@slicedearth/whoisleuth-cli 2.2.0 → 2.3.0

package/packages/cases/case-response-packet.mjs

@@ -1,10 +1,11 @@
 // Pure abuse-evidence packet builder. It creates local review artifacts only:
 // no network requests, mailto links, submissions, or provider side effects.
+import { caseDispositionSupportsDefensiveResponse } from "./case-record-operations.mjs";
 import { buildCaseActionOutcomeSummary, buildCaseResponseLifecycleSummary, CASE_ACTION_EVENT_SOURCE_CLASSES, CASE_ACTION_STATES, CASE_ACTION_TYPES, CASE_ASSERTION_STATES, CASE_CLOSURE_REASONS, CASE_OBSERVED_EFFECT_SOURCE_CLASSES, CASE_OBSERVED_EFFECT_STATES, CASE_PIN_COMPLETENESS, CASE_PROVIDER_OUTCOMES, } from "./case-response-model.mjs";
 import { canonicalArtifactJsonV2, SORTED_JSON_V2 } from "../evidence/artifact-integrity.mjs";
 import { assertBoundedJsonStructure } from "../../lib/bounded-json.mjs";
-import { CASE_RESPONSE_PACKET_SCHEMA, CASE_RESPONSE_PACKET_VERSION, PUBLIC_CASE_RESPONSE_PACKET_VERSION, PUBLISHED_V2_CASE_RESPONSE_PACKET_VERSION, CASE_RESPONSE_REVIEW_INPUTS_SCHEMA, CASE_RESPONSE_REVIEW_INPUTS_VERSION, PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION, MAX_ABUSE_CATEGORY_LENGTH, MAX_ABUSIVE_URLS, MAX_AFFECTED_PARTY_LENGTH, MAX_CASE_ACTION_EVENTS_PER_ACTION, MAX_CASE_ACTION_EVENTS_PER_CASE, MAX_CASE_ACTIONS, MAX_EXACT_URL_LENGTH, MAX_RESPONSE_ACTION_HISTORY, MAX_RESPONSE_ARTEFACT_REFERENCES, MAX_RESPONSE_AUTHORISATION_CLOCK_SKEW_MS, MAX_RESPONSE_CONTACTS, MAX_RESPONSE_CONTRADICTIONS, MAX_RESPONSE_HARM_LENGTH, MAX_RESPONSE_LIMITATION_LENGTH, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_REFERENCE_LENGTH, MAX_RESPONSE_SELECTED_EVIDENCE, MAX_RESPONSE_VALUE_LENGTH, RESPONSE_ROUTE_STALE_AFTER_DAYS, SUPPORTED_CASE_RESPONSE_PACKET_VERSIONS, } from "../contracts/case-portability.mjs";
-export { CASE_RESPONSE_PACKET_SCHEMA, CASE_RESPONSE_PACKET_VERSION, PUBLIC_CASE_RESPONSE_PACKET_VERSION, PUBLISHED_V2_CASE_RESPONSE_PACKET_VERSION, CASE_RESPONSE_REVIEW_INPUTS_SCHEMA, CASE_RESPONSE_REVIEW_INPUTS_VERSION, PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION, MAX_ABUSE_CATEGORY_LENGTH, MAX_ABUSIVE_URLS, MAX_AFFECTED_PARTY_LENGTH, MAX_EXACT_URL_LENGTH, MAX_RESPONSE_ACTION_HISTORY, MAX_RESPONSE_ARTEFACT_REFERENCES, MAX_RESPONSE_AUTHORISATION_CLOCK_SKEW_MS, MAX_RESPONSE_CONTACTS, MAX_RESPONSE_CONTRADICTIONS, MAX_RESPONSE_HARM_LENGTH, MAX_RESPONSE_SELECTED_EVIDENCE, RESPONSE_ROUTE_STALE_AFTER_DAYS, SUPPORTED_CASE_RESPONSE_PACKET_VERSIONS, };
+import { CASE_RESPONSE_PACKET_SCHEMA, CASE_RESPONSE_PACKET_VERSION, LATEST_PUBLIC_CASE_RESPONSE_PACKET_VERSION, PUBLIC_CASE_RESPONSE_PACKET_VERSION, PUBLISHED_V2_CASE_RESPONSE_PACKET_VERSION, CASE_RESPONSE_REVIEW_INPUTS_SCHEMA, CASE_RESPONSE_REVIEW_INPUTS_VERSION, LATEST_PUBLIC_CASE_RESPONSE_REVIEW_INPUTS_VERSION, PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION, MAX_ABUSE_CATEGORY_LENGTH, MAX_ABUSIVE_URLS, MAX_AFFECTED_PARTY_LENGTH, MAX_CASE_ACTION_EVENTS_PER_ACTION, MAX_CASE_ACTION_EVENTS_PER_CASE, MAX_CASE_ACTIONS, MAX_EXACT_URL_LENGTH, MAX_RESPONSE_ACTION_HISTORY, MAX_RESPONSE_ARTEFACT_REFERENCES, MAX_RESPONSE_AUTHORISATION_CLOCK_SKEW_MS, MAX_RESPONSE_CONTACTS, MAX_RESPONSE_CONTRADICTIONS, MAX_RESPONSE_HARM_LENGTH, MAX_RESPONSE_LIMITATION_LENGTH, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_REFERENCE_LENGTH, MAX_RESPONSE_SELECTED_EVIDENCE, MAX_RESPONSE_VALUE_LENGTH, RESPONSE_ROUTE_STALE_AFTER_DAYS, SUPPORTED_CASE_RESPONSE_PACKET_VERSIONS, } from "../contracts/case-portability.mjs";
+export { CASE_RESPONSE_PACKET_SCHEMA, CASE_RESPONSE_PACKET_VERSION, LATEST_PUBLIC_CASE_RESPONSE_PACKET_VERSION, PUBLIC_CASE_RESPONSE_PACKET_VERSION, PUBLISHED_V2_CASE_RESPONSE_PACKET_VERSION, CASE_RESPONSE_REVIEW_INPUTS_SCHEMA, CASE_RESPONSE_REVIEW_INPUTS_VERSION, LATEST_PUBLIC_CASE_RESPONSE_REVIEW_INPUTS_VERSION, PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION, MAX_ABUSE_CATEGORY_LENGTH, MAX_ABUSIVE_URLS, MAX_AFFECTED_PARTY_LENGTH, MAX_EXACT_URL_LENGTH, MAX_RESPONSE_ACTION_HISTORY, MAX_RESPONSE_ARTEFACT_REFERENCES, MAX_RESPONSE_AUTHORISATION_CLOCK_SKEW_MS, MAX_RESPONSE_CONTACTS, MAX_RESPONSE_CONTRADICTIONS, MAX_RESPONSE_HARM_LENGTH, MAX_RESPONSE_SELECTED_EVIDENCE, RESPONSE_ROUTE_STALE_AFTER_DAYS, SUPPORTED_CASE_RESPONSE_PACKET_VERSIONS, };
 export const CASE_RESPONSE_PREFLIGHT_EVIDENCE_SCOPE = Object.freeze({
     version: 1,
     owner: 'case',
@@ -25,12 +26,14 @@ export const RESPONSE_CONTACT_KINDS = [
     'registry',
     'network_hosting',
     'security_txt',
+    'application_platform',
 ];
 export const RESPONSE_PACKET_PROFILE_IDS = [
     'registrar',
     'registry',
     'network_hosting',
     'security_contact',
+    'application_platform',
     'browser_blocklist',
     'internal_soc',
 ];
@@ -111,6 +114,20 @@ export const RESPONSE_PACKET_PROFILES = Object.freeze([
         attachments: ['Reviewed response packet', 'Optional normalised case report'],
         followUpFields: ['Security reference', 'Triage acknowledgement', 'Remediation outcome'],
     },
+    {
+        id: 'application_platform',
+        label: 'Platform report review',
+        audience: 'Application-platform safety, impersonation, commerce, or rights team',
+        subjectPrefix: 'Reviewed platform report',
+        requiredContactKind: 'application_platform',
+        checklist: ['Confirm the exact account or content URL', 'Choose the route matching the evidence and reporter authority', 'Review the provider notice before sharing identity or rights-owner details'],
+        evidenceOrder: ['Incident facts', 'Exact platform URLs', 'Selected observations', 'Rights or authority evidence', 'Action history'],
+        includedEvidence: ['Exact URLs', 'Observation time', 'Selected evidence pins', 'Route provenance and review deadline', 'Relevant rights or authority context'],
+        excludedEvidence: ['Raw upstream payloads', 'Secrets', 'Unselected personal data', 'Unsupported policy or legal conclusions'],
+        redactions: ['Credential-bearing URLs are rejected; review query strings, fragments, tokens, identity documents, and unrelated personal data before sharing'],
