pi-rehydra 1.0.2 → 1.0.3

package/README.en.md

@@ -1,60 +1,83 @@
-# pi-rehydra
-
-Scrub detected secrets from Pi conversations before the main LLM request.
-
-[中文](./README.md)
-
-This extension intercepts the conversation between [Pi](https://pi.dev) and the LLM. Secrets from your `.env` files are replaced with placeholders before they leave your machine, and transparently restored before any tool (shell commands, file writes, etc.) executes locally; a placeholder that cannot be restored blocks that tool call.
-
-It uses Pi's `ExtensionAPI` events: `context_with_system`, `tool_call`, `tool_result`, `message_end`, and `session_start` / `session_shutdown`.
-
-Detection and rehydration are local. The model only sees placeholders; your tools always see real values.
-
-## Install
-
-```bash
-pi install npm:pi-rehydra
-```
-
-Pi writes the package entry to `~/.pi/agent/settings.json`. Edit that file to add extension options:
-
-```json
-{
-  "packages": [
-    {
-      "source": "npm:pi-rehydra"
-    }
-  ],
-  "rehydra": {
-    "envFiles": [".env", ".env.local"],
-    "redactValues": ["sk-live-abc123..."],
-    "allowLiteralTagsIn": ["write", "edit"]
-  }
-}
-```
-
-Every key under `rehydra` is an extension option: `envFiles`, `redactValues`, `minValueLength`, `disableTypes`, `locale`, `vcsIdentities`, `policy`, `anonymizer`, `tagFormat`. `envFiles` defaults to `["**/.env*"]`, skipping `node_modules`, `.git`, and symlinks.
-
-`allowLiteralTagsIn` defaults to an empty array (always block). Tools listed here — typically `write` and `edit` — keep an **unresolvable** literal tag in their arguments instead of aborting, so you can write documentation or tests that intentionally show tag examples. Every allowed occurrence is logged (`allowed literal tag in tool args`, tool name and argument path only). Resolvable tags are still restored in every tool.
-
-## How it works
-
-| Event | Effect |
-|---|---|
-| `session_start` | Instantiate the anonymizer, build the session map, parse the `rehydra` config |
-| `context_with_system` | Anonymize all request messages and inject the rehydra instruction when needed |
-| `tool_call` | Strictly restore PII tags in tool arguments before local execution; an unresolvable tag blocks the call |
-| `tool_result` | Anonymize the completed tool result before it re-enters model context |
-| `message_end` | Rewrite the final assistant message so PII tags are replaced with real values |
-| `session_shutdown` | Dispose of the anonymizer and session registry |
-
-## Limitations
-- Tool-argument rehydration is strict: when a tag is absent from this session's map (or the map is missing, or decryption fails), the tool call is blocked rather than run with `<PII .../>` as a real value. A placeholder can only be restored from the same session's map; the default map is in memory, so tags from before a process restart cannot be restored.
-
-- Model calls that bypass these hooks (rare, e.g. user-initiated notes) are not intercepted.
-- `URL` and `IP_ADDRESS` are disabled by default; re-enable with `disableTypes: []`.
-- This extension cannot guarantee that title or compaction summaries stay sanitized — disable title agents if you need titles to be human-readable.
-
-## License
-
+# pi-rehydra
+
+Scrub detected secrets from Pi conversations before the main LLM request.
+
+[中文](./README.md)
+
+This extension intercepts the conversation between [Pi](https://pi.dev) and the LLM. Secrets from your `.env` files are replaced with placeholders before they leave your machine, and transparently restored before any tool (shell commands, file writes, etc.) executes locally; a placeholder that cannot be restored blocks that tool call.
+
+It uses Pi's `ExtensionAPI` events: `context_with_system`, `tool_call`, `tool_result`, `message_end`, and `session_start` / `session_shutdown`.
+
+Detection and rehydration are local. The model only sees placeholders; your tools always see real values.
+
+## Install
+
+```bash
+pi install npm:pi-rehydra
+```
+
+Pi writes the package entry to `~/.pi/agent/settings.json`. Edit that file to add extension options:
+
+```json
+{
+  "packages": [
+    {
+      "source": "npm:pi-rehydra"
+    }
+  ],
+  "rehydra": {
+    "envFiles": [".env", ".env.local"],
+    "redactValues": ["sk-live-abc123..."],
+    "allowLiteralTagsIn": ["write", "edit"]
+  }
+}
+```
+
+Every key under `rehydra` is an extension option: `envFiles`, `redactValues`, `minValueLength`, `disableTypes`, `locale`, `vcsIdentities`, `policy`, `anonymizer`, `tagFormat`. `envFiles` defaults to `["**/.env*"]`, skipping `node_modules`, `.git`, and symlinks.
