@pugi/cli 0.1.0-beta.1 → 0.1.0-beta.100

package/dist/core/repl/privacy-banner.js

@@ -3,15 +3,15 @@
  *
  * Two surfaces:
  *
- *   1. `renderPrivacyBanner(mode)` - one-line banner shown on REPL
- *      bootstrap (mirrors `apps/admin-api/src/privacy/privacy-mode.ts`
- *      `PRIVACY_MODE_BANNER` verbatim - keep in sync, the unit spec
- *      asserts they match).
+ *  1. `renderPrivacyBanner(mode)` - one-line banner shown on REPL
+ *     bootstrap (mirrors `apps/admin-api/src/privacy/privacy-mode.ts`
+ *     `PRIVACY_MODE_BANNER` verbatim - keep in sync, the unit spec
+ *     asserts they match).
  *
- *   2. `renderPrivacyContractDoc(mode)` - multi-line contract doc the
- *      `/privacy` slash command prints. Shows the active mode header
- *      + the full 3-mode contract so the operator can compare their
- *      current posture to the alternatives without leaving the REPL.
+ *  2. `renderPrivacyContractDoc(mode)` - multi-line contract doc the
+ *     `/privacy` slash command prints. Shows the active mode header
+ *     + the full 3-mode contract so the operator can compare their
+ *     current posture to the alternatives without leaving the REPL.
  *
  * The strings are pinned client-side so the contract doc is
  * available even when the operator is offline / has not authenticated
@@ -46,22 +46,22 @@ export function renderPrivacyBanner(mode) {
 const CONTRACT_DOC = `
 Pugi privacy mode contract (alpha 6.13):
 
-  strict      Maximum privacy. Nothing leaves tenant infra.
-              - Upstream LLM calls REFUSED (use self-hosted Ollama / llama.cpp).
-              - External tool calls require per-call confirm.
-              - Session.db, blobs, transcripts stay on operator disk.
-              - No telemetry. No error reporting.
+ strict     Maximum privacy. Nothing leaves tenant infra.
+             - Upstream LLM calls REFUSED (use self-hosted Ollama / llama.cpp).
+             - External tool calls require per-call confirm.
+             - Session.db, blobs, transcripts stay on operator disk.
+             - No telemetry. No error reporting.
 
-  balanced    Default. PII-scrubbed content goes to the upstream LLM.
-              - 3-layer PII scrubber runs before egress (regex + NER + LLM).
-              - Tool calls to external services allowed (logged).
-              - Anonymized telemetry only (counts + error categories).
+ balanced   Default. PII-scrubbed content goes to the upstream LLM.
+             - 3-layer PII scrubber runs before egress (regex + NER + LLM).
+             - Tool calls to external services allowed (logged).
+             - Anonymized telemetry only (counts + error categories).
 
-  permissive  Verbatim. Power-user mode.
-              - Raw prompts forwarded to upstream provider (no scrubbing).
-              - Tool calls to external services allowed.
-              - Full error reporting (may include prompt fragments).
-              - Accepts the upstream provider's data retention policy.
+ permissive Verbatim. Power-user mode.
+             - Raw prompts forwarded to upstream provider (no scrubbing).
+             - Tool calls to external services allowed.
+             - Full error reporting (may include prompt fragments).
+             - Accepts the upstream provider's data retention policy.
 
 Switch with: pugi config set privacy=strict|balanced|permissive
 `.trim();