@nifrajs/link-safety 0.1.0

package/dist/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAiB/C,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,0BAA0B,GAAG,IAAI,CAAC;AACxC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,uBAAuB,CAAC,CAAC;AAChE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,mBAAmB,CAAC,CAAC;AAExD,MAAM,UAAU,uBAAuB,CAAC,WAA4B,EAAE;IAGpE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,CAAC,KAAc,EAAE,UAA2B,EAAE,EAAE,EAAE,CACtD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;KACnD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAc,EACd,UAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC;IAC9D,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAE5E,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,YAAY,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,gBAAgB,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IAEnC,IAAI,OAAO,GAA2B,EAAE,CAAC;IACzC,IAAI,aAAiC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,gBAAgB,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,oBAAoB,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAE5E,MAAM,aAAa,GAAG,2BAA2B,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC;IACjF,IAAI,QAA0C,CAAC;IAC/C,IAAI,QAAQ,GAA2B,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC;QACvD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,OAAO,OAAO,CAAC,6BAA6B,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,oBAAoB,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,QAAQ,GAAG,wBAAwB,CACjC,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAChC,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,OAAO;gBACP,QAAQ;gBACR,MAAM;aACP,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CACZ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB,EACvD,SAAS,EACT,UAAU,CAAC,IAAI,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAE5E,OAAO,qBAAqB,CAC1B,UAAU,CAAC,IAAI,EACf,OAAO,EACP,QAAQ,EAAE,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAC5C,aAAa,EACb,MAAM,EACN,aAAa,EACb,OAAO,CAAC,UAAU,EAAE,EAAE,EACtB,SAAS,CACV,CAAC;AACJ,CAAC;AASD,SAAS,qBAAqB,CAC5B,IAAoB,EACpB,OAA+B,EAC/B,QAAiE,EACjE,aAA0C,EAC1C,MAAkC,EAClC,aAAiC,EACjC,YAAgC,EAChC,SAAiB;IAEjB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAmB,aAAa,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,OAAO,GAAsB,aAAa,CAAC,OAAO,CAAC;IACvD,IAAI,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC;IAC1C,IAAI,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;IACxC,IAAI,QAA4B,CAAC;IACjC,IAAI,KAAyB,CAAC;IAE9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,YAAY,CAAC;QAC7C,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjE,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpD,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACjC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC3B,IAAI,aAAa,CAAC,OAAO,KAAK,WAAW,IAAI,QAAQ,EAAE,CAAC;YACtD,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;QAClD,CAAC;aAAM,IAAI,aAAa,CAAC,SAAS,IAAI,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5E,OAAO,GAAG,YAAY,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,GAAG,YAAY,CAAC;QACvB,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,cAAc,GAAG,iBAAiB,CACtC,OAAO,EACP,UAAU,EACV,MAAM,EACN,OAAO,EACP,QAAQ,CACT,CAAC;IACF,MAAM,QAAQ,GAAqB,MAAM,CAAC,MAAM,CAAC;QAC/C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;QACzD,gBAAgB,EAAE,OAAO,CAAC,MAAM;QAChC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/D,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,IAAI;QACR,IAAI;QACJ,OAAO;QACP,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC;QAC/B,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC;QACjC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QACpC,iBAAiB,EAAE,cAAc,CAAC,MAAM;QACxC,YAAY,EAAE,cAAc,CAAC,MAAM;QACnC,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAClC,IAAoB,EACpB,OAA+B;IAE/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAmB,IAAI,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAEpD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;SACtB,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;SACtB,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO;QACL,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACrD,SAAS;QACT,UAAU,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAoB;IACzC,MAAM,OAAO,GAA8C;QACzD,iBAAiB,EAAE,GAAG;QACtB,UAAU,EAAE,IAAI;QAChB,yBAAyB,EAAE,GAAG;QAC9B,gBAAgB,EAAE,IAAI;QACtB,aAAa,EAAE,IAAI;QACnB,eAAe,EAAE,IAAI;QACrB,sBAAsB,EAAE,GAAG;QAC3B,SAAS,EAAE,IAAI;KAChB,CAAC;IACF,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA0B,EAC1B,UAAkB,EAClB,MAAkC,EAClC,OAA+B,EAC/B,QAAiB;IAKjB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACzE,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC;IAClF,IACE,OAAO,KAAK,WAAW;QACvB,CAAC,cAAc;YACb,CAAC,CAAC,MAAM,CAAC,mBAAmB;YAC5B,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,iBAAiB,CAAC,EAC3C,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,IAAI,UAAU,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACnE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACrF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CACrB,MAAoC;IAIpC,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;IAC3B,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;IAChF,IACE,OAAO,iBAAiB,KAAK,QAAQ;QACrC,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,iBAAiB,GAAG,CAAC;QACrB,iBAAiB,GAAG,CAAC,EACrB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI;YACjC,iBAAiB;YACjB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,KAAK,KAAK;SACzD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAe;IAC/C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC;gBACxC,CAAC,CAAC,MAAM,CAAC,KAAK;gBACd,CAAC,CAAC,6BAA6B;SAClC,CAAC;IACJ,CAAC;IACD,IACE,MAAM,CAAC,OAAO,KAAK,QAAQ;QAC3B,MAAM,CAAC,OAAO,KAAK,YAAY;QAC/B,MAAM,CAAC,OAAO,KAAK,WAAW,EAC9B,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IACE,OAAO,KAAK,SAAS;QACrB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACtB,OAAO,CAAC,MAAM,GAAG,EAAE;YACnB,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAC9C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG;YACtE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;YAC/B,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG;YAChE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;YACzB,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,KAAc;IAEd,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;QACnB,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,QAAyB,EACzB,OAAwB;IAExB,OAAO;QACL,GAAG,QAAQ;QACX,GAAG,OAAO;QACV,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,KAA0B,EAC1B,SAAiB,EACjB,IAAqB;IAErB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,KAAK;QACT,KAAK;QACL,iBAAiB,EAAE,QAAQ;QAC3B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;KAC/C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAChF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,112 @@
+export declare const LINK_SAFETY_VERDICTS: readonly ["benign", "suspicious", "malicious", "unknown"];
+export type LinkSafetyVerdict = (typeof LINK_SAFETY_VERDICTS)[number];
+export type ClassifiedLinkVerdict = Exclude<LinkSafetyVerdict, "unknown">;
+export declare const LINK_SAFETY_ACTIONS: readonly ["allow", "review", "block"];
+export type LinkSafetyAction = (typeof LINK_SAFETY_ACTIONS)[number];
+export declare const LINK_SAFETY_REASONS: readonly ["corpus_benign_match", "corpus_suspicious_match", "corpus_malicious_match", "corpus_conflict", "punycode_hostname", "ip_literal", "private_network_candidate", "non_default_port", "long_hostname", "many_subdomains", "encoded_path_separator", "long_path", "query_present", "semantic_classifier"];
+export type LinkSafetyReason = (typeof LINK_SAFETY_REASONS)[number];