+
+`allowLiteralTagsIn` defaults to an empty array (always block). Tools listed here — typically `write` and `edit` — keep an **unresolvable** literal tag in their arguments instead of aborting, so you can write documentation or tests that intentionally show tag examples. Every allowed occurrence is logged (`allowed literal tag in tool args`, tool name and argument path only). Resolvable tags are still restored in every tool.
+
+## How it works
+
+| Event | Effect |
+|---|---|
+| `session_start` | Instantiate the anonymizer, build the session map, parse the `rehydra` config |
+| `context_with_system` | Anonymize all request messages and inject the rehydra instruction when needed |
+| `tool_call` | Strictly restore PII tags in tool arguments before local execution; an unresolvable tag blocks the call |
+| `tool_result` | Anonymize the completed tool result before it re-enters model context |
+| `message_end` | Rewrite the final assistant message so PII tags are replaced with real values |
+| `session_shutdown` | Dispose of the anonymizer and session registry |
+
+## Masking records and comparison
+
+Once enabled, you can check request by request what was intercepted and what the model actually received:
+
+```json
+{
+  "rehydra": {
+    "record": {
+      "enabled": true,
+      "includeOriginal": true
+    }
+  }
+}
+```
+
+`/rehydra log` lists the last 20 records for the current session, `/rehydra log <id>` shows one record (hit lines plus field-level before/after), `/rehydra log --type EMAIL` filters by type; `/rehydra clear` clears the current session and `/rehydra clear --all` clears everything (both ask for confirmation).
+
+Recording is off by default. When enabled it writes to `~/.pi/agent/rehydra/records/` (directory 0700, files 0600), trimmed by both a 7-day and a 32 MiB cap, with 256 KiB per record for comparisons. **With `includeOriginal` set to true, real values are written to local disk**; set it to false to keep only the type, detector, placeholder, length and offsets. Terminal control characters are escaped when displayed, and record text is never fed back into model context.
+
+Any recording failure (unwritable directory, symlink, half-written line) only produces a warning and never affects masking or the request.
+
+## Limitations
+- Tool-argument rehydration is strict: when a tag is absent from this session's map (or the map is missing, or decryption fails), the tool call is blocked rather than run with `<PII .../>` as a real value. A placeholder can only be restored from the same session's map; the default map is in memory, so tags from before a process restart cannot be restored.
+
+- Model calls that bypass these hooks (rare, e.g. user-initiated notes) are not intercepted.
+- `URL`, `IP_ADDRESS`, `BIC_SWIFT`, `POSTAL_CODE` and `DATE` are disabled by default: recognizers that fire on shape alone misfire badly in code and documents. Restore them with `disableTypes: ["URL", "IP_ADDRESS"]`; a bank identifier still needs a full banking context word nearby.
+- Only the values of sensitive fields in an `.env` file enter the global known-value set; project names and ports are not replaced later in the text. Explicitly configured `redactValues` are not affected by that filter.
+- Collection fields in `policy` may be arrays and thresholds plain objects; an invalid field type fails startup with the field name instead of silently dropping the protection rule.
+- This extension cannot guarantee that title or compaction summaries stay sanitized — disable title agents if you need titles to be human-readable.
