@blindfold/sdk 1.0.0

package/README.md

@@ -0,0 +1,176 @@
+# Blindfold JS SDK
+
+The official JavaScript/TypeScript SDK for Blindfold - The Privacy API for AI.
+
+Securely tokenize, mask, redact, and encrypt sensitive data (PII) before sending it to LLMs or third-party services.
+
+## Installation
+
+```bash
+npm install @blindfold/sdk
+# or
+yarn add @blindfold/sdk
+# or
+pnpm add @blindfold/sdk
+```
+
+## Usage
+
+### Initialization
+
+```typescript
+import { Blindfold } from '@blindfold/sdk';
+
+const client = new Blindfold({
+  apiKey: 'your-api-key-here',
+  // Optional: Track specific end-user for audit logs
+  userId: 'user_123' 
+});
+```
+
+### Tokenize (Reversible)
+
+Replace sensitive data with reversible tokens (e.g., `<PERSON_1>`).
+
+```typescript
+const response = await client.tokenize(
+  "Contact John Doe at john@example.com",
+  {
+    // Optional: Filter specific entities
+    entities: ['PERSON', 'EMAIL_ADDRESS'],
+    // Optional: Set confidence threshold
+    score_threshold: 0.4
+  }
+);
+
+console.log(response.text); 
+// "Contact <PERSON_1> at <EMAIL_ADDRESS_1>"
+
+console.log(response.mapping);
+// { "<PERSON_1>": "John Doe", "<EMAIL_ADDRESS_1>": "john@example.com" }
+```
+
+### Detokenize
+
+Restore original values from tokens.
+
+```typescript
+const original = await client.detokenize(
+  "AI response for <PERSON_1>",
+  response.mapping
+);
+
+console.log(original.text);
+// "AI response for John Doe"
+```
+
+### Mask
+
+Partially hide sensitive data (e.g., `****-****-****-1234`).
+
+```typescript
+const response = await client.mask(
+  "Credit card: 4532-7562-9102-3456",
+  {
+    masking_char: '*',
+    chars_to_show: 4,
+    from_end: true
+  }
+);
+
+console.log(response.text);
+// "Credit card: ***************3456"
+```
+
+### Redact
+
+Permanently remove sensitive data.
+
+```typescript
+const response = await client.redact(
+  "My password is secret123",
+  {
+    entities: ['PASSWORD'] // If supported
+  }
+);
+```
+
+### Hash
+
+Replace data with deterministic hashes (useful for analytics/matching).
+
+```typescript
+const response = await client.hash(
+  "User ID: 12345",
+  {
+    hash_type: 'sha256',
+    hash_prefix: 'ID_'
+  }
+);
+```
+
+### Synthesize
+
+Replace real data with realistic fake data.
+
+```typescript
+const response = await client.synthesize(
+  "John lives in New York",
+  {
+    language: 'en'
+  }
+);
+
+console.log(response.text);
+// "Michael lives in Boston" (example)
+```
+
+### Encrypt
+
+Encrypt sensitive data using AES (reversible with key).
+
+```typescript
+const response = await client.encrypt(
+  "Secret message",
+  {
+    encryption_key: 'your-secure-key-min-16-chars'
+  }
+);
+```
+
+## Configuration
+
+### Entity Types
+
+Common supported entities:
+- `PERSON`
+- `EMAIL_ADDRESS`
+- `PHONE_NUMBER`
+- `CREDIT_CARD`
+- `IP_ADDRESS`
+- `LOCATION`
+- `DATE_TIME`
+- `URL`
+- `IBAN_CODE`
+- `US_SSN`
+- `MEDICAL_LICENSE`
+
+### Error Handling
+
+The SDK throws typed errors:
+
+```typescript
+import { AuthenticationError, APIError, NetworkError } from '@blindfold/sdk';
+
+try {
+  await client.tokenize("...");
+} catch (error) {
+  if (error instanceof AuthenticationError) {
+    // Handle invalid API key
+  } else if (error instanceof APIError) {
+    // Handle API error (e.g. validation)
+  } else if (error instanceof NetworkError) {
+    // Handle network issues
+  }
+}
+```

package/dist/index.d.mts

@@ -0,0 +1,285 @@
+/**
+ * Configuration for Blindfold client
+ */
+interface BlindfoldConfig {
+    /** API key for authentication */
+    apiKey: string;
+    /** Base URL for the API (default: http://localhost:8000/api/public/v1) */
+    baseUrl?: string;
+    /** Optional user ID to track who is making the request */
+    userId?: string;
+}
+/**
+ * Configuration options for tokenization
+ */
+interface TokenizeConfig {
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Detected entity information
+ */
+interface DetectedEntity {
+    /** Entity type (e.g., PERSON, EMAIL_ADDRESS) */
+    entity_type: string;
+    /** Original text of the entity */
+    text: string;
+    /** Start index in text */
+    start: number;
+    /** End index in text */
+    end: number;
+    /** Confidence score (0-1) */
+    score: number;
+}
+/**
+ * Response from tokenize endpoint
+ */
+interface TokenizeResponse {
+    /** Anonymized text with placeholders */
+    text: string;
+    /** Mapping of tokens to original values */
+    mapping: Record<string, string>;
+    /** List of detected entities */
+    detected_entities: DetectedEntity[];
+    /** Count of detected entities */
+    entities_count: number;
+}
+/**
+ * Response from detokenize endpoint
+ */
+interface DetokenizeResponse {
+    /** Original text with restored values */
+    text: string;
+    /** Number of replacements made */
+    replacements_made: number;
+}
+/**
+ * Configuration options for redaction
+ */
+interface RedactConfig {
+    /** Character(s) to use for masking (default: "*") */
+    masking_char?: string;
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Response from redact endpoint
+ */
+interface RedactResponse {
+    /** Text with PII permanently removed */
+    text: string;
+    /** List of detected and redacted entities */
+    detected_entities: DetectedEntity[];
+    /** Number of entities redacted */
+    entities_count: number;
+}
+/**
+ * Configuration options for masking
+ */
+interface MaskConfig {
+    /** Number of characters to show (default: 3) */
+    chars_to_show?: number;
+    /** Whether to show characters from the end (default: false) */
+    from_end?: boolean;
+    /** Character to use for masking (default: "*") */
+    masking_char?: string;
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Response from mask endpoint
+ */
+interface MaskResponse {
+    /** Text with PII partially masked */
+    text: string;
+    /** List of detected and masked entities */
+    detected_entities: DetectedEntity[];
+    /** Number of entities masked */
+    entities_count: number;
+}
+/**
+ * Configuration options for synthesis
+ */
+interface SynthesizeConfig {
+    /** Language code for synthetic data generation (e.g., 'en', 'cs', 'de') */
+    language?: string;
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Response from synthesis endpoint
+ */
+interface SynthesizeResponse {
+    /** Text with synthetic fake data */
+    text: string;
+    /** List of detected and synthesized entities */
+    detected_entities: DetectedEntity[];
+    /** Number of entities synthesized */
+    entities_count: number;
+}
+/**
+ * Configuration options for hashing
+ */
+interface HashConfig {
+    /** Hash algorithm to use (e.g., 'md5', 'sha1', 'sha256', 'sha512') */
+    hash_type?: string;
+    /** Prefix to add before hash value (default: 'HASH_') */
+    hash_prefix?: string;
+    /** Length of hash to display (default: 16) */
+    hash_length?: number;
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Response from hash endpoint
+ */
+interface HashResponse {
+    /** Text with PII replaced by hash values */
+    text: string;
+    /** List of detected and hashed entities */
+    detected_entities: DetectedEntity[];
+    /** Number of entities hashed */
+    entities_count: number;
+}
+/**
+ * Configuration options for encryption
+ */
+interface EncryptConfig {
