spamscanner 7.0.9 → 7.0.11

package/dist/esm/cli.js

@@ -4,7 +4,7 @@
 import process4 from "node:process";
 
 // src/cli.js
-import { Buffer as Buffer14 } from "node:buffer";
+import { Buffer as Buffer15 } from "node:buffer";
 import { spawn } from "node:child_process";
 import {
   createReadStream as createReadStream2,
@@ -1730,103 +1730,285 @@ var HomographDetector = class {
   }
 };
 
+// src/entities.js
+var NAMED = [
+  "AElig=c6,AMP=26,Aacute=c1,Abreve=102,Acirc=c2,Acy=410,Afr=1d504,Agrave=c0,Alpha=391,Amacr=100,And=2a",
+  "53,Aogon=104,Aopf=1d538,ApplyFunction=2061,Aring=c5,Ascr=1d49c,Assign=2254,Atilde=c3,Auml=c4,Backsla",
+  "sh=2216,Barv=2ae7,Barwed=2306,Bcy=411,Because=2235,Bernoullis=212c,Beta=392,Bfr=1d505,Bopf=1d539,Bre",
+  "ve=2d8,Bscr=212c,Bumpeq=224e,CHcy=427,COPY=a9,Cacute=106,Cap=22d2,CapitalDifferentialD=2145,Cayleys=",
+  "212d,Ccaron=10c,Ccedil=c7,Ccirc=108,Cconint=2230,Cdot=10a,Cedilla=b8,CenterDot=b7,Cfr=212d,Chi=3a7,C",
+  "ircleDot=2299,CircleMinus=2296,CirclePlus=2295,CircleTimes=2297,ClockwiseContourIntegral=2232,CloseC",
+  "urlyDoubleQuote=201d,CloseCurlyQuote=2019,Colon=2237,Colone=2a74,Congruent=2261,Conint=222f,ContourI",
+  "ntegral=222e,Copf=2102,Coproduct=2210,CounterClockwiseContourIntegral=2233,Cross=2a2f,Cscr=1d49e,Cup",
+  "=22d3,CupCap=224d,DD=2145,DDotrahd=2911,DJcy=402,DScy=405,DZcy=40f,Dagger=2021,Darr=21a1,Dashv=2ae4,",
+  "Dcaron=10e,Dcy=414,Del=2207,Delta=394,Dfr=1d507,DiacriticalAcute=b4,DiacriticalDot=2d9,DiacriticalDo",
+  "ubleAcute=2dd,DiacriticalGrave=60,DiacriticalTilde=2dc,Diamond=22c4,DifferentialD=2146,Dopf=1d53b,Do",
+  "t=a8,DotDot=20dc,DotEqual=2250,DoubleContourIntegral=222f,DoubleDot=a8,DoubleDownArrow=21d3,DoubleLe",
+  "ftArrow=21d0,DoubleLeftRightArrow=21d4,DoubleLeftTee=2ae4,DoubleLongLeftArrow=27f8,DoubleLongLeftRig",
+  "htArrow=27fa,DoubleLongRightArrow=27f9,DoubleRightArrow=21d2,DoubleRightTee=22a8,DoubleUpArrow=21d1,",
+  "DoubleUpDownArrow=21d5,DoubleVerticalBar=2225,DownArrow=2193,DownArrowBar=2913,DownArrowUpArrow=21f5",
+  ",DownBreve=311,DownLeftRightVector=2950,DownLeftTeeVector=295e,DownLeftVector=21bd,DownLeftVectorBar",
+  "=2956,DownRightTeeVector=295f,DownRightVector=21c1,DownRightVectorBar=2957,DownTee=22a4,DownTeeArrow",
+  "=21a7,Downarrow=21d3,Dscr=1d49f,Dstrok=110,ENG=14a,ETH=d0,Eacute=c9,Ecaron=11a,Ecirc=ca,Ecy=42d,Edot",
+  "=116,Efr=1d508,Egrave=c8,Element=2208,Emacr=112,EmptySmallSquare=25fb,EmptyVerySmallSquare=25ab,Eogo",
+  "n=118,Eopf=1d53c,Epsilon=395,Equal=2a75,EqualTilde=2242,Equilibrium=21cc,Escr=2130,Esim=2a73,Eta=397",
+  ",Euml=cb,Exists=2203,ExponentialE=2147,Fcy=424,Ffr=1d509,FilledSmallSquare=25fc,FilledVerySmallSquar",
+  "e=25aa,Fopf=1d53d,ForAll=2200,Fouriertrf=2131,Fscr=2131,GJcy=403,GT=3e,Gamma=393,Gammad=3dc,Gbreve=1",
+  "1e,Gcedil=122,Gcirc=11c,Gcy=413,Gdot=120,Gfr=1d50a,Gg=22d9,Gopf=1d53e,GreaterEqual=2265,GreaterEqual",
+  "Less=22db,GreaterFullEqual=2267,GreaterGreater=2aa2,GreaterLess=2277,GreaterSlantEqual=2a7e,GreaterT",
+  "ilde=2273,Gscr=1d4a2,Gt=226b,HARDcy=42a,Hacek=2c7,Hat=5e,Hcirc=124,Hfr=210c,HilbertSpace=210b,Hopf=2",
+  "10d,HorizontalLine=2500,Hscr=210b,Hstrok=126,HumpDownHump=224e,HumpEqual=224f,IEcy=415,IJlig=132,IOc",
+  "y=401,Iacute=cd,Icirc=ce,Icy=418,Idot=130,Ifr=2111,Igrave=cc,Im=2111,Imacr=12a,ImaginaryI=2148,Impli",
+  "es=21d2,Int=222c,Integral=222b,Intersection=22c2,InvisibleComma=2063,InvisibleTimes=2062,Iogon=12e,I",
+  "opf=1d540,Iota=399,Iscr=2110,Itilde=128,Iukcy=406,Iuml=cf,Jcirc=134,Jcy=419,Jfr=1d50d,Jopf=1d541,Jsc",
+  "r=1d4a5,Jsercy=408,Jukcy=404,KHcy=425,KJcy=40c,Kappa=39a,Kcedil=136,Kcy=41a,Kfr=1d50e,Kopf=1d542,Ksc",
+  "r=1d4a6,LJcy=409,LT=3c,Lacute=139,Lambda=39b,Lang=27ea,Laplacetrf=2112,Larr=219e,Lcaron=13d,Lcedil=1",
+  "3b,Lcy=41b,LeftAngleBracket=27e8,LeftArrow=2190,LeftArrowBar=21e4,LeftArrowRightArrow=21c6,LeftCeili",
+  "ng=2308,LeftDoubleBracket=27e6,LeftDownTeeVector=2961,LeftDownVector=21c3,LeftDownVectorBar=2959,Lef",
+  "tFloor=230a,LeftRightArrow=2194,LeftRightVector=294e,LeftTee=22a3,LeftTeeArrow=21a4,LeftTeeVector=29",
+  "5a,LeftTriangle=22b2,LeftTriangleBar=29cf,LeftTriangleEqual=22b4,LeftUpDownVector=2951,LeftUpTeeVect",
+  "or=2960,LeftUpVector=21bf,LeftUpVectorBar=2958,LeftVector=21bc,LeftVectorBar=2952,Leftarrow=21d0,Lef",
+  "trightarrow=21d4,LessEqualGreater=22da,LessFullEqual=2266,LessGreater=2276,LessLess=2aa1,LessSlantEq",
+  "ual=2a7d,LessTilde=2272,Lfr=1d50f,Ll=22d8,Lleftarrow=21da,Lmidot=13f,LongLeftArrow=27f5,LongLeftRigh",
+  "tArrow=27f7,LongRightArrow=27f6,Longleftarrow=27f8,Longleftrightarrow=27fa,Longrightarrow=27f9,Lopf=",
+  "1d543,LowerLeftArrow=2199,LowerRightArrow=2198,Lscr=2112,Lsh=21b0,Lstrok=141,Lt=226a,Map=2905,Mcy=41",
+  "c,MediumSpace=205f,Mellintrf=2133,Mfr=1d510,MinusPlus=2213,Mopf=1d544,Mscr=2133,Mu=39c,NJcy=40a,Nacu",
+  "te=143,Ncaron=147,Ncedil=145,Ncy=41d,NegativeMediumSpace=200b,NegativeThickSpace=200b,NegativeThinSp",
+  "ace=200b,NegativeVeryThinSpace=200b,NestedGreaterGreater=226b,NestedLessLess=226a,NewLine=a,Nfr=1d51",
+  "1,NoBreak=2060,NonBreakingSpace=a0,Nopf=2115,Not=2aec,NotCongruent=2262,NotCupCap=226d,NotDoubleVert",
+  "icalBar=2226,NotElement=2209,NotEqual=2260,NotEqualTilde=2242.338,NotExists=2204,NotGreater=226f,Not",
+  "GreaterEqual=2271,NotGreaterFullEqual=2267.338,NotGreaterGreater=226b.338,NotGreaterLess=2279,NotGre",
+  "aterSlantEqual=2a7e.338,NotGreaterTilde=2275,NotHumpDownHump=224e.338,NotHumpEqual=224f.338,NotLeftT",
+  "riangle=22ea,NotLeftTriangleBar=29cf.338,NotLeftTriangleEqual=22ec,NotLess=226e,NotLessEqual=2270,No",
+  "tLessGreater=2278,NotLessLess=226a.338,NotLessSlantEqual=2a7d.338,NotLessTilde=2274,NotNestedGreater",
+  "Greater=2aa2.338,NotNestedLessLess=2aa1.338,NotPrecedes=2280,NotPrecedesEqual=2aaf.338,NotPrecedesSl",
+  "antEqual=22e0,NotReverseElement=220c,NotRightTriangle=22eb,NotRightTriangleBar=29d0.338,NotRightTria",
+  "ngleEqual=22ed,NotSquareSubset=228f.338,NotSquareSubsetEqual=22e2,NotSquareSuperset=2290.338,NotSqua",
+  "reSupersetEqual=22e3,NotSubset=2282.20d2,NotSubsetEqual=2288,NotSucceeds=2281,NotSucceedsEqual=2ab0.",
+  "338,NotSucceedsSlantEqual=22e1,NotSucceedsTilde=227f.338,NotSuperset=2283.20d2,NotSupersetEqual=2289",
+  ",NotTilde=2241,NotTildeEqual=2244,NotTildeFullEqual=2247,NotTildeTilde=2249,NotVerticalBar=2224,Nscr",
+  "=1d4a9,Ntilde=d1,Nu=39d,OElig=152,Oacute=d3,Ocirc=d4,Ocy=41e,Odblac=150,Ofr=1d512,Ograve=d2,Omacr=14",
+  "c,Omega=3a9,Omicron=39f,Oopf=1d546,OpenCurlyDoubleQuote=201c,OpenCurlyQuote=2018,Or=2a54,Oscr=1d4aa,",
+  "Oslash=d8,Otilde=d5,Otimes=2a37,Ouml=d6,OverBar=203e,OverBrace=23de,OverBracket=23b4,OverParenthesis",
+  "=23dc,PartialD=2202,Pcy=41f,Pfr=1d513,Phi=3a6,Pi=3a0,PlusMinus=b1,Poincareplane=210c,Popf=2119,Pr=2a",
+  "bb,Precedes=227a,PrecedesEqual=2aaf,PrecedesSlantEqual=227c,PrecedesTilde=227e,Prime=2033,Product=22",
+  "0f,Proportion=2237,Proportional=221d,Pscr=1d4ab,Psi=3a8,QUOT=22,Qfr=1d514,Qopf=211a,Qscr=1d4ac,RBarr",
+  "=2910,REG=ae,Racute=154,Rang=27eb,Rarr=21a0,Rarrtl=2916,Rcaron=158,Rcedil=156,Rcy=420,Re=211c,Revers",
+  "eElement=220b,ReverseEquilibrium=21cb,ReverseUpEquilibrium=296f,Rfr=211c,Rho=3a1,RightAngleBracket=2",
+  "7e9,RightArrow=2192,RightArrowBar=21e5,RightArrowLeftArrow=21c4,RightCeiling=2309,RightDoubleBracket",
+  "=27e7,RightDownTeeVector=295d,RightDownVector=21c2,RightDownVectorBar=2955,RightFloor=230b,RightTee=",
+  "22a2,RightTeeArrow=21a6,RightTeeVector=295b,RightTriangle=22b3,RightTriangleBar=29d0,RightTriangleEq",
+  "ual=22b5,RightUpDownVector=294f,RightUpTeeVector=295c,RightUpVector=21be,RightUpVectorBar=2954,Right",
+  "Vector=21c0,RightVectorBar=2953,Rightarrow=21d2,Ropf=211d,RoundImplies=2970,Rrightarrow=21db,Rscr=21",
+  "1b,Rsh=21b1,RuleDelayed=29f4,SHCHcy=429,SHcy=428,SOFTcy=42c,Sacute=15a,Sc=2abc,Scaron=160,Scedil=15e",
+  ",Scirc=15c,Scy=421,Sfr=1d516,ShortDownArrow=2193,ShortLeftArrow=2190,ShortRightArrow=2192,ShortUpArr",
+  "ow=2191,Sigma=3a3,SmallCircle=2218,Sopf=1d54a,Sqrt=221a,Square=25a1,SquareIntersection=2293,SquareSu",
+  "bset=228f,SquareSubsetEqual=2291,SquareSuperset=2290,SquareSupersetEqual=2292,SquareUnion=2294,Sscr=",
+  "1d4ae,Star=22c6,Sub=22d0,Subset=22d0,SubsetEqual=2286,Succeeds=227b,SucceedsEqual=2ab0,SucceedsSlant",
+  "Equal=227d,SucceedsTilde=227f,SuchThat=220b,Sum=2211,Sup=22d1,Superset=2283,SupersetEqual=2287,Supse",
+  "t=22d1,THORN=de,TRADE=2122,TSHcy=40b,TScy=426,Tab=9,Tau=3a4,Tcaron=164,Tcedil=162,Tcy=422,Tfr=1d517,",
+  "Therefore=2234,Theta=398,ThickSpace=205f.200a,ThinSpace=2009,Tilde=223c,TildeEqual=2243,TildeFullEqu",
+  "al=2245,TildeTilde=2248,Topf=1d54b,TripleDot=20db,Tscr=1d4af,Tstrok=166,Uacute=da,Uarr=219f,Uarrocir",
+  "=2949,Ubrcy=40e,Ubreve=16c,Ucirc=db,Ucy=423,Udblac=170,Ufr=1d518,Ugrave=d9,Umacr=16a,UnderBar=5f,Und",
+  "erBrace=23df,UnderBracket=23b5,UnderParenthesis=23dd,Union=22c3,UnionPlus=228e,Uogon=172,Uopf=1d54c,",
+  "UpArrow=2191,UpArrowBar=2912,UpArrowDownArrow=21c5,UpDownArrow=2195,UpEquilibrium=296e,UpTee=22a5,Up",
+  "TeeArrow=21a5,Uparrow=21d1,Updownarrow=21d5,UpperLeftArrow=2196,UpperRightArrow=2197,Upsi=3d2,Upsilo",
+  "n=3a5,Uring=16e,Uscr=1d4b0,Utilde=168,Uuml=dc,VDash=22ab,Vbar=2aeb,Vcy=412,Vdash=22a9,Vdashl=2ae6,Ve",
+  "e=22c1,Verbar=2016,Vert=2016,VerticalBar=2223,VerticalLine=7c,VerticalSeparator=2758,VerticalTilde=2",
+  "240,VeryThinSpace=200a,Vfr=1d519,Vopf=1d54d,Vscr=1d4b1,Vvdash=22aa,Wcirc=174,Wedge=22c0,Wfr=1d51a,Wo",
+  "pf=1d54e,Wscr=1d4b2,Xfr=1d51b,Xi=39e,Xopf=1d54f,Xscr=1d4b3,YAcy=42f,YIcy=407,YUcy=42e,Yacute=dd,Ycir",
+  "c=176,Ycy=42b,Yfr=1d51c,Yopf=1d550,Yscr=1d4b4,Yuml=178,ZHcy=416,Zacute=179,Zcaron=17d,Zcy=417,Zdot=1",
+  "7b,ZeroWidthSpace=200b,Zeta=396,Zfr=2128,Zopf=2124,Zscr=1d4b5,aacute=e1,abreve=103,ac=223e,acE=223e.",
