+ URL Safety Analysis (optional) {" "}
+ onMode(event.target.value as typeof mode)}>
+ Disabled — scanning stays local
+ Local URL checks — no network
+ Threat intelligence — share URL with providers
+ Remote inspection + threat intelligence — share URL
+ AI-assisted — also share sanitized page evidence
+
+ Barcode images and camera frames never leave this device. Network modes require a configured self-hosted server. URL queries may contain secrets; enabling a network mode shares the decoded URL with the indicated services.
+ {mode !== "disabled" &&
+
{analysis ? `${analysis.riskLevel.toUpperCase()} — ${analysis.riskScore}/100` : state.status.toUpperCase()}
+ {highRisk &&
High-risk indicators detected. Do not open this destination or enter credentials; contact the organization directly.
}
+
{analysis?.verdictReason ?? (state.status === "failed" ? "Safety analysis unavailable. The barcode result is unaffected." : "URL intelligence is independent of barcode decoding.")} Heuristic risk score, not a probability. No verdict guarantees a URL is safe.
+
{analysis.normalizedUrl}
+ Domain: {analysis.local.unicodeHostname} {analysis.local.unicodeHostname !== analysis.local.asciiHostname && `(${analysis.local.asciiHostname})`}
+
+ Local URL checks: {analysis.local.signals.length} signals
+ Threat intelligence: {analysis.reputation?.status ?? "not requested"} (no match does not mean known safe)
+ Remote page inspection: {analysis.remote?.status ?? "not requested"}
+ AI analysis: {analysis.aiStatus ?? "not requested"} — advisory only
+
+ {analysis.reasons.map((reason, index) => {reason.description}
)}
+ Guidance: {analysis.recommendations.map((item) => item.replaceAll("_", " ")).join("; ")}
+ }
+ ;
+}
diff --git a/apps/web-demo/package.json b/apps/web-demo/package.json
index 6c87469..344ee0c 100644
--- a/apps/web-demo/package.json
+++ b/apps/web-demo/package.json
@@ -1,14 +1,15 @@
{
"name": "@scanly/web-demo",
- "version": "2.0.1",
+ "version": "2.1.0",
"private": true,
"description": "Reference Next.js application consuming the Scanly SDK v2 browser package",
"license": "MIT",
"dependencies": {
- "@scanly/browser": "2.0.1",
- "@scanly/core": "2.0.1",
- "@scanly/parsers": "2.0.1",
- "@scanly/scenario-schema": "2.0.1",
+ "@scanly/url-safety": "2.1.0",
+ "@scanly/browser": "2.1.0",
+ "@scanly/core": "2.1.0",
+ "@scanly/parsers": "2.1.0",
+ "@scanly/scenario-schema": "2.1.0",
"next": "15.5.25",
"react": "^18.3.1",
"react-dom": "^18.3.1"
diff --git a/docs/releases/v2.1.0.md b/docs/releases/v2.1.0.md
new file mode 100644
index 0000000..5304d75
--- /dev/null
+++ b/docs/releases/v2.1.0.md
@@ -0,0 +1,31 @@
+# Scanly SDK v2.1.0
+
+Status: development candidate; qualification and publication pending. Published Stable remains v2.0.1. This document is not a publication record.
+
+## New: Link Intelligence
+
+- Local URL risk analysis and IDN-aware canonicalization.
+- Threat-intelligence provider abstraction, optional Google Web Risk and lookup-only VirusTotal.
+- Hardened server-only remote inspection with DNS/IP pinning, bounded responses and per-hop redirect validation.
+- Provider-neutral, JSON-schema-validated LLM-assisted phishing/scam interpretation.
+- Deterministic risk engine with threat-authority precedence and bounded AI contribution.
+- Explicit privacy modes, hashed cache, single-flight deduplication and lifecycle cancellation.
+- Browser/server separation and an optional self-hosted demo endpoint.
+
+## Privacy
+
+Barcode decoding remains local. URL network analysis is opt-in. No barcode image/frame is sent to AI providers. Query values are redacted from display URLs and AI evidence; exact reputation lookups and destination inspection may need full URLs and require consent.
+
+## Security
+
+Remote URL inspection uses SSRF controls. LLM output is advisory. Threat-intelligence authority cannot be overridden by AI. No verdict guarantees safety. Production deployments need isolated egress, shared rate limits and an explicitly configured LLM transport; the stock demo does not invent an AI result when no provider is configured.
+
+## Compatibility
+
+Existing v2 scanner APIs remain compatible. URL intelligence is an independent, default-disabled module, not part of decoder scheduling. Native version metadata advances with the release line; Native build/signing/artifact qualification must be repeated before publication. Existing Native evidence is not rebranded as 2.1.0 evidence.
+
+## Qualification
+
+All software, browser, API/package, security, Native, SBOM/license, artifact/reproducibility, signing and publication gates must pass on the final release identity. Feature-branch test results are development evidence only. See [URL safety architecture](../url-safety.md) and the candidate qualification record when available. Issue #13 remains independent.
+
+The Stable manifest generator refuses new-version generation without `STABLE_QUALIFICATION_RECORD`: an exact-source `scanly-release-qualification-1` record with version, sourceCommit, sourceTree and content-addressed PASS evidence (`path`, `sha256`, `sourceCommit`) for software, apiAbi, security, sbom, licenses, native, npmReproducibility, signing, publicationCredentials and deployment. Fresh public signing metadata, 11-package Trusted Publishing configuration and two independent npm build/hash maps are required. Legacy 2.0.x GO/credential/reproducibility claims cannot be inherited.
diff --git a/docs/url-safety.md b/docs/url-safety.md
new file mode 100644
index 0000000..2de1767
--- /dev/null
+++ b/docs/url-safety.md
@@ -0,0 +1,123 @@
+# Link Intelligence / URL safety
+
+Scanly 2.1.0 adds `@scanly/url-safety` as an opt-in second trust boundary. The scanner, Worker, FrameScheduler and CaptureRouter never depend on this package. Images, barcode pixels and camera frames are never inputs to URL intelligence. The existing `@scanly/parsers` structured payload is the only scan integration entrance; text, WiFi and vCard payloads do not trigger safety calls.
+
+LLM is advisory evidence, not an authority. No verdict guarantees a URL is safe.
+
+## Privacy and data flow
+
+| Explicit mode | Local rules | Configured reputation services | Destination inspection | LLM evidence |
+| --- | --- | --- | --- | --- |
+| Disabled (controller/UI default) | No | No | No | No |
+| `local-only` (analyze default) | Yes | No | No | No |
+| `reputation-only` | Yes | Yes | No | No |
+| `remote` | Yes | Yes | Server only | No |
+| `ai-assisted` | Yes | Yes | Server only | Sanitized, bounded metadata/text |
+
+Selecting a higher mode explicitly authorizes the indicated cumulative layers. No persisted opt-in is inferred. The demo backend also requires `SCANLY_URL_SAFETY_ENABLED=true` to accept network modes. Without configuration, local-only works entirely in the browser. Disabling analysis cancels owned work.
