@kodocagent/cli 0.4.3 → 0.4.5

package/dist/index.js

@@ -9851,6 +9851,49 @@ var KODOC_PATHS = {
 function projectMcpConfigPath(cwd) {
   return join(cwd, ".kodocagent", "mcp.json");
 }
+var PATTERNS = [
+  {
+    type: "\uC8FC\uBBFC\uB4F1\uB85D\uBC88\uD638",
+    re: /\b\d{6}-[1-4]\d{6}\b/g,
+    mask: (m) => `${m.slice(0, 8)}******`
+  },
+  {
+    type: "\uC2E0\uC6A9\uCE74\uB4DC\uBC88\uD638",
+    re: /\b\d{4}-\d{4}-\d{4}-\d{4}\b/g,
+    mask: (m) => `${m.slice(0, 4)}-****-****-${m.slice(-4)}`
+  },
+  {
+    type: "\uC804\uD654\uBC88\uD638",
+    re: /\b0\d{1,2}-\d{3,4}-\d{4}\b/g,
+    mask: (m) => {
+      const p = m.split("-");
+      return `${p[0]}-${"*".repeat((p[1] ?? "").length)}-${p[2]}`;
+    }
+  },
+  {
+    type: "\uC774\uBA54\uC77C",
+    re: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g,
+    mask: (m) => {
+      const [u, d] = m.split("@");
+      return `${u?.[0] ?? ""}***@${d}`;
+    }
+  }
+];
+function detectPii(text3) {
+  if (!text3) return [];
+  const out = [];
+  for (const { type, re, mask } of PATTERNS) {
+    const matches = text3.match(re);
+    if (matches && matches.length > 0) {
+      const uniq = [...new Set(matches)];
+      out.push({ type, count: matches.length, masked: uniq.slice(0, 5).map(mask) });
+    }
+  }
+  return out;
+}
+function summarizePii(findings) {
+  return findings.map((f) => `${f.type} ${f.count}\uAC74`).join(", ");
+}
 
 // ../core/dist/index.js
 import { stepCountIs, streamText } from "ai";
@@ -9869,7 +9912,12 @@ import { appendFile, mkdir as mkdir2, readdir, readFile as readFile2, stat } fro
 import { join as join2 } from "path";
 import { tool } from "ai";
 function buildSystemPrompt(ctx) {
-  const stable = [ROLE_SECTION, DOCUMENT_RULES_SECTION, LAW_RULES_SECTION].join("\n\n");
+  const stable = [
+    ROLE_SECTION,
+    DOCUMENT_RULES_SECTION,
+    EDIT_SAFETY_SECTION,
+    LAW_RULES_SECTION
+  ].join("\n\n");
   const dynamic = buildDynamicContext(ctx);
   return `${stable}
 
@@ -9892,6 +9940,15 @@ var DOCUMENT_RULES_SECTION = `## \uBB38\uC11C \uADDC\uCE59
 6. \uC0AC\uC6A9\uC790\uAC00 \uC218\uC815\uC548\uC744 \uAC70\uC808\uD558\uBA74 \uAC19\uC740 \uC81C\uC548\uC744 \uC790\uB3D9\uC73C\uB85C \uBC18\uBCF5\uD558\uC9C0 \uB9D0\uACE0, \uC0AC\uC6A9\uC790\uC758 \uB2E4\uC74C \uC9C0\uC2DC\uB97C \uAE30\uB2E4\uB9AC\uC138\uC694.
 7. \uD070 \uBB38\uC11C\uB294 \uBA3C\uC800 \`outline\`\uC73C\uB85C \uAD6C\uC870\uB97C \uD30C\uC545\uD558\uACE0, \`search\`\uB098 \`pages\`\uB85C \uD544\uC694\uD55C \uBD80\uBD84\uB9CC \uC77D\uC5B4 \uCEE8\uD14D\uC2A4\uD2B8\uB97C \uC544\uB07C\uC138\uC694.
 8. \uC0AC\uC6A9\uC790\uAC00 \uC9C1\uC804 \uBCC0\uACBD\uC744 \uB418\uB3CC\uB9AC\uAE38 \uC6D0\uD558\uBA74 \`list_backups\`\uB85C \uBC31\uC5C5\uC744 \uD655\uC778\uD558\uACE0 \`restore_backup\`\uC73C\uB85C \uBCF5\uC6D0\uD558\uC138\uC694. \uBCF5\uC6D0\uB3C4 \uC2B9\uC778\uC744 \uAC70\uCE58\uBA70, \uBCF5\uC6D0 \uC804 \uD604\uC7AC \uC0C1\uD0DC\uAC00 \uC790\uB3D9 \uBC31\uC5C5\uB429\uB2C8\uB2E4.`;
+var EDIT_SAFETY_SECTION = `## \uD3B8\uC9D1 \uC548\uC804 \uADDC\uCE59
+
+1. \uC694\uCCAD\uBC1B\uC740 \uBD80\uBD84\uB9CC \uC218\uC815\uD558\uACE0, \uC694\uCCAD\uD558\uC9C0 \uC54A\uC740 \uBB38\uC7A5\xB7\uC11C\uC2DD\xB7\uAD6C\uC870\xB7\uD45C\uD604\uC740 \uADF8\uB300\uB85C \uB461\uB2C8\uB2E4. \uBB38\uC11C \uC804\uCCB4\uB97C \uC784\uC758\uB85C \uC7AC\uC791\uC131\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.
