@spool-lab/redact 0.0.1

package/LICENSE

@@ -0,0 +1,32 @@
+MIT License
+
+Copyright (c) 2026 Spool Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+TRADEMARK NOTICE
+
+"Spool" and the Spool logo are trademarks of TypeSafe Limited. The MIT
+License above governs the source code only; it does not grant any right or
+license to use the "Spool" name, the Spool logo, or any other TypeSafe
+Limited trademark. Forks and redistributions must not use the "Spool" name
+or logo in a way that suggests endorsement by, or affiliation with,
+TypeSafe Limited.

package/dist/detectors.d.ts

@@ -0,0 +1,8 @@
+import type { SensitiveMatch } from './types.js';
+/** Synchronous regex-driven scan. Rules earlier in the priority list
+ *  claim their regions first; later, broader rules whose match
+ *  overlaps a claimed region are dropped. This is what makes a JWT
+ *  inside a `Bearer` header surface as a JWT, and a Stripe key inside
+ *  `STRIPE_SECRET_KEY=…` surface as the whole assignment. */
+export declare function detectWithRegex(text: string, providerName?: string): SensitiveMatch[];
+//# sourceMappingURL=detectors.d.ts.map

package/dist/detectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectors.d.ts","sourceRoot":"","sources":["../src/detectors.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,YAAY,CAAA;AAoL/D;;;;6DAI6D;AAC7D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,SAAU,GAAG,cAAc,EAAE,CAsCtF"}

