@stll/anonymize 2.1.0 → 2.3.0

package/README.md

@@ -298,16 +298,13 @@ export default {
 - Native architecture and extension guidance:
   [`ARCHITECTURE.md`](ARCHITECTURE.md).
 - `labels: []` disables deterministic label filtering.
-- `enableNer` is a compatibility field for the removed TypeScript pipeline. The
-  native pipeline rejects `true`; model-produced spans will use a separate
-  caller-detection API.
+- Model-produced (NER) spans are not part of `PipelineConfig`; supply
+  deterministic custom rules today and use the caller-detection API for
+  model-produced spans.
 - `enableNameCorpus` also controls whether first names, surnames, and titles are injected into deny-list matching when `enableDenyList` is enabled.
 - The optional `@stll/anonymize-data` package carries the published dictionary and trigger data used when building prepared packages.
 - `customDenyList` and `customRegexes` are part of the prepared package input and should be regenerated when they change.
-- The old TypeScript pipeline is kept only as temporary internal migration/test scaffolding under `src/legacy.ts`; it is not the product runtime.
 
 ## Built on
 
-- `@stll/text-search`
-- `@stll/stdnum`
 - `@stll/anonymize-data`

package/dist/capabilities.d.mts

@@ -1,11 +1,79 @@
 import { o as ENTITY_CAPABILITIES } from "./constants2.mjs";
 //#region src/capabilities.d.ts
-declare const CAPABILITY_MANIFEST_SCHEMA_VERSION: 1;
+declare const CAPABILITY_MANIFEST_SCHEMA_VERSION: 2;
 declare const CAPABILITY_RUNTIMES: readonly ["node", "python", "wasm"];
 type CapabilityRuntime = (typeof CAPABILITY_RUNTIMES)[number];
+declare const CAPABILITY_PARITY_PROFILES: {
+  readonly core: readonly ["node", "python", "wasm"];
+  readonly local: readonly ["node", "python"];
+  readonly document: readonly ["node", "python"];
+};
+type CapabilityParityProfile = keyof typeof CAPABILITY_PARITY_PROFILES;
+declare const CAPABILITY_SURFACES: readonly [{
+  readonly id: "package.prepare";
+  readonly profile: "core";
+}, {
+  readonly id: "package.load";
+  readonly profile: "core";
+}, {
+  readonly id: "package.load-file";
+  readonly profile: "local";
+}, {
+  readonly id: "text.normalize";
+  readonly profile: "core";
+}, {
+  readonly id: "text.redact";
+  readonly profile: "core";
+}, {
+  readonly id: "text.redact-stream";
+  readonly profile: "core";
+}, {
+  readonly id: "text.diagnostics";
+  readonly profile: "core";
+}, {
+  readonly id: "text.summary-diagnostics";
+  readonly profile: "core";
+}, {
+  readonly id: "text.caller-detections";
+  readonly profile: "core";
+}, {
+  readonly id: "text.operators";
+  readonly profile: "core";
+}, {
+  readonly id: "package.default";
+  readonly profile: "core";
+}, {
+  readonly id: "session.cross-document";
+  readonly profile: "core";
+}, {
+  readonly id: "session.lifecycle";
+  readonly profile: "core";
+}, {
+  readonly id: "session.plaintext-transfer";
+  readonly profile: "core";
+}, {
+  readonly id: "session.encrypted-archive";
+  readonly profile: "core";
+}, {
+  readonly id: "document.docx.extract";
+  readonly profile: "document";
+}, {
+  readonly id: "document.docx.rewrite";
+  readonly profile: "document";
+}, {
+  readonly id: "document.docx.anonymize";
+  readonly profile: "document";
+}, {
+  readonly id: "document.docx.restore";
+  readonly profile: "document";
+}];
+type CapabilitySurface = (typeof CAPABILITY_SURFACES)[number];
+type CapabilitySurfaceId = CapabilitySurface["id"];
 type CapabilityManifest = {
   schemaVersion: typeof CAPABILITY_MANIFEST_SCHEMA_VERSION;
   runtimes: readonly CapabilityRuntime[];
+  parityProfiles: typeof CAPABILITY_PARITY_PROFILES;
+  surfaces: typeof CAPABILITY_SURFACES;
   entities: typeof ENTITY_CAPABILITIES;
 };
 /**
@@ -14,8 +82,71 @@ type CapabilityManifest = {
  * activation, provenance sources, and runtime parity only.
  */
 declare const CAPABILITY_MANIFEST: {
-  readonly schemaVersion: 1;
+  readonly schemaVersion: 2;
   readonly runtimes: readonly ["node", "python", "wasm"];
+  readonly parityProfiles: {
+    readonly core: readonly ["node", "python", "wasm"];
+    readonly local: readonly ["node", "python"];
+    readonly document: readonly ["node", "python"];
+  };
+  readonly surfaces: readonly [{
+    readonly id: "package.prepare";
+    readonly profile: "core";
+  }, {
+    readonly id: "package.load";
+    readonly profile: "core";
+  }, {
+    readonly id: "package.load-file";
+    readonly profile: "local";
+  }, {
+    readonly id: "text.normalize";
+    readonly profile: "core";
+  }, {
+    readonly id: "text.redact";
+    readonly profile: "core";
+  }, {
+    readonly id: "text.redact-stream";
+    readonly profile: "core";
+  }, {
+    readonly id: "text.diagnostics";
+    readonly profile: "core";
+  }, {
+    readonly id: "text.summary-diagnostics";
+    readonly profile: "core";
+  }, {
+    readonly id: "text.caller-detections";
+    readonly profile: "core";
+  }, {
+    readonly id: "text.operators";
+    readonly profile: "core";
+  }, {
+    readonly id: "package.default";
+    readonly profile: "core";
+  }, {
+    readonly id: "session.cross-document";
+    readonly profile: "core";
+  }, {
+    readonly id: "session.lifecycle";
+    readonly profile: "core";
+  }, {
+    readonly id: "session.plaintext-transfer";
+    readonly profile: "core";
+  }, {
+    readonly id: "session.encrypted-archive";
+    readonly profile: "core";
+  }, {
+    readonly id: "document.docx.extract";
+    readonly profile: "document";
+  }, {
+    readonly id: "document.docx.rewrite";
+    readonly profile: "document";
+  }, {
+    readonly id: "document.docx.anonymize";
+    readonly profile: "document";
+  }, {
+    readonly id: "document.docx.restore";
+    readonly profile: "document";
+  }];
   readonly entities: readonly [{
     readonly label: "person";
     readonly selection: "default";
@@ -80,6 +211,10 @@ declare const CAPABILITY_MANIFEST: {
     readonly label: "registration number";
     readonly selection: "default";
     readonly detectionSources: readonly ["regex", "trigger"];
+  }, {
+    readonly label: "case number";
+    readonly selection: "default";
+    readonly detectionSources: readonly ["regex", "trigger"];
   }, {
     readonly label: "credit card number";
     readonly selection: "default";
@@ -87,7 +222,7 @@ declare const CAPABILITY_MANIFEST: {
   }, {
     readonly label: "passport number";
     readonly selection: "default";
-    readonly detectionSources: readonly ["regex"];
+    readonly detectionSources: readonly ["regex", "trigger"];
   }, {
     readonly label: "crypto";
     readonly selection: "default";
@@ -119,5 +254,5 @@ declare const CAPABILITY_MANIFEST: {
   }];
 };
 //#endregion
-export { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_RUNTIMES, CapabilityManifest, CapabilityRuntime };
+export { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, CapabilityManifest, CapabilityParityProfile, CapabilityRuntime, CapabilitySurface, CapabilitySurfaceId };
 //# sourceMappingURL=capabilities.d.mts.map

