Browser Session Export Privacy Scrubber

Align Python and browser scrubbing with shared fixtures and add side-by-side strict-sharing previews with retained-field summaries.

session-export-scrub --write-browser session-review.html

The self-contained browser UI and Python engine share fixtures for private/public IPv6, mapped IPv4, noncanonical numeric hosts, percent-encoded/repeated query keys, private-host opt-out, unknown JSON shapes, detectors and strict profiles. --profile strict redacts free-text strings and removes URL paths/query data; field names, structure, numbers/booleans and public hosts remain, so anonymity is not guaranteed. --compare-policy adds value-free retained-field/count comparisons to CLI audits. The browser compares selected and strict policies, imports/exports complete policies and downloads separate sanitized files/audits. --write-browser exports the bundled interface from the installed wheel. Existing URL credential removal, duplicates and fragments are preserved or redacted according to explicit rules; private-host checkbox behavior, IPv6 brackets, malformed-port handling and filename HTML injection are corrected. Desktop/mobile localhost QA passed; file-scheme offline launch is not claimed because the available browser blocks that scheme.

python -m pip install .
session-export-scrub export.json --output sanitized.json --audit audit.json
session-export-scrub export.json --output sanitized.json --policy examples/policy.json
session-export-scrub first.json second.json --output-dir sanitized --audit batch-audit.json

For a visual workflow, open web/index.html in a current browser. Drop one or more exports onto the page, adjust or import a policy, inspect the before/after preview, and download each sanitized file and audit. The page is self-contained and makes no network requests.

Tabitha Workspaces version 1 exports are identified explicitly. Other JSON objects and arrays use the generic adapter. The source is read-only and existing output or audit files are never overwritten.