opencode-rehydra-core 0.14.0

package/dist/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,yBAAyB;AACzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAE7D,gCAAgC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}

package/dist/storage/indexeddb.d.ts

@@ -0,0 +1,69 @@
+/**
+ * IndexedDB PII Storage Provider
+ * Browser-side persistence using IndexedDB
+ */
+import type { EncryptedPIIMap } from "../types/index.js";
+import type { PIIStorageProvider, PIIMapMetadata, StoredPIIMap, ListOptions } from "./types.js";
+/**
+ * IndexedDB implementation of PIIStorageProvider
+ *
+ * For browser-side persistence. Data persists across sessions and page reloads.
+ *
+ * @example
+ * ```typescript
+ * const storage = new IndexedDBPIIStorageProvider('my-app');
+ *
+ * await storage.save('conv-123', encryptedPiiMap, {
+ *   createdAt: Date.now(),
+ *   entityCounts: { PERSON: 2 }
+ * });
+ *
+ * const stored = await storage.load('conv-123');
+ * ```
+ */
+export declare class IndexedDBPIIStorageProvider implements PIIStorageProvider {
+    private readonly dbName;
+    private db;
+    /**
+     * Create a new IndexedDB storage provider
+     * @param dbName - Database name (defaults to 'rehydra-pii-storage')
+     */
+    constructor(dbName?: string);
+    /**
+     * Open the IndexedDB database
+     */
+    private openDatabase;
+    /**
+     * Save an encrypted PII map
+     */
+    save(conversationId: string, piiMap: EncryptedPIIMap, metadata?: Partial<PIIMapMetadata>): Promise<void>;
+    /**
+     * Load an encrypted PII map
+     */
+    load(conversationId: string): Promise<StoredPIIMap | null>;
+    /**
+     * Delete a PII map
+     */
+    delete(conversationId: string): Promise<boolean>;
+    /**
+     * Check if a PII map exists
+     */
+    exists(conversationId: string): Promise<boolean>;
+    /**
+     * List stored conversation IDs
+     */
+    list(options?: ListOptions): Promise<string[]>;
+    /**
+     * Delete entries older than the specified date
+     */
+    cleanup(olderThan: Date): Promise<number>;
+    /**
+     * Close the database connection
+     */
+    close(): void;
+    /**
+     * Delete the entire database (useful for testing)
+     */
+    deleteDatabase(): Promise<void>;
+}
+//# sourceMappingURL=indexeddb.d.ts.map

package/dist/storage/indexeddb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.d.ts","sourceRoot":"","sources":["../../src/storage/indexeddb.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EACV,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,WAAW,EACZ,MAAM,YAAY,CAAC;AAgCpB;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,2BAA4B,YAAW,kBAAkB;IACpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,EAAE,CAA4B;IAEtC;;;OAGG;gBACS,MAAM,GAAE,MAAwB;IAI5C;;OAEG;YACW,YAAY;IAiC1B;;OAEG;IACG,IAAI,CACR,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,eAAe,EACvB,QAAQ,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAqChB;;OAEG;IACG,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAuChE;;OAEG;IACG,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA0BtD;;OAEG;IACG,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoBtD;;OAEG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAsDpD;;OAEG;IACG,OAAO,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAsC/C;;OAEG;IACH,KAAK,IAAI,IAAI;IAOb;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;CAmBtC"}

package/dist/storage/indexeddb.js

@@ -0,0 +1,274 @@
+/**
+ * IndexedDB PII Storage Provider
+ * Browser-side persistence using IndexedDB
+ */
+// ============================================================================
+// Constants
+// ============================================================================
+const DEFAULT_DB_NAME = "rehydra-pii-storage";
+const DB_VERSION = 1;
+const STORE_NAME = "pii_maps";
+// ============================================================================
+// IndexedDB Storage Provider
+// ============================================================================
+/**
+ * IndexedDB implementation of PIIStorageProvider
+ *
+ * For browser-side persistence. Data persists across sessions and page reloads.
