safe-link-checker 1.0.1 → 1.1.0

package/README.md

@@ -2,83 +2,101 @@
 
 [![npm version](https://img.shields.io/npm/v/safe-link-checker.svg)](https://npmjs.org/package/safe-link-checker)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
-[![Build Status](https://github.com/Rajeev766/safe-link-checker/actions/workflows/ci.yml/badge.svg)](https://github.com/Rajeev766/safe-link-checker/actions)
-[![Security Rating](https://img.shields.io/badge/Security-A%2B-success.svg)](#)
 
-An enterprise-grade, lightning-fast Node.js library for validating URLs against phishing, malware, SSRF bypasses, DNS rebinding, and Zip bombs. `SafeLinkChecker` uses consensus-based verification across multiple threat intelligence feeds (URLHaus, OpenPhish) alongside deep heuristics and custom DNS hooks to ensure absolute safety before you fetch or process user-provided URLs.
+An enterprise-grade, lightning-fast **Universal URL Intelligence SDK**. `SafeLinkChecker` protects against phishing, malware, SSRF bypasses, DNS rebinding, and malicious payloads. It works seamlessly across Node.js, React Native, Browser, Next.js, Electron, Bun, and Deno with a unified API.
 
 ## Features ✨
-- **Zero-Trust Network Operations**: Mitigates Server-Side Request Forgery (SSRF) and DNS Rebinding via native `dns.lookup` hooks.
-- **Micro-Optimized Performance**: Capable of processing over 68,000 URLs per second using non-blocking worker pools and LRU caches.
-- **Deep Heuristics**: Detects IDN Homograph attacks, mixed scripts, Punycode abuse, protocol downgrades, and redirect loops.
-- **Bomb Protection**: Protects against Slowloris attacks, Zip bombs, and compression bombs at the TCP socket level.
-- **Dual Build**: Fully tree-shakable ESM and CJS exports.
+- **Write Once, Run Anywhere**: Automatically detects the runtime environment to serve the best implementation.
+- **Frontend Verification**: React Native, Expo, and Web Apps execute fast local checks (URL extraction, punycode, homographs, regex rules) in <10ms.
+- **Backend Verification**: Node.js/Bun servers enrich analysis with deep network checks (DNS rebinding, HTTPS certificates, redirect tracing) and Threat Intelligence Providers (URLHaus, OpenPhish).
+- **Consensus & Policy Engine**: Configurable policies calculate trust scores and decide actions (`allow`, `warn`, `block`).
 
 ## Installation 📦
 
 ```bash
 npm install safe-link-checker
-# or
-yarn add safe-link-checker
-# or
-pnpm add safe-link-checker
 ```
-
-> **Requirements**: Node.js 18.0.0 or later.
+> **One package.** Installs the correct bundle for your platform automatically.
+
+## Compatibility Matrix 📊
+
+| Feature \ Platform | Node.js / Bun | React Native / Expo | Browser / Web |
+|:---|:---:|:---:|:---:|
+| URL Normalization | ✅ | ✅ | ✅ |
+| URL Extraction | ✅ | ✅ | ✅ |
+| Regex / Heuristics | ✅ | ✅ | ✅ |
+| Homograph / Punycode| ✅ | ✅ | ✅ |
+| Private IP / SSRF | ✅ | ✅ | ✅ |
+| Explainable Scoring | ✅ | ✅ | ✅ |
+| Cache Engine | ✅ | ✅ | ✅ |
+| DNS Lookup | ✅ | ❌ | ❌ |
+| HTTPS Certificate | ✅ | ❌ | ❌ |
+| Redirect Tracing | ✅ | ❌ | ❌ |
+| Threat Providers | ✅ | ❌ | ❌ |
 
 ## Quick Start 🚀
 
+### In Node.js / Backend
+
 ```typescript
-import { SafeLinkChecker } from 'safe-link-checker';
+import { SafeLinkChecker, verifyLink } from 'safe-link-checker';
 
+// Uses Node.js networking, DNS, and Threat Intelligence automatically
 const checker = new SafeLinkChecker({
   providers: ['urlhaus', 'openphish'],
   cache: true,
-  maxRedirects: 5
+  checkHttps: true,
 });
 
-async function run() {
-  const result = await checker.verify('https://example.com');
-  
-  console.log(`Is Safe? ${result.safe}`);
-  console.log(`Threat Score: ${result.score}/100`);
-  
-  if (!result.safe) {
-    console.log(`Reasons: ${result.reasons.join(', ')}`);
-  }
-}
-
-run();
+const result = await checker.verify('https://example.com');
+console.log(result.runtime); // 'node'
+console.log(result.decision); // 'allow'
+console.log(result.capabilities.performed); // ['UrlValidation', 'HttpsValidation', ...]
 ```
 
