nz-privacy-auditor 0.8.0

package/dist/verifiers/cache.js

@@ -0,0 +1,103 @@
+"use strict";
+/**
+ * JSON-file-backed cache for LLM verification results.
+ *
+ * Re-running the auditor on the same dataset must not re-burn quota. The
+ * cache key is a SHA-256 hash of (detector, value, context) so identical
+ * values in identical context windows return immediately without an API
+ * call.
+ *
+ * A JSON file is used instead of SQLite to keep the package zero-native-dep
+ * (no compilation required on install). For our single-process,
+ * single-user audit workflow, this is sufficient.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerificationCache = void 0;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+function makeKey(detector, value, context) {
+    const payload = JSON.stringify([detector, value, context]);
+    return crypto.createHash("sha256").update(payload).digest("hex");
+}
+class VerificationCache {
+    constructor(filePath) {
+        this.filePath = filePath;
+        fs.mkdirSync(path.dirname(filePath), { recursive: true });
+        if (fs.existsSync(filePath)) {
+            try {
+                this.data = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+            }
+            catch {
+                // Corrupt cache — start fresh.
+                this.data = {};
+            }
+        }
+        else {
+            this.data = {};
+        }
+    }
+    get(detector, value, context) {
+        const key = makeKey(detector, value, context);
+        const entry = this.data[key];
+        if (!entry)
+            return null;
+        return {
+            verdict: entry.verdict,
+            confidence: entry.confidence,
+            reason: entry.reason,
+            cached: true,
+        };
+    }
+    put(detector, value, context, result) {
+        const key = makeKey(detector, value, context);
+        this.data[key] = {
+            verdict: result.verdict,
+            confidence: result.confidence,
+            reason: result.reason,
+            created_at: Date.now(),
+        };
+        this.flush();
+    }
+    flush() {
+        fs.writeFileSync(this.filePath, JSON.stringify(this.data));
+    }
+    close() {
+        this.flush();
+    }
+}
+exports.VerificationCache = VerificationCache;
+//# sourceMappingURL=cache.js.map

package/dist/verifiers/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/verifiers/cache.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAI7B,SAAS,OAAO,CAAC,QAAgB,EAAE,KAAa,EAAE,OAAe;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AASD,MAAa,iBAAiB;IAI5B,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,+BAA+B;gBAC/B,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,QAAgB,EAAE,KAAa,EAAE,OAAe;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED,GAAG,CACD,QAAgB,EAChB,KAAa,EACb,OAAe,EACf,MAA0B;QAE1B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACvB,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEO,KAAK;QACX,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;CACF;AAtDD,8CAsDC"}

package/dist/verifiers/gemini.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Gemini-backed LLMVerifier (model gemini-2.5-flash).
+ *
+ * Uses the Generative Language API REST endpoint directly via Node 18+
+ * built-in `fetch()` — no google-genai SDK dependency. Results are cached
+ * on disk via VerificationCache so re-running the auditor on the same
+ * dataset is free.
+ *
+ * Quota handling:
+ * - On HTTP 429, throws QuotaExceededError so the calling code can stop
+ *   cleanly rather than retrying in a tight loop.
+ * - All other errors fall back to a Verdict.UNCERTAIN result so a single
+ *   bad call cannot abort an audit.
+ */
+import { type LLMVerifier, type VerificationResult } from "./base";
+import { VerificationCache } from "./cache";
+export declare const DEFAULT_MODEL = "gemini-2.5-flash";
+export declare const DEFAULT_CACHE_PATH = "data/llm_cache/cache.json";
+export interface GeminiVerifierOptions {
+    model?: string;
+    cachePath?: string;
+    apiKey?: string;
+    /** Optional fetch override, primarily for tests. */
+    fetchFn?: typeof fetch;
+}
+/**
+ * Gemini-backed LLM verifier with disk caching and clean 429 handling.
+ */
+export declare class GeminiVerifier implements LLMVerifier {
+    readonly model: string;
+    readonly cache: VerificationCache;
+    private readonly apiKey;
+    private readonly fetchFn;
+    constructor(options?: GeminiVerifierOptions);
+    verify(detector: string, value: string, context: string): Promise<VerificationResult>;
+    close(): void;
+}
+//# sourceMappingURL=gemini.d.ts.map