+  "333,acd=223f,acirc=e2,acute=b4,acy=430,aelig=e6,af=2061,afr=1d51e,agrave=e0,alefsym=2135,aleph=2135,",
+  "alpha=3b1,amacr=101,amalg=2a3f,amp=26,and=2227,andand=2a55,andd=2a5c,andslope=2a58,andv=2a5a,ang=222",
+  "0,ange=29a4,angle=2220,angmsd=2221,angmsdaa=29a8,angmsdab=29a9,angmsdac=29aa,angmsdad=29ab,angmsdae=",
+  "29ac,angmsdaf=29ad,angmsdag=29ae,angmsdah=29af,angrt=221f,angrtvb=22be,angrtvbd=299d,angsph=2222,ang",
+  "st=c5,angzarr=237c,aogon=105,aopf=1d552,ap=2248,apE=2a70,apacir=2a6f,ape=224a,apid=224b,apos=27,appr",
+  "ox=2248,approxeq=224a,aring=e5,ascr=1d4b6,ast=2a,asymp=2248,asympeq=224d,atilde=e3,auml=e4,awconint=",
+  "2233,awint=2a11,bNot=2aed,backcong=224c,backepsilon=3f6,backprime=2035,backsim=223d,backsimeq=22cd,b",
+  "arvee=22bd,barwed=2305,barwedge=2305,bbrk=23b5,bbrktbrk=23b6,bcong=224c,bcy=431,bdquo=201e,becaus=22",
+  "35,because=2235,bemptyv=29b0,bepsi=3f6,bernou=212c,beta=3b2,beth=2136,between=226c,bfr=1d51f,bigcap=",
+  "22c2,bigcirc=25ef,bigcup=22c3,bigodot=2a00,bigoplus=2a01,bigotimes=2a02,bigsqcup=2a06,bigstar=2605,b",
+  "igtriangledown=25bd,bigtriangleup=25b3,biguplus=2a04,bigvee=22c1,bigwedge=22c0,bkarow=290d,blackloze",
+  "nge=29eb,blacksquare=25aa,blacktriangle=25b4,blacktriangledown=25be,blacktriangleleft=25c2,blacktria",
+  "ngleright=25b8,blank=2423,blk12=2592,blk14=2591,blk34=2593,block=2588,bne=3d.20e5,bnequiv=2261.20e5,",
+  "bnot=2310,bopf=1d553,bot=22a5,bottom=22a5,bowtie=22c8,boxDL=2557,boxDR=2554,boxDl=2556,boxDr=2553,bo",
+  "xH=2550,boxHD=2566,boxHU=2569,boxHd=2564,boxHu=2567,boxUL=255d,boxUR=255a,boxUl=255c,boxUr=2559,boxV",
+  "=2551,boxVH=256c,boxVL=2563,boxVR=2560,boxVh=256b,boxVl=2562,boxVr=255f,boxbox=29c9,boxdL=2555,boxdR",
+  "=2552,boxdl=2510,boxdr=250c,boxh=2500,boxhD=2565,boxhU=2568,boxhd=252c,boxhu=2534,boxminus=229f,boxp",
+  "lus=229e,boxtimes=22a0,boxuL=255b,boxuR=2558,boxul=2518,boxur=2514,boxv=2502,boxvH=256a,boxvL=2561,b",
+  "oxvR=255e,boxvh=253c,boxvl=2524,boxvr=251c,bprime=2035,breve=2d8,brvbar=a6,bscr=1d4b7,bsemi=204f,bsi",
+  "m=223d,bsime=22cd,bsol=5c,bsolb=29c5,bsolhsub=27c8,bull=2022,bullet=2022,bump=224e,bumpE=2aae,bumpe=",
+  "224f,bumpeq=224f,cacute=107,cap=2229,capand=2a44,capbrcup=2a49,capcap=2a4b,capcup=2a47,capdot=2a40,c",
+  "aps=2229.fe00,caret=2041,caron=2c7,ccaps=2a4d,ccaron=10d,ccedil=e7,ccirc=109,ccups=2a4c,ccupssm=2a50",
+  ",cdot=10b,cedil=b8,cemptyv=29b2,cent=a2,centerdot=b7,cfr=1d520,chcy=447,check=2713,checkmark=2713,ch",
+  "i=3c7,cir=25cb,cirE=29c3,circ=2c6,circeq=2257,circlearrowleft=21ba,circlearrowright=21bb,circledR=ae",
+  ",circledS=24c8,circledast=229b,circledcirc=229a,circleddash=229d,cire=2257,cirfnint=2a10,cirmid=2aef",
+  ",cirscir=29c2,clubs=2663,clubsuit=2663,colon=3a,colone=2254,coloneq=2254,comma=2c,commat=40,comp=220",
+  "1,compfn=2218,complement=2201,complexes=2102,cong=2245,congdot=2a6d,conint=222e,copf=1d554,coprod=22",
+  "10,copy=a9,copysr=2117,crarr=21b5,cross=2717,cscr=1d4b8,csub=2acf,csube=2ad1,csup=2ad0,csupe=2ad2,ct",
+  "dot=22ef,cudarrl=2938,cudarrr=2935,cuepr=22de,cuesc=22df,cularr=21b6,cularrp=293d,cup=222a,cupbrcap=",
+  "2a48,cupcap=2a46,cupcup=2a4a,cupdot=228d,cupor=2a45,cups=222a.fe00,curarr=21b7,curarrm=293c,curlyeqp",
+  "rec=22de,curlyeqsucc=22df,curlyvee=22ce,curlywedge=22cf,curren=a4,curvearrowleft=21b6,curvearrowrigh",
+  "t=21b7,cuvee=22ce,cuwed=22cf,cwconint=2232,cwint=2231,cylcty=232d,dArr=21d3,dHar=2965,dagger=2020,da",
+  "leth=2138,darr=2193,dash=2010,dashv=22a3,dbkarow=290f,dblac=2dd,dcaron=10f,dcy=434,dd=2146,ddagger=2",
+  "021,ddarr=21ca,ddotseq=2a77,deg=b0,delta=3b4,demptyv=29b1,dfisht=297f,dfr=1d521,dharl=21c3,dharr=21c",
+  "2,diam=22c4,diamond=22c4,diamondsuit=2666,diams=2666,die=a8,digamma=3dd,disin=22f2,div=f7,divide=f7,",
+  "divideontimes=22c7,divonx=22c7,djcy=452,dlcorn=231e,dlcrop=230d,dollar=24,dopf=1d555,dot=2d9,doteq=2",
+  "250,doteqdot=2251,dotminus=2238,dotplus=2214,dotsquare=22a1,doublebarwedge=2306,downarrow=2193,downd",
+  "ownarrows=21ca,downharpoonleft=21c3,downharpoonright=21c2,drbkarow=2910,drcorn=231f,drcrop=230c,dscr",
+  "=1d4b9,dscy=455,dsol=29f6,dstrok=111,dtdot=22f1,dtri=25bf,dtrif=25be,duarr=21f5,duhar=296f,dwangle=2",
+  "9a6,dzcy=45f,dzigrarr=27ff,eDDot=2a77,eDot=2251,eacute=e9,easter=2a6e,ecaron=11b,ecir=2256,ecirc=ea,",
+  "ecolon=2255,ecy=44d,edot=117,ee=2147,efDot=2252,efr=1d522,eg=2a9a,egrave=e8,egs=2a96,egsdot=2a98,el=",
+  "2a99,elinters=23e7,ell=2113,els=2a95,elsdot=2a97,emacr=113,empty=2205,emptyset=2205,emptyv=2205,emsp",
+  "=2003,emsp13=2004,emsp14=2005,eng=14b,ensp=2002,eogon=119,eopf=1d556,epar=22d5,eparsl=29e3,eplus=2a7",
+  "1,epsi=3b5,epsilon=3b5,epsiv=3f5,eqcirc=2256,eqcolon=2255,eqsim=2242,eqslantgtr=2a96,eqslantless=2a9",
+  "5,equals=3d,equest=225f,equiv=2261,equivDD=2a78,eqvparsl=29e5,erDot=2253,erarr=2971,escr=212f,esdot=",
+  "2250,esim=2242,eta=3b7,eth=f0,euml=eb,euro=20ac,excl=21,exist=2203,expectation=2130,exponentiale=214",
+  "7,fallingdotseq=2252,fcy=444,female=2640,ffilig=fb03,fflig=fb00,ffllig=fb04,ffr=1d523,filig=fb01,fjl",
+  "ig=66.6a,flat=266d,fllig=fb02,fltns=25b1,fnof=192,fopf=1d557,forall=2200,fork=22d4,forkv=2ad9,fparti",
+  "nt=2a0d,frac12=bd,frac13=2153,frac14=bc,frac15=2155,frac16=2159,frac18=215b,frac23=2154,frac25=2156,",
+  "frac34=be,frac35=2157,frac38=215c,frac45=2158,frac56=215a,frac58=215d,frac78=215e,frasl=2044,frown=2",
+  "322,fscr=1d4bb,gE=2267,gEl=2a8c,gacute=1f5,gamma=3b3,gammad=3dd,gap=2a86,gbreve=11f,gcirc=11d,gcy=43",
+  "3,gdot=121,ge=2265,gel=22db,geq=2265,geqq=2267,geqslant=2a7e,ges=2a7e,gescc=2aa9,gesdot=2a80,gesdoto",
+  "=2a82,gesdotol=2a84,gesl=22db.fe00,gesles=2a94,gfr=1d524,gg=226b,ggg=22d9,gimel=2137,gjcy=453,gl=227",
+  "7,glE=2a92,gla=2aa5,glj=2aa4,gnE=2269,gnap=2a8a,gnapprox=2a8a,gne=2a88,gneq=2a88,gneqq=2269,gnsim=22",
+  "e7,gopf=1d558,grave=60,gscr=210a,gsim=2273,gsime=2a8e,gsiml=2a90,gt=3e,gtcc=2aa7,gtcir=2a7a,gtdot=22",
+  "d7,gtlPar=2995,gtquest=2a7c,gtrapprox=2a86,gtrarr=2978,gtrdot=22d7,gtreqless=22db,gtreqqless=2a8c,gt",
+  "rless=2277,gtrsim=2273,gvertneqq=2269.fe00,gvnE=2269.fe00,hArr=21d4,hairsp=200a,half=bd,hamilt=210b,",
+  "hardcy=44a,harr=2194,harrcir=2948,harrw=21ad,hbar=210f,hcirc=125,hearts=2665,heartsuit=2665,hellip=2",
+  "026,hercon=22b9,hfr=1d525,hksearow=2925,hkswarow=2926,hoarr=21ff,homtht=223b,hookleftarrow=21a9,hook",
+  "rightarrow=21aa,hopf=1d559,horbar=2015,hscr=1d4bd,hslash=210f,hstrok=127,hybull=2043,hyphen=2010,iac",
+  "ute=ed,ic=2063,icirc=ee,icy=438,iecy=435,iexcl=a1,iff=21d4,ifr=1d526,igrave=ec,ii=2148,iiiint=2a0c,i",
+  "iint=222d,iinfin=29dc,iiota=2129,ijlig=133,imacr=12b,image=2111,imagline=2110,imagpart=2111,imath=13",
+  "1,imof=22b7,imped=1b5,in=2208,incare=2105,infin=221e,infintie=29dd,inodot=131,int=222b,intcal=22ba,i",
+  "ntegers=2124,intercal=22ba,intlarhk=2a17,intprod=2a3c,iocy=451,iogon=12f,iopf=1d55a,iota=3b9,iprod=2",
+  "a3c,iquest=bf,iscr=1d4be,isin=2208,isinE=22f9,isindot=22f5,isins=22f4,isinsv=22f3,isinv=2208,it=2062",
+  ",itilde=129,iukcy=456,iuml=ef,jcirc=135,jcy=439,jfr=1d527,jmath=237,jopf=1d55b,jscr=1d4bf,jsercy=458",
+  ",jukcy=454,kappa=3ba,kappav=3f0,kcedil=137,kcy=43a,kfr=1d528,kgreen=138,khcy=445,kjcy=45c,kopf=1d55c",
+  ",kscr=1d4c0,lAarr=21da,lArr=21d0,lAtail=291b,lBarr=290e,lE=2266,lEg=2a8b,lHar=2962,lacute=13a,laempt",
+  "yv=29b4,lagran=2112,lambda=3bb,lang=2329,langd=2991,langle=27e8,lap=2a85,laquo=ab,larr=2190,larrb=21",
+  "e4,larrbfs=291f,larrfs=291d,larrhk=21a9,larrlp=21ab,larrpl=2939,larrsim=2973,larrtl=21a2,lat=2aab,la",
+  "tail=2919,late=2aad,lates=2aad.fe00,lbarr=290c,lbbrk=2772,lbrace=7b,lbrack=5b,lbrke=298b,lbrksld=298",
+  "f,lbrkslu=298d,lcaron=13e,lcedil=13c,lceil=2308,lcub=7b,lcy=43b,ldca=2936,ldquo=201c,ldquor=201e,ldr",
+  "dhar=2967,ldrushar=294b,ldsh=21b2,le=2264,leftarrow=2190,leftarrowtail=21a2,leftharpoondown=21bd,lef",
+  "tharpoonup=21bc,leftleftarrows=21c7,leftrightarrow=2194,leftrightarrows=21c6,leftrightharpoons=21cb,",
+  "leftrightsquigarrow=21ad,leftthreetimes=22cb,leg=22da,leq=2264,leqq=2266,leqslant=2a7d,les=2a7d,lesc",
+  "c=2aa8,lesdot=2a7f,lesdoto=2a81,lesdotor=2a83,lesg=22da.fe00,lesges=2a93,lessapprox=2a85,lessdot=22d",
+  "6,lesseqgtr=22da,lesseqqgtr=2a8b,lessgtr=2276,lesssim=2272,lfisht=297c,lfloor=230a,lfr=1d529,lg=2276",
+  ",lgE=2a91,lhard=21bd,lharu=21bc,lharul=296a,lhblk=2584,ljcy=459,ll=226a,llarr=21c7,llcorner=231e,llh",
+  "ard=296b,lltri=25fa,lmidot=140,lmoust=23b0,lmoustache=23b0,lnE=2268,lnap=2a89,lnapprox=2a89,lne=2a87",
+  ",lneq=2a87,lneqq=2268,lnsim=22e6,loang=27ec,loarr=21fd,lobrk=27e6,longleftarrow=27f5,longleftrightar",
+  "row=27f7,longmapsto=27fc,longrightarrow=27f6,looparrowleft=21ab,looparrowright=21ac,lopar=2985,lopf=",
+  "1d55d,loplus=2a2d,lotimes=2a34,lowast=2217,lowbar=5f,loz=25ca,lozenge=25ca,lozf=29eb,lpar=28,lparlt=",
+  "2993,lrarr=21c6,lrcorner=231f,lrhar=21cb,lrhard=296d,lrm=200e,lrtri=22bf,lsaquo=2039,lscr=1d4c1,lsh=",
+  "21b0,lsim=2272,lsime=2a8d,lsimg=2a8f,lsqb=5b,lsquo=2018,lsquor=201a,lstrok=142,lt=3c,ltcc=2aa6,ltcir",
+  "=2a79,ltdot=22d6,lthree=22cb,ltimes=22c9,ltlarr=2976,ltquest=2a7b,ltrPar=2996,ltri=25c3,ltrie=22b4,l",
+  "trif=25c2,lurdshar=294a,luruhar=2966,lvertneqq=2268.fe00,lvnE=2268.fe00,mDDot=223a,macr=af,male=2642",
+  ",malt=2720,maltese=2720,map=21a6,mapsto=21a6,mapstodown=21a7,mapstoleft=21a4,mapstoup=21a5,marker=25",
+  "ae,mcomma=2a29,mcy=43c,mdash=2014,measuredangle=2221,mfr=1d52a,mho=2127,micro=b5,mid=2223,midast=2a,",
+  "midcir=2af0,middot=b7,minus=2212,minusb=229f,minusd=2238,minusdu=2a2a,mlcp=2adb,mldr=2026,mnplus=221",
+  "3,models=22a7,mopf=1d55e,mp=2213,mscr=1d4c2,mstpos=223e,mu=3bc,multimap=22b8,mumap=22b8,nGg=22d9.338",
+  ",nGt=226b.20d2,nGtv=226b.338,nLeftarrow=21cd,nLeftrightarrow=21ce,nLl=22d8.338,nLt=226a.20d2,nLtv=22",
+  "6a.338,nRightarrow=21cf,nVDash=22af,nVdash=22ae,nabla=2207,nacute=144,nang=2220.20d2,nap=2249,napE=2",
