agentinbox-cli 0.0.0 → 0.1.0-nightly.10

package/dist/content-BXblC_Qs.js

@@ -0,0 +1,1162 @@
+#!/usr/bin/env node
+import { parseHTML } from "linkedom";
+import TurndownService from "turndown";
+import { gfm } from "turndown-plugin-gfm";
+//#region server/mail/css.ts
+/** Parses declarations ("a: b; c: d") into lower-cased property → value. `!important` is dropped. */
+function parseStyle(style) {
+	const out = /* @__PURE__ */ new Map();
+	if (!style) return out;
+	for (const decl of style.split(";")) {
+		const i = decl.indexOf(":");
+		if (i < 0) continue;
+		if (decl.length - i > 272) continue;
+		const prop = decl.slice(0, i).trim().toLowerCase();
+		const value = decl.slice(i + 1).replace(/!\s*important/i, "").trim().toLowerCase();
+		if (prop && value) out.set(prop, value);
+	}
+	return out;
+}
+const isZeroLength = (v) => v !== void 0 && /^[+-]?(?:0+(?:\.0*)?|\.0+)(?:[a-z%]+)?$/.test(v.trim());
+const NAMED_COLORS = Object.fromEntries(`aliceblue f0f8ff antiquewhite faebd7 aqua 00ffff aquamarine 7fffd4 azure f0ffff beige f5f5dc bisque ffe4c4 black 000000
+  blanchedalmond ffebcd blue 0000ff blueviolet 8a2be2 brown a52a2a burlywood deb887 cadetblue 5f9ea0 chartreuse 7fff00
+  chocolate d2691e coral ff7f50 cornflowerblue 6495ed cornsilk fff8dc crimson dc143c cyan 00ffff darkblue 00008b
+  darkcyan 008b8b darkgoldenrod b8860b darkgray a9a9a9 darkgreen 006400 darkgrey a9a9a9 darkkhaki bdb76b darkmagenta 8b008b
+  darkolivegreen 556b2f darkorange ff8c00 darkorchid 9932cc darkred 8b0000 darksalmon e9967a darkseagreen 8fbc8f
+  darkslateblue 483d8b darkslategray 2f4f4f darkslategrey 2f4f4f darkturquoise 00ced1 darkviolet 9400d3 deeppink ff1493
+  deepskyblue 00bfff dimgray 696969 dimgrey 696969 dodgerblue 1e90ff firebrick b22222 floralwhite fffaf0 forestgreen 228b22
+  fuchsia ff00ff gainsboro dcdcdc ghostwhite f8f8ff gold ffd700 goldenrod daa520 gray 808080 green 008000 greenyellow adff2f
+  grey 808080 honeydew f0fff0 hotpink ff69b4 indianred cd5c5c indigo 4b0082 ivory fffff0 khaki f0e68c lavender e6e6fa
+  lavenderblush fff0f5 lawngreen 7cfc00 lemonchiffon fffacd lightblue add8e6 lightcoral f08080 lightcyan e0ffff
+  lightgoldenrodyellow fafad2 lightgray d3d3d3 lightgreen 90ee90 lightgrey d3d3d3 lightpink ffb6c1 lightsalmon ffa07a
+  lightseagreen 20b2aa lightskyblue 87cefa lightslategray 778899 lightslategrey 778899 lightsteelblue b0c4de lightyellow ffffe0
+  lime 00ff00 limegreen 32cd32 linen faf0e6 magenta ff00ff maroon 800000 mediumaquamarine 66cdaa mediumblue 0000cd
+  mediumorchid ba55d3 mediumpurple 9370db mediumseagreen 3cb371 mediumslateblue 7b68ee mediumspringgreen 00fa9a
+  mediumturquoise 48d1cc mediumvioletred c71585 midnightblue 191970 mintcream f5fffa mistyrose ffe4e1 moccasin ffe4b5
+  navajowhite ffdead navy 000080 oldlace fdf5e6 olive 808000 olivedrab 6b8e23 orange ffa500 orangered ff4500 orchid da70d6
+  palegoldenrod eee8aa palegreen 98fb98 paleturquoise afeeee palevioletred db7093 papayawhip ffefd5 peachpuff ffdab9
+  peru cd853f pink ffc0cb plum dda0dd powderblue b0e0e6 purple 800080 rebeccapurple 663399 red ff0000 rosybrown bc8f8f
+  royalblue 4169e1 saddlebrown 8b4513 salmon fa8072 sandybrown f4a460 seagreen 2e8b57 seashell fff5ee sienna a0522d
+  silver c0c0c0 skyblue 87ceeb slateblue 6a5acd slategray 708090 slategrey 708090 snow fffafa springgreen 00ff7f
+  steelblue 4682b4 tan d2b48c teal 008080 thistle d8bfd8 tomato ff6347 turquoise 40e0d0 violet ee82ee wheat f5deb3
+  white ffffff whitesmoke f5f5f5 yellow ffff00 yellowgreen 9acd32`.trim().split(/\s+/).reduce((acc, tok, i, all) => i % 2 ? acc : [...acc, [tok, `#${all[i + 1]}`]], []));
+const hex2 = (n) => Math.max(0, Math.min(255, Math.round(n))).toString(16).padStart(2, "0");
+const rgbHex = (r, g, b) => `#${hex2(r)}${hex2(g)}${hex2(b)}`;
+/** Alpha component: "0.5", "50%". */
+const alpha = (s) => s === void 0 ? 1 : s.endsWith("%") ? parseFloat(s) / 100 : parseFloat(s);
+function hue(s) {
+	const n = parseFloat(s);
+	if (s.endsWith("turn")) return n * 360;
+	if (s.endsWith("grad")) return n * .9;
+	if (s.endsWith("rad")) return n * 180 / Math.PI;
+	return n;
+}
+function hslToRgb(h, s, l) {
+	const k = (n) => (n + h / 30) % 12;
+	const a = s * Math.min(l, 1 - l);
+	const f = (n) => l - a * Math.max(-1, Math.min(k(n) - 3, 9 - k(n), 1));
+	return [
+		f(0) * 255,
+		f(8) * 255,
+		f(4) * 255
+	];
+}
+/** Normalizes a CSS colour to "#rrggbb", "transparent" (alpha ≈ 0), or null when unknown. */
+function normalizeColor(value) {
+	if (!value) return null;
+	const v = value.trim().toLowerCase();
+	if (v === "transparent") return "transparent";
+	if (NAMED_COLORS[v]) return NAMED_COLORS[v];
+	let m = /^#([0-9a-f]{3,4})$/.exec(v);
+	if (m) {
+		const [r, g, b, a] = m[1].split("");
+		if (a === "0") return "transparent";
+		return `#${r}${r}${g}${g}${b}${b}`;
+	}
+	m = /^#([0-9a-f]{6})([0-9a-f]{2})?$/.exec(v);
+	if (m) return m[2] !== void 0 && parseInt(m[2], 16) < 13 ? "transparent" : `#${m[1]}`;
+	const fn = /^(rgba?|hsla?|hwb)\(\s*([^)]*)\)$/.exec(v);
+	if (!fn) return null;
+	const parts = fn[2].split(/[\s,/]+/).filter(Boolean);
