nz-privacy-auditor 0.8.0

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,UAAU,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAExE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,KAAK,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EACL,kBAAkB,IAAI,sBAAsB,EAC5C,aAAa,IAAI,iBAAiB,EAClC,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,OAAO,EACZ,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,OAAO,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,52 @@
+"use strict";
+/**
+ * nz-privacy-auditor
+ *
+ * Privacy Act 2020 compliance auditor for ML datasets. Scans text for
+ * NZ-specific personal information: IRD, NHI, driver licence, phone,
+ * address, te reo Māori names.
+ *
+ * TypeScript port of the Python package
+ * (https://github.com/ShahnawazKakarh/nz-privacy-auditor).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VERSION = exports.DETECTOR_DESCRIPTIONS = exports.VerificationCache = exports.QuotaExceededError = exports.GeminiVerifier = exports.LLM_DEFAULT_MODEL = exports.LLM_DEFAULT_CACHE_PATH = exports.applyVerification = exports.parseCsv = exports.renderConsole = exports.toJson = exports.toDict = exports.defaultDetectors = exports.Scanner = exports.foldMacrons = exports.MaoriNameDetector = exports.NZ_LOCATIONS = exports.AddressDetector = exports.classifyNzPhone = exports.toNsn = exports.toE164 = exports.PhoneDetector = exports.DriverLicenceDetector = exports.isValidNhi = exports.NHIDetector = exports.irdChecksumOk = exports.IRDDetector = void 0;
+var ird_1 = require("./detectors/ird");
+Object.defineProperty(exports, "IRDDetector", { enumerable: true, get: function () { return ird_1.IRDDetector; } });
+Object.defineProperty(exports, "irdChecksumOk", { enumerable: true, get: function () { return ird_1.checksumOk; } });
+var nhi_1 = require("./detectors/nhi");
+Object.defineProperty(exports, "NHIDetector", { enumerable: true, get: function () { return nhi_1.NHIDetector; } });
+Object.defineProperty(exports, "isValidNhi", { enumerable: true, get: function () { return nhi_1.isValidNhi; } });
+var driver_licence_1 = require("./detectors/driver_licence");
+Object.defineProperty(exports, "DriverLicenceDetector", { enumerable: true, get: function () { return driver_licence_1.DriverLicenceDetector; } });
+var phone_1 = require("./detectors/phone");
+Object.defineProperty(exports, "PhoneDetector", { enumerable: true, get: function () { return phone_1.PhoneDetector; } });
+Object.defineProperty(exports, "toE164", { enumerable: true, get: function () { return phone_1.toE164; } });
+Object.defineProperty(exports, "toNsn", { enumerable: true, get: function () { return phone_1.toNsn; } });
+Object.defineProperty(exports, "classifyNzPhone", { enumerable: true, get: function () { return phone_1.classify; } });
+var address_1 = require("./detectors/address");
+Object.defineProperty(exports, "AddressDetector", { enumerable: true, get: function () { return address_1.AddressDetector; } });
+Object.defineProperty(exports, "NZ_LOCATIONS", { enumerable: true, get: function () { return address_1.NZ_LOCATIONS; } });
