modelrig 0.8.1 → 0.10.0

package/dist/artifacts/artifact.js

@@ -2,7 +2,7 @@
 /**
  * Artifact namespace — Expansion E2 chunk B (spec §2.2, §9).
  *
- * `save/load/link/evaluate` over a durable work product's METADATA. The
+ * `save/load/link` over a durable work product's METADATA. The
  * serialized value is hashed (sha256, node:crypto — no new dep) and the bytes
  * are DISCARDED; nothing but the metadata row is persisted (the 00030
  * counter-annotation). Lineage v0: artifacts saved within a run get
@@ -22,6 +22,17 @@ const run_context_1 = require("./run-context");
 const scrub_1 = require("./scrub");
 const classification_1 = require("./classification");
 const task_settings_1 = require("../settings/task-settings");
+const manifest_1 = require("../prompts/manifest");
+/** The configured scrub mode for one artifact save (BEFORE the S8-c PII/PHI
+ * floor). Resolved EXACTLY as capture-write.ts / samples.ts do: a configured
+ * control plane WINS (`resolver.get(task).scrub`), else the rig's default. A
+ * task with no identity to key on falls back to the default (no row to resolve).
+ * Pure and synchronous — the resolver read is cache-only. */
+function resolveContentScrubMode(content, task) {
+    return content.resolver !== null && task !== undefined
+        ? content.resolver.get(task).scrub
+        : content.defaultScrub;
+}
 /** Map an artifact `type` to a content-type for the object store. */
 function contentTypeFor(type) {
     const t = type.toLowerCase();
@@ -33,6 +44,9 @@ function contentTypeFor(type) {
         return "text/csv";
     if (t === "html")
         return "text/html; charset=utf-8";
+    // PSR-1: a structure-only assembly manifest is stored as a linked JSON artifact.
+    if (t === "manifest")
+        return "application/json";
     return "application/octet-stream";
 }
 function idOf(ref) {
@@ -46,9 +60,9 @@ function warn(scope, err) {
 function inertApi() {
     return {
         save: () => null,
+        saveManifest: () => null,
         load: () => { },
         link: () => { },
-        evaluate: () => { },
         promoteToEval: () => null,
         batch: (fn) => fn(),
         flushContent: () => Promise.resolve(),
@@ -151,203 +165,219 @@ function createArtifactApi(deps) {
             }
         }
     }
-    return {
-        save(value, opts) {
-            const ctx = (0, run_context_1.getActiveRunContext)();
-            // zeroRetention: refuse fail-closed BEFORE hashing or building any row.
-            if (ctx !== null && ctx.zeroRetention) {
-                skippedZeroRetention += 1;
-                console.warn(`[modelrig artifacts] zeroRetention run — artifact "${opts.name}" NOT recorded ` +
-                    "(fail-closed at the SDK gate; no metadata, no hash persisted).");
-                return null;
-            }
-            // Hash the serialization, then DISCARD the bytes — metadata + hash only.
-            const serialized = typeof value === "string" ? value : JSON.stringify(value ?? null);
-            const bytes = Buffer.byteLength(serialized, "utf8");
-            const contentHash = `sha256:${(0, node_crypto_1.createHash)("sha256").update(serialized).digest("hex")}`;
-            const schema = opts.schema ?? null;
-            const id = (0, node_crypto_1.randomUUID)();
-            const version = opts.supersedes !== undefined ? opts.supersedes.version + 1 : 1;
-            // G1 (spec §3): an explicit stepKey wins; absent, the artifact lands in the
-            // AMBIENT step — the most recent auto-step in this run context — so
-            // `artifact.save` and the run/@step graph compose. Null outside a step (or
-            // outside a run context), exactly as before.
-            const stepKey = opts.stepKey ?? ctx?.currentStepKey() ?? null;
-            // S8-b: validate data_classification against the shared enum. A bad value
-            // would fail the DB CHECK (00058) and drop the row at ingest, so catch it
-            // here with a teaching warning and drop the LABEL (the artifact still
-            // saves — a metadata typo must not lose the artifact). Normalize first so
-            // "PHI"/" pii " keep their meaning (and their scrub floor) rather than
-            // silently dropping.
