@ifc-lite/export 3.0.1 → 4.0.0

package/dist/anonymize-scrub.js

@@ -0,0 +1,315 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+import { getAttributeNamesAcrossSchemas, normalizeIfcTypeName } from '@ifc-lite/parser';
+import { decodeStepStringLiteral, generateIfcGuid } from '@ifc-lite/encoding';
+import { attrIndex, readEntityArgs, stepSourceSchema } from './subset-entity-reader.js';
+import { IFC_ROOT_TYPES } from './subset-roots.js';
+import { HAS_PROPERTY_SETS_SLOT, isTypeClass } from './type-owned-psets.js';
+/** `Name`/`LongName`/`Description`/`Tag` — the `IfcRoot`-declared text
+ *  fields a subset export pseudonymizes when the class declares them and
+ *  the source value is actually set (not already `$`). Per the decision
+ *  doc: "pseudonymize Name/LongName/Description/Tag on every exported
+ *  IfcRoot as `<IfcType>-<n>`". */
+const PSEUDONYM_ATTRIBUTES = ['Name', 'LongName', 'Description', 'Tag'];
+/** Extra root-entity text fields covered by `pseudonymizeAllNames`:
+ *  `IfcObject.ObjectType` (authoring tools put the family/type name there —
+ *  "Basic Wall: <project> Exterior 300") and `IfcProject.Phase`. */
+// `ElementType` must be HERE, not in NON_ROOT_NAME_ATTRIBUTES: `slotsFor`
+// short-circuits on IFC_ROOT_TYPES, so that list is inert for IfcWallType (#3351).
+const ROOT_ALL_NAMES_ATTRIBUTES = ['ObjectType', 'Phase', 'ElementType', 'ApplicableOccurrence'];
+/** Non-`IfcRoot` text fields covered by `pseudonymizeAllNames`. Only a
+ *  quoted-string token is ever rewritten, so an enum-valued `Name`
+ *  (`IfcSIUnit.Name = .METRE.`) or a `$` passes through untouched. */
+// `Category` is authored text in practice ("ACME Acoustic Batt") (#3351).
+const NON_ROOT_NAME_ATTRIBUTES = ['Name', 'LongName', 'Description', 'ProfileName', 'LayerSetName', 'Category'];
+/** Non-root classes whose `Name` is schema semantics rather than authored
+ *  text, left alone by `pseudonymizeAllNames`: the authoring application
+ *  (kept by decision — it is debugging signal), and property / quantity
+ *  names (`FireRating`, `Width`), which are only exported at all under
+ *  `keepPropertySets` and are what a property-debugging repro needs. */
+function isNonRootNameExempt(typeUpper) {
+    return typeUpper === 'IFCAPPLICATION'
+        // Owner-history actors are `scrubOwnerHistory`'s job (their whole
+        // attribute list, not just Name), and must stay untouched when it is off.
+        || typeUpper === 'IFCPERSON'
+        || typeUpper === 'IFCORGANIZATION'
+        || typeUpper === 'IFCPERSONANDORGANIZATION'
+        || typeUpper.startsWith('IFCPROPERTY')
+        || typeUpper.startsWith('IFCPHYSICAL')
+        || typeUpper.startsWith('IFCQUANTITY');
+}
+/**
+ * Scrub `includedIds`' `IfcRoot` entities plus every owner-history entity in
+ * `index`, queuing every change on `view` (never writing into `store`).
+ *
+ * `index` must be the EFFECTIVE index (`getEffectiveEntityIndex`), not a
+ * bare source index — see that module's doc for why an overlay-created or
+ * retyped entity answers differently through it. `store` need only expose
+ * `source`: `readEntityArgs` reads SOURCE-backed records only, which is the
+ * entire domain of what this pass mutates (it creates no entities).
+ */
+export function applyScrub(store, index, includedIds, view, opts = {}) {
+    // Model's OWN schema (#3309 review finding): the sweeps below walk
+    // arbitrary types, and the bundled schemas don't always agree on order.
+    const schema = stepSourceSchema(store.schemaVersion);
+    const pseudonymizeNames = opts.pseudonymizeNames ?? true;
+    const pseudonymizeAllNames = opts.pseudonymizeAllNames ?? true;
+    const regenerateGlobalIds = opts.regenerateGlobalIds ?? true;
+    const scrubOwnerHistory = opts.scrubOwnerHistory ?? true;
+    const neutralizeCurrency = opts.neutralizeCurrency ?? true;
+    const keepPropertySets = opts.keepPropertySets ?? false;
+    const guidMap = new Map();
+    const warnings = [];
+    let scrubbedCount = 0;
+    // Ascending expressId order, per plan A5 ("per-type counter in ascending
+    // expressId order") — determinism depends on this sort, not on Set
+    // insertion order, which `includedIds` makes no promise about.
