diff --git a/js/etherpad_nextcloud-embed-main.mjs b/js/etherpad_nextcloud-embed-main.mjs
index 13702f3..39de9e2 100644
--- a/js/etherpad_nextcloud-embed-main.mjs
+++ b/js/etherpad_nextcloud-embed-main.mjs
@@ -1,2 +1,2 @@
-import{o as se}from"./oc-compat-hVqZy-MX.chunk.mjs";import{c as ce}from"./pad-sync-B0gz-oBk.chunk.mjs";import{f as T}from"./fetch-helpers-C4MxuNvt.chunk.mjs";(function(){const r=document.getElementById("etherpad-nextcloud-embed");if(!(r instanceof HTMLElement))return;const u=Number(r.getAttribute("data-file-id")||""),w=String(r.getAttribute("data-open-by-id-url")||"").trim(),A=String(r.getAttribute("data-initialize-by-id-url-template")||"").trim(),I=String(r.getAttribute("data-recover-url-template")||"").trim(),N=String(r.getAttribute("data-find-original-url-template")||"").trim(),D=String(r.getAttribute("data-request-token")||"").trim(),B=String(r.getAttribute("data-trusted-origins")||"").split(/\s+/).map(e=>e.trim()).filter(Boolean),i=r.querySelector("[data-epnc-embed-loading]"),d=r.querySelector("[data-epnc-embed-error]"),q=r.querySelector("[data-epnc-embed-error-message]"),l=r.querySelector("[data-epnc-embed-recovery]"),m=r.querySelector("[data-epnc-embed-recovery-message]"),h=r.querySelector("[data-epnc-embed-recovery-body]"),p=r.querySelector("[data-epnc-embed-recovery-actions]"),o=r.querySelector("[data-epnc-embed-iframe]"),z=String(r.getAttribute("data-l10n-external-title")||"Pad from another server").trim(),G=String(r.getAttribute("data-l10n-external-message")||"Read-only snapshot from the .pad file.").trim(),Y=String(r.getAttribute("data-l10n-external-empty")||"No synced snapshot is stored in this .pad file yet.").trim(),J=String(r.getAttribute("data-l10n-external-link")||"Open original pad").trim(),K=String(r.getAttribute("data-l10n-recovery-checking")||"Checking for the original pad...").trim(),Q=String(r.getAttribute("data-l10n-recovery-copy-body")||"").trim(),V=String(r.getAttribute("data-l10n-recovery-orphan-body")||"").trim(),W=String(r.getAttribute("data-l10n-recovery-open-original")||"Open the original .pad file").trim(),k=String(r.getAttribute("data-l10n-recovery-create-new")||"Create new pad from this file").trim(),X=String(r.getAttribute("data-l10n-recovery-creating")||"Creating new pad...").trim();let C=null;const y=()=>se(D),f=ce({requestToken:y}),_=e=>{i instanceof HTMLElement&&(i.hidden=!0,i.classList.remove("epnc-embed__loading--snapshot")),o instanceof HTMLIFrameElement&&(o.hidden=!0,o.removeAttribute("src")),q instanceof HTMLElement&&(q.textContent=String(e||"Unknown error.")),d instanceof HTMLElement&&(d.hidden=!1)},Z=(e,t,n)=>{if(d instanceof HTMLElement&&(d.hidden=!0),o instanceof HTMLIFrameElement&&(o.hidden=!0,o.removeAttribute("src")),!(i instanceof HTMLElement))return;i.hidden=!1,i.classList.add("epnc-embed__loading--snapshot"),i.textContent="";const a=document.createElement("div");a.className="epnc-embed__snapshot";const s=document.createElement("div");s.className="epnc-embed__snapshot-inner";const g=document.createElement("h2");g.className="epnc-embed__snapshot-title",g.textContent=z;const c=document.createElement("p");c.className="epnc-embed__snapshot-message",c.textContent=G;const b=document.createElement("a");b.className="epnc-embed__snapshot-link",b.href=e,b.target="_blank",b.rel="noopener noreferrer",b.textContent=J;const H=document.createElement("div");H.className="epnc-embed__snapshot-actions",H.appendChild(b);const x=String(n||"").trim()!=="",L=document.createElement(x?"div":"pre");L.className=x?"epnc-embed__snapshot-text epnc-embed__snapshot-text--html":"epnc-embed__snapshot-text",x?L.innerHTML=String(n):L.textContent=String(t||"").trim()!==""?String(t):Y;const S=document.createElement("div");S.className="epnc-embed__snapshot-heading",S.appendChild(g),S.appendChild(c);const v=document.createElement("div");v.className="epnc-embed__snapshot-header",v.appendChild(S),v.appendChild(H),s.appendChild(v),s.appendChild(L),a.appendChild(s),i.appendChild(a)},$=e=>{if(!(o instanceof HTMLIFrameElement)){_("Embed iframe is not available.");return}d instanceof HTMLElement&&(d.hidden=!0),i instanceof HTMLElement&&i.classList.remove("epnc-embed__loading--snapshot"),o.hidden=!0;const t=()=>{o.removeEventListener("load",t),window.setTimeout(()=>{i instanceof HTMLElement&&(i.hidden=!0),o.hidden=!1},100)};o.addEventListener("load",t,{once:!0}),o.src=e},M=(e,t,n,a={})=>{!e||typeof e.postMessage!="function"||e.postMessage(Object.assign({type:n,fileId:u},a),t)},ee=e=>!e||e==="null"?!1:e===window.location.origin?!0:B.includes(e),te=()=>{C||(C=e=>{const t=String(e.origin||"");if(!ee(t))return;const n=e.data,a=typeof n=="string"?n:n&&typeof n=="object"&&typeof n.type=="string"?n.type:"";if(a){if(a==="epnc:host-visible"){f.start();return}if(a==="epnc:host-hidden"){f.fireAndForget(!0,!0),f.stop();return}if(a==="epnc:host-before-close"||a==="epnc:host-sync-now"){const s=a!=="epnc:host-sync-now",g=a==="epnc:host-before-close"?"before-close":"sync-now";M(e.source,t,"epnc:sync-flush-started",{reason:g}),f.sync(!0,s).then(c=>{M(e.source,t,"epnc:sync-flush-finished",{reason:g,result:c&&typeof c=="object"?c:{}})}).catch(c=>{M(e.source,t,"epnc:sync-flush-failed",{reason:g,message:c instanceof Error?c.message:"Sync failed."})}),s&&f.stop()}}},window.addEventListener("message",C))},ne=e=>e instanceof Error?String(e.message||"").includes("Missing YAML frontmatter"):!1,F=async()=>{const e=new URLSearchParams;e.set("fileId",String(u));const t=await T(w,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded;charset=UTF-8",requesttoken:y()},body:e.toString()});if(!t||typeof t.url!="string"||t.url.trim()==="")throw new Error("Pad open API did not return a valid URL.");return t},re=async()=>{const e=A.replace("__FILE_ID__",encodeURIComponent(String(u))),t=await T(e,{method:"POST",headers:{requesttoken:y()}});t&&t.status==="migrated_from_legacy"&&console.info("Legacy Ownpad .pad migrated to managed format on first open.")},E=()=>{i instanceof HTMLElement&&(i.hidden=!0),d instanceof HTMLElement&&(d.hidden=!0),l instanceof HTMLElement&&(l.hidden=!0),o instanceof HTMLIFrameElement&&(o.hidden=!0,o.removeAttribute("src"))},ae=()=>{l instanceof HTMLElement&&(E(),l.hidden=!1,m instanceof HTMLElement&&(m.textContent=K),h instanceof HTMLElement&&(h.textContent=""),p instanceof HTMLElement&&p.replaceChildren())},P=(e,t)=>{const n=document.createElement("button");return n.type="button",n.className="epnc-embed__recovery-button",n.textContent=e,n.addEventListener("click",t),n},ie=(e,t)=>{if(l instanceof HTMLElement&&(E(),l.hidden=!1,m instanceof HTMLElement&&(m.textContent=t),h instanceof HTMLElement&&(h.textContent=Q),p instanceof HTMLElement)){const n=document.createElement("a");n.className="epnc-embed__recovery-button epnc-embed__recovery-button--primary",n.href=e,n.textContent=W,p.replaceChildren(n,P(k,()=>{O()}))}},R=e=>{if(l instanceof HTMLElement&&(E(),l.hidden=!1,m instanceof HTMLElement&&(m.textContent=e),h instanceof HTMLElement&&(h.textContent=V),p instanceof HTMLElement)){const t=P(k,()=>{O()});t.classList.add("epnc-embed__recovery-button--primary"),p.replaceChildren(t)}},U=e=>{p instanceof HTMLElement&&p.querySelectorAll("button").forEach(t=>{t.disabled=e,e?(t.dataset.originalLabel=t.dataset.originalLabel||t.textContent||"",t.textContent=X):t.dataset.originalLabel&&(t.textContent=t.dataset.originalLabel,delete t.dataset.originalLabel)})},O=async()=>{if(I===""){_("Recovery is not available in this embed.");return}U(!0);const e=I.replace("__FILE_ID__",encodeURIComponent(String(u)));try{await T(e,{method:"POST",headers:{requesttoken:y()}}),E(),i instanceof HTMLElement&&(i.hidden=!1),j()}catch(t){U(!1),m instanceof HTMLElement&&(m.textContent=t instanceof Error&&t.message?t.message:"Recovery failed.")}},oe=async e=>{const t=e instanceof Error&&e.message?e.message:"Pad open failed.";if(ae(),N===""){R(t);return}const n=N.replace("__FILE_ID__",encodeURIComponent(String(u)));try{const a=await T(n,{method:"GET"});if(a&&a.found===!0&&typeof a.embed_url=="string"&&a.embed_url!==""){ie(a.embed_url,t);return}}catch{}R(t)},j=async()=>{if(!Number.isFinite(u)||u<=0||w===""||A===""){_("Embed configuration is incomplete.");return}if(y()===""){_("CSRF request token is missing.");return}try{let e;try{e=await F()}catch(s){if(!ne(s))throw s;await re(),e=await F()}const t=typeof e.sync_url=="string"?e.sync_url.trim():"",n=Number(e.sync_interval_seconds??0),a=Number.isFinite(n)&&n>0?n*1e3:12e4;if(f.configure({syncUrl:t,intervalMs:a}),f.installLifecycleHandlers(),te(),f.start(),e.is_external===!0){Z(e.url,typeof e.snapshot_text=="string"?e.snapshot_text:"",typeof e.snapshot_html=="string"?e.snapshot_html:"");return}$(e.url)}catch(e){if(e&&e.code==="missing_binding"){oe(e);return}_(e instanceof Error?e.message:"Pad open failed.")}};j()})();
+import{o as ce}from"./oc-compat-hVqZy-MX.chunk.mjs";import{c as de,s as le}from"./sanitize-html-dv-YifbT.chunk.mjs";import{f as T}from"./fetch-helpers-C4MxuNvt.chunk.mjs";(function(){const r=document.getElementById("etherpad-nextcloud-embed");if(!(r instanceof HTMLElement))return;const u=Number(r.getAttribute("data-file-id")||""),w=String(r.getAttribute("data-open-by-id-url")||"").trim(),A=String(r.getAttribute("data-initialize-by-id-url-template")||"").trim(),I=String(r.getAttribute("data-recover-url-template")||"").trim(),N=String(r.getAttribute("data-find-original-url-template")||"").trim(),B=String(r.getAttribute("data-request-token")||"").trim(),z=String(r.getAttribute("data-trusted-origins")||"").split(/\s+/).map(e=>e.trim()).filter(Boolean),i=r.querySelector("[data-epnc-embed-loading]"),d=r.querySelector("[data-epnc-embed-error]"),q=r.querySelector("[data-epnc-embed-error-message]"),l=r.querySelector("[data-epnc-embed-recovery]"),m=r.querySelector("[data-epnc-embed-recovery-message]"),h=r.querySelector("[data-epnc-embed-recovery-body]"),p=r.querySelector("[data-epnc-embed-recovery-actions]"),o=r.querySelector("[data-epnc-embed-iframe]"),G=String(r.getAttribute("data-l10n-external-title")||"Pad from another server").trim(),Y=String(r.getAttribute("data-l10n-external-message")||"Read-only snapshot from the .pad file.").trim(),J=String(r.getAttribute("data-l10n-external-empty")||"No synced snapshot is stored in this .pad file yet.").trim(),K=String(r.getAttribute("data-l10n-external-link")||"Open original pad").trim(),Q=String(r.getAttribute("data-l10n-recovery-checking")||"Checking for the original pad...").trim(),V=String(r.getAttribute("data-l10n-recovery-copy-body")||"").trim(),W=String(r.getAttribute("data-l10n-recovery-orphan-body")||"").trim(),X=String(r.getAttribute("data-l10n-recovery-open-original")||"Open the original .pad file").trim(),k=String(r.getAttribute("data-l10n-recovery-create-new")||"Create new pad from this file").trim(),Z=String(r.getAttribute("data-l10n-recovery-creating")||"Creating new pad...").trim();let C=null;const y=()=>ce(B),f=de({requestToken:y}),_=e=>{i instanceof HTMLElement&&(i.hidden=!0,i.classList.remove("epnc-embed__loading--snapshot")),o instanceof HTMLIFrameElement&&(o.hidden=!0,o.removeAttribute("src")),q instanceof HTMLElement&&(q.textContent=String(e||"Unknown error.")),d instanceof HTMLElement&&(d.hidden=!1)},$=(e,t,n)=>{if(d instanceof HTMLElement&&(d.hidden=!0),o instanceof HTMLIFrameElement&&(o.hidden=!0,o.removeAttribute("src")),!(i instanceof HTMLElement))return;i.hidden=!1,i.classList.add("epnc-embed__loading--snapshot"),i.textContent="";const a=document.createElement("div");a.className="epnc-embed__snapshot";const s=document.createElement("div");s.className="epnc-embed__snapshot-inner";const g=document.createElement("h2");g.className="epnc-embed__snapshot-title",g.textContent=G;const c=document.createElement("p");c.className="epnc-embed__snapshot-message",c.textContent=Y;const b=document.createElement("a");b.className="epnc-embed__snapshot-link",b.href=e,b.target="_blank",b.rel="noopener noreferrer",b.textContent=K;const H=document.createElement("div");H.className="epnc-embed__snapshot-actions",H.appendChild(b);const D=le(n),x=D.trim()!=="",L=document.createElement(x?"div":"pre");L.className=x?"epnc-embed__snapshot-text epnc-embed__snapshot-text--html":"epnc-embed__snapshot-text",x?L.innerHTML=D:L.textContent=String(t||"").trim()!==""?String(t):J;const S=document.createElement("div");S.className="epnc-embed__snapshot-heading",S.appendChild(g),S.appendChild(c);const v=document.createElement("div");v.className="epnc-embed__snapshot-header",v.appendChild(S),v.appendChild(H),s.appendChild(v),s.appendChild(L),a.appendChild(s),i.appendChild(a)},ee=e=>{if(!(o instanceof HTMLIFrameElement)){_("Embed iframe is not available.");return}d instanceof HTMLElement&&(d.hidden=!0),i instanceof HTMLElement&&i.classList.remove("epnc-embed__loading--snapshot"),o.hidden=!0;const t=()=>{o.removeEventListener("load",t),window.setTimeout(()=>{i instanceof HTMLElement&&(i.hidden=!0),o.hidden=!1},100)};o.addEventListener("load",t,{once:!0}),o.src=e},M=(e,t,n,a={})=>{!e||typeof e.postMessage!="function"||e.postMessage(Object.assign({type:n,fileId:u},a),t)},te=e=>!e||e==="null"?!1:e===window.location.origin?!0:z.includes(e),ne=()=>{C||(C=e=>{const t=String(e.origin||"");if(!te(t))return;const n=e.data,a=typeof n=="string"?n:n&&typeof n=="object"&&typeof n.type=="string"?n.type:"";if(a){if(a==="epnc:host-visible"){f.start();return}if(a==="epnc:host-hidden"){f.fireAndForget(!0,!0),f.stop();return}if(a==="epnc:host-before-close"||a==="epnc:host-sync-now"){const s=a!=="epnc:host-sync-now",g=a==="epnc:host-before-close"?"before-close":"sync-now";M(e.source,t,"epnc:sync-flush-started",{reason:g}),f.sync(!0,s).then(c=>{M(e.source,t,"epnc:sync-flush-finished",{reason:g,result:c&&typeof c=="object"?c:{}})}).catch(c=>{M(e.source,t,"epnc:sync-flush-failed",{reason:g,message:c instanceof Error?c.message:"Sync failed."})}),s&&f.stop()}}},window.addEventListener("message",C))},re=e=>e instanceof Error?String(e.message||"").includes("Missing YAML frontmatter"):!1,F=async()=>{const e=new URLSearchParams;e.set("fileId",String(u));const t=await T(w,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded;charset=UTF-8",requesttoken:y()},body:e.toString()});if(!t||typeof t.url!="string"||t.url.trim()==="")throw new Error("Pad open API did not return a valid URL.");return t},ae=async()=>{const e=A.replace("__FILE_ID__",encodeURIComponent(String(u))),t=await T(e,{method:"POST",headers:{requesttoken:y()}});t&&t.status==="migrated_from_legacy"&&console.info("Legacy Ownpad .pad migrated to managed format on first open.")},E=()=>{i instanceof HTMLElement&&(i.hidden=!0),d instanceof HTMLElement&&(d.hidden=!0),l instanceof HTMLElement&&(l.hidden=!0),o instanceof HTMLIFrameElement&&(o.hidden=!0,o.removeAttribute("src"))},ie=()=>{l instanceof HTMLElement&&(E(),l.hidden=!1,m instanceof HTMLElement&&(m.textContent=Q),h instanceof HTMLElement&&(h.textContent=""),p instanceof HTMLElement&&p.replaceChildren())},P=(e,t)=>{const n=document.createElement("button");return n.type="button",n.className="epnc-embed__recovery-button",n.textContent=e,n.addEventListener("click",t),n},oe=(e,t)=>{if(l instanceof HTMLElement&&(E(),l.hidden=!1,m instanceof HTMLElement&&(m.textContent=t),h instanceof HTMLElement&&(h.textContent=V),p instanceof HTMLElement)){const n=document.createElement("a");n.className="epnc-embed__recovery-button epnc-embed__recovery-button--primary",n.href=e,n.textContent=X,p.replaceChildren(n,P(k,()=>{O()}))}},R=e=>{if(l instanceof HTMLElement&&(E(),l.hidden=!1,m instanceof HTMLElement&&(m.textContent=e),h instanceof HTMLElement&&(h.textContent=W),p instanceof HTMLElement)){const t=P(k,()=>{O()});t.classList.add("epnc-embed__recovery-button--primary"),p.replaceChildren(t)}},U=e=>{p instanceof HTMLElement&&p.querySelectorAll("button").forEach(t=>{t.disabled=e,e?(t.dataset.originalLabel=t.dataset.originalLabel||t.textContent||"",t.textContent=Z):t.dataset.originalLabel&&(t.textContent=t.dataset.originalLabel,delete t.dataset.originalLabel)})},O=async()=>{if(I===""){_("Recovery is not available in this embed.");return}U(!0);const e=I.replace("__FILE_ID__",encodeURIComponent(String(u)));try{await T(e,{method:"POST",headers:{requesttoken:y()}}),E(),i instanceof HTMLElement&&(i.hidden=!1),j()}catch(t){U(!1),m instanceof HTMLElement&&(m.textContent=t instanceof Error&&t.message?t.message:"Recovery failed.")}},se=async e=>{const t=e instanceof Error&&e.message?e.message:"Pad open failed.";if(ie(),N===""){R(t);return}const n=N.replace("__FILE_ID__",encodeURIComponent(String(u)));try{const a=await T(n,{method:"GET"});if(a&&a.found===!0&&typeof a.embed_url=="string"&&a.embed_url!==""){oe(a.embed_url,t);return}}catch{}R(t)},j=async()=>{if(!Number.isFinite(u)||u<=0||w===""||A===""){_("Embed configuration is incomplete.");return}if(y()===""){_("CSRF request token is missing.");return}try{let e;try{e=await F()}catch(s){if(!re(s))throw s;await ae(),e=await F()}const t=typeof e.sync_url=="string"?e.sync_url.trim():"",n=Number(e.sync_interval_seconds??0),a=Number.isFinite(n)&&n>0?n*1e3:12e4;if(f.configure({syncUrl:t,intervalMs:a}),f.installLifecycleHandlers(),ne(),f.start(),e.is_external===!0){$(e.url,typeof e.snapshot_text=="string"?e.snapshot_text:"",typeof e.snapshot_html=="string"?e.snapshot_html:"");return}ee(e.url)}catch(e){if(e&&e.code==="missing_binding"){se(e);return}_(e instanceof Error?e.message:"Pad open failed.")}};j()})();
 //# sourceMappingURL=etherpad_nextcloud-embed-main.mjs.map
diff --git a/js/etherpad_nextcloud-embed-main.mjs.map b/js/etherpad_nextcloud-embed-main.mjs.map
index eef4075..0afc2f0 100644
--- a/js/etherpad_nextcloud-embed-main.mjs.map
+++ b/js/etherpad_nextcloud-embed-main.mjs.map
@@ -1 +1 @@
-{"version":3,"file":"etherpad_nextcloud-embed-main.mjs","sources":["../src/embed-main.js"],"sourcesContent":["/**\n * SPDX-License-Identifier: AGPL-3.0-or-later\n * Copyright (c) 2026 Jacob Bühler\n */\nimport { ocRequestToken } from './lib/oc-compat.js'\nimport { createPadSync } from './lib/pad-sync.js'\nimport { fetchJsonWithTimeout as fetchJson } from './lib/fetch-helpers.js'\n\n(function () {\n\tconst IFRAME_REVEAL_DELAY_MS = 100\n\n\tconst root = document.getElementById('etherpad-nextcloud-embed')\n\tif (!(root instanceof HTMLElement)) {\n\t\treturn\n\t}\n\n\tconst fileId = Number(root.getAttribute('data-file-id') || '')\n\tconst openByIdUrl = String(root.getAttribute('data-open-by-id-url') || '').trim()\n\tconst initializeByIdUrlTemplate = String(root.getAttribute('data-initialize-by-id-url-template') || '').trim()\n\tconst recoverUrlTemplate = String(root.getAttribute('data-recover-url-template') || '').trim()\n\tconst findOriginalUrlTemplate = String(root.getAttribute('data-find-original-url-template') || '').trim()\n\tconst templateRequestToken = String(root.getAttribute('data-request-token') || '').trim()\n\tconst trustedOrigins = String(root.getAttribute('data-trusted-origins') || '')\n\t\t.split(/\\s+/)\n\t\t.map((value) => value.trim())\n\t\t.filter(Boolean)\n\tconst loadingNode = root.querySelector('[data-epnc-embed-loading]')\n\tconst errorNode = root.querySelector('[data-epnc-embed-error]')\n\tconst errorMessageNode = root.querySelector('[data-epnc-embed-error-message]')\n\tconst recoveryNode = root.querySelector('[data-epnc-embed-recovery]')\n\tconst recoveryMessageNode = root.querySelector('[data-epnc-embed-recovery-message]')\n\tconst recoveryBodyNode = root.querySelector('[data-epnc-embed-recovery-body]')\n\tconst recoveryActionsNode = root.querySelector('[data-epnc-embed-recovery-actions]')\n\tconst iframe = root.querySelector('[data-epnc-embed-iframe]')\n\tconst externalTitleText = String(root.getAttribute('data-l10n-external-title') || 'Pad from another server').trim()\n\tconst externalMessageText = String(root.getAttribute('data-l10n-external-message') || 'Read-only snapshot from the .pad file.').trim()\n\tconst externalEmptyText = String(root.getAttribute('data-l10n-external-empty') || 'No synced snapshot is stored in this .pad file yet.').trim()\n\tconst externalLinkText = String(root.getAttribute('data-l10n-external-link') || 'Open original pad').trim()\n\tconst recoveryCheckingText = String(root.getAttribute('data-l10n-recovery-checking') || 'Checking for the original pad...').trim()\n\tconst recoveryCopyBodyText = String(root.getAttribute('data-l10n-recovery-copy-body') || '').trim()\n\tconst recoveryOrphanBodyText = String(root.getAttribute('data-l10n-recovery-orphan-body') || '').trim()\n\tconst recoveryOpenOriginalText = String(root.getAttribute('data-l10n-recovery-open-original') || 'Open the original .pad file').trim()\n\tconst recoveryCreateNewText = String(root.getAttribute('data-l10n-recovery-create-new') || 'Create new pad from this file').trim()\n\tconst recoveryCreatingText = String(root.getAttribute('data-l10n-recovery-creating') || 'Creating new pad...').trim()\n\tlet messageHandler = null\n\n\tconst requestToken = () => ocRequestToken(templateRequestToken)\n\tconst padSync = createPadSync({ requestToken })\n\n\tconst showError = (message) => {\n\t\tif (loadingNode instanceof HTMLElement) {\n\t\t\tloadingNode.hidden = true\n\t\t\tloadingNode.classList.remove('epnc-embed__loading--snapshot')\n\t\t}\n\t\tif (iframe instanceof HTMLIFrameElement) {\n\t\t\tiframe.hidden = true\n\t\t\tiframe.removeAttribute('src')\n\t\t}\n\t\tif (errorMessageNode instanceof HTMLElement) {\n\t\t\terrorMessageNode.textContent = String(message || 'Unknown error.')\n\t\t}\n\t\tif (errorNode instanceof HTMLElement) {\n\t\t\terrorNode.hidden = false\n\t\t}\n\t}\n\n\tconst showExternalPadPreview = (url, snapshotText, snapshotHtml) => {\n\t\tif (errorNode instanceof HTMLElement) {\n\t\t\terrorNode.hidden = true\n\t\t}\n\t\tif (iframe instanceof HTMLIFrameElement) {\n\t\t\tiframe.hidden = true\n\t\t\tiframe.removeAttribute('src')\n\t\t}\n\t\tif (!(loadingNode instanceof HTMLElement)) {\n\t\t\treturn\n\t\t}\n\t\tloadingNode.hidden = false\n\t\tloadingNode.classList.add('epnc-embed__loading--snapshot')\n\t\tloadingNode.textContent = ''\n\n\t\tconst snapshot = document.createElement('div')\n\t\tsnapshot.className = 'epnc-embed__snapshot'\n\n\t\tconst inner = document.createElement('div')\n\t\tinner.className = 'epnc-embed__snapshot-inner'\n\n\t\tconst title = document.createElement('h2')\n\t\ttitle.className = 'epnc-embed__snapshot-title'\n\t\ttitle.textContent = externalTitleText\n\n\t\tconst message = document.createElement('p')\n\t\tmessage.className = 'epnc-embed__snapshot-message'\n\t\tmessage.textContent = externalMessageText\n\n\t\tconst link = document.createElement('a')\n\t\tlink.className = 'epnc-embed__snapshot-link'\n\t\tlink.href = url\n\t\tlink.target = '_blank'\n\t\tlink.rel = 'noopener noreferrer'\n\t\tlink.textContent = externalLinkText\n\n\t\tconst actions = document.createElement('div')\n\t\tactions.className = 'epnc-embed__snapshot-actions'\n\t\tactions.appendChild(link)\n\n\t\tconst hasSnapshotHtml = String(snapshotHtml || '').trim() !== ''\n\t\tconst preview = document.createElement(hasSnapshotHtml ? 'div' : 'pre')\n\t\tpreview.className = hasSnapshotHtml\n\t\t\t? 'epnc-embed__snapshot-text epnc-embed__snapshot-text--html'\n\t\t\t: 'epnc-embed__snapshot-text'\n\t\tif (hasSnapshotHtml) {\n\t\t\tpreview.innerHTML = String(snapshotHtml)\n\t\t} else {\n\t\t\tpreview.textContent = String(snapshotText || '').trim() !== '' ? String(snapshotText) : externalEmptyText\n\t\t}\n\n\t\tconst heading = document.createElement('div')\n\t\theading.className = 'epnc-embed__snapshot-heading'\n\t\theading.appendChild(title)\n\t\theading.appendChild(message)\n\n\t\tconst header = document.createElement('div')\n\t\theader.className = 'epnc-embed__snapshot-header'\n\t\theader.appendChild(heading)\n\t\theader.appendChild(actions)\n\n\t\tinner.appendChild(header)\n\t\tinner.appendChild(preview)\n\t\tsnapshot.appendChild(inner)\n\t\tloadingNode.appendChild(snapshot)\n\t}\n\n\tconst showIframe = (url) => {\n\t\tif (!(iframe instanceof HTMLIFrameElement)) {\n\t\t\tshowError('Embed iframe is not available.')\n\t\t\treturn\n\t\t}\n\t\tif (errorNode instanceof HTMLElement) {\n\t\t\terrorNode.hidden = true\n\t\t}\n\t\tif (loadingNode instanceof HTMLElement) {\n\t\t\tloadingNode.classList.remove('epnc-embed__loading--snapshot')\n\t\t}\n\t\tiframe.hidden = true\n\t\tconst revealIframe = () => {\n\t\t\tiframe.removeEventListener('load', revealIframe)\n\t\t\twindow.setTimeout(() => {\n\t\t\t\tif (loadingNode instanceof HTMLElement) {\n\t\t\t\t\tloadingNode.hidden = true\n\t\t\t\t}\n\t\t\t\tiframe.hidden = false\n\t\t\t}, IFRAME_REVEAL_DELAY_MS)\n\t\t}\n\t\tiframe.addEventListener('load', revealIframe, { once: true })\n\t\tiframe.src = url\n\t}\n\n\tconst postHostMessage = (source, origin, type, payload = {}) => {\n\t\t// Replies are only sent from the already origin-validated message handler.\n\t\tif (!source || typeof source.postMessage !== 'function') {\n\t\t\treturn\n\t\t}\n\t\tsource.postMessage(Object.assign({\n\t\t\ttype,\n\t\t\tfileId,\n\t\t}, payload), origin)\n\t}\n\n\tconst isAllowedMessageOrigin = (origin) => {\n\t\tif (!origin || origin === 'null') {\n\t\t\treturn false\n\t\t}\n\t\tif (origin === window.location.origin) {\n\t\t\treturn true\n\t\t}\n\t\treturn trustedOrigins.includes(origin)\n\t}\n\n\tconst installHostMessageHandler = () => {\n\t\tif (messageHandler) {\n\t\t\treturn\n\t\t}\n\t\tmessageHandler = (event) => {\n\t\t\tconst origin = String(event.origin || '')\n\t\t\tif (!isAllowedMessageOrigin(origin)) {\n\t\t\t\treturn\n\t\t\t}\n\t\t\tconst payload = event.data\n\t\t\tconst type = typeof payload === 'string'\n\t\t\t\t? payload\n\t\t\t\t: (payload && typeof payload === 'object' && typeof payload.type === 'string' ? payload.type : '')\n\t\t\tif (!type) {\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (type === 'epnc:host-visible') {\n\t\t\t\tpadSync.start()\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (type === 'epnc:host-hidden') {\n\t\t\t\tpadSync.fireAndForget(true, true)\n\t\t\t\tpadSync.stop()\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (type === 'epnc:host-before-close' || type === 'epnc:host-sync-now') {\n\t\t\t\tconst keepalive = type !== 'epnc:host-sync-now'\n\t\t\t\tconst reason = type === 'epnc:host-before-close' ? 'before-close' : 'sync-now'\n\t\t\t\tpostHostMessage(event.source, origin, 'epnc:sync-flush-started', {\n\t\t\t\t\treason,\n\t\t\t\t})\n\t\t\t\tvoid padSync.sync(true, keepalive)\n\t\t\t\t\t.then((result) => {\n\t\t\t\t\t\tpostHostMessage(event.source, origin, 'epnc:sync-flush-finished', {\n\t\t\t\t\t\t\treason,\n\t\t\t\t\t\t\tresult: result && typeof result === 'object' ? result : {},\n\t\t\t\t\t\t})\n\t\t\t\t\t})\n\t\t\t\t\t.catch((error) => {\n\t\t\t\t\t\tpostHostMessage(event.source, origin, 'epnc:sync-flush-failed', {\n\t\t\t\t\t\t\treason,\n\t\t\t\t\t\t\tmessage: error instanceof Error ? error.message : 'Sync failed.',\n\t\t\t\t\t\t})\n\t\t\t\t\t})\n\t\t\t\tif (keepalive) {\n\t\t\t\t\tpadSync.stop()\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\twindow.addEventListener('message', messageHandler)\n\t}\n\n\tconst isMissingFrontmatterError = (error) => {\n\t\tif (!(error instanceof Error)) {\n\t\t\treturn false\n\t\t}\n\t\treturn String(error.message || '').includes('Missing YAML frontmatter')\n\t}\n\n\tconst openPad = async () => {\n\t\tconst body = new URLSearchParams()\n\t\tbody.set('fileId', String(fileId))\n\t\tconst data = await fetchJson(openByIdUrl, {\n\t\t\tmethod: 'POST',\n\t\t\theaders: {\n\t\t\t\t'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',\n\t\t\t\trequesttoken: requestToken(),\n\t\t\t},\n\t\t\tbody: body.toString(),\n\t\t})\n\t\tif (!data || typeof data.url !== 'string' || data.url.trim() === '') {\n\t\t\tthrow new Error('Pad open API did not return a valid URL.')\n\t\t}\n\t\treturn data\n\t}\n\n\tconst initializePad = async () => {\n\t\tconst url = initializeByIdUrlTemplate.replace('__FILE_ID__', encodeURIComponent(String(fileId)))\n\t\tconst data = await fetchJson(url, {\n\t\t\tmethod: 'POST',\n\t\t\theaders: {\n\t\t\t\trequesttoken: requestToken(),\n\t\t\t},\n\t\t})\n\t\tif (data && data.status === 'migrated_from_legacy') {\n\t\t\t// Mirror the backend audit-log entry to the browser console; no\n\t\t\t// toast surface is wired up in this app yet.\n\t\t\tconsole.info('Legacy Ownpad .pad migrated to managed format on first open.')\n\t\t}\n\t}\n\n\tconst hideAllPanels = () => {\n\t\tif (loadingNode instanceof HTMLElement) loadingNode.hidden = true\n\t\tif (errorNode instanceof HTMLElement) errorNode.hidden = true\n\t\tif (recoveryNode instanceof HTMLElement) recoveryNode.hidden = true\n\t\tif (iframe instanceof HTMLIFrameElement) {\n\t\t\tiframe.hidden = true\n\t\t\tiframe.removeAttribute('src')\n\t\t}\n\t}\n\n\tconst showRecoveryChecking = () => {\n\t\tif (!(recoveryNode instanceof HTMLElement)) return\n\t\thideAllPanels()\n\t\trecoveryNode.hidden = false\n\t\tif (recoveryMessageNode instanceof HTMLElement) recoveryMessageNode.textContent = recoveryCheckingText\n\t\tif (recoveryBodyNode instanceof HTMLElement) recoveryBodyNode.textContent = ''\n\t\tif (recoveryActionsNode instanceof HTMLElement) recoveryActionsNode.replaceChildren()\n\t}\n\n\tconst buildRecoveryButton = (label, onClick) => {\n\t\tconst button = document.createElement('button')\n\t\tbutton.type = 'button'\n\t\tbutton.className = 'epnc-embed__recovery-button'\n\t\tbutton.textContent = label\n\t\tbutton.addEventListener('click', onClick)\n\t\treturn button\n\t}\n\n\tconst showRecoveryWithOriginal = (originalEmbedUrl, errorMessage) => {\n\t\tif (!(recoveryNode instanceof HTMLElement)) return\n\t\thideAllPanels()\n\t\trecoveryNode.hidden = false\n\t\tif (recoveryMessageNode instanceof HTMLElement) recoveryMessageNode.textContent = errorMessage\n\t\tif (recoveryBodyNode instanceof HTMLElement) recoveryBodyNode.textContent = recoveryCopyBodyText\n\t\tif (recoveryActionsNode instanceof HTMLElement) {\n\t\t\tconst openLink = document.createElement('a')\n\t\t\topenLink.className = 'epnc-embed__recovery-button epnc-embed__recovery-button--primary'\n\t\t\t// Stay in embed mode: load the original's embed page in the same\n\t\t\t// frame so a host iframe doesn't need to deal with a new tab.\n\t\t\topenLink.href = originalEmbedUrl\n\t\t\topenLink.textContent = recoveryOpenOriginalText\n\t\t\trecoveryActionsNode.replaceChildren(\n\t\t\t\topenLink,\n\t\t\t\tbuildRecoveryButton(recoveryCreateNewText, () => { void triggerRecovery() }),\n\t\t\t)\n\t\t}\n\t}\n\n\tconst showRecoveryWithoutOriginal = (errorMessage) => {\n\t\tif (!(recoveryNode instanceof HTMLElement)) return\n\t\thideAllPanels()\n\t\trecoveryNode.hidden = false\n\t\tif (recoveryMessageNode instanceof HTMLElement) recoveryMessageNode.textContent = errorMessage\n\t\tif (recoveryBodyNode instanceof HTMLElement) recoveryBodyNode.textContent = recoveryOrphanBodyText\n\t\tif (recoveryActionsNode instanceof HTMLElement) {\n\t\t\tconst button = buildRecoveryButton(recoveryCreateNewText, () => { void triggerRecovery() })\n\t\t\tbutton.classList.add('epnc-embed__recovery-button--primary')\n\t\t\trecoveryActionsNode.replaceChildren(button)\n\t\t}\n\t}\n\n\tconst setRecoveryActionsBusy = (busy) => {\n\t\tif (!(recoveryActionsNode instanceof HTMLElement)) return\n\t\tconst buttons = recoveryActionsNode.querySelectorAll('button')\n\t\tbuttons.forEach((node) => {\n\t\t\tnode.disabled = busy\n\t\t\tif (busy) {\n\t\t\t\tnode.dataset.originalLabel = node.dataset.originalLabel || node.textContent || ''\n\t\t\t\tnode.textContent = recoveryCreatingText\n\t\t\t} else if (node.dataset.originalLabel) {\n\t\t\t\tnode.textContent = node.dataset.originalLabel\n\t\t\t\tdelete node.dataset.originalLabel\n\t\t\t}\n\t\t})\n\t}\n\n\tconst triggerRecovery = async () => {\n\t\tif (recoverUrlTemplate === '') {\n\t\t\tshowError('Recovery is not available in this embed.')\n\t\t\treturn\n\t\t}\n\t\tsetRecoveryActionsBusy(true)\n\t\tconst url = recoverUrlTemplate.replace('__FILE_ID__', encodeURIComponent(String(fileId)))\n\t\ttry {\n\t\t\tawait fetchJson(url, {\n\t\t\t\tmethod: 'POST',\n\t\t\t\theaders: { requesttoken: requestToken() },\n\t\t\t})\n\t\t\t// Restart the open flow now that the binding exists.\n\t\t\thideAllPanels()\n\t\t\tif (loadingNode instanceof HTMLElement) loadingNode.hidden = false\n\t\t\tvoid run()\n\t\t} catch (error) {\n\t\t\tsetRecoveryActionsBusy(false)\n\t\t\tif (recoveryMessageNode instanceof HTMLElement) {\n\t\t\t\trecoveryMessageNode.textContent = error instanceof Error && error.message\n\t\t\t\t\t? error.message\n\t\t\t\t\t: 'Recovery failed.'\n\t\t\t}\n\t\t}\n\t}\n\n\tconst enterRecoveryFlow = async (initialError) => {\n\t\tconst errorMessage = initialError instanceof Error && initialError.message\n\t\t\t? initialError.message\n\t\t\t: 'Pad open failed.'\n\t\tshowRecoveryChecking()\n\t\tif (findOriginalUrlTemplate === '') {\n\t\t\tshowRecoveryWithoutOriginal(errorMessage)\n\t\t\treturn\n\t\t}\n\t\tconst lookupUrl = findOriginalUrlTemplate.replace('__FILE_ID__', encodeURIComponent(String(fileId)))\n\t\ttry {\n\t\t\tconst hint = await fetchJson(lookupUrl, { method: 'GET' })\n\t\t\tif (hint && hint.found === true && typeof hint.embed_url === 'string' && hint.embed_url !== '') {\n\t\t\t\tshowRecoveryWithOriginal(hint.embed_url, errorMessage)\n\t\t\t\treturn\n\t\t\t}\n\t\t} catch {\n\t\t\t// Silent: fall through to the no-match branch.\n\t\t}\n\t\tshowRecoveryWithoutOriginal(errorMessage)\n\t}\n\n\tconst run = async () => {\n\t\tif (!Number.isFinite(fileId) || fileId <= 0 || openByIdUrl === '' || initializeByIdUrlTemplate === '') {\n\t\t\tshowError('Embed configuration is incomplete.')\n\t\t\treturn\n\t\t}\n\t\tif (requestToken() === '') {\n\t\t\tshowError('CSRF request token is missing.')\n\t\t\treturn\n\t\t}\n\t\ttry {\n\t\t\tlet data\n\t\t\ttry {\n\t\t\t\tdata = await openPad()\n\t\t\t} catch (error) {\n\t\t\t\tif (!isMissingFrontmatterError(error)) {\n\t\t\t\t\tthrow error\n\t\t\t\t}\n\t\t\t\tawait initializePad()\n\t\t\t\tdata = await openPad()\n\t\t\t}\n\t\t\tconst syncUrl = typeof data.sync_url === 'string' ? data.sync_url.trim() : ''\n\t\t\tconst intervalSeconds = Number(data.sync_interval_seconds ?? 0)\n\t\t\tconst intervalMs = Number.isFinite(intervalSeconds) && intervalSeconds > 0 ? intervalSeconds * 1000 : 120000\n\t\t\tpadSync.configure({ syncUrl, intervalMs })\n\t\t\tpadSync.installLifecycleHandlers()\n\t\t\tinstallHostMessageHandler()\n\t\t\tpadSync.start()\n\t\t\tif (data.is_external === true) {\n\t\t\t\tshowExternalPadPreview(\n\t\t\t\t\tdata.url,\n\t\t\t\t\ttypeof data.snapshot_text === 'string' ? data.snapshot_text : '',\n\t\t\t\t\ttypeof data.snapshot_html === 'string' ? data.snapshot_html : '',\n\t\t\t\t)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tshowIframe(data.url)\n\t\t} catch (error) {\n\t\t\tif (error && error.code === 'missing_binding') {\n\t\t\t\tvoid enterRecoveryFlow(error)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tshowError(error instanceof Error ? error.message : 'Pad open failed.')\n\t\t}\n\t}\n\n\tvoid run()\n})()\n"],"names":["root","fileId","openByIdUrl","initializeByIdUrlTemplate","recoverUrlTemplate","findOriginalUrlTemplate","templateRequestToken","trustedOrigins","value","loadingNode","errorNode","errorMessageNode","recoveryNode","recoveryMessageNode","recoveryBodyNode","recoveryActionsNode","iframe","externalTitleText","externalMessageText","externalEmptyText","externalLinkText","recoveryCheckingText","recoveryCopyBodyText","recoveryOrphanBodyText","recoveryOpenOriginalText","recoveryCreateNewText","recoveryCreatingText","messageHandler","requestToken","ocRequestToken","padSync","createPadSync","showError","message","showExternalPadPreview","url","snapshotText","snapshotHtml","snapshot","inner","title","link","actions","hasSnapshotHtml","preview","heading","header","showIframe","revealIframe","postHostMessage","source","origin","type","payload","isAllowedMessageOrigin","installHostMessageHandler","event","keepalive","reason","result","error","isMissingFrontmatterError","openPad","body","data","fetchJson","initializePad","hideAllPanels","showRecoveryChecking","buildRecoveryButton","label","onClick","button","showRecoveryWithOriginal","originalEmbedUrl","errorMessage","openLink","triggerRecovery","showRecoveryWithoutOriginal","setRecoveryActionsBusy","busy","node","run","enterRecoveryFlow","initialError","lookupUrl","hint","syncUrl","intervalSeconds","intervalMs"],"mappings":"+JAQC,UAAY,CAGZ,MAAMA,EAAO,SAAS,eAAe,0BAA0B,EAC/D,GAAI,EAAEA,aAAgB,aACrB,OAGD,MAAMC,EAAS,OAAOD,EAAK,aAAa,cAAc,GAAK,EAAE,EACvDE,EAAc,OAAOF,EAAK,aAAa,qBAAqB,GAAK,EAAE,EAAE,KAAI,EACzEG,EAA4B,OAAOH,EAAK,aAAa,oCAAoC,GAAK,EAAE,EAAE,KAAI,EACtGI,EAAqB,OAAOJ,EAAK,aAAa,2BAA2B,GAAK,EAAE,EAAE,KAAI,EACtFK,EAA0B,OAAOL,EAAK,aAAa,iCAAiC,GAAK,EAAE,EAAE,KAAI,EACjGM,EAAuB,OAAON,EAAK,aAAa,oBAAoB,GAAK,EAAE,EAAE,KAAI,EACjFO,EAAiB,OAAOP,EAAK,aAAa,sBAAsB,GAAK,EAAE,EAC3E,MAAM,KAAK,EACX,IAAKQ,GAAUA,EAAM,KAAI,CAAE,EAC3B,OAAO,OAAO,EACVC,EAAcT,EAAK,cAAc,2BAA2B,EAC5DU,EAAYV,EAAK,cAAc,yBAAyB,EACxDW,EAAmBX,EAAK,cAAc,iCAAiC,EACvEY,EAAeZ,EAAK,cAAc,4BAA4B,EAC9Da,EAAsBb,EAAK,cAAc,oCAAoC,EAC7Ec,EAAmBd,EAAK,cAAc,iCAAiC,EACvEe,EAAsBf,EAAK,cAAc,oCAAoC,EAC7EgB,EAAShB,EAAK,cAAc,0BAA0B,EACtDiB,EAAoB,OAAOjB,EAAK,aAAa,0BAA0B,GAAK,yBAAyB,EAAE,KAAI,EAC3GkB,EAAsB,OAAOlB,EAAK,aAAa,4BAA4B,GAAK,wCAAwC,EAAE,KAAI,EAC9HmB,EAAoB,OAAOnB,EAAK,aAAa,0BAA0B,GAAK,qDAAqD,EAAE,KAAI,EACvIoB,EAAmB,OAAOpB,EAAK,aAAa,yBAAyB,GAAK,mBAAmB,EAAE,KAAI,EACnGqB,EAAuB,OAAOrB,EAAK,aAAa,6BAA6B,GAAK,kCAAkC,EAAE,KAAI,EAC1HsB,EAAuB,OAAOtB,EAAK,aAAa,8BAA8B,GAAK,EAAE,EAAE,KAAI,EAC3FuB,EAAyB,OAAOvB,EAAK,aAAa,gCAAgC,GAAK,EAAE,EAAE,KAAI,EAC/FwB,EAA2B,OAAOxB,EAAK,aAAa,kCAAkC,GAAK,6BAA6B,EAAE,KAAI,EAC9HyB,EAAwB,OAAOzB,EAAK,aAAa,+BAA+B,GAAK,+BAA+B,EAAE,KAAI,EAC1H0B,EAAuB,OAAO1B,EAAK,aAAa,6BAA6B,GAAK,qBAAqB,EAAE,KAAI,EACnH,IAAI2B,EAAiB,KAErB,MAAMC,EAAe,IAAMC,GAAevB,CAAoB,EACxDwB,EAAUC,GAAc,CAAE,aAAAH,CAAY,CAAE,EAExCI,EAAaC,GAAY,CAC1BxB,aAAuB,cAC1BA,EAAY,OAAS,GACrBA,EAAY,UAAU,OAAO,+BAA+B,GAEzDO,aAAkB,oBACrBA,EAAO,OAAS,GAChBA,EAAO,gBAAgB,KAAK,GAEzBL,aAA4B,cAC/BA,EAAiB,YAAc,OAAOsB,GAAW,gBAAgB,GAE9DvB,aAAqB,cACxBA,EAAU,OAAS,GAErB,EAEMwB,EAAyB,CAACC,EAAKC,EAAcC,IAAiB,CAQnE,GAPI3B,aAAqB,cACxBA,EAAU,OAAS,IAEhBM,aAAkB,oBACrBA,EAAO,OAAS,GAChBA,EAAO,gBAAgB,KAAK,GAEzB,EAAEP,aAAuB,aAC5B,OAEDA,EAAY,OAAS,GACrBA,EAAY,UAAU,IAAI,+BAA+B,EACzDA,EAAY,YAAc,GAE1B,MAAM6B,EAAW,SAAS,cAAc,KAAK,EAC7CA,EAAS,UAAY,uBAErB,MAAMC,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,UAAY,6BAElB,MAAMC,EAAQ,SAAS,cAAc,IAAI,EACzCA,EAAM,UAAY,6BAClBA,EAAM,YAAcvB,EAEpB,MAAMgB,EAAU,SAAS,cAAc,GAAG,EAC1CA,EAAQ,UAAY,+BACpBA,EAAQ,YAAcf,EAEtB,MAAMuB,EAAO,SAAS,cAAc,GAAG,EACvCA,EAAK,UAAY,4BACjBA,EAAK,KAAON,EACZM,EAAK,OAAS,SACdA,EAAK,IAAM,sBACXA,EAAK,YAAcrB,EAEnB,MAAMsB,EAAU,SAAS,cAAc,KAAK,EAC5CA,EAAQ,UAAY,+BACpBA,EAAQ,YAAYD,CAAI,EAExB,MAAME,EAAkB,OAAON,GAAgB,EAAE,EAAE,KAAI,IAAO,GACxDO,EAAU,SAAS,cAAcD,EAAkB,MAAQ,KAAK,EACtEC,EAAQ,UAAYD,EACjB,4DACA,4BACCA,EACHC,EAAQ,UAAY,OAAOP,CAAY,EAEvCO,EAAQ,YAAc,OAAOR,GAAgB,EAAE,EAAE,KAAI,IAAO,GAAK,OAAOA,CAAY,EAAIjB,EAGzF,MAAM0B,EAAU,SAAS,cAAc,KAAK,EAC5CA,EAAQ,UAAY,+BACpBA,EAAQ,YAAYL,CAAK,EACzBK,EAAQ,YAAYZ,CAAO,EAE3B,MAAMa,EAAS,SAAS,cAAc,KAAK,EAC3CA,EAAO,UAAY,8BACnBA,EAAO,YAAYD,CAAO,EAC1BC,EAAO,YAAYJ,CAAO,EAE1BH,EAAM,YAAYO,CAAM,EACxBP,EAAM,YAAYK,CAAO,EACzBN,EAAS,YAAYC,CAAK,EAC1B9B,EAAY,YAAY6B,CAAQ,CACjC,EAEMS,EAAcZ,GAAQ,CAC3B,GAAI,EAAEnB,aAAkB,mBAAoB,CAC3CgB,EAAU,gCAAgC,EAC1C,MACD,CACItB,aAAqB,cACxBA,EAAU,OAAS,IAEhBD,aAAuB,aAC1BA,EAAY,UAAU,OAAO,+BAA+B,EAE7DO,EAAO,OAAS,GAChB,MAAMgC,EAAe,IAAM,CAC1BhC,EAAO,oBAAoB,OAAQgC,CAAY,EAC/C,OAAO,WAAW,IAAM,CACnBvC,aAAuB,cAC1BA,EAAY,OAAS,IAEtBO,EAAO,OAAS,EACjB,EAAG,GAAsB,CAC1B,EACAA,EAAO,iBAAiB,OAAQgC,EAAc,CAAE,KAAM,EAAI,CAAE,EAC5DhC,EAAO,IAAMmB,CACd,EAEMc,EAAkB,CAACC,EAAQC,EAAQC,EAAMC,EAAU,KAAO,CAE3D,CAACH,GAAU,OAAOA,EAAO,aAAgB,YAG7CA,EAAO,YAAY,OAAO,OAAO,CAChC,KAAAE,EACA,OAAAnD,CACH,EAAKoD,CAAO,EAAGF,CAAM,CACpB,EAEMG,GAA0BH,GAC3B,CAACA,GAAUA,IAAW,OAClB,GAEJA,IAAW,OAAO,SAAS,OACvB,GAED5C,EAAe,SAAS4C,CAAM,EAGhCI,GAA4B,IAAM,CACnC5B,IAGJA,EAAkB6B,GAAU,CAC3B,MAAML,EAAS,OAAOK,EAAM,QAAU,EAAE,EACxC,GAAI,CAACF,GAAuBH,CAAM,EACjC,OAED,MAAME,EAAUG,EAAM,KAChBJ,EAAO,OAAOC,GAAY,SAC7BA,EACCA,GAAW,OAAOA,GAAY,UAAY,OAAOA,EAAQ,MAAS,SAAWA,EAAQ,KAAO,GAChG,GAAKD,EAGL,CAAA,GAAIA,IAAS,oBAAqB,CACjCtB,EAAQ,MAAK,EACb,MACD,CACA,GAAIsB,IAAS,mBAAoB,CAChCtB,EAAQ,cAAc,GAAM,EAAI,EAChCA,EAAQ,KAAI,EACZ,MACD,CACA,GAAIsB,IAAS,0BAA4BA,IAAS,qBAAsB,CACvE,MAAMK,EAAYL,IAAS,qBACrBM,EAASN,IAAS,yBAA2B,eAAiB,WACpEH,EAAgBO,EAAM,OAAQL,EAAQ,0BAA2B,CAChE,OAAAO,CACL,CAAK,EACI5B,EAAQ,KAAK,GAAM2B,CAAS,EAC/B,KAAME,GAAW,CACjBV,EAAgBO,EAAM,OAAQL,EAAQ,2BAA4B,CACjE,OAAAO,EACA,OAAQC,GAAU,OAAOA,GAAW,SAAWA,EAAS,CAAA,CAC/D,CAAO,CACF,CAAC,EACA,MAAOC,GAAU,CACjBX,EAAgBO,EAAM,OAAQL,EAAQ,yBAA0B,CAC/D,OAAAO,EACA,QAASE,aAAiB,MAAQA,EAAM,QAAU,cACzD,CAAO,CACF,CAAC,EACEH,GACH3B,EAAQ,KAAI,CAEd,CAAA,CACD,EACA,OAAO,iBAAiB,UAAWH,CAAc,EAClD,EAEMkC,GAA6BD,GAC5BA,aAAiB,MAGhB,OAAOA,EAAM,SAAW,EAAE,EAAE,SAAS,0BAA0B,EAF9D,GAKHE,EAAU,SAAY,CAC3B,MAAMC,EAAO,IAAI,gBACjBA,EAAK,IAAI,SAAU,OAAO9D,CAAM,CAAC,EACjC,MAAM+D,EAAO,MAAMC,EAAU/D,EAAa,CACzC,OAAQ,OACR,QAAS,CACR,eAAgB,kDAChB,aAAc0B,EAAY,CAC9B,EACG,KAAMmC,EAAK,SAAQ,CACtB,CAAG,EACD,GAAI,CAACC,GAAQ,OAAOA,EAAK,KAAQ,UAAYA,EAAK,IAAI,KAAI,IAAO,GAChE,MAAM,IAAI,MAAM,0CAA0C,EAE3D,OAAOA,CACR,EAEME,GAAgB,SAAY,CACjC,MAAM/B,EAAMhC,EAA0B,QAAQ,cAAe,mBAAmB,OAAOF,CAAM,CAAC,CAAC,EACzF+D,EAAO,MAAMC,EAAU9B,EAAK,CACjC,OAAQ,OACR,QAAS,CACR,aAAcP,EAAY,CAC9B,CACA,CAAG,EACGoC,GAAQA,EAAK,SAAW,wBAG3B,QAAQ,KAAK,8DAA8D,CAE7E,EAEMG,EAAgB,IAAM,CACvB1D,aAAuB,cAAaA,EAAY,OAAS,IACzDC,aAAqB,cAAaA,EAAU,OAAS,IACrDE,aAAwB,cAAaA,EAAa,OAAS,IAC3DI,aAAkB,oBACrBA,EAAO,OAAS,GAChBA,EAAO,gBAAgB,KAAK,EAE9B,EAEMoD,GAAuB,IAAM,CAC5BxD,aAAwB,cAC9BuD,EAAa,EACbvD,EAAa,OAAS,GAClBC,aAA+B,cAAaA,EAAoB,YAAcQ,GAC9EP,aAA4B,cAAaA,EAAiB,YAAc,IACxEC,aAA+B,aAAaA,EAAoB,gBAAe,EACpF,EAEMsD,EAAsB,CAACC,EAAOC,IAAY,CAC/C,MAAMC,EAAS,SAAS,cAAc,QAAQ,EAC9C,OAAAA,EAAO,KAAO,SACdA,EAAO,UAAY,8BACnBA,EAAO,YAAcF,EACrBE,EAAO,iBAAiB,QAASD,CAAO,EACjCC,CACR,EAEMC,GAA2B,CAACC,EAAkBC,IAAiB,CACpE,GAAM/D,aAAwB,cAC9BuD,EAAa,EACbvD,EAAa,OAAS,GAClBC,aAA+B,cAAaA,EAAoB,YAAc8D,GAC9E7D,aAA4B,cAAaA,EAAiB,YAAcQ,GACxEP,aAA+B,aAAa,CAC/C,MAAM6D,EAAW,SAAS,cAAc,GAAG,EAC3CA,EAAS,UAAY,mEAGrBA,EAAS,KAAOF,EAChBE,EAAS,YAAcpD,EACvBT,EAAoB,gBACnB6D,EACAP,EAAoB5C,EAAuB,IAAM,CAAOoD,EAAe,CAAG,CAAC,CAC/E,CACE,CACD,EAEMC,EAA+BH,GAAiB,CACrD,GAAM/D,aAAwB,cAC9BuD,EAAa,EACbvD,EAAa,OAAS,GAClBC,aAA+B,cAAaA,EAAoB,YAAc8D,GAC9E7D,aAA4B,cAAaA,EAAiB,YAAcS,GACxER,aAA+B,aAAa,CAC/C,MAAMyD,EAASH,EAAoB5C,EAAuB,IAAM,CAAOoD,EAAe,CAAG,CAAC,EAC1FL,EAAO,UAAU,IAAI,sCAAsC,EAC3DzD,EAAoB,gBAAgByD,CAAM,CAC3C,CACD,EAEMO,EAA0BC,GAAS,CAClCjE,aAA+B,aACrBA,EAAoB,iBAAiB,QAAQ,EACrD,QAASkE,GAAS,CACzBA,EAAK,SAAWD,EACZA,GACHC,EAAK,QAAQ,cAAgBA,EAAK,QAAQ,eAAiBA,EAAK,aAAe,GAC/EA,EAAK,YAAcvD,GACTuD,EAAK,QAAQ,gBACvBA,EAAK,YAAcA,EAAK,QAAQ,cAChC,OAAOA,EAAK,QAAQ,cAEtB,CAAC,CACF,EAEMJ,EAAkB,SAAY,CACnC,GAAIzE,IAAuB,GAAI,CAC9B4B,EAAU,0CAA0C,EACpD,MACD,CACA+C,EAAuB,EAAI,EAC3B,MAAM5C,EAAM/B,EAAmB,QAAQ,cAAe,mBAAmB,OAAOH,CAAM,CAAC,CAAC,EACxF,GAAI,CACH,MAAMgE,EAAU9B,EAAK,CACpB,OAAQ,OACR,QAAS,CAAE,aAAcP,GAAc,CAC3C,CAAI,EAEDuC,EAAa,EACT1D,aAAuB,cAAaA,EAAY,OAAS,IACxDyE,EAAG,CACT,OAAStB,EAAO,CACfmB,EAAuB,EAAK,EACxBlE,aAA+B,cAClCA,EAAoB,YAAc+C,aAAiB,OAASA,EAAM,QAC/DA,EAAM,QACN,mBAEL,CACD,EAEMuB,GAAoB,MAAOC,GAAiB,CACjD,MAAMT,EAAeS,aAAwB,OAASA,EAAa,QAChEA,EAAa,QACb,mBAEH,GADAhB,GAAoB,EAChB/D,IAA4B,GAAI,CACnCyE,EAA4BH,CAAY,EACxC,MACD,CACA,MAAMU,EAAYhF,EAAwB,QAAQ,cAAe,mBAAmB,OAAOJ,CAAM,CAAC,CAAC,EACnG,GAAI,CACH,MAAMqF,EAAO,MAAMrB,EAAUoB,EAAW,CAAE,OAAQ,KAAK,CAAE,EACzD,GAAIC,GAAQA,EAAK,QAAU,IAAQ,OAAOA,EAAK,WAAc,UAAYA,EAAK,YAAc,GAAI,CAC/Fb,GAAyBa,EAAK,UAAWX,CAAY,EACrD,MACD,CACD,MAAQ,CAER,CACAG,EAA4BH,CAAY,CACzC,EAEMO,EAAM,SAAY,CACvB,GAAI,CAAC,OAAO,SAASjF,CAAM,GAAKA,GAAU,GAAKC,IAAgB,IAAMC,IAA8B,GAAI,CACtG6B,EAAU,oCAAoC,EAC9C,MACD,CACA,GAAIJ,EAAY,IAAO,GAAI,CAC1BI,EAAU,gCAAgC,EAC1C,MACD,CACA,GAAI,CACH,IAAIgC,EACJ,GAAI,CACHA,EAAO,MAAMF,EAAO,CACrB,OAASF,EAAO,CACf,GAAI,CAACC,GAA0BD,CAAK,EACnC,MAAMA,EAEP,MAAMM,GAAa,EACnBF,EAAO,MAAMF,EAAO,CACrB,CACA,MAAMyB,EAAU,OAAOvB,EAAK,UAAa,SAAWA,EAAK,SAAS,OAAS,GACrEwB,EAAkB,OAAOxB,EAAK,uBAAyB,CAAC,EACxDyB,EAAa,OAAO,SAASD,CAAe,GAAKA,EAAkB,EAAIA,EAAkB,IAAO,KAKtG,GAJA1D,EAAQ,UAAU,CAAE,QAAAyD,EAAS,WAAAE,CAAU,CAAE,EACzC3D,EAAQ,yBAAwB,EAChCyB,GAAyB,EACzBzB,EAAQ,MAAK,EACTkC,EAAK,cAAgB,GAAM,CAC9B9B,EACC8B,EAAK,IACL,OAAOA,EAAK,eAAkB,SAAWA,EAAK,cAAgB,GAC9D,OAAOA,EAAK,eAAkB,SAAWA,EAAK,cAAgB,EACnE,EACI,MACD,CACAjB,EAAWiB,EAAK,GAAG,CACpB,OAASJ,EAAO,CACf,GAAIA,GAASA,EAAM,OAAS,kBAAmB,CACzCuB,GAAkBvB,CAAK,EAC5B,MACD,CACA5B,EAAU4B,aAAiB,MAAQA,EAAM,QAAU,kBAAkB,CACtE,CACD,EAEKsB,EAAG,CACT,GAAC"}
\ No newline at end of file
