rehydra 0.4.3 → 0.5.0

package/dist/cli/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/cli/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":""}

package/dist/cli/bin.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+// Node 18 does not expose globalThis.crypto by default
+import { webcrypto } from "node:crypto";
+if (globalThis.crypto === undefined) {
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-explicit-any
+    globalThis.crypto = webcrypto;
+}
+import { run } from "./main.js";
+import { CLIError } from "./utils/errors.js";
+try {
+    const exitCode = await run();
+    process.exitCode = exitCode;
+}
+catch (err) {
+    if (err instanceof CLIError) {
+        process.stderr.write(`Error: ${err.message}\n`);
+        process.exitCode = err.exitCode;
+    }
+    else {
+        process.stderr.write(`Unexpected error: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=bin.js.map

package/dist/cli/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AAEA,uDAAuD;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;IACpC,uGAAuG;IACvG,UAAU,CAAC,MAAM,GAAG,SAAgB,CAAC;AACvC,CAAC;AAED,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,IAAI,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,GAAG,EAAE,CAAC;IAC7B,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;AAC9B,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC1E,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/cli/commands/anonymize.d.ts

@@ -0,0 +1,3 @@
+import type { ParsedOptions } from "../main.js";
+export declare function anonymizeCommand(filePath: string | undefined, options: ParsedOptions): Promise<number>;
+//# sourceMappingURL=anonymize.d.ts.map

package/dist/cli/commands/anonymize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymize.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/anonymize.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAwDhD,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,CAyGjB"}

package/dist/cli/commands/anonymize.js

@@ -0,0 +1,132 @@
+import { createAnonymizer, PIIType, mergePolicy, generateKey, uint8ArrayToBase64, ConfigKeyProvider, } from "../../index.js";
+import { CLIError } from "../utils/errors.js";
+import { readInput, writeOutput } from "../utils/io.js";
+import { formatText, formatJson, formatNdjson, formatStats } from "../utils/format.js";
+import { savePIIMapFile } from "../utils/pii-map-file.js";
+function parseTypes(typesStr) {
+    const allValues = new Set(Object.values(PIIType));
+    const types = new Set();
+    for (const raw of typesStr.split(",")) {
+        const t = raw.trim().toUpperCase();
+        if (t === "")
+            continue;
+        if (!allValues.has(t)) {
+            throw new CLIError(`Unknown PII type: ${raw.trim()}\nValid types: ${[...allValues].join(", ")}`);
+        }
+        types.add(t);
+    }
+    if (types.size === 0) {
+        throw new CLIError("--types must specify at least one PII type");
+    }
+    return types;
+}
+function validateNerMode(mode) {
+    const valid = ["disabled", "quantized", "standard"];
+    if (!valid.includes(mode)) {
+        throw new CLIError(`Invalid NER mode: ${mode}\nValid modes: ${valid.join(", ")}`);
+    }
+    return mode;
+}
+function validateMode(mode) {
+    if (mode !== "anonymize" && mode !== "pseudonymize") {
+        throw new CLIError(`Invalid mode: ${mode}\nValid modes: anonymize, pseudonymize`);
+    }
+    return mode;
+}
+function validateFormat(format) {
+    if (format !== "text" && format !== "json" && format !== "ndjson") {
+        throw new CLIError(`Invalid format: ${format}\nValid formats: text, json, ndjson`);
+    }
+    return format;
+}
+export async function anonymizeCommand(filePath, options) {
+    const nerMode = validateNerMode(options.ner);
+    const anonMode = validateMode(options.mode);
+    const format = validateFormat(options.format);
+    const input = await readInput(filePath);
+    // Set up encryption key
+    const envKey = process.env["REHYDRA_KEY"];
+    const flagKey = options.key;
+    const externalKey = flagKey ?? envKey;
+    let keyBase64;
+    let keyProvider;
+    if (externalKey !== undefined) {
+        keyProvider = new ConfigKeyProvider(externalKey);
+        // Don't store the key in the PII map file when user provides it
+    }
+    else {
+        const keyBytes = generateKey();
+        keyBase64 = uint8ArrayToBase64(keyBytes);
+        keyProvider = new ConfigKeyProvider(keyBase64);
+    }
+    // Build anonymizer config
+    const config = {
+        mode: anonMode,
+        keyProvider,
+    };
+    if (nerMode !== "disabled") {
+        config.ner = {
+            mode: nerMode,
+            autoDownload: true,
+            onStatus: options.quiet
+                ? undefined
+                : (status) => {
+                    process.stderr.write(`${status}\n`);
+                },
+        };
+    }
+    // Build policy with type filtering
+    const policy = options.types !== undefined
+        ? mergePolicy({ enabledTypes: parseTypes(options.types) })
+        : undefined;
+    const anonymizer = createAnonymizer(config);
+    await anonymizer.initialize();
+    try {
+        const result = await anonymizer.anonymize(input, options.locale, policy !== undefined ? policy : undefined);
+        // Save PII map file in pseudonymize mode
+        if (anonMode === "pseudonymize" && result.piiMap !== undefined) {
+            const piiMapFile = {
+                version: 1,
+                createdAt: new Date().toISOString(),
+                ...(keyBase64 !== undefined ? { key: keyBase64 } : {}),
+                piiMap: result.piiMap,
+                stats: {
+                    totalEntities: result.stats.totalEntities,
+                    countsByType: result.stats.countsByType,
+                },
+            };
+            await savePIIMapFile(options["pii-map"], piiMapFile);
+            if (!options.quiet) {
+                process.stderr.write(`PII map saved to ${options["pii-map"]}\n`);
+            }
+        }
+        // Format output
+        let output;
+        switch (format) {
+            case "text":
+                output = formatText(result);
+                break;
+            case "json":
+                output = formatJson(result);
+                break;
+            case "ndjson":
+                output = formatNdjson(result);
+                break;
+        }
+        // Ensure trailing newline
+        if (!output.endsWith("\n")) {
+            output += "\n";
+        }
+        await writeOutput(output, options.output);
+        // Print stats to stderr if verbose
+        if (options.verbose) {
+            process.stderr.write(formatStats(result.stats) + "\n");
+        }
+        // Exit code 2 if no PII found
+        return result.stats.totalEntities > 0 ? 0 : 2;
+    }
+    finally {
+        await anonymizer.dispose();
+    }
+}
+//# sourceMappingURL=anonymize.js.map