+        attachments: ['Reviewed response packet', 'Optional normalised case report'],
+        followUpFields: ['Provider reference', 'Acknowledgement time', 'Policy response', 'Independent observed effect'],
+    },
     {
         id: 'browser_blocklist',
         label: 'Browser or blocklist review',
@@ -142,6 +159,9 @@ export const RESPONSE_PACKET_PROFILES = Object.freeze([
 ]);
 const CONTACT_KINDS = new Set(RESPONSE_CONTACT_KINDS);
 const RESPONSE_PROFILE_IDS = new Set(RESPONSE_PACKET_PROFILE_IDS);
+const PRE_PLATFORM_CONTACT_KINDS = new Set(RESPONSE_CONTACT_KINDS.filter((kind) => kind !== 'application_platform'));
+const PRE_PLATFORM_PROFILE_IDS = new Set(RESPONSE_PACKET_PROFILE_IDS.filter((id) => id !== 'application_platform'));
+const PRE_PLATFORM_ACTION_TYPES = CASE_ACTION_TYPES.filter((type) => type !== 'platform_report');
 const CONTROL_RE = /[\u0000-\u001f\u007f]/u;
 const CONTROL_REPLACE_RE = /[\u0000-\u001f\u007f]+/gu;
 function text(value, maximum) {
@@ -158,10 +178,17 @@ function timestamp(value) {
     const parsed = Date.parse(value);
     return Number.isFinite(parsed) ? new Date(parsed).toISOString() : null;
 }
-function normalizeExactUrl(value) {
-    const candidate = text(value, MAX_EXACT_URL_LENGTH);
+function normalizeExactUrl(value, rejectOverlong) {
+    if (typeof value !== 'string' || CONTROL_RE.test(value))
+        return null;
+    const candidate = value.trim();
     if (!candidate)
         return null;
+    if (candidate.length > MAX_EXACT_URL_LENGTH) {
+        if (rejectOverlong)
+            throw new Error(`Each exact HTTP(S) URL is limited to ${MAX_EXACT_URL_LENGTH} characters; shorten or remove the overlong URL before continuing.`);
+        return null;
+    }
     try {
         const parsed = new URL(candidate);
         if (!['http:', 'https:'].includes(parsed.protocol) || parsed.username || parsed.password)
@@ -172,7 +199,7 @@ function normalizeExactUrl(value) {
         return null;
     }
 }
-function normalizeUrls(value) {
+function normalizeUrls(value, rejectOverlong = false) {
     const source = Array.isArray(value)
         ? value
         : typeof value === 'string'
@@ -180,7 +207,7 @@ function normalizeUrls(value) {
             : [];
     const unique = new Set();
     for (const item of source.slice(0, MAX_ABUSIVE_URLS * 2)) {
-        const normalized = normalizeExactUrl(item);
+        const normalized = normalizeExactUrl(item, rejectOverlong);
         if (normalized)
             unique.add(normalized);
         if (unique.size >= MAX_ABUSIVE_URLS)
@@ -213,14 +240,18 @@ function actionContactKind(type) {
         return 'network_hosting';
     if (type === 'security_contact_report')
         return 'security_txt';
+    if (type === 'platform_report')
+        return 'application_platform';
     return 'manual';
 }
-function routeFreshness(observedAt, generatedAt) {
+function routeFreshness(observedAt, reviewAfter, generatedAt) {