+    const rootIds = [...includedIds]
+        .filter((id) => IFC_ROOT_TYPES.has(index.typeOf(id) ?? ''))
+        .sort((a, b) => a - b);
+    const pseudonymCounters = new Map();
+    for (const id of rootIds) {
+        const type = index.typeOf(id);
+        if (type === undefined)
+            continue; // gone from the effective model (tombstoned); nothing to scrub
+        const record = readEntityArgs(store, index, id);
+        if (!record) {
+            warnings.push(`Entity #${id} (${normalizeIfcTypeName(type)}): its source record could not be read, `
+                + 'so its name/GlobalId scrub was skipped and it is exported unmodified.');
+            continue;
+        }
+        let touched = false;
+        if (regenerateGlobalIds) {
+            const guidIdx = attrIndex(type, 'GlobalId', schema);
+            const oldGuid = guidIdx !== -1 ? decodeQuotedStepString(record.args[guidIdx]) : null;
+            if (oldGuid !== null) {
+                const newGuid = generateIfcGuid(opts.guidRandom);
+                // Positional: `setAttribute` re-resolves the slot by name at
+                // serialize time via `step-attribute-mutations.ts`'s own (still
+                // pinned-IFC4-first) lookup, undoing `guidIdx` above (#3309).
+                view.setPositionalAttribute(id, guidIdx, newGuid);
+                guidMap.set(oldGuid, newGuid);
+                touched = true;
+            }
+            else {
+                warnings.push(`Entity #${id} (${normalizeIfcTypeName(type)}): its GlobalId could not be read, `
+                    + 'so it was not regenerated.');
+            }
+        }
+        if (pseudonymizeNames || pseudonymizeAllNames) {
+            const pseudonym = nextPseudonym(pseudonymCounters, type);
+            const attrs = [
+                ...(pseudonymizeNames ? PSEUDONYM_ATTRIBUTES : []),
+                ...(pseudonymizeAllNames ? ROOT_ALL_NAMES_ATTRIBUTES : []),
+            ];
+            for (const attr of attrs) {
+                const idx = attrIndex(type, attr, schema);
+                if (idx === -1 || idx >= record.args.length || !isQuotedStepString(record.args[idx]))
+                    continue;
+                view.setPositionalAttribute(id, idx, pseudonym); // positional — see the GlobalId write above
+                touched = true;
+            }
+        }
+        if (!keepPropertySets && isTypeClass(type)) {
+            view.setPositionalAttribute(id, HAS_PROPERTY_SETS_SLOT, null);
+            touched = true;
+        }
+        if (touched)
+            scrubbedCount += 1;
+    }
+    if (pseudonymizeAllNames) {
+        scrubbedCount += pseudonymizeNonRootNames(store, index, view, pseudonymCounters);
+    }
+    if (scrubOwnerHistory || neutralizeCurrency) {
+        for (const [id, ref] of index) {
+            const type = index.typeOf(id) ?? ref.type.toUpperCase();
+            if (type === 'IFCMONETARYUNIT') {
+                if (neutralizeCurrency && neutralizeMonetaryUnit(store, index, view, id))
+                    scrubbedCount += 1;
+                continue;
+            }
+            if (!scrubOwnerHistory)
+                continue;
+            // Below (and IFCMONETARYUNIT above): FIXED literal types, each
+            // slot checked directly against all three `ENTITIES_*` tables — no
+            // `schema` argument needed (unlike the arbitrary-type sweeps above).
+            switch (type) {
+                case 'IFCPERSON':
+                    scrubPerson(view, id);
+                    scrubbedCount += 1;
+                    break;
+                case 'IFCORGANIZATION':
+                    scrubOrganization(view, id);
+                    scrubbedCount += 1;
+                    break;
+                case 'IFCPERSONANDORGANIZATION': {
+                    const rolesIdx = attrIndex('IFCPERSONANDORGANIZATION', 'Roles');
+                    if (rolesIdx !== -1)
+                        view.setPositionalAttribute(id, rolesIdx, null);
+                    scrubbedCount += 1;
+                    break;
+                }
+                case 'IFCOWNERHISTORY': {
+                    // Dates pin the model to a project timeline: creation -> epoch 0
+                    // (the attribute is mandatory, an IfcTimeStamp INTEGER), last
+                    // modification -> $ (optional).
+                    const createdIdx = attrIndex('IFCOWNERHISTORY', 'CreationDate');
+                    const modifiedIdx = attrIndex('IFCOWNERHISTORY', 'LastModifiedDate');
+                    if (createdIdx !== -1)
+                        view.setPositionalAttribute(id, createdIdx, 0);
+                    if (modifiedIdx !== -1)
+                        view.setPositionalAttribute(id, modifiedIdx, null);
+                    scrubbedCount += 1;
+                    break;
+                }
+                case 'IFCAPPLICATION': {
+                    // Keep ApplicationFullName/ApplicationIdentifier (the tool), drop
+                    // Version (a vendor build string can carry the licence region).
+                    const versionIdx = attrIndex('IFCAPPLICATION', 'Version');
+                    if (versionIdx !== -1)
+                        view.setPositionalAttribute(id, versionIdx, null);
+                    scrubbedCount += 1;
+                    break;
+                }
+                default:
+                    break;
+            }
+        }
+    }
+    return { guidMap, scrubbedCount, warnings };
+}
+/**
+ * `IfcMonetaryUnit.Currency` -> US dollars, in the source file's own spelling:
+ * IFC2X3 declares it as the `IfcCurrencyEnum` (`.NOK.`), IFC4+ as an
+ * `IfcLabel` (`'NOK'`). Returns whether a mutation was queued.
