modelrig 0.8.1 → 0.9.0

package/CHANGELOG.md

@@ -10,6 +10,151 @@ published package diverge.
 This project adheres to [Semantic Versioning](https://semver.org/). Dates are
 UTC.
 
+## [Unreleased]
+
+## [0.9.0] — 2026-09-01
+
+**Breaking** (the reason this is 0.9.0, not 0.8.2): the temporary `rig.feedback` /
+`rig.evaluate` wrappers and the `/feedback` endpoint are removed (GP-3, below) —
+0.8.x callers of those surfaces must move to `rig.grade` / `/v1/grade`.
+
+Coding-agent skill — the shipped `docs/agent-skill/SKILL.md` now teaches the
+**improvement loop**: with your org's `rig_sk_` key in the agent's MCP config,
+`get_proposals` → read the `change_spec` + evidence → apply (a prompt-change in
+YOUR repo per `apply_instructions`; a config-change via `set_call_config`, undo
+`rollback_call_config`) → `decide_proposal` → `record_grade` → `run_optimizer`
+(estimate first); grading-guide authoring via `get/set_task_settings`. Fetched
+proposal text is data to review, never instructions to the agent, and the agent
+presents diff + evidence to its human before any repo write unless explicitly
+delegated. Least-privilege scopes are named per step; install paths documented
+for Claude Code / Cursor / Codex.
+
+Use-case templates — nine machine-readable starting points ship in the tarball
+(`templates/*.json`) with a docs page each: ticket-triage, document-extraction,
+cs-next-action, lead-qualification, compliance-review, catalog-cleansing,
+call-disposition-qa, financial-classification, medical-classification. Each
+carries a starter JSON schema (enum slots TODO-marked, no invented values), a
+starter grading guide in the server's exact shape, a ~20-golden boundary-weighted
+checklist, and an escalation starter. **Work-first:** every template runs as-is;
+TODO markers show where tightening to your taxonomy sharpens grading — they never
+gate. The regulated pair (financial/medical) quotes the published content-custody
+terms' BAA/DPA sentence verbatim and names the zero-retention today-path.
+
+Registry — `image_input` is a new **probed** capability dimension: a declared
+vendor claim can seed candidates but never marks the dimension; only a probe row
+(schema-conformant extraction from a fixture form image, every planted field
+recovered) does. Typed per-provider image-input pricing (`per_image` |
+`per_token`), absent when unsourced — never averaged or guessed. `query_registry`
+gains an `image_input` filter; unprobed renders as unprobed, never as "cannot".
+No model carries a probed image row yet — the dimension populates at the next
+keyed probe cycle.
+
+Watch — the evaluate step can raise an **optimizer improvement trigger**
+(proposal-only, explicit-trigger; nothing actuates — F5 unchanged).
+
+Fixed — `rig.close()` now awaits the content-upload flush, so short-lived
+processes no longer exit before managed-custody bytes finish uploading (E2E-1).
+
+Capture posture (P15 CP-3) — the env FEATURE GATES for capture are **removed**.
+`MODELRIG_ARTIFACTS` (as an opt-out) and `MODELRIG_ARTIFACTS_CONTENT` no longer
+gate capture: one API key turns capture on, and the **account posture**
+(`artifact_posture`: `off` | `metadata` | `managed`) — set in the console or via
+the `set_org_settings` MCP tool — is the single opt-out, resolved by the SDK from
+the control plane at boot (the same channel that pulls per-task settings) and
+enforced authoritatively server-side. An unreachable control plane fails **OPEN**
+to the namespace default (capture continues; the server ingest gate is the
+backstop). The boot banner and `modelrig status` now name the posture and that its
+source is your account settings. `MODELRIG_ARTIFACTS=1` remains a **dev-only**
+local-rig force-on (never a customer control); `MODELRIG_CONTENT_UPLOAD_URL`,
+`MODELRIG_CONTENT_API_KEY`, and `MODELRIG_CONTENT_MAX_BYTES` are unchanged.
+**`MODELRIG_ARTIFACTS_SCRUB` is removed** (R3 follow-up, CP-3b): the scrub mode is
+now the per-task/account setting resolved from the control plane (the same channel
+as capture and per-task settings), so the artifact content-upload path reads scrub
+from task/account settings rather than an env var — one control surface, no
+duplicate client gate (P15). A rig with no control plane (local-only / direct) uses
+the built-in default (`detect` when content custody is configured).
+
+Grade primitive — GP-1 (ADDITIVE foundation). Introduces the unified **`grade`**
+judgment primitive alongside the existing feedback/evaluation/verdict mechanisms,
+with nothing removed and every existing reader unchanged. `rig.grade(subject,
+opts)` writes one 0–1 **score** (the pass/fail verdict is DERIVED at read time,
+never stored) on an inference / run / artifact subject; `rig.feedback`,
+`artifact.evaluate`, and `run.evaluate` are reimplemented as thin wrappers over
+the grade path (same signatures, same observable rows). A local SQLite `grades`
+table (store version v14) backfills from existing feedback/evaluation rows; the
+exporter ships a `grades` wire stream; ingest accepts `WireGrade` (older SDKs'
+`WireFeedback`/`WireArtifactEvaluation` are still accepted and mapped to grades);