+
+## License
+
 MIT

package/README.md

@@ -1,60 +1,83 @@
-# pi-rehydra
-
-在主 LLM 请求发出之前，脱敏 Pi 对话中检测到的密钥。
-
-[English](./README.en.md)
-
-这个扩展拦截 [Pi](https://pi.dev) 与 LLM 之间的对话。你的 `.env` 文件中的密钥在离开本机前被替换为占位符，并在工具（shell 命令、文件写入等）在本地执行前透明还原；无法还原的占位符会阻止该次工具调用。
-
-它依赖 Pi 的 `ExtensionAPI`：`context_with_system`、`tool_call`、`tool_result`、`message_end`、`session_start` / `session_shutdown`。
-
-脱敏和还原都在本地进行；模型只用占位符推理，工具始终拿到真实值。
-
-## 安装
-
-```bash
-pi install npm:pi-rehydra
-```
-
-Pi 会在 `~/.pi/agent/settings.json` 写入包声明。然后编辑该文件添加扩展配置：
-
-```json
-{
-  "packages": [
-    {
-      "source": "npm:pi-rehydra"
-    }
-  ],
-  "rehydra": {
-    "envFiles": [".env", ".env.local"],
-    "redactValues": ["sk-live-abc123..."],
-    "allowLiteralTagsIn": ["write", "edit"]
-  }
-}
-```
-
-`rehydra` 键的所有字段都是扩展配置项：`envFiles`、`redactValues`、`minValueLength`、`disableTypes`、`locale`、`vcsIdentities`、`policy`、`anonymizer`、`tagFormat`。`envFiles` 默认是 `["**/.env*"]`，会跳过 `node_modules`、`.git` 和符号链接。
-
-`allowLiteralTagsIn` 默认是空数组（一律阻断）。列进这个数组的工具（通常是 `write`、`edit`）在参数里出现**无法还原**的字面标签时不再阻断，而是原样保留——用于写文档或测试时故意写标签示例。放行会在日志里留痕（`allowed literal tag in tool args`，只带工具名与参数路径）；能还原的标签在任何工具里都照常还原。
-
-## 工作原理
-
-| 钩子 | 作用 |
-|---|---|
-| `session_start` | 实例化匿名器、装配会话映射、解析 `rehydra` 配置 |
-| `context_with_system` | 匿名化模型请求前的所有消息，并按需追加 rehydra 指令 |
-| `tool_call` | 在工具执行前严格还原工具入参中的 PII 标签；任一标签无法还原即阻断该次调用 |
-| `tool_result` | 在结果返回给模型前脱敏真实 PII |
-| `message_end` | 改写最终回答的文本块，把 PII 标签还原为真实值 |
-| `session_shutdown` | 释放匿名器与会话注册表 |
-
-## 限制
-- 工具入参还原是严格的：标签不在本次会话映射中（或映射缺失、解密失败）时，该次工具调用会被阻止，不会把 `<PII .../>` 当作真实值执行。占位符只能由同一条会话的映射还原；默认使用内存映射，进程重启后旧标签无法还原。
-
-- 不会拦截用户在 UI 里粘贴的、且未走这些 hook 的模型调用。
-- 默认禁用 `URL` 和 `IP_ADDRESS`；通过 `disableTypes: []` 重新启用。
-- Pi 扩展无法保证消息标题（title）与元数据走相同的 hook，因此这些字段仍可能包含占位符。建议在脱敏时启用完整的 PII 脱敏策略。
-
-## License
-
+# pi-rehydra
+
+在主 LLM 请求发出之前，脱敏 Pi 对话中检测到的密钥。
+
+[English](./README.en.md)
+
+这个扩展拦截 [Pi](https://pi.dev) 与 LLM 之间的对话。你的 `.env` 文件中的密钥在离开本机前被替换为占位符，并在工具（shell 命令、文件写入等）在本地执行前透明还原；无法还原的占位符会阻止该次工具调用。
+
+它依赖 Pi 的 `ExtensionAPI`：`context_with_system`、`tool_call`、`tool_result`、`message_end`、`session_start` / `session_shutdown`。
+
+脱敏和还原都在本地进行；模型只用占位符推理，工具始终拿到真实值。
+
+## 安装
+
+```bash
+pi install npm:pi-rehydra
+```
+
+Pi 会在 `~/.pi/agent/settings.json` 写入包声明。然后编辑该文件添加扩展配置：
+
+```json
+{
+  "packages": [
+    {
+      "source": "npm:pi-rehydra"
+    }
+  ],
+  "rehydra": {
+    "envFiles": [".env", ".env.local"],
+    "redactValues": ["sk-live-abc123..."],
+    "allowLiteralTagsIn": ["write", "edit"]
+  }
+}
+```
+
+`rehydra` 键的所有字段都是扩展配置项：`envFiles`、`redactValues`、`minValueLength`、`disableTypes`、`locale`、`vcsIdentities`、`policy`、`anonymizer`、`tagFormat`。`envFiles` 默认是 `["**/.env*"]`，会跳过 `node_modules`、`.git` 和符号链接。
+
+`allowLiteralTagsIn` 默认是空数组（一律阻断）。列进这个数组的工具（通常是 `write`、`edit`）在参数里出现**无法还原**的字面标签时不再阻断，而是原样保留——用于写文档或测试时故意写标签示例。放行会在日志里留痕（`allowed literal tag in tool args`，只带工具名与参数路径）；能还原的标签在任何工具里都照常还原。
+
+## 工作原理
+
+| 钩子 | 作用 |
+|---|---|
+| `session_start` | 实例化匿名器、装配会话映射、解析 `rehydra` 配置 |
+| `context_with_system` | 匿名化模型请求前的所有消息，并按需追加 rehydra 指令 |
+| `tool_call` | 在工具执行前严格还原工具入参中的 PII 标签；任一标签无法还原即阻断该次调用 |
+| `tool_result` | 在结果返回给模型前脱敏真实 PII |
+| `message_end` | 改写最终回答的文本块，把 PII 标签还原为真实值 |
+| `session_shutdown` | 释放匿名器与会话注册表 |
+
+## 脱敏记录与对照
+
+开启后可以逐请求核对"哪些内容被拦截、模型实际收到了什么"：
+
+```json
+{
+  "rehydra": {
+    "record": {
+      "enabled": true,
+      "includeOriginal": true
+    }
+  }
+}
+```
+
+`/rehydra log` 列出当前会话最近 20 条记录，`/rehydra log <id>` 看单条详情（命中行 + 字段级 before/after），`/rehydra log --type EMAIL` 按类型筛选；`/rehydra clear` 清当前会话，`/rehydra clear --all` 清全部（都要确认）。
+
+记录默认关闭。开启后写入 `~/.pi/agent/rehydra/records/`（目录 0700、文件 0600），按 7 天与 32 MiB 双上限裁剪，单条记录对照上限 256 KiB。**`includeOriginal` 为 true 时真实值会写到本地磁盘**；不需要时设成 `false`，记录只保留类型、检测器、占位符、长度与偏移。记录里出现的终端控制字符在展示时会转义，原文不会回填到模型上下文。
+
+记录层任何失败（目录不可写、符号链接、半行文件）都只告警，不影响脱敏与请求。
+
+## 限制
+- 工具入参还原是严格的：标签不在本次会话映射中（或映射缺失、解密失败）时，该次工具调用会被阻止，不会把 `<PII .../>` 当作真实值执行。占位符只能由同一条会话的映射还原；默认使用内存映射，进程重启后旧标签无法还原。
+
+- 不会拦截用户在 UI 里粘贴的、且未走这些 hook 的模型调用。
+- 默认禁用 `URL`、`IP_ADDRESS`、`BIC_SWIFT`、`POSTAL_CODE`、`DATE`；只靠形状就能命中的识别器在代码与文档里误报率高。需要它们时把 `disableTypes` 写成 `["URL", "IP_ADDRESS"]` 即可恢复。即便恢复，银行标识码仍要求附近出现完整的银行语境词。
