@slicedearth/whoisleuth-cli 2.3.0 → 2.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (264) hide show
  1. package/NOTICE +6 -0
  2. package/README.md +19 -15
  3. package/bin/whoisleuth.mjs +8 -1
  4. package/cli/archive-content-digest.mjs +14 -0
  5. package/cli/archive-inspect.mjs +20 -53
  6. package/cli/arguments.mjs +68 -6
  7. package/cli/artifact-validation/case-response.mjs +47 -41
  8. package/cli/artifact-validation/investigation-capsule.mjs +52 -31
  9. package/cli/artifact-validation/lookup-evidence.mjs +12 -6
  10. package/cli/artifact-validation/signed-review.mjs +83 -61
  11. package/cli/artifact-validation/structure-primitives.mjs +1 -105
  12. package/cli/artifact-verify.mjs +90 -24
  13. package/cli/assurance-command-runner.mjs +39 -4
  14. package/cli/bagit-folder.mjs +57 -0
  15. package/cli/bagit-review.mjs +23 -0
  16. package/cli/bounded-json.mjs +1 -1
  17. package/cli/bulk-command-runner.mjs +2 -0
  18. package/cli/bulk-output.mjs +29 -3
  19. package/cli/case-command.mjs +195 -0
  20. package/cli/case-pack.mjs +39 -31
  21. package/cli/command-argument-grammar.mjs +4 -0
  22. package/cli/command-reference.mjs +145 -75
  23. package/cli/completion.mjs +298 -79
  24. package/cli/config-profile.mjs +7 -5
  25. package/cli/ct-event-intake.mjs +12 -12
  26. package/cli/discover.mjs +4 -3
  27. package/cli/discovery-observation-snapshot.mjs +44 -16
  28. package/cli/discovery-scan-command-runner.mjs +2 -0
  29. package/cli/discovery-scan.mjs +7 -4
  30. package/cli/discovery-workflow.mjs +1 -1
  31. package/cli/domain-control-monitor.mjs +50 -20
  32. package/cli/domain-control-observations.mjs +149 -102
  33. package/cli/errors.mjs +33 -1
  34. package/cli/evidence-command-runner.mjs +16 -5
  35. package/cli/evidence-signing.mjs +2 -2
  36. package/cli/external-observation-mapping.mjs +7 -8
  37. package/cli/formatters/terminal-lookup.mjs +18 -46
  38. package/cli/formatters/terminal-shared.mjs +5 -3
  39. package/cli/formatters/terminal-technology.mjs +114 -0
  40. package/cli/inline-command-families.mjs +1 -0
  41. package/cli/interactive-launcher.mjs +2 -160
  42. package/cli/interchange-report.mjs +4 -8
  43. package/cli/investigation-artifacts.mjs +176 -0
  44. package/cli/investigation-checkpoint.mjs +10 -0
  45. package/cli/investigation-folder.mjs +114 -0
  46. package/cli/investigation-manifest.mjs +1 -112
  47. package/cli/investigation-package-review.mjs +103 -0
  48. package/cli/investigation-plan.mjs +32 -19
  49. package/cli/investigation-run.mjs +188 -33
  50. package/cli/local-document-checkpoint.mjs +170 -0
  51. package/cli/lookup-browser.mjs +5 -12
  52. package/cli/lookup-command-runner.mjs +17 -6
  53. package/cli/lookup-diff.mjs +37 -3
  54. package/cli/lookup-plan.mjs +11 -5
  55. package/cli/lookup-reconcile.mjs +10 -8
  56. package/cli/mail-review.mjs +66 -14
  57. package/cli/manual.mjs +1 -0
  58. package/cli/network-command-runner.mjs +2 -0
  59. package/cli/output-file.mjs +31 -5
  60. package/cli/registry-doctor.mjs +3 -1
  61. package/cli/registry-support.mjs +1 -1
  62. package/cli/retained-artifact-diff.mjs +2 -2
  63. package/cli/review-command-runner.mjs +45 -0
  64. package/cli/runner.mjs +55 -6
  65. package/cli/sharing-review.mjs +21 -34
  66. package/cli/signer-trust.mjs +104 -0
  67. package/cli/source-reliability.mjs +74 -83
  68. package/cli/terminal-input.mjs +168 -0
