mystmd 1.3.13__py3-none-any.whl → 1.3.14__py3-none-any.whl

mystmd_py/myst.cjs

@@ -51243,7 +51243,7 @@ and ensure you are accounting for this risk.
           if (!tagAllowed(name3) || options.disallowedTagsMode === "recursiveEscape" && !isEmptyObject(skipMap) || options.nestingLimit != null && depth >= options.nestingLimit) {
             skip = true;
             skipMap[depth] = true;
-            if (options.disallowedTagsMode === "discard") {
+            if (options.disallowedTagsMode === "discard" || options.disallowedTagsMode === "completelyDiscard") {
               if (nonTextTagsArray.indexOf(name3) !== -1) {
                 skipText = true;
                 skipTextDepth = 1;
@@ -51253,7 +51253,7 @@ and ensure you are accounting for this risk.
           }
           depth++;
           if (skip) {
-            if (options.disallowedTagsMode === "discard") {
+            if (options.disallowedTagsMode === "discard" || options.disallowedTagsMode === "completelyDiscard") {
               return;
             }
             tempResult = result;
@@ -51271,7 +51271,7 @@ and ensure you are accounting for this risk.
                 delete frame.attribs[a2];
                 return;
               }
-              if (value === "" && (options.nonBooleanAttributes.includes(a2) || options.nonBooleanAttributes.includes("*"))) {
+              if (value === "" && !options.allowedEmptyAttributes.includes(a2) && (options.nonBooleanAttributes.includes(a2) || options.nonBooleanAttributes.includes("*"))) {
                 delete frame.attribs[a2];
                 return;
               }
@@ -51382,11 +51382,12 @@ and ensure you are accounting for this risk.
                   const allowedWildcardClasses = allowedClassesMap["*"];
                   const allowedSpecificClassesGlob = allowedClassesGlobMap[name3];
                   const allowedSpecificClassesRegex = allowedClassesRegexMap[name3];
+                  const allowedWildcardClassesRegex = allowedClassesRegexMap["*"];
                   const allowedWildcardClassesGlob = allowedClassesGlobMap["*"];
                   const allowedClassesGlobs = [
                     allowedSpecificClassesGlob,
                     allowedWildcardClassesGlob
-                  ].concat(allowedSpecificClassesRegex).filter(function(t2) {
+                  ].concat(allowedSpecificClassesRegex, allowedWildcardClassesRegex).filter(function(t2) {
                     return t2;
                   });
                   if (allowedSpecificClasses && allowedWildcardClasses) {
@@ -51402,7 +51403,7 @@ and ensure you are accounting for this risk.
                 if (a2 === "style") {
                   if (options.parseStyleAttributes) {
                     try {
-                      const abstractSyntaxTree = postcssParse(name3 + " {" + value + "}");
+                      const abstractSyntaxTree = postcssParse(name3 + " {" + value + "}", { map: false });
                       const filteredAST = filterCss(abstractSyntaxTree, options.allowedStyles);
                       value = stringifyStyleAttributes(filteredAST);
                       if (value.length === 0) {
@@ -51423,6 +51424,8 @@ and ensure you are accounting for this risk.
                 result += " " + a2;
                 if (value && value.length) {
                   result += '="' + escapeHtml4(value, true) + '"';
+                } else if (options.allowedEmptyAttributes.includes(a2)) {
+                  result += '=""';
                 }
               } else {
                 delete frame.attribs[a2];
@@ -51453,7 +51456,9 @@ and ensure you are accounting for this risk.
             tag = lastFrame.tag;
             text7 = lastFrame.innerText !== void 0 ? lastFrame.innerText : text7;
           }
-          if (options.disallowedTagsMode === "discard" && (tag === "script" || tag === "style")) {
+          if (options.disallowedTagsMode === "completelyDiscard" && !tagAllowed(tag)) {
+            text7 = "";
+          } else if ((options.disallowedTagsMode === "discard" || options.disallowedTagsMode === "completelyDiscard") && (tag === "script" || tag === "style")) {
             result += text7;
           } else {
             const escaped = escapeHtml4(text7, false);
@@ -51490,7 +51495,7 @@ and ensure you are accounting for this risk.
           const skip = skipMap[depth];
           if (skip) {
             delete skipMap[depth];
-            if (options.disallowedTagsMode === "discard") {
+            if (options.disallowedTagsMode === "discard" || options.disallowedTagsMode === "completelyDiscard") {
               frame.updateParentNodeText();
               return;
             }
@@ -51932,6 +51937,9 @@ and ensure you are accounting for this risk.
         // these attributes would make sense if we did.
         img: ["src", "srcset", "alt", "title", "width", "height", "loading"]
       },
+      allowedEmptyAttributes: [
+        "alt"
+      ],
       // Lots of these won't come up by default because we don't allow them
       selfClosing: ["img", "br", "hr", "area", "base", "basefont", "input", "link", "meta"],
       // URL schemes we permit
@@ -101455,7 +101463,7 @@ var require_utils10 = __commonJS({
       return (Number(max) - Number(min)) / Number(step) >= limit;
     };
     exports2.escapeNode = (block5, n = 0, type2) => {
-      let node3 = block5.nodes[n];
+      const node3 = block5.nodes[n];
       if (!node3)
         return;
       if (type2 && node3.type === type2 || node3.type === "open" || node3.type === "close") {
@@ -101506,8 +101514,14 @@ var require_utils10 = __commonJS({
       const result = [];
       const flat = (arr) => {
         for (let i2 = 0; i2 < arr.length; i2++) {
-          let ele = arr[i2];
-          Array.isArray(ele) ? flat(ele, result) : ele !== void 0 && result.push(ele);
+          const ele = arr[i2];
+          if (Array.isArray(ele)) {
+            flat(ele);
+            continue;
+          }
+          if (ele !== void 0) {
+            result.push(ele);
+          }
         }
         return result;
       };
@@ -101523,9 +101537,9 @@ var require_stringify3 = __commonJS({
     "use strict";
     var utils2 = require_utils10();
     module2.exports = (ast, options = {}) => {
-      let stringify4 = (node3, parent2 = {}) => {
-        let invalidBlock = options.escapeInvalid && utils2.isInvalidBrace(parent2);
-        let invalidNode = node3.invalid === true && options.escapeInvalid === true;
+      const stringify4 = (node3, parent2 = {}) => {
+        const invalidBlock = options.escapeInvalid && utils2.isInvalidBrace(parent2);
+        const invalidNode = node3.invalid === true && options.escapeInvalid === true;
         let output2 = "";
         if (node3.value) {
           if ((invalidBlock || invalidNode) && utils2.isOpenOrClose(node3)) {
@@ -101537,7 +101551,7 @@ var require_stringify3 = __commonJS({
           return node3.value;
         }
         if (node3.nodes) {
-          for (let child of node3.nodes) {
+          for (const child of node3.nodes) {
             output2 += stringify4(child);
           }
         }
@@ -101829,7 +101843,7 @@ var require_fill_range = __commonJS({
         input3 = "0" + input3;
       return negative ? "-" + input3 : input3;
     };
-    var toSequence = (parts, options) => {
+    var toSequence = (parts, options, maxLen) => {
       parts.negatives.sort((a2, b) => a2 < b ? -1 : a2 > b ? 1 : 0);
       parts.positives.sort((a2, b) => a2 < b ? -1 : a2 > b ? 1 : 0);
       let prefix2 = options.capture ? "" : "?:";
@@ -101837,10 +101851,10 @@ var require_fill_range = __commonJS({
       let negatives = "";
       let result;
       if (parts.positives.length) {
-        positives = parts.positives.join("|");
+        positives = parts.positives.map((v) => toMaxLen(String(v), maxLen)).join("|");
       }
       if (parts.negatives.length) {
-        negatives = `-(${prefix2}${parts.negatives.join("|")})`;
+        negatives = `-(${prefix2}${parts.negatives.map((v) => toMaxLen(String(v), maxLen)).join("|")})`;
       }
       if (positives && negatives) {
         result = `${positives}|${negatives}`;
@@ -101922,7 +101936,7 @@ var require_fill_range = __commonJS({
         index4++;
       }
       if (options.toRegex === true) {
-        return step > 1 ? toSequence(parts, options) : toRegex(range, null, { wrap: false, ...options });
+        return step > 1 ? toSequence(parts, options, maxLen) : toRegex(range, null, { wrap: false, ...options });
       }
       return range;
     };
@@ -101989,16 +102003,17 @@ var require_compile = __commonJS({
     var fill3 = require_fill_range();
     var utils2 = require_utils10();
     var compile2 = (ast, options = {}) => {
-      let walk2 = (node3, parent2 = {}) => {
-        let invalidBlock = utils2.isInvalidBrace(parent2);
-        let invalidNode = node3.invalid === true && options.escapeInvalid === true;
-        let invalid3 = invalidBlock === true || invalidNode === true;
-        let prefix2 = options.escapeInvalid === true ? "\\" : "";
+      const walk2 = (node3, parent2 = {}) => {
+        const invalidBlock = utils2.isInvalidBrace(parent2);
+        const invalidNode = node3.invalid === true && options.escapeInvalid === true;
+        const invalid3 = invalidBlock === true || invalidNode === true;
+        const prefix2 = options.escapeInvalid === true ? "\\" : "";
         let output2 = "";
         if (node3.isOpen === true) {
           return prefix2 + node3.value;
         }
         if (node3.isClose === true) {
+          console.log("node.isClose", prefix2, node3.value);
           return prefix2 + node3.value;
         }
         if (node3.type === "open") {
@@ -102014,14 +102029,14 @@ var require_compile = __commonJS({
           return node3.value;
         }
         if (node3.nodes && node3.ranges > 0) {
-          let args = utils2.reduce(node3.nodes);
-          let range = fill3(...args, { ...options, wrap: false, toRegex: true });
+          const args = utils2.reduce(node3.nodes);
+          const range = fill3(...args, { ...options, wrap: false, toRegex: true, strictZeros: true });
           if (range.length !== 0) {
             return args.length > 1 && range.length > 1 ? `(${range})` : range;
           }
         }
         if (node3.nodes) {
-          for (let child of node3.nodes) {
+          for (const child of node3.nodes) {
             output2 += walk2(child, node3);
           }
         }
@@ -102041,7 +102056,7 @@ var require_expand = __commonJS({
     var stringify4 = require_stringify3();
     var utils2 = require_utils10();
     var append = (queue = "", stash = "", enclose = false) => {
-      let result = [];
+      const result = [];
       queue = [].concat(queue);
       stash = [].concat(stash);
       if (!stash.length)
@@ -102049,9 +102064,9 @@ var require_expand = __commonJS({
       if (!queue.length) {
         return enclose ? utils2.flatten(stash).map((ele) => `{${ele}}`) : stash;
       }
-      for (let item of queue) {
+      for (const item of queue) {
         if (Array.isArray(item)) {
-          for (let value of item) {
+          for (const value of item) {
             result.push(append(value, stash, enclose));
           }
         } else {
@@ -102065,8 +102080,8 @@ var require_expand = __commonJS({
       return utils2.flatten(result);
     };
     var expand2 = (ast, options = {}) => {
-      let rangeLimit = options.rangeLimit === void 0 ? 1e3 : options.rangeLimit;
-      let walk2 = (node3, parent2 = {}) => {
+      const rangeLimit = options.rangeLimit === void 0 ? 1e3 : options.rangeLimit;
+      const walk2 = (node3, parent2 = {}) => {
         node3.queue = [];
         let p5 = parent2;
         let q2 = parent2.queue;
@@ -102083,7 +102098,7 @@ var require_expand = __commonJS({
           return;
         }
         if (node3.nodes && node3.ranges > 0) {
-          let args = utils2.reduce(node3.nodes);
+          const args = utils2.reduce(node3.nodes);
           if (utils2.exceedsLimit(...args, options.step, rangeLimit)) {
             throw new RangeError("expanded array length exceeds range limit. Use options.rangeLimit to increase or disable the limit.");
           }
@@ -102095,7 +102110,7 @@ var require_expand = __commonJS({
           node3.nodes = [];
           return;
         }
-        let enclose = utils2.encloseBrace(node3);
+        const enclose = utils2.encloseBrace(node3);
         let queue = node3.queue;
         let block5 = node3;
         while (block5.type !== "brace" && block5.type !== "root" && block5.parent) {
@@ -102103,7 +102118,7 @@ var require_expand = __commonJS({
           queue = block5.queue;
         }
         for (let i2 = 0; i2 < node3.nodes.length; i2++) {
-          let child = node3.nodes[i2];
+          const child = node3.nodes[i2];
           if (child.type === "comma" && node3.type === "brace") {
             if (i2 === 1)
               queue.push("");
@@ -102135,7 +102150,7 @@ var require_constants4 = __commonJS({