+- `.env` 里只有敏感字段的值会进入全局已知值集合：项目名、端口这类普通配置值不会被替换。显式配置的 `redactValues` 不受这条筛选影响。
+- `policy` 的集合类字段可写成数组、阈值可写成对象；字段类型不合法时扩展启动报错并指出字段名，不会静默丢掉保护规则。
+- Pi 扩展无法保证消息标题（title）与元数据走相同的 hook，因此这些字段仍可能包含占位符。建议在脱敏时启用完整的 PII 脱敏策略。
+
+## License
+
 MIT

package/dist/core/anonymizer.d.ts

@@ -6,6 +6,8 @@ import { AnonymizationResult, AnonymizationPolicy, AnonymizationMode, SemanticCo
 import { RecognizerRegistry } from "../recognizers/index.js";
 import { type INERModel, type OrtSessionOptions } from "../ner/index.js";
 import { type NERModelMode, type DownloadProgressCallback } from "../ner/model-manager.js";
+import type { AnonymizeRun, PiiObserver } from "./observer.js";
+export type { AnonymizeRun, ObservedEntity, PiiObserver } from "./observer.js";
 import { type RawPIIMap } from "../pipeline/tagger.js";
 import { type KeyProvider } from "../crypto/index.js";
 export type { RawPIIMap } from "../pipeline/tagger.js";
@@ -144,6 +146,11 @@ export interface AnonymizerConfig {
      * @default { enabled: false }
      */
     secrets?: SecretsConfig;
+    /**
+     * 模型检测失败时的处理。`rules` 降级为规则并标记检测不完整；
+     * `block` 直接把错误抛给调用方（fail-closed）。未配置时保持原有抛错行为。
+     */
+    nerFailure?: "rules" | "block";
     /** Key provider for encryption (generates random key if not provided) */
     keyProvider?: KeyProvider;
     /**
@@ -187,6 +194,7 @@ export declare class Anonymizer {
     private registry;
     private nerModel;
     private nerConfig;
+    private nerFailure;
     private semanticConfig;
     private secretsConfig;
     private mode;
@@ -218,7 +226,7 @@ export declare class Anonymizer {
      * @param existingPiiMap - Optional existing PII map for session-level ID reuse
      * @returns Anonymization result with anonymized text and encrypted PII map
      */
-    anonymize(text: string, locale?: string, policy?: Partial<AnonymizationPolicy>, existingPiiMap?: RawPIIMap): Promise<AnonymizationResult>;
+    anonymize(text: string, locale?: string, policy?: Partial<AnonymizationPolicy>, existingPiiMap?: RawPIIMap, observer?: PiiObserver, run?: AnonymizeRun): Promise<AnonymizationResult>;
     /**
      * Disposes of resources
      */

package/dist/core/anonymizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anonymizer.d.ts","sourceRoot":"","sources":["../../src/core/anonymizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EAEnB,iBAAiB,EAEjB,cAAc,EACd,aAAa,EAEb,OAAO,EACP,SAAS,EAIV,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,kBAAkB,EAEnB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,KAAK,SAAS,EAId,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,KAAK,YAAY,EAGjB,KAAK,wBAAwB,EAC9B,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AAI5B,YAAY,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAG7B,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;AAsCtD;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB;;;;;;OAMG;IACH,IAAI,EAAE,YAAY,CAAC;IAEnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IAE9C;;OAEG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAEpC;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAE9C;;;;OAIG;IACH,cAAc,CAAC,EAAE,iBAAiB,CAAC;IAEnC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAAC;IAEvC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC/E;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAE9B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAEzB;;;OAGG;IACH,GAAG,CAAC,EAAE,SAAS,CAAC;IAEhB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAC;IAE1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;IAExB,yEAAyE;IACzE,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAExC,+EAA+E;IAC/E,aAAa,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAE7C,2BAA2B;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,4BAA4B;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,KAAK,IAAI,CAAC;IAEnF;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAC3B,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,kBAAkB,EAC3B,WAAW,EAAE,WAAW,KACrB,iBAAiB,CAAC;AAEvB;;;GAGG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,kBAAkB,CAA4B;IACtD,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,mBAAmB,CAAwE;IACnG,OAAO,CAAC,SAAS,CAAY;gBAEjB,MAAM,GAAE,gBAAqB