spamscanner 7.0.10 → 7.0.12

package/dist/cjs/index.cjs

@@ -1624,6 +1624,286 @@ var init_homograph = __esm({
   }
 });
 
+// src/entities.js
+var NAMED, NAMED_REFERENCES;
+var init_entities = __esm({
+  "src/entities.js"() {
+    NAMED = [
+      "AElig=c6,AMP=26,Aacute=c1,Abreve=102,Acirc=c2,Acy=410,Afr=1d504,Agrave=c0,Alpha=391,Amacr=100,And=2a",
+      "53,Aogon=104,Aopf=1d538,ApplyFunction=2061,Aring=c5,Ascr=1d49c,Assign=2254,Atilde=c3,Auml=c4,Backsla",
+      "sh=2216,Barv=2ae7,Barwed=2306,Bcy=411,Because=2235,Bernoullis=212c,Beta=392,Bfr=1d505,Bopf=1d539,Bre",
+      "ve=2d8,Bscr=212c,Bumpeq=224e,CHcy=427,COPY=a9,Cacute=106,Cap=22d2,CapitalDifferentialD=2145,Cayleys=",
+      "212d,Ccaron=10c,Ccedil=c7,Ccirc=108,Cconint=2230,Cdot=10a,Cedilla=b8,CenterDot=b7,Cfr=212d,Chi=3a7,C",
+      "ircleDot=2299,CircleMinus=2296,CirclePlus=2295,CircleTimes=2297,ClockwiseContourIntegral=2232,CloseC",
+      "urlyDoubleQuote=201d,CloseCurlyQuote=2019,Colon=2237,Colone=2a74,Congruent=2261,Conint=222f,ContourI",
+      "ntegral=222e,Copf=2102,Coproduct=2210,CounterClockwiseContourIntegral=2233,Cross=2a2f,Cscr=1d49e,Cup",
+      "=22d3,CupCap=224d,DD=2145,DDotrahd=2911,DJcy=402,DScy=405,DZcy=40f,Dagger=2021,Darr=21a1,Dashv=2ae4,",
+      "Dcaron=10e,Dcy=414,Del=2207,Delta=394,Dfr=1d507,DiacriticalAcute=b4,DiacriticalDot=2d9,DiacriticalDo",
+      "ubleAcute=2dd,DiacriticalGrave=60,DiacriticalTilde=2dc,Diamond=22c4,DifferentialD=2146,Dopf=1d53b,Do",
+      "t=a8,DotDot=20dc,DotEqual=2250,DoubleContourIntegral=222f,DoubleDot=a8,DoubleDownArrow=21d3,DoubleLe",
+      "ftArrow=21d0,DoubleLeftRightArrow=21d4,DoubleLeftTee=2ae4,DoubleLongLeftArrow=27f8,DoubleLongLeftRig",
+      "htArrow=27fa,DoubleLongRightArrow=27f9,DoubleRightArrow=21d2,DoubleRightTee=22a8,DoubleUpArrow=21d1,",
+      "DoubleUpDownArrow=21d5,DoubleVerticalBar=2225,DownArrow=2193,DownArrowBar=2913,DownArrowUpArrow=21f5",
+      ",DownBreve=311,DownLeftRightVector=2950,DownLeftTeeVector=295e,DownLeftVector=21bd,DownLeftVectorBar",
+      "=2956,DownRightTeeVector=295f,DownRightVector=21c1,DownRightVectorBar=2957,DownTee=22a4,DownTeeArrow",
+      "=21a7,Downarrow=21d3,Dscr=1d49f,Dstrok=110,ENG=14a,ETH=d0,Eacute=c9,Ecaron=11a,Ecirc=ca,Ecy=42d,Edot",
+      "=116,Efr=1d508,Egrave=c8,Element=2208,Emacr=112,EmptySmallSquare=25fb,EmptyVerySmallSquare=25ab,Eogo",
+      "n=118,Eopf=1d53c,Epsilon=395,Equal=2a75,EqualTilde=2242,Equilibrium=21cc,Escr=2130,Esim=2a73,Eta=397",
+      ",Euml=cb,Exists=2203,ExponentialE=2147,Fcy=424,Ffr=1d509,FilledSmallSquare=25fc,FilledVerySmallSquar",
+      "e=25aa,Fopf=1d53d,ForAll=2200,Fouriertrf=2131,Fscr=2131,GJcy=403,GT=3e,Gamma=393,Gammad=3dc,Gbreve=1",
+      "1e,Gcedil=122,Gcirc=11c,Gcy=413,Gdot=120,Gfr=1d50a,Gg=22d9,Gopf=1d53e,GreaterEqual=2265,GreaterEqual",
+      "Less=22db,GreaterFullEqual=2267,GreaterGreater=2aa2,GreaterLess=2277,GreaterSlantEqual=2a7e,GreaterT",
+      "ilde=2273,Gscr=1d4a2,Gt=226b,HARDcy=42a,Hacek=2c7,Hat=5e,Hcirc=124,Hfr=210c,HilbertSpace=210b,Hopf=2",
+      "10d,HorizontalLine=2500,Hscr=210b,Hstrok=126,HumpDownHump=224e,HumpEqual=224f,IEcy=415,IJlig=132,IOc",
+      "y=401,Iacute=cd,Icirc=ce,Icy=418,Idot=130,Ifr=2111,Igrave=cc,Im=2111,Imacr=12a,ImaginaryI=2148,Impli",
+      "es=21d2,Int=222c,Integral=222b,Intersection=22c2,InvisibleComma=2063,InvisibleTimes=2062,Iogon=12e,I",
+      "opf=1d540,Iota=399,Iscr=2110,Itilde=128,Iukcy=406,Iuml=cf,Jcirc=134,Jcy=419,Jfr=1d50d,Jopf=1d541,Jsc",
+      "r=1d4a5,Jsercy=408,Jukcy=404,KHcy=425,KJcy=40c,Kappa=39a,Kcedil=136,Kcy=41a,Kfr=1d50e,Kopf=1d542,Ksc",
+      "r=1d4a6,LJcy=409,LT=3c,Lacute=139,Lambda=39b,Lang=27ea,Laplacetrf=2112,Larr=219e,Lcaron=13d,Lcedil=1",
+      "3b,Lcy=41b,LeftAngleBracket=27e8,LeftArrow=2190,LeftArrowBar=21e4,LeftArrowRightArrow=21c6,LeftCeili",
+      "ng=2308,LeftDoubleBracket=27e6,LeftDownTeeVector=2961,LeftDownVector=21c3,LeftDownVectorBar=2959,Lef",
+      "tFloor=230a,LeftRightArrow=2194,LeftRightVector=294e,LeftTee=22a3,LeftTeeArrow=21a4,LeftTeeVector=29",
+      "5a,LeftTriangle=22b2,LeftTriangleBar=29cf,LeftTriangleEqual=22b4,LeftUpDownVector=2951,LeftUpTeeVect",
+      "or=2960,LeftUpVector=21bf,LeftUpVectorBar=2958,LeftVector=21bc,LeftVectorBar=2952,Leftarrow=21d0,Lef",
+      "trightarrow=21d4,LessEqualGreater=22da,LessFullEqual=2266,LessGreater=2276,LessLess=2aa1,LessSlantEq",
+      "ual=2a7d,LessTilde=2272,Lfr=1d50f,Ll=22d8,Lleftarrow=21da,Lmidot=13f,LongLeftArrow=27f5,LongLeftRigh",
+      "tArrow=27f7,LongRightArrow=27f6,Longleftarrow=27f8,Longleftrightarrow=27fa,Longrightarrow=27f9,Lopf=",
+      "1d543,LowerLeftArrow=2199,LowerRightArrow=2198,Lscr=2112,Lsh=21b0,Lstrok=141,Lt=226a,Map=2905,Mcy=41",
+      "c,MediumSpace=205f,Mellintrf=2133,Mfr=1d510,MinusPlus=2213,Mopf=1d544,Mscr=2133,Mu=39c,NJcy=40a,Nacu",
+      "te=143,Ncaron=147,Ncedil=145,Ncy=41d,NegativeMediumSpace=200b,NegativeThickSpace=200b,NegativeThinSp",
+      "ace=200b,NegativeVeryThinSpace=200b,NestedGreaterGreater=226b,NestedLessLess=226a,NewLine=a,Nfr=1d51",
+      "1,NoBreak=2060,NonBreakingSpace=a0,Nopf=2115,Not=2aec,NotCongruent=2262,NotCupCap=226d,NotDoubleVert",
+      "icalBar=2226,NotElement=2209,NotEqual=2260,NotEqualTilde=2242.338,NotExists=2204,NotGreater=226f,Not",
+      "GreaterEqual=2271,NotGreaterFullEqual=2267.338,NotGreaterGreater=226b.338,NotGreaterLess=2279,NotGre",
+      "aterSlantEqual=2a7e.338,NotGreaterTilde=2275,NotHumpDownHump=224e.338,NotHumpEqual=224f.338,NotLeftT",
+      "riangle=22ea,NotLeftTriangleBar=29cf.338,NotLeftTriangleEqual=22ec,NotLess=226e,NotLessEqual=2270,No",
+      "tLessGreater=2278,NotLessLess=226a.338,NotLessSlantEqual=2a7d.338,NotLessTilde=2274,NotNestedGreater",
+      "Greater=2aa2.338,NotNestedLessLess=2aa1.338,NotPrecedes=2280,NotPrecedesEqual=2aaf.338,NotPrecedesSl",
+      "antEqual=22e0,NotReverseElement=220c,NotRightTriangle=22eb,NotRightTriangleBar=29d0.338,NotRightTria",
+      "ngleEqual=22ed,NotSquareSubset=228f.338,NotSquareSubsetEqual=22e2,NotSquareSuperset=2290.338,NotSqua",
+      "reSupersetEqual=22e3,NotSubset=2282.20d2,NotSubsetEqual=2288,NotSucceeds=2281,NotSucceedsEqual=2ab0.",
+      "338,NotSucceedsSlantEqual=22e1,NotSucceedsTilde=227f.338,NotSuperset=2283.20d2,NotSupersetEqual=2289",
+      ",NotTilde=2241,NotTildeEqual=2244,NotTildeFullEqual=2247,NotTildeTilde=2249,NotVerticalBar=2224,Nscr",
+      "=1d4a9,Ntilde=d1,Nu=39d,OElig=152,Oacute=d3,Ocirc=d4,Ocy=41e,Odblac=150,Ofr=1d512,Ograve=d2,Omacr=14",
+      "c,Omega=3a9,Omicron=39f,Oopf=1d546,OpenCurlyDoubleQuote=201c,OpenCurlyQuote=2018,Or=2a54,Oscr=1d4aa,",
+      "Oslash=d8,Otilde=d5,Otimes=2a37,Ouml=d6,OverBar=203e,OverBrace=23de,OverBracket=23b4,OverParenthesis",
+      "=23dc,PartialD=2202,Pcy=41f,Pfr=1d513,Phi=3a6,Pi=3a0,PlusMinus=b1,Poincareplane=210c,Popf=2119,Pr=2a",
+      "bb,Precedes=227a,PrecedesEqual=2aaf,PrecedesSlantEqual=227c,PrecedesTilde=227e,Prime=2033,Product=22",
+      "0f,Proportion=2237,Proportional=221d,Pscr=1d4ab,Psi=3a8,QUOT=22,Qfr=1d514,Qopf=211a,Qscr=1d4ac,RBarr",
+      "=2910,REG=ae,Racute=154,Rang=27eb,Rarr=21a0,Rarrtl=2916,Rcaron=158,Rcedil=156,Rcy=420,Re=211c,Revers",
+      "eElement=220b,ReverseEquilibrium=21cb,ReverseUpEquilibrium=296f,Rfr=211c,Rho=3a1,RightAngleBracket=2",
+      "7e9,RightArrow=2192,RightArrowBar=21e5,RightArrowLeftArrow=21c4,RightCeiling=2309,RightDoubleBracket",
+      "=27e7,RightDownTeeVector=295d,RightDownVector=21c2,RightDownVectorBar=2955,RightFloor=230b,RightTee=",
+      "22a2,RightTeeArrow=21a6,RightTeeVector=295b,RightTriangle=22b3,RightTriangleBar=29d0,RightTriangleEq",
+      "ual=22b5,RightUpDownVector=294f,RightUpTeeVector=295c,RightUpVector=21be,RightUpVectorBar=2954,Right",
+      "Vector=21c0,RightVectorBar=2953,Rightarrow=21d2,Ropf=211d,RoundImplies=2970,Rrightarrow=21db,Rscr=21",
+      "1b,Rsh=21b1,RuleDelayed=29f4,SHCHcy=429,SHcy=428,SOFTcy=42c,Sacute=15a,Sc=2abc,Scaron=160,Scedil=15e",
+      ",Scirc=15c,Scy=421,Sfr=1d516,ShortDownArrow=2193,ShortLeftArrow=2190,ShortRightArrow=2192,ShortUpArr",
+      "ow=2191,Sigma=3a3,SmallCircle=2218,Sopf=1d54a,Sqrt=221a,Square=25a1,SquareIntersection=2293,SquareSu",
+      "bset=228f,SquareSubsetEqual=2291,SquareSuperset=2290,SquareSupersetEqual=2292,SquareUnion=2294,Sscr=",
+      "1d4ae,Star=22c6,Sub=22d0,Subset=22d0,SubsetEqual=2286,Succeeds=227b,SucceedsEqual=2ab0,SucceedsSlant",
+      "Equal=227d,SucceedsTilde=227f,SuchThat=220b,Sum=2211,Sup=22d1,Superset=2283,SupersetEqual=2287,Supse",
+      "t=22d1,THORN=de,TRADE=2122,TSHcy=40b,TScy=426,Tab=9,Tau=3a4,Tcaron=164,Tcedil=162,Tcy=422,Tfr=1d517,",
+      "Therefore=2234,Theta=398,ThickSpace=205f.200a,ThinSpace=2009,Tilde=223c,TildeEqual=2243,TildeFullEqu",
+      "al=2245,TildeTilde=2248,Topf=1d54b,TripleDot=20db,Tscr=1d4af,Tstrok=166,Uacute=da,Uarr=219f,Uarrocir",
+      "=2949,Ubrcy=40e,Ubreve=16c,Ucirc=db,Ucy=423,Udblac=170,Ufr=1d518,Ugrave=d9,Umacr=16a,UnderBar=5f,Und",
+      "erBrace=23df,UnderBracket=23b5,UnderParenthesis=23dd,Union=22c3,UnionPlus=228e,Uogon=172,Uopf=1d54c,",
+      "UpArrow=2191,UpArrowBar=2912,UpArrowDownArrow=21c5,UpDownArrow=2195,UpEquilibrium=296e,UpTee=22a5,Up",
+      "TeeArrow=21a5,Uparrow=21d1,Updownarrow=21d5,UpperLeftArrow=2196,UpperRightArrow=2197,Upsi=3d2,Upsilo",
+      "n=3a5,Uring=16e,Uscr=1d4b0,Utilde=168,Uuml=dc,VDash=22ab,Vbar=2aeb,Vcy=412,Vdash=22a9,Vdashl=2ae6,Ve",
+      "e=22c1,Verbar=2016,Vert=2016,VerticalBar=2223,VerticalLine=7c,VerticalSeparator=2758,VerticalTilde=2",
+      "240,VeryThinSpace=200a,Vfr=1d519,Vopf=1d54d,Vscr=1d4b1,Vvdash=22aa,Wcirc=174,Wedge=22c0,Wfr=1d51a,Wo",
+      "pf=1d54e,Wscr=1d4b2,Xfr=1d51b,Xi=39e,Xopf=1d54f,Xscr=1d4b3,YAcy=42f,YIcy=407,YUcy=42e,Yacute=dd,Ycir",
+      "c=176,Ycy=42b,Yfr=1d51c,Yopf=1d550,Yscr=1d4b4,Yuml=178,ZHcy=416,Zacute=179,Zcaron=17d,Zcy=417,Zdot=1",
+      "7b,ZeroWidthSpace=200b,Zeta=396,Zfr=2128,Zopf=2124,Zscr=1d4b5,aacute=e1,abreve=103,ac=223e,acE=223e.",
+      "333,acd=223f,acirc=e2,acute=b4,acy=430,aelig=e6,af=2061,afr=1d51e,agrave=e0,alefsym=2135,aleph=2135,",
+      "alpha=3b1,amacr=101,amalg=2a3f,amp=26,and=2227,andand=2a55,andd=2a5c,andslope=2a58,andv=2a5a,ang=222",
+      "0,ange=29a4,angle=2220,angmsd=2221,angmsdaa=29a8,angmsdab=29a9,angmsdac=29aa,angmsdad=29ab,angmsdae=",
+      "29ac,angmsdaf=29ad,angmsdag=29ae,angmsdah=29af,angrt=221f,angrtvb=22be,angrtvbd=299d,angsph=2222,ang",
+      "st=c5,angzarr=237c,aogon=105,aopf=1d552,ap=2248,apE=2a70,apacir=2a6f,ape=224a,apid=224b,apos=27,appr",
+      "ox=2248,approxeq=224a,aring=e5,ascr=1d4b6,ast=2a,asymp=2248,asympeq=224d,atilde=e3,auml=e4,awconint=",
+      "2233,awint=2a11,bNot=2aed,backcong=224c,backepsilon=3f6,backprime=2035,backsim=223d,backsimeq=22cd,b",
+      "arvee=22bd,barwed=2305,barwedge=2305,bbrk=23b5,bbrktbrk=23b6,bcong=224c,bcy=431,bdquo=201e,becaus=22",
+      "35,because=2235,bemptyv=29b0,bepsi=3f6,bernou=212c,beta=3b2,beth=2136,between=226c,bfr=1d51f,bigcap=",
+      "22c2,bigcirc=25ef,bigcup=22c3,bigodot=2a00,bigoplus=2a01,bigotimes=2a02,bigsqcup=2a06,bigstar=2605,b",
+      "igtriangledown=25bd,bigtriangleup=25b3,biguplus=2a04,bigvee=22c1,bigwedge=22c0,bkarow=290d,blackloze",
+      "nge=29eb,blacksquare=25aa,blacktriangle=25b4,blacktriangledown=25be,blacktriangleleft=25c2,blacktria",
+      "ngleright=25b8,blank=2423,blk12=2592,blk14=2591,blk34=2593,block=2588,bne=3d.20e5,bnequiv=2261.20e5,",
+      "bnot=2310,bopf=1d553,bot=22a5,bottom=22a5,bowtie=22c8,boxDL=2557,boxDR=2554,boxDl=2556,boxDr=2553,bo",
+      "xH=2550,boxHD=2566,boxHU=2569,boxHd=2564,boxHu=2567,boxUL=255d,boxUR=255a,boxUl=255c,boxUr=2559,boxV",
+      "=2551,boxVH=256c,boxVL=2563,boxVR=2560,boxVh=256b,boxVl=2562,boxVr=255f,boxbox=29c9,boxdL=2555,boxdR",
+      "=2552,boxdl=2510,boxdr=250c,boxh=2500,boxhD=2565,boxhU=2568,boxhd=252c,boxhu=2534,boxminus=229f,boxp",
+      "lus=229e,boxtimes=22a0,boxuL=255b,boxuR=2558,boxul=2518,boxur=2514,boxv=2502,boxvH=256a,boxvL=2561,b",
+      "oxvR=255e,boxvh=253c,boxvl=2524,boxvr=251c,bprime=2035,breve=2d8,brvbar=a6,bscr=1d4b7,bsemi=204f,bsi",
+      "m=223d,bsime=22cd,bsol=5c,bsolb=29c5,bsolhsub=27c8,bull=2022,bullet=2022,bump=224e,bumpE=2aae,bumpe=",
+      "224f,bumpeq=224f,cacute=107,cap=2229,capand=2a44,capbrcup=2a49,capcap=2a4b,capcup=2a47,capdot=2a40,c",
+      "aps=2229.fe00,caret=2041,caron=2c7,ccaps=2a4d,ccaron=10d,ccedil=e7,ccirc=109,ccups=2a4c,ccupssm=2a50",
+      ",cdot=10b,cedil=b8,cemptyv=29b2,cent=a2,centerdot=b7,cfr=1d520,chcy=447,check=2713,checkmark=2713,ch",
+      "i=3c7,cir=25cb,cirE=29c3,circ=2c6,circeq=2257,circlearrowleft=21ba,circlearrowright=21bb,circledR=ae",
+      ",circledS=24c8,circledast=229b,circledcirc=229a,circleddash=229d,cire=2257,cirfnint=2a10,cirmid=2aef",
+      ",cirscir=29c2,clubs=2663,clubsuit=2663,colon=3a,colone=2254,coloneq=2254,comma=2c,commat=40,comp=220",
+      "1,compfn=2218,complement=2201,complexes=2102,cong=2245,congdot=2a6d,conint=222e,copf=1d554,coprod=22",
+      "10,copy=a9,copysr=2117,crarr=21b5,cross=2717,cscr=1d4b8,csub=2acf,csube=2ad1,csup=2ad0,csupe=2ad2,ct",
+      "dot=22ef,cudarrl=2938,cudarrr=2935,cuepr=22de,cuesc=22df,cularr=21b6,cularrp=293d,cup=222a,cupbrcap=",
+      "2a48,cupcap=2a46,cupcup=2a4a,cupdot=228d,cupor=2a45,cups=222a.fe00,curarr=21b7,curarrm=293c,curlyeqp",
+      "rec=22de,curlyeqsucc=22df,curlyvee=22ce,curlywedge=22cf,curren=a4,curvearrowleft=21b6,curvearrowrigh",
+      "t=21b7,cuvee=22ce,cuwed=22cf,cwconint=2232,cwint=2231,cylcty=232d,dArr=21d3,dHar=2965,dagger=2020,da",
+      "leth=2138,darr=2193,dash=2010,dashv=22a3,dbkarow=290f,dblac=2dd,dcaron=10f,dcy=434,dd=2146,ddagger=2",
+      "021,ddarr=21ca,ddotseq=2a77,deg=b0,delta=3b4,demptyv=29b1,dfisht=297f,dfr=1d521,dharl=21c3,dharr=21c",
+      "2,diam=22c4,diamond=22c4,diamondsuit=2666,diams=2666,die=a8,digamma=3dd,disin=22f2,div=f7,divide=f7,",
+      "divideontimes=22c7,divonx=22c7,djcy=452,dlcorn=231e,dlcrop=230d,dollar=24,dopf=1d555,dot=2d9,doteq=2",
+      "250,doteqdot=2251,dotminus=2238,dotplus=2214,dotsquare=22a1,doublebarwedge=2306,downarrow=2193,downd",
+      "ownarrows=21ca,downharpoonleft=21c3,downharpoonright=21c2,drbkarow=2910,drcorn=231f,drcrop=230c,dscr",
+      "=1d4b9,dscy=455,dsol=29f6,dstrok=111,dtdot=22f1,dtri=25bf,dtrif=25be,duarr=21f5,duhar=296f,dwangle=2",
+      "9a6,dzcy=45f,dzigrarr=27ff,eDDot=2a77,eDot=2251,eacute=e9,easter=2a6e,ecaron=11b,ecir=2256,ecirc=ea,",
+      "ecolon=2255,ecy=44d,edot=117,ee=2147,efDot=2252,efr=1d522,eg=2a9a,egrave=e8,egs=2a96,egsdot=2a98,el=",
+      "2a99,elinters=23e7,ell=2113,els=2a95,elsdot=2a97,emacr=113,empty=2205,emptyset=2205,emptyv=2205,emsp",
+      "=2003,emsp13=2004,emsp14=2005,eng=14b,ensp=2002,eogon=119,eopf=1d556,epar=22d5,eparsl=29e3,eplus=2a7",
+      "1,epsi=3b5,epsilon=3b5,epsiv=3f5,eqcirc=2256,eqcolon=2255,eqsim=2242,eqslantgtr=2a96,eqslantless=2a9",
