kordoc 4.0.7 → 4.1.0

package/dist/index.js

@@ -13,17 +13,19 @@ import {
   convertTableToText,
   dedupeRunningHeaders,
   flattenLayoutTables,
+  inlineImagesIntoMarkdown,
   isPathTraversal,
   mapPuaText,
   normalizeSectionHref,
   precheckZipSize,
+  sanitizeError,
   sanitizeHref,
   stripDtd,
   toArrayBuffer
-} from "./chunk-5OKHAJ62.js";
+} from "./chunk-4KI23VHA.js";
 import {
   parsePageRange
-} from "./chunk-AIQ3ISQU.js";
+} from "./chunk-GE43BE46.js";
 
 // src/index.ts
 import { readFile } from "fs/promises";
@@ -47,8 +49,11 @@ function parseLenientCfb(data) {
   const miniSectorSizeShift = data.readUInt16LE(32);
   if (miniSectorSizeShift > 16) throw new Error("\uC720\uD6A8\uD558\uC9C0 \uC54A\uC740 \uBBF8\uB2C8 \uC139\uD130 \uD06C\uAE30 \uC2DC\uD504\uD2B8: " + miniSectorSizeShift);
   const miniSectorSize = 1 << miniSectorSizeShift;
-  const fatSectorCount = data.readUInt32LE(44);
-  if (fatSectorCount > 1e4) throw new Error("FAT \uC139\uD130 \uC218\uAC00 \uB108\uBB34 \uB9CE\uC2B5\uB2C8\uB2E4: " + fatSectorCount);
+  const headerFatSectorCount = data.readUInt32LE(44);
+  if (headerFatSectorCount > 1e4) throw new Error("FAT \uC139\uD130 \uC218\uAC00 \uB108\uBB34 \uB9CE\uC2B5\uB2C8\uB2E4: " + headerFatSectorCount);
+  const maxRealSectors = Math.ceil(Math.max(0, data.length - 512) / sectorSize);
+  const maxFatSectors = Math.max(1, Math.ceil(maxRealSectors / (sectorSize / 4)));
+  const fatSectorCount = Math.min(headerFatSectorCount, maxFatSectors);
   const firstDirSector = data.readUInt32LE(48);
   const miniStreamCutoff = data.readUInt32LE(56);
   const firstMiniFatSector = data.readUInt32LE(60);
@@ -75,6 +80,7 @@ function parseLenientCfb(data) {
     if (visitedDifat.has(difatSector)) break;
     visitedDifat.add(difatSector);
     const buf = readSectorData(difatSector);
+    if (buf.length < sectorSize) break;
     const entriesPerSector = sectorSize / 4 - 1;
     for (let i = 0; i < entriesPerSector && fatSectors.length < fatSectorCount; i++) {
       const sid = buf.readUInt32LE(i * 4);
@@ -393,6 +399,12 @@ function comResultToParseResult(pages, pageCount, warnings) {
 import { DOMParser } from "@xmldom/xmldom";
 var MAX_DECOMPRESS_SIZE = 100 * 1024 * 1024;
 var MAX_ZIP_ENTRIES = 500;
+var ZipBombError = class extends KordocError {
+  constructor(message) {
+    super(message);
+    this.name = "ZipBombError";
+  }
+};
 function clampSpan(val, max) {
   return Math.max(1, Math.min(val, max));
 }
@@ -428,14 +440,15 @@ function findChildByLocalName(parent, name) {
   }
   return null;
 }
-function extractTextFromNode(node) {
+function extractTextFromNode(node, depth = 0) {
   let result = "";
+  if (depth > MAX_XML_DEPTH) return result;
   const children = node.childNodes;
   if (!children) return result;
   for (let i = 0; i < children.length; i++) {
     const child = children[i];
     if (child.nodeType === 3) result += child.textContent || "";
-    else if (child.nodeType === 1) result += extractTextFromNode(child);
+    else if (child.nodeType === 1) result += extractTextFromNode(child, depth + 1);
   }
   return result.trim();
 }
@@ -1319,7 +1332,7 @@ function simulateWrap(text, firstWidth, contWidth, height, ratioPct, mode = "kee
     for (const ch of text.slice(from, to)) w += charW2(ch);
     return w;
   };
-  const units = text.match(mode === "keep" ? / +|[^ ]+/g : / +|[^ ]/g) ?? [];
+  const units = text.match(mode === "keep" ? / +|[^ ]+/gu : / +|[^ ]/gu) ?? [];
   const starts = [0];
   let lineW = 0;
   let avail = firstWidth;
@@ -1788,6 +1801,7 @@ function toRoman(n) {
   return out;
 }
 function formatHeadNumber(n, numFormat) {
+  if (n === 0 && numFormat === "DIGIT") return "0";
   if (n <= 0) n = 1;
   switch (numFormat) {
     case "DIGIT":
@@ -1845,25 +1859,25 @@ function resolveParaHeading(paraEl, ctx) {
   if (!numDef) return headingLevel ? { headingLevel } : null;
   let counters = ctx.shared.numState.get(numId);
   if (!counters) {
-    counters = new Array(11).fill(0);
+    counters = new Array(11).fill(-1);
     ctx.shared.numState.set(numId, counters);
   }
   const head = numDef.heads.get(level);
-  counters[level] = counters[level] === 0 ? head?.start ?? 1 : counters[level] + 1;
-  for (let l = level + 1; l <= 10; l++) counters[l] = 0;
+  counters[level] = counters[level] < 0 ? head?.start ?? 1 : counters[level] + 1;
+  for (let l = level + 1; l <= 10; l++) counters[l] = -1;
   const fmtText = head ? head.text.trim() : `^${level}.`;
   const prefix = fmtText.replace(/\^(10|[1-9])/g, (_, d) => {
     const lv = parseInt(d, 10);
     const refHead = numDef.heads.get(lv);
-    const n = counters[lv] || refHead?.start || 1;
+    const n = counters[lv] >= 0 ? counters[lv] : refHead?.start ?? 1;
     return formatHeadNumber(n, refHead?.numFormat || "DIGIT");
   });
   return { prefix: prefix || void 0, headingLevel };
 }
 
 // src/hwpx/table-build.ts
-function buildTableWithCellMeta(state) {
-  const table2 = buildTable(state.rows);
+function buildTableWithCellMeta(state, keepAnchoredEmptyCols) {
+  const table2 = buildTable(state.rows, { keepAnchoredEmptyCols });
   if (state.caption) table2.caption = state.caption;
   const anchors = [];
   {
@@ -1927,7 +1941,7 @@ function completeTable(newTable, tableStack, blocks, ctx) {
     if (newTable.caption) blocks.push({ type: "paragraph", text: newTable.caption, pageNumber: ctx.sectionNum });
     return parentTable;
   }
-  const ir = buildTableWithCellMeta(newTable);
+  const ir = buildTableWithCellMeta(newTable, ctx.shared.keepTrailingEmptyCols);
   const block = { type: "table", table: ir, pageNumber: ctx.sectionNum };
   if (parentTable?.cell) {
     const cell2 = parentTable.cell;
@@ -1961,7 +1975,8 @@ function parseSectionXml(xml, styleMap, warnings, sectionNum, shared) {
   walkSection(doc.documentElement, blocks, null, [], ctx);
   return blocks;
 }
-function extractImageRef(el) {
+function extractImageRef(el, depth = 0) {
+  if (depth > MAX_XML_DEPTH) return null;
   const children = el.childNodes;
   if (!children) return null;
   for (let i = 0; i < children.length; i++) {
@@ -1972,7 +1987,7 @@ function extractImageRef(el) {
       const ref = child.getAttribute("binaryItemIDRef") || child.getAttribute("href") || "";
       if (ref) return ref;
     }
-    const nested = extractImageRef(child);
+    const nested = extractImageRef(child, depth + 1);
     if (nested) return nested;
   }
   const directRef = el.getAttribute("binaryItemIDRef") || "";
@@ -2079,7 +2094,7 @@ function walkSection(node, blocks, tableCtx, tableStack, ctx, depth = 0) {
             ;
             (cell2.blocks ??= []).push(cellBlock);
           } else if (!tableCtx) {
-            if (/^─{10,}$/.test(text)) {
+            if (ctx.shared.kordocLayout && /^─{10,}$/.test(text)) {
               blocks.push({ type: "separator", pageNumber: ctx.sectionNum });
               tableCtx = walkParagraphChildren(el, blocks, tableCtx, tableStack, ctx, depth + 1);
               break;
@@ -2355,8 +2370,8 @@ function extractDrawTextBlocks(drawTextNode, blocks, ctx) {
       } else {
         const info = extractParagraphInfo(child, ctx.styleMap, ctx);
         let text = info.text.trim();
+        const ph = resolveParaHeading(child, ctx);
         if (text) {
-          const ph = resolveParaHeading(child, ctx);
           if (ph?.prefix) text = ph.prefix + " " + text;
           const block = { type: "paragraph", text, style: info.style ?? void 0, pageNumber: ctx.sectionNum };
           if (info.href) block.href = info.href;
@@ -2469,7 +2484,8 @@ function extractParagraphInfo(para2, styleMap, ctx) {
       }
     }
   };
-  const walk = (node) => {
+  const walk = (node, depth = 0) => {
+    if (depth > MAX_XML_DEPTH) return;
     const children = node.childNodes;
     if (!children) return;
     for (let i = 0; i < children.length; i++) {
@@ -2490,7 +2506,7 @@ function extractParagraphInfo(para2, styleMap, ctx) {
       const tag = (child.tagName || child.localName || "").replace(/^[^:]+:/, "");
       switch (tag) {
         case "t":
-          walk(child);
+          walk(child, depth + 1);
           break;
         // 자식 순회 (tab 등 하위 요소 처리)
         case "tab": {
@@ -2523,7 +2539,7 @@ function extractParagraphInfo(para2, styleMap, ctx) {
             const safe = sanitizeHref(url);
             if (safe) href = safe;
           }
-          walk(child);
+          walk(child, depth + 1);
           break;
         }
         // 각주/미주
@@ -2594,11 +2610,11 @@ function extractParagraphInfo(para2, styleMap, ctx) {
         case "r": {
           const runCharPr = child.getAttribute("charPrIDRef");
           if (runCharPr && !charPrId) charPrId = runCharPr;
-          walk(child);
+          walk(child, depth + 1);
           break;
         }
         default:
-          walk(child);
+          walk(child, depth + 1);
           break;
       }
     }
@@ -2609,7 +2625,7 @@ function extractParagraphInfo(para2, styleMap, ctx) {
   let cleanText = text.replace(/[ \t]+/g, " ").trim();
   if (/^그림입니다\.?\s*원본\s*그림의\s*(이름|크기)/.test(cleanText)) cleanText = "";
   cleanText = cleanText.replace(/그림입니다\.?\s*원본\s*그림의\s*(이름|크기)[^\n]*(\n[^\n]*원본\s*그림의\s*(이름|크기)[^\n]*)*/g, "").trim();
-  cleanText = cleanText.replace(/(?:모서리가 둥근 |둥근 )?(?:사각형|직사각형|정사각형|원|타원|삼각형|선|직선|곡선|화살표|오각형|육각형|팔각형|별|십자|구름|마름모|도넛|평행사변형|사다리꼴|개체|그리기\s?개체|묶음\s?개체|글상자|표|그림|OLE\s?개체)\s?입니다\.?/g, "").trim();
+  cleanText = cleanText.replace(/^(?:모서리가 둥근 |둥근 )?(?:사각형|직사각형|정사각형|원|타원|삼각형|선|직선|곡선|화살표|오각형|육각형|팔각형|별|십자|구름|마름모|도넛|평행사변형|사다리꼴|개체|그리기\s?개체|묶음\s?개체|글상자|표|그림|OLE\s?개체)\s?입니다\.?$/gm, "").trim();
   let style;
   if (styleMap && charPrId) {
     const charProp = styleMap.charProperties.get(charPrId);
@@ -2711,628 +2727,805 @@ function gongmunDepthFromIndent(para2, left, ctx) {
   return depth >= 1 && depth < 8 ? depth : null;
 }
 
-// src/hwpx/images.ts
-function imageExtToMime(ext) {
-  switch (ext.toLowerCase()) {
-    case "jpg":
-    case "jpeg":
-      return "image/jpeg";
-    case "png":
-      return "image/png";
-    case "gif":
-      return "image/gif";
-    case "bmp":
-      return "image/bmp";
-    case "tif":
-    case "tiff":
-      return "image/tiff";
-    case "wmf":
-      return "image/wmf";
-    case "emf":
-      return "image/emf";
-    case "svg":
-      return "image/svg+xml";
-    default:
-      return "application/octet-stream";
+// src/hwp5/record.ts
+import { inflateRawSync, inflateSync } from "zlib";
+var TAG_PARA_HEADER = 66;
+var TAG_PARA_TEXT = 67;
+var TAG_CHAR_SHAPE = 68;
+var TAG_CTRL_HEADER = 71;
+var TAG_LIST_HEADER = 72;
+var TAG_TABLE = 77;
+var TAG_SHAPE_COMPONENT = 76;
+var TAG_SHAPE_COMPONENT_PICTURE = 85;
+var TAG_SHAPE_COMPONENT_CONTAINER = 86;
+var TAG_EQEDIT = 88;
+var TAG_BIN_DATA = 18;
+var TAG_DOC_CHAR_SHAPE = 21;
+var TAG_NUMBERING = 23;
+var TAG_BULLET = 24;
+var TAG_DOC_PARA_SHAPE = 25;
+var TAG_DOC_STYLE = 26;
+var CHAR_LINE = 0;
+var CHAR_SECTION_BREAK = 10;
+var CHAR_PARA = 13;
+var CHAR_TAB = 9;
+var CHAR_HYPHEN = 24;
+var CHAR_NBSP = 30;
+var CHAR_FIXED_WIDTH = 31;
+var FLAG_COMPRESSED = 1 << 0;
+var FLAG_ENCRYPTED = 1 << 1;
+var FLAG_DISTRIBUTION = 1 << 2;
+var FLAG_DRM = 1 << 4;
+var MAX_RECORDS = 5e5;
+function readRecords(data) {
+  const records = [];
+  let offset = 0;
+  while (offset + 4 <= data.length && records.length < MAX_RECORDS) {
+    const header = data.readUInt32LE(offset);
+    offset += 4;
+    const tagId = header & 1023;
+    const level = header >> 10 & 1023;
+    let size = header >> 20 & 4095;
+    if (size === 4095) {
+      if (offset + 4 > data.length) break;
+      size = data.readUInt32LE(offset);
+      offset += 4;
+    }
+    if (offset + size > data.length) break;
+    records.push({ tagId, level, size, data: data.subarray(offset, offset + size) });
+    offset += size;
   }
+  return records;
 }
-function mimeToExt(mime) {
-  if (mime.includes("jpeg")) return "jpg";
-  if (mime.includes("png")) return "png";
-  if (mime.includes("gif")) return "gif";
-  if (mime.includes("bmp")) return "bmp";
-  if (mime.includes("tiff")) return "tif";
-  if (mime.includes("wmf")) return "wmf";
-  if (mime.includes("emf")) return "emf";
-  if (mime.includes("svg")) return "svg";
-  return "bin";
-}
-function collectImageBlocks(blocks, out, ownerCell, depth = 0) {
-  if (depth > MAX_XML_DEPTH) return;
-  for (const block of blocks) {
-    if (block.type === "image") {
-      out.push({ block, ownerCell });
-    } else if (block.type === "table" && block.table) {
-      for (const row of block.table.cells) {
-        for (const cell2 of row) {
-          if (cell2.blocks?.length) collectImageBlocks(cell2.blocks, out, cell2, depth + 1);
-        }
-      }
+var MAX_DECOMPRESS_SIZE2 = 100 * 1024 * 1024;
+function decompressStream(data) {
+  const opts = { maxOutputLength: MAX_DECOMPRESS_SIZE2 };
+  if (data.length >= 2 && data[0] === 120) {
+    try {
+      return inflateSync(data, opts);
+    } catch {
     }
   }
+  return inflateRawSync(data, opts);
 }
-async function extractImagesFromZip(zip, blocks, decompressed, warnings) {
-  const images = [];
-  let imageIndex = 0;
-  const imageBlocks = [];
-  collectImageBlocks(blocks, imageBlocks);
-  const resolved = /* @__PURE__ */ new Map();
-  for (const { block, ownerCell } of imageBlocks) {
-    if (block.type !== "image" || !block.text) continue;
-    const ref = block.text;
-    let img = resolved.get(ref);
-    if (img === void 0) {
-      img = null;
-      const candidates = [
-        `BinData/${ref}`,
-        `Contents/BinData/${ref}`,
-        ref
-        // 절대 경로일 수도 있음
-      ];
-      let resolvedPath = null;
-      if (!ref.includes(".")) {
-        const prefixes = [`BinData/${ref}`, `Contents/BinData/${ref}`];
-        for (const prefix of prefixes) {
-          const match = zip.file(new RegExp(`^${prefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\.[a-zA-Z0-9]+$`));
-          if (match.length > 0) {
-            resolvedPath = match[0].name;
-            break;
-          }
+function parseFileHeader(data) {
+  if (data.length < 40) throw new KordocError("FileHeader\uAC00 \uB108\uBB34 \uC9E7\uC2B5\uB2C8\uB2E4 (\uCD5C\uC18C 40\uBC14\uC774\uD2B8)");
+  const sig = data.subarray(0, 32).toString("utf8").replace(/\0+$/, "");
+  return {
+    signature: sig,
+    versionMajor: data[35],
+    flags: data.readUInt32LE(36)
+  };
+}
+function readHwpString(data, offset) {
+  if (offset + 2 > data.length) return { value: "", next: data.length };
+  const len = data.readUInt16LE(offset);
+  const start = offset + 2;
+  const end = start + len * 2;
+  if (len === 0 || end > data.length) return { value: "", next: start };
+  return { value: data.subarray(start, end).toString("utf16le"), next: end };
+}
+function parseDocInfo(records) {
+  const charShapes = [];
+  const paraShapes = [];
+  const styles = [];
+  const binData = [];
+  const numberings = [];
+  const bullets = [];
+  for (const rec of records) {
+    if (rec.tagId === TAG_DOC_PARA_SHAPE && rec.data.length >= 4) {
+      const attr1 = rec.data.readUInt32LE(0);
+      const headType = attr1 >>> 23 & 3;
+      const paraLevel = attr1 >>> 25 & 7;
+      const numberingId = rec.data.length >= 32 ? rec.data.readUInt16LE(30) : 0;
+      paraShapes.push({ headType, paraLevel, numberingId });
+    }
+    if (rec.tagId === TAG_BIN_DATA && rec.data.length >= 2) {
+      const attr = rec.data.readUInt16LE(0);
+      const typeBits = attr & 15;
+      if (typeBits === 0) {
+        binData.push({ kind: "link", storageId: 0, extension: "" });
+      } else {
+        const storageId = rec.data.length >= 4 ? rec.data.readUInt16LE(2) : 0;
+        const { value: extension } = readHwpString(rec.data, 4);
+        binData.push({ kind: typeBits === 2 ? "storage" : "embed", storageId, extension });
+      }
+    }
+    if (rec.tagId === TAG_NUMBERING && rec.data.length >= 14) {
+      const levelFormats = [];
+      const numberFormats = [];
+      const startNumbers = [1, 1, 1, 1, 1, 1, 1];
+      let offset = 0;
+      for (let level = 0; level < 7; level++) {
+        if (offset + 12 > rec.data.length) {
+          levelFormats.push("");
+          numberFormats.push(0);
+          continue;
         }
+        const attr = rec.data.readUInt32LE(offset);
+        numberFormats.push(attr >>> 5 & 15);
+        offset += 12;
+        const { value, next } = readHwpString(rec.data, offset);
+        levelFormats.push(value);
+        offset = next;
       }
-      const allCandidates = resolvedPath ? [resolvedPath, ...candidates] : candidates;
-      for (const path of allCandidates) {
-        if (isPathTraversal(path)) continue;
-        const file = zip.file(path);
-        if (!file) continue;
-        try {
-          const data = await file.async("uint8array");
-          decompressed.total += data.length;
-          if (decompressed.total > MAX_DECOMPRESS_SIZE) throw new KordocError("ZIP \uC555\uCD95 \uD574\uC81C \uD06C\uAE30 \uCD08\uACFC (ZIP bomb \uC758\uC2EC)");
-          const ext = path.includes(".") ? path.split(".").pop() || "png" : "png";
-          const mimeType = imageExtToMime(ext);
-          imageIndex++;
-          const filename = `image_${String(imageIndex).padStart(3, "0")}.${mimeToExt(mimeType)}`;
-          img = { filename, data, mimeType };
-          images.push(img);
-          break;
-        } catch (err) {
-          if (err instanceof KordocError) throw err;
+      let baseStart = 1;
+      if (offset + 2 <= rec.data.length) {
+        baseStart = rec.data.readUInt16LE(offset) || 1;
+        offset += 2;
+      }
+      for (let level = 0; level < 7; level++) {
+        if (offset + 4 <= rec.data.length) {
+          startNumbers[level] = rec.data.readUInt32LE(offset) || 1;
+          offset += 4;
+        } else {
+          startNumbers[level] = baseStart;
         }
       }
-      if (!img) warnings?.push({ page: block.pageNumber, message: `\uC774\uBBF8\uC9C0 \uD30C\uC77C \uC5C6\uC74C: ${ref}`, code: "SKIPPED_IMAGE" });
-      resolved.set(ref, img);
+      numberings.push({ levelFormats, numberFormats, startNumbers });
     }
-    if (!img) {
-      block.type = "paragraph";
-      block.text = `[\uC774\uBBF8\uC9C0: ${ref}]`;
-      if (ownerCell) ownerCell.text = ownerCell.text.replace(`![image](${ref})`, `[\uC774\uBBF8\uC9C0: ${ref}]`);
-      continue;
+    if (rec.tagId === TAG_BULLET && rec.data.length >= 14) {
+      const code = rec.data.readUInt16LE(12);
+      bullets.push({ char: code > 0 ? String.fromCharCode(code) : "\u2022" });
     }
-    block.text = img.filename;
-    block.imageData = { data: img.data, mimeType: img.mimeType, filename: ref };
-    if (ownerCell) ownerCell.text = ownerCell.text.replace(`![image](${ref})`, `![image](${img.filename})`);
-  }
-  return images;
-}
-
-// src/hwpx/metadata.ts
-import JSZip2 from "jszip";
-
-// src/hwpx/zip-sections.ts
-import { inflateRawSync } from "zlib";
-function extractFromBrokenZip(buffer) {
-  const data = new Uint8Array(buffer);
-  const view = new DataView(buffer);
-  let pos = 0;
-  const blocks = [];
-  const warnings = [
-    { code: "BROKEN_ZIP_RECOVERY", message: "\uC190\uC0C1\uB41C ZIP \uAD6C\uC870 \u2014 Local File Header \uAE30\uBC18 \uBCF5\uAD6C \uBAA8\uB4DC" }
-  ];
-  let totalDecompressed = 0;
-  let entryCount = 0;
-  let sectionNum = 0;
-  const shared = createSectionShared();
-  while (pos < data.length - 30) {
-    if (data[pos] !== 80 || data[pos + 1] !== 75 || data[pos + 2] !== 3 || data[pos + 3] !== 4) {
-      pos++;
-      while (pos < data.length - 30) {
-        if (data[pos] === 80 && data[pos + 1] === 75 && data[pos + 2] === 3 && data[pos + 3] === 4) break;
-        pos++;
+    if (rec.tagId === TAG_DOC_CHAR_SHAPE && rec.data.length >= 18) {
+      if (rec.data.length >= 50) {
+        const fontSize = rec.data.readUInt32LE(42);
+        const attrFlags = rec.data.readUInt32LE(46);
+        charShapes.push({ fontSize, attrFlags });
+      } else {
+        charShapes.push({ fontSize: 0, attrFlags: 0 });
       }
-      continue;
     }
-    if (++entryCount > MAX_ZIP_ENTRIES) break;
-    const method = view.getUint16(pos + 8, true);
-    const compSize = view.getUint32(pos + 18, true);
-    const nameLen = view.getUint16(pos + 26, true);
-    const extraLen = view.getUint16(pos + 28, true);
-    if (nameLen > 1024 || extraLen > 65535) {
-      pos += 30 + nameLen + extraLen;
-      continue;
-    }
-    const fileStart = pos + 30 + nameLen + extraLen;
-    if (fileStart + compSize > data.length) break;
-    if (compSize === 0 && method !== 0) {
-      pos = fileStart;
-      continue;
-    }
-    const nameBytes = data.slice(pos + 30, pos + 30 + nameLen);
-    const name = new TextDecoder().decode(nameBytes);
-    if (isPathTraversal(name)) {
-      pos = fileStart + compSize;
-      continue;
-    }
-    const fileData = data.slice(fileStart, fileStart + compSize);
-    pos = fileStart + compSize;
-    if (!name.toLowerCase().includes("section") || !name.endsWith(".xml")) continue;
-    try {
-      let content;
-      if (method === 0) {
-        content = new TextDecoder().decode(fileData);
-      } else if (method === 8) {
-        const decompressed = inflateRawSync(Buffer.from(fileData), { maxOutputLength: MAX_DECOMPRESS_SIZE });
-        content = new TextDecoder().decode(decompressed);
-      } else {
-        continue;
+    if (rec.tagId === TAG_DOC_STYLE && rec.data.length >= 8) {
+      try {
+        let offset = 0;
+        const nameLen = rec.data.readUInt16LE(offset);
+        offset += 2;
+        const nameBytes = nameLen * 2;
+        const name = nameBytes > 0 && offset + nameBytes <= rec.data.length ? rec.data.subarray(offset, offset + nameBytes).toString("utf16le") : "";
+        offset += nameBytes;
+        let nameKo = "";
+        if (offset + 2 <= rec.data.length) {
+          const nameKoLen = rec.data.readUInt16LE(offset);
+          offset += 2;
+          const nameKoBytes = nameKoLen * 2;
+          if (nameKoBytes > 0 && offset + nameKoBytes <= rec.data.length) {
+            nameKo = rec.data.subarray(offset, offset + nameKoBytes).toString("utf16le");
+          }
+          offset += nameKoBytes;
+        }
+        const type = offset < rec.data.length ? rec.data.readUInt8(offset) : 0;
+        offset += 1;
+        offset += 1;
+        offset += 2;
+        const paraShapeId = offset + 2 <= rec.data.length ? rec.data.readUInt16LE(offset) : 0;
+        offset += 2;
+        const charShapeId = offset + 2 <= rec.data.length ? rec.data.readUInt16LE(offset) : 0;
+        styles.push({ name, nameKo, charShapeId, paraShapeId, type });
+      } catch {
       }
-      totalDecompressed += content.length * 2;
-      if (totalDecompressed > MAX_DECOMPRESS_SIZE) throw new KordocError("\uC555\uCD95 \uD574\uC81C \uD06C\uAE30 \uCD08\uACFC");
-      sectionNum++;
-      blocks.push(...parseSectionXml(content, void 0, warnings, sectionNum, shared));
-    } catch {
-      continue;
     }
   }
-  if (blocks.length === 0) throw new KordocError("\uC190\uC0C1\uB41C HWPX\uC5D0\uC11C \uC139\uC158 \uB370\uC774\uD130\uB97C \uBCF5\uAD6C\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4");
-  applyPageText(blocks, shared);
-  const markdown = blocksToMarkdown(blocks);
-  return { markdown, blocks, warnings: warnings.length > 0 ? warnings : void 0 };
+  return { charShapes, paraShapes, styles, binData, numberings, bullets };
 }
-async function readKordocLayout(zip) {
-  const file = zip.file("Contents/content.hpf") ?? zip.file("content.hpf");
-  if (!file) return null;
-  try {
-    const xml = await file.async("text");
-    if (!/<opf:meta\b[^>]*name="generator"[^>]*content="kordoc"/.test(xml)) return null;
-    return xml.match(/<opf:meta\b[^>]*name="kordoc-layout"[^>]*content="([^"]*)"/)?.[1] ?? null;
-  } catch {
-    return null;
-  }
+function createParaTextState() {
+  return { text: "", ctrlIdx: 0, fieldStack: [], fieldRanges: [] };
 }
-async function resolveSectionPaths(zip) {
-  const manifestPaths = ["Contents/content.hpf", "content.hpf"];
-  for (const mp of manifestPaths) {
-    const mpLower = mp.toLowerCase();
-    const file = zip.file(mp) || Object.values(zip.files).find((f) => f.name.toLowerCase() === mpLower) || null;
-    if (!file) continue;
-    const xml = await file.async("text");
-    const paths = parseSectionPathsFromManifest(xml);
-    if (paths.length > 0) return paths;
-  }
-  const sectionFiles = zip.file(/[Ss]ection\d+\.xml$/);
-  return sectionFiles.map((f) => f.name).sort(compareSectionPaths);
+function isExtendedOnlyCtrlChar(ch) {
+  return ch >= 1 && ch <= 3 || ch >= 11 && ch <= 12 || ch >= 14 && ch <= 18 || ch >= 21 && ch <= 23;
 }
-function parseSectionPathsFromManifest(xml) {
-  const parser = createXmlParser();
-  const doc = parser.parseFromString(stripDtd(xml), "text/xml");
-  const items = doc.getElementsByTagName("opf:item");
-  const spine = doc.getElementsByTagName("opf:itemref");
-  const idToHref = /* @__PURE__ */ new Map();
-  for (let i = 0; i < items.length; i++) {
-    const item = items[i];
-    const id = item.getAttribute("id") || "";
-    const href = normalizeSectionHref(item.getAttribute("href") || "");
-    if (id && href) idToHref.set(id, href);
-  }
-  if (spine.length > 0) {
-    const ordered = [];
-    for (let i = 0; i < spine.length; i++) {
-      const href = idToHref.get(spine[i].getAttribute("idref") || "");
-      if (href) ordered.push(href);
+function appendParaText(state, data, resolveControl) {
+  let result = "";
+  let i = 0;
+  const base = state.text.length;
+  const resolveAt = (byteOffset, extended) => {
+    const ctrlId = data.readUInt32LE(byteOffset);
+    const idx = extended ? state.ctrlIdx : -1;
+    const replacement = resolveControl?.(idx, ctrlId);
+    if (replacement) result += replacement;
+    if (extended) state.ctrlIdx++;
+  };
+  while (i + 1 < data.length) {
+    const ch = data.readUInt16LE(i);
+    i += 2;
+    switch (ch) {
+      // ── char 타입 (2바이트만, 확장 데이터 없음) ──
+      case CHAR_LINE:
+        result += "\n";
+        break;
+      case CHAR_SECTION_BREAK: {
+        if (i + 16 <= data.length && data.readUInt16LE(i) === 11) {
+          resolveAt(i + 2, true);
+          i += 16;
+          break;
+        }
+        result += "\n";
+        break;
+      }
+      case CHAR_PARA:
+        break;
+      // 문단 끝
+      case CHAR_HYPHEN:
+        result += "-";
+        break;
+      case CHAR_NBSP:
+        result += "\xA0";
+        break;
+      // 진짜 NBSP
+      case CHAR_FIXED_WIDTH:
+        result += " ";
+        break;
+      // 고정폭 공백
+      // ── inline 타입 (2바이트 + 14바이트 확장) ──
+      case CHAR_TAB:
+        result += "	";
+        if (i + 14 <= data.length) i += 14;
+        break;
+      default:
+        if (ch >= 1 && ch <= 31) {
+          const isExtended = isExtendedOnlyCtrlChar(ch);
+          const isInline = ch >= 4 && ch <= 9 || ch >= 19 && ch <= 20;
+          if ((isExtended || isInline) && i + 14 <= data.length) {
+            if (ch === 3) {
+              state.fieldStack.push({ start: base + result.length, ctrlIdx: state.ctrlIdx });
+            } else if (ch === 4) {
+              const open = state.fieldStack.pop();
+              if (open) {
+                state.fieldRanges.push({ start: open.start, end: base + result.length, ctrlIdx: open.ctrlIdx });
+              }
+            }
+            resolveAt(i, isExtended);
+            i += 14;
+          }
+        } else if (ch >= 32) {
+          if (ch >= 55296 && ch <= 56319 && i + 1 < data.length) {
+            const lo = data.readUInt16LE(i);
+            if (lo >= 56320 && lo <= 57343) {
+              i += 2;
+              const codePoint = (ch - 55296 << 10) + (lo - 56320) + 65536;
+              result += String.fromCodePoint(codePoint);
+              break;
+            }
+          }
+          result += String.fromCharCode(ch);
+        }
+        break;
     }
-    if (ordered.length > 0) return ordered;
   }
-  return Array.from(idToHref.values()).sort(compareSectionPaths);
+  state.text += result;
+}
+function extractEquationText(data) {
+  if (data.length < 6) return null;
+  const scriptLength = data.readUInt16LE(4);
+  const scriptStart = 6;
+  const scriptEnd = scriptStart + scriptLength * 2;
+  if (scriptLength <= 0 || scriptEnd > data.length) return null;
+  const equation = data.subarray(scriptStart, scriptEnd).toString("utf16le").replace(/\0+/g, "").trim();
+  return equation || null;
 }
 
