llm-mask 0.3.0

package/dist/commands.js

@@ -0,0 +1,121 @@
+/**
+ * CLI commands for exec functionality
+ */
+import { SecureExecutor } from './executor.js';
+/**
+ * Register exec commands with commander program
+ */
+export function registerExecCommands(program) {
+    // Main exec command
+    program
+        .command('exec [command...]')
+        .description('Execute a command and redact sensitive output')
+        .option('-l, --level <level>', 'Masking level (basic|standard|aggressive)', 'standard')
+        .option('-f, --preserve-format', 'Preserve format in redacted output')
+        .option('-t, --timeout <ms>', 'Command timeout in milliseconds', '30000')
+        .option('--original', 'Show original output (WARNING: contains sensitive data)')
+        .option('--json', 'Output as JSON')
+        .action(async (command, options) => {
+        if (!command || command.length === 0) {
+            console.error('Error: command required');
+            process.exit(1);
+        }
+        const executor = new SecureExecutor();
+        try {
+            const result = await executor.exec({
+                command: command[0],
+                args: command.slice(1),
+                timeout: parseInt(options.timeout),
+                level: options.level,
+                preserveFormat: options.preserveFormat
+            });
+            if (options.json) {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            else {
+                console.log(executor.formatResult(result, options.original));
+            }
+            // Exit with the same code as the command
+            if (result.exitCode !== null) {
+                process.exit(result.exitCode);
+            }
+        }
+        catch (error) {
+            console.error('Error:', error instanceof Error ? error.message : error);
+            process.exit(1);
+        }
+    });
+    // Kubernetes command
+    program
+        .command('kube [kubectl-args...]')
+        .description('Execute kubectl commands with output redaction')
+        .option('-n, --namespace <ns>', 'Kubernetes namespace')
+        .option('-c, --context <ctx>', 'Kubectl context')
+        .option('--pod <pod>', 'Pod name (for exec)')
+        .option('--container <container>', 'Container name (for exec)')
+        .option('--exec <cmd>', 'Command to execute in pod')
+        .option('-l, --level <level>', 'Masking level', 'standard')
+        .option('-f, --preserve-format', 'Preserve format in output')
+        .option('--json', 'Output as JSON')
+        .action(async (kubectlArgs, options) => {
+        const executor = new SecureExecutor();
+        try {
+            const result = await executor.kubectl({
+                args: kubectlArgs.length > 0 ? kubectlArgs : ['get', 'pods', '-o', 'wide'],
+                namespace: options.namespace,
+                context: options.context,
+                pod: options.pod,
+                container: options.container,
+                execCommand: options.exec,
+                level: options.level,
+                preserveFormat: options.preserveFormat
+            });
+            if (options.json) {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            else {
+                console.log(executor.formatResult(result));
+            }
+        }
+        catch (error) {
+            console.error('Error:', error instanceof Error ? error.message : error);
+            process.exit(1);
+        }
+    });
+    // SSH command
+    program
+        .command('ssh <host>')
+        .description('Execute SSH commands with output redaction')
+        .option('-u, --user <user>', 'SSH user')
+        .option('-p, --port <port>', 'SSH port')
+        .option('-i, --identity <file>', 'Identity file (private key)')
+        .option('-c, --command <cmd>', 'Command to execute on remote host')
+        .option('-l, --level <level>', 'Masking level', 'standard')
+        .option('-f, --preserve-format', 'Preserve format in output')
+        .option('--json', 'Output as JSON')
+        .action(async (host, options) => {
+        const executor = new SecureExecutor();
+        try {
