kordoc 4.14.2 → 4.14.3

package/dist/chunk-IH56ZISC.js

@@ -0,0 +1,620 @@
+#!/usr/bin/env node
+
+// src/redact-rules.ts
+var RULE_PRIORITY = [
+  "crn",
+  "rrn",
+  "email",
+  "card",
+  "brn",
+  "phone",
+  "driver",
+  "passport",
+  "account",
+  "ip"
+];
+function luhnValid(digits) {
+  let sum = 0;
+  for (let i = 0; i < digits.length; i++) {
+    let d = digits.charCodeAt(digits.length - 1 - i) - 48;
+    if (i % 2 === 1) {
+      d *= 2;
+      if (d > 9) d -= 9;
+    }
+    sum += d;
+  }
+  return sum % 10 === 0;
+}
+var DAYS_IN_MONTH = [31, 29, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+function birthdateValid(front6, genderDigit) {
+  const yy = Number(front6.slice(0, 2));
+  const mm = Number(front6.slice(2, 4));
+  const dd = Number(front6.slice(4, 6));
+  if (mm < 1 || mm > 12 || dd < 1) return false;
+  const g2 = Number(genderDigit);
+  const year = (g2 === 3 || g2 === 4 || g2 === 7 || g2 === 8 ? 2e3 : 1900) + yy;
+  if (year > (/* @__PURE__ */ new Date()).getFullYear()) return false;
+  const leap = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+  const max = mm === 2 ? leap ? 29 : 28 : DAYS_IN_MONTH[mm - 1];
+  return dd <= max;
+}
+function brnChecksumValid(d) {
+  const w = [1, 3, 7, 1, 3, 7, 1, 3, 5];
+  let sum = 0;
+  for (let i = 0; i < 9; i++) sum += w[i] * (d.charCodeAt(i) - 48);
+  sum += Math.floor((d.charCodeAt(8) - 48) * 5 / 10);
+  return (10 - sum % 10) % 10 === d.charCodeAt(9) - 48;
+}
+function crnChecksumValid(d) {
+  let sum = 0;
+  for (let i = 0; i < 12; i++) sum += (i % 2 === 0 ? 1 : 2) * (d.charCodeAt(i) - 48);
+  return (10 - sum % 10) % 10 === d.charCodeAt(12) - 48;
+}
+var digitsOf = (s) => s.replace(/\D/g, "");
+var allSameDigit = (d) => d.length > 0 && /^(\d)\1*$/.test(d);
+var LABELS = [
+  ["crn", /법\s*인\s*(?:등\s*록\s*)?번\s*호/g],
+  ["rrn", /주\s*민\s*(?:등\s*록\s*)?번\s*호|주\s*민\s*등\s*록|외\s*국\s*인\s*(?:등\s*록\s*)?번\s*호|거\s*소\s*신\s*고\s*번\s*호|생\s*년\s*월\s*일|resident\s*registration|\bRRN\b/gi],
+  ["brn", /사\s*업\s*자\s*(?:등\s*록\s*)?번\s*호|고\s*유\s*번\s*호|business\s*registration/gi],
+  ["account", /계\s*좌|예\s*금\s*주|입\s*금|은\s*행|뱅\s*크|농\s*협|신\s*협|수\s*협|우\s*체\s*국|금\s*고|bank\s*account|account\s*(?:no|number)/gi],
+  ["card", /카\s*드|credit\s*card|card\s*(?:no|number)/gi],
+  ["phone", /전\s*화|연\s*락\s*처|휴\s*대|핸\s*드\s*폰|팩\s*스|☎|☏|콜\s*센\s*터|고\s*객\s*센\s*터|대\s*표\s*번\s*호|상\s*담|문\s*의|\b(?:tel|fax|mobile|phone|h\.?p|ARS)\b/gi],
+  ["passport", /여\s*권|passport/gi],
+  ["driver", /운\s*전\s*면\s*허|면\s*허\s*번\s*호|driver'?s?\s*licen[cs]e/gi],
+  ["ip", /\bIP\b|아\s*이\s*피/g],
+  ["other", /출\s*원\s*번\s*호|과\s*제\s*번\s*호|사\s*업\s*번\s*호|접\s*수\s*번\s*호|민\s*원\s*번\s*호|신\s*청\s*번\s*호|문\s*서\s*번\s*호|관\s*리\s*번\s*호|주\s*문\s*번\s*호|일\s*련\s*번\s*호|발\s*간\s*등\s*록|등\s*록\s*번\s*호\s*\(\s*기\s*록|ISBN|ISSN|예\s*산|과\s*목|코\s*드|모\s*델|제\s*품|부\s*품|시\s*리\s*얼|serial|model|\bS\/N\b|바\s*코\s*드|기\s*록\s*물|사\s*건\s*번\s*호/gi]
