@discretion/core 0.1.0

package/dist/src/detect/detectors/crypto/sol.js

@@ -0,0 +1,39 @@
+/**
+ * CRYPTO_WALLET: Solana.
+ *
+ * A Solana address is a bare ed25519 public key in Bitcoin-alphabet base58 —
+ * there is NO checksum, so this is structural validation: the string must
+ * decode to EXACTLY 32 bytes, which rejects most base58-looking words (a
+ * 40-character run decodes to ~29 bytes, a Bitcoin address to 25). MEDIUM
+ * by the no-checksum rule.
+ *
+ * The system program (32 '1's, the all-zero key) is a well-known constant.
+ */
+import { base58Decode } from '../../../encoding/base58.js';
+import { registerDetector } from '../../registry.js';
+import { CONFIDENCE, GLOBAL_REGION, invalid, valid } from '../../types.js';
+function validateSol(ctx) {
+    const raw = ctx.match[0];
+    const bytes = base58Decode(raw);
+    if (bytes === null)
+        return invalid('not base58');
+    if (bytes.length !== 32)
+        return invalid('not a 32-byte key');
+    const allZero = bytes.every((b) => b === 0);
+    return valid({
+        canonical: raw,
+        sensitive: !allZero,
+        metadata: { chain: 'sol', ...(allZero ? { wellKnown: 'system-program' } : {}) },
+        validator: 'sol-structural',
+    });
+}
+registerDetector({
+    id: 'crypto-sol',
+    entityType: 'CRYPTO_WALLET',
+    regions: [GLOBAL_REGION],
+    pattern: /\b[1-9A-HJ-NP-Za-km-z]{32,44}\b/g,
+    baseConfidence: CONFIDENCE.MEDIUM,
+    description: 'Solana addresses: base58 decoding to exactly 32 bytes. No checksum exists; MEDIUM.',
+    validate: validateSol,
+});
+//# sourceMappingURL=sol.js.map

package/dist/src/detect/detectors/crypto/sol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sol.js","sourceRoot":"","sources":["../../../../../src/detect/detectors/crypto/sol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAG3E,SAAS,WAAW,CAAC,GAAsB;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC;QACX,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,CAAC,OAAO;QACnB,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC/E,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,gBAAgB,CAAC;IACf,EAAE,EAAE,YAAY;IAChB,UAAU,EAAE,eAAe;IAC3B,OAAO,EAAE,CAAC,aAAa,CAAC;IACxB,OAAO,EAAE,kCAAkC;IAC3C,cAAc,EAAE,UAAU,CAAC,MAAM;IACjC,WAAW,EAAE,oFAAoF;IACjG,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAC"}

package/dist/src/detect/detectors/crypto/trx.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CRYPTO_WALLET: Tron.
+ *
+ * base58check with version byte 0x41 and a 20-byte payload; always written
+ * starting with 'T' and 34 characters long. Fully checksum-verified.
+ */
+export {};
+//# sourceMappingURL=trx.d.ts.map

package/dist/src/detect/detectors/crypto/trx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trx.d.ts","sourceRoot":"","sources":["../../../../../src/detect/detectors/crypto/trx.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/src/detect/detectors/crypto/trx.js

@@ -0,0 +1,34 @@
+/**
+ * CRYPTO_WALLET: Tron.
+ *
+ * base58check with version byte 0x41 and a 20-byte payload; always written
+ * starting with 'T' and 34 characters long. Fully checksum-verified.
+ */
+import { base58CheckDecode } from '../../../encoding/base58.js';
+import { registerDetector } from '../../registry.js';
+import { CONFIDENCE, GLOBAL_REGION, invalid, valid } from '../../types.js';
+function validateTrx(ctx) {
+    const raw = ctx.match[0];
+    const decoded = base58CheckDecode(raw);
+    if (decoded === null)
+        return invalid('base58check checksum failed');
+    if (decoded.version !== 0x41)
+        return invalid('not the Tron version byte');
+    if (decoded.payload.length !== 20)
+        return invalid('payload is not 20 bytes');
+    return valid({
+        canonical: raw,
+        metadata: { chain: 'trx' },
+        validator: 'base58check',
+    });
+}
+registerDetector({
+    id: 'crypto-trx',
+    entityType: 'CRYPTO_WALLET',
+    regions: [GLOBAL_REGION],
+    pattern: /\bT[1-9A-HJ-NP-Za-km-z]{33}\b/g,
+    baseConfidence: CONFIDENCE.HIGH,
+    description: 'Tron addresses: base58check, version 0x41, checksummed.',
+    validate: validateTrx,
+});
+//# sourceMappingURL=trx.js.map

