@liuhange/dsh-data-masking 1.0.0 → 2.0.0

package/lib/types/advancedMaskingExecutor.d.ts

@@ -0,0 +1,15 @@
+import type { AdvancedMaskingConfig } from '@liuhange/dsh-data-asset-shared';
+import type { AdvancedMaskingResult, AdvancedMaskingAlgorithm } from './algorithms/types.js';
+export declare class AdvancedMaskingExecutor {
+    private fpeAlgorithm;
+    private kAnonymityAlgorithm;
+    private differentialPrivacyAlgorithm;
+    private hashAlgorithm;
+    execute(data: string, algorithm: AdvancedMaskingAlgorithm, fieldName: string | undefined, config: AdvancedMaskingConfig): AdvancedMaskingResult;
+    private executeFpe;
+    private executeKAnonymity;
+    private executeDifferentialPrivacy;
+    private executeHash;
+    private resolveEnvVar;
+}
+//# sourceMappingURL=advancedMaskingExecutor.d.ts.map

package/lib/types/algorithms/differentialPrivacyAlgorithm.d.ts

@@ -0,0 +1,7 @@
+import type { BudgetTracker } from '../budgetTracker.js';
+export declare class DifferentialPrivacyAlgorithm {
+    addNoise(trueValue: number, epsilon: number, sensitivity: number, budgetTracker: BudgetTracker, totalBudget: number): number;
+    private generateLaplaceNoise;
+    private generateSecureUniform;
+}
+//# sourceMappingURL=differentialPrivacyAlgorithm.d.ts.map

package/lib/types/algorithms/fpeAlgorithm.d.ts

@@ -0,0 +1,7 @@
+export declare class FpeAlgorithm {
+    encrypt(plaintext: string, key: string): string;
+    decrypt(ciphertext: string, key: string): string;
+    private encryptGeneric;
+    private decryptGeneric;
+}
+//# sourceMappingURL=fpeAlgorithm.d.ts.map

package/lib/types/algorithms/hashAlgorithm.d.ts

@@ -0,0 +1,8 @@
+export declare class HashAlgorithm {
+    hash(plaintext: string, hashAlgorithm: 'SHA-256' | 'SHA-512', salt?: string): {
+        digest: string;
+        salted: boolean;
+        digestLength: number;
+    };
+}
+//# sourceMappingURL=hashAlgorithm.d.ts.map

package/lib/types/algorithms/kAnonymityAlgorithm.d.ts

@@ -0,0 +1,10 @@
+export declare class KAnonymityAlgorithm {
+    anonymize(records: Record<string, unknown>[], kValue: number, quasiIdentifiers: string[]): {
+        anonymizedRecords: Record<string, unknown>[];
+        actualMinEquivalenceClass: number;
+        suppressedCount: number;
+    };
+    private groupByQuasiIdentifiers;
+    private generalize;
+}
+//# sourceMappingURL=kAnonymityAlgorithm.d.ts.map

package/lib/types/algorithms/types.d.ts

@@ -0,0 +1,35 @@
+export type AdvancedMaskingAlgorithm = 'FPE' | 'k-anonymity' | 'differential-privacy' | 'hash';
+export interface MaskSensitiveDataParamsV2 {
+    filePath: string;
+    strategy?: string;
+    algorithm?: AdvancedMaskingAlgorithm;
+    fieldName?: string;
+}
+export interface AlgorithmDetails {
+    algorithm: string;
+    reversible?: boolean;
+    kValue?: number;
+    actualMinEquivalenceClass?: number;
+    suppressedCount?: number;
+    epsilon?: number;
+    budgetConsumed?: number;
+    budgetRemaining?: number;
+    hashAlgorithm?: string;
+    salted?: boolean;
+    digestLength?: number;
+}
+export interface AdvancedMaskingResult {
+    maskedData: string | Record<string, unknown>[];
+    algorithm: string;
+    details: AlgorithmDetails;
+}
+export interface BudgetTrackerState {
+    totalBudget: number;
+    consumed: number;
+    remaining: number;
+    queryCount: number;
+}
+export interface FieldAlgorithmConfig {
+    algorithm: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/types/budgetTracker.d.ts

@@ -0,0 +1,11 @@
+import type { BudgetTrackerState } from './algorithms/types.js';
+export declare class BudgetTracker {
+    private consumed;
+    private queryCount;
+    private readonly totalBudget;
+    constructor(totalBudget: number);
+    consume(epsilon: number): void;
+    canConsume(epsilon: number, totalBudget: number): boolean;
+    getState(): BudgetTrackerState;
+}
+//# sourceMappingURL=budgetTracker.d.ts.map

package/lib/types/defaultAdvancedMaskingConfig.d.ts

@@ -0,0 +1,3 @@
+import type { AdvancedMaskingConfig } from '@liuhange/dsh-data-asset-shared';
+export declare const defaultAdvancedMaskingConfig: AdvancedMaskingConfig;
+//# sourceMappingURL=defaultAdvancedMaskingConfig.d.ts.map

package/package.json

@@ -1,23 +1,39 @@
-{
-  "name": "@liuhange/dsh-data-masking",
-  "description": "Data masking plugin: sensitive field identification and graded masking (FULL/PARTIAL/GENERALIZE)",
-  "version": "1.0.0",
-  "publishConfig": { "access": "public" },
-  "repository": { "type": "git", "url": "git+https://github.com/deepseek-ai/deepseek-harness.git", "directory": "packages/data-asset/data-masking" },
-  "type": "module",
-  "main": "lib/index.js",
-  "types": "lib/types/index.d.ts",
-  "exports": {
-    ".": { "types": "./lib/types/index.d.ts", "default": "./lib/index.js" },
-    "./invariant": { "types": "./lib/types/invariant.d.ts", "default": "./lib/invariant.js" },
-    "./src/*": "./src/*",
-    "./package.json": "./package.json"
-  },
-  "files": ["lib/index.js", "lib/invariant.js", "lib/types/**/*.d.ts"],
-  "license": "MIT",
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^0.1.0",
-    "@deepseek-ai/dsh-tools": "^0.1.0",
-    "@liuhange/dsh-data-asset-shared": "^1.0.0"
-  }
+{
+    "name":  "@liuhange/dsh-data-masking",
+    "description":  "Data masking plugin: sensitive field identification and graded masking (FULL/PARTIAL/GENERALIZE)",
+    "version":  "2.0.0",
+    "publishConfig":  {
+                          "access":  "public"
+                      },
+    "repository":  {
+                       "type":  "git",
+                       "url":  "git+https://github.com/deepseek-ai/deepseek-harness.git",
+                       "directory":  "packages/data-asset/data-masking"
+                   },
+    "type":  "module",
+    "main":  "lib/index.js",
+    "types":  "lib/types/index.d.ts",
+    "exports":  {
+                    ".":  {
+                              "types":  "./lib/types/index.d.ts",
+                              "default":  "./lib/index.js"
+                          },
+                    "./invariant":  {
+                                        "types":  "./lib/types/invariant.d.ts",
+                                        "default":  "./lib/invariant.js"
+                                    },
+                    "./src/*":  "./src/*",
+                    "./package.json":  "./package.json"
+                },
+    "files":  [
+                  "lib/index.js",
+                  "lib/invariant.js",
+                  "lib/types/**/*.d.ts"
+              ],
+    "license":  "MIT",
+    "peerDependencies":  {
+                             "@deepseek-ai/cordis":  "^0.1.0",
+                             "@deepseek-ai/dsh-tools":  "^0.1.0",
+                             "@liuhange/dsh-data-asset-shared":  "^2.0.0"
+                         }
 }