gheim 0.1.0

package/dist/types/core/sentinels.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Sentinel format, allocation, and regex matching. Mirrors gheim-py.
+ *
+ * A sentinel is a stable, uniquely-numbered placeholder like `<PERSON_1>` or
+ * `<EMAIL_2>`. ASCII-only angle brackets so downstream LLM tokenizers preserve them.
+ */
+export declare const LABEL_TO_TAG: Record<string, string>;
+/** Matches any complete sentinel anywhere in a string. */
+export declare const SENTINEL_RE: RegExp;
+/** Same pattern, anchored — for testing a single token. */
+export declare const SENTINEL_FULL_RE: RegExp;
+export declare function labelTag(label: string): string;
+export interface Sentinel {
+    tag: string;
+    index: number;
+}
+export declare function renderSentinel(s: Sentinel): string;
+export declare function parseSentinel(s: string): Sentinel | null;
+/**
+ * Could `buffer` still become a sentinel if more characters arrive?
+ * True iff buffer is a non-empty *strict* prefix of a valid sentinel.
+ */
+export declare function isPossibleSentinelPrefix(buffer: string): boolean;
+//# sourceMappingURL=sentinels.d.ts.map

package/dist/types/core/sentinels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinels.d.ts","sourceRoot":"","sources":["../../../src/core/sentinels.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAS/C,CAAC;AAKF,0DAA0D;AAC1D,eAAO,MAAM,WAAW,QAGvB,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,gBAAgB,QAE5B,CAAC;AAOF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAElD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAIxD;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAIhE"}

package/dist/types/core/session.d.ts

@@ -0,0 +1,31 @@
+/** Session state — mirrors gheim-py's Session. */
+import type { Span } from "../detectors/base.ts";
+import type { Normalizer } from "../normalizers.ts";
+/** Constructor options for Session. */
+export interface SessionOptions {
+    /**
+     * Optional per-label canonical-form normalizers. Maps a label name
+     * (e.g. "private_phone") to either a built-in name ("e164" /
+     * "iso_date") or a callable Normalizer. Surfaces that fail to parse
+     * fall back to the default NFKC+lowercase key. See ./normalizers.ts.
+     */
+    normalizers?: Record<string, string | Normalizer>;
+}
+export declare class Session {
+    /** Sentinel string ("<PERSON_1>") → original surface form. */
+    mapping: Record<string, string>;
+    private coalesce;
+    private counters;
+    private resolvedNormalizers;
+    constructor(opts?: SessionOptions);
+    allocate(label: string, surface: string): string;
+    applySpans(text: string, spans: Span[]): string;
+    restore(text: string): string;
+    toJSON(): {
+        mapping: Record<string, string>;
+    };
+    static fromJSON(raw: {
+        mapping: Record<string, string>;
+    }, opts?: SessionOptions): Session;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/types/core/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/core/session.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAmBpD,uCAAuC;AACvC,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,CAAC;CACnD;AAED,qBAAa,OAAO;IAClB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM;IACrC,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,mBAAmB,CAAkC;gBAEjD,IAAI,GAAE,cAAmB;IAQrC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAiBhD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM;IAoB/C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAK7B,MAAM,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;IAI7C,MAAM,CAAC,QAAQ,CACb,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,EACxC,IAAI,GAAE,cAAmB,GACxB,OAAO;CAqBX"}

package/dist/types/core/stream.d.ts

@@ -0,0 +1,9 @@
+export declare class StreamDeanonymizer {
+    private readonly mapping;
+    private hold;
+    constructor(mapping: Record<string, string>);
+    feed(chunk: string): string;
+    flush(): string;
+    transform(chunks: AsyncIterable<string> | Iterable<string>): AsyncGenerator<string>;
+}
+//# sourceMappingURL=stream.d.ts.map

package/dist/types/core/stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.d.ts","sourceRoot":"","sources":["../../../src/core/stream.ts"],"names":[],"mappings":"AAMA,qBAAa,kBAAkB;IAGjB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,IAAI,CAAM;gBAEW,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAE5D,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IA4C3B,KAAK,IAAI,MAAM;IAMR,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC;CAQ3F"}

