redact0 1.0.0__tar.gz

redact0-1.0.0/.gitignore

@@ -0,0 +1,31 @@
+# Dependencies
+node_modules/
+.pnp
+.pnp.js
+
+# Production build outputs
+dist/
+
+# Python artifacts
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+python/dist/
+python/build/
+.pytest_cache/
+.venv/
+venv/
+
+# Logs & Environment
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+*.log
+.env
+.env.*
+!.env.example
+
+# OS files
+.DS_Store
+Thumbs.db

redact0-1.0.0/PKG-INFO

@@ -0,0 +1,129 @@
+Metadata-Version: 2.5
+Name: redact0
+Version: 1.0.0
+Summary: Zero-dependency reversible PII, secret, FHIR HIPAA Safe Harbor, and streaming LLM boundary redactor. Drop-in migration for llm-guard.
+License: MIT
+Keywords: ai,fhir,gdpr,hipaa,llm-guard,pii,redaction,secrets
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security
+Classifier: Typing :: Typed
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+
+# redact0
+
+Zero-runtime-dependency reversible PII, secret, FHIR Safe Harbor and streaming redaction for JavaScript/TypeScript and Python.
+
+> Security note: this package is a best-effort detector/redactor, not a compliance certification or a substitute for a privacy/security review. Validate it against your own data and regulatory requirements before production use.
+
+## Requirements
+
+- Node.js 18+ for the npm package
+- Python 3.10+ for the PyPI package
+
+## Install
+
+```bash
+npm install redact0
+```
+
+```bash
+python -m pip install redact0
+```
+
+## JavaScript / TypeScript quick start
+
+```ts
+import { createVault, redact } from 'redact0';
+
+const safe = redact({
+  email: 'alice@example.com',
+  message: 'Contact alice@example.com',
+});
+
+const vault = createVault();
+const scrubbed = vault.redact('Send the report to alice@example.com').value;
+const restored = vault.restore(scrubbed);
+```
+
+## Python quick start
+
+```python
+from redact0 import Vault, redact
+
+safe = redact({"email": "alice@example.com"})
+vault = Vault()
+scrubbed = vault.redact("Contact alice@example.com").value
+restored = vault.restore(scrubbed)
+```
+
+## Build and verify from this repository
+
+```bash
+npm install
+npm run typecheck
+npm run build
+npm test
+npm run check:size
+```
+
+Python checks (from the repository root):
+
+```bash
+python -m venv .venv
+# Windows PowerShell: .venv\Scripts\Activate.ps1
+# macOS/Linux: source .venv/bin/activate
+python -m pip install -e ./python
+python -m pip install pytest
+python -m pytest python/tests
+```
+
+The Python package itself declares no runtime dependencies. `pytest` is only needed to run its tests.
+
+## CLI
+
+After building the npm package:
+
+```bash
+echo "email: alice@example.com" | node dist/cli.cjs
+npx redact0 init
+npx redact0 scan . --preset secrets
+npx redact0 mcp
+```
+
+For Python, after installation:
+
+```bash
+echo "email: alice@example.com" | redact0
+```
+
+## Exports
+
+The npm package defines these subpath exports:
+
+- `redact0/stream`
+- `redact0/fhir`
+- `redact0/ai`
+- `redact0/mcp`
+- `redact0/logger`
+
+The Python package includes `redact0.compat.llm_guard` for compatibility helpers.
+
+## Project layout
+
+- `src/`: TypeScript implementation and adapters
+- `tests/`: TypeScript tests
+- `python/src/redact0/`: Python implementation
+- `python/tests/`: Python tests
+- `llms.txt`, `llms-full.txt`, `context7.json`, `AGENTS.md`: AI-agent and documentation discovery resources
+
+## License
+
+MIT. See [LICENSE](LICENSE).