+            const result = await executor.ssh({
+                host,
+                user: options.user,
+                port: options.port ? parseInt(options.port) : undefined,
+                identity: options.identity,
+                remoteCommand: options.command,
+                level: options.level,
+                preserveFormat: options.preserveFormat
+            });
+            if (options.json) {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            else {
+                console.log(executor.formatResult(result));
+            }
+        }
+        catch (error) {
+            console.error('Error:', error instanceof Error ? error.message : error);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=commands.js.map

package/dist/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,oBAAoB;IACpB,OAAO;SACJ,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,+CAA+C,CAAC;SAC5D,MAAM,CAAC,qBAAqB,EAAE,2CAA2C,EAAE,UAAU,CAAC;SACtF,MAAM,CAAC,uBAAuB,EAAE,oCAAoC,CAAC;SACrE,MAAM,CAAC,oBAAoB,EAAE,iCAAiC,EAAE,OAAO,CAAC;SACxE,MAAM,CAAC,YAAY,EAAE,yDAAyD,CAAC;SAC/E,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAA;YACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAA;QAErC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACnB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtB,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;gBAClC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,cAAc,EAAE,OAAO,CAAC,cAAc;aACvC,CAAC,CAAA;YAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YAC9C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC9D,CAAC;YAED,yCAAyC;YACzC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,qBAAqB;IACrB,OAAO;SACJ,OAAO,CAAC,wBAAwB,CAAC;SACjC,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;SACtD,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;SAChD,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC;SAC5C,MAAM,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;SAC9D,MAAM,CAAC,cAAc,EAAE,2BAA2B,CAAC;SACnD,MAAM,CAAC,qBAAqB,EAAE,eAAe,EAAE,UAAU,CAAC;SAC1D,MAAM,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;SAC5D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAA;QAErC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;gBACpC,IAAI,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC;gBAC1E,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,cAAc,EAAE,OAAO,CAAC,cAAc;aACvC,CAAC,CAAA;YAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YAC9C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;YAC5C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,cAAc;IACd,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,4CAA4C,CAAC;SACzD,MAAM,CAAC,mBAAmB,EAAE,UAAU,CAAC;SACvC,MAAM,CAAC,mBAAmB,EAAE,UAAU,CAAC;SACvC,MAAM,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;SAC9D,MAAM,CAAC,qBAAqB,EAAE,mCAAmC,CAAC;SAClE,MAAM,CAAC,qBAAqB,EAAE,eAAe,EAAE,UAAU,CAAC;SAC1D,MAAM,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;SAC5D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAA;QAErC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC;gBAChC,IAAI;gBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACvD,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,OAAO;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,cAAc,EAAE,OAAO,CAAC,cAAc;aACvC,CAAC,CAAA;YAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YAC9C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;YAC5C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Configuration loader for llm-mask
+ *
+ * Loads custom patterns from .llm-mask-rules.json
+ */
+import type { MaskPattern, MaskerConfig } from './types.js';
+export interface ConfigFile {
+    customPatterns?: Array<{
+        name: string;
+        regex: string;
+        placeholder: string;
+        priority?: number;
+    }>;
+    defaultLevel?: 'basic' | 'standard' | 'aggressive';
+    excludePatterns?: string[];
+    auditLog?: boolean;
+    auditLogFile?: string;
+}
+export interface LoadedConfig {
+    customPatterns: MaskPattern[];
+    defaultLevel: 'basic' | 'standard' | 'aggressive';
+    excludePatterns: string[];
+    auditLog: boolean;
+    auditLogFile: string;
+}
+/**
+ * Load config file
+ */