package/dist/detectors.js

@@ -0,0 +1,205 @@
+// Regex detection pipeline for @spool-lab/redact.
+//
+// Primary scenario: Spool sessions captured from local coding agents
+// (Claude Code, codex, gemini) — terminal output, tool results, files
+// the agent read, error logs. The patterns favour structured leaks
+// that *appear in this kind of content*: a stray `cat ~/.aws/creds`
+// line, `gh auth status` dumping a token, a `kubectl config view`
+// pasted into the conversation, a `psql "postgresql://…"` invocation.
+//
+// Rule ordering matters. Wider patterns whose prefix LEAKS context
+// (env-var name reveals the vendor; URL host + creds leak the host;
+// connection-string scheme reveals the database type) run before
+// bare vendor api-keys so the whole assignment is masked, not just
+// the secret value. JWT runs before `Bearer` so a JWT-shaped bearer
+// surfaces as a JWT rather than a generic bearer wrapping a JWT.
+import { hasQuotedEntropy, luhnOk } from './validators.js';
+// ── Credential blocks (multi-line, highest specificity) ───────────
+// PEM-armoured key: header + base64 body + footer. Match runs to the
+// END footer (non-greedy across newlines) so the whole block — armor
+// headers and all — is masked as a single unit.
+const PEM_RX = /-----BEGIN (?:RSA |EC |DSA |OPENSSH |ENCRYPTED |PGP |)PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH |ENCRYPTED |PGP |)PRIVATE KEY-----/g;
+// Raw OpenSSH private key body when a user pasted only the body
+// without the BEGIN/END armour. Conservative: requires the canonical
+// `b3BlbnNzaC1rZXk` magic prefix (base64 of "openssh-key") to keep
+// the FP rate near zero.
+const SSH_KEY_BODY_RX = /b3BlbnNzaC1rZXk[A-Za-z0-9+/=\n\r]{60,}/g;
+// ~/.aws/credentials INI block: starts at a `[profile]` section
+// header that immediately precedes one of the canonical AWS keys,
+// runs through whatever AWS settings follow until a blank line.
+// Also catches `aws_access_key_id = …` lines outside an INI section
+// (one-off pasted line from `aws configure`).
+const AWS_INI_RX = /(?:\[[^\]\n]+\]\s*\n)?(?:aws_(?:access_key_id|secret_access_key|session_token)\s*=\s*\S+\s*\n?){1,4}/g;
+// gcloud INI line. `gcloud auth print-access-token` output is just a
+// bare `ya29.…` token — covered by the api-key vendor list. The INI
+// rule here catches `~/.config/gcloud/application_default_credentials.json`
+// JSON paste where keys leak as fielded values.
+const GCLOUD_JSON_RX = /"(?:refresh_token|client_secret|access_token)"\s*:\s*"[A-Za-z0-9_\-./]{20,}"/g;
+// kubeconfig token / cert-data fields. Either YAML or JSON shape.
+// Catches `token:`, `client-certificate-data:`, `client-key-data:`,
+// `id-token:`, `refresh-token:`. The value is base64 PEM or an
+// opaque bearer — either way it must not ship.
+const KUBECONFIG_RX = /\b(?:token|client-certificate-data|client-key-data|certificate-authority-data|id-token|refresh-token)\s*:\s*[A-Za-z0-9+/=_\-.]{20,}\b/g;
+// .netrc machine/login/password line — single-line shape since that's
+// how it's usually pasted from a terminal.
+const NETRC_RX = /\bmachine\s+\S+\s+login\s+\S+\s+password\s+\S+/g;
+// Database connection strings — scheme-aware, capture the whole URI
+// so the host/db/user/password are all masked.
+const CONN_STRING_RX = /\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis(?:s)?|amqps?|mssql|sqlserver|jdbc:[a-z]+|cassandra|clickhouse|kafka|nats):\/\/[^\s"'`<>]+/gi;
+// ── Single-token credentials ─────────────────────────────────────
+const JWT_RX = /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g;
+// Vendor-prefixed credentials. Order each alt so the most specific
+// pattern is unambiguous — `sk-ant-` before `sk-` (with a lookahead
+// on the latter to avoid double-matching Anthropic keys as OpenAI).
+const VENDOR_API_KEY_RX = new RegExp('\\b(?:' + [
+    // Payment / SaaS
+    'sk_(?:live|test)_[A-Za-z0-9]{16,}',
+    'rk_(?:live|test)_[A-Za-z0-9]{16,}',
+    'pk_(?:live|test)_[A-Za-z0-9]{16,}',
+    // AI vendors
+    'sk-ant-[A-Za-z0-9_-]{32,}',
+    'sk-proj-[A-Za-z0-9_-]{32,}',
+    'sk-(?!ant-|proj-)[A-Za-z0-9]{32,}',
+    'hf_[A-Za-z0-9]{30,}',
+    // Source forges
+    'gh[pousr]_[A-Za-z0-9]{36}',
+    'glpat-[A-Za-z0-9_-]{20}',
+    // Cloud providers
+    'AKIA[0-9A-Z]{16}',
+    'ASIA[0-9A-Z]{16}',
+    'AIza[0-9A-Za-z_-]{35}',
+    'ya29\\.[A-Za-z0-9_-]{40,}',
+    'AccDB[A-Za-z0-9+/=]{40,}',
+    'dop_v1_[A-Fa-f0-9]{64}',
+    'vc_[A-Za-z0-9]{24,}',
+    'vercel_[A-Za-z0-9]{24,}',
+    // CDN / PaaS
+    'CFPAT-[A-Za-z0-9_-]{40,}',
+    'dckr_pat_[A-Za-z0-9_-]{27,}',
+    // Comms / mail
+    'xox[abprs]-[A-Za-z0-9-]{10,}',
+    'xapp-[A-Za-z0-9-]{10,}',
+    'SG\\.[A-Za-z0-9_-]{20,24}\\.[A-Za-z0-9_-]{39,50}',
+    'key-[a-f0-9]{32}',
+    'AC[a-f0-9]{32}',
+    'SK[a-f0-9]{32}',
+    'sq0csp-[A-Za-z0-9_-]{43}',
+    // Package managers
+    'npm_[A-Za-z0-9]{36}',
+    'pypi-AgEIc[A-Za-z0-9_-]{50,}',
+    // Data platforms
+    'dapi[a-f0-9]{32}',
+    // Telemetry / monitoring
+    'datadog_api_key_[a-f0-9]{32}',
+].map((p) => `(?:${p})`).join('|') + ')\\b', 'g');
+const BEARER_RX = /\b[Bb]earer\s+[A-Za-z0-9_\-.=+/]{16,}\b/g;
+const BASIC_AUTH_RX = /\b[Bb]asic\s+[A-Za-z0-9+/=]{12,}={0,2}\b/g;
+const URL_CREDS_RX = /\b[a-z][a-z0-9+\-.]*:\/\/[^\s/@:"'`<>]+:[^\s/@:"'`<>]+@[A-Za-z0-9.\-]+(?::\d+)?(?:\/[^\s"'`<>]*)?/g;
+// NAME=VALUE assignment with a credential-shaped suffix. Captures
+// the whole assignment so the name (which itself leaks vendor
+// intent) is masked alongside the value.
+const ENV_VAR_RX = /\b[A-Z][A-Z0-9_]{2,}(?:_KEY|_SECRET|_TOKEN|_PASSWORD|_PASSWD|_PWD|_API_?KEY|_DSN|_URL)\s*=\s*\S+/g;
+const GENERIC_SECRET_RX = /\b(?:api[_-]?key|secret|token|password|passwd|auth|access[_-]?key|client[_-]?secret|webhook)\b\s*[:=]\s*["']([A-Za-z0-9+/=_\-]{20,})["']/gi;
+// ── Identity ─────────────────────────────────────────────────────
+const CC_RX = /\b(?:4\d{3}|5[1-5]\d{2}|6(?:011|5\d{2})|3[47]\d{2}|3(?:0[0-5]|[68]\d)\d|(?:2131|1800|35\d{3}))[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{3,4}\b/g;
+const SSN_RX = /\b(?!000|666|9\d{2})\d{3}-(?!00)\d{2}-(?!0000)\d{4}\b/g;
+const EMAIL_RX = /\b[A-Za-z0-9](?:[A-Za-z0-9._+-]*[A-Za-z0-9])?@[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?\.[A-Za-z]{2,}\b/g;
+const PHONE_RX = /(?:\+\d[\d .\-()]{7,16}\d|\(\d{2,4}\)[\d .\-]{6,14}\d)/g;
+const IPV4_RX = /\b(?:(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\b/g;
+// Permissive match; `validIPv6` below rejects look-alikes (timestamps,
+// short colon-separated number strings). Real IPv6 either uses the
+// compressed `::` marker or contains the full 8 groups.
+const IPV6_RX = /\b(?:[0-9a-fA-F]{1,4}:){2,7}[0-9a-fA-F]{1,4}\b|\b(?:[0-9a-fA-F]{1,4}:){1,7}:|\b(?:[0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}\b/g;
+/** Distinguishes real IPv6 addresses from look-alikes the broad
+ *  regex above also accepts. Timestamps like `12:22:57` and other
+ *  short colon-separated decimal sequences must be rejected:
+ *
+ *   - A canonical IPv6 has 8 groups (`2001:0db8:…:7334`).
+ *   - The `::` compression marker is unambiguous when present.
+ *
+ *  Anything else (e.g. 3-group decimal time-of-day) we drop. */
+function validIPv6(value) {
+    if (value.includes('::'))
+        return true;
+    return value.split(':').length === 8;
+}
+// ── Location & infra ─────────────────────────────────────────────
+const ABSOLUTE_PATH_RX = /(?:\/Users\/|\/home\/|\/var\/|\/etc\/|\/opt\/|[A-Z]:\\Users\\)[A-Za-z0-9._\-/\\À-￿]+/g;
+// Internal-only hostnames that aren't routable on the public DNS
+// but reveal an org's network shape.
+//
+// Note `.local` is intentionally OMITTED: while it's the mDNS TLD,
+// it's also the dominant filename suffix (`.env.local`,
+// `settings.local`, `next.config.local`, …) — and we saw ~50%
+// false-positive rate from a real-world scan with `.local` enabled.
+// The remaining TLDs (`.internal`, `.corp`, `.lan`, `.intra`,
+// `.home`, `.prod.*`, `.stg.*`) are unambiguous internal-DNS markers.
+const INTERNAL_HOST_RX = /\b[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)*\.(?:internal|corp|lan|intra|home|prod\.[a-z0-9]+|stg\.[a-z0-9]+)\b/gi;
+const RULES = [
+    { kind: 'private-key', rx: PEM_RX, confidence: 1.0 },
+    { kind: 'ssh-key', rx: SSH_KEY_BODY_RX, confidence: 0.95 },
+    { kind: 'cloud-cred-ini', rx: AWS_INI_RX, confidence: 0.95 },
+    { kind: 'cloud-cred-ini', rx: GCLOUD_JSON_RX, confidence: 0.9 },
+    { kind: 'kubeconfig-token', rx: KUBECONFIG_RX, confidence: 0.85 },
+    { kind: 'netrc', rx: NETRC_RX, confidence: 0.95 },
+    { kind: 'connection-string', rx: CONN_STRING_RX, confidence: 0.9 },
+    { kind: 'url-creds', rx: URL_CREDS_RX, confidence: 0.95 },
+    { kind: 'basic-auth', rx: BASIC_AUTH_RX, confidence: 0.9 },
+    { kind: 'env-var', rx: ENV_VAR_RX, confidence: 0.9 },
+    { kind: 'generic-secret', rx: GENERIC_SECRET_RX, confidence: 0.6, validate: hasQuotedEntropy(4.0) },
+    { kind: 'jwt', rx: JWT_RX, confidence: 0.95 },
+    { kind: 'api-key', rx: VENDOR_API_KEY_RX, confidence: 0.98 },
+    { kind: 'bearer', rx: BEARER_RX, confidence: 0.85 },
+    { kind: 'credit-card', rx: CC_RX, confidence: 0.95, validate: luhnOk },
+    { kind: 'ssn', rx: SSN_RX, confidence: 0.85 },
+    { kind: 'email', rx: EMAIL_RX, confidence: 0.85 },
+    { kind: 'phone', rx: PHONE_RX, confidence: 0.7 },
+    { kind: 'ip', rx: IPV4_RX, confidence: 0.55 },
+    { kind: 'ip', rx: IPV6_RX, confidence: 0.6, validate: validIPv6 },
+    { kind: 'internal-host', rx: INTERNAL_HOST_RX, confidence: 0.55 },
+    { kind: 'absolute-path', rx: ABSOLUTE_PATH_RX, confidence: 0.75 },
+];
+/** Synchronous regex-driven scan. Rules earlier in the priority list
+ *  claim their regions first; later, broader rules whose match
+ *  overlaps a claimed region are dropped. This is what makes a JWT
+ *  inside a `Bearer` header surface as a JWT, and a Stripe key inside
+ *  `STRIPE_SECRET_KEY=…` surface as the whole assignment. */
+export function detectWithRegex(text, providerName = 'regex') {
+    const matches = [];
+    const claimed = [];
+    const overlaps = (s, e) => claimed.some((c) => s < c.end && e > c.start);
+    for (const rule of RULES) {
+        rule.rx.lastIndex = 0;
+        let m;
+        while ((m = rule.rx.exec(text)) !== null) {
+            const value = m[0];
+            const start = m.index;
+            const end = start + value.length;
+            const advance = () => {
+                if (m && m.index === rule.rx.lastIndex)
+                    rule.rx.lastIndex++;
+            };
+            if (rule.validate && !rule.validate(value)) {
+                advance();
+                continue;
+            }
+            if (overlaps(start, end)) {
+                advance();
+                continue;
+            }
+            matches.push({
+                kind: rule.kind,
+                value,
+                start,
+                end,
+                confidence: rule.confidence,
+                provider: providerName,
+            });
+            claimed.push({ start, end });
+            advance();
+        }
+    }
+    matches.sort((a, b) => a.start - b.start);
+    return matches;
+}
+//# sourceMappingURL=detectors.js.map

