pii-vault 0.1.0

package/LICENSE-MIT

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Jiansen He
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,148 @@
+# PII Vault
+
+**Presidio-compatible PII detection, anonymization, and reversible tokenization.**
+
+Multi-language implementations sharing a common specification. Detect 40+ PII entity types, anonymize with multiple strategies (replace, mask, hash, redact), and reversibly tokenize with a persistent vault.
+
+## Features
+
+- **29 built-in recognizers** covering 15 countries (US, UK, CN, IN, AU, DE, IT, ES, KR, SG, FI, SE, PL, JP, FR, CA, BR)
+- **Shared spec**: Recognizer patterns defined as JSON, consumed by all language implementations
+- **Vault**: Deterministic, reversible tokenization with collision handling and context disambiguation
+- **Multiple anonymization strategies**: Replace, Mask, Hash, Redact, Vault
+- **Luhn validation** for credit cards, **checksum validation** for Chinese ID cards
+- **Context-aware scoring**: Boost detection confidence when context words appear nearby
+- **Zero runtime dependencies** beyond regex and JSON parsing
+
+## Quick Start
+
+### Rust
+
+```toml
+[dependencies]
+pii-vault = "0.1"
+```
+
+```rust
+use pii_vault::{Analyzer, Anonymizer, Operator, Vault, load_recognizers_from_dir};
+use std::collections::HashMap;
+use std::path::Path;
+
+// Load recognizers from spec/
+let recognizers = load_recognizers_from_dir(Path::new("spec/recognizers"));
+let analyzer = Analyzer::new(recognizers);
+
+// Analyze text
+let text = "Email alice@company.com, SSN 123-45-6789";
+let result = analyzer.analyze(text, &[], 0.0);
+
+// Anonymize with vault (reversible)
+let mut vault = Vault::new();
+let mut ops = HashMap::new();
+ops.insert("EMAIL_ADDRESS".to_string(), Operator::Vault);
+ops.insert("US_SSN".to_string(), Operator::Vault);
+
+let anon = Anonymizer::anonymize(text, &result.entities, &ops, &Operator::default(), Some(&mut vault));
+println!("{}", anon.text);
+// "Email [EMAIL_ADDRESS:a1b2], SSN [US_SSN:c3d4]"
+
+// Restore original
+let restored = vault.detokenize(&anon.text);
+assert_eq!(restored, text);
+```
+
+### TypeScript
+
+```bash
+npm install pii-vault
+```
+
+```typescript
+import { Analyzer, Anonymizer, RegexRecognizer, Vault } from 'pii-vault';
+import * as fs from 'fs';
+
+// Load recognizers from spec/
+const specDir = './spec/recognizers';
+const recognizers = fs.readdirSync(specDir)
+  .filter(f => f.endsWith('.json'))
+  .map(f => new RegexRecognizer(JSON.parse(fs.readFileSync(`${specDir}/${f}`, 'utf-8'))));
+
+const analyzer = new Analyzer(recognizers);
+
+// Analyze
+const text = 'Email alice@company.com, SSN 123-45-6789';
+const result = analyzer.analyze(text);
+
+// Anonymize with vault
+const vault = new Vault();
+const ops = { EMAIL_ADDRESS: { type: 'vault' }, US_SSN: { type: 'vault' } };
+const anon = Anonymizer.anonymize(text, result.entities, ops, { type: 'replace' }, vault);
+
+// Restore
+const restored = vault.detokenize(anon.text);
+```
+
+## Architecture
+
+```
+pii-vault/
+├── spec/                     # Shared specification (language-agnostic)
+│   ├── entities.json         # 45 entity type definitions
+│   ├── recognizers/          # 29 regex recognizer definitions (JSON)
+│   └── test-cases/           # Cross-language test cases
+├── rust/                     # Rust implementation → crates.io: pii-vault
+├── typescript/               # TypeScript implementation → npm: pii-vault
+├── go/                       # Go implementation (planned)
+├── java/                     # Java implementation (planned)
+├── haskell/                  # Haskell implementation (planned)
+└── wasm/                     # WASM from Rust (planned)
+```
+
+The `spec/recognizers/*.json` files are the **single source of truth**. All language implementations load these patterns at runtime or compile time.
+
+## Supported Entity Types
+
+### Generic (all languages)
+EMAIL_ADDRESS, PHONE_NUMBER, CREDIT_CARD, CRYPTO, IP_ADDRESS, MAC_ADDRESS, IBAN_CODE, URL, UUID
+
+### Country-Specific
+| Country | Entities |
+|---------|----------|
+| US | SSN, ITIN, Passport, Driver License, Bank Routing |
+| UK | NHS, NINO |
+| China | ID Card (18-digit), Phone, Passport, Bank Card |
+| India | Aadhaar, PAN, Passport |
+| Australia | TFN, Medicare, ABN |
+| Germany | Steuer-ID |
+| Italy | Fiscal Code |
+| Spain | NIE, NIF |
+| Korea | RRN |
+| Singapore | NRIC |
+| Finland | Personal ID |
+| Sweden | Personal Number |
+| Poland | PESEL |
+| Japan | My Number, Passport |
+| France | NIR |
+| Canada | SIN |
+| Brazil | CPF |
+
+## Anonymization Strategies
+
+| Strategy | Description | Reversible |
+|----------|-------------|------------|
+| Replace | Replace with `<ENTITY_TYPE>` or custom string | No |
+| Mask | Partially mask characters (e.g., `****1111`) | No |
+| Hash | FNV hash of original value | No |
+| Redact | Remove entirely | No |
+| **Vault** | Deterministic token `[ENTITY:xxxx]` with persistent mapping | **Yes** |
+
+## Contributing
+
+Add a new recognizer:
+1. Create `spec/recognizers/your_entity.json` following the existing format
+2. Add test cases to `spec/test-cases/`
+3. Run tests in both Rust and TypeScript to verify
+
+## License
+
+MIT

