@stll/anonymize-cli 0.0.1-placeholder.0 → 1.4.9

package/LICENSE

@@ -0,0 +1,27 @@
+MIT License
+
+Copyright (c) 2026 stella labs, s.r.o.
+
+Permission is hereby granted, free of charge, to any
+person obtaining a copy of this software and associated
+documentation files (the "Software"), to deal in the
+Software without restriction, including without
+limitation the rights to use, copy, modify, merge,
+publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the
+following conditions:
+
+The above copyright notice and this permission notice
+shall be included in all copies or substantial portions
+of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF
+ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED
+TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
+PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT
+SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR
+IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.

package/README.md

@@ -0,0 +1,65 @@
+# @stll/anonymize-cli
+
+Command-line PII detection and anonymization powered by
+[`@stll/anonymize`](https://github.com/stella/anonymize).
+Fully offline: no network calls, ever.
+
+## Usage
+
+```bash
+# No install needed
+echo "Contact Jan Novák at jan.novak@example.com" | bunx @stll/anonymize-cli
+# Contact [PERSON_1] at [EMAIL_ADDRESS_1]
+
+# Or with npx / a global install (bin name: anonymize)
+npx @stll/anonymize-cli contract.txt > contract.anon.txt
+```
+
+Reversible round-trip for LLM workflows — anonymize, send the
+redacted text to a model, restore names in the answer:
+
+```bash
+anonymize -k key.json -o redacted.txt input.txt
+# ... send redacted.txt to the LLM, save reply as reply.txt ...
+anonymize -d key.json reply.txt
+```
+
+## Options
+
+| Flag                      | Meaning                                         |
+| ------------------------- | ----------------------------------------------- |
+| `-o, --output <path>`     | Output file, or directory for multiple inputs   |
+| `-m, --mode <mode>`       | `replace` (reversible placeholders) or `redact` |
+| `-k, --key <path>`        | Write the redaction key JSON (replace mode)     |
+| `-d, --deanonymise <key>` | Restore text using a redaction key              |
+| `--labels <list>`         | Entity labels to detect (default: all)          |
+| `--languages <list>`      | Name-corpus languages, e.g. `cs,de,en`          |
+| `--countries <list>`      | ISO 3166-1 alpha-2 deny-list/city scope         |
+| `--threshold <n>`         | Minimum confidence score 0-1 (default 0.3)      |
+| `--redact-string <s>`     | Replacement text in redact mode                 |
+| `--json`                  | Emit entities + redacted text as JSON           |
+| `--quiet`                 | Suppress the stderr summary                     |
+
+Run `anonymize --help` for the full reference, including the
+`--json` schema and exit codes.
+
+## Scripting and agents
+
+- Exit codes: `0` success, `1` runtime error, `2` usage error.
+- The stderr summary contains entity-label counts only, never
+  detected text.
+- The interactive locale prompt appears only when stdin and
+  stderr are TTYs and no scope flags are given; piped runs
+  never block.
+- `--json` offsets are UTF-16 code-unit indexes into the input.
+
+## Standalone binary
+
+`bun run compile` produces a self-contained executable (WASM
+engine, dictionaries embedded as a gzip blob) that runs without
+Node, Bun, or npm. Cross-compile with `--target=bun-linux-x64`
+etc.
+
+## License
+
+MIT

package/dist/cli.mjs

@@ -0,0 +1,513 @@
+#!/usr/bin/env node
+import * as anonymize from "@stll/anonymize";
+import { ALL_DICTIONARY_IDS, DICTIONARY_META, loadCityDictionary, loadDictionary, loadNameDictionaries } from "@stll/anonymize-data";
+import { parseArgs } from "node:util";
+import { realpathSync } from "node:fs";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { basename, join, resolve } from "node:path";
+import { createInterface } from "node:readline/promises";
+import { DEFAULT_ENTITY_LABELS } from "@stll/anonymize/constants";
+//#region src/args.ts
+const CLI_MODES = ["replace", "redact"];
+const DEFAULT_THRESHOLD = .3;
+const DEFAULT_REDACT_STRING = "[REDACTED]";
+/** Invalid invocation; printed with usage hint, exit code 2. */
+var UsageError = class extends Error {};
+const HELP = `Usage: anonymize [options] [file ...]
+
+Detect and anonymize PII in text. Reads the given files, or stdin
+when no files are given. Writes to stdout, or to --output.
+All processing is local; the CLI makes no network calls.
+
+Options:
+  -o, --output <path>       Output file, or directory when multiple
+                            input files are given
+  -m, --mode <mode>         "replace" (reversible [PERSON_1]
+                            placeholders) or "redact"
+                            (default: replace)
+  -k, --key <path>          Write the redaction key as JSON
+                            (single input, replace mode)
+  -d, --deanonymise <path>  Restore redacted text using the
+                            redaction key at <path>
+      --labels <list>       Comma-separated entity labels to detect
+                            (default: all)
+      --languages <list>    Name-corpus languages, e.g. "cs,de,en"
+                            (default: all bundled)
+      --countries <list>    ISO 3166-1 alpha-2 codes scoping deny
+                            lists and city data, e.g. "CZ,DE,GB"
+                            (default: all deny lists; city data
+                            for a 30-country default set)
+      --threshold <n>       Minimum confidence score, 0-1
+                            (default: ${DEFAULT_THRESHOLD})
+      --redact-string <s>   Replacement text in redact mode
+                            (default: "${DEFAULT_REDACT_STRING}")
+      --json                Emit JSON (entities + redacted text) to
+                            stdout (single input only)
+      --quiet               Suppress the summary on stderr
+  -h, --help                Show this help
+  -v, --version             Show the version
+
+Interactive prompt:
+  When run on files from a terminal without --countries or
+  --languages, the CLI asks once which country scope to load.
+  Piped stdin/stderr or --quiet skips the prompt, so scripts
+  and agents never block on input.
+
+Exit codes:
+  0  success
+  1  runtime error (message on stderr)
+  2  usage error (message on stderr)
+
+JSON output (--json):
+  { "entityCount": number,
+    "entities": [{ "start": number, "end": number,
+                   "label": string, "text": string,
+                   "score": number, "source": string }],
+    "redactedText": string }
+  Offsets are UTF-16 code-unit indexes into the input.
+  The stderr summary contains entity counts only, never
+  the detected text.
+
+Examples:
+  anonymize contract.txt > contract.anon.txt
+  anonymize -k contract.key.json -o contract.anon.txt contract.txt
+  anonymize -d contract.key.json contract.anon.txt
+  cat notes.md | anonymize --countries CZ,SK --languages cs,sk
+  anonymize --json --quiet input.txt | jq '.entities[].label'
+`;
+const splitList = (value) => [...new Set(value.split(",").map((part) => part.trim()).filter((part) => part.length > 0))];
+const parseThreshold = (raw) => {
+	const value = Number(raw);
+	if (!Number.isFinite(value) || value < 0 || value > 1) throw new UsageError(`--threshold must be a number between 0 and 1, got "${raw}"`);
+	return value;
+};
+const parseMode = (raw) => {
+	const mode = CLI_MODES.find((candidate) => candidate === raw);
+	if (!mode) throw new UsageError(`--mode must be one of: ${CLI_MODES.join(", ")}; got "${raw}"`);
+	return mode;
+};
+const COUNTRY_CODE_RE = /^[A-Za-z]{2}$/;
+const parseCountries = (raw) => {
+	const countries = [...new Set(splitList(raw).map((code) => code.toUpperCase()))];
+	const invalid = countries.find((code) => !COUNTRY_CODE_RE.test(code));
+	if (invalid) throw new UsageError(`--countries expects ISO 3166-1 alpha-2 codes (e.g. "CZ,DE"), got "${invalid}"`);
+	return countries;
+};
+const parseCliArgs = (argv) => {
+	let parsed;
+	try {
+		parsed = parseArgs({
+			...PARSE_CONFIG,
+			args: argv
+		});
+	} catch (err) {
+		throw new UsageError(err instanceof Error ? err.message : String(err));
+	}
+	const { values, positionals } = parsed;
+	return {
+		files: positionals,
+		output: values.output,
+		mode: values.mode === void 0 ? "replace" : parseMode(values.mode),
+		keyPath: values.key,
+		deanonymiseKeyPath: values.deanonymise,
+		labels: values.labels === void 0 ? void 0 : splitList(values.labels),
+		languages: values.languages === void 0 ? void 0 : splitList(values.languages),
+		countries: values.countries === void 0 ? void 0 : parseCountries(values.countries),
+		threshold: values.threshold === void 0 ? DEFAULT_THRESHOLD : parseThreshold(values.threshold),
+		redactString: values["redact-string"] ?? "[REDACTED]",
+		json: values.json === true,
+		quiet: values.quiet === true,
+		help: values.help === true,
+		version: values.version === true
+	};
+};
+const PARSE_CONFIG = {
+	allowPositionals: true,
+	strict: true,
+	options: {
+		output: {
+			type: "string",
+			short: "o"
+		},
+		mode: {
+			type: "string",
+			short: "m"
+		},
+		key: {
+			type: "string",
+			short: "k"
+		},
+		deanonymise: {
+			type: "string",
+			short: "d"
+		},
+		labels: { type: "string" },
+		languages: { type: "string" },
+		countries: { type: "string" },
+		threshold: { type: "string" },
+		"redact-string": { type: "string" },
+		json: { type: "boolean" },
+		quiet: { type: "boolean" },
+		help: {
+			type: "boolean",
+			short: "h"
+		},
+		version: {
+			type: "boolean",
+			short: "v"
+		}
+	}
+};
+//#endregion
+//#region src/dictionary-scope.ts
+const NAME_DICTIONARY_PREFIXES = ["names/first/", "names/surnames/"];
+/** Language code of a name dictionary id, or null. */
+const nameLanguageOfDictionary = (id) => {
+	const prefix = NAME_DICTIONARY_PREFIXES.find((p) => id.startsWith(p));
+	return prefix ? id.slice(prefix.length) : null;
+};
+//#endregion
+//#region src/dictionaries.ts
+/**
+* Countries with bundled city dictionaries that are
+* loaded when no --countries scope is given.