+
+Reputation adapters with `fullUrlRequired=true` receive the full decoded HTTP(S) URL, minus fragment. Both included adapters need this for exact URL lookup. Other adapters receive query-redacted URLs by default. The destination receives its meaningful path/query. Do not enable network modes for token-bearing or confidential links without accepting this disclosure. Embedded username/password URLs are never shared by the server analyzer. URL fragments are never transmitted.
+
+Display URLs, redirect chains and local evidence redact query values and remove userinfo/fragments. Cache keys use SHA-256 of the private normalized URL; modes are separate namespaces. Cache values are sanitized results, TTL defaults to 15 minutes (partial results at most 5 seconds), capacity 256. Results are cloned per caller. Concurrent calls share a flight; cancelling one subscriber does not cancel others, and the last cancellation aborts the flight. Configure separate analyzer/cache instances for different tenants or policies. Do not use one cache across different provider/security configurations.
+
+The library emits no logs or analytics. Safe diagnostic fields include hostname, signal IDs, risk level, provider status, latency and URL hash. Never log request bodies, page HTML, query values, keys, cookies, headers or raw provider errors. Page text may contain personal data; sanitization is best-effort, not an anonymization guarantee. AI mode is explicit consent to share that bounded text.
+
+## Local rules and normalization
+
+`normalizeUrl` uses WHATWG URL parsing, lowercase scheme/ASCII host, canonical default ports, preserved path and query order/duplicates, and no fragment. Deterministic WHATWG query serialization deliberately does not sort parameters: changing order can invalidate signed URLs or alter server semantics. Punycode decoding retains both ASCII and Unicode hostnames. IDN, mixed scripts, high entropy, many/random subdomains, shorteners, weak TLD signals, configured brand mismatches, nested/encoded redirect parameters, credential-related paths and executable extensions are contextual signals, not proof of maliciousness. The URL ceiling is 16 KiB; “long URL” starts at 2 KiB.
+
+The small known-brand domain list is a heuristic, not an exhaustive trademark or public-suffix registry. A legitimate regional brand domain can produce a warning. There is no domain-age claim: no WHOIS source is configured. Homograph detection is approximate, not a complete Unicode confusables implementation.
+
+## Network security / SSRF model
+
+`SafeRemoteFetcher` runs only on Node. Browser imports of `/server` are blocked by conditional exports. Never `fetch` the scanned URL from a browser.
+
+Only HTTP/HTTPS and ports 80/443 are accepted. Userinfo, local/private-like hostnames and all non-global IP ranges are blocked. Every A and AAAA answer must be public. This conservative policy rejects IPv4 private, loopback, link-local/metadata, carrier-grade NAT, unspecified, multicast, reserved, documentation and benchmarking ranges; IPv6 mapped addresses, non-global-unicast, ULA, link-local, multicast, unspecified, transition, documentation and special-purpose ranges are blocked too. Encoded IPv4 variants pass through WHATWG canonicalization before IP validation.
+
+The HTTP connection uses the validated **numeric IP**, with the original Host and TLS server name and certificate verification. There is no second DNS lookup, shared agent/socket, proxy environment inheritance, cookie jar, browser headers or user authorization. DNS queries may complete in the OS after cancellation, but cannot start a connection after the bounded signal has expired. All redirects are manual; each hop revalidates URL, DNS and every IP. The cap is three redirects (four requests).
+
+Inspection is GET-only, with fixed headers, no JavaScript/browser execution and no subresource loads. The total DNS/redirect/body budget is 5 seconds by default (hard ceiling 8 seconds); body cutoff is streaming at 512 KiB (hard ceiling 1 MiB). Headers are capped at 16 KiB. Content encoding must be identity. Only HTML, XHTML and plain text are read; other media record metadata and close the stream. Nothing is executed or written as a downloaded executable.
+
+HTML uses a non-executing parser with a 50,000-node traversal budget, 20,000-character text sample, 512-character title/description and capped hostname lists. Script/style/template content and long encoded blobs are discarded. “Visible text” is an approximate static extraction, not rendered CSS visibility. It may miss JavaScript-rendered attacks, external CSS, non-UTF-8 content, client-side redirects or personalized pages. A technical snapshot is not a malware sandbox or safety certification.
+
+For production defense in depth, run inspection in a separate unprivileged service with an egress firewall denying private/special ranges, no internal service credentials, no filesystem privileges beyond runtime needs, resource limits, and no outbound proxy. Monitor IANA special-purpose allocations and update the conservative IP policy as needed. Do not allow a custom `remoteFetcher` from untrusted input: that extension replaces the security boundary and must independently satisfy these controls.
+
+## Provider configuration / self-hosting
+
+```ts
+import {
+ createUrlSafetyAnalyzer, createUrlSafetyHandler,
+ GoogleWebRiskProvider, VirusTotalProvider,
+} from "@scanly/url-safety/server";
+
+const analyzer = createUrlSafetyAnalyzer({
+ reputationProviders: [
+ new GoogleWebRiskProvider(process.env.SCANLY_WEB_RISK_API_KEY),
+ new VirusTotalProvider(process.env.SCANLY_VIRUSTOTAL_API_KEY),
+ ],
+ policy: { totalTimeoutMs: 20_000, reputationTimeoutMs: 2_000, remoteTimeoutMs: 5_000, aiTimeoutMs: 10_000 },
+});
+export const POST = createUrlSafetyHandler({
+ analyzer,
+ allowedOrigins: ["https://your-app.example"],
+ allowedModes: ["local-only", "reputation-only", "remote"],
+});
+```
+
+Keys must be server environment variables, never `NEXT_PUBLIC_*`, committed `.env`, request parameters or browser bundles. No provider is required. Missing keys yield `not_configured`; failures yield partial analysis without failing barcode scanning. Google Web Risk reports MALWARE, SOCIAL_ENGINEERING and UNWANTED_SOFTWARE. A negative lookup is only “not known malicious,” never “known safe.” VirusTotal only looks up existing reports; report-not-found is unavailable. It never submits or rescans. VT positive engine votes use the lower UNWANTED_SOFTWARE policy floor, not an invented definitive malware classification. To support submissions, implement an explicitly configured adapter and return `operation: "submission"`; obtain separate consent and document its retention/quota/privacy terms.
+
+The demo exposes `/api/url-safety`, with no wildcard CORS, mandatory same-origin Origin (or configured `SCANLY_URL_SAFETY_ORIGIN`), JSON-only structured validation, a 24 KiB streaming request ceiling, timeout, request cancellation, 30 requests/minute global process limit and four concurrent requests. Network requests are denied unless the server explicitly enables them. A process-local rate limiter is **not** sufficient across multiple instances or serverless cold starts. Production hosts must add authenticated access, a shared rate limiter, upstream body/time limits and egress controls. Forwarded client-IP headers are deliberately not trusted as identity. No permissive CORS fallback is provided.
+
+## Vendor-neutral LLM adapter and prompt injection
+
+```ts
+import { JsonLlmSafetyProvider } from "@scanly/url-safety/server";
+
+const llmProvider = new JsonLlmSafetyProvider({
+ id: "your-provider", model: "your-model", timeoutMs: 10_000,
+ complete: async ({ system, data, schema, model, signal }) => {
+ // Implement your provider's server SDK here using SCANLY_LLM_API_KEY.
+ // Send `system` as the trusted policy, `data` as a JSON data message,
+ // and `schema` as strict structured output. Supply NO tools.
