opencode-rehydar 0.14.2 → 0.14.3

package/dist/types/pii-types.js

@@ -0,0 +1,153 @@
+/**
+ * PII Type Enumeration
+ * Defines all supported PII categories for detection and anonymization
+ */
+export var PIIType;
+(function (PIIType) {
+    // Personal identifiers
+    PIIType["PERSON"] = "PERSON";
+    PIIType["ORG"] = "ORG";
+    PIIType["LOCATION"] = "LOCATION";
+    PIIType["ADDRESS"] = "ADDRESS";
+    PIIType["POSTAL_CODE"] = "POSTAL_CODE";
+    // Contact information
+    PIIType["EMAIL"] = "EMAIL";
+    PIIType["PHONE"] = "PHONE";
+    PIIType["GITHUB_USERNAME"] = "GITHUB_USERNAME";
+    PIIType["URL"] = "URL";
+    PIIType["IP_ADDRESS"] = "IP_ADDRESS";
+    // Financial identifiers
+    PIIType["IBAN"] = "IBAN";
+    PIIType["BIC_SWIFT"] = "BIC_SWIFT";
+    PIIType["ACCOUNT_NUMBER"] = "ACCOUNT_NUMBER";
+    PIIType["CREDIT_CARD"] = "CREDIT_CARD";
+    // Temporal
+    PIIType["DATE"] = "DATE";
+    // Government/Tax identifiers
+    PIIType["TAX_ID"] = "TAX_ID";
+    PIIType["NATIONAL_ID"] = "NATIONAL_ID";
+    PIIType["DATE_OF_BIRTH"] = "DATE_OF_BIRTH";
+    // Custom/Business identifiers
+    PIIType["CASE_ID"] = "CASE_ID";
+    PIIType["CUSTOMER_ID"] = "CUSTOMER_ID";
+    // Secrets/Credentials
+    PIIType["API_KEY"] = "API_KEY";
+    PIIType["PRIVATE_KEY"] = "PRIVATE_KEY";
+    PIIType["JWT"] = "JWT";
+    PIIType["CONNECTION_STRING"] = "CONNECTION_STRING";
+    PIIType["AWS_CREDENTIALS"] = "AWS_CREDENTIALS";
+    PIIType["ENV_VAR_SECRET"] = "ENV_VAR_SECRET";
+    PIIType["CONFIG_SECRET"] = "CONFIG_SECRET";
+})(PIIType || (PIIType = {}));
+/**
+ * All PII types as a readonly array for iteration
+ */
+export const ALL_PII_TYPES = Object.values(PIIType);
+/**
+ * PII types that are detected via regex (structured PII)
+ */
+export const REGEX_PII_TYPES = [
+    PIIType.ADDRESS,
+    PIIType.EMAIL,
+    PIIType.PHONE,
+    PIIType.POSTAL_CODE,
+    PIIType.IBAN,
+    PIIType.BIC_SWIFT,
+    PIIType.CREDIT_CARD,
+    PIIType.IP_ADDRESS,
+    PIIType.URL,
+    PIIType.ACCOUNT_NUMBER,
+    PIIType.TAX_ID,
+    PIIType.NATIONAL_ID,
+    PIIType.DATE,
+    PIIType.CASE_ID,
+    PIIType.CUSTOMER_ID,
+    PIIType.GITHUB_USERNAME,
+];
+/**
+ * PII types that are secrets/credentials (opt-in, regex-based)
+ */
+export const SECRET_PII_TYPES = [
+    PIIType.API_KEY,
+    PIIType.PRIVATE_KEY,
+    PIIType.JWT,
+    PIIType.CONNECTION_STRING,
+    PIIType.AWS_CREDENTIALS,
+    PIIType.ENV_VAR_SECRET,
+    PIIType.CONFIG_SECRET,
+];
+/**
+ * PII types that are detected via NER model (soft PII)
+ */
+export const NER_PII_TYPES = [
+    PIIType.PERSON,
+    PIIType.ORG,
+    PIIType.LOCATION,
+    PIIType.ADDRESS,
+    PIIType.DATE_OF_BIRTH,
+];
+/**
+ * Default priority order for resolving overlapping entities
+ * Higher index = higher priority
+ */
+export const DEFAULT_TYPE_PRIORITY = [
+    // Lower priority (generic)
+    PIIType.GITHUB_USERNAME,
+    PIIType.URL,
+    PIIType.IP_ADDRESS,
+    PIIType.LOCATION,
+    PIIType.ORG,
+    PIIType.PERSON,
+    // Medium priority
+    PIIType.DATE,
+    PIIType.DATE_OF_BIRTH,
+    PIIType.PHONE,
+    PIIType.EMAIL,
+    PIIType.ADDRESS,
+    PIIType.POSTAL_CODE,
+    // Higher priority (specific identifiers)
+    PIIType.CASE_ID,
+    PIIType.CUSTOMER_ID,
+    PIIType.ACCOUNT_NUMBER,
+    PIIType.BIC_SWIFT,
+    PIIType.IBAN,
+    PIIType.CREDIT_CARD,
+    PIIType.TAX_ID,
+    PIIType.NATIONAL_ID,
+    // Highest priority (secrets/credentials)
+    PIIType.ENV_VAR_SECRET,
+    PIIType.CONFIG_SECRET,
+    PIIType.CONNECTION_STRING,
+    PIIType.AWS_CREDENTIALS,
+    PIIType.API_KEY,
+    PIIType.PRIVATE_KEY,
+    PIIType.JWT,
+];
+/**
+ * Maps NER model labels to PIIType
+ * Common label formats from NER models (B-PER, I-PER, B-ORG, etc.)
+ */
+export const NER_LABEL_TO_PII_TYPE = {
+    PER: PIIType.PERSON,
+    PERSON: PIIType.PERSON,
+    ORG: PIIType.ORG,
+    ORGANIZATION: PIIType.ORG,
+    LOC: PIIType.LOCATION,
+    LOCATION: PIIType.LOCATION,
+    GPE: PIIType.LOCATION, // Geo-Political Entity
+    DATE: PIIType.DATE,
+    // Some models use MISC for addresses
+    MISC: PIIType.ADDRESS,
+};
+/**
+ * Get PIIType from NER label (handles B-/I- prefixes)
+ */
+export function getPIITypeFromNERLabel(label) {
+    // Remove B-/I- prefix if present
+    const cleanLabel = label.replace(/^[BI]-/, '').toUpperCase();
+    if (cleanLabel === 'O') {
+        return null; // Outside any entity
+    }
+    return NER_LABEL_TO_PII_TYPE[cleanLabel] ?? null;
+}
+//# sourceMappingURL=pii-types.js.map

