@stll/anonymize 2.4.2 → 2.5.0

package/dist/agent-surface.d.mts

@@ -0,0 +1,91 @@
+//#region src/agent-surface.d.ts
+/**
+ * The agent-facing surface contract shared by the CLI (`@stll/anonymize-cli`)
+ * and the MCP server (`@stll/anonymize-mcp`).
+ *
+ * Both surfaces are driven mostly by AI agents. To stay legible to them, every
+ * tool/command failure carries one of a closed set of machine-readable `code`s
+ * alongside a human `message` and an actionable `hint`; the MCP server returns
+ * the `{ error: { code, message, hint, retryable } }` envelope with `isError`,
+ * and the CLI maps the same `code` to a distinct process exit code. The two
+ * surfaces do not talk to each other (the CLI drives the WASM engine directly),
+ * so they share the taxonomy through this runtime-free module rather than a
+ * call path.
+ *
+ * The set is closed: a new failure mode must reuse a code here or add one
+ * deliberately (and pick a fresh exit code). This module must stay runtime-free
+ * (no wasm, no node built-ins) so any consumer can import it cheaply.
+ */
+declare const ANONYMIZE_ERROR_CODES: readonly ["validation_error", "path_not_allowed", "not_found", "unsupported_format", "output_exists", "session_unavailable", "dependency_missing", "internal_error"];
+type AnonymizeErrorCode = (typeof ANONYMIZE_ERROR_CODES)[number];
+/**
+ * The structured tool-error envelope the MCP surface returns (alongside
+ * `isError: true`). `hint` states the next step for the agent; `retryable`
+ * says whether retrying the same call unchanged could plausibly succeed.
+ */
+type AnonymizeErrorEnvelope = {
+  error: {
+    code: AnonymizeErrorCode;
+    message: string;
+    hint: string;
+    retryable: boolean;
+  };
+};
+/**
+ * Process exit codes for the CLI. `ok`/`unexpected`/`usage` are the pre-existing
+ * classes (0/1/2); the remaining classes are keyed off the error codes above so
+ * an agent can branch on the exit code without parsing stderr. Every error code
+ * maps to a distinct exit code (asserted in `agent-surface.test.ts`).
+ */
+declare const EXIT_CODES: {
+  readonly ok: 0;
+  readonly unexpected: 1;
+  readonly usage: 2;
+  readonly pathNotAllowed: 3;
+  readonly notFound: 4;
+  readonly unsupportedFormat: 5;
+  readonly outputExists: 6;
+  readonly sessionUnavailable: 7;
+  readonly dependencyMissing: 8;
+};
+type ExitCode = (typeof EXIT_CODES)[keyof typeof EXIT_CODES];
+/**
+ * Map every error code to its CLI exit class. `validation_error` shares the
+ * `usage` class (2) with the CLI's own `UsageError`: both mean "the invocation
+ * was malformed, fix the input". `internal_error` maps to the generic
+ * `unexpected` class (1).
+ */
+declare const ERROR_CODE_EXIT_MAP: Readonly<Record<AnonymizeErrorCode, ExitCode>>;
+type SurfaceErrorOptions = {
+  hint: string;
+  retryable?: boolean;
+  cause?: unknown;
+};
+/**
+ * A failure carrying a stable agent-surface `code`, a `hint`, and a `retryable`
+ * flag. Service and engine code throws this instead of a plain `Error` so both
+ * surfaces can classify it: the MCP boundary renders it as the error envelope,
+ * the CLI maps it to an exit code. Messages must stay content-free (never echo
+ * raw input text or detected entities).
+ */
+declare class AnonymizeSurfaceError extends Error {
+  readonly code: AnonymizeErrorCode;
+  readonly hint: string;
+  readonly retryable: boolean;
+  constructor(code: AnonymizeErrorCode, message: string, { hint, retryable, cause }: SurfaceErrorOptions);
+}
+declare const isAnonymizeSurfaceError: (value: unknown) => value is AnonymizeSurfaceError;
+/** Build the wire error envelope from a surface error. */
+declare const toErrorEnvelope: (error: AnonymizeSurfaceError) => AnonymizeErrorEnvelope;
+/**
+ * Classify an arbitrary thrown value into the error envelope. A
+ * `AnonymizeSurfaceError` keeps its code; anything else collapses to
+ * `internal_error` with its detail withheld, so unexpected failures never leak
+ * raw text or stack detail to the caller.
+ */
+declare const classifyToEnvelope: (error: unknown) => AnonymizeErrorEnvelope;
+/** The CLI exit code for a thrown value (non-surface errors are `unexpected`). */
+declare const exitCodeForError: (error: unknown) => ExitCode;
+//#endregion
+export { ANONYMIZE_ERROR_CODES, AnonymizeErrorCode, AnonymizeErrorEnvelope, AnonymizeSurfaceError, ERROR_CODE_EXIT_MAP, EXIT_CODES, ExitCode, classifyToEnvelope, exitCodeForError, isAnonymizeSurfaceError, toErrorEnvelope };
+//# sourceMappingURL=agent-surface.d.mts.map

package/dist/agent-surface.mjs

@@ -0,0 +1,109 @@
+//#region src/agent-surface.ts
+/**
+* The agent-facing surface contract shared by the CLI (`@stll/anonymize-cli`)
+* and the MCP server (`@stll/anonymize-mcp`).
+*
+* Both surfaces are driven mostly by AI agents. To stay legible to them, every
+* tool/command failure carries one of a closed set of machine-readable `code`s
+* alongside a human `message` and an actionable `hint`; the MCP server returns
+* the `{ error: { code, message, hint, retryable } }` envelope with `isError`,
+* and the CLI maps the same `code` to a distinct process exit code. The two
+* surfaces do not talk to each other (the CLI drives the WASM engine directly),
+* so they share the taxonomy through this runtime-free module rather than a
+* call path.
+*
+* The set is closed: a new failure mode must reuse a code here or add one
+* deliberately (and pick a fresh exit code). This module must stay runtime-free
+* (no wasm, no node built-ins) so any consumer can import it cheaply.
+*/
+const ANONYMIZE_ERROR_CODES = [
+	"validation_error",
+	"path_not_allowed",
+	"not_found",
+	"unsupported_format",
+	"output_exists",
+	"session_unavailable",
+	"dependency_missing",
+	"internal_error"
+];
+/**
+* Process exit codes for the CLI. `ok`/`unexpected`/`usage` are the pre-existing
+* classes (0/1/2); the remaining classes are keyed off the error codes above so
+* an agent can branch on the exit code without parsing stderr. Every error code
+* maps to a distinct exit code (asserted in `agent-surface.test.ts`).
+*/
+const EXIT_CODES = {
+	ok: 0,
+	unexpected: 1,
+	usage: 2,
+	pathNotAllowed: 3,
+	notFound: 4,
+	unsupportedFormat: 5,
+	outputExists: 6,
+	sessionUnavailable: 7,
+	dependencyMissing: 8
+};
+/**
+* Map every error code to its CLI exit class. `validation_error` shares the
+* `usage` class (2) with the CLI's own `UsageError`: both mean "the invocation
+* was malformed, fix the input". `internal_error` maps to the generic
+* `unexpected` class (1).
+*/
+const ERROR_CODE_EXIT_MAP = {
+	validation_error: EXIT_CODES.usage,
+	path_not_allowed: EXIT_CODES.pathNotAllowed,
+	not_found: EXIT_CODES.notFound,
+	unsupported_format: EXIT_CODES.unsupportedFormat,
+	output_exists: EXIT_CODES.outputExists,
+	session_unavailable: EXIT_CODES.sessionUnavailable,
+	dependency_missing: EXIT_CODES.dependencyMissing,
+	internal_error: EXIT_CODES.unexpected
+};
+/**
+* A failure carrying a stable agent-surface `code`, a `hint`, and a `retryable`
+* flag. Service and engine code throws this instead of a plain `Error` so both
+* surfaces can classify it: the MCP boundary renders it as the error envelope,
+* the CLI maps it to an exit code. Messages must stay content-free (never echo
+* raw input text or detected entities).
+*/
+var AnonymizeSurfaceError = class extends Error {
+	code;
+	hint;
+	retryable;
+	constructor(code, message, { hint, retryable = false, cause }) {
+		super(message, cause === void 0 ? void 0 : { cause });
+		this.name = "AnonymizeSurfaceError";
+		this.code = code;
+		this.hint = hint;
+		this.retryable = retryable;
+	}
+};
+const isAnonymizeSurfaceError = (value) => value instanceof AnonymizeSurfaceError;
+/** Build the wire error envelope from a surface error. */
+const toErrorEnvelope = (error) => ({ error: {
+	code: error.code,
+	message: error.message,
+	hint: error.hint,
+	retryable: error.retryable
+} });
+/**
+* Classify an arbitrary thrown value into the error envelope. A
+* `AnonymizeSurfaceError` keeps its code; anything else collapses to
+* `internal_error` with its detail withheld, so unexpected failures never leak
+* raw text or stack detail to the caller.
+*/
+const classifyToEnvelope = (error) => {
+	if (isAnonymizeSurfaceError(error)) return toErrorEnvelope(error);
+	return { error: {
+		code: "internal_error",
+		message: "The operation failed unexpectedly.",
+		hint: "Retry; if it persists, file it with the send_feedback tool.",
+		retryable: true
+	} };
+};
+/** The CLI exit code for a thrown value (non-surface errors are `unexpected`). */
+const exitCodeForError = (error) => isAnonymizeSurfaceError(error) ? ERROR_CODE_EXIT_MAP[error.code] : EXIT_CODES.unexpected;
+//#endregion
+export { ANONYMIZE_ERROR_CODES, AnonymizeSurfaceError, ERROR_CODE_EXIT_MAP, EXIT_CODES, classifyToEnvelope, exitCodeForError, isAnonymizeSurfaceError, toErrorEnvelope };
+
+//# sourceMappingURL=agent-surface.mjs.map