package/dist/detectors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectors.js","sourceRoot":"","sources":["../src/detectors.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,mEAAmE;AACnE,oEAAoE;AACpE,kEAAkE;AAClE,sEAAsE;AACtE,EAAE;AACF,mEAAmE;AACnE,oEAAoE;AACpE,iEAAiE;AACjE,mEAAmE;AACnE,oEAAoE;AACpE,iEAAiE;AAGjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAW1D,qEAAqE;AAErE,qEAAqE;AACrE,qEAAqE;AACrE,gDAAgD;AAChD,MAAM,MAAM,GAAG,qJAAqJ,CAAA;AAEpK,gEAAgE;AAChE,qEAAqE;AACrE,mEAAmE;AACnE,yBAAyB;AACzB,MAAM,eAAe,GAAG,yCAAyC,CAAA;AAEjE,gEAAgE;AAChE,kEAAkE;AAClE,gEAAgE;AAChE,oEAAoE;AACpE,8CAA8C;AAC9C,MAAM,UAAU,GAAG,uGAAuG,CAAA;AAE1H,qEAAqE;AACrE,oEAAoE;AACpE,4EAA4E;AAC5E,gDAAgD;AAChD,MAAM,cAAc,GAAG,+EAA+E,CAAA;AAEtG,kEAAkE;AAClE,oEAAoE;AACpE,+DAA+D;AAC/D,+CAA+C;AAC/C,MAAM,aAAa,GAAG,wIAAwI,CAAA;AAE9J,sEAAsE;AACtE,2CAA2C;AAC3C,MAAM,QAAQ,GAAG,iDAAiD,CAAA;AAElE,oEAAoE;AACpE,+CAA+C;AAC/C,MAAM,cAAc,GAAG,gJAAgJ,CAAA;AAEvK,oEAAoE;AAEpE,MAAM,MAAM,GAAG,iEAAiE,CAAA;AAEhF,mEAAmE;AACnE,oEAAoE;AACpE,oEAAoE;AACpE,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAClC,QAAQ,GAAG;IACT,iBAAiB;IACjB,mCAAmC;IACnC,mCAAmC;IACnC,mCAAmC;IACnC,aAAa;IACb,2BAA2B;IAC3B,4BAA4B;IAC5B,mCAAmC;IACnC,qBAAqB;IACrB,gBAAgB;IAChB,2BAA2B;IAC3B,yBAAyB;IACzB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,uBAAuB;IACvB,2BAA2B;IAC3B,0BAA0B;IAC1B,wBAAwB;IACxB,qBAAqB;IACrB,yBAAyB;IACzB,aAAa;IACb,0BAA0B;IAC1B,6BAA6B;IAC7B,eAAe;IACf,8BAA8B;IAC9B,wBAAwB;IACxB,kDAAkD;IAClD,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,0BAA0B;IAC1B,mBAAmB;IACnB,qBAAqB;IACrB,8BAA8B;IAC9B,iBAAiB;IACjB,kBAAkB;IAClB,yBAAyB;IACzB,8BAA8B;CAC/B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,EAC3C,GAAG,CACJ,CAAA;AAED,MAAM,SAAS,GAAG,0CAA0C,CAAA;AAC5D,MAAM,aAAa,GAAG,2CAA2C,CAAA;AACjE,MAAM,YAAY,GAAG,oGAAoG,CAAA;AAEzH,kEAAkE;AAClE,8DAA8D;AAC9D,yCAAyC;AACzC,MAAM,UAAU,GAAG,mGAAmG,CAAA;AAEtH,MAAM,iBAAiB,GAAG,4IAA4I,CAAA;AAEtK,oEAAoE;AAEpE,MAAM,KAAK,GAAG,sIAAsI,CAAA;AACpJ,MAAM,MAAM,GAAG,wDAAwD,CAAA;AACvE,MAAM,QAAQ,GAAG,0GAA0G,CAAA;AAC3H,MAAM,QAAQ,GAAG,yDAAyD,CAAA;AAC1E,MAAM,OAAO,GAAG,8EAA8E,CAAA;AAC9F,uEAAuE;AACvE,mEAAmE;AACnE,wDAAwD;AACxD,MAAM,OAAO,GAAG,+HAA+H,CAAA;AAE/I;;;;;;;gEAOgE;AAChE,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AACtC,CAAC;AAED,oEAAoE;AAEpE,MAAM,gBAAgB,GAAG,uFAAuF,CAAA;AAEhH,iEAAiE;AACjE,qCAAqC;AACrC,EAAE;AACF,mEAAmE;AACnE,wDAAwD;AACxD,8DAA8D;AAC9D,oEAAoE;AACpE,8DAA8D;AAC9D,sEAAsE;AACtE,MAAM,gBAAgB,GAAG,8IAA8I,CAAA;AAEvK,MAAM,KAAK,GAAW;IACpB,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE;IACpD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;IAC1D,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE;IAC5D,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,EAAE;IAC/D,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;IACjE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE;IACjD,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,EAAE;IAClE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE;IACzD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,EAAE;IAC1D,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE;IACpD,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE;IACnG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE;IAC7C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE;IAC5D,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE;IACnD,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE;IACtE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE;IAC7C,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE;IACjD,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE;IAChD,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE;IAC7C,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE;IACjE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAE;IACjE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAE;CAClE,CAAA;AAED;;;;6DAI6D;AAC7D,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,YAAY,GAAG,OAAO;IAClE,MAAM,OAAO,GAAqB,EAAE,CAAA;IACpC,MAAM,OAAO,GAAqC,EAAE,CAAA;IACpD,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;IAE/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAA;QACrB,IAAI,CAAyB,CAAA;QAC7B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YAClB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAA;YACrB,MAAM,GAAG,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,CAAA;YAChC,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC,SAAS;oBAAE,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAA;YAC7D,CAAC,CAAA;YACD,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,OAAO,EAAE,CAAA;gBACT,SAAQ;YACV,CAAC;YACD,IAAI,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,CAAA;gBACT,SAAQ;YACV,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK;gBACL,KAAK;gBACL,GAAG;gBACH,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,YAAY;aACvB,CAAC,CAAA;YACF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;YAC5B,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;IACzC,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+export type { SensitiveKind, SensitiveMatch, SensitiveGroup, SensitiveValue, } from './types.js';
+export { SENSITIVE_KIND_LABEL, SENSITIVE_KIND_ORDER, } from './types.js';
+export { detectWithRegex } from './detectors.js';
+export { regexProvider, analyzeWith, } from './providers.js';
+export type { RedactProvider } from './providers.js';
+export { luhnOk, shannon, hashValueForRedactExclude } from './validators.js';
+export { maskValueByKind } from './mask.js';
+export { HIGH_SEVERITY_KINDS, INFO_SEVERITY_KINDS, severityOf } from './severity.js';
+export type { Severity } from './severity.js';
+import type { SensitiveGroup, SensitiveMatch } from './types.js';
+/** Convenience wrapper for the common "scan one string" call. Equivalent
+ *  to `regexProvider.analyze(text)` minus the Promise — synchronous so
+ *  it's safe to use during React render. */
+export declare function detectSensitiveSpans(text: string): SensitiveMatch[];
+/** Group matches by kind, deduplicating identical literals so the
+ *  editor's expanded list shows one row per decision (not one row
+ *  per occurrence). `group.count` keeps the total occurrence sum so
+ *  the header `×N` still reflects how often a value appears; each
+ *  per-value entry carries its own occurrence count for callers that
+ *  want to surface duplicates explicitly. */
+export declare function groupBySensitiveKind(matches: SensitiveMatch[]): SensitiveGroup[];
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAWA,YAAY,EACV,aAAa,EACb,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAEhD,OAAO,EACL,aAAa,EACb,WAAW,GACZ,MAAM,gBAAgB,CAAA;AAEvB,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AACpF,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAG7C,OAAO,KAAK,EAAE,cAAc,EAAiB,cAAc,EAAE,MAAM,YAAY,CAAA;AAG/E;;4CAE4C;AAC5C,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CAEnE;AAED;;;;;6CAK6C;AAC7C,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CA6BhF"}

