@slicedearth/whoisleuth-cli 2.3.0 → 2.5.1

package/packages/contracts/case-views-contract.mjs

@@ -0,0 +1,12 @@
+export const CASE_VIEWS_SCHEMA = 'whoisleuth.case-views';
+export const CASE_VIEWS_VERSION = 1;
+export const MAX_CASE_VIEWS = 100;
+export const MAX_CASE_VIEW_NAME_LENGTH = 80;
+export const MAX_CASE_VIEW_SEARCH_LENGTH = 512;
+// Accommodates 100 views with maximum-length Unicode names and search text.
+export const MAX_CASE_VIEWS_BYTES = 512 * 1024;
+export const CASE_VIEW_SORTS = Object.freeze([
+    { value: 'updated', label: 'Recently updated' },
+    { value: 'domain', label: 'Domain' },
+    { value: 'status', label: 'Status' },
+]);

package/packages/contracts/case-views.mjs

@@ -0,0 +1,26 @@
+import { defineSchemaCompatibility } from "./schema-compatibility.mjs";
+import { buildExtractedLifecycleFamily } from "./extracted-domain-lifecycle.mjs";
+import { defineSchemaLifecycleFamily } from "./schema-lifecycle.mjs";
+import { CASE_VIEWS_SCHEMA, CASE_VIEWS_VERSION, MAX_CASE_VIEWS_BYTES } from "./case-views-contract.mjs";
+export const CASE_VIEWS_COMPATIBILITY = defineSchemaCompatibility({
+    id: 'browser.case-views', kind: 'browser_store', schema: CASE_VIEWS_SCHEMA,
+    currentVersion: CASE_VIEWS_VERSION, supportedVersions: [CASE_VIEWS_VERSION],
+    acceptsUnversionedLegacy: false, futureVersionBehavior: 'preserve_without_write',
+    migration: 'exact_current_only', writeSemantics: 'optimistic_replace',
+    byteBudget: MAX_CASE_VIEWS_BYTES, owner: 'packages/contracts/case-views.mts',
+    note: 'Workspace-local named Case filters. Saved views retain no result set and grant no collection authority; workspace exports include their names and search text.',
+});
+export const CASE_VIEWS_LIFECYCLE_FAMILY = /* @__PURE__ */ defineSchemaLifecycleFamily(/* @__PURE__ */ buildExtractedLifecycleFamily({
+    id: 'case-views', owner: 'packages/contracts/case-views.mts',
+    serializerModule: 'packages/workspace/case-views.mts', serializerExportName: 'serialiseCaseViewsJson',
+    plane: 'browser', projection: 'browser_import', retention: 'browser_indexeddb', notePolicy: 'allowed_bounded',
+    includedCategories: ['saved-filter-name', 'case-status-and-disposition', 'search-text', 'sort-order', 'authored-times'],
+    excludedCategories: ['matching-case-records', 'source-evidence', 'collection-authorisation', 'public-response-packets'],
+    formats: [{
+            descriptor: CASE_VIEWS_COMPATIBILITY, lifecycleSchema: CASE_VIEWS_SCHEMA,
+            requiredKeys: ['schema', 'version', 'views'], optionalKeys: [],
+            hook: { module: 'packages/workspace/case-views.mts', exportName: 'normalizeCaseViewsStore', role: 'normaliser', runtime: 'shared' },
+            fixtures: [{ id: 'case-views-v1', path: 'test/fixtures/extracted-domain-lifecycle/case-views-v1.json', version: 1,
+                    bytes: 408, sha256: '015592dd0d6f4536b5960be9325b8d3b8c136eaab195d82383ab9a320a03f855' }],
+        }],
+}));