+ *
+ * @example
+ * ```typescript
+ * const storage = new IndexedDBPIIStorageProvider('my-app');
+ *
+ * await storage.save('conv-123', encryptedPiiMap, {
+ *   createdAt: Date.now(),
+ *   entityCounts: { PERSON: 2 }
+ * });
+ *
+ * const stored = await storage.load('conv-123');
+ * ```
+ */
+export class IndexedDBPIIStorageProvider {
+    dbName;
+    db = null;
+    /**
+     * Create a new IndexedDB storage provider
+     * @param dbName - Database name (defaults to 'rehydra-pii-storage')
+     */
+    constructor(dbName = DEFAULT_DB_NAME) {
+        this.dbName = dbName;
+    }
+    /**
+     * Open the IndexedDB database
+     */
+    async openDatabase() {
+        if (this.db !== null) {
+            return this.db;
+        }
+        return new Promise((resolve, reject) => {
+            const request = indexedDB.open(this.dbName, DB_VERSION);
+            request.onerror = () => {
+                reject(new Error(`Failed to open IndexedDB: ${request.error?.message}`));
+            };
+            request.onsuccess = () => {
+                this.db = request.result;
+                resolve(this.db);
+            };
+            request.onupgradeneeded = (event) => {
+                const db = event.target.result;
+                if (!db.objectStoreNames.contains(STORE_NAME)) {
+                    const store = db.createObjectStore(STORE_NAME, {
+                        keyPath: "conversationId",
+                    });
+                    // Create index on createdAt for efficient cleanup queries
+                    store.createIndex("createdAt", "createdAt", { unique: false });
+                }
+            };
+        });
+    }
+    /**
+     * Save an encrypted PII map
+     */
+    async save(conversationId, piiMap, metadata) {
+        const db = await this.openDatabase();
+        const now = Date.now();
+        // Check if entry exists to preserve createdAt
+        const existing = await this.load(conversationId);
+        const record = {
+            conversationId,
+            ciphertext: piiMap.ciphertext,
+            iv: piiMap.iv,
+            authTag: piiMap.authTag,
+            entityCounts: metadata?.entityCounts ?? existing?.metadata.entityCounts ?? {},
+            modelVersion: metadata?.modelVersion ?? existing?.metadata.modelVersion ?? undefined,
+            createdAt: existing?.metadata.createdAt ?? metadata?.createdAt ?? now,
+            updatedAt: now,
+        };
+        return new Promise((resolve, reject) => {
+            const transaction = db.transaction(STORE_NAME, "readwrite");
+            const store = transaction.objectStore(STORE_NAME);
+            const request = store.put(record);
+            request.onerror = () => {
+                reject(new Error(`Failed to save to IndexedDB: ${request.error?.message}`));
+            };
+            transaction.oncomplete = () => {
+                resolve();
+            };
+        });
+    }
+    /**
+     * Load an encrypted PII map
+     */
+    async load(conversationId) {
+        const db = await this.openDatabase();
+        return new Promise((resolve, reject) => {
+            const transaction = db.transaction(STORE_NAME, "readonly");
+            const store = transaction.objectStore(STORE_NAME);
+            const request = store.get(conversationId);
+            request.onerror = () => {
+                reject(new Error(`Failed to load from IndexedDB: ${request.error?.message}`));
+            };
+            request.onsuccess = () => {
+                const record = request.result;
+                if (!record) {
+                    resolve(null);
+                    return;
+                }
+                resolve({
+                    piiMap: {
+                        ciphertext: record.ciphertext,
+                        iv: record.iv,
+                        authTag: record.authTag,
+                    },
+                    metadata: {
+                        createdAt: record.createdAt,
+                        updatedAt: record.updatedAt,
+                        entityCounts: record.entityCounts,
+                        modelVersion: record.modelVersion,
+                    },
+                });
+            };
+        });
+    }
+    /**
+     * Delete a PII map
+     */
+    async delete(conversationId) {
+        const db = await this.openDatabase();
+        // Check if exists first
