kordoc 4.14.2 → 4.14.4

package/dist/{chunk-EQZI77PP.cjs.map → chunk-QEJUY6SK.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["/Users/chris_gomdori/workspace/kordoc/dist/chunk-EQZI77PP.cjs","../src/pdf/formula/models.ts","../src/shared/offline.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACA;ACMA,gCAA2B;AAC3B,wBAAiC;AACjC,uCAA4C;AAC5C;AACA,wBAAwB;AACxB,4BAA8B;AAC9B,4CAAyB;AACzB,gCAAyB;ADJzB;AACA;AEKA,IAAM,OAAA,kBAAS,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,IAAI,CAAC,CAAA;AAEjD,SAAS,OAAA,CAAQ,IAAA,EAAuB;AACtC,EAAA,MAAM,EAAA,EAAI,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AAC1B,EAAA,OAAO,CAAC,CAAC,EAAA,GAAK,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,IAAA,CAAK,CAAA,CAAE,WAAA,CAAY,CAAC,CAAA;AACjD;AAGO,SAAS,aAAA,CAAA,EAAyB;AACvC,EAAA,OAAO,OAAA,CAAQ,gBAAgB,CAAA;AACjC;AAOO,SAAS,oBAAA,CAAqB,IAAA,EAAc,IAAA,EAAqB;AACtE,EAAA,GAAA,CAAI,CAAC,aAAA,CAAc,CAAA,EAAG,MAAA;AACtB,EAAA,MAAM,IAAI,kCAAA;AAAA,IACR,CAAA,gFAAA,EAAiC,IAAI,CAAA,EAAA;AACvC,EAAA;AACF;AFZ4F;AACA;ACDxD;AAC5B,EAAA;AACI,EAAA;AACL,EAAA;AACG,EAAA;AACA,EAAA;AACV;AAE4C;AACpC,EAAA;AACI,EAAA;AACL,EAAA;AACG,EAAA;AACA,EAAA;AACV;AAE4C;AACpC,EAAA;AACI,EAAA;AACL,EAAA;AACG,EAAA;AACA,EAAA;AACV;AAEwC;AAChC,EAAA;AACI,EAAA;AACL,EAAA;AACG,EAAA;AACA,EAAA;AACV;AAE4D;AAC1D,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACF;AAOqD;AACtB,EAAA;AACI,EAAA;AACH,IAAA;AAC9B,EAAA;AAC2D,EAAA;AAC7D;AAE8C;AACd,EAAA;AAChC;AAa6G;AAC5E,EAAA;AACL,EAAA;AACiB,IAAA;AAC5B,IAAA;AACT,IAAA;AAC4B,MAAA;AACE,MAAA;AAC1B,IAAA;AACG,MAAA;AACX,IAAA;AACa,IAAA;AACoD,MAAA;AAC/D,MAAA;AACF,IAAA;AACI,IAAA;AACyC,MAAA;AACf,MAAA;AACmC,QAAA;AACxD,MAAA;AACO,QAAA;AACV,UAAA;AACA,UAAA;AACQ,UAAA;AACE,UAAA;AAC4D,UAAA;AACvE,QAAA;AACH,MAAA;AACU,IAAA;AACE,MAAA;AACV,QAAA;AACA,QAAA;AACQ,QAAA;AACE,QAAA;AACgD,QAAA;AAC3D,MAAA;AACH,IAAA;AACF,EAAA;AACO,EAAA;AACT;AAGsE;AACH,EAAA;AACnE;AAoBgI;AAC1F,EAAA;AAEV,EAAA;AACiB,IAAA;AAEU,IAAA;AACpC,sBAAA;AACX,QAAA;AACY,QAAA;AACL,QAAA;AACA,QAAA;AACE,QAAA;AACV,MAAA;AACD,MAAA;AACF,IAAA;AAGI,IAAA;AACoB,MAAA;AAChB,IAAA;AAER,IAAA;AAEgD,IAAA;AAClD,EAAA;AACF;AAGuF;AACV,EAAA;AAC7E;AAGsG;AACpE,EAAA;AACI,EAAA;AACK,EAAA;AACU,EAAA;AACe,oBAAA;AAChE,IAAA;AACF,EAAA;AACI,EAAA;AACoB,IAAA;AAChB,EAAA;AAER,EAAA;AACgD,EAAA;AAClD;AAE4F;AACtF,EAAA;AAC4B,IAAA;AACU,IAAA;AAClC,EAAA;AACC,IAAA;AACT,EAAA;AACI,EAAA;AACyC,IAAA;AACzB,IAAA;AACZ,EAAA;AACC,IAAA;AACT,EAAA;AACF;AAMiB;AAEf,EAAA;AACc,IAAA;AACZ,IAAA;AACF,EAAA;AAG6B,EAAA;AACsB,EAAA;AAEhB,EAAA;AACxB,IAAA;AAAA;AAEO,MAAA;AAChB,IAAA;AACD,EAAA;AAC2B,EAAA;AAChB,IAAA;AAC0C,MAAA;AACpD,IAAA;AACF,EAAA;AAEmD,EAAA;AACQ,EAAA;AAC1C,EAAA;AAEoB,EAAA;AACjC,EAAA;AACyF,IAAA;AACzC,IAAA;AAC5B,MAAA;AACP,sBAAA;AACX,QAAA;AACA,QAAA;AACA,QAAA;AACO,QAAA;AACR,MAAA;AACF,IAAA;AACwB,IAAA;AACf,EAAA;AACN,IAAA;AACmB,MAAA;AACf,IAAA;AAER,IAAA;AAC+D,IAAA;AACjE,EAAA;AAEa,kBAAA;AACX,IAAA;AACA,IAAA;AACA,IAAA;AACO,IAAA;AACR,EAAA;AAGG,EAAA;AACA,EAAA;AACkC,IAAA;AAC1B,EAAA;AACN,IAAA;AACmB,MAAA;AACf,IAAA;AAER,IAAA;AACiE,IAAA;AACnE,EAAA;AAE4B,EAAA;AACtB,IAAA;AACmB,MAAA;AACf,IAAA;AAER,IAAA;AACU,IAAA;AAC4D,MAAA;AACtE,IAAA;AACF,EAAA;AAEgC,EAAA;AACnB,kBAAA;AACX,IAAA;AACA,IAAA;AACA,IAAA;AACO,IAAA;AACR,EAAA;AACH;AAEwD;AACzB,EAAA;AACI,EAAA;AACY,EAAA;AACZ,IAAA;AACf,MAAA;AAEhB,IAAA;AACD,EAAA;AACoB,EAAA;AACvB;AD1E4F;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/chris_gomdori/workspace/kordoc/dist/chunk-EQZI77PP.cjs","sourcesContent":[null,"/**\n * 수식 OCR 모델 자동 다운로드 + SHA-256 검증\n *\n * 캐시 위치: `~/.cache/kordoc/models/pix2text/`\n * 총 ~155MB (MFD 44MB + MFR encoder 87MB + MFR decoder 30MB + tokenizer 40KB)\n *\n * HF URL + SHA 는 Docufinder archive/rust-formula-ocr-wip 에서 검증 완료됨.\n * 모델 버전 갱신 시 URL + SHA 를 함께 갱신해야 한다.\n */\n\nimport { createHash } from \"crypto\"\nimport { createReadStream } from \"fs\"\nimport { mkdir, stat, unlink, rename } from \"fs/promises\"\nimport { createWriteStream } from \"fs\"\nimport { homedir } from \"os\"\nimport { join, dirname } from \"path\"\nimport { pipeline } from \"stream/promises\"\nimport { Readable } from \"stream\"\nimport { assertNetworkAllowed } from \"../../shared/offline.js\"\n\nexport interface ModelSpec {\n  name: string\n  filename: string\n  url: string\n  sha256: string\n  sizeMb: number\n}\n\n/** 모델 스펙 (SHA-256 은 실제 다운로드로 검증됨 — 변경 금지) */\nexport const MFD_MODEL: ModelSpec = {\n  name: \"Pix2Text MFD\",\n  filename: \"mfd.onnx\",\n  url: \"https://huggingface.co/breezedeus/pix2text-mfd/resolve/main/mfd-v20240618.onnx\",\n  sha256: \"51a8854743b17ae654729af8db82a630c1ccfa06debf4856c8b28055f87d02c1\",\n  sizeMb: 42,\n}\n\nexport const MFR_ENCODER_MODEL: ModelSpec = {\n  name: \"Pix2Text MFR encoder\",\n  filename: \"encoder_model.onnx\",\n  url: \"https://huggingface.co/breezedeus/pix2text-mfr/resolve/main/encoder_model.onnx\",\n  sha256: \"bd8d5c322792e9ec45793af5569e9748f82a3d728a9e00213dbfc56c1486f37d\",\n  sizeMb: 87,\n}\n\nexport const MFR_DECODER_MODEL: ModelSpec = {\n  name: \"Pix2Text MFR decoder\",\n  filename: \"decoder_model.onnx\",\n  url: \"https://huggingface.co/breezedeus/pix2text-mfr/resolve/main/decoder_model.onnx\",\n  sha256: \"fd0f92d7a012f3dae41e1ac79421aea0ea888b5a66cb3f9a004e424f82f3daed\",\n  sizeMb: 30,\n}\n\nexport const MFR_TOKENIZER: ModelSpec = {\n  name: \"Pix2Text MFR tokenizer\",\n  filename: \"tokenizer.json\",\n  url: \"https://huggingface.co/breezedeus/pix2text-mfr/resolve/main/tokenizer.json\",\n  sha256: \"3e2ab757277d22639bec28c9d7972e352d3d1dba223051fa674002dc5ab64df3\",\n  sizeMb: 1,\n}\n\nexport const ALL_FORMULA_MODELS: ReadonlyArray<ModelSpec> = [\n  MFD_MODEL,\n  MFR_ENCODER_MODEL,\n  MFR_DECODER_MODEL,\n  MFR_TOKENIZER,\n]\n\n/**\n * 모델 캐시 하위 디렉토리 경로. 