package/dist/agent-surface.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-surface.mjs","names":[],"sources":["../src/agent-surface.ts"],"sourcesContent":["/**\n * The agent-facing surface contract shared by the CLI (`@stll/anonymize-cli`)\n * and the MCP server (`@stll/anonymize-mcp`).\n *\n * Both surfaces are driven mostly by AI agents. To stay legible to them, every\n * tool/command failure carries one of a closed set of machine-readable `code`s\n * alongside a human `message` and an actionable `hint`; the MCP server returns\n * the `{ error: { code, message, hint, retryable } }` envelope with `isError`,\n * and the CLI maps the same `code` to a distinct process exit code. The two\n * surfaces do not talk to each other (the CLI drives the WASM engine directly),\n * so they share the taxonomy through this runtime-free module rather than a\n * call path.\n *\n * The set is closed: a new failure mode must reuse a code here or add one\n * deliberately (and pick a fresh exit code). This module must stay runtime-free\n * (no wasm, no node built-ins) so any consumer can import it cheaply.\n */\n\nexport const ANONYMIZE_ERROR_CODES = [\n  /** Input failed validation at the boundary (shape, type, size, arguments). */\n  \"validation_error\",\n  /** A path resolved outside the configured roots, or was not absolute. */\n  \"path_not_allowed\",\n  /** The named input path or session key does not exist. */\n  \"not_found\",\n  /** The input's extension or content is not a supported document type. */\n  \"unsupported_format\",\n  /** The output path already exists; anonymize never overwrites. */\n  \"output_exists\",\n  /** A restore needs a durable session store that is not configured. */\n  \"session_unavailable\",\n  /** An external tool (pdftoppm, tesseract) was missing or not executable. */\n  \"dependency_missing\",\n  /** An unexpected internal failure; detail is not leaked to the caller. */\n  \"internal_error\",\n] as const;\n\nexport type AnonymizeErrorCode = (typeof ANONYMIZE_ERROR_CODES)[number];\n\n/**\n * The structured tool-error envelope the MCP surface returns (alongside\n * `isError: true`). `hint` states the next step for the agent; `retryable`\n * says whether retrying the same call unchanged could plausibly succeed.\n */\nexport type AnonymizeErrorEnvelope = {\n  error: {\n    code: AnonymizeErrorCode;\n    message: string;\n    hint: string;\n    retryable: boolean;\n  };\n};\n\n/**\n * Process exit codes for the CLI. `ok`/`unexpected`/`usage` are the pre-existing\n * classes (0/1/2); the remaining classes are keyed off the error codes above so\n * an agent can branch on the exit code without parsing stderr. Every error code\n * maps to a distinct exit code (asserted in `agent-surface.test.ts`).\n */\nexport const EXIT_CODES = {\n  ok: 0,\n  unexpected: 1,\n  usage: 2,\n  pathNotAllowed: 3,\n  notFound: 4,\n  unsupportedFormat: 5,\n  outputExists: 6,\n  sessionUnavailable: 7,\n  dependencyMissing: 8,\n} as const;\n\nexport type ExitCode = (typeof EXIT_CODES)[keyof typeof EXIT_CODES];\n\n/**\n * Map every error code to its CLI exit class. `validation_error` shares the\n * `usage` class (2) with the CLI's own `UsageError`: both mean \"the invocation\n * was malformed, fix the input\". `internal_error` maps to the generic\n * `unexpected` class (1).\n */\nexport const ERROR_CODE_EXIT_MAP: Readonly<\n  Record<AnonymizeErrorCode, ExitCode>\n> = {\n  validation_error: EXIT_CODES.usage,\n  path_not_allowed: EXIT_CODES.pathNotAllowed,\n  not_found: EXIT_CODES.notFound,\n  unsupported_format: EXIT_CODES.unsupportedFormat,\n  output_exists: EXIT_CODES.outputExists,\n  session_unavailable: EXIT_CODES.sessionUnavailable,\n  dependency_missing: EXIT_CODES.dependencyMissing,\n  internal_error: EXIT_CODES.unexpected,\n};\n\ntype SurfaceErrorOptions = {\n  hint: string;\n  retryable?: boolean;\n  cause?: unknown;\n};\n\n/**\n * A failure carrying a stable agent-surface `code`, a `hint`, and a `retryable`\n * flag. Service and engine code throws this instead of a plain `Error` so both\n * surfaces can classify it: the MCP boundary renders it as the error envelope,\n * the CLI maps it to an exit code. Messages must stay content-free (never echo\n * raw input text or detected entities).\n */\nexport class AnonymizeSurfaceError extends Error {\n  readonly code: AnonymizeErrorCode;\n  readonly hint: string;\n  readonly retryable: boolean;\n\n  constructor(\n    code: AnonymizeErrorCode,\n    message: string,\n    { hint, retryable = false, cause }: SurfaceErrorOptions,\n  ) {\n    super(message, cause === undefined ? undefined : { cause });\n    this.name = \"AnonymizeSurfaceError\";\n    this.code = code;\n    this.hint = hint;\n    this.retryable = retryable;\n  }\n}\n\nexport const isAnonymizeSurfaceError = (\n  value: unknown,\n): value is AnonymizeSurfaceError => value instanceof AnonymizeSurfaceError;\n\n/** Build the wire error envelope from a surface error. */\nexport const toErrorEnvelope = (\n  error: AnonymizeSurfaceError,\n): AnonymizeErrorEnvelope => ({\n  error: {\n    code: error.code,\n    message: error.message,\n    hint: error.hint,\n    retryable: error.retryable,\n  },\n});\n\n/**\n * Classify an arbitrary thrown value into the error envelope. A\n * `AnonymizeSurfaceError` keeps its code; anything else collapses to\n * `internal_error` with its detail withheld, so unexpected failures never leak\n * raw text or stack detail to the caller.\n */\nexport const classifyToEnvelope = (error: unknown): AnonymizeErrorEnvelope => {\n  if (isAnonymizeSurfaceError(error)) {\n    return toErrorEnvelope(error);\n  }\n  return {\n    error: {\n      code: \"internal_error\",\n      message: \"The operation failed unexpectedly.\",\n      hint: \"Retry; if it persists, file it with the send_feedback tool.\",\n      retryable: true,\n    },\n  };\n};\n\n/** The CLI exit code for a thrown value (non-surface errors are `unexpected`). */\nexport const exitCodeForError = (error: unknown): ExitCode =>\n  isAnonymizeSurfaceError(error)\n    ? ERROR_CODE_EXIT_MAP[error.code]\n    : EXIT_CODES.unexpected;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,MAAa,wBAAwB;CAEnC;CAEA;CAEA;CAEA;CAEA;CAEA;CAEA;CAEA;AACF;;;;;;;AAwBA,MAAa,aAAa;CACxB,IAAI;CACJ,YAAY;CACZ,OAAO;CACP,gBAAgB;CAChB,UAAU;CACV,mBAAmB;CACnB,cAAc;CACd,oBAAoB;CACpB,mBAAmB;AACrB;;;;;;;AAUA,MAAa,sBAET;CACF,kBAAkB,WAAW;CAC7B,kBAAkB,WAAW;CAC7B,WAAW,WAAW;CACtB,oBAAoB,WAAW;CAC/B,eAAe,WAAW;CAC1B,qBAAqB,WAAW;CAChC,oBAAoB,WAAW;CAC/B,gBAAgB,WAAW;AAC7B;;;;;;;;AAeA,IAAa,wBAAb,cAA2C,MAAM;CAC/C;CACA;CACA;CAEA,YACE,MACA,SACA,EAAE,MAAM,YAAY,OAAO,SAC3B;EACA,MAAM,SAAS,UAAU,KAAA,IAAY,KAAA,IAAY,EAAE,MAAM,CAAC;EAC1D,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,KAAK,YAAY;CACnB;AACF;AAEA,MAAa,2BACX,UACmC,iBAAiB;;AAGtD,MAAa,mBACX,WAC4B,EAC5B,OAAO;CACL,MAAM,MAAM;CACZ,SAAS,MAAM;CACf,MAAM,MAAM;CACZ,WAAW,MAAM;AACnB,EACF;;;;;;;AAQA,MAAa,sBAAsB,UAA2C;CAC5E,IAAI,wBAAwB,KAAK,GAC/B,OAAO,gBAAgB,KAAK;CAE9B,OAAO,EACL,OAAO;EACL,MAAM;EACN,SAAS;EACT,MAAM;EACN,WAAW;CACb,EACF;AACF;;AAGA,MAAa,oBAAoB,UAC/B,wBAAwB,KAAK,IACzB,oBAAoB,MAAM,QAC1B,WAAW"}

package/dist/feedback-sanitize.d.mts

@@ -0,0 +1,32 @@
+//#region src/feedback-sanitize.d.ts
+/**
+ * Deterministic, regex-based redaction for agent-authored feedback text.
+ *
+ * Both agent surfaces (`@stll/anonymize-cli`, `@stll/anonymize-mcp`) can file a
+ * bug or gap via feedback. The free-text title/body can accidentally carry a
+ * client email, an id, an auth token, or an internal URL. This module strips the
+ * obvious shapes before the text is ever shown to a human or placed into a
+ * prefilled GitHub issue URL. It is a coarse safety net, not a guarantee: the
+ * real control is human approval (nothing is published until the human opens and
+ * submits the prefilled issue) and the fact that this surface never sends over
+ * the network. The heavy WASM anonymization pipeline is deliberately not run
+ * here: feedback is short free text, and regex plus human approval is the
+ * accepted baseline (it also keeps this module runtime-free).
+ *
+ * Pass order is load-bearing: JWT/secret shapes run before URL so a secret in a
+ * query string of a preserved public URL is still redacted while the URL is kept.
+ */
+type SanitizeFeedbackResult = {
+  text: string;
+  redactions: number;
+};
+/**
+ * Redact the well-known sensitive shapes from one feedback field. Returns the
+ * cleaned text and the number of substitutions made (surfaced to the human so
+ * they can judge how much was stripped). Each pass replaces with a bracketed
+ * placeholder, so a downstream pass never re-matches an earlier placeholder.
+ */
+declare const sanitizeFeedbackText: (input: string) => SanitizeFeedbackResult;
+//#endregion
+export { SanitizeFeedbackResult, sanitizeFeedbackText };
+//# sourceMappingURL=feedback-sanitize.d.mts.map

