@sourcey/catalog-verifier 1.1.3 → 1.1.5

package/dist/contracts/company-standing/src/index.js

@@ -0,0 +1,114 @@
+import { DIGEST_PATTERN } from "provenry/primitives";
+import { z } from "zod";
+import { ENTITY_ID_PATTERN } from "../../../modules/catalog-primitives/src/index.js";
+import { catalogAuthoringUrlSchema } from "../../revisions/src/index.js";
+const digestSchema = z.string().regex(DIGEST_PATTERN);
+const instantSchema = z.iso.datetime({ offset: true });
+const entityIdSchema = z.string().regex(ENTITY_ID_PATTERN);
+export const domainNameSchema = z
+    .string()
+    .trim()
+    .toLowerCase()
+    .regex(/^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/u);
+const standingRouteSchema = z.enum([
+    "correction_required",
+    "repair_required",
+    "temporarily_unavailable",
+    "free_machine_review",
+    "human_verification_required",
+]);
+export const standingPolicySchema = z
+    .object({
+    policy_contract: z.literal("sourcey.standing-policy/v1alpha1"),
+    reach_provider: z.literal("ahrefs-domain-rating"),
+    reach_threshold_exclusive: z.number().int().min(0).max(100),
+    fallback_domain_age_days: z.number().int().positive(),
+    fallback_certificate_age_days: z.number().int().positive(),
+    cache_ttl_seconds: z.number().int().positive().max(86_400),
+})
+    .strict();
+export const standingEvidenceSchema = z
+    .object({
+    registrable_domain: domainNameSchema,
+    official_source_url: catalogAuthoringUrlSchema,
+    source: z
+        .object({
+        status: z.enum(["reachable", "unreachable", "invalid"]),
+        first_party: z.boolean(),
+        observed_at: instantSchema,
+        observation_digest: digestSchema,
+    })
+        .strict(),
+    catalog_identity: z.discriminatedUnion("status", [
+        z.object({ status: z.literal("unresolved") }).strict(),
+        z
+            .object({
+            status: z.literal("existing"),
+            entity_id: entityIdSchema,
+            entity_revision_digest: digestSchema,
+        })
+            .strict(),
+        z
+            .object({
+            status: z.literal("ambiguous"),
+            entity_ids: z.array(entityIdSchema).min(2),
+        })
+            .strict(),
+    ]),
+    reach: z.discriminatedUnion("status", [
+        z
+            .object({
+            status: z.literal("available"),
+            rating: z.number().min(0).max(100),
+            observed_at: instantSchema,
+            observation_digest: digestSchema,
+        })
+            .strict(),
+        z
+            .object({
+            status: z.literal("unavailable"),
+            reason: z.enum(["not_found", "provider_unavailable", "provider_rejected"]),
+            observed_at: instantSchema,
+        })
+            .strict(),
+    ]),
+    domain_age: z.discriminatedUnion("status", [
+        z
+            .object({ status: z.literal("available"), age_days: z.number().int().nonnegative() })
+            .strict(),
+        z.object({ status: z.literal("unavailable") }).strict(),
+    ]),
+    certificate_age: z.discriminatedUnion("status", [
+        z
+            .object({ status: z.literal("available"), age_days: z.number().int().nonnegative() })
+            .strict(),
+        z.object({ status: z.literal("unavailable") }).strict(),
+    ]),
+    mx: z.discriminatedUnion("status", [
+        z.object({ status: z.literal("available"), present: z.boolean() }).strict(),
+        z.object({ status: z.literal("unavailable") }).strict(),
+    ]),
+})
+    .strict();
+export const standingResultCoreSchema = z
+    .object({
+    result_contract: z.literal("sourcey.standing-result/v1alpha1"),
+    policy_digest: digestSchema,
+    evidence_digest: digestSchema,
+    registrable_domain: domainNameSchema,
+    official_source_url: catalogAuthoringUrlSchema,
+    route: standingRouteSchema,
+    reasons: z.array(z.string().trim().min(1).max(500)).min(1).max(12),
+    evaluated_at: instantSchema,
+    expires_at: instantSchema,
+})
+    .strict();
+export const standingResultSchema = standingResultCoreSchema
+    .safeExtend({ result_digest: digestSchema })
+    .strict();
+export function isFirstPartyUrlForDomain(value, domain) {
+    const hostname = new URL(value).hostname.toLowerCase().replace(/\.$/u, "");
+    const canonicalDomain = domainNameSchema.parse(domain);
+    return hostname === canonicalDomain || hostname.endsWith(`.${canonicalDomain}`);
+}
+//# sourceMappingURL=index.js.map