+export declare const LINK_SAFETY_ERROR_CODES: readonly ["invalid_url", "corpus_invalid", "corpus_unavailable", "classifier_unavailable", "classifier_timeout", "classifier_rate_limited", "classifier_unauthorized", "classifier_response_invalid", "cancelled", "policy_invalid", "internal"];
+export type LinkSafetyErrorCode = (typeof LINK_SAFETY_ERROR_CODES)[number];
+export type CorpusLabel = Exclude<LinkSafetyVerdict, "unknown">;
+export type CorpusIndicatorType = "hostname" | "hostname_path_prefix" | "url_prefix";
+export interface NormalizedLink {
+    readonly protocol: "http" | "https";
+    readonly hostname: string;
+    readonly port?: number;
+    readonly pathname: string;
+    readonly canonical: string;
+    readonly hasQuery: boolean;
+    readonly queryParameterCount: number;
+    readonly queryLength: number;
+    readonly flags: readonly LinkSafetyReason[];
+}
+export interface CorpusEntry {
+    readonly id: string;
+    readonly indicatorType: CorpusIndicatorType;
+    readonly indicator: string;
+    readonly label: CorpusLabel;
+    readonly category?: string;
+    readonly source?: string;
+    readonly updatedAt?: string;
+}
+export interface CorpusMatch {
+    readonly entry: CorpusEntry;
+    readonly matchType: CorpusIndicatorType;
+}
+export interface CorpusExamplesOptions {
+    readonly limit?: number;
+}
+export interface LinkCorpus {
+    readonly version: string;
+    lookup(link: NormalizedLink): PromiseLike<readonly CorpusMatch[]>;
+    examples?(link: NormalizedLink, options?: CorpusExamplesOptions): PromiseLike<readonly CorpusEntry[]>;
+}
+export interface LinkClassifierInput {
+    readonly link: NormalizedLink;
+    readonly matches: readonly CorpusMatch[];
+    readonly examples: readonly CorpusEntry[];
+    readonly signal: AbortSignal;
+}
+export interface LinkClassifierSuccess {
+    readonly ok: true;
+    readonly verdict: ClassifiedLinkVerdict;
+    readonly riskScore: number;
+    readonly confidence: number;
+    readonly reasons?: readonly LinkSafetyReason[];
+    readonly provider?: string;
+    readonly model?: string;
+}
+export interface LinkClassifierFailure {
+    readonly ok: false;
+    readonly error: LinkSafetyErrorCode;
+}
+export type LinkClassifierResult = LinkClassifierSuccess | LinkClassifierFailure;
+export interface LinkClassifier {
+    readonly id: string;
+    classify(input: LinkClassifierInput): PromiseLike<LinkClassifierResult>;
+}
+export interface LinkSafetyPolicy {
+    /** Automatic allow/block recommendations are disabled unless explicitly true. */
+    readonly allowAct?: boolean;
+    /** Required confidence for semantic recommendations. Defaults to 0.92. */
+    readonly minimumConfidence?: number;
+    /** An exact malicious corpus match can recommend block when action is enabled. */
+    readonly blockKnownMalicious?: boolean;
+}
+export interface LinkScanOptions {
+    readonly corpus?: LinkCorpus;
+    readonly classifier?: LinkClassifier;
+    readonly policy?: LinkSafetyPolicy;
+    readonly signal?: AbortSignal;
+}
+export interface LinkScanEvidence {
+    readonly corpusVersion?: string;
+    readonly corpusMatchCount: number;
+    readonly provider?: string;
+    readonly model?: string;
+    readonly deterministicReasons: readonly LinkSafetyReason[];
+    readonly latencyMs: number;
+}
+export interface LinkScanSuccess {
+    readonly ok: true;
+    readonly link: NormalizedLink;
+    readonly verdict: LinkSafetyVerdict;
+    readonly riskScore: number;
+    readonly confidence: number;
+    readonly reasons: readonly LinkSafetyReason[];
+    readonly recommendedAction: LinkSafetyAction;
+    readonly policyReason: "automatic_action_not_enabled" | "confidence_below_threshold" | "conflicting_signals" | "no_reliable_signal" | "passed";
+    readonly evidence: LinkScanEvidence;
+}
+export interface LinkScanFailure {
+    readonly ok: false;
