@flexorch/audit 0.3.1 → 0.4.0

package/dist/index.cjs

@@ -33,8 +33,9 @@ module.exports = __toCommonJS(index_exports);
 
 // src/pii.ts
 var EMAIL_RE = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
-var PHONE_INTL_RE = /\+\d{1,3}[\s\-.]?\(?\d{1,4}\)?[\s\-.]?\d{3,4}[\s\-.]?\d{4}\b/g;
+var PHONE_INTL_RE = /(?<![+\d])(\+[1-9][\d\s\-.()]{5,18}\d)(?!\d)/g;
 var IBAN_RE = /\b[A-Z]{2}\d{2}[0-9A-Z]{11,30}\b/g;
+var IBAN_INTL_RE = /\b([A-Z]{2}\d{2}[0-9A-Z]{11,30})\b/g;
 var CC_RE = /\b\d{4}[ \-]\d{4}[ \-]\d{4}[ \-]\d{4}\b/g;
 var IPV4_RE = /\b(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\b/g;
 var _H = "[0-9a-fA-F]{1,4}";
@@ -45,6 +46,102 @@ var IPV6_RE = new RegExp(
 var PHONE_TR_RE = /\b(?:\+90|0)?\s*5\d{2}\s*\d{3}\s*\d{2}\s*\d{2}\b/g;
 var TCKN_RE = /\b([1-9]\d{10})\b/g;
 var VKN_RE = /\b([1-9]\d{9})\b/g;
+var IBAN_TR_RE = /\bTR\d{2}[0-9A-Z]{22}\b/g;
+var _TR_COMPANY_SUFFIX = "(?:A\\.\u015E\\.|Ltd\\.\\s*\u015Eti\\.|Koll\\.\\s*\u015Eti\\.|Koop\\.|T\\.A\\.\u015E\\.)";
+var _TR_NAME_TOKEN = "(?:ve|ile|[A-Z\xC7\u011E\u0130\xD6\u015E\xDC][A-Za-z\xC7\u011E\u0130\xD6\u015E\xDC\xE7\u011F\u0131\u015F\xF6\u015F\xFC]*\\.?)";
+var COMPANY_NAME_TR_RE = new RegExp(
+  `(?<![A-Za-z\xC7\u011E\u0130\xD6\u015E\xDC\xE7\u011F\u0131\u015F\xF6\u015F\xFC])([A-Z\xC7\u011E\u0130\xD6\u015E\xDC][A-Za-z\xC7\u011E\u0130\xD6\u015E\xDC\xE7\u011F\u0131\u015F\xF6\u015F\xFC]*(?:\\s+${_TR_NAME_TOKEN}){0,6}\\s+${_TR_COMPANY_SUFFIX})`,
+  "gu"
+);
+var MERSIS_RE = /\b([1-9]\d{15})\b/g;
+var POSTAL_CODE_TR_RE = /\b((?:0[1-9]|[1-7]\d|80|81)\d{3})\b/g;
+var _TR_PROVINCES_SORTED = [
+  "Afyonkarahisar",
+  "Kahramanmara\u015F",
+  "K\u0131r\u0131kkale",
+  "K\u0131rklareli",
+  "Diyarbak\u0131r",
+  "Gaziantep",
+  "\u015Eanl\u0131urfa",
+  "Nev\u015Fehir",
+  "Kastamonu",
+  "G\xFCm\xFC\u015Fhane",
+  "Eski\u015Fehir",
+  "Erzincan",
+  "Erzurum",
+  "Denizli",
+  "\xC7anakkale",
+  "Ad\u0131yaman",
+  "Zonguldak",
+  "Tekirda\u011F",
+  "Trabzon",
+  "Tunceli",
+  "Karaman",
+  "Karab\xFCk",
+  "Aksaray",
+  "Antalya",
+  "K\u0131r\u015Fehir",
+  "Osmaniye",
+  "Kocaeli",
+  "Sakarya",
+  "Bart\u0131n",
+  "Bayburt",
+  "Ardahan",
+  "Yozgat",
+  "Ankara",
+  "Amasya",
+  "Artvin",
+  "Bal\u0131kesir",
+  "Bilecik",
+  "Bing\xF6l",
+  "Bitlis",
+  "Burdur",
+  "\xC7ank\u0131r\u0131",
+  "Edirne",
+  "Elaz\u0131\u011F",
+  "Giresun",
+  "Hakkari",
+  "Isparta",
+  "\u0130stanbul",
+  "\u0130zmir",
+  "Kayseri",
+  "K\xFCtahya",
+  "Malatya",
+  "Manisa",
