@opencloud-eu/web-client 7.0.1 → 7.2.0

package/dist/{ocs-BXaLGcUt.js → ocs-BwWCZeaA.js}

@@ -1,26 +1,27 @@
-import { t as e } from "./dist-D0YulRs6.js";
-import { a as t, n, s as r, t as i, u as a } from "./toString-DkamdJp-.js";
+import { t as e } from "./dist-B2vdwwII.js";
+import { t } from "./urlJoin-_pUL1TUx.js";
+import { a as n, n as r, s as i, t as a } from "./toString-BCd-H1lr.js";
 //#region ../../node_modules/.pnpm/lodash-es@4.18.1/node_modules/lodash-es/_isKey.js
 var o = /\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/, s = /^\w*$/;
-function c(e, n) {
-	if (t(e)) return !1;
-	var i = typeof e;
-	return i == "number" || i == "symbol" || i == "boolean" || e == null || r(e) ? !0 : s.test(e) || !o.test(e) || n != null && e in Object(n);
+function c(e, t) {
+	if (n(e)) return !1;
+	var r = typeof e;
+	return r == "number" || r == "symbol" || r == "boolean" || e == null || i(e) ? !0 : s.test(e) || !o.test(e) || t != null && e in Object(t);
 }
 //#endregion
 //#region ../../node_modules/.pnpm/lodash-es@4.18.1/node_modules/lodash-es/memoize.js
 var l = "Expected a function";
 function u(e, t) {
 	if (typeof e != "function" || t != null && typeof t != "function") throw TypeError(l);
-	var r = function() {
-		var n = arguments, i = t ? t.apply(this, n) : n[0], a = r.cache;
+	var n = function() {
+		var r = arguments, i = t ? t.apply(this, r) : r[0], a = n.cache;
 		if (a.has(i)) return a.get(i);
-		var o = e.apply(this, n);
-		return r.cache = a.set(i, o) || a, o;
+		var o = e.apply(this, r);
+		return n.cache = a.set(i, o) || a, o;
 	};
-	return r.cache = new (u.Cache || n)(), r;
+	return n.cache = new (u.Cache || r)(), n;
 }
-u.Cache = n;
+u.Cache = r;
 //#endregion
 //#region ../../node_modules/.pnpm/lodash-es@4.18.1/node_modules/lodash-es/_memoizeCapped.js
 var d = 500;
@@ -40,14 +41,14 @@ var p = /[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(
 });
 //#endregion
 //#region ../../node_modules/.pnpm/lodash-es@4.18.1/node_modules/lodash-es/_castPath.js
-function g(e, n) {
-	return t(e) ? e : c(e, n) ? [e] : h(i(e));
+function g(e, t) {
+	return n(e) ? e : c(e, t) ? [e] : h(a(e));
 }
 //#endregion
 //#region ../../node_modules/.pnpm/lodash-es@4.18.1/node_modules/lodash-es/_toKey.js
 var _ = Infinity;
 function ee(e) {
-	if (typeof e == "string" || r(e)) return e;
+	if (typeof e == "string" || i(e)) return e;
 	var t = e + "";
 	return t == "0" && 1 / e == -_ ? "-0" : t;
 }
@@ -124,7 +125,6 @@ function T(...e) {
 function E(e) {
 	return new DataView(e.buffer, e.byteOffset, e.byteLength);
 }
-new Uint8Array(new Uint32Array([287454020]).buffer)[0], typeof Uint8Array.from([]).toHex == "function" && Uint8Array.fromHex;
 function re(e) {
 	if (typeof e != "string") throw TypeError("string expected");
 	return new Uint8Array(new TextEncoder().encode(e));
@@ -222,7 +222,7 @@ function de(e, t, n, r, i) {
 	return e.destroy(), t.destroy(), r && r.destroy(), T(i), n;
 }
 function fe(e, t, n, r) {
-	let { c: i, dkLen: a, DK: o, PRF: s, PRFSalt: c } = ue(e, t, n, r), l, u = new Uint8Array(4), d = E(u), f = new Uint8Array(s.outputLen);
+	let { c: i, dkLen: a, DK: o, PRF: s, PRFSalt: c } = ue(e, t, n, r), l, u = /* @__PURE__ */ new Uint8Array(4), d = E(u), f = new Uint8Array(s.outputLen);
 	for (let e = 1, t = 0; t < a; e++, t += s.outputLen) {
 		let n = o.subarray(t, t + s.outputLen);
 		d.setInt32(0, e, !1), (l = c._cloneInto(l)).update(u).digestInto(f), n.set(f.subarray(0, n.length));
@@ -333,7 +333,7 @@ function N(e, t, n, r) {
 		l: i | 0
 	};
 }
-var ye = (e, t, n) => (e >>> 0) + (t >>> 0) + (n >>> 0), be = (e, t, n, r) => t + n + r + (e / 2 ** 32 | 0) | 0, xe = (e, t, n, r) => (e >>> 0) + (t >>> 0) + (n >>> 0) + (r >>> 0), Se = (e, t, n, r, i) => t + n + r + i + (e / 2 ** 32 | 0) | 0, Ce = (e, t, n, r, i) => (e >>> 0) + (t >>> 0) + (n >>> 0) + (r >>> 0) + (i >>> 0), we = (e, t, n, r, i, a) => t + n + r + i + a + (e / 2 ** 32 | 0) | 0, Te = ge((/* @__PURE__ */ "0x428a2f98d728ae22.0x7137449123ef65cd.0xb5c0fbcfec4d3b2f.0xe9b5dba58189dbbc.0x3956c25bf348b538.0x59f111f1b605d019.0x923f82a4af194f9b.0xab1c5ed5da6d8118.0xd807aa98a3030242.0x12835b0145706fbe.0x243185be4ee4b28c.0x550c7dc3d5ffb4e2.0x72be5d74f27b896f.0x80deb1fe3b1696b1.0x9bdc06a725c71235.0xc19bf174cf692694.0xe49b69c19ef14ad2.0xefbe4786384f25e3.0x0fc19dc68b8cd5b5.0x240ca1cc77ac9c65.0x2de92c6f592b0275.0x4a7484aa6ea6e483.0x5cb0a9dcbd41fbd4.0x76f988da831153b5.0x983e5152ee66dfab.0xa831c66d2db43210.0xb00327c898fb213f.0xbf597fc7beef0ee4.0xc6e00bf33da88fc2.0xd5a79147930aa725.0x06ca6351e003826f.0x142929670a0e6e70.0x27b70a8546d22ffc.0x2e1b21385c26c926.0x4d2c6dfc5ac42aed.0x53380d139d95b3df.0x650a73548baf63de.0x766a0abb3c77b2a8.0x81c2c92e47edaee6.0x92722c851482353b.0xa2bfe8a14cf10364.0xa81a664bbc423001.0xc24b8b70d0f89791.0xc76c51a30654be30.0xd192e819d6ef5218.0xd69906245565a910.0xf40e35855771202a.0x106aa07032bbd1b8.0x19a4c116b8d2d0c8.0x1e376c085141ab53.0x2748774cdf8eeb99.0x34b0bcb5e19b48a8.0x391c0cb3c5c95a63.0x4ed8aa4ae3418acb.0x5b9cca4f7763e373.0x682e6ff3d6b2b8a3.0x748f82ee5defb2fc.0x78a5636f43172f60.0x84c87814a1f0ab72.0x8cc702081a6439ec.0x90befffa23631e28.0xa4506cebde82bde9.0xbef9a3f7b2c67915.0xc67178f2e372532b.0xca273eceea26619c.0xd186b8c721c0c207.0xeada7dd6cde0eb1e.0xf57d4f7fee6ed178.0x06f067aa72176fba.0x0a637dc5a2c898a6.0x113f9804bef90dae.0x1b710b35131c471b.0x28db77f523047d84.0x32caab7b40c72493.0x3c9ebe0a15c9bebc.0x431d67c49c100d4c.0x4cc5d4becb3e42b6.0x597f299cfc657e2a.0x5fcb6fab3ad6faec.0x6c44198c4a475817".split(".")).map((e) => BigInt(e))), Ee = Te[0], De = Te[1], P = /* @__PURE__ */ new Uint32Array(80), F = /* @__PURE__ */ new Uint32Array(80), Oe = class extends pe {
+var ye = (e, t, n) => (e >>> 0) + (t >>> 0) + (n >>> 0), be = (e, t, n, r) => t + n + r + (e / 2 ** 32 | 0) | 0, xe = (e, t, n, r) => (e >>> 0) + (t >>> 0) + (n >>> 0) + (r >>> 0), Se = (e, t, n, r, i) => t + n + r + i + (e / 2 ** 32 | 0) | 0, Ce = (e, t, n, r, i) => (e >>> 0) + (t >>> 0) + (n >>> 0) + (r >>> 0) + (i >>> 0), we = (e, t, n, r, i, a) => t + n + r + i + a + (e / 2 ** 32 | 0) | 0, Te = /* @__PURE__ */ ge((/* @__PURE__ */ "0x428a2f98d728ae22.0x7137449123ef65cd.0xb5c0fbcfec4d3b2f.0xe9b5dba58189dbbc.0x3956c25bf348b538.0x59f111f1b605d019.0x923f82a4af194f9b.0xab1c5ed5da6d8118.0xd807aa98a3030242.0x12835b0145706fbe.0x243185be4ee4b28c.0x550c7dc3d5ffb4e2.0x72be5d74f27b896f.0x80deb1fe3b1696b1.0x9bdc06a725c71235.0xc19bf174cf692694.0xe49b69c19ef14ad2.0xefbe4786384f25e3.0x0fc19dc68b8cd5b5.0x240ca1cc77ac9c65.0x2de92c6f592b0275.0x4a7484aa6ea6e483.0x5cb0a9dcbd41fbd4.0x76f988da831153b5.0x983e5152ee66dfab.0xa831c66d2db43210.0xb00327c898fb213f.0xbf597fc7beef0ee4.0xc6e00bf33da88fc2.0xd5a79147930aa725.0x06ca6351e003826f.0x142929670a0e6e70.0x27b70a8546d22ffc.0x2e1b21385c26c926.0x4d2c6dfc5ac42aed.0x53380d139d95b3df.0x650a73548baf63de.0x766a0abb3c77b2a8.0x81c2c92e47edaee6.0x92722c851482353b.0xa2bfe8a14cf10364.0xa81a664bbc423001.0xc24b8b70d0f89791.0xc76c51a30654be30.0xd192e819d6ef5218.0xd69906245565a910.0xf40e35855771202a.0x106aa07032bbd1b8.0x19a4c116b8d2d0c8.0x1e376c085141ab53.0x2748774cdf8eeb99.0x34b0bcb5e19b48a8.0x391c0cb3c5c95a63.0x4ed8aa4ae3418acb.0x5b9cca4f7763e373.0x682e6ff3d6b2b8a3.0x748f82ee5defb2fc.0x78a5636f43172f60.0x84c87814a1f0ab72.0x8cc702081a6439ec.0x90befffa23631e28.0xa4506cebde82bde9.0xbef9a3f7b2c67915.0xc67178f2e372532b.0xca273eceea26619c.0xd186b8c721c0c207.0xeada7dd6cde0eb1e.0xf57d4f7fee6ed178.0x06f067aa72176fba.0x0a637dc5a2c898a6.0x113f9804bef90dae.0x1b710b35131c471b.0x28db77f523047d84.0x32caab7b40c72493.0x3c9ebe0a15c9bebc.0x431d67c49c100d4c.0x4cc5d4becb3e42b6.0x597f299cfc657e2a.0x5fcb6fab3ad6faec.0x6c44198c4a475817".split(".")).map((e) => BigInt(e))), Ee = Te[0], De = Te[1], P = /* @__PURE__ */ new Uint32Array(80), F = /* @__PURE__ */ new Uint32Array(80), Oe = class extends pe {
 	constructor(e) {
 		super(128, e, 16, !1);
 	}
@@ -405,10 +405,8 @@ var ye = (e, t, n) => (e >>> 0) + (t >>> 0) + (n >>> 0), be = (e, t, n, r) => t
 }, Ae = /* @__PURE__ */ oe(() => new ke(), /* @__PURE__ */ se(3)), je = (t, n, r, i) => e.from(fe(Ae, t, n, {
 	c: r,
 	dkLen: i
-})), Me = ":A-Za-z_\\u00C0-\\u00D6\\u00D8-\\u00F6\\u00F8-\\u02FF\\u0370-\\u037D\\u037F-\\u1FFF\\u200C-\\u200D\\u2070-\\u218F\\u2C00-\\u2FEF\\u3001-\\uD7FF\\uF900-\\uFDCF\\uFDF0-\\uFFFD";
-Me + "";
-var Ne = "[" + Me + "][:A-Za-z_\\u00C0-\\u00D6\\u00D8-\\u00F6\\u00F8-\\u02FF\\u0370-\\u037D\\u037F-\\u1FFF\\u200C-\\u200D\\u2070-\\u218F\\u2C00-\\u2FEF\\u3001-\\uD7FF\\uF900-\\uFDCF\\uFDF0-\\uFFFD\\-.\\d\\u00B7\\u0300-\\u036F\\u203F-\\u2040]*", Pe = RegExp("^" + Ne + "$");
-function Fe(e, t) {
+})), Me = /* @__PURE__ */ RegExp("^[:A-Za-z_\\u00C0-\\u00D6\\u00D8-\\u00F6\\u00F8-\\u02FF\\u0370-\\u037D\\u037F-\\u1FFF\\u200C-\\u200D\\u2070-\\u218F\\u2C00-\\u2FEF\\u3001-\\uD7FF\\uF900-\\uFDCF\\uFDF0-\\uFFFD][:A-Za-z_\\u00C0-\\u00D6\\u00D8-\\u00F6\\u00F8-\\u02FF\\u0370-\\u037D\\u037F-\\u1FFF\\u200C-\\u200D\\u2070-\\u218F\\u2C00-\\u2FEF\\u3001-\\uD7FF\\uF900-\\uFDCF\\uFDF0-\\uFFFD\\-.\\d\\u00B7\\u0300-\\u036F\\u203F-\\u2040]*$");
+function Ne(e, t) {
 	let n = [], r = t.exec(e);
 	for (; r;) {
 		let i = [];
@@ -419,13 +417,13 @@ function Fe(e, t) {
 	}
 	return n;
 }
-var Ie = function(e) {
-	return Pe.exec(e) != null;
+var Pe = function(e) {
+	return Me.exec(e) != null;
 };
-function Le(e) {
+function Fe(e) {
 	return e !== void 0;
 }
-var I = [
+var Ie = [
 	"hasOwnProperty",
 	"toString",
 	"valueOf",
@@ -433,94 +431,94 @@ var I = [
 	"__defineSetter__",
 	"__lookupGetter__",
 	"__lookupSetter__"
-], Re = [
+], Le = [
 	"__proto__",
 	"constructor",
 	"prototype"
-], ze = {
+], Re = {
 	allowBooleanAttributes: !1,
 	unpairedTags: []
 };
-function Be(e, t) {
-	t = Object.assign({}, ze, t);
+function ze(e, t) {
+	t = Object.assign({}, Re, t);
 	let n = [], r = !1, i = !1;
 	e[0] === "" && (e = e.substr(1));
 	for (let a = 0; a < e.length; a++) if (e[a] === "<" && e[a + 1] === "?") {
-		if (a += 2, a = He(e, a), a.err) return a;
+		if (a += 2, a = Ve(e, a), a.err) return a;
 	} else if (e[a] === "<") {
 		let o = a;
 		if (a++, e[a] === "!") {
-			a = Ue(e, a);
+			a = He(e, a);
 			continue;
 		} else {
 			let s = !1;
 			e[a] === "/" && (s = !0, a++);
 			let c = "";
 			for (; a < e.length && e[a] !== ">" && e[a] !== " " && e[a] !== "	" && e[a] !== "\n" && e[a] !== "\r"; a++) c += e[a];
-			if (c = c.trim(), c[c.length - 1] === "/" && (c = c.substring(0, c.length - 1), a--), !Qe(c)) {
+			if (c = c.trim(), c[c.length - 1] === "/" && (c = c.substring(0, c.length - 1), a--), !Ze(c)) {
 				let t;
-				return t = c.trim().length === 0 ? "Invalid space after '<'." : "Tag '" + c + "' is an invalid name.", L("InvalidTag", t, R(e, a));
+				return t = c.trim().length === 0 ? "Invalid space after '<'." : "Tag '" + c + "' is an invalid name.", I("InvalidTag", t, L(e, a));