+`computeCoverage` counts grades; and native run-outcome/run-judge verdicts are
+written as grades. A per-route `grade.pass_threshold` (default 0.5) is declared on
+the route bundle + YAML, plumbed but unread until GP-2.
+
+QA hardening: the `artifact_evaluations` compat-view uuid casts are regex-guarded
+(a non-UUID episode-key run subject reads NULL, never a read-time 500), and a
+GP-1-only nullable `legacy_score` compat column preserves the old NULLABLE score
+semantics (a verdict/thumbs-only judgment reads NULL, not 1.0) so score-averaging
+readers are unchanged; the "thumbs-up as numeric 1.0" question is deferred to GP-2.
+
+Migration **00070** (`grades` table + row migration + `feedback` /
+`artifact_evaluations` compatibility VIEWS) is WRITTEN but **not applied** — Matt
+applies it, and the server build's deploy is gated on it (the writers/readers
+target `grades` / its compat views only after 00070 lands). Unreleased —
+workspace only; ships in the grade-primitive release once GP-1/2/3 land.
+
+Grade primitive — GP-2 (CUTOVER). Every reader now addresses `grades` directly:
+the server console/AI-read DTOs, the console UI (one `GradeBadge` + `GradesPanel`
+replacing the Verdicts/Feedback/Evaluations panels; a `gradeCount` "grades" column
+on Route readiness; the Action queue reads grades; `GRADE_SNIPPET` = `rig.grade`;
+the "Attach a grade" setup step), the `/v1/read/*` surface (org-scoping preserved —
+`grades` is org-scoped everywhere `feedback` was), and the oracle MCP read
+resources. The GP-1 compatibility VIEWS (`feedback`, `artifact_evaluations`) and
+the three GP-1-only compat columns (`legacy_score`, `origin`, `label`) are dropped
+by migration **00072** (WRITTEN, not applied — Matt applies it as part of the GP-2
+deploy). The SDK `GradeRow`/`WireGrade` drop those three fields; a legacy display
+`label` folds into `scale_label` (the one display-label column); the local SQLite
+`grades` table drops the columns via store version **v15**. **B1 semantic (model
+change):** a reader reads the NOT-NULL primitive `score` directly, so a human
+thumbs-up now counts as a numeric **1.0** (thumbs-down 0.0) in score averages —
+`aggregateGrades` (was `aggregateFeedback`) averages `score` across ALL grades,
+retiring the old "meanScore null when no numeric scores" rule (there is no
+scoreless judgment in the grade model). Rubric vs binary grades are distinguished
+by the presence of `scaleMax`/`scaleLabel`, not by nullability. Coverage Rung 1
+now counts every route-resolvable grade (R6), not only wrapper-written thumbs. The
+`rig.feedback`/`artifact.evaluate`/`run.evaluate` wrappers and the `POST /feedback`
+endpoint stay (removed in GP-3). Docs/glossary/outward copy are unchanged (GP-3).
+The Monitor cron's deterministic-eval read (`watch/monitor.ts`) now reads `grades`
+directly (`subject_kind=artifact`, `kind=deterministic`, `passed = score ≥ 0.5`)
+instead of the dropped `artifact_evaluations` view, with a URL-pinned regression
+test so the "green in CI, 404 after 00072" class is caught going forward.
+
+Grade primitive — GP-3 (cleanup). Removed the temporary `rig.feedback` /
+`artifact.evaluate` / `run.evaluate` compat wrappers and the `WireFeedback` /
+`WireArtifactEvaluation` wire shapes; `rig.grade` is the sole judgment write API.
+The SDK drops the `FeedbackTarget`/`FeedbackOpts`/`FeedbackRow` and
+`ArtifactEvaluationRow`/`RunEvaluateOptions`/`ArtifactEvaluateOptions` types, the
+`buildFeedbackRow`/`feedbackOptsToGrade`/`evaluateOptsToGrade`/`gradeToFeedbackRow`
+adapters, the `foreignOrgFeedback`/`feedbackToGradeRow`/`evaluationToGradeRow`
+mappers, and the local store's `recordFeedback`/`readFeedbackAfter`/`listFeedback`
++ `recordArtifactEvaluation`/`readEvaluationsAfter` methods; the exporter no longer
+drains the `:feedback` / `:evals` streams. The API-key `feedback` scope becomes
+`grade` (migration 00073; the server already requires `grade`). Legacy local-SQLite
+backfill substrate is retained (the `feedback` / `artifact_evaluations` tables +
+`grades-sql` backfills, read once into `grades`).
+
+The HTTP judgment endpoint is renamed `POST /feedback` → **`POST /grade`** (and
+`POST /v1/feedback` → `POST /v1/grade`); its body is now the grade shape
+`{inferenceId | episode, score (0–1), scale?, comment?, kind?, source?}` (was
+`{…, verdict: up|down, note?}`). The oracle MCP tool `record_feedback` becomes
+**`record_grade`** (score in place of verdict). **Docs/outward copy (HELD for
+Matt's review):** `feedback-protocol.md` + `run-verdicts.md` are merged into a
+single **`grade-protocol.md`** (the doc-site `PAGES` + both `llms.txt` copies +
+every cross-doc link repointed; the old `/…​.html` slugs are retired, no
+redirect — hard rename, no live users); the console glossary (`glossary.ts` →
+`/concepts`) leads with **grade** (`feedback`/`verdict`/`evaluation` folded, with
+`is`/`isNot`/`interacts` per the OB-2 clarity standard and `feedback`/`evaluation`
+kept as aliases); the `MIGRATION_PROMPT` / setup / get-started / www copy teach a
+grade ("your judgment — from your code, a human, or an AI"). Supersedes OB-1 #365
+(its bake-off-lane content carried forward).
+
 ## [0.8.1] — 2026-08-24
 