+var maori_name_1 = require("./detectors/maori_name");
+Object.defineProperty(exports, "MaoriNameDetector", { enumerable: true, get: function () { return maori_name_1.MaoriNameDetector; } });
+Object.defineProperty(exports, "foldMacrons", { enumerable: true, get: function () { return maori_name_1.foldMacrons; } });
+var scanner_1 = require("./scanner");
+Object.defineProperty(exports, "Scanner", { enumerable: true, get: function () { return scanner_1.Scanner; } });
+Object.defineProperty(exports, "defaultDetectors", { enumerable: true, get: function () { return scanner_1.defaultDetectors; } });
+var report_1 = require("./report");
+Object.defineProperty(exports, "toDict", { enumerable: true, get: function () { return report_1.toDict; } });
+Object.defineProperty(exports, "toJson", { enumerable: true, get: function () { return report_1.toJson; } });
+Object.defineProperty(exports, "renderConsole", { enumerable: true, get: function () { return report_1.renderConsole; } });
+var cli_1 = require("./cli");
+Object.defineProperty(exports, "parseCsv", { enumerable: true, get: function () { return cli_1.parseCsv; } });
+var verification_1 = require("./verification");
+Object.defineProperty(exports, "applyVerification", { enumerable: true, get: function () { return verification_1.applyVerification; } });
+var verifiers_1 = require("./verifiers");
+Object.defineProperty(exports, "LLM_DEFAULT_CACHE_PATH", { enumerable: true, get: function () { return verifiers_1.DEFAULT_CACHE_PATH; } });
+Object.defineProperty(exports, "LLM_DEFAULT_MODEL", { enumerable: true, get: function () { return verifiers_1.DEFAULT_MODEL; } });
+Object.defineProperty(exports, "GeminiVerifier", { enumerable: true, get: function () { return verifiers_1.GeminiVerifier; } });
+Object.defineProperty(exports, "QuotaExceededError", { enumerable: true, get: function () { return verifiers_1.QuotaExceededError; } });
+Object.defineProperty(exports, "VerificationCache", { enumerable: true, get: function () { return verifiers_1.VerificationCache; } });
+Object.defineProperty(exports, "DETECTOR_DESCRIPTIONS", { enumerable: true, get: function () { return verifiers_1.DETECTOR_DESCRIPTIONS; } });
+exports.VERSION = "0.8.0";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAGH,uCAA2E;AAAlE,kGAAA,WAAW,OAAA;AAAE,oGAAA,UAAU,OAAiB;AACjD,uCAA0D;AAAjD,kGAAA,WAAW,OAAA;AAAE,iGAAA,UAAU,OAAA;AAChC,6DAAmE;AAA1D,uHAAA,qBAAqB,OAAA;AAC9B,2CAA8F;AAArF,sGAAA,aAAa,OAAA;AAAE,+FAAA,MAAM,OAAA;AAAE,8FAAA,KAAK,OAAA;AAAE,wGAAA,QAAQ,OAAmB;AAClE,+CAAoE;AAA3D,0GAAA,eAAe,OAAA;AAAE,uGAAA,YAAY,OAAA;AACtC,qDAAwE;AAA/D,+GAAA,iBAAiB,OAAA;AAAE,yGAAA,WAAW,OAAA;AAGvC,qCAAsD;AAA7C,kGAAA,OAAO,OAAA;AAAE,2GAAA,gBAAgB,OAAA;AAClC,mCAAyD;AAAhD,gGAAA,MAAM,OAAA;AAAE,gGAAA,MAAM,OAAA;AAAE,uGAAA,aAAa,OAAA;AACtC,6BAAiC;AAAxB,+FAAA,QAAQ,OAAA;AACjB,+CAAkF;AAAzE,iHAAA,iBAAiB,OAAA;AAC1B,yCAWqB;AAVnB,mHAAA,kBAAkB,OAA0B;AAC5C,8GAAA,aAAa,OAAqB;AAClC,2GAAA,cAAc,OAAA;AACd,+GAAA,kBAAkB,OAAA;AAClB,8GAAA,iBAAiB,OAAA;AACjB,kHAAA,qBAAqB,OAAA;AAOV,QAAA,OAAO,GAAG,OAAO,CAAC"}

