chatsee-redact

Redact PII in your own JSON / JSONL / CSV log files locally — fully offline.

Nothing ever leaves your machine, and the tool never contacts ChatSee (or any network host) at runtime. The redaction rules ship inside the package as a frozen snapshot, the redaction engine is vendored, and there are no runtime dependencies — not even the ChatSee SDK. Input is read from, and output written to, local files only. No telemetry, no uploads, no network calls. Air-gap safe.

The masking engine is a byte-for-byte copy of the ChatSee pipeline's engine, so the redaction you get here is identical to what the pipeline would apply.

Install

pip install chatsee-redact

Zero dependencies. Works with no internet access after install (and the install itself pulls nothing beyond the package).

Usage

# Redact one file; writes ./redacted/app.json
chatsee-redact app.json --out ./redacted/

# Default output is alongside the input: app.redacted.json
chatsee-redact app.json

# Multiple files into one folder
chatsee-redact logs/*.jsonl --out ./redacted/

Input → output:

app.json          -->  ./redacted/app.json      (all string values masked)

What gets redacted

By default every string value in the document is scanned and masked (recursively, through nested objects and arrays). Non-string values (numbers, booleans, null) are left untouched.

To restrict redaction to specific top-level keys (or CSV columns):

chatsee-redact app.json --fields user_message,bot_message,email

Formats

Force a format with --format {auto,json,jsonl,csv}.

Inspecting the rules (dump-rules)

Print the bundled classifier documents (the exact regexes that will run) so you can audit them before trusting the tool — offline:

chatsee-redact dump-rules              # prints the bundled rules JSON to stdout
chatsee-redact dump-rules -o rules.json

The rules

The classifier rules (credit card, Aadhaar, PAN, phone, email — with Luhn / Verhoeff / phone validators) are frozen into the package as chatsee_redact/data/classifiers.json. They update only when a new version of this package is released — there is no runtime fetch.

To run with your own/alternate rule set (still fully offline), pass a local classifiers JSON file:

chatsee-redact app.json --rules my_rules.json --out ./redacted/
chatsee-redact dump-rules --rules my_rules.json

(Maintainers: refresh the bundled snapshot with python tools/regenerate_rules.py --env qa, then bump the version and publish. tools/ is the only code that ever contacts ChatSee and is not shipped in the package.)

Options

Behaviour

The original file is never modified and is never overwritten. If no rules can be loaded (e.g. a corrupt --rules file), the tool refuses to write an unredacted copy and exits non-zero, rather than silently passing data through.

Exit codes