@rehearsal-db/core 0.1.0-beta.13 → 0.1.0-beta.15

package/dist/src/baseline/privacy_engine.d.mts

@@ -0,0 +1,162 @@
+/**
+ * Execute reviewed privacy policy version 2 without project-owned callbacks.
+ * The engine is intentionally small and fail-closed: unsupported shapes and
+ * recipes must be reviewed and added here instead of evaluated as code.
+ */
+type PrivacyAction = "KEEP" | "PSEUDONYMIZE" | "REPLACE" | "EXCLUDE" | "DERIVE";
+interface PseudonymRecipe {
+    format: "uuid" | "email" | "text" | "integer" | "hex" | "gtin" | "url";
+    namespace: string;
+    maxLength?: number;
+    length?: number;
+    allowedLengths?: readonly number[];
+    origin?: string;
+}
+interface ConstantRecipe {
+    kind: "constant";
+    value: unknown;
+}
+interface DateShiftRecipe {
+    kind: "date-shift";
+    days: number;
+    representation: "iso-string" | "epoch-milliseconds";
+    group?: string;
+}
+interface EnumRecipe {
+    kind: "enum";
+    allowNull: boolean;
+    values: readonly (string | number | boolean)[];
+}
+interface ValidatedStringRecipe {
+    kind: "validated-string";
+    format: "portable-code";
+    maximumBytes: number;
+    allowNull: boolean;
+}
+interface DigestRecipe {
+    kind: "digest";
+    format: "hex";
+    length: number;
+    namespace: string;
+    inputs: readonly string[];
+}
+interface BindingSubstituteRecipe {
+    kind: "binding-substitute";
+    binding: string;
+    format: "uuid";
+    namespace: string;
+    maximumBytes: number;
+}
+interface PathMapRecipe {
+    kind: "path-map";
+    mapping: string;
+}
+interface ApprovedOwnerRecipe {
+    kind: "approved-owner";
+    approved: NormalizedDeclaration;
+    otherwise: NormalizedDeclaration;
+}
+interface JsonArrayRecipe {
+    kind: "json-array";
+    allowNull: boolean;
+    maximumBytes: number;
+    maximumDepth: number;
+    maximumItems: number;
+    items: NormalizedDeclaration;
+}
+interface JsonObjectRecipe {
+    kind: "json-object";
+    allowNull: boolean;
+    maximumBytes: number;
+    maximumDepth: number;
+    fields: Readonly<Record<string, NormalizedDeclaration>>;
+}
+interface JsonUnionRecipe {
+    kind: "json-union";
+    allowNull: boolean;
+    maximumBytes: number;
+    maximumDepth: number;
+    maximumItems: number;
+    variants: Readonly<Record<string, NormalizedDeclaration>>;
+}
+interface JsonDictionaryRecipe {
+    kind: "json-dictionary";
+    allowNull: boolean;
+    maximumBytes: number;
+    maximumDepth: number;
+    maximumItems: number;
+    keys: Readonly<Record<string, unknown>>;
+    values: NormalizedDeclaration;
+}
+type DerivationRecipe = DateShiftRecipe | EnumRecipe | ValidatedStringRecipe | DigestRecipe | BindingSubstituteRecipe | PathMapRecipe | ApprovedOwnerRecipe | JsonArrayRecipe | JsonObjectRecipe | JsonUnionRecipe | JsonDictionaryRecipe;
+type NormalizedRecipe = PseudonymRecipe | ConstantRecipe | DerivationRecipe | null;
+interface NormalizedDeclaration {
+    action: PrivacyAction;
+    recipe: NormalizedRecipe;
+    required?: boolean;
+}
+interface PrivacyBinding {
+    environmentVariable: string;
+    approvedValueSha256: string;
+}
+interface PrivacyPathMapping extends PseudonymRecipe {
+    binding: string;
+    format: "uuid" | "text";
+    maximumBytes: number;
+    maximumSegments: number;
+}
+export interface PrivacyForeignKey {
+    readonly schema: string;
+    readonly table: string;
+    readonly column: string;
+}
+export interface PrivacyColumn extends NormalizedDeclaration {
+    name: string;
+    generated: "ALWAYS" | "NEVER";
+    identity: "YES" | "NO";
+    foreignKey: PrivacyForeignKey | null;
+}
+export interface PrivacyTable {
+    schema: string;
+    name: string;
+    sourceRows: "STREAM AND SANITIZE" | "EXCLUDE";
+    ownerBinding: Readonly<{
+        binding: string;
+        columns: readonly string[];
+        match: "any";
+        nullBehavior?: "otherwise";
+    }> | null;
+    columns: readonly PrivacyColumn[];
+}
+export interface ExecutablePrivacyPolicy {
+    readonly policyVersion: 2;
+    readonly migrationCutoff: string;
+    readonly bindings: Readonly<Record<string, PrivacyBinding>>;
+    readonly pathMappings: Readonly<Record<string, PrivacyPathMapping>>;
+    readonly tables: readonly PrivacyTable[];
+}
+export declare const validateExecutablePrivacyPolicy: (policy: unknown) => ExecutablePrivacyPolicy;
+export interface PrivacySourceRecord {
+    schema?: string;
+    table: string;
+    row: Record<string, unknown>;
+}
+export interface PrivacyEngine {
+    readonly keyFingerprint: string;
+    remapPath(input: {
+        mapping: string;
+        value: string;
+    }): string;
+    sanitize(record: unknown): PrivacySourceRecord | null;
+}
+export declare const createPrivacyEngine: ({ policy, key, environment, }: {
+    policy: unknown;
+    key: Uint8Array | string;
+    environment?: NodeJS.ProcessEnv;
+}) => Readonly<PrivacyEngine>;
+export declare const createPrivacyKey: (path: string) => Promise<{
+    fingerprint: string;
+}>;
+export declare const readPrivacyKey: (path: string) => Promise<Buffer>;
+export declare const assertPrivacyKeyFingerprint: (key: Uint8Array, expected: unknown) => void;
+export {};