+  "Mardin",
+  "Samsun",
+  "\u015E\u0131rnak",
+  "Sinop",
+  "Tokat",
+  "Hatay",
+  "Konya",
+  "Mu\u011Fla",
+  "Ni\u011Fde",
+  "Rize",
+  "Siirt",
+  "Sivas",
+  "Adana",
+  "Ayd\u0131n",
+  "Bursa",
+  "\xC7orum",
+  "I\u011Fd\u0131r",
+  "Kilis",
+  "Mersin",
+  "Batman",
+  "Yalova",
+  "D\xFCzce",
+  "Ordu",
+  "Kars",
+  "A\u011Fr\u0131",
+  "Bolu",
+  "Van",
+  "U\u015Fak",
+  "Mu\u015F"
+].sort((a, b) => b.length - a.length);
+var PROVINCE_TR_RE = new RegExp(
+  `(?<!\\w)(${_TR_PROVINCES_SORTED.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|")})(?!\\w)`,
+  "gu"
+);
 var NAME_PREFIX_TR = "(?:Ad[\u0131i]\\s*(?:Soyad[\u0131i])?|Soyad[\u0131i]|\u0130sim|M\xFC\u015Fteri\\s+Ad[\u0131i]|Yetkili(?:\\s+Ki\u015Fi)?|\xC7al\u0131\u015Fan\\s+Ad[\u0131i]|Personel\\s+Ad[\u0131i]|Ki\u015Fi\\s+Ad[\u0131i]|Sat\u0131c\u0131\\s+Ad[\u0131i]|Al\u0131c\u0131\\s+Ad[\u0131i]|\u0130lgili\\s+Ki\u015Fi|Hesap\\s+Sahibi)";
 var NAME_PREFIX_EN = "(?:Full\\s+Name|Customer\\s+Name|Employee\\s+Name|Contact\\s+Name|Authorized\\s+(?:By|Person)|Account\\s+Holder|(?<!\\bUser\\s)Name)";
 var NAME_VALUE = "([A-Z\xC7\u011E\u0130\xD6\u015E\xDC][a-z\xE7\u011F\u0131\u015F\xF6\u015F\xFC]+(?:\\s+[A-Z\xC7\u011E\u0130\xD6\u015E\xDC][a-z\xE7\u011F\u0131\u015F\xF6\u015F\xFC]+){0,2})";
@@ -52,6 +149,46 @@ var NAME_RE = new RegExp(
   `(?:${NAME_PREFIX_TR}|${NAME_PREFIX_EN})\\s*[:\\-]\\s*${NAME_VALUE}`,
   "gu"
 );
+var _IBAN_INTL_LENGTHS = {
+  AT: 20,
+  BE: 16,
+  BG: 22,
+  HR: 21,
+  CY: 28,
+  CZ: 24,
+  DK: 18,
+  EE: 20,
+  FI: 18,
+  FR: 27,
+  DE: 22,
+  GR: 27,
+  HU: 28,
+  IE: 22,
+  IT: 27,
+  LV: 21,
+  LT: 20,
+  LU: 20,
+  MT: 31,
+  NL: 18,
+  PL: 28,
+  PT: 25,
+  RO: 24,
+  SK: 24,
+  SI: 19,
+  ES: 24,
+  SE: 24,
+  GB: 22,
+  CH: 21,
+  NO: 15
+};
+var _INTL_SUFFIX = "(?:KGaA|GmbH|OHG|GbR|SARL|EURL|S\\.p\\.A\\.|S\\.r\\.l\\.|S\\.n\\.c\\.|S\\.a\\.s\\.|B\\.V\\.|N\\.V\\.|S\\.A\\.|S\\.L\\.|Corp\\.|Inc\\.|Ltd\\.|LLP|LLC|PLC|SpA|Srl|SNC|SAS|BV|NV|SL|SA|Corp|Inc|Ltd|KG|AG|UG)";
+var _UC = "[A-Z\xC0-\u024F]";
+var _WC = "[A-Za-z0-9\xC0-\u024F\\-]";
+var _INTL_NAME_TOKEN = `(?:and|&|${_UC}${_WC}*\\.?)`;
+var COMPANY_NAME_INTL_RE = new RegExp(
+  `(?<![A-Za-z\xC0-\u024F])(${_UC}${_WC}*(?:\\s+${_INTL_NAME_TOKEN}){0,6}\\s+${_INTL_SUFFIX})`,
+  "gu"
+);
 var SSN_RE = /\b(?!000|666|9\d{2})\d{3}-(?!00)\d{2}-(?!0000)\d{4}\b/g;
 function validTckn(s) {
   if (s.length !== 11 || s[0] === "0") return false;
@@ -103,10 +240,30 @@ function validIban(s) {
   }