package/dist/cli/commands/anonymize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymize.js","sourceRoot":"","sources":["../../../src/cli/commands/anonymize.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAGhB,OAAO,EACP,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAE,cAAc,EAAmB,MAAM,0BAA0B,CAAC;AAE3E,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAW,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE;YAAE,SAAS;QACvB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,QAAQ,CAChB,qBAAqB,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7E,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,CAAY,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,4CAA4C,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAChB,qBAAqB,IAAI,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,IAAyB,CAAC;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAChB,iBAAiB,IAAI,wCAAwC,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,QAAQ,CAChB,mBAAmB,MAAM,qCAAqC,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA4B,EAC5B,OAAsB;IAEtB,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;IAExC,wBAAwB;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC5B,MAAM,WAAW,GAAG,OAAO,IAAI,MAAM,CAAC;IAEtC,IAAI,SAA6B,CAAC;IAClC,IAAI,WAA8B,CAAC;IAEnC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,WAAW,GAAG,IAAI,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACjD,gEAAgE;IAClE,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACzC,WAAW,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,0BAA0B;IAC1B,MAAM,MAAM,GAAqB;QAC/B,IAAI,EAAE,QAAQ;QACd,WAAW;KACZ,CAAC;IAEF,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG;YACX,IAAI,EAAE,OAAO;YACb,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,KAAK;gBACrB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,MAAc,EAAQ,EAAE;oBACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;gBACtC,CAAC;SACN,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS;QACxC,CAAC,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAE5G,yCAAyC;QACzC,IAAI,QAAQ,KAAK,cAAc,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,UAAU,GAAe;gBAC7B,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE;oBACL,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;oBACzC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;iBACxC;aACF,CAAC;YACF,MAAM,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;YAErD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,OAAO,CAAC,SAAS,CAAC,IAAI,CAC3C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,IAAI,MAAc,CAAC;QACnB,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,MAAM;gBACT,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC9B,MAAM;QACV,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;QAED,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAE1C,mCAAmC;QACnC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,8BAA8B;QAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC"}

package/dist/cli/commands/inspect.d.ts

@@ -0,0 +1,3 @@
+import type { ParsedOptions } from "../main.js";
+export declare function inspectCommand(filePath: string | undefined, options: ParsedOptions): Promise<number>;
+//# sourceMappingURL=inspect.d.ts.map

package/dist/cli/commands/inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/inspect.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AA8BhD,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,CAmDjB"}

package/dist/cli/commands/inspect.js

@@ -0,0 +1,73 @@
+import { createAnonymizer, PIIType, mergePolicy, InMemoryKeyProvider, } from "../../index.js";
+import { CLIError } from "../utils/errors.js";
+import { readInput, writeOutput } from "../utils/io.js";
+import { formatInspect, formatStats } from "../utils/format.js";
+function parseTypes(typesStr) {
+    const allValues = new Set(Object.values(PIIType));
+    const types = new Set();
+    for (const raw of typesStr.split(",")) {
+        const t = raw.trim().toUpperCase();
+        if (t === "")
+            continue;
+        if (!allValues.has(t)) {
+            throw new CLIError(`Unknown PII type: ${raw.trim()}`);
+        }
+        types.add(t);
+    }
+    if (types.size === 0) {
+        throw new CLIError("--types must specify at least one PII type");
+    }
+    return types;
+}
+function validateNerMode(mode) {
+    const valid = ["disabled", "quantized", "standard"];
+    if (!valid.includes(mode)) {
+        throw new CLIError(`Invalid NER mode: ${mode}`);
+    }
+    return mode;
+}
+export async function inspectCommand(filePath, options) {
+    const nerMode = validateNerMode(options.ner);
+    const input = await readInput(filePath);
+    const config = {
+        mode: "pseudonymize",
+        keyProvider: new InMemoryKeyProvider(),
+    };
+    if (nerMode !== "disabled") {
+        config.ner = {
+            mode: nerMode,
+            autoDownload: true,
+            onStatus: options.quiet
+                ? undefined
+                : (status) => {
+                    process.stderr.write(`${status}\n`);
+                },
+        };
+    }
+    const policy = options.types !== undefined
+        ? mergePolicy({ enabledTypes: parseTypes(options.types) })
+        : undefined;
+    const anonymizer = createAnonymizer(config);
+    await anonymizer.initialize();
+    try {
+        const result = await anonymizer.anonymize(input, options.locale, policy !== undefined ? policy : undefined);
+        // Build inspect entities using offsets from original text
+        const inspectEntities = result.entities.map((e) => ({
+            type: e.type,
+            original: input.slice(e.start, e.end),
+            start: e.start,
+            end: e.end,
+        }));
+        const inspectOutput = formatInspect(input, inspectEntities);
+        await writeOutput(inspectOutput + "\n", options.output);
+        // Always print stats to stderr
+        if (!options.quiet) {
+            process.stderr.write(formatStats(result.stats) + "\n");
+        }
+        return result.stats.totalEntities > 0 ? 0 : 2;
+    }
+    finally {
+        await anonymizer.dispose();
+    }
+}
+//# sourceMappingURL=inspect.js.map

