@reportwright/viewer 0.11.0 → 0.12.1

package/dist/{chunk-WQOBRZAL.js → chunk-VNOWPSE6.js}

@@ -1,3 +1,10 @@
+import {
+  TextMeasurer,
+  finishText
+} from "./chunk-ULKEEARQ.js";
+import {
+  safeUrl
+} from "./chunk-72S6DETS.js";
 import {
   ExprError,
   capText,
@@ -19,115 +26,392 @@ import {
   validTimeZone
 } from "./chunk-GJS242RR.js";
 import {
-  safeUrl
-} from "./chunk-72S6DETS.js";
-import {
-  ALL_FONT_KEYS,
   CORE_FONT_KEY,
-  DEFAULT_FAMILY,
   FontStore,
   OPTIONAL_KEYS,
   PRELOAD_KEYS,
   PX,
   SHAPER,
-  fallbackKey,
-  fontCss,
-  fontFamilyCss,
-  fontFile,
-  fontKeysOf,
   fontsFor,
   fontsForDef,
   imageInfo,
   resolveFontKey,
-  resolveImageSrc,
-  setCustomFonts
-} from "./chunk-3D43XGIN.js";
+  resolveImageSrc
+} from "./chunk-Z7MKH66Z.js";
 
-// src/viewer/dataFetch.js
-function sqlCall(body, sqlPreview) {
-  let b;
+// src/engine/data/guard.js
+var FETCH_DEFAULTS = { timeoutMs: 3e4, maxBytes: 64 * 1048576, hops: 5 };
+var V4 = [
+  ["0.0.0.0", 8],
+  ["10.0.0.0", 8],
+  ["100.64.0.0", 10],
+  ["127.0.0.0", 8],
+  ["169.254.0.0", 16],
+  ["172.16.0.0", 12],
+  ["192.0.0.0", 24],
+  ["192.0.2.0", 24],
+  ["192.168.0.0", 16],
+  ["198.18.0.0", 15],
+  ["198.51.100.0", 24],
+  ["203.0.113.0", 24],
+  ["224.0.0.0", 3]
+].map(([a, p]) => [v4num(String(a)), Number(p)]);
+function v4num(ip) {
+  return ip.split(".").reduce((n, x) => n * 256 + Number(x), 0);
+}
+function privateV4(ip) {
+  const n = v4num(ip);
+  return V4.some(([a, p]) => Math.floor(n / 2 ** (32 - p)) === Math.floor(a / 2 ** (32 - p)));
+}
+function groups6(ip) {
+  const [h, t = ""] = ip.split("::");
+  const a = h ? h.split(":") : [], b = t ? t.split(":") : [];
+  if (b.length && b[b.length - 1].includes(".")) {
+    const q = b.pop().split(".").map(Number);
+    b.push((q[0] << 8 | q[1]).toString(16), (q[2] << 8 | q[3]).toString(16));
+  }
+  return [...a, ...Array(Math.max(0, 8 - a.length - b.length)).fill("0"), ...b].map((x) => parseInt(x, 16) || 0);
+}
+function privateV6(ip) {
+  const g = groups6(ip);
+  const v4 = () => `${g[6] >> 8}.${g[6] & 255}.${g[7] >> 8}.${g[7] & 255}`;
+  if (g.slice(0, 6).every((x) => x === 0)) return true;
+  if (g.slice(0, 5).every((x) => x === 0) && g[5] === 65535) return privateV4(v4());
+  if (g[0] === 100 && g[1] === 65435) return g[2] === 1 || privateV4(v4());
+  if (g[0] === 8194 || g[0] === 8193 && g[1] === 0) return true;
+  if ((g[0] & 65024) === 64512 || (g[0] & 65472) === 65152 || (g[0] & 65472) === 65216 || (g[0] & 65280) === 65280) return true;
+  return false;
+}
+function privateHost(host) {
+  const h = host.replace(/^\[|\]$/g, "").toLowerCase();
+  if (h.includes(":")) return privateV6(h);
+  if (/^\d+\.\d+\.\d+\.\d+$/.test(h)) return privateV4(h);
+  return h === "localhost" || h.endsWith(".localhost") || h.endsWith(".local") || h.endsWith(".internal");
+}
+var refuse = (host) => Object.assign(new Error(`"${host}" is a private or local address; a data source may not reach it (pass allowHosts: ["${host}"] to render to allow it)`), { status: 403, code: "EPRIVATE" });
+function nodeMod(name) {
+  const p = (
+    /** @type {any} */
+    globalThis.process
+  );
+  if (!p?.versions?.node) return null;
+  if (!p.getBuiltinModule) throw Object.assign(new Error("The engine's fetch guard needs Node 20.16 or later (process.getBuiltinModule); or pass your own fetch to render"), { status: 500 });
+  return p.getBuiltinModule(name);
+}
+var inNode = () => !!/** @type {any} */
+globalThis.process?.versions?.node;
+var addrHost = (a) => a.family === 6 || String(a.address).includes(":") ? `[${a.address}]` : String(a.address);
+function checkUrl(input, allow) {
+  let u;
   try {
-    b = JSON.parse(String(body));
+    u = new URL(input);
   } catch {
-    return false;
+    throw Object.assign(new Error(`Not a URL: ${String(input).slice(0, 200)}`), { status: 400 });
   }
-  if (!b || typeof b !== "object" || Array.isArray(b)) return false;
-  const keys = Object.keys(b);
-  if (typeof b.report === "string" && typeof b.source === "string") return keys.every((k) => ["report", "source", "params"].includes(k));
-  return sqlPreview && typeof b.query === "string" && keys.every((k) => ["connection", "query", "params"].includes(k));
+  if (u.protocol !== "http:" && u.protocol !== "https:") throw Object.assign(new Error(`Only http and https URLs can be fetched, not ${u.protocol}`), { status: 400 });
+  if (u.username || u.password) throw Object.assign(new Error("A user name or password in a data URL is not allowed"), { status: 400 });
+  const host = u.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+  if (!host) throw Object.assign(new Error("A data URL needs a host"), { status: 400 });
+  if (allow.includes(host)) return u;
+  let bad = true;
+  try {
+    bad = privateHost(u.hostname);
+  } catch {
+  }
+  if (bad) throw refuse(host);
+  return u;
 }
-var DATA = [/^\/api\/sample\//, /^\/api\/data\/proxy$/];
-var OURS = /^\/(?:$|api(?:\/|$)|admin(?:\/|$)|designer(?:\/|$)|viewer(?:\/|$)|login(?:\/|$)|embed(?:\/|$)|_next(?:\/|$))/i;
-var BUSY = /* @__PURE__ */ new Set([429, 502, 503, 504]);
-function withRetry(f4, { onRetry, retries = 3, wait = (ms) => new Promise((r) => setTimeout(r, ms)) } = {}) {
+function nodeRequest(url, init, trusted) {
+  const http = nodeMod("node:http"), https = nodeMod("node:https"), dns = nodeMod("node:dns"), stream = nodeMod("node:stream");
+  const lookup = (name, o, cb) => dns.lookup(name, { ...o, all: true }, (err, list) => {
+    if (err || !Array.isArray(list) || !list.length) return cb(err || refuse(name));
+    let bad = true;
+    try {
+      bad = !trusted && list.some((a) => privateHost(addrHost(a)));
+    } catch {
+    }
+    if (bad) return cb(refuse(name));
+    return o.all ? cb(null, list) : cb(null, list[0].address, list[0].family);
+  });
+  const headers = Object.fromEntries(new Headers(init.headers || {}));
+  headers["accept-encoding"] = "identity";
+  return new Promise((resolve, reject) => {
+    const req = (url.protocol === "https:" ? https : http).request(url, { method: init.method || "GET", headers, lookup, signal: init.signal }, (res) => {
+      const pairs = [];
+      for (let i = 0; i < res.rawHeaders.length; i += 2) pairs.push([res.rawHeaders[i], res.rawHeaders[i + 1]]);
+      const none = [101, 204, 205, 304].includes(res.statusCode) || (init.method || "GET").toUpperCase() === "HEAD";
+      if (none) res.resume();
+      const enc = String(res.headers["content-encoding"] || "").trim().toLowerCase();
+      let body = res, decoded = false;
+      if (!none && enc && enc !== "identity") {
+        const zlib = nodeMod("node:zlib");
+        const dec2 = enc === "gzip" || enc === "x-gzip" ? zlib.createGunzip() : enc === "deflate" ? zlib.createInflate() : enc === "br" ? zlib.createBrotliDecompress() : null;
+        if (!dec2) {
+          res.resume();
+          return reject(Object.assign(new Error(`the response is encoded as "${enc}", which the data fetch cannot decode`), { status: 415 }));
+        }
+        body = stream.pipeline(res, dec2, () => {
+        });
+        decoded = true;
+      }
+      const kept = decoded ? pairs.filter(([k]) => !/^(content-encoding|content-length)$/i.test(k)) : pairs;
+      resolve(new Response(none ? null : stream.Readable.toWeb(body), { status: res.statusCode, statusText: res.statusMessage, headers: (
+        /** @type {any} */
+        kept
+      ) }));
+    });
+    req.on("error", reject);
+    req.end(init.body ?? void 0);
+  });
+}
+var CROSS_ORIGIN_KEEP = /* @__PURE__ */ new Set(["accept", "accept-language", "content-type"]);
+function redirectRequest(from, to, req, status) {
+  if (from.protocol === "https:" && to.protocol !== "https:") throw Object.assign(new Error(`${from.host} redirects from https to http; not followed`), { status: 403 });
+  const headers = new Headers(req.headers || {});
+  if (to.origin !== from.origin) {
+    for (const k of [...headers.keys()]) if (!CROSS_ORIGIN_KEEP.has(k)) headers.delete(k);
+  }
+  const get = status === 303 || (status === 301 || status === 302) && (req.method || "GET").toUpperCase() !== "GET";
+  return get ? { ...req, method: "GET", body: void 0, headers } : { ...req, headers };
+}
+function guardedFetch(opt, base) {
+  const allow = (opt.allowHosts || []).map((h) => String(h).toLowerCase().replace(/^\[|\]$/g, ""));
+  const node = !opt.viaBase && inNode();
   return (
     /** @type {any} */
-    (async (url, init = {}) => {
-      const method = String(init.method || "GET").toUpperCase();
-      const read = method === "GET" || method === "HEAD" || method === "POST" && /\/api\/data\/sql$/.test(new URL(String(url), "http://x").pathname);
-      for (let attempt = 1; ; attempt++) {
-        const res = await f4(url, init);
-        if (!read || !BUSY.has(res.status) || attempt > retries) return res;
-        const after = Number(res.headers?.get?.("retry-after"));
-        const ms = Number.isFinite(after) && after >= 0 ? Math.min(1e4, after * 1e3) : Math.round(400 * 2 ** (attempt - 1) * (0.75 + Math.random() * 0.5));
-        onRetry?.({ attempt, max: retries, status: res.status });
-        await wait(ms);
+    (async (input, init = {}) => {
+      let url = checkUrl(String(input), allow);
+      let req = { ...init };
+      for (let hop = 0; ; hop++) {
+        const trusted = allow.includes(url.hostname.replace(/^\[|\]$/g, "").toLowerCase());
+        const res = node ? await nodeRequest(url, req, trusted) : await base(url.href, { ...req, redirect: "manual" });
+        if (res.type === "opaqueredirect") throw new Error(`${url.host} redirects; a redirect cannot be checked here (pass your own fetch to render)`);
+        const loc = res.status >= 300 && res.status < 400 ? res.headers.get("location") : null;
+        if (!loc) return res;
+        await res.body?.cancel().catch(() => {
+        });
+        if (hop >= FETCH_DEFAULTS.hops) throw new Error(`Too many redirects from ${url.host}`);
+        const next = checkUrl(new URL(loc, url).href, allow);
+        req = redirectRequest(url, next, req, res.status);
+        url = next;
       }
     })
   );
 }
-function reportFetch(base, f0 = (...a) => fetch(...a), { sqlPreview = false, onRetry, retries = 3, wait } = {}) {
-  const self = new URL(base).origin;
-  const f4 = withRetry(f0, { onRetry, retries, wait });
+function boundedFetch(f4, opt) {
+  const ms0 = Number(opt.fetchTimeoutMs) > 0 ? Number(opt.fetchTimeoutMs) : FETCH_DEFAULTS.timeoutMs;
+  const max = Number(opt.maxFetchBytes) > 0 ? Number(opt.maxFetchBytes) : FETCH_DEFAULTS.maxBytes;
   return (
     /** @type {any} */
     (async (input, init = {}) => {
-      const u = new URL(String(input instanceof Request ? input.url : input), base);
-      const method = String(init.method || "GET").toUpperCase();
-      if (u.origin !== self) return f4(u.href, { ...init, credentials: "omit" });
-      let path;
+      const ms = Math.max(1, Math.min(ms0, opt.deadline ? opt.deadline - Date.now() : Infinity));
+      const ctl = new AbortController();
+      const timer = setTimeout(() => ctl.abort(Object.assign(new Error(`The data request took longer than ${Math.round(ms)} ms`), { status: 504 })), ms);
+      const signal = init.signal ? anySignal([init.signal, ctl.signal]) : ctl.signal;
+      let res;
+      const stop = new Promise((_, rej) => signal.addEventListener("abort", () => rej(signal.reason), { once: true }));
+      stop.catch(() => {
+      });
       try {
-        path = decodeURIComponent(u.pathname).replace(/\/{2,}/g, "/");
-      } catch {
-        path = null;
+        res = await Promise.race([f4(input, { ...init, signal }), stop]);
+      } catch (e) {
+        clearTimeout(timer);
+        throw ctl.signal.aborted ? ctl.signal.reason : fetchFailure(e, input);
       }
-      const read = path !== null && ["GET", "HEAD"].includes(method) && !/%2f|%5c/i.test(u.pathname) && (DATA.some((r) => r.test(path)) || !OURS.test(path));
-      if (!read && !(method === "POST" && u.pathname === "/api/data/sql" && sqlCall(init.body, sqlPreview))) {
-        throw Object.assign(new Error(`A data source may only read data from this ReportWright server (sample data, the data proxy, saved SQL), not ${method} ${path}.`), { status: 403 });
+      if (!res.body || /** @type {any} */
+      init.pwStream) {
+        clearTimeout(timer);
+        return res;
       }
-      const ours = DATA.some((r) => r.test(u.pathname)) || u.pathname === "/api/data/sql";
-      return f4(u.href, { ...init, credentials: ours ? "same-origin" : "omit", redirect: "error" });
+      let n = 0;
+      const reader = res.body.getReader();
+      const body = new ReadableStream({
+        async pull(c) {
+          try {
+            const { done, value } = await reader.read();
+            if (done) {
+              clearTimeout(timer);
+              c.close();
+              return;
+            }
+            n += value.byteLength;
+            if (n > max) {
+              clearTimeout(timer);
+              reader.cancel().catch(() => {
+              });
+              c.error(Object.assign(new Error(`The data response is larger than ${Math.round(max / 1048576)} MB (maxFetchBytes)`), { status: 413 }));
+              return;
+            }
+            c.enqueue(value);
+          } catch (e) {
+            clearTimeout(timer);
+            c.error(ctl.signal.aborted ? ctl.signal.reason : e);
+          }
+        },
+        cancel(r) {
+          clearTimeout(timer);
+          return reader.cancel(r);
+        }
+      });
+      return new Response(body, { status: res.status, statusText: res.statusText, headers: res.headers });
     })
   );
 }
-
-// src/engine/expr/evaluate.js
-var ROOTS = { fields: "Fields", parameters: "Parameters", globals: "Globals", parent: "Parent", theme: "Theme", partproperties: "PartProperties" };
-var astCache = /* @__PURE__ */ new Map();
-function compile(src) {
-  let a = astCache.get(src);
-  if (!a) {
-    a = parse(src);
-    if (astCache.size > 5e3) astCache.clear();
-    astCache.set(src, a);
-  }
-  return a;
-}
-var tplCache = /* @__PURE__ */ new Map();
-function parseValue(v) {
-  if (typeof v !== "string") return { kind: "lit", v };
-  let p = tplCache.get(v);
-  if (p) {
-    if (p.kind === "err") throw p.error;
-    return p;
-  }
-  try {
-    p = parseFresh(v);
-  } catch (e) {
-    if (!(e instanceof ExprError)) throw e;
-    p = { kind: "err", error: e };
-  }
-  if (tplCache.size > 5e3) tplCache.clear();
+var CAUSES = {
+  ENOTFOUND: "the host name did not resolve",
+  EAI_AGAIN: "DNS lookup timed out",
+  ECONNREFUSED: "connection refused",
+  ECONNRESET: "connection reset",
+  EPIPE: "connection closed",
+  UND_ERR_SOCKET: "connection closed early",
+  ETIMEDOUT: "timed out",
+  UND_ERR_CONNECT_TIMEOUT: "connect timed out",
+  EPROTO: "TLS error",
+  ERR_TLS_CERT_ALTNAME_INVALID: "TLS certificate does not match the host",
+  DEPTH_ZERO_SELF_SIGNED_CERT: "TLS certificate is self-signed",
+  SELF_SIGNED_CERT_IN_CHAIN: "TLS certificate chain is untrusted",
+  UNABLE_TO_VERIFY_LEAF_SIGNATURE: "TLS certificate chain is untrusted",
+  CERT_HAS_EXPIRED: "TLS certificate has expired"
+};
+function redactUrl(s) {
+  const str = String(s);
+  const q = str.search(/[?#]/);
+  const base = (q >= 0 ? str.slice(0, q) : str).replace(/^([a-z][\w+.-]*:\/\/)[^/?#]*@/i, "$1");
+  return q >= 0 ? `${base}${str[q]}…` : base;
+}
+function fetchFailure(e, input) {