+    readonly error: LinkSafetyErrorCode;
+    readonly recommendedAction: "review";
+    readonly link?: NormalizedLink;
+    readonly latencyMs: number;
+}
+export type LinkScanResult = LinkScanSuccess | LinkScanFailure;
+export interface LinkSafetyScanner {
+    scan(input: unknown, options?: LinkScanOptions): Promise<LinkScanResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,2DAKvB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAE1E,eAAO,MAAM,mBAAmB,uCAAwC,CAAC;AACzE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,mBAAmB,iTAetB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,uBAAuB,kPAY1B,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAChE,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,sBAAsB,GAAG,YAAY,CAAC;AAErF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,WAAW,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IAClE,QAAQ,CAAC,CACP,IAAI,EAAE,cAAc,EACpB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,WAAW,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,MAAM,oBAAoB,GAAG,qBAAqB,GAAG,qBAAqB,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,kFAAkF;IAClF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,oBAAoB,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EACjB,8BAA8B,GAC9B,4BAA4B,GAC5B,qBAAqB,GACrB,oBAAoB,GACpB,QAAQ,CAAC;IACb,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,cAAc,GAAG,eAAe,GAAG,eAAe,CAAC;AAE/D,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC1E"}

package/dist/types.js

@@ -0,0 +1,37 @@
+export const LINK_SAFETY_VERDICTS = [
+    "benign",
+    "suspicious",
+    "malicious",
+    "unknown",
+];
+export const LINK_SAFETY_ACTIONS = ["allow", "review", "block"];
+export const LINK_SAFETY_REASONS = [
+    "corpus_benign_match",
+    "corpus_suspicious_match",
+    "corpus_malicious_match",
+    "corpus_conflict",
+    "punycode_hostname",
+    "ip_literal",
+    "private_network_candidate",
+    "non_default_port",
+    "long_hostname",
+    "many_subdomains",
+    "encoded_path_separator",
+    "long_path",
+    "query_present",
+    "semantic_classifier",
+];
+export const LINK_SAFETY_ERROR_CODES = [
+    "invalid_url",
+    "corpus_invalid",
+    "corpus_unavailable",
+    "classifier_unavailable",
+    "classifier_timeout",
+    "classifier_rate_limited",
+    "classifier_unauthorized",
+    "classifier_response_invalid",
+    "cancelled",
+    "policy_invalid",
+    "internal",
+];
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,SAAS;CACD,CAAC;AAKX,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAGzE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,qBAAqB;IACrB,yBAAyB;IACzB,wBAAwB;IACxB,iBAAiB;IACjB,mBAAmB;IACnB,YAAY;IACZ,2BAA2B;IAC3B,kBAAkB;IAClB,eAAe;IACf,iBAAiB;IACjB,wBAAwB;IACxB,WAAW;IACX,eAAe;IACf,qBAAqB;CACb,CAAC;AAIX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,aAAa;IACb,gBAAgB;IAChB,oBAAoB;IACpB,wBAAwB;IACxB,oBAAoB;IACpB,yBAAyB;IACzB,yBAAyB;IACzB,6BAA6B;IAC7B,WAAW;IACX,gBAAgB;IAChB,UAAU;CACF,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@nifrajs/link-safety",
+  "version": "0.1.0",
+  "description": "Local-first, fail-closed URL risk classification for TypeScript applications.",
+  "keywords": [
+    "nifra",
+    "url",
+    "security",
+    "phishing",
+    "abuse-detection",
+    "classification"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nifrajs/nifra-link-safety.git",
+    "directory": "packages/link-safety"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "bun test"
+  }
+}

package/src/corpus.ts

@@ -0,0 +1,210 @@
+import { normalizeLink } from "./normalize.js";
+import type {
+  CorpusEntry,
+  CorpusExamplesOptions,
+  CorpusIndicatorType,
+  CorpusLabel,
+  CorpusMatch,
+  LinkCorpus,
+  NormalizedLink,
+} from "./types.js";
+
+const MAX_CORPUS_BYTES = 64 * 1024 * 1024;
+const MAX_CORPUS_ENTRIES = 100_000;
+const MAX_LINE_BYTES = 32 * 1024;