-// src/hwpx/metadata.ts
-async function extractHwpxMetadata(zip, metadata, decompressed) {
+// src/hwp5/images.ts
+function detectImageMime(data) {
+  if (data.length < 4) return null;
+  if (data[0] === 137 && data[1] === 80 && data[2] === 78 && data[3] === 71) return "image/png";
+  if (data[0] === 255 && data[1] === 216 && data[2] === 255) return "image/jpeg";
+  if (data[0] === 71 && data[1] === 73 && data[2] === 70) return "image/gif";
+  if (data[0] === 66 && data[1] === 77) return "image/bmp";
+  if (data[0] === 215 && data[1] === 205 && data[2] === 198 && data[3] === 154) return "image/wmf";
+  if (data[0] === 1 && data[1] === 0 && data[2] === 0 && data[3] === 0) return "image/emf";
+  return null;
+}
+function normalizeBinPayload(data) {
+  if (detectImageMime(data)) return data;
   try {
-    const metaPaths = ["meta.xml", "META-INF/meta.xml", "docProps/core.xml"];
-    for (const mp of metaPaths) {
-      const file = zip.file(mp) || Object.values(zip.files).find((f) => f.name.toLowerCase() === mp.toLowerCase()) || null;
-      if (!file) continue;
-      const xml = await file.async("text");
-      if (decompressed) {
-        decompressed.total += xml.length * 2;
-        if (decompressed.total > MAX_DECOMPRESS_SIZE) throw new KordocError("ZIP \uC555\uCD95 \uD574\uC81C \uD06C\uAE30 \uCD08\uACFC (ZIP bomb \uC758\uC2EC)");
-      }
-      parseDublinCoreMetadata(xml, metadata);
-      if (metadata.title || metadata.author) return;
-    }
+    const inflated = decompressStream(data);
+    if (inflated.length > 0) return inflated;
   } catch {
   }
+  return data;
 }
-function parseDublinCoreMetadata(xml, metadata) {
-  const parser = createXmlParser();
-  const doc = parser.parseFromString(stripDtd(xml), "text/xml");
-  if (!doc.documentElement) return;
-  const getText = (tagNames) => {
-    for (const tag of tagNames) {
-      const els = doc.getElementsByTagName(tag);
-      if (els.length > 0) {
-        const text = els[0].textContent?.trim();
-        if (text) return text;
+var BIN_ENTRY_RE = /(?:^|\/)BIN([0-9A-Fa-f]{4,8})(?:\.[^./\\]*)?$/;
+function collectImageBlocks(blocks, out) {
+  for (const b of blocks) {
+    if (b.type === "image") out.push(b);
+    if (b.table) {
+      for (const row of b.table.cells) {
+        for (const cell2 of row) {
+          if (cell2.blocks) collectImageBlocks(cell2.blocks, out);
+        }
       }
     }
-    return void 0;
-  };
-  metadata.title = metadata.title || getText(["dc:title", "title"]);
-  metadata.author = metadata.author || getText(["dc:creator", "creator", "cp:lastModifiedBy"]);
-  metadata.description = metadata.description || getText(["dc:description", "description", "dc:subject", "subject"]);
-  metadata.createdAt = metadata.createdAt || getText(["dcterms:created", "meta:creation-date"]);
-  metadata.modifiedAt = metadata.modifiedAt || getText(["dcterms:modified", "meta:date"]);
-  const keywords = getText(["dc:keyword", "cp:keywords", "meta:keyword"]);
-  if (keywords && !metadata.keywords) {
-    metadata.keywords = keywords.split(/[,;]/).map((k) => k.trim()).filter(Boolean);
+    if (b.children) collectImageBlocks(b.children, out);
   }
 }
-
-// src/hwpx/parser.ts
-async function parseHwpxDocument(buffer, options) {
-  precheckZipSize(buffer, MAX_DECOMPRESS_SIZE, MAX_ZIP_ENTRIES);
-  let zip;
-  try {
-    zip = await JSZip3.loadAsync(buffer);
-  } catch {
-    return extractFromBrokenZip(buffer);
-  }
-  const actualEntryCount = Object.keys(zip.files).length;
-  if (actualEntryCount > MAX_ZIP_ENTRIES) {
-    throw new KordocError("ZIP \uC5D4\uD2B8\uB9AC \uC218 \uCD08\uACFC (ZIP bomb \uC758\uC2EC)");
+function forEachTableCell(blocks, fn) {
+  for (const b of blocks) {
+    if (b.table) {
+      for (const row of b.table.cells) {
+        for (const cell2 of row) {
+          fn(cell2);
+          if (cell2.blocks) forEachTableCell(cell2.blocks, fn);
+        }
+      }
+    }
+    if (b.children) forEachTableCell(b.children, fn);
   }
-  const manifestFile = zip.file("META-INF/manifest.xml");
-  if (manifestFile) {
-    const manifestXml = await manifestFile.async("text");
-    if (isEncryptedHwpx(manifestXml)) {
-      if (isComFallbackAvailable() && options?.filePath) {
-        const { pages, pageCount, warnings: warnings2 } = extractTextViaCom(options.filePath);
-        if (pages.some((p) => p && p.trim().length > 0)) {
-          return comResultToParseResult(pages, pageCount, warnings2);
+}
+var CELL_IMAGE_SENTINEL_RE = /!\[image\]\(hwp5bin:(\d+)\)/g;
+function resolveCellImageSentinels(blocks, renamed) {
+  forEachTableCell(blocks, (cell2) => {
+    if (!cell2.text.includes("hwp5bin:")) return;
+    cell2.text = cell2.text.replace(CELL_IMAGE_SENTINEL_RE, (_m, idStr) => {
+      const filename = renamed.get(Number(idStr));
+      return filename ? `![image](${filename})` : "[\uC774\uBBF8\uC9C0]";
+    });
+  });
+}
+function resolveImageBlocks(binDataMap, blocks, warnings, sweepUnreferenced) {
+  const imageBlocks = [];
+  collectImageBlocks(blocks, imageBlocks);
+  const images = [];
+  const renamed = /* @__PURE__ */ new Map();
+  const resolved = /* @__PURE__ */ new Map();
+  let imageIndex = 0;
+  for (const block of imageBlocks) {
+    if (!block.text) continue;
+    const storageId = parseInt(block.text, 10);
+    if (isNaN(storageId)) continue;
+    let img = resolved.get(storageId);
+    if (img === void 0) {
+      const bin = binDataMap.get(storageId);
+      if (!bin) {
+        warnings.push({ page: block.pageNumber, message: `BinData ${storageId} \uC5C6\uC74C`, code: "SKIPPED_IMAGE" });
+        resolved.set(storageId, null);
+      } else {
+        const mime = detectImageMime(bin.data);
+        if (!mime) {
+          warnings.push({ page: block.pageNumber, message: `BinData ${storageId}: \uC54C \uC218 \uC5C6\uB294 \uC774\uBBF8\uC9C0 \uD615\uC2DD`, code: "SKIPPED_IMAGE" });
+          resolved.set(storageId, null);
+        } else {
+          imageIndex++;
+          const ext = mime.includes("jpeg") ? "jpg" : mime.includes("png") ? "png" : mime.includes("gif") ? "gif" : mime.includes("bmp") ? "bmp" : "bin";
+          img = { filename: `image_${String(imageIndex).padStart(3, "0")}.${ext}`, data: new Uint8Array(bin.data), mime };
+          resolved.set(storageId, img);
+          images.push({ filename: img.filename, data: img.data, mimeType: img.mime });
+          renamed.set(storageId, img.filename);
         }
       }
-      throw new KordocError("DRM \uC554\uD638\uD654\uB41C HWPX \uD30C\uC77C\uC785\uB2C8\uB2E4. Windows + \uD55C\uCEF4 \uC624\uD53C\uC2A4 \uC124\uCE58 \uC2DC \uC790\uB3D9 \uCD94\uCD9C\uB429\uB2C8\uB2E4.");
+      img = resolved.get(storageId);
+    }
+    if (!img) {
+      const bin = binDataMap.get(storageId);
+      block.type = "paragraph";
+      block.text = bin ? `[\uC774\uBBF8\uC9C0: ${bin.name}]` : `[\uC774\uBBF8\uC9C0: BinData ${storageId}]`;
+      continue;
     }
+    block.text = img.filename;
+    block.imageData = { data: img.data, mimeType: img.mime, filename: binDataMap.get(storageId).name };
   }
-  const decompressed = { total: 0 };
-  const metadata = {};
-  await extractHwpxMetadata(zip, metadata, decompressed);
-  const styleMap = await extractHwpxStyles(zip, decompressed);
-  const warnings = [];
-  const sectionPaths = await resolveSectionPaths(zip);
-  if (sectionPaths.length === 0) throw new KordocError("HWPX\uC5D0\uC11C \uC139\uC158 \uD30C\uC77C\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4");
-  metadata.pageCount = sectionPaths.length;
-  const pageFilter = options?.pages ? parsePageRange(options.pages, sectionPaths.length) : null;
-  const totalTarget = pageFilter ? pageFilter.size : sectionPaths.length;
-  const blocks = [];
-  const shared = createSectionShared();
-  shared.kordocLayout = await readKordocLayout(zip);
-  let parsedSections = 0;
-  for (let si = 0; si < sectionPaths.length; si++) {
-    if (pageFilter && !pageFilter.has(si + 1)) continue;
-    const file = zip.file(sectionPaths[si]);
-    if (!file) continue;
-    try {
-      const xml = await file.async("text");
-      decompressed.total += xml.length * 2;
-      if (decompressed.total > MAX_DECOMPRESS_SIZE) throw new KordocError("ZIP \uC555\uCD95 \uD574\uC81C \uD06C\uAE30 \uCD08\uACFC (ZIP bomb \uC758\uC2EC)");
-      blocks.push(...parseSectionXml(xml, styleMap, warnings, si + 1, shared));
-      parsedSections++;
-      options?.onProgress?.(parsedSections, totalTarget);
-    } catch (secErr) {
-      if (secErr instanceof KordocError) throw secErr;
-      warnings.push({ page: si + 1, message: `\uC139\uC158 ${si + 1} \uD30C\uC2F1 \uC2E4\uD328: ${secErr instanceof Error ? secErr.message : "\uC54C \uC218 \uC5C6\uB294 \uC624\uB958"}`, code: "PARTIAL_PARSE" });
+  if (sweepUnreferenced) {
+    for (const [storageId, bin] of [...binDataMap.entries()].sort((a, b) => a[0] - b[0])) {
+      if (resolved.has(storageId)) continue;
+      const mime = detectImageMime(bin.data);
+      if (!mime) continue;
+      imageIndex++;
+      const ext = mime.includes("jpeg") ? "jpg" : mime.includes("png") ? "png" : mime.includes("gif") ? "gif" : mime.includes("bmp") ? "bmp" : "bin";
+      const filename = `image_${String(imageIndex).padStart(3, "0")}.${ext}`;
+      const data = new Uint8Array(bin.data);
+      images.push({ filename, data, mimeType: mime });
+      blocks.push({ type: "image", text: filename, imageData: { data, mimeType: mime, filename: bin.name } });
     }
   }
-  applyPageText(blocks, shared);
-  const images = await extractImagesFromZip(zip, blocks, decompressed, warnings);
-  detectHwpxHeadings(blocks, styleMap);
-  const outline = blocks.filter((b) => b.type === "heading" && b.level && b.text).map((b) => ({ level: b.level, text: b.text, pageNumber: b.pageNumber }));
-  const markdown = blocksToMarkdown(blocks);
-  return { markdown, blocks, metadata, outline: outline.length > 0 ? outline : void 0, warnings: warnings.length > 0 ? warnings : void 0, images: images.length > 0 ? images : void 0 };
+  resolveCellImageSentinels(blocks, renamed);
+  return images;
 }
-
-// src/hwp5/record.ts
-import { inflateRawSync as inflateRawSync2, inflateSync } from "zlib";
-var TAG_PARA_HEADER = 66;
-var TAG_PARA_TEXT = 67;
-var TAG_CHAR_SHAPE = 68;
-var TAG_CTRL_HEADER = 71;
-var TAG_LIST_HEADER = 72;
-var TAG_TABLE = 77;
-var TAG_SHAPE_COMPONENT = 76;
-var TAG_SHAPE_COMPONENT_PICTURE = 85;
-var TAG_SHAPE_COMPONENT_CONTAINER = 86;
-var TAG_EQEDIT = 88;
-var TAG_BIN_DATA = 18;
-var TAG_DOC_CHAR_SHAPE = 21;
-var TAG_NUMBERING = 23;
-var TAG_BULLET = 24;
-var TAG_DOC_PARA_SHAPE = 25;
-var TAG_DOC_STYLE = 26;
-var CHAR_LINE = 0;
-var CHAR_SECTION_BREAK = 10;
-var CHAR_PARA = 13;
-var CHAR_TAB = 9;
-var CHAR_HYPHEN = 30;
-var CHAR_NBSP = 31;
-var CHAR_FIXED_NBSP = 24;
-var CHAR_FIXED_WIDTH = 25;
-var FLAG_COMPRESSED = 1 << 0;
-var FLAG_ENCRYPTED = 1 << 1;
-var FLAG_DISTRIBUTION = 1 << 2;
-var FLAG_DRM = 1 << 4;
-var MAX_RECORDS = 5e5;
-function readRecords(data) {
-  const records = [];
-  let offset = 0;
-  while (offset + 4 <= data.length && records.length < MAX_RECORDS) {
-    const header = data.readUInt32LE(offset);
-    offset += 4;
-    const tagId = header & 1023;
-    const level = header >> 10 & 1023;
-    let size = header >> 20 & 4095;
-    if (size === 4095) {
-      if (offset + 4 > data.length) break;
-      size = data.readUInt32LE(offset);
-      offset += 4;
+function extractHwp5Images(fileIndex, blocks, warnings, sweepUnreferenced) {
+  const binDataMap = /* @__PURE__ */ new Map();
+  if (fileIndex) {
+    for (const entry of fileIndex) {
+      if (!entry?.name || !entry.content) continue;
+      const match = entry.name.match(BIN_ENTRY_RE);
+      if (!match) continue;
+      const idx = parseInt(match[1], 16);
+      const data = normalizeBinPayload(Buffer.from(entry.content));
+      binDataMap.set(idx, { data, name: entry.name });
     }
-    if (offset + size > data.length) break;
-    records.push({ tagId, level, size, data: data.subarray(offset, offset + size) });
-    offset += size;
   }
-  return records;
+  if (binDataMap.size === 0) {
+    resolveCellImageSentinels(blocks, /* @__PURE__ */ new Map());
+    return [];
+  }
+  return resolveImageBlocks(binDataMap, blocks, warnings, sweepUnreferenced);
 }
-var MAX_DECOMPRESS_SIZE2 = 100 * 1024 * 1024;
-function decompressStream(data) {
-  const opts = { maxOutputLength: MAX_DECOMPRESS_SIZE2 };
-  if (data.length >= 2 && data[0] === 120) {
-    try {
-      return inflateSync(data, opts);
-    } catch {
-    }
+function extractHwp5ImagesLenient(lcfb, blocks, warnings, sweepUnreferenced) {
+  const binDataMap = /* @__PURE__ */ new Map();
+  const binRe = /^BIN([0-9A-Fa-f]{4,8})(?:\.|$)/;
+  for (const e of lcfb.entries()) {
+    const match = e.name.match(binRe);
+    if (!match) continue;
+    const idx = parseInt(match[1], 16);
+    const raw = lcfb.findStream(e.name);
+    if (!raw) continue;
+    binDataMap.set(idx, { data: normalizeBinPayload(raw), name: e.name });
+  }
+  if (binDataMap.size === 0) {
+    resolveCellImageSentinels(blocks, /* @__PURE__ */ new Map());
+    return [];
   }
-  return inflateRawSync2(data, opts);
+  return resolveImageBlocks(binDataMap, blocks, warnings, sweepUnreferenced);
 }
-function parseFileHeader(data) {
-  if (data.length < 40) throw new KordocError("FileHeader\uAC00 \uB108\uBB34 \uC9E7\uC2B5\uB2C8\uB2E4 (\uCD5C\uC18C 40\uBC14\uC774\uD2B8)");
-  const sig = data.subarray(0, 32).toString("utf8").replace(/\0+$/, "");
-  return {
-    signature: sig,
-    versionMajor: data[35],
-    flags: data.readUInt32LE(36)
-  };
+
+// src/hwpx/images.ts
+function imageExtToMime(ext) {
+  switch (ext.toLowerCase()) {
+    case "jpg":
+    case "jpeg":
+      return "image/jpeg";
+    case "png":
+      return "image/png";
+    case "gif":
+      return "image/gif";
+    case "bmp":
+      return "image/bmp";
+    case "tif":
+    case "tiff":
+      return "image/tiff";
+    case "wmf":
+      return "image/wmf";
+    case "emf":
+      return "image/emf";
+    case "svg":
+      return "image/svg+xml";
+    default:
+      return "application/octet-stream";
+  }
 }
-function readHwpString(data, offset) {
-  if (offset + 2 > data.length) return { value: "", next: data.length };
-  const len = data.readUInt16LE(offset);
-  const start = offset + 2;
-  const end = start + len * 2;
-  if (len === 0 || end > data.length) return { value: "", next: start };
-  return { value: data.subarray(start, end).toString("utf16le"), next: end };
+function mimeToExt(mime) {
+  if (mime.includes("jpeg")) return "jpg";
+  if (mime.includes("png")) return "png";
+  if (mime.includes("gif")) return "gif";
+  if (mime.includes("bmp")) return "bmp";
+  if (mime.includes("tiff")) return "tif";
+  if (mime.includes("wmf")) return "wmf";
+  if (mime.includes("emf")) return "emf";
+  if (mime.includes("svg")) return "svg";
+  return "bin";
 }
-function parseDocInfo(records) {
-  const charShapes = [];
-  const paraShapes = [];
-  const styles = [];
-  const binData = [];
-  const numberings = [];
-  const bullets = [];
-  for (const rec of records) {
-    if (rec.tagId === TAG_DOC_PARA_SHAPE && rec.data.length >= 4) {
-      const attr1 = rec.data.readUInt32LE(0);
-      const headType = attr1 >>> 23 & 3;
-      const paraLevel = attr1 >>> 25 & 7;
-      const numberingId = rec.data.length >= 32 ? rec.data.readUInt16LE(30) : 0;
-      paraShapes.push({ headType, paraLevel, numberingId });
-    }
-    if (rec.tagId === TAG_BIN_DATA && rec.data.length >= 2) {
-      const attr = rec.data.readUInt16LE(0);
-      const typeBits = attr & 15;
-      if (typeBits === 0) {
-        binData.push({ kind: "link", storageId: 0, extension: "" });
-      } else {
-        const storageId = rec.data.length >= 4 ? rec.data.readUInt16LE(2) : 0;
-        const { value: extension } = readHwpString(rec.data, 4);
-        binData.push({ kind: typeBits === 2 ? "storage" : "embed", storageId, extension });
+function collectImageBlocks2(blocks, out, ownerCell, depth = 0) {
+  if (depth > MAX_XML_DEPTH) return;
+  for (const block of blocks) {
+    if (block.type === "image") {
+      out.push({ block, ownerCell });
+    } else if (block.type === "table" && block.table) {
+      for (const row of block.table.cells) {
+        for (const cell2 of row) {
+          if (cell2.blocks?.length) collectImageBlocks2(cell2.blocks, out, cell2, depth + 1);
+        }
       }
     }
-    if (rec.tagId === TAG_NUMBERING && rec.data.length >= 14) {
-      const levelFormats = [];
-      const numberFormats = [];
-      const startNumbers = [1, 1, 1, 1, 1, 1, 1];
-      let offset = 0;
-      for (let level = 0; level < 7; level++) {
-        if (offset + 12 > rec.data.length) {
-          levelFormats.push("");
-          numberFormats.push(0);
-          continue;
+  }
+}
+async function extractImagesFromZip(zip, blocks, decompressed, warnings, sweepUnreferenced) {
+  const images = [];
+  let imageIndex = 0;
+  const usedPaths = /* @__PURE__ */ new Set();
+  const imageBlocks = [];
+  collectImageBlocks2(blocks, imageBlocks);
+  const resolved = /* @__PURE__ */ new Map();
+  for (const { block, ownerCell } of imageBlocks) {
+    if (block.type !== "image" || !block.text) continue;
+    const ref = block.text;
+    let img = resolved.get(ref);
+    if (img === void 0) {
+      img = null;
+      const candidates = [
+        `BinData/${ref}`,
+        `Contents/BinData/${ref}`,
+        ref
+        // 절대 경로일 수도 있음
+      ];
+      let resolvedPath = null;
+      if (!ref.includes(".")) {
+        const prefixes = [`BinData/${ref}`, `Contents/BinData/${ref}`];
+        for (const prefix of prefixes) {
+          const match = zip.file(new RegExp(`^${prefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\.[a-zA-Z0-9]+$`));
+          if (match.length > 0) {
+            resolvedPath = match[0].name;
+            break;
+          }
         }
-        const attr = rec.data.readUInt32LE(offset);
-        numberFormats.push(attr >>> 5 & 15);
-        offset += 12;
-        const { value, next } = readHwpString(rec.data, offset);
-        levelFormats.push(value);
-        offset = next;
-      }
-      let baseStart = 1;
-      if (offset + 2 <= rec.data.length) {
-        baseStart = rec.data.readUInt16LE(offset) || 1;
-        offset += 2;
       }
-      for (let level = 0; level < 7; level++) {
-        if (offset + 4 <= rec.data.length) {
-          startNumbers[level] = rec.data.readUInt32LE(offset) || 1;
-          offset += 4;
-        } else {
-          startNumbers[level] = baseStart;
+      const allCandidates = resolvedPath ? [resolvedPath, ...candidates] : candidates;
+      for (const path of allCandidates) {
+        if (isPathTraversal(path)) continue;
+        const file = zip.file(path);
+        if (!file) continue;
+        try {
+          const data = await file.async("uint8array");
+          decompressed.total += data.length;
+          if (decompressed.total > MAX_DECOMPRESS_SIZE) throw new KordocError("ZIP \uC555\uCD95 \uD574\uC81C \uD06C\uAE30 \uCD08\uACFC (ZIP bomb \uC758\uC2EC)");
+          const ext = path.includes(".") ? path.split(".").pop() || "png" : "png";
+          const mimeType = imageExtToMime(ext);
+          imageIndex++;
+          const filename2 = `image_${String(imageIndex).padStart(3, "0")}.${mimeToExt(mimeType)}`;
+          img = { filename: filename2, data, mimeType };
+          images.push(img);
+          usedPaths.add(path);
+          break;
+        } catch (err) {
+          if (err instanceof KordocError) throw err;
         }
       }
-      numberings.push({ levelFormats, numberFormats, startNumbers });
-    }
-    if (rec.tagId === TAG_BULLET && rec.data.length >= 14) {
-      const code = rec.data.readUInt16LE(12);
-      bullets.push({ char: code > 0 ? String.fromCharCode(code) : "\u2022" });
+      if (!img) warnings?.push({ page: block.pageNumber, message: `\uC774\uBBF8\uC9C0 \uD30C\uC77C \uC5C6\uC74C: ${ref}`, code: "SKIPPED_IMAGE" });
+      resolved.set(ref, img);
     }
-    if (rec.tagId === TAG_DOC_CHAR_SHAPE && rec.data.length >= 18) {
-      if (rec.data.length >= 50) {
-        const fontSize = rec.data.readUInt32LE(42);
-        const attrFlags = rec.data.readUInt32LE(46);
-        charShapes.push({ fontSize, attrFlags });
-      } else {
-        charShapes.push({ fontSize: 0, attrFlags: 0 });
-      }
+    if (!img) {
+      block.type = "paragraph";
+      block.text = `[\uC774\uBBF8\uC9C0: ${ref}]`;
+      if (ownerCell) ownerCell.text = ownerCell.text.replace(`![image](${ref})`, () => `[\uC774\uBBF8\uC9C0: ${ref}]`);
+      continue;
     }
-    if (rec.tagId === TAG_DOC_STYLE && rec.data.length >= 8) {
+    const filename = img.filename;
+    block.text = filename;
+    block.imageData = { data: img.data, mimeType: img.mimeType, filename: ref };
+    if (ownerCell) ownerCell.text = ownerCell.text.replace(`![image](${ref})`, () => `![image](${filename})`);
+  }
+  if (sweepUnreferenced) {
+    const binEntries = zip.file(/(?:^|\/)BinData\//i);
+    for (const file of binEntries) {
+      if (file.dir || usedPaths.has(file.name) || isPathTraversal(file.name)) continue;
       try {
-        let offset = 0;
-        const nameLen = rec.data.readUInt16LE(offset);
-        offset += 2;
-        const nameBytes = nameLen * 2;
-        const name = nameBytes > 0 && offset + nameBytes <= rec.data.length ? rec.data.subarray(offset, offset + nameBytes).toString("utf16le") : "";
-        offset += nameBytes;
-        let nameKo = "";
-        if (offset + 2 <= rec.data.length) {
-          const nameKoLen = rec.data.readUInt16LE(offset);
-          offset += 2;
-          const nameKoBytes = nameKoLen * 2;
-          if (nameKoBytes > 0 && offset + nameKoBytes <= rec.data.length) {
-            nameKo = rec.data.subarray(offset, offset + nameKoBytes).toString("utf16le");
-          }
-          offset += nameKoBytes;
+        const data = await file.async("uint8array");
+        decompressed.total += data.length;
+        if (decompressed.total > MAX_DECOMPRESS_SIZE) throw new KordocError("ZIP \uC555\uCD95 \uD574\uC81C \uD06C\uAE30 \uCD08\uACFC (ZIP bomb \uC758\uC2EC)");
+        const ext = file.name.includes(".") ? file.name.split(".").pop() || "" : "";
+        let mimeType = imageExtToMime(ext);
+        if (mimeType === "application/octet-stream") {
+          const sniffed = detectImageMime(data);
+          if (!sniffed) continue;
+          mimeType = sniffed;
         }
-        const type = offset < rec.data.length ? rec.data.readUInt8(offset) : 0;
-        offset += 1;
-        offset += 1;
-        offset += 2;
-        const paraShapeId = offset + 2 <= rec.data.length ? rec.data.readUInt16LE(offset) : 0;
-        offset += 2;
-        const charShapeId = offset + 2 <= rec.data.length ? rec.data.readUInt16LE(offset) : 0;
-        styles.push({ name, nameKo, charShapeId, paraShapeId, type });
-      } catch {
+        imageIndex++;
+        const filename = `image_${String(imageIndex).padStart(3, "0")}.${mimeToExt(mimeType)}`;
+        const img = { filename, data, mimeType };
+        images.push(img);
+        blocks.push({ type: "image", text: filename, imageData: { data, mimeType, filename: file.name } });
+      } catch (err) {
+        if (err instanceof KordocError) throw err;
+        warnings?.push({ message: `\uC774\uBBF8\uC9C0 \uCD94\uCD9C \uC2E4\uD328: ${file.name}`, code: "SKIPPED_IMAGE" });
       }
     }
   }
-  return { charShapes, paraShapes, styles, binData, numberings, bullets };
+  return images;
 }
-function createParaTextState() {
-  return { text: "", ctrlIdx: 0, fieldStack: [], fieldRanges: [] };
+
+// src/hwpx/metadata.ts
+import JSZip2 from "jszip";
+
+// src/hwpx/zip-sections.ts
+import { inflateRawSync as inflateRawSync2 } from "zlib";
+function extractFromBrokenZip(buffer) {
+  const data = new Uint8Array(buffer);
+  const view = new DataView(buffer);
+  let pos = 0;
+  const blocks = [];
+  const warnings = [
+    { code: "BROKEN_ZIP_RECOVERY", message: "\uC190\uC0C1\uB41C ZIP \uAD6C\uC870 \u2014 Local File Header \uAE30\uBC18 \uBCF5\uAD6C \uBAA8\uB4DC" }
+  ];
+  let totalDecompressed = 0;
+  let entryCount = 0;
+  let sectionNum = 0;
+  const shared = createSectionShared();
+  while (pos < data.length - 30) {
+    if (data[pos] !== 80 || data[pos + 1] !== 75 || data[pos + 2] !== 3 || data[pos + 3] !== 4) {
+      pos++;
+      while (pos < data.length - 30) {
+        if (data[pos] === 80 && data[pos + 1] === 75 && data[pos + 2] === 3 && data[pos + 3] === 4) break;
+        pos++;
+      }
+      continue;
+    }
+    if (++entryCount > MAX_ZIP_ENTRIES) break;
+    const method = view.getUint16(pos + 8, true);
+    const compSize = view.getUint32(pos + 18, true);
+    const nameLen = view.getUint16(pos + 26, true);
+    const extraLen = view.getUint16(pos + 28, true);
+    if (nameLen > 1024 || extraLen > 65535) {
+      pos += 30 + nameLen + extraLen;
+      continue;
+    }
+    const fileStart = pos + 30 + nameLen + extraLen;
+    if (fileStart + compSize > data.length) break;
+    if (compSize === 0 && method !== 0) {
+      pos = fileStart;
+      continue;
+    }
+    const nameBytes = data.slice(pos + 30, pos + 30 + nameLen);
+    const name = new TextDecoder().decode(nameBytes);
+    if (isPathTraversal(name)) {
+      pos = fileStart + compSize;
+      continue;
+    }
+    const fileData = data.slice(fileStart, fileStart + compSize);
+    pos = fileStart + compSize;
+    if (!name.toLowerCase().includes("section") || !name.endsWith(".xml")) continue;
+    try {
+      let content;
+      if (method === 0) {
+        content = new TextDecoder().decode(fileData);
+      } else if (method === 8) {
+        const decompressed = inflateRawSync2(Buffer.from(fileData), { maxOutputLength: MAX_DECOMPRESS_SIZE });
+        content = new TextDecoder().decode(decompressed);
+      } else {
+        continue;
+      }
+      totalDecompressed += content.length * 2;
+      if (totalDecompressed > MAX_DECOMPRESS_SIZE) throw new KordocError("\uC555\uCD95 \uD574\uC81C \uD06C\uAE30 \uCD08\uACFC");
+      sectionNum++;
+      blocks.push(...parseSectionXml(content, void 0, warnings, sectionNum, shared));
+    } catch {
+      continue;
+    }
+  }
+  if (blocks.length === 0) throw new KordocError("\uC190\uC0C1\uB41C HWPX\uC5D0\uC11C \uC139\uC158 \uB370\uC774\uD130\uB97C \uBCF5\uAD6C\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4");
+  applyPageText(blocks, shared);
+  const markdown = blocksToMarkdown(blocks);
+  return { markdown, blocks, warnings: warnings.length > 0 ? warnings : void 0 };
 }
-function isExtendedOnlyCtrlChar(ch) {
-  return ch >= 1 && ch <= 3 || ch >= 11 && ch <= 12 || ch >= 14 && ch <= 18 || ch >= 21 && ch <= 23;
+async function readKordocLayout(zip) {
+  const file = zip.file("Contents/content.hpf") ?? zip.file("content.hpf");
+  if (!file) return null;
+  try {
+    const xml = await file.async("text");
+    if (!/<opf:meta\b[^>]*name="generator"[^>]*content="kordoc"/.test(xml)) return null;
+    return xml.match(/<opf:meta\b[^>]*name="kordoc-layout"[^>]*content="([^"]*)"/)?.[1] ?? null;
+  } catch {
+    return null;
+  }
 }
-function appendParaText(state, data, resolveControl) {
-  let result = "";
-  let i = 0;
-  const base = state.text.length;
-  const resolveAt = (byteOffset, extended) => {
-    const ctrlId = data.readUInt32LE(byteOffset);
-    const idx = extended ? state.ctrlIdx : -1;
-    const replacement = resolveControl?.(idx, ctrlId);
-    if (replacement) result += replacement;
-    if (extended) state.ctrlIdx++;
-  };
-  while (i + 1 < data.length) {
-    const ch = data.readUInt16LE(i);
-    i += 2;
-    switch (ch) {
-      // ── char 타입 (2바이트만, 확장 데이터 없음) ──
-      case CHAR_LINE:
-        result += "\n";
-        break;
-      case CHAR_SECTION_BREAK: {
-        if (i + 16 <= data.length && data.readUInt16LE(i) === 11) {
-          resolveAt(i + 2, true);
-          i += 16;
-          break;
-        }
-        result += "\n";
-        break;
+async function resolveSectionPaths(zip) {
+  const manifestPaths = ["Contents/content.hpf", "content.hpf"];
+  for (const mp of manifestPaths) {
+    const mpLower = mp.toLowerCase();
+    const file = zip.file(mp) || Object.values(zip.files).find((f) => f.name.toLowerCase() === mpLower) || null;
+    if (!file) continue;
+    const xml = await file.async("text");
+    const paths = parseSectionPathsFromManifest(xml);
+    if (paths.length > 0) return paths;
+  }
+  const sectionFiles = zip.file(/[Ss]ection\d+\.xml$/);
+  return sectionFiles.map((f) => f.name).sort(compareSectionPaths);
+}
+function parseSectionPathsFromManifest(xml) {
+  const parser = createXmlParser();
+  const doc = parser.parseFromString(stripDtd(xml), "text/xml");
+  const items = doc.getElementsByTagName("opf:item");
+  const spine = doc.getElementsByTagName("opf:itemref");
+  const idToHref = /* @__PURE__ */ new Map();
+  for (let i = 0; i < items.length; i++) {
+    const item = items[i];
+    const id = item.getAttribute("id") || "";
+    const href = normalizeSectionHref(item.getAttribute("href") || "");
+    if (id && href) idToHref.set(id, href);
+  }
+  if (spine.length > 0) {
+    const ordered = [];
+    for (let i = 0; i < spine.length; i++) {
+      const href = idToHref.get(spine[i].getAttribute("idref") || "");
+      if (href) ordered.push(href);
+    }
+    if (ordered.length > 0) return ordered;
+  }
+  return Array.from(idToHref.values()).sort(compareSectionPaths);
+}
+
+// src/hwpx/metadata.ts
+async function extractHwpxMetadata(zip, metadata, decompressed) {
+  try {
+    const metaPaths = ["meta.xml", "META-INF/meta.xml", "docProps/core.xml"];
+    for (const mp of metaPaths) {
+      const file = zip.file(mp) || Object.values(zip.files).find((f) => f.name.toLowerCase() === mp.toLowerCase()) || null;
+      if (!file) continue;
+      const xml = await file.async("text");
+      if (decompressed) {
+        decompressed.total += xml.length * 2;
+        if (decompressed.total > MAX_DECOMPRESS_SIZE) throw new KordocError("ZIP \uC555\uCD95 \uD574\uC81C \uD06C\uAE30 \uCD08\uACFC (ZIP bomb \uC758\uC2EC)");
       }
-      case CHAR_PARA:
-        break;
-      // 문단 끝
-      case CHAR_HYPHEN:
-        result += "-";
-        break;
-      case CHAR_NBSP:
-        result += " ";
-        break;
-      case CHAR_FIXED_NBSP:
-        result += "\xA0";
-        break;
-      // 진짜 NBSP
-      case CHAR_FIXED_WIDTH:
-        result += " ";
-        break;
-      // 고정폭 공백
-      // ── inline 타입 (2바이트 + 14바이트 확장) ──
-      case CHAR_TAB:
-        result += "	";
-        if (i + 14 <= data.length) i += 14;
-        break;
-      default:
-        if (ch >= 1 && ch <= 31) {
-          const isExtended = isExtendedOnlyCtrlChar(ch);
-          const isInline = ch >= 4 && ch <= 9 || ch >= 19 && ch <= 20;
-          if ((isExtended || isInline) && i + 14 <= data.length) {
-            if (ch === 3) {
-              state.fieldStack.push({ start: base + result.length, ctrlIdx: state.ctrlIdx });
-            } else if (ch === 4) {
-              const open = state.fieldStack.pop();
-              if (open) {
-                state.fieldRanges.push({ start: open.start, end: base + result.length, ctrlIdx: open.ctrlIdx });
-              }
-            }
-            resolveAt(i, isExtended);
-            i += 14;
-          }
-        } else if (ch >= 32) {
-          if (ch >= 55296 && ch <= 56319 && i + 1 < data.length) {
-            const lo = data.readUInt16LE(i);
-            if (lo >= 56320 && lo <= 57343) {
-              i += 2;
-              const codePoint = (ch - 55296 << 10) + (lo - 56320) + 65536;
-              result += String.fromCodePoint(codePoint);
-              break;
-            }
-          }
-          result += String.fromCharCode(ch);
+      parseDublinCoreMetadata(xml, metadata);
+      if (metadata.title || metadata.author) return;
+    }
+  } catch {
+  }
+}
+function parseDublinCoreMetadata(xml, metadata) {
+  const parser = createXmlParser();
+  const doc = parser.parseFromString(stripDtd(xml), "text/xml");
+  if (!doc.documentElement) return;
+  const getText = (tagNames) => {
+    for (const tag of tagNames) {
+      const els = doc.getElementsByTagName(tag);
+      if (els.length > 0) {
+        const text = els[0].textContent?.trim();
+        if (text) return text;
+      }
+    }
+    return void 0;
+  };
+  metadata.title = metadata.title || getText(["dc:title", "title"]);
+  metadata.author = metadata.author || getText(["dc:creator", "creator", "cp:lastModifiedBy"]);
+  metadata.description = metadata.description || getText(["dc:description", "description", "dc:subject", "subject"]);
+  metadata.createdAt = metadata.createdAt || getText(["dcterms:created", "meta:creation-date"]);
+  metadata.modifiedAt = metadata.modifiedAt || getText(["dcterms:modified", "meta:date"]);
+  const keywords = getText(["dc:keyword", "cp:keywords", "meta:keyword"]);
+  if (keywords && !metadata.keywords) {
+    metadata.keywords = keywords.split(/[,;]/).map((k) => k.trim()).filter(Boolean);
+  }
+}
+
+// src/hwpx/parser.ts
+async function parseHwpxDocument(buffer, options) {
+  precheckZipSize(buffer, MAX_DECOMPRESS_SIZE, MAX_ZIP_ENTRIES);
+  let zip;
+  try {
+    zip = await JSZip3.loadAsync(buffer);
+  } catch {
+    return extractFromBrokenZip(buffer);
+  }
+  const actualEntryCount = Object.keys(zip.files).length;
+  if (actualEntryCount > MAX_ZIP_ENTRIES) {
+    throw new KordocError("ZIP \uC5D4\uD2B8\uB9AC \uC218 \uCD08\uACFC (ZIP bomb \uC758\uC2EC)");
+  }
+  const manifestFile = zip.file("META-INF/manifest.xml");
+  if (manifestFile) {
+    const manifestXml = await manifestFile.async("text");
+    if (isEncryptedHwpx(manifestXml)) {
+      if (isComFallbackAvailable() && options?.filePath) {
+        const { pages, pageCount, warnings: warnings2 } = extractTextViaCom(options.filePath);
+        if (pages.some((p) => p && p.trim().length > 0)) {
+          return comResultToParseResult(pages, pageCount, warnings2);
         }
-        break;
+      }
+      throw new KordocError("DRM \uC554\uD638\uD654\uB41C HWPX \uD30C\uC77C\uC785\uB2C8\uB2E4. Windows + \uD55C\uCEF4 \uC624\uD53C\uC2A4 \uC124\uCE58 \uC2DC \uC790\uB3D9 \uCD94\uCD9C\uB429\uB2C8\uB2E4.");
     }
   }
-  state.text += result;
-}
-function extractEquationText(data) {
-  if (data.length < 6) return null;
-  const scriptLength = data.readUInt16LE(4);
-  const scriptStart = 6;
-  const scriptEnd = scriptStart + scriptLength * 2;
-  if (scriptLength <= 0 || scriptEnd > data.length) return null;
-  const equation = data.subarray(scriptStart, scriptEnd).toString("utf16le").replace(/\0+/g, "").trim();
-  return equation || null;
+  const decompressed = { total: 0 };
+  const metadata = {};
+  await extractHwpxMetadata(zip, metadata, decompressed);
+  const styleMap = await extractHwpxStyles(zip, decompressed);
+  const warnings = [];
+  const sectionPaths = await resolveSectionPaths(zip);
+  if (sectionPaths.length === 0) throw new KordocError("HWPX\uC5D0\uC11C \uC139\uC158 \uD30C\uC77C\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4");
+  metadata.pageCount = sectionPaths.length;
+  const pageFilter = options?.pages ? parsePageRange(options.pages, sectionPaths.length) : null;
+  const totalTarget = pageFilter ? pageFilter.size : sectionPaths.length;
+  const blocks = [];
+  const shared = createSectionShared();
+  shared.kordocLayout = await readKordocLayout(zip);
+  shared.keepTrailingEmptyCols = options?.keepTrailingEmptyCols;
+  let parsedSections = 0;
+  for (let si = 0; si < sectionPaths.length; si++) {
+    if (pageFilter && !pageFilter.has(si + 1)) continue;
+    const file = zip.file(sectionPaths[si]);
+    if (!file) continue;
+    try {
+      const xml = await file.async("text");
+      decompressed.total += xml.length * 2;
+      if (decompressed.total > MAX_DECOMPRESS_SIZE) throw new ZipBombError("ZIP \uC555\uCD95 \uD574\uC81C \uD06C\uAE30 \uCD08\uACFC (ZIP bomb \uC758\uC2EC)");
+      blocks.push(...parseSectionXml(xml, styleMap, warnings, si + 1, shared));
+      parsedSections++;
+      options?.onProgress?.(parsedSections, totalTarget);
+    } catch (secErr) {
+      if (secErr instanceof ZipBombError) throw secErr;
+      warnings.push({ page: si + 1, message: `\uC139\uC158 ${si + 1} \uD30C\uC2F1 \uC2E4\uD328: ${secErr instanceof Error ? secErr.message : "\uC54C \uC218 \uC5C6\uB294 \uC624\uB958"}`, code: "PARTIAL_PARSE" });
+    }
+  }
+  applyPageText(blocks, shared);
+  const images = await extractImagesFromZip(zip, blocks, decompressed, warnings, !pageFilter);
+  detectHwpxHeadings(blocks, styleMap);
+  const outline = blocks.filter((b) => b.type === "heading" && b.level && b.text).map((b) => ({ level: b.level, text: b.text, pageNumber: b.pageNumber }));
+  const markdown = blocksToMarkdown(blocks);
+  return { markdown, blocks, metadata, outline: outline.length > 0 ? outline : void 0, warnings: warnings.length > 0 ? warnings : void 0, images: images.length > 0 ? images : void 0 };
 }
 