package/packages/contracts/cli-command-semantics.mjs

@@ -76,8 +76,11 @@ export const CLI_COMMAND_SEMANTICS = Object.freeze({
     'page-compare': semantic('investigate', CAPABILITY_IDS.OFFLINE_REVIEW),
     'mail-review': semantic('investigate', CAPABILITY_IDS.OFFLINE_REVIEW),
     'mail-headers': semantic('investigate', CAPABILITY_IDS.OFFLINE_REVIEW),
+    intake: semantic('investigate', CAPABILITY_IDS.OFFLINE_REVIEW),
     'review-evidence': semantic('investigate', CAPABILITY_IDS.PORTABLE_EVIDENCE),
     brief: semantic('investigate', CAPABILITY_IDS.OFFLINE_REVIEW),
+    case: semantic('respond', CAPABILITY_IDS.ANALYST_CASES),
+    'indicator-set': semantic('respond', CAPABILITY_IDS.PORTABLE_EVIDENCE),
     'case-pack': semantic('respond', CAPABILITY_IDS.PORTABLE_EVIDENCE),
     'domain-control': semantic('assure', CAPABILITY_IDS.PORTABLE_EVIDENCE),
     'monitor-once': semantic('assure', CAPABILITY_IDS.LOOKUP),

package/packages/contracts/cli-grammar.mjs

@@ -0,0 +1,6 @@
+import { MAX_INVESTIGATION_MANIFEST_ARTIFACTS } from "./investigation-package-limits.mjs";
+export const MAX_CLI_ARGUMENTS = MAX_INVESTIGATION_MANIFEST_ARTIFACTS + 32;
+export const MAX_CLI_ARGUMENT_LENGTH = 1024;
+export function hasUnsafeCliText(value) {
+    return /[\x00-\x1f\x7f-\x9f]|\p{Default_Ignorable_Code_Point}/u.test(value);
+}

package/packages/contracts/cli-lookup-brief.mjs

@@ -0,0 +1,2 @@
+export const CLI_LOOKUP_BRIEF_SCHEMA = 'whoisleuth.cli.lookup-brief';
+export const CLI_LOOKUP_BRIEF_VERSION = 3;

package/packages/contracts/cli-lookup.mjs

@@ -156,7 +156,6 @@ export const CLI_LOOKUP_SCHEMA_LIFECYCLE = defineSchemaLifecycleFamily({
         },
     ],
     metadata: {
-        metadataVersion: 3,
         enforcement: 'declarative_only',
         shapes: [
             {

package/packages/contracts/context-review.mjs

@@ -0,0 +1,24 @@
+/** Common presentation of bounded, analyst-selected contextual evidence. */
+export const CONTEXT_REVIEW_SCHEMA = 'whoisleuth.context-review';
+export const CONTEXT_REVIEW_VERSION = 1;
+export const DOMAIN_HISTORY_INPUT_SCHEMA = 'whoisleuth.domain-history.input';
+export const DOMAIN_HISTORY_INPUT_VERSION = 1;
+export const PLATFORM_CONTINUITY_INPUT_SCHEMA = 'whoisleuth.platform-continuity.input';
+export const PLATFORM_CONTINUITY_INPUT_VERSION = 1;
+export const STOREFRONT_INPUT_SCHEMA = 'whoisleuth.storefront-review.input';
+export const STOREFRONT_INPUT_VERSION = 1;
+export const CONNECTOR_INPUT_SCHEMA = 'whoisleuth.connector-review.input';
+export const CONNECTOR_INPUT_VERSION = 1;
+export const INCIDENT_SEQUENCE_INPUT_SCHEMA = 'whoisleuth.incident-sequence.input';
+export const INCIDENT_SEQUENCE_INPUT_VERSION = 1;
+export const CONTEXT_INPUT_CONTRACTS = [
+    { schema: DOMAIN_HISTORY_INPUT_SCHEMA, version: DOMAIN_HISTORY_INPUT_VERSION },
+    { schema: PLATFORM_CONTINUITY_INPUT_SCHEMA, version: PLATFORM_CONTINUITY_INPUT_VERSION },
+    { schema: STOREFRONT_INPUT_SCHEMA, version: STOREFRONT_INPUT_VERSION },
+    { schema: CONNECTOR_INPUT_SCHEMA, version: CONNECTOR_INPUT_VERSION },
+    { schema: INCIDENT_SEQUENCE_INPUT_SCHEMA, version: INCIDENT_SEQUENCE_INPUT_VERSION },
+];
+export const CONTEXT_INPUT_SCHEMAS = CONTEXT_INPUT_CONTRACTS.map(input => input.schema);
+export const MAX_CONTEXT_INPUT_BYTES = 16 * 1024 * 1024;
+export const MAX_CONTEXT_RECORDS = 200;
+export const CONTEXT_REVIEW_KINDS = ['domain_history', 'platform_continuity', 'storefront', 'connector', 'incident_sequence'];