package/dist/contracts/company-standing/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../contracts/company-standing/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kDAAkD,CAAC;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;AACtD,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,WAAW,EAAE;KACb,KAAK,CAAC,wEAAwE,CAAC,CAAC;AAEnF,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC;IACjC,qBAAqB;IACrB,iBAAiB;IACjB,yBAAyB;IACzB,qBAAqB;IACrB,6BAA6B;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC;IAC9D,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACjD,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3D,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrD,6BAA6B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;CAC3D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,kBAAkB,EAAE,gBAAgB;IACpC,mBAAmB,EAAE,yBAAyB;IAC9C,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QACvD,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;QACxB,WAAW,EAAE,aAAa;QAC1B,kBAAkB,EAAE,YAAY;KACjC,CAAC;SACD,MAAM,EAAE;IACX,gBAAgB,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;QAC/C,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACtD,CAAC;aACE,MAAM,CAAC;YACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;YAC7B,SAAS,EAAE,cAAc;YACzB,sBAAsB,EAAE,YAAY;SACrC,CAAC;aACD,MAAM,EAAE;QACX,CAAC;aACE,MAAM,CAAC;YACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;YAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;SAC3C,CAAC;aACD,MAAM,EAAE;KACZ,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;QACpC,CAAC;aACE,MAAM,CAAC;YACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;YAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAClC,WAAW,EAAE,aAAa;YAC1B,kBAAkB,EAAE,YAAY;SACjC,CAAC;aACD,MAAM,EAAE;QACX,CAAC;aACE,MAAM,CAAC;YACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAChC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,sBAAsB,EAAE,mBAAmB,CAAC,CAAC;YAC1E,WAAW,EAAE,aAAa;SAC3B,CAAC;aACD,MAAM,EAAE;KACZ,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;QACzC,CAAC;aACE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aACpF,MAAM,EAAE;QACX,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACxD,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;QAC9C,CAAC;aACE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aACpF,MAAM,EAAE;QACX,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACxD,CAAC;IACF,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;QACjC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3E,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACxD,CAAC;CACH,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC;IAC9D,aAAa,EAAE,YAAY;IAC3B,eAAe,EAAE,YAAY;IAC7B,kBAAkB,EAAE,gBAAgB;IACpC,mBAAmB,EAAE,yBAAyB;IAC9C,KAAK,EAAE,mBAAmB;IAC1B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClE,YAAY,EAAE,aAAa;IAC3B,UAAU,EAAE,aAAa;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB;KACzD,UAAU,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;KAC3C,MAAM,EAAE,CAAC;AAMZ,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,MAAc;IACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,QAAQ,KAAK,eAAe,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;AAClF,CAAC"}