+        const exists = await this.exists(conversationId);
+        if (!exists)
+            return false;
+        return new Promise((resolve, reject) => {
+            const transaction = db.transaction(STORE_NAME, "readwrite");
+            const store = transaction.objectStore(STORE_NAME);
+            const request = store.delete(conversationId);
+            request.onerror = () => {
+                reject(new Error(`Failed to delete from IndexedDB: ${request.error?.message}`));
+            };
+            transaction.oncomplete = () => {
+                resolve(true);
+            };
+        });
+    }
+    /**
+     * Check if a PII map exists
+     */
+    async exists(conversationId) {
+        const db = await this.openDatabase();
+        return new Promise((resolve, reject) => {
+            const transaction = db.transaction(STORE_NAME, "readonly");
+            const store = transaction.objectStore(STORE_NAME);
+            const request = store.getKey(conversationId);
+            request.onerror = () => {
+                reject(new Error(`Failed to check IndexedDB: ${request.error?.message}`));
+            };
+            request.onsuccess = () => {
+                resolve(request.result !== undefined);
+            };
+        });
+    }
+    /**
+     * List stored conversation IDs
+     */
+    async list(options) {
+        const db = await this.openDatabase();
+        return new Promise((resolve, reject) => {
+            const transaction = db.transaction(STORE_NAME, "readonly");
+            const store = transaction.objectStore(STORE_NAME);
+            const index = store.index("createdAt");
+            // Use cursor to iterate in descending order (most recent first)
+            const request = index.openCursor(null, "prev");
+            const results = [];
+            request.onerror = () => {
+                reject(new Error(`Failed to list from IndexedDB: ${request.error?.message}`));
+            };
+            request.onsuccess = () => {
+                const cursor = request.result;
+                if (cursor) {
+                    const record = cursor.value;
+                    // Filter by olderThan if specified
+                    if (options?.olderThan !== undefined) {
+                        if (record.createdAt < options.olderThan.getTime()) {
+                            results.push({
+                                id: record.conversationId,
+                                createdAt: record.createdAt,
+                            });
+                        }
+                    }
+                    else {
+                        results.push({
+                            id: record.conversationId,
+                            createdAt: record.createdAt,
+                        });
+                    }
+                    // Check limit
+                    if (options?.limit !== undefined && results.length >= options.limit) {
+                        resolve(results.map((r) => r.id));
+                        return;
+                    }
+                    cursor.continue();
+                }
+                else {
+                    // End of cursor
+                    resolve(results.map((r) => r.id));
+                }
+            };
+        });
+    }
+    /**
+     * Delete entries older than the specified date
+     */
+    async cleanup(olderThan) {
+        const db = await this.openDatabase();
+        const cutoff = olderThan.getTime();
+        return new Promise((resolve, reject) => {
+            const transaction = db.transaction(STORE_NAME, "readwrite");
+            const store = transaction.objectStore(STORE_NAME);
+            const index = store.index("createdAt");
+            // Find all records with createdAt < cutoff
+            const range = IDBKeyRange.upperBound(cutoff, true);
+            const request = index.openCursor(range);
+            let deleted = 0;
+            request.onerror = () => {
+                reject(new Error(`Failed to cleanup IndexedDB: ${request.error?.message}`));
+            };
+            request.onsuccess = () => {
+                const cursor = request.result;
+                if (cursor) {
+                    cursor.delete();
+                    deleted++;
+                    cursor.continue();
+                }
+            };
+            transaction.oncomplete = () => {
