tacit-deid 0.1.0__tar.gz

tacit_deid-0.1.0/.gitignore

@@ -0,0 +1,12 @@
+.venv/
+__pycache__/
+*.pyc
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+dist/
+*.egg-info/
+.env.local
+# Per-run transformation trace folders (the CLI writes these by default). The local ledger holds
+# real identifiers, so these must never be committed.
+runs/

tacit_deid-0.1.0/DATA_LICENSES.md

@@ -0,0 +1,69 @@
+# Bundled data licenses (DD16)
+
+The Apache-2.0 LICENSE covers the **code**. It does NOT cover the **base-rate data** bundled under
+`src/tacit_deid/base_rates/data/`, which was ingested from public sources that each carry their own
+terms. This file records those sources and their redistribution status.
+
+**Release gate:** before any public open-source release, each source below must be confirmed to
+permit redistribution and attributed here. Where a source restricts redistribution, switch that
+table to **fetch-at-build** (download at the client's site) rather than bundling. Until each row is
+marked CONFIRMED, treat this as an internal build only.
+
+| File | Source | Stated license / terms | Redistribution | Status |
+|------|--------|------------------------|----------------|--------|
+| `populations.json` | World Bank, `SP.POP.TOTL` | CC BY 4.0 (World Bank Data Catalog public licenses page, read 2026-09-17) | permitted with attribution | CONFIRMED |
+| `pums-us-joints.json` | US Census Bureau, ACS PUMS (derived joint proportions) | Work of the US federal government, not subject to copyright (17 U.S.C. section 105) | permitted | CONFIRMED |
+| `qof-gb.json` | NHS QOF (via the House of Commons Library mirror of the NHS Digital extract) | Open Government Licence v3.0 ("worldwide, royalty-free, perpetual, non-exclusive licence", commercial and non-commercial use; text read 2026-09-17) | permitted with attribution | CONFIRMED |
+| `national-prevalence.json` | National statistics, one source page per row (recorded in the file as `source` and `sourceUrl`): US National Center for Health Statistics and CDC; Australian Bureau of Statistics; New Zealand Ministry of Health and Health New Zealand; UK Office for National Statistics and UK Health Security Agency | US: not subject to copyright (17 U.S.C. section 105; CDC agency materials page: "in the public domain, and may be freely used or reproduced"). AU: CC BY 4.0 (ABS copyright page). NZ: CC BY 4.0 (survey explorer footer; Health New Zealand copyright page). UK: Open Government Licence v3.0 (stated on each page). All read 2026-09-20 | permitted with attribution | CONFIRMED |
+
+Provenance detail (URLs, years, subset/proxy caveats) is in the reference engine's base-rates
+`SOURCES.md`, kept with the engine in the source repository. Each table is a derived aggregate
+(proportions / counts), not raw microdata.
+
+## Attribution (to include in NOTICE on release)
+
+- Contains information from the World Bank, licensed under CC BY 4.0.
+- Contains US Census Bureau ACS PUMS data (US Government work).
+- Contains public sector information licensed under the Open Government Licence v3.0 (NHS QOF;
+  Office for National Statistics; UK Health Security Agency).
+- Source: CDC. Contains statistics from the US National Center for Health Statistics and the US
+  Centers for Disease Control and Prevention (works of the US federal government). Use of these
+  materials does not imply endorsement by CDC, ATSDR, HHS, or the United States Government.
+- Contains Australian Bureau of Statistics data (National Health Survey 2022), licensed under
+  CC BY 4.0.
+- Contains New Zealand Ministry of Health data (New Zealand Health Survey 2024/25) and Health New
+  Zealand content (Immunisation Handbook), licensed under CC BY 4.0.
+- Contains data from the WHO Global Health Observatory, used under its terms of use.
+
+The prevalence table replaced an extract of the WHO Global Health Observatory on 2026-09-20. The
+WHO data policy permits "non-commercial, not-for-profit use of the Data for public health
+purposes", which does not cover bundling in a commercially licensed package, so no WHO figure
+remains. Each replacement figure was read from the page named on its row, and each row records the
+licence of that page; `tests/test_prevalence_sources.py` admits only licences that allow
+commercial redistribution and recomputes every proportion from the published value. Rows are
+absent where no openly licensed page stated the figure (HIV for Australia, Great Britain, and New
+Zealand; tuberculosis for Australia): Australia's tuberculosis report is CC BY-NC-ND, the
+Australian health department's site forbids commercial use, and New Zealand's Ministry of Health
+states that it does not know the number of people living with HIV. The release workflow still
+refuses to publish while any row of the table above is unresolved (plan tacit-deid-pypi-release,
+DD9).
+
+## Detector models (downloaded on demand, never bundled)
+
+| Member | Model | Terms |
+|--------|-------|-------|
+| `gliner` | `urchade/gliner_multi_pii-v1` | Apache-2.0 |
+| `gliner-pii` | `nvidia/gliner-pii` | NVIDIA Open Model License; the operator clears it before use |
+
+Both load from Hugging Face on first use, or from a local directory named by
+`TACIT_DEID_GLINER_MODEL` / `TACIT_DEID_GLINER_PII_MODEL`. The audit names the model, never the path.
+
+## Evaluation datasets (kept with the source repository, never inside the package)
+
+| Dataset | Used for | Terms |
+|---------|----------|-------|
+| NVIDIA Nemotron-PII (2,000-record test sample) | detector span recall | CC BY 4.0 |
+| NVIDIA Privasis-Zero and Privasis-USA | health-record recall, sanitization scoring, the simulation's second corpus | research and evaluation only; not for a commercial product |
+| PriMock57 (planted) | the simulation's first corpus | CC BY 4.0 |
+
+The Privasis-Cleaner model is non-commercial and was used for research comparison only.

