privacy.js

// Public GitHub issues and customer-visible cards must never carry raw customer identifiers.
// Keep this independent of route classification so every filing path has the same boundary.

// A phone word and at most a few joining words right before the digits: "phone number is",
// "call me on", "tel.", "mobile:", "my number is".
const PHONE_CONTEXT =
  /(?:phone|tel(?:ephone)?|t[eé]l[eé]phone|tel[eé]fono?|telefone|whatsapp|call|\b(?:mobile|cell|contact|ph)\b|\bmy\s+(?:number|no)\b)\.?(?:\s*(?:number|no\.?|is|me|us|at|on|[:=#-]))*\s*$/i;

function redactSensitive(text, { issue = false, preserveOfficialEmails = false } = {}) {
  let out = String(text || '');
  const officialEmail = (value) => preserveOfficialEmails &&
    /^[A-Z0-9._%+-]+@(?:[A-Z0-9-]+\.)*(?:omi\.me|basedhardware\.com)$/i.test(value);
  out = out.replace(/\b[A-Z0-9._%+-]+\s*@\s*[A-Z0-9.-]+\.[A-Z]{2,}\b/gi,
    (match) => officialEmail(match) ? match : '[email]');
  out = out.replace(/\b[A-Z0-9._%+-]+\s*(?:\(at\)|\[at\])\s*[A-Z0-9.-]+\.[A-Z]{2,}\b/gi, '[email]');
  out = out.replace(/\b(?:email|e-mail)\s*[:=]\s*[^\s,;]+/gi,
    (match) => officialEmail(match.replace(/^\b(?:email|e-mail)\s*[:=]\s*/i, '')) ? match : '[email]');
  out = out.replace(/\b(?:address|shipping address|billing address)\s*[:=]\s*[^\n;]+/gi, '[address]');
  out = out.replace(
    /\b(?:(?:flat|apt|apartment|unit)\s+[A-Za-z0-9-]+,?\s+)?\d{1,5}[A-Za-z]?\s+(?:[A-Za-zÀ-ÿ][A-Za-zÀ-ÿ.'-]*\s+){0,5}(?:street|st|avenue|ave|road|rd|boulevard|blvd|lane|ln|drive|dr|court|ct|place|pl|way|terrace|crescent|rue|chemin|route|strasse|straße|via|viale|calle|carrer|rua|ulica|ul\.|marg|nagar)\b\.?[^\n;]*/gi,
    '[address]'
  );
  out = out.replace(/(?<![\w#])\+?(?:\(\d{1,4}\)|\d{1,4})(?:[\s().-]*(?:\(\d{1,4}\)|\d{1,4})){1,5}(?!\w)/g, (match, offset, source) => {
    const digits = match.replace(/\D/g, '');
    const before = source.slice(Math.max(0, offset - 32), offset);
    const hasPhoneContext = PHONE_CONTEXT.test(before);
    if (digits.length > 15 || (digits.length < 9 && !(hasPhoneContext && digits.length >= 7))) return match;
    const groups = match.match(/\d+/g) || [];
    const lengths = groups.map((group) => group.length).join('-');
    const typicalGrouping = /^(?:3-3-3|3-3-4|5-5|2-4-4|1-3-3-4|2-5-5|2-4-6)$/.test(lengths);
    return match.trimStart().startsWith('+') || hasPhoneContext || typicalGrouping
      ? '[phone]'
      : match;
  });
  if (!issue) return out;
  out = out.replace(/\b(?:postal|post|zip)\s*code\s*[:=]\s*[^\n,;]+/gi, '[postal code]');
  out = out.replace(/https:\/\/(?:cdn\.discordapp\.com|media\.discordapp\.net)\/attachments\/[^\s)]+/gi, '[attachment in Discord]');
  out = out.replace(/<@!?\d+>|<@&\d+>|(?<![\w.])@[A-Za-z0-9_.-]{2,32}/g, '[Discord user]');
  out = out.replace(/\b(?:Discord\s+)?user(?:name)?\s*[:=]\s*[^\s,;]+/gi, '[Discord user]');
  // "order 22777" and "order number: 22777", and the same said in a sentence: "order number is 22777".
  out = out.replace(
    /\b(?:order|ticket)\s*(?:number|no\.?|id|#)?\s*(?:[:#]?\s*\d{3,}|(?:is|was|=|-)\s*#?\s*\d{4,})\b/gi,
    '[order number]'
  );
  out = out.replace(/(?<!\w)#\d{4,}\b/g, (match, offset, source) =>
    /\b(?:PR|pull request|(?:GitHub\s+)?issue)\s*$/i.test(source.slice(Math.max(0, offset - 30), offset)) ? match : '[order number]');
  out = out.replace(/\b(?:sk-[A-Za-z0-9_-]{8,}|ghp_[A-Za-z0-9_]{8,}|github_pat_[A-Za-z0-9_]{8,}|xox[baprs]-[A-Za-z0-9-]{8,}|AIza[A-Za-z0-9_-]{16,}|user_[A-Za-z0-9]{20,})\b/g, '[token]');
  out = out.replace(/\b(?:bearer|api[_ -]?key|access[_ -]?token|secret)\s*[:= ]\s*[A-Za-z0-9._-]{8,}\b/gi, '[token]');
  out = out.replace(/\beyJ[A-Za-z0-9_-]{12,}\.[A-Za-z0-9_-]{12,}(?:\.[A-Za-z0-9_-]+)?\b/g, '[token]');
  return out;
}

function attachmentCount(files) {
  return Array.isArray(files) ? files.length : Number(files?.size || 0);
}

module.exports = { redactSensitive, attachmentCount };