@slicedearth/whoisleuth-cli 1.39.1 → 1.45.0

package/frontend/src/lib/analysis/brand-profile-model.js

@@ -5,7 +5,7 @@ import { normalizeDomain } from "./case-model.js";
 import { normalizePageBaseline } from "./page-baseline.js";
 import { isInformativeFaviconHash } from "./utils.js";
 export const BRAND_PROFILE_SCHEMA = 'whoisleuth.brand-profiles';
-export const BRAND_PROFILE_SCHEMA_VERSION = 5;
+export const BRAND_PROFILE_SCHEMA_VERSION = 6;
 export const MAX_PROFILES = 100;
 export const MAX_PROFILE_VALUES = 200;
 export const MAX_PROFILE_VALUE_INPUTS = MAX_PROFILE_VALUES * 4;
@@ -22,6 +22,8 @@ export const MAX_PROTECTION_ATTESTATIONS = 6;
 export const MAX_DESIRED_POSTURE_BASELINES = 20;
 export const MAX_DESIRED_POSTURE_RECORDS = 32;
 export const MAX_DESIRED_POSTURE_SUPPRESSIONS = 12;
+export const MAX_DESIRED_POSTURE_OBSERVATIONS = 12;
+export const MAX_DESIRED_POSTURE_CHANGE_WINDOWS = 8;
 const SAFE_ID_RE = /^[A-Za-z0-9_-]{1,128}$/;
 const SHA256_RE = /^[a-f0-9]{64}$/i;
 const CONTROL_RE = /[\x00-\x1f\x7f]/;
@@ -65,7 +67,7 @@ function boundedText(value, maximum = MAX_PROFILE_TEXT_LENGTH) {
         return '';
     return value.slice(0, maximum * 4).replace(/\s+/g, ' ').trim().slice(0, maximum).trim();
 }
-function safeId(value) {
+export function normalizeBrandProfileId(value) {
     return typeof value === 'string' && SAFE_ID_RE.test(value) ? value : null;
 }
 function timestamp(value, fallback) {
@@ -203,6 +205,35 @@ function normalizeDesiredPostureObservation(value) {
     }
     return checks.length ? { observedAt, checks } : null;
 }
+function normalizeDesiredPostureObservationHistory(value, previous) {
+    const candidates = Array.isArray(value) ? value : previous ? [previous] : [];
+    const byTime = new Map();
+    for (const item of candidates.slice(0, MAX_DESIRED_POSTURE_OBSERVATIONS * 4)) {
+        const normalized = normalizeDesiredPostureObservation(item);
+        if (normalized)
+            byTime.set(normalized.observedAt, normalized);
+    }
+    return [...byTime.values()]
+        .sort((left, right) => Date.parse(left.observedAt) - Date.parse(right.observedAt))
+        .slice(-MAX_DESIRED_POSTURE_OBSERVATIONS);
+}
+function normalizeDesiredPostureChangeWindows(value) {
+    if (!Array.isArray(value))
+        return [];
+    const output = [];
+    for (const item of value.slice(0, MAX_DESIRED_POSTURE_CHANGE_WINDOWS * 4)) {
+        const candidate = record(item);
+        const startsAt = timestamp(candidate.startsAt, null);
+        const endsAt = timestamp(candidate.endsAt, null);
+        const summary = boundedText(candidate.summary, 300);
+        if (!startsAt || !endsAt || Date.parse(endsAt) <= Date.parse(startsAt) || !summary)
+            continue;
+        output.push({ startsAt, endsAt, summary });
+        if (output.length >= MAX_DESIRED_POSTURE_CHANGE_WINDOWS)
+            break;
+    }
+    return output.sort((left, right) => Date.parse(left.startsAt) - Date.parse(right.startsAt));
+}
 function normalizeTlsSanPatterns(value) {
     if (!Array.isArray(value))
         return [];
@@ -250,6 +281,8 @@ export function normalizeDesiredPostureBaselines(value, officialDomains, fallbac
                 break;
         }
         seen.add(domain);
+        const previousObservation = normalizeDesiredPostureObservation(candidate.previousObservation);
+        const observationHistory = normalizeDesiredPostureObservationHistory(candidate.observationHistory, previousObservation);
         output.push({
             version: 1,
             domain,
@@ -266,9 +299,18 @@ export function normalizeDesiredPostureBaselines(value, officialDomains, fallbac
                 ? candidate.registrarLock
                 : 'unconfigured',
             renewalReviewAt: timestamp(candidate.renewalReviewAt, null),
+            zoneIntent: ['active_service', 'defensive_registration', 'no_service', 'parked', 'redirect_only'].includes(String(candidate.zoneIntent))
+                ? candidate.zoneIntent
+                : 'unconfigured',
+            lifecycle: ['active', 'change_planned', 'retiring', 'retired'].includes(String(candidate.lifecycle))
+                ? candidate.lifecycle
+                : 'active',
+            recoveryDependency: boundedText(candidate.recoveryDependency, 200),
+            approvedChangeWindows: normalizeDesiredPostureChangeWindows(candidate.approvedChangeWindows),
             suppressions,
             note: boundedText(candidate.note, MAX_PROFILE_TEXT_LENGTH),
-            previousObservation: normalizeDesiredPostureObservation(candidate.previousObservation),
+            previousObservation: observationHistory.at(-1) ?? previousObservation,
+            observationHistory,
             updatedAt: timestamp(candidate.updatedAt, fallback),
         });
         if (output.length >= MAX_DESIRED_POSTURE_BASELINES)
@@ -295,7 +337,9 @@ export function normalizeBrandProfile(raw, options = {}) {
     const pageBaseline = candidateBaseline && officialDomains.includes(candidateBaseline.domain)
         ? candidateBaseline
         : null;
-    const profileId = safeId(existing?.id) || safeId(value.id) || (typeof options.makeId === 'function' ? safeId(options.makeId()) : null);
+    const profileId = normalizeBrandProfileId(existing?.id)
+        || normalizeBrandProfileId(value.id)
+        || (typeof options.makeId === 'function' ? normalizeBrandProfileId(options.makeId()) : null);
     const name = boundedText(value.name, MAX_PROFILE_NAME_LENGTH);
     if (!profileId || !name)
         return null;
@@ -376,8 +420,8 @@ export function mergeBrandProfiles(localRaw, importedRaw, options = {}) {
     if (importedVersion !== null && importedVersion > BRAND_PROFILE_SCHEMA_VERSION) {
         throw new Error(`This Brand Profile file uses newer schema ${importedVersion}. Update the app before importing it.`);
     }
-    if (![2, 3, 4, BRAND_PROFILE_SCHEMA_VERSION].includes(importedVersion ?? 0)) {
-        throw new Error(`Expected a WHOISleuth Brand Profile export using schema 2, 3, 4, or ${BRAND_PROFILE_SCHEMA_VERSION}.`);
+    if (![2, 3, 4, 5, BRAND_PROFILE_SCHEMA_VERSION].includes(importedVersion ?? 0)) {
+        throw new Error(`Expected a WHOISleuth Brand Profile export using schema 2, 3, 4, 5, or ${BRAND_PROFILE_SCHEMA_VERSION}.`);
     }
     const local = normalizeBrandProfileStore(localRaw).profiles;
     const byName = new Map(local.map((profile) => [profile.name.toLowerCase(), profile]));