+2. \uBB38\uC11C\uC5D0 \uC5C6\uB294 \uC815\uBCF4\uB97C \uB9CC\uB4E4\uC5B4\uB0B4\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uC218\uCE58\xB7\uAE08\uC561\xB7\uB0A0\uC9DC\xB7\uC778\uBA85\xB7\uAE30\uAD00\uBA85\xB7\uACC4\uC57D \uC870\uD56D \uB4F1\uC744 \uCD94\uCE21\uD574 \uC0C8\uB85C \uC4F0\uAC70\uB098 \uBC14\uAFB8\uC9C0 \uC54A\uC73C\uBA70, \uBD88\uD655\uC2E4\uD558\uBA74 \uC0AC\uC6A9\uC790\uC5D0\uAC8C \uD655\uC778\uD569\uB2C8\uB2E4.
+3. \uC0AC\uC6A9\uC790\uAC00 \uBA85\uC2DC\uC801\uC73C\uB85C \uBC14\uAFB8\uB77C\uACE0 \uD558\uC9C0 \uC54A\uC740 \uD55C \uC22B\uC790\xB7\uAE08\uC561\xB7\uB0A0\uC9DC\xB7\uB2E8\uC704\xB7\uACE0\uC720\uBA85\uC0AC\xB7\uBC95\uB839 \uC870\uBB38 \uBC88\uD638\uC640 \uC778\uC6A9\uBD80\uD638(" ", ' ', \u300C \u300D) \uB0B4\uBD80 \uB0B4\uC6A9\uC740 \uBCF4\uC874\uD569\uB2C8\uB2E4.
+4. \uC804\uBB38 \uC6A9\uC5B4\uB294 \uC784\uC758\uB85C \uB2E4\uB978 \uD45C\uD604\uC73C\uB85C \uBC14\uAFB8\uC9C0 \uC54A\uACE0 \uBB38\uC11C \uC804\uCCB4\uC5D0\uC11C \uC77C\uAD00\uB418\uAC8C \uC720\uC9C0\uD569\uB2C8\uB2E4.
+5. \uACC4\uC57D\uC11C\xB7\uC57D\uAD00\xB7\uACF5\uC2DC\xB7\uB17C\uBB38 \uB4F1 \uBC95\uC801\xB7\uACF5\uC2DD \uBB38\uC11C\uB294 \uB2E8\uC5B4 \uD558\uB098\uAC00 \uC758\uBBF8\uB97C \uBC14\uAFC0 \uC218 \uC788\uC73C\uBBC0\uB85C, \uD45C\uD604\uC744 \uC790\uB3D9\uC73C\uB85C \uB2E4\uB4EC\uC9C0 \uB9D0\uACE0 \uC0AC\uC6A9\uC790\uAC00 \uC9C0\uC815\uD55C \uBCC0\uACBD\uB9CC \uC218\uD589\uD569\uB2C8\uB2E4.
+6. \uC758\uBBF8\uAC00 \uBC14\uB014 \uC218 \uC788\uB294 \uC218\uC815\uC740 \uC2E4\uD589 \uC804\uC5D0 \uADF8 \uC0AC\uC2E4\uC744 \uC0AC\uC6A9\uC790\uC5D0\uAC8C \uC54C\uB9AC\uACE0, \uC218\uC815 \uC81C\uC548\uC758 \uC694\uC57D(summary)\uC5D0\uB294 \uBB34\uC5C7\uC744\xB7\uC65C \uBC14\uAFB8\uB294\uC9C0 \uD568\uAED8 \uC801\uC2B5\uB2C8\uB2E4.