-            let classification = (0, classification_1.normalizeClassification)(opts.classification);
-            if (opts.classification !== undefined && classification !== null && !(0, classification_1.isDataClassification)(classification)) {
-                console.warn(`[modelrig artifacts] artifact "${opts.name}" has an unknown data_classification ` +
-                    `${JSON.stringify(opts.classification)} — label dropped (artifact still saved). ` +
-                    `fix_hint: use one of ${classification_1.DATA_CLASSIFICATIONS.join(", ")}.`);
-                classification = null;
-            }
-            // Custody applies only when a rig content policy exists AND the caller left
-            // the bytes to us (a caller-supplied contentRef = their own store; managed
-            // custody must not double-home it).
-            const custodyApplies = content !== undefined && opts.contentRef === undefined;
-            // Scrub is computed HERE (before the row is written) so its counts-only
-            // summary can ride the immutable artifact row (00039). Only when custody
-            // applies; null otherwise (custody off ⇒ nothing was scanned).
-            // S8-c: a `pii`/`phi` artifact forces the scrub mode to a floor of
-            // `redact`, so PII/PHI content is never uploaded verbatim even when the
-            // task's configured mode is `off`/`detect`. A stronger `block` stays.
-            const effScrub = content !== undefined ? (0, task_settings_1.effectiveScrubMode)(content.scrub, classification) : null;
-            const scrubbed = custodyApplies && content !== undefined && effScrub !== null ? (0, scrub_1.scrubContent)(serialized, effScrub) : null;
-            const scrubSummary = scrubbed !== null && effScrub !== null ? (0, scrub_1.summarizeScrub)(effScrub, scrubbed) : null;
-            if (scrubbed !== null)
-                scrubFindings += scrubbed.findings.reduce((n, f) => n + f.count, 0);
-            try {
-                store.recordArtifact({
-                    id,
-                    runId: ctx?.runId ?? null,
-                    // E3: step attribution is an explicit caller-supplied key; G1 adds the
-                    // ambient-step fallback (resolved above) so a save with no stepKey joins
-                    // the current run/@step. Absent both ⇒ null, exactly as before.
-                    stepKey,
-                    attemptNo: opts.attemptNo ?? null,
-                    task: opts.task ?? null,
-                    name: opts.name,
-                    type: opts.type,
-                    version,
-                    supersedesArtifactId: opts.supersedes?.id ?? null,
-                    declaredSchema: schema,
-                    fingerprintCell: (0, fingerprint_1.fingerprintSchema)(schema)?.cellKey ?? null,
-                    contentRef: opts.contentRef ?? null,
-                    contentHash,
-                    contentBytes: bytes,
-                    dataClassification: classification,
-                    expiresAt: opts.expiresAt ?? null,
-                    // Per-row scrub findings ride the original (scanned) row (00039).
-                    scrub: scrubSummary,
-                });
-                saves += 1;
-                if (opts.task !== undefined)
-                    savedTasks.set(id, opts.task); // for promoteToEval (chunk A)
-                // Lineage v0: derived_from edges to everything loaded since the last save.
-                if (ctx !== null) {
-                    for (const loadedId of ctx.takeLoadedIds()) {
-                        if (loadedId === id)
-                            continue; // edges_no_self
-                        store.recordArtifactEdge({ fromArtifactId: id, toArtifactId: loadedId, kind: "derived_from" });
-                        inferredEdges += 1;
-                    }
+    // Extracted so `saveManifest` (PSR-1) can compose them without re-implementing
+    // the custody/lineage save path or the edges_no_self link. The bodies are the
+    // original `save`/`link` verbatim — the returned object references these.
+    const save = (value, opts) => {
+        const ctx = (0, run_context_1.getActiveRunContext)();
+        // zeroRetention: refuse fail-closed BEFORE hashing or building any row.
+        if (ctx !== null && ctx.zeroRetention) {
+            skippedZeroRetention += 1;
+            console.warn(`[modelrig artifacts] zeroRetention run — artifact "${opts.name}" NOT recorded ` +
+                "(fail-closed at the SDK gate; no metadata, no hash persisted).");
+            return null;
+        }
+        // Hash the serialization, then DISCARD the bytes — metadata + hash only.
+        const serialized = typeof value === "string" ? value : JSON.stringify(value ?? null);
+        const bytes = Buffer.byteLength(serialized, "utf8");
+        const contentHash = `sha256:${(0, node_crypto_1.createHash)("sha256").update(serialized).digest("hex")}`;
+        const schema = opts.schema ?? null;
+        const id = (0, node_crypto_1.randomUUID)();
+        const version = opts.supersedes !== undefined ? opts.supersedes.version + 1 : 1;
+        // G1 (spec §3): an explicit stepKey wins; absent, the artifact lands in the
+        // AMBIENT step — the most recent auto-step in this run context — so
+        // `artifact.save` and the run/@step graph compose. Null outside a step (or
+        // outside a run context), exactly as before.
