@elizaos/agent 0.25.9 → 2.0.0-alpha.151

package/packages/typescript/src/features/trust/types/permissions.d.ts

@@ -0,0 +1,185 @@
+import type { Role, UUID } from "../../../types/index.ts";
+import type { TrustRequirements } from "./trust.ts";
+/**
+ * Context for permission evaluation
+ */
+export interface PermissionContext {
+    worldId?: UUID;
+    roomId?: UUID;
+    platform?: string;
+    serverId?: string;
+    channelId?: string;
+    timestamp?: number;
+}
+/**
+ * A contextual role that applies in specific contexts
+ */
+export interface ContextualRole {
+    id: UUID;
+    role: Role;
+    entityId: UUID;
+    context: PermissionContext;
+    /** When this role assignment expires */
+    expiresAt?: number;
+    /** Who assigned this role */
+    assignedBy: UUID;
+    /** When this role was assigned */
+    assignedAt: number;
+    /** Trust requirements for this role */
+    trustRequirements?: TrustRequirements;
+    /** Additional metadata */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Permission that can be granted
+ */
+export interface Permission {
+    action: string;
+    resource: string;
+    context?: PermissionContext;
+    constraints?: PermissionConstraint[];
+}
+/**
+ * Constraint on a permission
+ */
+export interface PermissionConstraint {
+    type: "time_window" | "usage_limit" | "trust_required" | "role_required" | "custom";
+    value: string | number | boolean | Record<string, unknown>;
+    description?: string;
+}
+/**
+ * Result of a permission check
+ */
+export interface PermissionDecision {
+    allowed: boolean;
+    /** How the decision was made */
+    method: "role-based" | "trust-based" | "delegated" | "elevated" | "denied";
+    /** Which role or trust level granted access */
+    grantedBy?: {
+        type: "role" | "trust";
+        value: Role | number;
+        context?: PermissionContext;
+    };
+    /** Reason for the decision */
+    reason: string;
+    /** Suggestions if denied */
+    suggestions?: string[];
+    /** Conditions that must be met */
+    conditions?: string[];
+    /** Audit trail */
+    auditInfo?: {
+        decidedAt: number;
+        evaluatorId: UUID;
+        evidence?: Record<string, unknown>[];
+    };
+}
+/**
+ * Request for elevated permissions
+ */
+export interface ElevationRequest {
+    entityId: UUID;
+    requestedPermission: Permission;
+    justification: string;
+    duration?: number;
+    context: PermissionContext;
+}
+/**
+ * Result of an elevation request
+ */
+export interface ElevationResult {
+    granted: boolean;
+    elevationId?: UUID;
+    expiresAt?: number;
+    conditions?: string[];
+    reason?: string;
+    trustDeficit?: number;
+    suggestions?: string[];
+}
+/**
+ * Represents a delegation of permissions
+ */
+export interface PermissionDelegation {
+    id: UUID;
+    delegatorId: UUID;
+    delegateeId: UUID;
+    permissions: Permission[];
+    context: PermissionContext;
+    expiresAt?: number;
+    createdAt: number;
+    conditions?: string[];
+    revoked?: boolean;
+    revokedAt?: number;
+    revokedBy?: UUID;
+}
+/**
+ * Access request for evaluation
+ */
+export interface AccessRequest {
+    entityId: UUID;
+    action: string;
+    resource: string;
+    context: PermissionContext;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Complete access decision with all details
+ */
+export interface AccessDecision extends PermissionDecision {
+    request: AccessRequest;
+    evaluatedAt: number;
+    ttl?: number;
+    securityChecks?: {
+        promptInjection: boolean;
+        socialEngineering: boolean;
+        anomalyDetection: boolean;
+    };
+}
+/**
+ * Unix-style permission system for autonomous agents
+ * Format: XYYY where:
+ * X = Special permissions (setuid, setgid, sticky)
+ * First Y = Owner (self) permissions
+ * Second Y = Group (admin/trusted) permissions
+ * Third Y = Others (user/anon) permissions
+ *
+ * Each digit is sum of: 4 (read), 2 (write), 1 (execute)
+ *
+ * Examples:
+ * 0700 = Only self can read/write/execute
+ * 0755 = Self has full, others can read/execute
+ * 0644 = Self read/write, others read only
+ * 4755 = Setuid + self full, others read/execute
+ */
+export interface UnixPermission {
+    mode: number;
+    owner: "self" | "system" | string;
+    group: "admin" | "trusted" | "user" | string;
+    setuid?: boolean;
+    setgid?: boolean;
+    sticky?: boolean;
+}
+export interface ActionPermission {
+    action: string;
+    unix: UnixPermission;
+    trustRequired?: number;
+    roleRequired?: string[];
+    contextRequired?: string[];
+    selfCallable?: boolean;
+    delegatable?: boolean;
+    auditable?: boolean;
+}
+export interface PermissionEvaluationContext {
+    caller: "self" | "admin" | "user" | "anon" | string;
+    action: string;
+    target?: string;
+    trust?: number;
+    roles?: string[];
+    context?: Record<string, unknown>;
+}
+export declare const PermissionUtils: {
+    fromOctal: (octal: string) => number;
+    canExecute: (permission: UnixPermission, caller: PermissionEvaluationContext) => boolean;
+    canRead: (permission: UnixPermission, caller: PermissionEvaluationContext) => boolean;
+    canWrite: (permission: UnixPermission, caller: PermissionEvaluationContext) => boolean;
+};
+//# sourceMappingURL=permissions.d.ts.map