package/dist/index.js

@@ -0,0 +1,62 @@
+// @spool-lab/redact — sensitive-data detection for Spool sessions.
+//
+// Surfaces:
+//   • Share editor (pre-publish review of artifact content)
+//   • Security Scan (planned) — background sweep of every local
+//     `.spool` session, surfaces token/credential leaks in a report
+//   • CLI `spool doctor` (planned) — same pipeline, headless
+//
+// Everything here runs locally, with no network access of any kind.
+// See `providers.ts` for the pluggable boundary.
+export { SENSITIVE_KIND_LABEL, SENSITIVE_KIND_ORDER, } from './types.js';
+export { detectWithRegex } from './detectors.js';
+export { regexProvider, analyzeWith, } from './providers.js';
+export { luhnOk, shannon, hashValueForRedactExclude } from './validators.js';
+export { maskValueByKind } from './mask.js';
+export { HIGH_SEVERITY_KINDS, INFO_SEVERITY_KINDS, severityOf } from './severity.js';
+import { detectWithRegex } from './detectors.js';
+import { SENSITIVE_KIND_ORDER } from './types.js';
+/** Convenience wrapper for the common "scan one string" call. Equivalent
+ *  to `regexProvider.analyze(text)` minus the Promise — synchronous so
+ *  it's safe to use during React render. */
+export function detectSensitiveSpans(text) {
+    return detectWithRegex(text);
+}
+/** Group matches by kind, deduplicating identical literals so the
+ *  editor's expanded list shows one row per decision (not one row
+ *  per occurrence). `group.count` keeps the total occurrence sum so
+ *  the header `×N` still reflects how often a value appears; each
+ *  per-value entry carries its own occurrence count for callers that
+ *  want to surface duplicates explicitly. */
+export function groupBySensitiveKind(matches) {
+    const byKind = new Map();
+    for (const m of matches) {
+        const list = byKind.get(m.kind) ?? [];
+        list.push(m);
+        byKind.set(m.kind, list);
+    }
+    return Array.from(byKind.entries())
+        .map(([kind, list]) => {
+        // Preserve first-seen order while counting duplicates.
+        const order = [];
+        const counts = new Map();
+        for (const m of list) {
+            const n = counts.get(m.value);
+            if (n === undefined) {
+                order.push(m.value);
+                counts.set(m.value, 1);
+            }
+            else {
+                counts.set(m.value, n + 1);
+            }
+        }
+        return {
+            kind,
+            count: list.length,
+            values: order.map((v) => ({ value: v, count: counts.get(v) })),
+            minConfidence: list.reduce((acc, m) => Math.min(acc, m.confidence), 1),
+        };
+    })
+        .sort((a, b) => SENSITIVE_KIND_ORDER.indexOf(a.kind) - SENSITIVE_KIND_ORDER.indexOf(b.kind));
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,YAAY;AACZ,4DAA4D;AAC5D,gEAAgE;AAChE,oEAAoE;AACpE,6DAA6D;AAC7D,EAAE;AACF,oEAAoE;AACpE,iDAAiD;AASjD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAEhD,OAAO,EACL,aAAa,EACb,WAAW,GACZ,MAAM,gBAAgB,CAAA;AAIvB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAGpF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAEhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEjD;;4CAE4C;AAC5C,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAA;AAC9B,CAAC;AAED;;;;;6CAK6C;AAC7C,MAAM,UAAU,oBAAoB,CAAC,OAAyB;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAA;IACzD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QACrC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACZ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;QACpB,uDAAuD;QACvD,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;QACxC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YAC7B,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBACnB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YACxB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YAC5B,CAAC;QACH,CAAC;QACD,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;YAC/D,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;SACvE,CAAA;IACH,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAChG,CAAC"}

package/dist/mask.d.ts

@@ -0,0 +1,6 @@
+import type { SensitiveKind } from './types.js';
+/** Compute the per-kind replacement string for a detected match.
+ *  `kind` is loosely typed so synthetic categories (author names,
+ *  manual entries) also get a sensible default. */
+export declare function maskValueByKind(value: string, kind: SensitiveKind | string): string;
+//# sourceMappingURL=mask.d.ts.map

package/dist/mask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mask.d.ts","sourceRoot":"","sources":["../src/mask.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/C;;mDAEmD;AACnD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,MAAM,CA0GnF"}

package/dist/mask.js

@@ -0,0 +1,184 @@
+// Per-kind redaction masks.
+//
+// The naive substitution — every match → `[redacted]` — works but
+// throws away too much context. A reader of the published artifact
+// sees a wall of identical placeholders with no idea which were
+// credentials, which were emails, which were paths. Per-kind masks
+// keep just enough structure for the artifact to remain readable:
+//
+//   STRIPE_SECRET_KEY=sk_live_abc…  →  STRIPE_SECRET_KEY=[redacted]
+//   maya@example.com                →  m***@example.com
+//   4111 1111 1111 1111             →  **** **** **** 1111
+//   postgres://u:p@host/db          →  postgres://[redacted]
+//   ghp_abcdef…                     →  [redacted: GitHub key]
+//
+// Trade-off: a mask that retains structure (scheme, domain, last-4,
+// vendor name) leaks slightly more than `[redacted]`. The judgement
+// call is that those fragments are NOT secrets themselves — the
+// scheme of a connection string is public, the domain of an email
+// is usually public, vendor token prefixes are documented. What's
+// secret is the random tail.
+/** Compute the per-kind replacement string for a detected match.
+ *  `kind` is loosely typed so synthetic categories (author names,
+ *  manual entries) also get a sensible default. */
+export function maskValueByKind(value, kind) {
+    switch (kind) {
+        case 'private-key':
+            return `[redacted private key · ${formatBytes(value.length)}]`;
+        case 'ssh-key':
+            return `[redacted SSH key · ${formatBytes(value.length)}]`;
+        case 'api-key': {
+            const vendor = detectVendor(value);
+            return vendor ? `[redacted: ${vendor} key]` : '[redacted API key]';
+        }
+        case 'jwt':
+            return '[redacted JWT]';
+        case 'cloud-cred-ini': {
+            if (/aws_(access|secret|session)_/i.test(value))
+                return '[redacted AWS credentials]';
+            if (/refresh_token|client_secret|access_token/i.test(value))
+                return '[redacted Google credentials]';
+            return '[redacted cloud credentials]';
+        }
+        case 'kubeconfig-token': {
+            const m = value.match(/^([a-z-]+)\s*:/i);
+            return m ? `${m[1]}: [redacted]` : '[redacted kubeconfig token]';
+        }
+        case 'netrc':
+            return 'machine [redacted] login [redacted] password [redacted]';
+        case 'connection-string': {
+            const m = value.match(/^([a-z][a-z0-9+\-.]*):\/\//i);
+            return m ? `${m[1]}://[redacted]` : '[redacted connection string]';
+        }
+        case 'url-creds': {
+            const m = value.match(/^([a-z][a-z0-9+\-.]*):\/\/[^@]+@([^\s/]+)(\/[^\s]*)?$/i);
+            return m ? `${m[1]}://[redacted:redacted]@${m[2]}${m[3] ?? ''}` : '[redacted URL]';
+        }
+        case 'bearer':
+            return 'Bearer [redacted]';
+        case 'basic-auth':
+            return 'Basic [redacted]';
+        case 'env-var': {
+            // NAME=VALUE — preserve NAME, mask VALUE. The user has already
+            // consented to redact by toggling, so the assignment NAME is
+            // surfaced to keep the line readable.
+            const m = value.match(/^([A-Z][A-Z0-9_]*)\s*=/);
+            return m ? `${m[1]}=[redacted]` : '[redacted env-var]';
+        }
+        case 'generic-secret': {
+            // The match capture is "keyword : value" or "keyword = value".
+            // Preserve the keyword prefix verbatim so the assignment shape
+            // survives.
+            const m = value.match(/^([^"'\s:=]+\s*[:=]\s*)["']/);
+            return m ? `${m[1]}"[redacted]"` : '[redacted secret]';
+        }
+        case 'credit-card': {
+            const digits = value.replace(/\D/g, '');
+            const last4 = digits.slice(-4) || '****';
+            return `**** **** **** ${last4}`;
+        }
+        case 'ssn': {
+            const last4 = value.slice(-4);
+            return `***-**-${last4}`;
+        }
+        case 'email': {
+            const at = value.indexOf('@');
+            if (at <= 0)
+                return '[redacted email]';
+            const first = value[0] ?? '';
+            const domain = value.slice(at + 1);
+            // Don't reveal more than the first char of the local part. For
+            // single-char local parts ("a@x.com"), use a literal asterisk.
+            return `${first}***@${domain}`;
+        }
+        case 'phone':
+            return '[redacted phone]';
+        case 'person-name':
+            return '[redacted name]';
+        case 'street-address':
+            return '[redacted address]';
+        case 'date-of-birth':
+            return '[redacted DOB]';
+        case 'ip':
+            // Preserve shape so readers know it was a network address; the
+            // four-octet pattern matters more than the digits.
+            return value.includes(':') ? '[redacted IPv6]' : '[redacted IPv4]';
+        case 'internal-host': {
+            const m = value.match(/\.([a-z0-9-]+(?:\.[a-z0-9-]+)*)$/i);
+            return m ? `[redacted].${m[1]}` : '[redacted internal host]';
+        }
+        case 'absolute-path': {
+            const m = value.match(/^(\/Users\/|\/home\/|\/var\/|\/etc\/|\/opt\/|[A-Z]:\\Users\\)/);
+            return m ? `${m[1]}[redacted]` : '[redacted path]';
+        }
+        // Synthetic kinds emitted by the Share editor's PII layer.
+        case 'synthetic:author':
+            return '[redacted name]';
+        case 'synthetic:manual':
+            return '[redacted]';
+        default:
+            return '[redacted]';
+    }
+}
+/** Recognise the vendor behind a token by its prefix. Returns null
+ *  when the prefix isn't one we've codified — the caller falls
+ *  back to a generic `[redacted API key]` mask. */
+function detectVendor(token) {
+    if (/^sk_(live|test)_/.test(token))
+        return 'Stripe';
+    if (/^(rk|pk)_(live|test)_/.test(token))
+        return 'Stripe';
+    if (/^sk-ant-/.test(token))
+        return 'Anthropic';
+    if (/^sk-proj-/.test(token))
+        return 'OpenAI';
+    if (/^sk-/.test(token))
+        return 'OpenAI';
+    if (/^hf_/.test(token))
+        return 'Hugging Face';
+    if (/^gh[pousr]_/.test(token))
+        return 'GitHub';
+    if (/^glpat-/.test(token))
+        return 'GitLab';
+    if (/^(AKIA|ASIA)/.test(token))
+        return 'AWS';
+    if (/^AIza/.test(token))
+        return 'Google';
+    if (/^ya29\./.test(token))
+        return 'Google';
+    if (/^xox[abprs]-|^xapp-/.test(token))
+        return 'Slack';
+    if (/^SG\./.test(token))
+        return 'SendGrid';
+    if (/^key-[a-f0-9]/.test(token))
+        return 'Mailgun';
+    if (/^AC[a-f0-9]/.test(token))
+        return 'Twilio';
+    if (/^SK[a-f0-9]/.test(token))
+        return 'Twilio';
+    if (/^sq0csp-/.test(token))
+        return 'Square';
+    if (/^npm_/.test(token))
+        return 'npm';
+    if (/^pypi-/.test(token))
+        return 'PyPI';
+    if (/^dop_v1_/.test(token))
+        return 'DigitalOcean';
+    if (/^vc_|^vercel_/.test(token))
+        return 'Vercel';
+    if (/^CFPAT-/.test(token))
+        return 'Cloudflare';
+    if (/^dckr_pat_/.test(token))
+        return 'Docker Hub';
+    if (/^dapi/.test(token))
+        return 'Databricks';
+    return null;
+}
+function formatBytes(n) {
+    if (n < 1024)
+        return `${n} B`;
+    if (n < 1024 * 1024)
+        return `${(n / 1024).toFixed(1)} KB`;
+    return `${(n / (1024 * 1024)).toFixed(1)} MB`;
+}
+//# sourceMappingURL=mask.js.map