package/dist/verifiers/gemini.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.d.ts","sourceRoot":"","sources":["../../src/verifiers/gemini.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,kBAAkB,EAExB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE5C,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAChD,eAAO,MAAM,kBAAkB,8BAA8B,CAAC;AAkD9D,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,cAAe,YAAW,WAAW;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;gBAE3B,OAAO,GAAE,qBAA0B;IAczC,MAAM,CACV,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,CAAC;IAuD9B,KAAK,IAAI,IAAI;CAGd"}

package/dist/verifiers/gemini.js

@@ -0,0 +1,121 @@
+"use strict";
+/**
+ * Gemini-backed LLMVerifier (model gemini-2.5-flash).
+ *
+ * Uses the Generative Language API REST endpoint directly via Node 18+
+ * built-in `fetch()` — no google-genai SDK dependency. Results are cached
+ * on disk via VerificationCache so re-running the auditor on the same
+ * dataset is free.
+ *
+ * Quota handling:
+ * - On HTTP 429, throws QuotaExceededError so the calling code can stop
+ *   cleanly rather than retrying in a tight loop.
+ * - All other errors fall back to a Verdict.UNCERTAIN result so a single
+ *   bad call cannot abort an audit.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GeminiVerifier = exports.DEFAULT_CACHE_PATH = exports.DEFAULT_MODEL = void 0;
+const base_1 = require("./base");
+const cache_1 = require("./cache");
+exports.DEFAULT_MODEL = "gemini-2.5-flash";
+exports.DEFAULT_CACHE_PATH = "data/llm_cache/cache.json";
+const API_BASE = "https://generativelanguage.googleapis.com/v1beta/models";
+const PROMPT_TEMPLATE = (detector, description, value, context) => `You are a Privacy Act 2020 compliance assistant. A regex / heuristic detector
+has flagged a candidate value as ${description}. Decide whether the value is
+genuinely an instance of that PII type IN ITS CONTEXT, or whether it merely
+matches the shape (e.g. an SKU that looks like a driver-licence number).
+
+Detector:   ${detector}
+Value:      "${value}"
+Full cell:  "${context.replace(/"/g, "'")}"
+
+Respond with ONLY a single JSON object on one line, no markdown, no commentary:
+{"verdict": "confirmed" | "rejected" | "uncertain", "confidence": <float 0..1>, "reason": "<one short sentence>"}
+
+Verdict meanings:
+- confirmed: the value really is ${description} in this context
+- rejected:  the value matches the detector's shape but is clearly NOT ${description}
+- uncertain: cannot decide from the available context
+`;
+function parseResponse(text) {
+    let cleaned = text.trim();
+    // Strip ```json fences if the model added them despite the instruction.
+    if (cleaned.startsWith("```")) {
+        cleaned = cleaned
+            .split("\n")
+            .filter((line) => !line.trim().startsWith("```"))
+            .join("\n");
+    }
+    const obj = JSON.parse(cleaned);
+    const verdict = String(obj.verdict).toLowerCase();
+    if (!["confirmed", "rejected", "uncertain"].includes(verdict)) {
+        throw new Error(`invalid verdict: ${verdict}`);
+    }
+    const rawConf = typeof obj.confidence === "number" ? obj.confidence : 0.5;
+    const confidence = Math.max(0, Math.min(1, rawConf));
+    const reason = String(obj.reason ?? "").trim();
+    return { verdict, confidence, reason };
+}
+/**
+ * Gemini-backed LLM verifier with disk caching and clean 429 handling.
+ */
+class GeminiVerifier {
+    constructor(options = {}) {
+        this.model = options.model ?? exports.DEFAULT_MODEL;
+        this.cache = new cache_1.VerificationCache(options.cachePath ?? exports.DEFAULT_CACHE_PATH);
+        const key = options.apiKey ?? process.env.GOOGLE_API_KEY;
+        if (!key) {
+            throw new Error("GOOGLE_API_KEY is not set. Export it in your shell or pass " +
+                "apiKey= explicitly.");
+        }
+        this.apiKey = key;
+        this.fetchFn = options.fetchFn ?? fetch;
+    }
+    async verify(detector, value, context) {
+        const cached = this.cache.get(detector, value, context);
+        if (cached !== null)
+            return cached;
+        const prompt = PROMPT_TEMPLATE(detector, base_1.DETECTOR_DESCRIPTIONS[detector] ?? "the claimed PII type", value, context);
+        let result;
+        try {
+            const response = await this.fetchFn(`${API_BASE}/${this.model}:generateContent?key=${this.apiKey}`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    contents: [{ parts: [{ text: prompt }] }],
+                }),
+            });
+            if (response.status === 429) {
+                throw new base_1.QuotaExceededError(`Gemini API 429: ${await response.text()}`);
+            }
+            if (!response.ok) {
+                throw new Error(`Gemini API ${response.status}: ${await response.text()}`);
+            }
+            const body = (await response.json());
+            const text = body.candidates?.[0]?.content?.parts?.[0]?.text ?? "";
+            const parsed = parseResponse(text);
+            result = { ...parsed, cached: false };
+        }
+        catch (exc) {
+            if (exc instanceof base_1.QuotaExceededError)
+                throw exc;
+            const msg = String(exc);
+            if (msg.includes("429") || /quota/i.test(msg) || /rate/i.test(msg)) {
+                throw new base_1.QuotaExceededError(msg);
+            }
+            result = {
+                verdict: "uncertain",
+                confidence: 0.5,
+                reason: `LLM error: ${exc instanceof Error ? exc.name : "unknown"}`,
+                cached: false,
+            };
+        }
+        this.cache.put(detector, value, context, result);
+        return result;
+    }
+    close() {
+        this.cache.close();
+    }
+}
+exports.GeminiVerifier = GeminiVerifier;
+//# sourceMappingURL=gemini.js.map