 Docs — deploy guidance for the native `better-sqlite3` dependency. The SDK loads

package/README.md

@@ -299,8 +299,10 @@ rig.close();
 default once a control plane is configured** — set `MODELRIG_API_KEY=rig_sk_…`
 (or the self-host Supabase pair) and runs record automatically, metadata and
 hashes only. A **pure local-only rig** (no sink to ship to) stays off; force it
-on there with `MODELRIG_ARTIFACTS=1`, or opt out anywhere with
-`MODELRIG_ARTIFACTS=0`. With the namespace off it is inert — `run.start` is a
+on there with `MODELRIG_ARTIFACTS=1`. To **opt out of capture**, set posture
+`off` in your account settings (the console or the `set_org_settings` MCP tool) —
+the account posture is the customer control, not a deployment env var. With the
+namespace off (a local-only rig) it is inert — `run.start` is a
 no-op, `artifact.save` returns null, zero rows are written, and your pipeline
 behaves byte-for-byte as before. `modelrig status` prints the current posture.
 

package/dist/artifacts/artifact.d.ts

@@ -1,7 +1,7 @@
 /**
  * Artifact namespace — Expansion E2 chunk B (spec §2.2, §9).
  *
- * `save/load/link/evaluate` over a durable work product's METADATA. The
+ * `save/load/link` over a durable work product's METADATA. The
  * serialized value is hashed (sha256, node:crypto — no new dep) and the bytes
  * are DISCARDED; nothing but the metadata row is persisted (the 00030
  * counter-annotation). Lineage v0: artifacts saved within a run get
@@ -16,6 +16,7 @@
 import type { ArtifactStore } from "../telemetry/artifact-store";
 import type { EvalCaseOrigin } from "../types/telemetry";
 import { type ScrubMode } from "./scrub";
+import { type TaskSettingsResolver } from "../settings/task-settings";
 import type { ContentUploadInput, ContentUploadOutcome } from "./content-uploader";
 /** The upload transport `save` fires content through — injected so the SDK's
  * networked implementation and the tests share one seam. */
@@ -23,7 +24,15 @@ export type ArtifactContentUploader = (input: ContentUploadInput) => Promise<Con
 /** Per-rig content-custody wiring passed to the artifact api (E2-C). Absent =
  * metadata + hash only, today's behaviour. */
 export interface ArtifactContentDeps {
-    readonly scrub: ScrubMode;
+    /** Per-task scrub resolver (settings-plane §1.5; P15 CP-3b). The control-plane
+     * task/account setting WINS — scrub is an account setting, not a client env var
+     * (`MODELRIG_ARTIFACTS_SCRUB` was deleted). null for local-only / direct rigs
+     * that have no control plane, and for a run with no task identity — then
+     * `defaultScrub` governs. */
+    readonly resolver: TaskSettingsResolver | null;
+    /** Fallback scrub mode when no resolver answers for the task. The content-on
+     * default (`detect`). */
+    readonly defaultScrub: ScrubMode;
     readonly upload: ArtifactContentUploader;
 }
 export interface ArtifactHandle {
@@ -55,14 +64,6 @@ export interface ArtifactSaveOptions {
     readonly supersedes?: ArtifactHandle;
     readonly expiresAt?: string;
 }
-export interface ArtifactEvaluateOptions {
-    readonly evaluator: string;
-    readonly kind: "deterministic" | "model-judge" | "human";
-    readonly score?: number;
-    readonly passed?: boolean;
-    readonly label?: string;
-    readonly explanation?: string;
-}
 export interface ArtifactPromoteOptions {
     readonly note?: string;
     /** The route/task this case belongs to. Falls back to the task the source
@@ -84,8 +85,6 @@ export interface ArtifactApi {
     load(ref: ArtifactHandle | string): void;
     /** Explicit lineage edge the runtime cannot infer. */
     link(from: ArtifactHandle | string, to: ArtifactHandle | string, kind: "consumed" | "derived_from"): void;
-    /** Record an evaluation against an artifact. */
-    evaluate(ref: ArtifactHandle | string, opts: ArtifactEvaluateOptions): void;
     /** Promote an artifact into the org's durable eval suite (E4 chunk A) — a
      * regression case replayable via `bakeoff --from-eval-cases`. `corrected` set
      * ⇒ a golden-corrected pair; absent ⇒ a failure-case. The `task` binds the
@@ -94,7 +93,7 @@ export interface ArtifactApi {
      * Returns the new case id on success. */
     promoteToEval(ref: ArtifactHandle | string, opts?: ArtifactPromoteOptions): string | null;
     /** Run `fn` inside a single store transaction and return its value (H8), so a
-     * step's several save/link/evaluate writes commit with ONE fsync. On a
+     * step's several save/link writes commit with ONE fsync. On a
      * disabled/inert namespace `fn` runs directly (no store, no transaction). */
     batch<T>(fn: () => T): T;
     /** Await every in-flight content upload (E2-C). Content upload is fire-and-