+*/
+const DEFAULT_CITY_COUNTRIES = [
+	"AT",
+	"AU",
+	"BE",
+	"BG",
+	"BR",
+	"CA",
+	"CH",
+	"CZ",
+	"DE",
+	"DK",
+	"ES",
+	"FI",
+	"FR",
+	"GB",
+	"GR",
+	"HR",
+	"HU",
+	"IE",
+	"IT",
+	"LU",
+	"NL",
+	"NO",
+	"NZ",
+	"PL",
+	"PT",
+	"RO",
+	"SE",
+	"SI",
+	"SK",
+	"US"
+];
+const availableNameLanguages = () => ALL_DICTIONARY_IDS.filter((id) => id.startsWith(NAME_DICTIONARY_PREFIXES[0])).map((id) => id.slice(NAME_DICTIONARY_PREFIXES[0].length));
+const validateLanguages = (languages) => {
+	const available = availableNameLanguages();
+	const invalid = languages.find((lang) => !available.includes(lang));
+	if (invalid) throw new UsageError(`--languages: no name dictionary for "${invalid}"; available: ${available.join(", ")}`);
+	return languages;
+};
+/**
+* Load the bundled @stll/anonymize-data dictionaries,
+* scoped to the requested languages and countries.
+*/
+const loadCliDictionaries = async ({ languages, countries }) => {
+	const nameLanguages = languages === void 0 ? void 0 : validateLanguages(languages);
+	const denyIds = ALL_DICTIONARY_IDS.filter((id) => {
+		const meta = DICTIONARY_META[id];
+		if (countries && meta.country !== null && !countries.includes(meta.country)) return false;
+		const nameLang = nameLanguageOfDictionary(id);
+		if (nameLang !== null && nameLanguages !== void 0) return nameLanguages.includes(nameLang);
+		return true;
+	});
+	const cityCountries = countries ?? DEFAULT_CITY_COUNTRIES;
+	const [names, denyEntries, cityEntries] = await Promise.all([
+		loadNameDictionaries(nameLanguages),
+		Promise.all(denyIds.map(async (id) => ({
+			id,
+			entries: await loadDictionary(id)
+		}))),
+		Promise.all(cityCountries.map(async (country) => ({
+			country,
+			entries: await loadCityDictionary(country)
+		})))
+	]);
+	const denyList = {};
+	const denyListMeta = {};
+	for (const { id, entries } of denyEntries) {
+		denyList[id] = entries;
+		denyListMeta[id] = DICTIONARY_META[id];
+	}
+	const citiesByCountry = {};
+	for (const { country, entries } of cityEntries) if (entries.length > 0) citiesByCountry[country] = entries;
+	return {
+		firstNames: names.firstNames,
+		surnames: names.surnames,
+		denyList,
+		denyListMeta,
+		citiesByCountry
+	};
+};
+//#endregion
+//#region package.json
+var version = "1.4.9";
+//#endregion
+//#region src/main.ts
+const cliVersion = () => version;
+/**
+* Filesystem identity of a path: realpath when it exists
+* (so symlinks to the same file compare equal), lexical
+* resolution otherwise (the file may not exist yet).
+*/
+const canonicalPath = (path) => {
+	try {
+		return realpathSync(path);
+	} catch {
+		return resolve(path);
+	}
+};
+const readStdin = async () => {
+	process.stdin.setEncoding("utf8");
+	let text = "";
+	for await (const chunk of process.stdin) text += chunk;
+	return text;
+};
+const readInputs = async (files) => {
+	if (files.length === 0) {
+		if (process.stdin.isTTY) throw new UsageError("no input files and stdin is a terminal (see --help)");
+		return [{
+			path: null,
+			text: await readStdin()
+		}];
+	}
+	return Promise.all(files.map(async (path) => ({
+		path,
+		text: await readFile(path, "utf8")
+	})));
+};
+const validateLabels = (labels) => {
+	const known = DEFAULT_ENTITY_LABELS;
+	const invalid = labels.find((label) => !known.includes(label));
+	if (invalid) throw new UsageError(`--labels: unknown label "${invalid}"; available: ${DEFAULT_ENTITY_LABELS.join(", ")}`);
+	return [...labels];
+};
+const buildPipelineConfig = async (opts, loadDictionaries) => {
+	const dictionaries = await loadDictionaries({
+		languages: opts.languages,
+		countries: opts.countries
+	});
+	return {
+		threshold: opts.threshold,
+		enableTriggerPhrases: true,
+		enableRegex: true,
+		enableLegalForms: true,
+		enableNameCorpus: true,
+		...opts.languages === void 0 ? {} : { nameCorpusLanguages: [...opts.languages] },
+		enableDenyList: true,
+		...opts.countries === void 0 ? {} : { denyListCountries: [...opts.countries] },
+		enableGazetteer: false,
+		enableCountries: true,
+		enableNer: false,
+		enableConfidenceBoost: true,
+		enableCoreference: true,
+		enableZoneClassification: true,
+		enableHotwordRules: true,
+		labels: opts.labels === void 0 ? [...DEFAULT_ENTITY_LABELS] : validateLabels(opts.labels),
+		workspaceId: "cli",
+		dictionaries
+	};
+};
+const buildOperatorConfig = (opts, entities) => {
+	const operators = {};
+	if (opts.mode === "redact") for (const entity of entities) operators[entity.label] = "redact";
+	return {
+		operators,
+		redactString: opts.redactString
+	};
+};
+const writeOutput = async (path, content) => {
+	if (path === void 0) {
+		process.stdout.write(content);
+		return;
+	}
+	await writeFile(path, content, "utf8");
+};
+const parseRedactionKey = (raw) => {
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		throw new UsageError("redaction key is not valid JSON");
+	}
+	if (typeof parsed !== "object" || parsed === null || !("entries" in parsed)) throw new UsageError("redaction key must be an object with an \"entries\" field");
+	const { entries } = parsed;
+	if (typeof entries !== "object" || entries === null || Array.isArray(entries)) throw new UsageError("redaction key \"entries\" must be an object");
+	const map = /* @__PURE__ */ new Map();
+	for (const [placeholder, entry] of Object.entries(entries)) {
+		if (typeof entry?.original !== "string") throw new UsageError(`redaction key entry "${placeholder}" has no original text`);
+		map.set(placeholder, entry.original);
+	}
+	return map;
+};
+/**
+* Ask for a country scope when running interactively on
+* files with no scope flags. Skipped for piped stdin so
+* the CLI stays scriptable.
+*/
+const shouldPromptForScope = (opts, tty) => opts.countries === void 0 && opts.languages === void 0 && !opts.quiet && opts.files.length > 0 && tty.stdinIsTTY && tty.stderrIsTTY;
+const promptForCountries = async () => {
+	const rl = createInterface({
+		input: process.stdin,
+		output: process.stderr
+	});
+	try {
+		const trimmed = (await rl.question("Country scope (ISO codes like CZ,DE,GB; Enter loads all): ")).trim();
+		return trimmed === "" ? void 0 : parseCountries(trimmed);
+	} finally {
+		rl.close();
+	}
+};
+const runDeanonymise = async (opts, api) => {
+	if (opts.keyPath !== void 0) throw new UsageError("--key cannot be combined with --deanonymise");
+	const keyPath = opts.deanonymiseKeyPath;
+	if (keyPath === void 0) throw new UsageError("missing redaction key path");
+	const redactionMap = parseRedactionKey(await readFile(keyPath, "utf8"));
+	const inputs = await readInputs(opts.files);
+	if (inputs.length > 1) throw new UsageError("--deanonymise accepts a single input");
+	const input = inputs[0];
+	if (!input) throw new UsageError("no input to deanonymise");
+	if (opts.output !== void 0) guardWriteTargets(input.path === null ? [] : [input.path], [{
+		path: opts.output,
+		flag: "--output"
+	}]);
+	await writeOutput(opts.output, api.deanonymise(input.text, redactionMap));
+};
+const outputPathFor = (input, opts, multi) => {
+	if (opts.output === void 0) return void 0;
+	if (!multi) return opts.output;
+	if (input.path === null) throw new UsageError("stdin cannot be combined with multiple files");
+	return join(opts.output, basename(input.path));
+};
+/**
+* Reject any write target (output or key file) whose
+* filesystem identity collides with an input file or with
+* another write target. Symlinks count as collisions.