package/dist/src/detect/detectors/crypto/trx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trx.js","sourceRoot":"","sources":["../../../../../src/detect/detectors/crypto/trx.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAG3E,SAAS,WAAW,CAAC,GAAsB;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAE7E,OAAO,KAAK,CAAC;QACX,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;QAC1B,SAAS,EAAE,aAAa;KACzB,CAAC,CAAC;AACL,CAAC;AAED,gBAAgB,CAAC;IACf,EAAE,EAAE,YAAY;IAChB,UAAU,EAAE,eAAe;IAC3B,OAAO,EAAE,CAAC,aAAa,CAAC;IACxB,OAAO,EAAE,gCAAgC;IACzC,cAAc,EAAE,UAAU,CAAC,IAAI;IAC/B,WAAW,EAAE,yDAAyD;IACtE,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAC"}

package/dist/src/detect/detectors/crypto/xmr.d.ts

@@ -0,0 +1,10 @@
+/**
+ * CRYPTO_WALLET: Monero.
+ *
+ * Block-wise base58 (Monero's own variant), then the real checksum: the
+ * last four payload bytes must equal the first four of Keccak-256 over the
+ * rest. Standard (95 chars, network 0x12) and subaddress (95 chars, 0x2a)
+ * decode to 69 bytes; integrated addresses (106 chars, 0x13) to 77.
+ */
+export {};
+//# sourceMappingURL=xmr.d.ts.map

package/dist/src/detect/detectors/crypto/xmr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xmr.d.ts","sourceRoot":"","sources":["../../../../../src/detect/detectors/crypto/xmr.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/src/detect/detectors/crypto/xmr.js

@@ -0,0 +1,51 @@
+/**
+ * CRYPTO_WALLET: Monero.
+ *
+ * Block-wise base58 (Monero's own variant), then the real checksum: the
+ * last four payload bytes must equal the first four of Keccak-256 over the
+ * rest. Standard (95 chars, network 0x12) and subaddress (95 chars, 0x2a)
+ * decode to 69 bytes; integrated addresses (106 chars, 0x13) to 77.
+ */
+import { keccak256 } from '../../../crypto/keccak256.js';
+import { moneroBase58Decode } from '../../../encoding/base58monero.js';
+import { registerDetector } from '../../registry.js';
+import { CONFIDENCE, GLOBAL_REGION, invalid, valid } from '../../types.js';
+const NETWORK_KINDS = {
+    0x12: 'standard',
+    0x2a: 'subaddress',
+    0x13: 'integrated',
+};
+function validateXmr(ctx) {
+    const raw = ctx.match[0];
+    const bytes = moneroBase58Decode(raw);
+    if (bytes === null)
+        return invalid('not Monero base58');
+    if (bytes.length !== 69 && bytes.length !== 77)
+        return invalid('unexpected payload size');
+    const kind = NETWORK_KINDS[bytes[0]];
+    if (kind === undefined)
+        return invalid('unknown network byte');
+    const body = bytes.slice(0, bytes.length - 4);
+    const checksum = bytes.slice(bytes.length - 4);
+    const expected = keccak256(body).slice(0, 4);
+    for (let i = 0; i < 4; i++) {
+        if (checksum[i] !== expected[i])
+            return invalid('keccak checksum failed');
+    }
+    return valid({
+        canonical: raw,
+        metadata: { chain: 'xmr', kind },
+        validator: 'monero-keccak',
+    });
+}
+registerDetector({
+    id: 'crypto-xmr',
+    entityType: 'CRYPTO_WALLET',
+    regions: [GLOBAL_REGION],
+    // 95-char standard/subaddress or 106-char integrated, first char 4 or 8.
+    pattern: /\b[48][1-9A-HJ-NP-Za-km-z]{94}(?:[1-9A-HJ-NP-Za-km-z]{11})?\b/g,
+    baseConfidence: CONFIDENCE.HIGH,
+    description: 'Monero addresses: block-wise base58 with the Keccak-256 checksum verified.',
+    validate: validateXmr,
+});
+//# sourceMappingURL=xmr.js.map

package/dist/src/detect/detectors/crypto/xmr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xmr.js","sourceRoot":"","sources":["../../../../../src/detect/detectors/crypto/xmr.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAG3E,MAAM,aAAa,GAAqC;IACtD,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,YAAY;CACnB,CAAC;AAEF,SAAS,WAAW,CAAC,GAAsB;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAE1F,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE/D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,KAAK,CAAC;QACX,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE;QAChC,SAAS,EAAE,eAAe;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,gBAAgB,CAAC;IACf,EAAE,EAAE,YAAY;IAChB,UAAU,EAAE,eAAe;IAC3B,OAAO,EAAE,CAAC,aAAa,CAAC;IACxB,yEAAyE;IACzE,OAAO,EAAE,gEAAgE;IACzE,cAAc,EAAE,UAAU,CAAC,IAAI;IAC/B,WAAW,EAAE,4EAA4E;IACzF,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAC"}