-## Batch Processing (68k+ URLs/sec) ⚡️
-
-You can verify massive lists of URLs concurrently. The engine automatically handles concurrency limits and caches results.
+### In React Native / Browser (e.g. Chat Composer)
 
 ```typescript
-const urls = [
-  'https://google.com',
-  'http://malicious-phishing.com',
-  'http://localhost/admin' // Caught by SSRF protection
-];
-
-const results = await checker.verifyLinks(urls, { timeout: 3000 }, 10); // Concurrency of 10
-results.forEach(res => console.log(`${res.url} -> Safe: ${res.safe}`));
+import { SafeLinkChecker, extractUrls } from 'safe-link-checker';
+
+// Fast local execution - blocks obvious threats before they are sent
+const checker = new SafeLinkChecker();
+
+const text = "Check this out: http://google.com and http://evil.com/exe";
+const urls = extractUrls(text);
+
+const results = await checker.verifyLinks(urls);
+const blockedUrls = results.filter(r => r.decision === 'block');
+
+if (blockedUrls.length > 0) {
+    alert('Malicious link detected! Please remove before sending.');
+}
 ```
 
-## Architecture 🏗️
+## Result Model
 
-`SafeLinkChecker` operates on a **Consensus Engine** and **Plugin Factory** model:
-- `Plugins` (e.g., `UrlValidation`, `IpValidation`, `PunycodePlugin`) independently analyze a URL and emit a `CheckResult` with a `scoreImpact`.
-- The `ConsensusEngine` aggregates these scores. A score >= 50 triggers a fatal abort.
-- `Providers` (e.g., URLHaus, OpenPhish) hit cloud intelligence feeds.
+Both runtimes return the exact same structured result format:
 
-## Security 🔒
-Please review our [Security Policy](SECURITY.md) for reporting vulnerabilities. We take SSRF and DNS rebinding protections extremely seriously.
+```typescript
+{
+    url: 'https://evil.com',
+    safe: false,
+    decision: 'block',
+    score: 100,
+    confidence: 90,
+    riskLevel: 'DANGEROUS',
+    summary: 'Detected suspicious patterns.',
+    action: 'block',
+    runtime: 'react-native',
+    capabilities: {
+      performed: ['UrlValidation', 'Punycode', 'Heuristics'],
+      skipped: ['dns', 'certificate', 'redirect_trace']
+    }
+}
+```
 
-## Contributing 🤝
-Contributions, issues, and feature requests are welcome!
-See the [Contributing Guidelines](CONTRIBUTING.md) to get started.
+## Security 🔒
+Please review our [Security Policy](SECURITY.md) for reporting vulnerabilities.
 
 ## License 📄
 [MIT](LICENSE) © 2026 Rajeev Choudhary

package/dist/browser/index.cjs

@@ -0,0 +1 @@
+'use strict';var chunkK5U3MVS5_cjs=require('../chunk-K5U3MVS5.cjs'),chunkXNJKJHJI_cjs=require('../chunk-XNJKJHJI.cjs');Object.defineProperty(exports,"SafeLinkChecker",{enumerable:true,get:function(){return chunkK5U3MVS5_cjs.c}});Object.defineProperty(exports,"SafeLinkError",{enumerable:true,get:function(){return chunkK5U3MVS5_cjs.a}});Object.defineProperty(exports,"TimeoutError",{enumerable:true,get:function(){return chunkK5U3MVS5_cjs.b}});Object.defineProperty(exports,"extractUrls",{enumerable:true,get:function(){return chunkK5U3MVS5_cjs.f}});Object.defineProperty(exports,"verifyLink",{enumerable:true,get:function(){return chunkK5U3MVS5_cjs.d}});Object.defineProperty(exports,"verifyLinks",{enumerable:true,get:function(){return chunkK5U3MVS5_cjs.e}});Object.defineProperty(exports,"AnalyticsTracker",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.o}});Object.defineProperty(exports,"CloudGateway",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.r}});Object.defineProperty(exports,"ConsensusEngine",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.f}});Object.defineProperty(exports,"DefaultPluginFactory",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.d}});Object.defineProperty(exports,"EventEmitter",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.c}});Object.defineProperty(exports,"LRUCache",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.a}});Object.defineProperty(exports,"MemoryCache",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.a}});Object.defineProperty(exports,"PluginManager",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.e}});Object.defineProperty(exports,"PolicyEngine",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.g}});Object.defineProperty(exports,"RealtimeSubscriptionEngine",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.p}});Object.defineProperty(exports,"ReputationEngine",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.q}});Object.defineProperty(exports,"RuleEnginePlugin",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.h}});Object.defineProperty(exports,"createSecurityReport",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.t}});Object.defineProperty(exports,"defaultCache",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.b}});Object.defineProperty(exports,"formatResult",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.s}});Object.defineProperty(exports,"injectReportHelpers",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.u}});Object.defineProperty(exports,"normalizeLink",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.i}});Object.defineProperty(exports,"validateHeuristics",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.n}});Object.defineProperty(exports,"validateIp",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.k}});Object.defineProperty(exports,"validatePunycode",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.l}});Object.defineProperty(exports,"validateShortener",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.m}});Object.defineProperty(exports,"validateUrl",{enumerable:true,get:function(){return chunkXNJKJHJI_cjs.j}});