 			}
-			let l = Ke(e, a);
-			if (l === !1) return L("InvalidAttr", "Attributes for '" + c + "' have open quote.", R(e, a));
+			let l = Ge(e, a);
+			if (l === !1) return I("InvalidAttr", "Attributes for '" + c + "' have open quote.", L(e, a));
 			let u = l.value;
 			if (a = l.index, u[u.length - 1] === "/") {
 				let n = a - u.length;
 				u = u.substring(0, u.length - 1);
-				let i = Je(u, t);
+				let i = qe(u, t);
 				if (i === !0) r = !0;
-				else return L(i.err.code, i.err.msg, R(e, n + i.err.line));
+				else return I(i.err.code, i.err.msg, L(e, n + i.err.line));
 			} else if (s) {
-				if (!l.tagClosed) return L("InvalidTag", "Closing tag '" + c + "' doesn't have proper closing.", R(e, a));
-				if (u.trim().length > 0) return L("InvalidTag", "Closing tag '" + c + "' can't have attributes or invalid starting.", R(e, o));
-				if (n.length === 0) return L("InvalidTag", "Closing tag '" + c + "' has not been opened.", R(e, o));
+				if (!l.tagClosed) return I("InvalidTag", "Closing tag '" + c + "' doesn't have proper closing.", L(e, a));
+				if (u.trim().length > 0) return I("InvalidTag", "Closing tag '" + c + "' can't have attributes or invalid starting.", L(e, o));
+				if (n.length === 0) return I("InvalidTag", "Closing tag '" + c + "' has not been opened.", L(e, o));
 				{
 					let t = n.pop();
 					if (c !== t.tagName) {
-						let n = R(e, t.tagStartPos);
-						return L("InvalidTag", "Expected closing tag '" + t.tagName + "' (opened in line " + n.line + ", col " + n.col + ") instead of closing tag '" + c + "'.", R(e, o));
+						let n = L(e, t.tagStartPos);
+						return I("InvalidTag", "Expected closing tag '" + t.tagName + "' (opened in line " + n.line + ", col " + n.col + ") instead of closing tag '" + c + "'.", L(e, o));
 					}
 					n.length == 0 && (i = !0);
 				}
 			} else {
-				let s = Je(u, t);
-				if (s !== !0) return L(s.err.code, s.err.msg, R(e, a - u.length + s.err.line));
-				if (i === !0) return L("InvalidXml", "Multiple possible root nodes found.", R(e, a));
+				let s = qe(u, t);
+				if (s !== !0) return I(s.err.code, s.err.msg, L(e, a - u.length + s.err.line));
+				if (i === !0) return I("InvalidXml", "Multiple possible root nodes found.", L(e, a));
 				t.unpairedTags.indexOf(c) !== -1 || n.push({
 					tagName: c,
 					tagStartPos: o
 				}), r = !0;
 			}
 			for (a++; a < e.length; a++) if (e[a] === "<") if (e[a + 1] === "!") {
-				a++, a = Ue(e, a);
+				a++, a = He(e, a);
 				continue;
 			} else if (e[a + 1] === "?") {
-				if (a = He(e, ++a), a.err) return a;
+				if (a = Ve(e, ++a), a.err) return a;
 			} else break;
 			else if (e[a] === "&") {
-				let t = Xe(e, a);
-				if (t == -1) return L("InvalidChar", "char '&' is not expected.", R(e, a));
+				let t = Ye(e, a);
+				if (t == -1) return I("InvalidChar", "char '&' is not expected.", L(e, a));
 				a = t;
-			} else if (i === !0 && !Ve(e[a])) return L("InvalidXml", "Extra text at the end", R(e, a));
+			} else if (i === !0 && !Be(e[a])) return I("InvalidXml", "Extra text at the end", L(e, a));
 			e[a] === "<" && a--;
 		}
 	} else {
-		if (Ve(e[a])) continue;
-		return L("InvalidChar", "char '" + e[a] + "' is not expected.", R(e, a));
+		if (Be(e[a])) continue;
+		return I("InvalidChar", "char '" + e[a] + "' is not expected.", L(e, a));
 	}
-	return r ? n.length == 1 ? L("InvalidTag", "Unclosed tag '" + n[0].tagName + "'.", R(e, n[0].tagStartPos)) : n.length > 0 ? L("InvalidXml", "Invalid '" + JSON.stringify(n.map((e) => e.tagName), null, 4).replace(/\r?\n/g, "") + "' found.", {
+	return r ? n.length == 1 ? I("InvalidTag", "Unclosed tag '" + n[0].tagName + "'.", L(e, n[0].tagStartPos)) : n.length > 0 ? I("InvalidXml", "Invalid '" + JSON.stringify(n.map((e) => e.tagName), null, 4).replace(/\r?\n/g, "") + "' found.", {
 		line: 1,
 		col: 1
-	}) : !0 : L("InvalidXml", "Start tag expected.", 1);
+	}) : !0 : I("InvalidXml", "Start tag expected.", 1);
 }
-function Ve(e) {
+function Be(e) {
 	return e === " " || e === "	" || e === "\n" || e === "\r";
 }
-function He(e, t) {
+function Ve(e, t) {
 	let n = t;
 	for (; t < e.length; t++) if (e[t] == "?" || e[t] == " ") {
 		let r = e.substr(n, t - n);
-		if (t > 5 && r === "xml") return L("InvalidXml", "XML declaration allowed only at the start of the document.", R(e, t));
+		if (t > 5 && r === "xml") return I("InvalidXml", "XML declaration allowed only at the start of the document.", L(e, t));
 		if (e[t] == "?" && e[t + 1] == ">") {
 			t++;
 			break;
@@ -528,7 +526,7 @@ function He(e, t) {
 	}
 	return t;
 }
-function Ue(e, t) {
+function He(e, t) {
 	if (e.length > t + 5 && e[t + 1] === "-" && e[t + 2] === "-") {
 		for (t += 3; t < e.length; t++) if (e[t] === "-" && e[t + 1] === "-" && e[t + 2] === ">") {
 			t += 2;
@@ -546,38 +544,38 @@ function Ue(e, t) {
 	}
 	return t;
 }
-var We = "\"", Ge = "'";
-function Ke(e, t) {
+var Ue = "\"", We = "'";
+function Ge(e, t) {
 	let n = "", r = "", i = !1;
 	for (; t < e.length; t++) {
-		if (e[t] === We || e[t] === Ge) r === "" ? r = e[t] : r !== e[t] || (r = "");
+		if (e[t] === Ue || e[t] === We) r === "" ? r = e[t] : r !== e[t] || (r = "");
 		else if (e[t] === ">" && r === "") {
 			i = !0;
 			break;
 		}
 		n += e[t];
 	}
-	return r === "" ? {
+	return r === "" && {
 		value: n,
 		index: t,
 		tagClosed: i
-	} : !1;
+	};
 }
-var qe = /* @__PURE__ */ RegExp("(\\s*)([^\\s=]+)(\\s*=)?(\\s*(['\"])(([\\s\\S])*?)\\5)?", "g");
-function Je(e, t) {
-	let n = Fe(e, qe), r = {};
+var Ke = /* @__PURE__ */ RegExp("(\\s*)([^\\s=]+)(\\s*=)?(\\s*(['\"])(([\\s\\S])*?)\\5)?", "g");
+function qe(e, t) {
+	let n = Ne(e, Ke), r = {};
 	for (let e = 0; e < n.length; e++) {
-		if (n[e][1].length === 0) return L("InvalidAttr", "Attribute '" + n[e][2] + "' has no space in starting.", z(n[e]));
-		if (n[e][3] !== void 0 && n[e][4] === void 0) return L("InvalidAttr", "Attribute '" + n[e][2] + "' is without value.", z(n[e]));
-		if (n[e][3] === void 0 && !t.allowBooleanAttributes) return L("InvalidAttr", "boolean attribute '" + n[e][2] + "' is not allowed.", z(n[e]));
+		if (n[e][1].length === 0) return I("InvalidAttr", "Attribute '" + n[e][2] + "' has no space in starting.", R(n[e]));
+		if (n[e][3] !== void 0 && n[e][4] === void 0) return I("InvalidAttr", "Attribute '" + n[e][2] + "' is without value.", R(n[e]));
+		if (n[e][3] === void 0 && !t.allowBooleanAttributes) return I("InvalidAttr", "boolean attribute '" + n[e][2] + "' is not allowed.", R(n[e]));
 		let i = n[e][2];
-		if (!Ze(i)) return L("InvalidAttr", "Attribute '" + i + "' is an invalid name.", z(n[e]));
+		if (!Xe(i)) return I("InvalidAttr", "Attribute '" + i + "' is an invalid name.", R(n[e]));
 		if (!Object.prototype.hasOwnProperty.call(r, i)) r[i] = 1;
-		else return L("InvalidAttr", "Attribute '" + i + "' is repeated.", z(n[e]));
+		else return I("InvalidAttr", "Attribute '" + i + "' is repeated.", R(n[e]));
 	}
 	return !0;
 }
-function Ye(e, t) {
+function Je(e, t) {
 	let n = /\d/;
 	for (e[t] === "x" && (t++, n = /[\da-fA-F]/); t < e.length; t++) {
 		if (e[t] === ";") return t;
@@ -585,9 +583,9 @@ function Ye(e, t) {
 	}
 	return -1;
 }
-function Xe(e, t) {
+function Ye(e, t) {
 	if (t++, e[t] === ";") return -1;
-	if (e[t] === "#") return t++, Ye(e, t);
+	if (e[t] === "#") return t++, Je(e, t);
 	let n = 0;
 	for (; t < e.length; t++, n++) if (!(e[t].match(/\w/) && n < 20)) {
 		if (e[t] === ";") break;
@@ -595,7 +593,7 @@ function Xe(e, t) {
 	}
 	return t;
 }
-function L(e, t, n) {
+function I(e, t, n) {
 	return { err: {
 		code: e,
 		msg: t,
@@ -603,25 +601,25 @@ function L(e, t, n) {
 		col: n.col
 	} };
 }
-function Ze(e) {
-	return Ie(e);
+function Xe(e) {
+	return Pe(e);
 }
-function Qe(e) {
-	return Ie(e);
+function Ze(e) {
+	return Pe(e);
 }
-function R(e, t) {
+function L(e, t) {
 	let n = e.substring(0, t).split(/\r?\n/);
 	return {
 		line: n.length,
 		col: n[n.length - 1].length + 1
 	};
 }
-function z(e) {
+function R(e) {
 	return e.startIndex + e[1].length;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@nodable+entities@2.1.0/node_modules/@nodable/entities/src/entities.js
-var $e = {
+//#region ../../node_modules/.pnpm/@nodable+entities@2.2.0/node_modules/@nodable/entities/src/entities.js
+var Qe = {
 	amp: "&",
 	AMP: "&",
 	lt: "<",
@@ -648,7 +646,6 @@ var $e = {
 	num: "#",
 	dollar: "$",
 	percent: "%",
-	amp: "&",
 	ast: "*",
 	commat: "@",
 	lowbar: "_",
@@ -700,7 +697,7 @@ var $e = {
 	times: "×",
 	div: "÷",
 	divide: "÷"
-}, et = {
+}, $e = {
 	Agrave: "À",
 	agrave: "à",
 	Aacute: "Á",
@@ -764,7 +761,7 @@ var $e = {
 	szlig: "ß",
 	yuml: "ÿ",
 	Yuml: "Ÿ"
-}, tt = {
+}, et = {
 	Amacr: "Ā",
 	amacr: "ā",
 	Abreve: "Ă",
@@ -882,7 +879,7 @@ var $e = {
 	zdot: "ż",
 	Zcaron: "Ž",
 	zcaron: "ž"
-}, nt = {
+}, tt = {
 	Alpha: "Α",
 	alpha: "α",
 	Beta: "Β",
@@ -953,7 +950,7 @@ var $e = {
 	Gammad: "Ϝ",
 	gammad: "ϝ",
 	digamma: "ϝ"
-}, rt = {
+}, nt = {
 	Afr: "𝔄",
 	afr: "𝔞",
 	Acy: "А",
@@ -1048,11 +1045,8 @@ var $e = {
 	ubrcy: "ў",
 	DZcy: "Џ",
 	dzcy: "џ"
-}, it = {
+}, rt = {
 	plus: "+",
-	minus: "−",
-	mnplus: "∓",
-	mp: "∓",
 	pm: "±",
 	times: "×",
 	div: "÷",
@@ -1125,10 +1119,6 @@ var $e = {
 	bumpe: "≏",
 	bumpeq: "≏",
 	HumpEqual: "≏",
-	dotminus: "∸",
-	minusd: "∸",
-	plusdo: "∔",
-	dotplus: "∔",
 	le: "≤",
 	LessEqual: "≤",
 	ge: "≥",
@@ -1137,7 +1127,7 @@ var $e = {
 	lesseqqgtr: "⪋",
 	greater: ">",
 	less: "<"
-}, at = {
+}, it = {
 	alefsym: "ℵ",
 	aleph: "ℵ",
 	beth: "ℶ",
@@ -1239,7 +1229,6 @@ var $e = {
 	wreath: "≀",
 	nsime: "≄",
 	nsimeq: "≄",
-	nsimeq: "≄",
 	ncong: "≇",
 	simne: "≆",
 	ncongdot: "⩭̸",
@@ -1259,7 +1248,7 @@ var $e = {
 	npr: "⊀",
 	nsucc: "⊁",
 	nsc: "⊁"
-}, ot = {
+}, at = {
 	larr: "←",
 	leftarrow: "←",
 	LeftArrow: "←",
@@ -1350,10 +1339,6 @@ var $e = {
 	mapsto: "↦",
 	mapstodown: "↧",
 	crarr: "↵",
-	nwarrow: "↖",
-	nearrow: "↗",
-	searrow: "↘",
-	swarrow: "↙",
 	nleftarrow: "↚",
 	nleftrightarrow: "↮",
 	nrightarrow: "↛",
@@ -1394,7 +1379,6 @@ var $e = {
 	ldrushar: "⥋",
 	rdldhar: "⥩",
 	lrhard: "⥭",
-	rlhar: "⇌",
 	uharr: "↾",
 	uharl: "↿",
 	dharr: "⇂",
@@ -1410,13 +1394,12 @@ var $e = {
 	nhArr: "⇎",
 	nlarr: "↚",
 	nlArr: "⇍",
-	nrarr: "↛",
 	nrArr: "⇏",
 	larrb: "⇤",
 	LeftArrowBar: "⇤",
 	rarrb: "⇥",
 	RightArrowBar: "⇥"
-}, st = {
+}, ot = {
 	square: "□",
 	Square: "□",
 	squ: "□",
@@ -1509,7 +1492,7 @@ var $e = {
 	boxvH: "╪",
 	boxVh: "╫",
 	boxVH: "╬"
-}, ct = {
+}, st = {
 	excl: "!",
 	iexcl: "¡",
 	brvbar: "¦",
@@ -1559,16 +1542,14 @@ var $e = {
 	DiacriticalTilde: "˜",
 	DiacriticalDot: "˙",
 	DiacriticalDoubleAcute: "˝",
-	grave: "`",
-	acute: "´"
-}, lt = {
+	grave: "`"
+}, ct = {
 	cent: "¢",
 	pound: "£",
 	curren: "¤",