package/dist/analyzer.d.ts

@@ -0,0 +1,13 @@
+import { EntityType, RecognizerResult } from './entity';
+import { Recognizer } from './recognizer';
+export interface AnalyzerResult {
+    entities: RecognizerResult[];
+}
+export declare class Analyzer {
+    private readonly recognizers;
+    constructor(recognizers: Recognizer[]);
+    analyze(text: string, entities?: EntityType[], scoreThreshold?: number): AnalyzerResult;
+    get recognizerCount(): number;
+    private resolveOverlaps;
+}
+//# sourceMappingURL=analyzer.d.ts.map

package/dist/analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../src/analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAED,qBAAa,QAAQ;IACP,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,UAAU,EAAE;IAEtD,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,UAAU,EAAO,EAAE,cAAc,SAAM,GAAG,cAAc;IAexF,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED,OAAO,CAAC,eAAe;CA6BxB"}

package/dist/analyzer.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Analyzer = void 0;
+class Analyzer {
+    constructor(recognizers) {
+        this.recognizers = recognizers;
+    }
+    analyze(text, entities = [], scoreThreshold = 0.0) {
+        let allResults = [];
+        for (const recognizer of this.recognizers) {
+            const results = recognizer.analyze(text, entities);
+            allResults.push(...results);
+        }
+        allResults = allResults.filter(r => r.score >= scoreThreshold);
+        allResults.sort((a, b) => a.start - b.start || b.score - a.score);
+        const deduped = this.resolveOverlaps(allResults);
+        return { entities: deduped };
+    }
+    get recognizerCount() {
+        return this.recognizers.length;
+    }
+    resolveOverlaps(results) {
+        const output = [];
+        for (const result of results) {
+            const dominated = output.some(existing => existing.start <= result.start &&
+                existing.end >= result.end &&
+                existing.score >= result.score);
+            if (dominated)
+                continue;
+            const toRemove = new Set();
+            output.forEach((existing, i) => {
+                if (result.start <= existing.start &&
+                    result.end >= existing.end &&
+                    result.score >= existing.score) {
+                    toRemove.add(i);
+                }
+            });
+            const filtered = output.filter((_, i) => !toRemove.has(i));
+            output.length = 0;
+            output.push(...filtered, result);
+        }
+        output.sort((a, b) => a.start - b.start);
+        return output;
+    }
+}
+exports.Analyzer = Analyzer;
+//# sourceMappingURL=analyzer.js.map

