@zanii/kyb 0.1.1 → 0.1.2

package/README.md

@@ -54,3 +54,7 @@ solvent, or is lawfully named. Real KYB (registry checks, sanctions, UBO) is an
 off-protocol process this package makes *auditable*: the attestation is signed and
 permanent, so a false claim is attributable forever. We verify domain control; we
 never certify companies — the `@zanii/credentials` posture, unchanged.
+
+## Changelog
+
+- **0.1.2** — Entity checks: ISO 17442 `isValidLei`, `checkRegistry` against GLEIF or a company register you supply (failing closed), committed beneficial-ownership declarations (`declareUbo` / `verifyUboReveal`), `signatoryAuthority` / `mayAuthorise`, DNS TXT bindings, `lifecycleEvent` / `entityStatus`, signed `groupStructure`s, `verifyLicence` against a regulator's register, reusable `kybCertificate`s and `domainDocChanges` monitoring.

package/dist/entity.d.ts

@@ -0,0 +1,183 @@
+import { type SignedObject } from '@zanii/core';
+import { type FetchLike, type LegalEntity, type OwnerDoc } from './index.js';
+/** ISO 17442: 20 characters, the last two check digits by ISO 7064 mod 97-10. */
+export declare function isValidLei(lei: string): boolean;
+/** Check an entity against a registry or GLEIF record you fetch: name (normalised) and, if given, jurisdiction must agree. */
+export declare function checkRegistry(entity: LegalEntity & {
+    lei?: string;
+}, lookup: (id: string) => Promise<{
+    name: string;
+    jurisdiction?: string;
+    status?: string;
+} | null>): Promise<{
+    ok: boolean;
+    reasons: string[];
+}>;
+export type UboDeclaration = SignedObject<{
+    v: 1;
+    type: 'kyb.ubo';
+    entity: string;
+    owners: Array<{
+        commitment: string;
+        share_pct: number;
+    }>;
+    ts: string;
+}>;
+/** Beneficial owners declared as salted commitments with their shares; reveal one owner to one verifier later. */
+export declare function declareUbo(entity: string, owners: Array<{
+    name: string;
+    share_pct: number;
+}>, ownerPrivateKey: Uint8Array, ts?: string): {
+    declaration: SignedObject<{
+        v: 1;
+        type: "kyb.ubo";
+        entity: string;
+        owners: {
+            commitment: string;
+            share_pct: number;
+        }[];
+        ts: string;
+    }>;
+    reveal: (i: number) => {
+        name: string;
+        salt: string;
+        index: number;
+    };
+};
+/** Check a revealed owner against the signed declaration. */
+export declare function verifyUboReveal(d: UboDeclaration, reveal: {
+    name: string;
+    salt: string;
+    index: number;
+}): boolean;
+export type SignatoryAuthority = SignedObject<{
+    v: 1;
+    type: 'kyb.signatory';
+    entity: string;
+    person: string;
+    scopes: string[];
+    limit_minor?: string;
+    exp: string;
+    ts: string;
+}>;
+/** The entity's owner key authorises a person to grant delegations on its behalf, within scopes and until a date. */
+export declare function signatoryAuthority(input: {
+    entity: string;
+    person: string;
+    scopes: string[];
+    limit_minor?: string;
+    exp: string;
+    ts?: string;
+}, ownerPrivateKey: Uint8Array): SignatoryAuthority;
+export declare function mayAuthorise(a: SignatoryAuthority, ownerDid: string, person: string, scope: string, now?: string): boolean;
+/**
+ * The domain's DNS TXT record names the owner DID (`zanii-owner=did:key:...`). Use a
+ * DNSSEC-validating resolver for `resolveTxt`; this checks what it returns.