,EAAE,cAAc,CAAC,EAAE,cAAc;IA4E1E;;OAEG;IACH,IAAI,iBAAiB,IAAI,SAAS,CAEjC;IAED;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA6JjC;;;;;;;OAOG;IACG,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,EACrC,cAAc,CAAC,EAAE,SAAS,GACzB,OAAO,CAAC,mBAAmB,CAAC;IA4I/B;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAO9B;;OAEG;IACH,WAAW,IAAI,kBAAkB;IAIjC;;OAEG;IACH,WAAW,IAAI,SAAS,GAAG,IAAI;IAI/B;;OAEG;IACH,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB;CAmD9C;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,CAAC,EAAE,gBAAgB,EACzB,cAAc,CAAC,EAAE,cAAc,GAC9B,UAAU,CAEZ;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAS9B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAQ9B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,CAAC,EAAE,UAAU,GAAG,WAAW,CAAA;CAAE,EACxE,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAe9B"}
+{"version":3,"file":"anonymizer.d.ts","sourceRoot":"","sources":["../../src/core/anonymizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EAEnB,iBAAiB,EAEjB,cAAc,EACd,aAAa,EAEb,OAAO,EACP,SAAS,EAIV,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,kBAAkB,EAEnB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EACL,KAAK,SAAS,EAKd,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,KAAK,YAAY,EAGjB,KAAK,wBAAwB,EAC9B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,YAAY,EAAkB,WAAW,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE/E,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AAI5B,YAAY,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAG7B,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;AAyItD;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB;;;;;;OAMG;IACH,IAAI,EAAE,YAAY,CAAC;IAEnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;OAEG;IACH,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IAE9C;;OAEG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAEpC;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAE9C;;;;OAIG;IACH,cAAc,CAAC,EAAE,iBAAiB,CAAC;IAEnC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAAC;IAEvC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC/E;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAE9B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,iBAAiB,CAAC;IAEzB;;;OAGG;IACH,GAAG,CAAC,EAAE,SAAS,CAAC;IAEhB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAC;IAE1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;IAExB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAE/B,yEAAyE;IACzE,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAExC,+EAA+E;IAC/E,aAAa,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAE7C,2BAA2B;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,4BAA4B;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,KAAK,IAAI,CAAC;IAEnF;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAC3B,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,kBAAkB,EAC3B,WAAW,EAAE,WAAW,KACrB,iBAAiB,CAAC;AAEvB;;;GAGG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,kBAAkB,CAA4B;IACtD,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,cAAc,CAAwB;IAC9C,OAAO,CAAC,mBAAmB,CAAwE;IACnG,OAAO,CAAC,SAAS,CAAY;gBAEjB,MAAM,GAAE,gBAAqB,EAAE,cAAc,CAAC,EAAE,cAAc;IA6E1E;;OAEG;IACH,IAAI,iBAAiB,IAAI,SAAS,CAEjC;IAED;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAsKjC;;;;;;;OAOG;IACG,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,EACrC,cAAc,CAAC,EAAE,SAAS,EAC1B,QAAQ,CAAC,EAAE,WAAW,EACtB,GAAG,CAAC,EAAE,YAAY,GACjB,OAAO,CAAC,mBAAmB,CAAC;IAgM/B;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAO9B;;OAEG;IACH,WAAW,IAAI,kBAAkB;IAIjC;;OAEG;IACH,WAAW,IAAI,SAAS,GAAG,IAAI;IAI/B;;OAEG;IACH,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB;CAmD9C;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,CAAC,EAAE,gBAAgB,EACzB,cAAc,CAAC,EAAE,cAAc,GAC9B,UAAU,CAEZ;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAS9B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAQ9B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,CAAC,EAAE,UAAU,GAAG,WAAW,CAAA;CAAE,EACxE,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAe9B"}

package/dist/core/anonymizer.js

@@ -5,11 +5,12 @@
 import { PIIType, DEFAULT_TAG_FORMAT, createDefaultPolicy, SECRET_PII_TYPES, } from "../types/index.js";