package/dist/analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzer.js","sourceRoot":"","sources":["../src/analyzer.ts"],"names":[],"mappings":";;;AAOA,MAAa,QAAQ;IACnB,YAA6B,WAAyB;QAAzB,gBAAW,GAAX,WAAW,CAAc;IAAG,CAAC;IAE1D,OAAO,CAAC,IAAY,EAAE,WAAyB,EAAE,EAAE,cAAc,GAAG,GAAG;QACrE,IAAI,UAAU,GAAuB,EAAE,CAAC;QAExC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACnD,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;QAC/D,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAElE,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;IACjC,CAAC;IAEO,eAAe,CAAC,OAA2B;QACjD,MAAM,MAAM,GAAuB,EAAE,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,QAAQ,CAAC,EAAE,CACT,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;gBAC9B,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;gBAC1B,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CACjC,CAAC;YACF,IAAI,SAAS;gBAAE,SAAS;YAExB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;YACnC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE;gBAC7B,IACE,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK;oBAC9B,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG;oBAC1B,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAC9B,CAAC;oBACD,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAnDD,4BAmDC"}

package/dist/anonymizer.d.ts

@@ -0,0 +1,32 @@
+import { RecognizerResult } from './entity';
+import { Vault } from './vault';
+export type Operator = {
+    type: 'replace';
+    newValue?: string;
+} | {
+    type: 'mask';
+    maskingChar: string;
+    charsToMask: number;
+    fromEnd: boolean;
+} | {
+    type: 'hash';
+} | {
+    type: 'redact';
+} | {
+    type: 'vault';
+};
+export interface AnonymizedItem {
+    entityType: string;
+    start: number;
+    end: number;
+    original: string;
+    replacement: string;
+}
+export interface AnonymizedResult {
+    text: string;
+    items: AnonymizedItem[];
+}
+export declare class Anonymizer {
+    static anonymize(text: string, entities: RecognizerResult[], operators?: Record<string, Operator>, defaultOperator?: Operator, vault?: Vault): AnonymizedResult;
+}
+//# sourceMappingURL=anonymizer.d.ts.map

package/dist/anonymizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymizer.d.ts","sourceRoot":"","sources":["../src/anonymizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAEhC,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC5E;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,qBAAa,UAAU;IACrB,MAAM,CAAC,SAAS,CACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAM,EACxC,eAAe,GAAE,QAA8B,EAC/C,KAAK,CAAC,EAAE,KAAK,GACZ,gBAAgB;CA4CpB"}

package/dist/anonymizer.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Anonymizer = void 0;
+class Anonymizer {
+    static anonymize(text, entities, operators = {}, defaultOperator = { type: 'replace' }, vault) {
+        const sorted = [...entities].sort((a, b) => b.start - a.start);
+        let result = text;
+        const items = [];
+        for (const entity of sorted) {
+            const original = text.slice(entity.start, entity.end);
+            const op = operators[entity.entityType.name] || defaultOperator;
+            let replacement;
+            switch (op.type) {
+                case 'replace':
+                    replacement = op.newValue || `<${entity.entityType.name}>`;
+                    break;
+                case 'mask':
+                    replacement = maskText(original, op.maskingChar, op.charsToMask, op.fromEnd);
+                    break;
+                case 'hash':
+                    replacement = hashText(original);
+                    break;
+                case 'redact':
+                    replacement = '';
+                    break;
+                case 'vault':
+                    replacement = vault
+                        ? vault.tokenize(entity.entityType.name.toLowerCase(), original)
+                        : `<${entity.entityType.name}>`;
+                    break;
+            }
+            items.push({
+                entityType: entity.entityType.name,
+                start: entity.start,
+                end: entity.end,
+                original,
+                replacement,
+            });
+            result = result.slice(0, entity.start) + replacement + result.slice(entity.end);
+        }
+        items.reverse();
+        return { text: result, items };
+    }
+}
+exports.Anonymizer = Anonymizer;
+function maskText(text, maskChar, charsToMask, fromEnd) {
+    const chars = [...text];
+    const toMask = Math.min(charsToMask, chars.length);
+    if (fromEnd) {
+        for (let i = chars.length - 1; i >= chars.length - toMask; i--) {
+            chars[i] = maskChar;
+        }
+    }
+    else {
+        for (let i = 0; i < toMask; i++) {
+            chars[i] = maskChar;
+        }
+    }
+    return chars.join('');
+}
+function hashText(text) {
+    let hash = 2166136261;
+    for (let i = 0; i < text.length; i++) {
+        hash = Math.imul(hash ^ text.charCodeAt(i), 16777619) >>> 0;
+    }
+    return hash.toString(16).padStart(8, '0');
+}
+//# sourceMappingURL=anonymizer.js.map