  69. package/cli/workflow-command-runner.mjs +68 -13
  70. package/docs/cli-reference.md +76 -30
  71. package/docs/cli.md +289 -25
  72. package/lib/abort.mjs +4 -1
  73. package/lib/availability.mjs +161 -112
  74. package/lib/bounded-file.mjs +3 -1
  75. package/lib/bounded-html-document.mjs +125 -0
  76. package/lib/bounded-json.mjs +43 -3
  77. package/lib/browser-library-profile.mjs +42 -51
  78. package/lib/browser-library-worker.mjs +112 -0
  79. package/lib/client-behavior-profile.mjs +3 -3
  80. package/lib/ct-search.mjs +11 -4
  81. package/lib/dns-delegation-health.mjs +24 -14
  82. package/lib/dns-inheritance-review.mjs +217 -0
  83. package/lib/dns-intelligence.mjs +36 -23
  84. package/lib/dns-mx.mjs +1 -1
  85. package/lib/dnssec-evidence-validation.mjs +11 -3
  86. package/lib/domain-change-packet.mjs +7 -2
  87. package/lib/domain-change-review.mjs +14 -8
  88. package/lib/domain-control-flight-recorder.mjs +219 -118
  89. package/lib/domain-control-manifest.mjs +117 -57
  90. package/lib/domain-posture-analysis.mjs +20 -7
  91. package/lib/domain-posture-parsers.mjs +88 -6
  92. package/lib/domain-posture.mjs +113 -26
  93. package/lib/evidence-export-privacy.mjs +561 -0
  94. package/lib/evidence-export.mjs +11 -592
  95. package/lib/evidence-report.mjs +3 -1
  96. package/lib/favicon.mjs +117 -41
  97. package/lib/generated/cisa-kev-catalog.mjs +12 -4
  98. package/lib/generated/registrar-standing-catalogue.mjs +7 -7
  99. package/lib/generated/retire-browser-catalog.mjs +2335 -940
  100. package/lib/hostname.mjs +2 -38
  101. package/lib/html-signals.mjs +82 -85
  102. package/lib/http-evidence-bounds.mjs +2 -1
  103. package/lib/http-intelligence.mjs +39 -26
  104. package/lib/lookup-cache.mjs +34 -11
  105. package/lib/lookup-child-profile-contract.mjs +24 -15
  106. package/lib/lookup-diagnostics.mjs +24 -1
  107. package/lib/lookup-progress.mjs +30 -13
  108. package/lib/lookup-response-contract.mjs +1048 -0
  109. package/lib/lookup-response.mjs +7 -10
  110. package/lib/lookup-source-progress.mjs +17 -14
  111. package/lib/lookup.mjs +48 -27
  112. package/lib/observed-network-context.mjs +43 -27
  113. package/lib/outbound-request-bounds.mjs +4 -1
  114. package/lib/page-fingerprints.mjs +69 -133
  115. package/lib/page-role-profile.mjs +12 -8
  116. package/lib/perceptual-hash.mjs +43 -14
  117. package/lib/rdap-bootstrap.mjs +72 -22
  118. package/lib/rdap-client.mjs +15 -7
  119. package/lib/rdap-normalization.mjs +33 -18
  120. package/lib/rdap-search-workbench.mjs +1 -1
  121. package/lib/rdap-transport.mjs +47 -20
  122. package/lib/rdap-types.mjs +2 -1
  123. package/lib/rdap.mjs +18 -3
  124. package/lib/registrable-domain.mjs +21 -1
  125. package/lib/registrar-standing-contract.mjs +1 -0
  126. package/lib/registry-capabilities.mjs +5 -1
  127. package/lib/registry-capability-catalogue.mjs +2 -1
  128. package/lib/registry-dates.mjs +2 -190
  129. package/lib/registry-insights.mjs +56 -18
  130. package/lib/response-policy.mjs +86 -48
  131. package/lib/risk-calibration-summary.mjs +17 -3
  132. package/lib/rpki-evidence.mjs +8 -5
  133. package/lib/safe-fetch.mjs +54 -47
  134. package/lib/security-txt.mjs +10 -7
  135. package/lib/service-binding-dns.mjs +8 -0
  136. package/lib/smtp-transport-review.mjs +27 -15
  137. package/lib/sslbl-certificates.generated.mjs +136 -135