package/dist/src/detect/detectors/documents/driversLicense.d.ts

@@ -0,0 +1,24 @@
+/**
+ * DRIVERS_LICENSE — per-jurisdiction formats where a real rule exists.
+ *
+ * SPEC.md: "per-jurisdiction formats where a validator exists, low
+ * confidence otherwise." Two tiers, explicit about which is which:
+ *
+ * VERIFIABLE STRUCTURE (MEDIUM — a distinctive multi-part shape, but no
+ * checksum a third party can compute):
+ *   • UK DVLA: 5 surname chars + decade digit + month pair (with the +50
+ *     female offset) + day pair + year digit + 2 initials + 1 digit +
+ *     2 letters. The embedded date rules are genuinely checkable.
+ *   • US states with a strongly-typed shape: CA (1 letter + 7 digits),
+ *     NY (1 letter + 18 digits or 9 digits), IL (1 letter + 11 digits),
+ *     FL/MI/MN/MD (1 letter + 12 digits), NJ (1 letter + 14 digits),
+ *     WA (12 chars incl. letters), TX/OH-style plain digit runs are NOT
+ *     claimed — a bare 8-digit run is any number.
+ *
+ * No public checksum exists for any of these, so MEDIUM is the ceiling and
+ * a labeled Stage 3 trigger ("DL#", "driver's license") is what will raise
+ * them later. Shapes that are just digit runs are deliberately excluded —
+ * emitting them would be the false-positive machine SPEC.md forbids.
+ */
+export {};
+//# sourceMappingURL=driversLicense.d.ts.map

package/dist/src/detect/detectors/documents/driversLicense.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driversLicense.d.ts","sourceRoot":"","sources":["../../../../../src/detect/detectors/documents/driversLicense.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/src/detect/detectors/documents/driversLicense.js

@@ -0,0 +1,79 @@
+/**
+ * DRIVERS_LICENSE — per-jurisdiction formats where a real rule exists.
+ *
+ * SPEC.md: "per-jurisdiction formats where a validator exists, low
+ * confidence otherwise." Two tiers, explicit about which is which:
+ *
+ * VERIFIABLE STRUCTURE (MEDIUM — a distinctive multi-part shape, but no
+ * checksum a third party can compute):
+ *   • UK DVLA: 5 surname chars + decade digit + month pair (with the +50
+ *     female offset) + day pair + year digit + 2 initials + 1 digit +
+ *     2 letters. The embedded date rules are genuinely checkable.
+ *   • US states with a strongly-typed shape: CA (1 letter + 7 digits),
+ *     NY (1 letter + 18 digits or 9 digits), IL (1 letter + 11 digits),
+ *     FL/MI/MN/MD (1 letter + 12 digits), NJ (1 letter + 14 digits),
+ *     WA (12 chars incl. letters), TX/OH-style plain digit runs are NOT
+ *     claimed — a bare 8-digit run is any number.
+ *
+ * No public checksum exists for any of these, so MEDIUM is the ceiling and
+ * a labeled Stage 3 trigger ("DL#", "driver's license") is what will raise
+ * them later. Shapes that are just digit runs are deliberately excluded —
+ * emitting them would be the false-positive machine SPEC.md forbids.
+ */
+import { registerDetector } from '../../registry.js';
+import { CONFIDENCE, invalid, valid } from '../../types.js';
+/** UK DVLA licence number: the date rules make it checkable. */
+function validateUkDvla(value) {
+    const m = /^([A-Z9]{5})(\d)(\d\d)(\d\d)(\d)([A-Z9]{2})(\d)([A-Z]{2})$/.exec(value);
+    if (m === null)
+        return null;
+    const monthPair = Number(m[3]);
+    // Month 01–12 for male, 51–62 for female drivers.
+    const month = monthPair > 50 ? monthPair - 50 : monthPair;
+    if (month < 1 || month > 12)
+        return invalid('DVLA month field out of range');
+    const day = Number(m[4]);
+    if (day < 1 || day > 31)
+        return invalid('DVLA day field out of range');
+    return valid({
+        canonical: value,
+        metadata: { jurisdiction: 'GB', scheme: 'dvla' },
+        validator: 'dvla-structure',
+    });
+}
+/** US state shapes with a letter anchor (never bare digit runs). */
+const US_SHAPES = [
+    [/^[A-Z]\d{7}$/, 'CA'],
+    [/^[A-Z]\d{11}$/, 'IL'],
+    [/^[A-Z]\d{12}$/, 'FL'],
+    [/^[A-Z]\d{14}$/, 'NJ'],
+    [/^[A-Z]\d{18}$/, 'NY'],
+];
+function validateDl(ctx) {
+    const value = ctx.match[0].toUpperCase();
+    const dvla = validateUkDvla(value);
+    if (dvla !== null)
+        return dvla;
+    for (const [shape, state] of US_SHAPES) {
+        if (shape.test(value)) {
+            return valid({
+                canonical: value,
+                confidence: CONFIDENCE.LOW,
+                metadata: { jurisdiction: 'US', state },
+                validator: 'state-shape',
+            });
+        }
+    }
+    return invalid('no jurisdiction shape matched');
+}
+registerDetector({
+    id: 'drivers-license',
+    entityType: 'DRIVERS_LICENSE',
+    regions: ['GB', 'US'],
+    // DVLA 16-char format or letter-anchored US state formats.
+    pattern: /\b(?:[A-Z9]{5}\d{6}[A-Z9]{2}\d[A-Z]{2}|[A-Za-z]\d{7}(?:\d{4,11})?)\b/g,
+    baseConfidence: CONFIDENCE.MEDIUM,
+    description: "Driver's licences: UK DVLA date-rule structure at MEDIUM, letter-anchored US shapes at LOW.",
+    validate: validateDl,
+});
+//# sourceMappingURL=driversLicense.js.map