+  if (!e || e.status) return e;
+  const code = String(e.cause?.code || e.code || "");
+  if (!code && e.message !== "fetch failed") return e;
+  const why = CAUSES[code] || (/^ERR_TLS|CERT_|SSL/.test(code) ? "TLS error" : "");
+  const at = redactUrl(input?.href ?? input);
+  return Object.assign(new Error(`the request to ${at} failed${why ? `: ${why}` : ""}${code ? ` (${code})` : ""}`), { code: e.code });
+}
+function anySignal(list) {
+  const S3 = (
+    /** @type {any} */
+    AbortSignal
+  );
+  if (S3.any) return S3.any(list);
+  const c = new AbortController();
+  for (const s of list) {
+    if (s.aborted) c.abort(s.reason);
+    else s.addEventListener("abort", () => c.abort(s.reason), { once: true });
+  }
+  return c.signal;
+}
+
+// src/viewer/dataFetch.js
+function sqlCall(body, sqlPreview) {
+  let b;
+  try {
+    b = JSON.parse(String(body));
+  } catch {
+    return false;
+  }
+  if (!b || typeof b !== "object" || Array.isArray(b)) return false;
+  const keys = Object.keys(b);
+  if (typeof b.report === "string" && typeof b.source === "string") return keys.every((k) => ["report", "source", "params"].includes(k));
+  return sqlPreview && typeof b.query === "string" && keys.every((k) => ["connection", "query", "params"].includes(k));
+}
+var policy = { allowHosts: [], unsafeFetch: false, fetch: null };
+function setFetchPolicy({ allowHosts, unsafeFetch = false, fetch: f4 = null } = {}) {
+  policy = { allowHosts: (allowHosts || []).map((h) => String(h).toLowerCase().replace(/^\[|\]$/g, "")), unsafeFetch: !!unsafeFetch, fetch: typeof f4 === "function" ? f4 : null };
+}
+var POLICY_KEYS = ["allowHosts", "unsafeFetch", "allowPrivate"];
+function policyKeysIn(def) {
+  const has = (o) => POLICY_KEYS.filter((k) => o && typeof o === "object" && Object.hasOwn(o, k));
+  return [...has(def), ...(Array.isArray(def?.dataSources) ? def.dataSources : []).flatMap((s) => has(s).map((k) => `${s.name}.${k}`))];
+}
+var fetchPolicy = () => policy;
+function failed(e, url) {
+  if (e?.status || !(e instanceof TypeError)) return e;
+  return Object.assign(new Error(`the request to ${redactUrl(url)} failed (${e.message}): the server may not allow this page to read it (CORS: it must send Access-Control-Allow-Origin), the network or the server may be down, or the browser blocked it (a content security policy or an extension)`), { cause: e });
+}
+var DATA = [/^\/api\/sample\//, /^\/api\/data\/proxy$/];
+var OURS = /^\/(?:$|api(?:\/|$)|admin(?:\/|$)|designer(?:\/|$)|viewer(?:\/|$)|login(?:\/|$)|embed(?:\/|$)|_next(?:\/|$))/i;
+var BUSY = /* @__PURE__ */ new Set([429, 502, 503, 504]);
+function withRetry(f4, { onRetry, retries = 3, wait = (ms) => new Promise((r) => setTimeout(r, ms)) } = {}) {
+  return (
+    /** @type {any} */
+    (async (url, init = {}) => {
+      const method = String(init.method || "GET").toUpperCase();
+      const read = method === "GET" || method === "HEAD" || method === "POST" && /\/api\/data\/sql$/.test(new URL(String(url), "http://x").pathname);
+      for (let attempt = 1; ; attempt++) {
+        const res = await f4(url, init);
+        if (!read || !BUSY.has(res.status) || attempt > retries) return res;
+        const after = Number(res.headers?.get?.("retry-after"));
+        const ms = Number.isFinite(after) && after >= 0 ? Math.min(1e4, after * 1e3) : Math.round(400 * 2 ** (attempt - 1) * (0.75 + Math.random() * 0.5));
+        onRetry?.({ attempt, max: retries, status: res.status });
+        await wait(ms);
+      }
+    })
+  );
+}
+function reportFetch(base, f0 = policy.fetch || ((...a) => fetch(...a)), { sqlPreview = false, onRetry, retries = 3, wait } = {}) {
+  const self = new URL(base).origin;
+  const { allowHosts, unsafeFetch } = policy;
+  const send = (url, init) => f0(url, init).catch((e) => {
+    throw failed(e, url);
+  });
+  const f4 = withRetry(send, { onRetry, retries, wait });
+  const guarded = unsafeFetch ? f4 : guardedFetch({ allowHosts, viaBase: true }, f4);
+  const other = (url, init) => guarded(url, init).catch((e) => {
+    if (e?.code === "EPRIVATE") e.message = e.message.replace(/pass allowHosts: (\[[^\]]*\]) to render/, "mountViewer({ allowHosts: $1 })");
+    else if (e && typeof e === "object") e.message = String(e.message).replace("(pass your own fetch to render)", "(a browser cannot see where it leads: use the URL it redirects to, or render on the server)");
+    throw e;
+  });
+  const out = (
+    /** @type {any} */
+    (async (input, init = {}) => {
+      const u = new URL(String(input instanceof Request ? input.url : input), base);
+      const method = String(init.method || "GET").toUpperCase();
+      if (u.origin !== self) return other(u.href, { ...init, credentials: "omit" });
+      let path;
+      try {
+        path = decodeURIComponent(u.pathname).replace(/\/{2,}/g, "/");
+      } catch {
+        path = null;
+      }
+      const read = path !== null && ["GET", "HEAD"].includes(method) && !/%2f|%5c/i.test(u.pathname) && (DATA.some((r) => r.test(path)) || !OURS.test(path));
+      if (!read && !(method === "POST" && u.pathname === "/api/data/sql" && sqlCall(init.body, sqlPreview))) {
+        throw Object.assign(new Error(`A data source may only read data from this ReportWright server (sample data, the data proxy, saved SQL), not ${method} ${path}.`), { status: 403 });
+      }
+      const ours = DATA.some((r) => r.test(u.pathname)) || u.pathname === "/api/data/sql";
+      return f4(u.href, { ...init, credentials: ours ? "same-origin" : "omit", redirect: "error" });
+    })
+  );
+  if (!unsafeFetch) out.hostRule = { allowHosts };
+  return out;
+}
+
+// src/engine/expr/evaluate.js
+var ROOTS = { fields: "Fields", parameters: "Parameters", globals: "Globals", parent: "Parent", theme: "Theme", partproperties: "PartProperties" };
+var astCache = /* @__PURE__ */ new Map();
+function compile(src) {
+  let a = astCache.get(src);
+  if (!a) {
+    a = parse(src);
+    if (astCache.size > 5e3) astCache.clear();
+    astCache.set(src, a);
+  }
+  return a;
+}
+var tplCache = /* @__PURE__ */ new Map();
+function parseValue(v) {
+  if (typeof v !== "string") return { kind: "lit", v };
+  let p = tplCache.get(v);
+  if (p) {
+    if (p.kind === "err") throw p.error;
+    return p;
+  }
+  try {
+    p = parseFresh(v);
+  } catch (e) {
+    if (!(e instanceof ExprError)) throw e;
+    p = { kind: "err", error: e };
+  }
+  if (tplCache.size > 5e3) tplCache.clear();
   tplCache.set(v, p);
   if (p.kind === "err") throw p.error;
   return p;
@@ -1735,321 +2019,73 @@ var METHODS = {
   trim: "trim",
   trimstart: "trimstart",
   trimend: "trimend",
-  startswith: "startswith",
-  endswith: "endswith",
-  indexof: "indexof",
-  lastindexof: "lastindexof",
-  contains: "contains",
-  replace: "replace",
-  split: "split",
-  tostring: "tostring"
-};
-function netFormat(f4, args, ctx) {
-  let out = "";
-  for (let i = 0; i < f4.length; i++) {
-    const c = f4[i];
-    if (c === "{" && f4[i + 1] === "{") {
-      out += "{";
-      i++;
-      continue;
-    }
-    if (c === "}" && f4[i + 1] === "}") {
-      out += "}";
-      i++;
-      continue;
-    }
-    if (c === "}") throw new ExprError('String.Format: a "}" without its "{"');
-    if (c !== "{") {
-      out += c;
-      continue;
-    }
-    const e = f4.indexOf("}", i);
-    if (e < 0) throw new ExprError('String.Format: a "{" without its "}"');
-    const m = /^\s*(\d{1,3})\s*(?:,\s*(-?\d{1,4}))?\s*(?::([^}]*))?$/.exec(f4.slice(i + 1, e));
-    if (!m) throw new ExprError(`String.Format: "{${f4.slice(i + 1, e).slice(0, 20)}}" is not a placeholder`);
-    const k = Number(m[1]);
-    if (k >= args.length) throw new ExprError(`String.Format: {${k}} has no argument`);
-    let t = toText(args[k], m[3] || null, ctx);
-    const w = m[2] ? Number(m[2]) : 0;
-    if (Math.abs(w) > t.length) t = w < 0 ? t.padEnd(-w) : t.padStart(w);
-    capText("String.Format", out.length + t.length + f4.length - e);
-    out += t;
-    i = e;
-  }
-  return out;
-}
-function callCustom(n, name, ctx) {
-  if (n.obj && n.obj.type === "id" && n.obj.name.toLowerCase() === "string" && name === "format") {
-    if (!n.args.length) throw new ExprError("String.Format needs a format", n.p);
-    const [f5, ...rest] = n.args.map((a) => evaluate(a, ctx));
-    return netFormat(S(f5), rest, ctx);
-  }
-  const viaValue = n.obj && !(n.obj.type === "id" && n.obj.name.toLowerCase() === "code");
-  if (viaValue && Object.hasOwn(METHODS, name)) {
-    return FUNCTIONS[METHODS[name]](ctx, evaluate(n.obj, ctx), ...n.args.map((a) => evaluate(a, ctx)));
-  }
-  if (viaValue && n.name in Object.prototype) throw new ExprError(`The value has no member ${n.name}`, n.p);
-  const viaCode = !!n.obj;
-  if (viaCode && !(n.obj.type === "id" && n.obj.name.toLowerCase() === "code")) throw new ExprError(`"${n.name}(…)" after "." is not supported; report functions are called as Code.${n.name}(…)`, n.p);
-  const table = ctx.functions;
-  const f4 = table?.byName.get(name);
-  if (!f4 || !viaCode && builtin(name)) throw new ExprError(viaCode ? `The report has no function "${n.name}"` : `Unknown function "${n.name}"`, n.p);
-  const params = Array.isArray(f4.params) ? f4.params : [];
-  if (n.args.length !== params.length) throw new ExprError(`${f4.name} needs ${params.length} argument${params.length === 1 ? "" : "s"}`, n.p);
-  const depth = (ctx.fnDepth || 0) + 1;
-  if (depth > MAX_FN_DEPTH) throw new ExprError(`${f4.name}: functions call each other more than ${MAX_FN_DEPTH} deep`, n.p);
-  if (++table.count.n > MAX_FN_CALLS) throw new ExprError(`Report functions were called more than 1,000,000 times in this render`, n.p);
-  const locals = /* @__PURE__ */ Object.create(null);
-  for (let i = 0; i < params.length; i++) locals[String(params[i]).toLowerCase()] = evaluate(n.args[i], ctx);
-  return evaluate(compile(String(f4.body).replace(/^=/, "")), Object.assign({}, ctx, { locals, fnDepth: depth }));
-}
-
-// src/engine/data/guard.js
-var FETCH_DEFAULTS = { timeoutMs: 3e4, maxBytes: 64 * 1048576, hops: 5 };
-var V4 = [
-  ["0.0.0.0", 8],
-  ["10.0.0.0", 8],
-  ["100.64.0.0", 10],
-  ["127.0.0.0", 8],
-  ["169.254.0.0", 16],
-  ["172.16.0.0", 12],
-  ["192.0.0.0", 24],
-  ["192.0.2.0", 24],
-  ["192.168.0.0", 16],
-  ["198.18.0.0", 15],
-  ["198.51.100.0", 24],
-  ["203.0.113.0", 24],
-  ["224.0.0.0", 3]
-].map(([a, p]) => [v4num(String(a)), Number(p)]);
-function v4num(ip) {
-  return ip.split(".").reduce((n, x) => n * 256 + Number(x), 0);
-}
-function privateV4(ip) {
-  const n = v4num(ip);
-  return V4.some(([a, p]) => Math.floor(n / 2 ** (32 - p)) === Math.floor(a / 2 ** (32 - p)));
-}
-function groups6(ip) {
-  const [h, t = ""] = ip.split("::");
-  const a = h ? h.split(":") : [], b = t ? t.split(":") : [];
-  if (b.length && b[b.length - 1].includes(".")) {
-    const q = b.pop().split(".").map(Number);
-    b.push((q[0] << 8 | q[1]).toString(16), (q[2] << 8 | q[3]).toString(16));
-  }
-  return [...a, ...Array(Math.max(0, 8 - a.length - b.length)).fill("0"), ...b].map((x) => parseInt(x, 16) || 0);
-}
-function privateV6(ip) {
-  const g = groups6(ip);
-  const v4 = () => `${g[6] >> 8}.${g[6] & 255}.${g[7] >> 8}.${g[7] & 255}`;
-  if (g.slice(0, 6).every((x) => x === 0)) return true;
-  if (g.slice(0, 5).every((x) => x === 0) && g[5] === 65535) return privateV4(v4());
-  if (g[0] === 100 && g[1] === 65435) return g[2] === 1 || privateV4(v4());
-  if (g[0] === 8194 || g[0] === 8193 && g[1] === 0) return true;
-  if ((g[0] & 65024) === 64512 || (g[0] & 65472) === 65152 || (g[0] & 65472) === 65216 || (g[0] & 65280) === 65280) return true;
-  return false;
-}
-function privateHost(host) {
-  const h = host.replace(/^\[|\]$/g, "").toLowerCase();
-  if (h.includes(":")) return privateV6(h);
-  if (/^\d+\.\d+\.\d+\.\d+$/.test(h)) return privateV4(h);
-  return h === "localhost" || h.endsWith(".localhost") || h.endsWith(".local") || h.endsWith(".internal");
-}
-var refuse = (host) => Object.assign(new Error(`"${host}" is a private or local address; a data source may not reach it (pass allowHosts: ["${host}"] to render to allow it)`), { status: 403, code: "EPRIVATE" });
-function nodeMod(name) {
-  const p = (
-    /** @type {any} */
-    globalThis.process
-  );
-  if (!p?.versions?.node) return null;
-  if (!p.getBuiltinModule) throw Object.assign(new Error("The engine's fetch guard needs Node 20.16 or later (process.getBuiltinModule); or pass your own fetch to render"), { status: 500 });
-  return p.getBuiltinModule(name);
-}
-var inNode = () => !!/** @type {any} */
-globalThis.process?.versions?.node;
-var addrHost = (a) => a.family === 6 || String(a.address).includes(":") ? `[${a.address}]` : String(a.address);
-function checkUrl(input, allow) {
-  let u;
-  try {
-    u = new URL(input);
-  } catch {
-    throw Object.assign(new Error(`Not a URL: ${String(input).slice(0, 200)}`), { status: 400 });
-  }
-  if (u.protocol !== "http:" && u.protocol !== "https:") throw Object.assign(new Error(`Only http and https URLs can be fetched, not ${u.protocol}`), { status: 400 });
-  if (u.username || u.password) throw Object.assign(new Error("A user name or password in a data URL is not allowed"), { status: 400 });
-  const host = u.hostname.replace(/^\[|\]$/g, "").toLowerCase();
-  if (!host) throw Object.assign(new Error("A data URL needs a host"), { status: 400 });
-  if (allow.includes(host)) return u;
-  let bad = true;
-  try {
-    bad = privateHost(u.hostname);
-  } catch {
-  }
-  if (bad) throw refuse(host);
-  return u;
-}
-function nodeRequest(url, init, trusted) {
-  const http = nodeMod("node:http"), https = nodeMod("node:https"), dns = nodeMod("node:dns"), stream = nodeMod("node:stream");
-  const lookup = (name, o, cb) => dns.lookup(name, { ...o, all: true }, (err, list) => {
-    if (err || !Array.isArray(list) || !list.length) return cb(err || refuse(name));
-    let bad = true;
-    try {
-      bad = !trusted && list.some((a) => privateHost(addrHost(a)));
-    } catch {
-    }
-    if (bad) return cb(refuse(name));
-    return o.all ? cb(null, list) : cb(null, list[0].address, list[0].family);
-  });
-  const headers = Object.fromEntries(new Headers(init.headers || {}));
-  headers["accept-encoding"] = "identity";
-  return new Promise((resolve, reject) => {
-    const req = (url.protocol === "https:" ? https : http).request(url, { method: init.method || "GET", headers, lookup, signal: init.signal }, (res) => {
-      const pairs = [];
-      for (let i = 0; i < res.rawHeaders.length; i += 2) pairs.push([res.rawHeaders[i], res.rawHeaders[i + 1]]);
-      const none = [101, 204, 205, 304].includes(res.statusCode) || (init.method || "GET").toUpperCase() === "HEAD";
-      if (none) res.resume();
-      resolve(new Response(none ? null : stream.Readable.toWeb(res), { status: res.statusCode, statusText: res.statusMessage, headers: (
-        /** @type {any} */
-        pairs
-      ) }));
-    });
-    req.on("error", reject);
-    req.end(init.body ?? void 0);
-  });
-}
-var CROSS_ORIGIN_KEEP = /* @__PURE__ */ new Set(["accept", "accept-language", "content-type"]);
-function redirectRequest(from, to, req, status) {
-  if (from.protocol === "https:" && to.protocol !== "https:") throw Object.assign(new Error(`${from.host} redirects from https to http; not followed`), { status: 403 });
-  const headers = new Headers(req.headers || {});
-  if (to.origin !== from.origin) {