+      "5,equals=3d,equest=225f,equiv=2261,equivDD=2a78,eqvparsl=29e5,erDot=2253,erarr=2971,escr=212f,esdot=",
+      "2250,esim=2242,eta=3b7,eth=f0,euml=eb,euro=20ac,excl=21,exist=2203,expectation=2130,exponentiale=214",
+      "7,fallingdotseq=2252,fcy=444,female=2640,ffilig=fb03,fflig=fb00,ffllig=fb04,ffr=1d523,filig=fb01,fjl",
+      "ig=66.6a,flat=266d,fllig=fb02,fltns=25b1,fnof=192,fopf=1d557,forall=2200,fork=22d4,forkv=2ad9,fparti",
+      "nt=2a0d,frac12=bd,frac13=2153,frac14=bc,frac15=2155,frac16=2159,frac18=215b,frac23=2154,frac25=2156,",
+      "frac34=be,frac35=2157,frac38=215c,frac45=2158,frac56=215a,frac58=215d,frac78=215e,frasl=2044,frown=2",
+      "322,fscr=1d4bb,gE=2267,gEl=2a8c,gacute=1f5,gamma=3b3,gammad=3dd,gap=2a86,gbreve=11f,gcirc=11d,gcy=43",
+      "3,gdot=121,ge=2265,gel=22db,geq=2265,geqq=2267,geqslant=2a7e,ges=2a7e,gescc=2aa9,gesdot=2a80,gesdoto",
+      "=2a82,gesdotol=2a84,gesl=22db.fe00,gesles=2a94,gfr=1d524,gg=226b,ggg=22d9,gimel=2137,gjcy=453,gl=227",
+      "7,glE=2a92,gla=2aa5,glj=2aa4,gnE=2269,gnap=2a8a,gnapprox=2a8a,gne=2a88,gneq=2a88,gneqq=2269,gnsim=22",
+      "e7,gopf=1d558,grave=60,gscr=210a,gsim=2273,gsime=2a8e,gsiml=2a90,gt=3e,gtcc=2aa7,gtcir=2a7a,gtdot=22",
+      "d7,gtlPar=2995,gtquest=2a7c,gtrapprox=2a86,gtrarr=2978,gtrdot=22d7,gtreqless=22db,gtreqqless=2a8c,gt",
+      "rless=2277,gtrsim=2273,gvertneqq=2269.fe00,gvnE=2269.fe00,hArr=21d4,hairsp=200a,half=bd,hamilt=210b,",
+      "hardcy=44a,harr=2194,harrcir=2948,harrw=21ad,hbar=210f,hcirc=125,hearts=2665,heartsuit=2665,hellip=2",
+      "026,hercon=22b9,hfr=1d525,hksearow=2925,hkswarow=2926,hoarr=21ff,homtht=223b,hookleftarrow=21a9,hook",
+      "rightarrow=21aa,hopf=1d559,horbar=2015,hscr=1d4bd,hslash=210f,hstrok=127,hybull=2043,hyphen=2010,iac",
+      "ute=ed,ic=2063,icirc=ee,icy=438,iecy=435,iexcl=a1,iff=21d4,ifr=1d526,igrave=ec,ii=2148,iiiint=2a0c,i",
+      "iint=222d,iinfin=29dc,iiota=2129,ijlig=133,imacr=12b,image=2111,imagline=2110,imagpart=2111,imath=13",
+      "1,imof=22b7,imped=1b5,in=2208,incare=2105,infin=221e,infintie=29dd,inodot=131,int=222b,intcal=22ba,i",
+      "ntegers=2124,intercal=22ba,intlarhk=2a17,intprod=2a3c,iocy=451,iogon=12f,iopf=1d55a,iota=3b9,iprod=2",
+      "a3c,iquest=bf,iscr=1d4be,isin=2208,isinE=22f9,isindot=22f5,isins=22f4,isinsv=22f3,isinv=2208,it=2062",
+      ",itilde=129,iukcy=456,iuml=ef,jcirc=135,jcy=439,jfr=1d527,jmath=237,jopf=1d55b,jscr=1d4bf,jsercy=458",
+      ",jukcy=454,kappa=3ba,kappav=3f0,kcedil=137,kcy=43a,kfr=1d528,kgreen=138,khcy=445,kjcy=45c,kopf=1d55c",
+      ",kscr=1d4c0,lAarr=21da,lArr=21d0,lAtail=291b,lBarr=290e,lE=2266,lEg=2a8b,lHar=2962,lacute=13a,laempt",
+      "yv=29b4,lagran=2112,lambda=3bb,lang=27e8,langd=2991,langle=27e8,lap=2a85,laquo=ab,larr=2190,larrb=21",
+      "e4,larrbfs=291f,larrfs=291d,larrhk=21a9,larrlp=21ab,larrpl=2939,larrsim=2973,larrtl=21a2,lat=2aab,la",
+      "tail=2919,late=2aad,lates=2aad.fe00,lbarr=290c,lbbrk=2772,lbrace=7b,lbrack=5b,lbrke=298b,lbrksld=298",
+      "f,lbrkslu=298d,lcaron=13e,lcedil=13c,lceil=2308,lcub=7b,lcy=43b,ldca=2936,ldquo=201c,ldquor=201e,ldr",
+      "dhar=2967,ldrushar=294b,ldsh=21b2,le=2264,leftarrow=2190,leftarrowtail=21a2,leftharpoondown=21bd,lef",
+      "tharpoonup=21bc,leftleftarrows=21c7,leftrightarrow=2194,leftrightarrows=21c6,leftrightharpoons=21cb,",
+      "leftrightsquigarrow=21ad,leftthreetimes=22cb,leg=22da,leq=2264,leqq=2266,leqslant=2a7d,les=2a7d,lesc",
+      "c=2aa8,lesdot=2a7f,lesdoto=2a81,lesdotor=2a83,lesg=22da.fe00,lesges=2a93,lessapprox=2a85,lessdot=22d",
+      "6,lesseqgtr=22da,lesseqqgtr=2a8b,lessgtr=2276,lesssim=2272,lfisht=297c,lfloor=230a,lfr=1d529,lg=2276",
+      ",lgE=2a91,lhard=21bd,lharu=21bc,lharul=296a,lhblk=2584,ljcy=459,ll=226a,llarr=21c7,llcorner=231e,llh",
+      "ard=296b,lltri=25fa,lmidot=140,lmoust=23b0,lmoustache=23b0,lnE=2268,lnap=2a89,lnapprox=2a89,lne=2a87",
+      ",lneq=2a87,lneqq=2268,lnsim=22e6,loang=27ec,loarr=21fd,lobrk=27e6,longleftarrow=27f5,longleftrightar",
+      "row=27f7,longmapsto=27fc,longrightarrow=27f6,looparrowleft=21ab,looparrowright=21ac,lopar=2985,lopf=",
+      "1d55d,loplus=2a2d,lotimes=2a34,lowast=2217,lowbar=5f,loz=25ca,lozenge=25ca,lozf=29eb,lpar=28,lparlt=",
+      "2993,lrarr=21c6,lrcorner=231f,lrhar=21cb,lrhard=296d,lrm=200e,lrtri=22bf,lsaquo=2039,lscr=1d4c1,lsh=",
+      "21b0,lsim=2272,lsime=2a8d,lsimg=2a8f,lsqb=5b,lsquo=2018,lsquor=201a,lstrok=142,lt=3c,ltcc=2aa6,ltcir",
+      "=2a79,ltdot=22d6,lthree=22cb,ltimes=22c9,ltlarr=2976,ltquest=2a7b,ltrPar=2996,ltri=25c3,ltrie=22b4,l",
+      "trif=25c2,lurdshar=294a,luruhar=2966,lvertneqq=2268.fe00,lvnE=2268.fe00,mDDot=223a,macr=af,male=2642",
+      ",malt=2720,maltese=2720,map=21a6,mapsto=21a6,mapstodown=21a7,mapstoleft=21a4,mapstoup=21a5,marker=25",
+      "ae,mcomma=2a29,mcy=43c,mdash=2014,measuredangle=2221,mfr=1d52a,mho=2127,micro=b5,mid=2223,midast=2a,",
+      "midcir=2af0,middot=b7,minus=2212,minusb=229f,minusd=2238,minusdu=2a2a,mlcp=2adb,mldr=2026,mnplus=221",
+      "3,models=22a7,mopf=1d55e,mp=2213,mscr=1d4c2,mstpos=223e,mu=3bc,multimap=22b8,mumap=22b8,nGg=22d9.338",
+      ",nGt=226b.20d2,nGtv=226b.338,nLeftarrow=21cd,nLeftrightarrow=21ce,nLl=22d8.338,nLt=226a.20d2,nLtv=22",
+      "6a.338,nRightarrow=21cf,nVDash=22af,nVdash=22ae,nabla=2207,nacute=144,nang=2220.20d2,nap=2249,napE=2",
+      "a70.338,napid=224b.338,napos=149,napprox=2249,natur=266e,natural=266e,naturals=2115,nbsp=a0,nbump=22",
+      "4e.338,nbumpe=224f.338,ncap=2a43,ncaron=148,ncedil=146,ncong=2247,ncongdot=2a6d.338,ncup=2a42,ncy=43",
+      "d,ndash=2013,ne=2260,neArr=21d7,nearhk=2924,nearr=2197,nearrow=2197,nedot=2250.338,nequiv=2262,nesea",
+      "r=2928,nesim=2242.338,nexist=2204,nexists=2204,nfr=1d52b,ngE=2267.338,nge=2271,ngeq=2271,ngeqq=2267.",
+      "338,ngeqslant=2a7e.338,nges=2a7e.338,ngsim=2275,ngt=226f,ngtr=226f,nhArr=21ce,nharr=21ae,nhpar=2af2,",
+      "ni=220b,nis=22fc,nisd=22fa,niv=220b,njcy=45a,nlArr=21cd,nlE=2266.338,nlarr=219a,nldr=2025,nle=2270,n",
+      "leftarrow=219a,nleftrightarrow=21ae,nleq=2270,nleqq=2266.338,nleqslant=2a7d.338,nles=2a7d.338,nless=",
+      "226e,nlsim=2274,nlt=226e,nltri=22ea,nltrie=22ec,nmid=2224,nopf=1d55f,not=ac,notin=2209,notinE=22f9.3",
+      "38,notindot=22f5.338,notinva=2209,notinvb=22f7,notinvc=22f6,notni=220c,notniva=220c,notnivb=22fe,not",
+      "nivc=22fd,npar=2226,nparallel=2226,nparsl=2afd.20e5,npart=2202.338,npolint=2a14,npr=2280,nprcue=22e0",
+      ",npre=2aaf.338,nprec=2280,npreceq=2aaf.338,nrArr=21cf,nrarr=219b,nrarrc=2933.338,nrarrw=219d.338,nri",
+      "ghtarrow=219b,nrtri=22eb,nrtrie=22ed,nsc=2281,nsccue=22e1,nsce=2ab0.338,nscr=1d4c3,nshortmid=2224,ns",
+      "hortparallel=2226,nsim=2241,nsime=2244,nsimeq=2244,nsmid=2224,nspar=2226,nsqsube=22e2,nsqsupe=22e3,n",
+      "sub=2284,nsubE=2ac5.338,nsube=2288,nsubset=2282.20d2,nsubseteq=2288,nsubseteqq=2ac5.338,nsucc=2281,n",
+      "succeq=2ab0.338,nsup=2285,nsupE=2ac6.338,nsupe=2289,nsupset=2283.20d2,nsupseteq=2289,nsupseteqq=2ac6",
+      ".338,ntgl=2279,ntilde=f1,ntlg=2278,ntriangleleft=22ea,ntrianglelefteq=22ec,ntriangleright=22eb,ntria",
+      "nglerighteq=22ed,nu=3bd,num=23,numero=2116,numsp=2007,nvDash=22ad,nvHarr=2904,nvap=224d.20d2,nvdash=",
+      "22ac,nvge=2265.20d2,nvgt=3e.20d2,nvinfin=29de,nvlArr=2902,nvle=2264.20d2,nvlt=3c.20d2,nvltrie=22b4.2",
+      "0d2,nvrArr=2903,nvrtrie=22b5.20d2,nvsim=223c.20d2,nwArr=21d6,nwarhk=2923,nwarr=2196,nwarrow=2196,nwn",
+      "ear=2927,oS=24c8,oacute=f3,oast=229b,ocir=229a,ocirc=f4,ocy=43e,odash=229d,odblac=151,odiv=2a38,odot",
+      "=2299,odsold=29bc,oelig=153,ofcir=29bf,ofr=1d52c,ogon=2db,ograve=f2,ogt=29c1,ohbar=29b5,ohm=3a9,oint",
+      "=222e,olarr=21ba,olcir=29be,olcross=29bb,oline=203e,olt=29c0,omacr=14d,omega=3c9,omicron=3bf,omid=29",
+      "b6,ominus=2296,oopf=1d560,opar=29b7,operp=29b9,oplus=2295,or=2228,orarr=21bb,ord=2a5d,order=2134,ord",
+      "erof=2134,ordf=aa,ordm=ba,origof=22b6,oror=2a56,orslope=2a57,orv=2a5b,oscr=2134,oslash=f8,osol=2298,",
+      "otilde=f5,otimes=2297,otimesas=2a36,ouml=f6,ovbar=233d,par=2225,para=b6,parallel=2225,parsim=2af3,pa",
+      "rsl=2afd,part=2202,pcy=43f,percnt=25,period=2e,permil=2030,perp=22a5,pertenk=2031,pfr=1d52d,phi=3c6,",
+      "phiv=3d5,phmmat=2133,phone=260e,pi=3c0,pitchfork=22d4,piv=3d6,planck=210f,planckh=210e,plankv=210f,p",
+      "lus=2b,plusacir=2a23,plusb=229e,pluscir=2a22,plusdo=2214,plusdu=2a25,pluse=2a72,plusmn=b1,plussim=2a",
+      "26,plustwo=2a27,pm=b1,pointint=2a15,popf=1d561,pound=a3,pr=227a,prE=2ab3,prap=2ab7,prcue=227c,pre=2a",
+      "af,prec=227a,precapprox=2ab7,preccurlyeq=227c,preceq=2aaf,precnapprox=2ab9,precneqq=2ab5,precnsim=22",
+      "e8,precsim=227e,prime=2032,primes=2119,prnE=2ab5,prnap=2ab9,prnsim=22e8,prod=220f,profalar=232e,prof",
+      "line=2312,profsurf=2313,prop=221d,propto=221d,prsim=227e,prurel=22b0,pscr=1d4c5,psi=3c8,puncsp=2008,",
+      "qfr=1d52e,qint=2a0c,qopf=1d562,qprime=2057,qscr=1d4c6,quaternions=210d,quatint=2a16,quest=3f,questeq",
+      "=225f,quot=22,rAarr=21db,rArr=21d2,rAtail=291c,rBarr=290f,rHar=2964,race=223d.331,racute=155,radic=2",
+      "21a,raemptyv=29b3,rang=27e9,rangd=2992,range=29a5,rangle=27e9,raquo=bb,rarr=2192,rarrap=2975,rarrb=2",
+      "1e5,rarrbfs=2920,rarrc=2933,rarrfs=291e,rarrhk=21aa,rarrlp=21ac,rarrpl=2945,rarrsim=2974,rarrtl=21a3",
+      ",rarrw=219d,ratail=291a,ratio=2236,rationals=211a,rbarr=290d,rbbrk=2773,rbrace=7d,rbrack=5d,rbrke=29",
+      "8c,rbrksld=298e,rbrkslu=2990,rcaron=159,rcedil=157,rceil=2309,rcub=7d,rcy=440,rdca=2937,rdldhar=2969",
+      ",rdquo=201d,rdquor=201d,rdsh=21b3,real=211c,realine=211b,realpart=211c,reals=211d,rect=25ad,reg=ae,r",
+      "fisht=297d,rfloor=230b,rfr=1d52f,rhard=21c1,rharu=21c0,rharul=296c,rho=3c1,rhov=3f1,rightarrow=2192,",
+      "rightarrowtail=21a3,rightharpoondown=21c1,rightharpoonup=21c0,rightleftarrows=21c4,rightleftharpoons",
+      "=21cc,rightrightarrows=21c9,rightsquigarrow=219d,rightthreetimes=22cc,ring=2da,risingdotseq=2253,rla",
+      "rr=21c4,rlhar=21cc,rlm=200f,rmoust=23b1,rmoustache=23b1,rnmid=2aee,roang=27ed,roarr=21fe,robrk=27e7,",
+      "ropar=2986,ropf=1d563,roplus=2a2e,rotimes=2a35,rpar=29,rpargt=2994,rppolint=2a12,rrarr=21c9,rsaquo=2",
+      "03a,rscr=1d4c7,rsh=21b1,rsqb=5d,rsquo=2019,rsquor=2019,rthree=22cc,rtimes=22ca,rtri=25b9,rtrie=22b5,",
+      "rtrif=25b8,rtriltri=29ce,ruluhar=2968,rx=211e,sacute=15b,sbquo=201a,sc=227b,scE=2ab4,scap=2ab8,scaro",
+      "n=161,sccue=227d,sce=2ab0,scedil=15f,scirc=15d,scnE=2ab6,scnap=2aba,scnsim=22e9,scpolint=2a13,scsim=",
+      "227f,scy=441,sdot=22c5,sdotb=22a1,sdote=2a66,seArr=21d8,searhk=2925,searr=2198,searrow=2198,sect=a7,",
+      "semi=3b,seswar=2929,setminus=2216,setmn=2216,sext=2736,sfr=1d530,sfrown=2322,sharp=266f,shchcy=449,s",
+      "hcy=448,shortmid=2223,shortparallel=2225,shy=ad,sigma=3c3,sigmaf=3c2,sigmav=3c2,sim=223c,simdot=2a6a",
+      ",sime=2243,simeq=2243,simg=2a9e,simgE=2aa0,siml=2a9d,simlE=2a9f,simne=2246,simplus=2a24,simrarr=2972",
+      ",slarr=2190,smallsetminus=2216,smashp=2a33,smeparsl=29e4,smid=2223,smile=2323,smt=2aaa,smte=2aac,smt",
+      "es=2aac.fe00,softcy=44c,sol=2f,solb=29c4,solbar=233f,sopf=1d564,spades=2660,spadesuit=2660,spar=2225",
+      ",sqcap=2293,sqcaps=2293.fe00,sqcup=2294,sqcups=2294.fe00,sqsub=228f,sqsube=2291,sqsubset=228f,sqsubs",
+      "eteq=2291,sqsup=2290,sqsupe=2292,sqsupset=2290,sqsupseteq=2292,squ=25a1,square=25a1,squarf=25aa,squf",
+      "=25aa,srarr=2192,sscr=1d4c8,ssetmn=2216,ssmile=2323,sstarf=22c6,star=2606,starf=2605,straightepsilon",
+      "=3f5,straightphi=3d5,strns=af,sub=2282,subE=2ac5,subdot=2abd,sube=2286,subedot=2ac3,submult=2ac1,sub",
+      "nE=2acb,subne=228a,subplus=2abf,subrarr=2979,subset=2282,subseteq=2286,subseteqq=2ac5,subsetneq=228a",
+      ",subsetneqq=2acb,subsim=2ac7,subsub=2ad5,subsup=2ad3,succ=227b,succapprox=2ab8,succcurlyeq=227d,succ",
+      "eq=2ab0,succnapprox=2aba,succneqq=2ab6,succnsim=22e9,succsim=227f,sum=2211,sung=266a,sup=2283,sup1=b",
+      "9,sup2=b2,sup3=b3,supE=2ac6,supdot=2abe,supdsub=2ad8,supe=2287,supedot=2ac4,suphsol=27c9,suphsub=2ad",
+      "7,suplarr=297b,supmult=2ac2,supnE=2acc,supne=228b,supplus=2ac0,supset=2283,supseteq=2287,supseteqq=2",
+      "ac6,supsetneq=228b,supsetneqq=2acc,supsim=2ac8,supsub=2ad4,supsup=2ad6,swArr=21d9,swarhk=2926,swarr=",
+      "2199,swarrow=2199,swnwar=292a,szlig=df,target=2316,tau=3c4,tbrk=23b4,tcaron=165,tcedil=163,tcy=442,t",
+      "dot=20db,telrec=2315,tfr=1d531,there4=2234,therefore=2234,theta=3b8,thetasym=3d1,thetav=3d1,thickapp",
+      "rox=2248,thicksim=223c,thinsp=2009,thkap=2248,thksim=223c,thorn=fe,tilde=2dc,times=d7,timesb=22a0,ti",
+      "mesbar=2a31,timesd=2a30,tint=222d,toea=2928,top=22a4,topbot=2336,topcir=2af1,topf=1d565,topfork=2ada",
+      ",tosa=2929,tprime=2034,trade=2122,triangle=25b5,triangledown=25bf,triangleleft=25c3,trianglelefteq=2",
+      "2b4,triangleq=225c,triangleright=25b9,trianglerighteq=22b5,tridot=25ec,trie=225c,triminus=2a3a,tripl",
+      "us=2a39,trisb=29cd,tritime=2a3b,trpezium=23e2,tscr=1d4c9,tscy=446,tshcy=45b,tstrok=167,twixt=226c,tw",
+      "oheadleftarrow=219e,twoheadrightarrow=21a0,uArr=21d1,uHar=2963,uacute=fa,uarr=2191,ubrcy=45e,ubreve=",
+      "16d,ucirc=fb,ucy=443,udarr=21c5,udblac=171,udhar=296e,ufisht=297e,ufr=1d532,ugrave=f9,uharl=21bf,uha",
+      "rr=21be,uhblk=2580,ulcorn=231c,ulcorner=231c,ulcrop=230f,ultri=25f8,umacr=16b,uml=a8,uogon=173,uopf=",
+      "1d566,uparrow=2191,updownarrow=2195,upharpoonleft=21bf,upharpoonright=21be,uplus=228e,upsi=3c5,upsih",
+      "=3d2,upsilon=3c5,upuparrows=21c8,urcorn=231d,urcorner=231d,urcrop=230e,uring=16f,urtri=25f9,uscr=1d4",
+      "ca,utdot=22f0,utilde=169,utri=25b5,utrif=25b4,uuarr=21c8,uuml=fc,uwangle=29a7,vArr=21d5,vBar=2ae8,vB",
+      "arv=2ae9,vDash=22a8,vangrt=299c,varepsilon=3f5,varkappa=3f0,varnothing=2205,varphi=3d5,varpi=3d6,var",
+      "propto=221d,varr=2195,varrho=3f1,varsigma=3c2,varsubsetneq=228a.fe00,varsubsetneqq=2acb.fe00,varsups",
+      "etneq=228b.fe00,varsupsetneqq=2acc.fe00,vartheta=3d1,vartriangleleft=22b2,vartriangleright=22b3,vcy=",
+      "432,vdash=22a2,vee=2228,veebar=22bb,veeeq=225a,vellip=22ee,verbar=7c,vert=7c,vfr=1d533,vltri=22b2,vn",
+      "sub=2282.20d2,vnsup=2283.20d2,vopf=1d567,vprop=221d,vrtri=22b3,vscr=1d4cb,vsubnE=2acb.fe00,vsubne=22",
+      "8a.fe00,vsupnE=2acc.fe00,vsupne=228b.fe00,vzigzag=299a,wcirc=175,wedbar=2a5f,wedge=2227,wedgeq=2259,",
+      "weierp=2118,wfr=1d534,wopf=1d568,wp=2118,wr=2240,wreath=2240,wscr=1d4cc,xcap=22c2,xcirc=25ef,xcup=22",
+      "c3,xdtri=25bd,xfr=1d535,xhArr=27fa,xharr=27f7,xi=3be,xlArr=27f8,xlarr=27f5,xmap=27fc,xnis=22fb,xodot",