package/dist/src/detect/detectors/documents/driversLicense.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"driversLicense.js","sourceRoot":"","sources":["../../../../../src/detect/detectors/documents/driversLicense.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAG5D,gEAAgE;AAChE,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,CAAC,GAAG,4DAA4D,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,kDAAkD;IAClD,MAAM,KAAK,GAAG,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC;QACX,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;QAChD,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,MAAM,SAAS,GAA2C;IACxD,CAAC,cAAc,EAAE,IAAI,CAAC;IACtB,CAAC,eAAe,EAAE,IAAI,CAAC;IACvB,CAAC,eAAe,EAAE,IAAI,CAAC;IACvB,CAAC,eAAe,EAAE,IAAI,CAAC;IACvB,CAAC,eAAe,EAAE,IAAI,CAAC;CACxB,CAAC;AAEF,SAAS,UAAU,CAAC,GAAsB;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAEzC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE/B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC;gBACX,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,UAAU,CAAC,GAAG;gBAC1B,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;gBACvC,SAAS,EAAE,aAAa;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAClD,CAAC;AAED,gBAAgB,CAAC;IACf,EAAE,EAAE,iBAAiB;IACrB,UAAU,EAAE,iBAAiB;IAC7B,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;IACrB,2DAA2D;IAC3D,OAAO,EAAE,uEAAuE;IAChF,cAAc,EAAE,UAAU,CAAC,MAAM;IACjC,WAAW,EAAE,6FAA6F;IAC1G,QAAQ,EAAE,UAAU;CACrB,CAAC,CAAC"}

package/dist/src/detect/detectors/documents/healthData.d.ts

@@ -0,0 +1,23 @@
+/**
+ * HEALTH_DATA — ICD-10/ICD-11 codes, SNOMED CT identifiers, and lab-result
+ * patterns.
+ *
+ * SPEC.md: "classify as HEALTH_DATA, off by default, on in Strict profile."
+ * The profile switch is Stage 4's job; here the candidates are emitted with
+ * correct confidence and rich metadata so the profile can gate them.
+ *
+ * Three sub-shapes, one detector:
+ *   • ICD-10: letter + 2 digits + optional '.' + 1–4 alphanumerics
+ *     ("E11.9", "S72.001A"). Distinctive only with the dot or in a labeled
+ *     context, so undotted 3-char codes ("E11") are NOT matched — "B12" is
+ *     a vitamin far more often than a diagnosis.
+ *   • SNOMED CT: 6–18 digit SCTID whose structure is checkable — the LAST
+ *     digit is a Verhoeff check digit over the preceding digits (that is
+ *     what SNOMED actually uses: Verhoeff, not Luhn), and the two digits
+ *     before it (the partition identifier) must be a defined pair.
+ *   • Lab results: value + unit + reference range ("HbA1c 9.1 % (4.0–5.6)",
+ *     "Glucose 182 mg/dL [70-99]"). The unit and range together are the
+ *     signal; a bare number is nothing.
+ */
+export {};
+//# sourceMappingURL=healthData.d.ts.map