   return remainder === 1;
 }
+function validIbanIntl(s) {
+  const country = s.slice(0, 2);
+  if (country === "TR" || !(country in _IBAN_INTL_LENGTHS)) return false;
+  if (s.length !== _IBAN_INTL_LENGTHS[country]) return false;
+  return validIban(s);
+}
+function validPhoneIntl(raw) {
+  const digits = raw.replace(/\D/g, "");
+  return digits.length >= 7 && digits.length <= 15 && digits.slice(0, 2) !== "90";
+}
 var LOCALE_DETECTORS = {
-  tr: /* @__PURE__ */ new Set(["national_id_tr", "tax_id_tr", "phone_tr", "name"]),
-  us: /* @__PURE__ */ new Set(["ssn", "phone"]),
-  eu: /* @__PURE__ */ new Set(["phone"])
+  tr: /* @__PURE__ */ new Set([
+    "national_id_tr",
+    "tax_id_tr",
+    "phone_tr",
+    "name",
+    "iban_tr",
+    "company_name_tr",
+    "mersis_no",
+    "postal_code_tr",
+    "province_tr"
+  ]),
+  us: /* @__PURE__ */ new Set(["ssn", "phone_intl", "company_name_intl"]),
+  eu: /* @__PURE__ */ new Set(["phone_intl", "iban_intl", "company_name_intl"])
 };
 var UNIVERSAL = /* @__PURE__ */ new Set(["email", "iban", "credit_card", "ip", "ip_v6"]);
 function activeDetectors(locale) {
@@ -115,7 +272,6 @@ function activeDetectors(locale) {
     for (const detectors of Object.values(LOCALE_DETECTORS)) {
       detectors.forEach((d) => active2.add(d));
     }
-    if (active2.has("phone_tr")) active2.delete("phone");
     return active2;
   }
   const active = new Set(UNIVERSAL);
@@ -134,15 +290,15 @@ function findAll(re, text, type) {
 function detectPii(text, locale = "tr") {
   const active = activeDetectors(locale);
   const t = text ?? "";
-  const findings = [];
+  let findings = [];
   if (active.has("email")) findings.push(...findAll(EMAIL_RE, t, "email"));
-  if (active.has("phone")) {
+  if (active.has("phone_intl")) {
     PHONE_INTL_RE.lastIndex = 0;
     let m;
     while ((m = PHONE_INTL_RE.exec(t)) !== null) {
-      const digits = m[0].replace(/\D/g, "").length;
-      if (digits >= 10) {
-        findings.push({ type: "phone", value: m[0], start: m.index, end: m.index + m[0].length });
+      const candidate = m[1];
+      if (validPhoneIntl(candidate)) {
+        findings.push({ type: "phone_intl", value: candidate, start: m.index, end: m.index + candidate.length });
       }
     }
   }
@@ -195,8 +351,71 @@ function detectPii(text, locale = "tr") {
       findings.push({ type: "name", value, start, end: start + value.length });
     }
   }
+  if (active.has("iban_tr")) {
+    IBAN_TR_RE.lastIndex = 0;