+ */
+function neutralizeMonetaryUnit(store, index, view, id) {
+    const idx = attrIndex('IFCMONETARYUNIT', 'Currency');
+    if (idx === -1)
+        return false;
+    const record = readEntityArgs(store, index, id);
+    const token = record?.args[idx];
+    if (token === undefined || token === '$')
+        return false;
+    const usd = token.startsWith('.') ? '.USD.' : 'USD';
+    if (token === '.USD.' || token === "'USD'")
+        return false;
+    view.setPositionalAttribute(id, idx, usd);
+    return true;
+}
+/** Next `<IfcType>-<n>` for `typeUpper`, advancing its per-type counter. */
+function nextPseudonym(counters, typeUpper) {
+    const typeName = normalizeIfcTypeName(typeUpper);
+    const n = (counters.get(typeName) ?? 0) + 1;
+    counters.set(typeName, n);
+    return `${typeName}-${n}`;
+}
+function isQuotedStepString(token) {
+    return token !== undefined && token.length >= 2 && token[0] === "'" && token[token.length - 1] === "'";
+}
+/**
+ * `pseudonymizeAllNames` for the non-`IfcRoot` half: walk EVERY entity in
+ * `index` (not just `includedIds` — styles, materials, layers and profiles
+ * reach the export through the forward closure, which only exists after the
+ * exporter runs) and pseudonymize each quoted-string
+ * `NON_ROOT_NAME_ATTRIBUTES` slot. A mutation queued on an entity the
+ * closure never reaches is simply never serialized, so over-approximating
+ * here costs nothing but time, and the per-type slot lookup is cached so the
+ * walk touches source bytes only for classes that declare such a slot.
+ * Returns how many entities received at least one mutation.
+ */
+function pseudonymizeNonRootNames(store, index, view, counters) {
+    // Same schema-aware resolution as `applyScrub`'s root pass: this walks
+    // every non-root type (materials, styles, layers, profiles, …), e.g.
+    // IFC2X3's `IfcApprovalRelationship.Name` sits at slot 3, IFC4's at 0.
+    const schema = stepSourceSchema(store.schemaVersion);
+    const slotsByType = new Map();
+    const slotsFor = (typeUpper) => {
+        let slots = slotsByType.get(typeUpper);
+        if (slots === undefined) {
+            slots = IFC_ROOT_TYPES.has(typeUpper) || isNonRootNameExempt(typeUpper)
+                ? []
+                : NON_ROOT_NAME_ATTRIBUTES
+                    .map((name) => [name, attrIndex(typeUpper, name, schema)])
+                    .filter(([, idx]) => idx !== -1);
+            slotsByType.set(typeUpper, slots);
+        }
+        return slots;
+    };
+    // Ascending expressId for the same determinism guarantee as the root pass.
+    const ids = [];
+    for (const [id] of index)
+        ids.push(id);
+    ids.sort((a, b) => a - b);
+    let scrubbed = 0;
+    for (const id of ids) {
+        const type = index.typeOf(id);
+        if (type === undefined)
+            continue;
+        const slots = slotsFor(type);
+        if (slots.length === 0)
+            continue;
+        const record = readEntityArgs(store, index, id);
+        if (!record)
+            continue; // overlay-created (e.g. the placement clones) or unreadable: nothing authored to scrub
+        let pseudonym = null;
+        for (const [, idx] of slots) {
+            if (idx >= record.args.length || !isQuotedStepString(record.args[idx]))
+                continue;
+            pseudonym ??= nextPseudonym(counters, type);
+            view.setPositionalAttribute(id, idx, pseudonym); // positional — same reasoning as `applyScrub`'s writes
+        }
+        if (pseudonym !== null)
+            scrubbed += 1;
+    }
+    return scrubbed;
+}
+/**
+ * Decode a raw STEP string-literal token (`'…'`, quotes still attached, as
+ * `SubsetEntityArgs.args` holds it — see `subset-entity-reader.ts`) to its
+ * Unicode value, or `null` when the token is not a quoted string: `$`, a
+ * numeric/enum/reference token, or simply absent because the record's
+ * trailing optional arguments were omitted short.