package/dist/anonymizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymizer.js","sourceRoot":"","sources":["../src/anonymizer.ts"],"names":[],"mappings":";;;AAuBA,MAAa,UAAU;IACrB,MAAM,CAAC,SAAS,CACd,IAAY,EACZ,QAA4B,EAC5B,YAAsC,EAAE,EACxC,kBAA4B,EAAE,IAAI,EAAE,SAAS,EAAE,EAC/C,KAAa;QAEb,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,MAAM,KAAK,GAAqB,EAAE,CAAC;QAEnC,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC;YAEhE,IAAI,WAAmB,CAAC;YACxB,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;gBAChB,KAAK,SAAS;oBACZ,WAAW,GAAG,EAAE,CAAC,QAAQ,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC;oBAC3D,MAAM;gBACR,KAAK,MAAM;oBACT,WAAW,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;oBAC7E,MAAM;gBACR,KAAK,MAAM;oBACT,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACjC,MAAM;gBACR,KAAK,QAAQ;oBACX,WAAW,GAAG,EAAE,CAAC;oBACjB,MAAM;gBACR,KAAK,OAAO;oBACV,WAAW,GAAG,KAAK;wBACjB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC;wBAChE,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC;oBAClC,MAAM;YACV,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACT,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAClC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,QAAQ;gBACR,WAAW;aACZ,CAAC,CAAC;YAEH,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClF,CAAC;QAED,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;CACF;AAnDD,gCAmDC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB,EAAE,WAAmB,EAAE,OAAgB;IACrF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/D,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;QACtB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC"}

package/dist/entity.d.ts

@@ -0,0 +1,15 @@
+export declare class EntityType {
+    readonly name: string;
+    constructor(name: string);
+    toString(): string;
+    equals(other: EntityType): boolean;
+}
+export interface RecognizerResult {
+    entityType: EntityType;
+    start: number;
+    end: number;
+    score: number;
+    recognizerName?: string;
+}
+export declare function resultText(result: RecognizerResult, input: string): string;
+//# sourceMappingURL=entity.d.ts.map

package/dist/entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../src/entity.ts"],"names":[],"mappings":"AAAA,qBAAa,UAAU;aACO,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;IAIxC,QAAQ,IAAI,MAAM;IAIlB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO;CAGnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1E"}

package/dist/entity.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EntityType = void 0;
+exports.resultText = resultText;
+class EntityType {
+    constructor(name) {
+        this.name = name;
+        this.name = name.toUpperCase();
+    }
+    toString() {
+        return this.name;
+    }
+    equals(other) {
+        return this.name === other.name;
+    }
+}
+exports.EntityType = EntityType;
+function resultText(result, input) {
+    return input.slice(result.start, result.end);
+}
+//# sourceMappingURL=entity.js.map

