@opencloud-eu/web-client 7.1.2 → 7.2.0

package/dist/{ocs-VeFt8RO1.js → ocs-BwWCZeaA.js}

@@ -1,26 +1,27 @@
-import { t as e } from "./dist-DXLl1XQj.js";
-import { a as t, n, s as r, t as i, u as a } from "./toString-DIrlTUQN.js";
+import { t as e } from "./dist-B2vdwwII.js";
+import { t } from "./urlJoin-_pUL1TUx.js";
+import { a as n, n as r, s as i, t as a } from "./toString-BCd-H1lr.js";
 //#region ../../node_modules/.pnpm/lodash-es@4.18.1/node_modules/lodash-es/_isKey.js
 var o = /\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/, s = /^\w*$/;
-function c(e, n) {
-	if (t(e)) return !1;
-	var i = typeof e;
-	return i == "number" || i == "symbol" || i == "boolean" || e == null || r(e) ? !0 : s.test(e) || !o.test(e) || n != null && e in Object(n);
+function c(e, t) {
+	if (n(e)) return !1;
+	var r = typeof e;
+	return r == "number" || r == "symbol" || r == "boolean" || e == null || i(e) ? !0 : s.test(e) || !o.test(e) || t != null && e in Object(t);
 }
 //#endregion
 //#region ../../node_modules/.pnpm/lodash-es@4.18.1/node_modules/lodash-es/memoize.js
 var l = "Expected a function";
 function u(e, t) {
 	if (typeof e != "function" || t != null && typeof t != "function") throw TypeError(l);
-	var r = function() {
-		var n = arguments, i = t ? t.apply(this, n) : n[0], a = r.cache;
+	var n = function() {
+		var r = arguments, i = t ? t.apply(this, r) : r[0], a = n.cache;
 		if (a.has(i)) return a.get(i);
-		var o = e.apply(this, n);
-		return r.cache = a.set(i, o) || a, o;
+		var o = e.apply(this, r);
+		return n.cache = a.set(i, o) || a, o;
 	};
-	return r.cache = new (u.Cache || n)(), r;
+	return n.cache = new (u.Cache || r)(), n;
 }
-u.Cache = n;
+u.Cache = r;
 //#endregion
 //#region ../../node_modules/.pnpm/lodash-es@4.18.1/node_modules/lodash-es/_memoizeCapped.js
 var d = 500;
@@ -40,14 +41,14 @@ var p = /[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(
 });
 //#endregion
 //#region ../../node_modules/.pnpm/lodash-es@4.18.1/node_modules/lodash-es/_castPath.js
-function g(e, n) {
-	return t(e) ? e : c(e, n) ? [e] : h(i(e));
+function g(e, t) {
+	return n(e) ? e : c(e, t) ? [e] : h(a(e));
 }
 //#endregion
 //#region ../../node_modules/.pnpm/lodash-es@4.18.1/node_modules/lodash-es/_toKey.js
 var _ = Infinity;
 function ee(e) {
-	if (typeof e == "string" || r(e)) return e;
+	if (typeof e == "string" || i(e)) return e;
 	var t = e + "";
 	return t == "0" && 1 / e == -_ ? "-0" : t;
 }
@@ -221,7 +222,7 @@ function de(e, t, n, r, i) {
 	return e.destroy(), t.destroy(), r && r.destroy(), T(i), n;
 }
 function fe(e, t, n, r) {
-	let { c: i, dkLen: a, DK: o, PRF: s, PRFSalt: c } = ue(e, t, n, r), l, u = new Uint8Array(4), d = E(u), f = new Uint8Array(s.outputLen);
+	let { c: i, dkLen: a, DK: o, PRF: s, PRFSalt: c } = ue(e, t, n, r), l, u = /* @__PURE__ */ new Uint8Array(4), d = E(u), f = new Uint8Array(s.outputLen);
 	for (let e = 1, t = 0; t < a; e++, t += s.outputLen) {
 		let n = o.subarray(t, t + s.outputLen);
 		d.setInt32(0, e, !1), (l = c._cloneInto(l)).update(u).digestInto(f), n.set(f.subarray(0, n.length));
@@ -422,7 +423,7 @@ var Pe = function(e) {
 function Fe(e) {
 	return e !== void 0;
 }
-var I = [
+var Ie = [
 	"hasOwnProperty",
 	"toString",
 	"valueOf",
@@ -430,94 +431,94 @@ var I = [
 	"__defineSetter__",
 	"__lookupGetter__",
 	"__lookupSetter__"
-], Ie = [
+], Le = [
 	"__proto__",
 	"constructor",
 	"prototype"
-], Le = {
+], Re = {
 	allowBooleanAttributes: !1,
 	unpairedTags: []
 };
-function Re(e, t) {
-	t = Object.assign({}, Le, t);
+function ze(e, t) {
+	t = Object.assign({}, Re, t);
 	let n = [], r = !1, i = !1;
 	e[0] === "" && (e = e.substr(1));
 	for (let a = 0; a < e.length; a++) if (e[a] === "<" && e[a + 1] === "?") {
-		if (a += 2, a = Be(e, a), a.err) return a;
+		if (a += 2, a = Ve(e, a), a.err) return a;
 	} else if (e[a] === "<") {
 		let o = a;
 		if (a++, e[a] === "!") {
-			a = Ve(e, a);
+			a = He(e, a);
 			continue;
 		} else {
 			let s = !1;
 			e[a] === "/" && (s = !0, a++);
 			let c = "";
 			for (; a < e.length && e[a] !== ">" && e[a] !== " " && e[a] !== "	" && e[a] !== "\n" && e[a] !== "\r"; a++) c += e[a];
-			if (c = c.trim(), c[c.length - 1] === "/" && (c = c.substring(0, c.length - 1), a--), !Xe(c)) {
+			if (c = c.trim(), c[c.length - 1] === "/" && (c = c.substring(0, c.length - 1), a--), !Ze(c)) {
 				let t;
-				return t = c.trim().length === 0 ? "Invalid space after '<'." : "Tag '" + c + "' is an invalid name.", L("InvalidTag", t, R(e, a));
+				return t = c.trim().length === 0 ? "Invalid space after '<'." : "Tag '" + c + "' is an invalid name.", I("InvalidTag", t, L(e, a));
 			}
-			let l = We(e, a);
-			if (l === !1) return L("InvalidAttr", "Attributes for '" + c + "' have open quote.", R(e, a));
+			let l = Ge(e, a);
+			if (l === !1) return I("InvalidAttr", "Attributes for '" + c + "' have open quote.", L(e, a));
 			let u = l.value;
 			if (a = l.index, u[u.length - 1] === "/") {
 				let n = a - u.length;
 				u = u.substring(0, u.length - 1);
-				let i = Ke(u, t);
+				let i = qe(u, t);
 				if (i === !0) r = !0;
-				else return L(i.err.code, i.err.msg, R(e, n + i.err.line));
+				else return I(i.err.code, i.err.msg, L(e, n + i.err.line));
 			} else if (s) {
-				if (!l.tagClosed) return L("InvalidTag", "Closing tag '" + c + "' doesn't have proper closing.", R(e, a));
-				if (u.trim().length > 0) return L("InvalidTag", "Closing tag '" + c + "' can't have attributes or invalid starting.", R(e, o));
-				if (n.length === 0) return L("InvalidTag", "Closing tag '" + c + "' has not been opened.", R(e, o));
+				if (!l.tagClosed) return I("InvalidTag", "Closing tag '" + c + "' doesn't have proper closing.", L(e, a));
+				if (u.trim().length > 0) return I("InvalidTag", "Closing tag '" + c + "' can't have attributes or invalid starting.", L(e, o));
+				if (n.length === 0) return I("InvalidTag", "Closing tag '" + c + "' has not been opened.", L(e, o));
 				{
 					let t = n.pop();
 					if (c !== t.tagName) {
-						let n = R(e, t.tagStartPos);
-						return L("InvalidTag", "Expected closing tag '" + t.tagName + "' (opened in line " + n.line + ", col " + n.col + ") instead of closing tag '" + c + "'.", R(e, o));
+						let n = L(e, t.tagStartPos);
+						return I("InvalidTag", "Expected closing tag '" + t.tagName + "' (opened in line " + n.line + ", col " + n.col + ") instead of closing tag '" + c + "'.", L(e, o));
 					}
 					n.length == 0 && (i = !0);
 				}
 			} else {
-				let s = Ke(u, t);
-				if (s !== !0) return L(s.err.code, s.err.msg, R(e, a - u.length + s.err.line));
-				if (i === !0) return L("InvalidXml", "Multiple possible root nodes found.", R(e, a));
+				let s = qe(u, t);
+				if (s !== !0) return I(s.err.code, s.err.msg, L(e, a - u.length + s.err.line));
+				if (i === !0) return I("InvalidXml", "Multiple possible root nodes found.", L(e, a));
 				t.unpairedTags.indexOf(c) !== -1 || n.push({
 					tagName: c,
 					tagStartPos: o
 				}), r = !0;
 			}
 			for (a++; a < e.length; a++) if (e[a] === "<") if (e[a + 1] === "!") {
-				a++, a = Ve(e, a);
+				a++, a = He(e, a);
 				continue;
 			} else if (e[a + 1] === "?") {
-				if (a = Be(e, ++a), a.err) return a;
+				if (a = Ve(e, ++a), a.err) return a;
 			} else break;
 			else if (e[a] === "&") {
-				let t = Je(e, a);
-				if (t == -1) return L("InvalidChar", "char '&' is not expected.", R(e, a));
+				let t = Ye(e, a);
+				if (t == -1) return I("InvalidChar", "char '&' is not expected.", L(e, a));
 				a = t;
-			} else if (i === !0 && !ze(e[a])) return L("InvalidXml", "Extra text at the end", R(e, a));
+			} else if (i === !0 && !Be(e[a])) return I("InvalidXml", "Extra text at the end", L(e, a));
 			e[a] === "<" && a--;
 		}
 	} else {
-		if (ze(e[a])) continue;
-		return L("InvalidChar", "char '" + e[a] + "' is not expected.", R(e, a));
+		if (Be(e[a])) continue;
+		return I("InvalidChar", "char '" + e[a] + "' is not expected.", L(e, a));
 	}
-	return r ? n.length == 1 ? L("InvalidTag", "Unclosed tag '" + n[0].tagName + "'.", R(e, n[0].tagStartPos)) : n.length > 0 ? L("InvalidXml", "Invalid '" + JSON.stringify(n.map((e) => e.tagName), null, 4).replace(/\r?\n/g, "") + "' found.", {
+	return r ? n.length == 1 ? I("InvalidTag", "Unclosed tag '" + n[0].tagName + "'.", L(e, n[0].tagStartPos)) : n.length > 0 ? I("InvalidXml", "Invalid '" + JSON.stringify(n.map((e) => e.tagName), null, 4).replace(/\r?\n/g, "") + "' found.", {
 		line: 1,
 		col: 1
-	}) : !0 : L("InvalidXml", "Start tag expected.", 1);
+	}) : !0 : I("InvalidXml", "Start tag expected.", 1);
 }
-function ze(e) {
+function Be(e) {
 	return e === " " || e === "	" || e === "\n" || e === "\r";
 }
-function Be(e, t) {
+function Ve(e, t) {
 	let n = t;
 	for (; t < e.length; t++) if (e[t] == "?" || e[t] == " ") {
 		let r = e.substr(n, t - n);
-		if (t > 5 && r === "xml") return L("InvalidXml", "XML declaration allowed only at the start of the document.", R(e, t));
+		if (t > 5 && r === "xml") return I("InvalidXml", "XML declaration allowed only at the start of the document.", L(e, t));
 		if (e[t] == "?" && e[t + 1] == ">") {
 			t++;
 			break;
@@ -525,7 +526,7 @@ function Be(e, t) {
 	}
 	return t;
 }
-function Ve(e, t) {
+function He(e, t) {
 	if (e.length > t + 5 && e[t + 1] === "-" && e[t + 2] === "-") {
 		for (t += 3; t < e.length; t++) if (e[t] === "-" && e[t + 1] === "-" && e[t + 2] === ">") {
 			t += 2;
@@ -543,38 +544,38 @@ function Ve(e, t) {
 	}
 	return t;
 }
-var He = "\"", Ue = "'";
-function We(e, t) {
+var Ue = "\"", We = "'";
+function Ge(e, t) {
 	let n = "", r = "", i = !1;
 	for (; t < e.length; t++) {
-		if (e[t] === He || e[t] === Ue) r === "" ? r = e[t] : r !== e[t] || (r = "");
+		if (e[t] === Ue || e[t] === We) r === "" ? r = e[t] : r !== e[t] || (r = "");
 		else if (e[t] === ">" && r === "") {
 			i = !0;
 			break;
 		}
 		n += e[t];
 	}
-	return r === "" ? {
+	return r === "" && {
 		value: n,
 		index: t,
 		tagClosed: i
-	} : !1;
+	};
 }
-var Ge = /* @__PURE__ */ RegExp("(\\s*)([^\\s=]+)(\\s*=)?(\\s*(['\"])(([\\s\\S])*?)\\5)?", "g");
-function Ke(e, t) {
-	let n = Ne(e, Ge), r = {};
+var Ke = /* @__PURE__ */ RegExp("(\\s*)([^\\s=]+)(\\s*=)?(\\s*(['\"])(([\\s\\S])*?)\\5)?", "g");
+function qe(e, t) {
+	let n = Ne(e, Ke), r = {};
 	for (let e = 0; e < n.length; e++) {
-		if (n[e][1].length === 0) return L("InvalidAttr", "Attribute '" + n[e][2] + "' has no space in starting.", z(n[e]));
-		if (n[e][3] !== void 0 && n[e][4] === void 0) return L("InvalidAttr", "Attribute '" + n[e][2] + "' is without value.", z(n[e]));
-		if (n[e][3] === void 0 && !t.allowBooleanAttributes) return L("InvalidAttr", "boolean attribute '" + n[e][2] + "' is not allowed.", z(n[e]));
+		if (n[e][1].length === 0) return I("InvalidAttr", "Attribute '" + n[e][2] + "' has no space in starting.", R(n[e]));
+		if (n[e][3] !== void 0 && n[e][4] === void 0) return I("InvalidAttr", "Attribute '" + n[e][2] + "' is without value.", R(n[e]));