+    let m;
+    while ((m = IBAN_TR_RE.exec(t)) !== null) {
+      if (validIban(m[0])) {
+        findings.push({ type: "iban_tr", value: m[0], start: m.index, end: m.index + m[0].length });
+      }
+    }
+  }
+  if (active.has("company_name_tr")) {
+    COMPANY_NAME_TR_RE.lastIndex = 0;
+    let m;
+    while ((m = COMPANY_NAME_TR_RE.exec(t)) !== null) {
+      findings.push({ type: "company_name_tr", value: m[1], start: m.index, end: m.index + m[1].length });
+    }
+  }
+  if (active.has("mersis_no")) {
+    MERSIS_RE.lastIndex = 0;
+    let m;
+    while ((m = MERSIS_RE.exec(t)) !== null) {
+      findings.push({ type: "mersis_no", value: m[1], start: m.index, end: m.index + m[1].length });
+    }
+  }
+  if (active.has("postal_code_tr")) {
+    POSTAL_CODE_TR_RE.lastIndex = 0;
+    let m;
+    while ((m = POSTAL_CODE_TR_RE.exec(t)) !== null) {
+      findings.push({ type: "postal_code_tr", value: m[1], start: m.index, end: m.index + m[1].length });
+    }
+  }
+  if (active.has("province_tr")) {
+    PROVINCE_TR_RE.lastIndex = 0;
+    let m;
+    while ((m = PROVINCE_TR_RE.exec(t)) !== null) {
+      findings.push({ type: "province_tr", value: m[1], start: m.index, end: m.index + m[1].length });
+    }
+  }
   if (active.has("ssn")) findings.push(...findAll(SSN_RE, t, "ssn"));
-  return findings.sort((a, b) => a.start - b.start);
+  if (active.has("iban_intl")) {
+    IBAN_INTL_RE.lastIndex = 0;
+    let m;
+    while ((m = IBAN_INTL_RE.exec(t)) !== null) {
+      const candidate = m[1];
+      if (validIbanIntl(candidate)) {
+        findings.push({ type: "iban_intl", value: candidate, start: m.index, end: m.index + candidate.length });
+      }
+    }
+  }
+  if (active.has("company_name_intl")) {
+    COMPANY_NAME_INTL_RE.lastIndex = 0;
+    let m;
+    while ((m = COMPANY_NAME_INTL_RE.exec(t)) !== null) {
+      findings.push({ type: "company_name_intl", value: m[1], start: m.index, end: m.index + m[1].length });
+    }
+  }
+  findings.sort((a, b) => a.start - b.start);
+  const specificIbanSpans = new Set(
+    findings.filter((f) => f.type === "iban_tr" || f.type === "iban_intl").map((f) => `${f.start}:${f.end}`)
+  );
+  if (specificIbanSpans.size > 0) {
+    findings = findings.filter(
+      (f) => !(f.type === "iban" && specificIbanSpans.has(`${f.start}:${f.end}`))
+    );
+  }
+  return findings;
 }
 
 // src/quality.ts

package/dist/index.js

@@ -1,7 +1,8 @@
 // src/pii.ts