package/dist/types/pii-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-types.js","sourceRoot":"","sources":["../../src/types/pii-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAN,IAAY,OAyCX;AAzCD,WAAY,OAAO;IACjB,uBAAuB;IACvB,4BAAiB,CAAA;IACjB,sBAAW,CAAA;IACX,gCAAqB,CAAA;IACrB,8BAAmB,CAAA;IACnB,sCAA2B,CAAA;IAE3B,sBAAsB;IACtB,0BAAe,CAAA;IACf,0BAAe,CAAA;IACf,8CAAmC,CAAA;IACnC,sBAAW,CAAA;IACX,oCAAyB,CAAA;IAEzB,wBAAwB;IACxB,wBAAa,CAAA;IACb,kCAAuB,CAAA;IACvB,4CAAiC,CAAA;IACjC,sCAA2B,CAAA;IAE3B,WAAW;IACX,wBAAa,CAAA;IAEb,6BAA6B;IAC7B,4BAAiB,CAAA;IACjB,sCAA2B,CAAA;IAC3B,0CAA+B,CAAA;IAE/B,8BAA8B;IAC9B,8BAAmB,CAAA;IACnB,sCAA2B,CAAA;IAE3B,sBAAsB;IACtB,8BAAmB,CAAA;IACnB,sCAA2B,CAAA;IAC3B,sBAAW,CAAA;IACX,kDAAuC,CAAA;IACvC,8CAAmC,CAAA;IACnC,4CAAiC,CAAA;IACjC,0CAA+B,CAAA;AACjC,CAAC,EAzCW,OAAO,KAAP,OAAO,QAyClB;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAuB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAc,CAAC;AAErF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuB;IACjD,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,eAAe;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAuB;IAClD,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,eAAe;IACvB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,aAAa;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAuB;IAC/C,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,aAAa;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAuB;IACvD,2BAA2B;IAC3B,OAAO,CAAC,eAAe;IACvB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,MAAM;IACd,kBAAkB;IAClB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,aAAa;IACrB,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;IACnB,yCAAyC;IACzC,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,WAAW;IACnB,yCAAyC;IACzC,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,aAAa;IACrB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,eAAe;IACvB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,GAAG;CACZ,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA4B;IAC5D,GAAG,EAAE,OAAO,CAAC,MAAM;IACnB,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,YAAY,EAAE,OAAO,CAAC,GAAG;IACzB,GAAG,EAAE,OAAO,CAAC,QAAQ;IACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,uBAAuB;IAC9C,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,qCAAqC;IACrC,IAAI,EAAE,OAAO,CAAC,OAAO;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,iCAAiC;IACjC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAE7D,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,CAAC,qBAAqB;IACpC,CAAC;IAED,OAAO,qBAAqB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;AACnD,CAAC"}