tacit_deid-0.1.0/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and do
+          not modify the License. You may add Your own attribution notices
+          within Derivative Works that You distribute, alongside or as an
+          addendum to the NOTICE text from the Work, provided that such
+          additional attribution notices cannot be construed as modifying
+          the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Tacit Intelligence
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

tacit_deid-0.1.0/NOTICE

@@ -0,0 +1,25 @@
+tacit-deid
+Copyright 2026 Tacit Intelligence Co.
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may not use this software
+except in compliance with the License. You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+The base-rate tables under tacit_deid/base_rates/data/ are derived aggregates ingested from public
+sources under their own terms (see DATA_LICENSES.md):
+
+- Contains information from the World Bank, licensed under CC BY 4.0.
+- Contains US Census Bureau ACS PUMS data (a work of the US federal government).
+- Contains public sector information licensed under the Open Government Licence v3.0 (NHS QOF;
+  Office for National Statistics; UK Health Security Agency).
+- Source: CDC. Contains statistics from the US National Center for Health Statistics and the US
+  Centers for Disease Control and Prevention (works of the US federal government). Use of these
+  materials does not imply endorsement by CDC, ATSDR, HHS, or the United States Government.
+- Contains Australian Bureau of Statistics data (National Health Survey 2022), licensed under
+  CC BY 4.0.
+- Contains New Zealand Ministry of Health data (New Zealand Health Survey 2024/25) and Health New
+  Zealand content (Immunisation Handbook), licensed under CC BY 4.0.
+
+Detector models are downloaded on demand and never bundled; their terms are listed in
+DATA_LICENSES.md.