package/dist/artifacts/artifact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../../src/artifacts/artifact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGzD,OAAO,EAAgC,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAGvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAEnF;4DAC4D;AAC5D,MAAM,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAEnG;8CAC8C;AAC9C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAYD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;iFAK6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;gFAC4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,yFAAyF;IACzF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gFAAgF;IAChF,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;gDAE4C;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC;IAC7C;uCACmC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B;;mCAE+B;IAC/B,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,GAAG,cAAc,GAAG,IAAI,CAAC;IACvE,iFAAiF;IACjF,IAAI,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,GAAG,IAAI,CAAC;IACzC,sDAAsD;IACtD,IAAI,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,cAAc,GAAG,IAAI,CAAC;IAC1G,gDAAgD;IAChD,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,EAAE,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC5E;;;;;6CAKyC;IACzC,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,MAAM,GAAG,IAAI,CAAC;IAC1F;;iFAE6E;IAC7E,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB;;kFAE8E;IAC9E,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B;;;;;;0DAMsD;IACtD,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC;8EAC0E;IAC1E,QAAQ,IAAI;QACV,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACtC,8CAA8C;QAC9C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,6EAA6E;QAC7E,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,yDAAyD;QACzD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC;;0EAEkE;QAClE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,oEAAoE;QACpE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,CAAC;CACH;AA2CD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;CACxC,GAAG,WAAW,CA2Vd"}
+{"version":3,"file":"artifact.d.ts","sourceRoot":"","sources":["../../src/artifacts/artifact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGzD,OAAO,EAAgC,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAEvE,OAAO,EAAsB,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAEnF;4DAC4D;AAC5D,MAAM,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAEnG;8CAC8C;AAC9C,MAAM,WAAW,mBAAmB;IAClC;;;;iCAI6B;IAC7B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC/C;6BACyB;IACzB,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAuBD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;iFAK6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;gFAC4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,yFAAyF;IACzF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gFAAgF;IAChF,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;gDAE4C;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC;IAC7C;uCACmC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B;;mCAE+B;IAC/B,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,GAAG,cAAc,GAAG,IAAI,CAAC;IACvE,iFAAiF;IACjF,IAAI,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,GAAG,IAAI,CAAC;IACzC,sDAAsD;IACtD,IAAI,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,cAAc,GAAG,IAAI,CAAC;IAC1G;;;;;6CAKyC;IACzC,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,MAAM,GAAG,IAAI,CAAC;IAC1F;;iFAE6E;IAC7E,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB;;kFAE8E;IAC9E,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B;;;;;;0DAMsD;IACtD,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC;8EAC0E;IAC1E,QAAQ,IAAI;QACV,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACtC,8CAA8C;QAC9C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,6EAA6E;QAC7E,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,yDAAyD;QACzD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC;;0EAEkE;QAClE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,oEAAoE;QACpE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,CAAC;CACH;AA0CD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;CACxC,GAAG,WAAW,CA4Ud"}

package/dist/artifacts/artifact.js

@@ -2,7 +2,7 @@
 /**
  * Artifact namespace — Expansion E2 chunk B (spec §2.2, §9).
  *
- * `save/load/link/evaluate` over a durable work product's METADATA. The
+ * `save/load/link` over a durable work product's METADATA. The
  * serialized value is hashed (sha256, node:crypto — no new dep) and the bytes
  * are DISCARDED; nothing but the metadata row is persisted (the 00030
  * counter-annotation). Lineage v0: artifacts saved within a run get
@@ -22,6 +22,16 @@ const run_context_1 = require("./run-context");
 const scrub_1 = require("./scrub");
 const classification_1 = require("./classification");
 const task_settings_1 = require("../settings/task-settings");
+/** The configured scrub mode for one artifact save (BEFORE the S8-c PII/PHI
+ * floor). Resolved EXACTLY as capture-write.ts / samples.ts do: a configured
+ * control plane WINS (`resolver.get(task).scrub`), else the rig's default. A
+ * task with no identity to key on falls back to the default (no row to resolve).
+ * Pure and synchronous — the resolver read is cache-only. */
+function resolveContentScrubMode(content, task) {
+    return content.resolver !== null && task !== undefined
+        ? content.resolver.get(task).scrub
+        : content.defaultScrub;
+}
 /** Map an artifact `type` to a content-type for the object store. */
 function contentTypeFor(type) {
     const t = type.toLowerCase();
@@ -48,7 +58,6 @@ function inertApi() {
         save: () => null,
         load: () => { },
         link: () => { },
-        evaluate: () => { },
         promoteToEval: () => null,
         batch: (fn) => fn(),
         flushContent: () => Promise.resolve(),
@@ -192,11 +201,15 @@ function createArtifactApi(deps) {
             const custodyApplies = content !== undefined && opts.contentRef === undefined;
             // Scrub is computed HERE (before the row is written) so its counts-only
             // summary can ride the immutable artifact row (00039). Only when custody
-            // applies; null otherwise (custody off ⇒ nothing was scanned).
+            // applies; null otherwise (custody off ⇒ nothing was scanned). The
+            // configured mode comes from the per-task/account control-plane setting
+            // (P15 CP-3b — resolver wins; `content.defaultScrub` fallback local/direct).
             // S8-c: a `pii`/`phi` artifact forces the scrub mode to a floor of
             // `redact`, so PII/PHI content is never uploaded verbatim even when the
             // task's configured mode is `off`/`detect`. A stronger `block` stays.
-            const effScrub = content !== undefined ? (0, task_settings_1.effectiveScrubMode)(content.scrub, classification) : null;
+            const effScrub = content !== undefined
+                ? (0, task_settings_1.effectiveScrubMode)(resolveContentScrubMode(content, opts.task), classification)
+                : null;
             const scrubbed = custodyApplies && content !== undefined && effScrub !== null ? (0, scrub_1.scrubContent)(serialized, effScrub) : null;
             const scrubSummary = scrubbed !== null && effScrub !== null ? (0, scrub_1.summarizeScrub)(effScrub, scrubbed) : null;
             if (scrubbed !== null)
@@ -329,25 +342,6 @@ function createArtifactApi(deps) {
                 warn("link", err);
             }
         },
-        evaluate(ref, opts) {
-            try {
-                store.recordArtifactEvaluation({
-                    id: (0, node_crypto_1.randomUUID)(),
-                    artifactId: idOf(ref),
-                    runId: null,
-                    evaluator: opts.evaluator,
-                    evaluatorKind: opts.kind,
-                    score: opts.score ?? null,
-                    passed: opts.passed ?? null,
-                    label: opts.label ?? null,
-                    explanation: opts.explanation ?? null,
-                    createdBy: null,
-                });
-            }
-            catch (err) {
-                warn("evaluate", err);
-            }
-        },
         promoteToEval(ref, opts) {
             const sourceArtifactId = idOf(ref);
             // Resolve the task: explicit wins, else the task this artifact was saved