환경 변수 `KORDOC_MODEL_CACHE` 가 설정되면\n * 해당 경로를 우선 사용, 없으면 `~/.cache/kordoc/models/<subdir>/`.\n * (수식 OCR 외 텍스트 OCR 등 다른 모델군도 공용 — subdir 로 격리)\n */\nexport function getModelsDir(subdir: string): string {\n  const override = process.env.KORDOC_MODEL_CACHE\n  if (override && override.trim()) {\n    return join(override, subdir)\n  }\n  return join(homedir(), \".cache\", \"kordoc\", \"models\", subdir)\n}\n\nexport function getFormulaModelsDir(): string {\n  return getModelsDir(\"pix2text\")\n}\n\nexport interface ModelStatus {\n  spec: ModelSpec\n  localPath: string\n  exists: boolean\n  /** SHA 검증까지 끝났는가 (exists && valid) */\n  verified: boolean\n  /** 검증 실패 시 이유 */\n  invalidReason?: string\n}\n\n/** 지정 모델군의 존재/유효성 상태 반환 (다운로드 없이 확인만) */\nexport async function getModelStatusIn(dir: string, specs: ReadonlyArray<ModelSpec>): Promise<ModelStatus[]> {\n  const result: ModelStatus[] = []\n  for (const spec of specs) {\n    const localPath = join(dir, spec.filename)\n    let exists = false\n    try {\n      const s = await stat(localPath)\n      exists = s.isFile() && s.size > 0\n    } catch {\n      exists = false\n    }\n    if (!exists) {\n      result.push({ spec, localPath, exists: false, verified: false })\n      continue\n    }\n    try {\n      const actual = await sha256OfFile(localPath)\n      if (actual === spec.sha256) {\n        result.push({ spec, localPath, exists: true, verified: true })\n      } else {\n        result.push({\n          spec,\n          localPath,\n          exists: true,\n          verified: false,\n          invalidReason: `SHA256 mismatch: expected ${spec.sha256}, got ${actual}`,\n        })\n      }\n    } catch (e) {\n      result.push({\n        spec,\n        localPath,\n        exists: true,\n        verified: false,\n        invalidReason: `SHA compute failed: ${(e as Error).message}`,\n      })\n    }\n  }\n  return result\n}\n\n/** 모든 수식 모델의 존재/유효성 상태 반환 (다운로드 없이 확인만) */\nexport async function getFormulaModelStatus(): Promise<ModelStatus[]> {\n  return getModelStatusIn(getFormulaModelsDir(), ALL_FORMULA_MODELS)\n}\n\nexport interface DownloadProgress {\n  spec: ModelSpec\n  /** 현재까지 다운로드한 바이트 */\n  downloaded: number\n  /** 전체 바이트 (알 수 있으면) */\n  total: number | null\n  /** \"download\" | \"verify\" | \"done\" | \"skip\" */\n  phase: \"download\" | \"verify\" | \"done\" | \"skip\" | \"error\"\n  message?: string\n}\n\nexport type ProgressHandler = (p: DownloadProgress) => void\n\n/**\n * 지정 모델군을 다운로드/검증한다.\n * - 이미 있고 SHA 일치 → skip\n * - 없음 → 다운로드 후 SHA 검증. 실패 시 파일 삭제.\n */\nexport async function ensureModelsIn(dir: string, specs: ReadonlyArray<ModelSpec>, onProgress?: ProgressHandler): Promise<void> {\n  await mkdir(dir, { recursive: true })\n\n  for (const spec of specs) {\n    const localPath = join(dir, spec.filename)\n\n    if (await isExistingValid(localPath, spec.sha256)) {\n      onProgress?.({\n        spec,\n        downloaded: 0,\n        total: null,\n        phase: \"skip\",\n        message: \"이미 존재 + SHA 일치\",\n      })\n      continue\n    }\n\n    // 기존 파일 있지만 SHA 불일치 → 삭제\n    try {\n      await unlink(localPath)\n    } catch {\n      // 없을 수 있음\n    }\n\n    await downloadToFile(spec, localPath, onProgress)\n  }\n}\n\n/** 필요한 모든 수식 모델을 다운로드/검증한다. */\nexport async function ensureFormulaModels(onProgress?: ProgressHandler): Promise<void> {\n  return ensureModelsIn(getFormulaModelsDir(), ALL_FORMULA_MODELS, onProgress)\n}\n\n/** 단일 모델만 확인/다운로드 (진단 UI 에서 개별 상태 새로고침용) */\nexport async function ensureSingleModel(spec: ModelSpec, onProgress?: ProgressHandler): Promise<void> {\n  const dir = getFormulaModelsDir()\n  await mkdir(dir, { recursive: true })\n  const localPath = join(dir, spec.filename)\n  if (await isExistingValid(localPath, spec.sha256)) {\n    onProgress?.({ spec, downloaded: 0, total: null, phase: \"skip\" })\n    return\n  }\n  try {\n    await unlink(localPath)\n  } catch {\n    // 재다운로드 전 손상/잔존 파일 정리 best-effort — 애초에 없으면 실패해도 무방\n  }\n  await downloadToFile(spec, localPath, onProgress)\n}\n\nasync function isExistingValid(localPath: string, sha256Expected: string): Promise<boolean> {\n  try {\n    const s = await stat(localPath)\n    if (!s.isFile() || s.size === 0) return false\n  } catch {\n    return false\n  }\n  try {\n    const actual = await sha256OfFile(localPath)\n    return actual === sha256Expected\n  } catch {\n    return false\n  }\n}\n\nasync function downloadToFile(\n  spec: ModelSpec,\n  localPath: string,\n  onProgress?: ProgressHandler,\n): Promise<void> {\n  // 폐쇄망 모드에서는 요청 자체를 보내지 않는다 (사이드로드 안내로 대체)\n  assertNetworkAllowed(\n    `${spec.name} 모델 다운로드`,\n    \"온라인 PC에서 `kordoc models --export <디렉토리>` 로 내보낸 뒤 이 PC에서 `kordoc models --import <디렉토리>` 하거나, KORDOC_MODEL_CACHE 로 모델 캐시 경로를 지정하세요\",\n  )\n\n  // 먼저 .part 로 받고 검증 후 rename — 중단된 다운로드가 \"정상 파일\"로 오인되는 걸 방지\n  const partPath = `${localPath}.part`\n  await mkdir(dirname(localPath), { recursive: true })\n\n  const resp = await fetch(spec.url, {\n    headers: {\n      // HF CDN 은 UA 없으면 가끔 403 을 뱉는다\n      \"User-Agent\": \"kordoc-formula-ocr/1.0 (+https://github.com/chrisryugj/kordoc)\",\n    },\n  })\n  if (!resp.ok || !resp.body) {\n    throw new Error(\n      `${spec.name} 다운로드 실패: HTTP ${resp.status} ${resp.statusText} (${spec.url})`,\n    )\n  }\n\n  const lenHeader = resp.headers.get(\"content-length\")\n  const total = lenHeader ? Number.parseInt(lenHeader, 10) : null\n  let downloaded = 0\n\n  const ws = createWriteStream(partPath)\n  try {\n    const reader = Readable.fromWeb(resp.body as unknown as import(\"stream/web\").ReadableStream)\n    reader.on(\"data\", (chunk: Buffer | Uint8Array) => {\n      downloaded += chunk.length\n      onProgress?.