package/dist/capabilities.mjs

@@ -1,22 +1,107 @@
 import { ENTITY_CAPABILITIES } from "./constants.mjs";
 //#region src/capabilities.ts
-const CAPABILITY_MANIFEST_SCHEMA_VERSION = 1;
+const CAPABILITY_MANIFEST_SCHEMA_VERSION = 2;
 const CAPABILITY_RUNTIMES = [
 	"node",
 	"python",
 	"wasm"
 ];
+const CAPABILITY_PARITY_PROFILES = {
+	core: CAPABILITY_RUNTIMES,
+	local: ["node", "python"],
+	document: ["node", "python"]
+};
+const CAPABILITY_SURFACES = [
+	{
+		id: "package.prepare",
+		profile: "core"
+	},
+	{
+		id: "package.load",
+		profile: "core"
+	},
+	{
+		id: "package.load-file",
+		profile: "local"
+	},
+	{
+		id: "text.normalize",
+		profile: "core"
+	},
+	{
+		id: "text.redact",
+		profile: "core"
+	},
+	{
+		id: "text.redact-stream",
+		profile: "core"
+	},
+	{
+		id: "text.diagnostics",
+		profile: "core"
+	},
+	{
+		id: "text.summary-diagnostics",
+		profile: "core"
+	},
+	{
+		id: "text.caller-detections",
+		profile: "core"
+	},
+	{
+		id: "text.operators",
+		profile: "core"
+	},
+	{
+		id: "package.default",
+		profile: "core"
+	},
+	{
+		id: "session.cross-document",
+		profile: "core"
+	},
+	{
+		id: "session.lifecycle",
+		profile: "core"
+	},
+	{
+		id: "session.plaintext-transfer",
+		profile: "core"
+	},
+	{
+		id: "session.encrypted-archive",
+		profile: "core"
+	},
+	{
+		id: "document.docx.extract",
+		profile: "document"
+	},
+	{
+		id: "document.docx.rewrite",
+		profile: "document"
+	},
+	{
+		id: "document.docx.anonymize",
+		profile: "document"
+	},
+	{
+		id: "document.docx.restore",
+		profile: "document"
+	}
+];
 /**
 * Versioned, runtime-free discovery contract for the deterministic pipeline.
 * The manifest contains no accuracy claims; it describes available labels,
 * activation, provenance sources, and runtime parity only.
 */
 const CAPABILITY_MANIFEST = {
-	schemaVersion: 1,
+	schemaVersion: 2,
 	runtimes: CAPABILITY_RUNTIMES,
+	parityProfiles: CAPABILITY_PARITY_PROFILES,
+	surfaces: CAPABILITY_SURFACES,
 	entities: ENTITY_CAPABILITIES
 };
 //#endregion
-export { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_RUNTIMES };
+export { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES };
 
 //# sourceMappingURL=capabilities.mjs.map

package/dist/capabilities.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.mjs","names":[],"sources":["../src/capabilities.ts"],"sourcesContent":["import { ENTITY_CAPABILITIES } from \"./constants\";\n\nexport const CAPABILITY_MANIFEST_SCHEMA_VERSION = 1 as const;\n\nexport const CAPABILITY_RUNTIMES = [\"node\", \"python\", \"wasm\"] as const;\n\nexport type CapabilityRuntime = (typeof CAPABILITY_RUNTIMES)[number];\n\nexport type CapabilityManifest = {\n  schemaVersion: typeof CAPABILITY_MANIFEST_SCHEMA_VERSION;\n  runtimes: readonly CapabilityRuntime[];\n  entities: typeof ENTITY_CAPABILITIES;\n};\n\n/**\n * Versioned, runtime-free discovery contract for the deterministic pipeline.\n * The manifest contains no accuracy claims; it describes available labels,\n * activation, provenance sources, and runtime parity only.\n */\nexport const CAPABILITY_MANIFEST = {\n  schemaVersion: CAPABILITY_MANIFEST_SCHEMA_VERSION,\n  runtimes: CAPABILITY_RUNTIMES,\n  entities: ENTITY_CAPABILITIES,\n} as const satisfies CapabilityManifest;\n"],"mappings":";;AAEA,MAAa,qCAAqC;AAElD,MAAa,sBAAsB;CAAC;CAAQ;CAAU;AAAM;;;;;;AAe5D,MAAa,sBAAsB;CACjC,eAAA;CACA,UAAU;CACV,UAAU;AACZ"}
+{"version":3,"file":"capabilities.mjs","names":[],"sources":["../src/capabilities.ts"],"sourcesContent":["import { ENTITY_CAPABILITIES } from \"./constants\";\n\nexport const CAPABILITY_MANIFEST_SCHEMA_VERSION = 2 as const;\n\nexport const CAPABILITY_RUNTIMES = [\"node\", \"python\", \"wasm\"] as const;\n\nexport type CapabilityRuntime = (typeof CAPABILITY_RUNTIMES)[number];\n\nexport const CAPABILITY_PARITY_PROFILES = {\n  core: CAPABILITY_RUNTIMES,\n  local: [\"node\", \"python\"],\n  document: [\"node\", \"python\"],\n} as const satisfies Record<string, readonly CapabilityRuntime[]>;\n\nexport type CapabilityParityProfile = keyof typeof CAPABILITY_PARITY_PROFILES;\n\nexport const CAPABILITY_SURFACES = [\n  { id: \"package.prepare\", profile: \"core\" },\n  { id: \"package.load\", profile: \"core\" },\n  { id: \"package.load-file\", profile: \"local\" },\n  { id: \"text.normalize\", profile: \"core\" },\n  { id: \"text.redact\", profile: \"core\" },\n  { id: \"text.redact-stream\", profile: \"core\" },\n  { id: \"text.diagnostics\", profile: \"core\" },\n  { id: \"text.summary-diagnostics\", profile: \"core\" },\n  { id: \"text.caller-detections\", profile: \"core\" },\n  { id: \"text.operators\", profile: \"core\" },\n  { id: \"package.default\", profile: \"core\" },\n  { id: \"session.cross-document\", profile: \"core\" },\n  { id: \"session.lifecycle\", profile: \"core\" },\n  { id: \"session.plaintext-transfer\", profile: \"core\" },\n  { id: \"session.encrypted-archive\", profile: \"core\" },\n  { id: \"document.docx.extract\", profile: \"document\" },\n  { id: \"document.docx.rewrite\", profile: \"document\" },\n  { id: \"document.docx.anonymize\", profile: \"document\" },\n  { id: \"document.docx.restore\", profile: \"document\" },\n] as const satisfies readonly {\n  id: string;\n  profile: CapabilityParityProfile;\n}[];\n\nexport type CapabilitySurface = (typeof CAPABILITY_SURFACES)[number];\nexport type CapabilitySurfaceId = CapabilitySurface[\"id\"];\n\nexport type CapabilityManifest = {\n  schemaVersion: typeof CAPABILITY_MANIFEST_SCHEMA_VERSION;\n  runtimes: readonly CapabilityRuntime[];\n  parityProfiles: typeof CAPABILITY_PARITY_PROFILES;\n  surfaces: typeof CAPABILITY_SURFACES;\n  entities: typeof ENTITY_CAPABILITIES;\n};\n\n/**\n * Versioned, runtime-free discovery contract for the deterministic pipeline.\n * The manifest contains no accuracy claims; it describes available labels,\n * activation, provenance sources, and runtime parity only.\n */\nexport const CAPABILITY_MANIFEST = {\n  schemaVersion: CAPABILITY_MANIFEST_SCHEMA_VERSION,\n  runtimes: CAPABILITY_RUNTIMES,\n  parityProfiles: CAPABILITY_PARITY_PROFILES,\n  surfaces: CAPABILITY_SURFACES,\n  entities: ENTITY_CAPABILITIES,\n} as const satisfies CapabilityManifest;\n"],"mappings":";;AAEA,MAAa,qCAAqC;AAElD,MAAa,sBAAsB;CAAC;CAAQ;CAAU;AAAM;AAI5D,MAAa,6BAA6B;CACxC,MAAM;CACN,OAAO,CAAC,QAAQ,QAAQ;CACxB,UAAU,CAAC,QAAQ,QAAQ;AAC7B;AAIA,MAAa,sBAAsB;CACjC;EAAE,IAAI;EAAmB,SAAS;CAAO;CACzC;EAAE,IAAI;EAAgB,SAAS;CAAO;CACtC;EAAE,IAAI;EAAqB,SAAS;CAAQ;CAC5C;EAAE,IAAI;EAAkB,SAAS;CAAO;CACxC;EAAE,IAAI;EAAe,SAAS;CAAO;CACrC;EAAE,IAAI;EAAsB,SAAS;CAAO;CAC5C;EAAE,IAAI;EAAoB,SAAS;CAAO;CAC1C;EAAE,IAAI;EAA4B,SAAS;CAAO;CAClD;EAAE,IAAI;EAA0B,SAAS;CAAO;CAChD;EAAE,IAAI;EAAkB,SAAS;CAAO;CACxC;EAAE,IAAI;EAAmB,SAAS;CAAO;CACzC;EAAE,IAAI;EAA0B,SAAS;CAAO;CAChD;EAAE,IAAI;EAAqB,SAAS;CAAO;CAC3C;EAAE,IAAI;EAA8B,SAAS;CAAO;CACpD;EAAE,IAAI;EAA6B,SAAS;CAAO;CACnD;EAAE,IAAI;EAAyB,SAAS;CAAW;CACnD;EAAE,IAAI;EAAyB,SAAS;CAAW;CACnD;EAAE,IAAI;EAA2B,SAAS;CAAW;CACrD;EAAE,IAAI;EAAyB,SAAS;CAAW;AACrD;;;;;;AAqBA,MAAa,sBAAsB;CACjC,eAAA;CACA,UAAU;CACV,gBAAgB;CAChB,UAAU;CACV,UAAU;AACZ"}