+		if (n[e][3] === void 0 && !t.allowBooleanAttributes) return I("InvalidAttr", "boolean attribute '" + n[e][2] + "' is not allowed.", R(n[e]));
 		let i = n[e][2];
-		if (!Ye(i)) return L("InvalidAttr", "Attribute '" + i + "' is an invalid name.", z(n[e]));
+		if (!Xe(i)) return I("InvalidAttr", "Attribute '" + i + "' is an invalid name.", R(n[e]));
 		if (!Object.prototype.hasOwnProperty.call(r, i)) r[i] = 1;
-		else return L("InvalidAttr", "Attribute '" + i + "' is repeated.", z(n[e]));
+		else return I("InvalidAttr", "Attribute '" + i + "' is repeated.", R(n[e]));
 	}
 	return !0;
 }
-function qe(e, t) {
+function Je(e, t) {
 	let n = /\d/;
 	for (e[t] === "x" && (t++, n = /[\da-fA-F]/); t < e.length; t++) {
 		if (e[t] === ";") return t;
@@ -582,9 +583,9 @@ function qe(e, t) {
 	}
 	return -1;
 }
-function Je(e, t) {
+function Ye(e, t) {
 	if (t++, e[t] === ";") return -1;
-	if (e[t] === "#") return t++, qe(e, t);
+	if (e[t] === "#") return t++, Je(e, t);
 	let n = 0;
 	for (; t < e.length; t++, n++) if (!(e[t].match(/\w/) && n < 20)) {
 		if (e[t] === ";") break;
@@ -592,7 +593,7 @@ function Je(e, t) {
 	}
 	return t;
 }
-function L(e, t, n) {
+function I(e, t, n) {
 	return { err: {
 		code: e,
 		msg: t,
@@ -600,25 +601,25 @@ function L(e, t, n) {
 		col: n.col
 	} };
 }
-function Ye(e) {
+function Xe(e) {
 	return Pe(e);
 }
-function Xe(e) {
+function Ze(e) {
 	return Pe(e);
 }
-function R(e, t) {
+function L(e, t) {
 	let n = e.substring(0, t).split(/\r?\n/);
 	return {
 		line: n.length,
 		col: n[n.length - 1].length + 1
 	};
 }
-function z(e) {
+function R(e) {
 	return e.startIndex + e[1].length;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@nodable+entities@2.1.0/node_modules/@nodable/entities/src/entities.js
-var Ze = {
+//#region ../../node_modules/.pnpm/@nodable+entities@2.2.0/node_modules/@nodable/entities/src/entities.js
+var Qe = {
 	amp: "&",
 	AMP: "&",
 	lt: "<",
@@ -645,7 +646,6 @@ var Ze = {
 	num: "#",
 	dollar: "$",
 	percent: "%",
-	amp: "&",
 	ast: "*",
 	commat: "@",
 	lowbar: "_",
@@ -697,7 +697,7 @@ var Ze = {
 	times: "×",
 	div: "÷",
 	divide: "÷"
-}, Qe = {
+}, $e = {
 	Agrave: "À",
 	agrave: "à",
 	Aacute: "Á",
@@ -761,7 +761,7 @@ var Ze = {
 	szlig: "ß",
 	yuml: "ÿ",
 	Yuml: "Ÿ"
-}, $e = {
+}, et = {
 	Amacr: "Ā",
 	amacr: "ā",
 	Abreve: "Ă",
@@ -879,7 +879,7 @@ var Ze = {
 	zdot: "ż",
 	Zcaron: "Ž",
 	zcaron: "ž"
-}, et = {
+}, tt = {
 	Alpha: "Α",
 	alpha: "α",
 	Beta: "Β",
@@ -950,7 +950,7 @@ var Ze = {
 	Gammad: "Ϝ",
 	gammad: "ϝ",
 	digamma: "ϝ"
-}, tt = {
+}, nt = {
 	Afr: "𝔄",
 	afr: "𝔞",
 	Acy: "А",
@@ -1045,11 +1045,8 @@ var Ze = {
 	ubrcy: "ў",
 	DZcy: "Џ",
 	dzcy: "џ"
-}, nt = {
+}, rt = {
 	plus: "+",
-	minus: "−",
-	mnplus: "∓",
-	mp: "∓",
 	pm: "±",
 	times: "×",
 	div: "÷",
@@ -1122,10 +1119,6 @@ var Ze = {
 	bumpe: "≏",
 	bumpeq: "≏",
 	HumpEqual: "≏",
-	dotminus: "∸",
-	minusd: "∸",
-	plusdo: "∔",
-	dotplus: "∔",
 	le: "≤",
 	LessEqual: "≤",
 	ge: "≥",
@@ -1134,7 +1127,7 @@ var Ze = {
 	lesseqqgtr: "⪋",
 	greater: ">",
 	less: "<"
-}, rt = {
+}, it = {
 	alefsym: "ℵ",
 	aleph: "ℵ",
 	beth: "ℶ",
@@ -1236,7 +1229,6 @@ var Ze = {
 	wreath: "≀",
 	nsime: "≄",
 	nsimeq: "≄",
-	nsimeq: "≄",
 	ncong: "≇",
 	simne: "≆",
 	ncongdot: "⩭̸",
@@ -1256,7 +1248,7 @@ var Ze = {
 	npr: "⊀",
 	nsucc: "⊁",
 	nsc: "⊁"
-}, it = {
+}, at = {
 	larr: "←",
 	leftarrow: "←",
 	LeftArrow: "←",
@@ -1347,10 +1339,6 @@ var Ze = {
 	mapsto: "↦",
 	mapstodown: "↧",
 	crarr: "↵",
-	nwarrow: "↖",
-	nearrow: "↗",
-	searrow: "↘",
-	swarrow: "↙",
 	nleftarrow: "↚",
 	nleftrightarrow: "↮",
 	nrightarrow: "↛",
@@ -1391,7 +1379,6 @@ var Ze = {
 	ldrushar: "⥋",
 	rdldhar: "⥩",
 	lrhard: "⥭",
-	rlhar: "⇌",
 	uharr: "↾",
 	uharl: "↿",
 	dharr: "⇂",
@@ -1407,13 +1394,12 @@ var Ze = {
 	nhArr: "⇎",
 	nlarr: "↚",
 	nlArr: "⇍",
-	nrarr: "↛",
 	nrArr: "⇏",
 	larrb: "⇤",
 	LeftArrowBar: "⇤",
 	rarrb: "⇥",
 	RightArrowBar: "⇥"
-}, at = {
+}, ot = {
 	square: "□",
 	Square: "□",
 	squ: "□",
@@ -1506,7 +1492,7 @@ var Ze = {
 	boxvH: "╪",
 	boxVh: "╫",
 	boxVH: "╬"
-}, ot = {
+}, st = {
 	excl: "!",
 	iexcl: "¡",
 	brvbar: "¦",
@@ -1556,16 +1542,14 @@ var Ze = {
 	DiacriticalTilde: "˜",
 	DiacriticalDot: "˙",
 	DiacriticalDoubleAcute: "˝",
-	grave: "`",
-	acute: "´"
-}, st = {
+	grave: "`"
+}, ct = {
 	cent: "¢",
 	pound: "£",
 	curren: "¤",
 	yen: "¥",
 	euro: "€",
 	dollar: "$",
-	euro: "€",
 	fnof: "ƒ",
 	inr: "₹",
 	af: "؋",
@@ -1575,7 +1559,7 @@ var Ze = {
 	won: "₩",
 	yuan: "¥",
 	cedil: "¸"
-}, ct = {
+}, lt = {
 	frac12: "½",
 	half: "½",
 	frac13: "⅓",
@@ -1593,7 +1577,7 @@ var Ze = {
 	frac58: "⅝",
 	frac78: "⅞",
 	frasl: "⁄"
-}, lt = {
+}, ut = {
 	trade: "™",
 	TRADE: "™",
 	telrec: "⌕",
@@ -1653,7 +1637,6 @@ var Ze = {
 	Vdash: "⊩",
 	dashv: "⊣",
 	vDash: "⊨",
-	Vdash: "⊩",
 	Vvdash: "⊪",
 	nvdash: "⊬",
 	nvDash: "⊭",
@@ -1661,7 +1644,6 @@ var Ze = {
 	nVDash: "⊯"
 };
 ({
-	...Ze,
 	...Qe,
 	...$e,
 	...et,
@@ -1673,15 +1655,16 @@ var Ze = {
 	...ot,
 	...st,
 	...ct,
-	...lt
+	...lt,
+	...ut
 });
-var ut = {
+var dt = {
 	amp: "&",
 	apos: "'",
 	gt: ">",
 	lt: "<",
 	quot: "\""
-}, dt = {
+}, ft = {
 	nbsp: "\xA0",
 	copy: "©",
 	reg: "®",
@@ -1702,10 +1685,14 @@ var ut = {
 	frac12: "½",
 	frac14: "¼",
 	frac34: "¾"
-}, ft = /* @__PURE__ */ new Set("!?\\\\/[]$%{}^&*()<>|+");
-function pt(e) {
+}, z = Object.freeze({
+	ALLOW: "allow",
+	BLOCK: "block",
+	THROW: "throw"
+}), pt = /* @__PURE__ */ new Set("!?\\\\/[]$%{}^&*()<>|+");
+function mt(e) {
 	if (e[0] === "#") throw Error(`[EntityReplacer] Invalid character '#' in entity name: "${e}"`);
-	for (let t of e) if (ft.has(t)) throw Error(`[EntityReplacer] Invalid character '${t}' in entity name: "${e}"`);
+	for (let t of e) if (pt.has(t)) throw Error(`[EntityReplacer] Invalid character '${t}' in entity name: "${e}"`);
 	return e;
 }
 function B(...e) {
@@ -1720,16 +1707,16 @@ function B(...e) {
 	}
 	return t;
 }
-var V = "external", H = "base", mt = "all";
+var V = "external", H = "base", U = "all";
 function ht(e) {
-	return !e || e === V ? new Set([V]) : e === mt ? new Set([mt]) : e === H ? new Set([H]) : Array.isArray(e) ? new Set(e) : new Set([V]);
+	return !e || e === V ? /* @__PURE__ */ new Set([V]) : e === U ? /* @__PURE__ */ new Set([U]) : e === H ? /* @__PURE__ */ new Set([H]) : Array.isArray(e) ? new Set(e) : /* @__PURE__ */ new Set([V]);
 }
-var U = Object.freeze({
+var W = Object.freeze({
 	allow: 0,
 	leave: 1,
 	remove: 2,
 	throw: 3
-}), gt = new Set([
+}), gt = /* @__PURE__ */ new Set([
 	9,
 	10,
 	13
@@ -1737,31 +1724,50 @@ var U = Object.freeze({
 function _t(e) {
 	if (!e) return {
 		xmlVersion: 1,
-		onLevel: U.allow,
-		nullLevel: U.remove
+		onLevel: W.allow,
+		nullLevel: W.remove
 	};
-	let t = e.xmlVersion === 1.1 ? 1.1 : 1, n = U[e.onNCR] ?? U.allow, r = U[e.nullNCR] ?? U.remove;
+	let t = e.xmlVersion === 1.1 ? 1.1 : 1, n = W[e.onNCR] ?? W.allow, r = W[e.nullNCR] ?? W.remove;
 	return {
 		xmlVersion: t,
 		onLevel: n,
-		nullLevel: Math.max(r, U.remove)
+		nullLevel: Math.max(r, W.remove)
 	};
 }
 var vt = class {
 	constructor(e = {}) {
-		this._limit = e.limit || {}, this._maxTotalExpansions = this._limit.maxTotalExpansions || 0, this._maxExpandedLength = this._limit.maxExpandedLength || 0, this._postCheck = typeof e.postCheck == "function" ? e.postCheck : (e) => e, this._limitTiers = ht(this._limit.applyLimitsTo ?? V), this._numericAllowed = e.numericAllowed ?? !0, this._baseMap = B(ut, e.namedEntities || null), this._externalMap = Object.create(null), this._inputMap = Object.create(null), this._totalExpansions = 0, this._expandedLength = 0, this._removeSet = new Set(e.remove && Array.isArray(e.remove) ? e.remove : []), this._leaveSet = new Set(e.leave && Array.isArray(e.leave) ? e.leave : []);
+		this._limit = e.limit || {}, this._maxTotalExpansions = this._limit.maxTotalExpansions || 0, this._maxExpandedLength = this._limit.maxExpandedLength || 0, this._postCheck = typeof e.postCheck == "function" ? e.postCheck : (e) => e, this._limitTiers = ht(this._limit.applyLimitsTo ?? V), this._numericAllowed = e.numericAllowed ?? !0, this._baseMap = B(dt, e.namedEntities || null), this._externalMap = Object.create(null), this._inputMap = Object.create(null), this._totalExpansions = 0, this._expandedLength = 0, this._removeSet = new Set(e.remove && Array.isArray(e.remove) ? e.remove : []), this._leaveSet = new Set(e.leave && Array.isArray(e.leave) ? e.leave : []);
 		let t = _t(e.ncr);
-		this._ncrXmlVersion = t.xmlVersion, this._ncrOnLevel = t.onLevel, this._ncrNullLevel = t.nullLevel;
+		this._ncrXmlVersion = t.xmlVersion, this._ncrOnLevel = t.onLevel, this._ncrNullLevel = t.nullLevel, this._onExternalEntity = typeof e.onExternalEntity == "function" ? e.onExternalEntity : null, this._onInputEntity = typeof e.onInputEntity == "function" ? e.onInputEntity : null;
+	}
+	_applyRegistrationHook(e, t, n, r) {
+		if (!e) return !0;
+		let i = e(t, n);
+		if (i === z.BLOCK) return !1;
+		if (i === z.THROW) throw Error(`[EntityDecoder] Registration of ${r} entity "&${t};" was rejected by hook`);
+		return !0;
 	}
 	setExternalEntities(e) {
-		if (e) for (let t of Object.keys(e)) pt(t);
-		this._externalMap = B(e);
+		if (e) for (let t of Object.keys(e)) mt(t);
+		if (!this._onExternalEntity) {
+			this._externalMap = B(e);
+			return;
+		}
+		let t = B(e), n = Object.create(null);
+		for (let [e, r] of Object.entries(t)) this._applyRegistrationHook(this._onExternalEntity, e, r, "external") && (n[e] = r);
+		this._externalMap = n;
 	}
 	addExternalEntity(e, t) {
-		pt(e), typeof t == "string" && t.indexOf("&") === -1 && (this._externalMap[e] = t);
+		mt(e), typeof t == "string" && t.indexOf("&") === -1 && this._applyRegistrationHook(this._onExternalEntity, e, t, "external") && (this._externalMap[e] = t);
 	}
 	addInputEntities(e) {
-		this._totalExpansions = 0, this._expandedLength = 0, this._inputMap = B(e);
+		if (this._totalExpansions = 0, this._expandedLength = 0, !this._onInputEntity) {
+			this._inputMap = B(e);
+			return;
+		}
+		let t = B(e), n = Object.create(null);
+		for (let [e, r] of Object.entries(t)) this._applyRegistrationHook(this._onInputEntity, e, r, "input") && (n[e] = r);
+		this._inputMap = n;
 	}
 	reset() {
 		return this._inputMap = Object.create(null), this._totalExpansions = 0, this._expandedLength = 0, this;
@@ -1770,7 +1776,7 @@ var vt = class {
 		this._ncrXmlVersion = e === 1.1 ? 1.1 : 1;
 	}
 	decode(e) {
-		if (typeof e != "string" || e.length === 0) return e;
+		if (typeof e != "string" || e.length === 0 || e.indexOf("&") === -1) return e;
 		let t = e, n = [], r = e.length, i = 0, a = 0, o = this._maxTotalExpansions > 0, s = this._maxExpandedLength > 0, c = o || s;
 		for (; a < r;) {
 			if (e.charCodeAt(a) !== 38) {
@@ -1821,7 +1827,7 @@ var vt = class {
 		return this._postCheck(l, t);
 	}
 	_tierCounts(e) {
-		return this._limitTiers.has(mt) ? !0 : this._limitTiers.has(e);
+		return this._limitTiers.has(U) ? !0 : this._limitTiers.has(e);
 	}
 	_resolveName(e) {
 		if (e in this._inputMap) return {