package/dist/feedback-sanitize.mjs

@@ -0,0 +1,143 @@
+//#region src/feedback-sanitize.ts
+/**
+* Deterministic, regex-based redaction for agent-authored feedback text.
+*
+* Both agent surfaces (`@stll/anonymize-cli`, `@stll/anonymize-mcp`) can file a
+* bug or gap via feedback. The free-text title/body can accidentally carry a
+* client email, an id, an auth token, or an internal URL. This module strips the
+* obvious shapes before the text is ever shown to a human or placed into a
+* prefilled GitHub issue URL. It is a coarse safety net, not a guarantee: the
+* real control is human approval (nothing is published until the human opens and
+* submits the prefilled issue) and the fact that this surface never sends over
+* the network. The heavy WASM anonymization pipeline is deliberately not run
+* here: feedback is short free text, and regex plus human approval is the
+* accepted baseline (it also keeps this module runtime-free).
+*
+* Pass order is load-bearing: JWT/secret shapes run before URL so a secret in a
+* query string of a preserved public URL is still redacted while the URL is kept.
+*/
+const REDACTED_EMAIL = "[redacted-email]";
+const REDACTED_ID = "[redacted-id]";
+const REDACTED_SECRET = "[redacted-secret]";
+const REDACTED_URL = "[redacted-url]";
+const REDACTED_IP = "[redacted-ip]";
+const hasNoPrivateUrlParts = (url) => url.username === "" && url.password === "" && url.search === "" && url.hash === "";
+/**
+* The only URL preserved verbatim is the project's own public GitHub repo, so a
+* feedback body can reference an existing issue or file without being redacted.
+* Everything else (including other hosts) is stripped.
+*/
+const isPreservedPublicUrl = (url) => {
+	if (!hasNoPrivateUrlParts(url)) return false;
+	if (url.hostname.toLowerCase() !== "github.com") return false;
+	return url.pathname === "/stella/anonymize" || url.pathname.startsWith("/stella/anonymize/");
+};
+const JWT_REGEX = /\b[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/gu;
+const HEX_SECRET_REGEX = /\b[0-9a-fA-F]{32,}\b/gu;
+const BASE64_SECRET_REGEX = /\b[A-Za-z0-9_-]{40,}={0,2}/gu;
+const URL_REGEX = /\bhttps?:\/\/[^\s<>"'`]+/giu;
+const URL_TRAILING_PUNCTUATION_REGEX = /[.,;:!?]+$/u;
+const EMAIL_REGEX = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/gu;
+const UUID_REGEX = /\b[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\b/gu;
+const IPV4_REGEX = /\b\d{1,3}(?:\.\d{1,3}){3}\b/gu;
+const IPV6_REGEX = /\b(?:[0-9a-fA-F]{1,4}:){2,7}[0-9a-fA-F]{1,4}\b|\b(?:[0-9a-fA-F]{1,4}:){1,6}:(?:[0-9a-fA-F]{1,4}:){0,5}[0-9a-fA-F]{1,4}\b/gu;
+const trimTrailingUrlPunctuation = (match) => {
+	let core = match;
+	let trailing = "";
+	const sentencePunctuation = URL_TRAILING_PUNCTUATION_REGEX.exec(core)?.[0] ?? "";
+	if (sentencePunctuation.length > 0) {
+		core = core.slice(0, -sentencePunctuation.length);
+		trailing = sentencePunctuation;
+	}
+	const pairs = [
+		{
+			open: "(",
+			close: ")"
+		},
+		{
+			open: "[",
+			close: "]"
+		},
+		{
+			open: "{",
+			close: "}"
+		}
+	];
+	let changed = true;
+	while (changed) {
+		changed = false;
+		for (const { close, open } of pairs) {
+			if (!core.endsWith(close)) continue;
+			const opens = Array.from(core).filter((char) => char === open).length;
+			if (Array.from(core).filter((char) => char === close).length <= opens) continue;
+			core = core.slice(0, -close.length);
+			trailing = `${close}${trailing}`;
+			changed = true;
+		}
+	}
+	return {
+		core,
+		trailing
+	};
+};
+/**
+* Redact the well-known sensitive shapes from one feedback field. Returns the
+* cleaned text and the number of substitutions made (surfaced to the human so
+* they can judge how much was stripped). Each pass replaces with a bracketed
+* placeholder, so a downstream pass never re-matches an earlier placeholder.
+*/
+const sanitizeFeedbackText = (input) => {
+	let redactions = 0;
+	const bump = () => {
+		redactions += 1;
+	};
+	let text = input;
+	text = text.replace(JWT_REGEX, () => {
+		bump();
+		return REDACTED_SECRET;
+	});
+	text = text.replace(HEX_SECRET_REGEX, () => {
+		bump();
+		return REDACTED_SECRET;
+	});
+	text = text.replace(BASE64_SECRET_REGEX, () => {
+		bump();
+		return REDACTED_SECRET;
+	});
+	text = text.replace(URL_REGEX, (match) => {
+		const { core, trailing } = trimTrailingUrlPunctuation(match);
+		let url;
+		try {
+			url = new URL(core);
+		} catch {
+			return match;
+		}
+		if (isPreservedPublicUrl(url)) return match;
+		bump();
+		return `${REDACTED_URL}${trailing}`;
+	});
+	text = text.replace(EMAIL_REGEX, () => {
+		bump();
+		return REDACTED_EMAIL;
+	});
+	text = text.replace(UUID_REGEX, () => {
+		bump();
+		return REDACTED_ID;
+	});
+	text = text.replace(IPV4_REGEX, () => {
+		bump();
+		return REDACTED_IP;
+	});
+	text = text.replace(IPV6_REGEX, () => {
+		bump();
+		return REDACTED_IP;
+	});
+	return {
+		text,
+		redactions
+	};
+};
+//#endregion
+export { sanitizeFeedbackText };
+
+//# sourceMappingURL=feedback-sanitize.mjs.map