+ */
+export declare function dnsTxtBinding(domain: string, did: string, resolveTxt: (name: string) => Promise<string[][]>): Promise<{
+    ok: boolean;
+    records: string[];
+    error?: undefined;
+} | {
+    ok: boolean;
+    records: string[];
+    error: string;
+}>;
+export type LifecycleEvent = SignedObject<{
+    v: 1;
+    type: 'kyb.lifecycle';
+    entity: string;
+    event: 'renamed' | 'merged' | 'acquired' | 'dissolved';
+    successor?: string;
+    ts: string;
+}>;
+export declare function lifecycleEvent(input: {
+    entity: string;
+    event: LifecycleEvent['event'];
+    successor?: string;
+    ts?: string;
+}, ownerPrivateKey: Uint8Array): LifecycleEvent;
+/** The entity's current standing after its lifecycle events: active, succeeded by another, or dissolved. */
+export declare function entityStatus(events: LifecycleEvent[], ownerDid: string): {
+    status: "active";
+    since?: undefined;
+    successor?: undefined;
+} | {
+    status: "dissolved";
+    since: string;
+    successor?: undefined;
+} | {
+    status: "succeeded";
+    successor: string | null;
+    since: string;
+};
+export type GroupStructure = SignedObject<{
+    v: 1;
+    type: 'kyb.group';
+    parent: string;
+    subsidiaries: Array<{
+        name: string;
+        domain?: string;
+        ownership_pct: number;
+    }>;
+    ts: string;
+}>;
+export declare function groupStructure(input: {
+    parent: string;
+    subsidiaries: Array<{
+        name: string;
+        domain?: string;
+        ownership_pct: number;
+    }>;
+    ts?: string;
+}, parentPrivateKey: Uint8Array): GroupStructure;
+/** Is this domain a controlled (> 50%) subsidiary in the signed group structure? */
+export declare function isControlledSubsidiary(g: GroupStructure, domain: string): boolean;
+/** A licence claim checked against the regulator's register you supply. */
+export declare function verifyLicence(licence: {
+    regulator: string;
+    number: string;
+    activity: string;
+    entity: string;
+}, register: (regulator: string, number: string) => Promise<{
+    holder: string;
+    activities: string[];
+    exp?: string;
+} | null>, now?: string): Promise<{
+    ok: boolean;
+    reason: string;
+} | {
+    ok: boolean;
+    reason?: undefined;
+}>;
+export type KybCertificate = SignedObject<{
+    v: 1;
+    type: 'kyb.certificate';
+    ownerDid: string;
+    entity: LegalEntity;
+    checks: string[];
+    validUntil: string;
+    ts: string;
+}>;
+/** A verifier's signed, reusable KYB result, so the next counterparty need not repeat it. */
+export declare function kybCertificate(input: {
+    ownerDid: string;
+    entity: LegalEntity;
+    checks: string[];
+    validDays: number;
+    ts?: string;
+}, verifierPrivateKey: Uint8Array): KybCertificate;
+export declare function acceptKybCertificate(c: KybCertificate, opts: {
+    ownerDid: string;
+    trustedVerifiers: string[];
+    now?: string;
+}): boolean;
+/** Re-fetch a domain's owner document and report what changed since the last check. */
+export declare function domainDocChanges(domain: string, previous: OwnerDoc | null, fetchImpl?: FetchLike): Promise<{
+    current: null;
+    changes: string[];
+} | {
+    current: OwnerDoc;
+    changes: string[];
+}>;
+//# sourceMappingURL=entity.d.ts.map

package/dist/entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../src/entity.ts"],"names":[],"mappings":"AAUA,OAAO,EAA2C,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAmB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE9F,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAM/C;AAID,8HAA8H;AAC9H,wBAAsB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC;;;GAiB3K;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE3J,kHAAkH;AAClH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,SAA2B;;;;;;;;;;;gBAMrH,MAAM;;;;;EACzC;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAGjH;AAED,MAAM,MAAM,kBAAkB,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEhL,qHAAqH;AACrH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,eAAe,EAAE,UAAU,GAAG,kBAAkB,CAE/L;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAA2B,GAAG,OAAO,CAE5I;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;;;;;;aAK3E,MAAM,EAAE;;GAE9C;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEnL,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,eAAe,EAAE,UAAU,GAAG,cAAc,CAEtK;AAED,4GAA4G;AAC5G,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM;;;;;;;;;;;;EAOtE;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAElL,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,gBAAgB,EAAE,UAAU,GAAG,cAAc,CAElM;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAEjF;AAED,2EAA2E;AAC3E,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,EAAE,GAAG,SAA2B;;;;;;GAW5Q;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEtK,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,kBAAkB,EAAE,UAAU,GAAG,cAAc,CAGjL;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAErI;AAED,uFAAuF;AACvF,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE,SAAS;;;;;;GAUtG"}

package/dist/entity.js

@@ -0,0 +1,151 @@
+/**
+ * Know-your-business beyond the domain binding: LEI checks and GLEIF lookups, company
+ * registry comparison, committed beneficial-ownership declarations, signatory authority,
+ * DNS TXT bindings, entity lifecycle events, group structures, licences, reusable KYB
+ * certificates and continuous monitoring of the published owner document.