package/dist/mask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mask.js","sourceRoot":"","sources":["../src/mask.ts"],"names":[],"mappings":"AAAA,4BAA4B;AAC5B,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,gEAAgE;AAChE,mEAAmE;AACnE,kEAAkE;AAClE,EAAE;AACF,oEAAoE;AACpE,wDAAwD;AACxD,2DAA2D;AAC3D,6DAA6D;AAC7D,8DAA8D;AAC9D,EAAE;AACF,oEAAoE;AACpE,oEAAoE;AACpE,gEAAgE;AAChE,kEAAkE;AAClE,kEAAkE;AAClE,6BAA6B;AAI7B;;mDAEmD;AACnD,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,IAA4B;IACzE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,aAAa;YAChB,OAAO,2BAA2B,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAA;QAChE,KAAK,SAAS;YACZ,OAAO,uBAAuB,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAA;QAE5D,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;YAClC,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,MAAM,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAA;QACpE,CAAC;QACD,KAAK,KAAK;YACR,OAAO,gBAAgB,CAAA;QAEzB,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,IAAI,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,4BAA4B,CAAA;YACpF,IAAI,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,+BAA+B,CAAA;YACnG,OAAO,8BAA8B,CAAA;QACvC,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;YACxC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,6BAA6B,CAAA;QAClE,CAAC;QACD,KAAK,OAAO;YACV,OAAO,yDAAyD,CAAA;QAElE,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;YACpD,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,8BAA8B,CAAA;QACpE,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAA;YAC/E,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAA;QACpF,CAAC;QAED,KAAK,QAAQ;YACX,OAAO,mBAAmB,CAAA;QAC5B,KAAK,YAAY;YACf,OAAO,kBAAkB,CAAA;QAE3B,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,+DAA+D;YAC/D,6DAA6D;YAC7D,sCAAsC;YACtC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAA;YAC/C,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAA;QACxD,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,+DAA+D;YAC/D,+DAA+D;YAC/D,YAAY;YACZ,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;YACpD,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAA;QACxD,CAAC;QAED,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAA;YACxC,OAAO,kBAAkB,KAAK,EAAE,CAAA;QAClC,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7B,OAAO,UAAU,KAAK,EAAE,CAAA;QAC1B,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAC7B,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,kBAAkB,CAAA;YACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;YAClC,+DAA+D;YAC/D,+DAA+D;YAC/D,OAAO,GAAG,KAAK,OAAO,MAAM,EAAE,CAAA;QAChC,CAAC;QACD,KAAK,OAAO;YACV,OAAO,kBAAkB,CAAA;QAE3B,KAAK,aAAa;YAChB,OAAO,iBAAiB,CAAA;QAC1B,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAA;QAC7B,KAAK,eAAe;YAClB,OAAO,gBAAgB,CAAA;QAEzB,KAAK,IAAI;YACP,+DAA+D;YAC/D,mDAAmD;YACnD,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAA;QACpE,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAA;YAC1D,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAA;QAC9D,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAA;YACtF,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAA;QACpD,CAAC;QAED,2DAA2D;QAC3D,KAAK,kBAAkB;YACrB,OAAO,iBAAiB,CAAA;QAC1B,KAAK,kBAAkB;YACrB,OAAO,YAAY,CAAA;QAErB;YACE,OAAO,YAAY,CAAA;IACvB,CAAC;AACH,CAAC;AAED;;mDAEmD;AACnD,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACnD,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACxD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAA;IAC9C,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACvC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,cAAc,CAAA;IAC7C,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC9C,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC1C,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IACxC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC1C,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAA;IACrD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAA;IAC1C,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACjD,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC9C,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC9C,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IACvC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,cAAc,CAAA;IACjD,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAChD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAA;IAC9C,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAA;IACjD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAA;IAC5C,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,CAAA;IAC7B,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;IACzD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;AAC/C,CAAC"}

package/dist/providers.d.ts

@@ -0,0 +1,22 @@
+import type { SensitiveMatch } from './types.js';
+export interface RedactProvider {
+    /** Stable identifier used in `SensitiveMatch.provider` and shown
+     *  to the user when explaining where a flag came from. */
+    readonly name: string;
+    /** Human-readable label for settings UI. */
+    readonly displayName: string;
+    /** True when the provider is loaded and ready to call `analyze`.
+     *  Always true for regex; future ML providers return false until
+     *  the model bundle is on disk. */
+    available(): boolean;
+    /** Run detection on the given text. Even synchronous providers
+     *  return a Promise so callers can compose providers uniformly. */
+    analyze(text: string): Promise<SensitiveMatch[]>;
+}
+/** The default, always-available provider. */
+export declare const regexProvider: RedactProvider;
+/** Merge results from multiple providers and de-overlap by priority.
+ *  When two providers flag overlapping spans, the higher-priority
+ *  provider wins. Higher priority = earlier in the array. */
+export declare function analyzeWith(providers: RedactProvider[], text: string): Promise<SensitiveMatch[]>;
+//# sourceMappingURL=providers.d.ts.map

package/dist/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AA8CA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAGhD,MAAM,WAAW,cAAc;IAC7B;8DAC0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B;;uCAEmC;IACnC,SAAS,IAAI,OAAO,CAAA;IACpB;uEACmE;IACnE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;CACjD;AAED,8CAA8C;AAC9C,eAAO,MAAM,aAAa,EAAE,cAK3B,CAAA;AAED;;6DAE6D;AAC7D,wBAAsB,WAAW,CAC/B,SAAS,EAAE,cAAc,EAAE,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,cAAc,EAAE,CAAC,CAgB3B"}

