@stll/anonymize-wasm 2.5.0 → 2.6.1

package/dist/wasm.mjs

@@ -1,6 +1,73 @@
 import { DEFAULT_ENTITY_LABELS, DETECTION_SOURCES, DETECTOR_PRIORITY, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, OPERATOR_TYPES } from "./constants.mjs";
 import { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES } from "./capabilities.mjs";
 //#region src/native.ts
+/** Exhaustive runtime-member contract shared by loaders and parity gates. */
+const NATIVE_BINDING_PARITY_MEMBERS = {
+	root: [
+		"convertExternalDetectionBatch",
+		"externalDetectionLimitsJson",
+		"extractDocxTextJson",
+		"inspectPdfJson",
+		"rewritePdfRasterFromDetectionsJson",
+		"rewriteDocxTextNative",
+		"planDocxRestorationJson",
+		"normalizeForSearch",
+		"nativePackageVersion",
+		"prepareStaticSearchPackageBytes",
+		"prepareStaticSearchCompressedPackageBytes",
+		"assembleStaticSearchConfigJson",
+		"assembleStaticSearchPackageBytes",
+		"assembleStaticSearchCompressedPackageBytes"
+	],
+	factories: [
+		"fromConfigJsonBytes",
+		"fromPreparedPackageBytes",
+		"fromPreparedPackageBytesWithoutCache",
+		"fromTrustedPreparedPackageBytes",
+		"fromTrustedPreparedPackageBytesWithoutCache"
+	],
+	prepared: [
+		"prepareDiagnosticsJson",
+		"warmLazyRegex",
+		"warmLazyRegexDiagnosticsJson",
+		"createRedactionSession",
+		"createRedactionSessionWithLifecycle",
+		"restoreRedactionSession",
+		"restoreEncryptedRedactionSession",
+		"redactStaticEntities",
+		"redactStaticEntitiesJson",
+		"redactStaticEntitiesWithCallerDetectionsJson",
+		"redactStaticEntitiesWithCallerDetectionsDiagnosticsJson",
+		"redactStaticEntitiesResultStreamJson",
+		"redactStaticEntitiesDiagnosticsJson",
+		"redactStaticEntitiesDiagnosticsStreamJson",
+		"redactStaticEntitiesSummaryDiagnosticsJson"
+	],
+	session: [
+		"sessionId",
+		"mappingCount",
+		"restoreText",
+		"restoreTextAt",
+		"toPlaintextJson",
+		"toPlaintextJsonAt",
+		"toEncryptedArchive",
+		"toEncryptedArchiveAt",
+		"inspectJson",
+		"deleteJson",
+		"redactStaticEntitiesJson",
+		"redactStaticEntitiesJsonAt",
+		"planStaticEntitiesWithCallerDetections"
+	],
+	plan: ["resultJson", "commit"]
+};
+const isBindingPropertyBag = (value) => typeof value === "object" && value !== null || typeof value === "function";
+/** Validate the complete runtime-neutral root and factory binding shape. */
+const isNativeAnonymizeBinding = (candidate) => {
+	if (!isBindingPropertyBag(candidate)) return false;
+	if (!NATIVE_BINDING_PARITY_MEMBERS.root.every((name) => typeof candidate[name] === "function")) return false;
+	const preparedSearch = candidate["NativePreparedSearch"];
+	return isBindingPropertyBag(preparedSearch) && NATIVE_BINDING_PARITY_MEMBERS.factories.every((name) => typeof preparedSearch[name] === "function");
+};
 const CALLER_DETECTION_CONTRACT_VERSION = 2;
 const EXTERNAL_DETECTION_BATCH_VERSION = 1;
 const EXTERNAL_DETECTION_BATCH_MAX_BYTES = 16 * 1024 * 1024;
@@ -15,9 +82,7 @@ const EXTERNAL_DETECTION_OFFSET_UNITS = {
 	utf8Byte: "utf8-byte"
 };
 const convert_external_detection_batch$1 = ({ binding, document, batch }) => {
-	const convert = binding.convertExternalDetectionBatch;
-	if (convert === void 0) throw new Error("Native anonymize binding does not support external detection batches");
-	return convert(document, typeof batch === "string" ? batch : JSON.stringify(batch));
+	return binding.convertExternalDetectionBatch(document, typeof batch === "string" ? batch : JSON.stringify(batch));
 };
 const callerDetectionRequestJson = (detections) => JSON.stringify({
 	version: 2,
@@ -48,14 +113,8 @@ var PreparedNativeRedactionSession = class {
 		return this.mappingCount();
 	}
 	restoreText(fullText, observedAtEpochSeconds) {
-		if (observedAtEpochSeconds === void 0) {