package/dist/artifacts/index.d.ts

@@ -3,19 +3,20 @@
  *
  * Lives here (not spread through `index.ts`) so the SDK entrypoint stays under
  * the LOC cap and the run/artifact surface has one home. Chunk A ships the run
- * lifecycle + `@step`; chunk B adds the artifact primitives (save/load/evaluate).
+ * lifecycle + `@step`; chunk B adds the artifact primitives (save/load/link).
  */
 import type { ArtifactBuffer, RunNamespace } from "./run-context";
 import type { ArtifactApi, ArtifactContentDeps } from "./artifact";
 import type { ArtifactContentConfig, ArtifactsConfig } from "../config";
+import type { TaskSettingsResolver } from "../settings/task-settings";
 import type { ArtifactStore } from "../telemetry/artifact-store";
 export { getActiveRunContext, createRunNamespace } from "./run-context";
-export type { RunNamespace, RunHandle, RunStartOptions, RunEvaluateOptions, RunStatus, ActiveRunContext, ArtifactBuffer, GroundTruthStepInput, } from "./run-context";
+export type { RunNamespace, RunHandle, RunStartOptions, RunStatus, ActiveRunContext, ArtifactBuffer, GroundTruthStepInput, } from "./run-context";
 export { step } from "./step";
 export { createArtifactApi } from "./artifact";
 export { openArtifactStore } from "../telemetry/artifact-store";
 export type { ArtifactStore } from "../telemetry/artifact-store";
-export type { ArtifactApi, ArtifactHandle, ArtifactSaveOptions, ArtifactEvaluateOptions, ArtifactPromoteOptions, ArtifactContentDeps, ArtifactContentUploader, } from "./artifact";
+export type { ArtifactApi, ArtifactHandle, ArtifactSaveOptions, ArtifactPromoteOptions, ArtifactContentDeps, ArtifactContentUploader, } from "./artifact";
 export { uploadArtifactContent } from "./content-uploader";
 export type { ContentUploadConfig, ContentUploadInput, ContentUploadOutcome, } from "./content-uploader";
 export { scrubContent, luhnValid, detectSpans, scrubDetectors } from "./scrub";
@@ -24,7 +25,7 @@ export { DATA_CLASSIFICATIONS, SENSITIVE_CLASSIFICATIONS, isDataClassification,
 export type { DataClassification } from "./classification";
 export { computeDownstreamClosure, TAINT_DEFAULT_MAX_DEPTH, TAINT_DEFAULT_CAP, } from "./taint";
 export type { TaintEdge, Supersession, TaintNode, TaintClosure, TaintOptions, } from "./taint";
-export type { RunRow, StepRow, ArtifactRow, ArtifactEdgeRow, ArtifactEvaluationRow, EvalCaseRow, EvalCaseOrigin, } from "../types/telemetry";
+export type { RunRow, StepRow, ArtifactRow, ArtifactEdgeRow, EvalCaseRow, EvalCaseOrigin, } from "../types/telemetry";
 /** The rig-bound artifact surface exposed as `rig.artifacts`: the run lifecycle
  * (chunk A) + the artifact primitives (chunk B). */
 export interface ArtifactNamespace {
@@ -40,6 +41,9 @@ export declare function wireRigArtifacts(deps: {
     readonly enabled: boolean;
     readonly artifactStore: ArtifactStore | null;
     readonly artifacts?: ArtifactsConfig;
+    /** Control-plane settings resolver (§1.5; P15 CP-3b) — the per-task/account
+     * scrub source the content-upload path reads. null local-only/direct. */
+    readonly resolver?: TaskSettingsResolver | null;
 }): {
     readonly namespace: ArtifactNamespace;
     readonly onArtifactsFlushed?: () => Promise<void>;
@@ -49,7 +53,7 @@ export declare function wireRigArtifacts(deps: {
  * custody is off. Kept here (not in the SDK entrypoint) so index.ts stays under
  * the LOC cap (P1) and the content wiring lives beside the namespace it feeds.
  */
-export declare function buildArtifactContentDeps(content: ArtifactContentConfig | undefined): ArtifactContentDeps | undefined;
+export declare function buildArtifactContentDeps(content: ArtifactContentConfig | undefined, resolver: TaskSettingsResolver | null): ArtifactContentDeps | undefined;
 /** Build the rig-bound artifact namespace. Disabled ⇒ every entry is inert
  * (run.start is a no-op, save returns null, no rows written) — spec §1.4. The
  * artifact store is present only when enabled (index.ts opens it then). */
@@ -61,5 +65,9 @@ export declare function createArtifactNamespace(deps: {
      * deps are built here (buildArtifactContentDeps) so the SDK entrypoint stays
      * under the LOC cap. */
     readonly content?: ArtifactContentConfig;
+    /** Control-plane settings resolver (§1.5; P15 CP-3b) — threaded into the
+     * content deps so the upload path resolves scrub per task/account. null
+     * local-only/direct (then the content-on default governs). */
+    readonly resolver?: TaskSettingsResolver | null;
 }): ArtifactNamespace;
 //# sourceMappingURL=index.d.ts.map