+*/
+const guardWriteTargets = (inputPaths, writeTargets) => {
+	const inputs = new Set(inputPaths.map(canonicalPath));
+	const seen = /* @__PURE__ */ new Map();
+	for (const target of writeTargets) {
+		const canonical = canonicalPath(target.path);
+		if (inputs.has(canonical)) throw new UsageError(`refusing to overwrite input file "${target.path}" (${target.flag})`);
+		const clash = seen.get(canonical);
+		if (clash !== void 0) throw new UsageError(`${target.flag} "${target.path}" collides with ${clash}`);
+		seen.set(canonical, `${target.flag} "${target.path}"`);
+	}
+};
+const summarize = (entities) => {
+	const counts = /* @__PURE__ */ new Map();
+	for (const entity of entities) counts.set(entity.label, (counts.get(entity.label) ?? 0) + 1);
+	const parts = [...counts.entries()].toSorted((a, b) => b[1] - a[1]).map(([label, count]) => `${label}: ${count}`);
+	return parts.length > 0 ? parts.join(", ") : "none";
+};
+const runAnonymise = async (opts, { api, loadDictionaries }) => {
+	const multi = opts.files.length > 1;
+	if (multi && opts.output === void 0) throw new UsageError("multiple input files require --output <directory>");
+	if (multi && opts.keyPath !== void 0) throw new UsageError("--key works with a single input only");
+	if (multi && opts.json) throw new UsageError("--json works with a single input only");
+	if (opts.keyPath !== void 0 && opts.mode !== "replace") throw new UsageError("--key requires --mode \"replace\"");
+	const scoped = shouldPromptForScope(opts, {
+		stdinIsTTY: process.stdin.isTTY === true,
+		stderrIsTTY: process.stderr.isTTY === true
+	}) ? {
+		...opts,
+		countries: await promptForCountries()
+	} : opts;
+	const inputs = await readInputs(scoped.files);
+	const outputPaths = inputs.map((input) => outputPathFor(input, opts, multi));
+	const writeTargets = [];
+	for (const path of outputPaths) if (path !== void 0) writeTargets.push({
+		path,
+		flag: "--output"
+	});
+	if (opts.keyPath !== void 0) writeTargets.push({
+		path: opts.keyPath,
+		flag: "--key"
+	});
+	guardWriteTargets(inputs.flatMap((input) => input.path === null ? [] : [input.path]), writeTargets);
+	const config = await buildPipelineConfig(scoped, loadDictionaries);
+	const context = api.createPipelineContext();
+	if (multi && opts.output !== void 0) await mkdir(opts.output, { recursive: true });
+	for (const [index, input] of inputs.entries()) {
+		const outputPath = outputPaths[index];
+		const entities = await api.runPipeline({
+			fullText: input.text,
+			config,
+			gazetteerEntries: [],
+			context
+		});
+		const result = api.redactText(input.text, entities, buildOperatorConfig(opts, entities), context);
+		if (opts.json) {
+			const payload = {
+				entityCount: result.entityCount,
+				entities,
+				redactedText: result.redactedText
+			};
+			await writeOutput(outputPath, `${JSON.stringify(payload, null, 2)}\n`);
+		} else await writeOutput(outputPath, result.redactedText);
+		if (opts.keyPath !== void 0) await writeFile(opts.keyPath, api.exportRedactionKey(result.redactionMap, result.operatorMap), "utf8");
+		if (!opts.quiet) {
+			const source = input.path ?? "stdin";
+			process.stderr.write(`anonymize: ${source}: ${summarize(entities)}\n`);
+		}
+	}
+};
+const dispatch = async (engine) => {
+	const opts = parseCliArgs(process.argv.slice(2));
+	if (opts.help) {
+		process.stdout.write(HELP);
+		return;
+	}
+	if (opts.version) {
+		process.stdout.write(`${cliVersion()}\n`);
+		return;
+	}
+	if (opts.deanonymiseKeyPath !== void 0) {
+		await runDeanonymise(opts, engine.api);
+		return;
+	}
+	await runAnonymise(opts, engine);
+};
+/**
+* Run the CLI against the given engine and set the
+* process exit code (0 ok, 1 runtime error, 2 usage).
+*/
+const runCli = async (engine) => {
+	try {
+		await dispatch(engine);
+	} catch (err) {
+		if (err instanceof UsageError) {
+			process.stderr.write(`anonymize: ${err.message}\n`);
+			process.stderr.write(`Try "anonymize --help" for usage.\n`);
+			process.exitCode = 2;
+		} else {
+			const message = err instanceof Error ? err.message : String(err);
+			process.stderr.write(`anonymize: ${message}\n`);
+			process.exitCode = 1;
+		}
+	}
+};
+//#endregion
+//#region src/cli.ts
+await runCli({
+	api: anonymize,
+	loadDictionaries: loadCliDictionaries
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=cli.mjs.map

package/dist/cli.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.mjs","names":["pkg.version"],"sources":["../src/args.ts","../src/dictionary-scope.ts","../src/dictionaries.ts","../package.json","../src/main.ts","../src/cli.ts"],"sourcesContent":["import { parseArgs } from \"node:util\";\n\nexport const CLI_MODES = [\"replace\", \"redact\"] as const;\nexport type CliMode = (typeof CLI_MODES)[number];\n\nexport const DEFAULT_THRESHOLD = 0.3;\nexport const DEFAULT_REDACT_STRING = \"[REDACTED]\";\n\n/** Invalid invocation; printed with usage hint, exit code 2. */\nexport class UsageError extends Error {}\n\nexport type CliOptions = {\n  files: string[];\n  output?: string | undefined;\n  mode: CliMode;\n  keyPath?: string | undefined;\n  deanonymiseKeyPath?: string | undefined;\n  labels?: string[] | undefined;\n  languages?: string[] | undefined;\n  countries?: string[] | undefined;\n  threshold: number;\n  redactString: string;\n  json: boolean;\n  quiet: boolean;\n  help: boolean;\n  version: boolean;\n};\n\nexport const HELP = `Usage: anonymize [options] [file ...]\n\nDetect and anonymize PII in text. Reads the given files, or stdin\nwhen no files are given. Writes to stdout, or to --output.\nAll processing is local; the CLI makes no network calls.\n\nOptions:\n  -o, --output <path>       Output file, or directory when multiple\n                            input files are given\n  -m, --mode <mode>         \"replace\" (reversible [PERSON_1]\n                            placeholders) or \"redact\"\n                            (default: replace)\n  -k, --key <path>          Write the redaction key as JSON\n                            (single input, replace mode)\n  -d, --deanonymise <path>  Restore redacted text using the\n                            redaction key at <path>\n      --labels <list>       Comma-separated entity labels to detect\n                            (default: all)\n      --languages <list>    Name-corpus languages, e.g. \"cs,de,en\"\n                            (default: all bundled)\n      --countries <list>    ISO 3166-1 alpha-2 codes scoping deny\n                            lists and city data, e.g. \"CZ,DE,GB\"\n                            (default: all deny lists; city data\n                            for a 30-country default set)\n      --threshold <n>       Minimum confidence score, 0-1\n                            (default: ${DEFAULT_THRESHOLD})\n      --redact-string <s>   Replacement text in redact mode\n                            (default: \"${DEFAULT_REDACT_STRING}\")\n      --json                Emit JSON (entities + redacted text) to\n                            stdout (single input only)\n      --quiet               Suppress the summary on stderr\n  -h, --help                Show this help\n  -v, --version             Show the version\n\nInteractive prompt:\n  When run on files from a terminal without --countries or\n  --languages, the CLI asks once which country scope to load.