+{"version":3,"file":"etherpad_nextcloud-embed-main.mjs","sources":["../src/embed-main.js"],"sourcesContent":["/**\n * SPDX-License-Identifier: AGPL-3.0-or-later\n * Copyright (c) 2026 Jacob Bühler\n */\nimport { ocRequestToken } from './lib/oc-compat.js'\nimport { createPadSync } from './lib/pad-sync.js'\nimport { fetchJsonWithTimeout as fetchJson } from './lib/fetch-helpers.js'\nimport { sanitizeSnapshotHtml } from './lib/sanitize-html.js'\n\n(function () {\n\tconst IFRAME_REVEAL_DELAY_MS = 100\n\n\tconst root = document.getElementById('etherpad-nextcloud-embed')\n\tif (!(root instanceof HTMLElement)) {\n\t\treturn\n\t}\n\n\tconst fileId = Number(root.getAttribute('data-file-id') || '')\n\tconst openByIdUrl = String(root.getAttribute('data-open-by-id-url') || '').trim()\n\tconst initializeByIdUrlTemplate = String(root.getAttribute('data-initialize-by-id-url-template') || '').trim()\n\tconst recoverUrlTemplate = String(root.getAttribute('data-recover-url-template') || '').trim()\n\tconst findOriginalUrlTemplate = String(root.getAttribute('data-find-original-url-template') || '').trim()\n\tconst templateRequestToken = String(root.getAttribute('data-request-token') || '').trim()\n\tconst trustedOrigins = String(root.getAttribute('data-trusted-origins') || '')\n\t\t.split(/\\s+/)\n\t\t.map((value) => value.trim())\n\t\t.filter(Boolean)\n\tconst loadingNode = root.querySelector('[data-epnc-embed-loading]')\n\tconst errorNode = root.querySelector('[data-epnc-embed-error]')\n\tconst errorMessageNode = root.querySelector('[data-epnc-embed-error-message]')\n\tconst recoveryNode = root.querySelector('[data-epnc-embed-recovery]')\n\tconst recoveryMessageNode = root.querySelector('[data-epnc-embed-recovery-message]')\n\tconst recoveryBodyNode = root.querySelector('[data-epnc-embed-recovery-body]')\n\tconst recoveryActionsNode = root.querySelector('[data-epnc-embed-recovery-actions]')\n\tconst iframe = root.querySelector('[data-epnc-embed-iframe]')\n\tconst externalTitleText = String(root.getAttribute('data-l10n-external-title') || 'Pad from another server').trim()\n\tconst externalMessageText = String(root.getAttribute('data-l10n-external-message') || 'Read-only snapshot from the .pad file.').trim()\n\tconst externalEmptyText = String(root.getAttribute('data-l10n-external-empty') || 'No synced snapshot is stored in this .pad file yet.').trim()\n\tconst externalLinkText = String(root.getAttribute('data-l10n-external-link') || 'Open original pad').trim()\n\tconst recoveryCheckingText = String(root.getAttribute('data-l10n-recovery-checking') || 'Checking for the original pad...').trim()\n\tconst recoveryCopyBodyText = String(root.getAttribute('data-l10n-recovery-copy-body') || '').trim()\n\tconst recoveryOrphanBodyText = String(root.getAttribute('data-l10n-recovery-orphan-body') || '').trim()\n\tconst recoveryOpenOriginalText = String(root.getAttribute('data-l10n-recovery-open-original') || 'Open the original .pad file').trim()\n\tconst recoveryCreateNewText = String(root.getAttribute('data-l10n-recovery-create-new') || 'Create new pad from this file').trim()\n\tconst recoveryCreatingText = String(root.getAttribute('data-l10n-recovery-creating') || 'Creating new pad...').trim()\n\tlet messageHandler = null\n\n\tconst requestToken = () => ocRequestToken(templateRequestToken)\n\tconst padSync = createPadSync({ requestToken })\n\n\tconst showError = (message) => {\n\t\tif (loadingNode instanceof HTMLElement) {\n\t\t\tloadingNode.hidden = true\n\t\t\tloadingNode.classList.remove('epnc-embed__loading--snapshot')\n\t\t}\n\t\tif (iframe instanceof HTMLIFrameElement) {\n\t\t\tiframe.hidden = true\n\t\t\tiframe.removeAttribute('src')\n\t\t}\n\t\tif (errorMessageNode instanceof HTMLElement) {\n\t\t\terrorMessageNode.textContent = String(message || 'Unknown error.')\n\t\t}\n\t\tif (errorNode instanceof HTMLElement) {\n\t\t\terrorNode.hidden = false\n\t\t}\n\t}\n\n\tconst showExternalPadPreview = (url, snapshotText, snapshotHtml) => {\n\t\tif (errorNode instanceof HTMLElement) {\n\t\t\terrorNode.hidden = true\n\t\t}\n\t\tif (iframe instanceof HTMLIFrameElement) {\n\t\t\tiframe.hidden = true\n\t\t\tiframe.removeAttribute('src')\n\t\t}\n\t\tif (!(loadingNode instanceof HTMLElement)) {\n\t\t\treturn\n\t\t}\n\t\tloadingNode.hidden = false\n\t\tloadingNode.classList.add('epnc-embed__loading--snapshot')\n\t\tloadingNode.textContent = ''\n\n\t\tconst snapshot = document.createElement('div')\n\t\tsnapshot.className = 'epnc-embed__snapshot'\n\n\t\tconst inner = document.createElement('div')\n\t\tinner.className = 'epnc-embed__snapshot-inner'\n\n\t\tconst title = document.createElement('h2')\n\t\ttitle.className = 'epnc-embed__snapshot-title'\n\t\ttitle.textContent = externalTitleText\n\n\t\tconst message = document.createElement('p')\n\t\tmessage.className = 'epnc-embed__snapshot-message'\n\t\tmessage.textContent = externalMessageText\n\n\t\tconst link = document.createElement('a')\n\t\tlink.className = 'epnc-embed__snapshot-link'\n\t\tlink.href = url\n\t\tlink.target = '_blank'\n\t\tlink.rel = 'noopener noreferrer'\n\t\tlink.textContent = externalLinkText\n\n\t\tconst actions = document.createElement('div')\n\t\tactions.className = 'epnc-embed__snapshot-actions'\n\t\tactions.appendChild(link)\n\n\t\t// Sanitize first, then decide on the HTML path from the *sanitized*\n\t\t// result: if DOMPurify empties it (e.g. all-dangerous markup) we fall\n\t\t// back to the text / empty-message path instead of rendering a blank\n\t\t// HTML block (mirrors viewer-main's renderSnapshotView).\n\t\tconst sanitizedSnapshotHtml = sanitizeSnapshotHtml(snapshotHtml)\n\t\tconst hasSnapshotHtml = sanitizedSnapshotHtml.trim() !== ''\n\t\tconst preview = document.createElement(hasSnapshotHtml ? 'div' : 'pre')\n\t\tpreview.className = hasSnapshotHtml\n\t\t\t? 'epnc-embed__snapshot-text epnc-embed__snapshot-text--html'\n\t\t\t: 'epnc-embed__snapshot-text'\n\t\tif (hasSnapshotHtml) {\n\t\t\tpreview.innerHTML = sanitizedSnapshotHtml\n\t\t} else {\n\t\t\tpreview.textContent = String(snapshotText || '').trim() !== '' ? String(snapshotText) : externalEmptyText\n\t\t}\n\n\t\tconst heading = document.createElement('div')\n\t\theading.className = 'epnc-embed__snapshot-heading'\n\t\theading.appendChild(title)\n\t\theading.appendChild(message)\n\n\t\tconst header = document.createElement('div')\n\t\theader.className = 'epnc-embed__snapshot-header'\n\t\theader.appendChild(heading)\n\t\theader.appendChild(actions)\n\n\t\tinner.appendChild(header)\n\t\tinner.appendChild(preview)\n\t\tsnapshot.appendChild(inner)\n\t\tloadingNode.appendChild(snapshot)\n\t}\n\n\tconst showIframe = (url) => {\n\t\tif (!(iframe instanceof HTMLIFrameElement)) {\n\t\t\tshowError('Embed iframe is not available.')\n\t\t\treturn\n\t\t}\n\t\tif (errorNode instanceof HTMLElement) {\n\t\t\terrorNode.hidden = true\n\t\t}\n\t\tif (loadingNode instanceof HTMLElement) {\n\t\t\tloadingNode.classList.remove('epnc-embed__loading--snapshot')\n\t\t}\n\t\tiframe.hidden = true\n\t\tconst revealIframe = () => {\n\t\t\tiframe.removeEventListener('load', revealIframe)\n\t\t\twindow.setTimeout(() => {\n\t\t\t\tif (loadingNode instanceof HTMLElement) {\n\t\t\t\t\tloadingNode.hidden = true\n\t\t\t\t}\n\t\t\t\tiframe.hidden = false\n\t\t\t}, IFRAME_REVEAL_DELAY_MS)\n\t\t}\n\t\tiframe.addEventListener('load', revealIframe, { once: true })\n\t\tiframe.src = url\n\t}\n\n\tconst postHostMessage = (source, origin, type, payload = {}) => {\n\t\t// Replies are only sent from the already origin-validated message handler.\n\t\tif (!source || typeof source.postMessage !== 'function') {\n\t\t\treturn\n\t\t}\n\t\tsource.postMessage(Object.assign({\n\t\t\ttype,\n\t\t\tfileId,\n\t\t}, payload), origin)\n\t}\n\n\tconst isAllowedMessageOrigin = (origin) => {\n\t\tif (!origin || origin === 'null') {\n\t\t\treturn false\n\t\t}\n\t\tif (origin === window.location.origin) {\n\t\t\treturn true\n\t\t}\n\t\treturn trustedOrigins.includes(origin)\n\t}\n\n\tconst installHostMessageHandler = () => {\n\t\tif (messageHandler) {\n\t\t\treturn\n\t\t}\n\t\tmessageHandler = (event) => {\n\t\t\tconst origin = String(event.origin || '')\n\t\t\tif (!isAllowedMessageOrigin(origin)) {\n\t\t\t\treturn\n\t\t\t}\n\t\t\tconst payload = event.data\n\t\t\tconst type = typeof payload === 'string'\n\t\t\t\t? payload\n\t\t\t\t: (payload && typeof payload === 'object' && typeof payload.type === 'string' ? payload.type : '')\n\t\t\tif (!type) {\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (type === 'epnc:host-visible') {\n\t\t\t\tpadSync.start()\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (type === 'epnc:host-hidden') {\n\t\t\t\tpadSync.fireAndForget(true, true)\n\t\t\t\tpadSync.stop()\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (type === 'epnc:host-before-close' || type === 'epnc:host-sync-now') {\n\t\t\t\tconst keepalive = type !== 'epnc:host-sync-now'\n\t\t\t\tconst reason = type === 'epnc:host-before-close' ? 'before-close' : 'sync-now'\n\t\t\t\tpostHostMessage(event.source, origin, 'epnc:sync-flush-started', {\n\t\t\t\t\treason,\n\t\t\t\t})\n\t\t\t\tvoid padSync.sync(true, keepalive)\n\t\t\t\t\t.then((result) => {\n\t\t\t\t\t\tpostHostMessage(event.source, origin, 'epnc:sync-flush-finished', {\n\t\t\t\t\t\t\treason,\n\t\t\t\t\t\t\tresult: result && typeof result === 'object' ? result : {},\n\t\t\t\t\t\t})\n\t\t\t\t\t})\n\t\t\t\t\t.catch((error) => {\n\t\t\t\t\t\tpostHostMessage(event.source, origin, 'epnc:sync-flush-failed', {\n\t\t\t\t\t\t\treason,\n\t\t\t\t\t\t\tmessage: error instanceof Error ? error.message : 'Sync failed.',\n\t\t\t\t\t\t})\n\t\t\t\t\t})\n\t\t\t\tif (keepalive) {\n\t\t\t\t\tpadSync.stop()\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\twindow.addEventListener('message', messageHandler)\n\t}\n\n\tconst isMissingFrontmatterError = (error) => {\n\t\tif (!(error instanceof Error)) {\n\t\t\treturn false\n\t\t}\n\t\treturn String(error.message || '').includes('Missing YAML frontmatter')\n\t}\n\n\tconst openPad = async () => {\n\t\tconst body = new URLSearchParams()\n\t\tbody.set('fileId', String(fileId))\n\t\tconst data = await fetchJson(openByIdUrl, {\n\t\t\tmethod: 'POST',\n\t\t\theaders: {\n\t\t\t\t'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',\n\t\t\t\trequesttoken: requestToken(),\n\t\t\t},\n\t\t\tbody: body.toString(),\n\t\t})\n\t\tif (!data || typeof data.url !== 'string' || data.url.trim() === '') {\n\t\t\tthrow new Error('Pad open API did not return a valid URL.')\n\t\t}\n\t\treturn data\n\t}\n\n\tconst initializePad = async () => {\n\t\tconst url = initializeByIdUrlTemplate.replace('__FILE_ID__', encodeURIComponent(String(fileId)))\n\t\tconst data = await fetchJson(url, {\n\t\t\tmethod: 'POST',\n\t\t\theaders: {\n\t\t\t\trequesttoken: requestToken(),\n\t\t\t},\n\t\t})\n\t\tif (data && data.status === 'migrated_from_legacy') {\n\t\t\t// Mirror the backend audit-log entry to the browser console; no\n\t\t\t// toast surface is wired up in this app yet.\n\t\t\tconsole.info('Legacy Ownpad .pad migrated to managed format on first open.')\n\t\t}\n\t}\n\n\tconst hideAllPanels = () => {\n\t\tif (loadingNode instanceof HTMLElement) loadingNode.hidden = true\n\t\tif (errorNode instanceof HTMLElement) errorNode.hidden = true\n\t\tif (recoveryNode instanceof HTMLElement) recoveryNode.hidden = true\n\t\tif (iframe instanceof HTMLIFrameElement) {\n\t\t\tiframe.hidden = true\n\t\t\tiframe.removeAttribute('src')\n\t\t}\n\t}\n\n\tconst showRecoveryChecking = () => {\n\t\tif (!(recoveryNode instanceof HTMLElement)) return\n\t\thideAllPanels()\n\t\trecoveryNode.hidden = false\n\t\tif (recoveryMessageNode instanceof HTMLElement) recoveryMessageNode.textContent = recoveryCheckingText\n\t\tif (recoveryBodyNode instanceof HTMLElement) recoveryBodyNode.textContent = ''\n\t\tif (recoveryActionsNode instanceof HTMLElement) recoveryActionsNode.replaceChildren()\n\t}\n\n\tconst buildRecoveryButton = (label, onClick) => {\n\t\tconst button = document.createElement('button')\n\t\tbutton.type = 'button'\n\t\tbutton.className = 'epnc-embed__recovery-button'\n\t\tbutton.textContent = label\n\t\tbutton.addEventListener('click', onClick)\n\t\treturn button\n\t}\n\n\tconst showRecoveryWithOriginal = (originalEmbedUrl, errorMessage) => {\n\t\tif (!(recoveryNode instanceof HTMLElement)) return\n\t\thideAllPanels()\n\t\trecoveryNode.hidden = false\n\t\tif (recoveryMessageNode instanceof HTMLElement) recoveryMessageNode.textContent = errorMessage\n\t\tif (recoveryBodyNode instanceof HTMLElement) recoveryBodyNode.textContent = recoveryCopyBodyText\n\t\tif (recoveryActionsNode instanceof HTMLElement) {\n\t\t\tconst openLink = document.createElement('a')\n\t\t\topenLink.className = 'epnc-embed__recovery-button epnc-embed__recovery-button--primary'\n\t\t\t// Stay in embed mode: load the original's embed page in the same\n\t\t\t// frame so a host iframe doesn't need to deal with a new tab.\n\t\t\topenLink.href = originalEmbedUrl\n\t\t\topenLink.textContent = recoveryOpenOriginalText\n\t\t\trecoveryActionsNode.replaceChildren(\n\t\t\t\topenLink,\n\t\t\t\tbuildRecoveryButton(recoveryCreateNewText, () => { void triggerRecovery() }),\n\t\t\t)\n\t\t}\n\t}\n\n\tconst showRecoveryWithoutOriginal = (errorMessage) => {\n\t\tif (!(recoveryNode instanceof HTMLElement)) return\n\t\thideAllPanels()\n\t\trecoveryNode.hidden = false\n\t\tif (recoveryMessageNode instanceof HTMLElement) recoveryMessageNode.textContent = errorMessage\n\t\tif (recoveryBodyNode instanceof HTMLElement) recoveryBodyNode.textContent = recoveryOrphanBodyText\n\t\tif (recoveryActionsNode instanceof HTMLElement) {\n\t\t\tconst button = buildRecoveryButton(recoveryCreateNewText, () => { void triggerRecovery() })\n\t\t\tbutton.classList.add('epnc-embed__recovery-button--primary')\n\t\t\trecoveryActionsNode.replaceChildren(button)\n\t\t}\n\t}\n\n\tconst setRecoveryActionsBusy = (busy) => {\n\t\tif (!(recoveryActionsNode instanceof HTMLElement)) return\n\t\tconst buttons = recoveryActionsNode.querySelectorAll('button')\n\t\tbuttons.forEach((node) => {\n\t\t\tnode.disabled = busy\n\t\t\tif (busy) {\n\t\t\t\tnode.dataset.originalLabel = node.dataset.originalLabel || node.textContent || ''\n\t\t\t\tnode.textContent = recoveryCreatingText\n\t\t\t} else if (node.dataset.originalLabel) {\n\t\t\t\tnode.textContent = node.dataset.originalLabel\n\t\t\t\tdelete node.dataset.originalLabel\n\t\t\t}\n\t\t})\n\t}\n\n\tconst triggerRecovery = async () => {\n\t\tif (recoverUrlTemplate === '') {\n\t\t\tshowError('Recovery is not available in this embed.')\n\t\t\treturn\n\t\t}\n\t\tsetRecoveryActionsBusy(true)\n\t\tconst url = recoverUrlTemplate.replace('__FILE_ID__', encodeURIComponent(String(fileId)))\n\t\ttry {\n\t\t\tawait fetchJson(url, {\n\t\t\t\tmethod: 'POST',\n\t\t\t\theaders: { requesttoken: requestToken() },\n\t\t\t})\n\t\t\t// Restart the open flow now that the binding exists.\n\t\t\thideAllPanels()\n\t\t\tif (loadingNode instanceof HTMLElement) loadingNode.hidden = false\n\t\t\tvoid run()\n\t\t} catch (error) {\n\t\t\tsetRecoveryActionsBusy(false)\n\t\t\tif (recoveryMessageNode instanceof HTMLElement) {\n\t\t\t\trecoveryMessageNode.textContent = error instanceof Error && error.message\n\t\t\t\t\t? error.message\n\t\t\t\t\t: 'Recovery failed.'\n\t\t\t}\n\t\t}\n\t}\n\n\tconst enterRecoveryFlow = async (initialError) => {\n\t\tconst errorMessage = initialError instanceof Error && initialError.message\n\t\t\t? initialError.message\n\t\t\t: 'Pad open failed.'\n\t\tshowRecoveryChecking()\n\t\tif (findOriginalUrlTemplate === '') {\n\t\t\tshowRecoveryWithoutOriginal(errorMessage)\n\t\t\treturn\n\t\t}\n\t\tconst lookupUrl = findOriginalUrlTemplate.replace('__FILE_ID__', encodeURIComponent(String(fileId)))\n\t\ttry {\n\t\t\tconst hint = await fetchJson(lookupUrl, { method: 'GET' })\n\t\t\tif (hint && hint.found === true && typeof hint.embed_url === 'string' && hint.embed_url !== '') {\n\t\t\t\tshowRecoveryWithOriginal(hint.embed_url, errorMessage)\n\t\t\t\treturn\n\t\t\t}\n\t\t} catch {\n\t\t\t// Silent: fall through to the no-match branch.\n\t\t}\n\t\tshowRecoveryWithoutOriginal(errorMessage)\n\t}\n\n\tconst run = async () => {\n\t\tif (!Number.isFinite(fileId) || fileId <= 0 || openByIdUrl === '' || initializeByIdUrlTemplate === '') {\n\t\t\tshowError('Embed configuration is incomplete.')\n\t\t\treturn\n\t\t}\n\t\tif (requestToken() === '') {\n\t\t\tshowError('CSRF request token is missing.')\n\t\t\treturn\n\t\t}\n\t\ttry {\n\t\t\tlet data\n\t\t\ttry {\n\t\t\t\tdata = await openPad()\n\t\t\t} catch (error) {\n\t\t\t\tif (!isMissingFrontmatterError(error)) {\n\t\t\t\t\tthrow error\n\t\t\t\t}\n\t\t\t\tawait initializePad()\n\t\t\t\tdata = await openPad()\n\t\t\t}\n\t\t\tconst syncUrl = typeof data.sync_url === 'string' ? data.sync_url.trim() : ''\n\t\t\tconst intervalSeconds = Number(data.sync_interval_seconds ?? 0)\n\t\t\tconst intervalMs = Number.isFinite(intervalSeconds) && intervalSeconds > 0 ? intervalSeconds * 1000 : 120000\n\t\t\tpadSync.configure({ syncUrl, intervalMs })\n\t\t\tpadSync.installLifecycleHandlers()\n\t\t\tinstallHostMessageHandler()\n\t\t\tpadSync.start()\n\t\t\tif (data.is_external === true) {\n\t\t\t\tshowExternalPadPreview(\n\t\t\t\t\tdata.url,\n\t\t\t\t\ttypeof data.snapshot_text === 'string' ? data.snapshot_text : '',\n\t\t\t\t\ttypeof data.snapshot_html === 'string' ? data.snapshot_html : '',\n\t\t\t\t)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tshowIframe(data.url)\n\t\t} catch (error) {\n\t\t\tif (error && error.code === 'missing_binding') {\n\t\t\t\tvoid enterRecoveryFlow(error)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tshowError(error instanceof Error ? error.message : 'Pad open failed.')\n\t\t}\n\t}\n\n\tvoid run()\n})()\n"],"names":["root","fileId","openByIdUrl","initializeByIdUrlTemplate","recoverUrlTemplate","findOriginalUrlTemplate","templateRequestToken","trustedOrigins","value","loadingNode","errorNode","errorMessageNode","recoveryNode","recoveryMessageNode","recoveryBodyNode","recoveryActionsNode","iframe","externalTitleText","externalMessageText","externalEmptyText","externalLinkText","recoveryCheckingText","recoveryCopyBodyText","recoveryOrphanBodyText","recoveryOpenOriginalText","recoveryCreateNewText","recoveryCreatingText","messageHandler","requestToken","ocRequestToken","padSync","createPadSync","showError","message","showExternalPadPreview","url","snapshotText","snapshotHtml","snapshot","inner","title","link","actions","sanitizedSnapshotHtml","sanitizeSnapshotHtml","hasSnapshotHtml","preview","heading","header","showIframe","revealIframe","postHostMessage","source","origin","type","payload","isAllowedMessageOrigin","installHostMessageHandler","event","keepalive","reason","result","error","isMissingFrontmatterError","openPad","body","data","fetchJson","initializePad","hideAllPanels","showRecoveryChecking","buildRecoveryButton","label","onClick","button","showRecoveryWithOriginal","originalEmbedUrl","errorMessage","openLink","triggerRecovery","showRecoveryWithoutOriginal","setRecoveryActionsBusy","busy","node","run","enterRecoveryFlow","initialError","lookupUrl","hint","syncUrl","intervalSeconds","intervalMs"],"mappings":"4KASC,UAAY,CAGZ,MAAMA,EAAO,SAAS,eAAe,0BAA0B,EAC/D,GAAI,EAAEA,aAAgB,aACrB,OAGD,MAAMC,EAAS,OAAOD,EAAK,aAAa,cAAc,GAAK,EAAE,EACvDE,EAAc,OAAOF,EAAK,aAAa,qBAAqB,GAAK,EAAE,EAAE,KAAI,EACzEG,EAA4B,OAAOH,EAAK,aAAa,oCAAoC,GAAK,EAAE,EAAE,KAAI,EACtGI,EAAqB,OAAOJ,EAAK,aAAa,2BAA2B,GAAK,EAAE,EAAE,KAAI,EACtFK,EAA0B,OAAOL,EAAK,aAAa,iCAAiC,GAAK,EAAE,EAAE,KAAI,EACjGM,EAAuB,OAAON,EAAK,aAAa,oBAAoB,GAAK,EAAE,EAAE,KAAI,EACjFO,EAAiB,OAAOP,EAAK,aAAa,sBAAsB,GAAK,EAAE,EAC3E,MAAM,KAAK,EACX,IAAKQ,GAAUA,EAAM,KAAI,CAAE,EAC3B,OAAO,OAAO,EACVC,EAAcT,EAAK,cAAc,2BAA2B,EAC5DU,EAAYV,EAAK,cAAc,yBAAyB,EACxDW,EAAmBX,EAAK,cAAc,iCAAiC,EACvEY,EAAeZ,EAAK,cAAc,4BAA4B,EAC9Da,EAAsBb,EAAK,cAAc,oCAAoC,EAC7Ec,EAAmBd,EAAK,cAAc,iCAAiC,EACvEe,EAAsBf,EAAK,cAAc,oCAAoC,EAC7EgB,EAAShB,EAAK,cAAc,0BAA0B,EACtDiB,EAAoB,OAAOjB,EAAK,aAAa,0BAA0B,GAAK,yBAAyB,EAAE,KAAI,EAC3GkB,EAAsB,OAAOlB,EAAK,aAAa,4BAA4B,GAAK,wCAAwC,EAAE,KAAI,EAC9HmB,EAAoB,OAAOnB,EAAK,aAAa,0BAA0B,GAAK,qDAAqD,EAAE,KAAI,EACvIoB,EAAmB,OAAOpB,EAAK,aAAa,yBAAyB,GAAK,mBAAmB,EAAE,KAAI,EACnGqB,EAAuB,OAAOrB,EAAK,aAAa,6BAA6B,GAAK,kCAAkC,EAAE,KAAI,EAC1HsB,EAAuB,OAAOtB,EAAK,aAAa,8BAA8B,GAAK,EAAE,EAAE,KAAI,EAC3FuB,EAAyB,OAAOvB,EAAK,aAAa,gCAAgC,GAAK,EAAE,EAAE,KAAI,EAC/FwB,EAA2B,OAAOxB,EAAK,aAAa,kCAAkC,GAAK,6BAA6B,EAAE,KAAI,EAC9HyB,EAAwB,OAAOzB,EAAK,aAAa,+BAA+B,GAAK,+BAA+B,EAAE,KAAI,EAC1H0B,EAAuB,OAAO1B,EAAK,aAAa,6BAA6B,GAAK,qBAAqB,EAAE,KAAI,EACnH,IAAI2B,EAAiB,KAErB,MAAMC,EAAe,IAAMC,GAAevB,CAAoB,EACxDwB,EAAUC,GAAc,CAAE,aAAAH,CAAY,CAAE,EAExCI,EAAaC,GAAY,CAC1BxB,aAAuB,cAC1BA,EAAY,OAAS,GACrBA,EAAY,UAAU,OAAO,+BAA+B,GAEzDO,aAAkB,oBACrBA,EAAO,OAAS,GAChBA,EAAO,gBAAgB,KAAK,GAEzBL,aAA4B,cAC/BA,EAAiB,YAAc,OAAOsB,GAAW,gBAAgB,GAE9DvB,aAAqB,cACxBA,EAAU,OAAS,GAErB,EAEMwB,EAAyB,CAACC,EAAKC,EAAcC,IAAiB,CAQnE,GAPI3B,aAAqB,cACxBA,EAAU,OAAS,IAEhBM,aAAkB,oBACrBA,EAAO,OAAS,GAChBA,EAAO,gBAAgB,KAAK,GAEzB,EAAEP,aAAuB,aAC5B,OAEDA,EAAY,OAAS,GACrBA,EAAY,UAAU,IAAI,+BAA+B,EACzDA,EAAY,YAAc,GAE1B,MAAM6B,EAAW,SAAS,cAAc,KAAK,EAC7CA,EAAS,UAAY,uBAErB,MAAMC,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,UAAY,6BAElB,MAAMC,EAAQ,SAAS,cAAc,IAAI,EACzCA,EAAM,UAAY,6BAClBA,EAAM,YAAcvB,EAEpB,MAAMgB,EAAU,SAAS,cAAc,GAAG,EAC1CA,EAAQ,UAAY,+BACpBA,EAAQ,YAAcf,EAEtB,MAAMuB,EAAO,SAAS,cAAc,GAAG,EACvCA,EAAK,UAAY,4BACjBA,EAAK,KAAON,EACZM,EAAK,OAAS,SACdA,EAAK,IAAM,sBACXA,EAAK,YAAcrB,EAEnB,MAAMsB,EAAU,SAAS,cAAc,KAAK,EAC5CA,EAAQ,UAAY,+BACpBA,EAAQ,YAAYD,CAAI,EAMxB,MAAME,EAAwBC,GAAqBP,CAAY,EACzDQ,EAAkBF,EAAsB,SAAW,GACnDG,EAAU,SAAS,cAAcD,EAAkB,MAAQ,KAAK,EACtEC,EAAQ,UAAYD,EACjB,4DACA,4BACCA,EACHC,EAAQ,UAAYH,EAEpBG,EAAQ,YAAc,OAAOV,GAAgB,EAAE,EAAE,KAAI,IAAO,GAAK,OAAOA,CAAY,EAAIjB,EAGzF,MAAM4B,EAAU,SAAS,cAAc,KAAK,EAC5CA,EAAQ,UAAY,+BACpBA,EAAQ,YAAYP,CAAK,EACzBO,EAAQ,YAAYd,CAAO,EAE3B,MAAMe,EAAS,SAAS,cAAc,KAAK,EAC3CA,EAAO,UAAY,8BACnBA,EAAO,YAAYD,CAAO,EAC1BC,EAAO,YAAYN,CAAO,EAE1BH,EAAM,YAAYS,CAAM,EACxBT,EAAM,YAAYO,CAAO,EACzBR,EAAS,YAAYC,CAAK,EAC1B9B,EAAY,YAAY6B,CAAQ,CACjC,EAEMW,GAAcd,GAAQ,CAC3B,GAAI,EAAEnB,aAAkB,mBAAoB,CAC3CgB,EAAU,gCAAgC,EAC1C,MACD,CACItB,aAAqB,cACxBA,EAAU,OAAS,IAEhBD,aAAuB,aAC1BA,EAAY,UAAU,OAAO,+BAA+B,EAE7DO,EAAO,OAAS,GAChB,MAAMkC,EAAe,IAAM,CAC1BlC,EAAO,oBAAoB,OAAQkC,CAAY,EAC/C,OAAO,WAAW,IAAM,CACnBzC,aAAuB,cAC1BA,EAAY,OAAS,IAEtBO,EAAO,OAAS,EACjB,EAAG,GAAsB,CAC1B,EACAA,EAAO,iBAAiB,OAAQkC,EAAc,CAAE,KAAM,EAAI,CAAE,EAC5DlC,EAAO,IAAMmB,CACd,EAEMgB,EAAkB,CAACC,EAAQC,EAAQC,EAAMC,EAAU,KAAO,CAE3D,CAACH,GAAU,OAAOA,EAAO,aAAgB,YAG7CA,EAAO,YAAY,OAAO,OAAO,CAChC,KAAAE,EACA,OAAArD,CACH,EAAKsD,CAAO,EAAGF,CAAM,CACpB,EAEMG,GAA0BH,GAC3B,CAACA,GAAUA,IAAW,OAClB,GAEJA,IAAW,OAAO,SAAS,OACvB,GAED9C,EAAe,SAAS8C,CAAM,EAGhCI,GAA4B,IAAM,CACnC9B,IAGJA,EAAkB+B,GAAU,CAC3B,MAAML,EAAS,OAAOK,EAAM,QAAU,EAAE,EACxC,GAAI,CAACF,GAAuBH,CAAM,EACjC,OAED,MAAME,EAAUG,EAAM,KAChBJ,EAAO,OAAOC,GAAY,SAC7BA,EACCA,GAAW,OAAOA,GAAY,UAAY,OAAOA,EAAQ,MAAS,SAAWA,EAAQ,KAAO,GAChG,GAAKD,EAGL,CAAA,GAAIA,IAAS,oBAAqB,CACjCxB,EAAQ,MAAK,EACb,MACD,CACA,GAAIwB,IAAS,mBAAoB,CAChCxB,EAAQ,cAAc,GAAM,EAAI,EAChCA,EAAQ,KAAI,EACZ,MACD,CACA,GAAIwB,IAAS,0BAA4BA,IAAS,qBAAsB,CACvE,MAAMK,EAAYL,IAAS,qBACrBM,EAASN,IAAS,yBAA2B,eAAiB,WACpEH,EAAgBO,EAAM,OAAQL,EAAQ,0BAA2B,CAChE,OAAAO,CACL,CAAK,EACI9B,EAAQ,KAAK,GAAM6B,CAAS,EAC/B,KAAME,GAAW,CACjBV,EAAgBO,EAAM,OAAQL,EAAQ,2BAA4B,CACjE,OAAAO,EACA,OAAQC,GAAU,OAAOA,GAAW,SAAWA,EAAS,CAAA,CAC/D,CAAO,CACF,CAAC,EACA,MAAOC,GAAU,CACjBX,EAAgBO,EAAM,OAAQL,EAAQ,yBAA0B,CAC/D,OAAAO,EACA,QAASE,aAAiB,MAAQA,EAAM,QAAU,cACzD,CAAO,CACF,CAAC,EACEH,GACH7B,EAAQ,KAAI,CAEd,CAAA,CACD,EACA,OAAO,iBAAiB,UAAWH,CAAc,EAClD,EAEMoC,GAA6BD,GAC5BA,aAAiB,MAGhB,OAAOA,EAAM,SAAW,EAAE,EAAE,SAAS,0BAA0B,EAF9D,GAKHE,EAAU,SAAY,CAC3B,MAAMC,EAAO,IAAI,gBACjBA,EAAK,IAAI,SAAU,OAAOhE,CAAM,CAAC,EACjC,MAAMiE,EAAO,MAAMC,EAAUjE,EAAa,CACzC,OAAQ,OACR,QAAS,CACR,eAAgB,kDAChB,aAAc0B,EAAY,CAC9B,EACG,KAAMqC,EAAK,SAAQ,CACtB,CAAG,EACD,GAAI,CAACC,GAAQ,OAAOA,EAAK,KAAQ,UAAYA,EAAK,IAAI,KAAI,IAAO,GAChE,MAAM,IAAI,MAAM,0CAA0C,EAE3D,OAAOA,CACR,EAEME,GAAgB,SAAY,CACjC,MAAMjC,EAAMhC,EAA0B,QAAQ,cAAe,mBAAmB,OAAOF,CAAM,CAAC,CAAC,EACzFiE,EAAO,MAAMC,EAAUhC,EAAK,CACjC,OAAQ,OACR,QAAS,CACR,aAAcP,EAAY,CAC9B,CACA,CAAG,EACGsC,GAAQA,EAAK,SAAW,wBAG3B,QAAQ,KAAK,8DAA8D,CAE7E,EAEMG,EAAgB,IAAM,CACvB5D,aAAuB,cAAaA,EAAY,OAAS,IACzDC,aAAqB,cAAaA,EAAU,OAAS,IACrDE,aAAwB,cAAaA,EAAa,OAAS,IAC3DI,aAAkB,oBACrBA,EAAO,OAAS,GAChBA,EAAO,gBAAgB,KAAK,EAE9B,EAEMsD,GAAuB,IAAM,CAC5B1D,aAAwB,cAC9ByD,EAAa,EACbzD,EAAa,OAAS,GAClBC,aAA+B,cAAaA,EAAoB,YAAcQ,GAC9EP,aAA4B,cAAaA,EAAiB,YAAc,IACxEC,aAA+B,aAAaA,EAAoB,gBAAe,EACpF,EAEMwD,EAAsB,CAACC,EAAOC,IAAY,CAC/C,MAAMC,EAAS,SAAS,cAAc,QAAQ,EAC9C,OAAAA,EAAO,KAAO,SACdA,EAAO,UAAY,8BACnBA,EAAO,YAAcF,EACrBE,EAAO,iBAAiB,QAASD,CAAO,EACjCC,CACR,EAEMC,GAA2B,CAACC,EAAkBC,IAAiB,CACpE,GAAMjE,aAAwB,cAC9ByD,EAAa,EACbzD,EAAa,OAAS,GAClBC,aAA+B,cAAaA,EAAoB,YAAcgE,GAC9E/D,aAA4B,cAAaA,EAAiB,YAAcQ,GACxEP,aAA+B,aAAa,CAC/C,MAAM+D,EAAW,SAAS,cAAc,GAAG,EAC3CA,EAAS,UAAY,mEAGrBA,EAAS,KAAOF,EAChBE,EAAS,YAActD,EACvBT,EAAoB,gBACnB+D,EACAP,EAAoB9C,EAAuB,IAAM,CAAOsD,EAAe,CAAG,CAAC,CAC/E,CACE,CACD,EAEMC,EAA+BH,GAAiB,CACrD,GAAMjE,aAAwB,cAC9ByD,EAAa,EACbzD,EAAa,OAAS,GAClBC,aAA+B,cAAaA,EAAoB,YAAcgE,GAC9E/D,aAA4B,cAAaA,EAAiB,YAAcS,GACxER,aAA+B,aAAa,CAC/C,MAAM2D,EAASH,EAAoB9C,EAAuB,IAAM,CAAOsD,EAAe,CAAG,CAAC,EAC1FL,EAAO,UAAU,IAAI,sCAAsC,EAC3D3D,EAAoB,gBAAgB2D,CAAM,CAC3C,CACD,EAEMO,EAA0BC,GAAS,CAClCnE,aAA+B,aACrBA,EAAoB,iBAAiB,QAAQ,EACrD,QAASoE,GAAS,CACzBA,EAAK,SAAWD,EACZA,GACHC,EAAK,QAAQ,cAAgBA,EAAK,QAAQ,eAAiBA,EAAK,aAAe,GAC/EA,EAAK,YAAczD,GACTyD,EAAK,QAAQ,gBACvBA,EAAK,YAAcA,EAAK,QAAQ,cAChC,OAAOA,EAAK,QAAQ,cAEtB,CAAC,CACF,EAEMJ,EAAkB,SAAY,CACnC,GAAI3E,IAAuB,GAAI,CAC9B4B,EAAU,0CAA0C,EACpD,MACD,CACAiD,EAAuB,EAAI,EAC3B,MAAM9C,EAAM/B,EAAmB,QAAQ,cAAe,mBAAmB,OAAOH,CAAM,CAAC,CAAC,EACxF,GAAI,CACH,MAAMkE,EAAUhC,EAAK,CACpB,OAAQ,OACR,QAAS,CAAE,aAAcP,GAAc,CAC3C,CAAI,EAEDyC,EAAa,EACT5D,aAAuB,cAAaA,EAAY,OAAS,IACxD2E,EAAG,CACT,OAAStB,EAAO,CACfmB,EAAuB,EAAK,EACxBpE,aAA+B,cAClCA,EAAoB,YAAciD,aAAiB,OAASA,EAAM,QAC/DA,EAAM,QACN,mBAEL,CACD,EAEMuB,GAAoB,MAAOC,GAAiB,CACjD,MAAMT,EAAeS,aAAwB,OAASA,EAAa,QAChEA,EAAa,QACb,mBAEH,GADAhB,GAAoB,EAChBjE,IAA4B,GAAI,CACnC2E,EAA4BH,CAAY,EACxC,MACD,CACA,MAAMU,EAAYlF,EAAwB,QAAQ,cAAe,mBAAmB,OAAOJ,CAAM,CAAC,CAAC,EACnG,GAAI,CACH,MAAMuF,EAAO,MAAMrB,EAAUoB,EAAW,CAAE,OAAQ,KAAK,CAAE,EACzD,GAAIC,GAAQA,EAAK,QAAU,IAAQ,OAAOA,EAAK,WAAc,UAAYA,EAAK,YAAc,GAAI,CAC/Fb,GAAyBa,EAAK,UAAWX,CAAY,EACrD,MACD,CACD,MAAQ,CAER,CACAG,EAA4BH,CAAY,CACzC,EAEMO,EAAM,SAAY,CACvB,GAAI,CAAC,OAAO,SAASnF,CAAM,GAAKA,GAAU,GAAKC,IAAgB,IAAMC,IAA8B,GAAI,CACtG6B,EAAU,oCAAoC,EAC9C,MACD,CACA,GAAIJ,EAAY,IAAO,GAAI,CAC1BI,EAAU,gCAAgC,EAC1C,MACD,CACA,GAAI,CACH,IAAIkC,EACJ,GAAI,CACHA,EAAO,MAAMF,EAAO,CACrB,OAASF,EAAO,CACf,GAAI,CAACC,GAA0BD,CAAK,EACnC,MAAMA,EAEP,MAAMM,GAAa,EACnBF,EAAO,MAAMF,EAAO,CACrB,CACA,MAAMyB,EAAU,OAAOvB,EAAK,UAAa,SAAWA,EAAK,SAAS,OAAS,GACrEwB,EAAkB,OAAOxB,EAAK,uBAAyB,CAAC,EACxDyB,EAAa,OAAO,SAASD,CAAe,GAAKA,EAAkB,EAAIA,EAAkB,IAAO,KAKtG,GAJA5D,EAAQ,UAAU,CAAE,QAAA2D,EAAS,WAAAE,CAAU,CAAE,EACzC7D,EAAQ,yBAAwB,EAChC2B,GAAyB,EACzB3B,EAAQ,MAAK,EACToC,EAAK,cAAgB,GAAM,CAC9BhC,EACCgC,EAAK,IACL,OAAOA,EAAK,eAAkB,SAAWA,EAAK,cAAgB,GAC9D,OAAOA,EAAK,eAAkB,SAAWA,EAAK,cAAgB,EACnE,EACI,MACD,CACAjB,GAAWiB,EAAK,GAAG,CACpB,OAASJ,EAAO,CACf,GAAIA,GAASA,EAAM,OAAS,kBAAmB,CACzCuB,GAAkBvB,CAAK,EAC5B,MACD,CACA9B,EAAU8B,aAAiB,MAAQA,EAAM,QAAU,kBAAkB,CACtE,CACD,EAEKsB,EAAG,CACT,GAAC"}
\ No newline at end of file
diff --git a/js/etherpad_nextcloud-viewer-main.mjs b/js/etherpad_nextcloud-viewer-main.mjs
index 72c7401..21d6fc4 100644
--- a/js/etherpad_nextcloud-viewer-main.mjs
+++ b/js/etherpad_nextcloud-viewer-main.mjs
@@ -1,2 +1,2 @@
-import{V as _,M as x,t as l,f as y,A as v,o as w}from"./oc-compat-hVqZy-MX.chunk.mjs";import{m as k,o as R,a as b,l as I}from"./api-client-BXEMiUh7.chunk.mjs";import{c as L}from"./pad-sync-B0gz-oBk.chunk.mjs";const O=f=>String(f||"").replace(/&/g,"&amp;").replace(/"/g,"&quot;").replace(/</g,"&lt;").replace(/>/g,"&gt;"),C=["http:","https:"],F=f=>{try{const u=new URL(String(f||""));return C.includes(u.protocol)&&u.username===""&&u.password===""}catch{return!1}},U="default-src 'none'; frame-src http: https:; style-src 'unsafe-inline'",M=f=>{const u=F(f)?O(f):"";return'<!doctype html><html><head><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="'+O(U)+'"><style>html,body,iframe{width:100%;height:100%;margin:0;border:0;overflow:hidden}iframe{display:block}</style></head><body><iframe src="'+u+'" title="Etherpad"></iframe></body></html>'};(function(){let f=0;const u={name:"EtherpadNextcloudViewer",props:{filename:{type:String,required:!1,default:""},basename:{type:String,required:!1,default:""},source:{type:String,required:!1,default:""},fileid:{type:[String,Number],required:!1,default:null},fileId:{type:[String,Number],required:!1,default:null},fileInfo:{type:Object,required:!1,default:null}},data(){return{iframeSrc:"",isLoading:!0,loadError:"",canRecover:!1,isRecovering:!1,isCheckingOriginal:!1,originalPad:null,externalOpenUrl:"",externalOpenMessage:"",snapshotMode:"",snapshot:{text:"",html:""},resolveGeneration:0}},computed:{sourcePath(){const e=typeof this.source=="string"?this.source.trim():"";return e&&I(e)||""},filePath(){const e=t=>String(t||"").trim().replace(/\s+\.pad$/i,".pad"),i=t=>{const h=String(t||"").trim();return!h||h==="/"?"/":h.startsWith("/")?h:"/"+h},n=(t,h)=>{if(!h)return"";if(h.startsWith("/"))return h;const g=i(t);return g==="/"?"/"+h:g+"/"+h},a=t=>typeof t=="string"&&t.toLowerCase().endsWith(".pad");if(a(this.sourcePath))return this.sourcePath;const s=this.fileInfo&&typeof this.fileInfo=="object"?this.fileInfo:null,d=s&&typeof s.path=="string"?e(s.path):"";if(a(d))return d.startsWith("/")?d:"/"+d;const c=e(this.filename||this.basename||s&&(s.name||s.basename)||"");if(!c)return"";const o=s&&typeof s.dirname=="string"?s.dirname:"";if(o){const t=n(o,c);if(a(t))return t}const m=new URLSearchParams(window.location.search||"").get("dir")||"/",r=n(m,c);return a(r)?r:"/"+c},resolvedFileId(){const e=[this.fileid,this.fileId,this.fileInfo&&(this.fileInfo.fileid||this.fileInfo.fileId||this.fileInfo.id)];for(const a of e){const s=Number(a);if(Number.isFinite(s)&&s>0)return s}if(new URLSearchParams(window.location.search||"").get("openfile")!=="true")return null;const i=(window.location.pathname||"").match(/\/apps\/files\/files\/(\d+)\/?$/);if(!i)return null;const n=Number(i[1]);return Number.isFinite(n)&&n>0?n:null}},watch:{filePath:{immediate:!0,handler(){this.resolveOpenUrl()}},resolvedFileId(){this.resolveOpenUrl()}},methods:{async fetchOpenPayload(e,i={}){const n=Object.assign({Accept:"application/json"},i.headers||{}),a=await fetch(e,Object.assign({method:"GET",credentials:"same-origin",headers:n},i)),s=await a.json().catch(()=>({}));if(!a.ok){const d=new Error(s&&s.message||"Pad open failed.");throw s&&typeof s.code=="string"&&(d.code=s.code),d}if(!s||s.is_readonly_snapshot!==!0&&(typeof s.url!="string"||s.url.trim()===""))throw new Error("Pad open API did not return a valid URL.");return s},isMissingFrontmatterError(e){return e instanceof Error?String(e.message||"").includes("Missing YAML frontmatter"):!1},async initializeMissingFrontmatter(){const e={Accept:"application/json",requesttoken:w()},i=(o,m)=>{const r=new Error(o&&o.message||m);return o&&typeof o.code=="string"&&o.code!==""&&(r.code=o.code),r},n=o=>{o&&o.status==="migrated_from_legacy"&&console.info("Legacy Ownpad .pad migrated to managed format on first open.")};if(this.resolvedFileId!==null){const o=y("/apps/"+v+"/api/v1/pads/initialize-by-id/"+encodeURIComponent(String(this.resolvedFileId))),m=await fetch(o,{method:"POST",credentials:"same-origin",headers:e}),r=await m.json().catch(()=>({}));if(!m.ok)throw i(r,"Pad initialization failed.");return n(r),r}if(!this.filePath)throw new Error("Pad initialization failed: missing file path.");const a=new URLSearchParams;a.set("file",this.filePath);const s=y("/apps/"+v+"/api/v1/pads/initialize"),d=await fetch(s,{method:"POST",credentials:"same-origin",headers:Object.assign({},e,{"Content-Type":"application/x-www-form-urlencoded;charset=UTF-8"}),body:a.toString()}),c=await d.json().catch(()=>({}));if(!d.ok)throw i(c,"Pad initialization failed.");return n(c),c},markLoaded(){this.$emit("update:loaded",!0)},padSync(){return this._padSync||(this._padSync=L({requestToken:()=>w()})),this._padSync},teardownSync(){this._padSync&&(this._padSync.fireAndForget(!0,!0),this._padSync.stop(),this._padSync.removeLifecycleHandlers())},async resolveOpenUrl(){const e=++this.resolveGeneration,i=()=>e===this.resolveGeneration;if(this.isLoading=!0,this.loadError="",this.canRecover=!1,this.isCheckingOriginal=!1,this.originalPad=null,this.iframeSrc="",this.externalOpenUrl="",this.externalOpenMessage="",this.snapshotMode="",this.snapshot={text:"",html:""},this._padSync&&(this._padSync.stop(),this._padSync.configure({syncUrl:""})),!this.filePath){if(!i())return;this.loadError="No .pad file selected.",this.isLoading=!1;return}const n=b(),a=y("/apps/"+v+"/api/v1/pads/open"),s=(()=>{if(!n)return"";const r=new URL(y("/apps/"+v+"/api/v1/public/open/"+encodeURIComponent(n)),window.location.origin);return r.searchParams.set("file",this.filePath),r.toString()})(),d=this.resolvedFileId!==null?y("/apps/"+v+"/api/v1/pads/open-by-id"):"",c=new URLSearchParams;c.set("file",this.filePath);const o=new URLSearchParams;this.resolvedFileId!==null&&o.set("fileId",String(this.resolvedFileId));const m={"Content-Type":"application/x-www-form-urlencoded;charset=UTF-8",requesttoken:w()};try{const r=async()=>{let p=null;if(s)p=await this.fetchOpenPayload(s);else if(d)try{p=await this.fetchOpenPayload(d,{method:"POST",headers:m,body:o.toString()})}catch{}return p||(p=await this.fetchOpenPayload(a,{method:"POST",headers:m,body:c.toString()})),p};let t;try{if(t=await r(),!i())return}catch(p){if(!this.isMissingFrontmatterError(p))throw p;if(await this.initializeMissingFrontmatter(),!i()||(t=await r(),!i()))return}const h=t&&typeof t.sync_url=="string"?t.sync_url:"",g=Number(t&&t.sync_interval_seconds),P=Number.isFinite(g)&&g>0?Math.max(5e3,Math.min(36e5,g*1e3)):12e4;if(this.padSync().configure({syncUrl:h,intervalMs:P}),this.padSync().installLifecycleHandlers(),h&&this.padSync().start(),t&&t.is_readonly_snapshot===!0){this.snapshotMode="readonly",this.snapshot={text:typeof t.snapshot_text=="string"?t.snapshot_text:"",html:typeof t.snapshot_html=="string"?t.snapshot_html:""},this.markLoaded();return}if(t&&t.is_external===!0&&typeof t.url=="string"&&t.url.trim()!==""){const p=t.url.trim();this.externalOpenUrl=p,this.externalOpenMessage=l("Read-only snapshot from the .pad file."),this.snapshotMode="external",this.snapshot={text:t&&typeof t.snapshot_text=="string"?t.snapshot_text:"",html:t&&typeof t.snapshot_html=="string"?t.snapshot_html:""},this.markLoaded();return}this.iframeSrc=t.url,this.markLoaded()}catch(r){if(!i())return;this.loadError=r instanceof Error?r.message:"Could not load pad.",this.canRecover=!!(r&&r.code==="missing_binding")&&this.resolvedFileId!==null&&!b(),this.canRecover&&this.fetchOriginalPadHint(e,i),this.markLoaded()}finally{if(!i())return;this.isLoading=!1}},async fetchOriginalPadHint(e,i){if(this.resolvedFileId!==null){this.isCheckingOriginal=!0;try{const n=await R(this.resolvedFileId);if(!i())return;n&&n.found===!0&&typeof n.viewer_url=="string"&&n.viewer_url!==""&&(this.originalPad={viewerUrl:n.viewer_url,path:typeof n.path=="string"?n.path:""})}catch{}finally{i()&&(this.isCheckingOriginal=!1)}}},async recoverFromSnapshot(){if(!(!this.canRecover||this.isRecovering||this.resolvedFileId===null)){this.isRecovering=!0;try{await k(this.resolvedFileId),this.loadError="",this.canRecover=!1,await this.resolveOpenUrl()}catch(e){this.loadError=e instanceof Error?e.message:"Could not load pad."}finally{this.isRecovering=!1}}},renderSnapshotView(e,i){const n=String(i.html||""),a=String(i.text||""),s=Array.isArray(i.actions)?i.actions:[];return e("div",{class:"epnc-native-snapshot"},[e("div",{class:"epnc-native-snapshot__inner"},[e("div",{class:"epnc-native-snapshot__header"},[e("div",{class:"epnc-native-snapshot__heading"},[e("div",{class:"epnc-native-snapshot__title"},i.title),e("div",{class:"epnc-native-snapshot__message"},i.message)]),s.length>0?e("div",{class:"epnc-native-snapshot__actions"},s):null]),n.trim()!==""?e("div",{class:"epnc-native-snapshot__text epnc-native-snapshot__text--html",domProps:{innerHTML:n}}):e("pre",{class:"epnc-native-snapshot__text"},a.trim()!==""?a:i.emptyMessage)])])}},beforeDestroy(){this.resolveGeneration+=1,this.teardownSync()},beforeUnmount(){this.resolveGeneration+=1,this.teardownSync()},render(e){if(this.loadError){const i=[e("div",{class:"epnc-native-error-title"},l("Could not open pad")),e("div",{class:"epnc-native-error-message"},this.loadError)];return this.canRecover&&(this.isCheckingOriginal?i.push(e("div",{class:"epnc-native-error-message"},l("Checking for the original pad..."))):this.originalPad?i.push(e("div",{class:"epnc-native-error-message"},l("This file looks like a copy of an existing .pad file in your account. Open the original to keep editing the linked pad, or create a new pad to fork the content stored in this file.")),e("a",{class:"button primary epnc-native-error-action",attrs:{href:this.originalPad.viewerUrl}},l("Open the original .pad file")),e("button",{class:"button epnc-native-error-action",attrs:{type:"button",disabled:this.isRecovering},on:{click:()=>{this.recoverFromSnapshot()}}},this.isRecovering?l("Creating new pad..."):l("Create new pad from this file"))):i.push(e("div",{class:"epnc-native-error-message"},l("We couldn't find a matching pad in this Nextcloud. You can create a new pad from the text stored in this file; from then on, opening this file will load the new pad.")),e("button",{class:"button primary epnc-native-error-action",attrs:{type:"button",disabled:this.isRecovering},on:{click:()=>{this.recoverFromSnapshot()}}},this.isRecovering?l("Creating new pad..."):l("Create new pad from this file")))),e("div",{class:"epnc-native-status epnc-native-status--error"},[e("div",{class:"epnc-native-error-card"},i)])}return this.snapshotMode==="external"?this.renderSnapshotView(e,{title:l("Pad from another server"),message:this.externalOpenMessage,actions:[e("a",{class:"button primary",attrs:{href:this.externalOpenUrl,target:"_blank",rel:"noopener noreferrer"}},l("Open original pad"))],html:this.snapshot.html,text:this.snapshot.text,emptyMessage:l("No synced snapshot is stored in this .pad file yet.")}):this.snapshotMode==="readonly"?this.renderSnapshotView(e,{title:l("Read-only snapshot"),message:l("Read-only snapshot from the .pad file."),html:this.snapshot.html,text:this.snapshot.text,emptyMessage:l("No synced snapshot is stored in this .pad file yet.")}):this.isLoading||!this.iframeSrc?e("div",{class:"epnc-native-status"},"Loading pad..."):e("div",{class:"epnc-native-shell"},[e("iframe",{attrs:{srcdoc:M(this.iframeSrc),title:"Etherpad"},on:{load:()=>this.markLoaded(),error:()=>this.markLoaded()},class:"epnc-native-iframe"})])}},S=()=>{if(f+=1,!(window.OCA&&window.OCA.Viewer&&typeof window.OCA.Viewer.registerHandler=="function")){f<20&&window.setTimeout(S,500);return}Array.isArray(window.OCA.Viewer.availableHandlers)&&window.OCA.Viewer.availableHandlers.some(e=>e&&e.id===_)||window.OCA.Viewer.registerHandler({id:_,mimes:[x],component:u})};S()})();
+import{V as _,M as x,t as l,f as y,A as v,o as w}from"./oc-compat-hVqZy-MX.chunk.mjs";import{m as k,o as R,a as b,l as I}from"./api-client-BXEMiUh7.chunk.mjs";import{s as L,c as C}from"./sanitize-html-dv-YifbT.chunk.mjs";const O=f=>String(f||"").replace(/&/g,"&amp;").replace(/"/g,"&quot;").replace(/</g,"&lt;").replace(/>/g,"&gt;"),F=["http:","https:"],U=f=>{try{const u=new URL(String(f||""));return F.includes(u.protocol)&&u.username===""&&u.password===""}catch{return!1}},M="default-src 'none'; frame-src http: https:; style-src 'unsafe-inline'",E=f=>{const u=U(f)?O(f):"";return'<!doctype html><html><head><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="'+O(M)+'"><style>html,body,iframe{width:100%;height:100%;margin:0;border:0;overflow:hidden}iframe{display:block}</style></head><body><iframe src="'+u+'" title="Etherpad"></iframe></body></html>'};(function(){let f=0;const u={name:"EtherpadNextcloudViewer",props:{filename:{type:String,required:!1,default:""},basename:{type:String,required:!1,default:""},source:{type:String,required:!1,default:""},fileid:{type:[String,Number],required:!1,default:null},fileId:{type:[String,Number],required:!1,default:null},fileInfo:{type:Object,required:!1,default:null}},data(){return{iframeSrc:"",isLoading:!0,loadError:"",canRecover:!1,isRecovering:!1,isCheckingOriginal:!1,originalPad:null,externalOpenUrl:"",externalOpenMessage:"",snapshotMode:"",snapshot:{text:"",html:""},resolveGeneration:0}},computed:{sourcePath(){const e=typeof this.source=="string"?this.source.trim():"";return e&&I(e)||""},filePath(){const e=t=>String(t||"").trim().replace(/\s+\.pad$/i,".pad"),i=t=>{const h=String(t||"").trim();return!h||h==="/"?"/":h.startsWith("/")?h:"/"+h},n=(t,h)=>{if(!h)return"";if(h.startsWith("/"))return h;const g=i(t);return g==="/"?"/"+h:g+"/"+h},a=t=>typeof t=="string"&&t.toLowerCase().endsWith(".pad");if(a(this.sourcePath))return this.sourcePath;const s=this.fileInfo&&typeof this.fileInfo=="object"?this.fileInfo:null,d=s&&typeof s.path=="string"?e(s.path):"";if(a(d))return d.startsWith("/")?d:"/"+d;const c=e(this.filename||this.basename||s&&(s.name||s.basename)||"");if(!c)return"";const o=s&&typeof s.dirname=="string"?s.dirname:"";if(o){const t=n(o,c);if(a(t))return t}const m=new URLSearchParams(window.location.search||"").get("dir")||"/",r=n(m,c);return a(r)?r:"/"+c},resolvedFileId(){const e=[this.fileid,this.fileId,this.fileInfo&&(this.fileInfo.fileid||this.fileInfo.fileId||this.fileInfo.id)];for(const a of e){const s=Number(a);if(Number.isFinite(s)&&s>0)return s}if(new URLSearchParams(window.location.search||"").get("openfile")!=="true")return null;const i=(window.location.pathname||"").match(/\/apps\/files\/files\/(\d+)\/?$/);if(!i)return null;const n=Number(i[1]);return Number.isFinite(n)&&n>0?n:null}},watch:{filePath:{immediate:!0,handler(){this.resolveOpenUrl()}},resolvedFileId(){this.resolveOpenUrl()}},methods:{async fetchOpenPayload(e,i={}){const n=Object.assign({Accept:"application/json"},i.headers||{}),a=await fetch(e,Object.assign({method:"GET",credentials:"same-origin",headers:n},i)),s=await a.json().catch(()=>({}));if(!a.ok){const d=new Error(s&&s.message||"Pad open failed.");throw s&&typeof s.code=="string"&&(d.code=s.code),d}if(!s||s.is_readonly_snapshot!==!0&&(typeof s.url!="string"||s.url.trim()===""))throw new Error("Pad open API did not return a valid URL.");return s},isMissingFrontmatterError(e){return e instanceof Error?String(e.message||"").includes("Missing YAML frontmatter"):!1},async initializeMissingFrontmatter(){const e={Accept:"application/json",requesttoken:w()},i=(o,m)=>{const r=new Error(o&&o.message||m);return o&&typeof o.code=="string"&&o.code!==""&&(r.code=o.code),r},n=o=>{o&&o.status==="migrated_from_legacy"&&console.info("Legacy Ownpad .pad migrated to managed format on first open.")};if(this.resolvedFileId!==null){const o=y("/apps/"+v+"/api/v1/pads/initialize-by-id/"+encodeURIComponent(String(this.resolvedFileId))),m=await fetch(o,{method:"POST",credentials:"same-origin",headers:e}),r=await m.json().catch(()=>({}));if(!m.ok)throw i(r,"Pad initialization failed.");return n(r),r}if(!this.filePath)throw new Error("Pad initialization failed: missing file path.");const a=new URLSearchParams;a.set("file",this.filePath);const s=y("/apps/"+v+"/api/v1/pads/initialize"),d=await fetch(s,{method:"POST",credentials:"same-origin",headers:Object.assign({},e,{"Content-Type":"application/x-www-form-urlencoded;charset=UTF-8"}),body:a.toString()}),c=await d.json().catch(()=>({}));if(!d.ok)throw i(c,"Pad initialization failed.");return n(c),c},markLoaded(){this.$emit("update:loaded",!0)},padSync(){return this._padSync||(this._padSync=C({requestToken:()=>w()})),this._padSync},teardownSync(){this._padSync&&(this._padSync.fireAndForget(!0,!0),this._padSync.stop(),this._padSync.removeLifecycleHandlers())},async resolveOpenUrl(){const e=++this.resolveGeneration,i=()=>e===this.resolveGeneration;if(this.isLoading=!0,this.loadError="",this.canRecover=!1,this.isCheckingOriginal=!1,this.originalPad=null,this.iframeSrc="",this.externalOpenUrl="",this.externalOpenMessage="",this.snapshotMode="",this.snapshot={text:"",html:""},this._padSync&&(this._padSync.stop(),this._padSync.configure({syncUrl:""})),!this.filePath){if(!i())return;this.loadError="No .pad file selected.",this.isLoading=!1;return}const n=b(),a=y("/apps/"+v+"/api/v1/pads/open"),s=(()=>{if(!n)return"";const r=new URL(y("/apps/"+v+"/api/v1/public/open/"+encodeURIComponent(n)),window.location.origin);return r.searchParams.set("file",this.filePath),r.toString()})(),d=this.resolvedFileId!==null?y("/apps/"+v+"/api/v1/pads/open-by-id"):"",c=new URLSearchParams;c.set("file",this.filePath);const o=new URLSearchParams;this.resolvedFileId!==null&&o.set("fileId",String(this.resolvedFileId));const m={"Content-Type":"application/x-www-form-urlencoded;charset=UTF-8",requesttoken:w()};try{const r=async()=>{let p=null;if(s)p=await this.fetchOpenPayload(s);else if(d)try{p=await this.fetchOpenPayload(d,{method:"POST",headers:m,body:o.toString()})}catch{}return p||(p=await this.fetchOpenPayload(a,{method:"POST",headers:m,body:c.toString()})),p};let t;try{if(t=await r(),!i())return}catch(p){if(!this.isMissingFrontmatterError(p))throw p;if(await this.initializeMissingFrontmatter(),!i()||(t=await r(),!i()))return}const h=t&&typeof t.sync_url=="string"?t.sync_url:"",g=Number(t&&t.sync_interval_seconds),P=Number.isFinite(g)&&g>0?Math.max(5e3,Math.min(36e5,g*1e3)):12e4;if(this.padSync().configure({syncUrl:h,intervalMs:P}),this.padSync().installLifecycleHandlers(),h&&this.padSync().start(),t&&t.is_readonly_snapshot===!0){this.snapshotMode="readonly",this.snapshot={text:typeof t.snapshot_text=="string"?t.snapshot_text:"",html:typeof t.snapshot_html=="string"?t.snapshot_html:""},this.markLoaded();return}if(t&&t.is_external===!0&&typeof t.url=="string"&&t.url.trim()!==""){const p=t.url.trim();this.externalOpenUrl=p,this.externalOpenMessage=l("Read-only snapshot from the .pad file."),this.snapshotMode="external",this.snapshot={text:t&&typeof t.snapshot_text=="string"?t.snapshot_text:"",html:t&&typeof t.snapshot_html=="string"?t.snapshot_html:""},this.markLoaded();return}this.iframeSrc=t.url,this.markLoaded()}catch(r){if(!i())return;this.loadError=r instanceof Error?r.message:"Could not load pad.",this.canRecover=!!(r&&r.code==="missing_binding")&&this.resolvedFileId!==null&&!b(),this.canRecover&&this.fetchOriginalPadHint(e,i),this.markLoaded()}finally{if(!i())return;this.isLoading=!1}},async fetchOriginalPadHint(e,i){if(this.resolvedFileId!==null){this.isCheckingOriginal=!0;try{const n=await R(this.resolvedFileId);if(!i())return;n&&n.found===!0&&typeof n.viewer_url=="string"&&n.viewer_url!==""&&(this.originalPad={viewerUrl:n.viewer_url,path:typeof n.path=="string"?n.path:""})}catch{}finally{i()&&(this.isCheckingOriginal=!1)}}},async recoverFromSnapshot(){if(!(!this.canRecover||this.isRecovering||this.resolvedFileId===null)){this.isRecovering=!0;try{await k(this.resolvedFileId),this.loadError="",this.canRecover=!1,await this.resolveOpenUrl()}catch(e){this.loadError=e instanceof Error?e.message:"Could not load pad."}finally{this.isRecovering=!1}}},renderSnapshotView(e,i){const n=L(i.html),a=String(i.text||""),s=Array.isArray(i.actions)?i.actions:[];return e("div",{class:"epnc-native-snapshot"},[e("div",{class:"epnc-native-snapshot__inner"},[e("div",{class:"epnc-native-snapshot__header"},[e("div",{class:"epnc-native-snapshot__heading"},[e("div",{class:"epnc-native-snapshot__title"},i.title),e("div",{class:"epnc-native-snapshot__message"},i.message)]),s.length>0?e("div",{class:"epnc-native-snapshot__actions"},s):null]),n.trim()!==""?e("div",{class:"epnc-native-snapshot__text epnc-native-snapshot__text--html",domProps:{innerHTML:n}}):e("pre",{class:"epnc-native-snapshot__text"},a.trim()!==""?a:i.emptyMessage)])])}},beforeDestroy(){this.resolveGeneration+=1,this.teardownSync()},beforeUnmount(){this.resolveGeneration+=1,this.teardownSync()},render(e){if(this.loadError){const i=[e("div",{class:"epnc-native-error-title"},l("Could not open pad")),e("div",{class:"epnc-native-error-message"},this.loadError)];return this.canRecover&&(this.isCheckingOriginal?i.push(e("div",{class:"epnc-native-error-message"},l("Checking for the original pad..."))):this.originalPad?i.push(e("div",{class:"epnc-native-error-message"},l("This file looks like a copy of an existing .pad file in your account. Open the original to keep editing the linked pad, or create a new pad to fork the content stored in this file.")),e("a",{class:"button primary epnc-native-error-action",attrs:{href:this.originalPad.viewerUrl}},l("Open the original .pad file")),e("button",{class:"button epnc-native-error-action",attrs:{type:"button",disabled:this.isRecovering},on:{click:()=>{this.recoverFromSnapshot()}}},this.isRecovering?l("Creating new pad..."):l("Create new pad from this file"))):i.push(e("div",{class:"epnc-native-error-message"},l("We couldn't find a matching pad in this Nextcloud. You can create a new pad from the text stored in this file; from then on, opening this file will load the new pad.")),e("button",{class:"button primary epnc-native-error-action",attrs:{type:"button",disabled:this.isRecovering},on:{click:()=>{this.recoverFromSnapshot()}}},this.isRecovering?l("Creating new pad..."):l("Create new pad from this file")))),e("div",{class:"epnc-native-status epnc-native-status--error"},[e("div",{class:"epnc-native-error-card"},i)])}return this.snapshotMode==="external"?this.renderSnapshotView(e,{title:l("Pad from another server"),message:this.externalOpenMessage,actions:[e("a",{class:"button primary",attrs:{href:this.externalOpenUrl,target:"_blank",rel:"noopener noreferrer"}},l("Open original pad"))],html:this.snapshot.html,text:this.snapshot.text,emptyMessage:l("No synced snapshot is stored in this .pad file yet.")}):this.snapshotMode==="readonly"?this.renderSnapshotView(e,{title:l("Read-only snapshot"),message:l("Read-only snapshot from the .pad file."),html:this.snapshot.html,text:this.snapshot.text,emptyMessage:l("No synced snapshot is stored in this .pad file yet.")}):this.isLoading||!this.iframeSrc?e("div",{class:"epnc-native-status"},"Loading pad..."):e("div",{class:"epnc-native-shell"},[e("iframe",{attrs:{srcdoc:E(this.iframeSrc),title:"Etherpad"},on:{load:()=>this.markLoaded(),error:()=>this.markLoaded()},class:"epnc-native-iframe"})])}},S=()=>{if(f+=1,!(window.OCA&&window.OCA.Viewer&&typeof window.OCA.Viewer.registerHandler=="function")){f<20&&window.setTimeout(S,500);return}Array.isArray(window.OCA.Viewer.availableHandlers)&&window.OCA.Viewer.availableHandlers.some(e=>e&&e.id===_)||window.OCA.Viewer.registerHandler({id:_,mimes:[x],component:u})};S()})();