+	if (parts.length < 3) return null;
+	if (alpha(parts[3]) < .05) return "transparent";
+	const pct = (s, scale) => s.endsWith("%") ? parseFloat(s) / 100 * scale : parseFloat(s);
+	if (fn[1].startsWith("rgb")) return rgbHex(pct(parts[0], 255), pct(parts[1], 255), pct(parts[2], 255));
+	const h = hue(parts[0]);
+	const x = parseFloat(parts[1]) / 100;
+	const y = parseFloat(parts[2]) / 100;
+	if ([
+		h,
+		x,
+		y
+	].some(Number.isNaN)) return null;
+	if (fn[1].startsWith("hsl")) return rgbHex(...hslToRgb(h, x, y));
+	if (x + y >= 1) return rgbHex(...[
+		1,
+		1,
+		1
+	].map(() => x / (x + y) * 255));
+	const [r, g, b] = hslToRgb(h, 1, .5).map((c) => c / 255 * (1 - x - y) + x);
+	return rgbHex(r * 255, g * 255, b * 255);
+}
+function luminance(hex) {
+	const c = [
+		1,
+		3,
+		5
+	].map((i) => parseInt(hex.slice(i, i + 2), 16) / 255).map((s) => s <= .03928 ? s / 12.92 : ((s + .055) / 1.055) ** 2.4);
+	return .2126 * c[0] + .7152 * c[1] + .0722 * c[2];
+}
+/** WCAG contrast ratio between two "#rrggbb" colours (1 = identical, 21 = black on white). */
+function contrastRatio(a, b) {
+	const [hi, lo] = [luminance(a), luminance(b)].sort((x, y) => y - x);
+	return (hi + .05) / (lo + .05);
+}
+/** Images and gradients in a `background` shorthand (they paint over the colour). */
+const BG_IMAGE = /url\([^)]*\)|(?:repeating-)?(?:linear|radial|conic)-gradient\((?:[^()]|\([^()]*\))*\)|(?:-webkit-)?image-set\([^)]*\)/g;
+/** The background colour an element sets, from `background-color`, the `background` shorthand or `bgcolor`. */
+function backgroundColor(style, el) {
+	const direct = normalizeColor(style.get("background-color"));
+	if (direct) return direct;
+	const shorthand = style.get("background")?.replace(BG_IMAGE, " ");
+	if (shorthand) for (const token of shorthand.match(/#[0-9a-f]{3,8}\b|(?:rgba?|hsla?|hwb)\([^)]*\)|[a-z]+/g) ?? []) {
+		const c = normalizeColor(token);
+		if (c) return c;
+	}
+	return normalizeColor(el.getAttribute("bgcolor"));
+}
+/** A background image or gradient, so the background colour may not be what's behind the text. */
+function hasBackgroundImage(style, el) {
+	const image = style.get("background-image");
+	BG_IMAGE.lastIndex = 0;
+	return !!image && image !== "none" || BG_IMAGE.test(style.get("background") ?? "") || el.hasAttribute("background");
+}
+const ROOT_FONT_PX = 16;
+const ABSOLUTE_PX = {
+	px: 1,
+	pt: 4 / 3,
+	pc: 16,
+	in: 96,
+	cm: 96 / 2.54,
+	mm: 96 / 25.4,
+	q: 96 / 101.6
+};
+const SIZE_KEYWORDS = {
+	"xx-small": 9,
+	"x-small": 10,
+	small: 13,
+	medium: 16,
+	large: 18,
+	"x-large": 24,
+	"xx-large": 32,
+	"xxx-large": 48
+};
+/** A font-size value in px given the parent's size; null when it isn't a size. */
+function sizePx(raw, parent) {
+	const v = raw.trim();
+	if (SIZE_KEYWORDS[v] !== void 0) return SIZE_KEYWORDS[v];
+	if (v === "smaller") return parent / 1.2;
+	if (v === "larger") return parent * 1.2;
+	if (v === "inherit" || v === "unset") return parent;
+	if (v === "initial") return ROOT_FONT_PX;
+	const m = /^([+-]?(?:\d+(?:\.\d*)?|\.\d+))([a-z%]*)$/.exec(v);
+	if (!m) return null;
+	const n = parseFloat(m[1]);
+	const unit = m[2];
+	if (!unit) return n === 0 ? 0 : null;
+	if (ABSOLUTE_PX[unit] !== void 0) return n * ABSOLUTE_PX[unit];
+	if (unit === "em") return n * parent;
+	if (unit === "%") return n / 100 * parent;
+	if (unit === "rem") return n * ROOT_FONT_PX;
+	if (unit === "ex" || unit === "ch") return n * parent / 2;
+	return n === 0 ? 0 : parent;
+}
+/** Effective font size in px from `font-size` or the `font` shorthand ("bold 0/0 a", "12px/1.4 Arial"). */
+function fontSizePx(style, parent) {
+	const explicit = style.get("font-size");
+	if (explicit !== void 0) return sizePx(explicit, parent) ?? parent;
+	const shorthand = style.get("font");
+	if (shorthand) for (const token of shorthand.split(/\s+/)) {
+		const size = sizePx(token.split("/")[0], parent);
+		if (size !== null) return size;
+	}
+	return parent;
+}
+/** Properties taken from <style> rules: only the ones that can hide content. */
+const SHEET_PROPS = /* @__PURE__ */ new Set([
+	"display",
+	"visibility",
+	"opacity",
+	"font-size",
+	"font",
+	"overflow",
+	"height",
+	"max-height",
+	"width",
+	"max-width"
+]);
+const COLOR_PROPS = /^(?:color|background(?:-color|-image)?)$/;
+const MAX_CSS_CHARS = 64e3;
+const MAX_RULES = 300;
+const MAX_SELECTORS = 300;
+const MAX_SELECTOR_CHARS = 200;
+const MAX_COMBINATORS = 3;
+const MAX_MATCH_OPS = 2e6;
+/** Removes comments in one pass (a lazy regex rescans the rest of the input for every unclosed "/*"). */
+function stripCssComments(css) {
+	let out = "";
+	let i = 0;
+	while (i < css.length) {
+		const start = css.indexOf("/*", i);
+		if (start < 0) return out + css.slice(i);
+		out += css.slice(i, start) + " ";
+		const end = css.indexOf("*/", start + 2);
+		if (end < 0) return out;
+		i = end + 2;
+	}
+	return out;
+}
+/**
+* Media that can apply to someone reading the mail on a screen: not print-only, and no width bound no real
+* viewport has (`max-width: 1px`, `min-width: 99999px`).