-			const restore = this.#session.restoreText;
-			if (!restore) throw new Error("Native anonymize binding does not support session restoration");
-			return restore.call(this.#session, fullText);
-		}
-		const restore = this.#session.restoreTextAt;
-		if (!restore) throw new Error("Native anonymize binding does not support session restoration lifecycle controls");
-		return restore.call(this.#session, fullText, observedAtEpochSeconds);
+		if (observedAtEpochSeconds === void 0) return this.#session.restoreText(fullText);
+		return this.#session.restoreTextAt(fullText, observedAtEpochSeconds);
 	}
 	restore_text(fullText, observedAtEpochSeconds) {
 		return this.restoreText(fullText, observedAtEpochSeconds);
@@ -67,33 +126,25 @@ var PreparedNativeRedactionSession = class {
 		return this.toPlaintextJson();
 	}
 	toPlaintextJsonAt(observedAtEpochSeconds) {
-		const serialize = this.#session.toPlaintextJsonAt;
-		if (!serialize) throw new Error("Native anonymize binding does not support session lifecycle controls");
-		return serialize.call(this.#session, observedAtEpochSeconds);
+		return this.#session.toPlaintextJsonAt(observedAtEpochSeconds);
 	}
 	to_plaintext_json_at(observedAtEpochSeconds) {
 		return this.toPlaintextJsonAt(observedAtEpochSeconds);
 	}
 	toEncryptedArchive(key) {
-		const serialize = this.#session.toEncryptedArchive;
-		if (!serialize) throw new Error("Native anonymize binding does not support encrypted session archives");
-		return serialize.call(this.#session, key);
+		return this.#session.toEncryptedArchive(key);
 	}
 	to_encrypted_archive(key) {
 		return this.toEncryptedArchive(key);
 	}
 	toEncryptedArchiveAt(key, observedAtEpochSeconds) {
-		const serialize = this.#session.toEncryptedArchiveAt;
-		if (!serialize) throw new Error("Native anonymize binding does not support encrypted session archives");
-		return serialize.call(this.#session, key, observedAtEpochSeconds);
+		return this.#session.toEncryptedArchiveAt(key, observedAtEpochSeconds);
 	}
 	to_encrypted_archive_at(key, observedAtEpochSeconds) {
 		return this.toEncryptedArchiveAt(key, observedAtEpochSeconds);
 	}
 	inspect(observedAtEpochSeconds) {
-		const inspect = this.#session.inspectJson;
-		if (!inspect) throw new Error("Native anonymize binding does not support session lifecycle controls");
-		const metadata = JSON.parse(inspect.call(this.#session, observedAtEpochSeconds));
+		const metadata = JSON.parse(this.#session.inspectJson(observedAtEpochSeconds));
 		return {
 			sessionId: metadata.session_id,
 			createdAtEpochSeconds: metadata.created_at_epoch_seconds,
@@ -103,9 +154,7 @@ var PreparedNativeRedactionSession = class {
 		};
 	}
 	delete() {
-		const deleteSession = this.#session.deleteJson;
-		if (!deleteSession) throw new Error("Native anonymize binding does not support session lifecycle controls");
-		const summary = JSON.parse(deleteSession.call(this.#session));
+		const summary = JSON.parse(this.#session.deleteJson());
 		return {
 			sessionId: summary.session_id,
 			deletedMappingCount: summary.deleted_mapping_count
@@ -141,18 +190,14 @@ var PreparedNativeRedactionSession = class {
 		return this.redactStaticEntitiesAt(options);
 	}
 	redactTextJsonAt({ fullText, observedAtEpochSeconds, operators }) {
-		const redact = this.#session.redactStaticEntitiesJsonAt;
-		if (!redact) throw new Error("Native anonymize binding does not support session lifecycle controls");
-		return redact.call(this.#session, fullText, observedAtEpochSeconds, toBindingOperatorConfig(operators));
+		return this.#session.redactStaticEntitiesJsonAt(fullText, observedAtEpochSeconds, toBindingOperatorConfig(operators));
 	}
 	redact_text_json_at(options) {