+        const stepKey = opts.stepKey ?? ctx?.currentStepKey() ?? null;
+        // S8-b: validate data_classification against the shared enum. A bad value
+        // would fail the DB CHECK (00058) and drop the row at ingest, so catch it
+        // here with a teaching warning and drop the LABEL (the artifact still
+        // saves — a metadata typo must not lose the artifact). Normalize first so
+        // "PHI"/" pii " keep their meaning (and their scrub floor) rather than
+        // silently dropping.
+        let classification = (0, classification_1.normalizeClassification)(opts.classification);
+        if (opts.classification !== undefined && classification !== null && !(0, classification_1.isDataClassification)(classification)) {
+            console.warn(`[modelrig artifacts] artifact "${opts.name}" has an unknown data_classification ` +
+                `${JSON.stringify(opts.classification)} — label dropped (artifact still saved). ` +
+                `fix_hint: use one of ${classification_1.DATA_CLASSIFICATIONS.join(", ")}.`);
+            classification = null;
+        }
+        // Custody applies only when a rig content policy exists AND the caller left
+        // the bytes to us (a caller-supplied contentRef = their own store; managed
+        // custody must not double-home it).
+        const custodyApplies = content !== undefined && opts.contentRef === undefined;
+        // Scrub is computed HERE (before the row is written) so its counts-only
+        // summary can ride the immutable artifact row (00039). Only when custody
+        // applies; null otherwise (custody off ⇒ nothing was scanned). The
+        // configured mode comes from the per-task/account control-plane setting
+        // (P15 CP-3b — resolver wins; `content.defaultScrub` fallback local/direct).
+        // S8-c: a `pii`/`phi` artifact forces the scrub mode to a floor of
+        // `redact`, so PII/PHI content is never uploaded verbatim even when the
+        // task's configured mode is `off`/`detect`. A stronger `block` stays.
+        const effScrub = content !== undefined
+            ? (0, task_settings_1.effectiveScrubMode)(resolveContentScrubMode(content, opts.task), classification)
+            : null;
+        const scrubbed = custodyApplies && content !== undefined && effScrub !== null ? (0, scrub_1.scrubContent)(serialized, effScrub) : null;
+        const scrubSummary = scrubbed !== null && effScrub !== null ? (0, scrub_1.summarizeScrub)(effScrub, scrubbed) : null;
+        if (scrubbed !== null)
+            scrubFindings += scrubbed.findings.reduce((n, f) => n + f.count, 0);
+        try {
+            store.recordArtifact({
+                id,
+                runId: ctx?.runId ?? null,
+                // E3: step attribution is an explicit caller-supplied key; G1 adds the
+                // ambient-step fallback (resolved above) so a save with no stepKey joins
+                // the current run/@step. Absent both ⇒ null, exactly as before.
+                stepKey,
+                attemptNo: opts.attemptNo ?? null,
+                task: opts.task ?? null,
+                name: opts.name,
+                type: opts.type,
+                version,
+                supersedesArtifactId: opts.supersedes?.id ?? null,
+                declaredSchema: schema,
+                fingerprintCell: (0, fingerprint_1.fingerprintSchema)(schema)?.cellKey ?? null,
+                contentRef: opts.contentRef ?? null,
+                contentHash,
+                contentBytes: bytes,
+                dataClassification: classification,
+                expiresAt: opts.expiresAt ?? null,
+                // Per-row scrub findings ride the original (scanned) row (00039).
+                scrub: scrubSummary,
+            });
+            saves += 1;
+            if (opts.task !== undefined)
+                savedTasks.set(id, opts.task); // for promoteToEval (chunk A)
+            // Lineage v0: derived_from edges to everything loaded since the last save.
+            if (ctx !== null) {
+                for (const loadedId of ctx.takeLoadedIds()) {
+                    if (loadedId === id)
+                        continue; // edges_no_self
+                    store.recordArtifactEdge({ fromArtifactId: id, toArtifactId: loadedId, kind: "derived_from" });
+                    inferredEdges += 1;
                 }
             }
-            catch (err) {
-                warn("save", err);
-                return null;
+        }
+        catch (err) {
+            warn("save", err);
+            return null;
+        }
+        // ── Content custody (E2-C) ──────────────────────────────────────────
+        // Off by default: only when a rig has configured content custody. The
+        // metadata row above is written regardless — content is layered on, never
+        // a precondition. zeroRetention already returned above, so we never reach
+        // here for a zeroRetention run (structural, not re-checked).