-    for (const k of [...headers.keys()]) if (!CROSS_ORIGIN_KEEP.has(k)) headers.delete(k);
-  }
-  const get = status === 303 || (status === 301 || status === 302) && (req.method || "GET").toUpperCase() !== "GET";
-  return get ? { ...req, method: "GET", body: void 0, headers } : { ...req, headers };
-}
-function guardedFetch(opt, base) {
-  const allow = (opt.allowHosts || []).map((h) => String(h).toLowerCase().replace(/^\[|\]$/g, ""));
-  const node = inNode();
-  return (
-    /** @type {any} */
-    (async (input, init = {}) => {
-      let url = checkUrl(String(input), allow);
-      let req = { ...init };
-      for (let hop = 0; ; hop++) {
-        const trusted = allow.includes(url.hostname.replace(/^\[|\]$/g, "").toLowerCase());
-        const res = node ? await nodeRequest(url, req, trusted) : await base(url.href, { ...req, redirect: "manual" });
-        if (res.type === "opaqueredirect") throw new Error(`${url.host} redirects; a redirect cannot be checked here (pass your own fetch to render)`);
-        const loc = res.status >= 300 && res.status < 400 ? res.headers.get("location") : null;
-        if (!loc) return res;
-        await res.body?.cancel().catch(() => {
-        });
-        if (hop >= FETCH_DEFAULTS.hops) throw new Error(`Too many redirects from ${url.host}`);
-        const next = checkUrl(new URL(loc, url).href, allow);
-        req = redirectRequest(url, next, req, res.status);
-        url = next;
-      }
-    })
-  );
-}
-function boundedFetch(f4, opt) {
-  const ms0 = Number(opt.fetchTimeoutMs) > 0 ? Number(opt.fetchTimeoutMs) : FETCH_DEFAULTS.timeoutMs;
-  const max = Number(opt.maxFetchBytes) > 0 ? Number(opt.maxFetchBytes) : FETCH_DEFAULTS.maxBytes;
-  return (
-    /** @type {any} */
-    (async (input, init = {}) => {
-      const ms = Math.max(1, Math.min(ms0, opt.deadline ? opt.deadline - Date.now() : Infinity));
-      const ctl = new AbortController();
-      const timer = setTimeout(() => ctl.abort(Object.assign(new Error(`The data request took longer than ${Math.round(ms)} ms`), { status: 504 })), ms);
-      const signal = init.signal ? anySignal([init.signal, ctl.signal]) : ctl.signal;
-      let res;
-      const stop = new Promise((_, rej) => signal.addEventListener("abort", () => rej(signal.reason), { once: true }));
-      stop.catch(() => {
-      });
-      try {
-        res = await Promise.race([f4(input, { ...init, signal }), stop]);
-      } catch (e) {
-        clearTimeout(timer);
-        throw ctl.signal.aborted ? ctl.signal.reason : fetchFailure(e, input);
-      }
-      if (!res.body || /** @type {any} */
-      init.pwStream) {
-        clearTimeout(timer);
-        return res;
-      }
-      let n = 0;
-      const reader = res.body.getReader();
-      const body = new ReadableStream({
-        async pull(c) {
-          try {
-            const { done, value } = await reader.read();
-            if (done) {
-              clearTimeout(timer);
-              c.close();
-              return;
-            }
-            n += value.byteLength;
-            if (n > max) {
-              clearTimeout(timer);
-              reader.cancel().catch(() => {
-              });
-              c.error(Object.assign(new Error(`The data response is larger than ${Math.round(max / 1048576)} MB (maxFetchBytes)`), { status: 413 }));
-              return;
-            }
-            c.enqueue(value);
-          } catch (e) {
-            clearTimeout(timer);
-            c.error(ctl.signal.aborted ? ctl.signal.reason : e);
-          }
-        },
-        cancel(r) {
-          clearTimeout(timer);
-          return reader.cancel(r);
-        }
-      });
-      return new Response(body, { status: res.status, statusText: res.statusText, headers: res.headers });
-    })
-  );
-}
-var CAUSES = {
-  ENOTFOUND: "the host name did not resolve",
-  EAI_AGAIN: "DNS lookup timed out",
-  ECONNREFUSED: "connection refused",
-  ECONNRESET: "connection reset",
-  EPIPE: "connection closed",
-  UND_ERR_SOCKET: "connection closed early",
-  ETIMEDOUT: "timed out",
-  UND_ERR_CONNECT_TIMEOUT: "connect timed out",
-  EPROTO: "TLS error",
-  ERR_TLS_CERT_ALTNAME_INVALID: "TLS certificate does not match the host",
-  DEPTH_ZERO_SELF_SIGNED_CERT: "TLS certificate is self-signed",
-  SELF_SIGNED_CERT_IN_CHAIN: "TLS certificate chain is untrusted",
-  UNABLE_TO_VERIFY_LEAF_SIGNATURE: "TLS certificate chain is untrusted",
-  CERT_HAS_EXPIRED: "TLS certificate has expired"
+  startswith: "startswith",
+  endswith: "endswith",
+  indexof: "indexof",
+  lastindexof: "lastindexof",
+  contains: "contains",
+  replace: "replace",
+  split: "split",
+  tostring: "tostring"
 };
-function redactUrl(s) {
-  const str = String(s);
-  const q = str.search(/[?#]/);
-  const base = (q >= 0 ? str.slice(0, q) : str).replace(/^([a-z][\w+.-]*:\/\/)[^/?#]*@/i, "$1");
-  return q >= 0 ? `${base}${str[q]}…` : base;
-}
-function fetchFailure(e, input) {
-  if (!e || e.status) return e;
-  const code = String(e.cause?.code || e.code || "");
-  if (!code && e.message !== "fetch failed") return e;
-  const why = CAUSES[code] || (/^ERR_TLS|CERT_|SSL/.test(code) ? "TLS error" : "");
-  const at = redactUrl(input?.href ?? input);
-  return Object.assign(new Error(`the request to ${at} failed${why ? `: ${why}` : ""}${code ? ` (${code})` : ""}`), { code: e.code });
+function netFormat(f4, args, ctx) {
+  let out = "";
+  for (let i = 0; i < f4.length; i++) {
+    const c = f4[i];
+    if (c === "{" && f4[i + 1] === "{") {
+      out += "{";
+      i++;
+      continue;
+    }
+    if (c === "}" && f4[i + 1] === "}") {
+      out += "}";
+      i++;
+      continue;
+    }
+    if (c === "}") throw new ExprError('String.Format: a "}" without its "{"');
+    if (c !== "{") {
+      out += c;
+      continue;
+    }
+    const e = f4.indexOf("}", i);
+    if (e < 0) throw new ExprError('String.Format: a "{" without its "}"');
+    const m = /^\s*(\d{1,3})\s*(?:,\s*(-?\d{1,4}))?\s*(?::([^}]*))?$/.exec(f4.slice(i + 1, e));
+    if (!m) throw new ExprError(`String.Format: "{${f4.slice(i + 1, e).slice(0, 20)}}" is not a placeholder`);
+    const k = Number(m[1]);
+    if (k >= args.length) throw new ExprError(`String.Format: {${k}} has no argument`);
+    let t = toText(args[k], m[3] || null, ctx);
+    const w = m[2] ? Number(m[2]) : 0;
+    if (Math.abs(w) > t.length) t = w < 0 ? t.padEnd(-w) : t.padStart(w);
+    capText("String.Format", out.length + t.length + f4.length - e);
+    out += t;
+    i = e;
+  }
+  return out;
 }
-function anySignal(list) {
-  const S3 = (
-    /** @type {any} */
-    AbortSignal
-  );
-  if (S3.any) return S3.any(list);
-  const c = new AbortController();
-  for (const s of list) {
-    if (s.aborted) c.abort(s.reason);
-    else s.addEventListener("abort", () => c.abort(s.reason), { once: true });
+function callCustom(n, name, ctx) {
+  if (n.obj && n.obj.type === "id" && n.obj.name.toLowerCase() === "string" && name === "format") {
+    if (!n.args.length) throw new ExprError("String.Format needs a format", n.p);
+    const [f5, ...rest] = n.args.map((a) => evaluate(a, ctx));
+    return netFormat(S(f5), rest, ctx);
   }
-  return c.signal;
+  const viaValue = n.obj && !(n.obj.type === "id" && n.obj.name.toLowerCase() === "code");
+  if (viaValue && Object.hasOwn(METHODS, name)) {
+    return FUNCTIONS[METHODS[name]](ctx, evaluate(n.obj, ctx), ...n.args.map((a) => evaluate(a, ctx)));
+  }
+  if (viaValue && n.name in Object.prototype) throw new ExprError(`The value has no member ${n.name}`, n.p);
+  const viaCode = !!n.obj;
+  if (viaCode && !(n.obj.type === "id" && n.obj.name.toLowerCase() === "code")) throw new ExprError(`"${n.name}(…)" after "." is not supported; report functions are called as Code.${n.name}(…)`, n.p);
+  const table = ctx.functions;
+  const f4 = table?.byName.get(name);
+  if (!f4 || !viaCode && builtin(name)) throw new ExprError(viaCode ? `The report has no function "${n.name}"` : `Unknown function "${n.name}"`, n.p);
+  const params = Array.isArray(f4.params) ? f4.params : [];
+  if (n.args.length !== params.length) throw new ExprError(`${f4.name} needs ${params.length} argument${params.length === 1 ? "" : "s"}`, n.p);
+  const depth = (ctx.fnDepth || 0) + 1;
+  if (depth > MAX_FN_DEPTH) throw new ExprError(`${f4.name}: functions call each other more than ${MAX_FN_DEPTH} deep`, n.p);
+  if (++table.count.n > MAX_FN_CALLS) throw new ExprError(`Report functions were called more than 1,000,000 times in this render`, n.p);
+  const locals = /* @__PURE__ */ Object.create(null);
+  for (let i = 0; i < params.length; i++) locals[String(params[i]).toLowerCase()] = evaluate(n.args[i], ctx);
+  return evaluate(compile(String(f4.body).replace(/^=/, "")), Object.assign({}, ctx, { locals, fnDepth: depth }));
 }
 
 // src/importers/xml.js
@@ -2850,7 +2886,10 @@ function fetcherFor(opt) {
   return boundedFetch(f4, opt);
 }
 function checkHostSource(src, url, opt) {
-  if (opt.fetch || opt.unsafeFetch) return;
+  const rule = opt.fetch ? opt.fetch.hostRule : opt.unsafeFetch ? null : opt;
+  if (!rule) return;
+  const scheme = /^([a-z][a-z0-9+.-]*):/i.exec(String(url).trim());
+  if (scheme && !/^https?$/i.test(scheme[1])) throw Object.assign(new Error(`Only http and https URLs can be fetched, not ${scheme[1].toLowerCase()}:`), { status: 400 });
   const t = String(src.url ?? "").trim();
   if (/^\/(?![/\\])/.test(t)) return;
   const m = /^https?:\/\/([^/?#\\]*)/i.exec(t);
@@ -2861,7 +2900,7 @@ function checkHostSource(src, url, opt) {
     host = new URL(url).hostname.replace(/^\[|\]$/g, "").toLowerCase();
   } catch {
   }
-  if (whole && host && (opt.allowHosts || []).map((h) => String(h).toLowerCase()).includes(host)) return;
+  if (whole && host && (rule.allowHosts || []).map((h) => String(h).toLowerCase()).includes(host)) return;
   throw Object.assign(new Error("its host is made by a parameter or an expression: write the scheme and host out (parameters may fill the path and query), or make the whole URL a parameter and list its host in allowHosts"), { status: 403 });
 }
 async function loadSources(def, opt) {
@@ -3142,18 +3181,18 @@ function buildDataSets(def, sources, baseCtx) {
     });
     if (calc.length) {
       const c = { ...baseCtx, dataSets: { ...baseCtx.dataSets || {}, ...sets }, fields: null };
-      const failed = /* @__PURE__ */ new Set();
+      const failed2 = /* @__PURE__ */ new Set();
       for (const r of rows) {
         c.fields = r;
         for (const fd of calc) {
-          if (failed.has(fd.name)) {
+          if (failed2.has(fd.name)) {
             r[fd.name] = null;
             continue;
           }
           try {
             r[fd.name] = coerce(evalValue(fd.expr, c), fd.type, opts.get(fd));
           } catch (e) {
-            failed.add(fd.name);
+            failed2.add(fd.name);
             r[fd.name] = null;
             baseCtx.warn?.(`Data set "${ds.name}", field "${fd.name}": ${e.message}`);
           }
@@ -3701,543 +3740,6 @@ function normBox(v) {
   return [a[0], a[1], a[2], a[3]];
 }
 
-// src/engine/text/measure.js
-import bidiFactory from "bidi-js";
-var bidi = bidiFactory();
-function special(cp) {
-  if (cp < 1424) return false;
-  if (cp <= 7423) return true;
-  if (cp >= 8192 && cp <= 8303) return cp >= 8203 && cp <= 8207 || cp >= 8234 && cp <= 8238 || cp >= 8288;
-  return cp >= 11904 && cp <= 42191 || cp >= 43056 && cp <= 44031 || cp >= 44032 && cp <= 55215 || cp >= 63744 && cp <= 64255 || cp >= 64285 && cp <= 65023 || cp >= 65024 && cp <= 65039 || cp >= 65072 && cp <= 65103 || cp >= 65136 && cp <= 65278 || cp >= 65280 && cp <= 65519 || cp >= 65536;
-}
-var cjk = (cp) => cp >= 11904 && cp <= 40959 || cp >= 44032 && cp <= 55215 || cp >= 63744 && cp <= 64255 || cp >= 65280 && cp <= 65519 || cp >= 131072 && cp <= 262143;
-var NO_START = new Set("、。，．・：；？！ー）」』】〕〉》〗〙〟’”｝｠ぁぃぅぇぉっゃゅょゎゕゖァィゥェォッャュョヮヵヶ々〻‐゠–〜～…‥,.!?:;)]}%ゝゞヽヾ゛゜ㇰㇱㇲㇳㇴㇵㇶㇷㇸㇹㇺㇻㇼㇽㇾㇿ｡｣､･ｰ％］｠");
-var NO_END = new Set("（「『【〔〈《〖〘〝‘“｛｟([{［｢＄￥￡");
-var MAYBE = /[^\u0000-\u058f]/;
-var RTL_OR_CONTROLS = /[֐-ࣿיִ-﷿ﹰ-﻾‎‏‪-‮⁦-⁩]|[\uD802\uD803\uD83A]/;
-var SCRIPTS = [
-  "Latin",
-  "Greek",
-  "Cyrillic",
-  "Armenian",
-  "Hebrew",
-  "Arabic",
-  "Syriac",
-  "Thaana",
-  "Devanagari",
-  "Bengali",
-  "Gurmukhi",
-  "Gujarati",
-  "Oriya",
-  "Tamil",
-  "Telugu",
-  "Kannada",
-  "Malayalam",
-  "Sinhala",
-  "Thai",
-  "Lao",
-  "Tibetan",
-  "Myanmar",
-  "Georgian",
-  "Hangul",
-  "Ethiopic",
-  "Khmer",
-  "Mongolian",
-  "Han",
-  "Hiragana",
-  "Katakana",
-  "Bopomofo"
-].map((s) => (
-  /** @type {[string, RegExp]} */
-  [s, new RegExp(`\\p{Script=${s}}`, "u")]
-));
-var SIMPLE = /* @__PURE__ */ new Set(["Latin", "Greek", "Cyrillic", "Armenian", "Georgian", "Hangul", "Han", "Hiragana", "Katakana", "Bopomofo", "Common"]);
-var STICKY = /[\p{M}\p{Cf}]/u;
-var SPACE = /\s/u;
-var scriptCache = /* @__PURE__ */ new Map();
-function scriptOf(cp) {
-  let s = scriptCache.get(cp);
-  if (s === void 0) {
-    const ch = String.fromCodePoint(cp);
-    s = "Common";
-    for (const [name, re] of SCRIPTS) if (re.test(ch)) {
-      s = name;
-      break;
-    }
-    if (scriptCache.size >= 2e4) scriptCache.clear();
-    scriptCache.set(cp, s);
-  }
-  return s;
-}
-var INTL = typeof Intl !== "undefined" && typeof Intl.Segmenter === "function";
-var GRAPHEMES = INTL ? new Intl.Segmenter(void 0, { granularity: "grapheme" }) : null;
-var JOINS = /[\p{M}\u200c\u200d\ufe00-\ufe0f]/u;
-function clusters(s, intl = true) {
-  if (intl && GRAPHEMES) return [...GRAPHEMES.segment(s)].map((x) => x.segment);
-  const out = [];
-  for (const ch of s) {
-    if (out.length && (JOINS.test(ch) || out[out.length - 1].endsWith("‍"))) out[out.length - 1] += ch;
-    else out.push(ch);
-  }
-  return out;
-}
-var graphemes = (s) => clusters(s);
-var SA = /[\u0e00-\u0eff\u1000-\u109f\u1780-\u17ff\u19e0-\u19ff\u1a20-\u1aaf\ua9e0-\ua9ff\uaa60-\uaadf]/;
-var WORDS = INTL ? new Intl.Segmenter(void 0, { granularity: "word" }) : null;
-function saBreaks(text, segmenter = WORDS) {
-  const out = /* @__PURE__ */ new Set();
-  if (!segmenter) return out;
-  for (const { index } of segmenter.segment(text)) {
-    if (index > 0 && (SA.test(text[index]) || SA.test(text[index - 1]))) out.add(index);
-  }
-  return out;
-}
-var TextMeasurer = class {
-  /** @param {import('./fonts.js').FontStore} store */
-  constructor(store) {
-    this.store = store;
-    this.faces = /* @__PURE__ */ new Map();
-    this.boxes = /* @__PURE__ */ new WeakMap();
-    this.boxCount = 0;
-    this.looks = /* @__PURE__ */ new WeakMap();
-    this.cover = /* @__PURE__ */ new Map();
-    this.cache = /* @__PURE__ */ new Map();
-    this.missing = /* @__PURE__ */ new Set();
-    this.noGlyph = /* @__PURE__ */ new Set();
-  }
-  /**
-   * The key to measure with: `key` when loaded; else (not loaded yet, or failed) the bundled face of the same weight
-   * and style when that is loaded, else the core regular face. A key not yet loaded is asked for in the next pass.
-   */
-  usable(key) {
-    if (this.store.has(key)) return key;
-    if (!this.store.failed.has(key)) this.missing.add(key);
-    const c = fontCss(key);
-    const same2 = resolveFontKey(DEFAULT_FAMILY, c.weight, c.style);
-    return this.store.has(same2) ? same2 : CORE_FONT_KEY;
-  }
-  /**
-   * A loaded face's numbers, read once: fontkit's getters (unitsPerEm, ascent…) decode tables on every read.