+ */
+function decodeQuotedStepString(token) {
+    if (token === undefined || token.length < 2 || token[0] !== "'" || token[token.length - 1] !== "'") {
+        return null;
+    }
+    return decodeStepStringLiteral(token.slice(1, -1));
+}
+/** `IfcPerson.FamilyName` -> `'Anonymous'`; every other declared attribute
+ *  (`Identification`, `GivenName`, `MiddleNames`, `PrefixTitles`,
+ *  `SuffixTitles`, `Roles`, `Addresses`) -> `$`. Per the decision doc the
+ *  ENTIRE attribute list is identifying fields/Roles/Addresses, but a total
+ *  wipe emits `IFCPERSON($,$,$,$,$,$,$,$)`, which violates the schema's
+ *  `IdentifiablePersonName` WHERE rule (`Identification`, `FamilyName`, or
+ *  `GivenName` must be set) — a validator or strict viewer can then reject
+ *  the very file this export exists to hand to a maintainer. Keeping one
+ *  fixed, non-identifying `FamilyName` satisfies the rule without leaking
+ *  anything. Schema-driven (`getAttributeNamesAcrossSchemas`) rather than a
+ *  hardcoded slot count, the same way every other positional write in this
+ *  package resolves slots. */
+function scrubPerson(view, id) {
+    const names = getAttributeNamesAcrossSchemas('IFCPERSON');
+    const familyNameIdx = names.indexOf('FamilyName');
+    for (let i = 0; i < names.length; i++) {
+        if (i === familyNameIdx)
+            continue;
+        view.setPositionalAttribute(id, i, null);
+    }
+    view.setAttribute(id, 'FamilyName', 'Anonymous');
+}
+/** `IfcOrganization.Name` -> `'Anonymous'`; every other declared attribute
+ *  (`Identification`, `Description`, `Roles`, `Addresses`) -> `$`. */
+function scrubOrganization(view, id) {
+    const names = getAttributeNamesAcrossSchemas('IFCORGANIZATION');
+    const nameIdx = names.indexOf('Name');
+    for (let i = 0; i < names.length; i++) {
+        if (i === nameIdx)
+            continue;
+        view.setPositionalAttribute(id, i, null);
+    }
+    view.setAttribute(id, 'Name', 'Anonymous');
+}
+//# sourceMappingURL=anonymize-scrub.js.map

package/dist/anonymize-scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymize-scrub.js","sourceRoot":"","sources":["../src/anonymize-scrub.ts"],"names":[],"mappings":"AAAA;;+DAE+D;AAgC/D,OAAO,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAI9E,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAE5E;;;;mCAImC;AACnC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,CAAU,CAAC;AAEjF;;oEAEoE;AACpE,0EAA0E;AAC1E,mFAAmF;AACnF,MAAM,yBAAyB,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,sBAAsB,CAAU,CAAC;AAE1G;;sEAEsE;AACtE,0EAA0E;AAC1E,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,CAAU,CAAC;AAEzH;;;;wEAIwE;AACxE,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,SAAS,KAAK,gBAAgB;QACnC,kEAAkE;QAClE,0EAA0E;WACvE,SAAS,KAAK,WAAW;WACzB,SAAS,KAAK,iBAAiB;WAC/B,SAAS,KAAK,0BAA0B;WACxC,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC;WACnC,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC;WACnC,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAC3C,CAAC;AA8BD;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,KAA2E,EAC3E,KAA2B,EAC3B,WAAgC,EAChC,IAAyB,EACzB,OAAqB,EAAE;IAEvB,mEAAmE;IACnE,wEAAwE;IACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC;IACzD,MAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC;IAC/D,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC;IAC7D,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC;IACzD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC;IAC3D,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC;IAExD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,yEAAyE;IACzE,mEAAmE;IACnE,+DAA+D;IAC/D,MAAM,OAAO,GAAG,CAAC,GAAG,WAAW,CAAC;SAC7B,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;SAC1D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEpD,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,+DAA+D;QAEjG,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CACX,WAAW,EAAE,KAAK,oBAAoB,CAAC,IAAI,CAAC,0CAA0C;kBAClF,uEAAuE,CAC5E,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACrF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACjD,6DAA6D;gBAC7D,gEAAgE;gBAChE,8DAA8D;gBAC9D,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CACX,WAAW,EAAE,KAAK,oBAAoB,CAAC,IAAI,CAAC,qCAAqC;sBAC7E,4BAA4B,CACjC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,iBAAiB,IAAI,oBAAoB,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,aAAa,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,KAAK,GAAsB;gBAC/B,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC1C,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAAE,SAAS;gBAC/F,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,4CAA4C;gBAC7F,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC;YAC9D,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,IAAI,OAAO;YAAE,aAAa,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,oBAAoB,EAAE,CAAC;QACzB,aAAa,IAAI,wBAAwB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,iBAAiB,IAAI,kBAAkB,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACxD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/B,IAAI,kBAAkB,IAAI,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;oBAAE,aAAa,IAAI,CAAC,CAAC;gBAC7F,SAAS;YACX,CAAC;YACD,IAAI,CAAC,iBAAiB;gBAAE,SAAS;YACjC,+DAA+D;YAC/D,mEAAmE;YACnE,qEAAqE;YACrE,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,WAAW;oBACd,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACtB,aAAa,IAAI,CAAC,CAAC;oBACnB,MAAM;gBACR,KAAK,iBAAiB;oBACpB,