Download the PHP package certamesh/gaze-laravel without Composer

gaze-laravel

Pseudonymize PII / PHI / secrets before they cross the LLM boundary — one Gaze::clean() call out, Gaze::restore() back, fully reversible owner-side.

The model never sees real data, yet your app restores it losslessly — tokens map back through a signed, encrypted-at-rest session blob. The same call runs inside queues and long-lived agent loops, not just a single HTTP request, and subprocess failures arrive as typed, exit-bucketed exceptions.

gaze-laravel is the Laravel adapter for the gaze CLI contract. Detection logic lives upstream in Rust — this package never re-implements pseudonymization in PHP.

Contents

• Requirements
• Installation — start here
• Usage
• How is this different?
• Advanced surfaces
• Documentation
• Security

Requirements

• PHP ^8.2
• Laravel ^11.0 || ^12.0 || ^13.0
• The gaze binary — gaze:install fetches the pinned build for you (see below), or supply your own on PATH, in vendor/bin/gaze, or via GAZE_BINARY.

Installation

Two steps:

php artisan gaze:install is the canonical setup path. It provisions the app end-to-end and finishes on a gaze:doctor green-check:

• downloads the pinned gaze binary into vendor/bin/,
• publishes the config and writes a sane default policy.toml (never clobbering one you've already edited),
• optionally installs the NER model (~184 MB, ONNX-backed),
• optionally wires a safety-net backend (OPF or Kiji).

It is idempotent — safe to re-run. A failed run rolls .env back to its pre-install state.

Non-interactive / CI

Headless runs skip every prompt; the safety-net defaults to none unless you opt in:

Common flags (php artisan gaze:install --help lists them all):

Sub-commands

The umbrella composes three standalone commands you can run on their own for finer control:

• gaze:install:binary — install the pinned gaze binary into vendor/bin/.
• gaze:install:ner — download the pinned ONNX NER model and wire policy.toml (legacy alias: gaze:install-ner).
• gaze:install:safety-net — wire an opf or kiji backend into .env.

Automating the binary install (optional)

gaze:install is explicit by design — nothing runs on composer install or composer update. Adopters who want the old auto-download behaviour back (the binary refreshed after every Composer update, no plugin) can wire the Composer-context installer into a post-update-cmd script in their app's composer.json:

Set GAZE_SKIP_BINARY_DOWNLOAD=1 to suppress that fetch (e.g. in CI, where the binary is provisioned separately). The GAZE_VERSION / GAZE_RELEASE_BASE overrides and the full config reference live in Configuration.

New here? Walk through the getting started guide.

Usage

See examples/clean-before-openai.php for a runnable clean → OpenAI → restore example.

Per-rule detection entries

GazeSession::$entries exposes each tokenized span as a readonly Entry DTO (class, raw, token, family). The array is empty for upstream releases that don't surface the field, so consumers can always iterate safely:

See Exceptions for the exit-bucket reference and Testing for fakes, assertions, and integration setup.

How is this different from regex / generic anonymization libraries?

Not what you're after? This is not in-process PHP detection — the Rust crate is the source of truth — and not a generic subprocess wrapper; it is specific to gaze. See the North Star non-goals.

Advanced surfaces

Opt-in surfaces — reach for them once the basic clean / restore round-trip is in place:

• HTTP proxy daemon — pseudonymizes requests bound for OpenAI / Anthropic / Gemini and restores their replies.
• JSONL stdio daemon — low-latency Gaze::daemon() runtime for agent loops and worker queues, with no per-turn binary startup.
• Kiji safety-net backend — Tier 2.5 DistilBERT NER subprocess for higher-recall Pass-3 leak detection.

Documentation

• Documentation index
• Getting started
• Configuration
• Architecture
• NER detection
• Blob lifecycle
• Security model
• Exceptions
• Diagnostics
• Testing
• Queue integration
• Retry discipline
• Livewire integration
• Conversational-loop patterns
• Operations
• Audit query / export
• Proxy daemon
• Daemon (JSONL stdio)
• SafetyNet (OPF + Kiji)
• Upgrading & migrations
• Upstream coverage

Security

Session blobs are encrypted at rest with Laravel's encrypter, keyed by GAZE_ENCRYPTION_KEY or APP_KEY. Only the pseudonymized $session->cleanText should cross the model boundary; restore happens owner-side. See the Security model for guarantees, responsibilities, and compliance boundaries.

Known limitations

• Pre-built binaries currently cover Linux x86_64 and macOS arm64. Intel Mac users must install gaze from source and set GAZE_BINARY.
• NER model artifacts are not bundled in the Composer package. gaze:install fetches them on demand (or run gaze:install:ner directly); pass --skip-ner to defer.

License

Apache-2.0 — see LICENSE.