package/packages/typescript/src/features/trust/types/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../../../../../typescript/src/features/trust/types/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IACjC,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,IAAI,CAAC;IACf,OAAO,EAAE,iBAAiB,CAAC;IAE3B,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,6BAA6B;IAC7B,UAAU,EAAE,IAAI,CAAC;IAEjB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IAEnB,uCAAuC;IACvC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAEtC,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,IAAI,EACD,aAAa,GACb,aAAa,GACb,gBAAgB,GAChB,eAAe,GACf,QAAQ,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,OAAO,CAAC;IAEjB,gCAAgC;IAChC,MAAM,EAAE,YAAY,GAAG,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAC;IAE3E,+CAA+C;IAC/C,SAAS,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACvB,KAAK,EAAE,IAAI,GAAG,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,iBAAiB,CAAC;KAC5B,CAAC;IAEF,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IAEf,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB,kCAAkC;IAClC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB,kBAAkB;IAClB,SAAS,CAAC,EAAE;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,IAAI,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;KACrC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,QAAQ,EAAE,IAAI,CAAC;IACf,mBAAmB,EAAE,UAAU,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,iBAAiB,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,IAAI,CAAC;IAClB,WAAW,EAAE,IAAI,CAAC;IAClB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,IAAI,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,kBAAkB;IACzD,OAAO,EAAE,aAAa,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE;QAChB,eAAe,EAAE,OAAO,CAAC;QACzB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,gBAAgB,EAAE,OAAO,CAAC;KAC1B,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;IAG7C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,cAAc,CAAC;IAGrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAG3B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC3C,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAGD,eAAO,MAAM,eAAe;uBAER,MAAM,KAAG,MAAM;6BAMrB,cAAc,UAClB,2BAA2B,KACjC,OAAO;0BA0BG,cAAc,UAClB,2BAA2B,KACjC,OAAO;2BAuBG,cAAc,UAClB,2BAA2B,KACjC,OAAO;CAoBV,CAAC"}