package/dist/src/detect/detectors/documents/healthData.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"healthData.d.ts","sourceRoot":"","sources":["../../../../../src/detect/detectors/documents/healthData.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG"}

package/dist/src/detect/detectors/documents/healthData.js

@@ -0,0 +1,78 @@
+/**
+ * HEALTH_DATA — ICD-10/ICD-11 codes, SNOMED CT identifiers, and lab-result
+ * patterns.
+ *
+ * SPEC.md: "classify as HEALTH_DATA, off by default, on in Strict profile."
+ * The profile switch is Stage 4's job; here the candidates are emitted with
+ * correct confidence and rich metadata so the profile can gate them.
+ *
+ * Three sub-shapes, one detector:
+ *   • ICD-10: letter + 2 digits + optional '.' + 1–4 alphanumerics
+ *     ("E11.9", "S72.001A"). Distinctive only with the dot or in a labeled
+ *     context, so undotted 3-char codes ("E11") are NOT matched — "B12" is
+ *     a vitamin far more often than a diagnosis.
+ *   • SNOMED CT: 6–18 digit SCTID whose structure is checkable — the LAST
+ *     digit is a Verhoeff check digit over the preceding digits (that is
+ *     what SNOMED actually uses: Verhoeff, not Luhn), and the two digits
+ *     before it (the partition identifier) must be a defined pair.
+ *   • Lab results: value + unit + reference range ("HbA1c 9.1 % (4.0–5.6)",
+ *     "Glucose 182 mg/dL [70-99]"). The unit and range together are the
+ *     signal; a bare number is nothing.
+ */
+import { verhoeffValid } from '../../../checksums/index.js';
+import { registerDetector } from '../../registry.js';
+import { CONFIDENCE, GLOBAL_REGION, invalid, valid } from '../../types.js';
+/** Defined SNOMED CT partition identifiers (digits n-2..n-1 of an SCTID). */
+const SNOMED_PARTITIONS = new Set(['00', '01', '02', '03', '04', '05', '10', '11', '12', '13', '14', '15']);
+const ICD10 = /^[A-TV-Z]\d{2}\.[A-Z0-9]{1,4}$/;
+const LAB_UNITS = /(?:mg\/dL|mmol\/L|g\/dL|IU\/L|U\/L|ng\/mL|pg\/mL|µg\/L|ug\/L|mIU\/L|µIU\/mL|uIU\/mL|%|mEq\/L|k\/µL|K\/uL|x10[³3]\/µL|fL|pg)/;
+function validateHealth(ctx) {
+    const value = ctx.match[0];
+    // ICD-10 with the dot: structure alone is distinctive.
+    if (ICD10.test(value)) {
+        return valid({
+            canonical: value,
+            confidence: CONFIDENCE.MEDIUM,
+            metadata: { kind: 'icd10' },
+            validator: 'icd10-structure',
+        });
+    }
+    // SNOMED SCTID: partition pair defined AND Verhoeff closes.
+    if (/^\d{6,18}$/.test(value)) {
+        const partition = value.slice(-3, -1);
+        if (!SNOMED_PARTITIONS.has(partition))
+            return invalid('undefined SCTID partition');
+        if (!verhoeffValid(value))
+            return invalid('SCTID Verhoeff check failed');
+        return valid({
+            canonical: value,
+            confidence: CONFIDENCE.MEDIUM,
+            metadata: { kind: 'snomed', partition },
+            validator: 'sctid-verhoeff',
+        });
+    }
+    // Lab result: value + unit (+ optional bracketed/parenthesised range).
+    if (LAB_UNITS.test(value) && /\d/.test(value)) {
+        const hasRange = /[[(].*\d.*[-–].*\d.*[\])]/.test(value);
+        return valid({
+            confidence: hasRange ? CONFIDENCE.MEDIUM : CONFIDENCE.LOW,
+            metadata: { kind: 'lab-result', hasRange },
+            validator: 'lab-pattern',
+        });
+    }
+    return invalid('no health-data shape matched');
+}
+registerDetector({
+    id: 'health-data',
+    entityType: 'HEALTH_DATA',
+    regions: [GLOBAL_REGION],
+    // ICD-10 dotted codes; SCTID digit runs (validated hard); measurement +
+    // unit with optional reference range. Ends with (?!\w), not \b: a match
+    // ending in '%' or ']' has no word boundary before a following space, so
+    // \b would silently kill every percent-unit lab value.
+    pattern: /\b(?:[A-TV-Z]\d{2}\.[A-Z0-9]{1,4}|\d{6,18}|\d+(?:\.\d+)?\s?(?:mg\/dL|mmol\/L|g\/dL|IU\/L|U\/L|ng\/mL|pg\/mL|µg\/L|ug\/L|mIU\/L|µIU\/mL|uIU\/mL|%|mEq\/L|k\/µL|K\/uL|fL)\s?(?:[[(]\s?\d+(?:\.\d+)?\s?[-–]\s?\d+(?:\.\d+)?\s?[\])])?)(?!\w)/g,
+    baseConfidence: CONFIDENCE.MEDIUM,
+    description: 'Health data: dotted ICD-10 codes, Verhoeff-checked SNOMED ids, lab values with units/ranges.',
+    validate: validateHealth,
+});
+//# sourceMappingURL=healthData.js.map