@@ -1838,14 +1844,14 @@ var vt = class {
 		};
 	}
 	_classifyNCR(e) {
-		return e === 0 ? this._ncrNullLevel : e >= 55296 && e <= 57343 || this._ncrXmlVersion === 1 && e >= 1 && e <= 31 && !gt.has(e) ? U.remove : -1;
+		return e === 0 ? this._ncrNullLevel : e >= 55296 && e <= 57343 || this._ncrXmlVersion === 1 && e >= 1 && e <= 31 && !gt.has(e) ? W.remove : -1;
 	}
 	_applyNCRAction(e, t, n) {
 		switch (e) {
-			case U.allow: return String.fromCodePoint(n);
-			case U.remove: return "";
-			case U.leave: return;
-			case U.throw: throw Error(`[EntityDecoder] Prohibited numeric character reference &${t}; (U+${n.toString(16).toUpperCase().padStart(4, "0")})`);
+			case W.allow: return String.fromCodePoint(n);
+			case W.remove: return "";
+			case W.leave: return;
+			case W.throw: throw Error(`[EntityDecoder] Prohibited numeric character reference &${t}; (U+${n.toString(16).toUpperCase().padStart(4, "0")})`);
 			default: return String.fromCodePoint(n);
 		}
 	}
@@ -1853,11 +1859,11 @@ var vt = class {
 		let t = e.charCodeAt(1), n;
 		if (n = t === 120 || t === 88 ? parseInt(e.slice(2), 16) : parseInt(e.slice(1), 10), Number.isNaN(n) || n < 0 || n > 1114111) return;
 		let r = this._classifyNCR(n);
-		if (!this._numericAllowed && r < U.remove) return;
+		if (!this._numericAllowed && r < W.remove) return;
 		let i = r === -1 ? this._ncrOnLevel : Math.max(this._ncrOnLevel, r);
 		return this._applyNCRAction(i, e, n);
 	}
-}, yt = (e) => I.includes(e) ? "__" + e : e, bt = {
+}, yt = (e) => Ie.includes(e) ? "__" + e : e, bt = {
 	preserveOrder: !1,
 	attributeNamePrefix: "@_",
 	attributesGroupName: !1,
@@ -1872,7 +1878,8 @@ var vt = class {
 	numberParseOptions: {
 		hex: !0,
 		leadingZeros: !0,
-		eNotation: !0
+		eNotation: !0,
+		unicode: !1
 	},
 	tagValueProcessor: function(e, t) {
 		return t;
@@ -1904,7 +1911,7 @@ var vt = class {
 function xt(e, t) {
 	if (typeof e != "string") return;
 	let n = e.toLowerCase();
-	if (I.some((e) => n === e.toLowerCase()) || Ie.some((e) => n === e.toLowerCase())) throw Error(`[SECURITY] Invalid ${t}: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
+	if (Ie.some((e) => n === e.toLowerCase()) || Le.some((e) => n === e.toLowerCase())) throw Error(`[SECURITY] Invalid ${t}: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
 }
 function St(e, t) {
 	return typeof e == "boolean" ? {
@@ -1954,7 +1961,7 @@ var Ct = function(e) {
 	];
 	for (let { value: e, name: t } of n) e && xt(e, t);
 	return t.onDangerousProperty === null && (t.onDangerousProperty = yt), t.processEntities = St(t.processEntities, t.htmlEntities), t.unpairedTagsSet = new Set(t.unpairedTags), t.stopNodes && Array.isArray(t.stopNodes) && (t.stopNodes = t.stopNodes.map((e) => typeof e == "string" && e.startsWith("*.") ? ".." + e.substring(2) : e)), t;
-}, wt = typeof Symbol == "function" ? Symbol("XML Node Metadata") : "@@xmlMetadata", W = class {
+}, wt = typeof Symbol == "function" ? Symbol("XML Node Metadata") : "@@xmlMetadata", G = class {
 	constructor(e) {
 		this.tagname = e, this.child = [], this[":@"] = Object.create(null);
 	}
@@ -1970,7 +1977,7 @@ var Ct = function(e) {
 	static getMetaDataSymbol() {
 		return wt;
 	}
-}, Tt = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�", Et = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�\\-\\.\\d·̀-ͯ‿-⁀", Dt = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�𐀀-󯿿", Ot = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�𐀀-󯿿\\-\\.\\d·̀-ͯ҇‿-⁀", kt = (e, t, n = "") => {
+}, Tt = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�", Et = ":A-Za-z_À-ÖØ-öø-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�\\-\\.\\d·̀-ͯ‿-⁀", Dt = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�𐀀-󯿿", Ot = ":A-Za-z_À-˿Ͱ-ͽͿ-҆҈-῿‌-‍⁰-↏Ⰰ-⿯、-퟿豈-﷏ﷰ-�𐀀-󯿿\\-\\.\\d·̀-ͯ҇‿-⁀", K = (e, t, n = "") => {
 	let r = `[${e.replace(":", "")}][${t.replace(":", "")}]*`;
 	return {
 		name: RegExp(`^[${e}][${t}]*$`, n),
@@ -1979,7 +1986,24 @@ var Ct = function(e) {
 		nmToken: RegExp(`^[${t}]+$`, n),
 		nmTokens: RegExp(`^[${t}]+(?:\\s+[${t}]+)*$`, n)
 	};
-}, At = kt(Tt, Et), jt = kt(Dt, Ot, "u"), Mt = (e = "1.0") => e === "1.1" ? jt : At, G = (e, { xmlVersion: t = "1.0" } = {}) => Mt(t).qName.test(e), Nt = class {
+}, kt = K(Tt, Et), At = K(Dt, Ot, "u"), jt = K(":A-Za-z_", ":A-Za-z_\\-\\.\\d"), Mt = (e = "1.0", t = !1) => t ? jt : e === "1.1" ? At : kt, Nt = (e, { xmlVersion: t = "1.0", asciiOnly: n = !1 } = {}) => Mt(t, n).qName.test(e), Pt = [
+	"name",
+	"ncName",
+	"qName",
+	"nmToken",
+	"nmTokens"
+], Ft = (e, { xmlVersion: t = "1.0", asciiOnly: n = !1, maxCacheSize: r = 2048 } = {}) => {
+	if (!Pt.includes(e)) throw TypeError(`Unknown production "${e}". Must be one of: ${Pt.join(", ")}`);
+	let i = Mt(t, n)[e], a = /* @__PURE__ */ new Map(), o = (e) => {
+		let t = a.get(e);
+		if (t !== void 0) return t;
+		let n = i.test(e);
+		return a.size < r && a.set(e, n), n;
+	};
+	return o.reset = () => {
+		a = /* @__PURE__ */ new Map();
+	}, o;
+}, It = class {
 	constructor(e, t) {
 		this.suppressValidationErr = !e, this.options = e, this.xmlVersion = t || 1;
 	}
@@ -1992,23 +2016,23 @@ var Ct = function(e) {
 			t += 9;
 			let i = 1, a = !1, o = !1, s = "";
 			for (; t < e.length; t++) if (e[t] === "<" && !o) {
-				if (a && q(e, "!ENTITY", t)) {
+				if (a && J(e, "!ENTITY", t)) {
 					t += 7;
 					let i, a;
 					if ([i, a, t] = this.readEntityExp(e, t + 1, this.suppressValidationErr), a.indexOf("&") === -1) {
 						if (this.options.enabled !== !1 && this.options.maxEntityCount != null && r >= this.options.maxEntityCount) throw Error(`Entity count (${r + 1}) exceeds maximum allowed (${this.options.maxEntityCount})`);
 						n[i] = a, r++;
 					}
-				} else if (a && q(e, "!ELEMENT", t)) {
+				} else if (a && J(e, "!ELEMENT", t)) {
 					t += 8;
 					let { index: n } = this.readElementExp(e, t + 1);
 					t = n;
-				} else if (a && q(e, "!ATTLIST", t)) t += 8;
-				else if (a && q(e, "!NOTATION", t)) {
+				} else if (a && J(e, "!ATTLIST", t)) t += 8;
+				else if (a && J(e, "!NOTATION", t)) {
 					t += 9;
 					let { index: n } = this.readNotationExp(e, t + 1, this.suppressValidationErr);
 					t = n;
-				} else if (q(e, "!--", t)) o = !0;
+				} else if (J(e, "!--", t)) o = !0;
 				else throw Error("Invalid DOCTYPE");
 				i++, s = "";
 			} else if (e[t] === ">") {
@@ -2022,11 +2046,11 @@ var Ct = function(e) {
 		};
 	}
 	readEntityExp(e, t) {
-		t = K(e, t);
+		t = q(e, t);
 		let n = t;
 		for (; t < e.length && !/\s/.test(e[t]) && e[t] !== "\"" && e[t] !== "'";) t++;
 		let r = e.substring(n, t);
-		if (J(r, { xmlVersion: this.xmlVersion }), t = K(e, t), !this.suppressValidationErr) {
+		if (Y(r, { xmlVersion: this.xmlVersion }), t = q(e, t), !this.suppressValidationErr) {
 			if (e.substring(t, t + 6).toUpperCase() === "SYSTEM") throw Error("External entities are not supported");
 			if (e[t] === "%") throw Error("Parameter entities are not supported");
 		}
@@ -2039,16 +2063,16 @@ var Ct = function(e) {
 		];
 	}
 	readNotationExp(e, t) {
-		t = K(e, t);
+		t = q(e, t);
 		let n = t;
 		for (; t < e.length && !/\s/.test(e[t]);) t++;
 		let r = e.substring(n, t);
-		!this.suppressValidationErr && J(r, { xmlVersion: this.xmlVersion }), t = K(e, t);
+		!this.suppressValidationErr && Y(r, { xmlVersion: this.xmlVersion }), t = q(e, t);
 		let i = e.substring(t, t + 6).toUpperCase();
 		if (!this.suppressValidationErr && i !== "SYSTEM" && i !== "PUBLIC") throw Error(`Expected SYSTEM or PUBLIC, found "${i}"`);
-		t += i.length, t = K(e, t);
+		t += i.length, t = q(e, t);
 		let a = null, o = null;
-		if (i === "PUBLIC") [t, a] = this.readIdentifierVal(e, t, "publicIdentifier"), t = K(e, t), (e[t] === "\"" || e[t] === "'") && ([t, o] = this.readIdentifierVal(e, t, "systemIdentifier"));
+		if (i === "PUBLIC") [t, a] = this.readIdentifierVal(e, t, "publicIdentifier"), t = q(e, t), (e[t] === "\"" || e[t] === "'") && ([t, o] = this.readIdentifierVal(e, t, "systemIdentifier"));
 		else if (i === "SYSTEM" && ([t, o] = this.readIdentifierVal(e, t, "systemIdentifier"), !this.suppressValidationErr && !o)) throw Error("Missing mandatory system identifier for SYSTEM notation");
 		return {
 			notationName: r,
@@ -2067,15 +2091,15 @@ var Ct = function(e) {
 		return t++, [t, r];
 	}
 	readElementExp(e, t) {
-		t = K(e, t);
+		t = q(e, t);
 		let n = t;
 		for (; t < e.length && !/\s/.test(e[t]);) t++;
 		let r = e.substring(n, t);
-		if (!this.suppressValidationErr && !G(r, { xmlVersion: this.xmlVersion })) throw Error(`Invalid element name: "${r}"`);
-		t = K(e, t);
+		if (!this.suppressValidationErr && !Nt(r, { xmlVersion: this.xmlVersion })) throw Error(`Invalid element name: "${r}"`);
+		t = q(e, t);
 		let i = "";
-		if (e[t] === "E" && q(e, "MPTY", t)) t += 4;
-		else if (e[t] === "A" && q(e, "NY", t)) t += 2;
+		if (e[t] === "E" && J(e, "MPTY", t)) t += 4;
+		else if (e[t] === "A" && J(e, "NY", t)) t += 2;
 		else if (e[t] === "(") {
 			t++;
 			let n = t;
@@ -2089,25 +2113,25 @@ var Ct = function(e) {
 		};
 	}
 	readAttlistExp(e, t) {
-		t = K(e, t);
+		t = q(e, t);
 		let n = t;
 		for (; t < e.length && !/\s/.test(e[t]);) t++;
 		let r = e.substring(n, t);
-		for (J(r, { xmlVersion: this.xmlVersion }), t = K(e, t), n = t; t < e.length && !/\s/.test(e[t]);) t++;
+		for (Y(r, { xmlVersion: this.xmlVersion }), t = q(e, t), n = t; t < e.length && !/\s/.test(e[t]);) t++;
 		let i = e.substring(n, t);
-		if (!J(i, { xmlVersion: this.xmlVersion })) throw Error(`Invalid attribute name: "${i}"`);
-		t = K(e, t);
+		if (!Y(i, { xmlVersion: this.xmlVersion })) throw Error(`Invalid attribute name: "${i}"`);
+		t = q(e, t);
 		let a = "";
 		if (e.substring(t, t + 8).toUpperCase() === "NOTATION") {
-			if (a = "NOTATION", t += 8, t = K(e, t), e[t] !== "(") throw Error(`Expected '(', found "${e[t]}"`);
+			if (a = "NOTATION", t += 8, t = q(e, t), e[t] !== "(") throw Error(`Expected '(', found "${e[t]}"`);
 			t++;
 			let n = [];
 			for (; t < e.length && e[t] !== ")";) {
 				let r = t;
 				for (; t < e.length && e[t] !== "|" && e[t] !== ")";) t++;
 				let i = e.substring(r, t);
-				if (i = i.trim(), !J(i, { xmlVersion: this.xmlVersion })) throw Error(`Invalid notation name: "${i}"`);
-				n.push(i), e[t] === "|" && (t++, t = K(e, t));
+				if (i = i.trim(), !Y(i, { xmlVersion: this.xmlVersion })) throw Error(`Invalid notation name: "${i}"`);
+				n.push(i), e[t] === "|" && (t++, t = q(e, t));
 			}
 			if (e[t] !== ")") throw Error("Unterminated list of notations");
 			t++, a += " (" + n.join("|") + ")";
@@ -2125,7 +2149,7 @@ var Ct = function(e) {
 				"NMTOKENS"
 			].includes(a.toUpperCase())) throw Error(`Invalid attribute type: "${a}"`);
 		}
-		t = K(e, t);
+		t = q(e, t);
 		let o = "";
 		return e.substring(t, t + 8).toUpperCase() === "#REQUIRED" ? (o = "#REQUIRED", t += 8) : e.substring(t, t + 7).toUpperCase() === "#IMPLIED" ? (o = "#IMPLIED", t += 7) : [t, o] = this.readIdentifierVal(e, t, "ATTLIST"), {