-   * adv: advances per code point (-1 = not on the fast path); words: fast-path units per string (a table repeats them).
-   * @param {string} key a loaded key
-   */
-  face(key) {
-    let f4 = this.faces.get(key);
-    if (!f4) {
-      const font = this.store.get(key);
-      f4 = { font, upm: font.unitsPerEm, ascent: font.ascent, descent: font.descent, adv: /* @__PURE__ */ new Map(), words: /* @__PURE__ */ new Map(), met: /* @__PURE__ */ new Map() };
-      this.faces.set(key, f4);
-    }
-    return f4;
-  }
-  /** Font units of `text` on the fast path, or -1 when it needs the complex path. */
-  fast(text, key) {
-    const f4 = this.face(key);
-    const hit = f4.words.get(text);
-    if (hit !== void 0) return hit;
-    const m = f4.adv, font = f4.font;
-    let units = 0;
-    for (let i = 0; i < text.length; i++) {
-      let cp = text.charCodeAt(i);
-      if (cp >= 55296 && cp <= 56319) {
-        const lo = text.charCodeAt(i + 1);
-        if (lo >= 56320 && lo <= 57343) {
-          cp = (cp - 55296) * 1024 + lo - 56320 + 65536;
-          i++;
-        }
-      }
-      let a = m.get(cp);
-      if (a === void 0) {
-        a = special(cp) || cp >= 32 && !font.hasGlyphForCodePoint(cp) ? -1 : font.glyphForCodePoint(cp).advanceWidth || 0;
-        m.set(cp, a);
-      }
-      if (a < 0) {
-        units = -1;
-        break;
-      }
-      units += a;
-    }
-    if (text.length <= 256) {
-      if (f4.words.size >= 5e4) f4.words.clear();
-      f4.words.set(text, units);
-    }
-    return units;
-  }
-  /**
-   * Advance width in points. @param {string} text @param {string} key @param {number} size
-   * @param {'ltr'|'rtl'} [dir] paragraph direction (default: from the first strong character)
-   */
-  width(text, key, size, dir) {
-    const k = this.store.has(key) ? key : this.usable(key);
-    const u = this.fast(text, k);
-    if (u >= 0) return u * size / this.face(k).upm;
-    return this.layout(text, k, dir).w * size;
-  }
-  /**
-   * Where underline and strike-through go, from the font's own tables (post and OS/2), in points:
-   * y offsets of the stroke centre from the baseline (positive = down, as on the page) and thicknesses.
-   * A font without the tables falls back to proportions of its descent and x-height.
-   * @param {string} key @param {number} size
-   */
-  decoration(key, size) {
-    const f4 = this.store.get(this.usable(key));
-    const u = f4.unitsPerEm, os2 = f4["OS/2"] || {};
-    const ut = f4.underlineThickness > 0 ? f4.underlineThickness : u / 14;
-    const up = f4.underlinePosition < 0 ? f4.underlinePosition : f4.descent / 2;
-    const st = os2.yStrikeoutSize > 0 ? os2.yStrikeoutSize : ut;
-    const sp = os2.yStrikeoutPosition > 0 ? os2.yStrikeoutPosition : (f4.xHeight > 0 ? f4.xHeight : f4.ascent * 0.5) / 2 + st / 2;
-    const k = size / u;
-    return { underlineY: -(up - ut / 2) * k, underlineWidth: ut * k, strikeY: -(sp - st / 2) * k, strikeWidth: st * k };
-  }
-  /**
-   * Superscript and subscript from the font's OS/2 table, in em: the size of the small text and how far its
-   * baseline moves (rise up for superscript, drop down for subscript). Fonts without the values get the
-   * proportions most fonts use.
-   * @param {string} key
-   */
-  script(key) {
-    const f4 = this.store.get(this.usable(key));
-    const u = f4.unitsPerEm, o = f4["OS/2"] || {};
-    const frac = (v, d) => v > 0 && v < u * 2 ? v / u : d;
-    return { supScale: frac(o.ySuperscriptYSize, 0.65), supRise: frac(o.ySuperscriptYOffset, 0.35), subScale: frac(o.ySubscriptYSize, 0.65), subDrop: frac(o.ySubscriptYOffset, 0.15) };
-  }
-  /** @param {string} key @param {number} size */
-  metrics(key, size) {
-    const f4 = this.face(this.usable(key));
-    let r = f4.met.get(size);
-    if (!r) {
-      r = Object.freeze({ ascent: f4.ascent * size / f4.upm, descent: -f4.descent * size / f4.upm });
-      f4.met.set(size, r);
-    }
-    return r;
-  }
-  /**
-   * The visually ordered runs of one line, or null when the line is simple (draw `text` as it is).
-   * @param {string} text @param {string} key @param {number} size @param {'ltr'|'rtl'} [dir]
-   * @returns {Run[]|null}
-   */
-  runs(text, key, size, dir) {
-    if (!dir && !MAYBE.test(text)) return null;
-    const k = this.usable(key);
-    if (this.fast(text, k) >= 0) return null;
-    return this.layout(text, k, dir).runs.map((r) => ({
-      ...r,
-      x: r.x * size,
-      w: r.w * size,
-      glyphs: r.glyphs.map((v, i) => i % 4 === 1 || i % 4 === 2 ? v * size : v)
-    }));
-  }
-  /** Paragraph direction of text that needs shaping, bidi or CJK breaks, else undefined. */
-  direction(text, key) {
-    if (!MAYBE.test(text)) return void 0;
-    const k = this.usable(key);
-    if (this.fast(text, k) >= 0) return void 0;
-    return this.layout(text, k, void 0).rtl ? "rtl" : "ltr";
-  }
-  /**
-   * Greedy line breaking. Simple paragraphs break at spaces (a word longer than the line breaks by
-   * character), exactly as before. Others also break between CJK characters (kinsoku applied), never
-   * inside a grapheme cluster (a conjunct, a letter and its marks), and remember their direction.
-   * @param {string} text @param {string} key @param {number} size @param {number} maxWidth
-   * @returns {{text: string, width: number, dir?: 'ltr'|'rtl'}[]}
-   */
-  wrap(text, key, size, maxWidth) {
-    const out = [];
-    const k = this.usable(key);
-    const sp = this.width(" ", k, size);
-    const str = String(text);
-    for (const para of str.includes("\n") ? str.split(/\r?\n/) : [str]) {
-      const dir = this.direction(para, k);
-      if (dir) {
-        this.wrapComplex(para, k, size, maxWidth, dir, sp, out);
-        continue;
-      }
-      if (!para.includes(" ")) {
-        const ww = this.width(para, k, size);
-        if (ww <= maxWidth || maxWidth <= 0) {
-          out.push({ text: para, width: ww, end: true });
-          continue;
-        }
-      }
-      const words = para.split(/ +/);
-      let line2 = "", lw = 0;
-      const push = () => {
-        out.push({ text: line2, width: lw });
-        line2 = "";
-        lw = 0;
-      };
-      for (let wi = 0; wi < words.length; wi++) {
-        const w = words[wi];
-        if (w === "" && wi > 0) continue;
-        const ww = this.width(w, k, size);
-        if (line2 === "") {
-          if (ww <= maxWidth || maxWidth <= 0) {
-            line2 = w;
-            lw = ww;
-            continue;
-          }
-        } else if (lw + sp + ww <= maxWidth) {
-          line2 += " " + w;
-          lw += sp + ww;
-          continue;
-        } else {
-          push();
-          if (ww <= maxWidth) {
-            line2 = w;
-            lw = ww;
-            continue;
-          }
-        }
-        let after = -1;
-        for (const ch of w) {
-          const cw = this.width(ch, k, size);
-          if (lw + cw > maxWidth && line2 !== "") {
-            if (after > 0 && after < line2.length) {
-              const rest = line2.slice(after);
-              line2 = line2.slice(0, after);
-              lw = this.width(line2, k, size);
-              push();
-              line2 = rest;
-              lw = this.width(rest, k, size);
-            } else push();
-            after = -1;
-          }
-          line2 += ch;
-          lw += cw;
-          if ((ch === "/" || ch === "-") && line2.length > 1) after = line2.length;
-        }
-      }
-      push();
-      out[out.length - 1].end = true;
-    }
-    return out;
-  }
-  /** @param {string} para @param {string} key @param {number} size @param {number} maxWidth @param {'ltr'|'rtl'} dir @param {number} sp @param {any[]} out */
-  wrapComplex(para, key, size, maxWidth, dir, sp, out) {
-    const tokens = [];
-    const sa = SA.test(para) ? saBreaks(para) : null;
-    let cur = "", space = false, prev = "", at = 0;
-    for (const ch of para) {
-      const i = at;
-      at += ch.length;
-      if (ch === " ") {
-        if (cur) {
-          tokens.push({ text: cur, space });
-          cur = "";
-        }
-        space = tokens.length > 0;
-        prev = "";
-        continue;
-      }
-      const cp = (
-        /** @type {number} */
-        ch.codePointAt(0)
-      );
-      const pcp = prev ? (
-        /** @type {number} */
-        prev.codePointAt(0)
-      ) : 0;
-      if (cur && (sa?.has(i) || (cjk(cp) || cjk(pcp)) && !NO_START.has(ch) && !NO_END.has(prev) && !STICKY.test(ch))) {
-        tokens.push({ text: cur, space });
-        cur = "";
-        space = false;
-      }
-      cur += ch;
-      prev = ch;
-    }
-    if (cur) tokens.push({ text: cur, space });
-    let line2 = "", lw = 0;
-    const push = () => {
-      out.push({ text: line2, width: this.width(line2, key, size, dir), dir });
-      line2 = "";
-      lw = 0;
-    };
-    for (const t of tokens) {
-      const tw = this.width(t.text, key, size, dir);
-      const gap = line2 && t.space ? sp : 0;
-      if (line2 === "" ? tw <= maxWidth || maxWidth <= 0 : lw + gap + tw <= maxWidth) {
-        line2 += (line2 && t.space ? " " : "") + t.text;
-        lw += gap + tw;
-        continue;
-      }
-      if (line2) push();
-      if (tw <= maxWidth) {
-        line2 = t.text;
-        lw = tw;
-        continue;
-      }
-      for (const g of graphemes(t.text)) {
-        const gw = this.width(g, key, size, dir);
-        if (lw + gw > maxWidth && line2 !== "") push();
-        line2 += g;
-        lw += gw;
-      }
-    }
-    push();
-  }
-  /** Cut a line so it fits, then add "…". */
-  ellipsize(text, key, size, maxWidth, dir) {
-    const ell = "…";
-    if (this.width(text, key, size, dir) <= maxWidth) return text;
-    const ew = this.width(ell, key, size);
-    if (this.direction(text, key)) {
-      const gs = graphemes(text);
-      while (gs.length && this.width(gs.join(""), key, size, dir) + ew > maxWidth) gs.pop();
-      return gs.join("").trimEnd() + ell;
-    }
-    let s = text;
-    while (s.length && this.width(s, key, size) + ew > maxWidth) s = s.slice(0, -1);
-    return s.trimEnd() + ell;
-  }
-  /** Does this font have a glyph for the character? */
-  has(key, cp) {
-    let m = this.cover.get(key);
-    if (!m) {
-      m = /* @__PURE__ */ new Map();
-      this.cover.set(key, m);
-    }
-    let h = m.get(cp);
-    if (h === void 0) {
-      h = !!this.store.get(key).hasGlyphForCodePoint(cp);
-      m.set(cp, h);
-    }
-    return h;
-  }
-  /** The font for one character: the chosen one, else the bundled fallback for its script, else the one before. */
-  pick(cp, key, prev) {
-    if (cp < 32 || this.has(key, cp)) return key;
-    const fb = fallbackKey(cp, key);
-    if (fb && !this.store.failed.has(fb)) {
-      if (!this.store.has(fb)) {
-        this.missing.add(fb);
-        return key;
-      }
-      if (this.has(fb, cp)) return fb;
-    }
-    if (prev && prev !== key && this.has(prev, cp)) return prev;
-    if (!this.missing.size) this.noGlyph.add(String.fromCodePoint(cp));
-    return key;
-  }
-  /**
-   * Bidi levels, a font per character, runs (one font, level, script, and space or not), shaping,
-   * then visual order. Cached at size 1.
-   * @param {string} text @param {string} key a loaded key @param {'ltr'|'rtl'|undefined} dir
-   * @returns {{ w: number, rtl: boolean, runs: Run[] }}
-   */
-  layout(text, key, dir) {
-    const ck = `${key}
${dir || ""}
${text}`;
-    const hit = this.cache.get(ck);
-    if (hit) return hit;
-    let levels = null, rtl = dir === "rtl";
-    if (dir === "rtl" || RTL_OR_CONTROLS.test(text)) {
-      const e = bidi.getEmbeddingLevels(text, dir);
-      levels = e.levels;
-      rtl = ((e.paragraphs[0]?.level ?? 0) & 1) === 1;
-    }
-    const segs = [];
-    let cur = null, prevFont = "";
-    for (let i = 0; i < text.length; ) {
-      const cp = (
-        /** @type {number} */
-        text.codePointAt(i)
-      );
-      const n = cp > 65535 ? 2 : 1;
-      const ch = text.slice(i, i + n);
-      const font = STICKY.test(ch) && prevFont ? prevFont : this.pick(cp, key, prevFont);
-      const level = levels ? levels[i] : 0;
-      const ws = SPACE.test(ch);
-      const script = scriptOf(cp);
-      if (!cur || font !== cur.font || level !== cur.level || ws !== cur.ws || script !== "Common" && cur.script !== "Common" && script !== cur.script) {
-        cur = { start: i, end: i + n, font, level, script, ws };
-        segs.push(cur);
-      } else {
-        cur.end = i + n;
-        if (cur.script === "Common") cur.script = script;
-      }
-      prevFont = font;
-      i += n;
-    }
-    const runs = segs.map((s) => this.shapeRun(text.slice(s.start, s.end), s.font, (s.level & 1) === 1, s.script));
-    const order = runs.map((r, i) => ({ r, level: segs[i].level }));
-    let max = 0, minOdd = Infinity;
-    for (const o of order) {
-      max = Math.max(max, o.level);
-      if (o.level & 1) minOdd = Math.min(minOdd, o.level);
-    }
-    for (let l = max; l >= minOdd; l--) {
-      for (let i = 0; i < order.length; ) {
-        if (order[i].level < l) {
-          i++;
-          continue;
-        }
-        let j = i;
-        while (j < order.length && order[j].level >= l) j++;
-        const rev = order.slice(i, j).reverse();
-        order.splice(i, j - i, ...rev);
-        i = j;
-      }
-    }
-    let x = 0;
-    for (const o of order) {
-      o.r.x = x;
-      x += o.r.w;
-    }
-    const out = { w: x, rtl, runs: order.map((o) => o.r) };
-    if (this.cache.size > 2e4) this.cache.clear();
-    this.cache.set(ck, out);
-    return out;
-  }
-  /** One run at size 1: HarfBuzz for complex scripts and right-to-left text, else character-map glyphs. @returns {Run} */
-  shapeRun(text, key, rtl, script) {
-    const complex = !SIMPLE.has(script);
-    const store = this.store;
-    const glyphs = [];
-    let pen = 0;
-    if ((complex || rtl) && store.shaper) {
-      const hf = store.hbFont(key);
-      const g = store.shaper.shape(hf, text, rtl, !complex);
-      for (let i = 0; i < g.length; i += 5) {
-        glyphs.push(g[i], (pen + g[i + 2]) / hf.upem, g[i + 3] / hf.upem, g[i + 4]);
-        pen += g[i + 1];
-      }
-      return { font: key, x: 0, w: pen / hf.upem, text, ...rtl ? { rtl } : {}, ...complex ? { shaped: true } : {}, glyphs };
-    }
-    if ((complex || rtl) && !store.failed.has(SHAPER)) this.missing.add(SHAPER);
-    else if (complex || rtl) this.unshaped = true;
-    const f4 = store.get(key);
-    const list = [];
-    for (let i = 0; i < text.length; ) {
-      const cp = (
-        /** @type {number} */
-        text.codePointAt(i)
-      );
-      const g = f4.glyphForCodePoint(cp);
-      list.push([g.id, g.advanceWidth || 0, i]);
-      i += cp > 65535 ? 2 : 1;
-    }
-    if (rtl) list.reverse();
-    for (const [id, a, c] of list) {
-      glyphs.push(id, pen / f4.unitsPerEm, 0, c);
-      pen += a;
-    }
-    return { font: key, x: 0, w: pen / f4.unitsPerEm, text, ...rtl ? { rtl } : {}, glyphs };
-  }
-};
-function finishText(items, m) {
-  for (const it of items) {
-    if (it.t === "field") {
-      finishText(it.draw, m);
-      continue;
-    }
-    if (it.t !== "text") continue;
-    it.font = m.usable(it.font);
-    for (const l of it.lines) {
-      const r = m.runs(l.text, it.font, it.size, l.dir);
-      if (r) l.runs = r;
-    }
-  }
-}
-
 // src/engine/style.js
 var BASE_STYLE = {
   fontFamily: "Inter",
@@ -4669,6 +4171,11 @@ function niceScale(min, max, ticks = 5) {
   const step3 = niceNum(range / Math.max(1, ticks - 1), true);
   return { lo: Math.floor(min / step3) * step3, hi: Math.ceil(max / step3) * step3, step: step3 };
 }
+function niceScaleSpan(min, max, ticks = 5) {
+  if (!Number.isFinite(min) || !Number.isFinite(max) || !(max > min)) return niceScale(min, max, ticks);
+  const step3 = niceNum((max - min) / Math.max(1, ticks - 1), true);