+*/
+function plausibleMedia(prelude) {
+	if (!/^@media\b/i.test(prelude)) return true;
+	if (/^@media\s+(?:only\s+)?print\b/i.test(prelude) && !/\b(?:screen|all)\b/i.test(prelude)) return false;
+	for (const m of prelude.matchAll(/\((min|max)-(?:device-)?width\s*:\s*(\d+(?:\.\d+)?)(px|em|rem)?\s*\)/gi)) {
+		const px = parseFloat(m[2]) * (m[3] && m[3].toLowerCase() !== "px" ? 16 : 1);
+		if (m[1].toLowerCase() === "max" ? px < 200 : px > 4e3) return false;
+	}
+	return true;
+}
+/** Splits CSS (comments already stripped) into rules; rules inside conditional groups are marked. Linear. */
+function parseRules(css) {
+	const rules = [];
+	let truncated = false;
+	const text = css;
+	const block = (from) => {
+		let depth = 0;
+		for (let i = from; i < text.length; i++) if (text[i] === "{") depth++;
+		else if (text[i] === "}" && --depth === 0) return i + 1;
+		return text.length;
+	};
+	const walk = (start, end, conditional) => {
+		let i = start;
+		while (i < end) {
+			const open = text.indexOf("{", i);
+			if (open < 0 || open >= end) break;
+			const prelude = text.slice(i, open).trim();
+			const close = block(open);
+			if (prelude.startsWith("@")) {
+				if (/^@(media|supports|document|container)\b/i.test(prelude) && !conditional && plausibleMedia(prelude)) walk(open + 1, close - 1, true);
+			} else if (rules.length >= MAX_RULES) {
+				truncated = true;
+				return;
+			} else rules.push({
+				selectors: prelude.split(",").map((x) => x.trim()).filter(Boolean),
+				decls: parseStyle(text.slice(open + 1, close - 1)),
+				conditional
+			});
+			i = close;
+		}
+	};
+	walk(0, text.length, false);
+	return {
+		rules,
+		truncated
+	};
+}
+function parseCompound(sel) {
+	const m = /^([a-z][a-z0-9-]*|\*)?((?:[#.][\w-]+)*)$/i.exec(sel.trim());
+	if (!m || !m[1] && !m[2]) return null;
+	const parts = m[2].match(/[#.][\w-]+/g) ?? [];
+	const ids = parts.filter((x) => x.startsWith("#")).map((x) => x.slice(1));
+	if (ids.length > 1) return null;
+	return {
+		tag: m[1] && m[1] !== "*" ? m[1].toUpperCase() : null,
+		id: ids[0] ?? null,
+		classes: parts.filter((x) => x.startsWith(".")).map((x) => x.slice(1))
+	};
+}
+/** Compounds joined by descendant/child combinators, as subject + ancestor steps (right to left). */
+function parseChain(sel) {
+	if (/[+~]/.test(sel)) return null;
+	const tokens = sel.trim().replace(/\s*>\s*/g, " > ").split(/\s+/);
+	const compounds = [];
+	const childLinks = [];
+	let child = false;
+	for (const tok of tokens) {
+		if (tok === ">") {
+			if (!compounds.length || child) return null;
+			child = true;
+			continue;
+		}
+		const c = parseCompound(tok);
+		if (!c) return null;
+		if (compounds.length) childLinks.push(child);
+		compounds.push(c);
+		child = false;
+	}
+	if (!compounds.length || child) return null;
+	return {
+		subject: compounds.pop(),
+		ancestors: compounds.reverse().map((compound, i) => ({
+			compound,
+			child: childLinks[childLinks.length - 1 - i]
+		}))
+	};
+}
+/**
+* The element a complex selector applies to, over-approximated: its last compound with attribute and
+* pseudo parts dropped (`td > a.btn:hover` → `a.btn`). "any" when that leaves nothing specific.
+*/
+function subjectOf(sel) {
+	const c = parseCompound((sel.trim().split(/[\s>+~]+/).at(-1) ?? "").replace(/\[[^\]]*\]/g, "").replace(/::?[\w-]+(?:\([^)]*\))?/g, ""));
+	return !c || !c.tag && !c.id && !c.classes.length ? "any" : c;
+}
+const indexKey = (c) => c.id ? `#${c.id}` : c.classes.length ? `.${c.classes[0]}` : c.tag ? c.tag : "*";
+const VISIBLE_VALUES = {
+	display: (v) => v !== "none",
+	visibility: (v) => v === "visible",
+	opacity: (v) => parseFloat(v) >= .1,
+	"font-size": (v) => !isZeroLength(v),
+	overflow: (v) => v === "visible" || v === "auto" || v === "scroll",
+	height: (v) => !isZeroLength(v),
+	"max-height": (v) => !isZeroLength(v),
+	width: (v) => !isZeroLength(v),
+	"max-width": (v) => !isZeroLength(v)
+};
+const reveals = (decls) => [...decls].some(([p, v]) => VISIBLE_VALUES[p]?.(v));
+function keyOf(el) {
+	return {
+		tag: el.tagName.toUpperCase(),
+		id: el.getAttribute("id"),
+		classes: (el.getAttribute("class") ?? "").split(/\s+/).filter(Boolean).slice(0, 50)
+	};
+}
+const compoundMatches = (c, k) => (!c.tag || c.tag === k.tag) && (!c.id || c.id === k.id) && c.classes.every((x) => k.classes.includes(x));
+/** Greedy right-to-left ancestor check; counts every step against the shared budget. */
+function ancestorsMatch(el, steps, budget) {
+	let node = el.parentNode;
+	for (const step of steps) {
+		if (step.child) {
+			budget.ops++;
+			if (!node || node.nodeType !== 1 || !compoundMatches(step.compound, keyOf(node))) return false;
+		} else {
+			while (node && node.nodeType === 1 && !compoundMatches(step.compound, keyOf(node))) {
+				if (++budget.ops > MAX_MATCH_OPS) return false;
+				node = node.parentNode;
+			}
+			if (!node || node.nodeType !== 1) return false;
+		}
+		node = node.parentNode;
+	}
+	return true;
+}
+function stylesheetEffects(doc) {
+	const out = {
+		hiding: /* @__PURE__ */ new Map(),
+		colourStyled: /* @__PURE__ */ new Set(),
+		allColourUncertain: false,
+		classedColourUncertain: false
+	};
+	const root = doc.documentElement;
+	let css = stripCssComments(Array.from(root.querySelectorAll("style")).map((s) => s.textContent ?? "").join("\n")).replace(/<!--|-->/g, " ");
+	if (!css.trim()) return out;
+	if (css.length > MAX_CSS_CHARS) {
+		css = css.slice(0, css.lastIndexOf("}", MAX_CSS_CHARS) + 1);
+		out.classedColourUncertain = true;
+	}
+	const { rules, truncated } = parseRules(css);
+	if (truncated) out.classedColourUncertain = true;
+	const index = /* @__PURE__ */ new Map();
+	let selectors = 0;
+	let order = 0;
+	for (const rule of rules) {