package/dist/types/detectors/base.d.ts

@@ -0,0 +1,28 @@
+/** Detector protocol — anything that maps text to PII spans. */
+/**
+ * Strip leading/trailing whitespace from a span range. The upstream
+ * privacy-filter model tends to include leading whitespace in spans as a BPE
+ * tokenization artifact; trimming fixes cosmetically-broken restored text.
+ * Returns null if the trimmed range is empty.
+ */
+export declare function trimSpan(text: string, start: number, end: number): {
+    start: number;
+    end: number;
+} | null;
+export interface Span {
+    /** e.g. "private_person", "private_email" */
+    label: string;
+    /** Inclusive character offset in the original string. */
+    start: number;
+    /** Exclusive. */
+    end: number;
+    /** Original surface form (text.slice(start, end)). */
+    text: string;
+    score?: number;
+}
+export interface Detector {
+    detect(text: string, opts?: {
+        model?: string;
+    }): Promise<Span[]>;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/types/detectors/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/detectors/base.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKvC;AAED,MAAM,WAAW,IAAI;IACnB,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;CAClE"}

package/dist/types/detectors/index.d.ts

@@ -0,0 +1,9 @@
+export type { Detector, Span } from "./base.ts";
+export { DEFAULT_BASE_URL, DEFAULT_MODEL as REMOTE_DEFAULT_MODEL, RemoteDetector, } from "./remote.ts";
+export type { RemoteDetectorOptions } from "./remote.ts";
+export { LocalDetector } from "./local.ts";
+export type { LocalDetectorOptions } from "./local.ts";
+import type { Detector } from "./base.ts";
+/** Pick a reasonable default: remote if `GHEIM_API_KEY` is set in env, else local. */
+export declare function defaultDetector(): Detector;
+//# sourceMappingURL=index.d.ts.map

package/dist/types/detectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/detectors/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,gBAAgB,EAChB,aAAa,IAAI,oBAAoB,EACrC,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAI1C,sFAAsF;AACtF,wBAAgB,eAAe,IAAI,QAAQ,CAI1C"}

package/dist/types/detectors/local.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Local detector — runs the privacy-filter model in-process via @huggingface/transformers.
+ *
+ * Works in Node and the browser (with `device: 'webgpu'` for the latter).
+ * `@huggingface/transformers` is an *optional peer dependency* — only needed
+ * when this detector is actually instantiated.
+ *
+ * Long inputs (more tokens than the model's positional limit, typically
+ * 512 for BERT/XLM-R/roberta encoders) are split into overlapping sliding
+ * windows; spans from each window are reprojected to the original character
+ * offsets and deduplicated. Without this, anything past ~512 tokens would
+ * be silently truncated by the underlying pipeline. Multiple inputs and
+ * within-input chunks are batched together for one forward pass.
+ */
+import type { Detector, Span } from "./base.ts";
+export declare const DEFAULT_MODEL = "joelbarmettler/gheim-ch-560m";
+/** transformers.js token-classification options used by this detector. */
+export interface LocalDetectorOptions {
+    /** HuggingFace model id (must be a token-classification model). */
+    model?: string;
+    /** transformers.js device: "auto" | "cpu" | "wasm" | "webgpu" | "gpu" | ... */
+    device?: string;
+    /** Quantization dtype: "fp32" | "fp16" | "q8" | "q4" | "auto" */
+    dtype?: string;
+    /** Aggregation strategy passed to the pipeline call. */
+    aggregationStrategy?: string;
+    /** Sliding-window size in model tokens (default 510 for a 512-token model). */
+    chunkTokens?: number;
+    /**
+     * Token overlap between consecutive windows. Must exceed the longest PII
+     * span you expect to detect; default 32 covers all realistic cases.
+     */
+    chunkOverlapTokens?: number;
+    /**
+     * Forward-pass batch size used both for within-input chunk batching and
+     * for `detectBatch` cross-input batching.
+     */
+    batchSize?: number;
+    /** Optional pre-built pipeline instance (e.g. for tests). */
+    pipelineInstance?: unknown;
+}
+export declare class LocalDetector implements Detector {
+    readonly model: string;
+    readonly device: string;
+    readonly dtype: string;
+    readonly aggregationStrategy: string;
+    readonly chunkTokens: number;
+    readonly chunkOverlapTokens: number;
+    readonly batchSize: number;
+    private _pipeline;
+    private _loadPromise;
+    constructor(opts?: LocalDetectorOptions);
+    private load;
+    detect(text: string, opts?: {
+        model?: string;
+    }): Promise<Span[]>;
+    /**
+     * Detect PII in many inputs in a single batched forward pass. Inputs that
+     * exceed the model's token limit are split into overlapping windows; all
+     * chunks across all inputs are batched into one pipeline call (subject to
+     * `batchSize`). Empty texts produce empty `[]` at the matching position.
+     */
+    detectBatch(texts: string[], opts?: {
+        model?: string;
+    }): Promise<Span[][]>;
+    private chunkText;
+}
+//# sourceMappingURL=local.d.ts.map