package/dist/entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity.js","sourceRoot":"","sources":["../src/entity.ts"],"names":[],"mappings":";;;AAsBA,gCAEC;AAxBD,MAAa,UAAU;IACrB,YAA4B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,KAAiB;QACtB,OAAO,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;IAClC,CAAC;CACF;AAZD,gCAYC;AAUD,SAAgB,UAAU,CAAC,MAAwB,EAAE,KAAa;IAChE,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;AAC/C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { EntityType, RecognizerResult, resultText } from './entity';
+export { Recognizer, RegexRecognizer, RecognizerDef, luhnCheck, cnIdCheck } from './recognizer';
+export { Analyzer, AnalyzerResult } from './analyzer';
+export { Vault, VaultEntry } from './vault';
+export { Anonymizer, Operator, AnonymizedResult, AnonymizedItem } from './anonymizer';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAChG,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Anonymizer = exports.Vault = exports.Analyzer = exports.cnIdCheck = exports.luhnCheck = exports.RegexRecognizer = exports.resultText = exports.EntityType = void 0;
+var entity_1 = require("./entity");
+Object.defineProperty(exports, "EntityType", { enumerable: true, get: function () { return entity_1.EntityType; } });
+Object.defineProperty(exports, "resultText", { enumerable: true, get: function () { return entity_1.resultText; } });
+var recognizer_1 = require("./recognizer");
+Object.defineProperty(exports, "RegexRecognizer", { enumerable: true, get: function () { return recognizer_1.RegexRecognizer; } });
+Object.defineProperty(exports, "luhnCheck", { enumerable: true, get: function () { return recognizer_1.luhnCheck; } });
+Object.defineProperty(exports, "cnIdCheck", { enumerable: true, get: function () { return recognizer_1.cnIdCheck; } });
+var analyzer_1 = require("./analyzer");
+Object.defineProperty(exports, "Analyzer", { enumerable: true, get: function () { return analyzer_1.Analyzer; } });
+var vault_1 = require("./vault");
+Object.defineProperty(exports, "Vault", { enumerable: true, get: function () { return vault_1.Vault; } });
+var anonymizer_1 = require("./anonymizer");
+Object.defineProperty(exports, "Anonymizer", { enumerable: true, get: function () { return anonymizer_1.Anonymizer; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,mCAAoE;AAA3D,oGAAA,UAAU,OAAA;AAAoB,oGAAA,UAAU,OAAA;AACjD,2CAAgG;AAA3E,6GAAA,eAAe,OAAA;AAAiB,uGAAA,SAAS,OAAA;AAAE,uGAAA,SAAS,OAAA;AACzE,uCAAsD;AAA7C,oGAAA,QAAQ,OAAA;AACjB,iCAA4C;AAAnC,8FAAA,KAAK,OAAA;AACd,2CAAsF;AAA7E,wGAAA,UAAU,OAAA"}

package/dist/recognizer.d.ts

@@ -0,0 +1,41 @@
+import { EntityType, RecognizerResult } from './entity';
+export interface Recognizer {
+    name: string;
+    supportedEntities: EntityType[];
+    analyze(text: string, entities: EntityType[]): RecognizerResult[];
+}
+export interface PatternDef {
+    name: string;
+    regex: string;
+    score: number;
+}
+export interface RecognizerDef {
+    name: string;
+    entity_type: string;
+    version: string;
+    patterns: PatternDef[];
+    context_words?: string[];
+    context_score_boost?: number;
+    deny_list?: string[];
+    validators?: string[];
+    supported_languages?: string[] | null;
+}
+export declare class RegexRecognizer implements Recognizer {
+    private readonly def;
+    readonly name: string;
+    readonly supportedEntities: EntityType[];
+    private readonly entity;
+    private readonly compiled;
+    private readonly contextWords;
+    private readonly contextBoost;
+    private readonly denyList;
+    private readonly validators;
+    constructor(def: RecognizerDef);
+    static fromJson(json: string): RegexRecognizer;
+    analyze(text: string, entities: EntityType[]): RecognizerResult[];
+    private hasContext;
+    private validate;
+}
+export declare function luhnCheck(number: string): boolean;
+export declare function cnIdCheck(id: string): boolean;
+//# sourceMappingURL=recognizer.d.ts.map