tacit_deid-0.1.0/PKG-INFO

@@ -0,0 +1,112 @@
+Metadata-Version: 2.5
+Name: tacit-deid
+Version: 0.1.0
+Summary: Client-side clinical de-identification SDK: turns a real consultation transcript into a de-identified boundary artifact that can safely leave your infrastructure.
+Project-URL: Homepage, https://tacitintelligence.co
+Project-URL: Documentation, https://docs.tacitintelligence.co/deid
+Project-URL: Changelog, https://docs.tacitintelligence.co/deid/changelog
+Author-email: "Tacit Intelligence Co." <support@tacitintelligence.co>
+License-Expression: Apache-2.0
+License-File: DATA_LICENSES.md
+License-File: LICENSE
+License-File: NOTICE
+Keywords: clinical,de-identification,healthcare,phi,privacy,transcripts
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Healthcare Industry
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Scientific/Engineering :: Medical Science Apps.
+Classifier: Topic :: Security
+Classifier: Typing :: Typed
+Requires-Python: >=3.13
+Requires-Dist: pydantic>=2.9
+Requires-Dist: pyyaml>=6
+Provides-Extra: bedrock
+Requires-Dist: boto3>=1.35; extra == 'bedrock'
+Provides-Extra: detector
+Requires-Dist: click>=8.1; extra == 'detector'
+Requires-Dist: faker>=30; extra == 'detector'
+Requires-Dist: presidio-analyzer>=2.2; extra == 'detector'
+Requires-Dist: presidio-anonymizer>=2.2; extra == 'detector'
+Requires-Dist: spacy>=3.8; extra == 'detector'
+Provides-Extra: gliner
+Requires-Dist: gliner>=0.2; extra == 'gliner'
+Provides-Extra: llm
+Requires-Dist: instructor>=1.5; extra == 'llm'
+Requires-Dist: litellm>=1.50; extra == 'llm'
+Provides-Extra: pdf
+Requires-Dist: pypdf>=5; extra == 'pdf'
+Provides-Extra: transport
+Requires-Dist: httpx>=0.27; extra == 'transport'
+Description-Content-Type: text/markdown
+
+# tacit-deid
+
+Client-side clinical de-identification. Runs inside your own infrastructure, turns a real
+consultation transcript into a de-identified **boundary artifact** (a demographic shell, a
+timeline of clinical beats, aggregate lexical statistics, and an audit log), and hands only that
+artifact to Tacit. The transcript, the audio, and the local ledger never leave your boundary.
+
+- Every model call goes to an endpoint you allow by name; anything else fails closed.
+- The artifact carries an opaque token, never your record identifier, and is sealed with a
+  digest so a change after sealing is detectable on either side.
+- An identifier the detectors miss is caught by a judge loop that runs to a fixpoint, and a
+  record it cannot clean is refused: nothing crosses.
+
+Apache-2.0. The bundled base-rate tables carry their own terms; see `DATA_LICENSES.md`.
+
+## Install
+
+```bash
+pip install "tacit-deid[detector,llm,transport]"
+python -m spacy download en_core_web_lg     # one-time, for the Stage-0 detector
+```
+
+Extras: `detector` (Presidio and spaCy), `llm` (LiteLLM and instructor for the extractor and the
+judge), `transport` (sending to Tacit), `bedrock` (AWS credentials via boto3), `gliner` (an
+optional on-demand model detector), `pdf` (reading `.pdf` inputs). Python 3.13 or newer.
+
+## Run
+
+`tacit_deid.yaml` names your in-boundary model and the hosts it may call. Credentials are read
+from disk by your provider's SDK, never stored here.
+
+```yaml
+model: bedrock/us.anthropic.claude-sonnet-4-6
+allowed_endpoint_hosts:
+  - amazonaws.com
+region: us-east-1
+boundary_k: 11
+```
+
+```bash
+tacit-deid inspect consult.json                                   # what a run would do; no model call
+tacit-deid run consult.json --config tacit_deid.yaml --out artifact.json
+tacit-deid run consults/ --config tacit_deid.yaml --out-dir artifacts/   # a whole batch, one manifest
+tacit-deid send artifact.json --key-file .env.local              # TACIT_API_URL and TACIT_API_KEY
+```
+
+Inputs: plain text, JSON in the common speech-to-text shapes, JSON Lines, WebVTT and SubRip,
+CSV and TSV, Word, PDF, a directory, or a zip. `inspect` reports what it resolved before any
+model is built.
+
+As a library: `from tacit_deid import deidentify, load_config, run_canary` and the rest of
+`tacit_deid.__all__`.
+
+## When it refuses
+
+`deidentify` returns `DeidResult(crossed=False, refusal_reason=...)` when the judge loop cannot
+clean the transcript within its round cap or the demographic shell fails singling-out. Nothing
+crossed and nothing was sent. Do not retry with a weaker configuration; re-run only after a
+change that removes the cause (a fixed transcript, a better model, or a `keep` entry for a
+value wrongly treated as an identifier). The local ledger under `runs/` names every judge round
+and holds real identifiers; it must not leave your boundary.
+
+## Documentation and security
+
+The full guide (inputs, configuration, the artifact contract, what Tacit does with an artifact,
+ceilings, and the security model) is on the documentation site named in this package's
+metadata. Security reports: see `SECURITY.md` in the source repository, or the contact on the
+documentation site.