package/dist/contracts/company-verification/src/index.d.ts

@@ -0,0 +1,94 @@
+import { z } from "zod";
+export declare const reviewEvidenceBasisSchema: z.ZodObject<{
+    evidence_event_ids: z.ZodArray<z.ZodString>;
+    observation_ids: z.ZodArray<z.ZodString>;
+    retained_artifact_digests: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export declare const companyIdentityReviewDecisionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"passed">;
+    rationale: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    status: z.ZodLiteral<"failed">;
+    reason_code: z.ZodEnum<{
+        identity_mismatch: "identity_mismatch";
+        identity_unresolved: "identity_unresolved";
+        insufficient_evidence: "insufficient_evidence";
+    }>;
+    rationale: z.ZodString;
+    basis: z.ZodObject<{
+        evidence_event_ids: z.ZodArray<z.ZodString>;
+        observation_ids: z.ZodArray<z.ZodString>;
+        retained_artifact_digests: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+}, z.core.$strict>], "status">;
+/** The new-listing company target; a product review composes its own required fields. */
+export declare const companyVerificationNewListingTargetSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"new_listing">;
+    base_release_id: z.ZodString;
+    entity_id: z.ZodString;
+    submission_id: z.ZodString;
+    submission_payload_digest: z.ZodString;
+}, z.core.$strict>;
+/**
+ * One completed identity review's factual fields and binding checks. It is
+ * neither payment authority nor evidence admission. Fulfilment must read back
+ * the exact assurance against the current identity epoch before completing.
+ * Each product composes its exact target; this core binds only its company.
+ */
+export declare const completedCompanyReviewCoreSchema: z.ZodObject<{
+    order_id: z.ZodString;
+    funded_work_intent_id: z.ZodString;
+    funded_work_intent_digest: z.ZodString;
+    verification_case_id: z.ZodString;
+    target: z.ZodObject<{
+        entity_id: z.ZodString;
+    }, z.core.$strip>;
+    method_policy_digest: z.ZodString;
+    reviewer_id: z.ZodString;
+    reviewed_at: z.ZodISODateTime;
+    readback_release_id: z.ZodString;
+    work_outcome: z.ZodLiteral<"review_delivered">;
+    entity_identity: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        status: z.ZodLiteral<"passed">;
+        entity_id: z.ZodString;
+        assurance: z.ZodObject<{
+            status: z.ZodLiteral<"verified">;
+            assurance_id: z.ZodString;
+            verified_at: z.ZodISODateTime;
+            identity_epoch_digest: z.ZodString;
+            method_policy_digest: z.ZodString;
+            coverage_policy_digest: z.ZodString;
+            event_id: z.ZodString;
+            receipt_digest: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        status: z.ZodLiteral<"reused">;
+        entity_id: z.ZodString;
+        assurance: z.ZodObject<{
+            status: z.ZodLiteral<"verified">;
+            assurance_id: z.ZodString;
+            verified_at: z.ZodISODateTime;
+            identity_epoch_digest: z.ZodString;
+            method_policy_digest: z.ZodString;
+            coverage_policy_digest: z.ZodString;
+            event_id: z.ZodString;
+            receipt_digest: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        status: z.ZodLiteral<"failed">;
+        entity_id: z.ZodString;
+        reason_code: z.ZodEnum<{
+            identity_mismatch: "identity_mismatch";
+            identity_unresolved: "identity_unresolved";
+            insufficient_evidence: "insufficient_evidence";
+        }>;
+        rationale: z.ZodString;
+        basis: z.ZodObject<{
+            evidence_event_ids: z.ZodArray<z.ZodString>;
+            observation_ids: z.ZodArray<z.ZodString>;
+            retained_artifact_digests: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>], "status">;
+}, z.core.$strict>;
+export type CompletedCompanyReviewCore = z.infer<typeof completedCompanyReviewCoreSchema>;
+//# sourceMappingURL=index.d.ts.map

package/dist/contracts/company-verification/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../contracts/company-verification/src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,yBAAyB;;;;kBA+BlC,CAAC;AAQL,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;8BAe9C,CAAC;AA4BH,yFAAyF;AACzF,eAAO,MAAM,yCAAyC;;;;;;kBAQ3C,CAAC;AAEZ;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwCzC,CAAC;AACL,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC"}