+    /** Optional encryption key (if not provided, tenant key will be used) */
+    encryption_key?: string;
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Response from encrypt endpoint
+ */
+interface EncryptResponse {
+    /** Text with PII encrypted */
+    text: string;
+    /** List of detected and encrypted entities */
+    detected_entities: DetectedEntity[];
+    /** Number of entities encrypted */
+    entities_count: number;
+}
+/**
+ * Error response from API
+ */
+interface APIErrorResponse {
+    detail?: string;
+    message?: string;
+}
+
+/**
+ * Blindfold client for tokenization and detokenization
+ */
+declare class Blindfold {
+    private apiKey;
+    private baseUrl;
+    private userId?;
+    /**
+     * Create a new Blindfold client
+     * @param config - Configuration options
+     */
+    constructor(config: BlindfoldConfig);
+    /**
+     * Make an authenticated request to the API
+     */
+    private request;
+    /**
+     * Tokenize text by replacing sensitive information with tokens
+     * @param text - Text to tokenize
+     * @param config - Optional configuration
+     * @returns Promise with tokenized text and mapping
+     */
+    tokenize(text: string, config?: TokenizeConfig): Promise<TokenizeResponse>;
+    /**
+     * Detokenize text by replacing tokens with original values
+     * @param text - Tokenized text
+     * @param mapping - Token mapping from tokenize response
+     * @returns Promise with original text
+     */
+    detokenize(text: string, mapping: Record<string, string>): Promise<DetokenizeResponse>;
+    /**
+     * Redact (permanently remove) sensitive information from text
+     *
+     * WARNING: Redaction is irreversible - original data cannot be restored!
+     *
+     * @param text - Text to redact
+     * @param config - Optional configuration (masking_char, entities)
+     * @returns Promise with redacted text and detected entities
+     */
+    redact(text: string, config?: RedactConfig): Promise<RedactResponse>;
+    /**
+     * Mask (partially hide) sensitive information from text
+     *
+     * @param text - Text to mask
+     * @param config - Optional configuration (chars_to_show, from_end, masking_char, entities)
+     * @returns Promise with masked text and detected entities
+     */
+    mask(text: string, config?: MaskConfig): Promise<MaskResponse>;
+    /**
+     * Synthesize (replace real data with synthetic fake data)
+     *
+     * @param text - Text to synthesize
+     * @param config - Optional configuration (language, entities)
+     * @returns Promise with synthetic text and detected entities
+     */
+    synthesize(text: string, config?: SynthesizeConfig): Promise<SynthesizeResponse>;
+    /**
+     * Hash (replace with deterministic hash values)
+     *
+     * @param text - Text to hash
+     * @param config - Optional configuration (hash_type, hash_prefix, hash_length, entities)
+     * @returns Promise with hashed text and detected entities
+     */
+    hash(text: string, config?: HashConfig): Promise<HashResponse>;
+    /**
+     * Encrypt (reversibly protect) sensitive data in text using AES encryption
+     *
+     * @param text - Text to encrypt
+     * @param config - Optional configuration (encryption_key, entities)
+     * @returns Promise with encrypted text and detected entities
+     */
+    encrypt(text: string, config?: EncryptConfig): Promise<EncryptResponse>;
+}
+
+/**
+ * Base error class for Blindfold SDK
+ */
+declare class BlindfoldError extends Error {
+    constructor(message: string);
+}
+/**
+ * Error thrown when authentication fails
+ */
+declare class AuthenticationError extends BlindfoldError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown when API request fails
+ */
+declare class APIError extends BlindfoldError {
+    statusCode: number;
+    responseBody?: any;
+    constructor(message: string, statusCode: number, responseBody?: any);
+}
+/**
+ * Error thrown when network request fails
+ */
+declare class NetworkError extends BlindfoldError {
+    constructor(message?: string);
+}
+
+export { APIError, type APIErrorResponse, AuthenticationError, Blindfold, type BlindfoldConfig, BlindfoldError, type DetectedEntity, type DetokenizeResponse, NetworkError, type TokenizeConfig, type TokenizeResponse };

package/dist/index.d.ts

@@ -0,0 +1,285 @@
+/**
+ * Configuration for Blindfold client
+ */
+interface BlindfoldConfig {
+    /** API key for authentication */
+    apiKey: string;
+    /** Base URL for the API (default: http://localhost:8000/api/public/v1) */
+    baseUrl?: string;
+    /** Optional user ID to track who is making the request */
+    userId?: string;
+}
+/**
+ * Configuration options for tokenization
+ */
+interface TokenizeConfig {
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Detected entity information
+ */
+interface DetectedEntity {
+    /** Entity type (e.g., PERSON, EMAIL_ADDRESS) */
+    entity_type: string;
+    /** Original text of the entity */
+    text: string;
+    /** Start index in text */
+    start: number;
+    /** End index in text */
+    end: number;
+    /** Confidence score (0-1) */
+    score: number;
+}
+/**
+ * Response from tokenize endpoint
+ */
+interface TokenizeResponse {
+    /** Anonymized text with placeholders */
+    text: string;
+    /** Mapping of tokens to original values */
+    mapping: Record<string, string>;
+    /** List of detected entities */
+    detected_entities: DetectedEntity[];
+    /** Count of detected entities */
+    entities_count: number;
+}
+/**
+ * Response from detokenize endpoint
+ */
+interface DetokenizeResponse {
+    /** Original text with restored values */
+    text: string;
+    /** Number of replacements made */
+    replacements_made: number;
+}
+/**
+ * Configuration options for redaction
+ */
+interface RedactConfig {
+    /** Character(s) to use for masking (default: "*") */
+    masking_char?: string;
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Response from redact endpoint
+ */
+interface RedactResponse {
+    /** Text with PII permanently removed */
+    text: string;
+    /** List of detected and redacted entities */
+    detected_entities: DetectedEntity[];
+    /** Number of entities redacted */
+    entities_count: number;
+}
+/**
+ * Configuration options for masking
+ */
+interface MaskConfig {
+    /** Number of characters to show (default: 3) */
+    chars_to_show?: number;
+    /** Whether to show characters from the end (default: false) */
+    from_end?: boolean;
+    /** Character to use for masking (default: "*") */
+    masking_char?: string;
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Response from mask endpoint
+ */
+interface MaskResponse {
+    /** Text with PII partially masked */
+    text: string;
+    /** List of detected and masked entities */
+    detected_entities: DetectedEntity[];
+    /** Number of entities masked */
+    entities_count: number;
+}
+/**
+ * Configuration options for synthesis
+ */
+interface SynthesizeConfig {
+    /** Language code for synthetic data generation (e.g., 'en', 'cs', 'de') */
+    language?: string;
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Response from synthesis endpoint
+ */
+interface SynthesizeResponse {
+    /** Text with synthetic fake data */
+    text: string;
+    /** List of detected and synthesized entities */
+    detected_entities: DetectedEntity[];