package/dist/constants.mjs

@@ -3,9 +3,9 @@
 * Runtime-free constants for the anonymization pipeline.
 *
 * This module is the SSR-safe / browser-safe entrypoint:
-* importing it must not pull in `@stll/text-search`,
-* `@stll/anonymize-wasm`, or any other runtime-bearing
-* module. Consumers that only need the static label list,
+* importing it must not pull in `@stll/anonymize-wasm`
+* or any other runtime-bearing module.
+* Consumers that only need the static label list,
 * detection-source identifiers, or operator names import
 * from `@stll/anonymize/constants` (or
 * `@stll/anonymize-wasm/constants`) without paying the
@@ -164,6 +164,11 @@ const ENTITY_CAPABILITIES = [
 		selection: ENTITY_SELECTIONS.DEFAULT,
 		detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER]
 	},
+	{
+		label: "case number",
+		selection: ENTITY_SELECTIONS.DEFAULT,
+		detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER]
+	},
 	{
 		label: "credit card number",
 		selection: ENTITY_SELECTIONS.DEFAULT,
@@ -172,7 +177,7 @@ const ENTITY_CAPABILITIES = [
 	{
 		label: "passport number",
 		selection: ENTITY_SELECTIONS.DEFAULT,
-		detectionSources: [DETECTION_SOURCES.REGEX]
+		detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER]
 	},
 	{
 		label: "crypto",