 			elementName: r,
@@ -2135,43 +2159,190 @@ var Ct = function(e) {
 			index: t
 		};
 	}
-}, K = (e, t) => {
+}, q = (e, t) => {
 	for (; t < e.length && /\s/.test(e[t]);) t++;
 	return t;
 };
-function q(e, t, n) {
+function J(e, t, n) {
 	for (let r = 0; r < t.length; r++) if (t[r] !== e[n + r + 1]) return !1;
 	return !0;
 }
-function J(e, t) {
-	if (G(e, { xmlVersion: t })) return e;
+function Y(e, t) {
+	if (Nt(e, { xmlVersion: t })) return e;
 	throw Error(`Invalid entity name ${e}`);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/strnum@2.3.0/node_modules/strnum/strnum.js
-var Pt = /^[-+]?0x[a-fA-F0-9]+$/, Ft = /^0b[01]+$/, It = /^0o[0-7]+$/, Lt = /^([\-\+])?(0*)([0-9]*(\.[0-9]*)?)$/, Rt = {
+//#region ../../node_modules/.pnpm/anynum@1.0.1/node_modules/anynum/digitTable.js
+var Lt = [
+	48,
+	1632,
+	1776,
+	2406,
+	2534,
+	2662,
+	2790,
+	2918,
+	3046,
+	3174,
+	3302,
+	3430,
+	3558,
+	3664,
+	3792,
+	3872,
+	4160,
+	4240,
+	6112,
+	6160,
+	6470,
+	6608,
+	6784,
+	6800,
+	6992,
+	7088,
+	7232,
+	7248,
+	65296,
+	120782,
+	120792,
+	120802,
+	120812,
+	120822,
+	66720,
+	68912,
+	69734,
+	69872,
+	69942,
+	70096,
+	70384,
+	70736,
+	70864,
+	71248,
+	71360,
+	71472,
+	71904,
+	72016,
+	72688,
+	72784,
+	73040,
+	73120,
+	73552,
+	92768,
+	92864,
+	93008,
+	123200,
+	123632,
+	124144,
+	125264,
+	130032
+], Rt = /* @__PURE__ */ new Map(), zt = 65535, Bt = 1632, Vt = (/* @__PURE__ */ new Uint8Array(63904)).fill(255);
+for (let e of Lt) for (let t = 0; t < 10; t++) {
+	let n = e + t;
+	n <= zt ? Vt[n - Bt] = t : Rt.set(n, t);
+}
+//#endregion
+//#region ../../node_modules/.pnpm/anynum@1.0.1/node_modules/anynum/anynum.js
+var Ht = 48, Ut = 57, Wt = 45, X = /* @__PURE__ */ new Set([
+	8722,
+	65293,
+	65123
+]);
+function Gt(e) {
+	if (typeof e != "string") return e;
+	let t = e.length;
+	if (t === 0) return e;
+	let n = -1;
+	for (let r = 0; r < t; r++) {
+		let i = e.charCodeAt(r);
+		if (!(i >= Ht && i <= Ut || i === Wt)) {
+			if (i < 1632) {
+				if (X.has(i)) {
+					n = r;
+					break;
+				}
+				continue;
+			}
+			if (i >= 55296 && i <= 56319) {
+				if (r + 1 < t) {
+					let t = e.charCodeAt(r + 1);
+					if (t >= 56320 && t <= 57343) {
+						let e = 65536 + (i - 55296 << 10) + (t - 56320);
+						if (Rt.has(e)) {
+							n = r;
+							break;
+						}
+					}
+				}
+				continue;
+			}
+			if (Vt[i - 1632] !== 255 || X.has(i)) {
+				n = r;
+				break;
+			}
+		}
+	}
+	if (n === -1) return e;
+	let r = [];
+	n > 0 && r.push(e.slice(0, n));
+	for (let i = n; i < t; i++) {
+		let n = e.charCodeAt(i);
+		if (n >= Ht && n <= Ut || n === Wt) {
+			r.push(e[i]);
+			continue;
+		}
+		if (n < 1632) {
+			r.push(X.has(n) ? "-" : e[i]);
+			continue;
+		}
+		if (n >= 55296 && n <= 56319) {
+			if (i + 1 < t) {
+				let t = e.charCodeAt(i + 1);
+				if (t >= 56320 && t <= 57343) {
+					let e = 65536 + (n - 55296 << 10) + (t - 56320), a = Rt.get(e);
+					if (a !== void 0) {
+						r.push(String.fromCharCode(a + 48)), i++;
+						continue;
+					}
+				}
+			}
+			r.push(e[i]);
+			continue;
+		}
+		if (X.has(n)) {
+			r.push("-");
+			continue;
+		}
+		let a = Vt[n - Bt];
+		r.push(a === 255 ? e[i] : String.fromCharCode(a + 48));
+	}
+	return r.join("");
+}
+//#endregion
+//#region ../../node_modules/.pnpm/strnum@2.4.1/node_modules/strnum/strnum.js
+var Kt = /^[-+]?0x[a-fA-F0-9]+$/, qt = /^0b[01]+$/, Jt = /^0o[0-7]+$/, Yt = /^([\-\+])?(0*)([0-9]*(\.[0-9]*)?)$/, Xt = {
 	hex: !0,
 	binary: !1,
 	octal: !1,
 	leadingZeros: !0,
 	decimalPoint: ".",
 	eNotation: !0,
-	infinity: "original"
+	infinity: "original",
+	unicode: !1
 };
-function zt(e, t = {}) {
-	if (t = Object.assign({}, Rt, t), !e || typeof e != "string") return e;
+function Zt(e, t = {}) {
+	if (t = Object.assign({}, Xt, t), !e || typeof e != "string") return e;
 	let n = e.trim();
 	if (n.length === 0 || t.skipLike !== void 0 && t.skipLike.test(n)) return e;
-	if (n === "0") return 0;
-	if (t.hex && Pt.test(n)) return Y(n, 16);
-	if (t.binary && Ft.test(n)) return Y(n, 2);
-	if (t.octal && It.test(n)) return Y(n, 8);
-	if (!isFinite(n)) return Ut(e, Number(n), t);
-	if (n.includes("e") || n.includes("E")) return Vt(e, n, t);
-	{
-		let r = Lt.exec(n);
+	if (n === "0" || t.unicode && (n = Gt(n), n === "0")) return 0;
+	if (t.hex && Kt.test(n)) return tn(n, 16);
+	if (t.binary && qt.test(n)) return tn(n, 2);
+	if (t.octal && Jt.test(n)) return tn(n, 8);
+	if (!isFinite(n)) return nn(e, Number(n), t);
+	if (n.includes("e") || n.includes("E")) return $t(e, n, t);
+	{
+		let r = Yt.exec(n);
 		if (r) {
-			let i = r[1] || "", a = r[2], o = Ht(r[3]), s = i ? e[a.length + 1] === "." : e[a.length] === ".";
+			let i = r[1] || "", a = r[2], o = en(r[3]), s = i ? e[a.length + 1] === "." : e[a.length] === ".";
 			if (!t.leadingZeros && (a.length > 1 || a.length === 1 && !s)) return e;
 			{
 				let r = Number(n), s = String(r);
@@ -2184,26 +2355,26 @@ function zt(e, t = {}) {
 		} else return e;
 	}
 }
-var Bt = /^([-+])?(0*)(\d*(\.\d*)?[eE][-\+]?\d+)$/;
-function Vt(e, t, n) {
+var Qt = /^([-+])?(0*)(\d*(\.\d*)?[eE][-\+]?\d+)$/;
+function $t(e, t, n) {
 	if (!n.eNotation) return e;
-	let r = t.match(Bt);
+	let r = t.match(Qt);
 	if (r) {
 		let i = r[1] || "", a = r[3].indexOf("e") === -1 ? "E" : "e", o = r[2], s = i ? e[o.length + 1] === a : e[o.length] === a;
 		return o.length > 1 && s ? e : o.length === 1 && (r[3].startsWith(`.${a}`) || r[3][0] === a) ? Number(t) : o.length > 0 ? n.leadingZeros && !s ? (t = (r[1] || "") + r[3], Number(t)) : e : Number(t);
 	} else return e;
 }
-function Ht(e) {
+function en(e) {
 	return e && e.indexOf(".") !== -1 ? (e = e.replace(/0+$/, ""), e === "." ? e = "0" : e[0] === "." ? e = "0" + e : e[e.length - 1] === "." && (e = e.substring(0, e.length - 1)), e) : e;
 }
-function Y(e, t) {
+function tn(e, t) {
 	let n = e.trim();
 	if ((t === 2 || t === 8) && (e = n.substring(2)), parseInt) return parseInt(e, t);
 	if (Number.parseInt) return Number.parseInt(e, t);
 	if (window && window.parseInt) return window.parseInt(e, t);
 	throw Error("parseInt, Number.parseInt, window.parseInt are not supported");
 }
-function Ut(e, t, n) {
+function nn(e, t, n) {
 	let r = t === Infinity;
 	switch (n.infinity.toLowerCase()) {
 		case "null": return null;
@@ -2213,15 +2384,15 @@ function Ut(e, t, n) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/fast-xml-parser@5.8.0/node_modules/fast-xml-parser/src/ignoreAttributes.js
-function Wt(e) {
+//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/ignoreAttributes.js
+function rn(e) {
 	return typeof e == "function" ? e : Array.isArray(e) ? (t) => {
 		for (let n of e) if (typeof n == "string" && t === n || n instanceof RegExp && n.test(t)) return !0;
 	} : () => !1;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/path-expression-matcher@1.5.0/node_modules/path-expression-matcher/src/Expression.js
-var X = class {
+//#region ../../node_modules/.pnpm/path-expression-matcher@1.6.2/node_modules/path-expression-matcher/src/Expression.js
+var an = class {
 	constructor(e, t = {}, n) {
 		this.pattern = e, this.separator = t.separator || ".", this.segments = this._parse(e), this.data = n, this._hasDeepWildcard = this.segments.some((e) => e.type === "deep-wildcard"), this._hasAttributeCondition = this.segments.some((e) => e.attrName !== void 0), this._hasPositionSelector = this.segments.some((e) => e.position !== void 0);
 	}
@@ -2277,14 +2448,21 @@ var X = class {
 	toString() {
 		return this.pattern;
 	}
-}, Gt = class {
+}, on = class {
 	constructor() {
-		this._byDepthAndTag = /* @__PURE__ */ new Map(), this._wildcardByDepth = /* @__PURE__ */ new Map(), this._deepWildcards = [], this._patterns = /* @__PURE__ */ new Set(), this._sealed = !1;
+		this._byDepthAndTag = /* @__PURE__ */ new Map(), this._wildcardByDepth = /* @__PURE__ */ new Map(), this._deepWildcards = [], this._deepByTerminalTag = /* @__PURE__ */ new Map(), this._patterns = /* @__PURE__ */ new Set(), this._sealed = !1;
 	}
 	add(e) {
 		if (this._sealed) throw TypeError("ExpressionSet is sealed. Create a new ExpressionSet to add more expressions.");
 		if (this._patterns.has(e.pattern)) return this;
-		if (this._patterns.add(e.pattern), e.hasDeepWildcard()) return this._deepWildcards.push(e), this;
+		if (this._patterns.add(e.pattern), e.hasDeepWildcard()) {
+			let t = e.segments[e.segments.length - 1];
+			if (t && t.type !== "deep-wildcard" && t.tag !== "*") {
+				let n = t.tag;
+				this._deepByTerminalTag.has(n) || this._deepByTerminalTag.set(n, []), this._deepByTerminalTag.get(n).push(e);
+			} else this._deepWildcards.push(e);
+			return this;
+		}
 		let t = e.length, n = e.segments[e.segments.length - 1]?.tag;
 		if (!n || n === "*") this._wildcardByDepth.has(t) || this._wildcardByDepth.set(t, []), this._wildcardByDepth.get(t).push(e);
 		else {
@@ -2313,18 +2491,22 @@ var X = class {
 		return this.findMatch(e) !== null;
 	}
 	findMatch(e) {
-		let t = e.getDepth(), n = `${t}:${e.getCurrentTag()}`, r = this._byDepthAndTag.get(n);
-		if (r) {
-			for (let t = 0; t < r.length; t++) if (e.matches(r[t])) return r[t];
-		}
-		let i = this._wildcardByDepth.get(t);
+		let t = e.getDepth(), n = e.getCurrentTag(), r = `${t}:${n}`, i = this._byDepthAndTag.get(r);
 		if (i) {
 			for (let t = 0; t < i.length; t++) if (e.matches(i[t])) return i[t];
 		}
+		let a = this._wildcardByDepth.get(t);
+		if (a) {
+			for (let t = 0; t < a.length; t++) if (e.matches(a[t])) return a[t];
+		}
+		let o = this._deepByTerminalTag.get(n);
+		if (o) {
+			for (let t = 0; t < o.length; t++) if (e.matches(o[t])) return o[t];
+		}
 		for (let t = 0; t < this._deepWildcards.length; t++) if (e.matches(this._deepWildcards[t])) return this._deepWildcards[t];
 		return null;
 	}
-}, Kt = class {
+}, sn = class {
 	constructor(e) {
 		this._matcher = e;
 	}
@@ -2349,6 +2531,12 @@ var X = class {
 		let n = t[t.length - 1];
 		return n.values !== void 0 && e in n.values;
 	}
+	getAnyParentAttr(e) {
+		return this._matcher.getAnyParentAttr(e);
+	}
+	hasAnyParentAttr(e) {
+		return this._matcher.hasAnyParentAttr(e);
+	}
 	getPosition() {
 		let e = this._matcher.path;
 		return e.length === 0 ? -1 : e[e.length - 1].position ?? 0;
@@ -2375,29 +2563,43 @@ var X = class {
 	matchesAny(e) {
 		return e.matchesAny(this._matcher);
 	}
-}, qt = class {
+}, cn = class {
 	constructor(e = {}) {
-		this.separator = e.separator || ".", this.path = [], this.siblingStacks = [], this._pathStringCache = null, this._view = new Kt(this);
+		this.separator = e.separator || ".", this.path = [], this.siblingStacks = [], this._pathStringCache = null, this._view = new sn(this), this._keptAttrs = [];
 	}
-	push(e, t = null, n = null) {
+	push(e, t = null, n = null, r = null) {
 		this._pathStringCache = null, this.path.length > 0 && (this.path[this.path.length - 1].values = void 0);
-		let r = this.path.length;
-		this.siblingStacks[r] || (this.siblingStacks[r] = /* @__PURE__ */ new Map());
-		let i = this.siblingStacks[r], a = n ? `${n}:${e}` : e, o = i.get(a) || 0, s = 0;