package/packages/contracts/document-intake.mjs

@@ -0,0 +1,11 @@
+/** Input admission, decoded XML, page work and pixels are independently bounded. */
+export const MAX_DOCUMENT_PARTS = 512;
+export const MAX_DOCUMENT_PAGES = 256;
+export const MAX_DOCUMENT_DECODED_BYTES = 32 * 1024 * 1024;
+export const MAX_DOCUMENT_TEXT_BYTES = 8 * 1024 * 1024;
+export const MAX_DOCUMENT_XML_NODES = 200_000;
+export const MAX_DOCUMENT_PAGE_OPERATIONS = 200_000;
+export const MAX_DOCUMENT_XML_DEPTH = 64;
+export const MAX_DOCUMENT_IMAGE_PIXELS = 16 * 1024 * 1024;
+export const MAX_DOCUMENT_TOTAL_IMAGE_PIXELS = 64 * 1024 * 1024;
+export const DOCUMENT_REVIEW_DEADLINE_MS = 60_000;

package/packages/contracts/domain-control-flight-recorder.mjs

@@ -1,20 +1,25 @@
 import { defineSchemaCompatibility } from "./schema-compatibility.mjs";
 import { defineSchemaLifecycleFamily } from "./schema-lifecycle.mjs";
-import { MAX_DOMAIN_CONTROL_MANIFEST_BYTES, } from "./domain-control-manifest.mjs";
+import { MAX_DOMAIN_CONTROL_MANIFEST_BYTES, MAX_CURRENT_DOMAIN_CONTROL_RECORDS, MAX_DOMAIN_CONTROL_DS_PRESENTATION_LENGTH, } from "./domain-control-manifest.mjs";
 import { MAX_DOMAIN_CONTROL_MONITOR_CONCURRENCY, MAX_DOMAIN_CONTROL_MONITOR_DOMAINS, MIN_DOMAIN_CONTROL_MONITOR_CONCURRENCY, MIN_DOMAIN_CONTROL_MONITOR_DOMAINS, } from "./domain-control-monitor.mjs";
 export const DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA = 'whoisleuth.domain-control-flight-recorder.input';
 export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA = 'whoisleuth.domain-control-flight-recorder';
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION = 1;
+export const PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION = 1;
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION = 3;
+export const SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS = [PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION, 2, DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION];
 export const MIN_FLIGHT_RECORDER_OBSERVATIONS = 1;
 export const MAX_FLIGHT_RECORDER_OBSERVATIONS = 200;
 export const MAX_FLIGHT_RECORDER_WINDOWS = 40;
 export const MAX_FLIGHT_RECORDER_FIELDS = 24;
-export const MAX_FLIGHT_RECORDER_VALUES = 32;
+export const PUBLIC_MAX_FLIGHT_RECORDER_VALUES = 32;
+export const MAX_FLIGHT_RECORDER_VALUES = MAX_CURRENT_DOMAIN_CONTROL_RECORDS;
 export const DOMAIN_CONTROL_FLIGHT_RECORDER_VALUE_INPUT_FACTOR = 2;
 export const MAX_FLIGHT_RECORDER_INPUT_VALUES = MAX_FLIGHT_RECORDER_VALUES
     * DOMAIN_CONTROL_FLIGHT_RECORDER_VALUE_INPUT_FACTOR;
+export const PUBLIC_MAX_FLIGHT_RECORDER_INPUT_VALUES = PUBLIC_MAX_FLIGHT_RECORDER_VALUES * DOMAIN_CONTROL_FLIGHT_RECORDER_VALUE_INPUT_FACTOR;
 export const MAX_FLIGHT_RECORDER_SOURCE_LENGTH = 120;
-export const MAX_FLIGHT_RECORDER_VALUE_LENGTH = 500;
+export const PUBLIC_MAX_FLIGHT_RECORDER_VALUE_LENGTH = 500;
+export const MAX_FLIGHT_RECORDER_VALUE_LENGTH = MAX_DOMAIN_CONTROL_DS_PRESENTATION_LENGTH;
 export const MAX_FLIGHT_RECORDER_WINDOW_ID_LENGTH = 64;
 export const MAX_FLIGHT_RECORDER_WINDOW_REASON_LENGTH = 400;
 export const MAX_FLIGHT_RECORDER_JSON_DEPTH = 8;
@@ -45,18 +50,20 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_KEYS = Object.freeze([
     'observations',
     'approvedWindows',
 ]);
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_OBSERVATION_KEYS = Object.freeze([
+export const PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_OBSERVATION_KEYS = Object.freeze([
     'domain',
     'observedAt',
     'collectionDepth',
     'fields',
 ]);
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_FIELD_KEYS = Object.freeze([
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_OBSERVATION_KEYS = Object.freeze(['domain', 'capturedAt', 'collectionDepth', 'fields']);
+export const PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_FIELD_KEYS = Object.freeze([
     'id',
     'source',
     'state',
     'values',
 ]);
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_FIELD_KEYS = Object.freeze([...PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_FIELD_KEYS, 'observedAt']);
 export const DOMAIN_CONTROL_FLIGHT_RECORDER_WINDOW_KEYS = Object.freeze([
     'id',
     'domain',
@@ -75,7 +82,7 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_ROOT_KEYS = Object.freeze([
     'summary',
     'limitations',
 ]);
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS = Object.freeze([
+export const PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS = Object.freeze([
     'id',
     'domain',
     'field',
@@ -88,11 +95,15 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS = Object.freeze([
     'approvedWindow',
     'explanation',
 ]);