package/frontend/src/lib/analysis/case-evidence-model.js

@@ -2,7 +2,7 @@
 // record normalization, and analyst updates.
 import { normalizeHttpSummary } from "./http-summary.js";
 import { normalizeOpportunityModelVersion, normalizeRiskModelVersion } from "./scoring.js";
-import { CASE_DISPOSITIONS, CASE_IMPORT_VERSIONS, CASE_SCHEMA_VERSION, CASE_SOURCES, CASE_STATUSES, DEFAULT_DISPOSITION, DEFAULT_SOURCE, DEFAULT_STATUS, EVIDENCE_SOURCES, MAX_CASES, MAX_CASE_IMPORT_BYTES, MAX_CASE_STORE_BYTES, MAX_DOMAIN_LENGTH, MAX_EVIDENCE_CHANGES, MAX_EVIDENCE_DETAIL_LENGTH, MAX_EVIDENCE_FACTORS, MAX_EVIDENCE_MUTATIONS, MAX_EVIDENCE_NAMESERVERS, MAX_EVIDENCE_SNAPSHOTS_PER_CASE, MAX_EVIDENCE_STRING_LENGTH, MAX_EVIDENCE_TITLE_LENGTH, MAX_NOTES_PER_CASE, MAX_NOTE_LENGTH, MAX_TAGS_PER_CASE, MAX_TAG_LENGTH, } from "./case-record-contracts.js";
+import { MAX_EVIDENCE_CHANGES, MAX_EVIDENCE_DETAIL_LENGTH, MAX_EVIDENCE_FACTORS, MAX_EVIDENCE_MUTATIONS, MAX_EVIDENCE_NAMESERVERS, MAX_EVIDENCE_SNAPSHOTS_PER_CASE, MAX_EVIDENCE_STRING_LENGTH, MAX_EVIDENCE_TITLE_LENGTH, } from "./case-record-contracts.js";
 import { CONCLUSIVE_AVAILABILITY, DEFAULT_EVIDENCE_SOURCE, EVIDENCE_SOURCE_RANK, EVIDENCE_SOURCE_SET, REGISTERED_LIKE, hashString, isoOrNull, objectRecord, safeId, } from "./case-record-core.js";
 function evidenceString(value, max = MAX_EVIDENCE_STRING_LENGTH) {
     if (value == null)