 // src/hwp5/numbering.ts
@@ -3443,350 +3636,74 @@ function formatLatin(n, upper) {
   }
   return result;
 }
-function formatEastAsianNumber(n, digits, units, zero) {
-  if (n === 0) return zero;
-  if (n < 0 || n > 99999) return String(n);
-  let result = "";
-  let num4 = n;
-  let unit = 0;
-  while (num4 > 0) {
-    const d = num4 % 10;
-    if (d > 0) {
-      const digitStr = d === 1 && unit > 0 ? "" : digits[d];
-      result = digitStr + units[unit] + result;
-    }
-    num4 = Math.floor(num4 / 10);
-    unit++;
-  }
-  return result;
-}
-var HANGUL_DIGITS = ["", "\uC77C", "\uC774", "\uC0BC", "\uC0AC", "\uC624", "\uC721", "\uCE60", "\uD314", "\uAD6C"];
-var HANGUL_UNITS = ["", "\uC2ED", "\uBC31", "\uCC9C", "\uB9CC"];
-var HANJA_DIGITS = ["", "\u4E00", "\u4E8C", "\u4E09", "\u56DB", "\u4E94", "\u516D", "\u4E03", "\u516B", "\u4E5D"];
-var HANJA_UNITS = ["", "\u5341", "\u767E", "\u5343", "\u842C"];
-function formatNumber(n, fmt) {
-  switch (fmt) {
-    case "circled":
-      return fromTable(n, CIRCLED_DIGITS);
-    case "romanUpper":
-      return formatRoman(n, true);
-    case "romanLower":
-      return formatRoman(n, false);
-    case "latinUpper":
-      return formatLatin(n, true) || String(n);
-    case "latinLower":
-      return formatLatin(n, false) || String(n);
-    case "ganada":
-      return fromTable(n, GANADA);
-    case "circledGanada":
-      return fromTable(n, CIRCLED_GANADA);
-    case "jamo":
-      return fromTable(n, JAMO);
-    case "circledJamo":
-      return fromTable(n, CIRCLED_JAMO);
-    case "hangulNum":
-      return formatEastAsianNumber(n, HANGUL_DIGITS, HANGUL_UNITS, "\uC601");
-    case "hanjaNum":
-      return formatEastAsianNumber(n, HANJA_DIGITS, HANJA_UNITS, "\u96F6");
-    default:
-      return String(n);
-  }
-}
-function expandNumberingFormat(formatStr, counters, numbering) {
-  let result = "";
-  let i = 0;
-  while (i < formatStr.length) {
-    const ch = formatStr[i];
-    if (ch === "^" && i + 1 < formatStr.length && formatStr[i + 1] >= "1" && formatStr[i + 1] <= "7") {
-      const levelRef = formatStr.charCodeAt(i + 1) - 48;
-      const idx = levelRef - 1;
-      const counterVal = counters[idx] ?? 0;
-      const start = numbering.startNumbers[idx] ?? 1;
-      const num4 = counterVal > 0 ? start - 1 + counterVal : start;
-      result += formatNumber(num4, headFormatToNumFmt(numbering.numberFormats[idx] ?? 0));
-      i += 2;
-      continue;
-    }
-    result += ch;
-    i++;
-  }
-  return result;
-}
-
-// src/hwp5/images.ts
-function detectImageMime(data) {
-  if (data.length < 4) return null;
-  if (data[0] === 137 && data[1] === 80 && data[2] === 78 && data[3] === 71) return "image/png";
-  if (data[0] === 255 && data[1] === 216 && data[2] === 255) return "image/jpeg";
-  if (data[0] === 71 && data[1] === 73 && data[2] === 70) return "image/gif";
-  if (data[0] === 66 && data[1] === 77) return "image/bmp";
-  if (data[0] === 215 && data[1] === 205 && data[2] === 198 && data[3] === 154) return "image/wmf";
-  if (data[0] === 1 && data[1] === 0 && data[2] === 0 && data[3] === 0) return "image/emf";
-  return null;
-}
-function normalizeBinPayload(data) {
-  if (detectImageMime(data)) return data;
-  try {
-    const inflated = decompressStream(data);
-    if (inflated.length > 0) return inflated;
-  } catch {
-  }
-  return data;
-}
-var BIN_ENTRY_RE = /(?:^|\/)BIN([0-9A-Fa-f]{4,8})(?:\.[^./\\]*)?$/;
-function collectImageBlocks2(blocks, out) {
-  for (const b of blocks) {
-    if (b.type === "image") out.push(b);
-    if (b.table) {
-      for (const row of b.table.cells) {
-        for (const cell2 of row) {
-          if (cell2.blocks) collectImageBlocks2(cell2.blocks, out);
-        }
-      }
-    }
-    if (b.children) collectImageBlocks2(b.children, out);
-  }
-}
-function forEachTableCell(blocks, fn) {
-  for (const b of blocks) {
-    if (b.table) {
-      for (const row of b.table.cells) {
-        for (const cell2 of row) {
-          fn(cell2);
-          if (cell2.blocks) forEachTableCell(cell2.blocks, fn);
-        }
-      }
-    }
-    if (b.children) forEachTableCell(b.children, fn);
-  }
-}
-var CELL_IMAGE_SENTINEL_RE = /!\[image\]\(hwp5bin:(\d+)\)/g;
-function resolveCellImageSentinels(blocks, renamed) {
-  forEachTableCell(blocks, (cell2) => {
-    if (!cell2.text.includes("hwp5bin:")) return;
-    cell2.text = cell2.text.replace(CELL_IMAGE_SENTINEL_RE, (_m, idStr) => {
-      const filename = renamed.get(Number(idStr));
-      return filename ? `![image](${filename})` : "[\uC774\uBBF8\uC9C0]";
-    });
-  });
-}
-function resolveImageBlocks(binDataMap, blocks, warnings) {
-  const imageBlocks = [];
-  collectImageBlocks2(blocks, imageBlocks);
-  if (imageBlocks.length === 0) return [];
-  const images = [];
-  const renamed = /* @__PURE__ */ new Map();
-  const resolved = /* @__PURE__ */ new Map();
-  let imageIndex = 0;
-  for (const block of imageBlocks) {
-    if (!block.text) continue;
-    const storageId = parseInt(block.text, 10);
-    if (isNaN(storageId)) continue;
-    let img = resolved.get(storageId);
-    if (img === void 0) {
-      const bin = binDataMap.get(storageId);
-      if (!bin) {
-        warnings.push({ page: block.pageNumber, message: `BinData ${storageId} \uC5C6\uC74C`, code: "SKIPPED_IMAGE" });
-        resolved.set(storageId, null);
-      } else {
-        const mime = detectImageMime(bin.data);
-        if (!mime) {
-          warnings.push({ page: block.pageNumber, message: `BinData ${storageId}: \uC54C \uC218 \uC5C6\uB294 \uC774\uBBF8\uC9C0 \uD615\uC2DD`, code: "SKIPPED_IMAGE" });
-          resolved.set(storageId, null);
-        } else {
-          imageIndex++;
-          const ext = mime.includes("jpeg") ? "jpg" : mime.includes("png") ? "png" : mime.includes("gif") ? "gif" : mime.includes("bmp") ? "bmp" : "bin";
-          img = { filename: `image_${String(imageIndex).padStart(3, "0")}.${ext}`, data: new Uint8Array(bin.data), mime };
-          resolved.set(storageId, img);
-          images.push({ filename: img.filename, data: img.data, mimeType: img.mime });
-          renamed.set(storageId, img.filename);
-        }
-      }
-      img = resolved.get(storageId);
-    }
-    if (!img) {
-      const bin = binDataMap.get(storageId);
-      block.type = "paragraph";
-      block.text = bin ? `[\uC774\uBBF8\uC9C0: ${bin.name}]` : `[\uC774\uBBF8\uC9C0: BinData ${storageId}]`;
-      continue;
-    }
-    block.text = img.filename;
-    block.imageData = { data: img.data, mimeType: img.mime, filename: binDataMap.get(storageId).name };
-  }
-  resolveCellImageSentinels(blocks, renamed);
-  return images;
-}
-function extractHwp5Images(fileIndex, blocks, warnings) {
-  const binDataMap = /* @__PURE__ */ new Map();
-  if (fileIndex) {
-    for (const entry of fileIndex) {
-      if (!entry?.name || !entry.content) continue;
-      const match = entry.name.match(BIN_ENTRY_RE);
-      if (!match) continue;
-      const idx = parseInt(match[1], 16);
-      const data = normalizeBinPayload(Buffer.from(entry.content));
-      binDataMap.set(idx, { data, name: entry.name });
-    }
-  }
-  if (binDataMap.size === 0) {
-    resolveCellImageSentinels(blocks, /* @__PURE__ */ new Map());
-    return [];
-  }
-  return resolveImageBlocks(binDataMap, blocks, warnings);
-}
-function extractHwp5ImagesLenient(lcfb, blocks, warnings) {
-  const binDataMap = /* @__PURE__ */ new Map();
-  const binRe = /^BIN([0-9A-Fa-f]{4,8})(?:\.|$)/;
-  for (const e of lcfb.entries()) {
-    const match = e.name.match(binRe);
-    if (!match) continue;
-    const idx = parseInt(match[1], 16);
-    const raw = lcfb.findStream(e.name);
-    if (!raw) continue;
-    binDataMap.set(idx, { data: normalizeBinPayload(raw), name: e.name });
-  }
-  if (binDataMap.size === 0) {
-    resolveCellImageSentinels(blocks, /* @__PURE__ */ new Map());
-    return [];
-  }
-  return resolveImageBlocks(binDataMap, blocks, warnings);
-}
-
-// src/image/transcode.ts
-import { deflateSync } from "zlib";
-var CRC_TABLE = (() => {
-  const table2 = new Uint32Array(256);
-  for (let n = 0; n < 256; n++) {
-    let c = n;
-    for (let k = 0; k < 8; k++) {
-      c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
+function formatEastAsianNumber(n, digits, units, zero) {
+  if (n === 0) return zero;
+  if (n < 0 || n > 99999) return String(n);
+  let result = "";
+  let num4 = n;
+  let unit = 0;
+  while (num4 > 0) {
+    const d = num4 % 10;
+    if (d > 0) {
+      const digitStr = d === 1 && unit > 0 ? "" : digits[d];
+      result = digitStr + units[unit] + result;
     }
-    table2[n] = c >>> 0;
+    num4 = Math.floor(num4 / 10);
+    unit++;
   }
-  return table2;
-})();
-function crc32(bytes) {
-  let c = 4294967295;
-  for (let i = 0; i < bytes.length; i++) {
-    c = CRC_TABLE[(c ^ bytes[i]) & 255] ^ c >>> 8;
-  }
-  return (c ^ 4294967295) >>> 0;
-}
-var BI_RGB = 0;
-var MAX_DIM = 32767;
-var MAX_PIXELS = 36e6;
-function bmpToPng(bmp) {
-  if (bmp.length < 54) return null;
-  if (bmp[0] !== 66 || bmp[1] !== 77) return null;
-  const dv = new DataView(bmp.buffer, bmp.byteOffset, bmp.byteLength);
-  const dataOffset = dv.getUint32(10, true);
-  const headerSize = dv.getUint32(14, true);
-  if (headerSize < 40) return null;
-  const width = dv.getInt32(18, true);
-  const rawHeight = dv.getInt32(22, true);
-  const bitCount = dv.getUint16(28, true);
-  const compression = dv.getUint32(30, true);
-  if (compression !== BI_RGB) return null;
-  if (bitCount !== 24 && bitCount !== 32) return null;
-  if (width <= 0 || rawHeight === 0) return null;
-  if (width > MAX_DIM || Math.abs(rawHeight) > MAX_DIM) return null;
-  const topDown = rawHeight < 0;
-  const height = Math.abs(rawHeight);
-  if (width * height > MAX_PIXELS) return null;
-  const bytesPerPixel = bitCount >> 3;
-  const rowStride = width * bytesPerPixel + 3 & ~3;
-  if (dataOffset + rowStride * height > bmp.length) return null;
-  const rgba = new Uint8Array(width * height * 4);
-  let anyAlpha = 0;
-  for (let y = 0; y < height; y++) {
-    const srcRow = topDown ? y : height - 1 - y;
-    let src = dataOffset + srcRow * rowStride;
-    let dst = y * width * 4;
-    for (let x = 0; x < width; x++) {
-      rgba[dst] = bmp[src + 2];
-      rgba[dst + 1] = bmp[src + 1];
-      rgba[dst + 2] = bmp[src];
-      const a = bitCount === 32 ? bmp[src + 3] : 255;
-      rgba[dst + 3] = a;
-      anyAlpha |= a;
-      src += bytesPerPixel;
-      dst += 4;
-    }
-  }
-  if (bitCount === 32 && anyAlpha === 0) {
-    for (let i = 3; i < rgba.length; i += 4) rgba[i] = 255;
-  }
-  return encodePng(width, height, rgba);
-}
-var PNG_SIGNATURE = Uint8Array.of(137, 80, 78, 71, 13, 10, 26, 10);
-function chunk(type, data) {
-  const body = new Uint8Array(4 + data.length);
-  body[0] = type.charCodeAt(0);
-  body[1] = type.charCodeAt(1);
-  body[2] = type.charCodeAt(2);
-  body[3] = type.charCodeAt(3);
-  body.set(data, 4);
-  const out = new Uint8Array(8 + data.length + 4);
-  const dv = new DataView(out.buffer);
-  dv.setUint32(0, data.length, false);
-  out.set(body, 4);
-  dv.setUint32(8 + data.length, crc32(body), false);
-  return out;
+  return result;
 }
-function encodePng(width, height, rgba) {
-  const ihdr = new Uint8Array(13);
-  const iv = new DataView(ihdr.buffer);
-  iv.setUint32(0, width, false);
-  iv.setUint32(4, height, false);
-  ihdr[8] = 8;
-  ihdr[9] = 6;
-  const stride = width * 4;
-  const raw = new Uint8Array((stride + 1) * height);
-  for (let y = 0; y < height; y++) {
-    const rowStart = y * (stride + 1);
-    raw[rowStart] = 0;
-    raw.set(rgba.subarray(y * stride, y * stride + stride), rowStart + 1);
-  }
-  const idat = deflateSync(raw);
-  const ihdrChunk = chunk("IHDR", ihdr);
-  const idatChunk = chunk("IDAT", idat);
-  const iendChunk = chunk("IEND", new Uint8Array(0));
-  const out = new Uint8Array(PNG_SIGNATURE.length + ihdrChunk.length + idatChunk.length + iendChunk.length);
-  let o = 0;
-  out.set(PNG_SIGNATURE, o);
-  o += PNG_SIGNATURE.length;
-  out.set(ihdrChunk, o);
-  o += ihdrChunk.length;
-  out.set(idatChunk, o);
-  o += idatChunk.length;
-  out.set(iendChunk, o);
-  return out;
+var HANGUL_DIGITS = ["", "\uC77C", "\uC774", "\uC0BC", "\uC0AC", "\uC624", "\uC721", "\uCE60", "\uD314", "\uAD6C"];
+var HANGUL_UNITS = ["", "\uC2ED", "\uBC31", "\uCC9C", "\uB9CC"];
+var HANJA_DIGITS = ["", "\u4E00", "\u4E8C", "\u4E09", "\u56DB", "\u4E94", "\u516D", "\u4E03", "\u516B", "\u4E5D"];
+var HANJA_UNITS = ["", "\u5341", "\u767E", "\u5343", "\u842C"];
+function formatNumber(n, fmt) {
+  switch (fmt) {
+    case "circled":
+      return fromTable(n, CIRCLED_DIGITS);
+    case "romanUpper":
+      return formatRoman(n, true);
+    case "romanLower":
+      return formatRoman(n, false);
+    case "latinUpper":
+      return formatLatin(n, true) || String(n);
+    case "latinLower":
+      return formatLatin(n, false) || String(n);
+    case "ganada":
+      return fromTable(n, GANADA);
+    case "circledGanada":
+      return fromTable(n, CIRCLED_GANADA);
+    case "jamo":
+      return fromTable(n, JAMO);
+    case "circledJamo":
+      return fromTable(n, CIRCLED_JAMO);
+    case "hangulNum":
+      return formatEastAsianNumber(n, HANGUL_DIGITS, HANGUL_UNITS, "\uC601");
+    case "hanjaNum":
+      return formatEastAsianNumber(n, HANJA_DIGITS, HANJA_UNITS, "\u96F6");
+    default:
+      return String(n);
+  }
 }
-function escapeRegExp(s) {
-  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-function inlineImagesIntoMarkdown(markdown, images, opts) {
-  const compress = opts?.compress !== false;
-  let out = markdown;
-  for (const img of images) {
-    let bytes = img.data;
-    let mime = img.mimeType;
-    if (compress && mime === "image/bmp") {
-      const png = bmpToPng(img.data);
-      if (png) {
-        bytes = png;
-        mime = "image/png";
-      }
-    }
-    const base64 = Buffer.from(bytes).toString("base64");
-    const dataUri = `data:${mime};base64,${base64}`;
-    const name = escapeRegExp(img.filename);
-    const mdRe = new RegExp(`!\\[image\\]\\((?:images/)?${name}\\)`, "g");
-    out = out.replace(mdRe, () => `![image](${dataUri})`);
-    const imgTagRe = new RegExp(`(<img\\b[^>]*\\bsrc=")(?:images/)?${name}(")`, "g");
-    out = out.replace(imgTagRe, (_m, pre, post) => `${pre}${dataUri}${post}`);
+function expandNumberingFormat(formatStr, counters, numbering) {
+  let result = "";
+  let i = 0;
+  while (i < formatStr.length) {
+    const ch = formatStr[i];
+    if (ch === "^" && i + 1 < formatStr.length && formatStr[i + 1] >= "1" && formatStr[i + 1] <= "7") {
+      const levelRef = formatStr.charCodeAt(i + 1) - 48;
+      const idx = levelRef - 1;
+      const counterVal = counters[idx] ?? 0;
+      const start = numbering.startNumbers[idx] ?? 1;
+      const num4 = counterVal > 0 ? start - 1 + counterVal : start;
+      result += formatNumber(num4, headFormatToNumFmt(numbering.numberFormats[idx] ?? 0));
+      i += 2;
+      continue;
+    }
+    result += ch;
+    i++;
   }
-  return out;
+  return result;
 }
 