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS = Object.freeze([
+export const SOURCE_TIMED_FLIGHT_RECORDER_EVENT_KEYS = Object.freeze([...PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS, 'capturedAt']);
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS = Object.freeze([...SOURCE_TIMED_FLIGHT_RECORDER_EVENT_KEYS, 'collectionDepth', 'changeInterval']);
+export const FLIGHT_RECORDER_CHANGE_INTERVAL_KEYS = Object.freeze(['after', 'by', 'incompleteObservations']);
+export const HISTORICAL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS = Object.freeze([
     'id',
     'reason',
 ]);
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS = Object.freeze([
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS = Object.freeze([...HISTORICAL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS, 'startsAt', 'endsAt']);
+export const PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS = Object.freeze([
     'firstObservations',
     'observedChanges',
     'approvedChanges',
@@ -100,21 +111,30 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS = Object.freeze([
     'collectionChanges',
     'recoveredSources',
 ]);
-export const DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS = Object.freeze([
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS = Object.freeze([...PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS, 'incompleteFields']);
+export const PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS = Object.freeze([
     'The flight recorder compares only supplied bounded observations and performs no collection or configuration change.',
     'Source fields remain separate. A collection failure, partial result, unsupported source, or missing field never becomes evidence that a prior value disappeared.',
     'Approved windows label expected timing but do not delete evidence or establish that a change was authorised, successful, safe, or complete.',
     'Observed changes can reflect publication lag or different collection conditions and require analyst review.',
 ]);
+export const SOURCE_TIMED_FLIGHT_RECORDER_LIMITATIONS = Object.freeze([
+    ...PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS,
+    'Capture time and source observation time remain separate. Unknown, conflicting or non-increasing source times cannot establish an observed change.',
+]);
+export const DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS = Object.freeze([
+    ...SOURCE_TIMED_FLIGHT_RECORDER_LIMITATIONS,
+    'A change interval is bounded by comparable complete source observations, not an exact change time. Incomplete observations inside it remain explicit. An approved window must contain the whole interval.',
+]);
 export const DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_COMPATIBILITY = defineSchemaCompatibility({
     id: 'cli.domain-control-flight-recorder-input',
     kind: 'cli_document',
     schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA,
     currentVersion: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION,
-    supportedVersions: [DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION],
+    supportedVersions: SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS,
     acceptsUnversionedLegacy: false,
     futureVersionBehavior: 'reject',
-    migration: 'exact_current_only',
+    migration: 'read_only',
     writeSemantics: 'read_only',
     byteBudget: MAX_DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_BYTES,
     owner: 'packages/contracts/domain-control-flight-recorder.mts',
@@ -125,15 +145,18 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_COMPATIBILITY = defineSchemaCompatib
     kind: 'cli_document',
     schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA,
     currentVersion: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION,
-    supportedVersions: [DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION],
+    supportedVersions: SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS,
     acceptsUnversionedLegacy: false,
     futureVersionBehavior: 'reject',
-    migration: 'exact_current_only',
+    migration: 'read_only',
     writeSemantics: 'read_only',
     byteBudget: MAX_DOMAIN_CONTROL_FLIGHT_RECORDER_OUTPUT_BYTES,
     owner: 'packages/contracts/domain-control-flight-recorder.mts',
     note: 'Offline first and last observed control history that preserves expected and unexpected changes.',
 });
+const FLIGHT_INPUT_SHAPE_IDS = SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS.map((version) => `domain-control-flight-recorder.input.v${version}`);
+const FLIGHT_DOCUMENT_SHAPE_IDS = SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS.map((version) => `domain-control-flight-recorder.document.v${version}`);