package/packages/typescript/src/features/trust/types/permissions.js

@@ -0,0 +1,58 @@
+// Helper functions for Unix permissions
+export const PermissionUtils = {
+    // Create permission mode from octal string
+    fromOctal: (octal) => {
+        return parseInt(octal, 8);
+    },
+    // Check if caller has permission
+    canExecute: (permission, caller) => {
+        const mode = permission.mode;
+        const ownerPerms = (mode >> 6) & 7;
+        const groupPerms = (mode >> 3) & 7;
+        const otherPerms = mode & 7;
+        // Check owner permissions
+        if (caller.caller === "self" || caller.caller === permission.owner) {
+            return (ownerPerms & 1) !== 0;
+        }
+        // Check group permissions
+        if (caller.caller === "admin" ||
+            (permission.group === "trusted" && (caller.trust || 0) >= 80) ||
+            caller.roles?.includes(permission.group)) {
+            return (groupPerms & 1) !== 0;
+        }
+        // Check other permissions
+        return (otherPerms & 1) !== 0;
+    },
+    // Check read permission
+    canRead: (permission, caller) => {
+        const mode = permission.mode;
+        const ownerPerms = (mode >> 6) & 7;
+        const groupPerms = (mode >> 3) & 7;
+        const otherPerms = mode & 7;
+        if (caller.caller === "self" || caller.caller === permission.owner) {
+            return (ownerPerms & 4) !== 0;
+        }
+        if (caller.caller === "admin" ||
+            (permission.group === "trusted" && (caller.trust || 0) >= 80) ||
+            caller.roles?.includes(permission.group)) {
+            return (groupPerms & 4) !== 0;
+        }
+        return (otherPerms & 4) !== 0;
+    },
+    // Check write permission
+    canWrite: (permission, caller) => {
+        const mode = permission.mode;
+        const ownerPerms = (mode >> 6) & 7;
+        const groupPerms = (mode >> 3) & 7;
+        const otherPerms = mode & 7;
+        if (caller.caller === "self" || caller.caller === permission.owner) {
+            return (ownerPerms & 2) !== 0;
+        }
+        if (caller.caller === "admin" ||
+            (permission.group === "trusted" && (caller.trust || 0) >= 80) ||
+            caller.roles?.includes(permission.group)) {
+            return (groupPerms & 2) !== 0;
+        }
+        return (otherPerms & 2) !== 0;
+    },
+};

package/packages/typescript/src/features/trust/types/security.d.ts

@@ -0,0 +1,114 @@
+import type { UUID } from "../../../types/index.ts";
+import type { PermissionContext } from "./permissions.ts";
+export interface SecurityContext extends PermissionContext {
+    entityId?: UUID;
+    requestedAction?: string;
+    messageHistory?: string[];
+}
+export interface SecurityCheck {
+    detected: boolean;
+    confidence: number;
+    type: "prompt_injection" | "social_engineering" | "credential_theft" | "anomaly" | "none";
+    severity: "low" | "medium" | "high" | "critical";
+    action: "block" | "require_verification" | "allow" | "log_only";
+    details?: string;
+}
+export interface ThreatAssessment extends SecurityCheck {
+    recommendation?: string;
+}
+export interface SecurityEvent {
+    id?: UUID;
+    type: SecurityEventType;
+    entityId: UUID;
+    severity: "low" | "medium" | "high" | "critical";
+    context: PermissionContext;
+    details: Record<string, unknown>;
+    timestamp?: number;
+    handled?: boolean;
+}
+export declare enum SecurityEventType {
+    PROMPT_INJECTION_ATTEMPT = "prompt_injection_attempt",
+    SOCIAL_ENGINEERING_ATTEMPT = "social_engineering_attempt",
+    PRIVILEGE_ESCALATION_ATTEMPT = "privilege_escalation_attempt",
+    ANOMALOUS_REQUEST = "anomalous_request",
+    TRUST_MANIPULATION = "trust_manipulation",
+    IDENTITY_SPOOFING = "identity_spoofing",
+    MULTI_ACCOUNT_ABUSE = "multi_account_abuse",
+    CREDENTIAL_THEFT_ATTEMPT = "credential_theft_attempt",
+    PHISHING_ATTEMPT = "phishing_attempt",
+    IMPERSONATION_ATTEMPT = "impersonation_attempt",
+    COORDINATED_ATTACK = "coordinated_attack",
+    MALICIOUS_LINK_CAMPAIGN = "malicious_link_campaign"
+}
+export interface PatternDetection {
+    type: "multi_account" | "phishing" | "impersonation" | "coordination" | "credential_theft";
+    confidence: number;
+    evidence: string[];
+    relatedEntities?: UUID[];
+    recommendation: string;
+}
+export interface MultiAccountDetection extends PatternDetection {
+    type: "multi_account";
+    primaryAccount: UUID;
+    linkedAccounts: UUID[];
+    linkageEvidence: {
+        typingPattern: number;
+        timingPattern: number;
+        vocabularyPattern: number;
+        behaviorPattern: number;
+    };
+}
+export interface PhishingDetection extends PatternDetection {
+    type: "phishing";
+    maliciousLinks?: string[];
+    targetedEntities: UUID[];
+    campaignId?: string;
+}
+export interface ImpersonationDetection extends PatternDetection {
+    type: "impersonation";
+    impersonator: string;
+    impersonated: string;
+    visualSimilarity: number;
+    timingCoincidence: number;
+}
+export interface CoordinationDetection extends PatternDetection {
+    type: "coordination";
+    coordinatedEntities: UUID[];
+    timeWindow: number;
+    correlationScore: number;
+}
+export interface CredentialTheftDetection extends PatternDetection {
+    type: "credential_theft";
+    sensitivePatterns: string[];
+    attemptedTheft: string[];
+    potentialVictims: UUID[];
+}
+export interface BehavioralProfile {
+    entityId: UUID;
+    typingSpeed: number;
+    vocabularyComplexity: number;
+    messageLength: {
+        mean: number;
+        stdDev: number;
+    };
+    activeHours: number[];
+    commonPhrases: string[];
+    interactionPatterns: Map<string, number>;
+}
+export interface Message {
+    id: UUID;
+    entityId: UUID;
+    content: string;
+    timestamp: number;
+    roomId?: UUID;
+    replyTo?: UUID;
+}
+export interface Action {
+    id: UUID;
+    entityId: UUID;
+    type: string;
+    timestamp: number;
+    target?: string;
+    result?: "success" | "failure";
+}
+//# sourceMappingURL=security.d.ts.map