 		return this.redactTextJsonAt(options);
 	}
 	planTextBatchWithCallerDetections({ inputs, operators, observedAtEpochSeconds }) {
-		const plan = this.#session.planStaticEntitiesWithCallerDetections;
-		if (!plan) throw new Error("Native anonymize binding does not support transactional caller-detection session plans");
 		const bindingOperators = toBindingOperatorConfig(operators);
-		return new PreparedNativeSessionRedactionPlan(plan.call(this.#session, {
+		return new PreparedNativeSessionRedactionPlan(this.#session.planStaticEntitiesWithCallerDetections({
 			inputs: inputs.map(({ detections, fullText }) => ({
 				fullText,
 				requestJson: callerDetectionRequestJson(detections)
@@ -184,56 +229,43 @@ var PreparedNativeAnonymizer = class {
 		this.#prepared = prepared;
 	}
 	prepareDiagnosticsJson() {
-		return this.#prepared.prepareDiagnosticsJson?.() ?? null;
+		return this.#prepared.prepareDiagnosticsJson();
 	}
 	prepare_diagnostics_json() {
 		return this.prepareDiagnosticsJson();
 	}
 	warmLazyRegex() {
-		if (this.#prepared.warmLazyRegex) {
-			this.#prepared.warmLazyRegex();
-			return;
-		}
-		this.#prepared.warm_lazy_regex?.();
+		this.#prepared.warmLazyRegex();
 	}
 	warm_lazy_regex() {
 		this.warmLazyRegex();
 	}
 	warmLazyRegexDiagnosticsJson() {
-		if (this.#prepared.warmLazyRegexDiagnosticsJson) return this.#prepared.warmLazyRegexDiagnosticsJson();
-		return this.#prepared.warm_lazy_regex_diagnostics_json?.() ?? null;
+		return this.#prepared.warmLazyRegexDiagnosticsJson();
 	}
 	warm_lazy_regex_diagnostics_json() {
 		return this.warmLazyRegexDiagnosticsJson();
 	}
 	createRedactionSession(sessionId) {
-		const create = this.#prepared.createRedactionSession;
-		if (!create) throw new Error("Native anonymize binding does not support redaction sessions");
-		return new PreparedNativeRedactionSession(create.call(this.#prepared, sessionId));
+		return new PreparedNativeRedactionSession(this.#prepared.createRedactionSession(sessionId));
 	}
 	create_redaction_session(sessionId) {
 		return this.createRedactionSession(sessionId);
 	}
 	createRedactionSessionWithLifecycle({ sessionId, createdAtEpochSeconds, expiresAtEpochSeconds }) {
-		const create = this.#prepared.createRedactionSessionWithLifecycle;
-		if (!create) throw new Error("Native anonymize binding does not support session lifecycle controls");
-		return new PreparedNativeRedactionSession(create.call(this.#prepared, sessionId, createdAtEpochSeconds, expiresAtEpochSeconds));
+		return new PreparedNativeRedactionSession(this.#prepared.createRedactionSessionWithLifecycle(sessionId, createdAtEpochSeconds, expiresAtEpochSeconds));
 	}
 	create_redaction_session_with_lifecycle(options) {
 		return this.createRedactionSessionWithLifecycle(options);
 	}
 	restoreRedactionSession(plaintextJson) {
-		const restore = this.#prepared.restoreRedactionSession;
-		if (!restore) throw new Error("Native anonymize binding does not support redaction sessions");
-		return new PreparedNativeRedactionSession(restore.call(this.#prepared, plaintextJson));
+		return new PreparedNativeRedactionSession(this.#prepared.restoreRedactionSession(plaintextJson));
 	}
 	restore_redaction_session(plaintextJson) {
 		return this.restoreRedactionSession(plaintextJson);
 	}
 	restoreEncryptedRedactionSession({ archive, key, expectedSessionId, observedAtEpochSeconds }) {
-		const restore = this.#prepared.restoreEncryptedRedactionSession;
-		if (!restore) throw new Error("Native anonymize binding does not support encrypted session archives");
-		return new PreparedNativeRedactionSession(restore.call(this.#prepared, {
+		return new PreparedNativeRedactionSession(this.#prepared.restoreEncryptedRedactionSession({
 			archive,
 			key,