 var EMAIL_RE = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
-var PHONE_INTL_RE = /\+\d{1,3}[\s\-.]?\(?\d{1,4}\)?[\s\-.]?\d{3,4}[\s\-.]?\d{4}\b/g;
+var PHONE_INTL_RE = /(?<![+\d])(\+[1-9][\d\s\-.()]{5,18}\d)(?!\d)/g;
 var IBAN_RE = /\b[A-Z]{2}\d{2}[0-9A-Z]{11,30}\b/g;
+var IBAN_INTL_RE = /\b([A-Z]{2}\d{2}[0-9A-Z]{11,30})\b/g;
 var CC_RE = /\b\d{4}[ \-]\d{4}[ \-]\d{4}[ \-]\d{4}\b/g;
 var IPV4_RE = /\b(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\b/g;
 var _H = "[0-9a-fA-F]{1,4}";
@@ -12,6 +13,102 @@ var IPV6_RE = new RegExp(
 var PHONE_TR_RE = /\b(?:\+90|0)?\s*5\d{2}\s*\d{3}\s*\d{2}\s*\d{2}\b/g;
 var TCKN_RE = /\b([1-9]\d{10})\b/g;
 var VKN_RE = /\b([1-9]\d{9})\b/g;
+var IBAN_TR_RE = /\bTR\d{2}[0-9A-Z]{22}\b/g;
+var _TR_COMPANY_SUFFIX = "(?:A\\.\u015E\\.|Ltd\\.\\s*\u015Eti\\.|Koll\\.\\s*\u015Eti\\.|Koop\\.|T\\.A\\.\u015E\\.)";
+var _TR_NAME_TOKEN = "(?:ve|ile|[A-Z\xC7\u011E\u0130\xD6\u015E\xDC][A-Za-z\xC7\u011E\u0130\xD6\u015E\xDC\xE7\u011F\u0131\u015F\xF6\u015F\xFC]*\\.?)";
+var COMPANY_NAME_TR_RE = new RegExp(
+  `(?<![A-Za-z\xC7\u011E\u0130\xD6\u015E\xDC\xE7\u011F\u0131\u015F\xF6\u015F\xFC])([A-Z\xC7\u011E\u0130\xD6\u015E\xDC][A-Za-z\xC7\u011E\u0130\xD6\u015E\xDC\xE7\u011F\u0131\u015F\xF6\u015F\xFC]*(?:\\s+${_TR_NAME_TOKEN}){0,6}\\s+${_TR_COMPANY_SUFFIX})`,
+  "gu"
+);
+var MERSIS_RE = /\b([1-9]\d{15})\b/g;
+var POSTAL_CODE_TR_RE = /\b((?:0[1-9]|[1-7]\d|80|81)\d{3})\b/g;
+var _TR_PROVINCES_SORTED = [
+  "Afyonkarahisar",
+  "Kahramanmara\u015F",
+  "K\u0131r\u0131kkale",
+  "K\u0131rklareli",
+  "Diyarbak\u0131r",
+  "Gaziantep",
+  "\u015Eanl\u0131urfa",
+  "Nev\u015Fehir",
+  "Kastamonu",
+  "G\xFCm\xFC\u015Fhane",
+  "Eski\u015Fehir",
+  "Erzincan",
+  "Erzurum",
+  "Denizli",
+  "\xC7anakkale",
+  "Ad\u0131yaman",
+  "Zonguldak",
+  "Tekirda\u011F",
+  "Trabzon",
+  "Tunceli",
+  "Karaman",
+  "Karab\xFCk",
+  "Aksaray",
+  "Antalya",
+  "K\u0131r\u015Fehir",
+  "Osmaniye",
+  "Kocaeli",
+  "Sakarya",
+  "Bart\u0131n",
+  "Bayburt",
+  "Ardahan",
+  "Yozgat",
+  "Ankara",
+  "Amasya",
+  "Artvin",
+  "Bal\u0131kesir",
+  "Bilecik",
+  "Bing\xF6l",
+  "Bitlis",
+  "Burdur",
+  "\xC7ank\u0131r\u0131",
+  "Edirne",
+  "Elaz\u0131\u011F",
+  "Giresun",
+  "Hakkari",
+  "Isparta",
+  "\u0130stanbul",
+  "\u0130zmir",
+  "Kayseri",
+  "K\xFCtahya",
+  "Malatya",
+  "Manisa",
+  "Mardin",
+  "Samsun",
+  "\u015E\u0131rnak",
+  "Sinop",
+  "Tokat",
+  "Hatay",
+  "Konya",
+  "Mu\u011Fla",
+  "Ni\u011Fde",
+  "Rize",
+  "Siirt",
+  "Sivas",