+ *
+ * Zanii verifies signatures and consistency; registries, GLEIF, DNS and regulators remain
+ * the sources of truth, reached through functions you supply.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+import { jcsHash, signObject, verifySignedObject } from '@zanii/core';
+import { resolveOwnerDoc } from './index.js';
+/** ISO 17442: 20 characters, the last two check digits by ISO 7064 mod 97-10. */
+export function isValidLei(lei) {
+    if (!/^[A-Z0-9]{18}\d{2}$/.test(lei))
+        return false;
+    const digits = lei.split('').map((c) => (/\d/.test(c) ? c : String(c.charCodeAt(0) - 55))).join('');
+    let rem = 0;
+    for (const d of digits)
+        rem = (rem * 10 + Number(d)) % 97;
+    return rem === 1;
+}
+const norm = (s) => s.toLowerCase().replace(/\./g, '').normalize('NFKD').replace(/[̀-ͯ]/g, '').replace(/\b(llc|ltd|inc|plc|fz-?llc|fzco|fze|pjsc|llp|co|limited|company)\b\.?/g, '').replace(/[^a-z0-9؀-ۿ]+/g, ' ').trim();
+/** Check an entity against a registry or GLEIF record you fetch: name (normalised) and, if given, jurisdiction must agree. */
+export async function checkRegistry(entity, lookup) {
+    const id = entity.lei ?? entity.registration;
+    if (!id)
+        return { ok: false, reasons: ['no LEI or registration number to look up'] };
+    if (entity.lei && !isValidLei(entity.lei))
+        return { ok: false, reasons: ['LEI checksum is invalid'] };
+    try {
+        const rec = await lookup(id);
+        const reasons = [];
+        if (!rec)
+            reasons.push('not found in the registry');
+        else {
+            if (norm(rec.name) !== norm(entity.name))
+                reasons.push(`registry name "${rec.name}" does not match "${entity.name}"`);
+            if (entity.jurisdiction && rec.jurisdiction && rec.jurisdiction !== entity.jurisdiction)
+                reasons.push(`jurisdiction ${rec.jurisdiction} differs`);
+            if (rec.status && !/^(active|issued)$/i.test(rec.status))
+                reasons.push(`registry status is ${rec.status}`);
+        }
+        return { ok: reasons.length === 0, reasons };
+    }
+    catch (err) {
+        return { ok: false, reasons: [`registry unavailable: ${err.message}`] };
+    }
+}
+/** Beneficial owners declared as salted commitments with their shares; reveal one owner to one verifier later. */
+export function declareUbo(entity, owners, ownerPrivateKey, ts = new Date().toISOString()) {
+    const total = owners.reduce((s, o) => s + o.share_pct, 0);
+    if (total > 100.0001)
+        throw new Error(`kyb: shares add up to ${total}%`);
+    const salts = owners.map(() => randomBytes(16).toString('hex'));
+    const commit = (name, salt) => 'sha256:' + createHash('sha256').update(`${salt}\u0000${name.trim().toLowerCase()}`).digest('hex');
+    const declaration = signObject({ v: 1, type: 'kyb.ubo', entity, owners: owners.map((o, i) => ({ commitment: commit(o.name, salts[i]), share_pct: o.share_pct })), ts }, ownerPrivateKey);
+    return { declaration, reveal: (i) => ({ name: owners[i].name, salt: salts[i], index: i }) };
+}
+/** Check a revealed owner against the signed declaration. */
+export function verifyUboReveal(d, reveal) {
+    const c = 'sha256:' + createHash('sha256').update(`${reveal.salt}\u0000${reveal.name.trim().toLowerCase()}`).digest('hex');
+    return verifySignedObject(d) && d.owners[reveal.index]?.commitment === c;
+}
+/** The entity's owner key authorises a person to grant delegations on its behalf, within scopes and until a date. */
+export function signatoryAuthority(input, ownerPrivateKey) {
+    return signObject({ v: 1, type: 'kyb.signatory', ...input, ts: input.ts ?? new Date().toISOString() }, ownerPrivateKey);
+}
+export function mayAuthorise(a, ownerDid, person, scope, now = new Date().toISOString()) {
+    return verifySignedObject(a) && a.signer === ownerDid && a.person === person && now <= a.exp && a.scopes.some((s) => s === '*' || s === scope || (s.endsWith('.*') && scope.startsWith(s.slice(0, -1))));
+}
+/**
+ * The domain's DNS TXT record names the owner DID (`zanii-owner=did:key:...`). Use a
+ * DNSSEC-validating resolver for `resolveTxt`; this checks what it returns.