 	yen: "¥",
 	euro: "€",
 	dollar: "$",
-	euro: "€",
 	fnof: "ƒ",
 	inr: "₹",
 	af: "؋",
@@ -1578,7 +1559,7 @@ var $e = {
 	won: "₩",
 	yuan: "¥",
 	cedil: "¸"
-}, ut = {
+}, lt = {
 	frac12: "½",
 	half: "½",
 	frac13: "⅓",
@@ -1596,7 +1577,7 @@ var $e = {
 	frac58: "⅝",
 	frac78: "⅞",
 	frasl: "⁄"
-}, dt = {
+}, ut = {
 	trade: "™",
 	TRADE: "™",
 	telrec: "⌕",
@@ -1656,7 +1637,6 @@ var $e = {
 	Vdash: "⊩",
 	dashv: "⊣",
 	vDash: "⊨",
-	Vdash: "⊩",
 	Vvdash: "⊪",
 	nvdash: "⊬",
 	nvDash: "⊭",
@@ -1664,6 +1644,7 @@ var $e = {
 	nVDash: "⊯"
 };
 ({
+	...Qe,
 	...$e,
 	...et,
 	...tt,
@@ -1675,16 +1656,15 @@ var $e = {
 	...st,
 	...ct,
 	...lt,
-	...ut,
-	...dt
+	...ut
 });
-var ft = {
+var dt = {
 	amp: "&",
 	apos: "'",
 	gt: ">",
 	lt: "<",
 	quot: "\""
-}, pt = {
+}, ft = {
 	nbsp: "\xA0",
 	copy: "©",
 	reg: "®",
@@ -1705,10 +1685,14 @@ var ft = {
 	frac12: "½",
 	frac14: "¼",
 	frac34: "¾"
-}, mt = /* @__PURE__ */ new Set("!?\\\\/[]$%{}^&*()<>|+");
-function ht(e) {
+}, z = Object.freeze({
+	ALLOW: "allow",
+	BLOCK: "block",
+	THROW: "throw"
+}), pt = /* @__PURE__ */ new Set("!?\\\\/[]$%{}^&*()<>|+");
+function mt(e) {
 	if (e[0] === "#") throw Error(`[EntityReplacer] Invalid character '#' in entity name: "${e}"`);
-	for (let t of e) if (mt.has(t)) throw Error(`[EntityReplacer] Invalid character '${t}' in entity name: "${e}"`);
+	for (let t of e) if (pt.has(t)) throw Error(`[EntityReplacer] Invalid character '${t}' in entity name: "${e}"`);
 	return e;
 }
 function B(...e) {
@@ -1724,20 +1708,20 @@ function B(...e) {
 	return t;
 }
 var V = "external", H = "base", U = "all";
-function gt(e) {
-	return !e || e === V ? new Set([V]) : e === U ? new Set([U]) : e === H ? new Set([H]) : Array.isArray(e) ? new Set(e) : new Set([V]);
+function ht(e) {
+	return !e || e === V ? /* @__PURE__ */ new Set([V]) : e === U ? /* @__PURE__ */ new Set([U]) : e === H ? /* @__PURE__ */ new Set([H]) : Array.isArray(e) ? new Set(e) : /* @__PURE__ */ new Set([V]);
 }
 var W = Object.freeze({
 	allow: 0,
 	leave: 1,
 	remove: 2,
 	throw: 3
-}), _t = new Set([
+}), gt = /* @__PURE__ */ new Set([
 	9,
 	10,
 	13
 ]);
-function vt(e) {
+function _t(e) {
 	if (!e) return {
 		xmlVersion: 1,
 		onLevel: W.allow,
@@ -1750,21 +1734,40 @@ function vt(e) {
 		nullLevel: Math.max(r, W.remove)
 	};
 }
-var yt = class {
+var vt = class {
 	constructor(e = {}) {
-		this._limit = e.limit || {}, this._maxTotalExpansions = this._limit.maxTotalExpansions || 0, this._maxExpandedLength = this._limit.maxExpandedLength || 0, this._postCheck = typeof e.postCheck == "function" ? e.postCheck : (e) => e, this._limitTiers = gt(this._limit.applyLimitsTo ?? V), this._numericAllowed = e.numericAllowed ?? !0, this._baseMap = B(ft, e.namedEntities || null), this._externalMap = Object.create(null), this._inputMap = Object.create(null), this._totalExpansions = 0, this._expandedLength = 0, this._removeSet = new Set(e.remove && Array.isArray(e.remove) ? e.remove : []), this._leaveSet = new Set(e.leave && Array.isArray(e.leave) ? e.leave : []);
-		let t = vt(e.ncr);
-		this._ncrXmlVersion = t.xmlVersion, this._ncrOnLevel = t.onLevel, this._ncrNullLevel = t.nullLevel;
+		this._limit = e.limit || {}, this._maxTotalExpansions = this._limit.maxTotalExpansions || 0, this._maxExpandedLength = this._limit.maxExpandedLength || 0, this._postCheck = typeof e.postCheck == "function" ? e.postCheck : (e) => e, this._limitTiers = ht(this._limit.applyLimitsTo ?? V), this._numericAllowed = e.numericAllowed ?? !0, this._baseMap = B(dt, e.namedEntities || null), this._externalMap = Object.create(null), this._inputMap = Object.create(null), this._totalExpansions = 0, this._expandedLength = 0, this._removeSet = new Set(e.remove && Array.isArray(e.remove) ? e.remove : []), this._leaveSet = new Set(e.leave && Array.isArray(e.leave) ? e.leave : []);
+		let t = _t(e.ncr);
+		this._ncrXmlVersion = t.xmlVersion, this._ncrOnLevel = t.onLevel, this._ncrNullLevel = t.nullLevel, this._onExternalEntity = typeof e.onExternalEntity == "function" ? e.onExternalEntity : null, this._onInputEntity = typeof e.onInputEntity == "function" ? e.onInputEntity : null;
+	}
+	_applyRegistrationHook(e, t, n, r) {
+		if (!e) return !0;
+		let i = e(t, n);
+		if (i === z.BLOCK) return !1;
+		if (i === z.THROW) throw Error(`[EntityDecoder] Registration of ${r} entity "&${t};" was rejected by hook`);
+		return !0;
 	}
 	setExternalEntities(e) {
-		if (e) for (let t of Object.keys(e)) ht(t);
-		this._externalMap = B(e);
+		if (e) for (let t of Object.keys(e)) mt(t);
+		if (!this._onExternalEntity) {
+			this._externalMap = B(e);
+			return;
+		}
+		let t = B(e), n = Object.create(null);
+		for (let [e, r] of Object.entries(t)) this._applyRegistrationHook(this._onExternalEntity, e, r, "external") && (n[e] = r);
+		this._externalMap = n;
 	}
 	addExternalEntity(e, t) {
-		ht(e), typeof t == "string" && t.indexOf("&") === -1 && (this._externalMap[e] = t);
+		mt(e), typeof t == "string" && t.indexOf("&") === -1 && this._applyRegistrationHook(this._onExternalEntity, e, t, "external") && (this._externalMap[e] = t);
 	}
 	addInputEntities(e) {
-		this._totalExpansions = 0, this._expandedLength = 0, this._inputMap = B(e);
+		if (this._totalExpansions = 0, this._expandedLength = 0, !this._onInputEntity) {
+			this._inputMap = B(e);
+			return;
+		}
+		let t = B(e), n = Object.create(null);
+		for (let [e, r] of Object.entries(t)) this._applyRegistrationHook(this._onInputEntity, e, r, "input") && (n[e] = r);
+		this._inputMap = n;
 	}
 	reset() {
 		return this._inputMap = Object.create(null), this._totalExpansions = 0, this._expandedLength = 0, this;
@@ -1773,7 +1776,7 @@ var yt = class {
 		this._ncrXmlVersion = e === 1.1 ? 1.1 : 1;
 	}
 	decode(e) {
-		if (typeof e != "string" || e.length === 0) return e;
+		if (typeof e != "string" || e.length === 0 || e.indexOf("&") === -1) return e;
 		let t = e, n = [], r = e.length, i = 0, a = 0, o = this._maxTotalExpansions > 0, s = this._maxExpandedLength > 0, c = o || s;
 		for (; a < r;) {
 			if (e.charCodeAt(a) !== 38) {
@@ -1841,7 +1844,7 @@ var yt = class {
 		};
 	}
 	_classifyNCR(e) {
-		return e === 0 ? this._ncrNullLevel : e >= 55296 && e <= 57343 || this._ncrXmlVersion === 1 && e >= 1 && e <= 31 && !_t.has(e) ? W.remove : -1;
+		return e === 0 ? this._ncrNullLevel : e >= 55296 && e <= 57343 || this._ncrXmlVersion === 1 && e >= 1 && e <= 31 && !gt.has(e) ? W.remove : -1;
 	}
 	_applyNCRAction(e, t, n) {
 		switch (e) {
@@ -1860,7 +1863,7 @@ var yt = class {
 		let i = r === -1 ? this._ncrOnLevel : Math.max(this._ncrOnLevel, r);
 		return this._applyNCRAction(i, e, n);
 	}
-}, bt = (e) => I.includes(e) ? "__" + e : e, xt = {
+}, yt = (e) => Ie.includes(e) ? "__" + e : e, bt = {
 	preserveOrder: !1,
 	attributeNamePrefix: "@_",
 	attributesGroupName: !1,
@@ -1875,7 +1878,8 @@ var yt = class {
 	numberParseOptions: {
 		hex: !0,
 		leadingZeros: !0,
-		eNotation: !0
+		eNotation: !0,
+		unicode: !1
 	},
 	tagValueProcessor: function(e, t) {
 		return t;
@@ -1902,14 +1906,14 @@ var yt = class {
 	maxNestedTags: 100,
 	strictReservedNames: !0,
 	jPath: !0,
-	onDangerousProperty: bt
+	onDangerousProperty: yt
 };
-function St(e, t) {
+function xt(e, t) {
 	if (typeof e != "string") return;
 	let n = e.toLowerCase();
-	if (I.some((e) => n === e.toLowerCase()) || Re.some((e) => n === e.toLowerCase())) throw Error(`[SECURITY] Invalid ${t}: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
+	if (Ie.some((e) => n === e.toLowerCase()) || Le.some((e) => n === e.toLowerCase())) throw Error(`[SECURITY] Invalid ${t}: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
 }
-function Ct(e, t) {
+function St(e, t) {
 	return typeof e == "boolean" ? {
 		enabled: e,
 		maxEntitySize: 1e4,
@@ -1930,10 +1934,10 @@ function Ct(e, t) {
 		allowedTags: e.allowedTags ?? null,
 		tagFilter: e.tagFilter ?? null,
 		appliesTo: e.appliesTo ?? "all"
-	} : Ct(!0);
+	} : St(!0);
 }
-var wt = function(e) {
-	let t = Object.assign({}, xt, e), n = [
+var Ct = function(e) {
+	let t = Object.assign({}, bt, e), n = [
 		{
 			value: t.attributeNamePrefix,
 			name: "attributeNamePrefix"
@@ -1955,9 +1959,9 @@ var wt = function(e) {
 			name: "commentPropName"
 		}
 	];
-	for (let { value: e, name: t } of n) e && St(e, t);
-	return t.onDangerousProperty === null && (t.onDangerousProperty = bt), t.processEntities = Ct(t.processEntities, t.htmlEntities), t.unpairedTagsSet = new Set(t.unpairedTags), t.stopNodes && Array.isArray(t.stopNodes) && (t.stopNodes = t.stopNodes.map((e) => typeof e == "string" && e.startsWith("*.") ? ".." + e.substring(2) : e)), t;
-}, Tt = typeof Symbol == "function" ? Symbol("XML Node Metadata") : "@@xmlMetadata", G = class {
+	for (let { value: e, name: t } of n) e && xt(e, t);
+	return t.onDangerousProperty === null && (t.onDangerousProperty = yt), t.processEntities = St(t.processEntities, t.htmlEntities), t.unpairedTagsSet = new Set(t.unpairedTags), t.stopNodes && Array.isArray(t.stopNodes) && (t.stopNodes = t.stopNodes.map((e) => typeof e == "string" && e.startsWith("*.") ? ".." + e.substring(2) : e)), t;
+}, wt = typeof Symbol == "function" ? Symbol("XML Node Metadata") : "@@xmlMetadata", G = class {
 	constructor(e) {
 		this.tagname = e, this.child = [], this[":@"] = Object.create(null);
 	}
@@ -1968,12 +1972,12 @@ var wt = function(e) {
 		e.tagname === "__proto__" && (e.tagname = "#__proto__"), e[":@"] && Object.keys(e[":@"]).length > 0 ? this.child.push({
 			[e.tagname]: e.child,
 			":@": e[":@"]
-		}) : this.child.push({ [e.tagname]: e.child }), t !== void 0 && (this.child[this.child.length - 1][Tt] = { startIndex: t });
+		}) : this.child.push({ [e.tagname]: e.child }), t !== void 0 && (this.child[this.child.length - 1][wt] = { startIndex: t });
 	}
 	static getMetaDataSymbol() {
-		return Tt;
+		return wt;
 	}
-}, Et = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�", Dt = Et + "\\-\\.\\d·̀-ͯ‿-⁀", Ot = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�𐀀-󯿿", kt = Ot + "\\-\\.\\d·̀-ͯ҇‿-⁀", At = (e, t, n = "") => {
+}, Tt = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�", Et = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�\\-\\.\\d·̀-ͯ‿-⁀", Dt = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�𐀀-󯿿", Ot = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�𐀀-󯿿\\-\\.\\d·̀-ͯ҇‿-⁀", K = (e, t, n = "") => {
 	let r = `[${e.replace(":", "")}][${t.replace(":", "")}]*`;
 	return {
 		name: RegExp(`^[${e}][${t}]*$`, n),
@@ -1982,7 +1986,24 @@ var wt = function(e) {
 		nmToken: RegExp(`^[${t}]+$`, n),
 		nmTokens: RegExp(`^[${t}]+(?:\\s+[${t}]+)*$`, n)
 	};
-}, jt = At(Et, Dt), Mt = At(Ot, kt, "u"), Nt = (e = "1.0") => e === "1.1" ? Mt : jt, K = (e, { xmlVersion: t = "1.0" } = {}) => Nt(t).qName.test(e), Pt = class {