redact0-1.0.0/README.md

@@ -0,0 +1,110 @@
+# redact0
+
+Zero-runtime-dependency reversible PII, secret, FHIR Safe Harbor and streaming redaction for JavaScript/TypeScript and Python.
+
+> Security note: this package is a best-effort detector/redactor, not a compliance certification or a substitute for a privacy/security review. Validate it against your own data and regulatory requirements before production use.
+
+## Requirements
+
+- Node.js 18+ for the npm package
+- Python 3.10+ for the PyPI package
+
+## Install
+
+```bash
+npm install redact0
+```
+
+```bash
+python -m pip install redact0
+```
+
+## JavaScript / TypeScript quick start
+
+```ts
+import { createVault, redact } from 'redact0';
+
+const safe = redact({
+  email: 'alice@example.com',
+  message: 'Contact alice@example.com',
+});
+
+const vault = createVault();
+const scrubbed = vault.redact('Send the report to alice@example.com').value;
+const restored = vault.restore(scrubbed);
+```
+
+## Python quick start
+
+```python
+from redact0 import Vault, redact
+
+safe = redact({"email": "alice@example.com"})
+vault = Vault()
+scrubbed = vault.redact("Contact alice@example.com").value
+restored = vault.restore(scrubbed)
+```
+
+## Build and verify from this repository
+
+```bash
+npm install
+npm run typecheck
+npm run build
+npm test
+npm run check:size
+```
+
+Python checks (from the repository root):
+
+```bash
+python -m venv .venv
+# Windows PowerShell: .venv\Scripts\Activate.ps1
+# macOS/Linux: source .venv/bin/activate
+python -m pip install -e ./python
+python -m pip install pytest
+python -m pytest python/tests
+```
+
+The Python package itself declares no runtime dependencies. `pytest` is only needed to run its tests.
+
+## CLI
+
+After building the npm package:
+
+```bash
+echo "email: alice@example.com" | node dist/cli.cjs
+npx redact0 init
+npx redact0 scan . --preset secrets
+npx redact0 mcp
+```
+
+For Python, after installation:
+
+```bash
+echo "email: alice@example.com" | redact0
+```
+
+## Exports
+
+The npm package defines these subpath exports:
+
+- `redact0/stream`
+- `redact0/fhir`
+- `redact0/ai`
+- `redact0/mcp`
+- `redact0/logger`
+
+The Python package includes `redact0.compat.llm_guard` for compatibility helpers.
+
+## Project layout
+
+- `src/`: TypeScript implementation and adapters
+- `tests/`: TypeScript tests
+- `python/src/redact0/`: Python implementation
+- `python/tests/`: Python tests
+- `llms.txt`, `llms-full.txt`, `context7.json`, `AGENTS.md`: AI-agent and documentation discovery resources
+
+## License
+
+MIT. See [LICENSE](LICENSE).

redact0-1.0.0/pyproject.toml

@@ -0,0 +1,31 @@
+[build-system]
+requires = ["hatchling>=1.25.0"]
+build-backend = "hatchling.build"
+
+[project]
+name = "redact0"
+version = "1.0.0"
+description = "Zero-dependency reversible PII, secret, FHIR HIPAA Safe Harbor, and streaming LLM boundary redactor. Drop-in migration for llm-guard."
+readme = "README.md"
+license = { text = "MIT" }
+requires-python = ">=3.10"
+dependencies = []
+keywords = ["pii", "redaction", "secrets", "hipaa", "fhir", "llm-guard", "gdpr", "ai"]
+classifiers = [
+  "Development Status :: 5 - Production/Stable",
+  "Intended Audience :: Developers",
+  "License :: OSI Approved :: MIT License",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.10",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Topic :: Security",
+  "Typing :: Typed",
+]
+
+[project.scripts]
+redact0 = "redact0.cli:main"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/redact0"]

redact0-1.0.0/src/redact0/__init__.py

@@ -0,0 +1,51 @@
+from .rules import BUILTIN_RULES, DetectorRule
+from .validators import (
+    is_valid_aadhaar,
+    is_valid_de_tax_id,
+    is_valid_dea,
+    is_valid_iban,
+    is_valid_ipv4,
+    is_valid_jwt,
+    is_valid_luhn,
+    is_valid_mbi,
+    is_valid_nhs,
+    is_valid_npi,
+    is_valid_ssn,
+    shannon_entropy,
+)
+from .vault import (
+    Finding,
+    StreamRestorer,
+    Vault,
+    create_vault,
+    redact,
+    redact_detailed,
+    redact_fhir,
+    scan,
+)
+
+__all__ = [
+    "BUILTIN_RULES",
+    "DetectorRule",
+    "Finding",
+    "StreamRestorer",
+    "Vault",
+    "create_vault",
+    "is_valid_aadhaar",
+    "is_valid_de_tax_id",
+    "is_valid_dea",
+    "is_valid_iban",
+    "is_valid_ipv4",
+    "is_valid_jwt",
+    "is_valid_luhn",
+    "is_valid_mbi",
+    "is_valid_nhs",
+    "is_valid_npi",
+    "is_valid_ssn",
+    "redact",
+    "redact_detailed",
+    "redact_fhir",
+    "scan",
+    "shannon_entropy",
+]
+__version__ = "1.0.0"