+    /** Number of entities synthesized */
+    entities_count: number;
+}
+/**
+ * Configuration options for hashing
+ */
+interface HashConfig {
+    /** Hash algorithm to use (e.g., 'md5', 'sha1', 'sha256', 'sha512') */
+    hash_type?: string;
+    /** Prefix to add before hash value (default: 'HASH_') */
+    hash_prefix?: string;
+    /** Length of hash to display (default: 16) */
+    hash_length?: number;
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Response from hash endpoint
+ */
+interface HashResponse {
+    /** Text with PII replaced by hash values */
+    text: string;
+    /** List of detected and hashed entities */
+    detected_entities: DetectedEntity[];
+    /** Number of entities hashed */
+    entities_count: number;
+}
+/**
+ * Configuration options for encryption
+ */
+interface EncryptConfig {
+    /** Optional encryption key (if not provided, tenant key will be used) */
+    encryption_key?: string;
+    /** List of entities to detect */
+    entities?: string[];
+    /** Minimum confidence score for entity detection (0.0-1.0) */
+    score_threshold?: number;
+}
+/**
+ * Response from encrypt endpoint
+ */
+interface EncryptResponse {
+    /** Text with PII encrypted */
+    text: string;
+    /** List of detected and encrypted entities */
+    detected_entities: DetectedEntity[];
+    /** Number of entities encrypted */
+    entities_count: number;
+}
+/**
+ * Error response from API
+ */
+interface APIErrorResponse {
+    detail?: string;
+    message?: string;
+}
+
+/**
+ * Blindfold client for tokenization and detokenization
+ */
+declare class Blindfold {
+    private apiKey;
+    private baseUrl;
+    private userId?;
+    /**
+     * Create a new Blindfold client
+     * @param config - Configuration options
+     */
+    constructor(config: BlindfoldConfig);
+    /**
+     * Make an authenticated request to the API
+     */
+    private request;
+    /**
+     * Tokenize text by replacing sensitive information with tokens
+     * @param text - Text to tokenize
+     * @param config - Optional configuration
+     * @returns Promise with tokenized text and mapping
+     */
+    tokenize(text: string, config?: TokenizeConfig): Promise<TokenizeResponse>;
+    /**
+     * Detokenize text by replacing tokens with original values
+     * @param text - Tokenized text
+     * @param mapping - Token mapping from tokenize response
+     * @returns Promise with original text
+     */
+    detokenize(text: string, mapping: Record<string, string>): Promise<DetokenizeResponse>;
+    /**
+     * Redact (permanently remove) sensitive information from text
+     *
+     * WARNING: Redaction is irreversible - original data cannot be restored!
+     *
+     * @param text - Text to redact
+     * @param config - Optional configuration (masking_char, entities)
+     * @returns Promise with redacted text and detected entities
+     */
+    redact(text: string, config?: RedactConfig): Promise<RedactResponse>;
+    /**
+     * Mask (partially hide) sensitive information from text
+     *
+     * @param text - Text to mask
+     * @param config - Optional configuration (chars_to_show, from_end, masking_char, entities)
+     * @returns Promise with masked text and detected entities
+     */
+    mask(text: string, config?: MaskConfig): Promise<MaskResponse>;
+    /**
+     * Synthesize (replace real data with synthetic fake data)
+     *
+     * @param text - Text to synthesize
+     * @param config - Optional configuration (language, entities)
+     * @returns Promise with synthetic text and detected entities
+     */
+    synthesize(text: string, config?: SynthesizeConfig): Promise<SynthesizeResponse>;
+    /**
+     * Hash (replace with deterministic hash values)
+     *
+     * @param text - Text to hash
+     * @param config - Optional configuration (hash_type, hash_prefix, hash_length, entities)
+     * @returns Promise with hashed text and detected entities
+     */
+    hash(text: string, config?: HashConfig): Promise<HashResponse>;
+    /**
+     * Encrypt (reversibly protect) sensitive data in text using AES encryption
+     *
+     * @param text - Text to encrypt
+     * @param config - Optional configuration (encryption_key, entities)
+     * @returns Promise with encrypted text and detected entities
+     */
+    encrypt(text: string, config?: EncryptConfig): Promise<EncryptResponse>;
+}
+
+/**
+ * Base error class for Blindfold SDK
+ */
+declare class BlindfoldError extends Error {
+    constructor(message: string);
+}
+/**
+ * Error thrown when authentication fails
+ */
+declare class AuthenticationError extends BlindfoldError {
+    constructor(message?: string);
+}
+/**
+ * Error thrown when API request fails
+ */
+declare class APIError extends BlindfoldError {
+    statusCode: number;
+    responseBody?: any;
+    constructor(message: string, statusCode: number, responseBody?: any);
+}
+/**
+ * Error thrown when network request fails
+ */
+declare class NetworkError extends BlindfoldError {
+    constructor(message?: string);
+}
+
+export { APIError, type APIErrorResponse, AuthenticationError, Blindfold, type BlindfoldConfig, BlindfoldError, type DetectedEntity, type DetokenizeResponse, NetworkError, type TokenizeConfig, type TokenizeResponse };

package/dist/index.js

@@ -0,0 +1,196 @@
+'use strict';
+
+// src/errors.ts
+var BlindfoldError = class _BlindfoldError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "BlindfoldError";
+    Object.setPrototypeOf(this, _BlindfoldError.prototype);
+  }
+};
+var AuthenticationError = class _AuthenticationError extends BlindfoldError {
+  constructor(message = "Authentication failed. Please check your API key.") {
+    super(message);
+    this.name = "AuthenticationError";
+    Object.setPrototypeOf(this, _AuthenticationError.prototype);
+  }
+};
+var APIError = class _APIError extends BlindfoldError {
+  constructor(message, statusCode, responseBody) {
+    super(message);
+    this.name = "APIError";
+    this.statusCode = statusCode;
+    this.responseBody = responseBody;
+    Object.setPrototypeOf(this, _APIError.prototype);
+  }
+};
+var NetworkError = class _NetworkError extends BlindfoldError {
+  constructor(message = "Network request failed. Please check your connection.") {
+    super(message);
+    this.name = "NetworkError";
+    Object.setPrototypeOf(this, _NetworkError.prototype);
+  }
+};
+
+// src/client.ts
+var DEFAULT_BASE_URL = "https://api.blindfold.dev/api/public/v1";
+var Blindfold = class {
+  /**
+   * Create a new Blindfold client
+   * @param config - Configuration options
+   */
+  constructor(config) {
+    this.apiKey = config.apiKey;
+    this.baseUrl = config.baseUrl || DEFAULT_BASE_URL;
+    this.userId = config.userId;
+  }
+  /**
+   * Make an authenticated request to the API
+   */
+  async request(endpoint, method, body) {
+    const url = `${this.baseUrl}${endpoint}`;
+    const headers = {
+      "Content-Type": "application/json",
+      "X-API-Key": this.apiKey
+    };
+    if (this.userId) {
+      headers["X-Blindfold-User-Id"] = this.userId;
+    }
+    try {
+      const response = await fetch(url, {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0
+      });
+      if (response.status === 401 || response.status === 403) {
+        throw new AuthenticationError(
+          "Authentication failed. Please check your API key."