+];
+var CELL_SEP_RE = /(?<!\\)\||<\/t[dh]>/gi;
+var PREV_VALUE_RE = /\d[\d\-.\s]{4,}\d/g;
+function labelsIn(s) {
+  const out = /* @__PURE__ */ new Set();
+  for (const [ctx, re] of LABELS) {
+    re.lastIndex = 0;
+    if (re.test(s)) out.add(ctx);
+  }
+  return out;
+}
+function labelsBefore(norm, start) {
+  let win = norm.slice(Math.max(0, start - 120), start);
+  const seps = [...win.matchAll(CELL_SEP_RE)];
+  if (seps.length >= 2) {
+    const s = seps[seps.length - 2];
+    win = win.slice(s.index + s[0].length);
+  }
+  win = win.replace(/<[^>]*>/g, " ").slice(-40);
+  const prev = [...win.matchAll(PREV_VALUE_RE)].pop();
+  if (prev) win = win.slice(prev.index + prev[0].length);
+  return labelsIn(win);
+}
+var OTHER_AFTER_RE = /^\s{0,2}[(\[]?\s{0,2}(?:접\s*수|신\s*청|주\s*문|사\s*건|과\s*제|문\s*서|관\s*리|부\s*품|제\s*품|모\s*델|코\s*드|시\s*리\s*얼|serial|model)/i;
+var g = (x, name) => x.m.groups?.[name] ?? "";
+var has = (x, c) => x.ctx().has(c);
+var crnOnly = (x) => has(x, "crn") && !has(x, "rrn");
+var after = (x, n = 16) => {
+  const end = x.m.index + x.m[0].length;
+  return x.m.input.slice(end, end + n);
+};
+var before = (x, n = 2) => {
+  const start = x.m.index;
+  return x.m.input.slice(Math.max(0, start - n), start);
+};
+var otherCtx = (x, own) => has(x, "other") && !has(x, own) || OTHER_AFTER_RE.test(after(x));
+var SERIAL_BEFORE_RE = /(?:\bS\/N|\bserial(?:\s*(?:no|number))?|시\s*리\s*얼(?:\s*번\s*호)?|일\s*련\s*번\s*호|바\s*코\s*드)\s*[:.]?\s*$/i;
+var serialBefore = (x) => SERIAL_BEFORE_RE.test(before(x, 20)) && !has(x, "phone");
+var PHONE_PREFIX = "0(?:1[016789]|2|3[1-3]|4[1-4]|5[1-5]|6[1-4]|70|80|60|50[2-8])";
+var PHONE_AREA = "0(?:1[016789]|2|3[1-3]|4[1-4]|5[1-5]|6[1-4]|70|80|50[2-8])";
+var PHONE_SEP = "(?: {0,2}- {0,2}| {1,2}|\\.)";
+var PHONE_END = "(?![\\w@-])";
+function phoneSepsOk(x, s1, s2) {
+  if (s1 === "" !== (s2 === "")) return false;
+  if (s1 === "." !== (s2 === ".")) return false;
+  return s1 !== "." || !/^\.\d/.test(after(x, 2));
+}
+function phoneDigitsOk(pre, mid, last, bare) {
+  if (/^0+$/.test(mid + last)) return false;
+  return !bare || !/^0(?:2|3[1-3]|4[1-4]|5[1-5]|6[1-4])$/.test(pre) || mid[0] !== "0";
+}
+var EMAIL_START = "(?<![\\w%+])(?<!\\w[.\\-])(?<![A-Za-z0-9][*\u25CF\u25CB\u25EF\xD7#]+)";
+var EMAIL_DOMAIN = "(?<domain>[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?(?:\\.[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?)*\\.(?<tld>[A-Za-z]{2,24}))(?![\\w-])";
+var FILE_EXT_TLD = /^(?:png|jpe?g|gif|bmp|svg|webp|tiff?|hwpx?|hwp|pdf|docx?|xlsx?|pptx?|txt|zip|csv|json|xml|html?|js|css|mp[34]|wav|avi|exe)$/i;
+var RULES = {
+  // 주민·외국인등록번호 — 앞 6자리(생년월일) 유지, 뒤 7자리 마스크
+  rrn: [
+    {
+      // 하이픈형 (앞뒤 공백 0~2칸, 유니코드 대시는 정규화로 흡수). 뒤에 "-글자"는 허용, "-숫자"는 더 긴 코드.