package/dist/feedback-sanitize.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-sanitize.mjs","names":[],"sources":["../src/feedback-sanitize.ts"],"sourcesContent":["/**\n * Deterministic, regex-based redaction for agent-authored feedback text.\n *\n * Both agent surfaces (`@stll/anonymize-cli`, `@stll/anonymize-mcp`) can file a\n * bug or gap via feedback. The free-text title/body can accidentally carry a\n * client email, an id, an auth token, or an internal URL. This module strips the\n * obvious shapes before the text is ever shown to a human or placed into a\n * prefilled GitHub issue URL. It is a coarse safety net, not a guarantee: the\n * real control is human approval (nothing is published until the human opens and\n * submits the prefilled issue) and the fact that this surface never sends over\n * the network. The heavy WASM anonymization pipeline is deliberately not run\n * here: feedback is short free text, and regex plus human approval is the\n * accepted baseline (it also keeps this module runtime-free).\n *\n * Pass order is load-bearing: JWT/secret shapes run before URL so a secret in a\n * query string of a preserved public URL is still redacted while the URL is kept.\n */\n\nconst REDACTED_EMAIL = \"[redacted-email]\";\nconst REDACTED_ID = \"[redacted-id]\";\nconst REDACTED_SECRET = \"[redacted-secret]\";\nconst REDACTED_URL = \"[redacted-url]\";\nconst REDACTED_IP = \"[redacted-ip]\";\n\nconst hasNoPrivateUrlParts = (url: URL): boolean =>\n  url.username === \"\" &&\n  url.password === \"\" &&\n  url.search === \"\" &&\n  url.hash === \"\";\n\n/**\n * The only URL preserved verbatim is the project's own public GitHub repo, so a\n * feedback body can reference an existing issue or file without being redacted.\n * Everything else (including other hosts) is stripped.\n */\nconst isPreservedPublicUrl = (url: URL): boolean => {\n  if (!hasNoPrivateUrlParts(url)) {\n    return false;\n  }\n  if (url.hostname.toLowerCase() !== \"github.com\") {\n    return false;\n  }\n  return (\n    url.pathname === \"/stella/anonymize\" ||\n    url.pathname.startsWith(\"/stella/anonymize/\")\n  );\n};\n\n// Three dot-separated base64url segments, each long enough to be a real token\n// (>= 10 chars), so version strings (\"1.2.3\") and IPv4 literals never match.\nconst JWT_REGEX =\n  /\\b[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}\\b/gu;\n\n// Long hex blob (>= 32 chars): API keys, hashes, un-hyphenated ids.\nconst HEX_SECRET_REGEX = /\\b[0-9a-fA-F]{32,}\\b/gu;\n\n// Long base64url blob (>= 40 chars): opaque access tokens, secrets. The\n// base64url alphabet (no `+` or `/`) is used on purpose: including `/` would let\n// this pass swallow whole URL path segments, and modern tokens (GitHub PATs, JWT\n// parts, most API keys) are base64url anyway. A hex secret is caught by\n// HEX_SECRET_REGEX above.\nconst BASE64_SECRET_REGEX = /\\b[A-Za-z0-9_-]{40,}={0,2}/gu;\n\n// Absolute http(s) URL. Parentheses/brackets are valid path characters and are\n// intentionally included; unmatched closing wrappers and sentence punctuation\n// are trimmed in the replacer.\nconst URL_REGEX = /\\bhttps?:\\/\\/[^\\s<>\"'`]+/giu;\nconst URL_TRAILING_PUNCTUATION_REGEX = /[.,;:!?]+$/u;\n\nconst EMAIL_REGEX = /\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}\\b/gu;\n\nconst UUID_REGEX =\n  /\\b[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\\b/gu;\n\nconst IPV4_REGEX = /\\b\\d{1,3}(?:\\.\\d{1,3}){3}\\b/gu;\n\n// Full-form and mid/tail-compressed IPv6. Fully leading-compressed forms\n// (\"::1\") are intentionally out of scope: requiring at least one leading hex\n// group keeps code tokens like `std::vector` from being misread as an address.\nconst IPV6_REGEX =\n  /\\b(?:[0-9a-fA-F]{1,4}:){2,7}[0-9a-fA-F]{1,4}\\b|\\b(?:[0-9a-fA-F]{1,4}:){1,6}:(?:[0-9a-fA-F]{1,4}:){0,5}[0-9a-fA-F]{1,4}\\b/gu;\n\nexport type SanitizeFeedbackResult = { text: string; redactions: number };\n\nconst trimTrailingUrlPunctuation = (\n  match: string,\n): { core: string; trailing: string } => {\n  let core = match;\n  let trailing = \"\";\n\n  const sentencePunctuation =\n    URL_TRAILING_PUNCTUATION_REGEX.exec(core)?.[0] ?? \"\";\n  if (sentencePunctuation.length > 0) {\n    core = core.slice(0, -sentencePunctuation.length);\n    trailing = sentencePunctuation;\n  }\n\n  const pairs = [\n    { open: \"(\", close: \")\" },\n    { open: \"[\", close: \"]\" },\n    { open: \"{\", close: \"}\" },\n  ] as const;\n  let changed = true;\n  while (changed) {\n    changed = false;\n    for (const { close, open } of pairs) {\n      if (!core.endsWith(close)) {\n        continue;\n      }\n      const opens = Array.from(core).filter((char) => char === open).length;\n      const closes = Array.from(core).filter((char) => char === close).length;\n      if (closes <= opens) {\n        continue;\n      }\n      core = core.slice(0, -close.length);\n      trailing = `${close}${trailing}`;\n      changed = true;\n    }\n  }\n\n  return { core, trailing };\n};\n\n/**\n * Redact the well-known sensitive shapes from one feedback field. Returns the\n * cleaned text and the number of substitutions made (surfaced to the human so\n * they can judge how much was stripped). Each pass replaces with a bracketed\n * placeholder, so a downstream pass never re-matches an earlier placeholder.\n */\nexport const sanitizeFeedbackText = (input: string): SanitizeFeedbackResult => {\n  let redactions = 0;\n  const bump = (): void => {\n    redactions += 1;\n  };\n\n  let text = input;\n\n  text = text.replace(JWT_REGEX, () => {\n    bump();\n    return REDACTED_SECRET;\n  });\n  text = text.replace(HEX_SECRET_REGEX, () => {\n    bump();\n    return REDACTED_SECRET;\n  });\n  text = text.replace(BASE64_SECRET_REGEX, () => {\n    bump();\n    return REDACTED_SECRET;\n  });\n  text = text.replace(URL_REGEX, (match) => {\n    const { core, trailing } = trimTrailingUrlPunctuation(match);\n    let url: URL;\n    try {\n      url = new URL(core);\n    } catch {\n      // Not a parseable URL; leave it untouched rather than guess.\n      return match;\n    }\n    if (isPreservedPublicUrl(url)) {\n      return match;\n    }\n    bump();\n    return `${REDACTED_URL}${trailing}`;\n  });\n  text = text.replace(EMAIL_REGEX, () => {\n    bump();\n    return REDACTED_EMAIL;\n  });\n  text = text.replace(UUID_REGEX, () => {\n    bump();\n    return REDACTED_ID;\n  });\n  text = text.replace(IPV4_REGEX, () => {\n    bump();\n    return REDACTED_IP;\n  });\n  text = text.replace(IPV6_REGEX, () => {\n    bump();\n    return REDACTED_IP;\n  });\n\n  return { text, redactions };\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,MAAM,iBAAiB;AACvB,MAAM,cAAc;AACpB,MAAM,kBAAkB;AACxB,MAAM,eAAe;AACrB,MAAM,cAAc;AAEpB,MAAM,wBAAwB,QAC5B,IAAI,aAAa,MACjB,IAAI,aAAa,MACjB,IAAI,WAAW,MACf,IAAI,SAAS;;;;;;AAOf,MAAM,wBAAwB,QAAsB;CAClD,IAAI,CAAC,qBAAqB,GAAG,GAC3B,OAAO;CAET,IAAI,IAAI,SAAS,YAAY,MAAM,cACjC,OAAO;CAET,OACE,IAAI,aAAa,uBACjB,IAAI,SAAS,WAAW,oBAAoB;AAEhD;AAIA,MAAM,YACJ;AAGF,MAAM,mBAAmB;AAOzB,MAAM,sBAAsB;AAK5B,MAAM,YAAY;AAClB,MAAM,iCAAiC;AAEvC,MAAM,cAAc;AAEpB,MAAM,aACJ;AAEF,MAAM,aAAa;AAKnB,MAAM,aACJ;AAIF,MAAM,8BACJ,UACuC;CACvC,IAAI,OAAO;CACX,IAAI,WAAW;CAEf,MAAM,sBACJ,+BAA+B,KAAK,IAAI,CAAC,GAAG,MAAM;CACpD,IAAI,oBAAoB,SAAS,GAAG;EAClC,OAAO,KAAK,MAAM,GAAG,CAAC,oBAAoB,MAAM;EAChD,WAAW;CACb;CAEA,MAAM,QAAQ;EACZ;GAAE,MAAM;GAAK,OAAO;EAAI;EACxB;GAAE,MAAM;GAAK,OAAO;EAAI;EACxB;GAAE,MAAM;GAAK,OAAO;EAAI;CAC1B;CACA,IAAI,UAAU;CACd,OAAO,SAAS;EACd,UAAU;EACV,KAAK,MAAM,EAAE,OAAO,UAAU,OAAO;GACnC,IAAI,CAAC,KAAK,SAAS,KAAK,GACtB;GAEF,MAAM,QAAQ,MAAM,KAAK,IAAI,CAAC,CAAC,QAAQ,SAAS,SAAS,IAAI,CAAC,CAAC;GAE/D,IADe,MAAM,KAAK,IAAI,CAAC,CAAC,QAAQ,SAAS,SAAS,KAAK,CAAC,CAAC,UACnD,OACZ;GAEF,OAAO,KAAK,MAAM,GAAG,CAAC,MAAM,MAAM;GAClC,WAAW,GAAG,QAAQ;GACtB,UAAU;EACZ;CACF;CAEA,OAAO;EAAE;EAAM;CAAS;AAC1B;;;;;;;AAQA,MAAa,wBAAwB,UAA0C;CAC7E,IAAI,aAAa;CACjB,MAAM,aAAmB;EACvB,cAAc;CAChB;CAEA,IAAI,OAAO;CAEX,OAAO,KAAK,QAAQ,iBAAiB;EACnC,KAAK;EACL,OAAO;CACT,CAAC;CACD,OAAO,KAAK,QAAQ,wBAAwB;EAC1C,KAAK;EACL,OAAO;CACT,CAAC;CACD,OAAO,KAAK,QAAQ,2BAA2B;EAC7C,KAAK;EACL,OAAO;CACT,CAAC;CACD,OAAO,KAAK,QAAQ,YAAY,UAAU;EACxC,MAAM,EAAE,MAAM,aAAa,2BAA2B,KAAK;EAC3D,IAAI;EACJ,IAAI;GACF,MAAM,IAAI,IAAI,IAAI;EACpB,QAAQ;GAEN,OAAO;EACT;EACA,IAAI,qBAAqB,GAAG,GAC1B,OAAO;EAET,KAAK;EACL,OAAO,GAAG,eAAe;CAC3B,CAAC;CACD,OAAO,KAAK,QAAQ,mBAAmB;EACrC,KAAK;EACL,OAAO;CACT,CAAC;CACD,OAAO,KAAK,QAAQ,kBAAkB;EACpC,KAAK;EACL,OAAO;CACT,CAAC;CACD,OAAO,KAAK,QAAQ,kBAAkB;EACpC,KAAK;EACL,OAAO;CACT,CAAC;CACD,OAAO,KAAK,QAAQ,kBAAkB;EACpC,KAAK;EACL,OAAO;CACT,CAAC;CAED,OAAO;EAAE;EAAM;CAAW;AAC5B"}

package/dist/feedback.d.mts

@@ -0,0 +1,39 @@
+//#region src/feedback.d.ts
+/**
+ * Feedback submission builder shared by both agent surfaces.
+ *
+ * anonymize runs fully local and makes no network calls, so feedback is never
+ * sent from here. Instead this module sanitizes the agent-authored title/body
+ * and returns a prefilled GitHub new-issue URL (plus an equivalent `gh` command)
+ * that a human opens and submits under their own account. The human approval and
+ * the absence of any network call are the real controls; the sanitizer is a
+ * coarse safety net. This module stays runtime-free.
+ */
+declare const FEEDBACK_KINDS: readonly ["bug", "feature_request", "docs", "other"];
+type FeedbackKind = (typeof FEEDBACK_KINDS)[number];
+declare const MAX_FEEDBACK_TITLE_CHARS = 200;
+declare const MAX_FEEDBACK_BODY_CHARS = 8000;
+type FeedbackInput = {
+  kind: FeedbackKind;
+  title: string;
+  body: string;
+};
+type FeedbackSubmission = {
+  title: string;
+  /** Fully sanitized body with a provenance footer; nothing is lost to URL truncation. */
+  sanitizedBody: string;
+  /** Total redactions across title and body, for the human to gauge stripping. */
+  redactions: number;
+  /** Prefilled new-issue URL the human opens and submits. */
+  issueUrl: string;
+  /** Equivalent `gh` command, safe to paste verbatim. */
+  ghCommand: string;
+};
+/**
+ * Sanitize the title and body, then build the prefilled GitHub submission. Pure:
+ * no I/O and no network. The caller presents the result for a human to submit.
+ */
+declare const buildFeedbackSubmission: ({ body, kind, title }: FeedbackInput) => FeedbackSubmission;
+//#endregion
+export { FEEDBACK_KINDS, FeedbackKind, FeedbackSubmission, MAX_FEEDBACK_BODY_CHARS, MAX_FEEDBACK_TITLE_CHARS, buildFeedbackSubmission };
+//# sourceMappingURL=feedback.d.mts.map