-		for (let e of i.values()) s += e;
-		i.set(a, o + 1);
-		let c = {
+		let i = this.path.length, a = this.siblingStacks[i];
+		a || (a = {
+			counts: /* @__PURE__ */ new Map(),
+			total: 0
+		}, this.siblingStacks[i] = a);
+		let o = n ? `${n}:${e}` : e, s = a.counts.get(o) || 0, c = a.total;
+		a.counts.set(o, s + 1), a.total++;
+		let l = {
 			tag: e,
-			position: s,
-			counter: o
+			position: c,
+			counter: s
 		};
-		n != null && (c.namespace = n), t != null && (c.values = t), this.path.push(c);
+		n != null && (l.namespace = n), t != null && (l.values = t), this.path.push(l);
+		let u = this.path.length, d = r === null ? null : r.keep;
+		if (d != null && d.length > 0 && t) for (let e = 0; e < d.length; e++) {
+			let n = d[e];
+			t[n] !== void 0 && this._keptAttrs.push({
+				depth: u,
+				name: n,
+				value: t[n]
+			});
+		}
 	}
 	pop() {
 		if (this.path.length === 0) return;
 		this._pathStringCache = null;
 		let e = this.path.pop();
-		return this.siblingStacks.length > this.path.length + 1 && (this.siblingStacks.length = this.path.length + 1), e;
+		this.siblingStacks.length > this.path.length + 1 && (this.siblingStacks.length = this.path.length + 1);
+		let t = this.path.length + 1;
+		for (; this._keptAttrs.length > 0 && this._keptAttrs[this._keptAttrs.length - 1].depth >= t;) this._keptAttrs.pop();
+		return e;
 	}
 	updateCurrent(e) {
 		if (this.path.length > 0) {
@@ -2419,6 +2621,15 @@ var X = class {
 		let t = this.path[this.path.length - 1];
 		return t.values !== void 0 && e in t.values;
 	}
+	getAnyParentAttr(e) {
+		let t = this._keptAttrs;
+		for (let n = t.length - 1; n >= 0; n--) if (t[n].name === e) return t[n].value;
+	}
+	hasAnyParentAttr(e) {
+		let t = this._keptAttrs;
+		for (let n = t.length - 1; n >= 0; n--) if (t[n].name === e) return !0;
+		return !1;
+	}
 	getPosition() {
 		return this.path.length === 0 ? -1 : this.path[this.path.length - 1].position ?? 0;
 	}
@@ -2444,7 +2655,7 @@ var X = class {
 		return this.path.map((e) => e.tag);
 	}
 	reset() {
-		this._pathStringCache = null, this.path = [], this.siblingStacks = [];
+		this._pathStringCache = null, this.path = [], this.siblingStacks = [], this._keptAttrs = [];
 	}
 	matches(e) {
 		let t = e.segments;
@@ -2489,19 +2700,660 @@ var X = class {
 	snapshot() {
 		return {
 			path: this.path.map((e) => ({ ...e })),
-			siblingStacks: this.siblingStacks.map((e) => new Map(e))
+			siblingStacks: this.siblingStacks.map((e) => e && {
+				counts: new Map(e.counts),
+				total: e.total
+			}),
+			keptAttrs: this._keptAttrs.map((e) => ({ ...e }))
 		};
 	}
 	restore(e) {
-		this._pathStringCache = null, this.path = e.path.map((e) => ({ ...e })), this.siblingStacks = e.siblingStacks.map((e) => new Map(e));
+		this._pathStringCache = null, this.path = e.path.map((e) => ({ ...e })), this.siblingStacks = e.siblingStacks.map((e) => e && {
+			counts: new Map(e.counts),
+			total: e.total
+		}), this._keptAttrs = (e.keptAttrs || []).map((e) => ({ ...e }));
 	}
 	readOnly() {
 		return this._view;
 	}
-};
+}, ln = [
+	{
+		id: "html-script-open",
+		description: "<script opening tag",
+		pattern: /<script[\s>/]/i
+	},
+	{
+		id: "html-script-close",
+		description: "<\/script closing tag",
+		pattern: /<\/script[\s>]/i
+	},
+	{
+		id: "html-javascript-protocol",
+		description: "javascript: URI scheme (with optional whitespace/encoding)",
+		pattern: /j[\t\n\r ]*a[\t\n\r ]*v[\t\n\r ]*a[\t\n\r ]*s[\t\n\r ]*c[\t\n\r ]*r[\t\n\r ]*i[\t\n\r ]*p[\t\n\r ]*t[\t\n\r ]*:/i
+	},
+	{
+		id: "html-vbscript-protocol",
+		description: "vbscript: URI scheme",
+		pattern: /vbscript[\t\n\r ]*:/i
+	},
+	{
+		id: "html-data-html",
+		description: "data:text/html URI — can execute scripts in browsers",
+		pattern: /data[\t\n\r ]*:[\t\n\r ]*text\/html/i
+	},
+	{
+		id: "html-data-xhtml",
+		description: "data:application/xhtml+xml URI",
+		pattern: /data[\t\n\r ]*:[\t\n\r ]*application\/xhtml/i
+	},
+	{
+		id: "html-data-svg",
+		description: "data:image/svg+xml URI — can execute scripts",
+		pattern: /data[\t\n\r ]*:[\t\n\r ]*image\/svg\+xml/i
+	},
+	{
+		id: "html-inline-event-handler",
+		description: "Inline event handler attributes: onclick=, onerror=, onload=, etc.",
+		pattern: /\bon\w{1,30}\s*=/i
+	},
+	{
+		id: "html-entity-obfuscated-script",
+		description: "HTML-entity-encoded <script (e.g. &#x3C;script or &lt;script)",
+		pattern: /(?:&#x0*3[Cc];?|&#0*60;?|&lt;)\s*script/i
+	},
+	{
+		id: "html-entity-obfuscated-javascript",
+		description: "HTML-entity-encoded javascript: (partial — catches common &#106; or &#x6a; for \"j\")",
+		pattern: /(?:&#x0*6[Aa];?|&#0*106;?)\s*(?:&#x0*61;?|a)[\s\S]{0,80}script\s*:/i
+	},
+	{
+		id: "html-style-expression",
+		description: "CSS expression() — IE-era code execution in style attributes",
+		pattern: /style[\s\S]{0,20}expression\s*\(/i
+	},
+	{
+		id: "html-object-embed",
+		description: "<object or <embed tags that can load active content",
+		pattern: /<(?:object|embed)[\s>/]/i
+	},
+	{
+		id: "html-base-tag",
+		description: "<base href= — can hijack all relative URLs on a page",
+		pattern: /<base[\s>]/i
+	},
+	{
+		id: "html-meta-refresh",
+		description: "<meta http-equiv=\"refresh\" — can redirect users",
+		pattern: /<meta[\s\S]{0,40}http-equiv[\s\S]{0,20}refresh/i
+	},
+	{
+		id: "html-srcdoc",
+		description: "srcdoc= attribute on iframes — embeds HTML that can run scripts",
+		pattern: /srcdoc\s*=/i
+	},
+	{
+		id: "html-iframe",
+		description: "<iframe tag",
+		pattern: /<iframe[\s>/]/i
+	},
+	{
+		id: "html-form",
+		description: "<form tag — can be used for phishing / credential harvesting injection",
+		pattern: /<form[\s>/]/i
+	}
+], un = [
+	{
+		id: "xml-cdata-injection",
+		description: "CDATA section injection: <![CDATA[ breaks out of text node context",
+		pattern: /<!\[CDATA\[/i
+	},
+	{
+		id: "xml-cdata-close",
+		description: "CDATA close sequence: ]]> can terminate an enclosing CDATA section",
+		pattern: /\]\]>/
+	},
+	{
+		id: "xml-processing-instruction",
+		description: "XML processing instruction: <?xml-stylesheet or <?php etc.",
+		pattern: /<\?(?:xml[\- ]|php|asp)/i
+	},
+	{
+		id: "xml-doctype-injection",
+		description: "DOCTYPE declaration embedded in content — can define entities",
+		pattern: /<!DOCTYPE(?:[\s[]|$)/i
+	},
+	{
+		id: "xml-entity-system",
+		description: "SYSTEM keyword — used in external entity declarations (XXE)",
+		pattern: /\bSYSTEM\s+["']/i
+	},
+	{
+		id: "xml-entity-public",
+		description: "PUBLIC keyword — used in external entity declarations (XXE)",
+		pattern: /\bPUBLIC\s+["']/i
+	},
+	{
+		id: "xml-entity-declaration",
+		description: "<!ENTITY declaration — defines entities, potential XXE or entity expansion",
+		pattern: /<!ENTITY[\s%]/i
+	},
+	{
+		id: "xml-billion-laughs",
+		description: "Entity reference chaining / billion laughs: repeated &eX; style references",
+		pattern: /(?:&\w{1,20};){3,}/
+	},
+	{
+		id: "xml-namespace-confusion",
+		description: "xmlns: attribute injection — can redefine namespaces to confuse parsers",
+		pattern: /\bxmlns\s*(?::\w{1,40})?\s*=/i
+	},
+	{
+		id: "xml-comment-injection",
+		description: "<!-- comment injection — can hide content from some parsers",
+		pattern: /<!--/
+	},
+	{
+		id: "xml-comment-close",
+		description: "--> closes an enclosing XML comment",
+		pattern: /-->/
+	},
+	{
+		id: "xml-pi-close",
+		description: "?> closes an enclosing processing instruction",
+		pattern: /\?>/
+	}
+], dn = [
+	{
+		id: "svg-script-element",
+		description: "<script element inside SVG executes JavaScript",
+		pattern: /<script[\s>/]/i
+	},
+	{
+		id: "svg-xlink-href-javascript",
+		description: "xlink:href with javascript: — classic SVG XSS via <a> or <use>",
+		pattern: /xlink\s*:\s*href\s*=\s*["']?\s*javascript\s*:/i
+	},
+	{
+		id: "svg-href-javascript",
+		description: "href= with javascript: in SVG context (<a>, <animate>, etc.)",
+		pattern: /href\s*=\s*["']?\s*javascript\s*:/i
+	},
+	{
+		id: "svg-foreignobject",
+		description: "<foreignObject embeds HTML inside SVG — can execute scripts",
+		pattern: /<foreignObject[\s>/]/i
+	},
+	{
+		id: "svg-use-external",
+		description: "<use xlink:href or href pointing to external resource (non-fragment URL)",
+		pattern: /<use[\s\S]{0,60}(?:xlink\s*:\s*)?href\s*=\s*(?:["'][^#]|[^"'#\s>])/i
+	},
+	{
+		id: "svg-animate-href",
+		description: "<animate attributeName=\"href\" — can dynamically change href to javascript:",
+		pattern: /<animate[\s\S]{0,80}attributeName\s*=\s*["'][\s]*href["']/i
+	},
+	{
+		id: "svg-animate-xlinkhref",
+		description: "<animate attributeName=\"xlink:href\"",
+		pattern: /<animate[\s\S]{0,80}attributeName\s*=\s*["'][\s]*xlink\s*:\s*href["']/i
+	},
+	{
+		id: "svg-set-javascript",
+		description: "<set to=\"javascript:...\" — sets an attribute to a javascript: URI",
+		pattern: /<set[\s\S]{0,80}to\s*=\s*["']?\s*javascript\s*:/i
+	},
+	{
+		id: "svg-event-handler",
+		description: "SVG-specific event handler attributes: onload=, onerror=, onactivate=, etc.",
+		pattern: /\bon(?:load|error|activate|begin|end|repeat|focus|blur|click|mouse\w{1,20}|key\w{1,20})\s*=/i
+	},
+	{
+		id: "svg-handler-generic",
+		description: "Generic on* handler catch-all for SVG attributes",
+		pattern: /\bon\w{1,30}\s*=/i
+	},
+	{
+		id: "svg-filter-feimage",
+		description: "<feImage href= — filter primitive that can load external resources",
+		pattern: /<feImage[\s\S]{0,80}(?:xlink\s*:\s*)?href\s*=/i
+	},
+	{
+		id: "svg-image-external",
+		description: "<image xlink:href with http/https or javascript protocol",
+		pattern: /<image[\s\S]{0,80}(?:xlink\s*:\s*)?href\s*=\s*["']?\s*(?:https?|javascript)\s*:/i
+	},
+	{
+		id: "svg-style-javascript",
+		description: "style= attribute containing javascript: (e.g. background:url(javascript:...))",
+		pattern: /style\s*=[\s\S]{0,60}javascript\s*:/i
+	}
+], fn = [
+	{
+		id: "sql-block-comment-open",
+		description: "SQL block comment open: /* ... */ — unusual in legitimate user text",
+		pattern: /\/\*/
+	},
+	{
+		id: "sql-union-select",
+		description: "UNION SELECT — most common SQL injection aggregation attack",
+		pattern: /\bUNION\s{1,20}(?:ALL\s{1,20})?SELECT\b/i
+	},
+	{
+		id: "sql-drop-table",
+		description: "DROP TABLE — destructive DDL injection",
+		pattern: /\bDROP\s{1,20}TABLE\b/i
+	},
+	{
+		id: "sql-drop-database",
+		description: "DROP DATABASE — destructive DDL injection",
+		pattern: /\bDROP\s{1,20}DATABASE\b/i
+	},
+	{
+		id: "sql-insert-into",
+		description: "INSERT INTO — data injection",
+		pattern: /\bINSERT\s{1,20}INTO\b/i
+	},
+	{
+		id: "sql-delete-from",
+		description: "DELETE FROM — data deletion injection",
+		pattern: /\bDELETE\s{1,20}FROM\b/i
+	},
+	{
+		id: "sql-update-set",
+		description: "UPDATE ... SET — data modification injection",
+		pattern: /\bUPDATE\b[\s\S]{1,60}\bSET\b/i
+	},
+	{
+		id: "sql-exec-xp",
+		description: "EXEC xp_ — MSSQL extended stored procedure execution",