package/dist/utils/iban-checksum.d.ts

@@ -0,0 +1,23 @@
+/**
+ * IBAN Checksum Validation (ISO 13616)
+ * Uses Mod-97 algorithm
+ */
+/**
+ * Country code to IBAN length mapping (partial list of common countries)
+ */
+export declare const IBAN_LENGTHS: Record<string, number>;
+/**
+ * Validates an IBAN using the mod-97 algorithm
+ * @param iban - IBAN string (spaces allowed)
+ * @returns true if checksum is valid
+ */
+export declare function validateIBAN(iban: string): boolean;
+/**
+ * Normalizes an IBAN by removing spaces and converting to uppercase
+ */
+export declare function normalizeIBAN(iban: string): string;
+/**
+ * Formats an IBAN with spaces every 4 characters for readability
+ */
+export declare function formatIBAN(iban: string): string;
+//# sourceMappingURL=iban-checksum.d.ts.map

package/dist/utils/iban-checksum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iban-checksum.d.ts","sourceRoot":"","sources":["../../src/utils/iban-checksum.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAwB/C,CAAC;AA4CF;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAuBlD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG/C"}

package/dist/utils/iban-checksum.js

@@ -0,0 +1,106 @@
+/**
+ * IBAN Checksum Validation (ISO 13616)
+ * Uses Mod-97 algorithm
+ */
+/**
+ * Country code to IBAN length mapping (partial list of common countries)
+ */
+export const IBAN_LENGTHS = {
+    AD: 24, // Andorra
+    AT: 20, // Austria
+    BE: 16, // Belgium
+    CH: 21, // Switzerland
+    CZ: 24, // Czech Republic
+    DE: 22, // Germany
+    DK: 18, // Denmark
+    ES: 24, // Spain
+    FI: 18, // Finland
+    FR: 27, // France
+    GB: 22, // United Kingdom
+    GR: 27, // Greece
+    HU: 28, // Hungary
+    IE: 22, // Ireland
+    IT: 27, // Italy
+    LI: 21, // Liechtenstein
+    LU: 20, // Luxembourg
+    NL: 18, // Netherlands
+    NO: 15, // Norway
+    PL: 28, // Poland
+    PT: 25, // Portugal
+    SE: 24, // Sweden
+    SK: 24, // Slovakia
+};
+/**
+ * Convert a character to its numeric value for IBAN calculation
+ * A=10, B=11, ..., Z=35
+ */
+function charToNumber(char) {
+    const code = char.toUpperCase().charCodeAt(0);
+    if (code >= 65 && code <= 90) {
+        // A-Z
+        return (code - 55).toString();
+    }
+    return char; // Already a digit
+}
+/**
+ * Rearranges IBAN for checksum calculation:
+ * Move first 4 chars to end, convert letters to numbers
+ */
+function rearrangeForChecksum(iban) {
+    const cleaned = iban.replace(/\s/g, '').toUpperCase();
+    const rearranged = cleaned.slice(4) + cleaned.slice(0, 4);
+    let numeric = '';
+    for (const char of rearranged) {
+        numeric += charToNumber(char);
+    }
+    return numeric;
+}
+/**
+ * Calculate mod 97 for a large number represented as a string
+ */
+function mod97(numericString) {
+    let remainder = 0;
+    for (const digit of numericString) {
+        remainder = (remainder * 10 + parseInt(digit, 10)) % 97;
+    }
+    return remainder;
+}
+/**
+ * Validates an IBAN using the mod-97 algorithm
+ * @param iban - IBAN string (spaces allowed)
+ * @returns true if checksum is valid
+ */
+export function validateIBAN(iban) {
+    const cleaned = iban.replace(/\s/g, '').toUpperCase();
+    // Basic format check
+    if (!/^[A-Z]{2}[0-9]{2}[A-Z0-9]+$/.test(cleaned)) {
+        return false;
+    }
+    // Check length for known countries
+    const countryCode = cleaned.slice(0, 2);
+    const expectedLength = IBAN_LENGTHS[countryCode];
+    if (expectedLength !== undefined && cleaned.length !== expectedLength) {
+        return false;
+    }
+    // General length check (IBANs are 15-34 characters)
+    if (cleaned.length < 15 || cleaned.length > 34) {
+        return false;
+    }
+    // Mod-97 validation
+    const numericString = rearrangeForChecksum(cleaned);
+    return mod97(numericString) === 1;
+}
+/**
+ * Normalizes an IBAN by removing spaces and converting to uppercase
+ */
+export function normalizeIBAN(iban) {
+    return iban.replace(/\s/g, '').toUpperCase();
+}
+/**
+ * Formats an IBAN with spaces every 4 characters for readability
+ */
+export function formatIBAN(iban) {
+    const normalized = normalizeIBAN(iban);
+    return normalized.replace(/(.{4})/g, '$1 ').trim();
+}
+//# sourceMappingURL=iban-checksum.js.map