   "../../node_modules/braces/lib/constants.js"(exports2, module2) {
     "use strict";
     module2.exports = {
-      MAX_LENGTH: 1024 * 64,
+      MAX_LENGTH: 1e4,
       // Digits
       CHAR_0: "0",
       /* 0 */
@@ -102269,21 +102284,20 @@ var require_parse5 = __commonJS({
       if (typeof input3 !== "string") {
         throw new TypeError("Expected a string");
       }
-      let opts = options || {};
-      let max = typeof opts.maxLength === "number" ? Math.min(MAX_LENGTH, opts.maxLength) : MAX_LENGTH;
+      const opts = options || {};
+      const max = typeof opts.maxLength === "number" ? Math.min(MAX_LENGTH, opts.maxLength) : MAX_LENGTH;
       if (input3.length > max) {
         throw new SyntaxError(`Input length (${input3.length}), exceeds max characters (${max})`);
       }
-      let ast = { type: "root", input: input3, nodes: [] };
-      let stack = [ast];
+      const ast = { type: "root", input: input3, nodes: [] };
+      const stack = [ast];
       let block5 = ast;
       let prev = ast;
       let brackets = 0;
-      let length = input3.length;
+      const length = input3.length;
       let index4 = 0;
       let depth = 0;
       let value;
-      let memo = {};
       const advance = () => input3[index4++];
       const push = (node3) => {
         if (node3.type === "text" && prev.type === "dot") {
@@ -102316,7 +102330,6 @@ var require_parse5 = __commonJS({
         }
         if (value === CHAR_LEFT_SQUARE_BRACKET2) {
           brackets++;
-          let closed = true;
           let next;
           while (index4 < length && (next = advance())) {
             value += next;
@@ -102355,7 +102368,7 @@ var require_parse5 = __commonJS({
           continue;
         }
         if (value === CHAR_DOUBLE_QUOTE2 || value === CHAR_SINGLE_QUOTE2 || value === CHAR_BACKTICK) {
-          let open2 = value;
+          const open2 = value;
           let next;
           if (options.keepQuotes !== true) {
             value = "";
@@ -102377,8 +102390,8 @@ var require_parse5 = __commonJS({
         }
         if (value === CHAR_LEFT_CURLY_BRACE) {
           depth++;
-          let dollar = prev.value && prev.value.slice(-1) === "$" || block5.dollar === true;
-          let brace = {
+          const dollar = prev.value && prev.value.slice(-1) === "$" || block5.dollar === true;
+          const brace = {
             type: "brace",
             open: true,
             close: false,
@@ -102398,7 +102411,7 @@ var require_parse5 = __commonJS({
             push({ type: "text", value });
             continue;
           }
-          let type2 = "close";
+          const type2 = "close";
           block5 = stack.pop();
           block5.close = true;
           push({ type: type2, value });
@@ -102409,7 +102422,7 @@ var require_parse5 = __commonJS({
         if (value === CHAR_COMMA2 && depth > 0) {
           if (block5.ranges > 0) {
             block5.ranges = 0;
-            let open2 = block5.nodes.shift();
+            const open2 = block5.nodes.shift();
             block5.nodes = [open2, { type: "text", value: stringify4(block5) }];
           }
           push({ type: "comma", value });
@@ -102417,7 +102430,7 @@ var require_parse5 = __commonJS({
           continue;
         }
         if (value === CHAR_DOT && depth > 0 && block5.commas === 0) {
-          let siblings2 = block5.nodes;
+          const siblings2 = block5.nodes;
           if (depth === 0 || siblings2.length === 0) {
             push({ type: "text", value });
             continue;
@@ -102438,7 +102451,7 @@ var require_parse5 = __commonJS({
           }
           if (prev.type === "range") {
             siblings2.pop();
-            let before = siblings2[siblings2.length - 1];
+            const before = siblings2[siblings2.length - 1];
             before.value += prev.value + value;
             prev = before;
             block5.ranges--;
@@ -102463,8 +102476,8 @@ var require_parse5 = __commonJS({
               node3.invalid = true;
             }
           });
-          let parent2 = stack[stack.length - 1];
-          let index5 = parent2.nodes.indexOf(block5);
+          const parent2 = stack[stack.length - 1];
+          const index5 = parent2.nodes.indexOf(block5);
           parent2.nodes.splice(index5, 1, ...block5.nodes);
         }
       } while (stack.length > 0);
@@ -102486,8 +102499,8 @@ var require_braces = __commonJS({
     var braces = (input3, options = {}) => {
       let output2 = [];
       if (Array.isArray(input3)) {
-        for (let pattern of input3) {
-          let result = braces.create(pattern, options);
+        for (const pattern of input3) {
+          const result = braces.create(pattern, options);
           if (Array.isArray(result)) {
             output2.push(...result);
           } else {
@@ -129421,6 +129434,11 @@ var require_raw_body = __commonJS({
     function getRawBody(stream3, options, callback) {
       var done = callback;
       var opts = options || {};
+      if (stream3 === void 0) {
+        throw new TypeError("argument stream is required");
+      } else if (typeof stream3 !== "object" || stream3 === null || typeof stream3.on !== "function") {
+        throw new TypeError("argument stream must be a stream");
+      }
       if (options === true || typeof options === "string") {
         opts = {
           encoding: options
@@ -130117,6 +130135,8 @@ var require_json4 = __commonJS({
     var typeis = require_type_is();
     module2.exports = json2;
     var FIRST_CHAR_REGEXP = /^[\x20\x09\x0a\x0d]*([^\x20\x09\x0a\x0d])/;
+    var JSON_SYNTAX_CHAR = "#";
+    var JSON_SYNTAX_REGEXP = /#+/g;
     function json2(options) {
       var opts = options || {};
       var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
@@ -130187,13 +130207,21 @@ var require_json4 = __commonJS({
     }
     function createStrictSyntaxError(str2, char) {
       var index4 = str2.indexOf(char);
-      var partial = index4 !== -1 ? str2.substring(0, index4) + "#" : "";
+      var partial = "";
+      if (index4 !== -1) {
+        partial = str2.substring(0, index4) + JSON_SYNTAX_CHAR;
+        for (var i2 = index4 + 1; i2 < str2.length; i2++) {
+          partial += JSON_SYNTAX_CHAR;
+        }
+      }
       try {
         JSON.parse(partial);
         throw new SyntaxError("strict violation");
       } catch (e2) {
         return normalizeJsonSyntaxError(e2, {
-          message: e2.message.replace("#", char),
+          message: e2.message.replace(JSON_SYNTAX_REGEXP, function(placeholder) {
+            return str2.substring(index4, index4 + placeholder.length);
+          }),
           stack: e2.stack
         });
       }
@@ -131339,6 +131367,12 @@ var require_object_inspect = __commonJS({
       if (isString(obj)) {
         return markBoxed(inspect4(String(obj)));
       }
+      if (typeof window !== "undefined" && obj === window) {
+        return "{ [object Window] }";
+      }
+      if (typeof globalThis !== "undefined" && obj === globalThis || typeof global !== "undefined" && obj === global) {
+        return "{ [object globalThis] }";
+      }
       if (!isDate2(obj) && !isRegExp(obj)) {
         var ys = arrObjKeys(obj, inspect4);
         var isPlainObject6 = gPO ? gPO(obj) === Object.prototype : obj instanceof Object || obj.constructor === Object;
@@ -131639,7 +131673,7 @@ var require_side_channel = __commonJS({
     var GetIntrinsic = require_get_intrinsic();
     var callBound = require_callBound();
     var inspect4 = require_object_inspect();
-    var $TypeError = GetIntrinsic("%TypeError%");
+    var $TypeError = require_type2();
     var $WeakMap = GetIntrinsic("%WeakMap%", true);
     var $Map = GetIntrinsic("%Map%", true);
     var $weakMapGet = callBound("WeakMap.prototype.get", true);
@@ -131649,10 +131683,13 @@ var require_side_channel = __commonJS({
     var $mapSet = callBound("Map.prototype.set", true);
     var $mapHas = callBound("Map.prototype.has", true);
     var listGetNode = function(list6, key2) {
-      for (var prev = list6, curr; (curr = prev.next) !== null; prev = curr) {
+      var prev = list6;
+      var curr;
+      for (; (curr = prev.next) !== null; prev = curr) {
         if (curr.key === key2) {
           prev.next = curr.next;
-          curr.next = list6.next;
+          curr.next = /** @type {NonNullable<typeof list.next>} */
+          list6.next;
           list6.next = curr;
           return curr;
         }
@@ -131667,8 +131704,9 @@ var require_side_channel = __commonJS({
       if (node3) {
         node3.value = value;
       } else {
-        objects.next = {
-          // eslint-disable-line no-param-reassign
+        objects.next = /** @type {import('.').ListNode<typeof value>} */
+        {
+          // eslint-disable-line no-param-reassign, no-extra-parens
           key: key2,
           next: objects.next,
           value
@@ -131872,6 +131910,7 @@ var require_utils13 = __commonJS({
         return strWithoutPlus;
       }
     };
+    var limit = 1024;
     var encode = function encode2(str2, defaultEncoder, charset, kind, format) {
       if (str2.length === 0) {
         return str2;
@@ -131888,27 +131927,32 @@ var require_utils13 = __commonJS({
         });
       }
       var out = "";
-      for (var i2 = 0; i2 < string2.length; ++i2) {
-        var c = string2.charCodeAt(i2);
-        if (c === 45 || c === 46 || c === 95 || c === 126 || c >= 48 && c <= 57 || c >= 65 && c <= 90 || c >= 97 && c <= 122 || format === formats.RFC1738 && (c === 40 || c === 41)) {
-          out += string2.charAt(i2);
-          continue;
-        }
-        if (c < 128) {
-          out = out + hexTable[c];
-          continue;
-        }
-        if (c < 2048) {
-          out = out + (hexTable[192 | c >> 6] + hexTable[128 | c & 63]);
-          continue;
-        }
-        if (c < 55296 || c >= 57344) {
-          out = out + (hexTable[224 | c >> 12] + hexTable[128 | c >> 6 & 63] + hexTable[128 | c & 63]);
-          continue;
+      for (var j = 0; j < string2.length; j += limit) {
+        var segment = string2.length >= limit ? string2.slice(j, j + limit) : string2;
+        var arr = [];
+        for (var i2 = 0; i2 < segment.length; ++i2) {
+          var c = segment.charCodeAt(i2);
+          if (c === 45 || c === 46 || c === 95 || c === 126 || c >= 48 && c <= 57 || c >= 65 && c <= 90 || c >= 97 && c <= 122 || format === formats.RFC1738 && (c === 40 || c === 41)) {
+            arr[arr.length] = segment.charAt(i2);
+            continue;
+          }
+          if (c < 128) {
+            arr[arr.length] = hexTable[c];
+            continue;
+          }
+          if (c < 2048) {
+            arr[arr.length] = hexTable[192 | c >> 6] + hexTable[128 | c & 63];
+            continue;
+          }
+          if (c < 55296 || c >= 57344) {
+            arr[arr.length] = hexTable[224 | c >> 12] + hexTable[128 | c >> 6 & 63] + hexTable[128 | c & 63];
+            continue;
+          }
+          i2 += 1;
+          c = 65536 + ((c & 1023) << 10 | segment.charCodeAt(i2) & 1023);
+          arr[arr.length] = hexTable[240 | c >> 18] + hexTable[128 | c >> 12 & 63] + hexTable[128 | c >> 6 & 63] + hexTable[128 | c & 63];
         }
-        i2 += 1;
-        c = 65536 + ((c & 1023) << 10 | string2.charCodeAt(i2) & 1023);
-        out += hexTable[240 | c >> 18] + hexTable[128 | c >> 12 & 63] + hexTable[128 | c >> 6 & 63] + hexTable[128 | c & 63];
+        out += arr.join("");
       }
       return out;
     };
@@ -131989,7 +132033,6 @@ var require_stringify4 = __commonJS({
       }
     };
     var isArray2 = Array.isArray;
-    var split2 = String.prototype.split;
     var push = Array.prototype.push;
     var pushToArray = function(arr, valueOrArray) {
       push.apply(arr, isArray2(valueOrArray) ? valueOrArray : [valueOrArray]);
@@ -131999,10 +132042,13 @@ var require_stringify4 = __commonJS({
     var defaults4 = {
       addQueryPrefix: false,
       allowDots: false,
+      allowEmptyArrays: false,
+      arrayFormat: "indices",
       charset: "utf-8",
       charsetSentinel: false,
       delimiter: "&",
       encode: true,
+      encodeDotInKeys: false,
       encoder: utils2.encode,
       encodeValuesOnly: false,
       format: defaultFormat,
@@ -132019,7 +132065,7 @@ var require_stringify4 = __commonJS({
       return typeof v === "string" || typeof v === "number" || typeof v === "boolean" || typeof v === "symbol" || typeof v === "bigint";
     };
     var sentinel = {};
-    var stringify4 = function stringify5(object, prefix2, generateArrayPrefix, commaRoundTrip, strictNullHandling, skipNulls, encoder, filter7, sort, allowDots, serializeDate, format, formatter, encodeValuesOnly, charset, sideChannel) {
+    var stringify4 = function stringify5(object, prefix2, generateArrayPrefix, commaRoundTrip, allowEmptyArrays, strictNullHandling, skipNulls, encodeDotInKeys, encoder, filter7, sort, allowDots, serializeDate, format, formatter, encodeValuesOnly, charset, sideChannel) {
       var obj = object;