+		const hide = new Map([...rule.decls].filter(([p]) => SHEET_PROPS.has(p)));
+		const colour = [...rule.decls.keys()].some((p) => COLOR_PROPS.test(p));
+		const reveal = rule.conditional && reveals(hide);
+		if (!colour && !reveal && (rule.conditional || !hide.size)) continue;
+		for (const sel of rule.selectors) {
+			if (++selectors > MAX_SELECTORS) {
+				out.classedColourUncertain = true;
+				break;
+			}
+			if (sel.length > MAX_SELECTOR_CHARS || (sel.match(/[\s>+~]+/g)?.length ?? 0) > MAX_COMBINATORS) {
+				if (colour) out.classedColourUncertain = true;
+				continue;
+			}
+			const chain = parseChain(sel);
+			const subject = chain?.subject ?? subjectOf(sel);
+			if (subject === "any") {
+				if (colour) out.allColourUncertain = true;
+				if (!reveal) continue;
+			}
+			const compound = subject === "any" ? {
+				tag: null,
+				id: null,
+				classes: []
+			} : subject;
+			const entry = {
+				compound,
+				ancestors: chain?.ancestors ?? [],
+				hide: !rule.conditional && chain && hide.size ? hide : null,
+				colour,
+				reveal,
+				order: order++
+			};
+			if (!entry.hide && !entry.colour && !entry.reveal) continue;
+			const key = indexKey(compound);
+			const list = index.get(key);
+			if (list) list.push(entry);
+			else index.set(key, [entry]);
+		}
+	}
+	if (!index.size) return out;
+	const budget = { ops: 0 };
+	for (const el of Array.from(root.querySelectorAll("*"))) {
+		const k = keyOf(el);
+		const keys = [
+			...k.id ? [`#${k.id}`] : [],
+			...k.classes.map((c) => `.${c}`),
+			k.tag,
+			"*"
+		];
+		const matched = [];
+		for (const key of keys) for (const e of index.get(key) ?? []) {
+			if (++budget.ops > MAX_MATCH_OPS) {
+				out.classedColourUncertain = true;
+				return out;
+			}
+			if (!compoundMatches(e.compound, k)) continue;
+			if (e.hide && e.ancestors.length && !ancestorsMatch(el, e.ancestors, budget)) {
+				if (e.colour) matched.push({
+					...e,
+					hide: null
+				});
+				continue;
+			}
+			matched.push(e);
+		}
+		if (!matched.length) continue;
+		if (matched.some((e) => e.colour)) out.colourStyled.add(el);
+		if (matched.some((e) => e.reveal)) continue;
+		const hiding = matched.filter((e) => e.hide).sort((a, b) => a.order - b.order);
+		if (!hiding.length) continue;
+		const style = /* @__PURE__ */ new Map();
+		for (const e of hiding) for (const [p, v] of e.hide) style.set(p, v);
+		out.hiding.set(el, style);
+	}
+	return out;
+}
+//#endregion
+//#region server/mail/content.ts
+const JOINING_SCRIPTS = [
+	"Arabic",
+	"Syriac",
+	"Nko",
+	"Mongolian",
+	"Thaana",
+	"Devanagari",
+	"Bengali",
+	"Gurmukhi",
+	"Gujarati",
+	"Oriya",
+	"Tamil",
+	"Telugu",
+	"Kannada",
+	"Malayalam",
+	"Sinhala",
+	"Myanmar",
+	"Khmer",
+	"Tibetan"
+].map((s) => `\\p{Script_Extensions=${s}}`).join("");
+const PICTO = "\\p{Extended_Pictographic}";
+const VS = "\\uFE00-\\uFE0F\\u{E0100}-\\u{E01EF}";
+const KEEP_FLAG = "\\u{1F3F4}[\\u{E0030}-\\u{E0039}\\u{E0061}-\\u{E007A}]{2,7}\\u{E007F}";
+const KEEP_JOINER = `(?<=[${JOINING_SCRIPTS}])[\\u200C\\u200D](?=[${JOINING_SCRIPTS}])|(?<=[${JOINING_SCRIPTS}])(?<=\\p{M})\\u200D`;
+const INVISIBLE = new RegExp(`(${KEEP_FLAG})|(${KEEP_JOINER})|(${`(?<=${PICTO}(?:\\uFE0F|\\p{Emoji_Modifier})?)\\u200D(?=${PICTO})`})|(${`(?<=[^${VS}])[\\uFE00-\\uFE0F](?![${VS}])|(?<=\\p{Ideographic})[\\u{E0100}-\\u{E01EF}](?![${VS}])`})|([\\u00AD\\u202A-\\u202C\\u2066-\\u2069])|${`[\\u200B-\\u200D\\u2060-\\u2064\\uFEFF\\u202D\\u202E\\u{E0000}-\\u{E007F}${VS}]`}`, "gu");
+const BIDI_OPEN_EMBED = /* @__PURE__ */ new Set([8234, 8235]);
+const BIDI_OPEN_OVERRIDE = /* @__PURE__ */ new Set([8237, 8238]);
+const BIDI_OPEN_ISOLATE = /* @__PURE__ */ new Set([
+	8294,
+	8295,
+	8296
+]);
+/**
+* Bidi embeddings/isolates without their matching PDF/PDI (per paragraph): these can reorder what follows.
+* Overrides are always flagged on their own, so they never count here.
+*/
+function unbalancedBidi(text) {
+	if (!/[\u202A-\u202E\u2066-\u2069]/.test(text)) return 0;
+	const MAX_DEPTH = 125;
+	let unmatched = 0;
+	const stack = [];
+	const counted = (from) => stack.slice(from).filter((x) => x !== "o").length;
+	for (const c of text) {
+		const cp = c.codePointAt(0);
+		const opener = BIDI_OPEN_EMBED.has(cp) ? "e" : BIDI_OPEN_OVERRIDE.has(cp) ? "o" : BIDI_OPEN_ISOLATE.has(cp) ? "i" : null;
+		if (opener) {
+			if (stack.length < MAX_DEPTH) stack.push(opener);
+			else if (opener !== "o") unmatched++;
+		} else if (cp === 8236) {
+			if (stack.at(-1) === "e" || stack.at(-1) === "o") stack.pop();
+			else unmatched++;
+		} else if (cp === 8297) {
+			const at = stack.lastIndexOf("i");
+			if (at < 0) unmatched++;
+			else {
+				unmatched += counted(at + 1);
+				stack.length = at;
+			}
+		} else if (c === "\n" || c === "\u2029") {
+			unmatched += counted(0);
+			stack.length = 0;
+		}
+	}
+	return unmatched + counted(0);
+}
+/** Removes invisible/smuggling characters. `removed` counts only the ones that can hide or disguise text. */
+function stripInvisible(text) {
+	let removed = unbalancedBidi(text);
+	return {
+		text: text.replace(INVISIBLE, (m, flag, joiner, zwj, vs, silent, offset) => {
+			if (flag || joiner || zwj || vs) return m;
+			if (!silent && !(m === "" && offset === 0)) removed++;
+			return "";
+		}),
+		removed
+	};
+}
+const visibleText = (s) => stripInvisible(s ?? "").text.trim();
+/** Neutralizes our delimiter and look-alikes (`</ email_content >`, turndown's `email\_content`) in untrusted text. */
+const escapeDelimiters = (s) => s.replace(/<(?=\s{0,16}\/?\s{0,16}email\\?_content)/gi, "&lt;");
+const ELEMENT = 1;
+const TEXT = 3;
+const COMMENT = 8;
+/** Never rendered. Removed; text inside counts as hidden content only for the ones listed in HIDDEN_TEXT_TAGS. */
