@chatpanel/pii 0.2.5 → 0.2.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/pii",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "The canonical ChatPanel privacy engine — reversible PII redaction + pseudonymization with local entity detection. Pure, dependency-free ESM shared by the ChatPanel extension, gateway, and bridge.",
   "type": "module",
   "main": "index.js",

package/pii-detect.js

@@ -116,7 +116,13 @@ async function detectViaEndpoint(text, det, signal, fetchImpl) {
 
 async function detectViaOpenAI(text, det, signal, fetchImpl) {
   const base = String(det.url || '').replace(/\/$/, '');
-  const url = /\/chat\/completions$/.test(base) ? base : `${base}/v1/chat/completions`;
+  // Build the chat URL the SAME way the chat path does. An OpenAI-compatible baseUrl
+  // already ends in /v1 (Ollama, OpenRouter, NVIDIA, OpenAI…) → only add
+  // /chat/completions (appending /v1/chat/completions would 404 on /v1/v1/…). A bare
+  // host gets /v1/chat/completions; a full chat URL is used as-is.
+  const url = /\/chat\/completions$/.test(base) ? base
+    : /\/v\d+$/.test(base) ? `${base}/chat/completions`
+      : `${base}/v1/chat/completions`;
   const res = await fetchImpl(url, {
     method: 'POST',
     headers: { 'Content-Type': 'application/json', ...(det.apiKey ? { Authorization: `Bearer ${det.apiKey}` } : {}) },

package/pipeline.js

@@ -22,10 +22,11 @@ export function effectiveTier(cfg, isPro) {
   return t === 'full' && !isPro ? 'basic' : t;
 }
 
-// Free ceiling: deterministic SECRET redaction on CHAT only, with a small
-// dictionary. Names/orgs (full tier), wider scope, an unlimited dictionary, and
-// the model layer are Pro. Enforced here as defense-in-depth.
-export const FREE_DICT_LIMIT = 3;
+// Free ceiling: a generous custom dictionary so Free users can fully experience
+// the feature. The first FREE_DICT_LIMIT entries apply; an unlimited dictionary
+// (plus wider scope and the model layer) is Pro. Enforced here as defense-in-
+// depth — the UI also surfaces the cap, but never trust the UI alone.
+export const FREE_DICT_LIMIT = 100;
 
 export function gatedDictionary(cfg, isPro) {
   const d = Array.isArray(cfg?.dictionary) ? cfg.dictionary : [];