+export declare function loadConfig(configPath?: string): LoadedConfig;
+/**
+ * Merge loaded config with MaskerConfig
+ */
+export declare function createMaskerConfig(loaded: LoadedConfig): MaskerConfig;
+/**
+ * Get mask level from config or default
+ */
+export declare function getMaskLevel(loaded: LoadedConfig, cliLevel?: string): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE3D,MAAM,WAAW,UAAU;IACzB,cAAc,CAAC,EAAE,KAAK,CAAC;QACrB,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,MAAM,CAAA;QACb,WAAW,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,CAAC,CAAA;IACF,YAAY,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,YAAY,CAAA;IAClD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,WAAW,EAAE,CAAA;IAC7B,YAAY,EAAE,OAAO,GAAG,UAAU,GAAG,YAAY,CAAA;IACjD,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,QAAQ,EAAE,OAAO,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;CACrB;AAgCD;;GAEG;AACH,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,YAAY,CA8B5D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAKrE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5E"}

package/dist/config.js

@@ -0,0 +1,81 @@
+/**
+ * Configuration loader for llm-mask
+ *
+ * Loads custom patterns from .llm-mask-rules.json
+ */
+import { readFileSync, existsSync } from 'fs';
+import { resolve } from 'path';
+import { homedir } from 'os';
+const DEFAULT_CONFIG = {
+    customPatterns: [],
+    defaultLevel: 'standard',
+    excludePatterns: [],
+    auditLog: false,
+    auditLogFile: ''
+};
+/**
+ * Search for config file in multiple locations:
+ * 1. ./.llm-mask-rules.json (current directory)
+ * 2. ~/.llm-mask-rules.json (home directory)
+ * 3. ~/.config/llm-mask/rules.json (XDG config)
+ */
+function findConfigPath(startDir = process.cwd()) {
+    const paths = [
+        resolve(startDir, '.llm-mask-rules.json'),
+        resolve(homedir(), '.llm-mask-rules.json'),
+        resolve(homedir(), '.config', 'llm-mask', 'rules.json')
+    ];
+    for (const path of paths) {
+        if (existsSync(path)) {
+            return path;
+        }
+    }
+    return null;
+}
+/**
+ * Load config file
+ */
+export function loadConfig(configPath) {
+    const path = configPath || findConfigPath();
+    if (!path || !existsSync(path)) {
+        return DEFAULT_CONFIG;
+    }
+    try {
+        const content = readFileSync(path, 'utf-8');
+        const raw = JSON.parse(content);
+        // Convert regex strings to RegExp objects
+        const customPatterns = (raw.customPatterns || []).map(p => ({
+            name: p.name,
+            regex: new RegExp(p.regex, 'g'),
+            placeholder: (i) => p.placeholder.replace('{i}', String(i)),
+            priority: p.priority || 50
+        }));
+        return {
+            customPatterns,
+            defaultLevel: raw.defaultLevel || 'standard',
+            excludePatterns: raw.excludePatterns || [],
+            auditLog: raw.auditLog || false,
+            auditLogFile: raw.auditLogFile || ''
+        };
+    }
+    catch (error) {
+        console.error(`Failed to load config from ${path}:`, error);
+        return DEFAULT_CONFIG;
+    }
+}
+/**
+ * Merge loaded config with MaskerConfig
+ */
+export function createMaskerConfig(loaded) {
+    return {
+        customPatterns: loaded.customPatterns,
+        excludePatterns: loaded.excludePatterns
+    };
+}
+/**
+ * Get mask level from config or default
+ */
+export function getMaskLevel(loaded, cliLevel) {
+    return cliLevel || loaded.defaultLevel;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAwB5B,MAAM,cAAc,GAAiB;IACnC,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,UAAU;IACxB,eAAe,EAAE,EAAE;IACnB,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,EAAE;CACjB,CAAA;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IACtD,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,QAAQ,EAAE,sBAAsB,CAAC;QACzC,OAAO,CAAC,OAAO,EAAE,EAAE,sBAAsB,CAAC;QAC1C,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;KACxD,CAAA;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,MAAM,IAAI,GAAG,UAAU,IAAI,cAAc,EAAE,CAAA;IAE3C,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,cAAc,