package/packages/typescript/src/features/trust/types/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../../../../../../typescript/src/features/trust/types/security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACzD,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EACD,kBAAkB,GAClB,oBAAoB,GACpB,kBAAkB,GAClB,SAAS,GACT,MAAM,CAAC;IACV,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,MAAM,EAAE,OAAO,GAAG,sBAAsB,GAAG,OAAO,GAAG,UAAU,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC7B,EAAE,CAAC,EAAE,IAAI,CAAC;IACV,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,IAAI,CAAC;IACf,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,oBAAY,iBAAiB;IAC5B,wBAAwB,6BAA6B;IACrD,0BAA0B,+BAA+B;IACzD,4BAA4B,iCAAiC;IAC7D,iBAAiB,sBAAsB;IACvC,kBAAkB,uBAAuB;IACzC,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAC3C,wBAAwB,6BAA6B;IACrD,gBAAgB,qBAAqB;IACrC,qBAAqB,0BAA0B;IAC/C,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;CACnD;AAED,MAAM,WAAW,gBAAgB;IAChC,IAAI,EACD,eAAe,GACf,UAAU,GACV,eAAe,GACf,cAAc,GACd,kBAAkB,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC9D,IAAI,EAAE,eAAe,CAAC;IACtB,cAAc,EAAE,IAAI,CAAC;IACrB,cAAc,EAAE,IAAI,EAAE,CAAC;IACvB,eAAe,EAAE;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;QACtB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC;KACxB,CAAC;CACF;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IAC1D,IAAI,EAAE,UAAU,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC/D,IAAI,EAAE,eAAe,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC9D,IAAI,EAAE,cAAc,CAAC;IACrB,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAyB,SAAQ,gBAAgB;IACjE,IAAI,EAAE,kBAAkB,CAAC;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,IAAI,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,EAAE,IAAI,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,OAAO;IACvB,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,IAAI,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,OAAO,CAAC,EAAE,IAAI,CAAC;CACf;AAED,MAAM,WAAW,MAAM;IACtB,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,IAAI,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CAC/B"}