package/dist/browser/index.d.cts

@@ -0,0 +1,258 @@
+export { MemoryCache, defaultCache } from '@safe-link-checker/cache/memory.js';
+export { LRUCache } from '@safe-link-checker/cache/lru.js';
+export { EventEmitter } from './core/events.js';
+export { DefaultPluginFactory } from './core/factory.js';
+export { PluginContext, PluginManager, PluginType, VerificationPlugin } from './core/plugin.js';
+export { ConsensusEngine } from './engine/consensus.js';
+export { PolicyEngine } from './engine/policy.js';
+export { RuleEnginePlugin } from './engine/rules.js';
+export { normalizeLink } from './utils/normalize.js';
+export { validateUrl } from './validators/url.js';
+export { validateIp } from './validators/ip.js';
+export { validatePunycode } from './validators/punycode.js';
+export { validateShortener } from './validators/shortener.js';
+export { validateHeuristics } from './validators/heuristic.js';
+export { AnalyticsTracker } from './analytics/tracker.js';
+export { RealtimeSubscriptionEngine } from './realtime/subscription.js';
+export { ReputationEngine, ReputationResult } from './engine/reputation.js';
+export { CloudGateway } from './cloud/gateway.js';
+export { formatResult } from './utils/formatter.js';
+export { ReportData, createSecurityReport, injectReportHelpers } from './utils/report.js';
+export { extractUrls, verifyLink, verifyLinks } from './verify.js';
+export { CheckerOptions, SafeLinkChecker, SafeLinkError, TimeoutError } from './checker.js';
+import './base.js';
+import './validators/https.js';
+import './validators/redirect.js';
+
+/**
+ * SafeLinkChecker
+ * Copyright (c) 2026
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+type RiskLevel = 'SAFE' | 'SUSPICIOUS' | 'DANGEROUS';
+type HttpsStatus = 'HTTPS' | 'HTTP_ONLY' | 'CERT_ERROR' | 'TIMEOUT' | 'UNREACHABLE' | 'SKIPPED';
+type RedirectAnomalyKind = 'LOOP' | 'PROTOCOL_DOWNGRADE' | 'MAX_REDIRECTS_EXCEEDED';
+type RiskCategory = 'domain' | 'certificate' | 'redirect' | 'content' | 'network' | 'provider' | 'browser' | 'email' | 'qr' | 'download' | 'behavior' | 'ai' | 'other';
+type RiskSeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';
+type DecisionAction = 'allow' | 'warn' | 'block' | 'unknown' | 'ALLOW' | 'WARN' | 'REVIEW' | 'BLOCK' | 'ESCALATE';
+type Classification = 'trusted' | 'safe' | 'suspicious' | 'unknown' | 'tracking' | 'spam' | 'phishing' | 'malware' | 'credential_theft' | 'scam' | 'brand_impersonation' | 'typosquatting' | 'Safe' | 'Suspicious' | 'Phishing' | 'Malware' | 'Scam' | 'Typosquatting' | 'Brand Impersonation' | 'Tracking' | 'Unsafe' | 'Unknown';
+type ThreatLevel = 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL' | 'UNKNOWN';
+interface ObservabilityHooks {
+    onStart?: (url: string, options: VerifyOptions) => void;
+    onFinish?: (result: VerificationResult) => void;
+    onWarning?: (url: string, reasons: string[]) => void;
+    onBlocked?: (url: string, reasons: string[]) => void;
+    onProvider?: (providerName: string, result: CheckResult) => void;
+    onCacheHit?: (url: string) => void;
+    onCacheMiss?: (url: string) => void;
+}
+interface VerifyOptions {
+    maxRedirects?: number;
+    timeout?: number;
+    customShorteners?: string[];
+    bypassCache?: boolean;
+    removeTrackingParams?: boolean;
+    checkHttps?: boolean;
+    signal?: AbortSignal;
+    policy?: string;
+    hooks?: ObservabilityHooks;
+    realtime?: boolean;
+    cloud?: {
+        enabled: boolean;
+        apiKey: string;
+        endpoint?: string;
+    };
+    telemetry?: {
+        enabled: boolean;
+        level?: 'anonymous' | 'full';
+    };
+    debug?: boolean;
+}
+interface CheckResult {
+    name: string;
+    safe: boolean;
+    scoreImpact: number;
+    message: string;
+    weight?: number;
+    fatal?: boolean;
+    detector?: string;
+    category?: RiskCategory;
+    severity?: RiskSeverity;
+    confidence?: number;
+    scoreContribution?: number;
+    title?: string;
+    description?: string;
+    recommendation?: string;
+    references?: string[];
+    executionTime?: number;
+    timestamp?: number;
+    metadata?: Record<string, unknown>;
+}
+interface Provider {
+    name: string;
+    check(url: string, options?: VerifyOptions): Promise<CheckResult | null>;
+}
+interface RedirectHop {
+    url: string;
+    statusCode: number;
+}
+interface RedirectTrace {
+    chain: string[];
+    finalUrl: string;
+    redirectCount: number;