+ */
+export async function dnsTxtBinding(domain, did, resolveTxt) {
+    try {
+        const records = (await resolveTxt(`_zanii.${domain}`)).map((r) => r.join(''));
+        return { ok: records.includes(`zanii-owner=${did}`), records };
+    }
+    catch (err) {
+        return { ok: false, records: [], error: err.message };
+    }
+}
+export function lifecycleEvent(input, ownerPrivateKey) {
+    return signObject({ v: 1, type: 'kyb.lifecycle', ...input, ts: input.ts ?? new Date().toISOString() }, ownerPrivateKey);
+}
+/** The entity's current standing after its lifecycle events: active, succeeded by another, or dissolved. */
+export function entityStatus(events, ownerDid) {
+    const valid = events.filter((e) => verifySignedObject(e) && e.signer === ownerDid).sort((a, b) => a.ts.localeCompare(b.ts));
+    const last = valid.at(-1);
+    if (!last)
+        return { status: 'active' };
+    if (last.event === 'dissolved')
+        return { status: 'dissolved', since: last.ts };
+    if (last.event === 'merged' || last.event === 'acquired')
+        return { status: 'succeeded', successor: last.successor ?? null, since: last.ts };
+    return { status: 'active' };
+}
+export function groupStructure(input, parentPrivateKey) {
+    return signObject({ v: 1, type: 'kyb.group', ...input, ts: input.ts ?? new Date().toISOString() }, parentPrivateKey);
+}
+/** Is this domain a controlled (> 50%) subsidiary in the signed group structure? */
+export function isControlledSubsidiary(g, domain) {
+    return verifySignedObject(g) && g.subsidiaries.some((s) => s.domain === domain && s.ownership_pct > 50);
+}
+/** A licence claim checked against the regulator's register you supply. */
+export async function verifyLicence(licence, register, now = new Date().toISOString()) {
+    try {
+        const r = await register(licence.regulator, licence.number);
+        if (!r)
+            return { ok: false, reason: 'licence not found' };
+        if (norm(r.holder) !== norm(licence.entity))
+            return { ok: false, reason: `licence is held by ${r.holder}` };
+        if (!r.activities.includes(licence.activity))
+            return { ok: false, reason: `licence does not cover ${licence.activity}` };
+        if (r.exp && r.exp < now)
+            return { ok: false, reason: `licence expired ${r.exp}` };
+        return { ok: true };
+    }
+    catch (err) {
+        return { ok: false, reason: `register unavailable: ${err.message}` };
+    }
+}
+/** A verifier's signed, reusable KYB result, so the next counterparty need not repeat it. */
+export function kybCertificate(input, verifierPrivateKey) {
+    const ts = input.ts ?? new Date().toISOString();
+    return signObject({ v: 1, type: 'kyb.certificate', ownerDid: input.ownerDid, entity: input.entity, checks: input.checks, validUntil: new Date(Date.parse(ts) + input.validDays * 86_400_000).toISOString(), ts }, verifierPrivateKey);
+}
+export function acceptKybCertificate(c, opts) {
+    return verifySignedObject(c) && c.ownerDid === opts.ownerDid && opts.trustedVerifiers.includes(c.signer) && (opts.now ?? new Date().toISOString()) <= c.validUntil;
+}
+/** Re-fetch a domain's owner document and report what changed since the last check. */
+export async function domainDocChanges(domain, previous, fetchImpl) {
+    const current = await resolveOwnerDoc(domain, { fetchImpl });
+    if (!current)
+        return { current: null, changes: previous ? ['owner document is no longer published'] : [] };
+    const changes = [];
+    if (previous) {
+        for (const d of previous.owner_dids)
+            if (!current.owner_dids.includes(d))
+                changes.push(`owner DID ${d} removed`);
+        for (const d of current.owner_dids)
+            if (!previous.owner_dids.includes(d))
+                changes.push(`owner DID ${d} added`);
+        if (jcsHash(previous.entity) !== jcsHash(current.entity))
+            changes.push('legal entity details changed');
+    }
+    return { current, changes };
+}
+//# sourceMappingURL=entity.js.map

package/dist/entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity.js","sourceRoot":"","sources":["../src/entity.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAqB,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,eAAe,EAAmD,MAAM,YAAY,CAAC;AAE9F,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpG,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1D,OAAO,GAAG,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,wEAAwE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAEnO,8HAA8H;AAC9H,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAsC,EAAE,MAAgG;IAC1K,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC;IAC7C,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,0CAA0C,CAAC,EAAE,CAAC;IACrF,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,CAAC;IACtG,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;aAC/C,CAAC;YACJ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,IAAI,qBAAqB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;YACtH,IAAI,MAAM,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;gBAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,YAAY,UAAU,CAAC,CAAC;YAClJ,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,yBAA0B,GAAa,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;AACH,CAAC;AAID,kHAAkH;AAClH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,MAAkD,EAAE,eAA2B,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACvJ,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