+const MAX_ID_LENGTH = 128;
+const MAX_INDICATOR_LENGTH = 4096;
+const MAX_TEXT_LENGTH = 256;
+
+const LABELS = new Set<CorpusLabel>(["benign", "suspicious", "malicious"]);
+const INDICATOR_TYPES = new Set<CorpusIndicatorType>([
+  "hostname",
+  "hostname_path_prefix",
+  "url_prefix",
+]);
+
+interface IndexedEntry {
+  readonly entry: CorpusEntry;
+  readonly host: string;
+  readonly pathPrefix?: string;
+  readonly canonicalPrefix?: string;
+}
+
+export interface MemoryCorpusOptions {
+  readonly version?: string;
+}
+
+export function createMemoryCorpus(
+  entries: readonly unknown[],
+  options: MemoryCorpusOptions = {},
+): LinkCorpus {
+  if (!Array.isArray(entries) || entries.length > MAX_CORPUS_ENTRIES) {
+    throw new RangeError("corpus: too many entries");
+  }
+  const version = validateText(options.version ?? "memory", "version", 128);
+  const ids = new Set<string>();
+  const indexed: IndexedEntry[] = [];
+  for (const [index, raw] of entries.entries()) {
+    const entry = validateEntry(raw, index);
+    if (ids.has(entry.id)) throw new TypeError("corpus: duplicate entry id");
+    ids.add(entry.id);
+    indexed.push(indexEntry(entry));
+  }
+
+  return Object.freeze({
+    version,
+    lookup: async (link: NormalizedLink): Promise<readonly CorpusMatch[]> => {
+      const matches = indexed
+        .filter((item) => matchesLink(item, link))
+        .map((item) =>
+          Object.freeze({
+            entry: item.entry,
+            matchType: item.entry.indicatorType,
+          }),
+        );
+      return Object.freeze(matches);
+    },
+    examples: async (
+      link: NormalizedLink,
+      exampleOptions: CorpusExamplesOptions = {},
+    ): Promise<readonly CorpusEntry[]> => {
+      const limit = validateLimit(exampleOptions.limit);
+      const hostMatches = indexed
+        .filter((item) => item.host === link.hostname)
+        .slice(0, limit)
+        .map((item) => item.entry);
+      return Object.freeze(hostMatches);
+    },
+  });
+}
+
+export function parseCorpusJsonl(
+  input: string,
+  options: MemoryCorpusOptions = {},
+): LinkCorpus {
+  if (typeof input !== "string") throw new TypeError("corpus: input is invalid");
+  if (new TextEncoder().encode(input).byteLength > MAX_CORPUS_BYTES) {
+    throw new RangeError("corpus: input is too large");
+  }
+  const entries: unknown[] = [];
+  for (const [index, line] of input.split(/\r?\n/u).entries()) {
+    if (line.trim() === "") continue;
+    if (new TextEncoder().encode(line).byteLength > MAX_LINE_BYTES) {
+      throw new RangeError(`corpus: line ${index + 1} is too large`);
+    }
+    let value: unknown;
+    try {
+      value = JSON.parse(line);
+    } catch {
+      throw new TypeError(`corpus: line ${index + 1} is not valid JSON`);
+    }
+    entries.push(value);
+  }
+  return createMemoryCorpus(entries, options);
+}
+
+function validateEntry(value: unknown, index: number): CorpusEntry {
+  if (!isRecord(value)) throw new TypeError(`corpus: entry ${index + 1} is invalid`);
+  const id = validateText(value.id, "entry id", MAX_ID_LENGTH);
+  const indicatorType = value.indicatorType;
+  if (
+    typeof indicatorType !== "string" ||
+    !INDICATOR_TYPES.has(indicatorType as CorpusIndicatorType)
+  ) {
+    throw new TypeError(`corpus: entry ${index + 1} has an invalid indicator type`);
+  }
+  const indicator = validateText(value.indicator, "indicator", MAX_INDICATOR_LENGTH);
+  const label = value.label;
+  if (typeof label !== "string" || !LABELS.has(label as CorpusLabel)) {
+    throw new TypeError(`corpus: entry ${index + 1} has an invalid label`);
+  }
+  const category = optionalText(value.category, "category", MAX_TEXT_LENGTH);
+  const source = optionalText(value.source, "source", MAX_TEXT_LENGTH);
+  const updatedAt = optionalText(value.updatedAt, "updatedAt", 64);