package/dist/types/detectors/local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../src/detectors/local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEhD,eAAO,MAAM,aAAa,iCAAiC,CAAC;AAQ5D,0EAA0E;AAC1E,MAAM,WAAW,oBAAoB;IACnC,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAsCD,qBAAa,aAAc,YAAW,QAAQ;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,YAAY,CAA0C;gBAElD,IAAI,GAAE,oBAAyB;YAkB7B,IAAI;IAuBZ,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAYtE;;;;;OAKG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAyFlE,SAAS;CAkBxB"}

package/dist/types/detectors/remote.d.ts

@@ -0,0 +1,24 @@
+/** Remote detector — calls a gheim-server (or compatible) over HTTP. */
+import { type Detector, type Span } from "./base.ts";
+export declare const DEFAULT_BASE_URL = "https://api.gheim.ch";
+export declare const DEFAULT_MODEL = "openai/privacy-filter";
+export interface RemoteDetectorOptions {
+    baseUrl?: string;
+    apiKey?: string;
+    model?: string;
+    /** Strip leading/trailing whitespace from each span (default: true). */
+    trimWhitespace?: boolean;
+    fetch?: typeof fetch;
+}
+export declare class RemoteDetector implements Detector {
+    private readonly baseUrl;
+    private readonly apiKey?;
+    private readonly model;
+    private readonly trimWhitespace;
+    private readonly fetchImpl;
+    constructor(opts?: RemoteDetectorOptions);
+    detect(text: string, opts?: {
+        model?: string;
+    }): Promise<Span[]>;
+}
+//# sourceMappingURL=remote.d.ts.map

package/dist/types/detectors/remote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../../src/detectors/remote.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,IAAI,EAAY,MAAM,WAAW,CAAC;AAE/D,eAAO,MAAM,gBAAgB,yBAAyB,CAAC;AACvD,eAAO,MAAM,aAAa,0BAA0B,CAAC;AAErD,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,qBAAa,cAAe,YAAW,QAAQ;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,IAAI,GAAE,qBAA0B;IAUtC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;CA+BvE"}

package/dist/types/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * gheim — PII round-trip for LLM APIs.
+ *
+ * Public API:
+ *   - Session, Span, Detector
+ *   - LocalDetector (planned v0.2), RemoteDetector
+ *   - anonymizeText / deanonymizeText / anonymizeMessages / deanonymizeStream
+ *   - StreamDeanonymizer (low-level)
+ */
+export { Session } from "./core/session.ts";
+export { LABEL_TO_TAG, SENTINEL_RE, isPossibleSentinelPrefix, labelTag, parseSentinel, renderSentinel, } from "./core/sentinels.ts";
+export type { Sentinel } from "./core/sentinels.ts";
+export { StreamDeanonymizer } from "./core/stream.ts";
+export type { Detector, Span } from "./detectors/base.ts";
+export { DEFAULT_BASE_URL, REMOTE_DEFAULT_MODEL, RemoteDetector, LocalDetector, defaultDetector, } from "./detectors/index.ts";
+export type { RemoteDetectorOptions, LocalDetectorOptions } from "./detectors/index.ts";
+export { anonymizeMessages, anonymizeText, deanonymizeStream, deanonymizeText, } from "./plain.ts";
+export type { ChatMessage } from "./plain.ts";
+export declare const VERSION = "0.1.0";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,YAAY,EACZ,WAAW,EACX,wBAAwB,EACxB,QAAQ,EACR,aAAa,EACb,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK9C,eAAO,MAAM,OAAO,UAAU,CAAC"}

