spamscanner 7.0.10 → 7.0.12

package/dist/esm/index.js

@@ -1,5 +1,5 @@
 // src/index.js
-import { Buffer as Buffer13 } from "node:buffer";
+import { Buffer as Buffer14 } from "node:buffer";
 import { readFile } from "node:fs/promises";
 import { debuglog as debuglog2 } from "node:util";
 
@@ -1107,103 +1107,285 @@ var HomographDetector = class {
   }
 };
 
+// src/entities.js
+var NAMED = [
+  "AElig=c6,AMP=26,Aacute=c1,Abreve=102,Acirc=c2,Acy=410,Afr=1d504,Agrave=c0,Alpha=391,Amacr=100,And=2a",
+  "53,Aogon=104,Aopf=1d538,ApplyFunction=2061,Aring=c5,Ascr=1d49c,Assign=2254,Atilde=c3,Auml=c4,Backsla",
+  "sh=2216,Barv=2ae7,Barwed=2306,Bcy=411,Because=2235,Bernoullis=212c,Beta=392,Bfr=1d505,Bopf=1d539,Bre",
+  "ve=2d8,Bscr=212c,Bumpeq=224e,CHcy=427,COPY=a9,Cacute=106,Cap=22d2,CapitalDifferentialD=2145,Cayleys=",
+  "212d,Ccaron=10c,Ccedil=c7,Ccirc=108,Cconint=2230,Cdot=10a,Cedilla=b8,CenterDot=b7,Cfr=212d,Chi=3a7,C",
+  "ircleDot=2299,CircleMinus=2296,CirclePlus=2295,CircleTimes=2297,ClockwiseContourIntegral=2232,CloseC",
+  "urlyDoubleQuote=201d,CloseCurlyQuote=2019,Colon=2237,Colone=2a74,Congruent=2261,Conint=222f,ContourI",
+  "ntegral=222e,Copf=2102,Coproduct=2210,CounterClockwiseContourIntegral=2233,Cross=2a2f,Cscr=1d49e,Cup",
+  "=22d3,CupCap=224d,DD=2145,DDotrahd=2911,DJcy=402,DScy=405,DZcy=40f,Dagger=2021,Darr=21a1,Dashv=2ae4,",
+  "Dcaron=10e,Dcy=414,Del=2207,Delta=394,Dfr=1d507,DiacriticalAcute=b4,DiacriticalDot=2d9,DiacriticalDo",
+  "ubleAcute=2dd,DiacriticalGrave=60,DiacriticalTilde=2dc,Diamond=22c4,DifferentialD=2146,Dopf=1d53b,Do",
+  "t=a8,DotDot=20dc,DotEqual=2250,DoubleContourIntegral=222f,DoubleDot=a8,DoubleDownArrow=21d3,DoubleLe",
+  "ftArrow=21d0,DoubleLeftRightArrow=21d4,DoubleLeftTee=2ae4,DoubleLongLeftArrow=27f8,DoubleLongLeftRig",
+  "htArrow=27fa,DoubleLongRightArrow=27f9,DoubleRightArrow=21d2,DoubleRightTee=22a8,DoubleUpArrow=21d1,",
+  "DoubleUpDownArrow=21d5,DoubleVerticalBar=2225,DownArrow=2193,DownArrowBar=2913,DownArrowUpArrow=21f5",
+  ",DownBreve=311,DownLeftRightVector=2950,DownLeftTeeVector=295e,DownLeftVector=21bd,DownLeftVectorBar",
+  "=2956,DownRightTeeVector=295f,DownRightVector=21c1,DownRightVectorBar=2957,DownTee=22a4,DownTeeArrow",
+  "=21a7,Downarrow=21d3,Dscr=1d49f,Dstrok=110,ENG=14a,ETH=d0,Eacute=c9,Ecaron=11a,Ecirc=ca,Ecy=42d,Edot",
+  "=116,Efr=1d508,Egrave=c8,Element=2208,Emacr=112,EmptySmallSquare=25fb,EmptyVerySmallSquare=25ab,Eogo",
+  "n=118,Eopf=1d53c,Epsilon=395,Equal=2a75,EqualTilde=2242,Equilibrium=21cc,Escr=2130,Esim=2a73,Eta=397",
+  ",Euml=cb,Exists=2203,ExponentialE=2147,Fcy=424,Ffr=1d509,FilledSmallSquare=25fc,FilledVerySmallSquar",
+  "e=25aa,Fopf=1d53d,ForAll=2200,Fouriertrf=2131,Fscr=2131,GJcy=403,GT=3e,Gamma=393,Gammad=3dc,Gbreve=1",
+  "1e,Gcedil=122,Gcirc=11c,Gcy=413,Gdot=120,Gfr=1d50a,Gg=22d9,Gopf=1d53e,GreaterEqual=2265,GreaterEqual",
+  "Less=22db,GreaterFullEqual=2267,GreaterGreater=2aa2,GreaterLess=2277,GreaterSlantEqual=2a7e,GreaterT",
+  "ilde=2273,Gscr=1d4a2,Gt=226b,HARDcy=42a,Hacek=2c7,Hat=5e,Hcirc=124,Hfr=210c,HilbertSpace=210b,Hopf=2",
+  "10d,HorizontalLine=2500,Hscr=210b,Hstrok=126,HumpDownHump=224e,HumpEqual=224f,IEcy=415,IJlig=132,IOc",
+  "y=401,Iacute=cd,Icirc=ce,Icy=418,Idot=130,Ifr=2111,Igrave=cc,Im=2111,Imacr=12a,ImaginaryI=2148,Impli",
+  "es=21d2,Int=222c,Integral=222b,Intersection=22c2,InvisibleComma=2063,InvisibleTimes=2062,Iogon=12e,I",
+  "opf=1d540,Iota=399,Iscr=2110,Itilde=128,Iukcy=406,Iuml=cf,Jcirc=134,Jcy=419,Jfr=1d50d,Jopf=1d541,Jsc",
+  "r=1d4a5,Jsercy=408,Jukcy=404,KHcy=425,KJcy=40c,Kappa=39a,Kcedil=136,Kcy=41a,Kfr=1d50e,Kopf=1d542,Ksc",
+  "r=1d4a6,LJcy=409,LT=3c,Lacute=139,Lambda=39b,Lang=27ea,Laplacetrf=2112,Larr=219e,Lcaron=13d,Lcedil=1",
+  "3b,Lcy=41b,LeftAngleBracket=27e8,LeftArrow=2190,LeftArrowBar=21e4,LeftArrowRightArrow=21c6,LeftCeili",
+  "ng=2308,LeftDoubleBracket=27e6,LeftDownTeeVector=2961,LeftDownVector=21c3,LeftDownVectorBar=2959,Lef",
+  "tFloor=230a,LeftRightArrow=2194,LeftRightVector=294e,LeftTee=22a3,LeftTeeArrow=21a4,LeftTeeVector=29",
+  "5a,LeftTriangle=22b2,LeftTriangleBar=29cf,LeftTriangleEqual=22b4,LeftUpDownVector=2951,LeftUpTeeVect",
+  "or=2960,LeftUpVector=21bf,LeftUpVectorBar=2958,LeftVector=21bc,LeftVectorBar=2952,Leftarrow=21d0,Lef",
+  "trightarrow=21d4,LessEqualGreater=22da,LessFullEqual=2266,LessGreater=2276,LessLess=2aa1,LessSlantEq",
+  "ual=2a7d,LessTilde=2272,Lfr=1d50f,Ll=22d8,Lleftarrow=21da,Lmidot=13f,LongLeftArrow=27f5,LongLeftRigh",
+  "tArrow=27f7,LongRightArrow=27f6,Longleftarrow=27f8,Longleftrightarrow=27fa,Longrightarrow=27f9,Lopf=",
+  "1d543,LowerLeftArrow=2199,LowerRightArrow=2198,Lscr=2112,Lsh=21b0,Lstrok=141,Lt=226a,Map=2905,Mcy=41",
+  "c,MediumSpace=205f,Mellintrf=2133,Mfr=1d510,MinusPlus=2213,Mopf=1d544,Mscr=2133,Mu=39c,NJcy=40a,Nacu",
+  "te=143,Ncaron=147,Ncedil=145,Ncy=41d,NegativeMediumSpace=200b,NegativeThickSpace=200b,NegativeThinSp",
+  "ace=200b,NegativeVeryThinSpace=200b,NestedGreaterGreater=226b,NestedLessLess=226a,NewLine=a,Nfr=1d51",
+  "1,NoBreak=2060,NonBreakingSpace=a0,Nopf=2115,Not=2aec,NotCongruent=2262,NotCupCap=226d,NotDoubleVert",
+  "icalBar=2226,NotElement=2209,NotEqual=2260,NotEqualTilde=2242.338,NotExists=2204,NotGreater=226f,Not",
+  "GreaterEqual=2271,NotGreaterFullEqual=2267.338,NotGreaterGreater=226b.338,NotGreaterLess=2279,NotGre",
+  "aterSlantEqual=2a7e.338,NotGreaterTilde=2275,NotHumpDownHump=224e.338,NotHumpEqual=224f.338,NotLeftT",
+  "riangle=22ea,NotLeftTriangleBar=29cf.338,NotLeftTriangleEqual=22ec,NotLess=226e,NotLessEqual=2270,No",
+  "tLessGreater=2278,NotLessLess=226a.338,NotLessSlantEqual=2a7d.338,NotLessTilde=2274,NotNestedGreater",
+  "Greater=2aa2.338,NotNestedLessLess=2aa1.338,NotPrecedes=2280,NotPrecedesEqual=2aaf.338,NotPrecedesSl",
+  "antEqual=22e0,NotReverseElement=220c,NotRightTriangle=22eb,NotRightTriangleBar=29d0.338,NotRightTria",
+  "ngleEqual=22ed,NotSquareSubset=228f.338,NotSquareSubsetEqual=22e2,NotSquareSuperset=2290.338,NotSqua",
+  "reSupersetEqual=22e3,NotSubset=2282.20d2,NotSubsetEqual=2288,NotSucceeds=2281,NotSucceedsEqual=2ab0.",
+  "338,NotSucceedsSlantEqual=22e1,NotSucceedsTilde=227f.338,NotSuperset=2283.20d2,NotSupersetEqual=2289",
+  ",NotTilde=2241,NotTildeEqual=2244,NotTildeFullEqual=2247,NotTildeTilde=2249,NotVerticalBar=2224,Nscr",
+  "=1d4a9,Ntilde=d1,Nu=39d,OElig=152,Oacute=d3,Ocirc=d4,Ocy=41e,Odblac=150,Ofr=1d512,Ograve=d2,Omacr=14",
+  "c,Omega=3a9,Omicron=39f,Oopf=1d546,OpenCurlyDoubleQuote=201c,OpenCurlyQuote=2018,Or=2a54,Oscr=1d4aa,",
+  "Oslash=d8,Otilde=d5,Otimes=2a37,Ouml=d6,OverBar=203e,OverBrace=23de,OverBracket=23b4,OverParenthesis",
+  "=23dc,PartialD=2202,Pcy=41f,Pfr=1d513,Phi=3a6,Pi=3a0,PlusMinus=b1,Poincareplane=210c,Popf=2119,Pr=2a",
+  "bb,Precedes=227a,PrecedesEqual=2aaf,PrecedesSlantEqual=227c,PrecedesTilde=227e,Prime=2033,Product=22",
+  "0f,Proportion=2237,Proportional=221d,Pscr=1d4ab,Psi=3a8,QUOT=22,Qfr=1d514,Qopf=211a,Qscr=1d4ac,RBarr",
+  "=2910,REG=ae,Racute=154,Rang=27eb,Rarr=21a0,Rarrtl=2916,Rcaron=158,Rcedil=156,Rcy=420,Re=211c,Revers",
+  "eElement=220b,ReverseEquilibrium=21cb,ReverseUpEquilibrium=296f,Rfr=211c,Rho=3a1,RightAngleBracket=2",
+  "7e9,RightArrow=2192,RightArrowBar=21e5,RightArrowLeftArrow=21c4,RightCeiling=2309,RightDoubleBracket",
+  "=27e7,RightDownTeeVector=295d,RightDownVector=21c2,RightDownVectorBar=2955,RightFloor=230b,RightTee=",
+  "22a2,RightTeeArrow=21a6,RightTeeVector=295b,RightTriangle=22b3,RightTriangleBar=29d0,RightTriangleEq",
+  "ual=22b5,RightUpDownVector=294f,RightUpTeeVector=295c,RightUpVector=21be,RightUpVectorBar=2954,Right",
+  "Vector=21c0,RightVectorBar=2953,Rightarrow=21d2,Ropf=211d,RoundImplies=2970,Rrightarrow=21db,Rscr=21",
+  "1b,Rsh=21b1,RuleDelayed=29f4,SHCHcy=429,SHcy=428,SOFTcy=42c,Sacute=15a,Sc=2abc,Scaron=160,Scedil=15e",
+  ",Scirc=15c,Scy=421,Sfr=1d516,ShortDownArrow=2193,ShortLeftArrow=2190,ShortRightArrow=2192,ShortUpArr",
+  "ow=2191,Sigma=3a3,SmallCircle=2218,Sopf=1d54a,Sqrt=221a,Square=25a1,SquareIntersection=2293,SquareSu",
+  "bset=228f,SquareSubsetEqual=2291,SquareSuperset=2290,SquareSupersetEqual=2292,SquareUnion=2294,Sscr=",
+  "1d4ae,Star=22c6,Sub=22d0,Subset=22d0,SubsetEqual=2286,Succeeds=227b,SucceedsEqual=2ab0,SucceedsSlant",
+  "Equal=227d,SucceedsTilde=227f,SuchThat=220b,Sum=2211,Sup=22d1,Superset=2283,SupersetEqual=2287,Supse",
+  "t=22d1,THORN=de,TRADE=2122,TSHcy=40b,TScy=426,Tab=9,Tau=3a4,Tcaron=164,Tcedil=162,Tcy=422,Tfr=1d517,",
+  "Therefore=2234,Theta=398,ThickSpace=205f.200a,ThinSpace=2009,Tilde=223c,TildeEqual=2243,TildeFullEqu",
+  "al=2245,TildeTilde=2248,Topf=1d54b,TripleDot=20db,Tscr=1d4af,Tstrok=166,Uacute=da,Uarr=219f,Uarrocir",
+  "=2949,Ubrcy=40e,Ubreve=16c,Ucirc=db,Ucy=423,Udblac=170,Ufr=1d518,Ugrave=d9,Umacr=16a,UnderBar=5f,Und",
+  "erBrace=23df,UnderBracket=23b5,UnderParenthesis=23dd,Union=22c3,UnionPlus=228e,Uogon=172,Uopf=1d54c,",
+  "UpArrow=2191,UpArrowBar=2912,UpArrowDownArrow=21c5,UpDownArrow=2195,UpEquilibrium=296e,UpTee=22a5,Up",
+  "TeeArrow=21a5,Uparrow=21d1,Updownarrow=21d5,UpperLeftArrow=2196,UpperRightArrow=2197,Upsi=3d2,Upsilo",
+  "n=3a5,Uring=16e,Uscr=1d4b0,Utilde=168,Uuml=dc,VDash=22ab,Vbar=2aeb,Vcy=412,Vdash=22a9,Vdashl=2ae6,Ve",
+  "e=22c1,Verbar=2016,Vert=2016,VerticalBar=2223,VerticalLine=7c,VerticalSeparator=2758,VerticalTilde=2",
+  "240,VeryThinSpace=200a,Vfr=1d519,Vopf=1d54d,Vscr=1d4b1,Vvdash=22aa,Wcirc=174,Wedge=22c0,Wfr=1d51a,Wo",
+  "pf=1d54e,Wscr=1d4b2,Xfr=1d51b,Xi=39e,Xopf=1d54f,Xscr=1d4b3,YAcy=42f,YIcy=407,YUcy=42e,Yacute=dd,Ycir",
+  "c=176,Ycy=42b,Yfr=1d51c,Yopf=1d550,Yscr=1d4b4,Yuml=178,ZHcy=416,Zacute=179,Zcaron=17d,Zcy=417,Zdot=1",
+  "7b,ZeroWidthSpace=200b,Zeta=396,Zfr=2128,Zopf=2124,Zscr=1d4b5,aacute=e1,abreve=103,ac=223e,acE=223e.",
+  "333,acd=223f,acirc=e2,acute=b4,acy=430,aelig=e6,af=2061,afr=1d51e,agrave=e0,alefsym=2135,aleph=2135,",
+  "alpha=3b1,amacr=101,amalg=2a3f,amp=26,and=2227,andand=2a55,andd=2a5c,andslope=2a58,andv=2a5a,ang=222",
+  "0,ange=29a4,angle=2220,angmsd=2221,angmsdaa=29a8,angmsdab=29a9,angmsdac=29aa,angmsdad=29ab,angmsdae=",
+  "29ac,angmsdaf=29ad,angmsdag=29ae,angmsdah=29af,angrt=221f,angrtvb=22be,angrtvbd=299d,angsph=2222,ang",
+  "st=c5,angzarr=237c,aogon=105,aopf=1d552,ap=2248,apE=2a70,apacir=2a6f,ape=224a,apid=224b,apos=27,appr",
+  "ox=2248,approxeq=224a,aring=e5,ascr=1d4b6,ast=2a,asymp=2248,asympeq=224d,atilde=e3,auml=e4,awconint=",
+  "2233,awint=2a11,bNot=2aed,backcong=224c,backepsilon=3f6,backprime=2035,backsim=223d,backsimeq=22cd,b",
+  "arvee=22bd,barwed=2305,barwedge=2305,bbrk=23b5,bbrktbrk=23b6,bcong=224c,bcy=431,bdquo=201e,becaus=22",
+  "35,because=2235,bemptyv=29b0,bepsi=3f6,bernou=212c,beta=3b2,beth=2136,between=226c,bfr=1d51f,bigcap=",
+  "22c2,bigcirc=25ef,bigcup=22c3,bigodot=2a00,bigoplus=2a01,bigotimes=2a02,bigsqcup=2a06,bigstar=2605,b",
+  "igtriangledown=25bd,bigtriangleup=25b3,biguplus=2a04,bigvee=22c1,bigwedge=22c0,bkarow=290d,blackloze",
+  "nge=29eb,blacksquare=25aa,blacktriangle=25b4,blacktriangledown=25be,blacktriangleleft=25c2,blacktria",
+  "ngleright=25b8,blank=2423,blk12=2592,blk14=2591,blk34=2593,block=2588,bne=3d.20e5,bnequiv=2261.20e5,",
+  "bnot=2310,bopf=1d553,bot=22a5,bottom=22a5,bowtie=22c8,boxDL=2557,boxDR=2554,boxDl=2556,boxDr=2553,bo",
+  "xH=2550,boxHD=2566,boxHU=2569,boxHd=2564,boxHu=2567,boxUL=255d,boxUR=255a,boxUl=255c,boxUr=2559,boxV",
+  "=2551,boxVH=256c,boxVL=2563,boxVR=2560,boxVh=256b,boxVl=2562,boxVr=255f,boxbox=29c9,boxdL=2555,boxdR",
+  "=2552,boxdl=2510,boxdr=250c,boxh=2500,boxhD=2565,boxhU=2568,boxhd=252c,boxhu=2534,boxminus=229f,boxp",
+  "lus=229e,boxtimes=22a0,boxuL=255b,boxuR=2558,boxul=2518,boxur=2514,boxv=2502,boxvH=256a,boxvL=2561,b",
+  "oxvR=255e,boxvh=253c,boxvl=2524,boxvr=251c,bprime=2035,breve=2d8,brvbar=a6,bscr=1d4b7,bsemi=204f,bsi",
+  "m=223d,bsime=22cd,bsol=5c,bsolb=29c5,bsolhsub=27c8,bull=2022,bullet=2022,bump=224e,bumpE=2aae,bumpe=",
+  "224f,bumpeq=224f,cacute=107,cap=2229,capand=2a44,capbrcup=2a49,capcap=2a4b,capcup=2a47,capdot=2a40,c",
+  "aps=2229.fe00,caret=2041,caron=2c7,ccaps=2a4d,ccaron=10d,ccedil=e7,ccirc=109,ccups=2a4c,ccupssm=2a50",
+  ",cdot=10b,cedil=b8,cemptyv=29b2,cent=a2,centerdot=b7,cfr=1d520,chcy=447,check=2713,checkmark=2713,ch",
+  "i=3c7,cir=25cb,cirE=29c3,circ=2c6,circeq=2257,circlearrowleft=21ba,circlearrowright=21bb,circledR=ae",
+  ",circledS=24c8,circledast=229b,circledcirc=229a,circleddash=229d,cire=2257,cirfnint=2a10,cirmid=2aef",
+  ",cirscir=29c2,clubs=2663,clubsuit=2663,colon=3a,colone=2254,coloneq=2254,comma=2c,commat=40,comp=220",
+  "1,compfn=2218,complement=2201,complexes=2102,cong=2245,congdot=2a6d,conint=222e,copf=1d554,coprod=22",