+                resolve(deleted);
+            };
+        });
+    }
+    /**
+     * Close the database connection
+     */
+    close() {
+        if (this.db !== null) {
+            this.db.close();
+            this.db = null;
+        }
+    }
+    /**
+     * Delete the entire database (useful for testing)
+     */
+    async deleteDatabase() {
+        this.close();
+        return new Promise((resolve, reject) => {
+            const request = indexedDB.deleteDatabase(this.dbName);
+            request.onerror = () => {
+                reject(new Error(`Failed to delete IndexedDB database: ${request.error?.message}`));
+            };
+            request.onsuccess = () => {
+                resolve();
+            };
+        });
+    }
+}
+//# sourceMappingURL=indexeddb.js.map

package/dist/storage/indexeddb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.js","sourceRoot":"","sources":["../../src/storage/indexeddb.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAC9C,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,UAAU,GAAG,UAAU,CAAC;AAoB9B,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,2BAA2B;IACrB,MAAM,CAAS;IACxB,EAAE,GAAuB,IAAI,CAAC;IAEtC;;;OAGG;IACH,YAAY,SAAiB,eAAe;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY;QACxB,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAExD,OAAO,CAAC,OAAO,GAAG,GAAS,EAAE;gBAC3B,MAAM,CACJ,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CACjE,CAAC;YACJ,CAAC,CAAC;YAEF,OAAO,CAAC,SAAS,GAAG,GAAS,EAAE;gBAC7B,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC,CAAC;YAEF,OAAO,CAAC,eAAe,GAAG,CAAC,KAA4B,EAAQ,EAAE;gBAC/D,MAAM,EAAE,GAAI,KAAK,CAAC,MAA2B,CAAC,MAAM,CAAC;gBAErD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9C,MAAM,KAAK,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE;wBAC7C,OAAO,EAAE,gBAAgB;qBAC1B,CAAC,CAAC;oBACH,0DAA0D;oBAC1D,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,cAAsB,EACtB,MAAuB,EACvB,QAAkC;QAElC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAiB;YAC3B,cAAc;YACd,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EACV,QAAQ,EAAE,YAAY,IAAI,QAAQ,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;YACjE,YAAY,EACV,QAAQ,EAAE,YAAY,IAAI,QAAQ,EAAE,QAAQ,CAAC,YAAY,IAAI,SAAS;YACxE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,IAAI,QAAQ,EAAE,SAAS,IAAI,GAAG;YACrE,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAElC,OAAO,CAAC,OAAO,GAAG,GAAS,EAAE;gBAC3B,MAAM,CACJ,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CACpE,CAAC;YACJ,CAAC,CAAC;YAEF,WAAW,CAAC,UAAU,GAAG,GAAS,EAAE;gBAClC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,cAAsB;QAC/B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAErC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAE1C,OAAO,CAAC,OAAO,GAAG,GAAS,EAAE;gBAC3B,MAAM,CACJ,IAAI,KAAK,CAAC,kCAAkC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CACtE,CAAC;YACJ,CAAC,CAAC;YAEF,OAAO,CAAC,SAAS,GAAG,GAAS,EAAE;gBAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAkC,CAAC;gBAE1D,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,CAAC,IAAI,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBAED,OAAO,CAAC;oBACN,MAAM,EAAE;wBACN,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,OAAO,EAAE,MAAM,CAAC,OAAO;qBACxB;oBACD,QAAQ,EAAE;wBACR,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;qBAClC;iBACF,CAAC,CAAC;YACL,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAErC,wBAAwB;QACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAE7C,OAAO,CAAC,OAAO,GAAG,GAAS,EAAE;gBAC3B,MAAM,CACJ,IAAI,KAAK,CACP,oCAAoC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CAC7D,CACF,CAAC;YACJ,CAAC,CAAC;YAEF,WAAW,CAAC,UAAU,GAAG,GAAS,EAAE;gBAClC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,cAAsB;QACjC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAErC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAE7C,OAAO,CAAC,OAAO,GAAG,GAAS,EAAE;gBAC3B,MAAM,CACJ,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAClE,CAAC;YACJ,CAAC,CAAC;YAEF,OAAO,CAAC,SAAS,GAAG,GAAS,EAAE;gBAC7B,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;YACxC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,OAAqB;QAC9B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAErC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAEvC,gEAAgE;YAChE,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,OAAO,GAA6C,EAAE,CAAC;YAE7D,OAAO,CAAC,OAAO,GAAG,GAAS,EAAE;gBAC3B,MAAM,CACJ,IAAI,KAAK,CAAC,kCAAkC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