,GAAG,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,GAAG,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClJ,MAAM,WAAW,GAAG,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,SAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;IAC5M,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AACxG,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,CAAiB,EAAE,MAAqD;IACtG,MAAM,CAAC,GAAG,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3H,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,KAAK,CAAC,CAAC;AAC3E,CAAC;AAID,qHAAqH;AACrH,MAAM,UAAU,kBAAkB,CAAC,KAA2G,EAAE,eAA2B;IACzK,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,eAAwB,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;AAC5I,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAqB,EAAE,QAAgB,EAAE,MAAc,EAAE,KAAa,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACjI,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3M,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,GAAW,EAAE,UAAiD;IAChH,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,MAAM,UAAU,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,eAAe,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAc,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IAC/E,CAAC;AACH,CAAC;AAID,MAAM,UAAU,cAAc,CAAC,KAA0F,EAAE,eAA2B;IACpJ,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,eAAwB,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;AAC5I,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,YAAY,CAAC,MAAwB,EAAE,QAAgB;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC;IAChD,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,WAAoB,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACxF,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,WAAoB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACrJ,OAAO,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC;AACvC,CAAC;AAID,MAAM,UAAU,cAAc,CAAC,KAAqH,EAAE,gBAA4B;IAChL,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,WAAoB,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,gBAAgB,CAAC,CAAC;AACzI,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,CAAiB,EAAE,MAAc;IACtE,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;AAC1G,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgF,EAAE,QAAuH,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAC3Q,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5G,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;QACzH,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,GAAG,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAA0B,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAClF,CAAC;AACH,CAAC;AAID,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,KAAkG,EAAE,kBAA8B;IAC/J,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,iBAA0B,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAC1P,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,CAAiB,EAAE,IAAoE;IAC1H,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;AACrK,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,QAAyB,EAAE,SAAqB;IACrG,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC3G,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,UAAU;YAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACjH,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU;YAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/G,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAe,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,MAAe,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/index.d.ts

@@ -59,4 +59,5 @@ export declare function verifyOwnerBinding(attestation: OwnerAttestation, doc: O
 export declare function fetchAndVerifyOwner(attestation: OwnerAttestation, opts?: {
     fetchImpl?: FetchLike;
 }): Promise<KybCheck>;
+export * from './entity.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,yDAAyD;AACzD,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,uGAAuG;AACvG,MAAM,WAAW,QAAQ;IACvB,CAAC,EAAE,CAAC,CAAC;IACL,MAAM,EAAE,WAAW,CAAC;IACpB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAC/B,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,iBAAiB,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,oDAAoD;AACpD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACxE,eAAe,EAAE,UAAU,GAC1B,gBAAgB,CAelB;AAED,4DAA4D;AAC5D,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAa/E;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAE3D;AAED,oHAAoH;AACpH,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAepH;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oDAAoD;IACpD,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,GAAG,QAAQ,CAyBhG;AAED,iFAAiF;AACjF,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,gBAAgB,EAC7B,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GACnC,OAAO,CAAC,QAAQ,CAAC,CAMnB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,yDAAyD;AACzD,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,uGAAuG;AACvG,MAAM,WAAW,QAAQ;IACvB,CAAC,EAAE,CAAC,CAAC;IACL,MAAM,EAAE,WAAW,CAAC;IACpB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAC/B,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,iBAAiB,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,oDAAoD;AACpD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACxE,eAAe,EAAE,UAAU,GAC1B,gBAAgB,CAelB;AAED,4DAA4D;AAC5D,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAa/E;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAE3D;AAED,oHAAoH;AACpH,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAepH;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oDAAoD;IACpD,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,GAAG,QAAQ,CAyBhG;AAED,iFAAiF;AACjF,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,gBAAgB,EAC7B,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GACnC,OAAO,CAAC,QAAQ,CAAC,CAMnB;AACD,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -135,4 +135,5 @@ export async function fetchAndVerifyOwner(attestation, opts = {}) {