+  "Adana",
+  "Ayd\u0131n",
+  "Bursa",
+  "\xC7orum",
+  "I\u011Fd\u0131r",
+  "Kilis",
+  "Mersin",
+  "Batman",
+  "Yalova",
+  "D\xFCzce",
+  "Ordu",
+  "Kars",
+  "A\u011Fr\u0131",
+  "Bolu",
+  "Van",
+  "U\u015Fak",
+  "Mu\u015F"
+].sort((a, b) => b.length - a.length);
+var PROVINCE_TR_RE = new RegExp(
+  `(?<!\\w)(${_TR_PROVINCES_SORTED.map((p) => p.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|")})(?!\\w)`,
+  "gu"
+);
 var NAME_PREFIX_TR = "(?:Ad[\u0131i]\\s*(?:Soyad[\u0131i])?|Soyad[\u0131i]|\u0130sim|M\xFC\u015Fteri\\s+Ad[\u0131i]|Yetkili(?:\\s+Ki\u015Fi)?|\xC7al\u0131\u015Fan\\s+Ad[\u0131i]|Personel\\s+Ad[\u0131i]|Ki\u015Fi\\s+Ad[\u0131i]|Sat\u0131c\u0131\\s+Ad[\u0131i]|Al\u0131c\u0131\\s+Ad[\u0131i]|\u0130lgili\\s+Ki\u015Fi|Hesap\\s+Sahibi)";
 var NAME_PREFIX_EN = "(?:Full\\s+Name|Customer\\s+Name|Employee\\s+Name|Contact\\s+Name|Authorized\\s+(?:By|Person)|Account\\s+Holder|(?<!\\bUser\\s)Name)";
 var NAME_VALUE = "([A-Z\xC7\u011E\u0130\xD6\u015E\xDC][a-z\xE7\u011F\u0131\u015F\xF6\u015F\xFC]+(?:\\s+[A-Z\xC7\u011E\u0130\xD6\u015E\xDC][a-z\xE7\u011F\u0131\u015F\xF6\u015F\xFC]+){0,2})";
@@ -19,6 +116,46 @@ var NAME_RE = new RegExp(
   `(?:${NAME_PREFIX_TR}|${NAME_PREFIX_EN})\\s*[:\\-]\\s*${NAME_VALUE}`,
   "gu"
 );
+var _IBAN_INTL_LENGTHS = {
+  AT: 20,
+  BE: 16,
+  BG: 22,
+  HR: 21,
+  CY: 28,
+  CZ: 24,
+  DK: 18,
+  EE: 20,
+  FI: 18,
+  FR: 27,
+  DE: 22,
+  GR: 27,
+  HU: 28,
+  IE: 22,
+  IT: 27,
+  LV: 21,
+  LT: 20,
+  LU: 20,
+  MT: 31,
+  NL: 18,
+  PL: 28,
+  PT: 25,
+  RO: 24,
+  SK: 24,
+  SI: 19,
+  ES: 24,
+  SE: 24,
+  GB: 22,
+  CH: 21,
+  NO: 15
+};
+var _INTL_SUFFIX = "(?:KGaA|GmbH|OHG|GbR|SARL|EURL|S\\.p\\.A\\.|S\\.r\\.l\\.|S\\.n\\.c\\.|S\\.a\\.s\\.|B\\.V\\.|N\\.V\\.|S\\.A\\.|S\\.L\\.|Corp\\.|Inc\\.|Ltd\\.|LLP|LLC|PLC|SpA|Srl|SNC|SAS|BV|NV|SL|SA|Corp|Inc|Ltd|KG|AG|UG)";
+var _UC = "[A-Z\xC0-\u024F]";
+var _WC = "[A-Za-z0-9\xC0-\u024F\\-]";
+var _INTL_NAME_TOKEN = `(?:and|&|${_UC}${_WC}*\\.?)`;
+var COMPANY_NAME_INTL_RE = new RegExp(
+  `(?<![A-Za-z\xC0-\u024F])(${_UC}${_WC}*(?:\\s+${_INTL_NAME_TOKEN}){0,6}\\s+${_INTL_SUFFIX})`,
+  "gu"
+);
 var SSN_RE = /\b(?!000|666|9\d{2})\d{3}-(?!00)\d{2}-(?!0000)\d{4}\b/g;
 function validTckn(s) {
   if (s.length !== 11 || s[0] === "0") return false;
@@ -70,10 +207,30 @@ function validIban(s) {
   }
   return remainder === 1;
 }
+function validIbanIntl(s) {
+  const country = s.slice(0, 2);
+  if (country === "TR" || !(country in _IBAN_INTL_LENGTHS)) return false;