+      "=2a00,xopf=1d569,xoplus=2a01,xotime=2a02,xrArr=27f9,xrarr=27f6,xscr=1d4cd,xsqcup=2a06,xuplus=2a04,xu",
+      "tri=25b3,xvee=22c1,xwedge=22c0,yacute=fd,yacy=44f,ycirc=177,ycy=44b,yen=a5,yfr=1d536,yicy=457,yopf=1",
+      "d56a,yscr=1d4ce,yucy=44e,yuml=ff,zacute=17a,zcaron=17e,zcy=437,zdot=17c,zeetrf=2128,zeta=3b6,zfr=1d5",
+      "37,zhcy=436,zigrarr=21dd,zopf=1d56b,zscr=1d4cf,zwj=200d,zwnj=200c"
+    ].join("");
+    NAMED_REFERENCES = new Map(NAMED.split(",").map((entry) => {
+      const [name, codes] = entry.split("=");
+      return [name, String.fromCodePoint(...codes.split(".").map((code) => Number.parseInt(code, 16)))];
+    }));
+  }
+});
+
 // src/html.js
 function fromCode(code) {
   if (code === 0 || code > 1114111 || code >= 55296 && code <= 57343) {
@@ -1640,8 +1920,8 @@ function decodeEntities(value, { attribute = false } = {}) {
     if (hex !== void 0 || decimal !== void 0) {
       return fromCode(hex === void 0 ? Number.parseInt(decimal, 10) : Number.parseInt(hex, 16));
     }
-    if (semicolon && (ENTITIES.has(name) || LONGER_NAMES.has(name))) {
-      return ENTITIES.get(name) ?? match;
+    if (semicolon && NAMED_REFERENCES.has(name)) {
+      return NAMED_REFERENCES.get(name);
     }
     let legacy;
     for (let length = Math.min(name.length, LEGACY_LONGEST); length >= 2 && legacy === void 0; length--) {
@@ -1655,7 +1935,7 @@ function decodeEntities(value, { attribute = false } = {}) {
     if (attribute && /[\da-zA-Z=]/.test(next)) {
       return match;
     }
-    return ENTITIES.get(legacy) + rest;
+    return NAMED_REFERENCES.get(legacy) + rest;
   });
 }
 function readTag(html2, start) {
@@ -2296,106 +2576,14 @@ function visibleText(html2) {
   }
   return { text: parts.join(""), hidden };
 }
-var LATIN1, ENTITIES, LEGACY, LEGACY_LONGEST, LONGER_NAMES, WINDOWS_1252, REFERENCE, UNSHOWN, RAW_SHOWN, RAW_END, BREAKS, SPECIAL, SCOPE, FORMATTING, LINE, OWN_PLACE, VOID, CLOSES_PARAGRAPH, PARAGRAPH, IMPLIED, TABLE_PARTS, TABLE_BOXES, HEADINGS, IMPLIED_END, PARTS_OF_TABLE, TABLE_STRUCTURE, IN_TABLE, MAX_FORMATTING, MARKERS, FOSTERED_MARKERS, NOT_REOPENING, LEAVES_FOREIGN, HOLDS_HTML, SVG_UNSHOWN, MAX_OPEN, MAX_ATTRIBUTES, MAX_STYLE, COMMENT_END, WHITESPACE2, NO_WORD_ATTRIBUTES, FIELDS, FIELD_HELP, HINTS, MAX_HELP, LABEL_END, isHelp, MAX_VALUE, LENGTH, UNITS, SIZE_KEYWORDS, ZERO_NUMBER, DISPLAY_INLINE, DISPLAY_BLOCK, isZero, declarationCache, ROOT, DOCTYPE, QUIRKS_PUBLIC, QUIRKS_IF_NO_SYSTEM;
+var LATIN1, LEGACY, LEGACY_LONGEST, WINDOWS_1252, REFERENCE, UNSHOWN, RAW_SHOWN, RAW_END, BREAKS, SPECIAL, SCOPE, FORMATTING, LINE, OWN_PLACE, VOID, CLOSES_PARAGRAPH, PARAGRAPH, IMPLIED, TABLE_PARTS, TABLE_BOXES, HEADINGS, IMPLIED_END, PARTS_OF_TABLE, TABLE_STRUCTURE, IN_TABLE, MAX_FORMATTING, MARKERS, FOSTERED_MARKERS, NOT_REOPENING, LEAVES_FOREIGN, HOLDS_HTML, SVG_UNSHOWN, MAX_OPEN, MAX_ATTRIBUTES, MAX_STYLE, COMMENT_END, WHITESPACE2, NO_WORD_ATTRIBUTES, FIELDS, FIELD_HELP, HINTS, MAX_HELP, LABEL_END, isHelp, MAX_VALUE, LENGTH, UNITS, SIZE_KEYWORDS, ZERO_NUMBER, DISPLAY_INLINE, DISPLAY_BLOCK, isZero, declarationCache, ROOT, DOCTYPE, QUIRKS_PUBLIC, QUIRKS_IF_NO_SYSTEM;
 var init_html = __esm({
   "src/html.js"() {
+    init_entities();
     init_linear();
     LATIN1 = "nbsp iexcl cent pound curren yen brvbar sect uml copy ordf laquo not shy reg macr deg plusmn sup2 sup3 acute micro para middot cedil sup1 ordm raquo frac14 frac12 frac34 iquest Agrave Aacute Acirc Atilde Auml Aring AElig Ccedil Egrave Eacute Ecirc Euml Igrave Iacute Icirc Iuml ETH Ntilde Ograve Oacute Ocirc Otilde Ouml times Oslash Ugrave Uacute Ucirc Uuml Yacute THORN szlig agrave aacute acirc atilde auml aring aelig ccedil egrave eacute ecirc euml igrave iacute icirc iuml eth ntilde ograve oacute ocirc otilde ouml divide oslash ugrave uacute ucirc uuml yacute thorn yuml".split(" ");
-    ENTITIES = new Map([
-      ...LATIN1.map((name, index) => [name, String.fromCodePoint(160 + index)]),
-      ["amp", "&"],
-      ["lt", "<"],
-      ["gt", ">"],
-      ["quot", '"'],
-      ["apos", "'"],
-      ["AMP", "&"],
-      ["LT", "<"],
-      ["GT", ">"],
-      ["QUOT", '"'],
-      ["COPY", "\xA9"],
-      ["REG", "\xAE"],
-      ["OElig", "\u0152"],
-      ["oelig", "\u0153"],
-      ["Scaron", "\u0160"],
-      ["scaron", "\u0161"],
-      ["Yuml", "\u0178"],
-      ["fnof", "\u0192"],
-      ["circ", "\u02C6"],
-      ["tilde", "\u02DC"],
-      ["ensp", "\u2002"],
-      ["emsp", "\u2003"],
-      ["thinsp", "\u2009"],
-      ["zwnj", "\u200C"],
-      ["zwj", "\u200D"],
-      ["lrm", "\u200E"],
-      ["rlm", "\u200F"],
-      ["ndash", "\u2013"],
-      ["mdash", "\u2014"],
-      ["lsquo", "\u2018"],
-      ["rsquo", "\u2019"],
-      ["sbquo", "\u201A"],
-      ["ldquo", "\u201C"],
-      ["rdquo", "\u201D"],
-      ["bdquo", "\u201E"],
-      ["dagger", "\u2020"],
-      ["Dagger", "\u2021"],
-      ["bull", "\u2022"],
-      ["hellip", "\u2026"],
-      ["permil", "\u2030"],
-      ["prime", "\u2032"],
-      ["Prime", "\u2033"],
-      ["lsaquo", "\u2039"],
-      ["rsaquo", "\u203A"],
-      ["euro", "\u20AC"],
-      ["trade", "\u2122"],
-      ["larr", "\u2190"],
-      ["uarr", "\u2191"],
-      ["rarr", "\u2192"],
-      ["darr", "\u2193"],
-      ["hearts", "\u2665"],
-      ["check", "\u2713"],
-      // The punctuation of a web address, as browsers read these names
-      // ("https://bank.example&commat;evil.example/" goes to evil.example)
-      ["Tab", "	"],
-      ["NewLine", "\n"],
-      ["excl", "!"],
-      ["num", "#"],
-      ["dollar", "$"],
-      ["percnt", "%"],
-      ["lpar", "("],
-      ["rpar", ")"],
-      ["ast", "*"],
-      ["midast", "*"],
-      ["plus", "+"],
-      ["comma", ","],
-      ["period", "."],
-      ["sol", "/"],
-      ["colon", ":"],
-      ["semi", ";"],
-      ["equals", "="],
-      ["quest", "?"],
-      ["commat", "@"],
-      ["lsqb", "["],
-      ["lbrack", "["],
-      ["bsol", "\\"],
-      ["rsqb", "]"],
-      ["rbrack", "]"],
-      ["Hat", "^"],
-      ["lowbar", "_"],
-      ["UnderBar", "_"],
-      ["grave", "`"],
-      ["DiacriticalGrave", "`"],
-      ["lcub", "{"],
-      ["lbrace", "{"],
-      ["verbar", "|"],
-      ["vert", "|"],
-      ["VerticalLine", "|"],
-      ["rcub", "}"],
-      ["rbrace", "}"]
-    ]);
     LEGACY = /* @__PURE__ */ new Set([...LATIN1, "amp", "lt", "gt", "quot", "AMP", "LT", "GT", "QUOT", "COPY", "REG"]);
     LEGACY_LONGEST = Math.max(...[...LEGACY].map((name) => name.length));
-    LONGER_NAMES = new Set("centerdot copysr divideontimes gtcc gtcir gtdot gtlPar gtquest gtrapprox gtrarr gtrdot gtreqless gtreqqless gtrless gtrsim ltcc ltcir ltdot lthree ltimes ltlarr ltquest ltrPar ltri ltrie ltrif notin notinE notindot notinva notinvb notinvc notni notniva notnivb notnivc parallel timesb timesbar timesd".split(" "));
     WINDOWS_1252 = [8364, 129, 8218, 402, 8222, 8230, 8224, 8225, 710, 8240, 352, 8249, 338, 141, 381, 143, 144, 8216, 8217, 8220, 8221, 8226, 8211, 8212, 732, 8482, 353, 8250, 339, 157, 382, 376];
     REFERENCE = /&(?:#([xX])([\da-fA-F]+)|#(\d+)|([a-zA-Z][a-zA-Z\d]{0,31}))(;?)/g;
     UNSHOWN = /* @__PURE__ */ new Set(["script", "style", "title", "noembed", "noframes", "iframe"]);
@@ -2509,6 +2697,31 @@ function continuesName(text, index) {
   }
   return (text[index - 1] === "." || text[index - 1] === "-") && NAME_END.test(text.slice(Math.max(0, index - 3), index - 1));
 }
+function boundedUrl(address2) {
+  const text = String(address2).replaceAll(/[\t\n\r]/g, "");
+  const colon = text.indexOf(":");
+  let start = colon === -1 ? 0 : colon + 1;
+  while (start < text.length && (text[start] === "/" || text[start] === "\\")) {
+    start++;
+  }
+  AUTHORITY_END.lastIndex = start;
+  const end = AUTHORITY_END.exec(text)?.index ?? text.length;
+  const file = /^[\0- ]*file:/i.test(text);
+  const at = file ? start : Math.max(start, text.lastIndexOf("@", end - 1) + 1);
+  const bracket = text.lastIndexOf("]", end - 1);
+  const port = text.lastIndexOf(":", end - 1);
+  let host = text.slice(at, !file && port > Math.max(at - 1, bracket) ? port : end);
+  if (host.length > MAX_URL_HOST && host.includes("%")) {
+    try {
+      host = decodeURIComponent(host);
+    } catch {
+    }
+  }
+  if (host.length > MAX_URL_HOST && host.replaceAll(IGNORED_IN_HOST, "").length > MAX_URL_HOST) {
+    throw new TypeError("Invalid URL: host too long");
+  }
+  return new URL(text);
+}
 function isClickTracker(url) {
   const host = url.hostname.toLowerCase();
   return CLICK_TRACKERS.some((domain) => isUnder(host, domain)) || host === "substack.com" && url.pathname.startsWith("/redirect/");
@@ -2535,7 +2748,7 @@ function gatewayTarget(url) {
 function unwrapLink(address2) {
   let url;
   try {
-    url = new URL(address2);
+    url = boundedUrl(address2);
   } catch {
     return null;
   }
@@ -2546,7 +2759,7 @@ function unwrapLink(address2) {
     }
     let next;
     try {
-      next = new URL(target);
+      next = boundedUrl(target);
     } catch {
       break;
     }
@@ -2790,7 +3003,7 @@ function endsInsideTag(html2, end, link) {
   const joined = trimEndOf(link.replace(/^https?:\/\//i, "") + after, ".-");
   return joined !== host && (!isHost(host) || isHost(joined) && registrableDomain(joined) !== registrableDomain(host));
 }
-function extractLinks(text, html2, { maxLength = 5e5, bareHosts = false } = {}) {
+function extractLinks(text, html2, { maxLength = 5e5, bareHosts: bareHosts2 = false } = {}) {
   text = typeof text === "string" ? foldToAscii(text) : text;
   html2 = typeof html2 === "string" ? foldToAscii(html2) : html2;
   const links = [];
@@ -2808,7 +3021,7 @@ function extractLinks(text, html2, { maxLength = 5e5, bareHosts = false } = {})
     }
     let url;
     try {
-      url = new URL(href);
+      url = boundedUrl(href);
     } catch {
       return;
     }
@@ -2857,7 +3070,7 @@ ${shown || ""}`;
         }
         add(link);
       }
-      if (bareHosts && index < 2) {
+      if (bareHosts2 && index < 2) {
         bareLinkHosts(read, (host) => {
           bareFound.push(host);
         });
@@ -3121,7 +3334,7 @@ function isDeceptiveLink(link, { from } = {}) {
   }
   let shownUrl;
   try {
-    shownUrl = new URL(/^https?:\/\//i.test(link.text) ? link.text : `http://${link.text}`);
+    shownUrl = boundedUrl(/^https?:\/\//i.test(link.text) ? link.text : `http://${link.text}`);
   } catch {
     return false;
   }
@@ -3479,7 +3692,7 @@ ${body}`);
     hidden: visible.hidden
   };
 }
-var import_tldts2, INVISIBLE, OBFUSCATING, JOINERS, INVISIBLE_OR_JOINER, ZERO_WIDTH_SPACE, ZERO_WIDTH_JOINERS, LATIN_END, LATIN_START, ZWSP_SCRIPTS, ZWSP_SCRIPT_END, ZWSP_SCRIPT_START, SOFT_HYPHEN, BIDI, RIGHT_TO_LEFT, LETTER_END, LETTER_START, DIGIT_END, DIGIT_START, STYLED_LETTERS, WIDE_LETTERS, CJK, LOOKALIKES, UNIT_LETTERS, UNIT_WORD, LEET, LEET_DIGITS, UNSPACED, URL_PATTERN, EMAIL_SOURCE, EMAIL_PATTERN, PHONE_PATTERN, IP_PATTERN, MONEY_PATTERN, BITCOIN_PATTERN, CARD_PATTERN, ANCHOR_START, MAX_LINK_TEXT, MAX_URL, SHOWN_URL, IMG_PIXEL, IMG, BARE_HOST, MAX_BARE_HOSTS, NAME_END, FILE_TLDS, LINK_FILE_TLDS, CLICK_TRACKERS, isUnder, MAX_GATEWAYS, BRAND_NAMES, SHORTENERS, FREEMAIL, segmenters, LATIN_LOOKALIKES, LATIN, CYRILLIC_OR_GREEK, INLINE_TAG, HOST_CHAR, MAX_SHOWN_HTML, IN_WORD, MAX_BARE_NAME, LINKED_BRANDS, SIGN_IN_PART, signInPath, SENDING_DOMAINS, ADDRESS_SOURCE, NAMED_ADDRESS, MIN_SHOWN_WORDS, PART_WORD;
+var import_tldts2, INVISIBLE, OBFUSCATING, JOINERS, INVISIBLE_OR_JOINER, ZERO_WIDTH_SPACE, ZERO_WIDTH_JOINERS, LATIN_END, LATIN_START, ZWSP_SCRIPTS, ZWSP_SCRIPT_END, ZWSP_SCRIPT_START, SOFT_HYPHEN, BIDI, RIGHT_TO_LEFT, LETTER_END, LETTER_START, DIGIT_END, DIGIT_START, STYLED_LETTERS, WIDE_LETTERS, CJK, LOOKALIKES, UNIT_LETTERS, UNIT_WORD, LEET, LEET_DIGITS, UNSPACED, URL_PATTERN, EMAIL_SOURCE, EMAIL_PATTERN, PHONE_PATTERN, IP_PATTERN, MONEY_PATTERN, BITCOIN_PATTERN, CARD_PATTERN, ANCHOR_START, MAX_LINK_TEXT, MAX_URL, SHOWN_URL, IMG_PIXEL, IMG, BARE_HOST, MAX_BARE_HOSTS, NAME_END, FILE_TLDS, LINK_FILE_TLDS, CLICK_TRACKERS, MAX_URL_HOST, AUTHORITY_END, IGNORED_IN_HOST, isUnder, MAX_GATEWAYS, BRAND_NAMES, SHORTENERS, FREEMAIL, segmenters, LATIN_LOOKALIKES, LATIN, CYRILLIC_OR_GREEK, INLINE_TAG, HOST_CHAR, MAX_SHOWN_HTML, IN_WORD, MAX_BARE_NAME, LINKED_BRANDS, SIGN_IN_PART, signInPath, SENDING_DOMAINS, ADDRESS_SOURCE, NAMED_ADDRESS, MIN_SHOWN_WORDS, PART_WORD;
 var init_tokenizer = __esm({
   "src/tokenizer.js"() {
     import_tldts2 = require("tldts");
@@ -3585,6 +3798,9 @@ var init_tokenizer = __esm({
     FILE_TLDS = /* @__PURE__ */ new Set(["ai", "app", "md", "mov", "pm", "ps", "py", "rs", "sh", "so", "zip"]);
     LINK_FILE_TLDS = /* @__PURE__ */ new Set(["md", "mov", "pm", "ps", "py", "rs", "sh", "so", "zip"]);
     CLICK_TRACKERS = ["sendgrid.net", "list-manage.com", "mandrillapp.com", "awstrack.me", "pstmrk.it", "hubspotlinks.com", "rs6.net", "klclick.com", "mjt.lu", "exacttarget.com", "convertkit-mail.com", "convertkit-mail2.com", "kit-mail3.com", "sendibt2.com", "sendibt3.com", "createsend1.com", "cmail20.com", "clicks.mlsend.com", "acemlnb.com", "link.mail.beehiiv.com", "bhclick.com", "safelinks.protection.outlook.com", "urldefense.com", "urldefense.proofpoint.com", "mimecast.com", "mimecastprotect.com", "cudasvc.com", "secure-web.cisco.com"];
+    MAX_URL_HOST = 4096;
+    AUTHORITY_END = /[/\\?#]/g;
+    IGNORED_IN_HOST = /[\u00AD\u034F\u180B-\u180D\u180F\u200B\u2060\u2064\uFE00-\uFE0F\uFEFF]|\uD82F[\uDCA0-\uDCA3]|\uDB40[\uDD00-\uDDEF]/g;
     isUnder = (host, domain) => host === domain || host.endsWith(`.${domain}`);
     MAX_GATEWAYS = 16;
     BRAND_NAMES = new Set(BRANDS);
@@ -4423,7 +4639,8 @@ async function parseWithin(raw, parse = parseMessage, deadline = Date.now() + PA
     }
   }
 }
-async function expandAttachments(attachments = [], errors = [], parse = parseMessage, unopened = []) {
+async function expandAttachments(attachments = [], errors = [], parse = parseMessage, gets = {}) {
+  const { unopened = [], mails = [] } = Array.isArray(gets) ? { unopened: gets } : gets ?? {};
   const all = [];
   const deadline = Date.now() + PARSE_TIMEOUT;
   let budget = MAX_NESTED_BYTES;
@@ -4472,6 +4689,7 @@ async function expandAttachments(attachments = [], errors = [], parse = parseMes
         if (inner.error) {
           errors.push(inner.error);
         }
+        mails.push(inner.mail);
         await visit(inner.mail.attachments, prefix ? `${prefix}/${name}` : name || "attached message", depth + 1);
       }
     }
@@ -4571,6 +4789,10 @@ var init_parse = __esm({
 });
 
 // src/dnsbl.js
+function lastLabels(name) {
+  const separators = [...name.matchAll(LABEL_SEPARATOR)];
+  return separators.length < 128 ? 0 : separators.at(-128).index + 1;
+}