     const doc = await resolveOwnerDoc(attestation.domain, opts);
     return verifyOwnerBinding(attestation, doc);
 }
+export * from './entity.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAoCxE,oDAAoD;AACpD,MAAM,UAAU,qBAAqB,CACnC,MAAwE,EACxE,eAA2B;IAE3B,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG;QACf,CAAC,EAAE,CAAU;QACb,IAAI,EAAE,iBAA0B;QAChC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,EAAE,EAAE,MAAM,CAAC,EAAE;KACd,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;IACpE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,WAAW,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,sBAAsB,CAAC,CAA+B;IACpE,MAAM,CAAC,GAAG,CAAC,IAAK,EAAuB,CAAC;IACxC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI;QAAE,OAAO,KAAK,CAAC;IACtG,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,QAA8C,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAmB;IACjD,OAAO,OAAO,CAAC,CAAuC,CAAC,CAAC;AAC1D,CAAC;AAED,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,OAAkC,EAAE;IACxF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,CAAe,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,IAAI,+BAA+B,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAa,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,+EAA+E;IAC/E,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,GAAG,CAAC;AACb,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAA6B,EAAE,GAAoB;IACpF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,8CAA8C,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACjH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,2EAA2E,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAClJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,qBAAqB,WAAW,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,4BAA4B,WAAW,CAAC,GAAG,oEAAoE,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,sCAAsC,GAAG,CAAC,MAAM,CAAC,IAAI,oBAAoB,WAAW,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IACpH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,cAAc,CAAU,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,UAAU,KAAK,2BAA2B,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACjG,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAA6B,EAC7B,OAAkC,EAAE;IAEpC,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,8CAA8C,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAoCxE,oDAAoD;AACpD,MAAM,UAAU,qBAAqB,CACnC,MAAwE,EACxE,eAA2B;IAE3B,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG;QACf,CAAC,EAAE,CAAU;QACb,IAAI,EAAE,iBAA0B;QAChC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,EAAE,EAAE,MAAM,CAAC,EAAE;KACd,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;IACpE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,WAAW,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,sBAAsB,CAAC,CAA+B;IACpE,MAAM,CAAC,GAAG,CAAC,IAAK,EAAuB,CAAC;IACxC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI;QAAE,OAAO,KAAK,CAAC;IACtG,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,QAA8C,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAmB;IACjD,OAAO,OAAO,CAAC,CAAuC,CAAC,CAAC;AAC1D,CAAC;AAED,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,OAAkC,EAAE;IACxF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,CAAe,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,WAAW,IAAI,+BAA+B,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAa,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,+EAA+E;IAC/E,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,GAAG,CAAC;AACb,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAA6B,EAAE,GAAoB;IACpF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,8CAA8C,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACjH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,2EAA2E,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAClJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,qBAAqB,WAAW,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,4BAA4B,WAAW,CAAC,GAAG,oEAAoE,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,sCAAsC,GAAG,CAAC,MAAM,CAAC,IAAI,oBAAoB,WAAW,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IACpH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,cAAc,CAAU,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,UAAU,KAAK,2BAA2B,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACjG,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAA6B,EAC7B,OAAkC,EAAE;IAEpC,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,8CAA8C,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AACD,cAAc,aAAa,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zanii/kyb",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Owner-to-legal-entity binding - the missing link between an owner did:key and who is legally on the hook. Two-way: the company serves .well-known/zanii-owner.json on its own domain AND the owner signs an attestation naming that domain and entity; verification requires both. Zanii verifies domain control, never corporate registration - the claim becomes verifiable and attributable, not officially certified.",
   "license": "Apache-2.0",
   "homepage": "https://ledger.zanii.agency",
@@ -33,7 +33,7 @@
   "dependencies": {