+    anomalies: RedirectAnomalyKind[];
+}
+interface ExecutionTimeline {
+    phase: string;
+    startTime: number;
+    durationMs: number;
+    status: 'success' | 'error' | 'skipped';
+}
+interface RichMetadata {
+    favicon?: string;
+    title?: string;
+    description?: string;
+    openGraph?: Record<string, string>;
+    twitterCards?: Record<string, string>;
+    canonicalUrl?: string;
+    detectedBrand?: string;
+    detectedLanguage?: string;
+    contentType?: string;
+    server?: string;
+    country?: string;
+    hostingProvider?: string;
+    asn?: string;
+}
+interface ExecutionStats {
+    totalTimeMs: number;
+    startTime: number;
+    endTime: number;
+}
+interface VerificationMeta {
+    mode: 'offline' | 'online' | 'hybrid';
+    engine: 'heuristics' | 'network' | 'cloud' | 'combined';
+    version: string;
+    duration: number;
+    cached: boolean;
+    cacheSource: 'memory' | 'redis' | 'filesystem' | 'cloud' | 'none';
+    timestamp: string;
+}
+interface Evidence {
+    id: string;
+    title: string;
+    category: string;
+    status: 'passed' | 'failed' | 'skipped' | 'unknown';
+    weight: number;
+    message: string;
+    recommendation?: string;
+    documentationUrl?: string;
+}
+interface Capabilities {
+    runtime: string;
+    performed: string[];
+    skipped: string[];
+}
+interface SecurityBadge {
+    label: string;
+    variant: 'success' | 'warn' | 'block' | 'unknown' | 'allow';
+    icon: string;
+    color: string;
+}
+interface VisualScore {
+    value: number;
+    max: number;
+    grade: 'A+' | 'A' | 'B' | 'C' | 'D' | 'F';
+    label: string;
+}
+interface ThreatDetails {
+    level: string;
+    category: string;
+    family: string | null;
+    techniques: string[];
+}
+interface UrlDetails {
+    original: string;
+    normalized: string;
+    hostname: string;
+    domain: string;
+    subdomain: string;
+    tld: string;
+    protocol: string;
+    port: string;
+    path: string;
+    query: string;
+    hash: string;
+}
+interface PerformanceMetrics {
+    duration: number;
+    cacheHit: boolean;
+    cacheKey?: string;
+    pluginsExecuted: number;
+    pluginsSkipped: number;
+}
+interface PluginExecutionDetails {
+    plugin: string;
+    status: 'passed' | 'failed' | 'skipped';
+    duration: number;
+    scoreContribution: number;
+}
+interface VerificationResult {
+    safe: boolean;
+    decision: DecisionAction;
+    classification: Classification;
+    trustScore: number;
+    riskScore: number;
+    confidence: number;
+    severity: RiskSeverity | string;
+    summary: string;
+    recommendation: string;
+    runtime: string;
+    verification: VerificationMeta;
+    evidence: Evidence[];
+    capabilities: Capabilities;
+    badge: SecurityBadge;
+    score: VisualScore;
+    threat: ThreatDetails;
+    url: UrlDetails;
+    performance: PerformanceMetrics;
+    pluginResults?: PluginExecutionDetails[];
+    riskLevel?: RiskLevel;
+    reasons?: string[];
+    recommendations?: string[];
+    checks?: CheckResult[];
+    categories?: Record<string, number>;
+    providerResults?: CheckResult[];
+    redirectChain?: string[];
+    redirectTrace?: RedirectTrace;
+    fromCache?: boolean;
+    action?: string;
+    policy?: string;
+    timeline?: ExecutionTimeline[];
+    execution?: ExecutionStats;
+    metadata?: RichMetadata | Record<string, unknown>;
+    isSafe?: () => boolean;
+    shouldWarn?: () => boolean;
+    shouldBlock?: () => boolean;
+    toJSON?: () => any;
+    toString?: () => string;
+    toMarkdown?: () => string;
+    toHTML?: () => string;
+    export?: (format: 'json' | 'markdown' | 'html') => string;
+}
+interface PickledResult {
+    url: string;
+    safe: boolean;
+    decision: DecisionAction;
+    trustScore: number;
+    riskScore: number;
+    classification: Classification;
+    threatLevel: ThreatLevel;
+    securityBadge: string;
+    riskColor: string;
+    summary: string;
+    recommendation: string;
+}
+
+export type { Capabilities, CheckResult, Classification, DecisionAction, Evidence, ExecutionStats, ExecutionTimeline, HttpsStatus, ObservabilityHooks, PerformanceMetrics, PickledResult, PluginExecutionDetails, Provider, RedirectAnomalyKind, RedirectHop, RedirectTrace, RichMetadata, RiskCategory, RiskLevel, RiskSeverity, SecurityBadge, ThreatDetails, ThreatLevel, UrlDetails, VerificationMeta, VerificationResult, VerifyOptions, VisualScore };