\n  Piped stdin/stderr or --quiet skips the prompt, so scripts\n  and agents never block on input.\n\nExit codes:\n  0  success\n  1  runtime error (message on stderr)\n  2  usage error (message on stderr)\n\nJSON output (--json):\n  { \"entityCount\": number,\n    \"entities\": [{ \"start\": number, \"end\": number,\n                   \"label\": string, \"text\": string,\n                   \"score\": number, \"source\": string }],\n    \"redactedText\": string }\n  Offsets are UTF-16 code-unit indexes into the input.\n  The stderr summary contains entity counts only, never\n  the detected text.\n\nExamples:\n  anonymize contract.txt > contract.anon.txt\n  anonymize -k contract.key.json -o contract.anon.txt contract.txt\n  anonymize -d contract.key.json contract.anon.txt\n  cat notes.md | anonymize --countries CZ,SK --languages cs,sk\n  anonymize --json --quiet input.txt | jq '.entities[].label'\n`;\n\nconst splitList = (value: string): string[] => [\n  ...new Set(\n    value\n      .split(\",\")\n      .map((part) => part.trim())\n      .filter((part) => part.length > 0),\n  ),\n];\n\nconst parseThreshold = (raw: string): number => {\n  const value = Number(raw);\n  if (!Number.isFinite(value) || value < 0 || value > 1) {\n    throw new UsageError(\n      `--threshold must be a number between 0 and 1, got \"${raw}\"`,\n    );\n  }\n  return value;\n};\n\nconst parseMode = (raw: string): CliMode => {\n  const mode = CLI_MODES.find((candidate) => candidate === raw);\n  if (!mode) {\n    throw new UsageError(\n      `--mode must be one of: ${CLI_MODES.join(\", \")}; got \"${raw}\"`,\n    );\n  }\n  return mode;\n};\n\nconst COUNTRY_CODE_RE = /^[A-Za-z]{2}$/;\n\nexport const parseCountries = (raw: string): string[] => {\n  const countries = [\n    ...new Set(splitList(raw).map((code) => code.toUpperCase())),\n  ];\n  const invalid = countries.find((code) => !COUNTRY_CODE_RE.test(code));\n  if (invalid) {\n    throw new UsageError(\n      `--countries expects ISO 3166-1 alpha-2 codes (e.g. \"CZ,DE\"), got \"${invalid}\"`,\n    );\n  }\n  return countries;\n};\n\nexport const parseCliArgs = (argv: string[]): CliOptions => {\n  let parsed: ReturnType<typeof parseArgs<typeof PARSE_CONFIG>>;\n  try {\n    parsed = parseArgs({ ...PARSE_CONFIG, args: argv });\n  } catch (err) {\n    throw new UsageError(err instanceof Error ? err.message : String(err));\n  }\n  const { values, positionals } = parsed;\n\n  return {\n    files: positionals,\n    output: values.output,\n    mode: values.mode === undefined ? \"replace\" : parseMode(values.mode),\n    keyPath: values.key,\n    deanonymiseKeyPath: values.deanonymise,\n    labels: values.labels === undefined ? undefined : splitList(values.labels),\n    languages:\n      values.languages === undefined ? undefined : splitList(values.languages),\n    countries:\n      values.countries === undefined\n        ? undefined\n        : parseCountries(values.countries),\n    threshold:\n      values.threshold === undefined\n        ? DEFAULT_THRESHOLD\n        : parseThreshold(values.threshold),\n    redactString: values[\"redact-string\"] ?? DEFAULT_REDACT_STRING,\n    json: values.json === true,\n    quiet: values.quiet === true,\n    help: values.help === true,\n    version: values.version === true,\n  };\n};\n\nconst PARSE_CONFIG = {\n  allowPositionals: true,\n  strict: true,\n  options: {\n    output: { type: \"string\", short: \"o\" },\n    mode: { type: \"string\", short: \"m\" },\n    key: { type: \"string\", short: \"k\" },\n    deanonymise: { type: \"string\", short: \"d\" },\n    labels: { type: \"string\" },\n    languages: { type: \"string\" },\n    countries: { type: \"string\" },\n    threshold: { type: \"string\" },\n    \"redact-string\": { type: \"string\" },\n    json: { type: \"boolean\" },\n    quiet: { type: \"boolean\" },\n    help: { type: \"boolean\", short: \"h\" },\n    version: { type: \"boolean\", short: \"v\" },\n  },\n} as const;\n","/* Pure helpers shared by the npm and embedded dictionary\n * loaders. Must stay free of @stll/anonymize-data imports\n * so the compiled binary's bundle excludes the raw JSON\n * dictionary modules. */\nimport type { Dictionaries, DictionaryMeta } from \"@stll/anonymize\";\n\nimport { UsageError } from \"./args\";\n\nexport const NAME_DICTIONARY_PREFIXES = [\n  \"names/first/\",\n  \"names/surnames/\",\n] as const;\n\n/** Language code of a name dictionary id, or null. */\nexport const nameLanguageOfDictionary = (id: string): string | null => {\n  const prefix = NAME_DICTIONARY_PREFIXES.find((p) => id.startsWith(p));\n  return prefix ? id.slice(prefix.length) : null;\n};\n\nexport type DictionaryScope = {\n  languages?: readonly string[] | undefined;\n  countries?: readonly string[] | undefined;\n};\n\nconst pickKeys = <T>(\n  record: Record<string, T>,\n  keep: (key: string) => boolean,\n): Record<string, T> => {\n  const result: Record<string, T> = {};\n  for (const [key, value] of Object.entries(record)) {\n    if (keep(key)) result[key] = value;\n  }\n  return result;\n};\n\n/** Dictionaries with every section present (possibly empty). */\nexport type ScopedDictionaries = Dictionaries & {\n  firstNames: Record<string, readonly string[]>;\n  surnames: Record<string, readonly string[]>;\n  denyList: Record<string, readonly string[]>;\n  denyListMeta: Record<string, DictionaryMeta>;\n  citiesByCountry: Record<string, readonly string[]>;\n};\n\n/**\n * Scope a fully loaded dictionary set to the requested\n * languages and countries. Mirrors the pre-load scoping\n * the npm loader does in dictionaries.ts; used by the\n * embedded loader, which always starts from the full set.\n */\nexport const filterDictionaries = (\n  all: Dictionaries,\n  { languages, countries }: DictionaryScope,\n): ScopedDictionaries => {\n  const firstNames = all.firstNames ?? {};\n  const surnames = all.surnames ?? {};\n  const allDenyList = all.denyList ?? {};\n  const allDenyListMeta = all.denyListMeta ?? {};\n\n  if (languages !== undefined) {\n    const available = Object.keys(firstNames);\n    const invalid = languages.find((lang) => !available.includes(lang));\n    if (invalid) {\n      throw new UsageError(\n        `--languages: no name dictionary for \"${invalid}\"; available: ${available.join(\", \")}`,\n      );\n    }\n  }\n  const keepLanguage = (lang: string): boolean =>\n    languages === undefined || languages.includes(lang);\n  const keepCountry = (country: string | null): boolean =>\n    countries === undefined || country === null || countries.includes(country);\n\n  const denyListMeta: Record<string, DictionaryMeta> = {};\n  const denyList: Record<string, readonly string[]> = {};\n  for (const [id, meta] of Object.entries(allDenyListMeta)) {\n    if (!keepCountry(meta.country)) continue;\n    const nameLang = nameLanguageOfDictionary(id);\n    if (nameLang !