package/dist/types/normalizers.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Optional surface-form normalizers for Session.
+ *
+ * A normalizer canonicalises one specific category of PII so that
+ * trivially-different formats of the same identity collapse to a single
+ * sentinel — beyond what NFKC + lowercase + whitespace-collapse alone
+ * catches.
+ *
+ * Examples that the default key does NOT collapse and that an opt-in
+ * normalizer here does:
+ *   - Phone formats: "+41 44 268 12 34" / "0041 44 268 1234" / "044 268 12 34"
+ *     (with region "CH") → all "+41442681234" under {@link e164}.
+ *   - Date formats: "1990-01-02" / "Jan 2 1990" → both "1990-01-02"
+ *     under {@link isoDate}.
+ *
+ * Wire it up by passing a `{label: normalizer}` map to Session:
+ *
+ * ```ts
+ * import { Session } from "gheim";
+ * import { e164, isoDate } from "gheim/normalizers";
+ *
+ * const session = new Session({
+ *   normalizers: {
+ *     private_phone: e164({ region: "CH" }),
+ *     private_date:  isoDate(),
+ *   },
+ * });
+ * ```
+ *
+ * A normalizer returns `null` for un-parseable input; when that happens,
+ * the session falls back to the default NFKC+lowercase key so the
+ * surface still gets a sentinel — it just won't collapse with format
+ * variants.
+ *
+ * Both `libphonenumber-js` and `chrono-node` are optional peer
+ * dependencies. They are loaded synchronously on first use and fail
+ * with an actionable error if missing:
+ *
+ * ```bash
+ * bun add libphonenumber-js chrono-node
+ * ```
+ */
+/**
+ * A normalizer takes a raw surface and returns a canonical form, or
+ * `null` if the surface is unparseable (caller falls back to the
+ * default NFKC+lowercase key).
+ */
+export type Normalizer = (s: string) => string | null;
+/** Options for {@link e164}. */
+export interface E164Options {
+    /**
+     * Default region (ISO 3166-1 alpha-2, e.g. "CH") for phone numbers
+     * without an explicit country code. Undefined disables parsing of
+     * non-fully-qualified numbers.
+     */
+    region?: string;
+}
+/**
+ * Phone-number canonicaliser via Google's libphonenumber-js port.
+ * Returns the E.164 form (+<country><subscriber>) of valid phone
+ * numbers; returns `null` for invalid or unparseable input.
+ */
+export declare function e164(opts?: E164Options): Normalizer;
+/** Options for {@link isoDate}. */
+export interface IsoDateOptions {
+    /**
+     * Locale name to look up on chrono-node's exported parser objects
+     * (e.g. "en", "de", "fr"). Defaults to chrono's universal parser.
+     */
+    locale?: "en" | "de" | "fr" | "ja" | "nl" | "pt" | "ru" | "uk" | "zh";
+}
+/**
+ * Date canonicaliser to ISO-8601 (YYYY-MM-DD) via chrono-node. Returns
+ * `null` for input that doesn't parse as a date.
+ */
+export declare function isoDate(opts?: IsoDateOptions): Normalizer;
+/**
+ * German DIN-5007-2 transliteration on top of NFKC + lowercase. Collapses
+ * `ä`→`ae`, `ö`→`oe`, `ü`→`ue`, `ß`→`ss` so that German bureaucracy
+ * surface variants — `Müller` / `Mueller` / `MÜLLER` / `MUELLER` — collapse
+ * to one sentinel. The codepoint `ü` doesn't decompose to `ue` under NFKC,
+ * which is why the default key alone misses this case.
+ *
+ * Pure-JS — no extra dependencies.
+ */
+export declare function germanTransliteration(): Normalizer;
+/** Resolve a built-in name or pass through a custom callable. */
+export declare function resolveNormalizer(spec: string | Normalizer): Normalizer;
+//# sourceMappingURL=normalizers.d.ts.map

package/dist/types/normalizers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizers.d.ts","sourceRoot":"","sources":["../../src/normalizers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;AAEtD,gCAAgC;AAChC,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAgDD;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,IAAI,GAAE,WAAgB,GAAG,UAAU,CAavD;AAED,mCAAmC;AACnC,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;CACvE;AAmBD;;;GAGG;AACH,wBAAgB,OAAO,CAAC,IAAI,GAAE,cAAmB,GAAG,UAAU,CAQ7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,UAAU,CAclD;AAQD,iEAAiE;AACjE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,CAUvE"}