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC3C,MAAM,GAAG,GAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAE3C,0CAA0C;QAC1C,MAAM,cAAc,GAAkB,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzE,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC;YAC/B,WAAW,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACnE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;SAC3B,CAAC,CAAC,CAAA;QAEH,OAAO;YACL,cAAc;YACd,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,UAAU;YAC5C,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,EAAE;YAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,KAAK;YAC/B,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE;SACrC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,IAAI,GAAG,EAAE,KAAK,CAAC,CAAA;QAC3D,OAAO,cAAc,CAAA;IACvB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,QAAiB;IAClE,OAAO,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAA;AACxC,CAAC"}

package/dist/context-detection.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Smart context detection - mask values while preserving structure
+ *
+ * Detects SQL, JSON, YAML, code and masks only values
+ */
+export type ContextType = 'sql' | 'json' | 'yaml' | 'xml' | 'code' | 'plaintext';
+export interface ContextMaskResult {
+    masked: string;
+    context: ContextType;
+    stats: {
+        valuesMasked: number;
+        identifiersPreserved: number;
+    };
+}
+/**
+ * Detect context type from content
+ */
+export declare function detectContext(content: string): ContextType;
+/**
+ * Context-aware masker
+ */
+export declare class ContextMasker {
+    private masker;
+    constructor();
+    /**
+     * Mask content with context awareness
+     */
+    mask(content: string): ContextMaskResult;
+    /**
+     * Mask JSON - preserve keys, mask values
+     */
+    private maskJSON;
+    /**
+     * Mask SQL - preserve identifiers, mask string literals
+     */
+    private maskSQL;
+    /**
+     * Mask YAML - preserve keys, mask values
+     */
+    private maskYAML;
+    /**
+     * Mask XML - preserve tags/attributes, mask text content
+     */
+    private maskXML;
+    /**
+     * Regular plaintext masking
+     */
+    private maskPlaintext;
+}
+/**
+ * Convenience function
+ */
+export declare function maskWithContext(content: string): ContextMaskResult;
+//# sourceMappingURL=context-detection.d.ts.map

package/dist/context-detection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-detection.d.ts","sourceRoot":"","sources":["../src/context-detection.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,WAAW,CAAA;AAEhF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,WAAW,CAAA;IACpB,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAA;QACpB,oBAAoB,EAAE,MAAM,CAAA;KAC7B,CAAA;CACF;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAiC1D;AAED;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAY;;IAM1B;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB;IAiBxC;;OAEG;IACH,OAAO,CAAC,QAAQ;IAwChB;;OAEG;IACH,OAAO,CAAC,OAAO;IA8Bf;;OAEG;IACH,OAAO,CAAC,QAAQ;IA6ChB;;OAEG;IACH,OAAO,CAAC,OAAO;IAgCf;;OAEG;IACH,OAAO,CAAC,aAAa;CAQtB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAGlE"}

package/dist/context-detection.js

@@ -0,0 +1,219 @@
+/**
+ * Smart context detection - mask values while preserving structure
+ *
+ * Detects SQL, JSON, YAML, code and masks only values
+ */
+import { DataMasker } from './masker.js';
+/**
+ * Detect context type from content
+ */
+export function detectContext(content) {
+    const trimmed = content.trim();
+    // JSON
+    if (trimmed.startsWith('{') && trimmed.endsWith('}')) {
+        return 'json';
+    }
+    if (trimmed.startsWith('[') && trimmed.endsWith(']')) {
+        return 'json';
+    }
+    // YAML
+    if (/^[\w\s-]+:/.test(trimmed)) {
+        return 'yaml';
+    }
+    // SQL
+    const sqlKeywords = /\b(SELECT|INSERT|UPDATE|DELETE|FROM|WHERE|INTO|VALUES|JOIN)\b/i;
+    if (sqlKeywords.test(content)) {
+        return 'sql';
+    }
+    // XML
+    if (trimmed.startsWith('<?xml') || trimmed.startsWith('<!DOCTYPE') || /<[^>]+>/.test(trimmed)) {
+        return 'xml';
+    }
+    // Code-like (has function/class definitions, imports, etc.)