+  "10,copy=a9,copysr=2117,crarr=21b5,cross=2717,cscr=1d4b8,csub=2acf,csube=2ad1,csup=2ad0,csupe=2ad2,ct",
+  "dot=22ef,cudarrl=2938,cudarrr=2935,cuepr=22de,cuesc=22df,cularr=21b6,cularrp=293d,cup=222a,cupbrcap=",
+  "2a48,cupcap=2a46,cupcup=2a4a,cupdot=228d,cupor=2a45,cups=222a.fe00,curarr=21b7,curarrm=293c,curlyeqp",
+  "rec=22de,curlyeqsucc=22df,curlyvee=22ce,curlywedge=22cf,curren=a4,curvearrowleft=21b6,curvearrowrigh",
+  "t=21b7,cuvee=22ce,cuwed=22cf,cwconint=2232,cwint=2231,cylcty=232d,dArr=21d3,dHar=2965,dagger=2020,da",
+  "leth=2138,darr=2193,dash=2010,dashv=22a3,dbkarow=290f,dblac=2dd,dcaron=10f,dcy=434,dd=2146,ddagger=2",
+  "021,ddarr=21ca,ddotseq=2a77,deg=b0,delta=3b4,demptyv=29b1,dfisht=297f,dfr=1d521,dharl=21c3,dharr=21c",
+  "2,diam=22c4,diamond=22c4,diamondsuit=2666,diams=2666,die=a8,digamma=3dd,disin=22f2,div=f7,divide=f7,",
+  "divideontimes=22c7,divonx=22c7,djcy=452,dlcorn=231e,dlcrop=230d,dollar=24,dopf=1d555,dot=2d9,doteq=2",
+  "250,doteqdot=2251,dotminus=2238,dotplus=2214,dotsquare=22a1,doublebarwedge=2306,downarrow=2193,downd",
+  "ownarrows=21ca,downharpoonleft=21c3,downharpoonright=21c2,drbkarow=2910,drcorn=231f,drcrop=230c,dscr",
+  "=1d4b9,dscy=455,dsol=29f6,dstrok=111,dtdot=22f1,dtri=25bf,dtrif=25be,duarr=21f5,duhar=296f,dwangle=2",
+  "9a6,dzcy=45f,dzigrarr=27ff,eDDot=2a77,eDot=2251,eacute=e9,easter=2a6e,ecaron=11b,ecir=2256,ecirc=ea,",
+  "ecolon=2255,ecy=44d,edot=117,ee=2147,efDot=2252,efr=1d522,eg=2a9a,egrave=e8,egs=2a96,egsdot=2a98,el=",
+  "2a99,elinters=23e7,ell=2113,els=2a95,elsdot=2a97,emacr=113,empty=2205,emptyset=2205,emptyv=2205,emsp",
+  "=2003,emsp13=2004,emsp14=2005,eng=14b,ensp=2002,eogon=119,eopf=1d556,epar=22d5,eparsl=29e3,eplus=2a7",
+  "1,epsi=3b5,epsilon=3b5,epsiv=3f5,eqcirc=2256,eqcolon=2255,eqsim=2242,eqslantgtr=2a96,eqslantless=2a9",
+  "5,equals=3d,equest=225f,equiv=2261,equivDD=2a78,eqvparsl=29e5,erDot=2253,erarr=2971,escr=212f,esdot=",
+  "2250,esim=2242,eta=3b7,eth=f0,euml=eb,euro=20ac,excl=21,exist=2203,expectation=2130,exponentiale=214",
+  "7,fallingdotseq=2252,fcy=444,female=2640,ffilig=fb03,fflig=fb00,ffllig=fb04,ffr=1d523,filig=fb01,fjl",
+  "ig=66.6a,flat=266d,fllig=fb02,fltns=25b1,fnof=192,fopf=1d557,forall=2200,fork=22d4,forkv=2ad9,fparti",
+  "nt=2a0d,frac12=bd,frac13=2153,frac14=bc,frac15=2155,frac16=2159,frac18=215b,frac23=2154,frac25=2156,",
+  "frac34=be,frac35=2157,frac38=215c,frac45=2158,frac56=215a,frac58=215d,frac78=215e,frasl=2044,frown=2",
+  "322,fscr=1d4bb,gE=2267,gEl=2a8c,gacute=1f5,gamma=3b3,gammad=3dd,gap=2a86,gbreve=11f,gcirc=11d,gcy=43",
+  "3,gdot=121,ge=2265,gel=22db,geq=2265,geqq=2267,geqslant=2a7e,ges=2a7e,gescc=2aa9,gesdot=2a80,gesdoto",
+  "=2a82,gesdotol=2a84,gesl=22db.fe00,gesles=2a94,gfr=1d524,gg=226b,ggg=22d9,gimel=2137,gjcy=453,gl=227",
+  "7,glE=2a92,gla=2aa5,glj=2aa4,gnE=2269,gnap=2a8a,gnapprox=2a8a,gne=2a88,gneq=2a88,gneqq=2269,gnsim=22",
+  "e7,gopf=1d558,grave=60,gscr=210a,gsim=2273,gsime=2a8e,gsiml=2a90,gt=3e,gtcc=2aa7,gtcir=2a7a,gtdot=22",
+  "d7,gtlPar=2995,gtquest=2a7c,gtrapprox=2a86,gtrarr=2978,gtrdot=22d7,gtreqless=22db,gtreqqless=2a8c,gt",
+  "rless=2277,gtrsim=2273,gvertneqq=2269.fe00,gvnE=2269.fe00,hArr=21d4,hairsp=200a,half=bd,hamilt=210b,",
+  "hardcy=44a,harr=2194,harrcir=2948,harrw=21ad,hbar=210f,hcirc=125,hearts=2665,heartsuit=2665,hellip=2",
+  "026,hercon=22b9,hfr=1d525,hksearow=2925,hkswarow=2926,hoarr=21ff,homtht=223b,hookleftarrow=21a9,hook",
+  "rightarrow=21aa,hopf=1d559,horbar=2015,hscr=1d4bd,hslash=210f,hstrok=127,hybull=2043,hyphen=2010,iac",
+  "ute=ed,ic=2063,icirc=ee,icy=438,iecy=435,iexcl=a1,iff=21d4,ifr=1d526,igrave=ec,ii=2148,iiiint=2a0c,i",
+  "iint=222d,iinfin=29dc,iiota=2129,ijlig=133,imacr=12b,image=2111,imagline=2110,imagpart=2111,imath=13",
+  "1,imof=22b7,imped=1b5,in=2208,incare=2105,infin=221e,infintie=29dd,inodot=131,int=222b,intcal=22ba,i",
+  "ntegers=2124,intercal=22ba,intlarhk=2a17,intprod=2a3c,iocy=451,iogon=12f,iopf=1d55a,iota=3b9,iprod=2",
+  "a3c,iquest=bf,iscr=1d4be,isin=2208,isinE=22f9,isindot=22f5,isins=22f4,isinsv=22f3,isinv=2208,it=2062",
+  ",itilde=129,iukcy=456,iuml=ef,jcirc=135,jcy=439,jfr=1d527,jmath=237,jopf=1d55b,jscr=1d4bf,jsercy=458",
+  ",jukcy=454,kappa=3ba,kappav=3f0,kcedil=137,kcy=43a,kfr=1d528,kgreen=138,khcy=445,kjcy=45c,kopf=1d55c",
+  ",kscr=1d4c0,lAarr=21da,lArr=21d0,lAtail=291b,lBarr=290e,lE=2266,lEg=2a8b,lHar=2962,lacute=13a,laempt",
+  "yv=29b4,lagran=2112,lambda=3bb,lang=27e8,langd=2991,langle=27e8,lap=2a85,laquo=ab,larr=2190,larrb=21",
+  "e4,larrbfs=291f,larrfs=291d,larrhk=21a9,larrlp=21ab,larrpl=2939,larrsim=2973,larrtl=21a2,lat=2aab,la",
+  "tail=2919,late=2aad,lates=2aad.fe00,lbarr=290c,lbbrk=2772,lbrace=7b,lbrack=5b,lbrke=298b,lbrksld=298",
+  "f,lbrkslu=298d,lcaron=13e,lcedil=13c,lceil=2308,lcub=7b,lcy=43b,ldca=2936,ldquo=201c,ldquor=201e,ldr",
+  "dhar=2967,ldrushar=294b,ldsh=21b2,le=2264,leftarrow=2190,leftarrowtail=21a2,leftharpoondown=21bd,lef",
+  "tharpoonup=21bc,leftleftarrows=21c7,leftrightarrow=2194,leftrightarrows=21c6,leftrightharpoons=21cb,",
+  "leftrightsquigarrow=21ad,leftthreetimes=22cb,leg=22da,leq=2264,leqq=2266,leqslant=2a7d,les=2a7d,lesc",
+  "c=2aa8,lesdot=2a7f,lesdoto=2a81,lesdotor=2a83,lesg=22da.fe00,lesges=2a93,lessapprox=2a85,lessdot=22d",
+  "6,lesseqgtr=22da,lesseqqgtr=2a8b,lessgtr=2276,lesssim=2272,lfisht=297c,lfloor=230a,lfr=1d529,lg=2276",
+  ",lgE=2a91,lhard=21bd,lharu=21bc,lharul=296a,lhblk=2584,ljcy=459,ll=226a,llarr=21c7,llcorner=231e,llh",
+  "ard=296b,lltri=25fa,lmidot=140,lmoust=23b0,lmoustache=23b0,lnE=2268,lnap=2a89,lnapprox=2a89,lne=2a87",
+  ",lneq=2a87,lneqq=2268,lnsim=22e6,loang=27ec,loarr=21fd,lobrk=27e6,longleftarrow=27f5,longleftrightar",
+  "row=27f7,longmapsto=27fc,longrightarrow=27f6,looparrowleft=21ab,looparrowright=21ac,lopar=2985,lopf=",
+  "1d55d,loplus=2a2d,lotimes=2a34,lowast=2217,lowbar=5f,loz=25ca,lozenge=25ca,lozf=29eb,lpar=28,lparlt=",
+  "2993,lrarr=21c6,lrcorner=231f,lrhar=21cb,lrhard=296d,lrm=200e,lrtri=22bf,lsaquo=2039,lscr=1d4c1,lsh=",
+  "21b0,lsim=2272,lsime=2a8d,lsimg=2a8f,lsqb=5b,lsquo=2018,lsquor=201a,lstrok=142,lt=3c,ltcc=2aa6,ltcir",
+  "=2a79,ltdot=22d6,lthree=22cb,ltimes=22c9,ltlarr=2976,ltquest=2a7b,ltrPar=2996,ltri=25c3,ltrie=22b4,l",
+  "trif=25c2,lurdshar=294a,luruhar=2966,lvertneqq=2268.fe00,lvnE=2268.fe00,mDDot=223a,macr=af,male=2642",
+  ",malt=2720,maltese=2720,map=21a6,mapsto=21a6,mapstodown=21a7,mapstoleft=21a4,mapstoup=21a5,marker=25",
+  "ae,mcomma=2a29,mcy=43c,mdash=2014,measuredangle=2221,mfr=1d52a,mho=2127,micro=b5,mid=2223,midast=2a,",
+  "midcir=2af0,middot=b7,minus=2212,minusb=229f,minusd=2238,minusdu=2a2a,mlcp=2adb,mldr=2026,mnplus=221",
+  "3,models=22a7,mopf=1d55e,mp=2213,mscr=1d4c2,mstpos=223e,mu=3bc,multimap=22b8,mumap=22b8,nGg=22d9.338",
+  ",nGt=226b.20d2,nGtv=226b.338,nLeftarrow=21cd,nLeftrightarrow=21ce,nLl=22d8.338,nLt=226a.20d2,nLtv=22",
+  "6a.338,nRightarrow=21cf,nVDash=22af,nVdash=22ae,nabla=2207,nacute=144,nang=2220.20d2,nap=2249,napE=2",
+  "a70.338,napid=224b.338,napos=149,napprox=2249,natur=266e,natural=266e,naturals=2115,nbsp=a0,nbump=22",
+  "4e.338,nbumpe=224f.338,ncap=2a43,ncaron=148,ncedil=146,ncong=2247,ncongdot=2a6d.338,ncup=2a42,ncy=43",
+  "d,ndash=2013,ne=2260,neArr=21d7,nearhk=2924,nearr=2197,nearrow=2197,nedot=2250.338,nequiv=2262,nesea",
+  "r=2928,nesim=2242.338,nexist=2204,nexists=2204,nfr=1d52b,ngE=2267.338,nge=2271,ngeq=2271,ngeqq=2267.",
+  "338,ngeqslant=2a7e.338,nges=2a7e.338,ngsim=2275,ngt=226f,ngtr=226f,nhArr=21ce,nharr=21ae,nhpar=2af2,",
+  "ni=220b,nis=22fc,nisd=22fa,niv=220b,njcy=45a,nlArr=21cd,nlE=2266.338,nlarr=219a,nldr=2025,nle=2270,n",
+  "leftarrow=219a,nleftrightarrow=21ae,nleq=2270,nleqq=2266.338,nleqslant=2a7d.338,nles=2a7d.338,nless=",
+  "226e,nlsim=2274,nlt=226e,nltri=22ea,nltrie=22ec,nmid=2224,nopf=1d55f,not=ac,notin=2209,notinE=22f9.3",
+  "38,notindot=22f5.338,notinva=2209,notinvb=22f7,notinvc=22f6,notni=220c,notniva=220c,notnivb=22fe,not",
+  "nivc=22fd,npar=2226,nparallel=2226,nparsl=2afd.20e5,npart=2202.338,npolint=2a14,npr=2280,nprcue=22e0",
+  ",npre=2aaf.338,nprec=2280,npreceq=2aaf.338,nrArr=21cf,nrarr=219b,nrarrc=2933.338,nrarrw=219d.338,nri",
+  "ghtarrow=219b,nrtri=22eb,nrtrie=22ed,nsc=2281,nsccue=22e1,nsce=2ab0.338,nscr=1d4c3,nshortmid=2224,ns",
+  "hortparallel=2226,nsim=2241,nsime=2244,nsimeq=2244,nsmid=2224,nspar=2226,nsqsube=22e2,nsqsupe=22e3,n",
+  "sub=2284,nsubE=2ac5.338,nsube=2288,nsubset=2282.20d2,nsubseteq=2288,nsubseteqq=2ac5.338,nsucc=2281,n",
+  "succeq=2ab0.338,nsup=2285,nsupE=2ac6.338,nsupe=2289,nsupset=2283.20d2,nsupseteq=2289,nsupseteqq=2ac6",
+  ".338,ntgl=2279,ntilde=f1,ntlg=2278,ntriangleleft=22ea,ntrianglelefteq=22ec,ntriangleright=22eb,ntria",
+  "nglerighteq=22ed,nu=3bd,num=23,numero=2116,numsp=2007,nvDash=22ad,nvHarr=2904,nvap=224d.20d2,nvdash=",
+  "22ac,nvge=2265.20d2,nvgt=3e.20d2,nvinfin=29de,nvlArr=2902,nvle=2264.20d2,nvlt=3c.20d2,nvltrie=22b4.2",
+  "0d2,nvrArr=2903,nvrtrie=22b5.20d2,nvsim=223c.20d2,nwArr=21d6,nwarhk=2923,nwarr=2196,nwarrow=2196,nwn",
+  "ear=2927,oS=24c8,oacute=f3,oast=229b,ocir=229a,ocirc=f4,ocy=43e,odash=229d,odblac=151,odiv=2a38,odot",
+  "=2299,odsold=29bc,oelig=153,ofcir=29bf,ofr=1d52c,ogon=2db,ograve=f2,ogt=29c1,ohbar=29b5,ohm=3a9,oint",
+  "=222e,olarr=21ba,olcir=29be,olcross=29bb,oline=203e,olt=29c0,omacr=14d,omega=3c9,omicron=3bf,omid=29",
+  "b6,ominus=2296,oopf=1d560,opar=29b7,operp=29b9,oplus=2295,or=2228,orarr=21bb,ord=2a5d,order=2134,ord",
+  "erof=2134,ordf=aa,ordm=ba,origof=22b6,oror=2a56,orslope=2a57,orv=2a5b,oscr=2134,oslash=f8,osol=2298,",
+  "otilde=f5,otimes=2297,otimesas=2a36,ouml=f6,ovbar=233d,par=2225,para=b6,parallel=2225,parsim=2af3,pa",
+  "rsl=2afd,part=2202,pcy=43f,percnt=25,period=2e,permil=2030,perp=22a5,pertenk=2031,pfr=1d52d,phi=3c6,",
+  "phiv=3d5,phmmat=2133,phone=260e,pi=3c0,pitchfork=22d4,piv=3d6,planck=210f,planckh=210e,plankv=210f,p",
+  "lus=2b,plusacir=2a23,plusb=229e,pluscir=2a22,plusdo=2214,plusdu=2a25,pluse=2a72,plusmn=b1,plussim=2a",
+  "26,plustwo=2a27,pm=b1,pointint=2a15,popf=1d561,pound=a3,pr=227a,prE=2ab3,prap=2ab7,prcue=227c,pre=2a",
+  "af,prec=227a,precapprox=2ab7,preccurlyeq=227c,preceq=2aaf,precnapprox=2ab9,precneqq=2ab5,precnsim=22",
+  "e8,precsim=227e,prime=2032,primes=2119,prnE=2ab5,prnap=2ab9,prnsim=22e8,prod=220f,profalar=232e,prof",
+  "line=2312,profsurf=2313,prop=221d,propto=221d,prsim=227e,prurel=22b0,pscr=1d4c5,psi=3c8,puncsp=2008,",
+  "qfr=1d52e,qint=2a0c,qopf=1d562,qprime=2057,qscr=1d4c6,quaternions=210d,quatint=2a16,quest=3f,questeq",
+  "=225f,quot=22,rAarr=21db,rArr=21d2,rAtail=291c,rBarr=290f,rHar=2964,race=223d.331,racute=155,radic=2",
+  "21a,raemptyv=29b3,rang=27e9,rangd=2992,range=29a5,rangle=27e9,raquo=bb,rarr=2192,rarrap=2975,rarrb=2",
+  "1e5,rarrbfs=2920,rarrc=2933,rarrfs=291e,rarrhk=21aa,rarrlp=21ac,rarrpl=2945,rarrsim=2974,rarrtl=21a3",
+  ",rarrw=219d,ratail=291a,ratio=2236,rationals=211a,rbarr=290d,rbbrk=2773,rbrace=7d,rbrack=5d,rbrke=29",
+  "8c,rbrksld=298e,rbrkslu=2990,rcaron=159,rcedil=157,rceil=2309,rcub=7d,rcy=440,rdca=2937,rdldhar=2969",
+  ",rdquo=201d,rdquor=201d,rdsh=21b3,real=211c,realine=211b,realpart=211c,reals=211d,rect=25ad,reg=ae,r",
+  "fisht=297d,rfloor=230b,rfr=1d52f,rhard=21c1,rharu=21c0,rharul=296c,rho=3c1,rhov=3f1,rightarrow=2192,",
+  "rightarrowtail=21a3,rightharpoondown=21c1,rightharpoonup=21c0,rightleftarrows=21c4,rightleftharpoons",
+  "=21cc,rightrightarrows=21c9,rightsquigarrow=219d,rightthreetimes=22cc,ring=2da,risingdotseq=2253,rla",
+  "rr=21c4,rlhar=21cc,rlm=200f,rmoust=23b1,rmoustache=23b1,rnmid=2aee,roang=27ed,roarr=21fe,robrk=27e7,",
+  "ropar=2986,ropf=1d563,roplus=2a2e,rotimes=2a35,rpar=29,rpargt=2994,rppolint=2a12,rrarr=21c9,rsaquo=2",
+  "03a,rscr=1d4c7,rsh=21b1,rsqb=5d,rsquo=2019,rsquor=2019,rthree=22cc,rtimes=22ca,rtri=25b9,rtrie=22b5,",
+  "rtrif=25b8,rtriltri=29ce,ruluhar=2968,rx=211e,sacute=15b,sbquo=201a,sc=227b,scE=2ab4,scap=2ab8,scaro",
+  "n=161,sccue=227d,sce=2ab0,scedil=15f,scirc=15d,scnE=2ab6,scnap=2aba,scnsim=22e9,scpolint=2a13,scsim=",
+  "227f,scy=441,sdot=22c5,sdotb=22a1,sdote=2a66,seArr=21d8,searhk=2925,searr=2198,searrow=2198,sect=a7,",
+  "semi=3b,seswar=2929,setminus=2216,setmn=2216,sext=2736,sfr=1d530,sfrown=2322,sharp=266f,shchcy=449,s",
+  "hcy=448,shortmid=2223,shortparallel=2225,shy=ad,sigma=3c3,sigmaf=3c2,sigmav=3c2,sim=223c,simdot=2a6a",
+  ",sime=2243,simeq=2243,simg=2a9e,simgE=2aa0,siml=2a9d,simlE=2a9f,simne=2246,simplus=2a24,simrarr=2972",
+  ",slarr=2190,smallsetminus=2216,smashp=2a33,smeparsl=29e4,smid=2223,smile=2323,smt=2aaa,smte=2aac,smt",