package/dist/utils/iban-checksum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iban-checksum.js","sourceRoot":"","sources":["../../src/utils/iban-checksum.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAA2B;IAClD,EAAE,EAAE,EAAE,EAAE,UAAU;IAClB,EAAE,EAAE,EAAE,EAAE,UAAU;IAClB,EAAE,EAAE,EAAE,EAAE,UAAU;IAClB,EAAE,EAAE,EAAE,EAAE,cAAc;IACtB,EAAE,EAAE,EAAE,EAAE,iBAAiB;IACzB,EAAE,EAAE,EAAE,EAAE,UAAU;IAClB,EAAE,EAAE,EAAE,EAAE,UAAU;IAClB,EAAE,EAAE,EAAE,EAAE,QAAQ;IAChB,EAAE,EAAE,EAAE,EAAE,UAAU;IAClB,EAAE,EAAE,EAAE,EAAE,SAAS;IACjB,EAAE,EAAE,EAAE,EAAE,iBAAiB;IACzB,EAAE,EAAE,EAAE,EAAE,SAAS;IACjB,EAAE,EAAE,EAAE,EAAE,UAAU;IAClB,EAAE,EAAE,EAAE,EAAE,UAAU;IAClB,EAAE,EAAE,EAAE,EAAE,QAAQ;IAChB,EAAE,EAAE,EAAE,EAAE,gBAAgB;IACxB,EAAE,EAAE,EAAE,EAAE,aAAa;IACrB,EAAE,EAAE,EAAE,EAAE,cAAc;IACtB,EAAE,EAAE,EAAE,EAAE,SAAS;IACjB,EAAE,EAAE,EAAE,EAAE,SAAS;IACjB,EAAE,EAAE,EAAE,EAAE,WAAW;IACnB,EAAE,EAAE,EAAE,EAAE,SAAS;IACjB,EAAE,EAAE,EAAE,EAAE,WAAW;CACpB,CAAC;AAEF;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM;QACN,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,kBAAkB;AACjC,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAE1D,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,KAAK,CAAC,aAAqB;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,SAAS,GAAG,CAAC,SAAS,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1D,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEtD,qBAAqB;IACrB,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mCAAmC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oBAAoB;IACpB,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Utils Module
+ * Exports utility functions
+ */
+export * from "./luhn.js";
+export * from "./iban-checksum.js";
+export * from "./offsets.js";
+export * from "./path.js";
+export * from "./storage.js";
+export * from "./regex.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/utils/index.js

@@ -0,0 +1,11 @@
+/**
+ * Utils Module
+ * Exports utility functions
+ */
+export * from "./luhn.js";
+export * from "./iban-checksum.js";
+export * from "./offsets.js";
+export * from "./path.js";
+export * from "./storage.js";
+export * from "./regex.js";
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/utils/json-walk.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Recursive JSON Walker
+ * Walks a JSON-serializable value and transforms all string leaves.
+ */
+/**
+ * Async function that transforms a string value.
+ */
+export type StringProcessor = (s: string) => Promise<string>;
+/**
+ * Recursively walks a JSON-serializable value and applies a string processor
+ * to every string leaf. Returns a deep copy with all strings transformed.
+ *
+ * Strings are processed **sequentially** to ensure deterministic PII ID
+ * assignment when used with session.anonymize().
+ *
+ * @param value - Any JSON-serializable value (object, array, string, number, boolean, null)
+ * @param processString - Async function to transform each string leaf
+ * @returns Deep copy of the value with all strings transformed
+ */
+export declare function walkJson<T>(value: T, processString: StringProcessor): Promise<T>;
+//# sourceMappingURL=json-walk.d.ts.map