+    if (/^(\s*(import|export|from|const|let|var|function|class|def|pub|fn)\b)/m.test(content)) {
+        return 'code';
+    }
+    return 'plaintext';
+}
+/**
+ * Context-aware masker
+ */
+export class ContextMasker {
+    masker;
+    constructor() {
+        this.masker = new DataMasker();
+    }
+    /**
+     * Mask content with context awareness
+     */
+    mask(content) {
+        const context = detectContext(content);
+        switch (context) {
+            case 'json':
+                return this.maskJSON(content);
+            case 'sql':
+                return this.maskSQL(content);
+            case 'yaml':
+                return this.maskYAML(content);
+            case 'xml':
+                return this.maskXML(content);
+            default:
+                return this.maskPlaintext(content, context);
+        }
+    }
+    /**
+     * Mask JSON - preserve keys, mask values
+     */
+    maskJSON(content) {
+        let valuesMasked = 0;
+        let identifiersPreserved = 0;
+        try {
+            const obj = JSON.parse(content);
+            const maskValue = (val) => {
+                if (typeof val === 'string') {
+                    const result = this.masker.mask(val);
+                    if (result.stats.total > 0) {
+                        valuesMasked++;
+                        return result.masked;
+                    }
+                    return val;
+                }
+                if (Array.isArray(val)) {
+                    return val.map(maskValue);
+                }
+                if (val && typeof val === 'object') {
+                    const result = {};
+                    for (const [key, value] of Object.entries(val)) {
+                        identifiersPreserved++;
+                        result[key] = maskValue(value);
+                    }
+                    return result;
+                }
+                return val;
+            };
+            const maskedObj = maskValue(obj);
+            const masked = JSON.stringify(maskedObj, null, 2);
+            return { masked, context: 'json', stats: { valuesMasked, identifiersPreserved } };
+        }
+        catch {
+            // Not valid JSON, fall back to plaintext
+            return this.maskPlaintext(content, 'plaintext');
+        }
+    }
+    /**
+     * Mask SQL - preserve identifiers, mask string literals
+     */
+    maskSQL(content) {
+        let valuesMasked = 0;
+        let identifiersPreserved = 0;
+        // Match SQL string literals
+        const lines = content.split('\n');
+        const maskedLines = lines.map(line => {
+            // Mask string literals
+            let masked = line.replace(/'([^']+)'/g, (match, value) => {
+                const result = this.masker.mask(value);
+                if (result.stats.total > 0) {
+                    valuesMasked++;
+                    return `'${result.masked}'`;
+                }
+                return match;
+            });
+            // Preserve identifiers (table names, column names)
+            identifiersPreserved += (line.match(/\b[A-Z][A-Z0-9_]*\b/g) || []).length;
+            return masked;
+        });
+        return {
+            masked: maskedLines.join('\n'),
+            context: 'sql',
+            stats: { valuesMasked, identifiersPreserved }
+        };
+    }
+    /**
+     * Mask YAML - preserve keys, mask values
+     */
+    maskYAML(content) {
+        let valuesMasked = 0;
+        let identifiersPreserved = 0;
+        const lines = content.split('\n');
+        const maskedLines = lines.map(line => {
+            // Check if this is a key-value line
+            const match = line.match(/^(\s*)([\w-]+):\s*(.+)$/);
+            if (match) {
+                const [, indent, key, value] = match;
+                const result = this.masker.mask(value.trim());
+                if (result.stats.total > 0) {
+                    valuesMasked++;
+                    return `${indent}${key}: ${result.masked}`;
+                }
+                identifiersPreserved++;
+                return line;
+            }
+            // Check for array items
+            const arrayMatch = line.match(/^(\s*)-\s*(.+)/);
+            if (arrayMatch) {
+                const [, indent, value] = arrayMatch;
+                const result = this.masker.mask(value.trim());
+                if (result.stats.total > 0) {
+                    valuesMasked++;
+                    return `${indent}- ${result.masked}`;
+                }
+                return line;
+            }
+            return line;
+        });
+        return {