+  return { lo: Math.floor(min / step3) * step3, hi: Math.ceil(max / step3) * step3, step: step3 };
+}
 function niceNum(x, round) {
   const e = Math.floor(Math.log10(x));
   const f4 = x / 10 ** e;
@@ -5625,7 +5132,7 @@ var byName2 = (lc, pal) => (name) => {
 };
 function chartData(item, ctx, lc, pal = paletteOf(item.palette)) {
   let rows = item.dataSet ? related(lc.dataSets[item.dataSet] || [], ctx) : ctx.aggRows || [];
-  if (item.dataSet && !lc.dataSets[item.dataSet]) lc.warn(`${item.name}: the data set "${item.dataSet}" does not exist`);
+  if (item.dataSet && !lc.dataSets[item.dataSet]) lc.warn(`${item.name || item.type}: the data set "${item.dataSet}" does not exist`);
   if (item.filters?.length) rows = applyFilters(rows, item.filters, ctx);
   if (item.sort?.length) rows = applySort(rows, item.sort, ctx);
   const who = item.name || "Chart";
@@ -5913,13 +5420,15 @@ function valueAxis(spec, lo, hi, minPos, { includeZero = true, len = 100, fs = 7
     lo = lo < 0 ? -1 : 0;
     hi = 1;
   }
+  let padded = false;
   if (pad2 > 0 && hi > lo) {
     const d = (hi - lo) * pad2;
-    if (smin == null) lo -= d;
-    if (smax == null) hi += d;
+    if (smin == null) lo = lo >= 0 && lo - d < 0 ? 0 : lo - d;
+    if (smax == null) hi = hi <= 0 && hi + d > 0 ? 0 : hi + d;
+    padded = true;
   }
   const want = len < fs * 6 ? 3 : 5;
-  const sc = niceScale(smin ?? lo, smax ?? hi, want);
+  const sc = padded && smin == null && smax == null && (lo >= 0 || hi <= 0) ? niceScaleSpan(lo, hi, want) : niceScale(smin ?? lo, smax ?? hi, want);
   let a = sc.lo, b = sc.hi, ticks;
   if (smin != null || smax != null) {
     a = smin ?? sc.lo;
@@ -6347,31 +5856,27 @@ function rowPoints(type, g) {
     rows = rows.slice(0, cap);
   }
   const blank2 = (v) => v == null || v === "";
-  const missing = /* @__PURE__ */ new Set();
+  const drawn = /* @__PURE__ */ new Set();
   const sets = data.series.map((s, si) => {
     const pts = [];
     rows.forEach((r, ri) => {
       c.fields = r;
       const rx = safe2(item.xValue, c, lc, who), ry = safe2(s.def.value || "=0", { ...c, aggRows: [r] }, lc, who);
-      if (blank2(rx) || blank2(ry)) {
-        missing.add(ri);
-        return;
-      }
+      if (blank2(rx) || blank2(ry)) return;
       const x = Number(rx), y = Number(ry);
-      if (!Number.isFinite(x) || !Number.isFinite(y)) {
-        missing.add(ri);
-        return;
-      }
+      if (!Number.isFinite(x) || !Number.isFinite(y)) return;
       let size = 1;
       if (type === "bubble") {
         size = Number(safe2(s.def.size || "=1", { ...c, aggRows: [r] }, lc, who));
         if (!Number.isFinite(size) || size <= 0) return;
       }
       pts.push({ x, y, size });
+      drawn.add(ri);
     });
     return { s, pts, i: si };
   });
-  if (missing.size) lc.warn(`${who}: ${missing.size} of ${rows.length} rows have no x or y value and are not drawn`);
+  const missing = rows.length - drawn.size;
+  if (missing > 0) lc.warn(`${who}: ${missing} of ${rows.length} rows have no x or y value and are not drawn`);
   return sets;
 }
 function paintXY(type, g) {
@@ -7652,12 +7157,12 @@ function parseRich(html, opt = {}) {
       i = e + 1;
       continue;
     }
-    const tag4 = readTag(s, i);
-    if (!tag4) break;
-    i = tag4.end;
-    const name = tag4.name;
+    const tag3 = readTag(s, i);
+    if (!tag3) break;
+    i = tag3.end;
+    const name = tag3.name;
     if (!name) continue;
-    if (!tag4.close && SKIP.has(name)) {
+    if (!tag3.close && SKIP.has(name)) {
       const e = low.indexOf(`</${name}`, i);
       if (e < 0) break;
       const g = s.indexOf(">", e);
@@ -7666,7 +7171,7 @@ function parseRich(html, opt = {}) {
       continue;
     }
     if (name === "br") {
-      if (tag4.close) continue;
+      if (tag3.close) continue;
       if (++nBreaks > RICH_LIMITS.maxBreaks) {
         cutAt(`${RICH_LIMITS.maxBreaks} line breaks`);
         continue;
@@ -7679,7 +7184,7 @@ function parseRich(html, opt = {}) {
       if (unknown.size < 20) unknown.add(name.slice(0, 20));
       continue;
     }
-    if (tag4.close) {
+    if (tag3.close) {
       if (ignored > 0) {
         ignored--;
         continue;
@@ -7697,7 +7202,7 @@ function parseRich(html, opt = {}) {
       stack2.length = k;
       continue;
     }
-    if (tag4.self && name !== "li") continue;
+    if (tag3.self && name !== "li") continue;
     if (stack2.length > RICH_LIMITS.maxDepth) {
       ignored++;
       if (!deepWarned) {
@@ -7731,7 +7236,7 @@ function parseRich(html, opt = {}) {
         st.script = "sub";
         break;
       case "a": {
-        const h = decode2(tag4.attrs.href ?? "");
+        const h = decode2(tag3.attrs.href ?? "");
         const ok = safeHref(h);
         if (ok) st.href = ok;
         else if (h) warn(`Rich text: the link "${h.slice(0, 40)}" is not allowed (only http, https, mailto and / links); its text is kept.`);
@@ -7743,7 +7248,7 @@ function parseRich(html, opt = {}) {
           st.fontWeight = "bold";
         }
     }
-    if (tag4.attrs.style) applyCss(tag4.attrs.style, st);
+    if (tag3.attrs.style) applyCss(tag3.attrs.style, st);
     if (BLOCK.has(name)) {
       flush();
       if (name === "ul" || name === "ol") lists.push({ ordered: name === "ol", n: 0 });
@@ -8792,7 +8297,7 @@ function hidden(item, ctx, lc) {
     const r = evalSafe(item.hidden, ctx, lc, item.name || item.type);
     h = !r.err && truthy(r.v);
   }
-  return item.name && lc.state?.toggles?.[`item:${item.name}`] ? !h : h;
+  return item.name && lc.state?.toggles?.[`item:${item.name || item.type}`] ? !h : h;
 }
 var SHRINK_DEFAULTS = { minFontSize: 4, step: 0.5 };
 function rotationOf(item) {
@@ -9128,7 +8633,7 @@ register("table", {
     else {
       rows = item.dataSet && lc.dataSets[item.dataSet] || [];
       rows = related(rows, tctx);
-      if (item.dataSet && !lc.dataSets[item.dataSet]) lc.warn(`${item.name || "Table"}: the data set "${item.dataSet}" does not exist`);
+      if (item.dataSet && !lc.dataSets[item.dataSet]) lc.warn(`${item.name || item.type}: the data set "${item.dataSet}" does not exist`);
       if (item.filters?.length) rows = applyFilters(rows, item.filters, tctx);
       const sort = lc.state?.sort?.[item.name] || item.sort;
       if (sort?.length) rows = applySort(rows, sort, tctx);
@@ -9144,11 +8649,11 @@ register("table", {
     if (overflow === "shrink" && room > 0) {
       const k = room / designedW;
       cols = cols.map((c) => ({ ...c, width: (Number(c.width) || 0) * k }));
-      lc.warn(`${item.name || "Table"}: its columns are ${Math.round(designedW)}pt wide, wider than the page (${Math.round(room)}pt), so they are narrowed to fit`);
+      lc.warn(`${item.name || item.type}: its columns are ${Math.round(designedW)}pt wide, wider than the page (${Math.round(room)}pt), so they are narrowed to fit`);
     } else if (overflow === "clip" || overflow === "paginate" && lc.fixed) {
-      lc.warn(`${item.name || "Table"}: its columns are ${Math.round(designedW)}pt wide, wider than the page (${Math.round(room)}pt), so the columns past the page edge are cut`, true);
+      lc.warn(`${item.name || item.type}: its columns are ${Math.round(designedW)}pt wide, wider than the page (${Math.round(room)}pt), so the columns past the page edge are cut`, true);
     } else if (overflow === "paginate" && item.overflow !== "paginate") {
-      lc.warn(`${item.name || "Table"}: its columns are ${Math.round(designedW)}pt wide, wider than the page (${Math.round(room)}pt), so they continue on the next pages`);
+      lc.warn(`${item.name || item.type}: its columns are ${Math.round(designedW)}pt wide, wider than the page (${Math.round(room)}pt), so they continue on the next pages`);
     }
     const colX = [];
     let acc = item.x;
@@ -9158,13 +8663,14 @@ register("table", {
     }
     const width = acc - item.x;
     const region = { name: item.name, columns: cols.map((c) => c.width), rows: [] };
+    if (lc.tablesSeen) lc.tablesSeen.n++;
     const tableScope = { rows, index: -1, run: [] };
     const scopes = { ...tctx.scopes || {}, [item.name]: tableScope };
     const groupChains = {};
     (item.groups || []).forEach((g, i) => {
       if (g.name) groupChains[g.name] = { rows, keys: item.groups.slice(0, i + 1).map((x) => x.expr) };
     });
-    const base = { ...tctx, aggRows: rows, aggIndex: void 0, fields: rows[0] || null, scopes, region: tableScope, group: void 0, groupChains: { ...tctx.groupChains || {}, ...groupChains } };
+    const base = { ...tctx, aggRows: rows, aggIndex: void 0, fields: lc.win?.first || rows[0] || null, scopes, region: tableScope, group: void 0, groupChains: { ...tctx.groupChains || {}, ...groupChains } };
     const units = [];
     let y = 0;
     let repeatH = 0;
@@ -9181,7 +8687,7 @@ register("table", {
     const covered = (ci) => cover[ci] !== null;
     const cellsAt = /* @__PURE__ */ new WeakMap();
     const layRow = (row, ctx, kind, extra) => {
-      if (row.hidden != null && row.hidden !== false && row.hidden !== "" && hidden({ hidden: row.hidden, name: `${item.name || "Table"} row` }, ctx, lc)) {
+      if (row.hidden != null && row.hidden !== false && row.hidden !== "" && hidden({ hidden: row.hidden, name: `${item.name || item.type} row` }, ctx, lc)) {
         if (openSpans.length) {
           for (const s of openSpans) s.left--;
           for (const s of openSpans) if (s.left <= 0) closeSpan(s);
@@ -9215,7 +8721,7 @@ register("table", {
         else try {
           v = evalValue(cell.value ?? "", cctx);
         } catch (e) {
-          lc.warn(`${item.name || "Table"} cell: ${e.message}`);
+          lc.warn(`${item.name || item.type} cell: ${e.message}`);
           v = "#Error";
         }
         let text = textOf(v, st, cctx, lc);
@@ -9258,7 +8764,7 @@ register("table", {
         cells.forEach((c, k) => {
           if (c.cell.visual?.type) {
             items.push(...paintBox({ x: c.x, y: 0, w: c.w, h, st: c.st, tl: null, m: lc.m }));
-            if (first) items.push(...paintVisual(c.cell.visual, { x: c.x, y: 0, w: c.w, h }, c.ctx, lc, c.st, `${item.name} cell`, { cell: true }));
+            if (first) items.push(...paintVisual(c.cell.visual, { x: c.x, y: 0, w: c.w, h }, c.ctx, lc, c.st, `${item.name || item.type} cell`, { cell: true }));
             return;
           }
           if (c.nested) {
@@ -9267,8 +8773,8 @@ register("table", {
             else if (first) items.push(...c.nested.items);
             return;
           }
-          const tag4 = lc.regions ? { table: item.name, row: rowId, col: colIdx[c.ci], span: c.span, kind, cols: colWidths, bg: c.st.backgroundColor || null } : null;
-          paintBoxAt(c.x, 0, c.w, h, c.st, lines ? { ...c.tl, lines: lines[k] } : c.tl, c.numeric, lc.m, true, items, tag4);
+          const tag3 = lc.regions ? { table: item.name, row: rowId, col: colIdx[c.ci], span: c.span, kind, cols: colWidths, bg: c.st.backgroundColor || null } : null;
+          paintBoxAt(c.x, 0, c.w, h, c.st, lines ? { ...c.tl, lines: lines[k] } : c.tl, c.numeric, lc.m, true, items, tag3);
           if (first) cellLinks(items, c, h, kind, extra?.level);
         });
         if (first) {
@@ -9313,7 +8819,7 @@ register("table", {
     };
     const layoutInCell = (inner, x, cw, st, cctx, row) => {
       const pd = padding(st);
-      const it = { ...inner, name: inner.name || `${item.name}_cell`, x: x + pd[3], y: 0, w: Math.max(1, cw - pd[1] - pd[3]), h: Number(inner.h) || Math.max(1, (row.height || 18) - pd[0] - pd[2]) };
+      const it = { ...inner, name: inner.name || `${item.name || item.type}_cell`, x: x + pd[3], y: 0, w: Math.max(1, cw - pd[1] - pd[3]), h: Number(inner.h) || Math.max(1, (row.height || 18) - pd[0] - pd[2]) };
       const scopeRows2 = cctx.aggIndex != null ? [cctx.fields] : cctx.aggRows || [];
       const current = item.dataSet ? { ...cctx.current || {}, [item.dataSet]: scopeRows2 } : cctx.current;
       const child = {
@@ -9333,7 +8839,7 @@ register("table", {
       const reads = (it.dataSet && it.dataSet !== item.dataSet ? child.ctxFor(it).aggRows?.length : scopeRows2.length) || 1;
       if (budget.left < reads) {
         budget.left = 0;
-        lc.warn(`${item.name}: more than ${CELL_ITEM_UNITS} rows of items inside cells; the rest are left empty`);
+        lc.warn(`${item.name || item.type}: more than ${CELL_ITEM_UNITS} rows of items inside cells; the rest are left empty`);
         return { items: [], height: 0 };
       }
       budget.left -= reads;
@@ -9367,8 +8873,8 @@ register("table", {
         const st = k === 0 && n === 1 ? s.st : { ...s.st, ...k > 0 ? { borderTop: "none" } : {}, ...k < n - 1 ? { borderBottom: "none" } : {} };
         const add2 = paintBox({ x: s.x, y: 0, w: s.w, h: u.height, st, tl: null, m: lc.m });
         if (k === 0) {
-          const tag4 = lc.regions ? { table: item.name, row: u.rowId, col: colX.indexOf(s.x), span: s.cols, rowSpan: n, kind, cols: colWidths, bg: s.st.backgroundColor || null } : null;
-          const text = paintBox({ x: s.x, y: 0, w: s.w, h: H, st: { ...s.st, ...NO_BOX }, tl: s.tl, numeric: s.numeric, m: lc.m, cell: tag4 });
+          const tag3 = lc.regions ? { table: item.name, row: u.rowId, col: colX.indexOf(s.x), span: s.cols, rowSpan: n, kind, cols: colWidths, bg: s.st.backgroundColor || null } : null;
+          const text = paintBox({ x: s.x, y: 0, w: s.w, h: H, st: { ...s.st, ...NO_BOX }, tl: s.tl, numeric: s.numeric, m: lc.m, cell: tag3 });
           add2.splice(s.st.backgroundColor ? 1 : 0, 0, ...text);
           cellLinks(add2, s, u.height, kind, s.level);
           if (s.toggle) add2.push(toggleLink(s, s.w, u.height));
@@ -9377,7 +8883,7 @@ register("table", {
         u.items.splice(at < 0 ? u.items.length : at, 0, ...add2);
       });
       if (s.tl.needed > s.units[0].height + GROW_TOLERANCE || s.st.verticalAlign && s.st.verticalAlign !== "top") {
-        const id = `${item.name}:span:${lc.nextId()}`;
+        const id = `${item.name || item.type}:span:${lc.nextId()}`;
         for (const u of s.units) u.block || (u.block = id);
       } else {
         let above = s.units[0].height;
@@ -9402,7 +8908,8 @@ register("table", {
       openSpans = [];
     };
     const fl = base.bandRows === "first-last";
-    const headerUnits = (item.header || []).map((r) => layRow(r, fl && rows.length ? { ...base, pendingRows: [rows[0]] } : base, "header")).filter(Boolean);
+    const first0 = lc.win?.first || rows[0];
+    const headerUnits = (item.header || []).map((r) => layRow(r, fl && rows.length ? { ...base, pendingRows: [first0] } : base, "header")).filter(Boolean);
     endBand();
     const headerHeight = headerUnits.reduce((s, u) => s + u.height, 0);
     if (item.repeatHeader !== false) repeatH = headerHeight;
@@ -9416,9 +8923,9 @@ register("table", {
       y += tl.needed;
     }
     const groups = item.groups || [];
-    let rowNo = 0;
+    let rowNo = lc.win?.rowOffset || 0;
     const groupTables = [];
-    const tableKey = `${item.name}#${lc.nextId()}`;
+    const tableKey = `${item.name || item.type}#${lc.nextId()}`;
     const emit = (level, grows, ctx, chain, keyPath) => {
       if (level === groups.length) {
         for (let i = 0; i < grows.length; i++) {
@@ -9436,9 +8943,16 @@ register("table", {
           const dctx = { ...ctx, fields: grows[i], aggRows: grows, aggIndex: i, rowNumber: rowNo };
           const u0 = units.length;
           for (const r of item.detail || []) layRow(r, dctx, "detail", { level: groups.length });
-          if (groups.length && item.widowControl !== false) for (let k = u0; k < units.length; k++) units[k].grp = tableKey + keyPath;
+          if (lc.win && units[u0]) {
+            units[u0].rowHead = true;
+            for (let k = u0; k < units.length; k++) units[k].dataRow = rowNo;
+          }
+          if (groups.length && item.widowControl !== false) for (let k = u0; k < units.length; k++) {
+            units[k].grp = tableKey + keyPath;