+        );
+      }
+      if (!response.ok) {
+        let errorMessage = `API request failed with status ${response.status}`;
+        let responseBody;
+        try {
+          responseBody = await response.json();
+          const errorData = responseBody;
+          errorMessage = errorData.detail || errorData.message || errorMessage;
+        } catch {
+          errorMessage = `${errorMessage}: ${response.statusText}`;
+        }
+        throw new APIError(errorMessage, response.status, responseBody);
+      }
+      return await response.json();
+    } catch (error) {
+      if (error instanceof AuthenticationError || error instanceof APIError) {
+        throw error;
+      }
+      if (error instanceof TypeError && error.message.includes("fetch")) {
+        throw new NetworkError(
+          "Network request failed. Please check your connection and the API URL."
+        );
+      }
+      throw new NetworkError(
+        error instanceof Error ? error.message : "Unknown error occurred"
+      );
+    }
+  }
+  /**
+   * Tokenize text by replacing sensitive information with tokens
+   * @param text - Text to tokenize
+   * @param config - Optional configuration
+   * @returns Promise with tokenized text and mapping
+   */
+  async tokenize(text, config) {
+    return this.request("/tokenize", "POST", {
+      text,
+      ...config
+    });
+  }
+  /**
+   * Detokenize text by replacing tokens with original values
+   * @param text - Tokenized text
+   * @param mapping - Token mapping from tokenize response
+   * @returns Promise with original text
+   */
+  async detokenize(text, mapping) {
+    return this.request("/detokenize", "POST", {
+      text,
+      mapping
+    });
+  }
+  /**
+   * Redact (permanently remove) sensitive information from text
+   *
+   * WARNING: Redaction is irreversible - original data cannot be restored!
+   *
+   * @param text - Text to redact
+   * @param config - Optional configuration (masking_char, entities)
+   * @returns Promise with redacted text and detected entities
+   */
+  async redact(text, config) {
+    return this.request("/redact", "POST", {
+      text,
+      ...config
+    });
+  }
+  /**
+   * Mask (partially hide) sensitive information from text
+   *
+   * @param text - Text to mask
+   * @param config - Optional configuration (chars_to_show, from_end, masking_char, entities)
+   * @returns Promise with masked text and detected entities
+   */
+  async mask(text, config) {
+    return this.request("/mask", "POST", {
+      text,
+      ...config
+    });
+  }
+  /**
+   * Synthesize (replace real data with synthetic fake data)
+   *
+   * @param text - Text to synthesize
+   * @param config - Optional configuration (language, entities)
+   * @returns Promise with synthetic text and detected entities
+   */
+  async synthesize(text, config) {
+    return this.request("/synthesize", "POST", {
+      text,
+      ...config
+    });
+  }
+  /**
+   * Hash (replace with deterministic hash values)
+   *
+   * @param text - Text to hash
+   * @param config - Optional configuration (hash_type, hash_prefix, hash_length, entities)
+   * @returns Promise with hashed text and detected entities
+   */
+  async hash(text, config) {
+    return this.request("/hash", "POST", {
+      text,
+      ...config
+    });
+  }
+  /**
+   * Encrypt (reversibly protect) sensitive data in text using AES encryption
+   *
+   * @param text - Text to encrypt
+   * @param config - Optional configuration (encryption_key, entities)
+   * @returns Promise with encrypted text and detected entities
+   */
+  async encrypt(text, config) {
+    return this.request("/encrypt", "POST", {
+      text,
+      ...config
+    });
+  }
+};
+
+exports.APIError = APIError;
+exports.AuthenticationError = AuthenticationError;
+exports.Blindfold = Blindfold;
+exports.BlindfoldError = BlindfoldError;
+exports.NetworkError = NetworkError;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/client.ts"],"names":[],"mappings":";;;AAGO,IAAM,cAAA,GAAN,MAAM,eAAA,SAAuB,KAAA,CAAM;AAAA,EACxC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,gBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,eAAA,CAAe,SAAS,CAAA;AAAA,EACtD;AACF;AAKO,IAAM,mBAAA,GAAN,MAAM,oBAAA,SAA4B,cAAA,CAAe;AAAA,EACtD,WAAA,CAAY,UAAkB,mDAAA,EAAqD;AACjF,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,oBAAA,CAAoB,SAAS,CAAA;AAAA,EAC3D;AACF;AAKO,IAAM,QAAA,GAAN,MAAM,SAAA,SAAiB,cAAA,CAAe;AAAA,EAI3C,WAAA,CAAY,OAAA,EAAiB,UAAA,EAAoB,YAAA,EAAoB;AACnE,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAClB,IAAA,IAAA,CAAK,YAAA,GAAe,YAAA;AACpB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,SAAA,CAAS,SAAS,CAAA;AAAA,EAChD;AACF;AAKO,IAAM,YAAA,GAAN,MAAM,aAAA,SAAqB,cAAA,CAAe;AAAA,EAC/C,WAAA,CAAY,UAAkB,uDAAA,EAAyD;AACrF,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,cAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,aAAA,CAAa,SAAS,CAAA;AAAA,EACpD;AACF;;;AC5BA,IAAM,gBAAA,GAAmB,yCAAA;AAKlB,IAAM,YAAN,MAAgB;AAAA;AAAA;AAAA;AAAA;AAAA,EASrB,YAAY,MAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AACrB,IAAA,IAAA,CAAK,OAAA,GAAU,OAAO,OAAA,IAAW,gBAAA;AACjC,IAAA,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,OAAA,CACZ,QAAA,EACA,MAAA,EACA,IAAA,EACY;AACZ,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAA,CAAK,OAAO,GAAG,QAAQ,CAAA,CAAA;AAEtC,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAa,IAAA,CAAK;AAAA,KACpB;AAEA,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,OAAA,CAAQ,qBAAqB,IAAI,IAAA,CAAK,MAAA;AAAA,IACxC;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAChC,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA;AAAA,OACrC,CAAA;AAGD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,EAAK;AACtD,QAAA,MAAM,IAAI,mBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AAGA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,IAAI,YAAA,GAAe,CAAA,+BAAA,EAAkC,QAAA,CAAS,MAAM,CAAA,CAAA;AACpE,QAAA,IAAI,YAAA;AAEJ,QAAA,IAAI;AACF,UAAA,YAAA,GAAe,MAAM,SAAS,IAAA,EAAK;AACnC,UAAA,MAAM,SAAA,GAAY,YAAA;AAClB,UAAA,YAAA,GAAe,SAAA,CAAU,MAAA,IAAU,SAAA,CAAU,OAAA,IAAW,YAAA;AAAA,QAC1D,CAAA,CAAA,MAAQ;AAEN,UAAA,YAAA,GAAe,CAAA,EAAG,YAAY,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAA;AAAA,QACxD;AAEA,QAAA,MAAM,IAAI,QAAA,CAAS,YAAA,EAAc,QAAA,CAAS,QAAQ,YAAY,CAAA;AAAA,MAChE;AAEA,MAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,IAC9B,SAAS,KAAA,EAAO;AAEd,MAAA,IACE,KAAA,YAAiB,mBAAA,IACjB,KAAA,YAAiB,QAAA,EACjB;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAGA,MAAA,IAAI,iBAAiB,SAAA,IAAa,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA,EAAG;AACjE,QAAA,MAAM,IAAI,YAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AAGA,MAAA,MAAM,IAAI,YAAA;AAAA,QACR,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,OAC3C;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,QAAA,CACJ,IAAA,EACA,MAAA,EAC2B;AAC3B,IAAA,OAAO,IAAA,CAAK,OAAA,CAA0B,WAAA,EAAa,MAAA,EAAQ;AAAA,MACzD,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAA,CACJ,IAAA,EACA,OAAA,EAC6B;AAC7B,IAAA,OAAO,IAAA,CAAK,OAAA,CAA4B,aAAA,EAAe,MAAA,EAAQ;AAAA,MAC7D,IAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,MAAA,CACJ,IAAA,EACA,MAAA,EACyB;AACzB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAwB,SAAA,EAAW,MAAA,EAAQ;AAAA,MACrD,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,IAAA,CACJ,IAAA,EACA,MAAA,EACuB;AACvB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAsB,OAAA,EAAS,MAAA,EAAQ;AAAA,MACjD,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,UAAA,CACJ,IAAA,EACA,MAAA,EAC6B;AAC7B,IAAA,OAAO,IAAA,CAAK,OAAA,CAA4B,aAAA,EAAe,MAAA,EAAQ;AAAA,MAC7D,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,IAAA,CACJ,IAAA,EACA,MAAA,EACuB;AACvB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAsB,OAAA,EAAS,MAAA,EAAQ;AAAA,MACjD,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,OAAA,CACJ,IAAA,EACA,MAAA,EAC0B;AAC1B,IAAA,OAAO,IAAA,CAAK,OAAA,CAAyB,UAAA,EAAY,MAAA,EAAQ;AAAA,MACvD,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AACF","file":"index.js","sourcesContent":["/**\n * Base error class for Blindfold SDK\n */\nexport class BlindfoldError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'BlindfoldError'\n    Object.setPrototypeOf(this, BlindfoldError.prototype)\n  }\n}\n\n/**\n * Error thrown when authentication fails\n */\nexport class AuthenticationError extends BlindfoldError {\n  constructor(message: string = 'Authentication failed. Please check your API key.') {\n    super(message)\n    this.name = 'AuthenticationError'\n    Object.setPrototypeOf(this, AuthenticationError.prototype)\n  }\n}\n\n/**\n * Error thrown when API request fails\n */\nexport class APIError extends BlindfoldError {\n  statusCode: number\n  responseBody?: any\n\n  constructor(message: string, statusCode: number, responseBody?: any) {\n    super(message)\n    this.name = 'APIError'\n    this.statusCode = statusCode\n    this.responseBody = responseBody\n    Object.setPrototypeOf(this, APIError.prototype)\n  }\n}\n\n/**\n * Error thrown when network request fails\n */\nexport class NetworkError extends BlindfoldError {\n  constructor(message: string = 'Network request failed. Please check your connection.') {\n    super(message)\n    this.name = 'NetworkError'\n    Object.setPrototypeOf(this, NetworkError.prototype)\n  }\n}\n","import type {\n  BlindfoldConfig,\n  TokenizeConfig,\n  TokenizeResponse,\n  DetokenizeResponse,\n  RedactConfig,\n  RedactResponse,\n  MaskConfig,\n  MaskResponse,\n  SynthesizeConfig,\n  SynthesizeResponse,\n  HashConfig,\n  HashResponse,\n  EncryptConfig,\n  EncryptResponse,\n  APIErrorResponse,\n} from './types'\nimport { AuthenticationError, APIError, NetworkError } from './errors'\n\nconst DEFAULT_BASE_URL = 'https://api.blindfold.dev/api/public/v1'\n\n/**\n * Blindfold client for tokenization and detokenization\n */\nexport class Blindfold {\n  private apiKey: string\n  private baseUrl: string\n  private userId?: string\n\n  /**\n   * Create a new Blindfold client\n   * @param config - Configuration options\n   */\n  constructor(config: BlindfoldConfig) {\n    this.apiKey = config.apiKey\n    this.baseUrl = config.baseUrl || DEFAULT_BASE_URL\n    this.userId = config.userId\n  }\n\n  /**\n   * Make an authenticated request to the API\n   */\n  private async request<T>(\n    endpoint: string,\n    method: string,\n    body?: any\n  ): Promise<T> {\n    const url = `${this.baseUrl}${endpoint}`\n\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      'X-API-Key': this.apiKey,\n    }\n\n    if (this.userId) {\n      headers['X-Blindfold-User-Id'] = this.userId\n    }\n\n    try {\n      const response = await fetch(url, {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n      })\n\n      // Handle authentication errors\n      if (response.status === 401 || response.status === 403) {\n        throw new AuthenticationError(\n          'Authentication failed. Please check your API key.'\n        )\n      }\n\n      // Handle other error responses\n      if (!response.ok) {\n        let errorMessage = `API request failed with status ${response.status}`\n        let responseBody: any\n\n        try {\n          responseBody = await response.json()\n          const errorData = responseBody as APIErrorResponse\n          errorMessage = errorData.detail || errorData.message || errorMessage\n        } catch {\n          // If we can't parse the error response, use the status text\n          errorMessage = `${errorMessage}: ${response.statusText}`\n        }\n\n        throw new APIError(errorMessage, response.status, responseBody)\n      }\n\n      return (await response.json()) as T\n    } catch (error) {\n      // Re-throw our custom errors\n      if (\n        error instanceof AuthenticationError ||\n        error instanceof APIError\n      ) {\n        throw error\n      }\n\n      // Handle network errors\n      if (error instanceof TypeError && error.message.includes('fetch')) {\n        throw new NetworkError(\n          'Network request failed. Please check your connection and the API URL.'\n        )\n      }\n\n      // Handle other errors\n      throw new NetworkError(\n        error instanceof Error ? error.message : 'Unknown error occurred'\n      )\n    }\n  }\n\n  /**\n   * Tokenize text by replacing sensitive information with tokens\n   * @param text - Text to tokenize\n   * @param config - Optional configuration\n   * @returns Promise with tokenized text and mapping\n   */\n  async tokenize(\n    text: string,\n    config?: TokenizeConfig\n  ): Promise<TokenizeResponse> {\n    return this.request<TokenizeResponse>('/tokenize', 'POST', {\n      text,\n      ...config,\n    })\n  }\n\n  /**\n   * Detokenize text by replacing tokens with original values\n   * @param text - Tokenized text\n   * @param mapping - Token mapping from tokenize response\n   * @returns Promise with original text\n   */\n  async detokenize(\n    text: string,\n    mapping: Record<string, string>\n  ): Promise<DetokenizeResponse> {\n    return this.request<DetokenizeResponse>('/detokenize', 'POST', {\n      text,\n      mapping,\n    })\n  }\n\n  /**\n   * Redact (permanently remove) sensitive information from text\n   *\n   * WARNING: Redaction is irreversible - original data cannot be restored!