+  const entry: CorpusEntry = {
+    id,
+    indicatorType: indicatorType as CorpusIndicatorType,
+    indicator,
+    label: label as CorpusLabel,
+    ...(category === undefined ? {} : { category }),
+    ...(source === undefined ? {} : { source }),
+    ...(updatedAt === undefined ? {} : { updatedAt }),
+  };
+  return Object.freeze(entry);
+}
+
+function indexEntry(entry: CorpusEntry): IndexedEntry {
+  if (entry.indicatorType === "hostname") {
+    return Object.freeze({ entry, host: normalizeHost(entry.indicator) });
+  }
+  if (entry.indicatorType === "hostname_path_prefix") {
+    const slash = entry.indicator.indexOf("/");
+    if (slash <= 0) {
+      throw new TypeError("corpus: hostname path indicator is invalid");
+    }
+    const host = normalizeHost(entry.indicator.slice(0, slash));
+    const pathPrefix = normalizePathPrefix(entry.indicator.slice(slash));
+    return Object.freeze({ entry, host, pathPrefix });
+  }
+  const normalized = normalizeLink(entry.indicator);
+  if (!normalized.ok) throw new TypeError("corpus: URL indicator is invalid");
+  return Object.freeze({
+    entry,
+    host: normalized.link.hostname,
+    canonicalPrefix: normalized.link.canonical,
+  });
+}
+
+function matchesLink(item: IndexedEntry, link: NormalizedLink): boolean {
+  if (item.host !== link.hostname) return false;
+  if (item.pathPrefix !== undefined && !link.pathname.startsWith(item.pathPrefix)) {
+    return false;
+  }
+  return (
+    item.canonicalPrefix === undefined ||
+    link.canonical.startsWith(item.canonicalPrefix)
+  );
+}
+
+function normalizeHost(value: string): string {
+  const host = value.trim().toLowerCase().replace(/\.$/u, "");
+  if (host.length === 0 || host.includes("/") || host.includes("@")) {
+    throw new TypeError("corpus: hostname indicator is invalid");
+  }
+  return host;
+}
+
+function normalizePathPrefix(value: string): string {
+  if (!value.startsWith("/") || value.length > 2048) {
+    throw new TypeError("corpus: path prefix is invalid");
+  }
+  return value;
+}
+
+function validateText(value: unknown, label: string, maxLength: number): string {
+  if (typeof value !== "string" || value.trim() === "" || value.length > maxLength) {
+    throw new TypeError(`corpus: ${label} is invalid`);
+  }
+  return value;
+}
+
+function optionalText(
+  value: unknown,
+  label: string,
+  maxLength: number,
+): string | undefined {
+  if (value === undefined) return undefined;
+  return validateText(value, label, maxLength);
+}
+
+function validateLimit(value: number | undefined): number {
+  if (value === undefined) return 8;
+  if (!Number.isSafeInteger(value) || value < 0 || value > 32) {
+    throw new RangeError("corpus: example limit must be between 0 and 32");
+  }
+  return value;
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}

package/src/index.ts

@@ -0,0 +1,35 @@
+export { createMemoryCorpus, parseCorpusJsonl } from "./corpus.js";
+export { normalizeLink } from "./normalize.js";
+export { createLinkSafetyScanner, scanLink } from "./scan.js";
+export type {
+  ClassifiedLinkVerdict,
+  CorpusEntry,
+  CorpusExamplesOptions,
+  CorpusIndicatorType,
+  CorpusLabel,
+  CorpusMatch,
+  LinkClassifier,
+  LinkClassifierFailure,
+  LinkClassifierInput,
+  LinkClassifierResult,
+  LinkClassifierSuccess,
+  LinkCorpus,
+  LinkSafetyAction,
+  LinkSafetyErrorCode,
+  LinkSafetyPolicy,
+  LinkSafetyReason,
+  LinkSafetyScanner,
+  LinkSafetyVerdict,
+  LinkScanEvidence,
+  LinkScanFailure,
+  LinkScanOptions,
+  LinkScanResult,
+  LinkScanSuccess,
+  NormalizedLink,
+} from "./types.js";
+export {
+  LINK_SAFETY_ACTIONS,
+  LINK_SAFETY_ERROR_CODES,
+  LINK_SAFETY_REASONS,
+  LINK_SAFETY_VERDICTS,
+} from "./types.js";

package/src/normalize.ts

@@ -0,0 +1,118 @@
+import type { LinkSafetyErrorCode, LinkSafetyReason, NormalizedLink } from "./types.js";
+