+      // 법인 라벨만 있으면 제외
+      re: /(?<![\w-])(?<front>\d{6})(?<sep> {0,2}- {0,2})(?<back>[1-8]\d{6})(?![\w])(?!-\d)/dg,
+      ok: (x) => birthdateValid(g(x, "front"), g(x, "back")[0]) && !crnOnly(x),
+      mask: ["back"]
+    },
+    {
+      // 뒷자리 일부만 가린 형태 (900101-1******, 900101-1694***) — 남은 숫자를 가린다
+      re: /(?<![\w-])(?<front>\d{6})(?<sep> {0,2}- {0,2})(?<back>[1-8][0-9*●○◯×xX#]{6})(?![\w*●○◯×#])(?!-\d)/dg,
+      ok: (x) => /[*●○◯×xX#]/.test(g(x, "back")) && birthdateValid(g(x, "front"), g(x, "back")[0]) && !crnOnly(x),
+      mask: ["back"]
+    },
+    {
+      // 구분자 없음·공백/온점/가운뎃점/빗금/물결 구분 — 주민/외국인등록번호(생년월일) 라벨이 있을 때만
+      re: /(?<![\w@.-])(?<front>\d{6})(?<sep>[ .·/~]?)(?<back>[1-8]\d{6})(?![\w@-])/dg,
+      needs: "rrn",
+      ok: (x) => birthdateValid(g(x, "front"), g(x, "back")[0]),
+      mask: ["back"]
+    }
+  ],
+  // 법인등록번호 (opt-in) — 법인 라벨이 있거나, 뒷자리가 0으로 시작(주민번호 불가)하고 체크섬 유효
+  crn: [
+    {
+      re: /(?<![\w-])(?<front>\d{6})(?<sep> {0,2}- {0,2})(?<back>\d{7})(?![\w-])/dg,
+      ok: (x) => !allSameDigit(g(x, "front") + g(x, "back")) && (crnOnly(x) || g(x, "back")[0] === "0" && crnChecksumValid(g(x, "front") + g(x, "back"))),
+      mask: ["back"]
+    },
+    {
+      re: /(?<![\w@.-])(?<front>\d{6})(?<back>\d{7})(?![\w@-])/dg,
+      needs: "crn",
+      ok: (x) => !allSameDigit(g(x, "front") + g(x, "back")) && !has(x, "rrn"),
+      mask: ["back"]
+    }
+  ],
+  // 이메일 — 로컬파트 첫 글자만 남기고 마스크, 도메인 유지. 파일명(image@2x.png)은 제외
+  // 이미 가린 로컬파트(j*********5@…) 뒤꼬리에서 시작하지 않는다 — 가림표 바로 뒤 매치 금지
+  email: [
+    {
+      re: new RegExp(`${EMAIL_START}(?<l1>[A-Za-z0-9])(?<lrest>[A-Za-z0-9._%+-]+)@${EMAIL_DOMAIN}`, "dg"),
+      ok: (x) => !FILE_EXT_TLD.test(g(x, "tld")),
+      mask: ["lrest"],
+      maskAll: true
+    },
+    {
+      // 한 글자 로컬파트 — 첫 글자를 남기면 가린 게 없으므로 전부 가린다
+      re: new RegExp(`${EMAIL_START}(?<l1>[A-Za-z0-9])@${EMAIL_DOMAIN}`, "dg"),
+      ok: (x) => !FILE_EXT_TLD.test(g(x, "tld")),
+      mask: ["l1"]
+    }
+  ],
+  // 카드번호 — 가운데 마스크 + Luhn. 구분자 없는 15~16자리는 카드 라벨이 있을 때만
+  card: [
+    {
+      // 4-4-4-4 (같은 구분자 강제)
+      re: /(?<![\w-])(?<g1>\d{4})(?<sep>[- ])(?<g2>\d{4})\k<sep>(?<g3>\d{4})\k<sep>(?<g4>\d{4})(?![\w-])(?![- ]\d)/dg,
+      ok: (x) => {
+        const d = digitsOf(x.m[0]);
+        return luhnValid(d) && !allSameDigit(d);
+      },
+      mask: ["g2", "g3"]
+    },
+    {
+      // AMEX 4-6-5
+      re: /(?<![\w-])(?<g1>3[47]\d{2})(?<sep>[- ])(?<g2>\d{6})\k<sep>(?<g3a>\d)(?<g3b>\d{4})(?![\w-])(?![- ]\d)/dg,
+      ok: (x) => luhnValid(digitsOf(x.m[0])),
+      mask: ["g2", "g3a"]
+    },
+    {
+      // 온점 구분 4.4.4.4 — 카드 라벨 필요 (버전·좌표 모양과 겹침)
+      re: /(?<![\w.-])(?<g1>\d{4})\.(?<g2>\d{4})\.(?<g3>\d{4})\.(?<g4>\d{4})(?![\w-])(?!\.\d)/dg,
+      needs: "card",
+      ok: (x) => {
+        const d = digitsOf(x.m[0]);
+        return luhnValid(d) && !allSameDigit(d);
+      },
+      mask: ["g2", "g3"]
+    },
+    {
+      // 무구분 15~16자리 — 카드 라벨 필요