CACtE,CAAC;YACJ,CAAC,CAAC;YAEF,OAAO,CAAC,SAAS,GAAG,GAAS,EAAE;gBAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAE9B,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,MAAM,GAAG,MAAM,CAAC,KAAqB,CAAC;oBAE5C,mCAAmC;oBACnC,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;wBACrC,IAAI,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;4BACnD,OAAO,CAAC,IAAI,CAAC;gCACX,EAAE,EAAE,MAAM,CAAC,cAAc;gCACzB,SAAS,EAAE,MAAM,CAAC,SAAS;6BAC5B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,CAAC;4BACX,EAAE,EAAE,MAAM,CAAC,cAAc;4BACzB,SAAS,EAAE,MAAM,CAAC,SAAS;yBAC5B,CAAC,CAAC;oBACL,CAAC;oBAED,cAAc;oBACd,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;wBACpE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;wBAClC,OAAO;oBACT,CAAC;oBAED,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,CAAC;qBAAM,CAAC;oBACN,gBAAgB;oBAChB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,SAAe;QAC3B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;QAEnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAEvC,2CAA2C;YAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,OAAO,GAAG,CAAC,CAAC;YAEhB,OAAO,CAAC,OAAO,GAAG,GAAS,EAAE;gBAC3B,MAAM,CACJ,IAAI,KAAK,CACP,gCAAgC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CACzD,CACF,CAAC;YACJ,CAAC,CAAC;YAEF,OAAO,CAAC,SAAS,GAAG,GAAS,EAAE;gBAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAE9B,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,MAAM,EAAE,CAAC;oBAChB,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,CAAC;YACH,CAAC,CAAC;YAEF,WAAW,CAAC,UAAU,GAAG,GAAS,EAAE;gBAClC,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,KAAK,EAAE,CAAC;QAEb,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEtD,OAAO,CAAC,OAAO,GAAG,GAAS,EAAE;gBAC3B,MAAM,CACJ,IAAI,KAAK,CACP,wCAAwC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CACjE,CACF,CAAC;YACJ,CAAC,CAAC;YAEF,OAAO,CAAC,SAAS,GAAG,GAAS,EAAE;gBAC7B,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/storage/session-base.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Anonymizer Session Base Implementation
+ * Browser-safe session wrapper for automatic PII map storage.
+ * Does NOT include createStream() to avoid pulling in node:stream.
+ */
+import type { AnonymizationResult, AnonymizationPolicy, TagFormat } from "../types/index.js";
+import type { KeyProvider } from "../crypto/index.js";
+import type { RawPIIMap } from "../pipeline/tagger.js";
+import type { AnonymizerSession, PIIStorageProvider, StoredPIIMap } from "./types.js";
+/**
+ * Interface for the parent Anonymizer (to avoid circular dependency)
+ */
+export interface IAnonymizer {
+    anonymize(text: string, locale?: string, policy?: Partial<AnonymizationPolicy>, existingPiiMap?: RawPIIMap): Promise<AnonymizationResult>;
+    readonly resolvedTagFormat: TagFormat;
+}
+/**
+ * Session implementation that wraps an Anonymizer with automatic storage
+ */
+export declare class AnonymizerSessionImpl implements AnonymizerSession {
+    protected readonly anonymizer: IAnonymizer;
+    protected readonly storage: PIIStorageProvider;
+    protected readonly keyProvider: KeyProvider;
+    readonly sessionId: string;
+    constructor(anonymizer: IAnonymizer, sessionId: string, storage: PIIStorageProvider, keyProvider: KeyProvider);
+    anonymize(text: string, locale?: string, policy?: Partial<AnonymizationPolicy>): Promise<AnonymizationResult>;
+    rehydrate(text: string): Promise<string>;
+    anonymizeJson<T>(value: T, locale?: string, policy?: Partial<AnonymizationPolicy>): Promise<T>;
+    rehydrateJson<T>(value: T): Promise<T>;
+    load(): Promise<StoredPIIMap | null>;
+    delete(): Promise<boolean>;
+    exists(): Promise<boolean>;
+}
+//# sourceMappingURL=session-base.d.ts.map

package/dist/storage/session-base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-base.d.ts","sourceRoot":"","sources":["../../src/storage/session-base.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACnB,SAAS,EACV,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,CACP,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,EACrC,cAAc,CAAC,EAAE,SAAS,GACzB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,qBAAa,qBAAsB,YAAW,iBAAiB;IAI3D,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW;IAE1C,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB;IAC9C,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW;IAN7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAGN,UAAU,EAAE,WAAW,EAC1C,SAAS,EAAE,MAAM,EACE,OAAO,EAAE,kBAAkB,EAC3B,WAAW,EAAE,WAAW;IAKvC,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GACpC,OAAO,CAAC,mBAAmB,CAAC;IAuFzB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBxC,aAAa,CAAC,CAAC,EACnB,KAAK,EAAE,CAAC,EACR,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GACpC,OAAO,CAAC,CAAC,CAAC;IAOP,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAItC,IAAI,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAIpC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;IAI1B,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;CAGjC"}

