@slicedearth/whoisleuth-cli 2.4.0 → 2.5.1

package/packages/workspace/website-snapshot-model.mjs

@@ -1,4 +1,4 @@
-import { normalizeDomain } from "../cases/case-model.mjs";
+import { normalizeDomain } from "../evidence/domain-name.mjs";
 import { normalizeExplicitIsoTimestamp } from "../evidence/observation.mjs";
 import { validWebObservationMode } from "../evidence/lookup-target.mjs";
 import { assertWorkspaceDeclaredVersion, assertWorkspaceInputGraph, assertWorkspacePortableVersion, ordinaryWorkspaceRecord } from "./hostile-input.mjs";
@@ -302,17 +302,42 @@ export function mergeWebsiteSnapshots(localRaw, incomingRaw) {
     const local = normalizeWebsiteSnapshotStore(localRaw).snapshots;
     const incoming = normalizeWebsiteSnapshotStore(incomingRaw).snapshots;
     const byId = new Map(local.map((item) => [item.id, item]));
+    const perDomain = new Map();
+    for (const item of local)
+        perDomain.set(item.domain, (perDomain.get(item.domain) ?? 0) + 1);
+    const byteLength = (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength;
+    let bytes = byteLength({ schema: WEBSITE_SNAPSHOT_SCHEMA, version: WEBSITE_SNAPSHOT_SCHEMA_VERSION, snapshots: local });
+    if (bytes > MAX_WEBSITE_SNAPSHOT_STORE_BYTES)
+        throw new Error('Existing website snapshots exceed the storage limit; no imported changes were applied.');
     let added = 0;
     let updated = 0;
+    const supplied = record(incomingRaw)?.snapshots;
+    let skipped = Array.isArray(supplied) ? supplied.length - incoming.length : 0;
+    let capacitySkipped = 0;
     for (const item of incoming) {
-        if (byId.has(item.id))
+        const existing = byId.get(item.id);
+        const targetCount = (perDomain.get(item.domain) ?? 0) - Number(existing?.domain === item.domain);
+        const delta = byteLength(item) - (existing ? byteLength(existing) : 0) + (!existing && byId.size ? 1 : 0);
+        if ((!existing && byId.size >= MAX_WEBSITE_SNAPSHOTS)
+            || targetCount >= MAX_WEBSITE_SNAPSHOTS_PER_DOMAIN
+            || bytes + delta > MAX_WEBSITE_SNAPSHOT_STORE_BYTES) {
+            skipped += 1;
+            capacitySkipped += 1;
+            continue;
+        }
+        if (existing) {
             updated += 1;
+            perDomain.set(existing.domain, (perDomain.get(existing.domain) ?? 1) - 1);
+        }
         else
             added += 1;
         byId.set(item.id, item);
+        perDomain.set(item.domain, (perDomain.get(item.domain) ?? 0) + 1);
+        bytes += delta;
     }
     const snapshots = normalizeWebsiteSnapshotStore([...byId.values()]).snapshots;
-    return { snapshots, added, updated, skipped: Math.max(0, incoming.length - added - updated) };
+    return { snapshots, added, updated, skipped,
+        reason: capacitySkipped ? `${capacitySkipped} imported website snapshots did not fit the remaining per-domain or total storage capacity. Existing local snapshots are preserved.` : '' };
 }
 const MAX_RECONCILED_WEBSITE_SOURCES = 16;
 const UNAVAILABLE_WEBSITE_SOURCE_STATES = new Set([

package/packages/workspace/workspace-archive-crypto.mjs

@@ -2,7 +2,7 @@
 // This protects a downloaded file while it is locked. It does not encrypt the
 // active IndexedDB workspace or defend an unlocked page from same-origin code.
 import { WORKSPACE_ARCHIVE_SCHEMA, WORKSPACE_ARCHIVE_VERSION, SUPPORTED_WORKSPACE_ARCHIVE_VERSIONS, isSupportedWorkspaceArchiveVersion, readWorkspaceArchive, } from "./workspace-archive.mjs";
-import { boundedJsonLimitsForBytes, parseBoundedJson } from "../../lib/bounded-json.mjs";
+import { boundedJsonLimitsForBytes, parseBoundedJson } from "../analysis/bounded-json.mjs";
 import { ENCRYPTED_WORKSPACE_ARCHIVE_SCHEMA, ENCRYPTED_WORKSPACE_ARCHIVE_VERSION, MAX_ENCRYPTED_WORKSPACE_ARCHIVE_BYTES, MAX_WORKSPACE_ARCHIVE_BYTES, MAX_WORKSPACE_ARCHIVE_PASSPHRASE_BYTES, MIN_WORKSPACE_ARCHIVE_PASSPHRASE_CHARACTERS, WORKSPACE_ARCHIVE_PBKDF2_ITERATIONS, } from "../contracts/case-portability.mjs";
 import { assertWorkspaceInputGraph } from "./hostile-input.mjs";
 import { AES_KEY_BITS, arrayBuffer, assertPassphrase, cryptoProvider, deriveArchiveKey } from "../evidence/passphrase-encryption.mjs";

package/packages/workspace/workspace-archive.mjs

@@ -1,7 +1,8 @@
 // Pure, bounded workspace archive composition. Existing typed store models remain the
 // authority for normalization and merge semantics; this module only packages
 // their portable contracts, verifies integrity, and previews conflicts.
-import { buildCaseExport, enforceStoreBudget, mergeCases, } from "../cases/case-model.mjs";
+import { buildCaseExport, enforceStoreBudget } from "../cases/case-storage-model.mjs";
+import { mergeCases } from "../cases/case-migration-model.mjs";
 import { assertBrandProfileStoreBudget, buildBrandProfileExport, mergeBrandProfiles, normalizeBrandProfileId, } from "./brand-profile-model.mjs";
 import { assertCampaignStoreBudget, buildCampaignExport, mergeCampaigns, } from "./campaign-model.mjs";
 import { normalizeExplicitIsoTimestamp } from "../evidence/observation.mjs";
@@ -584,15 +585,14 @@ function previewVerifiedWorkspaceArchive(archive, localInput, options) {
             results.push({
                 ...section,
                 status: 'ready',
-                reason: definition.id === 'settings' && selected && (result.skipped ?? 0) > 0
-                    ? result.reason ?? 'The imported workspace preference was skipped. Existing browser-local context is preserved.'
-                    : section.reason,
+                reason: selected && result.reason ? result.reason : section.reason,
                 added: result.added ?? 0,
                 updated: result.updated ?? 0,
                 skipped: result.skipped ?? 0,
                 pruned: result.pruned ?? 0,
                 brandProfileReferencesOmitted: result.brandProfileReferencesOmitted ?? 0,
                 authoredHistoryOmitted: result.authoredHistoryOmitted ?? 0,
+                evidenceHistoryOmitted: result.evidenceHistoryOmitted ?? 0,
                 selected,
                 normalizedSettings: result.settings || null,
             });
@@ -633,6 +633,7 @@ function previewVerifiedWorkspaceArchive(archive, localInput, options) {
                 pruned: 0,
                 brandProfileReferencesOmitted: 0,
                 authoredHistoryOmitted: 0,
+                evidenceHistoryOmitted: 0,
                 selected: false,
                 normalizedSettings: dependentId === 'settings' ? null : dependentSection.normalizedSettings ?? null,
             };