+ // Return ONLY the model's JSON string; do not extract arbitrary prose.
+ return yourServerOnlyProvider.completeJson({ system, data, schema, model, signal });
+ },
+});
+```
+
+The repository intentionally does not pick an LLM vendor or wire a credential to an assumed API protocol. Add this trusted transport to `createUrlSafetyAnalyzer({ llmProvider, ... })` on the server to enable AI. In the stock demo, AI is `not_configured`, not a mocked successful AI verdict. The transport must have no agent tools, browsing, shell, network-tool, filesystem or key-retrieval capabilities. It must not promote page content to system/developer messages. The transport itself necessarily talks to its configured provider; that is not a model-callable tool.
+
+The immutable system policy identifies remote pages as untrusted evidence. The structured data fields are `urlFeatures`, `reputationSignals`, `remotePageMetadata`, and `visibleTextExcerpt`. Scripts/styles and URL query values are removed, including echoed exact query values. Adversarial instructions remain plain evidence in a data field. Schema validation rejects extra fields, missing fields, non-JSON prose, invalid enum/score and >20-point AI contribution. API failures, 429/500, timeouts and invalid output mark AI unavailable; completed higher-authority evidence is preserved. Provider/model/latency metadata is retained; raw errors, API keys and chain-of-thought are not.
+
+A schema and prompt cannot guarantee that a model resists every semantic manipulation. The architecture limits the effect: no tools/secrets in the model context, no action execution, strict contribution bounds and deterministic authority precedence. Do not market prompt-injection tests as proof of universal model immunity.
+
+## Risk semantics
+
+Authority tiers: (1) threat intelligence; (2) network/security facts; (3) technical page evidence; (4) lexical heuristics; (5) AI interpretation. LLM contribution is nonnegative and capped at 20; it cannot lower a higher-tier threat. Local contribution is capped at 45. Google malware sets at least 85, social engineering at least 70, unwanted software at least 40. Password inputs and external form actions add technical evidence, but are not themselves proof of fraud.
+
+Scores are composite heuristics, not probabilities: 0–19 low, 20–39 medium, 40–69 high, 70–100 critical. Zero with insufficient/cancelled evidence is unknown. `safe` is reserved in the public type; this implementation never emits it because no strict allow policy is configured. `complete` means the selected analysis finished, not that a page is safe. `partial` means requested evidence is missing; completed observations remain available. `recheck_later`, `verify_domain`, `do_not_enter_credentials`, and other recommendations are guidance, not guarantees.
+
+## Browser and ScannerSession integration
+
+```ts
+import { UrlSafetyClient, UrlSafetyController } from "@scanly/url-safety";
+
+const client = new UrlSafetyClient({ endpoint: "/api/url-safety" });
+const safety = new UrlSafetyController(client, (state) => renderSafetyState(state));
+const detach = safety.attach(scannerSession); // remains disabled
+// Only following explicit user consent:
+safety.configure("remote");
+// scannerSession.onResult is independent and never awaits analysis.
+// When the consumer ends ownership:
+detach(); safety.dispose(); client.dispose();
+```
+
+Only confirmed/emitted events are eligible. `ScannerSession` events expose decoded text rather than `ScanResult.structuredPayload`, so the adapter calls the **existing** semantic parser after confirmation, then gates on `url` or `gs1-digital-link`. It never parses frames or raw detection events. For upload `ScanOutcome`, call `safety.accept(outcome.primary.structuredPayload)` after publishing the barcode result.
+
+Public states: idle, queued, analyzing, complete, partial, failed, cancelled. Lifecycle generation suppresses A's late result after B. Session stop/pause/failure cancels owned work; dispose detaches. UI results use separate state from barcode results. The demo's single-shot scanner stops camera acquisition after emitting the barcode; the result panel owns the subsequent analysis. Explicit stop/pause, new result, mode change, reset or unmount cancels that result-panel work.
+
+There is never automatic navigation. Low risk offers a user action; medium/unknown requires a warning. High/critical offers a conspicuous warning and a non-primary “Open anyway” confirmation. New windows use `noopener,noreferrer`.
+
+## Verification
+
+Run `npm run test:url-safety`, `npm run test:url-safety:ssrf`, `npm run url-safety:security` and `npm run benchmark:url-safety`, plus all normal scanner/package/API/browser gates. Unit provider and transport fixtures are deterministic and do not contact suspicious sites. They are not live-provider qualification or physical-device evidence. Historical 2.0.0/2.0.1 manifests and artifacts are immutable; new release claims require fresh 2.1.0 qualification.
diff --git a/engines/jsqr/README.md b/engines/jsqr/README.md
index 4a8b18c..9d3d642 100644
--- a/engines/jsqr/README.md
+++ b/engines/jsqr/README.md
@@ -1,6 +1,6 @@
# @scanly/engine-jsqr
-QR Code Model 2 engine-contract adapter for jsQR 1.4.0 in Scanly SDK v2.0.1.
+QR Code Model 2 engine-contract adapter for jsQR 1.4.0 in Scanly SDK v2.1.0.
```bash
npm install @scanly/core @scanly/engine-jsqr
@@ -17,4 +17,4 @@ const router = new CaptureRouter({ engines, formats: ["qr_code"] });
The adapter is QR-only and single-code. It does not represent the full eight-format SDK contract. This is an advanced engine package; Browser and Node already include it in default composition.
-Version: 2.0.1 · [Engine composition documentation](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
+Version: 2.1.0 · [Engine composition documentation](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
diff --git a/engines/jsqr/package.json b/engines/jsqr/package.json
index c8b638b..db91806 100644
--- a/engines/jsqr/package.json
+++ b/engines/jsqr/package.json
@@ -1,6 +1,6 @@
{
"name": "@scanly/engine-jsqr",
- "version": "2.0.1",
+ "version": "2.1.0",
"description": "QR Code jsQR engine plugin for Scanly SDK",
"keywords": ["barcode", "qr-code", "decoder", "jsqr", "scanner", "scanly"],
"repository": {
@@ -31,7 +31,7 @@
"build": "tsc -p tsconfig.build.json"
},
"dependencies": {
- "@scanly/core": "2.0.1",
+ "@scanly/core": "2.1.0",
"jsqr": "^1.4.0"
}
}
diff --git a/engines/zxing-cpp-wasm/README.md b/engines/zxing-cpp-wasm/README.md
index 9acb9e0..11c2d60 100644
--- a/engines/zxing-cpp-wasm/README.md
+++ b/engines/zxing-cpp-wasm/README.md
@@ -1,6 +1,6 @@
# @scanly/engine-zxing-cpp-wasm
-Optional, lazy ZXing-C++ WebAssembly engine for Scanly SDK v2.0.1. It implements the public QR Code, Data Matrix, PDF417, Code 128, EAN-13, EAN-8, UPC-A, and UPC-E format mappings.
+Optional, lazy ZXing-C++ WebAssembly engine for Scanly SDK v2.1.0. It implements the public QR Code, Data Matrix, PDF417, Code 128, EAN-13, EAN-8, UPC-A, and UPC-E format mappings.
```bash
npm install @scanly/engine-zxing-cpp-wasm
@@ -21,4 +21,4 @@ The shipped asset is standard WASM. SIMD selection is implemented, but no SIMD p
This is an advanced public engine package. Browser and Node use it automatically unless `zxingCppWasm: false` is configured.