     if (!observedAt)
         return 'unknown';
     const routeAge = Date.parse(generatedAt) - Date.parse(observedAt);
+    const reviewExpired = reviewAfter !== null && Date.parse(generatedAt) >= Date.parse(reviewAfter);
     return routeAge < -MAX_RESPONSE_AUTHORISATION_CLOCK_SKEW_MS
-        || routeAge > RESPONSE_ROUTE_STALE_AFTER_DAYS * 86_400_000
+        || reviewExpired
+        || (reviewAfter === null && routeAge > RESPONSE_ROUTE_STALE_AFTER_DAYS * 86_400_000)
         ? 'stale'
         : 'current';
 }
@@ -282,13 +313,15 @@ function bindPacketRoute(caseRecord, input, generatedAt) {
         };
     }
     const observedAt = timestamp(action.routeObservedAt);
+    const reviewAfter = timestamp(action.routeReviewAfter);
     const recipientRoute = {
         actionId: action.id,
         kind,
         contact: text(action.recipient, 320),
         source: text(action.contactSource, 120) || 'analyst supplied',
         observedAt,
-        freshness: routeFreshness(observedAt, generatedAt),
+        reviewAfter,
+        freshness: routeFreshness(observedAt, reviewAfter, generatedAt),
         limitations: normalizeLimitations(action.contactLimitations),
     };
     const contacts = kind === 'manual' ? [] : [{
@@ -296,6 +329,7 @@ function bindPacketRoute(caseRecord, input, generatedAt) {
             contact: recipientRoute.contact,
             source: recipientRoute.source,
             observedAt,
+            reviewAfter,
             freshness: recipientRoute.freshness,
             limitations: [...recipientRoute.limitations],
         }];
@@ -553,7 +587,7 @@ export function buildCaseResponsePreflight(caseRecord, input, generatedAt = new
     const actionSummary = buildCaseActionOutcomeSummary(caseRecord.actions, normalizedGeneratedAt);
     const retainedPinIds = new Set(caseRecord.evidencePins.map((pin) => pin.id));
     const evidenceLinkedDecisionCount = caseRecord.decisions.filter((decision) => decision.evidencePinIds.some((evidencePinId) => retainedPinIds.has(evidencePinId))).length;
-    const responseDisposition = ['suspicious', 'confirmed_abuse'].includes(caseRecord.disposition);
+    const responseDisposition = caseDispositionSupportsDefensiveResponse(caseRecord.disposition);
     const reviewedActionCount = caseRecord.actions.filter((action) => ['reviewed', 'authorised', 'submitted', 'acknowledged', 'terminal'].includes(action.state)).length;
     const profile = responsePacketProfile(input.profile);
     const checks = [
@@ -607,6 +641,8 @@ export function buildCaseResponsePreflight(caseRecord, input, generatedAt = new
                         : 'The browser or blocklist profile requires a manually reviewed submission destination recorded as a Case action.'
                     : `${profile.label} has no fixed external contact-kind requirement.`,
         },
+        // Packet v9 retains its established machine-token wording for immutable
+        // fixture compatibility; interactive Case surfaces use the canonical label.