package/dist/feedback.mjs

@@ -0,0 +1,84 @@
+import { sanitizeFeedbackText } from "./feedback-sanitize.mjs";
+//#region src/feedback.ts
+/**
+* Feedback submission builder shared by both agent surfaces.
+*
+* anonymize runs fully local and makes no network calls, so feedback is never
+* sent from here. Instead this module sanitizes the agent-authored title/body
+* and returns a prefilled GitHub new-issue URL (plus an equivalent `gh` command)
+* that a human opens and submits under their own account. The human approval and
+* the absence of any network call are the real controls; the sanitizer is a
+* coarse safety net. This module stays runtime-free.
+*/
+const FEEDBACK_KINDS = [
+	"bug",
+	"feature_request",
+	"docs",
+	"other"
+];
+const MAX_FEEDBACK_TITLE_CHARS = 200;
+const MAX_FEEDBACK_BODY_CHARS = 8e3;
+const GITHUB_REPO = "stella/anonymize";
+const GITHUB_ISSUE_LABEL = "agent-feedback";
+const GITHUB_NEW_ISSUE_URL = `https://github.com/${GITHUB_REPO}/issues/new`;
+const MAX_GITHUB_ISSUE_URL_CHARS = 7500;
+const GITHUB_BODY_TRUNCATION_MARKER = "\n\n[body truncated — paste the rest manually]";
+const HIGH_SURROGATE_START = 55296;
+const HIGH_SURROGATE_END = 56319;
+const composeFeedbackBody = (body, kind) => `${body}\n\n---\n_Filed via stella-anonymize feedback (agent-assisted, sanitized). Kind: ${kind}._`;
+const buildGithubIssueUrl = (title, body) => {
+	const params = new URLSearchParams({
+		title,
+		body,
+		labels: GITHUB_ISSUE_LABEL
+	});
+	return `${GITHUB_NEW_ISSUE_URL}?${params.toString()}`;
+};
+const sliceWithoutDanglingHighSurrogate = (value, end) => {
+	const sliced = value.slice(0, end);
+	const last = sliced.codePointAt(sliced.length - 1);
+	return last !== void 0 && last >= HIGH_SURROGATE_START && last <= HIGH_SURROGATE_END ? sliced.slice(0, -1) : sliced;
+};
+/**
+* Prefilled issue URL bounded to `MAX_GITHUB_ISSUE_URL_CHARS`. When the full
+* body overflows, the URL carries a truncated body with a paste-the-rest marker;
+* the caller still returns the full sanitized body separately.
+*/
+const buildBoundedGithubIssueUrl = (title, composedBody) => {
+	const full = buildGithubIssueUrl(title, composedBody);
+	if (full.length <= MAX_GITHUB_ISSUE_URL_CHARS) return full;
+	for (let keep = composedBody.length; keep > 0; keep -= 128) {
+		const candidate = buildGithubIssueUrl(title, sliceWithoutDanglingHighSurrogate(composedBody, keep) + GITHUB_BODY_TRUNCATION_MARKER);
+		if (candidate.length <= MAX_GITHUB_ISSUE_URL_CHARS) return candidate;
+	}
+	return buildGithubIssueUrl(title, GITHUB_BODY_TRUNCATION_MARKER);
+};
+/** POSIX single-quote escaping so the gh command is safe to paste verbatim. */
+const shellSingleQuote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+const buildGhCommand = (title, body) => [
+	"gh issue create",
+	`--repo ${GITHUB_REPO}`,
+	`--label ${GITHUB_ISSUE_LABEL}`,
+	`--title ${shellSingleQuote(title)}`,
+	`--body ${shellSingleQuote(body)}`
+].join(" ");
+/**
+* Sanitize the title and body, then build the prefilled GitHub submission. Pure:
+* no I/O and no network. The caller presents the result for a human to submit.
+*/
+const buildFeedbackSubmission = ({ body, kind, title }) => {
+	const cleanTitle = sanitizeFeedbackText(title);
+	const cleanBody = sanitizeFeedbackText(body);
+	const composedBody = composeFeedbackBody(cleanBody.text, kind);
+	return {
+		title: cleanTitle.text,
+		sanitizedBody: composedBody,
+		redactions: cleanTitle.redactions + cleanBody.redactions,
+		issueUrl: buildBoundedGithubIssueUrl(cleanTitle.text, composedBody),
+		ghCommand: buildGhCommand(cleanTitle.text, composedBody)
+	};
+};
+//#endregion
+export { FEEDBACK_KINDS, MAX_FEEDBACK_BODY_CHARS, MAX_FEEDBACK_TITLE_CHARS, buildFeedbackSubmission };
+
+//# sourceMappingURL=feedback.mjs.map

package/dist/feedback.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback.mjs","names":[],"sources":["../src/feedback.ts"],"sourcesContent":["/**\n * Feedback submission builder shared by both agent surfaces.\n *\n * anonymize runs fully local and makes no network calls, so feedback is never\n * sent from here. Instead this module sanitizes the agent-authored title/body\n * and returns a prefilled GitHub new-issue URL (plus an equivalent `gh` command)\n * that a human opens and submits under their own account. The human approval and\n * the absence of any network call are the real controls; the sanitizer is a\n * coarse safety net. This module stays runtime-free.\n */\n\nimport {\n  sanitizeFeedbackText,\n  type SanitizeFeedbackResult,\n} from \"./feedback-sanitize\";\n\nexport const FEEDBACK_KINDS = [\n  \"bug\",\n  \"feature_request\",\n  \"docs\",\n  \"other\",\n] as const;\nexport type FeedbackKind = (typeof FEEDBACK_KINDS)[number];\n\nexport const MAX_FEEDBACK_TITLE_CHARS = 200;\nexport const MAX_FEEDBACK_BODY_CHARS = 8000;\n\nconst GITHUB_REPO = \"stella/anonymize\";\nconst GITHUB_ISSUE_LABEL = \"agent-feedback\";\nconst GITHUB_NEW_ISSUE_URL = `https://github.com/${GITHUB_REPO}/issues/new`;\n// A conservative cap: browsers accept much longer, but keeping the prefilled URL\n// small avoids client-side truncation surprises. The full sanitized body is\n// always returned separately, so nothing is lost.\nconst MAX_GITHUB_ISSUE_URL_CHARS = 7500;\nconst GITHUB_BODY_TRUNCATION_MARKER =\n  \"\\n\\n[body truncated — paste the rest manually]\";\nconst HIGH_SURROGATE_START = 55_296;\nconst HIGH_SURROGATE_END = 56_319;\n\ntype FeedbackInput = {\n  kind: FeedbackKind;\n  title: string;\n  body: string;\n};\n\nexport type FeedbackSubmission = {\n  title: string;\n  /** Fully sanitized body with a provenance footer; nothing is lost to URL truncation. */\n  sanitizedBody: string;\n  /** Total redactions across title and body, for the human to gauge stripping. */\n  redactions: number;\n  /** Prefilled new-issue URL the human opens and submits. */\n  issueUrl: string;\n  /** Equivalent `gh` command, safe to paste verbatim. */\n  ghCommand: string;\n};\n\nconst composeFeedbackBody = (body: string, kind: FeedbackKind): string =>\n  `${body}\\n\\n---\\n_Filed via stella-anonymize feedback (agent-assisted, sanitized). Kind: ${kind}._`;\n\nconst buildGithubIssueUrl = (title: string, body: string): string => {\n  const params = new URLSearchParams({\n    title,\n    body,\n    labels: GITHUB_ISSUE_LABEL,\n  });\n  return `${GITHUB_NEW_ISSUE_URL}?${params.toString()}`;\n};\n\nconst sliceWithoutDanglingHighSurrogate = (\n  value: string,\n  end: number,\n): string => {\n  const sliced = value.slice(0, end);\n  const last = sliced.codePointAt(sliced.length - 1);\n  return last !== undefined &&\n    last >= HIGH_SURROGATE_START &&\n    last <= HIGH_SURROGATE_END\n    ? sliced.slice(0, -1)\n    : sliced;\n};\n\n/**\n * Prefilled issue URL bounded to `MAX_GITHUB_ISSUE_URL_CHARS`. When the full\n * body overflows, the URL carries a truncated body with a paste-the-rest marker;\n * the caller still returns the full sanitized body separately.\n */\nconst buildBoundedGithubIssueUrl = (\n  title: string,\n  composedBody: string,\n): string => {\n  const full = buildGithubIssueUrl(title, composedBody);\n  if (full.length <= MAX_GITHUB_ISSUE_URL_CHARS) {\n    return full;\n  }\n  for (let keep = composedBody.length; keep > 0; keep -= 128) {\n    const candidate = buildGithubIssueUrl(\n      title,\n      sliceWithoutDanglingHighSurrogate(composedBody, keep) +\n        GITHUB_BODY_TRUNCATION_MARKER,\n    );\n    if (candidate.length <= MAX_GITHUB_ISSUE_URL_CHARS) {\n      return candidate;\n    }\n  }\n  // Even an empty body overflows (an outsized title): fall back to marker-only.\n  return buildGithubIssueUrl(title, GITHUB_BODY_TRUNCATION_MARKER);\n};\n\n/** POSIX single-quote escaping so the gh command is safe to paste verbatim. */\nconst shellSingleQuote = (value: string): string =>\n  `'${value.replaceAll(\"'\", \"'\\\\''\")}'`;\n\nconst buildGhCommand = (title: string, body: string): string =>\n  [\n    \"gh issue create\",\n    `--repo ${GITHUB_REPO}`,\n    `--label ${GITHUB_ISSUE_LABEL}`,\n    `--title ${shellSingleQuote(title)}`,\n    `--body ${shellSingleQuote(body)}`,\n  ].join(\" \");\n\n/**\n * Sanitize the title and body, then build the prefilled GitHub submission. Pure:\n * no I/O and no network. The caller presents the result for a human to submit.\n */\nexport const buildFeedbackSubmission = ({\n  body,\n  kind,\n  title,\n}: FeedbackInput): FeedbackSubmission => {\n  const cleanTitle: SanitizeFeedbackResult = sanitizeFeedbackText(title);\n  const cleanBody = sanitizeFeedbackText(body);\n  const composedBody = composeFeedbackBody(cleanBody.text, kind);\n  return {\n    title: cleanTitle.text,\n    sanitizedBody: composedBody,\n    redactions: cleanTitle.redactions + cleanBody.redactions,\n    issueUrl: buildBoundedGithubIssueUrl(cleanTitle.text, composedBody),\n    ghCommand: buildGhCommand(cleanTitle.text, composedBody),\n  };\n};\n"],"mappings":";;;;;;;;;;;;AAgBA,MAAa,iBAAiB;CAC5B;CACA;CACA;CACA;AACF;AAGA,MAAa,2BAA2B;AACxC,MAAa,0BAA0B;AAEvC,MAAM,cAAc;AACpB,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB,sBAAsB,YAAY;AAI/D,MAAM,6BAA6B;AACnC,MAAM,gCACJ;AACF,MAAM,uBAAuB;AAC7B,MAAM,qBAAqB;AAoB3B,MAAM,uBAAuB,MAAc,SACzC,GAAG,KAAK,mFAAmF,KAAK;AAElG,MAAM,uBAAuB,OAAe,SAAyB;CACnE,MAAM,SAAS,IAAI,gBAAgB;EACjC;EACA;EACA,QAAQ;CACV,CAAC;CACD,OAAO,GAAG,qBAAqB,GAAG,OAAO,SAAS;AACpD;AAEA,MAAM,qCACJ,OACA,QACW;CACX,MAAM,SAAS,MAAM,MAAM,GAAG,GAAG;CACjC,MAAM,OAAO,OAAO,YAAY,OAAO,SAAS,CAAC;CACjD,OAAO,SAAS,KAAA,KACd,QAAQ,wBACR,QAAQ,qBACN,OAAO,MAAM,GAAG,EAAE,IAClB;AACN;;;;;;AAOA,MAAM,8BACJ,OACA,iBACW;CACX,MAAM,OAAO,oBAAoB,OAAO,YAAY;CACpD,IAAI,KAAK,UAAU,4BACjB,OAAO;CAET,KAAK,IAAI,OAAO,aAAa,QAAQ,OAAO,GAAG,QAAQ,KAAK;EAC1D,MAAM,YAAY,oBAChB,OACA,kCAAkC,cAAc,IAAI,IAClD,6BACJ;EACA,IAAI,UAAU,UAAU,4BACtB,OAAO;CAEX;CAEA,OAAO,oBAAoB,OAAO,6BAA6B;AACjE;;AAGA,MAAM,oBAAoB,UACxB,IAAI,MAAM,WAAW,KAAK,OAAO,EAAE;AAErC,MAAM,kBAAkB,OAAe,SACrC;CACE;CACA,UAAU;CACV,WAAW;CACX,WAAW,iBAAiB,KAAK;CACjC,UAAU,iBAAiB,IAAI;AACjC,CAAC,CAAC,KAAK,GAAG;;;;;AAMZ,MAAa,2BAA2B,EACtC,MACA,MACA,YACuC;CACvC,MAAM,aAAqC,qBAAqB,KAAK;CACrE,MAAM,YAAY,qBAAqB,IAAI;CAC3C,MAAM,eAAe,oBAAoB,UAAU,MAAM,IAAI;CAC7D,OAAO;EACL,OAAO,WAAW;EAClB,eAAe;EACf,YAAY,WAAW,aAAa,UAAU;EAC9C,UAAU,2BAA2B,WAAW,MAAM,YAAY;EAClE,WAAW,eAAe,WAAW,MAAM,YAAY;CACzD;AACF"}

