@discretion/core 0.1.0

package/dist/src/generate/vat.js

@@ -0,0 +1,233 @@
+/**
+ * Valid-value generators for EU VAT — one synthesizer per member state,
+ * each closing its national checksum with the shared primitives, plus a
+ * country-random wrapper. Reused by M3's corpus generator.
+ */
+import { toDigits, weightedSum, weightedMod, weightedModBy, cyclicWeightedMod, luhnCheckDigit, mod11_10CheckDigit, } from '../checksums/index.js';
+import { mulberry32 } from './prng.js';
+function pick(rng, items) {
+    return items[Math.floor(rng() * items.length)];
+}
+function int(rng, min, max) {
+    return min + Math.floor(rng() * (max - min + 1));
+}
+function digits(rng, n) {
+    let out = '';
+    for (let i = 0; i < n; i++)
+        out += String(int(rng, 0, 9));
+    return out;
+}
+const SYNTHS = {
+    AT: (rng) => {
+        const seven = digits(rng, 7);
+        const d = toDigits(seven);
+        let s = 0;
+        for (let i = 0; i < 7; i++) {
+            const product = d[i] * (i % 2 === 0 ? 1 : 2);
+            s += product > 9 ? product - 9 : product;
+        }
+        return `U${seven}${(10 - ((s + 4) % 10)) % 10}`;
+    },
+    BE: (rng) => {
+        const eight = `0${digits(rng, 7)}`;
+        return `${eight}${String(97 - (Number(eight) % 97)).padStart(2, '0')}`;
+    },
+    BG: (rng) => {
+        for (;;) {
+            const eight = digits(rng, 8);
+            const d = toDigits(eight);
+            let r = weightedModBy(d, (i) => i + 1, 11);
+            if (r === 10) {
+                r = weightedModBy(d, (i) => i + 3, 11);
+                if (r === 10)
+                    r = 0;
+            }
+            return `${eight}${r}`;
+        }
+    },
+    CY: (rng) => {
+        const TRANSFORM = [1, 0, 5, 7, 9, 13, 15, 17, 19, 21];
+        const eight = digits(rng, 8);
+        let sum = 0;
+        for (let i = 0; i < 8; i++) {
+            const d = Number(eight[i]);
+            sum += i % 2 === 0 ? TRANSFORM[d] : d;
+        }
+        return `${eight}${String.fromCharCode(65 + (sum % 26))}`;
+    },
+    CZ: (rng) => {
+        const seven = digits(rng, 7);
+        const r = weightedModBy(toDigits(seven), (i) => 8 - i, 11);
+        const c = r === 0 ? 1 : r === 1 ? 0 : 11 - r;
+        return `${seven}${c}`;
+    },
+    DE: (rng) => {
+        const eight = String(int(rng, 1, 9)) + digits(rng, 7);
+        return `${eight}${mod11_10CheckDigit(eight)}`;
+    },
+    DK: (rng) => {
+        for (;;) {
+            const seven = String(int(rng, 1, 9)) + digits(rng, 6);
+            const partial = weightedSum(toDigits(seven), [2, 7, 6, 5, 4, 3, 2]);
+            for (let d = 0; d <= 9; d++) {
+                if ((partial + d) % 11 === 0)
+                    return `${seven}${d}`;
+            }
+        }
+    },
+    EE: (rng) => {
+        const eight = digits(rng, 8);
+        const sum = cyclicWeightedMod(toDigits(eight), [3, 7, 1], 10);
+        return `${eight}${(10 - sum) % 10}`;
+    },
+    EL: (rng) => {
+        const eight = String(int(rng, 1, 9)) + digits(rng, 7);
+        const sum = weightedModBy(toDigits(eight), (i) => 2 ** (8 - i), 11);
+        return `${eight}${sum % 10}`;
+    },
+    ES: (rng) => {
+        const eight = digits(rng, 8);
+        return `${eight}${'TRWAGMYFPDXBNJZSQVHLCKE'[Number(eight) % 23]}`;
+    },
+    FI: (rng) => {
+        for (;;) {
+            const seven = digits(rng, 7);
+            const r = weightedMod(toDigits(seven), [7, 9, 10, 5, 8, 4, 2], 11);
+            if (r === 1)
+                continue;
+            return `${seven}${r === 0 ? 0 : 11 - r}`;
+        }
+    },
+    FR: (rng) => {
+        const siren = String(int(rng, 1, 9)) + digits(rng, 7);
+        const full = `${siren}${luhnCheckDigit(siren)}`;
+        const key = (12 + 3 * (Number(full) % 97)) % 97;
+        return `${String(key).padStart(2, '0')}${full}`;
+    },
+    HR: (rng) => {
+        const ten = digits(rng, 10);
+        return `${ten}${mod11_10CheckDigit(ten)}`;
+    },
+    HU: (rng) => {
+        const seven = String(int(rng, 1, 9)) + digits(rng, 6);
+        const sum = weightedMod(toDigits(seven), [9, 7, 3, 1, 9, 7, 3], 10);
+        return `${seven}${(10 - sum) % 10}`;
+    },
+    IE: (rng) => {
+        const seven = digits(rng, 7);
+        const second = rng() < 0.4 ? pick(rng, ['A', 'H']) : undefined;