package/dist/types/openai/_anonymize_only.d.ts

@@ -0,0 +1,25 @@
+/** Anonymize-input-only endpoints: embeddings, moderations, images. */
+import type OpenAIClass from "openai";
+import type { Detector } from "../detectors/base.ts";
+import { type CallExtras } from "./_base.ts";
+export declare class GheimEmbeddings {
+    private readonly clientPromise;
+    private readonly defaultDet;
+    constructor(clientPromise: Promise<OpenAIClass>, defaultDet: Detector);
+    create(body: Record<string, unknown> & CallExtras): Promise<unknown>;
+}
+export declare class GheimModerations {
+    private readonly clientPromise;
+    private readonly defaultDet;
+    constructor(clientPromise: Promise<OpenAIClass>, defaultDet: Detector);
+    create(body: Record<string, unknown> & CallExtras): Promise<unknown>;
+}
+export declare class GheimImages {
+    private readonly clientPromise;
+    private readonly defaultDet;
+    constructor(clientPromise: Promise<OpenAIClass>, defaultDet: Detector);
+    generate(body: Record<string, unknown> & CallExtras): Promise<unknown>;
+    edit(body: Record<string, unknown> & CallExtras): Promise<unknown>;
+    createVariation(body: Record<string, unknown> & CallExtras): Promise<unknown>;
+}
+//# sourceMappingURL=_anonymize_only.d.ts.map

package/dist/types/openai/_anonymize_only.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_anonymize_only.d.ts","sourceRoot":"","sources":["../../../src/openai/_anonymize_only.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,KAAK,WAAW,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAkB,KAAK,UAAU,EAAsB,MAAM,YAAY,CAAC;AA0BjF,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,EACnC,UAAU,EAAE,QAAQ;IAGjC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;CAK3E;AAED,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,EACnC,UAAU,EAAE,QAAQ;IAGjC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;CAK3E;AAED,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,EACnC,UAAU,EAAE,QAAQ;IAGjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAMtE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAMlE,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;CAQpF"}

package/dist/types/openai/_audio.d.ts

@@ -0,0 +1,41 @@
+/** Audio endpoints — speech (anonymize-only); transcriptions/translations (round-trip). */
+import type OpenAIClass from "openai";
+import type { Detector } from "../detectors/base.ts";
+import { type CallExtras } from "./_base.ts";
+interface AudioInner {
+    speech: {
+        create(body: unknown): Promise<unknown>;
+    };
+    transcriptions: {
+        create(body: unknown): Promise<unknown>;
+    };
+    translations: {
+        create(body: unknown): Promise<unknown>;
+    };
+}
+export declare class GheimSpeech {
+    private readonly innerP;
+    private readonly defaultDet;
+    constructor(innerP: Promise<AudioInner>, defaultDet: Detector);
+    create(body: Record<string, unknown> & CallExtras): Promise<unknown>;
+}
+export declare class GheimTranscriptions {
+    private readonly innerP;
+    private readonly defaultDet;
+    constructor(innerP: Promise<AudioInner>, defaultDet: Detector);
+    create(body: Record<string, unknown> & CallExtras): Promise<unknown>;
+}
+export declare class GheimTranslations {
+    private readonly innerP;
+    private readonly defaultDet;
+    constructor(innerP: Promise<AudioInner>, defaultDet: Detector);
+    create(body: Record<string, unknown> & CallExtras): Promise<unknown>;
+}
+export declare class GheimAudio {
+    readonly speech: GheimSpeech;
+    readonly transcriptions: GheimTranscriptions;
+    readonly translations: GheimTranslations;
+    constructor(clientPromise: Promise<OpenAIClass>, detector: Detector);
+}
+export {};
+//# sourceMappingURL=_audio.d.ts.map

package/dist/types/openai/_audio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_audio.d.ts","sourceRoot":"","sources":["../../../src/openai/_audio.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,KAAK,WAAW,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAqC,KAAK,UAAU,EAAsB,MAAM,YAAY,CAAC;AAEpG,UAAU,UAAU;IAClB,MAAM,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACpD,cAAc,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IAC5D,YAAY,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;CAC3D;AAqBD,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,EAC3B,UAAU,EAAE,QAAQ;IAGjC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;CAU3E;AAED,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,EAC3B,UAAU,EAAE,QAAQ;IAGjC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;CAkB3E;AAED,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,EAC3B,UAAU,EAAE,QAAQ;IAGjC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;CAW3E;AAED,qBAAa,UAAU;IACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;gBAE7B,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ;CAMpE"}