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC5B,aAAa,IAAI,CAAC,CAAC;oBACnB,MAAM;gBACR,KAAK,0BAA0B,CAAC,CAAC,CAAC;oBAChC,MAAM,QAAQ,GAAG,SAAS,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC;oBAChE,IAAI,QAAQ,KAAK,CAAC,CAAC;wBAAE,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;oBACrE,aAAa,IAAI,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,iEAAiE;oBACjE,8DAA8D;oBAC9D,gCAAgC;oBAChC,MAAM,UAAU,GAAG,SAAS,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;oBAChE,MAAM,WAAW,GAAG,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;oBACrE,IAAI,UAAU,KAAK,CAAC,CAAC;wBAAE,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;oBACtE,IAAI,WAAW,KAAK,CAAC,CAAC;wBAAE,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;oBAC3E,aAAa,IAAI,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,kEAAkE;oBAClE,gEAAgE;oBAChE,MAAM,UAAU,GAAG,SAAS,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;oBAC1D,IAAI,UAAU,KAAK,CAAC,CAAC;wBAAE,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;oBACzE,aAAa,IAAI,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD;oBACE,MAAM;YACV,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAC7B,KAA0C,EAC1C,KAA2B,EAC3B,IAAyB,EACzB,EAAU;IAEV,MAAM,GAAG,GAAG,SAAS,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa,CAAC,QAA6B,EAAE,SAAiB;IACrE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC1B,OAAO,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAyB;IACnD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;AACzG,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,wBAAwB,CAC/B,KAA2E,EAC3E,KAA2B,EAC3B,IAAyB,EACzB,QAA6B;IAE7B,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA+D,CAAC;IAC3F,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAE,EAAE;QACrC,IAAI,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,mBAAmB,CAAC,SAAS,CAAC;gBACrE,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,wBAAwB;qBACvB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAU,CAAC;qBAClE,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,2EAA2E;IAC3E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,SAAS,CAAC,uFAAuF;QAC9G,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,KAAK,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;YAC5B,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,SAAS;YACjF,SAAS,KAAK,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,uDAAuD;QAC1G,CAAC;QACD,IAAI,SAAS,KAAK,IAAI;YAAE,QAAQ,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,KAAyB;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACnG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;8BAW8B;AAC9B,SAAS,WAAW,CAAC,IAAyB,EAAE,EAAU;IACxD,MAAM,KAAK,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,aAAa;YAAE,SAAS;QAClC,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC;AAED;sEACsE;AACtE,SAAS,iBAAiB,CAAC,IAAyB,EAAE,EAAU;IAC9D,MAAM,KAAK,GAAG,8BAA8B,CAAC,iBAAiB,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,OAAO;YAAE,SAAS;QAC5B,IAAI,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAC7C,CAAC"}

package/dist/anonymize-types.d.ts

@@ -0,0 +1,235 @@
+/**
+ * The public vocabulary of the "anonymized isolated export" feature (#2934):
+ * what a caller passes to `collectRelatedEntities` / `exportAnonymizedSubset`
+ * and what it gets back. Declarations only, split out the same way
+ * `step-export-types.ts` is split from `step-exporter.ts` — so the two
+ * orchestrators (`related-entities.ts`, `anonymize-export.ts`) and every
+ * caller (viewer dialog, CLI) share one definition instead of drifting.
+ *
+ * Keyed by EXPRESS relationship name throughout (`IfcRelVoidsElement`, not
+ * `voids`), per this repo's IFC-schema-fidelity rule: these ARE the
+ * `IfcRel*` entity types the export walks, not a derived collection that
+ * would need its own name.
+ */
+import type { RandomSource } from '@ifc-lite/encoding';
+/**
+ * Which relationship kinds `collectRelatedEntities` expands from the seed
+ * selection, and how far. Every boolean defaults to what the doc comment
+ * says, not to `false` — an omitted `RelatedEntityOptions` (or an omitted
+ * field within one) must reproduce the bug the seed exhibits, which usually
+ * needs its host/opening/type/material context, not a bare, disconnected
+ * element.
+ */
+export interface RelatedEntityOptions {
+    /** Openings of an included host element. Default `true`. */
+    IfcRelVoidsElement?: boolean;
+    /** The filler↔opening↔host chain (a window/door and the wall it sits in).
+     *  Default `true`. */
+    IfcRelFillsElement?: boolean;
+    /**
+     * Aggregate parents/children (`IfcRelAggregates`): `'up'` walks to
+     * `RelatingObject` only, `'down'` to `RelatedObjects` only, `'both'` walks
+     * both directions, `'none'` skips it. Default `'both'`.
+     */
+    IfcRelAggregates?: 'up' | 'down' | 'both' | 'none';
+    /**
+     * Nesting parents/children (`IfcRelNests`) — a separate EXPRESS
+     * relationship from `IfcRelAggregates` even though the parser folds both
+     * into the same aggregation edge type on `RelationshipGraph`; this option
+     * is split out from the one above by REL ENTITY TYPE, not by graph edge,
+     * so a caller can toggle them independently. Default `'down'`.
+     */
+    IfcRelNests?: 'up' | 'down' | 'both' | 'none';
+    /** An included object's `IfcTypeObject` (`IfcRelDefinesByType`). Default `true`. */
+    IfcRelDefinesByType?: boolean;
+    /** An included object's material assignment (`IfcRelAssociatesMaterial`).