 // src/hwp5/aes.ts
@@ -4816,6 +4733,7 @@ function parseHwp5Document(buffer, options) {
   const totalTarget = pageFilter ? pageFilter.size : sections.length;
   const bodyBlocks = [];
   const doc = createHwp5DocState();
+  doc.keepTrailingEmptyCols = options?.keepTrailingEmptyCols;
   let totalDecompressed = 0;
   let parsedSections = 0;
   for (let si = 0; si < sections.length; si++) {
@@ -4836,7 +4754,7 @@ function parseHwp5Document(buffer, options) {
     }
   }
   const blocks = [...doc.headerBlocks, ...bodyBlocks, ...doc.footerBlocks];
-  const images = cfb ? extractHwp5Images(cfb.FileIndex, blocks, warnings) : extractHwp5ImagesLenient(lenientCfb, blocks, warnings);
+  const images = cfb ? extractHwp5Images(cfb.FileIndex, blocks, warnings, !pageFilter) : extractHwp5ImagesLenient(lenientCfb, blocks, warnings, !pageFilter);
   let flatBlocks = flattenLayoutTables(blocks);
   if (options?.dedupeRunningHeaders) {
     const deduped = dedupeRunningHeaders(flatBlocks);
@@ -5417,7 +5335,7 @@ function parseTableControl(ctrl, records, ctx) {
     return table3;
   }
   const cellRows = arrangeCells(rows, cols, cells);
-  const table2 = buildTable(cellRows);
+  const table2 = buildTable(cellRows, { keepAnchoredEmptyCols: ctx.doc.keepTrailingEmptyCols });
   if (caption && table2.rows > 0) table2.caption = caption;
   return table2.rows > 0 ? table2 : null;
 }
@@ -17611,6 +17529,7 @@ function readHeader(reader) {
 }
 