({\n        spec,\n        downloaded,\n        total,\n        phase: \"download\",\n      })\n    })\n    await pipeline(reader, ws)\n  } catch (e) {\n    try {\n      await unlink(partPath)\n    } catch {\n      // .part 임시파일 정리 best-effort — 본 에러(스트리밍 실패)를 가리지 않도록 무시\n    }\n    throw new Error(`${spec.name} 스트리밍 실패: ${(e as Error).message}`)\n  }\n\n  onProgress?.({\n    spec,\n    downloaded,\n    total,\n    phase: \"verify\",\n  })\n\n  // SHA 검증\n  let actual: string\n  try {\n    actual = await sha256OfFile(partPath)\n  } catch (e) {\n    try {\n      await unlink(partPath)\n    } catch {\n      // .part 임시파일 정리 best-effort — 본 에러(SHA 계산 실패)를 가리지 않도록 무시\n    }\n    throw new Error(`${spec.name} SHA 계산 실패: ${(e as Error).message}`)\n  }\n\n  if (actual !== spec.sha256) {\n    try {\n      await unlink(partPath)\n    } catch {\n      // 오염된 .part 정리 best-effort — 본 에러(SHA mismatch)를 가리지 않도록 무시\n    }\n    throw new Error(\n      `${spec.name} SHA256 mismatch: expected ${spec.sha256}, got ${actual} — 모델 URL 이 오염되었거나 전송 중 손상되었습니다.`,\n    )\n  }\n\n  await rename(partPath, localPath)\n  onProgress?.({\n    spec,\n    downloaded,\n    total,\n    phase: \"done\",\n  })\n}\n\nasync function sha256OfFile(p: string): Promise<string> {\n  const h = createHash(\"sha256\")\n  const stream = createReadStream(p)\n  await pipeline(stream, async function* (src) {\n    for await (const chunk of src) {\n      h.update(chunk)\n      // yield 안 함 (소비만)\n    }\n  })\n  return h.digest(\"hex\")\n}\n","/**\n * 폐쇄망(내부망) 배포용 아웃바운드 통신 킬스위치 + 파일 접근 루트 제한.\n *\n * kordoc 자체는 문서 파서라 상시 외부 통신이 없지만, 두 경로만 나간다:\n *   1. OCR/수식 모델 최초 1회 다운로드 (huggingface.co)\n *   2. `kordoc watch --webhook` 사용자가 명시한 URL\n *\n * `KORDOC_OFFLINE=1` 이면 위 경로를 **시도 전에** 차단한다. 보안성 검토에서\n * \"외부 통신 없음\"을 런타임으로 증명하기 위한 단일 관문 — 새 아웃바운드 경로를\n * 추가하면 반드시 `assertNetworkAllowed()` 를 먼저 통과시킬 것.\n *\n * `KORDOC_ROOT` 는 파일 접근을 특정 디렉토리 하위로 제한한다(미설정 시 제한 없음 —\n * 기존 동작 보존). 내부망 배포에서는 두 변수를 함께 고정하는 것을 권장.\n */\n\nimport { realpathSync } from \"fs\"\nimport { isAbsolute, relative, resolve, sep } from \"path\"\nimport { KordocError } from \"../utils.js\"\n\nconst TRUTHY = new Set([\"1\", \"true\", \"yes\", \"on\"])\n\nfunction envFlag(name: string): boolean {\n  const v = process.env[name]\n  return !!v && TRUTHY.has(v.trim().toLowerCase())\n}\n\n/** 폐쇄망 모드 여부 (`KORDOC_OFFLINE=1|true|yes|on`) */\nexport function isOfflineMode(): boolean {\n  return envFlag(\"KORDOC_OFFLINE\")\n}\n\n/**\n * 아웃바운드 통신 관문. 폐쇄망 모드면 요청을 보내기 전에 예외로 끊는다.\n * @param what 차단 대상 설명 (사용자에게 노출됨 — 호스트/URL 은 넣지 말 것)\n * @param hint 대안 안내 (오프라인 사이드로드 방법 등)\n */\nexport function assertNetworkAllowed(what: string, hint?: string): void {\n  if (!isOfflineMode()) return\n  throw new KordocError(\n    `폐쇄망 모드(KORDOC_OFFLINE)에서 차단됨: ${what}` + (hint ? ` — ${hint}` : \"\"),\n  )\n}\n\n/** 파일 접근 루트 (`KORDOC_ROOT`). 미설정이면 null = 제한 없음 */\nexport function getAccessRoot(): string | null {\n  const raw = process.env.KORDOC_ROOT\n  if (!raw || !raw.trim()) return null\n  const resolved = resolve(raw.trim())\n  try {\n    return realpathSync(resolved)\n  } catch {\n    // 루트가 실재하지 않으면 모든 접근이 막히는 게 안전한 기본값\n    return resolved\n  }\n}\n\n/** 경로가 루트 하위인지 (루트 자신 포함). 경계 문자열 매칭이 아닌 세그먼트 단위 비교 */\nexport function isWithinRoot(realPath: string, root: string): boolean {\n  if (realPath === root) return true\n  const rel = relative(root, realPath)\n  return rel !== \"\" && !rel.startsWith(\"..\") && !isAbsolute(rel) && !rel.startsWith(`..${sep}`)\n}\n\n/**\n * `KORDOC_ROOT` 가 설정된 경우 경로가 루트 하위인지 검증한다.\n * 인자는 이미 realpath 로 해석된 절대경로여야 한다 (심볼릭 링크 탈출 방지).\n */\nexport function assertWithinRoot(realPath: string): void {\n  const root = getAccessRoot()\n  if (!root) return\n  if (!isWithinRoot(realPath, root)) {\n    throw new KordocError(`허용된 작업 디렉토리(KORDOC_ROOT) 밖의 경로입니다: ${realPath}`)\n  }\n}\n"]}
+{"version":3,"sources":["/Users/chris_gomdori/workspace/kordoc/dist/chunk-QEJUY6SK.cjs","../src/pdf/formula/models.ts","../src/shared/offline.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACA;ACMA,gCAA2B;AAC3B,wBAAiC;AACjC,uCAA4C;AAC5C;AACA,wBAAwB;AACxB,4BAA8B;AAC9B,4CAAyB;AACzB,gCAAyB;ADJzB;AACA;AEKA,IAAM,OAAA,kBAAS,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,IAAI,CAAC,CAAA;AAEjD,SAAS,OAAA,CAAQ,IAAA,EAAuB;AACtC,EAAA,MAAM,EAAA,EAAI,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AAC1B,EAAA,OAAO,CAAC,CAAC,EAAA,GAAK,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,IAAA,CAAK,CAAA,CAAE,WAAA,CAAY,CAAC,CAAA;AACjD;AAGO,SAAS,aAAA,CAAA,EAAyB;AACvC,EAAA,OAAO,OAAA,CAAQ,gBAAgB,CAAA;AACjC;AAOO,SAAS,oBAAA,CAAqB,IAAA,EAAc,IAAA,EAAqB;AACtE,EAAA,GAAA,CAAI,CAAC,aAAA,CAAc,CAAA,EAAG,MAAA;AACtB,EAAA,MAAM,IAAI,kCAAA;AAAA,IACR,CAAA,gFAAA,EAAiC,IAAI,CAAA,EAAA;AACvC,EAAA;AACF;AFZ4F;AACA;ACDxD;AAC5B,EAAA;AACI,EAAA;AACL,EAAA;AACG,EAAA;AACA,EAAA;AACV;AAE4C;AACpC,EAAA;AACI,EAAA;AACL,EAAA;AACG,EAAA;AACA,EAAA;AACV;AAE4C;AACpC,EAAA;AACI,EAAA;AACL,EAAA;AACG,EAAA;AACA,EAAA;AACV;AAEwC;AAChC,EAAA;AACI,EAAA;AACL,EAAA;AACG,EAAA;AACA,EAAA;AACV;AAE4D;AAC1D,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACF;AAOqD;AACtB,EAAA;AACI,EAAA;AACH,IAAA;AAC9B,EAAA;AAC2D,EAAA;AAC7D;AAE8C;AACd,EAAA;AAChC;AAa6G;AAC5E,EAAA;AACL,EAAA;AACiB,IAAA;AAC5B,IAAA;AACT,IAAA;AAC4B,MAAA;AACE,MAAA;AAC1B,IAAA;AACG,MAAA;AACX,IAAA;AACa,IAAA;AACoD,MAAA;AAC/D,MAAA;AACF,IAAA;AACI,IAAA;AACyC,MAAA;AACf,MAAA;AACmC,QAAA;AACxD,MAAA;AACO,QAAA;AACV,UAAA;AACA,UAAA;AACQ,UAAA;AACE,UAAA;AAC4D,UAAA;AACvE,QAAA;AACH,MAAA;AACU,IAAA;AACE,MAAA;AACV,QAAA;AACA,QAAA;AACQ,QAAA;AACE,QAAA;AACgD,QAAA;AAC3D,MAAA;AACH,IAAA;AACF,EAAA;AACO,EAAA;AACT;AAGsE;AACH,EAAA;AACnE;AAoBgI;AAC1F,EAAA;AAEV,EAAA;AACiB,IAAA;AAEU,IAAA;AACpC,sBAAA;AACX,QAAA;AACY,QAAA;AACL,QAAA;AACA,QAAA;AACE,QAAA;AACV,MAAA;AACD,MAAA;AACF,IAAA;AAGI,IAAA;AACoB,MAAA;AAChB,IAAA;AAER,IAAA;AAEgD,IAAA;AAClD,EAAA;AACF;AAGuF;AACV,EAAA;AAC7E;AAGsG;AACpE,EAAA;AACI,EAAA;AACK,EAAA;AACU,EAAA;AACe,oBAAA;AAChE,IAAA;AACF,EAAA;AACI,EAAA;AACoB,IAAA;AAChB,EAAA;AAER,EAAA;AACgD,EAAA;AAClD;AAE4F;AACtF,EAAA;AAC4B,IAAA;AACU,IAAA;AAClC,EAAA;AACC,IAAA;AACT,EAAA;AACI,EAAA;AACyC,IAAA;AACzB,IAAA;AACZ,EAAA;AACC,IAAA;AACT,EAAA;AACF;AAMiB;AAEf,EAAA;AACc,IAAA;AACZ,IAAA;AACF,EAAA;AAG6B,EAAA;AACsB,EAAA;AAEhB,EAAA;AACxB,IAAA;AAAA;AAEO,MAAA;AAChB,IAAA;AACD,EAAA;AAC2B,EAAA;AAChB,IAAA;AAC0C,MAAA;AACpD,IAAA;AACF,EAAA;AAEmD,EAAA;AACQ,EAAA;AAC1C,EAAA;AAEoB,EAAA;AACjC,EAAA;AACyF,IAAA;AACzC,IAAA;AAC5B,MAAA;AACP,sBAAA;AACX,QAAA;AACA,QAAA;AACA,QAAA;AACO,QAAA;AACR,MAAA;AACF,IAAA;AACwB,IAAA;AACf,EAAA;AACN,IAAA;AACmB,MAAA;AACf,IAAA;AAER,IAAA;AAC+D,IAAA;AACjE,EAAA;AAEa,kBAAA;AACX,IAAA;AACA,IAAA;AACA,IAAA;AACO,IAAA;AACR,EAAA;AAGG,EAAA;AACA,EAAA;AACkC,IAAA;AAC1B,EAAA;AACN,IAAA;AACmB,MAAA;AACf,IAAA;AAER,IAAA;AACiE,IAAA;AACnE,EAAA;AAE4B,EAAA;AACtB,IAAA;AACmB,MAAA;AACf,IAAA;AAER,IAAA;AACU,IAAA;AAC4D,MAAA;AACtE,IAAA;AACF,EAAA;AAEgC,EAAA;AACnB,kBAAA;AACX,IAAA;AACA,IAAA;AACA,IAAA;AACO,IAAA;AACR,EAAA;AACH;AAEwD;AACzB,EAAA;AACI,EAAA;AACY,EAAA;AACZ,IAAA;AACf,MAAA;AAEhB,IAAA;AACD,EAAA;AACoB,EAAA;AACvB;AD1E4F;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/chris_gomdori/workspace/kordoc/dist/chunk-QEJUY6SK.cjs","sourcesContent":[null,"/**\n * 수식 OCR 모델 자동 다운로드 + SHA-256 검증\n *\n * 캐시 위치: `~/.cache/kordoc/models/pix2text/`\n * 총 ~155MB (MFD 44MB + MFR encoder 87MB + MFR decoder 30MB + tokenizer 40KB)\n *\n * HF URL + SHA 는 Docufinder archive/rust-formula-ocr-wip 에서 검증 완료됨.\n * 모델 버전 갱신 시 URL + SHA 를 함께 갱신해야 한다.\n */\n\nimport { createHash } from \"crypto\"\nimport { createReadStream } from \"fs\"\nimport { mkdir, stat, unlink, rename } from \"fs/promises\"\nimport { createWriteStream } from \"fs\"\nimport { homedir } from \"os\"\nimport { join, dirname } from \"path\"\nimport { pipeline } from \"stream/promises\"\nimport { Readable } from \"stream\"\nimport { assertNetworkAllowed } from \"../../shared/offline.js\"\n\nexport interface ModelSpec {\n  name: string\n  filename: string\n  url: string\n  sha256: string\n  sizeMb: number\n}\n\n/** 모델 스펙 (SHA-256 은 실제 다운로드로 검증됨 — 변경 금지) */\nexport const MFD_MODEL: ModelSpec = {\n  name: \"Pix2Text MFD\",\n  filename: \"mfd.onnx\",\n  url: \"https://huggingface.co/breezedeus/pix2text-mfd/resolve/main/mfd-v20240618.onnx\",\n  sha256: \"51a8854743b17ae654729af8db82a630c1ccfa06debf4856c8b28055f87d02c1\",\n  sizeMb: 42,\n}\n\nexport const MFR_ENCODER_MODEL: ModelSpec = {\n  name: \"Pix2Text MFR encoder\",\n  filename: \"encoder_model.onnx\",\n  url: \"https://huggingface.co/breezedeus/pix2text-mfr/resolve/main/encoder_model.onnx\",\n  sha256: \"bd8d5c322792e9ec45793af5569e9748f82a3d728a9e00213dbfc56c1486f37d\",\n  sizeMb: 87,\n}\n\nexport const MFR_DECODER_MODEL: ModelSpec = {\n  name: \"Pix2Text MFR decoder\",\n  filename: \"decoder_model.onnx\",\n  url: \"https://huggingface.co/breezedeus/pix2text-mfr/resolve/main/decoder_model.onnx\",\n  sha256: \"fd0f92d7a012f3dae41e1ac79421aea0ea888b5a66cb3f9a004e424f82f3daed\",\n  sizeMb: 30,\n}\n\nexport const MFR_TOKENIZER: ModelSpec = {\n  name: \"Pix2Text MFR tokenizer\",\n  filename: \"tokenizer.json\",\n  url: \"https://huggingface.co/breezedeus/pix2text-mfr/resolve/main/tokenizer.json\",\n  sha256: \"3e2ab757277d22639bec28c9d7972e352d3d1dba223051fa674002dc5ab64df3\",\n  sizeMb: 1,\n}\n\nexport const ALL_FORMULA_MODELS: ReadonlyArray<ModelSpec> = [\n  MFD_MODEL,\n  MFR_ENCODER_MODEL,\n  MFR_DECODER_MODEL,\n  MFR_TOKENIZER,\n]\n\n/**\n * 모델 캐시 하위 디렉토리 경로. 환경 변수 `KORDOC_MODEL_CACHE` 가 설정되면\n * 해당 경로를 우선 사용, 없으면 `~/.cache/kordoc/models/<subdir>/`.\n * (수식 OCR 외 텍스트 OCR 등 다른 모델군도 공용 — subdir 로 격리)\n */\nexport function getModelsDir(subdir: string): string {\n  const override = process.env.KORDOC_MODEL_CACHE\n  if (override && override.trim()) {\n    return join(override, subdir)\n  }\n  return join(homedir(), \".cache\", \"kordoc\", \"models\", subdir)\n}\n\nexport function getFormulaModelsDir(): string {\n  return getModelsDir(\"pix2text\")\n}\n\nexport interface ModelStatus {\n  spec: ModelSpec\n  localPath: string\n  exists: boolean\n  /** SHA 검증까지 끝났는가 (exists && valid) */\n  verified: boolean\n  /** 검증 실패 시 이유 */\n  invalidReason?: string\n}\n\n/** 지정 모델군의 존재/유효성 상태 반환 (다운로드 없이 확인만) */\nexport async function getModelStatusIn(dir: string, specs: ReadonlyArray<ModelSpec>): Promise<ModelStatus[]> {\n  const result: ModelStatus[] = []\n  for (const spec of specs) {\n    const localPath = join(dir, spec.filename)\n    let exists = false\n    try {\n      const s = await