package/dist/verifiers/gemini.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.js","sourceRoot":"","sources":["../../src/verifiers/gemini.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAEH,iCAMgB;AAChB,mCAA4C;AAE/B,QAAA,aAAa,GAAG,kBAAkB,CAAC;AACnC,QAAA,kBAAkB,GAAG,2BAA2B,CAAC;AAC9D,MAAM,QAAQ,GAAG,yDAAyD,CAAC;AAE3E,MAAM,eAAe,GAAG,CACtB,QAAgB,EAChB,WAAmB,EACnB,KAAa,EACb,OAAe,EACP,EAAE,CAAC;mCACsB,WAAW;;;;cAIhC,QAAQ;eACP,KAAK;eACL,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;;;;;;mCAMN,WAAW;yEAC2B,WAAW;;CAEnF,CAAC;AAEF,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1B,wEAAwE;IACxE,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,GAAG,OAAO;aACd,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;aAChD,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAI7B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,EAAa,CAAC;IAC7D,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAUD;;GAEG;AACH,MAAa,cAAc;IAMzB,YAAY,UAAiC,EAAE;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,qBAAa,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,yBAAiB,CAAC,OAAO,CAAC,SAAS,IAAI,0BAAkB,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QACzD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,6DAA6D;gBAC3D,qBAAqB,CACxB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,KAAa,EACb,OAAe;QAEf,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAEnC,MAAM,MAAM,GAAG,eAAe,CAC5B,QAAQ,EACR,4BAAqB,CAAC,QAAQ,CAAC,IAAI,sBAAsB,EACzD,KAAK,EACL,OAAO,CACR,CAAC;QAEF,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,GAAG,QAAQ,IAAI,IAAI,CAAC,KAAK,wBAAwB,IAAI,CAAC,MAAM,EAAE,EAC9D;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;iBAC1C,CAAC;aACH,CACF,CAAC;YAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,yBAAkB,CAAC,mBAAmB,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,yBAAkB;gBAAE,MAAM,GAAG,CAAC;YACjD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,yBAAkB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,GAAG;gBACP,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,cAAc,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE;gBACnE,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAlFD,wCAkFC"}

package/dist/verifiers/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * LLM verification layer for second-pass review of low-confidence findings.
+ */
+export type { LLMVerifier, VerificationResult, Verdict } from "./base";
+export { DETECTOR_DESCRIPTIONS, QuotaExceededError } from "./base";
+export { VerificationCache } from "./cache";
+export { DEFAULT_CACHE_PATH, DEFAULT_MODEL, GeminiVerifier, type GeminiVerifierOptions, } from "./gemini";
+//# sourceMappingURL=index.d.ts.map

package/dist/verifiers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/verifiers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,UAAU,CAAC"}