 			expectedSessionId,
@@ -251,11 +283,9 @@ var PreparedNativeAnonymizer = class {
 	}
 	redact_text_json(fullText, operators) {
 		const bindingOperators = toBindingOperatorConfig(operators);
-		if (this.#prepared.redactStaticEntitiesJson) return this.#prepared.redactStaticEntitiesJson(fullText, bindingOperators);
-		return JSON.stringify(toBindingStaticRedactionResult(toNativeStaticRedactionResult(this.#prepared.redactStaticEntities(fullText, bindingOperators))));
+		return this.#prepared.redactStaticEntitiesJson(fullText, bindingOperators);
 	}
 	redactStaticEntitiesWithCallerDetections(fullText, options) {
-		if (!this.#prepared.redactStaticEntitiesWithCallerDetectionsJson) throw new Error("Native anonymize binding does not support caller detections");
 		const requestJson = callerDetectionRequestJson(options.detections);
 		const operators = toBindingOperatorConfig(options.operators);
 		const result = JSON.parse(this.#prepared.redactStaticEntitiesWithCallerDetectionsJson(fullText, {
@@ -268,11 +298,9 @@ var PreparedNativeAnonymizer = class {
 		return this.redactStaticEntitiesWithCallerDetections(fullText, options);
 	}
 	redactStaticEntitiesWithCallerDetectionsDiagnosticsJson(fullText, options) {
-		const redact = this.#prepared.redactStaticEntitiesWithCallerDetectionsDiagnosticsJson;
-		if (!redact) return null;
 		const requestJson = callerDetectionRequestJson(options.detections);
 		const operators = toBindingOperatorConfig(options.operators);
-		return redact.call(this.#prepared, fullText, {
+		return this.#prepared.redactStaticEntitiesWithCallerDetectionsDiagnosticsJson(fullText, {
 			requestJson,
 			...operators ? { operators } : {}
 		});
@@ -284,28 +312,24 @@ var PreparedNativeAnonymizer = class {
 		return this.redact_text_json(fullText, operators);
 	}
 	redactTextStreamJson(fullText, onEvent, operators) {
-		if (!this.#prepared.redactStaticEntitiesResultStreamJson) return null;
 		return this.#prepared.redactStaticEntitiesResultStreamJson(fullText, toBindingOperatorConfig(operators), onEvent);
 	}
 	redact_text_stream_json(fullText, onEvent, operators) {
 		return this.redactTextStreamJson(fullText, onEvent, operators);
 	}
 	redactStaticEntitiesDiagnosticsJson(fullText, operators) {
-		if (!this.#prepared.redactStaticEntitiesDiagnosticsJson) return null;
 		return this.#prepared.redactStaticEntitiesDiagnosticsJson(fullText, toBindingOperatorConfig(operators));
 	}
 	diagnostics_json(fullText, operators) {
 		return this.redactStaticEntitiesDiagnosticsJson(fullText, operators);
 	}
 	diagnosticsStreamJson(fullText, onBatch, operators) {
-		if (!this.#prepared.redactStaticEntitiesDiagnosticsStreamJson) return null;
 		return this.#prepared.redactStaticEntitiesDiagnosticsStreamJson(fullText, toBindingOperatorConfig(operators), onBatch);
 	}
 	diagnostics_stream_json(fullText, onBatch, operators) {
 		return this.diagnosticsStreamJson(fullText, onBatch, operators);
 	}
 	redactStaticEntitiesSummaryDiagnosticsJson(fullText, operators) {
-		if (!this.#prepared.redactStaticEntitiesSummaryDiagnosticsJson) return null;
 		return this.#prepared.redactStaticEntitiesSummaryDiagnosticsJson(fullText, toBindingOperatorConfig(operators));
 	}
 	summary_diagnostics_json(fullText, operators) {
@@ -468,21 +492,6 @@ const fromCanonicalStaticRedactionResult = (result) => ({
 		entityCount: result.redaction.entity_count
 	}
 });
-const toBindingStaticRedactionResult = (result) => ({
-	resolved_entities: result.resolvedEntities.map(toBindingPipelineEntity),
-	redaction: {
-		redacted_text: result.redaction.redactedText,
-		redaction_map: [...result.redaction.redactionMap.entries()].map(([placeholder, original]) => ({
-			placeholder,
-			original
-		})),