tacit_deid-0.1.0/README.md

@@ -0,0 +1,68 @@
+# tacit-deid
+
+Client-side clinical de-identification. Runs inside your own infrastructure, turns a real
+consultation transcript into a de-identified **boundary artifact** (a demographic shell, a
+timeline of clinical beats, aggregate lexical statistics, and an audit log), and hands only that
+artifact to Tacit. The transcript, the audio, and the local ledger never leave your boundary.
+
+- Every model call goes to an endpoint you allow by name; anything else fails closed.
+- The artifact carries an opaque token, never your record identifier, and is sealed with a
+  digest so a change after sealing is detectable on either side.
+- An identifier the detectors miss is caught by a judge loop that runs to a fixpoint, and a
+  record it cannot clean is refused: nothing crosses.
+
+Apache-2.0. The bundled base-rate tables carry their own terms; see `DATA_LICENSES.md`.
+
+## Install
+
+```bash
+pip install "tacit-deid[detector,llm,transport]"
+python -m spacy download en_core_web_lg     # one-time, for the Stage-0 detector
+```
+
+Extras: `detector` (Presidio and spaCy), `llm` (LiteLLM and instructor for the extractor and the
+judge), `transport` (sending to Tacit), `bedrock` (AWS credentials via boto3), `gliner` (an
+optional on-demand model detector), `pdf` (reading `.pdf` inputs). Python 3.13 or newer.
+
+## Run
+
+`tacit_deid.yaml` names your in-boundary model and the hosts it may call. Credentials are read
+from disk by your provider's SDK, never stored here.
+
+```yaml
+model: bedrock/us.anthropic.claude-sonnet-4-6
+allowed_endpoint_hosts:
+  - amazonaws.com
+region: us-east-1
+boundary_k: 11
+```
+
+```bash
+tacit-deid inspect consult.json                                   # what a run would do; no model call
+tacit-deid run consult.json --config tacit_deid.yaml --out artifact.json
+tacit-deid run consults/ --config tacit_deid.yaml --out-dir artifacts/   # a whole batch, one manifest
+tacit-deid send artifact.json --key-file .env.local              # TACIT_API_URL and TACIT_API_KEY
+```
+
+Inputs: plain text, JSON in the common speech-to-text shapes, JSON Lines, WebVTT and SubRip,
+CSV and TSV, Word, PDF, a directory, or a zip. `inspect` reports what it resolved before any
+model is built.
+
+As a library: `from tacit_deid import deidentify, load_config, run_canary` and the rest of
+`tacit_deid.__all__`.
+
+## When it refuses
+
+`deidentify` returns `DeidResult(crossed=False, refusal_reason=...)` when the judge loop cannot
+clean the transcript within its round cap or the demographic shell fails singling-out. Nothing
+crossed and nothing was sent. Do not retry with a weaker configuration; re-run only after a
+change that removes the cause (a fixed transcript, a better model, or a `keep` entry for a
+value wrongly treated as an identifier). The local ledger under `runs/` names every judge round
+and holds real identifiers; it must not leave your boundary.
+
+## Documentation and security
+
+The full guide (inputs, configuration, the artifact contract, what Tacit does with an artifact,
+ceilings, and the security model) is on the documentation site named in this package's
+metadata. Security reports: see `SECURITY.md` in the source repository, or the contact on the
+documentation site.