+}, kt = K(Tt, Et), At = K(Dt, Ot, "u"), jt = K(":A-Za-z_", ":A-Za-z_\\-\\.\\d"), Mt = (e = "1.0", t = !1) => t ? jt : e === "1.1" ? At : kt, Nt = (e, { xmlVersion: t = "1.0", asciiOnly: n = !1 } = {}) => Mt(t, n).qName.test(e), Pt = [
+	"name",
+	"ncName",
+	"qName",
+	"nmToken",
+	"nmTokens"
+], Ft = (e, { xmlVersion: t = "1.0", asciiOnly: n = !1, maxCacheSize: r = 2048 } = {}) => {
+	if (!Pt.includes(e)) throw TypeError(`Unknown production "${e}". Must be one of: ${Pt.join(", ")}`);
+	let i = Mt(t, n)[e], a = /* @__PURE__ */ new Map(), o = (e) => {
+		let t = a.get(e);
+		if (t !== void 0) return t;
+		let n = i.test(e);
+		return a.size < r && a.set(e, n), n;
+	};
+	return o.reset = () => {
+		a = /* @__PURE__ */ new Map();
+	}, o;
+}, It = class {
 	constructor(e, t) {
 		this.suppressValidationErr = !e, this.options = e, this.xmlVersion = t || 1;
 	}
@@ -2074,7 +2095,7 @@ var wt = function(e) {
 		let n = t;
 		for (; t < e.length && !/\s/.test(e[t]);) t++;
 		let r = e.substring(n, t);
-		if (!this.suppressValidationErr && !K(r, { xmlVersion: this.xmlVersion })) throw Error(`Invalid element name: "${r}"`);
+		if (!this.suppressValidationErr && !Nt(r, { xmlVersion: this.xmlVersion })) throw Error(`Invalid element name: "${r}"`);
 		t = q(e, t);
 		let i = "";
 		if (e[t] === "E" && J(e, "MPTY", t)) t += 4;
@@ -2147,34 +2168,181 @@ function J(e, t, n) {
 	return !0;
 }
 function Y(e, t) {
-	if (K(e, { xmlVersion: t })) return e;
+	if (Nt(e, { xmlVersion: t })) return e;
 	throw Error(`Invalid entity name ${e}`);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/strnum@2.3.0/node_modules/strnum/strnum.js
-var Ft = /^[-+]?0x[a-fA-F0-9]+$/, It = /^0b[01]+$/, Lt = /^0o[0-7]+$/, Rt = /^([\-\+])?(0*)([0-9]*(\.[0-9]*)?)$/, zt = {
+//#region ../../node_modules/.pnpm/anynum@1.0.1/node_modules/anynum/digitTable.js
+var Lt = [
+	48,
+	1632,
+	1776,
+	2406,
+	2534,
+	2662,
+	2790,
+	2918,
+	3046,
+	3174,
+	3302,
+	3430,
+	3558,
+	3664,
+	3792,
+	3872,
+	4160,
+	4240,
+	6112,
+	6160,
+	6470,
+	6608,
+	6784,
+	6800,
+	6992,
+	7088,
+	7232,
+	7248,
+	65296,
+	120782,
+	120792,
+	120802,
+	120812,
+	120822,
+	66720,
+	68912,
+	69734,
+	69872,
+	69942,
+	70096,
+	70384,
+	70736,
+	70864,
+	71248,
+	71360,
+	71472,
+	71904,
+	72016,
+	72688,
+	72784,
+	73040,
+	73120,
+	73552,
+	92768,
+	92864,
+	93008,
+	123200,
+	123632,
+	124144,
+	125264,
+	130032
+], Rt = /* @__PURE__ */ new Map(), zt = 65535, Bt = 1632, Vt = (/* @__PURE__ */ new Uint8Array(63904)).fill(255);
+for (let e of Lt) for (let t = 0; t < 10; t++) {
+	let n = e + t;
+	n <= zt ? Vt[n - Bt] = t : Rt.set(n, t);
+}
+//#endregion
+//#region ../../node_modules/.pnpm/anynum@1.0.1/node_modules/anynum/anynum.js
+var Ht = 48, Ut = 57, Wt = 45, X = /* @__PURE__ */ new Set([
+	8722,
+	65293,
+	65123
+]);
+function Gt(e) {
+	if (typeof e != "string") return e;
+	let t = e.length;
+	if (t === 0) return e;
+	let n = -1;
+	for (let r = 0; r < t; r++) {
+		let i = e.charCodeAt(r);
+		if (!(i >= Ht && i <= Ut || i === Wt)) {
+			if (i < 1632) {
+				if (X.has(i)) {
+					n = r;
+					break;
+				}
+				continue;
+			}
+			if (i >= 55296 && i <= 56319) {
+				if (r + 1 < t) {
+					let t = e.charCodeAt(r + 1);
+					if (t >= 56320 && t <= 57343) {
+						let e = 65536 + (i - 55296 << 10) + (t - 56320);
+						if (Rt.has(e)) {
+							n = r;
+							break;
+						}
+					}
+				}
+				continue;
+			}
+			if (Vt[i - 1632] !== 255 || X.has(i)) {
+				n = r;
+				break;
+			}
+		}
+	}
+	if (n === -1) return e;
+	let r = [];
+	n > 0 && r.push(e.slice(0, n));
+	for (let i = n; i < t; i++) {
+		let n = e.charCodeAt(i);
+		if (n >= Ht && n <= Ut || n === Wt) {
+			r.push(e[i]);
+			continue;
+		}
+		if (n < 1632) {
+			r.push(X.has(n) ? "-" : e[i]);
+			continue;
+		}
+		if (n >= 55296 && n <= 56319) {
+			if (i + 1 < t) {
+				let t = e.charCodeAt(i + 1);
+				if (t >= 56320 && t <= 57343) {
+					let e = 65536 + (n - 55296 << 10) + (t - 56320), a = Rt.get(e);
+					if (a !== void 0) {
+						r.push(String.fromCharCode(a + 48)), i++;
+						continue;
+					}
+				}
+			}
+			r.push(e[i]);
+			continue;
+		}
+		if (X.has(n)) {
+			r.push("-");
+			continue;
+		}
+		let a = Vt[n - Bt];
+		r.push(a === 255 ? e[i] : String.fromCharCode(a + 48));
+	}
+	return r.join("");
+}
+//#endregion
+//#region ../../node_modules/.pnpm/strnum@2.4.1/node_modules/strnum/strnum.js
+var Kt = /^[-+]?0x[a-fA-F0-9]+$/, qt = /^0b[01]+$/, Jt = /^0o[0-7]+$/, Yt = /^([\-\+])?(0*)([0-9]*(\.[0-9]*)?)$/, Xt = {
 	hex: !0,
 	binary: !1,
 	octal: !1,
 	leadingZeros: !0,
 	decimalPoint: ".",
 	eNotation: !0,
-	infinity: "original"
+	infinity: "original",
+	unicode: !1
 };
-function Bt(e, t = {}) {
-	if (t = Object.assign({}, zt, t), !e || typeof e != "string") return e;
+function Zt(e, t = {}) {
+	if (t = Object.assign({}, Xt, t), !e || typeof e != "string") return e;
 	let n = e.trim();
 	if (n.length === 0 || t.skipLike !== void 0 && t.skipLike.test(n)) return e;
-	if (n === "0") return 0;
-	if (t.hex && Ft.test(n)) return X(n, 16);
-	if (t.binary && It.test(n)) return X(n, 2);
-	if (t.octal && Lt.test(n)) return X(n, 8);
-	if (!isFinite(n)) return Wt(e, Number(n), t);
-	if (n.includes("e") || n.includes("E")) return Ht(e, n, t);
-	{
-		let r = Rt.exec(n);
+	if (n === "0" || t.unicode && (n = Gt(n), n === "0")) return 0;
+	if (t.hex && Kt.test(n)) return tn(n, 16);
+	if (t.binary && qt.test(n)) return tn(n, 2);
+	if (t.octal && Jt.test(n)) return tn(n, 8);
+	if (!isFinite(n)) return nn(e, Number(n), t);
+	if (n.includes("e") || n.includes("E")) return $t(e, n, t);
+	{
+		let r = Yt.exec(n);
 		if (r) {
-			let i = r[1] || "", a = r[2], o = Ut(r[3]), s = i ? e[a.length + 1] === "." : e[a.length] === ".";
+			let i = r[1] || "", a = r[2], o = en(r[3]), s = i ? e[a.length + 1] === "." : e[a.length] === ".";
 			if (!t.leadingZeros && (a.length > 1 || a.length === 1 && !s)) return e;
 			{
 				let r = Number(n), s = String(r);
@@ -2187,26 +2355,26 @@ function Bt(e, t = {}) {
 		} else return e;
 	}
 }
-var Vt = /^([-+])?(0*)(\d*(\.\d*)?[eE][-\+]?\d+)$/;
-function Ht(e, t, n) {
+var Qt = /^([-+])?(0*)(\d*(\.\d*)?[eE][-\+]?\d+)$/;
+function $t(e, t, n) {
 	if (!n.eNotation) return e;
-	let r = t.match(Vt);
+	let r = t.match(Qt);
 	if (r) {
 		let i = r[1] || "", a = r[3].indexOf("e") === -1 ? "E" : "e", o = r[2], s = i ? e[o.length + 1] === a : e[o.length] === a;
 		return o.length > 1 && s ? e : o.length === 1 && (r[3].startsWith(`.${a}`) || r[3][0] === a) ? Number(t) : o.length > 0 ? n.leadingZeros && !s ? (t = (r[1] || "") + r[3], Number(t)) : e : Number(t);
 	} else return e;
 }
-function Ut(e) {
+function en(e) {
 	return e && e.indexOf(".") !== -1 ? (e = e.replace(/0+$/, ""), e === "." ? e = "0" : e[0] === "." ? e = "0" + e : e[e.length - 1] === "." && (e = e.substring(0, e.length - 1)), e) : e;
 }
-function X(e, t) {
+function tn(e, t) {
 	let n = e.trim();
 	if ((t === 2 || t === 8) && (e = n.substring(2)), parseInt) return parseInt(e, t);
 	if (Number.parseInt) return Number.parseInt(e, t);
 	if (window && window.parseInt) return window.parseInt(e, t);
 	throw Error("parseInt, Number.parseInt, window.parseInt are not supported");
 }
-function Wt(e, t, n) {
+function nn(e, t, n) {
 	let r = t === Infinity;
 	switch (n.infinity.toLowerCase()) {
 		case "null": return null;
@@ -2216,15 +2384,15 @@ function Wt(e, t, n) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/fast-xml-parser@5.8.0/node_modules/fast-xml-parser/src/ignoreAttributes.js
-function Gt(e) {
+//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/ignoreAttributes.js
+function rn(e) {
 	return typeof e == "function" ? e : Array.isArray(e) ? (t) => {
 		for (let n of e) if (typeof n == "string" && t === n || n instanceof RegExp && n.test(t)) return !0;
 	} : () => !1;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/path-expression-matcher@1.5.0/node_modules/path-expression-matcher/src/Expression.js
-var Z = class {
+//#region ../../node_modules/.pnpm/path-expression-matcher@1.6.2/node_modules/path-expression-matcher/src/Expression.js
+var an = class {
 	constructor(e, t = {}, n) {
 		this.pattern = e, this.separator = t.separator || ".", this.segments = this._parse(e), this.data = n, this._hasDeepWildcard = this.segments.some((e) => e.type === "deep-wildcard"), this._hasAttributeCondition = this.segments.some((e) => e.attrName !== void 0), this._hasPositionSelector = this.segments.some((e) => e.position !== void 0);
 	}
@@ -2280,14 +2448,21 @@ var Z = class {
 	toString() {
 		return this.pattern;
 	}
-}, Kt = class {
+}, on = class {
 	constructor() {
-		this._byDepthAndTag = /* @__PURE__ */ new Map(), this._wildcardByDepth = /* @__PURE__ */ new Map(), this._deepWildcards = [], this._patterns = /* @__PURE__ */ new Set(), this._sealed = !1;
+		this._byDepthAndTag = /* @__PURE__ */ new Map(), this._wildcardByDepth = /* @__PURE__ */ new Map(), this._deepWildcards = [], this._deepByTerminalTag = /* @__PURE__ */ new Map(), this._patterns = /* @__PURE__ */ new Set(), this._sealed = !1;
 	}
 	add(e) {
 		if (this._sealed) throw TypeError("ExpressionSet is sealed. Create a new ExpressionSet to add more expressions.");
 		if (this._patterns.has(e.pattern)) return this;
-		if (this._patterns.add(e.pattern), e.hasDeepWildcard()) return this._deepWildcards.push(e), this;
+		if (this._patterns.add(e.pattern), e.hasDeepWildcard()) {
+			let t = e.segments[e.segments.length - 1];
+			if (t && t.type !== "deep-wildcard" && t.tag !== "*") {
+				let n = t.tag;
+				this._deepByTerminalTag.has(n) || this._deepByTerminalTag.set(n, []), this._deepByTerminalTag.get(n).push(e);
+			} else this._deepWildcards.push(e);
+			return this;
+		}
 		let t = e.length, n = e.segments[e.segments.length - 1]?.tag;
 		if (!n || n === "*") this._wildcardByDepth.has(t) || this._wildcardByDepth.set(t, []), this._wildcardByDepth.get(t).push(e);
 		else {
@@ -2316,18 +2491,22 @@ var Z = class {
 		return this.findMatch(e) !== null;
 	}
 	findMatch(e) {
-		let t = e.getDepth(), n = `${t}:${e.getCurrentTag()}`, r = this._byDepthAndTag.get(n);
-		if (r) {
-			for (let t = 0; t < r.length; t++) if (e.matches(r[t])) return r[t];
-		}
-		let i = this._wildcardByDepth.get(t);
+		let t = e.getDepth(), n = e.getCurrentTag(), r = `${t}:${n}`, i = this._byDepthAndTag.get(r);
 		if (i) {
 			for (let t = 0; t < i.length; t++) if (e.matches(i[t])) return i[t];
 		}
+		let a = this._wildcardByDepth.get(t);
+		if (a) {
+			for (let t = 0; t < a.length; t++) if (e.matches(a[t])) return a[t];
+		}
+		let o = this._deepByTerminalTag.get(n);
+		if (o) {
+			for (let t = 0; t < o.length; t++) if (e.matches(o[t])) return o[t];
+		}