stat(localPath)\n      exists = s.isFile() && s.size > 0\n    } catch {\n      exists = false\n    }\n    if (!exists) {\n      result.push({ spec, localPath, exists: false, verified: false })\n      continue\n    }\n    try {\n      const actual = await sha256OfFile(localPath)\n      if (actual === spec.sha256) {\n        result.push({ spec, localPath, exists: true, verified: true })\n      } else {\n        result.push({\n          spec,\n          localPath,\n          exists: true,\n          verified: false,\n          invalidReason: `SHA256 mismatch: expected ${spec.sha256}, got ${actual}`,\n        })\n      }\n    } catch (e) {\n      result.push({\n        spec,\n        localPath,\n        exists: true,\n        verified: false,\n        invalidReason: `SHA compute failed: ${(e as Error).message}`,\n      })\n    }\n  }\n  return result\n}\n\n/** 모든 수식 모델의 존재/유효성 상태 반환 (다운로드 없이 확인만) */\nexport async function getFormulaModelStatus(): Promise<ModelStatus[]> {\n  return getModelStatusIn(getFormulaModelsDir(), ALL_FORMULA_MODELS)\n}\n\nexport interface DownloadProgress {\n  spec: ModelSpec\n  /** 현재까지 다운로드한 바이트 */\n  downloaded: number\n  /** 전체 바이트 (알 수 있으면) */\n  total: number | null\n  /** \"download\" | \"verify\" | \"done\" | \"skip\" */\n  phase: \"download\" | \"verify\" | \"done\" | \"skip\" | \"error\"\n  message?: string\n}\n\nexport type ProgressHandler = (p: DownloadProgress) => void\n\n/**\n * 지정 모델군을 다운로드/검증한다.\n * - 이미 있고 SHA 일치 → skip\n * - 없음 → 다운로드 후 SHA 검증. 실패 시 파일 삭제.\n */\nexport async function ensureModelsIn(dir: string, specs: ReadonlyArray<ModelSpec>, onProgress?: ProgressHandler): Promise<void> {\n  await mkdir(dir, { recursive: true })\n\n  for (const spec of specs) {\n    const localPath = join(dir, spec.filename)\n\n    if (await isExistingValid(localPath, spec.sha256)) {\n      onProgress?.({\n        spec,\n        downloaded: 0,\n        total: null,\n        phase: \"skip\",\n        message: \"이미 존재 + SHA 일치\",\n      })\n      continue\n    }\n\n    // 기존 파일 있지만 SHA 불일치 → 삭제\n    try {\n      await unlink(localPath)\n    } catch {\n      // 없을 수 있음\n    }\n\n    await downloadToFile(spec, localPath, onProgress)\n  }\n}\n\n/** 필요한 모든 수식 모델을 다운로드/검증한다. */\nexport async function ensureFormulaModels(onProgress?: ProgressHandler): Promise<void> {\n  return ensureModelsIn(getFormulaModelsDir(), ALL_FORMULA_MODELS, onProgress)\n}\n\n/** 단일 모델만 확인/다운로드 (진단 UI 에서 개별 상태 새로고침용) */\nexport async function ensureSingleModel(spec: ModelSpec, onProgress?: ProgressHandler): Promise<void> {\n  const dir = getFormulaModelsDir()\n  await mkdir(dir, { recursive: true })\n  const localPath = join(dir, spec.filename)\n  if (await isExistingValid(localPath, spec.sha256)) {\n    onProgress?.({ spec, downloaded: 0, total: null, phase: \"skip\" })\n    return\n  }\n  try {\n    await unlink(localPath)\n  } catch {\n    // 재다운로드 전 손상/잔존 파일 정리 best-effort — 애초에 없으면 실패해도 무방\n  }\n  await downloadToFile(spec, localPath, onProgress)\n}\n\nasync function isExistingValid(localPath: string, sha256Expected: string): Promise<boolean> {\n  try {\n    const s = await stat(localPath)\n    if (!s.isFile() || s.size === 0) return false\n  } catch {\n    return false\n  }\n  try {\n    const actual = await sha256OfFile(localPath)\n    return actual === sha256Expected\n  } catch {\n    return false\n  }\n}\n\nasync function downloadToFile(\n  spec: ModelSpec,\n  localPath: string,\n  onProgress?: ProgressHandler,\n): Promise<void> {\n  // 폐쇄망 모드에서는 요청 자체를 보내지 않는다 (사이드로드 안내로 대체)\n  assertNetworkAllowed(\n    `${spec.name} 모델 다운로드`,\n    \"온라인 PC에서 `kordoc models --export <디렉토리>` 로 내보낸 뒤 이 PC에서 `kordoc models --import <디렉토리>` 하거나, KORDOC_MODEL_CACHE 로 모델 캐시 경로를 지정하세요\",\n  )\n\n  // 먼저 .part 로 받고 검증 후 rename — 중단된 다운로드가 \"정상 파일\"로 오인되는 걸 방지\n  const partPath = `${localPath}.part`\n  await mkdir(dirname(localPath), { recursive: true })\n\n  const resp = await fetch(spec.url, {\n    headers: {\n      // HF CDN 은 UA 없으면 가끔 403 을 뱉는다\n      \"User-Agent\": \"kordoc-formula-ocr/1.0 (+https://github.com/chrisryugj/kordoc)\",\n    },\n  })\n  if (!resp.ok || !resp.body) {\n    throw new Error(\n      `${spec.name} 다운로드 실패: HTTP ${resp.status} ${resp.statusText} (${spec.url})`,\n    )\n  }\n\n  const lenHeader = resp.headers.get(\"content-length\")\n  const total = lenHeader ? Number.parseInt(lenHeader, 10) : null\n  let downloaded = 0\n\n  const ws = createWriteStream(partPath)\n  try {\n    const reader = Readable.fromWeb(resp.body as unknown as import(\"stream/web\").ReadableStream)\n    reader.on(\"data\", (chunk: Buffer | Uint8Array) => {\n      downloaded += chunk.length\n      onProgress?.({\n        spec,\n        downloaded,\n        total,\n        phase: \"download\",\n      })\n    })\n    await pipeline(reader, ws)\n  } catch (e) {\n    try {\n      await unlink(partPath)\n    } catch {\n      // .part 임시파일 정리 best-effort — 본 에러(스트리밍 실패)를 가리지 않도록 무시\n    }\n    throw new Error(`${spec.name} 스트리밍 실패: ${(e as Error).message}`)\n  }\n\n  onProgress?.({\n    spec,\n    downloaded,\n    total,\n    phase: \"verify\",\n  })\n\n  // SHA 검증\n  let actual: string\n  try {\n    actual = await sha256OfFile(partPath)\n  } catch (e) {\n    try {\n      await unlink(partPath)\n    } catch {\n      // .part 임시파일 정리 best-effort — 본 에러(SHA 계산 실패)를 가리지 않도록 무시\n    }\n    throw new Error(`${spec.name} SHA 계산 실패: ${(e as Error).message}`)\n  }\n\n  if (actual !