package/dist/report.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Report rendering for ScanResult instances.
+ *
+ * Provides a JSON serialiser and a plain-text console renderer. HTML
+ * reports are planned for a later release.
+ */
+import type { ScanResult } from "./scanner";
+/** Convert a ScanResult to a JSON-serialisable plain object. */
+export declare function toDict(result: ScanResult): Record<string, unknown>;
+/** Render the ScanResult as a JSON string. */
+export declare function toJson(result: ScanResult, indent?: number | null): string;
+/** Render a human-readable summary + findings table as plain text. */
+export declare function renderConsole(result: ScanResult): string;
+//# sourceMappingURL=report.d.ts.map

package/dist/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,gEAAgE;AAChE,wBAAgB,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBlE;AAED,8CAA8C;AAC9C,wBAAgB,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,GAAE,MAAM,GAAG,IAAQ,GAAG,MAAM,CAE5E;AAED,sEAAsE;AACtE,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAwDxD"}

package/dist/report.js

@@ -0,0 +1,90 @@
+"use strict";
+/**
+ * Report rendering for ScanResult instances.
+ *
+ * Provides a JSON serialiser and a plain-text console renderer. HTML
+ * reports are planned for a later release.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toDict = toDict;
+exports.toJson = toJson;
+exports.renderConsole = renderConsole;
+/** Convert a ScanResult to a JSON-serialisable plain object. */
+function toDict(result) {
+    return {
+        summary: {
+            rows_scanned: result.rowsScanned,
+            columns_scanned: result.columnsScanned,
+            detectors_used: result.detectorsUsed,
+            total_findings: result.totalFindings,
+            by_detector: result.countByDetector,
+            by_severity: result.countBySeverity,
+            by_column: result.countByColumn,
+        },
+        findings: result.findings.map((cf) => ({
+            row: cf.row,
+            column: cf.column,
+            detector: cf.finding.detector,
+            severity: cf.finding.severity,
+            value: cf.finding.value,
+            start: cf.finding.start,
+            end: cf.finding.end,
+            confidence: cf.finding.confidence,
+            context: cf.finding.context,
+        })),
+    };
+}
+/** Render the ScanResult as a JSON string. */
+function toJson(result, indent = 2) {
+    return JSON.stringify(toDict(result), null, indent ?? 0);
+}
+/** Render a human-readable summary + findings table as plain text. */
+function renderConsole(result) {
+    const lines = [];
+    lines.push(`nz-privacy-auditor scanned ${result.rowsScanned} rows across ` +
+        `${result.columnsScanned.length} string columns`);
+    lines.push(`Total findings: ${result.totalFindings}  •  ` +
+        `Detectors: ${result.detectorsUsed.join(", ")}`);
+    if (result.totalFindings === 0) {
+        lines.push("No PII findings.");
+        return lines.join("\n");
+    }
+    const sev = Object.entries(result.countBySeverity)
+        .sort()
+        .map(([k, v]) => `${k} ${v}`)
+        .join(", ");
+    const det = Object.entries(result.countByDetector)
+        .sort()
+        .map(([k, v]) => `${k} ${v}`)
+        .join(", ");
+    lines.push(`By severity: ${sev}`);
+    lines.push(`By detector: ${det}`);
+    // Simple monospace table
+    const header = ["row", "column", "detector", "severity", "confidence", "value"];
+    const rows = result.findings.slice(0, 200).map((cf) => {
+        let value = cf.finding.value;
+        if (value.length > 40)
+            value = value.slice(0, 37) + "...";
+        return [
+            String(cf.row),
+            cf.column,
+            cf.finding.detector,
+            cf.finding.severity,
+            cf.finding.confidence.toFixed(2),
+            value,
+        ];
+    });
+    const widths = header.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+    const pad = (s, w) => s.padEnd(w, " ");
+    lines.push("");
+    lines.push(header.map((h, i) => pad(h, widths[i])).join("  "));
+    lines.push(widths.map((w) => "-".repeat(w)).join("  "));
+    for (const row of rows) {
+        lines.push(row.map((c, i) => pad(c, widths[i])).join("  "));
+    }
+    if (result.totalFindings > 200) {
+        lines.push(`… ${result.totalFindings - 200} more findings not shown.`);
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=report.js.map