package/dist/storage/session-base.js

@@ -0,0 +1,122 @@
+/**
+ * Anonymizer Session Base Implementation
+ * Browser-safe session wrapper for automatic PII map storage.
+ * Does NOT include createStream() to avoid pulling in node:stream.
+ */
+import { walkJson } from "../utils/json-walk.js";
+import { decryptPIIMap, encryptPIIMap } from "../crypto/index.js";
+import { rehydrate as rehydrateText } from "../pipeline/tagger.js";
+/**
+ * Session implementation that wraps an Anonymizer with automatic storage
+ */
+export class AnonymizerSessionImpl {
+    anonymizer;
+    storage;
+    keyProvider;
+    sessionId;
+    constructor(anonymizer, sessionId, storage, keyProvider) {
+        this.anonymizer = anonymizer;
+        this.storage = storage;
+        this.keyProvider = keyProvider;
+        this.sessionId = sessionId;
+    }
+    async anonymize(text, locale, policy) {
+        // Get the encryption key
+        const key = await this.keyProvider.getKey();
+        // Load existing PII map for ID reuse (before calling anonymizer)
+        const existing = await this.storage.load(this.sessionId);
+        let existingPiiMap;
+        let createdAt;
+        let existingEntityCounts;
+        if (existing !== null) {
+            try {
+                existingPiiMap = await decryptPIIMap(existing.piiMap, key);
+                createdAt = existing.metadata.createdAt;
+                existingEntityCounts = existing.metadata.entityCounts;
+            }
+            catch (error) {
+                // Decryption failed - likely key mismatch
+                const isKeyMismatch = error instanceof Error &&
+                    (error.name === "OperationError" ||
+                        error.message.includes("decrypt"));
+                if (isKeyMismatch) {
+                    throw new Error(`Failed to decrypt existing session data for "${this.sessionId}". ` +
+                        `The encryption key may have changed since this session was created.\n\n` +
+                        `To fix this, either:\n` +
+                        `  1. Use the same key that was used to create the session\n` +
+                        `  2. Delete the old session: await session.delete()\n` +
+                        `  3. Use a persistent key provider (e.g., ConfigKeyProvider)`);
+                }
+                throw error;
+            }
+        }
+        else {
+            existingPiiMap = undefined;
+            createdAt = Date.now();
+            existingEntityCounts = {};
+        }
+        // Call the parent anonymizer with existing PII map for ID reuse
+        const result = await this.anonymizer.anonymize(text, locale, policy, existingPiiMap);
+        // Sessions require a PII map (only available in pseudonymize mode)
+        if (result.piiMap === undefined) {
+            throw new Error("Session anonymize() failed: no PII map returned.\n\n" +
+                "This can happen if the anonymizer is in 'anonymize' mode.\n" +
+                "Sessions require 'pseudonymize' mode for PII map storage.");
+        }
+        // Decrypt the new PII map
+        const newPiiMap = await decryptPIIMap(result.piiMap, key);
+        // Merge maps: start with existing (if any), add new entries
+        const mergedPiiMap = existingPiiMap
+            ? new Map(existingPiiMap)
+            : new Map();
+        for (const [k, v] of newPiiMap) {
+            mergedPiiMap.set(k, v);
+        }
+        // Merge entity counts
+        const mergedEntityCounts = { ...existingEntityCounts };
+        for (const [type, count] of Object.entries(result.stats.countsByType)) {
+            mergedEntityCounts[type] = (mergedEntityCounts[type] ?? 0) + count;
+        }
+        // Re-encrypt the merged PII map
+        const encryptedMergedMap = await encryptPIIMap(mergedPiiMap, key);