package/dist/recognizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recognizer.d.ts","sourceRoot":"","sources":["../src/recognizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAExD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,UAAU,EAAE,CAAC;IAChC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,gBAAgB,EAAE,CAAC;CACnE;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACvC;AAED,qBAAa,eAAgB,YAAW,UAAU;IAUpC,OAAO,CAAC,QAAQ,CAAC,GAAG;IAThC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,UAAU,EAAE,CAAC;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwD;IACjF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAW;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAc;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAW;gBAET,GAAG,EAAE,aAAa;IAe/C,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe;IAK9C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,gBAAgB,EAAE;IAgCjE,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,QAAQ;CAajB;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAejD;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAW7C"}

package/dist/recognizer.js

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RegexRecognizer = void 0;
+exports.luhnCheck = luhnCheck;
+exports.cnIdCheck = cnIdCheck;
+const entity_1 = require("./entity");
+class RegexRecognizer {
+    constructor(def) {
+        this.def = def;
+        this.name = def.name;
+        this.entity = new entity_1.EntityType(def.entity_type);
+        this.supportedEntities = [this.entity];
+        this.contextWords = (def.context_words || []).map(w => w.toLowerCase());
+        this.contextBoost = def.context_score_boost || 0;
+        this.denyList = new Set(def.deny_list || []);
+        this.validators = def.validators || [];
+        this.compiled = def.patterns.map(p => ({
+            name: p.name,
+            regex: new RegExp(p.regex, 'g'),
+            score: p.score,
+        }));
+    }
+    static fromJson(json) {
+        const def = JSON.parse(json);
+        return new RegexRecognizer(def);
+    }
+    analyze(text, entities) {
+        if (entities.length > 0 && !entities.some(e => e.equals(this.entity))) {
+            return [];
+        }
+        const results = [];
+        for (const { name, regex, score } of this.compiled) {
+            regex.lastIndex = 0;
+            let match;
+            while ((match = regex.exec(text)) !== null) {
+                const matched = match[0];
+                if (this.denyList.has(matched))
+                    continue;
+                if (!this.validate(matched))
+                    continue;
+                let finalScore = score;
+                if (this.hasContext(text, match.index, match.index + matched.length)) {
+                    finalScore = Math.min(finalScore + this.contextBoost, 1.0);
+                }
+                results.push({
+                    entityType: this.entity,
+                    start: match.index,
+                    end: match.index + matched.length,
+                    score: finalScore,
+                    recognizerName: name,
+                });
+            }
+        }
+        return results;
+    }
+    hasContext(text, start, end) {
+        if (this.contextWords.length === 0)
+            return false;
+        const windowStart = Math.max(0, start - 100);
+        const windowEnd = Math.min(text.length, end + 100);
+        const window = text.slice(windowStart, windowEnd).toLowerCase();
+        return this.contextWords.some(w => window.includes(w));
+    }
+    validate(matched) {
+        for (const v of this.validators) {
+            switch (v) {
+                case 'luhn':
+                    if (!luhnCheck(matched))
+                        return false;
+                    break;
+                case 'cn_id_checksum':
+                    if (!cnIdCheck(matched))
+                        return false;
+                    break;
+            }
+        }
+        return true;
+    }
+}
+exports.RegexRecognizer = RegexRecognizer;
+function luhnCheck(number) {
+    const digits = number.replace(/\D/g, '');
+    if (digits.length < 2)
+        return false;
+    let sum = 0;
+    let double = false;
+    for (let i = digits.length - 1; i >= 0; i--) {
+        let val = parseInt(digits[i], 10);
+        if (double) {
+            val *= 2;
+            if (val > 9)
+                val -= 9;
+        }
+        sum += val;
+        double = !double;
+    }
+    return sum % 10 === 0;
+}
+function cnIdCheck(id) {
+    if (id.length !== 18)
+        return false;
+    const weights = [7, 9, 10, 5, 8, 4, 2, 1, 6, 3, 7, 9, 10, 5, 8, 4, 2];
+    const checkChars = '10X98765432';
+    let sum = 0;
+    for (let i = 0; i < 17; i++) {
+        const d = parseInt(id[i], 10);
+        if (isNaN(d))
+            return false;
+        sum += d * weights[i];
+    }
+    return id[17].toUpperCase() === checkChars[sum % 11];
+}
+//# sourceMappingURL=recognizer.js.map