== null && !keepLanguage(nameLang)) continue;\n    const entries = allDenyList[id];\n    if (entries === undefined) continue;\n    denyListMeta[id] = meta;\n    denyList[id] = entries;\n  }\n\n  return {\n    firstNames: pickKeys(firstNames, keepLanguage),\n    surnames: pickKeys(surnames, keepLanguage),\n    denyList,\n    denyListMeta,\n    citiesByCountry: pickKeys(all.citiesByCountry ?? {}, (country) =>\n      keepCountry(country),\n    ),\n  };\n};\n","import type { Dictionaries, DictionaryMeta } from \"@stll/anonymize\";\nimport {\n  ALL_DICTIONARY_IDS,\n  DICTIONARY_META,\n  loadCityDictionary,\n  loadDictionary,\n  loadNameDictionaries,\n  type NameLanguage,\n} from \"@stll/anonymize-data\";\n\nimport { UsageError } from \"./args\";\nimport type { DictionaryScope } from \"./dictionary-scope\";\nimport {\n  NAME_DICTIONARY_PREFIXES,\n  nameLanguageOfDictionary,\n} from \"./dictionary-scope\";\n\n/**\n * Countries with bundled city dictionaries that are\n * loaded when no --countries scope is given.\n */\nconst DEFAULT_CITY_COUNTRIES = [\n  \"AT\",\n  \"AU\",\n  \"BE\",\n  \"BG\",\n  \"BR\",\n  \"CA\",\n  \"CH\",\n  \"CZ\",\n  \"DE\",\n  \"DK\",\n  \"ES\",\n  \"FI\",\n  \"FR\",\n  \"GB\",\n  \"GR\",\n  \"HR\",\n  \"HU\",\n  \"IE\",\n  \"IT\",\n  \"LU\",\n  \"NL\",\n  \"NO\",\n  \"NZ\",\n  \"PL\",\n  \"PT\",\n  \"RO\",\n  \"SE\",\n  \"SI\",\n  \"SK\",\n  \"US\",\n] as const;\n\nconst availableNameLanguages = (): readonly string[] =>\n  ALL_DICTIONARY_IDS.filter((id) =>\n    id.startsWith(NAME_DICTIONARY_PREFIXES[0]),\n  ).map((id) => id.slice(NAME_DICTIONARY_PREFIXES[0].length));\n\nconst validateLanguages = (\n  languages: readonly string[],\n): readonly NameLanguage[] => {\n  const available = availableNameLanguages();\n  const invalid = languages.find((lang) => !available.includes(lang));\n  if (invalid) {\n    throw new UsageError(\n      `--languages: no name dictionary for \"${invalid}\"; available: ${available.join(\", \")}`,\n    );\n  }\n  // SAFETY: every entry was checked against the bundled\n  // name dictionary ids, which define NameLanguage.\n  return languages as readonly NameLanguage[];\n};\n\nexport type LoadCliDictionariesOptions = DictionaryScope;\n\n/**\n * Load the bundled @stll/anonymize-data dictionaries,\n * scoped to the requested languages and countries.\n */\nexport const loadCliDictionaries = async ({\n  languages,\n  countries,\n}: LoadCliDictionariesOptions): Promise<Dictionaries> => {\n  const nameLanguages =\n    languages === undefined ? undefined : validateLanguages(languages);\n\n  const denyIds = ALL_DICTIONARY_IDS.filter((id) => {\n    const meta = DICTIONARY_META[id];\n    if (\n      countries &&\n      meta.country !== null &&\n      !countries.includes(meta.country)\n    ) {\n      return false;\n    }\n    const nameLang = nameLanguageOfDictionary(id);\n    if (nameLang !== null && nameLanguages !== undefined) {\n      return nameLanguages.includes(\n        // SAFETY: nameLang comes from a bundled dictionary\n        // id, which defines NameLanguage.\n        nameLang as NameLanguage,\n      );\n    }\n    return true;\n  });\n\n  const cityCountries = countries ?? DEFAULT_CITY_COUNTRIES;\n\n  const [names, denyEntries, cityEntries] = await Promise.all([\n    loadNameDictionaries(nameLanguages),\n    Promise.all(\n      denyIds.map(async (id) => ({ id, entries: await loadDictionary(id) })),\n    ),\n    Promise.all(\n      cityCountries.map(async (country) => ({\n        country,\n        entries: await loadCityDictionary(country),\n      })),\n    ),\n  ]);\n\n  const denyList: Record<string, readonly string[]> = {};\n  const denyListMeta: Record<string, DictionaryMeta> = {};\n  for (const { id, entries } of denyEntries) {\n    denyList[id] = entries;\n    // SAFETY: anonymize-data categories match\n    // DenyListCategory at runtime.\n    denyListMeta[id] = DICTIONARY_META[id] as DictionaryMeta;\n  }\n\n  const citiesByCountry: Record<string, readonly string[]> = {};\n  for (const { country, entries } of cityEntries) {\n    if (entries.length > 0) citiesByCountry[country] = entries;\n  }\n\n  return {\n    firstNames: names.firstNames,\n    surnames: names.surnames,\n    denyList,\n    denyListMeta,\n    citiesByCountry,\n  };\n};\n","","import { realpathSync } from \"node:fs\";\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { basename, join, resolve } from \"node:path\";\nimport { createInterface } from \"node:readline/promises\";\n\nimport type {\n  createPipelineContext,\n  deanonymise,\n  Dictionaries,\n  Entity,\n  exportRedactionKey,\n  OperatorConfig,\n  OperatorType,\n  PipelineConfig,\n  redactText,\n  runPipeline,\n} from \"@stll/anonymize\";\nimport { DEFAULT_ENTITY_LABELS } from \"@stll/anonymize/constants\";\n\nimport pkg from \"../package.json\" with { type: \"json\" };\n\nimport type { CliOptions } from \"./args\";\nimport { HELP, parseCliArgs, parseCountries, UsageError } from \"./args\";\nimport type { DictionaryScope } from \"./dictionary-scope\";\n\n/**\n * The pipeline functions the CLI needs. Satisfied by both\n * @stll/anonymize (native) and @stll/anonymize-wasm, so the\n * entry point decides which engine backs the binary.\n */\nexport type AnonymizeApi = {\n  createPipelineContext: typeof createPipelineContext;\n  deanonymise: typeof deanonymise;\n  exportRedactionKey: typeof exportRedactionKey;\n  redactText: typeof redactText;\n  runPipeline: typeof runPipeline;\n};\n\n/**\n * Everything an entry point injects: the pipeline engine\n * and the dictionary source (npm data package for the\n * Node bin, embedded gzip blob for the compiled binary).\n */\nexport type CliEngine = {\n  api: AnonymizeApi;\n  loadDictionaries: (scope: DictionaryScope) => Promise<Dictionaries>;\n};\n\n// Statically imported so the version is baked into both\n// the npm bundle and the compiled binary; a runtime\n// package.json lookup would fail inside the binary's\n// virtual filesystem.\nconst cliVersion = (): string => pkg.version;\n\n/**\n * Filesystem identity of a path: realpath when it exists\n * (so symlinks to the same file compare equal), lexical\n * resolution otherwise (the file may not exist yet).\n */\nconst canonicalPath = (path: string): string => {\n  try {\n    return realpathSync(path);\n  } catch {\n    return resolve(path);\n  }\n};\n\nconst readStdin = async (): Promise<string> => {\n  process.stdin.setEncoding(\"utf8\");\n  let text = \"\";\n  for await (const chunk of process.stdin) text += chunk;\n  return text;\n};\n\ntype NamedInput = {\n  /** Source path, or null when reading stdin. */\n  path: string | null;\n  text: string;\n};\n\nconst readInputs = async (files: string[]): Promise<NamedInput[]> => {\n  if (files.length === 0) {\n    if (process.stdin.isTTY) {\n      throw new UsageError(\n        \"no input files and stdin is a terminal (see --help)\",\n      );\n    }\n    return [{ path: null, text: await readStdin() }];\n  }\n  return Promise.all(\n    files.map(async (path) => ({ path, text: await readFile(path, \"utf8\") })),\n  );\n};\n\nconst validateLabels = (labels: readonly string[]): string[] => {\n  // Widening the literal tuple to string[] is safe here;\n  // we only test membership.\n  const known: readonly string[] = DEFAULT_ENTITY_LABELS;\n  const invalid = labels.find((label) => !known.includes(label));\n  if (invalid) {\n    throw new UsageError(\n      `--labels: unknown label \"${invalid}\"; available: ${DEFAULT_ENTITY_LABELS.join(\", \")}`,\n    );\n  }\n  return [...labels];\n};\n\nconst buildPipelineConfig = async (\n  opts: CliOptions,\n  loadDictionaries: CliEngine[\"loadDictionaries\"],\n): Promise<PipelineConfig> => {\n  const dictionaries = await loadDictionaries({\n    languages: opts.languages,\n    countries: opts.countries,\n  });\n  return {\n    threshold: opts.threshold,\n    enableTriggerPhrases: true,\n    enableRegex: true,\n    enableLegalForms: true,\n    enableNameCorpus: true,\n    ...