-Version: 2.0.1 · [WASM deployment documentation](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/wasm-engine.md)
+Version: 2.1.0 · [WASM deployment documentation](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/wasm-engine.md)
diff --git a/engines/zxing-cpp-wasm/package.json b/engines/zxing-cpp-wasm/package.json
index cf1f01a..8fb242f 100644
--- a/engines/zxing-cpp-wasm/package.json
+++ b/engines/zxing-cpp-wasm/package.json
@@ -1,6 +1,6 @@
{
"name": "@scanly/engine-zxing-cpp-wasm",
- "version": "2.0.1",
+ "version": "2.1.0",
"description": "Multi-format ZXing-C++ WebAssembly barcode engine for Scanly SDK",
"keywords": ["barcode", "qr-code", "wasm", "webassembly", "zxing", "scanly"],
"repository": {
@@ -40,7 +40,7 @@
"wasm:verify": "node scripts/verify-wasm.mjs"
},
"dependencies": {
- "@scanly/core": "2.0.1",
+ "@scanly/core": "2.1.0",
"zxing-wasm": "3.1.1"
}
}
diff --git a/engines/zxing-js/README.md b/engines/zxing-js/README.md
index 1d3db6d..b0ba25f 100644
--- a/engines/zxing-js/README.md
+++ b/engines/zxing-js/README.md
@@ -1,6 +1,6 @@
# @scanly/engine-zxing-js
-QR Code engine-contract adapter for `@zxing/library` 0.21.3 in Scanly SDK v2.0.1.
+QR Code engine-contract adapter for `@zxing/library` 0.21.3 in Scanly SDK v2.1.0.
```bash
npm install @scanly/core @scanly/engine-zxing-js
@@ -17,4 +17,4 @@ const router = new CaptureRouter({ engines, formats: ["qr_code"] });
This adapter intentionally configures the ZXing JavaScript QR reader only. It does not claim additional barcode formats. This is an advanced engine package; Browser and Node already include it as a QR fallback.
-Version: 2.0.1 · [Engine composition documentation](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
+Version: 2.1.0 · [Engine composition documentation](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
diff --git a/engines/zxing-js/package.json b/engines/zxing-js/package.json
index 58f6958..f8db1eb 100644
--- a/engines/zxing-js/package.json
+++ b/engines/zxing-js/package.json
@@ -1,6 +1,6 @@
{
"name": "@scanly/engine-zxing-js",
- "version": "2.0.1",
+ "version": "2.1.0",
"description": "QR Code ZXing JavaScript engine plugin for Scanly SDK",
"keywords": ["barcode", "qr-code", "decoder", "zxing", "scanner", "scanly"],
"repository": {
@@ -31,7 +31,7 @@
"build": "tsc -p tsconfig.build.json"
},
"dependencies": {
- "@scanly/core": "2.0.1",
+ "@scanly/core": "2.1.0",
"@zxing/library": "0.21.3"
}
}
diff --git a/native/android/scanly-sdk/build.gradle.kts b/native/android/scanly-sdk/build.gradle.kts
index 98fba5d..5f80ab0 100644
--- a/native/android/scanly-sdk/build.gradle.kts
+++ b/native/android/scanly-sdk/build.gradle.kts
@@ -5,7 +5,7 @@ plugins {
}
group = "io.scanly"
-version = "2.0.1"
+version = "2.1.0"
android {
namespace = "io.scanly.sdk"
diff --git a/native/core/CMakeLists.txt b/native/core/CMakeLists.txt
index b9f804b..4034825 100644
--- a/native/core/CMakeLists.txt
+++ b/native/core/CMakeLists.txt
@@ -1,6 +1,6 @@
cmake_minimum_required(VERSION 3.16)
-project(scanly_native_core VERSION 2.0.1 LANGUAGES C CXX)
+project(scanly_native_core VERSION 2.1.0 LANGUAGES C CXX)
option(SCANLY_BUILD_TESTS "Build Scanly native core contract tests" ON)
option(SCANLY_BUILD_FUZZ "Build the standalone malformed-input fuzz harness" OFF)
diff --git a/native/core/src/scanly_core.cpp b/native/core/src/scanly_core.cpp
index 7b74a21..f12708e 100644
--- a/native/core/src/scanly_core.cpp
+++ b/native/core/src/scanly_core.cpp
@@ -610,7 +610,7 @@ extern "C" {
const char *scanly_core_version(void)
{
- return "2.0.1-native-core.1";
+ return "2.1.0-native-core.1";
}
const char *scanly_status_message(scanly_status_t status)
diff --git a/native/core/tests/c_abi_test.c b/native/core/tests/c_abi_test.c
index 4520e94..1a0a3ef 100644
--- a/native/core/tests/c_abi_test.c
+++ b/native/core/tests/c_abi_test.c
@@ -14,7 +14,7 @@ int main(void)
options.backend = SCANLY_BACKEND_FIXTURE;
assert(scanly_context_create(&options, &context) == SCANLY_STATUS_OK);
assert(context != NULL);
- assert(strcmp(scanly_core_version(), "2.0.1-native-core.1") == 0);
+ assert(strcmp(scanly_core_version(), "2.1.0-native-core.1") == 0);
scanly_context_destroy(context);
scanly_context_destroy(NULL);
scanly_result_set_destroy(NULL);
diff --git a/native/ios/Package.swift b/native/ios/Package.swift
index 6b2f83e..e2e2870 100644
--- a/native/ios/Package.swift
+++ b/native/ios/Package.swift
@@ -2,7 +2,7 @@
import PackageDescription
let package = Package(
- // Scanly SDK v2.0.1 Stable; package manifests do not carry semantic versions.
+ // Scanly SDK v2.1.0 Stable; package manifests do not carry semantic versions.