         {
             id: 'case_disposition',
             label: 'Case disposition',
@@ -681,6 +717,7 @@ function normalizeActionHistory(caseRecord, input) {
             recipient: text(action.recipient, 320),
             contactSource: text(action.contactSource, 120),
             routeObservedAt: timestamp(action.routeObservedAt),
+            routeReviewAfter: timestamp(action.routeReviewAfter),
             state: text(action.state, 80),
             reference: text(action.reference, 500) || null,
             providerOutcome: text(action.providerOutcome, 80) || null,
@@ -804,7 +841,7 @@ export function buildCaseResponseReviewInputs(caseRecord, input, generatedAt) {
         incident: {
             category,
             affectedParty: text(input.affectedParty, MAX_AFFECTED_PARTY_LENGTH),
-            abusiveUrls: normalizeUrls(input.abusiveUrls),
+            abusiveUrls: normalizeUrls(input.abusiveUrls, true),
             observedHarm: text(input.observedHarm, MAX_RESPONSE_HARM_LENGTH),
             observedAt: timestamp(input.observedAt) || caseRecord.evidenceHistory.at(-1)?.capturedAt || null,
         },
@@ -955,17 +992,20 @@ export function validateCaseResponseReviewInputs(value) {
         || !descriptors.version || !Object.hasOwn(descriptors.version, 'value')) {
         throw new TypeError('Case-response review inputs must not contain accessors.');
     }
-    const current = descriptors.version.value === CASE_RESPONSE_REVIEW_INPUTS_VERSION;
-    const publishedV2 = descriptors.version.value === PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION;
-    if (descriptors.contract.value !== CASE_RESPONSE_REVIEW_INPUTS_SCHEMA || (!current && !publishedV2)) {
+    const version = descriptors.version.value;
+    const current = version === CASE_RESPONSE_REVIEW_INPUTS_VERSION;
+    const hasActionBinding = version === LATEST_PUBLIC_CASE_RESPONSE_REVIEW_INPUTS_VERSION || current;
+    const publishedV2 = version === PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUTS_VERSION;
+    if (descriptors.contract.value !== CASE_RESPONSE_REVIEW_INPUTS_SCHEMA || (!current && !hasActionBinding && !publishedV2)) {
         throw new TypeError('Case-response review inputs contain an unsupported version, shape, or bound.');
     }
-    const source = exactReviewRecord(value, current ? CASE_RESPONSE_REVIEW_INPUT_KEYS : PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUT_KEYS, 'Case-response review inputs');
+    const source = exactReviewRecord(value, hasActionBinding ? CASE_RESPONSE_REVIEW_INPUT_KEYS : PUBLISHED_V2_CASE_RESPONSE_REVIEW_INPUT_KEYS, 'Case-response review inputs');
     const profile = exactReviewRecord(source.profile, [
         'id', 'label', 'audience', 'subject', 'checklist', 'includedEvidence',
         'excludedEvidence', 'redactions',
     ], 'Case-response review profile');
-    if (typeof profile.id !== 'string' || !RESPONSE_PROFILE_IDS.has(profile.id)) {
+    const supportedProfileIds = current ? RESPONSE_PROFILE_IDS : PRE_PLATFORM_PROFILE_IDS;
+    if (typeof profile.id !== 'string' || !supportedProfileIds.has(profile.id)) {
         throw new TypeError('Case-response review profile is unsupported.');
     }
     for (const key of ['label', 'audience', 'subject']) {
@@ -992,9 +1032,10 @@ export function validateCaseResponseReviewInputs(value) {
     reviewText(incident.observedAt, 64, 'Case-response observation time', true);
     for (const candidate of boundedReviewArray(source.contacts, MAX_RESPONSE_CONTACTS, 'Case-response contacts')) {
         const contact = exactReviewRecord(candidate, [
-            'kind', 'contact', 'source', 'observedAt', 'freshness', 'limitations',
+            'kind', 'contact', 'source', 'observedAt', ...(current ? ['reviewAfter'] : []), 'freshness', 'limitations',
         ], 'Case-response contact');
-        if (typeof contact.kind !== 'string' || !CONTACT_KINDS.has(contact.kind)
