@complyedge/sdk 0.2.1 → 0.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +55 -0
- package/README.md +1 -0
- package/package.json +2 -1
package/CHANGELOG.md
ADDED
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
# Changelog
|
|
2
|
+
|
|
3
|
+
All notable changes to `@complyedge/sdk` are documented here.
|
|
4
|
+
|
|
5
|
+
The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and
|
|
6
|
+
this package follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
|
+
|
|
8
|
+
**This record begins at 0.2.2.** Earlier releases shipped before the changelog
|
|
9
|
+
existed; 0.2.1 is reconstructed from its commits, and anything not evidenced
|
|
10
|
+
there is left out rather than guessed at.
|
|
11
|
+
|
|
12
|
+
The Python SDK (`complyedge` on PyPI) is versioned independently. Version
|
|
13
|
+
numbers are deliberately not kept level between the two — they are separate
|
|
14
|
+
implementations with different capability surfaces, so matching numbers would
|
|
15
|
+
imply a parity that does not exist.
|
|
16
|
+
|
|
17
|
+
## [0.2.2] - 2026-08-20
|
|
18
|
+
|
|
19
|
+
### Changed
|
|
20
|
+
- Releases now publish through npm Trusted Publishing (OIDC). Each publish uses
|
|
21
|
+
a short-lived, workflow-scoped credential instead of a long-lived token, and
|
|
22
|
+
the token has been removed from the release workflow rather than left in place
|
|
23
|
+
as a fallback.
|
|
24
|
+
|
|
25
|
+
### Added
|
|
26
|
+
- This changelog.
|
|
27
|
+
|
|
28
|
+
### Note
|
|
29
|
+
- Provenance attestations are still not generated. npm produces them only when
|
|
30
|
+
publishing from a public repository, and the release workflow lives in a
|
|
31
|
+
private one. No package page claims provenance.
|
|
32
|
+
|
|
33
|
+
## [0.2.1] - 2026-08-16
|
|
34
|
+
|
|
35
|
+
### Added
|
|
36
|
+
- `repository` field, which the package had never carried.
|
|
37
|
+
- `Limitations and honest scope` section in the README — the SDK calls the
|
|
38
|
+
hosted API and is not an offline engine, a rule finding is technical evidence
|
|
39
|
+
rather than legal advice, and the OpenAI middleware is not a security sandbox.
|
|
40
|
+
- Explicit note that the package works in both ESM and CommonJS projects.
|
|
41
|
+
- Cross-links to `@complyedge/mcp`, `trustlint`, and the PyPI packages.
|
|
42
|
+
|
|
43
|
+
### Changed
|
|
44
|
+
- Description rewritten to name what the SDK actually does: OPA/Rego policy
|
|
45
|
+
checks, Article 12 audit trails, risk assessment, OpenAI middleware.
|
|
46
|
+
- Keywords: 5 → 16, replacing generic terms with the ones a compliance buyer
|
|
47
|
+
searches. `opa` and `rego` are kept here because this package does call the
|
|
48
|
+
OPA hot path — they were removed from `trustlint`, which does not.
|
|
49
|
+
|
|
50
|
+
## 0.2.0 and earlier
|
|
51
|
+
|
|
52
|
+
Released before this changelog existed. See the repository history.
|
|
53
|
+
|
|
54
|
+
[0.2.2]: https://www.npmjs.com/package/@complyedge/sdk/v/0.2.2
|
|
55
|
+
[0.2.1]: https://www.npmjs.com/package/@complyedge/sdk/v/0.2.1
|
package/README.md
CHANGED
|
@@ -22,6 +22,7 @@ The SDK works in both ESM and CommonJS projects; no bundler-specific setup is re
|
|
|
22
22
|
|
|
23
23
|
- [`@complyedge/mcp`](https://www.npmjs.com/package/@complyedge/mcp) runs the local, offline TrustLint MCP tools with `npx`.
|
|
24
24
|
- [`trustlint`](https://www.npmjs.com/package/trustlint) is the local Node.js CLI for offline rule checks.
|
|
25
|
+
- [`complyedge` on PyPI](https://pypi.org/project/complyedge/) is the Python SDK with the same enforcement API.
|
|
25
26
|
- [Documentation](https://www.complyedge.io/docs) covers the hosted API; the [trust portal](https://trust.complyedge.io) covers security and reliability information.
|
|
26
27
|
|
|
27
28
|
## Version policy
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@complyedge/sdk",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.2",
|
|
4
4
|
"description": "EU AI Act runtime enforcement SDK: OPA/Rego policy checks, Article 12 audit trails, risk assessment, and OpenAI middleware.",
|
|
5
5
|
"publishConfig": {
|
|
6
6
|
"access": "public"
|
|
@@ -43,6 +43,7 @@
|
|
|
43
43
|
"files": [
|
|
44
44
|
"dist/**/*",
|
|
45
45
|
"README.md",
|
|
46
|
+
"CHANGELOG.md",
|
|
46
47
|
"LICENSE"
|
|
47
48
|
],
|
|
48
49
|
"scripts": {
|