-		operator_map: [...result.redaction.operatorMap.entries()].map(([placeholder, operator]) => ({
-			placeholder,
-			operator
-		})),
-		entity_count: result.redaction.entityCount
-	}
-});
 const toNativePipelineEntity = (entity) => ({
 	start: entity.start,
 	end: entity.end,
@@ -494,12 +503,6 @@ const toNativePipelineEntity = (entity) => ({
 	...entity.providerId ? { providerId: entity.providerId } : {},
 	...entity.detectionId ? { detectionId: entity.detectionId } : {}
 });
-const toBindingPipelineEntity = ({ sourceDetail, providerId, detectionId, ...entity }) => ({
-	...entity,
-	source_detail: sourceDetail ?? null,
-	provider_id: providerId ?? null,
-	detection_id: detectionId ?? null
-});
 const toNativeRedactionResult = (result) => ({
 	redactedText: result.redactedText,
 	redactionMap: toRedactionMap(result.redactionMap),
@@ -517,6 +520,150 @@ const toOperatorMap = (entries) => {
 	return map;
 };
 //#endregion
+//#region src/wasm-binding.ts
+const RAW_WASM_MODULE_FUNCTION_MEMBERS = [
+	"default",
+	"normalizeForSearch",
+	"nativePackageVersion",
+	"externalDetectionLimitsJson",
+	"convertExternalDetectionBatchJson",
+	"extractDocxTextJson",
+	"rewriteDocxTextNative",
+	"planDocxRestorationJson",
+	"inspectPdfJson",
+	"rewritePdfRasterFromDetectionsJson",
+	"prepareStaticSearchPackageBytes",
+	"prepareStaticSearchCompressedPackageBytes",
+	"assembleStaticSearchConfigJson",
+	"assembleStaticSearchPackageBytes",
+	"assembleStaticSearchCompressedPackageBytes"
+];
+const RAW_WASM_PREPARED_SEARCH_FACTORY_MEMBERS = [
+	"fromConfigJsonBytes",
+	"fromPreparedPackageBytes",
+	"fromTrustedPreparedPackageBytes"
+];
+const isPropertyBag = (value) => typeof value === "object" && value !== null || typeof value === "function";
+/** Validate every raw export consumed by the runtime adapter. */
+const isRawWasmModule = (value) => {
+	if (!isPropertyBag(value) || !RAW_WASM_MODULE_FUNCTION_MEMBERS.every((name) => typeof value[name] === "function")) return false;
+	const preparedSearch = value["WasmPreparedSearch"];
+	return isPropertyBag(preparedSearch) && typeof preparedSearch === "function" && isPropertyBag(preparedSearch["prototype"]) && RAW_WASM_PREPARED_SEARCH_FACTORY_MEMBERS.every((name) => typeof preparedSearch[name] === "function");
+};
+const createWasmBinding = (raw) => ({
+	convertExternalDetectionBatch: (document, batchJson) => {
+		return JSON.parse(raw.convertExternalDetectionBatchJson(document, batchJson)).map(({ start, end, label, score, provider_id, detection_id }) => ({
+			start,
+			end,
+			label,
+			score,
+			providerId: provider_id,
+			detectionId: detection_id
+		}));
+	},
+	externalDetectionLimitsJson: raw.externalDetectionLimitsJson,
+	extractDocxTextJson: raw.extractDocxTextJson,
+	inspectPdfJson: raw.inspectPdfJson,
+	rewritePdfRasterFromDetectionsJson: (document, requestJson, pagePixels) => {
+		assertPdfPixelPages(pagePixels);
+		const result = raw.rewritePdfRasterFromDetectionsJson(document, requestJson, [...pagePixels]);
+		return {
+			document: result.document,
+			certificateJson: result.certificateJson
+		};
+	},
+	rewriteDocxTextNative: (document, rewritesJson) => {
+		const result = raw.rewriteDocxTextNative(document, rewritesJson);
+		return {
+			document: result.document,
+			rewrittenBlockCount: result.rewrittenBlockCount,
+			appliedReplacementCount: result.appliedReplacementCount
+		};
+	},
+	planDocxRestorationJson: raw.planDocxRestorationJson,
+	normalizeForSearch: raw.normalizeForSearch,
+	nativePackageVersion: raw.nativePackageVersion,
+	NativePreparedSearch: {
+		fromConfigJsonBytes: (bytes) => wrapPrepared(raw.WasmPreparedSearch.fromConfigJsonBytes(bytes)),
+		fromPreparedPackageBytes: (bytes) => wrapPrepared(raw.WasmPreparedSearch.fromPreparedPackageBytes(bytes)),