+        const supportedContactKinds = current ? CONTACT_KINDS : PRE_PLATFORM_CONTACT_KINDS;
+        if (typeof contact.kind !== 'string' || !supportedContactKinds.has(contact.kind)
             || typeof contact.freshness !== 'string'
             || !['current', 'stale', 'unknown'].includes(contact.freshness)) {
             throw new TypeError('Case-response contact contains an unsupported enum.');
@@ -1002,22 +1043,26 @@ export function validateCaseResponseReviewInputs(value) {
         reviewText(contact.contact, 320, 'Case-response contact value');
         reviewText(contact.source, 120, 'Case-response contact source');
         reviewText(contact.observedAt, 64, 'Case-response contact observation time', true);
+        if (current)
+            reviewText(contact.reviewAfter, 64, 'Case-response contact review deadline', true);
         reviewStrings(contact.limitations, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_LIMITATION_LENGTH, 'Case-response contact limitations');
     }
-    if (current && source.recipientRoute !== null) {
+    if (hasActionBinding && source.recipientRoute !== null) {
         const route = exactReviewRecord(source.recipientRoute, [
-            'actionId', 'kind', 'contact', 'source', 'observedAt', 'freshness', 'limitations',
+            'actionId', 'kind', 'contact', 'source', 'observedAt', ...(current ? ['reviewAfter'] : []), 'freshness', 'limitations',
         ], 'Case-response recipient route');
         reviewText(route.actionId, 64, 'Case-response recipient action id');
-        reviewEnum(route.kind, [...RESPONSE_CONTACT_KINDS, 'manual'], 'Case-response recipient kind');
+        reviewEnum(route.kind, [...(current ? RESPONSE_CONTACT_KINDS : [...PRE_PLATFORM_CONTACT_KINDS]), 'manual'], 'Case-response recipient kind');
         reviewText(route.contact, 320, 'Case-response recipient value');
         reviewText(route.source, 120, 'Case-response recipient source');
         reviewText(route.observedAt, 64, 'Case-response recipient observation time', true);
+        if (current)
+            reviewText(route.reviewAfter, 64, 'Case-response recipient review deadline', true);
         reviewEnum(route.freshness, ['current', 'stale', 'unknown'], 'Case-response recipient freshness');
         reviewStrings(route.limitations, MAX_RESPONSE_LIMITATIONS, MAX_RESPONSE_LIMITATION_LENGTH, 'Case-response recipient limitations');
     }
     let currentLineageActionIds = null;
-    if (current) {
+    if (hasActionBinding) {
         const actionBinding = exactReviewRecord(source.actionBinding, [
             'state', 'selectedActionId', 'lineageActionIds', 'limitations',
         ], 'Case-response action binding');
@@ -1059,7 +1104,7 @@ export function validateCaseResponseReviewInputs(value) {
     const readiness = exactReviewRecord(source.readiness, [
         'profileId', 'rows', 'counts', 'limitations',
     ], 'Case-response readiness');
-    if (typeof readiness.profileId !== 'string' || !RESPONSE_PROFILE_IDS.has(readiness.profileId)) {
+    if (typeof readiness.profileId !== 'string' || !supportedProfileIds.has(readiness.profileId)) {
         throw new TypeError('Case-response readiness profile is unsupported.');
     }
     const readinessRows = boundedReviewArray(readiness.rows, RESPONSE_READINESS_ROW_IDS.length, 'Case-response readiness rows');
@@ -1111,7 +1156,8 @@ export function validateCaseResponseReviewInputs(value) {
     for (const candidate of boundedReviewArray(source.escalationHistory, MAX_RESPONSE_ACTION_HISTORY, 'Case-response escalation history')) {
         const action = exactReviewRecord(candidate, [
             'actionId', 'type', 'recipient', 'contactSource', 'state', 'reference',
-            ...(current ? ['routeObservedAt'] : []),
+            ...(hasActionBinding ? ['routeObservedAt'] : []),
+            ...(current ? ['routeReviewAfter'] : []),