+      re: /(?<![\w@.-])(?<g1>\d{4})(?<mid>\d{7,8})(?<g4>\d{4})(?![\w@-])/dg,
+      needs: "card",
+      ok: (x) => {
+        const d = digitsOf(x.m[0]);
+        return luhnValid(d) && !allSameDigit(d);
+      },
+      mask: ["mid"]
+    }
+  ],
+  // 사업자등록번호 3-2-5 — 체크섬 유효 또는 사업자 라벨. 뒤 5자리(일련·검증번호) 마스크
+  brn: [
+    {
+      re: /(?<![\w-])(?<a>\d{3})-(?<b>\d{2})-(?<c>\d{5})(?![\w-])/dg,
+      ok: (x) => {
+        const d = digitsOf(x.m[0]);
+        if (allSameDigit(d)) return false;
+        return has(x, "brn") || brnChecksumValid(d) && !has(x, "account") && !otherCtx(x, "brn");
+      },
+      mask: ["c"]
+    },
+    {
+      re: /(?<![\w@.-])(?<a>\d{3})(?<b>\d{2})(?<c>\d{5})(?![\w@-])/dg,
+      needs: "brn",
+      ok: (x) => !allSameDigit(digitsOf(x.m[0])),
+      mask: ["c"]
+    }
+  ],
+  // 전화번호 — 가운데 자리만 마스크 (대표번호는 뒤 4자리).
+  // 뒤에 "-"가 붙으면 더 긴 코드(예산과목 064-1100-1131-301-210)의 일부라 제외.
+  phone: [
+    {
+      // 국내 일반: 휴대폰·지역·070/080/060·050x 안심번호. 구분자 -·공백·온점(PHONE_SEP) 또는 무구분
+      re: new RegExp(`(?<![\\w@+-])(?<pre>${PHONE_PREFIX})(?<s1>${PHONE_SEP}?)(?<mid>\\d{3,4})(?<s2>${PHONE_SEP}?)(?<last>\\d{4})${PHONE_END}`, "dg"),
+      ok: (x) => {
+        const pre = g(x, "pre");
+        const bare = g(x, "s1") === "";
+        if (!phoneSepsOk(x, g(x, "s1"), g(x, "s2"))) return false;
+        if (!phoneDigitsOk(pre, g(x, "mid"), g(x, "last"), bare)) return false;
+        if (serialBefore(x)) return false;
+        if (!bare) return true;
+        if (/\d\.$/.test(before(x))) return false;
+        if (pre.startsWith("01")) return true;
+        return !/\d,$/.test(before(x)) && !/^,\d/.test(after(x, 2));
+      },
+      mask: ["mid"]
+    },
+    {
+      // 괄호 지역번호: (02) 123-4567, (042)481-6300
+      re: new RegExp(`(?<![\\w@])\\((?<pre>${PHONE_AREA})\\) ?(?<mid>\\d{3,4})(?<s2>${PHONE_SEP}?)(?<last>\\d{4})${PHONE_END}`, "dg"),
+      ok: (x) => phoneDigitsOk(g(x, "pre"), g(x, "mid"), g(x, "last"), false) && (g(x, "s2") !== "." || !/^\.\d/.test(after(x, 2))),
+      mask: ["mid"]
+    },
+    {
+      // 지역번호 뒤 닫는 괄호: 02)450-1234
+      re: new RegExp(`(?<![\\w@(+-])(?<!\\d\\.)(?<pre>${PHONE_AREA})\\) ?(?<mid>\\d{3,4})(?<s2>${PHONE_SEP})(?<last>\\d{4})${PHONE_END}`, "dg"),
+      ok: (x) => phoneDigitsOk(g(x, "pre"), g(x, "mid"), g(x, "last"), false) && (g(x, "s2") !== "." || !/^\.\d/.test(after(x, 2))),
+      mask: ["mid"]
+    },
+    {
+      // 국제 표기: +82 10-1234-5678, +82-2-123-4567, +82 (0)10 1234 5678, +821012345678
+      re: new RegExp(`(?<![\\w@+])(?<cc>\\+82)(?<s0>[-. ]?)(?:\\(0\\) ?)?(?<pre>1[016789]|2|3[1-3]|4[1-4]|5[1-5]|6[1-4]|70|80)(?<s1>${PHONE_SEP}?)(?<mid>\\d{3,4})(?<s2>${PHONE_SEP}?)(?<last>\\d{4})${PHONE_END}`, "dg"),
+      ok: (x) => phoneSepsOk(x, g(x, "s1"), g(x, "s2")) && phoneDigitsOk("0" + g(x, "pre"), g(x, "mid"), g(x, "last"), g(x, "s1") === ""),
+      mask: ["mid"]
+    },
+    {
+      // 대표번호 15xx·16xx·18xx — 구분자 필수. 연도 범위 모양(1592-1598)·온점/공백 구분은 전화 라벨이 있을 때만.