+        let sum = weightedSum(toDigits(seven), [8, 7, 6, 5, 4, 3, 2]);
+        if (second !== undefined)
+            sum += 9 * (second.charCodeAt(0) - 64);
+        return `${seven}${'WABCDEFGHIJKLMNOPQRSTUV'[sum % 23]}${second ?? ''}`;
+    },
+    IT: (rng) => {
+        const ten = String(int(rng, 1, 9)) + digits(rng, 6) + '0' + digits(rng, 2);
+        return `${ten}${luhnCheckDigit(ten)}`;
+    },
+    LT: (rng) => {
+        for (;;) {
+            const eight = digits(rng, 8);
+            const d = toDigits(eight);
+            let r = weightedModBy(d, (i) => (i % 9) + 1, 11);
+            if (r === 10) {
+                r = weightedModBy(d, (i) => ((i + 2) % 9) + 1, 11);
+                if (r === 10)
+                    r = 0;
+            }
+            return `${eight}${r}`;
+        }
+    },
+    LU: (rng) => {
+        const six = digits(rng, 6);
+        return `${six}${String(Number(six) % 89).padStart(2, '0')}`;
+    },
+    LV: (rng) => {
+        for (;;) {
+            const ten = String(int(rng, 4, 9)) + digits(rng, 9);
+            const d = toDigits(ten);
+            let sum = 0;
+            const weights = [9, 1, 4, 8, 3, 10, 2, 5, 7, 6];
+            for (let i = 0; i < 10; i++)
+                sum += d[i] * weights[i];
+            const c = (((3 - sum) % 11) + 11) % 11;
+            if (c === 10)
+                continue;
+            return `${ten}${c}`;
+        }
+    },
+    MT: (rng) => {
+        for (;;) {
+            const six = String(int(rng, 1, 9)) + digits(rng, 5);
+            const r = weightedMod(toDigits(six), [3, 4, 6, 7, 8, 9], 37);
+            const check = 37 - r === 0 ? 37 : 37 - r;
+            return `${six}${String(check).padStart(2, '0')}`;
+        }
+    },
+    NL: (rng) => {
+        for (;;) {
+            const eight = digits(rng, 8);
+            const r = weightedModBy(toDigits(eight), (i) => 9 - i, 11);
+            if (r === 10)
+                continue;
+            return `${eight}${r}B${String(int(rng, 1, 99)).padStart(2, '0')}`;
+        }
+    },
+    PL: (rng) => {
+        for (;;) {
+            const nine = digits(rng, 9);
+            const r = weightedMod(toDigits(nine), [6, 5, 7, 2, 3, 4, 5, 6, 7], 11);
+            if (r === 10)
+                continue;
+            return `${nine}${r}`;
+        }
+    },
+    PT: (rng) => {
+        const eight = String(int(rng, 1, 9)) + digits(rng, 7);
+        const r = weightedModBy(toDigits(eight), (i) => 9 - i, 11);
+        return `${eight}${r < 2 ? 0 : 11 - r}`;
+    },
+    RO: (rng) => {
+        const body = String(int(rng, 1, 9)) + digits(rng, int(rng, 1, 8));
+        const padded = body.padStart(9, '0');
+        const sum = weightedMod(toDigits(padded), [7, 5, 3, 2, 1, 7, 5, 3, 2], 11);
+        return `${body}${((sum * 10) % 11) % 10}`;
+    },
+    SE: (rng) => {
+        const nine = String(int(rng, 1, 9)) + digits(rng, 8);
+        return `${nine}${luhnCheckDigit(nine)}01`;
+    },
+    SI: (rng) => {
+        for (;;) {
+            const seven = String(int(rng, 1, 9)) + digits(rng, 6);
+            const r = weightedModBy(toDigits(seven), (i) => 8 - i, 11);
+            const c = 11 - r;
+            if (c === 10)
+                continue;
+            return `${seven}${c === 11 ? 0 : c}`;
+        }
+    },
+    SK: (rng) => {
+        for (;;) {
+            const body = String(int(rng, 1, 9)) + String(int(rng, 0, 9)) + pick(rng, ['2', '3', '4', '7', '8', '9']) + digits(rng, 6);
+            const base = Number(`${body}0`);
+            for (let d = 0; d <= 9; d++) {
+                if ((base + d) % 11 === 0)
+                    return `${body}${d}`;
+            }
+        }
+    },
+};
+export const VAT_COUNTRIES = Object.keys(SYNTHS);
+/** A checksum-valid VAT number for one member state (with prefix). */
+export function generateValidVatFor(country, seed) {
+    const rng = mulberry32(seed);
+    return `${country}${SYNTHS[country](rng)}`;
+}
+/** A checksum-valid VAT number for a random member state. */
+export function generateValidEuVat(seed) {
+    const rng = mulberry32(seed);
+    const country = pick(rng, VAT_COUNTRIES);
+    return `${country}${SYNTHS[country](rng)}`;
+}
+//# sourceMappingURL=vat.js.map