package/dist/recognizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recognizer.js","sourceRoot":"","sources":["../src/recognizer.ts"],"names":[],"mappings":";;;AA+GA,8BAeC;AAED,8BAWC;AA3ID,qCAAwD;AA0BxD,MAAa,eAAe;IAU1B,YAA6B,GAAkB;QAAlB,QAAG,GAAH,GAAG,CAAe;QAC7C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,mBAAmB,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC;YAC/B,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,IAAY;QAC1B,MAAM,GAAG,GAAkB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,CAAC,IAAY,EAAE,QAAsB;QAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACtE,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnD,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACpB,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEzB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACzC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAS;gBAEtC,IAAI,UAAU,GAAG,KAAK,CAAC;gBACvB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrE,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBAC7D,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,IAAI,CAAC,MAAM;oBACvB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM;oBACjC,KAAK,EAAE,UAAU;oBACjB,cAAc,EAAE,IAAI;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,UAAU,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;QACzD,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IAEO,QAAQ,CAAC,OAAe;QAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,QAAQ,CAAC,EAAE,CAAC;gBACV,KAAK,MAAM;oBACT,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;wBAAE,OAAO,KAAK,CAAC;oBACtC,MAAM;gBACR,KAAK,gBAAgB;oBACnB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;wBAAE,OAAO,KAAK,CAAC;oBACtC,MAAM;YACV,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAnFD,0CAmFC;AAED,SAAgB,SAAS,CAAC,MAAc;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,IAAI,CAAC,CAAC;YACT,IAAI,GAAG,GAAG,CAAC;gBAAE,GAAG,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,GAAG,IAAI,GAAG,CAAC;QACX,MAAM,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAgB,SAAS,CAAC,EAAU;IAClC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,aAAa,CAAC;IACjC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3B,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/vault.d.ts

@@ -0,0 +1,27 @@
+export interface VaultEntry {
+    token: string;
+    original: string;
+    category: string;
+    context: string;
+    createdAt: string;
+    lastUsed: string;
+    useCount: number;
+}
+export interface VaultData {
+    version: number;
+    entries: VaultEntry[];
+}
+export declare class Vault {
+    private entries;
+    private index;
+    static fromJson(json: string): Vault;
+    toJson(): string;
+    tokenize(category: string, original: string): string;
+    tokenizeCtx(category: string, original: string, context: string): string;
+    detokenize(text: string): string;
+    lookupToken(token: string): VaultEntry | undefined;
+    get entryCount(): number;
+    private rebuildIndex;
+    private static stableToken;
+}
+//# sourceMappingURL=vault.d.ts.map

package/dist/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,qBAAa,KAAK;IAChB,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,KAAK,CAA6B;IAE1C,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK;IAQpC,MAAM,IAAI,MAAM;IAKhB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAIpD,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAqCxE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAShC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAIlD,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,MAAM,CAAC,WAAW;CAQ3B"}