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import { a as DetectionSource, c as ENTITY_SELECTIONS, d as EntitySelection, f as OPERATOR_TYPES, i as DefaultEntityLabel, l as EntityCapability, n as DETECTION_SOURCES, o as ENTITY_CAPABILITIES, p as OperatorType, r as DETECTOR_PRIORITY, s as ENTITY_LABELS, t as DEFAULT_ENTITY_LABELS, u as EntityLabel } from "./constants2.mjs";
 import { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, CapabilityManifest, CapabilityParityProfile, CapabilityRuntime, CapabilitySurface, CapabilitySurfaceId } from "./capabilities.mjs";
 import { $ as SharedNativeRedactTextOptions, A as NativeResultEventCallback, At as PipelineConfig, B as NativeSessionStatus, C as NativeOperatorConfig, Ct as CustomRegexPattern, D as NativePreparedSearchBinding, Dt as Entity, E as NativePreparedRedactionSessionBinding, Et as DictionaryMeta, F as NativeSessionCallerRedactionPlanOptions, Ft as TriggerGroupConfig, G as PreparedNativePipeline, H as NativeTextReplacement, I as NativeSessionDeletionSummary, It as TriggerRule, J as PreparedSearch, K as PreparedNativeRedactionSession, L as NativeSessionLifecycle, Lt as TriggerStrategy, M as NativeSearchPackageOptions, Mt as ReviewDecision, N as NativeSessionBlockRedactionPlan, Nt as ReviewedEntity, O as NativePreparedSessionRedactionPlanBinding, Ot as GazetteerEntry, P as NativeSessionCallerRedactionInput, Pt as TriggerExtension, Q as SharedNativeRedactTextJsonOptions, R as NativeSessionMetadata, Rt as TriggerValidation, S as NativeOpenSessionArchiveOptions, St as CustomDenyListEntry, T as NativePipelineFromPackageOptions, Tt as Dictionaries, U as PreparedAnonymizer, V as NativeStaticRedactionResult, W as PreparedNativeAnonymizer, X as SharedNativeDiagnosticsStreamJsonOptions, Y as SharedNativeDiagnosticsJsonOptions, Z as SharedNativePreparedPackageOptions, _ as NativeCallerDetection, a as EXTERNAL_DETECTION_DOCUMENT_MAX_BYTES, at as createNativeAnonymizerFromPackage, b as NativeDiagnosticsBatchCallback, c as EXTERNAL_DETECTION_MAX_METADATA_BYTES, d as ExternalDetectionBatch, dt as getNativeBindingVersion, et as SharedNativeRedactTextStreamJsonOptions, f as ExternalDetectionOffsetUnit, g as NativeBindingVersionOptions, h as NativeAnonymizerFromPackageOptions, ht as prepareNativeSearchPackage, i as EXTERNAL_DETECTION_BATCH_VERSION, it as createNativeAnonymizerFromConfig, j as NativeSearchPackageInput, jt as RedactionResult, k as NativeRedactionResult, kt as OperatorConfig, l as EXTERNAL_DETECTION_OFFSET_UNITS, lt as encodeNativeSearchConfig, m as NativeAnonymizerFromConfigOptions, n as ConvertExternalDetectionBatchOptions, nt as assertNativeBindingVersion, o as EXTERNAL_DETECTION_MAX_DETECTIONS, ot as createNativePipelineFromPackage, p as NativeAnonymizeBinding, q as PreparedNativeSessionRedactionPlan, r as EXTERNAL_DETECTION_BATCH_MAX_BYTES, s as EXTERNAL_DETECTION_MAX_LABEL_MAPPINGS, t as CALLER_DETECTION_CONTRACT_VERSION, tt as SharedNativeSearchPackageOptions, u as EXTERNAL_DETECTION_PROVIDER_ID_MAX_BYTES, ut as encodeNativeSearchConfigInput, v as NativeCallerRedactionOptions, w as NativePipelineEntity, wt as DenyListCategory, x as NativeNormalizeOptions, xt as AnonymisationOperator, y as NativeCreateSessionWithLifecycleOptions, z as NativeSessionRedactionAtOptions, zt as NativePreparedSearchConfig } from "./native.mjs";
-import { A as readDefaultNativePipelinePackageFile, B as redact_text_json, C as load_prepared_package_file, D as preloadDefaultNativePipelineAsync, E as preloadDefaultNativePipeline, F as redactDefaultText, G as NativePipelineCompatibility, H as summary_diagnostics_json, I as redactDefaultTextJson, J as assertNativePipelineSupported, K as NativePipelinePackageOptions, L as redact_default_text, M as readNativePipelinePackageFile, N as readNativePipelinePackageFileAsync, O as preload_default_native_pipeline, P as read_default_native_pipeline_package_file, Q as prepareNativePipelinePackage, R as redact_default_text_json, S as load_prepared_package, T as normalize_for_search, U as DEFAULT_NATIVE_PIPELINE_CONFIG, V as redact_text_stream_json, W as NativePipelineBuildOptions, X as getNativePipelineCompatibility, Y as createNativePipelineFromConfig, Z as prepareNativePipelineConfig, _ as diagnostics_json, a as LoadNativeBindingOptions, b as get_default_native_pipeline, c as NativeRequire, d as availableDefaultNativePipelineLanguages, f as available_default_native_pipeline_languages, g as create_native_pipeline_from_default_package, h as createNativePipelineFromPackageFile, i as DefaultNativePipelineWarmup, j as readDefaultNativePipelinePackageFileAsync, k as prepare_search_package, l as NativeSdkOptions, m as createNativePipelineFromDefaultPackage, n as DefaultNativePipelinePackageFileOptions, o as NativeLibc, p as convert_external_detection_batch, q as NativePipelineUnsupportedFeature, r as DefaultNativePipelinePackageOptions, s as NativePipelinePackageFileOptions, t as DEFAULT_NATIVE_PIPELINE_WARMUPS, u as NativeSdkPackageOptions, v as diagnostics_stream_json, w as native_package_version, x as loadNativeAnonymizeBinding, y as getDefaultNativePipeline, z as redact_text } from "./native-node.mjs";
+import { $ as prepareNativePipelinePackage, A as readDefaultNativePipelinePackageFile, B as redact_text_json, C as load_prepared_package_file, D as preloadDefaultNativePipelineAsync, E as preloadDefaultNativePipeline, F as redactDefaultText, G as NativePipelineBuildOptions, H as setNativeBindingOverride, I as redactDefaultTextJson, J as NativePipelineUnsupportedFeature, K as NativePipelineCompatibility, L as redact_default_text, M as readNativePipelinePackageFile, N as readNativePipelinePackageFileAsync, O as preload_default_native_pipeline, P as read_default_native_pipeline_package_file, Q as prepareNativePipelineConfig, R as redact_default_text_json, S as load_prepared_package, T as normalize_for_search, U as summary_diagnostics_json, V as redact_text_stream_json, W as DEFAULT_NATIVE_PIPELINE_CONFIG, X as createNativePipelineFromConfig, Y as assertNativePipelineSupported, Z as getNativePipelineCompatibility, _ as diagnostics_json, a as LoadNativeBindingOptions, b as get_default_native_pipeline, c as NativeRequire, d as availableDefaultNativePipelineLanguages, f as available_default_native_pipeline_languages, g as create_native_pipeline_from_default_package, h as createNativePipelineFromPackageFile, i as DefaultNativePipelineWarmup, j as readDefaultNativePipelinePackageFileAsync, k as prepare_search_package, l as NativeSdkOptions, m as createNativePipelineFromDefaultPackage, n as DefaultNativePipelinePackageFileOptions, o as NativeLibc, p as convert_external_detection_batch, q as NativePipelinePackageOptions, r as DefaultNativePipelinePackageOptions, s as NativePipelinePackageFileOptions, t as DEFAULT_NATIVE_PIPELINE_WARMUPS, u as NativeSdkPackageOptions, v as diagnostics_stream_json, w as native_package_version, x as loadNativeAnonymizeBinding, y as getDefaultNativePipeline, z as redact_text } from "./native-node.mjs";
 //#region src/redact.d.ts
 /**
  * Serialize the redaction key to JSON for export.
@@ -15,5 +15,5 @@ declare const exportRedactionKey: (redactionMap: Map<string, string>, operatorMa
  */
 declare const deanonymise: (redactedText: string, redactionMap: Map<string, string>) => string;
 //#endregion