package/frontend/src/lib/analysis/case-record-core.js

@@ -1,6 +1,6 @@
 // Pure, framework-neutral analyst-case records, evidence histories, bounded
 // record normalization, and analyst updates.
-import { CASE_DISPOSITIONS, CASE_REVIEW_REASONS, CASE_IMPORT_VERSIONS, CASE_SCHEMA_VERSION, CASE_SOURCES, CASE_STATUSES, DEFAULT_DISPOSITION, DEFAULT_SOURCE, DEFAULT_STATUS, EVIDENCE_SOURCES, MAX_CASES, MAX_CASE_IMPORT_BYTES, MAX_CASE_STORE_BYTES, MAX_DOMAIN_LENGTH, MAX_EVIDENCE_CHANGES, MAX_EVIDENCE_DETAIL_LENGTH, MAX_EVIDENCE_FACTORS, MAX_EVIDENCE_MUTATIONS, MAX_EVIDENCE_NAMESERVERS, MAX_EVIDENCE_SNAPSHOTS_PER_CASE, MAX_EVIDENCE_STRING_LENGTH, MAX_EVIDENCE_TITLE_LENGTH, MAX_NOTES_PER_CASE, MAX_NOTE_LENGTH, MAX_TAGS_PER_CASE, MAX_TAG_LENGTH, } from "./case-record-contracts.js";
+import { CASE_DISPOSITIONS, CASE_REVIEW_REASONS, CASE_SOURCES, CASE_STATUSES, DEFAULT_DISPOSITION, DEFAULT_SOURCE, DEFAULT_STATUS, EVIDENCE_SOURCES, MAX_DOMAIN_LENGTH, MAX_NOTES_PER_CASE, MAX_NOTE_LENGTH, MAX_TAGS_PER_CASE, MAX_TAG_LENGTH, } from "./case-record-contracts.js";
 // Forward-version policy (two distinct guarantees):
 //   - A locally-stored envelope that declares a version greater than this is
 //     still read best-effort on load (known fields kept, unknown dropped), but

package/frontend/src/lib/analysis/case-record-operations.js

@@ -1,7 +1,7 @@
 // Pure, framework-neutral analyst-case records, evidence histories, bounded
 // record normalization, and analyst updates.
 import { appendCaseAction, appendCaseAssertion, appendCaseDecision, appendCaseEvidencePin, appendCaseEvidencePins, appendCaseManualTrailEvent, appendCaseSighting, normalizeCaseActions, normalizeCaseAssertions, normalizeCaseDecisions, normalizeCaseEvidencePins, normalizeCaseManualTrail, normalizeCaseSightings, updateCaseAction, updateCaseAssertion, } from "./case-response-model.js";
-import { CASE_DISPOSITIONS, CASE_IMPORT_VERSIONS, CASE_SCHEMA_VERSION, CASE_SOURCES, CASE_STATUSES, DEFAULT_DISPOSITION, DEFAULT_SOURCE, DEFAULT_STATUS, EVIDENCE_SOURCES, MAX_CASES, MAX_CASE_IMPORT_BYTES, MAX_CASE_STORE_BYTES, MAX_DOMAIN_LENGTH, MAX_EVIDENCE_CHANGES, MAX_EVIDENCE_DETAIL_LENGTH, MAX_EVIDENCE_FACTORS, MAX_EVIDENCE_MUTATIONS, MAX_EVIDENCE_NAMESERVERS, MAX_EVIDENCE_SNAPSHOTS_PER_CASE, MAX_EVIDENCE_STRING_LENGTH, MAX_EVIDENCE_TITLE_LENGTH, MAX_NOTES_PER_CASE, MAX_NOTE_LENGTH, MAX_TAGS_PER_CASE, MAX_TAG_LENGTH, } from "./case-record-contracts.js";
+import { MAX_CASES, MAX_NOTES_PER_CASE, } from "./case-record-contracts.js";
 import { DEFAULT_EVIDENCE_SOURCE, EVIDENCE_SOURCE_SET, deterministicId, isoOrNow, makeId, normalizeDisposition, normalizeDomain, normalizeNoteBody, normalizeReviewReasonCode, normalizeNotes, normalizeSource, normalizeStatus, normalizeTags, objectRecord, safeId, } from "./case-record-core.js";
 import { normalizeEvidenceHistory, } from "./case-evidence-model.js";
 // ---------------------------------------------------------------------------