+const MAX_URL_LENGTH = 4096;
+const MAX_PATH_LENGTH = 2048;
+const MAX_QUERY_LENGTH = 4096;
+
+const IPV4 = /^(?:\d{1,3}\.){3}\d{1,3}$/;
+const IPV6 = /^\[[0-9a-f:]+\]$/i;
+
+export type NormalizeResult =
+  | { readonly ok: true; readonly link: NormalizedLink }
+  | { readonly ok: false; readonly error: LinkSafetyErrorCode };
+
+export function normalizeLink(input: unknown): NormalizeResult {
+  if (typeof input !== "string") return { ok: false, error: "invalid_url" };
+  const value = input.trim();
+  if (value.length === 0 || value.length > MAX_URL_LENGTH) {
+    return { ok: false, error: "invalid_url" };
+  }
+
+  let parsed: URL;
+  try {
+    parsed = new URL(value);
+  } catch {
+    return { ok: false, error: "invalid_url" };
+  }
+
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    return { ok: false, error: "invalid_url" };
+  }
+  if (parsed.username || parsed.password || parsed.hostname.length === 0) {
+    return { ok: false, error: "invalid_url" };
+  }
+  if (
+    parsed.pathname.length > MAX_PATH_LENGTH ||
+    parsed.search.length > MAX_QUERY_LENGTH
+  ) {
+    return { ok: false, error: "invalid_url" };
+  }
+
+  const hostname = parsed.hostname.toLowerCase().replace(/\.$/u, "");
+  const pathname = parsed.pathname.length === 0 ? "/" : parsed.pathname;
+  const port = parsed.port === "" ? undefined : Number(parsed.port);
+  if (port !== undefined && (!Number.isSafeInteger(port) || port < 1 || port > 65535)) {
+    return { ok: false, error: "invalid_url" };
+  }
+
+  const flags: LinkSafetyReason[] = [];
+  if (hostname.includes("xn--")) flags.push("punycode_hostname");
+  if (isIpLiteral(hostname)) flags.push("ip_literal");
+  if (isPrivateAddress(hostname)) flags.push("private_network_candidate");
+  if (port !== undefined && port !== (parsed.protocol === "https:" ? 443 : 80)) {
+    flags.push("non_default_port");
+  }
+  if (hostname.length > 100) flags.push("long_hostname");
+  if (hostname.split(".").length > 5) flags.push("many_subdomains");
+  if (/%(?:2f|5c)/i.test(pathname)) flags.push("encoded_path_separator");
+  if (pathname.length > 1024) flags.push("long_path");
+  if (parsed.search.length > 0) flags.push("query_present");
+
+  const canonical = `${parsed.protocol}//${hostname}${
+    port === undefined ? "" : `:${port}`
+  }${pathname}`;
+  return {
+    ok: true,
+    link: Object.freeze({
+      protocol: parsed.protocol === "https:" ? "https" : "http",
+      hostname,
+      ...(port === undefined ? {} : { port }),
+      pathname,
+      canonical,
+      hasQuery: parsed.search.length > 0,
+      queryParameterCount: countQueryParameters(parsed.search),
+      queryLength: parsed.search.length,
+      flags: Object.freeze(flags),
+    }),
+  };
+}
+
+function countQueryParameters(search: string): number {
+  if (search.length === 0) return 0;
+  try {
+    return [...new URLSearchParams(search)].length;
+  } catch {
+    return 0;
+  }
+}
+
+function isIpLiteral(hostname: string): boolean {
+  return IPV4.test(hostname) || IPV6.test(hostname);
+}
+
+function isPrivateAddress(hostname: string): boolean {
+  const unwrapped = hostname.replace(/^\[/, "").replace(/\]$/u, "");
+  if (
+    unwrapped === "localhost" ||
+    unwrapped === "::1" ||
+    unwrapped.startsWith("fc") ||
+    unwrapped.startsWith("fd") ||
+    unwrapped.startsWith("fe80:")
+  ) {
+    return true;
+  }
+  if (!IPV4.test(unwrapped)) return false;
+  const octets = unwrapped.split(".").map(Number);
+  if (octets.some((octet) => !Number.isInteger(octet) || octet < 0 || octet > 255)) {
+    return false;
+  }
+  const first = octets[0] ?? -1;
+  const second = octets[1] ?? -1;
+  return (
+    first === 10 ||
+    first === 127 ||
+    (first === 169 && second === 254) ||
+    (first === 172 && second >= 16 && second <= 31) ||
+    (first === 192 && second === 168)
+  );
+}