package/dist/utils/json-walk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-walk.d.ts","sourceRoot":"","sources":["../../src/utils/json-walk.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE7D;;;;;;;;;;GAUG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,KAAK,EAAE,CAAC,EACR,aAAa,EAAE,eAAe,GAC7B,OAAO,CAAC,CAAC,CAAC,CAkCZ"}

package/dist/utils/json-walk.js

@@ -0,0 +1,44 @@
+/**
+ * Recursive JSON Walker
+ * Walks a JSON-serializable value and transforms all string leaves.
+ */
+/**
+ * Recursively walks a JSON-serializable value and applies a string processor
+ * to every string leaf. Returns a deep copy with all strings transformed.
+ *
+ * Strings are processed **sequentially** to ensure deterministic PII ID
+ * assignment when used with session.anonymize().
+ *
+ * @param value - Any JSON-serializable value (object, array, string, number, boolean, null)
+ * @param processString - Async function to transform each string leaf
+ * @returns Deep copy of the value with all strings transformed
+ */
+export async function walkJson(value, processString) {
+    // null
+    if (value === null || value === undefined) {
+        return value;
+    }
+    // string — process it
+    if (typeof value === "string") {
+        return (await processString(value));
+    }
+    // non-object primitives (number, boolean) — pass through
+    if (typeof value !== "object") {
+        return value;
+    }
+    // array — walk each element sequentially
+    if (Array.isArray(value)) {
+        const result = [];
+        for (const item of value) {
+            result.push(await walkJson(item, processString));
+        }
+        return result;
+    }
+    // plain object — walk each own enumerable property sequentially
+    const result = {};
+    for (const key of Object.keys(value)) {
+        result[key] = await walkJson(value[key], processString);
+    }
+    return result;
+}
+//# sourceMappingURL=json-walk.js.map

package/dist/utils/json-walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-walk.js","sourceRoot":"","sources":["../../src/utils/json-walk.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAQ,EACR,aAA8B;IAE9B,OAAO;IACP,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sBAAsB;IACtB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,CAAM,CAAC;IAC3C,CAAC;IAED,yDAAyD;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yCAAyC;IACzC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAW,CAAC;IACrB,CAAC;IAED,gEAAgE;IAChE,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ,CACzB,KAAiC,CAAC,GAAG,CAAC,EACvC,aAAa,CACd,CAAC;IACJ,CAAC;IACD,OAAO,MAAW,CAAC;AACrB,CAAC"}

package/dist/utils/luhn.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Luhn Algorithm (Mod 10) Implementation
+ * Used for validating credit card numbers and other identifier checksums
+ */
+/**
+ * Validates a number string using the Luhn algorithm
+ * @param input - String of digits (spaces and dashes are stripped)
+ * @returns true if the checksum is valid
+ */
+export declare function validateLuhn(input: string): boolean;
+/**
+ * Calculates the Luhn check digit for a partial number
+ * @param partialNumber - String of digits without the check digit
+ * @returns The check digit (0-9)
+ */
+export declare function calculateLuhnCheckDigit(partialNumber: string): number;
+//# sourceMappingURL=luhn.d.ts.map

package/dist/utils/luhn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"luhn.d.ts","sourceRoot":"","sources":["../../src/utils/luhn.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CA2BnD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAsBrE"}