package/dist/src/generate/vat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vat.js","sourceRoot":"","sources":["../../../src/generate/vat.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,WAAW,EACX,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,SAAS,IAAI,CAAI,GAAiB,EAAE,KAAmB;IACrD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAE,CAAC;AAClD,CAAC;AAED,SAAS,GAAG,CAAC,GAAiB,EAAE,GAAW,EAAE,GAAW;IACtD,OAAO,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,MAAM,CAAC,GAAiB,EAAE,CAAS;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAID,MAAM,MAAM,GAAoC;IAC9C,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;IAClD,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;gBACb,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAE,CAAC;gBACxC,IAAI,CAAC,KAAK,EAAE;oBAAE,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;IACxB,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAE,EAAE,CAAC;IACjD,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;YACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC;oBAAE,OAAO,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC;QAChE,OAAO,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;IACtC,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC;QACtE,OAAO,GAAG,KAAK,GAAG,GAAG,GAAG,EAAE,EAAE,CAAC;IAC/B,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,OAAO,GAAG,KAAK,GAAG,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YACtB,OAAO,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,KAAK,GAAG,cAAc,CAAC,KAAK,CAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAChD,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5B,OAAO,GAAG,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAE,EAAE,CAAC;IAC7C,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC;QACtE,OAAO,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;IACtC,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,IAAI,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC;QAChE,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,OAAO,GAAG,KAAK,GAAG,yBAAyB,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,MAAM,IAAI,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,GAAG,GAAG,GAAG,cAAc,CAAC,GAAG,CAAE,EAAE,CAAC;IACzC,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAE,CAAC;YAClD,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;gBACb,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAE,CAAC;gBACpD,IAAI,CAAC,KAAK,EAAE;oBAAE,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3B,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAE,CAAC;YACzB,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;gBAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,EAAE;gBAAE,SAAS;YACvB,OAAO,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACzC,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAE,CAAC;YAC7D,IAAI,CAAC,KAAK,EAAE;gBAAE,SAAS;YACvB,OAAO,GAAG,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC;YACzE,IAAI,CAAC,KAAK,EAAE;gBAAE,SAAS;YACvB,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAE,CAAC;QAC7D,OAAO,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACzC,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC;QAC7E,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;IAC5C,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrD,OAAO,GAAG,IAAI,GAAG,cAAc,CAAC,IAAI,CAAE,IAAI,CAAC;IAC7C,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAE,CAAC;YAC7D,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,KAAK,EAAE;gBAAE,SAAS;YACvB,OAAO,GAAG,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IACD,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACV,SAAS,CAAC;YACR,MAAM,IAAI,GACR,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC/G,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;YAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC;oBAAE,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAsB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAEpE,sEAAsE;AACtE,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,IAAY;IAC/D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC,OAAO,CAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACzC,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC,OAAO,CAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC"}

package/dist/src/index.d.ts

@@ -0,0 +1,81 @@
+/**
+ * @discretion/core — public API.
+ *
+ * M1 surface: shared types, script detection, Stage 0 normalization with an
+ * exact bidirectional offset map.