\n   *\n   * @param text - Text to redact\n   * @param config - Optional configuration (masking_char, entities)\n   * @returns Promise with redacted text and detected entities\n   */\n  async redact(\n    text: string,\n    config?: RedactConfig\n  ): Promise<RedactResponse> {\n    return this.request<RedactResponse>('/redact', 'POST', {\n      text,\n      ...config,\n    })\n  }\n\n  /**\n   * Mask (partially hide) sensitive information from text\n   *\n   * @param text - Text to mask\n   * @param config - Optional configuration (chars_to_show, from_end, masking_char, entities)\n   * @returns Promise with masked text and detected entities\n   */\n  async mask(\n    text: string,\n    config?: MaskConfig\n  ): Promise<MaskResponse> {\n    return this.request<MaskResponse>('/mask', 'POST', {\n      text,\n      ...config,\n    })\n  }\n\n  /**\n   * Synthesize (replace real data with synthetic fake data)\n   *\n   * @param text - Text to synthesize\n   * @param config - Optional configuration (language, entities)\n   * @returns Promise with synthetic text and detected entities\n   */\n  async synthesize(\n    text: string,\n    config?: SynthesizeConfig\n  ): Promise<SynthesizeResponse> {\n    return this.request<SynthesizeResponse>('/synthesize', 'POST', {\n      text,\n      ...config,\n    })\n  }\n\n  /**\n   * Hash (replace with deterministic hash values)\n   *\n   * @param text - Text to hash\n   * @param config - Optional configuration (hash_type, hash_prefix, hash_length, entities)\n   * @returns Promise with hashed text and detected entities\n   */\n  async hash(\n    text: string,\n    config?: HashConfig\n  ): Promise<HashResponse> {\n    return this.request<HashResponse>('/hash', 'POST', {\n      text,\n      ...config,\n    })\n  }\n\n  /**\n   * Encrypt (reversibly protect) sensitive data in text using AES encryption\n   *\n   * @param text - Text to encrypt\n   * @param config - Optional configuration (encryption_key, entities)\n   * @returns Promise with encrypted text and detected entities\n   */\n  async encrypt(\n    text: string,\n    config?: EncryptConfig\n  ): Promise<EncryptResponse> {\n    return this.request<EncryptResponse>('/encrypt', 'POST', {\n      text,\n      ...config,\n    })\n  }\n}\n"]}

package/dist/index.mjs

@@ -0,0 +1,190 @@
+// src/errors.ts
+var BlindfoldError = class _BlindfoldError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "BlindfoldError";
+    Object.setPrototypeOf(this, _BlindfoldError.prototype);
+  }
+};
+var AuthenticationError = class _AuthenticationError extends BlindfoldError {
+  constructor(message = "Authentication failed. Please check your API key.") {
+    super(message);
+    this.name = "AuthenticationError";
+    Object.setPrototypeOf(this, _AuthenticationError.prototype);
+  }
+};
+var APIError = class _APIError extends BlindfoldError {
+  constructor(message, statusCode, responseBody) {
+    super(message);
+    this.name = "APIError";
+    this.statusCode = statusCode;
+    this.responseBody = responseBody;
+    Object.setPrototypeOf(this, _APIError.prototype);
+  }
+};
+var NetworkError = class _NetworkError extends BlindfoldError {
+  constructor(message = "Network request failed. Please check your connection.") {
+    super(message);
+    this.name = "NetworkError";
+    Object.setPrototypeOf(this, _NetworkError.prototype);
+  }
+};
+
+// src/client.ts
+var DEFAULT_BASE_URL = "https://api.blindfold.dev/api/public/v1";
+var Blindfold = class {
+  /**
+   * Create a new Blindfold client
+   * @param config - Configuration options
+   */
+  constructor(config) {
+    this.apiKey = config.apiKey;
+    this.baseUrl = config.baseUrl || DEFAULT_BASE_URL;
+    this.userId = config.userId;
+  }
+  /**
+   * Make an authenticated request to the API
+   */
+  async request(endpoint, method, body) {
+    const url = `${this.baseUrl}${endpoint}`;
+    const headers = {
+      "Content-Type": "application/json",
+      "X-API-Key": this.apiKey
+    };
+    if (this.userId) {
+      headers["X-Blindfold-User-Id"] = this.userId;
+    }
+    try {
+      const response = await fetch(url, {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0
+      });
+      if (response.status === 401 || response.status === 403) {
+        throw new AuthenticationError(
+          "Authentication failed. Please check your API key."
+        );
+      }
+      if (!response.ok) {
+        let errorMessage = `API request failed with status ${response.status}`;
+        let responseBody;
+        try {
+          responseBody = await response.json();
+          const errorData = responseBody;
+          errorMessage = errorData.detail || errorData.message || errorMessage;
+        } catch {
+          errorMessage = `${errorMessage}: ${response.statusText}`;
+        }
+        throw new APIError(errorMessage, response.status, responseBody);
+      }
+      return await response.json();
+    } catch (error) {
+      if (error instanceof AuthenticationError || error instanceof APIError) {
+        throw error;
+      }
+      if (error instanceof TypeError && error.message.includes("fetch")) {
+        throw new NetworkError(
+          "Network request failed. Please check your connection and the API URL."
+        );
+      }
+      throw new NetworkError(
+        error instanceof Error ? error.message : "Unknown error occurred"
+      );
+    }
+  }
+  /**
+   * Tokenize text by replacing sensitive information with tokens
+   * @param text - Text to tokenize
+   * @param config - Optional configuration
+   * @returns Promise with tokenized text and mapping
+   */
+  async tokenize(text, config) {
+    return this.request("/tokenize", "POST", {
+      text,
+      ...config
+    });
+  }
+  /**
+   * Detokenize text by replacing tokens with original values
+   * @param text - Tokenized text
+   * @param mapping - Token mapping from tokenize response
+   * @returns Promise with original text
+   */
+  async detokenize(text, mapping) {
+    return this.request("/detokenize", "POST", {
+      text,
+      mapping
+    });
+  }
+  /**
+   * Redact (permanently remove) sensitive information from text
+   *
+   * WARNING: Redaction is irreversible - original data cannot be restored!