package/dist/src/detect/detectors/documents/healthData.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"healthData.js","sourceRoot":"","sources":["../../../../../src/detect/detectors/documents/healthData.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAG3E,6EAA6E;AAC7E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE5G,MAAM,KAAK,GAAG,gCAAgC,CAAC;AAE/C,MAAM,SAAS,GACb,6HAA6H,CAAC;AAEhI,SAAS,cAAc,CAAC,GAAsB;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,uDAAuD;IACvD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;YACX,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,UAAU,CAAC,MAAM;YAC7B,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC3B,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,4DAA4D;IAC5D,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACnF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;YACX,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,UAAU,CAAC,MAAM;YAC7B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE;YACvC,SAAS,EAAE,gBAAgB;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;YACX,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG;YACzD,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE;YAC1C,SAAS,EAAE,aAAa;SACzB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC,8BAA8B,CAAC,CAAC;AACjD,CAAC;AAED,gBAAgB,CAAC;IACf,EAAE,EAAE,aAAa;IACjB,UAAU,EAAE,aAAa;IACzB,OAAO,EAAE,CAAC,aAAa,CAAC;IACxB,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,uDAAuD;IACvD,OAAO,EACL,4OAA4O;IAC9O,cAAc,EAAE,UAAU,CAAC,MAAM;IACjC,WAAW,EAAE,8FAA8F;IAC3G,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC"}

package/dist/src/detect/detectors/documents/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Documents & health family. Side-effect imports only.
+ */
+import './passportMrz.js';
+import './vin.js';
+import './usNpi.js';
+import './driversLicense.js';
+import './healthData.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/detect/detectors/documents/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/detect/detectors/documents/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,UAAU,CAAC;AAClB,OAAO,YAAY,CAAC;AACpB,OAAO,qBAAqB,CAAC;AAC7B,OAAO,iBAAiB,CAAC"}

package/dist/src/detect/detectors/documents/index.js

@@ -0,0 +1,9 @@
+/**
+ * Documents & health family. Side-effect imports only.
+ */
+import './passportMrz.js';
+import './vin.js';
+import './usNpi.js';
+import './driversLicense.js';
+import './healthData.js';
+//# sourceMappingURL=index.js.map

package/dist/src/detect/detectors/documents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/detect/detectors/documents/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,UAAU,CAAC;AAClB,OAAO,YAAY,CAAC;AACpB,OAAO,qBAAqB,CAAC;AAC7B,OAAO,iBAAiB,CAAC"}

package/dist/src/detect/detectors/documents/passportMrz.d.ts

@@ -0,0 +1,20 @@
+/**
+ * PASSPORT_MRZ — TD1, TD2 and TD3 machine-readable zones.
+ *
+ * SPEC.md: "machine-readable zone lines (TD1, TD2, TD3) with their check
+ * digits. MRZ is highly reliable to detect because every field is
+ * checksummed; treat a valid MRZ as maximum confidence."
+ *
+ * So every check digit is verified — document number, date of birth, expiry,
+ * and, on TD1/TD3, the COMPOSITE check over the concatenated fields. Only
+ * when all of them close does the detector emit, and then at MAXIMUM.
+ * A partially-checksummed MRZ is not emitted at reduced confidence: an MRZ
+ * with a broken check digit is a transcription artifact, not a passport.
+ *
+ * Layouts (fixed-width, '<' filler):
+ *   TD1  3 lines × 30   — ID cards
+ *   TD2  2 lines × 36   — older travel documents
+ *   TD3  2 lines × 44   — passports
+ */
+export {};
+//# sourceMappingURL=passportMrz.d.ts.map

package/dist/src/detect/detectors/documents/passportMrz.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passportMrz.d.ts","sourceRoot":"","sources":["../../../../../src/detect/detectors/documents/passportMrz.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG"}