package/dist/types/openai/_base.d.ts

@@ -0,0 +1,31 @@
+/** Shared helpers for all endpoint proxies (JS). */
+import { Session } from "../core/session.ts";
+import { StreamDeanonymizer } from "../core/stream.ts";
+import type { Detector } from "../detectors/base.ts";
+export interface CallExtras {
+    gheimSession?: Session;
+    gheimDetector?: Detector;
+}
+export declare function resolveCallSession(body: Record<string, unknown> & CallExtras, defaultDet: Detector): {
+    session: Session;
+    detector: Detector;
+    rest: Record<string, unknown>;
+};
+/**
+ * Anonymize a single value: strings get redacted, arrays of strings recurse,
+ * arrays of pure ints (pre-tokenized inputs) pass through, anything else
+ * passes through.
+ */
+export declare function anonymizeValue(value: unknown, session: Session, detector: Detector): Promise<unknown>;
+export declare function restoreString(value: unknown, session: Session): unknown;
+/** Streaming wrapper — wraps an AsyncIterable, calls mutate per chunk, emits tail. */
+export declare class StreamingResponse<C> implements AsyncIterable<C> {
+    private readonly inner;
+    private readonly session;
+    private readonly mutate;
+    private readonly makeTail?;
+    readonly buf: StreamDeanonymizer;
+    constructor(inner: AsyncIterable<C>, session: Session, mutate: (chunk: C, buf: StreamDeanonymizer) => void, makeTail?: ((template: C, tail: string) => C) | undefined);
+    [Symbol.asyncIterator](): AsyncIterator<C>;
+}
+//# sourceMappingURL=_base.d.ts.map

package/dist/types/openai/_base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_base.d.ts","sourceRoot":"","sources":["../../../src/openai/_base.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,QAAQ,CAAC;CAC1B;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,EAC1C,UAAU,EAAE,QAAQ,GACnB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAQzE;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAGvE;AAED,sFAAsF;AACtF,qBAAa,iBAAiB,CAAC,CAAC,CAAE,YAAW,aAAa,CAAC,CAAC,CAAC;IAIzD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAN5B,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;gBAGd,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,EACvB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,kBAAkB,KAAK,IAAI,EACnD,QAAQ,CAAC,GAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC,aAAA;IAKvD,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC;CAYlD"}

package/dist/types/openai/_chat.d.ts

@@ -0,0 +1,16 @@
+/** Chat completions wrapper — adds tools/name redaction on top of the existing surface. */
+import type OpenAIClass from "openai";
+import type { Detector } from "../detectors/base.ts";
+import { type CallExtras } from "./_base.ts";
+export declare class GheimChatCompletions {
+    private readonly clientPromise;
+    private readonly defaultDet;
+    constructor(clientPromise: Promise<OpenAIClass>, defaultDet: Detector);
+    create(body: OpenAIClass.Chat.Completions.ChatCompletionCreateParamsNonStreaming & CallExtras): Promise<OpenAIClass.Chat.Completions.ChatCompletion>;
+    create(body: OpenAIClass.Chat.Completions.ChatCompletionCreateParamsStreaming & CallExtras): Promise<AsyncIterable<OpenAIClass.Chat.Completions.ChatCompletionChunk>>;
+}
+export declare class GheimChat {
+    readonly completions: GheimChatCompletions;
+    constructor(clientPromise: Promise<OpenAIClass>, detector: Detector);
+}
+//# sourceMappingURL=_chat.d.ts.map

package/dist/types/openai/_chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_chat.d.ts","sourceRoot":"","sources":["../../../src/openai/_chat.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,KAAK,WAAW,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAqC,KAAK,UAAU,EAAsB,MAAM,YAAY,CAAC;AAmGpG,qBAAa,oBAAoB;IAE7B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,EACnC,UAAU,EAAE,QAAQ;IAGjC,MAAM,CACV,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,sCAAsC,GAAG,UAAU,GACrF,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC;IACjD,MAAM,CACV,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,mCAAmC,GAAG,UAAU,GAClF,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;CAoB5E;AAED,qBAAa,SAAS;IACpB,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;gBAC/B,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ;CAGpE"}