 		for (let t = 0; t < this._deepWildcards.length; t++) if (e.matches(this._deepWildcards[t])) return this._deepWildcards[t];
 		return null;
 	}
-}, qt = class {
+}, sn = class {
 	constructor(e) {
 		this._matcher = e;
 	}
@@ -2352,6 +2531,12 @@ var Z = class {
 		let n = t[t.length - 1];
 		return n.values !== void 0 && e in n.values;
 	}
+	getAnyParentAttr(e) {
+		return this._matcher.getAnyParentAttr(e);
+	}
+	hasAnyParentAttr(e) {
+		return this._matcher.hasAnyParentAttr(e);
+	}
 	getPosition() {
 		let e = this._matcher.path;
 		return e.length === 0 ? -1 : e[e.length - 1].position ?? 0;
@@ -2378,29 +2563,43 @@ var Z = class {
 	matchesAny(e) {
 		return e.matchesAny(this._matcher);
 	}
-}, Jt = class {
+}, cn = class {
 	constructor(e = {}) {
-		this.separator = e.separator || ".", this.path = [], this.siblingStacks = [], this._pathStringCache = null, this._view = new qt(this);
+		this.separator = e.separator || ".", this.path = [], this.siblingStacks = [], this._pathStringCache = null, this._view = new sn(this), this._keptAttrs = [];
 	}
-	push(e, t = null, n = null) {
+	push(e, t = null, n = null, r = null) {
 		this._pathStringCache = null, this.path.length > 0 && (this.path[this.path.length - 1].values = void 0);
-		let r = this.path.length;
-		this.siblingStacks[r] || (this.siblingStacks[r] = /* @__PURE__ */ new Map());
-		let i = this.siblingStacks[r], a = n ? `${n}:${e}` : e, o = i.get(a) || 0, s = 0;
-		for (let e of i.values()) s += e;
-		i.set(a, o + 1);
-		let c = {
+		let i = this.path.length, a = this.siblingStacks[i];
+		a || (a = {
+			counts: /* @__PURE__ */ new Map(),
+			total: 0
+		}, this.siblingStacks[i] = a);
+		let o = n ? `${n}:${e}` : e, s = a.counts.get(o) || 0, c = a.total;
+		a.counts.set(o, s + 1), a.total++;
+		let l = {
 			tag: e,
-			position: s,
-			counter: o
+			position: c,
+			counter: s
 		};
-		n != null && (c.namespace = n), t != null && (c.values = t), this.path.push(c);
+		n != null && (l.namespace = n), t != null && (l.values = t), this.path.push(l);
+		let u = this.path.length, d = r === null ? null : r.keep;
+		if (d != null && d.length > 0 && t) for (let e = 0; e < d.length; e++) {
+			let n = d[e];
+			t[n] !== void 0 && this._keptAttrs.push({
+				depth: u,
+				name: n,
+				value: t[n]
+			});
+		}
 	}
 	pop() {
 		if (this.path.length === 0) return;
 		this._pathStringCache = null;
 		let e = this.path.pop();
-		return this.siblingStacks.length > this.path.length + 1 && (this.siblingStacks.length = this.path.length + 1), e;
+		this.siblingStacks.length > this.path.length + 1 && (this.siblingStacks.length = this.path.length + 1);
+		let t = this.path.length + 1;
+		for (; this._keptAttrs.length > 0 && this._keptAttrs[this._keptAttrs.length - 1].depth >= t;) this._keptAttrs.pop();
+		return e;
 	}
 	updateCurrent(e) {
 		if (this.path.length > 0) {
@@ -2422,6 +2621,15 @@ var Z = class {
 		let t = this.path[this.path.length - 1];
 		return t.values !== void 0 && e in t.values;
 	}
+	getAnyParentAttr(e) {
+		let t = this._keptAttrs;
+		for (let n = t.length - 1; n >= 0; n--) if (t[n].name === e) return t[n].value;
+	}
+	hasAnyParentAttr(e) {
+		let t = this._keptAttrs;
+		for (let n = t.length - 1; n >= 0; n--) if (t[n].name === e) return !0;
+		return !1;
+	}
 	getPosition() {
 		return this.path.length === 0 ? -1 : this.path[this.path.length - 1].position ?? 0;
 	}
@@ -2447,7 +2655,7 @@ var Z = class {
 		return this.path.map((e) => e.tag);
 	}
 	reset() {
-		this._pathStringCache = null, this.path = [], this.siblingStacks = [];
+		this._pathStringCache = null, this.path = [], this.siblingStacks = [], this._keptAttrs = [];
 	}
 	matches(e) {
 		let t = e.segments;
@@ -2492,19 +2700,660 @@ var Z = class {
 	snapshot() {
 		return {
 			path: this.path.map((e) => ({ ...e })),
-			siblingStacks: this.siblingStacks.map((e) => new Map(e))
+			siblingStacks: this.siblingStacks.map((e) => e && {
+				counts: new Map(e.counts),
+				total: e.total
+			}),
+			keptAttrs: this._keptAttrs.map((e) => ({ ...e }))
 		};
 	}
 	restore(e) {
-		this._pathStringCache = null, this.path = e.path.map((e) => ({ ...e })), this.siblingStacks = e.siblingStacks.map((e) => new Map(e));
+		this._pathStringCache = null, this.path = e.path.map((e) => ({ ...e })), this.siblingStacks = e.siblingStacks.map((e) => e && {
+			counts: new Map(e.counts),
+			total: e.total
+		}), this._keptAttrs = (e.keptAttrs || []).map((e) => ({ ...e }));
 	}
 	readOnly() {
 		return this._view;
 	}
-};
+}, ln = [
+	{
+		id: "html-script-open",
+		description: "<script opening tag",
+		pattern: /<script[\s>/]/i
+	},
+	{
+		id: "html-script-close",
+		description: "<\/script closing tag",
+		pattern: /<\/script[\s>]/i
+	},
+	{
+		id: "html-javascript-protocol",
+		description: "javascript: URI scheme (with optional whitespace/encoding)",
+		pattern: /j[\t\n\r ]*a[\t\n\r ]*v[\t\n\r ]*a[\t\n\r ]*s[\t\n\r ]*c[\t\n\r ]*r[\t\n\r ]*i[\t\n\r ]*p[\t\n\r ]*t[\t\n\r ]*:/i
+	},
+	{
+		id: "html-vbscript-protocol",
+		description: "vbscript: URI scheme",
+		pattern: /vbscript[\t\n\r ]*:/i
+	},
+	{
+		id: "html-data-html",
+		description: "data:text/html URI — can execute scripts in browsers",
+		pattern: /data[\t\n\r ]*:[\t\n\r ]*text\/html/i
+	},
+	{
+		id: "html-data-xhtml",
+		description: "data:application/xhtml+xml URI",
+		pattern: /data[\t\n\r ]*:[\t\n\r ]*application\/xhtml/i
+	},
+	{
+		id: "html-data-svg",
+		description: "data:image/svg+xml URI — can execute scripts",
+		pattern: /data[\t\n\r ]*:[\t\n\r ]*image\/svg\+xml/i
+	},
+	{
+		id: "html-inline-event-handler",
+		description: "Inline event handler attributes: onclick=, onerror=, onload=, etc.",
+		pattern: /\bon\w{1,30}\s*=/i
+	},
+	{
+		id: "html-entity-obfuscated-script",
+		description: "HTML-entity-encoded <script (e.g. &#x3C;script or &lt;script)",
+		pattern: /(?:&#x0*3[Cc];?|&#0*60;?|&lt;)\s*script/i
+	},
+	{
+		id: "html-entity-obfuscated-javascript",
+		description: "HTML-entity-encoded javascript: (partial — catches common &#106; or &#x6a; for \"j\")",
+		pattern: /(?:&#x0*6[Aa];?|&#0*106;?)\s*(?:&#x0*61;?|a)[\s\S]{0,80}script\s*:/i
+	},
+	{
+		id: "html-style-expression",
+		description: "CSS expression() — IE-era code execution in style attributes",
+		pattern: /style[\s\S]{0,20}expression\s*\(/i
+	},
+	{
+		id: "html-object-embed",
+		description: "<object or <embed tags that can load active content",
+		pattern: /<(?:object|embed)[\s>/]/i
+	},
+	{
+		id: "html-base-tag",
+		description: "<base href= — can hijack all relative URLs on a page",
+		pattern: /<base[\s>]/i
+	},
+	{
+		id: "html-meta-refresh",
+		description: "<meta http-equiv=\"refresh\" — can redirect users",
+		pattern: /<meta[\s\S]{0,40}http-equiv[\s\S]{0,20}refresh/i
+	},
+	{
+		id: "html-srcdoc",
+		description: "srcdoc= attribute on iframes — embeds HTML that can run scripts",
+		pattern: /srcdoc\s*=/i
+	},
+	{
+		id: "html-iframe",
+		description: "<iframe tag",
+		pattern: /<iframe[\s>/]/i
+	},
+	{
+		id: "html-form",
+		description: "<form tag — can be used for phishing / credential harvesting injection",
+		pattern: /<form[\s>/]/i
+	}
+], un = [
+	{
+		id: "xml-cdata-injection",
+		description: "CDATA section injection: <![CDATA[ breaks out of text node context",
+		pattern: /<!\[CDATA\[/i
+	},
+	{
+		id: "xml-cdata-close",
+		description: "CDATA close sequence: ]]> can terminate an enclosing CDATA section",
+		pattern: /\]\]>/
+	},
+	{
+		id: "xml-processing-instruction",
+		description: "XML processing instruction: <?xml-stylesheet or <?php etc.",
+		pattern: /<\?(?:xml[\- ]|php|asp)/i
+	},
+	{
+		id: "xml-doctype-injection",
+		description: "DOCTYPE declaration embedded in content — can define entities",
+		pattern: /<!DOCTYPE(?:[\s[]|$)/i
+	},
+	{
+		id: "xml-entity-system",
+		description: "SYSTEM keyword — used in external entity declarations (XXE)",
+		pattern: /\bSYSTEM\s+["']/i
+	},
+	{
+		id: "xml-entity-public",
+		description: "PUBLIC keyword — used in external entity declarations (XXE)",
+		pattern: /\bPUBLIC\s+["']/i
+	},
+	{
+		id: "xml-entity-declaration",
+		description: "<!ENTITY declaration — defines entities, potential XXE or entity expansion",
+		pattern: /<!ENTITY[\s%]/i
+	},
+	{
+		id: "xml-billion-laughs",
+		description: "Entity reference chaining / billion laughs: repeated &eX; style references",
+		pattern: /(?:&\w{1,20};){3,}/
+	},
+	{
+		id: "xml-namespace-confusion",
+		description: "xmlns: attribute injection — can redefine namespaces to confuse parsers",
+		pattern: /\bxmlns\s*(?::\w{1,40})?\s*=/i
+	},
+	{
+		id: "xml-comment-injection",
+		description: "<!-- comment injection — can hide content from some parsers",
+		pattern: /<!--/
+	},
+	{
+		id: "xml-comment-close",
+		description: "--> closes an enclosing XML comment",
+		pattern: /-->/
+	},
+	{
+		id: "xml-pi-close",
+		description: "?> closes an enclosing processing instruction",
+		pattern: /\?>/
+	}
+], dn = [
+	{
+		id: "svg-script-element",
+		description: "<script element inside SVG executes JavaScript",
+		pattern: /<script[\s>/]/i
+	},
+	{
+		id: "svg-xlink-href-javascript",
+		description: "xlink:href with javascript: — classic SVG XSS via <a> or <use>",
+		pattern: /xlink\s*:\s*href\s*=\s*["']?\s*javascript\s*:/i
+	},
+	{
+		id: "svg-href-javascript",
+		description: "href= with javascript: in SVG context (<a>, <animate>, etc.)",
+		pattern: /href\s*=\s*["']?\s*javascript\s*:/i
+	},
+	{
+		id: "svg-foreignobject",
+		description: "<foreignObject embeds HTML inside SVG — can execute scripts",
+		pattern: /<foreignObject[\s>/]/i
+	},
+	{
+		id: "svg-use-external",
+		description: "<use xlink:href or href pointing to external resource (non-fragment URL)",
+		pattern: /<use[\s\S]{0,60}(?:xlink\s*:\s*)?href\s*=\s*(?:["'][^#]|[^"'#\s>])/i
+	},
+	{
+		id: "svg-animate-href",
+		description: "<animate attributeName=\"href\" — can dynamically change href to javascript:",
+		pattern: /<animate[\s\S]{0,80}attributeName\s*=\s*["'][\s]*href["']/i
+	},
+	{
+		id: "svg-animate-xlinkhref",
+		description: "<animate attributeName=\"xlink:href\"",
+		pattern: /<animate[\s\S]{0,80}attributeName\s*=\s*["'][\s]*xlink\s*:\s*href["']/i
+	},
+	{
+		id: "svg-set-javascript",
+		description: "<set to=\"javascript:...\" — sets an attribute to a javascript: URI",
+		pattern: /<set[\s\S]{0,80}to\s*=\s*["']?\s*javascript\s*:/i
+	},
+	{
+		id: "svg-event-handler",
+		description: "SVG-specific event handler attributes: onload=, onerror=, onactivate=, etc.",
+		pattern: /\bon(?:load|error|activate|begin|end|repeat|focus|blur|click|mouse\w{1,20}|key\w{1,20})\s*=/i
+	},
+	{
+		id: "svg-handler-generic",
+		description: "Generic on* handler catch-all for SVG attributes",
+		pattern: /\bon\w{1,30}\s*=/i
+	},
+	{