+7. \uAC1C\uC778\uC815\uBCF4(\uC8FC\uBBFC\uB4F1\uB85D\uBC88\uD638\xB7\uC804\uD654\uBC88\uD638\xB7\uC774\uBA54\uC77C\xB7\uACC4\uC88C\xB7\uCE74\uB4DC\uBC88\uD638 \uB4F1)\uAC00 \uC788\uC744 \uC218 \uC788\uB294 \uBB38\uC11C\uB97C \uB2E4\uB8F0 \uB54C \uC8FC\uC758\uD558\uACE0, \uC0AC\uC6A9\uC790\uAC00 \uAC1C\uC778\uC815\uBCF4 \uC810\uAC80\uC744 \uC694\uCCAD\uD558\uBA74 \`scan_pii\` \uB3C4\uAD6C\uB85C \uD655\uC778\uD569\uB2C8\uB2E4.`;
 var LAW_RULES_SECTION = `## \uBC95\uB839 \uADDC\uCE59
 
 1. \uBC95\uB839 \uC778\uC6A9 \uD615\uC2DD: \u300C\uBC95\uB839\uBA85\u300D \uC81CN\uC870 \uC81CN\uD56D \uC81CN\uD638
@@ -10017,6 +10074,26 @@ var AgentSession = class {
       this.openDocuments.push(p);
     }
   }
+  /**
+   * 저장된 메시지(어시스턴트 tool-call 파트)에서 열람·작성한 문서 경로를 도출해 기록한다.
+   * 세션이 턴마다 재생성되므로, 시스템 프롬프트("열람한 문서")가 이전 턴의 열람 기록을
+   * 반영하려면 히스토리에서 다시 복원해야 한다.
+   */
+  recordOpenDocumentsFromMessage(msg) {
+    const content = msg.content;
+    if (!Array.isArray(content)) return;
+    for (const part of content) {
+      if (!part || typeof part !== "object") continue;
+      const p = part;
+      if (p.type !== "tool-call" || !p.input) continue;
+      if (p.toolName === "read_document" || p.toolName === "write_new_document" || p.toolName === "write_new_spreadsheet") {
+        this.recordOpenDocument(p.input.path);
+      } else if (p.toolName === "compare_documents") {
+        this.recordOpenDocument(p.input.pathA);
+        this.recordOpenDocument(p.input.pathB);
+      }
+    }
+  }
   /** approval-required 이벤트를 run() 스트림에 전달하기 위한 큐 */
   pendingApprovalEvents = [];
   /**
@@ -10025,6 +10102,9 @@ var AgentSession = class {
   async loadHistory() {
     const msgs = await this.opts.store.loadMessages();
     this.messages.push(...msgs);
+    for (const msg of msgs) {
+      this.recordOpenDocumentsFromMessage(msg);
+    }
   }
   /**
    * 사용자 메시지를 처리하고 에이전트 이벤트를 스트리밍한다.
@@ -10079,7 +10159,7 @@ var AgentSession = class {
               } else if (part.toolName === "compare_documents") {
                 this.recordOpenDocument(inp.pathA);
                 this.recordOpenDocument(inp.pathB);
-              } else if (part.toolName === "write_new_document") {
+              } else if (part.toolName === "write_new_document" || part.toolName === "write_new_spreadsheet") {
                 this.recordOpenDocument(inp.path);
               }
             } catch {
@@ -10788,6 +10868,13 @@ var ToolRegistry = class {
               return outcome;
             }
             const { proposal, commit } = outcome;
+            const piiFindings = detectPii(proposal.diff ?? "");
+            if (piiFindings.length > 0) {
+              proposal.warnings = [
+                ...proposal.warnings ?? [],
+                `\uAC1C\uC778\uC815\uBCF4 \uD3EC\uD568: \uC774\uBC88 \uBCC0\uACBD \uC601\uC5ED\uC5D0 ${summarizePii(piiFindings)}\uC774(\uAC00) \uC788\uC2B5\uB2C8\uB2E4. \uC678\uBD80 \uACF5\uC720 \uC2DC \uC8FC\uC758\uD558\uC138\uC694.`
+              ];
+            }
             getEventEmitter()?.(proposal);
             const approvalResult = await approvalHandler(proposal);
             if (!approvalResult.approved) {
@@ -10883,14 +10970,18 @@ import { parse as parse5 } from "@clazic/kordoc";
 import { z as z11 } from "zod";
 import { readFile as fsReadFile, stat as stat5 } from "fs/promises";
 import { z as z12 } from "zod";
-import { stat as stat6 } from "fs/promises";
+import { readFile as readFile12 } from "fs/promises";
 import { extname as extname12 } from "path";
-import { markdownToHwpx as markdownToHwpx3 } from "@clazic/kordoc";
+import { parse as parse6 } from "@clazic/kordoc";
 import { z as z13 } from "zod";
-import { stat as stat7 } from "fs/promises";
+import { stat as stat6 } from "fs/promises";
 import { extname as extname13 } from "path";
-import ExcelJS2 from "exceljs";
+import { markdownToHwpx as markdownToHwpx3 } from "@clazic/kordoc";
 import { z as z14 } from "zod";
+import { stat as stat7 } from "fs/promises";
+import { extname as extname14 } from "path";
+import ExcelJS2 from "exceljs";