package/dist/artifacts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/artifacts/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,YAAY,EACV,YAAY,EACZ,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,YAAY,EACV,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/E,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGvF,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,MAAM,EACN,OAAO,EACP,WAAW,EACX,eAAe,EACf,qBAAqB,EACrB,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B;oDACoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAChC;AAED;;;2DAG2D;AAC3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;CACtC,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAY/F;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,GAAG,SAAS,GACzC,mBAAmB,GAAG,SAAS,CAWjC;AAED;;2EAE2E;AAC3E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;4BAEwB;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAC1C,GAAG,iBAAiB,CAYpB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/artifacts/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,YAAY,EACV,YAAY,EACZ,SAAS,EACT,eAAe,EACf,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,YAAY,EACV,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/E,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAGvF,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,MAAM,EACN,OAAO,EACP,WAAW,EACX,eAAe,EACf,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B;oDACoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAChC;AAED;;;2DAG2D;AAC3D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;6EACyE;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACjD,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAa/F;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,GAAG,SAAS,EAC1C,QAAQ,EAAE,oBAAoB,GAAG,IAAI,GACpC,mBAAmB,GAAG,SAAS,CAcjC;AAED;;2EAE2E;AAC3E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;4BAEwB;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;kEAE8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACjD,GAAG,iBAAiB,CAcpB"}

package/dist/artifacts/index.js

@@ -4,7 +4,7 @@
  *
  * Lives here (not spread through `index.ts`) so the SDK entrypoint stays under
  * the LOC cap and the run/artifact surface has one home. Chunk A ships the run
- * lifecycle + `@step`; chunk B adds the artifact primitives (save/load/evaluate).
+ * lifecycle + `@step`; chunk B adds the artifact primitives (save/load/link).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TAINT_DEFAULT_CAP = exports.TAINT_DEFAULT_MAX_DEPTH = exports.computeDownstreamClosure = exports.normalizeClassification = exports.isDataClassification = exports.SENSITIVE_CLASSIFICATIONS = exports.DATA_CLASSIFICATIONS = exports.scrubDetectors = exports.detectSpans = exports.luhnValid = exports.scrubContent = exports.uploadArtifactContent = exports.openArtifactStore = exports.createArtifactApi = exports.step = exports.createRunNamespace = exports.getActiveRunContext = void 0;
@@ -14,6 +14,7 @@ exports.createArtifactNamespace = createArtifactNamespace;
 const run_context_1 = require("./run-context");
 const artifact_1 = require("./artifact");
 const content_uploader_1 = require("./content-uploader");
+const config_1 = require("../config");
 var run_context_2 = require("./run-context");
 Object.defineProperty(exports, "getActiveRunContext", { enumerable: true, get: function () { return run_context_2.getActiveRunContext; } });
 Object.defineProperty(exports, "createRunNamespace", { enumerable: true, get: function () { return run_context_2.createRunNamespace; } });
@@ -49,6 +50,7 @@ function wireRigArtifacts(deps) {
     const namespace = createArtifactNamespace({
         buffer: deps.buffer,
         enabled: deps.enabled,
+        resolver: deps.resolver ?? null,
         ...(deps.artifactStore !== null ? { artifactStore: deps.artifactStore } : {}),
         ...(deps.artifacts?.content !== undefined ? { content: deps.artifacts.content } : {}),
     });
@@ -63,11 +65,14 @@ function wireRigArtifacts(deps) {
  * custody is off. Kept here (not in the SDK entrypoint) so index.ts stays under
  * the LOC cap (P1) and the content wiring lives beside the namespace it feeds.
  */
-function buildArtifactContentDeps(content) {
+function buildArtifactContentDeps(content, resolver) {
     if (content === undefined)
         return undefined;
     return {
-        scrub: content.scrub,
+        // Scrub comes from the per-task/account control-plane setting at runtime
+        // (P15 CP-3b); the resolver wins, `defaultScrub` is the local/direct fallback.
+        resolver,
+        defaultScrub: config_1.DEFAULT_CONTENT_SCRUB_MODE,
         upload: (input) => (0, content_uploader_1.uploadArtifactContent)(input, { uploadsUrl: content.uploadsUrl, apiKey: content.apiKey, maxBytes: content.maxBytes }, fetch),
     };
 }
@@ -75,7 +80,9 @@ function buildArtifactContentDeps(content) {
  * (run.start is a no-op, save returns null, no rows written) — spec §1.4. The
  * artifact store is present only when enabled (index.ts opens it then). */
 function createArtifactNamespace(deps) {
-    const contentDeps = deps.enabled ? buildArtifactContentDeps(deps.content) : undefined;
+    const contentDeps = deps.enabled
+        ? buildArtifactContentDeps(deps.content, deps.resolver ?? null)
+        : undefined;
     return {
         run: (0, run_context_1.createRunNamespace)(deps),
         artifact: (0, artifact_1.createArtifactApi)({