+        if (content !== undefined && scrubbed !== null) {
+            if (scrubbed.blocked) {
+                // `block` mode found PII/PHI → content upload refused (counted). The
+                // artifact keeps its metadata + hash; it simply stores no content.
+                contentBlocked += 1;
+                console.warn(`[modelrig artifacts] scrub blocked content for "${opts.name}" ` +
+                    `(${scrubbed.findings.length} finding type(s)); metadata + hash kept, no content stored.`);
             }
-            // ── Content custody (E2-C) ──────────────────────────────────────────
-            // Off by default: only when a rig has configured content custody. The
-            // metadata row above is written regardless — content is layered on, never
-            // a precondition. zeroRetention already returned above, so we never reach
-            // here for a zeroRetention run (structural, not re-checked).
-            if (content !== undefined && scrubbed !== null) {
-                if (scrubbed.blocked) {
-                    // `block` mode found PII/PHI → content upload refused (counted). The
-                    // artifact keeps its metadata + hash; it simply stores no content.
-                    contentBlocked += 1;
-                    console.warn(`[modelrig artifacts] scrub blocked content for "${opts.name}" ` +
-                        `(${scrubbed.findings.length} finding type(s)); metadata + hash kept, no content stored.`);
-                }
-                else if (effScrub === "redact" && scrubbed.findings.length > 0 && scrubbed.text !== null) {
-                    // Redaction is a SUPERSEDING version (immutability): the original row
-                    // keeps its hash and stores NO content; a new version records the
-                    // masked content's hash and uploads the masked bytes.
-                    const maskedSerialized = scrubbed.text;
-                    const maskedBytes = Buffer.byteLength(maskedSerialized, "utf8");
-                    const maskedHash = `sha256:${(0, node_crypto_1.createHash)("sha256").update(maskedSerialized).digest("hex")}`;
-                    const redactedId = (0, node_crypto_1.randomUUID)();
-                    const redactedVersion = version + 1;
-                    try {
-                        store.recordArtifact({
-                            id: redactedId,
-                            runId: ctx?.runId ?? null,
-                            // Same ambient-step resolution as the original row it supersedes.
-                            stepKey,
-                            attemptNo: opts.attemptNo ?? null,
-                            task: opts.task ?? null,
-                            name: opts.name,
-                            type: opts.type,
-                            version: redactedVersion,
-                            supersedesArtifactId: id, // supersedes the original (ruling c column)
-                            declaredSchema: schema,
-                            fingerprintCell: (0, fingerprint_1.fingerprintSchema)(schema)?.cellKey ?? null,
-                            contentRef: null,
-                            contentHash: maskedHash,
-                            contentBytes: maskedBytes,
-                            dataClassification: classification,
-                            expiresAt: opts.expiresAt ?? null,
-                            // Findings ride the original scanned row; the masked version stores
-                            // no PII, so its own scrub is null (avoid double-counting).
-                            scrub: null,
-                        });
-                        saves += 1;
-                        fireUpload({
-                            artifactId: redactedId,
-                            contentType: contentTypeFor(opts.type),
-                            body: Buffer.from(maskedSerialized, "utf8"),
-                            contentHash: maskedHash,
-                        }, content.upload);
-                        // The live version is the redacted one — hand its handle back.
-                        return { id: redactedId, name: opts.name, type: opts.type, version: redactedVersion };
-                    }
-                    catch (err) {
-                        warn("save (redacted version)", err);
-                        // Fall through to returning the original handle (metadata-only).
-                    }
-                }
-                else {
-                    // off / detect / redact-with-no-findings: upload the bytes verbatim.
+            else if (effScrub === "redact" && scrubbed.findings.length > 0 && scrubbed.text !== null) {
+                // Redaction is a SUPERSEDING version (immutability): the original row
+                // keeps its hash and stores NO content; a new version records the
+                // masked content's hash and uploads the masked bytes.
+                const maskedSerialized = scrubbed.text;
+                const maskedBytes = Buffer.byteLength(maskedSerialized, "utf8");
+                const maskedHash = `sha256:${(0, node_crypto_1.createHash)("sha256").update(maskedSerialized).digest("hex")}`;
+                const redactedId = (0, node_crypto_1.randomUUID)();
+                const redactedVersion = version + 1;
+                try {
+                    store.recordArtifact({
+                        id: redactedId,
+                        runId: ctx?.runId ?? null,
+                        // Same ambient-step resolution as the original row it supersedes.