+import { z as z15 } from "zod";
 async function resolveSafePath(cwd, p) {
   const normalizedCwd = normalize(cwd).normalize("NFC");
   const normalizedP = p.normalize("NFC");
@@ -11022,8 +11113,10 @@ async function cleanOldBackups(maxAgeDays = 30, baseDir) {
 function resolveOutputPath(targetPath) {
   const ext = extname(targetPath).toLowerCase();
   if (ext === ".hwp") {
-    const outputPath = targetPath.slice(0, -4) + ".hwpx";
-    return { outputPath, willConvertFormat: ".hwp \u2192 .hwpx" };
+    return { outputPath: targetPath.slice(0, -4) + ".hwpx", willConvertFormat: ".hwp \u2192 .hwpx" };
+  }
+  if (ext === ".xls") {
+    return { outputPath: targetPath.slice(0, -4) + ".xlsx", willConvertFormat: ".xls \u2192 .xlsx" };
   }
   return { outputPath: targetPath, willConvertFormat: void 0 };
 }
@@ -11153,19 +11246,29 @@ var restoreBackupTool = {
     if (candidates.length === 0) {
       return `\uBC31\uC5C5\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${targetBase}. list_backups\uB85C \uC0AC\uC6A9 \uAC00\uB2A5\uD55C \uBC31\uC5C5\uC744 \uBA3C\uC800 \uD655\uC778\uD558\uC138\uC694.`;
     }
+    const byNewest = (a, b) => b.mtimeMs !== a.mtimeMs ? b.mtimeMs - a.mtimeMs : b.tsToken.localeCompare(a.tsToken);
     let chosen;
-    if (input.backup) {
-      const found = candidates.find(
-        (c) => c.filename === input.backup || c.fullPath.endsWith(input.backup)
-      );
-      if (!found) {
-        return `\uC9C0\uC815\uD55C \uBC31\uC5C5\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.backup}. list_backups\uB85C \uC0AC\uC6A9 \uAC00\uB2A5\uD55C \uBC31\uC5C5\uC744 \uBA3C\uC800 \uD655\uC778\uD558\uC138\uC694.`;
+    let ambiguityNote = null;
+    const requested = input.backup?.trim();
+    if (requested) {
+      const exact = candidates.find((c) => c.filename === requested);
+      if (exact) {
+        chosen = exact;
+      } else {
+        const matches = candidates.filter(
+          (c) => c.filename.endsWith(requested) || c.fullPath.endsWith(requested)
+        );
+        if (matches.length === 0) {
+          return `\uC9C0\uC815\uD55C \uBC31\uC5C5\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.backup}. list_backups\uB85C \uC0AC\uC6A9 \uAC00\uB2A5\uD55C \uBC31\uC5C5\uC758 \uC815\uD655\uD55C \uD30C\uC77C\uBA85\uC744 \uD655\uC778\uD558\uC138\uC694.`;
+        }
+        matches.sort(byNewest);
+        chosen = matches[0];
+        if (matches.length > 1) {
+          ambiguityNote = `'${input.backup}'\uC640 \uC77C\uCE58\uD558\uB294 \uBC31\uC5C5\uC774 ${matches.length}\uAC1C\uC5EC\uC11C \uAC00\uC7A5 \uCD5C\uADFC(${formatTimestamp(chosen.tsToken)}) \uAC83\uC744 \uC120\uD0DD\uD588\uC2B5\uB2C8\uB2E4. \uD2B9\uC815 \uBC31\uC5C5\uC744 \uC6D0\uD558\uBA74 list_backups\uC758 \uC804\uCCB4 \uD30C\uC77C\uBA85\uC744 \uC9C0\uC815\uD558\uC138\uC694.`;
+        }
       }
-      chosen = found;
     } else {
-      candidates.sort(
-        (a, b) => b.mtimeMs !== a.mtimeMs ? b.mtimeMs - a.mtimeMs : b.tsToken.localeCompare(a.tsToken)
-      );
+      candidates.sort(byNewest);
       chosen = candidates[0];
     }
     let backupBytes;
@@ -11206,12 +11309,15 @@ var restoreBackupTool = {
       ].join("\n");
     }
     const warnings = [];
-    const autoSelected = !input.backup && candidates.length > 1;
+    const autoSelected = !requested && candidates.length > 1;
     if (autoSelected) {
       warnings.push(
         `\uBC31\uC5C5\uC744 \uC9C0\uC815\uD558\uC9C0 \uC54A\uC544 \uAC00\uC7A5 \uCD5C\uADFC \uBC31\uC5C5(${formatTimestamp(chosen.tsToken)})\uC744 \uC790\uB3D9\uC73C\uB85C \uC120\uD0DD\uD588\uC2B5\uB2C8\uB2E4. \uB2E4\uB978 \uBC31\uC5C5\uC744 \uC6D0\uD558\uBA74 list_backups\uB85C \uD655\uC778 \uD6C4 backup \uD30C\uB77C\uBBF8\uD130\uB97C \uC9C0\uC815\uD558\uC138\uC694.`
       );
     }
+    if (ambiguityNote) {
+      warnings.push(ambiguityNote);
+    }
     warnings.push(
       "\uBCF5\uC6D0\uC744 \uC2E4\uD589\uD558\uBA74 \uD604\uC7AC \uD30C\uC77C\uB3C4 \uBC31\uC5C5\uB41C \uB4A4 \uB36E\uC5B4\uC4F0\uC5EC\uC9D1\uB2C8\uB2E4(\uBCF5\uC6D0 \uC790\uCCB4\uB3C4 \uB418\uB3CC\uB9B4 \uC218 \uC788\uC74C)."