+      // 뒤 4자리 0000 은 자리표시자
+      re: new RegExp(`(?<![\\w@+-])(?<!\\d\\.)(?<pre>1(?:5[2-9]\\d|6\\d\\d|8\\d\\d))(?<sep> {0,2}- {0,2}| {1,2}|\\.)(?<last>\\d{4})${PHONE_END}`, "dg"),
+      ok: (x) => {
+        if (g(x, "last") === "0000" || serialBefore(x)) return false;
+        if (g(x, "sep") === "." && /^\.\d/.test(after(x, 2))) return false;
+        const a = Number(g(x, "pre"));
+        const b = Number(g(x, "last"));
+        const yearRange = b >= a && b <= (/* @__PURE__ */ new Date()).getFullYear();
+        return g(x, "sep").trim() === "-" && !yearRange || has(x, "phone");
+      },
+      mask: ["last"]
+    }
+  ],
+  // 운전면허번호 — 지역코드(11~28)-연도-일련6-검증2 / 구형 지역명 + 2-6-2. 뒤 8자리 마스크
+  driver: [
+    {
+      // 신형 — 무문맥이지만 비개인 식별번호 문맥("(접수)" 등)이면 아님
+      re: /(?<![\w-])(?<r>1[1-9]|2[0-8])-(?<y>\d{2})-(?<s>\d{6})-(?<c>\d{2})(?![\w-])/dg,
+      ok: (x) => has(x, "driver") || !otherCtx(x, "driver"),
+      mask: ["s", "c"]
+    },
+    {
+      re: /(?<rn>서울|부산|경기|강원|충북|충남|전북|전남|경북|경남|제주|대구|인천|광주|대전|울산) ?(?<y>\d{2})-(?<s>\d{6})-(?<c>\d{2})(?![\w-])/dg,
+      mask: ["s", "c"]
+    },
+    {
+      re: /(?<![\w@.-])(?<r>1[1-9]|2[0-8])(?<y>\d{2})(?<s>\d{6})(?<c>\d{2})(?![\w@-])/dg,
+      needs: "driver",
+      mask: ["s", "c"]
+    }
+  ],
+  // 여권번호 — 신형 복수여권(M123A4567)은 무문맥, 그 밖의 종류 글자(S·R·O·D·G)와 구형(M12345678)은 여권 라벨
+  // 필요 ("S123A4567 부품" 같은 제품 코드). 첫 글자만 남김
+  passport: [
+    {
+      re: /(?<![A-Za-z0-9])(?<l>[MSRODG])(?<num>\d{3}[A-Z]\d{4})(?![A-Za-z0-9])/dg,
+      ok: (x) => has(x, "passport") || g(x, "l") === "M" && !otherCtx(x, "passport"),
+      mask: ["num"]
+    },
+    {
+      re: /(?<![A-Za-z0-9])(?<l>[MSRODG])(?<num>\d{8})(?![A-Za-z0-9])/dg,
+      needs: "passport",
+      mask: ["num"]
+    },
+    {
+      // 소문자로 친 여권번호(m123a4567) — 여권 라벨이 있을 때만
+      re: /(?<![A-Za-z0-9])(?<l>[msrodg])(?<num>\d{3}[a-z]\d{4}|\d{8})(?![A-Za-z0-9])/dg,
+      needs: "passport",
+      mask: ["num"]
+    }
+  ],
+  // 계좌번호 — 하이픈 3~4그룹, 총 11~16자리 (10자리는 계좌 라벨 필요). 마지막 그룹 빼고 마스크.