  138. package/lib/static-html-analysis.mjs +117 -146
  139. package/lib/structured-data-identity.mjs +1 -0
  140. package/lib/technology-markup.mjs +100 -0
  141. package/lib/threat-intelligence-manifests.mjs +11 -139
  142. package/lib/threat-intelligence-runtime.mjs +24 -52
  143. package/lib/threat-intelligence-targets.mjs +6 -34
  144. package/lib/threat-intelligence-types.mjs +39 -0
  145. package/lib/typosquat-generator.mjs +19 -15
  146. package/lib/urlhaus-intelligence.mjs +8 -3
  147. package/lib/urlscan-intelligence.mjs +1 -1
  148. package/lib/website-security-posture.mjs +30 -6
  149. package/lib/website-technology.mjs +111 -71
  150. package/lib/whois-authority.mjs +14 -2
  151. package/lib/whois-chain.mjs +9 -2
  152. package/lib/whois-common-formats.mjs +5 -5
  153. package/lib/whois-contracts.mjs +2 -1
  154. package/lib/whois-dialects.mjs +2 -2
  155. package/lib/whois-parser-support.mjs +8 -1
  156. package/lib/whois-transport.mjs +23 -7
  157. package/package.json +2 -1
  158. package/packages/cases/case-attachment-model.mjs +83 -0
  159. package/packages/cases/case-evidence-model.mjs +156 -62
  160. package/packages/cases/case-export-input.mjs +53 -0
  161. package/packages/cases/case-migration-model.mjs +59 -25
  162. package/packages/cases/case-model.mjs +1 -0
  163. package/packages/cases/case-recheck-model.mjs +91 -0
  164. package/packages/cases/case-record-core.mjs +3 -2
  165. package/packages/cases/case-record-operations.mjs +89 -27
  166. package/packages/cases/case-record-projection.mjs +23 -20
  167. package/packages/cases/case-report.mjs +63 -52
  168. package/packages/cases/case-response-actions.mjs +654 -0
  169. package/packages/cases/case-response-model.mjs +41 -1129
  170. package/packages/cases/case-response-outcomes.mjs +317 -0
  171. package/packages/cases/case-response-packet-render.mjs +153 -0
  172. package/packages/cases/case-response-packet-types.mjs +1 -0
  173. package/packages/cases/case-response-packet-vocabulary.mjs +48 -0
  174. package/packages/cases/case-response-packet.mjs +38 -587
  175. package/packages/cases/case-response-records.mjs +94 -0
  176. package/packages/cases/case-response-review-inputs.mjs +371 -0
  177. package/packages/cases/case-response-values.mjs +85 -0
  178. package/packages/cases/case-review-package.mjs +45 -0
  179. package/packages/cases/case-selection.mjs +46 -0
  180. package/packages/cases/case-storage-model.mjs +25 -0
  181. package/packages/cases/response-route-freshness.mjs +16 -0
  182. package/packages/comparison/capture-context.mjs +61 -0
  183. package/packages/comparison/comparison-ledger-bulk.mjs +4 -1
  184. package/packages/comparison/page-similarity.mjs +2 -1
  185. package/packages/comparison/relationship-evidence.mjs +85 -8
  186. package/packages/comparison/relationship-provenance.mjs +93 -0
  187. package/packages/contracts/analyst-interchange.mjs +216 -0
  188. package/packages/contracts/analyst-review-state-contract.mjs +11 -0
  189. package/packages/contracts/analyst-review-state.mjs +5 -4
  190. package/packages/contracts/case-portability.mjs +279 -116
  191. package/packages/contracts/case-views-contract.mjs +12 -0
  192. package/packages/contracts/case-views.mjs +26 -0
  193. package/packages/contracts/cli-command-semantics.mjs +1 -0
  194. package/packages/contracts/cli-lookup.mjs +0 -1
  195. package/packages/contracts/domain-control-flight-recorder.mjs +80 -42