package/dist/types/openai/_client.d.ts

@@ -0,0 +1,36 @@
+/** Client class — wraps the upstream openai client and exposes wrapped endpoints. */
+import type OpenAIClass from "openai";
+import type { Detector } from "../detectors/base.ts";
+import { GheimAudio } from "./_audio.ts";
+import { GheimChat } from "./_chat.ts";
+import { GheimCompletions } from "./_completions.ts";
+import { GheimResponses } from "./_responses.ts";
+import { GheimEmbeddings, GheimImages, GheimModerations } from "./_anonymize_only.ts";
+export interface GheimOpenAIOptions {
+    gheimDetector?: Detector;
+    /** Strict mode: raise on access to unwrapped endpoints. Default true. */
+    gheimStrict?: boolean;
+    /** Pre-built openai client to wrap (useful for tests). */
+    openaiClient?: OpenAIClass;
+    /** Forwarded to ``new OpenAI(...)`` when constructing the underlying client. */
+    clientOptions?: ConstructorParameters<typeof OpenAIClass>[0];
+}
+export declare class OpenAI {
+    readonly chat: GheimChat;
+    readonly completions: GheimCompletions;
+    readonly responses: GheimResponses;
+    readonly embeddings: GheimEmbeddings;
+    readonly moderations: GheimModerations;
+    readonly audio: GheimAudio;
+    readonly images: GheimImages;
+    /** Underlying openai client; available after ``ready()`` resolves. */
+    raw: OpenAIClass | undefined;
+    /** Whether strict mode is on. */
+    readonly gheimStrict: boolean;
+    private readonly _clientPromise;
+    constructor(opts?: GheimOpenAIOptions);
+    ready(): Promise<OpenAIClass>;
+}
+export declare const AsyncOpenAI: typeof OpenAI;
+export type AsyncOpenAI = OpenAI;
+//# sourceMappingURL=_client.d.ts.map

package/dist/types/openai/_client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_client.d.ts","sourceRoot":"","sources":["../../../src/openai/_client.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,KAAK,WAAW,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,WAAW,EACX,gBAAgB,EACjB,MAAM,sBAAsB,CAAC;AAG9B,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,QAAQ,CAAC;IACzB,yEAAyE;IACzE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B,gFAAgF;IAChF,aAAa,CAAC,EAAE,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;CAC9D;AAqBD,qBAAa,MAAM;IACjB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,sEAAsE;IACtE,GAAG,EAAE,WAAW,GAAG,SAAS,CAAC;IAC7B,iCAAiC;IACjC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAuB;gBAE1C,IAAI,GAAE,kBAAuB;IAiCnC,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC;CAGpC;AAED,eAAO,MAAM,WAAW,eAAS,CAAC;AAClC,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC"}

package/dist/types/openai/_completions.d.ts

@@ -0,0 +1,11 @@
+/** Legacy completions API — text-in / text-out. */
+import type OpenAIClass from "openai";
+import type { Detector } from "../detectors/base.ts";
+import { type CallExtras } from "./_base.ts";
+export declare class GheimCompletions {
+    private readonly clientPromise;
+    private readonly defaultDet;
+    constructor(clientPromise: Promise<OpenAIClass>, defaultDet: Detector);
+    create(body: Record<string, unknown> & CallExtras): Promise<unknown>;
+}
+//# sourceMappingURL=_completions.d.ts.map

package/dist/types/openai/_completions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_completions.d.ts","sourceRoot":"","sources":["../../../src/openai/_completions.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,OAAO,KAAK,WAAW,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAqC,KAAK,UAAU,EAAsB,MAAM,YAAY,CAAC;AAgCpG,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,EACnC,UAAU,EAAE,QAAQ;IAGjC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;CAuB3E"}