+  "a70.338,napid=224b.338,napos=149,napprox=2249,natur=266e,natural=266e,naturals=2115,nbsp=a0,nbump=22",
+  "4e.338,nbumpe=224f.338,ncap=2a43,ncaron=148,ncedil=146,ncong=2247,ncongdot=2a6d.338,ncup=2a42,ncy=43",
+  "d,ndash=2013,ne=2260,neArr=21d7,nearhk=2924,nearr=2197,nearrow=2197,nedot=2250.338,nequiv=2262,nesea",
+  "r=2928,nesim=2242.338,nexist=2204,nexists=2204,nfr=1d52b,ngE=2267.338,nge=2271,ngeq=2271,ngeqq=2267.",
+  "338,ngeqslant=2a7e.338,nges=2a7e.338,ngsim=2275,ngt=226f,ngtr=226f,nhArr=21ce,nharr=21ae,nhpar=2af2,",
+  "ni=220b,nis=22fc,nisd=22fa,niv=220b,njcy=45a,nlArr=21cd,nlE=2266.338,nlarr=219a,nldr=2025,nle=2270,n",
+  "leftarrow=219a,nleftrightarrow=21ae,nleq=2270,nleqq=2266.338,nleqslant=2a7d.338,nles=2a7d.338,nless=",
+  "226e,nlsim=2274,nlt=226e,nltri=22ea,nltrie=22ec,nmid=2224,nopf=1d55f,not=ac,notin=2209,notinE=22f9.3",
+  "38,notindot=22f5.338,notinva=2209,notinvb=22f7,notinvc=22f6,notni=220c,notniva=220c,notnivb=22fe,not",
+  "nivc=22fd,npar=2226,nparallel=2226,nparsl=2afd.20e5,npart=2202.338,npolint=2a14,npr=2280,nprcue=22e0",
+  ",npre=2aaf.338,nprec=2280,npreceq=2aaf.338,nrArr=21cf,nrarr=219b,nrarrc=2933.338,nrarrw=219d.338,nri",
+  "ghtarrow=219b,nrtri=22eb,nrtrie=22ed,nsc=2281,nsccue=22e1,nsce=2ab0.338,nscr=1d4c3,nshortmid=2224,ns",
+  "hortparallel=2226,nsim=2241,nsime=2244,nsimeq=2244,nsmid=2224,nspar=2226,nsqsube=22e2,nsqsupe=22e3,n",
+  "sub=2284,nsubE=2ac5.338,nsube=2288,nsubset=2282.20d2,nsubseteq=2288,nsubseteqq=2ac5.338,nsucc=2281,n",
+  "succeq=2ab0.338,nsup=2285,nsupE=2ac6.338,nsupe=2289,nsupset=2283.20d2,nsupseteq=2289,nsupseteqq=2ac6",
+  ".338,ntgl=2279,ntilde=f1,ntlg=2278,ntriangleleft=22ea,ntrianglelefteq=22ec,ntriangleright=22eb,ntria",
+  "nglerighteq=22ed,nu=3bd,num=23,numero=2116,numsp=2007,nvDash=22ad,nvHarr=2904,nvap=224d.20d2,nvdash=",
+  "22ac,nvge=2265.20d2,nvgt=3e.20d2,nvinfin=29de,nvlArr=2902,nvle=2264.20d2,nvlt=3c.20d2,nvltrie=22b4.2",
+  "0d2,nvrArr=2903,nvrtrie=22b5.20d2,nvsim=223c.20d2,nwArr=21d6,nwarhk=2923,nwarr=2196,nwarrow=2196,nwn",
+  "ear=2927,oS=24c8,oacute=f3,oast=229b,ocir=229a,ocirc=f4,ocy=43e,odash=229d,odblac=151,odiv=2a38,odot",
+  "=2299,odsold=29bc,oelig=153,ofcir=29bf,ofr=1d52c,ogon=2db,ograve=f2,ogt=29c1,ohbar=29b5,ohm=3a9,oint",
+  "=222e,olarr=21ba,olcir=29be,olcross=29bb,oline=203e,olt=29c0,omacr=14d,omega=3c9,omicron=3bf,omid=29",
+  "b6,ominus=2296,oopf=1d560,opar=29b7,operp=29b9,oplus=2295,or=2228,orarr=21bb,ord=2a5d,order=2134,ord",
+  "erof=2134,ordf=aa,ordm=ba,origof=22b6,oror=2a56,orslope=2a57,orv=2a5b,oscr=2134,oslash=f8,osol=2298,",
+  "otilde=f5,otimes=2297,otimesas=2a36,ouml=f6,ovbar=233d,par=2225,para=b6,parallel=2225,parsim=2af3,pa",
+  "rsl=2afd,part=2202,pcy=43f,percnt=25,period=2e,permil=2030,perp=22a5,pertenk=2031,pfr=1d52d,phi=3c6,",
+  "phiv=3d5,phmmat=2133,phone=260e,pi=3c0,pitchfork=22d4,piv=3d6,planck=210f,planckh=210e,plankv=210f,p",
+  "lus=2b,plusacir=2a23,plusb=229e,pluscir=2a22,plusdo=2214,plusdu=2a25,pluse=2a72,plusmn=b1,plussim=2a",
+  "26,plustwo=2a27,pm=b1,pointint=2a15,popf=1d561,pound=a3,pr=227a,prE=2ab3,prap=2ab7,prcue=227c,pre=2a",
+  "af,prec=227a,precapprox=2ab7,preccurlyeq=227c,preceq=2aaf,precnapprox=2ab9,precneqq=2ab5,precnsim=22",
+  "e8,precsim=227e,prime=2032,primes=2119,prnE=2ab5,prnap=2ab9,prnsim=22e8,prod=220f,profalar=232e,prof",
+  "line=2312,profsurf=2313,prop=221d,propto=221d,prsim=227e,prurel=22b0,pscr=1d4c5,psi=3c8,puncsp=2008,",
+  "qfr=1d52e,qint=2a0c,qopf=1d562,qprime=2057,qscr=1d4c6,quaternions=210d,quatint=2a16,quest=3f,questeq",
+  "=225f,quot=22,rAarr=21db,rArr=21d2,rAtail=291c,rBarr=290f,rHar=2964,race=223d.331,racute=155,radic=2",
+  "21a,raemptyv=29b3,rang=232a,rangd=2992,range=29a5,rangle=27e9,raquo=bb,rarr=2192,rarrap=2975,rarrb=2",
+  "1e5,rarrbfs=2920,rarrc=2933,rarrfs=291e,rarrhk=21aa,rarrlp=21ac,rarrpl=2945,rarrsim=2974,rarrtl=21a3",
+  ",rarrw=219d,ratail=291a,ratio=2236,rationals=211a,rbarr=290d,rbbrk=2773,rbrace=7d,rbrack=5d,rbrke=29",
+  "8c,rbrksld=298e,rbrkslu=2990,rcaron=159,rcedil=157,rceil=2309,rcub=7d,rcy=440,rdca=2937,rdldhar=2969",
+  ",rdquo=201d,rdquor=201d,rdsh=21b3,real=211c,realine=211b,realpart=211c,reals=211d,rect=25ad,reg=ae,r",
+  "fisht=297d,rfloor=230b,rfr=1d52f,rhard=21c1,rharu=21c0,rharul=296c,rho=3c1,rhov=3f1,rightarrow=2192,",
+  "rightarrowtail=21a3,rightharpoondown=21c1,rightharpoonup=21c0,rightleftarrows=21c4,rightleftharpoons",
+  "=21cc,rightrightarrows=21c9,rightsquigarrow=219d,rightthreetimes=22cc,ring=2da,risingdotseq=2253,rla",
+  "rr=21c4,rlhar=21cc,rlm=200f,rmoust=23b1,rmoustache=23b1,rnmid=2aee,roang=27ed,roarr=21fe,robrk=27e7,",
+  "ropar=2986,ropf=1d563,roplus=2a2e,rotimes=2a35,rpar=29,rpargt=2994,rppolint=2a12,rrarr=21c9,rsaquo=2",
+  "03a,rscr=1d4c7,rsh=21b1,rsqb=5d,rsquo=2019,rsquor=2019,rthree=22cc,rtimes=22ca,rtri=25b9,rtrie=22b5,",
+  "rtrif=25b8,rtriltri=29ce,ruluhar=2968,rx=211e,sacute=15b,sbquo=201a,sc=227b,scE=2ab4,scap=2ab8,scaro",
+  "n=161,sccue=227d,sce=2ab0,scedil=15f,scirc=15d,scnE=2ab6,scnap=2aba,scnsim=22e9,scpolint=2a13,scsim=",
+  "227f,scy=441,sdot=22c5,sdotb=22a1,sdote=2a66,seArr=21d8,searhk=2925,searr=2198,searrow=2198,sect=a7,",
+  "semi=3b,seswar=2929,setminus=2216,setmn=2216,sext=2736,sfr=1d530,sfrown=2322,sharp=266f,shchcy=449,s",
+  "hcy=448,shortmid=2223,shortparallel=2225,shy=ad,sigma=3c3,sigmaf=3c2,sigmav=3c2,sim=223c,simdot=2a6a",
+  ",sime=2243,simeq=2243,simg=2a9e,simgE=2aa0,siml=2a9d,simlE=2a9f,simne=2246,simplus=2a24,simrarr=2972",
+  ",slarr=2190,smallsetminus=2216,smashp=2a33,smeparsl=29e4,smid=2223,smile=2323,smt=2aaa,smte=2aac,smt",
+  "es=2aac.fe00,softcy=44c,sol=2f,solb=29c4,solbar=233f,sopf=1d564,spades=2660,spadesuit=2660,spar=2225",
+  ",sqcap=2293,sqcaps=2293.fe00,sqcup=2294,sqcups=2294.fe00,sqsub=228f,sqsube=2291,sqsubset=228f,sqsubs",
+  "eteq=2291,sqsup=2290,sqsupe=2292,sqsupset=2290,sqsupseteq=2292,squ=25a1,square=25a1,squarf=25aa,squf",
+  "=25aa,srarr=2192,sscr=1d4c8,ssetmn=2216,ssmile=2323,sstarf=22c6,star=2606,starf=2605,straightepsilon",
+  "=3f5,straightphi=3d5,strns=af,sub=2282,subE=2ac5,subdot=2abd,sube=2286,subedot=2ac3,submult=2ac1,sub",
+  "nE=2acb,subne=228a,subplus=2abf,subrarr=2979,subset=2282,subseteq=2286,subseteqq=2ac5,subsetneq=228a",
+  ",subsetneqq=2acb,subsim=2ac7,subsub=2ad5,subsup=2ad3,succ=227b,succapprox=2ab8,succcurlyeq=227d,succ",
+  "eq=2ab0,succnapprox=2aba,succneqq=2ab6,succnsim=22e9,succsim=227f,sum=2211,sung=266a,sup=2283,sup1=b",
+  "9,sup2=b2,sup3=b3,supE=2ac6,supdot=2abe,supdsub=2ad8,supe=2287,supedot=2ac4,suphsol=27c9,suphsub=2ad",
+  "7,suplarr=297b,supmult=2ac2,supnE=2acc,supne=228b,supplus=2ac0,supset=2283,supseteq=2287,supseteqq=2",
+  "ac6,supsetneq=228b,supsetneqq=2acc,supsim=2ac8,supsub=2ad4,supsup=2ad6,swArr=21d9,swarhk=2926,swarr=",
+  "2199,swarrow=2199,swnwar=292a,szlig=df,target=2316,tau=3c4,tbrk=23b4,tcaron=165,tcedil=163,tcy=442,t",
+  "dot=20db,telrec=2315,tfr=1d531,there4=2234,therefore=2234,theta=3b8,thetasym=3d1,thetav=3d1,thickapp",
+  "rox=2248,thicksim=223c,thinsp=2009,thkap=2248,thksim=223c,thorn=fe,tilde=2dc,times=d7,timesb=22a0,ti",
+  "mesbar=2a31,timesd=2a30,tint=222d,toea=2928,top=22a4,topbot=2336,topcir=2af1,topf=1d565,topfork=2ada",
+  ",tosa=2929,tprime=2034,trade=2122,triangle=25b5,triangledown=25bf,triangleleft=25c3,trianglelefteq=2",
+  "2b4,triangleq=225c,triangleright=25b9,trianglerighteq=22b5,tridot=25ec,trie=225c,triminus=2a3a,tripl",
+  "us=2a39,trisb=29cd,tritime=2a3b,trpezium=23e2,tscr=1d4c9,tscy=446,tshcy=45b,tstrok=167,twixt=226c,tw",
+  "oheadleftarrow=219e,twoheadrightarrow=21a0,uArr=21d1,uHar=2963,uacute=fa,uarr=2191,ubrcy=45e,ubreve=",
+  "16d,ucirc=fb,ucy=443,udarr=21c5,udblac=171,udhar=296e,ufisht=297e,ufr=1d532,ugrave=f9,uharl=21bf,uha",
+  "rr=21be,uhblk=2580,ulcorn=231c,ulcorner=231c,ulcrop=230f,ultri=25f8,umacr=16b,uml=a8,uogon=173,uopf=",
+  "1d566,uparrow=2191,updownarrow=2195,upharpoonleft=21bf,upharpoonright=21be,uplus=228e,upsi=3c5,upsih",
+  "=3d2,upsilon=3c5,upuparrows=21c8,urcorn=231d,urcorner=231d,urcrop=230e,uring=16f,urtri=25f9,uscr=1d4",
+  "ca,utdot=22f0,utilde=169,utri=25b5,utrif=25b4,uuarr=21c8,uuml=fc,uwangle=29a7,vArr=21d5,vBar=2ae8,vB",
+  "arv=2ae9,vDash=22a8,vangrt=299c,varepsilon=3f5,varkappa=3f0,varnothing=2205,varphi=3d5,varpi=3d6,var",
+  "propto=221d,varr=2195,varrho=3f1,varsigma=3c2,varsubsetneq=228a.fe00,varsubsetneqq=2acb.fe00,varsups",
+  "etneq=228b.fe00,varsupsetneqq=2acc.fe00,vartheta=3d1,vartriangleleft=22b2,vartriangleright=22b3,vcy=",
+  "432,vdash=22a2,vee=2228,veebar=22bb,veeeq=225a,vellip=22ee,verbar=7c,vert=7c,vfr=1d533,vltri=22b2,vn",
+  "sub=2282.20d2,vnsup=2283.20d2,vopf=1d567,vprop=221d,vrtri=22b3,vscr=1d4cb,vsubnE=2acb.fe00,vsubne=22",
+  "8a.fe00,vsupnE=2acc.fe00,vsupne=228b.fe00,vzigzag=299a,wcirc=175,wedbar=2a5f,wedge=2227,wedgeq=2259,",
+  "weierp=2118,wfr=1d534,wopf=1d568,wp=2118,wr=2240,wreath=2240,wscr=1d4cc,xcap=22c2,xcirc=25ef,xcup=22",
+  "c3,xdtri=25bd,xfr=1d535,xhArr=27fa,xharr=27f7,xi=3be,xlArr=27f8,xlarr=27f5,xmap=27fc,xnis=22fb,xodot",
+  "=2a00,xopf=1d569,xoplus=2a01,xotime=2a02,xrArr=27f9,xrarr=27f6,xscr=1d4cd,xsqcup=2a06,xuplus=2a04,xu",
+  "tri=25b3,xvee=22c1,xwedge=22c0,yacute=fd,yacy=44f,ycirc=177,ycy=44b,yen=a5,yfr=1d536,yicy=457,yopf=1",
+  "d56a,yscr=1d4ce,yucy=44e,yuml=ff,zacute=17a,zcaron=17e,zcy=437,zdot=17c,zeetrf=2128,zeta=3b6,zfr=1d5",
+  "37,zhcy=436,zigrarr=21dd,zopf=1d56b,zscr=1d4cf,zwj=200d,zwnj=200c"
+].join("");
+var NAMED_REFERENCES = new Map(NAMED.split(",").map((entry) => {
+  const [name, codes] = entry.split("=");
+  return [name, String.fromCodePoint(...codes.split(".").map((code) => Number.parseInt(code, 16)))];
+}));
+
 // src/html.js