package/packages/typescript/src/features/trust/types/security.js

@@ -0,0 +1,15 @@
+export var SecurityEventType;
+(function (SecurityEventType) {
+    SecurityEventType["PROMPT_INJECTION_ATTEMPT"] = "prompt_injection_attempt";
+    SecurityEventType["SOCIAL_ENGINEERING_ATTEMPT"] = "social_engineering_attempt";
+    SecurityEventType["PRIVILEGE_ESCALATION_ATTEMPT"] = "privilege_escalation_attempt";
+    SecurityEventType["ANOMALOUS_REQUEST"] = "anomalous_request";
+    SecurityEventType["TRUST_MANIPULATION"] = "trust_manipulation";
+    SecurityEventType["IDENTITY_SPOOFING"] = "identity_spoofing";
+    SecurityEventType["MULTI_ACCOUNT_ABUSE"] = "multi_account_abuse";
+    SecurityEventType["CREDENTIAL_THEFT_ATTEMPT"] = "credential_theft_attempt";
+    SecurityEventType["PHISHING_ATTEMPT"] = "phishing_attempt";
+    SecurityEventType["IMPERSONATION_ATTEMPT"] = "impersonation_attempt";
+    SecurityEventType["COORDINATED_ATTACK"] = "coordinated_attack";
+    SecurityEventType["MALICIOUS_LINK_CAMPAIGN"] = "malicious_link_campaign";
+})(SecurityEventType || (SecurityEventType = {}));