     );
@@ -13116,7 +13222,7 @@ var proposeFindReplaceTool = {
           const remaining = countOccurrences(normAfter, normFind);
           if (remaining > 0) {
             warnings.push(
-              `\uC77C\uBD80 "${input.find}"(${remaining}\uACF3)\uC774 \uAD50\uCCB4\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4. \uD14D\uC2A4\uD2B8\uAC00 \uC5EC\uB7EC \uC11C\uC2DD \uB7F0\uC5D0 \uB098\uB258\uC5B4 \uC788\uC5B4 \uACBD\uACC4\uB97C \uAC00\uB85C\uC9C0\uB974\uB294 \uD328\uD134\uC740 \uAD50\uCCB4\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4(\uC11C\uC2DD\uC774 \uB098\uB25C \uD14D\uC2A4\uD2B8). \uC774\uBBF8 \uAD50\uCCB4\uB41C ${replacedCount}\uACF3\uC740 \uC815\uC0C1 \uBC18\uC601\uB418\uC5C8\uC2B5\uB2C8\uB2E4.`
+              `\uC77C\uBD80 "${input.find}"(${remaining}\uACF3)\uC774 \uAD50\uCCB4\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4. \uD14D\uC2A4\uD2B8\uAC00 \uC5EC\uB7EC \uC11C\uC2DD \uB7F0\uC5D0 \uB098\uB258\uC5B4 \uC788\uC5B4 \uACBD\uACC4\uB97C \uAC00\uB85C\uC9C0\uB974\uB294 \uD328\uD134\uC740 \uAD50\uCCB4\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4(\uC11C\uC2DD\uC774 \uB098\uB25C \uD14D\uC2A4\uD2B8). \uC774\uBBF8 \uAD50\uCCB4\uB41C ${replacedCount}\uACF3\uC740 \uC815\uC0C1 \uBC18\uC601\uB418\uC5C8\uC2B5\uB2C8\uB2E4. \uB0A8\uC740 ${remaining}\uACF3\uC740 \uD45C \uC548\uC758 \uC140\uC774\uBA74 propose_cell_edit\uC73C\uB85C \uD55C \uACF3\uC529 \uC218\uC815\uD558\uAC70\uB098, \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C \uC9C1\uC811 \uCC3E\uAE30\xB7\uBC14\uAFB8\uAE30\uB85C \uCC98\uB9AC\uD558\uC138\uC694.`
             );
           }
         }
@@ -13319,23 +13425,25 @@ var proposeSheetEditTool = {
       return `\uC624\uB958: \uC6CC\uD06C\uBD81 \uC800\uC7A5 \uC911 \uC624\uB958\uAC00 \uBC1C\uC0DD\uD588\uC2B5\uB2C8\uB2E4: ${msg}`;
     }
     const stagedData = modifiedBuffer;
-    const stagedPath = await stageFile(ctx.sessionId, safePath, stagedData);
+    const { outputPath, willConvertFormat } = resolveOutputPath(safePath);
+    const stagedPath = await stageFile(ctx.sessionId, outputPath, stagedData);
     const proposalId = crypto.randomUUID();
     return {
       proposal: {
         id: proposalId,
         kind: "sheet-edit",
-        targetPath: safePath,
+        targetPath: outputPath,
         stagedPath,
         summary: input.summary,
         diff,
-        warnings: []
+        warnings: [],
+        willConvertFormat
       },
       commit: async () => {
-        const backupPath = await backupFile(safePath);
-        await commitStaged(stagedPath, safePath);
+        const backupPath = await backupFile(outputPath);
+        await commitStaged(stagedPath, outputPath);
         const backupInfo = backupPath ? ` (\uBC31\uC5C5: ${backupPath})` : "";
-        return `\uC800\uC7A5 \uC644\uB8CC: ${safePath}${backupInfo}`;
+        return `\uC800\uC7A5 \uC644\uB8CC: ${outputPath}${backupInfo}`;
       }
     };
   }
@@ -14453,8 +14561,8 @@ var readFileTool = {
     if (info.size > MAX_SIZE) {
       return `\uC624\uB958: \uD30C\uC77C\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${Math.round(info.size / 1024)}KB). \uCD5C\uB300 256KB\uAE4C\uC9C0 \uC77D\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4.`;
     }
-    const { extname: extname14 } = await import("path");
-    const ext = extname14(safePath).toLowerCase();
+    const { extname: extname15 } = await import("path");
+    const ext = extname15(safePath).toLowerCase();