+		pattern: /\bEXEC(?:UTE)?\s{1,20}xp_/i
+	},
+	{
+		id: "sql-tautology-string",
+		description: "Classic string tautology: ' OR '1'='1 or \" OR \"1\"=\"1\"",
+		pattern: /'\s{0,10}OR\s{0,10}'[^']{0,20}'\s*=\s*'[^']{0,20}/i
+	},
+	{
+		id: "sql-tautology-numeric",
+		description: "Numeric tautology: OR 1=1",
+		pattern: /\bOR\s{1,10}1\s*=\s*1\b/i
+	},
+	{
+		id: "sql-always-true-zero",
+		description: "Numeric tautology: OR 0=0",
+		pattern: /\bOR\s{1,10}0\s*=\s*0\b/i
+	},
+	{
+		id: "sql-sleep-benchmark",
+		description: "Time-based blind injection: SLEEP() or BENCHMARK()",
+		pattern: /\b(?:SLEEP|BENCHMARK)\s*\(/i
+	},
+	{
+		id: "sql-waitfor-delay",
+		description: "MSSQL time-based blind injection: WAITFOR DELAY",
+		pattern: /\bWAITFOR\s{1,20}DELAY\b/i
+	},
+	{
+		id: "sql-char-function",
+		description: "CHAR() function — used to obfuscate injected strings",
+		pattern: /\bCHAR\s*\(\s*\d{1,3}/i
+	},
+	{
+		id: "sql-information-schema",
+		description: "INFORMATION_SCHEMA — reconnaissance query for table/column enumeration",
+		pattern: /\bINFORMATION_SCHEMA\b/i
+	}
+], pn = [
+	{
+		id: "shell-path-traversal-unix",
+		description: "Unix path traversal: ../  — climbing the directory tree",
+		pattern: /\.\.\//
+	},
+	{
+		id: "shell-path-traversal-windows",
+		description: "Windows path traversal: ..\\ — climbing the directory tree",
+		pattern: /\.\.\\/
+	},
+	{
+		id: "shell-path-traversal-encoded",
+		description: "URL-encoded path traversal: %2e%2e or %2f variants",
+		pattern: /%2e%2e|%2f\.\.|\.\.%2f/i
+	},
+	{
+		id: "shell-null-byte",
+		description: "Null byte injection: \\x00 or %00 — truncates strings in C-backed functions",
+		pattern: /\x00|%00/
+	},
+	{
+		id: "shell-semicolon",
+		description: "Semicolon command separator: cmd1; cmd2",
+		pattern: /;/
+	},
+	{
+		id: "shell-pipe",
+		description: "Pipe operator: cmd1 | cmd2",
+		pattern: /\|/
+	},
+	{
+		id: "shell-and-operator",
+		description: "AND operator: cmd1 && cmd2",
+		pattern: /&&/
+	},
+	{
+		id: "shell-or-operator",
+		description: "OR operator: cmd1 || cmd2",
+		pattern: /\|\|/
+	},
+	{
+		id: "shell-backtick",
+		description: "Backtick command substitution: `cmd`",
+		pattern: /`/
+	},
+	{
+		id: "shell-dollar-paren",
+		description: "Dollar-paren command substitution: $(cmd)",
+		pattern: /\$\(/
+	},
+	{
+		id: "shell-dollar-brace",
+		description: "Dollar-brace variable expansion: ${var} — can be abused for injection",
+		pattern: /\$\{/
+	},
+	{
+		id: "shell-redirect-out",
+		description: "Output redirection: cmd > file or cmd >> file",
+		pattern: />{1,2}/
+	},
+	{
+		id: "shell-redirect-in",
+		description: "Input redirection: cmd < file",
+		pattern: /</
+	},
+	{
+		id: "shell-newline-injection",
+		description: "Newline injection: \\n or \\r — can inject new shell commands",
+		pattern: /[\n\r]/
+	},
+	{
+		id: "shell-glob-star",
+		description: "Glob expansion: * or ? — can expand to unintended files",
+		pattern: /[/\\][*?]/
+	},
+	{
+		id: "shell-absolute-root",
+		description: "Absolute root path injection: string starting with / or \\ (Windows UNC)",
+		pattern: /^(?:\/|\\\\)/
+	},
+	{
+		id: "shell-windows-drive",
+		description: "Windows drive letter path injection: C:\\ or D:/",
+		pattern: /^[a-zA-Z]:[/\\]/
+	},
+	{
+		id: "shell-curl-wget",
+		description: "curl/wget with URL or flags — can exfiltrate data or download payloads",
+		pattern: /\b(?:curl|wget)\s+(?:https?:\/\/|ftp:\/\/|-)/i
+	}
+], mn = [
+	{
+		id: "redos-nested-quantifier-plus",
+		description: "Nested + quantifier inside a group with outer quantifier: (a+)+, (.+b)*, etc.",
+		pattern: /\([^)]*\+[^)]*\)[+*]/
+	},
+	{
+		id: "redos-nested-quantifier-star",
+		description: "Nested * quantifier: (a*)* or (a*)+ — catastrophic backtracking",
+		pattern: /\([^)]*\*[^)]*\)[*+]/
+	},
+	{
+		id: "redos-nested-groups",
+		description: "Doubly nested quantified groups: ((a+)+) — guaranteed catastrophic",
+		pattern: /\(\([^)]{0,40}\)[+*]\)[+*]/
+	},
+	{
+		id: "redos-alternation-overlap",
+		description: "Overlapping alternation under quantifier: (a|a)+ — ambiguous NFA paths",
+		pattern: /\(([^|()]{1,20})\|(?:\1)(?:\|[^|()]{1,20}){0,5}\)[+*?]{1,2}/
+	},
+	{
+		id: "redos-star-plus-concat",
+		description: "(x*x)+ pattern — triggers super-linear backtracking",
+		pattern: /\([^)]{0,10}\*[^)]{0,10}\)[+*]/
+	},
+	{
+		id: "redos-dot-star-greedy",
+		description: "(.*){n,} or (.+){n,} — repeated greedy dot quantifiers",
+		pattern: /\(\.[*+]\)\{?\d/
+	},
+	{
+		id: "redos-large-repetition",
+		description: "Very large fixed or range repetition count {1000,} or {1000,n} — denial of service via backtracking",
+		pattern: /\{\d{4,}(?:,\d*)?\}/
+	},
+	{
+		id: "redos-catastrophic-alternation",
+		description: "Long alternation with many similar branches — polynomial backtracking risk",
+		pattern: /\([^)]{0,200}(?:\|[^|)]{0,50}){9,}\)/
+	}
+], Z = "[\"'\\s]*:", hn = [
+	{
+		id: "nosql-where-operator",
+		description: "$where — executes arbitrary JavaScript server-side in MongoDB",
+		pattern: RegExp(`\\$where${Z}`, "i")
+	},
+	{
+		id: "nosql-ne-operator",
+		description: "$ne — \"not equal\" operator used to bypass equality checks",
+		pattern: RegExp(`\\$ne${Z}`, "i")
+	},
+	{
+		id: "nosql-gt-operator",
+		description: "$gt — \"greater than\" used to bypass password/value checks",
+		pattern: RegExp(`\\$gte?${Z}`, "i")
+	},
+	{
+		id: "nosql-lt-operator",
+		description: "$lt / $lte — \"less than\" bypass variants",
+		pattern: RegExp(`\\$lte?${Z}`, "i")
+	},
+	{
+		id: "nosql-regex-operator",
+		description: "$regex — can be used to extract data character by character (blind injection)",
+		pattern: RegExp(`\\$regex${Z}`, "i")
+	},
+	{
+		id: "nosql-or-operator",
+		description: "$or — logical OR; used to create always-true conditions",
+		pattern: RegExp(`\\$or${Z}\\s*\\[`, "i")
+	},
+	{
+		id: "nosql-and-operator",
+		description: "$and — logical AND operator injection",
+		pattern: RegExp(`\\$and${Z}\\s*\\[`, "i")
+	},
+	{
+		id: "nosql-nor-operator",
+		description: "$nor — logical NOR operator injection",
+		pattern: RegExp(`\\$nor${Z}\\s*\\[`, "i")
+	},
+	{
+		id: "nosql-exists-operator",
+		description: "$exists — can enumerate fields to determine schema",
+		pattern: RegExp(`\\$exists${Z}`, "i")
+	},
+	{
+		id: "nosql-in-operator",
+		description: "$in — matches any value in a list; can enumerate values",
+		pattern: RegExp(`\\$in${Z}\\s*\\[`, "i")
+	},
+	{
+		id: "nosql-expr-operator",
+		description: "$expr — allows aggregation expressions in queries (MongoDB 3.6+)",
+		pattern: RegExp(`\\$expr${Z}`, "i")
+	},
+	{
+		id: "nosql-function-operator",
+		description: "$function — executes arbitrary JavaScript in MongoDB 4.4+",
+		pattern: RegExp(`\\$function${Z}`, "i")
+	},
+	{
+		id: "nosql-accumulator-operator",
+		description: "$accumulator — custom aggregation with arbitrary JS execution",
+		pattern: RegExp(`\\$accumulator${Z}`, "i")
+	},
+	{
+		id: "nosql-proto-pollution",
+		description: "__proto__ — prototype pollution via object key injection",
+		pattern: /__proto__/
+	},
+	{
+		id: "nosql-constructor-prototype",
+		description: "constructor.prototype — alternative prototype pollution vector (dot notation or JSON key)",
+		pattern: /constructor[\s"':.,{\[]*prototype/i
+	},
+	{
+		id: "nosql-proto-bracket",
+		description: "[\"__proto__\"] — bracket-notation prototype pollution",
+		pattern: /\[["']__proto__["']\]/
+	}
+], gn = [
+	{
+		id: "log-crlf-injection",
+		description: "CRLF injection: literal \\r or \\n embeds fake log lines",
+		pattern: /[\r\n]/
+	},
+	{
+		id: "log-url-encoded-crlf",
+		description: "URL-encoded CRLF: %0d, %0a, %0D, %0A — decoded by some log parsers",
+		pattern: /%0[dDaA]/
+	},
+	{
+		id: "log-unicode-newline",
+		description: "Unicode newline variants: U+2028 (line separator), U+2029 (paragraph separator)",
+		pattern: /[\u2028\u2029]/
+	},
+	{
+		id: "log-log4shell-jndi",
+		description: "Log4Shell: ${jndi:...} triggers remote code execution in Apache Log4j",
+		pattern: /\$\{jndi\s*:/i
+	},
+	{
+		id: "log-log4shell-obfuscated",
+		description: "Obfuscated Log4Shell: ${::-j}... lookup-bypass prefix used to evade WAF detection",
+		pattern: /\$\{::-/
+	},
+	{
+		id: "log-log4j-lookup",
+		description: "Log4j lookup syntax: ${env:...}, ${sys:...}, ${ctx:...} — data exfiltration",
+		pattern: /\$\{(?:env|sys|ctx|main|map|sd|web|docker|k8s|spring)\s*:/i
+	},
+	{
+		id: "log-ssti-double-brace",
+		description: "SSTI double-brace: {{expression}} — Jinja2, Twig, Handlebars, etc.",
+		pattern: /\{\{[\s\S]{0,80}\}\}/
+	},
+	{
+		id: "log-ssti-hash-brace",
+		description: "SSTI hash-brace: #{expression} — Thymeleaf, Velocity, Ruby ERB",
+		pattern: /#\{[\s\S]{0,80}\}/
+	},
+	{
+		id: "log-ssti-dollar-brace",
+		description: "SSTI/EL injection: ${expression with operators or method calls} — JSP EL, Freemarker, SpEL",
+		pattern: /\$\{[^}]*(?:\.|\(|\*|\+|\bclass\b|\bruntime\b|\bprocess\b|\bexec\b)[^}]{0,80}\}/i
+	},
+	{
+		id: "log-ssti-percent-tag",
+		description: "SSTI ERB/ASP tag: <%= expression %> — Ruby ERB, ASP",
+		pattern: /<%=[\s\S]{0,80}%>/
+	},
+	{
+		id: "log-null-byte",
+		description: "Null byte: \\x00 or %00 — can truncate log entries in C-backed loggers",
+		pattern: /\x00|%00/
+	},
+	{
+		id: "log-ansi-escape",
+		description: "ANSI escape sequence: ESC[ — can manipulate terminal output when logs are tailed",
+		pattern: /\x1b\[/
+	}
+], _n = [
+	{
+		id: "sql-line-comment",
+		description: "SQL line comment: -- followed by whitespace or end of string",
+		pattern: /--(?:\s|$)/
+	},
+	{
+		id: "sql-stacked-query",
+		description: "Stacked queries: semicolon immediately followed by a SQL keyword",
+		pattern: /;\s{0,10}(?:SELECT|INSERT|UPDATE|DELETE|DROP|CREATE|ALTER|EXEC)\b/i
+	},
+	{
+		id: "sql-hex-encoding",
+		description: "Hex-encoded string injection: 0x41414141 style (MySQL)",
+		pattern: /\b0x[0-9a-f]{4,}/i
+	}
+], vn = [...fn, ..._n];
+ln.label = "HTML", un.label = "XML", dn.label = "SVG", fn.label = "SQL", vn.label = "SQL-STRICT", pn.label = "SHELL", mn.label = "REDOS", hn.label = "NOSQL", gn.label = "LOG", Object.freeze({
+	HTML: ln,
+	XML: un,
+	SVG: dn,
+	SQL: fn,
+	"SQL-STRICT": vn,
+	SHELL: pn,
+	REDOS: mn,
+	NOSQL: hn,
+	LOG: gn
+});
+function yn(e) {
+	if (typeof e != "string") throw TypeError(`is-unsafe: first argument must be a string, got ${typeof e}`);
+}
+function bn(e) {
+	if (!(e instanceof RegExp)) {
+		if (Array.isArray(e)) {
+			if (e.length === 0) throw TypeError("is-unsafe: context must not be an empty array");
+			if (Array.isArray(e[0])) {
+				for (let t of e) if (!Array.isArray(t) || t.length === 0) throw TypeError("is-unsafe: each context in the array must be a non-empty pattern array (PatternList)");
+			}
+			return;
+		}
+		throw TypeError(`is-unsafe: second argument must be a PatternList (e.g. HTML), an array of PatternLists (e.g. [HTML, XML]), or a RegExp. Got: ${typeof e}`);
+	}
+}
+function xn(e) {
+	return e instanceof RegExp ? {