== spec.sha256) {\n    try {\n      await unlink(partPath)\n    } catch {\n      // 오염된 .part 정리 best-effort — 본 에러(SHA mismatch)를 가리지 않도록 무시\n    }\n    throw new Error(\n      `${spec.name} SHA256 mismatch: expected ${spec.sha256}, got ${actual} — 모델 URL 이 오염되었거나 전송 중 손상되었습니다.`,\n    )\n  }\n\n  await rename(partPath, localPath)\n  onProgress?.({\n    spec,\n    downloaded,\n    total,\n    phase: \"done\",\n  })\n}\n\nasync function sha256OfFile(p: string): Promise<string> {\n  const h = createHash(\"sha256\")\n  const stream = createReadStream(p)\n  await pipeline(stream, async function* (src) {\n    for await (const chunk of src) {\n      h.update(chunk)\n      // yield 안 함 (소비만)\n    }\n  })\n  return h.digest(\"hex\")\n}\n","/**\n * 폐쇄망(내부망) 배포용 아웃바운드 통신 킬스위치 + 파일 접근 루트 제한.\n *\n * kordoc 자체는 문서 파서라 상시 외부 통신이 없지만, 두 경로만 나간다:\n *   1. OCR/수식 모델 최초 1회 다운로드 (huggingface.co)\n *   2. `kordoc watch --webhook` 사용자가 명시한 URL\n *\n * `KORDOC_OFFLINE=1` 이면 위 경로를 **시도 전에** 차단한다. 보안성 검토에서\n * \"외부 통신 없음\"을 런타임으로 증명하기 위한 단일 관문 — 새 아웃바운드 경로를\n * 추가하면 반드시 `assertNetworkAllowed()` 를 먼저 통과시킬 것.\n *\n * `KORDOC_ROOT` 는 파일 접근을 특정 디렉토리 하위로 제한한다(미설정 시 제한 없음 —\n * 기존 동작 보존). 내부망 배포에서는 두 변수를 함께 고정하는 것을 권장.\n */\n\nimport { realpathSync } from \"fs\"\nimport { isAbsolute, relative, resolve, sep } from \"path\"\nimport { KordocError } from \"../utils.js\"\n\nconst TRUTHY = new Set([\"1\", \"true\", \"yes\", \"on\"])\n\nfunction envFlag(name: string): boolean {\n  const v = process.env[name]\n  return !!v && TRUTHY.has(v.trim().toLowerCase())\n}\n\n/** 폐쇄망 모드 여부 (`KORDOC_OFFLINE=1|true|yes|on`) */\nexport function isOfflineMode(): boolean {\n  return envFlag(\"KORDOC_OFFLINE\")\n}\n\n/**\n * 아웃바운드 통신 관문. 폐쇄망 모드면 요청을 보내기 전에 예외로 끊는다.\n * @param what 차단 대상 설명 (사용자에게 노출됨 — 호스트/URL 은 넣지 말 것)\n * @param hint 대안 안내 (오프라인 사이드로드 방법 등)\n */\nexport function assertNetworkAllowed(what: string, hint?: string): void {\n  if (!isOfflineMode()) return\n  throw new KordocError(\n    `폐쇄망 모드(KORDOC_OFFLINE)에서 차단됨: ${what}` + (hint ? ` — ${hint}` : \"\"),\n  )\n}\n\n/** 파일 접근 루트 (`KORDOC_ROOT`). 미설정이면 null = 제한 없음 */\nexport function getAccessRoot(): string | null {\n  const raw = process.env.KORDOC_ROOT\n  if (!raw || !raw.trim()) return null\n  const resolved = resolve(raw.trim())\n  try {\n    return realpathSync(resolved)\n  } catch {\n    // 루트가 실재하지 않으면 모든 접근이 막히는 게 안전한 기본값\n    return resolved\n  }\n}\n\n/** 경로가 루트 하위인지 (루트 자신 포함). 경계 문자열 매칭이 아닌 세그먼트 단위 비교 */\nexport function isWithinRoot(realPath: string, root: string): boolean {\n  if (realPath === root) return true\n  const rel = relative(root, realPath)\n  return rel !== \"\" && !rel.startsWith(\"..\") && !isAbsolute(rel) && !rel.startsWith(`..${sep}`)\n}\n\n/**\n * `KORDOC_ROOT` 가 설정된 경우 경로가 루트 하위인지 검증한다.\n * 인자는 이미 realpath 로 해석된 절대경로여야 한다 (심볼릭 링크 탈출 방지).\n */\nexport function assertWithinRoot(realPath: string): void {\n  const root = getAccessRoot()\n  if (!root) return\n  if (!isWithinRoot(realPath, root)) {\n    throw new KordocError(`허용된 작업 디렉토리(KORDOC_ROOT) 밖의 경로입니다: ${realPath}`)\n  }\n}\n"]}

package/dist/{chunk-VQ5W4MYO.js → chunk-QIF2VXBQ.js}

@@ -1,6 +1,237 @@
 import {
   sanitizeHref
-} from "./chunk-JQEFP45L.js";
+} from "./chunk-GUJ4Q73I.js";
+
+// src/shared/symbol-fonts.ts
+var WINGDINGS = [
+  "\u{1F589}",
+  "\u2702",
+  "\u2701",
+  "\u{1F453}",
+  "\u{1F56D}",
+  "\u{1F56E}",
+  "\u{1F56F}",
+  "\u{1F57F}",
+  "\u2706",
+  "\u{1F582}",
+  "\u{1F583}",
+  "\u{1F4EA}",
+  "\u{1F4EB}",
+  "\u{1F4EC}",
+  "\u{1F4ED}",
+  "\u{1F4C1}",
+  "\u{1F4C2}",
+  "\u{1F4C4}",
+  "\u{1F5CF}",
+  "\u{1F5D0}",
+  "\u{1F5C4}",
+  "\u231B",
+  "\u{1F5AE}",
+  "\u{1F5B0}",
+  "\u{1F5B2}",
+  "\u{1F5B3}",
+  "\u{1F5B4}",
+  "\u{1F5AB}",
+  "\u{1F5AC}",
+  "\u2707",
+  "\u270D",
+  "\u{1F58E}",
+  "\u270C",
+  "\u{1F44C}",
+  "\u{1F44D}",
+  "\u{1F44E}",
+  "\u261C",
+  "\u261E",
+  "\u261D",
+  "\u261F",
+  "\u{1F590}",
+  "\u263A",
+  "\u{1F610}",
+  "\u2639",
+  "\u{1F4A3}",
+  "\u2620",
+  "\u{1F3F3}",
+  "\u{1F3F1}",
+  "\u2708",
+  "\u263C",
+  "\u{1F4A7}",
+  "\u2744",
+  "\u{1F546}",
+  "\u271E",
+  "\u{1F548}",
+  "\u2720",
+  "\u2721",
+  "\u262A",
+  "\u262F",
+  "\u0950",
+  "\u2638",
+  "\u2648",
+  "\u2649",
+  "\u264A",
+  "\u264B",
+  "\u264C",
+  "\u264D",
+  "\u264E",
+  "\u264F",
+  "\u2650",
+  "\u2651",
+  "\u2652",
+  "\u2653",
+  "\u{1F670}",
+  "\u{1F675}",
+  "\u25CF",
+  "\u25CB",
+  "\u25A0",
+  "\u25A1",
+  "\u25A1",
+  "\u2751",
+  "\u2752",
+  "\u2B27",
+  "\u29EB",
+  "\u25C6",
+  "\u2756",
+  "\u2B25",
+  "\u2327",
+  "\u2BB9",
+  "\u2318",
+  "\u{1F3F5}",
+  "\u{1F3F6}",
+  "\u{1F676}",
+  "\u{1F677}",
+  "",
+  "\u24EA",
+  "\u2460",
+  "\u2461",
+  "\u2462",
+  "\u2463",
+  "\u2464",
+  "\u2465",
+  "\u2466",
+  "\u2467",
+  "\u2468",
+  "\u2469",
+  "\u24FF",
+  "\u2776",
+  "\u2777",
+  "\u2778",
+  "\u2779",
+  "\u277A",
+  "\u277B",
+  "\u277C",
+  "\u277D",
+  "\u277E",
+  "\u277F",
+  "\u{1F662}",
+  "\u{1F660}",
+  "\u{1F661}",
+  "\u{1F663}",
+  "\u{1F65E}",
+  "\u{1F65C}",
+  "\u{1F65D}",
+  "\u{1F65F}",
+  "\xB7",
+  "\u2022",
+  "\u25AA",
+  "\u26AA",
+  "\u25CB",
+  "\u25EF",
+  "\u25C9",
+  "\u25CE",
+  "\u{1F53F}",
+  "\u25AA",
+  "\u25FB",
+  "\u{1F7C2}",
+  "\u2726",
+  "\u2605",
+  "\u2736",
+  "\u2734",
+  "\u2739",
+  "\u2735",
+  "\u2BD0",
+  "\u2316",
+  "\u27E1",
+  "\u2311",
+  "\u2BD1",
+  "\u272A",
+  "\u2730",