package/dist/browser/index.d.ts

@@ -0,0 +1,258 @@
+export { MemoryCache, defaultCache } from '@safe-link-checker/cache/memory.js';
+export { LRUCache } from '@safe-link-checker/cache/lru.js';
+export { EventEmitter } from './core/events.js';
+export { DefaultPluginFactory } from './core/factory.js';
+export { PluginContext, PluginManager, PluginType, VerificationPlugin } from './core/plugin.js';
+export { ConsensusEngine } from './engine/consensus.js';
+export { PolicyEngine } from './engine/policy.js';
+export { RuleEnginePlugin } from './engine/rules.js';
+export { normalizeLink } from './utils/normalize.js';
+export { validateUrl } from './validators/url.js';
+export { validateIp } from './validators/ip.js';
+export { validatePunycode } from './validators/punycode.js';
+export { validateShortener } from './validators/shortener.js';
+export { validateHeuristics } from './validators/heuristic.js';
+export { AnalyticsTracker } from './analytics/tracker.js';
+export { RealtimeSubscriptionEngine } from './realtime/subscription.js';
+export { ReputationEngine, ReputationResult } from './engine/reputation.js';
+export { CloudGateway } from './cloud/gateway.js';
+export { formatResult } from './utils/formatter.js';
+export { ReportData, createSecurityReport, injectReportHelpers } from './utils/report.js';
+export { extractUrls, verifyLink, verifyLinks } from './verify.js';
+export { CheckerOptions, SafeLinkChecker, SafeLinkError, TimeoutError } from './checker.js';
+import './base.js';
+import './validators/https.js';
+import './validators/redirect.js';
+
+/**
+ * SafeLinkChecker
+ * Copyright (c) 2026
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+type RiskLevel = 'SAFE' | 'SUSPICIOUS' | 'DANGEROUS';
+type HttpsStatus = 'HTTPS' | 'HTTP_ONLY' | 'CERT_ERROR' | 'TIMEOUT' | 'UNREACHABLE' | 'SKIPPED';
+type RedirectAnomalyKind = 'LOOP' | 'PROTOCOL_DOWNGRADE' | 'MAX_REDIRECTS_EXCEEDED';
+type RiskCategory = 'domain' | 'certificate' | 'redirect' | 'content' | 'network' | 'provider' | 'browser' | 'email' | 'qr' | 'download' | 'behavior' | 'ai' | 'other';
+type RiskSeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';
+type DecisionAction = 'allow' | 'warn' | 'block' | 'unknown' | 'ALLOW' | 'WARN' | 'REVIEW' | 'BLOCK' | 'ESCALATE';
+type Classification = 'trusted' | 'safe' | 'suspicious' | 'unknown' | 'tracking' | 'spam' | 'phishing' | 'malware' | 'credential_theft' | 'scam' | 'brand_impersonation' | 'typosquatting' | 'Safe' | 'Suspicious' | 'Phishing' | 'Malware' | 'Scam' | 'Typosquatting' | 'Brand Impersonation' | 'Tracking' | 'Unsafe' | 'Unknown';
+type ThreatLevel = 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL' | 'UNKNOWN';
+interface ObservabilityHooks {
+    onStart?: (url: string, options: VerifyOptions) => void;
+    onFinish?: (result: VerificationResult) => void;
+    onWarning?: (url: string, reasons: string[]) => void;
+    onBlocked?: (url: string, reasons: string[]) => void;
+    onProvider?: (providerName: string, result: CheckResult) => void;
+    onCacheHit?: (url: string) => void;
+    onCacheMiss?: (url: string) => void;
+}
+interface VerifyOptions {
+    maxRedirects?: number;
+    timeout?: number;