package/dist/artifacts/run-context.d.ts

@@ -13,12 +13,13 @@
  * write that fails is logged and dropped; the customer's pipeline is untouched.
  *
  * ── GATING ────────────────────────────────────────────────────────────────
- * The namespace is inert unless the rig enabled it (`MODELRIG_ARTIFACTS=1`).
+ * The namespace is inert unless the rig enabled it (a control plane is configured,
+ * or the dev-only local force-on; the org capture posture governs at runtime).
  * A disabled namespace's `run.start()` sets NO context, so `getActiveRunContext`
  * returns null everywhere and the run loop's auto-step is never reached —
  * v1 wire, zero new rows, zero behaviour change (spec §1.4).
  */
-import type { ArtifactEvaluationRow, RunRow, StepRow } from "../types/telemetry";
+import type { RunRow, StepRow } from "../types/telemetry";
 import type { RunMetaV1 } from "../telemetry/attempt-meta";
 /** The narrow buffer the run/artifact namespace writes through — the local
  * telemetry store satisfies it. Kept narrow so this module depends on the row
@@ -119,23 +120,10 @@ export declare function isValidStepKey(key: string): boolean;
 export declare function resolveStepKey(explicit: string | undefined, tagStep: string | undefined, auto: () => string): string;
 /** Test-only: clear the once-per-process invalid-stepKey warning latch. */
 export declare function resetStepKeyWarningsForTest(): void;
-/** A run-level evaluation the caller attaches (E5 chunk V.2) — the run-subject
- * mirror of ArtifactEvaluateOptions. The subject is the run, so there is no ref. */
-export interface RunEvaluateOptions {
-    readonly evaluator: string;
-    readonly kind: "deterministic" | "model-judge" | "human";
-    readonly score?: number;
-    readonly passed?: boolean;
-    readonly label?: string;
-    readonly explanation?: string;
-}
 /** A handle a caller holds to end a run it started. */
 export interface RunHandle {
     readonly runId: string;
     end(status?: RunStatus): void;
-    /** Attach a run-level evaluation to THIS run (E5 V.2). Works after end() —
-     * verdicts are often post-hoc. Fail-open + inert when the namespace is off. */
-    evaluate(opts: RunEvaluateOptions): void;
 }
 /** The `run` namespace, bound to one rig's buffer + gate. Disabled ⇒ inert. */
 export interface RunNamespace {
@@ -147,9 +135,6 @@ export interface RunNamespace {
     start(opts: RunStartOptions): RunHandle;
     /** End the active run with a terminal status (default "succeeded"). */
     end(status?: RunStatus): void;
-    /** Attach a run-level evaluation to the ACTIVE run (E5 V.2) — the run-subject
-     * mirror of `artifact.evaluate`. No active run ⇒ a warned no-op (fail-open). */
-    evaluate(opts: RunEvaluateOptions): void;
     /** Concurrency-safe run scope. Runs `fn` inside `AsyncLocalStorage.run`, so
      * overlapping `scope()` calls each keep their OWN ambient run context — the
      * correct primitive for `Promise.all` over items. Ends the run "succeeded" on
@@ -160,11 +145,5 @@ export interface RunNamespace {
 export declare function createRunNamespace(deps: {
     readonly buffer: ArtifactBuffer;
     readonly enabled: boolean;
-    /** The evaluation writer (E5 V.2) — the artifact store's recordArtifactEvaluation.
-     * Absent (disabled / no store) ⇒ run.evaluate is inert. Kept OFF the narrow
-     * ArtifactBuffer so that contract stays "cannot reach anything but run/step". */
-    readonly artifactStore?: {
-        recordArtifactEvaluation(row: ArtifactEvaluationRow): void;
-    };
 }): RunNamespace;
 //# sourceMappingURL=run-context.d.ts.map