+            if (ctx.__before) units[k].grpBefore = ctx.__before;
+          }
           const every = Math.trunc(Number(item.pageBreakEvery)) || 0;
-          if (every > 0 && rowNo > 1 && (rowNo - 1) % every === 0 && units[u0]) units[u0].breakBefore = true;
+          if (every > 0 && rowNo > (lc.win?.rowOffset || 0) + 1 && (rowNo - 1) % every === 0 && units[u0]) units[u0].breakBefore = true;
           endBand();
         }
         return;
@@ -9473,7 +8987,7 @@ register("table", {
         kids = /* @__PURE__ */ new Map();
         roots = [];
         for (const b of buckets) {
-          const pk = evalSafe(g.parent, { ...ctx, fields: b.rows[0], aggRows: b.rows, aggIndex: void 0 }, lc, `${item.name} group parent`).v;
+          const pk = evalSafe(g.parent, { ...ctx, fields: b.rows[0], aggRows: b.rows, aggIndex: void 0 }, lc, `${item.name || item.type} group parent`).v;
           const pr = pk == null || pk === "" ? null : byText.get(pk instanceof Date ? String(pk.getTime()) : String(pk));
           if (!pr || pr === b) roots.push(b);
           else {
@@ -9495,24 +9009,29 @@ register("table", {
       }
       const shown = /* @__PURE__ */ new Set();
       const node = (bk, bi, sibs, depth, parentPath) => {
-        var _a;
         if (lc.rowBudget?.cut || shown.has(bk)) return;
         shown.add(bk);
         const sc = { rows: bk.rows, index: -1, run: [], number: bi + 1, prevRows: bi > 0 ? sibs[bi - 1].rows : null, siblings: sibRows(sibs), ...kids ? { level: depth, recRows: recOf.get(bk) } : {} };
-        const gctx = { ...ctx, fields: bk.rows[0], aggRows: bk.rows, aggIndex: void 0, scopes: { ...ctx.scopes, [gname]: sc }, groupKey: bk.key, group: sc };
+        const cont = bi === 0 && (level === 0 || ctx.__cont) ? lc.win?.cont?.[level] : null;
+        const gctx = { ...ctx, fields: cont ? cont.first : bk.rows[0], aggRows: bk.rows, aggIndex: void 0, scopes: { ...ctx.scopes, [gname]: sc }, groupKey: bk.key, group: sc, __cont: !!cont, __before: cont && level === groups.length - 1 ? cont.before : 0 };
         if (kids) {
           gctx.level = depth;
           if (g.indent) gctx.indent = (ctx.indent || 0) + depth * Number(g.indent);
         }
         const path = `${parentPath}/${bk.text}`;
-        const tkey = `${item.name}|${level}|${path}`;
+        const tkey = `${item.name || item.type}|${level}|${path}`;
         const dflt = kids && g.expandLevels != null ? depth < Number(g.expandLevels) : !g.initiallyCollapsed;
         const open = !g.collapsible ? true : lc.state?.toggles?.[tkey] ?? dflt;
         const start = units.length;
-        const hctx = g.header?.length ? { ...gctx, pendingRows: fl ? [bk.rows[0]] : recOf.get(bk) || bk.rows } : gctx;
-        const hu = (g.header || []).map((r, ri) => layRow(r, hctx, "groupHeader", { level, ...ri === 0 && g.collapsible ? { toggle: { key: tkey, open } } : {} })).filter(Boolean);
+        const hctx = g.header?.length ? { ...gctx, pendingRows: fl ? [cont ? cont.first : bk.rows[0]] : recOf.get(bk) || bk.rows } : gctx;
+        const hu = (cont && !g.repeatHeader ? [] : g.header || []).map((r, ri) => layRow(r, hctx, "groupHeader", { level, ...ri === 0 && g.collapsible ? { toggle: { key: tkey, open } } : {} })).filter(Boolean);
         endBand();
         const before = units.length;
+        if (lc.win && !cont && before > start) {
+          for (let k = start; k < before; k++) units[k].dataRow = rowNo + 1;
+          units[start].rowHead = true;
+          units[start].headLevel = level;
+        }
         const rep = g.repeatHeader && before > start && !lc.fixed ? [...ctx.__rep || [], (() => {
           const hdr = units.slice(start, before), h0 = hdr[0].top, its = [];
           for (const u of hdr) for (const it of shiftLocal(u.items.filter((i) => i.t !== "link" && i.t !== "bookmark"), u.top - h0)) its.push(it);
@@ -9522,7 +9041,7 @@ register("table", {
         const ch = kids?.get(bk) || [];
         if (open) {
           emit(level + 1, bk.rows, gctx, [...chain, sc], path);
-          if (ch.length && depth + 1 >= MAX_TREE_DEPTH) lc.warn(`${item.name}: the group "${gname}" is more than ${MAX_TREE_DEPTH} levels deep; deeper rows are listed at the top level`);
+          if (ch.length && depth + 1 >= MAX_TREE_DEPTH) lc.warn(`${item.name || item.type}: the group "${gname}" is more than ${MAX_TREE_DEPTH} levels deep; deeper rows are listed at the top level`);
           else ch.forEach((c, ci) => node(c, ci, ch, depth + 1, path));
         } else {
           const rs = recOf.get(bk) || bk.rows;
@@ -9551,8 +9070,11 @@ register("table", {
           if (g.newSection) units[start].sectionStart = true;
           if (g.pageBreak === "after" && bi < sibs.length - 1) units[units.length - 1].breakAfter = true;
           if (g.keepTogether) {
-            const id = `${item.name}:g${level}:${path}:${lc.nextId()}`;
-            for (let k = start; k < units.length; k++) (_a = units[k]).block || (_a.block = id);
+            const id = `${item.name || item.type}:g${level}:${path}:${lc.nextId()}`;
+            for (let k = start; k < units.length; k++) if (!units[k].block) {
+              units[k].block = id;
+              if (cont) units[k].blockOpen = true;
+            }
           }
         }
       };
@@ -9569,7 +9091,7 @@ register("table", {
       if (kids) {
         const rest = buckets.filter((b) => !shown.has(b));
         if (rest.length) {
-          lc.warn(`${item.name}: ${rest.length} rows of the group "${gname}" have no root (a cycle or too deep); they are listed at the top level`);
+          lc.warn(`${item.name || item.type}: ${rest.length} rows of the group "${gname}" have no root (a cycle or too deep); they are listed at the top level`);
           rest.forEach((bk, bi) => node(bk, bi, rest, 0, keyPath));
         }
       }
@@ -9597,7 +9119,7 @@ register("table", {
       units[units.length - 1].breakAfter = true;
     }
     if (item.bookmark && units.length) {
-      const b = evalSafe(item.bookmark, base, lc, `${item.name || "Table"} bookmark`).v;
+      const b = evalSafe(item.bookmark, base, lc, `${item.name || item.type} bookmark`).v;
       if (b != null && b !== "" && b !== "#Error") units[0].items.unshift({ t: "bookmark", label: String(b), x: item.x, y: 0, level: item.bookmarkLevel ?? 0 });
     }
     if (!lc.fixed) lc.regions?.push(region);
@@ -9692,7 +9214,7 @@ register("container", {
     const ctx = lc.ctxFor(item);
     if (hidden(item, ctx, lc)) return { height: 0, units: [] };
     const res = lc.layoutItems(item.items, lc, { dx: item.x });
-    return frame2(item, lc, ctx, res, item.keepTogether !== false ? `c:${item.name}:${lc.nextId()}` : null);
+    return frame2(item, lc, ctx, res, item.keepTogether !== false ? `c:${item.name || item.type}:${lc.nextId()}` : null);
   }
 });
 function frame2(item, lc, ctx, res, blockId0) {
@@ -9749,7 +9271,7 @@ register("list", {
     let rows = item.dataSet && lc.dataSets[item.dataSet] || [];
     if (item.inheritRows && item.dataSet && ctx.current?.[item.dataSet]) rows = ctx.current[item.dataSet];
     else rows = related(rows, ctx);
-    if (item.dataSet && !lc.dataSets[item.dataSet]) lc.warn(`${item.name}: the data set "${item.dataSet}" does not exist`);
+    if (item.dataSet && !lc.dataSets[item.dataSet]) lc.warn(`${item.name || item.type}: the data set "${item.dataSet}" does not exist`);
     if (item.filters?.length) rows = applyFilters(rows, item.filters, ctx);
     if (item.sort?.length) rows = applySort(rows, item.sort, ctx);
     const reps = item.groupBy ? groupRows(rows, item.groupBy, ctx, lc, item.name, item.groupAdjacent === true).map((b) => b.rows) : rows.map((r) => [r]);
@@ -9778,7 +9300,7 @@ register("list", {
       } };
       const k = i % ncol;
       const res = lc.layoutItems(item.items, child, { dx: item.x + k * (item.w + gap) });
-      const fr = frame2({ ...item, x: item.x + k * (item.w + gap), name: `${item.name}[${i + 1}]` }, child, rctx, res, item.keepTogether !== false ? `l:${item.name}:${i}:${lc.nextId()}` : null);
+      const fr = frame2({ ...item, x: item.x + k * (item.w + gap), name: `${item.name || item.type}[${i + 1}]` }, child, rctx, res, item.keepTogether !== false ? `l:${item.name || item.type}:${i}:${lc.nextId()}` : null);
       if (ncol > 1) {
         if (k === 0) {
           cells = { top: y, height: 0, items: [], x0: item.x, x1: item.x + ncol * item.w + (ncol - 1) * gap, block: void 0 };
@@ -10249,7 +9771,7 @@ register("subreport", {
     if (hidden(item, ctx, lc)) return { height: 0, units: [] };
     const params = {};
     for (const [k, v] of Object.entries(item.params || {})) {
-      const r = evalSafe(v, ctx, lc, `${item.name} parameter ${k}`);
+      const r = evalSafe(v, ctx, lc, `${item.name || item.type} parameter ${k}`);
       params[k] = r.v instanceof Date ? isoDate(r.v, ctx.timeZone) : r.v;
     }
     const key = `${item.report}|${JSON.stringify(params)}`;
@@ -10268,10 +9790,10 @@ register("subreport", {
     const res = sub.results.get(key);
     if (!res) return placeholder(`Subreport "${item.report}" did not load`);
     if (res.error) {
-      lc.warn(`${item.name}: ${res.error}`);
+      lc.warn(`${item.name || item.type}: ${res.error}`);
       return placeholder(`Subreport "${item.report}": ${res.error}`);
     }
-    const block = item.keepTogether ? `s:${item.name}:${lc.nextId()}` : void 0;
+    const block = item.keepTogether ? `s:${item.name || item.type}:${lc.nextId()}` : void 0;
     const units = res.units.map((u) => ({ ...u, items: shiftItems(u.items, item.x, 0), ...u.cont ? { cont: shiftItems(u.cont, item.x, 0) } : {}, x0: (u.x0 ?? 0) + item.x, x1: (u.x1 ?? item.w) + item.x, block: u.block || block, tableId: void 0 }));
     const tables = res.tables.map((t) => ({ ...t, x0: t.x0 + item.x, x1: t.x1 + item.x, headerItems: shiftItems(t.headerItems, item.x, 0), id: `sub${lc.nextId()}` }));
     for (const r of res.regions || []) lc.regions?.push(r);
@@ -10478,7 +10000,8 @@ function paginate(units, tables, pageH, warn, stats) {
     if (b) {
       b.top = Math.min(b.top, u.top);
       b.bottom = Math.max(b.bottom, u.top + u.height);
-    } else blockMap.set(u.block, { top: u.top, bottom: u.top + u.height });
+      if (u.blockOpen) b.open = true;
+    } else blockMap.set(u.block, { top: u.top, bottom: u.top + u.height, open: !!u.blockOpen });
   }
   const blockUnits = /* @__PURE__ */ new Map();
   for (const u of units) if (u.block) {
@@ -10486,18 +10009,18 @@ function paginate(units, tables, pageH, warn, stats) {
     if (!l) blockUnits.set(u.block, l = []);
     l.push(u);
   }
-  const blocks = [...blockMap.values()].filter((b) => b.bottom - b.top <= pageH + EPS2);
+  const blocks = [...blockMap.values()].filter((b) => !b.open && b.bottom - b.top <= pageH + EPS2);
   for (const b of blocks) cand.push(b.top, b.bottom);
   cand.sort((a, b) => a - b);
   const grpRows = /* @__PURE__ */ new Map();
   for (const u of units) if (u.grp) {
     let g = grpRows.get(u.grp);
-    if (!g) grpRows.set(u.grp, g = { tops: /* @__PURE__ */ new Set(), first: u.top, last: 0, block: u.block || null });
+    if (!g) grpRows.set(u.grp, g = { tops: /* @__PURE__ */ new Set(), first: u.top, last: 0, block: u.block || null, before: u.grpBefore || 0 });
     g.tops.add(u.top);
     g.last = Math.max(g.last, u.top + u.height);
     if (g.block !== (u.block || null)) g.block = void 0;
   }
-  const widowGroups = [...grpRows.values()].map((g) => ({ first: g.first, last: g.last, tops: [...g.tops].sort((a, b) => a - b), block: g.block })).filter((g) => g.tops.length >= 4 || g.tops.length >= 2 && g.last - g.first <= pageH + EPS2).sort((a, b) => a.first - b.first);
+  const widowGroups = [...grpRows.values()].map((g) => ({ first: g.first, last: g.last, tops: [...g.tops].sort((a, b) => a - b), block: g.block, before: g.before, n: g.tops.size + g.before })).filter((g) => g.n >= 4 || !g.before && g.n >= 2 && g.last - g.first <= pageH + EPS2).sort((a, b) => a.first - b.first);
   const wFirst = widowGroups.map((g) => g.first);
   const wMaxLast = [];
   widowGroups.forEach((g, i) => wMaxLast.push(Math.max(i ? wMaxLast[i - 1] : -Infinity, g.last)));
@@ -10524,9 +10047,9 @@ function paginate(units, tables, pageH, warn, stats) {
       tick(1);
       const g = widowGroups[i];
       if (g.last <= y + EPS2 || g.block && !withBlocks) continue;
-      if (g.tops.length < 4) return false;
-      const above = rowsAbove(g.tops, y);
-      if (above < 2 || g.tops.length - above < 2) return false;
+      if (g.n < 4) return false;
+      const above = g.before + rowsAbove(g.tops, y);
+      if (above < 2 || g.n - above < 2) return false;
     }
     return true;
   };
@@ -10581,7 +10104,7 @@ function paginate(units, tables, pageH, warn, stats) {
       if (u.block) {
         const bl = blockMap.get(u.block);
         if (movedBlocks.has(bl)) continue;
-        if (!bl || bl.bottom - bl.top > room + EPS2 || bl.top <= top2 + EPS2) return null;
+        if (!bl || bl.open || bl.bottom - bl.top > room + EPS2 || bl.top <= top2 + EPS2) return null;
         movedBlocks.add(bl);
         for (const m of blockUnits.get(u.block)) if (!placed.has(m)) moved.push(m);
         continue;
@@ -10763,7 +10286,7 @@ function layoutItems(items, lc, { dx = 0 } = {}) {
     const own = L.res.table ? { id: lc.nextId(), ...L.res.table } : null;
     const us = L.res.units;
     const alt = it.alt || L.res.alt;
-    const tag4 = alt || it.headingLevel || FIGURES.has(it.type) ? { k: it.type, id: lc.nextId(), alt: alt ? String(alt).slice(0, 2e3) : void 0, h: Number(it.headingLevel) || void 0 } : null;
+    const tag3 = alt || it.headingLevel || FIGURES.has(it.type) ? { k: it.type, id: lc.nextId(), alt: alt ? String(alt).slice(0, 2e3) : void 0, h: Number(it.headingLevel) || void 0 } : null;
     for (let k = 0; k < us.length; k++) {
       const u = us[k];
       u.x0 = u.x0 ?? x0;
@@ -10772,7 +10295,7 @@ function layoutItems(items, lc, { dx = 0 } = {}) {
       u.tableId = own ? own.id : u.tableId;
       u.breakBefore = u.breakBefore || k === 0 && !!it.pageBreakBefore;
       u.breakAfter = u.breakAfter || k === us.length - 1 && !!it.pageBreakAfter;
-      if (tag4) for (const d of u.items) d.tag ?? (d.tag = tag4);
+      if (tag3) for (const d of u.items) d.tag ?? (d.tag = tag3);
       units.push(u);
     }
     if (own) tables.push({ ...own, top, bottom: top + L.res.height, x0, x1 });
@@ -13321,6 +12844,7 @@ var SCHEMA_ALIAS = "reportwright/report@1";
 var ITEM_KEYS = new Set("id type name x y w h style styleName items hidden layer locked label alt value dataSet canGrow canShrink action bookmark tooltip keepTogether pageBreakBefore pageBreakAfter pageBreakBetween newSection filters sort groups groupBy groupAdjacent inheritRows columns header detail footer repeatHeader widowControl noRowsText pageBreakEvery cells rows rowGroup rowGroups columnGro\
 up columnGroups values value valueFormat rowSort columnSort rowTotals columnTotals cellStyle headerStyle totalStyle corner partProps library part properties overflow overflowTo src fit headingLevel rotate shrinkToFit minFontSize shrinkStep tocDots tocLink tocPage format chartType series seriesGroup category title legend palette stacked valueAxis xTitle maxCategories outliers categorySort categoryF\
 ormat showValues labelPosition symbology quietZone report params text toggle initiallyCollapsed collapsible expandLevels repeatColumns columnGap rowHeaderWidth anim animation visual comment notes description".split(" "));
+var NO_SERIES_CHARTS = /* @__PURE__ */ new Set(["gantt"]);
 function looksLikeLink(it) {
   if (it.type !== "textbox" || it.action && it.action.type && it.action.type !== "none") return false;
   const st = it.style && typeof it.style === "object" ? it.style : {};
@@ -13449,6 +12973,9 @@ function validate(def) {
     if (p?.hidden && p.required && (p.default == null || p.default === "") && !p.nullable) {