package/dist/cli/commands/inspect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.js","sourceRoot":"","sources":["../../../src/cli/commands/inspect.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAGhB,OAAO,EACP,WAAW,EACX,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEhE,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAW,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE;YAAE,SAAS;QACvB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,QAAQ,CAAC,qBAAqB,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,CAAY,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,4CAA4C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,IAAyB,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAA4B,EAC5B,OAAsB;IAEtB,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;IAExC,MAAM,MAAM,GAAqB;QAC/B,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,IAAI,mBAAmB,EAAE;KACvC,CAAC;IAEF,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG;YACX,IAAI,EAAE,OAAO;YACb,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,KAAK;gBACrB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,MAAc,EAAQ,EAAE;oBACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;gBACtC,CAAC;SACN,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS;QACxC,CAAC,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAE5G,0DAA0D;QAC1D,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC;YACrC,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,GAAG,EAAE,CAAC,CAAC,GAAG;SACX,CAAC,CAAC,CAAC;QAEJ,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC5D,MAAM,WAAW,CAAC,aAAa,GAAG,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAExD,+BAA+B;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC"}

package/dist/cli/commands/rehydrate.d.ts

@@ -0,0 +1,3 @@
+import type { ParsedOptions } from "../main.js";
+export declare function rehydrateCommand(filePath: string | undefined, options: ParsedOptions): Promise<number>;
+//# sourceMappingURL=rehydrate.d.ts.map

package/dist/cli/commands/rehydrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehydrate.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/rehydrate.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKhD,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,CAkCjB"}

package/dist/cli/commands/rehydrate.js

@@ -0,0 +1,30 @@
+import { decryptPIIMap, base64ToUint8Array, rehydrate, } from "../../index.js";
+import { CLIError } from "../utils/errors.js";
+import { readInput, writeOutput } from "../utils/io.js";
+import { loadPIIMapFile } from "../utils/pii-map-file.js";
+export async function rehydrateCommand(filePath, options) {
+    const input = await readInput(filePath);
+    const piiMapFile = await loadPIIMapFile(options["pii-map"]);
+    // Determine encryption key
+    const envKey = process.env["REHYDRA_KEY"];
+    const flagKey = options.key;
+    const externalKey = flagKey ?? envKey;
+    const keyBase64 = externalKey ?? piiMapFile.key;
+    if (keyBase64 === undefined) {
+        throw new CLIError("No encryption key found. Provide --key, set REHYDRA_KEY, or use a PII map file that contains the key.");
+    }
+    const keyBytes = base64ToUint8Array(keyBase64);
+    let rawPiiMap;
+    try {
+        rawPiiMap = await decryptPIIMap(piiMapFile.piiMap, keyBytes);
+    }
+    catch {
+        throw new CLIError("Failed to decrypt PII map. Check that the encryption key is correct.");
+    }
+    const output = rehydrate(input, rawPiiMap);
+    // Ensure trailing newline
+    const finalOutput = output.endsWith("\n") ? output : output + "\n";
+    await writeOutput(finalOutput, options.output);
+    return 0;
+}
+//# sourceMappingURL=rehydrate.js.map

package/dist/cli/commands/rehydrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehydrate.js","sourceRoot":"","sources":["../../../src/cli/commands/rehydrate.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,SAAS,GACV,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA4B,EAC5B,OAAsB;IAEtB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAE5D,2BAA2B;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC5B,MAAM,WAAW,GAAG,OAAO,IAAI,MAAM,CAAC;IACtC,MAAM,SAAS,GAAG,WAAW,IAAI,UAAU,CAAC,GAAG,CAAC;IAEhD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAChB,uGAAuG,CACxG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAE/C,IAAI,SAAoB,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAE3C,0BAA0B;IAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC;IACnE,MAAM,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/C,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/commands/setup-ner.d.ts