       var tmpSc = sideChannel;
       var step = 0;
@@ -132059,14 +132105,6 @@ var require_stringify4 = __commonJS({
       if (isNonNullishPrimitive(obj) || utils2.isBuffer(obj)) {
         if (encoder) {
           var keyValue = encodeValuesOnly ? prefix2 : encoder(prefix2, defaults4.encoder, charset, "key", format);
-          if (generateArrayPrefix === "comma" && encodeValuesOnly) {
-            var valuesArray = split2.call(String(obj), ",");
-            var valuesJoined = "";
-            for (var i2 = 0; i2 < valuesArray.length; ++i2) {
-              valuesJoined += (i2 === 0 ? "" : ",") + formatter(encoder(valuesArray[i2], defaults4.encoder, charset, "value", format));
-            }
-            return [formatter(keyValue) + (commaRoundTrip && isArray2(obj) && valuesArray.length === 1 ? "[]" : "") + "=" + valuesJoined];
-          }
           return [formatter(keyValue) + "=" + formatter(encoder(obj, defaults4.encoder, charset, "value", format))];
         }
         return [formatter(prefix2) + "=" + formatter(String(obj))];
@@ -132077,6 +132115,9 @@ var require_stringify4 = __commonJS({
       }
       var objKeys;
       if (generateArrayPrefix === "comma" && isArray2(obj)) {
+        if (encodeValuesOnly && encoder) {
+          obj = utils2.maybeMap(obj, encoder);
+        }
         objKeys = [{ value: obj.length > 0 ? obj.join(",") || null : void 0 }];
       } else if (isArray2(filter7)) {
         objKeys = filter7;
@@ -132084,14 +132125,19 @@ var require_stringify4 = __commonJS({
         var keys2 = Object.keys(obj);
         objKeys = sort ? keys2.sort(sort) : keys2;
       }
-      var adjustedPrefix = commaRoundTrip && isArray2(obj) && obj.length === 1 ? prefix2 + "[]" : prefix2;
+      var encodedPrefix = encodeDotInKeys ? prefix2.replace(/\./g, "%2E") : prefix2;
+      var adjustedPrefix = commaRoundTrip && isArray2(obj) && obj.length === 1 ? encodedPrefix + "[]" : encodedPrefix;
+      if (allowEmptyArrays && isArray2(obj) && obj.length === 0) {
+        return adjustedPrefix + "[]";
+      }
       for (var j = 0; j < objKeys.length; ++j) {
         var key2 = objKeys[j];
         var value = typeof key2 === "object" && typeof key2.value !== "undefined" ? key2.value : obj[key2];
         if (skipNulls && value === null) {
           continue;
         }
-        var keyPrefix = isArray2(obj) ? typeof generateArrayPrefix === "function" ? generateArrayPrefix(adjustedPrefix, key2) : adjustedPrefix : adjustedPrefix + (allowDots ? "." + key2 : "[" + key2 + "]");
+        var encodedKey = allowDots && encodeDotInKeys ? key2.replace(/\./g, "%2E") : key2;
+        var keyPrefix = isArray2(obj) ? typeof generateArrayPrefix === "function" ? generateArrayPrefix(adjustedPrefix, encodedKey) : adjustedPrefix : adjustedPrefix + (allowDots ? "." + encodedKey : "[" + encodedKey + "]");
         sideChannel.set(object, step);
         var valueSideChannel = getSideChannel();
         valueSideChannel.set(sentinel, sideChannel);
@@ -132100,9 +132146,11 @@ var require_stringify4 = __commonJS({
           keyPrefix,
           generateArrayPrefix,
           commaRoundTrip,
+          allowEmptyArrays,
           strictNullHandling,
           skipNulls,
-          encoder,
+          encodeDotInKeys,
+          generateArrayPrefix === "comma" && encodeValuesOnly && isArray2(obj) ? null : encoder,
           filter7,
           sort,
           allowDots,
@@ -132120,6 +132168,12 @@ var require_stringify4 = __commonJS({
       if (!opts) {
         return defaults4;
       }
+      if (typeof opts.allowEmptyArrays !== "undefined" && typeof opts.allowEmptyArrays !== "boolean") {
+        throw new TypeError("`allowEmptyArrays` option can only be `true` or `false`, when provided");
+      }
+      if (typeof opts.encodeDotInKeys !== "undefined" && typeof opts.encodeDotInKeys !== "boolean") {
+        throw new TypeError("`encodeDotInKeys` option can only be `true` or `false`, when provided");
+      }
       if (opts.encoder !== null && typeof opts.encoder !== "undefined" && typeof opts.encoder !== "function") {
         throw new TypeError("Encoder has to be a function.");
       }
@@ -132139,13 +132193,29 @@ var require_stringify4 = __commonJS({
       if (typeof opts.filter === "function" || isArray2(opts.filter)) {
         filter7 = opts.filter;
       }
+      var arrayFormat;
+      if (opts.arrayFormat in arrayPrefixGenerators) {
+        arrayFormat = opts.arrayFormat;
+      } else if ("indices" in opts) {
+        arrayFormat = opts.indices ? "indices" : "repeat";
+      } else {
+        arrayFormat = defaults4.arrayFormat;
+      }
+      if ("commaRoundTrip" in opts && typeof opts.commaRoundTrip !== "boolean") {
+        throw new TypeError("`commaRoundTrip` must be a boolean, or absent");
+      }
+      var allowDots = typeof opts.allowDots === "undefined" ? opts.encodeDotInKeys === true ? true : defaults4.allowDots : !!opts.allowDots;
       return {
         addQueryPrefix: typeof opts.addQueryPrefix === "boolean" ? opts.addQueryPrefix : defaults4.addQueryPrefix,
-        allowDots: typeof opts.allowDots === "undefined" ? defaults4.allowDots : !!opts.allowDots,
+        allowDots,
+        allowEmptyArrays: typeof opts.allowEmptyArrays === "boolean" ? !!opts.allowEmptyArrays : defaults4.allowEmptyArrays,
+        arrayFormat,
         charset,
         charsetSentinel: typeof opts.charsetSentinel === "boolean" ? opts.charsetSentinel : defaults4.charsetSentinel,
+        commaRoundTrip: opts.commaRoundTrip,
         delimiter: typeof opts.delimiter === "undefined" ? defaults4.delimiter : opts.delimiter,
         encode: typeof opts.encode === "boolean" ? opts.encode : defaults4.encode,
+        encodeDotInKeys: typeof opts.encodeDotInKeys === "boolean" ? opts.encodeDotInKeys : defaults4.encodeDotInKeys,
         encoder: typeof opts.encoder === "function" ? opts.encoder : defaults4.encoder,
         encodeValuesOnly: typeof opts.encodeValuesOnly === "boolean" ? opts.encodeValuesOnly : defaults4.encodeValuesOnly,
         filter: filter7,
@@ -132173,19 +132243,8 @@ var require_stringify4 = __commonJS({
       if (typeof obj !== "object" || obj === null) {
         return "";
       }
-      var arrayFormat;
-      if (opts && opts.arrayFormat in arrayPrefixGenerators) {
-        arrayFormat = opts.arrayFormat;
-      } else if (opts && "indices" in opts) {
-        arrayFormat = opts.indices ? "indices" : "repeat";
-      } else {
-        arrayFormat = "indices";
-      }
-      var generateArrayPrefix = arrayPrefixGenerators[arrayFormat];
-      if (opts && "commaRoundTrip" in opts && typeof opts.commaRoundTrip !== "boolean") {
-        throw new TypeError("`commaRoundTrip` must be a boolean, or absent");
-      }
-      var commaRoundTrip = generateArrayPrefix === "comma" && opts && opts.commaRoundTrip;
+      var generateArrayPrefix = arrayPrefixGenerators[options.arrayFormat];
+      var commaRoundTrip = generateArrayPrefix === "comma" && options.commaRoundTrip;
       if (!objKeys) {
         objKeys = Object.keys(obj);
       }
@@ -132203,8 +132262,10 @@ var require_stringify4 = __commonJS({
           key2,
           generateArrayPrefix,
           commaRoundTrip,
+          options.allowEmptyArrays,
           options.strictNullHandling,
           options.skipNulls,
+          options.encodeDotInKeys,
           options.encode ? options.encoder : null,
           options.filter,
           options.sort,
@@ -132240,20 +132301,24 @@ var require_parse6 = __commonJS({
     var isArray2 = Array.isArray;
     var defaults4 = {
       allowDots: false,
+      allowEmptyArrays: false,
       allowPrototypes: false,
       allowSparse: false,
       arrayLimit: 20,
       charset: "utf-8",
       charsetSentinel: false,
       comma: false,
+      decodeDotInKeys: false,
       decoder: utils2.decode,
       delimiter: "&",
       depth: 5,
+      duplicates: "combine",
       ignoreQueryPrefix: false,
       interpretNumericEntities: false,
       parameterLimit: 1e3,
       parseArrays: true,
       plainObjects: false,
+      strictDepth: false,
       strictNullHandling: false
     };
     var interpretNumericEntities = function(str2) {
@@ -132270,8 +132335,9 @@ var require_parse6 = __commonJS({
     var isoSentinel = "utf8=%26%2310003%3B";
     var charsetSentinel = "utf8=%E2%9C%93";
     var parseValues = function parseQueryStringValues(str2, options) {
-      var obj = {};
+      var obj = { __proto__: null };
       var cleanStr = options.ignoreQueryPrefix ? str2.replace(/^\?/, "") : str2;
+      cleanStr = cleanStr.replace(/%5B/gi, "[").replace(/%5D/gi, "]");
       var limit = options.parameterLimit === Infinity ? void 0 : options.parameterLimit;
       var parts = cleanStr.split(options.delimiter, limit);
       var skipIndex = -1;
@@ -132316,9 +132382,10 @@ var require_parse6 = __commonJS({
         if (part.indexOf("[]=") > -1) {
           val = isArray2(val) ? [val] : val;
         }
-        if (has3.call(obj, key2)) {
+        var existing = has3.call(obj, key2);
+        if (existing && options.duplicates === "combine") {
           obj[key2] = utils2.combine(obj[key2], val);
-        } else {
+        } else if (!existing || options.duplicates === "last") {
           obj[key2] = val;
         }
       }
@@ -132330,18 +132397,19 @@ var require_parse6 = __commonJS({
         var obj;
         var root6 = chain[i2];
         if (root6 === "[]" && options.parseArrays) {
-          obj = [].concat(leaf);
+          obj = options.allowEmptyArrays && (leaf === "" || options.strictNullHandling && leaf === null) ? [] : [].concat(leaf);
         } else {
           obj = options.plainObjects ? /* @__PURE__ */ Object.create(null) : {};
           var cleanRoot = root6.charAt(0) === "[" && root6.charAt(root6.length - 1) === "]" ? root6.slice(1, -1) : root6;
-          var index4 = parseInt(cleanRoot, 10);
-          if (!options.parseArrays && cleanRoot === "") {
+          var decodedRoot = options.decodeDotInKeys ? cleanRoot.replace(/%2E/g, ".") : cleanRoot;
+          var index4 = parseInt(decodedRoot, 10);
+          if (!options.parseArrays && decodedRoot === "") {
             obj = { 0: leaf };
-          } else if (!isNaN(index4) && root6 !== cleanRoot && String(index4) === cleanRoot && index4 >= 0 && (options.parseArrays && index4 <= options.arrayLimit)) {
+          } else if (!isNaN(index4) && root6 !== decodedRoot && String(index4) === decodedRoot && index4 >= 0 && (options.parseArrays && index4 <= options.arrayLimit)) {
             obj = [];
             obj[index4] = leaf;
-          } else if (cleanRoot !== "__proto__") {
-            obj[cleanRoot] = leaf;
+          } else if (decodedRoot !== "__proto__") {
+            obj[decodedRoot] = leaf;
           }
         }
         leaf = obj;
@@ -132377,6 +132445,9 @@ var require_parse6 = __commonJS({
         keys2.push(segment[1]);
       }
       if (segment) {
+        if (options.strictDepth === true) {
+          throw new RangeError("Input depth exceeded depth option of " + options.depth + " and strictDepth is true");
+        }
         keys2.push("[" + key2.slice(segment.index) + "]");
       }
       return parseObject(keys2, val, options, valuesParsed);
@@ -132385,30 +132456,45 @@ var require_parse6 = __commonJS({
       if (!opts) {
         return defaults4;
       }
-      if (opts.decoder !== null && opts.decoder !== void 0 && typeof opts.decoder !== "function") {
+      if (typeof opts.allowEmptyArrays !== "undefined" && typeof opts.allowEmptyArrays !== "boolean") {
+        throw new TypeError("`allowEmptyArrays` option can only be `true` or `false`, when provided");
+      }
+      if (typeof opts.decodeDotInKeys !== "undefined" && typeof opts.decodeDotInKeys !== "boolean") {
+        throw new TypeError("`decodeDotInKeys` option can only be `true` or `false`, when provided");
+      }
+      if (opts.decoder !== null && typeof opts.decoder !== "undefined" && typeof opts.decoder !== "function") {
         throw new TypeError("Decoder has to be a function.");
       }
       if (typeof opts.charset !== "undefined" && opts.charset !== "utf-8" && opts.charset !== "iso-8859-1") {
         throw new TypeError("The charset option must be either utf-8, iso-8859-1, or undefined");
       }
       var charset = typeof opts.charset === "undefined" ? defaults4.charset : opts.charset;
+      var duplicates = typeof opts.duplicates === "undefined" ? defaults4.duplicates : opts.duplicates;
+      if (duplicates !== "combine" && duplicates !== "first" && duplicates !== "last") {
+        throw new TypeError("The duplicates option must be either combine, first, or last");
+      }
+      var allowDots = typeof opts.allowDots === "undefined" ? opts.decodeDotInKeys === true ? true : defaults4.allowDots : !!opts.allowDots;
       return {
-        allowDots: typeof opts.allowDots === "undefined" ? defaults4.allowDots : !!opts.allowDots,
+        allowDots,