 var LATIN1 = "nbsp iexcl cent pound curren yen brvbar sect uml copy ordf laquo not shy reg macr deg plusmn sup2 sup3 acute micro para middot cedil sup1 ordm raquo frac14 frac12 frac34 iquest Agrave Aacute Acirc Atilde Auml Aring AElig Ccedil Egrave Eacute Ecirc Euml Igrave Iacute Icirc Iuml ETH Ntilde Ograve Oacute Ocirc Otilde Ouml times Oslash Ugrave Uacute Ucirc Uuml Yacute THORN szlig agrave aacute acirc atilde auml aring aelig ccedil egrave eacute ecirc euml igrave iacute icirc iuml eth ntilde ograve oacute ocirc otilde ouml divide oslash ugrave uacute ucirc uuml yacute thorn yuml".split(" ");
-var ENTITIES = new Map([
-  ...LATIN1.map((name, index) => [name, String.fromCodePoint(160 + index)]),
-  ["amp", "&"],
-  ["lt", "<"],
-  ["gt", ">"],
-  ["quot", '"'],
-  ["apos", "'"],
-  ["AMP", "&"],
-  ["LT", "<"],
-  ["GT", ">"],
-  ["QUOT", '"'],
-  ["COPY", "\xA9"],
-  ["REG", "\xAE"],
-  ["OElig", "\u0152"],
-  ["oelig", "\u0153"],
-  ["Scaron", "\u0160"],
-  ["scaron", "\u0161"],
-  ["Yuml", "\u0178"],
-  ["fnof", "\u0192"],
-  ["circ", "\u02C6"],
-  ["tilde", "\u02DC"],
-  ["ensp", "\u2002"],
-  ["emsp", "\u2003"],
-  ["thinsp", "\u2009"],
-  ["zwnj", "\u200C"],
-  ["zwj", "\u200D"],
-  ["lrm", "\u200E"],
-  ["rlm", "\u200F"],
-  ["ndash", "\u2013"],
-  ["mdash", "\u2014"],
-  ["lsquo", "\u2018"],
-  ["rsquo", "\u2019"],
-  ["sbquo", "\u201A"],
-  ["ldquo", "\u201C"],
-  ["rdquo", "\u201D"],
-  ["bdquo", "\u201E"],
-  ["dagger", "\u2020"],
-  ["Dagger", "\u2021"],
-  ["bull", "\u2022"],
-  ["hellip", "\u2026"],
-  ["permil", "\u2030"],
-  ["prime", "\u2032"],
-  ["Prime", "\u2033"],
-  ["lsaquo", "\u2039"],
-  ["rsaquo", "\u203A"],
-  ["euro", "\u20AC"],
-  ["trade", "\u2122"],
-  ["larr", "\u2190"],
-  ["uarr", "\u2191"],
-  ["rarr", "\u2192"],
-  ["darr", "\u2193"],
-  ["hearts", "\u2665"],
-  ["check", "\u2713"],
-  // The punctuation of a web address, as browsers read these names
-  // ("https://bank.example&commat;evil.example/" goes to evil.example)
-  ["Tab", "	"],
-  ["NewLine", "\n"],
-  ["excl", "!"],
-  ["num", "#"],
-  ["dollar", "$"],
-  ["percnt", "%"],
-  ["lpar", "("],
-  ["rpar", ")"],
-  ["ast", "*"],
-  ["midast", "*"],
-  ["plus", "+"],
-  ["comma", ","],
-  ["period", "."],
-  ["sol", "/"],
-  ["colon", ":"],
-  ["semi", ";"],
-  ["equals", "="],
-  ["quest", "?"],
-  ["commat", "@"],
-  ["lsqb", "["],
-  ["lbrack", "["],
-  ["bsol", "\\"],
-  ["rsqb", "]"],
-  ["rbrack", "]"],
-  ["Hat", "^"],
-  ["lowbar", "_"],
-  ["UnderBar", "_"],
-  ["grave", "`"],
-  ["DiacriticalGrave", "`"],
-  ["lcub", "{"],
-  ["lbrace", "{"],
-  ["verbar", "|"],
-  ["vert", "|"],
-  ["VerticalLine", "|"],
-  ["rcub", "}"],
-  ["rbrace", "}"]
-]);
 var LEGACY = /* @__PURE__ */ new Set([...LATIN1, "amp", "lt", "gt", "quot", "AMP", "LT", "GT", "QUOT", "COPY", "REG"]);
 var LEGACY_LONGEST = Math.max(...[...LEGACY].map((name) => name.length));
-var LONGER_NAMES = new Set("centerdot copysr divideontimes gtcc gtcir gtdot gtlPar gtquest gtrapprox gtrarr gtrdot gtreqless gtreqqless gtrless gtrsim ltcc ltcir ltdot lthree ltimes ltlarr ltquest ltrPar ltri ltrie ltrif notin notinE notindot notinva notinvb notinvc notni notniva notnivb notnivc parallel timesb timesbar timesd".split(" "));
 var WINDOWS_1252 = [8364, 129, 8218, 402, 8222, 8230, 8224, 8225, 710, 8240, 352, 8249, 338, 141, 381, 143, 144, 8216, 8217, 8220, 8221, 8226, 8211, 8212, 732, 8482, 353, 8250, 339, 157, 382, 376];
 var REFERENCE = /&(?:#([xX])([\da-fA-F]+)|#(\d+)|([a-zA-Z][a-zA-Z\d]{0,31}))(;?)/g;
 function fromCode(code) {
@@ -1844,8 +2026,8 @@ function decodeEntities(value, { attribute = false } = {}) {
     if (hex !== void 0 || decimal !== void 0) {
       return fromCode(hex === void 0 ? Number.parseInt(decimal, 10) : Number.parseInt(hex, 16));
     }
-    if (semicolon && (ENTITIES.has(name) || LONGER_NAMES.has(name))) {
-      return ENTITIES.get(name) ?? match;
+    if (semicolon && NAMED_REFERENCES.has(name)) {
+      return NAMED_REFERENCES.get(name);
     }
     let legacy;
     for (let length = Math.min(name.length, LEGACY_LONGEST); length >= 2 && legacy === void 0; length--) {
@@ -1859,7 +2041,7 @@ function decodeEntities(value, { attribute = false } = {}) {
     if (attribute && /[\da-zA-Z=]/.test(next)) {
       return match;
     }
-    return ENTITIES.get(legacy) + rest;
+    return NAMED_REFERENCES.get(legacy) + rest;
   });
 }
 var UNSHOWN = /* @__PURE__ */ new Set(["script", "style", "title", "noembed", "noframes", "iframe"]);
@@ -3005,7 +3187,7 @@ function endsInsideTag(html, end, link) {
   return joined !== host && (!isHost(host) || isHost(joined) && registrableDomain(joined) !== registrableDomain(host));
 }
 var MAX_SHOWN_HTML = 2e5;
-function extractLinks(text, html, { maxLength = 5e5, bareHosts = false } = {}) {
+function extractLinks(text, html, { maxLength = 5e5, bareHosts: bareHosts2 = false } = {}) {
   text = typeof text === "string" ? foldToAscii(text) : text;
   html = typeof html === "string" ? foldToAscii(html) : html;
   const links = [];
@@ -3072,7 +3254,7 @@ ${shown || ""}`;
         }
         add(link);
       }
-      if (bareHosts && index < 2) {
+      if (bareHosts2 && index < 2) {
         bareLinkHosts(read, (host) => {
           bareFound.push(host);
         });
@@ -5160,7 +5342,8 @@ async function parseWithin(raw, parse = parseMessage, deadline = Date.now() + PA
     }
   }
 }
-async function expandAttachments(attachments = [], errors = [], parse = parseMessage, unopened = []) {
+async function expandAttachments(attachments = [], errors = [], parse = parseMessage, gets = {}) {
+  const { unopened = [], mails = [] } = Array.isArray(gets) ? { unopened: gets } : gets;
   const all = [];
   const deadline = Date.now() + PARSE_TIMEOUT;
   let budget = MAX_NESTED_BYTES;
@@ -5209,6 +5392,7 @@ async function expandAttachments(attachments = [], errors = [], parse = parseMes
         if (inner.error) {
           errors.push(inner.error);
         }
+        mails.push(inner.mail);
         await visit(inner.mail.attachments, prefix ? `${prefix}/${name}` : name || "attached message", depth + 1);
       }
     }
@@ -6089,7 +6273,7 @@ import net from "node:net";
 var package_default = {
   name: "spamscanner",
   description: "Spam, phishing and malware filter for email in any language: a trainable classifier, link and attachment checks, SPF/DKIM/DMARC, and an optional AI second opinion from any LLM, including local Ollama models. Works as a library, CLI, Postfix milter or HTTP API.",
-  version: "7.0.9",
+  version: "7.0.11",
   author: "Forward Email (https://forwardemail.net)",
   bin: {
     spamscanner: "./dist/esm/cli.js"
@@ -7629,7 +7813,7 @@ async function evaluate(classifier, examples) {
 }
 
 // src/index.js
-import { Buffer as Buffer13 } from "node:buffer";
+import { Buffer as Buffer14 } from "node:buffer";
 import { readFile } from "node:fs/promises";
 import { debuglog as debuglog2 } from "node:util";
 
@@ -7780,6 +7964,7 @@ var MACRO_EXTENSIONS = /* @__PURE__ */ new Set(["docm", "dotm", "xlsm", "xltm",
 var DOCUMENT_EXTENSIONS = /* @__PURE__ */ new Set(["pdf", "doc", "docx", "xls", "xlsx", "ppt", "pptx", "txt", "rtf", "jpg", "jpeg", "png", "gif", "zip", "csv", "odt", "ods", "html", "htm", "mp3", "mp4", "mov", "wav", "eml", "msg", "xml", "json"]);
 var TEMPORARY_EXTENSIONS = /* @__PURE__ */ new Set(["tmp"]);
 var BIDI_CONTROLS = characterClass([[8234, 8238], [8294, 8297]], "u");
+var ALL_BIDI_CONTROLS = characterClass([[8234, 8238], [8294, 8297]], "gu");
 var ARCHIVE_TYPES = /* @__PURE__ */ new Set(["zip", "rar", "7z", "gz", "bz2", "xz", "cab", "iso", "tar", "zst", "lzh", "ace", "arj"]);
 function sniff(buffer) {
   if (!Buffer11.isBuffer(buffer) || buffer.length < 4) {
@@ -7963,7 +8148,16 @@ function shorten(name, max = 100) {
   return characters.length <= max ? name : `${characters.slice(0, max - 41).join("")}\u2026${characters.slice(-40).join("")}`;
 }
 function extensionOf(name) {
-  const base = trimEndOf(String(name).toLowerCase().split(/[/\\]/).pop(), ". ");
+  const base = trimEndOf(String(name).toLowerCase().replace(ALL_BIDI_CONTROLS, "").split(/[/\\]/).pop(), ". ");
+  const whole = lastExtension(base);
+  const file = base.replace(/^[a-z]:/, "");
+  const colon = file.indexOf(":");
+  if (colon !== -1 && /^(?::?\$data)?$/.test(file.slice(colon + 1))) {
+    return lastExtension(trimEndOf(file.slice(0, colon), ". "));
+  }
+  return whole;
+}
+function lastExtension(base) {
   const dot = base.lastIndexOf(".");
   return dot === -1 ? "" : base.slice(dot + 1).trim();
 }
@@ -8120,8 +8314,917 @@ async function scanBuffer(buffer, options = {}) {
   throw new Error(`clamd: ${reply2 || "no reply"}`);
 }
 
-// src/is-arbitrary.js
+// src/links.js
+import { Buffer as Buffer13 } from "node:buffer";
+import { isIP as isIP3 } from "node:net";
 import { parse as parseDomain3 } from "tldts";
+var LINK_ATTRIBUTES = /* @__PURE__ */ new Set([
+  "href",
+  "src",
+  "srcset",
+  "background",
+  "action",
+  "formaction",
+  "poster",
+  "cite",
+  "longdesc",
+  "xlink:href",
+  "style",
+  "data",
+  "ping",
+  // (of a <meta> refresh: "0;url=https://example.com/")
+  "content",
+  // (a document of its own, see linksOf)
+  "srcdoc"
+]);
+var TAG_START = /<[a-z][^\s/>]*/gi;
+var URL_START = /\b(?:https?:\/\/|www\.)[^\s<>"'`]+/gi;
+var CSS_URL = /url\(\s*["']?([^()"']*)/gi;
+var CSS_IMPORT = /@import\s+["']([^"'<>]*)/gi;
+var LENIENT = /[\s"'/<](href|src|srcset|background|action|formaction|poster|cite|longdesc|xlink:href|style|data|ping|content|srcdoc)\s*=\s*/gi;
+var IN_WORD2 = /[\p{L}\p{N}\p{M}_%]/u;
+var NAMESPACES = /* @__PURE__ */ new Set(["www.w3.org", "w3.org"]);
+var MAX_HOST = 760;
+var MAX_SEEN = 1e5;
+var TRAILING = /* @__PURE__ */ new Set([")", ".", ",", ";", ":", "!", "?", "'", '"', "]"]);
+var DECODE_CHUNK = 1024 * 1024;
+var CHUNK_OVERLAP = 4096;
+var MAX_EMBED_DEPTH = 3;