             'providerOutcome', 'outcomeDetail', 'originActionId', 'historyOmitted',
             'historyLimitations', 'transitions', 'createdAt', 'updatedAt',
         ], 'Case-response escalation action');
@@ -1122,9 +1168,11 @@ export function validateCaseResponseReviewInputs(value) {
             throw new TypeError('Case-response escalation action identities must be unique.');
         }
         escalationActionIds.push(action.actionId);
-        if (current)
+        if (hasActionBinding)
             reviewText(action.routeObservedAt, 64, 'Case-response action route observation time', true);
-        reviewEnum(action.type, CASE_ACTION_TYPES, 'Case-response action type');
+        if (current)
+            reviewText(action.routeReviewAfter, 64, 'Case-response action route review deadline', true);
+        reviewEnum(action.type, current ? CASE_ACTION_TYPES : PRE_PLATFORM_ACTION_TYPES, 'Case-response action type');
         reviewEnum(action.state, CASE_ACTION_STATES, 'Case-response action state');
         for (const key of ['reference', 'outcomeDetail', 'originActionId']) {
             reviewText(action[key], MAX_RESPONSE_VALUE_LENGTH, `Case-response action ${key}`, true);
@@ -1240,6 +1288,8 @@ function contactLabel(value) {
         return 'Observed endpoint network registration';
     if (value === 'security_txt')
         return 'security.txt';
+    if (value === 'application_platform')
+        return 'Application platform';
     if (value === 'manual')
         return 'Manual submission';
     return value.charAt(0).toUpperCase() + value.slice(1);
@@ -1247,7 +1297,7 @@ function contactLabel(value) {
 export async function buildCaseResponsePacket(caseRecord, input, generatedAt = new Date().toISOString()) {
     const category = text(input.category, MAX_ABUSE_CATEGORY_LENGTH);
     const affectedParty = text(input.affectedParty, MAX_AFFECTED_PARTY_LENGTH);
-    const abusiveUrls = normalizeUrls(input.abusiveUrls);
+    const abusiveUrls = normalizeUrls(input.abusiveUrls, true);
     const observedHarm = text(input.observedHarm, MAX_RESPONSE_HARM_LENGTH);
     const latestEvidence = caseRecord.evidenceHistory.at(-1) ?? null;
     const observedAt = timestamp(input.observedAt) || latestEvidence?.capturedAt || null;
@@ -1374,6 +1424,7 @@ export async function buildCaseResponsePacket(caseRecord, input, generatedAt = n
                 `- Contact: ${escapeMarkdown(recipientRoute.contact)}`,
                 `- Source: ${escapeMarkdown(recipientRoute.source)}`,
                 `- Route observed: ${recipientRoute.observedAt ?? 'Not provided'} (${recipientRoute.freshness})`,
+                `- Route review after: ${recipientRoute.reviewAfter ?? 'Not provided'}`,
                 `- Limitations: ${recipientRoute.limitations.length ? recipientRoute.limitations.map(escapeMarkdown).join('; ') : 'None recorded'}`,
                 '',
             ]

package/packages/cases/case-storage-model.mjs

@@ -1,8 +1,12 @@
 import { CASE_SCHEMA_VERSION, MAX_CASE_STORE_BYTES, } from "./case-record-model.mjs";
 import { normalizeCaseStore } from "./case-migration-model.mjs";
+import { projectCaseForDurableWrite } from "./case-record-projection.mjs";
 /** The exact versioned string persisted by the browser storage adapter. */
 export function serializeCaseStore(cases) {
-    return JSON.stringify({ version: CASE_SCHEMA_VERSION, cases });
+    return JSON.stringify({
+        version: CASE_SCHEMA_VERSION,
+        cases: cases.map(projectCaseForDurableWrite),
+    });
 }
 function byteLength(text) {
     if (typeof TextEncoder !== 'undefined') {
@@ -88,6 +92,6 @@ export function buildCaseExport(cases, nowIso) {
     return {
         version: CASE_SCHEMA_VERSION,
         exportedAt: nowIso || new Date().toISOString(),
-        cases: normalizeCaseStore(cases).cases,
+        cases: normalizeCaseStore(cases).cases.map(projectCaseForDurableWrite),
     };
 }