+    customShorteners?: string[];
+    bypassCache?: boolean;
+    removeTrackingParams?: boolean;
+    checkHttps?: boolean;
+    signal?: AbortSignal;
+    policy?: string;
+    hooks?: ObservabilityHooks;
+    realtime?: boolean;
+    cloud?: {
+        enabled: boolean;
+        apiKey: string;
+        endpoint?: string;
+    };
+    telemetry?: {
+        enabled: boolean;
+        level?: 'anonymous' | 'full';
+    };
+    debug?: boolean;
+}
+interface CheckResult {
+    name: string;
+    safe: boolean;
+    scoreImpact: number;
+    message: string;
+    weight?: number;
+    fatal?: boolean;
+    detector?: string;
+    category?: RiskCategory;
+    severity?: RiskSeverity;
+    confidence?: number;
+    scoreContribution?: number;
+    title?: string;
+    description?: string;
+    recommendation?: string;
+    references?: string[];
+    executionTime?: number;
+    timestamp?: number;
+    metadata?: Record<string, unknown>;
+}
+interface Provider {
+    name: string;
+    check(url: string, options?: VerifyOptions): Promise<CheckResult | null>;
+}
+interface RedirectHop {
+    url: string;
+    statusCode: number;
+}
+interface RedirectTrace {
+    chain: string[];
+    finalUrl: string;
+    redirectCount: number;
+    anomalies: RedirectAnomalyKind[];
+}
+interface ExecutionTimeline {
+    phase: string;
+    startTime: number;
+    durationMs: number;
+    status: 'success' | 'error' | 'skipped';
+}
+interface RichMetadata {
+    favicon?: string;
+    title?: string;
+    description?: string;
+    openGraph?: Record<string, string>;
+    twitterCards?: Record<string, string>;
+    canonicalUrl?: string;
+    detectedBrand?: string;
+    detectedLanguage?: string;
+    contentType?: string;
+    server?: string;
+    country?: string;
+    hostingProvider?: string;
+    asn?: string;
+}
+interface ExecutionStats {
+    totalTimeMs: number;
+    startTime: number;
+    endTime: number;
+}
+interface VerificationMeta {
+    mode: 'offline' | 'online' | 'hybrid';
+    engine: 'heuristics' | 'network' | 'cloud' | 'combined';
+    version: string;
+    duration: number;
+    cached: boolean;
+    cacheSource: 'memory' | 'redis' | 'filesystem' | 'cloud' | 'none';
+    timestamp: string;
+}
+interface Evidence {
+    id: string;
+    title: string;
+    category: string;
+    status: 'passed' | 'failed' | 'skipped' | 'unknown';
+    weight: number;
+    message: string;
+    recommendation?: string;
+    documentationUrl?: string;
+}
+interface Capabilities {
+    runtime: string;
+    performed: string[];
+    skipped: string[];
+}
+interface SecurityBadge {
+    label: string;
+    variant: 'success' | 'warn' | 'block' | 'unknown' | 'allow';
+    icon: string;
+    color: string;
+}
+interface VisualScore {
+    value: number;
+    max: number;
+    grade: 'A+' | 'A' | 'B' | 'C' | 'D' | 'F';
+    label: string;
+}
+interface ThreatDetails {
+    level: string;
+    category: string;
+    family: string | null;
+    techniques: string[];
+}
+interface UrlDetails {
+    original: string;
+    normalized: string;
+    hostname: string;
+    domain: string;
+    subdomain: string;
+    tld: string;
+    protocol: string;