 // src/hwp3/parser.ts
+var MAX_DECOMPRESS_SIZE3 = 100 * 1024 * 1024;
 var PARA_SHAPE_SIZE = 187;
 var LINE_INFO_SIZE = 14;
 var INLINE_CHAR_SHAPE_SIZE = 31;
@@ -17646,8 +17565,11 @@ function parseHwp3Document(buffer, _options) {
   const warnings = [];
   if (header.compressed !== 0) {
     try {
-      body = inflateRawSync3(tail);
+      body = inflateRawSync3(tail, { maxOutputLength: MAX_DECOMPRESS_SIZE3 });
     } catch (err) {
+      if (err?.code === "ERR_BUFFER_TOO_LARGE") {
+        throw new Error(`HWP3 \uC555\uCD95 \uD574\uC81C \uACB0\uACFC\uAC00 \uCD5C\uB300 \uD5C8\uC6A9 \uD06C\uAE30(${MAX_DECOMPRESS_SIZE3 / 1024 / 1024}MB)\uB97C \uCD08\uACFC\uD588\uC2B5\uB2C8\uB2E4`);
+      }
       const msg2 = err instanceof Error ? err.message : String(err);
       throw new Error(`HWP3 \uC555\uCD95 \uD574\uC81C \uC2E4\uD328: ${msg2}`);
     }
@@ -17844,7 +17766,7 @@ function isDistributionSentinel(markdown) {
 import JSZip4 from "jszip";
 import { DOMParser as DOMParser2 } from "@xmldom/xmldom";
 var MAX_SHEETS = 100;
-var MAX_DECOMPRESS_SIZE3 = 100 * 1024 * 1024;
+var MAX_DECOMPRESS_SIZE4 = 100 * 1024 * 1024;
 var MAX_ROWS2 = 1e4;
 var MAX_COLS2 = 200;
 function cleanNumericValue(raw) {
@@ -17884,16 +17806,87 @@ function getTextContent(el) {
 function parseXml(text) {
   return new DOMParser2().parseFromString(stripDtd(text), "text/xml");
 }
+function collectRichText(root) {
+  let out = "";
+  const walk = (node) => {
+    const children = node.childNodes;
+    for (let i = 0; i < children.length; i++) {
+      if (children[i].nodeType !== 1) continue;
+      const el = children[i];
+      const local = el.localName || el.tagName?.replace(/^[^:]+:/, "") || "";
+      if (local === "rPh") continue;
+      if (local === "t") out += el.textContent ?? "";
+      else walk(el);
+    }
+  };
+  walk(root);
+  return out;
+}
 function parseSharedStrings(xml) {
   const doc = parseXml(xml);
   const strings = [];
   const siList = getElements(doc.documentElement, "si");
   for (const si of siList) {
-    const tElements = getElements(si, "t");
-    strings.push(tElements.map((t) => t.textContent ?? "").join(""));
+    strings.push(collectRichText(si));
   }
   return strings;
 }
+var BUILTIN_DATE_FMT = /* @__PURE__ */ new Map([
+  [14, "date"],
+  [15, "date"],
+  [16, "date"],
+  [17, "date"],
+  [18, "datetime"],
+  [19, "datetime"],
+  [20, "datetime"],
+  [21, "datetime"],
+  [22, "datetime"],
+  [45, "datetime"],
+  [46, "datetime"],
+  [47, "datetime"]
+]);
+function classifyDateFormat(code) {
+  const stripped = code.replace(/"[^"]*"/g, "").replace(/\[[^\]]*\]/g, "").replace(/\\./g, "");
+  if (!/[ymdh]/i.test(stripped)) return null;
+  return /[hs]/i.test(stripped) ? "datetime" : "date";
+}
+function dateKindOfFmt(fmtId, customFormats) {
+  const builtin = BUILTIN_DATE_FMT.get(fmtId);
+  if (builtin) return builtin;
+  const code = customFormats.get(fmtId);
+  return code !== void 0 ? classifyDateFormat(code) : null;
+}
+function dateSerialToIso(serial, date1904, kind) {
+  if (!isFinite(serial) || serial < 0) return null;
+  let days = serial;
+  if (date1904) days += 1462;
+  else if (days < 60) days += 1;
+  const ms = Math.round((days - 25569) * 864e5);
+  const d = new Date(ms);
+  if (isNaN(d.getTime()) || d.getUTCFullYear() > 9999) return null;
+  const iso = d.toISOString();
+  return kind === "datetime" ? iso.slice(0, 19) : iso.slice(0, 10);
+}
+function parseStyleDateXfs(xml) {
+  const doc = parseXml(xml);
+  const customFormats = /* @__PURE__ */ new Map();
+  for (const el of getElements(doc.documentElement, "numFmt")) {
+    const id = parseInt(el.getAttribute("numFmtId") ?? "", 10);
+    if (isNaN(id)) continue;
+    customFormats.set(id, el.getAttribute("formatCode") ?? "");
+  }
+  const dateXfs = /* @__PURE__ */ new Map();
+  const cellXfsEls = getElements(doc.documentElement, "cellXfs");
+  if (cellXfsEls.length === 0) return dateXfs;
+  const xfs = getElements(cellXfsEls[0], "xf");
+  for (let i = 0; i < xfs.length; i++) {
+    const fmtId = parseInt(xfs[i].getAttribute("numFmtId") ?? "", 10);
+    if (isNaN(fmtId)) continue;
+    const kind = dateKindOfFmt(fmtId, customFormats);
+    if (kind) dateXfs.set(i, kind);
+  }
+  return dateXfs;
+}
 function parseWorkbook(xml) {
   const doc = parseXml(xml);
   const sheets = [];
@@ -17905,7 +17898,9 @@ function parseWorkbook(xml) {
       rId: el.getAttribute("r:id") ?? ""
     });
   }
-  return sheets;
+  const prEls = getElements(doc.documentElement, "workbookPr");
+  const d1904 = prEls.length > 0 ? prEls[0].getAttribute("date1904") : null;
+  return { sheets, date1904: d1904 === "1" || d1904 === "true" };
 }
 function parseRels(xml) {
   const doc = parseXml(xml);
@@ -17918,21 +17913,25 @@ function parseRels(xml) {
   }
   return map;
 }
-function parseWorksheet(xml, sharedStrings) {
+function parseWorksheet(xml, sharedStrings, dateXfs, date1904) {
   const doc = parseXml(xml);
   const grid = [];
   let maxRow = 0;
   let maxCol = 0;
   const rows = getElements(doc.documentElement, "row");
+  let prevRow = -1;
   for (const rowEl of rows) {
-    const rowNum = parseInt(rowEl.getAttribute("r") ?? "0", 10) - 1;
+    const rAttr = rowEl.getAttribute("r");
+    const rowNum = rAttr !== null ? parseInt(rAttr, 10) - 1 : prevRow + 1;
     if (rowNum < 0 || rowNum >= MAX_ROWS2) continue;
+    if (Number.isFinite(rowNum)) prevRow = rowNum;
     const cells = getElements(rowEl, "c");
+    let prevCol = -1;
     for (const cellEl of cells) {
       const ref = cellEl.getAttribute("r");
-      if (!ref) continue;
-      const pos = parseCellRef(ref);
-      if (!pos || pos.col >= MAX_COLS2) continue;
+      const pos = ref !== null ? parseCellRef(ref) : { col: prevCol + 1, row: rowNum };
+      if (!pos || !Number.isFinite(pos.row) || pos.row < 0 || pos.row >= MAX_ROWS2 || pos.col >= MAX_COLS2) continue;
+      prevCol = pos.col;
       const type = cellEl.getAttribute("t");
       const vElements = getElements(cellEl, "v");
       const fElements = getElements(cellEl, "f");
@@ -17946,12 +17945,19 @@ function parseWorksheet(xml, sharedStrings) {
           value = raw === "1" ? "TRUE" : "FALSE";
         } else {
           value = cleanNumericValue(raw);
+          if (type === null || type === "n") {
+            const sAttr = cellEl.getAttribute("s");
+            const kind = sAttr !== null ? dateXfs.get(parseInt(sAttr, 10)) : void 0;
+            if (kind) {
+              const iso = dateSerialToIso(parseFloat(raw), date1904, kind);
+              if (iso) value = iso;
+            }
+          }
         }
       } else if (type === "inlineStr") {
         const isEl = getElements(cellEl, "is");
         if (isEl.length > 0) {
-          const tElements = getElements(isEl[0], "t");
-          value = tElements.map((t) => t.textContent ?? "").join("");
+          value = collectRichText(isEl[0]);
         }
       }
       if (!value && fElements.length > 0) {
@@ -17970,7 +17976,14 @@ function parseWorksheet(xml, sharedStrings) {
     const ref = el.getAttribute("ref");
     if (!ref) continue;
     const m = parseMergeRef(ref);
-    if (m) merges.push(m);
+    if (m) {
+      merges.push({
+        startCol: Math.min(m.startCol, MAX_COLS2 - 1),
+        startRow: Math.min(m.startRow, MAX_ROWS2 - 1),
+        endCol: Math.min(m.endCol, MAX_COLS2 - 1),
+        endRow: Math.min(m.endRow, MAX_ROWS2 - 1)
+      });
+    }
   }
   return { grid, merges, maxRow, maxCol };
 }
@@ -18034,7 +18047,7 @@ function sheetToBlocks(sheetName, grid, merges, maxRow, maxCol, sheetIndex) {
   return blocks;
 }
 async function parseXlsxDocument(buffer, options) {
-  precheckZipSize(buffer, MAX_DECOMPRESS_SIZE3);
+  precheckZipSize(buffer, MAX_DECOMPRESS_SIZE4);
   const zip = await JSZip4.loadAsync(buffer);
   const warnings = [];
   const workbookFile = zip.file("xl/workbook.xml");
@@ -18046,10 +18059,18 @@ async function parseXlsxDocument(buffer, options) {
   if (ssFile) {
     sharedStrings = parseSharedStrings(await ssFile.async("text"));
   }
-  const sheets = parseWorkbook(await workbookFile.async("text"));
+  const { sheets, date1904 } = parseWorkbook(await workbookFile.async("text"));
   if (sheets.length === 0) {
     throw new KordocError("XLSX \uD30C\uC77C\uC5D0 \uC2DC\uD2B8\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4");
   }
+  let dateXfs = /* @__PURE__ */ new Map();
+  const stylesFile = zip.file("xl/styles.xml");
+  if (stylesFile) {
+    try {
+      dateXfs = parseStyleDateXfs(await stylesFile.async("text"));
+    } catch {
+    }
+  }
   let relsMap = /* @__PURE__ */ new Map();
   const relsFile = zip.file("xl/_rels/workbook.xml.rels");
   if (relsFile) {
@@ -18057,7 +18078,7 @@ async function parseXlsxDocument(buffer, options) {
   }
   let pageFilter = null;
   if (options?.pages) {
-    const { parsePageRange: parsePageRange2 } = await import("./page-range-CIRRJPXJ.js");
+    const { parsePageRange: parsePageRange2 } = await import("./page-range-LNMXJU6W.js");
     pageFilter = parsePageRange2(options.pages, sheets.length);
   }
   const blocks = [];
@@ -18087,7 +18108,7 @@ async function parseXlsxDocument(buffer, options) {
     }
     try {
       const sheetXml = await sheetFile.async("text");
-      const { grid, merges, maxRow, maxCol } = parseWorksheet(sheetXml, sharedStrings);
+      const { grid, merges, maxRow, maxCol } = parseWorksheet(sheetXml, sharedStrings, dateXfs, date1904);
       const sheetBlocks = sheetToBlocks(sheet.name, grid, merges, maxRow, maxCol, i);
       blocks.push(...sheetBlocks);
     } catch (err) {
@@ -18131,7 +18152,10 @@ var OP_CONTINUE = 60;
 var OP_BOUNDSHEET8 = 133;
 var OP_SST = 252;
 var OP_CODEPAGE = 66;
+var OP_DATE1904 = 34;
 var OP_FILEPASS = 47;
+var OP_FORMAT = 1054;
+var OP_XF = 224;
 var OP_NUMBER = 515;
 var OP_RK = 638;
 var OP_MULRK = 189;
@@ -18143,6 +18167,8 @@ var OP_BOOLERR = 517;
 var OP_BLANK = 513;
 var OP_MULBLANK = 190;
 var OP_MERGECELLS = 229;
+var OP_SHRFMLA = 1212;
+var OP_ARRAY = 545;
 var DT_GLOBALS = 5;
 var DT_WORKSHEET = 16;
 var MAX_RECORDS2 = 1e6;
@@ -18238,7 +18264,7 @@ function decodeUtf16Le(buf) {
 }
 
 // src/xls/sst.ts
-function parseString(buf, offset, segments) {
+function parseString(buf, offset, segments, segCursor) {
   if (offset + 3 > buf.length) return null;
   const cch = buf.readUInt16LE(offset);
   let flags = buf.readUInt8(offset + 2);
@@ -18261,7 +18287,15 @@ function parseString(buf, offset, segments) {
   const charBytes = [];
   let charsRead = 0;
   while (charsRead < cch) {
-    const nextBoundary = segments.find((s) => s > off) ?? buf.length;
+    while (segCursor.idx < segments.length && segments[segCursor.idx] < off) segCursor.idx++;
+    if (segCursor.idx < segments.length && segments[segCursor.idx] === off) {
+      if (off >= buf.length) return null;
+      flags = buf.readUInt8(off);
+      highByte = (flags & 1) !== 0;
+      off += 1;
+      segCursor.idx++;
+    }
+    const nextBoundary = segCursor.idx < segments.length ? segments[segCursor.idx] : buf.length;
     const remainChars = cch - charsRead;
     const bytesPerChar = highByte ? 2 : 1;
     const bytesAvail = nextBoundary - off;
@@ -18272,12 +18306,10 @@ function parseString(buf, offset, segments) {
       charBytes.push(highByte ? slice : padToUtf16(slice));
       off += bytesToRead;
       charsRead += charsInThisRun;
-    }
-    if (charsRead < cch) {
-      if (off >= buf.length) return null;
-      flags = buf.readUInt8(off);
-      highByte = (flags & 1) !== 0;
-      off += 1;
+    } else if (nextBoundary < buf.length) {
+      off = nextBoundary;
+    } else {
+      return null;
     }
   }
   const text = decodeUtf16Le(Buffer.concat(charBytes));
@@ -18302,8 +18334,9 @@ function decodeSST(records) {
   const cstUnique = combined.readUInt32LE(4);
   const strings = [];
   let off = 8;
+  const segCursor = { idx: 0 };
   for (let i = 0; i < cstUnique && off < combined.length; i++) {
-    const r = parseString(combined, off, segments);
+    const r = parseString(combined, off, segments, segCursor);
     if (!r) break;
     strings.push(r.text);
     off += r.consumed;
@@ -18378,7 +18411,7 @@ function decodeFormulaStringRecord(data) {
     return decodeUtf16Le(padded);
   }
 }
-function extractSheetCells(records, bofIndex, sst) {
+function extractSheetCells(records, bofIndex, sst, convertNum) {
   const cells = [];
   const merges = [];
   const bofOffset = records[bofIndex].offset;
@@ -18396,14 +18429,16 @@ function extractSheetCells(records, bofIndex, sst) {
       case OP_NUMBER: {
         const h = readCellHeader(rec.data);
         if (h && rec.data.length >= 14) {
-          cells.push({ row: h.row, col: h.col, value: rec.data.readDoubleLE(6) });
+          const n = rec.data.readDoubleLE(6);
+          cells.push({ row: h.row, col: h.col, value: convertNum ? convertNum(n, h.ixfe) : n });
         }
         break;
       }
       case OP_RK: {
         const h = readCellHeader(rec.data);
         if (h && rec.data.length >= 10) {
-          cells.push({ row: h.row, col: h.col, value: decodeRk(rec.data.readInt32LE(6)) });
+          const n = decodeRk(rec.data.readInt32LE(6));
+          cells.push({ row: h.row, col: h.col, value: convertNum ? convertNum(n, h.ixfe) : n });
         }
         break;
       }
@@ -18411,7 +18446,7 @@ function extractSheetCells(records, bofIndex, sst) {
         const m = decodeMulRk(rec.data);
         if (m) {
           for (const c of m.cells) {
-            cells.push({ row: m.row, col: c.col, value: c.value });
+            cells.push({ row: m.row, col: c.col, value: convertNum ? convertNum(c.value, c.ixfe) : c.value });
           }
         }
         break;
@@ -18436,19 +18471,26 @@ function extractSheetCells(records, bofIndex, sst) {
         if (h && rec.data.length >= 14) {
           const result = decodeFormulaResult(rec.data.subarray(6, 14));
           if (result.kind === "stringRef") {
-            const next = records[i + 1];
+            let j = i + 1;
+            while (j < records.length && (records[j].opcode === OP_SHRFMLA || records[j].opcode === OP_ARRAY)) j++;
+            const next = records[j];
             if (next && next.opcode === OP_STRING) {
               cells.push({
                 row: h.row,
                 col: h.col,
                 value: decodeFormulaStringRecord(next.data)
               });
-              i++;
+              i = j;
             } else {
               cells.push({ row: h.row, col: h.col, value: "" });
             }
           } else {
-            cells.push({ row: h.row, col: h.col, value: result.value });
+            const v = result.value;
+            cells.push({
+              row: h.row,
+              col: h.col,
+              value: convertNum && typeof v === "number" ? convertNum(v, h.ixfe) : v
+            });
           }
         }
         break;
@@ -18498,7 +18540,7 @@ function extractSheetCells(records, bofIndex, sst) {
 
 // src/xls/parser.ts
 var MAX_SHEETS2 = 100;
-var MAX_ROWS3 = 1e5;
+var MAX_ROWS3 = 65536;
 var MAX_COLS3 = 1e3;
 function decodeBoundSheet(data) {
   if (data.length < 8) return null;
@@ -18521,10 +18563,33 @@ function decodeBoundSheet(data) {
   }
   return { name, lbPlyPos, dt };
 }
+function decodeFormatRecord(data) {
+  if (data.length < 5) return null;
+  const ifmt = data.readUInt16LE(0);
+  const cch = data.readUInt16LE(2);
+  const flags = data.readUInt8(4);
+  const highByte = (flags & 1) !== 0;
+  const start = 5;
+  let code;
+  if (highByte) {
+    const end = Math.min(start + cch * 2, data.length);
+    code = decodeUtf16Le(data.subarray(start, end));
+  } else {
+    const end = Math.min(start + cch, data.length);
+    const slice = data.subarray(start, end);
+    const padded = Buffer.alloc(slice.length * 2);
+    for (let i = 0; i < slice.length; i++) padded[i * 2] = slice[i];
+    code = decodeUtf16Le(padded);
+  }
+  return { ifmt, code };
+}
 function processGlobals(records) {
   const sheets = [];
   let codePage = 1200;
   let encrypted = false;
+  let date1904 = false;
+  const customFormats = /* @__PURE__ */ new Map();
+  const xfFmtIds = [];
   const firstBof = records[0];
   if (!firstBof || firstBof.opcode !== OP_BOF) {
     throw new KordocError("XLS: \uCCAB \uB808\uCF54\uB4DC\uAC00 BOF\uAC00 \uC544\uB2D8");
@@ -18547,21 +18612,41 @@ function processGlobals(records) {
       codePage = r.data.readUInt16LE(0);
     } else if (r.opcode === OP_FILEPASS) {
       encrypted = true;
+    } else if (r.opcode === OP_DATE1904 && r.data.length >= 2) {
+      date1904 = r.data.readUInt16LE(0) === 1;
+    } else if (r.opcode === OP_FORMAT) {
+      const f = decodeFormatRecord(r.data);
+      if (f) customFormats.set(f.ifmt, f.code);
+    } else if (r.opcode === OP_XF && r.data.length >= 4) {
+      xfFmtIds.push(r.data.readUInt16LE(2));
     }
     i++;
   }
+  const dateXfs = /* @__PURE__ */ new Map();
+  for (let k = 0; k < xfFmtIds.length; k++) {
+    const kind = dateKindOfFmt(xfFmtIds[k], customFormats);
+    if (kind) dateXfs.set(k, kind);
+  }
   const globalsRecords = records.slice(0, i);
   const sst = decodeSST(globalsRecords);
-  return { sheets, sst, codePage, encrypted, endIndex: i };
+  return { sheets, sst, codePage, encrypted, dateXfs, date1904, endIndex: i };
 }
 function findSheetBofIndex(records, lbPlyPos) {
   const exact = records.findIndex(
     (r) => r.opcode === OP_BOF && r.offset === lbPlyPos
   );
   if (exact >= 0) return exact;
-  const bofIndices = records.map((r, idx) => r.opcode === OP_BOF ? idx : -1).filter((idx) => idx >= 0);
-  if (bofIndices.length === 0) return -1;
-  return bofIndices.length > 1 ? bofIndices[1] : -1;
+  let best = -1;
+  let bestOffset = Infinity;
+  for (let idx = 1; idx < records.length; idx++) {
+    const r = records[idx];
+    if (r.opcode !== OP_BOF) continue;
+    if (r.offset >= lbPlyPos && r.offset < bestOffset) {
+      best = idx;
+      bestOffset = r.offset;
+    }
+  }
+  return best;
 }
 function cellValueToText(v) {
   if (v === null || v === void 0) return "";
@@ -18692,10 +18777,18 @@ async function parseXlsDocument(buffer, options) {
       ]
     };
   }
+  const convertNum = globals.dateXfs.size > 0 ? (n, ixfe) => {
+    const kind = globals.dateXfs.get(ixfe);
+    if (kind) {
+      const iso = dateSerialToIso(n, globals.date1904, kind);
+      if (iso) return iso;
+    }
+    return n;
+  } : void 0;
   const totalSheets = Math.min(globals.sheets.length, MAX_SHEETS2);
   let pageFilter = null;
   if (options?.pages) {
-    const { parsePageRange: parsePageRange2 } = await import("./page-range-CIRRJPXJ.js");
+    const { parsePageRange: parsePageRange2 } = await import("./page-range-LNMXJU6W.js");
     pageFilter = parsePageRange2(options.pages, totalSheets);
   }
   const allBlocks = [];
@@ -18718,7 +18811,7 @@ async function parseXlsDocument(buffer, options) {
       continue;
     }
     try {
-      const { sheet } = extractSheetCells(records, bofIdx, globals.sst);
+      const { sheet } = extractSheetCells(records, bofIdx, globals.sst, convertNum);
       const blocks = sheetToBlocks2(meta.name, sheet, i);
       allBlocks.push(...blocks);
     } catch (e) {
@@ -18846,6 +18939,9 @@ var NARY_MAP = {
   "\u2A02": "\\bigotimes",
   "\u2A00": "\\bigodot"
 };
+function onOffVal(v) {
+  return v !== "0" && v !== "false" && v !== "off";
+}
 function mapDelim(ch, isLeft) {
   const l = {
     "(": "(",
@@ -18872,10 +18968,23 @@ function mapDelim(ch, isLeft) {
   const map = isLeft ? l : r;
   return map[ch] ?? ch;
 }
+function isBalancedWrap(s) {
+  let depth = 0;
+  for (let i = 0; i < s.length; i++) {
+    const ch = s[i];
+    if (ch === "{" && s[i - 1] !== "\\") depth++;
+    else if (ch === "}" && s[i - 1] !== "\\") {
+      depth--;
+      if (depth === 0) return i === s.length - 1;
+      if (depth < 0) return false;
+    }
+  }
+  return false;
+}
 function grp(body) {
   const s = body.trim();
   if (s.length === 0) return "{}";
-  if (s.startsWith("{") && s.endsWith("}")) return s;
+  if (s.startsWith("{") && s.endsWith("}") && isBalancedWrap(s)) return s;
   return "{" + s + "}";
 }
 function childrenToLatex(parent) {
@@ -18969,8 +19078,8 @@ function nodeToLatex(el) {
         }
         const sh = firstKid(naryPr, "subHide");
         const ph = firstKid(naryPr, "supHide");
-        if (sh) subHide = (sh.getAttribute("m:val") ?? sh.getAttribute("val")) !== "0";
-        if (ph) supHide = (ph.getAttribute("m:val") ?? ph.getAttribute("val")) !== "0";
+        if (sh) subHide = onOffVal(sh.getAttribute("m:val") ?? sh.getAttribute("val"));
+        if (ph) supHide = onOffVal(ph.getAttribute("m:val") ?? ph.getAttribute("val"));
         const ll = firstKid(naryPr, "limLoc");
         if (ll) limLoc = ll.getAttribute("m:val") ?? ll.getAttribute("val") ?? "";
       }
@@ -19117,7 +19226,7 @@ function isDisplayMath(el) {
 }
 