+        // Save the merged PII map to storage
+        await this.storage.save(this.sessionId, encryptedMergedMap, {
+            createdAt,
+            entityCounts: mergedEntityCounts,
+            modelVersion: result.stats.modelVersion,
+        });
+        return result;
+    }
+    async rehydrate(text) {
+        // Load from storage
+        const stored = await this.storage.load(this.sessionId);
+        if (stored === null) {
+            throw new Error(`No PII map found for session: ${this.sessionId}. ` +
+                `Make sure to call anonymize() before rehydrate().`);
+        }
+        // Decrypt the PII map
+        const key = await this.keyProvider.getKey();
+        const piiMap = await decryptPIIMap(stored.piiMap, key);
+        // Rehydrate the text
+        return rehydrateText(text, piiMap, false, this.anonymizer.resolvedTagFormat);
+    }
+    async anonymizeJson(value, locale, policy) {
+        return walkJson(value, async (s) => {
+            const result = await this.anonymize(s, locale, policy);
+            return result.anonymizedText;
+        });
+    }
+    async rehydrateJson(value) {
+        return walkJson(value, (s) => this.rehydrate(s));
+    }
+    async load() {
+        return this.storage.load(this.sessionId);
+    }
+    async delete() {
+        return this.storage.delete(this.sessionId);
+    }
+    async exists() {
+        return this.storage.exists(this.sessionId);
+    }
+}
+//# sourceMappingURL=session-base.js.map

package/dist/storage/session-base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-base.js","sourceRoot":"","sources":["../../src/storage/session-base.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAqBnE;;GAEG;AACH,MAAM,OAAO,qBAAqB;IAIX;IAEA;IACA;IANZ,SAAS,CAAS;IAE3B,YACqB,UAAuB,EAC1C,SAAiB,EACE,OAA2B,EAC3B,WAAwB;QAHxB,eAAU,GAAV,UAAU,CAAa;QAEvB,YAAO,GAAP,OAAO,CAAoB;QAC3B,gBAAW,GAAX,WAAW,CAAa;QAE3C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,SAAS,CACb,IAAY,EACZ,MAAe,EACf,MAAqC;QAErC,yBAAyB;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAE5C,iEAAiE;QACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,cAAqC,CAAC;QAC1C,IAAI,SAAiB,CAAC;QACtB,IAAI,oBAA4C,CAAC;QAEjD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC3D,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACxC,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,0CAA0C;gBAC1C,MAAM,aAAa,GACjB,KAAK,YAAY,KAAK;oBACtB,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB;wBAC9B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;gBAEvC,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CACb,gDAAgD,IAAI,CAAC,SAAS,KAAK;wBACjE,yEAAyE;wBACzE,wBAAwB;wBACxB,6DAA6D;wBAC7D,uDAAuD;wBACvD,8DAA8D,CACjE,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,SAAS,CAAC;YAC3B,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,oBAAoB,GAAG,EAAE,CAAC;QAC5B,CAAC;QAED,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAC5C,IAAI,EACJ,MAAM,EACN,MAAM,EACN,cAAc,CACf,CAAC;QAEF,mEAAmE;QACnE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,sDAAsD;gBACpD,6DAA6D;gBAC7D,2DAA2D,CAC9D,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE1D,4DAA4D;QAC5D,MAAM,YAAY,GAAc,cAAc;YAC5C,CAAC,CAAC,IAAI,GAAG,CAAiB,cAAc,CAAC;YACzC,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;YAC/B,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzB,CAAC;QAED,sBAAsB;QACtB,MAAM,kBAAkB,GAAG,EAAE,GAAG,oBAAoB,EAAE,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACtE,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QACrE,CAAC;QAED,gCAAgC;QAChC,MAAM,kBAAkB,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAElE,qCAAqC;QACrC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,EAAE;YAC1D,SAAS;YACT,YAAY,EAAE,kBAAkB;YAChC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;SACxC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,CAAC,SAAS,IAAI;gBACjD,mDAAmD,CACtD,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAEvD,qBAAqB;QACrB,OAAO,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,KAAQ,EACR,MAAe,EACf,MAAqC;QAErC,OAAO,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,MAAM,CAAC,cAAc,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAI,KAAQ;QAC7B,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/storage/session.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Anonymizer Session Implementation (Node.js)
+ * Extends the base session with streaming support (requires node:stream).