package/dist/constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"constants.mjs","names":[],"sources":["../src/constants.ts"],"sourcesContent":["/**\n * Runtime-free constants for the anonymization pipeline.\n *\n * This module is the SSR-safe / browser-safe entrypoint:\n * importing it must not pull in `@stll/text-search`,\n * `@stll/anonymize-wasm`, or any other runtime-bearing\n * module. Consumers that only need the static label list,\n * detection-source identifiers, or operator names import\n * from `@stll/anonymize/constants` (or\n * `@stll/anonymize-wasm/constants`) without paying the\n * wasm / regex-set startup cost.\n *\n * `types.ts` re-exports these for back-compat, so existing\n * `import { DEFAULT_ENTITY_LABELS } from \"@stll/anonymize\"`\n * call sites keep working.\n */\n\n/**\n * Source of a detected entity span.\n * Ordered by detection layer in the pipeline.\n */\nexport const DETECTION_SOURCES = {\n  TRIGGER: \"trigger\",\n  REGEX: \"regex\",\n  DENY_LIST: \"deny-list\",\n  LEGAL_FORM: \"legal-form\",\n  GAZETTEER: \"gazetteer\",\n  COUNTRY: \"country\",\n  NER: \"ner\",\n  COREFERENCE: \"coreference\",\n} as const;\n\nexport type DetectionSource =\n  (typeof DETECTION_SOURCES)[keyof typeof DETECTION_SOURCES];\n\n/**\n * Priority levels for detection sources.\n * Higher = more structurally reliable. Used during\n * overlap resolution so deterministic detectors beat\n * probabilistic ones regardless of raw score.\n */\nexport const DETECTOR_PRIORITY = {\n  [DETECTION_SOURCES.GAZETTEER]: 5,\n  [DETECTION_SOURCES.TRIGGER]: 4,\n  [DETECTION_SOURCES.LEGAL_FORM]: 3,\n  [DETECTION_SOURCES.REGEX]: 3,\n  [DETECTION_SOURCES.COUNTRY]: 3,\n  [DETECTION_SOURCES.DENY_LIST]: 2,\n  [DETECTION_SOURCES.COREFERENCE]: 2,\n  [DETECTION_SOURCES.NER]: 1,\n} as const satisfies Record<DetectionSource, number>;\n\n/**\n * Anonymization operator types. Each operator defines\n * how a confirmed entity is replaced in the output.\n */\nexport const OPERATOR_TYPES = [\"replace\", \"redact\", \"keep\", \"mask\"] as const;\n\nexport type OperatorType = (typeof OPERATOR_TYPES)[number];\n\nexport const ENTITY_SELECTIONS = {\n  DEFAULT: \"default\",\n  OPT_IN: \"opt-in\",\n} as const;\n\nexport type EntitySelection =\n  (typeof ENTITY_SELECTIONS)[keyof typeof ENTITY_SELECTIONS];\n\nexport type EntityCapability = {\n  label: string;\n  selection: EntitySelection;\n  detectionSources: readonly DetectionSource[];\n};\n\n/**\n * Canonical entity capabilities exposed by the deterministic native pipeline.\n * `selection` describes whether the default package requests the label; opt-in\n * labels have built-in detection rules but must be requested explicitly.\n *\n * These labels are ephemeral: entities are regenerated on\n * every pipeline run and never persisted to the database.\n * Renaming a label here requires no migration.\n */\nexport const ENTITY_CAPABILITIES = [\n  {\n    label: \"person\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [\n      DETECTION_SOURCES.TRIGGER,\n      DETECTION_SOURCES.REGEX,\n      DETECTION_SOURCES.DENY_LIST,\n      DETECTION_SOURCES.COREFERENCE,\n    ],\n  },\n  {\n    label: \"organization\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [\n      DETECTION_SOURCES.TRIGGER,\n      DETECTION_SOURCES.DENY_LIST,\n      DETECTION_SOURCES.LEGAL_FORM,\n      DETECTION_SOURCES.GAZETTEER,\n      DETECTION_SOURCES.COREFERENCE,\n    ],\n  },\n  {\n    label: \"phone number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"address\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [\n      DETECTION_SOURCES.REGEX,\n      DETECTION_SOURCES.TRIGGER,\n      DETECTION_SOURCES.DENY_LIST,\n    ],\n  },\n  {\n    label: \"country\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.COUNTRY],\n  },\n  {\n    label: \"email address\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"date\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"date of birth\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"bank account number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"iban\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"tax identification number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"identity card number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"birth number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"national identification number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"social security number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"registration number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"credit card number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"passport number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"crypto\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"monetary amount\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"land parcel\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"misc\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.DENY_LIST],\n  },\n  {\n    label: \"ip address\",\n    selection: ENTITY_SELECTIONS.OPT_IN,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"mac address\",\n    selection: ENTITY_SELECTIONS.OPT_IN,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"url\",\n    selection: ENTITY_SELECTIONS.OPT_IN,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n] as const satisfies readonly EntityCapability[];\n\ntype KnownEntityCapability = (typeof ENTITY_CAPABILITIES)[number];\n\nexport type EntityLabel = KnownEntityCapability[\"label\"];\n\nexport const ENTITY_LABELS: readonly EntityLabel[] = ENTITY_CAPABILITIES.map(\n  ({ label }) => label,\n);\n\nconst isDefaultEntityCapability = (\n  capability: KnownEntityCapability,\n): capability is Extract<\n  KnownEntityCapability,\n  { selection: typeof ENTITY_SELECTIONS.DEFAULT }\n> => capability.selection === ENTITY_SELECTIONS.DEFAULT;\n\nexport type DefaultEntityLabel = Extract<\n  KnownEntityCapability,\n  { selection: typeof ENTITY_SELECTIONS.DEFAULT }\n>[\"label\"];\n\nexport const DEFAULT_ENTITY_LABELS: readonly DefaultEntityLabel[] =\n  ENTITY_CAPABILITIES.filter(isDefaultEntityCapability).map(\n    ({ label }) => label,\n  );\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,oBAAoB;CAC/B,SAAS;CACT,OAAO;CACP,WAAW;CACX,YAAY;CACZ,WAAW;CACX,SAAS;CACT,KAAK;CACL,aAAa;AACf;;;;;;;AAWA,MAAa,oBAAoB;EAC9B,kBAAkB,YAAY;EAC9B,kBAAkB,UAAU;EAC5B,kBAAkB,aAAa;EAC/B,kBAAkB,QAAQ;EAC1B,kBAAkB,UAAU;EAC5B,kBAAkB,YAAY;EAC9B,kBAAkB,cAAc;EAChC,kBAAkB,MAAM;AAC3B;;;;;AAMA,MAAa,iBAAiB;CAAC;CAAW;CAAU;CAAQ;AAAM;AAIlE,MAAa,oBAAoB;CAC/B,SAAS;CACT,QAAQ;AACV;;;;;;;;;;AAoBA,MAAa,sBAAsB;CACjC;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB;GAChB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;EACpB;CACF;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB;GAChB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;EACpB;CACF;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB;GAChB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;EACpB;CACF;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO;CAC9C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO;CAC9C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO;CAC9C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,SAAS;CACzE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;AACF;AAMA,MAAa,gBAAwC,oBAAoB,KACtE,EAAE,YAAY,KACjB;AAEA,MAAM,6BACJ,eAIG,WAAW,cAAc,kBAAkB;AAOhD,MAAa,wBACX,oBAAoB,OAAO,yBAAyB,CAAC,CAAC,KACnD,EAAE,YAAY,KACjB"}
+{"version":3,"file":"constants.mjs","names":[],"sources":["../src/constants.ts"],"sourcesContent":["/**\n * Runtime-free constants for the anonymization pipeline.\n *\n * This module is the SSR-safe / browser-safe entrypoint:\n * importing it must not pull in `@stll/anonymize-wasm`\n * or any other runtime-bearing module.\n * Consumers that only need the static label list,\n * detection-source identifiers, or operator names import\n * from `@stll/anonymize/constants` (or\n * `@stll/anonymize-wasm/constants`) without paying the\n * wasm / regex-set startup cost.\n *\n * `types.ts` re-exports these for back-compat, so existing\n * `import { DEFAULT_ENTITY_LABELS } from \"@stll/anonymize\"`\n * call sites keep working.\n */\n\n/**\n * Source of a detected entity span.\n * Ordered by detection layer in the pipeline.\n */\nexport const DETECTION_SOURCES = {\n  TRIGGER: \"trigger\",\n  REGEX: \"regex\",\n  DENY_LIST: \"deny-list\",\n  LEGAL_FORM: \"legal-form\",\n  GAZETTEER: \"gazetteer\",\n  COUNTRY: \"country\",\n  NER: \"ner\",\n  COREFERENCE: \"coreference\",\n} as const;\n\nexport type DetectionSource =\n  (typeof DETECTION_SOURCES)[keyof typeof DETECTION_SOURCES];\n\n/**\n * Priority levels for detection sources.\n * Higher = more structurally reliable. Used during\n * overlap resolution so deterministic detectors beat\n * probabilistic ones regardless of raw score.\n */\nexport const DETECTOR_PRIORITY = {\n  [DETECTION_SOURCES.GAZETTEER]: 5,\n  [DETECTION_SOURCES.TRIGGER]: 4,\n  [DETECTION_SOURCES.LEGAL_FORM]: 3,\n  [DETECTION_SOURCES.REGEX]: 3,\n  [DETECTION_SOURCES.COUNTRY]: 3,\n  [DETECTION_SOURCES.DENY_LIST]: 2,\n  [DETECTION_SOURCES.COREFERENCE]: 2,\n  [DETECTION_SOURCES.NER]: 1,\n} as const satisfies Record<DetectionSource, number>;\n\n/**\n * Anonymization operator types. Each operator defines\n * how a confirmed entity is replaced in the output.\n */\nexport const OPERATOR_TYPES = [\"replace\", \"redact\", \"keep\", \"mask\"] as const;\n\nexport type OperatorType = (typeof OPERATOR_TYPES)[number];\n\nexport const ENTITY_SELECTIONS = {\n  DEFAULT: \"default\",\n  OPT_IN: \"opt-in\",\n} as const;\n\nexport type EntitySelection =\n  (typeof ENTITY_SELECTIONS)[keyof typeof ENTITY_SELECTIONS];\n\nexport type EntityCapability = {\n  label: string;\n  selection: EntitySelection;\n  detectionSources: readonly DetectionSource[];\n};\n\n/**\n * Canonical entity capabilities exposed by the deterministic native pipeline.\n * `selection` describes whether the default package requests the label; opt-in\n * labels have built-in detection rules but must be requested explicitly.\n *\n * These labels are ephemeral: entities are regenerated on\n * every pipeline run and never persisted to the database.\n * Renaming a label here requires no migration.\n */\nexport const ENTITY_CAPABILITIES = [\n  {\n    label: \"person\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [\n      DETECTION_SOURCES.TRIGGER,\n      DETECTION_SOURCES.REGEX,\n      DETECTION_SOURCES.DENY_LIST,\n      DETECTION_SOURCES.COREFERENCE,\n    ],\n  },\n  {\n    label: \"organization\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [\n      DETECTION_SOURCES.TRIGGER,\n      DETECTION_SOURCES.DENY_LIST,\n      DETECTION_SOURCES.LEGAL_FORM,\n      DETECTION_SOURCES.GAZETTEER,\n      DETECTION_SOURCES.COREFERENCE,\n    ],\n  },\n  {\n    label: \"phone number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"address\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [\n      DETECTION_SOURCES.REGEX,\n      DETECTION_SOURCES.TRIGGER,\n      DETECTION_SOURCES.DENY_LIST,\n    ],\n  },\n  {\n    label: \"country\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.COUNTRY],\n  },\n  {\n    label: \"email address\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"date\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"date of birth\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"bank account number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"iban\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"tax identification number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"identity card number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"birth number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"national identification number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"social security number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"registration number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"case number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"credit card number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"passport number\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"crypto\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"monetary amount\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"land parcel\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.TRIGGER],\n  },\n  {\n    label: \"misc\",\n    selection: ENTITY_SELECTIONS.DEFAULT,\n    detectionSources: [DETECTION_SOURCES.REGEX, DETECTION_SOURCES.DENY_LIST],\n  },\n  {\n    label: \"ip address\",\n    selection: ENTITY_SELECTIONS.OPT_IN,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"mac address\",\n    selection: ENTITY_SELECTIONS.OPT_IN,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n  {\n    label: \"url\",\n    selection: ENTITY_SELECTIONS.OPT_IN,\n    detectionSources: [DETECTION_SOURCES.REGEX],\n  },\n] as const satisfies readonly EntityCapability[];\n\ntype KnownEntityCapability = (typeof ENTITY_CAPABILITIES)[number];\n\nexport type EntityLabel = KnownEntityCapability[\"label\"];\n\nexport const ENTITY_LABELS: readonly EntityLabel[] = ENTITY_CAPABILITIES.map(\n  ({ label }) => label,\n);\n\nconst isDefaultEntityCapability = (\n  capability: KnownEntityCapability,\n): capability is Extract<\n  KnownEntityCapability,\n  { selection: typeof ENTITY_SELECTIONS.DEFAULT }\n> => capability.selection === ENTITY_SELECTIONS.DEFAULT;\n\nexport type DefaultEntityLabel = Extract<\n  KnownEntityCapability,\n  { selection: typeof ENTITY_SELECTIONS.DEFAULT }\n>[\"label\"];\n\nexport const DEFAULT_ENTITY_LABELS: readonly DefaultEntityLabel[] =\n  ENTITY_CAPABILITIES.filter(isDefaultEntityCapability).map(\n    ({ label }) => label,\n  );\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,oBAAoB;CAC/B,SAAS;CACT,OAAO;CACP,WAAW;CACX,YAAY;CACZ,WAAW;CACX,SAAS;CACT,KAAK;CACL,aAAa;AACf;;;;;;;AAWA,MAAa,oBAAoB;EAC9B,kBAAkB,YAAY;EAC9B,kBAAkB,UAAU;EAC5B,kBAAkB,aAAa;EAC/B,kBAAkB,QAAQ;EAC1B,kBAAkB,UAAU;EAC5B,kBAAkB,YAAY;EAC9B,kBAAkB,cAAc;EAChC,kBAAkB,MAAM;AAC3B;;;;;AAMA,MAAa,iBAAiB;CAAC;CAAW;CAAU;CAAQ;AAAM;AAIlE,MAAa,oBAAoB;CAC/B,SAAS;CACT,QAAQ;AACV;;;;;;;;;;AAoBA,MAAa,sBAAsB;CACjC;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB;GAChB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;EACpB;CACF;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB;GAChB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;EACpB;CACF;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB;GAChB,kBAAkB;GAClB,kBAAkB;GAClB,kBAAkB;EACpB;CACF;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO;CAC9C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO;CAC9C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,OAAO;CACvE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO;CAC9C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,OAAO,kBAAkB,SAAS;CACzE;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;CACA;EACE,OAAO;EACP,WAAW,kBAAkB;EAC7B,kBAAkB,CAAC,kBAAkB,KAAK;CAC5C;AACF;AAMA,MAAa,gBAAwC,oBAAoB,KACtE,EAAE,YAAY,KACjB;AAEA,MAAM,6BACJ,eAIG,WAAW,cAAc,kBAAkB;AAOhD,MAAa,wBACX,oBAAoB,OAAO,yBAAyB,CAAC,CAAC,KACnD,EAAE,YAAY,KACjB"}

