@slicedearth/whoisleuth-cli 1.32.0 → 1.32.2

package/DISCLOSURE

@@ -0,0 +1,18 @@
+WHOISleuth is a defensive domain investigation and brand-protection tool. Its
+command-line package can collect bounded WHOIS, RDAP, DNS, HTTP, TLS,
+certificate-transparency, website, and related infrastructure evidence. It can
+also generate and review lookalike-domain candidates, compare saved evidence,
+and prepare analyst-controlled reports. These security-relevant capabilities
+can have both legitimate and potentially harmful uses.
+
+WHOISleuth is intended for authorised defensive investigation, abuse response,
+threat research, domain acquisition due diligence, asset review, and education.
+Network collection is initiated explicitly by the operator, uses bounded
+requests, and keeps source provenance and incomplete results visible. The tool
+does not exploit targets, bypass access controls, submit credentials, execute
+remote page scripts, or automate enforcement actions.
+
+Operators are responsible for using WHOISleuth only on systems and data they
+are authorised to examine and in accordance with applicable laws, provider
+terms, and organisational policies. Observations and heuristic signals are
+investigative leads, not proof of ownership, intent, safety, or maliciousness.

package/frontend/src/lib/analysis/investigation-guide.js

@@ -245,6 +245,17 @@ export function investigationGuideHref(stageId, domain, recipeId = 'new_domain_t
         return `/brands?new=1&domain=${encodeURIComponent(normalized)}#official-domains`;
     return stageDefinition.path;
 }
+export function investigationGuideApprovedHref(guide, stageId) {
+    const stageDefinition = investigationGuideStageForGuide(guide, stageId);
+    if (!stageDefinition)
+        return '/dashboard';
+    if (stageDefinition.workspace === 'bulk'
+        && guide.recipeId === 'brand_sweep'
+        && guide.reviewDomains.length > 0) {
+        return '/bulk?source=discover#domains';
+    }
+    return investigationGuideHref(stageDefinition.id, guide.domain, guide.recipeId, guide.focusDomain);
+}
 function createStageProgress(stageDefinition, now) {
     return { id: stageDefinition.id, outcome: 'pending', approvedAt: null, openedAt: null, reviewNote: null, updatedAt: now };
 }

package/package.json

@@ -2,6 +2,9 @@
   "name": "@slicedearth/whoisleuth-cli",
   "type": "module",
   "license": "AGPL-3.0-only",
+  "contentPolicy": {
+    "class": "dual-use"
+  },
   "description": "Local-first WHOIS, RDAP, DNS, TLS, certificate transparency, and domain investigation CLI.",
   "keywords": [
     "whois",
@@ -29,7 +32,7 @@
   "bugs": {
     "url": "https://github.com/slicedearth/whoisleuth/issues"
   },
-  "version": "1.32.0",
+  "version": "1.32.2",
   "dependencies": {
     "parse5": "^8.0.1",
     "tldts": "^7.4.9",
@@ -41,6 +44,7 @@
     "lib/**/*.mjs",
     "frontend/src/lib/analysis/**/*.js",
     "docs/cli.md",
+    "DISCLOSURE",
     "LICENSE",
     "LICENSES/*.txt",
     "NOTICE",