+  "\u{1F550}",
+  "\u{1F551}",
+  "\u{1F552}",
+  "\u{1F553}",
+  "\u{1F554}",
+  "\u{1F555}",
+  "\u{1F556}",
+  "\u{1F557}",
+  "\u{1F558}",
+  "\u{1F559}",
+  "\u{1F55A}",
+  "\u{1F55B}",
+  "\u2BB0",
+  "\u2BB1",
+  "\u2BB2",
+  "\u2BB3",
+  "\u2BB4",
+  "\u2BB5",
+  "\u2BB6",
+  "\u2BB7",
+  "\u{1F66A}",
+  "\u{1F66B}",
+  "\u{1F655}",
+  "\u{1F654}",
+  "\u{1F657}",
+  "\u{1F656}",
+  "\u{1F650}",
+  "\u{1F651}",
+  "\u{1F652}",
+  "\u{1F653}",
+  "\u232B",
+  "\u2326",
+  "\u2B98",
+  "\u2B9A",
+  "\u2B99",
+  "\u2B9B",
+  "\u2B88",
+  "\u2B8A",
+  "\u2B89",
+  "\u2B8B",
+  "\u2190",
+  "\u2192",
+  "\u2191",
+  "\u2193",
+  "\u2196",
+  "\u2197",
+  "\u2199",
+  "\u2198",
+  "\u2B05",
+  "\u2794",
+  "\u2B06",
+  "\u2B07",
+  "\u2B09",
+  "\u2B08",
+  "\u2B0B",
+  "\u2B0A",
+  "\u21E6",
+  "\u21E8",
+  "\u21E7",
+  "\u21E9",
+  "\u2B04",
+  "\u21F3",
+  "\u2B00",
+  "\u2B01",
+  "\u2B03",
+  "\u2B02",
+  "\u{1F8AC}",
+  "\u{1F8AD}",
+  "\u2717",
+  "\u2714",
+  "\u2612",
+  "\u2611",
+  ""
+];
+function wingdingsChar(code) {
+  if (code < 33 || code > 255) return void 0;
+  return WINGDINGS[code - 33] || void 0;
+}
 
 // src/shared/pua.ts
 var BMP_SYMBOL_MAP = {
@@ -188,7 +419,7 @@ var BOXED_NUMBER_START = 983729;
 var BOXED_NUMBER_END = 983748;
 function mapPuaChar(code) {
   if (code >= 61472 && code <= 61695) {
-    return BMP_SYMBOL_MAP[code - 61440];
+    return BMP_SYMBOL_MAP[code - 61440] ?? wingdingsChar(code - 61440);
   }
   if (code >= BOXED_NUMBER_START && code <= BOXED_NUMBER_END) {
     return String.fromCodePoint(9312 + (code - BOXED_NUMBER_START));
@@ -264,32 +495,54 @@ function buildTable(rows, options) {
 }
 function buildTableDirect(rows, numRows, options) {
   let maxCols = 0;
+  const rowCap = Math.min(MAX_ROWS, numRows + rows.reduce((n, r) => n + r.length, 0) + 1);
   for (const row of rows) {
     for (const cell of row) {
       const end = (cell.colAddr ?? 0) + cell.colSpan;
       if (end > maxCols) maxCols = end;
+      if (cell.rowAddr !== void 0 && cell.rowAddr >= numRows) numRows = Math.min(cell.rowAddr + 1, rowCap);
     }
   }
   if (maxCols > MAX_COLS) maxCols = MAX_COLS;
-  if (maxCols === 0) return { rows: 0, cols: 0, cells: [], hasHeader: false };
+  if (maxCols === 0 || numRows === 0) return { rows: 0, cols: 0, cells: [], hasHeader: false };
   const grid = Array.from(
     { length: numRows },
     () => Array.from({ length: maxCols }, () => ({ text: "", colSpan: 1, rowSpan: 1 }))
   );
+  const owner = Array.from({ length: numRows }, () => new Array(maxCols));
   const anchorCols = /* @__PURE__ */ new Set();
-  for (const row of rows) {
-    for (const cell of row) {
-      const r = cell.rowAddr ?? 0;
-      const c = cell.colAddr ?? 0;
-      if (r >= numRows || c >= maxCols || r < 0 || c < 0) continue;
+  for (let ri = 0; ri < rows.length; ri++) {
+    for (const cell of rows[ri]) {
+      const text = options?.keepEmptyParagraphs ? cell.text : cell.text.trim();
+      const r = Math.min(cell.rowAddr ?? ri, numRows - 1);
+      let c = cell.colAddr ?? 0;
+      if (r < 0 || c < 0) continue;
+      if (cell.colAddr === void 0) while (c < maxCols - 1 && owner[r][c]) c++;
+      if (c >= maxCols) c = maxCols - 1;
+      const own = owner[r][c];
+      if (own) {
+        if (text.trim()) own.text = own.text ? `${own.text}
+${text}` : text;
+        continue;
+      }
+      let colSpan = Math.max(1, Math.min(cell.colSpan, maxCols - c));
+      for (let dc = 1; dc < colSpan; dc++) if (owner[r][c + dc]) {
+        colSpan = dc;
+        break;
+      }
+      let rowSpan = Math.max(1, Math.min(cell.rowSpan, numRows - r));
+      for (let dr = 1; dr < rowSpan; dr++) {
+        if (owner[r + dr].slice(c, c + colSpan).some(Boolean)) {
+          rowSpan = dr;
+          break;
+        }
+      }
+      const ir = { text, colSpan, rowSpan };
       anchorCols.add(c);
-      grid[r][c] = { text: options?.keepEmptyParagraphs ? cell.text : cell.text.trim(), colSpan: cell.colSpan, rowSpan: cell.rowSpan };
-      for (let dr = 0; dr < cell.rowSpan; dr++) {
-        for (let dc = 0; dc < cell.colSpan; dc++) {
-          if (dr === 0 && dc === 0) continue;
-          if (r + dr < numRows && c + dc < maxCols) {
-            grid[r + dr][c + dc] = { text: "", colSpan: 1, rowSpan: 1 };
-          }
+      for (let dr = 0; dr < rowSpan; dr++) {
+        for (let dc = 0; dc < colSpan; dc++) {
+          owner[r + dr][c + dc] = ir;
+          grid[r + dr][c + dc] = dr === 0 && dc === 0 ? ir : { text: "", colSpan: 1, rowSpan: 1 };
         }
       }
     }
@@ -306,6 +559,11 @@ function trimAndReturn(grid, numRows, maxCols, anchorCols, options) {
   }
   if (effectiveCols < maxCols && effectiveCols > 0) {
     const trimmed = grid.map((row) => row.slice(0, effectiveCols));
+    for (const row of trimmed) {
+      for (let c = 0; c < row.length; c++) {
+        if (c + row[c].colSpan > effectiveCols) row[c].colSpan = effectiveCols - c;
+      }
+    }
     return { rows: numRows, cols: effectiveCols, cells: trimmed, hasHeader: numRows > 1 };
   }
   return { rows: numRows, cols: maxCols, cells: grid, hasHeader: numRows > 1 };
@@ -318,13 +576,16 @@ function convertTableToText(rows) {
 function escapeGfm(text) {
   const NUL = String.fromCharCode(0);
   const spans = [];
-  const masked = text.replace(/!\[[^\]]*\]\([^)\n]*\)|\]\((?:https?:|mailto:|tel:|#)[^)\n]*\)|\$\$[^$]*\$\$|\$[^$\n]*\$/gi, (m) => {