package/dist/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAKH,wBAuBC;AAGD,wBAEC;AAGD,sCAwDC;AAxFD,gEAAgE;AAChE,SAAgB,MAAM,CAAC,MAAkB;IACvC,OAAO;QACL,OAAO,EAAE;YACP,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,eAAe,EAAE,MAAM,CAAC,cAAc;YACtC,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,WAAW,EAAE,MAAM,CAAC,eAAe;YACnC,WAAW,EAAE,MAAM,CAAC,eAAe;YACnC,SAAS,EAAE,MAAM,CAAC,aAAa;SAChC;QACD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrC,GAAG,EAAE,EAAE,CAAC,GAAG;YACX,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ;YAC7B,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ;YAC7B,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK;YACvB,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG;YACnB,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU;YACjC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO;SAC5B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,8CAA8C;AAC9C,SAAgB,MAAM,CAAC,MAAkB,EAAE,SAAwB,CAAC;IAClE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,sEAAsE;AACtE,SAAgB,aAAa,CAAC,MAAkB;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CACR,8BAA8B,MAAM,CAAC,WAAW,eAAe;QAC7D,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,iBAAiB,CACnD,CAAC;IACF,KAAK,CAAC,IAAI,CACR,mBAAmB,MAAM,CAAC,aAAa,OAAO;QAC5C,cAAc,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClD,CAAC;IAEF,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;SAC/C,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;SAC/C,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;IAElC,yBAAyB;IACzB,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACpD,IAAI,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;QAC1D,OAAO;YACL,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC;YACd,EAAE,CAAC,MAAM;YACT,EAAE,CAAC,OAAO,CAAC,QAAQ;YACnB,EAAE,CAAC,OAAO,CAAC,QAAQ;YACnB,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YAChC,KAAK;SACN,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,CACrD,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,aAAa,GAAG,GAAG,2BAA2B,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/scanner.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Dataset-level scanner that orchestrates the detector pipeline.
+ *
+ * `Scanner` walks each string-typed value across a set of rows and applies
+ * every configured detector to each cell. Results are collected into a
+ * `ScanResult` with per-cell findings and aggregate summary counts.
+ */
+import type { Detector, Finding } from "./detectors/base";
+/** Return the default detector set (all six built-in detectors). */
+export declare function defaultDetectors(): Detector[];
+/** A `Finding` enriched with its row index, column name, and cell value. */
+export interface CellFinding {
+    row: number;
+    column: string;
+    finding: Finding;
+    /** The full cell value that produced this finding. */
+    cellValue: string;
+}
+/** Aggregate result of scanning a set of rows. */
+export interface ScanResult {
+    rowsScanned: number;
+    columnsScanned: string[];
+    detectorsUsed: string[];
+    findings: CellFinding[];
+    totalFindings: number;
+    countByDetector: Record<string, number>;
+    countBySeverity: Record<string, number>;
+    countByColumn: Record<string, number>;
+}
+export interface ScannerOptions {
+    detectors?: Detector[];
+    /** Drop findings with confidence below this threshold. Default 0.0. */
+    minConfidence?: number;
+}
+/** Orchestrates detection across a set of rows or a single value. */
+export declare class Scanner {
+    readonly detectors: Detector[];
+    readonly minConfidence: number;
+    constructor(options?: ScannerOptions);
+    /** Scan a single string with all configured detectors. */
+    scanValue(value: string): Finding[];
+    /**
+     * Scan every string-typed column of `rows` and return a ScanResult.
+     *
+     * Each row is a plain object; non-string values are ignored (numeric
+     * columns are not scanned). Columns are derived from the union of keys
+     * across all rows.
+     */
+    scanRows(rows: Record<string, unknown>[]): ScanResult;
+}
+//# sourceMappingURL=scanner.d.ts.map

package/dist/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAQ1D,oEAAoE;AACpE,wBAAgB,gBAAgB,IAAI,QAAQ,EAAE,CAS7C;AAED,4EAA4E;AAC5E,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,kDAAkD;AAClD,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAwBD,qEAAqE;AACrE,qBAAa,OAAO;IAClB,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAEnB,OAAO,GAAE,cAAmB;IAKxC,0DAA0D;IAC1D,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE;IAWnC;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,UAAU;CA0CtD"}