+const NON_RENDERED = /* @__PURE__ */ new Set([
+	"SCRIPT",
+	"STYLE",
+	"HEAD",
+	"TITLE",
+	"META",
+	"LINK",
+	"TEMPLATE",
+	"NOSCRIPT",
+	"OBJECT",
+	"EMBED",
+	"IFRAME",
+	"SVG"
+]);
+const HIDDEN_TEXT_TAGS = /* @__PURE__ */ new Set([
+	"SCRIPT",
+	"TEMPLATE",
+	"NOSCRIPT"
+]);
+/** Hidden in a way no descendant can undo: the element and its subtree are removed. */
+function isCollapsed(style) {
+	if (style.get("display") === "none") return true;
+	const overflow = style.get("overflow");
+	if (overflow !== "hidden" && overflow !== "clip") return false;
+	return [
+		"max-height",
+		"height",
+		"max-width",
+		"width"
+	].some((p) => isZeroLength(style.get(p)));
+}
+function parseOpacity(v) {
+	if (v === void 0) return 1;
+	const n = v.endsWith("%") ? parseFloat(v) / 100 : parseFloat(v);
+	return Number.isNaN(n) ? 1 : Math.max(0, Math.min(1, n));
+}
+/** Text an element would show (also for <template>, whose content linkedom keeps out of textContent). */
+function elementText(el) {
+	return visibleText(el.textContent || el.innerHTML.replace(/<[^<>]*>/g, " "));
+}
+const hasText = (n) => visibleText(n.textContent).length > 0;
+function isTrackingPixel(el, style) {
+	const small = (v) => v != null && /^\s*[01](?:px)?\s*$/.test(v);
+	return small(el.getAttribute("width")) && small(el.getAttribute("height")) || small(style.get("width")) && small(style.get("height"));
+}
+/** Opacity below this, or text smaller than 1px, is invisible to a reader. */
+const MIN_OPACITY = .1;
+/** Text/background contrast below this is unreadable (#eeeeee on white is ~1.16 and stays). */
+const MIN_CONTRAST = 1.1;
+function textHidden(ctx) {
+	if (ctx.invisible || ctx.fontPx < 1 || ctx.opacity < MIN_OPACITY) return true;
+	if (ctx.color === "transparent") return !ctx.clipText;
+	return !!ctx.color && !!ctx.bg && !ctx.bgUncertain && contrastRatio(ctx.color, ctx.bg) < MIN_CONTRAST;
+}
+function styleOf(el, state) {
+	const inline = parseStyle(el.getAttribute("style"));
+	const sheet = state.sheet.hiding.get(el);
+	return sheet ? new Map([...sheet, ...inline]) : inline;
+}
+function childContext(el, style, parent, state) {
+	const tag = el.tagName.toUpperCase();
+	const visibility = style.get("visibility");
+	const ownBg = backgroundColor(style, el);
+	const bg = ownBg && ownBg !== "transparent" ? ownBg : null;
+	const sheetColour = state.sheet.allColourUncertain || state.sheet.colourStyled.has(el) || state.sheet.classedColourUncertain && (el.hasAttribute("class") || el.hasAttribute("id"));
+	const clip = style.get("background-clip") ?? style.get("-webkit-background-clip");
+	return {
+		color: normalizeColor(style.get("color")) ?? (tag === "FONT" ? normalizeColor(el.getAttribute("color")) : null) ?? parent.color,
+		bg: bg ?? parent.bg,
+		bgUncertain: (bg ? false : parent.bgUncertain) || hasBackgroundImage(style, el) || sheetColour,
+		clipText: parent.clipText || clip === "text",
+		fontPx: fontSizePx(style, parent.fontPx),
+		opacity: parent.opacity * parseOpacity(style.get("opacity")),
+		invisible: visibility === "hidden" || visibility === "collapse" ? true : visibility === "visible" ? false : parent.invisible
+	};
+}
+/** Comment text a human could read if a client rendered it (conditional comments are rendered by Outlook). */
+function commentText(text) {
+	return visibleText(text.replace(/^\s*\[if[^\]]*\]>?|<!\[endif\]\s*$|\[endif\]\s*$/gi, "").replace(/<[^<>]*>/g, " "));
+}
+const MAX_WHITESPACE_RUN = 64;
+const LONG_WHITESPACE = /\s{65}/;
+const LONG_WHITESPACE_G = /\s{65,}/g;
+/** Iterative (deeply nested mail must not overflow the stack). */
+function cleanTree(root, rootCtx, state) {
+	const stack = [[root, rootCtx]];
+	while (stack.length) {
+		const [node, ctx] = stack.pop();
+		for (const child of Array.from(node.childNodes)) {
+			if (child.nodeType === COMMENT) {
+				if (commentText(child.textContent ?? "")) state.removed++;
+				child.remove();
+				continue;
+			}
+			if (child.nodeType === TEXT) {
+				if (hasText(child) && textHidden(ctx)) {
+					state.removed++;
+					child.remove();
+					continue;
+				}
+				const text = child.textContent ?? "";
+				if (text.length > MAX_WHITESPACE_RUN && LONG_WHITESPACE.test(text)) child.textContent = text.replace(LONG_WHITESPACE_G, (m) => m.slice(0, MAX_WHITESPACE_RUN));
+				continue;
+			}
+			if (child.nodeType !== ELEMENT) continue;
+			const el = child;
+			const tag = el.tagName.toUpperCase();
+			if (NON_RENDERED.has(tag)) {
+				const jsonLd = tag === "SCRIPT" && /ld\+json/i.test(el.getAttribute("type") ?? "");
+				if (HIDDEN_TEXT_TAGS.has(tag) && !jsonLd && elementText(el)) state.removed++;
+				el.remove();
+				continue;
+			}
+			const style = styleOf(el, state);
+			const inner = childContext(el, style, ctx, state);
+			if (el.hasAttribute("hidden") || isCollapsed(style) || inner.opacity < MIN_OPACITY) {
+				if (hasText(el)) state.removed++;
+				el.remove();
+				continue;
+			}
+			if (tag === "IMG") {
+				if (isTrackingPixel(el, style) || inner.invisible) el.remove();
+				continue;
+			}
+			stack.push([el, inner]);
+		}
+	}
+}
+/** Deeper than this, elements are unwrapped (pathological nesting would overflow turndown's recursion). */
+const MAX_DEPTH = 80;
+const BLOCK_TAGS = /* @__PURE__ */ new Set([
+	"DIV",
+	"P",
+	"TABLE",
+	"TBODY",
+	"THEAD",
+	"TFOOT",
+	"TR",
+	"TD",
+	"TH",
+	"LI",
+	"UL",
+	"OL",
+	"SECTION",
+	"ARTICLE",
+	"BLOCKQUOTE",
+	"CENTER",
+	"H1",
+	"H2",
+	"H3",
+	"H4",
+	"H5",
+	"H6"
+]);
+/**
+* Replaces everything below MAX_DEPTH with its leaves (text, images, line breaks) in document order.
+* Linear: leaves are collected in one walk and moved individually (moving whole subtrees per level, as
+* unwrapping does, is quadratic in linkedom).