+var MAX_EMBEDDED = 1e3;
+var MAX_EMBEDDED_LENGTH = 10 * 1024 * 1024;
+var MAX_ATTACHED = 100;
+var MAX_ATTACHED_BYTES = 50 * 1024 * 1024;
+var MAX_READ_TIME = 5e3;
+var MAX_SHOWN_BYTES = 4 * 1024 * 1024;
+function isHostCode2(code) {
+  return code >= 97 && code <= 122 || code >= 65 && code <= 90 || code >= 48 && code <= 57 || code === 45 || code === 46;
+}
+function isSpace(code) {
+  return code === 32 || code >= 9 && code <= 13;
+}
+function urlOf(value) {
+  let href = value.replaceAll(/[\t\n\r]/g, "");
+  let start = 0;
+  let end = href.length;
+  while (start < end && href.codePointAt(start) <= 32) {
+    start++;
+  }
+  while (end > start && href.codePointAt(end - 1) <= 32) {
+    end--;
+  }
+  while (end > start && TRAILING.has(href[end - 1])) {
+    end--;
+  }
+  href = href.slice(start, end);
+  if (/^[\\/]{2}/.test(href)) {
+    href = `https://${href.slice(2)}`;
+  } else if (/^www\./i.test(href)) {
+    href = `http://${href}`;
+  } else if (!/^https?:/i.test(href)) {
+    return null;
+  }
+  try {
+    return new URL(href);
+  } catch {
+    return null;
+  }
+}
+function hostOfUrl(url) {
+  let host = url.hostname.toLowerCase();
+  let dots = host.length;
+  while (dots > 0 && host[dots - 1] === ".") {
+    dots--;
+  }
+  host = host.slice(0, dots);
+  if (host.startsWith("[") && host.endsWith("]")) {
+    host = host.slice(1, -1);
+  }
+  if (!host || NAMESPACES.has(host)) {
+    return null;
+  }
+  return isIP3(host) ? host : lookupName(host);
+}
+function hostsOf(value) {
+  const url = urlOf(value);
+  if (!url) {
+    return [];
+  }
+  const host = hostOfUrl(url);
+  const hosts = host ? [host] : [];
+  const target = unwrapLink(url.href);
+  if (target && target.href !== url.href) {
+    const targetHost = hostOfUrl(target);
+    if (targetHost && targetHost !== host) {
+      hosts.push(targetHost);
+    }
+    const further = unwrapLink(target.href);
+    if (further && further.href !== target.href) {
+      hosts.unresolved = true;
+    }
+  }
+  return hosts;
+}
+function* attributesOf(html) {
+  TAG_START.lastIndex = 0;
+  let match;
+  while ((match = TAG_START.exec(html)) !== null) {
+    let i = match.index + match[0].length;
+    while (i < html.length && html[i] !== ">") {
+      if (isSpace(html.codePointAt(i)) || html[i] === "/") {
+        i++;
+        continue;
+      }
+      let j = i;
+      while (j < html.length && html[j] !== "=" && html[j] !== ">" && html[j] !== "/" && !isSpace(html.codePointAt(j))) {
+        j++;
+      }
+      const name = html.slice(i, j).toLowerCase();
+      if (j === i) {
+        j++;
+      }
+      while (j < html.length && isSpace(html.codePointAt(j))) {
+        j++;
+      }
+      if (html[j] !== "=") {
+        i = j;
+        continue;
+      }
+      j++;
+      while (j < html.length && isSpace(html.codePointAt(j))) {
+        j++;
+      }
+      let value;
+      if (html[j] === '"' || html[j] === "'") {
+        const close = html.indexOf(html[j], j + 1);
+        const stop = close === -1 ? html.length : close;
+        value = html.slice(j + 1, stop);
+        j = stop + 1;
+      } else {
+        const start = j;
+        while (j < html.length && html[j] !== ">" && !isSpace(html.codePointAt(j))) {
+          j++;
+        }
+        value = html.slice(start, j);
+      }
+      if (name) {
+        yield [name, value];
+      }
+      i = j;
+    }
+    TAG_START.lastIndex = Math.max(i, match.index + 1);
+  }
+}
+function linksOf(name, value, add, embed) {
+  const decoded = decodeEntities(value, { attribute: true });
+  switch (name) {
+    case "srcdoc": {
+      embed(decoded);
+      break;
+    }
+    case "style": {
+      for (const [, link] of decoded.matchAll(CSS_URL)) {
+        add(link);
+      }
+      break;
+    }
+    case "srcset": {
+      for (const candidate of decoded.split(",")) {
+        add(candidate.trim().split(/\s/, 1)[0]);
+      }
+      break;
+    }
+    // (several, separated by spaces)
+    case "ping": {
+      for (const link of decoded.split(/\s+/)) {
+        add(link);
+      }
+      break;
+    }
+    // (only the address of a refresh)
+    case "content": {
+      const match = /(?:^|[\s;,])url\s*=\s*["']?([^\s"';]+)/i.exec(decoded.slice(0, 4096));
+      if (match) {
+        add(match[1]);
+      }
+      break;
+    }
+    default: {
+      add(decoded);
+    }
+  }
+}
+var MAX_LENIENT_VALUE = 4096;
+var UNQUOTED_END = /* @__PURE__ */ new Set(["<", ">", '"', "'", "`", "="]);
+function lenientLinks(html, add, done, embed) {
+  LENIENT.lastIndex = 0;
+  let match;
+  while (!done() && (match = LENIENT.exec(html)) !== null) {
+    const name = match[1].toLowerCase();
+    let i = LENIENT.lastIndex;
+    let end = i;
+    if (html[i] === '"' || html[i] === "'") {
+      const quote = html[i];
+      i++;
+      end = i;
+      while (end < html.length && html[end] !== quote && html[end] !== "<" && html[end] !== ">") {
+        end++;
+      }
+      if (end < html.length && html[end] !== quote) {
+        const close = html.indexOf(quote, end);
+        if (close !== -1 && close - i <= MAX_LENIENT_VALUE) {
+          linksOf(name, html.slice(i, close), add, embed);
+        }
+      }
+    } else {
+      while (end < html.length && !isSpace(html.codePointAt(end)) && !UNQUOTED_END.has(html[end])) {
+        end++;
+      }
+    }
+    linksOf(name, html.slice(i, end), add, embed);
+  }
+}
+function endsLink2(text, i) {
+  const code = text.codePointAt(i);
+  if (code < 128) {
+    return isSpace(code) || code === 34 || code === 39 || code === 60 || code === 62 || code === 96;
+  }
+  return /\s/u.test(text[i]);
+}
+function linkReader(text) {
+  let read = 0;
+  let space = -1;
+  let scheme = -1;
+  return (start) => {
+    for (; read < start; read++) {
+      if (endsLink2(text, read)) {
+        space = read;
+      } else if (text[read] === "/" && text[read - 1] === "/" && text[read - 2] === ":") {
+        scheme = read;
+      }
+    }
+    return scheme > space;
+  };
+}
+function isSchemeless(text, start) {
+  if (start < 2 || text[start - 2] !== "/") {
+    return false;
+  }
+  if (start === 2) {
+    return true;
+  }
+  const before = text[start - 3];
+  return !(before === ":" || before === "/" || isHostCode2(text.codePointAt(start - 3)));
+}
+function bareName(name) {
+  const labels = name.split(".");
+  const tld = labels.pop();
+  if (!/^(?:[a-z]{2,24}|xn--[a-z\d-]{1,59})$/i.test(tld)) {
+    return null;
+  }
+  const names = [];
+  while (labels.length > 0 && names.length < 11) {
+    const label = labels.pop();
+    if (!/^[a-z\d-]{1,63}$/i.test(label)) {
+      break;
+    }
+    names.unshift(label);
+  }
+  if (names.length === 0) {
+    return null;
+  }
+  names[0] = names[0].replace(/^-+/, "");
+  if (!names[0]) {
+    return null;
+  }
+  return `${names.join(".")}.${tld}`.toLowerCase();
+}
+function isRealName(host) {
+  const parsed = parseDomain3(host);
+  return Boolean(parsed.isIcann && parsed.domain);
+}
+function bareHosts(text, add, { done, seen, from = 0, cutEnd = false }) {
+  let previous = -1;
+  const inLink = linkReader(text);
+  for (let slash = text.indexOf("/"); slash !== -1; slash = text.indexOf("/", slash + 1)) {
+    if (done()) {
+      return;
+    }
+    const floor = Math.max(previous + 1, slash - MAX_HOST);
+    previous = slash;
+    let end = slash;
+    while (end > floor && text.codePointAt(end - 1) >= 48 && text.codePointAt(end - 1) <= 57) {
+      end--;
+    }
+    end = end > floor && text[end - 1] === ":" ? end - 1 : slash;
+    let start = end;
+    while (start > floor && isHostCode2(text.codePointAt(start - 1))) {
+      start--;
+    }
+    if (start === end || start < from || cutEnd && slash === text.length - 1) {
+      continue;
+    }
+    if (start > 0 && (IN_WORD2.test(text[start - 1]) || text[start - 1] === "/" && !isSchemeless(text, start)) || inLink(start)) {
+      continue;
+    }
+    while (end > start && text[end - 1] === ".") {
+      end--;
+    }
+    const host = bareName(text.slice(start, end));
+    if (!host || seen.has(host)) {
+      continue;
+    }
+    if (seen.size < MAX_SEEN) {
+      seen.add(host);
+    }
+    if (isRealName(host)) {
+      add(`http://${host}/`);
+    }
+  }
+}
+function looseHosts(text, add, { from = 0, cutEnd = false, seen, done }) {
+  const inLink = linkReader(text);
+  const { length } = text;
+  let i = 0;
+  while (i < length) {
+    if (!isHostCode2(text.codePointAt(i))) {
+      i++;
+      continue;
+    }
+    const start = i;
+    while (i < length && isHostCode2(text.codePointAt(i))) {
+      i++;
+    }
+    let end = i;
+    if (end - start > MAX_HOST || start < from || cutEnd && end === length) {
+      continue;
+    }
+    while (end > start && text[end - 1] === ".") {
+      end--;
+    }
+    const before = start > 0 ? text[start - 1] : "";
+    const after = end < length ? text[end] : "";
+    if (after === "/" || after === "@" || before === "@") {
+      continue;
+    }
+    if (before && (IN_WORD2.test(before) || before === "/" || before === "\\" || before === "&" || before === "#")) {
+      continue;
+    }
+    if (after && after !== "." && IN_WORD2.test(after)) {
+      continue;
+    }
+    const name = text.slice(start, end);
+    if (!name.includes(".") || inLink(start)) {
+      continue;
+    }
+    const lower = name.toLowerCase();
+    if (seen.has(lower)) {
+      continue;
+    }
+    if (seen.size < MAX_SEEN) {
+      seen.add(lower);
+    }
+    if (done()) {
+      return;
+    }
+    const host = bareName(name);
+    if (host && isRealName(host)) {
+      add(host);
+    }
+  }
+}
+function* chunksOf(html) {
+  let start = 0;
+  let cutStart = false;
+  while (start < html.length) {