 // src/docx/parser.ts
-var MAX_DECOMPRESS_SIZE4 = 100 * 1024 * 1024;
+var MAX_DECOMPRESS_SIZE5 = 100 * 1024 * 1024;
 function matchesLocal(el, localName2) {
   return el.localName === localName2 || (el.tagName?.endsWith(`:${localName2}`) ?? false);
 }
@@ -19135,6 +19244,8 @@ function effectiveChildElements(parent) {
           result.push(...effectiveChildElements(c));
         }
       }
+    } else if (matchesLocal(el, "ins") || matchesLocal(el, "smartTag")) {
+      result.push(...effectiveChildElements(el));
     } else {
       result.push(el);
     }
@@ -19199,6 +19310,21 @@ function parseStyles(xml) {
     }
     styles.set(styleId, { name, basedOn, outlineLevel });
   }
+  for (const [styleId, info] of styles) {
+    if (info.outlineLevel !== void 0) continue;
+    const seen = /* @__PURE__ */ new Set([styleId]);
+    let cur = info.basedOn;
+    while (cur && !seen.has(cur)) {
+      seen.add(cur);
+      const parent = styles.get(cur);
+      if (!parent) break;
+      if (parent.outlineLevel !== void 0) {
+        info.outlineLevel = parent.outlineLevel;
+        break;
+      }
+      cur = parent.basedOn;
+    }
+  }
   return styles;
 }
 function parseNumbering(xml) {
@@ -19286,8 +19412,12 @@ function collectOmmlRoots(p) {
   return out;
 }
 function extractRun(r) {
-  const tElements = getChildElements(r, "t");
-  const text = tElements.map((t) => t.textContent ?? "").join("");
+  let text = "";
+  for (const el of effectiveChildElements(r)) {
+    if (matchesLocal(el, "t")) text += el.textContent ?? "";
+    else if (matchesLocal(el, "br") || matchesLocal(el, "cr")) text += "\n";
+    else if (matchesLocal(el, "tab")) text += " ";
+  }
   let bold = false;
   let italic = false;
   const rPrEls = getChildElements(r, "rPr");
@@ -19442,7 +19572,7 @@ function collectTextboxParagraphs(node, inTxbx = false, out = [], depth = 0) {
   }
   return out;
 }
-function parseTable(tbl2, styles, numbering, footnotes, rels) {
+function parseTable(tbl2, styles, numbering, footnotes, rels, keepEmptyCols) {
   const trElements = getChildElements(tbl2, "tr");
   if (trElements.length === 0) return null;
   const rawRows = [];
@@ -19504,7 +19634,7 @@ ${cell2.text}` : cell2.text;
       return { text: cell2.text, colSpan: cell2.colSpan, rowSpan, colAddr: cell2.col, rowAddr: r };
     })
   );
-  const table2 = buildTable(cellRows);
+  const table2 = buildTable(cellRows, { keepAnchoredEmptyCols: keepEmptyCols });
   if (table2.rows === 0 || table2.cols === 0) return null;
   return { type: "table", table: table2 };
 }
@@ -19533,9 +19663,17 @@ async function buildImageMap(zip, rels, doc, warnings) {
   const imageMap = /* @__PURE__ */ new Map();
   const images = [];
   let imgIdx = 0;
+  const imageRefs = [];
   for (const blip of findElements(doc.documentElement, "blip")) {
     const embedId = getAttr(blip, "embed");
-    if (!embedId || imageMap.has(embedId)) continue;
+    if (embedId) imageRefs.push(embedId);
+  }
+  for (const imagedata of collectNonFallbackImagedata(doc.documentElement)) {
+    const embedId = getAttr(imagedata, "id");
+    if (embedId) imageRefs.push(embedId);
+  }
+  for (const embedId of imageRefs) {
+    if (imageMap.has(embedId)) continue;
     const target = rels.get(embedId);
     if (!target) continue;
     const imgPath = target.startsWith("/") ? target.slice(1) : target.startsWith("word/") ? target : `word/${target}`;
@@ -19570,14 +19708,26 @@ function collectParagraphBlips(node, out = [], depth = 0) {
   if (depth > 40) return out;
   for (const el of effectiveChildElements(node)) {
     if (matchesLocal(el, "txbxContent") || matchesLocal(el, "Fallback")) continue;
-    if (matchesLocal(el, "blip")) out.push(el);
+    if (matchesLocal(el, "blip") || matchesLocal(el, "imagedata")) out.push(el);
     else collectParagraphBlips(el, out, depth + 1);
   }
   return out;
 }
+function collectNonFallbackImagedata(node, out = [], depth = 0) {
+  if (depth > 60) return out;
+  const children = node.childNodes;
+  for (let i = 0; i < children.length; i++) {
+    if (children[i].nodeType !== 1) continue;
+    const el = children[i];
+    if (matchesLocal(el, "Fallback")) continue;
+    if (matchesLocal(el, "imagedata")) out.push(el);
+    else collectNonFallbackImagedata(el, out, depth + 1);
+  }
+  return out;
+}
 function emitParagraphImages(p, imageMap, linked, out) {
   for (const blip of collectParagraphBlips(p)) {
-    const embedId = getAttr(blip, "embed");
+    const embedId = getAttr(blip, "embed") ?? getAttr(blip, "id");
     if (!embedId) continue;
     const filename = imageMap.get(embedId);
     if (!filename) continue;
@@ -19586,7 +19736,7 @@ function emitParagraphImages(p, imageMap, linked, out) {
   }
 }
 async function parseDocxDocument(buffer, options) {
-  precheckZipSize(buffer, MAX_DECOMPRESS_SIZE4);
+  precheckZipSize(buffer, MAX_DECOMPRESS_SIZE5);
   const zip = await JSZip5.loadAsync(buffer);
   const warnings = [];
   const docFile = zip.file("word/document.xml");
@@ -19657,7 +19807,7 @@ async function parseDocxDocument(buffer, options) {
         if (imageMap.size > 0) emitParagraphImages(tp, imageMap, linkedImages, blocks);
       }
     } else if (localName2 === "tbl") {
-      const block = parseTable(el, styles, numbering, footnotes, rels);
+      const block = parseTable(el, styles, numbering, footnotes, rels, options?.keepTrailingEmptyCols);
       if (block) blocks.push(block);
     }
   }
@@ -19749,7 +19899,7 @@ function parseHwpmlDocument(buffer, options) {
     if (localName(el) !== "SECTION") continue;
     sectionIdx++;
     if (pageFilter && !pageFilter.has(sectionIdx)) continue;
-    parseSection2(el, blocks, paraShapeMap, sectionIdx, warnings);
+    parseSection2(el, blocks, paraShapeMap, sectionIdx, warnings, options?.keepTrailingEmptyCols ?? false);
   }
   const outline = blocks.filter((b) => b.type === "heading" && b.text).map((b) => ({ level: b.level ?? 1, text: b.text, pageNumber: b.pageNumber }));
   const markdown = blocksToMarkdown(blocks);
@@ -19785,10 +19935,10 @@ function buildParaShapeMap(root) {
   }
   return map;
 }
-function parseSection2(section, blocks, paraShapeMap, sectionNum, warnings) {
-  walkContent(section, blocks, paraShapeMap, sectionNum, warnings, false);
+function parseSection2(section, blocks, paraShapeMap, sectionNum, warnings, keep) {
+  walkContent(section, blocks, paraShapeMap, sectionNum, warnings, false, keep);
 }
-function walkContent(node, blocks, paraShapeMap, sectionNum, warnings, inHeaderFooter, depth = 0) {
+function walkContent(node, blocks, paraShapeMap, sectionNum, warnings, inHeaderFooter, keep, depth = 0) {
   if (depth > MAX_XML_DEPTH2) return;
   const children = node.childNodes;
   for (let i = 0; i < children.length; i++) {
@@ -19801,24 +19951,24 @@ function walkContent(node, blocks, paraShapeMap, sectionNum, warnings, inHeaderF
     if (tag === "P") {
       if (!inHeaderFooter) {
         parseParagraph3(el, blocks, paraShapeMap, sectionNum);
-        walkTablesInP(el, blocks, paraShapeMap, sectionNum, warnings);
+        walkTablesInP(el, blocks, paraShapeMap, sectionNum, warnings, keep);
       }
       continue;
     }
     if (tag === "TABLE") {
       if (!inHeaderFooter) {
-        parseTable2(el, blocks, paraShapeMap, sectionNum, warnings);
+        parseTable2(el, blocks, paraShapeMap, sectionNum, warnings, keep);
       }
       continue;
     }
     if (tag === "PARALIST" || tag === "SECTION" || tag === "COLDEF") {
-      walkContent(el, blocks, paraShapeMap, sectionNum, warnings, inHeaderFooter, depth + 1);
+      walkContent(el, blocks, paraShapeMap, sectionNum, warnings, inHeaderFooter, keep, depth + 1);
       continue;
     }
-    walkContent(el, blocks, paraShapeMap, sectionNum, warnings, inHeaderFooter, depth + 1);
+    walkContent(el, blocks, paraShapeMap, sectionNum, warnings, inHeaderFooter, keep, depth + 1);
   }
 }
-function walkTablesInP(node, blocks, paraShapeMap, sectionNum, warnings, depth = 0) {
+function walkTablesInP(node, blocks, paraShapeMap, sectionNum, warnings, keep, depth = 0) {
   if (depth > MAX_XML_DEPTH2) return;
   const children = node.childNodes;
   for (let i = 0; i < children.length; i++) {
@@ -19826,11 +19976,11 @@ function walkTablesInP(node, blocks, paraShapeMap, sectionNum, warnings, depth =
     if (el.nodeType !== 1) continue;
     const tag = localName(el);
     if (tag === "TABLE") {
-      parseTable2(el, blocks, paraShapeMap, sectionNum, warnings);
+      parseTable2(el, blocks, paraShapeMap, sectionNum, warnings, keep);
       continue;
     }
     if (tag === "FOOTNOTE" || tag === "ENDNOTE" || tag === "HEADER" || tag === "FOOTER") continue;
-    walkTablesInP(el, blocks, paraShapeMap, sectionNum, warnings, depth + 1);
+    walkTablesInP(el, blocks, paraShapeMap, sectionNum, warnings, keep, depth + 1);
   }
 }
 function parseParagraph3(el, blocks, paraShapeMap, sectionNum) {
@@ -19866,7 +20016,7 @@ function collectCharText(node, parts, depth = 0) {
     }
   }
 }
-function parseTable2(el, blocks, paraShapeMap, sectionNum, warnings) {
+function parseTable2(el, blocks, paraShapeMap, sectionNum, warnings, keep) {
   const cells = [];
   const rowCount = parseInt(el.getAttribute("RowCount") ?? "0", 10);
   const colCount = parseInt(el.getAttribute("ColCount") ?? "0", 10);
@@ -19910,7 +20060,7 @@ function parseTable2(el, blocks, paraShapeMap, sectionNum, warnings) {
   const cellRows = grid.map(
     (row) => row.map((cell2) => cell2 ?? { text: "", colSpan: 1, rowSpan: 1 })
   );
-  const table2 = buildTable(cellRows);
+  const table2 = buildTable(cellRows, { keepAnchoredEmptyCols: keep });
   const caption = extractShapeCaption(el);
   if (caption.text && caption.before) {
     blocks.push({ type: "paragraph", text: caption.text, pageNumber: sectionNum });
@@ -20146,7 +20296,7 @@ function findMatchingKey(cellLabel, values) {
         bestKey = key;
       }
     } else if (key.startsWith(cellLabel)) {
-      if (cellLabel.length >= key.length * 0.6 && cellLabel.length > bestLen) {
+      if (cellLabel.length >= key.length * 0.75 && cellLabel.length > bestLen) {
         bestLen = cellLabel.length;
         bestKey = key;
       }
@@ -20186,7 +20336,7 @@ function fillInCellPatterns(cellText, values, matchedLabels, blockedLabels) {
       const matchKey = values.available(normalizedKw) ? normalizedKw : void 0;
       if (matchKey === void 0) return match;
       const val = values.peek(matchKey);
-      const isTruthy = ["\u2611", "\u2713", "\u2714", "v", "V", "true", "1", "yes", "o", "O"].includes(val.trim()) || val.trim() === "";
+      const isTruthy = ["\u2611", "\u2713", "\u2714", "v", "V", "true", "1", "yes", "o", "O"].includes(val.trim());
       if (!isTruthy) return match;
       values.consume(matchKey);
       matchedLabels.add(matchKey);
@@ -20208,14 +20358,20 @@ function fillInCellPatterns(cellText, values, matchedLabels, blockedLabels) {
   );
   return matches.length > 0 ? { text, matches } : null;
 }
-var INLINE_LABEL_RE = /([가-힣A-Za-z]{2,10})\s*[:：]/g;
+var INLINE_LABEL_RE = /((?:[가-힣A-Za-z]{1,10} )?)([가-힣A-Za-z]{2,10})\s*[:：]/g;
 function scanInlineSegments(text) {
   const labels = [];
   INLINE_LABEL_RE.lastIndex = 0;
   let m;
   while ((m = INLINE_LABEL_RE.exec(text)) !== null) {
     if (text[INLINE_LABEL_RE.lastIndex] === "/") continue;
-    labels.push({ label: m[1], start: m.index, end: INLINE_LABEL_RE.lastIndex });
+    labels.push({
+      label: m[2],
+      ext: m[1] ? m[1] + m[2] : void 0,
+      extStart: m[1] ? m.index : void 0,
+      start: m.index + m[1].length,
+      end: INLINE_LABEL_RE.lastIndex
+    });
   }
   const segments = [];
   for (let i = 0; i < labels.length; i++) {
@@ -20233,21 +20389,44 @@ function scanInlineSegments(text) {
       labelStart: cur.start,
       valueStart: vs,
       valueEnd: ve,
-      value: text.slice(vs, ve)
+      value: text.slice(vs, ve),
+      ...cur.ext !== void 0 ? { extLabel: cur.ext, extStart: cur.extStart } : {}
     });
   }
   return segments;
 }
+function matchInlineSegment(seg, values, blockedLabels) {
+  const nlabel = normalizeLabel(seg.label);
+  if (seg.extLabel !== void 0) {
+    const nExt = normalizeLabel(seg.extLabel);
+    if (nExt !== nlabel && !blockedLabels?.has(nExt) && values.has(nExt)) {
+      return { key: nExt, label: seg.extLabel, viaExt: true };
+    }
+  }
+  if (blockedLabels?.has(nlabel)) return void 0;
+  const key = findMatchingKey(nlabel, values);
+  return key !== void 0 ? { key, label: seg.label, viaExt: false } : void 0;
+}
+function clampSegmentEnd(text, seg, next, nextViaExt) {
+  let ve = seg.valueEnd;
+  if (nextViaExt && next?.extStart !== void 0 && next.extStart < ve) ve = next.extStart;
+  while (ve > seg.valueStart && /\s/.test(text[ve - 1])) ve--;
+  return ve;
+}
 function padInsertion(text, pos, value) {
   const lead = pos > 0 && !/\s/.test(text[pos - 1]) ? " " : "";
   const trail = pos < text.length && !/\s/.test(text[pos]) ? " " : "";
   return lead + value + trail;
 }
-function normalizeValues(values) {
+function normalizeValues(values, warnings) {
   const map = /* @__PURE__ */ new Map();
   for (const [label, raw] of Object.entries(values)) {
     const { value, format } = typeof raw === "object" && !Array.isArray(raw) ? raw : { value: raw, format: void 0 };
-    map.set(normalizeLabel(label), Array.isArray(value) ? value.map((v) => formatFillValue(v, format)) : formatFillValue(value, format));
+    const key = normalizeLabel(label);
+    if (map.has(key)) {
+      warnings?.push(`\uC785\uB825 \uB77C\uBCA8 "${label}"\uC774 \uC815\uADDC\uD654 \uD0A4 "${key}"\uC5D0\uC11C \uB2E4\uB978 \uB77C\uBCA8\uACFC \uCDA9\uB3CC \u2014 \uB4A4 \uAC12\uC73C\uB85C \uB36E\uC5B4\uC500`);
+    }
+    map.set(key, Array.isArray(value) ? value.map((v) => formatFillValue(v, format)) : formatFillValue(value, format));
   }
   return map;
 }
@@ -20436,10 +20615,10 @@ function extractFromTable(table2) {
   }
   if (fields.length === 0 && table2.rows >= 2 && table2.cols >= 2) {
     const headerRow = table2.cells[0];
-    const allLabels = headerRow.every((cell2) => {
-      const t = cell2.text.trim();
+    const allLabels = headerRow?.every((cell2) => {
+      const t = cell2?.text.trim() ?? "";
       return t.length > 0 && t.length <= 20;
-    });
+    }) ?? false;
     if (allLabels) {
       for (let r = 1; r < table2.rows; r++) {
         for (let c = 0; c < table2.cols; c++) {
@@ -20530,7 +20709,8 @@ function fillFormFields(blocks, values, blockedLabels) {
   const cloned = structuredClone(blocks);
   const filled = [];
   const matchedLabels = /* @__PURE__ */ new Set();
-  const normalizedValues = normalizeValues(values);
+  const warnings = [];
+  const normalizedValues = normalizeValues(values, warnings);
   const cursor = new ValueCursor(normalizedValues);
   const allTables = collectIRTables(cloned, 0);
   const patternFilledCells = /* @__PURE__ */ new Set();
@@ -20559,7 +20739,7 @@ function fillFormFields(blocks, values, blockedLabels) {
     if (newText !== block.text) block.text = newText;
   }
   const unmatched = resolveUnmatched(normalizedValues, matchedLabels, values);
-  return { blocks: cloned, filled, unmatched };
+  return { blocks: cloned, filled, unmatched, ...warnings.length > 0 ? { warnings } : {} };
 }
 function collectIRTables(blocks, depth) {
   if (depth > 16) return [];
@@ -20593,13 +20773,31 @@ function coveredPositions(table2) {
   }
   return covered;
 }
+function isHeaderDataTable(table2, covered) {
+  if (table2.rows < 2) return false;
+  const headerRow = table2.cells[0];
+  if (!headerRow?.length) return false;
+  const allLabels = headerRow.every((cell2) => {
+    const t = cell2?.text.trim() ?? "";
+    return t.length > 0 && t.length <= 20 && isLabelCell(t);
+  });
+  if (!allLabels) return false;
+  for (let c = 0; c < table2.cols; c++) {
+    if (covered.has(`1,${c}`)) continue;
+    const cell2 = table2.cells[1]?.[c];
+    if (!cell2) break;
+    return !isLabelCell(cell2.text);
+  }
+  return true;
+}
 function fillTable(table2, values, filled, matchedLabels, patternFilledCells, blockedLabels) {
   if (table2.cols < 2) return;
   const covered = coveredPositions(table2);
-  for (let r = 0; r < table2.rows; r++) {
+  const skipHeaderRow = isHeaderDataTable(table2, covered);
+  for (let r = skipHeaderRow ? 1 : 0; r < table2.rows; r++) {
     for (let c = 0; c < table2.cols; c++) {
       if (covered.has(`${r},${c}`)) continue;
-      const labelCell = table2.cells[r][c];
+      const labelCell = table2.cells[r]?.[c];
       if (!labelCell) continue;
       if (!isLabelCell(labelCell.text)) continue;
       let vc = c + labelCell.colSpan;
@@ -20632,10 +20830,10 @@ function fillTable(table2, values, filled, matchedLabels, patternFilledCells, bl
   }
   if (table2.rows >= 2 && table2.cols >= 2) {
     const headerRow = table2.cells[0];
-    const allLabels = headerRow.every((cell2) => {
-      const t = cell2.text.trim();
+    const allLabels = headerRow?.every((cell2) => {
+      const t = cell2?.text.trim() ?? "";
       return t.length > 0 && t.length <= 20 && isLabelCell(t);
-    });
+    }) ?? false;
     if (!allLabels) return;
     for (let r = 1; r < table2.rows; r++) {
       for (let c = 0; c < table2.cols; c++) {
@@ -20650,7 +20848,11 @@ function fillTable(table2, values, filled, matchedLabels, patternFilledCells, bl
         if (!values.isArray(matchKey) && matchedLabels.has(matchKey)) continue;
         const newValue = values.consume(matchKey);
         if (newValue === void 0) continue;
-        valueCell.text = newValue;
+        if (patternFilledCells?.has(valueCell)) {
+          valueCell.text = newValue + " " + valueCell.text;
+        } else {
+          valueCell.text = newValue;
+        }
         matchedLabels.add(matchKey);
         filled.push({
           label: headerCell.text.trim(),
@@ -20666,20 +20868,22 @@ function fillTable(table2, values, filled, matchedLabels, patternFilledCells, bl
 function fillInlineFields(text, values, filled, matchedLabels, blockedLabels) {
   const segments = scanInlineSegments(text);
   if (segments.length === 0) return text;
+  const matches = segments.map((seg) => matchInlineSegment(seg, values, blockedLabels));
   let out = "";
   let pos = 0;
-  for (const seg of segments) {
-    const nlabel = normalizeLabel(seg.label);
-    if (blockedLabels?.has(nlabel)) continue;
-    const matchKey = findMatchingKey(nlabel, values);
-    if (matchKey === void 0) continue;
+  for (let i = 0; i < segments.length; i++) {
+    const seg = segments[i];
+    const matched = matches[i];
+    if (matched === void 0) continue;
+    const matchKey = matched.key;
     const newValue = values.consume(matchKey);
     if (newValue === void 0) continue;
     matchedLabels.add(matchKey);
-    filled.push({ label: seg.label.trim(), value: newValue, row: -1, col: -1, key: matchKey });
+    filled.push({ label: matched.label.trim(), value: newValue, row: -1, col: -1, key: matchKey });
+    const ve = clampSegmentEnd(text, seg, segments[i + 1], matches[i + 1]?.viaExt ?? false);
     out += text.slice(pos, seg.valueStart);
-    out += seg.valueStart === seg.valueEnd ? padInsertion(text, seg.valueStart, newValue) : newValue;
-    pos = seg.valueEnd;
+    out += seg.valueStart === ve ? padInsertion(text, seg.valueStart, newValue) : newValue;
+    pos = ve;
   }
   out += text.slice(pos);
   return out;
@@ -20690,7 +20894,7 @@ import JSZip6 from "jszip";
 