+ */
+export type * from './types.js';
+export { detectScripts, getCharScript, classifyCodePoint, scriptsCompatible } from './scripts.js';
+export type { CodePointClass } from './scripts.js';
+export { normalize } from './normalization.js';
+export { labelOf } from './entityLabel.js';
+export { familyOf } from './entityFamily.js';
+export type { EntityFamily } from './entityFamily.js';
+export { composeMaps, identityMap, buildReverseMap, mapNormalizedSpan, MappedTextBuilder, } from './offsetMap.js';
+export type { StepChange, TransformStepResult } from './offsetMap.js';
+export { stripInvisibles } from './transforms/stripInvisibles.js';
+export { nfkcByGrapheme } from './transforms/nfkc.js';
+export { foldHomoglyphs } from './transforms/homoglyphFold.js';
+export { normalizeWhitespacePunct } from './transforms/whitespacePunct.js';
+export { foldDigits, asciiDigitFor } from './transforms/foldDigits.js';
+import './detect/detectors/index.js';
+export { registerDetector, allDetectors, getDetector, detectorsForRegion, detectorsForEntityType, detectorCount, } from './detect/registry.js';
+export { runStage1, DetectionTimeoutError, DetectorError } from './detect/runner.js';
+export { CONFIDENCE, GLOBAL_REGION, invalid, valid } from './detect/types.js';
+export type { Detector, RegionCode, ContextSignal, ValidationContext, ValidationResult, ValidationSuccess, ValidationFailure, Stage1Candidate, } from './detect/types.js';
+export type { Stage1Options } from './detect/runner.js';
+export * as checksums from './checksums/index.js';
+export * as generate from './generate/index.js';
+export { alignPieces } from './ner/align.js';
+export type { AlignedPiece } from './ner/align.js';
+export { decodeEntities } from './ner/merge.js';
+export { chunkText } from './ner/chunk.js';
+export type { Chunk } from './ner/chunk.js';
+export { NerEngine } from './ner/engine.js';
+export { ChunkCache } from './ner/chunkCache.js';
+export type { NerEngineOptions } from './ner/engine.js';
+export { runStage2 } from './ner/runStage2.js';
+export type { NerEntityType, NerRecognizer, NerSpan, Stage2Candidate, TokenClassifier, TokenPrediction, } from './ner/types.js';
+export { analyzeContext } from './context/score.js';
+export type { ContextAnalysis, ContextOptions } from './context/score.js';
+export { buildStructureIndex } from './context/structure.js';
+export type { StructureIndex, StructuredSlot, StructureKind } from './context/structure.js';
+export { buildTriggerIndex, foldForMatch } from './context/triggers.js';
+export type { LanguageTriggers, TriggerIndex, TriggerMatch } from './context/triggers.js';
+export { profileDocument } from './context/documentProfile.js';
+export type { DomainLexicon } from './context/documentProfile.js';
+export { NEGATIVE_RULES, ruleApplies } from './context/negativeRules.js';
+export type { ContextContribution, ContextScoredCandidate, DocumentDomain, DocumentFormat, DocumentProfile, NegativeRule, PipelineCandidate, RuleContext, } from './context/types.js';
+export { lookupGazetteer, gazetteerSizes, isGazetteerType } from './gazetteer/index.js';
+export type { GazetteerHit, GazetteerType } from './gazetteer/index.js';
+export { resolveOverlaps, coverageHoles } from './fuse/resolve.js';
+export { fitCalibration, calibrate, reliability } from './fuse/calibrate.js';
+export { PROFILES, decide, customProfile } from './fuse/profiles.js';
+export { explain, toDetectedEntity, explainOmission } from './fuse/explain.js';
+export type { FusionInput } from './fuse/explain.js';
+export type { ProfileName, SensitivityProfile, UserLists, ProfileDecision } from './fuse/profiles.js';
+export { computeExposure, exposureBand, EXPOSURE_LIMITATION } from './exposure/index.js';
+export type { ExposureReport, ExposureInput, ExposureContribution, CategoryBreakdown, } from './exposure/index.js';
+export type { CalibrationBin, CalibrationCurve, CalibrationModel, CalibrationSample, ReliabilityPoint, } from './fuse/calibrate.js';
+export type { ScoredForResolution, ResolutionResult } from './fuse/resolve.js';
+export { detect } from './pipeline.js';
+export type { DetectOptions, DetectionOutcome } from './pipeline.js';
+export { Vault, normalizedKey } from './mask/vault.js';
+export type { EgressAuditor } from './mask/vault.js';
+export { chooseSurrogate } from './mask/surrogates.js';
+export type { SurrogateRequest } from './mask/surrogates.js';
+export { PERSON_POOLS, ORG_POOL, LOCATION_POOL } from './mask/surrogatePools.js';
+export { mask, maskOriginal, resolveForMasking } from './mask/masker.js';
+export type { MaskOptions, MaskResult, MaskedEntity } from './mask/masker.js';
+export { Restorer, restore } from './mask/restorer.js';
+export type { RestorerOptions } from './mask/restorer.js';
+export { guardEgress } from './mask/egressGuard.js';
+export type { EgressLeak, EgressVerdict } from './mask/egressGuard.js';
+export { protect } from './protect.js';
+export type { ProtectOptions, ProtectResult, ProtectedEntity } from './protect.js';
+export { ALL_ENTITY_TYPES, NER_ENTITY_TYPES, detectableEntityTypes } from './entityTypes.js';
+export { toCalibrationModel } from './fuse/defaultCalibration.js';