 //# sourceMappingURL=etherpad_nextcloud-viewer-main.mjs.map
diff --git a/js/etherpad_nextcloud-viewer-main.mjs.map b/js/etherpad_nextcloud-viewer-main.mjs.map
index ce8e231..9557db4 100644
--- a/js/etherpad_nextcloud-viewer-main.mjs.map
+++ b/js/etherpad_nextcloud-viewer-main.mjs.map
@@ -1 +1 @@
-{"version":3,"file":"etherpad_nextcloud-viewer-main.mjs","sources":["../src/lib/pad-frame-srcdoc.js","../src/viewer-main.js"],"sourcesContent":["/**\n * SPDX-License-Identifier: AGPL-3.0-or-later\n * Copyright (c) 2026 Jacob Bühler\n */\n\nconst escapeAttribute = (value) => String(value || '')\n\t.replace(/&/g, '&amp;')\n\t.replace(/\"/g, '&quot;')\n\t.replace(/</g, '&lt;')\n\t.replace(/>/g, '&gt;')\n\nconst ALLOWED_PAD_URL_SCHEMES = ['http:', 'https:']\n\nconst isSafePadUrl = (url) => {\n\ttry {\n\t\tconst parsed = new URL(String(url || ''))\n\t\treturn ALLOWED_PAD_URL_SCHEMES.includes(parsed.protocol)\n\t\t\t&& parsed.username === ''\n\t\t\t&& parsed.password === ''\n\t} catch {\n\t\treturn false\n\t}\n}\n\nconst SRC_DOC_CSP = \"default-src 'none'; frame-src http: https:; style-src 'unsafe-inline'\"\n\nexport const buildPadFrameSrcdoc = (url) => {\n\tconst safeUrl = isSafePadUrl(url) ? escapeAttribute(url) : ''\n\treturn '<!doctype html><html><head><meta charset=\"utf-8\">'\n\t+ '<meta http-equiv=\"Content-Security-Policy\" content=\"' + escapeAttribute(SRC_DOC_CSP) + '\">'\n\t+ '<style>html,body,iframe{width:100%;height:100%;margin:0;border:0;overflow:hidden}iframe{display:block}</style>'\n\t+ '</head><body><iframe src=\"' + safeUrl + '\" title=\"Etherpad\"></iframe></body></html>'\n}\n","/**\n * SPDX-License-Identifier: AGPL-3.0-or-later\n * Copyright (c) 2026 Jacob Bühler\n */\nimport { APP_ID, MIME, VIEWER_HANDLER_ID } from './lib/constants.js'\nimport { apiFindOriginalPad, apiRecoverFromSnapshot } from './lib/api-client.js'\nimport { ocGenerateUrl, ocRequestToken, translate } from './lib/oc-compat.js'\nimport { createPadSync } from './lib/pad-sync.js'\nimport { buildPadFrameSrcdoc } from './lib/pad-frame-srcdoc.js'\nimport { parsePadPathFromDavHref, parsePublicShareTokenFromLocation } from './lib/urls.js'\n\n(function () {\n\tlet attempts = 0\n\n\tconst component = {\n\t\tname: 'EtherpadNextcloudViewer',\n\t\tprops: {\n\t\t\tfilename: { type: String, required: false, default: '' },\n\t\t\tbasename: { type: String, required: false, default: '' },\n\t\t\tsource: { type: String, required: false, default: '' },\n\t\t\tfileid: { type: [String, Number], required: false, default: null },\n\t\t\tfileId: { type: [String, Number], required: false, default: null },\n\t\t\tfileInfo: { type: Object, required: false, default: null },\n\t\t},\n\t\tdata() {\n\t\t\treturn {\n\t\t\t\tiframeSrc: '',\n\t\t\t\tisLoading: true,\n\t\t\t\tloadError: '',\n\t\t\t\tcanRecover: false,\n\t\t\t\tisRecovering: false,\n\t\t\t\tisCheckingOriginal: false,\n\t\t\t\toriginalPad: null,\n\t\t\t\texternalOpenUrl: '',\n\t\t\t\texternalOpenMessage: '',\n\t\t\t\tsnapshotMode: '',\n\t\t\t\tsnapshot: { text: '', html: '' },\n\t\t\t\tresolveGeneration: 0,\n\t\t\t}\n\t\t},\n\t\tcomputed: {\n\t\t\tsourcePath() {\n\t\t\t\tconst value = typeof this.source === 'string' ? this.source.trim() : ''\n\t\t\t\tif (!value) return ''\n\t\t\t\treturn parsePadPathFromDavHref(value) || ''\n\t\t\t},\n\t\t\tfilePath() {\n\t\t\t\tconst normalizeName = (value) => String(value || '').trim().replace(/\\s+\\.pad$/i, '.pad')\n\t\t\t\tconst normalizeDir = (value) => {\n\t\t\t\t\tconst dir = String(value || '').trim()\n\t\t\t\t\tif (!dir || dir === '/') return '/'\n\t\t\t\t\treturn dir.startsWith('/') ? dir : ('/' + dir)\n\t\t\t\t}\n\t\t\t\tconst joinPath = (dir, name) => {\n\t\t\t\t\tif (!name) return ''\n\t\t\t\t\tif (name.startsWith('/')) return name\n\t\t\t\t\tconst normalizedDir = normalizeDir(dir)\n\t\t\t\t\treturn normalizedDir === '/' ? '/' + name : normalizedDir + '/' + name\n\t\t\t\t}\n\t\t\t\tconst isPadPath = (value) => typeof value === 'string' && value.toLowerCase().endsWith('.pad')\n\t\t\t\tif (isPadPath(this.sourcePath)) return this.sourcePath\n\n\t\t\t\tconst info = this.fileInfo && typeof this.fileInfo === 'object' ? this.fileInfo : null\n\t\t\t\tconst infoPath = info && typeof info.path === 'string' ? normalizeName(info.path) : ''\n\t\t\t\tif (isPadPath(infoPath)) return infoPath.startsWith('/') ? infoPath : ('/' + infoPath)\n\n\t\t\t\tconst baseName = normalizeName(this.filename || this.basename || (info && (info.name || info.basename)) || '')\n\t\t\t\tif (!baseName) return ''\n\n\t\t\t\tconst infoDir = info && typeof info.dirname === 'string' ? info.dirname : ''\n\t\t\t\tif (infoDir) {\n\t\t\t\t\tconst combined = joinPath(infoDir, baseName)\n\t\t\t\t\tif (isPadPath(combined)) return combined\n\t\t\t\t}\n\n\t\t\t\tconst params = new URLSearchParams(window.location.search || '')\n\t\t\t\tconst urlDir = params.get('dir') || '/'\n\t\t\t\tconst fromDir = joinPath(urlDir, baseName)\n\t\t\t\tif (isPadPath(fromDir)) return fromDir\n\t\t\t\treturn '/' + baseName\n\t\t\t},\n\t\t\tresolvedFileId() {\n\t\t\t\tconst candidates = [this.fileid, this.fileId, this.fileInfo && (this.fileInfo.fileid || this.fileInfo.fileId || this.fileInfo.id)]\n\t\t\t\tfor (const candidate of candidates) {\n\t\t\t\t\tconst numeric = Number(candidate)\n\t\t\t\t\tif (Number.isFinite(numeric) && numeric > 0) return numeric\n\t\t\t\t}\n\t\t\t\tconst params = new URLSearchParams(window.location.search || '')\n\t\t\t\tif (params.get('openfile') !== 'true') return null\n\t\t\t\tconst match = (window.location.pathname || '').match(/\\/apps\\/files\\/files\\/(\\d+)\\/?$/)\n\t\t\t\tif (!match) return null\n\t\t\t\tconst fallbackId = Number(match[1])\n\t\t\t\treturn Number.isFinite(fallbackId) && fallbackId > 0 ? fallbackId : null\n\t\t\t},\n\t\t},\n\t\twatch: {\n\t\t\tfilePath: { immediate: true, handler() { void this.resolveOpenUrl() } },\n\t\t\tresolvedFileId() { void this.resolveOpenUrl() },\n\t\t},\n\t\tmethods: {\n\t\t\tasync fetchOpenPayload(url, init = {}) {\n\t\t\t\tconst headers = Object.assign({ Accept: 'application/json' }, init.headers || {})\n\t\t\t\tconst response = await fetch(url, Object.assign({\n\t\t\t\t\tmethod: 'GET',\n\t\t\t\t\tcredentials: 'same-origin',\n\t\t\t\t\theaders,\n\t\t\t\t}, init))\n\t\t\t\tconst data = await response.json().catch(() => ({}))\n\t\t\t\tif (!response.ok) {\n\t\t\t\t\tconst error = new Error((data && data.message) || 'Pad open failed.')\n\t\t\t\t\tif (data && typeof data.code === 'string') {\n\t\t\t\t\t\terror.code = data.code\n\t\t\t\t\t}\n\t\t\t\t\tthrow error\n\t\t\t\t}\n\t\t\t\tif (!data || (data.is_readonly_snapshot !== true && (typeof data.url !== 'string' || data.url.trim() === ''))) {\n\t\t\t\t\tthrow new Error('Pad open API did not return a valid URL.')\n\t\t\t\t}\n\t\t\t\treturn data\n\t\t\t},\n\t\t\tisMissingFrontmatterError(error) {\n\t\t\t\tif (!(error instanceof Error)) return false\n\t\t\t\treturn String(error.message || '').includes('Missing YAML frontmatter')\n\t\t\t},\n\t\t\tasync initializeMissingFrontmatter() {\n\t\t\t\tconst headers = {\n\t\t\t\t\tAccept: 'application/json',\n\t\t\t\t\trequesttoken: ocRequestToken(),\n\t\t\t\t}\n\n\t\t\t\tconst buildInitError = (data, fallbackMessage) => {\n\t\t\t\t\tconst err = new Error((data && data.message) || fallbackMessage)\n\t\t\t\t\t// Forward a structured code so callers can branch on\n\t\t\t\t\t// `legacy_collision_no_access` without parsing the message.\n\t\t\t\t\tif (data && typeof data.code === 'string' && data.code !== '') {\n\t\t\t\t\t\terr.code = data.code\n\t\t\t\t\t}\n\t\t\t\t\treturn err\n\t\t\t\t}\n\n\t\t\t\tconst announceMigratedStatus = (data) => {\n\t\t\t\t\tif (data && data.status === 'migrated_from_legacy') {\n\t\t\t\t\t\t// Audit-visible on the backend; mirror it in the\n\t\t\t\t\t\t// browser console so dev tools makes the conversion\n\t\t\t\t\t\t// visible without surfacing a UI toast (the codebase\n\t\t\t\t\t\t// has no toast infra wired yet).\n\t\t\t\t\t\tconsole.info('Legacy Ownpad .pad migrated to managed format on first open.')\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tif (this.resolvedFileId !== null) {\n\t\t\t\t\tconst url = ocGenerateUrl('/apps/' + APP_ID + '/api/v1/pads/initialize-by-id/' + encodeURIComponent(String(this.resolvedFileId)))\n\t\t\t\t\tconst response = await fetch(url, { method: 'POST', credentials: 'same-origin', headers })\n\t\t\t\t\tconst data = await response.json().catch(() => ({}))\n\t\t\t\t\tif (!response.ok) {\n\t\t\t\t\t\tthrow buildInitError(data, 'Pad initialization failed.')\n\t\t\t\t\t}\n\t\t\t\t\tannounceMigratedStatus(data)\n\t\t\t\t\treturn data\n\t\t\t\t}\n\n\t\t\t\tif (!this.filePath) {\n\t\t\t\t\tthrow new Error('Pad initialization failed: missing file path.')\n\t\t\t\t}\n\n\t\t\t\tconst body = new URLSearchParams()\n\t\t\t\tbody.set('file', this.filePath)\n\t\t\t\tconst url = ocGenerateUrl('/apps/' + APP_ID + '/api/v1/pads/initialize')\n\t\t\t\tconst response = await fetch(url, {\n\t\t\t\t\tmethod: 'POST',\n\t\t\t\t\tcredentials: 'same-origin',\n\t\t\t\t\theaders: Object.assign({}, headers, {\n\t\t\t\t\t\t'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',\n\t\t\t\t\t}),\n\t\t\t\t\tbody: body.toString(),\n\t\t\t\t})\n\t\t\t\tconst data = await response.json().catch(() => ({}))\n\t\t\t\tif (!response.ok) {\n\t\t\t\t\tthrow buildInitError(data, 'Pad initialization failed.')\n\t\t\t\t}\n\t\t\t\tannounceMigratedStatus(data)\n\t\t\t\treturn data\n\t\t\t},\n\t\t\tmarkLoaded() {\n\t\t\t\tthis.$emit('update:loaded', true)\n\t\t\t},\n\t\t\t// Lazily build the shared sync controller. Kept off `data()` on\n\t\t\t// purpose so it is not made reactive, and memoised on a plain\n\t\t\t// instance field so it survives the immediate filePath watcher\n\t\t\t// (which runs before created/mounted).\n\t\t\tpadSync() {\n\t\t\t\tif (!this._padSync) {\n\t\t\t\t\tthis._padSync = createPadSync({ requestToken: () => ocRequestToken() })\n\t\t\t\t}\n\t\t\t\treturn this._padSync\n\t\t\t},\n\t\t\t// Final flush + full teardown on destroy. Guard on the existing\n\t\t\t// controller so we never spin one up just to tear it down (a viewer\n\t\t\t// destroyed before its first open). The lazy create stays in the\n\t\t\t// resolve path, which actually needs to sync.\n\t\t\tteardownSync() {\n\t\t\t\tif (!this._padSync) {\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t\t\tthis._padSync.fireAndForget(true, true)\n\t\t\t\tthis._padSync.stop()\n\t\t\t\tthis._padSync.removeLifecycleHandlers()\n\t\t\t},\n\t\t\tasync resolveOpenUrl() {\n\t\t\t\tconst generation = ++this.resolveGeneration\n\t\t\t\tconst isCurrent = () => generation === this.resolveGeneration\n\n\t\t\t\tthis.isLoading = true\n\t\t\t\tthis.loadError = ''\n\t\t\t\tthis.canRecover = false\n\t\t\t\tthis.isCheckingOriginal = false\n\t\t\t\tthis.originalPad = null\n\t\t\t\tthis.iframeSrc = ''\n\t\t\t\tthis.externalOpenUrl = ''\n\t\t\t\tthis.externalOpenMessage = ''\n\t\t\t\tthis.snapshotMode = ''\n\t\t\t\tthis.snapshot = { text: '', html: '' }\n\t\t\t\t// Reset only an existing controller; don't construct one just to\n\t\t\t\t// stop/clear it (e.g. the initial immediate watcher with no pad).\n\t\t\t\t// The success path below lazily creates it when there's a pad to\n\t\t\t\t// actually sync.\n\t\t\t\tif (this._padSync) {\n\t\t\t\t\tthis._padSync.stop()\n\t\t\t\t\tthis._padSync.configure({ syncUrl: '' })\n\t\t\t\t}\n\n\t\t\t\tif (!this.filePath) {\n\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\tthis.loadError = 'No .pad file selected.'\n\t\t\t\t\tthis.isLoading = false\n\t\t\t\t\treturn\n\t\t\t\t}\n\n\t\t\t\tconst publicToken = parsePublicShareTokenFromLocation()\n\t\t\t\tconst byPathUrl = ocGenerateUrl('/apps/' + APP_ID + '/api/v1/pads/open')\n\t\t\t\tconst byPublicUrl = (() => {\n\t\t\t\t\tif (!publicToken) return ''\n\t\t\t\t\tconst url = new URL(ocGenerateUrl('/apps/' + APP_ID + '/api/v1/public/open/' + encodeURIComponent(publicToken)), window.location.origin)\n\t\t\t\t\turl.searchParams.set('file', this.filePath)\n\t\t\t\t\treturn url.toString()\n\t\t\t\t})()\n\t\t\t\tconst byIdUrl = this.resolvedFileId !== null\n\t\t\t\t\t? ocGenerateUrl('/apps/' + APP_ID + '/api/v1/pads/open-by-id')\n\t\t\t\t\t: ''\n\t\t\t\tconst byPathBody = new URLSearchParams()\n\t\t\t\tbyPathBody.set('file', this.filePath)\n\t\t\t\tconst byIdBody = new URLSearchParams()\n\t\t\t\tif (this.resolvedFileId !== null) {\n\t\t\t\t\tbyIdBody.set('fileId', String(this.resolvedFileId))\n\t\t\t\t}\n\t\t\t\tconst openPostHeaders = {\n\t\t\t\t\t'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',\n\t\t\t\t\trequesttoken: ocRequestToken(),\n\t\t\t\t}\n\n\t\t\t\ttry {\n\t\t\t\t\tconst fetchOpenData = async () => {\n\t\t\t\t\t\t\tlet data = null\n\t\t\t\t\t\t\tif (byPublicUrl) {\n\t\t\t\t\t\t\t\tdata = await this.fetchOpenPayload(byPublicUrl)\n\t\t\t\t\t\t\t} else if (byIdUrl) {\n\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\tdata = await this.fetchOpenPayload(byIdUrl, {\n\t\t\t\t\t\t\t\t\t\tmethod: 'POST',\n\t\t\t\t\t\t\t\t\t\theaders: openPostHeaders,\n\t\t\t\t\t\t\t\t\t\tbody: byIdBody.toString(),\n\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t\t\t// Fallback for moved/renamed files where stale fileId can fail.\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tif (!data) {\n\t\t\t\t\t\t\t\tdata = await this.fetchOpenPayload(byPathUrl, {\n\t\t\t\t\t\t\t\t\tmethod: 'POST',\n\t\t\t\t\t\t\t\t\theaders: openPostHeaders,\n\t\t\t\t\t\t\t\t\tbody: byPathBody.toString(),\n\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\treturn data\n\t\t\t\t\t\t}\n\n\t\t\t\t\tlet data\n\t\t\t\t\ttry {\n\t\t\t\t\t\tdata = await fetchOpenData()\n\t\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\tif (!this.isMissingFrontmatterError(error)) {\n\t\t\t\t\t\t\tthrow error\n\t\t\t\t\t\t}\n\t\t\t\t\t\tawait this.initializeMissingFrontmatter()\n\t\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\t\tdata = await fetchOpenData()\n\t\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\t}\n\n\t\t\t\t\tconst syncUrl = (data && typeof data.sync_url === 'string') ? data.sync_url : ''\n\n\t\t\t\t\tconst intervalSeconds = Number(data && data.sync_interval_seconds)\n\t\t\t\t\tconst intervalMs = (Number.isFinite(intervalSeconds) && intervalSeconds > 0)\n\t\t\t\t\t\t? Math.max(5000, Math.min(3600000, intervalSeconds * 1000))\n\t\t\t\t\t\t: 120000\n\n\t\t\t\t\tthis.padSync().configure({ syncUrl, intervalMs })\n\t\t\t\t\tthis.padSync().installLifecycleHandlers()\n\t\t\t\t\tif (syncUrl) {\n\t\t\t\t\t\tthis.padSync().start()\n\t\t\t\t\t}\n\n\t\t\t\t\tif (data && data.is_readonly_snapshot === true) {\n\t\t\t\t\t\tthis.snapshotMode = 'readonly'\n\t\t\t\t\t\tthis.snapshot = {\n\t\t\t\t\t\t\ttext: (typeof data.snapshot_text === 'string') ? data.snapshot_text : '',\n\t\t\t\t\t\t\thtml: (typeof data.snapshot_html === 'string') ? data.snapshot_html : '',\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthis.markLoaded()\n\t\t\t\t\t\treturn\n\t\t\t\t\t}\n\n\t\t\t\t\tif (data && data.is_external === true && typeof data.url === 'string' && data.url.trim() !== '') {\n\t\t\t\t\t\tconst targetUrl = data.url.trim()\n\t\t\t\t\t\tthis.externalOpenUrl = targetUrl\n\t\t\t\t\t\tthis.externalOpenMessage = translate('Read-only snapshot from the .pad file.')\n\t\t\t\t\t\tthis.snapshotMode = 'external'\n\t\t\t\t\t\tthis.snapshot = {\n\t\t\t\t\t\t\ttext: (data && typeof data.snapshot_text === 'string') ? data.snapshot_text : '',\n\t\t\t\t\t\t\thtml: (data && typeof data.snapshot_html === 'string') ? data.snapshot_html : '',\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthis.markLoaded()\n\t\t\t\t\t\treturn\n\t\t\t\t\t}\n\n\t\t\t\t\tthis.iframeSrc = data.url\n\t\t\t\t\tthis.markLoaded()\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\tthis.loadError = error instanceof Error ? error.message : 'Could not load pad.'\n\t\t\t\t\t// Recovery is gated on having a fileId we can address. Public-share\n\t\t\t\t\t// visitors don't get a recovery action — only the share owner.\n\t\t\t\t\tthis.canRecover = Boolean(error && error.code === 'missing_binding')\n\t\t\t\t\t\t&& this.resolvedFileId !== null\n\t\t\t\t\t\t&& !parsePublicShareTokenFromLocation()\n\t\t\t\t\tif (this.canRecover) {\n\t\t\t\t\t\t// Optional: check if this looks like a copy of a .pad we\n\t\t\t\t\t\t// can already address; if so we'll offer 'Open the\n\t\t\t\t\t\t// original' as the primary action. A miss is silent — no\n\t\t\t\t\t\t// UI element rendered, no info leaked.\n\t\t\t\t\t\tthis.fetchOriginalPadHint(generation, isCurrent)\n\t\t\t\t\t}\n\t\t\t\t\tthis.markLoaded()\n\t\t\t\t} finally {\n\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\tthis.isLoading = false\n\t\t\t\t}\n\t\t\t},\n\t\t\tasync fetchOriginalPadHint(generation, isCurrent) {\n\t\t\t\tif (this.resolvedFileId === null) {\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t\t\tthis.isCheckingOriginal = true\n\t\t\t\ttry {\n\t\t\t\t\tconst hint = await apiFindOriginalPad(this.resolvedFileId)\n\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\tif (hint && hint.found === true && typeof hint.viewer_url === 'string' && hint.viewer_url !== '') {\n\t\t\t\t\t\tthis.originalPad = {\n\t\t\t\t\t\t\tviewerUrl: hint.viewer_url,\n\t\t\t\t\t\t\tpath: typeof hint.path === 'string' ? hint.path : '',\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Silent: the recovery button stays available, we just\n\t\t\t\t\t// don't surface the \"Open the original\" affordance.\n\t\t\t\t} finally {\n\t\t\t\t\tif (isCurrent()) {\n\t\t\t\t\t\tthis.isCheckingOriginal = false\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\tasync recoverFromSnapshot() {\n\t\t\t\tif (!this.canRecover || this.isRecovering || this.resolvedFileId === null) {\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t\t\tthis.isRecovering = true\n\t\t\t\ttry {\n\t\t\t\t\tawait apiRecoverFromSnapshot(this.resolvedFileId)\n\t\t\t\t\tthis.loadError = ''\n\t\t\t\t\tthis.canRecover = false\n\t\t\t\t\tawait this.resolveOpenUrl()\n\t\t\t\t} catch (error) {\n\t\t\t\t\tthis.loadError = error instanceof Error ? error.message : 'Could not load pad.'\n\t\t\t\t} finally {\n\t\t\t\t\tthis.isRecovering = false\n\t\t\t\t}\n\t\t\t},\n\t\t\trenderSnapshotView(createElement, options) {\n\t\t\t\tconst html = String(options.html || '')\n\t\t\t\tconst text = String(options.text || '')\n\t\t\t\tconst actions = Array.isArray(options.actions) ? options.actions : []\n\n\t\t\t\treturn createElement('div', { class: 'epnc-native-snapshot' }, [\n\t\t\t\t\tcreateElement('div', { class: 'epnc-native-snapshot__inner' }, [\n\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-snapshot__header' }, [\n\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-snapshot__heading' }, [\n\t\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-snapshot__title' }, options.title),\n\t\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-snapshot__message' }, options.message),\n\t\t\t\t\t\t\t]),\n\t\t\t\t\t\t\tactions.length > 0\n\t\t\t\t\t\t\t\t? createElement('div', { class: 'epnc-native-snapshot__actions' }, actions)\n\t\t\t\t\t\t\t\t: null,\n\t\t\t\t\t\t]),\n\t\t\t\t\t\thtml.trim() !== ''\n\t\t\t\t\t\t\t? createElement('div', {\n\t\t\t\t\t\t\t\tclass: 'epnc-native-snapshot__text epnc-native-snapshot__text--html',\n\t\t\t\t\t\t\t\tdomProps: { innerHTML: html },\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: createElement('pre', { class: 'epnc-native-snapshot__text' }, text.trim() !== ''\n\t\t\t\t\t\t\t\t? text\n\t\t\t\t\t\t\t\t: options.emptyMessage),\n\t\t\t\t\t]),\n\t\t\t\t])\n\t\t\t},\n\t\t},\n\t\tbeforeDestroy() {\n\t\t\tthis.resolveGeneration += 1\n\t\t\tthis.teardownSync()\n\t\t},\n\t\tbeforeUnmount() {\n\t\t\tthis.resolveGeneration += 1\n\t\t\tthis.teardownSync()\n\t\t},\n\t\trender(createElement) {\n\t\t\tif (this.loadError) {\n\t\t\t\tconst cardChildren = [\n\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-title' }, translate('Could not open pad')),\n\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-message' }, this.loadError),\n\t\t\t\t]\n\t\t\t\tif (this.canRecover) {\n\t\t\t\t\tif (this.isCheckingOriginal) {\n\t\t\t\t\t\t// Don't render any action button while the lookup is in\n\t\t\t\t\t\t// flight: a slow connection could otherwise let the user\n\t\t\t\t\t\t// click 'Create new pad' before we know that opening the\n\t\t\t\t\t\t// original is the better default.\n\t\t\t\t\t\tcardChildren.push(\n\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-message' },\n\t\t\t\t\t\t\t\ttranslate('Checking for the original pad...')),\n\t\t\t\t\t\t)\n\t\t\t\t\t} else if (this.originalPad) {\n\t\t\t\t\t\tcardChildren.push(\n\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-message' },\n\t\t\t\t\t\t\t\ttranslate('This file looks like a copy of an existing .pad file in your account. Open the original to keep editing the linked pad, or create a new pad to fork the content stored in this file.')),\n\t\t\t\t\t\t\tcreateElement('a', {\n\t\t\t\t\t\t\t\tclass: 'button primary epnc-native-error-action',\n\t\t\t\t\t\t\t\tattrs: { href: this.originalPad.viewerUrl },\n\t\t\t\t\t\t\t}, translate('Open the original .pad file')),\n\t\t\t\t\t\t\tcreateElement('button', {\n\t\t\t\t\t\t\t\tclass: 'button epnc-native-error-action',\n\t\t\t\t\t\t\t\tattrs: { type: 'button', disabled: this.isRecovering },\n\t\t\t\t\t\t\t\ton: { click: () => { void this.recoverFromSnapshot() } },\n\t\t\t\t\t\t\t}, this.isRecovering ? translate('Creating new pad...') : translate('Create new pad from this file')),\n\t\t\t\t\t\t)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tcardChildren.push(\n\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-message' },\n\t\t\t\t\t\t\t\ttranslate(\"We couldn't find a matching pad in this Nextcloud. You can create a new pad from the text stored in this file; from then on, opening this file will load the new pad.\")),\n\t\t\t\t\t\t\tcreateElement('button', {\n\t\t\t\t\t\t\t\tclass: 'button primary epnc-native-error-action',\n\t\t\t\t\t\t\t\tattrs: { type: 'button', disabled: this.isRecovering },\n\t\t\t\t\t\t\t\ton: { click: () => { void this.recoverFromSnapshot() } },\n\t\t\t\t\t\t\t}, this.isRecovering ? translate('Creating new pad...') : translate('Create new pad from this file')),\n\t\t\t\t\t\t)\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn createElement('div', { class: 'epnc-native-status epnc-native-status--error' }, [\n\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-card' }, cardChildren),\n\t\t\t\t])\n\t\t\t}\n\t\t\tif (this.snapshotMode === 'external') {\n\t\t\t\treturn this.renderSnapshotView(createElement, {\n\t\t\t\t\ttitle: translate('Pad from another server'),\n\t\t\t\t\tmessage: this.externalOpenMessage,\n\t\t\t\t\tactions: [\n\t\t\t\t\t\tcreateElement('a', {\n\t\t\t\t\t\t\tclass: 'button primary',\n\t\t\t\t\t\t\tattrs: {\n\t\t\t\t\t\t\t\thref: this.externalOpenUrl,\n\t\t\t\t\t\t\t\ttarget: '_blank',\n\t\t\t\t\t\t\t\trel: 'noopener noreferrer',\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t}, translate('Open original pad')),\n\t\t\t\t\t],\n\t\t\t\t\thtml: this.snapshot.html,\n\t\t\t\t\ttext: this.snapshot.text,\n\t\t\t\t\temptyMessage: translate('No synced snapshot is stored in this .pad file yet.'),\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (this.snapshotMode === 'readonly') {\n\t\t\t\treturn this.renderSnapshotView(createElement, {\n\t\t\t\t\ttitle: translate('Read-only snapshot'),\n\t\t\t\t\tmessage: translate('Read-only snapshot from the .pad file.'),\n\t\t\t\t\thtml: this.snapshot.html,\n\t\t\t\t\ttext: this.snapshot.text,\n\t\t\t\t\temptyMessage: translate('No synced snapshot is stored in this .pad file yet.'),\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (this.isLoading || !this.iframeSrc) {\n\t\t\t\treturn createElement('div', { class: 'epnc-native-status' }, 'Loading pad...')\n\t\t\t}\n\n\t\t\treturn createElement('div', { class: 'epnc-native-shell' }, [\n\t\t\t\t// Nextcloud Viewer tries to inspect/focus direct iframe children during\n\t\t\t\t// teardown. Keep the direct iframe same-origin via srcdoc, and put the\n\t\t\t\t// cross-origin Etherpad frame one level deeper.\n\t\t\t\tcreateElement('iframe', {\n\t\t\t\t\tattrs: { srcdoc: buildPadFrameSrcdoc(this.iframeSrc), title: 'Etherpad' },\n\t\t\t\t\t// This fires when the srcdoc wrapper is ready. Etherpad then continues\n\t\t\t\t\t// loading in the inner iframe and shows its own loading UI.\n\t\t\t\t\ton: { load: () => this.markLoaded(), error: () => this.markLoaded() },\n\t\t\t\t\tclass: 'epnc-native-iframe',\n\t\t\t\t}),\n\t\t\t])\n\t\t},\n\t}\n\n\tconst tryRegister = () => {\n\t\tattempts += 1\n\t\tif (!(window.OCA && window.OCA.Viewer && typeof window.OCA.Viewer.registerHandler === 'function')) {\n\t\t\tif (attempts < 20) window.setTimeout(tryRegister, 500)\n\t\t\treturn\n\t\t}\n\t\tif (Array.isArray(window.OCA.Viewer.availableHandlers)\n\t\t\t&& window.OCA.Viewer.availableHandlers.some((handler) => handler && handler.id === VIEWER_HANDLER_ID)) {\n\t\t\treturn\n\t\t}\n\t\twindow.OCA.Viewer.registerHandler({ id: VIEWER_HANDLER_ID, mimes: [MIME], component })\n\t}\n\n\ttryRegister()\n})()\n"],"names":["escapeAttribute","value","ALLOWED_PAD_URL_SCHEMES","isSafePadUrl","url","parsed","SRC_DOC_CSP","buildPadFrameSrcdoc","safeUrl","attempts","component","parsePadPathFromDavHref","normalizeName","normalizeDir","dir","joinPath","name","normalizedDir","isPadPath","info","infoPath","baseName","infoDir","combined","urlDir","fromDir","candidates","candidate","numeric","match","fallbackId","init","headers","response","data","error","ocRequestToken","buildInitError","fallbackMessage","err","announceMigratedStatus","ocGenerateUrl","APP_ID","body","createPadSync","generation","isCurrent","publicToken","parsePublicShareTokenFromLocation","byPathUrl","byPublicUrl","byIdUrl","byPathBody","byIdBody","openPostHeaders","fetchOpenData","syncUrl","intervalSeconds","intervalMs","targetUrl","translate","hint","apiFindOriginalPad","apiRecoverFromSnapshot","createElement","options","html","text","actions","cardChildren","tryRegister","handler","VIEWER_HANDLER_ID","MIME"],"mappings":"iNAKA,MAAMA,EAAmBC,GAAU,OAAOA,GAAS,EAAE,EACnD,QAAQ,KAAM,OAAO,EACrB,QAAQ,KAAM,QAAQ,EACtB,QAAQ,KAAM,MAAM,EACpB,QAAQ,KAAM,MAAM,EAEhBC,EAA0B,CAAC,QAAS,QAAQ,EAE5CC,EAAgBC,GAAQ,CAC7B,GAAI,CACH,MAAMC,EAAS,IAAI,IAAI,OAAOD,GAAO,EAAE,CAAC,EACxC,OAAOF,EAAwB,SAASG,EAAO,QAAQ,GACnDA,EAAO,WAAa,IACpBA,EAAO,WAAa,EACzB,MAAQ,CACP,MAAO,EACR,CACD,EAEMC,EAAc,wEAEPC,EAAuBH,GAAQ,CAC3C,MAAMI,EAAUL,EAAaC,CAAG,EAAIJ,EAAgBI,CAAG,EAAI,GAC3D,MAAO,wGACoDJ,EAAgBM,CAAW,EAAI,6IAEzDE,EAAU,4CAC5C,GCrBC,UAAY,CACZ,IAAIC,EAAW,EAEf,MAAMC,EAAY,CACjB,KAAM,0BACN,MAAO,CACN,SAAU,CAAE,KAAM,OAAQ,SAAU,GAAO,QAAS,EAAE,EACtD,SAAU,CAAE,KAAM,OAAQ,SAAU,GAAO,QAAS,EAAE,EACtD,OAAQ,CAAE,KAAM,OAAQ,SAAU,GAAO,QAAS,EAAE,EACpD,OAAQ,CAAE,KAAM,CAAC,OAAQ,MAAM,EAAG,SAAU,GAAO,QAAS,IAAI,EAChE,OAAQ,CAAE,KAAM,CAAC,OAAQ,MAAM,EAAG,SAAU,GAAO,QAAS,IAAI,EAChE,SAAU,CAAE,KAAM,OAAQ,SAAU,GAAO,QAAS,IAAI,CAC3D,EACE,MAAO,CACN,MAAO,CACN,UAAW,GACX,UAAW,GACX,UAAW,GACX,WAAY,GACZ,aAAc,GACd,mBAAoB,GACpB,YAAa,KACb,gBAAiB,GACjB,oBAAqB,GACrB,aAAc,GACd,SAAU,CAAE,KAAM,GAAI,KAAM,EAAE,EAC9B,kBAAmB,CACvB,CACE,EACA,SAAU,CACT,YAAa,CACZ,MAAMT,EAAQ,OAAO,KAAK,QAAW,SAAW,KAAK,OAAO,OAAS,GACrE,OAAKA,GACEU,EAAwBV,CAAK,GAAK,EAC1C,EACA,UAAW,CACV,MAAMW,EAAiBX,GAAU,OAAOA,GAAS,EAAE,EAAE,KAAI,EAAG,QAAQ,aAAc,MAAM,EAClFY,EAAgBZ,GAAU,CAC/B,MAAMa,EAAM,OAAOb,GAAS,EAAE,EAAE,KAAI,EACpC,MAAI,CAACa,GAAOA,IAAQ,IAAY,IACzBA,EAAI,WAAW,GAAG,EAAIA,EAAO,IAAMA,CAC3C,EACMC,EAAW,CAACD,EAAKE,IAAS,CAC/B,GAAI,CAACA,EAAM,MAAO,GAClB,GAAIA,EAAK,WAAW,GAAG,EAAG,OAAOA,EACjC,MAAMC,EAAgBJ,EAAaC,CAAG,EACtC,OAAOG,IAAkB,IAAM,IAAMD,EAAOC,EAAgB,IAAMD,CACnE,EACME,EAAajB,GAAU,OAAOA,GAAU,UAAYA,EAAM,cAAc,SAAS,MAAM,EAC7F,GAAIiB,EAAU,KAAK,UAAU,EAAG,OAAO,KAAK,WAE5C,MAAMC,EAAO,KAAK,UAAY,OAAO,KAAK,UAAa,SAAW,KAAK,SAAW,KAC5EC,EAAWD,GAAQ,OAAOA,EAAK,MAAS,SAAWP,EAAcO,EAAK,IAAI,EAAI,GACpF,GAAID,EAAUE,CAAQ,EAAG,OAAOA,EAAS,WAAW,GAAG,EAAIA,EAAY,IAAMA,EAE7E,MAAMC,EAAWT,EAAc,KAAK,UAAY,KAAK,UAAaO,IAASA,EAAK,MAAQA,EAAK,WAAc,EAAE,EAC7G,GAAI,CAACE,EAAU,MAAO,GAEtB,MAAMC,EAAUH,GAAQ,OAAOA,EAAK,SAAY,SAAWA,EAAK,QAAU,GAC1E,GAAIG,EAAS,CACZ,MAAMC,EAAWR,EAASO,EAASD,CAAQ,EAC3C,GAAIH,EAAUK,CAAQ,EAAG,OAAOA,CACjC,CAGA,MAAMC,EADS,IAAI,gBAAgB,OAAO,SAAS,QAAU,EAAE,EACzC,IAAI,KAAK,GAAK,IAC9BC,EAAUV,EAASS,EAAQH,CAAQ,EACzC,OAAIH,EAAUO,CAAO,EAAUA,EACxB,IAAMJ,CACd,EACA,gBAAiB,CAChB,MAAMK,EAAa,CAAC,KAAK,OAAQ,KAAK,OAAQ,KAAK,WAAa,KAAK,SAAS,QAAU,KAAK,SAAS,QAAU,KAAK,SAAS,GAAG,EACjI,UAAWC,KAAaD,EAAY,CACnC,MAAME,EAAU,OAAOD,CAAS,EAChC,GAAI,OAAO,SAASC,CAAO,GAAKA,EAAU,EAAG,OAAOA,CACrD,CAEA,GADe,IAAI,gBAAgB,OAAO,SAAS,QAAU,EAAE,EACpD,IAAI,UAAU,IAAM,OAAQ,OAAO,KAC9C,MAAMC,GAAS,OAAO,SAAS,UAAY,IAAI,MAAM,iCAAiC,EACtF,GAAI,CAACA,EAAO,OAAO,KACnB,MAAMC,EAAa,OAAOD,EAAM,CAAC,CAAC,EAClC,OAAO,OAAO,SAASC,CAAU,GAAKA,EAAa,EAAIA,EAAa,IACrE,CACH,EACE,MAAO,CACN,SAAU,CAAE,UAAW,GAAM,SAAU,CAAO,KAAK,eAAc,CAAG,CAAC,EACrE,gBAAiB,CAAO,KAAK,eAAc,CAAG,CACjD,EACE,QAAS,CACR,MAAM,iBAAiB1B,EAAK2B,EAAO,GAAI,CACtC,MAAMC,EAAU,OAAO,OAAO,CAAE,OAAQ,kBAAkB,EAAID,EAAK,SAAW,CAAA,CAAE,EAC1EE,EAAW,MAAM,MAAM7B,EAAK,OAAO,OAAO,CAC/C,OAAQ,MACR,YAAa,cACb,QAAA4B,CACL,EAAOD,CAAI,CAAC,EACFG,EAAO,MAAMD,EAAS,KAAI,EAAG,MAAM,KAAO,GAAG,EACnD,GAAI,CAACA,EAAS,GAAI,CACjB,MAAME,EAAQ,IAAI,MAAOD,GAAQA,EAAK,SAAY,kBAAkB,EACpE,MAAIA,GAAQ,OAAOA,EAAK,MAAS,WAChCC,EAAM,KAAOD,EAAK,MAEbC,CACP,CACA,GAAI,CAACD,GAASA,EAAK,uBAAyB,KAAS,OAAOA,EAAK,KAAQ,UAAYA,EAAK,IAAI,KAAI,IAAO,IACxG,MAAM,IAAI,MAAM,0CAA0C,EAE3D,OAAOA,CACR,EACA,0BAA0BC,EAAO,CAChC,OAAMA,aAAiB,MAChB,OAAOA,EAAM,SAAW,EAAE,EAAE,SAAS,0BAA0B,EADhC,EAEvC,EACA,MAAM,8BAA+B,CACpC,MAAMH,EAAU,CACf,OAAQ,mBACR,aAAcI,EAAc,CACjC,EAEUC,EAAiB,CAACH,EAAMI,IAAoB,CACjD,MAAMC,EAAM,IAAI,MAAOL,GAAQA,EAAK,SAAYI,CAAe,EAG/D,OAAIJ,GAAQ,OAAOA,EAAK,MAAS,UAAYA,EAAK,OAAS,KAC1DK,EAAI,KAAOL,EAAK,MAEVK,CACR,EAEMC,EAA0BN,GAAS,CACpCA,GAAQA,EAAK,SAAW,wBAK3B,QAAQ,KAAK,8DAA8D,CAE7E,EAEA,GAAI,KAAK,iBAAmB,KAAM,CACjC,MAAM9B,EAAMqC,EAAc,SAAWC,EAAS,iCAAmC,mBAAmB,OAAO,KAAK,cAAc,CAAC,CAAC,EAC1HT,EAAW,MAAM,MAAM7B,EAAK,CAAE,OAAQ,OAAQ,YAAa,cAAe,QAAA4B,CAAO,CAAE,EACnFE,EAAO,MAAMD,EAAS,KAAI,EAAG,MAAM,KAAO,GAAG,EACnD,GAAI,CAACA,EAAS,GACb,MAAMI,EAAeH,EAAM,4BAA4B,EAExD,OAAAM,EAAuBN,CAAI,EACpBA,CACR,CAEA,GAAI,CAAC,KAAK,SACT,MAAM,IAAI,MAAM,+CAA+C,EAGhE,MAAMS,EAAO,IAAI,gBACjBA,EAAK,IAAI,OAAQ,KAAK,QAAQ,EAC9B,MAAMvC,EAAMqC,EAAc,SAAWC,EAAS,yBAAyB,EACjET,EAAW,MAAM,MAAM7B,EAAK,CACjC,OAAQ,OACR,YAAa,cACb,QAAS,OAAO,OAAO,CAAA,EAAI4B,EAAS,CACnC,eAAgB,iDACtB,CAAM,EACD,KAAMW,EAAK,SAAQ,CACxB,CAAK,EACKT,EAAO,MAAMD,EAAS,KAAI,EAAG,MAAM,KAAO,GAAG,EACnD,GAAI,CAACA,EAAS,GACb,MAAMI,EAAeH,EAAM,4BAA4B,EAExD,OAAAM,EAAuBN,CAAI,EACpBA,CACR,EACA,YAAa,CACZ,KAAK,MAAM,gBAAiB,EAAI,CACjC,EAKA,SAAU,CACT,OAAK,KAAK,WACT,KAAK,SAAWU,EAAc,CAAE,aAAc,IAAMR,EAAc,CAAE,CAAE,GAEhE,KAAK,QACb,EAKA,cAAe,CACT,KAAK,WAGV,KAAK,SAAS,cAAc,GAAM,EAAI,EACtC,KAAK,SAAS,KAAI,EAClB,KAAK,SAAS,wBAAuB,EACtC,EACA,MAAM,gBAAiB,CACtB,MAAMS,EAAa,EAAE,KAAK,kBACpBC,EAAY,IAAMD,IAAe,KAAK,kBAqB5C,GAnBA,KAAK,UAAY,GACjB,KAAK,UAAY,GACjB,KAAK,WAAa,GAClB,KAAK,mBAAqB,GAC1B,KAAK,YAAc,KACnB,KAAK,UAAY,GACjB,KAAK,gBAAkB,GACvB,KAAK,oBAAsB,GAC3B,KAAK,aAAe,GACpB,KAAK,SAAW,CAAE,KAAM,GAAI,KAAM,EAAE,EAKhC,KAAK,WACR,KAAK,SAAS,KAAI,EAClB,KAAK,SAAS,UAAU,CAAE,QAAS,EAAE,CAAE,GAGpC,CAAC,KAAK,SAAU,CACnB,GAAI,CAACC,EAAS,EAAI,OAClB,KAAK,UAAY,yBACjB,KAAK,UAAY,GACjB,MACD,CAEA,MAAMC,EAAcC,EAAiC,EAC/CC,EAAYR,EAAc,SAAWC,EAAS,mBAAmB,EACjEQ,GAAe,IAAM,CAC1B,GAAI,CAACH,EAAa,MAAO,GACzB,MAAM3C,EAAM,IAAI,IAAIqC,EAAc,SAAWC,EAAS,uBAAyB,mBAAmBK,CAAW,CAAC,EAAG,OAAO,SAAS,MAAM,EACvI,OAAA3C,EAAI,aAAa,IAAI,OAAQ,KAAK,QAAQ,EACnCA,EAAI,SAAQ,CACpB,GAAC,EACK+C,EAAU,KAAK,iBAAmB,KACrCV,EAAc,SAAWC,EAAS,yBAAyB,EAC3D,GACGU,EAAa,IAAI,gBACvBA,EAAW,IAAI,OAAQ,KAAK,QAAQ,EACpC,MAAMC,EAAW,IAAI,gBACjB,KAAK,iBAAmB,MAC3BA,EAAS,IAAI,SAAU,OAAO,KAAK,cAAc,CAAC,EAEnD,MAAMC,EAAkB,CACvB,eAAgB,kDAChB,aAAclB,EAAc,CACjC,EAEI,GAAI,CACH,MAAMmB,EAAgB,SAAY,CAChC,IAAIrB,EAAO,KACX,GAAIgB,EACHhB,EAAO,MAAM,KAAK,iBAAiBgB,CAAW,UACpCC,EACV,GAAI,CACHjB,EAAO,MAAM,KAAK,iBAAiBiB,EAAS,CAC3C,OAAQ,OACR,QAASG,EACT,KAAMD,EAAS,SAAQ,CACjC,CAAU,CACF,MAAQ,CAER,CAED,OAAKnB,IACJA,EAAO,MAAM,KAAK,iBAAiBe,EAAW,CAC7C,OAAQ,OACR,QAASK,EACT,KAAMF,EAAW,SAAQ,CAClC,CAAS,GAEKlB,CACR,EAED,IAAIA,EACJ,GAAI,CAEH,GADAA,EAAO,MAAMqB,EAAa,EACtB,CAACT,EAAS,EAAI,MACnB,OAASX,EAAO,CACf,GAAI,CAAC,KAAK,0BAA0BA,CAAK,EACxC,MAAMA,EAKP,GAHA,MAAM,KAAK,6BAA4B,EACnC,CAACW,EAAS,IACdZ,EAAO,MAAMqB,EAAa,EACtB,CAACT,EAAS,GAAI,MACnB,CAEA,MAAMU,EAAWtB,GAAQ,OAAOA,EAAK,UAAa,SAAYA,EAAK,SAAW,GAExEuB,EAAkB,OAAOvB,GAAQA,EAAK,qBAAqB,EAC3DwB,EAAc,OAAO,SAASD,CAAe,GAAKA,EAAkB,EACvE,KAAK,IAAI,IAAM,KAAK,IAAI,KAASA,EAAkB,GAAI,CAAC,EACxD,KAQH,GANA,KAAK,QAAO,EAAG,UAAU,CAAE,QAAAD,EAAS,WAAAE,CAAU,CAAE,EAChD,KAAK,QAAO,EAAG,yBAAwB,EACnCF,GACH,KAAK,QAAO,EAAG,MAAK,EAGjBtB,GAAQA,EAAK,uBAAyB,GAAM,CAC/C,KAAK,aAAe,WACpB,KAAK,SAAW,CACf,KAAO,OAAOA,EAAK,eAAkB,SAAYA,EAAK,cAAgB,GACtE,KAAO,OAAOA,EAAK,eAAkB,SAAYA,EAAK,cAAgB,EAC7E,EACM,KAAK,WAAU,EACf,MACD,CAEA,GAAIA,GAAQA,EAAK,cAAgB,IAAQ,OAAOA,EAAK,KAAQ,UAAYA,EAAK,IAAI,KAAI,IAAO,GAAI,CAChG,MAAMyB,EAAYzB,EAAK,IAAI,KAAI,EAC/B,KAAK,gBAAkByB,EACvB,KAAK,oBAAsBC,EAAU,wCAAwC,EAC7E,KAAK,aAAe,WACpB,KAAK,SAAW,CACf,KAAO1B,GAAQ,OAAOA,EAAK,eAAkB,SAAYA,EAAK,cAAgB,GAC9E,KAAOA,GAAQ,OAAOA,EAAK,eAAkB,SAAYA,EAAK,cAAgB,EACrF,EACM,KAAK,WAAU,EACf,MACD,CAEA,KAAK,UAAYA,EAAK,IACtB,KAAK,WAAU,CAChB,OAASC,EAAO,CACf,GAAI,CAACW,EAAS,EAAI,OAClB,KAAK,UAAYX,aAAiB,MAAQA,EAAM,QAAU,sBAG1D,KAAK,WAAa,CAAA,EAAQA,GAASA,EAAM,OAAS,oBAC9C,KAAK,iBAAmB,MACxB,CAACa,EAAiC,EAClC,KAAK,YAKR,KAAK,qBAAqBH,EAAYC,CAAS,EAEhD,KAAK,WAAU,CAChB,QAAA,CACC,GAAI,CAACA,EAAS,EAAI,OAClB,KAAK,UAAY,EAClB,CACD,EACA,MAAM,qBAAqBD,EAAYC,EAAW,CACjD,GAAI,KAAK,iBAAmB,KAG5B,CAAA,KAAK,mBAAqB,GAC1B,GAAI,CACH,MAAMe,EAAO,MAAMC,EAAmB,KAAK,cAAc,EACzD,GAAI,CAAChB,EAAS,EAAI,OACde,GAAQA,EAAK,QAAU,IAAQ,OAAOA,EAAK,YAAe,UAAYA,EAAK,aAAe,KAC7F,KAAK,YAAc,CAClB,UAAWA,EAAK,WAChB,KAAM,OAAOA,EAAK,MAAS,SAAWA,EAAK,KAAO,EACzD,EAEI,MAAQ,CAGR,QAAA,CACKf,EAAS,IACZ,KAAK,mBAAqB,GAE5B,CAAA,CACD,EACA,MAAM,qBAAsB,CAC3B,GAAI,EAAA,CAAC,KAAK,YAAc,KAAK,cAAgB,KAAK,iBAAmB,MAGrE,CAAA,KAAK,aAAe,GACpB,GAAI,CACH,MAAMiB,EAAuB,KAAK,cAAc,EAChD,KAAK,UAAY,GACjB,KAAK,WAAa,GAClB,MAAM,KAAK,eAAc,CAC1B,OAAS5B,EAAO,CACf,KAAK,UAAYA,aAAiB,MAAQA,EAAM,QAAU,qBAC3D,QAAA,CACC,KAAK,aAAe,EACrB,CAAA,CACD,EACA,mBAAmB6B,EAAeC,EAAS,CAC1C,MAAMC,EAAO,OAAOD,EAAQ,MAAQ,EAAE,EAChCE,EAAO,OAAOF,EAAQ,MAAQ,EAAE,EAChCG,EAAU,MAAM,QAAQH,EAAQ,OAAO,EAAIA,EAAQ,QAAU,CAAA,EAEnE,OAAOD,EAAc,MAAO,CAAE,MAAO,sBAAsB,EAAI,CAC9DA,EAAc,MAAO,CAAE,MAAO,6BAA6B,EAAI,CAC9DA,EAAc,MAAO,CAAE,MAAO,8BAA8B,EAAI,CAC/DA,EAAc,MAAO,CAAE,MAAO,+BAA+B,EAAI,CAChEA,EAAc,MAAO,CAAE,MAAO,6BAA6B,EAAIC,EAAQ,KAAK,EAC5ED,EAAc,MAAO,CAAE,MAAO,+BAA+B,EAAIC,EAAQ,OAAO,CACxF,CAAQ,EACDG,EAAQ,OAAS,EACdJ,EAAc,MAAO,CAAE,MAAO,+BAA+B,EAAII,CAAO,EACxE,IACV,CAAO,EACDF,EAAK,KAAI,IAAO,GACbF,EAAc,MAAO,CACtB,MAAO,8DACP,SAAU,CAAE,UAAWE,CAAI,CACnC,CAAQ,EACCF,EAAc,MAAO,CAAE,MAAO,4BAA4B,EAAIG,EAAK,SAAW,GAC7EA,EACAF,EAAQ,YAAY,CAC9B,CAAM,CACN,CAAK,CACF,CACH,EACE,eAAgB,CACf,KAAK,mBAAqB,EAC1B,KAAK,aAAY,CAClB,EACA,eAAgB,CACf,KAAK,mBAAqB,EAC1B,KAAK,aAAY,CAClB,EACA,OAAOD,EAAe,CACrB,GAAI,KAAK,UAAW,CACnB,MAAMK,EAAe,CACpBL,EAAc,MAAO,CAAE,MAAO,yBAAyB,EAAIJ,EAAU,oBAAoB,CAAC,EAC1FI,EAAc,MAAO,CAAE,MAAO,2BAA2B,EAAI,KAAK,SAAS,CAChF,EACI,OAAI,KAAK,aACJ,KAAK,mBAKRK,EAAa,KACZL,EAAc,MAAO,CAAE,MAAO,2BAA2B,EACxDJ,EAAU,kCAAkC,CAAC,CACrD,EACgB,KAAK,YACfS,EAAa,KACZL,EAAc,MAAO,CAAE,MAAO,2BAA2B,EACxDJ,EAAU,sLAAsL,CAAC,EAClMI,EAAc,IAAK,CAClB,MAAO,0CACP,MAAO,CAAE,KAAM,KAAK,YAAY,SAAS,CACjD,EAAUJ,EAAU,6BAA6B,CAAC,EAC3CI,EAAc,SAAU,CACvB,MAAO,kCACP,MAAO,CAAE,KAAM,SAAU,SAAU,KAAK,YAAY,EACpD,GAAI,CAAE,MAAO,IAAM,CAAO,KAAK,oBAAmB,CAAG,CAAC,CAC9D,EAAU,KAAK,aAAeJ,EAAU,qBAAqB,EAAIA,EAAU,+BAA+B,CAAC,CAC3G,EAEMS,EAAa,KACZL,EAAc,MAAO,CAAE,MAAO,2BAA2B,EACxDJ,EAAU,uKAAuK,CAAC,EACnLI,EAAc,SAAU,CACvB,MAAO,0CACP,MAAO,CAAE,KAAM,SAAU,SAAU,KAAK,YAAY,EACpD,GAAI,CAAE,MAAO,IAAM,CAAO,KAAK,oBAAmB,CAAG,CAAC,CAC9D,EAAU,KAAK,aAAeJ,EAAU,qBAAqB,EAAIA,EAAU,+BAA+B,CAAC,CAC3G,GAGWI,EAAc,MAAO,CAAE,MAAO,8CAA8C,EAAI,CACtFA,EAAc,MAAO,CAAE,MAAO,wBAAwB,EAAIK,CAAY,CAC3E,CAAK,CACF,CACA,OAAI,KAAK,eAAiB,WAClB,KAAK,mBAAmBL,EAAe,CAC7C,MAAOJ,EAAU,yBAAyB,EAC1C,QAAS,KAAK,oBACd,QAAS,CACRI,EAAc,IAAK,CAClB,MAAO,iBACP,MAAO,CACN,KAAM,KAAK,gBACX,OAAQ,SACR,IAAK,qBACb,CACA,EAASJ,EAAU,mBAAmB,CAAC,CACvC,EACK,KAAM,KAAK,SAAS,KACpB,KAAM,KAAK,SAAS,KACpB,aAAcA,EAAU,qDAAqD,CAClF,CAAK,EAEE,KAAK,eAAiB,WAClB,KAAK,mBAAmBI,EAAe,CAC7C,MAAOJ,EAAU,oBAAoB,EACrC,QAASA,EAAU,wCAAwC,EAC3D,KAAM,KAAK,SAAS,KACpB,KAAM,KAAK,SAAS,KACpB,aAAcA,EAAU,qDAAqD,CAClF,CAAK,EAEE,KAAK,WAAa,CAAC,KAAK,UACpBI,EAAc,MAAO,CAAE,MAAO,oBAAoB,EAAI,gBAAgB,EAGvEA,EAAc,MAAO,CAAE,MAAO,mBAAmB,EAAI,CAI3DA,EAAc,SAAU,CACvB,MAAO,CAAE,OAAQzD,EAAoB,KAAK,SAAS,EAAG,MAAO,UAAU,EAGvE,GAAI,CAAE,KAAM,IAAM,KAAK,WAAU,EAAI,MAAO,IAAM,KAAK,YAAY,EACnE,MAAO,oBACZ,CAAK,CACL,CAAI,CACF,CACF,EAEO+D,EAAc,IAAM,CAEzB,GADA7D,GAAY,EACR,EAAE,OAAO,KAAO,OAAO,IAAI,QAAU,OAAO,OAAO,IAAI,OAAO,iBAAoB,YAAa,CAC9FA,EAAW,IAAI,OAAO,WAAW6D,EAAa,GAAG,EACrD,MACD,CACI,MAAM,QAAQ,OAAO,IAAI,OAAO,iBAAiB,GACjD,OAAO,IAAI,OAAO,kBAAkB,KAAMC,GAAYA,GAAWA,EAAQ,KAAOC,CAAiB,GAGrG,OAAO,IAAI,OAAO,gBAAgB,CAAE,GAAIA,EAAmB,MAAO,CAACC,CAAI,EAAG,UAAA/D,CAAS,CAAE,CACtF,EAEA4D,EAAW,CACZ,GAAC"}
\ No newline at end of file