+  "es=2aac.fe00,softcy=44c,sol=2f,solb=29c4,solbar=233f,sopf=1d564,spades=2660,spadesuit=2660,spar=2225",
+  ",sqcap=2293,sqcaps=2293.fe00,sqcup=2294,sqcups=2294.fe00,sqsub=228f,sqsube=2291,sqsubset=228f,sqsubs",
+  "eteq=2291,sqsup=2290,sqsupe=2292,sqsupset=2290,sqsupseteq=2292,squ=25a1,square=25a1,squarf=25aa,squf",
+  "=25aa,srarr=2192,sscr=1d4c8,ssetmn=2216,ssmile=2323,sstarf=22c6,star=2606,starf=2605,straightepsilon",
+  "=3f5,straightphi=3d5,strns=af,sub=2282,subE=2ac5,subdot=2abd,sube=2286,subedot=2ac3,submult=2ac1,sub",
+  "nE=2acb,subne=228a,subplus=2abf,subrarr=2979,subset=2282,subseteq=2286,subseteqq=2ac5,subsetneq=228a",
+  ",subsetneqq=2acb,subsim=2ac7,subsub=2ad5,subsup=2ad3,succ=227b,succapprox=2ab8,succcurlyeq=227d,succ",
+  "eq=2ab0,succnapprox=2aba,succneqq=2ab6,succnsim=22e9,succsim=227f,sum=2211,sung=266a,sup=2283,sup1=b",
+  "9,sup2=b2,sup3=b3,supE=2ac6,supdot=2abe,supdsub=2ad8,supe=2287,supedot=2ac4,suphsol=27c9,suphsub=2ad",
+  "7,suplarr=297b,supmult=2ac2,supnE=2acc,supne=228b,supplus=2ac0,supset=2283,supseteq=2287,supseteqq=2",
+  "ac6,supsetneq=228b,supsetneqq=2acc,supsim=2ac8,supsub=2ad4,supsup=2ad6,swArr=21d9,swarhk=2926,swarr=",
+  "2199,swarrow=2199,swnwar=292a,szlig=df,target=2316,tau=3c4,tbrk=23b4,tcaron=165,tcedil=163,tcy=442,t",
+  "dot=20db,telrec=2315,tfr=1d531,there4=2234,therefore=2234,theta=3b8,thetasym=3d1,thetav=3d1,thickapp",
+  "rox=2248,thicksim=223c,thinsp=2009,thkap=2248,thksim=223c,thorn=fe,tilde=2dc,times=d7,timesb=22a0,ti",
+  "mesbar=2a31,timesd=2a30,tint=222d,toea=2928,top=22a4,topbot=2336,topcir=2af1,topf=1d565,topfork=2ada",
+  ",tosa=2929,tprime=2034,trade=2122,triangle=25b5,triangledown=25bf,triangleleft=25c3,trianglelefteq=2",
+  "2b4,triangleq=225c,triangleright=25b9,trianglerighteq=22b5,tridot=25ec,trie=225c,triminus=2a3a,tripl",
+  "us=2a39,trisb=29cd,tritime=2a3b,trpezium=23e2,tscr=1d4c9,tscy=446,tshcy=45b,tstrok=167,twixt=226c,tw",
+  "oheadleftarrow=219e,twoheadrightarrow=21a0,uArr=21d1,uHar=2963,uacute=fa,uarr=2191,ubrcy=45e,ubreve=",
+  "16d,ucirc=fb,ucy=443,udarr=21c5,udblac=171,udhar=296e,ufisht=297e,ufr=1d532,ugrave=f9,uharl=21bf,uha",
+  "rr=21be,uhblk=2580,ulcorn=231c,ulcorner=231c,ulcrop=230f,ultri=25f8,umacr=16b,uml=a8,uogon=173,uopf=",
+  "1d566,uparrow=2191,updownarrow=2195,upharpoonleft=21bf,upharpoonright=21be,uplus=228e,upsi=3c5,upsih",
+  "=3d2,upsilon=3c5,upuparrows=21c8,urcorn=231d,urcorner=231d,urcrop=230e,uring=16f,urtri=25f9,uscr=1d4",
+  "ca,utdot=22f0,utilde=169,utri=25b5,utrif=25b4,uuarr=21c8,uuml=fc,uwangle=29a7,vArr=21d5,vBar=2ae8,vB",
+  "arv=2ae9,vDash=22a8,vangrt=299c,varepsilon=3f5,varkappa=3f0,varnothing=2205,varphi=3d5,varpi=3d6,var",
+  "propto=221d,varr=2195,varrho=3f1,varsigma=3c2,varsubsetneq=228a.fe00,varsubsetneqq=2acb.fe00,varsups",
+  "etneq=228b.fe00,varsupsetneqq=2acc.fe00,vartheta=3d1,vartriangleleft=22b2,vartriangleright=22b3,vcy=",
+  "432,vdash=22a2,vee=2228,veebar=22bb,veeeq=225a,vellip=22ee,verbar=7c,vert=7c,vfr=1d533,vltri=22b2,vn",
+  "sub=2282.20d2,vnsup=2283.20d2,vopf=1d567,vprop=221d,vrtri=22b3,vscr=1d4cb,vsubnE=2acb.fe00,vsubne=22",
+  "8a.fe00,vsupnE=2acc.fe00,vsupne=228b.fe00,vzigzag=299a,wcirc=175,wedbar=2a5f,wedge=2227,wedgeq=2259,",
+  "weierp=2118,wfr=1d534,wopf=1d568,wp=2118,wr=2240,wreath=2240,wscr=1d4cc,xcap=22c2,xcirc=25ef,xcup=22",
+  "c3,xdtri=25bd,xfr=1d535,xhArr=27fa,xharr=27f7,xi=3be,xlArr=27f8,xlarr=27f5,xmap=27fc,xnis=22fb,xodot",
+  "=2a00,xopf=1d569,xoplus=2a01,xotime=2a02,xrArr=27f9,xrarr=27f6,xscr=1d4cd,xsqcup=2a06,xuplus=2a04,xu",
+  "tri=25b3,xvee=22c1,xwedge=22c0,yacute=fd,yacy=44f,ycirc=177,ycy=44b,yen=a5,yfr=1d536,yicy=457,yopf=1",
+  "d56a,yscr=1d4ce,yucy=44e,yuml=ff,zacute=17a,zcaron=17e,zcy=437,zdot=17c,zeetrf=2128,zeta=3b6,zfr=1d5",
+  "37,zhcy=436,zigrarr=21dd,zopf=1d56b,zscr=1d4cf,zwj=200d,zwnj=200c"
+].join("");
+var NAMED_REFERENCES = new Map(NAMED.split(",").map((entry) => {
+  const [name, codes] = entry.split("=");
+  return [name, String.fromCodePoint(...codes.split(".").map((code) => Number.parseInt(code, 16)))];
+}));
+
 // src/html.js
 var LATIN1 = "nbsp iexcl cent pound curren yen brvbar sect uml copy ordf laquo not shy reg macr deg plusmn sup2 sup3 acute micro para middot cedil sup1 ordm raquo frac14 frac12 frac34 iquest Agrave Aacute Acirc Atilde Auml Aring AElig Ccedil Egrave Eacute Ecirc Euml Igrave Iacute Icirc Iuml ETH Ntilde Ograve Oacute Ocirc Otilde Ouml times Oslash Ugrave Uacute Ucirc Uuml Yacute THORN szlig agrave aacute acirc atilde auml aring aelig ccedil egrave eacute ecirc euml igrave iacute icirc iuml eth ntilde ograve oacute ocirc otilde ouml divide oslash ugrave uacute ucirc uuml yacute thorn yuml".split(" ");
-var ENTITIES = new Map([
-  ...LATIN1.map((name, index) => [name, String.fromCodePoint(160 + index)]),
-  ["amp", "&"],
-  ["lt", "<"],
-  ["gt", ">"],
-  ["quot", '"'],
-  ["apos", "'"],
-  ["AMP", "&"],
-  ["LT", "<"],
-  ["GT", ">"],
-  ["QUOT", '"'],
-  ["COPY", "\xA9"],
-  ["REG", "\xAE"],
-  ["OElig", "\u0152"],
-  ["oelig", "\u0153"],
-  ["Scaron", "\u0160"],
-  ["scaron", "\u0161"],
-  ["Yuml", "\u0178"],
-  ["fnof", "\u0192"],
-  ["circ", "\u02C6"],
-  ["tilde", "\u02DC"],
-  ["ensp", "\u2002"],
-  ["emsp", "\u2003"],
-  ["thinsp", "\u2009"],
-  ["zwnj", "\u200C"],
-  ["zwj", "\u200D"],
-  ["lrm", "\u200E"],
-  ["rlm", "\u200F"],
-  ["ndash", "\u2013"],
-  ["mdash", "\u2014"],
-  ["lsquo", "\u2018"],
-  ["rsquo", "\u2019"],
-  ["sbquo", "\u201A"],
-  ["ldquo", "\u201C"],
-  ["rdquo", "\u201D"],
-  ["bdquo", "\u201E"],
-  ["dagger", "\u2020"],
-  ["Dagger", "\u2021"],
-  ["bull", "\u2022"],
-  ["hellip", "\u2026"],
-  ["permil", "\u2030"],
-  ["prime", "\u2032"],
-  ["Prime", "\u2033"],
-  ["lsaquo", "\u2039"],
-  ["rsaquo", "\u203A"],
-  ["euro", "\u20AC"],
-  ["trade", "\u2122"],
-  ["larr", "\u2190"],
-  ["uarr", "\u2191"],
-  ["rarr", "\u2192"],
-  ["darr", "\u2193"],
-  ["hearts", "\u2665"],
-  ["check", "\u2713"],
-  // The punctuation of a web address, as browsers read these names
-  // ("https://bank.example&commat;evil.example/" goes to evil.example)
-  ["Tab", "	"],
-  ["NewLine", "\n"],
-  ["excl", "!"],
-  ["num", "#"],
-  ["dollar", "$"],
-  ["percnt", "%"],
-  ["lpar", "("],
-  ["rpar", ")"],
-  ["ast", "*"],
-  ["midast", "*"],
-  ["plus", "+"],
-  ["comma", ","],
-  ["period", "."],
-  ["sol", "/"],
-  ["colon", ":"],
-  ["semi", ";"],
-  ["equals", "="],
-  ["quest", "?"],
-  ["commat", "@"],
-  ["lsqb", "["],
-  ["lbrack", "["],
-  ["bsol", "\\"],
-  ["rsqb", "]"],
-  ["rbrack", "]"],
-  ["Hat", "^"],
-  ["lowbar", "_"],
-  ["UnderBar", "_"],
-  ["grave", "`"],
-  ["DiacriticalGrave", "`"],
-  ["lcub", "{"],
-  ["lbrace", "{"],
-  ["verbar", "|"],
-  ["vert", "|"],
-  ["VerticalLine", "|"],
-  ["rcub", "}"],
-  ["rbrace", "}"]
-]);
 var LEGACY = /* @__PURE__ */ new Set([...LATIN1, "amp", "lt", "gt", "quot", "AMP", "LT", "GT", "QUOT", "COPY", "REG"]);
 var LEGACY_LONGEST = Math.max(...[...LEGACY].map((name) => name.length));
-var LONGER_NAMES = new Set("centerdot copysr divideontimes gtcc gtcir gtdot gtlPar gtquest gtrapprox gtrarr gtrdot gtreqless gtreqqless gtrless gtrsim ltcc ltcir ltdot lthree ltimes ltlarr ltquest ltrPar ltri ltrie ltrif notin notinE notindot notinva notinvb notinvc notni notniva notnivb notnivc parallel timesb timesbar timesd".split(" "));
 var WINDOWS_1252 = [8364, 129, 8218, 402, 8222, 8230, 8224, 8225, 710, 8240, 352, 8249, 338, 141, 381, 143, 144, 8216, 8217, 8220, 8221, 8226, 8211, 8212, 732, 8482, 353, 8250, 339, 157, 382, 376];
 var REFERENCE = /&(?:#([xX])([\da-fA-F]+)|#(\d+)|([a-zA-Z][a-zA-Z\d]{0,31}))(;?)/g;
 function fromCode(code) {
@@ -1221,8 +1403,8 @@ function decodeEntities(value, { attribute = false } = {}) {
     if (hex !== void 0 || decimal !== void 0) {
       return fromCode(hex === void 0 ? Number.parseInt(decimal, 10) : Number.parseInt(hex, 16));
     }
-    if (semicolon && (ENTITIES.has(name) || LONGER_NAMES.has(name))) {
-      return ENTITIES.get(name) ?? match;
+    if (semicolon && NAMED_REFERENCES.has(name)) {
+      return NAMED_REFERENCES.get(name);
     }
     let legacy;
     for (let length = Math.min(name.length, LEGACY_LONGEST); length >= 2 && legacy === void 0; length--) {
@@ -1236,7 +1418,7 @@ function decodeEntities(value, { attribute = false } = {}) {
     if (attribute && /[\da-zA-Z=]/.test(next)) {
       return match;
     }
-    return ENTITIES.get(legacy) + rest;
+    return NAMED_REFERENCES.get(legacy) + rest;
   });
 }
 var UNSHOWN = /* @__PURE__ */ new Set(["script", "style", "title", "noembed", "noframes", "iframe"]);
@@ -2083,6 +2265,34 @@ function continuesName(text, index) {
 var FILE_TLDS = /* @__PURE__ */ new Set(["ai", "app", "md", "mov", "pm", "ps", "py", "rs", "sh", "so", "zip"]);
 var LINK_FILE_TLDS = /* @__PURE__ */ new Set(["md", "mov", "pm", "ps", "py", "rs", "sh", "so", "zip"]);
 var CLICK_TRACKERS = ["sendgrid.net", "list-manage.com", "mandrillapp.com", "awstrack.me", "pstmrk.it", "hubspotlinks.com", "rs6.net", "klclick.com", "mjt.lu", "exacttarget.com", "convertkit-mail.com", "convertkit-mail2.com", "kit-mail3.com", "sendibt2.com", "sendibt3.com", "createsend1.com", "cmail20.com", "clicks.mlsend.com", "acemlnb.com", "link.mail.beehiiv.com", "bhclick.com", "safelinks.protection.outlook.com", "urldefense.com", "urldefense.proofpoint.com", "mimecast.com", "mimecastprotect.com", "cudasvc.com", "secure-web.cisco.com"];
+var MAX_URL_HOST = 4096;
+var AUTHORITY_END = /[/\\?#]/g;
+var IGNORED_IN_HOST = /[\u00AD\u034F\u180B-\u180D\u180F\u200B\u2060\u2064\uFE00-\uFE0F\uFEFF]|\uD82F[\uDCA0-\uDCA3]|\uDB40[\uDD00-\uDDEF]/g;
+function boundedUrl(address2) {
+  const text = String(address2).replaceAll(/[\t\n\r]/g, "");
+  const colon = text.indexOf(":");
+  let start = colon === -1 ? 0 : colon + 1;
+  while (start < text.length && (text[start] === "/" || text[start] === "\\")) {
+    start++;
+  }
+  AUTHORITY_END.lastIndex = start;
+  const end = AUTHORITY_END.exec(text)?.index ?? text.length;
+  const file = /^[\0- ]*file:/i.test(text);
+  const at = file ? start : Math.max(start, text.lastIndexOf("@", end - 1) + 1);
+  const bracket = text.lastIndexOf("]", end - 1);
+  const port = text.lastIndexOf(":", end - 1);
+  let host = text.slice(at, !file && port > Math.max(at - 1, bracket) ? port : end);
+  if (host.length > MAX_URL_HOST && host.includes("%")) {
+    try {
+      host = decodeURIComponent(host);
+    } catch {
+    }
+  }
+  if (host.length > MAX_URL_HOST && host.replaceAll(IGNORED_IN_HOST, "").length > MAX_URL_HOST) {
+    throw new TypeError("Invalid URL: host too long");
+  }
+  return new URL(text);
+}
 var isUnder = (host, domain) => host === domain || host.endsWith(`.${domain}`);
 function isClickTracker(url) {
   const host = url.hostname.toLowerCase();
@@ -2111,7 +2321,7 @@ var MAX_GATEWAYS = 16;
 function unwrapLink(address2) {
   let url;
   try {
-    url = new URL(address2);
+    url = boundedUrl(address2);
   } catch {
     return null;
   }
@@ -2122,7 +2332,7 @@ function unwrapLink(address2) {
     }
     let next;
     try {
-      next = new URL(target);
+      next = boundedUrl(target);
     } catch {
       break;
     }
@@ -2382,7 +2592,7 @@ function endsInsideTag(html, end, link) {
   return joined !== host && (!isHost(host) || isHost(joined) && registrableDomain(joined) !== registrableDomain(host));
 }
 var MAX_SHOWN_HTML = 2e5;
-function extractLinks(text, html, { maxLength = 5e5, bareHosts = false } = {}) {
+function extractLinks(text, html, { maxLength = 5e5, bareHosts: bareHosts2 = false } = {}) {
   text = typeof text === "string" ? foldToAscii(text) : text;
   html = typeof html === "string" ? foldToAscii(html) : html;
   const links = [];
@@ -2400,7 +2610,7 @@ function extractLinks(text, html, { maxLength = 5e5, bareHosts = false } = {}) {
     }
     let url;
     try {
-      url = new URL(href);
+      url = boundedUrl(href);
     } catch {
       return;
     }
@@ -2449,7 +2659,7 @@ ${shown || ""}`;
         }
         add(link);
       }
-      if (bareHosts && index < 2) {
+      if (bareHosts2 && index < 2) {
         bareLinkHosts(read, (host) => {
           bareFound.push(host);
         });
@@ -2725,7 +2935,7 @@ function isDeceptiveLink(link, { from } = {}) {
   }
   let shownUrl;
   try {
-    shownUrl = new URL(/^https?:\/\//i.test(link.text) ? link.text : `http://${link.text}`);
+    shownUrl = boundedUrl(/^https?:\/\//i.test(link.text) ? link.text : `http://${link.text}`);
   } catch {
     return false;
   }
@@ -3971,7 +4181,8 @@ async function parseWithin(raw, parse = parseMessage, deadline = Date.now() + PA
     }
   }
 }