(opts.languages === undefined\n      ? {}\n      : { nameCorpusLanguages: [...opts.languages] }),\n    enableDenyList: true,\n    ...(opts.countries === undefined\n      ? {}\n      : { denyListCountries: [...opts.countries] }),\n    enableGazetteer: false,\n    enableCountries: true,\n    enableNer: false,\n    enableConfidenceBoost: true,\n    enableCoreference: true,\n    enableZoneClassification: true,\n    enableHotwordRules: true,\n    labels:\n      opts.labels === undefined\n        ? [...DEFAULT_ENTITY_LABELS]\n        : validateLabels(opts.labels),\n    workspaceId: \"cli\",\n    dictionaries,\n  };\n};\n\nconst buildOperatorConfig = (\n  opts: CliOptions,\n  entities: Entity[],\n): OperatorConfig => {\n  const operators: Record<string, OperatorType> = {};\n  if (opts.mode === \"redact\") {\n    for (const entity of entities) operators[entity.label] = \"redact\";\n  }\n  return { operators, redactString: opts.redactString };\n};\n\nconst writeOutput = async (\n  path: string | undefined,\n  content: string,\n): Promise<void> => {\n  if (path === undefined) {\n    process.stdout.write(content);\n    return;\n  }\n  await writeFile(path, content, \"utf8\");\n};\n\ntype RedactionKeyFile = {\n  entries: Record<string, { original: string; operator: string }>;\n};\n\nconst parseRedactionKey = (raw: string): Map<string, string> => {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    throw new UsageError(\"redaction key is not valid JSON\");\n  }\n  if (typeof parsed !== \"object\" || parsed === null || !(\"entries\" in parsed)) {\n    throw new UsageError(\n      'redaction key must be an object with an \"entries\" field',\n    );\n  }\n  const { entries } = parsed as RedactionKeyFile;\n  if (\n    typeof entries !== \"object\" ||\n    entries === null ||\n    Array.isArray(entries)\n  ) {\n    throw new UsageError('redaction key \"entries\" must be an object');\n  }\n  const map = new Map<string, string>();\n  for (const [placeholder, entry] of Object.entries(entries)) {\n    if (typeof entry?.original !== \"string\") {\n      throw new UsageError(\n        `redaction key entry \"${placeholder}\" has no original text`,\n      );\n    }\n    map.set(placeholder, entry.original);\n  }\n  return map;\n};\n\n/**\n * Ask for a country scope when running interactively on\n * files with no scope flags. Skipped for piped stdin so\n * the CLI stays scriptable.\n */\nexport const shouldPromptForScope = (\n  opts: CliOptions,\n  tty: { stdinIsTTY: boolean; stderrIsTTY: boolean },\n): boolean =>\n  opts.countries === undefined &&\n  opts.languages === undefined &&\n  !opts.quiet &&\n  opts.files.length > 0 &&\n  tty.stdinIsTTY &&\n  tty.stderrIsTTY;\n\nconst promptForCountries = async (): Promise<string[] | undefined> => {\n  const rl = createInterface({\n    input: process.stdin,\n    output: process.stderr,\n  });\n  try {\n    const answer = await rl.question(\n      \"Country scope (ISO codes like CZ,DE,GB; Enter loads all): \",\n    );\n    const trimmed = answer.trim();\n    return trimmed === \"\" ? undefined : parseCountries(trimmed);\n  } finally {\n    rl.close();\n  }\n};\n\nconst runDeanonymise = async (\n  opts: CliOptions,\n  api: AnonymizeApi,\n): Promise<void> => {\n  if (opts.keyPath !== undefined) {\n    throw new UsageError(\"--key cannot be combined with --deanonymise\");\n  }\n  const keyPath = opts.deanonymiseKeyPath;\n  if (keyPath === undefined) throw new UsageError(\"missing redaction key path\");\n  const redactionMap = parseRedactionKey(await readFile(keyPath, \"utf8\"));\n\n  const inputs = await readInputs(opts.files);\n  if (inputs.length > 1) {\n    throw new UsageError(\"--deanonymise accepts a single input\");\n  }\n  const input = inputs[0];\n  if (!input) throw new UsageError(\"no input to deanonymise\");\n  if (opts.output !== undefined) {\n    guardWriteTargets(input.path === null ? [] : [input.path], [\n      { path: opts.output, flag: \"--output\" },\n    ]);\n  }\n  await writeOutput(opts.output, api.deanonymise(input.text, redactionMap));\n};\n\nconst outputPathFor = (\n  input: NamedInput,\n  opts: CliOptions,\n  multi: boolean,\n): string | undefined => {\n  if (opts.output === undefined) return undefined;\n  if (!multi) return opts.output;\n  if (input.path === null)\n    throw new UsageError(\"stdin cannot be combined with multiple files\");\n  return join(opts.output, basename(input.path));\n};\n\n/**\n * Reject any write target (output or key file) whose\n * filesystem identity collides with an input file or with\n * another write target. Symlinks count as collisions.\n */\nconst guardWriteTargets = (\n  inputPaths: readonly string[],\n  writeTargets: readonly { path: string; flag: string }[],\n): void => {\n  const inputs = new Set(inputPaths.map(canonicalPath));\n  const seen = new Map<string, string>();\n  for (const target of writeTargets) {\n    const canonical = canonicalPath(target.path);\n    if (inputs.has(canonical)) {\n      throw new UsageError(\n        `refusing to overwrite input file \"${target.path}\" (${target.flag})`,\n      );\n    }\n    const clash = seen.get(canonical);\n    if (clash !== undefined) {\n      throw new UsageError(\n        `${target.flag} \"${target.path}\" collides with ${clash}`,\n      );\n    }\n    seen.set(canonical, `${target.flag} \"${target.path}\"`);\n  }\n};\n\nconst summarize = (entities: Entity[]): string => {\n  const counts = new Map<string, number>();\n  for (const entity of entities) {\n    counts.set(entity.label, (counts.get(entity.label) ?? 0) + 1);\n  }\n  const parts = [...counts.entries()]\n    .toSorted((a, b) => b[1] - a[1])\n    .map(([label, count]) => `${label}: ${count}`);\n  return parts.length > 0 ? parts.join(\", \") : \"none\";\n};\n\nconst runAnonymise = async (\n  opts: CliOptions,\n  { api, loadDictionaries }: CliEngine,\n): Promise<void> => {\n  const multi = opts.files.length > 1;\n  if (multi && opts.output === undefined) {\n    throw new UsageError(\"multiple input files require --output <directory>\");\n  }\n  if (multi && opts.keyPath !== undefined) {\n    throw new UsageError(\"--key works with a single input only\");\n  }\n  if (multi && opts.json) {\n    throw new UsageError(\"--json works with a single input only\");\n  }\n  if (opts.keyPath !== undefined && opts.mode !== \"replace\") {\n    throw new UsageError('--key requires --mode \"replace\"');\n  }\n\n  const scoped = shouldPromptForScope(opts, {\n    stdinIsTTY: process.stdin.isTTY === true,\n    stderrIsTTY: process.stderr.isTTY === true,\n  })\n    ? { ...opts, countries: await promptForCountries() }\n    : opts;\n\n  const inputs = await readInputs(scoped.files);\n\n  // Validate every write target before any work: output\n  // collisions (same basename from different input dirs,\n  // symlinks to an input, --key hitting the output) fail\n  // fast instead of silently clobbering files mid-batch.