 import { createDefaultRegistry, createSecretRecognizers, } from "../recognizers/index.js";
 import { createLiteralValueRecognizer } from "../recognizers/secrets/literal-value.js";
+import { isCredentialField } from "../recognizers/secrets/key-patterns.js";
 import { NERModelStub, createNERModel, createInferenceServerNERModel, } from "../ner/index.js";
 import { ensureModel, loadLabelMap, } from "../ner/model-manager.js";
-import { prenormalize } from "../pipeline/prenormalize.js";
+import { createLineEndingMapping, prenormalize } from "../pipeline/prenormalize.js";
 import { resolveEntities } from "../pipeline/resolver.js";
-import { tagEntities, countEntitiesByType, } from "../pipeline/tagger.js";
+import { generateTag, tagEntities, countEntitiesByType, } from "../pipeline/tagger.js";
 import { validateOutput } from "../pipeline/validator.js";
 import { enrichSemantics } from "../pipeline/semantic-enricher.js";
 import { ensureSemanticData, isSemanticDataAvailable, loadSemanticData, } from "../pipeline/semantic-data-loader.js";
@@ -44,6 +45,93 @@ function mergePolicyWithBase(base, partial) {
         excludeLocationScopes: partial.excludeLocationScopes ?? base.excludeLocationScopes,
     };
 }
+/** 判断信号是否已取消（单独成函数，避免被 TS 的收窄影响）。 */
+function isAborted(signal) {
+    return signal !== undefined && signal.aborted;
+}
+/** 把取消信号转成标准 AbortError。 */
+function toAbortError(signal) {
+    const reason = signal.reason;
+    if (reason instanceof Error)
+        return reason;
+    const error = new Error("Anonymization aborted");
+    error.name = "AbortError";
+    return error;
+}
+/** 等待期间保持对取消信号的响应：取消时立即以 AbortError 结束。 */
+function raceWithSignal(promise, signal) {
+    if (signal === undefined)
+        return promise;
+    if (signal.aborted)
+        return Promise.reject(toAbortError(signal));
+    return new Promise((resolve, reject) => {
+        const onAbort = () => {
+            reject(toAbortError(signal));
+        };
+        signal.addEventListener("abort", onAbort, { once: true });
+        promise.then((value) => {
+            signal.removeEventListener("abort", onAbort);
+            resolve(value);
+        }, (error) => {
+            signal.removeEventListener("abort", onAbort);
+            reject(error);
+        });
+    });
+}
+/** 给等待加一个上限；超时抛出可归类为 model-deadline 的错误。 */
+function withTimeout(promise, ms) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            reject(new Error("inference deadline exceeded while waiting"));
+        }, ms);
+        promise.then((value) => {
+            clearTimeout(timer);
+            resolve(value);
+        }, (error) => {
+            clearTimeout(timer);
+            reject(error);
+        });
+    });
+}
+/** 把模型失败归类成不含正文的错误码。 */
+function classifyNerError(error) {
+    const message = error instanceof Error ? error.message.toLowerCase() : "";
+    if (message.includes("deadline exceeded"))
+        return "model-deadline";
+    if (message.includes("timed out") || message.includes("timeout"))
+        return "model-timeout";
+    if (message.includes("failed to connect") || message.includes("econnrefused")) {
+        return "model-unreachable";
+    }
+    if (message.includes("protocol error"))
+        return "protocol-error";
+    if (message.includes("not loaded"))
+        return "model-unavailable";
+    return "model-failed";
+}
+/** 把命中回调给观察者；偏移从规范化文本折回原文空间。 */
+function notifyObserver(observer, input) {
+    const mapping = createLineEndingMapping(input.text);
+    for (const entity of input.entities) {
+        const hit = {
+            type: entity.type,
+            recognizer: entity.recognizer,
+            start: mapping.toOriginal(entity.start),
+            end: mapping.toOriginal(entity.end),
+            replaced: generateTag(entity.type, entity.id, entity.semantic, input.tagFormat),
+        };
+        if (observer.includeOriginal === true) {
+            // 从原文切片，保留内部 CRLF 与规范化的差异
+            hit.original = input.text.slice(hit.start, hit.end);
+        }
+        try {
+            observer.onEntity(hit);
+        }
+        catch {
+            // 观察者属于诊断通道，异常不能影响脱敏本身
+        }
+    }
+}
 /**
  * Anonymizer instance