+        allowEmptyArrays: typeof opts.allowEmptyArrays === "boolean" ? !!opts.allowEmptyArrays : defaults4.allowEmptyArrays,
         allowPrototypes: typeof opts.allowPrototypes === "boolean" ? opts.allowPrototypes : defaults4.allowPrototypes,
         allowSparse: typeof opts.allowSparse === "boolean" ? opts.allowSparse : defaults4.allowSparse,
         arrayLimit: typeof opts.arrayLimit === "number" ? opts.arrayLimit : defaults4.arrayLimit,
         charset,
         charsetSentinel: typeof opts.charsetSentinel === "boolean" ? opts.charsetSentinel : defaults4.charsetSentinel,
         comma: typeof opts.comma === "boolean" ? opts.comma : defaults4.comma,
+        decodeDotInKeys: typeof opts.decodeDotInKeys === "boolean" ? opts.decodeDotInKeys : defaults4.decodeDotInKeys,
         decoder: typeof opts.decoder === "function" ? opts.decoder : defaults4.decoder,
         delimiter: typeof opts.delimiter === "string" || utils2.isRegExp(opts.delimiter) ? opts.delimiter : defaults4.delimiter,
         // eslint-disable-next-line no-implicit-coercion, no-extra-parens
         depth: typeof opts.depth === "number" || opts.depth === false ? +opts.depth : defaults4.depth,
+        duplicates,
         ignoreQueryPrefix: opts.ignoreQueryPrefix === true,
         interpretNumericEntities: typeof opts.interpretNumericEntities === "boolean" ? opts.interpretNumericEntities : defaults4.interpretNumericEntities,
         parameterLimit: typeof opts.parameterLimit === "number" ? opts.parameterLimit : defaults4.parameterLimit,
         parseArrays: opts.parseArrays !== false,
         plainObjects: typeof opts.plainObjects === "boolean" ? opts.plainObjects : defaults4.plainObjects,
+        strictDepth: typeof opts.strictDepth === "boolean" ? !!opts.strictDepth : defaults4.strictDepth,
         strictNullHandling: typeof opts.strictNullHandling === "boolean" ? opts.strictNullHandling : defaults4.strictNullHandling
       };
     };
@@ -132471,6 +132557,7 @@ var require_urlencoded = __commonJS({
       var limit = typeof opts.limit !== "number" ? bytes.parse(opts.limit || "100kb") : opts.limit;
       var type2 = opts.type || "application/x-www-form-urlencoded";
       var verify = opts.verify || false;
+      var depth = typeof opts.depth !== "number" ? Number(opts.depth || 32) : opts.depth;
       if (verify !== false && typeof verify !== "function") {
         throw new TypeError("option verify must be function");
       }
@@ -132511,16 +132598,21 @@ var require_urlencoded = __commonJS({
           encoding: charset,
           inflate,
           limit,
-          verify
+          verify,
+          depth
         });
       };
     }
     function extendedparser(options) {
       var parameterLimit = options.parameterLimit !== void 0 ? options.parameterLimit : 1e3;
+      var depth = typeof options.depth !== "number" ? Number(options.depth || 32) : options.depth;
       var parse16 = parser3("qs");
       if (isNaN(parameterLimit) || parameterLimit < 1) {
         throw new TypeError("option parameterLimit must be a positive number");
       }
+      if (isNaN(depth) || depth < 0) {
+        throw new TypeError("option depth must be a zero or a positive number");
+      }
       if (isFinite(parameterLimit)) {
         parameterLimit = parameterLimit | 0;
       }
@@ -132534,12 +132626,23 @@ var require_urlencoded = __commonJS({
         }
         var arrayLimit = Math.max(100, paramCount);
         debug("parse extended urlencoding");
-        return parse16(body3, {
-          allowPrototypes: true,
-          arrayLimit,
-          depth: Infinity,
-          parameterLimit
-        });
+        try {
+          return parse16(body3, {
+            allowPrototypes: true,
+            arrayLimit,
+            depth,
+            strictDepth: true,
+            parameterLimit
+          });
+        } catch (err) {
+          if (err instanceof RangeError) {
+            throw createError(400, "The input exceeded the depth", {
+              type: "querystring.parse.rangeError"
+            });
+          } else {
+            throw err;
+          }
+        }
       };
     }
     function getCharset(req) {
@@ -133151,7 +133254,7 @@ var require_encodeurl = __commonJS({
   "../../node_modules/encodeurl/index.js"(exports2, module2) {
     "use strict";
     module2.exports = encodeUrl;
-    var ENCODE_CHARS_REGEXP = /(?:[^\x21\x25\x26-\x3B\x3D\x3F-\x5B\x5D\x5F\x61-\x7A\x7E]|%(?:[^0-9A-Fa-f]|[0-9A-Fa-f][^0-9A-Fa-f]|$))+/g;
+    var ENCODE_CHARS_REGEXP = /(?:[^\x21\x23-\x3B\x3D\x3F-\x5F\x61-\x7A\x7C\x7E]|%(?:[^0-9A-Fa-f]|[0-9A-Fa-f][^0-9A-Fa-f]|$))+/g;
     var UNMATCHED_SURROGATE_PAIR_REGEXP = /(^|[^\uD800-\uDBFF])[\uDC00-\uDFFF]|[\uD800-\uDBFF]([^\uDC00-\uDFFF]|$)/g;
     var UNMATCHED_SURROGATE_PAIR_REPLACE = "$1\uFFFD$2";
     function encodeUrl(url) {
@@ -133337,7 +133440,9 @@ var require_finalhandler = __commonJS({
         }
         if (headersSent(res)) {
           debug("cannot %d after headers sent", status);
-          req.socket.destroy();
+          if (req.socket) {
+            req.socket.destroy();
+          }
           return;
         }
         send(req, res, status, headers, msg);
@@ -133395,7 +133500,9 @@ var require_finalhandler = __commonJS({
       function write3() {
         var body3 = createHtmlDocument(message);
         res.statusCode = status;
-        res.statusMessage = statuses.message[status];
+        if (req.httpVersionMajor < 2) {
+          res.statusMessage = statuses.message[status];
+        }
         res.removeHeader("Content-Encoding");
         res.removeHeader("Content-Language");
         res.removeHeader("Content-Range");
@@ -133904,23 +134011,28 @@ var require_array_flatten = __commonJS({
 // ../../node_modules/path-to-regexp/index.js
 var require_path_to_regexp = __commonJS({
   "../../node_modules/path-to-regexp/index.js"(exports2, module2) {
-    module2.exports = pathtoRegexp;
-    var MATCHING_GROUP_REGEXP = /\((?!\?)/g;
-    function pathtoRegexp(path42, keys2, options) {
+    module2.exports = pathToRegexp;
+    var MATCHING_GROUP_REGEXP = /\\.|\((?:\?<(.*?)>)?(?!\?)/g;
+    function pathToRegexp(path42, keys2, options) {
       options = options || {};
       keys2 = keys2 || [];
       var strict = options.strict;
       var end = options.end !== false;
       var flags = options.sensitive ? "" : "i";
+      var lookahead = options.lookahead !== false;
       var extraOffset = 0;
       var keysOffset = keys2.length;
       var i2 = 0;
       var name3 = 0;
+      var pos = 0;
+      var backtrack = "";
       var m2;
       if (path42 instanceof RegExp) {
         while (m2 = MATCHING_GROUP_REGEXP.exec(path42.source)) {
+          if (m2[0][0] === "\\")
+            continue;
           keys2.push({
-            name: name3++,
+            name: m2[1] || name3++,
             optional: false,
             offset: m2.index
           });
@@ -133929,39 +134041,52 @@ var require_path_to_regexp = __commonJS({
       }
       if (Array.isArray(path42)) {
         path42 = path42.map(function(value) {
-          return pathtoRegexp(value, keys2, options).source;
+          return pathToRegexp(value, keys2, options).source;
         });
-        return new RegExp("(?:" + path42.join("|") + ")", flags);
-      }
-      path42 = ("^" + path42 + (strict ? "" : path42[path42.length - 1] === "/" ? "?" : "/?")).replace(/\/\(/g, "/(?:").replace(/([\/\.])/g, "\\$1").replace(/(\\\/)?(\\\.)?:(\w+)(\(.*?\))?(\*)?(\?)?/g, function(match3, slash, format, key2, capture, star3, optional, offset) {
-        slash = slash || "";
-        format = format || "";
-        capture = capture || "([^\\/" + format + "]+?)";
-        optional = optional || "";
-        keys2.push({
-          name: key2,
-          optional: !!optional,
-          offset: offset + extraOffset
-        });
-        var result = "" + (optional ? "" : slash) + "(?:" + format + (optional ? slash : "") + capture + (star3 ? "((?:[\\/" + format + "].+?)?)" : "") + ")" + optional;
-        extraOffset += result.length - match3.length;
-        return result;
-      }).replace(/\*/g, function(star3, index5) {
-        var len = keys2.length;
-        while (len-- > keysOffset && keys2[len].offset > index5) {
-          keys2[len].offset += 3;
+        return new RegExp(path42.join("|"), flags);
+      }
+      path42 = path42.replace(
+        /\\.|(\/)?(\.)?:(\w+)(\(.*?\))?(\*)?(\?)?|[.*]|\/\(/g,
+        function(match3, slash, format, key2, capture, star3, optional, offset) {
+          pos = offset + match3.length;
+          if (match3[0] === "\\") {
+            backtrack += match3;
+            return match3;
+          }
+          if (match3 === ".") {
+            backtrack += "\\.";
+            extraOffset += 1;
+            return "\\.";
+          }
+          backtrack = slash || format ? "" : path42.slice(pos, offset);
+          if (match3 === "*") {
+            extraOffset += 3;
+            return "(.*)";
+          }
+          if (match3 === "/(") {
+            backtrack += "/";
+            extraOffset += 2;
+            return "/(?:";
+          }
+          slash = slash || "";
+          format = format ? "\\." : "";
+          optional = optional || "";
+          capture = capture ? capture.replace(/\\.|\*/, function(m3) {
+            return m3 === "*" ? "(.*)" : m3;
+          }) : backtrack ? "((?:(?!/|" + backtrack + ").)+?)" : "([^/" + format + "]+?)";
+          keys2.push({
+            name: key2,
+            optional: !!optional,
+            offset: offset + extraOffset
+          });
+          var result = "(?:" + format + slash + capture + (star3 ? "((?:[/" + format + "].+?)?)" : "") + ")" + optional;
+          extraOffset += result.length - match3.length;
+          return result;
         }
-        return "(.*)";
-      });
+      );
       while (m2 = MATCHING_GROUP_REGEXP.exec(path42)) {
-        var escapeCount = 0;
-        var index4 = m2.index;
-        while (path42.charAt(--index4) === "\\") {
-          escapeCount++;
-        }
-        if (escapeCount % 2 === 1) {
+        if (m2[0][0] === "\\")
           continue;
-        }
         if (keysOffset + i2 === keys2.length || keys2[keysOffset + i2].offset > m2.index) {
           keys2.splice(keysOffset + i2, 0, {
             name: name3++,
@@ -133972,8 +134097,13 @@ var require_path_to_regexp = __commonJS({
         }
         i2++;
       }
-      path42 += end ? "$" : path42[path42.length - 1] === "/" ? "" : "(?=\\/|$)";
-      return new RegExp(path42, flags);
+      path42 += strict ? "" : path42[path42.length - 1] === "/" ? "?" : "/?";
+      if (end) {
+        path42 += "$";
+      } else if (path42[path42.length - 1] !== "/") {
+        path42 += lookahead ? "(?=/|$)" : "(?:/|$)";
+      }
+      return new RegExp("^" + path42, flags);
     }
   }
 });
@@ -134138,7 +134268,7 @@ var require_route2 = __commonJS({
       if (this.methods._all) {
         return true;
       }
-      var name3 = method.toLowerCase();
+      var name3 = typeof method === "string" ? method.toLowerCase() : method;
       if (name3 === "head" && !this.methods["head"]) {
         name3 = "get";
       }
@@ -134161,7 +134291,7 @@ var require_route2 = __commonJS({
       if (stack.length === 0) {
         return done();
       }
-      var method = req.method.toLowerCase();
+      var method = typeof req.method === "string" ? req.method.toLowerCase() : req.method;
       if (method === "head" && !this.methods["head"]) {
         method = "get";
       }
@@ -135413,6 +135543,20 @@ var require_src4 = __commonJS({
   }
 });
 
+// ../../node_modules/send/node_modules/encodeurl/index.js
+var require_encodeurl2 = __commonJS({
+  "../../node_modules/send/node_modules/encodeurl/index.js"(exports2, module2) {
+    "use strict";
+    module2.exports = encodeUrl;
+    var ENCODE_CHARS_REGEXP = /(?:[^\x21\x25\x26-\x3B\x3D\x3F-\x5B\x5D\x5F\x61-\x7A\x7E]|%(?:[^0-9A-Fa-f]|[0-9A-Fa-f][^0-9A-Fa-f]|$))+/g;
+    var UNMATCHED_SURROGATE_PAIR_REGEXP = /(^|[^\uD800-\uDBFF])[\uDC00-\uDFFF]|[\uD800-\uDBFF]([^\uDC00-\uDFFF]|$)/g;
+    var UNMATCHED_SURROGATE_PAIR_REPLACE = "$1\uFFFD$2";
+    function encodeUrl(url) {
+      return String(url).replace(UNMATCHED_SURROGATE_PAIR_REGEXP, UNMATCHED_SURROGATE_PAIR_REPLACE).replace(ENCODE_CHARS_REGEXP, encodeURI);
+    }
+  }
+});
+
 // ../../node_modules/etag/index.js
 var require_etag = __commonJS({
   "../../node_modules/etag/index.js"(exports2, module2) {
@@ -135794,7 +135938,7 @@ var require_send = __commonJS({
     var debug = require_src4()("send");
     var deprecate3 = require_depd()("send");
     var destroy = require_destroy();
-    var encodeUrl = require_encodeurl();
+    var encodeUrl = require_encodeurl2();
     var escapeHtml4 = require_escape_html();
     var etag = require_etag();
     var fresh = require_fresh();
@@ -135995,7 +136139,7 @@ var require_send = __commonJS({
         return;
       }
       var loc = encodeUrl(collapseLeadingSlashes(this.path + "/"));