package/dist/scanner.js

@@ -0,0 +1,114 @@
+"use strict";
+/**
+ * Dataset-level scanner that orchestrates the detector pipeline.
+ *
+ * `Scanner` walks each string-typed value across a set of rows and applies
+ * every configured detector to each cell. Results are collected into a
+ * `ScanResult` with per-cell findings and aggregate summary counts.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Scanner = void 0;
+exports.defaultDetectors = defaultDetectors;
+const address_1 = require("./detectors/address");
+const driver_licence_1 = require("./detectors/driver_licence");
+const ird_1 = require("./detectors/ird");
+const maori_name_1 = require("./detectors/maori_name");
+const nhi_1 = require("./detectors/nhi");
+const phone_1 = require("./detectors/phone");
+/** Return the default detector set (all six built-in detectors). */
+function defaultDetectors() {
+    return [
+        new ird_1.IRDDetector(),
+        new nhi_1.NHIDetector(),
+        new driver_licence_1.DriverLicenceDetector(),
+        new phone_1.PhoneDetector(),
+        new address_1.AddressDetector(),
+        new maori_name_1.MaoriNameDetector(),
+    ];
+}
+function buildSummary(findings) {
+    const byDetector = {};
+    const bySeverity = {};
+    const byColumn = {};
+    for (const cf of findings) {
+        byDetector[cf.finding.detector] = (byDetector[cf.finding.detector] ?? 0) + 1;
+        bySeverity[cf.finding.severity] = (bySeverity[cf.finding.severity] ?? 0) + 1;
+        byColumn[cf.column] = (byColumn[cf.column] ?? 0) + 1;
+    }
+    return {
+        totalFindings: findings.length,
+        countByDetector: byDetector,
+        countBySeverity: bySeverity,
+        countByColumn: byColumn,
+    };
+}
+/** Orchestrates detection across a set of rows or a single value. */
+class Scanner {
+    constructor(options = {}) {
+        this.detectors = options.detectors ?? defaultDetectors();
+        this.minConfidence = options.minConfidence ?? 0.0;
+    }
+    /** Scan a single string with all configured detectors. */
+    scanValue(value) {
+        const out = [];
+        for (const detector of this.detectors) {
+            for (const f of detector.scan(value)) {
+                if (f.confidence < this.minConfidence)
+                    continue;
+                out.push(f);
+            }
+        }
+        return out;
+    }
+    /**
+     * Scan every string-typed column of `rows` and return a ScanResult.
+     *
+     * Each row is a plain object; non-string values are ignored (numeric
+     * columns are not scanned). Columns are derived from the union of keys
+     * across all rows.
+     */
+    scanRows(rows) {
+        const columnSet = new Set();
+        for (const row of rows) {
+            for (const key of Object.keys(row))
+                columnSet.add(key);
+        }
+        // A column is "string" if at least one non-empty string appears in it.
+        const stringCols = [];
+        for (const col of columnSet) {
+            const hasString = rows.some((r) => typeof r[col] === "string" && r[col].length > 0);
+            if (hasString)
+                stringCols.push(col);
+        }
+        const findings = [];
+        for (let rowIdx = 0; rowIdx < rows.length; rowIdx++) {
+            const row = rows[rowIdx];
+            for (const col of stringCols) {
+                const raw = row[col];
+                if (typeof raw !== "string" || raw.length === 0)
+                    continue;
+                for (const detector of this.detectors) {
+                    for (const f of detector.scan(raw)) {
+                        if (f.confidence < this.minConfidence)
+                            continue;
+                        findings.push({
+                            row: rowIdx,
+                            column: col,
+                            finding: f,
+                            cellValue: raw,
+                        });
+                    }
+                }
+            }
+        }
+        return {
+            rowsScanned: rows.length,
+            columnsScanned: stringCols,
+            detectorsUsed: this.detectors.map((d) => d.name),
+            findings,
+            ...buildSummary(findings),
+        };
+    }
+}
+exports.Scanner = Scanner;
+//# sourceMappingURL=scanner.js.map