package/packages/typescript/src/features/trust/types/trust.d.ts

@@ -0,0 +1,179 @@
+import type { UUID } from "../../../types/index.ts";
+/**
+ * Core trust dimensions based on interpersonal trust theory
+ */
+export interface TrustDimensions {
+    /** Consistency in behavior and promise keeping (0-100) */
+    reliability: number;
+    /** Ability to perform tasks and provide value (0-100) */
+    competence: number;
+    /** Adherence to ethical principles (0-100) */
+    integrity: number;
+    /** Good intentions towards others (0-100) */
+    benevolence: number;
+    /** Open and honest communication (0-100) */
+    transparency: number;
+}
+/**
+ * Evidence types that impact trust scores
+ */
+export declare enum TrustEvidenceType {
+    PROMISE_KEPT = "PROMISE_KEPT",
+    HELPFUL_ACTION = "HELPFUL_ACTION",
+    CONSISTENT_BEHAVIOR = "CONSISTENT_BEHAVIOR",
+    VERIFIED_IDENTITY = "VERIFIED_IDENTITY",
+    COMMUNITY_CONTRIBUTION = "COMMUNITY_CONTRIBUTION",
+    SUCCESSFUL_TRANSACTION = "SUCCESSFUL_TRANSACTION",
+    PROMISE_BROKEN = "PROMISE_BROKEN",
+    HARMFUL_ACTION = "HARMFUL_ACTION",
+    INCONSISTENT_BEHAVIOR = "INCONSISTENT_BEHAVIOR",
+    SUSPICIOUS_ACTIVITY = "SUSPICIOUS_ACTIVITY",
+    FAILED_VERIFICATION = "FAILED_VERIFICATION",
+    SPAM_BEHAVIOR = "SPAM_BEHAVIOR",
+    SECURITY_VIOLATION = "SECURITY_VIOLATION",
+    IDENTITY_CHANGE = "IDENTITY_CHANGE",
+    ROLE_CHANGE = "ROLE_CHANGE",
+    CONTEXT_SWITCH = "CONTEXT_SWITCH"
+}
+/**
+ * A piece of evidence that affects trust
+ */
+export interface TrustEvidence {
+    type: TrustEvidenceType;
+    timestamp: number;
+    /** Impact on trust score (-100 to +100) */
+    impact: number;
+    /** Weight/importance of this evidence (0-1) */
+    weight: number;
+    /** Optional description of the evidence */
+    description: string;
+    /** Entity who reported/created this evidence */
+    reportedBy: UUID;
+    /** Whether this evidence has been verified */
+    verified: boolean;
+    /** Context where this evidence occurred */
+    context: TrustContext;
+    targetEntityId: UUID;
+    evaluatorId: UUID;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Trust profile for an entity
+ */
+export interface TrustProfile {
+    /** Entity this profile belongs to */
+    entityId: UUID;
+    /** Core trust dimensions */
+    dimensions: TrustDimensions;
+    /** Overall trust score (0-100) */
+    overallTrust: number;
+    /** Confidence in the trust score (0-1) */
+    confidence: number;
+    /** Number of interactions used to calculate trust */
+    interactionCount: number;
+    /** Evidence supporting this trust profile */
+    evidence: TrustEvidence[];
+    /** When this profile was last calculated */
+    lastCalculated: number;
+    /** Method used to calculate trust */
+    calculationMethod: string;
+    /** Trust trend over time */
+    trend: {
+        direction: "increasing" | "decreasing" | "stable";
+        changeRate: number;
+        lastChangeAt: number;
+    };
+    evaluatorId: UUID;
+}
+/**
+ * Context for trust calculations
+ */
+export interface TrustContext {
+    /** Who is evaluating trust */
+    evaluatorId: UUID;
+    /** Specific context for evaluation */
+    worldId?: UUID;
+    roomId?: UUID;
+    platform?: string;
+    /** Type of action being considered */
+    action?: string;
+    /** Time window for evidence consideration */
+    timeWindow?: {
+        start: number;
+        end: number;
+    };
+}
+/**
+ * Result of a trust-based decision
+ */
+export interface TrustDecision {
+    allowed: boolean;
+    trustScore: number;
+    requiredScore: number;
+    /** Which dimensions were evaluated */
+    dimensionsChecked: Partial<TrustDimensions>;
+    /** Reason for the decision */
+    reason: string;
+    /** Suggestions for building trust if denied */
+    suggestions?: string[];
+}
+/**
+ * Configuration for trust requirements
+ */
+export interface TrustRequirements {
+    /** Minimum overall trust score */
+    minimumTrust: number;
+    /** Required dimension scores */
+    dimensions?: {
+        reliability?: number;
+        competence?: number;
+        integrity?: number;
+        benevolence?: number;
+        transparency?: number;
+    };
+    /** Required evidence types */
+    requiredEvidence?: TrustEvidenceType[];
+    /** Minimum interaction count */
+    minimumInteractions?: number;
+    /** Required confidence level */
+    minimumConfidence?: number;
+}
+/**
+ * Trust interaction to be recorded
+ */
+export interface TrustInteraction {
+    sourceEntityId: UUID;
+    targetEntityId: UUID;
+    type: TrustEvidenceType;
+    timestamp: number;
+    impact: number;
+    details?: {
+        description?: string;
+        messageId?: UUID;
+        roomId?: UUID;
+        [key: string]: unknown;
+    };
+    context?: TrustContext;
+}
+/**
+ * Trust calculation configuration
+ */
+export interface TrustCalculationConfig {
+    /** How much recent evidence is weighted vs old */
+    recencyBias: number;
+    /** How fast evidence decays over time */
+    evidenceDecayRate: number;
+    /** Minimum evidence required for confidence */
+    minimumEvidenceCount: number;
+    /** How much to weight verified vs unverified evidence */
+    verificationMultiplier: number;
+    /** Dimension weights for overall score */
+    dimensionWeights: {
+        reliability: number;
+        competence: number;
+        integrity: number;
+        benevolence: number;
+        transparency: number;
+    };
+}
+//# sourceMappingURL=trust.d.ts.map