-export { type AnonymisationOperator, CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, type CapabilityManifest, type CapabilityParityProfile, type CapabilityRuntime, type CapabilitySurface, type CapabilitySurfaceId, ConvertExternalDetectionBatchOptions, type CustomDenyListEntry, type CustomRegexPattern, DEFAULT_ENTITY_LABELS, DEFAULT_NATIVE_PIPELINE_CONFIG, DEFAULT_NATIVE_PIPELINE_WARMUPS, DETECTION_SOURCES, DETECTOR_PRIORITY, type DefaultEntityLabel, DefaultNativePipelinePackageFileOptions, DefaultNativePipelinePackageOptions, DefaultNativePipelineWarmup, type DenyListCategory, type DetectionSource, type Dictionaries, type DictionaryMeta, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, EXTERNAL_DETECTION_BATCH_MAX_BYTES, EXTERNAL_DETECTION_BATCH_VERSION, EXTERNAL_DETECTION_DOCUMENT_MAX_BYTES, EXTERNAL_DETECTION_MAX_DETECTIONS, EXTERNAL_DETECTION_MAX_LABEL_MAPPINGS, EXTERNAL_DETECTION_MAX_METADATA_BYTES, EXTERNAL_DETECTION_OFFSET_UNITS, EXTERNAL_DETECTION_PROVIDER_ID_MAX_BYTES, type Entity, type EntityCapability, type EntityLabel, type EntitySelection, ExternalDetectionBatch, ExternalDetectionOffsetUnit, type GazetteerEntry, LoadNativeBindingOptions, NativeAnonymizeBinding, NativeAnonymizerFromConfigOptions, NativeAnonymizerFromPackageOptions, NativeBindingVersionOptions, NativeCallerDetection, NativeCallerRedactionOptions, NativeCreateSessionWithLifecycleOptions, NativeDiagnosticsBatchCallback, NativeLibc, NativeNormalizeOptions, NativeOpenSessionArchiveOptions, NativeOperatorConfig, type NativePipelineBuildOptions, type NativePipelineCompatibility, NativePipelineEntity, NativePipelineFromPackageOptions, NativePipelinePackageFileOptions, type NativePipelinePackageOptions, type NativePipelineUnsupportedFeature, NativePreparedRedactionSessionBinding, NativePreparedSearchBinding, type NativePreparedSearchConfig, NativePreparedSessionRedactionPlanBinding, NativeRedactionResult, NativeRequire, NativeResultEventCallback, NativeSdkOptions, NativeSdkPackageOptions, NativeSearchPackageInput, NativeSearchPackageOptions, NativeSessionBlockRedactionPlan, NativeSessionCallerRedactionInput, NativeSessionCallerRedactionPlanOptions, NativeSessionDeletionSummary, NativeSessionLifecycle, NativeSessionMetadata, NativeSessionRedactionAtOptions, NativeSessionStatus, NativeStaticRedactionResult, NativeTextReplacement, OPERATOR_TYPES, type OperatorConfig, type OperatorType, type PipelineConfig, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, type RedactionResult, type ReviewDecision, type ReviewedEntity, SharedNativeDiagnosticsJsonOptions, SharedNativeDiagnosticsStreamJsonOptions, SharedNativePreparedPackageOptions, SharedNativeRedactTextJsonOptions, SharedNativeRedactTextOptions, SharedNativeRedactTextStreamJsonOptions, SharedNativeSearchPackageOptions, type TriggerExtension, type TriggerGroupConfig, type TriggerRule, type TriggerStrategy, type TriggerValidation, assertNativeBindingVersion, assertNativePipelineSupported, availableDefaultNativePipelineLanguages, available_default_native_pipeline_languages, convert_external_detection_batch, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromDefaultPackage, createNativePipelineFromPackage, createNativePipelineFromPackageFile, create_native_pipeline_from_default_package, deanonymise, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getDefaultNativePipeline, getNativeBindingVersion, getNativePipelineCompatibility, get_default_native_pipeline, loadNativeAnonymizeBinding, load_prepared_package, load_prepared_package_file, native_package_version, normalize_for_search, preloadDefaultNativePipeline, preloadDefaultNativePipelineAsync, preload_default_native_pipeline, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, readDefaultNativePipelinePackageFile, readDefaultNativePipelinePackageFileAsync, readNativePipelinePackageFile, readNativePipelinePackageFileAsync, read_default_native_pipeline_package_file, redactDefaultText, redactDefaultTextJson, redact_default_text, redact_default_text_json, redact_text, redact_text_json, redact_text_stream_json, summary_diagnostics_json };
+export { type AnonymisationOperator, CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, type CapabilityManifest, type CapabilityParityProfile, type CapabilityRuntime, type CapabilitySurface, type CapabilitySurfaceId, ConvertExternalDetectionBatchOptions, type CustomDenyListEntry, type CustomRegexPattern, DEFAULT_ENTITY_LABELS, DEFAULT_NATIVE_PIPELINE_CONFIG, DEFAULT_NATIVE_PIPELINE_WARMUPS, DETECTION_SOURCES, DETECTOR_PRIORITY, type DefaultEntityLabel, DefaultNativePipelinePackageFileOptions, DefaultNativePipelinePackageOptions, DefaultNativePipelineWarmup, type DenyListCategory, type DetectionSource, type Dictionaries, type DictionaryMeta, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, EXTERNAL_DETECTION_BATCH_MAX_BYTES, EXTERNAL_DETECTION_BATCH_VERSION, EXTERNAL_DETECTION_DOCUMENT_MAX_BYTES, EXTERNAL_DETECTION_MAX_DETECTIONS, EXTERNAL_DETECTION_MAX_LABEL_MAPPINGS, EXTERNAL_DETECTION_MAX_METADATA_BYTES, EXTERNAL_DETECTION_OFFSET_UNITS, EXTERNAL_DETECTION_PROVIDER_ID_MAX_BYTES, type Entity, type EntityCapability, type EntityLabel, type EntitySelection, ExternalDetectionBatch, ExternalDetectionOffsetUnit, type GazetteerEntry, LoadNativeBindingOptions, NativeAnonymizeBinding, NativeAnonymizerFromConfigOptions, NativeAnonymizerFromPackageOptions, NativeBindingVersionOptions, NativeCallerDetection, NativeCallerRedactionOptions, NativeCreateSessionWithLifecycleOptions, NativeDiagnosticsBatchCallback, NativeLibc, NativeNormalizeOptions, NativeOpenSessionArchiveOptions, NativeOperatorConfig, type NativePipelineBuildOptions, type NativePipelineCompatibility, NativePipelineEntity, NativePipelineFromPackageOptions, NativePipelinePackageFileOptions, type NativePipelinePackageOptions, type NativePipelineUnsupportedFeature, NativePreparedRedactionSessionBinding, NativePreparedSearchBinding, type NativePreparedSearchConfig, NativePreparedSessionRedactionPlanBinding, NativeRedactionResult, NativeRequire, NativeResultEventCallback, NativeSdkOptions, NativeSdkPackageOptions, NativeSearchPackageInput, NativeSearchPackageOptions, NativeSessionBlockRedactionPlan, NativeSessionCallerRedactionInput, NativeSessionCallerRedactionPlanOptions, NativeSessionDeletionSummary, NativeSessionLifecycle, NativeSessionMetadata, NativeSessionRedactionAtOptions, NativeSessionStatus, NativeStaticRedactionResult, NativeTextReplacement, OPERATOR_TYPES, type OperatorConfig, type OperatorType, type PipelineConfig, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, type RedactionResult, type ReviewDecision, type ReviewedEntity, SharedNativeDiagnosticsJsonOptions, SharedNativeDiagnosticsStreamJsonOptions, SharedNativePreparedPackageOptions, SharedNativeRedactTextJsonOptions, SharedNativeRedactTextOptions, SharedNativeRedactTextStreamJsonOptions, SharedNativeSearchPackageOptions, type TriggerExtension, type TriggerGroupConfig, type TriggerRule, type TriggerStrategy, type TriggerValidation, assertNativeBindingVersion, assertNativePipelineSupported, availableDefaultNativePipelineLanguages, available_default_native_pipeline_languages, convert_external_detection_batch, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromDefaultPackage, createNativePipelineFromPackage, createNativePipelineFromPackageFile, create_native_pipeline_from_default_package, deanonymise, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getDefaultNativePipeline, getNativeBindingVersion, getNativePipelineCompatibility, get_default_native_pipeline, loadNativeAnonymizeBinding, load_prepared_package, load_prepared_package_file, native_package_version, normalize_for_search, preloadDefaultNativePipeline, preloadDefaultNativePipelineAsync, preload_default_native_pipeline, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, readDefaultNativePipelinePackageFile, readDefaultNativePipelinePackageFileAsync, readNativePipelinePackageFile, readNativePipelinePackageFileAsync, read_default_native_pipeline_package_file, redactDefaultText, redactDefaultTextJson, redact_default_text, redact_default_text_json, redact_text, redact_text_json, redact_text_stream_json, setNativeBindingOverride, summary_diagnostics_json };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { CALLER_DETECTION_CONTRACT_VERSION, EXTERNAL_DETECTION_BATCH_MAX_BYTES, EXTERNAL_DETECTION_BATCH_VERSION, EXTERNAL_DETECTION_DOCUMENT_MAX_BYTES, EXTERNAL_DETECTION_MAX_DETECTIONS, EXTERNAL_DETECTION_MAX_LABEL_MAPPINGS, EXTERNAL_DETECTION_MAX_METADATA_BYTES, EXTERNAL_DETECTION_OFFSET_UNITS, EXTERNAL_DETECTION_PROVIDER_ID_MAX_BYTES, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, assertNativeBindingVersion, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromPackage, encodeNativeSearchConfig, encodeNativeSearchConfigInput, getNativeBindingVersion, prepareNativeSearchPackage } from "./native.mjs";