  196. package/packages/contracts/domain-control-manifest.mjs +127 -73
  197. package/packages/contracts/domain-control-monitor.mjs +48 -45
  198. package/packages/contracts/domain-control-review.mjs +179 -121
  199. package/packages/contracts/domain-name.mjs +21 -0
  200. package/packages/contracts/external-observation-interchange.mjs +2 -1
  201. package/packages/contracts/extracted-domain-lifecycle.mjs +11 -32
  202. package/packages/contracts/http-url.mjs +2 -0
  203. package/packages/contracts/investigation-package-limits.mjs +24 -0
  204. package/packages/contracts/investigation-portability.mjs +56 -27
  205. package/packages/contracts/investigation-run.mjs +16 -0
  206. package/packages/contracts/ip-address.mjs +34 -0
  207. package/packages/contracts/lookup-evidence.mjs +35 -0
  208. package/packages/contracts/offline-comparison.mjs +1 -2
  209. package/packages/contracts/page-fingerprints.mjs +15 -0
  210. package/packages/contracts/risk-calibration.mjs +0 -1
  211. package/packages/contracts/schema-compatibility.mjs +1 -1
  212. package/packages/contracts/schema-lifecycle.mjs +83 -153
  213. package/packages/contracts/selected-file-limits.mjs +6 -0
  214. package/packages/contracts/vulnerability-identifiers.mjs +5 -0
  215. package/packages/contracts/web-capture.mjs +10 -0
  216. package/packages/contracts/workspace-portability.mjs +160 -225
  217. package/packages/evidence/artifact-integrity.mjs +8 -2
  218. package/packages/evidence/artifact-structure.mjs +105 -0
  219. package/packages/evidence/decision-fact.mjs +4 -1
  220. package/packages/evidence/domain-control-runtime.mjs +155 -27
  221. package/packages/evidence/domain-posture-context.mjs +79 -0
  222. package/packages/evidence/image-regions.mjs +56 -0
  223. package/packages/evidence/latest-observations.mjs +28 -0
  224. package/packages/evidence/lookup-target.mjs +104 -0
  225. package/packages/evidence/observation.mjs +16 -1
  226. package/packages/evidence/passphrase-encryption.mjs +44 -0
  227. package/packages/evidence/record-identity.mjs +72 -0
  228. package/packages/evidence/registry-dates.mjs +190 -0
  229. package/packages/evidence/retained-file.mjs +69 -0
  230. package/packages/evidence/review-age.mjs +14 -0
  231. package/packages/interchange/bagit.mjs +342 -0
  232. package/packages/interchange/bounded-zip-extraction.mjs +278 -0
  233. package/packages/interchange/crc32.mjs +17 -0
  234. package/packages/interchange/external-findings-import.mjs +89 -49
  235. package/packages/interchange/web-capture-import.mjs +382 -0
  236. package/packages/investigation/bulk-mail-exposure.mjs +2 -1
  237. package/packages/investigation/investigation-bagit.mjs +14 -0
  238. package/packages/investigation/investigation-capsule.mjs +33 -5
  239. package/packages/investigation/investigation-manifest.mjs +200 -0
  240. package/packages/investigation/investigation-package-crypto.mjs +98 -0
  241. package/packages/investigation/investigation-package.mjs +200 -0
  242. package/packages/investigation/lookup-asset-graph-inputs.mjs +38 -0
  243. package/packages/investigation/lookup-asset-graph.mjs +161 -141
  244. package/packages/investigation/lookup-claim-readiness.mjs +18 -0
  245. package/packages/investigation/lookup-investigation-brief.mjs +3 -3
  246. package/packages/investigation/lookup-task-guidance.mjs +58 -0
  247. package/packages/monitoring/analyst-review-state.mjs +38 -90