 // src/roundtrip/source-map.ts
 function escapeXmlText(text) {
-  return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return text.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F]/g, "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 function decodeXmlEntities(text) {
   return text.replace(/&(lt|gt|amp|quot|apos|#x?[0-9a-fA-F]+);/g, (m, ent) => {
@@ -21270,7 +21474,7 @@ function parseCentralDirectory(buf) {
   }
   return { entries, cdOffset, cdSize, eocdOffset };
 }
-var CRC_TABLE2 = (() => {
+var CRC_TABLE = (() => {
   const table2 = new Uint32Array(256);
   for (let n = 0; n < 256; n++) {
     let c = n;
@@ -21279,10 +21483,10 @@ var CRC_TABLE2 = (() => {
   }
   return table2;
 })();
-function crc322(data) {
+function crc32(data) {
   let crc = 4294967295;
   for (let i = 0; i < data.length; i++) {
-    crc = CRC_TABLE2[(crc ^ data[i]) & 255] ^ crc >>> 8;
+    crc = CRC_TABLE[(crc ^ data[i]) & 255] ^ crc >>> 8;
   }
   return (crc ^ 4294967295) >>> 0;
 }
@@ -21320,8 +21524,11 @@ function patchZipEntries(original, replacements, additions) {
     const header = copyBytes(original, e.localOffset, e.localOffset + headerLen);
     const hview = new DataView(header.buffer, header.byteOffset, header.byteLength);
     const method = e.method;
+    if (method !== 0 && method !== 8) {
+      throw new KordocError(`\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 ZIP \uC555\uCD95 \uBC29\uC2DD(method=${method}): ${e.name} \u2014 STORE(0)/DEFLATE(8)\uB9CC \uAD50\uCCB4 \uAC00\uB2A5`);
+    }
     const compData = method === 0 ? newData : new Uint8Array(deflateRawSync(newData));
-    const crc = crc322(newData);
+    const crc = crc32(newData);
     const flags = e.flags & ~8;
     hview.setUint16(6, flags, true);
     hview.setUint32(14, crc, true);
@@ -21339,7 +21546,7 @@ function patchZipEntries(original, replacements, additions) {
       const deflated = new Uint8Array(deflateRawSync(data));
       const method = deflated.length < data.length ? 8 : 0;
       const compData = method === 8 ? deflated : data;
-      const crc = crc322(data);
+      const crc = crc32(data);
       const header = new Uint8Array(30 + nameBytes.length);
       const hv = new DataView(header.buffer);
       hv.setUint32(0, LOCAL_SIG, true);
@@ -21421,7 +21628,8 @@ async function fillHwpx(hwpxBuffer, values, blockedLabels) {
   if (sectionPaths.length === 0) {
     throw new KordocError("HWPX\uC5D0\uC11C \uC139\uC158 \uD30C\uC77C\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4");
   }
-  const normalizedValues = normalizeValues(values);
+  const warnings = [];
+  const normalizedValues = normalizeValues(values, warnings);
   const cursor = new ValueCursor(normalizedValues);
   const matchedLabels = /* @__PURE__ */ new Set();
   const filled = [];
@@ -21483,7 +21691,17 @@ async function fillHwpx(hwpxBuffer, values, blockedLabels) {
       }
     }
     for (const table2 of allTables) {
-      for (let rowIdx = 0; rowIdx < table2.rows.length; rowIdx++) {
+      const skipHeaderRow = table2.rows.length >= 2 && (() => {
+        const first = table2.rows[0];
+        const allLabels = first.length > 0 && first.every((cell2) => {
+          const t = cellLabelText(cell2).trim();
+          return t.length > 0 && t.length <= 20 && isLabelCell(t);
+        });
+        if (!allLabels) return false;
+        const d0 = table2.rows[1][0];
+        return d0 === void 0 || !isLabelCell(cellLabelText(d0));
+      })();
+      for (let rowIdx = skipHeaderRow ? 1 : 0; rowIdx < table2.rows.length; rowIdx++) {
         const cells = table2.rows[rowIdx];
         for (let colIdx = 0; colIdx < cells.length - 1; colIdx++) {
           const labelText = cellLabelText(cells[colIdx]);
@@ -21554,9 +21772,30 @@ async function fillHwpx(hwpxBuffer, values, blockedLabels) {
               const matchKey = findMatchingKey(headerLabel, cursor);
               if (matchKey === void 0) continue;
               if (!cursor.isArray(matchKey) && matchedLabels.has(matchKey)) continue;
+              const dataCell = dataCells[colIdx];
+              if (patternApplied.has(dataCell)) {
+                const target = dataCell.paragraphs.find((p) => p.tRanges.length > 0) ?? dataCell.paragraphs[0];
+                if (!target) continue;
+                const l = led(target);
+                if (l.fullText !== void 0) continue;
+                const newValue2 = cursor.consume(matchKey);
+                if (newValue2 === void 0) continue;
+                l.ranges.push({ start: 0, end: 0, replacement: newValue2 + " " });
+                l.filledIdx.push(filled.length);
+                l.matchKeys.push(matchKey);
+                matchedLabels.add(matchKey);
+                filled.push({
+                  label: cellLabelText(headerCells[colIdx]).trim(),
+                  value: newValue2,
+                  row: rowIdx,
+                  col: colIdx,
+                  key: matchKey
+                });
+                continue;
+              }
               const newValue = cursor.consume(matchKey);
               if (newValue === void 0) continue;
-              const paras = dataCells[colIdx].paragraphs;
+              const paras = dataCell.paragraphs;
               if (paras.length === 0) continue;
               const l0 = led(paras[0]);
               l0.fullText = newValue;
@@ -21585,20 +21824,23 @@ async function fillHwpx(hwpxBuffer, values, blockedLabels) {
       const existing = ledger.get(para2);
       if (existing?.fullText !== void 0) continue;
       const text = matchText(para2);
-      for (const seg of scanInlineSegments(text)) {
-        const nlabel = normalizeLabel(seg.label);
-        if (blockedLabels?.has(nlabel)) continue;
-        const matchKey = findMatchingKey(nlabel, cursor);
-        if (matchKey === void 0) continue;
+      const segments = scanInlineSegments(text);
+      const matches = segments.map((seg) => matchInlineSegment(seg, cursor, blockedLabels));
+      for (let i = 0; i < segments.length; i++) {
+        const seg = segments[i];
+        const matched = matches[i];
+        if (matched === void 0) continue;
+        const matchKey = matched.key;
         const newValue = cursor.consume(matchKey);
         if (newValue === void 0) continue;
-        const replacement = seg.valueStart === seg.valueEnd ? padInsertion(text, seg.valueStart, newValue) : newValue;
+        const ve = clampSegmentEnd(text, seg, segments[i + 1], matches[i + 1]?.viaExt ?? false);
+        const replacement = seg.valueStart === ve ? padInsertion(text, seg.valueStart, newValue) : newValue;
         const l = led(para2);
-        l.ranges.push({ start: seg.valueStart, end: seg.valueEnd, replacement });
+        l.ranges.push({ start: seg.valueStart, end: ve, replacement });
         matchedLabels.add(matchKey);
         l.filledIdx.push(filled.length);
         l.matchKeys.push(matchKey);
-        filled.push({ label: seg.label.trim(), value: newValue, row: -1, col: -1, key: matchKey });
+        filled.push({ label: matched.label.trim(), value: newValue, row: -1, col: -1, key: matchKey });
       }
     }
     const splices = [];
@@ -21651,7 +21893,7 @@ async function fillHwpx(hwpxBuffer, values, blockedLabels) {
     }
   }
   for (const k of failedKeys) {
-    if (!succeededKeys.has(k)) matchedLabels.delete(k);
+    if (!succeededKeys.has(k) || cursor.isArray(k)) matchedLabels.delete(k);
   }
   const cleanFilled = filled.filter((f) => f !== null);
   const unmatched = resolveUnmatched(normalizedValues, matchedLabels, values);
@@ -21659,7 +21901,8 @@ async function fillHwpx(hwpxBuffer, values, blockedLabels) {
   return {
     buffer: out.buffer.slice(out.byteOffset, out.byteOffset + out.byteLength),
     filled: cleanFilled,
-    unmatched
+    unmatched,
+    ...warnings.length > 0 ? { warnings } : {}
   };
 }
 
@@ -21936,27 +22179,39 @@ function parseMarkdownToBlocks(md2) {
     if (/^<table[\s>]/i.test(line.trimStart())) {
       const htmlLines = [];
       let depth = 0;
-      while (i < lines.length) {
-        const l = lines[i];
+      let closed = false;
+      let j = i;
+      while (j < lines.length) {
+        const l = lines[j];
         htmlLines.push(l);
         depth += (l.match(/<table[\s>]/gi) ?? []).length;
         depth -= (l.match(/<\/table>/gi) ?? []).length;
-        i++;
-        if (depth <= 0) break;
+        j++;
+        if (depth <= 0) {
+          closed = true;
+          break;
+        }
+      }
+      if (closed) {
+        blocks.push({ type: "html_table", text: htmlLines.join("\n") });
+        i = j;
+        continue;
       }
-      blocks.push({ type: "html_table", text: htmlLines.join("\n") });
-      continue;
     }
     if (line.trimStart().startsWith("|")) {
       const tableRows = [];
+      let sepSeen = false;
       while (i < lines.length && lines[i].trimStart().startsWith("|")) {
         const row = lines[i];
-        const sepCells = row.trim().replace(/^\|/, "").replace(/\|$/, "").split("|");
-        if (sepCells.every((c) => /^\s*:?-+:?\s*$/.test(c))) {
-          i++;
-          continue;
+        if (tableRows.length === 1 && !sepSeen) {
+          const sepCells = row.trim().replace(/^\|/, "").replace(/\|$/, "").split("|");
+          if (sepCells.every((c) => /^\s*:?-+:?\s*$/.test(c))) {
+            sepSeen = true;
+            i++;
+            continue;
+          }
         }
-        const cells = row.split("|").slice(1, -1).map((c) => c.trim());
+        const cells = row.split(/(?<!\\)\|/).slice(1, -1).map((c) => c.trim().replace(/\\\|/g, "|"));
         if (cells.length > 0) tableRows.push(cells);
         i++;
       }
@@ -22905,13 +23160,26 @@ function normalize(s) {
   return s.replace(/\s+/g, " ").trim();
 }
 var MAX_LEVENSHTEIN_LEN = 1e4;
+function approxDistance(a, b) {
+  const bigramCounts = (s) => {
+    const m = /* @__PURE__ */ new Map();
+    for (let i = 0; i < s.length - 1; i++) {
+      const g = s.slice(i, i + 2);
+      m.set(g, (m.get(g) ?? 0) + 1);
+    }
+    return m;
+  };
+  const ca = bigramCounts(a);
+  const cb = bigramCounts(b);
+  let inter = 0;
+  for (const [g, n] of ca) inter += Math.min(n, cb.get(g) ?? 0);
+  const total = Math.max(a.length - 1, 0) + Math.max(b.length - 1, 0);
+  const dice = total > 0 ? 2 * inter / total : 1;
+  return Math.round(Math.max(a.length, b.length) * (1 - dice));
+}
 function levenshtein(a, b) {
   if (a.length + b.length > MAX_LEVENSHTEIN_LEN) {
-    const sampleLen = Math.min(500, a.length, b.length);
-    let diffs = 0;
-    for (let i = 0; i < sampleLen; i++) if (a[i] !== b[i]) diffs++;
-    const sampleRate = sampleLen > 0 ? diffs / sampleLen : 1;
-    return Math.abs(a.length - b.length) + Math.round(Math.min(a.length, b.length) * sampleRate);
+    return approxDistance(a, b);
   }
   if (a.length > b.length) [a, b] = [b, a];
   const m = a.length;
@@ -23063,9 +23331,16 @@ function bestSimInRange(arr, from, to, target) {
   return best;
 }
 function escapeGfm(text) {
-  return text.replace(/([~*])/g, "\\$1");
+  const NUL = String.fromCharCode(0);
+  const spans = [];
+  const masked = text.replace(/!\[[^\]]*\]\([^)\n]*\)|\]\((?:https?:|mailto:|tel:|#)[^)\n]*\)/gi, (m) => {
+    spans.push(m);
+    return NUL + (spans.length - 1) + NUL;
+  });
+  const escaped = masked.replace(/([~*_`])/g, "\\$1");
+  return escaped.replace(new RegExp(NUL + "(\\d+)" + NUL, "g"), (_, n) => spans[Number(n)]);
 }
-var HWP_SHAPE_ALT_TEXT_RE = /(?:모서리가 둥근 |둥근 )?(?:사각형|직사각형|정사각형|원|타원|삼각형|이등변 삼각형|직각 삼각형|선|직선|곡선|화살표|굵은 화살표|이중 화살표|오각형|육각형|팔각형|별|[4-8]점별|십자|십자형|구름|구름형|마름모|도넛|평행사변형|사다리꼴|부채꼴|호|반원|물결|번개|하트|빗금|블록 화살표|수식|표|그림|개체|그리기\s?개체|묶음\s?개체|글상자|수식\s?개체|OLE\s?개체)\s?입니다\.?/g;
+var HWP_SHAPE_ALT_TEXT_RE = /^(?:모서리가 둥근 |둥근 )?(?:사각형|직사각형|정사각형|원|타원|삼각형|이등변 삼각형|직각 삼각형|선|직선|곡선|화살표|굵은 화살표|이중 화살표|오각형|육각형|팔각형|별|[4-8]점별|십자|십자형|구름|구름형|마름모|도넛|평행사변형|사다리꼴|부채꼴|호|반원|물결|번개|하트|빗금|블록 화살표|수식|표|그림|개체|그리기\s?개체|묶음\s?개체|글상자|수식\s?개체|OLE\s?개체)\s?입니다\.?$/gm;
 function sanitizeText(text) {
   let result = mapPuaText(text).replace(/[\u{F0000}-\u{FFFFD}]/gu, "").replace(HWP_SHAPE_ALT_TEXT_RE, "").replace(/  +/g, " ").trim();
   if (result.length <= 30 && result.includes(" ")) {
@@ -23081,7 +23356,7 @@ function normForMatch(text) {
   return sanitizeText(text).replace(/\s+/g, " ").trim();
 }
 function unescapeGfm(text) {
-  return text.replace(/\\([~*])/g, "$1");
+  return text.replace(/\\([~*_`])/g, "$1");
 }
 function summarize(text) {
   const t = text.replace(/\s+/g, " ").trim();
@@ -23148,7 +23423,7 @@ function parseGfmTable(lines) {
   return rows;
 }
 function unescapeGfmCell(text) {
-  return text.replace(/<br\s*\/?>/gi, "\n").replace(/\\\|/g, "|").replace(/\\([~*])/g, "$1");
+  return text.replace(/<br\s*\/?>/gi, "\n").replace(/\\\|/g, "|").replace(/\\([~*_`])/g, "$1");
 }
 function replicateCellInnerHtml(cell2) {
   if (cell2.blocks?.length) {
@@ -23236,10 +23511,10 @@ function parseHtmlTable(raw) {
       }
     } else {
       if (!isClose) {
-        const cs = parseInt(attrs.match(/colspan\s*=\s*"(\d+)"/i)?.[1] || "1", 10);
-        const rs = parseInt(attrs.match(/rowspan\s*=\s*"(\d+)"/i)?.[1] || "1", 10);
+        const cs = parseInt(attrs.match(/colspan\s*=\s*["']?(\d+)/i)?.[1] || "1", 10);
+        const rs = parseInt(attrs.match(/rowspan\s*=\s*["']?(\d+)/i)?.[1] || "1", 10);
         cellStart = m.index + m[0].length;
-        cellInfo = { colSpan: isNaN(cs) ? 1 : cs, rowSpan: isNaN(rs) ? 1 : rs };
+        cellInfo = { colSpan: clampSpan(isNaN(cs) ? 1 : cs, MAX_COLS), rowSpan: clampSpan(isNaN(rs) ? 1 : rs, MAX_ROWS) };
       } else if (cellStart >= 0 && cellInfo && currentRow) {
         currentRow.push({ inner: raw.slice(cellStart, m.index), colSpan: cellInfo.colSpan, rowSpan: cellInfo.rowSpan });
         cellStart = -1;
@@ -23883,8 +24158,8 @@ function layoutHtmlRows(rows) {
     let c = 0;
     for (const cell2 of rows[r].cells) {
       while (occupied.has(`${r},${c}`)) c++;
-      const colSpan = Math.max(1, cell2.colSpan);
-      const rowSpan = Math.max(1, cell2.rowSpan);
+      const colSpan = clampSpan(cell2.colSpan, MAX_COLS);
+      const rowSpan = clampSpan(cell2.rowSpan, MAX_ROWS);
       placed.push({ r, c, colSpan, rowSpan, inner: cell2.inner, isHeader: rows[r].tag === "th" });
       for (let dr = 0; dr < rowSpan; dr++) {
         for (let dc = 0; dc < colSpan; dc++) occupied.add(`${r + dr},${c + dc}`);
@@ -25043,12 +25318,20 @@ function diffBlocks(blocksA, blocksB) {
 function alignBlocks(a, b) {
   const m = a.length, n = b.length;
   if (m * n > 1e7) return fallbackAlign(a, b);
+  const lenOf = (blk) => {
+    const t = blk.text !== void 0 ? blk.text : blk.type === "table" && blk.table ? blk.table.cells.flat().map((c) => c?.text ?? "").join(" ") : "";
+    return t.replace(/\s+/g, " ").trim().length;
+  };
+  const aLen = a.map(lenOf);
+  const bLen = b.map(lenOf);
   const simCache = /* @__PURE__ */ new Map();
   const getSim = (i2, j2) => {
     const key = `${i2},${j2}`;
     let v = simCache.get(key);
     if (v === void 0) {
-      v = blockSimilarity(a[i2], b[j2]);
+      const mx = Math.max(aLen[i2], bLen[j2]);
+      const cut = a[i2].type === "table" || b[j2].type === "table" ? 6 / 7 : 1 - SIMILARITY_THRESHOLD;
+      v = mx > 0 && (mx - Math.min(aLen[i2], bLen[j2])) / mx > cut ? 0 : blockSimilarity(a[i2], b[j2]);
       simCache.set(key, v);
     }
     return v;
@@ -25109,8 +25392,8 @@ function blockSimilarity(a, b) {
 }
 function tableSimilarity(a, b) {
   const dimSim = 1 - Math.abs(a.rows * a.cols - b.rows * b.cols) / Math.max(a.rows * a.cols, b.rows * b.cols, 1);
-  const textsA = a.cells.flat().map((c) => c.text).join(" ");
-  const textsB = b.cells.flat().map((c) => c.text).join(" ");
+  const textsA = a.cells.flat().map((c) => c?.text ?? "").join(" ");
+  const textsB = b.cells.flat().map((c) => c?.text ?? "").join(" ");
   const contentSim = normalizedSimilarity(textsA, textsB);
   return dimSim * 0.3 + contentSim * 0.7;
 }
@@ -25121,8 +25404,8 @@ function diffTableCells(a, b) {
   for (let r = 0; r < maxRows; r++) {
     const row = [];
     for (let c = 0; c < maxCols; c++) {
-      const cellA = r < a.rows && c < a.cols ? a.cells[r][c].text : void 0;
-      const cellB = r < b.rows && c < b.cols ? b.cells[r][c].text : void 0;
+      const cellA = r < a.rows && c < a.cols ? a.cells[r]?.[c]?.text : void 0;
+      const cellB = r < b.rows && c < b.cols ? b.cells[r]?.[c]?.text : void 0;
       let type;
       if (cellA === void 0) type = "added";
       else if (cellB === void 0) type = "removed";
@@ -26881,16 +27164,16 @@ function buildOrigUnits(blocks) {
   for (let i = 0; i < blocks.length; i++) {
     const block = blocks[i];
     let consume = 1;
-    let chunk2;
+    let chunk;
     if (block.type === "paragraph" && block.text && /^\[별표\s*\d+/.test(sanitizeText(block.text))) {
       const next = blocks[i + 1];
       if (next?.type === "paragraph" && next.text && /관련\)?$/.test(next.text)) consume = 2;
-      chunk2 = blocksToMarkdown(blocks.slice(i, i + consume));
+      chunk = blocksToMarkdown(blocks.slice(i, i + consume));
     } else {
-      chunk2 = blocksToMarkdown([block]);
+      chunk = blocksToMarkdown([block]);
     }
-    if (chunk2) {
-      const subUnits = splitMarkdownUnits(chunk2);
+    if (chunk) {
+      const subUnits = splitMarkdownUnits(chunk);
       const isFragment = consume === 2 || (block.type === "paragraph" || block.type === "heading") && subUnits.length > 1;
       for (let s = 0; s < subUnits.length; s++) {
         const u = { ...subUnits[s], blockIdx: i, fragment: isFragment || void 0 };
@@ -27157,6 +27440,9 @@ var Surgeon = class {
   miniFatSectors = [];
   dirSectors = [];
   entries = [];
+  /** replace()가 FREESECT로 해제한 섹터 — finish()에서 재할당 안 된 것만 0으로 지움 (데이터 잔존 방지) */
+  freedSectors = [];
+  freedMiniSectors = [];
   constructor(file) {
     if (file.length < SECTOR || file.readUInt32LE(0) !== 3759263696) {
       throw new OleSurgeonError("OLE \uC2DC\uADF8\uB2C8\uCC98\uAC00 \uC544\uB2D9\uB2C8\uB2E4");
@@ -27280,6 +27566,8 @@ var Surgeon = class {
       if (this.fat[i] !== FREESECT) continue;
       if (SECTOR + (i + 1) * SECTOR > this.buf.length) continue;
       this.fat[i] = ENDOFCHAIN;
+      const off = this.sectorOffset(i);
+      this.buf.fill(0, off, off + SECTOR);
       out.push(i);
     }
     while (out.length < n) {
@@ -27379,9 +27667,15 @@ var Surgeon = class {
     const entry = this.findEntry(path);
     if (entry.size > 0 && entry.start !== ENDOFCHAIN) {
       if (entry.size < MINI_CUTOFF) {
-        for (const s of this.miniChain(entry.start)) this.miniFat[s] = FREESECT;
+        for (const s of this.miniChain(entry.start)) {
+          this.miniFat[s] = FREESECT;
+          this.freedMiniSectors.push(s);
+        }
       } else {
-        for (const s of this.chain(entry.start)) this.fat[s] = FREESECT;
+        for (const s of this.chain(entry.start)) {
+          this.fat[s] = FREESECT;
+          this.freedSectors.push(s);
+        }
       }
     }
     if (newData.length < MINI_CUTOFF) {
@@ -27410,9 +27704,27 @@ var Surgeon = class {
     this.writeDirEntry(entry);
   }
   finish() {
+    this.wipeFreedSectors();
     this.flushFat();
     return this.buf;
   }
+  /** 해제 후 재할당되지 않고 남은 FREESECT 섹터의 바이트를 0으로 채움 (데이터 remanence 제거) */
+  wipeFreedSectors() {
+    for (const s of this.freedSectors) {
+      if (this.fat[s] !== FREESECT) continue;
+      const off = this.sectorOffset(s);
+      this.buf.fill(0, off, off + SECTOR);
+    }
+    if (this.freedMiniSectors.length > 0) {
+      const root = this.rootEntry();
+      const rootChain = root.start === ENDOFCHAIN || root.size === 0 ? [] : this.chain(root.start);
+      for (const s of this.freedMiniSectors) {
+        if (this.miniFat[s] !== FREESECT) continue;
+        const off = this.miniOffset(s, rootChain);
+        this.buf.fill(0, off, off + MINI_SECTOR);
+      }
+    }
+  }
 };
 