package/dist/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAWH,4CASC;AAjBD,iDAAsD;AACtD,+DAAmE;AACnE,yCAA8C;AAC9C,uDAA2D;AAC3D,yCAA8C;AAC9C,6CAAkD;AAElD,oEAAoE;AACpE,SAAgB,gBAAgB;IAC9B,OAAO;QACL,IAAI,iBAAW,EAAE;QACjB,IAAI,iBAAW,EAAE;QACjB,IAAI,sCAAqB,EAAE;QAC3B,IAAI,qBAAa,EAAE;QACnB,IAAI,yBAAe,EAAE;QACrB,IAAI,8BAAiB,EAAE;KACxB,CAAC;AACJ,CAAC;AA6BD,SAAS,YAAY,CACnB,QAAuB;IAKvB,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,eAAe,EAAE,UAAU;QAC3B,eAAe,EAAE,UAAU;QAC3B,aAAa,EAAE,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAa,OAAO;IAIlB,YAAY,UAA0B,EAAE;QACtC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;QACzD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC;IACpD,CAAC;IAED,0DAA0D;IAC1D,SAAS,CAAC,KAAa;QACrB,MAAM,GAAG,GAAc,EAAE,CAAC;QAC1B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa;oBAAE,SAAS;gBAChD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,IAA+B;QACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,uEAAuE;QACvE,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,GAAG,CAAY,CAAC,MAAM,GAAG,CAAC,CACnE,CAAC;YACF,IAAI,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAE,CAAC;YAC1B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBACrB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAC1D,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACtC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBACnC,IAAI,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa;4BAAE,SAAS;wBAChD,QAAQ,CAAC,IAAI,CAAC;4BACZ,GAAG,EAAE,MAAM;4BACX,MAAM,EAAE,GAAG;4BACX,OAAO,EAAE,CAAC;4BACV,SAAS,EAAE,GAAG;yBACf,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,cAAc,EAAE,UAAU;YAC1B,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,QAAQ;YACR,GAAG,YAAY,CAAC,QAAQ,CAAC;SAC1B,CAAC;IACJ,CAAC;CACF;AAtED,0BAsEC"}

package/dist/verification.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Apply an LLM verification pass to an existing ScanResult.
+ *
+ * The verifier re-scores findings whose initial confidence is below a
+ * configurable threshold. A `confirmed` verdict promotes confidence to at
+ * least 0.95; a `rejected` verdict drops the finding entirely; `uncertain`
+ * leaves the original score in place.
+ */
+import type { ScanResult } from "./scanner";
+import { type LLMVerifier } from "./verifiers/base";
+export interface ApplyVerificationOptions {
+    /** Only findings with confidence below this threshold are verified. */
+    threshold?: number;
+    /** 'stop' returns partial result on quota-exceeded; 'raise' rethrows. */
+    onQuotaExceeded?: "stop" | "raise";
+}
+/**
+ * Run a second-pass LLM verification over the findings of a ScanResult.
+ *
+ * Confirmed → confidence promoted to max(orig, 0.95), finding annotated.
+ * Rejected  → finding dropped from the result.
+ * Uncertain → confidence unchanged, finding annotated.
+ */
+export declare function applyVerification(result: ScanResult, verifier: LLMVerifier, options?: ApplyVerificationOptions): Promise<ScanResult>;
+//# sourceMappingURL=verification.d.ts.map

package/dist/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../src/verification.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAe,UAAU,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAExE,MAAM,WAAW,wBAAwB;IACvC,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACpC;AAsBD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,WAAW,EACrB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,UAAU,CAAC,CA6DrB"}