     "@noble/curves": "^1.8.1",
     "@noble/hashes": "^1.7.1",
-    "@zanii/core": "^0.5.2"
+    "@zanii/core": "^0.5.4"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",

package/src/entity.ts

@@ -0,0 +1,151 @@
+/**
+ * Know-your-business beyond the domain binding: LEI checks and GLEIF lookups, company
+ * registry comparison, committed beneficial-ownership declarations, signatory authority,
+ * DNS TXT bindings, entity lifecycle events, group structures, licences, reusable KYB
+ * certificates and continuous monitoring of the published owner document.
+ *
+ * Zanii verifies signatures and consistency; registries, GLEIF, DNS and regulators remain
+ * the sources of truth, reached through functions you supply.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+import { jcsHash, signObject, verifySignedObject, type SignedObject } from '@zanii/core';
+import { resolveOwnerDoc, type FetchLike, type LegalEntity, type OwnerDoc } from './index.js';
+
+/** ISO 17442: 20 characters, the last two check digits by ISO 7064 mod 97-10. */
+export function isValidLei(lei: string): boolean {
+  if (!/^[A-Z0-9]{18}\d{2}$/.test(lei)) return false;
+  const digits = lei.split('').map((c) => (/\d/.test(c) ? c : String(c.charCodeAt(0) - 55))).join('');
+  let rem = 0;
+  for (const d of digits) rem = (rem * 10 + Number(d)) % 97;
+  return rem === 1;
+}
+
+const norm = (s: string) => s.toLowerCase().replace(/\./g, '').normalize('NFKD').replace(/[̀-ͯ]/g, '').replace(/\b(llc|ltd|inc|plc|fz-?llc|fzco|fze|pjsc|llp|co|limited|company)\b\.?/g, '').replace(/[^a-z0-9؀-ۿ]+/g, ' ').trim();
+
+/** Check an entity against a registry or GLEIF record you fetch: name (normalised) and, if given, jurisdiction must agree. */
+export async function checkRegistry(entity: LegalEntity & { lei?: string }, lookup: (id: string) => Promise<{ name: string; jurisdiction?: string; status?: string } | null>) {
+  const id = entity.lei ?? entity.registration;
+  if (!id) return { ok: false, reasons: ['no LEI or registration number to look up'] };
+  if (entity.lei && !isValidLei(entity.lei)) return { ok: false, reasons: ['LEI checksum is invalid'] };
+  try {
+    const rec = await lookup(id);
+    const reasons: string[] = [];
+    if (!rec) reasons.push('not found in the registry');
+    else {
+      if (norm(rec.name) !== norm(entity.name)) reasons.push(`registry name "${rec.name}" does not match "${entity.name}"`);
+      if (entity.jurisdiction && rec.jurisdiction && rec.jurisdiction !== entity.jurisdiction) reasons.push(`jurisdiction ${rec.jurisdiction} differs`);
+      if (rec.status && !/^(active|issued)$/i.test(rec.status)) reasons.push(`registry status is ${rec.status}`);
+    }
+    return { ok: reasons.length === 0, reasons };
+  } catch (err) {
+    return { ok: false, reasons: [`registry unavailable: ${(err as Error).message}`] };
+  }
+}
+
+export type UboDeclaration = SignedObject<{ v: 1; type: 'kyb.ubo'; entity: string; owners: Array<{ commitment: string; share_pct: number }>; ts: string }>;
+
+/** Beneficial owners declared as salted commitments with their shares; reveal one owner to one verifier later. */
+export function declareUbo(entity: string, owners: Array<{ name: string; share_pct: number }>, ownerPrivateKey: Uint8Array, ts = new Date().toISOString()) {
+  const total = owners.reduce((s, o) => s + o.share_pct, 0);
+  if (total > 100.0001) throw new Error(`kyb: shares add up to ${total}%`);
+  const salts = owners.map(() => randomBytes(16).toString('hex'));
+  const commit = (name: string, salt: string) => 'sha256:' + createHash('sha256').update(`${salt}\u0000${name.trim().toLowerCase()}`).digest('hex');
+  const declaration = signObject({ v: 1 as const, type: 'kyb.ubo' as const, entity, owners: owners.map((o, i) => ({ commitment: commit(o.name, salts[i]!), share_pct: o.share_pct })), ts }, ownerPrivateKey);
+  return { declaration, reveal: (i: number) => ({ name: owners[i]!.name, salt: salts[i]!, index: i }) };
+}
+
+/** Check a revealed owner against the signed declaration. */
+export function verifyUboReveal(d: UboDeclaration, reveal: { name: string; salt: string; index: number }): boolean {
+  const c = 'sha256:' + createHash('sha256').update(`${reveal.salt}\u0000${reveal.name.trim().toLowerCase()}`).digest('hex');
+  return verifySignedObject(d) && d.owners[reveal.index]?.commitment === c;
+}
+
+export type SignatoryAuthority = SignedObject<{ v: 1; type: 'kyb.signatory'; entity: string; person: string; scopes: string[]; limit_minor?: string; exp: string; ts: string }>;
+
+/** The entity's owner key authorises a person to grant delegations on its behalf, within scopes and until a date. */
+export function signatoryAuthority(input: { entity: string; person: string; scopes: string[]; limit_minor?: string; exp: string; ts?: string }, ownerPrivateKey: Uint8Array): SignatoryAuthority {
+  return signObject({ v: 1 as const, type: 'kyb.signatory' as const, ...input, ts: input.ts ?? new Date().toISOString() }, ownerPrivateKey);
+}
+
+export function mayAuthorise(a: SignatoryAuthority, ownerDid: string, person: string, scope: string, now = new Date().toISOString()): boolean {
+  return verifySignedObject(a) && a.signer === ownerDid && a.person === person && now <= a.exp && a.scopes.some((s) => s === '*' || s === scope || (s.endsWith('.*') && scope.startsWith(s.slice(0, -1))));
+}
+
+/**
+ * The domain's DNS TXT record names the owner DID (`zanii-owner=did:key:...`). Use a
+ * DNSSEC-validating resolver for `resolveTxt`; this checks what it returns.
