Stable public API facades + 80% coverage gate

[chiruu12]

Summary

• Add stable public API facades under unplug.api (policy, privacy, cache, boundaries, normalization, encoding, ml) so dependents stop importing internal unplug.core.* / unplug.ml.* paths
• Document the import map (sdk/docs/PUBLIC_API.md), add a surface demo, and lock the facade with behavioral tests
• Raise the coverage gate from 75% to 80%; widen transformers to >=4.44,<5.13 for Python 3.13 ml-extra installability

Fixes#52

Test plan

• make check-ci passed locally
• make test-cov passed locally (81% total)
• CI green on 3.11 / 3.12 / 3.13 + coverage job

---

Note

Low Risk
Mostly additive re-exports and documentation; coverage and dependency pin changes are low risk with no auth or scan-behavior logic changes in the facades themselves.

Overview
Introduces stable unplug.api.* facades so server/MCP dependents can import policy, privacy, cache, boundaries, normalization, encoding, and ML runtime types without reaching into unplug.core.* / unplug.ml.*. Legacy paths remain for compatibility; sdk/docs/PUBLIC_API.md documents the import map, and examples/public_api_surface_demo.py exercises the surface end-to-end.

Also exports ApprovalRequest from unplug.api, adds import-surface and behavioral tests (test_public_import_surface.py), wires the demo into example integration tests, and expands CLI/audit probe unit tests to support the higher coverage bar.

CI and deps:make test-cov / CONTRIBUTING now enforce 80% coverage (was 75%); transformers for the ml extra is widened to >=4.44,<5.13 in the lockfile for Python 3.13 installability.

^{Reviewed by Cursor Bugbot for commit 25c5d34. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

Greptile Summary

This PR adds stable public SDK facades and raises the coverage bar. The main changes are:

• New unplug.api.* facades for policy, privacy, cache, boundaries, normalization, encoding, and ML imports.
• Public API documentation and a runnable surface demo.
• Import-surface, CLI, audit, and example tests.
• Coverage gate increased to 80%.
• Updated locked transformers extra range.

Confidence Score: 4/5

The public API changes look contained, but the new example can fail in the integration suite.

• The facade modules are import-focused and line up with existing internal exports.
• The new public API demo uses an orphan boundary marker but expects the original text to survive sanitization.
• That demo is now included in the local examples that must exit successfully.

sdk/examples/public_api_surface_demo.py

Important Files Changed

Filename	Overview
sdk/src/unplug/api/ml.py	Adds a stable ML facade over existing runtime symbols, with heavy ML imports still outside the module import path.
sdk/src/unplug/api/boundaries.py	Adds a stable re-export facade for boundary helpers.
sdk/src/unplug/api/cache.py	Adds a stable re-export facade for cache helpers and version constants.
sdk/src/unplug/api/encoding.py	Adds a stable re-export facade for encoding classifiers and scan helpers.
sdk/src/unplug/api/policy.py	Adds a stable re-export facade for policy configuration and decision helpers.
sdk/src/unplug/api/privacy.py	Adds a stable re-export facade for privacy filters.
sdk/src/unplug/api/normalization.py	Adds a stable re-export facade for normalization helpers.
sdk/examples/public_api_surface_demo.py	Adds a runnable public API demo, but its boundary-marker section can exit non-zero.
sdk/tests/integration/test_examples.py	Adds the new public API demo to the local examples that must exit successfully.
sdk/Makefile	Raises the coverage failure threshold to 80%.
sdk/uv.lock	Updates the locked transformers extra specifier.

_{Reviews (1): Last reviewed commit: "Add public API coverage gate" | Re-trigger Greptile}

[greptile-apps]

Orphan Marker Drops Demo Text

When this demo passes a bare opening boundary marker to sanitize_boundary_markers(), the sanitizer treats it as an orphan marker and removes the markered text. The next strip_boundary_markers(wrapped.text) call no longer contains hello, so the example returns 1 after being added to the integration example suite.

Suggested change

	raw='hello <<<UNTRUSTED source="retrieved" id="0123456789abcdef">>>'
	clean, sanitized=sanitize_boundary_markers(raw)
	wrapped=wrap_external_content(clean, source="retrieved")
	print("boundary sanitized:", sanitized)
	print("boundary stripped:", strip_boundary_markers(wrapped.text))
	ifnotsanitizedor"hello"notinstrip_boundary_markers(wrapped.text):
	raw='hello <<<UNTRUSTED source="retrieved" id="0123456789abcdef">>>payload<<<END id="0123456789abcdef">>>'
	clean, sanitized=sanitize_boundary_markers(raw)
	wrapped=wrap_external_content(clean, source="retrieved")
	stripped=strip_boundary_markers(wrapped.text)
	print("boundary sanitized:", sanitized)
	print("boundary stripped:", stripped)
	ifnotsanitizedor"hello"notinstrippedor"payload"instripped:

[github-actions]

SDK Coverage •

File	Stmts	Miss	Cover	Missing
TOTAL	7020	1114	84%

report-only-changed-files is enabled. No files were changed during this commit :)

Tests	Skipped	Failures	Errors	Time
1115	25 💤	0 ❌	0 🔥	35.886s ⏱️