+    const end = Math.min(html.length, start + DECODE_CHUNK);
+    if (end < html.length) {
+      let cut = end;
+      while (cut > end - 65536 && cut > start) {
+        if (html[cut] === "<" || isSpace(html.codePointAt(cut))) {
+          break;
+        }
+        cut--;
+      }
+      if (cut > start && cut > end - 65536) {
+        yield { text: html.slice(start, cut), cutStart, cutEnd: false };
+        start = cut;
+        cutStart = false;
+        continue;
+      }
+      yield { text: html.slice(start, end), cutStart, cutEnd: true };
+      start = end - CHUNK_OVERLAP;
+      cutStart = true;
+      continue;
+    }
+    yield { text: html.slice(start, end), cutStart, cutEnd: false };
+    start = end;
+  }
+}
+function withoutNul(text) {
+  return text.includes("\0") ? `${text}
+${text.replaceAll("\0", "")}` : text;
+}
+function hexValue(code) {
+  if (code >= 48 && code <= 57) {
+    return code - 48;
+  }
+  if (code >= 65 && code <= 70) {
+    return code - 55;
+  }
+  if (code >= 97 && code <= 102) {
+    return code - 87;
+  }
+  return -1;
+}
+function percentDecoded(text) {
+  const input = Buffer13.from(text);
+  const output = Buffer13.allocUnsafe(input.length);
+  let length = 0;
+  for (let i = 0; i < input.length; i++) {
+    const high = input[i] === 37 ? hexValue(input[i + 1]) : -1;
+    const low = high === -1 ? -1 : hexValue(input[i + 2]);
+    if (low === -1) {
+      output[length++] = input[i];
+      continue;
+    }
+    output[length++] = high * 16 + low;
+    i += 2;
+  }
+  return output.subarray(0, length);
+}
+var UTF16LE = /* @__PURE__ */ new Set(["csunicode", "iso-10646-ucs-2", "ucs-2", "unicode", "unicodefeff", "utf-16", "utf-16le"]);
+var UTF16BE = /* @__PURE__ */ new Set(["unicodefffe", "utf-16be"]);
+function swapped(bytes) {
+  return Buffer13.from(bytes.subarray(0, bytes.length - bytes.length % 2)).swap16().toString("utf16le");
+}
+function decodeText(content, charset = "") {
+  if (content[0] === 255 && content[1] === 254) {
+    return content.subarray(2).toString("utf16le");
+  }
+  if (content[0] === 254 && content[1] === 255) {
+    return swapped(content.subarray(2));
+  }
+  if (UTF16LE.has(charset)) {
+    return content.toString("utf16le");
+  }
+  return UTF16BE.has(charset) ? swapped(content) : content.toString("utf8");
+}
+var DATA_DOCUMENT = /^\s*data:\s*(?:text\/html|application\/xhtml\+xml|image\/svg\+xml|text\/xml|application\/xml)\b([^,]*),/i;
+function dataDocument(value) {
+  const match = DATA_DOCUMENT.exec(value.slice(0, 1024));
+  if (!match) {
+    return null;
+  }
+  const bytes = percentDecoded(value.slice(match[0].length));
+  const content = /;\s*base64\s*$/i.test(match[1]) ? Buffer13.from(bytes.toString("latin1"), "base64") : bytes;
+  const charset = /;\s*charset\s*=\s*"?([^;"\s]+)/i.exec(match[1]);
+  return decodeText(content, charset ? charset[1].toLowerCase() : "");
+}
+var LINE_BREAK = /\r\n?|\n/;
+var FOLD = /(?:\r\n?|\n)[ \t]/g;
+var QUOTED_PRINTABLE = /;\s*(?:encoding\s*=\s*)?"?quoted-printable"?\s*(?:;|$)/i;
+var MEDIA_PROPERTIES = /* @__PURE__ */ new Set(["photo", "logo", "sound", "key", "attach"]);
+var HTML_PROPERTIES = /^(?:x-alt-desc|styled-description|description|comment)[;:]/i;
+function readEscapes(text, lenient = false) {
+  let index = text.indexOf("\\");
+  if (index === -1) {
+    return text;
+  }
+  let out = "";
+  let parts = [];
+  let start = 0;
+  while (index !== -1 && index + 1 < text.length) {
+    const next = text[index + 1];
+    if (lenient || "nN,;\\".includes(next)) {
+      parts.push(text.slice(start, index), next === "n" || next === "N" ? "\n" : next);
+      start = index + 2;
+      index = text.indexOf("\\", start);
+      if (parts.length >= 65536) {
+        out += parts.join("");
+        parts = [];
+      }
+    } else {
+      index = text.indexOf("\\", index + 1);
+    }
+  }
+  parts.push(text.slice(start));
+  return out + parts.join("");
+}
+function valueColon(line) {
+  let colon = line.indexOf(":");
+  let from = 0;
+  for (; ; ) {
+    const quote = line.indexOf('"', from);
+    if (quote === -1 || colon === -1 || colon < quote) {
+      return colon;
+    }
+    const end = line.indexOf('"', quote + 1);
+    if (end === -1) {
+      return -1;
+    }
+    from = end + 1;
+    if (colon < from) {
+      colon = line.indexOf(":", from);
+    }
+  }
+}
+function trimSpaceEnd(text) {
+  let end = text.length;
+  while (end > 0 && (text[end - 1] === " " || text[end - 1] === "	")) {
+    end--;
+  }
+  return end === text.length ? text : text.slice(0, end);
+}
+function decodeQuotedPrintable(value, charset) {
+  let decoder;
+  try {
+    decoder = new TextDecoder(charset || "utf8");
+  } catch {
+    decoder = new TextDecoder("utf8");
+  }
+  if (!/[\u0080-\u{10FFFF}]/u.test(value)) {
+    const bytes = Buffer13.from(value, "latin1");
+    let length = 0;
+    for (let index = 0; index < bytes.length; index++) {
+      const hex = bytes[index] === 61 ? value.slice(index + 1, index + 3) : "";
+      if (/^[\da-f]{2}$/i.test(hex)) {
+        bytes[length++] = Number.parseInt(hex, 16);
+        index += 2;
+      } else {
+        bytes[length++] = bytes[index];
+      }
+    }
+    return decoder.decode(bytes.subarray(0, length));
+  }
+  return value.replaceAll(/(?:=[\da-f]{2})+/gi, (run) => decoder.decode(Buffer13.from(run.replaceAll("=", ""), "hex")));
+}
+function quotedPrintableValues(text) {
+  if (!/quoted-printable/i.test(text)) {
+    return text;
+  }
+  const lines2 = text.split(LINE_BREAK);
+  const out = [];
+  for (let i = 0; i < lines2.length; i++) {
+    const line = lines2[i];
+    const colon = valueColon(line);
+    const parameters = colon === -1 ? "" : line.slice(0, colon);
+    if (colon === -1 || !QUOTED_PRINTABLE.test(parameters)) {
+      out.push(line);
+      continue;
+    }
+    const charset = /;\s*charset\s*=\s*"?([\w.:-]+)/i.exec(parameters)?.[1];
+    const parts = [trimSpaceEnd(line.slice(colon + 1))];
+    while (parts.at(-1).endsWith("=") && i + 1 < lines2.length) {
+      parts[parts.length - 1] = parts.at(-1).slice(0, -1);
+      parts.push(trimSpaceEnd(lines2[++i]));
+    }
+    out.push(line.slice(0, colon + 1) + decodeQuotedPrintable(parts.join(""), charset));
+  }
+  return out.join("\n");
+}
+function hasQuotedPrintable(text) {
+  const unfolded = text.replaceAll(FOLD, "");
+  if (!/quoted-printable/i.test(unfolded)) {
+    return false;
+  }
+  return unfolded.split(LINE_BREAK).some((line) => {
+    const colon = valueColon(line);
+    return colon !== -1 && QUOTED_PRINTABLE.test(line.slice(0, colon));
+  });
+}
+function shownText(text, full = true) {
+  const unfolded = text.replaceAll(FOLD, "");
+  const shown = /* @__PURE__ */ new Set([text, readEscapes(unfolded)]);
+  let decoded = unfolded;
+  if (full) {
+    decoded = quotedPrintableValues(unfolded);
+    if (decoded !== unfolded) {
+      shown.add(readEscapes(decoded));
+      if (unfolded !== text) {
+        shown.add(quotedPrintableValues(text));
+      }
+    }
+  }
+  if (/\\[^nN,;\\]/.test(decoded)) {
+    shown.add(readEscapes(decoded, true));
+  }
+  return [...shown].reverse().join("\n");
+}
+function htmlDescriptions(text) {
+  if (!/[<&]|altrep/i.test(text)) {
+    return "";
+  }
+  const html = [];
+  for (const line of text.replaceAll(FOLD, "").split(LINE_BREAK)) {
+    const colon = valueColon(line);
+    if (colon === -1) {
+      continue;
+    }
+    const altrep = /;\s*altrep\s*=\s*"([^"]*)"/i.exec(line.slice(0, colon))?.[1];
+    if (altrep) {
+      html.push(`<iframe src="${altrep.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;")}"></iframe>`);
+    }
+    if (!HTML_PROPERTIES.test(line)) {
+      continue;
+    }
+    const value = readEscapes(line.slice(colon + 1));
+    if (/[<&]/.test(value)) {
+      html.push(value);
+    }
+  }
+  return html.join("\n");
+}
+var BINARY = /;\s*(?:(?:encoding\s*=\s*)?"?(?:b|base64)"?|value\s*=\s*"?binary"?)\s*(?:;|$)/i;
+function withoutBinaryValues(text) {
+  if (!/base64|binary|encoding\s*=\s*"?b|;\s*b\s*[;:]/i.test(text)) {
+    return text;
+  }
+  const lines2 = text.split(LINE_BREAK);
+  const out = [];
+  for (let i = 0; i < lines2.length; i++) {
+    const line = lines2[i];
+    const colon = valueColon(line);
+    if (colon === -1 || !BINARY.test(line.slice(0, colon))) {
+      out.push(line);
+      continue;
+    }
+    const value = [line.slice(colon + 1)];
+    let next = i + 1;
+    while (next < lines2.length && (lines2[next].startsWith(" ") || lines2[next].startsWith("	"))) {
+      value.push(lines2[next++]);
+    }
+    if (!value.every((part) => /^[\w+/=\s]*$/.test(part))) {
+      for (let index = i; index < next; index++) {
+        out.push(lines2[index]);
+      }
+      i = next - 1;
+      continue;
+    }
+    while (next < lines2.length && lines2[next] !== "" && /^[\w+/=]+$/.test(lines2[next])) {
+      value.push(lines2[next++]);
+    }
+    if (next < lines2.length && lines2[next] === "") {
+      next++;
+    }
+    i = next - 1;
+    const name = line.slice(0, colon).split(";")[0].split(".").pop().trim().toLowerCase();
+    out.push(MEDIA_PROPERTIES.has(name) ? line.slice(0, colon + 1) : line.slice(0, colon + 1) + Buffer13.from(value.join("").replaceAll(/\s/g, ""), "base64").toString("utf8"));
+  }
+  return out.join("\n");
+}
+var HTML_TYPES = /* @__PURE__ */ new Set(["text/html", "application/xhtml+xml", "image/svg+xml", "text/xml", "application/xml"]);
+var HTML_EXTENSIONS = /* @__PURE__ */ new Set(["html", "htm", "shtml", "xhtml", "xht", "svg", "xml"]);
+var CARD_TYPES = /* @__PURE__ */ new Set(["text/calendar", "text/x-vcalendar", "application/ics", "text/vcard", "text/x-vcard", "text/directory"]);
+var CARD_EXTENSIONS = /* @__PURE__ */ new Set(["ics", "ical", "ifb", "vcs", "vcf", "vcard"]);