 function lookupName(host) {
   if (typeof host !== "string") {
     return null;
@@ -4581,6 +4803,7 @@ function lookupName(host) {
   }
   let name = host.slice(0, end).toLowerCase();
   if (/[\u0080-\u{10FFFF}]/u.test(name)) {
+    name = name.slice(lastLabels(name));
     name = (0, import_node_url2.domainToASCII)(name) || name;
   }
   if ((0, import_node_net.isIP)(name.replaceAll(/^\[|]$/g, "")) !== 0) {
@@ -4680,7 +4903,7 @@ function isListedAnswer(address2, zone) {
   }
   return true;
 }
-var import_node_dns, import_node_net, import_node_url2, import_tldts3, LOOKUP_LABEL, CLOUDFLARE_MALWARE, CLOUDFLARE_FAMILY, DnsChecker;
+var import_node_dns, import_node_net, import_node_url2, import_tldts3, LOOKUP_LABEL, LABEL_SEPARATOR, CLOUDFLARE_MALWARE, CLOUDFLARE_FAMILY, DnsChecker;
 var init_dnsbl = __esm({
   "src/dnsbl.js"() {
     import_node_dns = __toESM(require("node:dns"), 1);
@@ -4688,6 +4911,7 @@ var init_dnsbl = __esm({
     import_node_url2 = require("node:url");
     import_tldts3 = require("tldts");
     LOOKUP_LABEL = /^[a-z\d_-]{1,63}$/;
+    LABEL_SEPARATOR = /[.\u3002\uFF0E\uFF61]/g;
     CLOUDFLARE_MALWARE = ["1.1.1.2", "1.0.0.2"];
     CLOUDFLARE_FAMILY = ["1.1.1.3", "1.0.0.3"];
     DnsChecker = class {
@@ -4927,7 +5151,7 @@ function asciiHostname(value) {
     return null;
   }
   const lower = value.normalize("NFKC").toLowerCase().replace(/\.$/, "");
-  if (lower === "" || /[\0-,/:-^`{-\u007F]/.test(lower)) {
+  if (lower === "" || lower.length > 1024 || /[\0-,/:-^`{-\u007F]/.test(lower)) {
     return null;
   }
   const ascii = (0, import_node_url3.domainToASCII)(lower);
@@ -5000,8 +5224,8 @@ function trustReputation(result, trusted = []) {
   for (const value of result.checkedValues.filter((item) => allowed.has(item))) {
     const signers = allowed.get(value);
     const counts = (entry) => Boolean(entry) && (signers === null || signers.some((signer) => vouches(normalizeEntry(entry), signer)));
-    const detail = result.details[value];
-    const listed = result.allowlisted[value] || (detail?.isAllowlisted ? detail.allowlistValue : null);
+    const detail = Object.hasOwn(result.details, value) ? result.details[value] : void 0;
+    const listed = Object.hasOwn(result.allowlisted, value) && result.allowlisted[value] || (detail?.isAllowlisted ? detail.allowlistValue : null);
     if (counts(listed) && !out.isAllowlisted) {
       out.isAllowlisted = true;
       out.allowlistValue = listed;
@@ -6015,6 +6239,997 @@ var init_classifier = __esm({
   }
 });
 
+// src/links.js
+function isHostCode2(code) {
+  return code >= 97 && code <= 122 || code >= 65 && code <= 90 || code >= 48 && code <= 57 || code === 45 || code === 46;
+}
+function isSpace(code) {
+  return code === 32 || code >= 9 && code <= 13;
+}
+function urlOf(value) {
+  let href = value.replaceAll(/[\t\n\r]/g, "");
+  let start = 0;
+  let end = href.length;
+  while (start < end && href.codePointAt(start) <= 32) {
+    start++;
+  }
+  while (end > start && href.codePointAt(end - 1) <= 32) {
+    end--;
+  }
+  while (end > start && TRAILING.has(href[end - 1])) {
+    end--;
+  }
+  href = href.slice(start, end);
+  if (/^[\\/]{2}/.test(href)) {
+    href = `https://${href.slice(2)}`;
+  } else if (/^www\./i.test(href)) {
+    href = `http://${href}`;
+  } else if (!/^https?:/i.test(href)) {
+    return null;
+  }
+  try {
+    return boundedUrl(href);
+  } catch {
+    return null;
+  }
+}
+function hostOfUrl(url) {
+  let host = url.hostname.toLowerCase();
+  let dots = host.length;
+  while (dots > 0 && host[dots - 1] === ".") {
+    dots--;
+  }
+  host = host.slice(0, dots);
+  if (host.startsWith("[") && host.endsWith("]")) {
+    host = host.slice(1, -1);
+  }
+  if (!host || NAMESPACES.has(host)) {
+    return null;
+  }
+  return (0, import_node_net4.isIP)(host) ? host : lookupName(host);
+}
+function hostsOf(value) {
+  const url = urlOf(value);
+  if (!url) {
+    return [];
+  }
+  const host = hostOfUrl(url);
+  const hosts = host ? [host] : [];
+  const target = unwrapLink(url.href);
+  if (target && target.href !== url.href) {
+    const targetHost = hostOfUrl(target);
+    if (targetHost && targetHost !== host) {
+      hosts.push(targetHost);
+    }
+    const further = unwrapLink(target.href);
+    if (further && further.href !== target.href) {
+      hosts.unresolved = true;
+    }
+  }
+  return hosts;
+}
+function* attributesOf(html2) {
+  TAG_START.lastIndex = 0;
+  let match;
+  while ((match = TAG_START.exec(html2)) !== null) {
+    let i = match.index + match[0].length;
+    while (i < html2.length && html2[i] !== ">") {
+      if (isSpace(html2.codePointAt(i)) || html2[i] === "/") {
+        i++;
+        continue;
+      }
+      let j = i;
+      while (j < html2.length && html2[j] !== "=" && html2[j] !== ">" && html2[j] !== "/" && !isSpace(html2.codePointAt(j))) {
+        j++;
+      }
+      const name = html2.slice(i, j).toLowerCase();
+      if (j === i) {
+        j++;
+      }
+      while (j < html2.length && isSpace(html2.codePointAt(j))) {
+        j++;
+      }
+      if (html2[j] !== "=") {
+        i = j;
+        continue;
+      }
+      j++;
+      while (j < html2.length && isSpace(html2.codePointAt(j))) {
+        j++;
+      }
+      let value;
+      if (html2[j] === '"' || html2[j] === "'") {
+        const close = html2.indexOf(html2[j], j + 1);
+        const stop = close === -1 ? html2.length : close;
+        value = html2.slice(j + 1, stop);
+        j = stop + 1;
+      } else {
+        const start = j;
+        while (j < html2.length && html2[j] !== ">" && !isSpace(html2.codePointAt(j))) {
+          j++;
+        }
+        value = html2.slice(start, j);
+      }
+      if (name) {
+        yield [name, value];
+      }
+      i = j;
+    }
+    TAG_START.lastIndex = Math.max(i, match.index + 1);
+  }
+}
+function linksOf(name, value, { add, embed, cut }) {
+  if (value.length > MAX_VALUE2) {
+    cut();
+    value = value.slice(0, MAX_VALUE2);
+  }
+  const decoded = decodeEntities(value, { attribute: true });
+  switch (name) {
+    case "srcdoc": {
+      embed(decoded);
+      break;
+    }
+    case "style": {
+      for (const [, link] of decoded.matchAll(CSS_URL)) {
+        add(link);
+      }
+      break;
+    }
+    case "srcset": {
+      for (const candidate of decoded.split(",")) {
+        add(candidate.trim().split(/\s/, 1)[0]);
+      }
+      break;
+    }
+    // (several, separated by spaces)
+    case "ping": {
+      for (const link of decoded.split(/\s+/)) {
+        add(link);
+      }
+      break;
+    }
+    // (only the address of a refresh)
+    case "content": {
+      const match = /(?:^|[\s;,])url\s*=\s*["']?([^\s"';]+)/i.exec(decoded.slice(0, 4096));
+      if (match) {
+        add(match[1]);
+      }
+      break;
+    }
+    default: {
+      add(decoded);
+    }
+  }
+}
+function lenientLinks(html2, done, reader) {
+  LENIENT.lastIndex = 0;
+  let match;
+  while (!done() && (match = LENIENT.exec(html2)) !== null) {
+    const name = match[1].toLowerCase();
+    let i = LENIENT.lastIndex;
+    let end = i;
+    if (html2[i] === '"' || html2[i] === "'") {
+      const quote = html2[i];
+      i++;
+      end = i;
+      while (end < html2.length && html2[end] !== quote && html2[end] !== "<" && html2[end] !== ">") {
+        end++;
+      }
+      if (end < html2.length && html2[end] !== quote) {
+        const close = html2.indexOf(quote, end);
+        if (close !== -1 && close - i <= MAX_LENIENT_VALUE && !reader.spend(close - i)) {
+          linksOf(name, html2.slice(i, close), reader);
+        }
+      }
+    } else {
+      while (end < html2.length && !isSpace(html2.codePointAt(end)) && !UNQUOTED_END.has(html2[end])) {
+        end++;
+      }
+    }
+    if (reader.spend(end - i)) {
+      break;
+    }
+    linksOf(name, html2.slice(i, end), reader);
+  }
+}
+function endsLink2(text, i) {
+  const code = text.codePointAt(i);
+  if (code < 128) {
+    return isSpace(code) || code === 34 || code === 39 || code === 60 || code === 62 || code === 96;
+  }
+  return /\s/u.test(text[i]);
+}
+function linkReader(text) {
+  let read = 0;
+  let space = -1;
+  let scheme = -1;
+  return (start) => {
+    for (; read < start; read++) {
+      if (endsLink2(text, read)) {
+        space = read;
+      } else if (text[read] === "/" && text[read - 1] === "/" && text[read - 2] === ":") {
+        scheme = read;
+      }
+    }
+    return scheme > space;
+  };
+}
+function isSchemeless(text, start) {
+  if (start < 2 || text[start - 2] !== "/") {
+    return false;
+  }
+  if (start === 2) {
+    return true;
+  }
+  const before = text[start - 3];
+  return !(before === ":" || before === "/" || isHostCode2(text.codePointAt(start - 3)));
+}
+function bareName(name) {
+  const labels = name.split(".");
+  const tld = labels.pop();
+  if (!/^(?:[a-z]{2,24}|xn--[a-z\d-]{1,59})$/i.test(tld)) {
+    return null;
+  }
+  const names = [];
+  while (labels.length > 0 && names.length < 11) {
+    const label = labels.pop();
+    if (!/^[a-z\d-]{1,63}$/i.test(label)) {
+      break;
+    }
+    names.unshift(label);
+  }
+  if (names.length === 0) {
+    return null;
+  }
+  names[0] = names[0].replace(/^-+/, "");
+  if (!names[0]) {
+    return null;
+  }
+  return `${names.join(".")}.${tld}`.toLowerCase();
+}
+function isRealName(host) {
+  const parsed = (0, import_tldts4.parse)(host);
+  return Boolean(parsed.isIcann && parsed.domain);
+}
+function bareHosts(text, add, { done, seen, from = 0, cutEnd = false }) {
+  let previous = -1;
+  const inLink = linkReader(text);
+  for (let slash = text.indexOf("/"); slash !== -1; slash = text.indexOf("/", slash + 1)) {
+    if (done()) {
+      return;
+    }
+    const floor = Math.max(previous + 1, slash - MAX_HOST);
+    previous = slash;
+    let end = slash;
+    while (end > floor && text.codePointAt(end - 1) >= 48 && text.codePointAt(end - 1) <= 57) {
+      end--;
+    }
+    end = end > floor && text[end - 1] === ":" ? end - 1 : slash;
+    let start = end;
+    while (start > floor && isHostCode2(text.codePointAt(start - 1))) {
+      start--;
+    }
+    if (start === end || start < from || cutEnd && slash === text.length - 1) {
+      continue;
+    }
+    if (start > 0 && (IN_WORD2.test(text[start - 1]) || text[start - 1] === "/" && !isSchemeless(text, start)) || inLink(start)) {
+      continue;
+    }
+    while (end > start && text[end - 1] === ".") {
+      end--;
+    }
+    const host = bareName(text.slice(start, end));
+    if (!host || seen.has(host)) {
+      continue;
+    }
+    if (seen.size < MAX_SEEN) {
+      seen.add(host);
+    }
+    if (isRealName(host)) {
+      add(`http://${host}/`);
+    }
+  }
+}
+function looseHosts(text, add, { from = 0, cutEnd = false, seen, done }) {
+  const inLink = linkReader(text);
+  const { length } = text;
+  let i = 0;
+  while (i < length) {
+    if (!isHostCode2(text.codePointAt(i))) {
+      i++;
+      continue;
+    }
+    const start = i;
+    while (i < length && isHostCode2(text.codePointAt(i))) {
+      i++;
+    }
+    let end = i;
+    if (end - start > MAX_HOST || start < from || cutEnd && end === length) {
+      continue;
+    }
+    while (end > start && text[end - 1] === ".") {
+      end--;
+    }
+    const before = start > 0 ? text[start - 1] : "";
+    const after = end < length ? text[end] : "";
+    if (after === "/" || after === "@" || before === "@") {
+      continue;
+    }
+    if (before && (IN_WORD2.test(before) || before === "/" || before === "\\" || before === "&" || before === "#")) {
+      continue;
+    }
+    if (after && after !== "." && IN_WORD2.test(after)) {
+      continue;
+    }
+    const name = text.slice(start, end);
+    if (!name.includes(".") || inLink(start)) {
+      continue;
+    }
+    const lower = name.toLowerCase();
+    if (seen.has(lower)) {
+      continue;
+    }
+    if (seen.size < MAX_SEEN) {
+      seen.add(lower);
+    }
+    if (done()) {
+      return;
+    }
+    const host = bareName(name);
+    if (host && isRealName(host)) {
+      add(host);
+    }
+  }
+}
+function* chunksOf(html2) {
+  let start = 0;
+  let cutStart = false;
+  while (start < html2.length) {
+    const end = Math.min(html2.length, start + DECODE_CHUNK);
+    if (end < html2.length) {
+      let cut = end;
+      while (cut > end - 65536 && cut > start) {
+        if (html2[cut] === "<" || isSpace(html2.codePointAt(cut))) {
+          break;
+        }
+        cut--;
+      }
+      if (cut > start && cut > end - 65536) {
+        yield { text: html2.slice(start, cut), cutStart, cutEnd: false };
+        start = cut;
+        cutStart = false;
+        continue;
+      }
+      let hard = end;
+      while (hard > start + CHUNK_OVERLAP + 1 && /[\dA-Za-z#]/.test(html2[hard - 1])) {
+        hard--;
+      }
+      if (hard < end && html2[hard - 1] === "&" && hard - 1 > start + CHUNK_OVERLAP) {
+        hard--;
+      } else {
+        hard = end;
+      }
+      yield { text: html2.slice(start, hard), cutStart, cutEnd: true };
+      start = hard - CHUNK_OVERLAP;
+      cutStart = true;
+      continue;
+    }
+    yield { text: html2.slice(start, end), cutStart, cutEnd: false };
+    start = end;
+  }
+}
+function withoutNul(text) {
+  return text.includes("\0") ? `${text}
+${text.replaceAll("\0", "")}` : text;
+}
+function hexValue(code) {
+  if (code >= 48 && code <= 57) {
+    return code - 48;
+  }
+  if (code >= 65 && code <= 70) {
+    return code - 55;
+  }
+  if (code >= 97 && code <= 102) {
+    return code - 87;
+  }
+  return -1;
+}
+function percentDecoded(text) {
+  const input = import_node_buffer7.Buffer.from(text);
+  const output = import_node_buffer7.Buffer.allocUnsafe(input.length);
+  let length = 0;
+  for (let i = 0; i < input.length; i++) {
+    const high = input[i] === 37 ? hexValue(input[i + 1]) : -1;
+    const low = high === -1 ? -1 : hexValue(input[i + 2]);
+    if (low === -1) {
+      output[length++] = input[i];
+      continue;
+    }
+    output[length++] = high * 16 + low;
+    i += 2;
+  }
+  return output.subarray(0, length);
+}
+function swapped(bytes) {
+  return import_node_buffer7.Buffer.from(bytes.subarray(0, bytes.length - bytes.length % 2)).swap16().toString("utf16le");
+}
+function decodeText(content, charset = "") {
+  if (content[0] === 255 && content[1] === 254) {
+    return content.subarray(2).toString("utf16le");
+  }
+  if (content[0] === 254 && content[1] === 255) {
+    return swapped(content.subarray(2));
+  }
+  if (UTF16LE.has(charset)) {
+    return content.toString("utf16le");
+  }
+  return UTF16BE.has(charset) ? swapped(content) : content.toString("utf8");
+}
+function dataDocument(value) {