-async function expandAttachments(attachments = [], errors = [], parse = parseMessage, unopened = []) {
+async function expandAttachments(attachments = [], errors = [], parse = parseMessage, gets = {}) {
+  const { unopened = [], mails = [] } = Array.isArray(gets) ? { unopened: gets } : gets ?? {};
   const all = [];
   const deadline = Date.now() + PARSE_TIMEOUT;
   let budget = MAX_NESTED_BYTES;
@@ -4020,6 +4231,7 @@ async function expandAttachments(attachments = [], errors = [], parse = parseMes
         if (inner.error) {
           errors.push(inner.error);
         }
+        mails.push(inner.mail);
         await visit(inner.mail.attachments, prefix ? `${prefix}/${name}` : name || "attached message", depth + 1);
       }
     }
@@ -4038,6 +4250,11 @@ import { isIP } from "node:net";
 import { domainToASCII } from "node:url";
 import { getPublicSuffix } from "tldts";
 var LOOKUP_LABEL = /^[a-z\d_-]{1,63}$/;
+var LABEL_SEPARATOR = /[.\u3002\uFF0E\uFF61]/g;
+function lastLabels(name) {
+  const separators = [...name.matchAll(LABEL_SEPARATOR)];
+  return separators.length < 128 ? 0 : separators.at(-128).index + 1;
+}
 function lookupName(host) {
   if (typeof host !== "string") {
     return null;
@@ -4048,6 +4265,7 @@ function lookupName(host) {
   }
   let name = host.slice(0, end).toLowerCase();
   if (/[\u0080-\u{10FFFF}]/u.test(name)) {
+    name = name.slice(lastLabels(name));
     name = domainToASCII(name) || name;
   }
   if (isIP(name.replaceAll(/^\[|]$/g, "")) !== 0) {
@@ -4387,7 +4605,7 @@ function asciiHostname(value) {
     return null;
   }
   const lower = value.normalize("NFKC").toLowerCase().replace(/\.$/, "");
-  if (lower === "" || /[\0-,/:-^`{-\u007F]/.test(lower)) {
+  if (lower === "" || lower.length > 1024 || /[\0-,/:-^`{-\u007F]/.test(lower)) {
     return null;
   }
   const ascii = domainToASCII2(lower);
@@ -4569,8 +4787,8 @@ function trustReputation(result, trusted = []) {
   for (const value of result.checkedValues.filter((item) => allowed.has(item))) {
     const signers = allowed.get(value);
     const counts = (entry) => Boolean(entry) && (signers === null || signers.some((signer) => vouches(normalizeEntry(entry), signer)));
-    const detail = result.details[value];
-    const listed = result.allowlisted[value] || (detail?.isAllowlisted ? detail.allowlistValue : null);
+    const detail = Object.hasOwn(result.details, value) ? result.details[value] : void 0;
+    const listed = Object.hasOwn(result.allowlisted, value) && result.allowlisted[value] || (detail?.isAllowlisted ? detail.allowlistValue : null);
     if (counts(listed) && !out.isAllowlisted) {
       out.isAllowlisted = true;
       out.allowlistValue = listed;
@@ -5436,8 +5654,990 @@ var Classifier = class _Classifier {
   }
 };
 
-// src/is-arbitrary.js
+// src/links.js
+import { Buffer as Buffer7 } from "node:buffer";
+import { isIP as isIP3 } from "node:net";
 import { parse as parseDomain3 } from "tldts";
+var LINK_ATTRIBUTES = /* @__PURE__ */ new Set([
+  "href",
+  "src",
+  "srcset",
+  "background",
+  "action",
+  "formaction",
+  "poster",
+  "cite",
+  "longdesc",
+  "xlink:href",
+  "style",
+  "data",
+  "ping",
+  // (of a <meta> refresh: "0;url=https://example.com/")
+  "content",
+  // (a document of its own, see linksOf)
+  "srcdoc"
+]);
+var TAG_START = /<[a-z][^\s/>]*/gi;
+var URL_START = /\b(?:https?:\/\/|www\.)[^\s<>"'`]+/gi;
+var CSS_URL = /url\(\s*["']?([^()"']*)/gi;
+var CSS_IMPORT = /@import\s+["']([^"'<>]*)/gi;
+var LENIENT = /[\s"'/<](href|src|srcset|background|action|formaction|poster|cite|longdesc|xlink:href|style|data|ping|content|srcdoc)\s*=\s*/gi;
+var IN_WORD2 = /[\p{L}\p{N}\p{M}_%]/u;
+var NAMESPACES = /* @__PURE__ */ new Set(["www.w3.org", "w3.org"]);
+var MAX_HOST = 760;
+var MAX_SEEN = 1e5;
+var TRAILING = /* @__PURE__ */ new Set([")", ".", ",", ";", ":", "!", "?", "'", '"', "]"]);
+var DECODE_CHUNK = 1024 * 1024;
+var CHUNK_OVERLAP = 4096;
+var MAX_EMBED_DEPTH = 3;
+var MAX_EMBEDDED = 1e3;
+var MAX_EMBEDDED_LENGTH = 10 * 1024 * 1024;
+var MAX_ATTACHED = 100;
+var MAX_ATTACHED_BYTES = 50 * 1024 * 1024;
+var MAX_READ_TIME = 5e3;
+var MAX_CARD_BYTES = 4 * 1024 * 1024;
+var MAX_SHOWN_BYTES = 1024 * 1024;
+function isHostCode2(code) {
+  return code >= 97 && code <= 122 || code >= 65 && code <= 90 || code >= 48 && code <= 57 || code === 45 || code === 46;
+}
+function isSpace(code) {
+  return code === 32 || code >= 9 && code <= 13;
+}
+function urlOf(value) {
+  let href = value.replaceAll(/[\t\n\r]/g, "");
+  let start = 0;
+  let end = href.length;
+  while (start < end && href.codePointAt(start) <= 32) {
+    start++;
+  }
+  while (end > start && href.codePointAt(end - 1) <= 32) {
+    end--;
+  }
+  while (end > start && TRAILING.has(href[end - 1])) {
+    end--;
+  }
+  href = href.slice(start, end);
+  if (/^[\\/]{2}/.test(href)) {
+    href = `https://${href.slice(2)}`;
+  } else if (/^www\./i.test(href)) {
+    href = `http://${href}`;
+  } else if (!/^https?:/i.test(href)) {
+    return null;
+  }
+  try {
+    return boundedUrl(href);
+  } catch {
+    return null;
+  }
+}
+function hostOfUrl(url) {
+  let host = url.hostname.toLowerCase();
+  let dots = host.length;
+  while (dots > 0 && host[dots - 1] === ".") {
+    dots--;
+  }
+  host = host.slice(0, dots);
+  if (host.startsWith("[") && host.endsWith("]")) {
+    host = host.slice(1, -1);
+  }
+  if (!host || NAMESPACES.has(host)) {
+    return null;
+  }
+  return isIP3(host) ? host : lookupName(host);
+}
+function hostsOf(value) {
+  const url = urlOf(value);
+  if (!url) {
+    return [];
+  }
+  const host = hostOfUrl(url);
+  const hosts = host ? [host] : [];
+  const target = unwrapLink(url.href);
+  if (target && target.href !== url.href) {
+    const targetHost = hostOfUrl(target);
+    if (targetHost && targetHost !== host) {
+      hosts.push(targetHost);
+    }
+    const further = unwrapLink(target.href);
+    if (further && further.href !== target.href) {
+      hosts.unresolved = true;
+    }
+  }
+  return hosts;
+}
+function* attributesOf(html) {
+  TAG_START.lastIndex = 0;
+  let match;
+  while ((match = TAG_START.exec(html)) !== null) {
+    let i = match.index + match[0].length;
+    while (i < html.length && html[i] !== ">") {
+      if (isSpace(html.codePointAt(i)) || html[i] === "/") {
+        i++;
+        continue;
+      }
+      let j = i;
+      while (j < html.length && html[j] !== "=" && html[j] !== ">" && html[j] !== "/" && !isSpace(html.codePointAt(j))) {
+        j++;
+      }
+      const name = html.slice(i, j).toLowerCase();
+      if (j === i) {
+        j++;
+      }
+      while (j < html.length && isSpace(html.codePointAt(j))) {
+        j++;
+      }
+      if (html[j] !== "=") {
+        i = j;
+        continue;
+      }
+      j++;
+      while (j < html.length && isSpace(html.codePointAt(j))) {
+        j++;
+      }
+      let value;
+      if (html[j] === '"' || html[j] === "'") {
+        const close = html.indexOf(html[j], j + 1);
+        const stop = close === -1 ? html.length : close;
+        value = html.slice(j + 1, stop);
+        j = stop + 1;
+      } else {
+        const start = j;
+        while (j < html.length && html[j] !== ">" && !isSpace(html.codePointAt(j))) {
+          j++;
+        }
+        value = html.slice(start, j);
+      }
+      if (name) {
+        yield [name, value];
+      }
+      i = j;
+    }
+    TAG_START.lastIndex = Math.max(i, match.index + 1);
+  }
+}
+var MAX_VALUE2 = 1024 * 1024;
+var LONG_VALUE = 64 * 1024;
+function linksOf(name, value, { add, embed, cut }) {
+  if (value.length > MAX_VALUE2) {
+    cut();
+    value = value.slice(0, MAX_VALUE2);
+  }
+  const decoded = decodeEntities(value, { attribute: true });
+  switch (name) {
+    case "srcdoc": {
+      embed(decoded);
+      break;
+    }
+    case "style": {
+      for (const [, link] of decoded.matchAll(CSS_URL)) {
+        add(link);
+      }
+      break;
+    }
+    case "srcset": {
+      for (const candidate of decoded.split(",")) {
+        add(candidate.trim().split(/\s/, 1)[0]);
+      }
+      break;
+    }
+    // (several, separated by spaces)
+    case "ping": {
+      for (const link of decoded.split(/\s+/)) {
+        add(link);
+      }
+      break;
+    }
+    // (only the address of a refresh)
+    case "content": {
+      const match = /(?:^|[\s;,])url\s*=\s*["']?([^\s"';]+)/i.exec(decoded.slice(0, 4096));
+      if (match) {
+        add(match[1]);
+      }
+      break;
+    }
+    default: {
+      add(decoded);
+    }
+  }
+}
+var MAX_LENIENT_VALUE = 4096;
+var UNQUOTED_END = /* @__PURE__ */ new Set(["<", ">", '"', "'", "`", "="]);
+function lenientLinks(html, done, reader) {
+  LENIENT.lastIndex = 0;
+  let match;
+  while (!done() && (match = LENIENT.exec(html)) !== null) {
+    const name = match[1].toLowerCase();
+    let i = LENIENT.lastIndex;
+    let end = i;
+    if (html[i] === '"' || html[i] === "'") {
+      const quote = html[i];
+      i++;
+      end = i;
+      while (end < html.length && html[end] !== quote && html[end] !== "<" && html[end] !== ">") {
+        end++;
+      }
+      if (end < html.length && html[end] !== quote) {
+        const close = html.indexOf(quote, end);
+        if (close !== -1 && close - i <= MAX_LENIENT_VALUE && !reader.spend(close - i)) {
+          linksOf(name, html.slice(i, close), reader);
+        }
+      }
+    } else {
+      while (end < html.length && !isSpace(html.codePointAt(end)) && !UNQUOTED_END.has(html[end])) {
+        end++;
+      }
+    }
+    if (reader.spend(end - i)) {
+      break;
+    }
+    linksOf(name, html.slice(i, end), reader);
+  }
+}
+function endsLink2(text, i) {
+  const code = text.codePointAt(i);
+  if (code < 128) {
+    return isSpace(code) || code === 34 || code === 39 || code === 60 || code === 62 || code === 96;
+  }
+  return /\s/u.test(text[i]);
+}
+function linkReader(text) {
+  let read = 0;
+  let space = -1;
+  let scheme = -1;
+  return (start) => {
+    for (; read < start; read++) {
+      if (endsLink2(text, read)) {
+        space = read;
+      } else if (text[read] === "/" && text[read - 1] === "/" && text[read - 2] === ":") {
+        scheme = read;
+      }
+    }
+    return scheme > space;
+  };
+}
+function isSchemeless(text, start) {
+  if (start < 2 || text[start - 2] !== "/") {
+    return false;
+  }
+  if (start === 2) {
+    return true;
+  }
+  const before = text[start - 3];
+  return !(before === ":" || before === "/" || isHostCode2(text.codePointAt(start - 3)));
+}
+function bareName(name) {
+  const labels = name.split(".");
+  const tld = labels.pop();
+  if (!/^(?:[a-z]{2,24}|xn--[a-z\d-]{1,59})$/i.test(tld)) {
+    return null;
+  }
+  const names = [];
+  while (labels.length > 0 && names.length < 11) {
+    const label = labels.pop();
+    if (!/^[a-z\d-]{1,63}$/i.test(label)) {
+      break;
+    }
+    names.unshift(label);
+  }
+  if (names.length === 0) {
+    return null;
+  }
+  names[0] = names[0].replace(/^-+/, "");
+  if (!names[0]) {
+    return null;
+  }
+  return `${names.join(".")}.${tld}`.toLowerCase();
+}
+function isRealName(host) {
+  const parsed = parseDomain3(host);
+  return Boolean(parsed.isIcann && parsed.domain);
+}
+function bareHosts(text, add, { done, seen, from = 0, cutEnd = false }) {
+  let previous = -1;
+  const inLink = linkReader(text);
+  for (let slash = text.indexOf("/"); slash !== -1; slash = text.indexOf("/", slash + 1)) {
+    if (done()) {
+      return;
+    }
+    const floor = Math.max(previous + 1, slash - MAX_HOST);
+    previous = slash;
+    let end = slash;
+    while (end > floor && text.codePointAt(end - 1) >= 48 && text.codePointAt(end - 1) <= 57) {
+      end--;
+    }
+    end = end > floor && text[end - 1] === ":" ? end - 1 : slash;
+    let start = end;
+    while (start > floor && isHostCode2(text.codePointAt(start - 1))) {
+      start--;
+    }
+    if (start === end || start < from || cutEnd && slash === text.length - 1) {
+      continue;
+    }
+    if (start > 0 && (IN_WORD2.test(text[start - 1]) || text[start - 1] === "/" && !isSchemeless(text, start)) || inLink(start)) {
+      continue;
+    }
+    while (end > start && text[end - 1] === ".") {
+      end--;
+    }
+    const host = bareName(text.slice(start, end));
+    if (!host || seen.has(host)) {
+      continue;
+    }
+    if (seen.size < MAX_SEEN) {
+      seen.add(host);
+    }
+    if (isRealName(host)) {
+      add(`http://${host}/`);
+    }
+  }
+}
+function looseHosts(text, add, { from = 0, cutEnd = false, seen, done }) {