package/dist/constants2.d.mts

@@ -3,9 +3,9 @@
  * Runtime-free constants for the anonymization pipeline.
  *
  * This module is the SSR-safe / browser-safe entrypoint:
- * importing it must not pull in `@stll/text-search`,
- * `@stll/anonymize-wasm`, or any other runtime-bearing
- * module. Consumers that only need the static label list,
+ * importing it must not pull in `@stll/anonymize-wasm`
+ * or any other runtime-bearing module.
+ * Consumers that only need the static label list,
  * detection-source identifiers, or operator names import
  * from `@stll/anonymize/constants` (or
  * `@stll/anonymize-wasm/constants`) without paying the
@@ -135,6 +135,10 @@ declare const ENTITY_CAPABILITIES: readonly [{
   readonly label: "registration number";
   readonly selection: "default";
   readonly detectionSources: readonly ["regex", "trigger"];
+}, {
+  readonly label: "case number";
+  readonly selection: "default";
+  readonly detectionSources: readonly ["regex", "trigger"];
 }, {
   readonly label: "credit card number";
   readonly selection: "default";
@@ -142,7 +146,7 @@ declare const ENTITY_CAPABILITIES: readonly [{
 }, {
   readonly label: "passport number";
   readonly selection: "default";
-  readonly detectionSources: readonly ["regex"];
+  readonly detectionSources: readonly ["regex", "trigger"];
 }, {
   readonly label: "crypto";
   readonly selection: "default";