+  const match = DATA_DOCUMENT.exec(value.slice(0, 1024));
+  if (!match) {
+    return null;
+  }
+  const bytes = percentDecoded(value.slice(match[0].length));
+  const content = /;\s*base64\s*$/i.test(match[1]) ? import_node_buffer7.Buffer.from(bytes.toString("latin1"), "base64") : bytes;
+  const charset = /;\s*charset\s*=\s*"?([^;"\s]+)/i.exec(match[1]);
+  return decodeText(content, charset ? charset[1].toLowerCase() : "");
+}
+function readEscapes(text, lenient = false) {
+  let index = text.indexOf("\\");
+  if (index === -1) {
+    return text;
+  }
+  let out = "";
+  let parts = [];
+  let start = 0;
+  while (index !== -1 && index + 1 < text.length) {
+    const next = text[index + 1];
+    if (lenient || "nN,;\\".includes(next)) {
+      parts.push(text.slice(start, index), next === "n" || next === "N" ? "\n" : next);
+      start = index + 2;
+      index = text.indexOf("\\", start);
+      if (parts.length >= 65536) {
+        out += parts.join("");
+        parts = [];
+      }
+    } else {
+      index = text.indexOf("\\", index + 1);
+    }
+  }
+  parts.push(text.slice(start));
+  return out + parts.join("");
+}
+function valueColon(line) {
+  let colon = line.indexOf(":");
+  let from = 0;
+  for (; ; ) {
+    const quote = line.indexOf('"', from);
+    if (quote === -1 || colon === -1 || colon < quote) {
+      return colon;
+    }
+    const end = line.indexOf('"', quote + 1);
+    if (end === -1) {
+      return -1;
+    }
+    from = end + 1;
+    if (colon < from) {
+      colon = line.indexOf(":", from);
+    }
+  }
+}
+function trimSpaceEnd(text) {
+  let end = text.length;
+  while (end > 0 && (text[end - 1] === " " || text[end - 1] === "	")) {
+    end--;
+  }
+  return end === text.length ? text : text.slice(0, end);
+}
+function decodeQuotedPrintable(value, charset) {
+  let decoder;
+  try {
+    decoder = new TextDecoder(charset || "utf8");
+  } catch {
+    decoder = new TextDecoder("utf8");
+  }
+  if (!/[\u0080-\u{10FFFF}]/u.test(value)) {
+    const bytes = import_node_buffer7.Buffer.from(value, "latin1");
+    let length = 0;
+    for (let index = 0; index < bytes.length; index++) {
+      const hex = bytes[index] === 61 ? value.slice(index + 1, index + 3) : "";
+      if (/^[\da-f]{2}$/i.test(hex)) {
+        bytes[length++] = Number.parseInt(hex, 16);
+        index += 2;
+      } else {
+        bytes[length++] = bytes[index];
+      }
+    }
+    return decoder.decode(bytes.subarray(0, length));
+  }
+  return value.replaceAll(/(?:=[\da-f]{2})+/gi, (run) => decoder.decode(import_node_buffer7.Buffer.from(run.replaceAll("=", ""), "hex")));
+}
+function quotedPrintableValues(text) {
+  if (!/quoted-printable/i.test(text)) {
+    return text;
+  }
+  const lines2 = text.split(LINE_BREAK);
+  const out = [];
+  for (let i = 0; i < lines2.length; i++) {
+    const line = lines2[i];
+    const colon = valueColon(line);
+    const parameters = colon === -1 ? "" : line.slice(0, colon);
+    if (colon === -1 || !QUOTED_PRINTABLE.test(parameters)) {
+      out.push(line);
+      continue;
+    }
+    const charset = /;\s*charset\s*=\s*"?([\w.:-]+)/i.exec(parameters)?.[1];
+    const parts = [trimSpaceEnd(line.slice(colon + 1))];
+    while (parts.at(-1).endsWith("=") && i + 1 < lines2.length) {
+      parts[parts.length - 1] = parts.at(-1).slice(0, -1);
+      parts.push(trimSpaceEnd(lines2[++i]));
+    }
+    out.push(line.slice(0, colon + 1) + decodeQuotedPrintable(parts.join(""), charset));
+  }
+  return out.join("\n");
+}
+function shownText(text) {
+  const unfolded = text.replaceAll(FOLD, "");
+  const shown = /* @__PURE__ */ new Set([text, readEscapes(unfolded)]);
+  const decoded = quotedPrintableValues(unfolded);
+  if (decoded !== unfolded) {
+    shown.add(readEscapes(decoded));
+    if (unfolded !== text) {
+      shown.add(quotedPrintableValues(text));
+    }
+  }
+  if (/\\[^nN,;\\]/.test(decoded)) {
+    shown.add(readEscapes(decoded, true));
+  }
+  return [...shown].reverse().join("\n");
+}
+function htmlDescriptions(text) {
+  if (!/[<&]|altrep/i.test(text)) {
+    return "";
+  }
+  const html2 = [];
+  for (const line of text.replaceAll(FOLD, "").split(LINE_BREAK)) {
+    const colon = valueColon(line);
+    if (colon === -1) {
+      continue;
+    }
+    const altrep = /;\s*altrep\s*=\s*"([^"]*)"/i.exec(line.slice(0, colon))?.[1];
+    if (altrep) {
+      html2.push(`<iframe src="${altrep.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;")}"></iframe>`);
+    }
+    if (!HTML_PROPERTIES.test(line)) {
+      continue;
+    }
+    const value = readEscapes(line.slice(colon + 1));
+    if (/[<&]/.test(value)) {
+      html2.push(value);
+    }
+  }
+  return html2.join("\n");
+}
+function withoutBinaryValues(text) {
+  if (!/base64|binary|encoding\s*=\s*"?b|;\s*b\s*[;:]/i.test(text)) {
+    return text;
+  }
+  const lines2 = text.split(LINE_BREAK);
+  const out = [];
+  for (let i = 0; i < lines2.length; i++) {
+    const line = lines2[i];
+    const colon = valueColon(line);
+    if (colon === -1 || !BINARY.test(line.slice(0, colon))) {
+      out.push(line);
+      continue;
+    }
+    const value = [line.slice(colon + 1)];
+    let next = i + 1;
+    while (next < lines2.length && (lines2[next].startsWith(" ") || lines2[next].startsWith("	"))) {
+      value.push(lines2[next++]);
+    }
+    if (!value.every((part) => /^[\w+/=\s]*$/.test(part))) {
+      for (let index = i; index < next; index++) {
+        out.push(lines2[index]);
+      }
+      i = next - 1;
+      continue;
+    }
+    while (next < lines2.length && lines2[next] !== "" && /^[\w+/=]+$/.test(lines2[next])) {
+      value.push(lines2[next++]);
+    }
+    if (next < lines2.length && lines2[next] === "") {
+      next++;
+    }
+    i = next - 1;
+    const name = line.slice(0, colon).split(";")[0].split(".").pop().trim().toLowerCase();
+    out.push(MEDIA_PROPERTIES.has(name) ? line.slice(0, colon + 1) : line.slice(0, colon + 1) + import_node_buffer7.Buffer.from(value.join("").replaceAll(/\s/g, ""), "base64").toString("utf8"));
+  }
+  return out.join("\n");
+}
+function extensionOf2(filename) {
+  let end = filename.length;
+  while (end > 0 && (filename[end - 1] === "." || filename[end - 1] === " ")) {
+    end--;
+  }
+  const name = filename.slice(0, end).trim().toLowerCase();
+  const index = name.lastIndexOf(".");
+  return index !== -1 && index < name.length - 1 ? name.slice(index + 1) : null;
+}
+function extensionsOf(attachment) {
+  const names = [];
+  if (typeof attachment.filename === "string") {
+    names.push(attachment.filename);
+  }
+  const { headers } = attachment;
+  if (headers && typeof headers.get === "function") {
+    for (const [field, parameter] of [["content-type", "name"], ["content-disposition", "filename"]]) {
+      const value = headers.get(field)?.params?.[parameter];
+      if (typeof value === "string" && value !== "") {
+        names.push(value);
+      }
+    }
+  }
+  return new Set(names.flatMap((name) => [extensionOf2(name), extensionOf(name)]).filter(Boolean));
+}
+function charsetOf(attachment) {
+  const { headers } = attachment;
+  const charset = headers && typeof headers.get === "function" ? headers.get("content-type")?.params?.charset : null;
+  return typeof charset === "string" ? charset.toLowerCase() : "";
+}
+function kindOf(attachment) {
+  const { content } = attachment ?? {};
+  if (!import_node_buffer7.Buffer.isBuffer(content) || content.length === 0) {
+    return null;
+  }
+  const type = typeof attachment.contentType === "string" ? attachment.contentType.toLowerCase() : "";
+  const extensions = extensionsOf(attachment);
+  const has = (set) => [...extensions].some((name) => set.has(name));
+  if (MESSAGE_TYPES.has(type) || extensions.has("eml") || extensions.has("u8msg")) {
+    return null;
+  }
+  const isHtml = HTML_TYPES.has(type) || has(HTML_EXTENSIONS);
+  const isCard = !isHtml && (CARD_TYPES.has(type) || has(CARD_EXTENSIONS));
+  const isText = isCard || !isHtml && type === "text/plain";
+  return isHtml || isText ? { isHtml, isText, isCard } : null;
+}
+function* documentsOf(attachments, state, late) {
+  const read = [];
+  let bytes = 0;
+  let opened = 0;
+  for (const attachment of attachments) {
+    const kind = kindOf(attachment);
+    if (!kind) {
+      continue;
+    }
+    if (!kind.isText && ++opened > MAX_ATTACHED || bytes + attachment.content.length > MAX_ATTACHED_BYTES) {
+      state.tooComplex = true;
+      break;
+    }
+    bytes += attachment.content.length;
+    read.push({ attachment, kind });
+  }
+  for (const { attachment, kind: { isHtml, isCard } } of read) {
+    if (late()) {
+      state.incomplete = true;
+      return;
+    }
+    const text = decodeText(attachment.content, charsetOf(attachment));
+    if (isHtml) {
+      yield { html: text };
+      continue;
+    }
+    if (!isCard) {
+      yield { text };
+      continue;
+    }
+    let readable = withoutBinaryValues(text.length > MAX_CARD_BYTES ? text.slice(0, MAX_CARD_BYTES) : text);
+    if (text.length > MAX_CARD_BYTES || readable.length > MAX_SHOWN_BYTES) {
+      state.tooComplex = true;
+      readable = readable.slice(0, MAX_SHOWN_BYTES);
+    }
+    if (late()) {
+      state.incomplete = true;
+      return;
+    }
+    yield { text: shownText(readable) };
+    if (late()) {
+      state.incomplete = true;
+      return;
+    }
+    const html2 = htmlDescriptions(readable);
+    if (html2 !== "") {
+      yield { html: html2 };
+    }
+  }
+}
+function carriedLinkHosts(mail, {
+  mails = [],
+  attachments = [],
+  maxHosts = 250,
+  hostsInText = false
+} = {}) {
+  const hosts = /* @__PURE__ */ new Set();
+  const loose = /* @__PURE__ */ new Set();
+  const seen = /* @__PURE__ */ new Set();
+  const seenBare = /* @__PURE__ */ new Set();
+  const seenLoose = /* @__PURE__ */ new Set();
+  let more = false;
+  let full = false;
+  const domains = /* @__PURE__ */ new Set();
+  const state = { tooComplex: false, incomplete: false };
+  const until = Date.now() + MAX_READ_TIME;
+  const late = () => {
+    if (!state.incomplete && Date.now() > until) {
+      state.incomplete = true;
+    }
+    return state.incomplete;
+  };
+  let calls = 0;
+  const done = () => full || state.incomplete || ++calls % LATE_EVERY === 0 && late();
+  const looseDone = () => done() || loose.size > maxHosts;
+  const addLoose = (host) => {
+    if (!looseDone()) {
+      loose.add(host);
+    }
+  };
+  const queue = [mail, ...mails].map((document) => ({ document, depth: 0 }));
+  const carried = documentsOf(attachments, state, late);
+  let depth = 0;
+  let embedded = 0;
+  let embeddedLength = 0;
+  const embeddedSeen = /* @__PURE__ */ new Set();
+  const embed = (html2) => {
+    if (html2 === "" || embeddedSeen.has(html2)) {
+      return;
+    }
+    if (depth >= MAX_EMBED_DEPTH || embedded >= MAX_EMBEDDED || embeddedLength + html2.length > MAX_EMBEDDED_LENGTH) {
+      state.tooComplex = true;
+      return;
+    }
+    embeddedSeen.add(html2);
+    embedded++;
+    embeddedLength += html2.length;
+    queue.push({ document: { html: html2 }, depth: depth + 1 });
+  };
+  const add = (value) => {
+    if (full || typeof value !== "string" || value === "" || seen.has(value)) {
+      return;
+    }
+    if (seen.size < MAX_SEEN) {
+      seen.add(value);
+    }
+    if (/^\s*data:/i.test(value)) {
+      const html2 = dataDocument(value);
+      if (html2 !== null) {
+        embed(html2);
+      }
+      return;
+    }
+    const found = hostsOf(value);
+    if (found.unresolved) {
+      state.tooComplex = true;
+    }
+    for (const host of found) {
+      if (hosts.has(host)) {
+        continue;
+      }
+      const domain = registrableDomain(host);
+      if (hosts.size < maxHosts || !domains.has(domain) && domains.size < maxHosts) {
+        hosts.add(host);
+        domains.add(domain);
+        continue;
+      }
+      more = true;
+      if (domains.size >= maxHosts) {
+        full = true;
+        return;
+      }
+    }
+  };
+  let spent = 0;
+  const spend = (length) => {
+    spent += length;
+    if (spent < LONG_VALUE) {
+      return false;
+    }
+    spent = 0;
+    return late();
+  };
+  const reader = {
+    add,
+    embed,
+    spend,
+    cut() {
+      state.tooComplex = true;
+    }
+  };
+  const readText = (source, { cutStart = false, cutEnd = false, exact = false } = {}) => {
+    for (const match of source.matchAll(URL_START)) {
+      if (done()) {
+        break;
+      }
+      if (cutStart && match.index === 0) {
+        continue;
+      }
+      if (cutEnd && match.index + match[0].length === source.length) {
+        if (exact && source.length - match.index < CHUNK_OVERLAP) {
+          continue;
+        }
+        const value = match[0];
+        const at = /^www\./i.test(value) ? 0 : value.indexOf("//") + 2;
+        if (!/[/?#\\]/.test(value.slice(at))) {
+          state.tooComplex = true;
+          continue;
+        }
+        add(value);
+        const url = urlOf(value);
+        if (url && isClickTracker(url)) {
+          state.tooComplex = true;
+        }
+        continue;
+      }
+      add(match[0]);
+    }
+    const from = cutStart ? 1 : 0;
+    bareHosts(source, add, {
+      done,
+      seen: seenBare,
+      from,
+      cutEnd
+    });
+    if (hostsInText && !looseDone()) {
+      looseHosts(source, addLoose, {
+        from,
+        cutEnd,
+        seen: seenLoose,
+        done: looseDone
+      });
+    }
+  };
+  for (let index = 0; ; index++) {
+    if (full || late()) {
+      break;
+    }
+    if (index >= queue.length) {
+      const next = carried.next();
+      if (next.done) {
+        break;
+      }
+      queue.push({ document: next.value, depth: 0 });
+    }
+    ({ depth } = queue[index]);
+    const { document } = queue[index];
+    const html2 = withoutNul(typeof document?.html === "string" ? document.html : "");
+    const text = withoutNul(typeof document?.text === "string" ? document.text : "");
+    for (const [name, value] of attributesOf(html2)) {
+      if (done()) {
+        break;
+      }
+      if (!LINK_ATTRIBUTES.has(name)) {
+        continue;
+      }
+      if (spend(value.length)) {
+        break;
+      }
+      linksOf(name, value, reader);
+    }
+    lenientLinks(html2, done, reader);
+    for (const pattern of [CSS_URL, CSS_IMPORT]) {
+      for (const [, link] of html2.matchAll(pattern)) {
+        if (done() || spend(link.length)) {
+          break;
+        }
+        if (link.length > MAX_VALUE2) {
+          state.tooComplex = true;
+        }
+        add(decodeEntities(link.slice(0, MAX_VALUE2), { attribute: true }));
+      }
+    }