+                        stepKey,
+                        attemptNo: opts.attemptNo ?? null,
+                        task: opts.task ?? null,
+                        name: opts.name,
+                        type: opts.type,
+                        version: redactedVersion,
+                        supersedesArtifactId: id, // supersedes the original (ruling c column)
+                        declaredSchema: schema,
+                        fingerprintCell: (0, fingerprint_1.fingerprintSchema)(schema)?.cellKey ?? null,
+                        contentRef: null,
+                        contentHash: maskedHash,
+                        contentBytes: maskedBytes,
+                        dataClassification: classification,
+                        expiresAt: opts.expiresAt ?? null,
+                        // Findings ride the original scanned row; the masked version stores
+                        // no PII, so its own scrub is null (avoid double-counting).
+                        scrub: null,
+                    });
+                    saves += 1;
                     fireUpload({
-                        artifactId: id,
+                        artifactId: redactedId,
                         contentType: contentTypeFor(opts.type),
-                        body: Buffer.from(scrubbed.text ?? serialized, "utf8"),
-                        contentHash,
+                        body: Buffer.from(maskedSerialized, "utf8"),
+                        contentHash: maskedHash,
                     }, content.upload);
+                    // The live version is the redacted one — hand its handle back.
+                    return { id: redactedId, name: opts.name, type: opts.type, version: redactedVersion };
+                }
+                catch (err) {
+                    warn("save (redacted version)", err);
+                    // Fall through to returning the original handle (metadata-only).
                 }
             }
-            return { id, name: opts.name, type: opts.type, version };
-        },
+            else {
+                // off / detect / redact-with-no-findings: upload the bytes verbatim.
+                fireUpload({
+                    artifactId: id,
+                    contentType: contentTypeFor(opts.type),
+                    body: Buffer.from(scrubbed.text ?? serialized, "utf8"),
+                    contentHash,
+                }, content.upload);
+            }
+        }
+        return { id, name: opts.name, type: opts.type, version };
+    };
+    const link = (from, to, kind) => {
+        const fromId = idOf(from);
+        const toId = idOf(to);
+        if (fromId === toId)
+            return; // edges_no_self
+        try {
+            store.recordArtifactEdge({ fromArtifactId: fromId, toArtifactId: toId, kind });
+        }
+        catch (err) {
+            warn("link", err);
+        }
+    };
+    // PSR-1: validate a structure-only manifest, save it as a linked `manifest`
+    // artifact (ZERO-DDL free-text type), and chain `prompt → manifest` via
+    // derived_from. Never throws; an invalid manifest is a counted, teaching warn.
+    const saveManifest = (prompt, manifest, opts) => {
+        const result = (0, manifest_1.validateManifest)(manifest);
+        if (!result.ok) {
+            console.warn(`[modelrig artifacts] manifest for prompt "${idOf(prompt)}" is invalid — not emitted: ` +
+                `${result.errors.join("; ")}`);
+            return null;
+        }
+        const promptName = typeof prompt === "string" ? undefined : prompt.name;
+        const name = opts?.name ?? (promptName !== undefined ? `${promptName}.manifest` : "manifest");
+        const handle = save(JSON.stringify(result.manifest), {
+            name,
+            type: "manifest",
+            ...(opts?.task !== undefined ? { task: opts.task } : {}),
+            ...(opts?.stepKey !== undefined ? { stepKey: opts.stepKey } : {}),
+            ...(opts?.attemptNo !== undefined ? { attemptNo: opts.attemptNo } : {}),
+        });
+        if (handle === null)
+            return null; // custody/zeroRetention refused — no edge.
+        // Chain prompt → manifest: the prompt is assembled per this manifest recipe.
