@ossredact/core 0.2.0

Shared TypeScript redaction core used by the OSSRedact gateway and the in-browser workbench.

Added

• Do-not-redact allowlist — applyAllowlist, isAllowlisted, buildAllowSet, normalizeAllowValue for user-declared known-safe values (floor-protected: a value on the allowlist still cannot exempt a hard-floor type).
• Always-redact denylist — force-redact arbitrary custom terms to <CUSTOM_n> in every mode.
• Placeholder-contract guard — PLACEHOLDER_CONTRACT_PATTERN / PLACEHOLDER_CONTRACT_RE shared placeholder shape.
• Floor parity hardening mirrored from the gateway core: zero-width / format-char (Cf/Cc) resistance (hasFormatChars, stripFormatChars), digit-homoglyph folding (normDigits), and the glued / separated card + digit floors (gluedDigitSpans, separatedCardSpans, cardAuxSpans, cueNameSpans).

Fixed

• Accented-email floor — email addresses with accented local-parts or domains (e.g. françois@société.fr) were not redacted in 0.1.x. The email matcher is now Unicode-aware.
• O(n^2) email-regex blowup on long dotted runs (a leading look-behind restores linear scanning).

MIT. 167 tests green. Part of OSSRedact.

@ossredact/core 0.1.1

@ossredact/core 0.1.1

npm: https://www.npmjs.com/package/@ossredact/core (MIT, zero runtime deps)

• Case-insensitive repeated-value sweep: sweepKnownValues now uses the giu flag and a casefold value-to-placeholder map, so a known value is masked at every occurrence regardless of case -- matching the gate/appliance redact paths.
• Pure TypeScript, browser-safe.

This gateway snapshot (0a917ef) also adds the OpenAI /v1/responses (Codex) route to the egress proxy, makes Responses redaction exhaustive (recursive structural-position sweep + collision-safe rehydration), and reconciles the docs with deployed reality. License standardized to MIT.

@ossredact/core 0.1.0

@ossredact/core 0.1.0

Initial release. npm: https://www.npmjs.com/package/@ossredact/core (MIT, zero runtime deps)

• Tier-0 deterministic PII detector + span/redaction core for OSSRedact.
• Pure TypeScript, browser-safe.

Tagged on the initial public snapshot.