+  // 무구분 10~14자리는 계좌·은행 라벨이 있을 때만 (뒤 4자리 유지)
+  account: [
+    {
+      // 마지막 그룹 1자리 허용 — 새마을금고 9002-1234-5678-9, 3-2-6-1·3-3-6-1 형식
+      re: /(?<![\w-])(?<!\d\.)(?<head>\d{2,6}(?:-\d{2,6}){1,2})-(?<last>\d{1,8})(?![\w-])(?!\.\d)/dg,
+      ok: (x) => {
+        const s = x.m[0];
+        const d = digitsOf(s);
+        const acct = has(x, "account");
+        if (allSameDigit(d) || !acct && otherCtx(x, "account")) return false;
+        if (!acct && (/\d,$/.test(before(x)) || /^,\d/.test(after(x, 2)))) return false;
+        if (/^\d+(?:-0+)+$/.test(s)) return false;
+        if (d.length < 10 || d.length > 16 || d.length === 10 && !acct) return false;
+        if (/^\s*원/.test(after(x, 3))) return false;
+        if (acct) return true;
+        if (/^(?:10|20|30|40)-(?:19|20)\d\d-\d{6,7}$/.test(s)) return false;
+        if (/^(?:19|20)\d\d-(?:0[1-9]|1[0-2])(?:0[1-9]|[12]\d|3[01])?-/.test(s)) return false;
+        if (s.split("-").filter((p) => /^(?:19|20)\d\d$/.test(p)).length >= 2) return false;
+        if (/^\d{3}-\d{2}-\d{5}$/.test(s) && brnChecksumValid(d)) return false;
+        return true;
+      },
+      mask: ["head"]
+    },
+    {
+      re: /(?<![\w@.-])(?<!\d,)(?<head>\d{6,10})(?<last>\d{4})(?![\w@-])(?!,\d)/dg,
+      needs: "account",
+      ok: (x) => !allSameDigit(x.m[0]),
+      mask: ["head"]
+    }
+  ],
+  // IPv4 (opt-in) — 옥텟 0~255, 첫 옥텟 10 이상(1.2.3.4 절 번호·버전 제외) 또는 IP 라벨. 뒤 두 옥텟 마스크
+  ip: [
+    {
+      re: /(?<![\w.])(?<a>\d{1,3})\.(?<b>\d{1,3})\.(?<c>\d{1,3})\.(?<d>\d{1,3})(?![\w])(?!\.\d)/dg,
+      ok: (x) => {
+        const oct = [g(x, "a"), g(x, "b"), g(x, "c"), g(x, "d")];
+        if (oct.some((o) => Number(o) > 255 || o.length > 1 && o[0] === "0")) return false;
+        return Number(oct[0]) >= 10 || has(x, "ip");
+      },
+      mask: ["c", "d"]
+    }
+  ]
+};
+
+// src/redact.ts
+var DEFAULT_REDACT_RULES = [
+  "rrn",
+  "phone",
+  "email",
+  "card",
+  "account",
+  "brn",
+  "passport",
+  "driver"
+];
+var ALL_REDACT_RULES = [...DEFAULT_REDACT_RULES, "crn", "ip"];
+var DASHES = /* @__PURE__ */ new Set([8208, 8209, 8210, 8211, 8212, 8213, 8722, 65112, 65123, 65293, 9472, 9473, 12641, 12540]);
+var SPACES = /* @__PURE__ */ new Set([160, 8194, 8195, 8196, 8197, 8198, 8199, 8200, 8201, 8202, 8239, 12288]);
+function normalizeForDetect(text) {
+  let out = "";
+  let changed = false;
+  for (let i = 0; i < text.length; i++) {
+    const c = text.charCodeAt(i);
+    let r = c;
+    if (c >= 65281 && c <= 65374) r = c - 65248;
+    if (DASHES.has(c)) r = 45;
+    else if (SPACES.has(c)) r = 32;
+    if (r !== c) changed = true;
+    out += r === c ? text[i] : String.fromCharCode(r);
+  }
+  return changed ? out : text;
+}
+function maskMatch(orig, x, v, maskChar) {
+  const base = x.m.index;
+  const norm = x.m[0];
+  const chars = orig.split("");
+  const idx = x.m.indices?.groups;
+  for (const name of v.mask) {
+    const r = idx?.[name];
+    if (!r) continue;
+    for (let i = r[0] - base; i < r[1] - base; i++) {
+      if (v.maskAll || /[0-9A-Za-z]/.test(norm[i])) chars[i] = maskChar;
+    }
+  }
+  return chars.join("");
+}
+function assertMaskChar(maskChar) {
+  const n = normalizeForDetect(maskChar);
+  if (maskChar.length !== 1 || /[0-9A-Za-z|\\<>&"'._\-@+:/,;]/.test(n) || /[\p{Z}\p{C}\p{M}]/u.test(maskChar) || /[\uFDD0-\uFDEF\uFFFE\uFFFF]/.test(maskChar)) {
+    throw new Error(`maskChar\uB294 \uC601\uC22B\uC790\xB7\uACF5\uBC31\xB7\uC81C\uC5B4/\uACB0\uD569 \uBB38\uC790\xB7\uAD6C\uBD84 \uAE30\uD638(|\\<>&"'._-@+:/,;)\uAC00 \uC544\uB2CC \uBCF4\uC774\uB294 1\uAE00\uC790\uC5EC\uC57C \uD568: ${JSON.stringify(maskChar)}`);
+  }
+}
+var LIST_SEP_RE = /^\s{0,2}(?:[,;/·、]|및|또는)?\s{0,2}$/;