@@ -0,0 +1,3 @@
+import type { ParsedOptions } from "../main.js";
+export declare function setupNerCommand(options: ParsedOptions): Promise<number>;
+//# sourceMappingURL=setup-ner.d.ts.map

package/dist/cli/commands/setup-ner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-ner.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/setup-ner.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKhD,wBAAsB,eAAe,CACnC,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,CA+CjB"}

package/dist/cli/commands/setup-ner.js

@@ -0,0 +1,41 @@
+import { isModelDownloaded, downloadModel, } from "../../index.js";
+import { CLIError } from "../utils/errors.js";
+import { green, bold } from "../utils/color.js";
+import { formatProgress, writeProgress, clearProgress } from "../utils/progress.js";
+export async function setupNerCommand(options) {
+    const mode = options.ner === "standard" ? "standard" : "quantized";
+    const alreadyDownloaded = await isModelDownloaded(mode);
+    if (alreadyDownloaded) {
+        if (!options.quiet) {
+            process.stderr.write(green(`NER model (${mode}) is already downloaded.\n`));
+        }
+        return 0;
+    }
+    if (!options.quiet) {
+        process.stderr.write(bold(`Downloading NER model (${mode})...\n`));
+    }
+    const onProgress = (progress) => {
+        if (!options.quiet) {
+            writeProgress(formatProgress(progress.file, progress.percent));
+        }
+    };
+    const onStatus = options.quiet
+        ? undefined
+        : (status) => {
+            clearProgress();
+            process.stderr.write(`${status}\n`);
+        };
+    try {
+        await downloadModel(mode, onProgress, onStatus);
+    }
+    catch (err) {
+        clearProgress();
+        throw new CLIError(`Failed to download NER model: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    clearProgress();
+    if (!options.quiet) {
+        process.stderr.write(green(`\nNER model (${mode}) downloaded successfully.\n`));
+    }
+    return 0;
+}
+//# sourceMappingURL=setup-ner.js.map

package/dist/cli/commands/setup-ner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-ner.js","sourceRoot":"","sources":["../../../src/cli/commands/setup-ner.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,aAAa,GAEd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEpF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;IAEnE,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,cAAc,IAAI,4BAA4B,CAAC,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,0BAA0B,IAAI,QAAQ,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAA6B,CAAC,QAAQ,EAAE,EAAE;QACxD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK;QAC5B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,MAAc,EAAQ,EAAE;YACvB,aAAa,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC;IAEN,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,aAAa,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAChB,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpF,CAAC;IACJ,CAAC;IAED,aAAa,EAAE,CAAC;IAChB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,IAAI,8BAA8B,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/main.d.ts

@@ -0,0 +1,14 @@
+export interface ParsedOptions {
+    output?: string;
+    format: string;
+    ner: string;
+    "pii-map": string;
+    key?: string;
+    types?: string;
+    mode: string;
+    locale?: string;
+    verbose: boolean;
+    quiet: boolean;
+}
+export declare function run(argv?: string[]): Promise<number>;
+//# sourceMappingURL=main.d.ts.map

package/dist/cli/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;CAChB;AAmDD,wBAAsB,GAAG,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAmFjF"}