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { a as DetectionSource, c as ENTITY_SELECTIONS, d as EntitySelection, f as OPERATOR_TYPES, i as DefaultEntityLabel, l as EntityCapability, n as DETECTION_SOURCES, o as ENTITY_CAPABILITIES, p as OperatorType, r as DETECTOR_PRIORITY, s as ENTITY_LABELS, t as DEFAULT_ENTITY_LABELS, u as EntityLabel } from "./constants2.mjs";
-import { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_RUNTIMES, CapabilityManifest, CapabilityRuntime } from "./capabilities.mjs";
+import { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, CapabilityManifest, CapabilityParityProfile, CapabilityRuntime, CapabilitySurface, CapabilitySurfaceId } from "./capabilities.mjs";
 import { $ as getNativeBindingVersion, A as NativeStaticRedactionResult, B as SharedNativePreparedPackageOptions, C as NativeSessionCallerRedactionInput, Ct as TriggerGroupConfig, D as NativeSessionMetadata, Dt as NativePreparedSearchConfig, E as NativeSessionLifecycle, Et as TriggerValidation, F as PreparedNativeRedactionSession, G as assertNativeBindingVersion, H as SharedNativeRedactTextOptions, I as PreparedNativeSessionRedactionPlan, J as createNativePipelineFromPackage, K as createNativeAnonymizerFromConfig, L as PreparedSearch, M as PreparedAnonymizer, N as PreparedNativeAnonymizer, O as NativeSessionRedactionAtOptions, P as PreparedNativePipeline, Q as encodeNativeSearchConfigInput, R as SharedNativeDiagnosticsJsonOptions, S as NativeSessionBlockRedactionPlan, St as TriggerExtension, T as NativeSessionDeletionSummary, Tt as TriggerStrategy, U as SharedNativeRedactTextStreamJsonOptions, V as SharedNativeRedactTextJsonOptions, W as SharedNativeSearchPackageOptions, Z as encodeNativeSearchConfig, _ as NativePreparedSessionRedactionPlanBinding, _t as OperatorConfig, a as NativeBindingVersionOptions, b as NativeSearchPackageInput, bt as ReviewDecision, c as NativeCreateSessionWithLifecycleOptions, d as NativeOpenSessionArchiveOptions, dt as CustomRegexPattern, f as NativeOperatorConfig, ft as DenyListCategory, g as NativePreparedSearchBinding, gt as GazetteerEntry, h as NativePreparedRedactionSessionBinding, ht as Entity, i as NativeAnonymizerFromPackageOptions, j as NativeTextReplacement, k as NativeSessionStatus, l as NativeDiagnosticsBatchCallback, lt as AnonymisationOperator, m as NativePipelineFromPackageOptions, mt as DictionaryMeta, n as NativeAnonymizeBinding, o as NativeCallerDetection, p as NativePipelineEntity, pt as Dictionaries, q as createNativeAnonymizerFromPackage, r as NativeAnonymizerFromConfigOptions, rt as prepareNativeSearchPackage, s as NativeCallerRedactionOptions, t as CALLER_DETECTION_CONTRACT_VERSION, u as NativeNormalizeOptions, ut as CustomDenyListEntry, v as NativeRedactionResult, vt as PipelineConfig, w as NativeSessionCallerRedactionPlanOptions, wt as TriggerRule, x as NativeSearchPackageOptions, xt as ReviewedEntity, y as NativeResultEventCallback, yt as RedactionResult, z as SharedNativeDiagnosticsStreamJsonOptions } from "./native.mjs";
 import { A as readDefaultNativePipelinePackageFileAsync, B as redact_text_stream_json, C as native_package_version, D as preload_default_native_pipeline, E as preloadDefaultNativePipelineAsync, F as redactDefaultTextJson, G as NativePipelinePackageOptions, H as DEFAULT_NATIVE_PIPELINE_CONFIG, I as redact_default_text, J as createNativePipelineFromConfig, K as NativePipelineUnsupportedFeature, L as redact_default_text_json, M as readNativePipelinePackageFileAsync, N as read_default_native_pipeline_package_file, O as prepare_search_package, P as redactDefaultText, R as redact_text, S as load_prepared_package_file, T as preloadDefaultNativePipeline, U as NativePipelineBuildOptions, V as summary_diagnostics_json, W as NativePipelineCompatibility, X as prepareNativePipelineConfig, Y as getNativePipelineCompatibility, Z as prepareNativePipelinePackage, _ as diagnostics_stream_json, a as LoadNativeBindingOptions, b as loadNativeAnonymizeBinding, c as NativeRequire, d as availableDefaultNativePipelineLanguages, f as available_default_native_pipeline_languages, g as diagnostics_json, h as create_native_pipeline_from_default_package, i as DefaultNativePipelineWarmup, j as readNativePipelinePackageFile, k as readDefaultNativePipelinePackageFile, l as NativeSdkOptions, m as createNativePipelineFromPackageFile, n as DefaultNativePipelinePackageFileOptions, o as NativeLibc, p as createNativePipelineFromDefaultPackage, q as assertNativePipelineSupported, r as DefaultNativePipelinePackageOptions, s as NativePipelinePackageFileOptions, t as DEFAULT_NATIVE_PIPELINE_WARMUPS, u as NativeSdkPackageOptions, v as getDefaultNativePipeline, w as normalize_for_search, x as load_prepared_package, y as get_default_native_pipeline, z as redact_text_json } from "./native-node.mjs";
 //#region src/redact.d.ts
@@ -15,5 +15,5 @@ declare const exportRedactionKey: (redactionMap: Map<string, string>, operatorMa
  */
 declare const deanonymise: (redactedText: string, redactionMap: Map<string, string>) => string;
 //#endregion
-export { type AnonymisationOperator, CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_RUNTIMES, type CapabilityManifest, type CapabilityRuntime, type CustomDenyListEntry, type CustomRegexPattern, DEFAULT_ENTITY_LABELS, DEFAULT_NATIVE_PIPELINE_CONFIG, DEFAULT_NATIVE_PIPELINE_WARMUPS, DETECTION_SOURCES, DETECTOR_PRIORITY, type DefaultEntityLabel, DefaultNativePipelinePackageFileOptions, DefaultNativePipelinePackageOptions, DefaultNativePipelineWarmup, type DenyListCategory, type DetectionSource, type Dictionaries, type DictionaryMeta, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, type Entity, type EntityCapability, type EntityLabel, type EntitySelection, type GazetteerEntry, LoadNativeBindingOptions, NativeAnonymizeBinding, NativeAnonymizerFromConfigOptions, NativeAnonymizerFromPackageOptions, NativeBindingVersionOptions, NativeCallerDetection, NativeCallerRedactionOptions, NativeCreateSessionWithLifecycleOptions, NativeDiagnosticsBatchCallback, NativeLibc, NativeNormalizeOptions, NativeOpenSessionArchiveOptions, NativeOperatorConfig, type NativePipelineBuildOptions, type NativePipelineCompatibility, NativePipelineEntity, NativePipelineFromPackageOptions, NativePipelinePackageFileOptions, type NativePipelinePackageOptions, type NativePipelineUnsupportedFeature, NativePreparedRedactionSessionBinding, NativePreparedSearchBinding, type NativePreparedSearchConfig, NativePreparedSessionRedactionPlanBinding, NativeRedactionResult, NativeRequire, NativeResultEventCallback, NativeSdkOptions, NativeSdkPackageOptions, NativeSearchPackageInput, NativeSearchPackageOptions, NativeSessionBlockRedactionPlan, NativeSessionCallerRedactionInput, NativeSessionCallerRedactionPlanOptions, NativeSessionDeletionSummary, NativeSessionLifecycle, NativeSessionMetadata, NativeSessionRedactionAtOptions, NativeSessionStatus, NativeStaticRedactionResult, NativeTextReplacement, OPERATOR_TYPES, type OperatorConfig, type OperatorType, type PipelineConfig, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, type RedactionResult, type ReviewDecision, type ReviewedEntity, SharedNativeDiagnosticsJsonOptions, SharedNativeDiagnosticsStreamJsonOptions, SharedNativePreparedPackageOptions, SharedNativeRedactTextJsonOptions, SharedNativeRedactTextOptions, SharedNativeRedactTextStreamJsonOptions, SharedNativeSearchPackageOptions, type TriggerExtension, type TriggerGroupConfig, type TriggerRule, type TriggerStrategy, type TriggerValidation, assertNativeBindingVersion, assertNativePipelineSupported, availableDefaultNativePipelineLanguages, available_default_native_pipeline_languages, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromDefaultPackage, createNativePipelineFromPackage, createNativePipelineFromPackageFile, create_native_pipeline_from_default_package, deanonymise, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getDefaultNativePipeline, getNativeBindingVersion, getNativePipelineCompatibility, get_default_native_pipeline, loadNativeAnonymizeBinding, load_prepared_package, load_prepared_package_file, native_package_version, normalize_for_search, preloadDefaultNativePipeline, preloadDefaultNativePipelineAsync, preload_default_native_pipeline, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, readDefaultNativePipelinePackageFile, readDefaultNativePipelinePackageFileAsync, readNativePipelinePackageFile, readNativePipelinePackageFileAsync, read_default_native_pipeline_package_file, redactDefaultText, redactDefaultTextJson, redact_default_text, redact_default_text_json, redact_text, redact_text_json, redact_text_stream_json, summary_diagnostics_json };