+     *  Default `true`. */
+    IfcRelAssociatesMaterial?: boolean;
+    /**
+     * The spatial containment chain (`IfcRelContainedInSpatialStructure`) up to
+     * storey/building/site. Default `true`; regardless of this flag,
+     * `IfcProject` is ALWAYS included — a STEP file with no project is not a
+     * valid reproduction of anything.
+     */
+    IfcRelContainedInSpatialStructure?: boolean;
+    /**
+     * An included object's property sets (`IfcRelDefinesByProperties`).
+     * Default `false` — psets are the majority of what this feature exists to
+     * strip, so expanding them is opt-in, and turning this on still pulls in
+     * `ePSet_MapConversion`/`ePSet_ProjectedCRS` style georeferencing psets
+     * unless those are separately excluded.
+     */
+    IfcRelDefinesByProperties?: boolean;
+    /**
+     * BFS depth (both directions) to walk `IfcRelConnectsPathElements` from an
+     * included element — e.g. a wall's structurally-connected neighbour.
+     * Default `0` (no expansion).
+     */
+    IfcRelConnectsPathElementsDepth?: number;
+}
+/**
+ * One relationship kind/direction's contribution to a `collectRelatedEntities`
+ * result — e.g. "the openings reached via `IfcRelVoidsElement`, host role".
+ */
+export interface RelatedEntityGroup {
+    /** EXPRESS relationship type name, e.g. `IfcRelVoidsElement`. */
+    relationship: string;
+    /** Which end of the relationship this group walked — e.g. `'opening'` /
+     *  `'host'` for `IfcRelVoidsElement`, matching the doc at each walker's own
+     *  call site rather than a fixed enum, since the meaningful roles differ
+     *  per relationship kind. */
+    role: string;
+    /** ExpressIds of the related OBJECTS this group reached (never the
+     *  `IfcRel*` relationship entity itself). */
+    expressIds: number[];
+    /** ExpressIds of the `IfcRel*` relationship entities that produced this
+     *  group — these must ALSO be included in the export subset, or the
+     *  association they represent has nothing naming it. */
+    relationshipIds: number[];
+}
+/** The full result of one `collectRelatedEntities` call. */
+export interface RelatedEntities {
+    /** The caller's original seed selection, echoed back unfiltered. */
+    seeds: number[];
+    /** One entry per (relationship, role) that contributed anything, in walk
+     *  order — the shape a UI groups a related-entity list by. */
+    groups: RelatedEntityGroup[];
+    /** The union of every id reached: seeds, every group's `expressIds`, and
+     *  every group's `relationshipIds`. This — not any one group — is what a
+     *  caller passes as `StepExportOptions.subsetEntityIds`. */
+    all: Set<number>;
+    /** `true` when the walk's work budget was exhausted before it reached a
+     *  fixpoint (`Bounding walks over file-supplied references`, AGENTS.md) —
+     *  the result is a valid, boundable subset of what a complete walk would
+     *  have found, not the complete answer. */
+    truncated: boolean;
+}
+/**
+ * What to scrub, and how, when exporting the `subsetEntityIds` selection as
+ * an anonymized STEP file. Every field defaults to the value stated in its
+ * own doc comment (all `true`/enabled except where noted) — an anonymized
+ * export with no options at all is the maximally-scrubbed one, since the
+ * whole point of the feature is that a caller has to opt BACK IN to keep an
+ * identifying signal, never opt in to remove one.
+ */
+export interface AnonymizeOptions {
+    /** Replace `Name`/`LongName`/`Description`/`Tag` on every exported
+     *  `IfcRoot` with a `<IfcType>-<n>` pseudonym. Default `true`. */
+    pseudonymizeNames?: boolean;
+    /** Also pseudonymize names OUTSIDE the `IfcRoot` text fields: `ObjectType`,
+     *  `IfcTypeObject.ApplicableOccurrence`, `IfcElementType.ElementType` and
+     *  `IfcProject.Phase` on roots, and every quoted-string `Name` /
+     *  `Description` / `LongName` / `ProfileName` / `LayerSetName` / `Category`
+     *  on non-`IfcRoot` entities — `Category` on ANY non-root class declaring it,
+     *  `IfcMaterialProfile` and `IfcMaterialConstituent` included, not only
+     *  `IfcMaterial` / `IfcMaterialLayer` —
+     *  (`IfcSurfaceStyle`, `IfcMaterial*`, `IfcPresentationLayerAssignment`,
+     *  `IfcProfileDef`, `IfcColourRgb`, …).