+*/
+function flattenDeepNesting(root) {
+	const stack = [[root, 0]];
+	while (stack.length) {
+		const [el, depth] = stack.pop();
+		if (depth < MAX_DEPTH) {
+			for (const c of Array.from(el.childNodes)) if (c.nodeType === ELEMENT) stack.push([c, depth + 1]);
+			continue;
+		}
+		const leaves = [];
+		const walk = Array.from(el.childNodes).reverse();
+		while (walk.length) {
+			const n = walk.pop();
+			if (typeof n === "string") leaves.push(n);
+			else if (n.nodeType === TEXT || n.nodeName === "IMG" || n.nodeName === "BR") leaves.push(n);
+			else if (n.nodeType === ELEMENT) {
+				if (BLOCK_TAGS.has(n.nodeName)) walk.push(" ");
+				walk.push(...Array.from(n.childNodes).reverse());
+			}
+		}
+		for (const c of Array.from(el.childNodes)) c.remove();
+		el.append(...leaves);
+	}
+}
+/** Elements beyond this make a message too complex to convert (checked on the raw HTML before parsing). */
+const MAX_ELEMENTS = 2e4;
+var ContentTooComplexError = class extends Error {};
+/** Counts start tags without building anything; stops at the cap. */
+function tooManyElements(html) {
+	const re = /<[a-zA-Z]/g;
+	let n = 0;
+	while (re.exec(html)) if (++n > 2e4) return true;
+	return false;
+}
+const BLOCK_IN_CELL = "div,p,table,ul,ol,h1,h2,h3,h4,h5,h6,blockquote,pre,hr";
+/** Browsers ignore tabs/newlines/controls inside URL schemes ("java&#09;script:"). */
+const schemeOf = (url) => url.replace(/[\x00-\x20\x7f]/g, "").toLowerCase();
+const UNSAFE_SCHEME = /^(?:javascript|data|vbscript|file):/;
+function createTurndown() {
+	const td = new TurndownService({
+		headingStyle: "atx",
+		codeBlockStyle: "fenced",
+		bulletListMarker: "-",
+		emDelimiter: "_",
+		hr: "---"
+	});
+	td.use(gfm);
+	td.addRule("images", {
+		filter: "img",
+		replacement: (_content, node) => {
+			const el = node;
+			const alt = (el.getAttribute("alt") ?? "").replace(/\s+/g, " ").trim();
+			const src = (el.getAttribute("src") ?? "").trim();
+			const scheme = schemeOf(src);
+			if (!src || UNSAFE_SCHEME.test(scheme) || scheme.startsWith("cid:")) return alt ? `[image: ${alt}]` : "";
+			return `![${alt.replace(/[[\]]/g, "")}](${src.replace(/[()\s]/g, encodeURIComponent)})`;
+		}
+	});
+	td.addRule("unsafeLinks", {
+		filter: (node) => {
+			if (node.nodeName !== "A") return false;
+			const href = node.getAttribute("href") ?? "";
+			return !href.trim() || UNSAFE_SCHEME.test(schemeOf(href));
+		},
+		replacement: (content) => content
+	});
+	return td;
+}
+let turndownInstance;
+const turndown = () => turndownInstance ??= createTurndown();
+/** A table holding data (rendered as a GFM table) rather than email layout (unwrapped into blocks). */
+function isDataTable(table) {
+	const role = (table.getAttribute("role") ?? "").toLowerCase();
+	if (role === "presentation" || role === "none") return false;
+	if (table.querySelector("table")) return false;
+	const rows = Array.from(table.querySelectorAll("tr"));
+	if (rows.length < 2) return false;
+	const widths = rows.map((r) => cellsOf(r).length);
+	if (Math.max(...widths) < 2) return false;
+	if (table.querySelector("th")) return true;
+	return !table.querySelector(BLOCK_IN_CELL);
+}
+const cellsOf = (row) => Array.from(row.childNodes).filter((n) => n.nodeName === "TD" || n.nodeName === "TH");
+/** Data-table cells with markup converted through turndown per document; later ones keep only their text. */
+const MAX_CONVERTED_CELLS = 2e3;
+function cellMarkdown(cell, budget) {
+	return (Array.from(cell.childNodes).every((n) => n.nodeType === TEXT) || budget.cells-- <= 0 ? turndown().escape(cell.textContent ?? "") : turndown().turndown(cell.innerHTML)).replace(/\s+/g, " ").replace(/\|/g, "\\|").trim();
+}
+function tableToMarkdown(table, budget) {
+	const rows = Array.from(table.querySelectorAll("tr")).map((r) => cellsOf(r).flatMap((c) => {
+		const text = cellMarkdown(c, budget);
+		const span = Math.min(Math.max(parseInt(c.getAttribute("colspan") ?? "1", 10) || 1, 1), 20);
+		return [text, ...Array(span - 1).fill("")];
+	}));
+	const width = Math.max(...rows.map((r) => r.length));
+	const line = (cells) => `| ${Array.from({ length: width }, (_, i) => cells[i] ?? "").join(" | ")} |`;
+	const [head = [], ...body] = rows;
+	return [
+		line(head),
+		line(Array(width).fill("---")),
+		...body.map(line)
+	].join("\n");
+}
+/** Converts tables in place: data tables become placeholders (filled after turndown), layout tables become blocks. */
+function prepareTables(doc, root) {
+	const placeholders = /* @__PURE__ */ new Map();
+	const tables = Array.from(root.querySelectorAll("table"));
+	const data = new Set(tables.filter(isDataTable));
+	const budget = { cells: MAX_CONVERTED_CELLS };
+	for (const table of data) {
+		const key = `AIBTABLE${placeholders.size}X`;
+		placeholders.set(key, tableToMarkdown(table, budget));
+		const p = doc.createElement("p");
+		p.append(key);
+		table.replaceWith(p);
+	}
+	for (const el of Array.from(root.querySelectorAll("table,thead,tbody,tfoot,tr,td,th,caption"))) {
+		const div = doc.createElement("div");
+		div.append(...Array.from(el.childNodes));
+		el.replaceWith(div);
+	}
+	return placeholders;
+}
+function tidyMarkdown(md) {
+	return md.replace(/\r\n?/g, "\n").replace(/\u00A0/g, " ").split("\n").map((line) => line.trimEnd()).join("\n").replace(/\n{3,}/g, "\n\n").trim();
+}
+/**
+* Rebuilds a well-formed document (linkedom misplaces head content that isn't inside <head>): everything
+* before <body> goes into <head>, the rest (including stray content after </body>) into <body>.
+*/
+function normalizeDocument(html) {
+	const open = /<body\b([^<>]{0,4000})>/i.exec(html);
+	if (!open) return `<!DOCTYPE html><html><head></head><body>${html}</body></html>`;
+	const strip = (x) => x.replace(/<!DOCTYPE[^<>]{0,4000}>|<\/?(?:html|head|body)\b[^<>]{0,4000}>/gi, "");
+	const head = strip(html.slice(0, open.index));
+	const body = strip(html.slice(open.index + open[0].length));
+	return `<!DOCTYPE html><html><head>${head}</head><body${open[1]}>${body}</body></html>`;
+}
+/** Cleans hidden content out of an HTML body and converts it to markdown. */
+function htmlToMarkdown(html) {
+	if (tooManyElements(html)) throw new ContentTooComplexError(`more than ${MAX_ELEMENTS} elements`);
+	const doc = parseHTML(normalizeDocument(html)).document;
+	const root = doc.body ?? doc.documentElement;
+	const state = {
+		removed: 0,
+		sheet: stylesheetEffects(doc)
+	};
+	const rootStyle = styleOf(root, state);
+	const rootCtx = childContext(root, rootStyle, {
+		color: null,
+		bg: null,
+		bgUncertain: false,
+		clipText: false,
+		fontPx: 16,
+		opacity: 1,
+		invisible: false
+	}, state);
+	if (root.hasAttribute("hidden") || isCollapsed(rootStyle) || rootCtx.opacity < MIN_OPACITY) return {
+		markdown: "",
+		removed: hasText(root) ? 1 : 0
+	};
+	if (!rootCtx.color) rootCtx.color = normalizeColor(root.getAttribute("text"));
+	cleanTree(root, rootCtx, state);
+	flattenDeepNesting(root);
+	const tables = prepareTables(doc, root);
+	let md = turndown().turndown(root.innerHTML);
+	for (const [key, table] of tables) md = md.replace(key, `\n\n${table}\n\n`);
+	const stripped = stripInvisible(md);
+	return {
+		markdown: tidyMarkdown(stripped.text),
+		removed: state.removed + stripped.removed
+	};
+}
+/** Cleans a text/plain body. */
+function cleanPlainText(text) {
+	const stripped = stripInvisible(text);
+	return {
+		text: tidyMarkdown(stripped.text),
+		removed: stripped.removed
+	};
+}
+/** Drops RFC 5322 comments (nested parentheses) and the contents of quoted strings, in one pass. */
+function withoutCommentsAndQuotes(s) {
+	let out = "";
+	let depth = 0;
+	let quoted = false;
+	for (let i = 0; i < s.length; i++) {
+		const c = s[i];
+		if (c === "\\") {
+			i++;
+			continue;
+		}
+		if (quoted) {
+			if (c === "\"") {
+				quoted = false;
+				out += "\"";
+			}
+		} else if (c === "\"" && depth === 0) {
+			quoted = true;
+			out += "\"";
+		} else if (c === "(") depth++;
+		else if (c === ")" && depth > 0) {
+			if (--depth === 0) out += " ";
+		} else if (depth === 0) out += c;
+	}
+	return out;
+}
+/**
+* SPF/DKIM/DMARC from the topmost Authentication-Results header only, which Gmail adds on receipt
+* (authserv-id mx.google.com). Lower headers can be supplied by the sender and never fill gaps. Comments
+* and quoted strings are removed first, and results are read only at the start of each resinfo.