\n  const outputPaths = inputs.map((input) => outputPathFor(input, opts, multi));\n  const writeTargets: { path: string; flag: string }[] = [];\n  for (const path of outputPaths) {\n    if (path !== undefined) writeTargets.push({ path, flag: \"--output\" });\n  }\n  if (opts.keyPath !== undefined) {\n    writeTargets.push({ path: opts.keyPath, flag: \"--key\" });\n  }\n  guardWriteTargets(\n    inputs.flatMap((input) => (input.path === null ? [] : [input.path])),\n    writeTargets,\n  );\n\n  const config = await buildPipelineConfig(scoped, loadDictionaries);\n\n  // One shared context for the whole batch: the first\n  // runPipeline builds the search automaton after its own\n  // init steps (hotword rules included) and caches it on\n  // the context for the remaining files. Cross-document\n  // reuse is supported — coref links travel on entities.\n  const context = api.createPipelineContext();\n\n  if (multi && opts.output !== undefined) {\n    await mkdir(opts.output, { recursive: true });\n  }\n\n  for (const [index, input] of inputs.entries()) {\n    const outputPath = outputPaths[index];\n\n    const entities = await api.runPipeline({\n      fullText: input.text,\n      config,\n      gazetteerEntries: [],\n      context,\n    });\n    const result = api.redactText(\n      input.text,\n      entities,\n      buildOperatorConfig(opts, entities),\n      context,\n    );\n\n    if (opts.json) {\n      const payload = {\n        entityCount: result.entityCount,\n        entities,\n        redactedText: result.redactedText,\n      };\n      await writeOutput(outputPath, `${JSON.stringify(payload, null, 2)}\\n`);\n    } else {\n      await writeOutput(outputPath, result.redactedText);\n    }\n\n    if (opts.keyPath !== undefined) {\n      await writeFile(\n        opts.keyPath,\n        api.exportRedactionKey(result.redactionMap, result.operatorMap),\n        \"utf8\",\n      );\n    }\n\n    if (!opts.quiet) {\n      const source = input.path ?? \"stdin\";\n      process.stderr.write(`anonymize: ${source}: ${summarize(entities)}\\n`);\n    }\n  }\n};\n\nconst dispatch = async (engine: CliEngine): Promise<void> => {\n  const opts = parseCliArgs(process.argv.slice(2));\n  if (opts.help) {\n    process.stdout.write(HELP);\n    return;\n  }\n  if (opts.version) {\n    process.stdout.write(`${cliVersion()}\\n`);\n    return;\n  }\n  if (opts.deanonymiseKeyPath !== undefined) {\n    await runDeanonymise(opts, engine.api);\n    return;\n  }\n  await runAnonymise(opts, engine);\n};\n\n/**\n * Run the CLI against the given engine and set the\n * process exit code (0 ok, 1 runtime error, 2 usage).\n */\nexport const runCli = async (engine: CliEngine): Promise<void> => {\n  try {\n    await dispatch(engine);\n  } catch (err) {\n    if (err instanceof UsageError) {\n      process.stderr.write(`anonymize: ${err.message}\\n`);\n      process.stderr.write(`Try \"anonymize --help\" for usage.\\n`);\n      process.exitCode = 2;\n    } else {\n      const message = err instanceof Error ? err.message : String(err);\n      process.stderr.write(`anonymize: ${message}\\n`);\n      process.exitCode = 1;\n    }\n  }\n};\n","#!/usr/bin/env node\n/* npm-distributed entry point — backs the CLI with the\n * native engine (@stll/text-search napi bindings) and\n * the @stll/anonymize-data dictionary package. */\nimport * as anonymize from \"@stll/anonymize\";\n\nimport { loadCliDictionaries } from \"./dictionaries\";\nimport { runCli } from \"./main\";\n\nawait runCli({ api: anonymize, loadDictionaries: loadCliDictionaries });\n"],"mappings":";;;;;;;;;;AAEA,MAAa,YAAY,CAAC,WAAW,QAAQ;AAG7C,MAAa,oBAAoB;AACjC,MAAa,wBAAwB;;AAGrC,IAAa,aAAb,cAAgC,MAAM,CAAC;AAmBvC,MAAa,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;wCAyBoB,kBAAkB;;yCAEjB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoC/D,MAAM,aAAa,UAA4B,CAC7C,GAAG,IAAI,IACL,MACG,MAAM,GAAG,EACT,KAAK,SAAS,KAAK,KAAK,CAAC,EACzB,QAAQ,SAAS,KAAK,SAAS,CAAC,CACrC,CACF;AAEA,MAAM,kBAAkB,QAAwB;CAC9C,MAAM,QAAQ,OAAO,GAAG;CACxB,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,KAAK,QAAQ,GAClD,MAAM,IAAI,WACR,sDAAsD,IAAI,EAC5D;CAEF,OAAO;AACT;AAEA,MAAM,aAAa,QAAyB;CAC1C,MAAM,OAAO,UAAU,MAAM,cAAc,cAAc,GAAG;CAC5D,IAAI,CAAC,MACH,MAAM,IAAI,WACR,0BAA0B,UAAU,KAAK,IAAI,EAAE,SAAS,IAAI,EAC9D;CAEF,OAAO;AACT;AAEA,MAAM,kBAAkB;AAExB,MAAa,kBAAkB,QAA0B;CACvD,MAAM,YAAY,CAChB,GAAG,IAAI,IAAI,UAAU,GAAG,EAAE,KAAK,SAAS,KAAK,YAAY,CAAC,CAAC,CAC7D;CACA,MAAM,UAAU,UAAU,MAAM,SAAS,CAAC,gBAAgB,KAAK,IAAI,CAAC;CACpE,IAAI,SACF,MAAM,IAAI,WACR,qEAAqE,QAAQ,EAC/E;CAEF,OAAO;AACT;AAEA,MAAa,gBAAgB,SAA+B;CAC1D,IAAI;CACJ,IAAI;EACF,SAAS,UAAU;GAAE,GAAG;GAAc,MAAM;EAAK,CAAC;CACpD,SAAS,KAAK;EACZ,MAAM,IAAI,WAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;CACvE;CACA,MAAM,EAAE,QAAQ,gBAAgB;CAEhC,OAAO;EACL,OAAO;EACP,QAAQ,OAAO;EACf,MAAM,OAAO,SAAS,KAAA,IAAY,YAAY,UAAU,OAAO,IAAI;EACnE,SAAS,OAAO;EAChB,oBAAoB,OAAO;EAC3B,QAAQ,OAAO,WAAW,KAAA,IAAY,KAAA,IAAY,UAAU,OAAO,MAAM;EACzE,WACE,OAAO,cAAc,KAAA,IAAY,KAAA,IAAY,UAAU,OAAO,SAAS;EACzE,WACE,OAAO,cAAc,KAAA,IACjB,KAAA,IACA,eAAe,OAAO,SAAS;EACrC,WACE,OAAO,cAAc,KAAA,IACjB,oBACA,eAAe,OAAO,SAAS;EACrC,cAAc,OAAO,oBAAA;EACrB,MAAM,OAAO,SAAS;EACtB,OAAO,OAAO,UAAU;EACxB,MAAM,OAAO,SAAS;EACtB,SAAS,OAAO,YAAY;CAC9B;AACF;AAEA,MAAM,eAAe;CACnB,kBAAkB;CAClB,QAAQ;CACR,SAAS;EACP,QAAQ;GAAE,MAAM;GAAU,OAAO;EAAI;EACrC,MAAM;GAAE,MAAM;GAAU,OAAO;EAAI;EACnC,KAAK;GAAE,MAAM;GAAU,OAAO;EAAI;EAClC,aAAa;GAAE,MAAM;GAAU,OAAO;EAAI;EAC1C,QAAQ,EAAE,MAAM,SAAS;EACzB,WAAW,EAAE,MAAM,SAAS;EAC5B,WAAW,EAAE,MAAM,SAAS;EAC5B,WAAW,EAAE,MAAM,SAAS;EAC5B,iBAAiB,EAAE,MAAM,SAAS;EAClC,MAAM,EAAE,MAAM,UAAU;EACxB,OAAO,EAAE,MAAM,UAAU;EACzB,MAAM;GAAE,MAAM;GAAW,OAAO;EAAI;EACpC,SAAS;GAAE,MAAM;GAAW,OAAO;EAAI;CACzC;AACF;;;ACnLA,MAAa,2BAA2B,CACtC,gBACA,iBACF;;AAGA,MAAa,4BAA4B,OAA8B;CACrE,MAAM,SAAS,yBAAyB,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC;CACpE,OAAO,SAAS,GAAG,MAAM,OAAO,MAAM,IAAI;AAC5C;;;;;;;ACIA,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAM,+BACJ,mBAAmB,QAAQ,OACzB,GAAG,WAAW,yBAAyB,EAAE,CAC3C,EAAE,KAAK,OAAO,GAAG,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAE5D,MAAM,qBACJ,cAC4B;CAC5B,MAAM,YAAY,uBAAuB;CACzC,MAAM,UAAU,UAAU,MAAM,SAAS,CAAC,UAAU,SAAS,IAAI,CAAC;CAClE,IAAI,SACF,MAAM,IAAI,WACR,wCAAwC,QAAQ,gBAAgB,UAAU,KAAK,IAAI,GACrF;CAIF,OAAO;AACT;;;;;AAQA,MAAa,sBAAsB,OAAO,EACxC,WACA,gBACuD;CACvD,MAAM,gBACJ,cAAc,KAAA,IAAY,KAAA,IAAY,kBAAkB,SAAS;CAEnE,MAAM,UAAU,mBAAmB,QAAQ,OAAO;EAChD,MAAM,OAAO,gBAAgB;EAC7B,IACE,aACA,KAAK,YAAY,QACjB,CAAC,UAAU,SAAS,KAAK,OAAO,GAEhC,OAAO;EAET,MAAM,WAAW,yBAAyB,EAAE;EAC5C,IAAI,aAAa,QAAQ,kBAAkB,KAAA,GACzC,OAAO,cAAc,SAGnB,QACF;EAEF,OAAO;CACT,CAAC;CAED,MAAM,gBAAgB,aAAa;CAEnC,MAAM,CAAC,OAAO,aAAa,eAAe,MAAM,QAAQ,IAAI;EAC1D,qBAAqB,aAAa;EAClC,QAAQ,IACN,QAAQ,IAAI,OAAO,QAAQ;GAAE;GAAI,SAAS,MAAM,eAAe,EAAE;EAAE,EAAE,CACvE;EACA,QAAQ,IACN,cAAc,IAAI,OAAO,aAAa;GACpC;GACA,SAAS,MAAM,mBAAmB,OAAO;EAC3C,EAAE,CACJ;CACF,CAAC;CAED,MAAM,WAA8C,CAAC;CACrD,MAAM,eAA+C,CAAC;CACtD,KAAK,MAAM,EAAE,IAAI,aAAa,aAAa;EACzC,SAAS,MAAM;EAGf,aAAa,MAAM,gBAAgB;CACrC;CAEA,MAAM,kBAAqD,CAAC;CAC5D,KAAK,MAAM,EAAE,SAAS,aAAa,aACjC,IAAI,QAAQ,SAAS,GAAG,gBAAgB,WAAW;CAGrD,OAAO;EACL,YAAY,MAAM;EAClB,UAAU,MAAM;EAChB;EACA;EACA;CACF;AACF;;;;;;AE3FA,MAAM,mBAA2BA;;;;;;AAOjC,MAAM,iBAAiB,SAAyB;CAC9C,IAAI;EACF,OAAO,aAAa,IAAI;CAC1B,QAAQ;EACN,OAAO,QAAQ,IAAI;CACrB;AACF;AAEA,MAAM,YAAY,YAA6B;CAC7C,QAAQ,MAAM,YAAY,MAAM;CAChC,IAAI,OAAO;CACX,WAAW,MAAM,SAAS,QAAQ,OAAO,QAAQ;CACjD,OAAO;AACT;AAQA,MAAM,aAAa,OAAO,UAA2C;CACnE,IAAI,MAAM,WAAW,GAAG;EACtB,IAAI,QAAQ,MAAM,OAChB,MAAM,IAAI,WACR,qDACF;EAEF,OAAO,CAAC;GAAE,MAAM;GAAM,MAAM,MAAM,UAAU;EAAE,CAAC;CACjD;CACA,OAAO,QAAQ,IACb,MAAM,IAAI,OAAO,UAAU;EAAE;EAAM,MAAM,MAAM,SAAS,MAAM,MAAM;CAAE,EAAE,CAC1E;AACF;AAEA,MAAM,kBAAkB,WAAwC;CAG9D,MAAM,QAA2B;CACjC,MAAM,UAAU,OAAO,MAAM,UAAU,CAAC,MAAM,SAAS,KAAK,CAAC;CAC7D,IAAI,SACF,MAAM,IAAI,WACR,4BAA4B,QAAQ,gBAAgB,sBAAsB,KAAK,IAAI,GACrF;CAEF,OAAO,CAAC,GAAG,MAAM;AACnB;AAEA,MAAM,sBAAsB,OAC1B,MACA,qBAC4B;CAC5B,MAAM,eAAe,MAAM,iBAAiB;EAC1C,WAAW,KAAK;EAChB,WAAW,KAAK;CAClB,CAAC;CACD,OAAO;EACL,WAAW,KAAK;EAChB,sBAAsB;EACtB,aAAa;EACb,kBAAkB;EAClB,kBAAkB;EAClB,GAAI,KAAK,cAAc,KAAA,IACnB,CAAC,IACD,EAAE,qBAAqB,CAAC,GAAG,KAAK,SAAS,EAAE;EAC/C,gBAAgB;EAChB,GAAI,KAAK,cAAc,KAAA,IACnB,CAAC,IACD,EAAE,mBAAmB,CAAC,GAAG,KAAK,SAAS,EAAE;EAC7C,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX,uBAAuB;EACvB,mBAAmB;EACnB,0BAA0B;EAC1B,oBAAoB;EACpB,QACE,KAAK,WAAW,KAAA,IACZ,CAAC,GAAG,qBAAqB,IACzB,eAAe,KAAK,MAAM;EAChC,aAAa;EACb;CACF;AACF;AAEA,MAAM,uBACJ,MACA,aACmB;CACnB,MAAM,YAA0C,CAAC;CACjD,IAAI,KAAK,SAAS,UAChB,KAAK,MAAM,UAAU,UAAU,UAAU,OAAO,SAAS;CAE3D,OAAO;EAAE;EAAW,cAAc,KAAK;CAAa;AACtD;AAEA,MAAM,cAAc,OAClB,MACA,YACkB;CAClB,IAAI,SAAS,KAAA,GAAW;EACtB,QAAQ,OAAO,MAAM,OAAO;EAC5B;CACF;CACA,MAAM,UAAU,MAAM,SAAS,MAAM;AACvC;AAMA,MAAM,qBAAqB,QAAqC;CAC9D,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,GAAG;CACzB,QAAQ;EACN,MAAM,IAAI,WAAW,iCAAiC;CACxD;CACA,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,EAAE,aAAa,SAClE,MAAM,IAAI,WACR,2DACF;CAEF,MAAM,EAAE,YAAY;CACpB,IACE,OAAO,YAAY,YACnB,YAAY,QACZ,MAAM,QAAQ,OAAO,GAErB,MAAM,IAAI,WAAW,6CAA2C;CAElE,MAAM,sBAAM,IAAI,IAAoB;CACpC,KAAK,MAAM,CAAC,aAAa,UAAU,OAAO,QAAQ,OAAO,GAAG;EAC1D,IAAI,OAAO,OAAO,aAAa,UAC7B,MAAM,IAAI,WACR,wBAAwB,YAAY,uBACtC;EAEF,IAAI,IAAI,aAAa,MAAM,QAAQ;CACrC;CACA,OAAO;AACT;;;;;;AAOA,MAAa,wBACX,MACA,QAEA,KAAK,cAAc,KAAA,KACnB,KAAK,cAAc,KAAA,KACnB,CAAC,KAAK,SACN,KAAK,MAAM,SAAS,KACpB,IAAI,cACJ,IAAI;AAEN,MAAM,qBAAqB,YAA2C;CACpE,MAAM,KAAK,gBAAgB;EACzB,OAAO,QAAQ;EACf,QAAQ,QAAQ;CAClB,CAAC;CACD,IAAI;EAIF,MAAM,WAAU,MAHK,GAAG,SACtB,4DACF,GACuB,KAAK;EAC5B,OAAO,YAAY,KAAK,KAAA,IAAY,eAAe,OAAO;CAC5D,UAAU;EACR,GAAG,MAAM;CACX;AACF;AAEA,MAAM,iBAAiB,OACrB,MACA,QACkB;CAClB,IAAI,KAAK,YAAY,KAAA,GACnB,MAAM,IAAI,WAAW,6CAA6C;CAEpE,MAAM,UAAU,KAAK;CACrB,IAAI,YAAY,KAAA,GAAW,MAAM,IAAI,WAAW,4BAA4B;CAC5E,MAAM,eAAe,kBAAkB,MAAM,SAAS,SAAS,MAAM,CAAC;CAEtE,MAAM,SAAS,MAAM,WAAW,KAAK,KAAK;CAC1C,IAAI,OAAO,SAAS,GAClB,MAAM,IAAI,WAAW,sCAAsC;CAE7D,MAAM,QAAQ,OAAO;CACrB,IAAI,CAAC,OAAO,MAAM,IAAI,WAAW,yBAAyB;CAC1D,IAAI,KAAK,WAAW,KAAA,GAClB,kBAAkB,MAAM,SAAS,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,CACzD;EAAE,MAAM,KAAK;EAAQ,MAAM;CAAW,CACxC,CAAC;CAEH,MAAM,YAAY,KAAK,QAAQ,IAAI,YAAY,MAAM,MAAM,YAAY,CAAC;AAC1E;AAEA,MAAM,iBACJ,OACA,MACA,UACuB;CACvB,IAAI,KAAK,WAAW,KAAA,GAAW,OAAO,KAAA;CACtC,IAAI,CAAC,OAAO,OAAO,KAAK;CACxB,IAAI,MAAM,SAAS,MACjB,MAAM,IAAI,WAAW,8CAA8C;CACrE,OAAO,KAAK,KAAK,QAAQ,SAAS,MAAM,IAAI,CAAC;AAC/C;;;;;;AAOA,MAAM,qBACJ,YACA,iBACS;CACT,MAAM,SAAS,IAAI,IAAI,WAAW,IAAI,aAAa,CAAC;CACpD,MAAM,uBAAO,IAAI,IAAoB;CACrC,KAAK,MAAM,UAAU,cAAc;EACjC,MAAM,YAAY,cAAc,OAAO,IAAI;EAC3C,IAAI,OAAO,IAAI,SAAS,GACtB,MAAM,IAAI,WACR,qCAAqC,OAAO,KAAK,KAAK,OAAO,KAAK,EACpE;EAEF,MAAM,QAAQ,KAAK,IAAI,SAAS;EAChC,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,WACR,GAAG,OAAO,KAAK,IAAI,OAAO,KAAK,kBAAkB,OACnD;EAEF,KAAK,IAAI,WAAW,GAAG,OAAO,KAAK,IAAI,OAAO,KAAK,EAAE;CACvD;AACF;AAEA,MAAM,aAAa,aAA+B;CAChD,MAAM,yBAAS,IAAI,IAAoB;CACvC,KAAK,MAAM,UAAU,UACnB,OAAO,IAAI,OAAO,QAAQ,OAAO,IAAI,OAAO,KAAK,KAAK,KAAK,CAAC;CAE9D,MAAM,QAAQ,CAAC,GAAG,OAAO,QAAQ,CAAC,EAC/B,UAAU,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,EAC9B,KAAK,CAAC,OAAO,WAAW,GAAG,MAAM,IAAI,OAAO;CAC/C,OAAO,MAAM,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI;AAC/C;AAEA,MAAM,eAAe,OACnB,MACA,EAAE,KAAK,uBACW;CAClB,MAAM,QAAQ,KAAK,MAAM,SAAS;CAClC,IAAI,SAAS,KAAK,WAAW,KAAA,GAC3B,MAAM,IAAI,WAAW,mDAAmD;CAE1E,IAAI,SAAS,KAAK,YAAY,KAAA,GAC5B,MAAM,IAAI,WAAW,sCAAsC;CAE7D,IAAI,SAAS,KAAK,MAChB,MAAM,IAAI,WAAW,uCAAuC;CAE9D,IAAI,KAAK,YAAY,KAAA,KAAa,KAAK,SAAS,WAC9C,MAAM,IAAI,WAAW,mCAAiC;CAGxD,MAAM,SAAS,qBAAqB,MAAM;EACxC,YAAY,QAAQ,MAAM,UAAU;EACpC,aAAa,QAAQ,OAAO,UAAU;CACxC,CAAC,IACG;EAAE,GAAG;EAAM,WAAW,MAAM,mBAAmB;CAAE,IACjD;CAEJ,MAAM,SAAS,MAAM,WAAW,OAAO,KAAK;CAM5C,MAAM,cAAc,OAAO,KAAK,UAAU,cAAc,OAAO,MAAM,KAAK,CAAC;CAC3E,MAAM,eAAiD,CAAC;CACxD,KAAK,MAAM,QAAQ,aACjB,IAAI,SAAS,KAAA,GAAW,aAAa,KAAK;EAAE;EAAM,MAAM;CAAW,CAAC;CAEtE,IAAI,KAAK,YAAY,KAAA,GACnB,aAAa,KAAK;EAAE,MAAM,KAAK;EAAS,MAAM;CAAQ,CAAC;CAEzD,kBACE,OAAO,SAAS,UAAW,MAAM,SAAS,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAE,GACnE,YACF;CAEA,MAAM,SAAS,MAAM,oBAAoB,QAAQ,gBAAgB;CAOjE,MAAM,UAAU,IAAI,sBAAsB;CAE1C,IAAI,SAAS,KAAK,WAAW,KAAA,GAC3B,MAAM,MAAM,KAAK,QAAQ,EAAE,WAAW,KAAK,CAAC;CAG9C,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,GAAG;EAC7C,MAAM,aAAa,YAAY;EAE/B,MAAM,WAAW,MAAM,IAAI,YAAY;GACrC,UAAU,MAAM;GAChB;GACA,kBAAkB,CAAC;GACnB;EACF,CAAC;EACD,MAAM,SAAS,IAAI,WACjB,MAAM,MACN,UACA,oBAAoB,MAAM,QAAQ,GAClC,OACF;EAEA,IAAI,KAAK,MAAM;GACb,MAAM,UAAU;IACd,aAAa,OAAO;IACpB;IACA,cAAc,OAAO;GACvB;GACA,MAAM,YAAY,YAAY,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,GAAG;EACvE,OACE,MAAM,YAAY,YAAY,OAAO,YAAY;EAGnD,IAAI,KAAK,YAAY,KAAA,GACnB,MAAM,UACJ,KAAK,SACL,IAAI,mBAAmB,OAAO,cAAc,OAAO,WAAW,GAC9D,MACF;EAGF,IAAI,CAAC,KAAK,OAAO;GACf,MAAM,SAAS,MAAM,QAAQ;GAC7B,QAAQ,OAAO,MAAM,cAAc,OAAO,IAAI,UAAU,QAAQ,EAAE,GAAG;EACvE;CACF;AACF;AAEA,MAAM,WAAW,OAAO,WAAqC;CAC3D,MAAM,OAAO,aAAa,QAAQ,KAAK,MAAM,CAAC,CAAC;CAC/C,IAAI,KAAK,MAAM;EACb,QAAQ,OAAO,MAAM,IAAI;EACzB;CACF;CACA,IAAI,KAAK,SAAS;EAChB,QAAQ,OAAO,MAAM,GAAG,WAAW,EAAE,GAAG;EACxC;CACF;CACA,IAAI,KAAK,uBAAuB,KAAA,GAAW;EACzC,MAAM,eAAe,MAAM,OAAO,GAAG;EACrC;CACF;CACA,MAAM,aAAa,MAAM,MAAM;AACjC;;;;;AAMA,MAAa,SAAS,OAAO,WAAqC;CAChE,IAAI;EACF,MAAM,SAAS,MAAM;CACvB,SAAS,KAAK;EACZ,IAAI,eAAe,YAAY;GAC7B,QAAQ,OAAO,MAAM,cAAc,IAAI,QAAQ,GAAG;GAClD,QAAQ,OAAO,MAAM,qCAAqC;GAC1D,QAAQ,WAAW;EACrB,OAAO;GACL,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC/D,QAAQ,OAAO,MAAM,cAAc,QAAQ,GAAG;GAC9C,QAAQ,WAAW;EACrB;CACF;AACF;;;ACnbA,MAAM,OAAO;CAAE,KAAK;CAAW,kBAAkB;AAAoB,CAAC"}

package/package.json

@@ -1,13 +1,39 @@
 {
   "name": "@stll/anonymize-cli",
-  "version": "0.0.1-placeholder.0",
-  "description": "Placeholder to bootstrap npm trusted publishing. The real CLI ships with the next @stll/anonymize release.",
-  "license": "MIT",
+  "version": "1.4.9",
+  "description": "Command-line PII detection and anonymization powered by @stll/anonymize",
+  "type": "module",
+  "bin": {
+    "anonymize": "./dist/cli.mjs"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/stella/anonymize.git"
   },
-  "publishConfig": {
-    "access": "public"
+  "license": "MIT",
+  "scripts": {
+    "build": "tsdown",
+    "compile": "bun scripts/copy-wasm-payloads.ts && bun scripts/embed-data.ts && bun build --compile '--asset-naming=[name].[ext]' src/compile.ts --outfile dist/anonymize",
+    "prepublishOnly": "bun run build",
+    "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.test.json",
+    "test": "bun test --timeout 60000",
+    "format": "oxfmt ."
+  },
+  "dependencies": {
+    "@stll/anonymize": "^1.4.9",
+    "@stll/anonymize-data": "^0.0.6"
+  },
+  "devDependencies": {
+    "@stll/anonymize-wasm": "workspace:*",
+    "@types/node": "^25.9.2",
+    "bun-types": "^1.3.14",
+    "tsdown": "^0.22.0",
+    "typescript": "^6.0.3"
   }
 }