package/packages/typescript/src/features/trust/types/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../../../../../../../typescript/src/features/trust/types/trust.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IAEpB,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;IAEnB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAElB,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IAEpB,4CAA4C;IAC5C,YAAY,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,oBAAY,iBAAiB;IAE5B,YAAY,iBAAiB;IAC7B,cAAc,mBAAmB;IACjC,mBAAmB,wBAAwB;IAC3C,iBAAiB,sBAAsB;IACvC,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IAGjD,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,qBAAqB,0BAA0B;IAC/C,mBAAmB,wBAAwB;IAC3C,mBAAmB,wBAAwB;IAC3C,aAAa,kBAAkB;IAC/B,kBAAkB,uBAAuB;IAGzC,eAAe,oBAAoB;IACnC,WAAW,gBAAgB;IAC3B,cAAc,mBAAmB;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,UAAU,EAAE,IAAI,CAAC;IACjB,8CAA8C;IAC9C,QAAQ,EAAE,OAAO,CAAC;IAClB,2CAA2C;IAC3C,OAAO,EAAE,YAAY,CAAC;IACtB,cAAc,EAAE,IAAI,CAAC;IACrB,WAAW,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,qCAAqC;IACrC,QAAQ,EAAE,IAAI,CAAC;IAEf,4BAA4B;IAC5B,UAAU,EAAE,eAAe,CAAC;IAE5B,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IAErB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IAEnB,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAC;IAEzB,6CAA6C;IAC7C,QAAQ,EAAE,aAAa,EAAE,CAAC;IAE1B,4CAA4C;IAC5C,cAAc,EAAE,MAAM,CAAC;IAEvB,qCAAqC;IACrC,iBAAiB,EAAE,MAAM,CAAC;IAE1B,4BAA4B;IAC5B,KAAK,EAAE;QACN,SAAS,EAAE,YAAY,GAAG,YAAY,GAAG,QAAQ,CAAC;QAClD,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,WAAW,EAAE,IAAI,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,8BAA8B;IAC9B,WAAW,EAAE,IAAI,CAAC;IAElB,sCAAsC;IACtC,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,6CAA6C;IAC7C,UAAU,CAAC,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;KACZ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5C,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IACjC,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IAErB,gCAAgC;IAChC,UAAU,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,8BAA8B;IAC9B,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAEvC,gCAAgC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,gCAAgC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,cAAc,EAAE,IAAI,CAAC;IACrB,cAAc,EAAE,IAAI,CAAC;IACrB,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QACT,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,IAAI,CAAC;QACjB,MAAM,CAAC,EAAE,IAAI,CAAC;QACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACvB,CAAC;IACF,OAAO,CAAC,EAAE,YAAY,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACtC,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IAEpB,yCAAyC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAE1B,+CAA+C;IAC/C,oBAAoB,EAAE,MAAM,CAAC;IAE7B,yDAAyD;IACzD,sBAAsB,EAAE,MAAM,CAAC;IAE/B,0CAA0C;IAC1C,gBAAgB,EAAE;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACrB,CAAC;CACF"}

package/packages/typescript/src/features/trust/types/trust.js

@@ -0,0 +1,25 @@
+/**
+ * Evidence types that impact trust scores
+ */
+export var TrustEvidenceType;
+(function (TrustEvidenceType) {
+    // Positive evidence
+    TrustEvidenceType["PROMISE_KEPT"] = "PROMISE_KEPT";
+    TrustEvidenceType["HELPFUL_ACTION"] = "HELPFUL_ACTION";
+    TrustEvidenceType["CONSISTENT_BEHAVIOR"] = "CONSISTENT_BEHAVIOR";
+    TrustEvidenceType["VERIFIED_IDENTITY"] = "VERIFIED_IDENTITY";
+    TrustEvidenceType["COMMUNITY_CONTRIBUTION"] = "COMMUNITY_CONTRIBUTION";
+    TrustEvidenceType["SUCCESSFUL_TRANSACTION"] = "SUCCESSFUL_TRANSACTION";
+    // Negative evidence
+    TrustEvidenceType["PROMISE_BROKEN"] = "PROMISE_BROKEN";
+    TrustEvidenceType["HARMFUL_ACTION"] = "HARMFUL_ACTION";
+    TrustEvidenceType["INCONSISTENT_BEHAVIOR"] = "INCONSISTENT_BEHAVIOR";
+    TrustEvidenceType["SUSPICIOUS_ACTIVITY"] = "SUSPICIOUS_ACTIVITY";
+    TrustEvidenceType["FAILED_VERIFICATION"] = "FAILED_VERIFICATION";
+    TrustEvidenceType["SPAM_BEHAVIOR"] = "SPAM_BEHAVIOR";
+    TrustEvidenceType["SECURITY_VIOLATION"] = "SECURITY_VIOLATION";
+    // Neutral evidence
+    TrustEvidenceType["IDENTITY_CHANGE"] = "IDENTITY_CHANGE";
+    TrustEvidenceType["ROLE_CHANGE"] = "ROLE_CHANGE";
+    TrustEvidenceType["CONTEXT_SWITCH"] = "CONTEXT_SWITCH";
+})(TrustEvidenceType || (TrustEvidenceType = {}));