+    for (const chunk2 of chunksOf(text)) {
+      if (full || late()) {
+        break;
+      }
+      readText(chunk2.text, { ...chunk2, exact: true });
+    }
+    for (const chunk2 of chunksOf(html2)) {
+      if (full || late()) {
+        break;
+      }
+      const decoded = decodeEntities(chunk2.text);
+      readText(decoded, { ...chunk2, exact: decoded.endsWith(chunk2.text.slice(-CHUNK_OVERLAP)) });
+    }
+  }
+  if (!more && !state.incomplete) {
+    for (const name of loose) {
+      if (hosts.size >= maxHosts) {
+        break;
+      }
+      const [host] = hostsOf(`http://${name}/`);
+      if (host) {
+        hosts.add(host);
+      }
+    }
+  }
+  return {
+    hosts: [...hosts],
+    more,
+    tooComplex: state.tooComplex,
+    incomplete: state.incomplete
+  };
+}
+var import_node_buffer7, import_node_net4, import_tldts4, LINK_ATTRIBUTES, TAG_START, URL_START, CSS_URL, CSS_IMPORT, LENIENT, IN_WORD2, NAMESPACES, MAX_HOST, MAX_SEEN, TRAILING, DECODE_CHUNK, CHUNK_OVERLAP, MAX_EMBED_DEPTH, MAX_EMBEDDED, MAX_EMBEDDED_LENGTH, MAX_ATTACHED, MAX_ATTACHED_BYTES, MAX_READ_TIME, MAX_CARD_BYTES, MAX_SHOWN_BYTES, MAX_VALUE2, LONG_VALUE, MAX_LENIENT_VALUE, UNQUOTED_END, UTF16LE, UTF16BE, DATA_DOCUMENT, LINE_BREAK, FOLD, QUOTED_PRINTABLE, MEDIA_PROPERTIES, HTML_PROPERTIES, BINARY, HTML_TYPES, HTML_EXTENSIONS, CARD_TYPES, CARD_EXTENSIONS, MESSAGE_TYPES, LATE_EVERY;
+var init_links = __esm({
+  "src/links.js"() {
+    import_node_buffer7 = require("node:buffer");
+    import_node_net4 = require("node:net");
+    import_tldts4 = require("tldts");
+    init_attachments();
+    init_dnsbl();
+    init_html();
+    init_tokenizer();
+    LINK_ATTRIBUTES = /* @__PURE__ */ new Set([
+      "href",
+      "src",
+      "srcset",
+      "background",
+      "action",
+      "formaction",
+      "poster",
+      "cite",
+      "longdesc",
+      "xlink:href",
+      "style",
+      "data",
+      "ping",
+      // (of a <meta> refresh: "0;url=https://example.com/")
+      "content",
+      // (a document of its own, see linksOf)
+      "srcdoc"
+    ]);
+    TAG_START = /<[a-z][^\s/>]*/gi;
+    URL_START = /\b(?:https?:\/\/|www\.)[^\s<>"'`]+/gi;
+    CSS_URL = /url\(\s*["']?([^()"']*)/gi;
+    CSS_IMPORT = /@import\s+["']([^"'<>]*)/gi;
+    LENIENT = /[\s"'/<](href|src|srcset|background|action|formaction|poster|cite|longdesc|xlink:href|style|data|ping|content|srcdoc)\s*=\s*/gi;
+    IN_WORD2 = /[\p{L}\p{N}\p{M}_%]/u;
+    NAMESPACES = /* @__PURE__ */ new Set(["www.w3.org", "w3.org"]);
+    MAX_HOST = 760;
+    MAX_SEEN = 1e5;
+    TRAILING = /* @__PURE__ */ new Set([")", ".", ",", ";", ":", "!", "?", "'", '"', "]"]);
+    DECODE_CHUNK = 1024 * 1024;
+    CHUNK_OVERLAP = 4096;
+    MAX_EMBED_DEPTH = 3;
+    MAX_EMBEDDED = 1e3;
+    MAX_EMBEDDED_LENGTH = 10 * 1024 * 1024;
+    MAX_ATTACHED = 100;
+    MAX_ATTACHED_BYTES = 50 * 1024 * 1024;
+    MAX_READ_TIME = 5e3;
+    MAX_CARD_BYTES = 4 * 1024 * 1024;
+    MAX_SHOWN_BYTES = 1024 * 1024;
+    MAX_VALUE2 = 1024 * 1024;
+    LONG_VALUE = 64 * 1024;
+    MAX_LENIENT_VALUE = 4096;
+    UNQUOTED_END = /* @__PURE__ */ new Set(["<", ">", '"', "'", "`", "="]);
+    UTF16LE = /* @__PURE__ */ new Set(["csunicode", "iso-10646-ucs-2", "ucs-2", "unicode", "unicodefeff", "utf-16", "utf-16le"]);
+    UTF16BE = /* @__PURE__ */ new Set(["unicodefffe", "utf-16be"]);
+    DATA_DOCUMENT = /^\s*data:\s*(?:text\/html|application\/xhtml\+xml|image\/svg\+xml|text\/xml|application\/xml)\b([^,]*),/i;
+    LINE_BREAK = /\r\n?|\n/;
+    FOLD = /(?:\r\n?|\n)[ \t]/g;
+    QUOTED_PRINTABLE = /;\s*(?:encoding\s*=\s*)?"?quoted-printable"?\s*(?:;|$)/i;
+    MEDIA_PROPERTIES = /* @__PURE__ */ new Set(["photo", "logo", "sound", "key", "attach"]);
+    HTML_PROPERTIES = /^(?:x-alt-desc|styled-description|description|comment)[;:]/i;
+    BINARY = /;\s*(?:(?:encoding\s*=\s*)?"?(?:b|base64)"?|value\s*=\s*"?binary"?)\s*(?:;|$)/i;
+    HTML_TYPES = /* @__PURE__ */ new Set(["text/html", "application/xhtml+xml", "image/svg+xml", "text/xml", "application/xml"]);
+    HTML_EXTENSIONS = /* @__PURE__ */ new Set(["html", "htm", "shtml", "xhtml", "xht", "svg", "xml"]);
+    CARD_TYPES = /* @__PURE__ */ new Set(["text/calendar", "text/x-vcalendar", "application/ics", "text/vcard", "text/x-vcard", "text/directory"]);
+    CARD_EXTENSIONS = /* @__PURE__ */ new Set(["ics", "ical", "ifb", "vcs", "vcf", "vcard"]);
+    MESSAGE_TYPES = /* @__PURE__ */ new Set(["message/rfc822", "message/global"]);
+    LATE_EVERY = 1024;
+  }
+});
+
 // src/is-arbitrary.js
 function unquoted(text) {
   let start = 0;
@@ -6079,13 +7294,13 @@ function joinsDisplay(brand, display, name) {
   return false;
 }
 function isOfficial({ brand, official }, domain, display, shared = true) {
-  const parsed = (0, import_tldts4.parse)(domain);
+  const parsed = (0, import_tldts5.parse)(domain);
   const name = parsed.domainWithoutSuffix ?? "";
   const compact = brand.replaceAll(" ", "");
   if (parsed.publicSuffix === compact || compact.length >= 5 && joinsDisplay(brand, display, name) && !JOINED_WORDS.some((word) => name.slice(compact.length).includes(word))) {
     return true;
   }
-  return official.some((entry) => entry instanceof RegExp ? entry.test(registrableDomain(domain)) : entry.includes(".") ? (shared || (0, import_tldts4.parse)(entry).domain !== null) && (domain === entry || domain.endsWith(`.${entry}`)) : name === entry);
+  return official.some((entry) => entry instanceof RegExp ? entry.test(registrableDomain(domain)) : entry.includes(".") ? (shared || (0, import_tldts5.parse)(entry).domain !== null) && (domain === entry || domain.endsWith(`.${entry}`)) : name === entry);
 }
 function headerString(mail, name) {
   const value = mail.headers?.get?.(name);
@@ -6187,7 +7402,7 @@ ${withoutHelp(markup)}`) || isInjection(readable) || attributeText(markup).some(
       }
     } else if (claimed && isWholeName(name, claimed)) {
       const domain = claimed[1];
-      const brand = MAILBOXES.has((0, import_tldts4.parse)(domain).domainWithoutSuffix) ? null : DISPLAY_BRANDS.find((entry) => isOfficial(entry, domain, "", false) && !isOfficial(entry, session.originalFromAddressDomain, ""));
+      const brand = MAILBOXES.has((0, import_tldts5.parse)(domain).domainWithoutSuffix) ? null : DISPLAY_BRANDS.find((entry) => isOfficial(entry, domain, "", false) && !isOfficial(entry, session.originalFromAddressDomain, ""));
       if (brand) {
         hit("FROM_NAME_BRAND", 2, `Display name is an address of "${brand.brand}" but the message is from ${fromRoot}`, "PHISHING");
       }
@@ -6220,10 +7435,10 @@ ${withoutHelp(markup)}`) || isInjection(readable) || attributeText(markup).some(
     category
   };
 }
-var import_tldts4, GTUBE, BLOCKED_SUBJECT, HACKED_SUBJECT, COIN, CODE, CURRENCY, MONEY, CRYPTOCURRENCY, AMOUNT_DEMAND, AMOUNT_GIVEN, HARM_VERB, HARMED, RECORDING, THREAT, HOURS, COUNT, DEADLINE, isPaymentDemand, BITCOIN_ADDRESS, IGNORE_INSTRUCTIONS, AI_ACTION, AI_OBJECT, AI_ACTION_OBJECT, AI_NEAR, VERDICT, VERDICT_WORD, VERDICT_ORDER, VERDICT_CLAIM, CLASSIFY, SYSTEM_PROMPT, YOU_ARE, QUOTE, CONDITION, DISCUSSED, DISCUSSED_SHOWN, DISCUSSED_NEAR, isDiscussed, isInjection, QUOTE_OR_SPACE, SHOWN_NEAR, isOrder, PAYPAL_DOMAIN, PAYPAL_SPAM_TYPE_IDS, PAYPAL_OWN_REQUEST, PAYPAL_INVOICE_SUBJECT, MS_SPAM_VERDICT, MS_SPAM_CATEGORY, APPLE_NEXT, APPLE_FILLER, APPLE_STRONG, APPLE_BUSINESS, APPLE_ALONE, APPLE_BESIDE, APPLE_PART, NEXT_WORD, MAX_AFTER, APPLE, DISPLAY_BRANDS, ADDRESSES, LIST_HOSTS, VIA_LIST, MAILBOXES, BEFORE_ADDRESS, AFTER_ADDRESS, isWholeName, JOINED_WORDS, MAX_DISPLAY;
+var import_tldts5, GTUBE, BLOCKED_SUBJECT, HACKED_SUBJECT, COIN, CODE, CURRENCY, MONEY, CRYPTOCURRENCY, AMOUNT_DEMAND, AMOUNT_GIVEN, HARM_VERB, HARMED, RECORDING, THREAT, HOURS, COUNT, DEADLINE, isPaymentDemand, BITCOIN_ADDRESS, IGNORE_INSTRUCTIONS, AI_ACTION, AI_OBJECT, AI_ACTION_OBJECT, AI_NEAR, VERDICT, VERDICT_WORD, VERDICT_ORDER, VERDICT_CLAIM, CLASSIFY, SYSTEM_PROMPT, YOU_ARE, QUOTE, CONDITION, DISCUSSED, DISCUSSED_SHOWN, DISCUSSED_NEAR, isDiscussed, isInjection, QUOTE_OR_SPACE, SHOWN_NEAR, isOrder, PAYPAL_DOMAIN, PAYPAL_SPAM_TYPE_IDS, PAYPAL_OWN_REQUEST, PAYPAL_INVOICE_SUBJECT, MS_SPAM_VERDICT, MS_SPAM_CATEGORY, APPLE_NEXT, APPLE_FILLER, APPLE_STRONG, APPLE_BUSINESS, APPLE_ALONE, APPLE_BESIDE, APPLE_PART, NEXT_WORD, MAX_AFTER, APPLE, DISPLAY_BRANDS, ADDRESSES, LIST_HOSTS, VIA_LIST, MAILBOXES, BEFORE_ADDRESS, AFTER_ADDRESS, isWholeName, JOINED_WORDS, MAX_DISPLAY;
 var init_is_arbitrary = __esm({
   "src/is-arbitrary.js"() {
-    import_tldts4 = require("tldts");
+    import_tldts5 = require("tldts");
     init_homograph();
     init_html();
     init_linear();
@@ -6474,7 +7689,7 @@ function authHeaders(config) {
     case "basic": {
       const user = config.username ?? "";
       const pass = config.password ?? config.apiKey ?? "";
-      headers.authorization = `Basic ${import_node_buffer7.Buffer.from(`${user}:${pass}`).toString("base64")}`;
+      headers.authorization = `Basic ${import_node_buffer8.Buffer.from(`${user}:${pass}`).toString("base64")}`;
       break;
     }
     case "x-api-key": {
@@ -6921,10 +8136,10 @@ function replyText(api, reply2) {
   }
   return reply2?.choices?.[0]?.message?.content || null;
 }
-var import_node_buffer7, import_node_crypto2, import_node_os, import_node_process, PROVIDERS, DECISION_APIS, TOP_LOGPROBS, VERDICTS, VERDICT_CRITERIA, SIGNS, GUIDE, DEFAULT_SYSTEM_PROMPT, DECISION_SYSTEM_PROMPT, DECISION_INSTRUCTIONS, LOCALHOST, PRIVATE_HOST, REDACTIONS, THINK_OPEN, THINK_CLOSE, ANSWER_FIRST, LOCAL_CHARACTER, BREAKS2, VERDICT_WORD2, NOT, DENIED, JOINED, SPAM_LABEL, HAM_WORDS, HAM_LABEL, NOT_HAM_LABEL, UNWANTED, MIN_VERDICT_MASS, percent, MODES, LLMClassifier;
+var import_node_buffer8, import_node_crypto2, import_node_os, import_node_process, PROVIDERS, DECISION_APIS, TOP_LOGPROBS, VERDICTS, VERDICT_CRITERIA, SIGNS, GUIDE, DEFAULT_SYSTEM_PROMPT, DECISION_SYSTEM_PROMPT, DECISION_INSTRUCTIONS, LOCALHOST, PRIVATE_HOST, REDACTIONS, THINK_OPEN, THINK_CLOSE, ANSWER_FIRST, LOCAL_CHARACTER, BREAKS2, VERDICT_WORD2, NOT, DENIED, JOINED, SPAM_LABEL, HAM_WORDS, HAM_LABEL, NOT_HAM_LABEL, UNWANTED, MIN_VERDICT_MASS, percent, MODES, LLMClassifier;
 var init_llm = __esm({
   "src/llm.js"() {
-    import_node_buffer7 = require("node:buffer");
+    import_node_buffer8 = require("node:buffer");
     import_node_crypto2 = require("node:crypto");
     import_node_os = __toESM(require("node:os"), 1);
     import_node_process = __toESM(require("node:process"), 1);
@@ -7676,7 +8891,7 @@ var init_package = __esm({
     package_default = {
       name: "spamscanner",
       description: "Spam, phishing and malware filter for email in any language: a trainable classifier, link and attachment checks, SPF/DKIM/DMARC, and an optional AI second opinion from any LLM, including local Ollama models. Works as a library, CLI, Postfix milter or HTTP API.",
-      version: "7.0.10",
+      version: "7.0.12",
       author: "Forward Email (https://forwardemail.net)",
       bin: {
         spamscanner: "./dist/esm/cli.js"
@@ -7865,10 +9080,10 @@ function splitMessage(raw) {
   const match = /^\r?\n|\r?\n\r?\n/.exec(text);
   if (!match) {
     const newline2 = text.includes("\n") && !text.includes("\r\n") ? "\n" : "\r\n";
-    return { header: text.replace(/\r?\n$/, ""), body: import_node_buffer8.Buffer.alloc(0), newline: newline2 };
+    return { header: text.replace(/\r?\n$/, ""), body: import_node_buffer9.Buffer.alloc(0), newline: newline2 };
   }
   const newline = match[0].startsWith("\r") ? "\r\n" : "\n";
-  return { header: text.slice(0, match.index), body: raw.subarray(import_node_buffer8.Buffer.byteLength(text.slice(0, match.index + match[0].length), "latin1")), newline };
+  return { header: text.slice(0, match.index), body: raw.subarray(import_node_buffer9.Buffer.byteLength(text.slice(0, match.index + match[0].length), "latin1")), newline };
 }
 function subjectTagText(tag, spaceAfter = false) {
   const line = String(tag).replaceAll(new RegExp("\\p{Cc}+", "gu"), " ").trim();
@@ -7878,14 +9093,14 @@ function subjectTagText(tag, spaceAfter = false) {
   const words2 = [];
   let chunk2 = "";
   for (const character of spaceAfter ? `${line} ` : line) {
-    if (import_node_buffer8.Buffer.byteLength(chunk2 + character, "utf8") > ENCODED_BYTES) {
+    if (import_node_buffer9.Buffer.byteLength(chunk2 + character, "utf8") > ENCODED_BYTES) {
       words2.push(chunk2);
       chunk2 = "";
     }
     chunk2 += character;
   }
   words2.push(chunk2);
-  return words2.map((word) => `=?UTF-8?B?${import_node_buffer8.Buffer.from(word, "utf8").toString("base64")}?=`).join(" ");
+  return words2.map((word) => `=?UTF-8?B?${import_node_buffer9.Buffer.from(word, "utf8").toString("base64")}?=`).join(" ");
 }
 function taggedSubject(tag, current, newline = "\r\n") {
   const unfolded = current.replaceAll(/\r?\n/g, "");
@@ -7916,7 +9131,7 @@ function taggedSubject(tag, current, newline = "\r\n") {
   return lines2.join(newline).slice("Subject: ".length);
 }
 function rewriteMessage(source, headers = [], options = {}) {
-  const raw = import_node_buffer8.Buffer.isBuffer(source) ? source : import_node_buffer8.Buffer.from(String(source), "utf8");
+  const raw = import_node_buffer9.Buffer.isBuffer(source) ? source : import_node_buffer9.Buffer.from(String(source), "utf8");
   const { header, body, newline } = splitMessage(raw);
   const remove = options.remove ?? /^x-spam-/i;
   const lines2 = header === "" ? [] : header.split(/\r?\n/);
@@ -7941,15 +9156,18 @@ function rewriteMessage(source, headers = [], options = {}) {
       }
     }
   }
-  const added = headers.map(([name, value]) => foldHeader(name, import_node_buffer8.Buffer.from(String(value), "utf8").toString("latin1"), newline));
-  const mbox = kept.length > 0 && kept[0][0].startsWith("From ") ? kept.shift() : [];
+  const added = headers.map(([name, value]) => foldHeader(name, import_node_buffer9.Buffer.from(String(value), "utf8").toString("latin1"), newline));
+  const mbox = kept.length > 0 && kept[0][0].startsWith("From ") ? kept.shift().slice(0, 1) : [];
+  if (kept.length > 0 && /^[ \t]/.test(kept[0][0])) {
+    kept.shift();
+  }
   const head = [...mbox, ...added, ...kept.map((field) => field.join(newline))].join(newline);
-  return import_node_buffer8.Buffer.concat([import_node_buffer8.Buffer.from(head === "" && header === "" ? newline : `${head}${newline}${newline}`, "latin1"), body]);
+  return import_node_buffer9.Buffer.concat([import_node_buffer9.Buffer.from(head === "" ? newline : `${head}${newline}${newline}`, "latin1"), body]);
 }
-var import_node_buffer8, ENCODED_BYTES, PLAIN_WORD, ENCODED_LINE, MAX_LINE2, ENCODED_WORD, ENCODED_START;