+  const masked = text.replace(/!\[[^\]]*\]\([^)\n]*\)|\]\((?:https?:|mailto:|tel:|#)[^)\n]*\)|(?<!\\)\$\$(?:\\[\s\S]|[^\\$])*\$\$|(?<!\\)\$(?:\\[^\n]|[^\\$\n])*\$/gi, (m) => {
     spans.push(m);
     return NUL + (spans.length - 1) + NUL;
   });
-  const escaped = masked.replace(/([~*_`])/g, "\\$1");
+  const escaped = masked.replace(/\\(?=[!-#%-\/:-@\[-\x60{}~])/g, "\\\\").replace(/([~*_`])/g, "\\$1").replace(/(?<!\\)\|/g, "\\|").replace(/^([ \t]*)(?=#{1,6}(?:[ \t]|$))/gm, "$1\\").replace(/<(?!\/?u>)(?=[A-Za-z/!?])/g, "\\<");
   return escaped.replace(new RegExp(NUL + "(\\d+)" + NUL, "g"), (_, n) => spans[Number(n)]);
 }
+function escapeLiteralDollar(text) {
+  return text.includes("$") ? text.replace(/\$/g, "\\$") : text;
+}
 var HWP_SHAPE_ALT_TEXT_RE = /^(?:모서리가 둥근 |둥근 )?(?:사각형|직사각형|정사각형|원|타원|삼각형|이등변 삼각형|직각 삼각형|선|직선|곡선|화살표|굵은 화살표|이중 화살표|오각형|육각형|팔각형|별|[4-8]점별|십자|십자형|구름|구름형|마름모|도넛|평행사변형|사다리꼴|부채꼴|호|반원|물결|번개|하트|빗금|블록 화살표|수식|표|그림|개체|그리기\s?개체|묶음\s?개체|글상자|수식\s?개체|OLE\s?개체)\s?입니다\.?$/gm;
 function sanitizePua(text) {
   return mapPuaText(text).replace(/[\u{F0000}-\u{FFFFD}]/gu, "");
@@ -423,6 +684,7 @@ function dedupeRunningHeaders(blocks) {
 function spansToMarkdown(spans) {
   let out = "";
   for (const s of spans) {
+    if (s.placeholder) continue;
     const text = sanitizePua(s.text ?? "");
     if (!text) continue;
     let marker = s.code ? "`" : s.bold && s.italic ? "***" : s.bold ? "**" : s.italic ? "*" : "";
@@ -455,7 +717,8 @@ function blocksToMarkdown(blocks) {
     if (block.type === "heading" && block.text) {
       const prefix = "#".repeat(Math.min(block.level || 2, 6));
       const headingText = sanitizeText(block.text);
-      if (headingText) lines.push("", `${prefix} ${escapeGfm(headingText)}`, "");
+      const note = block.footnoteText ? ` (\uC8FC: ${block.footnoteText})` : "";
+      if (headingText) lines.push("", `${prefix} ${escapeGfm(headingText + note)}`, "");
       continue;
     }
     if (block.type === "image" && block.text) {
@@ -549,6 +812,12 @@ function hasStructuredCellContent(table) {
   }
   return false;
 }
+function noteSuffix(b) {
+  return b.footnoteText && b.text ? ` (\uC8FC: ${b.footnoteText})` : "";
+}
+function visibleText(b) {
+  return b.spans?.some((s) => s.placeholder) ? b.spans.filter((s) => !s.placeholder).map((s) => s.text).join("") : b.text ?? "";
+}
 function cellInnerHtml(cell) {
   if (cell.blocks?.length) {
     return cell.blocks.map((b) => {
@@ -557,8 +826,8 @@ function cellInnerHtml(cell) {
         return (cap ? cap + "<br>" : "") + tableToHtml(b.table);
       }
       if (b.type === "image" && b.text) return `<img src="${b.text}" alt="image">`;
-      const t = sanitizeText(b.text ?? "");
-      return t ? t.replace(/\n/g, "<br>") : "";
+      const t = sanitizeText(visibleText(b));
+      return t ? (t + noteSuffix(b)).replace(/\n/g, "<br>") : "";
     }).filter(Boolean).join("<br>");
   }
   return sanitizeText(cell.text).replace(/\n/g, "<br>");
@@ -598,7 +867,7 @@ function tableToHtml(table) {
       const attrStr = attrs.length ? " " + attrs.join(" ") : "";
       rowHtml.push(`<${tag}${attrStr}>${text}</${tag}>`);
     }
-    if (rowHtml.length) lines.push(`<tr>${rowHtml.join("")}</tr>`);
+    lines.push(`<tr>${rowHtml.join("")}</tr>`);
   }
   lines.push("</table>");
   return lines.join("\n");
@@ -606,7 +875,8 @@ function tableToHtml(table) {
 function tableToMarkdown(table) {
   if (table.rows === 0 || table.cols === 0) return "";
   const { cells, rows: numRows, cols: numCols } = table;
-  if ((hasMergedCells(table) || hasStructuredCellContent(table)) && !tableContainsInlineMath(table)) {
+  if (hasStructuredCellContent(table)) return tableToHtml(table);
+  if (hasMergedCells(table) && !tableContainsInlineMath(table)) {
     return tableToHtml(table);
   }
   if (numRows === 1 && numCols === 1) {
@@ -630,7 +900,7 @@ function tableToMarkdown(table) {
       if (skip.has(`${r},${c}`)) continue;
       const cell = cells[r]?.[c];
       if (!cell) continue;
-      display[r][c] = (cell.blocks?.some((b) => b.spans || b.type === "image" && b.text) ? cell.blocks.map((b) => b.type === "image" && b.text ? `![image](${b.text})` : b.spans ? spansToMarkdown(b.spans) : escapeGfm(sanitizeText(b.text ?? ""))).filter(Boolean).join("<br>") : escapeGfm(sanitizeText(cell.text)).replace(/\n/g, "<br>")).replace(/\|/g, "\\|");
+      display[r][c] = (cell.blocks?.some((b) => b.spans || b.type === "image" && b.text) ? cell.blocks.map((b) => b.type === "image" && b.text ? `![image](${b.text})` : b.spans ? spansToMarkdown(b.spans) + escapeGfm(noteSuffix(b)) : escapeGfm(sanitizeText(b.text ?? "") + noteSuffix(b))).filter(Boolean).join("<br>") : escapeGfm(sanitizeText(cell.text)).replace(/\n/g, "<br>")).replace(/(?<!\\)\|/g, "\\|");
       for (let dr = 0; dr < cell.rowSpan; dr++) {
         for (let dc = 0; dc < cell.colSpan; dc++) {
           if (dr === 0 && dc === 0) continue;
@@ -818,16 +1088,20 @@ function inlineImagesIntoMarkdown(markdown, images, opts) {
 }
 
 export {
+  WINGDINGS,
   mapPuaText,
   MAX_COLS,
   MAX_ROWS,
   buildTable,
   convertTableToText,
+  escapeGfm,
+  escapeLiteralDollar,
   flattenLayoutTables,
   dedupeRunningHeaders,
   blocksToMarkdown,
   hasStructuredCellContent,
+  noteSuffix,
   encodePng,
   inlineImagesIntoMarkdown
 };
-//# sourceMappingURL=chunk-VQ5W4MYO.js.map
+//# sourceMappingURL=chunk-QIF2VXBQ.js.map