  * Main class for performing PII anonymization
@@ -52,6 +140,7 @@ export class Anonymizer {
     registry;
     nerModel = null;
     nerConfig;
+    nerFailure;
     semanticConfig;
     secretsConfig;
     mode;
@@ -83,6 +172,7 @@ export class Anonymizer {
         }
         // Handle NER configuration
         this.nerConfig = config.ner ?? { mode: "disabled" };
+        this.nerFailure = config.nerFailure ?? "propagate";
         this.modelVersion = config.modelVersion ?? "1.0.0";
         // Merge NER thresholds into default policy if provided
         if (this.nerConfig.thresholds !== undefined) {
@@ -246,11 +336,16 @@ export class Anonymizer {
         }
         // Handle secrets .env file loading and literal value matching
         if (this.secretsConfig.enabled) {
-            const literalValues = [
-                ...(this.secretsConfig.redactValues ?? []),
-            ];
+            // 显式指定的值按用户意图保留，不做自动筛选
+            const explicitValues = [];
+            for (const value of this.secretsConfig.redactValues ?? []) {
+                if (value.trim().length === 0)
+                    continue;
+                explicitValues.push(value);
+            }
             const minLength = this.secretsConfig.minValueLength ?? 4;
             // Parse .env files if provided
+            const envValues = [];
             if (this.secretsConfig.envFiles !== undefined && this.secretsConfig.envFiles.length > 0) {
                 const storage = await getStorageProvider();
                 const envFiles = storage.resolveFiles !== undefined
@@ -260,13 +355,19 @@ export class Anonymizer {
                     try {
                         const content = await storage.readTextFile(envFile);
                         const parsed = parseEnvFile(content);
-                        literalValues.push(...parsed);
+                        // 只把敏感字段的值收进已知值集合：项目名、端口这类普通配置
+                        // 值一旦进入集合，后续文本里出现就会被替换。
+                        for (const entry of parsed) {
+                            if (isCredentialField(entry.key))
+                                envValues.push(entry.value);
+                        }
                     }
                     catch {
                         // Skip files that can't be read
                     }
                 }
             }
+            const literalValues = [...explicitValues, ...envValues];
             // Register literal value recognizer if we have values
             if (literalValues.length > 0) {
                 this.registry.register(createLiteralValueRecognizer(literalValues, minLength));
@@ -283,10 +384,14 @@ export class Anonymizer {
      * @param existingPiiMap - Optional existing PII map for session-level ID reuse
      * @returns Anonymization result with anonymized text and encrypted PII map
      */
-    async anonymize(text, locale, policy, existingPiiMap) {
+    async anonymize(text, locale, policy, existingPiiMap, observer, run) {
         if (!this.initialized) {
             await this.initialize();
         }
+        // 宿主取消：直接结束，不进入降级路径
+        if (run?.signal?.aborted === true) {
+            throw toAbortError(run.signal);
+        }
         const startTime = performance.now();
         // Merge policy with instance defaults (not global defaults)
         // This ensures semantic config from constructor is preserved
@@ -298,8 +403,42 @@ export class Anonymizer {
         const normalizedText = prenormalize(text);
         // Step 2: Run regex recognizers
         const regexMatches = this.registry.findAll(normalizedText, effectivePolicy);
-        // Step 3: Run NER model
-        const nerResult = await this.nerModel.predict(normalizedText, effectivePolicy);
+        // Step 3: Run NER model；失败按 nerFailure 策略处理
+        const detectionErrors = [];
+        let nerResult;
+        const remaining = run?.deadline === undefined ? undefined : run.deadline - Date.now();
+        try {
+            if (remaining !== undefined && remaining <= 0) {
+                // 预算已耗尽：不再发请求，直接走规则
+                throw new Error("inference deadline exceeded before request");
+            }
+            const prediction = this.nerModel.predict(normalizedText, effectivePolicy);