+const CURRENT_FLIGHT_DOCUMENT_SHAPE_ID = `domain-control-flight-recorder.document.v${DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION}`;
 export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifecycleFamily({
     id: 'domain-control-flight-recorder',
     owner: 'packages/contracts/domain-control-flight-recorder.mts',
@@ -175,7 +198,11 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
             byteBudget: MAX_DOMAIN_CONTROL_FLIGHT_RECORDER_OUTPUT_BYTES,
             fixtureIds: ['domain-control-flight-recorder-v1'],
         },
-    ],
+    ].flatMap((contract) => SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS.map((version) => ({
+        ...contract, version, lifecycle: version === DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? 'current' : 'legacy',
+        emitted: contract.emitted && version === DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION,
+        fixtureIds: contract.fixtureIds.map((id) => id.replace(/v\d+$/u, `v${version}`)),
+    }))),
     fixtures: [
         {
             id: 'domain-control-flight-recorder-input-v1',
@@ -184,7 +211,7 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
             sha256: '1fc4127a5885409d2ba76d40c1835a496767c6fe6d87f0545d8367d5f394a628',
             contentDigestSha256: null,
             schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA,
-            version: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION,
+            version: PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION,
             role: 'input',
             expectation: 'normalises_to_current_output',
             expectedOutputFixtureId: 'domain-control-flight-recorder-v1',
@@ -197,25 +224,42 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
             sha256: 'c35d43907bba7a7912f3151bc1a2ba37bb8f774c56a3bd5f690be262e842cf4c',
             contentDigestSha256: null,
             schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA,
-            version: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION,
+            version: PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION,
             role: 'current',
             expectation: 'accepted_exact',
             expectedOutputFixtureId: null,
             scope: 'repository',
         },
-    ],
+    ].flatMap((fixture) => {
+        return [
+            { ...fixture, role: fixture.role === 'input' ? 'input' : 'historical', expectation: 'accepted_exact', expectedOutputFixtureId: null },
+            ...[2, DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION].map(version => {
+                const id = fixture.id.replace(/v\d+$/u, `v${version}`);
+                const content = version === 2
+                    ? fixture.role === 'input'
+                        ? { bytes: 2108, sha256: '6998ea864355dd0802b3b6f2c4905f8c84136ad0d4ac9cad1a0fd63dca523b60' }
+                        : { bytes: 4649, sha256: '8f3168d101291166f34cede351bc176a934e7997920cd8c22ec00d642ec000df' }
+                    : fixture.role === 'input'
+                        ? { bytes: 2108, sha256: '3d9b91dfd34754482047cde64d6343676ec4747267677fcbcc989a65fbd9a6c6' }
+                        : { bytes: 5597, sha256: 'ab6a82cfecfb8238a72fbe2dcd4a68a1fd888990e5070eff9d98a337796624d6' };
+                return { ...fixture, ...content, id, path: `test/fixtures/${id}.json`, version,
+                    role: fixture.role === 'input' ? 'input' : version === DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? 'current' : 'historical',
+                    expectation: version === DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? fixture.expectation : 'accepted_exact',
+                    expectedOutputFixtureId: version === DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? fixture.expectedOutputFixtureId?.replace(/v\d+$/u, `v${version}`) ?? null : null };
+            }),
+        ];
+    }),
     metadata: {
-        metadataVersion: 2,
         enforcement: 'declarative_only',
-        shapes: [
+        shapes: SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS.flatMap((version) => [
             {
-                id: 'domain-control-flight-recorder.input.v1',
+                id: `domain-control-flight-recorder.input.v${version}`,
                 schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA,
-                versions: [DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION],
+                versions: [version],
                 objects: [
                     { path: '$', requiredKeys: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_KEYS, optionalKeys: [], unknownKeys: 'reject' },