+		lists: null,
+		regex: e
+	} : Array.isArray(e[0]) ? {
+		lists: e,
+		regex: null
+	} : {
+		lists: [e],
+		regex: null
+	};
+}
+function Sn(e, t) {
+	let n = t.label ?? "CUSTOM";
+	for (let r of t) if (r.pattern.test(e)) return {
+		context: n,
+		id: r.id,
+		description: r.description,
+		pattern: r.pattern
+	};
+	return null;
+}
+function Cn(e, t) {
+	yn(e), bn(t);
+	let { lists: n, regex: r } = xn(t);
+	if (r) return r.test(e);
+	for (let t of n) if (Sn(e, t) !== null) return !0;
+	return !1;
+}
 //#endregion
-//#region ../../node_modules/.pnpm/fast-xml-parser@5.8.0/node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js
-function Jt(e, t) {
+//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js
+function wn(e, t) {
 	if (!e) return {};
 	let n = t.attributesGroupName ? e[t.attributesGroupName] : e;
 	if (!n) return {};
@@ -2512,7 +3364,7 @@ function Jt(e, t) {
 	} else r[e] = n[e];
 	return r;
 }
-function Yt(e) {
+function Tn(e) {
 	if (!e || typeof e != "string") return;
 	let t = e.indexOf(":");
 	if (t !== -1 && t > 0) {
@@ -2520,13 +3372,13 @@ function Yt(e) {
 		if (n !== "xmlns") return n;
 	}
 }
-var Xt = class {
+var En = class {
 	constructor(e, t) {
-		this.options = e, this.currentNode = null, this.tagsNodeStack = [], this.parseXml = tn, this.parseTextData = Zt, this.resolveNameSpace = Qt, this.buildAttributesMap = en, this.isItStopNode = on, this.replaceEntitiesValue = rn, this.readStopNodeData = ln, this.saveTextToParentTag = an, this.addChild = nn, this.ignoreAttributesFn = Wt(this.options.ignoreAttributes), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
-		let n = { ...ut };
+		this.options = e, this.currentNode = null, this.tagsNodeStack = [], this.parseXml = jn, this.parseTextData = Dn, this.resolveNameSpace = On, this.buildAttributesMap = An, this.isItStopNode = Fn, this.replaceEntitiesValue = Nn, this.readStopNodeData = zn, this.saveTextToParentTag = Pn, this.addChild = Mn, this.ignoreAttributesFn = rn(this.options.ignoreAttributes), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
+		let n = { ...dt };
 		this.options.entityDecoder ? this.entityDecoder = this.options.entityDecoder : (typeof this.options.htmlEntities == "object" ? n = this.options.htmlEntities : this.options.htmlEntities === !0 && (n = {
-			...dt,
-			...st
+			...ft,
+			...ct
 		}), this.entityDecoder = new vt({
 			namedEntities: {
 				...n,
@@ -2537,27 +3389,28 @@ var Xt = class {
 				maxTotalExpansions: this.options.processEntities.maxTotalExpansions,
 				maxExpandedLength: this.options.processEntities.maxExpandedLength,
 				applyLimitsTo: this.options.processEntities.appliesTo
-			}
-		})), this.matcher = new qt(), this.readonlyMatcher = this.matcher.readOnly(), this.isCurrentNodeStopNode = !1, this.stopNodeExpressionsSet = new Gt();
+			},
+			onInputEntity: (e, t) => Cn(t, [ln, un]) ? z.BLOCK : z.ALLOW
+		})), this.matcher = new cn(), this.readonlyMatcher = this.matcher.readOnly(), this.isCurrentNodeStopNode = !1, this.stopNodeExpressionsSet = new on();
 		let r = this.options.stopNodes;
 		if (r && r.length > 0) {
 			for (let e = 0; e < r.length; e++) {
 				let t = r[e];
-				typeof t == "string" ? this.stopNodeExpressionsSet.add(new X(t)) : t instanceof X && this.stopNodeExpressionsSet.add(t);
+				typeof t == "string" ? this.stopNodeExpressionsSet.add(new an(t)) : t instanceof an && this.stopNodeExpressionsSet.add(t);
 			}
 			this.stopNodeExpressionsSet.seal();
 		}
 	}
 };
-function Zt(e, t, n, r, i, a, o) {
+function Dn(e, t, n, r, i, a, o) {
 	let s = this.options;
 	if (e !== void 0 && (s.trimValues && !r && (e = e.trim()), e.length > 0)) {
 		o || (e = this.replaceEntitiesValue(e, t, n));
 		let r = s.jPath ? n.toString() : n, c = s.tagValueProcessor(t, e, r, i, a);
-		return c == null ? e : typeof c != typeof e || c !== e ? c : s.trimValues || e.trim() === e ? un(e, s.parseTagValue, s.numberParseOptions) : e;
+		return c == null ? e : typeof c != typeof e || c !== e ? c : s.trimValues || e.trim() === e ? Bn(e, s.parseTagValue, s.numberParseOptions) : e;
 	}
 }
-function Qt(e) {
+function On(e) {
 	if (this.options.removeNSPrefix) {
 		let t = e.split(":"), n = e.charAt(0) === "/" ? "/" : "";
 		if (t[0] === "xmlns") return "";
@@ -2565,11 +3418,11 @@ function Qt(e) {
 	}
 	return e;
 }
-var $t = /* @__PURE__ */ RegExp("([^\\s=]+)\\s*(=\\s*(['\"])([\\s\\S]*?)\\3)?", "gm");
-function en(e, t, n, r = !1) {
+var kn = /* @__PURE__ */ RegExp("([^\\s=]+)\\s*(=\\s*(['\"])([\\s\\S]*?)\\3)?", "gm");
+function An(e, t, n, r = !1) {
 	let i = this.options;
 	if (r === !0 || i.ignoreAttributes !== !0 && typeof e == "string") {
-		let r = Ne(e, $t), a = r.length, o = {}, s = Array(a), c = !1, l = {};
+		let r = Ne(e, kn), a = r.length, o = {}, s = Array(a), c = !1, l = {};
 		for (let e = 0; e < a; e++) {
 			let t = this.resolveNameSpace(r[e][1]), a = r[e][4];
 			if (t.length && a !== void 0) {
@@ -2583,9 +3436,9 @@ function en(e, t, n, r = !1) {
 			let t = this.resolveNameSpace(r[e][1]);
 			if (this.ignoreAttributesFn(t, u)) continue;
 			let n = i.attributeNamePrefix + t;
-			if (t.length) if (i.transformAttributeName && (n = i.transformAttributeName(n)), n = dn(n, i), r[e][4] !== void 0) {
+			if (t.length) if (i.transformAttributeName && (n = i.transformAttributeName(n)), n = Hn(n, i), r[e][4] !== void 0) {
 				let r = s[e], a = i.attributeValueProcessor(t, r, u);
-				a == null ? o[n] = r : typeof a != typeof r || a !== r ? o[n] = a : o[n] = un(r, i.parseAttributeValue, i.numberParseOptions), d = !0;
+				a == null ? o[n] = r : typeof a != typeof r || a !== r ? o[n] = a : o[n] = Bn(r, i.parseAttributeValue, i.numberParseOptions), d = !0;
 			} else i.allowBooleanAttributes && (o[n] = !0, d = !0);
 		}
 		if (!d) return;
@@ -2596,25 +3449,25 @@ function en(e, t, n, r = !1) {
 		return o;
 	}
 }
-var tn = function(e) {
+var jn = function(e) {
 	e = e.replace(/\r\n?/g, "\n");
-	let t = new W("!xml"), n = t, r = "";
+	let t = new G("!xml"), n = t, r = "";
 	this.matcher.reset(), this.entityDecoder.reset(), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
-	let i = this.options, a = new Nt(i.processEntities), o = e.length;
+	let i = this.options, a = new It(i.processEntities), o = e.length;
 	for (let s = 0; s < o; s++) if (e[s] === "<") {
 		let c = e.charCodeAt(s + 1);
 		if (c === 47) {
-			let t = Z(e, ">", s, "Closing Tag is not closed."), a = e.substring(s + 2, t).trim();
+			let t = Q(e, ">", s, "Closing Tag is not closed."), a = e.substring(s + 2, t).trim();
 			if (i.removeNSPrefix) {
 				let e = a.indexOf(":");
 				e !== -1 && (a = a.substr(e + 1));
 			}
-			a = $(i.transformTagName, a, "", i).tagName, n && (r = this.saveTextToParentTag(r, n, this.readonlyMatcher));
+			a = Vn(i.transformTagName, a, "", i).tagName, n && (r = this.saveTextToParentTag(r, n, this.readonlyMatcher));
 			let o = this.matcher.getCurrentTag();
 			if (a && i.unpairedTagsSet.has(a)) throw Error(`Unpaired tag can not be used as closing tag: </${a}>`);
 			o && i.unpairedTagsSet.has(o) && (this.matcher.pop(), this.tagsNodeStack.pop()), this.matcher.pop(), this.isCurrentNodeStopNode = !1, n = this.tagsNodeStack.pop(), r = "", s = t;
 		} else if (c === 63) {
-			let t = Q(e, s, !1, "?>");
+			let t = Rn(e, s, !1, "?>");
 			if (!t) throw Error("Pi Tag is not closed.");
 			r = this.saveTextToParentTag(r, n, this.readonlyMatcher);
 			let o = this.buildAttributesMap(t.tagExp, this.matcher, t.tagName, !0);
@@ -2623,12 +3476,12 @@ var tn = function(e) {
 				this.entityDecoder.setXmlVersion(Number(e) || 1), a.setXmlVersion(Number(e) || 1);
 			}
 			if (!(i.ignoreDeclaration && t.tagName === "?xml" || i.ignorePiTags)) {
-				let e = new W(t.tagName);
+				let e = new G(t.tagName);
 				e.add(i.textNodeName, ""), t.tagName !== t.tagExp && t.attrExpPresent && i.ignoreAttributes !== !0 && (e[":@"] = o), this.addChild(n, e, this.readonlyMatcher, s);
 			}
 			s = t.closeIndex + 1;
 		} else if (c === 33 && e.charCodeAt(s + 2) === 45 && e.charCodeAt(s + 3) === 45) {
-			let t = Z(e, "-->", s + 4, "Comment is not closed.");
+			let t = Q(e, "-->", s + 4, "Comment is not closed.");
 			if (i.commentPropName) {
 				let a = e.substring(s + 4, t - 2);
 				r = this.saveTextToParentTag(r, n, this.readonlyMatcher), n.add(i.commentPropName, [{ [i.textNodeName]: a }]);
@@ -2638,25 +3491,25 @@ var tn = function(e) {
 			let t = a.readDocType(e, s);
 			this.entityDecoder.addInputEntities(t.entities), s = t.i;
 		} else if (c === 33 && e.charCodeAt(s + 2) === 91) {
-			let t = Z(e, "]]>", s, "CDATA is not closed.") - 2, a = e.substring(s + 9, t);
+			let t = Q(e, "]]>", s, "CDATA is not closed.") - 2, a = e.substring(s + 9, t);
 			r = this.saveTextToParentTag(r, n, this.readonlyMatcher);
 			let o = this.parseTextData(a, n.tagname, this.readonlyMatcher, !0, !1, !0, !0);
 			o ??= "", i.cdataPropName ? n.add(i.cdataPropName, [{ [i.textNodeName]: a }]) : n.add(i.textNodeName, o), s = t + 2;
 		} else {
-			let a = Q(e, s, i.removeNSPrefix);
+			let a = Rn(e, s, i.removeNSPrefix);
 			if (!a) {
 				let t = e.substring(Math.max(0, s - 50), Math.min(o, s + 50));
 				throw Error(`readTagExp returned undefined at position ${s}. Context: "${t}"`);
 			}
 			let c = a.tagName, l = a.rawTagName, u = a.tagExp, d = a.attrExpPresent, f = a.closeIndex;
-			if ({tagName: c, tagExp: u} = $(i.transformTagName, c, u, i), i.strictReservedNames && (c === i.commentPropName || c === i.cdataPropName || c === i.textNodeName || c === i.attributesGroupName)) throw Error(`Invalid tag name: ${c}`);
+			if ({tagName: c, tagExp: u} = Vn(i.transformTagName, c, u, i), i.strictReservedNames && (c === i.commentPropName || c === i.cdataPropName || c === i.textNodeName || c === i.attributesGroupName)) throw Error(`Invalid tag name: ${c}`);
 			n && r && n.tagname !== "!xml" && (r = this.saveTextToParentTag(r, n, this.readonlyMatcher, !1));
 			let p = n;
 			p && i.unpairedTagsSet.has(p.tagname) && (n = this.tagsNodeStack.pop(), this.matcher.pop());
 			let m = !1;
 			u.length > 0 && u.lastIndexOf("/") === u.length - 1 && (m = !0, c[c.length - 1] === "/" ? (c = c.substr(0, c.length - 1), u = c) : u = u.substr(0, u.length - 1), d = c !== u);
 			let h = null, g;
-			g = Yt(l), c !== t.tagname && this.matcher.push(c, {}, g), c !== u && d && (h = this.buildAttributesMap(u, this.matcher, c), h && Jt(h, i)), c !== t.tagname && (this.isCurrentNodeStopNode = this.isItStopNode());
+			g = Tn(l), c !== t.tagname && this.matcher.push(c, {}, g), c !== u && d && (h = this.buildAttributesMap(u, this.matcher, c), h && wn(h, i)), c !== t.tagname && (this.isCurrentNodeStopNode = this.isItStopNode());
 			let _ = s;
 			if (this.isCurrentNodeStopNode) {
 				let t = "";
@@ -2667,19 +3520,19 @@ var tn = function(e) {
 					if (!n) throw Error(`Unexpected end of ${l}`);
 					s = n.i, t = n.tagContent;
 				}
-				let r = new W(c);
+				let r = new G(c);
 				h && (r[":@"] = h), r.add(i.textNodeName, t), this.matcher.pop(), this.isCurrentNodeStopNode = !1, this.addChild(n, r, this.readonlyMatcher, _);