+		fromPreparedPackageBytesWithoutCache: (bytes) => wrapPrepared(raw.WasmPreparedSearch.fromPreparedPackageBytes(bytes)),
+		fromTrustedPreparedPackageBytes: (bytes) => wrapPrepared(raw.WasmPreparedSearch.fromTrustedPreparedPackageBytes(bytes)),
+		fromTrustedPreparedPackageBytesWithoutCache: (bytes) => wrapPrepared(raw.WasmPreparedSearch.fromTrustedPreparedPackageBytes(bytes))
+	},
+	prepareStaticSearchPackageBytes: raw.prepareStaticSearchPackageBytes,
+	prepareStaticSearchCompressedPackageBytes: raw.prepareStaticSearchCompressedPackageBytes,
+	assembleStaticSearchConfigJson: raw.assembleStaticSearchConfigJson,
+	assembleStaticSearchPackageBytes: raw.assembleStaticSearchPackageBytes,
+	assembleStaticSearchCompressedPackageBytes: raw.assembleStaticSearchCompressedPackageBytes
+});
+const wrapPrepared = (raw) => ({
+	prepareDiagnosticsJson: raw.prepareDiagnosticsJson.bind(raw),
+	warmLazyRegex: raw.warmLazyRegex.bind(raw),
+	warmLazyRegexDiagnosticsJson: raw.warmLazyRegexDiagnosticsJson.bind(raw),
+	createRedactionSession: (sessionId) => wrapSession(raw.createRedactionSession(sessionId)),
+	createRedactionSessionWithLifecycle: (sessionId, createdAtEpochSeconds, expiresAtEpochSeconds) => wrapSession(raw.createRedactionSessionWithLifecycle(sessionId, createdAtEpochSeconds, expiresAtEpochSeconds)),
+	restoreRedactionSession: (plaintextJson) => wrapSession(raw.restoreRedactionSession(plaintextJson)),
+	restoreEncryptedRedactionSession: ({ archive, key, expectedSessionId, observedAtEpochSeconds }) => wrapSession(raw.restoreEncryptedRedactionSession(archive, key, expectedSessionId, observedAtEpochSeconds)),
+	redactStaticEntities: (fullText, operators) => canonicalResult(JSON.parse(raw.redactStaticEntitiesJson(fullText, json(operators)))),
+	redactStaticEntitiesJson: (fullText, operators) => raw.redactStaticEntitiesJson(fullText, json(operators)),
+	redactStaticEntitiesWithCallerDetectionsJson: (fullText, { requestJson, operators }) => raw.redactStaticEntitiesWithCallerDetectionsJson(fullText, requestJson, json(operators)),
+	redactStaticEntitiesWithCallerDetectionsDiagnosticsJson: (fullText, { requestJson, operators }) => raw.redactStaticEntitiesWithCallerDetectionsDiagnosticsJson(fullText, requestJson, json(operators)),
+	redactStaticEntitiesResultStreamJson: (fullText, operators, onEvent) => {
+		return raw.redactStaticEntitiesResultStreamJson(fullText, json(operators), onEvent);
+	},
+	redactStaticEntitiesDiagnosticsJson: (fullText, operators) => raw.redactStaticEntitiesDiagnosticsJson(fullText, json(operators)),
+	redactStaticEntitiesDiagnosticsStreamJson: (fullText, operators, onBatch) => raw.redactStaticEntitiesDiagnosticsStreamJson(fullText, json(operators), onBatch),
+	redactStaticEntitiesSummaryDiagnosticsJson: (fullText, operators) => raw.redactStaticEntitiesSummaryDiagnosticsJson(fullText, json(operators))
+});
+const wrapSession = (raw) => ({
+	sessionId: raw.sessionId.bind(raw),
+	mappingCount: raw.mappingCount.bind(raw),
+	restoreText: raw.restoreText.bind(raw),
+	restoreTextAt: raw.restoreTextAt.bind(raw),
+	toPlaintextJson: raw.toPlaintextJson.bind(raw),
+	toPlaintextJsonAt: raw.toPlaintextJsonAt.bind(raw),
+	toEncryptedArchive: raw.toEncryptedArchive.bind(raw),
+	toEncryptedArchiveAt: raw.toEncryptedArchiveAt.bind(raw),
+	inspectJson: raw.inspectJson.bind(raw),
+	deleteJson: raw.deleteJson.bind(raw),
+	redactStaticEntitiesJson: (fullText, operators) => raw.redactStaticEntitiesJson(fullText, json(operators)),
+	redactStaticEntitiesJsonAt: (fullText, observedAtEpochSeconds, operators) => raw.redactStaticEntitiesJsonAt(fullText, observedAtEpochSeconds, json(operators)),