package/dist/providers.js

@@ -0,0 +1,74 @@
+// Pluggable provider boundary for sensitive-data detection.
+//
+// `RedactProvider` is the single seam through which the Share editor,
+// the future Security Scan feature, and the CLI all consume detection.
+// Today the only implementation is `regexProvider` — deterministic,
+// zero-dep, <1ms on a typical session body. Tomorrow another provider
+// (e.g. OpenAI Privacy Filter served via transformers.js + WebGPU)
+// can plug in *without touching call sites*.
+//
+// Local-first invariant: every provider must run entirely on-device.
+// Network round-trips for detection are out of scope by policy —
+// Spool data does not leave the user's machine.
+//
+// Why we are NOT shipping OpenAI Privacy Filter today
+// (Apache-2.0, 1.5B/50M-active, 96% F1 on PII-Masking-300k):
+//
+//   1. The model bundle (Q4-quantised ONNX) is ~800 MB. Downloading
+//      that the first time a user opens the Share editor is a poor
+//      experience for an interactive surface; it makes more sense
+//      behind an explicit "enable enhanced detection" toggle, paired
+//      with the planned background Security Scan feature.
+//   2. Privacy Filter's `secret` category is broad but does not
+//      reliably recognise the long tail of vendor token formats
+//      (`ghp_…`, `sk-ant-…`, `dop_v1_…`). Regex remains the right
+//      mechanism for structurally-distinctive credentials.
+//   3. The marginal win is on prose-style PII — sentences like "my
+//      SSN is 123-45-6789", names embedded in free text, addresses
+//      in error messages — where regex fundamentally can't help.
+//      That win matters for the Security Scan report; for the
+//      Share editor (where the user is also reviewing the artifact
+//      visually) it is much less critical.
+//
+// Concretely, the integration path when we do enable it:
+//   • Add `@huggingface/transformers` as an optional dependency
+//   • Implement `privacyFilterProvider` in this file (or a sibling)
+//     that lazy-imports the package, downloads the ONNX bundle to
+//     userData/, and exposes `analyze(text): Promise<SensitiveMatch[]>`
+//     emitting matches with `provider: 'privacy-filter'`
+//   • Map its 8 entity types (`private_person`, `private_email`,
+//     `private_phone`, `private_url`, `private_address`,
+//     `private_date`, `account_number`, `secret`) to our existing
+//     SensitiveKind values, adding new kinds for what's net-new
+//     (`person-name`, `postal-address`, `date-of-birth`)
+//   • In the Settings panel, gate behind a toggle showing model
+//     size, where the file lives, and how to delete it
+import { detectWithRegex } from './detectors.js';
+/** The default, always-available provider. */
+export const regexProvider = {
+    name: 'regex',
+    displayName: 'Pattern matcher (built-in)',
+    available: () => true,
+    analyze: async (text) => detectWithRegex(text, 'regex'),
+};
+/** Merge results from multiple providers and de-overlap by priority.
+ *  When two providers flag overlapping spans, the higher-priority
+ *  provider wins. Higher priority = earlier in the array. */
+export async function analyzeWith(providers, text) {
+    if (providers.length === 0)
+        return [];
+    const lists = await Promise.all(providers.map((p) => (p.available() ? p.analyze(text) : Promise.resolve([]))));
+    const claimed = [];
+    const out = [];
+    // Priority = order in `providers`; lower index wins.
+    for (const matches of lists) {
+        for (const m of matches) {
+            if (claimed.some((c) => m.start < c.end && m.end > c.start))
+                continue;
+            out.push(m);
+            claimed.push({ start: m.start, end: m.end });
+        }
+    }
+    return out.sort((a, b) => a.start - b.start);
+}
+//# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,oEAAoE;AACpE,sEAAsE;AACtE,mEAAmE;AACnE,6CAA6C;AAC7C,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,gDAAgD;AAChD,EAAE;AACF,sDAAsD;AACtD,6DAA6D;AAC7D,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,kEAAkE;AAClE,qEAAqE;AACrE,0DAA0D;AAC1D,gEAAgE;AAChE,gEAAgE;AAChE,kEAAkE;AAClE,2DAA2D;AAC3D,mEAAmE;AACnE,mEAAmE;AACnE,iEAAiE;AACjE,8DAA8D;AAC9D,mEAAmE;AACnE,2CAA2C;AAC3C,EAAE;AACF,yDAAyD;AACzD,gEAAgE;AAChE,oEAAoE;AACpE,kEAAkE;AAClE,wEAAwE;AACxE,yDAAyD;AACzD,iEAAiE;AACjE,yDAAyD;AACzD,kEAAkE;AAClE,gEAAgE;AAChE,yDAAyD;AACzD,gEAAgE;AAChE,uDAAuD;AAGvD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAiBhD,8CAA8C;AAC9C,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,4BAA4B;IACzC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;IACrB,OAAO,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;CAChE,CAAA;AAED;;6DAE6D;AAC7D,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAA2B,EAC3B,IAAY;IAEZ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACrC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAsB,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,OAAO,GAAqC,EAAE,CAAA;IACpD,MAAM,GAAG,GAAqB,EAAE,CAAA;IAChC,qDAAqD;IACrD,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;gBAAE,SAAQ;YACrE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;AAC9C,CAAC"}

package/dist/severity.d.ts

@@ -0,0 +1,13 @@
+import type { SensitiveKind } from './types.js';
+export declare const HIGH_SEVERITY_KINDS: ReadonlySet<SensitiveKind>;
+/** Pattern hits that are useful as signal but are almost never an
+ *  actual sensitive-data leak. Real-world audit on a 317-session
+ *  archive showed ~100% noise from these kinds (file paths flagged
+ *  every cwd reference, timestamps misclassified as IPv6, mDNS
+ *  hostnames overlapping with `.env.local` filenames). Keeping them
+ *  off the default Security view is the only way the surface stays
+ *  signal-dense. */
+export declare const INFO_SEVERITY_KINDS: ReadonlySet<SensitiveKind>;
+export type Severity = 'high' | 'low' | 'info';
+export declare function severityOf(kind: SensitiveKind): Severity;
+//# sourceMappingURL=severity.d.ts.map

package/dist/severity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity.d.ts","sourceRoot":"","sources":["../src/severity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/C,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,aAAa,CAczD,CAAA;AAEF;;;;;;oBAMoB;AACpB,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,aAAa,CAIzD,CAAA;AAEF,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAA;AAE9C,wBAAgB,UAAU,CAAC,IAAI,EAAE,aAAa,GAAG,QAAQ,CAIxD"}

package/dist/severity.js

@@ -0,0 +1,51 @@
+// Severity tiers for the Security Scan surfaces.
+//
+//   high — a single leak is potentially catastrophic. Credentials,
+//          cred files, structured tokens.
+//   low  — annoying but recoverable. Identity-level (email / phone /
+//          person-name / address / DOB / credit-card / SSN).
+//   info — signal-only, not a credential leak. File paths, IP
+//          addresses, internal-DNS hostnames. Audit-positive to
+//          collect, but heavy false-positive rate when surfaced as
+//          "findings" — the Security page hides this tier by default
+//          and offers an opt-in toggle.
+//
+// The Library badge colour, the Security page Risk-panel grouping,
+// and the inline-confirm policy for Dismiss vs Purge all derive from
+// this three-way split. `scan_high_count` only counts `high`; the
+// session badge only fires when a finding is `high` or `low`.
+export const HIGH_SEVERITY_KINDS = new Set([
+    'private-key',
+    'ssh-key',
+    'cloud-cred-ini',
+    'kubeconfig-token',
+    'netrc',
+    'connection-string',
+    'url-creds',
+    'api-key',
+    'jwt',
+    'bearer',
+    'basic-auth',
+    'env-var',
+    'generic-secret',
+]);
+/** Pattern hits that are useful as signal but are almost never an
+ *  actual sensitive-data leak. Real-world audit on a 317-session
+ *  archive showed ~100% noise from these kinds (file paths flagged
+ *  every cwd reference, timestamps misclassified as IPv6, mDNS
+ *  hostnames overlapping with `.env.local` filenames). Keeping them
+ *  off the default Security view is the only way the surface stays
+ *  signal-dense. */
+export const INFO_SEVERITY_KINDS = new Set([
+    'absolute-path',
+    'ip',
+    'internal-host',
+]);
+export function severityOf(kind) {
+    if (HIGH_SEVERITY_KINDS.has(kind))
+        return 'high';
+    if (INFO_SEVERITY_KINDS.has(kind))
+        return 'info';
+    return 'low';
+}
+//# sourceMappingURL=severity.js.map