+        link(prompt, handle, "derived_from");
+        return handle;
+    };
+    return {
+        save,
+        saveManifest,
         load(ref) {
             (0, run_context_1.getActiveRunContext)()?.noteLoad(idOf(ref));
         },
-        link(from, to, kind) {
-            const fromId = idOf(from);
-            const toId = idOf(to);
-            if (fromId === toId)
-                return; // edges_no_self
-            try {
-                store.recordArtifactEdge({ fromArtifactId: fromId, toArtifactId: toId, kind });
-            }
-            catch (err) {
-                warn("link", err);
-            }
-        },
-        evaluate(ref, opts) {
-            try {
-                store.recordArtifactEvaluation({
-                    id: (0, node_crypto_1.randomUUID)(),
-                    artifactId: idOf(ref),
-                    runId: null,
-                    evaluator: opts.evaluator,
-                    evaluatorKind: opts.kind,
-                    score: opts.score ?? null,
-                    passed: opts.passed ?? null,
-                    label: opts.label ?? null,
-                    explanation: opts.explanation ?? null,
-                    createdBy: null,
-                });
-            }
-            catch (err) {
-                warn("evaluate", err);
-            }
-        },
+        link,
         promoteToEval(ref, opts) {
             const sourceArtifactId = idOf(ref);
             // Resolve the task: explicit wins, else the task this artifact was saved

package/dist/artifacts/index.d.ts

@@ -3,19 +3,22 @@
  *
  * Lives here (not spread through `index.ts`) so the SDK entrypoint stays under
  * the LOC cap and the run/artifact surface has one home. Chunk A ships the run
- * lifecycle + `@step`; chunk B adds the artifact primitives (save/load/evaluate).
+ * lifecycle + `@step`; chunk B adds the artifact primitives (save/load/link).
  */
 import type { ArtifactBuffer, RunNamespace } from "./run-context";
 import type { ArtifactApi, ArtifactContentDeps } from "./artifact";
 import type { ArtifactContentConfig, ArtifactsConfig } from "../config";
+import type { TaskSettingsResolver } from "../settings/task-settings";
 import type { ArtifactStore } from "../telemetry/artifact-store";
 export { getActiveRunContext, createRunNamespace } from "./run-context";
-export type { RunNamespace, RunHandle, RunStartOptions, RunEvaluateOptions, RunStatus, ActiveRunContext, ArtifactBuffer, GroundTruthStepInput, } from "./run-context";
+export type { RunNamespace, RunHandle, RunStartOptions, RunStatus, ActiveRunContext, ArtifactBuffer, GroundTruthStepInput, } from "./run-context";
 export { step } from "./step";
 export { createArtifactApi } from "./artifact";
 export { openArtifactStore } from "../telemetry/artifact-store";
 export type { ArtifactStore } from "../telemetry/artifact-store";
-export type { ArtifactApi, ArtifactHandle, ArtifactSaveOptions, ArtifactEvaluateOptions, ArtifactPromoteOptions, ArtifactContentDeps, ArtifactContentUploader, } from "./artifact";
+export type { ArtifactApi, ArtifactHandle, ArtifactSaveOptions, ArtifactManifestOptions, ArtifactPromoteOptions, ArtifactContentDeps, ArtifactContentUploader, } from "./artifact";
+export { validateManifest, assertValidManifest, parseAuthoringDoc } from "../prompts/manifest";
+export type { Slot, SlotKind, Manifest, DynamicSource, DynamicSourceKind, CachePolicy, StaticFrom, ManifestValidation, AuthoringDoc, } from "../prompts/manifest";
 export { uploadArtifactContent } from "./content-uploader";
 export type { ContentUploadConfig, ContentUploadInput, ContentUploadOutcome, } from "./content-uploader";
 export { scrubContent, luhnValid, detectSpans, scrubDetectors } from "./scrub";
@@ -24,7 +27,7 @@ export { DATA_CLASSIFICATIONS, SENSITIVE_CLASSIFICATIONS, isDataClassification,
 export type { DataClassification } from "./classification";
 export { computeDownstreamClosure, TAINT_DEFAULT_MAX_DEPTH, TAINT_DEFAULT_CAP, } from "./taint";
 export type { TaintEdge, Supersession, TaintNode, TaintClosure, TaintOptions, } from "./taint";
-export type { RunRow, StepRow, ArtifactRow, ArtifactEdgeRow, ArtifactEvaluationRow, EvalCaseRow, EvalCaseOrigin, } from "../types/telemetry";
+export type { RunRow, StepRow, ArtifactRow, ArtifactEdgeRow, EvalCaseRow, EvalCaseOrigin, } from "../types/telemetry";
 /** The rig-bound artifact surface exposed as `rig.artifacts`: the run lifecycle
  * (chunk A) + the artifact primitives (chunk B). */
 export interface ArtifactNamespace {
@@ -40,6 +43,9 @@ export declare function wireRigArtifacts(deps: {
     readonly enabled: boolean;
     readonly artifactStore: ArtifactStore | null;
     readonly artifacts?: ArtifactsConfig;
+    /** Control-plane settings resolver (§1.5; P15 CP-3b) — the per-task/account
+     * scrub source the content-upload path reads. null local-only/direct. */
+    readonly resolver?: TaskSettingsResolver | null;
 }): {
     readonly namespace: ArtifactNamespace;
     readonly onArtifactsFlushed?: () => Promise<void>;
@@ -49,7 +55,7 @@ export declare function wireRigArtifacts(deps: {
  * custody is off. Kept here (not in the SDK entrypoint) so index.ts stays under
  * the LOC cap (P1) and the content wiring lives beside the namespace it feeds.