package/dist/contracts/company-verification/src/index.js

@@ -0,0 +1,138 @@
+import { DIGEST_PATTERN } from "provenry/primitives";
+import { z } from "zod";
+import { ENTITY_ID_PATTERN } from "../../../modules/catalog-primitives/src/index.js";
+import { entityIdentityAssuranceSchema } from "../../assurance/src/index.js";
+import { fundedWorkIntentEnvelopeSchema } from "../../funded-work/src/index.js";
+const digestSchema = z.string().regex(DIGEST_PATTERN);
+const entityIdSchema = z.string().regex(ENTITY_ID_PATTERN);
+const instantSchema = z.iso.datetime({ offset: true });
+export const reviewEvidenceBasisSchema = z
+    .object({
+    evidence_event_ids: z.array(digestSchema),
+    observation_ids: z.array(digestSchema),
+    retained_artifact_digests: z.array(digestSchema).default([]),
+})
+    .strict()
+    .superRefine((basis, context) => {
+    if (basis.evidence_event_ids.length +
+        basis.observation_ids.length +
+        basis.retained_artifact_digests.length ===
+        0) {
+        context.addIssue({
+            code: "custom",
+            message: "A review outcome requires at least one retained evidence or observation ID.",
+        });
+    }
+    for (const [field, values] of Object.entries(basis)) {
+        if (new Set(values).size !== values.length ||
+            [...values].sort().some((v, i) => v !== values[i])) {
+            context.addIssue({
+                code: "custom",
+                path: [field],
+                message: "Review basis IDs must be unique and canonically sorted.",
+            });
+        }
+    }
+});
+const companyIdentityFailureReasonSchema = z.enum([
+    "identity_mismatch",
+    "identity_unresolved",
+    "insufficient_evidence",
+]);
+export const companyIdentityReviewDecisionSchema = z.discriminatedUnion("status", [
+    z
+        .object({
+        status: z.literal("passed"),
+        rationale: z.string().trim().min(1).max(2_000),
+    })
+        .strict(),
+    z
+        .object({
+        status: z.literal("failed"),
+        reason_code: companyIdentityFailureReasonSchema,
+        rationale: z.string().trim().min(1).max(2_000),
+        basis: reviewEvidenceBasisSchema,
+    })
+        .strict(),
+]);
+const companyIdentityReviewOutcomeSchema = z.discriminatedUnion("status", [
+    z
+        .object({
+        status: z.literal("passed"),
+        entity_id: entityIdSchema,
+        assurance: entityIdentityAssuranceSchema,
+    })
+        .strict(),
+    z
+        .object({
+        status: z.literal("reused"),
+        entity_id: entityIdSchema,
+        assurance: entityIdentityAssuranceSchema,
+    })
+        .strict(),
+    z
+        .object({
+        status: z.literal("failed"),
+        entity_id: entityIdSchema,
+        reason_code: companyIdentityFailureReasonSchema,
+        rationale: z.string().trim().min(1).max(2_000),
+        basis: reviewEvidenceBasisSchema,
+    })
+        .strict(),
+]);
+/** The new-listing company target; a product review composes its own required fields. */
+export const companyVerificationNewListingTargetSchema = z
+    .object({
+    kind: z.literal("new_listing"),
+    base_release_id: digestSchema,
+    entity_id: entityIdSchema,
+    submission_id: z.string().regex(/^sub_[a-f0-9]{64}$/u),
+    submission_payload_digest: digestSchema,
+})
+    .strict();
+/**
+ * One completed identity review's factual fields and binding checks. It is
+ * neither payment authority nor evidence admission. Fulfilment must read back
+ * the exact assurance against the current identity epoch before completing.
+ * Each product composes its exact target; this core binds only its company.
+ */
+export const completedCompanyReviewCoreSchema = z
+    .object({
+    order_id: z.string().regex(/^ord_[a-f0-9]{64}$/u),
+    funded_work_intent_id: fundedWorkIntentEnvelopeSchema.shape.intent_id,
+    funded_work_intent_digest: digestSchema,
+    verification_case_id: z.string().regex(/^hvc_[a-f0-9]{64}$/u),
+    target: z.object({ entity_id: entityIdSchema }),
+    method_policy_digest: digestSchema,
+    reviewer_id: z.string().trim().min(1).max(256),
+    reviewed_at: instantSchema,
+    readback_release_id: digestSchema,
+    work_outcome: z.literal("review_delivered"),
+    entity_identity: companyIdentityReviewOutcomeSchema,
+})
+    .strict()
+    .superRefine((receipt, context) => {
+    const identity = receipt.entity_identity;
+    if (identity.entity_id !== receipt.target.entity_id) {
+        context.addIssue({
+            code: "custom",
+            path: ["target"],
+            message: "The identity outcome must bind the exact Human Verification target.",
+        });
+    }
+    if (identity.status === "failed")
+        return;
+    if (identity.assurance.method_policy_digest !== receipt.method_policy_digest ||
+        (identity.status === "passed"
+            ? identity.assurance.verified_at !== receipt.reviewed_at
+            : Date.parse(identity.assurance.verified_at) > Date.parse(receipt.reviewed_at))) {
+        context.addIssue({
+            code: "custom",
+            path: ["entity_identity", "assurance"],
+            message: identity.status === "passed"
+                ? "A newly passed Entity identity assurance must use this review method and timestamp."
+                : "A reused Entity identity assurance must use this review method and cannot postdate this review.",
+        });
+    }
+});
+//# sourceMappingURL=index.js.map