+export type { CalibrationConversion, GeneratedCalibrationModel } from './fuse/defaultCalibration.js';
+export type { SeverityCategory } from '@discretion/data';
+export type { PersonPool } from './mask/surrogatePools.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,mBAAmB,YAAY,CAAC;AAEhC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAClG,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EACL,WAAW,EACX,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAItE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAIvE,OAAO,6BAA6B,CAAC;AAErC,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC9E,YAAY,EACV,QAAQ,EACR,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAIxD,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAIlD,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAC;AAMhD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,YAAY,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,YAAY,EACV,aAAa,EACb,aAAa,EACb,OAAO,EACP,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACxE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACxF,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGxE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/E,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACzF,YAAY,EACV,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAK/E,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGrE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACvD,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACzE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAUvE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAMnF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAI7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,YAAY,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAQrG,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,YAAY,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/src/index.js

@@ -0,0 +1,76 @@
+export { detectScripts, getCharScript, classifyCodePoint, scriptsCompatible } from './scripts.js';
+export { normalize } from './normalization.js';
+export { labelOf } from './entityLabel.js';
+export { familyOf } from './entityFamily.js';
+export { composeMaps, identityMap, buildReverseMap, mapNormalizedSpan, MappedTextBuilder, } from './offsetMap.js';
+// The individual transforms are exported so they stay independently testable
+// and reusable; normalize() is the supported entry point.
+export { stripInvisibles } from './transforms/stripInvisibles.js';
+export { nfkcByGrapheme } from './transforms/nfkc.js';
+export { foldHomoglyphs } from './transforms/homoglyphFold.js';
+export { normalizeWhitespacePunct } from './transforms/whitespacePunct.js';
+export { foldDigits, asciiDigitFor } from './transforms/foldDigits.js';
+// ── Stage 1: validated identifier detection (M2) ──
+// Importing the package registers every bundled detector.
+import './detect/detectors/index.js';
+export { registerDetector, allDetectors, getDetector, detectorsForRegion, detectorsForEntityType, detectorCount, } from './detect/registry.js';
+export { runStage1, DetectionTimeoutError, DetectorError } from './detect/runner.js';
+export { CONFIDENCE, GLOBAL_REGION, invalid, valid } from './detect/types.js';
+// The checksum library is public API: M3's corpus generator and M4's
+// format-preserving surrogates both need to CREATE valid identifiers.
+export * as checksums from './checksums/index.js';
+// Seeded valid-value generators: consumed by the eval corpus builder (M3)
+// and by format-preserving surrogate synthesis (M4).
+export * as generate from './generate/index.js';
+// ── Stage 2: multilingual NER (M6) ──
+// Pure logic only. The Transformers.js-backed classifier is exported through
+// the './ner-transformers' entry point so that importing the core root never
+// loads the ONNX runtime.
+export { alignPieces } from './ner/align.js';
+export { decodeEntities } from './ner/merge.js';
+export { chunkText } from './ner/chunk.js';
+export { NerEngine } from './ner/engine.js';
+export { ChunkCache } from './ner/chunkCache.js';
+export { runStage2 } from './ner/runStage2.js';
+// ── Stage 3: context scoring (M7) ──
+export { analyzeContext } from './context/score.js';
+export { buildStructureIndex } from './context/structure.js';
+export { buildTriggerIndex, foldForMatch } from './context/triggers.js';
+export { profileDocument } from './context/documentProfile.js';
+export { NEGATIVE_RULES, ruleApplies } from './context/negativeRules.js';
+// ── Stage 2b: gazetteers (M7) ──
+export { lookupGazetteer, gazetteerSizes, isGazetteerType } from './gazetteer/index.js';
+// ── Stage 4: overlap resolution (M8) ──
+export { resolveOverlaps, coverageHoles } from './fuse/resolve.js';
+export { fitCalibration, calibrate, reliability } from './fuse/calibrate.js';
+export { PROFILES, decide, customProfile } from './fuse/profiles.js';
+export { explain, toDetectedEntity, explainOmission } from './fuse/explain.js';
+export { computeExposure, exposureBand, EXPOSURE_LIMITATION } from './exposure/index.js';
+// ── The composed pipeline (M7) ──
+// Stages 0–3 in one call. This is what consumers should use; the individual
+// stage functions remain exported for tooling that wants one stage.