+		id: "svg-filter-feimage",
+		description: "<feImage href= — filter primitive that can load external resources",
+		pattern: /<feImage[\s\S]{0,80}(?:xlink\s*:\s*)?href\s*=/i
+	},
+	{
+		id: "svg-image-external",
+		description: "<image xlink:href with http/https or javascript protocol",
+		pattern: /<image[\s\S]{0,80}(?:xlink\s*:\s*)?href\s*=\s*["']?\s*(?:https?|javascript)\s*:/i
+	},
+	{
+		id: "svg-style-javascript",
+		description: "style= attribute containing javascript: (e.g. background:url(javascript:...))",
+		pattern: /style\s*=[\s\S]{0,60}javascript\s*:/i
+	}
+], fn = [
+	{
+		id: "sql-block-comment-open",
+		description: "SQL block comment open: /* ... */ — unusual in legitimate user text",
+		pattern: /\/\*/
+	},
+	{
+		id: "sql-union-select",
+		description: "UNION SELECT — most common SQL injection aggregation attack",
+		pattern: /\bUNION\s{1,20}(?:ALL\s{1,20})?SELECT\b/i
+	},
+	{
+		id: "sql-drop-table",
+		description: "DROP TABLE — destructive DDL injection",
+		pattern: /\bDROP\s{1,20}TABLE\b/i
+	},
+	{
+		id: "sql-drop-database",
+		description: "DROP DATABASE — destructive DDL injection",
+		pattern: /\bDROP\s{1,20}DATABASE\b/i
+	},
+	{
+		id: "sql-insert-into",
+		description: "INSERT INTO — data injection",
+		pattern: /\bINSERT\s{1,20}INTO\b/i
+	},
+	{
+		id: "sql-delete-from",
+		description: "DELETE FROM — data deletion injection",
+		pattern: /\bDELETE\s{1,20}FROM\b/i
+	},
+	{
+		id: "sql-update-set",
+		description: "UPDATE ... SET — data modification injection",
+		pattern: /\bUPDATE\b[\s\S]{1,60}\bSET\b/i
+	},
+	{
+		id: "sql-exec-xp",
+		description: "EXEC xp_ — MSSQL extended stored procedure execution",
+		pattern: /\bEXEC(?:UTE)?\s{1,20}xp_/i
+	},
+	{
+		id: "sql-tautology-string",
+		description: "Classic string tautology: ' OR '1'='1 or \" OR \"1\"=\"1\"",
+		pattern: /'\s{0,10}OR\s{0,10}'[^']{0,20}'\s*=\s*'[^']{0,20}/i
+	},
+	{
+		id: "sql-tautology-numeric",
+		description: "Numeric tautology: OR 1=1",
+		pattern: /\bOR\s{1,10}1\s*=\s*1\b/i
+	},
+	{
+		id: "sql-always-true-zero",
+		description: "Numeric tautology: OR 0=0",
+		pattern: /\bOR\s{1,10}0\s*=\s*0\b/i
+	},
+	{
+		id: "sql-sleep-benchmark",
+		description: "Time-based blind injection: SLEEP() or BENCHMARK()",
+		pattern: /\b(?:SLEEP|BENCHMARK)\s*\(/i
+	},
+	{
+		id: "sql-waitfor-delay",
+		description: "MSSQL time-based blind injection: WAITFOR DELAY",
+		pattern: /\bWAITFOR\s{1,20}DELAY\b/i
+	},
+	{
+		id: "sql-char-function",
+		description: "CHAR() function — used to obfuscate injected strings",
+		pattern: /\bCHAR\s*\(\s*\d{1,3}/i
+	},
+	{
+		id: "sql-information-schema",
+		description: "INFORMATION_SCHEMA — reconnaissance query for table/column enumeration",
+		pattern: /\bINFORMATION_SCHEMA\b/i
+	}
+], pn = [
+	{
+		id: "shell-path-traversal-unix",
+		description: "Unix path traversal: ../  — climbing the directory tree",
+		pattern: /\.\.\//
+	},
+	{
+		id: "shell-path-traversal-windows",
+		description: "Windows path traversal: ..\\ — climbing the directory tree",
+		pattern: /\.\.\\/
+	},
+	{
+		id: "shell-path-traversal-encoded",
+		description: "URL-encoded path traversal: %2e%2e or %2f variants",
+		pattern: /%2e%2e|%2f\.\.|\.\.%2f/i
+	},
+	{
+		id: "shell-null-byte",
+		description: "Null byte injection: \\x00 or %00 — truncates strings in C-backed functions",
+		pattern: /\x00|%00/
+	},
+	{
+		id: "shell-semicolon",
+		description: "Semicolon command separator: cmd1; cmd2",
+		pattern: /;/
+	},
+	{
+		id: "shell-pipe",
+		description: "Pipe operator: cmd1 | cmd2",
+		pattern: /\|/
+	},
+	{
+		id: "shell-and-operator",
+		description: "AND operator: cmd1 && cmd2",
+		pattern: /&&/
+	},
+	{
+		id: "shell-or-operator",
+		description: "OR operator: cmd1 || cmd2",
+		pattern: /\|\|/
+	},
+	{
+		id: "shell-backtick",
+		description: "Backtick command substitution: `cmd`",
+		pattern: /`/
+	},
+	{
+		id: "shell-dollar-paren",
+		description: "Dollar-paren command substitution: $(cmd)",
+		pattern: /\$\(/
+	},
+	{
+		id: "shell-dollar-brace",
+		description: "Dollar-brace variable expansion: ${var} — can be abused for injection",
+		pattern: /\$\{/
+	},
+	{
+		id: "shell-redirect-out",
+		description: "Output redirection: cmd > file or cmd >> file",
+		pattern: />{1,2}/
+	},
+	{
+		id: "shell-redirect-in",
+		description: "Input redirection: cmd < file",
+		pattern: /</
+	},
+	{
+		id: "shell-newline-injection",
+		description: "Newline injection: \\n or \\r — can inject new shell commands",
+		pattern: /[\n\r]/
+	},
+	{
+		id: "shell-glob-star",
+		description: "Glob expansion: * or ? — can expand to unintended files",
+		pattern: /[/\\][*?]/
+	},
+	{
+		id: "shell-absolute-root",
+		description: "Absolute root path injection: string starting with / or \\ (Windows UNC)",
+		pattern: /^(?:\/|\\\\)/
+	},
+	{
+		id: "shell-windows-drive",
+		description: "Windows drive letter path injection: C:\\ or D:/",
+		pattern: /^[a-zA-Z]:[/\\]/
+	},
+	{
+		id: "shell-curl-wget",
+		description: "curl/wget with URL or flags — can exfiltrate data or download payloads",
+		pattern: /\b(?:curl|wget)\s+(?:https?:\/\/|ftp:\/\/|-)/i
+	}
+], mn = [
+	{
+		id: "redos-nested-quantifier-plus",
+		description: "Nested + quantifier inside a group with outer quantifier: (a+)+, (.+b)*, etc.",
+		pattern: /\([^)]*\+[^)]*\)[+*]/
+	},
+	{
+		id: "redos-nested-quantifier-star",
+		description: "Nested * quantifier: (a*)* or (a*)+ — catastrophic backtracking",
+		pattern: /\([^)]*\*[^)]*\)[*+]/
+	},
+	{
+		id: "redos-nested-groups",
+		description: "Doubly nested quantified groups: ((a+)+) — guaranteed catastrophic",
+		pattern: /\(\([^)]{0,40}\)[+*]\)[+*]/
+	},
+	{
+		id: "redos-alternation-overlap",
+		description: "Overlapping alternation under quantifier: (a|a)+ — ambiguous NFA paths",
+		pattern: /\(([^|()]{1,20})\|(?:\1)(?:\|[^|()]{1,20}){0,5}\)[+*?]{1,2}/
+	},
+	{
+		id: "redos-star-plus-concat",
+		description: "(x*x)+ pattern — triggers super-linear backtracking",
+		pattern: /\([^)]{0,10}\*[^)]{0,10}\)[+*]/
+	},
+	{
+		id: "redos-dot-star-greedy",
+		description: "(.*){n,} or (.+){n,} — repeated greedy dot quantifiers",
+		pattern: /\(\.[*+]\)\{?\d/
+	},
+	{
+		id: "redos-large-repetition",
+		description: "Very large fixed or range repetition count {1000,} or {1000,n} — denial of service via backtracking",
+		pattern: /\{\d{4,}(?:,\d*)?\}/
+	},
+	{
+		id: "redos-catastrophic-alternation",
+		description: "Long alternation with many similar branches — polynomial backtracking risk",
+		pattern: /\([^)]{0,200}(?:\|[^|)]{0,50}){9,}\)/
+	}
+], Z = "[\"'\\s]*:", hn = [
+	{
+		id: "nosql-where-operator",
+		description: "$where — executes arbitrary JavaScript server-side in MongoDB",
+		pattern: RegExp(`\\$where${Z}`, "i")
+	},
+	{
+		id: "nosql-ne-operator",
+		description: "$ne — \"not equal\" operator used to bypass equality checks",
+		pattern: RegExp(`\\$ne${Z}`, "i")
+	},
+	{
+		id: "nosql-gt-operator",
+		description: "$gt — \"greater than\" used to bypass password/value checks",
+		pattern: RegExp(`\\$gte?${Z}`, "i")
+	},
+	{
+		id: "nosql-lt-operator",
+		description: "$lt / $lte — \"less than\" bypass variants",
+		pattern: RegExp(`\\$lte?${Z}`, "i")
+	},
+	{
+		id: "nosql-regex-operator",
+		description: "$regex — can be used to extract data character by character (blind injection)",
+		pattern: RegExp(`\\$regex${Z}`, "i")
+	},
+	{
+		id: "nosql-or-operator",
+		description: "$or — logical OR; used to create always-true conditions",
+		pattern: RegExp(`\\$or${Z}\\s*\\[`, "i")
+	},
+	{
+		id: "nosql-and-operator",
+		description: "$and — logical AND operator injection",
+		pattern: RegExp(`\\$and${Z}\\s*\\[`, "i")
+	},
+	{
+		id: "nosql-nor-operator",
+		description: "$nor — logical NOR operator injection",
+		pattern: RegExp(`\\$nor${Z}\\s*\\[`, "i")
+	},
+	{
+		id: "nosql-exists-operator",
+		description: "$exists — can enumerate fields to determine schema",
+		pattern: RegExp(`\\$exists${Z}`, "i")
+	},
+	{
+		id: "nosql-in-operator",
+		description: "$in — matches any value in a list; can enumerate values",
+		pattern: RegExp(`\\$in${Z}\\s*\\[`, "i")
+	},
+	{
+		id: "nosql-expr-operator",
+		description: "$expr — allows aggregation expressions in queries (MongoDB 3.6+)",
+		pattern: RegExp(`\\$expr${Z}`, "i")
+	},
+	{
+		id: "nosql-function-operator",
+		description: "$function — executes arbitrary JavaScript in MongoDB 4.4+",
+		pattern: RegExp(`\\$function${Z}`, "i")
+	},
+	{
+		id: "nosql-accumulator-operator",
+		description: "$accumulator — custom aggregation with arbitrary JS execution",
+		pattern: RegExp(`\\$accumulator${Z}`, "i")
+	},
+	{
+		id: "nosql-proto-pollution",
+		description: "__proto__ — prototype pollution via object key injection",
+		pattern: /__proto__/
+	},
+	{
+		id: "nosql-constructor-prototype",
+		description: "constructor.prototype — alternative prototype pollution vector (dot notation or JSON key)",
+		pattern: /constructor[\s"':.,{\[]*prototype/i
+	},
+	{
+		id: "nosql-proto-bracket",
+		description: "[\"__proto__\"] — bracket-notation prototype pollution",
+		pattern: /\[["']__proto__["']\]/
+	}
+], gn = [
+	{
+		id: "log-crlf-injection",
+		description: "CRLF injection: literal \\r or \\n embeds fake log lines",
+		pattern: /[\r\n]/
+	},
+	{
+		id: "log-url-encoded-crlf",
+		description: "URL-encoded CRLF: %0d, %0a, %0D, %0A — decoded by some log parsers",
+		pattern: /%0[dDaA]/
+	},
+	{
+		id: "log-unicode-newline",
+		description: "Unicode newline variants: U+2028 (line separator), U+2029 (paragraph separator)",
+		pattern: /[\u2028\u2029]/
+	},
+	{
+		id: "log-log4shell-jndi",
+		description: "Log4Shell: ${jndi:...} triggers remote code execution in Apache Log4j",
+		pattern: /\$\{jndi\s*:/i
+	},
+	{
+		id: "log-log4shell-obfuscated",
+		description: "Obfuscated Log4Shell: ${::-j}... lookup-bypass prefix used to evade WAF detection",
+		pattern: /\$\{::-/
+	},
+	{
+		id: "log-log4j-lookup",
+		description: "Log4j lookup syntax: ${env:...}, ${sys:...}, ${ctx:...} — data exfiltration",
+		pattern: /\$\{(?:env|sys|ctx|main|map|sd|web|docker|k8s|spring)\s*:/i
+	},
+	{
+		id: "log-ssti-double-brace",
+		description: "SSTI double-brace: {{expression}} — Jinja2, Twig, Handlebars, etc.",
+		pattern: /\{\{[\s\S]{0,80}\}\}/
+	},
+	{
+		id: "log-ssti-hash-brace",
+		description: "SSTI hash-brace: #{expression} — Thymeleaf, Velocity, Ruby ERB",
+		pattern: /#\{[\s\S]{0,80}\}/
+	},
+	{
+		id: "log-ssti-dollar-brace",
+		description: "SSTI/EL injection: ${expression with operators or method calls} — JSP EL, Freemarker, SpEL",
+		pattern: /\$\{[^}]*(?:\.|\(|\*|\+|\bclass\b|\bruntime\b|\bprocess\b|\bexec\b)[^}]{0,80}\}/i
+	},
+	{
+		id: "log-ssti-percent-tag",
+		description: "SSTI ERB/ASP tag: <%= expression %> — Ruby ERB, ASP",