+  if (s.length !== _IBAN_INTL_LENGTHS[country]) return false;
+  return validIban(s);
+}
+function validPhoneIntl(raw) {
+  const digits = raw.replace(/\D/g, "");
+  return digits.length >= 7 && digits.length <= 15 && digits.slice(0, 2) !== "90";
+}
 var LOCALE_DETECTORS = {
-  tr: /* @__PURE__ */ new Set(["national_id_tr", "tax_id_tr", "phone_tr", "name"]),
-  us: /* @__PURE__ */ new Set(["ssn", "phone"]),
-  eu: /* @__PURE__ */ new Set(["phone"])
+  tr: /* @__PURE__ */ new Set([
+    "national_id_tr",
+    "tax_id_tr",
+    "phone_tr",
+    "name",
+    "iban_tr",
+    "company_name_tr",
+    "mersis_no",
+    "postal_code_tr",
+    "province_tr"
+  ]),
+  us: /* @__PURE__ */ new Set(["ssn", "phone_intl", "company_name_intl"]),
+  eu: /* @__PURE__ */ new Set(["phone_intl", "iban_intl", "company_name_intl"])
 };
 var UNIVERSAL = /* @__PURE__ */ new Set(["email", "iban", "credit_card", "ip", "ip_v6"]);
 function activeDetectors(locale) {
@@ -82,7 +239,6 @@ function activeDetectors(locale) {
     for (const detectors of Object.values(LOCALE_DETECTORS)) {
       detectors.forEach((d) => active2.add(d));
     }
-    if (active2.has("phone_tr")) active2.delete("phone");
     return active2;
   }
   const active = new Set(UNIVERSAL);
@@ -101,15 +257,15 @@ function findAll(re, text, type) {
 function detectPii(text, locale = "tr") {
   const active = activeDetectors(locale);
   const t = text ?? "";
-  const findings = [];
+  let findings = [];
   if (active.has("email")) findings.push(...findAll(EMAIL_RE, t, "email"));
-  if (active.has("phone")) {
+  if (active.has("phone_intl")) {
     PHONE_INTL_RE.lastIndex = 0;
     let m;
     while ((m = PHONE_INTL_RE.exec(t)) !== null) {
-      const digits = m[0].replace(/\D/g, "").length;
-      if (digits >= 10) {
-        findings.push({ type: "phone", value: m[0], start: m.index, end: m.index + m[0].length });
+      const candidate = m[1];
+      if (validPhoneIntl(candidate)) {
+        findings.push({ type: "phone_intl", value: candidate, start: m.index, end: m.index + candidate.length });
       }
     }
   }
@@ -162,8 +318,71 @@ function detectPii(text, locale = "tr") {
       findings.push({ type: "name", value, start, end: start + value.length });
     }
   }
+  if (active.has("iban_tr")) {
+    IBAN_TR_RE.lastIndex = 0;
+    let m;
+    while ((m = IBAN_TR_RE.exec(t)) !== null) {
+      if (validIban(m[0])) {
+        findings.push({ type: "iban_tr", value: m[0], start: m.index, end: m.index + m[0].length });