+{"version":3,"file":"etherpad_nextcloud-viewer-main.mjs","sources":["../src/lib/pad-frame-srcdoc.js","../src/viewer-main.js"],"sourcesContent":["/**\n * SPDX-License-Identifier: AGPL-3.0-or-later\n * Copyright (c) 2026 Jacob Bühler\n */\n\nconst escapeAttribute = (value) => String(value || '')\n\t.replace(/&/g, '&amp;')\n\t.replace(/\"/g, '&quot;')\n\t.replace(/</g, '&lt;')\n\t.replace(/>/g, '&gt;')\n\nconst ALLOWED_PAD_URL_SCHEMES = ['http:', 'https:']\n\nconst isSafePadUrl = (url) => {\n\ttry {\n\t\tconst parsed = new URL(String(url || ''))\n\t\treturn ALLOWED_PAD_URL_SCHEMES.includes(parsed.protocol)\n\t\t\t&& parsed.username === ''\n\t\t\t&& parsed.password === ''\n\t} catch {\n\t\treturn false\n\t}\n}\n\nconst SRC_DOC_CSP = \"default-src 'none'; frame-src http: https:; style-src 'unsafe-inline'\"\n\nexport const buildPadFrameSrcdoc = (url) => {\n\tconst safeUrl = isSafePadUrl(url) ? escapeAttribute(url) : ''\n\treturn '<!doctype html><html><head><meta charset=\"utf-8\">'\n\t+ '<meta http-equiv=\"Content-Security-Policy\" content=\"' + escapeAttribute(SRC_DOC_CSP) + '\">'\n\t+ '<style>html,body,iframe{width:100%;height:100%;margin:0;border:0;overflow:hidden}iframe{display:block}</style>'\n\t+ '</head><body><iframe src=\"' + safeUrl + '\" title=\"Etherpad\"></iframe></body></html>'\n}\n","/**\n * SPDX-License-Identifier: AGPL-3.0-or-later\n * Copyright (c) 2026 Jacob Bühler\n */\nimport { APP_ID, MIME, VIEWER_HANDLER_ID } from './lib/constants.js'\nimport { apiFindOriginalPad, apiRecoverFromSnapshot } from './lib/api-client.js'\nimport { ocGenerateUrl, ocRequestToken, translate } from './lib/oc-compat.js'\nimport { createPadSync } from './lib/pad-sync.js'\nimport { sanitizeSnapshotHtml } from './lib/sanitize-html.js'\nimport { buildPadFrameSrcdoc } from './lib/pad-frame-srcdoc.js'\nimport { parsePadPathFromDavHref, parsePublicShareTokenFromLocation } from './lib/urls.js'\n\n(function () {\n\tlet attempts = 0\n\n\tconst component = {\n\t\tname: 'EtherpadNextcloudViewer',\n\t\tprops: {\n\t\t\tfilename: { type: String, required: false, default: '' },\n\t\t\tbasename: { type: String, required: false, default: '' },\n\t\t\tsource: { type: String, required: false, default: '' },\n\t\t\tfileid: { type: [String, Number], required: false, default: null },\n\t\t\tfileId: { type: [String, Number], required: false, default: null },\n\t\t\tfileInfo: { type: Object, required: false, default: null },\n\t\t},\n\t\tdata() {\n\t\t\treturn {\n\t\t\t\tiframeSrc: '',\n\t\t\t\tisLoading: true,\n\t\t\t\tloadError: '',\n\t\t\t\tcanRecover: false,\n\t\t\t\tisRecovering: false,\n\t\t\t\tisCheckingOriginal: false,\n\t\t\t\toriginalPad: null,\n\t\t\t\texternalOpenUrl: '',\n\t\t\t\texternalOpenMessage: '',\n\t\t\t\tsnapshotMode: '',\n\t\t\t\tsnapshot: { text: '', html: '' },\n\t\t\t\tresolveGeneration: 0,\n\t\t\t}\n\t\t},\n\t\tcomputed: {\n\t\t\tsourcePath() {\n\t\t\t\tconst value = typeof this.source === 'string' ? this.source.trim() : ''\n\t\t\t\tif (!value) return ''\n\t\t\t\treturn parsePadPathFromDavHref(value) || ''\n\t\t\t},\n\t\t\tfilePath() {\n\t\t\t\tconst normalizeName = (value) => String(value || '').trim().replace(/\\s+\\.pad$/i, '.pad')\n\t\t\t\tconst normalizeDir = (value) => {\n\t\t\t\t\tconst dir = String(value || '').trim()\n\t\t\t\t\tif (!dir || dir === '/') return '/'\n\t\t\t\t\treturn dir.startsWith('/') ? dir : ('/' + dir)\n\t\t\t\t}\n\t\t\t\tconst joinPath = (dir, name) => {\n\t\t\t\t\tif (!name) return ''\n\t\t\t\t\tif (name.startsWith('/')) return name\n\t\t\t\t\tconst normalizedDir = normalizeDir(dir)\n\t\t\t\t\treturn normalizedDir === '/' ? '/' + name : normalizedDir + '/' + name\n\t\t\t\t}\n\t\t\t\tconst isPadPath = (value) => typeof value === 'string' && value.toLowerCase().endsWith('.pad')\n\t\t\t\tif (isPadPath(this.sourcePath)) return this.sourcePath\n\n\t\t\t\tconst info = this.fileInfo && typeof this.fileInfo === 'object' ? this.fileInfo : null\n\t\t\t\tconst infoPath = info && typeof info.path === 'string' ? normalizeName(info.path) : ''\n\t\t\t\tif (isPadPath(infoPath)) return infoPath.startsWith('/') ? infoPath : ('/' + infoPath)\n\n\t\t\t\tconst baseName = normalizeName(this.filename || this.basename || (info && (info.name || info.basename)) || '')\n\t\t\t\tif (!baseName) return ''\n\n\t\t\t\tconst infoDir = info && typeof info.dirname === 'string' ? info.dirname : ''\n\t\t\t\tif (infoDir) {\n\t\t\t\t\tconst combined = joinPath(infoDir, baseName)\n\t\t\t\t\tif (isPadPath(combined)) return combined\n\t\t\t\t}\n\n\t\t\t\tconst params = new URLSearchParams(window.location.search || '')\n\t\t\t\tconst urlDir = params.get('dir') || '/'\n\t\t\t\tconst fromDir = joinPath(urlDir, baseName)\n\t\t\t\tif (isPadPath(fromDir)) return fromDir\n\t\t\t\treturn '/' + baseName\n\t\t\t},\n\t\t\tresolvedFileId() {\n\t\t\t\tconst candidates = [this.fileid, this.fileId, this.fileInfo && (this.fileInfo.fileid || this.fileInfo.fileId || this.fileInfo.id)]\n\t\t\t\tfor (const candidate of candidates) {\n\t\t\t\t\tconst numeric = Number(candidate)\n\t\t\t\t\tif (Number.isFinite(numeric) && numeric > 0) return numeric\n\t\t\t\t}\n\t\t\t\tconst params = new URLSearchParams(window.location.search || '')\n\t\t\t\tif (params.get('openfile') !== 'true') return null\n\t\t\t\tconst match = (window.location.pathname || '').match(/\\/apps\\/files\\/files\\/(\\d+)\\/?$/)\n\t\t\t\tif (!match) return null\n\t\t\t\tconst fallbackId = Number(match[1])\n\t\t\t\treturn Number.isFinite(fallbackId) && fallbackId > 0 ? fallbackId : null\n\t\t\t},\n\t\t},\n\t\twatch: {\n\t\t\tfilePath: { immediate: true, handler() { void this.resolveOpenUrl() } },\n\t\t\tresolvedFileId() { void this.resolveOpenUrl() },\n\t\t},\n\t\tmethods: {\n\t\t\tasync fetchOpenPayload(url, init = {}) {\n\t\t\t\tconst headers = Object.assign({ Accept: 'application/json' }, init.headers || {})\n\t\t\t\tconst response = await fetch(url, Object.assign({\n\t\t\t\t\tmethod: 'GET',\n\t\t\t\t\tcredentials: 'same-origin',\n\t\t\t\t\theaders,\n\t\t\t\t}, init))\n\t\t\t\tconst data = await response.json().catch(() => ({}))\n\t\t\t\tif (!response.ok) {\n\t\t\t\t\tconst error = new Error((data && data.message) || 'Pad open failed.')\n\t\t\t\t\tif (data && typeof data.code === 'string') {\n\t\t\t\t\t\terror.code = data.code\n\t\t\t\t\t}\n\t\t\t\t\tthrow error\n\t\t\t\t}\n\t\t\t\tif (!data || (data.is_readonly_snapshot !== true && (typeof data.url !== 'string' || data.url.trim() === ''))) {\n\t\t\t\t\tthrow new Error('Pad open API did not return a valid URL.')\n\t\t\t\t}\n\t\t\t\treturn data\n\t\t\t},\n\t\t\tisMissingFrontmatterError(error) {\n\t\t\t\tif (!(error instanceof Error)) return false\n\t\t\t\treturn String(error.message || '').includes('Missing YAML frontmatter')\n\t\t\t},\n\t\t\tasync initializeMissingFrontmatter() {\n\t\t\t\tconst headers = {\n\t\t\t\t\tAccept: 'application/json',\n\t\t\t\t\trequesttoken: ocRequestToken(),\n\t\t\t\t}\n\n\t\t\t\tconst buildInitError = (data, fallbackMessage) => {\n\t\t\t\t\tconst err = new Error((data && data.message) || fallbackMessage)\n\t\t\t\t\t// Forward a structured code so callers can branch on\n\t\t\t\t\t// `legacy_collision_no_access` without parsing the message.\n\t\t\t\t\tif (data && typeof data.code === 'string' && data.code !== '') {\n\t\t\t\t\t\terr.code = data.code\n\t\t\t\t\t}\n\t\t\t\t\treturn err\n\t\t\t\t}\n\n\t\t\t\tconst announceMigratedStatus = (data) => {\n\t\t\t\t\tif (data && data.status === 'migrated_from_legacy') {\n\t\t\t\t\t\t// Audit-visible on the backend; mirror it in the\n\t\t\t\t\t\t// browser console so dev tools makes the conversion\n\t\t\t\t\t\t// visible without surfacing a UI toast (the codebase\n\t\t\t\t\t\t// has no toast infra wired yet).\n\t\t\t\t\t\tconsole.info('Legacy Ownpad .pad migrated to managed format on first open.')\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tif (this.resolvedFileId !== null) {\n\t\t\t\t\tconst url = ocGenerateUrl('/apps/' + APP_ID + '/api/v1/pads/initialize-by-id/' + encodeURIComponent(String(this.resolvedFileId)))\n\t\t\t\t\tconst response = await fetch(url, { method: 'POST', credentials: 'same-origin', headers })\n\t\t\t\t\tconst data = await response.json().catch(() => ({}))\n\t\t\t\t\tif (!response.ok) {\n\t\t\t\t\t\tthrow buildInitError(data, 'Pad initialization failed.')\n\t\t\t\t\t}\n\t\t\t\t\tannounceMigratedStatus(data)\n\t\t\t\t\treturn data\n\t\t\t\t}\n\n\t\t\t\tif (!this.filePath) {\n\t\t\t\t\tthrow new Error('Pad initialization failed: missing file path.')\n\t\t\t\t}\n\n\t\t\t\tconst body = new URLSearchParams()\n\t\t\t\tbody.set('file', this.filePath)\n\t\t\t\tconst url = ocGenerateUrl('/apps/' + APP_ID + '/api/v1/pads/initialize')\n\t\t\t\tconst response = await fetch(url, {\n\t\t\t\t\tmethod: 'POST',\n\t\t\t\t\tcredentials: 'same-origin',\n\t\t\t\t\theaders: Object.assign({}, headers, {\n\t\t\t\t\t\t'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',\n\t\t\t\t\t}),\n\t\t\t\t\tbody: body.toString(),\n\t\t\t\t})\n\t\t\t\tconst data = await response.json().catch(() => ({}))\n\t\t\t\tif (!response.ok) {\n\t\t\t\t\tthrow buildInitError(data, 'Pad initialization failed.')\n\t\t\t\t}\n\t\t\t\tannounceMigratedStatus(data)\n\t\t\t\treturn data\n\t\t\t},\n\t\t\tmarkLoaded() {\n\t\t\t\tthis.$emit('update:loaded', true)\n\t\t\t},\n\t\t\t// Lazily build the shared sync controller. Kept off `data()` on\n\t\t\t// purpose so it is not made reactive, and memoised on a plain\n\t\t\t// instance field so it survives the immediate filePath watcher\n\t\t\t// (which runs before created/mounted).\n\t\t\tpadSync() {\n\t\t\t\tif (!this._padSync) {\n\t\t\t\t\tthis._padSync = createPadSync({ requestToken: () => ocRequestToken() })\n\t\t\t\t}\n\t\t\t\treturn this._padSync\n\t\t\t},\n\t\t\t// Final flush + full teardown on destroy. Guard on the existing\n\t\t\t// controller so we never spin one up just to tear it down (a viewer\n\t\t\t// destroyed before its first open). The lazy create stays in the\n\t\t\t// resolve path, which actually needs to sync.\n\t\t\tteardownSync() {\n\t\t\t\tif (!this._padSync) {\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t\t\tthis._padSync.fireAndForget(true, true)\n\t\t\t\tthis._padSync.stop()\n\t\t\t\tthis._padSync.removeLifecycleHandlers()\n\t\t\t},\n\t\t\tasync resolveOpenUrl() {\n\t\t\t\tconst generation = ++this.resolveGeneration\n\t\t\t\tconst isCurrent = () => generation === this.resolveGeneration\n\n\t\t\t\tthis.isLoading = true\n\t\t\t\tthis.loadError = ''\n\t\t\t\tthis.canRecover = false\n\t\t\t\tthis.isCheckingOriginal = false\n\t\t\t\tthis.originalPad = null\n\t\t\t\tthis.iframeSrc = ''\n\t\t\t\tthis.externalOpenUrl = ''\n\t\t\t\tthis.externalOpenMessage = ''\n\t\t\t\tthis.snapshotMode = ''\n\t\t\t\tthis.snapshot = { text: '', html: '' }\n\t\t\t\t// Reset only an existing controller; don't construct one just to\n\t\t\t\t// stop/clear it (e.g. the initial immediate watcher with no pad).\n\t\t\t\t// The success path below lazily creates it when there's a pad to\n\t\t\t\t// actually sync.\n\t\t\t\tif (this._padSync) {\n\t\t\t\t\tthis._padSync.stop()\n\t\t\t\t\tthis._padSync.configure({ syncUrl: '' })\n\t\t\t\t}\n\n\t\t\t\tif (!this.filePath) {\n\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\tthis.loadError = 'No .pad file selected.'\n\t\t\t\t\tthis.isLoading = false\n\t\t\t\t\treturn\n\t\t\t\t}\n\n\t\t\t\tconst publicToken = parsePublicShareTokenFromLocation()\n\t\t\t\tconst byPathUrl = ocGenerateUrl('/apps/' + APP_ID + '/api/v1/pads/open')\n\t\t\t\tconst byPublicUrl = (() => {\n\t\t\t\t\tif (!publicToken) return ''\n\t\t\t\t\tconst url = new URL(ocGenerateUrl('/apps/' + APP_ID + '/api/v1/public/open/' + encodeURIComponent(publicToken)), window.location.origin)\n\t\t\t\t\turl.searchParams.set('file', this.filePath)\n\t\t\t\t\treturn url.toString()\n\t\t\t\t})()\n\t\t\t\tconst byIdUrl = this.resolvedFileId !== null\n\t\t\t\t\t? ocGenerateUrl('/apps/' + APP_ID + '/api/v1/pads/open-by-id')\n\t\t\t\t\t: ''\n\t\t\t\tconst byPathBody = new URLSearchParams()\n\t\t\t\tbyPathBody.set('file', this.filePath)\n\t\t\t\tconst byIdBody = new URLSearchParams()\n\t\t\t\tif (this.resolvedFileId !== null) {\n\t\t\t\t\tbyIdBody.set('fileId', String(this.resolvedFileId))\n\t\t\t\t}\n\t\t\t\tconst openPostHeaders = {\n\t\t\t\t\t'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',\n\t\t\t\t\trequesttoken: ocRequestToken(),\n\t\t\t\t}\n\n\t\t\t\ttry {\n\t\t\t\t\tconst fetchOpenData = async () => {\n\t\t\t\t\t\t\tlet data = null\n\t\t\t\t\t\t\tif (byPublicUrl) {\n\t\t\t\t\t\t\t\tdata = await this.fetchOpenPayload(byPublicUrl)\n\t\t\t\t\t\t\t} else if (byIdUrl) {\n\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\tdata = await this.fetchOpenPayload(byIdUrl, {\n\t\t\t\t\t\t\t\t\t\tmethod: 'POST',\n\t\t\t\t\t\t\t\t\t\theaders: openPostHeaders,\n\t\t\t\t\t\t\t\t\t\tbody: byIdBody.toString(),\n\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t} catch {\n\t\t\t\t\t\t\t\t\t// Fallback for moved/renamed files where stale fileId can fail.\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tif (!data) {\n\t\t\t\t\t\t\t\tdata = await this.fetchOpenPayload(byPathUrl, {\n\t\t\t\t\t\t\t\t\tmethod: 'POST',\n\t\t\t\t\t\t\t\t\theaders: openPostHeaders,\n\t\t\t\t\t\t\t\t\tbody: byPathBody.toString(),\n\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\treturn data\n\t\t\t\t\t\t}\n\n\t\t\t\t\tlet data\n\t\t\t\t\ttry {\n\t\t\t\t\t\tdata = await fetchOpenData()\n\t\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\tif (!this.isMissingFrontmatterError(error)) {\n\t\t\t\t\t\t\tthrow error\n\t\t\t\t\t\t}\n\t\t\t\t\t\tawait this.initializeMissingFrontmatter()\n\t\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\t\tdata = await fetchOpenData()\n\t\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\t}\n\n\t\t\t\t\tconst syncUrl = (data && typeof data.sync_url === 'string') ? data.sync_url : ''\n\n\t\t\t\t\tconst intervalSeconds = Number(data && data.sync_interval_seconds)\n\t\t\t\t\tconst intervalMs = (Number.isFinite(intervalSeconds) && intervalSeconds > 0)\n\t\t\t\t\t\t? Math.max(5000, Math.min(3600000, intervalSeconds * 1000))\n\t\t\t\t\t\t: 120000\n\n\t\t\t\t\tthis.padSync().configure({ syncUrl, intervalMs })\n\t\t\t\t\tthis.padSync().installLifecycleHandlers()\n\t\t\t\t\tif (syncUrl) {\n\t\t\t\t\t\tthis.padSync().start()\n\t\t\t\t\t}\n\n\t\t\t\t\tif (data && data.is_readonly_snapshot === true) {\n\t\t\t\t\t\tthis.snapshotMode = 'readonly'\n\t\t\t\t\t\tthis.snapshot = {\n\t\t\t\t\t\t\ttext: (typeof data.snapshot_text === 'string') ? data.snapshot_text : '',\n\t\t\t\t\t\t\thtml: (typeof data.snapshot_html === 'string') ? data.snapshot_html : '',\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthis.markLoaded()\n\t\t\t\t\t\treturn\n\t\t\t\t\t}\n\n\t\t\t\t\tif (data && data.is_external === true && typeof data.url === 'string' && data.url.trim() !== '') {\n\t\t\t\t\t\tconst targetUrl = data.url.trim()\n\t\t\t\t\t\tthis.externalOpenUrl = targetUrl\n\t\t\t\t\t\tthis.externalOpenMessage = translate('Read-only snapshot from the .pad file.')\n\t\t\t\t\t\tthis.snapshotMode = 'external'\n\t\t\t\t\t\tthis.snapshot = {\n\t\t\t\t\t\t\ttext: (data && typeof data.snapshot_text === 'string') ? data.snapshot_text : '',\n\t\t\t\t\t\t\thtml: (data && typeof data.snapshot_html === 'string') ? data.snapshot_html : '',\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthis.markLoaded()\n\t\t\t\t\t\treturn\n\t\t\t\t\t}\n\n\t\t\t\t\tthis.iframeSrc = data.url\n\t\t\t\t\tthis.markLoaded()\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\tthis.loadError = error instanceof Error ? error.message : 'Could not load pad.'\n\t\t\t\t\t// Recovery is gated on having a fileId we can address. Public-share\n\t\t\t\t\t// visitors don't get a recovery action — only the share owner.\n\t\t\t\t\tthis.canRecover = Boolean(error && error.code === 'missing_binding')\n\t\t\t\t\t\t&& this.resolvedFileId !== null\n\t\t\t\t\t\t&& !parsePublicShareTokenFromLocation()\n\t\t\t\t\tif (this.canRecover) {\n\t\t\t\t\t\t// Optional: check if this looks like a copy of a .pad we\n\t\t\t\t\t\t// can already address; if so we'll offer 'Open the\n\t\t\t\t\t\t// original' as the primary action. A miss is silent — no\n\t\t\t\t\t\t// UI element rendered, no info leaked.\n\t\t\t\t\t\tthis.fetchOriginalPadHint(generation, isCurrent)\n\t\t\t\t\t}\n\t\t\t\t\tthis.markLoaded()\n\t\t\t\t} finally {\n\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\tthis.isLoading = false\n\t\t\t\t}\n\t\t\t},\n\t\t\tasync fetchOriginalPadHint(generation, isCurrent) {\n\t\t\t\tif (this.resolvedFileId === null) {\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t\t\tthis.isCheckingOriginal = true\n\t\t\t\ttry {\n\t\t\t\t\tconst hint = await apiFindOriginalPad(this.resolvedFileId)\n\t\t\t\t\tif (!isCurrent()) return\n\t\t\t\t\tif (hint && hint.found === true && typeof hint.viewer_url === 'string' && hint.viewer_url !== '') {\n\t\t\t\t\t\tthis.originalPad = {\n\t\t\t\t\t\t\tviewerUrl: hint.viewer_url,\n\t\t\t\t\t\t\tpath: typeof hint.path === 'string' ? hint.path : '',\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Silent: the recovery button stays available, we just\n\t\t\t\t\t// don't surface the \"Open the original\" affordance.\n\t\t\t\t} finally {\n\t\t\t\t\tif (isCurrent()) {\n\t\t\t\t\t\tthis.isCheckingOriginal = false\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\tasync recoverFromSnapshot() {\n\t\t\t\tif (!this.canRecover || this.isRecovering || this.resolvedFileId === null) {\n\t\t\t\t\treturn\n\t\t\t\t}\n\t\t\t\tthis.isRecovering = true\n\t\t\t\ttry {\n\t\t\t\t\tawait apiRecoverFromSnapshot(this.resolvedFileId)\n\t\t\t\t\tthis.loadError = ''\n\t\t\t\t\tthis.canRecover = false\n\t\t\t\t\tawait this.resolveOpenUrl()\n\t\t\t\t} catch (error) {\n\t\t\t\t\tthis.loadError = error instanceof Error ? error.message : 'Could not load pad.'\n\t\t\t\t} finally {\n\t\t\t\t\tthis.isRecovering = false\n\t\t\t\t}\n\t\t\t},\n\t\t\trenderSnapshotView(createElement, options) {\n\t\t\t\tconst html = sanitizeSnapshotHtml(options.html)\n\t\t\t\tconst text = String(options.text || '')\n\t\t\t\tconst actions = Array.isArray(options.actions) ? options.actions : []\n\n\t\t\t\treturn createElement('div', { class: 'epnc-native-snapshot' }, [\n\t\t\t\t\tcreateElement('div', { class: 'epnc-native-snapshot__inner' }, [\n\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-snapshot__header' }, [\n\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-snapshot__heading' }, [\n\t\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-snapshot__title' }, options.title),\n\t\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-snapshot__message' }, options.message),\n\t\t\t\t\t\t\t]),\n\t\t\t\t\t\t\tactions.length > 0\n\t\t\t\t\t\t\t\t? createElement('div', { class: 'epnc-native-snapshot__actions' }, actions)\n\t\t\t\t\t\t\t\t: null,\n\t\t\t\t\t\t]),\n\t\t\t\t\t\thtml.trim() !== ''\n\t\t\t\t\t\t\t? createElement('div', {\n\t\t\t\t\t\t\t\tclass: 'epnc-native-snapshot__text epnc-native-snapshot__text--html',\n\t\t\t\t\t\t\t\tdomProps: { innerHTML: html },\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: createElement('pre', { class: 'epnc-native-snapshot__text' }, text.trim() !== ''\n\t\t\t\t\t\t\t\t? text\n\t\t\t\t\t\t\t\t: options.emptyMessage),\n\t\t\t\t\t]),\n\t\t\t\t])\n\t\t\t},\n\t\t},\n\t\tbeforeDestroy() {\n\t\t\tthis.resolveGeneration += 1\n\t\t\tthis.teardownSync()\n\t\t},\n\t\tbeforeUnmount() {\n\t\t\tthis.resolveGeneration += 1\n\t\t\tthis.teardownSync()\n\t\t},\n\t\trender(createElement) {\n\t\t\tif (this.loadError) {\n\t\t\t\tconst cardChildren = [\n\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-title' }, translate('Could not open pad')),\n\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-message' }, this.loadError),\n\t\t\t\t]\n\t\t\t\tif (this.canRecover) {\n\t\t\t\t\tif (this.isCheckingOriginal) {\n\t\t\t\t\t\t// Don't render any action button while the lookup is in\n\t\t\t\t\t\t// flight: a slow connection could otherwise let the user\n\t\t\t\t\t\t// click 'Create new pad' before we know that opening the\n\t\t\t\t\t\t// original is the better default.\n\t\t\t\t\t\tcardChildren.push(\n\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-message' },\n\t\t\t\t\t\t\t\ttranslate('Checking for the original pad...')),\n\t\t\t\t\t\t)\n\t\t\t\t\t} else if (this.originalPad) {\n\t\t\t\t\t\tcardChildren.push(\n\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-message' },\n\t\t\t\t\t\t\t\ttranslate('This file looks like a copy of an existing .pad file in your account. Open the original to keep editing the linked pad, or create a new pad to fork the content stored in this file.')),\n\t\t\t\t\t\t\tcreateElement('a', {\n\t\t\t\t\t\t\t\tclass: 'button primary epnc-native-error-action',\n\t\t\t\t\t\t\t\tattrs: { href: this.originalPad.viewerUrl },\n\t\t\t\t\t\t\t}, translate('Open the original .pad file')),\n\t\t\t\t\t\t\tcreateElement('button', {\n\t\t\t\t\t\t\t\tclass: 'button epnc-native-error-action',\n\t\t\t\t\t\t\t\tattrs: { type: 'button', disabled: this.isRecovering },\n\t\t\t\t\t\t\t\ton: { click: () => { void this.recoverFromSnapshot() } },\n\t\t\t\t\t\t\t}, this.isRecovering ? translate('Creating new pad...') : translate('Create new pad from this file')),\n\t\t\t\t\t\t)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tcardChildren.push(\n\t\t\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-message' },\n\t\t\t\t\t\t\t\ttranslate(\"We couldn't find a matching pad in this Nextcloud. You can create a new pad from the text stored in this file; from then on, opening this file will load the new pad.\")),\n\t\t\t\t\t\t\tcreateElement('button', {\n\t\t\t\t\t\t\t\tclass: 'button primary epnc-native-error-action',\n\t\t\t\t\t\t\t\tattrs: { type: 'button', disabled: this.isRecovering },\n\t\t\t\t\t\t\t\ton: { click: () => { void this.recoverFromSnapshot() } },\n\t\t\t\t\t\t\t}, this.isRecovering ? translate('Creating new pad...') : translate('Create new pad from this file')),\n\t\t\t\t\t\t)\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn createElement('div', { class: 'epnc-native-status epnc-native-status--error' }, [\n\t\t\t\t\tcreateElement('div', { class: 'epnc-native-error-card' }, cardChildren),\n\t\t\t\t])\n\t\t\t}\n\t\t\tif (this.snapshotMode === 'external') {\n\t\t\t\treturn this.renderSnapshotView(createElement, {\n\t\t\t\t\ttitle: translate('Pad from another server'),\n\t\t\t\t\tmessage: this.externalOpenMessage,\n\t\t\t\t\tactions: [\n\t\t\t\t\t\tcreateElement('a', {\n\t\t\t\t\t\t\tclass: 'button primary',\n\t\t\t\t\t\t\tattrs: {\n\t\t\t\t\t\t\t\thref: this.externalOpenUrl,\n\t\t\t\t\t\t\t\ttarget: '_blank',\n\t\t\t\t\t\t\t\trel: 'noopener noreferrer',\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t}, translate('Open original pad')),\n\t\t\t\t\t],\n\t\t\t\t\thtml: this.snapshot.html,\n\t\t\t\t\ttext: this.snapshot.text,\n\t\t\t\t\temptyMessage: translate('No synced snapshot is stored in this .pad file yet.'),\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (this.snapshotMode === 'readonly') {\n\t\t\t\treturn this.renderSnapshotView(createElement, {\n\t\t\t\t\ttitle: translate('Read-only snapshot'),\n\t\t\t\t\tmessage: translate('Read-only snapshot from the .pad file.'),\n\t\t\t\t\thtml: this.snapshot.html,\n\t\t\t\t\ttext: this.snapshot.text,\n\t\t\t\t\temptyMessage: translate('No synced snapshot is stored in this .pad file yet.'),\n\t\t\t\t})\n\t\t\t}\n\t\t\tif (this.isLoading || !this.iframeSrc) {\n\t\t\t\treturn createElement('div', { class: 'epnc-native-status' }, 'Loading pad...')\n\t\t\t}\n\n\t\t\treturn createElement('div', { class: 'epnc-native-shell' }, [\n\t\t\t\t// Nextcloud Viewer tries to inspect/focus direct iframe children during\n\t\t\t\t// teardown. Keep the direct iframe same-origin via srcdoc, and put the\n\t\t\t\t// cross-origin Etherpad frame one level deeper.\n\t\t\t\tcreateElement('iframe', {\n\t\t\t\t\tattrs: { srcdoc: buildPadFrameSrcdoc(this.iframeSrc), title: 'Etherpad' },\n\t\t\t\t\t// This fires when the srcdoc wrapper is ready. Etherpad then continues\n\t\t\t\t\t// loading in the inner iframe and shows its own loading UI.\n\t\t\t\t\ton: { load: () => this.markLoaded(), error: () => this.markLoaded() },\n\t\t\t\t\tclass: 'epnc-native-iframe',\n\t\t\t\t}),\n\t\t\t])\n\t\t},\n\t}\n\n\tconst tryRegister = () => {\n\t\tattempts += 1\n\t\tif (!(window.OCA && window.OCA.Viewer && typeof window.OCA.Viewer.registerHandler === 'function')) {\n\t\t\tif (attempts < 20) window.setTimeout(tryRegister, 500)\n\t\t\treturn\n\t\t}\n\t\tif (Array.isArray(window.OCA.Viewer.availableHandlers)\n\t\t\t&& window.OCA.Viewer.availableHandlers.some((handler) => handler && handler.id === VIEWER_HANDLER_ID)) {\n\t\t\treturn\n\t\t}\n\t\twindow.OCA.Viewer.registerHandler({ id: VIEWER_HANDLER_ID, mimes: [MIME], component })\n\t}\n\n\ttryRegister()\n})()\n"],"names":["escapeAttribute","value","ALLOWED_PAD_URL_SCHEMES","isSafePadUrl","url","parsed","SRC_DOC_CSP","buildPadFrameSrcdoc","safeUrl","attempts","component","parsePadPathFromDavHref","normalizeName","normalizeDir","dir","joinPath","name","normalizedDir","isPadPath","info","infoPath","baseName","infoDir","combined","urlDir","fromDir","candidates","candidate","numeric","match","fallbackId","init","headers","response","data","error","ocRequestToken","buildInitError","fallbackMessage","err","announceMigratedStatus","ocGenerateUrl","APP_ID","body","createPadSync","generation","isCurrent","publicToken","parsePublicShareTokenFromLocation","byPathUrl","byPublicUrl","byIdUrl","byPathBody","byIdBody","openPostHeaders","fetchOpenData","syncUrl","intervalSeconds","intervalMs","targetUrl","translate","hint","apiFindOriginalPad","apiRecoverFromSnapshot","createElement","options","html","sanitizeSnapshotHtml","text","actions","cardChildren","tryRegister","handler","VIEWER_HANDLER_ID","MIME"],"mappings":"6NAKA,MAAMA,EAAmBC,GAAU,OAAOA,GAAS,EAAE,EACnD,QAAQ,KAAM,OAAO,EACrB,QAAQ,KAAM,QAAQ,EACtB,QAAQ,KAAM,MAAM,EACpB,QAAQ,KAAM,MAAM,EAEhBC,EAA0B,CAAC,QAAS,QAAQ,EAE5CC,EAAgBC,GAAQ,CAC7B,GAAI,CACH,MAAMC,EAAS,IAAI,IAAI,OAAOD,GAAO,EAAE,CAAC,EACxC,OAAOF,EAAwB,SAASG,EAAO,QAAQ,GACnDA,EAAO,WAAa,IACpBA,EAAO,WAAa,EACzB,MAAQ,CACP,MAAO,EACR,CACD,EAEMC,EAAc,wEAEPC,EAAuBH,GAAQ,CAC3C,MAAMI,EAAUL,EAAaC,CAAG,EAAIJ,EAAgBI,CAAG,EAAI,GAC3D,MAAO,wGACoDJ,EAAgBM,CAAW,EAAI,6IAEzDE,EAAU,4CAC5C,GCpBC,UAAY,CACZ,IAAIC,EAAW,EAEf,MAAMC,EAAY,CACjB,KAAM,0BACN,MAAO,CACN,SAAU,CAAE,KAAM,OAAQ,SAAU,GAAO,QAAS,EAAE,EACtD,SAAU,CAAE,KAAM,OAAQ,SAAU,GAAO,QAAS,EAAE,EACtD,OAAQ,CAAE,KAAM,OAAQ,SAAU,GAAO,QAAS,EAAE,EACpD,OAAQ,CAAE,KAAM,CAAC,OAAQ,MAAM,EAAG,SAAU,GAAO,QAAS,IAAI,EAChE,OAAQ,CAAE,KAAM,CAAC,OAAQ,MAAM,EAAG,SAAU,GAAO,QAAS,IAAI,EAChE,SAAU,CAAE,KAAM,OAAQ,SAAU,GAAO,QAAS,IAAI,CAC3D,EACE,MAAO,CACN,MAAO,CACN,UAAW,GACX,UAAW,GACX,UAAW,GACX,WAAY,GACZ,aAAc,GACd,mBAAoB,GACpB,YAAa,KACb,gBAAiB,GACjB,oBAAqB,GACrB,aAAc,GACd,SAAU,CAAE,KAAM,GAAI,KAAM,EAAE,EAC9B,kBAAmB,CACvB,CACE,EACA,SAAU,CACT,YAAa,CACZ,MAAMT,EAAQ,OAAO,KAAK,QAAW,SAAW,KAAK,OAAO,OAAS,GACrE,OAAKA,GACEU,EAAwBV,CAAK,GAAK,EAC1C,EACA,UAAW,CACV,MAAMW,EAAiBX,GAAU,OAAOA,GAAS,EAAE,EAAE,KAAI,EAAG,QAAQ,aAAc,MAAM,EAClFY,EAAgBZ,GAAU,CAC/B,MAAMa,EAAM,OAAOb,GAAS,EAAE,EAAE,KAAI,EACpC,MAAI,CAACa,GAAOA,IAAQ,IAAY,IACzBA,EAAI,WAAW,GAAG,EAAIA,EAAO,IAAMA,CAC3C,EACMC,EAAW,CAACD,EAAKE,IAAS,CAC/B,GAAI,CAACA,EAAM,MAAO,GAClB,GAAIA,EAAK,WAAW,GAAG,EAAG,OAAOA,EACjC,MAAMC,EAAgBJ,EAAaC,CAAG,EACtC,OAAOG,IAAkB,IAAM,IAAMD,EAAOC,EAAgB,IAAMD,CACnE,EACME,EAAajB,GAAU,OAAOA,GAAU,UAAYA,EAAM,cAAc,SAAS,MAAM,EAC7F,GAAIiB,EAAU,KAAK,UAAU,EAAG,OAAO,KAAK,WAE5C,MAAMC,EAAO,KAAK,UAAY,OAAO,KAAK,UAAa,SAAW,KAAK,SAAW,KAC5EC,EAAWD,GAAQ,OAAOA,EAAK,MAAS,SAAWP,EAAcO,EAAK,IAAI,EAAI,GACpF,GAAID,EAAUE,CAAQ,EAAG,OAAOA,EAAS,WAAW,GAAG,EAAIA,EAAY,IAAMA,EAE7E,MAAMC,EAAWT,EAAc,KAAK,UAAY,KAAK,UAAaO,IAASA,EAAK,MAAQA,EAAK,WAAc,EAAE,EAC7G,GAAI,CAACE,EAAU,MAAO,GAEtB,MAAMC,EAAUH,GAAQ,OAAOA,EAAK,SAAY,SAAWA,EAAK,QAAU,GAC1E,GAAIG,EAAS,CACZ,MAAMC,EAAWR,EAASO,EAASD,CAAQ,EAC3C,GAAIH,EAAUK,CAAQ,EAAG,OAAOA,CACjC,CAGA,MAAMC,EADS,IAAI,gBAAgB,OAAO,SAAS,QAAU,EAAE,EACzC,IAAI,KAAK,GAAK,IAC9BC,EAAUV,EAASS,EAAQH,CAAQ,EACzC,OAAIH,EAAUO,CAAO,EAAUA,EACxB,IAAMJ,CACd,EACA,gBAAiB,CAChB,MAAMK,EAAa,CAAC,KAAK,OAAQ,KAAK,OAAQ,KAAK,WAAa,KAAK,SAAS,QAAU,KAAK,SAAS,QAAU,KAAK,SAAS,GAAG,EACjI,UAAWC,KAAaD,EAAY,CACnC,MAAME,EAAU,OAAOD,CAAS,EAChC,GAAI,OAAO,SAASC,CAAO,GAAKA,EAAU,EAAG,OAAOA,CACrD,CAEA,GADe,IAAI,gBAAgB,OAAO,SAAS,QAAU,EAAE,EACpD,IAAI,UAAU,IAAM,OAAQ,OAAO,KAC9C,MAAMC,GAAS,OAAO,SAAS,UAAY,IAAI,MAAM,iCAAiC,EACtF,GAAI,CAACA,EAAO,OAAO,KACnB,MAAMC,EAAa,OAAOD,EAAM,CAAC,CAAC,EAClC,OAAO,OAAO,SAASC,CAAU,GAAKA,EAAa,EAAIA,EAAa,IACrE,CACH,EACE,MAAO,CACN,SAAU,CAAE,UAAW,GAAM,SAAU,CAAO,KAAK,eAAc,CAAG,CAAC,EACrE,gBAAiB,CAAO,KAAK,eAAc,CAAG,CACjD,EACE,QAAS,CACR,MAAM,iBAAiB1B,EAAK2B,EAAO,GAAI,CACtC,MAAMC,EAAU,OAAO,OAAO,CAAE,OAAQ,kBAAkB,EAAID,EAAK,SAAW,CAAA,CAAE,EAC1EE,EAAW,MAAM,MAAM7B,EAAK,OAAO,OAAO,CAC/C,OAAQ,MACR,YAAa,cACb,QAAA4B,CACL,EAAOD,CAAI,CAAC,EACFG,EAAO,MAAMD,EAAS,KAAI,EAAG,MAAM,KAAO,GAAG,EACnD,GAAI,CAACA,EAAS,GAAI,CACjB,MAAME,EAAQ,IAAI,MAAOD,GAAQA,EAAK,SAAY,kBAAkB,EACpE,MAAIA,GAAQ,OAAOA,EAAK,MAAS,WAChCC,EAAM,KAAOD,EAAK,MAEbC,CACP,CACA,GAAI,CAACD,GAASA,EAAK,uBAAyB,KAAS,OAAOA,EAAK,KAAQ,UAAYA,EAAK,IAAI,KAAI,IAAO,IACxG,MAAM,IAAI,MAAM,0CAA0C,EAE3D,OAAOA,CACR,EACA,0BAA0BC,EAAO,CAChC,OAAMA,aAAiB,MAChB,OAAOA,EAAM,SAAW,EAAE,EAAE,SAAS,0BAA0B,EADhC,EAEvC,EACA,MAAM,8BAA+B,CACpC,MAAMH,EAAU,CACf,OAAQ,mBACR,aAAcI,EAAc,CACjC,EAEUC,EAAiB,CAACH,EAAMI,IAAoB,CACjD,MAAMC,EAAM,IAAI,MAAOL,GAAQA,EAAK,SAAYI,CAAe,EAG/D,OAAIJ,GAAQ,OAAOA,EAAK,MAAS,UAAYA,EAAK,OAAS,KAC1DK,EAAI,KAAOL,EAAK,MAEVK,CACR,EAEMC,EAA0BN,GAAS,CACpCA,GAAQA,EAAK,SAAW,wBAK3B,QAAQ,KAAK,8DAA8D,CAE7E,EAEA,GAAI,KAAK,iBAAmB,KAAM,CACjC,MAAM9B,EAAMqC,EAAc,SAAWC,EAAS,iCAAmC,mBAAmB,OAAO,KAAK,cAAc,CAAC,CAAC,EAC1HT,EAAW,MAAM,MAAM7B,EAAK,CAAE,OAAQ,OAAQ,YAAa,cAAe,QAAA4B,CAAO,CAAE,EACnFE,EAAO,MAAMD,EAAS,KAAI,EAAG,MAAM,KAAO,GAAG,EACnD,GAAI,CAACA,EAAS,GACb,MAAMI,EAAeH,EAAM,4BAA4B,EAExD,OAAAM,EAAuBN,CAAI,EACpBA,CACR,CAEA,GAAI,CAAC,KAAK,SACT,MAAM,IAAI,MAAM,+CAA+C,EAGhE,MAAMS,EAAO,IAAI,gBACjBA,EAAK,IAAI,OAAQ,KAAK,QAAQ,EAC9B,MAAMvC,EAAMqC,EAAc,SAAWC,EAAS,yBAAyB,EACjET,EAAW,MAAM,MAAM7B,EAAK,CACjC,OAAQ,OACR,YAAa,cACb,QAAS,OAAO,OAAO,CAAA,EAAI4B,EAAS,CACnC,eAAgB,iDACtB,CAAM,EACD,KAAMW,EAAK,SAAQ,CACxB,CAAK,EACKT,EAAO,MAAMD,EAAS,KAAI,EAAG,MAAM,KAAO,GAAG,EACnD,GAAI,CAACA,EAAS,GACb,MAAMI,EAAeH,EAAM,4BAA4B,EAExD,OAAAM,EAAuBN,CAAI,EACpBA,CACR,EACA,YAAa,CACZ,KAAK,MAAM,gBAAiB,EAAI,CACjC,EAKA,SAAU,CACT,OAAK,KAAK,WACT,KAAK,SAAWU,EAAc,CAAE,aAAc,IAAMR,EAAc,CAAE,CAAE,GAEhE,KAAK,QACb,EAKA,cAAe,CACT,KAAK,WAGV,KAAK,SAAS,cAAc,GAAM,EAAI,EACtC,KAAK,SAAS,KAAI,EAClB,KAAK,SAAS,wBAAuB,EACtC,EACA,MAAM,gBAAiB,CACtB,MAAMS,EAAa,EAAE,KAAK,kBACpBC,EAAY,IAAMD,IAAe,KAAK,kBAqB5C,GAnBA,KAAK,UAAY,GACjB,KAAK,UAAY,GACjB,KAAK,WAAa,GAClB,KAAK,mBAAqB,GAC1B,KAAK,YAAc,KACnB,KAAK,UAAY,GACjB,KAAK,gBAAkB,GACvB,KAAK,oBAAsB,GAC3B,KAAK,aAAe,GACpB,KAAK,SAAW,CAAE,KAAM,GAAI,KAAM,EAAE,EAKhC,KAAK,WACR,KAAK,SAAS,KAAI,EAClB,KAAK,SAAS,UAAU,CAAE,QAAS,EAAE,CAAE,GAGpC,CAAC,KAAK,SAAU,CACnB,GAAI,CAACC,EAAS,EAAI,OAClB,KAAK,UAAY,yBACjB,KAAK,UAAY,GACjB,MACD,CAEA,MAAMC,EAAcC,EAAiC,EAC/CC,EAAYR,EAAc,SAAWC,EAAS,mBAAmB,EACjEQ,GAAe,IAAM,CAC1B,GAAI,CAACH,EAAa,MAAO,GACzB,MAAM3C,EAAM,IAAI,IAAIqC,EAAc,SAAWC,EAAS,uBAAyB,mBAAmBK,CAAW,CAAC,EAAG,OAAO,SAAS,MAAM,EACvI,OAAA3C,EAAI,aAAa,IAAI,OAAQ,KAAK,QAAQ,EACnCA,EAAI,SAAQ,CACpB,GAAC,EACK+C,EAAU,KAAK,iBAAmB,KACrCV,EAAc,SAAWC,EAAS,yBAAyB,EAC3D,GACGU,EAAa,IAAI,gBACvBA,EAAW,IAAI,OAAQ,KAAK,QAAQ,EACpC,MAAMC,EAAW,IAAI,gBACjB,KAAK,iBAAmB,MAC3BA,EAAS,IAAI,SAAU,OAAO,KAAK,cAAc,CAAC,EAEnD,MAAMC,EAAkB,CACvB,eAAgB,kDAChB,aAAclB,EAAc,CACjC,EAEI,GAAI,CACH,MAAMmB,EAAgB,SAAY,CAChC,IAAIrB,EAAO,KACX,GAAIgB,EACHhB,EAAO,MAAM,KAAK,iBAAiBgB,CAAW,UACpCC,EACV,GAAI,CACHjB,EAAO,MAAM,KAAK,iBAAiBiB,EAAS,CAC3C,OAAQ,OACR,QAASG,EACT,KAAMD,EAAS,SAAQ,CACjC,CAAU,CACF,MAAQ,CAER,CAED,OAAKnB,IACJA,EAAO,MAAM,KAAK,iBAAiBe,EAAW,CAC7C,OAAQ,OACR,QAASK,EACT,KAAMF,EAAW,SAAQ,CAClC,CAAS,GAEKlB,CACR,EAED,IAAIA,EACJ,GAAI,CAEH,GADAA,EAAO,MAAMqB,EAAa,EACtB,CAACT,EAAS,EAAI,MACnB,OAASX,EAAO,CACf,GAAI,CAAC,KAAK,0BAA0BA,CAAK,EACxC,MAAMA,EAKP,GAHA,MAAM,KAAK,6BAA4B,EACnC,CAACW,EAAS,IACdZ,EAAO,MAAMqB,EAAa,EACtB,CAACT,EAAS,GAAI,MACnB,CAEA,MAAMU,EAAWtB,GAAQ,OAAOA,EAAK,UAAa,SAAYA,EAAK,SAAW,GAExEuB,EAAkB,OAAOvB,GAAQA,EAAK,qBAAqB,EAC3DwB,EAAc,OAAO,SAASD,CAAe,GAAKA,EAAkB,EACvE,KAAK,IAAI,IAAM,KAAK,IAAI,KAASA,EAAkB,GAAI,CAAC,EACxD,KAQH,GANA,KAAK,QAAO,EAAG,UAAU,CAAE,QAAAD,EAAS,WAAAE,CAAU,CAAE,EAChD,KAAK,QAAO,EAAG,yBAAwB,EACnCF,GACH,KAAK,QAAO,EAAG,MAAK,EAGjBtB,GAAQA,EAAK,uBAAyB,GAAM,CAC/C,KAAK,aAAe,WACpB,KAAK,SAAW,CACf,KAAO,OAAOA,EAAK,eAAkB,SAAYA,EAAK,cAAgB,GACtE,KAAO,OAAOA,EAAK,eAAkB,SAAYA,EAAK,cAAgB,EAC7E,EACM,KAAK,WAAU,EACf,MACD,CAEA,GAAIA,GAAQA,EAAK,cAAgB,IAAQ,OAAOA,EAAK,KAAQ,UAAYA,EAAK,IAAI,KAAI,IAAO,GAAI,CAChG,MAAMyB,EAAYzB,EAAK,IAAI,KAAI,EAC/B,KAAK,gBAAkByB,EACvB,KAAK,oBAAsBC,EAAU,wCAAwC,EAC7E,KAAK,aAAe,WACpB,KAAK,SAAW,CACf,KAAO1B,GAAQ,OAAOA,EAAK,eAAkB,SAAYA,EAAK,cAAgB,GAC9E,KAAOA,GAAQ,OAAOA,EAAK,eAAkB,SAAYA,EAAK,cAAgB,EACrF,EACM,KAAK,WAAU,EACf,MACD,CAEA,KAAK,UAAYA,EAAK,IACtB,KAAK,WAAU,CAChB,OAASC,EAAO,CACf,GAAI,CAACW,EAAS,EAAI,OAClB,KAAK,UAAYX,aAAiB,MAAQA,EAAM,QAAU,sBAG1D,KAAK,WAAa,CAAA,EAAQA,GAASA,EAAM,OAAS,oBAC9C,KAAK,iBAAmB,MACxB,CAACa,EAAiC,EAClC,KAAK,YAKR,KAAK,qBAAqBH,EAAYC,CAAS,EAEhD,KAAK,WAAU,CAChB,QAAA,CACC,GAAI,CAACA,EAAS,EAAI,OAClB,KAAK,UAAY,EAClB,CACD,EACA,MAAM,qBAAqBD,EAAYC,EAAW,CACjD,GAAI,KAAK,iBAAmB,KAG5B,CAAA,KAAK,mBAAqB,GAC1B,GAAI,CACH,MAAMe,EAAO,MAAMC,EAAmB,KAAK,cAAc,EACzD,GAAI,CAAChB,EAAS,EAAI,OACde,GAAQA,EAAK,QAAU,IAAQ,OAAOA,EAAK,YAAe,UAAYA,EAAK,aAAe,KAC7F,KAAK,YAAc,CAClB,UAAWA,EAAK,WAChB,KAAM,OAAOA,EAAK,MAAS,SAAWA,EAAK,KAAO,EACzD,EAEI,MAAQ,CAGR,QAAA,CACKf,EAAS,IACZ,KAAK,mBAAqB,GAE5B,CAAA,CACD,EACA,MAAM,qBAAsB,CAC3B,GAAI,EAAA,CAAC,KAAK,YAAc,KAAK,cAAgB,KAAK,iBAAmB,MAGrE,CAAA,KAAK,aAAe,GACpB,GAAI,CACH,MAAMiB,EAAuB,KAAK,cAAc,EAChD,KAAK,UAAY,GACjB,KAAK,WAAa,GAClB,MAAM,KAAK,eAAc,CAC1B,OAAS5B,EAAO,CACf,KAAK,UAAYA,aAAiB,MAAQA,EAAM,QAAU,qBAC3D,QAAA,CACC,KAAK,aAAe,EACrB,CAAA,CACD,EACA,mBAAmB6B,EAAeC,EAAS,CAC1C,MAAMC,EAAOC,EAAqBF,EAAQ,IAAI,EACxCG,EAAO,OAAOH,EAAQ,MAAQ,EAAE,EAChCI,EAAU,MAAM,QAAQJ,EAAQ,OAAO,EAAIA,EAAQ,QAAU,CAAA,EAEnE,OAAOD,EAAc,MAAO,CAAE,MAAO,sBAAsB,EAAI,CAC9DA,EAAc,MAAO,CAAE,MAAO,6BAA6B,EAAI,CAC9DA,EAAc,MAAO,CAAE,MAAO,8BAA8B,EAAI,CAC/DA,EAAc,MAAO,CAAE,MAAO,+BAA+B,EAAI,CAChEA,EAAc,MAAO,CAAE,MAAO,6BAA6B,EAAIC,EAAQ,KAAK,EAC5ED,EAAc,MAAO,CAAE,MAAO,+BAA+B,EAAIC,EAAQ,OAAO,CACxF,CAAQ,EACDI,EAAQ,OAAS,EACdL,EAAc,MAAO,CAAE,MAAO,+BAA+B,EAAIK,CAAO,EACxE,IACV,CAAO,EACDH,EAAK,KAAI,IAAO,GACbF,EAAc,MAAO,CACtB,MAAO,8DACP,SAAU,CAAE,UAAWE,CAAI,CACnC,CAAQ,EACCF,EAAc,MAAO,CAAE,MAAO,4BAA4B,EAAII,EAAK,SAAW,GAC7EA,EACAH,EAAQ,YAAY,CAC9B,CAAM,CACN,CAAK,CACF,CACH,EACE,eAAgB,CACf,KAAK,mBAAqB,EAC1B,KAAK,aAAY,CAClB,EACA,eAAgB,CACf,KAAK,mBAAqB,EAC1B,KAAK,aAAY,CAClB,EACA,OAAOD,EAAe,CACrB,GAAI,KAAK,UAAW,CACnB,MAAMM,EAAe,CACpBN,EAAc,MAAO,CAAE,MAAO,yBAAyB,EAAIJ,EAAU,oBAAoB,CAAC,EAC1FI,EAAc,MAAO,CAAE,MAAO,2BAA2B,EAAI,KAAK,SAAS,CAChF,EACI,OAAI,KAAK,aACJ,KAAK,mBAKRM,EAAa,KACZN,EAAc,MAAO,CAAE,MAAO,2BAA2B,EACxDJ,EAAU,kCAAkC,CAAC,CACrD,EACgB,KAAK,YACfU,EAAa,KACZN,EAAc,MAAO,CAAE,MAAO,2BAA2B,EACxDJ,EAAU,sLAAsL,CAAC,EAClMI,EAAc,IAAK,CAClB,MAAO,0CACP,MAAO,CAAE,KAAM,KAAK,YAAY,SAAS,CACjD,EAAUJ,EAAU,6BAA6B,CAAC,EAC3CI,EAAc,SAAU,CACvB,MAAO,kCACP,MAAO,CAAE,KAAM,SAAU,SAAU,KAAK,YAAY,EACpD,GAAI,CAAE,MAAO,IAAM,CAAO,KAAK,oBAAmB,CAAG,CAAC,CAC9D,EAAU,KAAK,aAAeJ,EAAU,qBAAqB,EAAIA,EAAU,+BAA+B,CAAC,CAC3G,EAEMU,EAAa,KACZN,EAAc,MAAO,CAAE,MAAO,2BAA2B,EACxDJ,EAAU,uKAAuK,CAAC,EACnLI,EAAc,SAAU,CACvB,MAAO,0CACP,MAAO,CAAE,KAAM,SAAU,SAAU,KAAK,YAAY,EACpD,GAAI,CAAE,MAAO,IAAM,CAAO,KAAK,oBAAmB,CAAG,CAAC,CAC9D,EAAU,KAAK,aAAeJ,EAAU,qBAAqB,EAAIA,EAAU,+BAA+B,CAAC,CAC3G,GAGWI,EAAc,MAAO,CAAE,MAAO,8CAA8C,EAAI,CACtFA,EAAc,MAAO,CAAE,MAAO,wBAAwB,EAAIM,CAAY,CAC3E,CAAK,CACF,CACA,OAAI,KAAK,eAAiB,WAClB,KAAK,mBAAmBN,EAAe,CAC7C,MAAOJ,EAAU,yBAAyB,EAC1C,QAAS,KAAK,oBACd,QAAS,CACRI,EAAc,IAAK,CAClB,MAAO,iBACP,MAAO,CACN,KAAM,KAAK,gBACX,OAAQ,SACR,IAAK,qBACb,CACA,EAASJ,EAAU,mBAAmB,CAAC,CACvC,EACK,KAAM,KAAK,SAAS,KACpB,KAAM,KAAK,SAAS,KACpB,aAAcA,EAAU,qDAAqD,CAClF,CAAK,EAEE,KAAK,eAAiB,WAClB,KAAK,mBAAmBI,EAAe,CAC7C,MAAOJ,EAAU,oBAAoB,EACrC,QAASA,EAAU,wCAAwC,EAC3D,KAAM,KAAK,SAAS,KACpB,KAAM,KAAK,SAAS,KACpB,aAAcA,EAAU,qDAAqD,CAClF,CAAK,EAEE,KAAK,WAAa,CAAC,KAAK,UACpBI,EAAc,MAAO,CAAE,MAAO,oBAAoB,EAAI,gBAAgB,EAGvEA,EAAc,MAAO,CAAE,MAAO,mBAAmB,EAAI,CAI3DA,EAAc,SAAU,CACvB,MAAO,CAAE,OAAQzD,EAAoB,KAAK,SAAS,EAAG,MAAO,UAAU,EAGvE,GAAI,CAAE,KAAM,IAAM,KAAK,WAAU,EAAI,MAAO,IAAM,KAAK,YAAY,EACnE,MAAO,oBACZ,CAAK,CACL,CAAI,CACF,CACF,EAEOgE,EAAc,IAAM,CAEzB,GADA9D,GAAY,EACR,EAAE,OAAO,KAAO,OAAO,IAAI,QAAU,OAAO,OAAO,IAAI,OAAO,iBAAoB,YAAa,CAC9FA,EAAW,IAAI,OAAO,WAAW8D,EAAa,GAAG,EACrD,MACD,CACI,MAAM,QAAQ,OAAO,IAAI,OAAO,iBAAiB,GACjD,OAAO,IAAI,OAAO,kBAAkB,KAAMC,GAAYA,GAAWA,EAAQ,KAAOC,CAAiB,GAGrG,OAAO,IAAI,OAAO,gBAAgB,CAAE,GAAIA,EAAmB,MAAO,CAACC,CAAI,EAAG,UAAAhE,CAAS,CAAE,CACtF,EAEA6D,EAAW,CACZ,GAAC"}
\ No newline at end of file
diff --git a/js/pad-sync-B0gz-oBk.chunk.mjs b/js/pad-sync-B0gz-oBk.chunk.mjs
deleted file mode 100644
index 16727fb..0000000
--- a/js/pad-sync-B0gz-oBk.chunk.mjs
+++ /dev/null
@@ -1,2 +0,0 @@
-function H({requestToken:w,fetchImpl:m}={}){const S=typeof m=="function"?m:(...e)=>window.fetch(...e),k=typeof w=="function"?w:()=>"";let n="",b=12e4,i=null,u=!1,d=!1,c=!1,a=null,r=null,l=null;const q=({syncUrl:e,intervalMs:t}={})=>{typeof e=="string"&&(n=e),Number.isFinite(t)&&t>0&&(b=t)},f=()=>{a!==null&&(window.clearInterval(a),a=null)},g=()=>{!n||a!==null||(a=window.setInterval(()=>{document.visibilityState==="visible"&&s(!1,!1)},b))},s=(e,t)=>{o(e,t).catch(()=>{})},o=async(e,t)=>{if(!n)return{status:"disabled"};if(i)return e&&!u?(d=!0,c=c||!!t,i.catch(()=>{}).then(()=>o(!0,c))):i;u=!!e;const h=(async()=>{const y=e?n+(n.includes("?")?"&":"?")+"force=1":n,L=await S(y,{method:"POST",credentials:"same-origin",headers:{Accept:"application/json",requesttoken:k()},keepalive:!!t}),p=await L.json().catch(()=>({}));if(!L.ok)throw new Error(p&&p.message||"Sync request failed.");return p})();i=h;let E,v=null;try{E=await h}catch(y){v=y}finally{i===h&&(i=null),u=!1}const A=d,F=c;if(d=!1,c=!1,A)return o(!0,F);if(v instanceof Error)throw v;return E};return{configure:q,start:g,stop:f,sync:o,fireAndForget:s,installLifecycleHandlers:()=>{r||l||(r=()=>{if(document.visibilityState==="hidden"){s(!0,!0),f();return}g()},l=()=>{s(!0,!0),f()},document.addEventListener("visibilitychange",r),window.addEventListener("pagehide",l))},removeLifecycleHandlers:()=>{r&&(document.removeEventListener("visibilitychange",r),r=null),l&&(window.removeEventListener("pagehide",l),l=null)}}}export{H as c};
-//# sourceMappingURL=pad-sync-B0gz-oBk.chunk.mjs.map
diff --git a/js/pad-sync-B0gz-oBk.chunk.mjs.map b/js/pad-sync-B0gz-oBk.chunk.mjs.map
deleted file mode 100644
index 068fed0..0000000
--- a/js/pad-sync-B0gz-oBk.chunk.mjs.map
+++ /dev/null
@@ -1 +0,0 @@
-{"version":3,"file":"pad-sync-B0gz-oBk.chunk.mjs","sources":["../src/lib/pad-sync.js"],"sourcesContent":["/**\n * SPDX-License-Identifier: AGPL-3.0-or-later\n * Copyright (c) 2026 Jacob Bühler\n */\n\n/**\n * Shared pad-sync loop for the viewer and embed entrypoints.\n *\n * Owns the periodic background sync, forced/keepalive flushes, and the\n * visibility/pagehide lifecycle wiring. Forced syncs coalesce: while one\n * request is in flight a second forced flush is not started concurrently but\n * remembered and replayed once, so two forced flushes can never overlap (this\n * is the embed behavior, now shared — the viewer previously used a plain\n * in-flight boolean that allowed overlap).\n *\n * The caller supplies the request-token getter (the viewer and embed read it\n * from different places) and may inject a `fetchImpl` for tests.\n */\n\nexport const DEFAULT_SYNC_INTERVAL_MS = 120000\n\nexport function createPadSync({ requestToken, fetchImpl } = {}) {\n\tconst doFetch = typeof fetchImpl === 'function' ? fetchImpl : (...args) => window.fetch(...args)\n\tconst getToken = typeof requestToken === 'function' ? requestToken : () => ''\n\n\tlet syncUrl = ''\n\tlet intervalMs = DEFAULT_SYNC_INTERVAL_MS\n\tlet syncPromise = null\n\tlet activeSyncForce = false\n\tlet pendingForcedSync = false\n\tlet pendingForcedKeepalive = false\n\tlet timerId = null\n\tlet visibilityHandler = null\n\tlet pageHideHandler = null\n\n\tconst configure = ({ syncUrl: url, intervalMs: ms } = {}) => {\n\t\tif (typeof url === 'string') {\n\t\t\tsyncUrl = url\n\t\t}\n\t\tif (Number.isFinite(ms) && ms > 0) {\n\t\t\tintervalMs = ms\n\t\t}\n\t}\n\n\tconst stop = () => {\n\t\tif (timerId !== null) {\n\t\t\twindow.clearInterval(timerId)\n\t\t\ttimerId = null\n\t\t}\n\t}\n\n\tconst start = () => {\n\t\tif (!syncUrl || timerId !== null) {\n\t\t\treturn\n\t\t}\n\t\ttimerId = window.setInterval(() => {\n\t\t\tif (document.visibilityState === 'visible') {\n\t\t\t\tfireAndForget(false, false)\n\t\t\t}\n\t\t}, intervalMs)\n\t}\n\n\tconst fireAndForget = (force, keepalive) => {\n\t\tvoid sync(force, keepalive).catch(() => {})\n\t}\n\n\tconst sync = async (force, keepalive) => {\n\t\tif (!syncUrl) {\n\t\t\treturn { status: 'disabled' }\n\t\t}\n\t\tif (syncPromise) {\n\t\t\t// A request is already running. A forced flush that arrives while a\n\t\t\t// non-forced sync is in flight is coalesced into a single replay.\n\t\t\tif (force && !activeSyncForce) {\n\t\t\t\tpendingForcedSync = true\n\t\t\t\tpendingForcedKeepalive = pendingForcedKeepalive || Boolean(keepalive)\n\t\t\t\treturn syncPromise.catch(() => undefined).then(() => sync(true, pendingForcedKeepalive))\n\t\t\t}\n\t\t\treturn syncPromise\n\t\t}\n\t\tactiveSyncForce = Boolean(force)\n\t\tconst currentPromise = (async () => {\n\t\t\tconst url = force ? (syncUrl + (syncUrl.includes('?') ? '&' : '?') + 'force=1') : syncUrl\n\t\t\tconst response = await doFetch(url, {\n\t\t\t\tmethod: 'POST',\n\t\t\t\tcredentials: 'same-origin',\n\t\t\t\theaders: {\n\t\t\t\t\tAccept: 'application/json',\n\t\t\t\t\trequesttoken: getToken(),\n\t\t\t\t},\n\t\t\t\tkeepalive: Boolean(keepalive),\n\t\t\t})\n\t\t\tconst data = await response.json().catch(() => ({}))\n\t\t\tif (!response.ok) {\n\t\t\t\tthrow new Error((data && data.message) || 'Sync request failed.')\n\t\t\t}\n\t\t\treturn data\n\t\t})()\n\t\tsyncPromise = currentPromise\n\t\tlet result\n\t\tlet syncError = null\n\t\ttry {\n\t\t\tresult = await currentPromise\n\t\t} catch (error) {\n\t\t\tsyncError = error\n\t\t} finally {\n\t\t\tif (syncPromise === currentPromise) {\n\t\t\t\tsyncPromise = null\n\t\t\t}\n\t\t\tactiveSyncForce = false\n\t\t}\n\t\tconst rerunForcedSync = pendingForcedSync\n\t\tconst rerunKeepalive = pendingForcedKeepalive\n\t\tpendingForcedSync = false\n\t\tpendingForcedKeepalive = false\n\t\tif (rerunForcedSync) {\n\t\t\treturn sync(true, rerunKeepalive)\n\t\t}\n\t\tif (syncError instanceof Error) {\n\t\t\tthrow syncError\n\t\t}\n\t\treturn result\n\t}\n\n\tconst installLifecycleHandlers = () => {\n\t\tif (visibilityHandler || pageHideHandler) {\n\t\t\treturn\n\t\t}\n\t\tvisibilityHandler = () => {\n\t\t\tif (document.visibilityState === 'hidden') {\n\t\t\t\tfireAndForget(true, true)\n\t\t\t\tstop()\n\t\t\t\treturn\n\t\t\t}\n\t\t\tstart()\n\t\t}\n\t\tpageHideHandler = () => {\n\t\t\tfireAndForget(true, true)\n\t\t\tstop()\n\t\t}\n\t\tdocument.addEventListener('visibilitychange', visibilityHandler)\n\t\twindow.addEventListener('pagehide', pageHideHandler)\n\t}\n\n\tconst removeLifecycleHandlers = () => {\n\t\tif (visibilityHandler) {\n\t\t\tdocument.removeEventListener('visibilitychange', visibilityHandler)\n\t\t\tvisibilityHandler = null\n\t\t}\n\t\tif (pageHideHandler) {\n\t\t\twindow.removeEventListener('pagehide', pageHideHandler)\n\t\t\tpageHideHandler = null\n\t\t}\n\t}\n\n\treturn {\n\t\tconfigure,\n\t\tstart,\n\t\tstop,\n\t\tsync,\n\t\tfireAndForget,\n\t\tinstallLifecycleHandlers,\n\t\tremoveLifecycleHandlers,\n\t}\n}\n"],"names":["createPadSync","requestToken","fetchImpl","doFetch","args","getToken","syncUrl","intervalMs","syncPromise","activeSyncForce","pendingForcedSync","pendingForcedKeepalive","timerId","visibilityHandler","pageHideHandler","configure","url","ms","stop","start","fireAndForget","force","keepalive","sync","currentPromise","response","data","result","syncError","error","rerunForcedSync","rerunKeepalive"],"mappings":"AAqBO,SAASA,EAAc,CAAE,aAAAC,EAAc,UAAAC,CAAS,EAAK,CAAA,EAAI,CAC/D,MAAMC,EAAU,OAAOD,GAAc,WAAaA,EAAY,IAAIE,IAAS,OAAO,MAAM,GAAGA,CAAI,EACzFC,EAAW,OAAOJ,GAAiB,WAAaA,EAAe,IAAM,GAE3E,IAAIK,EAAU,GACVC,EAAa,KACbC,EAAc,KACdC,EAAkB,GAClBC,EAAoB,GACpBC,EAAyB,GACzBC,EAAU,KACVC,EAAoB,KACpBC,EAAkB,KAEtB,MAAMC,EAAY,CAAC,CAAE,QAASC,EAAK,WAAYC,CAAE,EAAK,KAAO,CACxD,OAAOD,GAAQ,WAClBV,EAAUU,GAEP,OAAO,SAASC,CAAE,GAAKA,EAAK,IAC/BV,EAAaU,EAEf,EAEMC,EAAO,IAAM,CACdN,IAAY,OACf,OAAO,cAAcA,CAAO,EAC5BA,EAAU,KAEZ,EAEMO,EAAQ,IAAM,CACf,CAACb,GAAWM,IAAY,OAG5BA,EAAU,OAAO,YAAY,IAAM,CAC9B,SAAS,kBAAoB,WAChCQ,EAAc,GAAO,EAAK,CAE5B,EAAGb,CAAU,EACd,EAEMa,EAAgB,CAACC,EAAOC,IAAc,CACtCC,EAAKF,EAAOC,CAAS,EAAE,MAAM,IAAM,CAAC,CAAC,CAC3C,EAEMC,EAAO,MAAOF,EAAOC,IAAc,CACxC,GAAI,CAAChB,EACJ,MAAO,CAAE,OAAQ,UAAU,EAE5B,GAAIE,EAGH,OAAIa,GAAS,CAACZ,GACbC,EAAoB,GACpBC,EAAyBA,GAA0B,CAAA,CAAQW,EACpDd,EAAY,MAAM,MAAe,EAAE,KAAK,IAAMe,EAAK,GAAMZ,CAAsB,CAAC,GAEjFH,EAERC,EAAkB,EAAQY,EAC1B,MAAMG,GAAkB,SAAY,CACnC,MAAMR,EAAMK,EAASf,GAAWA,EAAQ,SAAS,GAAG,EAAI,IAAM,KAAO,UAAaA,EAC5EmB,EAAW,MAAMtB,EAAQa,EAAK,CACnC,OAAQ,OACR,YAAa,cACb,QAAS,CACR,OAAQ,mBACR,aAAcX,EAAQ,CAC3B,EACI,UAAW,CAAA,CAAQiB,CACvB,CAAI,EACKI,EAAO,MAAMD,EAAS,KAAI,EAAG,MAAM,KAAO,GAAG,EACnD,GAAI,CAACA,EAAS,GACb,MAAM,IAAI,MAAOC,GAAQA,EAAK,SAAY,sBAAsB,EAEjE,OAAOA,CACR,GAAC,EACDlB,EAAcgB,EACd,IAAIG,EACAC,EAAY,KAChB,GAAI,CACHD,EAAS,MAAMH,CAChB,OAASK,EAAO,CACfD,EAAYC,CACb,QAAA,CACKrB,IAAgBgB,IACnBhB,EAAc,MAEfC,EAAkB,EACnB,CACA,MAAMqB,EAAkBpB,EAClBqB,EAAiBpB,EAGvB,GAFAD,EAAoB,GACpBC,EAAyB,GACrBmB,EACH,OAAOP,EAAK,GAAMQ,CAAc,EAEjC,GAAIH,aAAqB,MACxB,MAAMA,EAEP,OAAOD,CACR,EAiCA,MAAO,CACN,UAAAZ,EACA,MAAAI,EACA,KAAAD,EACA,KAAAK,EACA,cAAAH,EACA,yBArCgC,IAAM,CAClCP,GAAqBC,IAGzBD,EAAoB,IAAM,CACzB,GAAI,SAAS,kBAAoB,SAAU,CAC1CO,EAAc,GAAM,EAAI,EACxBF,EAAI,EACJ,MACD,CACAC,EAAK,CACN,EACAL,EAAkB,IAAM,CACvBM,EAAc,GAAM,EAAI,EACxBF,EAAI,CACL,EACA,SAAS,iBAAiB,mBAAoBL,CAAiB,EAC/D,OAAO,iBAAiB,WAAYC,CAAe,EACpD,EAoBC,wBAlB+B,IAAM,CACjCD,IACH,SAAS,oBAAoB,mBAAoBA,CAAiB,EAClEA,EAAoB,MAEjBC,IACH,OAAO,oBAAoB,WAAYA,CAAe,EACtDA,EAAkB,KAEpB,CAUD,CACA"}
\ No newline at end of file
diff --git a/js/sanitize-html-dv-YifbT.chunk.mjs b/js/sanitize-html-dv-YifbT.chunk.mjs
new file mode 100644
index 0000000..8e6f171
--- /dev/null
+++ b/js/sanitize-html-dv-YifbT.chunk.mjs
@@ -0,0 +1,4 @@
+function Pn({requestToken:n,fetchImpl:r}={}){const i=typeof r=="function"?r:(...v)=>window.fetch(...v),a=typeof n=="function"?n:()=>"";let s="",f=12e4,E=null,W=!1,S=!1,B=!1,Y=null,x=null,C=null;const Pt=({syncUrl:v,intervalMs:F}={})=>{typeof v=="string"&&(s=v),Number.isFinite(F)&&F>0&&(f=F)},ht=()=>{Y!==null&&(window.clearInterval(Y),Y=null)},_t=()=>{!s||Y!==null||(Y=window.setInterval(()=>{document.visibilityState==="visible"&&q(!1,!1)},f))},q=(v,F)=>{X(v,F).catch(()=>{})},X=async(v,F)=>{if(!s)return{status:"disabled"};if(E)return v&&!W?(S=!0,B=B||!!F,E.catch(()=>{}).then(()=>X(!0,B))):E;W=!!v;const D=(async()=>{const U=v?s+(s.includes("?")?"&":"?")+"force=1":s,Z=await i(U,{method:"POST",credentials:"same-origin",headers:{Accept:"application/json",requesttoken:a()},keepalive:!!F}),J=await Z.json().catch(()=>({}));if(!Z.ok)throw new Error(J&&J.message||"Sync request failed.");return J})();E=D;let M,N=null;try{M=await D}catch(U){N=U}finally{E===D&&(E=null),W=!1}const Q=S,gt=B;if(S=!1,B=!1,Q)return X(!0,gt);if(N instanceof Error)throw N;return M};return{configure:Pt,start:_t,stop:ht,sync:X,fireAndForget:q,installLifecycleHandlers:()=>{x||C||(x=()=>{if(document.visibilityState==="hidden"){q(!0,!0),ht();return}_t()},C=()=>{q(!0,!0),ht()},document.addEventListener("visibilitychange",x),window.addEventListener("pagehide",C))},removeLifecycleHandlers:()=>{x&&(document.removeEventListener("visibilitychange",x),x=null),C&&(window.removeEventListener("pagehide",C),C=null)}}}function we(n,r){(r==null||r>n.length)&&(r=n.length);for(var i=0,a=Array(r);i<r;i++)a[i]=n[i];return a}function on(n){if(Array.isArray(n))return n}function rn(n,r){var i=n==null?null:typeof Symbol<"u"&&n[Symbol.iterator]||n["@@iterator"];if(i!=null){var a,s,f,E,W=[],S=!0,B=!1;try{if(f=(i=i.call(n)).next,r!==0)for(;!(S=(a=f.call(i)).done)&&(W.push(a.value),W.length!==r);S=!0);}catch(Y){B=!0,s=Y}finally{try{if(!S&&i.return!=null&&(E=i.return(),Object(E)!==E))return}finally{if(B)throw s}}return W}}function an(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