tacit_deid-0.1.0/pyproject.toml

@@ -0,0 +1,146 @@
+[project]
+name = "tacit-deid"
+dynamic = ["version"]
+description = "Client-side clinical de-identification SDK: turns a real consultation transcript into a de-identified boundary artifact that can safely leave your infrastructure."
+readme = "README.md"
+requires-python = ">=3.13"
+authors = [{ name = "Tacit Intelligence Co.", email = "support@tacitintelligence.co" }]
+license = "Apache-2.0"
+license-files = ["LICENSE", "NOTICE", "DATA_LICENSES.md"]
+keywords = ["de-identification", "phi", "clinical", "healthcare", "privacy", "transcripts"]
+classifiers = [
+	"Development Status :: 3 - Alpha",
+	"Intended Audience :: Healthcare Industry",
+	"Intended Audience :: Developers",
+	"License :: OSI Approved :: Apache Software License",
+	"Programming Language :: Python :: 3",
+	"Programming Language :: Python :: 3.13",
+	"Topic :: Security",
+	"Topic :: Scientific/Engineering :: Medical Science Apps.",
+	"Typing :: Typed",
+]
+dependencies = [
+	"pydantic>=2.9",
+	"pyyaml>=6",
+]
+
+[project.urls]
+Homepage = "https://tacitintelligence.co"
+Documentation = "https://docs.tacitintelligence.co/deid"
+Changelog = "https://docs.tacitintelligence.co/deid/changelog"
+
+[project.scripts]
+tacit-deid = "tacit_deid.cli:main"
+
+# Heavy stages are optional extras so the dependency-free pure ports (metrics, singling-out,
+# oracle, base-rates) install and test in seconds without pulling spaCy / litellm.
+[project.optional-dependencies]
+detector = [
+	"presidio-analyzer>=2.2",
+	"presidio-anonymizer>=2.2",
+	"spacy>=3.8",
+	"faker>=30",
+	# spaCy's `download` CLI imports `click` directly; without it the model download fails when
+	# typer-slim is resolved instead of full typer (seen in the reference build too).
+	"click>=8.1",
+	# The spaCy model itself is not on PyPI: install it with
+	#   python -m spacy download en_core_web_lg
+	# after this extra. Naming it here would make the extra unresolvable from PyPI (DD5).
+]
+llm = [
+	"litellm>=1.50",
+	"instructor>=1.5",
+]
+bedrock = [
+	"boto3>=1.35",
+]
+# Optional on-demand model detector for the Stage-0 ensemble. NOT bundled: the operator installs it
+# and the (Apache-2.0, clean-lineage) gliner_multi_pii weights download on demand from Hugging Face.
+gliner = [
+	"gliner>=0.2",
+]
+# PDF text extraction for `.pdf` inputs (plan tacit-deid-input-freedom, DD7); pure Python, BSD.
+pdf = [
+	"pypdf>=5",
+]
+# Client -> Tacit transport (send the artifact, pull the regenerated consultation).
+transport = [
+	"httpx>=0.27",
+]
+
+# Development only, never published metadata: the spaCy model (a direct URL, see
+# [tool.uv.sources]), the simulated client's egress observer (mitmproxy), and the release tools.
+[dependency-groups]
+dev = [
+	"pytest>=8",
+	"ruff>=0.9",
+	"mypy>=1.11",
+	"types-pyyaml>=6",
+	"en-core-web-lg",
+	"mitmproxy>=11",
+	"twine>=6",
+]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.version]
+path = "src/tacit_deid/__init__.py"
+
+# What ships (plan tacit-deid-pypi-release, DD1): an allowlist, so nothing outside it (the
+# simulated client, the development scripts, the tests, the run folders) can enter the archive
+# whatever the working tree holds. The distribution gate test builds both archives and refuses
+# any member outside this list.
+[tool.hatch.build.targets.sdist]
+only-include = [
+	"src/tacit_deid",
+	"schema/boundary-artifact.schema.json",
+	"README.md",
+	"LICENSE",
+	"NOTICE",
+	"DATA_LICENSES.md",
+	"pyproject.toml",
+]
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/tacit_deid"]
+
+[tool.ruff]
+line-length = 100
+target-version = "py313"
+
+[tool.ruff.lint]
+select = ["E", "W", "F", "I", "B", "C4", "UP"]
+ignore = ["W191", "E101"]
+
+[tool.ruff.format]
+quote-style = "double"
+indent-style = "tab"
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+# The simulated client's harness is importable in tests but is not in the package.
+pythonpath = ["sim"]
+
+[tool.mypy]
+python_version = "3.13"
+
+# Presidio / spaCy / Faker ship without (complete) type stubs; the detector module is a faithful
+# port and not where we want mypy noise. Ignore their missing stubs.
+[[tool.mypy.overrides]]
+module = [
+	"presidio_analyzer.*",
+	"presidio_anonymizer.*",
+	"faker.*",
+	"spacy.*",
+	"litellm.*",
+	"instructor.*",
+	"gliner.*",
+	"mitmproxy.*",
+	"boto3.*",
+]
+ignore_missing_imports = true
+
+[tool.uv.sources]
+en-core-web-lg = { url = "https://github.com/explosion/spacy-models/releases/download/en_core_web_lg-3.8.0/en_core_web_lg-3.8.0-py3-none-any.whl" }