+      }
+    }
+  }
+  if (active.has("company_name_tr")) {
+    COMPANY_NAME_TR_RE.lastIndex = 0;
+    let m;
+    while ((m = COMPANY_NAME_TR_RE.exec(t)) !== null) {
+      findings.push({ type: "company_name_tr", value: m[1], start: m.index, end: m.index + m[1].length });
+    }
+  }
+  if (active.has("mersis_no")) {
+    MERSIS_RE.lastIndex = 0;
+    let m;
+    while ((m = MERSIS_RE.exec(t)) !== null) {
+      findings.push({ type: "mersis_no", value: m[1], start: m.index, end: m.index + m[1].length });
+    }
+  }
+  if (active.has("postal_code_tr")) {
+    POSTAL_CODE_TR_RE.lastIndex = 0;
+    let m;
+    while ((m = POSTAL_CODE_TR_RE.exec(t)) !== null) {
+      findings.push({ type: "postal_code_tr", value: m[1], start: m.index, end: m.index + m[1].length });
+    }
+  }
+  if (active.has("province_tr")) {
+    PROVINCE_TR_RE.lastIndex = 0;
+    let m;
+    while ((m = PROVINCE_TR_RE.exec(t)) !== null) {
+      findings.push({ type: "province_tr", value: m[1], start: m.index, end: m.index + m[1].length });
+    }
+  }
   if (active.has("ssn")) findings.push(...findAll(SSN_RE, t, "ssn"));
-  return findings.sort((a, b) => a.start - b.start);
+  if (active.has("iban_intl")) {
+    IBAN_INTL_RE.lastIndex = 0;
+    let m;
+    while ((m = IBAN_INTL_RE.exec(t)) !== null) {
+      const candidate = m[1];
+      if (validIbanIntl(candidate)) {
+        findings.push({ type: "iban_intl", value: candidate, start: m.index, end: m.index + candidate.length });
+      }
+    }
+  }
+  if (active.has("company_name_intl")) {
+    COMPANY_NAME_INTL_RE.lastIndex = 0;
+    let m;
+    while ((m = COMPANY_NAME_INTL_RE.exec(t)) !== null) {
+      findings.push({ type: "company_name_intl", value: m[1], start: m.index, end: m.index + m[1].length });
+    }
+  }
+  findings.sort((a, b) => a.start - b.start);
+  const specificIbanSpans = new Set(
+    findings.filter((f) => f.type === "iban_tr" || f.type === "iban_intl").map((f) => `${f.start}:${f.end}`)
+  );
+  if (specificIbanSpans.size > 0) {
+    findings = findings.filter(
+      (f) => !(f.type === "iban" && specificIbanSpans.has(`${f.start}:${f.end}`))
+    );
+  }
+  return findings;
 }
 
 // src/quality.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flexorch/audit",
-  "version": "0.3.1",
+  "version": "0.4.0",
   "description": "Zero-dependency PII + quality + noise audit for LLM datasets (TR/EU/US)",
   "keywords": [
     "pii",