package/packages/comparison/comparison-ledger-bulk.mjs

@@ -1,14 +1,8 @@
-import { MAX_BULK_SESSIONS, compareBulkSessions, normalizeBulkSession, } from "../workspace/bulk-session-model.mjs";
+import { MAX_BULK_SESSIONS, areBulkRiskScoresComparable, compareBulkSessions, normalizeBulkSession, } from "../workspace/bulk-session-model.mjs";
 import { MAX_COMPARISON_LEDGER_BULK_PAIRS, boundedComparisonLedgerId, comparisonLedgerCollector, comparisonLedgerInputArray, comparisonLedgerRecord, comparisonLedgerValuePresent, comparisonLedgerValueState, makeComparisonLedgerCandidate, stableComparisonLedgerId, } from "./comparison-ledger-contract.mjs";
-function bulkCompleteness(session) {
-    return session.state === 'complete' ? 'complete' : session.state === 'partial' ? 'partial' : 'unavailable';
-}
-function sourceMap(result) {
-    return new Map(result.sourceCoverage.map((item) => [item.source, item.state]));
-}
-function namedBulkSourceState(result, source) {
-    return result.sourceCoverage.find((item) => item.source === source)?.state ?? 'not_reported';
-}
+function bulkCompleteness(session) { return session.state === 'complete' ? 'complete' : session.state === 'partial' ? 'partial' : 'unavailable'; }
+function sourceMap(result) { return new Map(result.sourceCoverage.map((item) => [item.source, item.state])); }
+function namedBulkSourceState(result, source) { return result.sourceCoverage.find((item) => item.source === source)?.state ?? 'not_reported'; }
 function bulkFamilyState(result, family) {
     if (family === 'model')
         return 'derived';
@@ -47,6 +41,9 @@ function bulkFieldDecision(field, earlier, later, before, after) {
     if (field.kind === 'registrar')
         return { state: 'not_compared', completeness: 'not_reported', earlierState, laterState, limitation: 'The exact retained registrar texts are shown, but saved Bulk rows do not retain field-level registrar provenance; these values are not compared as a publication or target change.' };
     if (field.kind === 'model') {
+        if (field.field === 'Risk score' && !areBulkRiskScoresComparable(earlier, later)) {
+            return { state: 'not_compared', completeness: 'partial', earlierState, laterState, limitation: 'Risk scores require the same ready Brand Profile provenance, scan depth, and versioned Risk model before comparison.' };
+        }
         const comparable = comparisonLedgerValuePresent(before) && comparisonLedgerValuePresent(after);
         return { state: comparable ? 'different' : 'not_compared', completeness: comparable ? 'complete' : 'partial', earlierState, laterState, limitation: comparable ? null : 'A score absent from either retained row is not represented as an observed score change.' };
     }
@@ -69,6 +66,8 @@ function bulkPairCompleteness(earlier, later) {
         const right = after.get(domain);
         if (!right || left.scanDepth !== right.scanDepth)
             return 'partial';
+        if (!areBulkRiskScoresComparable(left, right))
+            return 'partial';
         if (left.riskModelVersion === null || right.riskModelVersion === null || left.riskModelVersion !== right.riskModelVersion
             || left.opportunityModelVersion === null || right.opportunityModelVersion === null || left.opportunityModelVersion !== right.opportunityModelVersion)
             return 'partial';

package/packages/comparison/page-similarity.mjs

@@ -173,7 +173,9 @@ export function comparePageBaselines(rawReference, rawObserved) {
             complete: observed.complete,
             truncated: observed.truncated,
         },
-        partial: reference.truncated || observed.truncated || components.some((item) => item.partial),
+        partial: !reference.complete || !observed.complete
+            || reference.truncated || observed.truncated
+            || components.some((item) => item.partial),
         components,
         counts,
     };