package/dist/types/openai/_responses.d.ts

@@ -0,0 +1,13 @@
+/** Responses API — text-in / text-out with event-based streaming.
+ * Mirrors gheim/openai/_responses.py.
+ */
+import type OpenAIClass from "openai";
+import type { Detector } from "../detectors/base.ts";
+import { type CallExtras } from "./_base.ts";
+export declare class GheimResponses {
+    private readonly clientPromise;
+    private readonly defaultDet;
+    constructor(clientPromise: Promise<OpenAIClass>, defaultDet: Detector);
+    create(body: Record<string, unknown> & CallExtras): Promise<unknown>;
+}
+//# sourceMappingURL=_responses.d.ts.map

package/dist/types/openai/_responses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_responses.d.ts","sourceRoot":"","sources":["../../../src/openai/_responses.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,WAAW,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAkB,KAAK,UAAU,EAAsB,MAAM,YAAY,CAAC;AA8DjF,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,EACnC,UAAU,EAAE,QAAQ;IAGjC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;CAqC3E"}

package/dist/types/openai/_strict.d.ts

@@ -0,0 +1,15 @@
+/** Strict-mode proxy: raises on access to unwrapped endpoints. */
+export declare const STRICT_REASONS: Record<string, string>;
+export declare class GheimStrictError extends Error {
+    constructor(message: string);
+}
+/**
+ * Build a Proxy that throws on any property access or call. Each level of
+ * sub-property nesting (client.beta.assistants.create) gets its own raise so
+ * the error message names the leaf operation.
+ */
+export declare function makeStrictProxy(attrName: string, reason: string, path?: string[]): unknown;
+/** Build a forwarder that warns once per attribute then forwards to the inner object. */
+export declare function makeWarningProxy<T extends object>(attrName: string, inner: T, reason: string): T;
+export declare function _resetWarnings(): void;
+//# sourceMappingURL=_strict.d.ts.map

package/dist/types/openai/_strict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_strict.d.ts","sourceRoot":"","sources":["../../../src/openai/_strict.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAElE,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAyBjD,CAAC;AAEF,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAWD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAc9F;AAID,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,MAAM,EAC/C,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,CAAC,EACR,MAAM,EAAE,MAAM,GACb,CAAC,CAcH;AAED,wBAAgB,cAAc,IAAI,IAAI,CAErC"}

package/dist/types/openai/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * OpenAI SDK drop-in wrapper (gheim/openai).
+ *
+ * Public surface:
+ *   - `OpenAI` / `AsyncOpenAI` — drop-in clients with PII round-trip on every
+ *     text-carrying endpoint
+ *   - Stateless helpers (kept for backward-compat with v0.1):
+ *       anonymizeOpenAIMessages, deanonymizeOpenAIResponse, deanonymizeOpenAIStream
+ *
+ * The `openai` package is an *optional* peer dependency — only required when
+ * the drop-in client is actually instantiated.
+ */
+import type OpenAIClass from "openai";
+import { Session } from "../core/session.ts";
+import type { Detector } from "../detectors/base.ts";
+export { OpenAI, AsyncOpenAI } from "./_client.ts";
+export type { GheimOpenAIOptions } from "./_client.ts";
+export { GheimStrictError, STRICT_REASONS } from "./_strict.ts";
+export declare function anonymizeOpenAIMessages(messages: OpenAIClass.Chat.Completions.ChatCompletionMessageParam[], session: Session, opts?: {
+    detector?: Detector;
+    model?: string;
+}): Promise<OpenAIClass.Chat.Completions.ChatCompletionMessageParam[]>;
+export declare function deanonymizeOpenAIResponse<R extends OpenAIClass.Chat.Completions.ChatCompletion>(response: R, session: Session): R;
+export declare function deanonymizeOpenAIStream(stream: AsyncIterable<OpenAIClass.Chat.Completions.ChatCompletionChunk>, session: Session): AsyncGenerator<OpenAIClass.Chat.Completions.ChatCompletionChunk>;
+//# sourceMappingURL=index.d.ts.map

package/dist/types/openai/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/openai/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,WAAW,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGrD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACnD,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAIhE,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,0BAA0B,EAAE,EACnE,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,0BAA0B,EAAE,CAAC,CAEpE;AAED,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,EAC7F,QAAQ,EAAE,CAAC,EACX,OAAO,EAAE,OAAO,GACf,CAAC,CAcH;AAED,wBAAuB,uBAAuB,CAC5C,MAAM,EAAE,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EACvE,OAAO,EAAE,OAAO,GACf,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CA6BlE"}