+     *  A surface style called after the building it belongs to identifies the
+     *  project as surely as `IfcProject.Name` does, and `ElementType` is the
+     *  type-side twin of `ObjectType`, carrying the same authored text
+     *  ("Basic Wall: <project> Exterior 300"). Enum-valued `Name`s
+     *  (`IfcSIUnit.Name = .METRE.`) are never touched, nor are property /
+     *  quantity names (schema semantics, only present under `keepPropertySets`)
+     *  or `IfcApplication`. Default `true`; independent of `pseudonymizeNames`. */
+    pseudonymizeAllNames?: boolean;
+    /** Keep `IfcPropertySet`/`IfcElementQuantity` entities instead of dropping
+     *  them. Default `false`: `exportAnonymizedSubset` excludes every such id
+     *  from `includedIds` before export, however it got there (a caller's own
+     *  `IfcRelDefinesByProperties` walk, or a hand-built id set) — the entity
+     *  never reaches the output, values included, at any `includedIds` (#3351
+     *  item 2). Property/quantity VALUES are unscrubbed by design, so setting
+     *  this `true` keeps them exactly as authored; there is no partial,
+     *  "kept but scrubbed" state. */
+    keepPropertySets?: boolean;
+    /** Regenerate every exported `IfcRoot`'s `GlobalId` (the old→new mapping
+     *  comes back as `AnonymizeResult.guidMap`, never written into the file
+     *  itself). Default `true`. */
+    regenerateGlobalIds?: boolean;
+    /** Zero the translation of each root `IfcLocalPlacement`
+     *  (`PlacementRelTo = $`), preserving `Axis`/`RefDirection` and every child
+     *  placement untouched. Default `true`. */
+    zeroRootPlacement?: boolean;
+    /** Remove `IfcMapConversion(Scaled)`/`IfcProjectedCRS` and blank
+     *  `IfcSite`'s georeferencing/address attributes and
+     *  `IfcBuilding.BuildingAddress`. Default `true`. */
+    removeGeoreferencing?: boolean;
+    /** Scrub the owner-history chain: blank `IfcPerson`/`IfcOrganization`
+     *  identifying fields, zero `IfcOwnerHistory.CreationDate` and blank
+     *  `LastModifiedDate`, blank `IfcApplication.Version` (a vendor build
+     *  string such as `26.0.0 NOR FULL` encodes the licence region), and blank
+     *  the STEP header's `originating_system`. `IfcApplication`'s name and
+     *  identifier are kept — the authoring tool is debugging signal, its
+     *  regional build is not. Default `true`. */
+    scrubOwnerHistory?: boolean;
+    /** Rewrite every `IfcMonetaryUnit.Currency` to US dollars (`.USD.` under
+     *  IFC2X3's enum, `'USD'` under IFC4+'s label), so a cost-loaded model does
+     *  not reveal its country. Default `true`. */
+    neutralizeCurrency?: boolean;
+    /** Seeded randomness for regenerated `GlobalId`s (and any other id this
+     *  export synthesizes) — omitted means the platform CSPRNG, so two runs of
+     *  an otherwise-identical anonymization differ in exactly those bytes.
+     *  Pass the same source across repeat runs for byte-reproducible output. */
+    guidRandom?: RandomSource;
+    /** Pin the STEP header `FILE_NAME` timestamp (STEP format, e.g.
+     *  `20240101T000000`). Omitted = the wall clock. */
+    timeStamp?: string;
+    /** Name recorded in the exported STEP header's `FILE_NAME` field — NOT
+     *  necessarily the name the caller writes the file to disk under. Default
+     *  `'anonymized.ifc'`, chosen because it is neutral: a caller that passes
+     *  the real output path or project name here (e.g. `Acme-Tower.ifc`)
+     *  defeats the anonymization by writing the identifying name straight back
+     *  into the header of the file this option exists to scrub it from. */
+    filename?: string;
+}
+/** The result of one `exportAnonymizedSubset` call. */
+export interface AnonymizeResult {
+    /** The anonymized STEP file content. */
+    content: Uint8Array;
+    /** Old `GlobalId` → new `GlobalId`, for every regenerated `IfcRoot`. Kept
+     *  out of the exported file itself — it is exactly the mapping back to the
+     *  original, identifying model, so it is the caller's responsibility to
+     *  keep it separate (and typically NOT share it alongside the file). */
+    guidMap: Map<string, string>;
+    stats: {
+        /** Total entities in the exported file. */
+        entityCount: number;
+        /** How many `IfcRoot` entities from `includedIds` actually made it into
+         *  the export (after subset-root exclusion and relationship pruning). */
+        includedRootEntityCount: number;
+        /** ExpressIds of `IfcRel*` entities dropped because their mandatory,
+         *  single-valued reference named an entity the exclusion left out —
+         *  `relationshipRefsSurviveExclusion` (`reference-collector.ts`) already
+         *  decides this for the closure walk; this is that same decision,
+         *  reported so a caller can see WHICH associations the anonymization
+         *  cost, not just that some file that changed. */
+        prunedRelationshipIds: number[];
+        /** ExpressIds of `IfcPropertySet`/`IfcElementQuantity` entities excluded
+         *  from `includedIds` because `keepPropertySets` was falsy (the
+         *  default) — reported distinctly, the same way `prunedRelationshipIds`
+         *  is, so a caller can tell "this id is missing because it is a
+         *  property set" from any other exclusion reason without grepping
+         *  `warnings` text. Empty when `keepPropertySets` was `true`. */
+        droppedPropertySetIds: number[];
+        /** ExpressIds of emitted `IfcPropertyReferenceValue` entities whose
+         *  optional `PropertyReference` was nulled because it named an entity the
+         *  subset excluded. */
+        droppedPropertyReferenceIds: number[];
+        /** Each root `IfcLocalPlacement` this export zeroed, and the translation
+         *  it zeroed (the ORIGINAL, pre-zero coordinates) — reported because the