+ */
+export async function dnsTxtBinding(domain: string, did: string, resolveTxt: (name: string) => Promise<string[][]>) {
+  try {
+    const records = (await resolveTxt(`_zanii.${domain}`)).map((r) => r.join(''));
+    return { ok: records.includes(`zanii-owner=${did}`), records };
+  } catch (err) {
+    return { ok: false, records: [] as string[], error: (err as Error).message };
+  }
+}
+
+export type LifecycleEvent = SignedObject<{ v: 1; type: 'kyb.lifecycle'; entity: string; event: 'renamed' | 'merged' | 'acquired' | 'dissolved'; successor?: string; ts: string }>;
+
+export function lifecycleEvent(input: { entity: string; event: LifecycleEvent['event']; successor?: string; ts?: string }, ownerPrivateKey: Uint8Array): LifecycleEvent {
+  return signObject({ v: 1 as const, type: 'kyb.lifecycle' as const, ...input, ts: input.ts ?? new Date().toISOString() }, ownerPrivateKey);
+}
+
+/** The entity's current standing after its lifecycle events: active, succeeded by another, or dissolved. */
+export function entityStatus(events: LifecycleEvent[], ownerDid: string) {
+  const valid = events.filter((e) => verifySignedObject(e) && e.signer === ownerDid).sort((a, b) => a.ts.localeCompare(b.ts));
+  const last = valid.at(-1);
+  if (!last) return { status: 'active' as const };
+  if (last.event === 'dissolved') return { status: 'dissolved' as const, since: last.ts };
+  if (last.event === 'merged' || last.event === 'acquired') return { status: 'succeeded' as const, successor: last.successor ?? null, since: last.ts };
+  return { status: 'active' as const };
+}
+
+export type GroupStructure = SignedObject<{ v: 1; type: 'kyb.group'; parent: string; subsidiaries: Array<{ name: string; domain?: string; ownership_pct: number }>; ts: string }>;
+
+export function groupStructure(input: { parent: string; subsidiaries: Array<{ name: string; domain?: string; ownership_pct: number }>; ts?: string }, parentPrivateKey: Uint8Array): GroupStructure {
+  return signObject({ v: 1 as const, type: 'kyb.group' as const, ...input, ts: input.ts ?? new Date().toISOString() }, parentPrivateKey);
+}
+
+/** Is this domain a controlled (> 50%) subsidiary in the signed group structure? */
+export function isControlledSubsidiary(g: GroupStructure, domain: string): boolean {
+  return verifySignedObject(g) && g.subsidiaries.some((s) => s.domain === domain && s.ownership_pct > 50);
+}
+
+/** A licence claim checked against the regulator's register you supply. */
+export async function verifyLicence(licence: { regulator: string; number: string; activity: string; entity: string }, register: (regulator: string, number: string) => Promise<{ holder: string; activities: string[]; exp?: string } | null>, now = new Date().toISOString()) {
+  try {
+    const r = await register(licence.regulator, licence.number);
+    if (!r) return { ok: false, reason: 'licence not found' };
+    if (norm(r.holder) !== norm(licence.entity)) return { ok: false, reason: `licence is held by ${r.holder}` };
+    if (!r.activities.includes(licence.activity)) return { ok: false, reason: `licence does not cover ${licence.activity}` };
+    if (r.exp && r.exp < now) return { ok: false, reason: `licence expired ${r.exp}` };
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, reason: `register unavailable: ${(err as Error).message}` };
+  }
+}
+
+export type KybCertificate = SignedObject<{ v: 1; type: 'kyb.certificate'; ownerDid: string; entity: LegalEntity; checks: string[]; validUntil: string; ts: string }>;
+
+/** A verifier's signed, reusable KYB result, so the next counterparty need not repeat it. */
+export function kybCertificate(input: { ownerDid: string; entity: LegalEntity; checks: string[]; validDays: number; ts?: string }, verifierPrivateKey: Uint8Array): KybCertificate {
+  const ts = input.ts ?? new Date().toISOString();
+  return signObject({ v: 1 as const, type: 'kyb.certificate' as const, ownerDid: input.ownerDid, entity: input.entity, checks: input.checks, validUntil: new Date(Date.parse(ts) + input.validDays * 86_400_000).toISOString(), ts }, verifierPrivateKey);
+}
+
+export function acceptKybCertificate(c: KybCertificate, opts: { ownerDid: string; trustedVerifiers: string[]; now?: string }): boolean {
+  return verifySignedObject(c) && c.ownerDid === opts.ownerDid && opts.trustedVerifiers.includes(c.signer) && (opts.now ?? new Date().toISOString()) <= c.validUntil;
+}
+
+/** Re-fetch a domain's owner document and report what changed since the last check. */
+export async function domainDocChanges(domain: string, previous: OwnerDoc | null, fetchImpl?: FetchLike) {
+  const current = await resolveOwnerDoc(domain, { fetchImpl });
+  if (!current) return { current: null, changes: previous ? ['owner document is no longer published'] : [] };
+  const changes: string[] = [];
+  if (previous) {
+    for (const d of previous.owner_dids) if (!current.owner_dids.includes(d)) changes.push(`owner DID ${d} removed`);
+    for (const d of current.owner_dids) if (!previous.owner_dids.includes(d)) changes.push(`owner DID ${d} added`);
+    if (jcsHash(previous.entity as never) !== jcsHash(current.entity as never)) changes.push('legal entity details changed');
+  }
+  return { current, changes };
+}

package/src/index.ts

@@ -176,3 +176,4 @@ export async function fetchAndVerifyOwner(
   const doc = await resolveOwnerDoc(attestation.domain, opts);
   return verifyOwnerBinding(attestation, doc);
 }
+export * from './entity.js';