package/dist/cli/main.js

@@ -0,0 +1,135 @@
+import { parseArgs } from "node:util";
+import { createRequire } from "node:module";
+import { setNoColor, red, bold, dim } from "./utils/color.js";
+import { anonymizeCommand } from "./commands/anonymize.js";
+import { rehydrateCommand } from "./commands/rehydrate.js";
+import { inspectCommand } from "./commands/inspect.js";
+import { setupNerCommand } from "./commands/setup-ner.js";
+const require = createRequire(import.meta.url);
+const pkg = require("../../package.json");
+const HELP_TEXT = `
+${bold("rehydra")} — PII anonymization CLI
+
+${bold("USAGE")}
+  rehydra <command> [file] [options]
+
+${bold("COMMANDS")}
+  anonymize <file>     Anonymize a file or stdin
+  rehydrate <file>     Rehydrate a previously anonymized file
+  inspect <file>       Show detected PII without anonymizing (dry run)
+  setup-ner            Download and set up NER model
+
+${bold("OPTIONS")}
+  -o, --output <file>      Output file (default: stdout)
+  -f, --format <format>    Output format: text, json, ndjson (default: text)
+      --ner <mode>         NER mode: disabled, quantized, standard (default: disabled)
+      --pii-map <file>     PII map file path (default: .rehydra-pii-map.json)
+      --key <key>          Encryption key (or set REHYDRA_KEY env var)
+      --types <types>      Comma-separated PII types to detect (default: all)
+      --mode <mode>        anonymize | pseudonymize (default: pseudonymize)
+      --locale <locale>    Locale hint for detection (e.g., de-DE)
+      --no-color           Disable colored output
+      --verbose            Show detection details
+  -q, --quiet              Suppress non-essential output
+  -h, --help               Show this help
+  -V, --version            Show version
+
+${bold("EXAMPLES")}
+  ${dim("# Anonymize a file")}
+  rehydra anonymize input.txt -o output.txt
+
+  ${dim("# Pipe from stdin")}
+  cat data.csv | rehydra anonymize > anonymized.csv
+
+  ${dim("# JSON output with NER")}
+  rehydra anonymize input.txt --ner quantized -f json
+
+  ${dim("# Rehydrate")}
+  rehydra rehydrate anonymized.txt --pii-map .rehydra-pii-map.json
+
+  ${dim("# Inspect detected PII")}
+  rehydra inspect input.txt
+
+${bold("EXIT CODES")}
+  0  Success
+  1  Error
+  2  No PII found
+`;
+export async function run(argv = process.argv.slice(2)) {
+    let values;
+    let positionals;
+    try {
+        const parsed = parseArgs({
+            args: argv,
+            options: {
+                output: { type: "string", short: "o" },
+                format: { type: "string", short: "f", default: "text" },
+                ner: { type: "string", default: "disabled" },
+                "pii-map": { type: "string", default: ".rehydra-pii-map.json" },
+                key: { type: "string" },
+                types: { type: "string" },
+                mode: { type: "string", default: "pseudonymize" },
+                locale: { type: "string" },
+                "no-color": { type: "boolean", default: false },
+                verbose: { type: "boolean", default: false },
+                quiet: { type: "boolean", short: "q", default: false },
+                help: { type: "boolean", short: "h", default: false },
+                version: { type: "boolean", short: "V", default: false },
+            },
+            allowPositionals: true,
+            strict: true,
+        });
+        values = parsed.values;
+        positionals = parsed.positionals;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(red(`Error: ${msg}\n`));
+        process.stderr.write(`Run ${dim("rehydra --help")} for usage.\n`);
+        return 1;
+    }
+    if (values["no-color"] === true) {
+        setNoColor(true);
+    }
+    if (values["help"] === true) {
+        process.stdout.write(HELP_TEXT);
+        return 0;
+    }
+    if (values["version"] === true) {
+        process.stdout.write(`rehydra ${pkg.version}\n`);
+        return 0;
+    }
+    const command = positionals[0];
+    const filePath = positionals[1];
+    if (command === undefined) {
+        process.stdout.write(HELP_TEXT);
+        return 0;
+    }
+    const options = {
+        output: values["output"],
+        format: values["format"] ?? "text",
+        ner: values["ner"] ?? "disabled",
+        "pii-map": values["pii-map"] ?? ".rehydra-pii-map.json",
+        key: values["key"],
+        types: values["types"],
+        mode: values["mode"] ?? "pseudonymize",
+        locale: values["locale"],
+        verbose: values["verbose"] === true,
+        quiet: values["quiet"] === true,
+    };
+    switch (command) {
+        case "anonymize":
+            return anonymizeCommand(filePath, options);
+        case "rehydrate":
+            return rehydrateCommand(filePath, options);
+        case "inspect":
+            return inspectCommand(filePath, options);
+        case "setup-ner":
+            return setupNerCommand(options);
+        default:
+            process.stderr.write(red(`Unknown command: ${command}\n`));
+            process.stderr.write(`Run ${dim("rehydra --help")} for usage.\n`);
+            return 1;
+    }
+}
+//# sourceMappingURL=main.js.map

package/dist/cli/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAwB,CAAC;AAejE,MAAM,SAAS,GAAG;EAChB,IAAI,CAAC,SAAS,CAAC;;EAEf,IAAI,CAAC,OAAO,CAAC;;;EAGb,IAAI,CAAC,UAAU,CAAC;;;;;;EAMhB,IAAI,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;EAef,IAAI,CAAC,UAAU,CAAC;IACd,GAAG,CAAC,oBAAoB,CAAC;;;IAGzB,GAAG,CAAC,mBAAmB,CAAC;;;IAGxB,GAAG,CAAC,wBAAwB,CAAC;;;IAG7B,GAAG,CAAC,aAAa,CAAC;;;IAGlB,GAAG,CAAC,wBAAwB,CAAC;;;EAG/B,IAAI,CAAC,YAAY,CAAC;;;;CAInB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAoD,CAAC;IACzD,IAAI,WAAqB,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC;YACvB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE;gBACP,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;gBACtC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;gBACvD,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE;gBAC5C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,uBAAuB,EAAE;gBAC/D,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACvB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;gBACjD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC/C,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC5C,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;gBACtD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;gBACrD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;aACzD;YACD,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACvB,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAEhC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAkB;QAC7B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAuB;QAC9C,MAAM,EAAG,MAAM,CAAC,QAAQ,CAAwB,IAAI,MAAM;QAC1D,GAAG,EAAG,MAAM,CAAC,KAAK,CAAwB,IAAI,UAAU;QACxD,SAAS,EAAG,MAAM,CAAC,SAAS,CAAwB,IAAI,uBAAuB;QAC/E,GAAG,EAAE,MAAM,CAAC,KAAK,CAAuB;QACxC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAuB;QAC5C,IAAI,EAAG,MAAM,CAAC,MAAM,CAAwB,IAAI,cAAc;QAC9D,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAuB;QAC9C,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI;QACnC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI;KAChC,CAAC;IAEF,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,KAAK,WAAW;YACd,OAAO,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,KAAK,SAAS;YACZ,OAAO,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,KAAK,WAAW;YACd,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;QAClC;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,OAAO,IAAI,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/cli/utils/color.d.ts