package/dist/contracts/company-verification/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../contracts/company-verification/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kDAAkD,CAAC;AACrF,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAEhF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;AACtD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAC3D,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAEvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IACzC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IACtC,yBAAyB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IACE,KAAK,CAAC,kBAAkB,CAAC,MAAM;QAC7B,KAAK,CAAC,eAAe,CAAC,MAAM;QAC5B,KAAK,CAAC,yBAAyB,CAAC,MAAM;QACxC,CAAC,EACD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,6EAA6E;SACvF,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,IACE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;YACtC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,EAClD,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,CAAC;gBACb,OAAO,EAAE,yDAAyD;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,kCAAkC,GAAG,CAAC,CAAC,IAAI,CAAC;IAChD,mBAAmB;IACnB,qBAAqB;IACrB,uBAAuB;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAChF,CAAC;SACE,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;KAC/C,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3B,WAAW,EAAE,kCAAkC;QAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9C,KAAK,EAAE,yBAAyB;KACjC,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,kCAAkC,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACxE,CAAC;SACE,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3B,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,6BAA6B;KACzC,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3B,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,6BAA6B;KACzC,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3B,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,kCAAkC;QAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9C,KAAK,EAAE,yBAAyB;KACjC,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,yFAAyF;AACzF,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC;KACvD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9B,eAAe,EAAE,YAAY;IAC7B,SAAS,EAAE,cAAc;IACzB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACtD,yBAAyB,EAAE,YAAY;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC9C,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACjD,qBAAqB,EAAE,8BAA8B,CAAC,KAAK,CAAC,SAAS;IACrE,yBAAyB,EAAE,YAAY;IACvC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC7D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC/C,oBAAoB,EAAE,YAAY;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9C,WAAW,EAAE,aAAa;IAC1B,mBAAmB,EAAE,YAAY;IACjC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC3C,eAAe,EAAE,kCAAkC;CACpD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;IACzC,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,OAAO,EAAE,qEAAqE;SAC/E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO;IACzC,IACE,QAAQ,CAAC,SAAS,CAAC,oBAAoB,KAAK,OAAO,CAAC,oBAAoB;QACxE,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAC3B,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;YACxD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EACjF,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,WAAW,CAAC;YACtC,OAAO,EACL,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAC1B,CAAC,CAAC,qFAAqF;gBACvF,CAAC,CAAC,iGAAiG;SACxG,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}