@sanity/ailf 4.4.0 → 4.5.0

package/dist/commands/pipeline-action.js

@@ -265,7 +265,13 @@ export function computeResolvedOptions(opts) {
     const apiUrl = process.env.AILF_API_URL ??
         repoConfig?.execution?.apiUrl ??
         "https://ailf-api.sanity.build";
-    const apiKey = process.env.AILF_API_KEY ?? undefined;
+    // W0202 — `--api-key` flag wins over the env var. The CLI's dotenv
+    // bootstrap (`cli.ts`) loads the project `.env` with `override: true`,
+    // matching the repo convention that the file is the source of truth
+    // (see `.claude/rules/config.md`). That convention silently squashes
+    // shell-set `AILF_API_KEY`, so an explicit per-run flag is the only
+    // ergonomic way to pick a non-default key for one invocation.
+    const apiKey = opts.apiKey ?? process.env.AILF_API_KEY ?? undefined;
     // Output directory (W0077 Phase 6c) — `output.dir` from .ailf/config.yaml
     // when set, otherwise <cwd>/.ailf/results/latest/.
     const outputDir = resolveOutputDir(repoConfig?.output?.dir);

package/dist/commands/run.d.ts

@@ -60,5 +60,6 @@ export interface PipelineCliOptions {
     classification?: string;
     purpose?: string;
     label: string[];
+    apiKey?: string;
 }
 export declare function createRunCommand(): Command;

package/dist/commands/run.js

@@ -47,6 +47,7 @@ export function createRunCommand() {
         .option("-o, --output <path>", "Write PR comment markdown to file")
         .option("--promptfoo-url <url>", "Promptfoo share URL for report")
         .option("--remote", "Submit evaluation to the AILF API instead of running locally", false)
+        .option("--api-key <value>", "API key for --remote dispatch. Wins over AILF_API_KEY and any value loaded from the project .env file (W0202).")
         .option("--no-artifacts-write", "Run artifact writers in dry-run mode — log intended writes, touch no storage")
         // D0037 caller envelope (W0069) — threads through --remote so the
         // server-side pipeline attributes provenance to the caller, not the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanity/ailf",
-  "version": "4.4.0",
+  "version": "4.5.0",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -55,8 +55,8 @@
     "tsx": "^4.19.2",
     "typescript": "^5.7.3",
     "vitest": "^4.1.5",
-    "@sanity/ailf-core": "0.1.0",
-    "@sanity/ailf-shared": "0.1.0"
+    "@sanity/ailf-shared": "0.1.0",
+    "@sanity/ailf-core": "0.1.0"
   },
   "scripts": {
     "build": "tsc && tsx scripts/bundle-workspace-deps.ts",