+export { detect } from './pipeline.js';
+// ── Stage: masking (M4) ──
+export { Vault, normalizedKey } from './mask/vault.js';
+export { chooseSurrogate } from './mask/surrogates.js';
+export { PERSON_POOLS, ORG_POOL, LOCATION_POOL } from './mask/surrogatePools.js';
+export { mask, maskOriginal, resolveForMasking } from './mask/masker.js';
+export { Restorer, restore } from './mask/restorer.js';
+export { guardEgress } from './mask/egressGuard.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// M12: the supported entry point, and the surface finalised for publication
+// ─────────────────────────────────────────────────────────────────────────────
+// `protect()` composes Stages 0-4 in the one order that is correct, so that a
+// consumer does not have to reproduce the extension's ninety lines of
+// orchestration to get a masked string. Everything above stays exported: this
+// is the supported path, not the only one.
+export { protect } from './protect.js';
+// A runtime enumeration of `EntityType`, which a TypeScript union does not
+// have. `detectableEntityTypes()` is DERIVED from the detector registry rather
+// than declared - see the header of entityTypes.ts for the M11 bug that makes
+// the distinction worth the indirection.
+export { ALL_ENTITY_TYPES, NER_ENTITY_TYPES, detectableEntityTypes } from './entityTypes.js';
+// The shipped calibration model, converted with a key check instead of the
+// `as unknown as CalibrationModel` cast every consumer used before M12.
+export { toCalibrationModel } from './fuse/defaultCalibration.js';
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGlG,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7C,OAAO,EACL,WAAW,EACX,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAGxB,6EAA6E;AAC7E,0DAA0D;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEvE,qDAAqD;AACrD,0DAA0D;AAC1D,OAAO,6BAA6B,CAAC;AAErC,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAa9E,qEAAqE;AACrE,sEAAsE;AACtE,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAElD,0EAA0E;AAC1E,qDAAqD;AACrD,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAC;AAEhD,uCAAuC;AACvC,6EAA6E;AAC7E,6EAA6E;AAC7E,0BAA0B;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAU/C,sCAAsC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAYzE,kCAAkC;AAClC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGxF,yCAAyC;AACzC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAG/E,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAgBzF,mCAAmC;AACnC,4EAA4E;AAC5E,oEAAoE;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAGvC,4BAA4B;AAC5B,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAEhF,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAC9E,2CAA2C;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGvC,2EAA2E;AAC3E,+EAA+E;AAC/E,8EAA8E;AAC9E,yCAAyC;AACzC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE7F,2EAA2E;AAC3E,wEAAwE;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/src/mask/egressGuard.d.ts

@@ -0,0 +1,54 @@
+/**
+ * egressGuard.ts — the assertion that makes the guarantee real.
+ *
+ * Before any send is permitted, the outgoing payload is scanned for every
+ * plaintext original currently in the vault. Any hit blocks the send and
+ * reports WHICH entity leaked — by vault id and type only; the report never
+ * carries the plaintext itself, because reports get logged and displayed
+ * and must not become a second leak.
+ *
+ * Comparison is deliberately paranoid, in the fail-closed direction:
+ *
+ *  1. NORMALIZED + CASE-FOLDED substring search: payload and originals both
+ *     go through Stage 0 normalization (stripping zero-width obfuscation,
+ *     folding homoglyphs, canonicalizing punctuation variants) and are
+ *     case-folded. Catches raw leaks, case variants, ZWSP-stuffed and
+ *     confusable-substituted forms.
+ *
+ *  2. SEPARATOR-INSENSITIVE canonical search: for entries whose canonical
+ *     (the detector's separator-stripped form) differs from the original,
+ *     the payload is additionally searched with spacing/hyphen/dot
+ *     separators removed — so "4111-1111-1111-1111" is caught when the
+ *     vault holds "4111 1111 1111 1111".
+ *
+ * No word-boundary requirement: a plaintext original appearing INSIDE a
+ * longer token is still a leak. Over-blocking is a usability bug;
+ * under-blocking is the critical failure. SPEC.md: fail closed.