-                    { path: '$.observations[]', requiredKeys: DOMAIN_CONTROL_FLIGHT_RECORDER_OBSERVATION_KEYS, optionalKeys: [], unknownKeys: 'reject' },
-                    { path: '$.observations[].fields[]', requiredKeys: DOMAIN_CONTROL_FLIGHT_RECORDER_FIELD_KEYS, optionalKeys: [], unknownKeys: 'reject' },
+                    { path: '$.observations[]', requiredKeys: version === PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_OBSERVATION_KEYS : DOMAIN_CONTROL_FLIGHT_RECORDER_OBSERVATION_KEYS, optionalKeys: [], unknownKeys: 'reject' },
+                    { path: '$.observations[].fields[]', requiredKeys: version === PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_FIELD_KEYS : DOMAIN_CONTROL_FLIGHT_RECORDER_FIELD_KEYS, optionalKeys: [], unknownKeys: 'reject' },
                     { path: '$.approvedWindows[]', requiredKeys: DOMAIN_CONTROL_FLIGHT_RECORDER_WINDOW_KEYS, optionalKeys: [], unknownKeys: 'reject' },
                 ],
                 fixedArrays: [],
@@ -223,20 +267,21 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
                 target: { schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA, version: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION },
             },
             {
-                id: 'domain-control-flight-recorder.document.v1',
+                id: `domain-control-flight-recorder.document.v${version}`,
                 schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA,
-                versions: [DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION],
+                versions: [version],
                 objects: [
                     { path: '$', requiredKeys: DOMAIN_CONTROL_FLIGHT_RECORDER_ROOT_KEYS, optionalKeys: [], unknownKeys: 'reject' },
-                    { path: '$.events[]', requiredKeys: DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS, optionalKeys: [], unknownKeys: 'reject' },
-                    { path: '$.events[].approvedWindow', requiredKeys: DOMAIN_CONTROL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS, optionalKeys: [], unknownKeys: 'reject' },
-                    { path: '$.summary', requiredKeys: DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS, optionalKeys: [], unknownKeys: 'reject' },
+                    { path: '$.events[]', requiredKeys: version === 1 ? PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS : version === 2 ? SOURCE_TIMED_FLIGHT_RECORDER_EVENT_KEYS : DOMAIN_CONTROL_FLIGHT_RECORDER_EVENT_KEYS, optionalKeys: [], unknownKeys: 'reject' },
+                    { path: '$.events[].approvedWindow', requiredKeys: version >= 3 ? DOMAIN_CONTROL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS : HISTORICAL_FLIGHT_RECORDER_APPROVED_WINDOW_KEYS, optionalKeys: [], unknownKeys: 'reject' },
+                    ...(version >= 3 ? [{ path: '$.events[].changeInterval', requiredKeys: FLIGHT_RECORDER_CHANGE_INTERVAL_KEYS, optionalKeys: [], unknownKeys: 'reject' }] : []),
+                    { path: '$.summary', requiredKeys: version === PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION ? PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS : DOMAIN_CONTROL_FLIGHT_RECORDER_SUMMARY_KEYS, optionalKeys: [], unknownKeys: 'reject' },
                 ],
-                fixedArrays: [{ path: '$.limitations', values: DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS }],
+                fixedArrays: [{ path: '$.limitations', values: version === 1 ? PUBLIC_DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS : version === 2 ? SOURCE_TIMED_FLIGHT_RECORDER_LIMITATIONS : DOMAIN_CONTROL_FLIGHT_RECORDER_LIMITATIONS }],
                 normalisation: 'preserve_document',
                 target: null,
             },
-        ],
+        ]),
         boundProfiles: [
             {
                 id: 'domain-control-flight-recorder.input-wire.v1',
@@ -248,7 +293,7 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
                     { id: 'observation-fields', path: '$.observations[].fields', phase: 'pre_accumulation', unit: 'items', minimum: 0, maximum: MAX_FLIGHT_RECORDER_FIELDS, handling: 'reject' },
                     { id: 'observation-unique-fields', path: '$.observations[].fields', phase: 'normalised', unit: 'items', minimum: 0, maximum: MAX_FLIGHT_RECORDER_UNIQUE_FIELDS, handling: 'reject' },
                     { id: 'field-input-values', path: '$.observations[].fields[].values', phase: 'pre_accumulation', unit: 'items', minimum: 0, maximum: MAX_FLIGHT_RECORDER_INPUT_VALUES, handling: 'reject' },
-                    { id: 'field-values', path: '$.observations[].fields[].values', phase: 'normalised', unit: 'items', minimum: 0, maximum: MAX_FLIGHT_RECORDER_VALUES, handling: 'truncate' },