@@ -0,0 +1,12 @@
+import { PIIType } from "../../types/index.js";
+export declare function setNoColor(value: boolean): void;
+export declare const red: (text: string) => string;
+export declare const green: (text: string) => string;
+export declare const yellow: (text: string) => string;
+export declare const blue: (text: string) => string;
+export declare const magenta: (text: string) => string;
+export declare const cyan: (text: string) => string;
+export declare const dim: (text: string) => string;
+export declare const bold: (text: string) => string;
+export declare function piiTypeColor(type: PIIType): (text: string) => string;
+//# sourceMappingURL=color.d.ts.map

package/dist/cli/utils/color.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"color.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/color.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAI/C,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE/C;AAYD,eAAO,MAAM,GAAG,SAJmC,MAAM,KAAK,MAIf,CAAC;AAChD,eAAO,MAAM,KAAK,SALiC,MAAM,KAAK,MAKb,CAAC;AAClD,eAAO,MAAM,MAAM,SANgC,MAAM,KAAK,MAMZ,CAAC;AACnD,eAAO,MAAM,IAAI,SAPkC,MAAM,KAAK,MAOd,CAAC;AACjD,eAAO,MAAM,OAAO,SAR+B,MAAM,KAAK,MAQX,CAAC;AACpD,eAAO,MAAM,IAAI,SATkC,MAAM,KAAK,MASd,CAAC;AACjD,eAAO,MAAM,GAAG,SAVmC,MAAM,KAAK,MAUhB,CAAC;AAC/C,eAAO,MAAM,IAAI,SAXkC,MAAM,KAAK,MAWf,CAAC;AAsBhD,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAEpE"}

package/dist/cli/utils/color.js

@@ -0,0 +1,46 @@
+import { PIIType } from "../../types/index.js";
+let _noColor;
+export function setNoColor(value) {
+    _noColor = value;
+}
+function shouldColorize() {
+    if (_noColor === true)
+        return false;
+    if (process.env["NO_COLOR"] !== undefined)
+        return false;
+    return process.stderr.isTTY === true;
+}
+function wrap(code, reset) {
+    return (text) => (shouldColorize() ? `${code}${text}${reset}` : text);
+}
+export const red = wrap("\x1b[31m", "\x1b[39m");
+export const green = wrap("\x1b[32m", "\x1b[39m");
+export const yellow = wrap("\x1b[33m", "\x1b[39m");
+export const blue = wrap("\x1b[34m", "\x1b[39m");
+export const magenta = wrap("\x1b[35m", "\x1b[39m");
+export const cyan = wrap("\x1b[36m", "\x1b[39m");
+export const dim = wrap("\x1b[2m", "\x1b[22m");
+export const bold = wrap("\x1b[1m", "\x1b[22m");
+const TYPE_COLORS = {
+    [PIIType.PERSON]: magenta,
+    [PIIType.ORG]: blue,
+    [PIIType.LOCATION]: green,
+    [PIIType.ADDRESS]: green,
+    [PIIType.EMAIL]: cyan,
+    [PIIType.PHONE]: cyan,
+    [PIIType.URL]: cyan,
+    [PIIType.IP_ADDRESS]: cyan,
+    [PIIType.IBAN]: yellow,
+    [PIIType.BIC_SWIFT]: yellow,
+    [PIIType.ACCOUNT_NUMBER]: yellow,
+    [PIIType.CREDIT_CARD]: yellow,
+    [PIIType.TAX_ID]: red,
+    [PIIType.NATIONAL_ID]: red,
+    [PIIType.DATE_OF_BIRTH]: red,
+    [PIIType.CASE_ID]: dim,
+    [PIIType.CUSTOMER_ID]: dim,
+};
+export function piiTypeColor(type) {
+    return TYPE_COLORS[type] ?? dim;
+}
+//# sourceMappingURL=color.js.map

package/dist/cli/utils/color.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"color.js","sourceRoot":"","sources":["../../../src/cli/utils/color.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE/C,IAAI,QAA6B,CAAC;AAElC,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,QAAQ,GAAG,KAAK,CAAC;AACnB,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,KAAa;IACvC,OAAO,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAEhD,MAAM,WAAW,GAA6C;IAC5D,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO;IACzB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI;IACnB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK;IACzB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK;IACxB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI;IACrB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI;IACrB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI;IACnB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI;IAC1B,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM;IACtB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM;IAC3B,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM;IAChC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM;IAC7B,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG;IACrB,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG;IAC1B,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG;IAC5B,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG;IACtB,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG;CAC3B,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AAClC,CAAC"}

package/dist/cli/utils/errors.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CLI-specific error with exit code
+ */
+export declare class CLIError extends Error {
+    readonly exitCode: number;
+    constructor(message: string, exitCode?: number);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/cli/utils/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,QAAS,SAAQ,KAAK;aAGf,QAAQ,EAAE,MAAM;gBADhC,OAAO,EAAE,MAAM,EACC,QAAQ,GAAE,MAAU;CAKvC"}

package/dist/cli/utils/errors.js

@@ -0,0 +1,12 @@
+/**
+ * CLI-specific error with exit code
+ */
+export class CLIError extends Error {
+    exitCode;
+    constructor(message, exitCode = 1) {
+        super(message);
+        this.exitCode = exitCode;
+        this.name = "CLIError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/cli/utils/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/cli/utils/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGf;IAFlB,YACE,OAAe,EACC,WAAmB,CAAC;QAEpC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,aAAQ,GAAR,QAAQ,CAAY;QAGpC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF"}