-      var doc = createHtmlDocument("Redirecting", 'Redirecting to <a href="' + escapeHtml4(loc) + '">' + escapeHtml4(loc) + "</a>");
+      var doc = createHtmlDocument("Redirecting", "Redirecting to " + escapeHtml4(loc));
       res.statusCode = 301;
       res.setHeader("Content-Type", "text/html; charset=UTF-8");
       res.setHeader("Content-Length", Buffer.byteLength(doc));
@@ -137213,9 +137357,9 @@ var require_utils14 = __commonJS({
       contentDisposition,
       "utils.contentDisposition: use content-disposition npm module instead"
     );
-    function acceptParams(str2, index4) {
+    function acceptParams(str2) {
       var parts = str2.split(/ *; */);
-      var ret = { value: parts[0], quality: 1, params: {}, originalIndex: index4 };
+      var ret = { value: parts[0], quality: 1, params: {} };
       for (var i2 = 1; i2 < parts.length; ++i2) {
         var pms = parts[i2].split(/ *= */);
         if ("q" === pms[0]) {
@@ -138377,68 +138521,96 @@ var require_cookie = __commonJS({
     exports2.parse = parse16;
     exports2.serialize = serialize3;
     var __toString = Object.prototype.toString;
-    var fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/;
-    function parse16(str2, options) {
+    var cookieNameRegExp = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+    var cookieValueRegExp = /^("?)[\u0021\u0023-\u002B\u002D-\u003A\u003C-\u005B\u005D-\u007E]*\1$/;
+    var domainValueRegExp = /^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i;
+    var pathValueRegExp = /^[\u0020-\u003A\u003D-\u007E]*$/;
+    function parse16(str2, opt) {
       if (typeof str2 !== "string") {
         throw new TypeError("argument str must be a string");
       }
       var obj = {};
-      var opt = options || {};
-      var dec = opt.decode || decode2;
+      var len = str2.length;
+      if (len < 2)
+        return obj;
+      var dec = opt && opt.decode || decode2;
       var index4 = 0;
-      while (index4 < str2.length) {
-        var eqIdx = str2.indexOf("=", index4);
-        if (eqIdx === -1) {
+      var eqIdx = 0;
+      var endIdx = 0;
+      do {
+        eqIdx = str2.indexOf("=", index4);
+        if (eqIdx === -1)
           break;
-        }
-        var endIdx = str2.indexOf(";", index4);
+        endIdx = str2.indexOf(";", index4);
         if (endIdx === -1) {
-          endIdx = str2.length;
-        } else if (endIdx < eqIdx) {
+          endIdx = len;
+        } else if (eqIdx > endIdx) {
           index4 = str2.lastIndexOf(";", eqIdx - 1) + 1;
           continue;
         }
-        var key2 = str2.slice(index4, eqIdx).trim();
-        if (void 0 === obj[key2]) {
-          var val = str2.slice(eqIdx + 1, endIdx).trim();
-          if (val.charCodeAt(0) === 34) {
-            val = val.slice(1, -1);
-          }
+        var keyStartIdx = startIndex(str2, index4, eqIdx);
+        var keyEndIdx = endIndex(str2, eqIdx, keyStartIdx);
+        var key2 = str2.slice(keyStartIdx, keyEndIdx);
+        if (!obj.hasOwnProperty(key2)) {
+          var valStartIdx = startIndex(str2, eqIdx + 1, endIdx);
+          var valEndIdx = endIndex(str2, endIdx, valStartIdx);
+          if (str2.charCodeAt(valStartIdx) === 34 && str2.charCodeAt(valEndIdx - 1) === 34) {
+            valStartIdx++;
+            valEndIdx--;
+          }
+          var val = str2.slice(valStartIdx, valEndIdx);
           obj[key2] = tryDecode(val, dec);
         }
         index4 = endIdx + 1;
-      }
+      } while (index4 < len);
       return obj;
     }
-    function serialize3(name3, val, options) {
-      var opt = options || {};
-      var enc = opt.encode || encode;
+    function startIndex(str2, index4, max) {
+      do {
+        var code7 = str2.charCodeAt(index4);
+        if (code7 !== 32 && code7 !== 9)
+          return index4;
+      } while (++index4 < max);
+      return max;
+    }
+    function endIndex(str2, index4, min) {
+      while (index4 > min) {
+        var code7 = str2.charCodeAt(--index4);
+        if (code7 !== 32 && code7 !== 9)
+          return index4 + 1;
+      }
+      return min;
+    }
+    function serialize3(name3, val, opt) {
+      var enc = opt && opt.encode || encodeURIComponent;
       if (typeof enc !== "function") {
         throw new TypeError("option encode is invalid");
       }
-      if (!fieldContentRegExp.test(name3)) {
+      if (!cookieNameRegExp.test(name3)) {
         throw new TypeError("argument name is invalid");
       }
       var value = enc(val);
-      if (value && !fieldContentRegExp.test(value)) {
+      if (!cookieValueRegExp.test(value)) {
         throw new TypeError("argument val is invalid");
       }
       var str2 = name3 + "=" + value;
+      if (!opt)
+        return str2;
       if (null != opt.maxAge) {
-        var maxAge = opt.maxAge - 0;
-        if (isNaN(maxAge) || !isFinite(maxAge)) {
+        var maxAge = Math.floor(opt.maxAge);
+        if (!isFinite(maxAge)) {
           throw new TypeError("option maxAge is invalid");
         }
-        str2 += "; Max-Age=" + Math.floor(maxAge);
+        str2 += "; Max-Age=" + maxAge;
       }
       if (opt.domain) {
-        if (!fieldContentRegExp.test(opt.domain)) {
+        if (!domainValueRegExp.test(opt.domain)) {
           throw new TypeError("option domain is invalid");
         }
         str2 += "; Domain=" + opt.domain;
       }
       if (opt.path) {
-        if (!fieldContentRegExp.test(opt.path)) {
+        if (!pathValueRegExp.test(opt.path)) {
           throw new TypeError("option path is invalid");
         }
         str2 += "; Path=" + opt.path;
@@ -138456,6 +138628,9 @@ var require_cookie = __commonJS({
       if (opt.secure) {
         str2 += "; Secure";
       }
+      if (opt.partitioned) {
+        str2 += "; Partitioned";
+      }
       if (opt.priority) {
         var priority = typeof opt.priority === "string" ? opt.priority.toLowerCase() : opt.priority;
         switch (priority) {
@@ -138496,11 +138671,8 @@ var require_cookie = __commonJS({
     function decode2(str2) {
       return str2.indexOf("%") !== -1 ? decodeURIComponent(str2) : str2;
     }
-    function encode(val) {
-      return encodeURIComponent(val);
-    }
     function isDate2(val) {
-      return __toString.call(val) === "[object Date]" || val instanceof Date;
+      return __toString.call(val) === "[object Date]";
     }
     function tryDecode(str2, decode3) {
       try {
@@ -138869,6 +139041,14 @@ var require_response = __commonJS({
       return this.getHeader(field);
     };
     res.clearCookie = function clearCookie(name3, options) {
+      if (options) {
+        if (options.maxAge) {
+          deprecate3('res.clearCookie: Passing "options.maxAge" is deprecated. In v5.0.0 of Express, this option will be ignored, as res.clearCookie will automatically set cookies to expire immediately. Please update your code to omit this option.');
+        }
+        if (options.expires) {
+          deprecate3('res.clearCookie: Passing "options.expires" is deprecated. In v5.0.0 of Express, this option will be ignored, as res.clearCookie will automatically set cookies to expire immediately. Please update your code to omit this option.');
+        }
+      }
       var opts = merge3({ expires: /* @__PURE__ */ new Date(1), path: "/" }, options);
       return this.cookie(name3, "", opts);
     };
@@ -138897,9 +139077,12 @@ var require_response = __commonJS({
       return this;
     };
     res.location = function location4(url) {
-      var loc = url;
+      var loc;
       if (url === "back") {
+        deprecate3('res.location("back"): use res.location(req.get("Referrer") || "/") and refer to https://dub.sh/security-redirect for best practices');
         loc = this.req.get("Referrer") || "/";
+      } else {
+        loc = String(url);
       }
       return this.set("Location", encodeUrl(loc));
     };
@@ -138923,7 +139106,7 @@ var require_response = __commonJS({
         },
         html: function() {
           var u3 = escapeHtml4(address);
-          body3 = "<p>" + statuses.message[status] + '. Redirecting to <a href="' + u3 + '">' + u3 + "</a></p>";
+          body3 = "<p>" + statuses.message[status] + ". Redirecting to " + u3 + "</p>";
         },
         default: function() {
           body3 = "";
@@ -139149,7 +139332,7 @@ var require_serve_static = __commonJS({
         originalUrl.path = null;
         originalUrl.pathname = collapseLeadingSlashes(originalUrl.pathname + "/");
         var loc = encodeUrl(url.format(originalUrl));
-        var doc = createHtmlDocument("Redirecting", 'Redirecting to <a href="' + escapeHtml4(loc) + '">' + escapeHtml4(loc) + "</a>");
+        var doc = createHtmlDocument("Redirecting", "Redirecting to " + escapeHtml4(loc));
         res.statusCode = 301;
         res.setHeader("Content-Type", "text/html; charset=UTF-8");
         res.setHeader("Content-Length", Buffer.byteLength(doc));
@@ -139348,10 +139531,15 @@ var require_stream = __commonJS({
 var require_constants6 = __commonJS({
   "../../node_modules/ws/lib/constants.js"(exports2, module2) {
     "use strict";
+    var BINARY_TYPES = ["nodebuffer", "arraybuffer", "fragments"];
+    var hasBlob = typeof Blob !== "undefined";
+    if (hasBlob)
+      BINARY_TYPES.push("blob");
     module2.exports = {
-      BINARY_TYPES: ["nodebuffer", "arraybuffer", "fragments"],
+      BINARY_TYPES,
       EMPTY_BUFFER: Buffer.alloc(0),
       GUID: "258EAFA5-E914-47DA-95CA-C5AB0DC85B11",
+      hasBlob,
       kForOnEventAttribute: Symbol("kIsForOnEventAttribute"),
       kListener: Symbol("kListener"),
       kStatusCode: Symbol("status-code"),
@@ -139880,6 +140068,7 @@ var require_validation = __commonJS({
   "../../node_modules/ws/lib/validation.js"(exports2, module2) {
     "use strict";
     var { isUtf8 } = require("buffer");
+    var { hasBlob } = require_constants6();
     var tokenChars = [
       0,
       0,
@@ -140050,7 +140239,11 @@ var require_validation = __commonJS({
       }
       return true;
     }
+    function isBlob2(value) {
+      return hasBlob && typeof value === "object" && typeof value.arrayBuffer === "function" && typeof value.type === "string" && typeof value.stream === "function" && (value[Symbol.toStringTag] === "Blob" || value[Symbol.toStringTag] === "File");
+    }
     module2.exports = {
+      isBlob: isBlob2,
       isValidStatusCode,
       isValidUTF8: _isValidUTF8,
       tokenChars
@@ -140092,11 +140285,15 @@ var require_receiver = __commonJS({
     var GET_MASK = 3;
     var GET_DATA = 4;
     var INFLATING = 5;
+    var DEFER_EVENT = 6;
     var Receiver2 = class extends Writable {
       /**
        * Creates a Receiver instance.
        *
        * @param {Object} [options] Options object
+       * @param {Boolean} [options.allowSynchronousEvents=true] Specifies whether
+       *     any of the `'message'`, `'ping'`, and `'pong'` events can be emitted
+       *     multiple times in the same tick
        * @param {String} [options.binaryType=nodebuffer] The type for binary data
        * @param {Object} [options.extensions] An object containing the negotiated
        *     extensions
@@ -140108,6 +140305,7 @@ var require_receiver = __commonJS({
        */
       constructor(options = {}) {
         super();
+        this._allowSynchronousEvents = options.allowSynchronousEvents !== void 0 ? options.allowSynchronousEvents : true;
         this._binaryType = options.binaryType || BINARY_TYPES[0];
         this._extensions = options.extensions || {};
         this._isServer = !!options.isServer;
@@ -140126,8 +140324,9 @@ var require_receiver = __commonJS({
         this._totalPayloadLength = 0;
         this._messageLength = 0;
         this._fragments = [];
-        this._state = GET_INFO;
+        this._errored = false;
         this._loop = false;
+        this._state = GET_INFO;
       }
       /**
        * Implements `Writable.prototype._write()`.
@@ -140189,195 +140388,207 @@ var require_receiver = __commonJS({
        * @private
        */
       startLoop(cb) {
-        let err;
         this._loop = true;
         do {
           switch (this._state) {
             case GET_INFO:
-              err = this.getInfo();
+              this.getInfo(cb);
               break;
             case GET_PAYLOAD_LENGTH_16:
-              err = this.getPayloadLength16();
+              this.getPayloadLength16(cb);
               break;
             case GET_PAYLOAD_LENGTH_64:
-              err = this.getPayloadLength64();
+              this.getPayloadLength64(cb);
               break;
             case GET_MASK:
               this.getMask();
               break;
             case GET_DATA:
-              err = this.getData(cb);
+              this.getData(cb);
               break;
-            default:
+            case INFLATING:
+            case DEFER_EVENT:
               this._loop = false;
               return;
           }
         } while (this._loop);
-        cb(err);
+        if (!this._errored)
+          cb();
       }
       /**
        * Reads the first two bytes of a frame.