name: "ScanlySDK",
platforms: [.iOS(.v13), .macOS(.v13)],
products: [.library(name: "ScanlySDK", targets: ["ScanlySDK"])],
diff --git a/package-lock.json b/package-lock.json
index f693639..6e0dda4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
{
"name": "scanly",
- "version": "2.0.1",
+ "version": "2.1.0",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "scanly",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT",
"workspaces": [
"apps/*",
@@ -46,13 +46,14 @@
},
"apps/web-demo": {
"name": "@scanly/web-demo",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT",
"dependencies": {
- "@scanly/browser": "2.0.1",
- "@scanly/core": "2.0.1",
- "@scanly/parsers": "2.0.1",
- "@scanly/scenario-schema": "2.0.1",
+ "@scanly/browser": "2.1.0",
+ "@scanly/core": "2.1.0",
+ "@scanly/parsers": "2.1.0",
+ "@scanly/scenario-schema": "2.1.0",
+ "@scanly/url-safety": "2.1.0",
"next": "15.5.25",
"react": "^18.3.1",
"react-dom": "^18.3.1"
@@ -60,28 +61,28 @@
},
"engines/jsqr": {
"name": "@scanly/engine-jsqr",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT",
"dependencies": {
- "@scanly/core": "2.0.1",
+ "@scanly/core": "2.1.0",
"jsqr": "^1.4.0"
}
},
"engines/zxing-cpp-wasm": {
"name": "@scanly/engine-zxing-cpp-wasm",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT",
"dependencies": {
- "@scanly/core": "2.0.1",
+ "@scanly/core": "2.1.0",
"zxing-wasm": "3.1.1"
}
},
"engines/zxing-js": {
"name": "@scanly/engine-zxing-js",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT",
"dependencies": {
- "@scanly/core": "2.0.1",
+ "@scanly/core": "2.1.0",
"@zxing/library": "0.21.3"
}
},
@@ -1861,6 +1862,10 @@
"resolved": "packages/scenario-schema",
"link": true
},
+ "node_modules/@scanly/url-safety": {
+ "resolved": "packages/url-safety",
+ "link": true
+ },
"node_modules/@scanly/web-demo": {
"resolved": "apps/web-demo",
"link": true
@@ -2732,7 +2737,6 @@
},
"node_modules/ajv": {
"version": "8.20.0",
- "dev": true,
"license": "MIT",
"dependencies": {
"fast-deep-equal": "^3.1.3",
@@ -3378,6 +3382,18 @@
"dev": true,
"license": "MIT"
},
+ "node_modules/entities": {
+ "version": "6.0.1",
+ "resolved": "https://registry.npmjs.org/entities/-/entities-6.0.1.tgz",
+ "integrity": "sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==",
+ "license": "BSD-2-Clause",
+ "engines": {
+ "node": ">=0.12"
+ },
+ "funding": {
+ "url": "https://github.com/fb55/entities?sponsor=1"
+ }
+ },
"node_modules/es-abstract": {
"version": "1.24.2",
"dev": true,
@@ -4060,7 +4076,6 @@
},
"node_modules/fast-deep-equal": {
"version": "3.1.3",
- "dev": true,
"license": "MIT"
},
"node_modules/fast-glob": {
@@ -4101,7 +4116,6 @@
},
"node_modules/fast-uri": {
"version": "3.1.6",
- "dev": true,
"funding": [
{
"type": "github",
@@ -4526,6 +4540,15 @@
"node": ">= 0.4"
}
},
+ "node_modules/ipaddr.js": {
+ "version": "2.2.0",
+ "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-2.2.0.tgz",
+ "integrity": "sha512-Ag3wB2o37wslZS19hZqorUnrnzSkpOVy+IiiDEiTqNubEYpYuHWIf6K4psgN2ZWKExS4xhVCrRVfb/wfW8fWJA==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 10"
+ }
+ },
"node_modules/is-array-buffer": {
"version": "3.0.5",
"dev": true,
@@ -4999,7 +5022,6 @@
},
"node_modules/json-schema-traverse": {
"version": "1.0.0",
- "dev": true,
"license": "MIT"
},
"node_modules/json-stable-stringify-without-jsonify": {
@@ -5543,7 +5565,7 @@
"version": "15.5.25",
"license": "MIT"
},
- "node_modules/next/node_modules/@next/swc-win32-x64-msvc": {
+ "node_modules/@next/swc-win32-x64-msvc": {
"version": "15.5.25",
"cpu": [
"x64"
@@ -5788,6 +5810,18 @@
"node": ">=6"
}
},
+ "node_modules/parse5": {
+ "version": "7.3.0",
+ "resolved": "https://registry.npmjs.org/parse5/-/parse5-7.3.0.tgz",
+ "integrity": "sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==",
+ "license": "MIT",
+ "dependencies": {
+ "entities": "^6.0.0"
+ },
+ "funding": {
+ "url": "https://github.com/inikulin/parse5?sponsor=1"
+ }
+ },
"node_modules/path-exists": {
"version": "4.0.0",
"dev": true,
@@ -5928,7 +5962,6 @@
},
"node_modules/punycode": {
"version": "2.3.1",
- "dev": true,
"license": "MIT",
"engines": {
"node": ">=6"
@@ -6045,7 +6078,6 @@
},
"node_modules/require-from-string": {
"version": "2.0.2",
- "dev": true,
"license": "MIT",
"engines": {
"node": ">=0.10.0"
@@ -7418,53 +7450,53 @@
},
"packages/benchmark": {
"name": "@scanly/benchmark",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT"
},
"packages/browser": {
"name": "@scanly/browser",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT",
"dependencies": {
- "@scanly/core": "2.0.1",
- "@scanly/engine-jsqr": "2.0.1",
- "@scanly/engine-zxing-cpp-wasm": "2.0.1",
- "@scanly/engine-zxing-js": "2.0.1",
- "@scanly/scenario-schema": "2.0.1"
+ "@scanly/core": "2.1.0",
+ "@scanly/engine-jsqr": "2.1.0",
+ "@scanly/engine-zxing-cpp-wasm": "2.1.0",
+ "@scanly/engine-zxing-js": "2.1.0",
+ "@scanly/scenario-schema": "2.1.0"
}
},
"packages/core": {
"name": "@scanly/core",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT",
"dependencies": {
- "@scanly/parsers": "2.0.1",
- "@scanly/scenario-schema": "2.0.1"
+ "@scanly/parsers": "2.1.0",
+ "@scanly/scenario-schema": "2.1.0"
}
},
"packages/node": {
"name": "@scanly/node",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT",
"dependencies": {
- "@scanly/core": "2.0.1",
- "@scanly/engine-jsqr": "2.0.1",
- "@scanly/engine-zxing-cpp-wasm": "2.0.1",
- "@scanly/engine-zxing-js": "2.0.1",
+ "@scanly/core": "2.1.0",
+ "@scanly/engine-jsqr": "2.1.0",
+ "@scanly/engine-zxing-cpp-wasm": "2.1.0",
+ "@scanly/engine-zxing-js": "2.1.0",
"sharp": "^0.35.3"
}
},
"packages/parsers": {
"name": "@scanly/parsers",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT"
},
"packages/react": {
"name": "@scanly/react",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT",
"dependencies": {
- "@scanly/browser": "2.0.1"
+ "@scanly/browser": "2.1.0"
},
"devDependencies": {
"@types/react": "^18.3.3",
@@ -7476,22 +7508,19 @@
},
"packages/scenario-schema": {
"name": "@scanly/scenario-schema",
- "version": "2.0.1",
+ "version": "2.1.0",
"license": "MIT"
},
- "node_modules/@next/swc-win32-x64-msvc": {
- "version": "15.5.25",
- "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-15.5.25.tgz",
- "integrity": "sha512-zREeykps3ndWr9egJgvJKqVkkDuaw6Zrrg23cYBos0ygydFkAWYU4+PaPVwXzP1eAYQJe53ShSK45iDM529BOg==",
- "cpu": [
- "x64"
- ],
- "optional": true,
- "os": [
- "win32"
- ],
- "engines": {
- "node": ">= 10"
+ "packages/url-safety": {
+ "name": "@scanly/url-safety",
+ "version": "2.1.0",
+ "license": "MIT",
+ "dependencies": {
+ "@scanly/parsers": "2.1.0",
+ "ajv": "^8.17.1",
+ "ipaddr.js": "2.2.0",
+ "parse5": "7.3.0",
+ "punycode": "2.3.1"
}
}
}
diff --git a/package.json b/package.json
index 19f78fa..b15c0af 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
{
"name": "scanly",
"private": true,
- "version": "2.0.1",
+ "version": "2.1.0",
"workspaces": [
"apps/*",
"packages/*",
@@ -25,7 +25,7 @@
"start": "next start apps/web-demo",
"lint": "eslint apps packages engines scripts tests *.ts --ext .ts,.tsx --ignore-pattern '**/dist/**' --ignore-pattern '**/.next/**'",
"typecheck": "tsc --noEmit",