+function detect(text, rules, maskChar, headerAt) {
+  const norm = normalizeForDetect(text);
+  const hits = [];
+  const occupied = [];
+  for (const rule of RULE_PRIORITY) {
+    if (!rules.includes(rule)) continue;
+    for (const v of RULES[rule]) {
+      for (const m of norm.matchAll(v.re)) {
+        const start = m.index;
+        const end = start + m[0].length;
+        if (occupied.some((o) => start < o.end && end > o.start)) continue;
+        let cached;
+        const ctx = () => {
+          if (!cached) {
+            let c = labelsBefore(norm, start);
+            if (c.size === 0) {
+              const prev = occupied.find((o) => o.end < start && start - o.end <= 6 && LIST_SEP_RE.test(norm.slice(o.end, start)));
+              if (prev) c = prev.rule === "email" ? prev.ctx() : /* @__PURE__ */ new Set([...prev.ctx(), prev.rule]);
+            }
+            if (c.size === 0 && headerAt) {
+              const h = headerAt(start);
+              if (h) c = labelsIn(normalizeForDetect(h));
+            }
+            cached = c;
+          }
+          return cached;
+        };
+        const x = { m, ctx };
+        if (v.needs && !ctx().has(v.needs)) continue;
+        if (v.ok && !v.ok(x)) continue;
+        occupied.push({ start, end, ctx, rule });
+        hits.push({ rule, masked: maskMatch(text.slice(start, end), x, v, maskChar), index: start, length: end - start });
+      }
+    }
+  }
+  return hits.sort((a, b) => a.index - b.index);
+}
+function applyHits(text, hits) {
+  let out = "";
+  let cursor = 0;
+  for (const h of hits) {
+    out += text.slice(cursor, h.index) + h.masked;
+    cursor = h.index + h.length;
+  }
+  return out + text.slice(cursor);
+}
+function redactText(text, options) {
+  const maskChar = options?.maskChar ?? "\u25CF";
+  assertMaskChar(maskChar);
+  const rules = options?.rules ?? DEFAULT_REDACT_RULES;
+  if (text === "" || rules.length === 0) return { text, hits: [] };
+  const hits = detect(text, rules, maskChar);
+  return { text: applyHits(text, hits), hits };
+}
+function pipePositions(line) {
+  const out = [];
+  for (let i = 0; i < line.length; i++) {
+    if (line[i] === "|" && line[i - 1] !== "\\") out.push(i);
+  }
+  return out;
+}
+var isGfmRow = (l) => /^\s*\|.*\|\s*$/.test(l);
+var isGfmSep = (l) => /^\s*\|(?:\s*:?-{3,}:?\s*\|)+\s*$/.test(l);
+function htmlCells(line) {
+  const out = [];
+  let col = 0;
+  for (const m of line.matchAll(/<t([dh])\b([^>]*)>([\s\S]*?)<\/t\1>/gi)) {
+    const span = Math.max(1, Number(m[2].match(/colspan="?(\d+)/i)?.[1] ?? 1));
+    out.push({ start: m.index, end: m.index + m[0].length, col, span, text: m[3].replace(/<[^>]*>/g, " ") });
+    col += span;
+  }
+  return out;
+}
+function tableHeaderContext(lines) {
+  const out = /* @__PURE__ */ new Map();
+  for (let i = 0; i < lines.length; i++) {
+    if (isGfmRow(lines[i]) && i + 1 < lines.length && isGfmSep(lines[i + 1])) {
+      const head = lines[i];
+      const hp = pipePositions(head);
+      const headers = hp.slice(0, -1).map((p, k) => head.slice(p + 1, hp[k + 1]));
+      let j = i + 2;
+      for (; j < lines.length && isGfmRow(lines[j]); j++) {
+        const rp = pipePositions(lines[j]);
+        out.set(j, (off) => {
+          let k = -1;
+          for (const p of rp) {
+            if (p < off) k++;
+            else break;
+          }
+          return k >= 0 ? headers[k] : void 0;
+        });
+      }
+      i = j - 1;
+      continue;
+    }
+    if (/<table\b/i.test(lines[i])) {
+      let headers = null;
+      let depth = 0;
+      for (let j = i; j < lines.length; j++) {
+        depth += (lines[j].match(/<table\b/gi) ?? []).length;
+        if (/<tr\b/i.test(lines[j]) && depth === 1) {