package/dist/verification.js

@@ -0,0 +1,89 @@
+"use strict";
+/**
+ * Apply an LLM verification pass to an existing ScanResult.
+ *
+ * The verifier re-scores findings whose initial confidence is below a
+ * configurable threshold. A `confirmed` verdict promotes confidence to at
+ * least 0.95; a `rejected` verdict drops the finding entirely; `uncertain`
+ * leaves the original score in place.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyVerification = applyVerification;
+const base_1 = require("./verifiers/base");
+function rebuildSummary(findings) {
+    const byDetector = {};
+    const bySeverity = {};
+    const byColumn = {};
+    for (const cf of findings) {
+        byDetector[cf.finding.detector] = (byDetector[cf.finding.detector] ?? 0) + 1;
+        bySeverity[cf.finding.severity] = (bySeverity[cf.finding.severity] ?? 0) + 1;
+        byColumn[cf.column] = (byColumn[cf.column] ?? 0) + 1;
+    }
+    return {
+        totalFindings: findings.length,
+        countByDetector: byDetector,
+        countBySeverity: bySeverity,
+        countByColumn: byColumn,
+    };
+}
+/**
+ * Run a second-pass LLM verification over the findings of a ScanResult.
+ *
+ * Confirmed → confidence promoted to max(orig, 0.95), finding annotated.
+ * Rejected  → finding dropped from the result.
+ * Uncertain → confidence unchanged, finding annotated.
+ */
+async function applyVerification(result, verifier, options = {}) {
+    const threshold = options.threshold ?? 0.8;
+    const onQuota = options.onQuotaExceeded ?? "stop";
+    const newFindings = [];
+    let quotaHit = false;
+    for (const cf of result.findings) {
+        if (cf.finding.confidence >= threshold || quotaHit) {
+            newFindings.push(cf);
+            continue;
+        }
+        let v;
+        try {
+            v = await verifier.verify(cf.finding.detector, cf.finding.value, cf.cellValue || cf.finding.value);
+        }
+        catch (exc) {
+            if (exc instanceof base_1.QuotaExceededError) {
+                if (onQuota === "raise")
+                    throw exc;
+                quotaHit = true;
+                newFindings.push(cf);
+                continue;
+            }
+            throw exc;
+        }
+        if (v.verdict === "rejected")
+            continue; // drop
+        const newConfidence = v.verdict === "confirmed" ? Math.max(cf.finding.confidence, 0.95) : cf.finding.confidence;
+        newFindings.push({
+            row: cf.row,
+            column: cf.column,
+            cellValue: cf.cellValue,
+            finding: {
+                ...cf.finding,
+                confidence: newConfidence,
+                context: {
+                    ...cf.finding.context,
+                    verified: true,
+                    llm_verdict: v.verdict,
+                    llm_confidence: v.confidence,
+                    llm_reason: v.reason,
+                    llm_cached: v.cached,
+                },
+            },
+        });
+    }
+    return {
+        rowsScanned: result.rowsScanned,
+        columnsScanned: result.columnsScanned,
+        detectorsUsed: result.detectorsUsed,
+        findings: newFindings,
+        ...rebuildSummary(newFindings),
+    };
+}
+//# sourceMappingURL=verification.js.map

package/dist/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../src/verification.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAuCH,8CAiEC;AArGD,2CAAwE;AASxE,SAAS,cAAc,CAAC,QAAuB;IAI7C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,eAAe,EAAE,UAAU;QAC3B,eAAe,EAAE,UAAU;QAC3B,aAAa,EAAE,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,iBAAiB,CACrC,MAAkB,EAClB,QAAqB,EACrB,UAAoC,EAAE;IAEtC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,IAAI,MAAM,CAAC;IAElD,MAAM,WAAW,GAAkB,EAAE,CAAC;IACtC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;YACnD,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QAED,IAAI,CAA6C,CAAC;QAClD,IAAI,CAAC;YACH,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,CACvB,EAAE,CAAC,OAAO,CAAC,QAAQ,EACnB,EAAE,CAAC,OAAO,CAAC,KAAK,EAChB,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,CACjC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,yBAAkB,EAAE,CAAC;gBACtC,IAAI,OAAO,KAAK,OAAO;oBAAE,MAAM,GAAG,CAAC;gBACnC,QAAQ,GAAG,IAAI,CAAC;gBAChB,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU;YAAE,SAAS,CAAC,OAAO;QAE/C,MAAM,aAAa,GACjB,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;QAE5F,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,EAAE,CAAC,GAAG;YACX,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,OAAO,EAAE;gBACP,GAAG,EAAE,CAAC,OAAO;gBACb,UAAU,EAAE,aAAa;gBACzB,OAAO,EAAE;oBACP,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO;oBACrB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,CAAC,CAAC,OAAO;oBACtB,cAAc,EAAE,CAAC,CAAC,UAAU;oBAC5B,UAAU,EAAE,CAAC,CAAC,MAAM;oBACpB,UAAU,EAAE,CAAC,CAAC,MAAM;iBACrB;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,WAAW;QACrB,GAAG,cAAc,CAAC,WAAW,CAAC;KAC/B,CAAC;AACJ,CAAC"}