+                    { id: 'field-values', path: '$.observations[].fields[].values', phase: 'normalised', unit: 'items', minimum: 0, maximum: MAX_FLIGHT_RECORDER_VALUES, handling: 'reject' },
                     { id: 'field-source', path: '$.observations[].fields[].source', phase: 'pre_accumulation', unit: 'characters', minimum: 1, maximum: MAX_FLIGHT_RECORDER_SOURCE_LENGTH, handling: 'reject' },
                     { id: 'field-value-text', path: '$.observations[].fields[].values[]', phase: 'pre_accumulation', unit: 'characters', minimum: 1, maximum: MAX_FLIGHT_RECORDER_VALUE_LENGTH, handling: 'reject' },
                     { id: 'approved-windows', path: '$.approvedWindows', phase: 'pre_accumulation', unit: 'items', minimum: 0, maximum: MAX_FLIGHT_RECORDER_WINDOWS, handling: 'reject' },
@@ -294,7 +339,7 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
             {
                 id: 'domain-control-flight-recorder.json.v1',
                 schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA,
-                versions: [DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION],
+                versions: SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS,
                 mediaType: 'application/json',
                 encoding: 'utf-8',
                 bom: false,
@@ -353,13 +398,22 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
             },
         ],
         consumerEdges: [
+            {
+                id: 'domain-control-flight-recorder.node-validate', plane: 'node', operation: 'validate-document',
+                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA, versions: SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS, mode: 'direct' }],
+                emittedContract: null, shapeIds: FLIGHT_DOCUMENT_SHAPE_IDS,
+                boundProfileIds: ['domain-control-flight-recorder.output-wire.v1'],
+                hookIds: ['domain-control-flight-recorder.node.validate-document'], serialisationProfileId: null,
+                privacyProfileId: 'domain-control-flight-recorder.sensitive.v1', expiryPolicyId: 'domain-control-flight-recorder.expiry-not-applicable.v1',
+                requestMode: 'none', retentionEffect: 'transient_report', bindingState: 'declared_unenforced', policyState: 'current',
+            },
             {
                 id: 'domain-control-flight-recorder.node-build',
                 plane: 'node',
                 operation: 'review',
-                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA, versions: [DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION], mode: 'direct' }],
+                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA, versions: SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS, mode: 'direct' }],
                 emittedContract: { schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA, version: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION },
-                shapeIds: ['domain-control-flight-recorder.input.v1', 'domain-control-flight-recorder.document.v1'],
+                shapeIds: [...FLIGHT_INPUT_SHAPE_IDS, CURRENT_FLIGHT_DOCUMENT_SHAPE_ID],
                 boundProfileIds: ['domain-control-flight-recorder.input-wire.v1', 'domain-control-flight-recorder.output-wire.v1'],
                 hookIds: ['domain-control-flight-recorder.node.build'],
                 serialisationProfileId: null,
@@ -374,9 +428,9 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
                 id: 'domain-control-flight-recorder.cli-json-stdout',
                 plane: 'cli',
                 operation: 'review-json-stdout',
-                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA, versions: [DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION], mode: 'direct' }],
+                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA, versions: SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS, mode: 'direct' }],
                 emittedContract: { schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA, version: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION },
-                shapeIds: ['domain-control-flight-recorder.input.v1', 'domain-control-flight-recorder.document.v1'],
+                shapeIds: [...FLIGHT_INPUT_SHAPE_IDS, CURRENT_FLIGHT_DOCUMENT_SHAPE_ID],
                 boundProfileIds: ['domain-control-flight-recorder.input-wire.v1', 'domain-control-flight-recorder.output-wire.v1', 'domain-control-flight-recorder.cli-command.v1'],
                 hookIds: ['domain-control-flight-recorder.node.build', 'domain-control-flight-recorder.node.serialise-json'],
                 serialisationProfileId: 'domain-control-flight-recorder.json.v1',