+          const cells = htmlCells(lines[j]);
+          if (!headers) headers = cells;
+          else if (cells.length > 0) {
+            const hdr = headers;
+            out.set(j, (off) => {
+              const c = cells.find((x) => off >= x.start && off < x.end);
+              if (!c) return void 0;
+              const h = hdr.find((x) => c.col >= x.col && c.col < x.col + x.span);
+              return h?.text;
+            });
+          }
+        }
+        depth -= (lines[j].match(/<\/table>/gi) ?? []).length;
+        if (depth <= 0) {
+          i = j;
+          break;
+        }
+      }
+    }
+  }
+  return out;
+}
+var MD_ALWAYS_MARKER_RE = new RegExp([
+  "(?<!\\*)\\*\\*(?!\\*)",
+  "(?<!_)__(?!_)",
+  "(?<!~)~~(?!~)",
+  "<\\/?(?:u|b|i|s|em|strong|sup|sub|del|span|mark|small|big|ins|strike|tt|code|kbd|samp|var|q|cite|abbr|dfn)>",
+  "\\\\(?=[\\\\`*_{}[\\]()#+\\-.!|~>])"
+].join("|"), "g");
+var MD_OPEN_RE = /(?<![\w*\\])(\*\*\*|\*|_)(?=[0-9A-Za-z０-９])/g;
+var MD_CLOSE_RE = /(?<=[0-9A-Za-z０-９])(\*\*\*|\*|_)(?![\w*])/g;
+function mdMarkerRanges(line) {
+  const out = [];
+  for (const m of line.matchAll(MD_ALWAYS_MARKER_RE)) out.push([m.index, m.index + m[0].length]);
+  const taken = (a, b) => out.some(([s, e]) => a < e && b > s);
+  const closes = [...line.matchAll(MD_CLOSE_RE)].filter((m) => !taken(m.index, m.index + m[0].length));
+  let from = 0;
+  for (const o of line.matchAll(MD_OPEN_RE)) {
+    const os = o.index;
+    const oe = os + o[0].length;
+    if (os < from || taken(os, oe)) continue;
+    const c = closes.find((m) => m.index >= oe && m[0] === o[0]);
+    if (!c) continue;
+    out.push([os, oe], [c.index, c.index + c[0].length]);
+    from = c.index + c[0].length;
+  }
+  return out.sort((a, b) => a[0] - b[0]);
+}
+function detectMarkdownLine(line, rules, maskChar, headerAt) {
+  const markers = mdMarkerRanges(line);
+  if (markers.length === 0) return detect(line, rules, maskChar, headerAt);
+  let clean = "";
+  const map = [];
+  let cursor = 0;
+  const keep = (to) => {
+    for (let i = cursor; i < to; i++) {
+      clean += line[i];
+      map.push(i);
+    }
+  };
+  for (const [ms, me] of markers) {
+    keep(ms);
+    cursor = me;
+  }
+  keep(line.length);
+  const hits = detect(clean, rules, maskChar, headerAt ? (i) => headerAt(map[i] ?? i) : void 0);
+  return hits.map((h) => {
+    const start = map[h.index];
+    const end = map[h.index + h.length - 1] + 1;
+    const chars = line.slice(start, end).split("");
+    for (let k = 0; k < h.length; k++) {
+      if (h.masked[k] !== clean[h.index + k]) chars[map[h.index + k] - start] = maskChar;
+    }
+    return { rule: h.rule, masked: chars.join(""), index: start, length: end - start };
+  });
+}
+function redactMarkdown(markdown, options) {
+  const maskChar = options?.maskChar ?? "\u25CF";
+  assertMaskChar(maskChar);
+  const rules = options?.rules ?? DEFAULT_REDACT_RULES;
+  const lines = markdown.split("\n");
+  const headers = tableHeaderContext(lines);
+  const hits = [];
+  let offset = 0;
+  const outLines = lines.map((line, i) => {
+    if (line.includes("data:image/") || line === "" || rules.length === 0) {
+      offset += line.length + 1;
+      return line;
+    }
+    const lineHits = detectMarkdownLine(line, rules, maskChar, headers.get(i));
+    for (const h of lineHits) hits.push({ ...h, index: h.index + offset });
+    offset += line.length + 1;
+    return applyHits(line, lineHits);
+  });
+  return { text: outLines.join("\n"), hits };
+}
+
+export {
+  DEFAULT_REDACT_RULES,
+  ALL_REDACT_RULES,
+  normalizeForDetect,
+  redactText,
+  mdMarkerRanges,
+  redactMarkdown
+};
+//# sourceMappingURL=chunk-IH56ZISC.js.map