/** * PII Allowlist Configuration * * Defines trusted phone numbers that should NOT be redacted from web content. * Primarily for verified health authority and government emergency numbers. * * CRITICAL: Only add numbers that are: * 1. Publicly published institutional/government numbers * 2. Verified health/safety authorities * 3. Not personal contact information */ export interface TrustedPhoneNumber { /** Display name for logging */ name: string; /** Normalized phone number variants (all formats this number might appear in) */ numbers: string[]; /** Optional: domains where this number is trusted (empty = trusted everywhere) */ trustedDomains?: string[]; /** Category for audit logging */ category: 'emergency' | 'health_authority' | 'government' | 'helpline'; } export interface PIIAllowlistConfig { /** When true, trusted numbers only preserved if source domain matches trustedDomains */ strictDomainMode: boolean; /** List of verified trusted phone numbers */ trustedPhoneNumbers: TrustedPhoneNumber[]; } /** * Normalize a phone number to digits-only format for comparison */ export declare function normalizePhoneNumber(phone: string): string; /** * Extract domain from URL (returns hostname without www.) */ export declare function extractDomain(url: string): string; /** * Built-in allowlist of verified health authority and emergency numbers */ export declare const DEFAULT_ALLOWLIST: PIIAllowlistConfig; /** * Check if a phone number should be allowlisted (not redacted) * * @param phoneNumber The phone number to check (in any format) * @param sourceUrl Optional source URL for domain-scoped allowlisting * @param config Optional custom config (defaults to DEFAULT_ALLOWLIST) * @returns The trusted number entry if allowlisted, null otherwise */ export declare function isAllowlistedPhoneNumber(phoneNumber: string, sourceUrl?: string, config?: PIIAllowlistConfig): TrustedPhoneNumber | null; //# sourceMappingURL=pii-allowlist.d.ts.map