     if (!TEXT_EXTENSIONS.has(ext) && ext !== "") {
       return `\uC624\uB958: '${ext}' \uD615\uC2DD\uC740 \uD14D\uC2A4\uD2B8 \uD30C\uC77C\uB85C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uBB38\uC11C \uD30C\uC77C\uC774\uB77C\uBA74 read_document \uD234\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`;
     }
@@ -14468,10 +14576,64 @@ var readFileTool = {
     return content;
   }
 };
+var PLAIN_TEXT_EXTS2 = /* @__PURE__ */ new Set([".md", ".markdown", ".txt", ".text"]);
+var scanPiiSchema = z13.object({
+  path: z13.string().describe("\uAC1C\uC778\uC815\uBCF4\uB97C \uC810\uAC80\uD560 \uBB38\uC11C \uACBD\uB85C")
+});
+var scanPiiTool = {
+  name: "scan_pii",
+  description: "\uBB38\uC11C\uC5D0\uC11C \uD55C\uAD6D \uAC1C\uC778\uC815\uBCF4(\uC8FC\uBBFC\uB4F1\uB85D\uBC88\uD638\xB7\uC2E0\uC6A9\uCE74\uB4DC\uBC88\uD638\xB7\uC804\uD654\uBC88\uD638\xB7\uC774\uBA54\uC77C)\uB97C \uD0D0\uC9C0\uD569\uB2C8\uB2E4. \uC6D0\uBB38 \uAC12\uC740 \uBC18\uD658\uD558\uC9C0 \uC54A\uACE0 \uB9C8\uC2A4\uD0B9\uB41C \uC608\uC2DC\uB9CC \uD45C\uC2DC\uD569\uB2C8\uB2E4. \uC678\uBD80 \uACF5\uC720 \uC804 \uAC80\uD1A0\uC5D0 \uD65C\uC6A9\uD558\uC138\uC694.",
+  inputSchema: scanPiiSchema,
+  requiresApproval: false,
+  execute: async ({
+    input,
+    ctx
+  }) => {
+    let safePath;
+    try {
+      safePath = await resolveSafePath(ctx.cwd, input.path);
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : String(e);
+      return `\uC624\uB958: \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${msg}`;
+    }
+    const ext = extname12(safePath).toLowerCase();
+    let text3;
+    if (PLAIN_TEXT_EXTS2.has(ext)) {
+      try {
+        text3 = await readFile12(safePath, "utf-8");
+      } catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${msg}`;
+      }
+    } else {
+      let parseResult;
+      try {
+        parseResult = await parse6(safePath);
+      } catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        return `\uC624\uB958: \uBB38\uC11C\uB97C \uD30C\uC2F1\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${msg}`;
+      }
+      if (!parseResult.success) {
+        return `\uC624\uB958: \uBB38\uC11C\uB97C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${parseResult.error ?? "\uC54C \uC218 \uC5C6\uB294 \uC624\uB958"}`;
+      }
+      text3 = parseResult.markdown;
+    }
+    const findings = detectPii(text3);
+    if (findings.length === 0) {
+      return `\uAC1C\uC778\uC815\uBCF4\uAC00 \uBC1C\uACAC\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4: ${input.path}`;
+    }
+    const lines = [`\uBC1C\uACAC\uB41C \uAC1C\uC778\uC815\uBCF4 (${input.path}):`];
+    for (const f of findings) {
+      lines.push(`- ${f.type}: ${f.count}\uAC74 (\uC608: ${f.masked.join(", ")})`);
+    }
+    lines.push("\u203B \uB9C8\uC2A4\uD0B9\uB41C \uC608\uC2DC\uC774\uBA70 \uC6D0\uBB38 \uAC12\uC740 \uD45C\uC2DC\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uC678\uBD80 \uACF5\uC720 \uC804 \uD655\uC778\uD558\uC138\uC694.");
+    return lines.join("\n");
+  }
+};
 var MAX_PREVIEW_CHARS = 1e4;
-var writeNewDocumentSchema = z13.object({
-  path: z13.string().describe("\uC0DD\uC131\uD560 \uBB38\uC11C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  markdown: z13.string().describe("\uC0C8 \uBB38\uC11C \uB0B4\uC6A9 (\uB9C8\uD06C\uB2E4\uC6B4 \uD615\uC2DD)")
+var writeNewDocumentSchema = z14.object({
+  path: z14.string().describe("\uC0DD\uC131\uD560 \uBB38\uC11C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  markdown: z14.string().describe("\uC0C8 \uBB38\uC11C \uB0B4\uC6A9 (\uB9C8\uD06C\uB2E4\uC6B4 \uD615\uC2DD)")