  248. package/packages/workspace/brand-profile-model.mjs +158 -20
  249. package/packages/workspace/bulk-columns.mjs +17 -0
  250. package/packages/workspace/bulk-review-model.mjs +11 -5
  251. package/packages/workspace/bulk-session-model.mjs +95 -20
  252. package/packages/workspace/bulk-sort.mjs +1 -0
  253. package/packages/workspace/case-views.mjs +102 -0
  254. package/packages/workspace/hostile-input.mjs +29 -8
  255. package/packages/workspace/investigation-template-model.mjs +19 -4
  256. package/packages/workspace/page-baseline.mjs +18 -15
  257. package/packages/workspace/relationship-observation-model.mjs +41 -26
  258. package/packages/workspace/watchlist-history.mjs +2 -2
  259. package/packages/workspace/watchlist-store.mjs +8 -2
  260. package/packages/workspace/website-snapshot-model.mjs +70 -30
  261. package/packages/workspace/workspace-archive-crypto.mjs +41 -61
  262. package/packages/workspace/workspace-archive.mjs +85 -21
  263. package/third-party-notices.txt +29 -2
  264. package/packages/investigation/bulk-review-export.mjs +0 -63
@@ -1,7 +1,9 @@
1
1
  import { defineSchemaCompatibility } from "./schema-compatibility.mjs";
2
2
  import { defineSchemaLifecycleFamily } from "./schema-lifecycle.mjs";
3
3
  export const CLI_DOMAIN_CONTROL_MONITOR_SCHEMA = 'whoisleuth.cli.domain-control-monitor';
4
- export const CLI_DOMAIN_CONTROL_MONITOR_VERSION = 1;
4
+ export const PUBLIC_CLI_DOMAIN_CONTROL_MONITOR_VERSION = 1;
5
+ export const CLI_DOMAIN_CONTROL_MONITOR_VERSION = 2;
6
+ export const SUPPORTED_CLI_DOMAIN_CONTROL_MONITOR_VERSIONS = [PUBLIC_CLI_DOMAIN_CONTROL_MONITOR_VERSION, CLI_DOMAIN_CONTROL_MONITOR_VERSION];
5
7
  export const MAX_DOMAIN_CONTROL_MONITOR_INPUT_BYTES = 16 * 1024 * 1024;
6
8
  export const MAX_DOMAIN_CONTROL_MONITOR_JSON_DEPTH = 48;
7
9
  export const MAX_DOMAIN_CONTROL_MONITOR_JSON_KEYS = 50_000;
@@ -51,10 +53,10 @@ export const DOMAIN_CONTROL_MONITOR_COMPATIBILITY = defineSchemaCompatibility({
51
53
  kind: 'cli_document',
52
54
  schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA,
53
55
  currentVersion: CLI_DOMAIN_CONTROL_MONITOR_VERSION,
54
- supportedVersions: [CLI_DOMAIN_CONTROL_MONITOR_VERSION],
56
+ supportedVersions: SUPPORTED_CLI_DOMAIN_CONTROL_MONITOR_VERSIONS,
55
57
  acceptsUnversionedLegacy: false,
56
58
  futureVersionBehavior: 'reject',
57
- migration: 'exact_current_only',
59
+ migration: 'read_only',
58
60
  writeSemantics: 'normalized_rewrite',
59
61
  byteBudget: null,
60
62
  owner: 'packages/contracts/domain-control-monitor.mts',
@@ -65,24 +67,22 @@ export const DOMAIN_CONTROL_MONITOR_SCHEMA_LIFECYCLE = defineSchemaLifecycleFami
65
67
  owner: 'packages/contracts/domain-control-monitor.mts',
66
68
  privacy: 'analyst_authored_sensitive',
67
69
  compatibility: [DOMAIN_CONTROL_MONITOR_COMPATIBILITY],
68
- contracts: [
69
- {
70
- compatibilityId: DOMAIN_CONTROL_MONITOR_COMPATIBILITY.id,
71
- schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA,
72
- version: CLI_DOMAIN_CONTROL_MONITOR_VERSION,
73
- role: 'document',
74
- lifecycle: 'current',
75
- readable: true,
76
- emitted: true,
77
- exactKeys: true,
78
- extensionPolicy: 'reject',
79
- futureVersionBehaviour: 'reject',
80
- migrationTarget: null,
81
- canonicalisation: null,
82
- byteBudget: null,
83
- fixtureIds: ['domain-control-monitor-v1'],
84
- },
85
- ],
70