+var import_node_buffer9, ENCODED_BYTES, PLAIN_WORD, ENCODED_LINE, MAX_LINE2, ENCODED_WORD, ENCODED_START;
 var init_headers = __esm({
   "src/headers.js"() {
-    import_node_buffer8 = require("node:buffer");
+    import_node_buffer9 = require("node:buffer");
     ENCODED_BYTES = 39;
     PLAIN_WORD = 64;
     ENCODED_LINE = 76;
@@ -8125,7 +9343,7 @@ async function* readJsonl(file, options = {}) {
 }
 async function* walk(directory) {
   const entries = await import_promises.default.readdir(directory, { withFileTypes: true });
-  entries.sort((a, b) => import_node_buffer9.Buffer.compare(import_node_buffer9.Buffer.from(a.name), import_node_buffer9.Buffer.from(b.name)));
+  entries.sort((a, b) => import_node_buffer10.Buffer.compare(import_node_buffer10.Buffer.from(a.name), import_node_buffer10.Buffer.from(b.name)));
   for (const entry of entries) {
     if (SKIP.has(entry.name) || entry.name.startsWith(".")) {
       continue;
@@ -8150,7 +9368,7 @@ async function* readMessages(source) {
     const handle = await import_promises.default.open(file);
     let head;
     try {
-      const { buffer, bytesRead } = await handle.read(import_node_buffer9.Buffer.alloc(64), 0, 64, 0);
+      const { buffer, bytesRead } = await handle.read(import_node_buffer10.Buffer.alloc(64), 0, 64, 0);
       head = buffer.subarray(0, bytesRead).toString("latin1");
     } finally {
       await handle.close();
@@ -8162,10 +9380,10 @@ async function* readMessages(source) {
     }
   }
 }
-var import_node_buffer9, import_node_fs3, import_promises, import_node_path2, import_node_readline, import_node_zlib, SKIP, SPAM_LABELS, HAM_LABELS, MAX_RECORD_LINES, MAX_RECORD_LENGTH, TEXT_NAMES, LABEL_NAMES, JSONL_LABEL_NAMES, JSONL_TEXT_NAMES;
+var import_node_buffer10, import_node_fs3, import_promises, import_node_path2, import_node_readline, import_node_zlib, SKIP, SPAM_LABELS, HAM_LABELS, MAX_RECORD_LINES, MAX_RECORD_LENGTH, TEXT_NAMES, LABEL_NAMES, JSONL_LABEL_NAMES, JSONL_TEXT_NAMES;
 var init_sources = __esm({
   "src/sources.js"() {
-    import_node_buffer9 = require("node:buffer");
+    import_node_buffer10 = require("node:buffer");
     import_node_fs3 = require("node:fs");
     import_promises = __toESM(require("node:fs/promises"), 1);
     import_node_path2 = __toESM(require("node:path"), 1);
@@ -8306,7 +9524,12 @@ var init_train = __esm({
 
 // src/server.js
 function serializeResult(result, options = {}) {
-  const { mail, tokens, ...rest } = result;
+  const {
+    mail,
+    tokens,
+    attached,
+    ...rest
+  } = result;
   const output = {
     ...rest,
     results: { ...result.results }
@@ -8339,8 +9562,8 @@ function sessionFromQuery(query) {
   return session;
 }
 function sameToken(given, expected) {
-  const a = import_node_buffer10.Buffer.from(String(given));
-  const b = import_node_buffer10.Buffer.from(String(expected));
+  const a = import_node_buffer11.Buffer.from(String(given));
+  const b = import_node_buffer11.Buffer.from(String(expected));
   return a.length === b.length && (0, import_node_crypto5.timingSafeEqual)(a, b);
 }
 function readBody(request, limit) {
@@ -8360,7 +9583,7 @@ function readBody(request, limit) {
         reject(error);
         return;
       }
-      resolve(import_node_buffer10.Buffer.concat(chunks));
+      resolve(import_node_buffer11.Buffer.concat(chunks));
     });
     request.on("error", reject);
   });
@@ -8375,7 +9598,7 @@ function createHttpServer(scanner, options = {}) {
   let active = 0;
   const server = import_node_http2.default.createServer(async (request, response) => {
     const send = (status, body, headers = {}) => {
-      const isBuffer = import_node_buffer10.Buffer.isBuffer(body);
+      const isBuffer = import_node_buffer11.Buffer.isBuffer(body);
       response.writeHead(status, { "content-type": isBuffer ? "message/rfc822" : "application/json; charset=utf-8", "cache-control": "no-store", ...headers });
       response.end(isBuffer ? body : `${JSON.stringify(body)}
 `);
@@ -8448,14 +9671,14 @@ function createTcpServer(scanner, options = {}) {
     timeout = 6e4,
     maxConnections = MAX_CONNECTIONS
   } = options;
-  const server = import_node_net4.default.createServer({ allowHalfOpen: true }, (socket) => {
+  const server = import_node_net5.default.createServer({ allowHalfOpen: true }, (socket) => {
     const chunks = [];
     let size = 0;
     socket.setTimeout(timeout, () => socket.destroy());
     const onEnd = async () => {
       socket.setTimeout(0);
       try {
-        const result = await scanner.scan(import_node_buffer10.Buffer.concat(chunks));
+        const result = await scanner.scan(import_node_buffer11.Buffer.concat(chunks));
         socket.end(json ? `${JSON.stringify(serializeResult(result))}
 ` : `${result.isSpam ? "SPAM" : "HAM"} ${result.score.toFixed(1)}/${result.threshold.toFixed(1)} ${result.tests.map((test) => test.name).join(",")}
 `);
@@ -8484,13 +9707,13 @@ function createTcpServer(scanner, options = {}) {
   server.maxConnections = maxConnections;
   return server;
 }
-var import_node_buffer10, import_node_crypto5, import_node_http2, import_node_net4, MAX_MESSAGE_SIZE, MAX_CONNECTIONS;
+var import_node_buffer11, import_node_crypto5, import_node_http2, import_node_net5, MAX_MESSAGE_SIZE, MAX_CONNECTIONS;
 var init_server = __esm({
   "src/server.js"() {
-    import_node_buffer10 = require("node:buffer");
+    import_node_buffer11 = require("node:buffer");
     import_node_crypto5 = require("node:crypto");
     import_node_http2 = __toESM(require("node:http"), 1);
-    import_node_net4 = __toESM(require("node:net"), 1);
+    import_node_net5 = __toESM(require("node:net"), 1);
     init_headers();
     init_version();
     MAX_MESSAGE_SIZE = 25 * 1024 * 1024;
@@ -8499,12 +9722,12 @@ var init_server = __esm({
 });
 
 // src/milter.js
-function packet(command, data2 = import_node_buffer11.Buffer.alloc(0)) {
-  const payload = import_node_buffer11.Buffer.isBuffer(data2) ? data2 : import_node_buffer11.Buffer.from(data2, "latin1");
-  const header = import_node_buffer11.Buffer.alloc(5);
+function packet(command, data2 = import_node_buffer12.Buffer.alloc(0)) {
+  const payload = import_node_buffer12.Buffer.isBuffer(data2) ? data2 : import_node_buffer12.Buffer.from(data2, "latin1");
+  const header = import_node_buffer12.Buffer.alloc(5);
   header.writeUInt32BE(payload.length + 1);
   header.write(command, 4, "latin1");
-  return import_node_buffer11.Buffer.concat([header, payload]);
+  return import_node_buffer12.Buffer.concat([header, payload]);
 }
 function cstrings(data2) {
   const parts = data2.toString("latin1").split("\0");
@@ -8514,19 +9737,19 @@ function cstrings(data2) {
   return parts;
 }
 function cstring(value) {
-  return import_node_buffer11.Buffer.from(`${value}\0`, "latin1");
+  return import_node_buffer12.Buffer.from(`${value}\0`, "latin1");
 }
 function address(value) {
   const text = String(value ?? "").trim();
   const match = /^<?([^<>]*)>?$/.exec(text);
   return match ? match[1] : text;
 }
-var import_node_buffer11, import_node_events, import_node_net5, COMMANDS, RESPONSES, ACTIONS, PROTOCOL, MAX_PACKET, MilterSession, MilterServer;
+var import_node_buffer12, import_node_events, import_node_net6, COMMANDS, RESPONSES, ACTIONS, PROTOCOL, MAX_PACKET, MilterSession, MilterServer;
 var init_milter = __esm({
   "src/milter.js"() {
-    import_node_buffer11 = require("node:buffer");
+    import_node_buffer12 = require("node:buffer");
     import_node_events = require("node:events");
-    import_node_net5 = __toESM(require("node:net"), 1);
+    import_node_net6 = __toESM(require("node:net"), 1);
     init_headers();
     init_auth();
     init_server();
@@ -8644,7 +9867,7 @@ var init_milter = __esm({
         if (this.buffered < this.needed) {
           return;
         }
-        let buffer = this.chunks.length === 1 ? this.chunks[0] : import_node_buffer11.Buffer.concat(this.chunks);
+        let buffer = this.chunks.length === 1 ? this.chunks[0] : import_node_buffer12.Buffer.concat(this.chunks);
         this.needed = 4;
         while (buffer.length >= 4) {
           const length = buffer.readUInt32BE(0);
@@ -8689,7 +9912,7 @@ var init_milter = __esm({
             const protocol = data2.readUInt32BE(8);
             const wanted = ACTIONS.ADDHDRS | ACTIONS.CHGHDRS | ACTIONS.QUARANTINE;
             this.leadingSpace = Boolean(protocol & PROTOCOL.HDR_LEADSPC);
-            const reply2 = import_node_buffer11.Buffer.alloc(12);
+            const reply2 = import_node_buffer12.Buffer.alloc(12);
             reply2.writeUInt32BE(Math.min(version, 6), 0);
             reply2.writeUInt32BE(actions & wanted, 4);
             reply2.writeUInt32BE(protocol & (PROTOCOL.HDR_LEADSPC | PROTOCOL.NOUNKNOWN), 8);
@@ -8754,7 +9977,7 @@ var init_milter = __esm({
             if (this.truncated || this.size + data2.length > options.maxSize) {
               this.truncated = true;
             } else {
-              this.body.push(import_node_buffer11.Buffer.from(data2));
+              this.body.push(import_node_buffer12.Buffer.from(data2));
               this.size += data2.length;
             }
             this.send(RESPONSES.CONTINUE);
@@ -8789,7 +10012,7 @@ var init_milter = __esm({
       /** @returns {Buffer} */
       rawMessage() {
         const head = this.headers.map(([name, value]) => `${name}:${this.leadingSpace || value.startsWith(" ") || value.startsWith("	") ? "" : " "}${value}`).join("\r\n");
-        return import_node_buffer11.Buffer.concat([import_node_buffer11.Buffer.from(this.headers.length > 0 ? `${head}\r
+        return import_node_buffer12.Buffer.concat([import_node_buffer12.Buffer.from(this.headers.length > 0 ? `${head}\r
 \r
 ` : "\r\n", "latin1"), ...this.body]);
       }
@@ -8800,9 +10023,9 @@ var init_milter = __esm({
           const key = name.toLowerCase();
           counts.set(key, (counts.get(key) || 0) + 1);
           if (key.startsWith("x-spam-")) {
-            const index = import_node_buffer11.Buffer.alloc(4);
+            const index = import_node_buffer12.Buffer.alloc(4);
             index.writeUInt32BE(counts.get(key));
-            this.send(RESPONSES.CHGHEADER, import_node_buffer11.Buffer.concat([index, cstring(name), cstring("")]));
+            this.send(RESPONSES.CHGHEADER, import_node_buffer12.Buffer.concat([index, cstring(name), cstring("")]));
           }
         }
       }
@@ -8825,7 +10048,7 @@ var init_milter = __esm({
           }
           this.server.report(error);
           this.removeForgedHeaders();
-          this.send(RESPONSES.ADDHEADER, import_node_buffer11.Buffer.concat([cstring("X-Spam-Virus-Scan"), cstring(`${this.leadingSpace ? " " : ""}failed`)]));
+          this.send(RESPONSES.ADDHEADER, import_node_buffer12.Buffer.concat([cstring("X-Spam-Virus-Scan"), cstring(`${this.leadingSpace ? " " : ""}failed`)]));
           this.send(RESPONSES.CONTINUE);
           this.resetMessage();
           return;
@@ -8846,15 +10069,15 @@ var init_milter = __esm({
           headers.unshift(["Authentication-Results", formatAuthResultsHeader(result.results.authentication, options.hostname)]);
         }
         for (const [name, value] of headers) {
-          this.send(RESPONSES.ADDHEADER, import_node_buffer11.Buffer.concat([cstring(name), cstring(`${this.leadingSpace ? " " : ""}${value}`.replaceAll("\r\n", "\n"))]));
+          this.send(RESPONSES.ADDHEADER, import_node_buffer12.Buffer.concat([cstring(name), cstring(`${this.leadingSpace ? " " : ""}${value}`.replaceAll("\r\n", "\n"))]));
         }
         if (result.isSpam && options.subjectTag) {
           const subject = this.headers.find(([name]) => name.toLowerCase() === "subject");
           const value = taggedSubject(options.subjectTag, subject ? subject[1].trim() : "", "\n");
           if (value !== null) {
-            const index = import_node_buffer11.Buffer.alloc(4);
+            const index = import_node_buffer12.Buffer.alloc(4);
             index.writeUInt32BE(1);
-            this.send(RESPONSES.CHGHEADER, import_node_buffer11.Buffer.concat([index, cstring("Subject"), cstring(`${this.leadingSpace ? " " : ""}${value}`.replaceAll("\r\n", "\n"))]));
+            this.send(RESPONSES.CHGHEADER, import_node_buffer12.Buffer.concat([index, cstring("Subject"), cstring(`${this.leadingSpace ? " " : ""}${value}`.replaceAll("\r\n", "\n"))]));
           }
         }
         if (result.action === "reject" && options.reject) {
@@ -8905,7 +10128,7 @@ var init_milter = __esm({
           throw new RangeError(`rejectCode must be a 4xx or 5xx SMTP code, not ${this.options.rejectCode}`);
         }
         this.sockets = /* @__PURE__ */ new Set();
-        this.server = import_node_net5.default.createServer((socket) => {
+        this.server = import_node_net6.default.createServer((socket) => {
           this.sockets.add(socket);
           socket.on("close", () => this.sockets.delete(socket));
           return new MilterSession(socket, this);
@@ -8981,7 +10204,7 @@ function reply(code, text, headers = [], body = null) {
     lines2.push(`Content-length: ${body.length}`);
   }
   lines2.push(...headers.map(([name, value]) => `${name}: ${value}`), "", "");
-  return body === null ? import_node_buffer12.Buffer.from(lines2.join("\r\n")) : import_node_buffer12.Buffer.concat([import_node_buffer12.Buffer.from(lines2.join("\r\n")), body]);
+  return body === null ? import_node_buffer13.Buffer.from(lines2.join("\r\n")) : import_node_buffer13.Buffer.concat([import_node_buffer13.Buffer.from(lines2.join("\r\n")), body]);
 }
 function report(result) {
   const lines2 = [
@@ -8991,7 +10214,7 @@ function report(result) {
     "",
     " pts rule name              description",
     "---- ---------------------- --------------------------------------------------",
-    ...result.tests.map((test) => `${test.score.toFixed(1).padStart(4)} ${test.name.padEnd(22)} ${test.description}`)
+    ...result.tests.map((test) => `${test.score.toFixed(1).padStart(4)} ${oneLine2(test.name).padEnd(22)} ${oneLine2(test.description)}`)
   ];
   return `${lines2.join("\r\n")}\r
 `;
@@ -9026,11 +10249,11 @@ async function answer(scanner, request, message, options) {
       return reply(EX_OK, "EX_OK", [verdict]);
     }
     case "SYMBOLS": {
-      return reply(EX_OK, "EX_OK", [verdict], import_node_buffer12.Buffer.from(result.tests.map((test) => test.name).join(",")));
+      return reply(EX_OK, "EX_OK", [verdict], import_node_buffer13.Buffer.from(result.tests.map((test) => test.name).join(",")));
     }
     case "REPORT":
     case "REPORT_IFSPAM": {
-      return reply(EX_OK, "EX_OK", [verdict], command === "REPORT" || result.isSpam ? import_node_buffer12.Buffer.from(report(result)) : import_node_buffer12.Buffer.alloc(0));