  */
-export declare function buildArtifactContentDeps(content: ArtifactContentConfig | undefined): ArtifactContentDeps | undefined;
+export declare function buildArtifactContentDeps(content: ArtifactContentConfig | undefined, resolver: TaskSettingsResolver | null): ArtifactContentDeps | undefined;
 /** Build the rig-bound artifact namespace. Disabled ⇒ every entry is inert
  * (run.start is a no-op, save returns null, no rows written) — spec §1.4. The
  * artifact store is present only when enabled (index.ts opens it then). */
@@ -61,5 +67,9 @@ export declare function createArtifactNamespace(deps: {
      * deps are built here (buildArtifactContentDeps) so the SDK entrypoint stays
      * under the LOC cap. */
     readonly content?: ArtifactContentConfig;
+    /** Control-plane settings resolver (§1.5; P15 CP-3b) — threaded into the
+     * content deps so the upload path resolves scrub per task/account. null
+     * local-only/direct (then the content-on default governs). */
+    readonly resolver?: TaskSettingsResolver | null;
 }): ArtifactNamespace;
 //# sourceMappingURL=index.d.ts.map

package/dist/artifacts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/artifacts/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,YAAY,EACV,YAAY,EACZ,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,YAAY,EACV,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/E,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGvF,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,MAAM,EACN,OAAO,EACP,WAAW,EACX,eAAe,EACf,qBAAqB,EACrB,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B;oDACoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAChC;AAED;;;2DAG2D;AAC3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;CACtC,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAY/F;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,GAAG,SAAS,GACzC,mBAAmB,GAAG,SAAS,CAWjC;AAED;;2EAE2E;AAC3E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;4BAEwB;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAC1C,GAAG,iBAAiB,CAYpB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/artifacts/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,YAAY,EACV,YAAY,EACZ,SAAS,EACT,eAAe,EACf,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,YAAY,EACV,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC/F,YAAY,EACV,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,YAAY,GACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/E,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGvF,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,MAAM,EACN,OAAO,EACP,WAAW,EACX,eAAe,EACf,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B;oDACoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAChC;AAED;;;2DAG2D;AAC3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;6EACyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACjD,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAa/F;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,GAAG,SAAS,EAC1C,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GACpC,mBAAmB,GAAG,SAAS,CAcjC;AAED;;2EAE2E;AAC3E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;4BAEwB;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;kEAE8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACjD,GAAG,iBAAiB,CAcpB"}

package/dist/artifacts/index.js

@@ -4,16 +4,17 @@
  *
  * Lives here (not spread through `index.ts`) so the SDK entrypoint stays under
  * the LOC cap and the run/artifact surface has one home. Chunk A ships the run
- * lifecycle + `@step`; chunk B adds the artifact primitives (save/load/evaluate).