+  const inLink = linkReader(text);
+  const { length } = text;
+  let i = 0;
+  while (i < length) {
+    if (!isHostCode2(text.codePointAt(i))) {
+      i++;
+      continue;
+    }
+    const start = i;
+    while (i < length && isHostCode2(text.codePointAt(i))) {
+      i++;
+    }
+    let end = i;
+    if (end - start > MAX_HOST || start < from || cutEnd && end === length) {
+      continue;
+    }
+    while (end > start && text[end - 1] === ".") {
+      end--;
+    }
+    const before = start > 0 ? text[start - 1] : "";
+    const after = end < length ? text[end] : "";
+    if (after === "/" || after === "@" || before === "@") {
+      continue;
+    }
+    if (before && (IN_WORD2.test(before) || before === "/" || before === "\\" || before === "&" || before === "#")) {
+      continue;
+    }
+    if (after && after !== "." && IN_WORD2.test(after)) {
+      continue;
+    }
+    const name = text.slice(start, end);
+    if (!name.includes(".") || inLink(start)) {
+      continue;
+    }
+    const lower = name.toLowerCase();
+    if (seen.has(lower)) {
+      continue;
+    }
+    if (seen.size < MAX_SEEN) {
+      seen.add(lower);
+    }
+    if (done()) {
+      return;
+    }
+    const host = bareName(name);
+    if (host && isRealName(host)) {
+      add(host);
+    }
+  }
+}
+function* chunksOf(html) {
+  let start = 0;
+  let cutStart = false;
+  while (start < html.length) {
+    const end = Math.min(html.length, start + DECODE_CHUNK);
+    if (end < html.length) {
+      let cut = end;
+      while (cut > end - 65536 && cut > start) {
+        if (html[cut] === "<" || isSpace(html.codePointAt(cut))) {
+          break;
+        }
+        cut--;
+      }
+      if (cut > start && cut > end - 65536) {
+        yield { text: html.slice(start, cut), cutStart, cutEnd: false };
+        start = cut;
+        cutStart = false;
+        continue;
+      }
+      let hard = end;
+      while (hard > start + CHUNK_OVERLAP + 1 && /[\dA-Za-z#]/.test(html[hard - 1])) {
+        hard--;
+      }
+      if (hard < end && html[hard - 1] === "&" && hard - 1 > start + CHUNK_OVERLAP) {
+        hard--;
+      } else {
+        hard = end;
+      }
+      yield { text: html.slice(start, hard), cutStart, cutEnd: true };
+      start = hard - CHUNK_OVERLAP;
+      cutStart = true;
+      continue;
+    }
+    yield { text: html.slice(start, end), cutStart, cutEnd: false };
+    start = end;
+  }
+}
+function withoutNul(text) {
+  return text.includes("\0") ? `${text}
+${text.replaceAll("\0", "")}` : text;
+}
+function hexValue(code) {
+  if (code >= 48 && code <= 57) {
+    return code - 48;
+  }
+  if (code >= 65 && code <= 70) {
+    return code - 55;
+  }
+  if (code >= 97 && code <= 102) {
+    return code - 87;
+  }
+  return -1;
+}
+function percentDecoded(text) {
+  const input = Buffer7.from(text);
+  const output = Buffer7.allocUnsafe(input.length);
+  let length = 0;
+  for (let i = 0; i < input.length; i++) {
+    const high = input[i] === 37 ? hexValue(input[i + 1]) : -1;
+    const low = high === -1 ? -1 : hexValue(input[i + 2]);
+    if (low === -1) {
+      output[length++] = input[i];
+      continue;
+    }
+    output[length++] = high * 16 + low;
+    i += 2;
+  }
+  return output.subarray(0, length);
+}
+var UTF16LE = /* @__PURE__ */ new Set(["csunicode", "iso-10646-ucs-2", "ucs-2", "unicode", "unicodefeff", "utf-16", "utf-16le"]);
+var UTF16BE = /* @__PURE__ */ new Set(["unicodefffe", "utf-16be"]);
+function swapped(bytes) {
+  return Buffer7.from(bytes.subarray(0, bytes.length - bytes.length % 2)).swap16().toString("utf16le");
+}
+function decodeText(content, charset = "") {
+  if (content[0] === 255 && content[1] === 254) {
+    return content.subarray(2).toString("utf16le");
+  }
+  if (content[0] === 254 && content[1] === 255) {
+    return swapped(content.subarray(2));
+  }
+  if (UTF16LE.has(charset)) {
+    return content.toString("utf16le");
+  }
+  return UTF16BE.has(charset) ? swapped(content) : content.toString("utf8");
+}
+var DATA_DOCUMENT = /^\s*data:\s*(?:text\/html|application\/xhtml\+xml|image\/svg\+xml|text\/xml|application\/xml)\b([^,]*),/i;
+function dataDocument(value) {
+  const match = DATA_DOCUMENT.exec(value.slice(0, 1024));
+  if (!match) {
+    return null;
+  }
+  const bytes = percentDecoded(value.slice(match[0].length));
+  const content = /;\s*base64\s*$/i.test(match[1]) ? Buffer7.from(bytes.toString("latin1"), "base64") : bytes;
+  const charset = /;\s*charset\s*=\s*"?([^;"\s]+)/i.exec(match[1]);
+  return decodeText(content, charset ? charset[1].toLowerCase() : "");
+}
+var LINE_BREAK = /\r\n?|\n/;
+var FOLD = /(?:\r\n?|\n)[ \t]/g;
+var QUOTED_PRINTABLE = /;\s*(?:encoding\s*=\s*)?"?quoted-printable"?\s*(?:;|$)/i;
+var MEDIA_PROPERTIES = /* @__PURE__ */ new Set(["photo", "logo", "sound", "key", "attach"]);
+var HTML_PROPERTIES = /^(?:x-alt-desc|styled-description|description|comment)[;:]/i;
+function readEscapes(text, lenient = false) {
+  let index = text.indexOf("\\");
+  if (index === -1) {
+    return text;
+  }
+  let out = "";
+  let parts = [];
+  let start = 0;
+  while (index !== -1 && index + 1 < text.length) {
+    const next = text[index + 1];
+    if (lenient || "nN,;\\".includes(next)) {
+      parts.push(text.slice(start, index), next === "n" || next === "N" ? "\n" : next);
+      start = index + 2;
+      index = text.indexOf("\\", start);
+      if (parts.length >= 65536) {
+        out += parts.join("");
+        parts = [];
+      }
+    } else {
+      index = text.indexOf("\\", index + 1);
+    }
+  }
+  parts.push(text.slice(start));
+  return out + parts.join("");
+}
+function valueColon(line) {
+  let colon = line.indexOf(":");
+  let from = 0;
+  for (; ; ) {
+    const quote = line.indexOf('"', from);
+    if (quote === -1 || colon === -1 || colon < quote) {
+      return colon;
+    }
+    const end = line.indexOf('"', quote + 1);
+    if (end === -1) {
+      return -1;
+    }
+    from = end + 1;
+    if (colon < from) {
+      colon = line.indexOf(":", from);
+    }
+  }
+}
+function trimSpaceEnd(text) {
+  let end = text.length;
+  while (end > 0 && (text[end - 1] === " " || text[end - 1] === "	")) {
+    end--;
+  }
+  return end === text.length ? text : text.slice(0, end);
+}
+function decodeQuotedPrintable(value, charset) {
+  let decoder;
+  try {
+    decoder = new TextDecoder(charset || "utf8");
+  } catch {
+    decoder = new TextDecoder("utf8");
+  }
+  if (!/[\u0080-\u{10FFFF}]/u.test(value)) {
+    const bytes = Buffer7.from(value, "latin1");
+    let length = 0;
+    for (let index = 0; index < bytes.length; index++) {
+      const hex = bytes[index] === 61 ? value.slice(index + 1, index + 3) : "";
+      if (/^[\da-f]{2}$/i.test(hex)) {
+        bytes[length++] = Number.parseInt(hex, 16);
+        index += 2;
+      } else {
+        bytes[length++] = bytes[index];
+      }
+    }
+    return decoder.decode(bytes.subarray(0, length));
+  }
+  return value.replaceAll(/(?:=[\da-f]{2})+/gi, (run) => decoder.decode(Buffer7.from(run.replaceAll("=", ""), "hex")));
+}
+function quotedPrintableValues(text) {
+  if (!/quoted-printable/i.test(text)) {
+    return text;
+  }
+  const lines2 = text.split(LINE_BREAK);
+  const out = [];
+  for (let i = 0; i < lines2.length; i++) {
+    const line = lines2[i];
+    const colon = valueColon(line);
+    const parameters = colon === -1 ? "" : line.slice(0, colon);
+    if (colon === -1 || !QUOTED_PRINTABLE.test(parameters)) {
+      out.push(line);
+      continue;
+    }
+    const charset = /;\s*charset\s*=\s*"?([\w.:-]+)/i.exec(parameters)?.[1];
+    const parts = [trimSpaceEnd(line.slice(colon + 1))];
+    while (parts.at(-1).endsWith("=") && i + 1 < lines2.length) {
+      parts[parts.length - 1] = parts.at(-1).slice(0, -1);
+      parts.push(trimSpaceEnd(lines2[++i]));
+    }
+    out.push(line.slice(0, colon + 1) + decodeQuotedPrintable(parts.join(""), charset));
+  }
+  return out.join("\n");
+}
+function shownText(text) {
+  const unfolded = text.replaceAll(FOLD, "");
+  const shown = /* @__PURE__ */ new Set([text, readEscapes(unfolded)]);
+  const decoded = quotedPrintableValues(unfolded);
+  if (decoded !== unfolded) {
+    shown.add(readEscapes(decoded));
+    if (unfolded !== text) {
+      shown.add(quotedPrintableValues(text));
+    }
+  }
+  if (/\\[^nN,;\\]/.test(decoded)) {
+    shown.add(readEscapes(decoded, true));
+  }
+  return [...shown].reverse().join("\n");
+}
+function htmlDescriptions(text) {
+  if (!/[<&]|altrep/i.test(text)) {
+    return "";
+  }
+  const html = [];
+  for (const line of text.replaceAll(FOLD, "").split(LINE_BREAK)) {
+    const colon = valueColon(line);
+    if (colon === -1) {
+      continue;
+    }
+    const altrep = /;\s*altrep\s*=\s*"([^"]*)"/i.exec(line.slice(0, colon))?.[1];
+    if (altrep) {
+      html.push(`<iframe src="${altrep.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;")}"></iframe>`);
+    }
+    if (!HTML_PROPERTIES.test(line)) {
+      continue;
+    }
+    const value = readEscapes(line.slice(colon + 1));
+    if (/[<&]/.test(value)) {
+      html.push(value);
+    }
+  }
+  return html.join("\n");
+}
+var BINARY = /;\s*(?:(?:encoding\s*=\s*)?"?(?:b|base64)"?|value\s*=\s*"?binary"?)\s*(?:;|$)/i;
+function withoutBinaryValues(text) {
+  if (!/base64|binary|encoding\s*=\s*"?b|;\s*b\s*[;:]/i.test(text)) {
+    return text;
+  }
+  const lines2 = text.split(LINE_BREAK);
+  const out = [];
+  for (let i = 0; i < lines2.length; i++) {
+    const line = lines2[i];
+    const colon = valueColon(line);
+    if (colon === -1 || !BINARY.test(line.slice(0, colon))) {
+      out.push(line);
+      continue;
+    }
+    const value = [line.slice(colon + 1)];
+    let next = i + 1;
+    while (next < lines2.length && (lines2[next].startsWith(" ") || lines2[next].startsWith("	"))) {
+      value.push(lines2[next++]);
+    }
+    if (!value.every((part) => /^[\w+/=\s]*$/.test(part))) {
+      for (let index = i; index < next; index++) {
+        out.push(lines2[index]);
+      }
+      i = next - 1;
+      continue;
+    }
+    while (next < lines2.length && lines2[next] !== "" && /^[\w+/=]+$/.test(lines2[next])) {
+      value.push(lines2[next++]);
+    }
+    if (next < lines2.length && lines2[next] === "") {
+      next++;
+    }
+    i = next - 1;
+    const name = line.slice(0, colon).split(";")[0].split(".").pop().trim().toLowerCase();
+    out.push(MEDIA_PROPERTIES.has(name) ? line.slice(0, colon + 1) : line.slice(0, colon + 1) + Buffer7.from(value.join("").replaceAll(/\s/g, ""), "base64").toString("utf8"));
+  }
+  return out.join("\n");
+}
+var HTML_TYPES = /* @__PURE__ */ new Set(["text/html", "application/xhtml+xml", "image/svg+xml", "text/xml", "application/xml"]);
+var HTML_EXTENSIONS = /* @__PURE__ */ new Set(["html", "htm", "shtml", "xhtml", "xht", "svg", "xml"]);
+var CARD_TYPES = /* @__PURE__ */ new Set(["text/calendar", "text/x-vcalendar", "application/ics", "text/vcard", "text/x-vcard", "text/directory"]);
+var CARD_EXTENSIONS = /* @__PURE__ */ new Set(["ics", "ical", "ifb", "vcs", "vcf", "vcard"]);
+var MESSAGE_TYPES = /* @__PURE__ */ new Set(["message/rfc822", "message/global"]);
+function extensionOf2(filename) {
+  let end = filename.length;
+  while (end > 0 && (filename[end - 1] === "." || filename[end - 1] === " ")) {
+    end--;
+  }
+  const name = filename.slice(0, end).trim().toLowerCase();
+  const index = name.lastIndexOf(".");
+  return index !== -1 && index < name.length - 1 ? name.slice(index + 1) : null;
+}
+function extensionsOf(attachment) {
+  const names = [];
+  if (typeof attachment.filename === "string") {
+    names.push(attachment.filename);
+  }
+  const { headers } = attachment;
+  if (headers && typeof headers.get === "function") {
+    for (const [field, parameter] of [["content-type", "name"], ["content-disposition", "filename"]]) {
+      const value = headers.get(field)?.params?.[parameter];
+      if (typeof value === "string" && value !== "") {
+        names.push(value);
+      }
+    }
+  }
+  return new Set(names.flatMap((name) => [extensionOf2(name), extensionOf(name)]).filter(Boolean));
+}
+function charsetOf(attachment) {
+  const { headers } = attachment;
+  const charset = headers && typeof headers.get === "function" ? headers.get("content-type")?.params?.charset : null;
+  return typeof charset === "string" ? charset.toLowerCase() : "";
+}
+function kindOf(attachment) {
+  const { content } = attachment ?? {};
+  if (!Buffer7.isBuffer(content) || content.length === 0) {