redact0-1.0.0/src/redact0/cli.py

@@ -0,0 +1,28 @@
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+
+from .vault import redact_detailed, scan
+
+
+def main(argv: list[str] | None = None) -> int:
+    parser = argparse.ArgumentParser(prog="redact0", description="0-dep reversible PII & secret redactor")
+    parser.add_argument("--preset", default="default", choices=["default", "secrets", "hipaa", "gdpr", "strict"])
+    parser.add_argument("--scan", action="store_true", help="Output findings metadata as JSON without raw values")
+    args = parser.parse_args(argv)
+
+    text = sys.stdin.read()
+    if args.scan:
+        findings = [f.__dict__ for f in scan(text, preset=args.preset)]
+        print(json.dumps(findings, indent=2))
+        return 1 if findings else 0
+
+    res = redact_detailed(text, preset=args.preset)
+    sys.stdout.write(res.value)
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

redact0-1.0.0/src/redact0/compat/__init__.py

@@ -0,0 +1,3 @@
+from .llm_guard import Anonymize, Deanonymize, Sensitive, Vault, scan_output, scan_prompt
+
+__all__ = ["Anonymize", "Deanonymize", "Sensitive", "Vault", "scan_output", "scan_prompt"]

redact0-1.0.0/src/redact0/compat/llm_guard.py

@@ -0,0 +1,70 @@
+"""
+Drop-in zero-dependency compatibility layer for archived `llm-guard` (Protect AI).
+Replaces Anonymize / Deanonymize / Sensitive / Vault / scan_prompt / scan_output
+without PyTorch, spaCy, or presidio-anonymizer.
+"""
+from __future__ import annotations
+
+from typing import Any
+
+from ..vault import Vault as CoreVault
+
+
+class Vault(CoreVault):
+    """Drop-in replacement for `llm_guard.vault.Vault`."""
+
+
+class Anonymize:
+    def __init__(self, vault: CoreVault | None = None, preset: str = "default", **kwargs: Any) -> None:
+        self.vault = vault if vault is not None else CoreVault(preset=preset, **kwargs)
+
+    def scan(self, prompt: str) -> tuple[str, bool, float]:
+        res = self.vault.redact_text(prompt)
+        is_valid = res.count == 0
+        risk_score = 0.0 if is_valid else 1.0
+        return res.value, is_valid, risk_score
+
+
+class Deanonymize:
+    def __init__(self, vault: CoreVault) -> None:
+        self.vault = vault
+
+    def scan(self, _prompt: str, output: str) -> tuple[str, bool, float]:
+        restored = self.vault.restore(output)
+        return restored, True, 0.0
+
+
+class Sensitive:
+    def __init__(self, preset: str = "strict", **kwargs: Any) -> None:
+        self.vault = CoreVault(preset=preset, **kwargs)
+
+    def scan(self, _prompt: str, output: str) -> tuple[str, bool, float]:
+        res = self.vault.redact_text(output)
+        is_valid = res.count == 0
+        return res.value, is_valid, 0.0 if is_valid else 1.0
+
+
+def scan_prompt(scanners: list[Any], prompt: str) -> tuple[str, dict[str, bool], dict[str, float]]:
+    current = prompt
+    results_valid: dict[str, bool] = {}
+    results_score: dict[str, float] = {}
+    for scanner in scanners:
+        name = type(scanner).__name__
+        current, is_valid, score = scanner.scan(current)
+        results_valid[name] = is_valid
+        results_score[name] = score
+    return current, results_valid, results_score
+
+
+def scan_output(
+    scanners: list[Any], prompt: str, output: str
+) -> tuple[str, dict[str, bool], dict[str, float]]:
+    current = output
+    results_valid: dict[str, bool] = {}
+    results_score: dict[str, float] = {}
+    for scanner in scanners:
+        name = type(scanner).__name__
+        current, is_valid, score = scanner.scan(prompt, current)
+        results_valid[name] = is_valid
+        results_score[name] = score
+    return current, results_valid, results_score

redact0-1.0.0/src/redact0/py.typed

@@ -0,0 +1,3 @@
+```
+
+### `python/src/redact0/__init__.py`