package/dist/verifiers/base.d.ts

@@ -0,0 +1,27 @@
+/**
+ * LLM verification interface and shared types.
+ */
+/** Outcome of an LLM second-pass review. */
+export type Verdict = "confirmed" | "rejected" | "uncertain";
+/** Outcome of verifying one finding. */
+export interface VerificationResult {
+    verdict: Verdict;
+    /** LLM's own confidence in the verdict, 0..1. */
+    confidence: number;
+    /** One-sentence rationale. */
+    reason: string;
+    /** True when the verdict was served from disk cache. */
+    cached: boolean;
+}
+/** Short, human-readable description of each detector's claim. */
+export declare const DETECTOR_DESCRIPTIONS: Record<string, string>;
+/** Abstract base for second-pass LLM verifiers. */
+export interface LLMVerifier {
+    verify(detector: string, value: string, context: string): Promise<VerificationResult>;
+    close(): void;
+}
+/** Thrown when Gemini returns 429 (quota / rate limit exceeded). */
+export declare class QuotaExceededError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/verifiers/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/verifiers/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,4CAA4C;AAC5C,MAAM,MAAM,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC;AAE7D,wCAAwC;AACxC,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,kEAAkE;AAClE,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAOxD,CAAC;AAEF,mDAAmD;AACnD,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtF,KAAK,IAAI,IAAI,CAAC;CACf;AAED,oEAAoE;AACpE,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B"}

package/dist/verifiers/base.js

@@ -0,0 +1,24 @@
+"use strict";
+/**
+ * LLM verification interface and shared types.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QuotaExceededError = exports.DETECTOR_DESCRIPTIONS = void 0;
+/** Short, human-readable description of each detector's claim. */
+exports.DETECTOR_DESCRIPTIONS = {
+    ird: "an NZ Inland Revenue (IRD) tax identification number",
+    nhi: "an NZ National Health Index (NHI) patient identifier",
+    driver_licence: "an NZ driver licence number issued by Waka Kotahi",
+    phone: "an NZ phone number",
+    address: "an NZ street address",
+    maori_name: "a te reo Māori personal name",
+};
+/** Thrown when Gemini returns 429 (quota / rate limit exceeded). */
+class QuotaExceededError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "QuotaExceededError";
+    }
+}
+exports.QuotaExceededError = QuotaExceededError;
+//# sourceMappingURL=base.js.map

package/dist/verifiers/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/verifiers/base.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAgBH,kEAAkE;AACrD,QAAA,qBAAqB,GAA2B;IAC3D,GAAG,EAAE,sDAAsD;IAC3D,GAAG,EAAE,sDAAsD;IAC3D,cAAc,EAAE,mDAAmD;IACnE,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,sBAAsB;IAC/B,UAAU,EAAE,8BAA8B;CAC3C,CAAC;AAQF,oEAAoE;AACpE,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC"}

package/dist/verifiers/cache.d.ts

@@ -0,0 +1,23 @@
+/**
+ * JSON-file-backed cache for LLM verification results.
+ *
+ * Re-running the auditor on the same dataset must not re-burn quota. The
+ * cache key is a SHA-256 hash of (detector, value, context) so identical
+ * values in identical context windows return immediately without an API
+ * call.
+ *
+ * A JSON file is used instead of SQLite to keep the package zero-native-dep
+ * (no compilation required on install). For our single-process,
+ * single-user audit workflow, this is sufficient.
+ */
+import type { VerificationResult } from "./base";
+export declare class VerificationCache {
+    private readonly filePath;
+    private data;
+    constructor(filePath: string);
+    get(detector: string, value: string, context: string): VerificationResult | null;
+    put(detector: string, value: string, context: string, result: VerificationResult): void;
+    private flush;
+    close(): void;
+}
+//# sourceMappingURL=cache.d.ts.map

package/dist/verifiers/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/verifiers/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,kBAAkB,EAAW,MAAM,QAAQ,CAAC;AAc1D,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,IAAI,CAA8B;gBAE9B,QAAQ,EAAE,MAAM;IAe5B,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAYhF,GAAG,CACD,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,GACzB,IAAI;IAWP,OAAO,CAAC,KAAK;IAIb,KAAK,IAAI,IAAI;CAGd"}