+ */
+import type { EntityType } from '../types.js';
+import type { EgressAuditor } from './vault.js';
+export interface EgressLeak {
+    /** Vault entry id — never the value. */
+    readonly entryId: string;
+    readonly type: EntityType;
+    /** Which comparison caught it (for diagnostics/UI copy). */
+    readonly via: 'normalized' | 'separator-insensitive';
+}
+export interface EgressVerdict {
+    /** True = safe to send. False = BLOCK; SPEC.md forbids fail-open. */
+    readonly ok: boolean;
+    readonly leaks: readonly EgressLeak[];
+}
+/** Case-folded Stage 0 normalization — the guard's comparison space.
+ *  Exported so the MASKER's collision check runs in the same space: a
+ *  surrogate that would trip this guard must never be chosen at all. */
+export declare function comparisonForm(text: string): string;
+/** Additionally remove the separators identifiers are grouped with. */
+export declare function separatorFree(text: string): string;
+/**
+ * Scan `payload` for every plaintext original in the vault. The auditor is
+ * the vault's single plaintext door (`vault.createEgressAuditor()`); this
+ * function is its intended sole consumer.
+ */
+export declare function guardEgress(payload: string, auditor: EgressAuditor): EgressVerdict;
+//# sourceMappingURL=egressGuard.d.ts.map

package/dist/src/mask/egressGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"egressGuard.d.ts","sourceRoot":"","sources":["../../../src/mask/egressGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,wCAAwC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,uBAAuB,CAAC;CACtD;AAED,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;CACvC;AAED;;wEAEwE;AACxE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,aAAa,CAwBlF"}

package/dist/src/mask/egressGuard.js

@@ -0,0 +1,67 @@
+/**
+ * egressGuard.ts — the assertion that makes the guarantee real.
+ *
+ * Before any send is permitted, the outgoing payload is scanned for every
+ * plaintext original currently in the vault. Any hit blocks the send and
+ * reports WHICH entity leaked — by vault id and type only; the report never
+ * carries the plaintext itself, because reports get logged and displayed
+ * and must not become a second leak.
+ *
+ * Comparison is deliberately paranoid, in the fail-closed direction:
+ *
+ *  1. NORMALIZED + CASE-FOLDED substring search: payload and originals both
+ *     go through Stage 0 normalization (stripping zero-width obfuscation,
+ *     folding homoglyphs, canonicalizing punctuation variants) and are
+ *     case-folded. Catches raw leaks, case variants, ZWSP-stuffed and
+ *     confusable-substituted forms.
+ *
+ *  2. SEPARATOR-INSENSITIVE canonical search: for entries whose canonical
+ *     (the detector's separator-stripped form) differs from the original,
+ *     the payload is additionally searched with spacing/hyphen/dot
+ *     separators removed — so "4111-1111-1111-1111" is caught when the
+ *     vault holds "4111 1111 1111 1111".
+ *
+ * No word-boundary requirement: a plaintext original appearing INSIDE a
+ * longer token is still a leak. Over-blocking is a usability bug;
+ * under-blocking is the critical failure. SPEC.md: fail closed.
+ */
+import { normalize } from '../normalization.js';
+/** Case-folded Stage 0 normalization — the guard's comparison space.
+ *  Exported so the MASKER's collision check runs in the same space: a
+ *  surrogate that would trip this guard must never be chosen at all. */
+export function comparisonForm(text) {
+    return normalize(text).normalizedText.toLowerCase();
+}
+/** Additionally remove the separators identifiers are grouped with. */
+export function separatorFree(text) {
+    return text.replace(/[ \t.\-/]/g, '');
+}
+/**
+ * Scan `payload` for every plaintext original in the vault. The auditor is
+ * the vault's single plaintext door (`vault.createEgressAuditor()`); this
+ * function is its intended sole consumer.
+ */
+export function guardEgress(payload, auditor) {
+    const leaks = [];
+    if (payload.length === 0)
+        return { ok: true, leaks };
+    const haystack = comparisonForm(payload);
+    const haystackNoSep = separatorFree(haystack);
+    for (const entry of auditor.auditEntries()) {
+        const needle = comparisonForm(entry.original);
+        if (needle.length > 0 && haystack.includes(needle)) {
+            leaks.push({ entryId: entry.id, type: entry.type, via: 'normalized' });
+            continue;
+        }
+        const canonicalNeedle = separatorFree(comparisonForm(entry.canonical));
+        if (canonicalNeedle.length >= 6 && haystackNoSep.includes(canonicalNeedle)) {
+            // The ≥6 floor keeps the separator-stripped pass from degenerating on
+            // very short canonicals, where stripped-substring hits stop meaning
+            // anything (any 4-digit run would "leak"). The normalized pass above
+            // still covers those entries in full.