+export { type AnonymisationOperator, CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, type CapabilityManifest, type CapabilityParityProfile, type CapabilityRuntime, type CapabilitySurface, type CapabilitySurfaceId, type CustomDenyListEntry, type CustomRegexPattern, DEFAULT_ENTITY_LABELS, DEFAULT_NATIVE_PIPELINE_CONFIG, DEFAULT_NATIVE_PIPELINE_WARMUPS, DETECTION_SOURCES, DETECTOR_PRIORITY, type DefaultEntityLabel, DefaultNativePipelinePackageFileOptions, DefaultNativePipelinePackageOptions, DefaultNativePipelineWarmup, type DenyListCategory, type DetectionSource, type Dictionaries, type DictionaryMeta, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, type Entity, type EntityCapability, type EntityLabel, type EntitySelection, type GazetteerEntry, LoadNativeBindingOptions, NativeAnonymizeBinding, NativeAnonymizerFromConfigOptions, NativeAnonymizerFromPackageOptions, NativeBindingVersionOptions, NativeCallerDetection, NativeCallerRedactionOptions, NativeCreateSessionWithLifecycleOptions, NativeDiagnosticsBatchCallback, NativeLibc, NativeNormalizeOptions, NativeOpenSessionArchiveOptions, NativeOperatorConfig, type NativePipelineBuildOptions, type NativePipelineCompatibility, NativePipelineEntity, NativePipelineFromPackageOptions, NativePipelinePackageFileOptions, type NativePipelinePackageOptions, type NativePipelineUnsupportedFeature, NativePreparedRedactionSessionBinding, NativePreparedSearchBinding, type NativePreparedSearchConfig, NativePreparedSessionRedactionPlanBinding, NativeRedactionResult, NativeRequire, NativeResultEventCallback, NativeSdkOptions, NativeSdkPackageOptions, NativeSearchPackageInput, NativeSearchPackageOptions, NativeSessionBlockRedactionPlan, NativeSessionCallerRedactionInput, NativeSessionCallerRedactionPlanOptions, NativeSessionDeletionSummary, NativeSessionLifecycle, NativeSessionMetadata, NativeSessionRedactionAtOptions, NativeSessionStatus, NativeStaticRedactionResult, NativeTextReplacement, OPERATOR_TYPES, type OperatorConfig, type OperatorType, type PipelineConfig, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, type RedactionResult, type ReviewDecision, type ReviewedEntity, SharedNativeDiagnosticsJsonOptions, SharedNativeDiagnosticsStreamJsonOptions, SharedNativePreparedPackageOptions, SharedNativeRedactTextJsonOptions, SharedNativeRedactTextOptions, SharedNativeRedactTextStreamJsonOptions, SharedNativeSearchPackageOptions, type TriggerExtension, type TriggerGroupConfig, type TriggerRule, type TriggerStrategy, type TriggerValidation, assertNativeBindingVersion, assertNativePipelineSupported, availableDefaultNativePipelineLanguages, available_default_native_pipeline_languages, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromDefaultPackage, createNativePipelineFromPackage, createNativePipelineFromPackageFile, create_native_pipeline_from_default_package, deanonymise, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getDefaultNativePipeline, getNativeBindingVersion, getNativePipelineCompatibility, get_default_native_pipeline, loadNativeAnonymizeBinding, load_prepared_package, load_prepared_package_file, native_package_version, normalize_for_search, preloadDefaultNativePipeline, preloadDefaultNativePipelineAsync, preload_default_native_pipeline, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, readDefaultNativePipelinePackageFile, readDefaultNativePipelinePackageFileAsync, readNativePipelinePackageFile, readNativePipelinePackageFileAsync, read_default_native_pipeline_package_file, redactDefaultText, redactDefaultTextJson, redact_default_text, redact_default_text_json, redact_text, redact_text_json, redact_text_stream_json, summary_diagnostics_json };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import { CALLER_DETECTION_CONTRACT_VERSION, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, assertNativeBindingVersion, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromPackage, encodeNativeSearchConfig, encodeNativeSearchConfigInput, getNativeBindingVersion, prepareNativeSearchPackage } from "./native.mjs";
 import { A as redact_text_json, C as readNativePipelinePackageFileAsync, D as redact_default_text, E as redactDefaultTextJson, F as createNativePipelineFromConfig, I as getNativePipelineCompatibility, L as prepareNativePipelineConfig, M as summary_diagnostics_json, N as DEFAULT_NATIVE_PIPELINE_CONFIG, O as redact_default_text_json, P as assertNativePipelineSupported, R as prepareNativePipelinePackage, S as readNativePipelinePackageFile, T as redactDefaultText, _ as preloadDefaultNativePipelineAsync, a as createNativePipelineFromPackageFile, b as readDefaultNativePipelinePackageFile, c as diagnostics_stream_json, d as loadNativeAnonymizeBinding, f as load_prepared_package, g as preloadDefaultNativePipeline, h as normalize_for_search, i as createNativePipelineFromDefaultPackage, j as redact_text_stream_json, k as redact_text, l as getDefaultNativePipeline, m as native_package_version, n as availableDefaultNativePipelineLanguages, o as create_native_pipeline_from_default_package, p as load_prepared_package_file, r as available_default_native_pipeline_languages, s as diagnostics_json, t as DEFAULT_NATIVE_PIPELINE_WARMUPS, u as get_default_native_pipeline, v as preload_default_native_pipeline, w as read_default_native_pipeline_package_file, x as readDefaultNativePipelinePackageFileAsync, y as prepare_search_package } from "./native-node2.mjs";
 import { DEFAULT_ENTITY_LABELS, DETECTION_SOURCES, DETECTOR_PRIORITY, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, OPERATOR_TYPES } from "./constants.mjs";
-import { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_RUNTIMES } from "./capabilities.mjs";
+import { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES } from "./capabilities.mjs";
 //#region src/redact.ts
 /**
 * Serialize the redaction key to JSON for export.
@@ -26,6 +26,6 @@ const deanonymise = (redactedText, redactionMap) => {
 	return result;
 };
 //#endregion
-export { CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_RUNTIMES, DEFAULT_ENTITY_LABELS, DEFAULT_NATIVE_PIPELINE_CONFIG, DEFAULT_NATIVE_PIPELINE_WARMUPS, DETECTION_SOURCES, DETECTOR_PRIORITY, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, OPERATOR_TYPES, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, assertNativeBindingVersion, assertNativePipelineSupported, availableDefaultNativePipelineLanguages, available_default_native_pipeline_languages, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromDefaultPackage, createNativePipelineFromPackage, createNativePipelineFromPackageFile, create_native_pipeline_from_default_package, deanonymise, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getDefaultNativePipeline, getNativeBindingVersion, getNativePipelineCompatibility, get_default_native_pipeline, loadNativeAnonymizeBinding, load_prepared_package, load_prepared_package_file, native_package_version, normalize_for_search, preloadDefaultNativePipeline, preloadDefaultNativePipelineAsync, preload_default_native_pipeline, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, readDefaultNativePipelinePackageFile, readDefaultNativePipelinePackageFileAsync, readNativePipelinePackageFile, readNativePipelinePackageFileAsync, read_default_native_pipeline_package_file, redactDefaultText, redactDefaultTextJson, redact_default_text, redact_default_text_json, redact_text, redact_text_json, redact_text_stream_json, summary_diagnostics_json };
+export { CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, DEFAULT_ENTITY_LABELS, DEFAULT_NATIVE_PIPELINE_CONFIG, DEFAULT_NATIVE_PIPELINE_WARMUPS, DETECTION_SOURCES, DETECTOR_PRIORITY, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, OPERATOR_TYPES, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, assertNativeBindingVersion, assertNativePipelineSupported, availableDefaultNativePipelineLanguages, available_default_native_pipeline_languages, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromDefaultPackage, createNativePipelineFromPackage, createNativePipelineFromPackageFile, create_native_pipeline_from_default_package, deanonymise, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getDefaultNativePipeline, getNativeBindingVersion, getNativePipelineCompatibility, get_default_native_pipeline, loadNativeAnonymizeBinding, load_prepared_package, load_prepared_package_file, native_package_version, normalize_for_search, preloadDefaultNativePipeline, preloadDefaultNativePipelineAsync, preload_default_native_pipeline, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, readDefaultNativePipelinePackageFile, readDefaultNativePipelinePackageFileAsync, readNativePipelinePackageFile, readNativePipelinePackageFileAsync, read_default_native_pipeline_package_file, redactDefaultText, redactDefaultTextJson, redact_default_text, redact_default_text_json, redact_text, redact_text_json, redact_text_stream_json, summary_diagnostics_json };
 