 });
 var writeNewDocumentTool = {
   name: "write_new_document",
@@ -14483,7 +14645,7 @@ var writeNewDocumentTool = {
     ctx
   }) => {
     const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname12(safePath).toLowerCase();
+    const ext = extname13(safePath).toLowerCase();
     try {
       await stat6(safePath);
       return `\uC624\uB958: \uD30C\uC77C\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${input.path}. \uAE30\uC874 \uD30C\uC77C\uC744 \uC218\uC815\uD558\uB824\uBA74 propose_edit\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`;
@@ -14533,12 +14695,12 @@ ${preview}`,
     };
   }
 };
-var writeNewSpreadsheetSchema = z14.object({
-  path: z14.string().describe("\uC0DD\uC131\uD560 XLSX \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  sheets: z14.array(
-    z14.object({
-      name: z14.string().describe("\uC2DC\uD2B8 \uC774\uB984"),
-      rows: z14.array(z14.array(z14.string())).describe("\uD589 \uB370\uC774\uD130 \uBC30\uC5F4 (\uAC01 \uD589\uC740 \uC140 \uAC12 \uBC30\uC5F4)")
+var writeNewSpreadsheetSchema = z15.object({
+  path: z15.string().describe("\uC0DD\uC131\uD560 XLSX \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  sheets: z15.array(
+    z15.object({
+      name: z15.string().describe("\uC2DC\uD2B8 \uC774\uB984"),
+      rows: z15.array(z15.array(z15.string())).describe("\uD589 \uB370\uC774\uD130 \uBC30\uC5F4 (\uAC01 \uD589\uC740 \uC140 \uAC12 \uBC30\uC5F4)")
     })
   ).min(1).describe("\uC0DD\uC131\uD560 \uC2DC\uD2B8 \uBAA9\uB85D")
 });
@@ -14552,7 +14714,7 @@ var writeNewSpreadsheetTool = {
     ctx
   }) => {
     const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname13(safePath).toLowerCase();
+    const ext = extname14(safePath).toLowerCase();
     if (ext !== ".xlsx") {
       return `\uC624\uB958: write_new_spreadsheet\uC740 .xlsx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uD604\uC7AC \uD655\uC7A5\uC790: ${ext}.`;
     }
@@ -14612,6 +14774,7 @@ function createDocTools(_ctx) {
     listFilesTool,
     listBackupsTool,
     readFileTool,
+    scanPiiTool,
     proposeEditTool,
     proposeFormFillTool,
     proposeCellEditTool,
@@ -14711,6 +14874,14 @@ function createCliApprovalHandler() {
 
 // src/chat.ts
 var HELP_TEXT = `
+\uD560 \uC218 \uC788\uB294 \uC77C:
+  \u2022 \uBB38\uC11C \uC77D\uAE30\xB7\uC694\uC57D\xB7\uAC80\uD1A0 \u2014 .hwp/.hwpx/.docx/.xlsx/.pdf (\uC608: "\uC774 \uBCF4\uB3C4\uC790\uB8CC \uC694\uC57D\uD574\uC918")
+  \u2022 \uD45C\xB7\uC591\uC2DD \uC218\uC815 \u2014 \uC140 \uAC12, \uC591\uC2DD \uBE48\uCE78, \uD589\xB7\uC5F4 \uCD94\uAC00/\uC0AD\uC81C (\uC608: "\uC774 \uD45C\uC758 \uAE08\uC561\uC744 30000\uC73C\uB85C \uACE0\uCCD0\uC918")
+  \u2022 \uBB38\uC11C \uC804\uCCB4 \uCC3E\uAE30\xB7\uBC14\uAFB8\uAE30 (\uC608: "'\uAD6D\uBBFC\uC8FC\uAD8C'\uC744 '\uAD6D\uBBFC\uC911\uC2EC'\uC73C\uB85C \uB2E4 \uBC14\uAFD4\uC918")
+  \u2022 \uB418\uB3CC\uB9AC\uAE30 \u2014 \uC9C1\uC804 \uBCC0\uACBD\uC744 \uBC31\uC5C5\uC73C\uB85C \uBCF5\uC6D0 (\uC608: "\uBC29\uAE08 \uC218\uC815 \uB418\uB3CC\uB824\uC918")
+  \u2022 \uD55C\uAD6D \uBC95\uB839 \uAE30\uBC18 \uAC80\uD1A0 (\uC608: "\uC774 \uCDE8\uC5C5\uADDC\uCE59\uC774 \uADFC\uB85C\uAE30\uC900\uBC95\uC5D0 \uB9DE\uB294\uC9C0 \uBD10\uC918")
+  \u203B .hwp\uB294 \uD55C\uAE00\uC5D0\uC11C .hwpx\uB85C \uC800\uC7A5\uD55C \uD6C4 \uC218\uC815\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.