+		pattern: /<%=[\s\S]{0,80}%>/
+	},
+	{
+		id: "log-null-byte",
+		description: "Null byte: \\x00 or %00 — can truncate log entries in C-backed loggers",
+		pattern: /\x00|%00/
+	},
+	{
+		id: "log-ansi-escape",
+		description: "ANSI escape sequence: ESC[ — can manipulate terminal output when logs are tailed",
+		pattern: /\x1b\[/
+	}
+], _n = [
+	{
+		id: "sql-line-comment",
+		description: "SQL line comment: -- followed by whitespace or end of string",
+		pattern: /--(?:\s|$)/
+	},
+	{
+		id: "sql-stacked-query",
+		description: "Stacked queries: semicolon immediately followed by a SQL keyword",
+		pattern: /;\s{0,10}(?:SELECT|INSERT|UPDATE|DELETE|DROP|CREATE|ALTER|EXEC)\b/i
+	},
+	{
+		id: "sql-hex-encoding",
+		description: "Hex-encoded string injection: 0x41414141 style (MySQL)",
+		pattern: /\b0x[0-9a-f]{4,}/i
+	}
+], vn = [...fn, ..._n];
+ln.label = "HTML", un.label = "XML", dn.label = "SVG", fn.label = "SQL", vn.label = "SQL-STRICT", pn.label = "SHELL", mn.label = "REDOS", hn.label = "NOSQL", gn.label = "LOG", Object.freeze({
+	HTML: ln,
+	XML: un,
+	SVG: dn,
+	SQL: fn,
+	"SQL-STRICT": vn,
+	SHELL: pn,
+	REDOS: mn,
+	NOSQL: hn,
+	LOG: gn
+});
+function yn(e) {
+	if (typeof e != "string") throw TypeError(`is-unsafe: first argument must be a string, got ${typeof e}`);
+}
+function bn(e) {
+	if (!(e instanceof RegExp)) {
+		if (Array.isArray(e)) {
+			if (e.length === 0) throw TypeError("is-unsafe: context must not be an empty array");
+			if (Array.isArray(e[0])) {
+				for (let t of e) if (!Array.isArray(t) || t.length === 0) throw TypeError("is-unsafe: each context in the array must be a non-empty pattern array (PatternList)");
+			}
+			return;
+		}
+		throw TypeError(`is-unsafe: second argument must be a PatternList (e.g. HTML), an array of PatternLists (e.g. [HTML, XML]), or a RegExp. Got: ${typeof e}`);
+	}
+}
+function xn(e) {
+	return e instanceof RegExp ? {
+		lists: null,
+		regex: e
+	} : Array.isArray(e[0]) ? {
+		lists: e,
+		regex: null
+	} : {
+		lists: [e],
+		regex: null
+	};
+}
+function Sn(e, t) {
+	let n = t.label ?? "CUSTOM";
+	for (let r of t) if (r.pattern.test(e)) return {
+		context: n,
+		id: r.id,
+		description: r.description,
+		pattern: r.pattern
+	};
+	return null;
+}
+function Cn(e, t) {
+	yn(e), bn(t);
+	let { lists: n, regex: r } = xn(t);
+	if (r) return r.test(e);
+	for (let t of n) if (Sn(e, t) !== null) return !0;
+	return !1;
+}
 //#endregion
-//#region ../../node_modules/.pnpm/fast-xml-parser@5.8.0/node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js
-function Yt(e, t) {
+//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js
+function wn(e, t) {
 	if (!e) return {};
 	let n = t.attributesGroupName ? e[t.attributesGroupName] : e;
 	if (!n) return {};
@@ -2515,7 +3364,7 @@ function Yt(e, t) {
 	} else r[e] = n[e];
 	return r;
 }
-function Xt(e) {
+function Tn(e) {
 	if (!e || typeof e != "string") return;
 	let t = e.indexOf(":");
 	if (t !== -1 && t > 0) {
@@ -2523,14 +3372,14 @@ function Xt(e) {
 		if (n !== "xmlns") return n;
 	}
 }
-var Zt = class {
+var En = class {
 	constructor(e, t) {
-		this.options = e, this.currentNode = null, this.tagsNodeStack = [], this.parseXml = nn, this.parseTextData = Qt, this.resolveNameSpace = $t, this.buildAttributesMap = tn, this.isItStopNode = sn, this.replaceEntitiesValue = an, this.readStopNodeData = un, this.saveTextToParentTag = on, this.addChild = rn, this.ignoreAttributesFn = Gt(this.options.ignoreAttributes), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
-		let n = { ...ft };
+		this.options = e, this.currentNode = null, this.tagsNodeStack = [], this.parseXml = jn, this.parseTextData = Dn, this.resolveNameSpace = On, this.buildAttributesMap = An, this.isItStopNode = Fn, this.replaceEntitiesValue = Nn, this.readStopNodeData = zn, this.saveTextToParentTag = Pn, this.addChild = Mn, this.ignoreAttributesFn = rn(this.options.ignoreAttributes), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
+		let n = { ...dt };
 		this.options.entityDecoder ? this.entityDecoder = this.options.entityDecoder : (typeof this.options.htmlEntities == "object" ? n = this.options.htmlEntities : this.options.htmlEntities === !0 && (n = {
-			...pt,
-			...lt
-		}), this.entityDecoder = new yt({
+			...ft,
+			...ct
+		}), this.entityDecoder = new vt({
 			namedEntities: {
 				...n,
 				...t
@@ -2540,27 +3389,28 @@ var Zt = class {
 				maxTotalExpansions: this.options.processEntities.maxTotalExpansions,
 				maxExpandedLength: this.options.processEntities.maxExpandedLength,
 				applyLimitsTo: this.options.processEntities.appliesTo
-			}
-		})), this.matcher = new Jt(), this.readonlyMatcher = this.matcher.readOnly(), this.isCurrentNodeStopNode = !1, this.stopNodeExpressionsSet = new Kt();
+			},
+			onInputEntity: (e, t) => Cn(t, [ln, un]) ? z.BLOCK : z.ALLOW
+		})), this.matcher = new cn(), this.readonlyMatcher = this.matcher.readOnly(), this.isCurrentNodeStopNode = !1, this.stopNodeExpressionsSet = new on();
 		let r = this.options.stopNodes;
 		if (r && r.length > 0) {
 			for (let e = 0; e < r.length; e++) {
 				let t = r[e];
-				typeof t == "string" ? this.stopNodeExpressionsSet.add(new Z(t)) : t instanceof Z && this.stopNodeExpressionsSet.add(t);
+				typeof t == "string" ? this.stopNodeExpressionsSet.add(new an(t)) : t instanceof an && this.stopNodeExpressionsSet.add(t);
 			}
 			this.stopNodeExpressionsSet.seal();
 		}
 	}
 };
-function Qt(e, t, n, r, i, a, o) {
+function Dn(e, t, n, r, i, a, o) {
 	let s = this.options;
 	if (e !== void 0 && (s.trimValues && !r && (e = e.trim()), e.length > 0)) {
 		o || (e = this.replaceEntitiesValue(e, t, n));
 		let r = s.jPath ? n.toString() : n, c = s.tagValueProcessor(t, e, r, i, a);
-		return c == null ? e : typeof c != typeof e || c !== e ? c : s.trimValues || e.trim() === e ? dn(e, s.parseTagValue, s.numberParseOptions) : e;
+		return c == null ? e : typeof c != typeof e || c !== e ? c : s.trimValues || e.trim() === e ? Bn(e, s.parseTagValue, s.numberParseOptions) : e;
 	}
 }
-function $t(e) {
+function On(e) {
 	if (this.options.removeNSPrefix) {
 		let t = e.split(":"), n = e.charAt(0) === "/" ? "/" : "";
 		if (t[0] === "xmlns") return "";
@@ -2568,11 +3418,11 @@ function $t(e) {
 	}
 	return e;
 }
-var en = /* @__PURE__ */ RegExp("([^\\s=]+)\\s*(=\\s*(['\"])([\\s\\S]*?)\\3)?", "gm");
-function tn(e, t, n, r = !1) {
+var kn = /* @__PURE__ */ RegExp("([^\\s=]+)\\s*(=\\s*(['\"])([\\s\\S]*?)\\3)?", "gm");
+function An(e, t, n, r = !1) {
 	let i = this.options;
 	if (r === !0 || i.ignoreAttributes !== !0 && typeof e == "string") {
-		let r = Fe(e, en), a = r.length, o = {}, s = Array(a), c = !1, l = {};
+		let r = Ne(e, kn), a = r.length, o = {}, s = Array(a), c = !1, l = {};
 		for (let e = 0; e < a; e++) {
 			let t = this.resolveNameSpace(r[e][1]), a = r[e][4];
 			if (t.length && a !== void 0) {
@@ -2586,9 +3436,9 @@ function tn(e, t, n, r = !1) {
 			let t = this.resolveNameSpace(r[e][1]);
 			if (this.ignoreAttributesFn(t, u)) continue;
 			let n = i.attributeNamePrefix + t;
-			if (t.length) if (i.transformAttributeName && (n = i.transformAttributeName(n)), n = pn(n, i), r[e][4] !== void 0) {
+			if (t.length) if (i.transformAttributeName && (n = i.transformAttributeName(n)), n = Hn(n, i), r[e][4] !== void 0) {
 				let r = s[e], a = i.attributeValueProcessor(t, r, u);
-				a == null ? o[n] = r : typeof a != typeof r || a !== r ? o[n] = a : o[n] = dn(r, i.parseAttributeValue, i.numberParseOptions), d = !0;
+				a == null ? o[n] = r : typeof a != typeof r || a !== r ? o[n] = a : o[n] = Bn(r, i.parseAttributeValue, i.numberParseOptions), d = !0;
 			} else i.allowBooleanAttributes && (o[n] = !0, d = !0);
 		}
 		if (!d) return;
@@ -2599,11 +3449,11 @@ function tn(e, t, n, r = !1) {
 		return o;
 	}
 }
-var nn = function(e) {
+var jn = function(e) {
 	e = e.replace(/\r\n?/g, "\n");
 	let t = new G("!xml"), n = t, r = "";
 	this.matcher.reset(), this.entityDecoder.reset(), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
-	let i = this.options, a = new Pt(i.processEntities), o = e.length;
+	let i = this.options, a = new It(i.processEntities), o = e.length;
 	for (let s = 0; s < o; s++) if (e[s] === "<") {
 		let c = e.charCodeAt(s + 1);
 		if (c === 47) {
@@ -2612,12 +3462,12 @@ var nn = function(e) {
 				let e = a.indexOf(":");
 				e !== -1 && (a = a.substr(e + 1));
 			}
-			a = fn(i.transformTagName, a, "", i).tagName, n && (r = this.saveTextToParentTag(r, n, this.readonlyMatcher));
+			a = Vn(i.transformTagName, a, "", i).tagName, n && (r = this.saveTextToParentTag(r, n, this.readonlyMatcher));
 			let o = this.matcher.getCurrentTag();
 			if (a && i.unpairedTagsSet.has(a)) throw Error(`Unpaired tag can not be used as closing tag: </${a}>`);
 			o && i.unpairedTagsSet.has(o) && (this.matcher.pop(), this.tagsNodeStack.pop()), this.matcher.pop(), this.isCurrentNodeStopNode = !1, n = this.tagsNodeStack.pop(), r = "", s = t;
 		} else if (c === 63) {
-			let t = $(e, s, !1, "?>");
+			let t = Rn(e, s, !1, "?>");
 			if (!t) throw Error("Pi Tag is not closed.");
 			r = this.saveTextToParentTag(r, n, this.readonlyMatcher);
 			let o = this.buildAttributesMap(t.tagExp, this.matcher, t.tagName, !0);
@@ -2646,20 +3496,20 @@ var nn = function(e) {
 			let o = this.parseTextData(a, n.tagname, this.readonlyMatcher, !0, !1, !0, !0);
 			o ??= "", i.cdataPropName ? n.add(i.cdataPropName, [{ [i.textNodeName]: a }]) : n.add(i.textNodeName, o), s = t + 2;
 		} else {
-			let a = $(e, s, i.removeNSPrefix);
+			let a = Rn(e, s, i.removeNSPrefix);
 			if (!a) {
 				let t = e.substring(Math.max(0, s - 50), Math.min(o, s + 50));
 				throw Error(`readTagExp returned undefined at position ${s}. Context: "${t}"`);
 			}
 			let c = a.tagName, l = a.rawTagName, u = a.tagExp, d = a.attrExpPresent, f = a.closeIndex;
-			if ({tagName: c, tagExp: u} = fn(i.transformTagName, c, u, i), i.strictReservedNames && (c === i.commentPropName || c === i.cdataPropName || c === i.textNodeName || c === i.attributesGroupName)) throw Error(`Invalid tag name: ${c}`);
+			if ({tagName: c, tagExp: u} = Vn(i.transformTagName, c, u, i), i.strictReservedNames && (c === i.commentPropName || c === i.cdataPropName || c === i.textNodeName || c === i.attributesGroupName)) throw Error(`Invalid tag name: ${c}`);
 			n && r && n.tagname !== "!xml" && (r = this.saveTextToParentTag(r, n, this.readonlyMatcher, !1));
 			let p = n;
 			p && i.unpairedTagsSet.has(p.tagname) && (n = this.tagsNodeStack.pop(), this.matcher.pop());
 			let m = !1;
 			u.length > 0 && u.lastIndexOf("/") === u.length - 1 && (m = !0, c[c.length - 1] === "/" ? (c = c.substr(0, c.length - 1), u = c) : u = u.substr(0, u.length - 1), d = c !== u);