       warnings.push(`Parameter "${p.name}" is hidden and required but has no default: only a URL, the API or a drill-through can set it`);
     }
+    if (p?.required && p.nullable && !p.multi && (p.default == null || p.default === "")) {
+      warnings.push(`Parameter "${p.name}" is required and nullable with no default: when no value is given it is null and the report can draw blank; give it a default, or drop "nullable" to require a value`);
+    }
     if (p?.type === "date" && typeof p.default === "string" && p.default.trim() && !p.default.startsWith("=") && !toDate(p.default)) {
       warnings.push(`Parameter "${p.name}": its default "${p.default}" is not a date; write it as 2026-12-31 (year-month-day)`);
     }
@@ -13529,7 +13056,7 @@ function validate(def) {
         warnings.push(`${label}: there is no named style "${it.styleName}"${g ? ` (did you mean "${g}"?)` : ""}; it is ignored`);
       }
       if (Array.isArray(it.sort)) sortIssues(it.sort, label, warnings);
-      if (it.type === "chart" && Array.isArray(it.series) && !it.series.length) warnings.push(`${label}: the chart has no series, so it draws nothing; add one, e.g. series: [{ "name": "Value", "value": "=Sum(Fields.Amount)" }]`);
+      if (it.type === "chart" && !NO_SERIES_CHARTS.has(it.chartType) && !(Array.isArray(it.series) && it.series.length)) warnings.push(`${label}: the chart has no series, so it plots a count of its rows; add one, e.g. series: [{ "name": "Value", "value": "=Sum(Fields.Amount)" }]`);
       if (it.type === "image" && typeof it.src === "string" && !it.src.startsWith("=") && LOCAL_IMAGE.test(it.src.trim())) warnings.push(`${label}: "${it.src}" is a local file path, which a browser cannot load; embed the image (images: { name: "data:image/png;base64,..." } and src: "embedded:name") or use an https:// address`);
       if (it.style != null && (typeof it.style !== "object" || Array.isArray(it.style))) warnings.push(`${label}: "style" must be an object of style properties, such as { "fontWeight": "bold" }; ${JSON.stringify(it.style).slice(0, 40)} is ignored`);
       const own = ownKeys(it.type);
@@ -13572,6 +13099,9 @@ function validate(def) {
         const n = Array.isArray(it.columns) ? it.columns.length : 0;
         const rowsOf = [["header", it.header], ["detail", it.detail], ["footer", it.footer], ...(it.groups || []).flatMap((g, gi) => [[`group ${gi + 1} header`, g?.header], [`group ${gi + 1} footer`, g?.footer]])];
         for (const [part, rows] of rowsOf) (Array.isArray(rows) ? rows : []).forEach((row, ri) => {
+          const cells = Array.isArray(row?.cells) ? row.cells : [];
+          const placed = cells.length < n && cells.some((c) => Number(c?.colSpan) > 1) ? cells.reduce((s, c) => s + Math.max(1, Math.floor(Number(c?.colSpan)) || 1), 0) : cells.length;
+          if (placed < n) warnings.push(`${label} ${part} row ${ri + 1}: the row has ${placed} of ${n} cells and no colSpan covers the other ${n - placed}; add the cells or a colSpan`);
           for (const [k, j] of rowCells(row?.cells, n).covered) warnings.push(`${label} ${part} row ${ri + 1}: cell ${k} is covered by colSpan of cell ${j}, so it is not drawn (leave it null, or omit the spanned cells: a row with fewer cells than columns places each cell after the previous one's span)`);
         });
       }
@@ -13670,7 +13200,7 @@ function* textsOf(def, dataSets) {
     }
   }
 }
-var NO_CJK_FONTS = "Text in Japanese/Chinese/Korean needs the optional CJK fonts: npm run fonts:cjk";
+var NO_CJK_FONTS = "Text in Japanese/Chinese/Korean needs the optional CJK fonts: npm i @reportwright/fonts-cjk, then npx reportwright-fonts-cjk (npm); in the app, npm run fonts:cjk";
 async function render(def0, opts = {}) {
   const t0 = Date.now();
   const reuseWarnings = [];
@@ -13741,6 +13271,7 @@ async function render(def0, opts = {}) {
   const base = { ...BASE_STYLE, ...def.styles?.base || {} };
   let idSeq = 0;
   const regions = [];
+  const tablesSeen = { n: 0 };
   const imageBudget = opts.imageBudget || { seen: /* @__PURE__ */ new Set(), bytes: 0 };
   const makeLc = (globals, fixed) => {
     const lc = {
@@ -13751,6 +13282,7 @@ async function render(def0, opts = {}) {
       fixed,
       maxUnitHeight: contentH,
       state: opts.state || {},
+      tablesSeen,
       regions: opts.exportData || opts.dataOnly ? regions : null,
       dataOnly: !!opts.dataOnly,
       // exportData: true: table data and cell tags (Excel, CSV, Word, HTML, accessible PDF)
@@ -13770,14 +13302,16 @@ async function render(def0, opts = {}) {
       ctxFor: (item) => {
         const ds = item.dataSet || defaultDs;
         const rows = ds && dataSets[ds] || [];
-        return { ...baseCtx, globals, fields: rows[0] || null, aggRows: rows };
+        return { ...baseCtx, globals, fields: (opts.pageWindow?.first && ds === defaultDs ? opts.pageWindow.first : rows[0]) || null, aggRows: rows };
       },
       subreports: null,
       bodyWidth: opts.bodyWidth ?? page.bodyWidth,
       images: def.images || {},
       imageBudget,
-      cellItems: { left: 1e5 }
+      cellItems: { left: 1e5 },
       // rows of items inside table cells, for the whole render (items/index.js)
+      win: opts.pageWindow || null
+      // paged.js: units carry their row number (dataRow, rowHead), rows and groups continue
     };
     return lc;
   };
@@ -13916,12 +13450,14 @@ async function render(def0, opts = {}) {
         const bodyTop = mt + g.hH;
         const items = [];
         const cut = lc.rowBudget?.cut;
-        const globals = { ...baseCtx.globals, PageNumber: n - secStart[n] + 1, TotalPages: cut ? "…" : secLen.get(secStart[n]), OverallPageNumber: n + 1, OverallTotalPages: cut ? "…" : total };
+        const win = opts.pageWindow, off = win ? win.offset : 0, all = win ? win.total ?? "…" : null;
+        const globals = { ...baseCtx.globals, PageNumber: n - secStart[n] + 1 + (secStart[n] ? 0 : off), TotalPages: cut ? "…" : all ?? secLen.get(secStart[n]), OverallPageNumber: n + 1 + off, OverallTotalPages: cut ? "…" : all ?? total };
+        const isFirst = n + off === 0, isLast = n === total - 1 && (!win || win.final);
         const plc = makeLc(globals, true);
-        const band = (section, y0, isFirst, isLast) => {
+        const band = (section, y0, isFirst2, isLast2) => {
           if (!section) return;
-          if (isFirst && section.printOnFirstPage === false) return;
-          if (isLast && section.printOnLastPage === false) return;
+          if (isFirst2 && section.printOnFirstPage === false) return;
+          if (isLast2 && section.printOnLastPage === false) return;
           const capped2 = () => warn(`The page headers and footers would draw more than ${BAND_ITEMS.toLocaleString("en-US")} items in this report; they are left out of the later pages. Make them lighter, or the report shorter.`);
           if (bandWork.left <= 0) {
             capped2();
@@ -13942,7 +13478,7 @@ async function render(def0, opts = {}) {
           for (const u of r.units) if (c.paged) placeItems(u.items, ml, y0 + u.top, items);
           else for (const it of shiftItems(u.items, ml, y0 + u.top)) items.push(it);
         };
-        band(g.hdr, mt, g.own.h ? k === 0 : n === 0, g.own.h ? last : n === total - 1);
+        band(g.hdr, mt, g.own.h ? k === 0 : isFirst, g.own.h ? last : isLast);
         const frozen = [];
         for (let c = 0; c < colCount; c++) {
           const p = slices[k * colCount + c];
@@ -13952,30 +13488,38 @@ async function render(def0, opts = {}) {
           for (const t of body.tables) {
             if (!(t.top < p.bottom - EPS4 && t.bottom > p.top + EPS4)) continue;
             const cont = p.repeat.includes(t);
-            let off = 0;
+            let off2 = 0;
             if (!cont) {
-              for (const r of p.repeat) if (t.x0 < r.x1 - EPS4 && r.x0 < t.x1 - EPS4) off = Math.max(off, r.headerHeight);
+              for (const r of p.repeat) if (t.x0 < r.x1 - EPS4 && r.x0 < t.x1 - EPS4) off2 = Math.max(off2, r.headerHeight);
             }
-            const y = cont ? bodyTop : bodyTop + off + t.top - p.top;
-            frozen.push({ x: cx + t.x0, y, w: t.x1 - t.x0, h: t.headerHeight, end: bodyTop + (cont ? t.headerHeight : off) + Math.min(t.bottom, p.bottom) - p.top });
+            const y = cont ? bodyTop : bodyTop + off2 + t.top - p.top;
+            frozen.push({ x: cx + t.x0, y, w: t.x1 - t.x0, h: t.headerHeight, end: bodyTop + (cont ? t.headerHeight : off2) + Math.min(t.bottom, p.bottom) - p.top });
           }
           for (const u of p.units) {
-            let off = 0;
-            for (const t of p.repeat) if (u.x0 < t.x1 - EPS4 && t.x0 < u.x1 - EPS4) off = Math.max(off, t.headerHeight);
-            if (u.atBottom) off += Math.max(0, cH - off - (p.bottom - p.top));
-            if (u.cont && u.top <= p.top + EPS4) placeItems(u.cont, cx, bodyTop + off, items);
-            placeItems(u.items, cx, bodyTop + off + (u.top - p.top), items);
+            let off2 = 0;
+            for (const t of p.repeat) if (u.x0 < t.x1 - EPS4 && t.x0 < u.x1 - EPS4) off2 = Math.max(off2, t.headerHeight);
+            if (u.atBottom) off2 += Math.max(0, cH - off2 - (p.bottom - p.top));
+            if (u.cont && u.top <= p.top + EPS4) placeItems(u.cont, cx, bodyTop + off2, items);
+            placeItems(u.items, cx, bodyTop + off2 + (u.top - p.top), items);
           }
         }
-        band(g.ftr, ph - pg.margins.bottom - g.fH, g.own.f ? k === 0 : n === 0, g.own.f ? last : n === total - 1);
+        band(g.ftr, ph - pg.margins.bottom - g.fH, g.own.f ? k === 0 : isFirst, g.own.f ? last : isLast);
         let j = 0;
         for (let i = 0; i < items.length; i++) {
           const it = items[i];
-          if (it.t === "bookmark") (it.heading ? headings : bookmarks2).push({ label: it.label, page: n + 1, y: it.y, level: it.level || 0, ...secStart[n] ? { shown: n - secStart[n] + 1 } : {} });
+          if (it.t === "bookmark") (it.heading ? headings : bookmarks2).push({ label: it.label, page: n + 1 + off, y: it.y, level: it.level || 0, ...secStart[n] ? { shown: n - secStart[n] + 1 } : {} });
           else items[j++] = it;
         }
         items.length = j;
         const out = frozen.length ? { items, frozen } : { items };
+        if (win) {
+          const u = slices[k * colCount]?.units[0];
+          if (u?.dataRow != null) {
+            out.firstRow = u.dataRow;
+            out.rowHead = !!u.rowHead;
+            if (u.headLevel != null) out.headLevel = u.headLevel;
+          }
+        }
         if (pg.width !== first.width || ph !== pageH) {
           out.width = pg.width;
           out.height = ph;
@@ -14041,9 +13585,9 @@ async function render(def0, opts = {}) {
   for (const k of store.failed) if (k !== SHAPER && !OPTIONAL_KEYS.includes(k)) warn(`The font "${k}" did not load, so its text is drawn in a bundled face instead.`);
   if (m.unshaped) warn("The text shaper (harfbuzz.wasm) did not load, so Arabic, Hebrew, Indic and Thai text is not shaped (letters unjoined, marks misplaced). A font loader must map each key with fontFile(key).");
   if (m.noGlyph.size) {
-    const cjk2 = [...m.noGlyph].some((c) => /[\u1100-\u11ff\u2600-\u27bf\u2b00-\u2bff\u3000-\u9fff\uac00-\ud7af\uf900-\ufaff\uff00-\uffef]|[\u{1f000}-\u{1faff}]/u.test(c));
+    const cjk = [...m.noGlyph].some((c) => /[\u1100-\u11ff\u2600-\u27bf\u2b00-\u2bff\u3000-\u9fff\uac00-\ud7af\uf900-\ufaff\uff00-\uffef]|[\u{1f000}-\u{1faff}]/u.test(c));
     const list = [...m.noGlyph].slice(0, 20).join(" ");
-    warn(cjk2 ? `${NO_CJK_FONTS} (the app), or npm i @reportwright/fonts-cjk then npx reportwright-fonts-cjk (the npm engine). Until then these characters show as boxes: ${list}.` : `No font has these characters, so they show as boxes: ${list}. Upload a font that has them and use it for this text.`);
+    warn(cjk ? `${NO_CJK_FONTS}. Until then these characters show as boxes: ${list}.` : `No font has these characters, so they show as boxes: ${list}. Upload a font that has them and use it for this text.`);
   }
   if (opts.bodyOnly) return { units: result.body.units, tables: result.body.tables, height: result.body.height, regions, warnings, clipped: clipped() };
   if (opts.dataOnly) return {
@@ -14083,6 +13627,7 @@ async function render(def0, opts = {}) {
     headings: result.headings || [],
     pageStarts: result.pageStarts || [],
     regions: opts.exportData ? regions : null,
+    hasTables: tablesSeen.n > 0,
     name: def.name || "",
     partial: cutRows(),
     timeZone: timeZone || null,
@@ -14219,7 +13764,8 @@ async function parameterOptions(def, given = {}, opts = {}) {
       seen.add(k);
       list.push({ value: v instanceof Date ? isoDate(v) : v, label: String(p.optionsFrom.label ? evalValue(p.optionsFrom.label, c) : v) });
     }
-    out[p.name] = list;
+    const fixed = out[p.name] || [], have = new Set(fixed.map((o) => o.value));
+    out[p.name] = [...fixed, ...list.filter((o) => !have.has(o.value))];
   }
   return out;
 }
@@ -14267,440 +13813,16 @@ function resolveParameters(def, given, o = {}) {
   return out;
 }
 
-// src/exporters/subset.js
-var HB_MEMORY_MODE_WRITABLE = 2;
-var HB_SUBSET_SETS_DROP_TABLE_TAG = 3;
-var HB_SUBSET_SETS_LAYOUT_FEATURE_TAG = 6;
-var HB_SUBSET_FLAGS_RETAIN_GIDS = 2;
-var HB_SUBSET_FLAGS_NOTDEF_OUTLINE = 64;
-var tag3 = (s) => [...s].reduce((a, c) => (a << 8) + c.charCodeAt(0), 0) >>> 0;
-function createSubsetter(loadWasm) {
-  let hbP = null;
-  const hb = () => hbP || (hbP = (async () => {
-    const bytes = await loadWasm();
-    const { instance } = await WebAssembly.instantiate(bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes), {});
-    const x = (
-      /** @type {any} */
-      instance.exports
-    );
-    x._initialize?.();
-    return x;
-  })());
-  return async function subset(font, codePoints, opt = {}) {
-    const x = await hb();
-    const heap = () => new Uint8Array(x.memory.buffer);
-    const input = x.hb_subset_input_create_or_fail();
-    if (!input) throw new Error("HarfBuzz: no subset input");
-    const buf = x.malloc(font.byteLength);
-    heap().set(font, buf);
-    const blob = x.hb_blob_create(buf, font.byteLength, HB_MEMORY_MODE_WRITABLE, 0, 0);
-    const face = x.hb_face_create(blob, 0);
-    x.hb_blob_destroy(blob);
-    try {
-      if (!opt.layout) {
-        x.hb_set_clear(x.hb_subset_input_set(input, HB_SUBSET_SETS_LAYOUT_FEATURE_TAG));
-        const drop = x.hb_subset_input_set(input, HB_SUBSET_SETS_DROP_TABLE_TAG);
-        for (const t of ["GSUB", "GPOS", "GDEF", "kern", "morx", "mort"]) x.hb_set_add(drop, tag3(t));
-      }
-      x.hb_subset_input_set_flags(input, x.hb_subset_input_get_flags(input) | HB_SUBSET_FLAGS_NOTDEF_OUTLINE);
-      const uni = x.hb_subset_input_unicode_set(input);
-      for (const cp of codePoints) x.hb_set_add(uni, cp);
-      if (opt.glyphs) {
-        x.hb_subset_input_set_flags(input, x.hb_subset_input_get_flags(input) | HB_SUBSET_FLAGS_RETAIN_GIDS);
-        const gs = x.hb_subset_input_glyph_set(input);
-        for (const g of opt.glyphs) x.hb_set_add(gs, g);
-      }
-      x.hb_subset_input_pin_all_axes_to_default(input, face);
-      const sub = x.hb_subset_or_fail(face, input);
-      if (!sub) throw new Error("HarfBuzz: subsetting failed");
-      const res = x.hb_face_reference_blob(sub);
-      const off = x.hb_blob_get_data(res, 0);
-      const len = x.hb_blob_get_length(res);
-      const out = heap().slice(off, off + len);
-      x.hb_blob_destroy(res);
-      x.hb_face_destroy(sub);
-      if (!len) throw new Error("HarfBuzz: empty subset");
-      return out;
-    } finally {
-      x.hb_subset_input_destroy(input);
-      x.hb_face_destroy(face);
-      x.free(buf);
-    }
-  };
-}
-
-// src/viewer/engineClient.js
-var assetBase = "";
-function setAssetBase(url) {
-  assetBase = String(url || "").replace(/\/$/, "");
-  mainStore = null;
-}
-var origin = () => assetBase || window.location.origin;