package/dist/src/detect/detectors/documents/passportMrz.js

@@ -0,0 +1,194 @@
+/**
+ * PASSPORT_MRZ — TD1, TD2 and TD3 machine-readable zones.
+ *
+ * SPEC.md: "machine-readable zone lines (TD1, TD2, TD3) with their check
+ * digits. MRZ is highly reliable to detect because every field is
+ * checksummed; treat a valid MRZ as maximum confidence."
+ *
+ * So every check digit is verified — document number, date of birth, expiry,
+ * and, on TD1/TD3, the COMPOSITE check over the concatenated fields. Only
+ * when all of them close does the detector emit, and then at MAXIMUM.
+ * A partially-checksummed MRZ is not emitted at reduced confidence: an MRZ
+ * with a broken check digit is a transcription artifact, not a passport.
+ *
+ * Layouts (fixed-width, '<' filler):
+ *   TD1  3 lines × 30   — ID cards
+ *   TD2  2 lines × 36   — older travel documents
+ *   TD3  2 lines × 44   — passports
+ */
+import { mrzCheckValid } from '../../../checksums/index.js';
+import { registerDetector } from '../../registry.js';
+import { CONFIDENCE, GLOBAL_REGION, invalid, valid } from '../../types.js';
+/** Strip the filler from a fixed-width field. */
+const trim = (s) => s.replace(/<+$/, '').replace(/</g, ' ').trim();
+/** YYMMDD sanity — a real date, not merely six digits. */
+function plausibleDate(yymmdd) {
+    if (!/^\d{6}$/.test(yymmdd))
+        return false;
+    const month = Number(yymmdd.slice(2, 4));
+    const day = Number(yymmdd.slice(4, 6));
+    return month >= 1 && month <= 12 && day >= 1 && day <= 31;
+}
+/** TD3: two 44-character lines (passport). */
+function validateTd3(l1, l2) {
+    if (!/^P[A-Z<]/.test(l1))
+        return 'TD3 line 1 is not a passport document code';
+    const documentNumber = l2.slice(0, 9);
+    const docCheck = l2[9];
+    const nationality = l2.slice(10, 13);
+    const birthDate = l2.slice(13, 19);
+    const birthCheck = l2[19];
+    const sex = l2[20];
+    const expiryDate = l2.slice(21, 27);
+    const expiryCheck = l2[27];
+    const optional = l2.slice(28, 42);
+    const optionalCheck = l2[42];
+    const compositeCheck = l2[43];
+    if (!mrzCheckValid(documentNumber, docCheck))
+        return 'document-number check digit failed';
+    if (!plausibleDate(birthDate))
+        return 'implausible birth date';
+    if (!mrzCheckValid(birthDate, birthCheck))
+        return 'birth-date check digit failed';
+    if (!plausibleDate(expiryDate))
+        return 'implausible expiry date';
+    if (!mrzCheckValid(expiryDate, expiryCheck))
+        return 'expiry-date check digit failed';
+    if (!mrzCheckValid(optional, optionalCheck))
+        return 'optional-data check digit failed';
+    const composite = `${documentNumber}${docCheck}${birthDate}${birthCheck}${expiryDate}${expiryCheck}${optional}${optionalCheck}`;
+    if (!mrzCheckValid(composite, compositeCheck))
+        return 'composite check digit failed';
+    return {
+        format: 'TD3',
+        issuingState: l1.slice(2, 5).replace(/</g, ''),
+        documentNumber: trim(documentNumber),
+        nationality: nationality.replace(/</g, ''),
+        birthDate,
+        sex,
+        expiryDate,
+    };
+}
+/** TD2: two 36-character lines. */
+function validateTd2(l1, l2) {
+    const documentNumber = l2.slice(0, 9);
+    const docCheck = l2[9];
+    const nationality = l2.slice(10, 13);
+    const birthDate = l2.slice(13, 19);
+    const birthCheck = l2[19];
+    const sex = l2[20];
+    const expiryDate = l2.slice(21, 27);
+    const expiryCheck = l2[27];
+    const optional = l2.slice(28, 35);
+    const compositeCheck = l2[35];
+    if (!mrzCheckValid(documentNumber, docCheck))
+        return 'document-number check digit failed';
+    if (!plausibleDate(birthDate))
+        return 'implausible birth date';
+    if (!mrzCheckValid(birthDate, birthCheck))
+        return 'birth-date check digit failed';
+    if (!plausibleDate(expiryDate))
+        return 'implausible expiry date';
+    if (!mrzCheckValid(expiryDate, expiryCheck))
+        return 'expiry-date check digit failed';
+    const composite = `${documentNumber}${docCheck}${birthDate}${birthCheck}${expiryDate}${expiryCheck}${optional}`;
+    if (!mrzCheckValid(composite, compositeCheck))