package/dist/cli/utils/format.d.ts

@@ -0,0 +1,14 @@
+import type { AnonymizationResult, AnonymizationStats, PIIType } from "../../types/index.js";
+export declare function formatText(result: AnonymizationResult): string;
+export declare function formatJson(result: AnonymizationResult): string;
+export declare function formatNdjson(result: AnonymizationResult): string;
+interface InspectEntity {
+    type: PIIType;
+    original: string;
+    start: number;
+    end: number;
+}
+export declare function formatInspect(originalText: string, entities: InspectEntity[]): string;
+export declare function formatStats(stats: AnonymizationStats): string;
+export {};
+//# sourceMappingURL=format.d.ts.map

package/dist/cli/utils/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/format.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,OAAO,EACR,MAAM,sBAAsB,CAAC;AAG9B,wBAAgB,UAAU,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAE9D;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAiB9D;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAoBhE;AAED,UAAU,aAAa;IACrB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,aAAa,CAC3B,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,aAAa,EAAE,GACxB,MAAM,CAYR;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAa7D"}

package/dist/cli/utils/format.js

@@ -0,0 +1,63 @@
+import { bold, dim, piiTypeColor } from "./color.js";
+export function formatText(result) {
+    return result.anonymizedText;
+}
+export function formatJson(result) {
+    const output = {
+        anonymizedText: result.anonymizedText,
+        entities: result.entities.map((e) => ({
+            type: e.type,
+            id: e.id,
+            confidence: e.confidence,
+            source: e.source,
+            ...(e.semantic !== undefined ? { semantic: e.semantic } : {}),
+        })),
+        stats: {
+            totalEntities: result.stats.totalEntities,
+            countsByType: result.stats.countsByType,
+            processingTimeMs: result.stats.processingTimeMs,
+        },
+    };
+    return JSON.stringify(output, null, 2);
+}
+export function formatNdjson(result) {
+    const lines = result.entities.map((e) => JSON.stringify({
+        type: e.type,
+        id: e.id,
+        confidence: e.confidence,
+        source: e.source,
+        ...(e.semantic !== undefined ? { semantic: e.semantic } : {}),
+    }));
+    // Also include a summary line
+    lines.push(JSON.stringify({
+        _type: "summary",
+        anonymizedText: result.anonymizedText,
+        totalEntities: result.stats.totalEntities,
+        processingTimeMs: result.stats.processingTimeMs,
+    }));
+    return lines.join("\n");
+}
+export function formatInspect(originalText, entities) {
+    // Sort entities by position descending so replacements don't shift offsets
+    const sorted = [...entities].sort((a, b) => b.start - a.start);
+    let result = originalText;
+    for (const entity of sorted) {
+        const colorFn = piiTypeColor(entity.type);
+        const label = colorFn(`[${entity.type}: ${entity.original}]`);
+        result = result.slice(0, entity.start) + label + result.slice(entity.end);
+    }
+    return result;
+}
+export function formatStats(stats) {
+    const lines = [];
+    lines.push(`  ${bold("Found")} ${stats.totalEntities} PII ${stats.totalEntities === 1 ? "entity" : "entities"}:`);
+    for (const [type, count] of Object.entries(stats.countsByType)) {
+        if (count > 0) {
+            const colorFn = piiTypeColor(type);
+            lines.push(`    ${colorFn(type)}  ${count}`);
+        }
+    }
+    lines.push(dim(`  Processing time: ${stats.processingTimeMs}ms`));
+    return lines.join("\n");
+}
+//# sourceMappingURL=format.js.map

package/dist/cli/utils/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../../src/cli/utils/format.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,UAAU,UAAU,CAAC,MAA2B;IACpD,OAAO,MAAM,CAAC,cAAc,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAA2B;IACpD,MAAM,MAAM,GAAG;QACb,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,KAAK,EAAE;YACL,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;YACzC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;YACvC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB;SAChD;KACF,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAA2B;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CACH,CAAC;IACF,8BAA8B;IAC9B,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,SAAS;QAChB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;QACzC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB;KAChD,CAAC,CACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AASD,MAAM,UAAU,aAAa,CAC3B,YAAoB,EACpB,QAAyB;IAEzB,2EAA2E;IAC3E,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAE/D,IAAI,MAAM,GAAG,YAAY,CAAC;IAC1B,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,aAAa,QAAQ,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,GAAG,CACtG,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/D,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,YAAY,CAAC,IAAe,CAAC,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/cli/utils/io.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Read input from a file path or stdin.
+ * Throws CLIError if no file and stdin is a TTY (no piped data).
+ */
+export declare function readInput(filePath?: string): Promise<string>;
+/**
+ * Write output to a file path or stdout.
+ */
+export declare function writeOutput(data: string, filePath?: string): Promise<void>;
+//# sourceMappingURL=io.d.ts.map

package/dist/cli/utils/io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/io.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,wBAAsB,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBlE;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/cli/utils/io.js