+ contracts: SUPPORTED_CLI_DOMAIN_CONTROL_MONITOR_VERSIONS.map((version) => ({
71
+ compatibilityId: DOMAIN_CONTROL_MONITOR_COMPATIBILITY.id,
72
+ schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA,
73
+ version,
74
+ role: 'document',
75
+ lifecycle: version === CLI_DOMAIN_CONTROL_MONITOR_VERSION ? 'current' : 'legacy',
76
+ readable: true,
77
+ emitted: version === CLI_DOMAIN_CONTROL_MONITOR_VERSION,
78
+ exactKeys: true,
79
+ extensionPolicy: 'reject',
80
+ futureVersionBehaviour: 'reject',
81
+ migrationTarget: null,
82
+ canonicalisation: null,
83
+ byteBudget: null,
84
+ fixtureIds: [`domain-control-monitor-v${version}`],
85
+ })),
86
86
  fixtures: [
87
87
  {
88
88
  id: 'domain-control-monitor-v1',
@@ -91,32 +91,35 @@ export const DOMAIN_CONTROL_MONITOR_SCHEMA_LIFECYCLE = defineSchemaLifecycleFami
91
91
  sha256: '1b505015fbc4cb6fc10b8d1c4552762fc78a21bea2f6614761e34d03f290ffb4',
92
92
  contentDigestSha256: null,
93
93
  schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA,
94
- version: CLI_DOMAIN_CONTROL_MONITOR_VERSION,
95
- role: 'current',
94
+ version: PUBLIC_CLI_DOMAIN_CONTROL_MONITOR_VERSION,
95
+ role: 'historical',
96
96
  expectation: 'accepted_exact',
97
97
  expectedOutputFixtureId: null,
98
98
  scope: 'repository',
99
99
  },
100
+ {
101
+ id: 'domain-control-monitor-v2', path: 'test/fixtures/domain-control-monitor-v2.json',
102
+ bytes: 18_023, sha256: 'f4017f3dc84b3adb6b6114ea49c37ff05939779daabbbb56c868010145cac55c',
103
+ contentDigestSha256: null, schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA, version: CLI_DOMAIN_CONTROL_MONITOR_VERSION,
104
+ role: 'current', expectation: 'accepted_exact', expectedOutputFixtureId: null, scope: 'repository',
105
+ },
100
106
  ],
101
107
  metadata: {
102
- metadataVersion: 2,
103
108
  enforcement: 'declarative_only',
104
- shapes: [
105
- {
106
- id: 'domain-control-monitor.document.v1',
107
- schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA,
108
- versions: [CLI_DOMAIN_CONTROL_MONITOR_VERSION],
109
- objects: [
110
- { path: '$', requiredKeys: DOMAIN_CONTROL_MONITOR_ROOT_KEYS, optionalKeys: [], unknownKeys: 'reject' },
111
- { path: '$.manifest', requiredKeys: DOMAIN_CONTROL_MONITOR_MANIFEST_KEYS, optionalKeys: [], unknownKeys: 'reject' },
112
- { path: '$.collection', requiredKeys: DOMAIN_CONTROL_MONITOR_COLLECTION_KEYS, optionalKeys: [], unknownKeys: 'reject' },
113
- { path: '$.collection.failures[]', requiredKeys: DOMAIN_CONTROL_MONITOR_FAILURE_KEYS, optionalKeys: [], unknownKeys: 'reject' },
114
- ],
115
- fixedArrays: [{ path: '$.limitations', values: DOMAIN_CONTROL_MONITOR_LIMITATIONS }],
116
- normalisation: 'preserve_document',
117
- target: null,
118
- },
119
- ],
109
+ shapes: SUPPORTED_CLI_DOMAIN_CONTROL_MONITOR_VERSIONS.map((version) => ({
110
+ id: `domain-control-monitor.document.v${version}`,
111
+ schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA,
112
+ versions: [version],
113
+ objects: [
114
+ { path: '$', requiredKeys: DOMAIN_CONTROL_MONITOR_ROOT_KEYS, optionalKeys: [], unknownKeys: 'reject' },
115
+ { path: '$.manifest', requiredKeys: DOMAIN_CONTROL_MONITOR_MANIFEST_KEYS, optionalKeys: [], unknownKeys: 'reject' },
116
+ { path: '$.collection', requiredKeys: DOMAIN_CONTROL_MONITOR_COLLECTION_KEYS, optionalKeys: [], unknownKeys: 'reject' },
117
+ { path: '$.collection.failures[]', requiredKeys: DOMAIN_CONTROL_MONITOR_FAILURE_KEYS, optionalKeys: [], unknownKeys: 'reject' },