- "build:packages": "npm run build --workspace=@scanly/scenario-schema && npm run build --workspace=@scanly/parsers && npm run build --workspace=@scanly/benchmark && npm run build --workspace=@scanly/core && npm run build --workspace=@scanly/engine-jsqr && npm run build --workspace=@scanly/engine-zxing-js && npm run build --workspace=@scanly/engine-zxing-cpp-wasm && npm run build --workspace=@scanly/browser && npm run build --workspace=@scanly/node && npm run build --workspace=@scanly/react",
+ "build:packages": "npm run build --workspace=@scanly/scenario-schema && npm run build --workspace=@scanly/parsers && npm run build --workspace=@scanly/url-safety && npm run build --workspace=@scanly/benchmark && npm run build --workspace=@scanly/core && npm run build --workspace=@scanly/engine-jsqr && npm run build --workspace=@scanly/engine-zxing-js && npm run build --workspace=@scanly/engine-zxing-cpp-wasm && npm run build --workspace=@scanly/browser && npm run build --workspace=@scanly/node && npm run build --workspace=@scanly/react",
"wasm:build": "npm run wasm:build --workspace=@scanly/engine-zxing-cpp-wasm",
"wasm:verify": "npm run wasm:verify --workspace=@scanly/engine-zxing-cpp-wasm",
"packages:smoke": "node scripts/verify-package-imports.mjs",
@@ -33,6 +33,12 @@
"package:metadata:verify": "node scripts/verify-package-metadata.mjs",
"test": "vitest run",
"test:unit": "vitest run tests/unit",
+ "test:url-safety": "vitest run tests/unit/url-safety",
+ "test:url-safety:ssrf": "vitest run tests/unit/url-safety/ssrf.test.ts",
+ "benchmark:url-safety": "tsx scripts/benchmark-url-safety.ts",
+ "url-safety:security": "tsx scripts/verify-url-safety-security.ts",
+ "url-safety:sbom": "tsx scripts/url-safety-sbom.ts",
+ "url-safety:api": "tsx scripts/verify-url-safety-api.ts",
"test:coverage": "vitest run --coverage",
"test:symbologies": "vitest run tests/unit/multisymbology-contracts.test.ts tests/unit/zxing-cpp-formats.test.ts tests/unit/parsers.test.ts tests/integration/zxing-cpp-multisymbology.test.ts",
"test:e2e": "playwright test",
diff --git a/packages/benchmark/README.md b/packages/benchmark/README.md
index 1b161c1..f292250 100644
--- a/packages/benchmark/README.md
+++ b/packages/benchmark/README.md
@@ -1,6 +1,6 @@
# @scanly/benchmark
-Machine-readable benchmark contracts, conformance evaluation, and regression gates for Scanly SDK v2.0.1.
+Machine-readable benchmark contracts, conformance evaluation, and regression gates for Scanly SDK v2.1.0.
```bash
npm install @scanly/benchmark
@@ -14,4 +14,4 @@ console.log(BENCHMARK_SCHEMA_VERSION); // 2.0
Node pipeline timing, browser timing, and physical-device timing are separate measurement domains and must retain their labels. This advanced/internal-facing public package is for tooling and evidence integrations, not barcode decoding.
-Version: 2.0.1 · [Benchmark methodology](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/benchmarking/methodology.md)
+Version: 2.1.0 · [Benchmark methodology](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/benchmarking/methodology.md)
diff --git a/packages/benchmark/package.json b/packages/benchmark/package.json
index d537de4..2a4d42b 100644
--- a/packages/benchmark/package.json
+++ b/packages/benchmark/package.json
@@ -1,6 +1,6 @@
{
"name": "@scanly/benchmark",
- "version": "2.0.1",
+ "version": "2.1.0",
"description": "Benchmark contracts, conformance evaluation, and regression gates for Scanly SDK",
"keywords": ["barcode", "benchmark", "conformance", "regression", "scanner", "scanly"],
"repository": {
diff --git a/packages/browser/README.md b/packages/browser/README.md
index 7b503c0..f7dbcfb 100644
--- a/packages/browser/README.md
+++ b/packages/browser/README.md
@@ -1,6 +1,6 @@
# @scanly/browser
-Browser upload, module Worker, camera, ScannerSession, tracking, batch, and default engine composition for Scanly SDK v2.0.1. The optional ZXing-C++ WASM backend is included and loaded lazily.
+Browser upload, module Worker, camera, ScannerSession, tracking, batch, and default engine composition for Scanly SDK v2.1.0. The optional ZXing-C++ WASM backend is included and loaded lazily.
```bash
npm install @scanly/browser
@@ -33,6 +33,6 @@ The Worker is self-hosted through `new URL(..., import.meta.url)`. Deployments m
This is the standard public Browser package. React users may install `@scanly/react`, which depends on it.
-Version: 2.0.1 · [Browser usage and deployment](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
+Version: 2.1.0 · [Browser usage and deployment](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
`ScannerSession.stop()` remains restartable. `ScannerSession.dispose()` is terminal: subsequent `start()`, `reset()`, and `switchSource()` calls reject with `session_disposed`, pending work is drained, and an injected decoder remains caller-owned.
diff --git a/packages/browser/dist/index.d.ts b/packages/browser/dist/index.d.ts
index 1bbc83a..7b4f5ee 100644
--- a/packages/browser/dist/index.d.ts
+++ b/packages/browser/dist/index.d.ts
@@ -1,4 +1,4 @@
-export declare const BROWSER_SDK_VERSION: "2.0.1";
+export declare const BROWSER_SDK_VERSION: "2.1.0";
export * from "./browser-session.js";
export * from "./camera-source.js";
export * from "./image-loader.js";
diff --git a/packages/browser/dist/index.js b/packages/browser/dist/index.js
index 373ec96..7914960 100644
--- a/packages/browser/dist/index.js
+++ b/packages/browser/dist/index.js
@@ -1,4 +1,4 @@
-export const BROWSER_SDK_VERSION = "2.0.1";
+export const BROWSER_SDK_VERSION = "2.1.0";
export * from "./browser-session.js";
export * from "./camera-source.js";
export * from "./image-loader.js";
diff --git a/packages/browser/package.json b/packages/browser/package.json
index da60eb6..11d2b2d 100644
--- a/packages/browser/package.json
+++ b/packages/browser/package.json
@@ -1,6 +1,6 @@
{
"name": "@scanly/browser",
- "version": "2.0.1",
+ "version": "2.1.0",
"description": "Browser, Worker, and camera barcode scanning runtime for Scanly SDK",
"keywords": ["barcode", "qr-code", "scanner", "web-worker", "wasm", "camera"],
"repository": {
@@ -31,10 +31,10 @@
"build": "tsc -p tsconfig.build.json"
},
"dependencies": {
- "@scanly/core": "2.0.1",
- "@scanly/engine-jsqr": "2.0.1",
- "@scanly/engine-zxing-cpp-wasm": "2.0.1",
- "@scanly/engine-zxing-js": "2.0.1",
- "@scanly/scenario-schema": "2.0.1"
+ "@scanly/core": "2.1.0",
+ "@scanly/engine-jsqr": "2.1.0",
+ "@scanly/engine-zxing-cpp-wasm": "2.1.0",
+ "@scanly/engine-zxing-js": "2.1.0",
+ "@scanly/scenario-schema": "2.1.0"
}
}
diff --git a/packages/browser/src/index.ts b/packages/browser/src/index.ts
index 72b62e9..3941a26 100644
--- a/packages/browser/src/index.ts
+++ b/packages/browser/src/index.ts
@@ -1,4 +1,4 @@
-export const BROWSER_SDK_VERSION = "2.0.1" as const;
+export const BROWSER_SDK_VERSION = "2.1.0" as const;
export * from "./browser-session.js";
export * from "./camera-source.js";
export * from "./image-loader.js";
diff --git a/packages/core/README.md b/packages/core/README.md
index d13155f..caf82ee 100644
--- a/packages/core/README.md
+++ b/packages/core/README.md
@@ -1,6 +1,6 @@
# @scanly/core
-`@scanly/core` is the framework-independent core for Scanly SDK v2.0.1. It provides frame/result/error contracts, engine and operator registries, `CaptureRouter`, sessions, tracking, batch, and bounded industrial recovery without React or Next.js dependencies.