@@ -0,0 +1,37 @@
+import { readFile, writeFile } from "node:fs/promises";
+import { text } from "node:stream/consumers";
+import { CLIError } from "./errors.js";
+/**
+ * Read input from a file path or stdin.
+ * Throws CLIError if no file and stdin is a TTY (no piped data).
+ */
+export async function readInput(filePath) {
+    if (filePath !== undefined) {
+        try {
+            return await readFile(filePath, "utf-8");
+        }
+        catch (err) {
+            const code = err.code;
+            if (code === "ENOENT") {
+                throw new CLIError(`File not found: ${filePath}`);
+            }
+            throw new CLIError(`Failed to read file: ${filePath}`);
+        }
+    }
+    if (process.stdin.isTTY === true) {
+        throw new CLIError("No input: provide a file argument or pipe data via stdin");
+    }
+    return text(process.stdin);
+}
+/**
+ * Write output to a file path or stdout.
+ */
+export async function writeOutput(data, filePath) {
+    if (filePath !== undefined) {
+        await writeFile(filePath, data, "utf-8");
+    }
+    else {
+        process.stdout.write(data);
+    }
+}
+//# sourceMappingURL=io.js.map

package/dist/cli/utils/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../../../src/cli/utils/io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAiB;IAC/C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,QAAQ,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,QAAQ,CAChB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,QAAiB;IAEjB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC"}

package/dist/cli/utils/pii-map-file.d.ts

@@ -0,0 +1,14 @@
+import type { EncryptedPIIMap } from "../../types/index.js";
+export interface PIIMapFile {
+    version: 1;
+    createdAt: string;
+    key?: string;
+    piiMap: EncryptedPIIMap;
+    stats: {
+        totalEntities: number;
+        countsByType: Record<string, number>;
+    };
+}
+export declare function savePIIMapFile(path: string, data: PIIMapFile): Promise<void>;
+export declare function loadPIIMapFile(path: string): Promise<PIIMapFile>;
+//# sourceMappingURL=pii-map-file.d.ts.map

package/dist/cli/utils/pii-map-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-map-file.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/pii-map-file.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5D,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE;QACL,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACtC,CAAC;CACH;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA2BtE"}

package/dist/cli/utils/pii-map-file.js

@@ -0,0 +1,32 @@
+import { readFile, writeFile } from "node:fs/promises";
+import { CLIError } from "./errors.js";
+export async function savePIIMapFile(path, data) {
+    const json = JSON.stringify(data, null, 2) + "\n";
+    await writeFile(path, json, "utf-8");
+}
+export async function loadPIIMapFile(path) {
+    let raw;
+    try {
+        raw = await readFile(path, "utf-8");
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === "ENOENT") {
+            throw new CLIError(`PII map file not found: ${path}`);
+        }
+        throw new CLIError(`Failed to read PII map file: ${path}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new CLIError(`Invalid JSON in PII map file: ${path}`);
+    }
+    const file = parsed;
+    if (file.version !== 1 || file.piiMap === undefined) {
+        throw new CLIError(`Invalid PII map file format: ${path}`);
+    }
+    return file;
+}
+//# sourceMappingURL=pii-map-file.js.map

package/dist/cli/utils/pii-map-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-map-file.js","sourceRoot":"","sources":["../../../src/cli/utils/pii-map-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAavC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,IAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAClD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,QAAQ,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,GAAG,MAAoB,CAAC;IAClC,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAChB,gCAAgC,IAAI,EAAE,CACvC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/utils/progress.d.ts

@@ -0,0 +1,4 @@
+export declare function formatProgress(file: string, percent: number | null): string;
+export declare function writeProgress(line: string): void;
+export declare function clearProgress(): void;
+//# sourceMappingURL=progress.d.ts.map

package/dist/cli/utils/progress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"progress.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/progress.ts"],"names":[],"mappings":"AAEA,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,MAAM,CASR;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIhD;AAED,wBAAgB,aAAa,IAAI,IAAI,CAIpC"}

package/dist/cli/utils/progress.js

@@ -0,0 +1,21 @@
+const BAR_WIDTH = 30;
+export function formatProgress(file, percent) {
+    if (percent === null) {
+        return `  Downloading ${file}...`;
+    }
+    const filled = Math.round((percent / 100) * BAR_WIDTH);
+    const empty = BAR_WIDTH - filled;
+    const bar = "\u2588".repeat(filled) + "\u2591".repeat(empty);
+    return `  ${file} [${bar}] ${percent.toFixed(0)}%`;
+}
+export function writeProgress(line) {
+    if (process.stderr.isTTY === true) {
+        process.stderr.write(`\r\x1b[K${line}`);
+    }
+}
+export function clearProgress() {
+    if (process.stderr.isTTY === true) {
+        process.stderr.write("\r\x1b[K");
+    }
+}
+//# sourceMappingURL=progress.js.map

package/dist/cli/utils/progress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"progress.js","sourceRoot":"","sources":["../../../src/cli/utils/progress.ts"],"names":[],"mappings":"AAAA,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,OAAsB;IAEtB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,iBAAiB,IAAI,KAAK,CAAC;IACpC,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,SAAS,GAAG,MAAM,CAAC;IACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,KAAK,IAAI,KAAK,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rehydra",
-  "version": "0.4.3",
+  "version": "0.5.0",
   "description": "On-device PII anonymization module for high-privacy AI workflows",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -59,6 +59,12 @@
         "types": "./dist/proxy/index.d.ts",
         "default": "./dist/proxy/index.js"
       }
+    },
+    "./cli": {
+      "node": {
+        "types": "./dist/cli/main.d.ts",
+        "default": "./dist/cli/main.js"
+      }
     }
   },
   "files": [