+ */
+export { type IAnonymizer } from "./session-base.js";
+import { AnonymizerSessionImpl as BaseSessionImpl } from "./session-base.js";
+import type { KeyProvider } from "../crypto/index.js";
+import type { PIIStorageProvider } from "./types.js";
+import { AnonymizerStream } from "../streaming/anonymizer-stream.js";
+import type { StreamConfig } from "../streaming/types.js";
+import type { IAnonymizer } from "./session-base.js";
+/**
+ * Node.js session implementation with streaming support
+ */
+export declare class AnonymizerSessionImpl extends BaseSessionImpl {
+    constructor(anonymizer: IAnonymizer, sessionId: string, storage: PIIStorageProvider, keyProvider: KeyProvider);
+    createStream(config?: Partial<StreamConfig>): Promise<AnonymizerStream>;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/storage/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/storage/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,qBAAqB,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,eAAe;gBAEtD,UAAU,EAAE,WAAW,EACvB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,kBAAkB,EAC3B,WAAW,EAAE,WAAW;IAKpB,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAoB9E"}

package/dist/storage/session.js

@@ -0,0 +1,31 @@
+/**
+ * Anonymizer Session Implementation (Node.js)
+ * Extends the base session with streaming support (requires node:stream).
+ */
+import { AnonymizerSessionImpl as BaseSessionImpl } from "./session-base.js";
+import { decryptPIIMap } from "../crypto/index.js";
+import { AnonymizerStream } from "../streaming/anonymizer-stream.js";
+/**
+ * Node.js session implementation with streaming support
+ */
+export class AnonymizerSessionImpl extends BaseSessionImpl {
+    constructor(anonymizer, sessionId, storage, keyProvider) {
+        super(anonymizer, sessionId, storage, keyProvider);
+    }
+    async createStream(config) {
+        // Load existing PII map to seed the stream for ID continuity
+        let initialPiiMap;
+        const existing = await this.storage.load(this.sessionId);
+        if (existing !== null) {
+            const key = await this.keyProvider.getKey();
+            initialPiiMap = await decryptPIIMap(existing.piiMap, key);
+        }
+        return new AnonymizerStream(this.anonymizer, {
+            ...config,
+            sessionId: this.sessionId,
+            piiStorageProvider: this.storage,
+            keyProvider: this.keyProvider,
+        }, initialPiiMap);
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/storage/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/storage/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,qBAAqB,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE7E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAIrE;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,eAAe;IACxD,YACE,UAAuB,EACvB,SAAiB,EACjB,OAA2B,EAC3B,WAAwB;QAExB,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA8B;QAC/C,6DAA6D;QAC7D,IAAI,aAAoC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YAC5C,aAAa,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,IAAI,gBAAgB,CACzB,IAAI,CAAC,UAAU,EACf;YACE,GAAG,MAAM;YACT,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,kBAAkB,EAAE,IAAI,CAAC,OAAO;YAChC,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,EACD,aAAa,CACd,CAAC;IACJ,CAAC;CACF"}