+In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function ln(n,r){return on(n)||rn(n,r)||cn(n,r)||an()}function cn(n,r){if(n){if(typeof n=="string")return we(n,r);var i={}.toString.call(n).slice(8,-1);return i==="Object"&&n.constructor&&(i=n.constructor.name),i==="Map"||i==="Set"?Array.from(n):i==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(i)?we(n,r):void 0}}const ze=Object.entries,ve=Object.setPrototypeOf,sn=Object.isFrozen,un=Object.getPrototypeOf,mn=Object.getOwnPropertyDescriptor;let I=Object.freeze,L=Object.seal,dt=Object.create,He=typeof Reflect<"u"&&Reflect,ne=He.apply,oe=He.construct;I||(I=function(n){return n}),L||(L=function(n){return n}),ne||(ne=function(n,r){for(var i=arguments.length,a=new Array(i>2?i-2:0),s=2;s<i;s++)a[s-2]=arguments[s];return n.apply(r,a)}),oe||(oe=function(n){for(var r=arguments.length,i=new Array(r>1?r-1:0),a=1;a<r;a++)i[a-1]=arguments[a];return new n(...i)});const ot=T(Array.prototype.forEach),fn=T(Array.prototype.lastIndexOf),De=T(Array.prototype.pop),mt=T(Array.prototype.push),pn=T(Array.prototype.splice),R=Array.isArray,St=T(String.prototype.toLowerCase),Qt=T(String.prototype.toString),Re=T(String.prototype.match),ft=T(String.prototype.replace),Ie=T(String.prototype.indexOf),dn=T(String.prototype.trim),hn=T(Number.prototype.toString),gn=T(Boolean.prototype.toString),Ce=typeof BigInt>"u"?null:T(BigInt.prototype.toString),ke=typeof Symbol>"u"?null:T(Symbol.prototype.toString),p=T(Object.prototype.hasOwnProperty),Et=T(Object.prototype.toString),_=T(RegExp.prototype.test),pt=yn(TypeError);function T(n){return function(r){r instanceof RegExp&&(r.lastIndex=0);for(var i=arguments.length,a=new Array(i>1?i-1:0),s=1;s<i;s++)a[s-1]=arguments[s];return ne(n,r,a)}}function yn(n){return function(){for(var r=arguments.length,i=new Array(r),a=0;a<r;a++)i[a]=arguments[a];return oe(n,i)}}function c(n,r){let i=arguments.length>2&&arguments[2]!==void 0?arguments[2]:St;if(ve&&ve(n,null),!R(r))return n;let a=r.length;for(;a--;){let s=r[a];if(typeof s=="string"){const f=i(s);f!==s&&(sn(r)||(r[a]=f),s=f)}n[s]=!0}return n}function Tn(n){for(let r=0;r<n.length;r++)p(n,r)||(n[r]=null);return n}function w(n){const r=dt(null);for(const a of ze(n)){var i=ln(a,2);const s=i[0],f=i[1];p(n,s)&&(R(f)?r[s]=Tn(f):f&&typeof f=="object"&&f.constructor===Object?r[s]=w(f):r[s]=f)}return r}function bn(n){switch(typeof n){case"string":return n;case"number":return hn(n);case"boolean":return gn(n);case"bigint":return Ce?Ce(n):"0";case"symbol":return ke?ke(n):"Symbol()";case"undefined":return Et(n);case"function":case"object":{if(n===null)return Et(n);const r=n,i=G(r,"toString");if(typeof i=="function"){const a=i(r);return typeof a=="string"?a:Et(a)}return Et(n)}default:return Et(n)}}function G(n,r){for(;n!==null;){const a=mn(n,r);if(a){if(a.get)return T(a.get);if(typeof a.value=="function")return T(a.value)}n=un(n)}function i(){return null}return i}function An(n){try{return _(n,""),!0}catch{return!1}}const Le=I(["a","abbr","acronym","address","area","article","aside","audio","b","bdi","bdo","big","blink","blockquote","body","br","button","canvas","caption","center","cite","code","col","colgroup","content","data","datalist","dd","decorator","del","details","dfn","dialog","dir","div","dl","dt","element","em","fieldset","figcaption","figure","font","footer","form","h1","h2","h3","h4","h5","h6","head","header","hgroup","hr","html","i","img","input","ins","kbd","label","legend","li","main","map","mark","marquee","menu","menuitem","meter","nav","nobr","ol","optgroup","option","output","p","picture","pre","progress","q","rp","rt","ruby","s","samp","search","section","select","shadow","slot","small","source","spacer","span","strike","strong","style","sub","summary","sup","table","tbody","td","template","textarea","tfoot","th","thead","time","tr","track","tt","u","ul","var","video","wbr"]),Zt=I(["svg","a","altglyph","altglyphdef","altglyphitem","animatecolor","animatemotion","animatetransform","circle","clippath","defs","desc","ellipse","enterkeyhint","exportparts","filter","font","g","glyph","glyphref","hkern","image","inputmode","line","lineargradient","marker","mask","metadata","mpath","part","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),Jt=I(["feBlend","feColorMatrix","feComponentTransfer","feComposite","feConvolveMatrix","feDiffuseLighting","feDisplacementMap","feDistantLight","feDropShadow","feFlood","feFuncA","feFuncB","feFuncG","feFuncR","feGaussianBlur","feImage","feMerge","feMergeNode","feMorphology","feOffset","fePointLight","feSpecularLighting","feSpotLight","feTile","feTurbulence"]),En=I(["animate","color-profile","cursor","discard","font-face","font-face-format","font-face-name","font-face-src","font-face-uri","foreignobject","hatch","hatchpath","mesh","meshgradient","meshpatch","meshrow","missing-glyph","script","set","solidcolor","unknown","use"]),te=I(["math","menclose","merror","mfenced","mfrac","mglyph","mi","mlabeledtr","mmultiscripts","mn","mo","mover","mpadded","mphantom","mroot","mrow","ms","mspace","msqrt","mstyle","msub","msup","msubsup","mtable","mtd","mtext","mtr","munder","munderover","mprescripts"]),Sn=I(["maction","maligngroup","malignmark","mlongdiv","mscarries","mscarry","msgroup","mstack","msline","msrow","semantics","annotation","annotation-xml","mprescripts","none"]),xe=I(["#text"]),Me=I(["accept","action","align","alt","autocapitalize","autocomplete","autopictureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","command","commandfor","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","disablepictureinpicture","disableremoteplayback","download","draggable","enctype","enterkeyhint","exportparts","face","for","headers","height","hidden","high","href","hreflang","id","inert","inputmode","integrity","ismap","kind","label","lang","list","loading","loop","low","max","maxlength","media","method","min","minlength","multiple","muted","name","nonce","noshade","novalidate","nowrap","open","optimum","part","pattern","placeholder","playsinline","popover","popovertarget","popovertargetaction","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","slot","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","wrap","xmlns"]),ee=I(["accent-height","accumulate","additive","alignment-baseline","amplitude","ascent","attributename","attributetype","azimuth","basefrequency","baseline-shift","begin","bias","by","class","clip","clippathunits","clip-path","clip-rule","color","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dur","edgemode","elevation","end","exponent","fill","fill-opacity","fill-rule","filter","filterunits","flood-color","flood-opacity","font-family","font-size","font-size-adjust","font-stretch","font-style","font-variant","font-weight","fx","fy","g1","g2","glyph-name","glyphref","gradientunits","gradienttransform","height","href","id","image-rendering","in","in2","intercept","k","k1","k2","k3","k4","kerning","keypoints","keysplines","keytimes","lang","lengthadjust","letter-spacing","kernelmatrix","kernelunitlength","lighting-color","local","marker-end","marker-mid","marker-start","markerheight","markerunits","markerwidth","maskcontentunits","maskunits","max","mask","mask-type","media","method","mode","min","name","numoctaves","offset","operator","opacity","order","orient","orientation","origin","overflow","paint-order","path","pathlength","patterncontentunits","patterntransform","patternunits","points","preservealpha","preserveaspectratio","primitiveunits","r","rx","ry","radius","refx","refy","repeatcount","repeatdur","restart","result","rotate","scale","seed","shape-rendering","slope","specularconstant","specularexponent","spreadmethod","startoffset","stddeviation","stitchtiles","stop-color","stop-opacity","stroke-dasharray","stroke-dashoffset","stroke-linecap","stroke-linejoin","stroke-miterlimit","stroke-opacity","stroke","stroke-width","style","surfacescale","systemlanguage","tabindex","tablevalues","targetx","targety","transform","transform-origin","text-anchor","text-decoration","text-rendering","textlength","type","u1","u2","unicode","values","viewbox","visibility","version","vert-adv-y","vert-origin-x","vert-origin-y","width","word-spacing","wrap","writing-mode","xchannelselector","ychannelselector","x","x1","x2","xmlns","y","y1","y2","z","zoomandpan"]),Pe=I(["accent","accentunder","align","bevelled","close","columnalign","columnlines","columnspacing","columnspan","denomalign","depth","dir","display","displaystyle","encoding","fence","frame","height","href","id","largeop","length","linethickness","lquote","lspace","mathbackground","mathcolor","mathsize","mathvariant","maxsize","minsize","movablelimits","notation","numalign","open","rowalign","rowlines","rowspacing","rowspan","rspace","rquote","scriptlevel","scriptminsize","scriptsizemultiplier","selection","separator","separators","stretchy","subscriptshift","supscriptshift","symmetric","voffset","width","xmlns"]),Mt=I(["xlink:href","xml:id","xlink:title","xml:space","xmlns:xlink"]),_n=L(/{{[\w\W]*|^[\w\W]*}}/g),Nn=L(/<%[\w\W]*|^[\w\W]*%>/g),On=L(/\${[\w\W]*/g),wn=L(/^data-[\-\w.\u00B7-\uFFFF]+$/),vn=L(/^aria-[\-\w]+$/),Fe=L(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|matrix):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i),Dn=L(/^(?:\w+script|data):/i),Rn=L(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g),In=L(/^html$/i),Cn=L(/^[a-z][.\w]*(-[.\w]+)+$/i),j={element:1,attribute:2,text:3,cdataSection:4,entityReference:5,entityNode:6,progressingInstruction:7,comment:8,document:9,documentType:10,documentFragment:11,notation:12},kn=function(){return typeof window>"u"?null:window},Ln=function(n,r){if(typeof n!="object"||typeof n.createPolicy!="function")return null;let i=null;const a="data-tt-policy-suffix";r&&r.hasAttribute(a)&&(i=r.getAttribute(a));const s="dompurify"+(i?"#"+i:"");try{return n.createPolicy(s,{createHTML(f){return f},createScriptURL(f){return f}})}catch{return console.warn("TrustedTypes policy "+s+" could not be created."),null}},Ue=function(){return{afterSanitizeAttributes:[],afterSanitizeElements:[],afterSanitizeShadowDOM:[],beforeSanitizeAttributes:[],beforeSanitizeElements:[],beforeSanitizeShadowDOM:[],uponSanitizeAttribute:[],uponSanitizeElement:[],uponSanitizeShadowNode:[]}};function je(){let n=arguments.length>0&&arguments[0]!==void 0?arguments[0]:kn();const r=t=>je(t);if(r.version="3.4.8",r.removed=[],!n||!n.document||n.document.nodeType!==j.document||!n.Element)return r.isSupported=!1,r;let i=n.document;const a=i,s=a.currentScript;n.DocumentFragment;const f=n.HTMLTemplateElement,E=n.Node,W=n.Element,S=n.NodeFilter;n.NamedNodeMap===void 0&&(n.NamedNodeMap||n.MozNamedAttrMap),n.HTMLFormElement;const Y=n.DOMParser,x=n.trustedTypes,C=W.prototype,Pt=G(C,"cloneNode"),ht=G(C,"remove"),_t=G(C,"nextSibling"),q=G(C,"childNodes"),X=G(C,"parentNode"),v=G(C,"shadowRoot"),F=G(C,"attributes"),D=E&&E.prototype?G(E.prototype,"nodeType"):null,M=E&&E.prototype?G(E.prototype,"nodeName"):null;if(typeof f=="function"){const t=i.createElement("template");t.content&&t.content.ownerDocument&&(i=t.content.ownerDocument)}let N,Q="",gt=0;const U=function(t){if(gt>0)throw pt('The configured TRUSTED_TYPES_POLICY.createHTML must not call DOMPurify.sanitize, as that causes infinite recursion. Do not pass a policy whose createHTML wraps DOMPurify as TRUSTED_TYPES_POLICY; see the "DOMPurify and Trusted Types" section of the README.');gt++;try{return N.createHTML(t)}finally{gt--}},Z=i,J=Z.implementation,re=Z.createNodeIterator,Ge=Z.createDocumentFragment,We=Z.getElementsByTagName,Be=a.importNode;let b=Ue();r.isSupported=typeof ze=="function"&&typeof X=="function"&&J&&J.createHTMLDocument!==void 0;const Nt=_n,Ot=Nn,wt=On,Ye=wn,qe=vn,Xe=Dn,ie=Rn,$e=Cn;let ae=Fe,d=null;const Ft=c({},[...Le,...Zt,...Jt,...te,...xe]);let y=null;const Ut=c({},[...Me,...ee,...Pe,...Mt]);let h=Object.seal(dt(null,{tagNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},allowCustomizedBuiltInElements:{writable:!0,configurable:!1,enumerable:!0,value:!1}})),yt=null,vt=null;const K=Object.seal(dt(null,{tagCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeCheck:{writable:!0,configurable:!1,enumerable:!0,value:null}}));let le=!0,zt=!0,ce=!1,se=!0,V=!1,Tt=!0,tt=!1,Ht=!1,jt=!1,rt=!1,Dt=!1,Rt=!1,ue=!0,me=!1;const fe="user-content-";let Gt=!0,bt=!1,it={},z=null;const Wt=c({},["annotation-xml","audio","colgroup","desc","foreignobject","head","iframe","math","mi","mn","mo","ms","mtext","noembed","noframes","noscript","plaintext","script","style","svg","template","thead","title","video","xmp"]);let pe=null;const de=c({},["audio","video","img","source","image","track"]);let Bt=null;const he=c({},["alt","class","for","id","label","name","pattern","placeholder","role","summary","title","value","style","xmlns"]),It="http://www.w3.org/1998/Math/MathML",Ct="http://www.w3.org/2000/svg",H="http://www.w3.org/1999/xhtml";let at=H,Yt=!1,qt=null;const Ke=c({},[It,Ct,H],Qt);let Xt=c({},["mi","mo","mn","ms","mtext"]),$t=c({},["annotation-xml"]);const Ve=c({},["title","style","font","a","script"]);let At=null;const Qe=["application/xhtml+xml","text/html"],Ze="text/html";let g=null,lt=null;const Je=i.createElement("form"),ge=function(t){return t instanceof RegExp||t instanceof Function},Kt=function(){let t=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};if(lt&&lt===t)return;(!t||typeof t!="object")&&(t={}),t=w(t),At=Qe.indexOf(t.PARSER_MEDIA_TYPE)===-1?Ze:t.PARSER_MEDIA_TYPE,g=At==="application/xhtml+xml"?Qt:St,d=p(t,"ALLOWED_TAGS")&&R(t.ALLOWED_TAGS)?c({},t.ALLOWED_TAGS,g):Ft,y=p(t,"ALLOWED_ATTR")&&R(t.ALLOWED_ATTR)?c({},t.ALLOWED_ATTR,g):Ut,qt=p(t,"ALLOWED_NAMESPACES")&&R(t.ALLOWED_NAMESPACES)?c({},t.ALLOWED_NAMESPACES,Qt):Ke,Bt=p(t,"ADD_URI_SAFE_ATTR")&&R(t.ADD_URI_SAFE_ATTR)?c(w(he),t.ADD_URI_SAFE_ATTR,g):he,pe=p(t,"ADD_DATA_URI_TAGS")&&R(t.ADD_DATA_URI_TAGS)?c(w(de),t.ADD_DATA_URI_TAGS,g):de,z=p(t,"FORBID_CONTENTS")&&R(t.FORBID_CONTENTS)?c({},t.FORBID_CONTENTS,g):Wt,yt=p(t,"FORBID_TAGS")&&R(t.FORBID_TAGS)?c({},t.FORBID_TAGS,g):w({}),vt=p(t,"FORBID_ATTR")&&R(t.FORBID_ATTR)?c({},t.FORBID_ATTR,g):w({}),it=p(t,"USE_PROFILES")?t.USE_PROFILES&&typeof t.USE_PROFILES=="object"?w(t.USE_PROFILES):t.USE_PROFILES:!1,le=t.ALLOW_ARIA_ATTR!==!1,zt=t.ALLOW_DATA_ATTR!==!1,ce=t.ALLOW_UNKNOWN_PROTOCOLS||!1,se=t.ALLOW_SELF_CLOSE_IN_ATTR!==!1,V=t.SAFE_FOR_TEMPLATES||!1,Tt=t.SAFE_FOR_XML!==!1,tt=t.WHOLE_DOCUMENT||!1,rt=t.RETURN_DOM||!1,Dt=t.RETURN_DOM_FRAGMENT||!1,Rt=t.RETURN_TRUSTED_TYPE||!1,jt=t.FORCE_BODY||!1,ue=t.SANITIZE_DOM!==!1,me=t.SANITIZE_NAMED_PROPS||!1,Gt=t.KEEP_CONTENT!==!1,bt=t.IN_PLACE||!1,ae=An(t.ALLOWED_URI_REGEXP)?t.ALLOWED_URI_REGEXP:Fe,at=typeof t.NAMESPACE=="string"?t.NAMESPACE:H,Xt=p(t,"MATHML_TEXT_INTEGRATION_POINTS")&&t.MATHML_TEXT_INTEGRATION_POINTS&&typeof t.MATHML_TEXT_INTEGRATION_POINTS=="object"?w(t.MATHML_TEXT_INTEGRATION_POINTS):c({},["mi","mo","mn","ms","mtext"]),$t=p(t,"HTML_INTEGRATION_POINTS")&&t.HTML_INTEGRATION_POINTS&&typeof t.HTML_INTEGRATION_POINTS=="object"?w(t.HTML_INTEGRATION_POINTS):c({},["annotation-xml"]);const e=p(t,"CUSTOM_ELEMENT_HANDLING")&&t.CUSTOM_ELEMENT_HANDLING&&typeof t.CUSTOM_ELEMENT_HANDLING=="object"?w(t.CUSTOM_ELEMENT_HANDLING):dt(null);if(h=dt(null),p(e,"tagNameCheck")&&ge(e.tagNameCheck)&&(h.tagNameCheck=e.tagNameCheck),p(e,"attributeNameCheck")&&ge(e.attributeNameCheck)&&(h.attributeNameCheck=e.attributeNameCheck),p(e,"allowCustomizedBuiltInElements")&&typeof e.allowCustomizedBuiltInElements=="boolean"&&(h.allowCustomizedBuiltInElements=e.allowCustomizedBuiltInElements),V&&(zt=!1),Dt&&(rt=!0),it&&(d=c({},xe),y=dt(null),it.html===!0&&(c(d,Le),c(y,Me)),it.svg===!0&&(c(d,Zt),c(y,ee),c(y,Mt)),it.svgFilters===!0&&(c(d,Jt),c(y,ee),c(y,Mt)),it.mathMl===!0&&(c(d,te),c(y,Pe),c(y,Mt))),K.tagCheck=null,K.attributeCheck=null,p(t,"ADD_TAGS")&&(typeof t.ADD_TAGS=="function"?K.tagCheck=t.ADD_TAGS:R(t.ADD_TAGS)&&(d===Ft&&(d=w(d)),c(d,t.ADD_TAGS,g))),p(t,"ADD_ATTR")&&(typeof t.ADD_ATTR=="function"?K.attributeCheck=t.ADD_ATTR:R(t.ADD_ATTR)&&(y===Ut&&(y=w(y)),c(y,t.ADD_ATTR,g))),p(t,"ADD_URI_SAFE_ATTR")&&R(t.ADD_URI_SAFE_ATTR)&&c(Bt,t.ADD_URI_SAFE_ATTR,g),p(t,"FORBID_CONTENTS")&&R(t.FORBID_CONTENTS)&&(z===Wt&&(z=w(z)),c(z,t.FORBID_CONTENTS,g)),p(t,"ADD_FORBID_CONTENTS")&&R(t.ADD_FORBID_CONTENTS)&&(z===Wt&&(z=w(z)),c(z,t.ADD_FORBID_CONTENTS,g)),Gt&&(d["#text"]=!0),tt&&c(d,["html","head","body"]),d.table&&(c(d,["tbody"]),delete yt.tbody),t.TRUSTED_TYPES_POLICY){if(typeof t.TRUSTED_TYPES_POLICY.createHTML!="function")throw pt('TRUSTED_TYPES_POLICY configuration option must provide a "createHTML" hook.');if(typeof t.TRUSTED_TYPES_POLICY.createScriptURL!="function")throw pt('TRUSTED_TYPES_POLICY configuration option must provide a "createScriptURL" hook.');const o=N;N=t.TRUSTED_TYPES_POLICY;try{Q=U("")}catch(l){throw N=o,l}}else N===void 0&&t.TRUSTED_TYPES_POLICY!==null&&(N=Ln(x,s)),N&&typeof Q=="string"&&(Q=U(""));(b.uponSanitizeElement.length>0||b.uponSanitizeAttribute.length>0)&&d===Ft&&(d=w(d)),b.uponSanitizeAttribute.length>0&&y===Ut&&(y=w(y)),I&&I(t),lt=t},ye=c({},[...Zt,...Jt,...En]),Te=c({},[...te,...Sn]),tn=function(t){let e=X(t);(!e||!e.tagName)&&(e={namespaceURI:at,tagName:"template"});const o=St(t.tagName),l=St(e.tagName);return qt[t.namespaceURI]?t.namespaceURI===Ct?e.namespaceURI===H?o==="svg":e.namespaceURI===It?o==="svg"&&(l==="annotation-xml"||Xt[l]):!!ye[o]:t.namespaceURI===It?e.namespaceURI===H?o==="math":e.namespaceURI===Ct?o==="math"&&$t[l]:!!Te[o]:t.namespaceURI===H?e.namespaceURI===Ct&&!$t[l]||e.namespaceURI===It&&!Xt[l]?!1:!Te[o]&&(Ve[o]||!ye[o]):!!(At==="application/xhtml+xml"&&qt[t.namespaceURI]):!1},et=function(t){mt(r.removed,{element:t});try{X(t).removeChild(t)}catch{ht(t)}},nt=function(t,e){try{mt(r.removed,{attribute:e.getAttributeNode(t),from:e})}catch{mt(r.removed,{attribute:null,from:e})}if(e.removeAttribute(t),t==="is")if(rt||Dt)try{et(e)}catch{}else try{e.setAttribute(t,"")}catch{}},be=function(t){let e=null,o=null;if(jt)t="<remove></remove>"+t;else{const m=Re(t,/^[\r\n\t ]+/);o=m&&m[0]}At==="application/xhtml+xml"&&at===H&&(t='<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>'+t+"</body></html>");const l=N?U(t):t;if(at===H)try{e=new Y().parseFromString(l,At)}catch{}if(!e||!e.documentElement){e=J.createDocument(at,"template",null);try{e.documentElement.innerHTML=Yt?Q:l}catch{}}const u=e.body||e.documentElement;return t&&o&&u.insertBefore(i.createTextNode(o),u.childNodes[0]||null),at===H?We.call(e,tt?"html":"body")[0]:tt?e.documentElement:u},Ae=function(t){return re.call(t.ownerDocument||t,t,S.SHOW_ELEMENT|S.SHOW_COMMENT|S.SHOW_TEXT|S.SHOW_PROCESSING_INSTRUCTION|S.SHOW_CDATA_SECTION,null)},Vt=function(t){var e,o;t.normalize();const l=re.call(t.ownerDocument||t,t,S.SHOW_TEXT|S.SHOW_COMMENT|S.SHOW_CDATA_SECTION|S.SHOW_PROCESSING_INSTRUCTION,null);let u=l.nextNode();for(;u;){let O=u.data;ot([Nt,Ot,wt],k=>{O=ft(O,k," ")}),u.data=O,u=l.nextNode()}const m=(e=(o=t.querySelectorAll)===null||o===void 0?void 0:o.call(t,"template"))!==null&&e!==void 0?e:[];ot(Array.from(m),O=>{ct(O.content)&&Vt(O.content)})},kt=function(t){const e=M?M(t):null;return typeof e!="string"||g(e)!=="form"?!1:typeof t.nodeName!="string"||typeof t.textContent!="string"||typeof t.removeChild!="function"||t.attributes!==F(t)||typeof t.removeAttribute!="function"||typeof t.setAttribute!="function"||typeof t.namespaceURI!="string"||typeof t.insertBefore!="function"||typeof t.hasChildNodes!="function"||t.nodeType!==D(t)||t.childNodes!==q(t)},ct=function(t){if(!D||typeof t!="object"||t===null)return!1;try{return D(t)===j.documentFragment}catch{return!1}},Lt=function(t){if(!D||typeof t!="object"||t===null)return!1;try{return typeof D(t)=="number"}catch{return!1}};function $(t,e,o){ot(t,l=>{l.call(r,e,o,lt)})}const Ee=function(t){let e=null;if($(b.beforeSanitizeElements,t,null),kt(t))return et(t),!0;const o=g(M?M(t):t.nodeName);if($(b.uponSanitizeElement,t,{tagName:o,allowedTags:d}),Tt&&t.hasChildNodes()&&!Lt(t.firstElementChild)&&_(/<[/\w!]/g,t.innerHTML)&&_(/<[/\w!]/g,t.textContent)||Tt&&t.namespaceURI===H&&o==="style"&&Lt(t.firstElementChild)||t.nodeType===j.progressingInstruction||Tt&&t.nodeType===j.comment&&_(/<[/\w]/g,t.data))return et(t),!0;if(yt[o]||!(K.tagCheck instanceof Function&&K.tagCheck(o))&&!d[o]){if(!yt[o]&&_e(o)&&(h.tagNameCheck instanceof RegExp&&_(h.tagNameCheck,o)||h.tagNameCheck instanceof Function&&h.tagNameCheck(o)))return!1;if(Gt&&!z[o]){const l=X(t),u=q(t);if(u&&l){const m=u.length;for(let O=m-1;O>=0;--O){const k=Pt(u[O],!0);l.insertBefore(k,_t(t))}}}return et(t),!0}return(D?D(t):t.nodeType)===j.element&&!tn(t)||(o==="noscript"||o==="noembed"||o==="noframes")&&_(/<\/no(script|embed|frames)/i,t.innerHTML)?(et(t),!0):(V&&t.nodeType===j.text&&(e=t.textContent,ot([Nt,Ot,wt],l=>{e=ft(e,l," ")}),t.textContent!==e&&(mt(r.removed,{element:t.cloneNode()}),t.textContent=e)),$(b.afterSanitizeElements,t,null),!1)},Se=function(t,e,o){if(vt[e]||ue&&(e==="id"||e==="name")&&(o in i||o in Je))return!1;const l=y[e]||K.attributeCheck instanceof Function&&K.attributeCheck(e,t);if(!(zt&&!vt[e]&&_(Ye,e))&&!(le&&_(qe,e))){if(!l||vt[e]){if(!(_e(t)&&(h.tagNameCheck instanceof RegExp&&_(h.tagNameCheck,t)||h.tagNameCheck instanceof Function&&h.tagNameCheck(t))&&(h.attributeNameCheck instanceof RegExp&&_(h.attributeNameCheck,e)||h.attributeNameCheck instanceof Function&&h.attributeNameCheck(e,t))||e==="is"&&h.allowCustomizedBuiltInElements&&(h.tagNameCheck instanceof RegExp&&_(h.tagNameCheck,o)||h.tagNameCheck instanceof Function&&h.tagNameCheck(o))))return!1}else if(!Bt[e]&&!_(ae,ft(o,ie,""))&&!((e==="src"||e==="xlink:href"||e==="href")&&t!=="script"&&Ie(o,"data:")===0&&pe[t])&&!(ce&&!_(Xe,ft(o,ie,"")))&&o)return!1}return!0},en=c({},["annotation-xml","color-profile","font-face","font-face-format","font-face-name","font-face-src","font-face-uri","missing-glyph"]),_e=function(t){return!en[St(t)]&&_($e,t)},Ne=function(t){$(b.beforeSanitizeAttributes,t,null);const e=t.attributes;if(!e||kt(t))return;const o={attrName:"",attrValue:"",keepAttr:!0,allowedAttributes:y,forceKeepAttr:void 0};let l=e.length;for(;l--;){const u=e[l],m=u.name,O=u.namespaceURI,k=u.value,P=g(m),ut=k;let A=m==="value"?ut:dn(ut);if(o.attrName=P,o.attrValue=A,o.keepAttr=!0,o.forceKeepAttr=void 0,$(b.uponSanitizeAttribute,t,o),A=o.attrValue,me&&(P==="id"||P==="name")&&Ie(A,fe)!==0&&(nt(m,t),A=fe+A),Tt&&_(/((--!?|])>)|<\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i,A)){nt(m,t);continue}if(P==="attributename"&&Re(A,"href")){nt(m,t);continue}if(o.forceKeepAttr)continue;if(!o.keepAttr){nt(m,t);continue}if(!se&&_(/\/>/i,A)){nt(m,t);continue}V&&ot([Nt,Ot,wt],nn=>{A=ft(A,nn," ")});const Oe=g(t.nodeName);if(!Se(Oe,P,A)){nt(m,t);continue}if(N&&typeof x=="object"&&typeof x.getAttributeType=="function"&&!O)switch(x.getAttributeType(Oe,P)){case"TrustedHTML":{A=U(A);break}case"TrustedScriptURL":{A=N.createScriptURL(A);break}}if(A!==ut)try{O?t.setAttributeNS(O,m,A):t.setAttribute(m,A),kt(t)?et(t):De(r.removed)}catch{nt(m,t)}}$(b.afterSanitizeAttributes,t,null)},xt=function(t){let e=null;const o=Ae(t);for($(b.beforeSanitizeShadowDOM,t,null);e=o.nextNode();)if($(b.uponSanitizeShadowNode,e,null),Ee(e),Ne(e),ct(e.content)&&xt(e.content),(D?D(e):e.nodeType)===j.element){const l=v?v(e):e.shadowRoot;ct(l)&&(st(l),xt(l))}$(b.afterSanitizeShadowDOM,t,null)},st=function(t){const e=D?D(t):t.nodeType;if(e===j.element){const u=v?v(t):t.shadowRoot;ct(u)&&(st(u),xt(u))}const o=q?q(t):t.childNodes;if(!o)return;const l=[];ot(o,u=>{mt(l,u)});for(const u of l)st(u);if(e===j.element){const u=M?M(t):null;if(typeof u=="string"&&g(u)==="template"){const m=t.content;ct(m)&&st(m)}}};return r.sanitize=function(t){let e=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},o=null,l=null,u=null,m=null;if(Yt=!t,Yt&&(t="<!-->"),typeof t!="string"&&!Lt(t)&&(t=bn(t),typeof t!="string"))throw pt("dirty is not a string, aborting");if(!r.isSupported)return t;if(Ht||Kt(e),r.removed=[],typeof t=="string"&&(bt=!1),bt){const P=M?M(t):t.nodeName;if(typeof P=="string"){const ut=g(P);if(!d[ut]||yt[ut])throw pt("root node is forbidden and cannot be sanitized in-place")}if(kt(t))throw pt("root node is clobbered and cannot be sanitized in-place");st(t)}else if(Lt(t))o=be("<!---->"),l=o.ownerDocument.importNode(t,!0),l.nodeType===j.element&&l.nodeName==="BODY"||l.nodeName==="HTML"?o=l:o.appendChild(l),st(l);else{if(!rt&&!V&&!tt&&t.indexOf("<")===-1)return N&&Rt?U(t):t;if(o=be(t),!o)return rt?null:Rt?Q:""}o&&jt&&et(o.firstChild);const O=Ae(bt?t:o);for(;u=O.nextNode();)Ee(u),Ne(u),ct(u.content)&&xt(u.content);if(bt)return V&&Vt(t),t;if(rt){if(V&&Vt(o),Dt)for(m=Ge.call(o.ownerDocument);o.firstChild;)m.appendChild(o.firstChild);else m=o;return(y.shadowroot||y.shadowrootmode)&&(m=Be.call(a,m,!0)),m}let k=tt?o.outerHTML:o.innerHTML;return tt&&d["!doctype"]&&o.ownerDocument&&o.ownerDocument.doctype&&o.ownerDocument.doctype.name&&_(In,o.ownerDocument.doctype.name)&&(k="<!DOCTYPE "+o.ownerDocument.doctype.name+`>
+`+k),V&&ot([Nt,Ot,wt],P=>{k=ft(k,P," ")}),N&&Rt?U(k):k},r.setConfig=function(){let t=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};Kt(t),Ht=!0},r.clearConfig=function(){lt=null,Ht=!1},r.isValidAttribute=function(t,e,o){lt||Kt({});const l=g(t),u=g(e);return Se(l,u,o)},r.addHook=function(t,e){typeof e=="function"&&mt(b[t],e)},r.removeHook=function(t,e){if(e!==void 0){const o=fn(b[t],e);return o===-1?void 0:pn(b[t],o,1)[0]}return De(b[t])},r.removeHooks=function(t){b[t]=[]},r.removeAllHooks=function(){b=Ue()},r}var xn=je();const Mn=["p","br","ul","ol","li","h1","h2","h3","h4","h5","h6","strong","b","em","i","u","s","del","blockquote","pre","code"];function Fn(n){return xn.sanitize(String(n??""),{ALLOWED_TAGS:Mn,ALLOWED_ATTR:[],ALLOW_DATA_ATTR:!1})}export{Pn as c,Fn as s};
+//# sourceMappingURL=sanitize-html-dv-YifbT.chunk.mjs.map
diff --git a/js/pad-sync-B0gz-oBk.chunk.mjs.license b/js/sanitize-html-dv-YifbT.chunk.mjs.license
similarity index 53%
rename from js/pad-sync-B0gz-oBk.chunk.mjs.license
rename to js/sanitize-html-dv-YifbT.chunk.mjs.license
index 9d9b10c..99f1f90 100644
--- a/js/pad-sync-B0gz-oBk.chunk.mjs.license
+++ b/js/sanitize-html-dv-YifbT.chunk.mjs.license
@@ -1,7 +1,12 @@
+SPDX-License-Identifier: (MPL-2.0 OR Apache-2.0)
 SPDX-License-Identifier: AGPL-3.0-or-later
+SPDX-FileCopyrightText: Dr.-Ing. Mario Heiderich, Cure53 <mario@cure53.de> (https://cure53.de/)
 SPDX-FileCopyrightText: etherpad-nextcloud developers
 
 This file is generated from multiple sources. Included packages:
+- dompurify
+	- version: 3.4.8
+	- license: (MPL-2.0 OR Apache-2.0)
 - etherpad-nextcloud
 	- version: 1.1.0-alpha.2
 	- license: AGPL-3.0-or-later
diff --git a/js/sanitize-html-dv-YifbT.chunk.mjs.map b/js/sanitize-html-dv-YifbT.chunk.mjs.map
new file mode 100644
index 0000000..7350606
--- /dev/null
+++ b/js/sanitize-html-dv-YifbT.chunk.mjs.map
@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-html-dv-YifbT.chunk.mjs","sources":["../src/lib/pad-sync.js","../node_modules/dompurify/dist/purify.es.mjs","../src/lib/sanitize-html.js"],"sourcesContent":["/**\n * SPDX-License-Identifier: AGPL-3.0-or-later\n * Copyright (c) 2026 Jacob Bühler\n */\n\n/**\n * Shared pad-sync loop for the viewer and embed entrypoints.\n *\n * Owns the periodic background sync, forced/keepalive flushes, and the\n * visibility/pagehide lifecycle wiring. Forced syncs coalesce: while one\n * request is in flight a second forced flush is not started concurrently but\n * remembered and replayed once, so two forced flushes can never overlap (this\n * is the embed behavior, now shared — the viewer previously used a plain\n * in-flight boolean that allowed overlap).\n *\n * The caller supplies the request-token getter (the viewer and embed read it\n * from different places) and may inject a `fetchImpl` for tests.\n */\n\nexport const DEFAULT_SYNC_INTERVAL_MS = 120000\n\nexport function createPadSync({ requestToken, fetchImpl } = {}) {\n\tconst doFetch = typeof fetchImpl === 'function' ? fetchImpl : (...args) => window.fetch(...args)\n\tconst getToken = typeof requestToken === 'function' ? requestToken : () => ''\n\n\tlet syncUrl = ''\n\tlet intervalMs = DEFAULT_SYNC_INTERVAL_MS\n\tlet syncPromise = null\n\tlet activeSyncForce = false\n\tlet pendingForcedSync = false\n\tlet pendingForcedKeepalive = false\n\tlet timerId = null\n\tlet visibilityHandler = null\n\tlet pageHideHandler = null\n\n\tconst configure = ({ syncUrl: url, intervalMs: ms } = {}) => {\n\t\tif (typeof url === 'string') {\n\t\t\tsyncUrl = url\n\t\t}\n\t\tif (Number.isFinite(ms) && ms > 0) {\n\t\t\tintervalMs = ms\n\t\t}\n\t}\n\n\tconst stop = () => {\n\t\tif (timerId !== null) {\n\t\t\twindow.clearInterval(timerId)\n\t\t\ttimerId = null\n\t\t}\n\t}\n\n\tconst start = () => {\n\t\tif (!syncUrl || timerId !== null) {\n\t\t\treturn\n\t\t}\n\t\ttimerId = window.setInterval(() => {\n\t\t\tif (document.visibilityState === 'visible') {\n\t\t\t\tfireAndForget(false, false)\n\t\t\t}\n\t\t}, intervalMs)\n\t}\n\n\tconst fireAndForget = (force, keepalive) => {\n\t\tvoid sync(force, keepalive).catch(() => {})\n\t}\n\n\tconst sync = async (force, keepalive) => {\n\t\tif (!syncUrl) {\n\t\t\treturn { status: 'disabled' }\n\t\t}\n\t\tif (syncPromise) {\n\t\t\t// A request is already running. A forced flush that arrives while a\n\t\t\t// non-forced sync is in flight is coalesced into a single replay.\n\t\t\tif (force && !activeSyncForce) {\n\t\t\t\tpendingForcedSync = true\n\t\t\t\tpendingForcedKeepalive = pendingForcedKeepalive || Boolean(keepalive)\n\t\t\t\treturn syncPromise.catch(() => undefined).then(() => sync(true, pendingForcedKeepalive))\n\t\t\t}\n\t\t\treturn syncPromise\n\t\t}\n\t\tactiveSyncForce = Boolean(force)\n\t\tconst currentPromise = (async () => {\n\t\t\tconst url = force ? (syncUrl + (syncUrl.includes('?') ? '&' : '?') + 'force=1') : syncUrl\n\t\t\tconst response = await doFetch(url, {\n\t\t\t\tmethod: 'POST',\n\t\t\t\tcredentials: 'same-origin',\n\t\t\t\theaders: {\n\t\t\t\t\tAccept: 'application/json',\n\t\t\t\t\trequesttoken: getToken(),\n\t\t\t\t},\n\t\t\t\tkeepalive: Boolean(keepalive),\n\t\t\t})\n\t\t\tconst data = await response.json().catch(() => ({}))\n\t\t\tif (!response.ok) {\n\t\t\t\tthrow new Error((data && data.message) || 'Sync request failed.')\n\t\t\t}\n\t\t\treturn data\n\t\t})()\n\t\tsyncPromise = currentPromise\n\t\tlet result\n\t\tlet syncError = null\n\t\ttry {\n\t\t\tresult = await currentPromise\n\t\t} catch (error) {\n\t\t\tsyncError = error\n\t\t} finally {\n\t\t\tif (syncPromise === currentPromise) {\n\t\t\t\tsyncPromise = null\n\t\t\t}\n\t\t\tactiveSyncForce = false\n\t\t}\n\t\tconst rerunForcedSync = pendingForcedSync\n\t\tconst rerunKeepalive = pendingForcedKeepalive\n\t\tpendingForcedSync = false\n\t\tpendingForcedKeepalive = false\n\t\tif (rerunForcedSync) {\n\t\t\treturn sync(true, rerunKeepalive)\n\t\t}\n\t\tif (syncError instanceof Error) {\n\t\t\tthrow syncError\n\t\t}\n\t\treturn result\n\t}\n\n\tconst installLifecycleHandlers = () => {\n\t\tif (visibilityHandler || pageHideHandler) {\n\t\t\treturn\n\t\t}\n\t\tvisibilityHandler = () => {\n\t\t\tif (document.visibilityState === 'hidden') {\n\t\t\t\tfireAndForget(true, true)\n\t\t\t\tstop()\n\t\t\t\treturn\n\t\t\t}\n\t\t\tstart()\n\t\t}\n\t\tpageHideHandler = () => {\n\t\t\tfireAndForget(true, true)\n\t\t\tstop()\n\t\t}\n\t\tdocument.addEventListener('visibilitychange', visibilityHandler)\n\t\twindow.addEventListener('pagehide', pageHideHandler)\n\t}\n\n\tconst removeLifecycleHandlers = () => {\n\t\tif (visibilityHandler) {\n\t\t\tdocument.removeEventListener('visibilitychange', visibilityHandler)\n\t\t\tvisibilityHandler = null\n\t\t}\n\t\tif (pageHideHandler) {\n\t\t\twindow.removeEventListener('pagehide', pageHideHandler)\n\t\t\tpageHideHandler = null\n\t\t}\n\t}\n\n\treturn {\n\t\tconfigure,\n\t\tstart,\n\t\tstop,\n\t\tsync,\n\t\tfireAndForget,\n\t\tinstallLifecycleHandlers,\n\t\tremoveLifecycleHandlers,\n\t}\n}\n","/*! @license DOMPurify 3.4.8 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.4.8/LICENSE */\n\nfunction _arrayLikeToArray(r, a) {\n  (null == a || a > r.length) && (a = r.length);\n  for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e];\n  return n;\n}\nfunction _arrayWithHoles(r) {\n  if (Array.isArray(r)) return r;\n}\nfunction _iterableToArrayLimit(r, l) {\n  var t = null == r ? null : \"undefined\" != typeof Symbol && r[Symbol.iterator] || r[\"@@iterator\"];\n  if (null != t) {\n    var e,\n      n,\n      i,\n      u,\n      a = [],\n      f = true,\n      o = false;\n    try {\n      if (i = (t = t.call(r)).next, 0 === l) ; else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = !0);\n    } catch (r) {\n      o = true, n = r;\n    } finally {\n      try {\n        if (!f && null != t.return && (u = t.return(), Object(u) !== u)) return;\n      } finally {\n        if (o) throw n;\n      }\n    }\n    return a;\n  }\n}\nfunction _nonIterableRest() {\n  throw new TypeError(\"Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.\");\n}\nfunction _slicedToArray(r, e) {\n  return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest();\n}\nfunction _unsupportedIterableToArray(r, a) {\n  if (r) {\n    if (\"string\" == typeof r) return _arrayLikeToArray(r, a);\n    var t = {}.toString.call(r).slice(8, -1);\n    return \"Object\" === t && r.constructor && (t = r.constructor.name), \"Map\" === t || \"Set\" === t ? Array.from(r) : \"Arguments\" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0;\n  }\n}\n\nconst entries = Object.entries,\n  setPrototypeOf = Object.setPrototypeOf,\n  isFrozen = Object.isFrozen,\n  getPrototypeOf = Object.getPrototypeOf,\n  getOwnPropertyDescriptor = Object.getOwnPropertyDescriptor;\nlet freeze = Object.freeze,\n  seal = Object.seal,\n  create = Object.create; // eslint-disable-line import/no-mutable-exports\nlet _ref = typeof Reflect !== 'undefined' && Reflect,\n  apply = _ref.apply,\n  construct = _ref.construct;\nif (!freeze) {\n  freeze = function freeze(x) {\n    return x;\n  };\n}\nif (!seal) {\n  seal = function seal(x) {\n    return x;\n  };\n}\nif (!apply) {\n  apply = function apply(func, thisArg) {\n    for (var _len = arguments.length, args = new Array(_len > 2 ? _len - 2 : 0), _key = 2; _key < _len; _key++) {\n      args[_key - 2] = arguments[_key];\n    }\n    return func.apply(thisArg, args);\n  };\n}\nif (!construct) {\n  construct = function construct(Func) {\n    for (var _len2 = arguments.length, args = new Array(_len2 > 1 ? _len2 - 1 : 0), _key2 = 1; _key2 < _len2; _key2++) {\n      args[_key2 - 1] = arguments[_key2];\n    }\n    return new Func(...args);\n  };\n}\nconst arrayForEach = unapply(Array.prototype.forEach);\nconst arrayLastIndexOf = unapply(Array.prototype.lastIndexOf);\nconst arrayPop = unapply(Array.prototype.pop);\nconst arrayPush = unapply(Array.prototype.push);\nconst arraySplice = unapply(Array.prototype.splice);\nconst arrayIsArray = Array.isArray;\nconst stringToLowerCase = unapply(String.prototype.toLowerCase);\nconst stringToString = unapply(String.prototype.toString);\nconst stringMatch = unapply(String.prototype.match);\nconst stringReplace = unapply(String.prototype.replace);\nconst stringIndexOf = unapply(String.prototype.indexOf);\nconst stringTrim = unapply(String.prototype.trim);\nconst numberToString = unapply(Number.prototype.toString);\nconst booleanToString = unapply(Boolean.prototype.toString);\nconst bigintToString = typeof BigInt === 'undefined' ? null : unapply(BigInt.prototype.toString);\nconst symbolToString = typeof Symbol === 'undefined' ? null : unapply(Symbol.prototype.toString);\nconst objectHasOwnProperty = unapply(Object.prototype.hasOwnProperty);\nconst objectToString = unapply(Object.prototype.toString);\nconst regExpTest = unapply(RegExp.prototype.test);\nconst typeErrorCreate = unconstruct(TypeError);\n/**\n * Creates a new function that calls the given function with a specified thisArg and arguments.\n *\n * @param func - The function to be wrapped and called.\n * @returns A new function that calls the given function with a specified thisArg and arguments.\n */\nfunction unapply(func) {\n  return function (thisArg) {\n    if (thisArg instanceof RegExp) {\n      thisArg.lastIndex = 0;\n    }\n    for (var _len3 = arguments.length, args = new Array(_len3 > 1 ? _len3 - 1 : 0), _key3 = 1; _key3 < _len3; _key3++) {\n      args[_key3 - 1] = arguments[_key3];\n    }\n    return apply(func, thisArg, args);\n  };\n}\n/**\n * Creates a new function that constructs an instance of the given constructor function with the provided arguments.\n *\n * @param func - The constructor function to be wrapped and called.\n * @returns A new function that constructs an instance of the given constructor function with the provided arguments.\n */\nfunction unconstruct(Func) {\n  return function () {\n    for (var _len4 = arguments.length, args = new Array(_len4), _key4 = 0; _key4 < _len4; _key4++) {\n      args[_key4] = arguments[_key4];\n    }\n    return construct(Func, args);\n  };\n}\n/**\n * Add properties to a lookup table\n *\n * @param set - The set to which elements will be added.\n * @param array - The array containing elements to be added to the set.\n * @param transformCaseFunc - An optional function to transform the case of each element before adding to the set.\n * @returns The modified set with added elements.\n */\nfunction addToSet(set, array) {\n  let transformCaseFunc = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : stringToLowerCase;\n  if (setPrototypeOf) {\n    // Make 'in' and truthy checks like Boolean(set.constructor)\n    // independent of any properties defined on Object.prototype.\n    // Prevent prototype setters from intercepting set as a this value.\n    setPrototypeOf(set, null);\n  }\n  if (!arrayIsArray(array)) {\n    return set;\n  }\n  let l = array.length;\n  while (l--) {\n    let element = array[l];\n    if (typeof element === 'string') {\n      const lcElement = transformCaseFunc(element);\n      if (lcElement !== element) {\n        // Config presets (e.g. tags.js, attrs.js) are immutable.\n        if (!isFrozen(array)) {\n          array[l] = lcElement;\n        }\n        element = lcElement;\n      }\n    }\n    set[element] = true;\n  }\n  return set;\n}\n/**\n * Clean up an array to harden against CSPP\n *\n * @param array - The array to be cleaned.\n * @returns The cleaned version of the array\n */\nfunction cleanArray(array) {\n  for (let index = 0; index < array.length; index++) {\n    const isPropertyExist = objectHasOwnProperty(array, index);\n    if (!isPropertyExist) {\n      array[index] = null;\n    }\n  }\n  return array;\n}\n/**\n * Shallow clone an object\n *\n * @param object - The object to be cloned.\n * @returns A new object that copies the original.\n */\nfunction clone(object) {\n  const newObject = create(null);\n  for (const _ref2 of entries(object)) {\n    var _ref3 = _slicedToArray(_ref2, 2);\n    const property = _ref3[0];\n    const value = _ref3[1];\n    const isPropertyExist = objectHasOwnProperty(object, property);\n    if (isPropertyExist) {\n      if (arrayIsArray(value)) {\n        newObject[property] = cleanArray(value);\n      } else if (value && typeof value === 'object' && value.constructor === Object) {\n        newObject[property] = clone(value);\n      } else {\n        newObject[property] = value;\n      }\n    }\n  }\n  return newObject;\n}\n/**\n * Convert non-node values into strings without depending on direct property access.\n *\n * @param value - The value to stringify.\n * @returns A string representation of the provided value.\n */\nfunction stringifyValue(value) {\n  switch (typeof value) {\n    case 'string':\n      {\n        return value;\n      }\n    case 'number':\n      {\n        return numberToString(value);\n      }\n    case 'boolean':\n      {\n        return booleanToString(value);\n      }\n    case 'bigint':\n      {\n        return bigintToString ? bigintToString(value) : '0';\n      }\n    case 'symbol':\n      {\n        return symbolToString ? symbolToString(value) : 'Symbol()';\n      }\n    case 'undefined':\n      {\n        return objectToString(value);\n      }\n    case 'function':\n    case 'object':\n      {\n        if (value === null) {\n          return objectToString(value);\n        }\n        const valueAsRecord = value;\n        const valueToString = lookupGetter(valueAsRecord, 'toString');\n        if (typeof valueToString === 'function') {\n          const stringified = valueToString(valueAsRecord);\n          return typeof stringified === 'string' ? stringified : objectToString(stringified);\n        }\n        return objectToString(value);\n      }\n    default:\n      {\n        return objectToString(value);\n      }\n  }\n}\n/**\n * This method automatically checks if the prop is function or getter and behaves accordingly.\n *\n * @param object - The object to look up the getter function in its prototype chain.\n * @param prop - The property name for which to find the getter function.\n * @returns The getter function found in the prototype chain or a fallback function.\n */\nfunction lookupGetter(object, prop) {\n  while (object !== null) {\n    const desc = getOwnPropertyDescriptor(object, prop);\n    if (desc) {\n      if (desc.get) {\n        return unapply(desc.get);\n      }\n      if (typeof desc.value === 'function') {\n        return unapply(desc.value);\n      }\n    }\n    object = getPrototypeOf(object);\n  }\n  function fallbackValue() {\n    return null;\n  }\n  return fallbackValue;\n}\nfunction isRegex(value) {\n  try {\n    regExpTest(value, '');\n    return true;\n  } catch (_unused) {\n    return false;\n  }\n}\n\nconst html$1 = freeze(['a', 'abbr', 'acronym', 'address', 'area', 'article', 'aside', 'audio', 'b', 'bdi', 'bdo', 'big', 'blink', 'blockquote', 'body', 'br', 'button', 'canvas', 'caption', 'center', 'cite', 'code', 'col', 'colgroup', 'content', 'data', 'datalist', 'dd', 'decorator', 'del', 'details', 'dfn', 'dialog', 'dir', 'div', 'dl', 'dt', 'element', 'em', 'fieldset', 'figcaption', 'figure', 'font', 'footer', 'form', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'head', 'header', 'hgroup', 'hr', 'html', 'i', 'img', 'input', 'ins', 'kbd', 'label', 'legend', 'li', 'main', 'map', 'mark', 'marquee', 'menu', 'menuitem', 'meter', 'nav', 'nobr', 'ol', 'optgroup', 'option', 'output', 'p', 'picture', 'pre', 'progress', 'q', 'rp', 'rt', 'ruby', 's', 'samp', 'search', 'section', 'select', 'shadow', 'slot', 'small', 'source', 'spacer', 'span', 'strike', 'strong', 'style', 'sub', 'summary', 'sup', 'table', 'tbody', 'td', 'template', 'textarea', 'tfoot', 'th', 'thead', 'time', 'tr', 'track', 'tt', 'u', 'ul', 'var', 'video', 'wbr']);\nconst svg$1 = freeze(['svg', 'a', 'altglyph', 'altglyphdef', 'altglyphitem', 'animatecolor', 'animatemotion', 'animatetransform', 'circle', 'clippath', 'defs', 'desc', 'ellipse', 'enterkeyhint', 'exportparts', 'filter', 'font', 'g', 'glyph', 'glyphref', 'hkern', 'image', 'inputmode', 'line', 'lineargradient', 'marker', 'mask', 'metadata', 'mpath', 'part', 'path', 'pattern', 'polygon', 'polyline', 'radialgradient', 'rect', 'stop', 'style', 'switch', 'symbol', 'text', 'textpath', 'title', 'tref', 'tspan', 'view', 'vkern']);\nconst svgFilters = freeze(['feBlend', 'feColorMatrix', 'feComponentTransfer', 'feComposite', 'feConvolveMatrix', 'feDiffuseLighting', 'feDisplacementMap', 'feDistantLight', 'feDropShadow', 'feFlood', 'feFuncA', 'feFuncB', 'feFuncG', 'feFuncR', 'feGaussianBlur', 'feImage', 'feMerge', 'feMergeNode', 'feMorphology', 'feOffset', 'fePointLight', 'feSpecularLighting', 'feSpotLight', 'feTile', 'feTurbulence']);\n// List of SVG elements that are disallowed by default.\n// We still need to know them so that we can do namespace\n// checks properly in case one wants to add them to\n// allow-list.\nconst svgDisallowed = freeze(['animate', 'color-profile', 'cursor', 'discard', 'font-face', 'font-face-format', 'font-face-name', 'font-face-src', 'font-face-uri', 'foreignobject', 'hatch', 'hatchpath', 'mesh', 'meshgradient', 'meshpatch', 'meshrow', 'missing-glyph', 'script', 'set', 'solidcolor', 'unknown', 'use']);\nconst mathMl$1 = freeze(['math', 'menclose', 'merror', 'mfenced', 'mfrac', 'mglyph', 'mi', 'mlabeledtr', 'mmultiscripts', 'mn', 'mo', 'mover', 'mpadded', 'mphantom', 'mroot', 'mrow', 'ms', 'mspace', 'msqrt', 'mstyle', 'msub', 'msup', 'msubsup', 'mtable', 'mtd', 'mtext', 'mtr', 'munder', 'munderover', 'mprescripts']);\n// Similarly to SVG, we want to know all MathML elements,\n// even those that we disallow by default.\nconst mathMlDisallowed = freeze(['maction', 'maligngroup', 'malignmark', 'mlongdiv', 'mscarries', 'mscarry', 'msgroup', 'mstack', 'msline', 'msrow', 'semantics', 'annotation', 'annotation-xml', 'mprescripts', 'none']);\nconst text = freeze(['#text']);\n\nconst html = freeze(['accept', 'action', 'align', 'alt', 'autocapitalize', 'autocomplete', 'autopictureinpicture', 'autoplay', 'background', 'bgcolor', 'border', 'capture', 'cellpadding', 'cellspacing', 'checked', 'cite', 'class', 'clear', 'color', 'cols', 'colspan', 'command', 'commandfor', 'controls', 'controlslist', 'coords', 'crossorigin', 'datetime', 'decoding', 'default', 'dir', 'disabled', 'disablepictureinpicture', 'disableremoteplayback', 'download', 'draggable', 'enctype', 'enterkeyhint', 'exportparts', 'face', 'for', 'headers', 'height', 'hidden', 'high', 'href', 'hreflang', 'id', 'inert', 'inputmode', 'integrity', 'ismap', 'kind', 'label', 'lang', 'list', 'loading', 'loop', 'low', 'max', 'maxlength', 'media', 'method', 'min', 'minlength', 'multiple', 'muted', 'name', 'nonce', 'noshade', 'novalidate', 'nowrap', 'open', 'optimum', 'part', 'pattern', 'placeholder', 'playsinline', 'popover', 'popovertarget', 'popovertargetaction', 'poster', 'preload', 'pubdate', 'radiogroup', 'readonly', 'rel', 'required', 'rev', 'reversed', 'role', 'rows', 'rowspan', 'spellcheck', 'scope', 'selected', 'shape', 'size', 'sizes', 'slot', 'span', 'srclang', 'start', 'src', 'srcset', 'step', 'style', 'summary', 'tabindex', 'title', 'translate', 'type', 'usemap', 'valign', 'value', 'width', 'wrap', 'xmlns']);\nconst svg = freeze(['accent-height', 'accumulate', 'additive', 'alignment-baseline', 'amplitude', 'ascent', 'attributename', 'attributetype', 'azimuth', 'basefrequency', 'baseline-shift', 'begin', 'bias', 'by', 'class', 'clip', 'clippathunits', 'clip-path', 'clip-rule', 'color', 'color-interpolation', 'color-interpolation-filters', 'color-profile', 'color-rendering', 'cx', 'cy', 'd', 'dx', 'dy', 'diffuseconstant', 'direction', 'display', 'divisor', 'dur', 'edgemode', 'elevation', 'end', 'exponent', 'fill', 'fill-opacity', 'fill-rule', 'filter', 'filterunits', 'flood-color', 'flood-opacity', 'font-family', 'font-size', 'font-size-adjust', 'font-stretch', 'font-style', 'font-variant', 'font-weight', 'fx', 'fy', 'g1', 'g2', 'glyph-name', 'glyphref', 'gradientunits', 'gradienttransform', 'height', 'href', 'id', 'image-rendering', 'in', 'in2', 'intercept', 'k', 'k1', 'k2', 'k3', 'k4', 'kerning', 'keypoints', 'keysplines', 'keytimes', 'lang', 'lengthadjust', 'letter-spacing', 'kernelmatrix', 'kernelunitlength', 'lighting-color', 'local', 'marker-end', 'marker-mid', 'marker-start', 'markerheight', 'markerunits', 'markerwidth', 'maskcontentunits', 'maskunits', 'max', 'mask', 'mask-type', 'media', 'method', 'mode', 'min', 'name', 'numoctaves', 'offset', 'operator', 'opacity', 'order', 'orient', 'orientation', 'origin', 'overflow', 'paint-order', 'path', 'pathlength', 'patterncontentunits', 'patterntransform', 'patternunits', 'points', 'preservealpha', 'preserveaspectratio', 'primitiveunits', 'r', 'rx', 'ry', 'radius', 'refx', 'refy', 'repeatcount', 'repeatdur', 'restart', 'result', 'rotate', 'scale', 'seed', 'shape-rendering', 'slope', 'specularconstant', 'specularexponent', 'spreadmethod', 'startoffset', 'stddeviation', 'stitchtiles', 'stop-color', 'stop-opacity', 'stroke-dasharray', 'stroke-dashoffset', 'stroke-linecap', 'stroke-linejoin', 'stroke-miterlimit', 'stroke-opacity', 'stroke', 'stroke-width', 'style', 'surfacescale', 'systemlanguage', 'tabindex', 'tablevalues', 'targetx', 'targety', 'transform', 'transform-origin', 'text-anchor', 'text-decoration', 'text-rendering', 'textlength', 'type', 'u1', 'u2', 'unicode', 'values', 'viewbox', 'visibility', 'version', 'vert-adv-y', 'vert-origin-x', 'vert-origin-y', 'width', 'word-spacing', 'wrap', 'writing-mode', 'xchannelselector', 'ychannelselector', 'x', 'x1', 'x2', 'xmlns', 'y', 'y1', 'y2', 'z', 'zoomandpan']);\nconst mathMl = freeze(['accent', 'accentunder', 'align', 'bevelled', 'close', 'columnalign', 'columnlines', 'columnspacing', 'columnspan', 'denomalign', 'depth', 'dir', 'display', 'displaystyle', 'encoding', 'fence', 'frame', 'height', 'href', 'id', 'largeop', 'length', 'linethickness', 'lquote', 'lspace', 'mathbackground', 'mathcolor', 'mathsize', 'mathvariant', 'maxsize', 'minsize', 'movablelimits', 'notation', 'numalign', 'open', 'rowalign', 'rowlines', 'rowspacing', 'rowspan', 'rspace', 'rquote', 'scriptlevel', 'scriptminsize', 'scriptsizemultiplier', 'selection', 'separator', 'separators', 'stretchy', 'subscriptshift', 'supscriptshift', 'symmetric', 'voffset', 'width', 'xmlns']);\nconst xml = freeze(['xlink:href', 'xml:id', 'xlink:title', 'xml:space', 'xmlns:xlink']);\n\nconst MUSTACHE_EXPR = seal(/{{[\\w\\W]*|^[\\w\\W]*}}/g);\nconst ERB_EXPR = seal(/<%[\\w\\W]*|^[\\w\\W]*%>/g);\nconst TMPLIT_EXPR = seal(/\\${[\\w\\W]*/g);\nconst DATA_ATTR = seal(/^data-[\\-\\w.