 // src/roundtrip/hwp5-patch.ts
@@ -28297,6 +28609,216 @@ async function validateHwpx(buffer) {
   return { ok: issues.length === 0, issues, entryCount: names.length };
 }
 
+// src/redact.ts
+var DEFAULT_REDACT_RULES = [
+  "rrn",
+  "phone",
+  "email",
+  "card",
+  "account"
+];
+var RULE_PRIORITY = [
+  "rrn",
+  "email",
+  "card",
+  "phone",
+  "driver",
+  "account",
+  "passport"
+];
+function luhnValid(digits) {
+  let sum = 0;
+  for (let i = 0; i < digits.length; i++) {
+    let d = digits.charCodeAt(digits.length - 1 - i) - 48;
+    if (i % 2 === 1) {
+      d *= 2;
+      if (d > 9) d -= 9;
+    }
+    sum += d;
+  }
+  return sum % 10 === 0;
+}
+function birthdateValid(front6) {
+  const mm = Number(front6.slice(2, 4));
+  const dd = Number(front6.slice(4, 6));
+  return mm >= 1 && mm <= 12 && dd >= 1 && dd <= 31;
+}
+var RULES2 = {
+  // 주민/외국인등록번호 — 뒷자리 첫 숫자 1-8 + 생년월일 유효성으로 오탐 축소.
+  // 유니코드 대시 변형(‐ ‑ – —)은 rrn만 허용. 앞 6자리 유지, 뒤 7자리 전부 마스크.
+  rrn: {
+    pattern: /(?<!\d)(\d{6})([-‐‑–—])([1-8]\d{6})(?!\d)/g,
+    validate: (m) => birthdateValid(m[1]),
+    mask: (m, mc) => m[1] + m[2] + mc.repeat(7)
+  },
+  // 이메일 — 로컬파트 첫 글자만 남기고 마스크, 도메인 유지
+  email: {
+    pattern: /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g,
+    mask: (m, mc) => {
+      const at = m[0].indexOf("@");
+      return m[0][0] + mc.repeat(at - 1) + m[0].slice(at);
+    }
+  },
+  // 카드번호 — 구분자 필수(무구분 16자리는 오탐 높아 제외), 동일 구분자 강제(\2),
+  // Luhn 체크. 가운데 8자리 마스크.
+  card: {
+    pattern: /(?<!\d)(\d{4})([- ])(\d{4})\2(\d{4})\2(\d{4})(?!\d)/g,
+    validate: (m) => luhnValid(m[1] + m[3] + m[4] + m[5]),
+    mask: (m, mc) => m[1] + m[2] + mc.repeat(4) + m[2] + mc.repeat(4) + m[2] + m[5]
+  },
+  // 전화번호 — 휴대폰(01[016789])·서울(02)·지역(0[3-6]\d)·인터넷(070)은 구분자
+  // -·.·공백 또는 무구분(동일 구분자 강제), 대표번호(15xx/16xx/18xx)는 구분자 필수.
+  // 가운데 자리만 마스크 (대표번호는 뒤 4자리). 선행 [\d-] 금지 — 계좌 부분매치 방지.
+  phone: {
+    pattern: /(?<![\d-])(?:(01[016789]|070|02|0[3-6]\d)([-. ]?)(\d{3,4})\2(\d{4})|(1[568]\d{2})([-. ])(\d{4}))(?!\d)/g,
+    mask: (m, mc) => m[1] !== void 0 ? m[1] + m[2] + mc.repeat(m[3].length) + m[2] + m[4] : m[5] + m[6] + mc.repeat(4)
+  },
+  // 운전면허 (기본 OFF) — 신형 12자리만 (지역명 2글자 선행 구버전은 스킵). 뒷 8자리 마스크.
+  driver: {
+    pattern: /(?<![\d-])(\d{2})-(\d{2})-\d{6}-\d{2}(?!-?\d)/g,
+    mask: (m, mc) => m[1] + "-" + m[2] + "-" + mc.repeat(6) + "-" + mc.repeat(2)
+  },
+  // 계좌번호 — 3~4그룹 + 총 자릿수 10~16. rrn·card·phone과 겹치면 그쪽 우선.
+  // 마지막 그룹 빼고 전부 마스크. 사업자등록번호(3-2-5, 10자리)도 걸린다 — 계약상 의도
+  // (테스트로 명시). 날짜(2026-07-16)는 8자리라 총자릿수 검증에서 탈락.
+  account: {
+    pattern: /(?<!\d)(?<!\d-)\d{2,6}(?:-\d{2,6}){1,2}-\d{2,8}(?!-?\d)/g,
+    validate: (m) => {
+      const digits = m[0].replace(/-/g, "").length;
+      return digits >= 10 && digits <= 16;
+    },
+    mask: (m, mc) => {
+      const parts = m[0].split("-");
+      return parts.map((p, i) => i === parts.length - 1 ? p : mc.repeat(p.length)).join("-");
+    }
+  },
+  // 여권번호 (기본 OFF) — 단어 경계, 첫 글자만 남기고 전부 마스크
+  passport: {
+    pattern: /\b([MSRODG])\d{8}(?![0-9A-Za-z])/g,
+    mask: (m, mc) => m[1] + mc.repeat(8)
+  }
+};
+function redactText(text, options) {
+  const maskChar = options?.maskChar ?? "\u25CF";
+  if (maskChar.length !== 1 || /[0-9A-Za-z]/.test(maskChar)) {
+    throw new Error(`maskChar\uB294 \uC601\uC22B\uC790\uAC00 \uC544\uB2CC 1\uAE00\uC790\uC5EC\uC57C \uD568: ${JSON.stringify(maskChar)}`);
+  }
+  const enabled = options?.rules ?? DEFAULT_REDACT_RULES;
+  const hits = [];
+  if (text === "" || enabled.length === 0) return { text, hits };
+  const occupied = [];
+  for (const rule of RULE_PRIORITY) {
+    if (!enabled.includes(rule)) continue;
+    const def = RULES2[rule];
+    for (const m of text.matchAll(def.pattern)) {
+      if (def.validate && !def.validate(m)) continue;
+      const start = m.index;
+      const end = start + m[0].length;
+      if (occupied.some((o) => start < o.end && end > o.start)) continue;
+      occupied.push({ start, end });
+      hits.push({ rule, masked: def.mask(m, maskChar), index: start, length: m[0].length });
+    }
+  }
+  hits.sort((a, b) => a.index - b.index);
+  let out = "";
+  let cursor = 0;
+  for (const h of hits) {
+    out += text.slice(cursor, h.index) + h.masked;
+    cursor = h.index + h.length;
+  }
+  out += text.slice(cursor);
+  return { text: out, hits };
+}
+function redactMarkdown(markdown, options) {
+  const lines = markdown.split("\n");
+  const hits = [];
+  let offset = 0;
+  const outLines = lines.map((line) => {
+    if (line.includes("data:image/")) {
+      offset += line.length + 1;
+      return line;
+    }
+    const r = redactText(line, options);
+    for (const h of r.hits) hits.push({ ...h, index: h.index + offset });
+    offset += line.length + 1;
+    return r.text;
+  });
+  return { text: outLines.join("\n"), hits };
+}
+
+// src/chunks.ts
+var LIST_MARKER_RE = /^(?:[□■◇◆○◎●◦ㅇ•▪▸▶※-]|\d{1,3}[.)]|[가나다라마바사아자차카타파하][.)]|\([가나다라마바사아자차카타파하0-9]{1,3}\)|[①-⑳㉮-㉻㈎-㈛])\s/;
+function listDepthOf(block) {
+  if (block.listDepth !== void 0) return block.listDepth;
+  if (block.type === "list") return 0;
+  if (block.type === "paragraph" && block.text && LIST_MARKER_RE.test(block.text.trim())) return 0;
+  return void 0;
+}
+function sameBreadcrumb(a, b) {
+  return a.length === b.length && a.every((v, i) => v === b[i]);
+}
+function blocksToChunks(blocks, options) {
+  const granularity = options?.granularity ?? "section";
+  const includeCells = options?.includeTableCells ?? false;
+  const chunks = [];
+  const headingStack = [];
+  const listStack = [];
+  const crumb = () => [...headingStack.map((h) => h.text), ...listStack.map((l) => l.text)];
+  const push = (type, breadcrumb, text, blockRange, page, table2) => {
+    const chunk = { id: "c" + String(chunks.length + 1).padStart(4, "0"), type, breadcrumb, text, blockRange };
+    if (page !== void 0) chunk.page = page;
+    if (table2) chunk.table = table2;
+    chunks.push(chunk);
+  };
+  let run = null;
+  const flushRun = () => {
+    if (!run) return;
+    push("text", run.breadcrumb, blocksToMarkdown(run.blocks), [run.start, run.end], run.page);
+    run = null;
+  };
+  for (let i = 0; i < blocks.length; i++) {
+    const block = blocks[i];
+    const md2 = blocksToMarkdown([block]);
+    if (!md2) continue;
+    if (block.type === "heading") {
+      flushRun();
+      const level = Math.min(block.level || 2, 6);
+      while (headingStack.length && headingStack[headingStack.length - 1].level >= level) headingStack.pop();
+      listStack.length = 0;
+      push("heading", crumb(), md2, [i, i], block.pageNumber);
+      headingStack.push({ level, text: (block.text ?? "").trim() });
+      continue;
+    }
+    if (block.type === "table" && block.table) {
+      flushRun();
+      const summary = { rows: block.table.rows, cols: block.table.cols };
+      if (includeCells) summary.cells = block.table.cells.map((row) => row.map((c) => c.text));
+      push("table", crumb(), md2, [i, i], block.pageNumber, summary);
+      continue;
+    }
+    const depth = listDepthOf(block);
+    if (depth !== void 0) {
+      while (listStack.length && listStack[listStack.length - 1].depth >= depth) listStack.pop();
+    }
+    const breadcrumb = crumb();
+    if (depth !== void 0) listStack.push({ depth, text: (block.text ?? "").trim() });
+    if (granularity === "block") {
+      push("text", breadcrumb, md2, [i, i], block.pageNumber);
+      continue;
+    }
+    if (run && sameBreadcrumb(run.breadcrumb, breadcrumb)) {
+      run.blocks.push(block);
+      run.end = i;
+      if (run.page === void 0) run.page = block.pageNumber;
+    } else {
+      flushRun();
+      run = { breadcrumb, blocks: [block], start: i, end: i, page: block.pageNumber };
+    }
+  }
+  flushRun();
+  return chunks;
+}
+
 // src/roundtrip/session.ts
 import JSZip12 from "jszip";
 async function buildState(bytes) {
@@ -29272,7 +29794,7 @@ function drawPara(p, ox, oy, areaW, ctx, depth, segPages) {
         }
         if (text.trim().length > 0) {
           const attrs = [`x="${pt(cx)}"`, `y="${pt(y)}"`, `font-size="${pt(st.height)}"`];
-          if (st.fontFamily) attrs.push(`font-family="${st.fontFamily}"`);
+          if (st.fontFamily) attrs.push(`font-family="${escapeXml3(st.fontFamily)}"`);
           if ([...text].length > 1 && sw > 50) {
             attrs.push(`textLength="${pt(sw)}"`, `lengthAdjust="${plan.scale < 1 ? "spacingAndGlyphs" : "spacing"}"`);
           }
@@ -29439,8 +29961,10 @@ function drawShape(o, x, y, ctx, depth) {
     for (const p of elements2(sub)) if (ln2(p) === "p") drawPara(p, x, y, w, ctx, depth + 1);
   }
 }
-function cellContentExtent(cell2) {
+function cellContentExtent(cell2, memo) {
   if (!cell2.sub) return 0;
+  const hit = memo?.cell.get(cell2.el);
+  if (hit !== void 0) return hit;
   let ext = 0;
   for (const p of elements2(cell2.sub)) {
     if (ln2(p) !== "p") continue;
@@ -29449,7 +29973,7 @@ function cellContentExtent(cell2) {
     const baseV = m.segs[0]?.vertpos ?? 0;
     for (const o of m.objs) {
       if (o.inline) {
-        const h = o.tag === "tbl" ? Math.max(o.height, measureTableHeight(o.el)) : o.height;
+        const h = o.tag === "tbl" ? Math.max(o.height, measureTableHeight(o.el, memo)) : o.height;
         ext = Math.max(ext, baseV + h);
         continue;
       }
@@ -29461,6 +29985,7 @@ function cellContentExtent(cell2) {
       ext = Math.max(ext, anchor + num3(om, "top") + num3(pos, "vertOffset") + o.height);
     }
   }
+  memo?.cell.set(cell2.el, ext);
   return ext;
 }
 function edgeLine(x1, y1, x2, y2, e) {
@@ -29483,8 +30008,9 @@ function collectCells(tbl2) {
       if (!addr || !csz) continue;
       cells.push({
         el: tc2,
-        ca: num3(addr, "colAddr"),
-        ra: num3(addr, "rowAddr"),
+        // 음수 주소(uint32 역변환·손상 입력) 방어 — colX/rowY 인덱스 이탈로 NaN 좌표 방지
+        ca: Math.max(0, num3(addr, "colAddr")),
+        ra: Math.max(0, num3(addr, "rowAddr")),
         cs: Math.max(1, num3(span, "colSpan", 1)),
         rs: Math.max(1, num3(span, "rowSpan", 1)),
         w: num3(csz, "width"),
@@ -29500,16 +30026,19 @@ function collectCells(tbl2) {
   }
   return cells;
 }
-function measureTableHeight(tbl2) {
+function measureTableHeight(tbl2, memo) {
+  const hit = memo?.table.get(tbl2);
+  if (hit !== void 0) return hit;
   const cells = collectCells(tbl2);
   if (cells.length === 0 || cells.length > 4096) return 0;
   const nRows = Math.max(...cells.map((c) => c.ra + c.rs));
   const rowH = solveRowHeights(
-    cells.map((c) => ({ rowAddr: c.ra, rowSpan: c.rs, height: c.h, contentH: c.rs === 1 ? cellContentExtent(c) : void 0 })),
+    cells.map((c) => ({ rowAddr: c.ra, rowSpan: c.rs, height: c.h, contentH: c.rs === 1 ? cellContentExtent(c, memo) : void 0 })),
     nRows
   );
   let sum = 0;
   for (const h of rowH) sum += h;
+  memo?.table.set(tbl2, sum);
   return sum;
 }
 function drawTable(tbl2, tx, ty, ctx, depth) {
@@ -29526,7 +30055,7 @@ function drawTable(tbl2, tx, ty, ctx, depth) {
   const colCons = cells.map((c) => ({ a: c.ca, b: c.ca + c.cs, size: c.w }));
   const colX = solveBoundaries(colCons, nCols, num3(tblSz, "width") || void 0);
   const rowH = solveRowHeights(
-    cells.map((c) => ({ rowAddr: c.ra, rowSpan: c.rs, height: c.h, contentH: c.rs === 1 ? cellContentExtent(c) : void 0 })),
+    cells.map((c) => ({ rowAddr: c.ra, rowSpan: c.rs, height: c.h, contentH: c.rs === 1 ? cellContentExtent(c, ctx.extentMemo) : void 0 })),
     nRows
   );
   const rowY = [0];
@@ -29546,7 +30075,7 @@ function drawTable(tbl2, tx, ty, ctx, depth) {
     const { c } = g;
     if (!c.sub) continue;
     const innerH = g.h - c.marginT - c.marginB;
-    const extent = cellContentExtent(c);
+    const extent = cellContentExtent(c, ctx.extentMemo);
     const va = c.sub.getAttribute("vertAlign") ?? "TOP";
     let yoff = 0;
     if (va === "CENTER") yoff = Math.max(0, (innerH - extent) / 2);
@@ -29609,8 +30138,9 @@ function sniffMime(name, bytes) {
   const lower = name.toLowerCase();
   if (lower.endsWith(".png") || bytes.length > 4 && bytes[0] === 137 && bytes[1] === 80) return "image/png";
   if (lower.endsWith(".bmp") || bytes.length > 2 && bytes[0] === 66 && bytes[1] === 77) return "image/bmp";
-  if (lower.endsWith(".gif")) return "image/gif";
+  if (lower.endsWith(".gif") || bytes.length > 3 && bytes[0] === 71 && bytes[1] === 73 && bytes[2] === 70) return "image/gif";
   if (lower.endsWith(".svg")) return "image/svg+xml";
+  if (bytes.length > 3 && bytes[0] === 255 && bytes[1] === 216 && bytes[2] === 255) return "image/jpeg";
   return "image/jpeg";
 }
 function readSectionGeom(root) {
@@ -29741,7 +30271,8 @@ async function renderHwpxToSvg(input, options) {
     highlights: (options?.highlights ?? []).map((s) => s.trim().toLowerCase()).filter((s) => s.length > 0),
     warnings,
     warned: /* @__PURE__ */ new Set(),
-    stats: { texts: 0, images: 0, tables: 0 }
+    stats: { texts: 0, images: 0, tables: 0 },
+    extentMemo: { cell: /* @__PURE__ */ new WeakMap(), table: /* @__PURE__ */ new WeakMap() }
   };
   const rendered = [];
   let noCacheSkipped = false;
@@ -29844,7 +30375,7 @@ async function parseHwp3(buffer, options) {
     const { markdown, blocks, metadata, outline, warnings } = parseHwp3Document(buffer, options);
     return { success: true, fileType: "hwp3", markdown, blocks, metadata, outline, warnings };
   } catch (err) {
-    return { success: false, fileType: "hwp3", error: err instanceof Error ? err.message : "HWP3 \uD30C\uC2F1 \uC2E4\uD328", code: classifyError(err) };
+    return { success: false, fileType: "hwp3", error: sanitizeError(err), code: classifyError(err) };
   }
 }
 async function parseHwpx(buffer, options) {
@@ -29852,7 +30383,7 @@ async function parseHwpx(buffer, options) {
     const { markdown, blocks, metadata, outline, warnings, images } = await parseHwpxDocument(buffer, options);
     return { success: true, fileType: "hwpx", markdown, blocks, metadata, outline, warnings, images: images?.length ? images : void 0 };
   } catch (err) {
-    return { success: false, fileType: "hwpx", error: err instanceof Error ? err.message : "HWPX \uD30C\uC2F1 \uC2E4\uD328", code: classifyError(err) };
+    return { success: false, fileType: "hwpx", error: sanitizeError(err), code: classifyError(err) };
   }
 }
 async function parseHwp(buffer, options) {
@@ -29877,13 +30408,13 @@ async function parseHwp(buffer, options) {
     }
     return { success: true, fileType: "hwp", markdown, blocks, metadata, outline, warnings, images: images?.length ? images : void 0 };
   } catch (err) {
-    return { success: false, fileType: "hwp", error: err instanceof Error ? err.message : "HWP \uD30C\uC2F1 \uC2E4\uD328", code: classifyError(err) };
+    return { success: false, fileType: "hwp", error: sanitizeError(err), code: classifyError(err) };
   }
 }
 async function parsePdf(buffer, options) {
   let parsePdfDocument;
   try {
-    const mod = await import("./parser-UGB3NIVH.js");
+    const mod = await import("./parser-XX4QTDFQ.js");
     parsePdfDocument = mod.parsePdfDocument;
   } catch {
     return {
@@ -29894,11 +30425,11 @@ async function parsePdf(buffer, options) {
     };
   }
   try {
-    const { markdown, blocks, metadata, outline, warnings, isImageBased, pageQuality, qualitySummary } = await parsePdfDocument(buffer, options);
-    return { success: true, fileType: "pdf", markdown, blocks, metadata, outline, warnings, isImageBased, pageQuality, qualitySummary };
+    const { markdown, blocks, metadata, outline, warnings, isImageBased, pageQuality, qualitySummary, images } = await parsePdfDocument(buffer, options);
+    return { success: true, fileType: "pdf", markdown, blocks, metadata, outline, warnings, isImageBased, pageQuality, qualitySummary, images };
   } catch (err) {
     const isImageBased = err instanceof Error && "isImageBased" in err ? true : void 0;
-    return { success: false, fileType: "pdf", error: err instanceof Error ? err.message : "PDF \uD30C\uC2F1 \uC2E4\uD328", code: classifyError(err), isImageBased };
+    return { success: false, fileType: "pdf", error: sanitizeError(err), code: classifyError(err), isImageBased };
   }
 }
 async function parseXlsx(buffer, options) {
@@ -29906,7 +30437,7 @@ async function parseXlsx(buffer, options) {
     const { markdown, blocks, metadata, warnings } = await parseXlsxDocument(buffer, options);
     return { success: true, fileType: "xlsx", markdown, blocks, metadata, warnings };
   } catch (err) {
-    return { success: false, fileType: "xlsx", error: err instanceof Error ? err.message : "XLSX \uD30C\uC2F1 \uC2E4\uD328", code: classifyError(err) };
+    return { success: false, fileType: "xlsx", error: sanitizeError(err), code: classifyError(err) };
   }
 }
 async function parseXls(buffer, options) {
@@ -29914,7 +30445,7 @@ async function parseXls(buffer, options) {
     const { markdown, blocks, metadata, warnings } = await parseXlsDocument(buffer, options);
     return { success: true, fileType: "xls", markdown, blocks, metadata, warnings };
   } catch (err) {
-    return { success: false, fileType: "xls", error: err instanceof Error ? err.message : "XLS \uD30C\uC2F1 \uC2E4\uD328", code: classifyError(err) };
+    return { success: false, fileType: "xls", error: sanitizeError(err), code: classifyError(err) };
   }
 }
 async function parseDocx(buffer, options) {
@@ -29922,7 +30453,7 @@ async function parseDocx(buffer, options) {
     const { markdown, blocks, metadata, outline, warnings, images } = await parseDocxDocument(buffer, options);
     return { success: true, fileType: "docx", markdown, blocks, metadata, outline, warnings, images: images?.length ? images : void 0 };
   } catch (err) {
-    return { success: false, fileType: "docx", error: err instanceof Error ? err.message : "DOCX \uD30C\uC2F1 \uC2E4\uD328", code: classifyError(err) };
+    return { success: false, fileType: "docx", error: sanitizeError(err), code: classifyError(err) };
   }
 }
 async function parseHwpml(buffer, options) {
@@ -29930,7 +30461,7 @@ async function parseHwpml(buffer, options) {
     const { markdown, blocks, metadata, outline, warnings } = parseHwpmlDocument(buffer, options);
     return { success: true, fileType: "hwpml", markdown, blocks, metadata, outline, warnings };
   } catch (err) {
-    return { success: false, fileType: "hwpml", error: err instanceof Error ? err.message : "HWPML \uD30C\uC2F1 \uC2E4\uD328", code: classifyError(err) };
+    return { success: false, fileType: "hwpml", error: sanitizeError(err), code: classifyError(err) };
   }
 }
 async function fillForm(input, values, outputFormat = "markdown") {
@@ -29973,6 +30504,7 @@ async function fillForm(input, values, outputFormat = "markdown") {
   return { output: markdown, format: "markdown", fill };
 }
 export {
+  DEFAULT_REDACT_RULES,
   HwpxSession,
   PRESET_ALIAS,
   SPACE_EM_FIXED,
@@ -29980,6 +30512,7 @@ export {
   VERSION,
   ValueCursor,
   applySplices,
+  blocksToChunks,
   blocksToMarkdown,
   blocksToPdf,
   buildParagraphSplices,
@@ -30027,6 +30560,8 @@ export {
   patchHwpx,
   patchHwpxBlocks,
   placeSealHwpx,
+  redactMarkdown,
+  redactText,
   renderHtml,
   renderHwpxToSvg,
   scanSectionXml,