+var MESSAGE_TYPES = /* @__PURE__ */ new Set(["message/rfc822", "message/global"]);
+function extensionOf2(filename) {
+  let end = filename.length;
+  while (end > 0 && (filename[end - 1] === "." || filename[end - 1] === " ")) {
+    end--;
+  }
+  const name = filename.slice(0, end).trim().toLowerCase();
+  const index = name.lastIndexOf(".");
+  return index !== -1 && index < name.length - 1 ? name.slice(index + 1) : null;
+}
+function extensionsOf(attachment) {
+  const names = [];
+  if (typeof attachment.filename === "string") {
+    names.push(attachment.filename);
+  }
+  const { headers } = attachment;
+  if (headers && typeof headers.get === "function") {
+    for (const [field, parameter] of [["content-type", "name"], ["content-disposition", "filename"]]) {
+      const value = headers.get(field)?.params?.[parameter];
+      if (typeof value === "string" && value !== "") {
+        names.push(value);
+      }
+    }
+  }
+  return new Set(names.flatMap((name) => [extensionOf2(name), extensionOf(name)]).filter(Boolean));
+}
+function charsetOf(attachment) {
+  const { headers } = attachment;
+  const charset = headers && typeof headers.get === "function" ? headers.get("content-type")?.params?.charset : null;
+  return typeof charset === "string" ? charset.toLowerCase() : "";
+}
+function documentsOf(attachments, until) {
+  const documents = [];
+  let bytes = 0;
+  let opened = 0;
+  for (const attachment of attachments) {
+    const { content } = attachment ?? {};
+    if (!Buffer13.isBuffer(content) || content.length === 0) {
+      continue;
+    }
+    const type = typeof attachment.contentType === "string" ? attachment.contentType.toLowerCase() : "";
+    const extensions = extensionsOf(attachment);
+    const has = (set) => [...extensions].some((name) => set.has(name));
+    if (MESSAGE_TYPES.has(type) || extensions.has("eml") || extensions.has("u8msg")) {
+      continue;
+    }
+    const isHtml = HTML_TYPES.has(type) || has(HTML_EXTENSIONS);
+    const isCard = !isHtml && (CARD_TYPES.has(type) || has(CARD_EXTENSIONS));
+    const isText = isCard || !isHtml && type === "text/plain";
+    if (!isHtml && !isText) {
+      continue;
+    }
+    if (!isText && ++opened > MAX_ATTACHED || bytes + content.length > MAX_ATTACHED_BYTES) {
+      documents.tooComplex = true;
+      return documents;
+    }
+    if (Date.now() > until) {
+      documents.incomplete = true;
+      return documents;
+    }
+    bytes += content.length;
+    const text = decodeText(content, charsetOf(attachment));
+    if (isHtml) {
+      documents.push({ html: text });
+      continue;
+    }
+    if (!isCard) {
+      documents.push({ text });
+      continue;
+    }
+    const readable = withoutBinaryValues(text);
+    const full = readable.length <= MAX_SHOWN_BYTES;
+    if (!full && hasQuotedPrintable(readable)) {
+      documents.tooComplex = true;
+      continue;
+    }
+    documents.push({ text: shownText(readable, full) });
+    const html = htmlDescriptions(readable);
+    if (html !== "") {
+      documents.push({ html });
+    }
+  }
+  return documents;
+}
+function carriedLinkHosts(mail, {
+  mails = [],
+  attachments = [],
+  maxHosts = 250,
+  hostsInText = false
+} = {}) {
+  const hosts = /* @__PURE__ */ new Set();
+  const loose = /* @__PURE__ */ new Set();
+  const seen = /* @__PURE__ */ new Set();
+  const seenBare = /* @__PURE__ */ new Set();
+  const seenLoose = /* @__PURE__ */ new Set();
+  let more = false;
+  let tooComplex = false;
+  const done = () => more;
+  const looseDone = () => more || loose.size > maxHosts;
+  const addLoose = (host) => {
+    if (!looseDone()) {
+      loose.add(host);
+    }
+  };
+  const until = Date.now() + MAX_READ_TIME;
+  let incomplete = false;
+  const late = () => {
+    if (!incomplete && Date.now() > until) {
+      incomplete = true;
+    }
+    return incomplete;
+  };
+  const carried = documentsOf(attachments, until);
+  tooComplex = Boolean(carried.tooComplex);
+  incomplete = Boolean(carried.incomplete);
+  const queue = [mail, ...mails, ...carried].map((document) => ({ document, depth: 0 }));
+  let depth = 0;
+  let embedded = 0;
+  let embeddedLength = 0;
+  const embed = (html) => {
+    if (depth >= MAX_EMBED_DEPTH || embedded >= MAX_EMBEDDED || embeddedLength + html.length > MAX_EMBEDDED_LENGTH) {
+      tooComplex = true;
+      return;
+    }
+    embedded++;
+    embeddedLength += html.length;
+    queue.push({ document: { html }, depth: depth + 1 });
+  };
+  const add = (value) => {
+    if (more || typeof value !== "string" || value === "" || seen.has(value)) {
+      return;
+    }
+    if (seen.size < MAX_SEEN) {
+      seen.add(value);
+    }
+    if (/^\s*data:/i.test(value)) {
+      const html = dataDocument(value);
+      if (html !== null) {
+        embed(html);
+      }
+      return;
+    }
+    const found = hostsOf(value);
+    if (found.unresolved) {
+      tooComplex = true;
+    }
+    for (const host of found) {
+      if (hosts.has(host)) {
+        continue;
+      }
+      if (hosts.size >= maxHosts) {
+        more = true;
+        return;
+      }
+      hosts.add(host);
+    }
+  };
+  const readText = (source, { cutStart = false, cutEnd = false } = {}) => {
+    for (const match of source.matchAll(URL_START)) {
+      if (more) {
+        break;
+      }
+      if (cutStart && match.index === 0) {
+        continue;
+      }
+      if (cutEnd && match.index + match[0].length === source.length) {
+        const value = match[0];
+        const at = /^www\./i.test(value) ? 0 : value.indexOf("//") + 2;
+        if (/[/?#\\]/.test(value.slice(at))) {
+          add(value);
+        } else if (source.length - match.index > CHUNK_OVERLAP) {
+          tooComplex = true;
+        }
+        continue;
+      }
+      add(match[0]);
+    }
+    const from = cutStart ? 1 : 0;
+    bareHosts(source, add, {
+      done,
+      seen: seenBare,
+      from,
+      cutEnd
+    });
+    if (hostsInText && !looseDone()) {
+      looseHosts(source, addLoose, {
+        from,
+        cutEnd,
+        seen: seenLoose,
+        done: looseDone
+      });
+    }
+  };
+  for (const element of queue) {
+    if (more || late()) {
+      break;
+    }
+    ({ depth } = element);
+    const { document } = element;
+    const html = withoutNul(typeof document?.html === "string" ? document.html : "");
+    const text = withoutNul(typeof document?.text === "string" ? document.text : "");
+    for (const [name, value] of attributesOf(html)) {
+      if (more) {
+        break;
+      }
+      if (LINK_ATTRIBUTES.has(name)) {
+        linksOf(name, value, add, embed);
+      }
+    }
+    lenientLinks(html, add, done, embed);
+    for (const pattern of [CSS_URL, CSS_IMPORT]) {
+      for (const [, link] of html.matchAll(pattern)) {
+        if (more) {
+          break;
+        }
+        add(decodeEntities(link, { attribute: true }));
+      }
+    }
+    if (!more) {
+      readText(text);
+    }
+    for (const chunk2 of chunksOf(html)) {
+      if (more || late()) {
+        break;
+      }
+      readText(decodeEntities(chunk2.text), chunk2);
+    }
+  }
+  if (!more && !incomplete) {
+    for (const name of loose) {
+      if (hosts.size >= maxHosts) {
+        break;
+      }
+      const [host] = hostsOf(`http://${name}/`);
+      if (host) {
+        hosts.add(host);
+      }
+    }
+  }
+  return {
+    hosts: [...hosts],
+    more,
+    tooComplex,
+    incomplete
+  };
+}
+
+// src/is-arbitrary.js
+import { parse as parseDomain4 } from "tldts";
 var GTUBE = "XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X";
 var BLOCKED_SUBJECT = /cheecck y0ur acc0untt|\brecorded\s+you\s+(?:masturbating|jerking|touching\s+yourself|watching\s+porn)\b|personal data has leaked|private information has been stolen/i;
 var HACKED_SUBJECT = /\byou['’]ve been hacked\b|\baccount is hacked\b|\b(?:i|we)(?:\s+have|['’]ve)?\s+recorded\s+you\b|\brecorded\s+you\s+(?:doing|while|watching|through|on\s+(?:cam|camera|video|webcam))\b/i;
@@ -8312,13 +9415,13 @@ function joinsDisplay(brand, display, name) {
   return false;
 }
 function isOfficial({ brand, official }, domain, display, shared = true) {
-  const parsed = parseDomain3(domain);
+  const parsed = parseDomain4(domain);
   const name = parsed.domainWithoutSuffix ?? "";
   const compact = brand.replaceAll(" ", "");
   if (parsed.publicSuffix === compact || compact.length >= 5 && joinsDisplay(brand, display, name) && !JOINED_WORDS.some((word) => name.slice(compact.length).includes(word))) {
     return true;
   }
-  return official.some((entry) => entry instanceof RegExp ? entry.test(registrableDomain(domain)) : entry.includes(".") ? (shared || parseDomain3(entry).domain !== null) && (domain === entry || domain.endsWith(`.${entry}`)) : name === entry);
+  return official.some((entry) => entry instanceof RegExp ? entry.test(registrableDomain(domain)) : entry.includes(".") ? (shared || parseDomain4(entry).domain !== null) && (domain === entry || domain.endsWith(`.${entry}`)) : name === entry);
 }
 function headerString(mail, name) {
   const value = mail.headers?.get?.(name);
@@ -8420,7 +9523,7 @@ ${withoutHelp(markup)}`) || isInjection(readable) || attributeText(markup).some(
       }
     } else if (claimed && isWholeName(name, claimed)) {
       const domain = claimed[1];
-      const brand = MAILBOXES.has(parseDomain3(domain).domainWithoutSuffix) ? null : DISPLAY_BRANDS.find((entry) => isOfficial(entry, domain, "", false) && !isOfficial(entry, session.originalFromAddressDomain, ""));
+      const brand = MAILBOXES.has(parseDomain4(domain).domainWithoutSuffix) ? null : DISPLAY_BRANDS.find((entry) => isOfficial(entry, domain, "", false) && !isOfficial(entry, session.originalFromAddressDomain, ""));