@@ -391,9 +445,9 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
                 id: 'domain-control-flight-recorder.cli-terminal-stdout',
                 plane: 'cli',
                 operation: 'review-terminal-stdout',
-                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA, versions: [DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION], mode: 'direct' }],
+                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA, versions: SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS, mode: 'direct' }],
                 emittedContract: { schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA, version: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION },
-                shapeIds: ['domain-control-flight-recorder.input.v1', 'domain-control-flight-recorder.document.v1'],
+                shapeIds: [...FLIGHT_INPUT_SHAPE_IDS, CURRENT_FLIGHT_DOCUMENT_SHAPE_ID],
                 boundProfileIds: ['domain-control-flight-recorder.input-wire.v1', 'domain-control-flight-recorder.output-wire.v1', 'domain-control-flight-recorder.cli-command.v1'],
                 hookIds: ['domain-control-flight-recorder.node.build', 'domain-control-flight-recorder.node.format-terminal'],
                 serialisationProfileId: null,
@@ -408,9 +462,9 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
                 id: 'domain-control-flight-recorder.cli-json-file',
                 plane: 'cli',
                 operation: 'review-json-file',
-                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA, versions: [DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION], mode: 'direct' }],
+                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA, versions: SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS, mode: 'direct' }],
                 emittedContract: { schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA, version: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION },
-                shapeIds: ['domain-control-flight-recorder.input.v1', 'domain-control-flight-recorder.document.v1'],
+                shapeIds: [...FLIGHT_INPUT_SHAPE_IDS, CURRENT_FLIGHT_DOCUMENT_SHAPE_ID],
                 boundProfileIds: ['domain-control-flight-recorder.input-wire.v1', 'domain-control-flight-recorder.output-wire.v1', 'domain-control-flight-recorder.cli-command.v1'],
                 hookIds: ['domain-control-flight-recorder.node.build', 'domain-control-flight-recorder.node.serialise-json'],
                 serialisationProfileId: 'domain-control-flight-recorder.json.v1',
@@ -425,9 +479,9 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
                 id: 'domain-control-flight-recorder.cli-terminal-file',
                 plane: 'cli',
                 operation: 'review-terminal-file',
-                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA, versions: [DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION], mode: 'direct' }],
+                acceptedContracts: [{ schema: DOMAIN_CONTROL_FLIGHT_RECORDER_INPUT_SCHEMA, versions: SUPPORTED_DOMAIN_CONTROL_FLIGHT_RECORDER_VERSIONS, mode: 'direct' }],
                 emittedContract: { schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA, version: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION },
-                shapeIds: ['domain-control-flight-recorder.input.v1', 'domain-control-flight-recorder.document.v1'],
+                shapeIds: [...FLIGHT_INPUT_SHAPE_IDS, CURRENT_FLIGHT_DOCUMENT_SHAPE_ID],
                 boundProfileIds: ['domain-control-flight-recorder.input-wire.v1', 'domain-control-flight-recorder.output-wire.v1', 'domain-control-flight-recorder.cli-command.v1'],
                 hookIds: ['domain-control-flight-recorder.node.build', 'domain-control-flight-recorder.node.format-terminal'],
                 serialisationProfileId: null,
@@ -444,7 +498,7 @@ export const DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA_LIFECYCLE = defineSchemaLifec
                 operation: 'embed-after-current-manifest-bounded-passive-monitor',
                 acceptedContracts: [],
                 emittedContract: { schema: DOMAIN_CONTROL_FLIGHT_RECORDER_SCHEMA, version: DOMAIN_CONTROL_FLIGHT_RECORDER_VERSION },
-                shapeIds: ['domain-control-flight-recorder.document.v1'],
+                shapeIds: [CURRENT_FLIGHT_DOCUMENT_SHAPE_ID],
                 boundProfileIds: ['domain-control-flight-recorder.output-wire.v1', 'domain-control-flight-recorder.monitor-action.v1'],
                 hookIds: ['domain-control-flight-recorder.node.validate-document', 'domain-control-flight-recorder.cli.monitor'],
                 serialisationProfileId: null,