confide:view — visual de-id diff (what redaction & rehydrate do)

Produce ONE standalone .html that renders a transcript with every PII span highlighted and color-coded by type, and lets you toggle between the original and the redacted views interactively. It reuses the span data from the shared core (shared/confide_core.py) — a thin renderer, no new detection logic.

Privacy invariants (do not violate)

The HTML embeds REAL values (originals + placeholders) so you can compare them. It is therefore a vault artifact: same posture as the relationship-graph HTML.
Local only. Written next to the input, a sibling .gitignore excludes *.view.html (and *.map.json), and a red PRIVATE banner sits at the top. Never share it, never commit it, never ship it.
Counts only to stdout. The terminal output carries span counts by type — never PII values or redacted-text dumps.
Self-contained & offline. Inline CSS + JS, no CDN / external resources, so it renders offline and can never 404. Default detection layer is regex (no network, no models).

Run it

python3 skills/view/scripts/view.py ORIGINAL.txt

If a <name>.map.json sits next to the input (from confide:anon), it is picked up automatically so the view shows exactly that known PII; otherwise PII is detected with the local layers and a fresh reversible map is built in memory.

Options:

--map MAP.json — supply the reversible map explicitly.
--layers regex,natasha,llm — choose detection layers (default regex, offline-safe).
--out DIR — write the .view.html into DIR instead of next to the input.

It writes <name>.view.html and ensures a sibling .gitignore.

What the HTML shows

The transcript with each PII span wrapped in <mark class="pii TYPE" data-orig=… data-ph=…>, colored by type (PERSON, DATE, EMAIL, …). Hover a span to see original ↔ placeholder.
An interactive state toggle:
- All — fully redacted: every span shows its placeholder.
- None — original: nothing masked.
- Selected — mask only the PII types you check (per-type checkboxes in the legend).
A legend + counts by type.

After running

Open the <name>.view.html locally in a browser to inspect the de-id.
Report the counts summary (types) — never paste PII.
Remind the user the file is private/local and must not be shared or committed.

Setup

The default regex layer always works offline. For Natasha (RU NER) or the local LLM layer, run confide:setup first; otherwise pass --layers regex.