Add runnable examples, a working quickstart, metadata and the 0.1.0 changeset

[NSchatz]

Prepares @cosyte/deid for its 0.1.0 release. No change under src/.

What changes

• README quickstart fixed. The first runnable block after ## Install read name and dob without defining them, so the published quickstart failed from a clean install with ReferenceError: name is not defined. It now declares synthetic inputs inline (ZZFAMILY^ZZGIVEN, 19900215), prints the transformed values and the manifest's decisions, and shows that output in a text block beside it.
• examples/: four runnable programs, each importing @cosyte/deid by name (resolved through the package's own exports to dist/) and checking its own output with node:assert:
  • deidentify-a-model.ts: the core engine on a locus model; the manifest carries no input value.
  • deidentify-an-hl7-message.ts: the @cosyte/deid/hl7 adapter on the repository's synthetic ORU^R01 (test/fixtures/hl7/oru-r01.hl7); no input identifier survives in the output or the manifest.
  • fail-closed.ts: free text blocked with no redactor, with a throwing redactor and with an empty one; a consumer redaction recorded as DEID_FREETEXT_CONSUMER_REDACTED; a keyed transform with no key refused (DEID_NO_KEY); a safe-harbor-labelled date-shift policy refused (DEID_POLICY_INVALID).
  • expert-determination-support.ts: the support report; determination is null and the disclaimer leads the Markdown.
  • examples/README.md has the table and says what the library does not do: no certification, no determination.
• pnpm examples (scripts/run-examples.ts, modelled on hl7's runner): runs every top-level example with tsx, fails on any non-zero exit, refuses (exit 2) with no dist/ or no example.
• CI: a new examples job in ci.yml (Node 22 and 24): install, build, pnpm examples. Actions pinned by SHA, as in smoke.yml. Not in the ci-required-checks ruleset.
• Gates cover the examples before any build: examples/tsconfig.json maps the package name to src/ for tsc and typescript-eslint only; pnpm typecheck adds tsc --noEmit -p examples; lint and format add examples/.
• package.json: description names the six formats and the fail-closed posture, wider keywords, homepage https://docs.cosyte.com/deid. repository and bugs were already correct.
• Status lines in the README, docs-content/intro.md and docs-content/installation.md say 0.1 instead of pre-alpha 0.0.x; .changeset/README.md states the 0.1.x ladder (the text mllp already carries).
• Changeset what-0-1-means.md (minor, so the release is 0.1.0 rather than 0.0.10): what 0.1 covers, what the version promises below 1.0, what it is not (no certification, no compliance claim), what is not covered yet. Checked against the shared release-notes renderer with every pending changeset: no refusal, no violation.

Checks run locally (pnpm 10.0.0, Node 24)

typecheck, lint, test (58 files, 1231 tests), build, attw, smoke, format:check, phi-scan (all-mode and --staged), check (test-selection and agent-notes), check:no-emdash, check:no-internal-refs, examples (4 of 4): all exit 0. A planted PID segment under examples/ is a hit for the all-mode PHI scan CI runs.

README quickstart, from a packed tarball

pnpm build && npm pack                                  # cosyte-deid-0.0.9.tgz
npm install ./cosyte-deid-0.0.9.tgz                     # into an empty directory; the install block names no peer
node qs-extract.mjs node_modules/@cosyte/deid/README.md # block at README line 46
node quickstart.mts                                     # exit 0

Output: [ null, '1990', '5.4 mmol/L' ] and [ 'PID-5 NAMES removed', 'PID-7 DATES transformed' ]. The same check against the published 0.0.9 exits 1 with the ReferenceError.

https://claude.ai/code/session_01U24bnHKNxQWMxmfN7ny7w9