-import { A as redact_text, C as readNativePipelinePackageFile, D as redactDefaultTextJson, E as redactDefaultText, F as assertNativePipelineSupported, I as createNativePipelineFromConfig, L as getNativePipelineCompatibility, M as redact_text_stream_json, N as summary_diagnostics_json, O as redact_default_text, P as DEFAULT_NATIVE_PIPELINE_CONFIG, R as prepareNativePipelineConfig, S as readDefaultNativePipelinePackageFileAsync, T as read_default_native_pipeline_package_file, _ as preloadDefaultNativePipeline, a as createNativePipelineFromDefaultPackage, b as prepare_search_package, c as diagnostics_json, d as get_default_native_pipeline, f as loadNativeAnonymizeBinding, g as normalize_for_search, h as native_package_version, i as convert_external_detection_batch, j as redact_text_json, k as redact_default_text_json, l as diagnostics_stream_json, m as load_prepared_package_file, n as availableDefaultNativePipelineLanguages, o as createNativePipelineFromPackageFile, p as load_prepared_package, r as available_default_native_pipeline_languages, s as create_native_pipeline_from_default_package, t as DEFAULT_NATIVE_PIPELINE_WARMUPS, u as getDefaultNativePipeline, v as preloadDefaultNativePipelineAsync, w as readNativePipelinePackageFileAsync, x as readDefaultNativePipelinePackageFile, y as preload_default_native_pipeline, z as prepareNativePipelinePackage } from "./native-node2.mjs";
+import { A as redact_text, B as prepareNativePipelinePackage, C as readNativePipelinePackageFile, D as redactDefaultTextJson, E as redactDefaultText, F as DEFAULT_NATIVE_PIPELINE_CONFIG, I as assertNativePipelineSupported, L as createNativePipelineFromConfig, M as redact_text_stream_json, N as setNativeBindingOverride, O as redact_default_text, P as summary_diagnostics_json, R as getNativePipelineCompatibility, S as readDefaultNativePipelinePackageFileAsync, T as read_default_native_pipeline_package_file, _ as preloadDefaultNativePipeline, a as createNativePipelineFromDefaultPackage, b as prepare_search_package, c as diagnostics_json, d as get_default_native_pipeline, f as loadNativeAnonymizeBinding, g as normalize_for_search, h as native_package_version, i as convert_external_detection_batch, j as redact_text_json, k as redact_default_text_json, l as diagnostics_stream_json, m as load_prepared_package_file, n as availableDefaultNativePipelineLanguages, o as createNativePipelineFromPackageFile, p as load_prepared_package, r as available_default_native_pipeline_languages, s as create_native_pipeline_from_default_package, t as DEFAULT_NATIVE_PIPELINE_WARMUPS, u as getDefaultNativePipeline, v as preloadDefaultNativePipelineAsync, w as readNativePipelinePackageFileAsync, x as readDefaultNativePipelinePackageFile, y as preload_default_native_pipeline, z as prepareNativePipelineConfig } from "./native-node2.mjs";
 import { DEFAULT_ENTITY_LABELS, DETECTION_SOURCES, DETECTOR_PRIORITY, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, OPERATOR_TYPES } from "./constants.mjs";
 import { CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES } from "./capabilities.mjs";
 //#region src/redact.ts
@@ -26,6 +26,6 @@ const deanonymise = (redactedText, redactionMap) => {
 	return result;
 };
 //#endregion
-export { CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, DEFAULT_ENTITY_LABELS, DEFAULT_NATIVE_PIPELINE_CONFIG, DEFAULT_NATIVE_PIPELINE_WARMUPS, DETECTION_SOURCES, DETECTOR_PRIORITY, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, EXTERNAL_DETECTION_BATCH_MAX_BYTES, EXTERNAL_DETECTION_BATCH_VERSION, EXTERNAL_DETECTION_DOCUMENT_MAX_BYTES, EXTERNAL_DETECTION_MAX_DETECTIONS, EXTERNAL_DETECTION_MAX_LABEL_MAPPINGS, EXTERNAL_DETECTION_MAX_METADATA_BYTES, EXTERNAL_DETECTION_OFFSET_UNITS, EXTERNAL_DETECTION_PROVIDER_ID_MAX_BYTES, OPERATOR_TYPES, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, assertNativeBindingVersion, assertNativePipelineSupported, availableDefaultNativePipelineLanguages, available_default_native_pipeline_languages, convert_external_detection_batch, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromDefaultPackage, createNativePipelineFromPackage, createNativePipelineFromPackageFile, create_native_pipeline_from_default_package, deanonymise, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getDefaultNativePipeline, getNativeBindingVersion, getNativePipelineCompatibility, get_default_native_pipeline, loadNativeAnonymizeBinding, load_prepared_package, load_prepared_package_file, native_package_version, normalize_for_search, preloadDefaultNativePipeline, preloadDefaultNativePipelineAsync, preload_default_native_pipeline, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, readDefaultNativePipelinePackageFile, readDefaultNativePipelinePackageFileAsync, readNativePipelinePackageFile, readNativePipelinePackageFileAsync, read_default_native_pipeline_package_file, redactDefaultText, redactDefaultTextJson, redact_default_text, redact_default_text_json, redact_text, redact_text_json, redact_text_stream_json, summary_diagnostics_json };
+export { CALLER_DETECTION_CONTRACT_VERSION, CAPABILITY_MANIFEST, CAPABILITY_MANIFEST_SCHEMA_VERSION, CAPABILITY_PARITY_PROFILES, CAPABILITY_RUNTIMES, CAPABILITY_SURFACES, DEFAULT_ENTITY_LABELS, DEFAULT_NATIVE_PIPELINE_CONFIG, DEFAULT_NATIVE_PIPELINE_WARMUPS, DETECTION_SOURCES, DETECTOR_PRIORITY, ENTITY_CAPABILITIES, ENTITY_LABELS, ENTITY_SELECTIONS, EXTERNAL_DETECTION_BATCH_MAX_BYTES, EXTERNAL_DETECTION_BATCH_VERSION, EXTERNAL_DETECTION_DOCUMENT_MAX_BYTES, EXTERNAL_DETECTION_MAX_DETECTIONS, EXTERNAL_DETECTION_MAX_LABEL_MAPPINGS, EXTERNAL_DETECTION_MAX_METADATA_BYTES, EXTERNAL_DETECTION_OFFSET_UNITS, EXTERNAL_DETECTION_PROVIDER_ID_MAX_BYTES, OPERATOR_TYPES, PreparedAnonymizer, PreparedNativeAnonymizer, PreparedNativePipeline, PreparedNativeRedactionSession, PreparedNativeSessionRedactionPlan, PreparedSearch, assertNativeBindingVersion, assertNativePipelineSupported, availableDefaultNativePipelineLanguages, available_default_native_pipeline_languages, convert_external_detection_batch, createNativeAnonymizerFromConfig, createNativeAnonymizerFromPackage, createNativePipelineFromConfig, createNativePipelineFromDefaultPackage, createNativePipelineFromPackage, createNativePipelineFromPackageFile, create_native_pipeline_from_default_package, deanonymise, diagnostics_json, diagnostics_stream_json, encodeNativeSearchConfig, encodeNativeSearchConfigInput, exportRedactionKey, getDefaultNativePipeline, getNativeBindingVersion, getNativePipelineCompatibility, get_default_native_pipeline, loadNativeAnonymizeBinding, load_prepared_package, load_prepared_package_file, native_package_version, normalize_for_search, preloadDefaultNativePipeline, preloadDefaultNativePipelineAsync, preload_default_native_pipeline, prepareNativePipelineConfig, prepareNativePipelinePackage, prepareNativeSearchPackage, prepare_search_package, readDefaultNativePipelinePackageFile, readDefaultNativePipelinePackageFileAsync, readNativePipelinePackageFile, readNativePipelinePackageFileAsync, read_default_native_pipeline_package_file, redactDefaultText, redactDefaultTextJson, redact_default_text, redact_default_text_json, redact_text, redact_text_json, redact_text_stream_json, setNativeBindingOverride, summary_diagnostics_json };
 
 //# sourceMappingURL=index.mjs.map