package/dist/utils/luhn.js

@@ -0,0 +1,55 @@
+/**
+ * Luhn Algorithm (Mod 10) Implementation
+ * Used for validating credit card numbers and other identifier checksums
+ */
+/**
+ * Validates a number string using the Luhn algorithm
+ * @param input - String of digits (spaces and dashes are stripped)
+ * @returns true if the checksum is valid
+ */
+export function validateLuhn(input) {
+    // Remove spaces, dashes, and other non-digit characters
+    const digits = input.replace(/\D/g, '');
+    if (digits.length === 0) {
+        return false;
+    }
+    let sum = 0;
+    let isEven = false;
+    // Process digits from right to left
+    for (let i = digits.length - 1; i >= 0; i--) {
+        let digit = parseInt(digits[i], 10);
+        if (isEven) {
+            digit *= 2;
+            if (digit > 9) {
+                digit -= 9;
+            }
+        }
+        sum += digit;
+        isEven = !isEven;
+    }
+    return sum % 10 === 0;
+}
+/**
+ * Calculates the Luhn check digit for a partial number
+ * @param partialNumber - String of digits without the check digit
+ * @returns The check digit (0-9)
+ */
+export function calculateLuhnCheckDigit(partialNumber) {
+    const digits = partialNumber.replace(/\D/g, '');
+    let sum = 0;
+    let isEven = true; // Start with true since we're adding a digit
+    // Process digits from right to left
+    for (let i = digits.length - 1; i >= 0; i--) {
+        let digit = parseInt(digits[i], 10);
+        if (isEven) {
+            digit *= 2;
+            if (digit > 9) {
+                digit -= 9;
+            }
+        }
+        sum += digit;
+        isEven = !isEven;
+    }
+    return (10 - (sum % 10)) % 10;
+}
+//# sourceMappingURL=luhn.js.map

package/dist/utils/luhn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"luhn.js","sourceRoot":"","sources":["../../src/utils/luhn.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,wDAAwD;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAExC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,oCAAoC;IACpC,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QAErC,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QAED,GAAG,IAAI,KAAK,CAAC;QACb,MAAM,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,aAAqB;IAC3D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEhD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,IAAI,CAAC,CAAC,6CAA6C;IAEhE,oCAAoC;IACpC,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QAErC,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QAED,GAAG,IAAI,KAAK,CAAC;QACb,MAAM,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;AAChC,CAAC"}

package/dist/utils/offsets.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Character Offset Utilities
+ * Handles character offset calculations for text manipulation
+ */
+import type { SpanMatch } from '../types/index.js';
+/**
+ * Checks if two spans overlap
+ */
+export declare function spansOverlap(a: {
+    start: number;
+    end: number;
+}, b: {
+    start: number;
+    end: number;
+}): boolean;
+/**
+ * Checks if span A contains span B
+ */
+export declare function spanContains(outer: {
+    start: number;
+    end: number;
+}, inner: {
+    start: number;
+    end: number;
+}): boolean;
+/**
+ * Gets the length of a span
+ */
+export declare function spanLength(span: {
+    start: number;
+    end: number;
+}): number;
+/**
+ * Extracts text for a span from the original text
+ */
+export declare function getSpanText(text: string, span: {
+    start: number;
+    end: number;
+}): string;
+/**
+ * Sorts spans by start position (ascending) then by length (descending)
+ */
+export declare function sortSpansByPosition<T extends {
+    start: number;
+    end: number;
+}>(spans: T[]): T[];
+/**
+ * Sorts spans by start position descending (for replacement operations)
+ */
+export declare function sortSpansByPositionDescending<T extends {
+    start: number;
+    end: number;
+}>(spans: T[]): T[];
+/**
+ * Removes overlapping spans, keeping the preferred ones based on a comparator
+ * @param spans - Array of spans to deduplicate
+ * @param prefer - Comparator that returns positive if 'a' should be preferred over 'b'
+ */
+export declare function removeOverlappingSpans<T extends SpanMatch>(spans: T[], prefer: (a: T, b: T) => number): T[];
+/**
+ * Validates that spans don't overlap (for final validation)
+ */
+export declare function validateNoOverlaps(spans: {
+    start: number;
+    end: number;
+}[]): boolean;
+/**
+ * Calculates offset adjustments for replacements
+ * Used when you need to map positions between original and modified text
+ */
+export interface OffsetAdjustment {
+    originalStart: number;
+    originalEnd: number;
+    newStart: number;
+    newEnd: number;
+    delta: number;
+}
+/**
+ * Builds a list of offset adjustments from replacements
+ */
+export declare function buildOffsetAdjustments(replacements: Array<{
+    start: number;
+    end: number;
+    replacement: string;
+}>): OffsetAdjustment[];
+//# sourceMappingURL=offsets.d.ts.map

package/dist/utils/offsets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"offsets.d.ts","sourceRoot":"","sources":["../../src/utils/offsets.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;GAEG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAE1G;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAElH;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEvE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEtF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAQ7F;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAAC,CAAC,SAAS;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAEvG;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,SAAS,SAAS,EACxD,KAAK,EAAE,CAAC,EAAE,EACV,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,MAAM,GAC7B,CAAC,EAAE,CA0CL;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,OAAO,CAanF;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,GACvE,gBAAgB,EAAE,CAsBpB"}