+`@scanly/core` is the framework-independent core for Scanly SDK v2.1.0. It provides frame/result/error contracts, engine and operator registries, `CaptureRouter`, sessions, tracking, batch, and bounded industrial recovery without React or Next.js dependencies.
```bash
npm install @scanly/core @scanly/engine-zxing-cpp-wasm
@@ -22,4 +22,4 @@ The public format contract contains QR Code, Data Matrix, PDF417, Code 128, EAN-
This is an advanced public package. Prefer `@scanly/browser`, `@scanly/node`, or `@scanly/react` for standard applications.
-Version: 2.0.1 · [SDK documentation](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
+Version: 2.1.0 · [SDK documentation](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
diff --git a/packages/core/dist/index.d.ts b/packages/core/dist/index.d.ts
index c220d13..d8578e2 100644
--- a/packages/core/dist/index.d.ts
+++ b/packages/core/dist/index.d.ts
@@ -1,4 +1,4 @@
-export declare const SDK_VERSION: "2.0.1";
+export declare const SDK_VERSION: "2.1.0";
export * from "./contracts/frame.js";
export * from "./contracts/errors.js";
export * from "./contracts/result.js";
diff --git a/packages/core/dist/index.js b/packages/core/dist/index.js
index 7a2e6c7..d7be15d 100644
--- a/packages/core/dist/index.js
+++ b/packages/core/dist/index.js
@@ -1,4 +1,4 @@
-export const SDK_VERSION = "2.0.1";
+export const SDK_VERSION = "2.1.0";
export * from "./contracts/frame.js";
export * from "./contracts/errors.js";
export * from "./contracts/result.js";
diff --git a/packages/core/dist/runtime/builtin-operators.js b/packages/core/dist/runtime/builtin-operators.js
index 46fc758..287e6d0 100644
--- a/packages/core/dist/runtime/builtin-operators.js
+++ b/packages/core/dist/runtime/builtin-operators.js
@@ -32,7 +32,7 @@ const MAX_MESSAGE_LENGTH = 512;
function descriptor(id, accepts, produces, cpu = "low") {
return {
id,
- version: "2.0.1",
+ version: "2.1.0",
accepts,
produces,
configurationSchemaId: "https://scanly.dev/schema/scenario/2.1",
diff --git a/packages/core/package.json b/packages/core/package.json
index 250d614..dac9b4d 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -1,6 +1,6 @@
{
"name": "@scanly/core",
- "version": "2.0.1",
+ "version": "2.1.0",
"description": "Framework-independent barcode scanning contracts, router, sessions, tracking, batch, and recovery for Scanly SDK",
"keywords": ["barcode", "qr-code", "scanner", "typescript", "tracking", "scanly"],
"repository": {
@@ -43,7 +43,7 @@
"build": "tsc -p tsconfig.build.json"
},
"dependencies": {
- "@scanly/parsers": "2.0.1",
- "@scanly/scenario-schema": "2.0.1"
+ "@scanly/parsers": "2.1.0",
+ "@scanly/scenario-schema": "2.1.0"
}
}
diff --git a/packages/core/src/index.ts b/packages/core/src/index.ts
index c00e668..b6d70c1 100644
--- a/packages/core/src/index.ts
+++ b/packages/core/src/index.ts
@@ -1,4 +1,4 @@
-export const SDK_VERSION = "2.0.1" as const;
+export const SDK_VERSION = "2.1.0" as const;
export * from "./contracts/frame.js";
export * from "./contracts/errors.js";
export * from "./contracts/result.js";
diff --git a/packages/core/src/runtime/builtin-operators.ts b/packages/core/src/runtime/builtin-operators.ts
index a3ce23f..55a779d 100644
--- a/packages/core/src/runtime/builtin-operators.ts
+++ b/packages/core/src/runtime/builtin-operators.ts
@@ -47,7 +47,7 @@ const MAX_MESSAGE_LENGTH = 512;
function descriptor(id: string, accepts: string[], produces: string[], cpu: "low" | "medium" | "high" = "low"): OperatorDescriptor {
return {
id,
- version: "2.0.1",
+ version: "2.1.0",
accepts,
produces,
configurationSchemaId: "https://scanly.dev/schema/scenario/2.1",
diff --git a/packages/node/README.md b/packages/node/README.md
index 0952f31..17b4dd3 100644
--- a/packages/node/README.md
+++ b/packages/node/README.md
@@ -1,6 +1,6 @@
# @scanly/node
-Node.js image loading and default local engine composition for Scanly SDK v2.0.1. `sharp` is isolated here and never enters Core or Browser dependency graphs.
+Node.js image loading and default local engine composition for Scanly SDK v2.1.0. `sharp` is isolated here and never enters Core or Browser dependency graphs.
```bash
npm install @scanly/node
@@ -20,4 +20,4 @@ The default composition is jsQR → lazy ZXing-C++ WASM → ZXing-JS. Pass `zxin
This is the standard public Node package. Lower-level pixel-buffer and industrial recovery helpers are advanced APIs.