+            // shortcut: 预算只截断等待，底层请求仍会在自身超时后结束
+            nerResult =
+                remaining === undefined
+                    ? await raceWithSignal(prediction, run?.signal)
+                    : await raceWithSignal(withTimeout(prediction, remaining), run?.signal);
+        }
+        catch (error) {
+            // 取消不属于检测失败，始终向上传递
+            const signal = run?.signal;
+            if (signal !== undefined && isAborted(signal))
+                throw toAbortError(signal);
+            if (error instanceof Error && error.name === "AbortError")
+                throw error;
+            if (this.nerFailure === "block" || this.nerFailure === "propagate") {
+                throw error;
+            }
+            // 降级：本次只用规则结果，并标记检测不完整
+            detectionErrors.push({ finder: "model", code: classifyNerError(error) });
+            nerResult = {
+                spans: [],
+                processingTimeMs: 0,
+                modelVersion: this.modelVersion,
+                truncated: false,
+                coverageChars: 0,
+            };
+        }
         const nerMatches = nerResult.spans;
         // Step 4: Resolve and merge entities
         const resolvedMatches = resolveEntities(regexMatches, nerMatches, effectivePolicy, normalizedText);
@@ -337,6 +476,16 @@ export class Anonymizer {
             }));
             this.onValidationWarning(safeErrors);
         }
+        // Step 6.5: 把每条替换回调给可选的观察者（诊断/记录用）。
+        // 只在调用方显式注册时执行；命中偏移折回原始文本空间。
+        if (observer !== undefined && entities.length > 0) {
+            notifyObserver(observer, {
+                text,
+                normalizedText,
+                entities,
+                tagFormat: this.tagFormat,
+            });
+        }
         // Step 7: Build stats
         const endTime = performance.now();
         const stats = {
@@ -349,6 +498,7 @@ export class Anonymizer {
             nerTruncated: nerResult.truncated,
             nerCoverageChars: nerResult.coverageChars,
         };
+        const integrity = detectionErrors.length === 0 ? "complete" : "rules-only";
         // Step 8: Build result (without original text in entities)
         const safeEntities = entities.map(({ original: _original, ...rest }) => rest);
         // Step 9: Encrypt PII map (only in pseudonymize mode)
@@ -358,6 +508,9 @@ export class Anonymizer {
                 anonymizedText,
                 entities: safeEntities,
                 stats,
+                ...(detectionErrors.length === 0
+                    ? {}
+                    : { detectionErrors, integrity }),
             };
         }
         // Pseudonymize mode - encrypt and return PII map
@@ -370,6 +523,7 @@ export class Anonymizer {
             entities: safeEntities,
             piiMap: encryptedPiiMap,
             stats,
+            ...(detectionErrors.length === 0 ? {} : { detectionErrors, integrity }),
         };
     }
     /**
@@ -534,10 +688,10 @@ export async function anonymizeWithNER(text, nerConfig, policy) {
     }
 }
 /**
- * Parses a .env file content and returns values
+ * Parses a .env file content and returns key/value pairs.
  */
 function parseEnvFile(content) {
-    const values = [];
+    const entries = [];
     const lines = content.split("\n");
     for (const line of lines) {
         const trimmed = line.trim();
@@ -545,11 +699,11 @@ function parseEnvFile(content) {
         if (trimmed === "" || trimmed.startsWith("#"))
             continue;
         // Match KEY=VALUE (with optional export prefix and quotes)
-        const match = trimmed.match(/^(?:export\s+)?[A-Za-z_][A-Za-z0-9_]*\s*=\s*["']?(.*?)["']?$/);
-        if (match !== null && match[1] !== undefined && match[1] !== "") {
-            values.push(match[1]);
+        const match = trimmed.match(/^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*["']?(.*?)["']?$/);
+        if (match !== null && match[1] !== undefined && match[2] !== undefined && match[2] !== "") {
+            entries.push({ key: match[1], value: match[2] });
         }
     }
-    return values;
+    return entries;
 }
 //# sourceMappingURL=anonymizer.js.map