 //# sourceMappingURL=index.mjs.map

package/dist/native-node2.mjs

@@ -186,12 +186,31 @@ const pipelineConfigKey = (config, gazetteerEntries) => {
 	const gazFingerprint = config.enableGazetteer && gazetteerEntries.length > 0 ? gazetteerEntries.map((entry) => `${entry.id}:${entry.canonical}:${entry.label}:${[...entry.variants].sort().join(",")}`).toSorted().join(";") : "";
 	return `${config.enableDenyList}:${config.enableTriggerPhrases}:${legalFormsEnabled}:${config.enableNameCorpus}:${contentLanguageFingerprint(config)}:${config.nameCorpusLanguages?.toSorted().join(",") ?? ""}:${config.enableRegex}:${config.threshold}:${config.enableConfidenceBoost}:${config.enableHotwordRules === true}:${config.enableCoreference === true}:${config.enableZoneClassification === true}:${config.labels.toSorted().join(",")}:${config.denyListCountries?.toSorted().join(",") ?? ""}:${config.denyListRegions?.toSorted().join(",") ?? ""}:${config.denyListExcludeCategories?.toSorted().join(",") ?? ""}:${customDenyFingerprint}:${customRegexFingerprint}:${config.enableGazetteer}:${gazFingerprint}:${config.enableCountries !== false}`;
 };
-//#endregion
-//#region src/native-pipeline.ts
 const sharedPackageByDictionaries = /* @__PURE__ */ new WeakMap();
 const sharedPackageWithoutDictionaries = /* @__PURE__ */ new Map();
 const dictionaryCacheIds = /* @__PURE__ */ new WeakMap();
 let nextDictionaryCacheId = 0;
+/** Record `key` as most-recently-used in `cache`, evicting the
+* least-recently-used entry first once the cache is at capacity. A `Map`'s
+* insertion order doubles as recency order here: touching an existing key
+* deletes then re-sets it to move it to the end, and eviction drops the
+* first (oldest) key.
+*
+* Evicting a still-in-flight build only drops the cache's reference to its
+* promise; the caller that started the build (and any concurrent caller that
+* already read the promise before eviction) still resolves it correctly via
+* the guarded `sharedCache.get(key) === promise` checks in
+* `getCachedNativePipelinePackage`. A later caller for the same key just
+* misses the dedupe and starts a fresh build — bounded memory takes priority
+* over perfect dedupe under cache pressure. */
+const touchSharedPackageCacheEntry = (cache, key, value) => {
+	cache.delete(key);
+	if (cache.size >= 32) {
+		const oldestKey = cache.keys().next().value;
+		if (oldestKey !== void 0) cache.delete(oldestKey);
+	}
+	cache.set(key, value);
+};
 const dictionaryCacheKey = (dictionaries) => {
 	if (dictionaries === void 0) return "none";
 	const existing = dictionaryCacheIds.get(dictionaries);
@@ -210,7 +229,7 @@ const sharedPackageCacheFor = (dictionaries) => {
 };
 const getNativePipelineCompatibility = (config) => {
 	const unsupportedFeatures = [];
-	if (config.enableNer) unsupportedFeatures.push("enableNer");
+	if ("enableNer" in config && Boolean(config.enableNer)) unsupportedFeatures.push("enableNer");
 	if (unsupportedFeatures.length === 0) return { status: "supported" };
 	return {
 		status: "unsupported",
@@ -229,11 +248,8 @@ const encoder = new TextEncoder();
 * the separate bundle preferentially, and keeping the (large) dictionaries out
 * of the config JSON avoids serializing them twice.
 */
-const toAssembleInputs = ({ dictionaries, enableNer = false, ...config }, gazetteerEntries) => ({
-	pipelineConfigJson: encoder.encode(JSON.stringify({
-		...config,
-		enableNer
-	})),
+const toAssembleInputs = ({ dictionaries, ...config }, gazetteerEntries) => ({
+	pipelineConfigJson: encoder.encode(JSON.stringify(config)),
 	dictionariesJson: dictionaries === void 0 ? void 0 : encoder.encode(JSON.stringify(dictionaries)),
 	gazetteerJson: gazetteerEntries.length === 0 ? void 0 : encoder.encode(JSON.stringify(gazetteerEntries))
 });
@@ -287,6 +303,7 @@ const getCachedNativePipelinePackage = async ({ binding, config, gazetteerEntrie
 	const sharedCache = sharedPackageCacheFor(scopedConfig.dictionaries);
 	const shared = sharedCache.get(key);
 	if (shared !== void 0) {
+		touchSharedPackageCacheEntry(sharedCache, key, shared);
 		const packageBytes = await shared;
 		ctx.nativePipelinePackage = packageBytes;
 		ctx.nativePipelinePackageKey = key;
@@ -302,7 +319,7 @@ const getCachedNativePipelinePackage = async ({ binding, config, gazetteerEntrie
 		compressed
 	});
 	ctx.nativePipelinePackagePromise = promise;
-	sharedCache.set(key, promise);
+	touchSharedPackageCacheEntry(sharedCache, key, promise);
 	let packageBytes;
 	try {
 		packageBytes = await promise;
@@ -339,7 +356,6 @@ const DEFAULT_NATIVE_PIPELINE_CONFIG = {
 	enableDenyList: true,
 	enableGazetteer: false,
 	enableCountries: true,
-	enableNer: false,
 	enableConfidenceBoost: true,
 	enableCoreference: true,
 	enableHotwordRules: true,