+    return null;
+  }
+  const type = typeof attachment.contentType === "string" ? attachment.contentType.toLowerCase() : "";
+  const extensions = extensionsOf(attachment);
+  const has = (set) => [...extensions].some((name) => set.has(name));
+  if (MESSAGE_TYPES.has(type) || extensions.has("eml") || extensions.has("u8msg")) {
+    return null;
+  }
+  const isHtml = HTML_TYPES.has(type) || has(HTML_EXTENSIONS);
+  const isCard = !isHtml && (CARD_TYPES.has(type) || has(CARD_EXTENSIONS));
+  const isText = isCard || !isHtml && type === "text/plain";
+  return isHtml || isText ? { isHtml, isText, isCard } : null;
+}
+function* documentsOf(attachments, state, late) {
+  const read = [];
+  let bytes = 0;
+  let opened = 0;
+  for (const attachment of attachments) {
+    const kind = kindOf(attachment);
+    if (!kind) {
+      continue;
+    }
+    if (!kind.isText && ++opened > MAX_ATTACHED || bytes + attachment.content.length > MAX_ATTACHED_BYTES) {
+      state.tooComplex = true;
+      break;
+    }
+    bytes += attachment.content.length;
+    read.push({ attachment, kind });
+  }
+  for (const { attachment, kind: { isHtml, isCard } } of read) {
+    if (late()) {
+      state.incomplete = true;
+      return;
+    }
+    const text = decodeText(attachment.content, charsetOf(attachment));
+    if (isHtml) {
+      yield { html: text };
+      continue;
+    }
+    if (!isCard) {
+      yield { text };
+      continue;
+    }
+    let readable = withoutBinaryValues(text.length > MAX_CARD_BYTES ? text.slice(0, MAX_CARD_BYTES) : text);
+    if (text.length > MAX_CARD_BYTES || readable.length > MAX_SHOWN_BYTES) {
+      state.tooComplex = true;
+      readable = readable.slice(0, MAX_SHOWN_BYTES);
+    }
+    if (late()) {
+      state.incomplete = true;
+      return;
+    }
+    yield { text: shownText(readable) };
+    if (late()) {
+      state.incomplete = true;
+      return;
+    }
+    const html = htmlDescriptions(readable);
+    if (html !== "") {
+      yield { html };
+    }
+  }
+}
+var LATE_EVERY = 1024;
+function carriedLinkHosts(mail, {
+  mails = [],
+  attachments = [],
+  maxHosts = 250,
+  hostsInText = false
+} = {}) {
+  const hosts = /* @__PURE__ */ new Set();
+  const loose = /* @__PURE__ */ new Set();
+  const seen = /* @__PURE__ */ new Set();
+  const seenBare = /* @__PURE__ */ new Set();
+  const seenLoose = /* @__PURE__ */ new Set();
+  let more = false;
+  let full = false;
+  const domains = /* @__PURE__ */ new Set();
+  const state = { tooComplex: false, incomplete: false };
+  const until = Date.now() + MAX_READ_TIME;
+  const late = () => {
+    if (!state.incomplete && Date.now() > until) {
+      state.incomplete = true;
+    }
+    return state.incomplete;
+  };
+  let calls = 0;
+  const done = () => full || state.incomplete || ++calls % LATE_EVERY === 0 && late();
+  const looseDone = () => done() || loose.size > maxHosts;
+  const addLoose = (host) => {
+    if (!looseDone()) {
+      loose.add(host);
+    }
+  };
+  const queue = [mail, ...mails].map((document) => ({ document, depth: 0 }));
+  const carried = documentsOf(attachments, state, late);
+  let depth = 0;
+  let embedded = 0;
+  let embeddedLength = 0;
+  const embeddedSeen = /* @__PURE__ */ new Set();
+  const embed = (html) => {
+    if (html === "" || embeddedSeen.has(html)) {
+      return;
+    }
+    if (depth >= MAX_EMBED_DEPTH || embedded >= MAX_EMBEDDED || embeddedLength + html.length > MAX_EMBEDDED_LENGTH) {
+      state.tooComplex = true;
+      return;
+    }
+    embeddedSeen.add(html);
+    embedded++;
+    embeddedLength += html.length;
+    queue.push({ document: { html }, depth: depth + 1 });
+  };
+  const add = (value) => {
+    if (full || typeof value !== "string" || value === "" || seen.has(value)) {
+      return;
+    }
+    if (seen.size < MAX_SEEN) {
+      seen.add(value);
+    }
+    if (/^\s*data:/i.test(value)) {
+      const html = dataDocument(value);
+      if (html !== null) {
+        embed(html);
+      }
+      return;
+    }
+    const found = hostsOf(value);
+    if (found.unresolved) {
+      state.tooComplex = true;
+    }
+    for (const host of found) {
+      if (hosts.has(host)) {
+        continue;
+      }
+      const domain = registrableDomain(host);
+      if (hosts.size < maxHosts || !domains.has(domain) && domains.size < maxHosts) {
+        hosts.add(host);
+        domains.add(domain);
+        continue;
+      }
+      more = true;
+      if (domains.size >= maxHosts) {
+        full = true;
+        return;
+      }
+    }
+  };
+  let spent = 0;
+  const spend = (length) => {
+    spent += length;
+    if (spent < LONG_VALUE) {
+      return false;
+    }
+    spent = 0;
+    return late();
+  };
+  const reader = {
+    add,
+    embed,
+    spend,
+    cut() {
+      state.tooComplex = true;
+    }
+  };
+  const readText = (source, { cutStart = false, cutEnd = false, exact = false } = {}) => {
+    for (const match of source.matchAll(URL_START)) {
+      if (done()) {
+        break;
+      }
+      if (cutStart && match.index === 0) {
+        continue;
+      }
+      if (cutEnd && match.index + match[0].length === source.length) {
+        if (exact && source.length - match.index < CHUNK_OVERLAP) {
+          continue;
+        }
+        const value = match[0];
+        const at = /^www\./i.test(value) ? 0 : value.indexOf("//") + 2;
+        if (!/[/?#\\]/.test(value.slice(at))) {
+          state.tooComplex = true;
+          continue;
+        }
+        add(value);
+        const url = urlOf(value);
+        if (url && isClickTracker(url)) {
+          state.tooComplex = true;
+        }
+        continue;
+      }
+      add(match[0]);
+    }
+    const from = cutStart ? 1 : 0;
+    bareHosts(source, add, {
+      done,
+      seen: seenBare,
+      from,
+      cutEnd
+    });
+    if (hostsInText && !looseDone()) {
+      looseHosts(source, addLoose, {
+        from,
+        cutEnd,
+        seen: seenLoose,
+        done: looseDone
+      });
+    }
+  };
+  for (let index = 0; ; index++) {
+    if (full || late()) {
+      break;
+    }
+    if (index >= queue.length) {
+      const next = carried.next();
+      if (next.done) {
+        break;
+      }
+      queue.push({ document: next.value, depth: 0 });
+    }
+    ({ depth } = queue[index]);
+    const { document } = queue[index];
+    const html = withoutNul(typeof document?.html === "string" ? document.html : "");
+    const text = withoutNul(typeof document?.text === "string" ? document.text : "");
+    for (const [name, value] of attributesOf(html)) {
+      if (done()) {
+        break;
+      }
+      if (!LINK_ATTRIBUTES.has(name)) {
+        continue;
+      }
+      if (spend(value.length)) {
+        break;
+      }
+      linksOf(name, value, reader);
+    }
+    lenientLinks(html, done, reader);
+    for (const pattern of [CSS_URL, CSS_IMPORT]) {
+      for (const [, link] of html.matchAll(pattern)) {
+        if (done() || spend(link.length)) {
+          break;
+        }
+        if (link.length > MAX_VALUE2) {
+          state.tooComplex = true;
+        }
+        add(decodeEntities(link.slice(0, MAX_VALUE2), { attribute: true }));
+      }
+    }
+    for (const chunk2 of chunksOf(text)) {
+      if (full || late()) {
+        break;
+      }
+      readText(chunk2.text, { ...chunk2, exact: true });
+    }
+    for (const chunk2 of chunksOf(html)) {
+      if (full || late()) {
+        break;
+      }
+      const decoded = decodeEntities(chunk2.text);
+      readText(decoded, { ...chunk2, exact: decoded.endsWith(chunk2.text.slice(-CHUNK_OVERLAP)) });
+    }
+  }
+  if (!more && !state.incomplete) {
+    for (const name of loose) {
+      if (hosts.size >= maxHosts) {
+        break;
+      }
+      const [host] = hostsOf(`http://${name}/`);
+      if (host) {
+        hosts.add(host);
+      }
+    }
+  }
+  return {
+    hosts: [...hosts],
+    more,
+    tooComplex: state.tooComplex,
+    incomplete: state.incomplete
+  };
+}
+
+// src/is-arbitrary.js
+import { parse as parseDomain4 } from "tldts";
 var GTUBE = "XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X";
 var BLOCKED_SUBJECT = /cheecck y0ur acc0untt|\brecorded\s+you\s+(?:masturbating|jerking|touching\s+yourself|watching\s+porn)\b|personal data has leaked|private information has been stolen/i;
 var HACKED_SUBJECT = /\byou['’]ve been hacked\b|\baccount is hacked\b|\b(?:i|we)(?:\s+have|['’]ve)?\s+recorded\s+you\b|\brecorded\s+you\s+(?:doing|while|watching|through|on\s+(?:cam|camera|video|webcam))\b/i;
@@ -5628,13 +6828,13 @@ function joinsDisplay(brand, display, name) {
   return false;
 }
 function isOfficial({ brand, official }, domain, display, shared = true) {
-  const parsed = parseDomain3(domain);
+  const parsed = parseDomain4(domain);
   const name = parsed.domainWithoutSuffix ?? "";
   const compact = brand.replaceAll(" ", "");
   if (parsed.publicSuffix === compact || compact.length >= 5 && joinsDisplay(brand, display, name) && !JOINED_WORDS.some((word) => name.slice(compact.length).includes(word))) {
     return true;
   }
-  return official.some((entry) => entry instanceof RegExp ? entry.test(registrableDomain(domain)) : entry.includes(".") ? (shared || parseDomain3(entry).domain !== null) && (domain === entry || domain.endsWith(`.${entry}`)) : name === entry);
+  return official.some((entry) => entry instanceof RegExp ? entry.test(registrableDomain(domain)) : entry.includes(".") ? (shared || parseDomain4(entry).domain !== null) && (domain === entry || domain.endsWith(`.${entry}`)) : name === entry);
 }
 function headerString(mail, name) {
   const value = mail.headers?.get?.(name);
@@ -5736,7 +6936,7 @@ ${withoutHelp(markup)}`) || isInjection(readable) || attributeText(markup).some(
       }
     } else if (claimed && isWholeName(name, claimed)) {
       const domain = claimed[1];
-      const brand = MAILBOXES.has(parseDomain3(domain).domainWithoutSuffix) ? null : DISPLAY_BRANDS.find((entry) => isOfficial(entry, domain, "", false) && !isOfficial(entry, session.originalFromAddressDomain, ""));
+      const brand = MAILBOXES.has(parseDomain4(domain).domainWithoutSuffix) ? null : DISPLAY_BRANDS.find((entry) => isOfficial(entry, domain, "", false) && !isOfficial(entry, session.originalFromAddressDomain, ""));
       if (brand) {
         hit("FROM_NAME_BRAND", 2, `Display name is an address of "${brand.brand}" but the message is from ${fromRoot}`, "PHISHING");
       }
@@ -5771,7 +6971,7 @@ ${withoutHelp(markup)}`) || isInjection(readable) || attributeText(markup).some(
 }
 
 // src/llm.js
-import { Buffer as Buffer7 } from "node:buffer";
+import { Buffer as Buffer8 } from "node:buffer";
 import { createHash as createHash2, randomBytes } from "node:crypto";
 import os from "node:os";
 import process from "node:process";
@@ -6132,7 +7332,7 @@ function authHeaders(config) {
     case "basic": {
       const user = config.username ?? "";
       const pass = config.password ?? config.apiKey ?? "";
-      headers.authorization = `Basic ${Buffer7.from(`${user}:${pass}`).toString("base64")}`;
+      headers.authorization = `Basic ${Buffer8.from(`${user}:${pass}`).toString("base64")}`;
       break;
     }
     case "x-api-key": {
@@ -7078,7 +8278,7 @@ function scoreResults(results, options) {
 var package_default = {
   name: "spamscanner",
   description: "Spam, phishing and malware filter for email in any language: a trainable classifier, link and attachment checks, SPF/DKIM/DMARC, and an optional AI second opinion from any LLM, including local Ollama models. Works as a library, CLI, Postfix milter or HTTP API.",
-  version: "7.0.10",
+  version: "7.0.12",
   author: "Forward Email (https://forwardemail.net)",
   bin: {
     spamscanner: "./dist/esm/cli.js"
@@ -7225,7 +8425,7 @@ var package_default = {
 var VERSION = package_default.version;
 
 // src/headers.js
-import { Buffer as Buffer8 } from "node:buffer";
+import { Buffer as Buffer9 } from "node:buffer";
 function foldHeader(name, value, newline = "\r\n") {
   const pieces = String(value).split(/(?<=[ ,])/);
   const lines2 = [];
@@ -7260,10 +8460,10 @@ function splitMessage(raw) {
   const match = /^\r?\n|\r?\n\r?\n/.exec(text);
   if (!match) {
     const newline2 = text.includes("\n") && !text.includes("\r\n") ? "\n" : "\r\n";
-    return { header: text.replace(/\r?\n$/, ""), body: Buffer8.alloc(0), newline: newline2 };
+    return { header: text.replace(/\r?\n$/, ""), body: Buffer9.alloc(0), newline: newline2 };
   }
   const newline = match[0].startsWith("\r") ? "\r\n" : "\n";