+        return 'composite check digit failed';
+    return {
+        format: 'TD2',
+        issuingState: l1.slice(2, 5).replace(/</g, ''),
+        documentNumber: trim(documentNumber),
+        nationality: nationality.replace(/</g, ''),
+        birthDate,
+        sex,
+        expiryDate,
+    };
+}
+/** TD1: three 30-character lines (ID cards). */
+function validateTd1(l1, l2) {
+    const documentNumber = l1.slice(5, 14);
+    const docCheck = l1[14];
+    const optional1 = l1.slice(15, 30);
+    const birthDate = l2.slice(0, 6);
+    const birthCheck = l2[6];
+    const sex = l2[7];
+    const expiryDate = l2.slice(8, 14);
+    const expiryCheck = l2[14];
+    const nationality = l2.slice(15, 18);
+    const optional2 = l2.slice(18, 29);
+    const compositeCheck = l2[29];
+    if (!mrzCheckValid(documentNumber, docCheck))
+        return 'document-number check digit failed';
+    if (!plausibleDate(birthDate))
+        return 'implausible birth date';
+    if (!mrzCheckValid(birthDate, birthCheck))
+        return 'birth-date check digit failed';
+    if (!plausibleDate(expiryDate))
+        return 'implausible expiry date';
+    if (!mrzCheckValid(expiryDate, expiryCheck))
+        return 'expiry-date check digit failed';
+    const composite = `${documentNumber}${docCheck}${optional1}${birthDate}${birthCheck}${expiryDate}${expiryCheck}${optional2}`;
+    if (!mrzCheckValid(composite, compositeCheck))
+        return 'composite check digit failed';
+    return {
+        format: 'TD1',
+        issuingState: l1.slice(2, 5).replace(/</g, ''),
+        documentNumber: trim(documentNumber),
+        nationality: nationality.replace(/</g, ''),
+        birthDate,
+        sex,
+        expiryDate,
+    };
+}
+function validateMrz(ctx) {
+    const lines = ctx.match[0].split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0);
+    let result;
+    if (lines.length >= 3 && lines[0].length === 30 && lines[1].length === 30 && lines[2].length === 30) {
+        result = validateTd1(lines[0], lines[1]);
+    }
+    else if (lines.length >= 2 && lines[0].length === 44 && lines[1].length === 44) {
+        result = validateTd3(lines[0], lines[1]);
+    }
+    else if (lines.length >= 2 && lines[0].length === 36 && lines[1].length === 36) {
+        result = validateTd2(lines[0], lines[1]);
+    }
+    else {
+        return invalid('no recognized MRZ line geometry');
+    }
+    if (typeof result === 'string')
+        return invalid(result);
+    // The pattern anchors on `(?:^|\n)` and therefore CONSUMES the preceding
+    // newline, which belongs to the line before the MRZ rather than to the MRZ
+    // itself. Left in the span it would be masked along with the identifier,
+    // splicing the zone onto whatever came before it. Narrow past it — this is
+    // what `span` exists for: anchoring context the pattern needed but which
+    // must not be masked.
+    const leading = /^\s+/.exec(ctx.match[0])?.[0].length ?? 0;
+    return valid({
+        ...(leading > 0 ? { span: { start: ctx.start + leading, end: ctx.end } } : {}),
+        confidence: CONFIDENCE.MAXIMUM,
+        metadata: {
+            format: result.format,
+            issuingState: result.issuingState,
+            nationality: result.nationality,
+            // The document number is the identifier; dates and sex are carried for
+            // the review UI and for M4's format-preserving substitution.
+            birthDate: result.birthDate,
+            expiryDate: result.expiryDate,
+            sex: result.sex,
+        },
+        validator: 'icao9303-all-check-digits',
+    });
+}
+registerDetector({
+    id: 'passport-mrz',
+    entityType: 'PASSPORT_MRZ',
+    regions: [GLOBAL_REGION],
+    // Two or three consecutive fixed-width MRZ lines. The alternation pins the
+    // exact widths so ordinary uppercase text cannot match.
+    pattern: /(?:^|\n)(?:[A-Z0-9<]{30}\r?\n[A-Z0-9<]{30}\r?\n[A-Z0-9<]{30}|[A-Z0-9<]{44}\r?\n[A-Z0-9<]{44}|[A-Z0-9<]{36}\r?\n[A-Z0-9<]{36})/g,
+    baseConfidence: CONFIDENCE.MAXIMUM,
+    description: 'Passport and ID machine-readable zones (TD1/TD2/TD3) with every check digit verified.',
+    validate: validateMrz,
+});
+//# sourceMappingURL=passportMrz.js.map