+            leaks.push({ entryId: entry.id, type: entry.type, via: 'separator-insensitive' });
+        }
+    }
+    return { ok: leaks.length === 0, leaks };
+}
+//# sourceMappingURL=egressGuard.js.map

package/dist/src/mask/egressGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egressGuard.js","sourceRoot":"","sources":["../../../src/mask/egressGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAkBhD;;wEAEwE;AACxE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAsB;IACjE,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAErD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAE9C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QACD,MAAM,eAAe,GAAG,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACvE,IAAI,eAAe,CAAC,MAAM,IAAI,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC3E,sEAAsE;YACtE,oEAAoE;YACpE,qEAAqE;YACrE,sCAAsC;YACtC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC"}

package/dist/src/mask/masker.d.ts

@@ -0,0 +1,76 @@
+/**
+ * masker.ts — replace detected sensitive spans with surrogates (or tokens),
+ * building the vault as it goes.
+ *
+ * Operates on Stage 1 candidates in ORIGINAL-text coordinates (the offsets
+ * the runner resolved through the Stage 0 map), so the edited text is the
+ * user's real text with exactly the sensitive spans replaced.
+ *
+ * FOUR GUARANTEES, each enforced here:
+ *  • CONSISTENT — the same original (by exact, canonical, or normalized key)
+ *    always maps to the same surrogate within a session; a repeat reuses the
+ *    vault entry rather than minting a new one.
+ *  • COLLISION-SAFE — before committing a surrogate, verify it appears
+ *    nowhere in the source text and nowhere in the vault; on collision, retry
+ *    with a fresh seed up to a bound. Exhausting the bound falls back to a
+ *    bracket token.
+ *  • REVERSIBLE — every substitution is a vault entry, so the restorer can
+ *    invert it.
+ *  • NON-OVERLAPPING — overlapping candidates would corrupt the edit. Stage 4
+ *    (M8) does calibrated overlap resolution; here a documented pre-fusion
+ *    stopgap picks a non-overlapping subset (higher confidence, then longer
+ *    span, then more-specific type) purely so masking is well-defined.
+ *
+ * Non-sensitive candidates (known test values) are NOT masked — they are
+ * detected precisely so they can be left alone.
+ */
+import type { Stage1Options } from '../detect/runner.js';
+import type { SubstitutionMode, VaultEntry } from '../types.js';
+import type { Stage1Candidate } from '../detect/types.js';
+import type { PipelineCandidate } from '../context/types.js';
+import type { Vault } from './vault.js';
+export interface MaskOptions {
+    /** 'surrogate' (default) or 'token' — SPEC.md's user-selectable modes. */
+    readonly mode?: SubstitutionMode;
+    /** Base seed; a session should vary this so two sessions differ. */
+    readonly seed?: number;
+}
+export interface MaskedEntity {
+    readonly type: Stage1Candidate['type'];
+    readonly originalStart: number;
+    readonly originalEnd: number;
+    readonly original: string;
+    readonly replacement: string;
+    readonly vaultId: string;
+    readonly fallback: boolean;
+}
+export interface MaskResult {
+    readonly maskedText: string;
+    readonly entities: readonly MaskedEntity[];
+    readonly vaultEntries: readonly VaultEntry[];
+}
+/**
+ * Pre-fusion overlap resolution: greedily keep non-overlapping candidates,
+ * preferring higher confidence, then longer span, then a stable detector id
+ * for determinism. A documented stopgap until Stage 4 fusion (M8) resolves
+ * overlaps against calibrated scores.
+ */
+export declare function resolveForMasking<C extends PipelineCandidate>(candidates: readonly C[]): C[];
+/**
+ * Mask the given ORIGINAL text using the candidates found in it.
+ * The candidates' `originalStart`/`originalEnd` must index into `original`.
+ *
+ * Takes `PipelineCandidate` rather than `Stage1Candidate` because Stage 2's
+ * PERSON/ORG/LOCATION entities must be masked too, and nothing in this file
+ * reads the `stage` discriminant — the two candidate shapes are otherwise
+ * identical. Typing it to Stage 1 alone was the narrower claim, not the safer
+ * one: it silently excluded the entities SPEC most wants surrogates for.
+ */
+export declare function maskOriginal(original: string, candidates: readonly PipelineCandidate[], vault: Vault, options?: MaskOptions): MaskResult;
+/**
+ * End-to-end: normalize, run Stage 1, and mask the original text. The
+ * convenience entry point for the playground (M5) and the tests; the
+ * extension (M9) wires the same pieces with its own detection options.
+ */
+export declare function mask(text: string, vault: Vault, options?: MaskOptions & Stage1Options): MaskResult;
+//# sourceMappingURL=masker.d.ts.map