+	planStaticEntitiesWithCallerDetections: ({ inputs, operators, observedAtEpochSeconds }) => raw.planStaticEntitiesWithCallerDetections(JSON.stringify(inputs.map(({ fullText, requestJson }) => ({
+		full_text: fullText,
+		request_json: requestJson
+	}))), json(operators), observedAtEpochSeconds)
+});
+const json = (value) => value === void 0 ? void 0 : JSON.stringify(value);
+const canonicalResult = (result) => ({
+	resolvedEntities: result.resolved_entities.map(({ source_detail, provider_id, detection_id, ...entity }) => ({
+		...entity,
+		...source_detail === void 0 ? {} : { sourceDetail: source_detail },
+		...provider_id === void 0 ? {} : { providerId: provider_id },
+		...detection_id === void 0 ? {} : { detectionId: detection_id }
+	})),
+	redaction: {
+		redactedText: result.redaction.redacted_text,
+		redactionMap: result.redaction.redaction_map,
+		operatorMap: result.redaction.operator_map.map(({ placeholder, operator }) => ({
+			placeholder,
+			operator: parseOperatorType(operator)
+		})),
+		entityCount: result.redaction.entity_count
+	}
+});
+const parseOperatorType = (operator) => {
+	switch (operator) {
+		case "keep":
+		case "mask":
+		case "redact":
+		case "replace": return operator;
+		default: throw new TypeError(`Unknown redaction operator: ${operator}`);
+	}
+};
+const assertPdfPixelPages = (pagePixels) => {
+	for (const [index, page] of pagePixels.entries()) if (!(page instanceof Uint8Array)) throw new TypeError(`PDF pagePixels[${index}] must be a Uint8Array`);
+};
+//#endregion
 //#region src/context.ts
 /** Create a fresh, empty pipeline context. */
 const createPipelineContext = () => ({
@@ -888,8 +1035,8 @@ const nativePackageCacheKey = ({ binding, config, gazetteerEntries, compressed }
 ].join(":");
 //#endregion
 //#region src/wasm.ts
-const NODE_GLUE_MODULE = "index.wasi.cjs";
-const BROWSER_GLUE_MODULE = "index.wasi-browser.js";
+const GLUE_MODULE = "index.js";
+const WASM_MODULE = "index_bg.wasm";
 const NODE_FS_MODULE = "node:fs/promises";
 const NATIVE_ASSET_DIR = "native";
 const DEFAULT_PACKAGE_FILE = "native-pipeline.stlanonpkg";
@@ -905,12 +1052,14 @@ const getBinding = () => {
 	return bindingPromise;
 };
 const loadWasmBinding = async () => {
-	const glueModule = isNodeRuntime() ? NODE_GLUE_MODULE : BROWSER_GLUE_MODULE;
 	const loaded = await import(
 		/* @vite-ignore */
-		assetUrl(glueModule).href
+		assetUrl(GLUE_MODULE).href
 );
-	return toNativeAnonymizeBinding(loaded);
+	if (!isRawWasmModule(loaded)) throw new Error("wasm module does not expose the expected binding surface");
+	const moduleInput = isNodeRuntime() ? await readFileUrlBytes(assetUrl(WASM_MODULE).href) : assetUrl(WASM_MODULE);
+	await loaded.default({ module_or_path: moduleInput });
+	return createWasmBinding(loaded);
 };
 const isNodeRuntime = () => {
 	const globals = globalThis;
@@ -1078,11 +1227,7 @@ const summary_diagnostics_json = async (config, fullText, operators, options) =>
 });
 /** Inspect PDF bytes and optional renderer observations through the same
 * fail-closed core used by Node and Python. This does not redact the PDF. */
-const inspect_pdf_json = async (document, observationsJson, options) => {
-	const inspect = (await resolveBinding(options)).inspectPdfJson;
-	if (inspect === void 0) throw new Error("wasm binding is stale: inspectPdfJson is missing");
-	return inspect(document, observationsJson);
-};
+const inspect_pdf_json = async (document, observationsJson, options) => (await resolveBinding(options)).inspectPdfJson(document, observationsJson);
 const toNativeAnonymizeBinding = (loaded) => {
 	const candidate = pickBindingCandidate(loaded);
 	if (!isNativeAnonymizeBinding(candidate)) throw new Error("wasm binding module does not expose the native anonymize surface");