       if (brand) {
         hit("FROM_NAME_BRAND", 2, `Display name is an address of "${brand.brand}" but the message is from ${fromRoot}`, "PHISHING");
       }
@@ -8691,21 +9794,21 @@ async function withTimeout(promise, ms, fallback) {
   }
 }
 async function toBuffer(source) {
-  if (Buffer13.isBuffer(source)) {
+  if (Buffer14.isBuffer(source)) {
     return source;
   }
   if (typeof source === "string") {
-    return Buffer13.from(source, "utf8");
+    return Buffer14.from(source, "utf8");
   }
   if (source instanceof Uint8Array) {
-    return Buffer13.from(source);
+    return Buffer14.from(source);
   }
   if (source && typeof source[Symbol.asyncIterator] === "function") {
     const chunks = [];
     for await (const chunk2 of source) {
-      chunks.push(Buffer13.isBuffer(chunk2) ? chunk2 : Buffer13.from(chunk2));
+      chunks.push(Buffer14.isBuffer(chunk2) ? chunk2 : Buffer14.from(chunk2));
     }
-    return Buffer13.concat(chunks);
+    return Buffer14.concat(chunks);
   }
   throw new TypeError("A message must be a Buffer, a string, a Uint8Array or a readable stream");
 }
@@ -8727,6 +9830,19 @@ var DEFAULTS2 = {
     cloudflare: true,
     adult: true,
     maxHosts: 25,
+    // Also read the links of the whole message and of what it carries
+    // (attached messages, HTML, SVG and XML files, text files, invitations
+    // and contact cards, documents in iframes and data: URLs) when link
+    // hosts are looked up, for at most five seconds: off by default, as it
+    // reads all of it, up to 50 MB of attachments.
+    attachments: false,
+    // Milliseconds the link lookups may take in all (default: timeout).
+    timeout: void 0,
+    // Also look up host names written in the text without a link or a path
+    // ("evil.example"), which mail clients make links of, as far as there is
+    // room: off by default, as a quoted reply or a signature may name any
+    // site (they are checked for lookalikes either way).
+    hostsInText: false,
     // Characters of text read for links (twice as many of HTML): more than
     // for the classifier (maxLength), as a link anywhere in a message may be
     // followed; a longer message sets results.linksTruncated.
@@ -8839,7 +9955,7 @@ function fromDomain(mail) {
 function withHeader(raw) {
   const first = raw.subarray(0, 1e3).toString("latin1");
   const headerless = raw.length > 0 && !/^(?:[!-9;-~]+[ \t]*:|From |[\r\n])/.test(first);
-  return headerless ? Buffer13.concat([Buffer13.from("\r\n"), raw]) : raw;
+  return headerless ? Buffer14.concat([Buffer14.from("\r\n"), raw]) : raw;
 }
 var SpamScanner = class {
   /**
@@ -9001,7 +10117,10 @@ var SpamScanner = class {
   async scanFile(file, options) {
     return this.scan(await readFile(file), options);
   }
-  async checkLinks(links, config, hosts = [], from = "") {
+  // (`from`: the sender's domain; `carried`: the link hosts of the whole
+  //  message and of what it carries, see carriedLinkHosts)
+  async checkLinks(links, config, hosts = [], options = {}) {
+    const { from = "", carried = null } = typeof options === "string" ? { from: options } : options;
     const phishing = [];
     const homographs = [];
     const seenHosts = /* @__PURE__ */ new Set();
@@ -9057,7 +10176,11 @@ var SpamScanner = class {
     for (const host of hosts) {
       lookalike(host, { source: "text" });
     }
-    const ordered = [...new Set([...found.filter((link) => link.text), ...found.filter((link) => !link.text), ...bare].map((link) => lookupName(destination(link))).filter(Boolean))];
+    const carriedHosts = (carried?.hosts ?? []).map((host) => lookupName(host)).filter(Boolean);
+    for (const host of carriedHosts) {
+      seenHosts.add(host);
+    }
+    const ordered = [.../* @__PURE__ */ new Set([...[...found.filter((link) => link.text), ...found.filter((link) => !link.text), ...bare].map((link) => lookupName(destination(link))).filter(Boolean), ...carriedHosts])];
     const firsts = /* @__PURE__ */ new Map();
     for (const host of ordered) {
       const domain = registrableDomain(host);
@@ -9069,6 +10192,7 @@ var SpamScanner = class {
     const domains = [...new Set(checked.map((host) => registrableDomain(host)))];
     const blocked = [];
     let answered = 0;
+    const linkTimeout = Number(config.phishing.timeout) > 0 ? Number(config.phishing.timeout) : config.timeout;
     const cloudflare = async () => {
       await withTimeout(Promise.all(checked.map(async (host) => {
         const found2 = await this.dns.checkCloudflare([host], { adult: config.phishing.adult });
@@ -9076,12 +10200,12 @@ var SpamScanner = class {
         if (!found2.unanswered?.length) {
           answered++;
         }
-      })), config.timeout, null);
+      })), linkTimeout, null);
       return { found: [...blocked], unanswered: checked.length - answered };
     };
     const [cloudflareResult, listed] = await Promise.all([
       config.phishing.cloudflare && checked.length > 0 ? cloudflare() : { found: [], unanswered: 0 },
-      config.dnsbl.domain?.length > 0 && domains.length > 0 ? withTimeout(this.dns.checkDomains(domains, config.dnsbl.domain), config.timeout, []) : []
+      config.dnsbl.domain?.length > 0 && domains.length > 0 ? withTimeout(this.dns.checkDomains(domains, config.dnsbl.domain), linkTimeout, []) : []
     ]);
     for (const { host, category } of cloudflareResult.found) {
       phishing.push(finding(category === "malware" ? { type: "malicious_domain", domain: host, message: `Link hostname ${host} is blocked by Cloudflare's malware filtering as phishing or malware` } : { type: "adult_domain", domain: host, message: `Link hostname ${host} was detected by Cloudflare's family filtering to contain adult-related content` }));
@@ -9097,7 +10221,8 @@ var SpamScanner = class {
     return {
       phishing,
       homographs,
-      uncheckedHosts: seenHosts.size - checked.length,
+      // (at least one when the message has more hosts than were read)
+      uncheckedHosts: Math.max(seenHosts.size - checked.length, carried?.more ? 1 : 0),
       timedOutHosts: cloudflareResult.unanswered
     };
   }
@@ -9269,10 +10394,17 @@ ${visibleText(html.slice(0, config.maxLength * 2)).text}`, { maxLength: config.m
       styled: plainObfuscation.styled || shownObfuscation.styled
     };
     const unopened = [];
-    const attached = await expandAttachments(mail.attachments, parseErrors, void 0, unopened);
+    const opened = [];
+    const attached = await expandAttachments(mail.attachments, parseErrors, void 0, { unopened, mails: opened });
+    const carried = config.phishing.attachments === true && (config.phishing.cloudflare || config.dnsbl.domain?.length > 0) ? carriedLinkHosts(mail, {
+      mails: opened,
+      attachments: attached,
+      maxHosts: config.phishing.maxHosts,
+      hostsInText: config.phishing.hostsInText === true
+    }) : null;
     const attachments = config.attachments === false ? [] : inspectAttachments(attached).filter((item) => config.macros !== false || !["macro", "pdf_active", "rtf_object"].includes(item.type)).map((item) => finding(item));
     const [links, authentication, checkedReputation, dnsbl, virusScan, toxicity, nsfw] = await Promise.all([
-      this.checkLinks(checkedLinks, config, extracted.hosts, fromDomain(mail)),
+      this.checkLinks(checkedLinks, config, extracted.hosts, { from: fromDomain(mail), carried }),
       config.authenticationResults && typeof config.authenticationResults === "object" ? normalizeAuthOutput(config.authenticationResults) : config.authentication && session.remoteAddress ? withTimeout(authenticate(raw, {
         timeout: config.timeout,
         ...typeof config.authentication === "object" ? config.authentication : {},
@@ -9400,6 +10532,14 @@ ${visibleText(html.slice(0, config.maxLength * 2)).text}`, { maxLength: config.m
         // Whether the message has more text than phishing.maxLength, whose
         // links were not read.
         linksTruncated,
+        // Whether a link host of the message or of what it carries was
+        // never read whole (it runs past where long text is cut to be
+        // read, it goes through more security gateways than are
+        // unwrapped, or it is in more documents than are read), and whether
+        // an attachment was left unread for time: in either case not every
+        // link was checked (see phishing.attachments).
+        linksTooComplex: Boolean(carried?.tooComplex),
+        linksIncomplete: Boolean(carried?.incomplete),
         idnHomographAttack: {
           detected: links.homographs.length > 0,
           domains: links.homographs,
@@ -9411,6 +10551,9 @@ ${visibleText(html.slice(0, config.maxLength * 2)).text}`, { maxLength: config.m
       language: extracted.language,
       tokens: extracted.words,
       mail,
+      // (the attachments of the message and of its attached messages, as
+      //  read, an attached message's named after it)
+      attached,
       version: VERSION,
       metrics: { totalTime: time }
     };
@@ -9763,13 +10906,13 @@ async function readMessage(stream, maxSize) {
   for (; ; ) {
     const { value, done } = await iterator.next();
     if (done) {
-      return { data: Buffer14.concat(chunks), complete: true, rest: iterator };
+      return { data: Buffer15.concat(chunks), complete: true, rest: iterator };
     }
-    const chunk2 = Buffer14.from(value);
+    const chunk2 = Buffer15.from(value);
     chunks.push(chunk2);
     size += chunk2.length;
     if (size > maxSize) {
-      return { data: Buffer14.concat(chunks), complete: false, rest: iterator };
+      return { data: Buffer15.concat(chunks), complete: false, rest: iterator };
     }
   }
 }