+ * lifecycle + `@step`; chunk B adds the artifact primitives (save/load/link).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TAINT_DEFAULT_CAP = exports.TAINT_DEFAULT_MAX_DEPTH = exports.computeDownstreamClosure = exports.normalizeClassification = exports.isDataClassification = exports.SENSITIVE_CLASSIFICATIONS = exports.DATA_CLASSIFICATIONS = exports.scrubDetectors = exports.detectSpans = exports.luhnValid = exports.scrubContent = exports.uploadArtifactContent = exports.openArtifactStore = exports.createArtifactApi = exports.step = exports.createRunNamespace = exports.getActiveRunContext = void 0;
+exports.TAINT_DEFAULT_CAP = exports.TAINT_DEFAULT_MAX_DEPTH = exports.computeDownstreamClosure = exports.normalizeClassification = exports.isDataClassification = exports.SENSITIVE_CLASSIFICATIONS = exports.DATA_CLASSIFICATIONS = exports.scrubDetectors = exports.detectSpans = exports.luhnValid = exports.scrubContent = exports.uploadArtifactContent = exports.parseAuthoringDoc = exports.assertValidManifest = exports.validateManifest = exports.openArtifactStore = exports.createArtifactApi = exports.step = exports.createRunNamespace = exports.getActiveRunContext = void 0;
 exports.wireRigArtifacts = wireRigArtifacts;
 exports.buildArtifactContentDeps = buildArtifactContentDeps;
 exports.createArtifactNamespace = createArtifactNamespace;
 const run_context_1 = require("./run-context");
 const artifact_1 = require("./artifact");
 const content_uploader_1 = require("./content-uploader");
+const config_1 = require("../config");
 var run_context_2 = require("./run-context");
 Object.defineProperty(exports, "getActiveRunContext", { enumerable: true, get: function () { return run_context_2.getActiveRunContext; } });
 Object.defineProperty(exports, "createRunNamespace", { enumerable: true, get: function () { return run_context_2.createRunNamespace; } });
@@ -23,6 +24,13 @@ var artifact_2 = require("./artifact");
 Object.defineProperty(exports, "createArtifactApi", { enumerable: true, get: function () { return artifact_2.createArtifactApi; } });
 var artifact_store_1 = require("../telemetry/artifact-store");
 Object.defineProperty(exports, "openArtifactStore", { enumerable: true, get: function () { return artifact_store_1.openArtifactStore; } });
+// PSR-1 — the structure-only assembly-manifest model (spec §2.1). Re-exported
+// here so `export * from "./artifacts"` in index.ts puts it on the public
+// `modelrig` surface for the InferWealth inference + a future MCP write path.
+var manifest_1 = require("../prompts/manifest");
+Object.defineProperty(exports, "validateManifest", { enumerable: true, get: function () { return manifest_1.validateManifest; } });
+Object.defineProperty(exports, "assertValidManifest", { enumerable: true, get: function () { return manifest_1.assertValidManifest; } });
+Object.defineProperty(exports, "parseAuthoringDoc", { enumerable: true, get: function () { return manifest_1.parseAuthoringDoc; } });
 var content_uploader_2 = require("./content-uploader");
 Object.defineProperty(exports, "uploadArtifactContent", { enumerable: true, get: function () { return content_uploader_2.uploadArtifactContent; } });
 var scrub_1 = require("./scrub");
@@ -49,6 +57,7 @@ function wireRigArtifacts(deps) {
     const namespace = createArtifactNamespace({
         buffer: deps.buffer,
         enabled: deps.enabled,
+        resolver: deps.resolver ?? null,
         ...(deps.artifactStore !== null ? { artifactStore: deps.artifactStore } : {}),
         ...(deps.artifacts?.content !== undefined ? { content: deps.artifacts.content } : {}),
     });
@@ -63,11 +72,14 @@ function wireRigArtifacts(deps) {
  * custody is off. Kept here (not in the SDK entrypoint) so index.ts stays under
  * the LOC cap (P1) and the content wiring lives beside the namespace it feeds.
  */
-function buildArtifactContentDeps(content) {
+function buildArtifactContentDeps(content, resolver) {
     if (content === undefined)
         return undefined;
     return {
-        scrub: content.scrub,
+        // Scrub comes from the per-task/account control-plane setting at runtime
+        // (P15 CP-3b); the resolver wins, `defaultScrub` is the local/direct fallback.
+        resolver,
+        defaultScrub: config_1.DEFAULT_CONTENT_SCRUB_MODE,
         upload: (input) => (0, content_uploader_1.uploadArtifactContent)(input, { uploadsUrl: content.uploadsUrl, apiKey: content.apiKey, maxBytes: content.maxBytes }, fetch),
     };
 }
@@ -75,7 +87,9 @@ function buildArtifactContentDeps(content) {
  * (run.start is a no-op, save returns null, no rows written) — spec §1.4. The
  * artifact store is present only when enabled (index.ts opens it then). */
 function createArtifactNamespace(deps) {
-    const contentDeps = deps.enabled ? buildArtifactContentDeps(deps.content) : undefined;
+    const contentDeps = deps.enabled
+        ? buildArtifactContentDeps(deps.content, deps.resolver ?? null)
+        : undefined;
     return {
         run: (0, run_context_1.createRunNamespace)(deps),
         artifact: (0, artifact_1.createArtifactApi)({