 			let h = null, g;
-			g = Xt(l), c !== t.tagname && this.matcher.push(c, {}, g), c !== u && d && (h = this.buildAttributesMap(u, this.matcher, c), h && Yt(h, i)), c !== t.tagname && (this.isCurrentNodeStopNode = this.isItStopNode());
+			g = Tn(l), c !== t.tagname && this.matcher.push(c, {}, g), c !== u && d && (h = this.buildAttributesMap(u, this.matcher, c), h && wn(h, i)), c !== t.tagname && (this.isCurrentNodeStopNode = this.isItStopNode());
 			let _ = s;
 			if (this.isCurrentNodeStopNode) {
 				let t = "";
@@ -2674,7 +3524,7 @@ var nn = function(e) {
 				h && (r[":@"] = h), r.add(i.textNodeName, t), this.matcher.pop(), this.isCurrentNodeStopNode = !1, this.addChild(n, r, this.readonlyMatcher, _);
 			} else {
 				if (m) {
-					({tagName: c, tagExp: u} = fn(i.transformTagName, c, u, i));
+					({tagName: c, tagExp: u} = Vn(i.transformTagName, c, u, i));
 					let e = new G(c);
 					h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), this.matcher.pop(), this.isCurrentNodeStopNode = !1;
 				} else if (i.unpairedTagsSet.has(c)) {
@@ -2692,12 +3542,12 @@ var nn = function(e) {
 	} else r += e[s];
 	return t.child;
 };
-function rn(e, t, n, r) {
+function Mn(e, t, n, r) {
 	this.options.captureMetaData || (r = void 0);
 	let i = this.options.jPath ? n.toString() : n, a = this.options.updateTag(t.tagname, i, t[":@"]);
 	a === !1 || (typeof a == "string" && (t.tagname = a), e.addChild(t, r));
 }
-function an(e, t, n) {
+function Nn(e, t, n) {
 	let r = this.options.processEntities;
 	if (!r || !r.enabled) return e;
 	if (r.allowedTags) {
@@ -2710,13 +3560,13 @@ function an(e, t, n) {
 	}
 	return this.entityDecoder.decode(e);
 }
-function on(e, t, n, r) {
+function Pn(e, t, n, r) {
 	return e &&= (r === void 0 && (r = t.child.length === 0), e = this.parseTextData(e, t.tagname, n, !1, t[":@"] ? Object.keys(t[":@"]).length !== 0 : !1, r), e !== void 0 && e !== "" && t.add(this.options.textNodeName, e), ""), e;
 }
-function sn() {
-	return this.stopNodeExpressionsSet.size === 0 ? !1 : this.matcher.matchesAny(this.stopNodeExpressionsSet);
+function Fn() {
+	return this.stopNodeExpressionsSet.size !== 0 && this.matcher.matchesAny(this.stopNodeExpressionsSet);
 }
-function cn(e, t, n = ">") {
+function In(e, t, n = ">") {
 	let r = 0, i = e.length, a = n.charCodeAt(0), o = n.length > 1 ? n.charCodeAt(1) : -1, s = "", c = t;
 	for (let n = t; n < i; n++) {
 		let t = e.charCodeAt(n);
@@ -2739,13 +3589,13 @@ function Q(e, t, n, r) {
 	if (i === -1) throw Error(r);
 	return i + t.length - 1;
 }
-function ln(e, t, n, r) {
+function Ln(e, t, n, r) {
 	let i = e.indexOf(t, n);
 	if (i === -1) throw Error(r);
 	return i;
 }
-function $(e, t, n, r = ">") {
-	let i = cn(e, t + 1, r);
+function Rn(e, t, n, r = ">") {
+	let i = In(e, t + 1, r);
 	if (!i) return;
 	let a = i.data, o = i.index, s = a.search(/\s/), c = a, l = !0;
 	s !== -1 && (c = a.substring(0, s), a = a.substring(s + 1).trimStart());
@@ -2762,12 +3612,12 @@ function $(e, t, n, r = ">") {
 		rawTagName: u
 	};
 }
-function un(e, t, n) {
+function zn(e, t, n) {
 	let r = n, i = 1, a = e.length;
 	for (; n < a; n++) if (e[n] === "<") {
 		let a = e.charCodeAt(n + 1);
 		if (a === 47) {
-			let a = ln(e, ">", n, `${t} is not closed`);
+			let a = Ln(e, ">", n, `${t} is not closed`);
 			if (e.substring(n + 2, a).trim() === t && (i--, i === 0)) return {
 				tagContent: e.substring(r, n),
 				i: a
@@ -2777,36 +3627,36 @@ function un(e, t, n) {
 		else if (a === 33 && e.charCodeAt(n + 2) === 45 && e.charCodeAt(n + 3) === 45) n = Q(e, "-->", n + 3, "StopNode is not closed.");
 		else if (a === 33 && e.charCodeAt(n + 2) === 91) n = Q(e, "]]>", n, "StopNode is not closed.") - 2;
 		else {
-			let r = $(e, n, !1);
+			let r = Rn(e, n, !1);
 			r && ((r && r.tagName) === t && r.tagExp[r.tagExp.length - 1] !== "/" && i++, n = r.closeIndex);
 		}
 	}
 }
-function dn(e, t, n) {
+function Bn(e, t, n) {
 	if (t && typeof e == "string") {
 		let t = e.trim();
-		return t === "true" ? !0 : t === "false" ? !1 : Bt(e, n);
-	} else if (Le(e)) return e;
+		return t === "true" || t !== "false" && Zt(e, n);
+	} else if (Fe(e)) return e;
 	else return "";
 }
-function fn(e, t, n, r) {
+function Vn(e, t, n, r) {
 	if (e) {
 		let r = e(t);
 		n === t && (n = r), t = r;
 	}
-	return t = pn(t, r), {
+	return t = Hn(t, r), {
 		tagName: t,
 		tagExp: n
 	};
 }
-function pn(e, t) {
-	if (Re.includes(e)) throw Error(`[SECURITY] Invalid name: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
-	return I.includes(e) ? t.onDangerousProperty(e) : e;
+function Hn(e, t) {
+	if (Le.includes(e)) throw Error(`[SECURITY] Invalid name: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
+	return Ie.includes(e) ? t.onDangerousProperty(e) : e;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/fast-xml-parser@5.8.0/node_modules/fast-xml-parser/src/xmlparser/node2json.js
-var mn = G.getMetaDataSymbol();
-function hn(e, t) {
+//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/node2json.js
+var $ = G.getMetaDataSymbol();
+function Un(e, t) {
 	if (!e || typeof e != "object") return {};
 	if (!t) return e;
 	let n = {};
@@ -2816,22 +3666,22 @@ function hn(e, t) {
 	} else n[r] = e[r];
 	return n;
 }
-function gn(e, t, n, r) {
-	return _n(e, t, n, r);
+function Wn(e, t, n, r) {
+	return Gn(e, t, n, r);
 }
-function _n(e, t, n, r) {
+function Gn(e, t, n, r) {
 	let i, a = {};
 	for (let o = 0; o < e.length; o++) {
-		let s = e[o], c = vn(s);
+		let s = e[o], c = Kn(s);
 		if (c !== void 0 && c !== t.textNodeName) {
-			let e = hn(s[":@"] || {}, t.attributeNamePrefix);
+			let e = Un(s[":@"] || {}, t.attributeNamePrefix);
 			n.push(c, e);
 		}
 		if (c === t.textNodeName) i === void 0 ? i = s[c] : i += "" + s[c];
 		else if (c === void 0) continue;
 		else if (s[c]) {
-			let e = _n(s[c], t, n, r), i = bn(e, t);
-			if (Object.keys(e).length === 0 && t.alwaysCreateTextNode && (e[t.textNodeName] = ""), s[":@"] ? yn(e, s[":@"], r, t) : Object.keys(e).length === 1 && e[t.textNodeName] !== void 0 && !t.alwaysCreateTextNode ? e = e[t.textNodeName] : Object.keys(e).length === 0 && (t.alwaysCreateTextNode ? e[t.textNodeName] = "" : e = ""), s[mn] !== void 0 && typeof e == "object" && e && (e[mn] = s[mn]), a[c] !== void 0 && Object.prototype.hasOwnProperty.call(a, c)) Array.isArray(a[c]) || (a[c] = [a[c]]), a[c].push(e);
+			let e = Gn(s[c], t, n, r), i = Jn(e, t);
+			if (Object.keys(e).length === 0 && t.alwaysCreateTextNode && (e[t.textNodeName] = ""), s[":@"] ? qn(e, s[":@"], r, t) : Object.keys(e).length === 1 && e[t.textNodeName] !== void 0 && !t.alwaysCreateTextNode ? e = e[t.textNodeName] : Object.keys(e).length === 0 && (t.alwaysCreateTextNode ? e[t.textNodeName] = "" : e = ""), s[$] !== void 0 && typeof e == "object" && e && (e[$] = s[$]), a[c] !== void 0 && Object.prototype.hasOwnProperty.call(a, c)) Array.isArray(a[c]) || (a[c] = [a[c]]), a[c].push(e);
 			else {
 				let n = t.jPath ? r.toString() : r;
 				t.isArray(c, n, i) ? a[c] = [e] : a[c] = e;
@@ -2841,14 +3691,14 @@ function _n(e, t, n, r) {
 	}
 	return typeof i == "string" ? i.length > 0 && (a[t.textNodeName] = i) : i !== void 0 && (a[t.textNodeName] = i), a;
 }
-function vn(e) {
+function Kn(e) {
 	let t = Object.keys(e);
 	for (let e = 0; e < t.length; e++) {
 		let n = t[e];
 		if (n !== ":@") return n;
 	}
 }
-function yn(e, t, n, r) {
+function qn(e, t, n, r) {
 	if (t) {
 		let i = Object.keys(t), a = i.length;
 		for (let o = 0; o < a; o++) {
@@ -2857,26 +3707,26 @@ function yn(e, t, n, r) {
 		}
 	}
 }
-function bn(e, t) {
+function Jn(e, t) {
 	let { textNodeName: n } = t, r = Object.keys(e).length;
 	return !!(r === 0 || r === 1 && (e[n] || typeof e[n] == "boolean" || e[n] === 0));
 }
 //#endregion
-//#region ../../node_modules/.pnpm/fast-xml-parser@5.8.0/node_modules/fast-xml-parser/src/xmlparser/XMLParser.js
-var xn = class {
+//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/XMLParser.js
+var Yn = class {
 	constructor(e) {
-		this.externalEntities = {}, this.options = wt(e);
+		this.externalEntities = {}, this.options = Ct(e);
 	}
 	parse(e, t) {
 		if (typeof e != "string" && e.toString) e = e.toString();
 		else if (typeof e != "string") throw Error("XML data is accepted in String or Bytes[] form.");
 		if (t) {
 			t === !0 && (t = {});
-			let n = Be(e, t);
+			let n = ze(e, t);
 			if (n !== !0) throw Error(`${n.err.msg}:${n.err.line}:${n.err.col}`);
 		}
-		let n = new Zt(this.options, this.externalEntities), r = n.parseXml(e);
-		return this.options.preserveOrder || r === void 0 ? r : gn(r, this.options, n.matcher, n.readonlyMatcher);
+		let n = new En(this.options, this.externalEntities), r = n.parseXml(e);
+		return this.options.preserveOrder || r === void 0 ? r : Wn(r, this.options, n.matcher, n.readonlyMatcher);
 	}
 	addEntity(e, t) {
 		if (t.indexOf("&") !== -1) throw Error("Entity value can't have '&'");
@@ -2887,7 +3737,7 @@ var xn = class {
 	static getMetaDataSymbol() {
 		return G.getMetaDataSymbol();
 	}
-}, Sn = class {
+}, Xn = class {
 	axiosClient;
 	baseURI;
 	xmlParser;
@@ -2897,7 +3747,7 @@ var xn = class {
 	HASH_LENGTH = 32;
 	ITERATION_COUNT = 1e4;
 	constructor({ axiosClient: e, baseURI: t }) {
-		this.axiosClient = e, this.baseURI = t, this.xmlParser = new xn();
+		this.axiosClient = e, this.baseURI = t, this.xmlParser = new Yn();
 	}
 	async signUrl(e, t) {
 		let n = new URL(e);
@@ -2907,20 +3757,20 @@ var xn = class {
 	}
 	async getSignKey() {
 		if (this.signingKey) return this.signingKey;
-		let e = await this.axiosClient.get(a(this.baseURI, "ocs/v1.php/cloud/user/signing-key"), { headers: { "Content-Type": "application/x-www-form-urlencoded" } }), t = this.xmlParser.parse(e.data);
-		return this.signingKey = t.ocs.data["signing-key"], this.signingKey;
+		let e = await this.axiosClient.get(t(this.baseURI, "ocs/v1.php/cloud/user/signing-key"), { headers: { "Content-Type": "application/x-www-form-urlencoded" } }), n = this.xmlParser.parse(e.data);
+		return this.signingKey = n.ocs.data["signing-key"], this.signingKey;
 	}
 	async createHashedKey(e) {
 		return je(e, await this.getSignKey(), this.ITERATION_COUNT, this.HASH_LENGTH, this.ALGORITHM).toString("hex");
 	}
-}, Cn = (e, t) => {
+}, Zn = (e, t) => {
 	let n = new URL(e);
 	n.pathname = [
 		...n.pathname.split("/"),
 		"ocs",
 		"v1.php"
 	].filter(Boolean).join("/");
-	let r = n.href, i = v(r, t), a = new Sn({
+	let r = n.href, i = v(r, t), a = new Xn({
 		baseURI: e,
 		axiosClient: t
 	});
@@ -2930,4 +3780,4 @@ var xn = class {
 	};
 };
 //#endregion
-export { K as a, Z as i, xn as n, v as o, Jt as r, Cn as t };
+export { Ft as a, an as i, Yn as n, v as o, cn as r, Zn as t };