePipeline(cliOpts) {
         }
         // Output dir: explicit CLI flag → $CWD/.ailf/results/latest/
         config.outputDir = resolveOutputDir(cliOpts.outputDir);
-        // Capture options — CLI flags and env vars aren't in the config file,
+        // Artifact options — CLI flags and env vars aren't in the config file,
         // so merge them here (same logic as resolveOptions).
-        // AILF_CAPTURE is a no-op post-W0049; only the flag toggles captureEnabled.
-        config.captureEnabled = cliOpts.capture;
         const resolvedArtifactsDir = resolveArtifactsDir(cliOpts);
-        if (resolvedArtifactsDir) {
-            config.captureDir = resolvedArtifactsDir;
-        }
-        config.captureCompress =
-            cliOpts.captureCompress !== false &&
-                process.env.AILF_CAPTURE_COMPRESS !== "0";
-        config.captureExtras =
-            cliOpts.captureExtras !== false && process.env.AILF_CAPTURE_EXTRAS !== "0";
-        config.captureGcsBucket ??= process.env.AILF_CAPTURE_GCS_BUCKET;
-        config.captureGcsPrefix ??= process.env.AILF_CAPTURE_GCS_PREFIX;
         config.artifactsDisabled ??= cliOpts.artifacts === false;
         config.artifactsDir ??= resolvedArtifactsDir;
         config.artifactsDryRun ??= cliOpts.artifactsDryRun;
-        const excludeList = parseCaptureExcludeList(cliOpts.captureExclude);
+        const excludeList = parseArtifactsExcludeList(cliOpts.artifactsExclude);
         if (excludeList) {
             config.artifactsExclude = excludeList;
         }

package/dist/commands/pipeline.d.ts

@@ -64,13 +64,9 @@ export interface PipelineCliOptions {
     url: string[];
     urls: string[];
     apiUrl?: string;
-    capture: boolean;
-    captureDir?: string;
-    captureCompress: boolean;
-    captureExtras: boolean;
     artifacts: boolean;
     artifactsDir?: string;
     artifactsDryRun: boolean;
-    captureExclude?: string;
+    artifactsExclude?: string;
 }
 export declare function createPipelineCommand(): Command;

package/dist/commands/pipeline.js

@@ -54,14 +54,10 @@ export function createPipelineCommand() {
         .option("--repo-tasks-path <path>", "Path to repo-based task definitions (.ailf/tasks/ directory)")
         .option("--remote", "Submit evaluation to the AILF API instead of running locally", false)
         .option("--api-url <url>", "AILF API base URL (default: https://ailf-api.sanity.build)")
-        .option("--capture", "[DEPRECATED] Enable legacy artifact capture. Use --artifacts-dir / --no-artifacts instead.", false)
-        .option("--capture-dir <path>", "[DEPRECATED] Alias for --artifacts-dir.")
-        .option("--no-capture-compress", "Disable tar.gz compression of captures")
-        .option("--no-capture-extras", "Exclude mode-specific artifacts from captures")
         .option("--no-artifacts", "Disable all artifact writers (D0033). Overrides --artifacts-dir.")
         .option("--artifacts-dir <path>", "Root directory for local artifact output (D0033; default: .ailf/results/captures/)")
         .option("--artifacts-dry-run", "Run artifact writers in dry-run mode — log intended writes, touch no storage", false)
-        .option("--capture-exclude <types>", "Comma-separated artifact types to skip (e.g. traces,graderPrompts)")
+        .option("--artifacts-exclude <types>", "Comma-separated artifact types to skip (e.g. traces,graderPrompts)")
         .action(async (opts) => {
         const { executePipeline } = await import("./pipeline-action.js");
         await executePipeline(opts);