        *
-       * @return {(RangeError|undefined)} A possible error
+       * @param {Function} cb Callback
        * @private
        */
-      getInfo() {
+      getInfo(cb) {
         if (this._bufferedBytes < 2) {
           this._loop = false;
           return;
         }
         const buf = this.consume(2);
         if ((buf[0] & 48) !== 0) {
-          this._loop = false;
-          return error(
+          const error = this.createError(
             RangeError,
             "RSV2 and RSV3 must be clear",
             true,
             1002,
             "WS_ERR_UNEXPECTED_RSV_2_3"
           );
+          cb(error);
+          return;
         }
         const compressed = (buf[0] & 64) === 64;
         if (compressed && !this._extensions[PerMessageDeflate.extensionName]) {
-          this._loop = false;
-          return error(
+          const error = this.createError(
             RangeError,
             "RSV1 must be clear",
             true,
             1002,
             "WS_ERR_UNEXPECTED_RSV_1"
           );
+          cb(error);
+          return;
         }
         this._fin = (buf[0] & 128) === 128;
         this._opcode = buf[0] & 15;
         this._payloadLength = buf[1] & 127;
         if (this._opcode === 0) {
           if (compressed) {
-            this._loop = false;
-            return error(
+            const error = this.createError(
               RangeError,
               "RSV1 must be clear",
               true,
               1002,
               "WS_ERR_UNEXPECTED_RSV_1"
             );
+            cb(error);
+            return;
           }
           if (!this._fragmented) {
-            this._loop = false;
-            return error(
+            const error = this.createError(
               RangeError,
               "invalid opcode 0",
               true,
               1002,
               "WS_ERR_INVALID_OPCODE"
             );
+            cb(error);
+            return;
           }
           this._opcode = this._fragmented;
         } else if (this._opcode === 1 || this._opcode === 2) {
           if (this._fragmented) {
-            this._loop = false;
-            return error(
+            const error = this.createError(
               RangeError,
               `invalid opcode ${this._opcode}`,
               true,
               1002,
               "WS_ERR_INVALID_OPCODE"
             );
+            cb(error);
+            return;
           }
           this._compressed = compressed;
         } else if (this._opcode > 7 && this._opcode < 11) {
           if (!this._fin) {
-            this._loop = false;
-            return error(
+            const error = this.createError(
               RangeError,
               "FIN must be set",
               true,
               1002,
               "WS_ERR_EXPECTED_FIN"
             );
+            cb(error);
+            return;
           }
           if (compressed) {
-            this._loop = false;
-            return error(
+            const error = this.createError(
               RangeError,
               "RSV1 must be clear",
               true,
               1002,
               "WS_ERR_UNEXPECTED_RSV_1"
             );
+            cb(error);
+            return;
           }
           if (this._payloadLength > 125 || this._opcode === 8 && this._payloadLength === 1) {
-            this._loop = false;
-            return error(
+            const error = this.createError(
               RangeError,
               `invalid payload length ${this._payloadLength}`,
               true,
               1002,
               "WS_ERR_INVALID_CONTROL_PAYLOAD_LENGTH"
             );
+            cb(error);
+            return;
           }
         } else {
-          this._loop = false;
-          return error(
+          const error = this.createError(
             RangeError,
             `invalid opcode ${this._opcode}`,
             true,
             1002,
             "WS_ERR_INVALID_OPCODE"
           );
+          cb(error);
+          return;
         }
         if (!this._fin && !this._fragmented)
           this._fragmented = this._opcode;
         this._masked = (buf[1] & 128) === 128;
         if (this._isServer) {
           if (!this._masked) {
-            this._loop = false;
-            return error(
+            const error = this.createError(
               RangeError,
               "MASK must be set",
               true,
               1002,
               "WS_ERR_EXPECTED_MASK"
             );
+            cb(error);
+            return;
           }
         } else if (this._masked) {
-          this._loop = false;
-          return error(
+          const error = this.createError(
             RangeError,
             "MASK must be clear",
             true,
             1002,
             "WS_ERR_UNEXPECTED_MASK"
           );
+          cb(error);
+          return;
         }
         if (this._payloadLength === 126)
           this._state = GET_PAYLOAD_LENGTH_16;
         else if (this._payloadLength === 127)
           this._state = GET_PAYLOAD_LENGTH_64;
         else
-          return this.haveLength();
+          this.haveLength(cb);
       }
       /**
        * Gets extended payload length (7+16).
        *
-       * @return {(RangeError|undefined)} A possible error
+       * @param {Function} cb Callback
        * @private
        */
-      getPayloadLength16() {
+      getPayloadLength16(cb) {
         if (this._bufferedBytes < 2) {
           this._loop = false;
           return;
         }
         this._payloadLength = this.consume(2).readUInt16BE(0);
-        return this.haveLength();
+        this.haveLength(cb);
       }
       /**
        * Gets extended payload length (7+64).
        *
-       * @return {(RangeError|undefined)} A possible error
+       * @param {Function} cb Callback
        * @private
        */
-      getPayloadLength64() {
+      getPayloadLength64(cb) {
         if (this._bufferedBytes < 8) {
           this._loop = false;
           return;
@@ -140385,36 +140596,38 @@ var require_receiver = __commonJS({
         const buf = this.consume(8);
         const num = buf.readUInt32BE(0);
         if (num > Math.pow(2, 53 - 32) - 1) {
-          this._loop = false;
-          return error(
+          const error = this.createError(
             RangeError,
             "Unsupported WebSocket frame: payload length > 2^53 - 1",
             false,
             1009,
             "WS_ERR_UNSUPPORTED_DATA_PAYLOAD_LENGTH"
           );
+          cb(error);
+          return;
         }
         this._payloadLength = num * Math.pow(2, 32) + buf.readUInt32BE(4);
-        return this.haveLength();
+        this.haveLength(cb);
       }
       /**
        * Payload length has been read.
        *
-       * @return {(RangeError|undefined)} A possible error
+       * @param {Function} cb Callback
        * @private
        */
-      haveLength() {
+      haveLength(cb) {
         if (this._payloadLength && this._opcode < 8) {
           this._totalPayloadLength += this._payloadLength;
           if (this._totalPayloadLength > this._maxPayload && this._maxPayload > 0) {
-            this._loop = false;
-            return error(
+            const error = this.createError(
               RangeError,
               "Max payload size exceeded",
               false,
               1009,
               "WS_ERR_UNSUPPORTED_MESSAGE_LENGTH"
             );
+            cb(error);
+            return;
           }
         }
         if (this._masked)
@@ -140439,7 +140652,6 @@ var require_receiver = __commonJS({
        * Reads data bytes.
        *
        * @param {Function} cb Callback
-       * @return {(Error|RangeError|undefined)} A possible error
        * @private
        */
       getData(cb) {
@@ -140454,8 +140666,10 @@ var require_receiver = __commonJS({
             unmask(data, this._mask);
           }
         }
-        if (this._opcode > 7)
-          return this.controlMessage(data);
+        if (this._opcode > 7) {
+          this.controlMessage(data, cb);
+          return;
+        }
         if (this._compressed) {
           this._state = INFLATING;
           this.decompress(data, cb);
@@ -140465,7 +140679,7 @@ var require_receiver = __commonJS({
           this._messageLength = this._totalPayloadLength;
           this._fragments.push(data);
         }
-        return this.dataMessage();
+        this.dataMessage(cb);
       }
       /**
        * Decompresses data.
@@ -140482,64 +140696,87 @@ var require_receiver = __commonJS({
           if (buf.length) {
             this._messageLength += buf.length;
             if (this._messageLength > this._maxPayload && this._maxPayload > 0) {
-              return cb(
-                error(
-                  RangeError,
-                  "Max payload size exceeded",
-                  false,
-                  1009,
-                  "WS_ERR_UNSUPPORTED_MESSAGE_LENGTH"
-                )
+              const error = this.createError(
+                RangeError,
+                "Max payload size exceeded",
+                false,
+                1009,
+                "WS_ERR_UNSUPPORTED_MESSAGE_LENGTH"
               );
+              cb(error);
+              return;
             }
             this._fragments.push(buf);
           }
-          const er = this.dataMessage();
-          if (er)
-            return cb(er);
-          this.startLoop(cb);
+          this.dataMessage(cb);
+          if (this._state === GET_INFO)
+            this.startLoop(cb);
         });
       }
       /**
        * Handles a data message.
        *
-       * @return {(Error|undefined)} A possible error
+       * @param {Function} cb Callback
        * @private
        */
-      dataMessage() {
-        if (this._fin) {
-          const messageLength = this._messageLength;
-          const fragments = this._fragments;
-          this._totalPayloadLength = 0;
-          this._messageLength = 0;
-          this._fragmented = 0;
-          this._fragments = [];
-          if (this._opcode === 2) {
-            let data;
-            if (this._binaryType === "nodebuffer") {
-              data = concat2(fragments, messageLength);
-            } else if (this._binaryType === "arraybuffer") {
-              data = toArrayBuffer(concat2(fragments, messageLength));
-            } else {
-              data = fragments;
-            }
+      dataMessage(cb) {
+        if (!this._fin) {
+          this._state = GET_INFO;
+          return;
+        }
+        const messageLength = this._messageLength;
+        const fragments = this._fragments;
+        this._totalPayloadLength = 0;
+        this._messageLength = 0;
+        this._fragmented = 0;
+        this._fragments = [];
+        if (this._opcode === 2) {
+          let data;
+          if (this._binaryType === "nodebuffer") {
+            data = concat2(fragments, messageLength);
+          } else if (this._binaryType === "arraybuffer") {
+            data = toArrayBuffer(concat2(fragments, messageLength));
+          } else if (this._binaryType === "blob") {
+            data = new Blob(fragments);
+          } else {
+            data = fragments;
+          }
+          if (this._allowSynchronousEvents) {
             this.emit("message", data, true);
+            this._state = GET_INFO;
           } else {
-            const buf = concat2(fragments, messageLength);
-            if (!this._skipUTF8Validation && !isValidUTF8(buf)) {
-              this._loop = false;
-              return error(
-                Error,
-                "invalid UTF-8 sequence",
-                true,
-                1007,
-                "WS_ERR_INVALID_UTF8"
-              );
-            }
+            this._state = DEFER_EVENT;
+            setImmediate(() => {
+              this.emit("message", data, true);
+              this._state = GET_INFO;
+              this.startLoop(cb);
+            });
+          }
+        } else {
+          const buf = concat2(fragments, messageLength);
+          if (!this._skipUTF8Validation && !isValidUTF8(buf)) {
+            const error = this.createError(
+              Error,
+              "invalid UTF-8 sequence",
+              true,
+              1007,
+              "WS_ERR_INVALID_UTF8"
+            );
+            cb(error);
+            return;
+          }
+          if (this._state === INFLATING || this._allowSynchronousEvents) {
             this.emit("message", buf, false);
+            this._state = GET_INFO;
+          } else {
+            this._state = DEFER_EVENT;
+            setImmediate(() => {
+              this.emit("message", buf, false);
+              this._state = GET_INFO;
+              this.startLoop(cb);
+            });
           }
         }
-        this._state = GET_INFO;
       }
       /**
        * Handles a control message.
@@ -140548,22 +140785,24 @@ var require_receiver = __commonJS({
        * @return {(Error|RangeError|undefined)} A possible error
        * @private
        */
-      controlMessage(data) {
+      controlMessage(data, cb) {
         if (this._opcode === 8) {
-          this._loop = false;
           if (data.length === 0) {
+            this._loop = false;
             this.emit("conclude", 1005, EMPTY_BUFFER);
             this.end();
           } else {
             const code7 = data.readUInt16BE(0);
             if (!isValidStatusCode(code7)) {
-              return error(
+              const error = this.createError(
                 RangeError,
                 `invalid status code ${code7}`,
                 true,
                 1002,
                 "WS_ERR_INVALID_CLOSE_CODE"
               );
+              cb(error);
+              return;
             }
             const buf = new FastBuffer(
               data.buffer,
@@ -140571,35 +140810,60 @@ var require_receiver = __commonJS({
               data.length - 2
             );
             if (!this._skipUTF8Validation && !isValidUTF8(buf)) {
-              return error(
+              const error = this.createError(
                 Error,
                 "invalid UTF-8 sequence",
                 true,
                 1007,
                 "WS_ERR_INVALID_UTF8"
               );
+              cb(error);
+              return;
             }
+            this._loop = false;
             this.emit("conclude", code7, buf);
             this.end();
           }
-        } else if (this._opcode === 9) {
-          this.emit("ping", data);
+          this._state = GET_INFO;
+          return;
+        }
+        if (this._allowSynchronousEvents) {
+          this.emit(this._opcode === 9 ? "ping" : "pong", data);
+          this._state = GET_INFO;
         } else {
-          this.emit("pong", data);
+          this._state = DEFER_EVENT;
+          setImmediate(() => {
+            this.emit(this._opcode === 9 ? "ping" : "pong", data);
+            this._state = GET_INFO;
+            this.startLoop(cb);
+          });
         }
-        this._state = GET_INFO;
+      }
+      /**
+       * Builds an error object.
