@nebutra/ecosystem-safety 0.1.2 → 0.1.4

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @nebutra/ecosystem-safety
 
+## 0.1.4
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @nebutra/errors@2.0.0
+
 ## 0.1.2
 
 ### Patch Changes

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@nebutra/ecosystem-safety",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Shared public-disclosure safety primitives for ecosystem publishing surfaces",
   "private": false,
   "license": "MIT",
   "type": "module",
   "nebutra": {
+    "graph": "labs",
     "status": "wip",
     "productionReady": false,
     "surface": "support-contract",
@@ -21,13 +22,17 @@
     "category": "ai",
     "summary": "Single shared owner for public-disclosure sensitive-field scanning"
   },
-  "main": "./src/index.ts",
-  "types": "./src/index.ts",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
-    ".": "./src/index.ts"
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
   },
   "dependencies": {
-    "@nebutra/errors": "0.1.2"
+    "@nebutra/errors": "2.0.0"
   },
   "devDependencies": {
     "@types/node": "^25.9.1",
@@ -47,6 +52,12 @@
   "publishConfig": {
     "access": "public"
   },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
   "scripts": {
     "build": "tsup",
     "test": "vitest run",

package/.turbo/turbo-build.log

@@ -1,17 +0,0 @@
-
-> @nebutra/ecosystem-safety@0.1.2 build /Users/tseka_luk/Documents/Nebutra-SaaS-Lab/Nebutra-Sailor/packages/ai/ecosystem-safety
-> tsup
-
-CLI Building entry: src/index.ts
-CLI Using tsconfig: tsconfig.json
-CLI tsup v8.5.1
-CLI Using tsup config: /Users/tseka_luk/Documents/Nebutra-SaaS-Lab/Nebutra-Sailor/packages/ai/ecosystem-safety/tsup.config.ts
-CLI Target: es2022
-CLI Cleaning output folder
-ESM Build start
-ESM dist/index.js     1.60 KB
-ESM dist/index.js.map 3.27 KB
-ESM ⚡️ Build success in 9ms
-DTS Build start
-DTS ⚡️ Build success in 1574ms
-DTS dist/index.d.ts 662.00 B

package/.turbo/turbo-test.log

@@ -1,14 +0,0 @@
-
-> @nebutra/ecosystem-safety@0.1.1 test /Users/tseka_luk/Documents/Nebutra-SaaS-Lab/Nebutra-Sailor/packages/ai/ecosystem-safety
-> vitest run
-
-
- RUN  v4.1.4 /Users/tseka_luk/Documents/Nebutra-SaaS-Lab/Nebutra-Sailor/packages/ai/ecosystem-safety
-
- ✓ src/index.test.ts (3 tests) 4ms
-
- Test Files  1 passed (1)
-      Tests  3 passed (3)
-   Start at  09:38:31
-   Duration  248ms (transform 43ms, setup 0ms, import 56ms, tests 4ms, environment 0ms)
-

package/.turbo/turbo-typecheck.log

@@ -1,4 +0,0 @@
-
-> @nebutra/ecosystem-safety@0.1.2 typecheck /Users/tseka_luk/Documents/Nebutra-SaaS-Lab/Nebutra-Sailor/packages/ai/ecosystem-safety
-> tsc --noEmit
-

package/src/index.test.ts

@@ -1,32 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { assertPublicDisclosureSafe, scanForSensitiveFields } from "./index";
-
-describe("ecosystem-safety", () => {
-  it("detects emails and token-like secrets deterministically", () => {
-    expect(
-      scanForSensitiveFields("Contact alice@example.com with api key sk-test-1234567890."),
-    ).toEqual([
-      { kind: "email", value: "alice@example.com" },
-      { kind: "secret", value: "sk-test-1234567890" },
-    ]);
-  });
-
-  it("rejects public disclosure when sensitive fields have no explicit redaction", () => {
-    expect(() =>
-      assertPublicDisclosureSafe({
-        capability: "idea-plaza",
-        content: "customer bob@example.com uses token-api-12345678",
-      }),
-    ).toThrow(expect.objectContaining({ capability: "idea-plaza" }));
-  });
-
-  it("returns detected fields when the caller provides explicit redaction intent", () => {
-    expect(
-      assertPublicDisclosureSafe({
-        capability: "founder-cemetery",
-        content: "customer bob@example.com",
-        redactions: ["customers"],
-      }),
-    ).toEqual([{ kind: "email", value: "bob@example.com" }]);
-  });
-});

package/src/index.ts

@@ -1,65 +0,0 @@
-import { CapabilityError } from "@nebutra/errors";
-
-export type SensitiveFieldKind = "email" | "secret";
-
-export interface SensitiveField {
-  readonly kind: SensitiveFieldKind;
-  readonly value: string;
-}
-
-export interface PublicDisclosureSafetyRequest {
-  readonly capability: string;
-  readonly content: string;
-  readonly redactions?: readonly string[];
-  readonly suggestion?: string;
-}
-
-const EMAIL_RE = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
-const SECRET_RE = /\b(?:sk|pk|api|key|token)[-_][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/g;
-
-function hasExplicitRedaction(redactions: readonly string[] | undefined): boolean {
-  return Boolean(redactions?.some((item) => item.trim().length > 0));
-}
-
-function uniqueFields(fields: readonly SensitiveField[]): SensitiveField[] {
-  const seen = new Set<string>();
-  const unique: SensitiveField[] = [];
-  for (const field of fields) {
-    const key = `${field.kind}:${field.value.toLowerCase()}`;
-    if (seen.has(key)) continue;
-    seen.add(key);
-    unique.push(field);
-  }
-  return unique;
-}
-
-export function scanForSensitiveFields(content: string): SensitiveField[] {
-  const emails = [...content.matchAll(EMAIL_RE)].map((match) => ({
-    kind: "email" as const,
-    value: match[0],
-  }));
-  const secrets = [...content.matchAll(SECRET_RE)].map((match) => ({
-    kind: "secret" as const,
-    value: match[0],
-  }));
-  return uniqueFields([...emails, ...secrets]);
-}
-
-export function assertPublicDisclosureSafe(
-  request: PublicDisclosureSafetyRequest,
-): readonly SensitiveField[] {
-  const sensitive = scanForSensitiveFields(request.content);
-  if (sensitive.length > 0 && !hasExplicitRedaction(request.redactions)) {
-    throw new CapabilityError(request.capability, "Sensitive fields require explicit redaction", {
-      suggestion:
-        request.suggestion ??
-        "Review detected private values and pass explicit redactions before publishing.",
-      metadata: {
-        sensitiveKinds: [...new Set(sensitive.map((item) => item.kind))],
-        sensitiveCount: sensitive.length,
-      },
-      statusCode: 400,
-    });
-  }
-  return sensitive;
-}

package/tsconfig.json

@@ -1,9 +0,0 @@
-{
-  "extends": "../../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "dist",
-    "rootDir": "src",
-    "types": ["node", "vitest/globals"]
-  },
-  "include": ["src/**/*.ts"]
-}

package/tsup.config.ts

@@ -1,9 +0,0 @@
-import { defineConfig } from "tsup";
-
-export default defineConfig({
-  clean: true,
-  dts: true,
-  entry: ["src/index.ts"],
-  format: ["esm"],
-  sourcemap: true,
-});