package/dist/vault.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Vault = void 0;
+class Vault {
+    constructor() {
+        this.entries = [];
+        this.index = new Map();
+    }
+    static fromJson(json) {
+        const data = JSON.parse(json);
+        const vault = new Vault();
+        vault.entries = data.entries;
+        vault.rebuildIndex();
+        return vault;
+    }
+    toJson() {
+        const data = { version: 1, entries: this.entries };
+        return JSON.stringify(data, null, 2);
+    }
+    tokenize(category, original) {
+        return this.tokenizeCtx(category, original, '');
+    }
+    tokenizeCtx(category, original, context) {
+        const key = `${category}:${original}:${context}`;
+        const now = new Date().toISOString().replace(/\.\d{3}Z$/, 'Z');
+        const existingIdx = this.index.get(key);
+        if (existingIdx !== undefined) {
+            const entry = this.entries[existingIdx];
+            entry.lastUsed = now;
+            entry.useCount += 1;
+            return entry.token;
+        }
+        const hashInput = context ? `${category}:${original}:${context}` : `${category}:${original}`;
+        let token = Vault.stableToken(category, hashInput);
+        let attempt = 0;
+        while (this.entries.some(e => e.token === token && (e.original !== original || e.context !== context))) {
+            attempt++;
+            token = Vault.stableToken(category, `${category}:${original}:${context}:${attempt}`);
+        }
+        const entry = {
+            token,
+            original,
+            category,
+            context,
+            createdAt: now,
+            lastUsed: now,
+            useCount: 1,
+        };
+        const idx = this.entries.length;
+        this.entries.push(entry);
+        this.index.set(key, idx);
+        return token;
+    }
+    detokenize(text) {
+        let result = text;
+        const sorted = [...this.entries].sort((a, b) => b.token.length - a.token.length);
+        for (const entry of sorted) {
+            result = result.split(entry.token).join(entry.original);
+        }
+        return result;
+    }
+    lookupToken(token) {
+        return this.entries.find(e => e.token === token);
+    }
+    get entryCount() {
+        return this.entries.length;
+    }
+    rebuildIndex() {
+        this.index.clear();
+        for (let i = 0; i < this.entries.length; i++) {
+            const e = this.entries[i];
+            this.index.set(`${e.category}:${e.original}:${e.context}`, i);
+        }
+    }
+    static stableToken(category, input) {
+        let hash = 0;
+        for (let i = 0; i < input.length; i++) {
+            hash = (Math.imul(hash, 31) + input.charCodeAt(i)) >>> 0;
+        }
+        const short = (hash & 0xffff).toString(16).padStart(4, '0');
+        return `[${category.toUpperCase()}:${short}]`;
+    }
+}
+exports.Vault = Vault;
+//# sourceMappingURL=vault.js.map

package/dist/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":";;;AAeA,MAAa,KAAK;IAAlB;QACU,YAAO,GAAiB,EAAE,CAAC;QAC3B,UAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAyF5C,CAAC;IAvFC,MAAM,CAAC,QAAQ,CAAC,IAAY;QAC1B,MAAM,IAAI,GAAc,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;QAC1B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,KAAK,CAAC,YAAY,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM;QACJ,MAAM,IAAI,GAAc,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,QAAQ,CAAC,QAAgB,EAAE,QAAgB;QACzC,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,WAAW,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAe;QAC7D,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAE/D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACxC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC;YACrB,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YACpB,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAC7F,IAAI,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAEnD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC;YACvG,OAAO,EAAE,CAAC;YACV,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,QAAQ,IAAI,QAAQ,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,KAAK,GAAe;YACxB,KAAK;YACL,QAAQ;YACR,QAAQ;YACR,OAAO;YACP,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,CAAC;SACZ,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,WAAW,CAAC,KAAa;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,QAAgB,EAAE,KAAa;QACxD,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5D,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,KAAK,GAAG,CAAC;IAChD,CAAC;CACF;AA3FD,sBA2FC"}

package/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "pii-vault",
+  "version": "0.1.0",
+  "description": "Presidio-compatible PII detection, anonymization, and reversible tokenization",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": ["dist", "README.md", "LICENSE-MIT"],
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "npm run build",
+    "test": "node --experimental-vm-modules node_modules/.bin/jest",
+    "lint": "tsc --noEmit"
+  },
+  "keywords": ["pii", "privacy", "anonymization", "redaction", "presidio", "gdpr"],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Jiansen/pii-vault.git",
+    "directory": "typescript"
+  },
+  "homepage": "https://github.com/Jiansen/pii-vault",
+  "devDependencies": {
+    "@types/jest": "^29",
+    "jest": "^29",
+    "ts-jest": "^29",
+    "typescript": "^5"
+  }
+}