package/dist/commands/runs.d.ts

@@ -0,0 +1,18 @@
+/**
+ * runs command — utilities for working with run-anchored artifacts on disk.
+ *
+ * The unified artifact writer (D0033 M4) lays artifacts down under
+ * `.ailf/results/captures/runs/{runId}/…`. Downstream tooling (CI archivers,
+ * external consumers that used to parse the legacy collector tarball) still
+ * want a single-file bundle. `runs export --format tarball` reproduces that
+ * bundle from the existing tree — no re-materialisation, just a tar of the
+ * files already written.
+ *
+ * The on-disk layout is identical to what the legacy FilesystemArtifactCollector
+ * produced (same paths, same filenames), so the tarball shape is stable for
+ * existing consumers.
+ *
+ * @see docs/decisions/D0033-unified-run-anchored-artifact-capture.md
+ */
+import { Command } from "commander";
+export declare function createRunsCommand(): Command;

package/dist/commands/runs.js

@@ -0,0 +1,71 @@
+/**
+ * runs command — utilities for working with run-anchored artifacts on disk.
+ *
+ * The unified artifact writer (D0033 M4) lays artifacts down under
+ * `.ailf/results/captures/runs/{runId}/…`. Downstream tooling (CI archivers,
+ * external consumers that used to parse the legacy collector tarball) still
+ * want a single-file bundle. `runs export --format tarball` reproduces that
+ * bundle from the existing tree — no re-materialisation, just a tar of the
+ * files already written.
+ *
+ * The on-disk layout is identical to what the legacy FilesystemArtifactCollector
+ * produced (same paths, same filenames), so the tarball shape is stable for
+ * existing consumers.
+ *
+ * @see docs/decisions/D0033-unified-run-anchored-artifact-capture.md
+ */
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { Command } from "commander";
+const DEFAULT_ARTIFACTS_DIR = ".ailf/results/captures";
+function resolveArtifactsDir(flag) {
+    return resolve(flag ?? process.env.AILF_ARTIFACTS_DIR ?? DEFAULT_ARTIFACTS_DIR);
+}
+function resolveOutputPath(explicit, artifactsDir, runId) {
+    if (explicit)
+        return resolve(explicit);
+    return resolve(artifactsDir, `runs-${runId}.tar.gz`);
+}
+function exportTarball(opts) {
+    if (opts.format !== "tarball") {
+        console.error(`❌ Unsupported --format "${opts.format}". Supported: tarball.`);
+        return 2;
+    }
+    const artifactsDir = resolveArtifactsDir(opts.artifactsDir);
+    const runRoot = resolve(artifactsDir, "runs", opts.runId);
+    if (!existsSync(runRoot)) {
+        console.error(`❌ No artifacts on disk for run "${opts.runId}" at ${runRoot}`);
+        console.error("   Set --artifacts-dir / AILF_ARTIFACTS_DIR or check the runId.");
+        return 1;
+    }
+    const outputPath = resolveOutputPath(opts.output, artifactsDir, opts.runId);
+    const outputDir = dirname(outputPath);
+    mkdirSync(outputDir, { recursive: true });
+    // Spawn system tar — the unified tree is byte-for-byte identical to the
+    // legacy collector's output, so `tar -czf` produces a tarball with the
+    // same file list consumers depended on.
+    const tar = spawnSync("tar", ["-czf", outputPath, "-C", resolve(artifactsDir, "runs"), opts.runId], { stdio: "inherit" });
+    if (tar.status !== 0) {
+        console.error(`❌ tar exited with status ${tar.status}`);
+        return tar.status ?? 1;
+    }
+    console.log(`  ✅ Exported ${runRoot} → ${outputPath}`);
+    return 0;
+}
+export function createRunsCommand() {
+    const cmd = new Command("runs").description("Utilities for working with run-anchored artifact trees on disk");
+    cmd
+        .command("export")
+        .description("Export a run's artifact tree to a portable archive. Only `--format tarball` is supported.")
+        .requiredOption("--run-id <runId>", "Run id to export (required)")
+        .option("--format <fmt>", "Output format (currently only: tarball)", "tarball")
+        .option("--artifacts-dir <path>", "Override the root directory containing runs/{runId}/… (default: .ailf/results/captures)")
+        .option("-o, --output <path>", "Output archive path (default: {artifacts-dir}/runs-{runId}.tar.gz)")
+        .action((opts) => {
+        const code = exportTarball(opts);
+        if (code !== 0)
+            process.exit(code);
+    });
+    return cmd;
+}