+   *
+   * @param text - Text to redact
+   * @param config - Optional configuration (masking_char, entities)
+   * @returns Promise with redacted text and detected entities
+   */
+  async redact(text, config) {
+    return this.request("/redact", "POST", {
+      text,
+      ...config
+    });
+  }
+  /**
+   * Mask (partially hide) sensitive information from text
+   *
+   * @param text - Text to mask
+   * @param config - Optional configuration (chars_to_show, from_end, masking_char, entities)
+   * @returns Promise with masked text and detected entities
+   */
+  async mask(text, config) {
+    return this.request("/mask", "POST", {
+      text,
+      ...config
+    });
+  }
+  /**
+   * Synthesize (replace real data with synthetic fake data)
+   *
+   * @param text - Text to synthesize
+   * @param config - Optional configuration (language, entities)
+   * @returns Promise with synthetic text and detected entities
+   */
+  async synthesize(text, config) {
+    return this.request("/synthesize", "POST", {
+      text,
+      ...config
+    });
+  }
+  /**
+   * Hash (replace with deterministic hash values)
+   *
+   * @param text - Text to hash
+   * @param config - Optional configuration (hash_type, hash_prefix, hash_length, entities)
+   * @returns Promise with hashed text and detected entities
+   */
+  async hash(text, config) {
+    return this.request("/hash", "POST", {
+      text,
+      ...config
+    });
+  }
+  /**
+   * Encrypt (reversibly protect) sensitive data in text using AES encryption
+   *
+   * @param text - Text to encrypt
+   * @param config - Optional configuration (encryption_key, entities)
+   * @returns Promise with encrypted text and detected entities
+   */
+  async encrypt(text, config) {
+    return this.request("/encrypt", "POST", {
+      text,
+      ...config
+    });
+  }
+};
+
+export { APIError, AuthenticationError, Blindfold, BlindfoldError, NetworkError };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/client.ts"],"names":[],"mappings":";AAGO,IAAM,cAAA,GAAN,MAAM,eAAA,SAAuB,KAAA,CAAM;AAAA,EACxC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,gBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,eAAA,CAAe,SAAS,CAAA;AAAA,EACtD;AACF;AAKO,IAAM,mBAAA,GAAN,MAAM,oBAAA,SAA4B,cAAA,CAAe;AAAA,EACtD,WAAA,CAAY,UAAkB,mDAAA,EAAqD;AACjF,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,oBAAA,CAAoB,SAAS,CAAA;AAAA,EAC3D;AACF;AAKO,IAAM,QAAA,GAAN,MAAM,SAAA,SAAiB,cAAA,CAAe;AAAA,EAI3C,WAAA,CAAY,OAAA,EAAiB,UAAA,EAAoB,YAAA,EAAoB;AACnE,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAClB,IAAA,IAAA,CAAK,YAAA,GAAe,YAAA;AACpB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,SAAA,CAAS,SAAS,CAAA;AAAA,EAChD;AACF;AAKO,IAAM,YAAA,GAAN,MAAM,aAAA,SAAqB,cAAA,CAAe;AAAA,EAC/C,WAAA,CAAY,UAAkB,uDAAA,EAAyD;AACrF,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,cAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,aAAA,CAAa,SAAS,CAAA;AAAA,EACpD;AACF;;;AC5BA,IAAM,gBAAA,GAAmB,yCAAA;AAKlB,IAAM,YAAN,MAAgB;AAAA;AAAA;AAAA;AAAA;AAAA,EASrB,YAAY,MAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AACrB,IAAA,IAAA,CAAK,OAAA,GAAU,OAAO,OAAA,IAAW,gBAAA;AACjC,IAAA,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,OAAA,CACZ,QAAA,EACA,MAAA,EACA,IAAA,EACY;AACZ,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAA,CAAK,OAAO,GAAG,QAAQ,CAAA,CAAA;AAEtC,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAa,IAAA,CAAK;AAAA,KACpB;AAEA,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,OAAA,CAAQ,qBAAqB,IAAI,IAAA,CAAK,MAAA;AAAA,IACxC;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAChC,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA;AAAA,OACrC,CAAA;AAGD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,EAAK;AACtD,QAAA,MAAM,IAAI,mBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AAGA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,IAAI,YAAA,GAAe,CAAA,+BAAA,EAAkC,QAAA,CAAS,MAAM,CAAA,CAAA;AACpE,QAAA,IAAI,YAAA;AAEJ,QAAA,IAAI;AACF,UAAA,YAAA,GAAe,MAAM,SAAS,IAAA,EAAK;AACnC,UAAA,MAAM,SAAA,GAAY,YAAA;AAClB,UAAA,YAAA,GAAe,SAAA,CAAU,MAAA,IAAU,SAAA,CAAU,OAAA,IAAW,YAAA;AAAA,QAC1D,CAAA,CAAA,MAAQ;AAEN,UAAA,YAAA,GAAe,CAAA,EAAG,YAAY,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAA;AAAA,QACxD;AAEA,QAAA,MAAM,IAAI,QAAA,CAAS,YAAA,EAAc,QAAA,CAAS,QAAQ,YAAY,CAAA;AAAA,MAChE;AAEA,MAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,IAC9B,SAAS,KAAA,EAAO;AAEd,MAAA,IACE,KAAA,YAAiB,mBAAA,IACjB,KAAA,YAAiB,QAAA,EACjB;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AAGA,MAAA,IAAI,iBAAiB,SAAA,IAAa,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA,EAAG;AACjE,QAAA,MAAM,IAAI,YAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AAGA,MAAA,MAAM,IAAI,YAAA;AAAA,QACR,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,OAC3C;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,QAAA,CACJ,IAAA,EACA,MAAA,EAC2B;AAC3B,IAAA,OAAO,IAAA,CAAK,OAAA,CAA0B,WAAA,EAAa,MAAA,EAAQ;AAAA,MACzD,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAA,CACJ,IAAA,EACA,OAAA,EAC6B;AAC7B,IAAA,OAAO,IAAA,CAAK,OAAA,CAA4B,aAAA,EAAe,MAAA,EAAQ;AAAA,MAC7D,IAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,MAAA,CACJ,IAAA,EACA,MAAA,EACyB;AACzB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAwB,SAAA,EAAW,MAAA,EAAQ;AAAA,MACrD,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,IAAA,CACJ,IAAA,EACA,MAAA,EACuB;AACvB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAsB,OAAA,EAAS,MAAA,EAAQ;AAAA,MACjD,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,UAAA,CACJ,IAAA,EACA,MAAA,EAC6B;AAC7B,IAAA,OAAO,IAAA,CAAK,OAAA,CAA4B,aAAA,EAAe,MAAA,EAAQ;AAAA,MAC7D,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,IAAA,CACJ,IAAA,EACA,MAAA,EACuB;AACvB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAsB,OAAA,EAAS,MAAA,EAAQ;AAAA,MACjD,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,OAAA,CACJ,IAAA,EACA,MAAA,EAC0B;AAC1B,IAAA,OAAO,IAAA,CAAK,OAAA,CAAyB,UAAA,EAAY,MAAA,EAAQ;AAAA,MACvD,IAAA;AAAA,MACA,GAAG;AAAA,KACJ,CAAA;AAAA,EACH;AACF","file":"index.mjs","sourcesContent":["/**\n * Base error class for Blindfold SDK\n */\nexport class BlindfoldError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'BlindfoldError'\n    Object.setPrototypeOf(this, BlindfoldError.prototype)\n  }\n}\n\n/**\n * Error thrown when authentication fails\n */\nexport class AuthenticationError extends BlindfoldError {\n  constructor(message: string = 'Authentication failed. Please check your API key.') {\n    super(message)\n    this.name = 'AuthenticationError'\n    Object.setPrototypeOf(this, AuthenticationError.prototype)\n  }\n}\n\n/**\n * Error thrown when API request fails\n */\nexport class APIError extends BlindfoldError {\n  statusCode: number\n  responseBody?: any\n\n  constructor(message: string, statusCode: number, responseBody?: any) {\n    super(message)\n    this.name = 'APIError'\n    this.statusCode = statusCode\n    this.responseBody = responseBody\n    Object.setPrototypeOf(this, APIError.prototype)\n  }\n}\n\n/**\n * Error thrown when network request fails\n */\nexport class NetworkError extends BlindfoldError {\n  constructor(message: string = 'Network request failed. Please check your connection.') {\n    super(message)\n    this.name = 'NetworkError'\n    Object.setPrototypeOf(this, NetworkError.prototype)\n  }\n}\n","import type {\n  BlindfoldConfig,\n  TokenizeConfig,\n  TokenizeResponse,\n  DetokenizeResponse,\n  RedactConfig,\n  RedactResponse,\n  MaskConfig,\n  MaskResponse,\n  SynthesizeConfig,\n  SynthesizeResponse,\n  HashConfig,\n  HashResponse,\n  EncryptConfig,\n  EncryptResponse,\n  APIErrorResponse,\n} from './types'\nimport { AuthenticationError, APIError, NetworkError } from './errors'\n\nconst DEFAULT_BASE_URL = 'https://api.blindfold.dev/api/public/v1'\n\n/**\n * Blindfold client for tokenization and detokenization\n */\nexport class Blindfold {\n  private apiKey: string\n  private baseUrl: string\n  private userId?: string\n\n  /**\n   * Create a new Blindfold client\n   * @param config - Configuration options\n   */\n  constructor(config: BlindfoldConfig) {\n    this.apiKey = config.apiKey\n    this.baseUrl = config.baseUrl || DEFAULT_BASE_URL\n    this.userId = config.userId\n  }\n\n  /**\n   * Make an authenticated request to the API\n   */\n  private async request<T>(\n    endpoint: string,\n    method: string,\n    body?: any\n  ): Promise<T> {\n    const url = `${this.baseUrl}${endpoint}`\n\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      'X-API-Key': this.apiKey,\n    }\n\n    if (this.userId) {\n      headers['X-Blindfold-User-Id'] = this.userId\n    }\n\n    try {\n      const response = await fetch(url, {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n      })\n\n      // Handle authentication errors\n      if (response.status === 401 || response.status === 403) {\n        throw new AuthenticationError(\n          'Authentication failed. Please check your API key.'\n        )\n      }\n\n      // Handle other error responses\n      if (!response.ok) {\n        let errorMessage = `API request failed with status ${response.status}`\n        let responseBody: any\n\n        try {\n          responseBody = await response.json()\n          const errorData = responseBody as APIErrorResponse\n          errorMessage = errorData.detail || errorData.message || errorMessage\n        } catch {\n          // If we can't parse the error response, use the status text\n          errorMessage = `${errorMessage}: ${response.statusText}`\n        }\n\n        throw new APIError(errorMessage, response.status, responseBody)\n      }\n\n      return (await response.json()) as T\n    } catch (error) {\n      // Re-throw our custom errors\n      if (\n        error instanceof AuthenticationError ||\n        error instanceof APIError\n      ) {\n        throw error\n      }\n\n      // Handle network errors\n      if (error instanceof TypeError && error.message.includes('fetch')) {\n        throw new NetworkError(\n          'Network request failed. Please check your connection and the API URL.'\n        )\n      }\n\n      // Handle other errors\n      throw new NetworkError(\n        error instanceof Error ? error.message : 'Unknown error occurred'\n      )\n    }\n  }\n\n  /**\n   * Tokenize text by replacing sensitive information with tokens\n   * @param text - Text to tokenize\n   * @param config - Optional configuration\n   * @returns Promise with tokenized text and mapping\n   */\n  async tokenize(\n    text: string,\n    config?: TokenizeConfig\n  ): Promise<TokenizeResponse> {\n    return this.request<TokenizeResponse>('/tokenize', 'POST', {\n      text,\n      ...config,\n    })\n  }\n\n  /**\n   * Detokenize text by replacing tokens with original values\n   * @param text - Tokenized text\n   * @param mapping - Token mapping from tokenize response\n   * @returns Promise with original text\n   */\n  async detokenize(\n    text: string,\n    mapping: Record<string, string>\n  ): Promise<DetokenizeResponse> {\n    return this.request<DetokenizeResponse>('/detokenize', 'POST', {\n      text,\n      mapping,\n    })\n  }\n\n  /**\n   * Redact (permanently remove) sensitive information from text\n   *\n   * WARNING: Redaction is irreversible - original data cannot be restored!\n   *\n   * @param text - Text to redact\n   * @param config - Optional configuration (masking_char, entities)\n   * @returns Promise with redacted text and detected entities\n   */\n  async redact(\n    text: string,\n    config?: RedactConfig\n  ): Promise<RedactResponse> {\n    return this.request<RedactResponse>('/redact', 'POST', {\n      text,\n      ...config,\n    })\n  }\n\n  /**\n   * Mask (partially hide) sensitive information from text\n   *\n   * @param text - Text to mask\n   * @param config - Optional configuration (chars_to_show, from_end, masking_char, entities)\n   * @returns Promise with masked text and detected entities\n   */\n  async mask(\n    text: string,\n    config?: MaskConfig\n  ): Promise<MaskResponse> {\n    return this.request<MaskResponse>('/mask', 'POST', {\n      text,\n      ...config,\n    })\n  }\n\n  /**\n   * Synthesize (replace real data with synthetic fake data)\n   *\n   * @param text - Text to synthesize\n   * @param config - Optional configuration (language, entities)\n   * @returns Promise with synthetic text and detected entities\n   */\n  async synthesize(\n    text: string,\n    config?: SynthesizeConfig\n  ): Promise<SynthesizeResponse> {\n    return this.request<SynthesizeResponse>('/synthesize', 'POST', {\n      text,\n      ...config,\n    })\n  }\n\n  /**\n   * Hash (replace with deterministic hash values)\n   *\n   * @param text - Text to hash\n   * @param config - Optional configuration (hash_type, hash_prefix, hash_length, entities)\n   * @returns Promise with hashed text and detected entities\n   */\n  async hash(\n    text: string,\n    config?: HashConfig\n  ): Promise<HashResponse> {\n    return this.request<HashResponse>('/hash', 'POST', {\n      text,\n      ...config,\n    })\n  }\n\n  /**\n   * Encrypt (reversibly protect) sensitive data in text using AES encryption\n   *\n   * @param text - Text to encrypt\n   * @param config - Optional configuration (encryption_key, entities)\n   * @returns Promise with encrypted text and detected entities\n   */\n  async encrypt(\n    text: string,\n    config?: EncryptConfig\n  ): Promise<EncryptResponse> {\n    return this.request<EncryptResponse>('/encrypt', 'POST', {\n      text,\n      ...config,\n    })\n  }\n}\n"]}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@blindfold/sdk",
+  "version": "1.0.0",
+  "description": "JavaScript/TypeScript SDK for Blindfold Gateway",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "type-check": "tsc --noEmit"
+  },
+  "keywords": [
+    "blindfold",
+    "tokenization",
+    "pii",
+    "security"
+  ],
+  "author": "",
+  "license": "MIT",
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "tsup": "^8.0.1",
+    "typescript": "^5.3.3"
+  }
+}