+    port: string;
+    path: string;
+    query: string;
+    hash: string;
+}
+interface PerformanceMetrics {
+    duration: number;
+    cacheHit: boolean;
+    cacheKey?: string;
+    pluginsExecuted: number;
+    pluginsSkipped: number;
+}
+interface PluginExecutionDetails {
+    plugin: string;
+    status: 'passed' | 'failed' | 'skipped';
+    duration: number;
+    scoreContribution: number;
+}
+interface VerificationResult {
+    safe: boolean;
+    decision: DecisionAction;
+    classification: Classification;
+    trustScore: number;
+    riskScore: number;
+    confidence: number;
+    severity: RiskSeverity | string;
+    summary: string;
+    recommendation: string;
+    runtime: string;
+    verification: VerificationMeta;
+    evidence: Evidence[];
+    capabilities: Capabilities;
+    badge: SecurityBadge;
+    score: VisualScore;
+    threat: ThreatDetails;
+    url: UrlDetails;
+    performance: PerformanceMetrics;
+    pluginResults?: PluginExecutionDetails[];
+    riskLevel?: RiskLevel;
+    reasons?: string[];
+    recommendations?: string[];
+    checks?: CheckResult[];
+    categories?: Record<string, number>;
+    providerResults?: CheckResult[];
+    redirectChain?: string[];
+    redirectTrace?: RedirectTrace;
+    fromCache?: boolean;
+    action?: string;
+    policy?: string;
+    timeline?: ExecutionTimeline[];
+    execution?: ExecutionStats;
+    metadata?: RichMetadata | Record<string, unknown>;
+    isSafe?: () => boolean;
+    shouldWarn?: () => boolean;
+    shouldBlock?: () => boolean;
+    toJSON?: () => any;
+    toString?: () => string;
+    toMarkdown?: () => string;
+    toHTML?: () => string;
+    export?: (format: 'json' | 'markdown' | 'html') => string;
+}
+interface PickledResult {
+    url: string;
+    safe: boolean;
+    decision: DecisionAction;
+    trustScore: number;
+    riskScore: number;
+    classification: Classification;
+    threatLevel: ThreatLevel;
+    securityBadge: string;
+    riskColor: string;
+    summary: string;
+    recommendation: string;
+}
+
+export type { Capabilities, CheckResult, Classification, DecisionAction, Evidence, ExecutionStats, ExecutionTimeline, HttpsStatus, ObservabilityHooks, PerformanceMetrics, PickledResult, PluginExecutionDetails, Provider, RedirectAnomalyKind, RedirectHop, RedirectTrace, RichMetadata, RiskCategory, RiskLevel, RiskSeverity, SecurityBadge, ThreatDetails, ThreatLevel, UrlDetails, VerificationMeta, VerificationResult, VerifyOptions, VisualScore };

package/dist/browser/index.js

@@ -0,0 +1 @@
+export{c as SafeLinkChecker,a as SafeLinkError,b as TimeoutError,f as extractUrls,d as verifyLink,e as verifyLinks}from'../chunk-DDF3IZSI.js';export{o as AnalyticsTracker,r as CloudGateway,f as ConsensusEngine,d as DefaultPluginFactory,c as EventEmitter,a as LRUCache,a as MemoryCache,e as PluginManager,g as PolicyEngine,p as RealtimeSubscriptionEngine,q as ReputationEngine,h as RuleEnginePlugin,t as createSecurityReport,b as defaultCache,s as formatResult,u as injectReportHelpers,i as normalizeLink,n as validateHeuristics,k as validateIp,l as validatePunycode,m as validateShortener,j as validateUrl}from'../chunk-LWMILG2I.js';