 			} else {
 				if (m) {
-					({tagName: c, tagExp: u} = $(i.transformTagName, c, u, i));
-					let e = new W(c);
+					({tagName: c, tagExp: u} = Vn(i.transformTagName, c, u, i));
+					let e = new G(c);
 					h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), this.matcher.pop(), this.isCurrentNodeStopNode = !1;
 				} else if (i.unpairedTagsSet.has(c)) {
-					let e = new W(c);
+					let e = new G(c);
 					h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), this.matcher.pop(), this.isCurrentNodeStopNode = !1, s = a.closeIndex;
 					continue;
 				} else {
-					let e = new W(c);
+					let e = new G(c);
 					if (this.tagsNodeStack.length > i.maxNestedTags) throw Error("Maximum nested tags exceeded");
 					this.tagsNodeStack.push(n), h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), n = e;
 				}
@@ -2689,12 +3542,12 @@ var tn = function(e) {
 	} else r += e[s];
 	return t.child;
 };
-function nn(e, t, n, r) {
+function Mn(e, t, n, r) {
 	this.options.captureMetaData || (r = void 0);
 	let i = this.options.jPath ? n.toString() : n, a = this.options.updateTag(t.tagname, i, t[":@"]);
 	a === !1 || (typeof a == "string" && (t.tagname = a), e.addChild(t, r));
 }
-function rn(e, t, n) {
+function Nn(e, t, n) {
 	let r = this.options.processEntities;
 	if (!r || !r.enabled) return e;
 	if (r.allowedTags) {
@@ -2707,13 +3560,13 @@ function rn(e, t, n) {
 	}
 	return this.entityDecoder.decode(e);
 }
-function an(e, t, n, r) {
+function Pn(e, t, n, r) {
 	return e &&= (r === void 0 && (r = t.child.length === 0), e = this.parseTextData(e, t.tagname, n, !1, t[":@"] ? Object.keys(t[":@"]).length !== 0 : !1, r), e !== void 0 && e !== "" && t.add(this.options.textNodeName, e), ""), e;
 }
-function on() {
-	return this.stopNodeExpressionsSet.size === 0 ? !1 : this.matcher.matchesAny(this.stopNodeExpressionsSet);
+function Fn() {
+	return this.stopNodeExpressionsSet.size !== 0 && this.matcher.matchesAny(this.stopNodeExpressionsSet);
 }
-function sn(e, t, n = ">") {
+function In(e, t, n = ">") {
 	let r = 0, i = e.length, a = n.charCodeAt(0), o = n.length > 1 ? n.charCodeAt(1) : -1, s = "", c = t;
 	for (let n = t; n < i; n++) {
 		let t = e.charCodeAt(n);
@@ -2731,18 +3584,18 @@ function sn(e, t, n = ">") {
 		else t === 9 && !r && (s += e.substring(c, n) + " ", c = n + 1);
 	}
 }
-function Z(e, t, n, r) {
+function Q(e, t, n, r) {
 	let i = e.indexOf(t, n);
 	if (i === -1) throw Error(r);
 	return i + t.length - 1;
 }
-function cn(e, t, n, r) {
+function Ln(e, t, n, r) {
 	let i = e.indexOf(t, n);
 	if (i === -1) throw Error(r);
 	return i;
 }
-function Q(e, t, n, r = ">") {
-	let i = sn(e, t + 1, r);
+function Rn(e, t, n, r = ">") {
+	let i = In(e, t + 1, r);
 	if (!i) return;
 	let a = i.data, o = i.index, s = a.search(/\s/), c = a, l = !0;
 	s !== -1 && (c = a.substring(0, s), a = a.substring(s + 1).trimStart());
@@ -2759,51 +3612,51 @@ function Q(e, t, n, r = ">") {
 		rawTagName: u
 	};
 }
-function ln(e, t, n) {
+function zn(e, t, n) {
 	let r = n, i = 1, a = e.length;
 	for (; n < a; n++) if (e[n] === "<") {
 		let a = e.charCodeAt(n + 1);
 		if (a === 47) {
-			let a = cn(e, ">", n, `${t} is not closed`);
+			let a = Ln(e, ">", n, `${t} is not closed`);
 			if (e.substring(n + 2, a).trim() === t && (i--, i === 0)) return {
 				tagContent: e.substring(r, n),
 				i: a
 			};
 			n = a;
-		} else if (a === 63) n = Z(e, "?>", n + 1, "StopNode is not closed.");
-		else if (a === 33 && e.charCodeAt(n + 2) === 45 && e.charCodeAt(n + 3) === 45) n = Z(e, "-->", n + 3, "StopNode is not closed.");
-		else if (a === 33 && e.charCodeAt(n + 2) === 91) n = Z(e, "]]>", n, "StopNode is not closed.") - 2;
+		} else if (a === 63) n = Q(e, "?>", n + 1, "StopNode is not closed.");
+		else if (a === 33 && e.charCodeAt(n + 2) === 45 && e.charCodeAt(n + 3) === 45) n = Q(e, "-->", n + 3, "StopNode is not closed.");
+		else if (a === 33 && e.charCodeAt(n + 2) === 91) n = Q(e, "]]>", n, "StopNode is not closed.") - 2;
 		else {
-			let r = Q(e, n, !1);
+			let r = Rn(e, n, !1);
 			r && ((r && r.tagName) === t && r.tagExp[r.tagExp.length - 1] !== "/" && i++, n = r.closeIndex);
 		}
 	}
 }
-function un(e, t, n) {
+function Bn(e, t, n) {
 	if (t && typeof e == "string") {
 		let t = e.trim();
-		return t === "true" ? !0 : t === "false" ? !1 : zt(e, n);
+		return t === "true" || t !== "false" && Zt(e, n);
 	} else if (Fe(e)) return e;
 	else return "";
 }
-function $(e, t, n, r) {
+function Vn(e, t, n, r) {
 	if (e) {
 		let r = e(t);
 		n === t && (n = r), t = r;
 	}
-	return t = dn(t, r), {
+	return t = Hn(t, r), {
 		tagName: t,
 		tagExp: n
 	};
 }
-function dn(e, t) {
-	if (Ie.includes(e)) throw Error(`[SECURITY] Invalid name: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
-	return I.includes(e) ? t.onDangerousProperty(e) : e;
+function Hn(e, t) {
+	if (Le.includes(e)) throw Error(`[SECURITY] Invalid name: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
+	return Ie.includes(e) ? t.onDangerousProperty(e) : e;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/fast-xml-parser@5.8.0/node_modules/fast-xml-parser/src/xmlparser/node2json.js
-var fn = W.getMetaDataSymbol();
-function pn(e, t) {
+//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/node2json.js
+var $ = G.getMetaDataSymbol();
+function Un(e, t) {
 	if (!e || typeof e != "object") return {};
 	if (!t) return e;
 	let n = {};
@@ -2813,22 +3666,22 @@ function pn(e, t) {
 	} else n[r] = e[r];
 	return n;
 }
-function mn(e, t, n, r) {
-	return hn(e, t, n, r);
+function Wn(e, t, n, r) {
+	return Gn(e, t, n, r);
 }
-function hn(e, t, n, r) {
+function Gn(e, t, n, r) {
 	let i, a = {};
 	for (let o = 0; o < e.length; o++) {
-		let s = e[o], c = gn(s);
+		let s = e[o], c = Kn(s);
 		if (c !== void 0 && c !== t.textNodeName) {
-			let e = pn(s[":@"] || {}, t.attributeNamePrefix);
+			let e = Un(s[":@"] || {}, t.attributeNamePrefix);
 			n.push(c, e);
 		}
 		if (c === t.textNodeName) i === void 0 ? i = s[c] : i += "" + s[c];
 		else if (c === void 0) continue;
 		else if (s[c]) {
-			let e = hn(s[c], t, n, r), i = vn(e, t);
-			if (Object.keys(e).length === 0 && t.alwaysCreateTextNode && (e[t.textNodeName] = ""), s[":@"] ? _n(e, s[":@"], r, t) : Object.keys(e).length === 1 && e[t.textNodeName] !== void 0 && !t.alwaysCreateTextNode ? e = e[t.textNodeName] : Object.keys(e).length === 0 && (t.alwaysCreateTextNode ? e[t.textNodeName] = "" : e = ""), s[fn] !== void 0 && typeof e == "object" && e && (e[fn] = s[fn]), a[c] !== void 0 && Object.prototype.hasOwnProperty.call(a, c)) Array.isArray(a[c]) || (a[c] = [a[c]]), a[c].push(e);
+			let e = Gn(s[c], t, n, r), i = Jn(e, t);
+			if (Object.keys(e).length === 0 && t.alwaysCreateTextNode && (e[t.textNodeName] = ""), s[":@"] ? qn(e, s[":@"], r, t) : Object.keys(e).length === 1 && e[t.textNodeName] !== void 0 && !t.alwaysCreateTextNode ? e = e[t.textNodeName] : Object.keys(e).length === 0 && (t.alwaysCreateTextNode ? e[t.textNodeName] = "" : e = ""), s[$] !== void 0 && typeof e == "object" && e && (e[$] = s[$]), a[c] !== void 0 && Object.prototype.hasOwnProperty.call(a, c)) Array.isArray(a[c]) || (a[c] = [a[c]]), a[c].push(e);
 			else {
 				let n = t.jPath ? r.toString() : r;
 				t.isArray(c, n, i) ? a[c] = [e] : a[c] = e;
@@ -2838,14 +3691,14 @@ function hn(e, t, n, r) {
 	}
 	return typeof i == "string" ? i.length > 0 && (a[t.textNodeName] = i) : i !== void 0 && (a[t.textNodeName] = i), a;
 }
-function gn(e) {
+function Kn(e) {
 	let t = Object.keys(e);
 	for (let e = 0; e < t.length; e++) {
 		let n = t[e];
 		if (n !== ":@") return n;
 	}
 }
-function _n(e, t, n, r) {
+function qn(e, t, n, r) {
 	if (t) {
 		let i = Object.keys(t), a = i.length;
 		for (let o = 0; o < a; o++) {
@@ -2854,13 +3707,13 @@ function _n(e, t, n, r) {
 		}
 	}
 }
-function vn(e, t) {
+function Jn(e, t) {
 	let { textNodeName: n } = t, r = Object.keys(e).length;
 	return !!(r === 0 || r === 1 && (e[n] || typeof e[n] == "boolean" || e[n] === 0));
 }
 //#endregion
-//#region ../../node_modules/.pnpm/fast-xml-parser@5.8.0/node_modules/fast-xml-parser/src/xmlparser/XMLParser.js
-var yn = class {
+//#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/XMLParser.js
+var Yn = class {
 	constructor(e) {
 		this.externalEntities = {}, this.options = Ct(e);
 	}
@@ -2869,11 +3722,11 @@ var yn = class {
 		else if (typeof e != "string") throw Error("XML data is accepted in String or Bytes[] form.");
 		if (t) {
 			t === !0 && (t = {});
-			let n = Re(e, t);
+			let n = ze(e, t);
 			if (n !== !0) throw Error(`${n.err.msg}:${n.err.line}:${n.err.col}`);
 		}
-		let n = new Xt(this.options, this.externalEntities), r = n.parseXml(e);
-		return this.options.preserveOrder || r === void 0 ? r : mn(r, this.options, n.matcher, n.readonlyMatcher);
+		let n = new En(this.options, this.externalEntities), r = n.parseXml(e);
+		return this.options.preserveOrder || r === void 0 ? r : Wn(r, this.options, n.matcher, n.readonlyMatcher);
 	}
 	addEntity(e, t) {
 		if (t.indexOf("&") !== -1) throw Error("Entity value can't have '&'");
@@ -2882,9 +3735,9 @@ var yn = class {
 		this.externalEntities[e] = t;
 	}
 	static getMetaDataSymbol() {
-		return W.getMetaDataSymbol();
+		return G.getMetaDataSymbol();
 	}
-}, bn = class {
+}, Xn = class {
 	axiosClient;
 	baseURI;
 	xmlParser;
@@ -2894,7 +3747,7 @@ var yn = class {
 	HASH_LENGTH = 32;
 	ITERATION_COUNT = 1e4;
 	constructor({ axiosClient: e, baseURI: t }) {
-		this.axiosClient = e, this.baseURI = t, this.xmlParser = new yn();
+		this.axiosClient = e, this.baseURI = t, this.xmlParser = new Yn();
 	}
 	async signUrl(e, t) {
 		let n = new URL(e);
@@ -2904,20 +3757,20 @@ var yn = class {
 	}
 	async getSignKey() {
 		if (this.signingKey) return this.signingKey;
-		let e = await this.axiosClient.get(a(this.baseURI, "ocs/v1.php/cloud/user/signing-key"), { headers: { "Content-Type": "application/x-www-form-urlencoded" } }), t = this.xmlParser.parse(e.data);
-		return this.signingKey = t.ocs.data["signing-key"], this.signingKey;
+		let e = await this.axiosClient.get(t(this.baseURI, "ocs/v1.php/cloud/user/signing-key"), { headers: { "Content-Type": "application/x-www-form-urlencoded" } }), n = this.xmlParser.parse(e.data);
+		return this.signingKey = n.ocs.data["signing-key"], this.signingKey;
 	}
 	async createHashedKey(e) {
 		return je(e, await this.getSignKey(), this.ITERATION_COUNT, this.HASH_LENGTH, this.ALGORITHM).toString("hex");
 	}
-}, xn = (e, t) => {
+}, Zn = (e, t) => {
 	let n = new URL(e);
 	n.pathname = [
 		...n.pathname.split("/"),
 		"ocs",
 		"v1.php"
 	].filter(Boolean).join("/");
-	let r = n.href, i = v(r, t), a = new bn({
+	let r = n.href, i = v(r, t), a = new Xn({
 		baseURI: e,
 		axiosClient: t
 	});
@@ -2927,4 +3780,4 @@ var yn = class {
 	};
 };
 //#endregion
-export { G as a, X as i, yn as n, v as o, qt as r, xn as t };
+export { Ft as a, an as i, Yn as n, v as o, cn as r, Zn as t };