-  return { header: text.slice(0, match.index), body: raw.subarray(Buffer8.byteLength(text.slice(0, match.index + match[0].length), "latin1")), newline };
+  return { header: text.slice(0, match.index), body: raw.subarray(Buffer9.byteLength(text.slice(0, match.index + match[0].length), "latin1")), newline };
 }
 var ENCODED_BYTES = 39;
 var PLAIN_WORD = 64;
@@ -7279,14 +8479,14 @@ function subjectTagText(tag, spaceAfter = false) {
   const words2 = [];
   let chunk2 = "";
   for (const character of spaceAfter ? `${line} ` : line) {
-    if (Buffer8.byteLength(chunk2 + character, "utf8") > ENCODED_BYTES) {
+    if (Buffer9.byteLength(chunk2 + character, "utf8") > ENCODED_BYTES) {
       words2.push(chunk2);
       chunk2 = "";
     }
     chunk2 += character;
   }
   words2.push(chunk2);
-  return words2.map((word) => `=?UTF-8?B?${Buffer8.from(word, "utf8").toString("base64")}?=`).join(" ");
+  return words2.map((word) => `=?UTF-8?B?${Buffer9.from(word, "utf8").toString("base64")}?=`).join(" ");
 }
 function taggedSubject(tag, current, newline = "\r\n") {
   const unfolded = current.replaceAll(/\r?\n/g, "");
@@ -7317,7 +8517,7 @@ function taggedSubject(tag, current, newline = "\r\n") {
   return lines2.join(newline).slice("Subject: ".length);
 }
 function rewriteMessage(source, headers = [], options = {}) {
-  const raw = Buffer8.isBuffer(source) ? source : Buffer8.from(String(source), "utf8");
+  const raw = Buffer9.isBuffer(source) ? source : Buffer9.from(String(source), "utf8");
   const { header, body, newline } = splitMessage(raw);
   const remove = options.remove ?? /^x-spam-/i;
   const lines2 = header === "" ? [] : header.split(/\r?\n/);
@@ -7342,10 +8542,13 @@ function rewriteMessage(source, headers = [], options = {}) {
       }
     }
   }
-  const added = headers.map(([name, value]) => foldHeader(name, Buffer8.from(String(value), "utf8").toString("latin1"), newline));
-  const mbox = kept.length > 0 && kept[0][0].startsWith("From ") ? kept.shift() : [];
+  const added = headers.map(([name, value]) => foldHeader(name, Buffer9.from(String(value), "utf8").toString("latin1"), newline));
+  const mbox = kept.length > 0 && kept[0][0].startsWith("From ") ? kept.shift().slice(0, 1) : [];
+  if (kept.length > 0 && /^[ \t]/.test(kept[0][0])) {
+    kept.shift();
+  }
   const head = [...mbox, ...added, ...kept.map((field) => field.join(newline))].join(newline);
-  return Buffer8.concat([Buffer8.from(head === "" && header === "" ? newline : `${head}${newline}${newline}`, "latin1"), body]);
+  return Buffer9.concat([Buffer9.from(head === "" ? newline : `${head}${newline}${newline}`, "latin1"), body]);
 }
 
 // src/train.js
@@ -7353,7 +8556,7 @@ import { createHash as createHash3 } from "node:crypto";
 import path3 from "node:path";
 
 // src/sources.js
-import { Buffer as Buffer9 } from "node:buffer";
+import { Buffer as Buffer10 } from "node:buffer";
 import { createReadStream } from "node:fs";
 import fs from "node:fs/promises";
 import path2 from "node:path";
@@ -7533,7 +8736,7 @@ async function* readJsonl(file, options = {}) {
 }
 async function* walk(directory) {
   const entries = await fs.readdir(directory, { withFileTypes: true });
-  entries.sort((a, b) => Buffer9.compare(Buffer9.from(a.name), Buffer9.from(b.name)));
+  entries.sort((a, b) => Buffer10.compare(Buffer10.from(a.name), Buffer10.from(b.name)));
   for (const entry of entries) {
     if (SKIP.has(entry.name) || entry.name.startsWith(".")) {
       continue;
@@ -7558,7 +8761,7 @@ async function* readMessages(source) {
     const handle = await fs.open(file);
     let head;
     try {
-      const { buffer, bytesRead } = await handle.read(Buffer9.alloc(64), 0, 64, 0);
+      const { buffer, bytesRead } = await handle.read(Buffer10.alloc(64), 0, 64, 0);
       head = buffer.subarray(0, bytesRead).toString("latin1");
     } finally {
       await handle.close();
@@ -7682,19 +8885,24 @@ async function evaluate(classifier, examples) {
 }
 
 // src/milter.js
-import { Buffer as Buffer11 } from "node:buffer";
+import { Buffer as Buffer12 } from "node:buffer";
 import { EventEmitter } from "node:events";
 import net3 from "node:net";
 
 // src/server.js
-import { Buffer as Buffer10 } from "node:buffer";
+import { Buffer as Buffer11 } from "node:buffer";
 import { timingSafeEqual } from "node:crypto";
 import http2 from "node:http";
 import net2 from "node:net";
 var MAX_MESSAGE_SIZE = 25 * 1024 * 1024;
 var MAX_CONNECTIONS = 200;
 function serializeResult(result, options = {}) {
-  const { mail, tokens, ...rest } = result;
+  const {
+    mail,
+    tokens,
+    attached,
+    ...rest
+  } = result;
   const output = {
     ...rest,
     results: { ...result.results }
@@ -7727,8 +8935,8 @@ function sessionFromQuery(query) {
   return session;
 }
 function sameToken(given, expected) {
-  const a = Buffer10.from(String(given));
-  const b = Buffer10.from(String(expected));
+  const a = Buffer11.from(String(given));
+  const b = Buffer11.from(String(expected));
   return a.length === b.length && timingSafeEqual(a, b);
 }
 function readBody(request, limit) {
@@ -7748,7 +8956,7 @@ function readBody(request, limit) {
         reject(error);
         return;
       }
-      resolve(Buffer10.concat(chunks));
+      resolve(Buffer11.concat(chunks));
     });
     request.on("error", reject);
   });
@@ -7763,7 +8971,7 @@ function createHttpServer(scanner, options = {}) {
   let active = 0;
   const server = http2.createServer(async (request, response) => {
     const send = (status, body, headers = {}) => {
-      const isBuffer = Buffer10.isBuffer(body);
+      const isBuffer = Buffer11.isBuffer(body);
       response.writeHead(status, { "content-type": isBuffer ? "message/rfc822" : "application/json; charset=utf-8", "cache-control": "no-store", ...headers });
       response.end(isBuffer ? body : `${JSON.stringify(body)}
 `);
@@ -7843,7 +9051,7 @@ function createTcpServer(scanner, options = {}) {
     const onEnd = async () => {
       socket.setTimeout(0);
       try {
-        const result = await scanner.scan(Buffer10.concat(chunks));
+        const result = await scanner.scan(Buffer11.concat(chunks));
         socket.end(json ? `${JSON.stringify(serializeResult(result))}
 ` : `${result.isSpam ? "SPAM" : "HAM"} ${result.score.toFixed(1)}/${result.threshold.toFixed(1)} ${result.tests.map((test) => test.name).join(",")}
 `);
@@ -7937,12 +9145,12 @@ var PROTOCOL = {
   HDR_LEADSPC: 1048576
 };
 var MAX_PACKET = 1024 * 1024;
-function packet(command, data = Buffer11.alloc(0)) {
-  const payload = Buffer11.isBuffer(data) ? data : Buffer11.from(data, "latin1");
-  const header = Buffer11.alloc(5);
+function packet(command, data = Buffer12.alloc(0)) {
+  const payload = Buffer12.isBuffer(data) ? data : Buffer12.from(data, "latin1");
+  const header = Buffer12.alloc(5);
   header.writeUInt32BE(payload.length + 1);
   header.write(command, 4, "latin1");
-  return Buffer11.concat([header, payload]);
+  return Buffer12.concat([header, payload]);
 }
 function cstrings(data) {
   const parts = data.toString("latin1").split("\0");
@@ -7952,7 +9160,7 @@ function cstrings(data) {
   return parts;
 }
 function cstring(value) {
-  return Buffer11.from(`${value}\0`, "latin1");
+  return Buffer12.from(`${value}\0`, "latin1");
 }
 function address(value) {
   const text = String(value ?? "").trim();
@@ -8009,7 +9217,7 @@ var MilterSession = class {
     if (this.buffered < this.needed) {
       return;
     }
-    let buffer = this.chunks.length === 1 ? this.chunks[0] : Buffer11.concat(this.chunks);
+    let buffer = this.chunks.length === 1 ? this.chunks[0] : Buffer12.concat(this.chunks);
     this.needed = 4;
     while (buffer.length >= 4) {
       const length = buffer.readUInt32BE(0);
@@ -8054,7 +9262,7 @@ var MilterSession = class {
         const protocol = data.readUInt32BE(8);
         const wanted = ACTIONS.ADDHDRS | ACTIONS.CHGHDRS | ACTIONS.QUARANTINE;
         this.leadingSpace = Boolean(protocol & PROTOCOL.HDR_LEADSPC);
-        const reply2 = Buffer11.alloc(12);
+        const reply2 = Buffer12.alloc(12);
         reply2.writeUInt32BE(Math.min(version, 6), 0);
         reply2.writeUInt32BE(actions & wanted, 4);
         reply2.writeUInt32BE(protocol & (PROTOCOL.HDR_LEADSPC | PROTOCOL.NOUNKNOWN), 8);
@@ -8119,7 +9327,7 @@ var MilterSession = class {
         if (this.truncated || this.size + data.length > options.maxSize) {
           this.truncated = true;
         } else {
-          this.body.push(Buffer11.from(data));
+          this.body.push(Buffer12.from(data));
           this.size += data.length;
         }
         this.send(RESPONSES.CONTINUE);
@@ -8154,7 +9362,7 @@ var MilterSession = class {
   /** @returns {Buffer} */
   rawMessage() {
     const head = this.headers.map(([name, value]) => `${name}:${this.leadingSpace || value.startsWith(" ") || value.startsWith("	") ? "" : " "}${value}`).join("\r\n");
-    return Buffer11.concat([Buffer11.from(this.headers.length > 0 ? `${head}\r
+    return Buffer12.concat([Buffer12.from(this.headers.length > 0 ? `${head}\r
 \r
 ` : "\r\n", "latin1"), ...this.body]);
   }
@@ -8165,9 +9373,9 @@ var MilterSession = class {
       const key = name.toLowerCase();
       counts.set(key, (counts.get(key) || 0) + 1);
       if (key.startsWith("x-spam-")) {
-        const index = Buffer11.alloc(4);
+        const index = Buffer12.alloc(4);
         index.writeUInt32BE(counts.get(key));
-        this.send(RESPONSES.CHGHEADER, Buffer11.concat([index, cstring(name), cstring("")]));
+        this.send(RESPONSES.CHGHEADER, Buffer12.concat([index, cstring(name), cstring("")]));
       }
     }
   }
@@ -8190,7 +9398,7 @@ var MilterSession = class {
       }
       this.server.report(error);
       this.removeForgedHeaders();
-      this.send(RESPONSES.ADDHEADER, Buffer11.concat([cstring("X-Spam-Virus-Scan"), cstring(`${this.leadingSpace ? " " : ""}failed`)]));
+      this.send(RESPONSES.ADDHEADER, Buffer12.concat([cstring("X-Spam-Virus-Scan"), cstring(`${this.leadingSpace ? " " : ""}failed`)]));
       this.send(RESPONSES.CONTINUE);
       this.resetMessage();
       return;
@@ -8211,15 +9419,15 @@ var MilterSession = class {
       headers.unshift(["Authentication-Results", formatAuthResultsHeader(result.results.authentication, options.hostname)]);
     }
     for (const [name, value] of headers) {
-      this.send(RESPONSES.ADDHEADER, Buffer11.concat([cstring(name), cstring(`${this.leadingSpace ? " " : ""}${value}`.replaceAll("\r\n", "\n"))]));
+      this.send(RESPONSES.ADDHEADER, Buffer12.concat([cstring(name), cstring(`${this.leadingSpace ? " " : ""}${value}`.replaceAll("\r\n", "\n"))]));
     }
     if (result.isSpam && options.subjectTag) {
       const subject = this.headers.find(([name]) => name.toLowerCase() === "subject");
       const value = taggedSubject(options.subjectTag, subject ? subject[1].trim() : "", "\n");
       if (value !== null) {
-        const index = Buffer11.alloc(4);
+        const index = Buffer12.alloc(4);
         index.writeUInt32BE(1);
-        this.send(RESPONSES.CHGHEADER, Buffer11.concat([index, cstring("Subject"), cstring(`${this.leadingSpace ? " " : ""}${value}`.replaceAll("\r\n", "\n"))]));
+        this.send(RESPONSES.CHGHEADER, Buffer12.concat([index, cstring("Subject"), cstring(`${this.leadingSpace ? " " : ""}${value}`.replaceAll("\r\n", "\n"))]));
       }
     }
     if (result.action === "reject" && options.reject) {
@@ -8322,7 +9530,7 @@ var MilterServer = class extends EventEmitter {
 };
 
 // src/spamd.js
-import { Buffer as Buffer12 } from "node:buffer";
+import { Buffer as Buffer13 } from "node:buffer";
 import net4 from "node:net";
 var EX_OK = 0;
 var EX_USAGE = 64;
@@ -8353,8 +9561,9 @@ function reply(code, text, headers = [], body = null) {
     lines2.push(`Content-length: ${body.length}`);
   }
   lines2.push(...headers.map(([name, value]) => `${name}: ${value}`), "", "");
-  return body === null ? Buffer12.from(lines2.join("\r\n")) : Buffer12.concat([Buffer12.from(lines2.join("\r\n")), body]);
+  return body === null ? Buffer13.from(lines2.join("\r\n")) : Buffer13.concat([Buffer13.from(lines2.join("\r\n")), body]);
 }
+var oneLine2 = (text) => String(text ?? "").replaceAll(/[\p{Cc}\u061C\u200E\u200F\u2028\u2029\u202A-\u202E\u2066-\u2069]+/gu, " ");
 function report(result) {
   const lines2 = [
     `Spam detection software, running on the system "spamscanner", has ${result.isSpam ? "identified this incoming email as possible spam" : "scanned this incoming email"}.`,