+*/
+function parseAuthResults(header) {
+	if (!header) return null;
+	const [servId = "", ...resinfo] = withoutCommentsAndQuotes(header.slice(0, 8192).replace(/\r?\n[ \t]+/g, " ").split(/\r?\n/)[0] ?? "").split(";");
+	if (!/^(?:[a-z0-9-]+\.)*google\.com$/i.test(servId.trim().split(/\s+/)[0] ?? "")) return null;
+	const result = (method) => {
+		for (const r of resinfo) {
+			const m = new RegExp(`^\\s*${method}\\s*=\\s*([a-z]+)`, "i").exec(r);
+			if (m) return m[1].toLowerCase();
+		}
+		return null;
+	};
+	return {
+		spf: result("spf"),
+		dkim: result("dkim"),
+		dmarc: result("dmarc")
+	};
+}
+/** Consumer mailbox domains: senders on the same domain are still other people. */
+const CONSUMER_DOMAINS = /* @__PURE__ */ new Set(["gmail.com", "googlemail.com"]);
+/** Lower-cased address; Gmail addresses ignore dots and +tags in the local part, googlemail.com ≡ gmail.com. */
+function canonicalAddress(email) {
+	const e = email.trim().toLowerCase();
+	const at = e.lastIndexOf("@");
+	let local = e.slice(0, at);
+	let domain = e.slice(at + 1);
+	if (CONSUMER_DOMAINS.has(domain)) {
+		domain = "gmail.com";
+		local = local.replace(/\+.*$/, "").replace(/\./g, "");
+	}
+	return {
+		local,
+		domain
+	};
+}
+/** Sender outside the account's organization (subdomains count as inside); for consumer Gmail, anyone but the account itself. */
+function isExternal(sender, accountEmail) {
+	if (!sender) return false;
+	const s = canonicalAddress(sender);
+	const own = canonicalAddress(accountEmail);
+	if (own.domain === "gmail.com") return s.local !== own.local || s.domain !== own.domain;
+	return !(s.domain === own.domain || s.domain.endsWith(`.${own.domain}`));
+}
+const SUSPICIOUS = [
+	{
+		re: /\b(?:ignore|disregard|forget|override)\s+(?:all\s+|any\s+|the\s+|your\s+)*(?:previous|prior|above|earlier|preceding|existing)\s+(?:instructions?|prompts?|directions|rules|guidelines|messages)\b/i,
+		negatable: true
+	},
+	{ re: /\byou\s+are\s+now\s+(?:an?\s+(?:ai|assistant|agent|chatbot|language\s+model|llm)\b|acting\s+as\b|in\s+(?:developer|god|admin|debug|dan|jailbreak)\s+mode\b|dan\b|(?:the|my)\s+(?:assistant|agent)\b)/i },
+	{
+		re: /\b(?:reveal|print|show|repeat|output|paste|share|send|leak|ignore|disregard|override|bypass)\s+(?:me\s+)?(?:your|the|this)\s+(?:system\s+prompt|hidden\s+instructions|initial\s+instructions)\b|\bnew\s+system\s+prompt\b/i,
+		negatable: true
+	},
+	{ re: /\bnew\s+instructions\s*:/i },
+	{
+		re: /\bforward\s+(?:all|every|each)\s+(?:of\s+(?:the|your|my)\s+)?(?:e-?mails?|messages|mail|correspondence)\b/i,
+		negatable: true
+	},
+	{ re: /\b(?:do\s+not|don't|never)\s+(?:tell|inform|notify|alert|mention\s+(?:this\s+)?to)\s+(?:the\s+)?(?:user|owner|human|recipient)\b/i },
+	{ re: /\bBEGIN\s+SYSTEM\b|\bEND\s+SYSTEM\b|<\/?system>|\[\/?system\]|<\|im_start\|>/i },
+	{ re: /^[ \t]*(?:assistant|system|ai)[ \t]*:[ \t]*(?:you\b|ignore\b|disregard\b|from\s+now\b|new\s+instructions\b|sure\b|okay\b|ok\b|i\s+will\b|i'll\b|understood\b)/im },
+	{
+		re: /\b(?:reveal|send|share|leak|exfiltrate|give)\s+(?:me\s+)?(?:your|the)\s+(?:api\s+keys?|credentials|passwords?|secrets?|tokens?|instructions)\b/i,
+		negatable: true
+	},
+	{
+		re: /\b(?:delete|trash|purge)\s+(?:all|every)\s+(?:e-?mails?|messages)\b(?!\s+(?:and\s+\w+\s+)?(?:older|after|before|from\s+before|that\s+are|which\s+are)\b)/i,
+		negatable: true
+	},
+	{ re: /\bnote\s+to\s+(?:the\s+)?(?:ai|assistant|agent|llm)\b/i }
+];
+const NEGATION = /\b(?:never|not|no\s+one|nobody|cannot|won't|don't|doesn't|didn't|isn't|aren't)\b|n't\b/i;
+/** True when the clause before `index` (back to the sentence start) contains a negation. */
+function negated(text, index) {
+	const clause = text.slice(Math.max(0, index - 80), index).split(/[.!?\n;:]/).at(-1) ?? "";
+	return NEGATION.test(clause);
+}
+/** Phrases common in prompt-injection attempts. Informational only. */
+function suspiciousPhrases(text) {
+	const hits = /* @__PURE__ */ new Set();
+	for (const { re, negatable } of SUSPICIOUS) {
+		const g = new RegExp(re.source, re.flags.includes("g") ? re.flags : re.flags + "g");
+		for (const m of text.matchAll(g)) {
+			if (negatable && negated(text, m.index)) continue;
+			hits.add(m[0].replace(/\s+/g, " ").trim());
+			break;
+		}
+	}
+	return [...hits].slice(0, 5);
+}
+/** Truncates to `max` chars (0 = unlimited) at a paragraph, line or word boundary when one is close. */
+function truncateText(text, max) {
+	if (!max || text.length <= max) return {
+		text,
+		truncated: false
+	};
+	let cut = max;
+	if (/[\uD800-\uDBFF]/.test(text[cut - 1] ?? "")) cut--;
+	const window = text.slice(0, cut);
+	const floor = Math.floor(cut * .8);
+	for (const sep of [
+		"\n\n",
+		"\n",
+		" "
+	]) {
+		const i = window.lastIndexOf(sep);
+		if (i >= floor) return {
+			text: window.slice(0, i).trimEnd(),
+			truncated: true
+		};
+	}
+	return {
+		text: window,
+		truncated: true
+	};
+}
+const UNCONVERTIBLE = "[The HTML body of this message could not be converted to text.]";
+const TOO_COMPLEX_NOTE = "[The HTML version of this message is too complex to display safely; showing the plain-text version.]";
+/** Larger HTML bodies are not converted (bounded work per message); the text/plain part is used instead. */
+const MAX_HTML_CHARS = 5e5;
+/**
+* Cleaned, markdown-converted content with signals. Prefers HTML (more faithful), else text/plain. The
+* text/plain part is not used when the HTML's text was all hidden: the human reading HTML never sees it.