\\u00B7-\\uFFFF]+$/); // eslint-disable-line no-useless-escape\nconst ARIA_ATTR = seal(/^aria-[\\-\\w]+$/); // eslint-disable-line no-useless-escape\nconst IS_ALLOWED_URI = seal(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|matrix):|[^a-z]|[a-z+.\\-]+(?:[^a-z+.\\-:]|$))/i // eslint-disable-line no-useless-escape\n);\nconst IS_SCRIPT_OR_DATA = seal(/^(?:\\w+script|data):/i);\nconst ATTR_WHITESPACE = seal(/[\\u0000-\\u0020\\u00A0\\u1680\\u180E\\u2000-\\u2029\\u205F\\u3000]/g // eslint-disable-line no-control-regex\n);\nconst DOCTYPE_NAME = seal(/^html$/i);\nconst CUSTOM_ELEMENT = seal(/^[a-z][.\\w]*(-[.\\w]+)+$/i);\n\n/* eslint-disable @typescript-eslint/indent */\n// https://developer.mozilla.org/en-US/docs/Web/API/Node/nodeType\nconst NODE_TYPE = {\n  element: 1,\n  attribute: 2,\n  text: 3,\n  cdataSection: 4,\n  entityReference: 5,\n  // Deprecated\n  entityNode: 6,\n  // Deprecated\n  progressingInstruction: 7,\n  comment: 8,\n  document: 9,\n  documentType: 10,\n  documentFragment: 11,\n  notation: 12 // Deprecated\n};\nconst getGlobal = function getGlobal() {\n  return typeof window === 'undefined' ? null : window;\n};\n/**\n * Creates a no-op policy for internal use only.\n * Don't export this function outside this module!\n * @param trustedTypes The policy factory.\n * @param purifyHostElement The Script element used to load DOMPurify (to determine policy name suffix).\n * @return The policy created (or null, if Trusted Types\n * are not supported or creating the policy failed).\n */\nconst _createTrustedTypesPolicy = function _createTrustedTypesPolicy(trustedTypes, purifyHostElement) {\n  if (typeof trustedTypes !== 'object' || typeof trustedTypes.createPolicy !== 'function') {\n    return null;\n  }\n  // Allow the callers to control the unique policy name\n  // by adding a data-tt-policy-suffix to the script element with the DOMPurify.\n  // Policy creation with duplicate names throws in Trusted Types.\n  let suffix = null;\n  const ATTR_NAME = 'data-tt-policy-suffix';\n  if (purifyHostElement && purifyHostElement.hasAttribute(ATTR_NAME)) {\n    suffix = purifyHostElement.getAttribute(ATTR_NAME);\n  }\n  const policyName = 'dompurify' + (suffix ? '#' + suffix : '');\n  try {\n    return trustedTypes.createPolicy(policyName, {\n      createHTML(html) {\n        return html;\n      },\n      createScriptURL(scriptUrl) {\n        return scriptUrl;\n      }\n    });\n  } catch (_) {\n    // Policy creation failed (most likely another DOMPurify script has\n    // already run). Skip creating the policy, as this will only cause errors\n    // if TT are enforced.\n    console.warn('TrustedTypes policy ' + policyName + ' could not be created.');\n    return null;\n  }\n};\nconst _createHooksMap = function _createHooksMap() {\n  return {\n    afterSanitizeAttributes: [],\n    afterSanitizeElements: [],\n    afterSanitizeShadowDOM: [],\n    beforeSanitizeAttributes: [],\n    beforeSanitizeElements: [],\n    beforeSanitizeShadowDOM: [],\n    uponSanitizeAttribute: [],\n    uponSanitizeElement: [],\n    uponSanitizeShadowNode: []\n  };\n};\nfunction createDOMPurify() {\n  let window = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : getGlobal();\n  const DOMPurify = root => createDOMPurify(root);\n  DOMPurify.version = '3.4.8';\n  DOMPurify.removed = [];\n  if (!window || !window.document || window.document.nodeType !== NODE_TYPE.document || !window.Element) {\n    // Not running in a browser, provide a factory function\n    // so that you can pass your own Window\n    DOMPurify.isSupported = false;\n    return DOMPurify;\n  }\n  let document = window.document;\n  const originalDocument = document;\n  const currentScript = originalDocument.currentScript;\n  window.DocumentFragment;\n    const HTMLTemplateElement = window.HTMLTemplateElement,\n    Node = window.Node,\n    Element = window.Element,\n    NodeFilter = window.NodeFilter,\n    _window$NamedNodeMap = window.NamedNodeMap;\n    _window$NamedNodeMap === void 0 ? window.NamedNodeMap || window.MozNamedAttrMap : _window$NamedNodeMap;\n    window.HTMLFormElement;\n    const DOMParser = window.DOMParser,\n    trustedTypes = window.trustedTypes;\n  const ElementPrototype = Element.prototype;\n  const cloneNode = lookupGetter(ElementPrototype, 'cloneNode');\n  const remove = lookupGetter(ElementPrototype, 'remove');\n  const getNextSibling = lookupGetter(ElementPrototype, 'nextSibling');\n  const getChildNodes = lookupGetter(ElementPrototype, 'childNodes');\n  const getParentNode = lookupGetter(ElementPrototype, 'parentNode');\n  const getShadowRoot = lookupGetter(ElementPrototype, 'shadowRoot');\n  const getAttributes = lookupGetter(ElementPrototype, 'attributes');\n  const getNodeType = Node && Node.prototype ? lookupGetter(Node.prototype, 'nodeType') : null;\n  const getNodeName = Node && Node.prototype ? lookupGetter(Node.prototype, 'nodeName') : null;\n  // As per issue #47, the web-components registry is inherited by a\n  // new document created via createHTMLDocument. As per the spec\n  // (http://w3c.github.io/webcomponents/spec/custom/#creating-and-passing-registries)\n  // a new empty registry is used when creating a template contents owner\n  // document, so we use that as our parent document to ensure nothing\n  // is inherited.\n  if (typeof HTMLTemplateElement === 'function') {\n    const template = document.createElement('template');\n    if (template.content && template.content.ownerDocument) {\n      document = template.content.ownerDocument;\n    }\n  }\n  let trustedTypesPolicy;\n  let emptyHTML = '';\n  // Tracks whether we are already inside a call to the configured Trusted Types\n  // policy's `createHTML`. If the supplied `TRUSTED_TYPES_POLICY.createHTML`\n  // itself calls `DOMPurify.sanitize` (the cause of #1422), `sanitize` would\n  // re-enter the policy and recurse until the stack overflows. We detect that\n  // re-entry and throw a clear, actionable error instead.\n  let IN_POLICY_CREATE_HTML = 0;\n  const _createTrustedHTML = function _createTrustedHTML(html) {\n    if (IN_POLICY_CREATE_HTML > 0) {\n      throw typeErrorCreate('The configured TRUSTED_TYPES_POLICY.createHTML must not call ' + 'DOMPurify.sanitize, as that causes infinite recursion. Do not pass ' + 'a policy whose createHTML wraps DOMPurify as TRUSTED_TYPES_POLICY; ' + 'see the \"DOMPurify and Trusted Types\" section of the README.');\n    }\n    IN_POLICY_CREATE_HTML++;\n    try {\n      return trustedTypesPolicy.createHTML(html);\n    } finally {\n      IN_POLICY_CREATE_HTML--;\n    }\n  };\n  const _document = document,\n    implementation = _document.implementation,\n    createNodeIterator = _document.createNodeIterator,\n    createDocumentFragment = _document.createDocumentFragment,\n    getElementsByTagName = _document.getElementsByTagName;\n  const importNode = originalDocument.importNode;\n  let hooks = _createHooksMap();\n  /**\n   * Expose whether this browser supports running the full DOMPurify.\n   */\n  DOMPurify.isSupported = typeof entries === 'function' && typeof getParentNode === 'function' && implementation && implementation.createHTMLDocument !== undefined;\n  const MUSTACHE_EXPR$1 = MUSTACHE_EXPR,\n    ERB_EXPR$1 = ERB_EXPR,\n    TMPLIT_EXPR$1 = TMPLIT_EXPR,\n    DATA_ATTR$1 = DATA_ATTR,\n    ARIA_ATTR$1 = ARIA_ATTR,\n    IS_SCRIPT_OR_DATA$1 = IS_SCRIPT_OR_DATA,\n    ATTR_WHITESPACE$1 = ATTR_WHITESPACE,\n    CUSTOM_ELEMENT$1 = CUSTOM_ELEMENT;\n  let IS_ALLOWED_URI$1 = IS_ALLOWED_URI;\n  /**\n   * We consider the elements and attributes below to be safe. Ideally\n   * don't add any new ones but feel free to remove unwanted ones.\n   */\n  /* allowed element names */\n  let ALLOWED_TAGS = null;\n  const DEFAULT_ALLOWED_TAGS = addToSet({}, [...html$1, ...svg$1, ...svgFilters, ...mathMl$1, ...text]);\n  /* Allowed attribute names */\n  let ALLOWED_ATTR = null;\n  const DEFAULT_ALLOWED_ATTR = addToSet({}, [...html, ...svg, ...mathMl, ...xml]);\n  /*\n   * Configure how DOMPurify should handle custom elements and their attributes as well as customized built-in elements.\n   * @property {RegExp|Function|null} tagNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any custom elements)\n   * @property {RegExp|Function|null} attributeNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any attributes not on the allow list)\n   * @property {boolean} allowCustomizedBuiltInElements allow custom elements derived from built-ins if they pass CUSTOM_ELEMENT_HANDLING.tagNameCheck. Default: `false`.\n   */\n  let CUSTOM_ELEMENT_HANDLING = Object.seal(create(null, {\n    tagNameCheck: {\n      writable: true,\n      configurable: false,\n      enumerable: true,\n      value: null\n    },\n    attributeNameCheck: {\n      writable: true,\n      configurable: false,\n      enumerable: true,\n      value: null\n    },\n    allowCustomizedBuiltInElements: {\n      writable: true,\n      configurable: false,\n      enumerable: true,\n      value: false\n    }\n  }));\n  /* Explicitly forbidden tags (overrides ALLOWED_TAGS/ADD_TAGS) */\n  let FORBID_TAGS = null;\n  /* Explicitly forbidden attributes (overrides ALLOWED_ATTR/ADD_ATTR) */\n  let FORBID_ATTR = null;\n  /* Config object to store ADD_TAGS/ADD_ATTR functions (when used as functions) */\n  const EXTRA_ELEMENT_HANDLING = Object.seal(create(null, {\n    tagCheck: {\n      writable: true,\n      configurable: false,\n      enumerable: true,\n      value: null\n    },\n    attributeCheck: {\n      writable: true,\n      configurable: false,\n      enumerable: true,\n      value: null\n    }\n  }));\n  /* Decide if ARIA attributes are okay */\n  let ALLOW_ARIA_ATTR = true;\n  /* Decide if custom data attributes are okay */\n  let ALLOW_DATA_ATTR = true;\n  /* Decide if unknown protocols are okay */\n  let ALLOW_UNKNOWN_PROTOCOLS = false;\n  /* Decide if self-closing tags in attributes are allowed.\n   * Usually removed due to a mXSS issue in jQuery 3.0 */\n  let ALLOW_SELF_CLOSE_IN_ATTR = true;\n  /* Output should be safe for common template engines.\n   * This means, DOMPurify removes data attributes, mustaches and ERB\n   */\n  let SAFE_FOR_TEMPLATES = false;\n  /* Output should be safe even for XML used within HTML and alike.\n   * This means, DOMPurify removes comments when containing risky content.\n   */\n  let SAFE_FOR_XML = true;\n  /* Decide if document with <html>... should be returned */\n  let WHOLE_DOCUMENT = false;\n  /* Track whether config is already set on this instance of DOMPurify. */\n  let SET_CONFIG = false;\n  /* Decide if all elements (e.g. style, script) must be children of\n   * document.body. By default, browsers might move them to document.head */\n  let FORCE_BODY = false;\n  /* Decide if a DOM `HTMLBodyElement` should be returned, instead of a html\n   * string (or a TrustedHTML object if Trusted Types are supported).\n   * If `WHOLE_DOCUMENT` is enabled a `HTMLHtmlElement` will be returned instead\n   */\n  let RETURN_DOM = false;\n  /* Decide if a DOM `DocumentFragment` should be returned, instead of a html\n   * string  (or a TrustedHTML object if Trusted Types are supported) */\n  let RETURN_DOM_FRAGMENT = false;\n  /* Try to return a Trusted Type object instead of a string, return a string in\n   * case Trusted Types are not supported  */\n  let RETURN_TRUSTED_TYPE = false;\n  /* Output should be free from DOM clobbering attacks?\n   * This sanitizes markups named with colliding, clobberable built-in DOM APIs.\n   */\n  let SANITIZE_DOM = true;\n  /* Achieve full DOM Clobbering protection by isolating the namespace of named\n   * properties and JS variables, mitigating attacks that abuse the HTML/DOM spec rules.\n   *\n   * HTML/DOM spec rules that enable DOM Clobbering:\n   *   - Named Access on Window (§7.3.3)\n   *   - DOM Tree Accessors (§3.1.5)\n   *   - Form Element Parent-Child Relations (§4.10.3)\n   *   - Iframe srcdoc / Nested WindowProxies (§4.8.5)\n   *   - HTMLCollection (§4.2.10.2)\n   *\n   * Namespace isolation is implemented by prefixing `id` and `name` attributes\n   * with a constant string, i.e., `user-content-`\n   */\n  let SANITIZE_NAMED_PROPS = false;\n  const SANITIZE_NAMED_PROPS_PREFIX = 'user-content-';\n  /* Keep element content when removing element? */\n  let KEEP_CONTENT = true;\n  /* If a `Node` is passed to sanitize(), then performs sanitization in-place instead\n   * of importing it into a new Document and returning a sanitized copy */\n  let IN_PLACE = false;\n  /* Allow usage of profiles like html, svg and mathMl */\n  let USE_PROFILES = {};\n  /* Tags to ignore content of when KEEP_CONTENT is true */\n  let FORBID_CONTENTS = null;\n  const DEFAULT_FORBID_CONTENTS = addToSet({}, ['annotation-xml', 'audio', 'colgroup', 'desc', 'foreignobject', 'head', 'iframe', 'math', 'mi', 'mn', 'mo', 'ms', 'mtext', 'noembed', 'noframes', 'noscript', 'plaintext', 'script', 'style', 'svg', 'template', 'thead', 'title', 'video', 'xmp']);\n  /* Tags that are safe for data: URIs */\n  let DATA_URI_TAGS = null;\n  const DEFAULT_DATA_URI_TAGS = addToSet({}, ['audio', 'video', 'img', 'source', 'image', 'track']);\n  /* Attributes safe for values like \"javascript:\" */\n  let URI_SAFE_ATTRIBUTES = null;\n  const DEFAULT_URI_SAFE_ATTRIBUTES = addToSet({}, ['alt', 'class', 'for', 'id', 'label', 'name', 'pattern', 'placeholder', 'role', 'summary', 'title', 'value', 'style', 'xmlns']);\n  const MATHML_NAMESPACE = 'http://www.w3.org/1998/Math/MathML';\n  const SVG_NAMESPACE = 'http://www.w3.org/2000/svg';\n  const HTML_NAMESPACE = 'http://www.w3.org/1999/xhtml';\n  /* Document namespace */\n  let NAMESPACE = HTML_NAMESPACE;\n  let IS_EMPTY_INPUT = false;\n  /* Allowed XHTML+XML namespaces */\n  let ALLOWED_NAMESPACES = null;\n  const DEFAULT_ALLOWED_NAMESPACES = addToSet({}, [MATHML_NAMESPACE, SVG_NAMESPACE, HTML_NAMESPACE], stringToString);\n  let MATHML_TEXT_INTEGRATION_POINTS = addToSet({}, ['mi', 'mo', 'mn', 'ms', 'mtext']);\n  let HTML_INTEGRATION_POINTS = addToSet({}, ['annotation-xml']);\n  // Certain elements are allowed in both SVG and HTML\n  // namespace. We need to specify them explicitly\n  // so that they don't get erroneously deleted from\n  // HTML namespace.\n  const COMMON_SVG_AND_HTML_ELEMENTS = addToSet({}, ['title', 'style', 'font', 'a', 'script']);\n  /* Parsing of strict XHTML documents */\n  let PARSER_MEDIA_TYPE = null;\n  const SUPPORTED_PARSER_MEDIA_TYPES = ['application/xhtml+xml', 'text/html'];\n  const DEFAULT_PARSER_MEDIA_TYPE = 'text/html';\n  let transformCaseFunc = null;\n  /* Keep a reference to config to pass to hooks */\n  let CONFIG = null;\n  /* Ideally, do not touch anything below this line */\n  /* ______________________________________________ */\n  const formElement = document.createElement('form');\n  const isRegexOrFunction = function isRegexOrFunction(testValue) {\n    return testValue instanceof RegExp || testValue instanceof Function;\n  };\n  /**\n   * _parseConfig\n   *\n   * @param cfg optional config literal\n   */\n  // eslint-disable-next-line complexity\n  const _parseConfig = function _parseConfig() {\n    let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};\n    if (CONFIG && CONFIG === cfg) {\n      return;\n    }\n    /* Shield configuration object from tampering */\n    if (!cfg || typeof cfg !== 'object') {\n      cfg = {};\n    }\n    /* Shield configuration object from prototype pollution */\n    cfg = clone(cfg);\n    PARSER_MEDIA_TYPE =\n    // eslint-disable-next-line unicorn/prefer-includes\n    SUPPORTED_PARSER_MEDIA_TYPES.indexOf(cfg.PARSER_MEDIA_TYPE) === -1 ? DEFAULT_PARSER_MEDIA_TYPE : cfg.PARSER_MEDIA_TYPE;\n    // HTML tags and attributes are not case-sensitive, converting to lowercase. Keeping XHTML as is.\n    transformCaseFunc = PARSER_MEDIA_TYPE === 'application/xhtml+xml' ? stringToString : stringToLowerCase;\n    /* Set configuration parameters */\n    ALLOWED_TAGS = objectHasOwnProperty(cfg, 'ALLOWED_TAGS') && arrayIsArray(cfg.ALLOWED_TAGS) ? addToSet({}, cfg.ALLOWED_TAGS, transformCaseFunc) : DEFAULT_ALLOWED_TAGS;\n    ALLOWED_ATTR = objectHasOwnProperty(cfg, 'ALLOWED_ATTR') && arrayIsArray(cfg.ALLOWED_ATTR) ? addToSet({}, cfg.ALLOWED_ATTR, transformCaseFunc) : DEFAULT_ALLOWED_ATTR;\n    ALLOWED_NAMESPACES = objectHasOwnProperty(cfg, 'ALLOWED_NAMESPACES') && arrayIsArray(cfg.ALLOWED_NAMESPACES) ? addToSet({}, cfg.ALLOWED_NAMESPACES, stringToString) : DEFAULT_ALLOWED_NAMESPACES;\n    URI_SAFE_ATTRIBUTES = objectHasOwnProperty(cfg, 'ADD_URI_SAFE_ATTR') && arrayIsArray(cfg.ADD_URI_SAFE_ATTR) ? addToSet(clone(DEFAULT_URI_SAFE_ATTRIBUTES), cfg.ADD_URI_SAFE_ATTR, transformCaseFunc) : DEFAULT_URI_SAFE_ATTRIBUTES;\n    DATA_URI_TAGS = objectHasOwnProperty(cfg, 'ADD_DATA_URI_TAGS') && arrayIsArray(cfg.ADD_DATA_URI_TAGS) ? addToSet(clone(DEFAULT_DATA_URI_TAGS), cfg.ADD_DATA_URI_TAGS, transformCaseFunc) : DEFAULT_DATA_URI_TAGS;\n    FORBID_CONTENTS = objectHasOwnProperty(cfg, 'FORBID_CONTENTS') && arrayIsArray(cfg.FORBID_CONTENTS) ? addToSet({}, cfg.FORBID_CONTENTS, transformCaseFunc) : DEFAULT_FORBID_CONTENTS;\n    FORBID_TAGS = objectHasOwnProperty(cfg, 'FORBID_TAGS') && arrayIsArray(cfg.FORBID_TAGS) ? addToSet({}, cfg.FORBID_TAGS, transformCaseFunc) : clone({});\n    FORBID_ATTR = objectHasOwnProperty(cfg, 'FORBID_ATTR') && arrayIsArray(cfg.FORBID_ATTR) ? addToSet({}, cfg.FORBID_ATTR, transformCaseFunc) : clone({});\n    USE_PROFILES = objectHasOwnProperty(cfg, 'USE_PROFILES') ? cfg.USE_PROFILES && typeof cfg.USE_PROFILES === 'object' ? clone(cfg.USE_PROFILES) : cfg.USE_PROFILES : false;\n    ALLOW_ARIA_ATTR = cfg.ALLOW_ARIA_ATTR !== false; // Default true\n    ALLOW_DATA_ATTR = cfg.ALLOW_DATA_ATTR !== false; // Default true\n    ALLOW_UNKNOWN_PROTOCOLS = cfg.ALLOW_UNKNOWN_PROTOCOLS || false; // Default false\n    ALLOW_SELF_CLOSE_IN_ATTR = cfg.ALLOW_SELF_CLOSE_IN_ATTR !== false; // Default true\n    SAFE_FOR_TEMPLATES = cfg.SAFE_FOR_TEMPLATES || false; // Default false\n    SAFE_FOR_XML = cfg.SAFE_FOR_XML !== false; // Default true\n    WHOLE_DOCUMENT = cfg.WHOLE_DOCUMENT || false; // Default false\n    RETURN_DOM = cfg.RETURN_DOM || false; // Default false\n    RETURN_DOM_FRAGMENT = cfg.RETURN_DOM_FRAGMENT || false; // Default false\n    RETURN_TRUSTED_TYPE = cfg.RETURN_TRUSTED_TYPE || false; // Default false\n    FORCE_BODY = cfg.FORCE_BODY || false; // Default false\n    SANITIZE_DOM = cfg.SANITIZE_DOM !== false; // Default true\n    SANITIZE_NAMED_PROPS = cfg.SANITIZE_NAMED_PROPS || false; // Default false\n    KEEP_CONTENT = cfg.KEEP_CONTENT !== false; // Default true\n    IN_PLACE = cfg.IN_PLACE || false; // Default false\n    IS_ALLOWED_URI$1 = isRegex(cfg.ALLOWED_URI_REGEXP) ? cfg.ALLOWED_URI_REGEXP : IS_ALLOWED_URI; // Default regexp\n    NAMESPACE = typeof cfg.NAMESPACE === 'string' ? cfg.NAMESPACE : HTML_NAMESPACE; // Default HTML namespace\n    MATHML_TEXT_INTEGRATION_POINTS = objectHasOwnProperty(cfg, 'MATHML_TEXT_INTEGRATION_POINTS') && cfg.MATHML_TEXT_INTEGRATION_POINTS && typeof cfg.MATHML_TEXT_INTEGRATION_POINTS === 'object' ? clone(cfg.MATHML_TEXT_INTEGRATION_POINTS) : addToSet({}, ['mi', 'mo', 'mn', 'ms', 'mtext']); // Default built-in map\n    HTML_INTEGRATION_POINTS = objectHasOwnProperty(cfg, 'HTML_INTEGRATION_POINTS') && cfg.HTML_INTEGRATION_POINTS && typeof cfg.HTML_INTEGRATION_POINTS === 'object' ? clone(cfg.HTML_INTEGRATION_POINTS) : addToSet({}, ['annotation-xml']); // Default built-in map\n    const customElementHandling = objectHasOwnProperty(cfg, 'CUSTOM_ELEMENT_HANDLING') && cfg.CUSTOM_ELEMENT_HANDLING && typeof cfg.CUSTOM_ELEMENT_HANDLING === 'object' ? clone(cfg.CUSTOM_ELEMENT_HANDLING) : create(null);\n    CUSTOM_ELEMENT_HANDLING = create(null);\n    if (objectHasOwnProperty(customElementHandling, 'tagNameCheck') && isRegexOrFunction(customElementHandling.tagNameCheck)) {\n      CUSTOM_ELEMENT_HANDLING.tagNameCheck = customElementHandling.tagNameCheck; // Default undefined\n    }\n    if (objectHasOwnProperty(customElementHandling, 'attributeNameCheck') && isRegexOrFunction(customElementHandling.attributeNameCheck)) {\n      CUSTOM_ELEMENT_HANDLING.attributeNameCheck = customElementHandling.attributeNameCheck; // Default undefined\n    }\n    if (objectHasOwnProperty(customElementHandling, 'allowCustomizedBuiltInElements') && typeof customElementHandling.allowCustomizedBuiltInElements === 'boolean') {\n      CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements = customElementHandling.allowCustomizedBuiltInElements; // Default undefined\n    }\n    if (SAFE_FOR_TEMPLATES) {\n      ALLOW_DATA_ATTR = false;\n    }\n    if (RETURN_DOM_FRAGMENT) {\n      RETURN_DOM = true;\n    }\n    /* Parse profile info */\n    if (USE_PROFILES) {\n      ALLOWED_TAGS = addToSet({}, text);\n      ALLOWED_ATTR = create(null);\n      if (USE_PROFILES.html === true) {\n        addToSet(ALLOWED_TAGS, html$1);\n        addToSet(ALLOWED_ATTR, html);\n      }\n      if (USE_PROFILES.svg === true) {\n        addToSet(ALLOWED_TAGS, svg$1);\n        addToSet(ALLOWED_ATTR, svg);\n        addToSet(ALLOWED_ATTR, xml);\n      }\n      if (USE_PROFILES.svgFilters === true) {\n        addToSet(ALLOWED_TAGS, svgFilters);\n        addToSet(ALLOWED_ATTR, svg);\n        addToSet(ALLOWED_ATTR, xml);\n      }\n      if (USE_PROFILES.mathMl === true) {\n        addToSet(ALLOWED_TAGS, mathMl$1);\n        addToSet(ALLOWED_ATTR, mathMl);\n        addToSet(ALLOWED_ATTR, xml);\n      }\n    }\n    /* Always reset function-based ADD_TAGS / ADD_ATTR checks to prevent\n     * leaking across calls when switching from function to array config */\n    EXTRA_ELEMENT_HANDLING.tagCheck = null;\n    EXTRA_ELEMENT_HANDLING.attributeCheck = null;\n    /* Merge configuration parameters */\n    if (objectHasOwnProperty(cfg, 'ADD_TAGS')) {\n      if (typeof cfg.ADD_TAGS === 'function') {\n        EXTRA_ELEMENT_HANDLING.tagCheck = cfg.ADD_TAGS;\n      } else if (arrayIsArray(cfg.ADD_TAGS)) {\n        if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {\n          ALLOWED_TAGS = clone(ALLOWED_TAGS);\n        }\n        addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);\n      }\n    }\n    if (objectHasOwnProperty(cfg, 'ADD_ATTR')) {\n      if (typeof cfg.ADD_ATTR === 'function') {\n        EXTRA_ELEMENT_HANDLING.attributeCheck = cfg.ADD_ATTR;\n      } else if (arrayIsArray(cfg.ADD_ATTR)) {\n        if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {\n          ALLOWED_ATTR = clone(ALLOWED_ATTR);\n        }\n        addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);\n      }\n    }\n    if (objectHasOwnProperty(cfg, 'ADD_URI_SAFE_ATTR') && arrayIsArray(cfg.ADD_URI_SAFE_ATTR)) {\n      addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR, transformCaseFunc);\n    }\n    if (objectHasOwnProperty(cfg, 'FORBID_CONTENTS') && arrayIsArray(cfg.FORBID_CONTENTS)) {\n      if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {\n        FORBID_CONTENTS = clone(FORBID_CONTENTS);\n      }\n      addToSet(FORBID_CONTENTS, cfg.FORBID_CONTENTS, transformCaseFunc);\n    }\n    if (objectHasOwnProperty(cfg, 'ADD_FORBID_CONTENTS') && arrayIsArray(cfg.ADD_FORBID_CONTENTS)) {\n      if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {\n        FORBID_CONTENTS = clone(FORBID_CONTENTS);\n      }\n      addToSet(FORBID_CONTENTS, cfg.ADD_FORBID_CONTENTS, transformCaseFunc);\n    }\n    /* Add #text in case KEEP_CONTENT is set to true */\n    if (KEEP_CONTENT) {\n      ALLOWED_TAGS['#text'] = true;\n    }\n    /* Add html, head and body to ALLOWED_TAGS in case WHOLE_DOCUMENT is true */\n    if (WHOLE_DOCUMENT) {\n      addToSet(ALLOWED_TAGS, ['html', 'head', 'body']);\n    }\n    /* Add tbody to ALLOWED_TAGS in case tables are permitted, see #286, #365 */\n    if (ALLOWED_TAGS.table) {\n      addToSet(ALLOWED_TAGS, ['tbody']);\n      delete FORBID_TAGS.tbody;\n    }\n    if (cfg.TRUSTED_TYPES_POLICY) {\n      if (typeof cfg.TRUSTED_TYPES_POLICY.createHTML !== 'function') {\n        throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a \"createHTML\" hook.');\n      }\n      if (typeof cfg.TRUSTED_TYPES_POLICY.createScriptURL !== 'function') {\n        throw typeErrorCreate('TRUSTED_TYPES_POLICY configuration option must provide a \"createScriptURL\" hook.');\n      }\n      // Overwrite existing TrustedTypes policy.\n      const previousTrustedTypesPolicy = trustedTypesPolicy;\n      trustedTypesPolicy = cfg.TRUSTED_TYPES_POLICY;\n      // Sign local variables required by `sanitize`. If the supplied policy's\n      // `createHTML` is circular (i.e. it calls `DOMPurify.sanitize`), this\n      // throws via the re-entrancy guard. Restore the previous policy first so\n      // the instance is not left in a poisoned state. See #1422.\n      try {\n        emptyHTML = _createTrustedHTML('');\n      } catch (error) {\n        trustedTypesPolicy = previousTrustedTypesPolicy;\n        throw error;\n      }\n    } else {\n      // Uninitialized policy, attempt to initialize the internal dompurify policy.\n      if (trustedTypesPolicy === undefined && cfg.TRUSTED_TYPES_POLICY !== null) {\n        trustedTypesPolicy = _createTrustedTypesPolicy(trustedTypes, currentScript);\n      }\n      // If creating the internal policy succeeded sign internal variables.\n      // Note: a falsy `trustedTypesPolicy` (null when policy creation failed or\n      // was skipped via `TRUSTED_TYPES_POLICY: null`, or undefined when no\n      // policy has been initialized yet) must be excluded here, otherwise we\n      // would call `.createHTML` on a non-policy and throw. See #1422.\n      if (trustedTypesPolicy && typeof emptyHTML === 'string') {\n        emptyHTML = _createTrustedHTML('');\n      }\n    }\n    /*\n     * Mirror the clone-before-mutate pattern already applied above for\n     * cfg.ADD_TAGS / cfg.ADD_ATTR: if any uponSanitize* hook is\n     * registered AND the set still points at the default constant,\n     * clone it. The hook then mutates the clone (in-call widening\n     * still works exactly as documented) and the next default-cfg\n     * call rebinds to the untouched original via the reassignment at\n     * the top of this function.\n     */\n    if ((hooks.uponSanitizeElement.length > 0 || hooks.uponSanitizeAttribute.length > 0) && ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {\n      ALLOWED_TAGS = clone(ALLOWED_TAGS);\n    }\n    if (hooks.uponSanitizeAttribute.length > 0 && ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {\n      ALLOWED_ATTR = clone(ALLOWED_ATTR);\n    }\n    // Prevent further manipulation of configuration.\n    // Not available in IE8, Safari 5, etc.\n    if (freeze) {\n      freeze(cfg);\n    }\n    CONFIG = cfg;\n  };\n  /* Keep track of all possible SVG and MathML tags\n   * so that we can perform the namespace checks\n   * correctly. */\n  const ALL_SVG_TAGS = addToSet({}, [...svg$1, ...svgFilters, ...svgDisallowed]);\n  const ALL_MATHML_TAGS = addToSet({}, [...mathMl$1, ...mathMlDisallowed]);\n  /**\n   * @param element a DOM element whose namespace is being checked\n   * @returns Return false if the element has a\n   *  namespace that a spec-compliant parser would never\n   *  return. Return true otherwise.\n   */\n  const _checkValidNamespace = function _checkValidNamespace(element) {\n    let parent = getParentNode(element);\n    // In JSDOM, if we're inside shadow DOM, then parentNode\n    // can be null. We just simulate parent in this case.\n    if (!parent || !parent.tagName) {\n      parent = {\n        namespaceURI: NAMESPACE,\n        tagName: 'template'\n      };\n    }\n    const tagName = stringToLowerCase(element.tagName);\n    const parentTagName = stringToLowerCase(parent.tagName);\n    if (!ALLOWED_NAMESPACES[element.namespaceURI]) {\n      return false;\n    }\n    if (element.namespaceURI === SVG_NAMESPACE) {\n      // The only way to switch from HTML namespace to SVG\n      // is via <svg>. If it happens via any other tag, then\n      // it should be killed.\n      if (parent.namespaceURI === HTML_NAMESPACE) {\n        return tagName === 'svg';\n      }\n      // The only way to switch from MathML to SVG is via`\n      // svg if parent is either <annotation-xml> or MathML\n      // text integration points.\n      if (parent.namespaceURI === MATHML_NAMESPACE) {\n        return tagName === 'svg' && (parentTagName === 'annotation-xml' || MATHML_TEXT_INTEGRATION_POINTS[parentTagName]);\n      }\n      // We only allow elements that are defined in SVG\n      // spec. All others are disallowed in SVG namespace.\n      return Boolean(ALL_SVG_TAGS[tagName]);\n    }\n    if (element.namespaceURI === MATHML_NAMESPACE) {\n      // The only way to switch from HTML namespace to MathML\n      // is via <math>. If it happens via any other tag, then\n      // it should be killed.\n      if (parent.namespaceURI === HTML_NAMESPACE) {\n        return tagName === 'math';\n      }\n      // The only way to switch from SVG to MathML is via\n      // <math> and HTML integration points\n      if (parent.namespaceURI === SVG_NAMESPACE) {\n        return tagName === 'math' && HTML_INTEGRATION_POINTS[parentTagName];\n      }\n      // We only allow elements that are defined in MathML\n      // spec. All others are disallowed in MathML namespace.\n      return Boolean(ALL_MATHML_TAGS[tagName]);\n    }\n    if (element.namespaceURI === HTML_NAMESPACE) {\n      // The only way to switch from SVG to HTML is via\n      // HTML integration points, and from MathML to HTML\n      // is via MathML text integration points\n      if (parent.namespaceURI === SVG_NAMESPACE && !HTML_INTEGRATION_POINTS[parentTagName]) {\n        return false;\n      }\n      if (parent.namespaceURI === MATHML_NAMESPACE && !MATHML_TEXT_INTEGRATION_POINTS[parentTagName]) {\n        return false;\n      }\n      // We disallow tags that are specific for MathML\n      // or SVG and should never appear in HTML namespace\n      return !ALL_MATHML_TAGS[tagName] && (COMMON_SVG_AND_HTML_ELEMENTS[tagName] || !ALL_SVG_TAGS[tagName]);\n    }\n    // For XHTML and XML documents that support custom namespaces\n    if (PARSER_MEDIA_TYPE === 'application/xhtml+xml' && ALLOWED_NAMESPACES[element.namespaceURI]) {\n      return true;\n    }\n    // The code should never reach this place (this means\n    // that the element somehow got namespace that is not\n    // HTML, SVG, MathML or allowed via ALLOWED_NAMESPACES).\n    // Return false just in case.\n    return false;\n  };\n  /**\n   * _forceRemove\n   *\n   * @param node a DOM node\n   */\n  const _forceRemove = function _forceRemove(node) {\n    arrayPush(DOMPurify.removed, {\n      element: node\n    });\n    try {\n      // eslint-disable-next-line unicorn/prefer-dom-node-remove\n      getParentNode(node).removeChild(node);\n    } catch (_) {\n      remove(node);\n    }\n  };\n  /**\n   * _removeAttribute\n   *\n   * @param name an Attribute name\n   * @param element a DOM node\n   */\n  const _removeAttribute = function _removeAttribute(name, element) {\n    try {\n      arrayPush(DOMPurify.removed, {\n        attribute: element.getAttributeNode(name),\n        from: element\n      });\n    } catch (_) {\n      arrayPush(DOMPurify.removed, {\n        attribute: null,\n        from: element\n      });\n    }\n    element.removeAttribute(name);\n    // We void attribute values for unremovable \"is\" attributes\n    if (name === 'is') {\n      if (RETURN_DOM || RETURN_DOM_FRAGMENT) {\n        try {\n          _forceRemove(element);\n        } catch (_) {}\n      } else {\n        try {\n          element.setAttribute(name, '');\n        } catch (_) {}\n      }\n    }\n  };\n  /**\n   * _initDocument\n   *\n   * @param dirty - a string of dirty markup\n   * @return a DOM, filled with the dirty markup\n   */\n  const _initDocument = function _initDocument(dirty) {\n    /* Create a HTML document */\n    let doc = null;\n    let leadingWhitespace = null;\n    if (FORCE_BODY) {\n      dirty = '<remove></remove>' + dirty;\n    } else {\n      /* If FORCE_BODY isn't used, leading whitespace needs to be preserved manually */\n      const matches = stringMatch(dirty, /^[\\r\\n\\t ]+/);\n      leadingWhitespace = matches && matches[0];\n    }\n    if (PARSER_MEDIA_TYPE === 'application/xhtml+xml' && NAMESPACE === HTML_NAMESPACE) {\n      // Root of XHTML doc must contain xmlns declaration (see https://www.w3.org/TR/xhtml1/normative.html#strict)\n      dirty = '<html xmlns=\"http://www.w3.org/1999/xhtml\"><head></head><body>' + dirty + '</body></html>';\n    }\n    const dirtyPayload = trustedTypesPolicy ? _createTrustedHTML(dirty) : dirty;\n    /*\n     * Use the DOMParser API by default, fallback later if needs be\n     * DOMParser not work for svg when has multiple root element.\n     */\n    if (NAMESPACE === HTML_NAMESPACE) {\n      try {\n        doc = new DOMParser().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);\n      } catch (_) {}\n    }\n    /* Use createHTMLDocument in case DOMParser is not available */\n    if (!doc || !doc.documentElement) {\n      doc = implementation.createDocument(NAMESPACE, 'template', null);\n      try {\n        doc.documentElement.innerHTML = IS_EMPTY_INPUT ? emptyHTML : dirtyPayload;\n      } catch (_) {\n        // Syntax error if dirtyPayload is invalid xml\n      }\n    }\n    const body = doc.body || doc.documentElement;\n    if (dirty && leadingWhitespace) {\n      body.insertBefore(document.createTextNode(leadingWhitespace), body.childNodes[0] || null);\n    }\n    /* Work on whole document or just its body */\n    if (NAMESPACE === HTML_NAMESPACE) {\n      return getElementsByTagName.call(doc, WHOLE_DOCUMENT ? 'html' : 'body')[0];\n    }\n    return WHOLE_DOCUMENT ? doc.documentElement : body;\n  };\n  /**\n   * Creates a NodeIterator object that you can use to traverse filtered lists of nodes or elements in a document.\n   *\n   * @param root The root element or node to start traversing on.\n   * @return The created NodeIterator\n   */\n  const _createNodeIterator = function _createNodeIterator(root) {\n    return createNodeIterator.call(root.ownerDocument || root, root,\n    // eslint-disable-next-line no-bitwise\n    NodeFilter.SHOW_ELEMENT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_TEXT | NodeFilter.SHOW_PROCESSING_INSTRUCTION | NodeFilter.SHOW_CDATA_SECTION, null);\n  };\n  /**\n   * Strip template-engine expressions ({{...}}, ${...}, <%...%>) from the\n   * character data of an element subtree. Used as the final safety net for\n   * SAFE_FOR_TEMPLATES on every DOM-returning code path so that expressions\n   * which only form after text-node normalization (e.g. fragments split across\n   * stripped elements) cannot survive into a template-evaluating framework.\n   *\n   * Walks text/comment/CDATA/processing-instruction nodes and mutates `.data`\n   * in place rather than round-tripping through innerHTML. This preserves\n   * descendant node references (important for IN_PLACE callers), avoids a\n   * serialize/reparse cycle, and reads literal character data — which means\n   * `<%...%>` in text content matches the ERB regex against its real bytes\n   * instead of the HTML-entity-escaped form innerHTML would produce.\n   *\n   * Attribute values are not visited here; SAFE_FOR_TEMPLATES handling for\n   * attributes is performed during the per-node `_sanitizeAttributes` pass.\n   *\n   * @param node The root element whose character data should be scrubbed.\n   */\n  const _scrubTemplateExpressions2 = function _scrubTemplateExpressions(node) {\n    var _node$querySelectorAl, _node$querySelectorAl2;\n    node.normalize();\n    const walker = createNodeIterator.call(node.ownerDocument || node, node,\n    // eslint-disable-next-line no-bitwise\n    NodeFilter.SHOW_TEXT | NodeFilter.SHOW_COMMENT | NodeFilter.SHOW_CDATA_SECTION | NodeFilter.SHOW_PROCESSING_INSTRUCTION, null);\n    let currentNode = walker.nextNode();\n    while (currentNode) {\n      let data = currentNode.data;\n      arrayForEach([MUSTACHE_EXPR$1, ERB_EXPR$1, TMPLIT_EXPR$1], expr => {\n        data = stringReplace(data, expr, ' ');\n      });\n      currentNode.data = data;\n      currentNode = walker.nextNode();\n    }\n    // NodeIterator does not descend into <template>.content per the DOM spec,\n    // so we must explicitly recurse into each template's content fragment,\n    // mirroring the approach used by _sanitizeShadowDOM.\n    const templates = (_node$querySelectorAl = (_node$querySelectorAl2 = node.querySelectorAll) === null || _node$querySelectorAl2 === void 0 ? void 0 : _node$querySelectorAl2.call(node, 'template')) !== null && _node$querySelectorAl !== void 0 ? _node$querySelectorAl : [];\n    arrayForEach(Array.from(templates), tmpl => {\n      if (_isDocumentFragment(tmpl.content)) {\n        _scrubTemplateExpressions2(tmpl.content);\n      }\n    });\n  };\n  /**\n   * _isClobbered\n   *\n   * Detect DOM-clobbering on HTMLFormElement nodes. Form is the only HTML\n   * interface with [LegacyOverrideBuiltIns]; a descendant element with a\n   * `name` attribute matching a prototype property shadows that property\n   * on direct reads. We use this check at the IN_PLACE entry-point and\n   * during attribute sanitization to refuse clobbered forms.\n   *\n   * @param element element to check for clobbering attacks\n   * @return true if clobbered, false if safe\n   */\n  const _isClobbered = function _isClobbered(element) {\n    // Realm-independent tag-name probe. If we can't determine the tag\n    // name at all, we can't reason about clobbering — return false\n    // (the caller's other defences still apply).\n    const realTagName = getNodeName ? getNodeName(element) : null;\n    if (typeof realTagName !== 'string') {\n      return false;\n    }\n    if (transformCaseFunc(realTagName) !== 'form') {\n      return false;\n    }\n    return typeof element.nodeName !== 'string' || typeof element.textContent !== 'string' || typeof element.removeChild !== 'function' ||\n    // Realm-safe NamedNodeMap detection: equality against the cached\n    // prototype getter. Clobbered .attributes (e.g. <input name=\"attributes\">)\n    // makes the direct read diverge from the cached read; a clean form\n    // (same-realm OR foreign-realm) has both reads pointing at the same\n    // canonical NamedNodeMap.\n    element.attributes !== getAttributes(element) || typeof element.removeAttribute !== 'function' || typeof element.setAttribute !== 'function' || typeof element.namespaceURI !== 'string' || typeof element.insertBefore !== 'function' || typeof element.hasChildNodes !== 'function' ||\n    // NodeType clobbering probe. Cached Node.prototype.nodeType getter\n    // returns the integer 1 for any Element regardless of realm; direct\n    // read on a clobbered form (e.g. <input name=\"nodeType\">) returns\n    // the named child element. Cheap addition — nodeType is read from\n    // an internal slot, no serialization cost — and removes a residual\n    // clobbering surface used by several mXSS / PI / comment branches\n    // in _sanitizeElements that compare currentNode.nodeType directly.\n    element.nodeType !== getNodeType(element) ||\n    // HTMLFormElement has [LegacyOverrideBuiltIns]: a descendant named\n    // \"childNodes\" shadows the prototype getter. Direct reads of\n    // form.childNodes from a clobbered form return the named child\n    // instead of the real NodeList, so any walk that reads it directly\n    // skips the form's real children. Compare the direct read to the\n    // cached Node.prototype getter — when the form's named-property\n    // getter intercepts the read, the two values differ and we flag\n    // the form. This catches every clobbering child type (input,\n    // select, etc.) regardless of whether the named child happens to\n    // carry a numeric .length, which a typeof-based probe would miss\n    // (e.g. HTMLSelectElement.length is a defined unsigned-long).\n    element.childNodes !== getChildNodes(element);\n  };\n  /**\n   * Checks whether the given value is a DocumentFragment from any realm.\n   *\n   * The realm-independent replacement reads `nodeType` through the cached\n   * Node.prototype getter and compares to the DOCUMENT_FRAGMENT_NODE\n   * constant (11). nodeType is a numeric value resolved from the node's\n   * internal slot, identical across realms for the same kind of node.\n   *\n   * @param value object to check\n   * @return true if value is a DocumentFragment-shaped node from any realm\n   */\n  const _isDocumentFragment = function _isDocumentFragment(value) {\n    if (!getNodeType || typeof value !== 'object' || value === null) {\n      return false;\n    }\n    try {\n      return getNodeType(value) === NODE_TYPE.documentFragment;\n    } catch (_) {\n      return false;\n    }\n  };\n  /**\n   * Checks whether the given object is a DOM node, including nodes that\n   * originate from a different window/realm (e.g. an iframe's\n   * contentDocument). The previous `value instanceof Node` check was\n   * realm-bound: nodes from a different window failed it, causing\n   * sanitize() to silently stringify them and reset IN_PLACE to false,\n   * returning the original node unsanitized. See GHSA-4w3q-35jp-p934.\n   *\n   * @param value object to check whether it's a DOM node\n   * @return true if value is a DOM node from any realm\n   */\n  const _isNode = function _isNode(value) {\n    if (!getNodeType || typeof value !== 'object' || value === null) {\n      return false;\n    }\n    try {\n      return typeof getNodeType(value) === 'number';\n    } catch (_) {\n      return false;\n    }\n  };\n  function _executeHooks(hooks, currentNode, data) {\n    arrayForEach(hooks, hook => {\n      hook.call(DOMPurify, currentNode, data, CONFIG);\n    });\n  }\n  /**\n   * _sanitizeElements\n   *\n   * @protect nodeName\n   * @protect textContent\n   * @protect removeChild\n   * @param currentNode to check for permission to exist\n   * @return true if node was killed, false if left alive\n   */\n  const _sanitizeElements = function _sanitizeElements(currentNode) {\n    let content = null;\n    /* Execute a hook if present */\n    _executeHooks(hooks.beforeSanitizeElements, currentNode, null);\n    /* Check if element is clobbered or can clobber */\n    if (_isClobbered(currentNode)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n    /* Now let's check the element's type and name */\n    const tagName = transformCaseFunc(getNodeName ? getNodeName(currentNode) : currentNode.nodeName);\n    /* Execute a hook if present */\n    _executeHooks(hooks.uponSanitizeElement, currentNode, {\n      tagName,\n      allowedTags: ALLOWED_TAGS\n    });\n    /* Detect mXSS attempts abusing namespace confusion */\n    if (SAFE_FOR_XML && currentNode.hasChildNodes() && !_isNode(currentNode.firstElementChild) && regExpTest(/<[/\\w!]/g, currentNode.innerHTML) && regExpTest(/<[/\\w!]/g, currentNode.textContent)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n    /* Remove risky CSS construction leading to mXSS */\n    if (SAFE_FOR_XML && currentNode.namespaceURI === HTML_NAMESPACE && tagName === 'style' && _isNode(currentNode.firstElementChild)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n    /* Remove any occurrence of processing instructions */\n    if (currentNode.nodeType === NODE_TYPE.progressingInstruction) {\n      _forceRemove(currentNode);\n      return true;\n    }\n    /* Remove any kind of possibly harmful comments */\n    if (SAFE_FOR_XML && currentNode.nodeType === NODE_TYPE.comment && regExpTest(/<[/\\w]/g, currentNode.data)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n    /* Remove element if anything forbids its presence */\n    if (FORBID_TAGS[tagName] || !(EXTRA_ELEMENT_HANDLING.tagCheck instanceof Function && EXTRA_ELEMENT_HANDLING.tagCheck(tagName)) && !ALLOWED_TAGS[tagName]) {\n      /* Check if we have a custom element to handle */\n      if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {\n        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)) {\n          return false;\n        }\n        if (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)) {\n          return false;\n        }\n      }\n      /* Keep content except for bad-listed elements.