@@ -8363,7 +9572,7 @@ function report(result) {
     "",
     " pts rule name              description",
     "---- ---------------------- --------------------------------------------------",
-    ...result.tests.map((test) => `${test.score.toFixed(1).padStart(4)} ${test.name.padEnd(22)} ${test.description}`)
+    ...result.tests.map((test) => `${test.score.toFixed(1).padStart(4)} ${oneLine2(test.name).padEnd(22)} ${oneLine2(test.description)}`)
   ];
   return `${lines2.join("\r\n")}\r
 `;
@@ -8398,11 +9607,11 @@ async function answer(scanner, request, message, options) {
       return reply(EX_OK, "EX_OK", [verdict]);
     }
     case "SYMBOLS": {
-      return reply(EX_OK, "EX_OK", [verdict], Buffer12.from(result.tests.map((test) => test.name).join(",")));
+      return reply(EX_OK, "EX_OK", [verdict], Buffer13.from(result.tests.map((test) => test.name).join(",")));
     }
     case "REPORT":
     case "REPORT_IFSPAM": {
-      return reply(EX_OK, "EX_OK", [verdict], command === "REPORT" || result.isSpam ? Buffer12.from(report(result)) : Buffer12.alloc(0));
+      return reply(EX_OK, "EX_OK", [verdict], command === "REPORT" || result.isSpam ? Buffer13.from(report(result)) : Buffer13.alloc(0));
     }
     default: {
       const rewritten = rewriteMessage(message, spamHeaders(result, { version: VERSION }), { subjectTag: result.isSpam ? options.subjectTag : null });
@@ -8410,7 +9619,7 @@ async function answer(scanner, request, message, options) {
         return reply(EX_OK, "EX_OK", [verdict], rewritten);
       }
       const { header, newline } = splitMessage(rewritten);
-      return reply(EX_OK, "EX_OK", [verdict], Buffer12.from(`${header}${newline}${newline}`, "latin1"));
+      return reply(EX_OK, "EX_OK", [verdict], Buffer13.from(`${header}${newline}${newline}`, "latin1"));
     }
   }
 }
@@ -8425,7 +9634,7 @@ function createSpamdServer(scanner, options = {}) {
     ...options
   };
   const server = net4.createServer({ allowHalfOpen: true }, (socket) => {
-    let head = Buffer12.alloc(0);
+    let head = Buffer13.alloc(0);
     const chunks = [];
     let size = 0;
     let request = null;
@@ -8451,7 +9660,7 @@ function createSpamdServer(scanner, options = {}) {
         return;
       }
       if (!request) {
-        head = Buffer12.concat([head, chunk2]);
+        head = Buffer13.concat([head, chunk2]);
         const end = head.indexOf("\r\n\r\n");
         if (end === -1) {
           if (head.length > 64 * 1024) {
@@ -8486,7 +9695,7 @@ function createSpamdServer(scanner, options = {}) {
       chunks.push(chunk2);
       size += chunk2.length;
       if (request.length === null ? ["PING", "SKIP"].includes(request.command) : size >= request.length) {
-        finish(Buffer12.concat(chunks).subarray(0, request.length ?? 0));
+        finish(Buffer13.concat(chunks).subarray(0, request.length ?? 0));
       } else if (size > settings.maxSize) {
         fail(EX_DATAERR, `Message larger than ${settings.maxSize} bytes`);
       }
@@ -8498,7 +9707,7 @@ function createSpamdServer(scanner, options = {}) {
       if (!request) {
         fail(EX_PROTOCOL, "Incomplete request");
       } else if (request.length === null) {
-        finish(Buffer12.concat(chunks));
+        finish(Buffer13.concat(chunks));
       } else {
         fail(EX_PROTOCOL, `Message shorter than its Content-length of ${request.length} bytes`);
       }
@@ -8672,21 +9881,21 @@ async function withTimeout(promise, ms, fallback) {
   }
 }
 async function toBuffer(source) {
-  if (Buffer13.isBuffer(source)) {
+  if (Buffer14.isBuffer(source)) {
     return source;
   }
   if (typeof source === "string") {
-    return Buffer13.from(source, "utf8");
+    return Buffer14.from(source, "utf8");
   }
   if (source instanceof Uint8Array) {
-    return Buffer13.from(source);
+    return Buffer14.from(source);
   }
   if (source && typeof source[Symbol.asyncIterator] === "function") {
     const chunks = [];
     for await (const chunk2 of source) {
-      chunks.push(Buffer13.isBuffer(chunk2) ? chunk2 : Buffer13.from(chunk2));
+      chunks.push(Buffer14.isBuffer(chunk2) ? chunk2 : Buffer14.from(chunk2));
     }
-    return Buffer13.concat(chunks);
+    return Buffer14.concat(chunks);
   }
   throw new TypeError("A message must be a Buffer, a string, a Uint8Array or a readable stream");
 }
@@ -8708,6 +9917,19 @@ var DEFAULTS2 = {
     cloudflare: true,
     adult: true,
     maxHosts: 25,
+    // Also read the links of the whole message and of what it carries
+    // (attached messages, HTML, SVG and XML files, text files, invitations
+    // and contact cards, documents in iframes and data: URLs) when link
+    // hosts are looked up, for at most five seconds: off by default, as it
+    // reads all of it, up to 50 MB of attachments.
+    attachments: false,
+    // Milliseconds the link lookups may take in all (default: timeout).
+    timeout: void 0,
+    // Also look up host names written in the text without a link or a path
+    // ("evil.example"), which mail clients make links of, as far as there is
+    // room: off by default, as a quoted reply or a signature may name any
+    // site (they are checked for lookalikes either way).
+    hostsInText: false,
     // Characters of text read for links (twice as many of HTML): more than
     // for the classifier (maxLength), as a link anywhere in a message may be
     // followed; a longer message sets results.linksTruncated.
@@ -8820,7 +10042,7 @@ function fromDomain(mail) {
 function withHeader(raw) {
   const first = raw.subarray(0, 1e3).toString("latin1");
   const headerless = raw.length > 0 && !/^(?:[!-9;-~]+[ \t]*:|From |[\r\n])/.test(first);
-  return headerless ? Buffer13.concat([Buffer13.from("\r\n"), raw]) : raw;
+  return headerless ? Buffer14.concat([Buffer14.from("\r\n"), raw]) : raw;
 }
 var SpamScanner = class {
   /**
@@ -8982,7 +10204,10 @@ var SpamScanner = class {
   async scanFile(file, options) {
     return this.scan(await readFile(file), options);
   }
-  async checkLinks(links, config, hosts = [], from = "") {
+  // (`from`: the sender's domain; `carried`: the link hosts of the whole
+  //  message and of what it carries, see carriedLinkHosts)
+  async checkLinks(links, config, hosts = [], options = {}) {
+    const { from = "", carried = null } = typeof options === "string" ? { from: options } : options ?? {};
     const phishing = [];
     const homographs = [];
     const seenHosts = /* @__PURE__ */ new Set();
@@ -9038,18 +10263,23 @@ var SpamScanner = class {
     for (const host of hosts) {
       lookalike(host, { source: "text" });
     }
-    const ordered = [...new Set([...found.filter((link) => link.text), ...found.filter((link) => !link.text), ...bare].map((link) => lookupName(destination(link))).filter(Boolean))];
+    const carriedHosts = (carried?.hosts ?? []).map((host) => lookupName(host)).filter(Boolean);
+    for (const host of carriedHosts) {
+      seenHosts.add(host);
+    }
+    const own = [...found.filter((link) => link.text), ...found.filter((link) => !link.text), ...bare].map((link) => lookupName(destination(link))).filter(Boolean);
     const firsts = /* @__PURE__ */ new Map();
-    for (const host of ordered) {
+    for (const host of [...own, ...carriedHosts]) {
       const domain = registrableDomain(host);
       if (!firsts.has(domain)) {
         firsts.set(domain, host);
       }
     }
-    const checked = [.../* @__PURE__ */ new Set([...firsts.values(), ...ordered])].slice(0, config.phishing.maxHosts);
+    const checked = [.../* @__PURE__ */ new Set([...firsts.values(), ...own, ...carriedHosts])].slice(0, config.phishing.maxHosts);
     const domains = [...new Set(checked.map((host) => registrableDomain(host)))];
     const blocked = [];
     let answered = 0;
+    const linkTimeout = Number(config.phishing.timeout) > 0 ? Number(config.phishing.timeout) : config.timeout;
     const cloudflare = async () => {
       await withTimeout(Promise.all(checked.map(async (host) => {
         const found2 = await this.dns.checkCloudflare([host], { adult: config.phishing.adult });
@@ -9057,12 +10287,12 @@ var SpamScanner = class {
         if (!found2.unanswered?.length) {
           answered++;
         }
-      })), config.timeout, null);
+      })), linkTimeout, null);
       return { found: [...blocked], unanswered: checked.length - answered };
     };
     const [cloudflareResult, listed] = await Promise.all([
       config.phishing.cloudflare && checked.length > 0 ? cloudflare() : { found: [], unanswered: 0 },
-      config.dnsbl.domain?.length > 0 && domains.length > 0 ? withTimeout(this.dns.checkDomains(domains, config.dnsbl.domain), config.timeout, []) : []
+      config.dnsbl.domain?.length > 0 && domains.length > 0 ? withTimeout(this.dns.checkDomains(domains, config.dnsbl.domain), linkTimeout, []) : []
     ]);
     for (const { host, category } of cloudflareResult.found) {
       phishing.push(finding(category === "malware" ? { type: "malicious_domain", domain: host, message: `Link hostname ${host} is blocked by Cloudflare's malware filtering as phishing or malware` } : { type: "adult_domain", domain: host, message: `Link hostname ${host} was detected by Cloudflare's family filtering to contain adult-related content` }));
@@ -9078,7 +10308,8 @@ var SpamScanner = class {
     return {
       phishing,
       homographs,
-      uncheckedHosts: seenHosts.size - checked.length,
+      // (at least one when the message has more hosts than were read)
+      uncheckedHosts: Math.max(seenHosts.size - checked.length, carried?.more ? 1 : 0),
       timedOutHosts: cloudflareResult.unanswered
     };
   }
@@ -9250,10 +10481,17 @@ ${visibleText(html.slice(0, config.maxLength * 2)).text}`, { maxLength: config.m
       styled: plainObfuscation.styled || shownObfuscation.styled
     };
     const unopened = [];
-    const attached = await expandAttachments(mail.attachments, parseErrors, void 0, unopened);
+    const opened = [];
+    const attached = await expandAttachments(mail.attachments, parseErrors, void 0, { unopened, mails: opened });
+    const carried = config.phishing.attachments === true && (config.phishing.cloudflare || config.dnsbl.domain?.length > 0) ? carriedLinkHosts(mail, {
+      mails: opened,
+      attachments: attached,
+      maxHosts: config.phishing.maxHosts,
+      hostsInText: config.phishing.hostsInText === true
+    }) : null;
     const attachments = config.attachments === false ? [] : inspectAttachments(attached).filter((item) => config.macros !== false || !["macro", "pdf_active", "rtf_object"].includes(item.type)).map((item) => finding(item));
     const [links, authentication, checkedReputation, dnsbl, virusScan, toxicity, nsfw] = await Promise.all([
-      this.checkLinks(checkedLinks, config, extracted.hosts, fromDomain(mail)),
+      this.checkLinks(checkedLinks, config, extracted.hosts, { from: fromDomain(mail), carried }),
       config.authenticationResults && typeof config.authenticationResults === "object" ? normalizeAuthOutput(config.authenticationResults) : config.authentication && session.remoteAddress ? withTimeout(authenticate(raw, {
         timeout: config.timeout,
         ...typeof config.authentication === "object" ? config.authentication : {},
@@ -9381,6 +10619,14 @@ ${visibleText(html.slice(0, config.maxLength * 2)).text}`, { maxLength: config.m
         // Whether the message has more text than phishing.maxLength, whose
         // links were not read.
         linksTruncated,
+        // Whether a link host of the message or of what it carries was
+        // never read whole (it runs past where long text is cut to be
+        // read, it goes through more security gateways than are
+        // unwrapped, or it is in more documents than are read), and whether
+        // an attachment was left unread for time: in either case not every
+        // link was checked (see phishing.attachments).
+        linksTooComplex: Boolean(carried?.tooComplex),
+        linksIncomplete: Boolean(carried?.incomplete),
         idnHomographAttack: {
           detected: links.homographs.length > 0,
           domains: links.homographs,
@@ -9392,6 +10638,9 @@ ${visibleText(html.slice(0, config.maxLength * 2)).text}`, { maxLength: config.m
       language: extracted.language,
       tokens: extracted.words,
       mail,
+      // (the attachments of the message and of its attached messages, as
+      //  read, an attached message's named after it)
+      attached,
       version: VERSION,
       metrics: { totalTime: time }
     };