+*/
+function buildContent(parsed, opts) {
+	let body = "";
+	let removed = 0;
+	let allHidden = false;
+	let failed = false;
+	let note = "";
+	if (parsed.html && parsed.html.length > 5e5) {
+		failed = true;
+		note = `[The HTML version of this message is too large to convert (${Math.round(parsed.html.length / 1024)} KB); showing the plain-text version.]`;
+	} else if (parsed.html && parsed.html.trim()) try {
+		const r = htmlToMarkdown(parsed.html);
+		body = r.markdown;
+		removed = r.removed;
+		allHidden = !body && r.removed > 0;
+	} catch (err) {
+		failed = true;
+		if (err instanceof ContentTooComplexError) note = TOO_COMPLEX_NOTE;
+	}
+	if (!body && !allHidden && parsed.text) {
+		const r = cleanPlainText(parsed.text);
+		body = r.text;
+		removed += r.removed;
+	}
+	if (!body && failed) body = note ? note.replace(/; showing the plain-text version/, "") : UNCONVERTIBLE;
+	else if (note) body = `${note}\n\n${body}`;
+	body = escapeDelimiters(body);
+	const subject = stripInvisible(parsed.summary.subject ?? "");
+	removed += subject.removed;
+	const t = truncateText(body, opts.maxChars);
+	return {
+		body: t.text,
+		truncated: t.truncated,
+		totalChars: body.length,
+		attachments: parsed.attachments,
+		signals: {
+			hiddenContentRemoved: removed > 0,
+			suspiciousInstructions: suspiciousPhrases(`${subject.text}\n${body}`),
+			auth: parseAuthResults(parsed.authenticationResults),
+			external: isExternal(parsed.summary.from?.email, opts.accountEmail)
+		}
+	};
+}
+const escapeAttr = (s) => s.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+/** Wraps untrusted content in the delimiter. Delimiter tags and look-alikes inside the content are escaped. */
+function wrapUntrusted(from, body) {
+	return `<email_content from="${escapeAttr(cleanLine(from ?? "unknown", 320))}" untrusted>\n${escapeDelimiters(body)}\n</email_content>`;
+}
+const MAX_LINE_INPUT = 4096;
+/** Untrusted header-ish text (subjects, names, snippets) on one line: cleaned, delimiter-escaped, optionally clipped. */
+function cleanLine(s, max = 0) {
+	const one = escapeDelimiters(stripInvisible(s.slice(0, max ? max * 4 : MAX_LINE_INPUT)).text.replace(/\s+/g, " ").trim());
+	return max && one.length > max ? one.slice(0, max - 1) + "…" : one;
+}
+function formatAddress(a) {
+	if (!a) return "(unknown)";
+	const name = a.name ? cleanLine(a.name, 100) : "";
+	if (!name || name.toLowerCase() === a.email.toLowerCase()) return cleanLine(a.email);
+	return /[<>@"]/.test(name) ? `"${name.replace(/[<>"]/g, "")}" <${cleanLine(a.email)}>` : `${name} <${cleanLine(a.email)}>`;
+}
+const formatAddresses = (list) => list.map(formatAddress).join(", ");
+function formatSize(bytes) {
+	if (bytes < 1024) return `${bytes} B`;
+	if (bytes < 1048576) return `${Math.round(bytes / 1024)} KB`;
+	return `${(bytes / 1048576).toFixed(1)} MB`;
+}
+function labelNames(ids, labels) {
+	const byId = new Map((labels ?? []).map((l) => [l.id, l.name]));
+	return ids.map((id) => cleanLine(byId.get(id) ?? id));
+}
+/** Only noteworthy signals, on one short line; null when there is nothing to say. */
+function signalLine(s) {
+	const parts = [];
+	if (s.auth) {
+		const failed = [
+			"spf",
+			"dkim",
+			"dmarc"
+		].filter((k) => {
+			const v = s.auth[k];
+			return v !== null && ![
+				"pass",
+				"none",
+				"neutral",
+				"bestguesspass"
+			].includes(v);
+		});
+		if (failed.length) parts.push(`sender authentication failed (${failed.map((k) => `${k.toUpperCase()}=${s.auth[k]}`).join(", ")})`);
+	}
+	if (s.external) parts.push("external sender");
+	if (s.hiddenContentRemoved) parts.push("hidden content removed");
+	if (s.suspiciousInstructions.length) parts.push(`contains instruction-like text (${s.suspiciousInstructions.map((p) => `"${cleanLine(p, 60)}"`).join(", ")})`);
+	return parts.length ? `Signals: ${parts.join("; ")}` : null;
+}
+/** Compact header block + one wrapped body. Every header value is untrusted and goes through cleanLine. */
+function renderMessage(summary, content, labels, maxChars) {
+	const lines = [`Message ${cleanLine(summary.id)} (thread ${cleanLine(summary.threadId)})`, `From: ${formatAddress(summary.from)}`];
+	if (summary.to.length) lines.push(`To: ${formatAddresses(summary.to)}`);
+	if (summary.cc.length) lines.push(`Cc: ${formatAddresses(summary.cc)}`);
+	lines.push(`Date: ${cleanLine(summary.date)}`, `Subject: ${cleanLine(summary.subject) || "(no subject)"}`);
+	if (summary.labelIds.length) lines.push(`Labels: ${labelNames(summary.labelIds, labels).join(", ")}`);
+	if (content.attachments.length) lines.push(`Attachments: ${content.attachments.map((a) => `${cleanLine(a.filename) || "(unnamed)"} (${cleanLine(a.mimeType)}, ${formatSize(a.size)}, attachment_id: ${cleanLine(a.id)})`).join("; ")}`);
+	const signals = signalLine(content.signals);
+	if (signals) lines.push(signals);
+	lines.push(wrapUntrusted(summary.from?.email, content.body || "(empty body)"));
+	if (content.truncated) lines.push(`[Body truncated at ${maxChars} of ${content.totalChars} characters (operator setting maxBodyChars).]`);
+	return lines.join("\n");
+}
+/**
+* Content when cleaning didn't finish in time (see server/mail/pool.ts): the cleaned text/plain part, or a
+* notice. Never the unconverted HTML. Marked truncated, with a note saying why.
+*/
+function fallbackContent(parsed, opts) {
+	const text = parsed.text ? cleanPlainText(parsed.text.slice(0, MAX_HTML_CHARS)).text : "";
+	const body = escapeDelimiters(text ? `[This message is too complex to display safely; showing its plain-text version.]\n\n${text}` : "[This message is too complex to display safely. Ask a human to read it in Gmail.]");
+	const subject = stripInvisible(parsed.summary.subject ?? "");
+	return {
+		body: truncateText(body, opts.maxChars).text,
+		truncated: true,
+		totalChars: body.length,
+		attachments: parsed.attachments,
+		signals: {
+			hiddenContentRemoved: false,
+			suspiciousInstructions: suspiciousPhrases(`${subject.text}\n${body}`),
+			auth: parseAuthResults(parsed.authenticationResults),
+			external: isExternal(parsed.summary.from?.email, opts.accountEmail)
+		}
+	};
+}
+//#endregion
+export { formatAddress as a, htmlToMarkdown as c, stripInvisible as d, truncateText as f, fallbackContent as i, labelNames as l, buildContent as n, formatAddresses as o, wrapUntrusted as p, cleanLine as r, formatSize as s, MAX_HTML_CHARS as t, renderMessage as u };
+
+//# sourceMappingURL=content-BXblC_Qs.js.map