-Version: 2.0.1 · [Node usage](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
+Version: 2.1.0 · [Node usage](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
diff --git a/packages/node/package.json b/packages/node/package.json
index a72da90..0988695 100644
--- a/packages/node/package.json
+++ b/packages/node/package.json
@@ -1,6 +1,6 @@
{
"name": "@scanly/node",
- "version": "2.0.1",
+ "version": "2.1.0",
"description": "Node.js local barcode decoding runtime and image loading for Scanly SDK",
"keywords": ["barcode", "qr-code", "scanner", "nodejs", "wasm", "scanly"],
"repository": {
@@ -31,10 +31,10 @@
"build": "tsc -p tsconfig.build.json"
},
"dependencies": {
- "@scanly/core": "2.0.1",
- "@scanly/engine-jsqr": "2.0.1",
- "@scanly/engine-zxing-cpp-wasm": "2.0.1",
- "@scanly/engine-zxing-js": "2.0.1",
+ "@scanly/core": "2.1.0",
+ "@scanly/engine-jsqr": "2.1.0",
+ "@scanly/engine-zxing-cpp-wasm": "2.1.0",
+ "@scanly/engine-zxing-js": "2.1.0",
"sharp": "^0.35.3"
}
}
diff --git a/packages/parsers/README.md b/packages/parsers/README.md
index 45e476a..b31c954 100644
--- a/packages/parsers/README.md
+++ b/packages/parsers/README.md
@@ -1,6 +1,6 @@
# @scanly/parsers
-Local-only, side-effect-free semantic barcode payload parsers for Scanly SDK v2.0.1.
+Local-only, side-effect-free semantic barcode payload parsers for Scanly SDK v2.1.0.
```bash
npm install @scanly/parsers
@@ -17,4 +17,4 @@ Parsers never replace or mutate raw decode text and never execute URLs, Wi-Fi jo
This is an advanced public package. Most applications receive parsed metadata through Browser or Node scan results and do not need to install it directly.
-Version: 2.0.1 · [Repository and documentation](https://github.com/Yangjunjie-Lin/Scanly)
+Version: 2.1.0 · [Repository and documentation](https://github.com/Yangjunjie-Lin/Scanly)
diff --git a/packages/parsers/package.json b/packages/parsers/package.json
index 3378cbe..d987d5b 100644
--- a/packages/parsers/package.json
+++ b/packages/parsers/package.json
@@ -1,6 +1,6 @@
{
"name": "@scanly/parsers",
- "version": "2.0.1",
+ "version": "2.1.0",
"description": "Local-only semantic barcode payload parsers for Scanly SDK",
"keywords": ["barcode", "qr-code", "parser", "gs1", "privacy", "scanly"],
"repository": {
diff --git a/packages/react/README.md b/packages/react/README.md
index c8b6ad2..47775c4 100644
--- a/packages/react/README.md
+++ b/packages/react/README.md
@@ -1,6 +1,6 @@
# @scanly/react
-Thin React adapter over `@scanly/browser` for Scanly SDK v2.0.1. Decoding, Worker ownership, camera runtime, tracking, and memory management remain outside React.
+Thin React adapter over `@scanly/browser` for Scanly SDK v2.1.0. Decoding, Worker ownership, camera runtime, tracking, and memory management remain outside React.
```bash
npm install @scanly/react
@@ -27,4 +27,4 @@ export function UploadScanner() {
This is the standard public React package for React 18 and 19-compatible peer ranges (`>=18 <20`).
-Version: 2.0.1 · [React usage](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
+Version: 2.1.0 · [React usage](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/sdk/usage.md)
diff --git a/packages/react/package.json b/packages/react/package.json
index c6d7a9a..33cfe72 100644
--- a/packages/react/package.json
+++ b/packages/react/package.json
@@ -1,6 +1,6 @@
{
"name": "@scanly/react",
- "version": "2.0.1",
+ "version": "2.1.0",
"description": "React adapter for the Scanly browser barcode scanning runtime",
"keywords": ["barcode", "qr-code", "scanner", "react", "hook", "scanly"],
"repository": {
@@ -31,7 +31,7 @@
"build": "tsc -p tsconfig.build.json"
},
"dependencies": {
- "@scanly/browser": "2.0.1"
+ "@scanly/browser": "2.1.0"
},
"peerDependencies": {
"react": ">=18 <20"
diff --git a/packages/scenario-schema/README.md b/packages/scenario-schema/README.md
index 9b5e396..fa961df 100644
--- a/packages/scenario-schema/README.md
+++ b/packages/scenario-schema/README.md
@@ -1,6 +1,6 @@
# @scanly/scenario-schema
-Versioned, runtime-validated capture scenarios for Scanly SDK v2.0.1. Schema `2.1` is current; valid `2.0` input is migrated deterministically and mixed old/new fields or unknown versions are rejected.
+Versioned, runtime-validated capture scenarios for Scanly SDK v2.1.0. Schema `2.1` is current; valid `2.0` input is migrated deterministically and mixed old/new fields or unknown versions are rejected.
```bash
npm install @scanly/scenario-schema
@@ -16,4 +16,4 @@ if (!checked.ok) throw new Error(checked.message);
This is an advanced public configuration package. Browser, Node, and Core already declare it as a dependency.
-Version: 2.0.1 · [Scenario documentation](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/scenarios/configuration.md)
+Version: 2.1.0 · [Scenario documentation](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/scenarios/configuration.md)
diff --git a/packages/scenario-schema/package.json b/packages/scenario-schema/package.json
index 80cf152..9d784ef 100644
--- a/packages/scenario-schema/package.json
+++ b/packages/scenario-schema/package.json
@@ -1,6 +1,6 @@
{
"name": "@scanly/scenario-schema",
- "version": "2.0.1",
+ "version": "2.1.0",
"description": "Versioned capture scenario schema and runtime validators for Scanly SDK",
"keywords": ["barcode", "scanner", "schema", "validation", "typescript", "scanly"],
"repository": {
diff --git a/packages/url-safety/README.md b/packages/url-safety/README.md
new file mode 100644
index 0000000..e9cab41
--- /dev/null
+++ b/packages/url-safety/README.md
@@ -0,0 +1,21 @@
+# @scanly/url-safety
+
+Opt-in Link Intelligence for Scanly SDK 2.1.0. Barcode decoding stays local.
+
+The browser-safe root exports local analysis, canonicalization, redaction, deterministic scoring, a bounded SHA-256 cache, `UrlSafetyClient`, and `UrlSafetyController`. Nothing subscribes to scanning or connects to the network by default. The `/server` export is Node-only and explicitly unavailable to browser bundlers.
+
+```ts
+import { UrlSafetyClient } from "@scanly/url-safety";
+const client = new UrlSafetyClient({ endpoint: "/api/url-safety" });
+const result = await client.analyze("https://example.com", { mode: "local-only" });
+```
+
+```ts
+import { createUrlSafetyAnalyzer } from "@scanly/url-safety/server";
+const analyzer = createUrlSafetyAnalyzer();
+const result = await analyzer.analyze("https://example.com", { mode: "remote" });
+```
+
+No verdict guarantees a URL is safe. Scores are heuristic/composite scores, not maliciousness probabilities. LLM is advisory evidence, not an authority. Network modes share the decoded URL and require informed opt-in; credentials belong on the server only.
+
+See [configuration, self-hosting, ScannerSession integration and security limitations](https://github.com/Yangjunjie-Lin/Scanly/blob/main/docs/url-safety.md).
diff --git a/packages/url-safety/dist/async.d.ts b/packages/url-safety/dist/async.d.ts
new file mode 100644
index 0000000..d180e54
--- /dev/null
+++ b/packages/url-safety/dist/async.d.ts
@@ -0,0 +1,6 @@
+export declare function abortError(): Error;
+export declare function throwIfAborted(signal?: AbortSignal): void;
+/** Bounds even a misbehaving custom provider that ignores AbortSignal. */
+export declare function withBudget