+            masked: maskedLines.join('\n'),
+            context: 'yaml',
+            stats: { valuesMasked, identifiersPreserved }
+        };
+    }
+    /**
+     * Mask XML - preserve tags/attributes, mask text content
+     */
+    maskXML(content) {
+        let valuesMasked = 0;
+        let identifiersPreserved = 0;
+        // Count tags (identifiers)
+        identifiersPreserved += (content.match(/<[\w:]+/g) || []).length;
+        // Mask text content between tags
+        let masked = content.replace(/>([^<]+)</g, (match, text) => {
+            if (text.trim().length === 0)
+                return match;
+            const result = this.masker.mask(text.trim());
+            if (result.stats.total > 0) {
+                valuesMasked++;
+                return `>${result.masked}<`;
+            }
+            return match;
+        });
+        // Mask attribute values
+        masked = masked.replace(/(\s+[\w:]+)=["']([^"']+)["']/g, (match, attr, value) => {
+            const result = this.masker.mask(value);
+            if (result.stats.total > 0) {
+                valuesMasked++;
+                return `${attr}="${result.masked}"`;
+            }
+            return match;
+        });
+        return { masked, context: 'xml', stats: { valuesMasked, identifiersPreserved } };
+    }
+    /**
+     * Regular plaintext masking
+     */
+    maskPlaintext(content, context) {
+        const result = this.masker.mask(content);
+        return {
+            masked: result.masked,
+            context,
+            stats: { valuesMasked: result.stats.total, identifiersPreserved: 0 }
+        };
+    }
+}
+/**
+ * Convenience function
+ */
+export function maskWithContext(content) {
+    const masker = new ContextMasker();
+    return masker.mask(content);
+}
+//# sourceMappingURL=context-detection.js.map

package/dist/context-detection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-detection.js","sourceRoot":"","sources":["../src/context-detection.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAaxC;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;IAE9B,OAAO;IACP,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO;IACP,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM;IACN,MAAM,WAAW,GAAG,gEAAgE,CAAA;IACpF,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM;IACN,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9F,OAAO,KAAK,CAAA;IACd,CAAC;IAED,4DAA4D;IAC5D,IAAI,uEAAuE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1F,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,WAAW,CAAA;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,CAAY;IAE1B;QACE,IAAI,CAAC,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,OAAe;QAClB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;QAEtC,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC/B,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAC9B,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC/B,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAC9B;gBACE,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,OAAe;QAC9B,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,IAAI,oBAAoB,GAAG,CAAC,CAAA;QAE5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAE/B,MAAM,SAAS,GAAG,CAAC,GAAY,EAAW,EAAE;gBAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;oBACpC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;wBAC3B,YAAY,EAAE,CAAA;wBACd,OAAO,MAAM,CAAC,MAAM,CAAA;oBACtB,CAAC;oBACD,OAAO,GAAG,CAAA;gBACZ,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;gBAC3B,CAAC;gBACD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;oBACnC,MAAM,MAAM,GAA4B,EAAE,CAAA;oBAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC/C,oBAAoB,EAAE,CAAA;wBACtB,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;oBAChC,CAAC;oBACD,OAAO,MAAM,CAAA;gBACf,CAAC;gBACD,OAAO,GAAG,CAAA;YACZ,CAAC,CAAA;YAED,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAEjD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE,EAAE,CAAA;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;YACzC,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,OAAe;QAC7B,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,IAAI,oBAAoB,GAAG,CAAC,CAAA;QAE5B,4BAA4B;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YACnC,uBAAuB;YACvB,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACtC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;oBAC3B,YAAY,EAAE,CAAA;oBACd,OAAO,IAAI,MAAM,CAAC,MAAM,GAAG,CAAA;gBAC7B,CAAC;gBACD,OAAO,KAAK,CAAA;YACd,CAAC,CAAC,CAAA;YAEF,mDAAmD;YACnD,oBAAoB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;YAEzE,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE;SAC9C,CAAA;IACH,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,OAAe;QAC9B,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,IAAI,oBAAoB,GAAG,CAAC,CAAA;QAE5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YACnC,oCAAoC;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAA;YACnD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,KAAK,CAAA;gBACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;gBAE7C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;oBAC3B,YAAY,EAAE,CAAA;oBACd,OAAO,GAAG,MAAM,GAAG,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,CAAA;gBAC5C,CAAC;gBAED,oBAAoB,EAAE,CAAA;gBACtB,OAAO,IAAI,CAAA;YACb,CAAC;YAED,wBAAwB;YACxB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;YAC/C,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,UAAU,CAAA;gBACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;gBAE7C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;oBAC3B,YAAY,EAAE,CAAA;oBACd,OAAO,GAAG,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAA;gBACtC,CAAC;gBAED,OAAO,IAAI,CAAA;YACb,CAAC;YAED,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE;SAC9C,CAAA;IACH,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,OAAe;QAC7B,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,IAAI,oBAAoB,GAAG,CAAC,CAAA;QAE5B,2BAA2B;QAC3B,oBAAoB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;QAEhE,iCAAiC;QACjC,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACzD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAA;YAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC3B,YAAY,EAAE,CAAA;gBACd,OAAO,IAAI,MAAM,CAAC,MAAM,GAAG,CAAA;YAC7B,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;QAEF,wBAAwB;QACxB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,+BAA+B,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACtC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC3B,YAAY,EAAE,CAAA;gBACd,OAAO,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,GAAG,CAAA;YACrC,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAA;QAEF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE,EAAE,CAAA;IAClF,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,OAAe,EAAE,OAAoB;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO;YACP,KAAK,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE,CAAC,EAAE;SACrE,CAAA;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAA;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAC7B,CAAC"}

package/dist/diff-masking.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Diff masking - mask git diff output for safe LLM code review
+ *
+ * Preserves diff structure while masking sensitive data
+ */
+export interface DiffOptions {
+    /** Base branch or commit */
+    base?: string;
+    /** Head branch or commit (default: working directory) */
+    head?: string;
+    /** Git options */
+    gitDir?: string;
+    /** Masking level */
+    level?: 'basic' | 'standard' | 'aggressive';
+    /** Path to restrict diff */
+    path?: string;
+}
+export interface MaskedDiff {
+    maskedDiff: string;
+    originalLineCount: number;
+    stats: {
+        filesChanged: number;
+        linesAdded: number;
+        linesRemoved: number;
+        masksApplied: number;
+    };
+}
+/**
+ * Masker for git diff output
+ */
+export declare class DiffMasker {
+    private masker;
+    constructor();
+    /**
+     * Get git diff and mask it
+     */
+    maskDiff(options?: DiffOptions): MaskedDiff;
+    /**
+     * Get git diff output
+     */
+    private getDiff;
+    /**
+     * Format masked diff for display
+     */
+    format(maskedDiff: MaskedDiff): string;
+}
+/**
+ * Convenience function to mask git diff
+ */
+export declare function maskDiff(options?: DiffOptions): string;
+//# sourceMappingURL=diff-masking.d.ts.map

package/dist/diff-masking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-masking.d.ts","sourceRoot":"","sources":["../src/diff-masking.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kBAAkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,oBAAoB;IACpB,KAAK,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,YAAY,CAAA;IAC3C,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB,EAAE,MAAM,CAAA;IACzB,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAA;QACpB,UAAU,EAAE,MAAM,CAAA;QAClB,YAAY,EAAE,MAAM,CAAA;QACpB,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;CACF;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAY;;IAM1B;;OAEG;IACH,QAAQ,CAAC,OAAO,GAAE,WAAgB,GAAG,UAAU;IAqD/C;;OAEG;IACH,OAAO,CAAC,OAAO;IA+Bf;;OAEG;IACH,MAAM,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM;CAiBvC;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,CAItD"}