-var fontsUrl = null;
-var standalone = false;
-function setStandalone({ standalone: on = false, fontsUrl: f4 = null } = {}) {
-  standalone = !!on;
-  fontsUrl = f4 ? String(f4).replace(/\/?$/, "/") : null;
-  mainStore = null;
-  fontList = null;
-  fontBytes.clear();
-}
-var fontsBase = () => fontsUrl || `${assetBase}/fonts/`;
-var besideFonts = (file) => fontsUrl ? new URL(`../${file}`, new URL(fontsUrl, typeof location !== "undefined" ? location.href : void 0)).href : `${assetBase}/${file}`;
-var subsetter = createSubsetter(async () => (await fetch(besideFonts("harfbuzz-subset.wasm"))).arrayBuffer());
-var worker = null;
-var workerBroken = false;
-var seq = 0;
-var waiting = /* @__PURE__ */ new Map();
-var mainStore = null;
-var bundledFonts = null;
-var bundledList = null;
-function setBundledFonts(map, list) {
-  bundledFonts = map || null;
-  bundledList = list || null;
-  mainStore = null;
-  fontList = null;
-}
-var b64ToBuffer = (b64) => {
-  const s = atob(b64);
-  const u = new Uint8Array(s.length);
-  for (let i = 0; i < s.length; i++) u[i] = s.charCodeAt(i);
-  return u.buffer;
-};
-var fontBytes = /* @__PURE__ */ new Map();
-var fetchFont = (k) => {
-  if (!fontBytes.has(k)) {
-    const p = (async () => {
-      const r = await fetch(`${fontsBase()}${fontFile(k)}`);
-      if (!r.ok) throw new Error(`Font "${k}" did not load (HTTP ${r.status})`);
-      return r.arrayBuffer();
-    })();
-    p.catch(() => fontBytes.delete(k));
-    fontBytes.set(k, p);
-  }
-  return fontBytes.get(k);
-};
-var getFont = async (k) => {
-  if (bundledFonts?.[k]) return b64ToBuffer(bundledFonts[k]);
-  return (await fetchFont(k)).slice(0);
-};
-function fontStore() {
-  if (!mainStore) mainStore = new FontStore(getFont);
-  return mainStore;
-}
-var makeWorker = true ? null : () => new Worker(new URL("../worker/engine.worker.js", import.meta.url), { type: "module" });
-var fontList = null;
-function customFonts(refresh = false) {
-  if (!fontList || refresh) {
-    fontList = (bundledList ? Promise.resolve(bundledList) : standalone ? Promise.resolve([]) : fetch(`${assetBase}/api/fonts`).then((r) => r.ok ? r.json() : []).catch(() => [])).then((list) => {
-      setCustomFonts(list);
-      return list;
-    });
-  }
-  return fontList;
-}
-var faces = /* @__PURE__ */ new Map();
-function loadReportFonts(keys) {
-  if (typeof document === "undefined" || !document.fonts || typeof FontFace === "undefined") return Promise.resolve([]);
-  return Promise.all(keys.filter((k) => k !== SHAPER).map((k) => {
-    if (!faces.has(k)) {
-      const bytes = bundledFonts?.[k] ? Promise.resolve(b64ToBuffer(bundledFonts[k])) : fetchFont(k).then((b) => b.slice(0));
-      faces.set(k, bytes.then((src) => {
-        const face = new FontFace(fontFamilyCss(k), src, { display: "block" });
-        document.fonts.add(face);
-        return face.load();
-      }).then(() => null, (error) => {
-        faces.delete(k);
-        return { key: k, error };
-      }));
-    }
-    return faces.get(k);
-  })).then((results) => results.filter(Boolean));
-}
-var loadModelFonts = (model) => loadReportFonts([.../* @__PURE__ */ new Set([...ALL_FONT_KEYS, ...fontKeysOf(model)])]);
-function getWorker() {
-  if (!makeWorker || workerBroken || typeof Worker === "undefined" || assetBase || bundledFonts) return null;
-  if (worker) return worker;
-  try {
-    worker = makeWorker();
-    worker.onmessage = (e) => {
-      const w = waiting.get(e.data.id);
-      if (!w) return;
-      if (e.data.partial) {
-        w.onPartial?.(e.data.model);
-        return;
-      }
-      if (e.data.retry) {
-        w.onRetry?.(e.data.retry);
-        return;
-      }
-      waiting.delete(e.data.id);
-      if (e.data.ok) w.resolve(e.data.model);
-      else w.reject(Object.assign(new Error(e.data.error.message), e.data.error));
-    };
-    worker.onerror = () => {
-      workerBroken = true;
-      worker = null;
-      for (const [, w] of waiting) w.retry();
-      waiting.clear();
-    };
-  } catch {
-    workerBroken = true;
-    worker = null;
-  }
-  return worker;
-}
-var bundled = /* @__PURE__ */ new Map();
-function registerReports(map) {
-  for (const [k, v] of Object.entries(map || {})) bundled.set(k, v);
-}
-var loadReport = async (rid) => {
-  if (bundled.has(rid)) return structuredClone(bundled.get(rid));
-  if (standalone) throw new Error(`Report "${rid}" is not loaded: pass it in reports: { "${rid}": definition }, or set server (a self-hosted ReportWright server)`);
-  const r = await fetch(`${assetBase}/api/reports/${encodeURIComponent(rid)}`);
-  if (!r.ok) throw new Error(`Report "${rid}" not found`);
-  return r.json();
-};
-var fetchReport = loadReport;
-async function renderMain(def, params, state, reportId, exportData = false, onRetry = void 0, dataOnly = false) {
-  await customFonts();
-  return render(def, { parameters: params, state, reportId, exportData, dataOnly, fontStore: fontStore(), baseUrl: origin(), loadReport, fetch: reportFetch(origin(), void 0, { onRetry }) });
-}
-async function renderReport(def, params = {}, state = {}, reportId = void 0, { onPartial, exportData = false, onRetry, dataOnly = false } = {}) {
-  const w = getWorker();
-  if (!w) return renderMain(def, params, state, reportId, exportData, onRetry, dataOnly);
-  const fonts = await customFonts();
-  return new Promise((resolve, reject) => {
-    const id = ++seq;
-    waiting.set(id, { resolve, reject, onPartial, onRetry, retry: () => renderMain(def, params, state, reportId, exportData, onRetry, dataOnly).then(resolve, reject) });
-    w.postMessage({ id, def, params, state, reportId, fonts, firstPages: onPartial && !dataOnly ? 2 : 0, exportData, dataOnly });
-  });
-}
-var usingWorker = () => !!worker && !workerBroken;
-async function iccProfile() {
-  const r = await fetch(fontsUrl ? besideFonts("icc/sRGB-v2-magic.icc") : `${origin()}/icc/sRGB-v2-magic.icc`);
-  if (!r.ok) throw new Error(`the PDF/A colour profile did not load (HTTP ${r.status})`);
-  return new Uint8Array(await r.arrayBuffer());
-}
-async function pdfBlob(model, title, o = {}) {
-  const store = fontStore();
-  await customFonts();
-  await store.load(fontKeysOf(model));
-  const { exportPdf } = await import("./chunk-66QZ3RDV.js");
-  const bytes = await exportPdf(model, store, {
-    title,
-    subset: subsetter,
-    tagged: o.tagged,
-    drillBase: origin(),
-    // drill-through links open this viewer, as in the HTML export
-    pdfa: o.pdfa ? { icc: await iccProfile() } : void 0,
-    // a report's image: a GET under the same rules as its data (no cookies to our other routes or to other sites)
-    fetchImage: async (src) => {
-      try {
-        const r = await reportFetch(origin())(src);
-        return r.ok ? new Uint8Array(await r.arrayBuffer()) : null;
-      } catch {
-        return null;
-      }
-    }
-  });
-  return new Blob([bytes], { type: "application/pdf" });
-}
-
-// src/viewer/logic.js
-var TOOLBAR_GROUP_KEYS = {
-  export: (i) => i.group === "export" && i.id !== "print",
-  search: (i) => i.group === "search",
-  zoom: (i) => i.group === "zoom",
-  navigation: (i) => i.group === "paging"
-};
-var TOOLBAR_ID_KEYS = { sidebar: ["thumbnails", "documentMap"] };
-function arrangeToolbar(builtIns, { hide = [], add: add2 = [] } = {}) {
-  if (!hide.length && !add2.length) return builtIns;
-  const out = [...builtIns];
-  const taken = new Set(builtIns.map((i) => i.id));
-  for (const a of add2) {
-    if (!a || !a.id || taken.has(a.id)) continue;
-    taken.add(a.id);
-    const at = out.findIndex((i) => i.id === a.after);
-    const item = { ...a, custom: true, group: at >= 0 ? out[at].group : `custom:${a.id}` };
-    if (at >= 0) out.splice(at + 1, 0, item);
-    else out.push(item);
-  }
-  const hiddenIds = /* @__PURE__ */ new Set();
-  const hiddenBy = [];
-  for (const k of hide) {
-    if (Object.hasOwn(TOOLBAR_GROUP_KEYS, k)) hiddenBy.push(TOOLBAR_GROUP_KEYS[k]);
-    else for (const id of Object.hasOwn(TOOLBAR_ID_KEYS, k) ? TOOLBAR_ID_KEYS[k] : [k]) hiddenIds.add(id);
-  }
-  let kept = out.filter((i) => i.custom || !(hiddenIds.has(i.id) || hiddenBy.some((f4) => f4(i))));
-  if (!kept.some((i) => i.format)) kept = kept.filter((i) => i.custom || i.id !== "exportOptions");
-  return kept;
-}
-function galleyDefinition(def) {
-  const pg = resolvePage(def.page);
-  if (pg.pageless) return def;
-  const m = pg.margins;
-  return { ...def, page: { size: "Pageless", width: pg.width, margins: [m.top, m.right, m.bottom, m.left] } };
-}
-function frozenAt(page, y) {
-  for (const r of page?.frozen || []) if (y > r.y && y < r.end - r.h) return r;
-  return null;
-}
-var escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-function findText(model, q, { matchCase = false, wholeWord = false } = {}) {
-  if (!q || !model) return [];
-  const W2 = "[\\p{L}\\p{M}\\p{N}_]";
-  const re = new RegExp(wholeWord ? `(?<!${W2})${escapeRe(q)}(?!${W2})` : escapeRe(q), `u${matchCase ? "" : "i"}`);
-  const out = [];
-  model.pages.forEach((pg, pi) => {
-    const rows = /* @__PURE__ */ new Map();
-    pg.items.forEach((it, k) => {
-      if (it.t !== "text") return;
-      for (const l of it.lines) {
-        const key = it.rich ? `r${it.rich.id}
${it.rich.l}` : `${k}
${l.y}`;
-        const r = rows.get(key);
-        if (r) r.lines.push(l);
-        else rows.set(key, { rich: !!it.rich, size: it.size, lines: [l] });
-      }
-    });
-    for (const { rich, size, lines: row } of rows.values()) {
-      row.sort((a, b) => a.x - b.x);
-      const text = row.map((l) => l.text).join(rich ? "" : " ");
-      if (!re.test(text)) continue;
-      const x0 = row[0].x, last = row[row.length - 1];
-      const x1 = last.x + (last.w || size * last.text.length * 0.5);
-      const y = Math.max(...row.map((l) => l.y));
-      out.push({ page: pi, x: x0 - 1, y: y - size * 0.95, w: x1 - x0 + 2, h: size * 1.25, text });
-    }
-  });
-  return out;
-}
-function rangeValue(a, b, p) {
-  if (a === "" && b === "") return "";
-  const lo = a !== "" ? a : String(p.min ?? b);
-  const hi = b !== "" ? b : String(p.max ?? a);
-  return `${lo},${hi}`;
-}
-function pathBox(d) {
-  let x0 = Infinity, y0 = Infinity, x1 = -Infinity, y1 = -Infinity, cx = 0, cy = 0;
-  const add2 = (x, y) => {
-    cx = x;
-    cy = y;
-    if (x < x0) x0 = x;
-    if (x > x1) x1 = x;
-    if (y < y0) y0 = y;
-    if (y > y1) y1 = y;
-  };
-  for (const [, c, args] of String(d || "").matchAll(/([MLHVCSQTAZ])([^MLHVCSQTAZ]*)/gi)) {
-    const n = (args.match(/-?(?:\d+\.?\d*|\.\d+)(?:e[-+]?\d+)?/gi) || []).map(Number);
-    const C = c.toUpperCase();
-    if (C === "H") n.forEach((x) => add2(x, cy));
-    else if (C === "V") n.forEach((y) => add2(cx, y));
-    else if (C === "A") for (let i = 0; i + 6 < n.length; i += 7) add2(n[i + 5], n[i + 6]);
-    else if (C !== "Z") for (let i = 0; i + 1 < n.length; i += 2) add2(n[i], n[i + 1]);
-  }
-  return x0 <= x1 ? { x: x0, y: y0, w: x1 - x0, h: y1 - y0 } : null;
-}
-var itemsOf = (page) => (page?.items || []).flatMap((i) => i.t === "field" ? i.draw || [] : [i]);
-function pageLinks(page) {
-  const items = itemsOf(page);
-  const texts = items.filter((i) => i.t === "text");
-  const out = [];
-  for (const it of items) {
-    if (it.t !== "link" || !it.action) continue;
-    let box = { x: it.x, y: it.y, w: it.w, h: it.h };
-    if (it.d) {
-      const b = pathBox(it.d);
-      if (!b) continue;
-      box = { ...b, x: b.x + (it.x - (it.x0 ?? it.x)), y: b.y + (it.y - (it.y0 ?? it.y)) };
-    }
-    if (!(box.w > 0 && box.h > 0)) continue;
-    const words = [];
-    for (const t of texts) for (const l of t.lines || []) {
-      const top = l.y - (t.size || 9) * 0.9, w = l.w || (t.size || 9) * String(l.text).length * 0.5;
-      if (l.x < box.x + box.w && l.x + w > box.x && top < box.y + box.h && l.y > box.y) words.push(String(l.text));
-    }
-    out.push({ action: it.action, ...box, path: !!it.d, tip: it.tip ? String(it.tip) : "", text: words.join(" ").replace(/^[▶▼]\s*/, "").replace(/\s*[↑↓]$/, "").trim() });
-  }
-  return out.sort((a, b) => Math.abs(a.y - b.y) > 2 ? a.y - b.y : a.x - b.x);
-}
-function readingText(page) {
-  const rows = /* @__PURE__ */ new Map();
-  for (const it of itemsOf(page)) {
-    if (it.t !== "text") continue;
-    for (const l of it.lines || []) {
-      const k = Math.round(l.y);
-      const r = rows.get(k);
-      if (r) r.push(l);
-      else rows.set(k, [l]);
-    }
-  }
-  return [...rows.entries()].sort((a, b) => a[0] - b[0]).map(([, ls]) => ls.sort((a, b) => a.x - b.x).map((l) => l.text).join(" ").trim()).filter(Boolean);
-}
-var EXPORT_DEFAULTS = { pdfua: false, pdfa: false, formulas: true, html: "tables" };
-function exportOptionsFrom(stored) {
-  const { v, ...rest } = stored && typeof stored === "object" ? stored : {};
-  if (v !== 2) delete rest.html;
-  return { ...EXPORT_DEFAULTS, ...rest };
-}
-function pruneSnapshot(snapshot, defs) {
-  const text = defs.map((d) => JSON.stringify(d)).join("\n");
-  const seen = /* @__PURE__ */ new Map();
-  const used = (k) => {
-    let u = seen.get(k);
-    if (u === void 0) {
-      u = text.includes(JSON.stringify(k).slice(1, -1));
-      seen.set(k, u);
-    }
-    return u;
-  };
-  const walk = (x) => {
-    if (Array.isArray(x)) return x.map(walk);
-    if (!x || typeof x !== "object") return x;
-    const o = {};
-    for (const [k, y] of Object.entries(x)) if (y && typeof y === "object" || used(k)) o[k] = walk(y);
-    return o;
-  };
-  return Object.fromEntries(Object.entries(snapshot).map(([url, x]) => [url, walk(x)]));
-}
-var SERVER_PDF_ROWS = 2e4;
-var SERVER_PDF_PAGES = 800;
-function serverPdfUrl(model, { reportId, params = {}, origin: origin2, timeZone, dirty = false }) {
-  if (!reportId || dirty || !model) return null;
-  const rows = Object.values(model.stats?.rows || {}).reduce((a, n) => a + (Number(n) || 0), 0);
-  if (rows <= SERVER_PDF_ROWS && (model.pages?.length || 0) <= SERVER_PDF_PAGES) return null;
-  const q = new URLSearchParams();
-  for (const [k, v0] of Object.entries(params)) {
-    const v = Array.isArray(v0) ? v0.length > 1 ? void 0 : v0[0] : v0;
-    if (v === void 0 && Array.isArray(v0)) return null;
-    if (v == null) continue;
-    q.set(k, v instanceof Date ? v.toISOString() : String(v));
-  }
-  if (timeZone) q.set("timeZone", timeZone);
-  const s = q.toString();
-  return `${origin2}/api/reports/${encodeURIComponent(reportId)}/pdf${s ? `?${s}` : ""}`;
-}
-function paramChoices(def, fetched) {
-  const out = { ...fetched };
-  for (const p of def?.parameters || []) {
-    if (!Array.isArray(p.options) || !p.optionsFrom || !Array.isArray(fetched?.[p.name])) continue;
-    const fixed = p.options.map((o) => typeof o === "object" && o ? { value: o.value, label: String(o.label ?? o.value) } : { value: o, label: String(o) });
-    const seen = new Set(fixed.map((o) => String(o.value)));
-    out[p.name] = [...fixed, ...fetched[p.name].filter((o) => !seen.has(String(o.value)))];
-  }
-  return out;
-}
-
 export {
+  setFetchPolicy,
+  policyKeysIn,
+  fetchPolicy,
   reportFetch,
   PAGE_SIZES,
   toPt,
   fromPt,
   resolvePage,
   normBox,
-  TextMeasurer,
-  finishText,
   isDynamic,
   evalValue,
   toText,
@@ -14745,33 +13867,6 @@ export {
   NO_CJK_FONTS,
   render,
   parameterOptions,
-  resolveParameters,
-  setAssetBase,
-  origin,
-  setStandalone,
-  fontsBase,
-  subsetter,
-  setBundledFonts,
-  fontStore,
-  customFonts,
-  loadReportFonts,
-  loadModelFonts,
-  registerReports,
-  fetchReport,
-  renderReport,
-  usingWorker,
-  pdfBlob,
-  arrangeToolbar,
-  galleyDefinition,
-  frozenAt,
-  findText,
-  rangeValue,
-  pageLinks,
-  readingText,
-  EXPORT_DEFAULTS,
-  exportOptionsFrom,
-  pruneSnapshot,
-  serverPdfUrl,
-  paramChoices
+  resolveParameters
 };
-//# sourceMappingURL=chunk-WQOBRZAL.js.map
+//# sourceMappingURL=chunk-VNOWPSE6.js.map