118
+ ],
119
+ fixedArrays: [{ path: '$.limitations', values: DOMAIN_CONTROL_MONITOR_LIMITATIONS }],
120
+ normalisation: 'preserve_document',
121
+ target: null,
122
+ })),
120
123
  boundProfiles: [
121
124
  {
122
125
  id: 'domain-control-monitor.document-bounds.v1',
@@ -221,9 +224,9 @@ export const DOMAIN_CONTROL_MONITOR_SCHEMA_LIFECYCLE = defineSchemaLifecycleFami
221
224
  id: 'domain-control-monitor.cli-run',
222
225
  plane: 'cli',
223
226
  operation: 'bounded-passive-deep-monitor',
224
- acceptedContracts: [{ schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA, versions: [CLI_DOMAIN_CONTROL_MONITOR_VERSION], mode: 'direct' }],
227
+ acceptedContracts: [{ schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA, versions: SUPPORTED_CLI_DOMAIN_CONTROL_MONITOR_VERSIONS, mode: 'direct' }],
225
228
  emittedContract: { schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA, version: CLI_DOMAIN_CONTROL_MONITOR_VERSION },
226
- shapeIds: ['domain-control-monitor.document.v1'],
229
+ shapeIds: SUPPORTED_CLI_DOMAIN_CONTROL_MONITOR_VERSIONS.map((version) => `domain-control-monitor.document.v${version}`),
227
230
  boundProfileIds: ['domain-control-monitor.document-bounds.v1', 'domain-control-monitor.cli-intake.v1', 'domain-control-monitor.action.v1'],
228
231
  hookIds: ['domain-control-monitor.cli.run'],
229
232
  serialisationProfileId: null,
@@ -240,7 +243,7 @@ export const DOMAIN_CONTROL_MONITOR_SCHEMA_LIFECYCLE = defineSchemaLifecycleFami
240
243
  operation: 'serialise-json',
241
244
  acceptedContracts: [{ schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA, versions: [CLI_DOMAIN_CONTROL_MONITOR_VERSION], mode: 'direct' }],
242
245
  emittedContract: null,
243
- shapeIds: ['domain-control-monitor.document.v1'],
246
+ shapeIds: [`domain-control-monitor.document.v${CLI_DOMAIN_CONTROL_MONITOR_VERSION}`],
244
247
  boundProfileIds: ['domain-control-monitor.document-bounds.v1'],
245
248
  hookIds: ['domain-control-monitor.cli.serialise-json'],
246
249
  serialisationProfileId: 'domain-control-monitor.json.v1',
@@ -257,7 +260,7 @@ export const DOMAIN_CONTROL_MONITOR_SCHEMA_LIFECYCLE = defineSchemaLifecycleFami
257
260
  operation: 'format-terminal',
258
261
  acceptedContracts: [{ schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA, versions: [CLI_DOMAIN_CONTROL_MONITOR_VERSION], mode: 'direct' }],
259
262
  emittedContract: null,
260
- shapeIds: ['domain-control-monitor.document.v1'],
263
+ shapeIds: [`domain-control-monitor.document.v${CLI_DOMAIN_CONTROL_MONITOR_VERSION}`],
261
264
  boundProfileIds: ['domain-control-monitor.document-bounds.v1'],
262
265
  hookIds: ['domain-control-monitor.cli.format-terminal'],
263
266
  serialisationProfileId: null,
@@ -274,7 +277,7 @@ export const DOMAIN_CONTROL_MONITOR_SCHEMA_LIFECYCLE = defineSchemaLifecycleFami
274
277
  operation: 'format-junit',
275
278
  acceptedContracts: [{ schema: CLI_DOMAIN_CONTROL_MONITOR_SCHEMA, versions: [CLI_DOMAIN_CONTROL_MONITOR_VERSION], mode: 'direct' }],
276
279
  emittedContract: null,
277
- shapeIds: ['domain-control-monitor.document.v1'],
280
+ shapeIds: [`domain-control-monitor.document.v${CLI_DOMAIN_CONTROL_MONITOR_VERSION}`],
278
281
  boundProfileIds: ['domain-control-monitor.document-bounds.v1'],
279
282
  hookIds: ['domain-control-monitor.cli.format-junit'],
280
283
  serialisationProfileId: null,