+       *
+       * @param {function(new:Error|RangeError)} ErrorCtor The error constructor
+       * @param {String} message The error message
+       * @param {Boolean} prefix Specifies whether or not to add a default prefix to
+       *     `message`
+       * @param {Number} statusCode The status code
+       * @param {String} errorCode The exposed error code
+       * @return {(Error|RangeError)} The error
+       * @private
+       */
+      createError(ErrorCtor, message, prefix2, statusCode, errorCode) {
+        this._loop = false;
+        this._errored = true;
+        const err = new ErrorCtor(
+          prefix2 ? `Invalid WebSocket frame: ${message}` : message
+        );
+        Error.captureStackTrace(err, this.createError);
+        err.code = errorCode;
+        err[kStatusCode] = statusCode;
+        return err;
       }
     };
     module2.exports = Receiver2;
-    function error(ErrorCtor, message, prefix2, statusCode, errorCode) {
-      const err = new ErrorCtor(
-        prefix2 ? `Invalid WebSocket frame: ${message}` : message
-      );
-      Error.captureStackTrace(err, error);
-      err.code = errorCode;
-      err[kStatusCode] = statusCode;
-      return err;
-    }
   }
 });
 
@@ -140607,20 +140871,25 @@ var require_receiver = __commonJS({
 var require_sender = __commonJS({
   "../../node_modules/ws/lib/sender.js"(exports2, module2) {
     "use strict";
-    var net3 = require("net");
-    var tls = require("tls");
+    var { Duplex: Duplex2 } = require("stream");
     var { randomFillSync: randomFillSync2 } = require("crypto");
     var PerMessageDeflate = require_permessage_deflate();
-    var { EMPTY_BUFFER } = require_constants6();
-    var { isValidStatusCode } = require_validation();
+    var { EMPTY_BUFFER, kWebSocket, NOOP } = require_constants6();
+    var { isBlob: isBlob2, isValidStatusCode } = require_validation();
     var { mask: applyMask, toBuffer } = require_buffer_util();
     var kByteLength = Symbol("kByteLength");
     var maskBuffer = Buffer.alloc(4);
+    var RANDOM_POOL_SIZE = 8 * 1024;
+    var randomPool;
+    var randomPoolPointer = RANDOM_POOL_SIZE;
+    var DEFAULT = 0;
+    var DEFLATING = 1;
+    var GET_BLOB_DATA = 2;
     var Sender2 = class {
       /**
        * Creates a Sender instance.
        *
-       * @param {(net.Socket|tls.Socket)} socket The connection socket
+       * @param {Duplex} socket The connection socket
        * @param {Object} [extensions] An object containing the negotiated extensions
        * @param {Function} [generateMask] The function used to generate the masking
        *     key
@@ -140635,8 +140904,10 @@ var require_sender = __commonJS({
         this._firstFragment = true;
         this._compress = false;
         this._bufferedBytes = 0;
-        this._deflating = false;
         this._queue = [];
+        this._state = DEFAULT;
+        this.onerror = NOOP;
+        this[kWebSocket] = void 0;
       }
       /**
        * Frames a piece of data according to the HyBi WebSocket protocol.
@@ -140669,7 +140940,17 @@ var require_sender = __commonJS({
           if (options.generateMask) {
             options.generateMask(mask2);
           } else {
-            randomFillSync2(mask2, 0, 4);
+            if (randomPoolPointer === RANDOM_POOL_SIZE) {
+              if (randomPool === void 0) {
+                randomPool = Buffer.alloc(RANDOM_POOL_SIZE);
+              }
+              randomFillSync2(randomPool, 0, RANDOM_POOL_SIZE);
+              randomPoolPointer = 0;
+            }
+            mask2[0] = randomPool[randomPoolPointer++];
+            mask2[1] = randomPool[randomPoolPointer++];
+            mask2[2] = randomPool[randomPoolPointer++];
+            mask2[3] = randomPool[randomPoolPointer++];
           }
           skipMasking = (mask2[0] | mask2[1] | mask2[2] | mask2[3]) === 0;
           offset = 6;
@@ -140762,7 +141043,7 @@ var require_sender = __commonJS({
           readOnly: false,
           rsv1: false
         };
-        if (this._deflating) {
+        if (this._state !== DEFAULT) {
           this.enqueue([this.dispatch, buf, false, options, cb]);
         } else {
           this.sendFrame(Sender2.frame(buf, options), cb);
@@ -140782,6 +141063,9 @@ var require_sender = __commonJS({
         if (typeof data === "string") {
           byteLength2 = Buffer.byteLength(data);
           readOnly = false;
+        } else if (isBlob2(data)) {
+          byteLength2 = data.size;
+          readOnly = false;
         } else {
           data = toBuffer(data);
           byteLength2 = data.length;
@@ -140800,7 +141084,13 @@ var require_sender = __commonJS({
           readOnly,
           rsv1: false
         };
-        if (this._deflating) {
+        if (isBlob2(data)) {
+          if (this._state !== DEFAULT) {
+            this.enqueue([this.getBlobData, data, false, options, cb]);
+          } else {
+            this.getBlobData(data, false, options, cb);
+          }
+        } else if (this._state !== DEFAULT) {
           this.enqueue([this.dispatch, data, false, options, cb]);
         } else {
           this.sendFrame(Sender2.frame(data, options), cb);
@@ -140820,6 +141110,9 @@ var require_sender = __commonJS({
         if (typeof data === "string") {
           byteLength2 = Buffer.byteLength(data);
           readOnly = false;
+        } else if (isBlob2(data)) {
+          byteLength2 = data.size;
+          readOnly = false;
         } else {
           data = toBuffer(data);
           byteLength2 = data.length;
@@ -140838,7 +141131,13 @@ var require_sender = __commonJS({
           readOnly,
           rsv1: false
         };
-        if (this._deflating) {
+        if (isBlob2(data)) {
+          if (this._state !== DEFAULT) {
+            this.enqueue([this.getBlobData, data, false, options, cb]);
+          } else {
+            this.getBlobData(data, false, options, cb);
+          }
+        } else if (this._state !== DEFAULT) {
           this.enqueue([this.dispatch, data, false, options, cb]);
         } else {
           this.sendFrame(Sender2.frame(data, options), cb);
@@ -140869,6 +141168,9 @@ var require_sender = __commonJS({
         if (typeof data === "string") {
           byteLength2 = Buffer.byteLength(data);
           readOnly = false;
+        } else if (isBlob2(data)) {
+          byteLength2 = data.size;
+          readOnly = false;
         } else {
           data = toBuffer(data);
           byteLength2 = data.length;
@@ -140886,38 +141188,75 @@ var require_sender = __commonJS({
         }
         if (options.fin)
           this._firstFragment = true;
-        if (perMessageDeflate) {
-          const opts = {
-            [kByteLength]: byteLength2,
-            fin: options.fin,
-            generateMask: this._generateMask,
-            mask: options.mask,
-            maskBuffer: this._maskBuffer,
-            opcode,
-            readOnly,
-            rsv1
-          };
-          if (this._deflating) {
-            this.enqueue([this.dispatch, data, this._compress, opts, cb]);
+        const opts = {
+          [kByteLength]: byteLength2,
+          fin: options.fin,
+          generateMask: this._generateMask,
+          mask: options.mask,
+          maskBuffer: this._maskBuffer,
+          opcode,
+          readOnly,
+          rsv1
+        };
+        if (isBlob2(data)) {
+          if (this._state !== DEFAULT) {
+            this.enqueue([this.getBlobData, data, this._compress, opts, cb]);
           } else {
-            this.dispatch(data, this._compress, opts, cb);
-          }
-        } else {
-          this.sendFrame(
-            Sender2.frame(data, {
-              [kByteLength]: byteLength2,
-              fin: options.fin,
-              generateMask: this._generateMask,
-              mask: options.mask,
-              maskBuffer: this._maskBuffer,
-              opcode,
-              readOnly,
-              rsv1: false
-            }),
-            cb
-          );
+            this.getBlobData(data, this._compress, opts, cb);
+          }
+        } else if (this._state !== DEFAULT) {
+          this.enqueue([this.dispatch, data, this._compress, opts, cb]);
+        } else {
+          this.dispatch(data, this._compress, opts, cb);
         }
       }
+      /**
+       * Gets the contents of a blob as binary data.
+       *
+       * @param {Blob} blob The blob
+       * @param {Boolean} [compress=false] Specifies whether or not to compress
+       *     the data
+       * @param {Object} options Options object
+       * @param {Boolean} [options.fin=false] Specifies whether or not to set the
+       *     FIN bit
+       * @param {Function} [options.generateMask] The function used to generate the
+       *     masking key
+       * @param {Boolean} [options.mask=false] Specifies whether or not to mask
+       *     `data`
+       * @param {Buffer} [options.maskBuffer] The buffer used to store the masking
+       *     key
+       * @param {Number} options.opcode The opcode
+       * @param {Boolean} [options.readOnly=false] Specifies whether `data` can be
+       *     modified
+       * @param {Boolean} [options.rsv1=false] Specifies whether or not to set the
+       *     RSV1 bit
+       * @param {Function} [cb] Callback
+       * @private
+       */
+      getBlobData(blob, compress, options, cb) {
+        this._bufferedBytes += options[kByteLength];
+        this._state = GET_BLOB_DATA;
+        blob.arrayBuffer().then((arrayBuffer) => {
+          if (this._socket.destroyed) {
+            const err = new Error(
+              "The socket was closed while the blob was being read"
+            );
+            process.nextTick(callCallbacks, this, err, cb);
+            return;
+          }
+          this._bufferedBytes -= options[kByteLength];
+          const data = toBuffer(arrayBuffer);
+          if (!compress) {
+            this._state = DEFAULT;
+            this.sendFrame(Sender2.frame(data, options), cb);
+            this.dequeue();
+          } else {
+            this.dispatch(data, compress, options, cb);
+          }
+        }).catch((err) => {
+          process.nextTick(onError, this, err, cb);
+        });
+      }
       /**
        * Dispatches a message.
        *
@@ -140948,24 +141287,17 @@ var require_sender = __commonJS({
         }
         const perMessageDeflate = this._extensions[PerMessageDeflate.extensionName];
         this._bufferedBytes += options[kByteLength];
-        this._deflating = true;
+        this._state = DEFLATING;
         perMessageDeflate.compress(data, options.fin, (_3, buf) => {
           if (this._socket.destroyed) {
             const err = new Error(
               "The socket was closed while data was being compressed"
             );
-            if (typeof cb === "function")
-              cb(err);
-            for (let i2 = 0; i2 < this._queue.length; i2++) {
-              const params = this._queue[i2];
-              const callback = params[params.length - 1];
-              if (typeof callback === "function")
-                callback(err);
-            }
+            callCallbacks(this, err, cb);
             return;
           }
           this._bufferedBytes -= options[kByteLength];
-          this._deflating = false;
+          this._state = DEFAULT;
           options.readOnly = false;
           this.sendFrame(Sender2.frame(buf, options), cb);
           this.dequeue();
@@ -140977,7 +141309,7 @@ var require_sender = __commonJS({
        * @private
        */
       dequeue() {
-        while (!this._deflating && this._queue.length) {
+        while (this._state === DEFAULT && this._queue.length) {
           const params = this._queue.shift();
           this._bufferedBytes -= params[3][kByteLength];
           Reflect.apply(params[0], this, params.slice(1));
@@ -141012,6 +141344,20 @@ var require_sender = __commonJS({
       }
     };
     module2.exports = Sender2;
+    function callCallbacks(sender, err, cb) {
+      if (typeof cb === "function")
+        cb(err);
+      for (let i2 = 0; i2 < sender._queue.length; i2++) {
+        const params = sender._queue[i2];
+        const callback = params[params.length - 1];
+        if (typeof callback === "function")
+          callback(err);
+      }
+    }
+    function onError(sender, err, cb) {
+      callCallbacks(sender, err, cb);
+      sender.onerror(err);
+    }
   }
 });
 
@@ -141424,11 +141770,12 @@ var require_websocket = __commonJS({
     var net3 = require("net");
     var tls = require("tls");
     var { randomBytes, createHash: createHash5 } = require("crypto");
-    var { Readable } = require("stream");
+    var { Duplex: Duplex2, Readable } = require("stream");
     var { URL: URL4 } = require("url");
     var PerMessageDeflate = require_permessage_deflate();
     var Receiver2 = require_receiver();
     var Sender2 = require_sender();
+    var { isBlob: isBlob2 } = require_validation();
     var {
       BINARY_TYPES,
       EMPTY_BUFFER,
@@ -141465,6 +141812,7 @@ var require_websocket = __commonJS({
         this._closeFrameSent = false;
         this._closeMessage = EMPTY_BUFFER;
         this._closeTimer = null;
+        this._errorEmitted = false;
         this._extensions = {};
         this._paused = false;
         this._protocol = "";
@@ -141488,13 +141836,13 @@ var require_websocket = __commonJS({
           }
           initAsClient(this, address, protocols, options);
         } else {
+          this._autoPong = options.autoPong;
           this._isServer = true;
         }
       }
       /**
-       * This deviates from the WHATWG interface since ws doesn't support the
-       * required default "blob" type (instead we define a custom "nodebuffer"
-       * type).
+       * For historical reasons, the custom "nodebuffer" type is used by the default
+       * instead of "blob".
        *
        * @type {String}
        */
@@ -141577,10 +141925,12 @@ var require_websocket = __commonJS({
       /**
        * Set up the socket and the internal resources.