+         *  translation was real coordinate data the caller may still want to log
+         *  or compare against, even though it is deliberately not in the file. */
+        zeroedPlacements: {
+            expressId: number;
+            translation: number[];
+        }[];
+        /** Non-fatal notices: a placement chain this export could not safely
+         *  zero (e.g. an `IfcGridPlacement`/`IfcLinearPlacement` root, left
+         *  untouched), multiple root placements collapsing onto one origin, or
+         *  anything else `AnonymizeOptions` asked for that this export could not
+         *  fully deliver. Same `string[]` shape as
+         *  `StepExportResult.stats.warnings`. */
+        warnings: string[];
+    };
+}
+//# sourceMappingURL=anonymize-types.d.ts.map

package/dist/anonymize-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymize-types.d.ts","sourceRoot":"","sources":["../src/anonymize-types.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;0BACsB;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACnD;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC9C,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;0BACsB;IACtB,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC;;;;;OAKG;IACH,iCAAiC,CAAC,EAAE,OAAO,CAAC;IAC5C;;;;;;OAMG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,MAAM,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB;;;iCAG6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb;iDAC6C;IAC7C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB;;4DAEwD;IACxD,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,4DAA4D;AAC5D,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;kEAC8D;IAC9D,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B;;gEAE4D;IAC5D,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACjB;;;+CAG2C;IAC3C,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B;sEACkE;IAClE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;;;mFAe+E;IAC/E,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;qCAOiC;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;mCAE+B;IAC/B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;+CAE2C;IAC3C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;yDAEqD;IACrD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;iDAM6C;IAC7C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;kDAE8C;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;gFAG4E;IAC5E,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B;wDACoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;2EAKuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,wCAAwC;IACxC,OAAO,EAAE,UAAU,CAAC;IACpB;;;4EAGwE;IACxE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,EAAE;QACL,2CAA2C;QAC3C,WAAW,EAAE,MAAM,CAAC;QACpB;iFACyE;QACzE,uBAAuB,EAAE,MAAM,CAAC;QAChC;;;;;0DAKkD;QAClD,qBAAqB,EAAE,MAAM,EAAE,CAAC;QAChC;;;;;yEAKiE;QACjE,qBAAqB,EAAE,MAAM,EAAE,CAAC;QAChC;;+BAEuB;QACvB,2BAA2B,EAAE,MAAM,EAAE,CAAC;QACtC;;;kFAG0E;QAC1E,gBAAgB,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,EAAE,CAAA;SAAE,EAAE,CAAC;QACjE;;;;;iDAKyC;QACzC,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;CACH"}

package/dist/anonymize-types.js

@@ -0,0 +1,5 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+export {};
+//# sourceMappingURL=anonymize-types.js.map

package/dist/anonymize-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymize-types.js","sourceRoot":"","sources":["../src/anonymize-types.ts"],"names":[],"mappings":"AAAA;;+DAE+D"}

package/dist/declared-property-type.d.ts

@@ -35,6 +35,21 @@
  *    both from the same token — the source token is the more specific of the
  *    two and wins.
  *
+ *    **Unless the caller NAMED a member** ({@link NAMED_MEMBERS}, #3715). Gate 2
+ *    as written could not express `IfcLabel` → `IfcText`: both are STRING, so
+ *    "the two agree" and the source token won, silently discarding the request.
+ *    The information it was missing is whether the caller CHOSE the type or
+ *    merely echoed the shape the extractor derived — and that is already in the
+ *    `PropertyValueType`, because the two are different members of it.
+ *    `String` / `Real` are SHAPES, which is all the extractor can produce (it
+ *    collapses `IFCLABEL`, `IFCTEXT` and `IFCIDENTIFIER` to `String` and keeps
+ *    the token only in `dataType`); `Label` / `Identifier` / `Text` NAME one
+ *    `IfcValue` member each and no extraction path produces them, so one of
+ *    those can only have come from a caller who asked for it. A named member is
+ *    therefore authoritative over the source token; a shape keeps gate 2's
+ *    precedence, which is what stops a value-only edit — the UI passes `String`
+ *    — from rewriting a neighbouring `IFCTEXT` as `IFCLABEL` all over again.
+ *
  * 3. **The VALUE must be representable in that base.** `serializeTypedMarker`
  *    coerces, so without this an `IFCLENGTHMEASURE` carrying a non-numeric
  *    value would be written as `IFCLENGTHMEASURE(NaN)`, where the shape-derived

package/dist/declared-property-type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"declared-property-type.d.ts","sourceRoot":"","sources":["../src/declared-property-type.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8FG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAqGnD;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAAS,MAAM,EAAoC,CAAC;AAqBhG;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,MAAM,GAAG,IAAI,CAcf;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,MAAM,CAIR"}
+{"version":3,"file":"declared-property-type.d.ts","sourceRoot":"","sources":["../src/declared-property-type.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6GG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AA0HnD;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAAS,MAAM,EAAoC,CAAC;AAqBhG;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,MAAM,GAAG,IAAI,CAqBf;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,MAAM,CAIR"}