@@ -1092,18 +1237,6 @@ const pickBindingCandidate = (loaded) => {
 	if (isRecord(loaded) && isNativeAnonymizeBinding(loaded["default"])) return loaded["default"];
 	return loaded;
 };
-const isNativeAnonymizeBinding = (value) => {
-	if (!isRecord(value)) return false;
-	if (typeof value["nativePackageVersion"] !== "function") return false;
-	if (typeof value["normalizeForSearch"] !== "function") return false;
-	if (typeof value["prepareStaticSearchPackageBytes"] !== "function") return false;
-	if (typeof value["inspectPdfJson"] !== "function") return false;
-	if (typeof value["prepareStaticSearchCompressedPackageBytes"] !== "function") return false;
-	const preparedSearch = value["NativePreparedSearch"];
-	if (!isRecord(preparedSearch)) return false;
-	if (typeof preparedSearch["fromConfigJsonBytes"] !== "function") return false;
-	return typeof preparedSearch["fromPreparedPackageBytes"] === "function";
-};
 const isRecord = (value) => typeof value === "object" && value !== null || typeof value === "function";
 const normalizeLanguage = (language) => {
 	const normalized = language.trim().toLowerCase();
@@ -1111,6 +1244,6 @@ const normalizeLanguage = (language) => {
 	return normalized;
 };
 //#endregion
-export { CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, DEFAULT_ENTITY_LABELS, DETECTION_SOURCES, DETECTOR_PRIORITY, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, EXTERNAL_DETECTION_BATCH_MAX_BYTES, EXTERNAL_DETECTION_BATCH_VERSION, EXTERNAL_DETECTION_DOCUMENT_MAX_BYTES, EXTERNAL_DETECTION_MAX_DETECTIONS, EXTERNAL_DETECTION_MAX_LABEL_MAPPINGS, EXTERNAL_DETECTION_MAX_METADATA_BYTES, EXTERNAL_DETECTION_OFFSET_UNITS, EXTERNAL_DETECTION_PROVIDER_ID_MAX_BYTES, OPERATOR_TYPES, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, assertNativeBindingVersion, assertNativePipelineSupported, convert_external_detection_batch, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromPackage, createPipelineContext, deanonymise, defaultPackageUrl, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getBinding, getDefaultPipeline, getNativeBindingVersion, getNativePipelineCompatibility, inspect_pdf_json, loadDefaultPipeline, loadPipeline, load_prepared_package, native_package_version, normalize_for_search, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, redactDefaultText, redactDefaultTextJson, redact_text, redact_text_json, redact_text_stream_json, summary_diagnostics_json };
+export { CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, DEFAULT_ENTITY_LABELS, DETECTION_SOURCES, DETECTOR_PRIORITY, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, EXTERNAL_DETECTION_BATCH_MAX_BYTES, EXTERNAL_DETECTION_BATCH_VERSION, EXTERNAL_DETECTION_DOCUMENT_MAX_BYTES, EXTERNAL_DETECTION_MAX_DETECTIONS, EXTERNAL_DETECTION_MAX_LABEL_MAPPINGS, EXTERNAL_DETECTION_MAX_METADATA_BYTES, EXTERNAL_DETECTION_OFFSET_UNITS, EXTERNAL_DETECTION_PROVIDER_ID_MAX_BYTES, NATIVE_BINDING_PARITY_MEMBERS, OPERATOR_TYPES, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, assertNativeBindingVersion, assertNativePipelineSupported, convert_external_detection_batch, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromPackage, createPipelineContext, deanonymise, defaultPackageUrl, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getBinding, getDefaultPipeline, getNativeBindingVersion, getNativePipelineCompatibility, inspect_pdf_json, isNativeAnonymizeBinding, loadDefaultPipeline, loadPipeline, load_prepared_package, native_package_version, normalize_for_search, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, redactDefaultText, redactDefaultTextJson, redact_text, redact_text_json, redact_text_stream_json, summary_diagnostics_json };
 
 //# sourceMappingURL=wasm.mjs.map