package/dist/verifiers/index.js

@@ -0,0 +1,16 @@
+"use strict";
+/**
+ * LLM verification layer for second-pass review of low-confidence findings.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GeminiVerifier = exports.DEFAULT_MODEL = exports.DEFAULT_CACHE_PATH = exports.VerificationCache = exports.QuotaExceededError = exports.DETECTOR_DESCRIPTIONS = void 0;
+var base_1 = require("./base");
+Object.defineProperty(exports, "DETECTOR_DESCRIPTIONS", { enumerable: true, get: function () { return base_1.DETECTOR_DESCRIPTIONS; } });
+Object.defineProperty(exports, "QuotaExceededError", { enumerable: true, get: function () { return base_1.QuotaExceededError; } });
+var cache_1 = require("./cache");
+Object.defineProperty(exports, "VerificationCache", { enumerable: true, get: function () { return cache_1.VerificationCache; } });
+var gemini_1 = require("./gemini");
+Object.defineProperty(exports, "DEFAULT_CACHE_PATH", { enumerable: true, get: function () { return gemini_1.DEFAULT_CACHE_PATH; } });
+Object.defineProperty(exports, "DEFAULT_MODEL", { enumerable: true, get: function () { return gemini_1.DEFAULT_MODEL; } });
+Object.defineProperty(exports, "GeminiVerifier", { enumerable: true, get: function () { return gemini_1.GeminiVerifier; } });
+//# sourceMappingURL=index.js.map

package/dist/verifiers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/verifiers/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAGH,+BAAmE;AAA1D,6GAAA,qBAAqB,OAAA;AAAE,0GAAA,kBAAkB,OAAA;AAClD,iCAA4C;AAAnC,0GAAA,iBAAiB,OAAA;AAC1B,mCAKkB;AAJhB,4GAAA,kBAAkB,OAAA;AAClB,uGAAA,aAAa,OAAA;AACb,wGAAA,cAAc,OAAA"}

package/package.json

@@ -0,0 +1,96 @@
+{
+  "name": "nz-privacy-auditor",
+  "version": "0.8.0",
+  "description": "Privacy Act 2020 compliance auditor for ML datasets — scans text and CSV data for NZ-specific PII (IRD, NHI, driver licence, phone, address, te reo Māori names). TypeScript port of the Python package. By QAPulse by SK.",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "nz-privacy-auditor": "dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "require": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./detectors/ird": {
+      "import": "./dist/detectors/ird.js",
+      "require": "./dist/detectors/ird.js",
+      "types": "./dist/detectors/ird.d.ts"
+    },
+    "./detectors/nhi": {
+      "import": "./dist/detectors/nhi.js",
+      "require": "./dist/detectors/nhi.js",
+      "types": "./dist/detectors/nhi.d.ts"
+    },
+    "./detectors/driver_licence": {
+      "import": "./dist/detectors/driver_licence.js",
+      "require": "./dist/detectors/driver_licence.js",
+      "types": "./dist/detectors/driver_licence.d.ts"
+    },
+    "./detectors/phone": {
+      "import": "./dist/detectors/phone.js",
+      "require": "./dist/detectors/phone.js",
+      "types": "./dist/detectors/phone.d.ts"
+    },
+    "./detectors/address": {
+      "import": "./dist/detectors/address.js",
+      "require": "./dist/detectors/address.js",
+      "types": "./dist/detectors/address.d.ts"
+    },
+    "./detectors/maori_name": {
+      "import": "./dist/detectors/maori_name.js",
+      "require": "./dist/detectors/maori_name.js",
+      "types": "./dist/detectors/maori_name.d.ts"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "build:watch": "tsc --watch",
+    "test": "jest",
+    "test:watch": "jest --watch",
+    "lint": "eslint src --ext .ts",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "keywords": [
+    "privacy-act-2020",
+    "new-zealand",
+    "aotearoa",
+    "pii-detection",
+    "compliance",
+    "data-governance",
+    "ird-number",
+    "nhi-number",
+    "te-reo-maori",
+    "ml-datasets",
+    "responsible-ai",
+    "qapulse"
+  ],
+  "author": "QAPulse by SK <contact@skakarh.com> (https://skakarh.com)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ShahnawazKakarh/nz-privacy-auditor.git",
+    "directory": "js"
+  },
+  "homepage": "https://github.com/ShahnawazKakarh/nz-privacy-auditor#readme",
+  "bugs": {
+    "url": "https://github.com/ShahnawazKakarh/nz-privacy-auditor/issues"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "commander": "^12.0.0"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.0.0",
+    "@types/node": "^20.0.0",
+    "@typescript-eslint/eslint-plugin": "^6.0.0",
+    "@typescript-eslint/parser": "^6.0.0",
+    "eslint": "^8.0.0",
+    "jest": "^29.0.0",
+    "ts-jest": "^29.0.0",
+    "typescript": "^5.0.0"
+  }
+}