\n         Use the cached prototype getters exclusively — the previous code\n         had `|| currentNode.parentNode` / `|| currentNode.childNodes`\n         fallbacks, but the cached getters always return the canonical\n         value (or null for a real parent-less node), so the fallback\n         path was dead in safe cases and a clobbering surface in unsafe\n         ones. Falsy cached results stay falsy; the `if (childNodes &&\n         parentNode)` check already gates correctly. */\n      if (KEEP_CONTENT && !FORBID_CONTENTS[tagName]) {\n        const parentNode = getParentNode(currentNode);\n        const childNodes = getChildNodes(currentNode);\n        if (childNodes && parentNode) {\n          const childCount = childNodes.length;\n          for (let i = childCount - 1; i >= 0; --i) {\n            const childClone = cloneNode(childNodes[i], true);\n            parentNode.insertBefore(childClone, getNextSibling(currentNode));\n          }\n        }\n      }\n      _forceRemove(currentNode);\n      return true;\n    }\n    /* Check whether element has a valid namespace.\n       Realm-safe check (GHSA-hpcv-96wg-7vj8): use the cached Node.prototype\n       nodeType getter rather than `instanceof Element`, which is realm-\n       bound and short-circuits to false for any node minted in a different\n       realm — letting a foreign-realm element with a forbidden namespace\n       slip past the namespace check entirely. */\n    const nt = getNodeType ? getNodeType(currentNode) : currentNode.nodeType;\n    if (nt === NODE_TYPE.element && !_checkValidNamespace(currentNode)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n    /* Make sure that older browsers don't get fallback-tag mXSS */\n    if ((tagName === 'noscript' || tagName === 'noembed' || tagName === 'noframes') && regExpTest(/<\\/no(script|embed|frames)/i, currentNode.innerHTML)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n    /* Sanitize element content to be template-safe */\n    if (SAFE_FOR_TEMPLATES && currentNode.nodeType === NODE_TYPE.text) {\n      /* Get the element's text content */\n      content = currentNode.textContent;\n      arrayForEach([MUSTACHE_EXPR$1, ERB_EXPR$1, TMPLIT_EXPR$1], expr => {\n        content = stringReplace(content, expr, ' ');\n      });\n      if (currentNode.textContent !== content) {\n        arrayPush(DOMPurify.removed, {\n          element: currentNode.cloneNode()\n        });\n        currentNode.textContent = content;\n      }\n    }\n    /* Execute a hook if present */\n    _executeHooks(hooks.afterSanitizeElements, currentNode, null);\n    return false;\n  };\n  /**\n   * _isValidAttribute\n   *\n   * @param lcTag Lowercase tag name of containing element.\n   * @param lcName Lowercase attribute name.\n   * @param value Attribute value.\n   * @return Returns true if `value` is valid, otherwise false.\n   */\n  // eslint-disable-next-line complexity\n  const _isValidAttribute = function _isValidAttribute(lcTag, lcName, value) {\n    /* FORBID_ATTR must always win, even if ADD_ATTR predicate would allow it */\n    if (FORBID_ATTR[lcName]) {\n      return false;\n    }\n    /* Make sure attribute cannot clobber */\n    if (SANITIZE_DOM && (lcName === 'id' || lcName === 'name') && (value in document || value in formElement)) {\n      return false;\n    }\n    const nameIsPermitted = ALLOWED_ATTR[lcName] || EXTRA_ELEMENT_HANDLING.attributeCheck instanceof Function && EXTRA_ELEMENT_HANDLING.attributeCheck(lcName, lcTag);\n    /* Allow valid data-* attributes: At least one character after \"-\"\n        (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)\n        XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)\n        We don't need to check the value; it's always URI safe. */\n    if (ALLOW_DATA_ATTR && !FORBID_ATTR[lcName] && regExpTest(DATA_ATTR$1, lcName)) ; else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR$1, lcName)) ; else if (!nameIsPermitted || FORBID_ATTR[lcName]) {\n      if (\n      // First condition does a very basic check if a) it's basically a valid custom element tagname AND\n      // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck\n      // and c) if the attribute name passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.attributeNameCheck\n      _isBasicCustomElement(lcTag) && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag)) && (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName) || CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName, lcTag)) ||\n      // Alternative, second condition checks if it's an `is`-attribute, AND\n      // the value passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck\n      lcName === 'is' && CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements && (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp && regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, value) || CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function && CUSTOM_ELEMENT_HANDLING.tagNameCheck(value))) ; else {\n        return false;\n      }\n      /* Check value is safe. First, is attr inert? If so, is safe */\n    } else if (URI_SAFE_ATTRIBUTES[lcName]) ; else if (regExpTest(IS_ALLOWED_URI$1, stringReplace(value, ATTR_WHITESPACE$1, ''))) ; else if ((lcName === 'src' || lcName === 'xlink:href' || lcName === 'href') && lcTag !== 'script' && stringIndexOf(value, 'data:') === 0 && DATA_URI_TAGS[lcTag]) ; else if (ALLOW_UNKNOWN_PROTOCOLS && !regExpTest(IS_SCRIPT_OR_DATA$1, stringReplace(value, ATTR_WHITESPACE$1, ''))) ; else if (value) {\n      return false;\n    } else ;\n    return true;\n  };\n  /* Names the HTML spec reserves from valid-custom-element-name; these must\n   * never be treated as basic custom elements even when a permissive\n   * CUSTOM_ELEMENT_HANDLING.tagNameCheck is configured. */\n  const RESERVED_CUSTOM_ELEMENT_NAMES = addToSet({}, ['annotation-xml', 'color-profile', 'font-face', 'font-face-format', 'font-face-name', 'font-face-src', 'font-face-uri', 'missing-glyph']);\n  /**\n   * _isBasicCustomElement\n   * checks if at least one dash is included in tagName, and it's not the first char\n   * for more sophisticated checking see https://github.com/sindresorhus/validate-element-name\n   *\n   * @param tagName name of the tag of the node to sanitize\n   * @returns Returns true if the tag name meets the basic criteria for a custom element, otherwise false.\n   */\n  const _isBasicCustomElement = function _isBasicCustomElement(tagName) {\n    return !RESERVED_CUSTOM_ELEMENT_NAMES[stringToLowerCase(tagName)] && regExpTest(CUSTOM_ELEMENT$1, tagName);\n  };\n  /**\n   * _sanitizeAttributes\n   *\n   * @protect attributes\n   * @protect nodeName\n   * @protect removeAttribute\n   * @protect setAttribute\n   *\n   * @param currentNode to sanitize\n   */\n  const _sanitizeAttributes = function _sanitizeAttributes(currentNode) {\n    /* Execute a hook if present */\n    _executeHooks(hooks.beforeSanitizeAttributes, currentNode, null);\n    const attributes = currentNode.attributes;\n    /* Check if we have attributes; if not we might have a text node */\n    if (!attributes || _isClobbered(currentNode)) {\n      return;\n    }\n    const hookEvent = {\n      attrName: '',\n      attrValue: '',\n      keepAttr: true,\n      allowedAttributes: ALLOWED_ATTR,\n      forceKeepAttr: undefined\n    };\n    let l = attributes.length;\n    /* Go backwards over all attributes; safely remove bad ones */\n    while (l--) {\n      const attr = attributes[l];\n      const name = attr.name,\n        namespaceURI = attr.namespaceURI,\n        attrValue = attr.value;\n      const lcName = transformCaseFunc(name);\n      const initValue = attrValue;\n      let value = name === 'value' ? initValue : stringTrim(initValue);\n      /* Execute a hook if present */\n      hookEvent.attrName = lcName;\n      hookEvent.attrValue = value;\n      hookEvent.keepAttr = true;\n      hookEvent.forceKeepAttr = undefined; // Allows developers to see this is a property they can set\n      _executeHooks(hooks.uponSanitizeAttribute, currentNode, hookEvent);\n      value = hookEvent.attrValue;\n      /* Full DOM Clobbering protection via namespace isolation,\n       * Prefix id and name attributes with `user-content-`\n       */\n      if (SANITIZE_NAMED_PROPS && (lcName === 'id' || lcName === 'name') && stringIndexOf(value, SANITIZE_NAMED_PROPS_PREFIX) !== 0) {\n        // Remove the attribute with this value\n        _removeAttribute(name, currentNode);\n        // Prefix the value and later re-create the attribute with the sanitized value\n        value = SANITIZE_NAMED_PROPS_PREFIX + value;\n      }\n      // Else: already prefixed, leave the attribute alone — the prefix is\n      // itself the clobbering protection, and re-applying it is incorrect.\n      /* Work around a security issue with comments inside attributes */\n      if (SAFE_FOR_XML && regExpTest(/((--!?|])>)|<\\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i, value)) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n      /* Make sure we cannot easily use animated hrefs, even if animations are allowed */\n      if (lcName === 'attributename' && stringMatch(value, 'href')) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n      /* Did the hooks approve of the attribute? */\n      if (hookEvent.forceKeepAttr) {\n        continue;\n      }\n      /* Did the hooks approve of the attribute? */\n      if (!hookEvent.keepAttr) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n      /* Work around a security issue in jQuery 3.0 */\n      if (!ALLOW_SELF_CLOSE_IN_ATTR && regExpTest(/\\/>/i, value)) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n      /* Sanitize attribute content to be template-safe */\n      if (SAFE_FOR_TEMPLATES) {\n        arrayForEach([MUSTACHE_EXPR$1, ERB_EXPR$1, TMPLIT_EXPR$1], expr => {\n          value = stringReplace(value, expr, ' ');\n        });\n      }\n      /* Is `value` valid for this attribute? */\n      const lcTag = transformCaseFunc(currentNode.nodeName);\n      if (!_isValidAttribute(lcTag, lcName, value)) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n      /* Handle attributes that require Trusted Types */\n      if (trustedTypesPolicy && typeof trustedTypes === 'object' && typeof trustedTypes.getAttributeType === 'function') {\n        if (namespaceURI) ; else {\n          switch (trustedTypes.getAttributeType(lcTag, lcName)) {\n            case 'TrustedHTML':\n              {\n                value = _createTrustedHTML(value);\n                break;\n              }\n            case 'TrustedScriptURL':\n              {\n                value = trustedTypesPolicy.createScriptURL(value);\n                break;\n              }\n          }\n        }\n      }\n      /* Handle invalid data-* attribute set by try-catching it */\n      if (value !== initValue) {\n        try {\n          if (namespaceURI) {\n            currentNode.setAttributeNS(namespaceURI, name, value);\n          } else {\n            /* Fallback to setAttribute() for browser-unrecognized namespaces e.g. \"x-schema\". */\n            currentNode.setAttribute(name, value);\n          }\n          if (_isClobbered(currentNode)) {\n            _forceRemove(currentNode);\n          } else {\n            arrayPop(DOMPurify.removed);\n          }\n        } catch (_) {\n          _removeAttribute(name, currentNode);\n        }\n      }\n    }\n    /* Execute a hook if present */\n    _executeHooks(hooks.afterSanitizeAttributes, currentNode, null);\n  };\n  /**\n   * _sanitizeShadowDOM\n   *\n   * @param fragment to iterate over recursively\n   */\n  const _sanitizeShadowDOM2 = function _sanitizeShadowDOM(fragment) {\n    let shadowNode = null;\n    const shadowIterator = _createNodeIterator(fragment);\n    /* Execute a hook if present */\n    _executeHooks(hooks.beforeSanitizeShadowDOM, fragment, null);\n    while (shadowNode = shadowIterator.nextNode()) {\n      /* Execute a hook if present */\n      _executeHooks(hooks.uponSanitizeShadowNode, shadowNode, null);\n      /* Sanitize tags and elements */\n      _sanitizeElements(shadowNode);\n      /* Check attributes next */\n      _sanitizeAttributes(shadowNode);\n      /* Deep shadow DOM detected.\n         Realm-safe check (GHSA-hpcv-96wg-7vj8): use nodeType against the\n         DOCUMENT_FRAGMENT_NODE constant rather than instanceof, so we\n         recurse into <template>.content from foreign realms too. */\n      if (_isDocumentFragment(shadowNode.content)) {\n        _sanitizeShadowDOM2(shadowNode.content);\n      }\n      /* An element iterated here may itself host an attached\n         shadow root. The default NodeIterator does not enter shadow\n         trees, so a shadow root nested inside template.content was\n         previously reached by no walk at all (the pre-pass at\n         _sanitizeAttachedShadowRoots descends via childNodes, which\n         doesn't enter template.content; the template-content recursion\n         above iterates the content but never inspected shadowRoot).\n         Walk it explicitly. The nodeType guard avoids reading\n         shadowRoot off text / comment / CDATA / PI nodes that the\n         iterator also surfaces. */\n      const shadowNodeType = getNodeType ? getNodeType(shadowNode) : shadowNode.nodeType;\n      if (shadowNodeType === NODE_TYPE.element) {\n        const innerSr = getShadowRoot ? getShadowRoot(shadowNode) : shadowNode.shadowRoot;\n        if (_isDocumentFragment(innerSr)) {\n          _sanitizeAttachedShadowRoots2(innerSr);\n          _sanitizeShadowDOM2(innerSr);\n        }\n      }\n    }\n    /* Execute a hook if present */\n    _executeHooks(hooks.afterSanitizeShadowDOM, fragment, null);\n  };\n  /**\n   * _sanitizeAttachedShadowRoots\n   *\n   * Walks `root` and feeds every attached shadow root we encounter into\n   * the existing _sanitizeShadowDOM pipeline. The default node iterator\n   * does not descend into shadow trees, so nodes inside an attached\n   * shadow root would otherwise be skipped entirely.\n   *\n   * Two real input paths put attached shadow roots in front of us:\n   *   1. IN_PLACE on a DOM node that already has shadow roots attached.\n   *   2. DOM-node input where importNode(dirty, true) deep-clones the\n   *      shadow root because it was created with `clonable: true`.\n   *\n   * This pass runs once, up front, so the main iteration loop (and the\n   * existing _sanitizeShadowDOM template-content recursion) stay\n   * untouched — string-input paths are not affected.\n   *\n   * @param root the subtree root to walk for attached shadow roots\n   */\n  const _sanitizeAttachedShadowRoots2 = function _sanitizeAttachedShadowRoots(root) {\n    const nodeType = getNodeType ? getNodeType(root) : root.nodeType;\n    if (nodeType === NODE_TYPE.element) {\n      const sr = getShadowRoot ? getShadowRoot(root) : root.shadowRoot;\n      // Realm-safe check (GHSA-hpcv-96wg-7vj8): use nodeType-based\n      // detection rather than `instanceof DocumentFragment`, which is\n      // realm-bound and silently skipped shadow roots whose host element\n      // belonged to a foreign realm (e.g. iframe.contentDocument\n      // attachShadow). A foreign-realm ShadowRoot extends the foreign\n      // realm's DocumentFragment, not ours, so the old instanceof check\n      // returned false and the shadow subtree was never walked.\n      if (_isDocumentFragment(sr)) {\n        // Recurse first so that nested shadow roots are reached even if\n        // _sanitizeShadowDOM removes hosts at this level.\n        _sanitizeAttachedShadowRoots2(sr);\n        _sanitizeShadowDOM2(sr);\n      }\n    }\n    // Snapshot children before recursing. Sanitization of one subtree\n    // (e.g. via an uponSanitizeShadowNode hook) may detach siblings,\n    // and naive nextSibling traversal would silently skip the rest of\n    // the list once a node is detached.\n    const childNodes = getChildNodes ? getChildNodes(root) : root.childNodes;\n    if (!childNodes) {\n      return;\n    }\n    const snapshot = [];\n    arrayForEach(childNodes, child => {\n      arrayPush(snapshot, child);\n    });\n    for (const child of snapshot) {\n      _sanitizeAttachedShadowRoots2(child);\n    }\n    /* When the root is a <template>, also descend into root.content */\n    if (nodeType === NODE_TYPE.element) {\n      const rootName = getNodeName ? getNodeName(root) : null;\n      if (typeof rootName === 'string' && transformCaseFunc(rootName) === 'template') {\n        const content = root.content;\n        if (_isDocumentFragment(content)) {\n          _sanitizeAttachedShadowRoots2(content);\n        }\n      }\n    }\n  };\n  // eslint-disable-next-line complexity\n  DOMPurify.sanitize = function (dirty) {\n    let cfg = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : {};\n    let body = null;\n    let importedNode = null;\n    let currentNode = null;\n    let returnNode = null;\n    /* Make sure we have a string to sanitize.\n      DO NOT return early, as this will return the wrong type if\n      the user has requested a DOM object rather than a string */\n    IS_EMPTY_INPUT = !dirty;\n    if (IS_EMPTY_INPUT) {\n      dirty = '<!-->';\n    }\n    /* Stringify, in case dirty is an object */\n    if (typeof dirty !== 'string' && !_isNode(dirty)) {\n      dirty = stringifyValue(dirty);\n      if (typeof dirty !== 'string') {\n        throw typeErrorCreate('dirty is not a string, aborting');\n      }\n    }\n    /* Return dirty HTML if DOMPurify cannot run */\n    if (!DOMPurify.isSupported) {\n      return dirty;\n    }\n    /* Assign config vars */\n    if (!SET_CONFIG) {\n      _parseConfig(cfg);\n    }\n    /* Clean up removed elements */\n    DOMPurify.removed = [];\n    /* Check if dirty is correctly typed for IN_PLACE */\n    if (typeof dirty === 'string') {\n      IN_PLACE = false;\n    }\n    if (IN_PLACE) {\n      /* Do some early pre-sanitization to avoid unsafe root nodes.\n         Read nodeName through the cached prototype getter — a clobbering\n         child named \"nodeName\" on the form root would otherwise shadow\n         the property and let this check skip the root-allowlist\n         validation entirely. */\n      const nn = getNodeName ? getNodeName(dirty) : dirty.nodeName;\n      if (typeof nn === 'string') {\n        const tagName = transformCaseFunc(nn);\n        if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {\n          throw typeErrorCreate('root node is forbidden and cannot be sanitized in-place');\n        }\n      }\n      /* Pre-flight the root through _isClobbered. The iterator-driven\n         removal path can not detach a parent-less root: _forceRemove\n         falls through to Element.prototype.remove(), which per spec\n         is a no-op on a node with no parent. A clobbered root would\n         then survive the main loop with its attributes uninspected,\n         because _sanitizeAttributes early-returns on _isClobbered. The\n         result would be an attacker-controlled form, complete with any\n         event-handler attributes the caller passed in, handed back to\n         the application unsanitized. Refuse to sanitize such a root\n         the same way we refuse a forbidden tag. GHSA-r47g-fvhr-h676. */\n      if (_isClobbered(dirty)) {\n        throw typeErrorCreate('root node is clobbered and cannot be sanitized in-place');\n      }\n      /* Sanitize attached shadow roots before the main iterator runs.\n         The iterator does not descend into shadow trees. */\n      _sanitizeAttachedShadowRoots2(dirty);\n    } else if (_isNode(dirty)) {\n      /* If dirty is a DOM element, append to an empty document to avoid\n         elements being stripped by the parser */\n      body = _initDocument('<!---->');\n      importedNode = body.ownerDocument.importNode(dirty, true);\n      if (importedNode.nodeType === NODE_TYPE.element && importedNode.nodeName === 'BODY') {\n        /* Node is already a body, use as is */\n        body = importedNode;\n      } else if (importedNode.nodeName === 'HTML') {\n        body = importedNode;\n      } else {\n        // eslint-disable-next-line unicorn/prefer-dom-node-append\n        body.appendChild(importedNode);\n      }\n      /* Clonable shadow roots are deep-cloned by importNode(); sanitize\n         them before the main iterator runs, since the iterator does not\n         descend into shadow trees. The walk routes every read through a\n         cached prototype getter so clobbering descendants on a form root\n         cannot hide a shadow host from this pass. */\n      _sanitizeAttachedShadowRoots2(importedNode);\n    } else {\n      /* Exit directly if we have nothing to do */\n      if (!RETURN_DOM && !SAFE_FOR_TEMPLATES && !WHOLE_DOCUMENT &&\n      // eslint-disable-next-line unicorn/prefer-includes\n      dirty.indexOf('<') === -1) {\n        return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? _createTrustedHTML(dirty) : dirty;\n      }\n      /* Initialize the document to work on */\n      body = _initDocument(dirty);\n      /* Check we have a DOM node from the data */\n      if (!body) {\n        return RETURN_DOM ? null : RETURN_TRUSTED_TYPE ? emptyHTML : '';\n      }\n    }\n    /* Remove first element node (ours) if FORCE_BODY is set */\n    if (body && FORCE_BODY) {\n      _forceRemove(body.firstChild);\n    }\n    /* Get node iterator */\n    const nodeIterator = _createNodeIterator(IN_PLACE ? dirty : body);\n    /* Now start iterating over the created document */\n    while (currentNode = nodeIterator.nextNode()) {\n      /* Sanitize tags and elements */\n      _sanitizeElements(currentNode);\n      /* Check attributes next */\n      _sanitizeAttributes(currentNode);\n      /* Shadow DOM detected, sanitize it.\n         Realm-safe check (GHSA-hpcv-96wg-7vj8): nodeType-based detection\n         instead of instanceof, so foreign-realm <template>.content is\n         walked correctly. */\n      if (_isDocumentFragment(currentNode.content)) {\n        _sanitizeShadowDOM2(currentNode.content);\n      }\n    }\n    /* If we sanitized `dirty` in-place, return it. */\n    if (IN_PLACE) {\n      if (SAFE_FOR_TEMPLATES) {\n        _scrubTemplateExpressions2(dirty);\n      }\n      return dirty;\n    }\n    /* Return sanitized string or DOM */\n    if (RETURN_DOM) {\n      if (SAFE_FOR_TEMPLATES) {\n        _scrubTemplateExpressions2(body);\n      }\n      if (RETURN_DOM_FRAGMENT) {\n        returnNode = createDocumentFragment.call(body.ownerDocument);\n        while (body.firstChild) {\n          // eslint-disable-next-line unicorn/prefer-dom-node-append\n          returnNode.appendChild(body.firstChild);\n        }\n      } else {\n        returnNode = body;\n      }\n      if (ALLOWED_ATTR.shadowroot || ALLOWED_ATTR.shadowrootmode) {\n        /*\n          AdoptNode() is not used because internal state is not reset\n          (e.g. the past names map of a HTMLFormElement), this is safe\n          in theory but we would rather not risk another attack vector.\n          The state that is cloned by importNode() is explicitly defined\n          by the specs.\n        */\n        returnNode = importNode.call(originalDocument, returnNode, true);\n      }\n      return returnNode;\n    }\n    let serializedHTML = WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;\n    /* Serialize doctype if allowed */\n    if (WHOLE_DOCUMENT && ALLOWED_TAGS['!doctype'] && body.ownerDocument && body.ownerDocument.doctype && body.ownerDocument.doctype.name && regExpTest(DOCTYPE_NAME, body.ownerDocument.doctype.name)) {\n      serializedHTML = '<!DOCTYPE ' + body.ownerDocument.doctype.name + '>\\n' + serializedHTML;\n    }\n    /* Sanitize final string template-safe */\n    if (SAFE_FOR_TEMPLATES) {\n      arrayForEach([MUSTACHE_EXPR$1, ERB_EXPR$1, TMPLIT_EXPR$1], expr => {\n        serializedHTML = stringReplace(serializedHTML, expr, ' ');\n      });\n    }\n    return trustedTypesPolicy && RETURN_TRUSTED_TYPE ? _createTrustedHTML(serializedHTML) : serializedHTML;\n  };\n  DOMPurify.setConfig = function () {\n    let cfg = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};\n    _parseConfig(cfg);\n    SET_CONFIG = true;\n  };\n  DOMPurify.clearConfig = function () {\n    CONFIG = null;\n    SET_CONFIG = false;\n  };\n  DOMPurify.isValidAttribute = function (tag, attr, value) {\n    /* Initialize shared config vars if necessary. */\n    if (!CONFIG) {\n      _parseConfig({});\n    }\n    const lcTag = transformCaseFunc(tag);\n    const lcName = transformCaseFunc(attr);\n    return _isValidAttribute(lcTag, lcName, value);\n  };\n  DOMPurify.addHook = function (entryPoint, hookFunction) {\n    if (typeof hookFunction !== 'function') {\n      return;\n    }\n    arrayPush(hooks[entryPoint], hookFunction);\n  };\n  DOMPurify.removeHook = function (entryPoint, hookFunction) {\n    if (hookFunction !== undefined) {\n      const index = arrayLastIndexOf(hooks[entryPoint], hookFunction);\n      return index === -1 ? undefined : arraySplice(hooks[entryPoint], index, 1)[0];\n    }\n    return arrayPop(hooks[entryPoint]);\n  };\n  DOMPurify.removeHooks = function (entryPoint) {\n    hooks[entryPoint] = [];\n  };\n  DOMPurify.removeAllHooks = function () {\n    hooks = _createHooksMap();\n  };\n  return DOMPurify;\n}\nvar purify = createDOMPurify();\n\nexport { purify as default };\n//# sourceMappingURL=purify.es.mjs.map\n","/**\n * SPDX-License-Identifier: AGPL-3.0-or-later\n * Copyright (c) 2026 Jacob Bühler\n */\nimport DOMPurify from 'dompurify'\n\n/**\n * Client-side defense-in-depth for snapshot HTML.\n *\n * Snapshot HTML stored in `.pad` files is already sanitized server-side by\n * `SnapshotHtmlSanitizer` before it reaches the browser, but `.pad` bodies are\n * attacker-writable (WebDAV / a malicious share) and that server pass is the\n * sole XSS gate. Since the viewer and embed inject the HTML via `innerHTML`,\n * we run it through DOMPurify with the *same* allowlist the server enforces\n * (formatting tags only, no attributes) so a regression in the server gate\n * can't turn into stored XSS.\n *\n * Mirrors `SnapshotHtmlSanitizer::ALLOWED_TAGS`.\n */\nconst ALLOWED_TAGS = [\n\t'p', 'br',\n\t'ul', 'ol', 'li',\n\t'h1', 'h2', 'h3', 'h4', 'h5', 'h6',\n\t'strong', 'b', 'em', 'i', 'u', 's', 'del',\n\t'blockquote', 'pre', 'code',\n]\n\n/**\n * @param {unknown} html\n * @return {string} sanitized HTML safe to assign to innerHTML\n */\nexport function sanitizeSnapshotHtml(html) {\n\treturn DOMPurify.sanitize(String(html ?? ''), {\n\t\tALLOWED_TAGS,\n\t\tALLOWED_ATTR: [],\n\t\t// No data URIs, no unknown protocols — there are no attributes anyway.\n\t\tALLOW_DATA_ATTR: false,\n\t})\n}\n"],"names":["createPadSync","requestToken","fetchImpl","doFetch","args","getToken","syncUrl","intervalMs","syncPromise","activeSyncForce","pendingForcedSync","pendingForcedKeepalive","timerId","visibilityHandler","pageHideHandler","configure","url","ms","stop","start","fireAndForget","force","keepalive","sync","currentPromise","response","data","result","syncError","error","rerunForcedSync","rerunKeepalive","_arrayLikeToArray","r","a","e","n","_arrayWithHoles","_iterableToArrayLimit","l","t","i","u","f","o","_nonIterableRest","_slicedToArray","_unsupportedIterableToArray","entries","setPrototypeOf","isFrozen","getPrototypeOf","getOwnPropertyDescriptor","freeze","seal","create","_ref","apply","construct","x","func","thisArg","_len","_key","Func","_len2","_key2","arrayForEach","unapply","arrayLastIndexOf","arrayPop","arrayPush","arraySplice","arrayIsArray","stringToLowerCase","stringToString","stringMatch","stringReplace","stringIndexOf","stringTrim","numberToString","booleanToString","bigintToString","symbolToString","objectHasOwnProperty","objectToString","regExpTest","typeErrorCreate","unconstruct","_len3","_key3","_len4","_key4","addToSet","set","array","transformCaseFunc","element","lcElement","cleanArray","index","clone","object","newObject","_ref2","_ref3","property","value","stringifyValue","valueAsRecord","valueToString","lookupGetter","stringified","prop","desc","fallbackValue","isRegex","html$1","svg$1","svgFilters","svgDisallowed","mathMl$1","mathMlDisallowed","text","html","svg","mathMl","xml","MUSTACHE_EXPR","ERB_EXPR","TMPLIT_EXPR","DATA_ATTR","ARIA_ATTR","IS_ALLOWED_URI","IS_SCRIPT_OR_DATA","ATTR_WHITESPACE","DOCTYPE_NAME","CUSTOM_ELEMENT","NODE_TYPE","getGlobal","_createTrustedTypesPolicy","trustedTypes","purifyHostElement","suffix","ATTR_NAME","policyName","scriptUrl","_createHooksMap","createDOMPurify","window","DOMPurify","root","document","originalDocument","currentScript","HTMLTemplateElement","Node","Element","NodeFilter","DOMParser","ElementPrototype","cloneNode","remove","getNextSibling","getChildNodes","getParentNode","getShadowRoot","getAttributes","getNodeType","getNodeName","template","trustedTypesPolicy","emptyHTML","IN_POLICY_CREATE_HTML","_createTrustedHTML","_document","implementation","createNodeIterator","createDocumentFragment","getElementsByTagName","importNode","hooks","MUSTACHE_EXPR$1","ERB_EXPR$1","TMPLIT_EXPR$1","DATA_ATTR$1","ARIA_ATTR$1","IS_SCRIPT_OR_DATA$1","ATTR_WHITESPACE$1","CUSTOM_ELEMENT$1","IS_ALLOWED_URI$1","ALLOWED_TAGS","DEFAULT_ALLOWED_TAGS","ALLOWED_ATTR","DEFAULT_ALLOWED_ATTR","CUSTOM_ELEMENT_HANDLING","FORBID_TAGS","FORBID_ATTR","EXTRA_ELEMENT_HANDLING","ALLOW_ARIA_ATTR","ALLOW_DATA_ATTR","ALLOW_UNKNOWN_PROTOCOLS","ALLOW_SELF_CLOSE_IN_ATTR","SAFE_FOR_TEMPLATES","SAFE_FOR_XML","WHOLE_DOCUMENT","SET_CONFIG","FORCE_BODY","RETURN_DOM","RETURN_DOM_FRAGMENT","RETURN_TRUSTED_TYPE","SANITIZE_DOM","SANITIZE_NAMED_PROPS","SANITIZE_NAMED_PROPS_PREFIX","KEEP_CONTENT","IN_PLACE","USE_PROFILES","FORBID_CONTENTS","DEFAULT_FORBID_CONTENTS","DATA_URI_TAGS","DEFAULT_DATA_URI_TAGS","URI_SAFE_ATTRIBUTES","DEFAULT_URI_SAFE_ATTRIBUTES","MATHML_NAMESPACE","SVG_NAMESPACE","HTML_NAMESPACE","NAMESPACE","IS_EMPTY_INPUT","ALLOWED_NAMESPACES","DEFAULT_ALLOWED_NAMESPACES","MATHML_TEXT_INTEGRATION_POINTS","HTML_INTEGRATION_POINTS","COMMON_SVG_AND_HTML_ELEMENTS","PARSER_MEDIA_TYPE","SUPPORTED_PARSER_MEDIA_TYPES","DEFAULT_PARSER_MEDIA_TYPE","CONFIG","formElement","isRegexOrFunction","testValue","_parseConfig","cfg","customElementHandling","previousTrustedTypesPolicy","ALL_SVG_TAGS","ALL_MATHML_TAGS","_checkValidNamespace","parent","tagName","parentTagName","_forceRemove","node","_removeAttribute","name","_initDocument","dirty","doc","leadingWhitespace","matches","dirtyPayload","body","_createNodeIterator","_scrubTemplateExpressions2","_node$querySelectorAl","_node$querySelectorAl2","walker","currentNode","expr","templates","tmpl","_isDocumentFragment","_isClobbered","realTagName","_isNode","_executeHooks","hook","_sanitizeElements","content","_isBasicCustomElement","parentNode","childNodes","childCount","childClone","_isValidAttribute","lcTag","lcName","nameIsPermitted","RESERVED_CUSTOM_ELEMENT_NAMES","_sanitizeAttributes","attributes","hookEvent","attr","namespaceURI","attrValue","initValue","_sanitizeShadowDOM2","fragment","shadowNode","shadowIterator","innerSr","_sanitizeAttachedShadowRoots2","nodeType","sr","snapshot","child","rootName","importedNode","returnNode","nn","nodeIterator","serializedHTML","tag","entryPoint","hookFunction","purify","sanitizeSnapshotHtml"],"mappings":"AAqBO,SAASA,GAAc,CAAE,aAAAC,EAAc,UAAAC,CAAS,EAAK,CAAA,EAAI,CAC/D,MAAMC,EAAU,OAAOD,GAAc,WAAaA,EAAY,IAAIE,IAAS,OAAO,MAAM,GAAGA,CAAI,EACzFC,EAAW,OAAOJ,GAAiB,WAAaA,EAAe,IAAM,GAE3E,IAAIK,EAAU,GACVC,EAAa,KACbC,EAAc,KACdC,EAAkB,GAClBC,EAAoB,GACpBC,EAAyB,GACzBC,EAAU,KACVC,EAAoB,KACpBC,EAAkB,KAEtB,MAAMC,GAAY,CAAC,CAAE,QAASC,EAAK,WAAYC,CAAE,EAAK,KAAO,CACxD,OAAOD,GAAQ,WAClBV,EAAUU,GAEP,OAAO,SAASC,CAAE,GAAKA,EAAK,IAC/BV,EAAaU,EAEf,EAEMC,GAAO,IAAM,CACdN,IAAY,OACf,OAAO,cAAcA,CAAO,EAC5BA,EAAU,KAEZ,EAEMO,GAAQ,IAAM,CACf,CAACb,GAAWM,IAAY,OAG5BA,EAAU,OAAO,YAAY,IAAM,CAC9B,SAAS,kBAAoB,WAChCQ,EAAc,GAAO,EAAK,CAE5B,EAAGb,CAAU,EACd,EAEMa,EAAgB,CAACC,EAAOC,IAAc,CACtCC,EAAKF,EAAOC,CAAS,EAAE,MAAM,IAAM,CAAC,CAAC,CAC3C,EAEMC,EAAO,MAAOF,EAAOC,IAAc,CACxC,GAAI,CAAChB,EACJ,MAAO,CAAE,OAAQ,UAAU,EAE5B,GAAIE,EAGH,OAAIa,GAAS,CAACZ,GACbC,EAAoB,GACpBC,EAAyBA,GAA0B,CAAA,CAAQW,EACpDd,EAAY,MAAM,MAAe,EAAE,KAAK,IAAMe,EAAK,GAAMZ,CAAsB,CAAC,GAEjFH,EAERC,EAAkB,CAAA,CAAQY,EAC1B,MAAMG,GAAkB,SAAY,CACnC,MAAMR,EAAMK,EAASf,GAAWA,EAAQ,SAAS,GAAG,EAAI,IAAM,KAAO,UAAaA,EAC5EmB,EAAW,MAAMtB,EAAQa,EAAK,CACnC,OAAQ,OACR,YAAa,cACb,QAAS,CACR,OAAQ,mBACR,aAAcX,EAAQ,CAC3B,EACI,UAAW,CAAA,CAAQiB,CACvB,CAAI,EACKI,EAAO,MAAMD,EAAS,KAAI,EAAG,MAAM,KAAO,GAAG,EACnD,GAAI,CAACA,EAAS,GACb,MAAM,IAAI,MAAOC,GAAQA,EAAK,SAAY,sBAAsB,EAEjE,OAAOA,CACR,GAAC,EACDlB,EAAcgB,EACd,IAAIG,EACAC,EAAY,KAChB,GAAI,CACHD,EAAS,MAAMH,CAChB,OAASK,EAAO,CACfD,EAAYC,CACb,QAAA,CACKrB,IAAgBgB,IACnBhB,EAAc,MAEfC,EAAkB,EACnB,CACA,MAAMqB,EAAkBpB,EAClBqB,GAAiBpB,EAGvB,GAFAD,EAAoB,GACpBC,EAAyB,GACrBmB,EACH,OAAOP,EAAK,GAAMQ,EAAc,EAEjC,GAAIH,aAAqB,MACxB,MAAMA,EAEP,OAAOD,CACR,EAiCA,MAAO,CACN,UAAAZ,GACA,MAAAI,GACA,KAAAD,GACA,KAAAK,EACA,cAAAH,EACA,yBArCgC,IAAM,CAClCP,GAAqBC,IAGzBD,EAAoB,IAAM,CACzB,GAAI,SAAS,kBAAoB,SAAU,CAC1CO,EAAc,GAAM,EAAI,EACxBF,GAAI,EACJ,MACD,CACAC,GAAK,CACN,EACAL,EAAkB,IAAM,CACvBM,EAAc,GAAM,EAAI,EACxBF,GAAI,CACL,EACA,SAAS,iBAAiB,mBAAoBL,CAAiB,EAC/D,OAAO,iBAAiB,WAAYC,CAAe,EACpD,EAoBC,wBAlB+B,IAAM,CACjCD,IACH,SAAS,oBAAoB,mBAAoBA,CAAiB,EAClEA,EAAoB,MAEjBC,IACH,OAAO,oBAAoB,WAAYA,CAAe,EACtDA,EAAkB,KAEpB,CAUD,CACA,CClKA,SAASkB,GAAkBC,EAAGC,EAAG,EACtBA,GAAR,MAAaA,EAAID,EAAE,UAAYC,EAAID,EAAE,QACtC,QAASE,EAAI,EAAGC,EAAI,MAAMF,CAAC,EAAGC,EAAID,EAAGC,IAAKC,EAAED,CAAC,EAAIF,EAAEE,CAAC,EACpD,OAAOC,CACT,CACA,SAASC,GAAgBJ,EAAG,CAC1B,GAAI,MAAM,QAAQA,CAAC,EAAG,OAAOA,CAC/B,CACA,SAASK,GAAsBL,EAAGM,EAAG,CACnC,IAAIC,EAAYP,GAAR,KAAY,KAAsB,OAAO,OAAtB,KAAgCA,EAAE,OAAO,QAAQ,GAAKA,EAAE,YAAY,EAC/F,GAAYO,GAAR,KAAW,CACb,IAAIL,EACFC,EACAK,EACAC,EACAR,EAAI,CAAA,EACJS,EAAI,GACJC,EAAI,GACN,GAAI,CACF,GAAIH,GAAKD,EAAIA,EAAE,KAAKP,CAAC,GAAG,KAAYM,IAAN,EAAgB,KAAO,EAAEI,GAAKR,EAAIM,EAAE,KAAKD,CAAC,GAAG,QAAUN,EAAE,KAAKC,EAAE,KAAK,EAAGD,EAAE,SAAWK,GAAII,EAAI,GAAG,CAChI,OAASV,EAAG,CACVW,EAAI,GAAMR,EAAIH,CAChB,QAAA,CACE,GAAI,CACF,GAAI,CAACU,GAAaH,EAAE,QAAV,OAAqBE,EAAIF,EAAE,OAAM,EAAI,OAAOE,CAAC,IAAMA,GAAI,MACnE,QAAA,CACE,GAAIE,EAAG,MAAMR,CACf,CACF,CACA,OAAOF,CACT,CACF,CACA,SAASW,IAAmB,CAC1B,MAAM,IAAI,UAAU;AAAA,mFAA2I,CACjK,CACA,SAASC,GAAeb,EAAGE,EAAG,CAC5B,OAAOE,GAAgBJ,CAAC,GAAKK,GAAsBL,EAAGE,CAAC,GAAKY,GAA4Bd,EAAGE,CAAC,GAAKU,GAAgB,CACnH,CACA,SAASE,GAA4Bd,EAAGC,EAAG,CACzC,GAAID,EAAG,CACL,GAAgB,OAAOA,GAAnB,SAAsB,OAAOD,GAAkBC,EAAGC,CAAC,EACvD,IAAIM,EAAI,CAAA,EAAG,SAAS,KAAKP,CAAC,EAAE,MAAM,EAAG,EAAE,EACvC,OAAoBO,IAAb,UAAkBP,EAAE,cAAgBO,EAAIP,EAAE,YAAY,MAAiBO,IAAV,OAAyBA,IAAV,MAAc,MAAM,KAAKP,CAAC,EAAoBO,IAAhB,aAAqB,2CAA2C,KAAKA,CAAC,EAAIR,GAAkBC,EAAGC,CAAC,EAAI,MACvN,CACF,CAEA,MAAMc,GAAU,OAAO,QACrBC,GAAiB,OAAO,eACxBC,GAAW,OAAO,SAClBC,GAAiB,OAAO,eACxBC,GAA2B,OAAO,yBACpC,IAAIC,EAAS,OAAO,OAClBC,EAAO,OAAO,KACdC,GAAS,OAAO,OACdC,GAAO,OAAO,QAAY,KAAe,QAC3CC,GAAQD,GAAK,MACbE,GAAYF,GAAK,UACdH,IACHA,EAAS,SAAgBM,EAAG,CAC1B,OAAOA,CACT,GAEGL,IACHA,EAAO,SAAcK,EAAG,CACtB,OAAOA,CACT,GAEGF,KACHA,GAAQ,SAAeG,EAAMC,EAAS,CACpC,QAASC,EAAO,UAAU,OAAQ1D,EAAO,IAAI,MAAM0D,EAAO,EAAIA,EAAO,EAAI,CAAC,EAAGC,EAAO,EAAGA,EAAOD,EAAMC,IAClG3D,EAAK2D,EAAO,CAAC,EAAI,UAAUA,CAAI,EAEjC,OAAOH,EAAK,MAAMC,EAASzD,CAAI,CACjC,GAEGsD,KACHA,GAAY,SAAmBM,EAAM,CACnC,QAASC,EAAQ,UAAU,OAAQ7D,EAAO,IAAI,MAAM6D,EAAQ,EAAIA,EAAQ,EAAI,CAAC,EAAGC,EAAQ,EAAGA,EAAQD,EAAOC,IACxG9D,EAAK8D,EAAQ,CAAC,EAAI,UAAUA,CAAK,EAEnC,OAAO,IAAIF,EAAK,GAAG5D,CAAI,CACzB,GAEF,MAAM+D,GAAeC,EAAQ,MAAM,UAAU,OAAO,EAC9CC,GAAmBD,EAAQ,MAAM,UAAU,WAAW,EACtDE,GAAWF,EAAQ,MAAM,UAAU,GAAG,EACtCG,GAAYH,EAAQ,MAAM,UAAU,IAAI,EACxCI,GAAcJ,EAAQ,MAAM,UAAU,MAAM,EAC5CK,EAAe,MAAM,QACrBC,GAAoBN,EAAQ,OAAO,UAAU,WAAW,EACxDO,GAAiBP,EAAQ,OAAO,UAAU,QAAQ,EAClDQ,GAAcR,EAAQ,OAAO,UAAU,KAAK,EAC5CS,GAAgBT,EAAQ,OAAO,UAAU,OAAO,EAChDU,GAAgBV,EAAQ,OAAO,UAAU,OAAO,EAChDW,GAAaX,EAAQ,OAAO,UAAU,IAAI,EAC1CY,GAAiBZ,EAAQ,OAAO,UAAU,QAAQ,EAClDa,GAAkBb,EAAQ,QAAQ,UAAU,QAAQ,EACpDc,GAAiB,OAAO,OAAW,IAAc,KAAOd,EAAQ,OAAO,UAAU,QAAQ,EACzFe,GAAiB,OAAO,OAAW,IAAc,KAAOf,EAAQ,OAAO,UAAU,QAAQ,EACzFgB,EAAuBhB,EAAQ,OAAO,UAAU,cAAc,EAC9DiB,GAAiBjB,EAAQ,OAAO,UAAU,QAAQ,EAClDkB,EAAalB,EAAQ,OAAO,UAAU,IAAI,EAC1CmB,GAAkBC,GAAY,SAAS,EAO7C,SAASpB,EAAQR,EAAM,CACrB,OAAO,SAAUC,EAAS,CACpBA,aAAmB,SACrBA,EAAQ,UAAY,GAEtB,QAAS4B,EAAQ,UAAU,OAAQrF,EAAO,IAAI,MAAMqF,EAAQ,EAAIA,EAAQ,EAAI,CAAC,EAAGC,EAAQ,EAAGA,EAAQD,EAAOC,IACxGtF,EAAKsF,EAAQ,CAAC,EAAI,UAAUA,CAAK,EAEnC,OAAOjC,GAAMG,EAAMC,EAASzD,CAAI,CAClC,CACF,CAOA,SAASoF,GAAYxB,EAAM,CACzB,OAAO,UAAY,CACjB,QAAS2B,EAAQ,UAAU,OAAQvF,EAAO,IAAI,MAAMuF,CAAK,EAAGC,EAAQ,EAAGA,EAAQD,EAAOC,IACpFxF,EAAKwF,CAAK,EAAI,UAAUA,CAAK,EAE/B,OAAOlC,GAAUM,EAAM5D,CAAI,CAC7B,CACF,CASA,SAASyF,EAASC,EAAKC,EAAO,CAC5B,IAAIC,EAAoB,UAAU,OAAS,GAAK,UAAU,CAAC,IAAM,OAAY,UAAU,CAAC,EAAItB,GAO5F,GANIzB,IAIFA,GAAe6C,EAAK,IAAI,EAEtB,CAACrB,EAAasB,CAAK,EACrB,OAAOD,EAET,IAAIvD,EAAIwD,EAAM,OACd,KAAOxD,KAAK,CACV,IAAI0D,EAAUF,EAAMxD,CAAC,EACrB,GAAI,OAAO0D,GAAY,SAAU,CAC/B,MAAMC,EAAYF,EAAkBC,CAAO,EACvCC,IAAcD,IAEX/C,GAAS6C,CAAK,IACjBA,EAAMxD,CAAC,EAAI2D,GAEbD,EAAUC,EAEd,CACAJ,EAAIG,CAAO,EAAI,EACjB,CACA,OAAOH,CACT,CAOA,SAASK,GAAWJ,EAAO,CACzB,QAASK,EAAQ,EAAGA,EAAQL,EAAM,OAAQK,IAChBhB,EAAqBW,EAAOK,CAAK,IAEvDL,EAAMK,CAAK,EAAI,MAGnB,OAAOL,CACT,CAOA,SAASM,EAAMC,EAAQ,CACrB,MAAMC,EAAYhD,GAAO,IAAI,EAC7B,UAAWiD,KAASxD,GAAQsD,CAAM,EAAG,CACnC,IAAIG,EAAQ3D,GAAe0D,EAAO,CAAC,EACnC,MAAME,EAAWD,EAAM,CAAC,EAClBE,EAAQF,EAAM,CAAC,EACGrB,EAAqBkB,EAAQI,CAAQ,IAEvDjC,EAAakC,CAAK,EACpBJ,EAAUG,CAAQ,EAAIP,GAAWQ,CAAK,EAC7BA,GAAS,OAAOA,GAAU,UAAYA,EAAM,cAAgB,OACrEJ,EAAUG,CAAQ,EAAIL,EAAMM,CAAK,EAEjCJ,EAAUG,CAAQ,EAAIC,EAG5B,CACA,OAAOJ,CACT,CAOA,SAASK,GAAeD,EAAO,CAC7B,OAAQ,OAAOA,EAAK,CAClB,IAAK,SAED,OAAOA,EAEX,IAAK,SAED,OAAO3B,GAAe2B,CAAK,EAE/B,IAAK,UAED,OAAO1B,GAAgB0B,CAAK,EAEhC,IAAK,SAED,OAAOzB,GAAiBA,GAAeyB,CAAK,EAAI,IAEpD,IAAK,SAED,OAAOxB,GAAiBA,GAAewB,CAAK,EAAI,WAEpD,IAAK,YAED,OAAOtB,GAAesB,CAAK,EAE/B,IAAK,WACL,IAAK,SACH,CACE,GAAIA,IAAU,KACZ,OAAOtB,GAAesB,CAAK,EAE7B,MAAME,EAAgBF,EAChBG,EAAgBC,EAAaF,EAAe,UAAU,EAC5D,GAAI,OAAOC,GAAkB,WAAY,CACvC,MAAME,EAAcF,EAAcD,CAAa,EAC/C,OAAO,OAAOG,GAAgB,SAAWA,EAAc3B,GAAe2B,CAAW,CACnF,CACA,OAAO3B,GAAesB,CAAK,CAC7B,CACF,QAEI,OAAOtB,GAAesB,CAAK,CAEnC,CACA,CAQA,SAASI,EAAaT,EAAQW,EAAM,CAClC,KAAOX,IAAW,MAAM,CACtB,MAAMY,EAAO9D,GAAyBkD,EAAQW,CAAI,EAClD,GAAIC,EAAM,CACR,GAAIA,EAAK,IACP,OAAO9C,EAAQ8C,EAAK,GAAG,EAEzB,GAAI,OAAOA,EAAK,OAAU,WACxB,OAAO9C,EAAQ8C,EAAK,KAAK,CAE7B,CACAZ,EAASnD,GAAemD,CAAM,CAChC,CACA,SAASa,GAAgB,CACvB,OAAO,IACT,CACA,OAAOA,CACT,CACA,SAASC,GAAQT,EAAO,CACtB,GAAI,CACF,OAAArB,EAAWqB,EAAO,EAAE,EACb,EACT,MAAkB,CAChB,MAAO,EACT,CACF,CAEA,MAAMU,GAAShE,EAAO,CAAC,IAAK,OAAQ,UAAW,UAAW,OAAQ,UAAW,QAAS,QAAS,IAAK,MAAO,MAAO,MAAO,QAAS,aAAc,OAAQ,KAAM,SAAU,SAAU,UAAW,SAAU,OAAQ,OAAQ,MAAO,WAAY,UAAW,OAAQ,WAAY,KAAM,YAAa,MAAO,UAAW,MAAO,SAAU,MAAO,MAAO,KAAM,KAAM,UAAW,KAAM,WAAY,aAAc,SAAU,OAAQ,SAAU,OAAQ,KAAM,KAAM,KAAM,KAAM,KAAM,KAAM,OAAQ,SAAU,SAAU,KAAM,OAAQ,IAAK,MAAO,QAAS,MAAO,MAAO,QAAS,SAAU,KAAM,OAAQ,MAAO,OAAQ,UAAW,OAAQ,WAAY,QAAS,MAAO,OAAQ,KAAM,WAAY,SAAU,SAAU,IAAK,UAAW,MAAO,WAAY,IAAK,KAAM,KAAM,OAAQ,IAAK,OAAQ,SAAU,UAAW,SAAU,SAAU,OAAQ,QAAS,SAAU,SAAU,OAAQ,SAAU,SAAU,QAAS,MAAO,UAAW,MAAO,QAAS,QAAS,KAAM,WAAY,WAAY,QAAS,KAAM,QAAS,OAAQ,KAAM,QAAS,KAAM,IAAK,KAAM,MAAO,QAAS,KAAK,CAAC,EAC3/BiE,GAAQjE,EAAO,CAAC,MAAO,IAAK,WAAY,cAAe,eAAgB,eAAgB,gBAAiB,mBAAoB,SAAU,WAAY,OAAQ,OAAQ,UAAW,eAAgB,cAAe,SAAU,OAAQ,IAAK,QAAS,WAAY,QAAS,QAAS,YAAa,OAAQ,iBAAkB,SAAU,OAAQ,WAAY,QAAS,OAAQ,OAAQ,UAAW,UAAW,WAAY,iBAAkB,OAAQ,OAAQ,QAAS,SAAU,SAAU,OAAQ,WAAY,QAAS,OAAQ,QAAS,OAAQ,OAAO,CAAC,EACvgBkE,GAAalE,EAAO,CAAC,UAAW,gBAAiB,sBAAuB,cAAe,mBAAoB,oBAAqB,oBAAqB,iBAAkB,eAAgB,UAAW,UAAW,UAAW,UAAW,UAAW,iBAAkB,UAAW,UAAW,cAAe,eAAgB,WAAY,eAAgB,qBAAsB,cAAe,SAAU,cAAc,CAAC,EAK/YmE,GAAgBnE,EAAO,CAAC,UAAW,gBAAiB,SAAU,UAAW,YAAa,mBAAoB,iBAAkB,gBAAiB,gBAAiB,gBAAiB,QAAS,YAAa,OAAQ,eAAgB,YAAa,UAAW,gBAAiB,SAAU,MAAO,aAAc,UAAW,KAAK,CAAC,EACtToE,GAAWpE,EAAO,CAAC,OAAQ,WAAY,SAAU,UAAW,QAAS,SAAU,KAAM,aAAc,gBAAiB,KAAM,KAAM,QAAS,UAAW,WAAY,QAAS,OAAQ,KAAM,SAAU,QAAS,SAAU,OAAQ,OAAQ,UAAW,SAAU,MAAO,QAAS,MAAO,SAAU,aAAc,aAAa,CAAC,EAGtTqE,GAAmBrE,EAAO,CAAC,UAAW,cAAe,aAAc,WAAY,YAAa,UAAW,UAAW,SAAU,SAAU,QAAS,YAAa,aAAc,iBAAkB,cAAe,MAAM,CAAC,EAClNsE,GAAOtE,EAAO,CAAC,OAAO,CAAC,EAEvBuE,GAAOvE,EAAO,CAAC,SAAU,SAAU,QAAS,MAAO,iBAAkB,eAAgB,uBAAwB,WAAY,aAAc,UAAW,SAAU,UAAW,cAAe,cAAe,UAAW,OAAQ,QAAS,QAAS,QAAS,OAAQ,UAAW,UAAW,aAAc,WAAY,eAAgB,SAAU,cAAe,WAAY,WAAY,UAAW,MAAO,WAAY,0BAA2B,wBAAyB,WAAY,YAAa,UAAW,eAAgB,cAAe,OAAQ,MAAO,UAAW,SAAU,SAAU,OAAQ,OAAQ,WAAY,KAAM,QAAS,YAAa,YAAa,QAAS,OAAQ,QAAS,OAAQ,OAAQ,UAAW,OAAQ,MAAO,MAAO,YAAa,QAAS,SAAU,MAAO,YAAa,WAAY,QAAS,OAAQ,QAAS,UAAW,aAAc,SAAU,OAAQ,UAAW,OAAQ,UAAW,cAAe,cAAe,UAAW,gBAAiB,sBAAuB,SAAU,UAAW,UAAW,aAAc,WAAY,MAAO,WAAY,MAAO,WAAY,OAAQ,OAAQ,UAAW,aAAc,QAAS,WAAY,QAAS,OAAQ,QAAS,OAAQ,OAAQ,UAAW,QAAS,MAAO,SAAU,OAAQ,QAAS,UAAW,WAAY,QAAS,YAAa,OAAQ,SAAU,SAAU,QAAS,QAAS,OAAQ,OAAO,CAAC,EAC5xCwE,GAAMxE,EAAO,CAAC,gBAAiB,aAAc,WAAY,qBAAsB,YAAa,SAAU,gBAAiB,gBAAiB,UAAW,gBAAiB,iBAAkB,QAAS,OAAQ,KAAM,QAAS,OAAQ,gBAAiB,YAAa,YAAa,QAAS,sBAAuB,8BAA+B,gBAAiB,kBAAmB,KAAM,KAAM,IAAK,KAAM,KAAM,kBAAmB,YAAa,UAAW,UAAW,MAAO,WAAY,YAAa,MAAO,WAAY,OAAQ,eAAgB,YAAa,SAAU,cAAe,cAAe,gBAAiB,cAAe,YAAa,mBAAoB,eAAgB,aAAc,eAAgB,cAAe,KAAM,KAAM,KAAM,KAAM,aAAc,WAAY,gBAAiB,oBAAqB,SAAU,OAAQ,KAAM,kBAAmB,KAAM,MAAO,YAAa,IAAK,KAAM,KAAM,KAAM,KAAM,UAAW,YAAa,aAAc,WAAY,OAAQ,eAAgB,iBAAkB,eAAgB,mBAAoB,iBAAkB,QAAS,aAAc,aAAc,eAAgB,eAAgB,cAAe,cAAe,mBAAoB,YAAa,MAAO,OAAQ,YAAa,QAAS,SAAU,OAAQ,MAAO,OAAQ,aAAc,SAAU,WAAY,UAAW,QAAS,SAAU,cAAe,SAAU,WAAY,cAAe,OAAQ,aAAc,sBAAuB,mBAAoB,eAAgB,SAAU,gBAAiB,sBAAuB,iBAAkB,IAAK,KAAM,KAAM,SAAU,OAAQ,OAAQ,cAAe,YAAa,UAAW,SAAU,SAAU,QAAS,OAAQ,kBAAmB,QAAS,mBAAoB,mBAAoB,eAAgB,cAAe,eAAgB,cAAe,aAAc,eAAgB,mBAAoB,oBAAqB,iBAAkB,kBAAmB,oBAAqB,iBAAkB,SAAU,eAAgB,QAAS,eAAgB,iBAAkB,WAAY,cAAe,UAAW,UAAW,YAAa,mBAAoB,cAAe,kBAAmB,iBAAkB,aAAc,OAAQ,KAAM,KAAM,UAAW,SAAU,UAAW,aAAc,UAAW,aAAc,gBAAiB,gBAAiB,QAAS,eAAgB,OAAQ,eAAgB,mBAAoB,mBAAoB,IAAK,KAAM,KAAM,QAAS,IAAK,KAAM,KAAM,IAAK,YAAY,CAAC,EACt1EyE,GAASzE,EAAO,CAAC,SAAU,cAAe,QAAS,WAAY,QAAS,cAAe,cAAe,gBAAiB,aAAc,aAAc,QAAS,MAAO,UAAW,eAAgB,WAAY,QAAS,QAAS,SAAU,OAAQ,KAAM,UAAW,SAAU,gBAAiB,SAAU,SAAU,iBAAkB,YAAa,WAAY,cAAe,UAAW,UAAW,gBAAiB,WAAY,WAAY,OAAQ,WAAY,WAAY,aAAc,UAAW,SAAU,SAAU,cAAe,gBAAiB,uBAAwB,YAAa,YAAa,aAAc,WAAY,iBAAkB,iBAAkB,YAAa,UAAW,QAAS,OAAO,CAAC,EAC7qB0E,GAAM1E,EAAO,CAAC,aAAc,SAAU,cAAe,YAAa,aAAa,CAAC,EAEhF2E,GAAgB1E,EAAK,uBAAuB,EAC5C2E,GAAW3E,EAAK,uBAAuB,EACvC4E,GAAc5E,EAAK,aAAa,EAChC6E,GAAY7E,EAAK,8BAA8B,EAC/C8E,GAAY9E,EAAK,gBAAgB,EACjC+E,GAAiB/E,EAAK,kGAC5B,EACMgF,GAAoBhF,EAAK,uBAAuB,EAChDiF,GAAkBjF,EAAK,6DAC7B,EACMkF,GAAelF,EAAK,SAAS,EAC7BmF,GAAiBnF,EAAK,0BAA0B,EAIhDoF,EAAY,CAChB,QAAS,EACT,UAAW,EACX,KAAM,EACN,aAAc,EACd,gBAAiB,EAEjB,WAAY,EAEZ,uBAAwB,EACxB,QAAS,EACT,SAAU,EACV,aAAc,GACd,iBAAkB,GAClB,SAAU,EACZ,EACMC,GAAY,UAAqB,CACrC,OAAO,OAAO,OAAW,IAAc,KAAO,MAChD,EASMC,GAA4B,SAAmCC,EAAcC,EAAmB,CACpG,GAAI,OAAOD,GAAiB,UAAY,OAAOA,EAAa,cAAiB,WAC3E,OAAO,KAKT,IAAIE,EAAS,KACb,MAAMC,EAAY,wBACdF,GAAqBA,EAAkB,aAAaE,CAAS,IAC/DD,EAASD,EAAkB,aAAaE,CAAS,GAEnD,MAAMC,EAAa,aAAeF,EAAS,IAAMA,EAAS,IAC1D,GAAI,CACF,OAAOF,EAAa,aAAaI,EAAY,CAC3C,WAAWrB,EAAM,CACf,OAAOA,CACT,EACA,gBAAgBsB,EAAW,CACzB,OAAOA,CACT,CACN,CAAK,CACH,MAAY,CAIV,eAAQ,KAAK,uBAAyBD,EAAa,wBAAwB,EACpE,IACT,CACF,EACME,GAAkB,UAA2B,CACjD,MAAO,CACL,wBAAyB,CAAA,EACzB,sBAAuB,CAAA,EACvB,uBAAwB,CAAA,EACxB,yBAA0B,CAAA,EAC1B,uBAAwB,CAAA,EACxB,wBAAyB,CAAA,EACzB,sBAAuB,CAAA,EACvB,oBAAqB,CAAA,EACrB,uBAAwB,CAAA,CAC5B,CACA,EACA,SAASC,IAAkB,CACzB,IAAIC,EAAS,UAAU,OAAS,GAAK,UAAU,CAAC,IAAM,OAAY,UAAU,CAAC,EAAIV,GAAS,EAC1F,MAAMW,EAAYC,GAAQH,GAAgBG,CAAI,EAG9C,GAFAD,EAAU,QAAU,QACpBA,EAAU,QAAU,CAAA,EAChB,CAACD,GAAU,CAACA,EAAO,UAAYA,EAAO,SAAS,WAAaX,EAAU,UAAY,CAACW,EAAO,QAG5F,OAAAC,EAAU,YAAc,GACjBA,EAET,IAAIE,EAAWH,EAAO,SACtB,MAAMI,EAAmBD,EACnBE,EAAgBD,EAAiB,cACvCJ,EAAO,iBACL,MAAMM,EAAsBN,EAAO,oBACnCO,EAAOP,EAAO,KACdQ,EAAUR,EAAO,QACjBS,EAAaT,EAAO,WACGA,EAAO,eACL,SAASA,EAAO,cAAgBA,EAAO,iBAChEA,EAAO,gBACP,MAAMU,EAAYV,EAAO,UACzBR,EAAeQ,EAAO,aAClBW,EAAmBH,EAAQ,UAC3BI,GAAYlD,EAAaiD,EAAkB,WAAW,EACtDE,GAASnD,EAAaiD,EAAkB,QAAQ,EAChDG,GAAiBpD,EAAaiD,EAAkB,aAAa,EAC7DI,EAAgBrD,EAAaiD,EAAkB,YAAY,EAC3DK,EAAgBtD,EAAaiD,EAAkB,YAAY,EAC3DM,EAAgBvD,EAAaiD,EAAkB,YAAY,EAC3DO,EAAgBxD,EAAaiD,EAAkB,YAAY,EAC3DQ,EAAcZ,GAAQA,EAAK,UAAY7C,EAAa6C,EAAK,UAAW,UAAU,EAAI,KAClFa,EAAcb,GAAQA,EAAK,UAAY7C,EAAa6C,EAAK,UAAW,UAAU,EAAI,KAOxF,GAAI,OAAOD,GAAwB,WAAY,CAC7C,MAAMe,EAAWlB,EAAS,cAAc,UAAU,EAC9CkB,EAAS,SAAWA,EAAS,QAAQ,gBACvClB,EAAWkB,EAAS,QAAQ,cAEhC,CACA,IAAIC,EACAC,EAAY,GAMZC,GAAwB,EAC5B,MAAMC,EAAqB,SAA4BlD,EAAM,CAC3D,GAAIiD,GAAwB,EAC1B,MAAMtF,GAAgB,iQAAgR,EAExSsF,KACA,GAAI,CACF,OAAOF,EAAmB,WAAW/C,CAAI,CAC3C,SACEiD,IACF,CACF,EACME,EAAYvB,EAChBwB,EAAiBD,EAAU,eAC3BE,GAAqBF,EAAU,mBAC/BG,GAAyBH,EAAU,uBACnCI,GAAuBJ,EAAU,qBAC7BK,GAAa3B,EAAiB,WACpC,IAAI4B,EAAQlC,GAAe,EAI3BG,EAAU,YAAc,OAAOtG,IAAY,YAAc,OAAOqH,GAAkB,YAAcW,GAAkBA,EAAe,qBAAuB,OACxJ,MAAMM,GAAkBtD,GACtBuD,GAAatD,GACbuD,GAAgBtD,GAChBuD,GAActD,GACduD,GAActD,GACduD,GAAsBrD,GACtBsD,GAAoBrD,GACpBsD,GAAmBpD,GACrB,IAAIqD,GAAmBzD,GAMnB0D,EAAe,KACnB,MAAMC,GAAuBnG,EAAS,CAAA,EAAI,CAAC,GAAGwB,GAAQ,GAAGC,GAAO,GAAGC,GAAY,GAAGE,GAAU,GAAGE,EAAI,CAAC,EAEpG,IAAIsE,EAAe,KACnB,MAAMC,GAAuBrG,EAAS,CAAA,EAAI,CAAC,GAAG+B,GAAM,GAAGC,GAAK,GAAGC,GAAQ,GAAGC,EAAG,CAAC,EAO9E,IAAIoE,EAA0B,OAAO,KAAK5I,GAAO,KAAM,CACrD,aAAc,CACZ,SAAU,GACV,aAAc,GACd,WAAY,GACZ,MAAO,IACb,EACI,mBAAoB,CAClB,SAAU,GACV,aAAc,GACd,WAAY,GACZ,MAAO,IACb,EACI,+BAAgC,CAC9B,SAAU,GACV,aAAc,GACd,WAAY,GACZ,MAAO,EACb,CACA,CAAG,CAAC,EAEE6I,GAAc,KAEdC,GAAc,KAElB,MAAMC,EAAyB,OAAO,KAAK/I,GAAO,KAAM,CACtD,SAAU,CACR,SAAU,GACV,aAAc,GACd,WAAY,GACZ,MAAO,IACb,EACI,eAAgB,CACd,SAAU,GACV,aAAc,GACd,WAAY,GACZ,MAAO,IACb,CACA,CAAG,CAAC,EAEF,IAAIgJ,GAAkB,GAElBC,GAAkB,GAElBC,GAA0B,GAG1BC,GAA2B,GAI3BC,EAAqB,GAIrBC,GAAe,GAEfC,GAAiB,GAEjBC,GAAa,GAGbC,GAAa,GAKbC,GAAa,GAGbC,GAAsB,GAGtBC,GAAsB,GAItBC,GAAe,GAcfC,GAAuB,GAC3B,MAAMC,GAA8B,gBAEpC,IAAIC,GAAe,GAGfC,GAAW,GAEXC,GAAe,CAAA,EAEfC,EAAkB,KACtB,MAAMC,GAA0B7H,EAAS,CAAA,EAAI,CAAC,iBAAkB,QAAS,WAAY,OAAQ,gBAAiB,OAAQ,SAAU,OAAQ,KAAM,KAAM,KAAM,KAAM,QAAS,UAAW,WAAY,WAAY,YAAa,SAAU,QAAS,MAAO,WAAY,QAAS,QAAS,QAAS,KAAK,CAAC,EAEhS,IAAI8H,GAAgB,KACpB,MAAMC,GAAwB/H,EAAS,CAAA,EAAI,CAAC,QAAS,QAAS,MAAO,SAAU,QAAS,OAAO,CAAC,EAEhG,IAAIgI,GAAsB,KAC1B,MAAMC,GAA8BjI,EAAS,GAAI,CAAC,MAAO,QAAS,MAAO,KAAM,QAAS,OAAQ,UAAW,cAAe,OAAQ,UAAW,QAAS,QAAS,QAAS,OAAO,CAAC,EAC1KkI,GAAmB,qCACnBC,GAAgB,6BAChBC,EAAiB,+BAEvB,IAAIC,GAAYD,EACZE,GAAiB,GAEjBC,GAAqB,KACzB,MAAMC,GAA6BxI,EAAS,GAAI,CAACkI,GAAkBC,GAAeC,CAAc,EAAGtJ,EAAc,EACjH,IAAI2J,GAAiCzI,EAAS,CAAA,EAAI,CAAC,KAAM,KAAM,KAAM,KAAM,OAAO,CAAC,EAC/E0I,GAA0B1I,EAAS,GAAI,CAAC,gBAAgB,CAAC,EAK7D,MAAM2I,GAA+B3I,EAAS,CAAA,EAAI,CAAC,QAAS,QAAS,OAAQ,IAAK,QAAQ,CAAC,EAE3F,IAAI4I,GAAoB,KACxB,MAAMC,GAA+B,CAAC,wBAAyB,WAAW,EACpEC,GAA4B,YAClC,IAAI3I,EAAoB,KAEpB4I,GAAS,KAGb,MAAMC,GAAcrF,EAAS,cAAc,MAAM,EAC3CsF,GAAoB,SAA2BC,EAAW,CAC9D,OAAOA,aAAqB,QAAUA,aAAqB,QAC7D,EAOMC,GAAe,UAAwB,CAC3C,IAAIC,EAAM,UAAU,OAAS,GAAK,UAAU,CAAC,IAAM,OAAY,UAAU,CAAC,EAAI,CAAA,EAC9E,GAAIL,IAAUA,KAAWK,EACvB,QAGE,CAACA,GAAO,OAAOA,GAAQ,YACzBA,EAAM,CAAA,GAGRA,EAAM5I,EAAM4I,CAAG,EACfR,GAEAC,GAA6B,QAAQO,EAAI,iBAAiB,IAAM,GAAKN,GAA4BM,EAAI,kBAErGjJ,EAAoByI,KAAsB,wBAA0B9J,GAAiBD,GAErFqH,EAAe3G,EAAqB6J,EAAK,cAAc,GAAKxK,EAAawK,EAAI,YAAY,EAAIpJ,EAAS,CAAA,EAAIoJ,EAAI,aAAcjJ,CAAiB,EAAIgG,GACjJC,EAAe7G,EAAqB6J,EAAK,cAAc,GAAKxK,EAAawK,EAAI,YAAY,EAAIpJ,EAAS,CAAA,EAAIoJ,EAAI,aAAcjJ,CAAiB,EAAIkG,GACjJkC,GAAqBhJ,EAAqB6J,EAAK,oBAAoB,GAAKxK,EAAawK,EAAI,kBAAkB,EAAIpJ,EAAS,CAAA,EAAIoJ,EAAI,mBAAoBtK,EAAc,EAAI0J,GACtKR,GAAsBzI,EAAqB6J,EAAK,mBAAmB,GAAKxK,EAAawK,EAAI,iBAAiB,EAAIpJ,EAASQ,EAAMyH,EAA2B,EAAGmB,EAAI,kBAAmBjJ,CAAiB,EAAI8H,GACvMH,GAAgBvI,EAAqB6J,EAAK,mBAAmB,GAAKxK,EAAawK,EAAI,iBAAiB,EAAIpJ,EAASQ,EAAMuH,EAAqB,EAAGqB,EAAI,kBAAmBjJ,CAAiB,EAAI4H,GAC3LH,EAAkBrI,EAAqB6J,EAAK,iBAAiB,GAAKxK,EAAawK,EAAI,eAAe,EAAIpJ,EAAS,CAAA,EAAIoJ,EAAI,gBAAiBjJ,CAAiB,EAAI0H,GAC7JtB,GAAchH,EAAqB6J,EAAK,aAAa,GAAKxK,EAAawK,EAAI,WAAW,EAAIpJ,EAAS,CAAA,EAAIoJ,EAAI,YAAajJ,CAAiB,EAAIK,EAAM,EAAE,EACrJgG,GAAcjH,EAAqB6J,EAAK,aAAa,GAAKxK,EAAawK,EAAI,WAAW,EAAIpJ,EAAS,CAAA,EAAIoJ,EAAI,YAAajJ,CAAiB,EAAIK,EAAM,EAAE,EACrJmH,GAAepI,EAAqB6J,EAAK,cAAc,EAAIA,EAAI,cAAgB,OAAOA,EAAI,cAAiB,SAAW5I,EAAM4I,EAAI,YAAY,EAAIA,EAAI,aAAe,GACnK1C,GAAkB0C,EAAI,kBAAoB,GAC1CzC,GAAkByC,EAAI,kBAAoB,GAC1CxC,GAA0BwC,EAAI,yBAA2B,GACzDvC,GAA2BuC,EAAI,2BAA6B,GAC5DtC,EAAqBsC,EAAI,oBAAsB,GAC/CrC,GAAeqC,EAAI,eAAiB,GACpCpC,GAAiBoC,EAAI,gBAAkB,GACvCjC,GAAaiC,EAAI,YAAc,GAC/BhC,GAAsBgC,EAAI,qBAAuB,GACjD/B,GAAsB+B,EAAI,qBAAuB,GACjDlC,GAAakC,EAAI,YAAc,GAC/B9B,GAAe8B,EAAI,eAAiB,GACpC7B,GAAuB6B,EAAI,sBAAwB,GACnD3B,GAAe2B,EAAI,eAAiB,GACpC1B,GAAW0B,EAAI,UAAY,GAC3BnD,GAAmB1E,GAAQ6H,EAAI,kBAAkB,EAAIA,EAAI,mBAAqB5G,GAC9E6F,GAAY,OAAOe,EAAI,WAAc,SAAWA,EAAI,UAAYhB,EAChEK,GAAiClJ,EAAqB6J,EAAK,gCAAgC,GAAKA,EAAI,gCAAkC,OAAOA,EAAI,gCAAmC,SAAW5I,EAAM4I,EAAI,8BAA8B,EAAIpJ,EAAS,CAAA,EAAI,CAAC,KAAM,KAAM,KAAM,KAAM,OAAO,CAAC,EACzR0I,GAA0BnJ,EAAqB6J,EAAK,yBAAyB,GAAKA,EAAI,yBAA2B,OAAOA,EAAI,yBAA4B,SAAW5I,EAAM4I,EAAI,uBAAuB,EAAIpJ,EAAS,GAAI,CAAC,gBAAgB,CAAC,EACvO,MAAMqJ,EAAwB9J,EAAqB6J,EAAK,yBAAyB,GAAKA,EAAI,yBAA2B,OAAOA,EAAI,yBAA4B,SAAW5I,EAAM4I,EAAI,uBAAuB,EAAI1L,GAAO,IAAI,EA8FvN,GA7FA4I,EAA0B5I,GAAO,IAAI,EACjC6B,EAAqB8J,EAAuB,cAAc,GAAKJ,GAAkBI,EAAsB,YAAY,IACrH/C,EAAwB,aAAe+C,EAAsB,cAE3D9J,EAAqB8J,EAAuB,oBAAoB,GAAKJ,GAAkBI,EAAsB,kBAAkB,IACjI/C,EAAwB,mBAAqB+C,EAAsB,oBAEjE9J,EAAqB8J,EAAuB,gCAAgC,GAAK,OAAOA,EAAsB,gCAAmC,YACnJ/C,EAAwB,+BAAiC+C,EAAsB,gCAE7EvC,IACFH,GAAkB,IAEhBS,KACFD,GAAa,IAGXQ,KACFzB,EAAelG,EAAS,CAAA,EAAI8B,EAAI,EAChCsE,EAAe1I,GAAO,IAAI,EACtBiK,GAAa,OAAS,KACxB3H,EAASkG,EAAc1E,EAAM,EAC7BxB,EAASoG,EAAcrE,EAAI,GAEzB4F,GAAa,MAAQ,KACvB3H,EAASkG,EAAczE,EAAK,EAC5BzB,EAASoG,EAAcpE,EAAG,EAC1BhC,EAASoG,EAAclE,EAAG,GAExByF,GAAa,aAAe,KAC9B3H,EAASkG,EAAcxE,EAAU,EACjC1B,EAASoG,EAAcpE,EAAG,EAC1BhC,EAASoG,EAAclE,EAAG,GAExByF,GAAa,SAAW,KAC1B3H,EAASkG,EAActE,EAAQ,EAC/B5B,EAASoG,EAAcnE,EAAM,EAC7BjC,EAASoG,EAAclE,EAAG,IAK9BuE,EAAuB,SAAW,KAClCA,EAAuB,eAAiB,KAEpClH,EAAqB6J,EAAK,UAAU,IAClC,OAAOA,EAAI,UAAa,WAC1B3C,EAAuB,SAAW2C,EAAI,SAC7BxK,EAAawK,EAAI,QAAQ,IAC9BlD,IAAiBC,KACnBD,EAAe1F,EAAM0F,CAAY,GAEnClG,EAASkG,EAAckD,EAAI,SAAUjJ,CAAiB,IAGtDZ,EAAqB6J,EAAK,UAAU,IAClC,OAAOA,EAAI,UAAa,WAC1B3C,EAAuB,eAAiB2C,EAAI,SACnCxK,EAAawK,EAAI,QAAQ,IAC9BhD,IAAiBC,KACnBD,EAAe5F,EAAM4F,CAAY,GAEnCpG,EAASoG,EAAcgD,EAAI,SAAUjJ,CAAiB,IAGtDZ,EAAqB6J,EAAK,mBAAmB,GAAKxK,EAAawK,EAAI,iBAAiB,GACtFpJ,EAASgI,GAAqBoB,EAAI,kBAAmBjJ,CAAiB,EAEpEZ,EAAqB6J,EAAK,iBAAiB,GAAKxK,EAAawK,EAAI,eAAe,IAC9ExB,IAAoBC,KACtBD,EAAkBpH,EAAMoH,CAAe,GAEzC5H,EAAS4H,EAAiBwB,EAAI,gBAAiBjJ,CAAiB,GAE9DZ,EAAqB6J,EAAK,qBAAqB,GAAKxK,EAAawK,EAAI,mBAAmB,IACtFxB,IAAoBC,KACtBD,EAAkBpH,EAAMoH,CAAe,GAEzC5H,EAAS4H,EAAiBwB,EAAI,oBAAqBjJ,CAAiB,GAGlEsH,KACFvB,EAAa,OAAO,EAAI,IAGtBc,IACFhH,EAASkG,EAAc,CAAC,OAAQ,OAAQ,MAAM,CAAC,EAG7CA,EAAa,QACflG,EAASkG,EAAc,CAAC,OAAO,CAAC,EAChC,OAAOK,GAAY,OAEjB6C,EAAI,qBAAsB,CAC5B,GAAI,OAAOA,EAAI,qBAAqB,YAAe,WACjD,MAAM1J,GAAgB,6EAA6E,EAErG,GAAI,OAAO0J,EAAI,qBAAqB,iBAAoB,WACtD,MAAM1J,GAAgB,kFAAkF,EAG1G,MAAM4J,EAA6BxE,EACnCA,EAAqBsE,EAAI,qBAKzB,GAAI,CACFrE,EAAYE,EAAmB,EAAE,CACnC,OAASjJ,EAAO,CACd,MAAA8I,EAAqBwE,EACftN,CACR,CACF,MAEM8I,IAAuB,QAAasE,EAAI,uBAAyB,OACnEtE,EAAqB/B,GAA0BC,EAAca,CAAa,GAOxEiB,GAAsB,OAAOC,GAAc,WAC7CA,EAAYE,EAAmB,EAAE,IAYhCO,EAAM,oBAAoB,OAAS,GAAKA,EAAM,sBAAsB,OAAS,IAAMU,IAAiBC,KACvGD,EAAe1F,EAAM0F,CAAY,GAE/BV,EAAM,sBAAsB,OAAS,GAAKY,IAAiBC,KAC7DD,EAAe5F,EAAM4F,CAAY,GAI/B5I,GACFA,EAAO4L,CAAG,EAEZL,GAASK,CACX,EAIMG,GAAevJ,EAAS,GAAI,CAAC,GAAGyB,GAAO,GAAGC,GAAY,GAAGC,EAAa,CAAC,EACvE6H,GAAkBxJ,EAAS,CAAA,EAAI,CAAC,GAAG4B,GAAU,GAAGC,EAAgB,CAAC,EAOjE4H,GAAuB,SAA8BrJ,EAAS,CAClE,IAAIsJ,EAASlF,EAAcpE,CAAO,GAG9B,CAACsJ,GAAU,CAACA,EAAO,WACrBA,EAAS,CACP,aAAcrB,GACd,QAAS,UACjB,GAEI,MAAMsB,EAAU9K,GAAkBuB,EAAQ,OAAO,EAC3CwJ,EAAgB/K,GAAkB6K,EAAO,OAAO,EACtD,OAAKnB,GAAmBnI,EAAQ,YAAY,EAGxCA,EAAQ,eAAiB+H,GAIvBuB,EAAO,eAAiBtB,EACnBuB,IAAY,MAKjBD,EAAO,eAAiBxB,GACnByB,IAAY,QAAUC,IAAkB,kBAAoBnB,GAA+BmB,CAAa,GAI1G,CAAA,CAAQL,GAAaI,CAAO,EAEjCvJ,EAAQ,eAAiB8H,GAIvBwB,EAAO,eAAiBtB,EACnBuB,IAAY,OAIjBD,EAAO,eAAiBvB,GACnBwB,IAAY,QAAUjB,GAAwBkB,CAAa,EAI7D,CAAA,CAAQJ,GAAgBG,CAAO,EAEpCvJ,EAAQ,eAAiBgI,EAIvBsB,EAAO,eAAiBvB,IAAiB,CAACO,GAAwBkB,CAAa,GAG/EF,EAAO,eAAiBxB,IAAoB,CAACO,GAA+BmB,CAAa,EACpF,GAIF,CAACJ,GAAgBG,CAAO,IAAMhB,GAA6BgB,CAAO,GAAK,CAACJ,GAAaI,CAAO,GAGjG,GAAAf,KAAsB,yBAA2BL,GAAmBnI,EAAQ,YAAY,GAlDnF,EA0DX,EAMMyJ,GAAe,SAAsBC,EAAM,CAC/CpL,GAAU+E,EAAU,QAAS,CAC3B,QAASqG,CACf,CAAK,EACD,GAAI,CAEFtF,EAAcsF,CAAI,EAAE,YAAYA,CAAI,CACtC,MAAY,CACVzF,GAAOyF,CAAI,CACb,CACF,EAOMC,GAAmB,SAA0BC,EAAM5J,EAAS,CAChE,GAAI,CACF1B,GAAU+E,EAAU,QAAS,CAC3B,UAAWrD,EAAQ,iBAAiB4J,CAAI,EACxC,KAAM5J,CACd,CAAO,CACH,MAAY,CACV1B,GAAU+E,EAAU,QAAS,CAC3B,UAAW,KACX,KAAMrD,CACd,CAAO,CACH,CAGA,GAFAA,EAAQ,gBAAgB4J,CAAI,EAExBA,IAAS,KACX,GAAI7C,IAAcC,GAChB,GAAI,CACFyC,GAAazJ,CAAO,CACtB,MAAY,CAAC,KAEb,IAAI,CACFA,EAAQ,aAAa4J,EAAM,EAAE,CAC/B,MAAY,CAAC,CAGnB,EAOMC,GAAgB,SAAuBC,EAAO,CAElD,IAAIC,EAAM,KACNC,EAAoB,KACxB,GAAIlD,GACFgD,EAAQ,oBAAsBA,MACzB,CAEL,MAAMG,EAAUtL,GAAYmL,EAAO,aAAa,EAChDE,EAAoBC,GAAWA,EAAQ,CAAC,CAC1C,CACIzB,KAAsB,yBAA2BP,KAAcD,IAEjE8B,EAAQ,iEAAmEA,EAAQ,kBAErF,MAAMI,EAAexF,EAAqBG,EAAmBiF,CAAK,EAAIA,EAKtE,GAAI7B,KAAcD,EAChB,GAAI,CACF+B,EAAM,IAAIjG,EAAS,EAAG,gBAAgBoG,EAAc1B,EAAiB,CACvE,MAAY,CAAC,CAGf,GAAI,CAACuB,GAAO,CAACA,EAAI,gBAAiB,CAChCA,EAAMhF,EAAe,eAAekD,GAAW,WAAY,IAAI,EAC/D,GAAI,CACF8B,EAAI,gBAAgB,UAAY7B,GAAiBvD,EAAYuF,CAC/D,MAAY,CAEZ,CACF,CACA,MAAMC,EAAOJ,EAAI,MAAQA,EAAI,gBAK7B,OAJID,GAASE,GACXG,EAAK,aAAa5G,EAAS,eAAeyG,CAAiB,EAAGG,EAAK,WAAW,CAAC,GAAK,IAAI,EAGtFlC,KAAcD,EACT9C,GAAqB,KAAK6E,EAAKnD,GAAiB,OAAS,MAAM,EAAE,CAAC,EAEpEA,GAAiBmD,EAAI,gBAAkBI,CAChD,EAOMC,GAAsB,SAA6B9G,EAAM,CAC7D,OAAO0B,GAAmB,KAAK1B,EAAK,eAAiBA,EAAMA,EAE3DO,EAAW,aAAeA,EAAW,aAAeA,EAAW,UAAYA,EAAW,4BAA8BA,EAAW,mBAAoB,IAAI,CACzJ,EAoBMwG,GAA6B,SAAmCX,EAAM,CAC1E,IAAIY,EAAuBC,EAC3Bb,EAAK,UAAS,EACd,MAAMc,EAASxF,GAAmB,KAAK0E,EAAK,eAAiBA,EAAMA,EAEnE7F,EAAW,UAAYA,EAAW,aAAeA,EAAW,mBAAqBA,EAAW,4BAA6B,IAAI,EAC7H,IAAI4G,EAAcD,EAAO,SAAQ,EACjC,KAAOC,GAAa,CAClB,IAAIhP,EAAOgP,EAAY,KACvBvM,GAAa,CAACmH,GAAiBC,GAAYC,EAAa,EAAGmF,GAAQ,CACjEjP,EAAOmD,GAAcnD,EAAMiP,EAAM,GAAG,CACtC,CAAC,EACDD,EAAY,KAAOhP,EACnBgP,EAAcD,EAAO,SAAQ,CAC/B,CAIA,MAAMG,GAAaL,GAAyBC,EAAyBb,EAAK,oBAAsB,MAAQa,IAA2B,OAAS,OAASA,EAAuB,KAAKb,EAAM,UAAU,KAAO,MAAQY,IAA0B,OAASA,EAAwB,CAAA,EAC3QpM,GAAa,MAAM,KAAKyM,CAAS,EAAGC,GAAQ,CACtCC,GAAoBD,EAAK,OAAO,GAClCP,GAA2BO,EAAK,OAAO,CAE3C,CAAC,CACH,EAaME,GAAe,SAAsB9K,EAAS,CAIlD,MAAM+K,EAAcvG,EAAcA,EAAYxE,CAAO,EAAI,KAIzD,OAHI,OAAO+K,GAAgB,UAGvBhL,EAAkBgL,CAAW,IAAM,OAC9B,GAEF,OAAO/K,EAAQ,UAAa,UAAY,OAAOA,EAAQ,aAAgB,UAAY,OAAOA,EAAQ,aAAgB,YAMzHA,EAAQ,aAAesE,EAActE,CAAO,GAAK,OAAOA,EAAQ,iBAAoB,YAAc,OAAOA,EAAQ,cAAiB,YAAc,OAAOA,EAAQ,cAAiB,UAAY,OAAOA,EAAQ,cAAiB,YAAc,OAAOA,EAAQ,eAAkB,YAQ3QA,EAAQ,WAAauE,EAAYvE,CAAO,GAYxCA,EAAQ,aAAemE,EAAcnE,CAAO,CAC9C,EAYM6K,GAAsB,SAA6BnK,EAAO,CAC9D,GAAI,CAAC6D,GAAe,OAAO7D,GAAU,UAAYA,IAAU,KACzD,MAAO,GAET,GAAI,CACF,OAAO6D,EAAY7D,CAAK,IAAM+B,EAAU,gBAC1C,MAAY,CACV,MAAO,EACT,CACF,EAYMuI,GAAU,SAAiBtK,EAAO,CACtC,GAAI,CAAC6D,GAAe,OAAO7D,GAAU,UAAYA,IAAU,KACzD,MAAO,GAET,GAAI,CACF,OAAO,OAAO6D,EAAY7D,CAAK,GAAM,QACvC,MAAY,CACV,MAAO,EACT,CACF,EACA,SAASuK,EAAc7F,EAAOqF,EAAahP,EAAM,CAC/CyC,GAAakH,EAAO8F,GAAQ,CAC1BA,EAAK,KAAK7H,EAAWoH,EAAahP,EAAMkN,EAAM,CAChD,CAAC,CACH,CAUA,MAAMwC,GAAoB,SAA2BV,EAAa,CAChE,IAAIW,EAAU,KAId,GAFAH,EAAc7F,EAAM,uBAAwBqF,EAAa,IAAI,EAEzDK,GAAaL,CAAW,EAC1B,OAAAhB,GAAagB,CAAW,EACjB,GAGT,MAAMlB,EAAUxJ,EAAkByE,EAAcA,EAAYiG,CAAW,EAAIA,EAAY,QAAQ,EAsB/F,GApBAQ,EAAc7F,EAAM,oBAAqBqF,EAAa,CACpD,QAAAlB,EACA,YAAazD,CACnB,CAAK,EAEGa,IAAgB8D,EAAY,cAAa,GAAM,CAACO,GAAQP,EAAY,iBAAiB,GAAKpL,EAAW,WAAYoL,EAAY,SAAS,GAAKpL,EAAW,WAAYoL,EAAY,WAAW,GAKzL9D,IAAgB8D,EAAY,eAAiBzC,GAAkBuB,IAAY,SAAWyB,GAAQP,EAAY,iBAAiB,GAK3HA,EAAY,WAAahI,EAAU,wBAKnCkE,IAAgB8D,EAAY,WAAahI,EAAU,SAAWpD,EAAW,UAAWoL,EAAY,IAAI,EACtG,OAAAhB,GAAagB,CAAW,EACjB,GAGT,GAAItE,GAAYoD,CAAO,GAAK,EAAElD,EAAuB,oBAAoB,UAAYA,EAAuB,SAASkD,CAAO,IAAM,CAACzD,EAAayD,CAAO,EAAG,CAExJ,GAAI,CAACpD,GAAYoD,CAAO,GAAK8B,GAAsB9B,CAAO,IACpDrD,EAAwB,wBAAwB,QAAU7G,EAAW6G,EAAwB,aAAcqD,CAAO,GAGlHrD,EAAwB,wBAAwB,UAAYA,EAAwB,aAAaqD,CAAO,GAC1G,MAAO,GAWX,GAAIlC,IAAgB,CAACG,EAAgB+B,CAAO,EAAG,CAC7C,MAAM+B,EAAalH,EAAcqG,CAAW,EACtCc,EAAapH,EAAcsG,CAAW,EAC5C,GAAIc,GAAcD,EAAY,CAC5B,MAAME,EAAaD,EAAW,OAC9B,QAAS/O,EAAIgP,EAAa,EAAGhP,GAAK,EAAG,EAAEA,EAAG,CACxC,MAAMiP,EAAazH,GAAUuH,EAAW/O,CAAC,EAAG,EAAI,EAChD8O,EAAW,aAAaG,EAAYvH,GAAeuG,CAAW,CAAC,CACjE,CACF,CACF,CACA,OAAAhB,GAAagB,CAAW,EACjB,EACT,CAaA,OANWlG,EAAcA,EAAYkG,CAAW,EAAIA,EAAY,YACrDhI,EAAU,SAAW,CAAC4G,GAAqBoB,CAAW,IAK5DlB,IAAY,YAAcA,IAAY,WAAaA,IAAY,aAAelK,EAAW,8BAA+BoL,EAAY,SAAS,GAChJhB,GAAagB,CAAW,EACjB,KAGL/D,GAAsB+D,EAAY,WAAahI,EAAU,OAE3D2I,EAAUX,EAAY,YACtBvM,GAAa,CAACmH,GAAiBC,GAAYC,EAAa,EAAGmF,GAAQ,CACjEU,EAAUxM,GAAcwM,EAASV,EAAM,GAAG,CAC5C,CAAC,EACGD,EAAY,cAAgBW,IAC9B9M,GAAU+E,EAAU,QAAS,CAC3B,QAASoH,EAAY,UAAS,CACxC,CAAS,EACDA,EAAY,YAAcW,IAI9BH,EAAc7F,EAAM,sBAAuBqF,EAAa,IAAI,EACrD,GACT,EAUMiB,GAAoB,SAA2BC,EAAOC,EAAQlL,EAAO,CAMzE,GAJI0F,GAAYwF,CAAM,GAIlB1E,KAAiB0E,IAAW,MAAQA,IAAW,UAAYlL,KAAS6C,GAAY7C,KAASkI,IAC3F,MAAO,GAET,MAAMiD,EAAkB7F,EAAa4F,CAAM,GAAKvF,EAAuB,0BAA0B,UAAYA,EAAuB,eAAeuF,EAAQD,CAAK,EAKhK,GAAI,EAAApF,IAAmB,CAACH,GAAYwF,CAAM,GAAKvM,EAAWmG,GAAaoG,CAAM,IAAc,EAAAtF,IAAmBjH,EAAWoG,GAAamG,CAAM,IAAU,GAAI,CAACC,GAAmBzF,GAAYwF,CAAM,GAC9L,GAIA,EAAAP,GAAsBM,CAAK,IAAMzF,EAAwB,wBAAwB,QAAU7G,EAAW6G,EAAwB,aAAcyF,CAAK,GAAKzF,EAAwB,wBAAwB,UAAYA,EAAwB,aAAayF,CAAK,KAAOzF,EAAwB,8BAA8B,QAAU7G,EAAW6G,EAAwB,mBAAoB0F,CAAM,GAAK1F,EAAwB,8BAA8B,UAAYA,EAAwB,mBAAmB0F,EAAQD,CAAK,IAG/fC,IAAW,MAAQ1F,EAAwB,iCAAmCA,EAAwB,wBAAwB,QAAU7G,EAAW6G,EAAwB,aAAcxF,CAAK,GAAKwF,EAAwB,wBAAwB,UAAYA,EAAwB,aAAaxF,CAAK,IACvS,MAAO,WAGA,CAAAkH,GAAoBgE,CAAM,GAAc,CAAAvM,EAAWwG,GAAkBjH,GAAc8B,EAAOiF,GAAmB,EAAE,CAAC,GAAe,GAAAiG,IAAW,OAASA,IAAW,cAAgBA,IAAW,SAAWD,IAAU,UAAY9M,GAAc6B,EAAO,OAAO,IAAM,GAAKgH,GAAciE,CAAK,IAAc,EAAAnF,IAA2B,CAACnH,EAAWqG,GAAqB9G,GAAc8B,EAAOiF,GAAmB,EAAE,CAAC,IAAcjF,EACha,MAAO,GAET,MAAO,EACT,EAIMoL,GAAgClM,EAAS,GAAI,CAAC,iBAAkB,gBAAiB,YAAa,mBAAoB,iBAAkB,gBAAiB,gBAAiB,eAAe,CAAC,EAStLyL,GAAwB,SAA+B9B,EAAS,CACpE,MAAO,CAACuC,GAA8BrN,GAAkB8K,CAAO,CAAC,GAAKlK,EAAWuG,GAAkB2D,CAAO,CAC3G,EAWMwC,GAAsB,SAA6BtB,EAAa,CAEpEQ,EAAc7F,EAAM,yBAA0BqF,EAAa,IAAI,EAC/D,MAAMuB,EAAavB,EAAY,WAE/B,GAAI,CAACuB,GAAclB,GAAaL,CAAW,EACzC,OAEF,MAAMwB,EAAY,CAChB,SAAU,GACV,UAAW,GACX,SAAU,GACV,kBAAmBjG,EACnB,cAAe,MACrB,EACI,IAAI1J,EAAI0P,EAAW,OAEnB,KAAO1P,KAAK,CACV,MAAM4P,EAAOF,EAAW1P,CAAC,EACnBsN,EAAOsC,EAAK,KAChBC,EAAeD,EAAK,aACpBE,EAAYF,EAAK,MACbN,EAAS7L,EAAkB6J,CAAI,EAC/ByC,GAAYD,EAClB,IAAI1L,EAAQkJ,IAAS,QAAUyC,GAAYvN,GAAWuN,EAAS,EAoB/D,GAlBAJ,EAAU,SAAWL,EACrBK,EAAU,UAAYvL,EACtBuL,EAAU,SAAW,GACrBA,EAAU,cAAgB,OAC1BhB,EAAc7F,EAAM,sBAAuBqF,EAAawB,CAAS,EACjEvL,EAAQuL,EAAU,UAId9E,KAAyByE,IAAW,MAAQA,IAAW,SAAW/M,GAAc6B,EAAO0G,EAA2B,IAAM,IAE1HuC,GAAiBC,EAAMa,CAAW,EAElC/J,EAAQ0G,GAA8B1G,GAKpCiG,IAAgBtH,EAAW,qFAAsFqB,CAAK,EAAG,CAC3HiJ,GAAiBC,EAAMa,CAAW,EAClC,QACF,CAEA,GAAImB,IAAW,iBAAmBjN,GAAY+B,EAAO,MAAM,EAAG,CAC5DiJ,GAAiBC,EAAMa,CAAW,EAClC,QACF,CAEA,GAAIwB,EAAU,cACZ,SAGF,GAAI,CAACA,EAAU,SAAU,CACvBtC,GAAiBC,EAAMa,CAAW,EAClC,QACF,CAEA,GAAI,CAAChE,IAA4BpH,EAAW,OAAQqB,CAAK,EAAG,CAC1DiJ,GAAiBC,EAAMa,CAAW,EAClC,QACF,CAEI/D,GACFxI,GAAa,CAACmH,GAAiBC,GAAYC,EAAa,EAAGmF,IAAQ,CACjEhK,EAAQ9B,GAAc8B,EAAOgK,GAAM,GAAG,CACxC,CAAC,EAGH,MAAMiB,GAAQ5L,EAAkB0K,EAAY,QAAQ,EACpD,GAAI,CAACiB,GAAkBC,GAAOC,EAAQlL,CAAK,EAAG,CAC5CiJ,GAAiBC,EAAMa,CAAW,EAClC,QACF,CAEA,GAAI/F,GAAsB,OAAO9B,GAAiB,UAAY,OAAOA,EAAa,kBAAqB,YACjG,CAAAuJ,EACF,OAAQvJ,EAAa,iBAAiB+I,GAAOC,CAAM,EAAC,CAClD,IAAK,cACH,CACElL,EAAQmE,EAAmBnE,CAAK,EAChC,KACF,CACF,IAAK,mBACH,CACEA,EAAQgE,EAAmB,gBAAgBhE,CAAK,EAChD,KACF,CACd,CAIM,GAAIA,IAAU2L,GACZ,GAAI,CACEF,EACF1B,EAAY,eAAe0B,EAAcvC,EAAMlJ,CAAK,EAGpD+J,EAAY,aAAab,EAAMlJ,CAAK,EAElCoK,GAAaL,CAAW,EAC1BhB,GAAagB,CAAW,EAExBpM,GAASgF,EAAU,OAAO,CAE9B,MAAY,CACVsG,GAAiBC,EAAMa,CAAW,CACpC,CAEJ,CAEAQ,EAAc7F,EAAM,wBAAyBqF,EAAa,IAAI,CAChE,EAMM6B,GAAsB,SAA4BC,EAAU,CAChE,IAAIC,EAAa,KACjB,MAAMC,EAAiBrC,GAAoBmC,CAAQ,EAGnD,IADAtB,EAAc7F,EAAM,wBAAyBmH,EAAU,IAAI,EACpDC,EAAaC,EAAe,YAyBjC,GAvBAxB,EAAc7F,EAAM,uBAAwBoH,EAAY,IAAI,EAE5DrB,GAAkBqB,CAAU,EAE5BT,GAAoBS,CAAU,EAK1B3B,GAAoB2B,EAAW,OAAO,GACxCF,GAAoBE,EAAW,OAAO,GAYjBjI,EAAcA,EAAYiI,CAAU,EAAIA,EAAW,YACnD/J,EAAU,QAAS,CACxC,MAAMiK,EAAUrI,EAAgBA,EAAcmI,CAAU,EAAIA,EAAW,WACnE3B,GAAoB6B,CAAO,IAC7BC,GAA8BD,CAAO,EACrCJ,GAAoBI,CAAO,EAE/B,CAGFzB,EAAc7F,EAAM,uBAAwBmH,EAAU,IAAI,CAC5D,EAoBMI,GAAgC,SAAsCrJ,EAAM,CAChF,MAAMsJ,EAAWrI,EAAcA,EAAYjB,CAAI,EAAIA,EAAK,SACxD,GAAIsJ,IAAanK,EAAU,QAAS,CAClC,MAAMoK,EAAKxI,EAAgBA,EAAcf,CAAI,EAAIA,EAAK,WAQlDuH,GAAoBgC,CAAE,IAGxBF,GAA8BE,CAAE,EAChCP,GAAoBO,CAAE,EAE1B,CAKA,MAAMtB,EAAapH,EAAgBA,EAAcb,CAAI,EAAIA,EAAK,WAC9D,GAAI,CAACiI,EACH,OAEF,MAAMuB,EAAW,CAAA,EACjB5O,GAAaqN,EAAYwB,GAAS,CAChCzO,GAAUwO,EAAUC,CAAK,CAC3B,CAAC,EACD,UAAWA,KAASD,EAClBH,GAA8BI,CAAK,EAGrC,GAAIH,IAAanK,EAAU,QAAS,CAClC,MAAMuK,EAAWxI,EAAcA,EAAYlB,CAAI,EAAI,KACnD,GAAI,OAAO0J,GAAa,UAAYjN,EAAkBiN,CAAQ,IAAM,WAAY,CAC9E,MAAM5B,EAAU9H,EAAK,QACjBuH,GAAoBO,CAAO,GAC7BuB,GAA8BvB,CAAO,CAEzC,CACF,CACF,EAEA,OAAA/H,EAAU,SAAW,SAAUyG,EAAO,CACpC,IAAId,EAAM,UAAU,OAAS,GAAK,UAAU,CAAC,IAAM,OAAY,UAAU,CAAC,EAAI,CAAA,EAC1EmB,EAAO,KACP8C,EAAe,KACfxC,EAAc,KACdyC,EAAa,KASjB,GALAhF,GAAiB,CAAC4B,EACd5B,KACF4B,EAAQ,SAGN,OAAOA,GAAU,UAAY,CAACkB,GAAQlB,CAAK,IAC7CA,EAAQnJ,GAAemJ,CAAK,EACxB,OAAOA,GAAU,UACnB,MAAMxK,GAAgB,iCAAiC,EAI3D,GAAI,CAAC+D,EAAU,YACb,OAAOyG,EAYT,GATKjD,IACHkC,GAAaC,CAAG,EAGlB3F,EAAU,QAAU,CAAA,EAEhB,OAAOyG,GAAU,WACnBxC,GAAW,IAETA,GAAU,CAMZ,MAAM6F,EAAK3I,EAAcA,EAAYsF,CAAK,EAAIA,EAAM,SACpD,GAAI,OAAOqD,GAAO,SAAU,CAC1B,MAAM5D,GAAUxJ,EAAkBoN,CAAE,EACpC,GAAI,CAACrH,EAAayD,EAAO,GAAKpD,GAAYoD,EAAO,EAC/C,MAAMjK,GAAgB,yDAAyD,CAEnF,CAWA,GAAIwL,GAAahB,CAAK,EACpB,MAAMxK,GAAgB,yDAAyD,EAIjFqN,GAA8B7C,CAAK,CACrC,SAAWkB,GAAQlB,CAAK,EAGtBK,EAAON,GAAc,SAAS,EAC9BoD,EAAe9C,EAAK,cAAc,WAAWL,EAAO,EAAI,EACpDmD,EAAa,WAAaxK,EAAU,SAAWwK,EAAa,WAAa,QAGlEA,EAAa,WAAa,OADnC9C,EAAO8C,EAKP9C,EAAK,YAAY8C,CAAY,EAO/BN,GAA8BM,CAAY,MACrC,CAEL,GAAI,CAAClG,IAAc,CAACL,GAAsB,CAACE,IAE3CkD,EAAM,QAAQ,GAAG,IAAM,GACrB,OAAOpF,GAAsBuC,GAAsBpC,EAAmBiF,CAAK,EAAIA,EAKjF,GAFAK,EAAON,GAAcC,CAAK,EAEtB,CAACK,EACH,OAAOpD,GAAa,KAAOE,GAAsBtC,EAAY,EAEjE,CAEIwF,GAAQrD,IACV2C,GAAaU,EAAK,UAAU,EAG9B,MAAMiD,EAAehD,GAAoB9C,GAAWwC,EAAQK,CAAI,EAEhE,KAAOM,EAAc2C,EAAa,YAEhCjC,GAAkBV,CAAW,EAE7BsB,GAAoBtB,CAAW,EAK3BI,GAAoBJ,EAAY,OAAO,GACzC6B,GAAoB7B,EAAY,OAAO,EAI3C,GAAInD,GACF,OAAIZ,GACF2D,GAA2BP,CAAK,EAE3BA,EAGT,GAAI/C,GAAY,CAId,GAHIL,GACF2D,GAA2BF,CAAI,EAE7BnD,GAEF,IADAkG,EAAajI,GAAuB,KAAKkF,EAAK,aAAa,EACpDA,EAAK,YAEV+C,EAAW,YAAY/C,EAAK,UAAU,OAGxC+C,EAAa/C,EAEf,OAAInE,EAAa,YAAcA,EAAa,kBAQ1CkH,EAAa/H,GAAW,KAAK3B,EAAkB0J,EAAY,EAAI,GAE1DA,CACT,CACA,IAAIG,EAAiBzG,GAAiBuD,EAAK,UAAYA,EAAK,UAE5D,OAAIvD,IAAkBd,EAAa,UAAU,GAAKqE,EAAK,eAAiBA,EAAK,cAAc,SAAWA,EAAK,cAAc,QAAQ,MAAQ9K,EAAWkD,GAAc4H,EAAK,cAAc,QAAQ,IAAI,IAC/LkD,EAAiB,aAAelD,EAAK,cAAc,QAAQ,KAAO;AAAA,EAAQkD,GAGxE3G,GACFxI,GAAa,CAACmH,GAAiBC,GAAYC,EAAa,EAAGmF,GAAQ,CACjE2C,EAAiBzO,GAAcyO,EAAgB3C,EAAM,GAAG,CAC1D,CAAC,EAEIhG,GAAsBuC,GAAsBpC,EAAmBwI,CAAc,EAAIA,CAC1F,EACAhK,EAAU,UAAY,UAAY,CAChC,IAAI2F,EAAM,UAAU,OAAS,GAAK,UAAU,CAAC,IAAM,OAAY,UAAU,CAAC,EAAI,CAAA,EAC9ED,GAAaC,CAAG,EAChBnC,GAAa,EACf,EACAxD,EAAU,YAAc,UAAY,CAClCsF,GAAS,KACT9B,GAAa,EACf,EACAxD,EAAU,iBAAmB,SAAUiK,EAAKpB,EAAMxL,EAAO,CAElDiI,IACHI,GAAa,CAAA,CAAE,EAEjB,MAAM4C,EAAQ5L,EAAkBuN,CAAG,EAC7B1B,EAAS7L,EAAkBmM,CAAI,EACrC,OAAOR,GAAkBC,EAAOC,EAAQlL,CAAK,CAC/C,EACA2C,EAAU,QAAU,SAAUkK,EAAYC,EAAc,CAClD,OAAOA,GAAiB,YAG5BlP,GAAU8G,EAAMmI,CAAU,EAAGC,CAAY,CAC3C,EACAnK,EAAU,WAAa,SAAUkK,EAAYC,EAAc,CACzD,GAAIA,IAAiB,OAAW,CAC9B,MAAMrN,EAAQ/B,GAAiBgH,EAAMmI,CAAU,EAAGC,CAAY,EAC9D,OAAOrN,IAAU,GAAK,OAAY5B,GAAY6G,EAAMmI,CAAU,EAAGpN,EAAO,CAAC,EAAE,CAAC,CAC9E,CACA,OAAO9B,GAAS+G,EAAMmI,CAAU,CAAC,CACnC,EACAlK,EAAU,YAAc,SAAUkK,EAAY,CAC5CnI,EAAMmI,CAAU,EAAI,CAAA,CACtB,EACAlK,EAAU,eAAiB,UAAY,CACrC+B,EAAQlC,GAAe,CACzB,EACOG,CACT,CACA,IAAIoK,GAAStK,GAAe,ECpuD5B,MAAM2C,GAAe,CACpB,IAAK,KACL,KAAM,KAAM,KACZ,KAAM,KAAM,KAAM,KAAM,KAAM,KAC9B,SAAU,IAAK,KAAM,IAAK,IAAK,IAAK,MACpC,aAAc,MAAO,MACtB,EAMO,SAAS4H,GAAqB/L,EAAM,CAC1C,OAAO0B,GAAU,SAAS,OAAO1B,GAAQ,EAAE,EAAG,CAC7C,aAAAmE,GACA,aAAc,CAAA,EAEd,gBAAiB,EACnB,CAAE,CACF","x_google_ignoreList":[1]}
\ No newline at end of file
diff --git a/package-lock.json b/package-lock.json
index b570559..b121db9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8,11 +8,15 @@
 			"name": "etherpad-nextcloud",
 			"version": "1.1.0-alpha.2",
 			"license": "AGPL-3.0-or-later",
+			"dependencies": {
+				"dompurify": "^3.4.8"
+			},
 			"devDependencies": {
 				"@nextcloud/vite-config": "^2.5.0",
 				"@playwright/test": "^1.60.0",
 				"dotenv": "^17.4.2",
 				"happy-dom": "^20.9.0",
+				"jsdom": "^29.1.1",
 				"vite": "^7.1.10",
 				"vitest": "^4.1.7"
 			},
@@ -20,6 +24,57 @@
 				"node": ">=20"
 			}
 		},
+		"node_modules/@asamuzakjp/css-color": {
+			"version": "5.1.11",
+			"resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-5.1.11.tgz",
+			"integrity": "sha512-KVw6qIiCTUQhByfTd78h2yD1/00waTmm9uy/R7Ck/ctUyAPj+AEDLkQIdJW0T8+qGgj3j5bpNKK7Q3G+LedJWg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@asamuzakjp/generational-cache": "^1.0.1",
+				"@csstools/css-calc": "^3.2.0",
+				"@csstools/css-color-parser": "^4.1.0",
+				"@csstools/css-parser-algorithms": "^4.0.0",
+				"@csstools/css-tokenizer": "^4.0.0"
+			},
+			"engines": {
+				"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+			}
+		},
+		"node_modules/@asamuzakjp/dom-selector": {
+			"version": "7.1.1",
+			"resolved": "https://registry.npmjs.org/@asamuzakjp/dom-selector/-/dom-selector-7.1.1.tgz",
+			"integrity": "sha512-67RZDnYRc8H/8MLDgQCDE//zoqVFwajkepHZgmXrbwybzXOEwOWGPYGmALYl9J2DOLfFPPs6kKCqmbzV895hTQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@asamuzakjp/generational-cache": "^1.0.1",
+				"@asamuzakjp/nwsapi": "^2.3.9",
+				"bidi-js": "^1.0.3",
+				"css-tree": "^3.2.1",
+				"is-potential-custom-element-name": "^1.0.1"
+			},
+			"engines": {
+				"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+			}
+		},
+		"node_modules/@asamuzakjp/generational-cache": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/@asamuzakjp/generational-cache/-/generational-cache-1.0.1.tgz",
+			"integrity": "sha512-wajfB8KqzMCN2KGNFdLkReeHncd0AslUSrvHVvvYWuU8ghncRJoA50kT3zP9MVL0+9g4/67H+cdvBskj9THPzg==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+			}
+		},
+		"node_modules/@asamuzakjp/nwsapi": {
+			"version": "2.3.9",
+			"resolved": "https://registry.npmjs.org/@asamuzakjp/nwsapi/-/nwsapi-2.3.9.tgz",
+			"integrity": "sha512-n8GuYSrI9bF7FFZ/SjhwevlHc8xaVlb/7HmHelnc/PZXBD2ZR49NnN9sMMuDdEGPeeRQ5d0hqlSlEpgCX3Wl0Q==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/@babel/helper-string-parser": {
 			"version": "7.27.1",
 			"resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz",
@@ -70,6 +125,159 @@
 				"node": ">=6.9.0"
 			}
 		},
+		"node_modules/@bramus/specificity": {
+			"version": "2.4.2",
+			"resolved": "https://registry.npmjs.org/@bramus/specificity/-/specificity-2.4.2.tgz",
+			"integrity": "sha512-ctxtJ/eA+t+6q2++vj5j7FYX3nRu311q1wfYH3xjlLOsczhlhxAg2FWNUXhpGvAw3BWo1xBcvOV6/YLc2r5FJw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"css-tree": "^3.0.0"
+			},
+			"bin": {
+				"specificity": "bin/cli.js"
+			}
+		},
+		"node_modules/@csstools/color-helpers": {
+			"version": "6.0.2",
+			"resolved": "https://registry.npmjs.org/@csstools/color-helpers/-/color-helpers-6.0.2.tgz",
+			"integrity": "sha512-LMGQLS9EuADloEFkcTBR3BwV/CGHV7zyDxVRtVDTwdI2Ca4it0CCVTT9wCkxSgokjE5Ho41hEPgb8OEUwoXr6Q==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/csstools"
+				},
+				{
+					"type": "opencollective",
+					"url": "https://opencollective.com/csstools"
+				}
+			],
+			"license": "MIT-0",
+			"engines": {
+				"node": ">=20.19.0"
+			}
+		},
+		"node_modules/@csstools/css-calc": {
+			"version": "3.2.1",
+			"resolved": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-3.2.1.tgz",
+			"integrity": "sha512-DtdHlgXh5ZkA43cwBcAm+huzgJiwx3ZTWVjBs94kwz2xKqSimDA3lBgCjphYgwgVUMWatSM0pDd8TILB1yrVVg==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/csstools"
+				},
+				{
+					"type": "opencollective",
+					"url": "https://opencollective.com/csstools"
+				}
+			],
+			"license": "MIT",
+			"engines": {
+				"node": ">=20.19.0"
+			},
+			"peerDependencies": {
+				"@csstools/css-parser-algorithms": "^4.0.0",
+				"@csstools/css-tokenizer": "^4.0.0"
+			}
+		},
+		"node_modules/@csstools/css-color-parser": {
+			"version": "4.1.1",
+			"resolved": "https://registry.npmjs.org/@csstools/css-color-parser/-/css-color-parser-4.1.1.tgz",
+			"integrity": "sha512-eZ5XOtyhK+mggRafYUWzA0tvaYOFgdY8AkgQiCJF9qNAePnUo/zmsqqYubBBb3sQ8uNUaSKTY9s9klfRaAXL0g==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/csstools"
+				},
+				{
+					"type": "opencollective",
+					"url": "https://opencollective.com/csstools"
+				}
+			],
+			"license": "MIT",
+			"dependencies": {
+				"@csstools/color-helpers": "^6.0.2",
+				"@csstools/css-calc": "^3.2.1"
+			},
+			"engines": {
+				"node": ">=20.19.0"
+			},
+			"peerDependencies": {
+				"@csstools/css-parser-algorithms": "^4.0.0",
+				"@csstools/css-tokenizer": "^4.0.0"
+			}
+		},
+		"node_modules/@csstools/css-parser-algorithms": {
+			"version": "4.0.0",
+			"resolved": "https://registry.npmjs.org/@csstools/css-parser-algorithms/-/css-parser-algorithms-4.0.0.tgz",
+			"integrity": "sha512-+B87qS7fIG3L5h3qwJ/IFbjoVoOe/bpOdh9hAjXbvx0o8ImEmUsGXN0inFOnk2ChCFgqkkGFQ+TpM5rbhkKe4w==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/csstools"
+				},
+				{
+					"type": "opencollective",
+					"url": "https://opencollective.com/csstools"
+				}
+			],
+			"license": "MIT",
+			"engines": {
+				"node": ">=20.19.0"
+			},
+			"peerDependencies": {
+				"@csstools/css-tokenizer": "^4.0.0"
+			}
+		},
+		"node_modules/@csstools/css-syntax-patches-for-csstree": {
+			"version": "1.1.5",
+			"resolved": "https://registry.npmjs.org/@csstools/css-syntax-patches-for-csstree/-/css-syntax-patches-for-csstree-1.1.5.tgz",
+			"integrity": "sha512-oNjBvzLq2GPZtJphCjLqXow/cHySHSgtxvKZb7OqSZ/xHgw6NWNhfad+6AB9cLeVm6eA9d/qMll3JdEHjy6M+A==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/csstools"
+				},
+				{
+					"type": "opencollective",
+					"url": "https://opencollective.com/csstools"
+				}
+			],
+			"license": "MIT-0",
+			"peerDependencies": {
+				"css-tree": "^3.2.1"
+			},
+			"peerDependenciesMeta": {
+				"css-tree": {
+					"optional": true
+				}
+			}
+		},
+		"node_modules/@csstools/css-tokenizer": {
+			"version": "4.0.0",
+			"resolved": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-4.0.0.tgz",
+			"integrity": "sha512-QxULHAm7cNu72w97JUNCBFODFaXpbDg+dP8b/oWFAZ2MTRppA3U00Y2L1HqaS4J6yBqxwa/Y3nMBaxVKbB/NsA==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/csstools"
+				},
+				{
+					"type": "opencollective",
+					"url": "https://opencollective.com/csstools"
+				}
+			],
+			"license": "MIT",
+			"engines": {
+				"node": ">=20.19.0"
+			}
+		},
 		"node_modules/@esbuild/aix-ppc64": {
 			"version": "0.25.12",
 			"resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.25.12.tgz",
@@ -512,6 +720,24 @@
 				"node": ">=18"
 			}
 		},
+		"node_modules/@exodus/bytes": {
+			"version": "1.15.1",
+			"resolved": "https://registry.npmjs.org/@exodus/bytes/-/bytes-1.15.1.tgz",
+			"integrity": "sha512-S6mL0yNB/Abt9Ei4tq8gDhcczc4S3+vQ4ra7vxnAf+YHC02srtqxKKZghx2Dq6p0e66THKwR6r8N6P95wEty7Q==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+			},
+			"peerDependencies": {
+				"@noble/hashes": "^1.8.0 || ^2.0.0"
+			},
+			"peerDependenciesMeta": {
+				"@noble/hashes": {
+					"optional": true
+				}
+			}
+		},
 		"node_modules/@jridgewell/sourcemap-codec": {
 			"version": "1.5.5",
 			"resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
@@ -1527,6 +1753,13 @@
 				"undici-types": "~7.19.0"
 			}
 		},
+		"node_modules/@types/trusted-types": {
+			"version": "2.0.7",
+			"resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz",
+			"integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==",
+			"license": "MIT",
+			"optional": true
+		},
 		"node_modules/@types/whatwg-mimetype": {
 			"version": "3.0.2",
 			"resolved": "https://registry.npmjs.org/@types/whatwg-mimetype/-/whatwg-mimetype-3.0.2.tgz",
@@ -2090,6 +2323,16 @@
 				"node": ">=6.0.0"
 			}
 		},
+		"node_modules/bidi-js": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/bidi-js/-/bidi-js-1.0.3.tgz",
+			"integrity": "sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"require-from-string": "^2.0.2"
+			}
+		},
 		"node_modules/bn.js": {
 			"version": "5.2.3",
 			"resolved": "https://registry.npmjs.org/bn.js/-/bn.js-5.2.3.tgz",
@@ -2608,6 +2851,20 @@
 				"url": "https://github.com/sponsors/ljharb"
 			}
 		},
+		"node_modules/css-tree": {
+			"version": "3.2.1",
+			"resolved": "https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz",
+			"integrity": "sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"mdn-data": "2.27.1",
+				"source-map-js": "^1.2.1"
+			},
+			"engines": {
+				"node": "^10 || ^12.20.0 || ^14.13.0 || >=15.0.0"
+			}
+		},
 		"node_modules/csstype": {
 			"version": "3.2.3",
 			"resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
@@ -2616,6 +2873,30 @@
 			"license": "MIT",
 			"peer": true
 		},
+		"node_modules/data-urls": {
+			"version": "7.0.0",
+			"resolved": "https://registry.npmjs.org/data-urls/-/data-urls-7.0.0.tgz",
+			"integrity": "sha512-23XHcCF+coGYevirZceTVD7NdJOqVn+49IHyxgszm+JIiHLoB2TkmPtsYkNWT1pvRSGkc35L6NHs0yHkN2SumA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"whatwg-mimetype": "^5.0.0",
+				"whatwg-url": "^16.0.0"
+			},
+			"engines": {
+				"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+			}
+		},
+		"node_modules/data-urls/node_modules/whatwg-mimetype": {
+			"version": "5.0.0",
+			"resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-5.0.0.tgz",
+			"integrity": "sha512-sXcNcHOC51uPGF0P/D4NVtrkjSU2fNsm9iog4ZvZJsL3rjoDAzXZhkm2MWt1y+PUdggKAYVoMAIYcs78wJ51Cw==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=20"
+			}
+		},
 		"node_modules/de-indent": {
 			"version": "1.0.2",
 			"resolved": "https://registry.npmjs.org/de-indent/-/de-indent-1.0.2.tgz",
@@ -2641,6 +2922,13 @@
 				}
 			}
 		},
+		"node_modules/decimal.js": {
+			"version": "10.6.0",
+			"resolved": "https://registry.npmjs.org/decimal.js/-/decimal.js-10.6.0.tgz",
+			"integrity": "sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/define-data-property": {
 			"version": "1.1.4",
 			"resolved": "https://registry.npmjs.org/define-data-property/-/define-data-property-1.1.4.tgz",
@@ -2742,6 +3030,15 @@
 				"url": "https://bevry.me/fund"
 			}
 		},
+		"node_modules/dompurify": {
+			"version": "3.4.8",
+			"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.8.tgz",
+			"integrity": "sha512-yb1cEmaOum7wFvOCSQxyfgVlv5D47Rc30iZWoMpbDIWTnJ6grDDQyu2KFJzB2k7u0pMuJcQ1zphH//fFnw2tjQ==",
+			"license": "(MPL-2.0 OR Apache-2.0)",
+			"optionalDependencies": {
+				"@types/trusted-types": "^2.0.7"
+			}
+		},
 		"node_modules/dotenv": {
 			"version": "17.4.2",
 			"resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
@@ -3275,6 +3572,19 @@
 				"minimalistic-crypto-utils": "^1.0.1"
 			}
 		},
+		"node_modules/html-encoding-sniffer": {
+			"version": "6.0.0",
+			"resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-6.0.0.tgz",
+			"integrity": "sha512-CV9TW3Y3f8/wT0BRFc1/KAVQ3TUHiXmaAb6VW9vtiMFf7SLoMd1PdAc4W3KFOFETBJUb90KatHqlsZMWV+R9Gg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@exodus/bytes": "^1.6.0"
+			},
+			"engines": {
+				"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+			}
+		},
 		"node_modules/https-browserify": {
 			"version": "1.0.0",
 			"resolved": "https://registry.npmjs.org/https-browserify/-/https-browserify-1.0.0.tgz",
@@ -3438,6 +3748,13 @@
 				"url": "https://github.com/sponsors/ljharb"
 			}
 		},
+		"node_modules/is-potential-custom-element-name": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/is-potential-custom-element-name/-/is-potential-custom-element-name-1.0.1.tgz",
+			"integrity": "sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/is-regex": {
 			"version": "1.2.1",
 			"resolved": "https://registry.npmjs.org/is-regex/-/is-regex-1.2.1.tgz",
@@ -3497,6 +3814,57 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/jsdom": {
+			"version": "29.1.1",
+			"resolved": "https://registry.npmjs.org/jsdom/-/jsdom-29.1.1.tgz",
+			"integrity": "sha512-ECi4Fi2f7BdJtUKTflYRTiaMxIB0O6zfR1fX0GXpUrf6flp8QIYn1UT20YQqdSOfk2dfkCwS8LAFoJDEppNK5Q==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@asamuzakjp/css-color": "^5.1.11",
+				"@asamuzakjp/dom-selector": "^7.1.1",
+				"@bramus/specificity": "^2.4.2",
+				"@csstools/css-syntax-patches-for-csstree": "^1.1.3",
+				"@exodus/bytes": "^1.15.0",
+				"css-tree": "^3.2.1",
+				"data-urls": "^7.0.0",
+				"decimal.js": "^10.6.0",
+				"html-encoding-sniffer": "^6.0.0",
+				"is-potential-custom-element-name": "^1.0.1",
+				"lru-cache": "^11.3.5",
+				"parse5": "^8.0.1",
+				"saxes": "^6.0.0",
+				"symbol-tree": "^3.2.4",
+				"tough-cookie": "^6.0.1",
+				"undici": "^7.25.0",
+				"w3c-xmlserializer": "^5.0.0",
+				"webidl-conversions": "^8.0.1",
+				"whatwg-mimetype": "^5.0.0",
+				"whatwg-url": "^16.0.1",
+				"xml-name-validator": "^5.0.0"
+			},
+			"engines": {
+				"node": "^20.19.0 || ^22.13.0 || >=24.0.0"
+			},
+			"peerDependencies": {
+				"canvas": "^3.0.0"
+			},
+			"peerDependenciesMeta": {
+				"canvas": {
+					"optional": true
+				}
+			}
+		},
+		"node_modules/jsdom/node_modules/whatwg-mimetype": {
+			"version": "5.0.0",
+			"resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-5.0.0.tgz",
+			"integrity": "sha512-sXcNcHOC51uPGF0P/D4NVtrkjSU2fNsm9iog4ZvZJsL3rjoDAzXZhkm2MWt1y+PUdggKAYVoMAIYcs78wJ51Cw==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=20"
+			}
+		},
 		"node_modules/json-schema-traverse": {
 			"version": "1.0.0",
 			"resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
@@ -3565,6 +3933,16 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/lru-cache": {
+			"version": "11.5.1",
+			"resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.1.tgz",
+			"integrity": "sha512-RPimw/7aMdv2oqRrxKwvZXcPfwBrn/JZ2xYcY9Hus/6LaS3VOAKVWKWgNLCFSiOm1ESXinjsDlidVU7JlnCN2A==",
+			"dev": true,
+			"license": "BlueOak-1.0.0",
+			"engines": {
+				"node": "20 || >=22"
+			}
+		},
 		"node_modules/magic-string": {
 			"version": "0.30.21",
 			"resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
@@ -3597,6 +3975,13 @@
 				"safe-buffer": "^5.1.2"
 			}
 		},
+		"node_modules/mdn-data": {
+			"version": "2.27.1",
+			"resolved": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.27.1.tgz",
+			"integrity": "sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==",
+			"dev": true,
+			"license": "CC0-1.0"
+		},
 		"node_modules/meow": {
 			"version": "13.2.0",
 			"resolved": "https://registry.npmjs.org/meow/-/meow-13.2.0.tgz",
@@ -3939,6 +4324,32 @@
 				"node": ">= 0.10"
 			}
 		},
+		"node_modules/parse5": {
+			"version": "8.0.1",
+			"resolved": "https://registry.npmjs.org/parse5/-/parse5-8.0.1.tgz",
+			"integrity": "sha512-z1e/HMG90obSGeidlli3hj7cbocou0/wa5HacvI3ASx34PecNjNQeaHNo5WIZpWofN9kgkqV1q5YvXe3F0FoPw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"entities": "^8.0.0"
+			},
+			"funding": {
+				"url": "https://github.com/inikulin/parse5?sponsor=1"
+			}
+		},
+		"node_modules/parse5/node_modules/entities": {
+			"version": "8.0.0",
+			"resolved": "https://registry.npmjs.org/entities/-/entities-8.0.0.tgz",
+			"integrity": "sha512-zwfzJecQ/Uej6tusMqwAqU/6KL2XaB2VZ2Jg54Je6ahNBGNH6Ek6g3jjNCF0fG9EWQKGZNddNjU5F1ZQn/sBnA==",
+			"dev": true,
+			"license": "BSD-2-Clause",
+			"engines": {
+				"node": ">=20.19.0"
+			},
+			"funding": {
+				"url": "https://github.com/fb55/entities?sponsor=1"
+			}
+		},
 		"node_modules/path-browserify": {
 			"version": "1.0.1",
 			"resolved": "https://registry.npmjs.org/path-browserify/-/path-browserify-1.0.1.tgz",
@@ -4555,6 +4966,19 @@
 				"@parcel/watcher": "^2.4.1"
 			}
 		},
+		"node_modules/saxes": {
+			"version": "6.0.0",
+			"resolved": "https://registry.npmjs.org/saxes/-/saxes-6.0.0.tgz",
+			"integrity": "sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA==",
+			"dev": true,
+			"license": "ISC",
+			"dependencies": {
+				"xmlchars": "^2.2.0"
+			},
+			"engines": {
+				"node": ">=v12.22.7"
+			}
+		},
 		"node_modules/semver": {
 			"version": "7.7.4",
 			"resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
@@ -4910,6 +5334,13 @@
 				"url": "https://github.com/sponsors/ljharb"
 			}
 		},
+		"node_modules/symbol-tree": {
+			"version": "3.2.4",
+			"resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
+			"integrity": "sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/timers-browserify": {
 			"version": "2.0.12",
 			"resolved": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-2.0.12.tgz",
@@ -4967,6 +5398,26 @@
 				"node": ">=14.0.0"
 			}
 		},
+		"node_modules/tldts": {
+			"version": "7.4.2",
+			"resolved": "https://registry.npmjs.org/tldts/-/tldts-7.4.2.tgz",
+			"integrity": "sha512-kCwffuaH8ntKtygnWe1b4BJKWiCUH30n5KfoTr6IchcXOwR7chAOFJxFrH3vjANafUYrIA4a7SDL+nn7SiR4Sw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"tldts-core": "^7.4.2"
+			},
+			"bin": {
+				"tldts": "bin/cli.js"
+			}
+		},
+		"node_modules/tldts-core": {
+			"version": "7.4.2",
+			"resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-7.4.2.tgz",
+			"integrity": "sha512-nwEyF4vl4RSJjwSjBUmOSxc3BFPoIFdlRthJ6e+5v9P3bHNsoD06UjuqMUspqp7vsEZ1beaHi1km+optiE17yA==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/to-buffer": {
 			"version": "1.2.2",
 			"resolved": "https://registry.npmjs.org/to-buffer/-/to-buffer-1.2.2.tgz",
@@ -4982,6 +5433,42 @@
 				"node": ">= 0.4"
 			}
 		},
+		"node_modules/tough-cookie": {
+			"version": "6.0.1",
+			"resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-6.0.1.tgz",
+			"integrity": "sha512-LktZQb3IeoUWB9lqR5EWTHgW/VTITCXg4D21M+lvybRVdylLrRMnqaIONLVb5mav8vM19m44HIcGq4qASeu2Qw==",
+			"dev": true,
+			"license": "BSD-3-Clause",
+			"dependencies": {
+				"tldts": "^7.0.5"
+			},
+			"engines": {
+				"node": ">=16"
+			}
+		},
+		"node_modules/tr46": {
+			"version": "6.0.0",
+			"resolved": "https://registry.npmjs.org/tr46/-/tr46-6.0.0.tgz",
+			"integrity": "sha512-bLVMLPtstlZ4iMQHpFHTR7GAGj2jxi8Dg0s2h2MafAE4uSWF98FC/3MomU51iQAMf8/qDUbKWf5GxuvvVcXEhw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"punycode": "^2.3.1"
+			},
+			"engines": {
+				"node": ">=20"
+			}
+		},
+		"node_modules/tr46/node_modules/punycode": {
+			"version": "2.3.1",
+			"resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
+			"integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=6"
+			}
+		},
 		"node_modules/tty-browserify": {
 			"version": "0.0.1",
 			"resolved": "https://registry.npmjs.org/tty-browserify/-/tty-browserify-0.0.1.tgz",
@@ -5026,6 +5513,16 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/undici": {
+			"version": "7.27.2",
+			"resolved": "https://registry.npmjs.org/undici/-/undici-7.27.2.tgz",
+			"integrity": "sha512-uZsKNuzQxDMUY6M3pIMvy5tvlGmtq8XJ2oLAkfRKGNu+1VQAIvLy2xIVG5ATZl5wDXl/tddByAWCizRbOme+TA==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=20.18.1"
+			}
+		},
 		"node_modules/undici-types": {
 			"version": "7.19.2",
 			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.19.2.tgz",
@@ -5849,6 +6346,29 @@
 				}
 			}
 		},
+		"node_modules/w3c-xmlserializer": {
+			"version": "5.0.0",
+			"resolved": "https://registry.npmjs.org/w3c-xmlserializer/-/w3c-xmlserializer-5.0.0.tgz",
+			"integrity": "sha512-o8qghlI8NZHU1lLPrpi2+Uq7abh4GGPpYANlalzWxyWteJOCsr/P+oPBA49TOLu5FTZO4d3F9MnWJfiMo4BkmA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"xml-name-validator": "^5.0.0"
+			},
+			"engines": {
+				"node": ">=18"
+			}
+		},
+		"node_modules/webidl-conversions": {
+			"version": "8.0.1",
+			"resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-8.0.1.tgz",
+			"integrity": "sha512-BMhLD/Sw+GbJC21C/UgyaZX41nPt8bUTg+jWyDeg7e7YN4xOM05YPSIXceACnXVtqyEw/LMClUQMtMZ+PGGpqQ==",
+			"dev": true,
+			"license": "BSD-2-Clause",
+			"engines": {
+				"node": ">=20"
+			}
+		},
 		"node_modules/whatwg-mimetype": {
 			"version": "3.0.0",
 			"resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-3.0.0.tgz",
@@ -5859,6 +6379,21 @@
 				"node": ">=12"
 			}
 		},
+		"node_modules/whatwg-url": {
+			"version": "16.0.1",
+			"resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-16.0.1.tgz",
+			"integrity": "sha512-1to4zXBxmXHV3IiSSEInrreIlu02vUOvrhxJJH5vcxYTBDAx51cqZiKdyTxlecdKNSjj8EcxGBxNf6Vg+945gw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@exodus/bytes": "^1.11.0",
+				"tr46": "^6.0.0",
+				"webidl-conversions": "^8.0.1"
+			},
+			"engines": {
+				"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
+			}
+		},
 		"node_modules/which-typed-array": {
 			"version": "1.1.20",
 			"resolved": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.20.tgz",
@@ -5920,6 +6455,23 @@
 				}
 			}
 		},
+		"node_modules/xml-name-validator": {
+			"version": "5.0.0",
+			"resolved": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-5.0.0.tgz",
+			"integrity": "sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"engines": {
+				"node": ">=18"
+			}
+		},
+		"node_modules/xmlchars": {
+			"version": "2.2.0",
+			"resolved": "https://registry.npmjs.org/xmlchars/-/xmlchars-2.2.0.tgz",
+			"integrity": "sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/xtend": {
 			"version": "4.0.2",
 			"resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
diff --git a/package.json b/package.json
index a57da16..e18d5cf 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,11 @@
 		"@playwright/test": "^1.60.0",
 		"dotenv": "^17.4.2",
 		"happy-dom": "^20.9.0",
+		"jsdom": "^29.1.1",
 		"vite": "^7.1.10",
 		"vitest": "^4.1.7"
+	},
+	"dependencies": {
+		"dompurify": "^3.4.8"
 	}
 }
diff --git a/src/embed-main.js b/src/embed-main.js
index f165a2f..6e872ad 100644
--- a/src/embed-main.js
+++ b/src/embed-main.js
@@ -5,6 +5,7 @@
 import { ocRequestToken } from './lib/oc-compat.js'
 import { createPadSync } from './lib/pad-sync.js'
 import { fetchJsonWithTimeout as fetchJson } from './lib/fetch-helpers.js'
+import { sanitizeSnapshotHtml } from './lib/sanitize-html.js'
 
 (function () {
 	const IFRAME_REVEAL_DELAY_MS = 100
@@ -104,13 +105,18 @@ import { fetchJsonWithTimeout as fetchJson } from './lib/fetch-helpers.js'
 		actions.className = 'epnc-embed__snapshot-actions'
 		actions.appendChild(link)
 
-		const hasSnapshotHtml = String(snapshotHtml || '').trim() !== ''
+		// Sanitize first, then decide on the HTML path from the *sanitized*
+		// result: if DOMPurify empties it (e.g. all-dangerous markup) we fall
+		// back to the text / empty-message path instead of rendering a blank
+		// HTML block (mirrors viewer-main's renderSnapshotView).
+		const sanitizedSnapshotHtml = sanitizeSnapshotHtml(snapshotHtml)
+		const hasSnapshotHtml = sanitizedSnapshotHtml.trim() !== ''
 		const preview = document.createElement(hasSnapshotHtml ? 'div' : 'pre')
 		preview.className = hasSnapshotHtml
 			? 'epnc-embed__snapshot-text epnc-embed__snapshot-text--html'
 			: 'epnc-embed__snapshot-text'
 		if (hasSnapshotHtml) {
-			preview.innerHTML = String(snapshotHtml)
+			preview.innerHTML = sanitizedSnapshotHtml
 		} else {
 			preview.textContent = String(snapshotText || '').trim() !== '' ? String(snapshotText) : externalEmptyText
 		}
diff --git a/src/lib/sanitize-html.js b/src/lib/sanitize-html.js
new file mode 100644
index 0000000..e51b8ad
--- /dev/null
+++ b/src/lib/sanitize-html.js
@@ -0,0 +1,39 @@
+/**
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ * Copyright (c) 2026 Jacob Bühler
+ */
+import DOMPurify from 'dompurify'
+
+/**
+ * Client-side defense-in-depth for snapshot HTML.
+ *
+ * Snapshot HTML stored in `.pad` files is already sanitized server-side by
+ * `SnapshotHtmlSanitizer` before it reaches the browser, but `.pad` bodies are
+ * attacker-writable (WebDAV / a malicious share) and that server pass is the
+ * sole XSS gate. Since the viewer and embed inject the HTML via `innerHTML`,
+ * we run it through DOMPurify with the *same* allowlist the server enforces
+ * (formatting tags only, no attributes) so a regression in the server gate
+ * can't turn into stored XSS.
+ *
+ * Mirrors `SnapshotHtmlSanitizer::ALLOWED_TAGS`.
+ */
+const ALLOWED_TAGS = [
+	'p', 'br',
+	'ul', 'ol', 'li',
+	'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
+	'strong', 'b', 'em', 'i', 'u', 's', 'del',
+	'blockquote', 'pre', 'code',
+]
+
+/**
+ * @param {unknown} html
+ * @return {string} sanitized HTML safe to assign to innerHTML
+ */
+export function sanitizeSnapshotHtml(html) {
+	return DOMPurify.sanitize(String(html ?? ''), {
+		ALLOWED_TAGS,
+		ALLOWED_ATTR: [],
+		// No data URIs, no unknown protocols — there are no attributes anyway.
+		ALLOW_DATA_ATTR: false,
+	})
+}
diff --git a/src/viewer-main.js b/src/viewer-main.js
index 8cb8116..bf459b8 100644
--- a/src/viewer-main.js
+++ b/src/viewer-main.js
@@ -6,6 +6,7 @@ import { APP_ID, MIME, VIEWER_HANDLER_ID } from './lib/constants.js'
 import { apiFindOriginalPad, apiRecoverFromSnapshot } from './lib/api-client.js'
 import { ocGenerateUrl, ocRequestToken, translate } from './lib/oc-compat.js'
 import { createPadSync } from './lib/pad-sync.js'
+import { sanitizeSnapshotHtml } from './lib/sanitize-html.js'
 import { buildPadFrameSrcdoc } from './lib/pad-frame-srcdoc.js'
 import { parsePadPathFromDavHref, parsePublicShareTokenFromLocation } from './lib/urls.js'
 
@@ -397,7 +398,7 @@ import { parsePadPathFromDavHref, parsePublicShareTokenFromLocation } from './li
 				}
 			},
 			renderSnapshotView(createElement, options) {
-				const html = String(options.html || '')
+				const html = sanitizeSnapshotHtml(options.html)
 				const text = String(options.text || '')
 				const actions = Array.isArray(options.actions) ? options.actions : []
 
diff --git a/tests/js/lib/sanitize-html.test.js b/tests/js/lib/sanitize-html.test.js
new file mode 100644
index 0000000..0c5c3ac
--- /dev/null
+++ b/tests/js/lib/sanitize-html.test.js
@@ -0,0 +1,47 @@
+// @vitest-environment jsdom
+// DOMPurify is tested against jsdom upstream; happy-dom mis-sanitizes, so this
+// file pins jsdom to exercise the real sanitizer behavior.
+import { describe, expect, it } from 'vitest'
+import { sanitizeSnapshotHtml } from '../../../src/lib/sanitize-html.js'
+
+describe('sanitizeSnapshotHtml', () => {
+	it('keeps the allowed formatting tags', () => {
+		const html = '<p>Hello <strong>bold</strong> <em>italic</em></p><ul><li>one</li></ul>'
+		expect(sanitizeSnapshotHtml(html)).toBe(html)
+	})
+
+	it('strips <script> tags entirely', () => {
+		const out = sanitizeSnapshotHtml('<p>safe</p><script>alert(1)</script>')
+		expect(out).toBe('<p>safe</p>')
+		expect(out).not.toContain('script')
+	})
+
+	it('removes event-handler attributes while keeping the element text', () => {
+		const out = sanitizeSnapshotHtml('<p onclick="alert(1)">click</p>')
+		expect(out).toBe('<p>click</p>')
+		expect(out).not.toContain('onclick')
+	})
+
+	it('drops an <img onerror> XSS vector (img is not allowed)', () => {
+		const out = sanitizeSnapshotHtml('<img src=x onerror="alert(1)">')
+		expect(out).not.toContain('onerror')
+		expect(out).not.toContain('<img')
+	})
+
+	it('strips all attributes, including class', () => {
+		const out = sanitizeSnapshotHtml('<p class="evil" style="color:red">x</p>')
+		expect(out).toBe('<p>x</p>')
+	})
+
+	it('unwraps disallowed tags but keeps their text content', () => {
+		const out = sanitizeSnapshotHtml('<div><a href="javascript:alert(1)">link</a></div>')
+		expect(out).not.toContain('<a')
+		expect(out).not.toContain('javascript:')
+		expect(out).toContain('link')
+	})
+
+	it('tolerates non-string / nullish input', () => {
+		expect(sanitizeSnapshotHtml(null)).toBe('')
+		expect(sanitizeSnapshotHtml(undefined)).toBe('')
+	})
+})