+      return reply(EX_OK, "EX_OK", [verdict], command === "REPORT" || result.isSpam ? import_node_buffer13.Buffer.from(report(result)) : import_node_buffer13.Buffer.alloc(0));
     }
     default: {
       const rewritten = rewriteMessage(message, spamHeaders(result, { version: VERSION }), { subjectTag: result.isSpam ? options.subjectTag : null });
@@ -9038,7 +10261,7 @@ async function answer(scanner, request, message, options) {
         return reply(EX_OK, "EX_OK", [verdict], rewritten);
       }
       const { header, newline } = splitMessage(rewritten);
-      return reply(EX_OK, "EX_OK", [verdict], import_node_buffer12.Buffer.from(`${header}${newline}${newline}`, "latin1"));
+      return reply(EX_OK, "EX_OK", [verdict], import_node_buffer13.Buffer.from(`${header}${newline}${newline}`, "latin1"));
     }
   }
 }
@@ -9052,8 +10275,8 @@ function createSpamdServer(scanner, options = {}) {
     maxConnections: MAX_CONNECTIONS,
     ...options
   };
-  const server = import_node_net6.default.createServer({ allowHalfOpen: true }, (socket) => {
-    let head = import_node_buffer12.Buffer.alloc(0);
+  const server = import_node_net7.default.createServer({ allowHalfOpen: true }, (socket) => {
+    let head = import_node_buffer13.Buffer.alloc(0);
     const chunks = [];
     let size = 0;
     let request = null;
@@ -9079,7 +10302,7 @@ function createSpamdServer(scanner, options = {}) {
         return;
       }
       if (!request) {
-        head = import_node_buffer12.Buffer.concat([head, chunk2]);
+        head = import_node_buffer13.Buffer.concat([head, chunk2]);
         const end = head.indexOf("\r\n\r\n");
         if (end === -1) {
           if (head.length > 64 * 1024) {
@@ -9114,7 +10337,7 @@ function createSpamdServer(scanner, options = {}) {
       chunks.push(chunk2);
       size += chunk2.length;
       if (request.length === null ? ["PING", "SKIP"].includes(request.command) : size >= request.length) {
-        finish(import_node_buffer12.Buffer.concat(chunks).subarray(0, request.length ?? 0));
+        finish(import_node_buffer13.Buffer.concat(chunks).subarray(0, request.length ?? 0));
       } else if (size > settings.maxSize) {
         fail(EX_DATAERR, `Message larger than ${settings.maxSize} bytes`);
       }
@@ -9126,7 +10349,7 @@ function createSpamdServer(scanner, options = {}) {
       if (!request) {
         fail(EX_PROTOCOL, "Incomplete request");
       } else if (request.length === null) {
-        finish(import_node_buffer12.Buffer.concat(chunks));
+        finish(import_node_buffer13.Buffer.concat(chunks));
       } else {
         fail(EX_PROTOCOL, `Message shorter than its Content-length of ${request.length} bytes`);
       }
@@ -9137,11 +10360,11 @@ function createSpamdServer(scanner, options = {}) {
   server.maxConnections = settings.maxConnections;
   return server;
 }
-var import_node_buffer12, import_node_net6, EX_OK, EX_USAGE, EX_DATAERR, EX_SOFTWARE, EX_PROTOCOL, EX_NOPERM, COMMANDS2;
+var import_node_buffer13, import_node_net7, EX_OK, EX_USAGE, EX_DATAERR, EX_SOFTWARE, EX_PROTOCOL, EX_NOPERM, COMMANDS2, oneLine2;
 var init_spamd = __esm({
   "src/spamd.js"() {
-    import_node_buffer12 = require("node:buffer");
-    import_node_net6 = __toESM(require("node:net"), 1);
+    import_node_buffer13 = require("node:buffer");
+    import_node_net7 = __toESM(require("node:net"), 1);
     init_headers();
     init_server();
     init_version();
@@ -9152,6 +10375,7 @@ var init_spamd = __esm({
     EX_PROTOCOL = 76;
     EX_NOPERM = 77;
     COMMANDS2 = /* @__PURE__ */ new Set(["CHECK", "SYMBOLS", "REPORT", "REPORT_IFSPAM", "PROCESS", "HEADERS", "PING", "SKIP", "TELL"]);
+    oneLine2 = (text) => String(text ?? "").replaceAll(/[\p{Cc}\u061C\u200E\u200F\u2028\u2029\u202A-\u202E\u2066-\u2069]+/gu, " ");
   }
 });
 
@@ -9353,21 +10577,21 @@ async function withTimeout(promise, ms, fallback) {
   }
 }
 async function toBuffer(source) {
-  if (import_node_buffer13.Buffer.isBuffer(source)) {
+  if (import_node_buffer14.Buffer.isBuffer(source)) {
     return source;
   }
   if (typeof source === "string") {
-    return import_node_buffer13.Buffer.from(source, "utf8");
+    return import_node_buffer14.Buffer.from(source, "utf8");
   }
   if (source instanceof Uint8Array) {
-    return import_node_buffer13.Buffer.from(source);
+    return import_node_buffer14.Buffer.from(source);
   }
   if (source && typeof source[Symbol.asyncIterator] === "function") {
     const chunks = [];
     for await (const chunk2 of source) {
-      chunks.push(import_node_buffer13.Buffer.isBuffer(chunk2) ? chunk2 : import_node_buffer13.Buffer.from(chunk2));
+      chunks.push(import_node_buffer14.Buffer.isBuffer(chunk2) ? chunk2 : import_node_buffer14.Buffer.from(chunk2));
     }
-    return import_node_buffer13.Buffer.concat(chunks);
+    return import_node_buffer14.Buffer.concat(chunks);
   }
   throw new TypeError("A message must be a Buffer, a string, a Uint8Array or a readable stream");
 }
@@ -9442,12 +10666,12 @@ function fromDomain(mail) {
 function withHeader(raw) {
   const first = raw.subarray(0, 1e3).toString("latin1");
   const headerless = raw.length > 0 && !/^(?:[!-9;-~]+[ \t]*:|From |[\r\n])/.test(first);
-  return headerless ? import_node_buffer13.Buffer.concat([import_node_buffer13.Buffer.from("\r\n"), raw]) : raw;
+  return headerless ? import_node_buffer14.Buffer.concat([import_node_buffer14.Buffer.from("\r\n"), raw]) : raw;
 }
-var import_node_buffer13, import_promises2, import_node_util2, debug2, DEFAULTS2, NESTED, MAX_LOOKALIKE_HOSTS, MAX_DECEPTIVE_LINKS, CLAMAV_CONCURRENCY, CLAMAV_TIMEOUT, CLAMAV_LIMITS, MAX_NSFW_IMAGES, MAX_REPUTATION_CACHES, SpamScanner, src_default;
+var import_node_buffer14, import_promises2, import_node_util2, debug2, DEFAULTS2, NESTED, MAX_LOOKALIKE_HOSTS, MAX_DECEPTIVE_LINKS, CLAMAV_CONCURRENCY, CLAMAV_TIMEOUT, CLAMAV_LIMITS, MAX_NSFW_IMAGES, MAX_REPUTATION_CACHES, SpamScanner, src_default;
 var init_src = __esm({
   "src/index.js"() {
-    import_node_buffer13 = require("node:buffer");
+    import_node_buffer14 = require("node:buffer");
     import_promises2 = require("node:fs/promises");
     import_node_util2 = require("node:util");
     init_attachments();
@@ -9456,6 +10680,7 @@ var init_src = __esm({
     init_classifier();
     init_dnsbl();
     init_html();
+    init_links();
     init_homograph();
     init_is_arbitrary();
     init_language();
@@ -9498,6 +10723,19 @@ var init_src = __esm({
         cloudflare: true,
         adult: true,
         maxHosts: 25,
+        // Also read the links of the whole message and of what it carries
+        // (attached messages, HTML, SVG and XML files, text files, invitations
+        // and contact cards, documents in iframes and data: URLs) when link
+        // hosts are looked up, for at most five seconds: off by default, as it
+        // reads all of it, up to 50 MB of attachments.
+        attachments: false,
+        // Milliseconds the link lookups may take in all (default: timeout).
+        timeout: void 0,
+        // Also look up host names written in the text without a link or a path
+        // ("evil.example"), which mail clients make links of, as far as there is
+        // room: off by default, as a quoted reply or a signature may name any
+        // site (they are checked for lookalikes either way).
+        hostsInText: false,
         // Characters of text read for links (twice as many of HTML): more than
         // for the classifier (maxLength), as a link anywhere in a message may be
         // followed; a longer message sets results.linksTruncated.
@@ -9699,7 +10937,10 @@ var init_src = __esm({
       async scanFile(file, options) {
         return this.scan(await (0, import_promises2.readFile)(file), options);
       }
-      async checkLinks(links, config, hosts = [], from = "") {
+      // (`from`: the sender's domain; `carried`: the link hosts of the whole
+      //  message and of what it carries, see carriedLinkHosts)
+      async checkLinks(links, config, hosts = [], options = {}) {
+        const { from = "", carried = null } = typeof options === "string" ? { from: options } : options ?? {};
         const phishing = [];
         const homographs = [];
         const seenHosts = /* @__PURE__ */ new Set();
@@ -9755,18 +10996,23 @@ var init_src = __esm({
         for (const host of hosts) {
           lookalike(host, { source: "text" });
         }
-        const ordered = [...new Set([...found.filter((link) => link.text), ...found.filter((link) => !link.text), ...bare].map((link) => lookupName(destination(link))).filter(Boolean))];
+        const carriedHosts = (carried?.hosts ?? []).map((host) => lookupName(host)).filter(Boolean);
+        for (const host of carriedHosts) {
+          seenHosts.add(host);
+        }
+        const own3 = [...found.filter((link) => link.text), ...found.filter((link) => !link.text), ...bare].map((link) => lookupName(destination(link))).filter(Boolean);
         const firsts = /* @__PURE__ */ new Map();
-        for (const host of ordered) {
+        for (const host of [...own3, ...carriedHosts]) {
           const domain = registrableDomain(host);
           if (!firsts.has(domain)) {
             firsts.set(domain, host);
           }
         }
-        const checked = [.../* @__PURE__ */ new Set([...firsts.values(), ...ordered])].slice(0, config.phishing.maxHosts);
+        const checked = [.../* @__PURE__ */ new Set([...firsts.values(), ...own3, ...carriedHosts])].slice(0, config.phishing.maxHosts);
         const domains = [...new Set(checked.map((host) => registrableDomain(host)))];
         const blocked = [];
         let answered = 0;
+        const linkTimeout = Number(config.phishing.timeout) > 0 ? Number(config.phishing.timeout) : config.timeout;
         const cloudflare = async () => {
           await withTimeout(Promise.all(checked.map(async (host) => {
             const found2 = await this.dns.checkCloudflare([host], { adult: config.phishing.adult });
@@ -9774,12 +11020,12 @@ var init_src = __esm({
             if (!found2.unanswered?.length) {
               answered++;
             }
-          })), config.timeout, null);
+          })), linkTimeout, null);
           return { found: [...blocked], unanswered: checked.length - answered };
         };
         const [cloudflareResult, listed] = await Promise.all([
           config.phishing.cloudflare && checked.length > 0 ? cloudflare() : { found: [], unanswered: 0 },
-          config.dnsbl.domain?.length > 0 && domains.length > 0 ? withTimeout(this.dns.checkDomains(domains, config.dnsbl.domain), config.timeout, []) : []
+          config.dnsbl.domain?.length > 0 && domains.length > 0 ? withTimeout(this.dns.checkDomains(domains, config.dnsbl.domain), linkTimeout, []) : []
         ]);
         for (const { host, category } of cloudflareResult.found) {
           phishing.push(finding(category === "malware" ? { type: "malicious_domain", domain: host, message: `Link hostname ${host} is blocked by Cloudflare's malware filtering as phishing or malware` } : { type: "adult_domain", domain: host, message: `Link hostname ${host} was detected by Cloudflare's family filtering to contain adult-related content` }));
@@ -9795,7 +11041,8 @@ var init_src = __esm({
         return {
           phishing,
           homographs,
-          uncheckedHosts: seenHosts.size - checked.length,
+          // (at least one when the message has more hosts than were read)
+          uncheckedHosts: Math.max(seenHosts.size - checked.length, carried?.more ? 1 : 0),
           timedOutHosts: cloudflareResult.unanswered
         };
       }
@@ -9967,10 +11214,17 @@ ${visibleText(html2.slice(0, config.maxLength * 2)).text}`, { maxLength: config.
           styled: plainObfuscation.styled || shownObfuscation.styled
         };
         const unopened = [];
-        const attached = await expandAttachments(mail.attachments, parseErrors, void 0, unopened);
+        const opened = [];
+        const attached = await expandAttachments(mail.attachments, parseErrors, void 0, { unopened, mails: opened });
+        const carried = config.phishing.attachments === true && (config.phishing.cloudflare || config.dnsbl.domain?.length > 0) ? carriedLinkHosts(mail, {
+          mails: opened,
+          attachments: attached,
+          maxHosts: config.phishing.maxHosts,
+          hostsInText: config.phishing.hostsInText === true
+        }) : null;
         const attachments = config.attachments === false ? [] : inspectAttachments(attached).filter((item) => config.macros !== false || !["macro", "pdf_active", "rtf_object"].includes(item.type)).map((item) => finding(item));
         const [links, authentication, checkedReputation, dnsbl, virusScan, toxicity, nsfw] = await Promise.all([
-          this.checkLinks(checkedLinks, config, extracted.hosts, fromDomain(mail)),
+          this.checkLinks(checkedLinks, config, extracted.hosts, { from: fromDomain(mail), carried }),
           config.authenticationResults && typeof config.authenticationResults === "object" ? normalizeAuthOutput(config.authenticationResults) : config.authentication && session.remoteAddress ? withTimeout(authenticate(raw, {
             timeout: config.timeout,
             ...typeof config.authentication === "object" ? config.authentication : {},
@@ -10098,6 +11352,14 @@ ${visibleText(html2.slice(0, config.maxLength * 2)).text}`, { maxLength: config.
             // Whether the message has more text than phishing.maxLength, whose
             // links were not read.
             linksTruncated,
+            // Whether a link host of the message or of what it carries was
+            // never read whole (it runs past where long text is cut to be
+            // read, it goes through more security gateways than are
+            // unwrapped, or it is in more documents than are read), and whether
+            // an attachment was left unread for time: in either case not every
+            // link was checked (see phishing.attachments).
+            linksTooComplex: Boolean(carried?.tooComplex),
+            linksIncomplete: Boolean(carried?.incomplete),
             idnHomographAttack: {
               detected: links.homographs.length > 0,
               domains: links.homographs,
@@ -10109,6 +11371,9 @@ ${visibleText(html2.slice(0, config.maxLength * 2)).text}`, { maxLength: config.
           language: extracted.language,
           tokens: extracted.words,
           mail,
+          // (the attachments of the message and of its attached messages, as
+          //  read, an attached message's named after it)
+          attached,
           version: VERSION,
           metrics: { totalTime: time }
         };