package/dist/severity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity.js","sourceRoot":"","sources":["../src/severity.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,mEAAmE;AACnE,0CAA0C;AAC1C,qEAAqE;AACrE,6DAA6D;AAC7D,8DAA8D;AAC9D,gEAAgE;AAChE,mEAAmE;AACnE,qEAAqE;AACrE,wCAAwC;AACxC,EAAE;AACF,mEAAmE;AACnE,qEAAqE;AACrE,kEAAkE;AAClE,8DAA8D;AAI9D,MAAM,CAAC,MAAM,mBAAmB,GAA+B,IAAI,GAAG,CAAC;IACrE,aAAa;IACb,SAAS;IACT,gBAAgB;IAChB,kBAAkB;IAClB,OAAO;IACP,mBAAmB;IACnB,WAAW;IACX,SAAS;IACT,KAAK;IACL,QAAQ;IACR,YAAY;IACZ,SAAS;IACT,gBAAgB;CACjB,CAAC,CAAA;AAEF;;;;;;oBAMoB;AACpB,MAAM,CAAC,MAAM,mBAAmB,GAA+B,IAAI,GAAG,CAAC;IACrE,eAAe;IACf,IAAI;IACJ,eAAe;CAChB,CAAC,CAAA;AAIF,MAAM,UAAU,UAAU,CAAC,IAAmB;IAC5C,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAA;IAChD,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAA;IAChD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,57 @@
+/** Every category the detector can emit. New kinds get appended; the
+ *  set is exhaustive so consumers can pattern-match it safely. */
+export type SensitiveKind = 'private-key' | 'ssh-key' | 'api-key' | 'cloud-cred-ini' | 'kubeconfig-token' | 'connection-string' | 'jwt' | 'bearer' | 'basic-auth' | 'env-var' | 'generic-secret' | 'netrc' | 'email' | 'phone' | 'person-name' | 'street-address' | 'date-of-birth' | 'credit-card' | 'ssn' | 'ip' | 'url-creds' | 'absolute-path' | 'internal-host';
+export interface SensitiveMatch {
+    kind: SensitiveKind;
+    /** The literal substring detected, suitable to pass to a redact
+     *  substituter. For multi-line kinds (private-key, cloud-cred-ini)
+     *  this is the entire block so the whole thing gets masked. */
+    value: string;
+    /** Character offset within the input string. */
+    start: number;
+    /** Exclusive end offset. */
+    end: number;
+    /** Heuristic 0–1.
+     *   1.0  Structural certainty — PEM block, Luhn-valid card.
+     *   ≥0.9 Strong vendor prefix or composite signal.
+     *   ≥0.7 Format match without checksum.
+     *   <0.7 Context-only signal, surface for user review.
+     */
+    confidence: number;
+    /** Which provider produced this match (`'regex'` today; future
+     *  values: `'privacy-filter'`, `'gliner'`, …). Lets the editor UI
+     *  show "model-detected" vs "rule-detected" badges and lets a
+     *  future security-scan report attribute matches. */
+    provider: string;
+}
+export interface SensitiveValue {
+    value: string;
+    /** Number of times this exact literal appeared in the source.
+     *  Always ≥ 1. Useful for surfacing "same token printed twice"
+     *  without rendering duplicate rows. */
+    count: number;
+}
+export interface SensitiveGroup {
+    kind: SensitiveKind;
+    /** Total number of matches in this group (sum of every value's
+     *  occurrence count). Drives the `×N` header label. */
+    count: number;
+    /** Distinct values for this kind, in first-seen detection order,
+     *  each paired with its occurrence count. Editor renders one row
+     *  per entry — so a value that appears 3× is one decision, not
+     *  three. */
+    values: SensitiveValue[];
+    /** Worst-case (lowest) confidence in this group — drives the
+     *  "review" badge in the editor. */
+    minConfidence: number;
+}
+/** Display order — strict risk descent. Credentials (a single leak
+ *  is potentially catastrophic) come first; identity / location
+ *  signals (annoying but recoverable) come last. Items that travel
+ *  together stay adjacent: cred files (PEM / SSH / cloud INI /
+ *  kubeconfig / netrc); URL-form creds (conn-string / url-creds);
+ *  token-form creds (api-key / jwt / bearer / basic-auth /
+ *  env-var / generic-secret); finally financial / identity / infra. */
+export declare const SENSITIVE_KIND_ORDER: SensitiveKind[];
+export declare const SENSITIVE_KIND_LABEL: Record<SensitiveKind, string>;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAOA;kEACkE;AAClE,MAAM,MAAM,aAAa,GAErB,aAAa,GACb,SAAS,GACT,SAAS,GACT,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,KAAK,GACL,QAAQ,GACR,YAAY,GACZ,SAAS,GACT,gBAAgB,GAChB,OAAO,GAEP,OAAO,GACP,OAAO,GACP,aAAa,GACb,gBAAgB,GAChB,eAAe,GACf,aAAa,GACb,KAAK,GACL,IAAI,GAEJ,WAAW,GACX,eAAe,GACf,eAAe,CAAA;AAEnB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,CAAA;IACnB;;mEAE+D;IAC/D,KAAK,EAAE,MAAM,CAAA;IACb,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAA;IACb,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB;;;yDAGqD;IACrD,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb;;4CAEwC;IACxC,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,aAAa,CAAA;IACnB;2DACuD;IACvD,KAAK,EAAE,MAAM,CAAA;IACb;;;iBAGa;IACb,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB;wCACoC;IACpC,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;;;;;uEAMuE;AACvE,eAAO,MAAM,oBAAoB,EAAE,aAAa,EAwB/C,CAAA;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAwB9D,CAAA"}

package/dist/types.js

@@ -0,0 +1,64 @@
+// Public types for @spool-lab/redact.
+//
+// Stable interface so callers (Share editor, future Security Scan,
+// CLI doctor) don't break when we add detector kinds or swap the
+// internal provider. New `SensitiveKind` values are additive — never
+// rename or repurpose existing ones.
+/** Display order — strict risk descent. Credentials (a single leak
+ *  is potentially catastrophic) come first; identity / location
+ *  signals (annoying but recoverable) come last. Items that travel
+ *  together stay adjacent: cred files (PEM / SSH / cloud INI /
+ *  kubeconfig / netrc); URL-form creds (conn-string / url-creds);
+ *  token-form creds (api-key / jwt / bearer / basic-auth /
+ *  env-var / generic-secret); finally financial / identity / infra. */
+export const SENSITIVE_KIND_ORDER = [
+    'private-key',
+    'ssh-key',
+    'cloud-cred-ini',
+    'kubeconfig-token',
+    'netrc',
+    'connection-string',
+    'url-creds',
+    'api-key',
+    'jwt',
+    'bearer',
+    'basic-auth',
+    'env-var',
+    'generic-secret',
+    'credit-card',
+    'ssn',
+    'email',
+    'phone',
+    'person-name',
+    'street-address',
+    'date-of-birth',
+    'ip',
+    'absolute-path',
+    'internal-host',
+];
+export const SENSITIVE_KIND_LABEL = {
+    'private-key': 'Private key',
+    'ssh-key': 'SSH private key',
+    'cloud-cred-ini': 'Cloud credentials',
+    'kubeconfig-token': 'kubeconfig token',
+    'connection-string': 'Connection string',
+    'api-key': 'API key',
+    'netrc': '.netrc entry',
+    'jwt': 'JWT',
+    'bearer': 'Bearer token',
+    'basic-auth': 'Basic auth',
+    'env-var': 'Env-var secret',
+    'generic-secret': 'Generic secret',
+    'url-creds': 'URL credential',
+    'credit-card': 'Credit card',
+    'ssn': 'SSN',
+    'email': 'Email',
+    'phone': 'Phone',
+    'person-name': 'Person name',
+    'street-address': 'Street address',
+    'date-of-birth': 'Date of birth',
+    'ip': 'IP address',
+    'absolute-path': 'Absolute path',
+    'internal-host': 'Internal hostname',
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,mEAAmE;AACnE,iEAAiE;AACjE,qEAAqE;AACrE,qCAAqC;AA+ErC;;;;;;uEAMuE;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAAoB;IACnD,aAAa;IACb,SAAS;IACT,gBAAgB;IAChB,kBAAkB;IAClB,OAAO;IACP,mBAAmB;IACnB,WAAW;IACX,SAAS;IACT,KAAK;IACL,QAAQ;IACR,YAAY;IACZ,SAAS;IACT,gBAAgB;IAChB,aAAa;IACb,KAAK;IACL,OAAO;IACP,OAAO;IACP,aAAa;IACb,gBAAgB;IAChB,eAAe;IACf,IAAI;IACJ,eAAe;IACf,eAAe;CAChB,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAkC;IACjE,aAAa,EAAE,aAAa;IAC5B,SAAS,EAAE,iBAAiB;IAC5B,gBAAgB,EAAE,mBAAmB;IACrC,kBAAkB,EAAE,kBAAkB;IACtC,mBAAmB,EAAE,mBAAmB;IACxC,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,KAAK;IACZ,QAAQ,EAAE,cAAc;IACxB,YAAY,EAAE,YAAY;IAC1B,SAAS,EAAE,gBAAgB;IAC3B,gBAAgB,EAAE,gBAAgB;IAClC,WAAW,EAAE,gBAAgB;IAC7B,aAAa,EAAE,aAAa;IAC5B,KAAK,EAAE,KAAK;IACZ,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE,OAAO;IAChB,aAAa,EAAE,aAAa;IAC5B,gBAAgB,EAAE,gBAAgB;IAClC,eAAe,EAAE,eAAe;IAChC,IAAI,EAAE,YAAY;IAClB,eAAe,EAAE,eAAe;IAChC,eAAe,EAAE,mBAAmB;CACrC,CAAA"}