+
 \uC2AC\uB798\uC2DC \uBA85\uB839:
   /model   \u2014 \uD504\uB85C\uBC14\uC774\uB354/\uBAA8\uB378 \uC804\uD658
   /context \u2014 \uD604\uC7AC \uCEE8\uD14D\uC2A4\uD2B8 \uC0AC\uC6A9\uB7C9 \uD45C\uC2DC
@@ -14833,6 +15004,11 @@ async function runChat(opts) {
 
 `)
   );
+  process.stdout.write(
+    chalk2.dim(
+      '\uBB38\uC11C\uB97C \uC77D\uACE0 \uD45C\xB7\uC591\uC2DD \uC218\uC815, \uCC3E\uAE30\xB7\uBC14\uAFB8\uAE30, \uB418\uB3CC\uB9AC\uAE30\uAE4C\uC9C0 \uC790\uC5F0\uC5B4\uB85C \uC694\uCCAD\uD558\uC138\uC694. \uC608: "\uC774 \uD45C\uC758 \uD569\uACC4\uB97C \uB2E4\uC2DC \uACC4\uC0B0\uD574\uC918", "\uBC29\uAE08 \uC218\uC815 \uB418\uB3CC\uB824\uC918". \uC790\uC138\uD788: /help\n'
+    )
+  );
   while (true) {
     let clearActiveSpinner2 = function() {
       if (!sharedActiveInterval) return;
@@ -15426,10 +15602,10 @@ async function runOnboarding() {
 
 // src/update.ts
 import { spawn } from "child_process";
-import { mkdir as mkdir4, readFile as readFile12, writeFile as writeFile3 } from "fs/promises";
+import { mkdir as mkdir4, readFile as readFile13, writeFile as writeFile3 } from "fs/promises";
 import { dirname as dirname3 } from "path";
 function compareSemver(a, b) {
-  const parse6 = (v) => {
+  const parse7 = (v) => {
     const clean = v.replace(/^v/, "").split("-")[0] ?? "";
     const parts = clean.split(".").map((p) => {
       const n = parseInt(p, 10);
@@ -15437,8 +15613,8 @@ function compareSemver(a, b) {
     });
     return [parts[0] ?? 0, parts[1] ?? 0, parts[2] ?? 0];
   };
-  const [aMaj, aMin, aPat] = parse6(a);
-  const [bMaj, bMin, bPat] = parse6(b);
+  const [aMaj, aMin, aPat] = parse7(a);
+  const [bMaj, bMin, bPat] = parse7(b);
   if (aMaj !== bMaj) return aMaj < bMaj ? -1 : 1;
   if (aMin !== bMin) return aMin < bMin ? -1 : 1;
   if (aPat !== bPat) return aPat < bPat ? -1 : 1;
@@ -15447,7 +15623,7 @@ function compareSemver(a, b) {
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 async function readCache(cachePath) {
   try {
-    const raw = await readFile12(cachePath, "utf-8");
+    const raw = await readFile13(cachePath, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed !== null && typeof parsed === "object" && "checkedAt" in parsed && "latest" in parsed && typeof parsed.checkedAt === "string" && typeof parsed.latest === "string") {
       return parsed;
@@ -15730,7 +15906,9 @@ async function runSingleTurn(prompt) {
   });
   const tools = new ToolRegistry();
   for (const tool2 of createDocTools({ cwd })) {
-    tools.register(tool2);
+    const t = tool2;
+    if (t.requiresApproval) continue;
+    tools.register(t);
   }
   for (const mcpTool of mcpManager.getToolDefinitions()) {
     tools.register(mcpTool);