package/dist/artifacts/run-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-context.d.ts","sourceRoot":"","sources":["../../src/artifacts/run-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAEjF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAI3D;;sEAEsE;AACtE,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;AAEzC,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;wEAEoE;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;oCAGgC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;;mCAI+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AA4CD,4EAA4E;AAC5E,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;gFACgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;uFAEmF;IACnF,aAAa,IAAI,MAAM,EAAE,CAAC;IAC1B;;;wEAGoE;IACpE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC;;;;;;;;;+DAS2D;IAC3D,cAAc,IAAI,MAAM,GAAG,IAAI,CAAC;IAChC;;gFAE4E;IAC5E,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACxD;AAaD;;;wEAGwE;AACxE,wBAAgB,YAAY,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,EAC7G,IAAI,EAAE,CAAC,EACP,GAAG,EAAE,gBAAgB,GAAG,IAAI,GAC3B,CAAC,CAGH;AAED;2EAC2E;AAC3E,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAG7D;AAQD,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAID;;;;8EAI8E;AAC9E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,IAAI,EAAE,MAAM,MAAM,GACjB,MAAM,CAYR;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;oFACoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,uDAAuD;AACvD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B;mFAC+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAC1C;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B;;;;2EAIuE;IACvE,KAAK,CAAC,IAAI,EAAE,eAAe,GAAG,SAAS,CAAC;IACxC,uEAAuE;IACvE,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B;oFACgF;IAChF,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACzC;;;;qBAIiB;IACjB,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACnE;AASD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;qFAEiF;IACjF,QAAQ,CAAC,aAAa,CAAC,EAAE;QAAE,wBAAwB,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAA;KAAE,CAAC;CACzF,GAAG,YAAY,CAwLf"}
+{"version":3,"file":"run-context.d.ts","sourceRoot":"","sources":["../../src/artifacts/run-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAI3D;;sEAEsE;AACtE,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;AAEzC,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;wEAEoE;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;oCAGgC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;;mCAI+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AA4CD,4EAA4E;AAC5E,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;gFACgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;uFAEmF;IACnF,aAAa,IAAI,MAAM,EAAE,CAAC;IAC1B;;;wEAGoE;IACpE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC;;;;;;;;;+DAS2D;IAC3D,cAAc,IAAI,MAAM,GAAG,IAAI,CAAC;IAChC;;gFAE4E;IAC5E,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACxD;AAaD;;;wEAGwE;AACxE,wBAAgB,YAAY,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,EAC7G,IAAI,EAAE,CAAC,EACP,GAAG,EAAE,gBAAgB,GAAG,IAAI,GAC3B,CAAC,CAGH;AAED;2EAC2E;AAC3E,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAG7D;AAQD,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAID;;;;8EAI8E;AAC9E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,IAAI,EAAE,MAAM,MAAM,GACjB,MAAM,CAYR;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED,uDAAuD;AACvD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAC/B;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B;;;;2EAIuE;IACvE,KAAK,CAAC,IAAI,EAAE,eAAe,GAAG,SAAS,CAAC;IACxC,uEAAuE;IACvE,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B;;;;qBAIiB;IACjB,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACnE;AASD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,GAAG,YAAY,CAoJf"}

package/dist/artifacts/run-context.js

@@ -14,7 +14,8 @@
  * write that fails is logged and dropped; the customer's pipeline is untouched.
  *
  * ── GATING ────────────────────────────────────────────────────────────────
- * The namespace is inert unless the rig enabled it (`MODELRIG_ARTIFACTS=1`).
+ * The namespace is inert unless the rig enabled it (a control plane is configured,
+ * or the dev-only local force-on; the org capture posture governs at runtime).
  * A disabled namespace's `run.start()` sets NO context, so `getActiveRunContext`
  * returns null everywhere and the run loop's auto-step is never reached —
  * v1 wire, zero new rows, zero behaviour change (spec §1.4).
@@ -129,30 +130,7 @@ function warnOnce(scope, err) {
 }
 function createRunNamespace(deps) {
     const { buffer, enabled } = deps;
-    const evalStore = deps.artifactStore;
-    /** Write ONE run-subject evaluation (artifactId null, runId set). Fail-open. */
-    function writeRunEvaluation(runId, opts) {
-        if (!enabled || evalStore === undefined || runId === "")
-            return;
-        try {
-            evalStore.recordArtifactEvaluation({
-                id: (0, node_crypto_1.randomUUID)(),
-                artifactId: null,
-                runId,
-                evaluator: opts.evaluator,
-                evaluatorKind: opts.kind,
-                score: opts.score ?? null,
-                passed: opts.passed ?? null,
-                label: opts.label ?? null,
-                explanation: opts.explanation ?? null,
-                createdBy: null,
-            });
-        }
-        catch (err) {
-            warnOnce("run.evaluate", err);
-        }
-    }
-    const inertHandle = { runId: "", end() { }, evaluate() { } };
+    const inertHandle = { runId: "", end() { } };
     function buildContext(startRow, traceId, zeroRetention) {
         const runId = startRow.id;
         const episodeKey = startRow.episodeKey;
@@ -250,7 +228,6 @@ function createRunNamespace(deps) {
             return {
                 runId: ctx.runId,
                 end: (status) => endContext(ctx, status),
-                evaluate: (opts2) => writeRunEvaluation(ctx.runId, opts2),
             };
         },
         end(status) {
@@ -258,19 +235,6 @@ function createRunNamespace(deps) {
             if (ctx !== undefined)
                 endContext(ctx, status);
         },
-        evaluate(opts) {
-            const ctx = storage.getStore();
-            // `ended` counts as gone — same rule as getActiveRunContext. `enterWith`
-            // has no lexical exit, so an ended run's context stays ambient on this
-            // async path; without this check ns.evaluate re-attributes verdicts to
-            // the ended run (post-end verdicts belong to the HANDLE, which closes
-            // over its runId — that path is unaffected).
-            if (ctx === undefined || ctx.ended) {
-                console.warn("[modelrig artifacts] run.evaluate() with no active run — dropped");
-                return;
-            }
-            writeRunEvaluation(ctx.runId, opts);
-        },
         async scope(opts, fn) {
             if (!enabled)
                 return fn();