        *
-       * @param {(net.Socket|tls.Socket)} socket The network socket between the
-       *     server and client
+       * @param {Duplex} socket The network socket between the server and client
        * @param {Buffer} head The first packet of the upgraded stream
        * @param {Object} options Options object
+       * @param {Boolean} [options.allowSynchronousEvents=false] Specifies whether
+       *     any of the `'message'`, `'ping'`, and `'pong'` events can be emitted
+       *     multiple times in the same tick
        * @param {Function} [options.generateMask] The function used to generate the
        *     masking key
        * @param {Number} [options.maxPayload=0] The maximum allowed message size
@@ -141590,16 +141940,19 @@ var require_websocket = __commonJS({
        */
       setSocket(socket, head2, options) {
         const receiver = new Receiver2({
+          allowSynchronousEvents: options.allowSynchronousEvents,
           binaryType: this.binaryType,
           extensions: this._extensions,
           isServer: this._isServer,
           maxPayload: options.maxPayload,
           skipUTF8Validation: options.skipUTF8Validation
         });
-        this._sender = new Sender2(socket, this._extensions, options.generateMask);
+        const sender = new Sender2(socket, this._extensions, options.generateMask);
         this._receiver = receiver;
+        this._sender = sender;
         this._socket = socket;
         receiver[kWebSocket] = this;
+        sender[kWebSocket] = this;
         socket[kWebSocket] = this;
         receiver.on("conclude", receiverOnConclude);
         receiver.on("drain", receiverOnDrain);
@@ -141607,8 +141960,11 @@ var require_websocket = __commonJS({
         receiver.on("message", receiverOnMessage);
         receiver.on("ping", receiverOnPing);
         receiver.on("pong", receiverOnPong);
-        socket.setTimeout(0);
-        socket.setNoDelay();
+        sender.onerror = senderOnError;
+        if (socket.setTimeout)
+          socket.setTimeout(0);
+        if (socket.setNoDelay)
+          socket.setNoDelay();
         if (head2.length > 0)
           socket.unshift(head2);
         socket.on("close", socketOnClose);
@@ -141679,10 +142035,7 @@ var require_websocket = __commonJS({
             this._socket.end();
           }
         });
-        this._closeTimer = setTimeout(
-          this._socket.destroy.bind(this._socket),
-          closeTimeout
-        );
+        setCloseTimer(this);
       }
       /**
        * Pause the socket.
@@ -141900,6 +142253,8 @@ var require_websocket = __commonJS({
     module2.exports = WebSocket3;
     function initAsClient(websocket, address, protocols, options) {
       const opts = {
+        allowSynchronousEvents: true,
+        autoPong: true,
         protocolVersion: protocolVersions[1],
         maxPayload: 100 * 1024 * 1024,
         skipUTF8Validation: false,
@@ -141907,7 +142262,6 @@ var require_websocket = __commonJS({
         followRedirects: false,
         maxRedirects: 10,
         ...options,
-        createConnection: void 0,
         socketPath: void 0,
         hostname: void 0,
         protocol: void 0,
@@ -141917,6 +142271,7 @@ var require_websocket = __commonJS({
         path: void 0,
         port: void 0
       };
+      websocket._autoPong = opts.autoPong;
       if (!protocolVersions.includes(opts.protocolVersion)) {
         throw new RangeError(
           `Unsupported protocol version: ${opts.protocolVersion} (supported versions: ${protocolVersions.join(", ")})`
@@ -141925,20 +142280,24 @@ var require_websocket = __commonJS({
       let parsedUrl;
       if (address instanceof URL4) {
         parsedUrl = address;
-        websocket._url = address.href;
       } else {
         try {
           parsedUrl = new URL4(address);
         } catch (e2) {
           throw new SyntaxError(`Invalid URL: ${address}`);
         }
-        websocket._url = address;
       }
+      if (parsedUrl.protocol === "http:") {
+        parsedUrl.protocol = "ws:";
+      } else if (parsedUrl.protocol === "https:") {
+        parsedUrl.protocol = "wss:";
+      }
+      websocket._url = parsedUrl.href;
       const isSecure = parsedUrl.protocol === "wss:";
       const isIpcUrl = parsedUrl.protocol === "ws+unix:";
       let invalidUrlMessage;
       if (parsedUrl.protocol !== "ws:" && !isSecure && !isIpcUrl) {
-        invalidUrlMessage = `The URL's protocol must be one of "ws:", "wss:", or "ws+unix:"`;
+        invalidUrlMessage = `The URL's protocol must be one of "ws:", "wss:", "http:", "https", or "ws+unix:"`;
       } else if (isIpcUrl && !parsedUrl.pathname) {
         invalidUrlMessage = "The URL's pathname is empty";
       } else if (parsedUrl.hash) {
@@ -141958,7 +142317,7 @@ var require_websocket = __commonJS({
       const request = isSecure ? https3.request : http5.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
-      opts.createConnection = isSecure ? tlsConnect : netConnect;
+      opts.createConnection = opts.createConnection || (isSecure ? tlsConnect : netConnect);
       opts.defaultPort = opts.defaultPort || defaultPort;
       opts.port = parsedUrl.port || defaultPort;
       opts.host = parsedUrl.hostname.startsWith("[") ? parsedUrl.hostname.slice(1, -1) : parsedUrl.hostname;
@@ -142082,7 +142441,8 @@ var require_websocket = __commonJS({
         if (websocket.readyState !== WebSocket3.CONNECTING)
           return;
         req = websocket._req = null;
-        if (res.headers.upgrade.toLowerCase() !== "websocket") {
+        const upgrade = res.headers.upgrade;
+        if (upgrade === void 0 || upgrade.toLowerCase() !== "websocket") {
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
@@ -142139,6 +142499,7 @@ var require_websocket = __commonJS({
           websocket._extensions[PerMessageDeflate.extensionName] = perMessageDeflate;
         }
         websocket.setSocket(socket, head2, {
+          allowSynchronousEvents: opts.allowSynchronousEvents,
           generateMask: opts.generateMask,
           maxPayload: opts.maxPayload,
           skipUTF8Validation: opts.skipUTF8Validation
@@ -142152,6 +142513,7 @@ var require_websocket = __commonJS({
     }
     function emitErrorAndClose(websocket, err) {
       websocket._readyState = WebSocket3.CLOSING;
+      websocket._errorEmitted = true;
       websocket.emit("error", err);
       websocket.emitClose();
     }
@@ -142185,7 +142547,7 @@ var require_websocket = __commonJS({
     }
     function sendAfterClose(websocket, data, cb) {
       if (data) {
-        const length = toBuffer(data).length;
+        const length = isBlob2(data) ? data.size : toBuffer(data).length;
         if (websocket._socket)
           websocket._sender._bufferedBytes += length;
         else
@@ -142224,7 +142586,10 @@ var require_websocket = __commonJS({
         process.nextTick(resume, websocket._socket);
         websocket.close(err[kStatusCode]);
       }
-      websocket.emit("error", err);
+      if (!websocket._errorEmitted) {
+        websocket._errorEmitted = true;
+        websocket.emit("error", err);
+      }
     }
     function receiverOnFinish() {
       this[kWebSocket].emitClose();
@@ -142234,7 +142599,8 @@ var require_websocket = __commonJS({
     }
     function receiverOnPing(data) {
       const websocket = this[kWebSocket];
-      websocket.pong(data, !websocket._isServer, NOOP);
+      if (websocket._autoPong)
+        websocket.pong(data, !this._isServer, NOOP);
       websocket.emit("ping", data);
     }
     function receiverOnPong(data) {
@@ -142243,6 +142609,26 @@ var require_websocket = __commonJS({
     function resume(stream3) {
       stream3.resume();
     }
+    function senderOnError(err) {
+      const websocket = this[kWebSocket];
+      if (websocket.readyState === WebSocket3.CLOSED)
+        return;
+      if (websocket.readyState === WebSocket3.OPEN) {
+        websocket._readyState = WebSocket3.CLOSING;
+        setCloseTimer(websocket);
+      }
+      this._socket.end();
+      if (!websocket._errorEmitted) {
+        websocket._errorEmitted = true;
+        websocket.emit("error", err);
+      }
+    }
+    function setCloseTimer(websocket) {
+      websocket._closeTimer = setTimeout(
+        websocket._socket.destroy.bind(websocket._socket),
+        closeTimeout
+      );
+    }
     function socketOnClose() {
       const websocket = this[kWebSocket];
       this.removeListener("close", socketOnClose);
@@ -142340,9 +142726,7 @@ var require_websocket_server = __commonJS({
     "use strict";
     var EventEmitter4 = require("events");
     var http5 = require("http");
-    var https3 = require("https");
-    var net3 = require("net");
-    var tls = require("tls");
+    var { Duplex: Duplex2 } = require("stream");
     var { createHash: createHash5 } = require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
@@ -142358,6 +142742,11 @@ var require_websocket_server = __commonJS({
        * Create a `WebSocketServer` instance.
        *
        * @param {Object} options Configuration options
+       * @param {Boolean} [options.allowSynchronousEvents=true] Specifies whether
+       *     any of the `'message'`, `'ping'`, and `'pong'` events can be emitted
+       *     multiple times in the same tick
+       * @param {Boolean} [options.autoPong=true] Specifies whether or not to
+       *     automatically send a pong in response to a ping
        * @param {Number} [options.backlog=511] The maximum length of the queue of
        *     pending connections
        * @param {Boolean} [options.clientTracking=true] Specifies whether or not to
@@ -142383,6 +142772,8 @@ var require_websocket_server = __commonJS({
       constructor(options, callback) {
         super();
         options = {
+          allowSynchronousEvents: true,
+          autoPong: true,
           maxPayload: 100 * 1024 * 1024,
           skipUTF8Validation: false,
           perMessageDeflate: false,
@@ -142523,8 +142914,7 @@ var require_websocket_server = __commonJS({
        * Handle a HTTP Upgrade request.
        *
        * @param {http.IncomingMessage} req The request object
-       * @param {(net.Socket|tls.Socket)} socket The network socket between the
-       *     server and client
+       * @param {Duplex} socket The network socket between the server and client
        * @param {Buffer} head The first packet of the upgraded stream
        * @param {Function} cb Callback
        * @public
@@ -142532,18 +142922,19 @@ var require_websocket_server = __commonJS({
       handleUpgrade(req, socket, head2, cb) {
         socket.on("error", socketOnError);
         const key2 = req.headers["sec-websocket-key"];
+        const upgrade = req.headers.upgrade;
         const version4 = +req.headers["sec-websocket-version"];
         if (req.method !== "GET") {
           const message = "Invalid HTTP method";
           abortHandshakeOrEmitwsClientError(this, req, socket, 405, message);
           return;
         }
-        if (req.headers.upgrade.toLowerCase() !== "websocket") {
+        if (upgrade === void 0 || upgrade.toLowerCase() !== "websocket") {
           const message = "Invalid Upgrade header";
           abortHandshakeOrEmitwsClientError(this, req, socket, 400, message);
           return;
         }
-        if (!key2 || !keyRegex.test(key2)) {
+        if (key2 === void 0 || !keyRegex.test(key2)) {
           const message = "Missing or invalid Sec-WebSocket-Key header";
           abortHandshakeOrEmitwsClientError(this, req, socket, 400, message);
           return;
@@ -142623,8 +143014,7 @@ var require_websocket_server = __commonJS({
        * @param {String} key The value of the `Sec-WebSocket-Key` header
        * @param {Set} protocols The subprotocols
        * @param {http.IncomingMessage} req The request object
-       * @param {(net.Socket|tls.Socket)} socket The network socket between the
-       *     server and client
+       * @param {Duplex} socket The network socket between the server and client
        * @param {Buffer} head The first packet of the upgraded stream
        * @param {Function} cb Callback
        * @throws {Error} If called more than once with the same socket
@@ -142647,7 +143037,7 @@ var require_websocket_server = __commonJS({
           "Connection: Upgrade",
           `Sec-WebSocket-Accept: ${digest}`
         ];
-        const ws = new this.options.WebSocket(null);
+        const ws = new this.options.WebSocket(null, void 0, this.options);
         if (protocols.size) {
           const protocol = this.options.handleProtocols ? this.options.handleProtocols(protocols, req) : protocols.values().next().value;
           if (protocol) {
@@ -142667,6 +143057,7 @@ var require_websocket_server = __commonJS({
         socket.write(headers.concat("\r\n").join("\r\n"));
         socket.removeListener("error", socketOnError);
         ws.setSocket(socket, head2, {
+          allowSynchronousEvents: this.options.allowSynchronousEvents,
           maxPayload: this.options.maxPayload,
           skipUTF8Validation: this.options.skipUTF8Validation
         });
@@ -193500,7 +193891,7 @@ var {
 } = import_index.default;
 
 // src/version.ts
-var version = "1.3.13";
+var version = "1.3.14";
 var version_default = version;
 
 // ../myst-cli/dist/build/build.js
@@ -288984,7 +289375,7 @@ var import_node_path14 = __toESM(require("path"), 1);
 var import_nbtx = __toESM(require_cjs2(), 1);
 
 // ../myst-cli/dist/version.js
-var version2 = "1.3.13";
+var version2 = "1.3.14";
 var version_default2 = version2;
 
 // ../myst-cli/dist/utils/headers.js
@@ -304400,7 +304791,7 @@ function renderImports(kind, output2, imports, packages, preamble) {
 }
 
 // ../jtex/dist/version.js
-var version3 = "1.0.18";
+var version3 = "1.0.19";
 var version_default3 = version3;
 
 // ../jtex/dist/jtex.js
@@ -332811,6 +333202,13 @@ content-disposition/index.js:
    * MIT Licensed
    *)
 
+encodeurl/index.js:
+  (*!
+   * encodeurl
+   * Copyright(c) 2016 Douglas Christopher Wilson
+   * MIT Licensed
+   *)
+
 etag/index.js:
   (*!
    * etag