package/dist/validators.d.ts

@@ -0,0 +1,25 @@
+/** Luhn check for credit-card-shaped digit runs. Operates on the
+ *  raw match (separators allowed); returns true if the embedded
+ *  digit sequence is a valid mod-10 checksum. */
+export declare function luhnOk(value: string): boolean;
+/** Stable 32-bit non-cryptographic hash of `value`, hex-encoded as
+ *  8 lowercase characters. Used by the Share editor to persist per-
+ *  item redact opt-outs in `RedactExclude.valueHashes` *without*
+ *  storing the literal value.
+ *
+ *  Threat model: an attacker who can read the persisted draft can
+ *  also read the conversation body in the same file, so a stronger
+ *  hash would not raise the bar. The goal here is to ensure the
+ *  Share editor itself doesn't produce a NEW on-disk artifact that
+ *  names a sensitive literal. FNV-1a is deterministic, sync, and
+ *  fast enough to call inside a React render. */
+export declare function hashValueForRedactExclude(value: string): string;
+/** Shannon entropy of a string. Used to gate the generic-secret rule
+ *  so that `password = "letmeinletmeinletmein"` (low-entropy) doesn't
+ *  trigger but `password = "j82H1xK9pQrSt7VwYzA3"` does. */
+export declare function shannon(s: string): number;
+/** Curried entropy floor for use as a rule validator. The match
+ *  string is expected to be a "keyword = value" capture; we pull the
+ *  quoted body so we don't include the key name in the entropy. */
+export declare function hasQuotedEntropy(min: number): (value: string) => boolean;
+//# sourceMappingURL=validators.d.ts.map

package/dist/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../src/validators.ts"],"names":[],"mappings":"AASA;;iDAEiD;AACjD,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAe7C;AAED;;;;;;;;;;iDAUiD;AACjD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAU/D;AAED;;4DAE4D;AAC5D,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAWzC;AAED;;mEAEmE;AACnE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAKxE"}

package/dist/validators.js

@@ -0,0 +1,78 @@
+// Small validators used by the detector rules to suppress false
+// positives that pure regex can't. Each is side-effect-free and
+// returns boolean — discard-on-false at the detector level.
+//
+// Also home to `hashValueForRedactExclude`: the non-crypto hash
+// used by the Share editor to record per-item opt-outs WITHOUT
+// writing the literal value back to disk. See `RedactExclude` in
+// `@spool/share-kit` for the threat model and rationale.
+/** Luhn check for credit-card-shaped digit runs. Operates on the
+ *  raw match (separators allowed); returns true if the embedded
+ *  digit sequence is a valid mod-10 checksum. */
+export function luhnOk(value) {
+    const digits = value.replace(/\D/g, '');
+    if (digits.length < 13 || digits.length > 19)
+        return false;
+    let sum = 0;
+    let alt = false;
+    for (let i = digits.length - 1; i >= 0; i--) {
+        let d = digits.charCodeAt(i) - 48;
+        if (alt) {
+            d *= 2;
+            if (d > 9)
+                d -= 9;
+        }
+        sum += d;
+        alt = !alt;
+    }
+    return sum % 10 === 0;
+}
+/** Stable 32-bit non-cryptographic hash of `value`, hex-encoded as
+ *  8 lowercase characters. Used by the Share editor to persist per-
+ *  item redact opt-outs in `RedactExclude.valueHashes` *without*
+ *  storing the literal value.
+ *
+ *  Threat model: an attacker who can read the persisted draft can
+ *  also read the conversation body in the same file, so a stronger
+ *  hash would not raise the bar. The goal here is to ensure the
+ *  Share editor itself doesn't produce a NEW on-disk artifact that
+ *  names a sensitive literal. FNV-1a is deterministic, sync, and
+ *  fast enough to call inside a React render. */
+export function hashValueForRedactExclude(value) {
+    // FNV-1a 32-bit. Offset basis 0x811c9dc5, prime 0x01000193.
+    let h = 0x811c9dc5;
+    for (let i = 0; i < value.length; i++) {
+        h ^= value.charCodeAt(i);
+        // Force back to unsigned 32-bit after each multiply so JS's
+        // 53-bit-mantissa Number doesn't drift into floating-point.
+        h = Math.imul(h, 0x01000193) >>> 0;
+    }
+    return h.toString(16).padStart(8, '0');
+}
+/** Shannon entropy of a string. Used to gate the generic-secret rule
+ *  so that `password = "letmeinletmeinletmein"` (low-entropy) doesn't
+ *  trigger but `password = "j82H1xK9pQrSt7VwYzA3"` does. */
+export function shannon(s) {
+    if (!s)
+        return 0;
+    const counts = new Map();
+    for (const c of s)
+        counts.set(c, (counts.get(c) ?? 0) + 1);
+    const len = s.length;
+    let h = 0;
+    for (const n of counts.values()) {
+        const p = n / len;
+        h -= p * Math.log2(p);
+    }
+    return h;
+}
+/** Curried entropy floor for use as a rule validator. The match
+ *  string is expected to be a "keyword = value" capture; we pull the
+ *  quoted body so we don't include the key name in the entropy. */
+export function hasQuotedEntropy(min) {
+    return (value) => {
+        const inner = value.match(/["']([^"']{6,})["']/)?.[1] ?? value;
+        return shannon(inner) >= min;
+    };
+}
+//# sourceMappingURL=validators.js.map

package/dist/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../src/validators.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,gEAAgE;AAChE,4DAA4D;AAC5D,EAAE;AACF,gEAAgE;AAChE,+DAA+D;AAC/D,iEAAiE;AACjE,yDAAyD;AAEzD;;iDAEiD;AACjD,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACvC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAA;IAC1D,IAAI,GAAG,GAAG,CAAC,CAAA;IACX,IAAI,GAAG,GAAG,KAAK,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAA;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,CAAC,IAAI,CAAC,CAAA;YACN,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;QACD,GAAG,IAAI,CAAC,CAAA;QACR,GAAG,GAAG,CAAC,GAAG,CAAA;IACZ,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;AACvB,CAAC;AAED;;;;;;;;;;iDAUiD;AACjD,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,4DAA4D;IAC5D,IAAI,CAAC,GAAG,UAAU,CAAA;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACxB,4DAA4D;QAC5D,4DAA4D;QAC5D,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACxC,CAAC;AAED;;4DAE4D;AAC5D,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IAChB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1D,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;IACpB,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;QACjB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;mEAEmE;AACnE,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,CAAC,KAAa,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAA;QAC9D,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAA;IAC9B,CAAC,CAAA;AACH,CAAC"}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@spool-lab/redact",
+  "version": "0.0.1",
+  "description": "Local, pure-TS sensitive-data detection for Spool sessions. Pattern + checksum + entropy pipeline today; pluggable provider boundary for future on-device ML (e.g. OpenAI Privacy Filter via transformers.js).",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^22.19.17",
+    "vitest": "^3.2.4"
+  },
+  "scripts": {
+    "build": "pnpm run clean && tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  }
+}